@tencent-ai/codebuddy-code 2.125.4-next.41bad82.202607231203 → 2.126.0

package/dist/web-ui/docs/en/cli/http-api.md

@@ -69,6 +69,17 @@ The following paths do not require the `X-CodeBuddy-Request` header:
 
 This validation can be disabled via the environment variable `CODEBUDDY_DISABLE_REQUEST_VALIDATION=1`.
 
+### CORS Allowlist
+
+Cross-origin request `Origin` headers are matched against the server's CORS allowlist. Sources not on the allowlist are rejected (preflight returns 204 without CORS headers; actual requests return 403 `Origin not allowed`). Allowlist sources:
+
+- Local endpoints and their loopback variants (`localhost` / `127.0.0.1` / `[::1]`)
+- Tunnel URL (if enabled)
+- Configuration item `gateway.corsOrigins`
+- Environment variable `CODEBUDDY_CODE_CORS_ORIGINS` (comma-separated, supports exact origin, `*.domain` subdomain wildcards, and `*` for all)
+
+When binding to `0.0.0.0` (e.g., `--host 0.0.0.0`, common in cloud VM / LAN exposure scenarios), if `CODEBUDDY_CODE_CORS_ORIGINS` is not explicitly set, the server **automatically allows all origins** (equivalent to configuring `*`), enabling access to the Web UI via any IP or domain without additional configuration. When this environment variable is explicitly set, the user configuration takes precedence.
+
 ### Authentication
 
 Two modes are supported (controlled by environment variable `CODEBUDDY_GATEWAY_AUTH`):
@@ -286,10 +297,12 @@ Aligned with E2B process.proto, mapping gRPC methods to REST endpoints:
 | POST | `/api/v1/plugins/enable` | Enable plugin |
 | POST | `/api/v1/plugins/disable` | Disable plugin |
 | POST | `/api/v1/plugins/uninstall` | Uninstall plugin |
+| POST | `/api/v1/plugins/update` | Update plugin to latest version |
 | GET | `/api/v1/plugins/marketplaces` | List configured plugin marketplaces |
-| POST | `/api/v1/plugins/marketplaces` | Add plugin marketplace |
+| POST | `/api/v1/plugins/marketplaces` | Add plugin marketplace (optional `autoUpdate` to enable auto-update on add) |
 | POST | `/api/v1/plugins/marketplaces/browse` | Browse available plugins in marketplace |
 | POST | `/api/v1/plugins/marketplaces/update` | Update marketplace (sync remote repository content) |
+| POST | `/api/v1/plugins/marketplaces/auto-update` | Enable/disable marketplace auto-update |
 | DELETE | `/api/v1/plugins/marketplaces/:name` | Delete plugin marketplace |
 
 ### Settings Management
@@ -302,6 +315,15 @@ Aligned with E2B process.proto, mapping gRPC methods to REST endpoints:
 | POST | `/api/v1/settings/:key/items` | Append values to an array-type setting |
 | POST | `/api/v1/settings/:key/remove` | Remove values from an array-type setting |
 
+### Workspace Directories
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/v1/workspace-dirs` | List current attached working directories |
+| POST | `/api/v1/workspace-dirs` | Add a single working directory |
+| DELETE | `/api/v1/workspace-dirs?path=` | Remove a single working directory |
+| PUT | `/api/v1/workspace-dirs/sync` | Full sync of working directory list |
+
 ### Task Templates
 
 | Method | Endpoint | Description |
@@ -352,17 +374,46 @@ curl http://127.0.0.1:8080/api/v1/health
 ### Initiate Agent Execution
 
 ```bash
-# Send message
+# Send message (body is Gateway Protocol format, id/type required)
 curl -X POST http://127.0.0.1:8080/api/v1/runs \
   -H "Content-Type: application/json" \
-  -d '{"text": "Help me analyze code performance", "sender": {"id": "dev", "name": "Developer"}}'
+  -H "X-CodeBuddy-Request: 1" \
+  -d '{
+    "id": "run-1",
+    "type": "message",
+    "source": {"platform": "generic", "sender": {"id": "dev", "name": "Developer"}, "conversation": {"id": "run-1", "type": "direct"}},
+    "payload": {"text": "Help me analyze code performance"}
+  }'
 
 # Response: {"data": {"runId": "uuid-xxx", "status": "accepted"}}
 
-# Get results via SSE stream
-curl http://127.0.0.1:8080/api/v1/runs/uuid-xxx/stream
+# Get results via SSE stream (also requires X-CodeBuddy-Request header)
+curl -H "X-CodeBuddy-Request: 1" http://127.0.0.1:8080/api/v1/runs/uuid-xxx/stream
 ```
 
+#### Request Body Fields (Gateway Protocol)
+
+The request body for `POST /api/v1/runs` uses the Gateway Protocol inbound message format:
+
+| Field | Required | Type | Description |
+|------|------|------|------|
+| `id` | ✅ | string | Unique message ID, generated by the caller, used for deduplication and tracing |
+| `type` | ✅ | `"message"` \| `"action"` | Message type. `message` initiates a conversation, `action` sends a control command |
+| `payload.text` | — | string | Prompt text (also accepts top-level `text` / `prompt`) |
+| `payload.attachments` | — | array | Attachment list, elements contain `type` (`image`/`voice`/`video`/`file`), `url`, `urlType` (`local-path`/`url`), etc. |
+| `version` | — | string | Protocol version, default `"1.0"` |
+| `source.platform` | — | string | Source platform, default `"generic"` |
+| `source.sender.id` | — | string | Sender ID, used for rate limiting; defaults to `"unknown"` |
+| `source.sender.name` | — | string | Sender name |
+| `source.conversation.id` | — | string | Conversation ID, defaults to `id` |
+| `source.conversation.type` | — | `"direct"` \| `"group"` | Conversation type, default `"direct"` |
+| `action` | — | `"cancel"` \| `"status"` | Control action, only used when `type="action"` |
+| `callback.url` | — | string | Callback URL for async result delivery (mode B) |
+| `callback.headers` | — | object | Custom headers for the callback request |
+| `timeoutMs` | — | number | Single execution timeout (milliseconds), takes priority over `settings.gateway.runTimeoutMs`; can also use the `X-Codebuddy-Run-Timeout` request header. Set to 0 or negative to disable timeout protection |
+
+> The authoritative definition is in the source code `src/node/remote-gateway/gateway-protocol.ts` as `GatewayInboundMessage`.
+
 ### PTY Terminal Management
 
 ```bash
@@ -541,6 +592,11 @@ curl -X POST http://127.0.0.1:8080/api/v1/plugins/uninstall \
   -H "Content-Type: application/json" \
   -d '{"plugin": "my-plugin@my-marketplace"}'
 
+# Update plugin to latest version (pass waitForApply=true to wait for rebuild to take effect before returning)
+curl -X POST http://127.0.0.1:8080/api/v1/plugins/update \
+  -H "Content-Type: application/json" \
+  -d '{"plugin": "my-plugin@my-marketplace"}'
+
 # List plugin marketplaces
 curl http://127.0.0.1:8080/api/v1/plugins/marketplaces
 
@@ -549,6 +605,11 @@ curl -X POST http://127.0.0.1:8080/api/v1/plugins/marketplaces \
   -H "Content-Type: application/json" \
   -d '{"source": "https://example.com/marketplace", "name": "my-marketplace"}'
 
+# Add plugin marketplace with auto-update enabled by default (equivalent to adding and then calling marketplaces/auto-update)
+curl -X POST http://127.0.0.1:8080/api/v1/plugins/marketplaces \
+  -H "Content-Type: application/json" \
+  -d '{"source": "https://example.com/marketplace", "name": "my-marketplace", "autoUpdate": true}'
+
 # Browse plugins in marketplace
 curl -X POST http://127.0.0.1:8080/api/v1/plugins/marketplaces/browse \
   -H "Content-Type: application/json" \
@@ -559,6 +620,11 @@ curl -X POST http://127.0.0.1:8080/api/v1/plugins/marketplaces/update \
   -H "Content-Type: application/json" \
   -d '{"marketplace": "my-marketplace"}'
 
+# Enable/disable marketplace auto-update (when enabled, periodically syncs and upgrades installed plugins in the background)
+curl -X POST http://127.0.0.1:8080/api/v1/plugins/marketplaces/auto-update \
+  -H "Content-Type: application/json" \
+  -d '{"marketplace": "my-marketplace", "autoUpdate": true}'
+
 # Delete plugin marketplace
 curl -X DELETE http://127.0.0.1:8080/api/v1/plugins/marketplaces/my-marketplace
 ```
@@ -591,6 +657,33 @@ curl -X POST http://127.0.0.1:8080/api/v1/settings/permissions/remove \
   -d '{"values": ["Allow: Read(**)"]}'
 ```
 
+### Workspace Directories
+
+Manage attached working directories so that the permission system allows file operations under these directories (same effect as the `/add-dir` command).
+
+```bash
+# List current attached working directories
+curl http://127.0.0.1:8080/api/v1/workspace-dirs
+
+# Add a working directory
+curl -X POST http://127.0.0.1:8080/api/v1/workspace-dirs \
+  -H "Content-Type: application/json" \
+  -d '{"path": "/Users/me/other-project"}'
+
+# Remove a working directory
+curl -X DELETE "http://127.0.0.1:8080/api/v1/workspace-dirs?path=/Users/me/other-project"
+
+# Full sync (call after page refresh recovery)
+curl -X PUT http://127.0.0.1:8080/api/v1/workspace-dirs/sync \
+  -H "Content-Type: application/json" \
+  -d '{"dirs": ["/Users/me/project-a", "/Users/me/project-b"]}'
+```
+
+**Notes**:
+- Added directories are stored in CLI scope (process memory) and are lost when the instance shuts down
+- The frontend persists them via the Web UI's workspace storage and automatically syncs to the backend on page refresh
+- After adding, Agent tools (Read/Write/Glob/Grep/Bash) can access these directories without asking
+
 ### Usage Statistics
 
 ```bash

package/dist/web-ui/docs/en/cli/models.md

@@ -338,7 +338,7 @@ During a single CodeBuddy Code session, the model is switched based on the scena
 |------|------|---------|
 | `lite` | Lightweight fast model, used for background extraction, summarization, and other low-value requests; also the model corresponding to the Agent tool's `model: "lite"` parameter | **Active** |
 | `reasoning` | Reasoning-enhanced model, used for complex reasoning requiring deep thinking; the model corresponding to the Agent tool's `model: "reasoning"` parameter | **Active** |
-| `subagent` | Default model used by sub-agents / team members | **Reserved, not yet active** — currently the sub-agent model is determined by the `CODEBUDDY_CODE_SUBAGENT_MODEL` environment variable or the agent configuration's `models[0]`, and this field is not read |
+| `subagent` | Default model used by sub-agents / team members | **Reserved, not yet active** — sub-agents use a separate `subagents` resolution chain and do not read this field |
 | `vision` | Vision understanding model, used for requests that need to process images | **Reserved, not yet active** — the type is defined but there is no call site consuming this variant |
 | `longContext` | Long-context model, used for requests with very long context | **Reserved, not yet active** — the type is defined but there is no call site consuming this variant |
 
@@ -347,7 +347,7 @@ During a single CodeBuddy Code session, the model is switched based on the scena
 **Key rule (must-read for custom models):**
 
 > Custom models added via `models.json` **do not inherit** the product's built-in `defaultRelatedModels`.
-> If `relatedModels` is not explicitly declared on the entry itself, all scenarios fall back to the main model itself — meaning sub-agents, lite, and reasoning all run on the same large model, which is inefficient in both cost and speed.
+> If a custom main model does not declare `relatedModels`, and there is no environment variable or `variantModels` override, `lite` and `reasoning` will fall back to the main model. Sub-agents do not read `relatedModels.subagent`, but sub-agents configured as `lite` or `reasoning` will still go through the variant resolution chain to determine the concrete model.
 
 **Configuration example (DeepSeek main model + flash as lite / reasoning):**
 
@@ -386,21 +386,51 @@ During a single CodeBuddy Code session, the model is switched based on the scena
 }
 ```
 
-**Resolution priority (from highest to lowest; currently only `lite` / `reasoning` go through this resolution chain):**
+**Variant resolution priority (from highest to lowest; currently only `lite` / `reasoning` go through this resolution chain):**
 
-1. Environment variables explicitly specified (`CODEBUDDY_SMALL_FAST_MODEL` corresponds to `lite`, `CODEBUDDY_BIG_SLOW_MODEL` corresponds to `reasoning`)
-2. `relatedModels[variant]` on the current main model entry
-3. The product's built-in `defaultRelatedModels[variant]` (**only takes effect for built-in models; custom models skip this step**)
-4. Fall back to the main model itself
+1. Corresponding environment variables (`CODEBUDDY_SMALL_FAST_MODEL` for `lite`, `CODEBUDDY_BIG_SLOW_MODEL` for `reasoning`)
+2. Project-level `variantModels[variant]`
+3. User global `variantModels[variant]`
+4. `relatedModels[variant]` on the current main model entry
+5. The product's built-in `defaultRelatedModels[variant]` (**only takes effect for built-in models; custom models skip this step**)
+6. Fall back to the main model itself
 
-> **The resolution rule for sub-agent models does not go through `relatedModels.subagent`**, but follows an independent chain: the Agent tool's `model` parameter > the `CODEBUDDY_CODE_SUBAGENT_MODEL` environment variable > the agent configuration's `models[0]` > the main model.
+`variantModels` is stored in `settings.json` and can also be edited via the **Scenario Models** area in the `/model` panel. It is suitable for fixing `lite` / `reasoning` to specific models within the user or project scope; `relatedModels` is suitable for letting the mapping follow the current main model.
 
-**Trade-offs with the environment variable approach:**
+**Built-in sub-agent resolution priority (from highest to lowest):**
 
-- If you want a main model to automatically switch to another small model from the same vendor in the `lite` / `reasoning` scenarios: declaring `relatedModels` on the main model entry is the most intuitive way, and the binding follows the model.
-- If you want sub-agents to use a small model: currently you must go through the environment variable `CODEBUDDY_CODE_SUBAGENT_MODEL`, or write the small model into `models[0]` in the agent configuration — **not** via `relatedModels.subagent`.
-- If you want different large/small model combinations in different projects: use environment variables (`CODEBUDDY_MODEL` / `CODEBUDDY_BIG_SLOW_MODEL` / `CODEBUDDY_SMALL_FAST_MODEL` / `CODEBUDDY_CODE_SUBAGENT_MODEL`) combined with project-level `.env` switching.
-- When both approaches are active simultaneously, environment variables take priority.
+1. `CODEBUDDY_CODE_SUBAGENT_MODEL`, universally covers all sub-agents
+2. The Agent tool's `model` parameter
+3. Project-level `subagents.agents.<subagent-name>.model`
+4. User global `subagents.agents.<subagent-name>.model`
+5. Product built-in declaration, e.g., `Explore` uses `lite`
+6. Inherit the main conversation model
+
+Sub-agent models do not read `relatedModels.subagent`. When a sub-agent is configured as `lite` or `reasoning`, it will continue through the variant resolution chain above to determine the concrete model.
+
+The following configuration should be written to user-level or project-level `settings.json`:
+
+```json
+{
+  "subagents": {
+    "agents": {
+      "Explore": { "model": "lite" },
+      "Plan": { "model": "reasoning" }
+    }
+  },
+  "variantModels": {
+    "lite": "<fast-model-id>",
+    "reasoning": "<reasoning-model-id>"
+  }
+}
+```
+
+**When to use different configuration approaches:**
+
+- Use `relatedModels` to let scenario mapping follow the main model.
+- Use `variantModels` or `/model` to fix specific `lite` / `reasoning` models within the user or project scope.
+- Use `subagents.agents.<subagent-name>.model` or `/agents` to select models or scenario variants for built-in sub-agents individually.
+- Use model environment variables for CI-level overrides. Environment variables take priority over persistent settings; after unsetting, the lower-priority settings will take effect again.
 
 ### Complete Example
 

package/dist/web-ui/docs/en/cli/permissions.md

@@ -235,10 +235,11 @@ Several ways to expand the trusted scope:
 | :--- | :--- |
 | `--add-dir <path>` startup argument | Process-level |
 | `/add-dir` command within a session | Session-level |
+| Web UI add directory (`/api/v1/workspace-dirs`) | Process-level (persisted by frontend) |
 | `permissions.additionalDirectories` setting | Persistent |
 | `permissions.trustedDirectories` setting | Persistent |
 
-The effective trusted directory list = workspace root + `settings.trustedDirectories` + directories added at startup with `--add-dir` or in-session with `/add-dir`.
+The effective trusted directory list = workspace root + `settings.trustedDirectories` + directories added at startup with `--add-dir`, in-session with `/add-dir`, or via the Web UI.
 
 > Both `--add-dir` and `permissions.additionalDirectories` only grant **file access**. They **do not** make CodeBuddy load `.codebuddy/` configuration from those directories (agents / hooks / settings, etc. still use the startup directory).
 

package/dist/web-ui/docs/en/cli/plugins-reference.md

@@ -737,6 +737,14 @@ codebuddy plugin update <plugin> [options]
 | `-s, --scope <scope>` | Update scope: `user`, `project`, `local`, or `managed` | `user` |
 | `-h, --help` | Show command help | |
 
+### plugin list
+
+List installed plugins and their versions, marketplace, enabled status, and dependency errors. `--json` can be used for scripts to read `dependencyErrors`.
+
+```bash
+codebuddy plugin list --json
+```
+
 ### Marketplace Management
 
 ```bash
@@ -905,6 +913,8 @@ CodeBuddy calculates the cache key by the following priority:
 
 Git plugins without an explicit version use the 12-character commit SHA as the cache directory name. When resolving tags via version constraints, the cache directory additionally includes a 12-character commit SHA suffix; constraint validation uses the separately recorded `resolvedVersion` and does not rely on the potentially stale manifest version.
 
+Git marketplace plugins previously recorded as `unknown` are automatically migrated at startup: CodeBuddy resolves the commit SHA from the current marketplace checkout, materializes the source code into the corresponding SHA cache directory, and atomically updates `installed_plugins.json`. Old `unknown` directories are only marked as orphan; they are retained for at least 14 days, and are not deleted while they have the `.in_use` flag of an active session. Non-Git sources without an explicit version continue to use `unknown`.
+
 ---
 
 ## IX. Compatibility with Claude Code

package/dist/web-ui/docs/en/cli/release-notes/README.md

@@ -17,6 +17,21 @@ Difference from CHANGELOG.md:
 
 <!-- New versions are automatically added here -->
 
+- [v2.125.4](./v2.125.4.md) - 2026-07-23
+- [v2.125.3](./v2.125.3.md) - 2026-07-23
+- [v2.125.2](./v2.125.2.md) - 2026-07-22
+- [v2.125.1](./v2.125.1.md) - 2026-07-22
+- [v2.125.0](./v2.125.0.md) - 2026-07-21
+- [v2.124.1](./v2.124.1.md) - 2026-07-19
+- [v2.124.0](./v2.124.0.md) - 2026-07-17
+- [v2.123.1](./v2.123.1.md) - 2026-07-16
+- [v2.123.0](./v2.123.0.md) - 2026-07-16
+- [v2.122.0](./v2.122.0.md) - 2026-07-15
+- [v2.121.3](./v2.121.3.md) - 2026-07-15
+- [v2.121.2](./v2.121.2.md) - 2026-07-14
+- [v2.121.1](./v2.121.1.md) - 2026-07-14
+- [v2.121.0](./v2.121.0.md) - 2026-07-14
+- [v2.120.0](./v2.120.0.md) - 2026-07-13
 - [v2.119.4](./v2.119.4.md) - 2026-07-12
 - [v2.119.3](./v2.119.3.md) - 2026-07-12
 - [v2.119.2](./v2.119.2.md) - 2026-07-12

package/dist/web-ui/docs/en/cli/release-notes/v2.120.0.md

@@ -0,0 +1,31 @@
+# 🚀 CodeBuddy Code v2.120.0 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.120.0 |
+| Agent SDK JS | v0.3.212 |
+| Agent SDK Python | v0.3.211 |
+
+## ✨ New Features
+
+### Flexible Sub-Agent Model Configuration
+
+You can now **independently specify models** at the granularity of built-in sub-agents (Explore / general-purpose / Plan, etc.). Each sub-agent operates independently and can be freely combined, instead of being forced to use a single model via environment variables.
+
+- Added `subagents` configuration item (`subagents.agents.<agentName>.model`), supporting both global and project scopes;
+- The `/agents` panel now displays the "effective model + source" for each sub-agent and supports visual editing;
+- The environment variable `CODEBUDDY_CODE_SUBAGENT_MODEL` remains the highest priority and applies uniformly to all sub-agents.
+
+### Scenario Variant Model Configuration
+
+Added the `variantModels` configuration item. You can view and modify the models currently mapped to the `lite` (lightweight fast) and `reasoning` (enhanced reasoning) scenario slots in the `/model` panel, supporting both global and project scopes. The corresponding environment variables `CODEBUDDY_SMALL_FAST_MODEL` / `CODEBUDDY_BIG_SLOW_MODEL` still apply per variant with the highest priority.
+
+> Backward compatible: When no configuration is made, behavior remains identical to before the upgrade.
+
+## 🐛 Bug Fixes
+
+- **Sandbox Bash Environment Variables**: Fixed an issue where MCP configurations such as Tencent Docs could not be passed through during Bash sandbox execution, causing related tools to be unavailable.
+- **More Robust Sandbox Fallback**: Fixed an issue where a spurious `unhandledRejection` diagnostic warning appeared when the sandbox failed to start and fell back to local execution.
+- **Skill Loading Priority**: Fixed an issue where a project-level Skill with the same name as a global Skill did not take precedence according to the nearest-first priority rule.

package/dist/web-ui/docs/en/cli/release-notes/v2.121.0.md

@@ -0,0 +1,42 @@
+# 🚀 CodeBuddy Code v2.121.0 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.121.0 |
+| Agent SDK JS | v0.3.213 |
+| Agent SDK Python | v0.3.212 |
+
+## ✨ New Features
+
+### Working Directory Management
+
+Added the `/api/v1/workspace-dirs` REST API, supporting listing, adding, removing, and fully syncing additional working directories. The Web UI input toolbar now includes a working directory stack icon for visually adding/removing additional working directories. Additional working directory information is automatically injected into the Agent system prompt, allowing the model to be aware of the complete working scope.
+
+### Plugin Update & Marketplace Auto-Update
+
+- **Plugin Update Public API**: Added `POST /api/v1/plugins/update`, providing the ability to "update installed plugins to the latest version" via the public HTTP API. Supports specifying plugins, scope, and whether to wait for the update to take effect, serving as a prerequisite for client-side "suite auto-update" capabilities.
+- **Marketplace Auto-Update Toggle**: Added `POST /api/v1/plugins/marketplaces/auto-update` to enable/disable marketplace auto-update. When enabled, the backend periodically syncs the marketplace and upgrades installed plugins to the latest version.
+
+### Permission Mode Extension
+
+ACP now supports Full Access and Delegate permission modes, providing more flexible permission control options.
+
+## 🔧 Improvements
+
+- **Hooks Output Replacement**: PostToolUse now supports replacing the output of all tools via `updatedToolOutput`, making it easier to compress verbose results and reduce context usage.
+- **Background Task Toggle**: Added the environment variable `CODEBUDDY_CODE_DISABLE_BACKGROUND_TASKS`. When enabled by the host, it hides the background execution parameters for Agent, Bash, and PowerShell, and falls back to synchronous/foreground execution, ensuring results always flow back to the main response and avoiding result loss in request-response SDK scenarios.
+- **PTY Stability**: Upgraded PTY underlying dependencies, incorporating a fix for file descriptor cleanup after PTY exit on macOS, improving terminal stability.
+- **Input Toolbar**: Optimized the size of the Mode/Model selectors for a more compact layout.
+- **File Tree Loading Experience**: Added delayed loading indicator for directory expansion, preventing flicker during fast loads.
+
+## 🐛 Bug Fixes
+
+- **Empty Model Response Handling**: Fixed an issue where a model that finished normally but returned no valid content would cause the conversation to be silently cancelled, with only a placeholder shown in the UI. This is now handled as a retryable error, with a clear prompt when the response remains empty, preventing the session from being stuck and unable to continue.
+- **--print stream-json False Error Report**: Fixed an issue where in this mode, after a "tool not found" error was automatically recovered, the final result still incorrectly reported `is_error=true`. Behavior is now consistent with interactive sessions.
+- **Deferred Tool Parameter Stability**: Added parameter structure hints for the target tool during retry rounds, reducing the likelihood of misgenerating complex fields such as arrays.
+- **AskUserQuestion Parameter Validation**: When parameters are invalid, instead of silently returning an empty result, a pre-validation step now returns a readable error message, and a rendering fallback is added for question cards.
+- **ACP Message Timestamp Semantics**: Restored the semantics of recording an independent timestamp for each message, preventing the completion time from being truncated by the first streaming chunk time.
+- **Log Flooding**: Downgraded MCP deferred tool indexing diagnostic logs to debug level and removed per-tool hot-path log lines, preventing log files from growing to GB scale during long sessions.
+- **Linux Sandbox**: Enabled the sandbox-cli backend in WorkBuddy Linux, using pipe mode for command execution.

package/dist/web-ui/docs/en/cli/release-notes/v2.121.1.md

@@ -0,0 +1,20 @@
+# 🚀 CodeBuddy Code v2.121.1 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.121.1 |
+| Agent SDK JS | v0.3.214 |
+| Agent SDK Python | v0.3.213 |
+
+## 🐛 Bug Fixes
+
+- **Sub-Agent Stuck in preparing / ESC Crash**: Fixed an issue in the local CLI where, after the main Agent invoked the Agent tool to spawn a sub-agent, the sub-agent would remain stuck in the preparing phase for a long time without executing, and pressing ESC to interrupt would crash the process. Sub-agents no longer wait for a session that will never be ready when sandbox is not enabled; interruptions during the preparation phase no longer produce unhandled exceptions; and a request timeout has been added for MCP tool list queries to prevent slow/unresponsive MCP services from blocking sub-agent startup.
+- **Tool Call Streaming Parsing**: Fixed an issue where some models split the tool call `id` and `name` across different streaming chunks, causing the client to fail recognition and resulting in tool call failures and session errors. The recognition conditions for the first chunk have been relaxed, allowing subsequent chunks to supply the tool name, compatible with field-splitting scenarios permitted by the protocol.
+- **Web UI Crash**: Fixed an issue where the chat page crashed the browser due to a circular dependency.
+- **Session Restore List**: Filtered out empty sessions with no real user input (e.g., sessions created and immediately switched away from, leaving only command bookkeeping messages), preventing titles from falling back to displaying command names.
+
+## 📝 Documentation Updates
+
+- **HTTP API / Daemon Documentation**: Added request header and request body descriptions for `/api/v1/runs`, unified examples to Gateway Protocol format, and added a request body field table.

package/dist/web-ui/docs/en/cli/release-notes/v2.121.2.md

@@ -0,0 +1,23 @@
+# 🚀 CodeBuddy Code v2.121.2 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.121.2 |
+| Agent SDK JS | v0.3.215 |
+| Agent SDK Python | v0.3.214 |
+
+## 🔧 Improvements
+
+- **Daemon Auto-Update Enabled**: Fixed an issue where auto-update was skipped in daemon mode. As a long-running process, the daemon now always enables auto-update to keep versions up to date.
+- **Daemon Diagnostics Enhancement**: The `daemon status` output now includes an auto-update status field, making it easier to check whether auto-update is currently enabled and why.
+
+## 🐛 Bug Fixes
+
+- **Daemon Restart Preserves Host Binding**: Fixed an issue where host binding was lost after daemon restart. Restarts now reuse the previously configured host and port.
+- **Clipboard Copy**: Fixed an issue where clipboard copy failed in non-HTTPS environments (e.g., HTTP tunnel access). A fallback mechanism has been added, and users are notified via a prompt when copy fails.
+- **Cross-Origin Access**: Fixed a cross-origin issue when accessing the Web UI via IP or custom domain after starting with `--host 0.0.0.0`. Origins are now automatically allowed when no explicit origin whitelist is configured.
+- **MCP Configuration Robustness**: When an MCP configuration in a given scope contains invalid entries (e.g., mistakenly written as a string / null / number), that entry is now skipped with a warning, instead of causing the entire scope to fail loading or affecting other normal MCP services.
+- **Web UI Window Title**: Fixed an issue where the app name was duplicated in the conversation window title bar after installing the Web UI as a PWA.
+- **Security Center Path Matching**: Fixed an issue on Windows where sandbox path matching for the user's home directory was too broad, preventing other accounts' directories from being mistakenly identified as the current user's directory and causing cross-account rule mismatches. Also fixed an issue where protected directories missed the file blocklist due to trailing slash differences.

package/dist/web-ui/docs/en/cli/release-notes/v2.121.3.md

@@ -0,0 +1,21 @@
+# 🚀 CodeBuddy Code v2.121.3 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.121.3 |
+| Agent SDK JS | v0.3.216 |
+| Agent SDK Python | v0.3.215 |
+
+## 🔧 Improvements
+
+- **stdio initialize Speedup**: The SDK `initialize` handshake is no longer blocked by slow MCP services when custom system prompts / Agent overrides are provided. Override injection is now performed in the background, and the handshake returns immediately. The first prompt still waits for overrides to take effect before executing. In practice, handshake latency has been reduced from hundreds of milliseconds to millisecond level.
+- **Output Style Lazy Rendering**: Built-in output style template content is now rendered on demand. Loading the style list no longer unconditionally renders all templates; rendering and caching occur only when a style is actually applied, speeding up list loading.
+
+## 🐛 Bug Fixes
+
+- **First Prompt Missing Some MCP Tools**: Fixed an issue in prewarm mode where the available tools list for the first prompt of a new session occasionally lacked user-level MCP tools that connected late, requiring a second prompt for them to appear. A tool index validation has been added to the runtime path; when late-connecting MCP services become ready, the Agent is rebuilt before execution, with no impact on pre-request performance.
+- **Sub-Agent Delegation Crash**: Fixed a regression where sub-agent delegation failed. The telemetry interceptor crashed due to missing null checks when input was empty. Defensive null checks have been added at both the source and interceptor levels.
+- **TUI Keyboard Input Crash**: Fixed an issue where pasting text or inputting specific escape sequences (such as Ctrl+function key sequences that can be embedded in large pastes) caused key name resolution to read a null value, triggering an uncaught exception that crashed the CLI process. Input boundaries have been uniformly normalized for null values.
+- **Reverted Deferred Tool Retry Parameter Hint Approach**: Reverted the previous approach of injecting active tool parameter structure hints to guide the model in self-correction. This was found to be ineffective for some models after verification. The issue is now resolved via an upstream direct tool connection approach, avoiding the overhead of ineffective hints.

package/dist/web-ui/docs/en/cli/release-notes/v2.122.0.md

@@ -0,0 +1,52 @@
+# 🚀 CodeBuddy Code v2.122.0 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.122.0 |
+| Agent SDK JS | v0.3.217 |
+| Agent SDK Python | v0.3.216 |
+
+## ✨ New Features
+
+### Web UI Account Login
+
+After Gateway authentication, a new CBC account login flow (OAuth) has been added, supporting four login methods: domestic site, international site, enterprise domain, and iOA. The Gateway cookie validity period has been extended to 30 days with sliding-window auto-renewal support; the login token has been migrated to localStorage, keeping the user logged in after closing the tab.
+
+### Remote Control Bot Entry Points
+
+Supports independently controlling the visibility of the WeChat bot and WeCom bot add-entry points via product configuration, while retaining management capabilities for existing channels.
+
+### Auto-Update Enabled by Default When Adding Marketplace
+
+When adding a plugin marketplace, an optional auto-update toggle has been added. Once enabled, a single operation completes both "adding the marketplace" and "enabling auto-update for kits." Existing marketplaces also support idempotent retroactive enabling of auto-update.
+
+### Web UI Custom Model Management
+
+A custom model management entry has been added to the "Models" section of the settings page. You can view, create, edit, and delete custom models (OpenAI-compatible endpoints) in a dialog, with configuration persisted to the user-level config file. In login scenarios, official models distributed to the account are no longer shadowed by a narrowed allowlist caused by custom models.
+
+### Web Chat `/skills` Inline Display
+
+Entering `/skills` directly in the conversation no longer navigates to a separate page or sends to the model. Instead, the available skills list is displayed inline, grouped by source (user / project / plugin), aligning with the CLI Skills panel information architecture.
+
+### Web UI Plugin Page Filtering and Pagination
+
+The installed and browse lists now support filtering by type (Skill / MCP / Hook / Tool) and enabled status, with client-side pagination. Switching filters automatically returns to the first page.
+
+### Web UI Settings Page TOC Navigation
+
+A table of contents (TOC) navigation has been added to the settings page, highlighting the current section as the page scrolls. Clicking an entry smoothly scrolls to the corresponding settings block.
+
+## 🔧 Improvements
+
+- **Port parsing fix**: Fixed an issue where URL port parsing was incorrect when using default ports (HTTP=80, HTTPS=443)
+- **Daemon startup behavior**: Stale processes are now cleaned up before startup to avoid port conflicts or unclean state
+
+## 🐛 Bug Fixes
+
+- **/btw side questions**: Fixed an issue where using `/btw` to ask a question during a main task's tool call resulted in a parameter error, preventing side questions from being used
+- **WebUI terminal connection**: Fixed an issue where the WebUI terminal connection was disconnected after ~120 seconds under the standalone binary, causing repeated reconnection attempts and eventual errors
+- **Plugin cache**: Git marketplace plugins without an explicit version now use the commit SHA as the cache version, with automatic migration of historical cache. Old directories still in use by a session are retained until safe cleanup
+- **Plan mode**: Added a short suffix to plan file names to reduce the risk of plan file path conflicts in concurrent sessions
+- **File tool sandbox approval**: When the sandbox is enabled, Edit, Write, MultiEdit, and NotebookEdit are uniformly routed through sandbox file rules for approval, fixing inconsistent behavior between the main Agent and sub-Agents

package/dist/web-ui/docs/en/cli/release-notes/v2.123.0.md

@@ -0,0 +1,28 @@
+# 🚀 CodeBuddy Code v2.123.0 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.123.0 |
+| Agent SDK JS | v0.3.218 |
+| Agent SDK Python | v0.3.217 |
+
+## ✨ New Features
+
+### File Version Revert
+
+Added the ability to preview and execute a full-round file revert per session request. You can preview the file versions that will be restored before reverting, with the preview results including the actual version identifier used, making the full-round file revert operation more intuitive and controllable.
+
+## 🔧 Improvements
+
+- **Sentiment metrics toggle**: Sentiment friction analysis is now enabled on demand. Related queries and reporting only occur when the corresponding product feature is explicitly enabled, with no additional overhead by default.
+
+## 🐛 Bug Fixes
+
+- **Daemon auto-update status**: Fixed the issue where `cbc daemon status` displayed "AutoUpdateService not available." The real status is now obtained from the running daemon process. An external upgrade detection has also been added, allowing the daemon to automatically detect and gracefully restart after a manual global upgrade.
+- **/rewind rollback (Windows)**: Fixed an issue where inconsistent drive letter casing (e.g., `c:\` vs `C:\`) on Windows caused rollback code to silently fail. Drive letter casing is now normalized before matching files, ensuring alignment between the save and revert sides.
+- **Revert code only option**: Fixed an issue where the "Revert code only" option was incorrectly hidden after the user made changes and then reverted them, preventing rollback to that node. The option is now displayed based on whether file edits occurred in that round.
+- **Agent subtasks**: Fixed an issue where a subtask that was successfully created but failed during execution was incorrectly reported as "creation failed." The failure path cleanup has also been completed, ensuring consistent failure state and subsequent cleanup logic.
+- **Custom expert**: Fixed an issue where creating a custom expert could write to the wrong directory due to not inheriting the config directory.
+- **Sentiment analysis reporting**: Fixed sentiment analysis query issues caused by differences in request wrapper tags and gateway response wrapping that led to recall or parsing anomalies, ensuring analysis results are reported normally.

package/dist/web-ui/docs/en/cli/release-notes/v2.123.1.md

@@ -0,0 +1,13 @@
+# 🚀 CodeBuddy Code v2.123.1 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.123.1 |
+| Agent SDK JS | v0.3.219 |
+| Agent SDK Python | v0.3.218 |
+
+## 🐛 Bug Fixes
+
+- **Text processing**: Fixed an issue where cleaning terminal control characters in certain runtime environments could cause a call exception due to differences in module export forms. Unused dependencies have also been removed to reduce the installation size.

package/dist/web-ui/docs/en/cli/release-notes/v2.124.0.md

@@ -0,0 +1,30 @@
+# 🚀 CodeBuddy Code v2.124.0 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.124.0 |
+| Agent SDK JS | v0.3.220 |
+| Agent SDK Python | v0.3.219 |
+
+## ✨ New Features
+
+### ShareLink One-Click Sharing Tool
+
+A new built-in `ShareLink` tool has been added, enabling a single local HTML file to be deployed as a publicly accessible, online-rendered, shareable link with one click. This makes it easy to send generated reports and visualization pages directly to others for viewing.
+
+- Automatically routes infrastructure based on the login environment, covering domestic / international / iOA scenarios
+- Enabled by default, with two-level toggles via the environment variable `CODEBUDDY_SHARE_LINK_ENABLED=false` and cloud-side `productFeatures.ShareLink`
+- Lazy-loaded on demand, reusing the current login session for authentication with no additional configuration required
+
+## 🔧 Improvements
+
+- **CLI command alias**: Added `codebuddy-code` as a CLI command alias, providing an additional invocation method alongside the existing `codebuddy` / `cbc`.
+
+## 🐛 Bug Fixes
+
+- **Large file edit freeze**: Fixed an issue where editing large files (e.g., large hardware netlists) on the desktop client caused the diff calculation to block for extended periods, freezing the core for tens of minutes. A timeout budget has been added for diff calculation; files that exceed the timeout are downgraded to only appearing in the change list (still viewable and revertable), no longer blocking subsequent operations.
+- **Stop / SubagentStop Hook payload**: Fixed an issue where `last_assistant_message` in hooks could return stale history messages. The final output is now extracted from the current run result first.
+- **Stop Hook continuation**: Fixed an issue where Stop Hook-triggered continuation in `-p` / ACP scenarios could cause the response to end prematurely, with subsequent output lost.
+- **Linux managed runtime**: Fixed an issue where the bundled Node / Python runtime could not be invoked inside the sandbox on Linux environments such as Kylin OS.

package/dist/web-ui/docs/en/cli/release-notes/v2.124.1.md

@@ -0,0 +1,22 @@
+# 🚀 CodeBuddy Code v2.124.1 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.124.1 |
+| Agent SDK JS | v0.3.221 |
+| Agent SDK Python | v0.3.220 |
+
+## 🔧 Improvements
+
+- **Agent metrics aggregation**: The window flush interval is fixed at 30 seconds, removing the dependency on external configuration, making aggregator startup more stable and simpler.
+
+## 🐛 Bug Fixes
+
+- **Plan mode non-interactive exit hang**: Fixed an issue where entering and exiting Plan mode in `-p` non-interactive mode caused the process to hang indefinitely. After exiting Plan mode, the task can now continue normally.
+- **Prewarm process local plugin loading**: Fixed an issue where local plugins (including skills / agents / hooks / MCP) were not loaded in the first session when the prewarm process was activated for the first time. Plugins are now re-initialized and loaded after activation.
+- **Reasoning Effort panel**: The Reasoning Effort option in the `/config` settings panel now includes the `max` level, aligning with the `/effort` command.
+- **Source Control - Revert All**: Fixed an issue where "Revert All" could not handle both tracked changes and newly created files simultaneously. A single operation can now fully clean up.
+- **Source Control - Panel refresh**: Fixed an issue where the panel did not update promptly after file changes. A timed polling fallback mechanism has been added.
+- **Terminal session keep-alive**: Fixed an issue where creating a new terminal session on manual reconnect caused historical state loss. Existing sessions kept alive by the backend are now reused first.