🚀 CodeBuddy Code v2.151.0 Release

📦 Version Information

Component	Version
CodeBuddy Code CLI	v2.151.0
Agent SDK JS	v0.3.259
Agent SDK Python	v0.3.258

✨ New Features

Rewind to a User Message in Web UI

Hover over any user message in a session and select “Rewind to here” to restore the session to the state before that message was sent.

• The dialog provides the same risk notice and rewind scope options as the terminal: rewind the conversation, rewind code, or rewind both
• After rewinding, the session refreshes automatically and the selected message is restored to the input box, making it easy to edit and resend
• Rewind points and actions are resolved against the current session and do not affect other sessions

🔧 Improvements

• Artifact Declarations Now Use Only the Out-of-Band Channel: The temporary migration-period support for the ::codebuddy-artifact:: standard output marker has been removed. Scripts should declare artifacts by appending JSON lines to the file referenced by $CODEBUDDY_ARTIFACTS. Standard output is no longer parsed, so printing such a line is treated as ordinary output.
• Direct IP Connections for Conversation Traffic: After the backup endpoint fails, only IPs resolved through HTTPDNS are pinned. The fallback Anycast address is used only when HTTPDNS returns no result; LocalDNS addresses are no longer pinned, improving connection stability.

🐛 Bug Fixes

• Web UI Session Occupied by a Stale Connection: Fixed an issue where refreshing or reopening a page could display “Already open in another window; this window is read-only,” requiring users to manually click “Take over” before continuing the conversation. The browser now reclaims its stale connection before reconnecting, covering page refreshes, multiple mobile pages, agent window (iframe) reloads, and the “Take over” flow. When two windows are genuinely online at the same time, read-only following is still preserved so they do not take control from each other.
• Repeated Agent Window Reloads: Fixed new-version checks also running inside agent windows, causing full-page refreshes and repeated reloads. Version updates are now handled only by the host page, and reload actions no longer reset the retry limit for automatic recovery from a blank window.
• Web UI Markdown Tables: Fixed table rows with empty cells being incorrectly split into two rows. Previously, these rows could misalign the entire table by shifting content between columns or cause it to fall back to plain-text rendering.
• Opening Files from Web UI Explorer / Source Control: Fixed files not opening from the right sidebar. Binary changes such as images in the working tree now use file preview, while staged or deleted binary versions clearly indicate that they are not currently supported. Regular files and staged / unstaged diffs can be opened and switched independently.
• Glob / Grep Search Stability: Corrected matching for .gitignore, path globs, and special filenames. Grep now filters files before searching their contents, avoiding reads outside the matched scope. Glob/type combinations, explicit output modes, and context formatting are preserved, and Glob now clearly reports when an optional search directory does not exist.
• Image Format Compatibility: Fixed model request errors caused by incompatible formats in user images, tool-returned images, and historical images. JPEG, PNG, and WebP are now sent consistently; BMP, TIFF, and GIF are automatically converted to PNG, while images that cannot be processed are replaced with text placeholders.
• Parallel Tool Call History: Fixed a round of parallel tool calls being split into N messages in the next conversation turn, with the same reasoning text repeated N times. This avoids wasting context and also eliminates the underlying cause of lost reasoning signatures during concurrent tool calls.
• macOS Sandbox Directory Traversal: Fixed find directory traversal hanging because the Broker connection could not continue processing requests, while retaining concurrency limits and limiting the backlog per connection.
• Windows Sandbox Command Paths: Fixed missing companion tool paths in Git Bash that prevented commands such as grep, tail, and cat from running. Bash initialization no longer depends on dirname, and the safe-delete wrapper now loads correctly with a minimal PATH.
• WorkBuddy Subagent Sandbox Reuse: Fixed the Broker rejecting Bash file access due to a session ID mismatch when a subagent reused the main sandbox.
• Completing Legacy WorkBuddy Sandbox Configuration: Fixed legacy sandbox configurations not receiving default file rules such as temporary directories after an upgrade. Missing defaults are now restored during migration while preserving the permissions and priority of each user-defined rule.
• Deleting Temporary Sandbox Files: Fixed deletion of temporary files under /tmp and /private/tmp being blocked and triggering a deletion approval dialog. Temporary files created by inline shell scripts can now be cleaned up normally after execution.
• Parallel Command Authorization Dialogs: Fixed queued requests within the same authorization scope repeatedly showing dialogs after the user selected “Always allow for this session” when identical commands were blocked in parallel.
• Custom MCP Security Controls: Fixed custom MCP tools such as iWiki remaining callable in local WorkBuddy sessions after custom MCP was disabled in Security Center, covering HTTP, SSE, and stdio connections.
• WorkBuddy Desktop Sandbox Command Exclusions: sandbox.excludedCommands is no longer used to bypass the sandbox, preventing compound commands and redirections from writing outside the workspace without approval. Command exclusion behavior in the standalone CLI remains unchanged.
• Plugin Initialization Warnings: Plugin background initialization failures are now written only to the log file and no longer displayed as startup warnings in the TUI.