🚀 CodeBuddy Code v2.176.0 Release

📦 Version Information

Component	Version
CodeBuddy Code CLI	v2.176.0
Agent SDK JS	v0.3.291
Agent SDK Python	v0.3.290

✨ New Features

Open Remote SSH Hosts via Desktop Deep Links

The host list in the Remote Control Web UI adds an "Open in Desktop" option:

• Click it to generate a codebuddy-desktop:// deep link that directly launches the local desktop client and opens that SSH host and its workspace
• Host and workspace information is restored from the link; unregistered hosts remain pending and are never connected by mistake

🔧 Improvements

• IOA route mode configurable via environment variable: Added the CODEBUDDY_ENV_ROUTE_MODE environment variable, which is read when envRouteMode is not set in settings, to select the staging or production value of enterprise request headers
• Expert identity passed through with requests: Expert markers in the prompt baggage (expert id, team task, review type) are automatically expanded into platform request headers. Built-in model requests, platform REST calls, and web search carry them as well, giving more complete attribution for expert flows
• Enhanced SDK resident service capabilities: Added a set of session-level options, including a host confirmation card channel, strictMcpConfig, session plugin roots, service proxy address, per-session environment variables, fallback when the sandbox is unavailable, and toggles for Agent Teams and title generation. Hosts can control these at a fine-grained per-session level without sessions affecting each other

🐛 Bug Fixes

• Model response header timeouts no longer mistaken for cancellation: Timeouts while waiting for response headers now reuse the first-token timeout recovery budget for automatic retries, while genuine user cancellations still stop immediately
• No lingering processes after Hook timeouts: When synchronous or asynchronous Hooks time out, the entire process tree is reclaimed, so the actual commands no longer keep running in the background
• Safety review rejections apply only to the current call: Tool calls that have already been auto-rejected are not reviewed again, and will not be executed if a later review verdict changes; subsequent independent calls are still reviewed normally
• Plugin tool hooks dispatched only once: Fixed the tool.call hook running twice for the same MCP tool call and showing two confirmation cards. Tool confirmation now happens after the hook, and parameters rewritten by the hook are no longer rejected
• Viewing large images no longer interrupts the session: Fixed ViewImage image results being transmitted repeatedly over ACP, causing oversized messages and dropped session connections. Full images and history content are preserved
• Resident service (WorkBuddy) fixes: Safety confirmations are now shown as cards through the host, instead of being silently allowed or waiting until timeout; safety review, enterprise security policy, response language, and Max Mode take effect per session; closing a session also terminates its background task tree; clearing the context no longer triggers an extra model request; telemetry events use the correct session id