feat: add .nvmrc file and update Node.js version requirements in package.json and documentation

- Introduced a new .nvmrc file specifying Node.js version 22.
- Updated Node.js version requirements in package.json to support ^22.18 or >=24.11.
- Adjusted related documentation to reflect the new Node.js version requirements for development and installation.

Author: clark-fc

.github/workflows/publish.yml

@@ -56,7 +56,7 @@ jobs:
             | sudo tar -xz -C /usr/local/bin gitleaks
           gitleaks version
 
-      - name: Ensure zip (per-platform binary archives)
+      - name: Ensure zip and tar (per-platform binary archives)
         run: sudo apt-get update && sudo apt-get install -y zip
 
       - run: pnpm install --frozen-lockfile
@@ -70,17 +70,15 @@ jobs:
       - name: publish-stable
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # OSS release channel runs fully in CI: upload + reconcile + manifest.json.
-          # All values come from repo Settings → Secrets — no OSS defaults live in
-          # code. Leave AK/SK unset to skip the OSS channel; once enabled,
-          # bucket/region/prefix are required.
-          BAILIAN_OSS_AK: ${{ secrets.BAILIAN_OSS_AK }}
-          BAILIAN_OSS_SK: ${{ secrets.BAILIAN_OSS_SK }}
-          BAILIAN_OSS_BUCKET: ${{ secrets.BAILIAN_OSS_BUCKET }}
-          BAILIAN_OSS_REGION: ${{ secrets.BAILIAN_OSS_REGION }}
-          BAILIAN_OSS_ENDPOINT: ${{ secrets.BAILIAN_OSS_ENDPOINT }}
-          BAILIAN_RELEASE_PREFIX: ${{ secrets.BAILIAN_RELEASE_PREFIX }}
-          BAILIAN_STATIC_PREFIX: ${{ secrets.BAILIAN_STATIC_PREFIX }}
+          # OSS release channel goes through the FC release function (presigned
+          # upload + reconcile + manifest.json): this repo holds no OSS
+          # credentials, the job only presents its GitHub OIDC token (requires
+          # id-token: write above). The trigger URL is the shared
+          # FC_TRIGGER_URL (same function serves publish-skills; actions are
+          # routed by URL path); leave it unset to skip the OSS channel.
+          # Bucket / prefix / allowlists live in the FC function.
+          FC_TRIGGER_URL: ${{ vars.FC_TRIGGER_URL }}
+          FC_RELEASE_AUDIENCE: ${{ vars.FC_RELEASE_AUDIENCE }}
         run: node tools/release/publish-stable.mjs ${{ inputs.package == 'knowledge-studio-cli' && '--knowledge' || '' }}
 
   publish-channel:
@@ -116,7 +114,7 @@ jobs:
             | sudo tar -xz -C /usr/local/bin gitleaks
           gitleaks version
 
-      - name: Ensure zip (per-platform binary archives)
+      - name: Ensure zip and tar (per-platform binary archives)
         run: sudo apt-get update && sudo apt-get install -y zip
 
       - run: pnpm install --frozen-lockfile
@@ -130,14 +128,10 @@ jobs:
       - name: publish-channel
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # OSS release channel — same Settings-injected values as stable.
-          BAILIAN_OSS_AK: ${{ secrets.BAILIAN_OSS_AK }}
-          BAILIAN_OSS_SK: ${{ secrets.BAILIAN_OSS_SK }}
-          BAILIAN_OSS_BUCKET: ${{ secrets.BAILIAN_OSS_BUCKET }}
-          BAILIAN_OSS_REGION: ${{ secrets.BAILIAN_OSS_REGION }}
-          BAILIAN_OSS_ENDPOINT: ${{ secrets.BAILIAN_OSS_ENDPOINT }}
-          BAILIAN_RELEASE_PREFIX: ${{ secrets.BAILIAN_RELEASE_PREFIX }}
-          BAILIAN_STATIC_PREFIX: ${{ secrets.BAILIAN_STATIC_PREFIX }}
+          # OSS release channel — same FC-backed flow as stable; no OSS
+          # credentials in this repo (see publish-stable env notes).
+          FC_TRIGGER_URL: ${{ vars.FC_TRIGGER_URL }}
+          FC_RELEASE_AUDIENCE: ${{ vars.FC_RELEASE_AUDIENCE }}
         run: node tools/release/publish-channel.mjs ${{ inputs.package == 'knowledge-studio-cli' && '--knowledge' || '' }} --channel "${{ inputs.channel }}"
 
   # bailian-kb-dsh is the dsh plugin (downstream host adapter): independent version,

.nvmrc

@@ -0,0 +1 @@
+22

.vite-hooks/pre-commit

@@ -15,6 +15,8 @@ git add \
   skills/bailian-finetune/reference \
   skills/bailian-managed-agent/SKILL.md \
   skills/bailian-managed-agent/reference \
+  skills/bailian-sandbox/SKILL.md \
+  skills/bailian-sandbox/reference \
   skills/bailian-web-search/SKILL.md
 
 vp staged

AGENTS.md

@@ -36,7 +36,7 @@ packages/core/src/auth/            # apiKey / console credential 解析与落盘
 packages/core/src/client/          # HTTP client / endpoints / console gateway
 ```
 
-Skill / 命令手册随 `skills/bailian-*/` 经 `bl skill init` 安装（装齐 registry 中全部 `bailian-*`，含共享协议 `bailian-protocol`）。业务 skill（`bailian-cli` / `bailian-gen` / `bailian-finetune` / `bailian-managed-agent` / `bailian-web-search`）执行前读 `skills/bailian-protocol/`；不要依赖 frontmatter `companions`（安装器不强制）。`tools/generate-reference.ts` 从 **`packages/cli/src/commands.ts`** 按一级命令归属表分流写入各 `skills/<skill>/reference/`(纳入 git);`tools/sync-skill-metadata.ts` 从 `packages/cli/package.json` 同步各 `skills/*/SKILL.md` 的 `metadata.version`。两者由根脚本 `pnpm run sync:skill-assets` 和 `.vite-hooks/pre-commit` 执行。hub `bailian-cli` 的路由表不复述领域命令明细；SKILL 文案 / 安装约定 / hand-off 见 [docs/agents/skill-change.md](docs/agents/skill-change.md)。
+Skill / 命令手册随 `skills/bailian-*/` 经 `bl skill init` 安装（装齐 registry 中全部 `bailian-*`，含共享协议 `bailian-protocol`）。业务 skill（`bailian-cli` / `bailian-gen` / `bailian-finetune` / `bailian-managed-agent` / `bailian-sandbox` / `bailian-web-search`）执行前读 `skills/bailian-protocol/`；不要依赖 frontmatter `companions`（安装器不强制）。`tools/generate-reference.ts` 从 **`packages/cli/src/commands.ts`** 按一级命令归属表分流写入各 `skills/<skill>/reference/`(纳入 git);`tools/sync-skill-metadata.ts` 从 `packages/cli/package.json` 同步各 `skills/*/SKILL.md` 的 `metadata.version`。两者由根脚本 `pnpm run sync:skill-assets` 和 `.vite-hooks/pre-commit` 执行。hub `bailian-cli` 的路由表不复述领域命令明细；SKILL 文案 / 安装约定 / hand-off 见 [docs/agents/skill-change.md](docs/agents/skill-change.md)。
 
 约定:
 

CHANGELOG.md

@@ -6,6 +6,79 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and
 
 [中文版](CHANGELOG.zh.md) · [README](README.md) · [Contributing](CONTRIBUTING.md)
 
+## [2.0.0] - 2026-09-22
+
+### Added
+
+- **Native MCP registration** — Added `bl mcp connect` and `bl mcp disconnect` to add or remove Bailian MCP servers in Agent-native configurations:
+  - Supports `streamable-http` and SSE, targeting an individual Agent or all installed Agents with `--agent all`.
+  - Supports Codex, Claude Code, Cursor, Qoder, Qoder Work, QwenWork, Qwen Code, Gemini, OpenCode, OpenClaw, DeepSeek Harness, ZCode, and WorkBuddy.
+  - Never overwrites unmanaged entries and preserves registrations modified by users during removal.
+- **Broader Skill delivery** — Skill installation and updates now support WorkBuddy, Trae CLI, and DeepSeek DSH through their global Skill directories.
+
+### Fixed
+
+- **Skill operation previews** — `bl skill init`, `add`, `update`, and `remove` now honor `--dry-run`, showing the planned Skills, Agents, and target paths without writing. Invalid requests retain the same failure status as real execution.
+- **Safer Skill cleanup** — `bl skill remove` previews and executions now use the same managed-link discovery scope, recognize historical managed links, and recheck targets immediately before deletion to avoid removing changed or unmanaged content.
+
+## [1.28.0] - 2026-09-20
+
+### Added
+
+- **Agent security commands** — `bl agents security overview` (protection overview for the last 24 hours) and `bl agents security alerts` (alert list with risk-level, asset-type, status, vendor, pagination and sorting filters). Both call the per-workspace AgentStudio host and honor the shared `text` / `json` / `--quiet` / `--dry-run` contract. The host is derived from `--workspace-id`, or overridden by `--base-url` / `DASHSCOPE_BASE_URL` / `auth login --base-url` pointed at a workspace or pre-release origin (e.g. `https://<workspace-id>.cn-beijing.maas.aliyuncs.com/api/v1/agentstudio`).
+
+### Internal
+
+- Add Agent security E2E coverage (help, missing-workspace usage error, dry-run host derivation and `--base-url` override, query-string filters, enum fast-fail) and generate the `bailian-cli` skill reference for the new `agents` group.
+
+## [1.27.0] - 2026-09-18
+
+### Added
+
+- **Monitoring, logs, and alerts** — Added `bl monitor`, `bl log`, and `bl alert` command groups for model call statistics, failures, latency, token usage, audit and inference logs, traces, delivery configuration, and alert management.
+- **Model discovery and code samples** — Added `bl model search` for relevance-ranked catalog search and `bl model code` for ready-to-run SDK examples.
+
+### Changed
+
+- **Model catalog** — `bl model list` now supports input/output modality filters, hides offline models by default, and can include them with `--include-deprecated`.
+
+### Fixed
+
+- **Speech voices** — `bl speech synthesize --list-voices` now supports the built-in voices and documentation links for `qwen-audio-3.0-tts-plus` and `qwen-audio-3.0-tts-flash`.
+- **Unix binary distribution** — Added `.tar.gz` release assets and checksums for macOS and Linux, enabling installation without an `unzip` dependency while retaining `.zip` assets for compatibility.
+
+## [1.26.0] - 2026-09-17
+
+### Changed
+
+- **Simplified authentication** — Console login is now the recommended default and can create an ordinary API key when needed. Existing ordinary API keys and Token Plan subscription keys use the same `bl auth login --api-key <API_KEY>` command.
+- **Automatic API key validation and endpoint selection** — API keys are validated before being saved. The CLI automatically selects an available regional endpoint and applies the appropriate Token Plan configuration when applicable.
+
+## [1.25.0] - 2026-09-14
+
+### Added
+
+- **Token Plan harness quota** — `bl token-plan harness-quota` shows Token Plan harness entitlement quota usage (Console auth), joining the harness list with issued entitlements to display used/total quota, usage ratio, and reset time; harnesses with a pending entitlement are listed as issuing.
+- Filter the harness list with `--type official_tool|infrastructure`; render as a quota box or `--output json`.
+
+## [1.24.0] - 2026-09-11
+
+### Added
+
+- Sandbox instance and template lifecycle commands, with automatic build polling and `--async` submission.
+- `bl sandbox official-images` and template `--image` presets for Code Interpreter, Browser, and All-in-One.
+- `bl sandbox file upload` uploads template mount files with `source=sandbox_template`; use the returned File ID in `mntConfig`.
+- Sandbox supports shared `--base-url`, environment and Profile configuration, with workspace-based endpoint fallback.
+- Dedicated `bailian-sandbox` Skill with command references and instance connection guidance.
+
+### Fixed
+
+- Preserve submitted `templateID` and `buildID` when template-build polling fails, so users can check the existing build before resubmitting.
+
+### Security
+
+- Sandbox REST calls use Bailian Bearer authentication without an E2B SDK or E2B API key. Connection credentials and dry-run environment values are redacted by default.
+
 ## [1.23.0] - 2026-09-10
 
 ### Added

CHANGELOG.zh.md

@@ -6,6 +6,79 @@
 
 [English](CHANGELOG.md) · [README](README.zh.md) · [参与贡献](CONTRIBUTING.zh.md)
 
+## [2.0.0] - 2026-09-22
+
+### 新增
+
+- **原生 MCP 注册** —— 新增 `bl mcp connect` 和 `bl mcp disconnect`，支持在 Agent 原生配置中接入或移除百炼 MCP 服务：
+  - 支持 `streamable-http` 与 SSE，可指定单个 Agent 或使用 `--agent all`。
+  - 支持 Codex、Claude Code、Cursor、Qoder、Qoder Work、QwenWork、Qwen Code、Gemini、OpenCode、OpenClaw、DeepSeek Harness、ZCode 和 WorkBuddy。
+  - 不会覆盖非 CLI 管理的同名配置；移除时会保留已被用户修改的注册项。
+- **扩展 Skill 分发范围** —— Skill 安装和更新新增支持 WorkBuddy、Trae CLI 与 DeepSeek DSH，并使用各自的全局 Skill 目录。
+
+### 修复
+
+- **Skill 操作预览** —— `bl skill init`、`add`、`update` 和 `remove` 现在会正确响应 `--dry-run`，只读展示计划操作的 Skill、Agent 和目标路径；无效请求的失败状态与实际执行保持一致。
+- **Skill 清理安全性** —— `bl skill remove` 的预览与实际执行现在使用相同的托管链接发现范围，可识别历史托管链接，并在删除前重新校验目标，避免误删已变化或不再由 CLI 管理的内容。
+
+## [1.28.0] - 2026-09-20
+
+### 新增
+
+- **Agent 安全命令** —— `bl agents security overview`（最近 24 小时的防护总览）与 `bl agents security alerts`（告警列表，支持风险等级、资产类型、状态、厂商、分页与排序等筛选）。两者均对接按 workspace 区分的 AgentStudio 域名，遵循统一的 `text` / `json` / `--quiet` / `--dry-run` 约定。域名默认由 `--workspace-id` 推导，也可通过 `--base-url` / `DASHSCOPE_BASE_URL` / `auth login --base-url` 指向某个 workspace 或预发源覆盖（例如 `https://<workspace-id>.cn-beijing.maas.aliyuncs.com/api/v1/agentstudio`）。
+
+### 内部
+
+- 补充 Agent 安全 E2E 覆盖（help、缺 workspace 的 usage 错误、dry-run 域名推导与 `--base-url` 覆盖、query string 筛选、枚举快失败），并为新的 `agents` 组生成 `bailian-cli` 技能 reference。
+
+## [1.27.0] - 2026-09-18
+
+### 新增
+
+- **监控、日志与告警** —— 新增 `bl monitor`、`bl log` 和 `bl alert` 命令组，支持查看模型调用量、失败、耗时、Token 用量、审计与推理日志、调用链，配置数据投递并管理告警。
+- **模型发现与示例代码** —— 新增 `bl model search`，可按相关度搜索模型目录；新增 `bl model code`，可获取开箱即用的 SDK 调用示例。
+
+### 变更
+
+- **模型目录** —— `bl model list` 新增输入/输出模态筛选，默认隐藏已下线模型，并可通过 `--include-deprecated` 将其包含在结果中。
+
+### 修复
+
+- **语音音色** —— `bl speech synthesize --list-voices` 现在支持查看 `qwen-audio-3.0-tts-plus` 和 `qwen-audio-3.0-tts-flash` 的内置音色及对应文档。
+- **Unix 二进制分发** —— 为 macOS 和 Linux 增加带校验和的 `.tar.gz` 发布资产，使安装流程可不依赖 `unzip`，同时保留 `.zip` 资产以兼容现有流程。
+
+## [1.26.0] - 2026-09-17
+
+### 变更
+
+- **简化认证方式** —— 默认推荐使用控制台登录，需要时可自动创建普通 API Key。已有普通 API Key 和 Token Plan 订阅 Key 统一使用 `bl auth login --api-key <API_KEY>` 登录。
+- **API Key 自动校验与地域识别** —— API Key 会在保存前进行校验，CLI 自动选择可用地域，并在适用时完成 Token Plan 配置。
+
+## [1.25.0] - 2026-09-14
+
+### 新增
+
+- **Token Plan harness 权益额度** —— `bl token-plan harness-quota` 查看 Token Plan harness 权益额度用量（Console 认证），联合 harness 列表与已发放权益，展示已用/总额度、使用比例和重置时间；待发放权益的 harness 以「发放中」状态列出。
+- 通过 `--type official_tool|infrastructure` 筛选 harness 列表；支持额度框输出或 `--output json`。
+
+## [1.24.0] - 2026-09-11
+
+### 新增
+
+- Sandbox 实例与模版生命周期命令，支持自动轮询构建状态和 `--async` 异步提交。
+- `bl sandbox official-images` 与模版 `--image` 参数，内置代码解释器、浏览器和全能型镜像预设。
+- `bl sandbox file upload` 使用 `source=sandbox_template` 上传模版挂载文件，返回的 File ID 可用于 `mntConfig`。
+- Sandbox 复用 `--base-url`、环境变量和 Profile 配置，未配置时通过工作空间拼接接入地址。
+- 独立的 `bailian-sandbox` Skill，提供命令参考和实例连接指南。
+
+### 修复
+
+- 模版构建轮询失败时保留已提交的 `templateID` 和 `buildID`，便于先查询已有构建，避免重复提交。
+
+### 安全
+
+- Sandbox REST 调用使用百炼 Bearer 鉴权，不依赖 E2B SDK 或 E2B API Key；连接凭据和 dry-run 环境变量默认脱敏。
+
 ## [1.23.0] - 2026-09-10
 
 ### 新增

CONTRIBUTING.md

@@ -6,7 +6,7 @@ Developer guide for `bailian-cli` — the official CLI for Aliyun Model Studio (
 
 ## Prerequisites
 
-- Node.js ≥ 22.12 (required for developing this repo)
+- Node.js ^22.18 or >=24.11 (required for developing this repo)
 - End users installing the published CLI only need Node.js >= 18.17
 - pnpm 10.33.2 (`npm i -g pnpm@10.33.2`)
 - A DashScope API key for running e2e tests

CONTRIBUTING.zh.md

@@ -6,7 +6,7 @@
 
 ## 环境要求
 
-- 参与本仓库开发：Node.js ≥ 22.12
+- 参与本仓库开发：Node.js ^22.18 或 >=24.11
 - 仅安装/使用已发布的 CLI：Node.js >= 18.17
 - pnpm 10.33.2（`npm i -g pnpm@10.33.2`）
 - 跑 e2e 需要一个百炼 API Key

INSTALL.md

@@ -70,7 +70,7 @@ bl --version
 which bl   # Windows: where.exe bl
 ```
 
-> CDN / GitHub Release 未就绪或下载失败时，若本机已有合格 Node，回退到上方 npm 安装。
+> CDN / GitHub Release 未就绪或下载失败时，若本机已有合格 Node，回退到上方 npm 安装。Unix 二进制安装优先解 `.tar.gz`（不依赖 `unzip`）；Windows 仍使用 `.zip`。
 
 ---
 
@@ -79,13 +79,9 @@ which bl   # Windows: where.exe bl
 ### 推荐：浏览器登录（控制台会话）
 
 1. 执行 `bl auth status --output json`，判断是否已配置。
-2. 若未配置，在**用户本机终端**执行 `bl auth login --console`。
-3. 登录成功后执行 `bl auth status --output json` 确认；汇报时只使用 masked 字段，**禁止**回显完整凭据。
-
-### 备选：API Key / Token Plan
-
-- 普通 Key：`bl auth login --api-key <Key>`
-- Token Plan：`bl auth login --config token-plan --api-key <Key>`
+2. 若未配置，在**用户本机终端**执行 `bl auth login --console`（国际站执行 `bl auth login --console --console-site international`）；需要时会自动创建普通 API Key。
+3. 如果使用 Token Plan 等订阅计划，不能使用 `--console`，请执行 `bl auth login --api-key <API_KEY>`。
+4. 登录成功后执行 `bl auth status --output json` 确认；汇报时只使用 masked 字段，**禁止**回显完整凭据。
 
 ### Agent 安全约束