# 🚀 CodeBuddy Code v2.88.0 Release

## ✨ New Features

### Externalized Tool Result Storage

Added the blob-store module to support externalized storage of large tool outputs. OutputSpiller streams oversized output to disk, preventing memory exhaustion from extra-large outputs (e.g., reading large files, lengthy logs) and improving long-session stability.

### Custom Auto-Compact Threshold

Added the `CODEBUDDY_AUTOCOMPACT_PCT_OVERRIDE` environment variable, allowing you to customize the context auto-compaction trigger threshold (1–100 percentage). This gives you flexible control over compaction timing based on your usage scenario.

## 🔧 Improvements

- **Deferred Tool Permission Passthrough**: Each deferred tool now performs independent permission checks, preventing all deferred tools from being automatically authorized after the agent executor permission is granted
- **Tool Search Precision**: Removed fuzzy matching from tool search, delivering more precise results and reducing irrelevant tool matches
- **Shell Output Limit Increase**: Default output limit raised from 20K to 30K, and the maximum from 100K to 150K, reducing truncation of large outputs

## 🐛 Bug Fixes

- **Command Injection Hardening**: Replaced shell command execution from `exec` to `execFile` with array arguments, preventing potential command injection risks
- **MCP defer_loading Config Compatibility**: Fixed an issue where `defer_loading` did not take effect when MCP config `tools` used different tool name formats
- **MCP OAuth Callback Compatibility**: Fixed an issue where the browser was rejected by request validation when redirecting back from an external OAuth server, as custom headers could not be included

## 📝 Documentation Updates

- Added standalone environment variables reference documentation
- Updated sub-agent and settings documentation
