v1.28.0

Added

• Agent security commands — bl agents security overview (protection overview for the last 24 hours) and bl agents security alerts (alert list with risk-level, asset-type, status, vendor, pagination and sorting filters). Both call the per-workspace AgentStudio host and honor the shared text / json / --quiet / --dry-run contract. The host is derived from --workspace-id, or overridden by --base-url / DASHSCOPE_BASE_URL / auth login --base-url pointed at a workspace or pre-release origin (e.g. https://<workspace-id>.cn-beijing.maas.aliyuncs.com/api/v1/agentstudio).

Internal

• Add Agent security E2E coverage (help, missing-workspace usage error, dry-run host derivation and --base-url override, query-string filters, enum fast-fail) and generate the bailian-cli skill reference for the new agents group.