v1.0.39

Volc CLI v1.0.39

Managed Agents (ark agent)

• Dream commands (Volc only): new ark agent dream create/list/get/wait/cancel commands to organize session memories into a new memory store asynchronously (top_dream.thrift contract). Creation runs on the MA data plane with API-key auth; list/get/wait/cancel use control-plane actions (ListDreams/GetDream/CancelDream) requiring SSO/STS or AK/SK.
• BYOK model configuration: agents can now use third-party providers through --model-header-env (header references resolved from the environment, never persisted); BYOK upstream models keep their provider fields and skip Ark activation while the service gate stays enforced. Model-header secrets are redacted from preview output, error messages, and JSON bodies.
• Toolset upgrade: the default toolset for new agents moves to agent_toolset_20260916; the Todo planning tool is a non-basic toolset option and no longer requires Models. agent create/update --tool documents the current default.
• Model list hardening: agent agent model list now returns route targets and directly invocable model names as separate concepts, with model capability (context window, token limits, modalities) and plan load level surfaced per entry. Large JSON integers in agent/session payloads no longer round-trip through float64 (apis.DecodeObject with UseNumber), and model-object key aliases normalize deterministically.
• agent agent events (send) returns a non-zero exit code when event execution fails, and sends model credentials scoped to the request only.

Plans (ark plans)

• Scoped model catalogs: plans model-list now returns two catalogs — models[] (ark-code-latest routing candidates) and direct_models[] (ModelName values that can be written directly to the model field) — including capability and load metadata. All four plan list actions carry Edition + BizInfo (plan tier / seat tier) instead of account IDs.
• --plan is now optional: when omitted, the CLI auto-detects the only active plan for the current identity and asks for an explicit --plan when several are held.
• New --mode all|direct|routing flag selects which catalog to query.
• Agreement gate fix: protected plan commands no longer misclassify "data-plane API key + valid control-plane STS" (SSO with expired id_token, init-volc, broker, cloud dev machines) as pure data-plane credentials. The preflight now keys off the presence of a real control-plane identity (id_token / AK/SK / identity-bound STS), matching the control-plane transport routing, instead of AuthMethod() ranking.
• The identity_required funnel metric is now emitted on every authorization entrypoint (stateless invocations included), not only from the test-only wrapper.
• plans model-apply docs and the access-policy governance doc reflect the new identity criteria.

Embeddings & data plane (ark api)

• New action arkruntime.create_multimodal_embeddings routed to /embeddings/multimodal (SDK CreateMultiModalEmbeddings) for vision/multimodal embedding models; the text action remains unchanged.
• Actionable diagnostics for the top embedding failure classes: unknown/inaccessible model or endpoint (model_endpoint_not_found), vision model sent to /embeddings (embedding_api_mismatch), plan data-plane mismatch (plan_data_plane_unsupported), local proxy/DNS failure (network_unreachable), and missing data-plane API key (missing_api_key fail-fast before the SDK client is constructed).
• Raw ArkRuntime invocations fail fast with missing_api_key instead of sending Bearer and surfacing an opaque 401.

Error reporting & exit codes

• Wrapping context such as --input[2]: ... is no longer lost in the rendered error envelope; multi-input failures now identify the failing input.
• Local transport failures (refused proxy connection, DNS failure) translate into proxy/network diagnostics instead of a raw dial error.
• ark update --check --refresh fails fast with a neutral, localized "registry unreachable" hint (network / proxy / DNS guidance, no internal mirror names) instead of waiting out a bare transport timeout.

Observability

• Command/API/GenAI metric series gain profile_type / profile_region labels mirroring the arktui profile dimensions (team plans collapse to their base plan; empty fields are omitted).
• Long-running poll loops (+gen --wait, train finetune watch, dataset poll, agent file activation wait, train finetune logs --follow) keep bounded, full-coverage traces via doubling-distance span sampling instead of dropping spans after the first 16 polls. Polling requests still count toward API/GenAI metrics.
• Error classification: identity/config failures (re-auth required, missing refresh token, not-configured installs), broker 401/403, translated errors with a server cause on the chain, unregistered business types (exit-code fallback), and mispriced exit codes (service_unavailable, wait timeouts) are now labeled correctly instead of collapsing into unknown/cli. not_found is attributed to the caller.
• TEA fail_reason truncation is UTF-8 safe, and Docs transport failures report a bounded category instead of URLs that may embed credentials or signed query strings.

Content generation (ark +gen)

• Asset materialization (upload/presign + reachability precheck) runs with bounded concurrency (4), keeping input order and reporting the lowest failing index — multi-asset submits no longer stall behind N × worst-case timeouts when the machine has no route to TOS.

Quota rebalance

• Removed the hard block that rejected target endpoints below their observed 7-day RPM/TPM peak; legitimate scale-down migrations are no longer blocked. Donor-side peak estimation and the "must change / must not decrease" business gates are unchanged.

Docs reading (ark docs)

• Volc public docs are read from the canonical Markdown URL for the page route (SHA-verified), with old snapshots kept working; prompts now distinguish the public-document link from the Markdown source. Failure recovery guidance and completed-read state prioritization are part of the Docs skill.

Profiles & auth (Volc)

• profile models refresh re-pulls the VirtualModelID direct-model catalog scoped to the profile's Edition + PlanTier.
• First-login / plan detection builds text-model fetchers from the plan-scoped VirtualModelID actions with Edition + tier context.
• Agent Plan image model list keeps doubao-seedream-5.0-pro as the default with doubao-seedream-5.0-lite available (a flash swap was reverted before release).

Skills (resolved Volc bundle)

• arkcli-agent: new Dream reference (references/dream.md), BYOK reference, model-config guidance, session-files/session-upgrade updates, Todo write reference, and refreshed evals.
• arkcli-plans: dual-catalog model query modes, agreement-signing reference updated for the control-plane identity criteria.
• arkcli-api-explorer: embedding actions table now documents text vs multimodal endpoints plus model-ID discovery and an error-recovery table.
• arkcli-docs: canonical Markdown routing, failure-mode recovery, and seventeen qualified cases in evals.
• arkcli-profile / arkcli-resources / arkcli-helper: VirtualModelID data sources, per-plan Edition + BizInfo contract, helper wizard load-level labels.

Bug fixes

• Fixed direct models output as an empty array (not omitted) when a plan exposes none.
• Fixed large-integer JSON decoding in ark api and managed-agent payloads (no float64 precision loss).
• Fixed Windows CI failures from POSIX chmod-based failure injection tests (now skipped on Windows with GOOS guards on permission-bit assertions).