@tencent-ai/agent-harness-linux-x64-musl 0.1.3

package/bin/vendor/shim/safe-bin/rm

@@ -0,0 +1,18 @@
+#!/bin/bash
+# safe-delete rm entrypoint.
+# Shared implementation lives in safe-delete-common.sh.
+
+set -o pipefail
+
+REAL_RM="${SAFE_DELETE_REAL_RM:-/bin/rm}"
+[ -x "$REAL_RM" ] || REAL_RM="/usr/bin/rm"
+
+# Zero-overhead: no sandbox session → pass through immediately
+[ -z "$CODEBUDDY_SESSION_ID" ] && [ -z "$CLAUDE_SESSION_ID" ] && exec "$REAL_RM" "$@"
+
+SELF_DIR="$(CDPATH= cd -- "$(dirname "$0")" && pwd)"
+# shellcheck source=/dev/null
+. "${SELF_DIR}/safe-delete-common.sh"
+
+safe_delete_main rm "$@"
+exit $?

package/bin/vendor/shim/safe-bin/rmdir

@@ -0,0 +1,18 @@
+#!/bin/bash
+# safe-delete rmdir entrypoint.
+# Shared implementation lives in safe-delete-common.sh.
+
+set -o pipefail
+
+REAL_RMDIR="${SAFE_DELETE_REAL_RMDIR:-/bin/rmdir}"
+[ -x "$REAL_RMDIR" ] || REAL_RMDIR="/usr/bin/rmdir"
+
+# Zero-overhead: no sandbox session → pass through immediately
+[ -z "$CODEBUDDY_SESSION_ID" ] && [ -z "$CLAUDE_SESSION_ID" ] && exec "$REAL_RMDIR" "$@"
+
+SELF_DIR="$(CDPATH= cd -- "$(dirname "$0")" && pwd)"
+# shellcheck source=/dev/null
+. "${SELF_DIR}/safe-delete-common.sh"
+
+safe_delete_main rmdir "$@"
+exit $?

package/bin/vendor/shim/safe-bin/safe-delete-bash-env.sh

@@ -0,0 +1,8 @@
+# genie-safe-delete bash environment — sourced via BASH_ENV for every bash subprocess.
+# Defines safe-bin wrappers to intercept shell file commands.
+if [ -n "${CODEBUDDY_SAFE_DELETE_BIN_DIR:-}" ]; then
+    rm() { "${CODEBUDDY_SAFE_DELETE_BIN_DIR}/rm" "$@"; }
+    unlink() { "${CODEBUDDY_SAFE_DELETE_BIN_DIR}/unlink" "$@"; }
+    rmdir() { "${CODEBUDDY_SAFE_DELETE_BIN_DIR}/rmdir" "$@"; }
+    export -f rm unlink rmdir
+fi