@tencent-ai/agent-sdk 0.3.186 → 0.3.188-dev.368febf.202606232001

package/cli/vendor/shim/sitecustomize.py

@@ -17,6 +17,7 @@ import json
 import os
 import stat
 import sys
+import tempfile
 import time
 
 # ---------------------------------------------------------------------------
@@ -275,6 +276,40 @@ if _SESSION_ID:
     _orig_path_rmdir = pathlib.Path.rmdir
     _report_path = os.environ.get("CODEBUDDY_SAFE_DELETE_REPORT_PATH")
 
+    def _path_for_compare(path):
+        return os.path.normcase(os.path.abspath(path))
+
+    def _is_usable_temp_root(path):
+        try:
+            root = _path_for_compare(path)
+            if os.path.dirname(root) == root:
+                return False
+            return os.path.isdir(root)
+        except Exception:
+            return False
+
+    def _build_os_tmp_dirs():
+        candidates = [
+            tempfile.gettempdir(),
+        ]
+        if sys.platform != "win32":
+            candidates.append("/tmp")
+            candidates.append("/private/tmp")
+
+        roots = []
+        seen = set()
+        for candidate in candidates:
+            if not candidate or not _is_usable_temp_root(candidate):
+                continue
+            root = _path_for_compare(candidate)
+            if root in seen:
+                continue
+            seen.add(root)
+            roots.append(root)
+        return roots
+
+    _os_tmp_dirs = _build_os_tmp_dirs()
+
     def _record_trash(abs_path):
         if not _report_path:
             return
@@ -289,6 +324,43 @@ if _SESSION_ID:
         except Exception:
             pass
 
+    def _exit_bulk_guard_control(message):
+        try:
+            sys.stderr.write(message)
+            if not message.endswith("\n"):
+                sys.stderr.write("\n")
+            sys.stderr.flush()
+        finally:
+            raise SystemExit(1)
+
+    def _check_bulk_delete_guard(abs_path):
+        guard_path = os.environ.get("CODEBUDDY_SAFE_DELETE_BULK_GUARD")
+        node_bin = os.environ.get("CODEBUDDY_NODE_BIN")
+        if not os.environ.get("CODEBUDDY_SAFE_DELETE_BULK_STATE_DIR") \
+                or not os.environ.get("CODEBUDDY_TOOL_CALL_ID"):
+            return
+        if not guard_path or not node_bin or not os.path.isfile(guard_path):
+            _exit_bulk_guard_control(
+                "[safe-delete][SAFE_DELETE_BULK_GUARD_ERROR] msg=helper-unavailable guard=%s"
+                % (guard_path or "unset")
+            )
+        env = dict(os.environ)
+        env["NODE_OPTIONS"] = ""
+        try:
+            result = subprocess.run(
+                [node_bin, guard_path, "check", "--target", abs_path],
+                capture_output=True, text=True, timeout=10, env=env
+            )
+        except Exception as e:
+            _exit_bulk_guard_control(
+                "[safe-delete][SAFE_DELETE_BULK_GUARD_ERROR] %s" % e
+            )
+        if result.returncode != 0:
+            _exit_bulk_guard_control(
+                result.stderr.strip()
+                or "[safe-delete][SAFE_DELETE_BULK_GUARD_ERROR] exit %d" % result.returncode
+            )
+
     # -----------------------------------------------------------------------
     # genie-trash native binary 支持（优先路径，不可用自动降级）
     # 优先使用 GENIE_TRASH_DIR 环境变量（由 buildSafeDeleteEnv() 注入），
@@ -366,6 +438,7 @@ if _SESSION_ID:
             except Exception:
                 pass
             raise OSError(message)
+        _check_bulk_delete_guard(abs_path)
         if _try_trash_via_binary(abs_path):
             _record_trash(abs_path)
             return True
@@ -388,6 +461,20 @@ if _SESSION_ID:
         except OSError:
             return False
 
+    def _is_under_os_tmp_dir(abs_path):
+        try:
+            target = _path_for_compare(os.fsdecode(abs_path))
+        except (TypeError, UnicodeError):
+            return False
+        for tmp_dir in _os_tmp_dirs:
+            try:
+                rel = os.path.relpath(target, tmp_dir)
+            except ValueError:
+                continue
+            if rel not in ("", ".") and rel != ".." and not rel.startswith(".." + os.sep) and not os.path.isabs(rel):
+                return True
+        return False
+
     # -----------------------------------------------------------------------
     # 包装：os.remove / os.unlink （文件，不能是目录）
     # -----------------------------------------------------------------------
@@ -397,6 +484,8 @@ if _SESSION_ID:
         if dir_fd is not None:
             return _orig_remove(path, dir_fd=dir_fd)
         abs_path = os.path.abspath(os.fspath(path))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_remove(path)
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_remove(path)  # ENOENT / stat 错误 → 让原生抛
@@ -412,6 +501,8 @@ if _SESSION_ID:
         if dir_fd is not None:
             return _orig_rmdir(path, dir_fd=dir_fd)
         abs_path = os.path.abspath(os.fspath(path))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_rmdir(path)
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_rmdir(path)  # ENOENT / stat 错误
@@ -434,6 +525,11 @@ if _SESSION_ID:
                 path, ignore_errors=ignore_errors, onerror=onerror, **kwargs
             )
 
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_shutil_rmtree(
+                path, ignore_errors=ignore_errors, onerror=onerror, **kwargs
+            )
+
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_shutil_rmtree(
@@ -461,6 +557,8 @@ if _SESSION_ID:
 
     def _safe_path_unlink(self, missing_ok=False):
         abs_path = os.path.abspath(str(self))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_path_unlink(self, missing_ok=missing_ok)
         st = _safe_lstat(abs_path)
         if not st:
             if st is None and missing_ok:
@@ -472,6 +570,8 @@ if _SESSION_ID:
 
     def _safe_path_rmdir(self):
         abs_path = os.path.abspath(str(self))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_path_rmdir(self)
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_path_rmdir(self)  # ENOENT / stat 错误 → 让原生抛

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tencent-ai/agent-sdk",
-  "version": "0.3.186",
+  "version": "0.3.188-dev.368febf.202606232001",
   "description": "CodeBuddy Code SDK for JavaScript/TypeScript",
   "main": "lib/index.js",
   "typings": "lib/index.d.ts",
@@ -31,6 +31,7 @@
     "zod": "^4.0.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "dev"
   }
 }