@tencent-ai/agent-sdk 0.3.187 → 0.3.188-dev.368febf.202606232001

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tencent-ai/codebuddy-code",
-  "version": "2.109.1",
+  "version": "2.109.2-dev.368febf.202606232001",
   "description": "Use CodeBuddy, Tencent's AI assistant, right from your terminal. CodeBuddy can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.",
   "main": "lib/node/index.js",
   "typings": "lib/node/index.d.ts",
@@ -42,7 +42,8 @@
     "url": "https://cnb.cool/codebuddy/codebuddy-code/-/issues"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "dev"
   },
   "scripts": {},
   "devDependencies": {}

package/cli/product.cloudhosted.json

@@ -824,6 +824,6 @@
     "SelectImage": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "bd65832d49c4ca8fac14fbf709684cc34f73f9a3",
-  "date": "2026-06-22T01:24:08.210Z"
+  "commit": "368febf4656d2e766c98a193440453fb331e76f9",
+  "date": "2026-06-23T12:00:07.090Z"
 }

package/cli/product.internal.json

@@ -703,6 +703,6 @@
       }
     }
   },
-  "commit": "bd65832d49c4ca8fac14fbf709684cc34f73f9a3",
-  "date": "2026-06-22T01:24:08.206Z"
+  "commit": "368febf4656d2e766c98a193440453fb331e76f9",
+  "date": "2026-06-23T12:00:07.080Z"
 }

package/cli/product.ioa.json

@@ -1106,6 +1106,6 @@
       }
     }
   },
-  "commit": "bd65832d49c4ca8fac14fbf709684cc34f73f9a3",
-  "date": "2026-06-22T01:24:08.207Z"
+  "commit": "368febf4656d2e766c98a193440453fb331e76f9",
+  "date": "2026-06-23T12:00:07.090Z"
 }

package/cli/product.json

@@ -1757,6 +1757,6 @@
       "deferLoading": true
     }
   ],
-  "commit": "bd65832d49c4ca8fac14fbf709684cc34f73f9a3",
-  "date": "2026-06-22T01:24:08.211Z"
+  "commit": "368febf4656d2e766c98a193440453fb331e76f9",
+  "date": "2026-06-23T12:00:07.089Z"
 }

package/cli/product.selfhosted.json

@@ -339,6 +339,6 @@
     "ScheduledTasks": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "bd65832d49c4ca8fac14fbf709684cc34f73f9a3",
-  "date": "2026-06-22T01:24:08.207Z"
+  "commit": "368febf4656d2e766c98a193440453fb331e76f9",
+  "date": "2026-06-23T12:00:07.079Z"
 }

package/cli/vendor/shim/genie-safe-delete.cjs

@@ -37,6 +37,52 @@ if (!SESSION_ID) {
 const PLATFORM = process.platform; // 'darwin' | 'win32' | 'linux' | ...
 const REPORT_PATH = process.env.CODEBUDDY_SAFE_DELETE_REPORT_PATH;
 
+function normalizePathForCompare(filePath) {
+    const resolved = path.resolve(filePath);
+    return PLATFORM === 'win32' ? resolved.toLowerCase() : resolved;
+}
+
+function isUsableTempRoot(filePath) {
+    try {
+        const resolved = path.resolve(filePath);
+        if (path.parse(resolved).root === resolved) return false;
+        return fs.statSync(resolved).isDirectory();
+    } catch (_) {
+        return false;
+    }
+}
+
+function buildOsTmpDirs() {
+    const candidates = [
+        os.tmpdir(),
+    ];
+    if (PLATFORM !== 'win32') {
+        candidates.push('/tmp');
+        candidates.push('/private/tmp');
+    }
+
+    const roots = [];
+    const seen = new Set();
+    for (const candidate of candidates) {
+        if (!candidate || !isUsableTempRoot(candidate)) continue;
+        const root = normalizePathForCompare(candidate);
+        if (seen.has(root)) continue;
+        seen.add(root);
+        roots.push(root);
+    }
+    return roots;
+}
+
+const OS_TMP_DIRS = buildOsTmpDirs();
+
+function isUnderOsTmpDir(absPath) {
+    const target = normalizePathForCompare(absPath);
+    return OS_TMP_DIRS.some(root => {
+        const rel = path.relative(root, target);
+        return !!rel && rel !== '..' && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel);
+    });
+}
+
 function recordTrash(absPath) {
     if (!REPORT_PATH) return;
     try {
@@ -55,6 +101,34 @@ function recordTrash(absPath) {
     }
 }
 
+function checkBulkDeleteGuard(absPath) {
+    const guardPath = process.env.CODEBUDDY_SAFE_DELETE_BULK_GUARD;
+    const nodeBin = process.env.CODEBUDDY_NODE_BIN;
+    if (!process.env.CODEBUDDY_SAFE_DELETE_BULK_STATE_DIR || !process.env.CODEBUDDY_TOOL_CALL_ID) {
+        return;
+    }
+    if (!guardPath || !nodeBin || !fs.existsSync(guardPath)) {
+        throw new Error(`[safe-delete][SAFE_DELETE_BULK_GUARD_ERROR] msg=helper-unavailable guard=${guardPath || 'unset'}`);
+    }
+    try {
+        execFileSync(nodeBin, [guardPath, 'check', '--target', absPath], {
+            stdio: ['ignore', 'ignore', 'pipe'],
+            timeout: 10_000,
+            windowsHide: true,
+            env: {
+                ...process.env,
+                NODE_OPTIONS: '',
+            },
+        });
+    } catch (e) {
+        const detail = e && e.stderr ? String(e.stderr).trim() : '';
+        if (detail) {
+            throw new Error(detail);
+        }
+        throw new Error(`[safe-delete][SAFE_DELETE_BULK_GUARD_ERROR] ${(e && e.message) || String(e)}`);
+    }
+}
+
 // ---------------------------------------------------------------------------
 // 平台分发
 // ---------------------------------------------------------------------------
@@ -373,6 +447,7 @@ function writeTrashInfo(absPath, baseName) {
  * @param {string} absPath 绝对路径
  */
 function tryTrash(absPath) {
+    checkBulkDeleteGuard(absPath);
     trashItem(absPath); // 成功静默；失败抛错，调用方不应继续真删
     recordTrash(absPath);
     return true;
@@ -417,6 +492,7 @@ function toAbsPath(filePath) {
 function makeSyncWrapper(orig, requireDir) {
     return function (filePath, ...rest) {
         const absPath = toAbsPath(filePath);
+        if (isUnderOsTmpDir(absPath)) return orig(filePath, ...rest);
         if (requireDir) {
             const st = safeLstat(absPath);
             if (st === null) return orig(filePath, ...rest); // ENOENT → 原生抛
@@ -467,6 +543,7 @@ function makeCallbackWrapper(orig, requireDir) {
             return orig(filePath, ...rest);
         }
         const absPath = toAbsPath(filePath);
+        if (isUnderOsTmpDir(absPath)) return orig(filePath, ...rest);
 
         const st = safeLstat(absPath);
         if (st === null) return orig(filePath, ...rest); // ENOENT → 原生抛
@@ -495,6 +572,7 @@ function makeCallbackWrapper(orig, requireDir) {
 function makePromiseWrapper(orig, requireDir) {
     return async function (filePath, ...rest) {
         const absPath = toAbsPath(filePath);
+        if (isUnderOsTmpDir(absPath)) return orig(filePath, ...rest);
         const st = safeLstat(absPath);
         if (st === null) return orig(filePath, ...rest); // ENOENT → 原生抛
         if (st) {
@@ -519,6 +597,10 @@ function makePromiseWrapper(orig, requireDir) {
  *   throws     → 回收站操作失败（fail-closed），调用方不得真删
  */
 function tryRm(absPath, opts) {
+    if (isUnderOsTmpDir(absPath)) {
+        return { done: false };
+    }
+
     const recursive = !!(opts && opts.recursive);
     const force = !!(opts && opts.force);
 

package/cli/vendor/shim/safe-bin/safe-delete-common.sh

@@ -45,11 +45,115 @@ safe_delete_record_trash() {
         "$path_json" "$timestamp" >> "$CODEBUDDY_SAFE_DELETE_REPORT_PATH" 2>/dev/null || true
 }
 
+safe_delete_bulk_guard_check() {
+    [ "$#" -gt 0 ] || return 0
+    [ -n "${CODEBUDDY_SAFE_DELETE_BULK_STATE_DIR:-}" ] || return 0
+    [ -n "${CODEBUDDY_TOOL_CALL_ID:-}" ] || return 0
+    if [ -z "${CODEBUDDY_NODE_BIN:-}" ] || [ -z "${CODEBUDDY_SAFE_DELETE_BULK_GUARD:-}" ] || [ ! -f "$CODEBUDDY_SAFE_DELETE_BULK_GUARD" ]; then
+        echo "[safe-delete][SAFE_DELETE_BULK_GUARD_ERROR] msg=helper-unavailable guard=${CODEBUDDY_SAFE_DELETE_BULK_GUARD:-unset}" >&2
+        return 1
+    fi
+
+    local args=()
+    local p
+    for p in "$@"; do
+        args+=(--target "$(safe_delete_abs_path "$p")")
+    done
+    NODE_OPTIONS= "$CODEBUDDY_NODE_BIN" "$CODEBUDDY_SAFE_DELETE_BULK_GUARD" check "${args[@]}"
+}
+
 is_dir_empty() {
     local p="$1"
     [ -z "$(ls -A "$p" 2>/dev/null)" ]
 }
 
+safe_delete_normalize_path() {
+    local p="$1"
+    while [ "$p" != "/" ] && [ "${p%/}" != "$p" ]; do
+        p="${p%/}"
+    done
+    printf '%s' "$p"
+}
+
+safe_delete_to_unix_path_if_possible() {
+    local p="$1"
+    if command -v cygpath >/dev/null 2>&1; then
+        cygpath -u "$p" 2>/dev/null && return 0
+    fi
+    printf '%s' "$p"
+}
+
+safe_delete_resolve_os_tmp_dir() {
+    local tmp="${TMPDIR:-${TMP:-${TEMP:-/tmp}}}"
+    safe_delete_to_unix_path_if_possible "$tmp"
+}
+
+safe_delete_abs_path() {
+    local p="$1"
+    local abs
+    if command -v python3 >/dev/null 2>&1; then
+        abs="$(python3 -c 'import os,sys; print(os.path.abspath(sys.argv[1]))' "$p" 2>/dev/null)" && {
+            safe_delete_to_unix_path_if_possible "$abs"
+            return 0
+        }
+    elif command -v python >/dev/null 2>&1; then
+        abs="$(python -c 'import os,sys; print(os.path.abspath(sys.argv[1]))' "$p" 2>/dev/null)" && {
+            safe_delete_to_unix_path_if_possible "$abs"
+            return 0
+        }
+    fi
+    case "$p" in
+        /*|[A-Za-z]:/*) abs="$p" ;;
+        *)              abs="$PWD/$p" ;;
+    esac
+    abs="$(CDPATH= cd -P -- "$(dirname "$abs")" 2>/dev/null && printf '%s/%s' "$PWD" "$(basename "$abs")" || printf '%s' "$abs")"
+    safe_delete_to_unix_path_if_possible "$abs"
+}
+
+safe_delete_tmp_root_allowed() {
+    local root="$1"
+    [ -n "$root" ] || return 1
+    [ "$root" != "/" ] || return 1
+    [ -d "$root" ] || return 1
+    return 0
+}
+
+safe_delete_build_os_tmp_dirs() {
+    local seen="|" candidate root
+    for candidate in \
+        "$(safe_delete_resolve_os_tmp_dir)" \
+        "/tmp" \
+        "/private/tmp"
+    do
+        [ -n "$candidate" ] || continue
+        root="$(safe_delete_normalize_path "$(safe_delete_abs_path "$candidate")")"
+        safe_delete_tmp_root_allowed "$root" || continue
+        case "$seen" in
+            *"|$root|"*) ;;
+            *)
+                seen="${seen}${root}|"
+                printf '%s\n' "$root"
+                ;;
+        esac
+    done
+}
+
+SAFE_DELETE_OS_TMP_DIRS="$(safe_delete_build_os_tmp_dirs)"
+
+safe_delete_is_under_os_tmp_dir() {
+    local abs
+    abs="$(safe_delete_normalize_path "$(safe_delete_abs_path "$1")")"
+    while IFS= read -r tmp_dir; do
+        [ -n "$tmp_dir" ] || continue
+        case "$abs" in
+            "$tmp_dir"/*) return 0 ;;
+        esac
+    done <<EOF
+$SAFE_DELETE_OS_TMP_DIRS
+EOF
+    return 1
+}
+
 # ---- platform-specific trash helpers -----------------------------------------
 
 trash_darwin() {
@@ -260,11 +364,8 @@ trash_one() {
 
 try_trash() {
     local p="$1"
-    local abs="$p"
-    case "$abs" in
-        /*|[A-Za-z]:/*) ;;
-        *)              abs="$PWD/$abs" ;;
-    esac
+    local abs
+    abs="$(safe_delete_abs_path "$p")"
     if trash_one "$p"; then
         safe_delete_record_trash "$abs"
         return 0
@@ -329,6 +430,7 @@ safe_delete_rm() {
     fi
 
     local _exit=0
+    local trash_targets=()
     local p
     for p in "${targets[@]}"; do
         if [ -e "$p" ] || [ -L "$p" ]; then
@@ -344,9 +446,7 @@ safe_delete_rm() {
                     continue
                 fi
             fi
-            if ! try_trash "$p"; then
-                _exit=1
-            fi
+            trash_targets+=("$p")
         elif $force; then
             # -f: silently skip non-existent files (match real rm behavior)
             :
@@ -356,6 +456,22 @@ safe_delete_rm() {
             _exit=1
         fi
     done
+    if ! safe_delete_bulk_guard_check "${trash_targets[@]}"; then
+        return 1
+    fi
+    for p in "${trash_targets[@]}"; do
+        if safe_delete_is_under_os_tmp_dir "$p"; then
+            local native_args=()
+            $force && native_args+=("-f")
+            $recursive && native_args+=("-r")
+            $allow_dir && native_args+=("-d")
+            if ! "$REAL_RM" "${native_args[@]}" -- "$p"; then
+                _exit=1
+            fi
+        elif ! try_trash "$p"; then
+            _exit=1
+        fi
+    done
     return $_exit
 }
 
@@ -390,6 +506,14 @@ safe_delete_unlink() {
         return 1
     fi
 
+    if ! safe_delete_bulk_guard_check "$target"; then
+        return 1
+    fi
+    if safe_delete_is_under_os_tmp_dir "$target"; then
+        "$REAL_UNLINK" -- "$target"
+        return $?
+    fi
+
     try_trash "$target"
     return $?
 }
@@ -427,6 +551,7 @@ safe_delete_rmdir() {
     fi
 
     local _exit=0
+    local trash_targets=()
     local p
     for p in "${targets[@]}"; do
         if [ ! -e "$p" ] && [ ! -L "$p" ]; then
@@ -444,7 +569,17 @@ safe_delete_rmdir() {
             _exit=1
             continue
         fi
-        if ! try_trash "$p"; then
+        trash_targets+=("$p")
+    done
+    if ! safe_delete_bulk_guard_check "${trash_targets[@]}"; then
+        return 1
+    fi
+    for p in "${trash_targets[@]}"; do
+        if safe_delete_is_under_os_tmp_dir "$p"; then
+            if ! "$REAL_RMDIR" -- "$p"; then
+                _exit=1
+            fi
+        elif ! try_trash "$p"; then
             _exit=1
         fi
     done