@tencent-ai/agent-sdk 0.3.269 → 0.3.270

package/cli/dist-server/types/node/agent-task/agent-task.d.ts

@@ -207,6 +207,7 @@ export declare class AgentTaskImpl implements AgentTask {
     getResult(): AgentTaskExecutionResult | undefined;
     getMainSession(): Session;
     getSubAgentSession(): Session | undefined;
+    private rebindIdleQueueDrain;
     releaseSubAgentSession(): void;
     private releaseSubAgentRuntime;
     getInvocationIdentity(): AgentTaskInvocationIdentity;

package/cli/dist-server/types/node/permission/brokered-sandbox/host-service.d.ts

@@ -20,6 +20,7 @@ export declare class BrokeredSandboxHostServiceImpl {
     protected readonly sandboxCenterClient?: SandboxCenterIpcClient;
     protected readonly sessionManager?: SessionManager;
     requestFileToken(params: BrokeredSandboxFileTokenParams): Promise<BrokeredSandboxFileTokenResult>;
+    private canDeferDirectoryRead;
     protected issueFileToken(params: {
         operation: 'read' | 'write';
         tokenPath: string;

package/cli/dist-server/types/node/permission/sandbox-orchestrator.d.ts

@@ -1,6 +1,7 @@
 import { Logger } from '@celljs/core';
 import { type Session, SessionManager } from '../../vendor/cbc-core/node/index.js';
 import { Workspace } from '@genie/runtime';
+import type { DecisionRecord } from '@genie/sandbox-cli/protocol';
 import { type BashSandboxManager as IBashSandboxManager } from '../bash-sandbox/bash-sandbox-protocol';
 import { type CommandParserService as ICommandParserService } from '../command-parser/command-parser-protocol';
 import { type ISandboxCLILifecycle } from '../sandbox-cli/sandbox-cli-lifecycle-protocol';
@@ -15,7 +16,7 @@ import { type RiskAssessment } from './file-policy-assessment';
 import { type SandboxAuditService as ISandboxAuditService } from './sandbox-audit-service';
 import { type SandboxExecPolicy as ISandboxExecPolicy } from './sandbox-exec-policy-protocol';
 import { type SandboxOrchestrator as ISandboxOrchestrator, type SandboxOrchestratorParams, type SandboxOrchestratorResult, type SandboxTelemetryContext } from './sandbox-orchestrator-protocol';
-export declare function resolveSingleFileApprovalOperation(assessments: readonly RiskAssessment[]): Exclude<FileSafetyOperation, 'access'> | undefined;
+export declare function resolveSingleFileApprovalOperation(assessments: readonly RiskAssessment[], decisionRecords?: readonly DecisionRecord[]): Exclude<FileSafetyOperation, 'access'> | undefined;
 /**
  * 在 execute 入口捕获执行所属会话，权限判断、审批记录和审计均使用同一会话。
  * 权限读取所属 session 的当前设置，不使用 telemetry 中的派生值。

package/cli/dist-server/types/node/server/formats/acp/acp-trace-context.d.ts

@@ -29,3 +29,5 @@ export declare function getSessionAcpTraceContext(source: AcpTraceContextSource
  * Other vendor metadata is preserved.
  */
 export declare function withCanonicalAcpTraceContext(meta: Record<string, unknown> | undefined, traceContext: Partial<AcpTraceContext> | undefined): Record<string, unknown>;
+/** Retains the completed request's display ID without making its span a replay parent. */
+export declare function withAcpReplayTraceMeta(meta: Record<string, unknown> | undefined): Record<string, unknown>;

package/cli/dist-server/types/node/server/types.d.ts

@@ -142,7 +142,14 @@ export type QueryInput = string | unknown[] | {
     readonly type: 'compact';
 };
 export interface QueryOptions {
-    /** W3C trace context and baggage captured for this individual query. */
+    /**
+     * Opaque request metadata, captured for this query. The reserved W3C keys
+     * propagate through this request and its children using the turn context.
+     * Unknown extensions do not become session settings or arbitrary HTTP headers.
+     * `baggage: 'x-agent-intent=ask'` supplies attribution, not permissions.
+     * Host baggage and intent mapping are sent only to built-in model endpoints.
+     * The legacy `codebuddy.ai.mode` extension fills the scene only when baggage does not supply it.
+     */
     _meta?: Record<string, unknown> | null;
     /**
      * Working directory for the session. Defaults to process.cwd().

package/cli/dist-server/types/node/utils/clipboard-utils.d.ts

@@ -106,7 +106,7 @@ export declare abstract class ClipboardUtils {
      */
     private static readImageLinux;
     /**
-     * 读取剪贴板文本。目前仅 Windows 支持；不支持或读取失败时返回 undefined。
+     * 读取 Windows 剪贴板文本（含 WSL）；不支持或读取失败时返回 undefined。
      */
     static readTextFromClipboard(): Promise<string | undefined>;
     private static readTextFromClipboardWindows;

package/cli/dist-server/types/node/utils/image-preparation-guard.d.ts

@@ -30,7 +30,11 @@ export declare function validateImageDimensionsBeforeDecode(buffer: Buffer, mime
 export declare function validateWebPStructure(buffer: Buffer): string | undefined;
 /**
  * 以 fail-closed 方式校验 PNG 的 chunk 结构：签名、IHDR 字段合法性、chunk 边界、
- * IDAT 存在、IEND 终止且无尾随数据。
+ * IDAT 存在、以 IEND 终止。
+ *
+ * IEND 之后的字节不属于 PNG 数据流，不再解析：规范虽要求 IEND 为最后内容，但 libpng
+ * 与浏览器读到 IEND 即停，实际文件（如带尾随字节的导出 APNG）也会携带这类尾巴。
+ * 这里若拒绝，整张图会在历史与模型请求中被替换成占位文本。
  *
  * 只走容器结构、不解 zlib 像素流，代价是 O(chunk 数) 而不是整图解码。
  */

package/cli/dist-server/types/node/utils/request-scene.d.ts

@@ -0,0 +1,5 @@
+import { type Session } from '../../vendor/cbc-core/node/index.js';
+/** Query defaults share the existing W3C baggage scope; no separate metadata store. */
+export declare function requestSceneBaggage(meta: Record<string, unknown> | null | undefined): Record<string, string>;
+/** Scene is attribution only; it must not change permission mode or execution settings. */
+export declare function resolveRequestScene(session: Pick<Session, 'meta'>): string | undefined;

package/cli/dist-server/types/vendor/cbc-core/node/utils/history-utils.d.ts

@@ -319,18 +319,43 @@ export declare abstract class HistoryUtils {
     static containsUserContext(input: AgentInputItem[], userContext: string): boolean;
     static filterTruncatedHistory(history: AgentInputItem[]): AgentInputItem[];
     /**
-     * 用户取消的普通轮次只保留在 transcript 中，不再进入下一轮模型输入。
+     * 把用户取消的轮次投影成模型可见的"被打断"语义，对齐 Codex
+     * （`core/src/tasks/mod.rs` 在 TurnAbortReason::Interrupted 时记入一条
+     * user 角色的 `<turn_aborted>`）：原 prompt、已发生的工具记录都留在模型
+     * 输入里，取消边界本身换成一条 user 角色的中断说明。
      *
-     * 仅处理已落历史的标准取消形态：本轮 user 之后追加了一条 skipRun 的
-     * assistant "Interrupted by user"。为避免影响 /insights 等特殊顺序，只有当
-     * user→取消边界之间没有已完成 assistant 回复时才剔除该段。
+     * 于是下一轮模型看到的是「原问题 → 中断说明 → 新问题」三段，既知道上一个
+     * 请求没做完，也不会把它当成仍待执行的指令。
      *
-     * 该段内的 function_call / function_call_result 会被保留：取消作废的是用户
-     * 的"待执行意图"，而工具调用已经产生过副作用，属于既成事实。
+     * 只处理已落历史的标准取消形态：skipRun 的 assistant "Interrupted by user"
+     * （由 `interruption-service` 写入），且该边界确实终结了一个**尚未得到回复**的
+     * 用户轮次 —— 沿 parentId 能找到真实 user、user 在边界之前、两者之间没有已完成的
+     * assistant 回复。这三个条件沿用原过滤器，是 marker 能成立的因果前提：文案断言
+     * 的是"用户打断了上一轮"，若边界挂在一个已经正常回复完的轮次后面（`/insights`
+     * 等特殊顺序、恢复流程留下的错位记录），投影出去就是在对模型说假话。
+     *
+     * 守卫不通过时原样返回该条，交回 `filterApiErrorMessages` 按基线行为剔除，
+     * 模型侧语义与改动前完全一致。
+     *
+     * 不落盘、不改 transcript：UI 继续显示原来那条 assistant 占位。
      */
-    static filterCancelledPromptHistory(history: AgentInputItem[]): AgentInputItem[];
+    static projectCancelledTurnMarker(history: AgentInputItem[]): AgentInputItem[];
     private static findCancelledTurnUserId;
-    private static hasCompletedAssistantBetween;
+    /**
+     * 这一段里是否已经出现过**结束该轮的** assistant 答复。
+     *
+     * 不能只看"有没有 completed 的 assistant message"：模型调用工具前常先写一句叙述
+     * （tool-call carrier，真实 jsonl 里就是 `status: 'completed'` 的独立 message，
+     * 见 `history-utils.parallel-tool-calls.spec.ts`）。那句话不是对用户的答复，
+     * 这一轮还在继续 —— 所以每遇到一个 `function_call` 就把"已答复"重置掉。
+     *
+     * 依据的是一轮的结构：assistant message 与 function_call 交替，只有**后面再没有
+     * 工具调用**的那条 assistant message 才是对用户的答复。于是三种形态各自判对：
+     *   - `user → 答复(completed) → 边界`                 → 已答复，边界错位，不投影
+     *   - `user → carrier → call → result → 边界`         → 未答复（工具跑完但还没回答），投影
+     *   - `user → carrier → call → result → 答复 → 边界`  → 已答复，边界错位，不投影
+     */
+    private static hasCompletedAssistantReplyBetween;
     /**
      * 在每次模型请求前应用 content-filter 清理:
      * 上一轮模型响应若以 finish_reason=content_filter 结束,

package/cli/dist-server/types/vendor/cbc-core/node/utils/input-item-utils.d.ts

@@ -254,6 +254,33 @@ export declare abstract class InputItemUtils {
     static isAssistantMessage(item: AgentInputItem): boolean;
     static isSessionSeparatorItem(item: AgentInputItem): boolean;
     static isUserInterrupted(item: AgentInputItem): boolean;
+    static readonly TURN_ABORTED_TAG_OPEN = "<turn_aborted>";
+    static readonly TURN_ABORTED_TAG_CLOSE = "</turn_aborted>";
+    /**
+     * 取消轮在模型输入里的说明文案。
+     *
+     * 逐字沿用 Codex `core/src/context/turn_aborted.rs` 的 INTERRUPTED_GUIDANCE，
+     * 只把它自家的 "unified exec processes" 换成本 CLI 真实存在的 "background tasks"
+     * （Bash 的 run_in_background、后台 Agent）——照抄不存在的概念会误导模型。
+     */
+    static readonly TURN_ABORTED_GUIDANCE: string;
+    /**
+     * 把一条已落史的取消边界（assistant "Interrupted by user"）投影成模型可见的
+     * user 角色中断标记，对齐 Codex：原 prompt 留在历史里，后面紧跟一条
+     * `<turn_aborted>` 说明，下一轮用户输入再接在后面。
+     *
+     * 只用于构造当轮模型输入，不落盘：transcript 与 UI 继续显示原来那条 assistant
+     * 占位（见 `interruption-service`），所以 id / parentId 沿用边界项——既让
+     * 父链遍历仍然成立，也保证同一段历史每轮投影出的 id 稳定（换成随机 id 会让
+     * 模型输入每轮都变，破坏 prompt 缓存）。
+     *
+     * providerData 整体继承而不是重建：投影只改"角色 + 文本"这两件事，边界上的
+     * 结构化标记（`agent` / `truncated` 等）仍被后续管线用来做过滤决策
+     * （`replaceCompactWithSummary` 认 `agent`、`filterTruncatedHistory` 认
+     * `truncated`），重建一个干净 providerData 会让这些决策静默改变。
+     */
+    static createTurnAbortedMarker(boundaryItem: AgentInputItem): UserMessageItem;
+    static isTurnAbortedMarker(item: AgentInputItem): item is UserMessageItem;
     static isSuccessfulFunctionCallResultItem(item: AgentInputItem): item is FunctionCallResultItem;
     static isCompactBoundaryMessage(item: AgentInputItem): boolean;
     /**

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tencent-ai/codebuddy-code",
-  "version": "2.161.0",
+  "version": "2.161.1",
   "description": "Use CodeBuddy, Tencent's AI assistant, right from your terminal. CodeBuddy can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.",
   "main": "lib/node/index.js",
   "typings": "lib/node/index.d.ts",
@@ -56,9 +56,9 @@
     "@lydell/node-pty-linux-x64": "1.2.0-beta.14",
     "@lydell/node-pty-win32-arm64": "1.2.0-beta.14",
     "@lydell/node-pty-win32-x64": "1.2.0-beta.14",
-    "@tencent-ai/sandbox-cli-darwin-arm64": "5.8.0-beta.7",
-    "@tencent-ai/sandbox-cli-darwin-x64": "5.8.0-beta.7",
-    "@tencent-ai/sandbox-cli-win32-x64": "5.8.0-beta.7",
+    "@tencent-ai/sandbox-cli-darwin-arm64": "5.8.0-beta.14",
+    "@tencent-ai/sandbox-cli-darwin-x64": "5.8.0-beta.14",
+    "@tencent-ai/sandbox-cli-win32-x64": "5.8.0-beta.14",
     "esbuild": "^0.25.12"
   },
   "keywords": [

package/cli/product.cloudhosted.json

@@ -811,6 +811,6 @@
     "SelectImage": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "72b5bf7095507109cbfa540e735b7b33548e3f73",
-  "date": "2026-09-30T17:29:57.206Z"
+  "commit": "5efcb9ac1be729299d2a9a55f51d68ca95f017c1",
+  "date": "2026-10-01T16:36:50.147Z"
 }

package/cli/product.internal.json

@@ -1071,6 +1071,6 @@
       }
     }
   },
-  "commit": "72b5bf7095507109cbfa540e735b7b33548e3f73",
-  "date": "2026-09-30T17:29:57.231Z"
+  "commit": "5efcb9ac1be729299d2a9a55f51d68ca95f017c1",
+  "date": "2026-10-01T16:36:50.118Z"
 }

package/cli/product.ioa.json

@@ -1533,6 +1533,6 @@
       }
     }
   },
-  "commit": "72b5bf7095507109cbfa540e735b7b33548e3f73",
-  "date": "2026-09-30T17:29:57.230Z"
+  "commit": "5efcb9ac1be729299d2a9a55f51d68ca95f017c1",
+  "date": "2026-10-01T16:36:50.084Z"
 }

package/cli/product.json

@@ -2239,6 +2239,6 @@
       "description": "tool-a2acanceltask-description"
     }
   ],
-  "commit": "72b5bf7095507109cbfa540e735b7b33548e3f73",
-  "date": "2026-09-30T17:29:57.206Z"
+  "commit": "5efcb9ac1be729299d2a9a55f51d68ca95f017c1",
+  "date": "2026-10-01T16:36:50.103Z"
 }

package/cli/product.selfhosted.json

@@ -372,6 +372,6 @@
     "ScheduledTasks": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "72b5bf7095507109cbfa540e735b7b33548e3f73",
-  "date": "2026-09-30T17:29:57.242Z"
+  "commit": "5efcb9ac1be729299d2a9a55f51d68ca95f017c1",
+  "date": "2026-10-01T16:36:50.075Z"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tencent-ai/agent-sdk",
-  "version": "0.3.269",
+  "version": "0.3.270",
   "description": "CodeBuddy Code SDK for JavaScript/TypeScript",
   "main": "lib/index.js",
   "typings": "lib/index.d.ts",

package/cli/dist/web-ui/assets/architecture-7GRP2DOG-CHYM9JTs.js

@@ -1 +0,0 @@
-import"./chunk-FOHPRMQF-DzxwRta7.js";import{M as e}from"./mermaid-parser.core-GTP4u3FU.js";export{e as createArchitectureServices};

package/cli/dist/web-ui/assets/channel-DtDG5p59.js

@@ -1 +0,0 @@
-import{ot as e,st as t}from"./chunk-O7XYJQB3-DNIHMsy6.js";var n=(n,r)=>t.lang.round(e.parse(n)[r]);export{n as t};

package/cli/dist/web-ui/assets/eventmodeling-NTZA5JFV-PAdtPpRo.js

@@ -1 +0,0 @@
-import"./chunk-FOHPRMQF-DzxwRta7.js";import{O as e}from"./mermaid-parser.core-GTP4u3FU.js";export{e as createEventModelingServices};

package/cli/dist/web-ui/assets/flowDiagram-KWPJA3E3-EJkyCIxy.js

@@ -1 +0,0 @@
-import"./src-oBChb5qS.js";import"./chunk-O7XYJQB3-DNIHMsy6.js";import"./chunk-ZIGJFQKS-C33Iz6Fl.js";import"./chunk-742MDFTN-BTBNbBjA.js";import"./chunk-MBY4JIJT-WW7QGbUd.js";import"./chunk-7PRAP22T-BWJP0sRU.js";import"./chunk-7INBJB4K-CnYo9mzQ.js";import"./chunk-5DYCD2WN-BvGB0nx-.js";import"./chunk-Z7XXMR3K-xCwg-Yew.js";import"./chunk-GWA4HPMP-DPP9EzOc.js";import"./chunk-XXDRQBXY-BvKO0v-W.js";import"./chunk-WEXAMYUT-DPGJtaXE.js";import"./chunk-UA2S7LBM-FmyRAjon.js";import{n as e}from"./chunk-7M6MHVWA-ChPc3AIy.js";import"./mermaid.core-CNUJl-CG.js";export{e as diagram};

package/cli/dist/web-ui/assets/loader-circle-1kyJNWeb.js

@@ -1 +0,0 @@
-import{i as e}from"./use-i18n-BCKBlfpd.js";var t=e(`loader-circle`,[[`path`,{d:`M21 12a9 9 0 1 1-6.219-8.56`,key:`13zald`}]]);export{t};

package/cli/dist/web-ui/assets/power-CbA3xFVD.js

@@ -1 +0,0 @@
-import{i as e}from"./use-i18n-BCKBlfpd.js";var t=e(`power`,[[`path`,{d:`M12 2v10`,key:`mnfbl`}],[`path`,{d:`M18.4 6.6a9 9 0 1 1-12.77.04`,key:`obofu9`}]]);export{t};

package/cli/dist/web-ui/assets/railroad-abnf-HS5TGJTU-C9Q7Ymc5.js

@@ -1 +0,0 @@
-import"./chunk-FOHPRMQF-DzxwRta7.js";import{m as e}from"./mermaid-parser.core-GTP4u3FU.js";export{e as createRailroadAbnfServices};

package/cli/dist/web-ui/assets/railroad-ebnf-LZEXJU2U-Bg_FzoOI.js

@@ -1 +0,0 @@
-import"./chunk-FOHPRMQF-DzxwRta7.js";import{f as e}from"./mermaid-parser.core-GTP4u3FU.js";export{e as createRailroadEbnfServices};

package/cli/dist/web-ui/assets/railroad-peg-WCYAUIDC-cvFGmoWK.js

@@ -1 +0,0 @@
-import"./chunk-FOHPRMQF-DzxwRta7.js";import{u as e}from"./mermaid-parser.core-GTP4u3FU.js";export{e as createRailroadPegServices};

package/cli/dist/web-ui/assets/swimlanesDiagram-TC7HE7FX-Bopn2-Vs.js

@@ -1,8 +0,0 @@
-import{n as e}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./src-oBChb5qS.js";import"./chunk-O7XYJQB3-DNIHMsy6.js";import"./chunk-ZIGJFQKS-C33Iz6Fl.js";import"./chunk-742MDFTN-BTBNbBjA.js";import"./chunk-MBY4JIJT-WW7QGbUd.js";import"./chunk-7PRAP22T-BWJP0sRU.js";import"./chunk-7INBJB4K-CnYo9mzQ.js";import"./chunk-5DYCD2WN-BvGB0nx-.js";import"./chunk-Z7XXMR3K-xCwg-Yew.js";import"./chunk-GWA4HPMP-DPP9EzOc.js";import"./chunk-XXDRQBXY-BvKO0v-W.js";import"./chunk-WEXAMYUT-DPGJtaXE.js";import"./chunk-UA2S7LBM-FmyRAjon.js";import{r as t,t as n}from"./chunk-7M6MHVWA-ChPc3AIy.js";import"./mermaid.core-CNUJl-CG.js";var r=n({styles:e(e=>`${t(e)}
-  .swimlane.cluster:not([data-color-id]) rect {
-    stroke: ${e.clusterBorder} !important;
-  }
-  [data-look="neo"].cluster rect {
-    filter: none;
-  }
-`,`getStyles`)});export{r as diagram};