@tencent-ai/codebuddy-code 2.109.0 → 2.109.2

package/vendor/shim/sitecustomize.py

@@ -17,6 +17,7 @@ import json
 import os
 import stat
 import sys
+import tempfile
 import time
 
 # ---------------------------------------------------------------------------
@@ -275,6 +276,40 @@ if _SESSION_ID:
     _orig_path_rmdir = pathlib.Path.rmdir
     _report_path = os.environ.get("CODEBUDDY_SAFE_DELETE_REPORT_PATH")
 
+    def _path_for_compare(path):
+        return os.path.normcase(os.path.abspath(path))
+
+    def _is_usable_temp_root(path):
+        try:
+            root = _path_for_compare(path)
+            if os.path.dirname(root) == root:
+                return False
+            return os.path.isdir(root)
+        except Exception:
+            return False
+
+    def _build_os_tmp_dirs():
+        candidates = [
+            tempfile.gettempdir(),
+        ]
+        if sys.platform != "win32":
+            candidates.append("/tmp")
+            candidates.append("/private/tmp")
+
+        roots = []
+        seen = set()
+        for candidate in candidates:
+            if not candidate or not _is_usable_temp_root(candidate):
+                continue
+            root = _path_for_compare(candidate)
+            if root in seen:
+                continue
+            seen.add(root)
+            roots.append(root)
+        return roots
+
+    _os_tmp_dirs = _build_os_tmp_dirs()
+
     def _record_trash(abs_path):
         if not _report_path:
             return
@@ -388,6 +423,20 @@ if _SESSION_ID:
         except OSError:
             return False
 
+    def _is_under_os_tmp_dir(abs_path):
+        try:
+            target = _path_for_compare(os.fsdecode(abs_path))
+        except (TypeError, UnicodeError):
+            return False
+        for tmp_dir in _os_tmp_dirs:
+            try:
+                rel = os.path.relpath(target, tmp_dir)
+            except ValueError:
+                continue
+            if rel not in ("", ".") and rel != ".." and not rel.startswith(".." + os.sep) and not os.path.isabs(rel):
+                return True
+        return False
+
     # -----------------------------------------------------------------------
     # 包装：os.remove / os.unlink （文件，不能是目录）
     # -----------------------------------------------------------------------
@@ -397,6 +446,8 @@ if _SESSION_ID:
         if dir_fd is not None:
             return _orig_remove(path, dir_fd=dir_fd)
         abs_path = os.path.abspath(os.fspath(path))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_remove(path)
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_remove(path)  # ENOENT / stat 错误 → 让原生抛
@@ -412,6 +463,8 @@ if _SESSION_ID:
         if dir_fd is not None:
             return _orig_rmdir(path, dir_fd=dir_fd)
         abs_path = os.path.abspath(os.fspath(path))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_rmdir(path)
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_rmdir(path)  # ENOENT / stat 错误
@@ -434,6 +487,11 @@ if _SESSION_ID:
                 path, ignore_errors=ignore_errors, onerror=onerror, **kwargs
             )
 
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_shutil_rmtree(
+                path, ignore_errors=ignore_errors, onerror=onerror, **kwargs
+            )
+
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_shutil_rmtree(
@@ -461,6 +519,8 @@ if _SESSION_ID:
 
     def _safe_path_unlink(self, missing_ok=False):
         abs_path = os.path.abspath(str(self))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_path_unlink(self, missing_ok=missing_ok)
         st = _safe_lstat(abs_path)
         if not st:
             if st is None and missing_ok:
@@ -472,6 +532,8 @@ if _SESSION_ID:
 
     def _safe_path_rmdir(self):
         abs_path = os.path.abspath(str(self))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_path_rmdir(self)
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_path_rmdir(self)  # ENOENT / stat 错误 → 让原生抛