@tencent-ai/codebuddy-code 2.109.1 → 2.109.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tencent-ai/codebuddy-code",
-  "version": "2.109.1",
+  "version": "2.109.2",
   "description": "Use CodeBuddy, Tencent's AI assistant, right from your terminal. CodeBuddy can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.",
   "main": "lib/node/index.js",
   "typings": "lib/node/index.d.ts",

package/product.cloudhosted.json

@@ -824,6 +824,6 @@
     "SelectImage": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "bd65832d49c4ca8fac14fbf709684cc34f73f9a3",
-  "date": "2026-06-22T01:32:01.952Z"
+  "commit": "58a450bdac648b0df71fe5e176e35583306d6003",
+  "date": "2026-06-23T04:53:58.543Z"
 }

package/product.internal.json

@@ -703,6 +703,6 @@
       }
     }
   },
-  "commit": "bd65832d49c4ca8fac14fbf709684cc34f73f9a3",
-  "date": "2026-06-22T01:32:01.952Z"
+  "commit": "58a450bdac648b0df71fe5e176e35583306d6003",
+  "date": "2026-06-23T04:53:58.445Z"
 }

package/product.ioa.json

@@ -1106,6 +1106,6 @@
       }
     }
   },
-  "commit": "bd65832d49c4ca8fac14fbf709684cc34f73f9a3",
-  "date": "2026-06-22T01:32:02.034Z"
+  "commit": "58a450bdac648b0df71fe5e176e35583306d6003",
+  "date": "2026-06-23T04:53:58.508Z"
 }

package/product.json

@@ -1757,6 +1757,6 @@
       "deferLoading": true
     }
   ],
-  "commit": "bd65832d49c4ca8fac14fbf709684cc34f73f9a3",
-  "date": "2026-06-22T01:32:02.010Z"
+  "commit": "58a450bdac648b0df71fe5e176e35583306d6003",
+  "date": "2026-06-23T04:53:58.431Z"
 }

package/product.selfhosted.json

@@ -339,6 +339,6 @@
     "ScheduledTasks": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "bd65832d49c4ca8fac14fbf709684cc34f73f9a3",
-  "date": "2026-06-22T01:32:01.965Z"
+  "commit": "58a450bdac648b0df71fe5e176e35583306d6003",
+  "date": "2026-06-23T04:53:58.498Z"
 }

package/vendor/shim/genie-safe-delete.cjs

@@ -37,6 +37,52 @@ if (!SESSION_ID) {
 const PLATFORM = process.platform; // 'darwin' | 'win32' | 'linux' | ...
 const REPORT_PATH = process.env.CODEBUDDY_SAFE_DELETE_REPORT_PATH;
 
+function normalizePathForCompare(filePath) {
+    const resolved = path.resolve(filePath);
+    return PLATFORM === 'win32' ? resolved.toLowerCase() : resolved;
+}
+
+function isUsableTempRoot(filePath) {
+    try {
+        const resolved = path.resolve(filePath);
+        if (path.parse(resolved).root === resolved) return false;
+        return fs.statSync(resolved).isDirectory();
+    } catch (_) {
+        return false;
+    }
+}
+
+function buildOsTmpDirs() {
+    const candidates = [
+        os.tmpdir(),
+    ];
+    if (PLATFORM !== 'win32') {
+        candidates.push('/tmp');
+        candidates.push('/private/tmp');
+    }
+
+    const roots = [];
+    const seen = new Set();
+    for (const candidate of candidates) {
+        if (!candidate || !isUsableTempRoot(candidate)) continue;
+        const root = normalizePathForCompare(candidate);
+        if (seen.has(root)) continue;
+        seen.add(root);
+        roots.push(root);
+    }
+    return roots;
+}
+
+const OS_TMP_DIRS = buildOsTmpDirs();
+
+function isUnderOsTmpDir(absPath) {
+    const target = normalizePathForCompare(absPath);
+    return OS_TMP_DIRS.some(root => {
+        const rel = path.relative(root, target);
+        return !!rel && rel !== '..' && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel);
+    });
+}
+
 function recordTrash(absPath) {
     if (!REPORT_PATH) return;
     try {
@@ -417,6 +463,7 @@ function toAbsPath(filePath) {
 function makeSyncWrapper(orig, requireDir) {
     return function (filePath, ...rest) {
         const absPath = toAbsPath(filePath);
+        if (isUnderOsTmpDir(absPath)) return orig(filePath, ...rest);
         if (requireDir) {
             const st = safeLstat(absPath);
             if (st === null) return orig(filePath, ...rest); // ENOENT → 原生抛
@@ -467,6 +514,7 @@ function makeCallbackWrapper(orig, requireDir) {
             return orig(filePath, ...rest);
         }
         const absPath = toAbsPath(filePath);
+        if (isUnderOsTmpDir(absPath)) return orig(filePath, ...rest);
 
         const st = safeLstat(absPath);
         if (st === null) return orig(filePath, ...rest); // ENOENT → 原生抛
@@ -495,6 +543,7 @@ function makeCallbackWrapper(orig, requireDir) {
 function makePromiseWrapper(orig, requireDir) {
     return async function (filePath, ...rest) {
         const absPath = toAbsPath(filePath);
+        if (isUnderOsTmpDir(absPath)) return orig(filePath, ...rest);
         const st = safeLstat(absPath);
         if (st === null) return orig(filePath, ...rest); // ENOENT → 原生抛
         if (st) {
@@ -519,6 +568,10 @@ function makePromiseWrapper(orig, requireDir) {
  *   throws     → 回收站操作失败（fail-closed），调用方不得真删
  */
 function tryRm(absPath, opts) {
+    if (isUnderOsTmpDir(absPath)) {
+        return { done: false };
+    }
+
     const recursive = !!(opts && opts.recursive);
     const force = !!(opts && opts.force);
 

package/vendor/shim/safe-bin/safe-delete-common.sh

@@ -50,6 +50,93 @@ is_dir_empty() {
     [ -z "$(ls -A "$p" 2>/dev/null)" ]
 }
 
+safe_delete_normalize_path() {
+    local p="$1"
+    while [ "$p" != "/" ] && [ "${p%/}" != "$p" ]; do
+        p="${p%/}"
+    done
+    printf '%s' "$p"
+}
+
+safe_delete_to_unix_path_if_possible() {
+    local p="$1"
+    if command -v cygpath >/dev/null 2>&1; then
+        cygpath -u "$p" 2>/dev/null && return 0
+    fi
+    printf '%s' "$p"
+}
+
+safe_delete_resolve_os_tmp_dir() {
+    local tmp="${TMPDIR:-${TMP:-${TEMP:-/tmp}}}"
+    safe_delete_to_unix_path_if_possible "$tmp"
+}
+
+safe_delete_abs_path() {
+    local p="$1"
+    local abs
+    if command -v python3 >/dev/null 2>&1; then
+        abs="$(python3 -c 'import os,sys; print(os.path.abspath(sys.argv[1]))' "$p" 2>/dev/null)" && {
+            safe_delete_to_unix_path_if_possible "$abs"
+            return 0
+        }
+    elif command -v python >/dev/null 2>&1; then
+        abs="$(python -c 'import os,sys; print(os.path.abspath(sys.argv[1]))' "$p" 2>/dev/null)" && {
+            safe_delete_to_unix_path_if_possible "$abs"
+            return 0
+        }
+    fi
+    case "$p" in
+        /*|[A-Za-z]:/*) abs="$p" ;;
+        *)              abs="$PWD/$p" ;;
+    esac
+    abs="$(CDPATH= cd -P -- "$(dirname "$abs")" 2>/dev/null && printf '%s/%s' "$PWD" "$(basename "$abs")" || printf '%s' "$abs")"
+    safe_delete_to_unix_path_if_possible "$abs"
+}
+
+safe_delete_tmp_root_allowed() {
+    local root="$1"
+    [ -n "$root" ] || return 1
+    [ "$root" != "/" ] || return 1
+    [ -d "$root" ] || return 1
+    return 0
+}
+
+safe_delete_build_os_tmp_dirs() {
+    local seen="|" candidate root
+    for candidate in \
+        "$(safe_delete_resolve_os_tmp_dir)" \
+        "/tmp" \
+        "/private/tmp"
+    do
+        [ -n "$candidate" ] || continue
+        root="$(safe_delete_normalize_path "$(safe_delete_abs_path "$candidate")")"
+        safe_delete_tmp_root_allowed "$root" || continue
+        case "$seen" in
+            *"|$root|"*) ;;
+            *)
+                seen="${seen}${root}|"
+                printf '%s\n' "$root"
+                ;;
+        esac
+    done
+}
+
+SAFE_DELETE_OS_TMP_DIRS="$(safe_delete_build_os_tmp_dirs)"
+
+safe_delete_is_under_os_tmp_dir() {
+    local abs
+    abs="$(safe_delete_normalize_path "$(safe_delete_abs_path "$1")")"
+    while IFS= read -r tmp_dir; do
+        [ -n "$tmp_dir" ] || continue
+        case "$abs" in
+            "$tmp_dir"/*) return 0 ;;
+        esac
+    done <<EOF
+$SAFE_DELETE_OS_TMP_DIRS
+EOF
+    return 1
+}
+
 # ---- platform-specific trash helpers -----------------------------------------
 
 trash_darwin() {
@@ -344,6 +431,16 @@ safe_delete_rm() {
                     continue
                 fi
             fi
+            if safe_delete_is_under_os_tmp_dir "$p"; then
+                local native_args=()
+                $force && native_args+=("-f")
+                $recursive && native_args+=("-r")
+                $allow_dir && native_args+=("-d")
+                if ! "$REAL_RM" "${native_args[@]}" -- "$p"; then
+                    _exit=1
+                fi
+                continue
+            fi
             if ! try_trash "$p"; then
                 _exit=1
             fi
@@ -390,6 +487,11 @@ safe_delete_unlink() {
         return 1
     fi
 
+    if safe_delete_is_under_os_tmp_dir "$target"; then
+        "$REAL_UNLINK" -- "$target"
+        return $?
+    fi
+
     try_trash "$target"
     return $?
 }
@@ -444,6 +546,12 @@ safe_delete_rmdir() {
             _exit=1
             continue
         fi
+        if safe_delete_is_under_os_tmp_dir "$p"; then
+            if ! "$REAL_RMDIR" -- "$p"; then
+                _exit=1
+            fi
+            continue
+        fi
         if ! try_trash "$p"; then
             _exit=1
         fi

package/vendor/shim/sitecustomize.py

@@ -17,6 +17,7 @@ import json
 import os
 import stat
 import sys
+import tempfile
 import time
 
 # ---------------------------------------------------------------------------
@@ -275,6 +276,40 @@ if _SESSION_ID:
     _orig_path_rmdir = pathlib.Path.rmdir
     _report_path = os.environ.get("CODEBUDDY_SAFE_DELETE_REPORT_PATH")
 
+    def _path_for_compare(path):
+        return os.path.normcase(os.path.abspath(path))
+
+    def _is_usable_temp_root(path):
+        try:
+            root = _path_for_compare(path)
+            if os.path.dirname(root) == root:
+                return False
+            return os.path.isdir(root)
+        except Exception:
+            return False
+
+    def _build_os_tmp_dirs():
+        candidates = [
+            tempfile.gettempdir(),
+        ]
+        if sys.platform != "win32":
+            candidates.append("/tmp")
+            candidates.append("/private/tmp")
+
+        roots = []
+        seen = set()
+        for candidate in candidates:
+            if not candidate or not _is_usable_temp_root(candidate):
+                continue
+            root = _path_for_compare(candidate)
+            if root in seen:
+                continue
+            seen.add(root)
+            roots.append(root)
+        return roots
+
+    _os_tmp_dirs = _build_os_tmp_dirs()
+
     def _record_trash(abs_path):
         if not _report_path:
             return
@@ -388,6 +423,20 @@ if _SESSION_ID:
         except OSError:
             return False
 
+    def _is_under_os_tmp_dir(abs_path):
+        try:
+            target = _path_for_compare(os.fsdecode(abs_path))
+        except (TypeError, UnicodeError):
+            return False
+        for tmp_dir in _os_tmp_dirs:
+            try:
+                rel = os.path.relpath(target, tmp_dir)
+            except ValueError:
+                continue
+            if rel not in ("", ".") and rel != ".." and not rel.startswith(".." + os.sep) and not os.path.isabs(rel):
+                return True
+        return False
+
     # -----------------------------------------------------------------------
     # 包装：os.remove / os.unlink （文件，不能是目录）
     # -----------------------------------------------------------------------
@@ -397,6 +446,8 @@ if _SESSION_ID:
         if dir_fd is not None:
             return _orig_remove(path, dir_fd=dir_fd)
         abs_path = os.path.abspath(os.fspath(path))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_remove(path)
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_remove(path)  # ENOENT / stat 错误 → 让原生抛
@@ -412,6 +463,8 @@ if _SESSION_ID:
         if dir_fd is not None:
             return _orig_rmdir(path, dir_fd=dir_fd)
         abs_path = os.path.abspath(os.fspath(path))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_rmdir(path)
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_rmdir(path)  # ENOENT / stat 错误
@@ -434,6 +487,11 @@ if _SESSION_ID:
                 path, ignore_errors=ignore_errors, onerror=onerror, **kwargs
             )
 
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_shutil_rmtree(
+                path, ignore_errors=ignore_errors, onerror=onerror, **kwargs
+            )
+
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_shutil_rmtree(
@@ -461,6 +519,8 @@ if _SESSION_ID:
 
     def _safe_path_unlink(self, missing_ok=False):
         abs_path = os.path.abspath(str(self))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_path_unlink(self, missing_ok=missing_ok)
         st = _safe_lstat(abs_path)
         if not st:
             if st is None and missing_ok:
@@ -472,6 +532,8 @@ if _SESSION_ID:
 
     def _safe_path_rmdir(self):
         abs_path = os.path.abspath(str(self))
+        if _is_under_os_tmp_dir(abs_path):
+            return _orig_path_rmdir(self)
         st = _safe_lstat(abs_path)
         if not st:
             return _orig_path_rmdir(self)  # ENOENT / stat 错误 → 让原生抛