@tencent-ai/codebuddy-code 2.109.2 → 2.109.3

package/vendor/shim/sitecustomize.py

@@ -324,6 +324,43 @@ if _SESSION_ID:
         except Exception:
             pass
 
+    def _exit_bulk_guard_control(message):
+        try:
+            sys.stderr.write(message)
+            if not message.endswith("\n"):
+                sys.stderr.write("\n")
+            sys.stderr.flush()
+        finally:
+            raise SystemExit(1)
+
+    def _check_bulk_delete_guard(abs_path):
+        guard_path = os.environ.get("CODEBUDDY_SAFE_DELETE_BULK_GUARD")
+        node_bin = os.environ.get("CODEBUDDY_NODE_BIN")
+        if not os.environ.get("CODEBUDDY_SAFE_DELETE_BULK_STATE_DIR") \
+                or not os.environ.get("CODEBUDDY_TOOL_CALL_ID"):
+            return
+        if not guard_path or not node_bin or not os.path.isfile(guard_path):
+            _exit_bulk_guard_control(
+                "[safe-delete][SAFE_DELETE_BULK_GUARD_ERROR] msg=helper-unavailable guard=%s"
+                % (guard_path or "unset")
+            )
+        env = dict(os.environ)
+        env["NODE_OPTIONS"] = ""
+        try:
+            result = subprocess.run(
+                [node_bin, guard_path, "check", "--target", abs_path],
+                capture_output=True, text=True, timeout=10, env=env
+            )
+        except Exception as e:
+            _exit_bulk_guard_control(
+                "[safe-delete][SAFE_DELETE_BULK_GUARD_ERROR] %s" % e
+            )
+        if result.returncode != 0:
+            _exit_bulk_guard_control(
+                result.stderr.strip()
+                or "[safe-delete][SAFE_DELETE_BULK_GUARD_ERROR] exit %d" % result.returncode
+            )
+
     # -----------------------------------------------------------------------
     # genie-trash native binary 支持（优先路径，不可用自动降级）
     # 优先使用 GENIE_TRASH_DIR 环境变量（由 buildSafeDeleteEnv() 注入），
@@ -401,6 +438,7 @@ if _SESSION_ID:
             except Exception:
                 pass
             raise OSError(message)
+        _check_bulk_delete_guard(abs_path)
         if _try_trash_via_binary(abs_path):
             _record_trash(abs_path)
             return True