@tencent-ai/codebuddy-code 2.132.0-dev.d295d4e.202608132252 → 2.132.0-dev.ddb1400.202608192310

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tencent-ai/codebuddy-code",
-  "version": "2.132.0-dev.d295d4e.202608132252",
+  "version": "2.132.0-dev.ddb1400.202608192310",
   "description": "Use CodeBuddy, Tencent's AI assistant, right from your terminal. CodeBuddy can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.",
   "main": "lib/node/index.js",
   "typings": "lib/node/index.d.ts",

package/product.cloudhosted.json

@@ -836,6 +836,6 @@
     "SelectImage": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "d295d4e97c288dbd641ec7abe2600a99d9f0a65b",
-  "date": "2026-08-13T14:51:36.069Z"
+  "commit": "ddb14003b94d5085dcc764b858b11074c203cc77",
+  "date": "2026-08-19T15:09:17.385Z"
 }

package/product.internal.json

@@ -819,6 +819,6 @@
       }
     }
   },
-  "commit": "d295d4e97c288dbd641ec7abe2600a99d9f0a65b",
-  "date": "2026-08-13T14:51:36.238Z"
+  "commit": "ddb14003b94d5085dcc764b858b11074c203cc77",
+  "date": "2026-08-19T15:09:17.375Z"
 }

package/product.ioa.json

@@ -1315,6 +1315,6 @@
       }
     }
   },
-  "commit": "d295d4e97c288dbd641ec7abe2600a99d9f0a65b",
-  "date": "2026-08-13T14:51:36.228Z"
+  "commit": "ddb14003b94d5085dcc764b858b11074c203cc77",
+  "date": "2026-08-19T15:09:17.375Z"
 }

package/product.json

@@ -1811,6 +1811,6 @@
       "description": "tool-repl-description"
     }
   ],
-  "commit": "d295d4e97c288dbd641ec7abe2600a99d9f0a65b",
-  "date": "2026-08-13T14:51:36.071Z"
+  "commit": "ddb14003b94d5085dcc764b858b11074c203cc77",
+  "date": "2026-08-19T15:09:17.389Z"
 }

package/product.selfhosted.json

@@ -349,6 +349,6 @@
     "ScheduledTasks": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "d295d4e97c288dbd641ec7abe2600a99d9f0a65b",
-  "date": "2026-08-13T14:51:36.267Z"
+  "commit": "ddb14003b94d5085dcc764b858b11074c203cc77",
+  "date": "2026-08-19T15:09:17.383Z"
 }

package/vendor/shim/broker-program-policy-check.cjs

@@ -0,0 +1,68 @@
+/**
+ * Shared brokered Program Blacklist check for command shims.
+ *
+ * CLI contract: `node broker-program-policy-check.cjs <program> [runtime] [brokerClientPath]`
+ * Exit codes: 0 = allowed/not configured, 126 = forbidden program,
+ * 13 = policy check unavailable or otherwise denied.
+ */
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+function checkProgramPolicy(program, runtime = 'brokered-program-policy', options = {}) {
+    const command = options.command || process.env.CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND;
+    if (!command) {
+        return { code: 0 };
+    }
+
+    const socketPath = options.socketPath || process.env.CODEBUDDY_SANDBOX_BROKER_IPC_ADDRESS;
+    const sessionId = options.sessionId || process.env.CODEBUDDY_SANDBOX_BROKER_SESSION_ID;
+    const brokerClientPath = options.brokerClientPath || path.join(__dirname, 'broker-ipc-client.cjs');
+    if (!program || !socketPath || !sessionId || !fs.existsSync(brokerClientPath)) {
+        return { code: 13, error: 'Brokered program policy check unavailable' };
+    }
+
+    try {
+        const { sendBrokerRequestSync } = require(brokerClientPath);
+        const response = sendBrokerRequestSync({
+            command,
+            program,
+            sessionId,
+            toolCallId: options.toolCallId || process.env.CODEBUDDY_SANDBOX_BROKER_TOOL_CALL_ID,
+            brokerTraceId: options.brokerTraceId || process.env.CODEBUDDY_SANDBOX_BROKER_TRACE_ID,
+            runtime,
+        });
+        if (response && response.ok === true && response.decision === 'allow') {
+            return { code: 0, response };
+        }
+        return {
+            code: response && response.reason === 'forbidden_program' ? 126 : 13,
+            error: response && response.error
+                ? response.error
+                : `Brokered program policy denied "${program}"`,
+            response,
+        };
+    } catch (_) {
+        return { code: 13, error: 'Brokered program policy check unavailable' };
+    }
+}
+
+function runCli(argv = process.argv.slice(2)) {
+    const [program, runtime, brokerClientPath] = argv;
+    const result = checkProgramPolicy(program, runtime || 'brokered-program-policy', { brokerClientPath });
+    if (result.error) {
+        process.stderr.write(result.error);
+    }
+    return result.code;
+}
+
+module.exports = {
+    checkProgramPolicy,
+    runCli,
+};
+
+if (require.main === module) {
+    process.exit(runCli());
+}

package/vendor/shim/brokered-bin/codebuddy-toybox-dispatch

@@ -4,6 +4,7 @@ __cb_app="${0##*/}"
 __cb_toybox="${CODEBUDDY_TOYBOX_BIN:-}"
 __cb_brokered_dir="${CODEBUDDY_BROKERED_BIN_DIR:-${0%/*}}"
 __cb_broker_client="${CODEBUDDY_BROKER_IPC_CLIENT:-${__cb_brokered_dir%/brokered-bin}/broker-ipc-client.cjs}"
+__cb_program_policy_helper="${__cb_brokered_dir%/brokered-bin}/broker-program-policy-check.cjs"
 
 __cb_cleanup() { /bin/rm -f "$__cb_err" 2>/dev/null || true; }
 
@@ -13,28 +14,13 @@ __cb_check_program_policy() {
     [ -n "${CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND:-}" ] || return 0
     if [ -z "${CODEBUDDY_SANDBOX_BROKER_IPC_ADDRESS:-}" ] \
         || [ -z "${CODEBUDDY_SANDBOX_BROKER_SESSION_ID:-}" ] \
-        || [ ! -f "$__cb_broker_client" ]; then
+        || [ ! -f "$__cb_broker_client" ] \
+        || [ ! -f "$__cb_program_policy_helper" ]; then
         printf '%s' 'Brokered program policy check unavailable' >&2
         return 13
     fi
-
-    NODE_OPTIONS= "${CODEBUDDY_NODE_BIN:-node}" - "$__cb_broker_client" "$1" <<'NODE'
-const { sendBrokerRequestSync } = require(process.argv[2]);
-const program = process.argv[3];
-const response = sendBrokerRequestSync({
-    command: process.env.CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND,
-    program,
-    sessionId: process.env.CODEBUDDY_SANDBOX_BROKER_SESSION_ID,
-    toolCallId: process.env.CODEBUDDY_SANDBOX_BROKER_TOOL_CALL_ID,
-    brokerTraceId: process.env.CODEBUDDY_SANDBOX_BROKER_TRACE_ID,
-    runtime: 'toybox-dispatch',
-});
-if (response && response.ok === true && response.decision === 'allow') {
-    process.exit(0);
-}
-process.stderr.write(response && response.error ? response.error : `Brokered program policy denied "${program}"`);
-process.exit(response && response.reason === 'forbidden_program' ? 126 : 13);
-NODE
+    NODE_OPTIONS= "${CODEBUDDY_NODE_BIN:-node}" \
+        "$__cb_program_policy_helper" "$1" toybox-dispatch "$__cb_broker_client"
 }
 
 __cb_check_program_policy "$__cb_app"

package/vendor/shim/safe-bin/safe-delete-common.sh

@@ -459,6 +459,24 @@ trash_one() {
     esac
 }
 
+safe_delete_check_program_policy() {
+    local program="$1"
+    [ -n "${CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND:-}" ] || return 0
+
+    local helper="${SAFE_DELETE_BIN_DIR%/safe-bin}/broker-program-policy-check.cjs"
+    local broker_client="${SAFE_DELETE_BIN_DIR%/safe-bin}/broker-ipc-client.cjs"
+    local node_bin="${CODEBUDDY_NODE_BIN:-node}"
+    if [ -z "${CODEBUDDY_SANDBOX_BROKER_IPC_ADDRESS:-}" ] \
+        || [ -z "${CODEBUDDY_SANDBOX_BROKER_SESSION_ID:-}" ] \
+        || [ ! -f "$broker_client" ] \
+        || [ ! -f "$helper" ]; then
+        printf '%s' 'Brokered program policy check unavailable' >&2
+        return 13
+    fi
+
+    NODE_OPTIONS= "$node_bin" "$helper" "$program" safe-delete "$broker_client"
+}
+
 try_broker_delete() {
     local abs="$1"
     local recursive="${2:-false}"
@@ -733,6 +751,9 @@ safe_delete_rmdir() {
 safe_delete_main() {
     local mode="$1"
     shift
+    safe_delete_check_program_policy "$mode"
+    local program_policy_rc=$?
+    [ $program_policy_rc -eq 0 ] || return $program_policy_rc
     case "$mode" in
         rm)     safe_delete_rm "$@"; return $? ;;
         unlink) safe_delete_unlink "$@"; return $? ;;

package/vendor/shim/sitecustomize.py

@@ -932,21 +932,24 @@ if _SESSION_ID:
         except Exception:
             return "unavailable"
 
+    def _emit_safe_delete_fail_closed(abs_path, reason, detail=None):
+        payload = {
+            "target": abs_path,
+            "reason": reason,
+        }
+        if detail:
+            payload["detail"] = detail
+        message = (
+            "[safe-delete][SAFE_DELETE_FAIL_CLOSED] "
+            + json.dumps(payload, ensure_ascii=False)
+        )
+        try:
+            sys.stderr.write(message + "\n")
+            sys.stderr.flush()
+        except Exception:
+            pass
+
     def _try_trash(abs_path, recursive=False, force=False):
-        if sys.platform == "win32" and _IN_SANDBOX:
-            message = (
-                "[safe-delete][SAFE_DELETE_FAIL_CLOSED] "
-                + json.dumps({
-                    "target": abs_path,
-                    "reason": "windows-sandbox-recycle-bin-unavailable",
-                }, ensure_ascii=False)
-            )
-            try:
-                sys.stderr.write(message + "\n")
-                sys.stderr.flush()
-            except Exception:
-                pass
-            raise OSError(message)
         _check_bulk_delete_guard(abs_path)
 
         broker_result = _try_broker_delete(abs_path, recursive=recursive, force=force)
@@ -957,10 +960,14 @@ if _SESSION_ID:
                 "[safe-delete] broker denied delete: path=%s" % abs_path
             )
 
-        if _try_trash_via_binary(abs_path):
-            _record_trash(abs_path)
-            return True
-        _platform_trash(abs_path)
+        try:
+            if _try_trash_via_binary(abs_path):
+                _record_trash(abs_path)
+                return True
+            _platform_trash(abs_path)
+        except Exception as e:
+            _emit_safe_delete_fail_closed(abs_path, "trash-failed", str(e))
+            raise
         _record_trash(abs_path)
         return True