@tencent-ai/codebuddy-code 2.137.0 → 2.137.1-dev.1af6537.202608210308

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tencent-ai/codebuddy-code",
-  "version": "2.137.0",
+  "version": "2.137.1-dev.1af6537.202608210308",
   "description": "Use CodeBuddy, Tencent's AI assistant, right from your terminal. CodeBuddy can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.",
   "main": "lib/node/index.js",
   "typings": "lib/node/index.d.ts",
@@ -43,7 +43,8 @@
     "url": "https://cnb.cool/codebuddy/codebuddy-code/-/issues"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "dev"
   },
   "scripts": {},
   "devDependencies": {}

package/product.cloudhosted.json

@@ -470,7 +470,7 @@
       }
     },
     {
-      "credits": "x0.16 credits",
+      "credits": "x0.25 credits",
       "id": "deepseek-v4-pro",
       "name": "Deepseek-V4-Pro",
       "vendor": "f",
@@ -494,7 +494,7 @@
       }
     },
     {
-      "credits": "x0.05 credits",
+      "credits": "x0.08 credits",
       "id": "deepseek-v4-flash",
       "name": "Deepseek-V4-Flash",
       "vendor": "f",
@@ -734,7 +734,7 @@
       }
     },
     {
-      "credits": "x0.16 credits",
+      "credits": "x0.25 credits",
       "id": "deepseek-v4-pro-exclusive",
       "name": "Deepseek-V4-Pro",
       "vendor": "f",
@@ -816,6 +816,6 @@
     "SelectImage": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "ed22bc24b734b6b197983588cb38277d3a4a17dd",
-  "date": "2026-08-15T16:05:01.601Z"
+  "commit": "1af6537b9e72954f85efb29af76c847b16368e6b",
+  "date": "2026-08-20T19:07:46.055Z"
 }

package/product.internal.json

@@ -823,6 +823,6 @@
       }
     }
   },
-  "commit": "ed22bc24b734b6b197983588cb38277d3a4a17dd",
-  "date": "2026-08-15T16:05:01.664Z"
+  "commit": "1af6537b9e72954f85efb29af76c847b16368e6b",
+  "date": "2026-08-20T19:07:46.175Z"
 }

package/product.ioa.json

@@ -1319,6 +1319,6 @@
       }
     }
   },
-  "commit": "ed22bc24b734b6b197983588cb38277d3a4a17dd",
-  "date": "2026-08-15T16:05:01.600Z"
+  "commit": "1af6537b9e72954f85efb29af76c847b16368e6b",
+  "date": "2026-08-20T19:07:46.094Z"
 }

package/product.json

@@ -1559,16 +1559,8 @@
   ],
   "builtInMarketplaces": {
     "codebuddy-plugins-official": {
-      "source": "zip",
-      "url": "https://download.codebuddy.cn/plugin-marketplace/codebuddy-plugins-official.zip",
-      "metaUrl": "https://download.codebuddy.cn/plugin-marketplace/codebuddy-plugins-official.json",
-      "versionUrl": "https://download.codebuddy.cn/plugin-marketplace/version/codebuddy-plugins-official.txt"
-    },
-    "cb_teams_marketplace": {
-      "source": "zip",
-      "url": "https://download.codebuddy.cn/plugin-marketplace/cb_teams_marketplace.zip",
-      "metaUrl": "https://download.codebuddy.cn/plugin-marketplace/cb_teams_marketplace.json",
-      "versionUrl": "https://download.codebuddy.cn/plugin-marketplace/version/cb_teams_marketplace.txt"
+      "source": "git",
+      "url": "https://cnb.cool/codebuddy/marketplace"
     }
   },
   "deploymentType": "SaaS",
@@ -1832,6 +1824,6 @@
       "description": "tool-repl-description"
     }
   ],
-  "commit": "ed22bc24b734b6b197983588cb38277d3a4a17dd",
-  "date": "2026-08-15T16:05:01.660Z"
+  "commit": "1af6537b9e72954f85efb29af76c847b16368e6b",
+  "date": "2026-08-20T19:07:46.063Z"
 }

package/product.selfhosted.json

@@ -353,6 +353,6 @@
     "ScheduledTasks": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "ed22bc24b734b6b197983588cb38277d3a4a17dd",
-  "date": "2026-08-15T16:05:01.610Z"
+  "commit": "1af6537b9e72954f85efb29af76c847b16368e6b",
+  "date": "2026-08-20T19:07:46.102Z"
 }

package/vendor/shim/broker-program-policy-check.cjs

@@ -0,0 +1,68 @@
+/**
+ * Shared brokered Program Blacklist check for command shims.
+ *
+ * CLI contract: `node broker-program-policy-check.cjs <program> [runtime] [brokerClientPath]`
+ * Exit codes: 0 = allowed/not configured, 126 = forbidden program,
+ * 13 = policy check unavailable or otherwise denied.
+ */
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+function checkProgramPolicy(program, runtime = 'brokered-program-policy', options = {}) {
+    const command = options.command || process.env.CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND;
+    if (!command) {
+        return { code: 0 };
+    }
+
+    const socketPath = options.socketPath || process.env.CODEBUDDY_SANDBOX_BROKER_IPC_ADDRESS;
+    const sessionId = options.sessionId || process.env.CODEBUDDY_SANDBOX_BROKER_SESSION_ID;
+    const brokerClientPath = options.brokerClientPath || path.join(__dirname, 'broker-ipc-client.cjs');
+    if (!program || !socketPath || !sessionId || !fs.existsSync(brokerClientPath)) {
+        return { code: 13, error: 'Brokered program policy check unavailable' };
+    }
+
+    try {
+        const { sendBrokerRequestSync } = require(brokerClientPath);
+        const response = sendBrokerRequestSync({
+            command,
+            program,
+            sessionId,
+            toolCallId: options.toolCallId || process.env.CODEBUDDY_SANDBOX_BROKER_TOOL_CALL_ID,
+            brokerTraceId: options.brokerTraceId || process.env.CODEBUDDY_SANDBOX_BROKER_TRACE_ID,
+            runtime,
+        });
+        if (response && response.ok === true && response.decision === 'allow') {
+            return { code: 0, response };
+        }
+        return {
+            code: response && response.reason === 'forbidden_program' ? 126 : 13,
+            error: response && response.error
+                ? response.error
+                : `Brokered program policy denied "${program}"`,
+            response,
+        };
+    } catch (_) {
+        return { code: 13, error: 'Brokered program policy check unavailable' };
+    }
+}
+
+function runCli(argv = process.argv.slice(2)) {
+    const [program, runtime, brokerClientPath] = argv;
+    const result = checkProgramPolicy(program, runtime || 'brokered-program-policy', { brokerClientPath });
+    if (result.error) {
+        process.stderr.write(result.error);
+    }
+    return result.code;
+}
+
+module.exports = {
+    checkProgramPolicy,
+    runCli,
+};
+
+if (require.main === module) {
+    process.exit(runCli());
+}

package/vendor/shim/brokered-bin/codebuddy-toybox-dispatch

@@ -4,6 +4,7 @@ __cb_app="${0##*/}"
 __cb_toybox="${CODEBUDDY_TOYBOX_BIN:-}"
 __cb_brokered_dir="${CODEBUDDY_BROKERED_BIN_DIR:-${0%/*}}"
 __cb_broker_client="${CODEBUDDY_BROKER_IPC_CLIENT:-${__cb_brokered_dir%/brokered-bin}/broker-ipc-client.cjs}"
+__cb_program_policy_helper="${__cb_brokered_dir%/brokered-bin}/broker-program-policy-check.cjs"
 
 __cb_cleanup() { /bin/rm -f "$__cb_err" 2>/dev/null || true; }
 
@@ -13,28 +14,13 @@ __cb_check_program_policy() {
     [ -n "${CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND:-}" ] || return 0
     if [ -z "${CODEBUDDY_SANDBOX_BROKER_IPC_ADDRESS:-}" ] \
         || [ -z "${CODEBUDDY_SANDBOX_BROKER_SESSION_ID:-}" ] \
-        || [ ! -f "$__cb_broker_client" ]; then
+        || [ ! -f "$__cb_broker_client" ] \
+        || [ ! -f "$__cb_program_policy_helper" ]; then
         printf '%s' 'Brokered program policy check unavailable' >&2
         return 13
     fi
-
-    NODE_OPTIONS= "${CODEBUDDY_NODE_BIN:-node}" - "$__cb_broker_client" "$1" <<'NODE'
-const { sendBrokerRequestSync } = require(process.argv[2]);
-const program = process.argv[3];
-const response = sendBrokerRequestSync({
-    command: process.env.CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND,
-    program,
-    sessionId: process.env.CODEBUDDY_SANDBOX_BROKER_SESSION_ID,
-    toolCallId: process.env.CODEBUDDY_SANDBOX_BROKER_TOOL_CALL_ID,
-    brokerTraceId: process.env.CODEBUDDY_SANDBOX_BROKER_TRACE_ID,
-    runtime: 'toybox-dispatch',
-});
-if (response && response.ok === true && response.decision === 'allow') {
-    process.exit(0);
-}
-process.stderr.write(response && response.error ? response.error : `Brokered program policy denied "${program}"`);
-process.exit(response && response.reason === 'forbidden_program' ? 126 : 13);
-NODE
+    NODE_OPTIONS= "${CODEBUDDY_NODE_BIN:-node}" \
+        "$__cb_program_policy_helper" "$1" toybox-dispatch "$__cb_broker_client"
 }
 
 __cb_check_program_policy "$__cb_app"

package/vendor/shim/safe-bin/safe-delete-common.sh

@@ -459,6 +459,24 @@ trash_one() {
     esac
 }
 
+safe_delete_check_program_policy() {
+    local program="$1"
+    [ -n "${CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND:-}" ] || return 0
+
+    local helper="${SAFE_DELETE_BIN_DIR%/safe-bin}/broker-program-policy-check.cjs"
+    local broker_client="${SAFE_DELETE_BIN_DIR%/safe-bin}/broker-ipc-client.cjs"
+    local node_bin="${CODEBUDDY_NODE_BIN:-node}"
+    if [ -z "${CODEBUDDY_SANDBOX_BROKER_IPC_ADDRESS:-}" ] \
+        || [ -z "${CODEBUDDY_SANDBOX_BROKER_SESSION_ID:-}" ] \
+        || [ ! -f "$broker_client" ] \
+        || [ ! -f "$helper" ]; then
+        printf '%s' 'Brokered program policy check unavailable' >&2
+        return 13
+    fi
+
+    NODE_OPTIONS= "$node_bin" "$helper" "$program" safe-delete "$broker_client"
+}
+
 try_broker_delete() {
     local abs="$1"
     local recursive="${2:-false}"
@@ -733,6 +751,9 @@ safe_delete_rmdir() {
 safe_delete_main() {
     local mode="$1"
     shift
+    safe_delete_check_program_policy "$mode"
+    local program_policy_rc=$?
+    [ $program_policy_rc -eq 0 ] || return $program_policy_rc
     case "$mode" in
         rm)     safe_delete_rm "$@"; return $? ;;
         unlink) safe_delete_unlink "$@"; return $? ;;

package/vendor/shim/sitecustomize.py

@@ -932,21 +932,24 @@ if _SESSION_ID:
         except Exception:
             return "unavailable"
 
+    def _emit_safe_delete_fail_closed(abs_path, reason, detail=None):
+        payload = {
+            "target": abs_path,
+            "reason": reason,
+        }
+        if detail:
+            payload["detail"] = detail
+        message = (
+            "[safe-delete][SAFE_DELETE_FAIL_CLOSED] "
+            + json.dumps(payload, ensure_ascii=False)
+        )
+        try:
+            sys.stderr.write(message + "\n")
+            sys.stderr.flush()
+        except Exception:
+            pass
+
     def _try_trash(abs_path, recursive=False, force=False):
-        if sys.platform == "win32" and _IN_SANDBOX:
-            message = (
-                "[safe-delete][SAFE_DELETE_FAIL_CLOSED] "
-                + json.dumps({
-                    "target": abs_path,
-                    "reason": "windows-sandbox-recycle-bin-unavailable",
-                }, ensure_ascii=False)
-            )
-            try:
-                sys.stderr.write(message + "\n")
-                sys.stderr.flush()
-            except Exception:
-                pass
-            raise OSError(message)
         _check_bulk_delete_guard(abs_path)
 
         broker_result = _try_broker_delete(abs_path, recursive=recursive, force=force)
@@ -957,10 +960,14 @@ if _SESSION_ID:
                 "[safe-delete] broker denied delete: path=%s" % abs_path
             )
 
-        if _try_trash_via_binary(abs_path):
-            _record_trash(abs_path)
-            return True
-        _platform_trash(abs_path)
+        try:
+            if _try_trash_via_binary(abs_path):
+                _record_trash(abs_path)
+                return True
+            _platform_trash(abs_path)
+        except Exception as e:
+            _emit_safe_delete_fail_closed(abs_path, "trash-failed", str(e))
+            raise
         _record_trash(abs_path)
         return True