@tencent-ai/codebuddy-code 2.137.0 → 2.137.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tencent-ai/codebuddy-code",
-  "version": "2.137.0",
+  "version": "2.137.1",
   "description": "Use CodeBuddy, Tencent's AI assistant, right from your terminal. CodeBuddy can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.",
   "main": "lib/node/index.js",
   "typings": "lib/node/index.d.ts",

package/product.cloudhosted.json

@@ -816,6 +816,6 @@
     "SelectImage": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "ed22bc24b734b6b197983588cb38277d3a4a17dd",
-  "date": "2026-08-15T16:05:01.601Z"
+  "commit": "581a8fefa510a6f6277bf5e931807ad60b868a66",
+  "date": "2026-08-17T12:09:10.644Z"
 }

package/product.internal.json

@@ -823,6 +823,6 @@
       }
     }
   },
-  "commit": "ed22bc24b734b6b197983588cb38277d3a4a17dd",
-  "date": "2026-08-15T16:05:01.664Z"
+  "commit": "581a8fefa510a6f6277bf5e931807ad60b868a66",
+  "date": "2026-08-17T12:09:10.667Z"
 }

package/product.ioa.json

@@ -1319,6 +1319,6 @@
       }
     }
   },
-  "commit": "ed22bc24b734b6b197983588cb38277d3a4a17dd",
-  "date": "2026-08-15T16:05:01.600Z"
+  "commit": "581a8fefa510a6f6277bf5e931807ad60b868a66",
+  "date": "2026-08-17T12:09:10.641Z"
 }

package/product.json

@@ -1559,16 +1559,8 @@
   ],
   "builtInMarketplaces": {
     "codebuddy-plugins-official": {
-      "source": "zip",
-      "url": "https://download.codebuddy.cn/plugin-marketplace/codebuddy-plugins-official.zip",
-      "metaUrl": "https://download.codebuddy.cn/plugin-marketplace/codebuddy-plugins-official.json",
-      "versionUrl": "https://download.codebuddy.cn/plugin-marketplace/version/codebuddy-plugins-official.txt"
-    },
-    "cb_teams_marketplace": {
-      "source": "zip",
-      "url": "https://download.codebuddy.cn/plugin-marketplace/cb_teams_marketplace.zip",
-      "metaUrl": "https://download.codebuddy.cn/plugin-marketplace/cb_teams_marketplace.json",
-      "versionUrl": "https://download.codebuddy.cn/plugin-marketplace/version/cb_teams_marketplace.txt"
+      "source": "git",
+      "url": "https://cnb.cool/codebuddy/marketplace"
     }
   },
   "deploymentType": "SaaS",
@@ -1832,6 +1824,6 @@
       "description": "tool-repl-description"
     }
   ],
-  "commit": "ed22bc24b734b6b197983588cb38277d3a4a17dd",
-  "date": "2026-08-15T16:05:01.660Z"
+  "commit": "581a8fefa510a6f6277bf5e931807ad60b868a66",
+  "date": "2026-08-17T12:09:10.825Z"
 }

package/product.selfhosted.json

@@ -353,6 +353,6 @@
     "ScheduledTasks": true,
     "SkipToolCallSupportCheck": true
   },
-  "commit": "ed22bc24b734b6b197983588cb38277d3a4a17dd",
-  "date": "2026-08-15T16:05:01.610Z"
+  "commit": "581a8fefa510a6f6277bf5e931807ad60b868a66",
+  "date": "2026-08-17T12:09:10.651Z"
 }

package/vendor/shim/broker-program-policy-check.cjs

@@ -0,0 +1,68 @@
+/**
+ * Shared brokered Program Blacklist check for command shims.
+ *
+ * CLI contract: `node broker-program-policy-check.cjs <program> [runtime] [brokerClientPath]`
+ * Exit codes: 0 = allowed/not configured, 126 = forbidden program,
+ * 13 = policy check unavailable or otherwise denied.
+ */
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+function checkProgramPolicy(program, runtime = 'brokered-program-policy', options = {}) {
+    const command = options.command || process.env.CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND;
+    if (!command) {
+        return { code: 0 };
+    }
+
+    const socketPath = options.socketPath || process.env.CODEBUDDY_SANDBOX_BROKER_IPC_ADDRESS;
+    const sessionId = options.sessionId || process.env.CODEBUDDY_SANDBOX_BROKER_SESSION_ID;
+    const brokerClientPath = options.brokerClientPath || path.join(__dirname, 'broker-ipc-client.cjs');
+    if (!program || !socketPath || !sessionId || !fs.existsSync(brokerClientPath)) {
+        return { code: 13, error: 'Brokered program policy check unavailable' };
+    }
+
+    try {
+        const { sendBrokerRequestSync } = require(brokerClientPath);
+        const response = sendBrokerRequestSync({
+            command,
+            program,
+            sessionId,
+            toolCallId: options.toolCallId || process.env.CODEBUDDY_SANDBOX_BROKER_TOOL_CALL_ID,
+            brokerTraceId: options.brokerTraceId || process.env.CODEBUDDY_SANDBOX_BROKER_TRACE_ID,
+            runtime,
+        });
+        if (response && response.ok === true && response.decision === 'allow') {
+            return { code: 0, response };
+        }
+        return {
+            code: response && response.reason === 'forbidden_program' ? 126 : 13,
+            error: response && response.error
+                ? response.error
+                : `Brokered program policy denied "${program}"`,
+            response,
+        };
+    } catch (_) {
+        return { code: 13, error: 'Brokered program policy check unavailable' };
+    }
+}
+
+function runCli(argv = process.argv.slice(2)) {
+    const [program, runtime, brokerClientPath] = argv;
+    const result = checkProgramPolicy(program, runtime || 'brokered-program-policy', { brokerClientPath });
+    if (result.error) {
+        process.stderr.write(result.error);
+    }
+    return result.code;
+}
+
+module.exports = {
+    checkProgramPolicy,
+    runCli,
+};
+
+if (require.main === module) {
+    process.exit(runCli());
+}

package/vendor/shim/brokered-bin/codebuddy-toybox-dispatch

@@ -4,6 +4,7 @@ __cb_app="${0##*/}"
 __cb_toybox="${CODEBUDDY_TOYBOX_BIN:-}"
 __cb_brokered_dir="${CODEBUDDY_BROKERED_BIN_DIR:-${0%/*}}"
 __cb_broker_client="${CODEBUDDY_BROKER_IPC_CLIENT:-${__cb_brokered_dir%/brokered-bin}/broker-ipc-client.cjs}"
+__cb_program_policy_helper="${__cb_brokered_dir%/brokered-bin}/broker-program-policy-check.cjs"
 
 __cb_cleanup() { /bin/rm -f "$__cb_err" 2>/dev/null || true; }
 
@@ -13,28 +14,13 @@ __cb_check_program_policy() {
     [ -n "${CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND:-}" ] || return 0
     if [ -z "${CODEBUDDY_SANDBOX_BROKER_IPC_ADDRESS:-}" ] \
         || [ -z "${CODEBUDDY_SANDBOX_BROKER_SESSION_ID:-}" ] \
-        || [ ! -f "$__cb_broker_client" ]; then
+        || [ ! -f "$__cb_broker_client" ] \
+        || [ ! -f "$__cb_program_policy_helper" ]; then
         printf '%s' 'Brokered program policy check unavailable' >&2
         return 13
     fi
-
-    NODE_OPTIONS= "${CODEBUDDY_NODE_BIN:-node}" - "$__cb_broker_client" "$1" <<'NODE'
-const { sendBrokerRequestSync } = require(process.argv[2]);
-const program = process.argv[3];
-const response = sendBrokerRequestSync({
-    command: process.env.CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND,
-    program,
-    sessionId: process.env.CODEBUDDY_SANDBOX_BROKER_SESSION_ID,
-    toolCallId: process.env.CODEBUDDY_SANDBOX_BROKER_TOOL_CALL_ID,
-    brokerTraceId: process.env.CODEBUDDY_SANDBOX_BROKER_TRACE_ID,
-    runtime: 'toybox-dispatch',
-});
-if (response && response.ok === true && response.decision === 'allow') {
-    process.exit(0);
-}
-process.stderr.write(response && response.error ? response.error : `Brokered program policy denied "${program}"`);
-process.exit(response && response.reason === 'forbidden_program' ? 126 : 13);
-NODE
+    NODE_OPTIONS= "${CODEBUDDY_NODE_BIN:-node}" \
+        "$__cb_program_policy_helper" "$1" toybox-dispatch "$__cb_broker_client"
 }
 
 __cb_check_program_policy "$__cb_app"

package/vendor/shim/safe-bin/safe-delete-common.sh

@@ -459,6 +459,24 @@ trash_one() {
     esac
 }
 
+safe_delete_check_program_policy() {
+    local program="$1"
+    [ -n "${CODEBUDDY_SANDBOX_PROGRAM_POLICY_COMMAND:-}" ] || return 0
+
+    local helper="${SAFE_DELETE_BIN_DIR%/safe-bin}/broker-program-policy-check.cjs"
+    local broker_client="${SAFE_DELETE_BIN_DIR%/safe-bin}/broker-ipc-client.cjs"
+    local node_bin="${CODEBUDDY_NODE_BIN:-node}"
+    if [ -z "${CODEBUDDY_SANDBOX_BROKER_IPC_ADDRESS:-}" ] \
+        || [ -z "${CODEBUDDY_SANDBOX_BROKER_SESSION_ID:-}" ] \
+        || [ ! -f "$broker_client" ] \
+        || [ ! -f "$helper" ]; then
+        printf '%s' 'Brokered program policy check unavailable' >&2
+        return 13
+    fi
+
+    NODE_OPTIONS= "$node_bin" "$helper" "$program" safe-delete "$broker_client"
+}
+
 try_broker_delete() {
     local abs="$1"
     local recursive="${2:-false}"
@@ -733,6 +751,9 @@ safe_delete_rmdir() {
 safe_delete_main() {
     local mode="$1"
     shift
+    safe_delete_check_program_policy "$mode"
+    local program_policy_rc=$?
+    [ $program_policy_rc -eq 0 ] || return $program_policy_rc
     case "$mode" in
         rm)     safe_delete_rm "$@"; return $? ;;
         unlink) safe_delete_unlink "$@"; return $? ;;