@tencent-ai/codebuddy-code 2.142.0-dev.fe3dd20.202609032157 → 2.142.0-dev.fe3dd20.202609032221

package/dist-server/types/node/runtime/add-dir-middleware.d.ts

@@ -0,0 +1,13 @@
+import { Context, Middleware } from '@celljs/web/lib/node';
+import { ConsoleManager } from '../console';
+import { NavigationManager } from '../navigation';
+import { WorkspaceFolderManager } from '../runtime';
+import { SessionManager } from '../session';
+export declare class AddDirMiddleWare implements Middleware {
+    protected readonly sessionManager: SessionManager;
+    protected readonly workspaceFolderManager: WorkspaceFolderManager;
+    protected readonly navigationManager: NavigationManager;
+    protected readonly consoleManager: ConsoleManager;
+    handle(ctx: Context, next: () => Promise<void>): Promise<void>;
+    readonly priority: number;
+}

package/dist-server/types/node/runtime/external-uri-opener.d.ts

@@ -0,0 +1,8 @@
+import { Logger } from '@celljs/core';
+import { ExternalUriOpener } from '@genie/runtime';
+import { Subject } from 'rxjs';
+export declare class CliExternalUriOpener implements ExternalUriOpener {
+    urlSubject: Subject<string>;
+    protected readonly logger: Logger;
+    open(uri: string): Promise<boolean>;
+}

package/dist-server/types/node/runtime/file-local-storage.d.ts

@@ -0,0 +1,17 @@
+import { FileSystem, LocalStorage, LocalStorageChangeEvent } from '@genie/runtime';
+export declare class MemoryLocalStorage implements LocalStorage {
+    protected readonly fileSystem: FileSystem;
+    private emitter;
+    changeEvent: import("@celljs/core").Event<LocalStorageChangeEvent>;
+    /**
+     * server 面缺省 no-op（CODEBUDDY_DISABLE_LOCAL_STORAGE=1）：消费者全是
+     * 交互产品面（问卷冷却、输入历史等），pod 上无消费者；写盘还会把多租户
+     * 状态混进进程全局文件。no-op 而非内存 Map——假共享不如无共享。
+     */
+    private get disabled();
+    set<T>(key: string, value: T): Promise<void>;
+    getSync<T>(key: string, defaultValue?: T): T | undefined;
+    get<T>(key: string, defaultValue?: T): Promise<T | undefined>;
+    remove(key: string): Promise<void>;
+    private resolveEntryPath;
+}

package/dist-server/types/node/runtime/workspace-folder-manager.d.ts

@@ -0,0 +1,45 @@
+import { Session, SessionManager } from '../session';
+import { SettingsManager, SettingsScope } from '../settings';
+export declare const WorkspaceFolderManager: unique symbol;
+/**
+ * 工作目录的落点：
+ * - 'session'：仅当前会话生效，存 session.options.addDir，不落盘
+ * - SettingsScope：持久化到对应的配置文件（user / project / project-local）
+ */
+type WorkspaceFolderTarget = 'session' | SettingsScope;
+export interface WorkspaceFolderManager {
+    /**
+     * 添加工作目录
+     */
+    addWorkspaceFolder(directory: string, target: WorkspaceFolderTarget): Promise<void>;
+    /**
+     * 移除工作目录
+     */
+    removeWorkspaceFolder(directory: string, target: WorkspaceFolderTarget): Promise<void>;
+    /**
+     * 从所有落点（session + 所有持久化 scope）移除工作目录
+     */
+    removeWorkspaceFolderEverywhere(directory: string): Promise<void>;
+    /**
+     * 获取所有工作目录
+     */
+    getWorkspaceFolders(target?: WorkspaceFolderTarget): Promise<string[]>;
+    /**
+     * 判断是否包含工作目录
+     */
+    hasWorkspaceFolder(directory: string, target: WorkspaceFolderTarget): Promise<boolean>;
+}
+export declare class WorkspaceFolderManagerImpl implements WorkspaceFolderManager {
+    protected readonly sessionManager: SessionManager;
+    protected readonly settingsManager: SettingsManager;
+    protected currentSession: Session | undefined;
+    protected init(): void;
+    private getScopeDirectories;
+    private operateWorkspaceFolder;
+    addWorkspaceFolder(directory: string, target: WorkspaceFolderTarget): Promise<void>;
+    removeWorkspaceFolder(directory: string, target: WorkspaceFolderTarget): Promise<void>;
+    removeWorkspaceFolderEverywhere(directory: string): Promise<void>;
+    getWorkspaceFolders(target?: WorkspaceFolderTarget): Promise<string[]>;
+    hasWorkspaceFolder(directory: string, target: WorkspaceFolderTarget): Promise<boolean>;
+}
+export {};

package/dist-server/types/node/runtime/workspace.d.ts

@@ -0,0 +1,5 @@
+import { Workspace, WorkspaceFolder } from '@genie/runtime';
+export declare class CliWorkspace implements Workspace {
+    private readonly cwdService;
+    get workspaceFolders(): readonly WorkspaceFolder[];
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tencent-ai/codebuddy-code",
-  "version": "2.142.0-dev.fe3dd20.202609032157",
+  "version": "2.142.0-dev.fe3dd20.202609032221",
   "description": "Use CodeBuddy, Tencent's AI assistant, right from your terminal. CodeBuddy can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.",
   "main": "lib/node/index.js",
   "typings": "lib/node/index.d.ts",

package/product.cloudhosted.json

@@ -823,5 +823,5 @@
     "SkipToolCallSupportCheck": true
   },
   "commit": "fe3dd20e215af4f7c070ae4b65eec5a63ca4d5aa",
-  "date": "2026-09-03T13:56:25.377Z"
+  "date": "2026-09-03T14:20:51.242Z"
 }

package/product.internal.json

@@ -833,5 +833,5 @@
     }
   },
   "commit": "fe3dd20e215af4f7c070ae4b65eec5a63ca4d5aa",
-  "date": "2026-09-03T13:56:25.321Z"
+  "date": "2026-09-03T14:20:51.164Z"
 }

package/product.ioa.json

@@ -1326,5 +1326,5 @@
     }
   },
   "commit": "fe3dd20e215af4f7c070ae4b65eec5a63ca4d5aa",
-  "date": "2026-09-03T13:56:25.366Z"
+  "date": "2026-09-03T14:20:51.150Z"
 }

package/product.json

@@ -2227,5 +2227,5 @@
     }
   ],
   "commit": "fe3dd20e215af4f7c070ae4b65eec5a63ca4d5aa",
-  "date": "2026-09-03T13:56:25.341Z"
+  "date": "2026-09-03T14:20:51.216Z"
 }

package/product.selfhosted.json

@@ -360,5 +360,5 @@
     "SkipToolCallSupportCheck": true
   },
   "commit": "fe3dd20e215af4f7c070ae4b65eec5a63ca4d5aa",
-  "date": "2026-09-03T13:56:25.343Z"
+  "date": "2026-09-03T14:20:51.186Z"
 }

package/dist-server/types/node/bash-sandbox/bash-sandbox-manager.d.ts

@@ -1,125 +0,0 @@
-import { Logger } from '@celljs/core';
-import type { SandboxExecPolicy as ISandboxExecPolicy } from '../permission/sandbox-exec-policy-protocol';
-import type { SensitiveCommandDetector as ISensitiveCommandDetector } from '../permission/sensitive-command-detector';
-import { SandboxTurnConfig } from '../sandbox-cli/sandbox-turn-config';
-import type { SettingsManager as ISettingsManager } from '../settings/settings-protocol';
-import { BashSandboxManager as IBashSandboxManager, SandboxConfig, SandboxDependencyError } from './bash-sandbox-protocol';
-export declare function expandWindowsNativeDirectoryGlobs(paths: readonly string[] | undefined, platform?: NodeJS.Platform): string[];
-/**
- * Bash 沙箱管理器实现
- * 封装 @anthropic-ai/sandbox-runtime 并提供配置管理和自动初始化
- */
-export declare class BashSandboxManagerImpl implements IBashSandboxManager {
-    protected readonly settingsManager: ISettingsManager;
-    protected readonly logger: Logger;
-    /**
-     * Optional so that environments that boot the sandbox manager without the
-     * policy module registered (e.g. legacy headless paths) keep working;
-     * when present we forward `settings.sandbox.execPolicy` updates on each
-     * config load so the policy's user rules stay in sync with settings.
-     */
-    protected readonly execPolicy?: ISandboxExecPolicy;
-    protected readonly sensitiveCommandDetector?: ISensitiveCommandDetector;
-    protected readonly sandboxTurnConfig: SandboxTurnConfig;
-    private initialized;
-    private cachedConfig;
-    /** Last user-rules payload we pushed into the ExecPolicy; used to avoid
-     *  redundant `setUserRules` calls when settings are unchanged. */
-    private lastExecPolicyUserRulesKey;
-    private lastOrderedCommandRulesKey;
-    /**
-     * 获取当前沙箱配置
-     */
-    getConfig(): Promise<SandboxConfig | undefined>;
-    /**
-     * 使用沙箱包装命令
-     *
-     * 仅 Linux 上调用 `@anthropic-ai/sandbox-runtime` 的 `wrapWithSandbox`，
-     * 把命令包装成 `bwrap ... -- bash -c <cmd>` 形式后返回，供
-     * `LegacySandboxShellService` 交给 `LocalShellService` 执行。
-     *
-     * 其它平台（macOS/Windows）由 `sandbox-cli` 接管命令执行，不经过这条
-     * JS 侧包装路径；此处直接返回原命令，避免 `AnthropicSandboxManager`
-     * 在未初始化的前提下被调用。
-     */
-    wrapCommand(command: string): Promise<string>;
-    /**
-     * 检查命令是否应该在沙箱中执行
-     */
-    shouldSandbox(command: string): Promise<boolean>;
-    /**
-     * 检查命令是否属于系统级工具（如 WSL）。
-     * 复用 {@link getCommandRoots} 解析器提取命令根。
-     */
-    isSystemLevelTool(command: string): boolean;
-    /**
-     * 确保沙箱处于正确状态(检查配置变化并初始化/重新初始化)
-     */
-    private ensureSandboxReady;
-    /**
-     * 应用配置变化(智能初始化/重新初始化)
-     */
-    private applyConfigChange;
-    /**
-     * 检查 Linux 平台沙箱所需的依赖
-     * @returns 缺失的依赖列表
-     */
-    private checkLinuxDependencies;
-    /**
-     * 检查 Linux 依赖并返回错误（如果有缺失）
-     * 供外部调用（如 /sandbox 命令）显示给用户
-     */
-    checkDependencies(): Promise<SandboxDependencyError | undefined>;
-    /**
-     * 初始化沙箱
-     *
-     * 仅 Linux 需要走 `@anthropic-ai/sandbox-runtime`（bwrap + socat）这条
-     * 老路径——对应 `LegacySandboxShellService`。macOS/Windows 已改为由
-     * `SandboxShellService` 驱动 Rust `sandbox-cli` 二进制，`AnthropicSandboxManager`
-     * 在那两个平台上不承担任何运行时职责，即便调用也只是内存里重设一份永远
-     * 不会被读到的配置，因此直接跳过以避免额外开销和潜在的兼容性问题。
-     */
-    private initialize;
-    /**
-     * 重置沙箱
-     *
-     * 与 `initialize` 对称：只有 Linux 上才真正持有 AnthropicSandboxManager
-     * 的状态，其它平台只要翻转 `this.initialized` 即可。
-     */
-    private reset;
-    /**
-     * 从设置中加载沙箱配置
-     */
-    private loadConfig;
-    /**
-     * 判断两个配置是否相等(通过 deepEqual 比较)
-     */
-    private isConfigEqual;
-    /**
-     * 将 SandboxConfig 转换为 SandboxRuntimeConfig
-     */
-    private toRuntimeConfig;
-    /**
-     * 扩展路径中的波浪号
-     */
-    private expandPaths;
-    /**
-     * Push user-authored ExecPolicy rules into the policy component.
-     *
-     * `undefined` fingerprint means "no execPolicy set" — we also forward
-     * `undefined` so the policy clears any previously loaded user rules
-     * (important when a user removes the settings block entirely).
-     */
-    private syncExecPolicyUserRules;
-    private syncOrderedCommandRules;
-    /** Prefix commands that wrap the real command — skip them to find the actual executable. */
-    private static readonly SHELL_PREFIX_COMMANDS;
-    /** Standalone builtins whose arguments are NOT commands — skip the whole sub-command. */
-    private static readonly SHELL_STANDALONE_BUILTINS;
-    /**
-     * Extract command roots from ALL sub-commands in a compound command
-     * (separated by &&, ||, ;, |). Each sub-command yields at most one
-     * root — the first non-assignment, non-shell-prefix string token.
-     */
-    private getCommandRoots;
-}

package/dist-server/types/node/bash-sandbox/legacy-sandbox-shell-service.d.ts

@@ -1,33 +0,0 @@
-import { Logger } from '@celljs/core';
-import { type ShellExecuteParams, type ShellExecutionHandle, type ShellService } from '../shell/shell-protocol';
-import { BashSandboxManager as IBashSandboxManager } from './bash-sandbox-protocol';
-/**
- * Shell service backed by `@anthropic-ai/sandbox-runtime` (bwrap/socat on
- * Linux).
- *
- * Implementation strategy: transform the caller's command into its sandboxed
- * equivalent via `BashSandboxManager.wrapCommand()`, then hand the wrapped
- * command to `LocalShellService`. Execution semantics (PTY, env propagation,
- * cwd, timeout) therefore mirror the regular local pipeline — the sandbox
- * layer is just a `bwrap ...` / `sandbox-exec ...` prefix injected at the
- * command string level.
- *
- * Known limitations (Linux):
- *
- * - No structured violation reporting. Failures surface as a non-zero exit
- *   code plus free-form stderr from bwrap / the launched process. The
- *   orchestrator therefore suppresses its `[4] escalation` branch for this
- *   backend; denied commands just fail and the model sees the stderr.
- * - `wrapCommand()` returns the original command verbatim when the sandbox
- *   is globally disabled or its native deps (bwrap / socat) are missing. In
- *   that case we still dispatch through `LocalShellService` for a graceful
- *   degradation instead of spawning a broken sandbox.
- */
-export declare class LegacySandboxShellServiceImpl implements ShellService {
-    protected readonly localShellService: ShellService;
-    protected readonly bashSandboxManager: IBashSandboxManager;
-    protected readonly logger: Logger;
-    execute(params: ShellExecuteParams): Promise<ShellExecutionHandle>;
-    disposeAll(): Promise<void>;
-    getActiveHandleCount(): number;
-}

package/dist-server/types/node/bash-sandbox/managed-security-policy.d.ts

@@ -1,6 +0,0 @@
-import { type ResolvedSecurityCenterPolicy } from '@genie/product';
-/**
- * 从子进程 env 读取产品配置顶层 clientSecurity 并翻译为规范化策略。
- * 顺序：ACC_PRODUCT_CONFIG_V3 → V2 → ACC_PRODUCT_CONFIG_PATH 落盘文件。全部失败返回 managed:false。
- */
-export declare function readManagedSecurityPolicyFromEnv(env?: NodeJS.ProcessEnv): ResolvedSecurityCenterPolicy;