@arbiterforge/ca-pi 0.21.3 → 0.21.4

package/README.md

@@ -10,7 +10,7 @@ and durable project context. You decide. codeArbiter enforces.
 <img alt="Claude Code plugin" src="https://img.shields.io/badge/Claude_Code-plugin-d97757">
 <img alt="Codex plugin" src="https://img.shields.io/badge/OpenAI_Codex-plugin-10a37f">
 <img alt="Pi Feature Forge preview" src="https://img.shields.io/badge/ca--pi-Feature_Forge_preview-d97757">
-<img alt="version 3.2.3" src="https://img.shields.io/badge/version-3.2.3-2b7489">
+<img alt="version 3.2.4" src="https://img.shields.io/badge/version-3.2.4-2b7489">
 <img alt="core lanes" src="https://img.shields.io/badge/core_lanes-18-555">
 <img alt="skills" src="https://img.shields.io/badge/skills-22-555">
 <img alt="agents" src="https://img.shields.io/badge/agents-20-555">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.21.3",
+  "version": "0.21.4",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/plugins/ca-pi/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `ca-pi` are documented in this file.
 
 ## [Unreleased]
 
+## [0.21.4] - 2026-10-19
+
+### Fixed
+
+- On Windows the artifact bridge read its binary's architecture through `platform.machine()`, which asks WMI and then the `PROCESSOR_*` environment variables. A read-only sandbox can block WMI and strip that environment, so reads failed with `UNSUPPORTED_PLATFORM: unsupported architecture`. The bridge now asks the kernel (`IsWow64Process2`) for the native machine, consults no environment, and still fails closed when the OS gives no answer (#986).
+
 ## [0.21.3] - 2026-10-19
 
 ### Fixed

package/plugins/ca-pi/helpers/artifacts/release.json

@@ -37,11 +37,11 @@
   },
   "context_qualification": {
     "darwin/amd64": {
-      "source_commit": "406435438171f442305147b23ad8714ffb2de886",
+      "source_commit": "4e33a9a7ef7ad22eeec2d925305164ccb9179922",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39261627593",
+      "run_id": "39285460301",
       "binary_sha256": "e501ca2b817c882feec23bc3560223f20d88ca372400f950679bfe01ba47cebd",
-      "observation_sha256": "92ffe83810fd75c64241d18bb10ebf1f961bdcf2ad85a4523e59499a99dacdf7",
+      "observation_sha256": "fe57f74d7cda25cf36e845fcb7b74226d0651120f9129bd7abf9e394d10091ca",
       "module_sha256": "896150db84c968920a4397b61b5be1d4d0d3775de7816d172f0bf4885e9e7133",
       "native_cases": [
         "TestContextBoundedRender",
@@ -53,11 +53,11 @@
       ]
     },
     "darwin/arm64": {
-      "source_commit": "406435438171f442305147b23ad8714ffb2de886",
+      "source_commit": "4e33a9a7ef7ad22eeec2d925305164ccb9179922",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39261627593",
+      "run_id": "39285460301",
       "binary_sha256": "0fe9c4672486a28db1340c77d9eebf37bc33774fc34b5c055728f135afe4d7e8",
-      "observation_sha256": "f32b281e641f4bb8edccb7a058051c28f52bc5fef093bc0c393242217bfdc2bd",
+      "observation_sha256": "0c070e5db7e5296d7492d374ebff59d0da38167d746b29d924fc9508cafaf365",
       "module_sha256": "896150db84c968920a4397b61b5be1d4d0d3775de7816d172f0bf4885e9e7133",
       "native_cases": [
         "TestContextBoundedRender",
@@ -69,11 +69,11 @@
       ]
     },
     "linux/amd64": {
-      "source_commit": "406435438171f442305147b23ad8714ffb2de886",
+      "source_commit": "4e33a9a7ef7ad22eeec2d925305164ccb9179922",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39261627593",
+      "run_id": "39285460301",
       "binary_sha256": "f98d2647144640b226d0fa3fae6369eefbcee477e9d2bb818f767711e6a3e506",
-      "observation_sha256": "c44e13ff2daaffb5721cc2926d2c92c62b040fd04a7375b188699e67071d7201",
+      "observation_sha256": "26ca308b11f988606f2ad007560010c863aec29af92d277fb5aa65f80dcdad13",
       "module_sha256": "896150db84c968920a4397b61b5be1d4d0d3775de7816d172f0bf4885e9e7133",
       "native_cases": [
         "TestContextBoundedRender",
@@ -85,11 +85,11 @@
       ]
     },
     "linux/arm64": {
-      "source_commit": "406435438171f442305147b23ad8714ffb2de886",
+      "source_commit": "4e33a9a7ef7ad22eeec2d925305164ccb9179922",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39261627593",
+      "run_id": "39285460301",
       "binary_sha256": "7abc7f188851bde8c082c2b812b74378e9e1848541aeb9029ee8551f4b68fdaa",
-      "observation_sha256": "57342715d43327d295410d61c0f9df7e11ef6f076ac4bda9067d44988548fcda",
+      "observation_sha256": "dcee8721dfb207509ae3e487fa45e73f27ee1cb8740ad6e4b6f157302a21a3f9",
       "module_sha256": "896150db84c968920a4397b61b5be1d4d0d3775de7816d172f0bf4885e9e7133",
       "native_cases": [
         "TestContextBoundedRender",
@@ -101,11 +101,11 @@
       ]
     },
     "windows/amd64": {
-      "source_commit": "406435438171f442305147b23ad8714ffb2de886",
+      "source_commit": "4e33a9a7ef7ad22eeec2d925305164ccb9179922",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39261627593",
+      "run_id": "39285460301",
       "binary_sha256": "3fe0a4b867fbcc8a278248f92697b649f4b9b208d51c5168885ba92fcbb73961",
-      "observation_sha256": "85c96ca98d349c9ecb29a7f00a926899a8da5e39597ac42a9bb052d551d1785e",
+      "observation_sha256": "169b76151423856386be0bed088ebde2684fcb46faef49c354cf1e4db77136dc",
       "module_sha256": "896150db84c968920a4397b61b5be1d4d0d3775de7816d172f0bf4885e9e7133",
       "native_cases": [
         "TestContextBoundedRender",
@@ -117,11 +117,11 @@
       ]
     },
     "windows/arm64": {
-      "source_commit": "406435438171f442305147b23ad8714ffb2de886",
+      "source_commit": "4e33a9a7ef7ad22eeec2d925305164ccb9179922",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39261627593",
+      "run_id": "39285460301",
       "binary_sha256": "339210645436d11bca4129f74d4a7885ad12a9489f449669b5f46a6f9cd1056d",
-      "observation_sha256": "ecd9301e92933159f92991f72be499bc89afa30136545560fdce37d8dd3b0813",
+      "observation_sha256": "bcb30a463547d0ee70cccf0063a08c337f371a9f2a206fe7775e9de59c55bb68",
       "module_sha256": "896150db84c968920a4397b61b5be1d4d0d3775de7816d172f0bf4885e9e7133",
       "native_cases": [
         "TestContextBoundedRender",

package/plugins/ca-pi/hooks/_artifactlib.py

@@ -976,6 +976,45 @@ def _engine_timeout() -> float:
     return value
 
 
+# IMAGE_FILE_MACHINE values IsWow64Process2 reports for the native machine.
+_WINDOWS_NATIVE_MACHINES = {0x8664: "amd64", 0xAA64: "arm64"}
+
+
+def _windows_native_architecture() -> str | None:
+    """Ask Windows itself for the native machine, through IsWow64Process2.
+
+    platform.machine() asks WMI first and then falls back to PROCESSOR_*
+    environment variables. A read-only sandbox can block WMI and strip that
+    environment, which left the architecture empty (#986). The kernel call
+    needs neither, and the environment is never consulted. None means the OS
+    gave no answer, and the caller fails closed."""
+    try:
+        import ctypes
+        query = ctypes.WinDLL("kernel32", use_last_error=True).IsWow64Process2
+    except (ImportError, OSError, AttributeError):
+        return None
+    # BOOL IsWow64Process2(HANDLE, USHORT *process, USHORT *native); the
+    # current-process pseudo-handle is -1. One-element arrays pass as pointers.
+    query.argtypes = [ctypes.c_void_p, ctypes.c_void_p, ctypes.c_void_p]
+    query.restype = ctypes.c_uint32
+    process, native = (ctypes.c_uint16 * 1)(), (ctypes.c_uint16 * 1)()
+    if not query(ctypes.c_void_p(-1), process, native):
+        return None
+    return _WINDOWS_NATIVE_MACHINES.get(native[0])
+
+
+def _host_platform() -> tuple[str, str]:
+    """The installed binary's platform cell, or UNSUPPORTED_PLATFORM."""
+    system = {"Linux":"linux", "Darwin":"darwin", "Windows":"windows"}.get(platform.system())
+    if system == "windows":
+        arch = _windows_native_architecture()
+    else:
+        arch = {"x86_64":"amd64", "amd64":"amd64", "aarch64":"arm64", "arm64":"arm64"}.get(platform.machine().lower())
+    if system is None or arch is None:
+        raise ArtifactError("UNSUPPORTED_PLATFORM", "unsupported architecture")
+    return system, arch
+
+
 class ArtifactClient:
     def __init__(self, root: str | Path, installation: str | Path, *, timeout: float | None = None,
                  initialize_store: bool = True):
@@ -1013,10 +1052,7 @@ class ArtifactClient:
         return dict(context)
 
     def _open_binary(self) -> int:
-        system = {"Linux":"linux", "Darwin":"darwin", "Windows":"windows"}.get(platform.system())
-        arch = {"x86_64":"amd64", "amd64":"amd64", "aarch64":"arm64", "arm64":"arm64"}.get(platform.machine().lower())
-        if system is None or arch is None:
-            raise ArtifactError("UNSUPPORTED_PLATFORM", "unsupported architecture")
+        system, arch = _host_platform()
         manifest_path = self.installation / "release.json"
         try:
             mf = _open_pinned_regular(manifest_path)
@@ -1162,8 +1198,7 @@ class ArtifactClient:
 
     @staticmethod
     def _binary_name() -> str:
-        system = {"Linux":"linux", "Darwin":"darwin", "Windows":"windows"}[platform.system()]
-        arch = {"x86_64":"amd64", "amd64":"amd64", "aarch64":"arm64", "arm64":"arm64"}[platform.machine().lower()]
+        system, arch = _host_platform()
         return f"ca-artifact-{system}-{arch}" + (".exe" if system == "windows" else "")
 
     @staticmethod

package/plugins/ca-pi/hooks/_host.py

@@ -11,7 +11,7 @@ import hostapi  # noqa: E402
 class PiHost(hostapi.Host):
     name = "pi"
     adapter_name = "@arbiterforge/ca-pi"
-    adapter_version = "0.21.3"
+    adapter_version = "0.21.4"
     update_target = "ca-pi"
     update_tag_prefix = "ca-pi-v"
     update_command = "pi update npm:@arbiterforge/ca-pi"

package/plugins/ca-pi/hooks/hostapi.py

@@ -313,7 +313,7 @@ class Host:
 
     name = "claude"
     adapter_name = "ca"
-    adapter_version = "3.2.3"
+    adapter_version = "3.2.4"
 
     # Update-notifier descriptor. Each independently versioned host overrides
     # these three values in its per-plugin _host.py. Keeping the target,

package/plugins/ca-pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.21.3",
+  "version": "0.21.4",
   "private": true,
   "license": "AGPL-3.0-only",
   "type": "module",