@nanhara/hara 0.130.0 → 0.130.2

package/CHANGELOG.md

@@ -5,6 +5,25 @@ All notable changes to `@nanhara/hara`.
 > Versioning (pre-1.0, SemVer-style): the **minor** (middle) number bumps for a **new feature**; the
 > **patch** (last) number bumps for **optimizations/fixes of existing features**.
 
+## 0.130.2 — 2026-07-21 — Weixin delivery identity
+
+- Personal WeChat iLink messages now pass valid `message_id` and `create_time_ms` metadata into Hara's
+  cross-restart stale-event, deduplication, and no-rerun boundary.
+- Missing or invalid metadata remains genuinely optional: the adapter omits `messageId` and `createdAtMs`
+  instead of adding own properties whose value is `undefined`.
+- The Feishu SDK's transitive `protobufjs` parser is pinned to the patched 7.6.5 release.
+- Upgrade with `npm i -g @nanhara/hara@0.130.2`.
+
+## 0.130.1 — 2026-07-21 — Windows private-state portability
+
+- `hara serve` no longer calls the inapplicable POSIX `fchmod` operation on Windows discovery
+  directory and file handles. Official Windows standalone builds can now create the authenticated
+  `serve.json` record instead of exiting with `EPERM`.
+- The same descriptor-mode boundary is shared by all private-state readers and writers: Windows
+  retains file type, identity, no-replace, atomic-write, and symlink/reparse-point checks while
+  omitting only POSIX owner bits; macOS and Linux still fail closed if permission tightening fails.
+- Upgrade with `npm i -g @nanhara/hara@0.130.1`.
+
 ## 0.130.0 — 2026-07-20 — ordered task-state delivery
 
 - Typed `event.task_state` notifications now carry a server-stream identity and a positive,

package/dist/fs-permissions.js

@@ -0,0 +1,14 @@
+import { fchmodSync } from "node:fs";
+/**
+ * Tighten an already-verified descriptor on platforms that implement POSIX ownership modes.
+ *
+ * Windows Node/Bun may expose `fchmodSync`, but the underlying handle can reject it with EPERM and
+ * Windows ACLs do not implement these POSIX owner bits. Callers must retain their type, identity,
+ * no-replace, and atomic-write checks; only the inapplicable mode operation is omitted on Windows.
+ * POSIX errors deliberately propagate so a failed private-state repair remains fail-closed.
+ */
+export function tightenPrivateDescriptorMode(fd, mode, platform = process.platform, writeMode = fchmodSync) {
+    if (platform === "win32")
+        return;
+    writeMode(fd, mode);
+}

package/dist/gateway/weixin.js

@@ -45,6 +45,19 @@ const WEIXIN_CDN_ALLOWLIST = new Set([
 const IMAGE_EXTS = new Set(["jpg", "jpeg", "png", "gif", "webp", "bmp"]);
 const num = (v) => (typeof v === "number" ? v : 0);
 const str = (v) => (v == null ? "" : String(v));
+function stableWeixinMessageId(value) {
+    if (typeof value === "string")
+        return value.trim() || undefined;
+    if (Number.isSafeInteger(value))
+        return String(value);
+    return undefined;
+}
+function weixinCreatedAtMs(value) {
+    const parsed = Number(value);
+    if (!Number.isFinite(parsed) || parsed <= 0)
+        return undefined;
+    return Math.trunc(parsed);
+}
 // ── pure protocol helpers (unit-tested) ──────────────────────────────────────
 /** X-WECHAT-UIN: base64 of the decimal string of a random uint32 (regenerated per request). */
 export function randomWechatUin() {
@@ -145,7 +158,19 @@ export function parseWeixinMessage(msg, accountId) {
     // This tells it the text is already transcribed so it just answers.
     const isVoice = !items.some((i) => i?.type === ITEM_TEXT) && items.some((i) => i?.type === 3);
     const tagged = isVoice ? `(The user sent this as a voice message; it is already transcribed to text below — just reply to it normally, you don't have or need the audio.)\n\n${text}` : text;
-    return { inbound: { chatId: from, userId: from, userName: from, text: tagged }, contextToken: str(msg?.context_token).trim() };
+    const messageId = stableWeixinMessageId(msg?.message_id);
+    const createdAtMs = weixinCreatedAtMs(msg?.create_time_ms);
+    return {
+        inbound: {
+            chatId: from,
+            userId: from,
+            userName: from,
+            text: tagged,
+            ...(messageId ? { messageId } : {}),
+            ...(createdAtMs === undefined ? {} : { createdAtMs }),
+        },
+        contextToken: str(msg?.context_token).trim(),
+    };
 }
 /** iLink signals expiry via -14, or -2 + errmsg "unknown error" (a stale-session masquerading as rate-limit). */
 export function isSessionExpired(ret, errcode, errmsg) {

package/dist/security/private-state.js

@@ -1,12 +1,13 @@
 // Owner-only migration for Hara's local control plane. New writers should still create private files
 // directly, but this repairs installations created by older releases and makes ~/.hara non-traversable by
 // other local users before credentials/session state are read.
-import { closeSync, chmodSync, constants, fchmodSync, fstatSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, readSync, readdirSync, realpathSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
+import { closeSync, chmodSync, constants, fstatSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, readSync, readdirSync, realpathSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import { randomUUID } from "node:crypto";
 import { homedir } from "node:os";
 import { basename, dirname, join, resolve } from "node:path";
 import { FileReadLimitError, MAX_EDIT_READ_BYTES, decodeUtf8Strict, openVerifiedRegularFileNoFollow, verifyOpenedRegularFileSync, } from "../fs-read.js";
 import { optionalPosixOpenFlag } from "../fs-open-flags.js";
+import { tightenPrivateDescriptorMode } from "../fs-permissions.js";
 import { sameOpenedFileIdentity } from "../fs-identity.js";
 const PRIVATE_TREES = new Set(["sessions", "checkpoints", "index", "gateway", "cron", "weixin", "tool-results", "plugin-receipts", "artifacts"]);
 const tightenedHomes = new Set();
@@ -81,7 +82,7 @@ function verifyAndTightenPrivateDirectory(path) {
             if (!opened.isDirectory() || opened.dev !== inspected.dev || opened.ino !== inspected.ino) {
                 throw new Error(`private Hara state directory changed while opening: '${path}'`);
             }
-            fchmodSync(fd, 0o700);
+            tightenPrivateDescriptorMode(fd, 0o700);
         }
         finally {
             closeSync(fd);
@@ -190,13 +191,7 @@ export function readPrivateStateFileSnapshotSync(path, maxBytes = MAX_EDIT_READ_
             rejectHardLinks: true,
             protectSensitive: false,
         });
-        try {
-            fchmodSync(fd, 0o600);
-        }
-        catch (error) {
-            if (process.platform !== "win32")
-                throw error;
-        }
+        tightenPrivateDescriptorMode(fd, 0o600);
         // chmod may update ctime; capture the authoritative baseline afterwards.
         info = fstatSync(fd);
         if (info.size > limit)
@@ -334,13 +329,7 @@ export function writePrivateStateBytesOnceSync(binding, bytes) {
     try {
         fd = openSync(temp, "wx", 0o600);
         writeFileSync(fd, bytes);
-        try {
-            fchmodSync(fd, 0o600);
-        }
-        catch (error) {
-            if (process.platform !== "win32")
-                throw error;
-        }
+        tightenPrivateDescriptorMode(fd, 0o600);
         fsyncSync(fd);
         const stagedInfo = fstatSync(fd);
         if (!stagedInfo.isFile() || stagedInfo.nlink !== 1) {
@@ -422,13 +411,7 @@ export function writePrivateStateFileSync(binding, text, options = {}) {
         // Bun's Windows numeric-open compatibility can otherwise turn this valid create into a false ENOENT.
         fd = openSync(temp, "wx", 0o600);
         writeFileSync(fd, text, "utf8");
-        try {
-            fchmodSync(fd, 0o600);
-        }
-        catch (error) {
-            if (process.platform !== "win32")
-                throw error;
-        }
+        tightenPrivateDescriptorMode(fd, 0o600);
         fsyncSync(fd);
         const stagedInfo = fstatSync(fd);
         if (!stagedInfo.isFile() || stagedInfo.nlink !== 1)

package/dist/serve/server.js

@@ -5,7 +5,7 @@
 // (no import cycle back into the CLI entry).
 import { WebSocketServer } from "ws";
 import { randomBytes, randomUUID, timingSafeEqual, createHash } from "node:crypto";
-import { closeSync, constants as fsConstants, fchmodSync, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, rmdirSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
+import { closeSync, constants as fsConstants, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, rmdirSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
 import { homedir } from "node:os";
 import { isAbsolute, join, relative, sep } from "node:path";
 import "../tools/all.js"; // register the full built-in toolset — serve must work as a standalone entry
@@ -35,6 +35,7 @@ import { parseFrame, rpcResult, rpcError, rpcNotify, ERR, PROTOCOL_VERSION } fro
 import { taskLifecycleEvent, } from "./task-events.js";
 import { readModelContextFileSync } from "../fs-read.js";
 import { optionalPosixOpenFlag } from "../fs-open-flags.js";
+import { tightenPrivateDescriptorMode } from "../fs-permissions.js";
 import { sameOpenedFileIdentity } from "../fs-identity.js";
 import { redactSensitiveText, redactSensitiveValue } from "../security/secrets.js";
 import { ArtifactStoreError, commitArtifact, getArtifact, importArtifact, listArtifactRevisions, listArtifacts, revertArtifact, } from "../artifacts/store.js";
@@ -81,7 +82,7 @@ const ensurePrivateDiscoveryDir = (dir) => {
             throw new Error(`${dir} must be a private directory, not a symlink`);
         // mkdir's mode does not affect a legacy directory. Operate through the verified descriptor so a path
         // replacement cannot redirect chmod to a symlink target between validation and permission tightening.
-        fchmodSync(fd, 0o700);
+        tightenPrivateDescriptorMode(fd, 0o700);
     }
     finally {
         if (fd !== undefined)
@@ -173,7 +174,7 @@ const writeDiscovery = async (dir, path, record) => {
         let fd;
         try {
             fd = openSync(temp, "wx", 0o600);
-            fchmodSync(fd, 0o600);
+            tightenPrivateDescriptorMode(fd, 0o600);
             writeFileSync(fd, `${JSON.stringify(record, null, 2)}\n`, "utf8");
             fsyncSync(fd);
             closeSync(fd);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanhara/hara",
-  "version": "0.130.0",
+  "version": "0.130.2",
   "description": "hara — a coding agent CLI that runs like an engineering org.",
   "bin": {
     "hara": "runtime-bootstrap.cjs"
@@ -75,7 +75,8 @@
   },
   "overrides": {
     "@larksuiteoapi/node-sdk": {
-      "axios": "1.18.1"
+      "axios": "1.18.1",
+      "protobufjs": "7.6.5"
     }
   }
 }