@xdarkicex/openclaw-memory-libravdb 1.6.5 → 1.6.7

package/dist/identity.js

@@ -2,6 +2,7 @@ import { userInfo, hostname } from "node:os";
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync, writeFileSync, renameSync, mkdirSync, } from "node:fs";
 import { join, dirname } from "node:path";
+import { execSync } from "node:child_process";
 /**
  * Resolves the identity file path, respecting OpenClaw's state directory conventions.
  *
@@ -56,8 +57,17 @@ function writeIdentityFile(path, userId, parts) {
     const dir = dirname(path);
     mkdirSync(dir, { recursive: true });
     const tmp = `${path}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
-    writeFileSync(tmp, JSON.stringify(identity, null, 2) + "\n");
+    writeFileSync(tmp, JSON.stringify(identity, null, 2) + "\n", { mode: 0o600 });
     renameSync(tmp, path);
+    // POSIX mode bits are advisory on Windows — enforce owner-only access via ACLs.
+    if (process.platform === "win32") {
+        try {
+            execSync(`icacls "${path}" /inheritance:r /grant:r "%USERNAME%:(R,W)"`, { stdio: "ignore", timeout: 5000 });
+        }
+        catch {
+            // best-effort; the file is already written with 0o600
+        }
+    }
 }
 export function resolveIdentity(params) {
     // 1. Plugin config override (highest priority)

package/dist/index.js

@@ -24994,6 +24994,7 @@ import {
   mkdirSync
 } from "node:fs";
 import { join, dirname } from "node:path";
+import { execSync } from "node:child_process";
 function resolveIdentityPath(configuredPath) {
   if (configuredPath) return configuredPath;
   const stateDir = process.env.OPENCLAW_STATE_DIR?.trim();
@@ -25033,8 +25034,17 @@ function writeIdentityFile(path4, userId, parts) {
   const dir = dirname(path4);
   mkdirSync(dir, { recursive: true });
   const tmp = `${path4}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
-  writeFileSync(tmp, JSON.stringify(identity, null, 2) + "\n");
+  writeFileSync(tmp, JSON.stringify(identity, null, 2) + "\n", { mode: 384 });
   renameSync(tmp, path4);
+  if (process.platform === "win32") {
+    try {
+      execSync(
+        `icacls "${path4}" /inheritance:r /grant:r "%USERNAME%:(R,W)"`,
+        { stdio: "ignore", timeout: 5e3 }
+      );
+    } catch {
+    }
+  }
 }
 function resolveIdentity(params) {
   const configUserId = params.configUserId?.trim();

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "libravdb-memory",
   "name": "LibraVDB Memory",
   "description": "Persistent vector memory with three-tier hybrid scoring",
-  "version": "1.6.5",
+  "version": "1.6.7",
   "kind": [
     "memory",
     "context-engine"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xdarkicex/openclaw-memory-libravdb",
-  "version": "1.6.5",
+  "version": "1.6.7",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",