larkin 0.2.76 → 0.2.78

package/README.md

@@ -1,10 +1,10 @@
 # Larkin
 
-Larkin connects Codex, Claude Code, and Pi agent runtimes to Feishu. It provides a local runtime host, persistent sessions, reminders, interactive messages, and a local dashboard.
+Larkin connects Codex, Claude Code, and Pi agent runtimes to Feishu (Lark). It provides a local runtime host, persistent sessions, reminders, interactive messages, and a local dashboard.
 
 ## Requirements
 
-- A supported macOS or Linux system
+- A supported macOS, Linux, or Windows (x64) system
 - `lark-cli`
 - At least one supported agent runtime and its authentication
 - Bun 1.3.14 when running the npm package or building from source (standalone binaries bundle their own runtime)
@@ -22,7 +22,7 @@ npm install -g larkin
 larkin --version
 ```
 
-Standalone binaries for macOS and Linux are attached to every [GitHub Release](https://github.com/eddiearc/larkin/releases) for environments without Bun or npm.
+Standalone binaries for macOS, Linux, and Windows (x64) are attached to every [GitHub Release](https://github.com/eddiearc/larkin/releases) for environments without Bun or npm. Windows binaries are cross-compiled; their runtime behavior has not been end-to-end verified on a Windows host.
 
 ## Usage
 

package/dist/app/agent-cli.mjs

@@ -105,7 +105,7 @@ function query(requestPath, name) {
 }
 function migrationError(group, subcommand) {
     if (group === "message") {
-        return "message 已移除：只读查看收件箱用 `larkin inbox check`，领取完整消息用 `larkin inbox poll`；飞书发送、回复和查询请使用 `larkin im +messages-send`、`+messages-reply`、`+chat-messages-list` 或 `+messages-mget`。";
+        return "message 已移除：只读查看收件箱用 `larkin inbox check`，领取完整消息用 `larkin inbox poll`；飞书（Lark）发送、回复和查询请使用 `larkin im +messages-send`、`+messages-reply`、`+chat-messages-list` 或 `+messages-mget`。";
     }
     if (group === "channel") {
         return "channel 已移除：群聊操作请使用 `larkin im +chat-list`、`+chat-search`、`chats get`、`+chat-create`、`+chat-update` 或 `chat.members get/create/delete`。";
@@ -114,9 +114,9 @@ function migrationError(group, subcommand) {
         return "attachment 已移除：发送附件请使用 `larkin im +messages-send --file/--image/--video/--audio`；下载请使用 `larkin im +messages-resources-download`。";
     }
     if (group === "server")
-        return "server 已移除；飞书群与消息信息请通过 `larkin im ...` 查询。";
+        return "server 已移除；飞书（Lark）群与消息信息请通过 `larkin im ...` 查询。";
     if (group === "im")
-        return "请通过 `larkin im ...` 使用飞书命令；Runtime 会自动绑定当前 Bot identity，并在写入前执行 freshness gate。可运行 `larkin im --help` 查看帮助。";
+        return "请通过 `larkin im ...` 使用飞书（Lark）命令；Runtime 会自动绑定当前 Bot identity，并在写入前执行 freshness gate。可运行 `larkin im --help` 查看帮助。";
     if (group === "profile" && subcommand !== "show") {
         return "profile 只保留只读的 `larkin profile show`；身份和凭证由 `larkin setup` 管理，不支持 update。";
     }

package/dist/app/agent-lark-cli-workspace.cjs

@@ -10,6 +10,7 @@ exports.managedOfficialLarkCli = managedOfficialLarkCli;
 exports.assertAgentWorkspaceBound = assertAgentWorkspaceBound;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
+const secure_metadata_js_1 = require("../platform/secure-metadata.cjs");
 const official_lark_cli_js_1 = require("./official-lark-cli.cjs");
 function larkChannelSourceConfigPath(agent) {
     if (!agent.stateDir)
@@ -43,13 +44,13 @@ function managedOfficialLarkCli(agent, env, resolve = official_lark_cli_js_1.res
 }
 function readPrivateJson(file, label) {
     const directory = node_fs_1.default.lstatSync(node_path_1.default.dirname(file));
-    if (!directory.isDirectory() || directory.isSymbolicLink() || (directory.mode & 0o777) !== 0o700
+    if (!directory.isDirectory() || directory.isSymbolicLink() || !(0, secure_metadata_js_1.exactMode)(directory, 0o700)
         || (typeof process.getuid === "function" && directory.uid !== process.getuid()))
         throw new Error(`${label} 目录不安全`);
     const fd = node_fs_1.default.openSync(file, node_fs_1.default.constants.O_RDONLY | (node_fs_1.default.constants.O_NOFOLLOW || 0));
     try {
         const stat = node_fs_1.default.fstatSync(fd);
-        if (!stat.isFile() || (stat.mode & 0o777) !== 0o600
+        if (!stat.isFile() || !(0, secure_metadata_js_1.exactMode)(stat, 0o600)
             || (typeof process.getuid === "function" && stat.uid !== process.getuid()))
             throw new Error(`${label} 文件不安全`);
         return JSON.parse(node_fs_1.default.readFileSync(fd, "utf8"));

package/dist/app/agent-lark-cli-workspace.mjs

@@ -1,5 +1,6 @@
 import fs from "node:fs";
 import path from "node:path";
+import { exactMode } from "../platform/secure-metadata.mjs";
 import { resolveOfficialLarkCli } from "./official-lark-cli.mjs";
 export function larkChannelSourceConfigPath(agent) {
     if (!agent.stateDir)
@@ -33,13 +34,13 @@ export function managedOfficialLarkCli(agent, env, resolve = resolveOfficialLark
 }
 function readPrivateJson(file, label) {
     const directory = fs.lstatSync(path.dirname(file));
-    if (!directory.isDirectory() || directory.isSymbolicLink() || (directory.mode & 0o777) !== 0o700
+    if (!directory.isDirectory() || directory.isSymbolicLink() || !exactMode(directory, 0o700)
         || (typeof process.getuid === "function" && directory.uid !== process.getuid()))
         throw new Error(`${label} 目录不安全`);
     const fd = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW || 0));
     try {
         const stat = fs.fstatSync(fd);
-        if (!stat.isFile() || (stat.mode & 0o777) !== 0o600
+        if (!stat.isFile() || !exactMode(stat, 0o600)
             || (typeof process.getuid === "function" && stat.uid !== process.getuid()))
             throw new Error(`${label} 文件不安全`);
         return JSON.parse(fs.readFileSync(fd, "utf8"));

package/dist/app/cli.mjs

@@ -111,7 +111,7 @@ if (!routes[command] && !wantsHelp) {
     routes[command] = runtimeAgentAuthority ? ["lark-cli", command] : ["lark", command];
 }
 if (!routes[command]) {
-    console.log(`larkin — Run persistent-personality agents on Feishu
+    console.log(`larkin — Run persistent-personality agents on Feishu (Lark)
 
 Usage: larkin <command>
   setup            Create or connect a bot, configure its Agent, start it, and open the dashboard

package/dist/app/local-control.mjs

@@ -7,11 +7,14 @@ import path from "node:path";
 import { readProcessState } from "../platform/process-state.mjs";
 import { currentProcessMetadata } from "../platform/process-inspect.cjs";
 import { processCommandToken } from "./internal-command.mjs";
+import { isWindows, notGroupOrWorldAccessible } from "../platform/secure-metadata.mjs";
 const AGENT_ID = /^cli_[A-Za-z0-9]+$/;
 const OPERATION_ID = /^[A-Za-z0-9_-]{8,128}$/;
 const AUTHORIZATION = /^[A-Za-z0-9_-]{43,128}$/;
 const UNIX_SOCKET_PATH_MAX_BYTES = process.platform === "darwin" ? 103 : 107;
 function socketPathsFit(root) {
+    if (isWindows)
+        return true; // Windows named-pipe socket paths use a much larger limit
     return ["supervisor.sock", "daemon.sock"].every((name) => Buffer.byteLength(path.join(root, name)) <= UNIX_SOCKET_PATH_MAX_BYTES);
 }
 function controlSocketRoot(larkinHome) {
@@ -21,6 +24,8 @@ function controlSocketRoot(larkinHome) {
     const preferred = path.join(path.resolve(os.tmpdir()), leaf);
     if (socketPathsFit(preferred))
         return preferred;
+    if (isWindows)
+        throw new Error("无法生成满足 Windows socket 路径限制的 control root");
     const fallback = path.join("/tmp", leaf);
     if (socketPathsFit(fallback))
         return fallback;
@@ -30,7 +35,7 @@ function assertSecureSocketDirectory(root) {
     const stat = fs.lstatSync(root);
     if (!stat.isDirectory() || stat.isSymbolicLink()
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())
-        || (stat.mode & 0o077) !== 0)
+        || !notGroupOrWorldAccessible(stat))
         throw new Error("control socket root 不安全");
     return root;
 }
@@ -52,7 +57,7 @@ function assertSecureRoot(root) {
     const stat = fs.lstatSync(root);
     if (!stat.isDirectory() || stat.isSymbolicLink()
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())
-        || (stat.mode & 0o077) !== 0)
+        || !notGroupOrWorldAccessible(stat))
         throw new Error("Larkin config root 必须由当前用户拥有且不可被其他用户访问");
 }
 function removeLegacyResetLedger(larkinHome) {
@@ -67,7 +72,7 @@ function removeLegacyResetLedger(larkinHome) {
         throw error;
     }
     if (!stat.isFile() || stat.isSymbolicLink()
-        || (typeof process.getuid === "function" && stat.uid !== process.getuid()) || (stat.mode & 0o077) !== 0) {
+        || (typeof process.getuid === "function" && stat.uid !== process.getuid()) || !notGroupOrWorldAccessible(stat)) {
         throw new Error("legacy daemon control operation ledger 不安全");
     }
     fs.unlinkSync(file);
@@ -114,7 +119,7 @@ function secureAuthority(larkinHome) {
     const stat = fs.lstatSync(file);
     if (!stat.isFile() || stat.isSymbolicLink()
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())
-        || (stat.mode & 0o077) !== 0)
+        || !notGroupOrWorldAccessible(stat))
         throw new Error("daemon control authority 不安全");
     const value = JSON.parse(fs.readFileSync(file, "utf8"));
     const validBinding = (binding) => !!binding && Number.isSafeInteger(binding.pid) && binding.pid > 0
@@ -634,7 +639,7 @@ async function sendSupervisorRecovery(larkinHome, operationId, timeoutMs) {
     const stat = fs.lstatSync(socket);
     if (!stat.isSocket() || stat.isSymbolicLink()
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())
-        || (stat.mode & 0o077) !== 0)
+        || !notGroupOrWorldAccessible(stat))
         throw new Error("supervisor control socket 不安全");
     return await new Promise((resolve, reject) => {
         const client = net.createConnection(socket);
@@ -690,7 +695,7 @@ async function requestAgentControl({ larkinHome, timeoutMs = 30_000, request, })
     const stat = fs.lstatSync(socket);
     if (!stat.isSocket() || stat.isSymbolicLink()
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())
-        || (stat.mode & 0o077) !== 0)
+        || !notGroupOrWorldAccessible(stat))
         throw new Error("daemon control socket 不安全");
     return await new Promise((resolve, reject) => {
         const client = net.createConnection(socket);

package/dist/app/official-lark-cli.cjs

@@ -12,10 +12,20 @@ exports.ensureOfficialLarkCliForSetup = ensureOfficialLarkCliForSetup;
 const node_child_process_1 = require("node:child_process");
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
+function safeRealpath(target) {
+    try {
+        return node_fs_1.default.realpathSync(target);
+    }
+    catch {
+        return null;
+    }
+}
 exports.OFFICIAL_LARK_CLI_VERSION = "1.0.79";
 exports.OFFICIAL_LARK_CLI_INSTALL = `npm install --global @larksuite/cli@${exports.OFFICIAL_LARK_CLI_VERSION}`;
 function loginShellPath(dependencies) {
     const env = dependencies.env ?? process.env;
+    if ((dependencies.platform ?? process.platform) === "win32")
+        return windowsLoginShellPath(dependencies, env);
     const shell = dependencies.shell || env.SHELL || "/bin/sh";
     const result = (dependencies.spawn ?? node_child_process_1.spawnSync)(shell, ["-lc", "command -v lark-cli 2>/dev/null"], {
         encoding: "utf8", env,
@@ -25,6 +35,30 @@ function loginShellPath(dependencies) {
     const candidate = String(result.stdout || "").split(/\r?\n/).map((line) => line.trim()).find(Boolean) || "";
     return node_path_1.default.isAbsolute(candidate) ? node_path_1.default.resolve(candidate) : null;
 }
+/**
+ * Windows 登录 shell 探测：npm 全局安装会生成 `lark-cli.cmd`/`lark-cli` shim，真正的
+ * 原生二进制位于 `<npm 前缀>/node_modules/@larksuite/cli/bin/lark-cli.exe`。`where lark-cli`
+ * 返回 shim 路径，从 shim 所在目录推导原生二进制优先返回；否则回退到命中的 .exe/.cmd
+ * 路径（交由 officialPackage 校验）。
+ */
+function windowsLoginShellPath(dependencies, env) {
+    const shell = dependencies.shell || "cmd.exe";
+    const result = (dependencies.spawn ?? node_child_process_1.spawnSync)(shell, ["/d", "/s", "/c", "where lark-cli 2>nul"], {
+        encoding: "utf8", env,
+    });
+    if (result.status !== 0 || result.error)
+        return null;
+    for (const line of String(result.stdout || "").split(/\r?\n/).map((value) => value.trim()).filter(Boolean)) {
+        if (!node_path_1.default.isAbsolute(line))
+            continue;
+        const native = node_path_1.default.join(node_path_1.default.dirname(line), "node_modules", "@larksuite", "cli", "bin", "lark-cli.exe");
+        if (safeRealpath(native))
+            return node_path_1.default.resolve(native);
+        if (/\.(exe|cmd)$/i.test(line))
+            return node_path_1.default.resolve(line);
+    }
+    return null;
+}
 function compatibleVersion(version) {
     const parse = (value) => {
         const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(value);
@@ -37,7 +71,7 @@ function compatibleVersion(version) {
     return actual[0] > minimum[0] || (actual[0] === minimum[0]
         && (actual[1] > minimum[1] || (actual[1] === minimum[1] && actual[2] >= minimum[2])));
 }
-function officialPackage(executable) {
+function officialPackage(executable, platform = process.platform) {
     let resolved;
     try {
         resolved = node_fs_1.default.realpathSync(executable);
@@ -55,8 +89,11 @@ function officialPackage(executable) {
                 const packageRoot = node_fs_1.default.realpathSync(directory);
                 const requested = node_path_1.default.resolve(packageRoot, bin);
                 const relative = node_path_1.default.relative(packageRoot, requested);
-                if ((relative === "" || (!relative.startsWith(`..${node_path_1.default.sep}`) && relative !== ".."))
-                    && node_fs_1.default.realpathSync(requested) === resolved) {
+                const withinPackage = relative === "" || (!relative.startsWith(`..${node_path_1.default.sep}`) && relative !== "..");
+                const matchesBinTarget = withinPackage && safeRealpath(requested) === resolved;
+                const matchesNativeWindows = withinPackage && platform === "win32"
+                    && safeRealpath(node_path_1.default.join(packageRoot, "bin", "lark-cli.exe")) === resolved;
+                if (matchesBinTarget || matchesNativeWindows) {
                     return { command: node_path_1.default.resolve(executable), argsPrefix: [], version: manifest.version };
                 }
             }
@@ -114,8 +151,29 @@ function validateOfficialCommand(command, env, spawn) {
  * 仅当 PATH 解析出可用的官方 CLI 时才返回结果；否则返回 null 回退到
  * 登录 shell 探测（保留对 shell 自定义 PATH 环境的兼容）。
  */
-function probePathResolution(env) {
+function probePathResolution(env, platform = process.platform) {
     const dirs = String(env.PATH || "").split(node_path_1.default.delimiter).filter(Boolean);
+    if (platform === "win32") {
+        for (const dir of dirs) {
+            for (const candidate of [
+                node_path_1.default.resolve(dir, "node_modules", "@larksuite", "cli", "bin", "lark-cli.exe"),
+                node_path_1.default.resolve(dir, "lark-cli.exe"),
+            ]) {
+                try {
+                    if (!node_fs_1.default.statSync(candidate).isFile())
+                        continue;
+                }
+                catch {
+                    continue;
+                }
+                const command = officialPackage(candidate, platform);
+                if (!command)
+                    continue;
+                return validateOfficialCommand(command, env, node_child_process_1.spawnSync);
+            }
+        }
+        return null;
+    }
     for (const dir of dirs) {
         const candidate = node_path_1.default.resolve(dir, "lark-cli");
         try {
@@ -125,7 +183,7 @@ function probePathResolution(env) {
         catch {
             continue;
         }
-        const command = officialPackage(candidate);
+        const command = officialPackage(candidate, platform);
         if (!command)
             return null;
         return validateOfficialCommand(command, env, node_child_process_1.spawnSync);
@@ -134,8 +192,9 @@ function probePathResolution(env) {
 }
 function probeOfficialLarkCliUncached(dependencies) {
     const env = dependencies.env ?? process.env;
+    const platform = dependencies.platform ?? process.platform;
     if (!dependencies.spawn && !dependencies.shell) {
-        const fromPath = probePathResolution(env);
+        const fromPath = probePathResolution(env, platform);
         if (fromPath)
             return fromPath;
     }
@@ -146,7 +205,7 @@ function probeOfficialLarkCliUncached(dependencies) {
             reason: "真实 login shell 找不到官方 lark-cli",
             nextAction: `运行 larkin setup，并确认执行：${exports.OFFICIAL_LARK_CLI_INSTALL}`,
         };
-    const command = officialPackage(executable);
+    const command = officialPackage(executable, platform);
     if (!command)
         return {
             state: "conflict",

package/dist/app/official-lark-cli.mjs

@@ -1,10 +1,20 @@
 import { spawnSync } from "node:child_process";
 import fs from "node:fs";
 import path from "node:path";
+function safeRealpath(target) {
+    try {
+        return fs.realpathSync(target);
+    }
+    catch {
+        return null;
+    }
+}
 export const OFFICIAL_LARK_CLI_VERSION = "1.0.79";
 export const OFFICIAL_LARK_CLI_INSTALL = `npm install --global @larksuite/cli@${OFFICIAL_LARK_CLI_VERSION}`;
 function loginShellPath(dependencies) {
     const env = dependencies.env ?? process.env;
+    if ((dependencies.platform ?? process.platform) === "win32")
+        return windowsLoginShellPath(dependencies, env);
     const shell = dependencies.shell || env.SHELL || "/bin/sh";
     const result = (dependencies.spawn ?? spawnSync)(shell, ["-lc", "command -v lark-cli 2>/dev/null"], {
         encoding: "utf8", env,
@@ -14,6 +24,30 @@ function loginShellPath(dependencies) {
     const candidate = String(result.stdout || "").split(/\r?\n/).map((line) => line.trim()).find(Boolean) || "";
     return path.isAbsolute(candidate) ? path.resolve(candidate) : null;
 }
+/**
+ * Windows 登录 shell 探测：npm 全局安装会生成 `lark-cli.cmd`/`lark-cli` shim，真正的
+ * 原生二进制位于 `<npm 前缀>/node_modules/@larksuite/cli/bin/lark-cli.exe`。`where lark-cli`
+ * 返回 shim 路径，从 shim 所在目录推导原生二进制优先返回；否则回退到命中的 .exe/.cmd
+ * 路径（交由 officialPackage 校验）。
+ */
+function windowsLoginShellPath(dependencies, env) {
+    const shell = dependencies.shell || "cmd.exe";
+    const result = (dependencies.spawn ?? spawnSync)(shell, ["/d", "/s", "/c", "where lark-cli 2>nul"], {
+        encoding: "utf8", env,
+    });
+    if (result.status !== 0 || result.error)
+        return null;
+    for (const line of String(result.stdout || "").split(/\r?\n/).map((value) => value.trim()).filter(Boolean)) {
+        if (!path.isAbsolute(line))
+            continue;
+        const native = path.join(path.dirname(line), "node_modules", "@larksuite", "cli", "bin", "lark-cli.exe");
+        if (safeRealpath(native))
+            return path.resolve(native);
+        if (/\.(exe|cmd)$/i.test(line))
+            return path.resolve(line);
+    }
+    return null;
+}
 function compatibleVersion(version) {
     const parse = (value) => {
         const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(value);
@@ -26,7 +60,7 @@ function compatibleVersion(version) {
     return actual[0] > minimum[0] || (actual[0] === minimum[0]
         && (actual[1] > minimum[1] || (actual[1] === minimum[1] && actual[2] >= minimum[2])));
 }
-function officialPackage(executable) {
+function officialPackage(executable, platform = process.platform) {
     let resolved;
     try {
         resolved = fs.realpathSync(executable);
@@ -44,8 +78,11 @@ function officialPackage(executable) {
                 const packageRoot = fs.realpathSync(directory);
                 const requested = path.resolve(packageRoot, bin);
                 const relative = path.relative(packageRoot, requested);
-                if ((relative === "" || (!relative.startsWith(`..${path.sep}`) && relative !== ".."))
-                    && fs.realpathSync(requested) === resolved) {
+                const withinPackage = relative === "" || (!relative.startsWith(`..${path.sep}`) && relative !== "..");
+                const matchesBinTarget = withinPackage && safeRealpath(requested) === resolved;
+                const matchesNativeWindows = withinPackage && platform === "win32"
+                    && safeRealpath(path.join(packageRoot, "bin", "lark-cli.exe")) === resolved;
+                if (matchesBinTarget || matchesNativeWindows) {
                     return { command: path.resolve(executable), argsPrefix: [], version: manifest.version };
                 }
             }
@@ -103,8 +140,29 @@ function validateOfficialCommand(command, env, spawn) {
  * 仅当 PATH 解析出可用的官方 CLI 时才返回结果；否则返回 null 回退到
  * 登录 shell 探测（保留对 shell 自定义 PATH 环境的兼容）。
  */
-function probePathResolution(env) {
+function probePathResolution(env, platform = process.platform) {
     const dirs = String(env.PATH || "").split(path.delimiter).filter(Boolean);
+    if (platform === "win32") {
+        for (const dir of dirs) {
+            for (const candidate of [
+                path.resolve(dir, "node_modules", "@larksuite", "cli", "bin", "lark-cli.exe"),
+                path.resolve(dir, "lark-cli.exe"),
+            ]) {
+                try {
+                    if (!fs.statSync(candidate).isFile())
+                        continue;
+                }
+                catch {
+                    continue;
+                }
+                const command = officialPackage(candidate, platform);
+                if (!command)
+                    continue;
+                return validateOfficialCommand(command, env, spawnSync);
+            }
+        }
+        return null;
+    }
     for (const dir of dirs) {
         const candidate = path.resolve(dir, "lark-cli");
         try {
@@ -114,7 +172,7 @@ function probePathResolution(env) {
         catch {
             continue;
         }
-        const command = officialPackage(candidate);
+        const command = officialPackage(candidate, platform);
         if (!command)
             return null;
         return validateOfficialCommand(command, env, spawnSync);
@@ -123,8 +181,9 @@ function probePathResolution(env) {
 }
 function probeOfficialLarkCliUncached(dependencies) {
     const env = dependencies.env ?? process.env;
+    const platform = dependencies.platform ?? process.platform;
     if (!dependencies.spawn && !dependencies.shell) {
-        const fromPath = probePathResolution(env);
+        const fromPath = probePathResolution(env, platform);
         if (fromPath)
             return fromPath;
     }
@@ -135,7 +194,7 @@ function probeOfficialLarkCliUncached(dependencies) {
             reason: "真实 login shell 找不到官方 lark-cli",
             nextAction: `运行 larkin setup，并确认执行：${OFFICIAL_LARK_CLI_INSTALL}`,
         };
-    const command = officialPackage(executable);
+    const command = officialPackage(executable, platform);
     if (!command)
         return {
             state: "conflict",

package/dist/app/runtime-agent-config.mjs

@@ -3,6 +3,7 @@ import crypto from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { exactMode, notGroupOrWorldAccessible } from "../platform/secure-metadata.mjs";
 import { acquireProcessLock } from "../platform/process-state.mjs";
 import { assertSecureBotsDirectory, readSecureBotCredential, validCredentialRecord, } from "../setup/run-credential-preflight.mjs";
 import { resolveOfficialLarkCli } from "./official-lark-cli.mjs";
@@ -12,7 +13,7 @@ function assertSecureProfileDirectory(directory) {
     const stat = fs.lstatSync(directory);
     if (!stat.isDirectory() || stat.isSymbolicLink()
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())
-        || (stat.mode & 0o777) !== 0o700)
+        || !exactMode(stat, 0o700))
         throw new Error("lark-cli profile 目录不安全");
 }
 function captureProfileSnapshot(file) {
@@ -22,7 +23,7 @@ function captureProfileSnapshot(file) {
         const stat = fs.fstatSync(fd);
         if (!stat.isFile()
             || (typeof process.getuid === "function" && stat.uid !== process.getuid())
-            || (stat.mode & 0o077) !== 0)
+            || !notGroupOrWorldAccessible(stat))
             throw new Error("lark-cli config.json 不安全");
         const raw = fs.readFileSync(fd);
         const value = JSON.parse(raw.toString("utf8"));

package/dist/app/setup.mjs

@@ -22,7 +22,7 @@ const flag = (name) => { const index = argv.indexOf(name); return index >= 0 ? a
 const say = (...args) => console.log(...args);
 const die = (message) => { console.error(`✗ ${message}`); process.exit(1); };
 if (argv.some((arg) => arg === "--app-id" || arg.startsWith("--app-id="))) {
-    die("setup 不支持 --app-id；请运行 larkin setup 并在飞书网页中选择机器人");
+    die("setup 不支持 --app-id；请运行 larkin setup 并在飞书（Lark）网页中选择机器人");
 }
 if (argv.some((arg) => arg === "--no-dashboard" || arg.startsWith("--no-dashboard="))) {
     die("--no-dashboard 已移除；dashboard 由 larkin start 统一管理");
@@ -67,7 +67,7 @@ if (!OPT.help && normalizedRuntime.distribution === "external" && (flag("--provi
     die("external-pi 使用已有 pi 环境，不接受 --provider/--api-key/--base-url");
 }
 if (OPT.help) {
-    say(`larkin setup — Create or connect a Feishu bot, then configure and attach its Agent
+    say(`larkin setup — Create or connect a Feishu (Lark) bot, then configure and attach its Agent
 
 Usage:
   larkin setup                         Select a bot in the browser and run setup（默认：内置 Pi + 配置完成即热挂载）
@@ -128,7 +128,7 @@ export async function main() {
         env: process.env,
         interactive: Boolean(process.stdin.isTTY && process.stdout.isTTY),
         async confirmInstall(command) {
-            say("[setup 0/5] Larkin 需要未修改的官方 lark-cli 作为 Feishu 命令下游。");
+            say("[setup 0/5] Larkin 需要未修改的官方 lark-cli 作为 Feishu (Lark) 命令下游。");
             say(`将执行：${command}`);
             const input = readline.createInterface({ input: process.stdin, output: process.stdout });
             const answer = (await input.question("是否安装？[y/N] ")).trim().toLowerCase();
@@ -137,7 +137,7 @@ export async function main() {
         },
     }).catch((error) => die(error instanceof Error ? error.message : String(error)));
     say(`[setup 0/5] ✓ 官方 lark-cli ${official.command.version}: ${official.command.command}${official.installed ? "（刚刚安装）" : ""}`);
-    say("\nAgent 与飞书机器人按 App ID 一一对应：");
+    say("\nAgent 与飞书（Lark）机器人按 App ID 一一对应：");
     say("  • 网页选择同一个机器人 → 热更新该 Agent，不重启其他 Agent");
     say("  • 网页创建新机器人 → 热挂载新 Agent，状态彼此独立\n");
     fs.mkdirSync(CFG_DIR, { recursive: true, mode: 0o700 });

package/dist/feishu/host-shell.cjs

@@ -711,6 +711,9 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
             domain: agent.feishuDomain || "https://open.feishu.cn",
             source: "larkin",
             policy: { dmMode: "open", requireMention: false, respondToMentionAll: true },
+            // issue #88：关闭 SDK 的防抖批量合并（默认 600ms），逐条投递，
+            // 保证 messageId/threadId/发送者与内容、提及永远同源（见 #66）。
+            batch: { text: { delayMs: 0 } },
             handshakeTimeoutMs: 15_000,
             keepalive: {
                 enabled: true,
@@ -823,6 +826,9 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
                 domain: agent.feishuDomain || "https://open.feishu.cn",
                 source: "larkin",
                 policy: { dmMode: "open", requireMention: false, respondToMentionAll: true },
+                // issue #88：关闭 SDK 的防抖批量合并（默认 600ms），逐条投递，
+                // 保证 messageId/threadId/发送者与内容、提及永远同源（见 #66）。
+                batch: { text: { delayMs: 0 } },
                 handshakeTimeoutMs: 15_000,
                 keepalive: { enabled: true, intervalMs: 15_000 },
                 includeRawEvent: true,

package/dist/feishu/host-shell.mjs

@@ -671,6 +671,9 @@ export function createHostShell({ env = process.env, runtimeHost, channelPackage
             domain: agent.feishuDomain || "https://open.feishu.cn",
             source: "larkin",
             policy: { dmMode: "open", requireMention: false, respondToMentionAll: true },
+            // issue #88：关闭 SDK 的防抖批量合并（默认 600ms），逐条投递，
+            // 保证 messageId/threadId/发送者与内容、提及永远同源（见 #66）。
+            batch: { text: { delayMs: 0 } },
             handshakeTimeoutMs: 15_000,
             keepalive: {
                 enabled: true,
@@ -783,6 +786,9 @@ export function createHostShell({ env = process.env, runtimeHost, channelPackage
                 domain: agent.feishuDomain || "https://open.feishu.cn",
                 source: "larkin",
                 policy: { dmMode: "open", requireMention: false, respondToMentionAll: true },
+                // issue #88：关闭 SDK 的防抖批量合并（默认 600ms），逐条投递，
+                // 保证 messageId/threadId/发送者与内容、提及永远同源（见 #66）。
+                batch: { text: { delayMs: 0 } },
                 handshakeTimeoutMs: 15_000,
                 keepalive: { enabled: true, intervalMs: 15_000 },
                 includeRawEvent: true,

package/dist/platform/callback-capability.cjs

@@ -50,6 +50,7 @@ exports.verifyCallbackProbe = verifyCallbackProbe;
 const node_crypto_1 = require("node:crypto");
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
+const secure_metadata_js_1 = require("./secure-metadata.cjs");
 const APP_ID = /^cli_[A-Za-z0-9]+$/;
 const NONCE = /^[a-f0-9]{32}$/;
 function credentialFile(configDir, appId) {
@@ -59,7 +60,7 @@ function credentialFile(configDir, appId) {
 }
 function readCredential(file) {
     const stat = fs.lstatSync(file);
-    if (!stat.isFile() || stat.isSymbolicLink() || (stat.mode & 0o777) !== 0o600
+    if (!stat.isFile() || stat.isSymbolicLink() || !(0, secure_metadata_js_1.exactMode)(stat, 0o600)
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())) {
         throw new Error("callback capability credential must be an owned 0600 regular file");
     }

package/dist/platform/callback-capability.mjs

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { exactMode } from "./secure-metadata.mjs";
 const APP_ID = /^cli_[A-Za-z0-9]+$/;
 const NONCE = /^[a-f0-9]{32}$/;
 function credentialFile(configDir, appId) {
@@ -10,7 +11,7 @@ function credentialFile(configDir, appId) {
 }
 function readCredential(file) {
     const stat = fs.lstatSync(file);
-    if (!stat.isFile() || stat.isSymbolicLink() || (stat.mode & 0o777) !== 0o600
+    if (!stat.isFile() || stat.isSymbolicLink() || !exactMode(stat, 0o600)
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())) {
         throw new Error("callback capability credential must be an owned 0600 regular file");
     }

package/dist/platform/config.cjs

@@ -60,6 +60,7 @@ const fs = __importStar(require("node:fs"));
 const os = __importStar(require("node:os"));
 const path = __importStar(require("node:path"));
 const root_layout_js_1 = require("./root-layout.cjs");
+const secure_metadata_js_1 = require("./secure-metadata.cjs");
 const runtime_model_catalog_js_1 = require("../runtime/runtime-model-catalog.cjs");
 const process_inspect_cjs_1 = __importDefault(require("./process-inspect.cjs"));
 const TOP_FIELDS_V3 = new Set(["version", "serverId", "activeAgent", "agents"]);
@@ -264,7 +265,7 @@ function assertPrivateConfigMetadata(metadata, label = "配置文件") {
         throw new Error(`${label} 必须是普通文件`);
     if (typeof process.getuid === "function" && metadata.uid !== process.getuid())
         throw new Error(`${label} owner 不是当前用户`);
-    if ((metadata.mode & 0o777) !== 0o600)
+    if (!(0, secure_metadata_js_1.exactMode)(metadata, 0o600))
         throw new Error(`${label} 权限必须是 0600`);
 }
 function readPrivateFile(file, root, limit, label) {
@@ -663,13 +664,7 @@ function atomicWriteConfig(file, value) {
     try {
         fs.renameSync(temporary, file);
         fs.chmodSync(file, 0o600);
-        const dirFd = fs.openSync(path.dirname(file), "r");
-        try {
-            fs.fsyncSync(dirFd);
-        }
-        finally {
-            fs.closeSync(dirFd);
-        }
+        (0, secure_metadata_js_1.fsyncDirectoryOf)(file);
     }
     catch (error) {
         try {

package/dist/platform/config.mjs

@@ -3,6 +3,7 @@ import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
 import { TargetRootLayout, resolveConfigDir as resolveRootConfigDir } from "./root-layout.mjs";
+import { exactMode, fsyncDirectoryOf } from "./secure-metadata.mjs";
 import { CURRENT_RUNTIME_MODELS } from "../runtime/runtime-model-catalog.mjs";
 import processInspect from "./process-inspect.cjs";
 const TOP_FIELDS_V3 = new Set(["version", "serverId", "activeAgent", "agents"]);
@@ -207,7 +208,7 @@ export function assertPrivateConfigMetadata(metadata, label = "配置文件") {
         throw new Error(`${label} 必须是普通文件`);
     if (typeof process.getuid === "function" && metadata.uid !== process.getuid())
         throw new Error(`${label} owner 不是当前用户`);
-    if ((metadata.mode & 0o777) !== 0o600)
+    if (!exactMode(metadata, 0o600))
         throw new Error(`${label} 权限必须是 0600`);
 }
 function readPrivateFile(file, root, limit, label) {
@@ -606,13 +607,7 @@ function atomicWriteConfig(file, value) {
     try {
         fs.renameSync(temporary, file);
         fs.chmodSync(file, 0o600);
-        const dirFd = fs.openSync(path.dirname(file), "r");
-        try {
-            fs.fsyncSync(dirFd);
-        }
-        finally {
-            fs.closeSync(dirFd);
-        }
+        fsyncDirectoryOf(file);
     }
     catch (error) {
         try {

package/dist/platform/release-artifacts.mjs

@@ -6,6 +6,7 @@ export const RELEASE_TARGETS = Object.freeze([
     { platform: "darwin", arch: "x64", bunTarget: "bun-darwin-x64-baseline" },
     { platform: "linux", arch: "arm64", bunTarget: "bun-linux-arm64" },
     { platform: "linux", arch: "x64", bunTarget: "bun-linux-x64-baseline" },
+    { platform: "windows", arch: "x64", bunTarget: "bun-windows-x64-baseline" },
 ]);
 export function artifactFilename(version, platform, arch) {
     if (!/^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/.test(version))
@@ -13,14 +14,20 @@ export function artifactFilename(version, platform, arch) {
     if (!RELEASE_TARGETS.some((target) => target.platform === platform && target.arch === arch)) {
         throw new Error(`unsupported release target: ${platform}-${arch}`);
     }
-    return `larkin-v${version}-${platform}-${arch}`;
+    const suffix = platform === "windows" ? ".exe" : "";
+    return `larkin-v${version}-${platform}-${arch}${suffix}`;
+}
+/** Node's `os.platform()` reports Windows as "win32"; canonical release manifests use "windows". */
+export function normalizeReleasePlatform(platform) {
+    return platform === "win32" ? "windows" : platform;
 }
 export function sha256File(file) {
     return crypto.createHash("sha256").update(fs.readFileSync(file)).digest("hex");
 }
 export function selectReleaseArtifact(manifest, platform, arch) {
-    const record = manifest.artifacts.find((candidate) => candidate.platform === platform && candidate.arch === arch);
-    if (!record || !RELEASE_TARGETS.some((target) => target.platform === platform && target.arch === arch)) {
+    const canonicalPlatform = normalizeReleasePlatform(platform);
+    const record = manifest.artifacts.find((candidate) => candidate.platform === canonicalPlatform && candidate.arch === arch);
+    if (!record || !RELEASE_TARGETS.some((target) => target.platform === canonicalPlatform && target.arch === arch)) {
         throw new Error(`unsupported platform: ${platform}-${arch}`);
     }
     if (record.file !== artifactFilename(manifest.version, record.platform, record.arch) || !/^[a-f0-9]{64}$/.test(record.sha256)) {

package/dist/platform/secure-metadata.cjs

@@ -0,0 +1,48 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isWindows = void 0;
+exports.exactMode = exactMode;
+exports.notGroupOrWorldAccessible = notGroupOrWorldAccessible;
+exports.fsyncDirectory = fsyncDirectory;
+exports.fsyncDirectoryOf = fsyncDirectoryOf;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+/**
+ * Cross-platform secure-metadata helpers. POSIX platforms enforce ownership and
+ * mode bits (fail-closed). Windows has no POSIX mode bits, so mode-bit assertions
+ * are skipped there; ownership on Windows is enforced by the filesystem/ACL and the
+ * parent-directory containment checks elsewhere. Windows runtime behavior is marked
+ * unverified (Owner decision B: no Windows validation in this delivery).
+ */
+exports.isWindows = process.platform === "win32";
+/** POSIX: `mode & 0o777` must equal `expected`. Windows: always passes. */
+function exactMode(stat, expected) {
+    if (exports.isWindows)
+        return true;
+    return (stat.mode & 0o777) === expected;
+}
+/** POSIX: group/other must have no access bits. Windows: always passes. */
+function notGroupOrWorldAccessible(stat) {
+    if (exports.isWindows)
+        return true;
+    return (stat.mode & 0o077) === 0;
+}
+/** Fsync a directory after rename for durability. Windows cannot open a directory for fsync, so this is a no-op. */
+function fsyncDirectory(directory) {
+    if (exports.isWindows)
+        return;
+    const fd = node_fs_1.default.openSync(directory, node_fs_1.default.constants.O_RDONLY);
+    try {
+        node_fs_1.default.fsyncSync(fd);
+    }
+    finally {
+        node_fs_1.default.closeSync(fd);
+    }
+}
+/** Fsync the parent directory of `file` after rename for durability. Windows: no-op. */
+function fsyncDirectoryOf(file) {
+    fsyncDirectory(node_path_1.default.dirname(file));
+}

package/dist/platform/secure-metadata.mjs

@@ -0,0 +1,38 @@
+import fs from "node:fs";
+import path from "node:path";
+/**
+ * Cross-platform secure-metadata helpers. POSIX platforms enforce ownership and
+ * mode bits (fail-closed). Windows has no POSIX mode bits, so mode-bit assertions
+ * are skipped there; ownership on Windows is enforced by the filesystem/ACL and the
+ * parent-directory containment checks elsewhere. Windows runtime behavior is marked
+ * unverified (Owner decision B: no Windows validation in this delivery).
+ */
+export const isWindows = process.platform === "win32";
+/** POSIX: `mode & 0o777` must equal `expected`. Windows: always passes. */
+export function exactMode(stat, expected) {
+    if (isWindows)
+        return true;
+    return (stat.mode & 0o777) === expected;
+}
+/** POSIX: group/other must have no access bits. Windows: always passes. */
+export function notGroupOrWorldAccessible(stat) {
+    if (isWindows)
+        return true;
+    return (stat.mode & 0o077) === 0;
+}
+/** Fsync a directory after rename for durability. Windows cannot open a directory for fsync, so this is a no-op. */
+export function fsyncDirectory(directory) {
+    if (isWindows)
+        return;
+    const fd = fs.openSync(directory, fs.constants.O_RDONLY);
+    try {
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+/** Fsync the parent directory of `file` after rename for durability. Windows: no-op. */
+export function fsyncDirectoryOf(file) {
+    fsyncDirectory(path.dirname(file));
+}

package/dist/platform/telemetry-spool.cjs

@@ -10,6 +10,7 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const node_zlib_1 = __importDefault(require("node:zlib"));
 const process_state_js_1 = require("./process-state.cjs");
+const secure_metadata_js_1 = require("./secure-metadata.cjs");
 const READY = /^(?:span-[0-9a-f-]+|import-[0-9a-f]{64})\.json$/;
 const REMNANT = /^\.(?:corrupt|write|ack|delete|stale-lock|purge)-[0-9A-Za-z-]+(?:\.(?:json|tmp|dir))?$/;
 const HEX_TRACE = /^[0-9a-f]{32}$/;
@@ -333,13 +334,7 @@ class TelemetrySpool {
             descriptor = undefined;
             node_fs_1.default.renameSync(temporary, file);
             node_fs_1.default.chmodSync(file, 0o600);
-            const directory = node_fs_1.default.openSync(this.config.spoolDir, node_fs_1.default.constants.O_RDONLY);
-            try {
-                node_fs_1.default.fsyncSync(directory);
-            }
-            finally {
-                node_fs_1.default.closeSync(directory);
-            }
+            (0, secure_metadata_js_1.fsyncDirectory)(this.config.spoolDir);
         }
         finally {
             if (descriptor !== undefined)
@@ -479,13 +474,7 @@ class TelemetrySpool {
             }
             for (const entry of moved)
                 node_fs_1.default.unlinkSync(entry.quarantine);
-            const directory = node_fs_1.default.openSync(this.config.spoolDir, node_fs_1.default.constants.O_RDONLY);
-            try {
-                node_fs_1.default.fsyncSync(directory);
-            }
-            finally {
-                node_fs_1.default.closeSync(directory);
-            }
+            (0, secure_metadata_js_1.fsyncDirectory)(this.config.spoolDir);
         }
         catch {
             for (const entry of moved.reverse())

package/dist/platform/telemetry-spool.mjs

@@ -3,6 +3,7 @@ import fs from "node:fs";
 import path from "node:path";
 import zlib from "node:zlib";
 import { inspectProcess } from "./process-state.mjs";
+import { fsyncDirectory } from "./secure-metadata.mjs";
 const READY = /^(?:span-[0-9a-f-]+|import-[0-9a-f]{64})\.json$/;
 const REMNANT = /^\.(?:corrupt|write|ack|delete|stale-lock|purge)-[0-9A-Za-z-]+(?:\.(?:json|tmp|dir))?$/;
 const HEX_TRACE = /^[0-9a-f]{32}$/;
@@ -326,13 +327,7 @@ export class TelemetrySpool {
             descriptor = undefined;
             fs.renameSync(temporary, file);
             fs.chmodSync(file, 0o600);
-            const directory = fs.openSync(this.config.spoolDir, fs.constants.O_RDONLY);
-            try {
-                fs.fsyncSync(directory);
-            }
-            finally {
-                fs.closeSync(directory);
-            }
+            fsyncDirectory(this.config.spoolDir);
         }
         finally {
             if (descriptor !== undefined)
@@ -472,13 +467,7 @@ export class TelemetrySpool {
             }
             for (const entry of moved)
                 fs.unlinkSync(entry.quarantine);
-            const directory = fs.openSync(this.config.spoolDir, fs.constants.O_RDONLY);
-            try {
-                fs.fsyncSync(directory);
-            }
-            finally {
-                fs.closeSync(directory);
-            }
+            fsyncDirectory(this.config.spoolDir);
         }
         catch {
             for (const entry of moved.reverse())

package/dist/platform/telemetry-tracing.cjs

@@ -15,6 +15,7 @@ const sdk_trace_node_1 = require("@opentelemetry/sdk-trace-node");
 const telemetry_spool_js_1 = require("./telemetry-spool.cjs");
 const telemetry_uploader_js_1 = require("./telemetry-uploader.cjs");
 const process_state_js_1 = require("./process-state.cjs");
+const secure_metadata_js_1 = require("./secure-metadata.cjs");
 const nanos = ([seconds, nanoseconds]) => (BigInt(seconds) * 1000000000n + BigInt(nanoseconds)).toString();
 // OTel JS uses zero-based SpanKind values while OTLP's enum starts at 1.
 const kind = (value) => value + 1;
@@ -82,13 +83,7 @@ function atomicStateWrite(file, value) {
         node_fs_1.default.writeFileSync(temporary, JSON.stringify(value), { mode: 0o600, flag: "wx" });
         node_fs_1.default.renameSync(temporary, file);
         node_fs_1.default.chmodSync(file, 0o600);
-        const directory = node_fs_1.default.openSync(node_path_1.default.dirname(file), node_fs_1.default.constants.O_RDONLY);
-        try {
-            node_fs_1.default.fsyncSync(directory);
-        }
-        finally {
-            node_fs_1.default.closeSync(directory);
-        }
+        (0, secure_metadata_js_1.fsyncDirectoryOf)(file);
     }
     finally {
         try {

package/dist/platform/telemetry-tracing.mjs

@@ -8,6 +8,7 @@ import { NodeTracerProvider } from "@opentelemetry/sdk-trace-node";
 import { TelemetrySpool } from "./telemetry-spool.mjs";
 import { startTelemetryUploader } from "./telemetry-uploader.mjs";
 import { inspectProcess } from "./process-state.mjs";
+import { fsyncDirectoryOf } from "./secure-metadata.mjs";
 const nanos = ([seconds, nanoseconds]) => (BigInt(seconds) * 1000000000n + BigInt(nanoseconds)).toString();
 // OTel JS uses zero-based SpanKind values while OTLP's enum starts at 1.
 const kind = (value) => value + 1;
@@ -75,13 +76,7 @@ function atomicStateWrite(file, value) {
         fs.writeFileSync(temporary, JSON.stringify(value), { mode: 0o600, flag: "wx" });
         fs.renameSync(temporary, file);
         fs.chmodSync(file, 0o600);
-        const directory = fs.openSync(path.dirname(file), fs.constants.O_RDONLY);
-        try {
-            fs.fsyncSync(directory);
-        }
-        finally {
-            fs.closeSync(directory);
-        }
+        fsyncDirectoryOf(file);
     }
     finally {
         try {

package/dist/setup/bot-register.mjs

@@ -435,7 +435,7 @@ export async function main() {
         die("--result-file 必须是配置根目录内的 .setup-result-<pid>.json");
     }
     if (argv.some((arg) => arg === "--app-id" || arg.startsWith("--app-id="))) {
-        die("不支持 --app-id；机器人必须在飞书网页中选择");
+        die("不支持 --app-id；机器人必须在飞书（Lark）网页中选择");
     }
     if (!autoSelect)
         die("setup 注册阶段必须由交互式选择流程启动");
@@ -482,16 +482,16 @@ export async function main() {
         },
         onQRCodeReady: ({ url, expireIn }) => {
             qrcode.generate(url, { small: true }, (code) => say(code));
-            say(`\n打开以下链接（或扫码），${Math.round(expireIn / 60)} 分钟内有效：\n\n  ${url}\n\n[setup 2/5] 等待飞书网页完成授权并回传凭证…`);
+            say(`\n打开以下链接（或扫码），${Math.round(expireIn / 60)} 分钟内有效：\n\n  ${url}\n\n[setup 2/5] 等待飞书（Lark）网页完成授权并回传凭证…`);
             say(openBrowser(url) ? "[setup] 已在默认浏览器打开授权页" : "[setup] 未能自动打开浏览器，请手动打开上面的链接");
         },
         onStatusChange: ({ status, interval }) => {
             if (status === "domain_switched")
                 say("[setup] 已切换到 Lark 域名");
             if (status === "slow_down")
-                say(`[setup] 飞书要求降低轮询频率，${interval || "稍后"}秒后继续`);
+                say(`[setup] 飞书（Lark）要求降低轮询频率，${interval || "稍后"}秒后继续`);
             if (status === "polling" && ++pollingCount % 12 === 0)
-                say(`[setup] 仍在等待飞书回传凭证（约 ${pollingCount / 12} 分钟）…`);
+                say(`[setup] 仍在等待飞书（Lark）回传凭证（约 ${pollingCount / 12} 分钟）…`);
         },
     }).catch(() => die("网页授权失败；未执行凭证同步、文件写入或 Agent 绑定，请重试 setup"));
     const { client_id: rawId, client_secret: rawSecret, user_info: userInfo } = result || {};
@@ -559,7 +559,7 @@ export async function main() {
                         throw new Error(`官方 Pi ${providerId} 登录失败或已取消；credential/config 未修改`);
                     }
                     if (process.env.LARKIN_TEST_SKIP_BUILTIN_PI_PROVIDER_TURN !== "1") {
-                        say("正在验证内置 Pi provider（受控单轮，不发送飞书消息）…");
+                        say("正在验证内置 Pi provider（受控单轮，不发送飞书（Lark）消息）…");
                         try {
                             await verifyOfficialPiProviderTurn(piRuntime, choice.model);
                         }

package/dist/setup/grant-scopes.mjs

@@ -39,7 +39,7 @@ const APP_ID = selected.agentId;
 if (explicitAppId && explicitAppId !== selected.feishuAppId)
     throw new Error("--app-id 必须等于所选 Agent 的 App ID");
 if (!/^cli_[A-Za-z0-9]+$/.test(APP_ID))
-    throw new Error(`无效飞书 App ID：${APP_ID}`);
+    throw new Error(`无效飞书（Lark） App ID：${APP_ID}`);
 const SEND_TO = flag("--send-to", "");
 const TENANT = flag("--tenant", "feishu");
 const WAIT_MIN = Number(flag("--wait-min", "9"));
@@ -76,7 +76,7 @@ function sendUrlToChat(url, minutes) {
     const result = spawnSync(managed.command.command, [...managed.command.argsPrefix, "im", "+messages-send", "--chat-id", SEND_TO, "--text", text, "--json"], {
         encoding: "utf8", env: managed.env,
     });
-    log(result.status === 0 ? "[grant] 更新链接已发到飞书群" : `[grant] 发链接失败: ${(result.stderr || "").trim().split("\n")[0]}`);
+    log(result.status === 0 ? "[grant] 更新链接已发到飞书（Lark）群" : `[grant] 发链接失败: ${(result.stderr || "").trim().split("\n")[0]}`);
 }
 export async function main() {
     log(`=== 给 bot ${APP_ID} 增补读取权限(registerApp 更新流) ===`);
@@ -94,7 +94,7 @@ export async function main() {
         },
         onQRCodeReady: (info) => {
             const minutes = Math.max(1, Math.round(info.expireIn / 60));
-            log("\n请用飞书扫码或打开链接，确认给应用增补权限：\n");
+            log("\n请用飞书（Lark）扫码或打开链接，确认给应用增补权限：\n");
             qrcode.generate(info.url, { small: true });
             log(`\n链接: ${info.url}\n有效期约 ${minutes} 分钟（⚠️ 需本进程保持轮询，否则 user_code 立即失效）\n`);
             if (URL_FILE) {

package/dist/setup/setup-bind.mjs

@@ -87,7 +87,7 @@ async function pickProfile() {
     const profiles = listProfiles();
     if (profiles.length === 0)
         die("lark-cli 里还没有 bot profile。请运行 larkin setup 创建或连接机器人");
-    say("\n可复用的飞书机器人（lark-cli profiles）：");
+    say("\n可复用的飞书（Lark）机器人（lark-cli profiles）：");
     profiles.forEach((profile, index) => say(`  [${index + 1}] ${profile.name}  appId=${profile.appId}${profile.active ? "  (当前活跃，默认)" : ""}`));
     say("  （创建新机器人请退出后运行 larkin setup）");
     const activeIndex = Math.max(0, profiles.findIndex((profile) => profile.active));
@@ -298,7 +298,7 @@ export async function main() {
             }
             if (!readinessAlreadyCompleted) {
                 piRuntime ??= await createOfficialPiModelRuntime(CFG_DIR, profile.appId);
-                say("正在验证内置 Pi provider（受控单轮，不发送飞书消息）…");
+                say("正在验证内置 Pi provider（受控单轮，不发送飞书（Lark）消息）…");
                 try {
                     if (!(process.env.LARKIN_TEST_SKIP_BUILTIN_PI_PROVIDER_TURN === "1" && process.env.LARKIN_TEST_BOT_REGISTER_MODULE)) {
                         await verifyOfficialPiProviderTurn(piRuntime, selection.model, authAbort.signal);
@@ -329,7 +329,7 @@ export async function main() {
     say("\n启动这个 Agent：");
     say("  larkin start                     # 单服务启动全部已配置 Agent");
     say(`  larkin start --agent ${profile.appId}  # 仅调试这个 Agent`);
-    say("创建独立飞书机器人 + Agent：");
+    say("创建独立飞书（Lark）机器人 + Agent：");
     say("  larkin setup");
 }
 if (path.resolve(process.argv[1] || "") === path.resolve(fileURLToPath(import.meta.url))) {

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "larkin",
-  "version": "0.2.76",
+  "version": "0.2.78",
   "private": false,
   "larkinPackageRole": "npm-published",
   "files": [
     "dist/",
     "assets/",
+    "scripts/npm/",
     "README.md",
     "LICENSE",
     "SECURITY.md",
@@ -15,9 +16,9 @@
   "packageManager": "bun@1.3.14",
   "license": "Apache-2.0",
   "type": "module",
-  "description": "把 Codex、Claude Code 和 Pi Agent Runtime 接到飞书的本地 Runtime Host",
+  "description": "把 Codex、Claude Code 和 Pi Agent Runtime 接到飞书（Lark）的本地 Runtime Host",
   "bin": {
-    "larkin": "dist/app/cli.mjs"
+    "larkin": "scripts/npm/larkin-bin-shim.mjs"
   },
   "repository": {
     "type": "git",
@@ -28,6 +29,7 @@
     "typecheck": "bun run scripts/typecheck.mjs",
     "build": "bun run scripts/build.mjs",
     "prepare": "bun run build",
+    "postinstall": "node scripts/npm/install-binary.mjs",
     "version:bump": "bun run scripts/bump-version.mjs",
     "release:check-version": "bun run scripts/check-release-version.mjs",
     "release:smoke": "bun run scripts/release/smoke.ts",

package/scripts/npm/install-binary.mjs

@@ -0,0 +1,125 @@
+#!/usr/bin/env node
+// npm postinstall: download the matching platform standalone binary from the
+// GitHub Release for this package version, verify its SHA-256, and install it
+// atomically under <pkg>/larkin-bin/<platform>-<arch>/. The npm tarball itself
+// never ships the binary; this runs only for registry/git installs (never in the
+// source repo, which ships src/ and scripts/build.mjs).
+//
+// Failures are non-fatal on purpose: `bin` (scripts/npm/larkin-bin-shim.mjs)
+// falls back to the Bun-compiled JS entry when the binary is unavailable.
+
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+const PKG_ROOT = path.resolve(HERE, "..", "..");
+
+function warn(message) {
+  process.stderr.write(`[larkin install] ${message}\n`);
+}
+
+function inSourceRepo() {
+  return fs.existsSync(path.join(PKG_ROOT, "src")) && fs.existsSync(path.join(PKG_ROOT, "scripts", "build.mjs"));
+}
+
+async function fetchWithTimeout(url, timeoutMs) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const response = await fetch(url, { redirect: "follow", signal: controller.signal });
+    if (!response.ok) throw new Error(`HTTP ${response.status}`);
+    return Buffer.from(await response.arrayBuffer());
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+function expectedSha256(checksumsText, filename) {
+  for (const line of String(checksumsText).split(/\r?\n/)) {
+    const [sha, name] = line.trim().split(/\s+/);
+    if (name === filename && /^[a-f0-9]{64}$/.test(sha)) return sha;
+  }
+  return null;
+}
+
+async function main() {
+  if (process.env.LARKIN_NPM_BINARY_DISABLE === "1") return;
+  if (inSourceRepo()) return;
+
+  // 延迟导入编译产物：源码仓库/CI 中 `dist/` 可能尚未构建，静态 import 会在
+  // 守卫之前失败（bun install 会运行根包 postinstall）。
+  const { RELEASE_TARGETS, artifactFilename, normalizeReleasePlatform, sha256File } = await import(
+    "../../dist/platform/release-artifacts.mjs"
+  );
+
+  const platform = normalizeReleasePlatform(os.platform());
+  const arch = os.arch();
+  const target = RELEASE_TARGETS.find((candidate) => candidate.platform === platform && candidate.arch === arch);
+  if (!target) return; // no standalone binary for this platform → JS fallback
+
+  let version;
+  try {
+    version = JSON.parse(fs.readFileSync(path.join(PKG_ROOT, "package.json"), "utf8")).version;
+  } catch (error) {
+    warn(`无法读取包版本：${error instanceof Error ? error.message : String(error)}`);
+    return;
+  }
+
+  let filename;
+  try {
+    filename = artifactFilename(version, target.platform, target.arch);
+  } catch (error) {
+    warn(`跳过下载：${error instanceof Error ? error.message : String(error)}`);
+    return;
+  }
+
+  const baseUrl = String(process.env.LARKIN_RELEASE_BASE_URL || `https://github.com/eddiearc/larkin/releases/download/v${version}`).replace(/\/+$/, "");
+  const destinationDir = path.join(PKG_ROOT, "larkin-bin", `${target.platform}-${target.arch}`);
+  const destination = path.join(destinationDir, target.platform === "windows" ? "larkin.exe" : "larkin");
+
+  let expected;
+  try {
+    const checksums = await fetchWithTimeout(`${baseUrl}/SHA256SUMS`, 30_000);
+    expected = expectedSha256(checksums.toString("utf8"), filename);
+  } catch (error) {
+    if (fs.existsSync(destination)) {
+      warn(`SHA256SUMS 下载失败，保留已安装二进制：${error instanceof Error ? error.message : String(error)}`);
+      return;
+    }
+    warn(`SHA256SUMS 下载失败，将回退到 Bun JS 入口：${error instanceof Error ? error.message : String(error)}`);
+    return;
+  }
+  if (!expected) {
+    warn(`SHA256SUMS 中缺少 ${filename} 的校验和，将回退到 Bun JS 入口`);
+    return;
+  }
+
+  if (fs.existsSync(destination) && sha256File(destination) === expected) return; // already current
+
+  let bytes;
+  try {
+    bytes = await fetchWithTimeout(`${baseUrl}/${filename}`, 5 * 60_000);
+  } catch (error) {
+    warn(`二进制下载失败，将回退到 Bun JS 入口：${error instanceof Error ? error.message : String(error)}`);
+    return;
+  }
+
+  fs.mkdirSync(destinationDir, { recursive: true });
+  const temporary = path.join(destinationDir, `.larkin.${process.pid}.${Date.now()}.tmp`);
+  try {
+    fs.writeFileSync(temporary, bytes);
+    if (sha256File(temporary) !== expected) throw new Error("checksum mismatch");
+    fs.chmodSync(temporary, 0o755);
+    fs.renameSync(temporary, destination);
+    process.stderr.write(`[larkin install] installed ${filename}\n`);
+  } catch (error) {
+    try { fs.unlinkSync(temporary); } catch { /* best effort */ }
+    warn(`安装二进制失败，将回退到 Bun JS 入口：${error instanceof Error ? error.message : String(error)}`);
+  }
+}
+
+main().catch((error) => {
+  warn(`安装二进制异常，将回退到 Bun JS 入口：${error instanceof Error ? error.message : String(error)}`);
+});

package/scripts/npm/larkin-bin-shim.mjs

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+// npm `bin` entry. Prefers the postinstall-downloaded standalone binary; falls
+// back to the Bun-compiled JS entry when the binary is absent (unsupported
+// platform or a failed/interrupted install) and Bun is on PATH.
+
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import { RELEASE_TARGETS, normalizeReleasePlatform } from "../../dist/platform/release-artifacts.mjs";
+
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+const PKG_ROOT = path.resolve(HERE, "..", "..");
+
+const platform = normalizeReleasePlatform(os.platform());
+const target = RELEASE_TARGETS.find((candidate) => candidate.platform === platform && candidate.arch === os.arch());
+const binary = target
+  ? path.join(PKG_ROOT, "larkin-bin", `${target.platform}-${target.arch}`, target.platform === "windows" ? "larkin.exe" : "larkin")
+  : null;
+const argv = process.argv.slice(2);
+
+function run(command, args) {
+  const result = spawnSync(command, args, { stdio: "inherit" });
+  if (result.error) return null;
+  return result.status ?? 0;
+}
+
+if (binary && fs.existsSync(binary)) {
+  const status = run(binary, argv);
+  if (status !== null) process.exit(status);
+  process.stderr.write(`[larkin] 平台二进制启动失败，尝试 Bun fallback…\n`);
+}
+
+const bunEntry = path.join(PKG_ROOT, "dist", "app", "cli.mjs");
+if (fs.existsSync(bunEntry)) {
+  const bun = process.env.LARKIN_BUN || "bun";
+  const status = run(bun, [bunEntry, ...argv]);
+  if (status !== null) process.exit(status);
+}
+
+process.stderr.write(
+  "[larkin] 未找到可用的平台二进制，也未找到 Bun。\n" +
+  "  - 联网重新安装会自动下载对应平台二进制：npm install -g larkin\n" +
+  "  - 或安装 Bun 1.3.14 后重试（会走 JS 入口 fallback）\n" +
+  "  - 或从 GitHub Release 下载 standalone 二进制：https://github.com/eddiearc/larkin/releases\n",
+);
+process.exit(1);