larkin 0.2.79 → 0.2.81

package/dist/runtime/pi-official-auth.mjs

@@ -2,6 +2,7 @@ import fs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
 import { pathToFileURL } from "node:url";
+import { isWindows, secureWindowsDirectoryAcl } from "../platform/secure-metadata.mjs";
 // proper-lockfile does not publish TypeScript declarations.
 // @ts-expect-error bundled CommonJS dependency
 import properLockfile from "proper-lockfile";
@@ -22,6 +23,11 @@ function ensureLockDirectory(lockPath) {
     const directory = path.dirname(lockPath);
     fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
     fs.chmodSync(directory, 0o700);
+    if (isWindows) {
+        // Windows 无 POSIX 权限位（mode 恒 0o666）：改用 icacls 收紧 ACL 并回读校验。
+        secureWindowsDirectoryAcl(directory, { label: "Pi credential lock 目录" });
+        return;
+    }
     const stat = fs.lstatSync(directory);
     if (!stat.isDirectory() || stat.isSymbolicLink()
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())
@@ -85,6 +91,11 @@ function ensurePrivateDirectory(directory) {
     fs.chmodSync(path.dirname(directory), 0o700);
     fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
     fs.chmodSync(directory, 0o700);
+    if (isWindows) {
+        // Windows 无 POSIX 权限位：icacls 收紧为「当前用户 + SYSTEM」并回读校验。
+        secureWindowsDirectoryAcl(directory, { label: "Pi official credential 目录" });
+        return;
+    }
     const stat = fs.lstatSync(directory);
     if (!stat.isDirectory() || stat.isSymbolicLink()
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())
@@ -97,7 +108,7 @@ function safeRead(file) {
         const stat = fs.lstatSync(file);
         if (!stat.isFile() || stat.isSymbolicLink()
             || (typeof process.getuid === "function" && stat.uid !== process.getuid())
-            || (stat.mode & 0o777) !== 0o600)
+            || (!isWindows && (stat.mode & 0o777) !== 0o600))
             throw new Error(`unsafe Pi auth file: ${path.basename(file)}`);
         return fs.readFileSync(file);
     }

package/dist/runtime/pi-provider-config.cjs

@@ -14,6 +14,7 @@ exports.stageBuiltinPiProvider = stageBuiltinPiProvider;
 const node_crypto_1 = __importDefault(require("node:crypto"));
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
+const secure_metadata_js_1 = require("../platform/secure-metadata.cjs");
 exports.BUNDLED_PI_VERSION = "0.83.0";
 // These values mirror the catalog shipped by the pinned official Pi distribution.
 // Keeping the user-facing defaults here makes endpoint changes reviewable in Larkin.
@@ -95,6 +96,11 @@ function piAgentDirectory(configDir, agentId) {
     return node_path_1.default.join(node_path_1.default.resolve(configDir), "providers", "pi", agentId);
 }
 function assertPrivateDirectory(directory) {
+    if (secure_metadata_js_1.isWindows) {
+        // Windows 无 POSIX 权限位：icacls 收紧为「当前用户 + SYSTEM」并回读校验。
+        (0, secure_metadata_js_1.secureWindowsDirectoryAcl)(directory, { label: "Pi provider 凭证目录" });
+        return;
+    }
     const stat = node_fs_1.default.lstatSync(directory);
     if (!stat.isDirectory() || stat.isSymbolicLink()
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())
@@ -129,7 +135,7 @@ function readSnapshot(file) {
         const stat = node_fs_1.default.lstatSync(file);
         if (!stat.isFile() || stat.isSymbolicLink()
             || (typeof process.getuid === "function" && stat.uid !== process.getuid())
-            || (stat.mode & 0o777) !== 0o600)
+            || (!secure_metadata_js_1.isWindows && (stat.mode & 0o777) !== 0o600))
             throw new Error(`Pi provider 文件不安全: ${node_path_1.default.basename(file)}`);
         return node_fs_1.default.readFileSync(file);
     }

package/dist/runtime/pi-provider-config.mjs

@@ -1,6 +1,7 @@
 import crypto from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
+import { isWindows, secureWindowsDirectoryAcl } from "../platform/secure-metadata.mjs";
 export const BUNDLED_PI_VERSION = "0.83.0";
 // These values mirror the catalog shipped by the pinned official Pi distribution.
 // Keeping the user-facing defaults here makes endpoint changes reviewable in Larkin.
@@ -82,6 +83,11 @@ export function piAgentDirectory(configDir, agentId) {
     return path.join(path.resolve(configDir), "providers", "pi", agentId);
 }
 function assertPrivateDirectory(directory) {
+    if (isWindows) {
+        // Windows 无 POSIX 权限位：icacls 收紧为「当前用户 + SYSTEM」并回读校验。
+        secureWindowsDirectoryAcl(directory, { label: "Pi provider 凭证目录" });
+        return;
+    }
     const stat = fs.lstatSync(directory);
     if (!stat.isDirectory() || stat.isSymbolicLink()
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())
@@ -116,7 +122,7 @@ function readSnapshot(file) {
         const stat = fs.lstatSync(file);
         if (!stat.isFile() || stat.isSymbolicLink()
             || (typeof process.getuid === "function" && stat.uid !== process.getuid())
-            || (stat.mode & 0o777) !== 0o600)
+            || (!isWindows && (stat.mode & 0o777) !== 0o600))
             throw new Error(`Pi provider 文件不安全: ${path.basename(file)}`);
         return fs.readFileSync(file);
     }

package/dist/setup/run-credential-preflight.mjs

@@ -1,5 +1,6 @@
 import fs from "node:fs";
 import path from "node:path";
+import { isWindows } from "../platform/secure-metadata.mjs";
 import { callbackCapability, documentCommentReplyCapability, documentCommentSubscriptionCapability, } from "../platform/callback-capability.mjs";
 const BOT_CREDENTIAL_FIELDS = new Set(["appId", "appSecret", "tenant", "ownerOpenId", "createdAt", "updatedAt", "capabilities"]);
 function validDocumentCommentCapability(value) {
@@ -50,7 +51,8 @@ export function validCredentialRecord(value, appId) {
     return true;
 }
 function isOwnedWithExactMode(stat, mode) {
-    return (typeof process.getuid !== "function" || stat.uid === process.getuid()) && (stat.mode & 0o777) === mode;
+    return (typeof process.getuid !== "function" || stat.uid === process.getuid())
+        && (isWindows || (stat.mode & 0o777) === mode);
 }
 export function assertSecureBotsDirectory(botsDir) {
     const stat = fs.lstatSync(botsDir);

package/dist/setup/setup-bind.mjs

@@ -6,6 +6,7 @@ import fs from "node:fs";
 import path from "node:path";
 import readline from "node:readline";
 import { fileURLToPath } from "node:url";
+import { isWindows } from "../platform/secure-metadata.mjs";
 import { TargetRootLayout } from "../platform/root-layout.mjs";
 import { planSingleRootBinding } from "./setup-binding.mjs";
 import { discoverPiModelCatalog } from "../runtime/pi-model-catalog.mjs";
@@ -126,7 +127,7 @@ function readSetupSelection(fileArg) {
     const stat = fs.lstatSync(file);
     if (!stat.isFile() || stat.isSymbolicLink()
         || (typeof process.getuid === "function" && stat.uid !== process.getuid())
-        || (stat.mode & 0o777) !== 0o600)
+        || (!isWindows && (stat.mode & 0o777) !== 0o600))
         die("setup Agent 选择文件必须是当前用户拥有的 0600 普通文件");
     const bytes = fs.readFileSync(file, "utf8");
     fs.unlinkSync(file);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkin",
-  "version": "0.2.79",
+  "version": "0.2.81",
   "private": false,
   "larkinPackageRole": "npm-published",
   "files": [