larkin 0.2.83 → 0.2.85

package/dist/agent/agent-state-store.cjs

@@ -40,6 +40,7 @@ const crypto = __importStar(require("node:crypto"));
 const path = __importStar(require("node:path"));
 const root_layout_js_1 = require("../platform/root-layout.cjs");
 const process_state_js_1 = require("../platform/process-state.cjs");
+const secure_metadata_js_1 = require("../platform/secure-metadata.cjs");
 const inbox_projection_js_1 = require("./inbox-projection.cjs");
 const JSON_KEYS = new Set([
     "agentState", "status", "map", "replyctx", "botIdentity", "senderProfiles", "readReceipts", "pendingReact", "runtimeDeliveries", "inboxState", "freshnessState", "documentComments", "reminders", "interactions",
@@ -222,7 +223,8 @@ class AgentStateStore {
         try {
             fd = fs.openSync(ownerFile, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
             const stat = fs.fstatSync(fd);
-            if (!stat.isFile() || (typeof process.getuid === "function" && stat.uid !== process.getuid()) || (stat.mode & 0o077) !== 0) {
+            if (!stat.isFile() || (typeof process.getuid === "function" && stat.uid !== process.getuid())
+                || (!secure_metadata_js_1.isWindows && (stat.mode & 0o077) !== 0)) {
                 throw new Error(`Inbox lock owner 文件不安全：${ownerFile}`);
             }
             const value = JSON.parse(fs.readFileSync(fd, "utf8"));

package/dist/agent/agent-state-store.mjs

@@ -3,6 +3,7 @@ import * as crypto from "node:crypto";
 import * as path from "node:path";
 import { TargetRootLayout } from "../platform/root-layout.mjs";
 import { acquireProcessLock, inspectProcess } from "../platform/process-state.mjs";
+import { isWindows } from "../platform/secure-metadata.mjs";
 import { targetKeyOfInboxEnvelope } from "./inbox-projection.mjs";
 const JSON_KEYS = new Set([
     "agentState", "status", "map", "replyctx", "botIdentity", "senderProfiles", "readReceipts", "pendingReact", "runtimeDeliveries", "inboxState", "freshnessState", "documentComments", "reminders", "interactions",
@@ -185,7 +186,8 @@ export class AgentStateStore {
         try {
             fd = fs.openSync(ownerFile, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
             const stat = fs.fstatSync(fd);
-            if (!stat.isFile() || (typeof process.getuid === "function" && stat.uid !== process.getuid()) || (stat.mode & 0o077) !== 0) {
+            if (!stat.isFile() || (typeof process.getuid === "function" && stat.uid !== process.getuid())
+                || (!isWindows && (stat.mode & 0o077) !== 0)) {
                 throw new Error(`Inbox lock owner 文件不安全：${ownerFile}`);
             }
             const value = JSON.parse(fs.readFileSync(fd, "utf8"));

package/dist/runtime/runtime-adapters.mjs

@@ -9,6 +9,7 @@ import { internalCommandSpec } from "../app/internal-command.mjs";
 import { piAgentDirectory } from "./pi-provider-config.mjs";
 import { resolvePiSubagentExtensionArg } from "./pi-subagent-injection.mjs";
 import { resolvePiBashTimeoutExtensionArg } from "./pi-bash-timeout-injection.mjs";
+import { isWindows } from "../platform/secure-metadata.mjs";
 import { classifyRuntimePrerequisite, probeNativeRuntimeReadiness, providerAuthenticationFailureReadiness, RuntimePrerequisiteError, } from "./runtime-readiness.mjs";
 class EventSession {
     listeners = new Set();
@@ -820,7 +821,7 @@ async function createPiRpcBackend(input, dependencies, spawn) {
         mergedEnv.PI_CODING_AGENT_DIR = piAgentDirectory(mergedEnv.LARKIN_CONFIG_DIR, input.agentId);
         mergedEnv.PI_TELEMETRY = "0";
     }
-    const subagentExtension = resolvePiSubagentExtensionArg({
+    const subagentExtension = builtin && isWindows ? null : resolvePiSubagentExtensionArg({
         distribution: builtin ? "builtin" : "external",
         piCommand: command,
         env: mergedEnv,
@@ -828,7 +829,7 @@ async function createPiRpcBackend(input, dependencies, spawn) {
     if (subagentExtension)
         commandArgs.push("-e", subagentExtension);
     // bash 60s 超时护栏（issue #55/#56）：与 pi-subagents 一起注入，两者工具名不冲突。
-    const bashTimeoutExtension = resolvePiBashTimeoutExtensionArg({
+    const bashTimeoutExtension = builtin && isWindows ? null : resolvePiBashTimeoutExtensionArg({
         distribution: builtin ? "builtin" : "external",
         piCommand: command,
         env: mergedEnv,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkin",
-  "version": "0.2.83",
+  "version": "0.2.85",
   "private": false,
   "larkinPackageRole": "npm-published",
   "files": [