larkin 0.2.93 → 0.3.1

package/README.md

@@ -22,7 +22,7 @@ npm install -g larkin
 larkin --version
 ```
 
-Standalone binaries for macOS, Linux, and Windows (x64) are attached to every [GitHub Release](https://github.com/eddiearc/larkin/releases) for environments without Bun or npm. Windows binaries are cross-compiled; their runtime behavior has not been end-to-end verified on a Windows host.
+Standalone binaries for macOS, Linux, and Windows (x64) are attached to every [GitHub Release](https://github.com/eddiearc/larkin/releases) for environments without Bun or npm. The Windows 11 x64 core path has passed native end-to-end startup verification. Pull requests and releases also have a blocking native Windows gate that verifies the standalone executable's manifest and SHA-256 before checking its version, help output, and embedded Dashboard over HTTP.
 
 ## Usage
 
@@ -36,12 +36,42 @@ The rest of this document uses the short `larkin` form; it works as-is after `np
 
 Run `larkin --help` or `larkin config --help` for the available commands and configuration options. Local configuration is stored under `~/.larkin` by default; set `LARKIN_CONFIG_DIR` to use another directory.
 
+### Feishu message links
+
+Feishu clients do not reliably render Markdown links such as `[label](URL)` as clickable in text or Markdown messages. When a recipient must be able to open a link, keep the complete bare HTTPS URL visible, for example: Issue 115 — https://github.com/eddiearc/larkin/issues/115. A label may accompany it, but must not replace the bare URL. Larkin does not rewrite exact, verbatim, or user-authored message bodies to enforce this guidance.
+
 During setup, a new Agent is offered Pi first, followed by Codex and Claude Code. Pi can use an existing
 official `pi` installation or the official Pi runtime bundled in Larkin. The bundled option supports
 DeepSeek, Kimi/Moonshot, MiniMax, Zhipu/BigModel, and a custom OpenAI-compatible Base URL. Provider keys
 are stored only in the selected Agent's private provider directory, not in the ordinary Agent config. Setup
 also discovers every API-key and OAuth/subscription login exposed by the pinned official Pi registry and
 delegates those flows to Pi. Use `larkin pi-auth status` or `larkin pi-auth logout <provider>` to manage them.
+The builtin Pi runtime loads Larkin's two supported extensions inline: background subagents and the 60-second
+foreground bash timeout guard are enabled without writing extension files or arguments. A compatible external
+Pi installation keeps the existing explicit `-e` extension path.
+
+### Windows support boundary and optional autostart
+
+Windows 11 x64 core support covers the standalone CLI, local Runtime Host startup, builtin Pi RPC with the
+inline extensions above, and the embedded Dashboard. Provider authentication, the official `lark-cli`, and
+external Codex, Claude Code, or Pi executables remain separately installed dependencies; secret-bearing live
+channel/provider tests are intentionally outside the hosted Windows CI gate.
+
+An Administrator account can optionally start Larkin at that account's interactive logon with Task Scheduler.
+From an elevated PowerShell prompt, adjust the executable and working-directory paths first:
+
+```powershell
+$Exe = 'C:\Tools\Larkin\larkin.exe'
+$WorkDir = 'C:\Tools\Larkin'
+$Action = New-ScheduledTaskAction -Execute $Exe -Argument 'start' -WorkingDirectory $WorkDir
+$Trigger = New-ScheduledTaskTrigger -AtLogOn -User $env:USERNAME
+Register-ScheduledTask -TaskName 'Larkin Runtime Host' -Action $Action -Trigger $Trigger `
+  -Description 'Start Larkin for this Administrator account at logon' -RunLevel Highest
+```
+
+This is an optional per-user Administrator-logon task, not SYSTEM boot support or a Windows service. Keep the
+account profile available because Larkin stores its state there. Release executables are currently unsigned;
+normal Windows security policy and SmartScreen decisions still apply.
 
 For supported Feishu cloud-document comments (`doc`, `docx`, `sheet`, and `file`), the safe default accepts only comments or replies that @ the Bot. Document comments never reuse IM `require`/`free` settings. An explicit platform-verified application-dimension Bot subscription accepts every supported comment event that Feishu actually delivers, whether or not it mentions the Bot. Larkin stores accepted comments as `kind=document_comment` canonical Inbox events and wakes the Bot's persistent Agent. Replies are bound back to the exact comment; whole-document comments use Feishu's top-level fallback. `larkin setup --comment-subscription application` makes the broad trigger surface explicit, creates the Bot subscription through the official `lark-cli` structured API, and then verifies it with the read-only platform status API. `--comment-subscription none` explicitly removes that application subscription and verifies removal. Until positive status verification, only @Bot comments enter the Inbox. Setup requests `docs:document.comment:create` for both in-thread replies and whole-document `create_v2` fallback, while retaining `drive:drive` for event/read support. `larkin agents` reports event readiness, reply-scope readiness, subscription mode/status/dimension, arrivals, and read failures.
 

package/artifacts/release/THIRD_PARTY_NOTICES.txt

@@ -4,7 +4,7 @@ Generated at release time from Larkin's installed runtime dependency closure.
 Development-only dependencies are intentionally excluded. Packages without a bundled license file
 use an explicitly audited, version- and hash-pinned license source and remain identified by locked package name and version.
 
-Runtime package versions: 208
+Runtime package versions: 212
 
 | Package | Version | Relationship | Declared license | License texts (SHA-256) | Lock integrity |
 | --- | ---: | --- | --- | --- | --- |
@@ -89,6 +89,7 @@ Runtime package versions: 208
 | @radix-ui/react-use-effect-event | 0.0.5 | runtime transitive | MIT | LICENSE (0e80a2d229d2fd4fc7e8636142ec5d0ff0bc031f14c15b682e2ac01dfd5b5138) | sha512-7cshFL8HGS/7HEiHH+9kL9HBwp2sa9yX18Knwek6KYWmXwM7pegMgta2AXMQKI+rq3JnfSj9x8wYqFMTdG1Jgg== |
 | @radix-ui/react-use-layout-effect | 1.1.4 | runtime transitive | MIT | LICENSE (0e80a2d229d2fd4fc7e8636142ec5d0ff0bc031f14c15b682e2ac01dfd5b5138) | sha512-K20DkRkUwDnxEYMBPcg3Y6voLkEy5p5QQmszZgLngKKiC7dzBR/aEuK3w1qlx2JWDUNH6FluahYdgR3BP+QbYw== |
 | @silvia-odwyer/photon-node | 0.3.4 | runtime transitive | Apache-2.0 | LICENSE.md (db5502bc3655d2665d535496106117b522be88275d3ae459185fa20fa087a9b9) | sha512-bnly4BKB3KDTFxrUIcgCLbaeVVS8lrAkri1pEzskpmxu9MdfGQTy8b8EgcD83ywD3RPMsIulY8xJH5Awa+t9fA== |
+| @sinclair/typebox | 0.34.52 | runtime transitive | MIT | license (411f1c560755e27b3dec9622c13b8b7a3ec1c83f4ffb8c56a8847528aa96911a) | sha512-XiMQh7qqVlxZzcVD+kkGMNGMzcTrDMLWI7S4x7z1MkCkbDPrekpZXEUK0eZqZFMuHQg2a2DZOcDIh9o5v3Gonw== |
 | @smithy/core | 3.31.1 | runtime transitive | Apache-2.0 | LICENSE (07364a5f7d0177a59a05a0002187431f8f899320983c0dc049d72df015e8064c) | sha512-CyogUINxvi7C7LDsh8Syo6hVJOT9ckz4rG8dRZfTJ8r91HkMY59PnNooaj7WcHyxEkxPfBAmbgztZU+xTo76lg== |
 | @smithy/credential-provider-imds | 4.4.16 | runtime transitive | Apache-2.0 | LICENSE (b659ef9e3ce8fe45329e05916c9c8bb98b436a16f4d4730a8946eec83e3950fe) | sha512-QfuLWAkLzptffFW980AFeHZFdqds2B64rpEd3uJ6lgs3xVn9QegGMUgUcj+4d7dRrAsya3r58ZKpku97WcFb4w== |
 | @smithy/fetch-http-handler | 5.6.13 | runtime transitive | Apache-2.0 | LICENSE (b659ef9e3ce8fe45329e05916c9c8bb98b436a16f4d4730a8946eec83e3950fe) | sha512-4fW86pEUOMbrD5nkbyl/tTvPHHWJFbuB2odl6ps9lWfHoXf9HWh3Q/Smh59qH1g7+c/BSZghX6bbUk4gsiMs8A== |
@@ -99,6 +100,7 @@ Runtime package versions: 208
 | @smithy/types | 4.16.1 | runtime transitive | Apache-2.0 | LICENSE (07364a5f7d0177a59a05a0002187431f8f899320983c0dc049d72df015e8064c) | sha512-0JFs3V2y2M9tKW5na/qxe69Zv+uxLMO7QBbhxF/FHu/Gp2NFZAAL9tWl9PU02xxo07pb3G9FTyjNc6D5uZrJIg== |
 | @smithy/util-buffer-from | 2.2.0 | runtime transitive | Apache-2.0 | LICENSE (b659ef9e3ce8fe45329e05916c9c8bb98b436a16f4d4730a8946eec83e3950fe) | sha512-IJdWBbTcMQ6DA0gdNhh/BwrLkDR+ADW5Kr1aZmd4k3DIF6ezMV4R2NIAmT08wQJ3yUK82thHWmC/TnK/wpMMIA== |
 | @smithy/util-utf8 | 2.3.0 | runtime transitive | Apache-2.0 | LICENSE (b659ef9e3ce8fe45329e05916c9c8bb98b436a16f4d4730a8946eec83e3950fe) | sha512-R8Rdn8Hy72KKcebgLiv8jQcQkXoLMOGGv5uI1/k0l+snqkOzQ1R0ChUBCxWMlBsFMekWjq0wRudIweFs7sKT5A== |
+| @tintinweb/pi-subagents | 0.14.3 | runtime direct | MIT | LICENSE (e7d9d11c28cce34f09dc7d2b0a3a6609ccba5fbc8e926e6d1bfdf060930e9f05) | sha512-iDqeadh6114AZvw8HYe1PEq8M0MZ9czJKTAIsklCPUbV9vUMS+g/LAV0vW3O9PiBXKNJh8hkrY8L6iIr8XNEqA== |
 | agent-base | 6.0.2 | runtime transitive | MIT | AUDITED-agent-base@9.0.0-LICENSE (71368fd0f5b4129191e9afcd1e1ef2dc89a9090d3e4d80bbab92dafd032b3bef) | sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ== |
 | agent-base | 7.1.4 | runtime transitive | MIT | LICENSE (71368fd0f5b4129191e9afcd1e1ef2dc89a9090d3e4d80bbab92dafd032b3bef) | sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ== |
 | agent-base | 9.0.0 | runtime transitive | MIT | LICENSE (71368fd0f5b4129191e9afcd1e1ef2dc89a9090d3e4d80bbab92dafd032b3bef) | sha512-TQf59BsZnytt8GdJKLPfUZ54g/iaUL2OWDSFCCvMOhsHduDQxO8xC4PNeyIkVcA5KwL2phPSv0douC0fgWzmnA== |
@@ -115,6 +117,7 @@ Runtime package versions: 208
 | call-bound | 1.0.4 | runtime transitive | MIT | LICENSE (5e325595b4ea8cfec3802f545b1def5d7b73e4a5b8e9ba63e32a320f67732292) | sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg== |
 | chalk | 5.6.2 | runtime transitive | MIT | license (5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3) | sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA== |
 | combined-stream | 1.0.8 | runtime transitive | MIT | License (47eb8ca82c798246774946d1be0f9aa08f025fa8325ced0947aeeb4c05fe5547) | sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg== |
+| croner | 10.0.1 | runtime transitive | MIT | LICENSE (ad9aa40aaab4bee08121a0180096cc6a72abf29e19e606328b66c0178f41d267) | sha512-ixNtAJndqh173VQ4KodSdJEI6nuioBWI0V1ITNKhZZsO0pEMoDxz539T4FTTbSZ/xIOSuDnzxLVRqBVSvPNE2g== |
 | cross-spawn | 7.0.6 | runtime transitive | MIT | LICENSE (aaa78451b6fecd1b9c4594c796c133c0e90cad100372ff8bc6de615e9ef9adf1) | sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA== |
 | data-uri-to-buffer | 4.0.1 | runtime transitive | MIT | AUDITED-package-declared-MIT (508a77d2e7b51d98adeed32648ad124b7b30241a8e70b2e72c99f92d8e5874d1) | sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A== |
 | debug | 4.4.3 | runtime transitive | MIT | LICENSE (23eb8602cd5902bcfca56b23aa08e8672a809f5a12eaf8bb56abfa9d44e1a4fd) | sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA== |
@@ -173,6 +176,7 @@ Runtime package versions: 208
 | minimatch | 10.2.5 | runtime transitive | BlueOak-1.0.0 | LICENSE.md (2c7c5d22ed5a8ee968c64757710979afcd77438c48b4a265b94e615babd8a901) | sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg== |
 | minipass | 7.1.3 | runtime transitive | BlueOak-1.0.0 | LICENSE.md (8a1af140fdfbf5afd3df27f7e662f989c5b963a300020dfafce42033cae9e004) | sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A== |
 | ms | 2.1.3 | runtime transitive | MIT | license.md (1662fae9b5314d11cf51284e2dcd1f006a354f7343f08712a730fcff9a359801) | sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA== |
+| nanoid | 5.1.16 | runtime transitive | MIT | LICENSE (4383cb2c3608397ce7a4159502614ed66890f8999c2a9c056dd3b1024d6721f0) | sha512-kVrnsrJqMR8+oLJnGEmSWw9BivK5mt7H3FZatVRjrc5wGqFYuBxX1yG7+A7Gi5AefkX6t/oCkizcQgpu0cY1dQ== |
 | node-domexception | 1.0.0 | runtime transitive | MIT | LICENSE (8ec1386f7f078b0c7cd25341cd80f332df902371cda9f40c10ec2b4007b420b7) | sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ== |
 | node-fetch | 3.3.2 | runtime transitive | MIT | LICENSE.md (182caebbe3ce0187afa7e320d2e6038994705af419176219b959c248c984c329) | sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA== |
 | object-inspect | 1.13.4 | runtime transitive | MIT | LICENSE (bd40cc437e28a3ad7bef2ad34e6b72e757b182e67bda1acadbab4ef0476f8232) | sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew== |
@@ -1277,6 +1281,33 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
+--- SHA-256 411f1c560755e27b3dec9622c13b8b7a3ec1c83f4ffb8c56a8847528aa96911a ---
+TypeBox
+
+Json Schema Type Builder with Static Type Resolution for TypeScript
+
+The MIT License (MIT)
+
+Copyright (c) 2017-2026 Haydn Paterson
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
 --- SHA-256 4186c3f89c23f27b4c0caab574737c49ee5137c36a3c103484feaca4aeec2310 ---
 Apache License
                            Version 2.0, January 2004
@@ -1503,6 +1534,28 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
+--- SHA-256 4383cb2c3608397ce7a4159502614ed66890f8999c2a9c056dd3b1024d6721f0 ---
+The MIT License (MIT)
+
+Copyright 2017 Andrey Sitnik <andrey@sitnik.es>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
 --- SHA-256 46231df5a7733c3f52f11b71f3df61813007745b62b09031acfb45fb42d75082 ---
 MIT License
 
@@ -3522,6 +3575,29 @@ SOFTWARE.
    See the License for the specific language governing permissions and
    limitations under the License.
 
+--- SHA-256 ad9aa40aaab4bee08121a0180096cc6a72abf29e19e606328b66c0178f41d267 ---
+The MIT License (MIT)
+
+Copyright (c) 2015-2021 Hexagon <github.com/Hexagon>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
 --- SHA-256 b495047bd93a9b06913511076f504daba17d5bbeb3e0650f3bb53a4220329c57 ---
 ISC License
 
@@ -5279,6 +5355,29 @@ Copyright (c) 2012 Felix Geisendörfer (felix@debuggable.com) and contributors
  OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  THE SOFTWARE.
 
+--- SHA-256 e7d9d11c28cce34f09dc7d2b0a3a6609ccba5fbc8e926e6d1bfdf060930e9f05 ---
+MIT License
+
+Copyright (c) 2026 tintinweb
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
 --- SHA-256 e7dc37bf662d7f786efcb46c545615e70c1daf458a38385521c63cf6607cdfe1 ---
 BSD 3-Clause License
 

package/dist/agent/context-prompt.cjs

@@ -16,7 +16,7 @@ const agent_cli_capabilities_js_1 = require("./agent-cli-capabilities.cjs");
  * 5. 版本化：每次实质改动 bump LARKIN_STANDING_PROMPT_VERSION，并同步 eval 数据集/graders/断言。
  * 6. 用 eval 验证：行为变化必须配套固定场景 + rubric（evals/*、test/support/*-grader.mjs、live 测试）。
  */
-exports.LARKIN_STANDING_PROMPT_VERSION = "larkin-standing-v19";
+exports.LARKIN_STANDING_PROMPT_VERSION = "larkin-standing-v20";
 /**
  * Agent 间协作唤醒引导（issue #75）：纯文本 @ 不会产生飞书 mention 事件，
  * 必须由模型直接构造真实的 mention 元素；`--mention` 扩展参数已移除。
@@ -132,7 +132,9 @@ class ContextPromptBuilder {
             "Only a real Feishu `message_id` beginning with `om_` may be passed to `+messages-reply`; `rem_`, `redeliver_`, and every other synthetic ID must never be replied to. Send with a confirmed `chat_id` and never guess a chat id from a display name.",
             "Before every send/reply/card write, Larkin probes the exact chat or thread history with the current Bot identity. A nonzero `freshness_conflict` includes bounded unseen context and direct-acks that cursor; reconsider it, then retry the ordinary command. Larkin never saves the blocked message body as a draft.",
             "For regular textual message bodies, default to `--markdown`, including brief single-line replies, so Feishu renders Markdown structure instead of showing its markers literally.",
+            "When a URL must be visible, clickable, or openable by the recipient, include the complete bare `https://...` URL as visible text. Do not rely solely on `[label](URL)`, because Feishu client rendering is unreliable. A label may also be included, but the bare URL must remain present.",
             "Use native `--text` only when plain text or verbatim preservation is explicitly needed, such as logs, code, or exact whitespace. Both `--markdown` and `--text` remain supported in the Larkin Runtime.",
+            "Never rewrite or normalize an exact or verbatim user-supplied body to expose a URL; the existing exact-content paths remain authoritative and preserve the supplied body unchanged.",
             "For exact text supplied directly in the current instruction or Inbox event, pass the body unchanged as one literal `--text` argument. A direct literal must not use command substitution, backticks, `eval`, `echo`, or an unquoted variable; if it cannot be represented safely, stop and report the limitation instead of normalizing it.",
             "An explicit exact or verbatim direct literal uses `--text` and overrides the regular markdown default.",
             `For a common exact send with a confirmed chat id, use the complete schematic recipe \`${executable} im +messages-send --chat-id <confirmed_chat_id> --text '<exact_body_as_one_literal_argument>' --json\`; replace each placeholder with the corresponding confirmed or exact literal value.`,

package/dist/agent/context-prompt.mjs

@@ -13,7 +13,7 @@ import { agentCliPromptCapabilities } from "./agent-cli-capabilities.mjs";
  * 5. 版本化：每次实质改动 bump LARKIN_STANDING_PROMPT_VERSION，并同步 eval 数据集/graders/断言。
  * 6. 用 eval 验证：行为变化必须配套固定场景 + rubric（evals/*、test/support/*-grader.mjs、live 测试）。
  */
-export const LARKIN_STANDING_PROMPT_VERSION = "larkin-standing-v19";
+export const LARKIN_STANDING_PROMPT_VERSION = "larkin-standing-v20";
 /**
  * Agent 间协作唤醒引导（issue #75）：纯文本 @ 不会产生飞书 mention 事件，
  * 必须由模型直接构造真实的 mention 元素；`--mention` 扩展参数已移除。
@@ -129,7 +129,9 @@ export class ContextPromptBuilder {
             "Only a real Feishu `message_id` beginning with `om_` may be passed to `+messages-reply`; `rem_`, `redeliver_`, and every other synthetic ID must never be replied to. Send with a confirmed `chat_id` and never guess a chat id from a display name.",
             "Before every send/reply/card write, Larkin probes the exact chat or thread history with the current Bot identity. A nonzero `freshness_conflict` includes bounded unseen context and direct-acks that cursor; reconsider it, then retry the ordinary command. Larkin never saves the blocked message body as a draft.",
             "For regular textual message bodies, default to `--markdown`, including brief single-line replies, so Feishu renders Markdown structure instead of showing its markers literally.",
+            "When a URL must be visible, clickable, or openable by the recipient, include the complete bare `https://...` URL as visible text. Do not rely solely on `[label](URL)`, because Feishu client rendering is unreliable. A label may also be included, but the bare URL must remain present.",
             "Use native `--text` only when plain text or verbatim preservation is explicitly needed, such as logs, code, or exact whitespace. Both `--markdown` and `--text` remain supported in the Larkin Runtime.",
+            "Never rewrite or normalize an exact or verbatim user-supplied body to expose a URL; the existing exact-content paths remain authoritative and preserve the supplied body unchanged.",
             "For exact text supplied directly in the current instruction or Inbox event, pass the body unchanged as one literal `--text` argument. A direct literal must not use command substitution, backticks, `eval`, `echo`, or an unquoted variable; if it cannot be represented safely, stop and report the limitation instead of normalizing it.",
             "An explicit exact or verbatim direct literal uses `--text` and overrides the regular markdown default.",
             `For a common exact send with a confirmed chat id, use the complete schematic recipe \`${executable} im +messages-send --chat-id <confirmed_chat_id> --text '<exact_body_as_one_literal_argument>' --json\`; replace each placeholder with the corresponding confirmed or exact literal value.`,

package/dist/app/binary-entry.mjs

@@ -52,7 +52,12 @@ async function dispatchInternal(mode, rest) {
         case "pi-rpc": {
             const { prepareBuiltinPiPackageAssets } = await import("../runtime/builtin-pi-assets.mjs");
             prepareBuiltinPiPackageAssets();
-            await import("@earendil-works/pi-coding-agent/rpc-entry");
+            process.title = "pi-rpc";
+            process.env.PI_CODING_AGENT = "true";
+            process.emitWarning = (() => { });
+            const { main: piMain } = await import("@earendil-works/pi-coding-agent");
+            const { invokeBuiltinPiRpc } = await import("../runtime/pi-inline-extensions.mjs");
+            await invokeBuiltinPiRpc(piMain, rest);
             return;
         }
         case "pi-auth":

package/dist/runtime/pi-bash-timeout-extension.mjs

@@ -2,15 +2,16 @@ import { createBashToolDefinition } from "@earendil-works/pi-coding-agent";
 /**
  * pi bash 工具超时护栏扩展。
  *
- * 由 larkin 通过 `pi --extension/-e <bundle>` 注入，覆盖内置 `bash` 工具：
+ * 由 Larkin 向 builtin Pi 传入 inline factory，或通过 external Pi 的
+ * `pi --extension/-e <bundle>` 注入，覆盖内置 `bash` 工具：
  * - 无论模型是否传 `timeout`，都强制收窄到 <= MAX_BASH_SECONDS（默认 60s），
  *   避免单个 bash 调用无限期占住整个 agent 回合（issue #55）。
  * - 超时时 pi 会杀掉整个进程树（不残留卡死子进程，issue #56 的进程堆积），
  *   并在返回的错误里明确提示：长任务必须改用后台 subagent
  *   （Agent(run_in_background: true)，来自 pi-subagents 扩展）。
  *
- * 这是 pi 扩展，运行在 pi 进程内部；larkin 主进程不加载本模块（只通过
- * build.mjs 单独 bundle 成单文件后注入）。pi-* 保持 external。
+ * 这是 pi 扩展，运行在 Pi RPC 子进程内部；build.mjs 仍为 external Pi
+ * 单独产出注入 bundle。
  */
 /** 前台 bash 的硬性上限（秒）。issue #55 建议默认 60s。 */
 const MAX_BASH_SECONDS = 60;

package/dist/runtime/pi-bash-timeout-injection.mjs

@@ -1,15 +1,14 @@
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
-import { BUNDLED_PI_VERSION } from "./pi-provider-config.mjs";
-import { parsePiVersion, piVersionSupportsSubagents, probeExternalPiVersion } from "./pi-subagent-injection.mjs";
+import { piVersionSupportsSubagents, probeExternalPiVersion } from "./pi-subagent-injection.mjs";
 /**
  * pi-bash-timeout 扩展注入（bash 60s 超时护栏，issue #55/#56）。
  *
  * 分发：构建期把 src/runtime/pi-bash-timeout-extension.ts bundle 成单文件
- * `dist/runtime/pi-bash-timeout.bundle.js`（pi-* 包 external），运行时通过
- * `pi --extension/-e` 显式注入 —— builtin 与 external（用户 pi CLI）走同一
- * 路径，不碰用户 ~/.pi 配置。与 pi-subagents 共享同一个 pi 版本门槛。
+ * `dist/runtime/pi-bash-timeout.bundle.js`（pi-* 包 external），运行时仅向 external
+ * （用户 pi CLI）通过 `pi --extension/-e` 显式注入，不碰用户 ~/.pi 配置。
+ * Builtin Pi 直接接收静态 factory。与 pi-subagents 共享同一个 external 版本门槛。
  */
 /** 把 embedded bundle 落盘到 <configDir>/providers/pi/extensions/（0700/0600）。无 embedded 资产返回 null。 */
 export function materializeEmbeddedPiBashTimeoutBundle(configDir) {
@@ -46,15 +45,10 @@ export function bundledPiBashTimeoutExtensionPath(configDir) {
     }
     return materializeEmbeddedPiBashTimeoutBundle(configDir);
 }
-/**
- * 注入决策：builtin 恒注入（内嵌 pi 版本固定）；external 需探测版本（与
- * pi-subagents 同门槛 >= 0.80.0，保证 createBashToolDefinition 可用）。
- * 返回 `-e` 参数值，或 null（产物缺失或版本不达标）。
- */
+/** External Pi 需满足 >= 0.80.0；返回 bundle 路径或 null。 */
 export function resolvePiBashTimeoutExtensionArg(input, probeVersion = () => probeExternalPiVersion(input.piCommand, input.env), resolveBundle = () => bundledPiBashTimeoutExtensionPath(input.env.LARKIN_CONFIG_DIR)) {
     const bundle = resolveBundle();
     if (!bundle)
         return null;
-    const version = input.distribution === "builtin" ? parsePiVersion(BUNDLED_PI_VERSION) : probeVersion();
-    return piVersionSupportsSubagents(version) ? bundle : null;
+    return piVersionSupportsSubagents(probeVersion()) ? bundle : null;
 }

package/dist/runtime/pi-inline-extensions.mjs

@@ -0,0 +1,13 @@
+import subagentsExtension from "@tintinweb/pi-subagents/dist/index.js";
+import bashTimeoutExtension from "./pi-bash-timeout-extension.mjs";
+/** Builtin Pi extensions are loaded as code, never through Pi's path/data-URL loader. */
+export const BUILTIN_PI_EXTENSION_FACTORIES = Object.freeze([
+    subagentsExtension,
+    bashTimeoutExtension,
+]);
+/** Invoke Pi RPC with Larkin's builtin-only extension factories. */
+export async function invokeBuiltinPiRpc(piMain, rest) {
+    await piMain(["--mode", "rpc", ...rest], {
+        extensionFactories: [...BUILTIN_PI_EXTENSION_FACTORIES],
+    });
+}

package/dist/runtime/pi-subagent-injection.mjs

@@ -2,14 +2,13 @@ import fs from "node:fs";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
-import { BUNDLED_PI_VERSION } from "./pi-provider-config.mjs";
 /**
  * pi-subagents 扩展注入。
  *
  * 分发：构建期把 @tintinweb/pi-subagents bundle 成单文件
- * `dist/runtime/pi-subagents.bundle.js`（pi-* 包 external），运行时通过
- * `pi --extension/-e` 显式注入 —— builtin（binary-entry pi-rpc）与 external
- * （用户 pi CLI）走同一路径，不碰用户 ~/.pi 配置。
+ * `dist/runtime/pi-subagents.bundle.js`（pi-* 包 external），运行时仅向 external
+ * （用户 pi CLI）通过 `pi --extension/-e` 显式注入，不碰用户 ~/.pi 配置。
+ * Builtin Pi 直接接收静态 factory，不经过本文件或 Pi 的路径加载器。
  *
  * 版本门槛：pi-subagents peerDependency 要求 @earendil-works/pi-* >= 0.80.0；
  * external 的 pi 版本低于 0.80 时不注入（降级为无 subagent 能力）。
@@ -70,21 +69,13 @@ export function piVersionSupportsSubagents(version) {
         return false;
     return version.major > 0 || (version.major === 0 && version.minor >= 80);
 }
-/**
- * 解析 `pi --version`（external 专用；builtin 用 BUNDLED_PI_VERSION 常量，无需探测）。
- * 返回 null 表示无法确认版本（视为不支持，不注入）。
- */
+/** 解析 external `pi --version`；无法确认版本时视为不支持，不注入。 */
 export function probeExternalPiVersion(piCommand, env) {
     const result = spawnSync(piCommand, ["--version"], { env, encoding: "utf8", timeout: 5_000, maxBuffer: 64 * 1024 });
     if (result.error || result.status !== 0)
         return null;
     return parsePiVersion(String(result.stdout || result.stderr || ""));
 }
-/**
- * 注入决策：builtin 恒注入（内嵌 pi 版本固定 BUNDLED_PI_VERSION）；external 需探测版本。
- * 返回 `-e` 参数值（扩展 bundle 路径），或 null（不注入：产物缺失或版本不达标）。
- * `probeVersion` 仅供测试注入；缺省时 external 用 probeExternalPiVersion 探测。
- */
 /**
  * 用户 pi 是否已自行安装 pi-subagents（settings.json packages 或包目录）。
  * 已装时 Larkin 不再 -e 注入，避免同名工具（Agent/get_subagent_result/steer_subagent）
@@ -122,8 +113,7 @@ export function resolvePiSubagentExtensionArg(input, probeVersion = () => probeE
     if (!bundle)
         return null;
     // 用户已自行安装同款扩展时跳过注入，避免工具名重复注册冲突。
-    if (input.distribution === "external" && userPiAlreadyHasSubagentsExtension(input.env))
+    if (userPiAlreadyHasSubagentsExtension(input.env))
         return null;
-    const version = input.distribution === "builtin" ? parsePiVersion(BUNDLED_PI_VERSION) : probeVersion();
-    return piVersionSupportsSubagents(version) ? bundle : null;
+    return piVersionSupportsSubagents(probeVersion()) ? bundle : null;
 }

package/dist/runtime/runtime-adapters.mjs

@@ -9,7 +9,6 @@ import { internalCommandSpec } from "../app/internal-command.mjs";
 import { piAgentDirectory } from "./pi-provider-config.mjs";
 import { resolvePiSubagentExtensionArg } from "./pi-subagent-injection.mjs";
 import { resolvePiBashTimeoutExtensionArg } from "./pi-bash-timeout-injection.mjs";
-import { isWindows } from "../platform/secure-metadata.mjs";
 import { classifyRuntimePrerequisite, probeNativeRuntimeReadiness, providerAuthenticationFailureReadiness, RuntimePrerequisiteError, } from "./runtime-readiness.mjs";
 class EventSession {
     listeners = new Set();
@@ -795,6 +794,21 @@ class PiRpcBackend {
         return () => { offEvent(); offFailure(); };
     }
 }
+export function resolvePiProcessExtensionArgs(input, resolvers = {}) {
+    // Builtin factories are passed directly to Pi main on every platform. The platform
+    // field makes that invariant explicit and testable without changing process.platform.
+    if (input.distribution === "builtin")
+        return [];
+    const resolverInput = { distribution: "external", piCommand: input.piCommand, env: input.env };
+    const args = [];
+    const subagents = (resolvers.subagents ?? resolvePiSubagentExtensionArg)(resolverInput);
+    if (subagents)
+        args.push("-e", subagents);
+    const bashTimeout = (resolvers.bashTimeout ?? resolvePiBashTimeoutExtensionArg)(resolverInput);
+    if (bashTimeout)
+        args.push("-e", bashTimeout);
+    return args;
+}
 async function createPiRpcBackend(input, dependencies, spawn) {
     const stateRoot = input.stateDir ?? path.join(input.workspaceDir, ".larkin");
     const runtimeDir = path.join(stateRoot, "runtime");
@@ -821,21 +835,12 @@ async function createPiRpcBackend(input, dependencies, spawn) {
         mergedEnv.PI_CODING_AGENT_DIR = piAgentDirectory(mergedEnv.LARKIN_CONFIG_DIR, input.agentId);
         mergedEnv.PI_TELEMETRY = "0";
     }
-    const subagentExtension = builtin && isWindows ? null : resolvePiSubagentExtensionArg({
-        distribution: builtin ? "builtin" : "external",
-        piCommand: command,
-        env: mergedEnv,
-    });
-    if (subagentExtension)
-        commandArgs.push("-e", subagentExtension);
-    // bash 60s 超时护栏（issue #55/#56）：与 pi-subagents 一起注入，两者工具名不冲突。
-    const bashTimeoutExtension = builtin && isWindows ? null : resolvePiBashTimeoutExtensionArg({
+    commandArgs.push(...(dependencies.resolvePiProcessExtensionArgs ?? resolvePiProcessExtensionArgs)({
         distribution: builtin ? "builtin" : "external",
         piCommand: command,
         env: mergedEnv,
-    });
-    if (bashTimeoutExtension)
-        commandArgs.push("-e", bashTimeoutExtension);
+        platform: process.platform,
+    }));
     const child = spawn(command, commandArgs, {
         cwd: input.workspaceDir,
         env: mergedEnv,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkin",
-  "version": "0.2.93",
+  "version": "0.3.1",
   "private": false,
   "larkinPackageRole": "npm-published",
   "files": [
@@ -74,6 +74,8 @@
     "test:eval:authoritative-freshness-gate": "bun test --max-concurrency 1 test/unit/evals/authoritative-freshness-gate.test.mjs",
     "test:eval:agent-experience-v6": "bun test --max-concurrency 1 test/unit/evals/agent-experience-v6.test.mjs",
     "test:eval:mention-construction": "bun run build && LARKIN_RUN_MENTION_CONSTRUCTION_EVAL=1 bun test --max-concurrency 1 test/live/mention-construction-agent-eval.test.mjs",
+    "test:eval:clickable-link-delivery": "bun run build && bun test --max-concurrency 1 test/unit/evals/clickable-link-delivery.test.mjs",
+    "test:eval:clickable-link-delivery:native": "bun run build && LARKIN_RUN_CLICKABLE_LINK_DELIVERY_EVAL=1 bun test --max-concurrency 1 test/live/clickable-link-delivery-agent-eval.test.mjs",
     "test:eval:public-contribution-governance": "bun test --max-concurrency 1 test/unit/evals/public-contribution-governance.test.mjs",
     "test:live:public-contribution-governance": "bun test --max-concurrency 1 test/live/public-contribution-governance-live.test.mjs",
     "test:eval:authoritative-freshness-gate:native": "bun run build && LARKIN_RUN_AUTHORITATIVE_FRESHNESS_EVAL=1 bun test --max-concurrency 1 test/live/authoritative-freshness-gate-agent-eval.test.mjs",
@@ -83,6 +85,7 @@
   },
   "dependencies": {
     "@earendil-works/pi-coding-agent": "0.83.0",
+    "@tintinweb/pi-subagents": "0.14.3",
     "@larksuite/channel": "^0.4.0",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/resources": "^2.10.0",
@@ -101,7 +104,6 @@
     "@testing-library/jest-dom": "^7.0.0",
     "@testing-library/react": "^16.3.2",
     "@testing-library/user-event": "^14.6.1",
-    "@tintinweb/pi-subagents": "0.14.3",
     "@types/node": "^26.1.1",
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",