larkin 0.4.29 → 0.5.0

package/dist/platform/process-boundary-trace.cjs

@@ -1,108 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.traceProcessBoundary = traceProcessBoundary;
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-function inspect(role, file) {
-    try {
-        const stat = node_fs_1.default.lstatSync(file);
-        return {
-            role,
-            exists: true,
-            regularFile: stat.isFile(),
-            directory: stat.isDirectory(),
-            symlink: stat.isSymbolicLink(),
-            mode: stat.mode & 0o777,
-        };
-    }
-    catch (error) {
-        const code = error.code;
-        return { role, exists: false, ...(code === "ELOOP" ? { symlink: true } : {}) };
-    }
-}
-function errorCategory(error) {
-    const code = error && typeof error === "object" && "code" in error
-        ? String(error.code || "") : "";
-    if (code === "ENOENT")
-        return "missing";
-    if (code === "EACCES" || code === "EPERM")
-        return "permission";
-    if (code === "ELOOP")
-        return "symlink";
-    if (code === "EEXIST")
-        return "conflict";
-    if (code === "EINVAL" || code === "EBADMSG" || code === "ERR_INVALID_ARG_VALUE")
-        return "invalid";
-    return "runtime";
-}
-function safePhase(value) {
-    const phase = typeof value === "string" ? value : "unknown";
-    return /^[a-z0-9:_-]{1,80}$/i.test(phase) ? phase : "unknown";
-}
-function safeEpoch(value) {
-    if (typeof value !== "string" && typeof value !== "number" && !(value instanceof Date))
-        return null;
-    const text = value instanceof Date ? value.toISOString() : String(value);
-    const time = Date.parse(text);
-    return Number.isFinite(time) ? new Date(time).toISOString() : null;
-}
-/**
- * Opt-in, content-free diagnostics for process-boundary startup investigations.
- * The trace intentionally emits roles and metadata only: never a cwd, home,
- * config/profile/target path, or exception text. Diagnostics are inert unless an
- * absolute 0600 destination is explicitly supplied by a test or operator.
- */
-function traceProcessBoundary(env, phase, fields = {}) {
-    const file = env.LARKIN_PROCESS_BOUNDARY_TRACE_FILE;
-    if (!file || !node_path_1.default.isAbsolute(file) || /[\0\r\n]/.test(file))
-        return;
-    try {
-        const configRoot = fields.configDir || env.LARKIN_CONFIG_DIR || env.LARKIN_HOME || null;
-        const record = {
-            at: new Date().toISOString(),
-            epoch: safeEpoch(fields.epoch ?? env.LARKIN_DAEMON_EPOCH ?? new Date().toISOString()),
-            pid: process.pid,
-            ppid: process.ppid,
-            phase: safePhase(phase),
-            configuredRoots: {
-                configDir: Boolean(env.LARKIN_CONFIG_DIR || fields.configDir),
-                larkinHome: Boolean(env.LARKIN_HOME),
-                piAgentDir: Boolean(env.PI_CODING_AGENT_DIR),
-            },
-            pathRoles: [
-                ...(configRoot ? [inspect("config-root", configRoot)] : []),
-                ...(fields.targetDir ? [inspect("provider-target", fields.targetDir)] : []),
-            ],
-        };
-        if (typeof fields.agentId === "string" && /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(fields.agentId))
-            record.agentId = fields.agentId;
-        if (Number.isInteger(fields.childPid) && Number(fields.childPid) > 0)
-            record.childPid = Number(fields.childPid);
-        if (typeof fields.distribution === "string" && /^(builtin|external)$/.test(fields.distribution))
-            record.distribution = fields.distribution;
-        if (typeof fields.requested === "string" && /^(builtin|external|migration|startup)$/.test(fields.requested))
-            record.requested = fields.requested;
-        if (typeof fields.targetDirExisted === "boolean")
-            record.targetDirExisted = fields.targetDirExisted;
-        if (fields.error !== undefined)
-            record.errorCategory = errorCategory(fields.error);
-        const bytes = Buffer.from(`${JSON.stringify(record)}\n`);
-        const fd = node_fs_1.default.openSync(file, node_fs_1.default.constants.O_WRONLY | node_fs_1.default.constants.O_APPEND | node_fs_1.default.constants.O_CREAT | (node_fs_1.default.constants.O_NOFOLLOW || 0), 0o600);
-        try {
-            const stat = node_fs_1.default.fstatSync(fd);
-            if (!stat.isFile() || (typeof process.getuid === "function" && stat.uid !== process.getuid()) || (stat.mode & 0o077) !== 0)
-                return;
-            node_fs_1.default.writeSync(fd, bytes);
-            node_fs_1.default.fchmodSync(fd, 0o600);
-        }
-        finally {
-            node_fs_1.default.closeSync(fd);
-        }
-    }
-    catch {
-        // Diagnostics must never alter startup behavior.
-    }
-}

package/dist/runtime/builtin-pi-assets.cjs

@@ -1,117 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.prepareBuiltinPiPackageAssets = prepareBuiltinPiPackageAssets;
-exports.piChildDistribution = piChildDistribution;
-exports.piChildDistributionFromOverrides = piChildDistributionFromOverrides;
-exports.resolveExternalPiPackageDir = resolveExternalPiPackageDir;
-exports.isLarkinBuiltinPiPackageDir = isLarkinBuiltinPiPackageDir;
-exports.catalogPiChildDistribution = catalogPiChildDistribution;
-exports.applyPiPackageDirForChild = applyPiPackageDirForChild;
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-function privateDirectory(directory) {
-    node_fs_1.default.mkdirSync(directory, { recursive: true, mode: 0o700 });
-    const stat = node_fs_1.default.lstatSync(directory);
-    if (!stat.isDirectory() || stat.isSymbolicLink())
-        throw new Error(`unsafe bundled Pi asset directory: ${directory}`);
-    node_fs_1.default.chmodSync(directory, 0o700);
-}
-function writeEmbeddedFile(file, contents) {
-    const temporary = `${file}.${process.pid}.${Math.random().toString(16).slice(2)}.tmp`;
-    node_fs_1.default.writeFileSync(temporary, contents, { mode: 0o600, flag: "wx" });
-    node_fs_1.default.renameSync(temporary, file);
-    node_fs_1.default.chmodSync(file, 0o600);
-}
-/** Materialize upstream runtime assets that Bun cannot serve through ordinary fs paths. */
-function prepareBuiltinPiPackageAssets() {
-    const assets = globalThis.__LARKIN_EMBEDDED_BUILTIN_PI_ASSETS__;
-    if (!assets)
-        return;
-    const agentDir = process.env.PI_CODING_AGENT_DIR;
-    if (!agentDir)
-        throw new Error("bundled Pi requires PI_CODING_AGENT_DIR");
-    privateDirectory(agentDir);
-    const packageDir = node_path_1.default.join(agentDir, ".larkin-official-pi-package");
-    const themeDir = node_path_1.default.join(packageDir, "theme");
-    privateDirectory(packageDir);
-    privateDirectory(themeDir);
-    writeEmbeddedFile(node_path_1.default.join(packageDir, "package.json"), assets.packageJson);
-    writeEmbeddedFile(node_path_1.default.join(themeDir, "dark.json"), assets.darkTheme);
-    writeEmbeddedFile(node_path_1.default.join(themeDir, "light.json"), assets.lightTheme);
-    process.env.PI_PACKAGE_DIR = packageDir;
-}
-function piChildDistribution(env) {
-    return env?.LARKIN_PI_DISTRIBUTION === "builtin" ? "builtin" : "external";
-}
-/** Host process env may be builtin Pi; only explicit child overrides select bundled assets. */
-function piChildDistributionFromOverrides(...overrides) {
-    for (let index = overrides.length - 1; index >= 0; index -= 1) {
-        const value = overrides[index]?.LARKIN_PI_DISTRIBUTION;
-        if (value === "builtin" || value === "external")
-            return value;
-    }
-    return "external";
-}
-function existingPiThemeFile(directory) {
-    const theme = node_path_1.default.join(directory, "dist", "modes", "interactive", "theme", "dark.json");
-    let fd;
-    try {
-        fd = node_fs_1.default.openSync(theme, node_fs_1.default.constants.O_RDONLY);
-        return node_fs_1.default.fstatSync(fd).isFile() ? theme : undefined;
-    }
-    catch {
-        return undefined;
-    }
-    finally {
-        if (fd !== undefined) {
-            try {
-                node_fs_1.default.closeSync(fd);
-            }
-            catch { /* already closed or unreadable */ }
-        }
-    }
-}
-function resolveExternalPiPackageDir(directory) {
-    if (!directory?.trim())
-        return undefined;
-    try {
-        const resolved = node_fs_1.default.realpathSync(directory);
-        return existingPiThemeFile(resolved) ? resolved : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function isLarkinBuiltinPiPackageDir(directory) {
-    if (!directory)
-        return false;
-    try {
-        const resolved = node_fs_1.default.realpathSync(directory);
-        if (node_path_1.default.basename(resolved).toLowerCase() !== ".larkin-official-pi-package")
-            return false;
-        return !existingPiThemeFile(resolved);
-    }
-    catch {
-        return node_path_1.default.basename(directory).toLowerCase() === ".larkin-official-pi-package";
-    }
-}
-function catalogPiChildDistribution(commandArgs) {
-    return commandArgs?.includes("pi-rpc") ? "builtin" : "external";
-}
-/** External/npm Pi resolves PI_PACKAGE_DIR as a Node package root and looks for dist/themes. */
-function applyPiPackageDirForChild(env, distribution = piChildDistribution(env)) {
-    const options = typeof distribution === "string" ? { distribution } : distribution;
-    const resolved = options.distribution ?? piChildDistribution(env);
-    const next = { ...env };
-    if (resolved === "builtin")
-        return next;
-    const kept = resolveExternalPiPackageDir(options.explicitPackageDir) ?? resolveExternalPiPackageDir(next.PI_PACKAGE_DIR);
-    if (kept)
-        next.PI_PACKAGE_DIR = kept;
-    else
-        delete next.PI_PACKAGE_DIR;
-    return next;
-}

package/dist/runtime/builtin-pi-assets.mjs

@@ -1,105 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-function privateDirectory(directory) {
-    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
-    const stat = fs.lstatSync(directory);
-    if (!stat.isDirectory() || stat.isSymbolicLink())
-        throw new Error(`unsafe bundled Pi asset directory: ${directory}`);
-    fs.chmodSync(directory, 0o700);
-}
-function writeEmbeddedFile(file, contents) {
-    const temporary = `${file}.${process.pid}.${Math.random().toString(16).slice(2)}.tmp`;
-    fs.writeFileSync(temporary, contents, { mode: 0o600, flag: "wx" });
-    fs.renameSync(temporary, file);
-    fs.chmodSync(file, 0o600);
-}
-/** Materialize upstream runtime assets that Bun cannot serve through ordinary fs paths. */
-export function prepareBuiltinPiPackageAssets() {
-    const assets = globalThis.__LARKIN_EMBEDDED_BUILTIN_PI_ASSETS__;
-    if (!assets)
-        return;
-    const agentDir = process.env.PI_CODING_AGENT_DIR;
-    if (!agentDir)
-        throw new Error("bundled Pi requires PI_CODING_AGENT_DIR");
-    privateDirectory(agentDir);
-    const packageDir = path.join(agentDir, ".larkin-official-pi-package");
-    const themeDir = path.join(packageDir, "theme");
-    privateDirectory(packageDir);
-    privateDirectory(themeDir);
-    writeEmbeddedFile(path.join(packageDir, "package.json"), assets.packageJson);
-    writeEmbeddedFile(path.join(themeDir, "dark.json"), assets.darkTheme);
-    writeEmbeddedFile(path.join(themeDir, "light.json"), assets.lightTheme);
-    process.env.PI_PACKAGE_DIR = packageDir;
-}
-export function piChildDistribution(env) {
-    return env?.LARKIN_PI_DISTRIBUTION === "builtin" ? "builtin" : "external";
-}
-/** Host process env may be builtin Pi; only explicit child overrides select bundled assets. */
-export function piChildDistributionFromOverrides(...overrides) {
-    for (let index = overrides.length - 1; index >= 0; index -= 1) {
-        const value = overrides[index]?.LARKIN_PI_DISTRIBUTION;
-        if (value === "builtin" || value === "external")
-            return value;
-    }
-    return "external";
-}
-function existingPiThemeFile(directory) {
-    const theme = path.join(directory, "dist", "modes", "interactive", "theme", "dark.json");
-    let fd;
-    try {
-        fd = fs.openSync(theme, fs.constants.O_RDONLY);
-        return fs.fstatSync(fd).isFile() ? theme : undefined;
-    }
-    catch {
-        return undefined;
-    }
-    finally {
-        if (fd !== undefined) {
-            try {
-                fs.closeSync(fd);
-            }
-            catch { /* already closed or unreadable */ }
-        }
-    }
-}
-export function resolveExternalPiPackageDir(directory) {
-    if (!directory?.trim())
-        return undefined;
-    try {
-        const resolved = fs.realpathSync(directory);
-        return existingPiThemeFile(resolved) ? resolved : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-export function isLarkinBuiltinPiPackageDir(directory) {
-    if (!directory)
-        return false;
-    try {
-        const resolved = fs.realpathSync(directory);
-        if (path.basename(resolved).toLowerCase() !== ".larkin-official-pi-package")
-            return false;
-        return !existingPiThemeFile(resolved);
-    }
-    catch {
-        return path.basename(directory).toLowerCase() === ".larkin-official-pi-package";
-    }
-}
-export function catalogPiChildDistribution(commandArgs) {
-    return commandArgs?.includes("pi-rpc") ? "builtin" : "external";
-}
-/** External/npm Pi resolves PI_PACKAGE_DIR as a Node package root and looks for dist/themes. */
-export function applyPiPackageDirForChild(env, distribution = piChildDistribution(env)) {
-    const options = typeof distribution === "string" ? { distribution } : distribution;
-    const resolved = options.distribution ?? piChildDistribution(env);
-    const next = { ...env };
-    if (resolved === "builtin")
-        return next;
-    const kept = resolveExternalPiPackageDir(options.explicitPackageDir) ?? resolveExternalPiPackageDir(next.PI_PACKAGE_DIR);
-    if (kept)
-        next.PI_PACKAGE_DIR = kept;
-    else
-        delete next.PI_PACKAGE_DIR;
-    return next;
-}

package/dist/runtime/pi-artifact-provenance.cjs

@@ -1,147 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PI_RUNTIME_ARTIFACT_NAMES = exports.PI_RUNTIME_ARTIFACT_MANIFEST = void 0;
-exports.recordPiRuntimeArtifactProvenance = recordPiRuntimeArtifactProvenance;
-exports.attestedPiRuntimeArtifactNames = attestedPiRuntimeArtifactNames;
-const node_crypto_1 = __importDefault(require("node:crypto"));
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-const secure_metadata_js_1 = require("../platform/secure-metadata.cjs");
-exports.PI_RUNTIME_ARTIFACT_MANIFEST = ".larkin-pi-owned-artifacts.json";
-exports.PI_RUNTIME_ARTIFACT_NAMES = [".larkin-official-pi-package", "models-store.json", "npm"];
-const MAX_FILE_BYTES = 256 * 1024 * 1024;
-const MAX_ENTRIES = 4096;
-function digest(value) {
-    return node_crypto_1.default.createHash("sha256").update(value).digest("hex");
-}
-function assertSafeEntry(file, label) {
-    const stat = node_fs_1.default.lstatSync(file);
-    if (stat.isSymbolicLink())
-        throw new Error(`${label} must not be a symlink`);
-    if (typeof process.getuid === "function" && stat.uid !== process.getuid())
-        throw new Error(`${label} owner is unsafe`);
-    return stat;
-}
-function identity(file, label) {
-    const stat = assertSafeEntry(file, label);
-    const mode = stat.mode & 0o777;
-    if (stat.isFile()) {
-        if (stat.size > MAX_FILE_BYTES)
-            throw new Error(`${label} is too large`);
-        const bytes = node_fs_1.default.readFileSync(file);
-        return { kind: "file", mode, device: String(stat.dev), inode: String(stat.ino), bytes: bytes.length, digest: digest(bytes) };
-    }
-    if (!stat.isDirectory())
-        throw new Error(`${label} has an unsupported type`);
-    const entries = node_fs_1.default.readdirSync(file).sort();
-    if (entries.length > MAX_ENTRIES)
-        throw new Error(`${label} has too many entries`);
-    const children = entries.map((name) => {
-        if (name === "." || name === ".." || name.includes("/"))
-            throw new Error(`${label} contains an unsafe entry`);
-        const child = identity(node_path_1.default.join(file, name), `${label} child`);
-        return [name, child.kind, child.mode, child.device, child.inode, child.bytes, child.digest];
-    });
-    return {
-        kind: "directory", mode, device: String(stat.dev), inode: String(stat.ino),
-        bytes: children.reduce((sum, child) => sum + Number(child[5]), 0), digest: digest(JSON.stringify(children)),
-    };
-}
-function sameIdentity(actual, expected) {
-    return actual.kind === expected.kind && actual.mode === expected.mode
-        && actual.device === expected.device && actual.inode === expected.inode
-        && actual.bytes === expected.bytes && actual.digest === expected.digest;
-}
-function readManifest(file) {
-    try {
-        const stat = assertSafeEntry(file, "Pi artifact provenance manifest");
-        if (!stat.isFile() || !(0, secure_metadata_js_1.exactMode)(stat, 0o600) || stat.size > 1024 * 1024)
-            throw new Error("Pi artifact provenance manifest is unsafe");
-        const value = JSON.parse(node_fs_1.default.readFileSync(file, "utf8"));
-        if (value?.version !== 1 || value.owner !== "larkin-builtin-pi" || !value.directory || !value.artifacts)
-            throw new Error("Pi artifact provenance manifest is invalid");
-        return value;
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return null;
-        throw error;
-    }
-}
-function writeManifest(file, value) {
-    const temp = `${file}.tmp-${process.pid}`;
-    const fd = node_fs_1.default.openSync(temp, "wx", 0o600);
-    try {
-        node_fs_1.default.writeFileSync(fd, `${JSON.stringify(value, null, 2)}\n`);
-        node_fs_1.default.fsyncSync(fd);
-    }
-    finally {
-        node_fs_1.default.closeSync(fd);
-    }
-    node_fs_1.default.renameSync(temp, file);
-}
-/** Record only allowed entries that were absent at the runtime spawn boundary. */
-function recordPiRuntimeArtifactProvenance(targetDir, beforeEntries, boundaryAt = Date.now()) {
-    const target = assertSafeEntry(targetDir, "Pi provider target");
-    if (!target.isDirectory() || !(0, secure_metadata_js_1.exactMode)(target, 0o700))
-        throw new Error("Pi provider target is unsafe");
-    const manifestFile = node_path_1.default.join(targetDir, exports.PI_RUNTIME_ARTIFACT_MANIFEST);
-    const existing = readManifest(manifestFile);
-    const manifest = existing ?? {
-        version: 1, owner: "larkin-builtin-pi", directory: { device: String(target.dev), inode: String(target.ino) },
-        recordedAt: new Date(boundaryAt).toISOString(), artifacts: {},
-    };
-    if (manifest.directory.device !== String(target.dev) || manifest.directory.inode !== String(target.ino))
-        throw new Error("Pi artifact provenance target identity changed");
-    let changed = false;
-    for (const [name, expected] of Object.entries(manifest.artifacts)) {
-        if (!exports.PI_RUNTIME_ARTIFACT_NAMES.includes(name) || name.includes("/") || !expected)
-            throw new Error("Pi artifact provenance entry is invalid");
-        const actual = identity(node_path_1.default.join(targetDir, name), `Pi artifact ${name}`);
-        const sameOwner = actual.kind === expected.kind && actual.mode === expected.mode
-            && actual.device === expected.device && actual.inode === expected.inode;
-        if (!sameOwner)
-            throw new Error(`Pi artifact ${name} provenance identity changed`);
-        if (!sameIdentity(actual, expected)) {
-            manifest.artifacts[name] = actual;
-            changed = true;
-        }
-    }
-    for (const name of exports.PI_RUNTIME_ARTIFACT_NAMES) {
-        if (beforeEntries.has(name) || manifest.artifacts[name])
-            continue;
-        const file = node_path_1.default.join(targetDir, name);
-        if (!node_fs_1.default.existsSync(file))
-            continue;
-        const actual = identity(file, `Pi artifact ${name}`);
-        const stat = node_fs_1.default.lstatSync(file);
-        if (stat.birthtimeMs + 1 < boundaryAt && stat.mtimeMs + 1 < boundaryAt)
-            throw new Error(`Pi artifact ${name} predates runtime provenance boundary`);
-        manifest.artifacts[name] = actual;
-        changed = true;
-    }
-    if (changed)
-        writeManifest(manifestFile, manifest);
-}
-/** Return the names that are both explicitly attested and unchanged. */
-function attestedPiRuntimeArtifactNames(targetDir) {
-    const target = assertSafeEntry(targetDir, "Pi provider target");
-    if (!target.isDirectory())
-        throw new Error("Pi provider target is unsafe");
-    const manifest = readManifest(node_path_1.default.join(targetDir, exports.PI_RUNTIME_ARTIFACT_MANIFEST));
-    if (!manifest || manifest.directory.device !== String(target.dev) || manifest.directory.inode !== String(target.ino))
-        return new Set();
-    const names = new Set();
-    for (const [name, expected] of Object.entries(manifest.artifacts)) {
-        if (!exports.PI_RUNTIME_ARTIFACT_NAMES.includes(name) || !expected)
-            continue;
-        const actual = identity(node_path_1.default.join(targetDir, name), `Pi artifact ${name}`);
-        if (!sameIdentity(actual, expected))
-            throw new Error(`Pi artifact ${name} provenance changed`);
-        names.add(name);
-    }
-    return names;
-}

package/dist/runtime/pi-distribution-label.cjs

@@ -1,6 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.piDistributionLabel = piDistributionLabel;
-function piDistributionLabel(distribution) {
-    return distribution === "builtin" ? "内置 Pi" : "用户安装的 Pi";
-}

package/dist/runtime/pi-distribution-label.mjs

@@ -1,3 +0,0 @@
-export function piDistributionLabel(distribution) {
-    return distribution === "builtin" ? "内置 Pi" : "用户安装的 Pi";
-}

package/dist/runtime/pi-inline-extensions.mjs

@@ -1,78 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { pathToFileURL } from "node:url";
-import bashTimeoutExtension from "./pi-bash-timeout-extension.mjs";
-import { bundledPiSubagentExtensionPath, materializeEmbeddedPiSubagentBundle } from "./pi-subagent-injection.mjs";
-import piSubagentRecordWatchdog from "./pi-subagent-record-watchdog.mjs";
-/**
- * Load the prebuilt, patched subagent bundle shipped in dist/ rather than the
- * package-manager copy. Standalone binaries additionally load the patched
- * package through Bun's compiled module graph, while normal package installs
- * continue to use the prebuilt patched bundle.
- */
-async function loadBundledPiSubagentExtension() {
-    // Compiled standalone already has the patched package in Bun's module graph.
-    // The materialized sibling bundle externalizes @earendil-works/pi-coding-agent
-    // and cannot be imported from LARKIN_CONFIG_DIR.
-    const compiled = globalThis.__LARKIN_COMPILED_PI_SUBAGENTS__;
-    if (compiled) {
-        if (typeof compiled !== "function" && typeof compiled.factory !== "function") {
-            throw new Error("Larkin compiled pi-subagents factory is missing; refusing to start builtin Pi");
-        }
-        return compiled;
-    }
-    const bundle = bundledPiSubagentExtensionPath(process.env.LARKIN_CONFIG_DIR);
-    if (!bundle)
-        throw new Error("Larkin bounded pi-subagents bundle is unavailable; refusing to start builtin Pi");
-    const loaded = await import(pathToFileURL(bundle).href);
-    if (!loaded.default)
-        throw new Error("Larkin bounded pi-subagents bundle is invalid; refusing to start builtin Pi");
-    return loaded.default;
-}
-function asFn(mod, name) {
-    if (typeof mod === "function")
-        return mod;
-    const fallback = mod?.default;
-    if (typeof fallback === "function")
-        return fallback;
-    throw new Error(`${name} extension factory is missing`);
-}
-function wrapFactory(name, factory) {
-    return async (pi) => {
-        try {
-            await factory(pi);
-        }
-        catch (error) {
-            throw error instanceof Error ? error : new Error(`${name}: ${String(error)}`);
-        }
-    };
-}
-/** Builtin Pi extensions are loaded as code, never through Pi's path/data-URL loader. */
-const bundledSubagentsExtension = async (pi) => {
-    const extension = await loadBundledPiSubagentExtension();
-    if (typeof extension === "function")
-        await extension(pi);
-    else
-        await extension.factory(pi);
-};
-// Watchdog must register session_shutdown before the bundled subagent extension
-// so the final sweep can still read AgentManager.getRecord and bridge consumed
-// terminals before manager teardown.
-export const BUILTIN_PI_EXTENSION_FACTORIES = Object.freeze([
-    wrapFactory("larkin-pi-subagent-watchdog", asFn(piSubagentRecordWatchdog, "larkin-pi-subagent-watchdog")),
-    wrapFactory("larkin-pi-subagents", bundledSubagentsExtension),
-    wrapFactory("larkin-pi-bash-timeout", asFn(bashTimeoutExtension, "larkin-pi-bash-timeout")),
-]);
-/** Invoke Pi RPC with Larkin's builtin-only extension factories. */
-export async function invokeBuiltinPiRpc(piMain, rest) {
-    if (globalThis.__LARKIN_EMBEDDED_PI_SUBAGENTS_BUNDLE__ && process.env.LARKIN_CONFIG_DIR) {
-        const materialized = materializeEmbeddedPiSubagentBundle(process.env.LARKIN_CONFIG_DIR);
-        if (!materialized)
-            throw new Error("standalone pi-subagents bundle failed to materialize");
-        const supervised = path.join(path.dirname(materialized), "pi-supervised-command.bundle.js");
-        process.env.LARKIN_PI_SUPERVISED_BUNDLE = fs.realpathSync(supervised);
-    }
-    await piMain(["--mode", "rpc", ...rest], {
-        extensionFactories: [...BUILTIN_PI_EXTENSION_FACTORIES],
-    });
-}