larkin 0.4.29 → 0.5.1

package/dist/app/pi-auth-cli.mjs

@@ -1,277 +0,0 @@
-import fs from "node:fs";
-import * as larkinConfig from "../platform/config.mjs";
-import { createOfficialPiCredentialRuntime, officialPiAuthStatus, } from "../runtime/pi-official-auth.mjs";
-import { configureBuiltinPiProvider, listBuiltinPiProviderCatalog, logoutBuiltinPiProvider, } from "../runtime/pi-provider-login.mjs";
-import { MAX_BUILTIN_PI_API_KEY_LENGTH } from "../runtime/pi-provider-config.mjs";
-const APP_ID = /^cli_[A-Za-z0-9]+$/;
-const USAGE = "Usage: larkin pi-auth status [--agent <App ID>] [--json] | larkin pi-auth providers [--json] | larkin pi-auth login <preset|custom> --agent <App ID> [--model <model>] [--base-url <url>] [--api-key-stdin] [--json] | larkin pi-auth logout <provider> [--agent <App ID>]";
-const API_KEY_ARGV_MESSAGE = "existing-Agent login does not accept --api-key. Use --api-key-stdin or an interactive TTY prompt.";
-const API_KEY_BUDGET_MESSAGE = "API Key 不能为空或包含控制字符";
-const STDIN_CHUNK_BYTES = 1024;
-const STDIN_BOM_BYTES = 3;
-const STDIN_TRAILING_NEWLINE_SLACK = 32;
-const MAX_STDIN_API_KEY_BYTES = MAX_BUILTIN_PI_API_KEY_LENGTH + STDIN_BOM_BYTES + STDIN_TRAILING_NEWLINE_SLACK;
-function flag(args, name) {
-    const index = args.indexOf(name);
-    return index >= 0 ? args[index + 1] : undefined;
-}
-function hasApiKeyArgv(args) {
-    return args.some((argument) => argument === "--api-key" || argument.startsWith("--api-key="));
-}
-function consumeFlags(args, allowed, unary) {
-    let index = 0;
-    while (index < args.length) {
-        const argument = args[index];
-        if (!argument.startsWith("--"))
-            return false;
-        if (unary.has(argument)) {
-            index += 1;
-            continue;
-        }
-        if (allowed.has(argument) && args[index + 1] && !args[index + 1].startsWith("--")) {
-            index += 2;
-            continue;
-        }
-        return false;
-    }
-    return true;
-}
-/** 去掉 BOM 与全部尾部换行；保留内部控制字符给后续校验拒绝。 */
-export function normalizeStdinApiKey(raw) {
-    return raw.replace(/^\uFEFF/, "").replace(/[\r\n]+$/g, "");
-}
-function assertStdinApiKeyBudget(size) {
-    if (size > MAX_STDIN_API_KEY_BYTES)
-        throw new Error(API_KEY_BUDGET_MESSAGE);
-}
-function finishStdinApiKey(chunks) {
-    const normalized = normalizeStdinApiKey(Buffer.concat(chunks).toString("utf8"));
-    if (normalized.length > MAX_BUILTIN_PI_API_KEY_LENGTH)
-        throw new Error(API_KEY_BUDGET_MESSAGE);
-    return normalized;
-}
-function readFdChunk(fd, buffer) {
-    return new Promise((resolve, reject) => {
-        fs.read(fd, buffer, 0, buffer.length, null, (error, bytesRead) => {
-            if (error)
-                reject(error);
-            else
-                resolve(bytesRead);
-        });
-    });
-}
-/** 按块读取 fd，超过 key 上限立即停止，不等待管道 EOF。 */
-async function readBoundedFdSecret(fd) {
-    const chunks = [];
-    let size = 0;
-    const buffer = Buffer.alloc(STDIN_CHUNK_BYTES);
-    while (true) {
-        const bytesRead = await readFdChunk(fd, buffer);
-        if (bytesRead === 0)
-            break;
-        size += bytesRead;
-        assertStdinApiKeyBudget(size);
-        chunks.push(Buffer.from(buffer.subarray(0, bytesRead)));
-    }
-    return finishStdinApiKey(chunks);
-}
-async function readBoundedStreamSecret(stdin) {
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of stdin) {
-        const bytes = Buffer.from(chunk);
-        size += bytes.length;
-        assertStdinApiKeyBudget(size);
-        chunks.push(bytes);
-    }
-    return finishStdinApiKey(chunks);
-}
-export async function readStdinSecret(stdin) {
-    const stream = stdin;
-    if (typeof stream.fd === "number" && stream.fd >= 0 && !stream.isTTY) {
-        if (typeof stream.pause === "function")
-            stream.pause();
-        try {
-            return await readBoundedFdSecret(stream.fd);
-        }
-        catch (error) {
-            if (error instanceof Error && error.message === API_KEY_BUDGET_MESSAGE)
-                throw error;
-            // 回退到异步收集，例如测试传入的假 stream。
-        }
-    }
-    return readBoundedStreamSecret(stdin);
-}
-function createNoEchoQuestioner(stdin, stdout) {
-    return {
-        close() { },
-        secret(prompt) {
-            if (!stdin.isTTY || typeof stdin.setRawMode !== "function") {
-                throw new Error("non-interactive API-key login requires --api-key-stdin");
-            }
-            stdout.write(prompt);
-            const wasRaw = stdin.isRaw;
-            stdin.setRawMode(true);
-            stdin.resume();
-            return new Promise((resolve, reject) => {
-                let value = "";
-                const finish = (error) => {
-                    stdin.off("data", onData);
-                    stdin.setRawMode(Boolean(wasRaw));
-                    stdin.pause();
-                    stdout.write("\n");
-                    if (error)
-                        reject(error);
-                    else
-                        resolve(value);
-                };
-                const onData = (chunk) => {
-                    const bytes = Buffer.from(chunk);
-                    for (const byte of bytes) {
-                        if (byte === 3)
-                            return finish(new Error("pi-auth login cancelled"));
-                        if (byte === 10 || byte === 13)
-                            return finish();
-                        if (byte === 8 || byte === 127) {
-                            value = value.slice(0, -1);
-                            continue;
-                        }
-                        if (byte >= 32 && byte <= 126)
-                            value += String.fromCharCode(byte);
-                    }
-                };
-                stdin.on("data", onData);
-            });
-        },
-    };
-}
-function resolveAgentId(args, env) {
-    const loaded = larkinConfig.loadConfig(env);
-    const agentId = flag(args, "--agent") || loaded.config.activeAgent || undefined;
-    if (!agentId || !APP_ID.test(agentId))
-        throw new Error("请用 --agent <App ID> 选择 Agent");
-    const agent = loaded.config.agents[agentId];
-    if (!agent)
-        throw new Error(`Agent ${agentId} 不存在`);
-    if (agent.runtime !== "pi" || agent.piDistribution !== "builtin")
-        throw new Error(`Agent ${agentId} 不是内置 Pi`);
-    return agentId;
-}
-export async function main(args = process.argv.slice(2), env = process.env, io = { stdin: process.stdin, stdout: process.stdout, isTTY: Boolean(process.stdin.isTTY) }) {
-    const action = args[0] || "status";
-    const json = args.includes("--json");
-    if (hasApiKeyArgv(args))
-        throw new Error(API_KEY_ARGV_MESSAGE);
-    if (action === "providers") {
-        if (!consumeFlags(args.slice(1), new Set(), new Set(["--json"])))
-            throw new Error(USAGE);
-        const providers = listBuiltinPiProviderCatalog();
-        if (json) {
-            console.log(JSON.stringify({ providers }));
-            return;
-        }
-        console.log("Builtin Pi providers:");
-        for (const entry of providers) {
-            const model = entry.defaultModel ? ` default=${entry.defaultModel}` : " (requires --base-url and --model)";
-            console.log(`  ${entry.id}  ${entry.name}${model}`);
-        }
-        return;
-    }
-    if (action === "login") {
-        const preset = args[1];
-        const rest = args.slice(2);
-        if (!preset || preset.startsWith("--")
-            || !consumeFlags(rest, new Set(["--agent", "--model", "--base-url"]), new Set(["--json", "--api-key-stdin"]))) {
-            throw new Error(USAGE);
-        }
-        const agentId = resolveAgentId(rest, env);
-        const stdinKey = rest.includes("--api-key-stdin");
-        let apiKey = "";
-        if (stdinKey)
-            apiKey = await readStdinSecret(io.stdin);
-        else if (io.isTTY) {
-            const questioner = createNoEchoQuestioner(io.stdin, io.stdout);
-            try {
-                apiKey = await questioner.secret("API Key:\n> ");
-            }
-            finally {
-                questioner.close();
-            }
-        }
-        else {
-            throw new Error("non-interactive API-key login requires --api-key-stdin");
-        }
-        const result = await configureBuiltinPiProvider({
-            agentId,
-            preset,
-            apiKey,
-            model: flag(rest, "--model"),
-            baseUrl: flag(rest, "--base-url"),
-            env,
-        });
-        const payload = {
-            agentId: result.agentId,
-            provider: result.provider,
-            model: result.model,
-            credentialType: result.credentialType,
-            applyState: result.applyState,
-            ...(result.applyError ? { applyError: result.applyError } : {}),
-        };
-        if (json)
-            console.log(JSON.stringify(payload));
-        else {
-            const pending = result.applyState === "applied"
-                ? "applied"
-                : result.applyState === "pending"
-                    ? `pending${result.applyError ? ` (${result.applyError})` : ""}`
-                    : "saved; will apply on larkin start";
-            console.log(`Agent ${result.agentId} provider=${result.provider} model=${result.model} credential=${result.credentialType} apply=${pending}`);
-        }
-        return;
-    }
-    const requestedAgent = flag(args, "--agent");
-    let index = action === "logout" ? 2 : 1;
-    let valid = action === "status" || action === "logout";
-    while (valid && index < args.length) {
-        const argument = args[index];
-        if (argument === "--json" && action === "status") {
-            index += 1;
-            continue;
-        }
-        if (argument === "--agent" && args[index + 1]) {
-            index += 2;
-            continue;
-        }
-        valid = false;
-    }
-    if (!valid)
-        throw new Error(USAGE);
-    const loaded = larkinConfig.loadConfig(env);
-    const agentId = requestedAgent || loaded.config.activeAgent || undefined;
-    if (!agentId || !APP_ID.test(agentId))
-        throw new Error("请用 --agent <App ID> 选择 Agent");
-    const agent = loaded.config.agents[agentId];
-    if (!agent)
-        throw new Error(`Agent ${agentId} 不存在`);
-    if (agent.runtime !== "pi" || agent.piDistribution !== "builtin")
-        throw new Error(`Agent ${agentId} 不是内置 Pi`);
-    if (action === "status") {
-        const runtime = await createOfficialPiCredentialRuntime(loaded.configDir, agentId);
-        const statuses = await officialPiAuthStatus(runtime);
-        if (json)
-            console.log(JSON.stringify({ agentId, credentials: statuses }));
-        else if (statuses.length === 0)
-            console.log(`Agent ${agentId} 尚无已配置的官方 Pi credential`);
-        else {
-            console.log(`Agent ${agentId} 官方 Pi credential：`);
-            for (const entry of statuses)
-                console.log(`  ${entry.providerName} (${entry.providerId}): ${entry.credentialType}/${entry.source}${entry.stored ? " [stored]" : " [ambient]"}`);
-        }
-        return;
-    }
-    const providerId = args[1];
-    if (!providerId || providerId.startsWith("--"))
-        throw new Error("logout 需要安全的 provider ID");
-    await logoutBuiltinPiProvider({ agentId, providerId, env });
-    console.log(`Agent ${agentId} 已退出 ${providerId}；其他 provider 未修改`);
-}

package/dist/platform/process-boundary-trace.cjs

@@ -1,108 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.traceProcessBoundary = traceProcessBoundary;
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-function inspect(role, file) {
-    try {
-        const stat = node_fs_1.default.lstatSync(file);
-        return {
-            role,
-            exists: true,
-            regularFile: stat.isFile(),
-            directory: stat.isDirectory(),
-            symlink: stat.isSymbolicLink(),
-            mode: stat.mode & 0o777,
-        };
-    }
-    catch (error) {
-        const code = error.code;
-        return { role, exists: false, ...(code === "ELOOP" ? { symlink: true } : {}) };
-    }
-}
-function errorCategory(error) {
-    const code = error && typeof error === "object" && "code" in error
-        ? String(error.code || "") : "";
-    if (code === "ENOENT")
-        return "missing";
-    if (code === "EACCES" || code === "EPERM")
-        return "permission";
-    if (code === "ELOOP")
-        return "symlink";
-    if (code === "EEXIST")
-        return "conflict";
-    if (code === "EINVAL" || code === "EBADMSG" || code === "ERR_INVALID_ARG_VALUE")
-        return "invalid";
-    return "runtime";
-}
-function safePhase(value) {
-    const phase = typeof value === "string" ? value : "unknown";
-    return /^[a-z0-9:_-]{1,80}$/i.test(phase) ? phase : "unknown";
-}
-function safeEpoch(value) {
-    if (typeof value !== "string" && typeof value !== "number" && !(value instanceof Date))
-        return null;
-    const text = value instanceof Date ? value.toISOString() : String(value);
-    const time = Date.parse(text);
-    return Number.isFinite(time) ? new Date(time).toISOString() : null;
-}
-/**
- * Opt-in, content-free diagnostics for process-boundary startup investigations.
- * The trace intentionally emits roles and metadata only: never a cwd, home,
- * config/profile/target path, or exception text. Diagnostics are inert unless an
- * absolute 0600 destination is explicitly supplied by a test or operator.
- */
-function traceProcessBoundary(env, phase, fields = {}) {
-    const file = env.LARKIN_PROCESS_BOUNDARY_TRACE_FILE;
-    if (!file || !node_path_1.default.isAbsolute(file) || /[\0\r\n]/.test(file))
-        return;
-    try {
-        const configRoot = fields.configDir || env.LARKIN_CONFIG_DIR || env.LARKIN_HOME || null;
-        const record = {
-            at: new Date().toISOString(),
-            epoch: safeEpoch(fields.epoch ?? env.LARKIN_DAEMON_EPOCH ?? new Date().toISOString()),
-            pid: process.pid,
-            ppid: process.ppid,
-            phase: safePhase(phase),
-            configuredRoots: {
-                configDir: Boolean(env.LARKIN_CONFIG_DIR || fields.configDir),
-                larkinHome: Boolean(env.LARKIN_HOME),
-                piAgentDir: Boolean(env.PI_CODING_AGENT_DIR),
-            },
-            pathRoles: [
-                ...(configRoot ? [inspect("config-root", configRoot)] : []),
-                ...(fields.targetDir ? [inspect("provider-target", fields.targetDir)] : []),
-            ],
-        };
-        if (typeof fields.agentId === "string" && /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(fields.agentId))
-            record.agentId = fields.agentId;
-        if (Number.isInteger(fields.childPid) && Number(fields.childPid) > 0)
-            record.childPid = Number(fields.childPid);
-        if (typeof fields.distribution === "string" && /^(builtin|external)$/.test(fields.distribution))
-            record.distribution = fields.distribution;
-        if (typeof fields.requested === "string" && /^(builtin|external|migration|startup)$/.test(fields.requested))
-            record.requested = fields.requested;
-        if (typeof fields.targetDirExisted === "boolean")
-            record.targetDirExisted = fields.targetDirExisted;
-        if (fields.error !== undefined)
-            record.errorCategory = errorCategory(fields.error);
-        const bytes = Buffer.from(`${JSON.stringify(record)}\n`);
-        const fd = node_fs_1.default.openSync(file, node_fs_1.default.constants.O_WRONLY | node_fs_1.default.constants.O_APPEND | node_fs_1.default.constants.O_CREAT | (node_fs_1.default.constants.O_NOFOLLOW || 0), 0o600);
-        try {
-            const stat = node_fs_1.default.fstatSync(fd);
-            if (!stat.isFile() || (typeof process.getuid === "function" && stat.uid !== process.getuid()) || (stat.mode & 0o077) !== 0)
-                return;
-            node_fs_1.default.writeSync(fd, bytes);
-            node_fs_1.default.fchmodSync(fd, 0o600);
-        }
-        finally {
-            node_fs_1.default.closeSync(fd);
-        }
-    }
-    catch {
-        // Diagnostics must never alter startup behavior.
-    }
-}

package/dist/runtime/builtin-pi-assets.cjs

@@ -1,117 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.prepareBuiltinPiPackageAssets = prepareBuiltinPiPackageAssets;
-exports.piChildDistribution = piChildDistribution;
-exports.piChildDistributionFromOverrides = piChildDistributionFromOverrides;
-exports.resolveExternalPiPackageDir = resolveExternalPiPackageDir;
-exports.isLarkinBuiltinPiPackageDir = isLarkinBuiltinPiPackageDir;
-exports.catalogPiChildDistribution = catalogPiChildDistribution;
-exports.applyPiPackageDirForChild = applyPiPackageDirForChild;
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-function privateDirectory(directory) {
-    node_fs_1.default.mkdirSync(directory, { recursive: true, mode: 0o700 });
-    const stat = node_fs_1.default.lstatSync(directory);
-    if (!stat.isDirectory() || stat.isSymbolicLink())
-        throw new Error(`unsafe bundled Pi asset directory: ${directory}`);
-    node_fs_1.default.chmodSync(directory, 0o700);
-}
-function writeEmbeddedFile(file, contents) {
-    const temporary = `${file}.${process.pid}.${Math.random().toString(16).slice(2)}.tmp`;
-    node_fs_1.default.writeFileSync(temporary, contents, { mode: 0o600, flag: "wx" });
-    node_fs_1.default.renameSync(temporary, file);
-    node_fs_1.default.chmodSync(file, 0o600);
-}
-/** Materialize upstream runtime assets that Bun cannot serve through ordinary fs paths. */
-function prepareBuiltinPiPackageAssets() {
-    const assets = globalThis.__LARKIN_EMBEDDED_BUILTIN_PI_ASSETS__;
-    if (!assets)
-        return;
-    const agentDir = process.env.PI_CODING_AGENT_DIR;
-    if (!agentDir)
-        throw new Error("bundled Pi requires PI_CODING_AGENT_DIR");
-    privateDirectory(agentDir);
-    const packageDir = node_path_1.default.join(agentDir, ".larkin-official-pi-package");
-    const themeDir = node_path_1.default.join(packageDir, "theme");
-    privateDirectory(packageDir);
-    privateDirectory(themeDir);
-    writeEmbeddedFile(node_path_1.default.join(packageDir, "package.json"), assets.packageJson);
-    writeEmbeddedFile(node_path_1.default.join(themeDir, "dark.json"), assets.darkTheme);
-    writeEmbeddedFile(node_path_1.default.join(themeDir, "light.json"), assets.lightTheme);
-    process.env.PI_PACKAGE_DIR = packageDir;
-}
-function piChildDistribution(env) {
-    return env?.LARKIN_PI_DISTRIBUTION === "builtin" ? "builtin" : "external";
-}
-/** Host process env may be builtin Pi; only explicit child overrides select bundled assets. */
-function piChildDistributionFromOverrides(...overrides) {
-    for (let index = overrides.length - 1; index >= 0; index -= 1) {
-        const value = overrides[index]?.LARKIN_PI_DISTRIBUTION;
-        if (value === "builtin" || value === "external")
-            return value;
-    }
-    return "external";
-}
-function existingPiThemeFile(directory) {
-    const theme = node_path_1.default.join(directory, "dist", "modes", "interactive", "theme", "dark.json");
-    let fd;
-    try {
-        fd = node_fs_1.default.openSync(theme, node_fs_1.default.constants.O_RDONLY);
-        return node_fs_1.default.fstatSync(fd).isFile() ? theme : undefined;
-    }
-    catch {
-        return undefined;
-    }
-    finally {
-        if (fd !== undefined) {
-            try {
-                node_fs_1.default.closeSync(fd);
-            }
-            catch { /* already closed or unreadable */ }
-        }
-    }
-}
-function resolveExternalPiPackageDir(directory) {
-    if (!directory?.trim())
-        return undefined;
-    try {
-        const resolved = node_fs_1.default.realpathSync(directory);
-        return existingPiThemeFile(resolved) ? resolved : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function isLarkinBuiltinPiPackageDir(directory) {
-    if (!directory)
-        return false;
-    try {
-        const resolved = node_fs_1.default.realpathSync(directory);
-        if (node_path_1.default.basename(resolved).toLowerCase() !== ".larkin-official-pi-package")
-            return false;
-        return !existingPiThemeFile(resolved);
-    }
-    catch {
-        return node_path_1.default.basename(directory).toLowerCase() === ".larkin-official-pi-package";
-    }
-}
-function catalogPiChildDistribution(commandArgs) {
-    return commandArgs?.includes("pi-rpc") ? "builtin" : "external";
-}
-/** External/npm Pi resolves PI_PACKAGE_DIR as a Node package root and looks for dist/themes. */
-function applyPiPackageDirForChild(env, distribution = piChildDistribution(env)) {
-    const options = typeof distribution === "string" ? { distribution } : distribution;
-    const resolved = options.distribution ?? piChildDistribution(env);
-    const next = { ...env };
-    if (resolved === "builtin")
-        return next;
-    const kept = resolveExternalPiPackageDir(options.explicitPackageDir) ?? resolveExternalPiPackageDir(next.PI_PACKAGE_DIR);
-    if (kept)
-        next.PI_PACKAGE_DIR = kept;
-    else
-        delete next.PI_PACKAGE_DIR;
-    return next;
-}

package/dist/runtime/builtin-pi-assets.mjs

@@ -1,105 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-function privateDirectory(directory) {
-    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
-    const stat = fs.lstatSync(directory);
-    if (!stat.isDirectory() || stat.isSymbolicLink())
-        throw new Error(`unsafe bundled Pi asset directory: ${directory}`);
-    fs.chmodSync(directory, 0o700);
-}
-function writeEmbeddedFile(file, contents) {
-    const temporary = `${file}.${process.pid}.${Math.random().toString(16).slice(2)}.tmp`;
-    fs.writeFileSync(temporary, contents, { mode: 0o600, flag: "wx" });
-    fs.renameSync(temporary, file);
-    fs.chmodSync(file, 0o600);
-}
-/** Materialize upstream runtime assets that Bun cannot serve through ordinary fs paths. */
-export function prepareBuiltinPiPackageAssets() {
-    const assets = globalThis.__LARKIN_EMBEDDED_BUILTIN_PI_ASSETS__;
-    if (!assets)
-        return;
-    const agentDir = process.env.PI_CODING_AGENT_DIR;
-    if (!agentDir)
-        throw new Error("bundled Pi requires PI_CODING_AGENT_DIR");
-    privateDirectory(agentDir);
-    const packageDir = path.join(agentDir, ".larkin-official-pi-package");
-    const themeDir = path.join(packageDir, "theme");
-    privateDirectory(packageDir);
-    privateDirectory(themeDir);
-    writeEmbeddedFile(path.join(packageDir, "package.json"), assets.packageJson);
-    writeEmbeddedFile(path.join(themeDir, "dark.json"), assets.darkTheme);
-    writeEmbeddedFile(path.join(themeDir, "light.json"), assets.lightTheme);
-    process.env.PI_PACKAGE_DIR = packageDir;
-}
-export function piChildDistribution(env) {
-    return env?.LARKIN_PI_DISTRIBUTION === "builtin" ? "builtin" : "external";
-}
-/** Host process env may be builtin Pi; only explicit child overrides select bundled assets. */
-export function piChildDistributionFromOverrides(...overrides) {
-    for (let index = overrides.length - 1; index >= 0; index -= 1) {
-        const value = overrides[index]?.LARKIN_PI_DISTRIBUTION;
-        if (value === "builtin" || value === "external")
-            return value;
-    }
-    return "external";
-}
-function existingPiThemeFile(directory) {
-    const theme = path.join(directory, "dist", "modes", "interactive", "theme", "dark.json");
-    let fd;
-    try {
-        fd = fs.openSync(theme, fs.constants.O_RDONLY);
-        return fs.fstatSync(fd).isFile() ? theme : undefined;
-    }
-    catch {
-        return undefined;
-    }
-    finally {
-        if (fd !== undefined) {
-            try {
-                fs.closeSync(fd);
-            }
-            catch { /* already closed or unreadable */ }
-        }
-    }
-}
-export function resolveExternalPiPackageDir(directory) {
-    if (!directory?.trim())
-        return undefined;
-    try {
-        const resolved = fs.realpathSync(directory);
-        return existingPiThemeFile(resolved) ? resolved : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-export function isLarkinBuiltinPiPackageDir(directory) {
-    if (!directory)
-        return false;
-    try {
-        const resolved = fs.realpathSync(directory);
-        if (path.basename(resolved).toLowerCase() !== ".larkin-official-pi-package")
-            return false;
-        return !existingPiThemeFile(resolved);
-    }
-    catch {
-        return path.basename(directory).toLowerCase() === ".larkin-official-pi-package";
-    }
-}
-export function catalogPiChildDistribution(commandArgs) {
-    return commandArgs?.includes("pi-rpc") ? "builtin" : "external";
-}
-/** External/npm Pi resolves PI_PACKAGE_DIR as a Node package root and looks for dist/themes. */
-export function applyPiPackageDirForChild(env, distribution = piChildDistribution(env)) {
-    const options = typeof distribution === "string" ? { distribution } : distribution;
-    const resolved = options.distribution ?? piChildDistribution(env);
-    const next = { ...env };
-    if (resolved === "builtin")
-        return next;
-    const kept = resolveExternalPiPackageDir(options.explicitPackageDir) ?? resolveExternalPiPackageDir(next.PI_PACKAGE_DIR);
-    if (kept)
-        next.PI_PACKAGE_DIR = kept;
-    else
-        delete next.PI_PACKAGE_DIR;
-    return next;
-}