larkin 0.4.29 → 0.5.1

package/dist/runtime/pi-artifact-provenance.cjs

@@ -1,147 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PI_RUNTIME_ARTIFACT_NAMES = exports.PI_RUNTIME_ARTIFACT_MANIFEST = void 0;
-exports.recordPiRuntimeArtifactProvenance = recordPiRuntimeArtifactProvenance;
-exports.attestedPiRuntimeArtifactNames = attestedPiRuntimeArtifactNames;
-const node_crypto_1 = __importDefault(require("node:crypto"));
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-const secure_metadata_js_1 = require("../platform/secure-metadata.cjs");
-exports.PI_RUNTIME_ARTIFACT_MANIFEST = ".larkin-pi-owned-artifacts.json";
-exports.PI_RUNTIME_ARTIFACT_NAMES = [".larkin-official-pi-package", "models-store.json", "npm"];
-const MAX_FILE_BYTES = 256 * 1024 * 1024;
-const MAX_ENTRIES = 4096;
-function digest(value) {
-    return node_crypto_1.default.createHash("sha256").update(value).digest("hex");
-}
-function assertSafeEntry(file, label) {
-    const stat = node_fs_1.default.lstatSync(file);
-    if (stat.isSymbolicLink())
-        throw new Error(`${label} must not be a symlink`);
-    if (typeof process.getuid === "function" && stat.uid !== process.getuid())
-        throw new Error(`${label} owner is unsafe`);
-    return stat;
-}
-function identity(file, label) {
-    const stat = assertSafeEntry(file, label);
-    const mode = stat.mode & 0o777;
-    if (stat.isFile()) {
-        if (stat.size > MAX_FILE_BYTES)
-            throw new Error(`${label} is too large`);
-        const bytes = node_fs_1.default.readFileSync(file);
-        return { kind: "file", mode, device: String(stat.dev), inode: String(stat.ino), bytes: bytes.length, digest: digest(bytes) };
-    }
-    if (!stat.isDirectory())
-        throw new Error(`${label} has an unsupported type`);
-    const entries = node_fs_1.default.readdirSync(file).sort();
-    if (entries.length > MAX_ENTRIES)
-        throw new Error(`${label} has too many entries`);
-    const children = entries.map((name) => {
-        if (name === "." || name === ".." || name.includes("/"))
-            throw new Error(`${label} contains an unsafe entry`);
-        const child = identity(node_path_1.default.join(file, name), `${label} child`);
-        return [name, child.kind, child.mode, child.device, child.inode, child.bytes, child.digest];
-    });
-    return {
-        kind: "directory", mode, device: String(stat.dev), inode: String(stat.ino),
-        bytes: children.reduce((sum, child) => sum + Number(child[5]), 0), digest: digest(JSON.stringify(children)),
-    };
-}
-function sameIdentity(actual, expected) {
-    return actual.kind === expected.kind && actual.mode === expected.mode
-        && actual.device === expected.device && actual.inode === expected.inode
-        && actual.bytes === expected.bytes && actual.digest === expected.digest;
-}
-function readManifest(file) {
-    try {
-        const stat = assertSafeEntry(file, "Pi artifact provenance manifest");
-        if (!stat.isFile() || !(0, secure_metadata_js_1.exactMode)(stat, 0o600) || stat.size > 1024 * 1024)
-            throw new Error("Pi artifact provenance manifest is unsafe");
-        const value = JSON.parse(node_fs_1.default.readFileSync(file, "utf8"));
-        if (value?.version !== 1 || value.owner !== "larkin-builtin-pi" || !value.directory || !value.artifacts)
-            throw new Error("Pi artifact provenance manifest is invalid");
-        return value;
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return null;
-        throw error;
-    }
-}
-function writeManifest(file, value) {
-    const temp = `${file}.tmp-${process.pid}`;
-    const fd = node_fs_1.default.openSync(temp, "wx", 0o600);
-    try {
-        node_fs_1.default.writeFileSync(fd, `${JSON.stringify(value, null, 2)}\n`);
-        node_fs_1.default.fsyncSync(fd);
-    }
-    finally {
-        node_fs_1.default.closeSync(fd);
-    }
-    node_fs_1.default.renameSync(temp, file);
-}
-/** Record only allowed entries that were absent at the runtime spawn boundary. */
-function recordPiRuntimeArtifactProvenance(targetDir, beforeEntries, boundaryAt = Date.now()) {
-    const target = assertSafeEntry(targetDir, "Pi provider target");
-    if (!target.isDirectory() || !(0, secure_metadata_js_1.exactMode)(target, 0o700))
-        throw new Error("Pi provider target is unsafe");
-    const manifestFile = node_path_1.default.join(targetDir, exports.PI_RUNTIME_ARTIFACT_MANIFEST);
-    const existing = readManifest(manifestFile);
-    const manifest = existing ?? {
-        version: 1, owner: "larkin-builtin-pi", directory: { device: String(target.dev), inode: String(target.ino) },
-        recordedAt: new Date(boundaryAt).toISOString(), artifacts: {},
-    };
-    if (manifest.directory.device !== String(target.dev) || manifest.directory.inode !== String(target.ino))
-        throw new Error("Pi artifact provenance target identity changed");
-    let changed = false;
-    for (const [name, expected] of Object.entries(manifest.artifacts)) {
-        if (!exports.PI_RUNTIME_ARTIFACT_NAMES.includes(name) || name.includes("/") || !expected)
-            throw new Error("Pi artifact provenance entry is invalid");
-        const actual = identity(node_path_1.default.join(targetDir, name), `Pi artifact ${name}`);
-        const sameOwner = actual.kind === expected.kind && actual.mode === expected.mode
-            && actual.device === expected.device && actual.inode === expected.inode;
-        if (!sameOwner)
-            throw new Error(`Pi artifact ${name} provenance identity changed`);
-        if (!sameIdentity(actual, expected)) {
-            manifest.artifacts[name] = actual;
-            changed = true;
-        }
-    }
-    for (const name of exports.PI_RUNTIME_ARTIFACT_NAMES) {
-        if (beforeEntries.has(name) || manifest.artifacts[name])
-            continue;
-        const file = node_path_1.default.join(targetDir, name);
-        if (!node_fs_1.default.existsSync(file))
-            continue;
-        const actual = identity(file, `Pi artifact ${name}`);
-        const stat = node_fs_1.default.lstatSync(file);
-        if (stat.birthtimeMs + 1 < boundaryAt && stat.mtimeMs + 1 < boundaryAt)
-            throw new Error(`Pi artifact ${name} predates runtime provenance boundary`);
-        manifest.artifacts[name] = actual;
-        changed = true;
-    }
-    if (changed)
-        writeManifest(manifestFile, manifest);
-}
-/** Return the names that are both explicitly attested and unchanged. */
-function attestedPiRuntimeArtifactNames(targetDir) {
-    const target = assertSafeEntry(targetDir, "Pi provider target");
-    if (!target.isDirectory())
-        throw new Error("Pi provider target is unsafe");
-    const manifest = readManifest(node_path_1.default.join(targetDir, exports.PI_RUNTIME_ARTIFACT_MANIFEST));
-    if (!manifest || manifest.directory.device !== String(target.dev) || manifest.directory.inode !== String(target.ino))
-        return new Set();
-    const names = new Set();
-    for (const [name, expected] of Object.entries(manifest.artifacts)) {
-        if (!exports.PI_RUNTIME_ARTIFACT_NAMES.includes(name) || !expected)
-            continue;
-        const actual = identity(node_path_1.default.join(targetDir, name), `Pi artifact ${name}`);
-        if (!sameIdentity(actual, expected))
-            throw new Error(`Pi artifact ${name} provenance changed`);
-        names.add(name);
-    }
-    return names;
-}

package/dist/runtime/pi-distribution-label.cjs

@@ -1,6 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.piDistributionLabel = piDistributionLabel;
-function piDistributionLabel(distribution) {
-    return distribution === "builtin" ? "内置 Pi" : "用户安装的 Pi";
-}

package/dist/runtime/pi-distribution-label.mjs

@@ -1,3 +0,0 @@
-export function piDistributionLabel(distribution) {
-    return distribution === "builtin" ? "内置 Pi" : "用户安装的 Pi";
-}

package/dist/runtime/pi-inline-extensions.mjs

@@ -1,78 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { pathToFileURL } from "node:url";
-import bashTimeoutExtension from "./pi-bash-timeout-extension.mjs";
-import { bundledPiSubagentExtensionPath, materializeEmbeddedPiSubagentBundle } from "./pi-subagent-injection.mjs";
-import piSubagentRecordWatchdog from "./pi-subagent-record-watchdog.mjs";
-/**
- * Load the prebuilt, patched subagent bundle shipped in dist/ rather than the
- * package-manager copy. Standalone binaries additionally load the patched
- * package through Bun's compiled module graph, while normal package installs
- * continue to use the prebuilt patched bundle.
- */
-async function loadBundledPiSubagentExtension() {
-    // Compiled standalone already has the patched package in Bun's module graph.
-    // The materialized sibling bundle externalizes @earendil-works/pi-coding-agent
-    // and cannot be imported from LARKIN_CONFIG_DIR.
-    const compiled = globalThis.__LARKIN_COMPILED_PI_SUBAGENTS__;
-    if (compiled) {
-        if (typeof compiled !== "function" && typeof compiled.factory !== "function") {
-            throw new Error("Larkin compiled pi-subagents factory is missing; refusing to start builtin Pi");
-        }
-        return compiled;
-    }
-    const bundle = bundledPiSubagentExtensionPath(process.env.LARKIN_CONFIG_DIR);
-    if (!bundle)
-        throw new Error("Larkin bounded pi-subagents bundle is unavailable; refusing to start builtin Pi");
-    const loaded = await import(pathToFileURL(bundle).href);
-    if (!loaded.default)
-        throw new Error("Larkin bounded pi-subagents bundle is invalid; refusing to start builtin Pi");
-    return loaded.default;
-}
-function asFn(mod, name) {
-    if (typeof mod === "function")
-        return mod;
-    const fallback = mod?.default;
-    if (typeof fallback === "function")
-        return fallback;
-    throw new Error(`${name} extension factory is missing`);
-}
-function wrapFactory(name, factory) {
-    return async (pi) => {
-        try {
-            await factory(pi);
-        }
-        catch (error) {
-            throw error instanceof Error ? error : new Error(`${name}: ${String(error)}`);
-        }
-    };
-}
-/** Builtin Pi extensions are loaded as code, never through Pi's path/data-URL loader. */
-const bundledSubagentsExtension = async (pi) => {
-    const extension = await loadBundledPiSubagentExtension();
-    if (typeof extension === "function")
-        await extension(pi);
-    else
-        await extension.factory(pi);
-};
-// Watchdog must register session_shutdown before the bundled subagent extension
-// so the final sweep can still read AgentManager.getRecord and bridge consumed
-// terminals before manager teardown.
-export const BUILTIN_PI_EXTENSION_FACTORIES = Object.freeze([
-    wrapFactory("larkin-pi-subagent-watchdog", asFn(piSubagentRecordWatchdog, "larkin-pi-subagent-watchdog")),
-    wrapFactory("larkin-pi-subagents", bundledSubagentsExtension),
-    wrapFactory("larkin-pi-bash-timeout", asFn(bashTimeoutExtension, "larkin-pi-bash-timeout")),
-]);
-/** Invoke Pi RPC with Larkin's builtin-only extension factories. */
-export async function invokeBuiltinPiRpc(piMain, rest) {
-    if (globalThis.__LARKIN_EMBEDDED_PI_SUBAGENTS_BUNDLE__ && process.env.LARKIN_CONFIG_DIR) {
-        const materialized = materializeEmbeddedPiSubagentBundle(process.env.LARKIN_CONFIG_DIR);
-        if (!materialized)
-            throw new Error("standalone pi-subagents bundle failed to materialize");
-        const supervised = path.join(path.dirname(materialized), "pi-supervised-command.bundle.js");
-        process.env.LARKIN_PI_SUPERVISED_BUNDLE = fs.realpathSync(supervised);
-    }
-    await piMain(["--mode", "rpc", ...rest], {
-        extensionFactories: [...BUILTIN_PI_EXTENSION_FACTORIES],
-    });
-}