larkin 0.5.1 → 0.5.3

package/dist/runtime/runtime-readiness.cjs

@@ -237,6 +237,8 @@ function executableVersion(executable, env, commandArgs = []) {
 /** Resolve and handshake through each runtime's structured native control protocol. */
 async function probeNativeRuntimeReadiness(options) {
     const env = { ...process.env, ...options.env };
+    if (options.runtime === "pi")
+        delete env.PI_CODING_AGENT_DIR;
     const command = selectedCommand(options);
     const executable = resolveRuntimeExecutable(command, env);
     if (!executable) {

package/dist/runtime/runtime-readiness.mjs

@@ -184,6 +184,8 @@ function executableVersion(executable, env, commandArgs = []) {
 /** Resolve and handshake through each runtime's structured native control protocol. */
 export async function probeNativeRuntimeReadiness(options) {
     const env = { ...process.env, ...options.env };
+    if (options.runtime === "pi")
+        delete env.PI_CODING_AGENT_DIR;
     const command = selectedCommand(options);
     const executable = resolveRuntimeExecutable(command, env);
     if (!executable) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkin",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "private": false,
   "larkinPackageRole": "npm-published",
   "files": [

package/dist/runtime/pi-artifact-provenance.mjs

@@ -1,139 +0,0 @@
-import crypto from "node:crypto";
-import fs from "node:fs";
-import path from "node:path";
-import { exactMode } from "../platform/secure-metadata.mjs";
-export const PI_RUNTIME_ARTIFACT_MANIFEST = ".larkin-pi-owned-artifacts.json";
-export const PI_RUNTIME_ARTIFACT_NAMES = ["models-store.json", "npm"];
-const MAX_FILE_BYTES = 256 * 1024 * 1024;
-const MAX_ENTRIES = 4096;
-function digest(value) {
-    return crypto.createHash("sha256").update(value).digest("hex");
-}
-function assertSafeEntry(file, label) {
-    const stat = fs.lstatSync(file);
-    if (stat.isSymbolicLink())
-        throw new Error(`${label} must not be a symlink`);
-    if (typeof process.getuid === "function" && stat.uid !== process.getuid())
-        throw new Error(`${label} owner is unsafe`);
-    return stat;
-}
-function identity(file, label) {
-    const stat = assertSafeEntry(file, label);
-    const mode = stat.mode & 0o777;
-    if (stat.isFile()) {
-        if (stat.size > MAX_FILE_BYTES)
-            throw new Error(`${label} is too large`);
-        const bytes = fs.readFileSync(file);
-        return { kind: "file", mode, device: String(stat.dev), inode: String(stat.ino), bytes: bytes.length, digest: digest(bytes) };
-    }
-    if (!stat.isDirectory())
-        throw new Error(`${label} has an unsupported type`);
-    const entries = fs.readdirSync(file).sort();
-    if (entries.length > MAX_ENTRIES)
-        throw new Error(`${label} has too many entries`);
-    const children = entries.map((name) => {
-        if (name === "." || name === ".." || name.includes("/"))
-            throw new Error(`${label} contains an unsafe entry`);
-        const child = identity(path.join(file, name), `${label} child`);
-        return [name, child.kind, child.mode, child.device, child.inode, child.bytes, child.digest];
-    });
-    return {
-        kind: "directory", mode, device: String(stat.dev), inode: String(stat.ino),
-        bytes: children.reduce((sum, child) => sum + Number(child[5]), 0), digest: digest(JSON.stringify(children)),
-    };
-}
-function sameIdentity(actual, expected) {
-    return actual.kind === expected.kind && actual.mode === expected.mode
-        && actual.device === expected.device && actual.inode === expected.inode
-        && actual.bytes === expected.bytes && actual.digest === expected.digest;
-}
-function readManifest(file) {
-    try {
-        const stat = assertSafeEntry(file, "Pi artifact provenance manifest");
-        if (!stat.isFile() || !exactMode(stat, 0o600) || stat.size > 1024 * 1024)
-            throw new Error("Pi artifact provenance manifest is unsafe");
-        const value = JSON.parse(fs.readFileSync(file, "utf8"));
-        if (value?.version !== 1 || (value.owner !== "larkin-pi" && value.owner !== "larkin-builtin-pi") || !value.directory || !value.artifacts)
-            throw new Error("Pi artifact provenance manifest is invalid");
-        return value;
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return null;
-        throw error;
-    }
-}
-function writeManifest(file, value) {
-    const temp = `${file}.tmp-${process.pid}`;
-    const fd = fs.openSync(temp, "wx", 0o600);
-    try {
-        fs.writeFileSync(fd, `${JSON.stringify(value, null, 2)}\n`);
-        fs.fsyncSync(fd);
-    }
-    finally {
-        fs.closeSync(fd);
-    }
-    fs.renameSync(temp, file);
-}
-/** Record only allowed entries that were absent at the runtime spawn boundary. */
-export function recordPiRuntimeArtifactProvenance(targetDir, beforeEntries, boundaryAt = Date.now()) {
-    const target = assertSafeEntry(targetDir, "Pi provider target");
-    if (!target.isDirectory() || !exactMode(target, 0o700))
-        throw new Error("Pi provider target is unsafe");
-    const manifestFile = path.join(targetDir, PI_RUNTIME_ARTIFACT_MANIFEST);
-    const existing = readManifest(manifestFile);
-    const manifest = existing ?? {
-        version: 1, owner: "larkin-pi", directory: { device: String(target.dev), inode: String(target.ino) },
-        recordedAt: new Date(boundaryAt).toISOString(), artifacts: {},
-    };
-    if (manifest.directory.device !== String(target.dev) || manifest.directory.inode !== String(target.ino))
-        throw new Error("Pi artifact provenance target identity changed");
-    let changed = false;
-    for (const [name, expected] of Object.entries(manifest.artifacts)) {
-        if (!PI_RUNTIME_ARTIFACT_NAMES.includes(name) || name.includes("/") || !expected)
-            throw new Error("Pi artifact provenance entry is invalid");
-        const actual = identity(path.join(targetDir, name), `Pi artifact ${name}`);
-        const sameOwner = actual.kind === expected.kind && actual.mode === expected.mode
-            && actual.device === expected.device && actual.inode === expected.inode;
-        if (!sameOwner)
-            throw new Error(`Pi artifact ${name} provenance identity changed`);
-        if (!sameIdentity(actual, expected)) {
-            manifest.artifacts[name] = actual;
-            changed = true;
-        }
-    }
-    for (const name of PI_RUNTIME_ARTIFACT_NAMES) {
-        if (beforeEntries.has(name) || manifest.artifacts[name])
-            continue;
-        const file = path.join(targetDir, name);
-        if (!fs.existsSync(file))
-            continue;
-        const actual = identity(file, `Pi artifact ${name}`);
-        const stat = fs.lstatSync(file);
-        if (stat.birthtimeMs + 1 < boundaryAt && stat.mtimeMs + 1 < boundaryAt)
-            throw new Error(`Pi artifact ${name} predates runtime provenance boundary`);
-        manifest.artifacts[name] = actual;
-        changed = true;
-    }
-    if (changed)
-        writeManifest(manifestFile, manifest);
-}
-/** Return the names that are both explicitly attested and unchanged. */
-export function attestedPiRuntimeArtifactNames(targetDir) {
-    const target = assertSafeEntry(targetDir, "Pi provider target");
-    if (!target.isDirectory())
-        throw new Error("Pi provider target is unsafe");
-    const manifest = readManifest(path.join(targetDir, PI_RUNTIME_ARTIFACT_MANIFEST));
-    if (!manifest || manifest.directory.device !== String(target.dev) || manifest.directory.inode !== String(target.ino))
-        return new Set();
-    const names = new Set();
-    for (const [name, expected] of Object.entries(manifest.artifacts)) {
-        if (!PI_RUNTIME_ARTIFACT_NAMES.includes(name) || !expected)
-            continue;
-        const actual = identity(path.join(targetDir, name), `Pi artifact ${name}`);
-        if (!sameIdentity(actual, expected))
-            throw new Error(`Pi artifact ${name} provenance changed`);
-        names.add(name);
-    }
-    return names;
-}