fix(pi-workflow): suppress verification bytecode

extensions/pi-workflow/workspace.test.ts

@@ -1,6 +1,7 @@
 import assert from "node:assert/strict";
 import { execFile } from "node:child_process";
 import {
+  access,
   mkdir,
   mkdtemp,
   readFile,
@@ -267,6 +268,16 @@ test("Git probe and approved host commands enforce identity and ownership", asyn
       'require("node:fs").writeFileSync(process.argv[2], "after\\n")',
       "utf8",
     );
+    await writeFile(
+      path.join(directory, "src", "bytecode_module.py"),
+      "VALUE = 1\n",
+      "utf8",
+    );
+    await writeFile(
+      path.join(directory, "src", "check_bytecode.py"),
+      "import bytecode_module\nassert bytecode_module.VALUE == 1\n",
+      "utf8",
+    );
     await execFileAsync("git", ["-C", directory, "add", "."]);
     await execFileAsync("git", ["-C", directory, "commit", "-qm", "initial"]);
     const probe = new GitStateProbe();
@@ -281,6 +292,17 @@ test("Git probe and approved host commands enforce identity and ownership", asyn
     });
     assert.equal(allowed.result.code, 0);
     assert.deepEqual(allowed.after.changedPaths, ["src/file.ts"]);
+    const bytecodeDisabled = await executor.run({
+      worktreeRoot: directory,
+      ownedPaths: ["src"],
+      executable: "python3",
+      args: ["src/check_bytecode.py"],
+    });
+    assert.equal(bytecodeDisabled.result.code, 0);
+    await assert.rejects(
+      access(path.join(directory, "src", "__pycache__")),
+      /ENOENT/,
+    );
     await assert.rejects(
       executor.run({
         worktreeRoot: directory,

extensions/pi-workflow/workspace.ts

@@ -23,8 +23,17 @@ export interface CommandResult {
   stderr: string;
 }
 
+export interface CommandRunOptions {
+  env?: NodeJS.ProcessEnv;
+}
+
 export interface CommandRunner {
-  run(cwd: string, executable: string, args: string[]): Promise<CommandResult>;
+  run(
+    cwd: string,
+    executable: string,
+    args: string[],
+    options?: CommandRunOptions,
+  ): Promise<CommandResult>;
 }
 
 export class WorkspaceSafetyError extends Error {
@@ -546,6 +555,12 @@ export class ApprovedHostCommandExecutor {
       root,
       options.executable,
       [...options.args],
+      {
+        env: {
+          ...process.env,
+          PYTHONDONTWRITEBYTECODE: "1",
+        },
+      },
     );
     try {
       const afterRepository = await this.probe.captureRepository(root);
@@ -790,12 +805,18 @@ export class WorkspaceValidationError extends Error {
 }
 
 export class ExecFileCommandRunner implements CommandRunner {
-  async run(cwd: string, executable: string, args: string[]) {
+  async run(
+    cwd: string,
+    executable: string,
+    args: string[],
+    options: CommandRunOptions = {},
+  ) {
     try {
       const result = await execFileAsync(executable, args, {
         cwd,
         encoding: "utf8",
         maxBuffer: 4 * 1024 * 1024,
+        env: options.env,
       });
       return { code: 0, stdout: result.stdout, stderr: result.stderr };
     } catch (error) {