spawnfile 0.1.13 → 0.1.17

package/dist/shared/daimonCodexDocker.js

@@ -0,0 +1,120 @@
+import { createHash } from "node:crypto";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { DAIMON_GROK_SECCOMP_PROFILE_BYTES, DAIMON_GROK_SECCOMP_PROFILE_FILE_NAME, DAIMON_GROK_SECCOMP_PROFILE_SHA256 } from "./daimonGrokSeccompProfile.js";
+import { SpawnfileError } from "./errors.js";
+export const DAIMON_DOCKER_RUNTIME_SECURITY_ARGS = [
+    "--cap-drop=ALL",
+    "--cap-add=CHOWN",
+    "--cap-add=SETUID",
+    "--cap-add=SETGID",
+    "--cap-add=DAC_READ_SEARCH",
+    // Lets the broker launcher drop its bounding set to 00000000000000c1; without SETPCAP, setpriv --bounding-set silently no-ops.
+    "--cap-add=SETPCAP",
+    // The entrypoint supervises children dropped to uid 2100/2200+; without CAP_KILL, root cannot even kill -0 them, so a live child reads as dead.
+    "--cap-add=KILL",
+    "--security-opt=no-new-privileges:true"
+];
+export const DAIMON_CODEX_NATIVE_SANDBOX_DOCKER_SECURITY_OPTS = [
+    "--security-opt=seccomp=unconfined",
+    "--security-opt=apparmor=unconfined"
+];
+const DAIMON_CONFIG_VERSIONS = [
+    "noopolis.daimon.organization-runtime.v1",
+    "noopolis.daimon.organization-runtime.v2"
+];
+const DAIMON_CODEX_STRICT_SANDBOX = {
+    mode: "workspace-write",
+    networkAccess: false,
+    webSearch: "disabled"
+};
+const isRecord = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+const hasExactCodexStrictSandbox = (engine) => {
+    const sandbox = engine.codexSandbox;
+    if (sandbox === undefined)
+        return false;
+    if (!isRecord(sandbox)) {
+        throw new SpawnfileError("validation_error", "Daimon Codex sandbox policy has an invalid shape");
+    }
+    const expected = DAIMON_CODEX_STRICT_SANDBOX;
+    const keys = Object.keys(sandbox).sort();
+    const expectedKeys = Object.keys(expected).sort();
+    if (keys.length !== expectedKeys.length ||
+        keys.some((key, index) => key !== expectedKeys[index] || sandbox[key] !== expected[key])) {
+        throw new SpawnfileError("validation_error", "Daimon Codex sandbox policy is not the supported strict workspace-no-network policy");
+    }
+    return true;
+};
+export const resolveDaimonEngineDockerInterop = (source) => {
+    let parsed;
+    try {
+        parsed = JSON.parse(source);
+    }
+    catch {
+        throw new SpawnfileError("validation_error", "Daimon generated organization config is not JSON");
+    }
+    if (!isRecord(parsed) || !Array.isArray(parsed.agents)) {
+        throw new SpawnfileError("validation_error", "Daimon generated organization config has an invalid shape");
+    }
+    if (!DAIMON_CONFIG_VERSIONS.includes(parsed.version)) {
+        throw new SpawnfileError("validation_error", "Daimon generated organization config is not a supported v1/v2 contract");
+    }
+    const interop = { codex: false, grok: false };
+    for (const agent of parsed.agents) {
+        if (!isRecord(agent) || !isRecord(agent.engine)) {
+            throw new SpawnfileError("validation_error", "Daimon generated organization config has an invalid agent engine");
+        }
+        const kind = agent.engine.kind;
+        if (kind !== "agy" && kind !== "codex" && kind !== "grok") {
+            throw new SpawnfileError("validation_error", "Daimon generated organization config has an unsupported agent engine");
+        }
+        if (kind === "codex" && hasExactCodexStrictSandbox(agent.engine))
+            interop.codex = true;
+        if (kind === "grok")
+            interop.grok = true;
+    }
+    return interop;
+};
+export const configRequiresCodexNativeSandboxDockerInterop = (source) => resolveDaimonEngineDockerInterop(source).codex;
+export const DAIMON_GROK_HOST_USERNS_PREREQUISITE = "kernel.apparmor_restrict_unprivileged_userns=0";
+/**
+ * Writes the pinned Grok seccomp profile into `directory` (content-addressed,
+ * verified after writing) and returns its absolute path. Docker reads a
+ * `seccomp=<file>` option on the client at `docker run` and stores the profile
+ * in the container config, so the file only has to exist for that call.
+ */
+export const materializeDaimonGrokSeccompProfile = async (directory) => {
+    const target = path.resolve(directory, `${DAIMON_GROK_SECCOMP_PROFILE_SHA256.slice(0, 16)}-${DAIMON_GROK_SECCOMP_PROFILE_FILE_NAME}`);
+    await mkdir(path.dirname(target), { recursive: true });
+    await writeFile(target, DAIMON_GROK_SECCOMP_PROFILE_BYTES, { mode: 0o644 });
+    const written = await readFile(target);
+    if (createHash("sha256").update(written).digest("hex") !== DAIMON_GROK_SECCOMP_PROFILE_SHA256) {
+        throw new SpawnfileError("runtime_error", "Pinned Grok seccomp profile did not materialize byte-for-byte");
+    }
+    return target;
+};
+/**
+ * Docker security options for a Daimon container, by the engines its configs run.
+ *
+ * Codex's strict native sandbox needs seccomp and AppArmor fully unconfined, and
+ * that superset also lets Grok's bubblewrap run, so it wins whenever a strict
+ * Codex agent is present. Otherwise a Grok agent gets Docker's default seccomp
+ * profile plus bubblewrap's seven namespace syscalls (pinned bytes) and AppArmor
+ * unconfined — the narrowest combination under which Grok 1.0.34 starts. Grok
+ * additionally needs the Docker host to allow unprivileged user namespaces
+ * (`kernel.apparmor_restrict_unprivileged_userns=0`); the container entrypoint
+ * checks that before the broker starts.
+ */
+export const daimonEngineDockerSecurityArgsForConfigs = (sources, grokSeccompProfilePath) => {
+    const interop = sources.map(resolveDaimonEngineDockerInterop);
+    if (interop.some((entry) => entry.codex))
+        return Promise.resolve([...DAIMON_CODEX_NATIVE_SANDBOX_DOCKER_SECURITY_OPTS]);
+    if (!interop.some((entry) => entry.grok))
+        return Promise.resolve([]);
+    return grokSeccompProfilePath().then((profilePath) => {
+        if (!path.isAbsolute(profilePath))
+            throw new SpawnfileError("runtime_error", "Grok seccomp profile path must be absolute");
+        return [`--security-opt=seccomp=${profilePath}`, "--security-opt=apparmor=unconfined"];
+    });
+};
+export const codexNativeSandboxDockerSecurityArgsForConfigs = (sources) => sources.some(configRequiresCodexNativeSandboxDockerInterop) ? [...DAIMON_CODEX_NATIVE_SANDBOX_DOCKER_SECURITY_OPTS] : [];

package/dist/shared/daimonGrokSeccompProfile.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Docker's default seccomp profile plus the seven namespace syscalls bubblewrap
+ * needs without CAP_SYS_ADMIN (clone, clone3, unshare, mount, umount2, pivot_root,
+ * setns): the narrowest profile under which Grok 1.0.34's sandbox starts
+ * (Noopolis P0 container evidence, 2026-09-17). Bytes are pinned by sha256; Daimon's
+ * Grok broker projection and slot preflight receipt bind the same digest.
+ */
+export declare const DAIMON_GROK_SECCOMP_PROFILE_FILE_NAME: "seccomp-default-plus-userns.json";
+export declare const DAIMON_GROK_SECCOMP_PROFILE_SHA256: "9666074d2d6b1a261a410598b9ce1714d9060a6ef4c9c1d1cfb6f8915d7e842a";
+export declare const DAIMON_GROK_SECCOMP_PROFILE_BYTES = "{\n \"defaultAction\": \"SCMP_ACT_ERRNO\",\n \"defaultErrnoRet\": 1,\n \"archMap\": [\n  {\n   \"architecture\": \"SCMP_ARCH_X86_64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_X86\",\n    \"SCMP_ARCH_X32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_AARCH64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_ARM\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPS64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPS\",\n    \"SCMP_ARCH_MIPS64N32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPS64N32\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPS\",\n    \"SCMP_ARCH_MIPS64\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPSEL64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPSEL\",\n    \"SCMP_ARCH_MIPSEL64N32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPSEL64N32\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPSEL\",\n    \"SCMP_ARCH_MIPSEL64\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_S390X\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_S390\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_RISCV64\",\n   \"subArchitectures\": null\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_LOONGARCH64\",\n   \"subArchitectures\": null\n  }\n ],\n \"syscalls\": [\n  {\n   \"names\": [\n    \"clone\",\n    \"clone3\",\n    \"unshare\",\n    \"mount\",\n    \"umount2\",\n    \"pivot_root\",\n    \"setns\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"comment\": \"P0 spike: userns/mount syscalls bubblewrap needs, without CAP_SYS_ADMIN\"\n  },\n  {\n   \"names\": [\n    \"accept\",\n    \"accept4\",\n    \"access\",\n    \"adjtimex\",\n    \"alarm\",\n    \"bind\",\n    \"brk\",\n    \"cachestat\",\n    \"capget\",\n    \"capset\",\n    \"chdir\",\n    \"chmod\",\n    \"chown\",\n    \"chown32\",\n    \"clock_adjtime\",\n    \"clock_adjtime64\",\n    \"clock_getres\",\n    \"clock_getres_time64\",\n    \"clock_gettime\",\n    \"clock_gettime64\",\n    \"clock_nanosleep\",\n    \"clock_nanosleep_time64\",\n    \"close\",\n    \"close_range\",\n    \"connect\",\n    \"copy_file_range\",\n    \"creat\",\n    \"dup\",\n    \"dup2\",\n    \"dup3\",\n    \"epoll_create\",\n    \"epoll_create1\",\n    \"epoll_ctl\",\n    \"epoll_ctl_old\",\n    \"epoll_pwait\",\n    \"epoll_pwait2\",\n    \"epoll_wait\",\n    \"epoll_wait_old\",\n    \"eventfd\",\n    \"eventfd2\",\n    \"execve\",\n    \"execveat\",\n    \"exit\",\n    \"exit_group\",\n    \"faccessat\",\n    \"faccessat2\",\n    \"fadvise64\",\n    \"fadvise64_64\",\n    \"fallocate\",\n    \"fanotify_mark\",\n    \"fchdir\",\n    \"fchmod\",\n    \"fchmodat\",\n    \"fchmodat2\",\n    \"fchown\",\n    \"fchown32\",\n    \"fchownat\",\n    \"fcntl\",\n    \"fcntl64\",\n    \"fdatasync\",\n    \"fgetxattr\",\n    \"flistxattr\",\n    \"flock\",\n    \"fork\",\n    \"fremovexattr\",\n    \"fsetxattr\",\n    \"fstat\",\n    \"fstat64\",\n    \"fstatat64\",\n    \"fstatfs\",\n    \"fstatfs64\",\n    \"fsync\",\n    \"ftruncate\",\n    \"ftruncate64\",\n    \"futex\",\n    \"futex_requeue\",\n    \"futex_time64\",\n    \"futex_wait\",\n    \"futex_waitv\",\n    \"futex_wake\",\n    \"futimesat\",\n    \"getcpu\",\n    \"getcwd\",\n    \"getdents\",\n    \"getdents64\",\n    \"getegid\",\n    \"getegid32\",\n    \"geteuid\",\n    \"geteuid32\",\n    \"getgid\",\n    \"getgid32\",\n    \"getgroups\",\n    \"getgroups32\",\n    \"getitimer\",\n    \"getpeername\",\n    \"getpgid\",\n    \"getpgrp\",\n    \"getpid\",\n    \"getppid\",\n    \"getpriority\",\n    \"getrandom\",\n    \"getresgid\",\n    \"getresgid32\",\n    \"getresuid\",\n    \"getresuid32\",\n    \"getrlimit\",\n    \"get_robust_list\",\n    \"getrusage\",\n    \"getsid\",\n    \"getsockname\",\n    \"getsockopt\",\n    \"get_thread_area\",\n    \"gettid\",\n    \"gettimeofday\",\n    \"getuid\",\n    \"getuid32\",\n    \"getxattr\",\n    \"getxattrat\",\n    \"inotify_add_watch\",\n    \"inotify_init\",\n    \"inotify_init1\",\n    \"inotify_rm_watch\",\n    \"io_cancel\",\n    \"ioctl\",\n    \"io_destroy\",\n    \"io_getevents\",\n    \"io_pgetevents\",\n    \"io_pgetevents_time64\",\n    \"ioprio_get\",\n    \"ioprio_set\",\n    \"io_setup\",\n    \"io_submit\",\n    \"ipc\",\n    \"kill\",\n    \"landlock_add_rule\",\n    \"landlock_create_ruleset\",\n    \"landlock_restrict_self\",\n    \"lchown\",\n    \"lchown32\",\n    \"lgetxattr\",\n    \"link\",\n    \"linkat\",\n    \"listen\",\n    \"listmount\",\n    \"listxattr\",\n    \"listxattrat\",\n    \"llistxattr\",\n    \"_llseek\",\n    \"lremovexattr\",\n    \"lseek\",\n    \"lsetxattr\",\n    \"lstat\",\n    \"lstat64\",\n    \"madvise\",\n    \"map_shadow_stack\",\n    \"membarrier\",\n    \"memfd_create\",\n    \"memfd_secret\",\n    \"mincore\",\n    \"mkdir\",\n    \"mkdirat\",\n    \"mknod\",\n    \"mknodat\",\n    \"mlock\",\n    \"mlock2\",\n    \"mlockall\",\n    \"mmap\",\n    \"mmap2\",\n    \"mprotect\",\n    \"mq_getsetattr\",\n    \"mq_notify\",\n    \"mq_open\",\n    \"mq_timedreceive\",\n    \"mq_timedreceive_time64\",\n    \"mq_timedsend\",\n    \"mq_timedsend_time64\",\n    \"mq_unlink\",\n    \"mremap\",\n    \"mseal\",\n    \"msgctl\",\n    \"msgget\",\n    \"msgrcv\",\n    \"msgsnd\",\n    \"msync\",\n    \"munlock\",\n    \"munlockall\",\n    \"munmap\",\n    \"name_to_handle_at\",\n    \"nanosleep\",\n    \"newfstatat\",\n    \"_newselect\",\n    \"open\",\n    \"openat\",\n    \"openat2\",\n    \"pause\",\n    \"pidfd_open\",\n    \"pidfd_send_signal\",\n    \"pipe\",\n    \"pipe2\",\n    \"pkey_alloc\",\n    \"pkey_free\",\n    \"pkey_mprotect\",\n    \"poll\",\n    \"ppoll\",\n    \"ppoll_time64\",\n    \"prctl\",\n    \"pread64\",\n    \"preadv\",\n    \"preadv2\",\n    \"prlimit64\",\n    \"process_mrelease\",\n    \"pselect6\",\n    \"pselect6_time64\",\n    \"pwrite64\",\n    \"pwritev\",\n    \"pwritev2\",\n    \"read\",\n    \"readahead\",\n    \"readlink\",\n    \"readlinkat\",\n    \"readv\",\n    \"recv\",\n    \"recvfrom\",\n    \"recvmmsg\",\n    \"recvmmsg_time64\",\n    \"recvmsg\",\n    \"remap_file_pages\",\n    \"removexattr\",\n    \"removexattrat\",\n    \"rename\",\n    \"renameat\",\n    \"renameat2\",\n    \"restart_syscall\",\n    \"riscv_hwprobe\",\n    \"rmdir\",\n    \"rseq\",\n    \"rt_sigaction\",\n    \"rt_sigpending\",\n    \"rt_sigprocmask\",\n    \"rt_sigqueueinfo\",\n    \"rt_sigreturn\",\n    \"rt_sigsuspend\",\n    \"rt_sigtimedwait\",\n    \"rt_sigtimedwait_time64\",\n    \"rt_tgsigqueueinfo\",\n    \"sched_getaffinity\",\n    \"sched_getattr\",\n    \"sched_getparam\",\n    \"sched_get_priority_max\",\n    \"sched_get_priority_min\",\n    \"sched_getscheduler\",\n    \"sched_rr_get_interval\",\n    \"sched_rr_get_interval_time64\",\n    \"sched_setaffinity\",\n    \"sched_setattr\",\n    \"sched_setparam\",\n    \"sched_setscheduler\",\n    \"sched_yield\",\n    \"seccomp\",\n    \"select\",\n    \"semctl\",\n    \"semget\",\n    \"semop\",\n    \"semtimedop\",\n    \"semtimedop_time64\",\n    \"send\",\n    \"sendfile\",\n    \"sendfile64\",\n    \"sendmmsg\",\n    \"sendmsg\",\n    \"sendto\",\n    \"setfsgid\",\n    \"setfsgid32\",\n    \"setfsuid\",\n    \"setfsuid32\",\n    \"setgid\",\n    \"setgid32\",\n    \"setgroups\",\n    \"setgroups32\",\n    \"setitimer\",\n    \"setpgid\",\n    \"setpriority\",\n    \"setregid\",\n    \"setregid32\",\n    \"setresgid\",\n    \"setresgid32\",\n    \"setresuid\",\n    \"setresuid32\",\n    \"setreuid\",\n    \"setreuid32\",\n    \"setrlimit\",\n    \"set_robust_list\",\n    \"setsid\",\n    \"setsockopt\",\n    \"set_thread_area\",\n    \"set_tid_address\",\n    \"setuid\",\n    \"setuid32\",\n    \"setxattr\",\n    \"setxattrat\",\n    \"shmat\",\n    \"shmctl\",\n    \"shmdt\",\n    \"shmget\",\n    \"shutdown\",\n    \"sigaltstack\",\n    \"signalfd\",\n    \"signalfd4\",\n    \"sigprocmask\",\n    \"sigreturn\",\n    \"socketcall\",\n    \"socketpair\",\n    \"splice\",\n    \"stat\",\n    \"stat64\",\n    \"statfs\",\n    \"statfs64\",\n    \"statmount\",\n    \"statx\",\n    \"symlink\",\n    \"symlinkat\",\n    \"sync\",\n    \"sync_file_range\",\n    \"syncfs\",\n    \"sysinfo\",\n    \"tee\",\n    \"tgkill\",\n    \"time\",\n    \"timer_create\",\n    \"timer_delete\",\n    \"timer_getoverrun\",\n    \"timer_gettime\",\n    \"timer_gettime64\",\n    \"timer_settime\",\n    \"timer_settime64\",\n    \"timerfd_create\",\n    \"timerfd_gettime\",\n    \"timerfd_gettime64\",\n    \"timerfd_settime\",\n    \"timerfd_settime64\",\n    \"times\",\n    \"tkill\",\n    \"truncate\",\n    \"truncate64\",\n    \"ugetrlimit\",\n    \"umask\",\n    \"uname\",\n    \"unlink\",\n    \"unlinkat\",\n    \"uretprobe\",\n    \"utime\",\n    \"utimensat\",\n    \"utimensat_time64\",\n    \"utimes\",\n    \"vfork\",\n    \"vmsplice\",\n    \"wait4\",\n    \"waitid\",\n    \"waitpid\",\n    \"write\",\n    \"writev\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\"\n  },\n  {\n   \"names\": [\n    \"process_vm_readv\",\n    \"process_vm_writev\",\n    \"ptrace\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"minKernel\": \"4.8\"\n   }\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 38,\n     \"op\": \"SCMP_CMP_LT\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 39,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 41,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 42,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 43,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 44,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 45,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 0,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 8,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 131072,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 131080,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 4294967295,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"sync_file_range2\",\n    \"swapcontext\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"ppc64le\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"arm_fadvise64_64\",\n    \"arm_sync_file_range\",\n    \"sync_file_range2\",\n    \"breakpoint\",\n    \"cacheflush\",\n    \"set_tls\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"arm\",\n     \"arm64\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"arch_prctl\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"amd64\",\n     \"x32\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"modify_ldt\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"amd64\",\n     \"x32\",\n     \"x86\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"s390_pci_mmio_read\",\n    \"s390_pci_mmio_write\",\n    \"s390_runtime_instr\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"riscv_flush_icache\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"riscv64\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"open_by_handle_at\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_DAC_READ_SEARCH\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"bpf\",\n    \"clone\",\n    \"clone3\",\n    \"fanotify_init\",\n    \"fsconfig\",\n    \"fsmount\",\n    \"fsopen\",\n    \"fspick\",\n    \"lookup_dcookie\",\n    \"lsm_get_self_attr\",\n    \"lsm_list_modules\",\n    \"lsm_set_self_attr\",\n    \"mount\",\n    \"mount_setattr\",\n    \"move_mount\",\n    \"open_tree\",\n    \"perf_event_open\",\n    \"quotactl\",\n    \"quotactl_fd\",\n    \"setdomainname\",\n    \"sethostname\",\n    \"setns\",\n    \"syslog\",\n    \"umount\",\n    \"umount2\",\n    \"unshare\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"clone\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 2114060288,\n     \"op\": \"SCMP_CMP_MASKED_EQ\"\n    }\n   ],\n   \"excludes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ],\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"clone\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 1,\n     \"value\": 2114060288,\n     \"op\": \"SCMP_CMP_MASKED_EQ\"\n    }\n   ],\n   \"comment\": \"s390 parameter ordering for clone is different\",\n   \"includes\": {\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   },\n   \"excludes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"reboot\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_BOOT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"chroot\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_CHROOT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"delete_module\",\n    \"init_module\",\n    \"finit_module\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_MODULE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"acct\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_PACCT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"kcmp\",\n    \"pidfd_getfd\",\n    \"process_madvise\",\n    \"process_vm_readv\",\n    \"process_vm_writev\",\n    \"ptrace\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_PTRACE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"iopl\",\n    \"ioperm\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_RAWIO\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"settimeofday\",\n    \"stime\",\n    \"clock_settime\",\n    \"clock_settime64\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_TIME\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"vhangup\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_TTY_CONFIG\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"get_mempolicy\",\n    \"mbind\",\n    \"set_mempolicy\",\n    \"set_mempolicy_home_node\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_NICE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"syslog\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYSLOG\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"bpf\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_BPF\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"perf_event_open\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_PERFMON\"\n    ]\n   }\n  }\n ]\n}";

package/dist/shared/daimonGrokSeccompProfile.js

@@ -0,0 +1,11 @@
+/* v8 ignore file -- pinned data module */
+/**
+ * Docker's default seccomp profile plus the seven namespace syscalls bubblewrap
+ * needs without CAP_SYS_ADMIN (clone, clone3, unshare, mount, umount2, pivot_root,
+ * setns): the narrowest profile under which Grok 1.0.34's sandbox starts
+ * (Noopolis P0 container evidence, 2026-09-17). Bytes are pinned by sha256; Daimon's
+ * Grok broker projection and slot preflight receipt bind the same digest.
+ */
+export const DAIMON_GROK_SECCOMP_PROFILE_FILE_NAME = "seccomp-default-plus-userns.json";
+export const DAIMON_GROK_SECCOMP_PROFILE_SHA256 = "9666074d2d6b1a261a410598b9ce1714d9060a6ef4c9c1d1cfb6f8915d7e842a";
+export const DAIMON_GROK_SECCOMP_PROFILE_BYTES = "{\n \"defaultAction\": \"SCMP_ACT_ERRNO\",\n \"defaultErrnoRet\": 1,\n \"archMap\": [\n  {\n   \"architecture\": \"SCMP_ARCH_X86_64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_X86\",\n    \"SCMP_ARCH_X32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_AARCH64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_ARM\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPS64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPS\",\n    \"SCMP_ARCH_MIPS64N32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPS64N32\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPS\",\n    \"SCMP_ARCH_MIPS64\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPSEL64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPSEL\",\n    \"SCMP_ARCH_MIPSEL64N32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPSEL64N32\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPSEL\",\n    \"SCMP_ARCH_MIPSEL64\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_S390X\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_S390\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_RISCV64\",\n   \"subArchitectures\": null\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_LOONGARCH64\",\n   \"subArchitectures\": null\n  }\n ],\n \"syscalls\": [\n  {\n   \"names\": [\n    \"clone\",\n    \"clone3\",\n    \"unshare\",\n    \"mount\",\n    \"umount2\",\n    \"pivot_root\",\n    \"setns\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"comment\": \"P0 spike: userns/mount syscalls bubblewrap needs, without CAP_SYS_ADMIN\"\n  },\n  {\n   \"names\": [\n    \"accept\",\n    \"accept4\",\n    \"access\",\n    \"adjtimex\",\n    \"alarm\",\n    \"bind\",\n    \"brk\",\n    \"cachestat\",\n    \"capget\",\n    \"capset\",\n    \"chdir\",\n    \"chmod\",\n    \"chown\",\n    \"chown32\",\n    \"clock_adjtime\",\n    \"clock_adjtime64\",\n    \"clock_getres\",\n    \"clock_getres_time64\",\n    \"clock_gettime\",\n    \"clock_gettime64\",\n    \"clock_nanosleep\",\n    \"clock_nanosleep_time64\",\n    \"close\",\n    \"close_range\",\n    \"connect\",\n    \"copy_file_range\",\n    \"creat\",\n    \"dup\",\n    \"dup2\",\n    \"dup3\",\n    \"epoll_create\",\n    \"epoll_create1\",\n    \"epoll_ctl\",\n    \"epoll_ctl_old\",\n    \"epoll_pwait\",\n    \"epoll_pwait2\",\n    \"epoll_wait\",\n    \"epoll_wait_old\",\n    \"eventfd\",\n    \"eventfd2\",\n    \"execve\",\n    \"execveat\",\n    \"exit\",\n    \"exit_group\",\n    \"faccessat\",\n    \"faccessat2\",\n    \"fadvise64\",\n    \"fadvise64_64\",\n    \"fallocate\",\n    \"fanotify_mark\",\n    \"fchdir\",\n    \"fchmod\",\n    \"fchmodat\",\n    \"fchmodat2\",\n    \"fchown\",\n    \"fchown32\",\n    \"fchownat\",\n    \"fcntl\",\n    \"fcntl64\",\n    \"fdatasync\",\n    \"fgetxattr\",\n    \"flistxattr\",\n    \"flock\",\n    \"fork\",\n    \"fremovexattr\",\n    \"fsetxattr\",\n    \"fstat\",\n    \"fstat64\",\n    \"fstatat64\",\n    \"fstatfs\",\n    \"fstatfs64\",\n    \"fsync\",\n    \"ftruncate\",\n    \"ftruncate64\",\n    \"futex\",\n    \"futex_requeue\",\n    \"futex_time64\",\n    \"futex_wait\",\n    \"futex_waitv\",\n    \"futex_wake\",\n    \"futimesat\",\n    \"getcpu\",\n    \"getcwd\",\n    \"getdents\",\n    \"getdents64\",\n    \"getegid\",\n    \"getegid32\",\n    \"geteuid\",\n    \"geteuid32\",\n    \"getgid\",\n    \"getgid32\",\n    \"getgroups\",\n    \"getgroups32\",\n    \"getitimer\",\n    \"getpeername\",\n    \"getpgid\",\n    \"getpgrp\",\n    \"getpid\",\n    \"getppid\",\n    \"getpriority\",\n    \"getrandom\",\n    \"getresgid\",\n    \"getresgid32\",\n    \"getresuid\",\n    \"getresuid32\",\n    \"getrlimit\",\n    \"get_robust_list\",\n    \"getrusage\",\n    \"getsid\",\n    \"getsockname\",\n    \"getsockopt\",\n    \"get_thread_area\",\n    \"gettid\",\n    \"gettimeofday\",\n    \"getuid\",\n    \"getuid32\",\n    \"getxattr\",\n    \"getxattrat\",\n    \"inotify_add_watch\",\n    \"inotify_init\",\n    \"inotify_init1\",\n    \"inotify_rm_watch\",\n    \"io_cancel\",\n    \"ioctl\",\n    \"io_destroy\",\n    \"io_getevents\",\n    \"io_pgetevents\",\n    \"io_pgetevents_time64\",\n    \"ioprio_get\",\n    \"ioprio_set\",\n    \"io_setup\",\n    \"io_submit\",\n    \"ipc\",\n    \"kill\",\n    \"landlock_add_rule\",\n    \"landlock_create_ruleset\",\n    \"landlock_restrict_self\",\n    \"lchown\",\n    \"lchown32\",\n    \"lgetxattr\",\n    \"link\",\n    \"linkat\",\n    \"listen\",\n    \"listmount\",\n    \"listxattr\",\n    \"listxattrat\",\n    \"llistxattr\",\n    \"_llseek\",\n    \"lremovexattr\",\n    \"lseek\",\n    \"lsetxattr\",\n    \"lstat\",\n    \"lstat64\",\n    \"madvise\",\n    \"map_shadow_stack\",\n    \"membarrier\",\n    \"memfd_create\",\n    \"memfd_secret\",\n    \"mincore\",\n    \"mkdir\",\n    \"mkdirat\",\n    \"mknod\",\n    \"mknodat\",\n    \"mlock\",\n    \"mlock2\",\n    \"mlockall\",\n    \"mmap\",\n    \"mmap2\",\n    \"mprotect\",\n    \"mq_getsetattr\",\n    \"mq_notify\",\n    \"mq_open\",\n    \"mq_timedreceive\",\n    \"mq_timedreceive_time64\",\n    \"mq_timedsend\",\n    \"mq_timedsend_time64\",\n    \"mq_unlink\",\n    \"mremap\",\n    \"mseal\",\n    \"msgctl\",\n    \"msgget\",\n    \"msgrcv\",\n    \"msgsnd\",\n    \"msync\",\n    \"munlock\",\n    \"munlockall\",\n    \"munmap\",\n    \"name_to_handle_at\",\n    \"nanosleep\",\n    \"newfstatat\",\n    \"_newselect\",\n    \"open\",\n    \"openat\",\n    \"openat2\",\n    \"pause\",\n    \"pidfd_open\",\n    \"pidfd_send_signal\",\n    \"pipe\",\n    \"pipe2\",\n    \"pkey_alloc\",\n    \"pkey_free\",\n    \"pkey_mprotect\",\n    \"poll\",\n    \"ppoll\",\n    \"ppoll_time64\",\n    \"prctl\",\n    \"pread64\",\n    \"preadv\",\n    \"preadv2\",\n    \"prlimit64\",\n    \"process_mrelease\",\n    \"pselect6\",\n    \"pselect6_time64\",\n    \"pwrite64\",\n    \"pwritev\",\n    \"pwritev2\",\n    \"read\",\n    \"readahead\",\n    \"readlink\",\n    \"readlinkat\",\n    \"readv\",\n    \"recv\",\n    \"recvfrom\",\n    \"recvmmsg\",\n    \"recvmmsg_time64\",\n    \"recvmsg\",\n    \"remap_file_pages\",\n    \"removexattr\",\n    \"removexattrat\",\n    \"rename\",\n    \"renameat\",\n    \"renameat2\",\n    \"restart_syscall\",\n    \"riscv_hwprobe\",\n    \"rmdir\",\n    \"rseq\",\n    \"rt_sigaction\",\n    \"rt_sigpending\",\n    \"rt_sigprocmask\",\n    \"rt_sigqueueinfo\",\n    \"rt_sigreturn\",\n    \"rt_sigsuspend\",\n    \"rt_sigtimedwait\",\n    \"rt_sigtimedwait_time64\",\n    \"rt_tgsigqueueinfo\",\n    \"sched_getaffinity\",\n    \"sched_getattr\",\n    \"sched_getparam\",\n    \"sched_get_priority_max\",\n    \"sched_get_priority_min\",\n    \"sched_getscheduler\",\n    \"sched_rr_get_interval\",\n    \"sched_rr_get_interval_time64\",\n    \"sched_setaffinity\",\n    \"sched_setattr\",\n    \"sched_setparam\",\n    \"sched_setscheduler\",\n    \"sched_yield\",\n    \"seccomp\",\n    \"select\",\n    \"semctl\",\n    \"semget\",\n    \"semop\",\n    \"semtimedop\",\n    \"semtimedop_time64\",\n    \"send\",\n    \"sendfile\",\n    \"sendfile64\",\n    \"sendmmsg\",\n    \"sendmsg\",\n    \"sendto\",\n    \"setfsgid\",\n    \"setfsgid32\",\n    \"setfsuid\",\n    \"setfsuid32\",\n    \"setgid\",\n    \"setgid32\",\n    \"setgroups\",\n    \"setgroups32\",\n    \"setitimer\",\n    \"setpgid\",\n    \"setpriority\",\n    \"setregid\",\n    \"setregid32\",\n    \"setresgid\",\n    \"setresgid32\",\n    \"setresuid\",\n    \"setresuid32\",\n    \"setreuid\",\n    \"setreuid32\",\n    \"setrlimit\",\n    \"set_robust_list\",\n    \"setsid\",\n    \"setsockopt\",\n    \"set_thread_area\",\n    \"set_tid_address\",\n    \"setuid\",\n    \"setuid32\",\n    \"setxattr\",\n    \"setxattrat\",\n    \"shmat\",\n    \"shmctl\",\n    \"shmdt\",\n    \"shmget\",\n    \"shutdown\",\n    \"sigaltstack\",\n    \"signalfd\",\n    \"signalfd4\",\n    \"sigprocmask\",\n    \"sigreturn\",\n    \"socketcall\",\n    \"socketpair\",\n    \"splice\",\n    \"stat\",\n    \"stat64\",\n    \"statfs\",\n    \"statfs64\",\n    \"statmount\",\n    \"statx\",\n    \"symlink\",\n    \"symlinkat\",\n    \"sync\",\n    \"sync_file_range\",\n    \"syncfs\",\n    \"sysinfo\",\n    \"tee\",\n    \"tgkill\",\n    \"time\",\n    \"timer_create\",\n    \"timer_delete\",\n    \"timer_getoverrun\",\n    \"timer_gettime\",\n    \"timer_gettime64\",\n    \"timer_settime\",\n    \"timer_settime64\",\n    \"timerfd_create\",\n    \"timerfd_gettime\",\n    \"timerfd_gettime64\",\n    \"timerfd_settime\",\n    \"timerfd_settime64\",\n    \"times\",\n    \"tkill\",\n    \"truncate\",\n    \"truncate64\",\n    \"ugetrlimit\",\n    \"umask\",\n    \"uname\",\n    \"unlink\",\n    \"unlinkat\",\n    \"uretprobe\",\n    \"utime\",\n    \"utimensat\",\n    \"utimensat_time64\",\n    \"utimes\",\n    \"vfork\",\n    \"vmsplice\",\n    \"wait4\",\n    \"waitid\",\n    \"waitpid\",\n    \"write\",\n    \"writev\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\"\n  },\n  {\n   \"names\": [\n    \"process_vm_readv\",\n    \"process_vm_writev\",\n    \"ptrace\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"minKernel\": \"4.8\"\n   }\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 38,\n     \"op\": \"SCMP_CMP_LT\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 39,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 41,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 42,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 43,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 44,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 45,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 0,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 8,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 131072,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 131080,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 4294967295,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"sync_file_range2\",\n    \"swapcontext\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"ppc64le\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"arm_fadvise64_64\",\n    \"arm_sync_file_range\",\n    \"sync_file_range2\",\n    \"breakpoint\",\n    \"cacheflush\",\n    \"set_tls\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"arm\",\n     \"arm64\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"arch_prctl\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"amd64\",\n     \"x32\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"modify_ldt\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"amd64\",\n     \"x32\",\n     \"x86\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"s390_pci_mmio_read\",\n    \"s390_pci_mmio_write\",\n    \"s390_runtime_instr\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"riscv_flush_icache\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"riscv64\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"open_by_handle_at\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_DAC_READ_SEARCH\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"bpf\",\n    \"clone\",\n    \"clone3\",\n    \"fanotify_init\",\n    \"fsconfig\",\n    \"fsmount\",\n    \"fsopen\",\n    \"fspick\",\n    \"lookup_dcookie\",\n    \"lsm_get_self_attr\",\n    \"lsm_list_modules\",\n    \"lsm_set_self_attr\",\n    \"mount\",\n    \"mount_setattr\",\n    \"move_mount\",\n    \"open_tree\",\n    \"perf_event_open\",\n    \"quotactl\",\n    \"quotactl_fd\",\n    \"setdomainname\",\n    \"sethostname\",\n    \"setns\",\n    \"syslog\",\n    \"umount\",\n    \"umount2\",\n    \"unshare\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"clone\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 2114060288,\n     \"op\": \"SCMP_CMP_MASKED_EQ\"\n    }\n   ],\n   \"excludes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ],\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"clone\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 1,\n     \"value\": 2114060288,\n     \"op\": \"SCMP_CMP_MASKED_EQ\"\n    }\n   ],\n   \"comment\": \"s390 parameter ordering for clone is different\",\n   \"includes\": {\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   },\n   \"excludes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"reboot\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_BOOT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"chroot\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_CHROOT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"delete_module\",\n    \"init_module\",\n    \"finit_module\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_MODULE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"acct\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_PACCT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"kcmp\",\n    \"pidfd_getfd\",\n    \"process_madvise\",\n    \"process_vm_readv\",\n    \"process_vm_writev\",\n    \"ptrace\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_PTRACE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"iopl\",\n    \"ioperm\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_RAWIO\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"settimeofday\",\n    \"stime\",\n    \"clock_settime\",\n    \"clock_settime64\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_TIME\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"vhangup\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_TTY_CONFIG\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"get_mempolicy\",\n    \"mbind\",\n    \"set_mempolicy\",\n    \"set_mempolicy_home_node\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_NICE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"syslog\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYSLOG\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"bpf\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_BPF\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"perf_event_open\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_PERFMON\"\n    ]\n   }\n  }\n ]\n}";

package/dist/shared/errors.d.ts

@@ -1,7 +1,7 @@
 export type SpawnfileErrorCode = "adapter_error" | "compile_error" | "invalid_manifest" | "io_error" | "runtime_error" | "validation_error";
 export declare class SpawnfileError extends Error {
     readonly code: SpawnfileErrorCode;
-    constructor(code: SpawnfileErrorCode, message: string);
+    constructor(code: SpawnfileErrorCode, message: string, options?: ErrorOptions);
 }
 export declare const isSpawnfileError: (value: unknown) => value is SpawnfileError;
 /**

package/dist/shared/errors.js

@@ -1,7 +1,7 @@
 export class SpawnfileError extends Error {
     code;
-    constructor(code, message) {
-        super(message);
+    constructor(code, message, options) {
+        super(message, options);
         this.code = code;
         this.name = "SpawnfileError";
     }

package/dist/shared/index.d.ts

@@ -1,3 +1,6 @@
 export * from "./constants.js";
 export * from "./errors.js";
+export * from "./redaction.js";
 export * from "./types.js";
+export * from "./volumeNames.js";
+export * from "./daimonCodexDocker.js";

package/dist/shared/index.js

@@ -1,3 +1,6 @@
 export * from "./constants.js";
 export * from "./errors.js";
+export * from "./redaction.js";
 export * from "./types.js";
+export * from "./volumeNames.js";
+export * from "./daimonCodexDocker.js";

package/dist/shared/redaction.d.ts

@@ -0,0 +1,2 @@
+export declare const redactSensitiveText: (text: string) => string;
+export declare const boundedRedactedText: (text: string, limit?: number) => string;

package/dist/shared/redaction.js

@@ -0,0 +1,10 @@
+const redactTokenLikeText = (text) => {
+    let redacted = text;
+    redacted = redacted.replace(/\bBearer\s+[A-Za-z0-9._~+/=-]{12,}/gi, "Bearer [REDACTED]");
+    redacted = redacted.replace(/\bmagt_v1_[A-Za-z0-9_-]{16,}\b/g, "[REDACTED]");
+    redacted = redacted.replace(/\b(?:sk|sk-proj)-[A-Za-z0-9_-]{20,}\b/g, "[REDACTED]");
+    redacted = redacted.replace(/\b([A-Z0-9_]*(?:API[_-]?KEY|TOKEN|SECRET|PASSWORD)[A-Z0-9_]*=)([^\s"'`]+)/gi, "$1[REDACTED]");
+    return redacted.replace(/(\"([^\"]*(?:api[_-]?key|token|secret|password)[^\"]*)\"\s*:\s*\")([^\"]+)(\")/gi, "$1[REDACTED]$4");
+};
+export const redactSensitiveText = (text) => redactTokenLikeText(text);
+export const boundedRedactedText = (text, limit = 240) => redactSensitiveText(text).replace(/\s+/gu, " ").slice(0, limit);

package/dist/shared/types.d.ts

@@ -1,6 +1,6 @@
 export type JsonPrimitive = boolean | null | number | string;
 export type JsonValue = JsonObject | JsonPrimitive | JsonValue[];
-export type ModelAuthMethod = "api_key" | "claude-code" | "codex" | "none";
+export type ModelAuthMethod = "api_key" | "claude-code" | "codex" | "grok" | "none";
 export type ModelEndpointCompatibility = "anthropic" | "openai";
 export type RuntimeLifecycleStatus = "active" | "deprecated" | "exploratory";
 export interface JsonObject {

package/dist/shared/volumeNames.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Host-stable name for state that must be reattached, never cloned, across
+ * run and deployment identities. The mount id is compiler-owned and the
+ * digest prevents normalization collisions.
+ */
+export declare const createExclusiveReattachVolumeName: (lineage: string, mountId: string) => string;

package/dist/shared/volumeNames.js

@@ -0,0 +1,14 @@
+import { createHash } from "node:crypto";
+/**
+ * Host-stable name for state that must be reattached, never cloned, across
+ * run and deployment identities. The mount id is compiler-owned and the
+ * digest prevents normalization collisions.
+ */
+export const createExclusiveReattachVolumeName = (lineage, mountId) => {
+    const safe = mountId
+        .replace(/[^A-Za-z0-9_.-]+/gu, "-")
+        .replace(/^-+|-+$/gu, "")
+        .slice(0, 48) || "realm";
+    const digest = createHash("sha256").update(lineage, "utf8").update("\0").update(mountId, "utf8").digest("hex").slice(0, 16);
+    return `spawnfile-exclusive-${safe}-${digest}`;
+};

package/dist/status/buildStatus.d.ts

@@ -4,6 +4,7 @@ export declare const countObservations: (observations: StatusObservation[]) => S
 export declare const getVisibleObservations: (status: StaticStatus) => StatusObservation[];
 export declare const exitCodeForStatus: (status: StaticStatus) => StatusExitCode;
 export declare const createStaticStatus: (view: StaticStatus["view"], loadedReport: LoadedCompileReport, input: {
+    compiledProbeObservations?: StatusObservation[];
     deployments?: StatusDeploymentSummary[];
     inputPath: string;
     liveObservations?: StatusObservation[];

package/dist/status/buildStatus.js

@@ -230,6 +230,7 @@ export const createStaticStatus = (view, loadedReport, input) => {
     const deployments = input.deployments ?? [];
     const live = input.live ?? defaultLiveRequest();
     const liveObservations = input.liveObservations ?? [];
+    const compiledProbeObservations = input.compiledProbeObservations ?? [];
     const selection = expandStatusSelectionSubjects(input.selection, {
         deployments,
         loadedReport,
@@ -237,6 +238,7 @@ export const createStaticStatus = (view, loadedReport, input) => {
     });
     addDeclaredObservations(observations, view, nodes);
     addCompiledObservations(observations, loadedReport, view, nodes);
+    observations.push(...compiledProbeObservations);
     observations.push(...createDeploymentObservations(deployments, {
         compileFingerprint: compileInfoFor(loadedReport).compileFingerprint,
         liveRequested: live.requested,

package/dist/status/compileReport.d.ts

@@ -32,6 +32,10 @@ export interface StatusReportMoltnetRoom {
     visibility: string | null;
     writePolicy: string | null;
 }
+export interface StatusReportMoltnetNodePlan {
+    configPath: string;
+    networkId: string;
+}
 export interface StatusReportMoltnetServerPlan {
     authMode: string | null;
     baseUrl: string;
@@ -66,8 +70,26 @@ export interface StatusReportWorkspaceResource {
 }
 export interface StatusReport {
     compileFingerprint: string | null;
+    /**
+     * Absolute physical path to the compiled `container/entrypoint` script
+     * (B93), resolved against the output directory a given
+     * `loadCompileReport`/`loadedImageCompileReport` call was actually handed
+     * — never a path baked into the report JSON's own `output_directory`
+     * field, which can be stale relative to the current invocation. `null`
+     * when the report has no `container.entrypoint` field, or (image/home
+     * deployment reports) when there is no on-disk compiled output at all.
+     */
+    entrypointPath?: string | null;
     generatedAt: string | null;
     internalPorts?: number[];
+    /**
+     * Parsed `container.moltnet.node_plans[]` (B38): `configPath` is the
+     * container-absolute path from the compiled report (see
+     * `toContainerRootfsPath` in `src/compiler/moltnetArtifactPaths.ts`), not
+     * yet resolved onto disk — join it under `<output dir>/container/rootfs`.
+     * Optional, like `moltnetServers` below, for the same pre-B38 reason.
+     */
+    moltnetNodePlans?: StatusReportMoltnetNodePlan[];
     moltnetServers?: StatusReportMoltnetServerPlan[];
     nodes: StatusReportNode[];
     outputDirectory: string | null;

package/dist/status/compileReport.js

@@ -91,6 +91,14 @@ const normalizeMoltnetRoom = (value) => {
         writePolicy: toStringOrNull(value.write_policy)
     };
 };
+const normalizeMoltnetNodePlan = (value) => {
+    if (!isRecord(value)) {
+        return null;
+    }
+    const configPath = toStringOrNull(value.config_path);
+    const networkId = toStringOrNull(value.network_id);
+    return configPath && networkId ? { configPath, networkId } : null;
+};
 const normalizeMoltnetServer = (value) => {
     if (!isRecord(value)) {
         return null;
@@ -153,7 +161,7 @@ const normalizeWorkspaceResource = (value) => {
         ? { backingPath, id, kind, linkPath, mode, mount, sharing }
         : null;
 };
-const normalizeReport = (value, reportPath) => {
+const normalizeReport = (value, reportPath, outputDirectory) => {
     if (!isRecord(value) || !Array.isArray(value.nodes)) {
         return null;
     }
@@ -163,10 +171,16 @@ const normalizeReport = (value, reportPath) => {
         : [];
     const moltnet = isRecord(container.moltnet) ? container.moltnet : {};
     const moltnetServers = Array.isArray(moltnet.server_plans) ? moltnet.server_plans : [];
+    const moltnetNodePlans = Array.isArray(moltnet.node_plans) ? moltnet.node_plans : [];
+    const entrypoint = toStringOrNull(container.entrypoint);
     return {
         compileFingerprint: toStringOrNull(value.compile_fingerprint),
+        entrypointPath: entrypoint ? path.join(outputDirectory, entrypoint) : null,
         generatedAt: toStringOrNull(value.generated_at),
         internalPorts: toNumberArray(container.internal_ports),
+        moltnetNodePlans: moltnetNodePlans
+            .map(normalizeMoltnetNodePlan)
+            .filter((entry) => entry !== null),
         moltnetServers: moltnetServers
             .map(normalizeMoltnetServer)
             .filter((entry) => entry !== null),
@@ -219,7 +233,7 @@ export const loadCompileReport = async (outputDirectory) => {
             reportPath
         };
     }
-    const report = normalizeReport(parsed, reportPath);
+    const report = normalizeReport(parsed, reportPath, outputDirectory);
     return report
         ? { kind: "loaded", report, reportPath }
         : {

package/dist/status/compiledProbeCollection.d.ts

@@ -0,0 +1,21 @@
+import type { LoadedCompileReport } from "./compileReport.js";
+import { collectLifecycleProbeObservations } from "./lifecycleProbes.js";
+import { collectMoltnetWiringProbeObservations } from "./moltnetWiringProbes.js";
+import type { StatusObservation } from "./types.js";
+/**
+ * CLI-facing glue for the B38 offline lifecycle + Moltnet-wiring probes:
+ * a real disk `readFile` for the static (`--out <dir>`) status path, a
+ * stub that always resolves `null` for the home-deployment status path
+ * (no compiled output tree exists there at all), and one function that
+ * runs both probe collectors and concatenates their observations. Kept out
+ * of `src/cli/statusCommand.ts` to stay under this repo's 400-line file
+ * cap — this is CLI wiring plumbing, not a new probe contract.
+ */
+export type CompiledProbeReadFile = (filePath: string) => Promise<string | null>;
+export interface CompiledProbeCollectors {
+    collectLifecycleProbeObservations?: typeof collectLifecycleProbeObservations;
+    collectMoltnetWiringProbeObservations?: typeof collectMoltnetWiringProbeObservations;
+}
+export declare const readCompiledProbeFile: CompiledProbeReadFile;
+export declare const unavailableCompiledProbeFile: CompiledProbeReadFile;
+export declare const collectCompiledProbeObservations: (loadedReport: LoadedCompileReport, outputDirectory: string | null, readFileFn: CompiledProbeReadFile, collectors?: CompiledProbeCollectors) => Promise<StatusObservation[]>;

package/dist/status/compiledProbeCollection.js

@@ -0,0 +1,27 @@
+import { readFile } from "node:fs/promises";
+import { collectLifecycleProbeObservations } from "./lifecycleProbes.js";
+import { collectMoltnetWiringProbeObservations } from "./moltnetWiringProbes.js";
+// Never throws: an unreadable path (missing file, permissions, not a
+// regular file) resolves null so a probe reports its own defined
+// unreadable-input severity instead of crashing status.
+export const readCompiledProbeFile = async (filePath) => {
+    try {
+        return await readFile(filePath, "utf8");
+    }
+    catch {
+        return null;
+    }
+};
+// Home-deployment status has no on-disk compiled output tree (no `--out`
+// directory, no container/rootfs mirror) to read from at all — every read
+// resolves null so the probes report their own defined "nothing to check"
+// unknown, never a crash and never a false ok.
+export const unavailableCompiledProbeFile = async () => null;
+export const collectCompiledProbeObservations = async (loadedReport, outputDirectory, readFileFn, collectors = {}) => {
+    const collectLifecycle = collectors.collectLifecycleProbeObservations ?? collectLifecycleProbeObservations;
+    const collectWiring = collectors.collectMoltnetWiringProbeObservations ?? collectMoltnetWiringProbeObservations;
+    return [
+        ...await collectLifecycle({ loadedReport, outputDirectory, readFile: readFileFn }),
+        ...await collectWiring({ loadedReport, outputDirectory, readFile: readFileFn })
+    ];
+};

package/dist/status/imageStatusReport.js

@@ -6,8 +6,14 @@
  */
 export const distributionReportToStatusReport = (report, reportPath) => ({
     compileFingerprint: report.compile_fingerprint,
+    // A distribution/image report has no on-disk compiled output tree to read
+    // an entrypoint script or Moltnet node config from (see B38's
+    // lifecycle/wiring probes) — falls back to unknown/not-checked, same
+    // shape as moltnetServers below.
+    entrypointPath: null,
     generatedAt: report.generated_at,
     internalPorts: report.internal_ports,
+    moltnetNodePlans: [],
     moltnetServers: [],
     nodes: [
         ...report.organization.agents.map((agent) => ({

package/dist/status/index.d.ts

@@ -1,9 +1,12 @@
 export * from "./buildStatus.js";
 export * from "./compiledContainerObservations.js";
 export * from "./compileReport.js";
+export * from "./compiledProbeCollection.js";
 export * from "./deploymentLogs.js";
 export * from "./deployments.js";
+export * from "./lifecycleProbes.js";
 export * from "./moltnetProbes.js";
+export * from "./moltnetWiringProbes.js";
 export * from "./renderStatus.js";
 export * from "./runtimeProbes.js";
 export * from "./selectionSubjects.js";

package/dist/status/index.js

@@ -1,9 +1,12 @@
 export * from "./buildStatus.js";
 export * from "./compiledContainerObservations.js";
 export * from "./compileReport.js";
+export * from "./compiledProbeCollection.js";
 export * from "./deploymentLogs.js";
 export * from "./deployments.js";
+export * from "./lifecycleProbes.js";
 export * from "./moltnetProbes.js";
+export * from "./moltnetWiringProbes.js";
 export * from "./renderStatus.js";
 export * from "./runtimeProbes.js";
 export * from "./selectionSubjects.js";

package/dist/status/lifecycleProbes.d.ts

@@ -0,0 +1,19 @@
+import type { LoadedCompileReport } from "./compileReport.js";
+import type { StatusObservation } from "./types.js";
+/**
+ * Offline agent-lifecycle cross-check probes (B38). Every function here is
+ * pure over the already-loaded compile report plus an injected `readFile`
+ * — no direct `node:fs` access, so both the static (`--out <dir>` present)
+ * and home-deployment (no on-disk compiled output) `spawnfile status`
+ * paths can drive it with different readers. Cardinal rule, same as
+ * `src/audit/`: absent input is `unknown`, never `ok` — a probe with
+ * nothing to check reports `unknown`, it does not go silent.
+ */
+export type LifecycleReadFile = (filePath: string) => Promise<string | null>;
+export interface CollectLifecycleProbeOptions {
+    loadedReport: LoadedCompileReport;
+    /** Compiled output directory to resolve on-disk paths against. `null` when there is no compiled output tree to read (home-deployment status). */
+    outputDirectory: string | null;
+    readFile: LifecycleReadFile;
+}
+export declare const collectLifecycleProbeObservations: (options: CollectLifecycleProbeOptions) => Promise<StatusObservation[]>;