spawnfile 0.1.14 → 0.1.17

package/dist/runtime/usageLedgerRead.js

@@ -0,0 +1,102 @@
+/**
+ * Transport half of Daimon's per-turn usage ledger reader
+ * (`noopolis.daimon.turn-usage.v1`, see `specs/USAGE_ACCOUNTING_DESIGN.md`). Split
+ * out of `usageLedger.ts` so that file stays a pure parser/aggregator and this
+ * one owns the single I/O-shaped concern: `cat` two ledger generations through
+ * a caller-supplied `exec` and decide, per generation, whether a failed read
+ * means "empty" or "unknown".
+ *
+ * `exec` is duck-typed (structurally the same shape as
+ * `RuntimeProbeGateway.exec` in `./types.ts`) rather than a concrete gateway,
+ * so this module never depends on `src/deployment` — which already imports
+ * real exports from this folder, and so must not be imported back.
+ */
+import { parseUsageLedger } from "./usageLedger.js";
+/** Same redaction discipline as the docker probe gateway's own failure
+ * summaries — written here rather than imported because this module must not
+ * depend on `src/deployment` (see the module doc). */
+const boundedReadFailure = (error) => {
+    const text = (() => {
+        if (error && typeof error === "object") {
+            const candidate = error;
+            if (typeof candidate.stderr === "string" && candidate.stderr.trim().length > 0) {
+                return candidate.stderr;
+            }
+            if (typeof candidate.message === "string")
+                return candidate.message;
+        }
+        return String(error);
+    })();
+    return text
+        .replace(/\s+/gu, " ")
+        .replace(/(bearer|token|password|passwd|secret|authorization)[=: ]+(?:bearer[ ]+)?[^ ]+/giu, "$1=[redacted]")
+        .replace(/https?:\/\/[^ ]+/giu, "[url redacted]")
+        .trim()
+        .slice(0, 240) || "ledger read failed";
+};
+/**
+ * True only for the one failure that legitimately means "there is nothing
+ * here": the file does not exist. That is the normal state of
+ * `usage.jsonl.1` before the first rotation, and of `usage.jsonl` before the
+ * first turn ever completes, so it must stay silent.
+ *
+ * Everything else — a `maxBuffer` overrun on a rotated generation, the read
+ * timing out, the daemon being unreachable, the container having gone away —
+ * is an UNKNOWN number of turns, and reporting it as zero is exactly the
+ * silent data loss `spawnfile usage` exists to prevent. A killed or
+ * string-coded failure is never read as absence no matter what text it
+ * carries, because a truncated or aborted read can still have emitted
+ * unrelated stderr.
+ */
+const isAbsentLedgerFile = (error) => {
+    if (!error || typeof error !== "object")
+        return false;
+    const candidate = error;
+    if (candidate.killed === true || (candidate.signal !== undefined && candidate.signal !== null)) {
+        return false;
+    }
+    // Node reports spawn/stream failures with a string `code`
+    // (`ERR_CHILD_PROCESS_STDIO_MAXBUFFER`, or `ENOENT` for a missing docker
+    // binary); a plain non-zero `cat` exit carries a numeric one.
+    if (typeof candidate.code === "string")
+        return false;
+    const stderr = typeof candidate.stderr === "string" ? candidate.stderr : "";
+    const message = typeof candidate.message === "string" ? candidate.message : "";
+    return /no such file or directory/iu.test(`${stderr}\n${message}`);
+};
+/** `cat`s one generation through `exec`. A genuinely absent file reads as
+ * empty; every other failure is reported, never swallowed. */
+const readLedgerGeneration = async (exec, filePath) => {
+    try {
+        const result = await exec(["cat", filePath]);
+        return { text: result.stdout };
+    }
+    catch (error) {
+        if (isAbsentLedgerFile(error))
+            return { text: "" };
+        return { failure: { filePath, reason: boundedReadFailure(error) }, text: "" };
+    }
+};
+/**
+ * Reads both ledger generations (`usage.jsonl` and `usage.jsonl.1`) through
+ * `exec` and parses them. Rotated (older) records are returned before
+ * current ones so a `--since` window spanning a rotation reads in
+ * chronological order.
+ *
+ * Generations that could not be read come back in `unreadable` rather than as
+ * missing records, so the caller can render an UNREADABLE row and mark the
+ * window partial instead of reporting an unknown amount of usage as zero.
+ */
+export const readUsageLedgerViaExec = async (exec, paths) => {
+    const [rotated, primary] = await Promise.all([
+        readLedgerGeneration(exec, paths.rotatedFilePath),
+        readLedgerGeneration(exec, paths.filePath)
+    ]);
+    return {
+        // Every row is kept, across both generations: aggregates dedupe by `turn`
+        // (a replay can re-append after a rotation) and coverage reports rows that
+        // share a key but differ.
+        records: [...parseUsageLedger(rotated.text), ...parseUsageLedger(primary.text)],
+        unreadable: [rotated.failure, primary.failure].filter((failure) => failure !== undefined)
+    };
+};

package/dist/runtime/usageRequestLedger.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Pure parser for Daimon's per-model-request stream
+ * (`noopolis.daimon.turn-requests.v1`, `requests.jsonl` beside the usage
+ * ledger). Codex rows carry a `thread`; Grok broker rows carry the broker
+ * `turn`, the declared `model`, and `usage_source` (`stream`, `upstream`, or
+ * `estimated` — a conservative charge for a response without valid usage).
+ * Either may carry proxy- or rollout-measured `started_at`/`ended_at`, absent
+ * rather than substituted when not measured. No I/O happens here.
+ */
+export declare const USAGE_REQUEST_RECORD_VERSION: "noopolis.daimon.turn-requests.v1";
+export declare const USAGE_REQUEST_SOURCES: readonly ["stream", "upstream", "estimated"];
+export type UsageRequestSource = typeof USAGE_REQUEST_SOURCES[number];
+export interface UsageRequestRecord {
+    agent: string;
+    at: string;
+    cache_write: number;
+    cached_input: number;
+    ended_at?: string;
+    engine: string;
+    fresh_input: number;
+    input: number;
+    model?: string;
+    output: number;
+    reasoning?: number;
+    request: number;
+    requests: number;
+    started_at?: string;
+    thread?: string;
+    total: number;
+    turn?: string;
+    usage_source?: UsageRequestSource;
+    v: typeof USAGE_REQUEST_RECORD_VERSION;
+    wake: string;
+}
+/** One row, or `null` for a blank, torn, foreign-version, or malformed line. Never throws. */
+export declare const parseUsageRequestLedgerLine: (line: string) => UsageRequestRecord | null;
+/**
+ * Parses a whole stream, keeping the first row of each broker `(turn, request)`
+ * pair: a replayed broker turn re-appends its sealed request rows exactly as it
+ * re-appends its usage row.
+ */
+export declare const parseUsageRequestLedger: (content: string) => UsageRequestRecord[];

package/dist/runtime/usageRequestLedger.js

@@ -0,0 +1,72 @@
+/**
+ * Pure parser for Daimon's per-model-request stream
+ * (`noopolis.daimon.turn-requests.v1`, `requests.jsonl` beside the usage
+ * ledger). Codex rows carry a `thread`; Grok broker rows carry the broker
+ * `turn`, the declared `model`, and `usage_source` (`stream`, `upstream`, or
+ * `estimated` — a conservative charge for a response without valid usage).
+ * Either may carry proxy- or rollout-measured `started_at`/`ended_at`, absent
+ * rather than substituted when not measured. No I/O happens here.
+ */
+export const USAGE_REQUEST_RECORD_VERSION = "noopolis.daimon.turn-requests.v1";
+export const USAGE_REQUEST_SOURCES = ["stream", "upstream", "estimated"];
+const TIMESTAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d{1,9})?Z$/u;
+const COUNTS = ["input", "cached_input", "fresh_input", "cache_write", "output", "total"];
+const nonNegative = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0;
+const text = (value) => typeof value === "string" && value.length > 0;
+/** One row, or `null` for a blank, torn, foreign-version, or malformed line. Never throws. */
+export const parseUsageRequestLedgerLine = (line) => {
+    let parsed;
+    try {
+        parsed = JSON.parse(line.trim());
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        return null;
+    const row = parsed;
+    if (row.v !== USAGE_REQUEST_RECORD_VERSION || !text(row.agent) || !text(row.wake) || !text(row.engine) || !text(row.at) || Number.isNaN(Date.parse(row.at)))
+        return null;
+    if (!Number.isSafeInteger(row.request) || !Number.isSafeInteger(row.requests) || row.request < 0 || row.requests < 1)
+        return null;
+    if (COUNTS.some((field) => !nonNegative(row[field])))
+        return null;
+    if ((row.started_at !== undefined && !(text(row.started_at) && TIMESTAMP.test(row.started_at)))
+        || (row.ended_at !== undefined && !(text(row.ended_at) && TIMESTAMP.test(row.ended_at)))
+        || (row.usage_source !== undefined && !USAGE_REQUEST_SOURCES.includes(row.usage_source))
+        || (row.turn !== undefined && !(typeof row.turn === "string" && /^[a-f0-9]{64}$/u.test(row.turn)))
+        || (row.reasoning !== undefined && !nonNegative(row.reasoning)))
+        return null;
+    return {
+        agent: row.agent, at: row.at, cache_write: row.cache_write, cached_input: row.cached_input,
+        engine: row.engine, fresh_input: row.fresh_input, input: row.input, output: row.output,
+        request: row.request, requests: row.requests, total: row.total,
+        v: USAGE_REQUEST_RECORD_VERSION, wake: row.wake,
+        ...(row.started_at === undefined ? {} : { started_at: row.started_at }),
+        ...(row.ended_at === undefined ? {} : { ended_at: row.ended_at }),
+        ...(text(row.model) ? { model: row.model } : {}),
+        ...(row.reasoning === undefined ? {} : { reasoning: row.reasoning }),
+        ...(text(row.thread) ? { thread: row.thread } : {}),
+        ...(row.turn === undefined ? {} : { turn: row.turn }),
+        ...(row.usage_source === undefined ? {} : { usage_source: row.usage_source })
+    };
+};
+/**
+ * Parses a whole stream, keeping the first row of each broker `(turn, request)`
+ * pair: a replayed broker turn re-appends its sealed request rows exactly as it
+ * re-appends its usage row.
+ */
+export const parseUsageRequestLedger = (content) => {
+    const seen = new Set();
+    return content.split("\n").map(parseUsageRequestLedgerLine).filter((row) => {
+        if (row === null)
+            return false;
+        if (row.turn === undefined)
+            return true;
+        const key = `${row.turn}:${row.request}`;
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
+};

package/dist/shared/daimonCodexDocker.d.ts

@@ -0,0 +1,32 @@
+export declare const DAIMON_DOCKER_RUNTIME_SECURITY_ARGS: readonly ["--cap-drop=ALL", "--cap-add=CHOWN", "--cap-add=SETUID", "--cap-add=SETGID", "--cap-add=DAC_READ_SEARCH", "--cap-add=SETPCAP", "--cap-add=KILL", "--security-opt=no-new-privileges:true"];
+export declare const DAIMON_CODEX_NATIVE_SANDBOX_DOCKER_SECURITY_OPTS: readonly ["--security-opt=seccomp=unconfined", "--security-opt=apparmor=unconfined"];
+export interface DaimonEngineDockerInterop {
+    /** A strict Codex agent needs seccomp and AppArmor fully unconfined for its own bubblewrap sandbox. */
+    codex: boolean;
+    /** A brokered Grok worker needs bubblewrap's namespace syscalls: the pinned seccomp profile plus AppArmor unconfined. */
+    grok: boolean;
+}
+export declare const resolveDaimonEngineDockerInterop: (source: string) => DaimonEngineDockerInterop;
+export declare const configRequiresCodexNativeSandboxDockerInterop: (source: string) => boolean;
+export declare const DAIMON_GROK_HOST_USERNS_PREREQUISITE: "kernel.apparmor_restrict_unprivileged_userns=0";
+/**
+ * Writes the pinned Grok seccomp profile into `directory` (content-addressed,
+ * verified after writing) and returns its absolute path. Docker reads a
+ * `seccomp=<file>` option on the client at `docker run` and stores the profile
+ * in the container config, so the file only has to exist for that call.
+ */
+export declare const materializeDaimonGrokSeccompProfile: (directory: string) => Promise<string>;
+/**
+ * Docker security options for a Daimon container, by the engines its configs run.
+ *
+ * Codex's strict native sandbox needs seccomp and AppArmor fully unconfined, and
+ * that superset also lets Grok's bubblewrap run, so it wins whenever a strict
+ * Codex agent is present. Otherwise a Grok agent gets Docker's default seccomp
+ * profile plus bubblewrap's seven namespace syscalls (pinned bytes) and AppArmor
+ * unconfined — the narrowest combination under which Grok 1.0.34 starts. Grok
+ * additionally needs the Docker host to allow unprivileged user namespaces
+ * (`kernel.apparmor_restrict_unprivileged_userns=0`); the container entrypoint
+ * checks that before the broker starts.
+ */
+export declare const daimonEngineDockerSecurityArgsForConfigs: (sources: string[], grokSeccompProfilePath: () => Promise<string>) => Promise<string[]>;
+export declare const codexNativeSandboxDockerSecurityArgsForConfigs: (sources: string[]) => string[];

package/dist/shared/daimonCodexDocker.js

@@ -0,0 +1,120 @@
+import { createHash } from "node:crypto";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { DAIMON_GROK_SECCOMP_PROFILE_BYTES, DAIMON_GROK_SECCOMP_PROFILE_FILE_NAME, DAIMON_GROK_SECCOMP_PROFILE_SHA256 } from "./daimonGrokSeccompProfile.js";
+import { SpawnfileError } from "./errors.js";
+export const DAIMON_DOCKER_RUNTIME_SECURITY_ARGS = [
+    "--cap-drop=ALL",
+    "--cap-add=CHOWN",
+    "--cap-add=SETUID",
+    "--cap-add=SETGID",
+    "--cap-add=DAC_READ_SEARCH",
+    // Lets the broker launcher drop its bounding set to 00000000000000c1; without SETPCAP, setpriv --bounding-set silently no-ops.
+    "--cap-add=SETPCAP",
+    // The entrypoint supervises children dropped to uid 2100/2200+; without CAP_KILL, root cannot even kill -0 them, so a live child reads as dead.
+    "--cap-add=KILL",
+    "--security-opt=no-new-privileges:true"
+];
+export const DAIMON_CODEX_NATIVE_SANDBOX_DOCKER_SECURITY_OPTS = [
+    "--security-opt=seccomp=unconfined",
+    "--security-opt=apparmor=unconfined"
+];
+const DAIMON_CONFIG_VERSIONS = [
+    "noopolis.daimon.organization-runtime.v1",
+    "noopolis.daimon.organization-runtime.v2"
+];
+const DAIMON_CODEX_STRICT_SANDBOX = {
+    mode: "workspace-write",
+    networkAccess: false,
+    webSearch: "disabled"
+};
+const isRecord = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+const hasExactCodexStrictSandbox = (engine) => {
+    const sandbox = engine.codexSandbox;
+    if (sandbox === undefined)
+        return false;
+    if (!isRecord(sandbox)) {
+        throw new SpawnfileError("validation_error", "Daimon Codex sandbox policy has an invalid shape");
+    }
+    const expected = DAIMON_CODEX_STRICT_SANDBOX;
+    const keys = Object.keys(sandbox).sort();
+    const expectedKeys = Object.keys(expected).sort();
+    if (keys.length !== expectedKeys.length ||
+        keys.some((key, index) => key !== expectedKeys[index] || sandbox[key] !== expected[key])) {
+        throw new SpawnfileError("validation_error", "Daimon Codex sandbox policy is not the supported strict workspace-no-network policy");
+    }
+    return true;
+};
+export const resolveDaimonEngineDockerInterop = (source) => {
+    let parsed;
+    try {
+        parsed = JSON.parse(source);
+    }
+    catch {
+        throw new SpawnfileError("validation_error", "Daimon generated organization config is not JSON");
+    }
+    if (!isRecord(parsed) || !Array.isArray(parsed.agents)) {
+        throw new SpawnfileError("validation_error", "Daimon generated organization config has an invalid shape");
+    }
+    if (!DAIMON_CONFIG_VERSIONS.includes(parsed.version)) {
+        throw new SpawnfileError("validation_error", "Daimon generated organization config is not a supported v1/v2 contract");
+    }
+    const interop = { codex: false, grok: false };
+    for (const agent of parsed.agents) {
+        if (!isRecord(agent) || !isRecord(agent.engine)) {
+            throw new SpawnfileError("validation_error", "Daimon generated organization config has an invalid agent engine");
+        }
+        const kind = agent.engine.kind;
+        if (kind !== "agy" && kind !== "codex" && kind !== "grok") {
+            throw new SpawnfileError("validation_error", "Daimon generated organization config has an unsupported agent engine");
+        }
+        if (kind === "codex" && hasExactCodexStrictSandbox(agent.engine))
+            interop.codex = true;
+        if (kind === "grok")
+            interop.grok = true;
+    }
+    return interop;
+};
+export const configRequiresCodexNativeSandboxDockerInterop = (source) => resolveDaimonEngineDockerInterop(source).codex;
+export const DAIMON_GROK_HOST_USERNS_PREREQUISITE = "kernel.apparmor_restrict_unprivileged_userns=0";
+/**
+ * Writes the pinned Grok seccomp profile into `directory` (content-addressed,
+ * verified after writing) and returns its absolute path. Docker reads a
+ * `seccomp=<file>` option on the client at `docker run` and stores the profile
+ * in the container config, so the file only has to exist for that call.
+ */
+export const materializeDaimonGrokSeccompProfile = async (directory) => {
+    const target = path.resolve(directory, `${DAIMON_GROK_SECCOMP_PROFILE_SHA256.slice(0, 16)}-${DAIMON_GROK_SECCOMP_PROFILE_FILE_NAME}`);
+    await mkdir(path.dirname(target), { recursive: true });
+    await writeFile(target, DAIMON_GROK_SECCOMP_PROFILE_BYTES, { mode: 0o644 });
+    const written = await readFile(target);
+    if (createHash("sha256").update(written).digest("hex") !== DAIMON_GROK_SECCOMP_PROFILE_SHA256) {
+        throw new SpawnfileError("runtime_error", "Pinned Grok seccomp profile did not materialize byte-for-byte");
+    }
+    return target;
+};
+/**
+ * Docker security options for a Daimon container, by the engines its configs run.
+ *
+ * Codex's strict native sandbox needs seccomp and AppArmor fully unconfined, and
+ * that superset also lets Grok's bubblewrap run, so it wins whenever a strict
+ * Codex agent is present. Otherwise a Grok agent gets Docker's default seccomp
+ * profile plus bubblewrap's seven namespace syscalls (pinned bytes) and AppArmor
+ * unconfined — the narrowest combination under which Grok 1.0.34 starts. Grok
+ * additionally needs the Docker host to allow unprivileged user namespaces
+ * (`kernel.apparmor_restrict_unprivileged_userns=0`); the container entrypoint
+ * checks that before the broker starts.
+ */
+export const daimonEngineDockerSecurityArgsForConfigs = (sources, grokSeccompProfilePath) => {
+    const interop = sources.map(resolveDaimonEngineDockerInterop);
+    if (interop.some((entry) => entry.codex))
+        return Promise.resolve([...DAIMON_CODEX_NATIVE_SANDBOX_DOCKER_SECURITY_OPTS]);
+    if (!interop.some((entry) => entry.grok))
+        return Promise.resolve([]);
+    return grokSeccompProfilePath().then((profilePath) => {
+        if (!path.isAbsolute(profilePath))
+            throw new SpawnfileError("runtime_error", "Grok seccomp profile path must be absolute");
+        return [`--security-opt=seccomp=${profilePath}`, "--security-opt=apparmor=unconfined"];
+    });
+};
+export const codexNativeSandboxDockerSecurityArgsForConfigs = (sources) => sources.some(configRequiresCodexNativeSandboxDockerInterop) ? [...DAIMON_CODEX_NATIVE_SANDBOX_DOCKER_SECURITY_OPTS] : [];

package/dist/shared/daimonGrokSeccompProfile.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Docker's default seccomp profile plus the seven namespace syscalls bubblewrap
+ * needs without CAP_SYS_ADMIN (clone, clone3, unshare, mount, umount2, pivot_root,
+ * setns): the narrowest profile under which Grok 1.0.34's sandbox starts
+ * (Noopolis P0 container evidence, 2026-09-17). Bytes are pinned by sha256; Daimon's
+ * Grok broker projection and slot preflight receipt bind the same digest.
+ */
+export declare const DAIMON_GROK_SECCOMP_PROFILE_FILE_NAME: "seccomp-default-plus-userns.json";
+export declare const DAIMON_GROK_SECCOMP_PROFILE_SHA256: "9666074d2d6b1a261a410598b9ce1714d9060a6ef4c9c1d1cfb6f8915d7e842a";
+export declare const DAIMON_GROK_SECCOMP_PROFILE_BYTES = "{\n \"defaultAction\": \"SCMP_ACT_ERRNO\",\n \"defaultErrnoRet\": 1,\n \"archMap\": [\n  {\n   \"architecture\": \"SCMP_ARCH_X86_64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_X86\",\n    \"SCMP_ARCH_X32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_AARCH64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_ARM\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPS64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPS\",\n    \"SCMP_ARCH_MIPS64N32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPS64N32\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPS\",\n    \"SCMP_ARCH_MIPS64\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPSEL64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPSEL\",\n    \"SCMP_ARCH_MIPSEL64N32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPSEL64N32\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPSEL\",\n    \"SCMP_ARCH_MIPSEL64\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_S390X\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_S390\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_RISCV64\",\n   \"subArchitectures\": null\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_LOONGARCH64\",\n   \"subArchitectures\": null\n  }\n ],\n \"syscalls\": [\n  {\n   \"names\": [\n    \"clone\",\n    \"clone3\",\n    \"unshare\",\n    \"mount\",\n    \"umount2\",\n    \"pivot_root\",\n    \"setns\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"comment\": \"P0 spike: userns/mount syscalls bubblewrap needs, without CAP_SYS_ADMIN\"\n  },\n  {\n   \"names\": [\n    \"accept\",\n    \"accept4\",\n    \"access\",\n    \"adjtimex\",\n    \"alarm\",\n    \"bind\",\n    \"brk\",\n    \"cachestat\",\n    \"capget\",\n    \"capset\",\n    \"chdir\",\n    \"chmod\",\n    \"chown\",\n    \"chown32\",\n    \"clock_adjtime\",\n    \"clock_adjtime64\",\n    \"clock_getres\",\n    \"clock_getres_time64\",\n    \"clock_gettime\",\n    \"clock_gettime64\",\n    \"clock_nanosleep\",\n    \"clock_nanosleep_time64\",\n    \"close\",\n    \"close_range\",\n    \"connect\",\n    \"copy_file_range\",\n    \"creat\",\n    \"dup\",\n    \"dup2\",\n    \"dup3\",\n    \"epoll_create\",\n    \"epoll_create1\",\n    \"epoll_ctl\",\n    \"epoll_ctl_old\",\n    \"epoll_pwait\",\n    \"epoll_pwait2\",\n    \"epoll_wait\",\n    \"epoll_wait_old\",\n    \"eventfd\",\n    \"eventfd2\",\n    \"execve\",\n    \"execveat\",\n    \"exit\",\n    \"exit_group\",\n    \"faccessat\",\n    \"faccessat2\",\n    \"fadvise64\",\n    \"fadvise64_64\",\n    \"fallocate\",\n    \"fanotify_mark\",\n    \"fchdir\",\n    \"fchmod\",\n    \"fchmodat\",\n    \"fchmodat2\",\n    \"fchown\",\n    \"fchown32\",\n    \"fchownat\",\n    \"fcntl\",\n    \"fcntl64\",\n    \"fdatasync\",\n    \"fgetxattr\",\n    \"flistxattr\",\n    \"flock\",\n    \"fork\",\n    \"fremovexattr\",\n    \"fsetxattr\",\n    \"fstat\",\n    \"fstat64\",\n    \"fstatat64\",\n    \"fstatfs\",\n    \"fstatfs64\",\n    \"fsync\",\n    \"ftruncate\",\n    \"ftruncate64\",\n    \"futex\",\n    \"futex_requeue\",\n    \"futex_time64\",\n    \"futex_wait\",\n    \"futex_waitv\",\n    \"futex_wake\",\n    \"futimesat\",\n    \"getcpu\",\n    \"getcwd\",\n    \"getdents\",\n    \"getdents64\",\n    \"getegid\",\n    \"getegid32\",\n    \"geteuid\",\n    \"geteuid32\",\n    \"getgid\",\n    \"getgid32\",\n    \"getgroups\",\n    \"getgroups32\",\n    \"getitimer\",\n    \"getpeername\",\n    \"getpgid\",\n    \"getpgrp\",\n    \"getpid\",\n    \"getppid\",\n    \"getpriority\",\n    \"getrandom\",\n    \"getresgid\",\n    \"getresgid32\",\n    \"getresuid\",\n    \"getresuid32\",\n    \"getrlimit\",\n    \"get_robust_list\",\n    \"getrusage\",\n    \"getsid\",\n    \"getsockname\",\n    \"getsockopt\",\n    \"get_thread_area\",\n    \"gettid\",\n    \"gettimeofday\",\n    \"getuid\",\n    \"getuid32\",\n    \"getxattr\",\n    \"getxattrat\",\n    \"inotify_add_watch\",\n    \"inotify_init\",\n    \"inotify_init1\",\n    \"inotify_rm_watch\",\n    \"io_cancel\",\n    \"ioctl\",\n    \"io_destroy\",\n    \"io_getevents\",\n    \"io_pgetevents\",\n    \"io_pgetevents_time64\",\n    \"ioprio_get\",\n    \"ioprio_set\",\n    \"io_setup\",\n    \"io_submit\",\n    \"ipc\",\n    \"kill\",\n    \"landlock_add_rule\",\n    \"landlock_create_ruleset\",\n    \"landlock_restrict_self\",\n    \"lchown\",\n    \"lchown32\",\n    \"lgetxattr\",\n    \"link\",\n    \"linkat\",\n    \"listen\",\n    \"listmount\",\n    \"listxattr\",\n    \"listxattrat\",\n    \"llistxattr\",\n    \"_llseek\",\n    \"lremovexattr\",\n    \"lseek\",\n    \"lsetxattr\",\n    \"lstat\",\n    \"lstat64\",\n    \"madvise\",\n    \"map_shadow_stack\",\n    \"membarrier\",\n    \"memfd_create\",\n    \"memfd_secret\",\n    \"mincore\",\n    \"mkdir\",\n    \"mkdirat\",\n    \"mknod\",\n    \"mknodat\",\n    \"mlock\",\n    \"mlock2\",\n    \"mlockall\",\n    \"mmap\",\n    \"mmap2\",\n    \"mprotect\",\n    \"mq_getsetattr\",\n    \"mq_notify\",\n    \"mq_open\",\n    \"mq_timedreceive\",\n    \"mq_timedreceive_time64\",\n    \"mq_timedsend\",\n    \"mq_timedsend_time64\",\n    \"mq_unlink\",\n    \"mremap\",\n    \"mseal\",\n    \"msgctl\",\n    \"msgget\",\n    \"msgrcv\",\n    \"msgsnd\",\n    \"msync\",\n    \"munlock\",\n    \"munlockall\",\n    \"munmap\",\n    \"name_to_handle_at\",\n    \"nanosleep\",\n    \"newfstatat\",\n    \"_newselect\",\n    \"open\",\n    \"openat\",\n    \"openat2\",\n    \"pause\",\n    \"pidfd_open\",\n    \"pidfd_send_signal\",\n    \"pipe\",\n    \"pipe2\",\n    \"pkey_alloc\",\n    \"pkey_free\",\n    \"pkey_mprotect\",\n    \"poll\",\n    \"ppoll\",\n    \"ppoll_time64\",\n    \"prctl\",\n    \"pread64\",\n    \"preadv\",\n    \"preadv2\",\n    \"prlimit64\",\n    \"process_mrelease\",\n    \"pselect6\",\n    \"pselect6_time64\",\n    \"pwrite64\",\n    \"pwritev\",\n    \"pwritev2\",\n    \"read\",\n    \"readahead\",\n    \"readlink\",\n    \"readlinkat\",\n    \"readv\",\n    \"recv\",\n    \"recvfrom\",\n    \"recvmmsg\",\n    \"recvmmsg_time64\",\n    \"recvmsg\",\n    \"remap_file_pages\",\n    \"removexattr\",\n    \"removexattrat\",\n    \"rename\",\n    \"renameat\",\n    \"renameat2\",\n    \"restart_syscall\",\n    \"riscv_hwprobe\",\n    \"rmdir\",\n    \"rseq\",\n    \"rt_sigaction\",\n    \"rt_sigpending\",\n    \"rt_sigprocmask\",\n    \"rt_sigqueueinfo\",\n    \"rt_sigreturn\",\n    \"rt_sigsuspend\",\n    \"rt_sigtimedwait\",\n    \"rt_sigtimedwait_time64\",\n    \"rt_tgsigqueueinfo\",\n    \"sched_getaffinity\",\n    \"sched_getattr\",\n    \"sched_getparam\",\n    \"sched_get_priority_max\",\n    \"sched_get_priority_min\",\n    \"sched_getscheduler\",\n    \"sched_rr_get_interval\",\n    \"sched_rr_get_interval_time64\",\n    \"sched_setaffinity\",\n    \"sched_setattr\",\n    \"sched_setparam\",\n    \"sched_setscheduler\",\n    \"sched_yield\",\n    \"seccomp\",\n    \"select\",\n    \"semctl\",\n    \"semget\",\n    \"semop\",\n    \"semtimedop\",\n    \"semtimedop_time64\",\n    \"send\",\n    \"sendfile\",\n    \"sendfile64\",\n    \"sendmmsg\",\n    \"sendmsg\",\n    \"sendto\",\n    \"setfsgid\",\n    \"setfsgid32\",\n    \"setfsuid\",\n    \"setfsuid32\",\n    \"setgid\",\n    \"setgid32\",\n    \"setgroups\",\n    \"setgroups32\",\n    \"setitimer\",\n    \"setpgid\",\n    \"setpriority\",\n    \"setregid\",\n    \"setregid32\",\n    \"setresgid\",\n    \"setresgid32\",\n    \"setresuid\",\n    \"setresuid32\",\n    \"setreuid\",\n    \"setreuid32\",\n    \"setrlimit\",\n    \"set_robust_list\",\n    \"setsid\",\n    \"setsockopt\",\n    \"set_thread_area\",\n    \"set_tid_address\",\n    \"setuid\",\n    \"setuid32\",\n    \"setxattr\",\n    \"setxattrat\",\n    \"shmat\",\n    \"shmctl\",\n    \"shmdt\",\n    \"shmget\",\n    \"shutdown\",\n    \"sigaltstack\",\n    \"signalfd\",\n    \"signalfd4\",\n    \"sigprocmask\",\n    \"sigreturn\",\n    \"socketcall\",\n    \"socketpair\",\n    \"splice\",\n    \"stat\",\n    \"stat64\",\n    \"statfs\",\n    \"statfs64\",\n    \"statmount\",\n    \"statx\",\n    \"symlink\",\n    \"symlinkat\",\n    \"sync\",\n    \"sync_file_range\",\n    \"syncfs\",\n    \"sysinfo\",\n    \"tee\",\n    \"tgkill\",\n    \"time\",\n    \"timer_create\",\n    \"timer_delete\",\n    \"timer_getoverrun\",\n    \"timer_gettime\",\n    \"timer_gettime64\",\n    \"timer_settime\",\n    \"timer_settime64\",\n    \"timerfd_create\",\n    \"timerfd_gettime\",\n    \"timerfd_gettime64\",\n    \"timerfd_settime\",\n    \"timerfd_settime64\",\n    \"times\",\n    \"tkill\",\n    \"truncate\",\n    \"truncate64\",\n    \"ugetrlimit\",\n    \"umask\",\n    \"uname\",\n    \"unlink\",\n    \"unlinkat\",\n    \"uretprobe\",\n    \"utime\",\n    \"utimensat\",\n    \"utimensat_time64\",\n    \"utimes\",\n    \"vfork\",\n    \"vmsplice\",\n    \"wait4\",\n    \"waitid\",\n    \"waitpid\",\n    \"write\",\n    \"writev\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\"\n  },\n  {\n   \"names\": [\n    \"process_vm_readv\",\n    \"process_vm_writev\",\n    \"ptrace\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"minKernel\": \"4.8\"\n   }\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 38,\n     \"op\": \"SCMP_CMP_LT\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 39,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 41,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 42,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 43,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 44,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 45,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 0,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 8,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 131072,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 131080,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 4294967295,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"sync_file_range2\",\n    \"swapcontext\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"ppc64le\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"arm_fadvise64_64\",\n    \"arm_sync_file_range\",\n    \"sync_file_range2\",\n    \"breakpoint\",\n    \"cacheflush\",\n    \"set_tls\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"arm\",\n     \"arm64\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"arch_prctl\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"amd64\",\n     \"x32\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"modify_ldt\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"amd64\",\n     \"x32\",\n     \"x86\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"s390_pci_mmio_read\",\n    \"s390_pci_mmio_write\",\n    \"s390_runtime_instr\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"riscv_flush_icache\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"riscv64\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"open_by_handle_at\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_DAC_READ_SEARCH\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"bpf\",\n    \"clone\",\n    \"clone3\",\n    \"fanotify_init\",\n    \"fsconfig\",\n    \"fsmount\",\n    \"fsopen\",\n    \"fspick\",\n    \"lookup_dcookie\",\n    \"lsm_get_self_attr\",\n    \"lsm_list_modules\",\n    \"lsm_set_self_attr\",\n    \"mount\",\n    \"mount_setattr\",\n    \"move_mount\",\n    \"open_tree\",\n    \"perf_event_open\",\n    \"quotactl\",\n    \"quotactl_fd\",\n    \"setdomainname\",\n    \"sethostname\",\n    \"setns\",\n    \"syslog\",\n    \"umount\",\n    \"umount2\",\n    \"unshare\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"clone\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 2114060288,\n     \"op\": \"SCMP_CMP_MASKED_EQ\"\n    }\n   ],\n   \"excludes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ],\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"clone\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 1,\n     \"value\": 2114060288,\n     \"op\": \"SCMP_CMP_MASKED_EQ\"\n    }\n   ],\n   \"comment\": \"s390 parameter ordering for clone is different\",\n   \"includes\": {\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   },\n   \"excludes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"reboot\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_BOOT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"chroot\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_CHROOT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"delete_module\",\n    \"init_module\",\n    \"finit_module\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_MODULE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"acct\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_PACCT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"kcmp\",\n    \"pidfd_getfd\",\n    \"process_madvise\",\n    \"process_vm_readv\",\n    \"process_vm_writev\",\n    \"ptrace\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_PTRACE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"iopl\",\n    \"ioperm\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_RAWIO\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"settimeofday\",\n    \"stime\",\n    \"clock_settime\",\n    \"clock_settime64\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_TIME\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"vhangup\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_TTY_CONFIG\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"get_mempolicy\",\n    \"mbind\",\n    \"set_mempolicy\",\n    \"set_mempolicy_home_node\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_NICE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"syslog\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYSLOG\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"bpf\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_BPF\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"perf_event_open\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_PERFMON\"\n    ]\n   }\n  }\n ]\n}";

package/dist/shared/daimonGrokSeccompProfile.js

@@ -0,0 +1,11 @@
+/* v8 ignore file -- pinned data module */
+/**
+ * Docker's default seccomp profile plus the seven namespace syscalls bubblewrap
+ * needs without CAP_SYS_ADMIN (clone, clone3, unshare, mount, umount2, pivot_root,
+ * setns): the narrowest profile under which Grok 1.0.34's sandbox starts
+ * (Noopolis P0 container evidence, 2026-09-17). Bytes are pinned by sha256; Daimon's
+ * Grok broker projection and slot preflight receipt bind the same digest.
+ */
+export const DAIMON_GROK_SECCOMP_PROFILE_FILE_NAME = "seccomp-default-plus-userns.json";
+export const DAIMON_GROK_SECCOMP_PROFILE_SHA256 = "9666074d2d6b1a261a410598b9ce1714d9060a6ef4c9c1d1cfb6f8915d7e842a";
+export const DAIMON_GROK_SECCOMP_PROFILE_BYTES = "{\n \"defaultAction\": \"SCMP_ACT_ERRNO\",\n \"defaultErrnoRet\": 1,\n \"archMap\": [\n  {\n   \"architecture\": \"SCMP_ARCH_X86_64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_X86\",\n    \"SCMP_ARCH_X32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_AARCH64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_ARM\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPS64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPS\",\n    \"SCMP_ARCH_MIPS64N32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPS64N32\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPS\",\n    \"SCMP_ARCH_MIPS64\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPSEL64\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPSEL\",\n    \"SCMP_ARCH_MIPSEL64N32\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_MIPSEL64N32\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_MIPSEL\",\n    \"SCMP_ARCH_MIPSEL64\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_S390X\",\n   \"subArchitectures\": [\n    \"SCMP_ARCH_S390\"\n   ]\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_RISCV64\",\n   \"subArchitectures\": null\n  },\n  {\n   \"architecture\": \"SCMP_ARCH_LOONGARCH64\",\n   \"subArchitectures\": null\n  }\n ],\n \"syscalls\": [\n  {\n   \"names\": [\n    \"clone\",\n    \"clone3\",\n    \"unshare\",\n    \"mount\",\n    \"umount2\",\n    \"pivot_root\",\n    \"setns\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"comment\": \"P0 spike: userns/mount syscalls bubblewrap needs, without CAP_SYS_ADMIN\"\n  },\n  {\n   \"names\": [\n    \"accept\",\n    \"accept4\",\n    \"access\",\n    \"adjtimex\",\n    \"alarm\",\n    \"bind\",\n    \"brk\",\n    \"cachestat\",\n    \"capget\",\n    \"capset\",\n    \"chdir\",\n    \"chmod\",\n    \"chown\",\n    \"chown32\",\n    \"clock_adjtime\",\n    \"clock_adjtime64\",\n    \"clock_getres\",\n    \"clock_getres_time64\",\n    \"clock_gettime\",\n    \"clock_gettime64\",\n    \"clock_nanosleep\",\n    \"clock_nanosleep_time64\",\n    \"close\",\n    \"close_range\",\n    \"connect\",\n    \"copy_file_range\",\n    \"creat\",\n    \"dup\",\n    \"dup2\",\n    \"dup3\",\n    \"epoll_create\",\n    \"epoll_create1\",\n    \"epoll_ctl\",\n    \"epoll_ctl_old\",\n    \"epoll_pwait\",\n    \"epoll_pwait2\",\n    \"epoll_wait\",\n    \"epoll_wait_old\",\n    \"eventfd\",\n    \"eventfd2\",\n    \"execve\",\n    \"execveat\",\n    \"exit\",\n    \"exit_group\",\n    \"faccessat\",\n    \"faccessat2\",\n    \"fadvise64\",\n    \"fadvise64_64\",\n    \"fallocate\",\n    \"fanotify_mark\",\n    \"fchdir\",\n    \"fchmod\",\n    \"fchmodat\",\n    \"fchmodat2\",\n    \"fchown\",\n    \"fchown32\",\n    \"fchownat\",\n    \"fcntl\",\n    \"fcntl64\",\n    \"fdatasync\",\n    \"fgetxattr\",\n    \"flistxattr\",\n    \"flock\",\n    \"fork\",\n    \"fremovexattr\",\n    \"fsetxattr\",\n    \"fstat\",\n    \"fstat64\",\n    \"fstatat64\",\n    \"fstatfs\",\n    \"fstatfs64\",\n    \"fsync\",\n    \"ftruncate\",\n    \"ftruncate64\",\n    \"futex\",\n    \"futex_requeue\",\n    \"futex_time64\",\n    \"futex_wait\",\n    \"futex_waitv\",\n    \"futex_wake\",\n    \"futimesat\",\n    \"getcpu\",\n    \"getcwd\",\n    \"getdents\",\n    \"getdents64\",\n    \"getegid\",\n    \"getegid32\",\n    \"geteuid\",\n    \"geteuid32\",\n    \"getgid\",\n    \"getgid32\",\n    \"getgroups\",\n    \"getgroups32\",\n    \"getitimer\",\n    \"getpeername\",\n    \"getpgid\",\n    \"getpgrp\",\n    \"getpid\",\n    \"getppid\",\n    \"getpriority\",\n    \"getrandom\",\n    \"getresgid\",\n    \"getresgid32\",\n    \"getresuid\",\n    \"getresuid32\",\n    \"getrlimit\",\n    \"get_robust_list\",\n    \"getrusage\",\n    \"getsid\",\n    \"getsockname\",\n    \"getsockopt\",\n    \"get_thread_area\",\n    \"gettid\",\n    \"gettimeofday\",\n    \"getuid\",\n    \"getuid32\",\n    \"getxattr\",\n    \"getxattrat\",\n    \"inotify_add_watch\",\n    \"inotify_init\",\n    \"inotify_init1\",\n    \"inotify_rm_watch\",\n    \"io_cancel\",\n    \"ioctl\",\n    \"io_destroy\",\n    \"io_getevents\",\n    \"io_pgetevents\",\n    \"io_pgetevents_time64\",\n    \"ioprio_get\",\n    \"ioprio_set\",\n    \"io_setup\",\n    \"io_submit\",\n    \"ipc\",\n    \"kill\",\n    \"landlock_add_rule\",\n    \"landlock_create_ruleset\",\n    \"landlock_restrict_self\",\n    \"lchown\",\n    \"lchown32\",\n    \"lgetxattr\",\n    \"link\",\n    \"linkat\",\n    \"listen\",\n    \"listmount\",\n    \"listxattr\",\n    \"listxattrat\",\n    \"llistxattr\",\n    \"_llseek\",\n    \"lremovexattr\",\n    \"lseek\",\n    \"lsetxattr\",\n    \"lstat\",\n    \"lstat64\",\n    \"madvise\",\n    \"map_shadow_stack\",\n    \"membarrier\",\n    \"memfd_create\",\n    \"memfd_secret\",\n    \"mincore\",\n    \"mkdir\",\n    \"mkdirat\",\n    \"mknod\",\n    \"mknodat\",\n    \"mlock\",\n    \"mlock2\",\n    \"mlockall\",\n    \"mmap\",\n    \"mmap2\",\n    \"mprotect\",\n    \"mq_getsetattr\",\n    \"mq_notify\",\n    \"mq_open\",\n    \"mq_timedreceive\",\n    \"mq_timedreceive_time64\",\n    \"mq_timedsend\",\n    \"mq_timedsend_time64\",\n    \"mq_unlink\",\n    \"mremap\",\n    \"mseal\",\n    \"msgctl\",\n    \"msgget\",\n    \"msgrcv\",\n    \"msgsnd\",\n    \"msync\",\n    \"munlock\",\n    \"munlockall\",\n    \"munmap\",\n    \"name_to_handle_at\",\n    \"nanosleep\",\n    \"newfstatat\",\n    \"_newselect\",\n    \"open\",\n    \"openat\",\n    \"openat2\",\n    \"pause\",\n    \"pidfd_open\",\n    \"pidfd_send_signal\",\n    \"pipe\",\n    \"pipe2\",\n    \"pkey_alloc\",\n    \"pkey_free\",\n    \"pkey_mprotect\",\n    \"poll\",\n    \"ppoll\",\n    \"ppoll_time64\",\n    \"prctl\",\n    \"pread64\",\n    \"preadv\",\n    \"preadv2\",\n    \"prlimit64\",\n    \"process_mrelease\",\n    \"pselect6\",\n    \"pselect6_time64\",\n    \"pwrite64\",\n    \"pwritev\",\n    \"pwritev2\",\n    \"read\",\n    \"readahead\",\n    \"readlink\",\n    \"readlinkat\",\n    \"readv\",\n    \"recv\",\n    \"recvfrom\",\n    \"recvmmsg\",\n    \"recvmmsg_time64\",\n    \"recvmsg\",\n    \"remap_file_pages\",\n    \"removexattr\",\n    \"removexattrat\",\n    \"rename\",\n    \"renameat\",\n    \"renameat2\",\n    \"restart_syscall\",\n    \"riscv_hwprobe\",\n    \"rmdir\",\n    \"rseq\",\n    \"rt_sigaction\",\n    \"rt_sigpending\",\n    \"rt_sigprocmask\",\n    \"rt_sigqueueinfo\",\n    \"rt_sigreturn\",\n    \"rt_sigsuspend\",\n    \"rt_sigtimedwait\",\n    \"rt_sigtimedwait_time64\",\n    \"rt_tgsigqueueinfo\",\n    \"sched_getaffinity\",\n    \"sched_getattr\",\n    \"sched_getparam\",\n    \"sched_get_priority_max\",\n    \"sched_get_priority_min\",\n    \"sched_getscheduler\",\n    \"sched_rr_get_interval\",\n    \"sched_rr_get_interval_time64\",\n    \"sched_setaffinity\",\n    \"sched_setattr\",\n    \"sched_setparam\",\n    \"sched_setscheduler\",\n    \"sched_yield\",\n    \"seccomp\",\n    \"select\",\n    \"semctl\",\n    \"semget\",\n    \"semop\",\n    \"semtimedop\",\n    \"semtimedop_time64\",\n    \"send\",\n    \"sendfile\",\n    \"sendfile64\",\n    \"sendmmsg\",\n    \"sendmsg\",\n    \"sendto\",\n    \"setfsgid\",\n    \"setfsgid32\",\n    \"setfsuid\",\n    \"setfsuid32\",\n    \"setgid\",\n    \"setgid32\",\n    \"setgroups\",\n    \"setgroups32\",\n    \"setitimer\",\n    \"setpgid\",\n    \"setpriority\",\n    \"setregid\",\n    \"setregid32\",\n    \"setresgid\",\n    \"setresgid32\",\n    \"setresuid\",\n    \"setresuid32\",\n    \"setreuid\",\n    \"setreuid32\",\n    \"setrlimit\",\n    \"set_robust_list\",\n    \"setsid\",\n    \"setsockopt\",\n    \"set_thread_area\",\n    \"set_tid_address\",\n    \"setuid\",\n    \"setuid32\",\n    \"setxattr\",\n    \"setxattrat\",\n    \"shmat\",\n    \"shmctl\",\n    \"shmdt\",\n    \"shmget\",\n    \"shutdown\",\n    \"sigaltstack\",\n    \"signalfd\",\n    \"signalfd4\",\n    \"sigprocmask\",\n    \"sigreturn\",\n    \"socketcall\",\n    \"socketpair\",\n    \"splice\",\n    \"stat\",\n    \"stat64\",\n    \"statfs\",\n    \"statfs64\",\n    \"statmount\",\n    \"statx\",\n    \"symlink\",\n    \"symlinkat\",\n    \"sync\",\n    \"sync_file_range\",\n    \"syncfs\",\n    \"sysinfo\",\n    \"tee\",\n    \"tgkill\",\n    \"time\",\n    \"timer_create\",\n    \"timer_delete\",\n    \"timer_getoverrun\",\n    \"timer_gettime\",\n    \"timer_gettime64\",\n    \"timer_settime\",\n    \"timer_settime64\",\n    \"timerfd_create\",\n    \"timerfd_gettime\",\n    \"timerfd_gettime64\",\n    \"timerfd_settime\",\n    \"timerfd_settime64\",\n    \"times\",\n    \"tkill\",\n    \"truncate\",\n    \"truncate64\",\n    \"ugetrlimit\",\n    \"umask\",\n    \"uname\",\n    \"unlink\",\n    \"unlinkat\",\n    \"uretprobe\",\n    \"utime\",\n    \"utimensat\",\n    \"utimensat_time64\",\n    \"utimes\",\n    \"vfork\",\n    \"vmsplice\",\n    \"wait4\",\n    \"waitid\",\n    \"waitpid\",\n    \"write\",\n    \"writev\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\"\n  },\n  {\n   \"names\": [\n    \"process_vm_readv\",\n    \"process_vm_writev\",\n    \"ptrace\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"minKernel\": \"4.8\"\n   }\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 38,\n     \"op\": \"SCMP_CMP_LT\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 39,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 41,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 42,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 43,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 44,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"socket\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 45,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 0,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 8,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 131072,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 131080,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"personality\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 4294967295,\n     \"op\": \"SCMP_CMP_EQ\"\n    }\n   ]\n  },\n  {\n   \"names\": [\n    \"sync_file_range2\",\n    \"swapcontext\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"ppc64le\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"arm_fadvise64_64\",\n    \"arm_sync_file_range\",\n    \"sync_file_range2\",\n    \"breakpoint\",\n    \"cacheflush\",\n    \"set_tls\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"arm\",\n     \"arm64\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"arch_prctl\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"amd64\",\n     \"x32\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"modify_ldt\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"amd64\",\n     \"x32\",\n     \"x86\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"s390_pci_mmio_read\",\n    \"s390_pci_mmio_write\",\n    \"s390_runtime_instr\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"riscv_flush_icache\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"arches\": [\n     \"riscv64\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"open_by_handle_at\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_DAC_READ_SEARCH\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"bpf\",\n    \"clone\",\n    \"clone3\",\n    \"fanotify_init\",\n    \"fsconfig\",\n    \"fsmount\",\n    \"fsopen\",\n    \"fspick\",\n    \"lookup_dcookie\",\n    \"lsm_get_self_attr\",\n    \"lsm_list_modules\",\n    \"lsm_set_self_attr\",\n    \"mount\",\n    \"mount_setattr\",\n    \"move_mount\",\n    \"open_tree\",\n    \"perf_event_open\",\n    \"quotactl\",\n    \"quotactl_fd\",\n    \"setdomainname\",\n    \"sethostname\",\n    \"setns\",\n    \"syslog\",\n    \"umount\",\n    \"umount2\",\n    \"unshare\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"clone\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 0,\n     \"value\": 2114060288,\n     \"op\": \"SCMP_CMP_MASKED_EQ\"\n    }\n   ],\n   \"excludes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ],\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"clone\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"args\": [\n    {\n     \"index\": 1,\n     \"value\": 2114060288,\n     \"op\": \"SCMP_CMP_MASKED_EQ\"\n    }\n   ],\n   \"comment\": \"s390 parameter ordering for clone is different\",\n   \"includes\": {\n    \"arches\": [\n     \"s390\",\n     \"s390x\"\n    ]\n   },\n   \"excludes\": {\n    \"caps\": [\n     \"CAP_SYS_ADMIN\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"reboot\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_BOOT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"chroot\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_CHROOT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"delete_module\",\n    \"init_module\",\n    \"finit_module\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_MODULE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"acct\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_PACCT\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"kcmp\",\n    \"pidfd_getfd\",\n    \"process_madvise\",\n    \"process_vm_readv\",\n    \"process_vm_writev\",\n    \"ptrace\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_PTRACE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"iopl\",\n    \"ioperm\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_RAWIO\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"settimeofday\",\n    \"stime\",\n    \"clock_settime\",\n    \"clock_settime64\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_TIME\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"vhangup\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_TTY_CONFIG\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"get_mempolicy\",\n    \"mbind\",\n    \"set_mempolicy\",\n    \"set_mempolicy_home_node\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYS_NICE\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"syslog\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_SYSLOG\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"bpf\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_BPF\"\n    ]\n   }\n  },\n  {\n   \"names\": [\n    \"perf_event_open\"\n   ],\n   \"action\": \"SCMP_ACT_ALLOW\",\n   \"includes\": {\n    \"caps\": [\n     \"CAP_PERFMON\"\n    ]\n   }\n  }\n ]\n}";

package/dist/shared/index.d.ts

@@ -2,3 +2,5 @@ export * from "./constants.js";
 export * from "./errors.js";
 export * from "./redaction.js";
 export * from "./types.js";
+export * from "./volumeNames.js";
+export * from "./daimonCodexDocker.js";

package/dist/shared/index.js

@@ -2,3 +2,5 @@ export * from "./constants.js";
 export * from "./errors.js";
 export * from "./redaction.js";
 export * from "./types.js";
+export * from "./volumeNames.js";
+export * from "./daimonCodexDocker.js";

package/dist/shared/types.d.ts

@@ -1,6 +1,6 @@
 export type JsonPrimitive = boolean | null | number | string;
 export type JsonValue = JsonObject | JsonPrimitive | JsonValue[];
-export type ModelAuthMethod = "api_key" | "claude-code" | "codex" | "none";
+export type ModelAuthMethod = "api_key" | "claude-code" | "codex" | "grok" | "none";
 export type ModelEndpointCompatibility = "anthropic" | "openai";
 export type RuntimeLifecycleStatus = "active" | "deprecated" | "exploratory";
 export interface JsonObject {

package/dist/shared/volumeNames.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Host-stable name for state that must be reattached, never cloned, across
+ * run and deployment identities. The mount id is compiler-owned and the
+ * digest prevents normalization collisions.
+ */
+export declare const createExclusiveReattachVolumeName: (lineage: string, mountId: string) => string;

package/dist/shared/volumeNames.js

@@ -0,0 +1,14 @@
+import { createHash } from "node:crypto";
+/**
+ * Host-stable name for state that must be reattached, never cloned, across
+ * run and deployment identities. The mount id is compiler-owned and the
+ * digest prevents normalization collisions.
+ */
+export const createExclusiveReattachVolumeName = (lineage, mountId) => {
+    const safe = mountId
+        .replace(/[^A-Za-z0-9_.-]+/gu, "-")
+        .replace(/^-+|-+$/gu, "")
+        .slice(0, 48) || "realm";
+    const digest = createHash("sha256").update(lineage, "utf8").update("\0").update(mountId, "utf8").digest("hex").slice(0, 16);
+    return `spawnfile-exclusive-${safe}-${digest}`;
+};