spawnfile 0.1.24 → 0.1.27

package/dist/runtime/daimon/training/native/grok-fixtures.js

@@ -0,0 +1,179 @@
+import { chmod, copyFile, mkdir, writeFile } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { grokProjectionSha256, grokWorkerConfigPins } from './receipt/grok.js';
+/** Byte-exact outputs from Daimon public projection v3 resolver. */
+export const daimonProjectionGolden = {
+    "version": "noopolis.daimon.grok-broker-projection.v3",
+    "agentId": "foreman",
+    "workspacePath": "/var/lib/spawnfile/instance/workspace/agents/foreman",
+    "runtimeHomePath": "/var/lib/spawnfile/instance/homes/foreman",
+    "workerUid": 2200,
+    "slot": 0,
+    "profilePath": "/var/lib/daimon-workers/2200/.grok/sandbox.toml",
+    "profileSha256": "efbc0366c3f754a23aceed7cb063ce67b49ee1b87956542c2193e6c34b45e761",
+    "denyPaths": [
+        "/run/spawnfile-training",
+        "/run/spawnfile-training/control",
+        "/run/training/inputs",
+        "/var/lib/spawnfile/daimon/grok-bootstrap-auth",
+        "/var/lib/spawnfile/daimon/grok-subscription-realm"
+    ],
+    "workerConfigSha256": "ab58499ac32678097c146479896f2b8a8e2b0e39aea22dc0a60b6227e370538e",
+    "workerConfigVariant": "unclocked",
+    "systemPromptSha256": "2c31c0085a54a4efbf9c0cf0b8124c56e47f38691b7f0c7fa233a74abaa8ddf8",
+    "grokCliVersion": "1.0.34",
+    "grokExecutableSha256": "39ab87666877d64ef3a40aa60fbe0c3b6a6acd7001b78fe60e2c76bb6cfc4a94",
+    "nativeAbiVersion": 2,
+    "model": "grok-4.6",
+    "reasoningEffort": "low",
+    "limits": {
+        "maxRequests": 24,
+        "maxTokens": 400000,
+        "timeoutMs": 480000
+    },
+    "usageLedgerPath": "/run/daimon-slots/0/usage/usage.jsonl",
+    "seccompProfileSha256": "7777777777777777777777777777777777777777777777777777777777777777",
+    "attestation": {
+        "platform": "linux/landlock",
+        "enforced": true,
+        "restrictNetwork": true,
+        "profileName": "daimon-strict",
+        "sandboxRuntime": "bubblewrap",
+        "eventsPath": "/var/lib/daimon-workers/2200/.grok/sessions/sandbox-events.jsonl"
+    }
+};
+export const daimonProjectionGoldenSha256 = 'eb9fe5430db97b3e9aea8d3a4ec4b2a4771db15917d7c41594338599d96932f5';
+export const daimonClockedProjectionGolden = {
+    "version": "noopolis.daimon.grok-broker-projection.v3",
+    "agentId": "foreman",
+    "workspacePath": "/var/lib/spawnfile/instance/workspace/agents/foreman",
+    "runtimeHomePath": "/var/lib/spawnfile/instance/homes/foreman",
+    "workerUid": 2200,
+    "slot": 0,
+    "profilePath": "/var/lib/daimon-workers/2200/.grok/sandbox.toml",
+    "profileSha256": "efbc0366c3f754a23aceed7cb063ce67b49ee1b87956542c2193e6c34b45e761",
+    "denyPaths": [
+        "/run/spawnfile-training",
+        "/run/spawnfile-training/control",
+        "/run/training/inputs",
+        "/var/lib/spawnfile/daimon/grok-bootstrap-auth",
+        "/var/lib/spawnfile/daimon/grok-subscription-realm"
+    ],
+    "workerConfigSha256": "751f1dcd04983e5e5883df5a8fefa04f201e187e5ef1f344d3bf83f950830432",
+    "workerConfigVariant": "clocked",
+    "taskClock": {
+        "preloadPath": "/usr/local/lib/daimon/libfaketime.so.1",
+        "timestampFilePath": "/run/daimon-engine-broker/task-clock/slot-0/faketime",
+        "directoryPath": "/run/daimon-engine-broker/task-clock/slot-0",
+        "rootDirectoryPath": "/run/daimon-engine-broker/task-clock",
+        "directoryMode": 493,
+        "fileMode": 420,
+        "ownerUid": 2100,
+        "version": "noopolis.daimon.grok-broker-task-clock.v2",
+        "slotDirectoryPattern": "/run/daimon-engine-broker/task-clock/slot-{slot}",
+        "slotFilePattern": "/run/daimon-engine-broker/task-clock/slot-{slot}/faketime",
+        "workerView": "own-directory-visible-sibling-directories-denied"
+    },
+    "systemPromptSha256": "2c31c0085a54a4efbf9c0cf0b8124c56e47f38691b7f0c7fa233a74abaa8ddf8",
+    "grokCliVersion": "1.0.34",
+    "grokExecutableSha256": "39ab87666877d64ef3a40aa60fbe0c3b6a6acd7001b78fe60e2c76bb6cfc4a94",
+    "nativeAbiVersion": 2,
+    "model": "grok-4.6",
+    "reasoningEffort": "low",
+    "limits": {
+        "maxRequests": 24,
+        "maxTokens": 400000,
+        "timeoutMs": 480000
+    },
+    "usageLedgerPath": "/run/daimon-slots/0/usage/usage.jsonl",
+    "seccompProfileSha256": "7777777777777777777777777777777777777777777777777777777777777777",
+    "attestation": {
+        "platform": "linux/landlock",
+        "enforced": true,
+        "restrictNetwork": true,
+        "profileName": "daimon-strict",
+        "sandboxRuntime": "bubblewrap",
+        "eventsPath": "/var/lib/daimon-workers/2200/.grok/sessions/sandbox-events.jsonl"
+    }
+};
+export const daimonClockedProjectionGoldenSha256 = 'c06709c076b4ba1a15c10f0f3f7c1bcd46217355d81e1cfb7d1d2c25194fbd68';
+export const fixtureNonce = '5f0e2a1c9b8d7e6f5a4b3c2d1e0f9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d3e2f';
+const realm = ['/var/lib/spawnfile/daimon/grok-bootstrap-auth', '/var/lib/spawnfile/daimon/grok-subscription-realm'];
+/**
+ * The caller-protected paths a Grok trial declares.
+ *
+ * Always evaluator roots the slot receipt denies to the worker uid — never the
+ * subject's own workspace or runtime home, which are the two writable roots.
+ */
+export const grokProtectedPaths = (root) => [join(root, 'run-training'), join(root, 'training')];
+/**
+ * Turns a Codex launch fixture into a Grok v2 child launch shaped like the
+ * broker-capable training container.
+ *
+ * The container fixes `<slot>/workspace`, `<slot>/runtime-home` and
+ * `<slot>/state` as siblings and keeps every Training control input in the
+ * denied `/run/spawnfile-training` root, so the fixture root stands in for the slot root:
+ * the trial runtime home is the single writable projection, the control root is
+ * its sibling `state/`, and config/token/env move into the denied `training/`
+ * evaluator root. Every evaluator root is a real directory under `root`.
+ */
+export async function grokLaunchFrom(launch, root, runtimeHome = join(root, 'runtime')) {
+    const slot = join(root, 'slots', '0');
+    const state = join(root, 'state');
+    const controls = join(root, 'training');
+    const roots = { 'run-root': join(root, 'run-training'), context: controls, 'sealed-inputs': join(root, 'sealed'),
+        'judge-home': join(root, 'judge-grok-home'), 'slot-ledger': join(slot, 'usage') };
+    for (const path of [...Object.values(roots), state])
+        await mkdir(path, { recursive: true, mode: 0o700 });
+    const moved = { config: join(controls, 'config.json'), tokenFile: join(controls, 'token'), envFile: join(controls, 'environment') };
+    for (const key of ['config', 'tokenFile', 'envFile']) {
+        await copyFile(launch[key], moved[key]);
+        await chmod(moved[key], 0o600);
+    }
+    const home = launch.projections.find(row => row.role === 'home');
+    const next = launch;
+    Object.assign(next, { schema: 'spawnfile.training.daimon-native.launch.v2', agent: { id: launch.agent.id, engine: 'grok', model: 'grok-4.6', reasoningEffort: 'low' },
+        credentials: [], limits: { maxTokens: 8000000, wakeTokenCeiling: 1000000 }, ...moved, controlRoot: state,
+        projections: [{ role: 'home', source: runtimeHome, target: home.source === home.target ? runtimeHome : home.target }],
+        broker: { projectionVersion: 'noopolis.daimon.grok-broker-projection.v3', workerConfigVariant: launch.taskClock ? 'clocked' : 'unclocked',
+            projectionSha256: '0'.repeat(64), slot: 0, workerUid: 2200,
+            workerHomePath: join(slot, 'worker-home'), architecture: 'arm64', usageLedgerPath: join(roots['slot-ledger'], 'usage.jsonl'),
+            seccompProfileSha256: '7'.repeat(64), limits: { maxRequests: 24, maxTokens: 400000, timeoutMs: 480000 },
+            // The provisioner's verbatim values the projection digest binds: the realm entries, the control
+            // root and every evaluator root. Evaluator roots alone are the canary subset, not the deny list.
+            profileSha256: daimonProjectionGolden.profileSha256,
+            denyPaths: [...new Set([...realm, state, ...Object.values(roots)])].sort(),
+            evaluatorPaths: Object.entries(roots).map(([role, path]) => ({ role, path })), slotPreflightReceipt: join(slot, 'slot-preflight.json'), expectedNonce: fixtureNonce, minGeneration: 3 } });
+    next.broker.projectionSha256 = grokProjectionSha256(grokProjectionFor(next));
+    return next;
+}
+/** The training container resolves the slot projection from a one-agent config with no peers and no Mneme projection. */
+export function grokConfigFor(config) {
+    const agent = config.agents[0];
+    agent.engine = { kind: 'grok', model: 'grok-4.6', reasoningEffort: 'low' };
+    delete agent.memory;
+    return config;
+}
+/** What Daimon's resolver returns for this launch when its inputs are passed through unchanged. */
+export function grokProjectionFor(launch, extraDeny = []) {
+    const { broker } = launch;
+    const home = launch.projections.find(row => row.role === 'home').target;
+    const golden = broker.workerConfigVariant === 'clocked' ? daimonClockedProjectionGolden : daimonProjectionGolden;
+    return { ...golden, agentId: launch.agent.id, workspacePath: launch.workspace.target, runtimeHomePath: home,
+        workerUid: broker.workerUid, slot: broker.slot, profilePath: `${broker.workerHomePath}/.grok/sandbox.toml`,
+        denyPaths: [...new Set([...broker.denyPaths, ...extraDeny])].sort(),
+        workerConfigSha256: grokWorkerConfigPins[broker.workerConfigVariant][launch.agent.model][launch.agent.reasoningEffort],
+        model: launch.agent.model, reasoningEffort: launch.agent.reasoningEffort, limits: { ...broker.limits }, usageLedgerPath: broker.usageLedgerPath,
+        seccompProfileSha256: broker.seccompProfileSha256, attestation: { ...daimonProjectionGolden.attestation, eventsPath: `${broker.workerHomePath}/.grok/sessions/sandbox-events.jsonl` } };
+}
+export function slotPreflightFor(projection, paths = projection.denyPaths, generation = 3, nonce = fixtureNonce) {
+    return { version: 'noopolis.daimon.grok-slot-preflight.v2', slot: projection.slot, worker_uid: projection.workerUid, generation, nonce,
+        projection_sha256: grokProjectionSha256(projection), sandbox_profile_sha256: projection.profileSha256,
+        seccomp_profile_sha256: projection.seccompProfileSha256, sandbox_runtime: 'bubblewrap', grok_executable_sha256: projection.grokExecutableSha256,
+        canaries: paths.map(path => ({ path, method: 'sandboxed-read', result: 'denied' })), created_at: '2026-09-17T12:00:00.000Z' };
+}
+export async function writeGrokSlotReceipt(launch, value = slotPreflightFor(grokProjectionFor(launch))) {
+    await mkdir(dirname(launch.broker.slotPreflightReceipt), { recursive: true });
+    await writeFile(launch.broker.slotPreflightReceipt, JSON.stringify(value));
+}
+//# sourceMappingURL=grok-fixtures.js.map

package/dist/runtime/daimon/training/native/grok-fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-fixtures.js","sourceRoot":"","sources":["../../../../../src/runtime/daimon/training/native/grok-fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAqD,MAAM,mBAAmB,CAAC;AAIlI,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAyB;IAC1D,SAAS,EAAE,2CAA2C;IACtD,SAAS,EAAE,SAAS;IACpB,eAAe,EAAE,sDAAsD;IACvE,iBAAiB,EAAE,2CAA2C;IAC9D,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE,CAAC;IACT,aAAa,EAAE,iDAAiD;IAChE,eAAe,EAAE,kEAAkE;IACnF,WAAW,EAAE;QACX,yBAAyB;QACzB,iCAAiC;QACjC,sBAAsB;QACtB,+CAA+C;QAC/C,mDAAmD;KACpD;IACD,oBAAoB,EAAE,kEAAkE;IACxF,qBAAqB,EAAE,WAAW;IAClC,oBAAoB,EAAE,kEAAkE;IACxF,gBAAgB,EAAE,QAAQ;IAC1B,sBAAsB,EAAE,kEAAkE;IAC1F,kBAAkB,EAAE,CAAC;IACrB,OAAO,EAAE,UAAU;IACnB,iBAAiB,EAAE,KAAK;IACxB,QAAQ,EAAE;QACR,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,MAAM;KACpB;IACD,iBAAiB,EAAE,uCAAuC;IAC1D,sBAAsB,EAAE,kEAAkE;IAC1F,aAAa,EAAE;QACb,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,aAAa,EAAE,eAAe;QAC9B,gBAAgB,EAAE,YAAY;QAC9B,YAAY,EAAE,kEAAkE;KACjF;CACF,CAAC;AACF,MAAM,CAAC,MAAM,4BAA4B,GAAG,kEAAkE,CAAC;AAC/G,MAAM,CAAC,MAAM,6BAA6B,GAAyB;IACjE,SAAS,EAAE,2CAA2C;IACtD,SAAS,EAAE,SAAS;IACpB,eAAe,EAAE,sDAAsD;IACvE,iBAAiB,EAAE,2CAA2C;IAC9D,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE,CAAC;IACT,aAAa,EAAE,iDAAiD;IAChE,eAAe,EAAE,kEAAkE;IACnF,WAAW,EAAE;QACX,yBAAyB;QACzB,iCAAiC;QACjC,sBAAsB;QACtB,+CAA+C;QAC/C,mDAAmD;KACpD;IACD,oBAAoB,EAAE,kEAAkE;IACxF,qBAAqB,EAAE,SAAS;IAChC,WAAW,EAAE;QACX,aAAa,EAAE,wCAAwC;QACvD,mBAAmB,EAAE,sDAAsD;QAC3E,eAAe,EAAE,6CAA6C;QAC9D,mBAAmB,EAAE,sCAAsC;QAC3D,eAAe,EAAE,GAAG;QACpB,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,2CAA2C;QACtD,sBAAsB,EAAE,kDAAkD;QAC1E,iBAAiB,EAAE,2DAA2D;QAC9E,YAAY,EAAE,kDAAkD;KACjE;IACD,oBAAoB,EAAE,kEAAkE;IACxF,gBAAgB,EAAE,QAAQ;IAC1B,sBAAsB,EAAE,kEAAkE;IAC1F,kBAAkB,EAAE,CAAC;IACrB,OAAO,EAAE,UAAU;IACnB,iBAAiB,EAAE,KAAK;IACxB,QAAQ,EAAE;QACR,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,MAAM;KACpB;IACD,iBAAiB,EAAE,uCAAuC;IAC1D,sBAAsB,EAAE,kEAAkE;IAC1F,aAAa,EAAE;QACb,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,aAAa,EAAE,eAAe;QAC9B,gBAAgB,EAAE,YAAY;QAC9B,YAAY,EAAE,kEAAkE;KACjF;CACF,CAAC;AACF,MAAM,CAAC,MAAM,mCAAmC,GAAG,kEAAkE,CAAC;AAEtH,MAAM,CAAC,MAAM,YAAY,GAAG,kEAAkE,CAAC;AAC/F,MAAM,KAAK,GAAG,CAAC,+CAA+C,EAAE,mDAAmD,CAAC,CAAC;AAErH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAY,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;AAEnH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAyB,MAAS,EAAE,IAAY,EAAE,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;IACvH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC9G,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAW,CAAC;IAC7F,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzG,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAW,CAAC;IAC7I,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAU,EAAE,CAAC;QAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAC3I,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAE,CAAC;IAClE,MAAM,IAAI,GAAG,MAAyC,CAAC;IACvD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,4CAA4C,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE;QACnK,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,KAAK;QACxG,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACrH,MAAM,EAAE,EAAE,iBAAiB,EAAE,2CAA2C,EAAE,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;YACvI,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI;YAC1D,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;YAC5H,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;YACvG,gGAAgG;YAChG,iGAAiG;YACjG,aAAa,EAAE,sBAAsB,CAAC,aAAa;YACnD,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YAC1E,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/L,IAAI,CAAC,MAAM,CAAC,gBAAgB,GAAG,oBAAoB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yHAAyH;AACzH,MAAM,UAAU,aAAa,CAAC,MAAoB;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;IAChC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAC3E,OAAO,KAAK,CAAC,MAAM,CAAC;IACpB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,MAAwB,EAAE,YAA+B,EAAE;IAC3F,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAE,CAAC,MAAM,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACjH,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI;QACzG,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,cAAc,qBAAqB;QAC1G,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QACnE,kBAAkB,EAAE,oBAAoB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;QACtH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe;QAC/I,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,WAAW,EAAE,EAAE,GAAG,sBAAsB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,cAAc,sCAAsC,EAAE,EAAE,CAAC;AAC5L,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAgC,EAAE,KAAK,GAAG,UAAU,CAAC,SAAS,EAAE,UAAU,GAAG,CAAC,EAAE,KAAK,GAAG,YAAY;IACnI,OAAO,EAAE,OAAO,EAAE,wCAAwC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK;QACpI,iBAAiB,EAAE,oBAAoB,CAAC,UAAU,CAAC,EAAE,sBAAsB,EAAE,UAAU,CAAC,aAAa;QACrG,sBAAsB,EAAE,UAAU,CAAC,oBAAoB,EAAE,eAAe,EAAE,YAAY,EAAE,sBAAsB,EAAE,UAAU,CAAC,oBAAoB;QAC/I,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,0BAA0B,EAAE,CAAC;AAClI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAwB,EAAE,QAAiB,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC/H,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,MAAM,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7E,CAAC"}

package/dist/runtime/daimon/training/native/index.d.ts

@@ -0,0 +1,38 @@
+export { createDaimonNativeAdapter } from './adapter.js';
+export type { NativeAdapterOptions } from './adapter.js';
+export { parseNativeLaunch, nativeLaunchSchema } from './receipt/index.js';
+export type { NativeLaunch, NativeMount, VerifiedNativeLaunch } from './receipt/index.js';
+export type { NativeTaskClock, NativeTaskClockEvidence } from './receipt/index.js';
+/**
+ * Launch preflight for callers that prepare a trial: `loadNativeLaunch` verifies
+ * the receipt and its path policy without starting anything, and
+ * `nativeTrialArtifactsRoot` is where that trial's private control artifacts
+ * land (the control root for Codex, a per-trial directory inside it for Grok).
+ * Both are derivations callers must not reimplement.
+ */
+export { loadNativeLaunch } from './container/index.js';
+export { grokBrokerLaunchSchema, nativeTrialArtifactsRoot } from './receipt/index.js';
+export type { GrokBrokerLaunch } from './receipt/index.js';
+/**
+ * Engine-neutral subject preparation on a leased slot: Training sequences slot
+ * freshness and validates the provisioner's launch fields against the lease.
+ */
+export { assertNativeEngineConfig, bindTrialPathsToSlot, createExperimentSlotFreshness, experimentSlotFreshnessFile, nativeSubjectScratch, nativeTrialInputsRoot, prepareNativeSubject } from './preparation/index.js';
+export type { NativeAgentConfig, NativeScratchName, NativeSubjectLayout, NativeSubjectEngine, NativeTrialRoots, PrepareNativeSubjectOptions, ProvisionedSubject, SubjectProvisionInput, SubjectProvisioner } from './preparation/index.js';
+export type { NativeExternalInputs, NativeExternalInput, NativeChildExternalInputs } from './external.js';
+export { createNativeHttpClient } from './transport/index.js';
+export type { NativeExecutionHandle, NativeWorkerPath, NativeWorkerRequest } from './transport/index.js';
+export type { NativeTransportDelivery, PreparedTransportDelivery } from './transport/index.js';
+export type { TransportDeliverySource } from './worker/index.js';
+export { createGrokSlotFreshnessStore, nativeChildArguments } from './child/index.js';
+export type { GrokSlotFreshness, GrokSlotFreshnessOptions, GrokSlotFreshnessStore, NativeChildExecution } from './child/index.js';
+export { grokBrokerControlSocketEnv, grokGrantHomeRootEnv, loadDaimonGrokGrantAuthority } from './grants/index.js';
+/**
+ * Operator-only turn transcript: the wake text the engine received and the reply
+ * it gave, read from the engine's own session record inside the Daimon-owned
+ * engine home and confirmed against Daimon's closed trace digest. Published as a
+ * `raw`-visibility diagnostic observation; never an evaluated output.
+ */
+export { readNativeTranscript, NATIVE_TRANSCRIPT_SCHEMA } from './transcript.js';
+export type { NativeTranscriptCapture, NativeTranscriptSession, NativeTranscriptText } from './transcript.js';
+export type { NativeTurnEvidence } from './outcome.js';

package/dist/runtime/daimon/training/native/index.js

@@ -0,0 +1,27 @@
+export { createDaimonNativeAdapter } from './adapter.js';
+export { parseNativeLaunch, nativeLaunchSchema } from './receipt/index.js';
+/**
+ * Launch preflight for callers that prepare a trial: `loadNativeLaunch` verifies
+ * the receipt and its path policy without starting anything, and
+ * `nativeTrialArtifactsRoot` is where that trial's private control artifacts
+ * land (the control root for Codex, a per-trial directory inside it for Grok).
+ * Both are derivations callers must not reimplement.
+ */
+export { loadNativeLaunch } from './container/index.js';
+export { grokBrokerLaunchSchema, nativeTrialArtifactsRoot } from './receipt/index.js';
+/**
+ * Engine-neutral subject preparation on a leased slot: Training sequences slot
+ * freshness and validates the provisioner's launch fields against the lease.
+ */
+export { assertNativeEngineConfig, bindTrialPathsToSlot, createExperimentSlotFreshness, experimentSlotFreshnessFile, nativeSubjectScratch, nativeTrialInputsRoot, prepareNativeSubject } from './preparation/index.js';
+export { createNativeHttpClient } from './transport/index.js';
+export { createGrokSlotFreshnessStore, nativeChildArguments } from './child/index.js';
+export { grokBrokerControlSocketEnv, grokGrantHomeRootEnv, loadDaimonGrokGrantAuthority } from './grants/index.js';
+/**
+ * Operator-only turn transcript: the wake text the engine received and the reply
+ * it gave, read from the engine's own session record inside the Daimon-owned
+ * engine home and confirmed against Daimon's closed trace digest. Published as a
+ * `raw`-visibility diagnostic observation; never an evaluated output.
+ */
+export { readNativeTranscript, NATIVE_TRANSCRIPT_SCHEMA } from './transcript.js';
+//# sourceMappingURL=index.js.map

package/dist/runtime/daimon/training/native/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/runtime/daimon/training/native/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAI3E;;;;;;GAMG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAGtF;;;GAGG;AACH,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,2BAA2B,EACjH,oBAAoB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAMpG,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAK9D,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGtF,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAEnH;;;;;GAKG;AACH,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/runtime/daimon/training/native/live-checkout.d.ts

@@ -0,0 +1,2 @@
+/** Test-only built checkout: required in CI, opt-in locally; never an ambient dependency. */
+export declare function daimonCheckoutRuntime(): string | undefined;

package/dist/runtime/daimon/training/native/live-checkout.js

@@ -0,0 +1,15 @@
+import { isAbsolute, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+/** Test-only built checkout: required in CI, opt-in locally; never an ambient dependency. */
+export function daimonCheckoutRuntime() {
+    const checkout = process.env.SPAWNFILE_DAIMON_CHECKOUT;
+    if (checkout === undefined) {
+        if (process.env.CI)
+            throw new Error('CI parity requires SPAWNFILE_DAIMON_CHECKOUT pointing at the built pinned Daimon checkout');
+        return undefined;
+    }
+    if (!isAbsolute(checkout))
+        throw new Error('SPAWNFILE_DAIMON_CHECKOUT must be an absolute built Daimon checkout');
+    return pathToFileURL(join(checkout, 'dist/runtime/index.js')).href;
+}
+//# sourceMappingURL=live-checkout.js.map

package/dist/runtime/daimon/training/native/live-checkout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-checkout.js","sourceRoot":"","sources":["../../../../../src/runtime/daimon/training/native/live-checkout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;QACjI,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IAClH,OAAO,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC"}

package/dist/runtime/daimon/training/native/observations.d.ts

@@ -0,0 +1,51 @@
+import type { NativeExternalInput } from './external.js';
+import type { SubjectStart, SubjectStartupDiagnostic, Usage } from '../../../../training/index.js';
+import type { BrokerRequestLedger, BrokerSealLedger } from './sealed-usage.js';
+import type { NativeGrokUsage, NativeUsage, TerminalEvidence } from './worker/index.js';
+export declare function createNativeObserver(input: SubjectStart, runtimeHome: string, agentId: string, engine?: 'codex' | 'grok'): {
+    usage: () => Usage | null;
+    externalInput(wakeId: string, value: NativeExternalInput): Promise<void>;
+    checkpoint(wakeId: string): Promise<void>;
+    /**
+     * Why an owned worker stopped answering, redacted by the same rules the
+     * startup path uses and published as a `diagnostic` — never output, a
+     * captured call or a judge input. It is the only account of a mid-turn
+     * death that outlives the container: the full capture stays in the control
+     * root, which a training slot puts on tmpfs.
+     */
+    childDiagnostic(wakeId: string, record: SubjectStartupDiagnostic): Promise<void>;
+    /**
+     * Spend recovered from the broker's sealed ledger when no terminal evidence
+     * arrived. It publishes as an ordinary `usage` observation so a failed
+     * trial's cost is visible where a completed one's is, and carries the rows
+     * it was read from rather than only their sum. A publish fault here is
+     * swallowed: this already runs on a failed turn, and instrumentation must
+     * never replace a diagnosable failure with a confusing one.
+     */
+    sealedUsage(wakeId: string, recovered: readonly NativeGrokUsage[]): Promise<Usage | null>;
+    /**
+     * The broker's per-request timings for a turn that never reported one.
+     *
+     * Operator-only, like the records beside it: a `diagnostic` so it can never
+     * become output, a captured call, a judge input or a viewer projection. It
+     * says whether the last request was issued and left unanswered or never
+     * issued at all, which the published event stream otherwise cannot tell
+     * apart, and it is timings and counts only. A publish fault is swallowed:
+     * this already runs on a failed turn.
+     */
+    brokerRequests(wakeId: string, ledger: BrokerRequestLedger): Promise<void>;
+    /**
+     * The broker's own sealed account of a turn that never answered.
+     *
+     * Operator-only, like every record beside it: a `diagnostic`, so it can
+     * never become output, a captured call, a judge input or a viewer
+     * projection. Its headline is the one fact six live hangs could not
+     * produce — the tool call the worker was still blocked on, and for how
+     * long. A turn the facade never observed says so by having no `mcp` member
+     * at all, and is never rendered as "no outstanding calls". A publish fault
+     * is swallowed: this already runs on a failed turn.
+     */
+    brokerSeal(wakeId: string, ledger: BrokerSealLedger): Promise<void>;
+    terminal(wakeId: string, result: TerminalEvidence): Promise<Usage | null>;
+};
+export declare function aggregateUsage(rows: NativeUsage[]): Usage | null;

package/dist/runtime/daimon/training/native/observations.js

@@ -0,0 +1,217 @@
+import { readNativeTranscript } from './transcript.js';
+import { plausibleNotionalUsd, readToolReceipts } from './worker/index.js';
+export function createNativeObserver(input, runtimeHome, agentId, engine = 'codex') {
+    let seq = 0;
+    const accounted = new Map();
+    // An execution stays accounted forever; its publication remains pending
+    // independently until the sink acknowledges the batch containing that row.
+    const pending = new Set();
+    let publicationTail = Promise.resolve();
+    const observation = (wakeId, value, timestamp = new Date().toISOString()) => {
+        seq++;
+        return structuredClone({ id: `${input.trialId}:native:${seq}`, source: 'daimon.native-evidence', seq,
+            timestamp, trialId: input.trialId, wakeId, ...value });
+    };
+    // One trial ledger owns both normal terminal frames and recovered broker rows.
+    const account = (wakeId, rows, timestamp) => {
+        const added = new Map();
+        for (const row of rows) {
+            const key = `${row.engine}:${row.wake}`;
+            const prior = accounted.get(key) ?? added.get(key);
+            if (prior && JSON.stringify(prior) !== JSON.stringify(row))
+                throw new Error('Conflicting native trial usage execution');
+            if (!prior)
+                added.set(key, row);
+        }
+        const fresh = [...added.values()];
+        const usage = aggregateUsage(fresh);
+        // Validate the total before committing any rows; a rejected frame cannot
+        // partly consume execution identities or poison subsequent recovery.
+        aggregateUsage([...accounted.values(), ...fresh]);
+        for (const [key, row] of added)
+            accounted.set(key, structuredClone(row));
+        if (usage)
+            pending.add(observation(wakeId, { type: 'usage', usage, native: fresh }, timestamp));
+        return usage;
+    };
+    // Retain the entire batch identity and payload until acknowledged. Capture
+    // deduplicates identical observations, including a persist-then-reject retry.
+    const publishUsage = () => {
+        const operation = publicationTail.then(async () => {
+            for (const event of pending) {
+                await input.onObservation(structuredClone(event));
+                pending.delete(event);
+            }
+        });
+        publicationTail = operation.catch(() => undefined);
+        return operation;
+    };
+    const seen = new Set();
+    const emit = async (wakeId, value, timestamp = new Date().toISOString()) => {
+        await input.onObservation(observation(wakeId, value, timestamp));
+    };
+    return {
+        usage: () => aggregateUsage([...accounted.values()]),
+        async externalInput(wakeId, value) {
+            await emit(wakeId, { type: 'input', text: value.text, native: { schema: 'spawnfile.training.external-input.v1', deliveryId: value.id, source: value.source } });
+        },
+        async checkpoint(wakeId) {
+            for (const row of await readToolReceipts(runtimeHome, agentId, engine)) {
+                const callId = String(row.delivery_id);
+                if (seen.has(callId))
+                    continue;
+                seen.add(callId);
+                await emit(wakeId, { type: 'tool.complete', callId,
+                    tool: row.kind === 'moltnet' ? 'moltnet_send' : `mcp_${String(row.server)}_${String(row.tool)}`,
+                    result: row.kind === 'moltnet' ? { message_id: row.message_id } : row.result ?? row.error,
+                    success: row.kind === 'moltnet' || row.is_error === false, native: row }, String(row.at));
+            }
+        },
+        /**
+         * Why an owned worker stopped answering, redacted by the same rules the
+         * startup path uses and published as a `diagnostic` — never output, a
+         * captured call or a judge input. It is the only account of a mid-turn
+         * death that outlives the container: the full capture stays in the control
+         * root, which a training slot puts on tmpfs.
+         */
+        async childDiagnostic(wakeId, record) {
+            try {
+                await emit(wakeId, { type: 'diagnostic', text: record.reason, native: record });
+            }
+            catch { /* never fails an already-failed turn */ }
+        },
+        /**
+         * Spend recovered from the broker's sealed ledger when no terminal evidence
+         * arrived. It publishes as an ordinary `usage` observation so a failed
+         * trial's cost is visible where a completed one's is, and carries the rows
+         * it was read from rather than only their sum. A publish fault here is
+         * swallowed: this already runs on a failed turn, and instrumentation must
+         * never replace a diagnosable failure with a confusing one.
+         */
+        async sealedUsage(wakeId, recovered) {
+            let delta;
+            try {
+                delta = account(wakeId, recovered);
+            }
+            catch {
+                return null;
+            }
+            try {
+                await publishUsage();
+            }
+            catch { /* never fails an already-failed turn */ }
+            return delta;
+        },
+        /**
+         * The broker's per-request timings for a turn that never reported one.
+         *
+         * Operator-only, like the records beside it: a `diagnostic` so it can never
+         * become output, a captured call, a judge input or a viewer projection. It
+         * says whether the last request was issued and left unanswered or never
+         * issued at all, which the published event stream otherwise cannot tell
+         * apart, and it is timings and counts only. A publish fault is swallowed:
+         * this already runs on a failed turn.
+         */
+        async brokerRequests(wakeId, ledger) {
+            const text = ledger.outcome === 'read'
+                ? `Broker request ledger: ${ledger.read} requests, ${ledger.open} unanswered`
+                : `Broker request ledger unreadable: ${ledger.failure}`;
+            try {
+                await emit(wakeId, { type: 'diagnostic', text, native: ledger });
+            }
+            catch { /* never fails an already-failed turn */ }
+        },
+        /**
+         * The broker's own sealed account of a turn that never answered.
+         *
+         * Operator-only, like every record beside it: a `diagnostic`, so it can
+         * never become output, a captured call, a judge input or a viewer
+         * projection. Its headline is the one fact six live hangs could not
+         * produce — the tool call the worker was still blocked on, and for how
+         * long. A turn the facade never observed says so by having no `mcp` member
+         * at all, and is never rendered as "no outstanding calls". A publish fault
+         * is swallowed: this already runs on a failed turn.
+         */
+        async brokerSeal(wakeId, ledger) {
+            const text = ledger.outcome !== 'read'
+                ? `Broker turn seal unreadable: ${ledger.failure}`
+                : (() => {
+                    const last = ledger.rows[ledger.rows.length - 1];
+                    const blocked = ledger.rows.flatMap(row => row.mcp?.outstanding ?? []).map(call => `${call.name}@${call.outstandingMs}ms`);
+                    const observed = ledger.rows.some(row => row.mcp !== undefined);
+                    const mcp = blocked.length ? `blocked on ${blocked.join(', ')}` : observed ? 'no outstanding MCP call' : 'no MCP observation';
+                    // The other channel the worker can be idle on: a GET SSE tunnel still
+                    // open when the turn died, with its age and whether the mount ever
+                    // pushed through it. A row that never observed tunnels says nothing
+                    // here rather than reporting a zero nobody measured.
+                    const tunnels = ledger.rows.flatMap(row => row.mcp?.tunnels === undefined ? [] : [row.mcp.tunnels]);
+                    const open = tunnels.flatMap(tunnel => tunnel.open).map(tunnel => `${tunnel.openMs}ms/${tunnel.delivered ? 'delivered' : 'silent'}`);
+                    const get = !tunnels.length ? '' : open.length
+                        ? `, GET tunnel open ${open.join(', ')}`
+                        : `, GET tunnels ${tunnels.reduce((total, tunnel) => total + tunnel.closed, 0)}/${tunnels.reduce((total, tunnel) => total + tunnel.opened, 0)} closed`;
+                    return `Broker turn seal: ${last?.outcome ?? 'unknown'}${last?.code ? `/${last.code}` : ''}, ${mcp}${get}`;
+                })();
+            try {
+                await emit(wakeId, { type: 'diagnostic', text, native: ledger });
+            }
+            catch { /* never fails an already-failed turn */ }
+        },
+        async terminal(wakeId, result) {
+            const usage = account(wakeId, result.native.accounting?.usage ?? result.native.usage, result.completedAt);
+            await publishUsage();
+            await emit(wakeId, { type: 'diagnostic', text: `Native execution ${result.status}`, native: result }, result.completedAt);
+            // Operator-only, and a diagnostic on purpose: the wake text and the reply
+            // must never become this trial's output, a captured call or a judge input.
+            // A transcript the engine never wrote, or a runtime home already recycled,
+            // is silence rather than an empty capture that reads like evidence.
+            if (engine === 'grok') {
+                // Observed usage is the metered record of real spend; a diagnostic read
+                // of the engine's own transcript must never be able to fail the turn
+                // that produced it. Its failure is itself published.
+                let transcript;
+                let failure;
+                // The trace this frame NAMES, never whichever one leads the list: a trial
+                // that defers publishes a frame per wake, and reading another wake's trace
+                // here would caption this wake's transcript with that wake's digest.
+                try {
+                    transcript = await readNativeTranscript(runtimeHome, result.native.traces.find(row => row.turn_id === result.executionId));
+                }
+                catch (error) {
+                    failure = error instanceof Error ? error.message : String(error);
+                }
+                if (transcript) {
+                    await emit(wakeId, { type: 'diagnostic', text: 'Native engine transcript captured', native: transcript }, result.completedAt);
+                }
+                else if (failure) {
+                    await emit(wakeId, { type: 'diagnostic', text: `Native engine transcript capture failed: ${failure}` }, result.completedAt);
+                }
+            }
+            return usage;
+        },
+    };
+}
+export function aggregateUsage(rows) {
+    if (!rows.length)
+        return null;
+    const sum = (values) => {
+        const value = values.reduce((total, item) => total + item, 0);
+        if (!Number.isSafeInteger(value) || value < 0)
+            throw new Error('Native token aggregate is invalid');
+        return value;
+    };
+    const grok = rows.filter((row) => row.engine === 'grok');
+    if (!grok.length) {
+        return { inputTokens: sum(rows.map(row => row.input)), cachedInputTokens: sum(rows.map(row => row.cache_read)), outputTokens: sum(rows.map(row => row.output)),
+            reasoningTokens: null, source: 'noopolis.daimon.turn-usage.v1' };
+    }
+    if (grok.length !== rows.length)
+        throw new Error('Native usage mixes engines');
+    // Grok buckets are disjoint; Training's inputTokens counts every prompt-side token, with reads and writes as subsets.
+    if (!grok.every(row => plausibleNotionalUsd(row.notional_usd)))
+        throw new Error('Native notional USD is outside its per-turn plausibility bound');
+    const notionalUsd = grok.reduce((total, row) => total + row.notional_usd, 0);
+    return { inputTokens: sum(grok.flatMap(row => [row.input, row.cache_read, row.cache_write])), cachedInputTokens: sum(grok.map(row => row.cache_read)),
+        cacheWriteInputTokens: sum(grok.map(row => row.cache_write)), outputTokens: sum(grok.map(row => row.output)), reasoningTokens: null,
+        notionalUsd, source: 'noopolis.daimon.turn-usage.v1' };
+}
+//# sourceMappingURL=observations.js.map

package/dist/runtime/daimon/training/native/observations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observations.js","sourceRoot":"","sources":["../../../../../src/runtime/daimon/training/native/observations.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAG3E,MAAM,UAAU,oBAAoB,CAAC,KAAmB,EAAE,WAAmB,EAAE,OAAe,EAAE,SAA2B,OAAO;IAChI,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAC;IACvC,IAAI,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,KAAsF,EACzH,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAe,EAAE;QACrD,GAAG,EAAE,CAAC;QACN,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,WAAW,GAAG,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,GAAG;YAClG,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC;IACF,+EAA+E;IAC/E,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,IAA4B,EAAE,SAAkB,EAAE,EAAE;QACnF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACxH,IAAI,CAAC,KAAK;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACpC,yEAAyE;QACzE,qEAAqE;QACrE,cAAc,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QACzE,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAChG,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,YAAY,GAAG,GAAkB,EAAE;QACvC,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAChD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,eAAe,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,EAAE,MAAc,EAAE,KAAsF,EACxH,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAiB,EAAE;QACvD,MAAM,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,OAAO;QACL,KAAK,EAAE,GAAiB,EAAE,CAAC,cAAc,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,KAA0B;YAC5D,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,sCAAsC,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClK,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,MAAc;YAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;gBACvE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACvC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjB,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM;oBAChD,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;oBAC/F,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK;oBACzF,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QACD;;;;;;WAMG;QACH,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,MAAgC;YACpE,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QAC7I,CAAC;QACD;;;;;;;WAOG;QACH,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,SAAqC;YACrE,IAAI,KAAiC,CAAC;YACtC,IAAI,CAAC;gBAAC,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YAClE,IAAI,CAAC;gBACH,MAAM,YAAY,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QACD;;;;;;;;;WASG;QACH,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,MAA2B;YAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM;gBACpC,CAAC,CAAC,0BAA0B,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,IAAI,aAAa;gBAC7E,CAAC,CAAC,qCAAqC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1D,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QAC9H,CAAC;QACD;;;;;;;;;;WAUG;QACH,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,MAAwB;YACvD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM;gBACpC,CAAC,CAAC,gCAAgC,MAAM,CAAC,OAAO,EAAE;gBAClD,CAAC,CAAC,CAAC,GAAW,EAAE;oBACd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBACjD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;oBAC3H,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;oBAChE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,oBAAoB,CAAC;oBAC9H,sEAAsE;oBACtE,mEAAmE;oBACnE,oEAAoE;oBACpE,qDAAqD;oBACrD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;oBACpG,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACrI,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM;wBAC5C,CAAC,CAAC,qBAAqB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBACxC,CAAC,CAAC,iBAAiB,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC;oBACzJ,OAAO,qBAAqB,IAAI,EAAE,OAAO,IAAI,SAAS,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC;gBAC7G,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QAC9H,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,MAAwB;YACrD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1G,MAAM,YAAY,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,oBAAoB,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1H,0EAA0E;YAC1E,2EAA2E;YAC3E,2EAA2E;YAC3E,oEAAoE;YACpE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,wEAAwE;gBACxE,qEAAqE;gBACrE,qDAAqD;gBACrD,IAAI,UAA4D,CAAC;gBACjE,IAAI,OAA2B,CAAC;gBAChC,0EAA0E;gBAC1E,2EAA2E;gBAC3E,qEAAqE;gBACrE,IAAI,CAAC;oBAAC,UAAU,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACnI,OAAO,KAAK,EAAE,CAAC;oBAAC,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;gBACnF,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,mCAAmC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;gBAChI,CAAC;qBAAM,IAAI,OAAO,EAAE,CAAC;oBACnB,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,4CAA4C,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC9H,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAmB;IAChD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,MAAgB,EAAU,EAAE;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACpG,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAA0B,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACjF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5J,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/E,sHAAsH;IACtH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAClJ,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnJ,qBAAqB,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI;QACnI,WAAW,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;AAC3D,CAAC"}

package/dist/runtime/daimon/training/native/outcome.d.ts

@@ -0,0 +1,13 @@
+import { type TerminalEvidence, type TransportDeliverySource } from './worker/index.js';
+import type { VerifiedNativeLaunch } from './receipt/index.js';
+/** Runtime-local protected files, one per admitted wake; no filesystem discovery by consumers. */
+export interface NativeTurnEvidence {
+    schema: 'spawnfile.training.daimon-native.evidence.v1';
+    wakes: {
+        wakeId: string;
+        executionId: string;
+        executionIds: string[];
+        evidenceFile: string;
+    }[];
+}
+export declare function admittedNativeEvidence(value: TerminalEvidence, launch: VerifiedNativeLaunch, trialId: string, wakeId: string, ordinal: number, file: string, source: TransportDeliverySource | undefined, deliveries: Set<string>, wakeTimeoutMs?: number): NativeTurnEvidence['wakes'][number] | undefined;