spawnfile 0.1.24 → 0.1.27

package/dist/runtime/daimon/training/native/worker/wake-delivery/transport.js

@@ -0,0 +1,198 @@
+import { matchTransportSource } from './source.js';
+/** Trial admission is separate from Daimon's schema and acceptance responses. */
+export class TransportAdmissionClosedError extends Error {
+    constructor() { super('transport_admission_sealed'); }
+}
+/** Only the HTTP route calls accept. run() arms and observes this mailbox. */
+export function createTransportDelivery(host, agentId) {
+    let armed;
+    let sealed = true;
+    const seen = new Set();
+    const admittedIdentities = new Set();
+    const agentAcceptances = new Map();
+    const arrivals = new Map();
+    const envelopes = new Map();
+    const selected = new Map();
+    const batches = new Map();
+    const select = (id) => {
+        if (!selected.has(id))
+            selected.set(id, { executionIds: new Set() });
+        return selected.get(id);
+    };
+    const snapshot = (evidence) => {
+        evidence.deliveries = [...selected.keys()].flatMap(id => envelopes.has(id) ? [structuredClone(envelopes.get(id))] : []);
+        evidence.selectedDeliveries = [...selected].map(([deliveryId, row]) => ({ deliveryId,
+            executionIds: [...row.executionIds], ...(row.receipt ? { receipt: structuredClone(row.receipt) } : {}) }));
+        evidence.batches = structuredClone([...batches.values()]);
+        evidence.deferredDeliveryIds = [...selected].filter(([, row]) => row.receipt?.state === 'accepted' && row.receipt.deferred === true).map(([id]) => id);
+        evidence.unresolvedDeliveryIds = [...selected].filter(([, row]) => row.receipt?.state !== 'completed').map(([id]) => id);
+    };
+    const bind = (queue) => {
+        if (queue.decided)
+            return;
+        while (queue.attempts[0]?.outcome === 'refused')
+            queue.attempts.shift();
+        const first = queue.attempts[0];
+        if (!first?.outcome)
+            return;
+        const result = first.outcome;
+        queue.decided = true;
+        const { run: current, request } = first;
+        const fresh = !seen.has(result.acceptance_id);
+        seen.add(result.acceptance_id);
+        if (fresh && current && current === armed && request.agent_id === agentId && result.agent_id === agentId &&
+            result.delivery_id === request.delivery_id && matchTransportSource(current.evidence.source, request.delivery_id)) {
+            // Every matching acceptance is trial work, even if queued behind this batch.
+            select(request.delivery_id);
+            if (!current.first) {
+                current.first = result;
+                current.evidence.deliveryId = request.delivery_id;
+                current.evidence.acceptanceId = result.acceptance_id;
+                current.resolve(result);
+            }
+            snapshot(current.evidence);
+        }
+        queue.attempts.length = 0;
+    };
+    return {
+        state() {
+            return armed ? { state: armed.first ? 'observing' : 'waiting', wakeId: armed.wakeId, source: armed.evidence.source } : { state: 'idle' };
+        },
+        begin(wakeId, source) {
+            let resolve;
+            const accepted = new Promise(done => { resolve = done; });
+            const evidence = { source, deliveries: [], deferredDeliveryIds: [], unresolvedDeliveryIds: [], renderedAllowances: 'unavailable-public-api' };
+            const current = { wakeId, evidence, resolve, generation: 0, pending: 0 };
+            let observed = [];
+            let nativePending;
+            let nativeDeferred;
+            const disposed = (row) => ['completed', 'failed', 'stopped'].includes(row.state) ||
+                row.state === 'accepted' && row.deferred === true && selected.has(row.delivery_id);
+            const closed = (traces) => {
+                // Daimon includes accepted deferrals in pending. The selection map counts
+                // delivery identities once, even when receipt and activity both name them.
+                const deferred = [...selected.values()].filter(row => row.receipt?.state === 'accepted' && row.receipt.deferred === true).length;
+                return nativePending === deferred && (nativeDeferred ?? 0) === deferred && observed.every(disposed) &&
+                    [...agentAcceptances].every(([id, acceptance]) => observed.some(row => row.delivery_id === id && row.acceptance_id === acceptance && disposed(row))) &&
+                    [...selected.values()].every(row => row.receipt && disposed(row.receipt) &&
+                        [...row.executionIds].every(id => traces.some(trace => trace.turn_id === id)));
+            };
+            armed = current;
+            return {
+                accepted, evidence, closed,
+                generation: () => current.generation,
+                /** Synchronous admission/sealing linearization point: no await may split it. */
+                seal(generation, traces) {
+                    if (current !== armed || current.pending !== 0 || current.generation !== generation || !closed(traces))
+                        return false;
+                    armed = undefined;
+                    sealed = true;
+                    return true;
+                },
+                observe(receipt, activity, availability, executionId) {
+                    observed = structuredClone([...activity.items, receipt].filter(row => row.agent_id === agentId));
+                    nativePending = availability.agents.find(row => row.agent_id === agentId)?.pending;
+                    nativeDeferred = availability.agents.find(row => row.agent_id === agentId)?.deferred;
+                    for (const batch of activity.executions ?? []) {
+                        if (batch.agent_id !== agentId || !batch.delivery_ids.some(id => selected.has(id)))
+                            continue;
+                        const primary = batch.delivery_ids.includes(evidence.deliveryId);
+                        if (primary && executionId !== undefined && batch.execution_id !== executionId)
+                            throw new Error('Transport execution binding changed');
+                        const previous = batches.get(batch.execution_id);
+                        if (previous && JSON.stringify(previous.deliveryIds) !== JSON.stringify(batch.delivery_ids))
+                            throw new Error('Transport batch membership changed');
+                        const observedAt = new Date().toISOString();
+                        // Read separately from active executions. This is current availability,
+                        // not the snapshot a daimon_inbox tool call might return to the model.
+                        const budget = availability.agents.find(row => row.agent_id === agentId)?.budget;
+                        const allowances = budget === undefined ? undefined : { source: 'availability', observedAt, budget };
+                        const observed = previous ?? { executionId: batch.execution_id, deliveryIds: [...batch.delivery_ids], observedAt, ...(allowances ? { allowances } : {}) };
+                        batches.set(batch.execution_id, observed);
+                        for (const id of batch.delivery_ids)
+                            select(id).executionIds.add(batch.execution_id);
+                        if (primary) {
+                            evidence.batch = { executionId: observed.executionId, deliveryIds: [...observed.deliveryIds], observedAt: observed.observedAt };
+                            evidence.allowances ??= allowances;
+                        }
+                    }
+                    for (const row of [...activity.items, receipt]) {
+                        const selection = selected.get(row.delivery_id);
+                        if (row.agent_id !== agentId || !selection)
+                            continue;
+                        const envelope = envelopes.get(row.delivery_id);
+                        if (envelope && row.acceptance_id !== envelope.acceptanceId)
+                            throw new Error('Transport receipt acceptance identity changed');
+                        selection.receipt = structuredClone(row);
+                        if (row.execution_id !== undefined)
+                            selection.executionIds.add(row.execution_id);
+                    }
+                    snapshot(evidence);
+                },
+                finish() { if (armed === current) {
+                    armed = undefined;
+                    sealed = true;
+                } },
+            };
+        },
+        async accept(value) {
+            // Capture the arm before awaiting fsync. A request begun before this run
+            // cannot bind merely because its acceptance completed after arming.
+            // Only observe identity here. Daimon's host owns parsing and structured
+            // schema rejection, including non-object JSON values.
+            const request = value;
+            const identity = JSON.stringify([request?.agent_id, request?.delivery_id]);
+            // Once a run seals, only real native idempotency keys can pass until the
+            // next arm. A publisher still in flight must see refusal, not start work
+            // that the already-sealed terminal frame can never account for.
+            if (!armed && sealed && !admittedIdentities.has(identity))
+                throw new TransportAdmissionClosedError();
+            const current = armed;
+            if (current) {
+                current.generation++;
+                current.pending++;
+            }
+            try {
+                if (!request || typeof request.agent_id !== 'string' || typeof request.delivery_id !== 'string')
+                    return await host.accept(value);
+                const arrival = { run: armed, request };
+                const queue = arrivals.get(identity) ?? { attempts: [], decided: false };
+                arrivals.set(identity, queue);
+                if (!queue.decided)
+                    queue.attempts.push(arrival);
+                let result;
+                try {
+                    result = await host.accept(value);
+                }
+                catch (error) {
+                    arrival.outcome = 'refused';
+                    bind(queue);
+                    throw error;
+                }
+                if (result.state !== 'accepted') {
+                    arrival.outcome = 'refused';
+                    bind(queue);
+                    return result;
+                }
+                if (result.agent_id === request.agent_id && result.delivery_id === request.delivery_id)
+                    admittedIdentities.add(identity);
+                if (request.agent_id === agentId && result.agent_id === agentId && result.delivery_id === request.delivery_id && !envelopes.has(request.delivery_id)) {
+                    envelopes.set(request.delivery_id, { acceptanceId: result.acceptance_id, deliveryId: request.delivery_id, event: structuredClone(request.event) });
+                }
+                if (current && result.agent_id === agentId && result.delivery_id === request.delivery_id) {
+                    agentAcceptances.set(request.delivery_id, result.acceptance_id);
+                }
+                arrival.outcome = result;
+                bind(queue);
+                return result;
+            }
+            finally {
+                if (current) {
+                    current.pending--;
+                    current.generation++;
+                }
+            }
+        },
+    };
+}
+//# sourceMappingURL=transport.js.map

package/dist/runtime/daimon/training/native/worker/wake-delivery/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../../../../../src/runtime/daimon/training/native/worker/wake-delivery/transport.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAcnD,iFAAiF;AACjF,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,gBAAgB,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;CACvD;AAED,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CAAC,IAAgB,EAAE,OAAe;IACvE,IAAI,KAA2B,CAAC;IAChC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmD,CAAC;IAC7E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkE,CAAC;IAC3F,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6D,CAAC;IACrF,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,EAAE;QAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QACrE,OAAO,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;IAC3B,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,QAA2B,EAAE,EAAE;QAC/C,QAAQ,CAAC,UAAU,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzH,QAAQ,CAAC,kBAAkB,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU;YAClF,YAAY,EAAE,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7G,QAAQ,CAAC,OAAO,GAAG,eAAe,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1D,QAAQ,CAAC,mBAAmB,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,KAAK,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACvJ,QAAQ,CAAC,qBAAqB,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3H,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAuB,EAAE,EAAE;QACvC,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO;QAC1B,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,OAAO;YAAE,OAAO;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAA2B,CAAC;QACjD,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/B,IAAI,KAAK,IAAI,OAAO,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;YACpG,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACrH,6EAA6E;YAC7E,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC;gBACvB,OAAO,CAAC,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;gBAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC;gBACrD,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;YACD,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,OAAO;QACL,KAAK;YACH,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3I,CAAC;QACD,KAAK,CAAC,MAAc,EAAE,MAA+B;YACnD,IAAI,OAA6B,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAmB,IAAI,CAAC,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,MAAM,QAAQ,GAAsB,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,qBAAqB,EAAE,EAAE,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;YACjK,MAAM,OAAO,GAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YACnF,IAAI,QAAQ,GAAoB,EAAE,CAAC;YACnC,IAAI,aAAiC,CAAC;YACtC,IAAI,cAAkC,CAAC;YACvC,MAAM,QAAQ,GAAG,CAAC,GAAkB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;gBAC7F,GAAG,CAAC,KAAK,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrF,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,EAAE;gBACvC,0EAA0E;gBAC1E,2EAA2E;gBAC3E,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,KAAK,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;gBACjI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;oBACjG,CAAC,GAAG,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACpE,GAAG,CAAC,WAAW,KAAK,EAAE,IAAI,GAAG,CAAC,aAAa,KAAK,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC/E,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;wBACtE,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACrF,CAAC,CAAC;YACF,KAAK,GAAG,OAAO,CAAC;YAChB,OAAO;gBACL,QAAQ,EAAE,QAAQ,EAAE,MAAM;gBAC1B,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU;gBACpC,gFAAgF;gBAChF,IAAI,CAAC,UAAkB,EAAE,MAAqB;oBAC5C,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;wBAAE,OAAO,KAAK,CAAC;oBACrH,KAAK,GAAG,SAAS,CAAC;oBAClB,MAAM,GAAG,IAAI,CAAC;oBACd,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,CAAC,OAAsB,EAAE,QAAwB,EAAE,YAAgC,EAAE,WAAoB;oBAC9G,QAAQ,GAAG,eAAe,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC;oBACjG,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,OAAO,CAAC;oBACnF,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,QAAQ,CAAC;oBACrF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;wBAC9C,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;4BAAE,SAAS;wBAC7F,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAW,CAAC,CAAC;wBAClE,IAAI,OAAO,IAAI,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW;4BAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;wBACvI,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;wBACjD,IAAI,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;wBACnJ,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;wBAC5C,wEAAwE;wBACxE,uEAAuE;wBACvE,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,MAAM,CAAC;wBACjF,MAAM,UAAU,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAuB,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;wBAC9G,MAAM,QAAQ,GAAG,QAAQ,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;wBAC1J,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;wBAC1C,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,YAAY;4BAAE,MAAM,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;wBACrF,IAAI,OAAO,EAAE,CAAC;4BACZ,QAAQ,CAAC,KAAK,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;4BAChI,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC;wBACrC,CAAC;oBACH,CAAC;oBACD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;wBAC/C,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;wBAChD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,SAAS;4BAAE,SAAS;wBACrD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;wBAChD,IAAI,QAAQ,IAAI,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,YAAY;4BAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;wBAC9H,SAAS,CAAC,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;wBACzC,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;4BAAE,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;oBACnF,CAAC;oBACD,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACrB,CAAC;gBACD,MAAM,KAAK,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;oBAAC,KAAK,GAAG,SAAS,CAAC;oBAAC,MAAM,GAAG,IAAI,CAAC;gBAAC,CAAC,CAAC,CAAC;aAC1E,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAc;YACzB,yEAAyE;YACzE,oEAAoE;YACpE,wEAAwE;YACxE,sDAAsD;YACtD,MAAM,OAAO,GAAG,KAAiC,CAAC;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;YAC3E,yEAAyE;YACzE,yEAAyE;YACzE,gEAAgE;YAChE,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,6BAA6B,EAAE,CAAC;YACrG,MAAM,OAAO,GAAG,KAAK,CAAC;YACtB,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YACzD,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;oBAAE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACjI,MAAM,OAAO,GAAY,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBACzE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC9B,IAAI,CAAC,KAAK,CAAC,OAAO;oBAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjD,IAAI,MAAM,CAAC;gBACX,IAAI,CAAC;oBAAC,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;gBAC1C,OAAO,KAAK,EAAE,CAAC;oBAAC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;gBACxE,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBAChC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzC,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;oBAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACzH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;oBACrJ,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrJ,CAAC;gBACD,IAAI,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;oBACzF,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;gBAClE,CAAC;gBACD,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtC,OAAO,MAAM,CAAC;YAChB,CAAC;oBAAS,CAAC;gBAAC,IAAI,OAAO,EAAE,CAAC;oBAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBAAC,CAAC;YAAC,CAAC;QACzE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/daimon/training/native/worker/wake-delivery/types.d.ts

@@ -0,0 +1,91 @@
+import type { NativeReceipt } from '../types.js';
+export type TransportDeliverySource = {
+    kind: 'transport';
+    deliveryId: string;
+    deliveryIdPrefix?: never;
+} | {
+    kind: 'transport';
+    deliveryIdPrefix: string;
+    deliveryId?: never;
+};
+export interface NativeWakeRequest {
+    token?: string;
+    agent_id: string;
+    delivery_id: string;
+    event: {
+        version: 'noopolis.daimon.wake.v2';
+        kind: 'manual' | 'message' | 'schedule' | 'external';
+        text: string;
+        occurred_at: string;
+    };
+}
+export interface NativeAcceptance {
+    state: 'accepted';
+    acceptance_id: string;
+    version?: string;
+    agent_id?: string;
+    delivery_id?: string;
+    request_digest?: string;
+    accepted_at?: string;
+}
+export type NativeAcceptanceResult = NativeAcceptance | {
+    state: 'rejected' | 'stopped';
+    code: string;
+    version?: string;
+    blocked?: {
+        version: string;
+        reason: string;
+        retry_after_ms: number;
+    };
+};
+export interface TransportEvidence {
+    source: TransportDeliverySource;
+    deliveryId?: string;
+    acceptanceId?: string;
+    /** Verbatim producer metadata; no token and no second task-clock projection. */
+    deliveries: {
+        acceptanceId: string;
+        deliveryId: string;
+        event: NativeWakeRequest['event'];
+    }[];
+    /** Complete only when the public active execution projection was observed. */
+    batch?: {
+        executionId: string;
+        deliveryIds: string[];
+        observedAt: string;
+    };
+    /** Every selected delivery, including peers without a route-observed envelope. */
+    selectedDeliveries?: {
+        deliveryId: string;
+        executionIds: string[];
+        receipt?: NativeReceipt;
+    }[];
+    /** All observed executions of selected deliveries, including deferred revisits. */
+    batches?: {
+        executionId: string;
+        deliveryIds: string[];
+        observedAt: string;
+        allowances?: {
+            source: 'availability';
+            observedAt: string;
+            budget: unknown;
+        };
+    }[];
+    deferredDeliveryIds: string[];
+    /** Selected across this trial's wakes; later input cannot erase unfinished work. */
+    unresolvedDeliveryIds: string[];
+    /** A current control observation, never claimed to be the model's rendered snapshot. */
+    allowances?: {
+        source: 'availability';
+        observedAt: string;
+        budget: unknown;
+    };
+    renderedAllowances: 'unavailable-public-api';
+}
+export type TransportRunState = {
+    state: 'idle';
+} | {
+    state: 'waiting' | 'observing';
+    wakeId: string;
+    source: TransportDeliverySource;
+};

package/dist/runtime/daimon/training/native/worker/wake-delivery/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/runtime/daimon/training/native/worker/wake-delivery/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../../src/runtime/daimon/training/native/worker/wake-delivery/types.ts"],"names":[],"mappings":""}

package/dist/runtime/daimon/training/native/worker/worker.d.ts

@@ -0,0 +1 @@
+export declare function runDaimonNativeWorker(args: readonly string[]): Promise<void>;

package/dist/runtime/daimon/training/native/worker/worker.js

@@ -0,0 +1,103 @@
+import { readdir } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { createWorkerController } from './control.js';
+import { MAX_TRIAL_WAKES, engineWakeTimeoutMs } from './deliveries.js';
+import { assertFreshNativeEvidence } from './evidence/index.js';
+import { assertNativeProfile, verifyNativeWorkerStartup, verifyWorkerPaths } from './profile.js';
+import { configureNativeTaskClock, isGrokLaunch, nativeTrialArtifactsRoot, readPrivateFile } from '../receipt/index.js';
+import { loadDaimonRuntime } from './public.js';
+import { createWorkerServer, listenWorker } from './server.js';
+import { persistNativeSandboxProjection } from './sandbox.js';
+export async function runDaimonNativeWorker(args) {
+    if (process.platform !== 'linux')
+        throw new Error('Canonical attention acceptance requires a Linux container');
+    // The same validation preparation can run through the public `verifyNativeWorkerStartup`.
+    const { options, launch } = await verifyNativeWorkerStartup(args);
+    const bytes = await readPrivateFile(options.config);
+    const runtime = await loadDaimonRuntime(launch.agent.engine, launch.delivery);
+    const grok = isGrokLaunch(launch) ? launch : undefined;
+    const { createOrganizationRuntimeControlHost, parseOrganizationRuntimeConfig } = runtime;
+    // Re-checked against Daimon's own parsed config, which may normalize what the raw bytes declared.
+    const config = parseOrganizationRuntimeConfig(JSON.parse(bytes));
+    assertNativeProfile(config, launch);
+    await verifyWorkerPaths(config, options, launch);
+    // Codex: the control root itself. Grok: this trial's own directory inside the container's fixed slot control root,
+    // which also holds Daimon's store and the previous trials' artifacts and can therefore never be empty.
+    const artifacts = nativeTrialArtifactsRoot(launch, options.trialId);
+    if ((await readdir(artifacts)).length)
+        throw new Error('Native control root must be empty before startup');
+    const token = (await readPrivateFile(options.tokenFile, 4096)).trim();
+    if (token.length < 24 || /\s/u.test(token))
+        throw new Error('Invalid isolated control token');
+    // Codex meters in this process; the Grok broker is the single sealed writer of its per-slot ledger.
+    const usageFile = grok ? grok.broker.usageLedgerPath : join(artifacts, 'usage.jsonl');
+    const requestsFile = grok ? join(dirname(usageFile), 'requests.jsonl') : join(artifacts, 'requests.jsonl');
+    await assertFreshNativeEvidence(config.agents[0].runtimeHomePath, usageFile, config.agents[0].id, launch.agent.model, grok ? { engine: 'grok', requestsFile } : { engine: 'codex' });
+    process.env[config.host.controlTokenEnv] = token;
+    process.env.NOOPOLIS_RUN_ID = options.trialId;
+    process.env.DAIMON_RUNTIME_ACCEPTANCE_STORE = artifacts;
+    process.env.DAIMON_TURN_USAGE_LEDGER_PATH = usageFile;
+    process.env.DAIMON_TURN_REQUESTS_LEDGER_PATH = requestsFile;
+    process.env.DAIMON_WAKE_FUSE_DIRECTORY = artifacts;
+    process.env.DAIMON_WAKE_FUSE_EPOCH = options.trialId;
+    // This owned worker has one verified launch; never inherit another slot's routing.
+    if (grok)
+        process.env.DAIMON_ENGINE_BROKER_SLOT = String(grok.broker.slot);
+    else
+        delete process.env.DAIMON_ENGINE_BROKER_SLOT;
+    // Derived, never a second number: a trial must be able to execute every
+    // continuation its own delivery gate will admit. One hard-coded wake here
+    // accepted a continuation the runtime then refused to run at all.
+    process.env.DAIMON_WAKE_FUSE_MAX_WAKES = String(MAX_TRIAL_WAKES);
+    process.env.DAIMON_WAKE_FUSE_MAX_TOKENS = String(launch.limits.maxTokens);
+    delete process.env.DAIMON_WAKE_FUSE;
+    // Engine-neutral names; the Codex aliases stay equal so older Codex runtimes keep their bound and Daimon never sees a conflict.
+    // Broker turn overrides may only lower the registered limits; the trial deadline still spans all wakes.
+    process.env.DAIMON_ENGINE_WAKE_TIMEOUT_MS = String(engineWakeTimeoutMs(options.timeoutMs, launch));
+    process.env.DAIMON_ENGINE_WAKE_TOKEN_CEILING = String(grok ? Math.min(launch.limits.wakeTokenCeiling, grok.broker.limits.maxTokens) : launch.limits.wakeTokenCeiling);
+    process.env.DAIMON_CODEX_WAKE_TIMEOUT_MS = process.env.DAIMON_ENGINE_WAKE_TIMEOUT_MS;
+    process.env.DAIMON_CODEX_WAKE_TOKEN_CEILING = process.env.DAIMON_ENGINE_WAKE_TOKEN_CEILING;
+    // Set only after this worker is running. Daimon consumes the loader path for
+    // child gates and strips it from engines; this process is never preloaded.
+    const taskClock = configureNativeTaskClock(launch.taskClock, options.timeoutMs);
+    const host = createOrganizationRuntimeControlHost(config, { acceptanceStorePath: artifacts, controlToken: token });
+    const controller = createWorkerController(host, config, options, token, launch, taskClock);
+    const server = createWorkerServer(controller, token);
+    try {
+        await host.start();
+        const health = await host.health();
+        const activity = await host.activityV2(token);
+        if (health.state !== 'running' || !activity || !Array.isArray(activity.executions) || activity.executions.length || activity.items.length) {
+            throw new Error('Native host did not start as a fresh idle runtime');
+        }
+        await persistNativeSandboxProjection(runtime, config, options, launch);
+        await listenWorker(server, config.host.bindHost, config.host.port);
+        process.stdout.write(`${JSON.stringify({ schema: 'spawnfile.training.daimon-native.ready.v1', trialId: options.trialId,
+            agentId: config.agents[0].id, model: config.agents[0].engine.model,
+            ...(grok ? { engine: 'grok', reasoningEffort: config.agents[0].engine.reasoningEffort } : {}), configSha256: options.configSha256,
+            ...(taskClock ? { taskClock } : {}), ...(launch.delivery === 'transport' ? { delivery: 'transport' } : {}),
+            port: config.host.port, nativeHealth: health, nativeActivity: activity })}\n`);
+    }
+    catch (error) {
+        await controller.stop();
+        server.closeAllConnections();
+        server.close();
+        throw error;
+    }
+    let shuttingDown = false;
+    const shutdown = () => {
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        void controller.stop().then(receipt => {
+            process.stdout.write(`${JSON.stringify(receipt)}\n`);
+            server.closeAllConnections();
+            server.close();
+            if (receipt.state !== 'acknowledged')
+                process.exitCode = 1;
+        });
+    };
+    process.once('SIGTERM', shutdown);
+    process.once('SIGINT', shutdown);
+}
+//# sourceMappingURL=worker.js.map

package/dist/runtime/daimon/training/native/worker/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/worker/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjG,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAE9D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAuB;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/G,0FAA0F;IAC1F,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,MAAM,EAAE,oCAAoC,EAAE,8BAA8B,EAAE,GAAG,OAAO,CAAC;IACzF,kGAAkG;IAClG,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,mHAAmH;IACnH,uGAAuG;IACvG,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAG,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC9F,oGAAoG;IACpG,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC3G,MAAM,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,eAAe,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EACpH,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,+BAA+B,GAAG,SAAS,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,SAAS,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,gCAAgC,GAAG,YAAY,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,SAAS,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC;IACrD,mFAAmF;IACnF,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;QACtE,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAClD,wEAAwE;IACxE,0EAA0E;IAC1E,kEAAkE;IAClE,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACpC,gIAAgI;IAChI,wGAAwG;IACxG,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACnG,OAAO,CAAC,GAAG,CAAC,gCAAgC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACtK,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,+BAA+B,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IAC3F,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,oCAAoC,CAAC,MAAM,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACnH,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1I,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,2CAA2C,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO;YACpH,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,KAAK;YACpE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY;YAClI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1G,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACvG,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QACpB,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC"}

package/dist/runtime/daimon/training/providers/grok-broker/broker.d.ts

@@ -0,0 +1,20 @@
+import { type GrokGrantPurpose, type GrokGrantReasoningEffort } from './grants.js';
+import type { InferenceProvider } from '../../../../../training/index.js';
+import type { runProcess } from '../../../../../training/index.js';
+import type { GrokGrantPool } from './grant-pool.js';
+export interface GrokBrokerInferenceOptions {
+    pool: GrokGrantPool;
+    /** Container-provisioned evaluator root for private GROK_HOMEs; absent fails closed. */
+    homeRoot: string | undefined;
+    purpose: GrokGrantPurpose;
+    reasoningEffort: GrokGrantReasoningEffort;
+    command?: string;
+    timeoutMs?: number;
+    process?: typeof runProcess;
+}
+/**
+ * Grok judge/optimizer inference through a Daimon broker inference grant. Never
+ * uses a desktop login: every failure to reach the broker, verify the client pin
+ * or provision the private home is a failure, not a fallback.
+ */
+export declare function createGrokBrokerInference(options: GrokBrokerInferenceOptions): InferenceProvider;

package/dist/runtime/daimon/training/providers/grok-broker/broker.js

@@ -0,0 +1,55 @@
+import { grokGrantModels, grokGrantPurposes, grokGrantReasoningEfforts } from './grants.js';
+import { InferenceFailure } from '../../../../../training/index.js';
+import { validateInferenceSchema } from '../../../../../training/index.js';
+import { runGrokCli } from '../grok-subscription/index.js';
+import { prepareGrokGrantCall } from './grant-home.js';
+/**
+ * Grok judge/optimizer inference through a Daimon broker inference grant. Never
+ * uses a desktop login: every failure to reach the broker, verify the client pin
+ * or provision the private home is a failure, not a fallback.
+ */
+export function createGrokBrokerInference(options) {
+    const { pool } = options;
+    return {
+        id: 'grok-broker-grant',
+        capabilities: { tools: 'disabled', billing: 'subscription', temperature: false, seed: false, credentialAuthority: `grok-broker-grant:${pool.id}` },
+        async generate(request) {
+            validateInferenceSchema(request.responseSchema);
+            const responseSchema = request.responseSchema === undefined ? undefined : structuredClone(request.responseSchema);
+            if (!grokGrantReasoningEfforts.includes(options.reasoningEffort) || !grokGrantPurposes.includes(options.purpose)) {
+                throw new InferenceFailure('unsupported', 'Invalid Grok broker-grant controls');
+            }
+            if (!request.prompt.trim() || !grokGrantModels.includes(request.model) ||
+                request.temperature !== undefined || request.seed !== undefined)
+                throw new InferenceFailure('unsupported', 'Invalid Grok broker-grant inference controls');
+            if (options.homeRoot === undefined)
+                throw new InferenceFailure('unsupported', 'Grok broker-grant inference requires a provisioned private home root');
+            if (request.signal?.aborted)
+                throw new InferenceFailure('cancelled', 'Grok cancelled before launch');
+            const timeoutMs = options.timeoutMs ?? 180_000;
+            const lease = await pool.acquire({ model: request.model, reasoningEffort: options.reasoningEffort, purpose: options.purpose }, timeoutMs, request.signal);
+            let result;
+            try {
+                const call = await prepareGrokGrantCall(options.homeRoot, lease.authority, lease.grant, request.prompt);
+                try {
+                    result = await runGrokCli({ command: options.command ?? 'grok', cwd: call.work, promptFile: call.promptFile, env: call.env,
+                        timeoutMs: lease.callTimeoutMs, cliModel: lease.authority.clientModelId, reasoningEffort: options.reasoningEffort, request, responseSchema,
+                        mode: { auth: 'broker-grant', clientModelId: lease.authority.clientModelId, grantModel: lease.grant.model }, process: options.process });
+                    return result;
+                }
+                finally {
+                    await call.cleanup();
+                }
+            }
+            finally {
+                await lease.settle(result === undefined ? { ok: false } : { ok: true, tokens: spent(result.usage) });
+            }
+        },
+    };
+}
+function spent(usage) {
+    if (usage === null || usage.inputTokens === null || usage.outputTokens === null)
+        return null;
+    return usage.inputTokens + usage.outputTokens;
+}
+//# sourceMappingURL=broker.js.map

package/dist/runtime/daimon/training/providers/grok-broker/broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/providers/grok-broker/broker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,yBAAyB,EACrC,MAAM,aAAa,CAAC;AAGrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAcvD;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAmC;IAC3E,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,OAAO;QACL,EAAE,EAAE,mBAAmB;QACvB,YAAY,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,IAAI,CAAC,EAAE,EAAE,EAAE;QAClJ,KAAK,CAAC,QAAQ,CAAC,OAAO;YACpB,uBAAuB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAChD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAClH,IAAI,CAAE,yBAAgD,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAE,iBAAwC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjK,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;YAClF,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAE,eAAqC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC3F,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,8CAA8C,CAAC,CAAC;YAC7J,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,sEAAsE,CAAC,CAAC;YACtJ,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;YACrG,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAuB,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5K,IAAI,MAAmC,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACxG,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG;wBACxH,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,aAAa,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,OAAO,EAAE,cAAc;wBAC1I,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC3I,OAAO,MAAM,CAAC;gBAChB,CAAC;wBAAS,CAAC;oBAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;YACrC,CAAC;oBAAS,CAAC;gBACT,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAmB;IAChC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7F,OAAO,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC;AAChD,CAAC"}

package/dist/runtime/daimon/training/providers/grok-broker/grant-fixtures.d.ts

@@ -0,0 +1,15 @@
+import { GrokGrantRefusal, type GrokInferenceGrantAuthority } from './grants.js';
+/** Test-only broker double: deterministic grants, recorded requests/releases, and a pin over its own rendered bytes. */
+export declare function fakeGrantAuthority(patch?: Partial<GrokInferenceGrantAuthority> & {
+    ttlMs?: number;
+    now?: () => number;
+    refusals?: GrokGrantRefusal[];
+}): {
+    authority: GrokInferenceGrantAuthority;
+    requests: {
+        model: import("./grants.js").GrokGrantModel;
+        reasoningEffort: import("./grants.js").GrokGrantReasoningEffort;
+        purpose: import("./grants.js").GrokGrantPurpose;
+    }[];
+    releases: string[];
+};

package/dist/runtime/daimon/training/providers/grok-broker/grant-fixtures.js

@@ -0,0 +1,29 @@
+import { createHash } from 'node:crypto';
+/** Test-only broker double: deterministic grants, recorded requests/releases, and a pin over its own rendered bytes. */
+export function fakeGrantAuthority(patch = {}) {
+    let next = 0;
+    const requests = [];
+    const releases = [];
+    const render = (input) => `[model.daimon-inference-grok]\nmodel = "${input.model}"\nbase_url = "${input.baseUrl}"\nenv_key = "${input.envKey}"\nreasoning = "${input.reasoningEffort}"\n`;
+    const authority = {
+        clientModelId: 'daimon-inference-grok', envKey: 'DAIMON_INFERENCE_GRANT', maxLiveGrants: 8,
+        async request(input) {
+            requests.push(input);
+            const refusal = patch.refusals?.shift();
+            if (refusal)
+                throw refusal;
+            next++;
+            const grant = { grantId: next.toString(16).padStart(32, '0'), token: `inference_${'T'.repeat(40)}${String(next).padStart(3, '0')}`,
+                baseUrl: 'http://127.0.0.1:43123/v1', ...input, expiresAt: new Date((patch.now ?? Date.now)() + (patch.ttlMs ?? 600_000)).toISOString(),
+                limits: { maxRequests: 64, maxTokens: 2_000_000, timeoutMs: 600_000 } };
+            return grant;
+        },
+        async release(grantId) { releases.push(grantId); return true; },
+        renderClientConfig: render,
+        // Pinned over this authority's own declared env key, so an unexpected key fails the key rule, not the pin.
+        pinnedClientConfigSha256: (model, reasoningEffort) => createHash('sha256').update(render({ baseUrl: 'http://127.0.0.1:43123/v1', model, reasoningEffort, envKey: patch.envKey ?? 'DAIMON_INFERENCE_GRANT' })).digest('hex'),
+        ...patch,
+    };
+    return { authority, requests, releases };
+}
+//# sourceMappingURL=grant-fixtures.js.map

package/dist/runtime/daimon/training/providers/grok-broker/grant-fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-fixtures.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/providers/grok-broker/grant-fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,wHAAwH;AACxH,MAAM,UAAU,kBAAkB,CAAC,QAAsH,EAAE;IACzJ,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,QAAQ,GAA4D,EAAE,CAAC;IAC7E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,CAAC,KAAuE,EAAE,EAAE,CACzF,2CAA2C,KAAK,CAAC,KAAK,kBAAkB,KAAK,CAAC,OAAO,iBAAiB,KAAK,CAAC,MAAM,mBAAmB,KAAK,CAAC,eAAe,KAAK,CAAC;IAClK,MAAM,SAAS,GAAgC;QAC7C,aAAa,EAAE,uBAAuB,EAAE,MAAM,EAAE,wBAAwB,EAAE,aAAa,EAAE,CAAC;QAC1F,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;YACxC,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC;YAC3B,IAAI,EAAE,CAAC;YACP,MAAM,KAAK,GAAuB,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,aAAa,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACpJ,OAAO,EAAE,2BAA2B,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE;gBACvI,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;QAC/D,kBAAkB,EAAE,MAAM;QAC1B,2GAA2G;QAC3G,wBAAwB,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAG,KAAK,CAAC,MAA6B,IAAI,wBAAwB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACnP,GAAG,KAAK;KACT,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC"}

package/dist/runtime/daimon/training/providers/grok-broker/grant-home.d.ts

@@ -0,0 +1,16 @@
+import { type GrokInferenceGrant, type GrokInferenceGrantAuthority } from './grants.js';
+export interface GrokGrantCall {
+    /** Disposable workspace: cwd, HOME and TMPDIR of the CLI. */
+    work: string;
+    promptFile: string;
+    /** Complete child environment. The grant token exists only here. */
+    env: NodeJS.ProcessEnv;
+    cleanup(): Promise<void>;
+}
+/**
+ * A private per-call GROK_HOME (0700, owned by this uid) under a caller-provisioned
+ * evaluator root, holding exactly the client config bytes whose sha256 equals the
+ * independent pin. Nothing from the ambient HOME, GROK_HOME or API-key variables
+ * reaches the child, so a desktop login can never be used instead of the grant.
+ */
+export declare function prepareGrokGrantCall(root: string, authority: GrokInferenceGrantAuthority, grant: GrokInferenceGrant, prompt: string): Promise<GrokGrantCall>;