spawnfile 0.1.25 → 0.1.27

package/dist/runtime/daimon/training/native/outcome.js

@@ -0,0 +1,37 @@
+import { bindTerminalEvidence } from './child/index.js';
+import { wakeEvidenceFile } from './worker/index.js';
+export function admittedNativeEvidence(value, launch, trialId, wakeId, ordinal, file, source, deliveries, wakeTimeoutMs) {
+    if (!value.activity || !value.receipt)
+        return undefined;
+    const wake = { wakeId, source, unevidenced: 'terminal-absent' };
+    let sealed = false;
+    bindTerminalEvidence(wake, value, launch, trialId, () => { sealed = true; }, wakeTimeoutMs);
+    if (sealed)
+        throw new Error('Native terminal evidence attribution conflict');
+    const delivery = value.receipt.delivery_id;
+    const own = (id) => launch.delivery === 'transport' ? deliveries.has(id) || id === delivery : id.startsWith(`${trialId}:`);
+    const ids = new Set([value.executionId]);
+    for (const item of value.activity.items) {
+        if (item.agent_id !== launch.agent.id)
+            throw new Error('Native activity evidence identity mismatch');
+        // Trial deliveries are authoritative; native tool receipts are not deliveries.
+        if ((launch.delivery === 'transport' && item.delivery_id.startsWith('moltnet:') ||
+            /^[0-9a-f-]{36}:/u.test(item.delivery_id)) && !own(item.delivery_id)) {
+            throw new Error('Native activity delivery identity mismatch');
+        }
+        if (own(item.delivery_id) && item.execution_id)
+            ids.add(item.execution_id);
+    }
+    // The worker's admitted trial ledger retains revisits that the latest delivery
+    // activity can no longer name. Legacy frames have only the activity projection.
+    for (const row of value.native.accounting?.usage ?? []) {
+        if (row.agent !== launch.agent.id || !row.wake)
+            throw new Error('Native accounting evidence identity mismatch');
+        ids.add(row.wake);
+    }
+    if (wake.unevidenced)
+        return undefined;
+    deliveries.add(delivery);
+    return { wakeId, executionId: value.executionId, executionIds: [...ids], evidenceFile: wakeEvidenceFile(file, ordinal) };
+}
+//# sourceMappingURL=outcome.js.map

package/dist/runtime/daimon/training/native/outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome.js","sourceRoot":"","sources":["../../../../../src/runtime/daimon/training/native/outcome.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAuD,MAAM,mBAAmB,CAAC;AAS1G,MAAM,UAAU,sBAAsB,CAAC,KAAuB,EAAE,MAA4B,EAAE,OAAe,EAC3G,MAAc,EAAE,OAAe,EAAE,IAAY,EAAE,MAA2C,EAC1F,UAAuB,EAAE,aAAsB;IAC/C,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAwD,EAAE,CAAC;IACvG,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC5F,IAAI,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAQ,CAAC,WAAW,CAAC;IAC5C,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IACnI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,WAAY,CAAC,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAS,CAAC,KAAK,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACrG,+EAA+E;QAC/E,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC;YAC3E,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,YAAY;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7E,CAAC;IACD,+EAA+E;IAC/E,gFAAgF;IAChF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QACvD,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAChH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACvC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAY,EAAE,YAAY,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,YAAY,EAAE,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;AAC5H,CAAC"}

package/dist/runtime/daimon/training/native/preparation/engine-config.d.ts

@@ -0,0 +1,21 @@
+import type { NativeLaunch } from '../receipt/index.js';
+/** The compiled Daimon agent fields this check reads (structurally Daimon's runtime config agent). */
+export interface NativeAgentConfig {
+    id: string;
+    engine: {
+        kind: string;
+        model?: string;
+        reasoningEffort?: string;
+        codexSandbox?: Readonly<Record<string, unknown>>;
+    };
+}
+/**
+ * Refuse a compiled agent config whose engine differs from the launch agent,
+ * before any subject starts.
+ *
+ * Codex: the same agent and model, with exactly the `workspace-no-network`
+ * sandbox (`workspace-write`, no network access, web search disabled, and no
+ * other sandbox field). Grok: the same agent, model and reasoning effort, and no
+ * Codex sandbox at all — the broker realm is its containment.
+ */
+export declare function assertNativeEngineConfig(agentConfig: NativeAgentConfig, launchAgent: NativeLaunch['agent']): void;

package/dist/runtime/daimon/training/native/preparation/engine-config.js

@@ -0,0 +1,30 @@
+/**
+ * Refuse a compiled agent config whose engine differs from the launch agent,
+ * before any subject starts.
+ *
+ * Codex: the same agent and model, with exactly the `workspace-no-network`
+ * sandbox (`workspace-write`, no network access, web search disabled, and no
+ * other sandbox field). Grok: the same agent, model and reasoning effort, and no
+ * Codex sandbox at all — the broker realm is its containment.
+ */
+export function assertNativeEngineConfig(agentConfig, launchAgent) {
+    const engine = agentConfig.engine;
+    if (agentConfig.id !== launchAgent.id)
+        throw new Error('Compiled native agent differs from the launch agent');
+    if (engine.kind !== launchAgent.engine || engine.model !== launchAgent.model) {
+        throw new Error('Compiled native engine or model differs from the launch agent');
+    }
+    if (launchAgent.engine === 'grok') {
+        if (engine.reasoningEffort !== launchAgent.reasoningEffort)
+            throw new Error('Compiled Grok reasoning effort differs from the launch agent');
+        if (engine.codexSandbox !== undefined)
+            throw new Error('A Grok subject cannot declare a Codex sandbox');
+        return;
+    }
+    const sandbox = engine.codexSandbox;
+    if (!engine.model?.trim() || !sandbox || sandbox.mode !== 'workspace-write' || sandbox.networkAccess !== false ||
+        sandbox.webSearch !== 'disabled' || Object.keys(sandbox).length !== 3) {
+        throw new Error('A Codex subject requires the explicit workspace-no-network sandbox (codex_policy: workspace-no-network)');
+    }
+}
+//# sourceMappingURL=engine-config.js.map

package/dist/runtime/daimon/training/native/preparation/engine-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-config.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/engine-config.ts"],"names":[],"mappings":"AAQA;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAA8B,EAAE,WAAkC;IACzG,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,IAAI,WAAW,CAAC,EAAE,KAAK,WAAW,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC9G,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,eAAe,KAAK,WAAW,CAAC,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAC5I,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACxG,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK;QAC1G,OAAO,CAAC,SAAS,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,yGAAyG,CAAC,CAAC;IAC7H,CAAC;AACH,CAAC"}

package/dist/runtime/daimon/training/native/preparation/fixtures.d.ts

@@ -0,0 +1,17 @@
+import type { TrialSlot } from '../../../../../training/index.js';
+import type { GrokSlotFreshness } from '../child/index.js';
+import type { GrokBrokerLaunch } from '../receipt/index.js';
+import type { NativeTrialRoots, ProvisionedSubject, SubjectProvisionInput, SubjectProvisioner } from './types.js';
+/** Test-only shapes of a Spawnfile-style training slot; never provisioning evidence. */
+export declare const grokSlotRoot = "/run/training/slots/1";
+export declare const grokContextRoot = "/run/spawnfile-training";
+export declare function grokLease(): TrialSlot;
+export declare function codexLease(): TrialSlot;
+export declare function grokBroker(freshness: GrokSlotFreshness): GrokBrokerLaunch;
+export declare function grokSubject(freshness: GrokSlotFreshness): ProvisionedSubject;
+export declare function codexSubject(roots: NativeTrialRoots): ProvisionedSubject;
+export declare const trialRoots: (root?: string) => NativeTrialRoots;
+/** Records every call in order; `shape` decides what the provisioner answers. */
+export declare function fakeProvisioner(shape: (input: SubjectProvisionInput) => ProvisionedSubject, log?: string[]): SubjectProvisioner & {
+    inputs: SubjectProvisionInput[];
+};

package/dist/runtime/daimon/training/native/preparation/fixtures.js

@@ -0,0 +1,50 @@
+/** Test-only shapes of a Spawnfile-style training slot; never provisioning evidence. */
+export const grokSlotRoot = '/run/training/slots/1';
+export const grokContextRoot = '/run/spawnfile-training';
+export function grokLease() {
+    return { index: 1, workerUid: 2201, ports: { base: 20100, count: 100 }, roots: {
+            workspace: `${grokSlotRoot}/workspace`, runtimeHome: `${grokSlotRoot}/runtime-home`, workerHome: '/run/daimon-workers/2201',
+            usageLedger: `${grokSlotRoot}/usage/usage.jsonl`, preflightReceipt: `${grokSlotRoot}/preflight.json`, controlRoot: `${grokSlotRoot}/state`,
+            home: `${grokSlotRoot}/runtime-home`, control: `${grokSlotRoot}/state`, context: grokContextRoot
+        } };
+}
+export function codexLease() {
+    return { index: 2, workerUid: process.geteuid(), isolation: 'shared-uid', roots: {}, ports: { base: 20200, count: 100 } };
+}
+export function grokBroker(freshness) {
+    const evaluatorPaths = [{ role: 'run-root', path: '/run/training/run' }, { role: 'context', path: grokContextRoot },
+        { role: 'sealed-inputs', path: '/run/training/sealed' }, { role: 'judge-home', path: '/run/training/grants' },
+        { role: 'slot-ledger', path: `${grokSlotRoot}/usage` }, { role: 'context', path: '/run/training/slots/0' }];
+    return { projectionVersion: 'noopolis.daimon.grok-broker-projection.v3', workerConfigVariant: 'unclocked',
+        projectionSha256: 'a'.repeat(64), slot: 1, workerUid: 2201, workerHomePath: '/run/daimon-workers/2201', architecture: 'arm64',
+        usageLedgerPath: `${grokSlotRoot}/usage/usage.jsonl`, seccompProfileSha256: 'b'.repeat(64), profileSha256: 'c'.repeat(64),
+        denyPaths: [...evaluatorPaths.map(row => row.path), `${grokSlotRoot}/state`].sort(),
+        limits: { maxRequests: 24, maxTokens: 400000, timeoutMs: 480000 }, evaluatorPaths: evaluatorPaths.map(row => ({ ...row })),
+        slotPreflightReceipt: `${grokSlotRoot}/preflight.json`, ...freshness };
+}
+export function grokSubject(freshness) {
+    const workspace = `${grokSlotRoot}/workspace`, home = `${grokSlotRoot}/runtime-home`;
+    return { agent: { id: 'agent:writer', engine: 'grok', model: 'grok-4.6', reasoningEffort: 'low' },
+        workspace: { source: workspace, target: workspace }, projections: [{ role: 'home', source: home, target: home }],
+        credentials: [], broker: grokBroker(freshness), generation: freshness.minGeneration,
+        roots: { workspace, home, control: `${grokSlotRoot}/state`, context: grokContextRoot },
+        ports: { control: 20101, moltnet: 20100 }, env: { MOLTNET_TOKEN: 'fixture' } };
+}
+export function codexSubject(roots) {
+    const home = `${roots.root}/home`;
+    return { agent: { id: 'agent:writer', engine: 'codex', model: 'gpt-5.5' },
+        workspace: { source: roots.workspace, target: roots.workspace },
+        projections: [{ role: 'home', source: home, target: home },
+            { role: 'memory', source: `${roots.root}/memory`, target: `${roots.root}/memory` },
+            { role: 'transport', source: `${roots.runtimeHome}/native/moltnet`, target: `${roots.runtimeHome}/native/moltnet` }],
+        credentials: [{ source: '/run/spawnfile-training-auth/codex', target: `${home}/.daimon-inbound/codex-auth` }],
+        roots: { workspace: roots.workspace, home, control: `${roots.runtimeHome}/native/root-control/acceptance` },
+        ports: { control: 20201, moltnet: 20200 }, env: {} };
+}
+export const trialRoots = (root = '/trials/t1') => ({ root, workspace: `${root}/workspace`, control: `${root}/control`, runtimeHome: `${root}/runtime` });
+/** Records every call in order; `shape` decides what the provisioner answers. */
+export function fakeProvisioner(shape, log = []) {
+    const inputs = [];
+    return { inputs, provision: async (input) => { log.push('provision'); inputs.push(input); return shape(input); } };
+}
+//# sourceMappingURL=fixtures.js.map

package/dist/runtime/daimon/training/native/preparation/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/fixtures.ts"],"names":[],"mappings":"AAKA,wFAAwF;AACxF,MAAM,CAAC,MAAM,YAAY,GAAG,uBAAuB,CAAC;AACpD,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAEzD,MAAM,UAAU,SAAS;IACvB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE;YAC7E,SAAS,EAAE,GAAG,YAAY,YAAY,EAAE,WAAW,EAAE,GAAG,YAAY,eAAe,EAAE,UAAU,EAAE,0BAA0B;YAC3H,WAAW,EAAE,GAAG,YAAY,oBAAoB,EAAE,gBAAgB,EAAE,GAAG,YAAY,iBAAiB,EAAE,WAAW,EAAE,GAAG,YAAY,QAAQ;YAC1I,IAAI,EAAE,GAAG,YAAY,eAAe,EAAE,OAAO,EAAE,GAAG,YAAY,QAAQ,EAAE,OAAO,EAAE,eAAe;SAAE,EAAE,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,OAAQ,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;AAC7H,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAA4B;IACrD,MAAM,cAAc,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE;QACjH,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,sBAAsB,EAAE;QAC7G,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,YAAY,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAU,CAAC;IACvH,OAAO,EAAE,iBAAiB,EAAE,2CAA2C,EAAE,mBAAmB,EAAE,WAAW;QACvG,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,0BAA0B,EAAE,YAAY,EAAE,OAAO;QAC7H,eAAe,EAAE,GAAG,YAAY,oBAAoB,EAAE,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACzH,SAAS,EAAE,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,YAAY,QAAQ,CAAC,CAAC,IAAI,EAAE;QACnF,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAC1H,oBAAoB,EAAE,GAAG,YAAY,iBAAiB,EAAE,GAAG,SAAS,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAA4B;IACtD,MAAM,SAAS,GAAG,GAAG,YAAY,YAAY,EAAE,IAAI,GAAG,GAAG,YAAY,eAAe,CAAC;IACrF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE;QAC/F,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAChH,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,aAAa;QACnF,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,YAAY,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;QACtF,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAuB;IAClD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,OAAO,CAAC;IAClC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;QACvE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE;QAC/D,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,SAAS,EAAE;YAClF,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,iBAAiB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,iBAAiB,EAAE,CAAC;QACtH,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,oCAAoC,EAAE,MAAM,EAAE,GAAG,IAAI,6BAA6B,EAAE,CAAC;QAC7G,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,WAAW,iCAAiC,EAAE;QAC3G,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,YAAY,EAAoB,EAAE,CAClE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC,CAAC;AAEzG,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,KAA2D,EAAE,MAAgB,EAAE;IAC7G,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnH,CAAC"}

package/dist/runtime/daimon/training/native/preparation/index.d.ts

@@ -0,0 +1,7 @@
+export { prepareNativeSubject } from './subject.js';
+export { createExperimentSlotFreshness, experimentSlotFreshnessFile } from '../../services/index.js';
+export { bindTrialPathsToSlot, nativeSubjectScratch, nativeTrialInputsRoot } from './layout.js';
+export type { NativeScratchName, NativeSubjectLayout } from './layout.js';
+export { assertNativeEngineConfig } from './engine-config.js';
+export type { NativeAgentConfig } from './engine-config.js';
+export type { NativeSubjectEngine, NativeTrialRoots, PrepareNativeSubjectOptions, ProvisionedSubject, SubjectProvisionInput, SubjectProvisioner } from './types.js';

package/dist/runtime/daimon/training/native/preparation/index.js

@@ -0,0 +1,5 @@
+export { prepareNativeSubject } from './subject.js';
+export { createExperimentSlotFreshness, experimentSlotFreshnessFile } from '../../services/index.js';
+export { bindTrialPathsToSlot, nativeSubjectScratch, nativeTrialInputsRoot } from './layout.js';
+export { assertNativeEngineConfig } from './engine-config.js';
+//# sourceMappingURL=index.js.map

package/dist/runtime/daimon/training/native/preparation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEhG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/runtime/daimon/training/native/preparation/layout.d.ts

@@ -0,0 +1,66 @@
+import type { NativeSubjectEngine } from './types.js';
+/**
+ * The layout fields a prepared subject (or its launch) already fixes. A
+ * `ProvisionedSubject` satisfies it; so does a launch with `roots.control` set
+ * to its control root.
+ */
+export interface NativeSubjectLayout {
+    agent: {
+        engine: NativeSubjectEngine;
+    };
+    projections: readonly {
+        role: string;
+        source: string;
+    }[];
+    roots: Readonly<Record<string, string>> & {
+        readonly control: string;
+    };
+    broker?: {
+        evaluatorPaths: readonly {
+            role: string;
+            path: string;
+        }[];
+    };
+}
+export type NativeScratchName = 'memory' | 'transport';
+/**
+ * Point the evaluator's own trial workspace and runtime home at the slot's fixed
+ * directories.
+ *
+ * A brokered slot pins its workspace and runtime home per container and the
+ * projection digest binds both, so they cannot move; the adapter requires
+ * `realpath(workspacePath)` and `realpath(runtimeHomePath)` to be exactly them.
+ * A symlink is what makes the evaluator's trial paths resolve there. Only the
+ * evaluator's own entry is replaced (a previous link is unlinked, never
+ * followed) and the slot directories themselves are never written or cleared:
+ * the next recycle owns them.
+ */
+export declare function bindTrialPathsToSlot(paths: {
+    workspace: string;
+    runtimeHome: string;
+}, subject: {
+    roots: {
+        readonly workspace: string;
+        readonly home: string;
+    };
+}): Promise<void>;
+/**
+ * Where one trial's private control inputs (config, token, env file) live.
+ *
+ * Codex: `inputs/` beside the per-trial control root, inside the trial runtime
+ * home the adapter anchors every Codex control input to.
+ *
+ * Grok: the slot control root is shared and its runtime home is subject-writable,
+ * so inputs go into the denied `context` evaluator root the provisioner names in
+ * `roots.context`, under `trials/trial-<digest>`. That root must be one of the
+ * broker's `context` evaluator paths, which launch.v2 requires to be denied.
+ */
+export declare function nativeTrialInputsRoot(subject: NativeSubjectLayout, trialId: string): string;
+/**
+ * Where a subject's private memory or local transport scratch lives.
+ *
+ * Grok declares exactly one projection, so scratch sits inside that single home
+ * projection under `training/<name>`; the next recycle wipes it with the home.
+ * Codex keeps its own fresh `memory` / `transport` projections.
+ */
+export declare function nativeSubjectScratch(subject: NativeSubjectLayout, name: NativeScratchName): string;

package/dist/runtime/daimon/training/native/preparation/layout.js

@@ -0,0 +1,87 @@
+import { lstat, realpath, rm, symlink, unlink } from 'node:fs/promises';
+import { basename, dirname, isAbsolute, join } from 'node:path';
+import { nativeTrialLeaf, within } from '../receipt/index.js';
+const canonicalDirectory = async (path) => {
+    if (!isAbsolute(path) || await realpath(path) !== path || !(await lstat(path)).isDirectory()) {
+        throw new Error('A leased slot directory must be a canonical real directory');
+    }
+};
+/**
+ * Point the evaluator's own trial workspace and runtime home at the slot's fixed
+ * directories.
+ *
+ * A brokered slot pins its workspace and runtime home per container and the
+ * projection digest binds both, so they cannot move; the adapter requires
+ * `realpath(workspacePath)` and `realpath(runtimeHomePath)` to be exactly them.
+ * A symlink is what makes the evaluator's trial paths resolve there. Only the
+ * evaluator's own entry is replaced (a previous link is unlinked, never
+ * followed) and the slot directories themselves are never written or cleared:
+ * the next recycle owns them.
+ */
+export async function bindTrialPathsToSlot(paths, subject) {
+    const pairs = [[paths.workspace, subject.roots.workspace], [paths.runtimeHome, subject.roots.home]];
+    const [workspace, home] = [subject.roots.workspace, subject.roots.home];
+    if (within(workspace, home) || within(home, workspace))
+        throw new Error('Leased slot workspace and home must be disjoint');
+    for (const [trial, slot] of pairs) {
+        await canonicalDirectory(slot);
+        if (!isAbsolute(trial))
+            throw new Error('Trial paths must be absolute');
+        // The trial entry's own location, resolved without following the entry itself.
+        const entry = join(await realpath(dirname(trial)), basename(trial));
+        if ([workspace, home].some(root => within(root, entry) || within(entry, root))) {
+            throw new Error('A trial path cannot be, contain or sit inside a leased slot directory');
+        }
+    }
+    for (const [trial, slot] of pairs) {
+        const existing = await lstat(trial).catch((error) => { if (error.code === 'ENOENT')
+            return undefined; throw error; });
+        if (existing?.isSymbolicLink())
+            await unlink(trial);
+        else if (existing)
+            await rm(trial, { recursive: true });
+        await symlink(slot, trial, 'dir');
+        if (await realpath(trial) !== slot)
+            throw new Error('Trial path does not resolve to its leased slot directory');
+    }
+}
+/**
+ * Where one trial's private control inputs (config, token, env file) live.
+ *
+ * Codex: `inputs/` beside the per-trial control root, inside the trial runtime
+ * home the adapter anchors every Codex control input to.
+ *
+ * Grok: the slot control root is shared and its runtime home is subject-writable,
+ * so inputs go into the denied `context` evaluator root the provisioner names in
+ * `roots.context`, under `trials/trial-<digest>`. That root must be one of the
+ * broker's `context` evaluator paths, which launch.v2 requires to be denied.
+ */
+export function nativeTrialInputsRoot(subject, trialId) {
+    if (subject.agent.engine === 'codex')
+        return join(dirname(subject.roots.control), 'inputs');
+    const context = subject.roots.context;
+    if (!context || !subject.broker?.evaluatorPaths.some(row => row.role === 'context' && row.path === context)) {
+        throw new Error('A Grok subject must name a denied context evaluator root for its control inputs');
+    }
+    return join(context, 'trials', nativeTrialLeaf(trialId));
+}
+/**
+ * Where a subject's private memory or local transport scratch lives.
+ *
+ * Grok declares exactly one projection, so scratch sits inside that single home
+ * projection under `training/<name>`; the next recycle wipes it with the home.
+ * Codex keeps its own fresh `memory` / `transport` projections.
+ */
+export function nativeSubjectScratch(subject, name) {
+    if (subject.agent.engine === 'grok') {
+        const homes = subject.projections.filter(row => row.role === 'home');
+        if (homes.length !== 1 || subject.projections.length !== 1)
+            throw new Error('A Grok subject projects exactly its slot runtime home');
+        return join(homes[0].source, 'training', name);
+    }
+    const rows = subject.projections.filter(row => row.role === name);
+    if (rows.length !== 1)
+        throw new Error(`A Codex subject must declare exactly one ${name} projection`);
+    return rows[0].source;
+}
+//# sourceMappingURL=layout.js.map

package/dist/runtime/daimon/training/native/preparation/layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/layout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAiB9D,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;IAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAiD,EAC1F,OAAyE;IACzE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAU,CAAC;IAC7G,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC3H,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACxE,+EAA+E;QAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7I,IAAI,QAAQ,EAAE,cAAc,EAAE;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;aAC/C,IAAI,QAAQ;YAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAClH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA4B,EAAE,OAAe;IACjF,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IACtC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA4B,EAAE,IAAuB;IACxF,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACrI,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,aAAa,CAAC,CAAC;IACtG,OAAO,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;AACzB,CAAC"}

package/dist/runtime/daimon/training/native/preparation/subject.d.ts

@@ -0,0 +1,14 @@
+import type { PrepareNativeSubjectOptions, ProvisionedSubject } from './types.js';
+/**
+ * Prepare one native subject on a leased slot, before any trial bytes are written.
+ *
+ * The order is the contract. A broker (non-shared-uid) slot mints this trial's
+ * recycle nonce and generation floor from the experiment's freshness store
+ * BEFORE the provisioner runs, so the slot receipt the recycle publishes can only
+ * be this trial's. The provisioner's result is then refused unless its broker
+ * section parses as launch.v2 `broker`, echoes exactly that nonce and floor, and
+ * the launch fields it implies pass the same leased-slot verifier the adapter
+ * applies at start. A shared-uid slot admits Codex only and mints nothing; a
+ * Codex result is returned unchanged.
+ */
+export declare function prepareNativeSubject(options: PrepareNativeSubjectOptions): Promise<ProvisionedSubject>;

package/dist/runtime/daimon/training/native/preparation/subject.js

@@ -0,0 +1,67 @@
+import { assertLeasedLaunch } from '../container/index.js';
+import { grokBrokerLaunchSchema } from '../receipt/index.js';
+/**
+ * Prepare one native subject on a leased slot, before any trial bytes are written.
+ *
+ * The order is the contract. A broker (non-shared-uid) slot mints this trial's
+ * recycle nonce and generation floor from the experiment's freshness store
+ * BEFORE the provisioner runs, so the slot receipt the recycle publishes can only
+ * be this trial's. The provisioner's result is then refused unless its broker
+ * section parses as launch.v2 `broker`, echoes exactly that nonce and floor, and
+ * the launch fields it implies pass the same leased-slot verifier the adapter
+ * applies at start. A shared-uid slot admits Codex only and mints nothing; a
+ * Codex result is returned unchanged.
+ */
+export async function prepareNativeSubject(options) {
+    const { slot, engine, agentId, provisioner, signal } = options;
+    signal.throwIfAborted();
+    const shared = slot.isolation === 'shared-uid';
+    if (shared && engine === 'grok')
+        throw new Error('A shared-uid slot cannot host a brokered Grok subject');
+    if (!shared && engine !== 'grok')
+        throw new Error('A broker slot lease hosts Grok subjects only');
+    let freshness;
+    if (!shared) {
+        if (!options.freshness)
+            throw new Error('A broker slot requires the experiment slot freshness store');
+        freshness = await options.freshness.request(slot.index);
+        signal.throwIfAborted();
+    }
+    const result = await provisioner.provision({ slot, engine, agentId, ...(freshness ? { freshness } : {}),
+        trialRoots: options.trialRoots, signal });
+    signal.throwIfAborted();
+    if (result.agent.engine !== engine || result.agent.id !== agentId)
+        throw new Error('Provisioned subject names another agent or engine');
+    const homes = result.projections.filter(row => row.role === 'home');
+    if (homes.length !== 1)
+        throw new Error('Provisioned subject must declare exactly one home projection');
+    if (result.roots.workspace !== result.workspace.source || result.roots.home !== homes[0].source) {
+        throw new Error('Provisioned subject roots differ from its workspace and home projection');
+    }
+    if (!Number.isSafeInteger(result.ports?.control))
+        throw new Error('Provisioned subject must declare an integer control port');
+    const host = { bindHost: '127.0.0.1', port: result.ports.control };
+    if (!freshness) {
+        if (result.broker !== undefined || result.generation !== undefined)
+            throw new Error('A Codex subject carries no broker slot evidence');
+        assertLeasedLaunch({ ...result, controlRoot: result.roots.control, host }, slot);
+        return result;
+    }
+    const parsed = grokBrokerLaunchSchema.safeParse(result.broker);
+    if (!parsed.success)
+        throw new Error('Provisioned Grok broker section does not satisfy launch.v2');
+    const broker = parsed.data;
+    if (broker.expectedNonce !== freshness.expectedNonce || broker.minGeneration !== freshness.minGeneration) {
+        throw new Error('Provisioned Grok broker does not echo this trial\'s slot freshness');
+    }
+    if (result.generation !== undefined && (!Number.isSafeInteger(result.generation) || result.generation < freshness.minGeneration)) {
+        throw new Error('Provisioned slot generation is below the evaluator freshness floor');
+    }
+    if (result.credentials.length || result.projections.length !== 1) {
+        throw new Error('A brokered Grok subject carries no credentials and projects only its slot runtime home');
+    }
+    // The verifier reads only identity, paths and the control port; the rest of launch.v2 does not exist yet.
+    assertLeasedLaunch({ ...result, broker, controlRoot: result.roots.control, host }, slot);
+    return { ...result, broker };
+}
+//# sourceMappingURL=subject.js.map

package/dist/runtime/daimon/training/native/preparation/subject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subject.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/subject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAqB,MAAM,qBAAqB,CAAC;AAIhF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAoC;IAC7E,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC/D,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC;IAC/C,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1G,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClG,IAAI,SAAwC,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACtG,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,cAAc,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACxI,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9H,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,WAAoB,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC5E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACvI,kBAAkB,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAA6B,EAAE,IAAI,CAAC,CAAC;QAC5G,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;QACjI,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC5G,CAAC;IACD,0GAA0G;IAC1G,kBAAkB,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAA6B,EAAE,IAAI,CAAC,CAAC;IACpH,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC"}

package/dist/runtime/daimon/training/native/preparation/types.d.ts

@@ -0,0 +1,69 @@
+import type { TrialSlot } from '../../../../../training/index.js';
+import type { GrokSlotFreshness, GrokSlotFreshnessStore } from '../child/index.js';
+import type { GrokBrokerLaunch, NativeLaunch } from '../receipt/index.js';
+export type NativeSubjectEngine = NativeLaunch['agent']['engine'];
+/** The evaluator's own per-trial directories (structurally the experiment runner's `TrialPaths`). */
+export interface NativeTrialRoots {
+    root: string;
+    workspace: string;
+    control: string;
+    runtimeHome: string;
+}
+export interface SubjectProvisionInput {
+    slot: TrialSlot;
+    engine: NativeSubjectEngine;
+    agentId: string;
+    /**
+     * This trial's recycle nonce and generation floor, minted by Training before the
+     * provisioner runs. Present for every broker (non-shared-uid) slot: the provisioner
+     * sends the nonce with its recycle request and echoes both into `broker`.
+     */
+    freshness?: GrokSlotFreshness;
+    trialRoots: NativeTrialRoots;
+    signal: AbortSignal;
+}
+/**
+ * Everything the provisioner resolved for one leased slot, before any trial bytes
+ * are written. The fields are launch receipt fields; nothing here is recomputed
+ * by Training, which only validates them against the lease and its freshness.
+ */
+export interface ProvisionedSubject {
+    agent: NativeLaunch['agent'];
+    workspace: NativeLaunch['workspace'];
+    projections: NativeLaunch['projections'];
+    credentials: NativeLaunch['credentials'];
+    /** Required for Grok, forbidden for Codex. Carried verbatim into launch.v2. */
+    broker?: GrokBrokerLaunch;
+    /**
+     * Resolved subject roots: `workspace` and `home` are the workspace and home
+     * projection sources, `control` the launch control root. Grok also names
+     * `context`, the denied evaluator root that holds per-trial control inputs.
+     */
+    roots: Readonly<Record<string, string>> & {
+        readonly workspace: string;
+        readonly home: string;
+        readonly control: string;
+    };
+    /** `control` is the worker control port; other named ports stay provisioner-owned. */
+    ports: Readonly<Record<string, number>> & {
+        readonly control: number;
+    };
+    /** The slot generation the provisioner's recycle published. */
+    generation?: number;
+    /** Subject environment entries the caller writes into the launch env file. */
+    env: Readonly<Record<string, string>>;
+}
+/** Implemented by the slot owner (for example Spawnfile's training lease); satisfied structurally. */
+export interface SubjectProvisioner {
+    provision(input: SubjectProvisionInput): Promise<ProvisionedSubject>;
+}
+export interface PrepareNativeSubjectOptions {
+    slot: TrialSlot;
+    engine: NativeSubjectEngine;
+    agentId: string;
+    provisioner: SubjectProvisioner;
+    /** Required for broker slots: the experiment's persisted freshness store. */
+    freshness?: GrokSlotFreshnessStore;
+    trialRoots: NativeTrialRoots;
+    signal: AbortSignal;
+}

package/dist/runtime/daimon/training/native/preparation/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/runtime/daimon/training/native/preparation/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/types.ts"],"names":[],"mappings":""}

package/dist/runtime/daimon/training/native/receipt/artifacts.d.ts

@@ -0,0 +1,25 @@
+import { type NativeLaunch } from './schema.js';
+/** Fixed name of the Grok control-root subtree Training owns; everything else under a slot control root belongs to Daimon or the container. */
+export declare const grokTrialArtifactsDirectory = "training-trials";
+/**
+ * Where one trial's private control artifacts live.
+ *
+ * Codex: the control root itself. Preparation creates a fresh empty control
+ * directory per trial inside that trial's runtime home, so nothing is ever
+ * shared and `wx` writes cannot collide.
+ *
+ * Grok: the broker-capable training container fixes the control root at a slot
+ * path (`/run/training/slot/state`) whose mask is what the projection digest
+ * binds, and Daimon's own wake-acceptance store already lives inside it. The
+ * container cannot move it without changing `projection_sha256`, and the slot
+ * supervisor's recycle only wipes Daimon's store, so the control root is
+ * neither empty nor per-trial. Training therefore owns exactly one subtree of
+ * it and separates trials inside that subtree itself: the directory is created
+ * once, non-recursively, so a repeated trial identity fails instead of
+ * overwriting or colliding with the previous trial's `wx` artifacts. The leaf
+ * name is a digest of the trial identity, so a caller-supplied identity can
+ * never escape the control root or collide with `training-trials` itself.
+ */
+export declare function nativeTrialArtifactsRoot(launch: NativeLaunch, trialId: string): string;
+/** One trial's directory name: a digest, so a caller-supplied identity can never escape or collide. */
+export declare const nativeTrialLeaf: (trialId: string) => string;

package/dist/runtime/daimon/training/native/receipt/artifacts.js

@@ -0,0 +1,32 @@
+import { join } from 'node:path';
+import { isGrokLaunch } from './schema.js';
+import { sha256 } from './paths.js';
+/** Fixed name of the Grok control-root subtree Training owns; everything else under a slot control root belongs to Daimon or the container. */
+export const grokTrialArtifactsDirectory = 'training-trials';
+/**
+ * Where one trial's private control artifacts live.
+ *
+ * Codex: the control root itself. Preparation creates a fresh empty control
+ * directory per trial inside that trial's runtime home, so nothing is ever
+ * shared and `wx` writes cannot collide.
+ *
+ * Grok: the broker-capable training container fixes the control root at a slot
+ * path (`/run/training/slot/state`) whose mask is what the projection digest
+ * binds, and Daimon's own wake-acceptance store already lives inside it. The
+ * container cannot move it without changing `projection_sha256`, and the slot
+ * supervisor's recycle only wipes Daimon's store, so the control root is
+ * neither empty nor per-trial. Training therefore owns exactly one subtree of
+ * it and separates trials inside that subtree itself: the directory is created
+ * once, non-recursively, so a repeated trial identity fails instead of
+ * overwriting or colliding with the previous trial's `wx` artifacts. The leaf
+ * name is a digest of the trial identity, so a caller-supplied identity can
+ * never escape the control root or collide with `training-trials` itself.
+ */
+export function nativeTrialArtifactsRoot(launch, trialId) {
+    if (!isGrokLaunch(launch))
+        return launch.controlRoot;
+    return join(launch.controlRoot, grokTrialArtifactsDirectory, nativeTrialLeaf(trialId));
+}
+/** One trial's directory name: a digest, so a caller-supplied identity can never escape or collide. */
+export const nativeTrialLeaf = (trialId) => `trial-${sha256(trialId).slice(0, 32)}`;
+//# sourceMappingURL=artifacts.js.map

package/dist/runtime/daimon/training/native/receipt/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/receipt/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAqB,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC,+IAA+I;AAC/I,MAAM,CAAC,MAAM,2BAA2B,GAAG,iBAAiB,CAAC;AAE7D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAoB,EAAE,OAAe;IAC5E,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC;IACrD,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,2BAA2B,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,SAAS,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC"}