spawnfile 0.1.25 → 0.1.28

package/dist/runtime/daimon/training/native/worker/evidence/io.d.ts

@@ -0,0 +1,20 @@
+/** Retry observations only: never replay a native acceptance or other mutation. */
+export declare function settleNativeRead<T>(kind: string, read: () => Promise<T>, timeoutMs?: number): Promise<T>;
+export declare function readJson(file: string, kind: string, maximum: number): Promise<unknown>;
+export declare function object(value: unknown): Record<string, unknown>;
+export declare function timestamp(value: unknown): value is string;
+export declare function jsonLines(file: string, kind: string, maximum?: number, maximumLine?: number, settleEmpty?: boolean): Promise<unknown[]>;
+export declare function files(directory: string): Promise<string[]>;
+/**
+ * Where a single wake's terminal frame is filed, beside the trial's latest one.
+ *
+ * `evidence.json` is renamed over on every delivery, so a trial that ran several
+ * wakes kept only its last frame and the account of every earlier wake — the
+ * assignment that really bound, over a closed trace — was gone by the time
+ * anything read it. Each delivery now also files its own frame under its
+ * delivery ordinal, which is never reused within a trial, so the frames
+ * accumulate instead of replacing one another. Nothing is merged: each file
+ * holds exactly one wake's frame and that frame names its own wake.
+ */
+export declare function wakeEvidenceFile(file: string, ordinal: number): string;
+export declare function writeEvidence(file: string, value: unknown): Promise<void>;

package/dist/runtime/daimon/training/native/worker/evidence/io.js

@@ -0,0 +1,130 @@
+import { lstat, readdir, readFile, rename, open } from 'node:fs/promises';
+import { dirname, extname } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { readPrivateFile } from '../../receipt/index.js';
+const MAX_STREAM = 64 * 1024 * 1024;
+class IncompleteNativeStreamError extends Error {
+}
+/** Retry observations only: never replay a native acceptance or other mutation. */
+export async function settleNativeRead(kind, read, timeoutMs = 1000) {
+    const deadline = performance.now() + timeoutMs;
+    for (;;) {
+        try {
+            return await read();
+        }
+        catch (error) {
+            if (!(error instanceof SyntaxError) && !(error instanceof IncompleteNativeStreamError))
+                throw error;
+            const remaining = deadline - performance.now();
+            // SyntaxError messages may contain evidence bytes. Publish only our label.
+            if (remaining <= 0) {
+                const Failure = error instanceof SyntaxError ? SyntaxError : Error;
+                throw new Failure(`Native ${kind} JSON did not settle before deadline (empty, torn, truncated or corrupt)`, { cause: new Error('Native JSON decoding failed') });
+            }
+            await new Promise(resolve => setTimeout(resolve, Math.min(25, remaining)));
+        }
+    }
+}
+export async function readJson(file, kind, maximum) {
+    return settleNativeRead(kind, async () => JSON.parse(await readPrivateFile(file, maximum)));
+}
+export function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Malformed native evidence record');
+    return value;
+}
+export function timestamp(value) {
+    return typeof value === 'string' && !Number.isNaN(Date.parse(value));
+}
+export async function jsonLines(file, kind, maximum = MAX_STREAM, maximumLine = maximum, settleEmpty = false) {
+    let incomplete = false;
+    return settleNativeRead(kind, async () => {
+        let source;
+        try {
+            source = await readPrivateFile(file, maximum);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+            if (!incomplete)
+                return [];
+            throw new IncompleteNativeStreamError('incomplete stream disappeared', { cause: new Error('Native stream unavailable') });
+        }
+        // An empty append-only ledger is valid before its first row. After observing
+        // a torn row it cannot erase that row by temporarily becoming empty.
+        if ((incomplete || settleEmpty) && !source || source && !source.endsWith('\n')) {
+            incomplete = true;
+            throw new IncompleteNativeStreamError('torn final record');
+        }
+        try {
+            return source.split('\n').filter(Boolean).map(line => {
+                if (Buffer.byteLength(line, 'utf8') + 1 > maximumLine)
+                    throw new Error(`Native ${kind} record exceeds its byte bound`);
+                return JSON.parse(line);
+            });
+        }
+        catch (error) {
+            incomplete = true;
+            throw error;
+        }
+    });
+}
+export async function files(directory) {
+    try {
+        const info = await lstat(directory);
+        if (!info.isDirectory() || info.isSymbolicLink())
+            throw new Error('Native evidence directory must be real');
+        return await readdir(directory);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return [];
+        throw error;
+    }
+}
+/**
+ * Where a single wake's terminal frame is filed, beside the trial's latest one.
+ *
+ * `evidence.json` is renamed over on every delivery, so a trial that ran several
+ * wakes kept only its last frame and the account of every earlier wake — the
+ * assignment that really bound, over a closed trace — was gone by the time
+ * anything read it. Each delivery now also files its own frame under its
+ * delivery ordinal, which is never reused within a trial, so the frames
+ * accumulate instead of replacing one another. Nothing is merged: each file
+ * holds exactly one wake's frame and that frame names its own wake.
+ */
+export function wakeEvidenceFile(file, ordinal) {
+    if (!Number.isSafeInteger(ordinal) || ordinal < 1)
+        throw new Error('Invalid native evidence delivery ordinal');
+    const extension = extname(file);
+    return `${file.slice(0, file.length - extension.length)}.${ordinal}${extension}`;
+}
+export async function writeEvidence(file, value) {
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    const handle = await open(temporary, 'wx', 0o600);
+    try {
+        await handle.writeFile(`${JSON.stringify(value, null, 2)}\n`);
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+    await rename(temporary, file);
+    const directory = await open(dirname(file), 'r');
+    try {
+        await directory.sync();
+    }
+    finally {
+        await directory.close();
+    }
+    let written;
+    try {
+        written = JSON.parse(await readFile(file, 'utf8'));
+    }
+    catch {
+        throw new Error('Native terminal evidence JSON readback failed');
+    }
+    if (JSON.stringify(written) !== JSON.stringify(value))
+        throw new Error('Native evidence readback differs');
+}
+//# sourceMappingURL=io.js.map

package/dist/runtime/daimon/training/native/worker/evidence/io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../../../../../../../src/runtime/daimon/training/native/worker/evidence/io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACpC,MAAM,2BAA4B,SAAQ,KAAK;CAAG;AAClD,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAI,IAAY,EAAE,IAAsB,EAAE,SAAS,GAAG,IAAI;IAC9F,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC/C,SAAS,CAAC;QACR,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,EAAE,CAAC;QAAC,CAAC;QAC5B,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,2BAA2B,CAAC;gBAAE,MAAM,KAAK,CAAC;YACpG,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC/C,2EAA2E;YAC3E,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;gBACnE,MAAM,IAAI,OAAO,CAAC,UAAU,IAAI,0EAA0E,EACxG,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IACxE,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAY,CAAC,CAAC;AACzG,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACrH,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,OAAO,GAAG,UAAU,EAAE,WAAW,GAAG,OAAO,EAAE,WAAW,GAAG,KAAK;IAC1H,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACvC,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QACtD,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,IAAI,CAAC,UAAU;gBAAE,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,2BAA2B,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,6EAA6E;QAC7E,qEAAqE;QACrE,IAAI,CAAC,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/E,UAAU,GAAG,IAAI,CAAC;YAClB,MAAM,IAAI,2BAA2B,CAAC,mBAAmB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBACnD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,gCAAgC,CAAC,CAAC;gBACvH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;YACrC,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,UAAU,GAAG,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,SAAiB;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5G,OAAO,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACrG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC/G,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,SAAS,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,KAAc;IAC9D,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YACnF,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IACjC,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC;QAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IACpE,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IAAC,CAAC;IACtE,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AAC7G,CAAC"}

package/dist/runtime/daimon/training/native/worker/evidence/seal.d.ts

@@ -0,0 +1,3 @@
+import type { NativeTurnSeal } from '../types.js';
+/** Unknown members at every level are refused, including protocol-only fields the seal writer omits. */
+export declare function parseNativeTurnSeal(value: unknown, agentId: string, expectedModel: string): NativeTurnSeal;

package/dist/runtime/daimon/training/native/worker/evidence/seal.js

@@ -0,0 +1,67 @@
+import { z } from 'zod';
+import { grokModels } from '../../receipt/index.js';
+import { timestamp } from './io.js';
+// Mirrors Daimon's validated terminal projection, including pre-instrumentation rows.
+// The installed-writer contract test detects drift; product code never loads Daimon internals.
+const count = z.number().int().nonnegative();
+const identifier = z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u);
+const callName = z.string().regex(/^(?:<invalid>|<truncated>|[A-Za-z0-9_.-]{1,64})$/u);
+const reason = z.string().min(1).refine(value => Buffer.byteLength(value, 'utf8') <= 768 &&
+    [...value].every(character => character.charCodeAt(0) >= 0x20 && character.charCodeAt(0) !== 0x7f));
+const diagnostic = z.strictObject({
+    status: z.enum(['prelaunch_failed', 'worker_failed', 'output_failed', 'cancelled']),
+    stage: z.enum(['peer', 'request', 'registration', 'executable', 'exec', 'wait', 'output', 'attestation']),
+    failure_class: z.enum(['peer', 'protocol', 'registration', 'executable', 'exec', 'wait', 'output_limit', 'cancelled', 'profile_missing', 'profile_invalid']),
+    // The terminal protocol accepts signed safe integers here, unlike counters.
+    exit_code: z.number().int(), term_signal: z.number().int(), reason: reason.optional(),
+}).refine(row => {
+    if (row.status === 'prelaunch_failed') {
+        const stages = { peer: 'peer', request: 'protocol', registration: 'registration', executable: 'executable', exec: 'exec' };
+        return row.reason === undefined && stages[row.stage] === row.failure_class;
+    }
+    if (row.status === 'worker_failed' && row.stage === 'attestation') {
+        return row.reason === undefined && ['profile_missing', 'profile_invalid'].includes(row.failure_class);
+    }
+    if (row.status === 'worker_failed')
+        return row.stage === 'wait' && ['exec', 'wait'].includes(row.failure_class);
+    if (row.status === 'output_failed')
+        return row.stage === 'output' && row.failure_class === 'output_limit';
+    return row.stage === 'wait' && row.failure_class === 'cancelled';
+});
+const tunnels = z.strictObject({
+    opened: count, closed: count, delivered: count,
+    open: z.array(z.strictObject({ open_ms: count, delivered: z.boolean() })).max(8),
+}).refine(row => row.closed <= row.opened && row.delivered <= row.opened && row.open.length <= row.opened - row.closed);
+const mcp = z.strictObject({
+    started: count, answered: count, undecoded: count,
+    outstanding: z.array(z.strictObject({ name: callName, outstanding_ms: count })).max(16),
+    refusals: z.strictObject({ route: count, expired: count, exhausted: count, unrouted: count, oversized: count }).optional(),
+    tunnels: tunnels.optional(),
+}).refine(row => row.answered <= row.started && row.outstanding.length <= row.started - row.answered);
+const providerClock = z.strictObject({
+    requests: count, linesRewritten: count, requestsWithoutDateLine: count, linesIgnored: count.optional(),
+    injectedDate: z.string().regex(/^[0-9]{4}-[0-9]{2}-[0-9]{2}$/u).nullable(),
+    taskDate: z.string().regex(/^[0-9]{4}-[0-9]{2}-[0-9]{2}$/u).nullable(),
+}).refine(row => row.requestsWithoutDateLine <= row.requests &&
+    (row.linesRewritten === 0 || row.requestsWithoutDateLine !== row.requests) &&
+    [row.injectedDate, row.taskDate].every(date => row.linesRewritten === 0 ? date === null : date !== null));
+const seal = z.strictObject({
+    v: z.literal('noopolis.daimon.turn-seal.v1'), agent: identifier, wake: identifier, engine: z.literal('grok'),
+    at: z.string().refine(timestamp), turn: identifier, outcome: z.enum(['completed', 'failed']),
+    requests: count.max(1024), model: z.enum(grokModels), limit_reason: z.enum(['tokens', 'requests', 'timeout', 'none']),
+    shell_clock: z.enum(['task', 'real', 'gap']).optional(), provider_clock: providerClock.optional(),
+    code: z.enum(['auth_stale', 'cancelled', 'engine_failed', 'invalid_request', 'limit_exceeded', 'turn_conflict', 'unavailable']).optional(),
+    diagnostic: diagnostic.optional(), mcp: mcp.optional(),
+}).refine(row => row.outcome === 'completed'
+    ? row.code === undefined && row.diagnostic === undefined && row.mcp === undefined && row.limit_reason === 'none'
+    : row.code !== undefined && (row.code === 'limit_exceeded') === (row.limit_reason !== 'none'));
+/** Unknown members at every level are refused, including protocol-only fields the seal writer omits. */
+export function parseNativeTurnSeal(value, agentId, expectedModel) {
+    const parsed = seal.safeParse(value);
+    if (!parsed.success || parsed.data.agent !== agentId || parsed.data.model !== expectedModel) {
+        throw new Error('Native Grok seal schema or execution identity mismatch');
+    }
+    // Keep writer ordering for the ledger's byte-identical replay/conflict check.
+    return value;
+}
+//# sourceMappingURL=seal.js.map

package/dist/runtime/daimon/training/native/worker/evidence/seal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.js","sourceRoot":"","sources":["../../../../../../../src/runtime/daimon/training/native/worker/evidence/seal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,sFAAsF;AACtF,+FAA+F;AAC/F,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAC7C,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAC5E,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;AACvF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;IACtF,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;AAEtG,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;IACnF,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACzG,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAC5J,4EAA4E;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;CACtF,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;IACd,IAAI,GAAG,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QACtC,MAAM,MAAM,GAA2B,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACnJ,OAAO,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,aAAa,CAAC;IAC7E,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAClE,OAAO,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe;QAAE,OAAO,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAChH,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe;QAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,KAAK,cAAc,CAAC;IAC1G,OAAO,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,aAAa,KAAK,WAAW,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC;IAC7B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK;IAC9C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACjF,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;AAExH,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC;IACzB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK;IACjD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACvF,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1H,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;AAEtG,MAAM,aAAa,GAAG,CAAC,CAAC,YAAY,CAAC;IACnC,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE;IACtG,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IAC1E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,uBAAuB,IAAI,GAAG,CAAC,QAAQ;IAC1D,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,GAAG,CAAC,uBAAuB,KAAK,GAAG,CAAC,QAAQ,CAAC;IAC1E,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AAE5G,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1B,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5G,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5F,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACrH,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1I,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,WAAW;IAC1C,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM;IAChH,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC;AAEjG,wGAAwG;AACxG,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,OAAe,EAAE,aAAqB;IACxF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,8EAA8E;IAC9E,OAAO,KAAuB,CAAC;AACjC,CAAC"}

package/dist/runtime/daimon/training/native/worker/index.d.ts

@@ -0,0 +1,11 @@
+export { runDaimonNativeWorker } from './worker.js';
+/** Startup validation without starting a worker; importing this subpath never runs one. */
+export { verifyNativeWorkerStartup, parseWorkerArguments, assertNativeProfile, verifyWorkerPaths } from './profile.js';
+export { createWorkerController, executionClosed, validateNativeFrame, claimedExecution, disposedWakeExecution, admittedExecutions, AMBIGUOUS_NATIVE_EXECUTION, AMBIGUOUS_WAKE_EXECUTION } from './control.js';
+export { readToolReceipts, readClosedTraces, collectNativeEvidence, assertFreshNativeEvidence, readSealedGrokUsage, readSealedGrokRequests, readSealedGrokTurnSeals, writeEvidence, wakeEvidenceFile, GROK_TURN_NOTIONAL_USD_MAX, plausibleNotionalUsd, declaredLimitStop } from './evidence/index.js';
+export type { NativeStopEvidence } from './control.js';
+export type { NativeConfig, NativeHost, NativeReceipt, NativeActivity, NativeAvailability, NativeTrace, NativeUsage, NativeCodexUsage, NativeGrokUsage, NativeRequestUsage, NativeTurnSeal, NativeEvidence, NativeEvidenceSource, TerminalEvidence, WorkerOptions } from './types.js';
+export { verifyExternalSource, MAX_EXTERNAL_DELIVERIES, MAX_TRIAL_WAKES, engineWakeTimeoutMs } from './deliveries.js';
+export type { ExternalInputSource, DeliveryControls } from './deliveries.js';
+export { parseTransportSource, matchTransportSource } from './wake-delivery/index.js';
+export type { TransportDeliverySource, TransportRunState, TransportEvidence } from './wake-delivery/index.js';

package/dist/runtime/daimon/training/native/worker/index.js

@@ -0,0 +1,8 @@
+export { runDaimonNativeWorker } from './worker.js';
+/** Startup validation without starting a worker; importing this subpath never runs one. */
+export { verifyNativeWorkerStartup, parseWorkerArguments, assertNativeProfile, verifyWorkerPaths } from './profile.js';
+export { createWorkerController, executionClosed, validateNativeFrame, claimedExecution, disposedWakeExecution, admittedExecutions, AMBIGUOUS_NATIVE_EXECUTION, AMBIGUOUS_WAKE_EXECUTION } from './control.js';
+export { readToolReceipts, readClosedTraces, collectNativeEvidence, assertFreshNativeEvidence, readSealedGrokUsage, readSealedGrokRequests, readSealedGrokTurnSeals, writeEvidence, wakeEvidenceFile, GROK_TURN_NOTIONAL_USD_MAX, plausibleNotionalUsd, declaredLimitStop } from './evidence/index.js';
+export { verifyExternalSource, MAX_EXTERNAL_DELIVERIES, MAX_TRIAL_WAKES, engineWakeTimeoutMs } from './deliveries.js';
+export { parseTransportSource, matchTransportSource } from './wake-delivery/index.js';
+//# sourceMappingURL=index.js.map

package/dist/runtime/daimon/training/native/worker/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/worker/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,2FAA2F;AAC3F,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACvH,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,kBAAkB,EAChI,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,aAAa,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAKvS,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtH,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/runtime/daimon/training/native/worker/profile.d.ts

@@ -0,0 +1,23 @@
+import { type NativeLaunch } from '../receipt/index.js';
+import type { NativeConfig, WorkerOptions } from './types.js';
+export declare function parseWorkerArguments(args: readonly string[]): WorkerOptions;
+export declare function assertNativeProfile(config: NativeConfig, launch: NativeLaunch): void;
+export declare function verifyWorkerPaths(config: NativeConfig, options: WorkerOptions, launch: NativeLaunch): Promise<void>;
+/**
+ * The worker's own startup validation, run without starting anything.
+ *
+ * Preparation can check exactly what the worker checks — argument shape, the
+ * compiled-config digest, the launch receipt, the profile agreement and the
+ * control path rules — instead of reaching past the package export for the
+ * pieces. Daimon's own `parseOrganizationRuntimeConfig` is the single step left
+ * out: it needs the installed runtime peer, so this validates Training's side of
+ * startup and never claims to have validated Daimon's.
+ *
+ * It composes the same exported functions the worker calls, in the worker's
+ * order, so a rule cannot hold here and fail there.
+ */
+export declare function verifyNativeWorkerStartup(args: readonly string[]): Promise<{
+    options: WorkerOptions;
+    launch: NativeLaunch;
+    config: NativeConfig;
+}>;

package/dist/runtime/daimon/training/native/worker/profile.js

@@ -0,0 +1,149 @@
+import { lstat, realpath } from 'node:fs/promises';
+import { isAbsolute, join } from 'node:path';
+import { isGrokLaunch, parseNativeLaunch, readPrivateFile, sha256, within } from '../receipt/index.js';
+export function parseWorkerArguments(args) {
+    const keys = ['launch', 'config', 'config-sha256', 'control-root', 'token-file', 'evidence', 'trial-id', 'timeout-ms', 'schedule-override'];
+    const values = new Map();
+    for (let index = 0; index < args.length; index += 2) {
+        const key = args[index]?.slice(2);
+        const value = args[index + 1];
+        if (!args[index]?.startsWith('--') || !key || !keys.includes(key) || values.has(key) || !value) {
+            throw new Error('Worker arguments require one explicit value for each supported option');
+        }
+        values.set(key, value);
+    }
+    if (keys.some(key => !values.has(key)))
+        throw new Error(`Required worker options: ${keys.join(', ')}`);
+    const timeoutMs = Number(values.get('timeout-ms'));
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 100 || timeoutMs > 86_400_000)
+        throw new Error('Invalid worker timeout');
+    const configSha256 = values.get('config-sha256');
+    if (!/^[a-f0-9]{64}$/u.test(configSha256))
+        throw new Error('Expected config SHA-256 is required');
+    if (values.get('schedule-override') !== 'disabled')
+        throw new Error('Explicit isolated schedule override is required');
+    const result = { launch: values.get('launch'), config: values.get('config'), configSha256,
+        controlRoot: values.get('control-root'), tokenFile: values.get('token-file'), evidence: values.get('evidence'),
+        trialId: values.get('trial-id'), timeoutMs, scheduleOverride: 'disabled' };
+    for (const value of [result.launch, result.config, result.controlRoot, result.tokenFile, result.evidence]) {
+        if (!isAbsolute(value))
+            throw new Error('Worker paths must be absolute');
+    }
+    if (!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u.test(result.trialId))
+        throw new Error('Invalid trial identity');
+    if (!within(result.controlRoot, result.evidence) || result.evidence === result.controlRoot)
+        throw new Error('Terminal evidence must be inside the protected control root');
+    return result;
+}
+/**
+ * Whether the config's declared Mneme root is one the launch actually admits.
+ *
+ * Codex answers it with its own fresh `memory` projection, which
+ * `loadNativeLaunch` validated as separate, non-overlapping trial data.
+ *
+ * A Grok launch admits exactly one projection — the slot runtime home — so the
+ * only placement it can offer is inside that home, and containment rather than
+ * exact match is what admits it. That is safe because the question here is
+ * different from the caller-protected-path exemption, which stayed exact-match:
+ * there, a descendant rule would *subtract* protection from an evaluator-owned
+ * file the subject must not read. Here nothing is subtracted. The home
+ * projection is already wholly writable, wholly inside the subject's reach and
+ * digest-bound as the projection's `runtimeHomePath`, so a root inside it adds
+ * no path, no writability and no reachability the launch did not already grant,
+ * and it inherits the home's freshness (the slot supervisor's recycle wipes the
+ * runtime home whole). A root outside the home is a root no projection admits
+ * and no digest covers, and stays refused; so does the home itself, which would
+ * make Mneme's store the runtime home rather than a place inside it.
+ */
+const nativeMemoryAdmitted = (launch, home, memory) => (isGrokLaunch(launch)
+    ? memory !== home && within(home, memory)
+    : launch.projections.some(row => row.role === 'memory' && row.target === memory));
+export function assertNativeProfile(config, launch) {
+    const agent = config.agents[0];
+    if (config.version !== 'noopolis.daimon.organization-runtime.v2' || config.agents.length !== 1 || agent?.id !== launch.agent.id) {
+        throw new Error('Native config must contain exactly the selected agent');
+    }
+    if (isGrokLaunch(launch)) {
+        if (agent.engine.kind !== 'grok' || agent.engine.model !== launch.agent.model || agent.engine.reasoningEffort !== launch.agent.reasoningEffort) {
+            throw new Error('Only the declared Grok model and reasoning effort are supported');
+        }
+        if (agent.engine.codexSandbox !== undefined)
+            throw new Error('Grok broker trials cannot declare a Codex sandbox');
+        if (launch.broker.limits.maxTokens > launch.limits.wakeTokenCeiling)
+            throw new Error('Grok broker token limit exceeds the launch wake ceiling');
+    }
+    else {
+        if (agent.engine.kind !== 'codex' || agent.engine.model !== launch.agent.model)
+            throw new Error('Only the declared Codex model is supported');
+        const sandbox = agent.engine.codexSandbox;
+        if (!sandbox || sandbox.mode !== 'workspace-write' || sandbox.networkAccess !== false || sandbox.webSearch !== 'disabled') {
+            throw new Error('Native trials require the Codex workspace-no-network sandbox');
+        }
+    }
+    if (!agent.attention)
+        throw new Error('Native trials require durable attention admission');
+    if (agent.schedule?.kind !== 'disabled')
+        throw new Error('The receipted isolated schedule override must be applied');
+    if (config.host.bindHost !== launch.host.bindHost || config.host.port !== launch.host.port)
+        throw new Error('Native host differs from the declared loopback endpoint');
+    const home = launch.projections.find(row => row.role === 'home');
+    if (!home || agent.workspacePath !== launch.workspace.target || agent.runtimeHomePath !== home.target) {
+        throw new Error('Native workspace or home projection identity mismatch');
+    }
+    if (agent.memory && !nativeMemoryAdmitted(launch, home.target, agent.memory.runtimeHomePath)) {
+        throw new Error(isGrokLaunch(launch)
+            ? 'Grok Mneme state must be declared inside the single projected runtime home'
+            : 'Native Mneme state requires its declared fresh memory projection');
+    }
+    if (launch.limits.maxTokens > agent.attention.maxTokens)
+        throw new Error('Trial token budget exceeds native attention policy');
+}
+export async function verifyWorkerPaths(config, options, launch) {
+    const agent = config.agents[0];
+    for (const file of [options.launch, options.config, options.tokenFile]) {
+        if ((await realpath(file)) !== file)
+            throw new Error('Worker control files must not traverse symlinks');
+        if (within(agent.workspacePath, file))
+            throw new Error('Worker controls must be outside the writable workspace');
+    }
+    if (within(agent.workspacePath, options.controlRoot) || within(options.controlRoot, agent.workspacePath))
+        throw new Error('The protected control root must be separate from the workspace');
+    const entry = await lstat(options.controlRoot);
+    if (!entry.isDirectory() || entry.isSymbolicLink() || (entry.mode & 0o077) !== 0 || await realpath(options.controlRoot) !== options.controlRoot) {
+        throw new Error('The control root must be a private real directory');
+    }
+    if (((await lstat(options.tokenFile)).mode & 0o077) !== 0)
+        throw new Error('The control token file must be private');
+    const instructions = await readPrivateFile(join(agent.workspacePath, launch.instructions.relativePath));
+    const rendering = launch.instructions.rendering;
+    const nativeInstructions = rendering.prefix + instructions.trim() + rendering.suffix;
+    if (!instructions.trim() || sha256(instructions) !== launch.instructions.sha256 || agent.instructions !== nativeInstructions ||
+        sha256(agent.instructions) !== rendering.nativeSha256) {
+        throw new Error('Declared candidate bytes are absent from the compiled native instructions');
+    }
+}
+/**
+ * The worker's own startup validation, run without starting anything.
+ *
+ * Preparation can check exactly what the worker checks — argument shape, the
+ * compiled-config digest, the launch receipt, the profile agreement and the
+ * control path rules — instead of reaching past the package export for the
+ * pieces. Daimon's own `parseOrganizationRuntimeConfig` is the single step left
+ * out: it needs the installed runtime peer, so this validates Training's side of
+ * startup and never claims to have validated Daimon's.
+ *
+ * It composes the same exported functions the worker calls, in the worker's
+ * order, so a rule cannot hold here and fail there.
+ */
+export async function verifyNativeWorkerStartup(args) {
+    const options = parseWorkerArguments(args);
+    const launch = parseNativeLaunch(JSON.parse(await readPrivateFile(options.launch, 65_536)));
+    const bytes = await readPrivateFile(options.config);
+    if (sha256(bytes) !== options.configSha256 || launch.configSha256 !== options.configSha256)
+        throw new Error('Compiled native config digest mismatch');
+    const config = JSON.parse(bytes);
+    assertNativeProfile(config, launch);
+    await verifyWorkerPaths(config, options, launch);
+    return { options, launch, config };
+}
+//# sourceMappingURL=profile.js.map

package/dist/runtime/daimon/training/native/worker/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/worker/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAqB,MAAM,qBAAqB,CAAC;AAG1H,MAAM,UAAU,oBAAoB,CAAC,IAAuB;IAC1D,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAC5I,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvG,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,GAAG,IAAI,SAAS,GAAG,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC7H,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAE,CAAC;IAClD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAClG,IAAI,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvH,MAAM,MAAM,GAAkB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAE,EAAE,YAAY;QACxG,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAE,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAE;QACjH,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1G,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5G,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC3K,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,oBAAoB,GAAG,CAAC,MAAoB,EAAE,IAAY,EAAE,MAAc,EAAW,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;IACjH,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;IACzC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;AAEpF,MAAM,UAAU,mBAAmB,CAAC,MAAoB,EAAE,MAAoB;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,OAAO,KAAK,yCAAyC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAChI,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YAC/I,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAClH,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAClJ,CAAC;SAAM,CAAC;QACN,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC9I,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAC1H,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC3F,IAAI,KAAK,CAAC,QAAQ,EAAE,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACrH,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACvK,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;YAClC,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,kEAAkE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACjI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAoB,EAAE,OAAsB,EAAE,MAAoB;IACxG,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACxG,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC5L,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAChJ,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACrH,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;IACxG,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;IAChD,MAAM,kBAAkB,GAAG,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;IACrF,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,kBAAkB;QACxH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAuB;IACrE,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAiB,CAAC;IACjD,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC"}

package/dist/runtime/daimon/training/native/worker/public.d.ts

@@ -0,0 +1,41 @@
+import type { NativeConfig, NativeHost } from './types.js';
+import type { NativeSandboxProjection } from '../receipt/index.js';
+import type { NativeWakeRequest } from './wake-delivery/index.js';
+/** Grok projection options passed to Daimon verbatim from the launch receipt's broker section. */
+export interface GrokBrokerProjectionOptions {
+    workerConfigVariant: 'unclocked' | 'clocked';
+    slot: number;
+    workerUid: number;
+    workerHomePath: string;
+    architecture: 'arm64' | 'x64';
+    usageLedgerPath: string;
+    limits: {
+        maxRequests: number;
+        maxTokens: number;
+        timeoutMs: number;
+    };
+    acceptanceStorePath: string;
+    denyPaths: readonly string[];
+    seccompProfileSha256: string;
+    /** The provisioner's sandbox profile digest; Daimon refuses a value that differs from its own render. */
+    profileSha256: string;
+}
+/** Structural public seam keeps the optional runtime out of Training core installs. */
+export interface NativeRuntimeModule {
+    parseWakeAcceptanceRequest?(value: unknown): NativeWakeRequest;
+    parseOrganizationRuntimeConfig(value: unknown): NativeConfig;
+    createOrganizationRuntimeControlHost(value: unknown, options: {
+        acceptanceStorePath: string;
+        controlToken: string;
+    }): NativeHost;
+    resolveOrganizationCodexSandboxProjection(value: unknown, agentId: string, options: {
+        acceptanceStorePath: string;
+    }): Promise<NativeSandboxProjection>;
+    resolveOrganizationGrokBrokerProjection?(value: unknown, agentId: string, options: GrokBrokerProjectionOptions): unknown;
+    grokBrokerProjectionSha256?(projection: unknown): string;
+    verifyGrokSlotPreflightReceipt?(value: unknown, projection: unknown, freshness: {
+        expectedNonce: string;
+        minGeneration: number;
+    }): unknown;
+}
+export declare function loadDaimonRuntime(engine?: 'codex' | 'grok', _delivery?: 'direct' | 'transport'): Promise<NativeRuntimeModule>;

package/dist/runtime/daimon/training/native/worker/public.js

@@ -0,0 +1,22 @@
+const grokExports = ['resolveOrganizationGrokBrokerProjection', 'grokBrokerProjectionSha256', 'verifyGrokSlotPreflightReceipt'];
+export async function loadDaimonRuntime(engine = 'codex', _delivery = 'direct') {
+    const packageName = '@noopolis/daimon/runtime';
+    let loaded;
+    try {
+        loaded = await import(packageName);
+    }
+    catch (error) {
+        throw new Error('Install optional @noopolis/daimon with its public /runtime export', { cause: error });
+    }
+    if (typeof loaded['parseOrganizationRuntimeConfig'] !== 'function' || typeof loaded['createOrganizationRuntimeControlHost'] !== 'function') {
+        throw new Error('Installed Daimon lacks the native organization control host');
+    }
+    if (engine === 'grok') {
+        if (grokExports.some(name => typeof loaded[name] !== 'function'))
+            throw new Error('Installed Daimon lacks the Grok broker projection and slot preflight capability');
+    }
+    else if (typeof loaded['resolveOrganizationCodexSandboxProjection'] !== 'function')
+        throw new Error('Installed Daimon lacks exact native sandbox projection capability');
+    return loaded;
+}
+//# sourceMappingURL=public.js.map

package/dist/runtime/daimon/training/native/worker/public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/worker/public.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,GAAG,CAAC,yCAAyC,EAAE,4BAA4B,EAAE,gCAAgC,CAAU,CAAC;AAEzI,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAA2B,OAAO,EAAE,YAAoC,QAAQ;IACtH,MAAM,WAAW,GAAG,0BAA0B,CAAC;IAC/C,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAA4B,CAAC;IAAC,CAAC;IACtE,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,mEAAmE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IACzH,IAAI,OAAO,MAAM,CAAC,gCAAgC,CAAC,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,sCAAsC,CAAC,KAAK,UAAU,EAAE,CAAC;QAC3I,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACvK,CAAC;SAAM,IAAI,OAAO,MAAM,CAAC,2CAA2C,CAAC,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IAC3K,OAAO,MAAwC,CAAC;AAClD,CAAC"}

package/dist/runtime/daimon/training/native/worker/sandbox.d.ts

@@ -0,0 +1,4 @@
+import { type NativeLaunch } from '../receipt/index.js';
+import type { NativeRuntimeModule } from './public.js';
+import type { NativeConfig, WorkerOptions } from './types.js';
+export declare function persistNativeSandboxProjection(runtime: NativeRuntimeModule, config: NativeConfig, options: WorkerOptions, launch?: NativeLaunch): Promise<void>;

package/dist/runtime/daimon/training/native/worker/sandbox.js

@@ -0,0 +1,52 @@
+import { writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { bindGrokBrokerProjection, bindNativeSandboxProjection, grokBrokerProjectionSchema, grokProjectionSha256, isGrokLaunch, nativeTrialArtifactsRoot, parseGrokBrokerReceipt, parseNativeSandboxReceipt, readPrivateFile } from '../receipt/index.js';
+export async function persistNativeSandboxProjection(runtime, config, options, launch) {
+    if (launch && isGrokLaunch(launch))
+        return persistGrokBrokerProjection(runtime, config, options, launch);
+    const agent = config.agents[0];
+    const value = await runtime.resolveOrganizationCodexSandboxProjection(config, agent.id, { acceptanceStorePath: options.controlRoot });
+    const receipt = bindNativeSandboxProjection(value, options.trialId, options.configSha256);
+    parseNativeSandboxReceipt(receipt, { trialId: options.trialId, configSha256: options.configSha256,
+        agentId: agent.id, workspacePath: agent.workspacePath, runtimeHomePath: agent.runtimeHomePath });
+    const artifacts = launch ? nativeTrialArtifactsRoot(launch, options.trialId) : options.controlRoot;
+    await writeFile(join(artifacts, 'sandbox-projection.json'), `${JSON.stringify(receipt)}\n`, { flag: 'wx', mode: 0o600 });
+}
+/**
+ * Grok never runs a `codex sandbox` probe. Daimon resolves the slot projection
+ * from the launch's broker inputs; its digest must equal the launch receipt and
+ * Daimon's own digest, and the root supervisor's slot preflight receipt must
+ * verify against it (Daimon's verifier) and deny every evaluator root.
+ */
+async function persistGrokBrokerProjection(runtime, config, options, launch) {
+    const { resolveOrganizationGrokBrokerProjection: resolve, grokBrokerProjectionSha256: digest, verifyGrokSlotPreflightReceipt: verify } = runtime;
+    if (!resolve || !digest || !verify)
+        throw new Error('Installed Daimon lacks the Grok broker projection and slot preflight capability');
+    const agent = config.agents[0];
+    const { broker } = launch;
+    const projection = grokBrokerProjectionSchema.parse(resolve(config, agent.id, { slot: broker.slot, workerUid: broker.workerUid,
+        workerConfigVariant: broker.workerConfigVariant,
+        workerHomePath: broker.workerHomePath, architecture: broker.architecture, usageLedgerPath: broker.usageLedgerPath, limits: broker.limits,
+        // The deny mask Daimon lifts, and the value `projection_sha256` binds: never the per-trial artifact directory inside it.
+        // `denyPaths` and `profileSha256` are the provisioner's verbatim values (see grokBrokerLaunchSchema): deriving the deny
+        // list from `evaluatorPaths` recomputes a different set and forks the digest.
+        acceptanceStorePath: options.controlRoot, denyPaths: [...broker.denyPaths],
+        seccompProfileSha256: broker.seccompProfileSha256, profileSha256: broker.profileSha256 }));
+    const sha = grokProjectionSha256(projection);
+    if (digest(projection) !== sha)
+        throw new Error('Training and Daimon disagree on the Grok broker projection digest');
+    if (projection.version !== broker.projectionVersion || sha !== broker.projectionSha256)
+        throw new Error('Grok broker projection digest differs from the launch receipt');
+    // The registration is a ceiling. worker.ts lowers the per-wake override to the trial deadline.
+    let slot;
+    try {
+        slot = JSON.parse(await readPrivateFile(broker.slotPreflightReceipt, 262144));
+    }
+    catch (error) {
+        throw new Error('Grok subject turns require the root slot supervisor preflight receipt', { cause: error });
+    }
+    const verified = verify(slot, projection, { expectedNonce: broker.expectedNonce, minGeneration: broker.minGeneration });
+    const receipt = parseGrokBrokerReceipt(bindGrokBrokerProjection(projection, verified, options.trialId, options.configSha256), launch, options.trialId);
+    await writeFile(join(nativeTrialArtifactsRoot(launch, options.trialId), 'sandbox-projection.json'), `${JSON.stringify(receipt)}\n`, { flag: 'wx', mode: 0o600 });
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/runtime/daimon/training/native/worker/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/worker/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,YAAY,EAC5H,wBAAwB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,eAAe,EAClD,MAAM,qBAAqB,CAAC;AAIxE,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,OAA4B,EAAE,MAAoB,EAAE,OAAsB,EAAE,MAAqB;IACpJ,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACzG,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,yCAAyC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACtI,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1F,yBAAyB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY;QAC/F,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;IACnG,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IACnG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3H,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,2BAA2B,CAAC,OAA4B,EAAE,MAAoB,EAAE,OAAsB,EAAE,MAAwB;IAC7I,MAAM,EAAE,uCAAuC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,8BAA8B,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACjJ,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACvI,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;QAC5H,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;QACxI,yHAAyH;QACzH,wHAAwH;QACxH,8EAA8E;QAC9E,mBAAmB,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC1E,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACrH,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,iBAAiB,IAAI,GAAG,KAAK,MAAM,CAAC,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACzK,+FAA+F;IAC/F,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IACtF,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,uEAAuE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IAC7H,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IACxH,MAAM,OAAO,GAAG,sBAAsB,CAAC,wBAAwB,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACvJ,MAAM,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACnK,CAAC"}

package/dist/runtime/daimon/training/native/worker/server.d.ts

@@ -0,0 +1,4 @@
+import { type Server } from 'node:http';
+import type { WorkerController } from './control.js';
+export declare function createWorkerServer(controller: WorkerController, token: string): Server;
+export declare function listenWorker(server: Server, bindHost: string, port: number): Promise<void>;