spawnfile 0.1.25 → 0.1.28

package/dist/runtime/daimon/training/native/worker/server.js

@@ -0,0 +1,102 @@
+import { createHash, timingSafeEqual } from 'node:crypto';
+import { createServer } from 'node:http';
+import { parseTransportSource, TransportAdmissionClosedError } from './wake-delivery/index.js';
+export function createWorkerServer(controller, token) {
+    const authenticated = (request) => {
+        const hash = (value) => createHash('sha256').update(value).digest();
+        return timingSafeEqual(hash(request.headers.authorization ?? ''), hash(`Bearer ${token}`));
+    };
+    const server = createServer((request, response) => {
+        void (async () => {
+            if (!authenticated(request))
+                return reply(response, 401, { error: 'unauthorized' });
+            const url = new URL(request.url ?? '/', 'http://worker.invalid');
+            if (url.search || url.hash)
+                return reply(response, 400, { error: 'unsupported_query' });
+            if (request.method === 'GET' && url.pathname === '/trial/health') {
+                return reply(response, 200, await controller.host.health());
+            }
+            if (request.method === 'GET' && url.pathname === '/v2/activity') {
+                const value = await controller.host.activityV2(token);
+                return reply(response, value ? 200 : 503, value ?? { error: 'native_host_unavailable' });
+            }
+            if (request.method === 'GET' && url.pathname === '/v2/availability') {
+                const value = await controller.host.availability(token);
+                return reply(response, value ? 200 : 503, value ?? { error: 'native_host_unavailable' });
+            }
+            const receipt = /^\/v2\/wake-receipts\/([0-9a-f-]{36})$/u.exec(url.pathname);
+            if (request.method === 'GET' && receipt) {
+                const value = await controller.host.wakeReceipt(token, receipt[1]);
+                return reply(response, value ? 200 : 404, value ?? { error: 'not_found' });
+            }
+            if (request.method === 'POST' && url.pathname === '/trial/stop') {
+                return reply(response, 200, await controller.stop());
+            }
+            if (controller.transport && request.method === 'GET' && url.pathname === '/trial/run') {
+                return reply(response, 200, controller.transport.state());
+            }
+            if (controller.transport && request.method === 'POST' && url.pathname === '/v2/wakes') {
+                if (request.headers['content-type'] !== 'application/json')
+                    return reply(response, 400, { error: 'content-type must be application/json' });
+                const value = await body(request, 1_048_576, { bound: 'request body is too large', object: 'request body must be an object' });
+                // Daimon's host owns schema rejection and its structured acceptance body.
+                const result = await controller.transport.accept({ ...value, token });
+                const status = result.state === 'accepted' ? 202 : result.state === 'stopped' ? 409
+                    : result.code === 'invalid_request' ? 400 : result.code === 'unauthorized' ? 401 : 409;
+                return reply(response, status, result);
+            }
+            if (request.method === 'POST' && url.pathname === '/trial/run') {
+                if (request.headers['content-type'] !== 'application/json')
+                    return reply(response, 400, { error: 'content_type_required' });
+                const value = await body(request);
+                const fields = controller.transport ? ['text', 'wakeId', 'controls', 'source'] : ['text', 'wakeId', 'controls'];
+                if (Object.keys(value).some(key => !fields.includes(key)) || value.controls !== undefined && (!value.controls || typeof value.controls !== 'object' || Array.isArray(value.controls)) || typeof value.wakeId !== 'string' ||
+                    !(controller.transport && value.text === undefined) && typeof value.text !== 'string') {
+                    return reply(response, 400, { error: 'invalid_trial_delivery' });
+                }
+                const source = controller.transport ? parseTransportSource(value.source) : undefined;
+                const abandoned = () => { if (!response.writableEnded)
+                    void controller.stop(); };
+                response.once('close', abandoned);
+                try {
+                    return reply(response, 200, await controller.run(value.wakeId, value.text ?? '', value.controls, source));
+                }
+                finally {
+                    response.removeListener('close', abandoned);
+                }
+            }
+            return reply(response, 404, { error: 'not_found' });
+        })().catch(error => reply(response, error instanceof TransportAdmissionClosedError ? 409 : 400, { error: error instanceof Error ? error.message : 'worker_request_failed' }));
+    });
+    server.requestTimeout = 30_000;
+    server.headersTimeout = 10_000;
+    return server;
+}
+export function listenWorker(server, bindHost, port) {
+    return new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(port, bindHost, () => { server.removeListener('error', reject); resolve(); });
+    });
+}
+function reply(response, status, value) {
+    if (response.destroyed || response.writableEnded)
+        return;
+    response.writeHead(status, { 'content-type': 'application/json; charset=utf-8' });
+    response.end(`${JSON.stringify(value)}\n`);
+}
+async function body(request, maximum = 32_768, errors = { bound: 'Worker request body exceeds its bound', object: 'Worker request must be an object' }) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of request) {
+        const bytes = Buffer.from(chunk);
+        size += bytes.length;
+        if (size > maximum)
+            throw new Error(errors.bound);
+        chunks.push(bytes);
+    }
+    const value = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error(errors.object);
+    return value;
+}
+//# sourceMappingURL=server.js.map

package/dist/runtime/daimon/training/native/worker/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/worker/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAEjG,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAE/F,MAAM,UAAU,kBAAkB,CAAC,UAA4B,EAAE,KAAa;IAC5E,MAAM,aAAa,GAAG,CAAC,OAAwB,EAAW,EAAE;QAC1D,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5E,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACpF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,uBAAuB,CAAC,CAAC;YACjE,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACxF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;gBACjE,OAAO,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBAChE,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBACtD,OAAO,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;gBACpE,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACxD,OAAO,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,OAAO,GAAG,yCAAyC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;gBACpE,OAAO,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;gBAChE,OAAO,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,UAAU,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBACtF,OAAO,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,UAAU,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACtF,IAAI,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,kBAAkB;oBAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;gBAC5I,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;gBAC/H,0EAA0E;gBAC1E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG;oBACjF,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACzF,OAAO,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC/D,IAAI,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,kBAAkB;oBAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAC5H,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAChH,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;oBACrN,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC1F,OAAO,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrF,MAAM,SAAS,GAAG,GAAS,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa;oBAAE,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvF,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAClC,IAAI,CAAC;oBAAC,OAAO,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAc,IAAI,EAAE,EAAE,KAAK,CAAC,QAAwC,EAAE,MAAM,CAAC,CAAC,CAAC;gBAAC,CAAC;wBACpJ,CAAC;oBAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAAC,CAAC;YAC1D,CAAC;YACD,OAAO,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,YAAY,6BAA6B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAC5F,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,QAAgB,EAAE,IAAY;IACzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,QAAwB,EAAE,MAAc,EAAE,KAAc;IACrE,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa;QAAE,OAAO;IACzD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC;IAClF,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,OAAwB,EAAE,OAAO,GAAG,MAAM,EAC5D,MAAM,GAAG,EAAE,KAAK,EAAE,uCAAuC,EAAE,MAAM,EAAE,kCAAkC,EAAE;IACvG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACrB,IAAI,IAAI,GAAG,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChG,OAAO,KAAgC,CAAC;AAC1C,CAAC"}

package/dist/runtime/daimon/training/native/worker/types.d.ts

@@ -0,0 +1,318 @@
+import type { DeclaredLimit } from '../../../../../training/index.js';
+import type { NativeLaunch } from '../receipt/index.js';
+import type { NativeAcceptanceResult, TransportEvidence } from './wake-delivery/index.js';
+import type { NativeTaskClockEvidence } from '../receipt/index.js';
+/** Only fields consumed from Daimon's public /runtime contract are described here. */
+export interface NativeConfig {
+    version: string;
+    host: {
+        bindHost: string;
+        port: number;
+        controlTokenEnv: string;
+    };
+    agents: {
+        id: string;
+        name: string;
+        instructions: string;
+        workspacePath: string;
+        runtimeHomePath: string;
+        engine: {
+            kind: string;
+            model?: string;
+            codexSandbox?: {
+                mode: string;
+                networkAccess: boolean;
+                webSearch: string;
+            };
+            reasoningEffort?: string;
+        };
+        attention?: {
+            maxBatchMessages: number;
+            maxBatchBytes: number;
+            maxExecutions: number;
+            maxTokens: number;
+        };
+        schedule?: {
+            kind: string;
+            [key: string]: unknown;
+        };
+        memory?: {
+            runtimeHomePath: string;
+            [key: string]: unknown;
+        };
+        moltnet?: {
+            cliPath: string;
+            configPath: string;
+            networks: {
+                id: string;
+                rooms: string[];
+                dms: boolean;
+            }[];
+        };
+        mcp?: {
+            name: string;
+            transport: string;
+            command?: string;
+            args: string[];
+            env: Record<string, string>;
+            tools: string[];
+        }[];
+    }[];
+}
+export interface NativeReceipt {
+    version: string;
+    acceptance_id: string;
+    agent_id: string;
+    delivery_id: string;
+    request_digest: string;
+    state: 'accepted' | 'running' | 'completed' | 'failed' | 'stopped';
+    accepted_at: string;
+    updated_at: string;
+    execution_id?: string;
+    deferred?: boolean;
+    code?: string;
+    text?: string;
+}
+export interface NativeActivity {
+    version: string;
+    items: (NativeReceipt & {
+        active: boolean;
+    })[];
+    executions?: {
+        agent_id: string;
+        execution_id: string;
+        state: 'running';
+        delivery_ids: string[];
+    }[];
+}
+export interface NativeAvailability {
+    version: string;
+    state: string;
+    agents: {
+        agent_id: string;
+        pending: number;
+        running: boolean;
+        deferred: number;
+        budget: unknown;
+        error?: string;
+    }[];
+}
+export interface NativeHost {
+    start(): Promise<void>;
+    stop(): Promise<unknown>;
+    health(): Promise<{
+        version: string;
+        state: string;
+        agents: {
+            agentId: string;
+            engine?: string;
+            state?: string;
+        }[];
+    }>;
+    accept(request: unknown): Promise<NativeAcceptanceResult>;
+    wakeReceipt(token: string | undefined, acceptanceId: string): Promise<NativeReceipt | undefined>;
+    activityV2(token: string | undefined): Promise<NativeActivity | undefined>;
+    availability(token: string | undefined): Promise<NativeAvailability | undefined>;
+}
+export interface WorkerOptions {
+    config: string;
+    configSha256: string;
+    controlRoot: string;
+    tokenFile: string;
+    evidence: string;
+    trialId: string;
+    timeoutMs: number;
+    scheduleOverride: 'disabled';
+    launch: string;
+}
+export interface NativeTrace extends Record<string, unknown> {
+    schema: 'daimon.turn_trace.v1';
+    agent_id: string;
+    turn_id: string;
+    started_at: string;
+    completed_at: string;
+    status: 'completed' | 'failed';
+    tools: unknown[];
+}
+export interface NativeCodexUsage extends Record<string, unknown> {
+    v: 'noopolis.daimon.turn-usage.v1';
+    agent: string;
+    wake: string;
+    engine: 'codex';
+    input: number;
+    output: number;
+    cache_read: number;
+    total: number;
+    complete: boolean;
+}
+/** Broker-sealed Grok row: disjoint buckets, `total = input + cache_read + cache_write + output`, deduplicated by `turn`. */
+export interface NativeGrokUsage extends Record<string, unknown> {
+    v: 'noopolis.daimon.turn-usage.v1';
+    agent: string;
+    wake: string;
+    engine: 'grok';
+    turn: string;
+    model: string;
+    input: number;
+    output: number;
+    cache_read: number;
+    cache_write: number;
+    total: number;
+    notional_usd: number;
+    complete: boolean;
+    limit_reason?: 'tokens' | 'requests' | 'timeout' | 'none';
+    estimated_requests?: number;
+}
+export type NativeUsage = NativeCodexUsage | NativeGrokUsage;
+/** One `noopolis.daimon.turn-requests.v1` Grok row with its proxy-measured clock and usage source. */
+export interface NativeRequestUsage extends Record<string, unknown> {
+    v: 'noopolis.daimon.turn-requests.v1';
+    agent: string;
+    wake: string;
+    engine: 'grok';
+    turn: string;
+    model: string;
+    request: number;
+    requests: number;
+    input: number;
+    cached_input: number;
+    fresh_input: number;
+    cache_write: number;
+    output: number;
+    total: number;
+    usage_source?: 'stream' | 'upstream' | 'estimated';
+    started_at?: string;
+    ended_at?: string;
+}
+/**
+ * One `noopolis.daimon.turn-seal.v1` row: the operator-visible projection of a
+ * brokered turn's sealed terminal response, written by the broker beside the
+ * two usage streams because a cancelled turn's response never reaches a client.
+ */
+export interface NativeTurnSeal extends Record<string, unknown> {
+    v: 'noopolis.daimon.turn-seal.v1';
+    agent: string;
+    wake: string;
+    engine: 'grok';
+    at: string;
+    turn: string;
+    outcome: 'completed' | 'failed';
+    requests: number;
+    model: string;
+    limit_reason: 'tokens' | 'requests' | 'timeout' | 'none';
+    shell_clock?: 'task' | 'real' | 'gap';
+    /** Broker-observed rewriting of engine-injected dates. Missing is unobserved, never zero. */
+    provider_clock?: {
+        requests: number;
+        linesRewritten: number;
+        requestsWithoutDateLine: number;
+        linesIgnored?: number;
+        injectedDate: string | null;
+        taskDate: string | null;
+    };
+    /** Present exactly for a failed turn: the broker's closed failure vocabulary. */
+    code?: string;
+    /** Present when the sealed response carried one; `reason` is the worker's own words, redacted by Daimon. */
+    diagnostic?: {
+        status: string;
+        stage: string;
+        failure_class: string;
+        exit_code: number;
+        term_signal: number;
+        reason?: string;
+    };
+    /**
+     * Present exactly when the broker's MCP facade observed this turn. Its
+     * absence is a different statement from `started: 0`, and neither may be
+     * read as the other.
+     */
+    mcp?: {
+        started: number;
+        answered: number;
+        undecoded: number;
+        outstanding: {
+            name: string;
+            outstanding_ms: number;
+        }[];
+        refusals?: {
+            route: number;
+            expired: number;
+            exhausted: number;
+            unrouted: number;
+            oversized: number;
+        };
+        /**
+         * The session's standalone GET SSE tunnels. Present only when the broker
+         * observed that channel at all: a row sealed before the instrument existed
+         * carries no `tunnels` member, which is not `opened: 0`.
+         */
+        tunnels?: {
+            opened: number;
+            closed: number;
+            delivered: number;
+            open: {
+                open_ms: number;
+                delivered: boolean;
+            }[];
+        };
+    };
+}
+export interface NativeEvidence {
+    traces: NativeTrace[];
+    usage: NativeUsage[];
+    /** Cumulative trial ledger, including revisits. Absent in older persisted frames. */
+    accounting?: {
+        usage: NativeUsage[];
+        coverage: 'complete' | 'partial' | 'absent';
+    };
+    toolReceipts: Record<string, unknown>[];
+    modelContexts: {
+        model: string;
+        approvalPolicy: unknown;
+        sandboxPolicy: unknown;
+    }[];
+    /** Grok only: per-request broker rows. Codex evidence never carries this member. */
+    requests?: NativeRequestUsage[];
+    /** Grok seals attributed to this wake's execution(s); absent when no matching seal was observed. */
+    turnSeals?: NativeTurnSeal[];
+}
+/** Where native evidence lives for the selected engine. */
+export type NativeEvidenceSource = {
+    engine: 'codex';
+} | {
+    engine: 'grok';
+    requestsFile: string;
+};
+export interface TerminalEvidence {
+    schema: 'spawnfile.training.daimon-native.trial.v1';
+    trialId: string;
+    wakeId: string;
+    agentId: string;
+    model: string;
+    /** Grok only; Codex terminal evidence keeps its original members. */
+    engine?: 'grok';
+    reasoningEffort?: string;
+    configSha256: string;
+    scheduleOverride: 'disabled';
+    preparation?: Pick<NativeLaunch, 'sourceConfigSha256' | 'instructions' | 'overrides'>;
+    transport?: TransportEvidence;
+    taskClock?: NativeTaskClockEvidence;
+    status: 'completed' | 'failed' | 'cancelled';
+    /** A closed execution can leave its delivery deferred; this never marks the trial completed. */
+    blocked?: 'awaiting-external-input';
+    /** The closed execution failed on a subject-declared limit sealed in its own usage row. */
+    limit?: DeclaredLimit;
+    startedAt: string;
+    completedAt: string;
+    executionId?: string;
+    receipt?: NativeReceipt;
+    activity?: NativeActivity;
+    availability?: NativeAvailability;
+    native: NativeEvidence;
+    coverage: {
+        channel: 'tools' | 'output' | 'usage';
+        completeness: 'absent' | 'partial' | 'complete';
+        ordering: 'source' | 'none';
+    }[];
+    error?: string;
+}

package/dist/runtime/daimon/training/native/worker/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/runtime/daimon/training/native/worker/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/worker/types.ts"],"names":[],"mappings":""}

package/dist/runtime/daimon/training/native/worker/wake-delivery/index.d.ts

@@ -0,0 +1,4 @@
+export { createTransportDelivery, TransportAdmissionClosedError } from './transport.js';
+export { validateTransportExecutions } from './terminal.js';
+export { parseTransportSource, matchTransportSource } from './source.js';
+export type { NativeWakeRequest, NativeAcceptance, NativeAcceptanceResult, TransportDeliverySource, TransportEvidence, TransportRunState } from './types.js';

package/dist/runtime/daimon/training/native/worker/wake-delivery/index.js

@@ -0,0 +1,4 @@
+export { createTransportDelivery, TransportAdmissionClosedError } from './transport.js';
+export { validateTransportExecutions } from './terminal.js';
+export { parseTransportSource, matchTransportSource } from './source.js';
+//# sourceMappingURL=index.js.map

package/dist/runtime/daimon/training/native/worker/wake-delivery/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/runtime/daimon/training/native/worker/wake-delivery/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC"}

package/dist/runtime/daimon/training/native/worker/wake-delivery/source.d.ts

@@ -0,0 +1,3 @@
+import type { TransportDeliverySource } from './types.js';
+export declare function parseTransportSource(value: unknown): TransportDeliverySource;
+export declare function matchTransportSource(source: TransportDeliverySource, deliveryId: string): boolean;

package/dist/runtime/daimon/training/native/worker/wake-delivery/source.js

@@ -0,0 +1,16 @@
+export function parseTransportSource(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Transport delivery requires an expected source');
+    const row = value;
+    const keys = Object.keys(row).sort().join(',');
+    const id = row.deliveryId ?? row.deliveryIdPrefix;
+    if (row.kind !== 'transport' || !['deliveryId,kind', 'deliveryIdPrefix,kind'].includes(keys) ||
+        typeof id !== 'string' || !id.trim() || Buffer.byteLength(id) > 16_384 || [...id].some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127)) {
+        throw new Error('Invalid expected transport delivery source');
+    }
+    return 'deliveryId' in row ? { kind: 'transport', deliveryId: id } : { kind: 'transport', deliveryIdPrefix: id };
+}
+export function matchTransportSource(source, deliveryId) {
+    return source.deliveryId !== undefined ? deliveryId === source.deliveryId : deliveryId.startsWith(source.deliveryIdPrefix);
+}
+//# sourceMappingURL=source.js.map

package/dist/runtime/daimon/training/native/worker/wake-delivery/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../../../../../../src/runtime/daimon/training/native/worker/wake-delivery/source.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnI,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,gBAAgB,CAAC;IAClD,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxF,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1J,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,YAAY,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAA+B,EAAE,UAAkB;IACtF,OAAO,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAC7H,CAAC"}

package/dist/runtime/daimon/training/native/worker/wake-delivery/terminal.d.ts

@@ -0,0 +1,4 @@
+import type { NativeActivity, NativeEvidence } from '../types.js';
+import type { TransportEvidence } from './types.js';
+/** A completed disposition is not terminal execution telemetry: validate both. */
+export declare function validateTransportExecutions(evidence: TransportEvidence, native: NativeEvidence, activity: NativeActivity, agentId: string, wakeTimeoutMs?: number): void;

package/dist/runtime/daimon/training/native/worker/wake-delivery/terminal.js

@@ -0,0 +1,52 @@
+import { declaredLimitStop, DeclaredLimitStop, describeNativeFailure, validateNativeFrame } from '../evidence/index.js';
+/** A completed disposition is not terminal execution telemetry: validate both. */
+export function validateTransportExecutions(evidence, native, activity, agentId, wakeTimeoutMs) {
+    if (!evidence.batch)
+        throw new Error('Transport execution closed without observable batch membership');
+    if (!evidence.selectedDeliveries?.length)
+        throw new Error('Transport selection evidence is missing');
+    const owned = new Set();
+    // A judged attempt that stopped on its own sealed declared limit is a subject
+    // outcome, but only once every other check has passed and no judged attempt
+    // failed any other way: one crash among limit stops is still a crash.
+    let limited;
+    for (const selected of evidence.selectedDeliveries) {
+        const receipt = selected.receipt;
+        if (!receipt || !selected.executionIds.length)
+            throw new Error('Transport delivery omitted execution binding');
+        validateNativeFrame(activity, receipt, native.traces, agentId, receipt.execution_id);
+        // Without a receipt-bound final execution there is no retry to excuse: judge every attempt.
+        const settling = selected.executionIds.includes(receipt.execution_id ?? '') ? receipt.execution_id : undefined;
+        for (const executionId of selected.executionIds) {
+            if (!evidence.batches?.some(batch => batch.executionId === executionId && batch.deliveryIds.includes(selected.deliveryId))) {
+                throw new Error('Transport execution closed without observable batch membership');
+            }
+            const trace = native.traces.find(row => row.turn_id === executionId);
+            if (!trace)
+                throw new Error('Transport execution omitted terminal telemetry');
+            owned.add(executionId);
+            // Daimon retries a failed attempt under a new execution and records the one that
+            // settled the delivery as receipt.execution_id. Earlier attempts stay in the
+            // retained traces as evidence; only the settling execution decides success.
+            if (settling && executionId !== settling)
+                continue;
+            const limit = declaredLimitStop(trace, native.usage, wakeTimeoutMs);
+            if (limit) {
+                limited ??= new DeclaredLimitStop(limit, describeNativeFailure(receipt, trace, native.usage));
+                continue;
+            }
+            if (trace.status !== 'completed')
+                throw new Error(describeNativeFailure(receipt, trace, native.usage));
+            if (!native.usage.some(row => row.wake === executionId))
+                throw new Error('Transport execution omitted token usage evidence');
+        }
+    }
+    // This home was empty at trial startup. Reconcile its entire retained terminal
+    // history, including attempts that opened and closed between activity polls.
+    // Receipt retries may erase a binding, but cannot erase that attempt's trace.
+    if (native.traces.some(trace => !owned.has(trace.turn_id)))
+        throw new Error('Transport terminal trace omitted execution ownership');
+    if (limited)
+        throw limited;
+}
+//# sourceMappingURL=terminal.js.map

package/dist/runtime/daimon/training/native/worker/wake-delivery/terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.js","sourceRoot":"","sources":["../../../../../../../src/runtime/daimon/training/native/worker/wake-delivery/terminal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAIxH,kFAAkF;AAClF,MAAM,UAAU,2BAA2B,CAAC,QAA2B,EAAE,MAAsB,EAC7F,QAAwB,EAAE,OAAe,EAAE,aAAsB;IACjE,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACvG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,8EAA8E;IAC9E,4EAA4E;IAC5E,sEAAsE;IACtE,IAAI,OAAsC,CAAC;IAC3C,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC/G,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACrF,4FAA4F;QAC5F,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/G,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAChD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBAC3H,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;YACrE,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAC9E,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACvB,iFAAiF;YACjF,6EAA6E;YAC7E,4EAA4E;YAC5E,IAAI,QAAQ,IAAI,WAAW,KAAK,QAAQ;gBAAE,SAAS;YACnD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACpE,IAAI,KAAK,EAAE,CAAC;gBAAC,OAAO,KAAK,IAAI,iBAAiB,CAAC,KAAK,EAAE,qBAAqB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACvH,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;IACD,+EAA+E;IAC/E,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACpI,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC;AAC7B,CAAC"}

package/dist/runtime/daimon/training/native/worker/wake-delivery/transport.d.ts

@@ -0,0 +1,21 @@
+import type { NativeActivity, NativeAvailability, NativeHost, NativeReceipt, NativeTrace } from '../types.js';
+import type { NativeAcceptance, TransportDeliverySource, TransportEvidence, TransportRunState } from './types.js';
+/** Trial admission is separate from Daimon's schema and acceptance responses. */
+export declare class TransportAdmissionClosedError extends Error {
+    constructor();
+}
+/** Only the HTTP route calls accept. run() arms and observes this mailbox. */
+export declare function createTransportDelivery(host: NativeHost, agentId: string): {
+    state(): TransportRunState;
+    begin(wakeId: string, source: TransportDeliverySource): {
+        accepted: Promise<NativeAcceptance>;
+        evidence: TransportEvidence;
+        closed: (traces: NativeTrace[]) => boolean;
+        generation: () => number;
+        /** Synchronous admission/sealing linearization point: no await may split it. */
+        seal(generation: number, traces: NativeTrace[]): boolean;
+        observe(receipt: NativeReceipt, activity: NativeActivity, availability: NativeAvailability, executionId?: string): void;
+        finish(): void;
+    };
+    accept(value: unknown): Promise<import("./types.js").NativeAcceptanceResult>;
+};