spawnfile 0.1.29 → 0.1.30

package/dist/deployment/upReceiptTypes.d.ts

@@ -126,8 +126,8 @@ export declare const upReceiptSchema: z.ZodPreprocess<z.ZodObject<{
         version: z.ZodLiteral<"spawnfile.organization-ready.v1">;
         world_binding_digest: z.ZodNullable<z.ZodString>;
         reason: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>>>;
-}, z.core.$strict>>;
+    }, z.core.$strict>, unknown>>;
+}, z.core.$strict>, unknown>;
 export type UpReceipt = Omit<z.infer<typeof upReceiptSchema>, "organization_handoff" | "organization_handoff_handle" | "organization_ready"> & {
     organization_handoff?: OrganizationHandoff;
     organization_handoff_handle?: OpaqueTargetHandle;

package/dist/distribution/consumeImage.js

@@ -6,7 +6,7 @@ import { SpawnfileError } from "../shared/index.js";
 import { readPreviousSource, resolveExistingOrNewTarget, deriveDeploymentName, derivePersistentMountVolumeName, renderEnvFileContent, resolveImageEnvironment } from "./consumeImageSupport.js";
 import { acquireExclusiveVolumeReservations, assertCandidateContainerReady, assertContainerStopped, inspectContainerSnapshot, restorePreviousContainer, rollbackCandidateContainer } from "./consumeImageLifecycle.js";
 import { createConsumerDockerRunner } from "./dockerRunner.js";
-import { resolveDaimonDockerSecurityArgsForImage } from "./consumeImageDaimonDocker.js";
+import { resolveDaimonRuntimeForImage } from "./consumeImageDaimonDocker.js";
 import { extractImageReport, resolveDockerBaseArgs } from "./extractImage.js";
 import { parseImageReference } from "./imageRef.js";
 import { prepareImageRuntimeAuthMounts } from "./imageRuntimeAuth.js";
@@ -135,15 +135,16 @@ const consumeImageUpLocked = async (imageRef, parsedRef, deploymentName, isExpli
         // config is already baked into the image; this only resolves the credential
         // mounts. Doing it first guarantees an unusable import fails while the live
         // container is still untouched, never mid-swap.
+        const daimonRuntime = await resolveDaimonRuntimeForImage(imageRef, report, runDocker, workDir);
         const authMountArgs = (await prepareImageRuntimeAuthMounts({
             authProfile: options.authProfile ?? null,
             ...(options.daimonContainerCredentialUid === undefined
                 ? {}
                 : { daimonContainerCredentialUid: options.daimonContainerCredentialUid }),
             report,
+            daimonEngineDescriptors: daimonRuntime.engineDescriptors,
             tempRoot: workDir
         })).mountArgs;
-        const daimonDockerSecurityArgs = await resolveDaimonDockerSecurityArgsForImage(imageRef, report, runDocker, workDir);
         volumeReservation = await acquireExclusiveVolumeReservations(report, deploymentName, containerName, imageRef, runDocker);
         const previousContainer = await inspectContainerSnapshot(runDocker, containerName);
         const now = options.now ?? (() => new Date());
@@ -167,7 +168,7 @@ const consumeImageUpLocked = async (imageRef, parsedRef, deploymentName, isExpli
             }
         }
         const runArgs = [
-            "run", "-d", "--name", containerName, ...daimonDockerSecurityArgs, "--env-file", envFilePath
+            "run", "-d", "--name", containerName, ...daimonRuntime.securityArgs, "--env-file", envFilePath
         ];
         for (const port of report.ports) {
             runArgs.push("-p", `${port}:${port}`);

package/dist/distribution/consumeImageDaimonContract.d.ts

@@ -0,0 +1,432 @@
+import type { DockerCommandRunner } from "./dockerRunner.js";
+/** The selected image owns its historical contract, not the consumer's registry. */
+export declare const readDaimonImageContract: (helperName: string, runDocker: DockerCommandRunner, temporaryDirectory: string) => Promise<Readonly<Record<string, {
+    id: string;
+    authKinds: string[];
+    auth: {
+        staging: "portable-file";
+        realm: null;
+        method: string;
+        provider: string;
+        fileName: string;
+        maxCredentialBytes: number;
+        directoryMode: 448;
+        fileMode: 384;
+        format: {
+            accessTokenKeys: string[];
+            refreshTokenKeys: string[];
+            containerKey?: string | undefined;
+            fallbackToRoot?: boolean | undefined;
+            entryKeyPattern?: string | undefined;
+            expiresAtKey?: string | undefined;
+        };
+    } | {
+        staging: "portable-realm";
+        realm: {
+            readonly agentCredentialRelativePath: ".codex/auth.json";
+            readonly bootstrapMountPath: "/var/lib/spawnfile/daimon/codex-bootstrap-auth";
+            readonly bootstrapSourceSlot: "codex-auth";
+            readonly directoryMode: 448;
+            readonly durableMountPath: "/var/lib/spawnfile/daimon/codex-subscription-realm";
+            readonly fileMode: 384;
+            readonly maxCredentialBytes: 65536;
+        };
+        method: string;
+        provider: string;
+        fileName: string;
+        maxCredentialBytes: number;
+        directoryMode: 448;
+        fileMode: 384;
+        format: {
+            accessTokenKeys: string[];
+            refreshTokenKeys: string[];
+            containerKey?: string | undefined;
+            fallbackToRoot?: boolean | undefined;
+            entryKeyPattern?: string | undefined;
+            expiresAtKey?: string | undefined;
+        };
+    } | {
+        staging: "broker-realm";
+        realm: {
+            readonly agentCredentialRelativePath: ".grok/auth.json";
+            readonly bootstrapMountPath: "/var/lib/spawnfile/daimon/grok-bootstrap-auth";
+            readonly bootstrapSourceSlot: "grok-auth";
+            readonly directoryMode: 448;
+            readonly durableMountPath: "/var/lib/spawnfile/daimon/grok-subscription-realm";
+            readonly fileMode: 384;
+            readonly maxCredentialBytes: 65536;
+        };
+        method: string;
+        provider: string;
+        fileName: string;
+        maxCredentialBytes: number;
+        directoryMode: 448;
+        fileMode: 384;
+        format: {
+            accessTokenKeys: string[];
+            refreshTokenKeys: string[];
+            containerKey?: string | undefined;
+            fallbackToRoot?: boolean | undefined;
+            entryKeyPattern?: string | undefined;
+            expiresAtKey?: string | undefined;
+        };
+    } | {
+        staging: "secret-service";
+        method: null;
+        provider: null;
+        realm: {
+            readonly directoryMode: 448;
+            readonly durableMountPath: "/var/lib/spawnfile/daimon/agy-subscription-realm";
+            readonly fileMode: 384;
+            readonly maxUnlockBytes: 4096;
+            readonly unlockMountPath: "/var/lib/spawnfile/daimon/agy-unlock-secret";
+            readonly unlockSourceSlot: "agy-unlock-secret";
+        };
+        busEnvironment: string;
+        format: null;
+    };
+    credentialMaterial: {
+        destinationRelativePath: string;
+        sourceSlot?: string | undefined;
+        sourceRelativePath?: string | undefined;
+        directoryMode?: 448 | undefined;
+        fileMode?: 384 | undefined;
+    } | null;
+    homeDirectory: string;
+    homeEnvironment: string;
+    requiredBinaries: string[];
+    modelSelection: {
+        configurable: boolean;
+        models: {
+            kind: "non-empty-string";
+        } | {
+            kind: "enum";
+            values: string[];
+        } | null;
+        reasoningEfforts: string[];
+        defaults: {
+            model: string | null;
+            reasoningEffort: string | null;
+        };
+        requiresPairedDeclaration: boolean;
+        declarationRequiresBroker: boolean;
+    };
+    sandbox: {
+        configurable: boolean;
+        policy?: {
+            mode: "workspace-write";
+            networkAccess: false;
+            webSearch: "disabled";
+        } | undefined;
+        profile?: string | undefined;
+        baseProfile?: string | undefined;
+        restrictNetwork?: boolean | undefined;
+        denyPaths?: {
+            canonicalAbsolute: boolean;
+            rootAllowed: boolean;
+            trailingSlashAllowed: boolean;
+            forbiddenCharacterPattern: string;
+        } | undefined;
+    };
+    training: {
+        subject: {
+            supported: true;
+            isolation: "native-sandbox" | "broker-worker";
+        } | {
+            supported: false;
+            isolation: null;
+            reason: string;
+        };
+        inferenceGrants: {
+            readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+            readonly client: {
+                readonly configSha256: {
+                    readonly "grok-4.5": {
+                        readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                        readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                        readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                    };
+                    readonly "grok-4.6": {
+                        readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                        readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                        readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                    };
+                    readonly "grok-build": {
+                        readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                        readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                        readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                    };
+                };
+                readonly envKey: "DAIMON_INFERENCE_GRANT";
+                readonly modelId: "daimon-inference-grok";
+            };
+            readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+            readonly ledgerDedupeKey: readonly ["grant", "request"];
+            readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+            readonly limits: {
+                readonly maxRequests: 64;
+                readonly maxTokens: 2000000;
+            };
+            readonly maxInFlightRequestsPerGrant: 1;
+            readonly maxLiveGrants: 8;
+            readonly messageRoles: readonly ["system", "user", "assistant"];
+            readonly purposes: readonly ["judge", "optimizer"];
+            readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+            readonly tokenPrefix: "inference_";
+            readonly ttlMs: 600000;
+        } | null;
+    };
+    broker: {
+        readonly artifacts: {
+            readonly arm64Sha256: "d0dc1c03197c3e90f09b66ad7c89b4f7b448d06dc84c03b247dce976d6018d6e";
+            readonly sourceSha256: "15836d7ad69f12ef581a6e5b8635c9db43b2177dac609160c0749d3d1fefbaa8";
+            readonly x64Sha256: "95aa9c272225e74ff9f45f54dde4bc30aee324e9ba24d8a876db9151c81b454d";
+        };
+        readonly backendSocketPath: "/run/daimon-engine-broker/backend.sock";
+        readonly bounds: {
+            readonly capabilityBundleBytes: 8196;
+            readonly capabilityBytes: 4096;
+            readonly outputBytes: 262144;
+            readonly promptBytes: 65536;
+        };
+        readonly controlProtocolVersion: "noopolis.daimon.engine-broker.v4";
+        readonly controlSocketPath: "/run/daimon-engine-broker/control.sock";
+        readonly credentialHomePath: "/var/lib/spawnfile/daimon/grok-subscription-realm";
+        readonly grokCliArtifacts: {
+            readonly arm64: {
+                readonly bytes: 136090504;
+                readonly sha256: "39ab87666877d64ef3a40aa60fbe0c3b6a6acd7001b78fe60e2c76bb6cfc4a94";
+                readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-aarch64";
+            };
+            readonly x64: {
+                readonly bytes: 163035648;
+                readonly sha256: "be5905e107d2b8b5f3c142d21ecfe4c8fd32a913d2fd551b788707930c4dc80d";
+                readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-x86_64";
+            };
+        };
+        readonly grokCliBuild: "3736acbc8658";
+        readonly grokCliVersion: "1.0.34";
+        readonly grokExecutablePath: "/usr/local/bin/grok";
+        readonly identities: {
+            readonly brokerUid: 2100;
+            readonly firstWorkerUid: 2200;
+            readonly organizationUid: 2000;
+        };
+        readonly inferenceGrants: {
+            readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+            readonly client: {
+                readonly configSha256: {
+                    readonly "grok-4.5": {
+                        readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                        readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                        readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                    };
+                    readonly "grok-4.6": {
+                        readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                        readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                        readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                    };
+                    readonly "grok-build": {
+                        readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                        readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                        readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                    };
+                };
+                readonly envKey: "DAIMON_INFERENCE_GRANT";
+                readonly modelId: "daimon-inference-grok";
+            };
+            readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+            readonly ledgerDedupeKey: readonly ["grant", "request"];
+            readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+            readonly limits: {
+                readonly maxRequests: 64;
+                readonly maxTokens: 2000000;
+            };
+            readonly maxInFlightRequestsPerGrant: 1;
+            readonly maxLiveGrants: 8;
+            readonly messageRoles: readonly ["system", "user", "assistant"];
+            readonly purposes: readonly ["judge", "optimizer"];
+            readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+            readonly tokenPrefix: "inference_";
+            readonly ttlMs: 600000;
+        };
+        readonly launcherSocketPath: "/run/daimon-engine-broker/launcher.sock";
+        readonly mcpFacade: {
+            readonly host: "127.0.0.1";
+            readonly path: "/mcp";
+            readonly port: 43124;
+        };
+        readonly nativeAbiVersion: 2;
+        readonly nativeExecutablePath: "/opt/daimon/bin/daimon-engine-broker";
+        readonly projectionVersion: "noopolis.daimon.grok-broker-projection.v3";
+        readonly providerProxy: {
+            readonly host: "127.0.0.1";
+            readonly port: 43123;
+        };
+        readonly registrationPath: "/etc/daimon-engine-broker/registrations.bin";
+        readonly runRequestBudget: {
+            readonly countsCredentialRetries: true;
+            readonly fileName: "run-requests.json";
+            readonly includesInferenceGrants: true;
+            readonly maximumField: "maxRunRequests";
+            readonly storeField: "runRequestStore";
+        };
+        readonly serviceConfigPath: "/etc/daimon-engine-broker/service.json";
+        readonly serviceConfigVersions: readonly ["noopolis.daimon.engine-broker-service.v1", "noopolis.daimon.engine-broker-service.v2", "noopolis.daimon.engine-broker-service.v3"];
+        readonly slotPreflightVersion: "noopolis.daimon.grok-slot-preflight.v2";
+        readonly slotRouting: {
+            readonly controlCaller: "organization";
+            readonly key: "slot";
+            readonly repeatedAgentIds: true;
+            readonly resetRequest: "reset_slot";
+            readonly resetResponse: "slot_reset";
+            readonly slotEnvironment: "DAIMON_ENGINE_BROKER_SLOT";
+            readonly turnStoreDirectory: "slot-{slot}";
+            readonly workersMayControl: false;
+        };
+        readonly turnLimits: {
+            readonly bounds: {
+                readonly maxRequests: readonly [1, 48];
+                readonly maxTokens: readonly [1, 10000000];
+                readonly timeoutMs: readonly [1000, 3600000];
+            };
+            readonly keys: readonly ["maxRequests", "maxTokens", "timeoutMs"];
+            readonly limitReasons: readonly ["tokens", "requests", "timeout", "none"];
+            readonly maxInFlightRequests: 1;
+            readonly missingUsageEstimate: {
+                readonly inputBytesPerToken: 2;
+                readonly outputTokens: 4096;
+            };
+            readonly requestUsageMaxTokens: 500000;
+            readonly tokenCeilingOvershoot: "at-most-one-request";
+            readonly v1Defaults: {
+                readonly maxRequests: 32;
+                readonly maxTokens: 300000;
+                readonly timeoutMs: 240000;
+            };
+            readonly wakeMayOnlyLower: true;
+        };
+        readonly turnRecordVersions: readonly ["noopolis.daimon.engine-broker-turn.v1", "noopolis.daimon.engine-broker-turn.v2"];
+        readonly turnStorePath: "/var/lib/spawnfile/daimon/grok-subscription-realm/turns";
+        readonly wakeLimitEnvironment: {
+            readonly maxTokens: "DAIMON_ENGINE_WAKE_TOKEN_CEILING";
+            readonly timeoutMs: "DAIMON_ENGINE_WAKE_TIMEOUT_MS";
+        };
+        readonly worker: {
+            readonly clockedConfigSha256: {
+                readonly "grok-4.5": {
+                    readonly high: "907d8967960c342b442d6d256b2585f3c85bd846a78578f596f0b605403d6d34";
+                    readonly low: "3c4f3515b21c1bffb3fb770e2ecb4b918b6c43d5e77c1fd47e1e6698d1fedee7";
+                    readonly medium: "9117e12b2f3f6fa045799592969cbaae1c2f3b1ea79330badac8655b9b41dd7a";
+                };
+                readonly "grok-4.6": {
+                    readonly high: "203744f6f0dfc0bc80cfb896880497edfd9b3de4dcf33060e8ef4d2ef5f220a7";
+                    readonly low: "751f1dcd04983e5e5883df5a8fefa04f201e187e5ef1f344d3bf83f950830432";
+                    readonly medium: "f1406f93a8091eb0c09e07321254a9c783a89b0bbf5548d9613d53a8d087a517";
+                };
+                readonly "grok-build": {
+                    readonly high: "6efddadc82c38020d3351829e54bb09fa456cd6d76ea1247902794d82a4a3ffa";
+                    readonly low: "a8c63ba910623a0686930c27db0733f4a2588c7fca9dd7da25c3f18027720ab5";
+                    readonly medium: "6afcd2b90c0d19794f8c0d22147a0f011946a92e613f89dae98b0ca729313101";
+                };
+            };
+            readonly configSha256: {
+                readonly "grok-4.5": {
+                    readonly high: "c63c3387ce92d94ec3f690abfe98942afcd7c9e17ff84816bbe751f340ab251f";
+                    readonly low: "8247127c3625ff7c5d8d527a53596b89ec6557a821ac46cfd00bd122b90daff6";
+                    readonly medium: "59288cee61297bb8c002097061a48f77b09d310754187a253ee089f7172a9155";
+                };
+                readonly "grok-4.6": {
+                    readonly high: "65b0212564fb74042b1503d293fb8d3620276033264c0efade2a539ca09218e3";
+                    readonly low: "ab58499ac32678097c146479896f2b8a8e2b0e39aea22dc0a60b6227e370538e";
+                    readonly medium: "df1a5cc84346e7f6bf6090492fbd19faaefb42953e3bb2e8c6cbc0572242403f";
+                };
+                readonly "grok-build": {
+                    readonly high: "a23724e00d670caee185ba7690d2daa868173e53905cf446f5329666f01ab4e3";
+                    readonly low: "fb343f2809903f26d21681470943235031f946e99085542fd89555eb7782cbb5";
+                    readonly medium: "8a587ef75c90eab70d19b24583e60051d6fba9d90c558839fdbb15588b4cc656";
+                };
+            };
+            readonly defaultModel: "grok-4.6";
+            readonly defaultReasoningEffort: "low";
+            readonly home: {
+                readonly directory: {
+                    readonly group: "worker";
+                    readonly mode: 1017;
+                    readonly uid: 0;
+                };
+                readonly organizationRuntimeHome: {
+                    readonly group: "worker";
+                    readonly mode: 456;
+                    readonly owner: "organization";
+                };
+                readonly privateTmp: {
+                    readonly mode: 448;
+                    readonly owner: "worker";
+                    readonly relativeToWorkerHome: "tmp";
+                };
+                readonly readOnlyFiles: {
+                    readonly gid: 0;
+                    readonly mode: 292;
+                    readonly names: readonly ["config.toml", "managed_config.toml", "requirements.toml", "sandbox.toml", "trusted_folders.toml"];
+                    readonly uid: 0;
+                };
+                readonly sandboxEvents: {
+                    readonly group: "broker";
+                    readonly mode: 416;
+                    readonly owner: "worker";
+                    readonly relativePath: "sessions/sandbox-events.jsonl";
+                };
+                readonly sessionsDirectory: {
+                    readonly group: "worker";
+                    readonly mode: 1017;
+                    readonly relativePath: "sessions";
+                    readonly uid: 0;
+                };
+                readonly sharedTmp: {
+                    readonly maxGroupExclusive: 2200;
+                    readonly mode: 1020;
+                    readonly otherMode: 4;
+                    readonly paths: readonly ["/tmp", "/var/tmp"];
+                    readonly uid: 0;
+                };
+                readonly spillDirectory: {
+                    readonly fileMode: 416;
+                    readonly group: "worker";
+                    readonly mode: 1512;
+                    readonly owner: "organization";
+                    readonly relativeToRuntimeHome: "tool-output";
+                };
+            };
+            readonly maxTurns: 48;
+            readonly modelId: "daimon-broker-grok";
+            readonly models: readonly ["grok-4.6", "grok-4.5", "grok-build"];
+            readonly reasoningEfforts: readonly ["low", "medium", "high"];
+            readonly systemPromptSha256: "2c31c0085a54a4efbf9c0cf0b8124c56e47f38691b7f0c7fa233a74abaa8ddf8";
+            readonly taskClock: {
+                readonly directoryMode: 493;
+                readonly directoryPath: "/run/daimon-engine-broker/task-clock/slot-0";
+                readonly fileMode: 420;
+                readonly ownerUid: 2100;
+                readonly preloadPath: "/usr/local/lib/daimon/libfaketime.so.1";
+                readonly rootDirectoryPath: "/run/daimon-engine-broker/task-clock";
+                readonly slotDirectoryPattern: "/run/daimon-engine-broker/task-clock/slot-{slot}";
+                readonly slotFilePattern: "/run/daimon-engine-broker/task-clock/slot-{slot}/faketime";
+                readonly timestampFilePath: "/run/daimon-engine-broker/task-clock/slot-0/faketime";
+                readonly version: "noopolis.daimon.grok-broker-task-clock.v2";
+                readonly workerView: "own-directory-visible-sibling-directories-denied";
+            };
+            readonly toolIds: readonly ["run_terminal_cmd", "read_file", "grep", "list_dir", "search_tool", "use_tool"];
+            readonly visibleTools: readonly ["grep", "list_dir", "read_file", "run_terminal_command", "search_tool", "use_tool"];
+        };
+    } | null;
+    capabilities: {
+        portableCredential: boolean;
+        nativeSandbox: boolean;
+        broker: boolean;
+        secretService: boolean;
+    };
+    piAuthMethod?: string | undefined;
+    piProvider?: string | undefined;
+    piSourceProvider?: string | undefined;
+}>>>;

package/dist/distribution/consumeImageDaimonContract.js

@@ -0,0 +1,36 @@
+import path from "node:path";
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { readVerifiedDaimonContractManifest } from "../runtime/daimon/contractManifest.js";
+import { SpawnfileError } from "../shared/errors.js";
+import { extractSingleFileFromTar } from "./tarReader.js";
+const RUNTIME_ROOT = "/opt/spawnfile/runtime-installs/daimon";
+/** The selected image owns its historical contract, not the consumer's registry. */
+export const readDaimonImageContract = async (helperName, runDocker, temporaryDirectory) => {
+    const directory = await mkdtemp(path.join(temporaryDirectory, "daimon-contract-"));
+    try {
+        const copy = async (name, maxBytes) => {
+            const tar = await runDocker(["cp", `${helperName}:${RUNTIME_ROOT}/${name}`, "-"]);
+            return extractSingleFileFromTar(tar, { maxBytes });
+        };
+        const manifest = await copy("contract-manifest.json", 4 * 1024 * 1024);
+        const sidecar = await copy("contract-manifest.sha256", 128);
+        const receiptBytes = await copy("capability-receipt.json", 1024 * 1024);
+        await writeFile(path.join(directory, "contract-manifest.json"), manifest);
+        await writeFile(path.join(directory, "contract-manifest.sha256"), sidecar);
+        const verified = await readVerifiedDaimonContractManifest(directory);
+        const receipt = JSON.parse(receiptBytes.toString("utf8"));
+        if (!receipt || Array.isArray(receipt)
+            || receipt.version !== "spawnfile.daimon-runtime-capability-receipt.v1"
+            || receipt.manifest_sha256 !== verified.digest) {
+            throw new Error("capability receipt does not bind the image manifest");
+        }
+        return verified.manifest.engines;
+    }
+    catch (error) {
+        throw new SpawnfileError("validation_error", "Could not verify Daimon's embedded image contract: "
+            + (error instanceof Error ? error.message : String(error)));
+    }
+    finally {
+        await rm(directory, { recursive: true, force: true });
+    }
+};

package/dist/distribution/consumeImageDaimonDocker.d.ts

@@ -1,3 +1,7 @@
+import type { DaimonEngineDescriptors } from "../runtime/daimon/engineDescriptorSchema.js";
 import type { DockerCommandRunner } from "./dockerRunner.js";
 import type { DistributionReport } from "./types.js";
-export declare const resolveDaimonDockerSecurityArgsForImage: (imageRef: string, report: DistributionReport, runDocker: DockerCommandRunner, securityDirectory: string) => Promise<string[]>;
+export declare const resolveDaimonRuntimeForImage: (imageRef: string, report: DistributionReport, runDocker: DockerCommandRunner, securityDirectory: string) => Promise<{
+    securityArgs: string[];
+    engineDescriptors?: DaimonEngineDescriptors;
+}>;

package/dist/distribution/consumeImageDaimonDocker.js

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { SpawnfileError } from "../shared/errors.js";
 import { DAIMON_DOCKER_RUNTIME_SECURITY_ARGS, daimonEngineDockerSecurityArgsForConfigs, materializeDaimonGrokSeccompProfile } from "../shared/daimonCodexDocker.js";
+import { readDaimonImageContract } from "./consumeImageDaimonContract.js";
 import { extractSingleFileFromTar } from "./tarReader.js";
 const DAIMON_CONFIG_SIZE_CAP_BYTES = 4 * 1024 * 1024;
 const daimonInstancesFrom = (report) => report.runtime_instances.filter((instance) => instance.runtime === "daimon");
@@ -10,7 +11,7 @@ const assertAbsoluteConfigPath = (instance) => {
     }
     return instance.config_path;
 };
-const readDaimonConfigSourcesFromImage = async (imageRef, instances, runDocker) => {
+const readDaimonConfigSourcesFromImage = async (imageRef, instances, runDocker, securityDirectory) => {
     const helperName = `spawnfile-daimon-config-${randomUUID()}`;
     await runDocker(["create", "--name", helperName, imageRef]);
     try {
@@ -27,19 +28,19 @@ const readDaimonConfigSourcesFromImage = async (imageRef, instances, runDocker)
             }
             sources.push(extractSingleFileFromTar(tar, { maxBytes: DAIMON_CONFIG_SIZE_CAP_BYTES }).toString("utf8"));
         }
-        return sources;
+        return { sources, engineDescriptors: await readDaimonImageContract(helperName, runDocker, securityDirectory) };
     }
     finally {
         await runDocker(["rm", "-f", helperName]).catch(() => undefined);
     }
 };
-export const resolveDaimonDockerSecurityArgsForImage = async (imageRef, report, runDocker, securityDirectory) => {
+export const resolveDaimonRuntimeForImage = async (imageRef, report, runDocker, securityDirectory) => {
     const daimonInstances = daimonInstancesFrom(report);
     if (daimonInstances.length === 0)
-        return [];
-    const sources = await readDaimonConfigSourcesFromImage(imageRef, daimonInstances, runDocker);
-    return [
-        ...DAIMON_DOCKER_RUNTIME_SECURITY_ARGS,
-        ...(await daimonEngineDockerSecurityArgsForConfigs(sources, () => materializeDaimonGrokSeccompProfile(securityDirectory)))
-    ];
+        return { securityArgs: [] };
+    const { sources, engineDescriptors } = await readDaimonConfigSourcesFromImage(imageRef, daimonInstances, runDocker, securityDirectory);
+    return { engineDescriptors, securityArgs: [
+            ...DAIMON_DOCKER_RUNTIME_SECURITY_ARGS,
+            ...(await daimonEngineDockerSecurityArgsForConfigs(sources, () => materializeDaimonGrokSeccompProfile(securityDirectory)))
+        ] };
 };

package/dist/distribution/daimonImageContract.test-fixtures.d.ts

@@ -0,0 +1,2 @@
+export declare const daimonImageManifestBytes: (version?: 5 | 6 | 7) => Buffer;
+export declare const daimonImageContractFiles: (bytes?: Buffer<ArrayBufferLike>) => Record<string, Buffer>;

package/dist/distribution/daimonImageContract.test-fixtures.js

@@ -0,0 +1,16 @@
+import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+// Historical bytes, unchanged: v5 a483f6e4, v6 bf61e6bb.
+export const daimonImageManifestBytes = (version = 7) => readFileSync(new URL(version === 7 ? "../runtime/daimon/contract-manifest.json"
+    : `./daimon-contract-v${version}.fixture.json`, import.meta.url));
+export const daimonImageContractFiles = (bytes = daimonImageManifestBytes()) => {
+    const digest = `sha256:${createHash("sha256").update(bytes).digest("hex")}`;
+    const root = "/opt/spawnfile/runtime-installs/daimon";
+    return {
+        [`${root}/contract-manifest.json`]: bytes,
+        [`${root}/contract-manifest.sha256`]: Buffer.from(`${digest}\n`),
+        [`${root}/capability-receipt.json`]: Buffer.from(JSON.stringify({
+            version: "spawnfile.daimon-runtime-capability-receipt.v1", manifest_sha256: digest
+        }))
+    };
+};

package/dist/distribution/imageRuntimeAuth.d.ts

@@ -1,3 +1,4 @@
+import type { DaimonEngineDescriptors } from "../runtime/daimon/engineDescriptorSchema.js";
 import type { ResolvedAuthProfile } from "../auth/index.js";
 import type { DistributionReport } from "./types.js";
 export interface ImageRuntimeAuthInput {
@@ -8,6 +9,7 @@ export interface ImageRuntimeAuthInput {
      * known to run under a different identity.
      */
     daimonContainerCredentialUid?: number;
+    daimonEngineDescriptors?: DaimonEngineDescriptors;
     report: DistributionReport;
     sourceEnvironment?: Record<string, string | undefined>;
     tempRoot: string;
@@ -16,7 +18,7 @@ export interface ImageRuntimeAuthResult {
     coveredModelSecrets: Set<string>;
     mountArgs: string[];
 }
-export declare const prepareDaimonImageAuthMounts: (instance: DistributionReport["runtime_instances"][number], environment: Record<string, string | undefined>, authProfile: ResolvedAuthProfile | null, containerCredentialUid?: number) => Promise<string[]>;
+export declare const prepareDaimonImageAuthMounts: (instance: DistributionReport["runtime_instances"][number], environment: Record<string, string | undefined>, authProfile: ResolvedAuthProfile | null, containerCredentialUid?: number, inventory?: DaimonEngineDescriptors) => Promise<string[]>;
 /**
  * Builds the credential mounts for a sourceless image deployment that uses
  * import-based model auth. The OAuth-mode config is already baked into the