spawnfile 0.1.32 → 0.1.34

package/dist/runtime/daimon/training/native/outcome.js

@@ -1,37 +0,0 @@
-import { bindTerminalEvidence } from './child/index.js';
-import { wakeEvidenceFile } from './worker/index.js';
-export function admittedNativeEvidence(value, launch, trialId, wakeId, ordinal, file, source, deliveries, wakeTimeoutMs) {
-    if (!value.activity || !value.receipt)
-        return undefined;
-    const wake = { wakeId, source, unevidenced: 'terminal-absent' };
-    let sealed = false;
-    bindTerminalEvidence(wake, value, launch, trialId, () => { sealed = true; }, wakeTimeoutMs);
-    if (sealed)
-        throw new Error('Native terminal evidence attribution conflict');
-    const delivery = value.receipt.delivery_id;
-    const own = (id) => launch.delivery === 'transport' ? deliveries.has(id) || id === delivery : id.startsWith(`${trialId}:`);
-    const ids = new Set([value.executionId]);
-    for (const item of value.activity.items) {
-        if (item.agent_id !== launch.agent.id)
-            throw new Error('Native activity evidence identity mismatch');
-        // Trial deliveries are authoritative; native tool receipts are not deliveries.
-        if ((launch.delivery === 'transport' && item.delivery_id.startsWith('moltnet:') ||
-            /^[0-9a-f-]{36}:/u.test(item.delivery_id)) && !own(item.delivery_id)) {
-            throw new Error('Native activity delivery identity mismatch');
-        }
-        if (own(item.delivery_id) && item.execution_id)
-            ids.add(item.execution_id);
-    }
-    // The worker's admitted trial ledger retains revisits that the latest delivery
-    // activity can no longer name. Legacy frames have only the activity projection.
-    for (const row of value.native.accounting?.usage ?? []) {
-        if (row.agent !== launch.agent.id || !row.wake)
-            throw new Error('Native accounting evidence identity mismatch');
-        ids.add(row.wake);
-    }
-    if (wake.unevidenced)
-        return undefined;
-    deliveries.add(delivery);
-    return { wakeId, executionId: value.executionId, executionIds: [...ids], evidenceFile: wakeEvidenceFile(file, ordinal) };
-}
-//# sourceMappingURL=outcome.js.map

package/dist/runtime/daimon/training/native/outcome.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"outcome.js","sourceRoot":"","sources":["../../../../../src/runtime/daimon/training/native/outcome.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAuD,MAAM,mBAAmB,CAAC;AAS1G,MAAM,UAAU,sBAAsB,CAAC,KAAuB,EAAE,MAA4B,EAAE,OAAe,EAC3G,MAAc,EAAE,OAAe,EAAE,IAAY,EAAE,MAA2C,EAC1F,UAAuB,EAAE,aAAsB;IAC/C,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAwD,EAAE,CAAC;IACvG,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC5F,IAAI,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAQ,CAAC,WAAW,CAAC;IAC5C,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IACnI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,WAAY,CAAC,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAS,CAAC,KAAK,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACrG,+EAA+E;QAC/E,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC;YAC3E,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,YAAY;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7E,CAAC;IACD,+EAA+E;IAC/E,gFAAgF;IAChF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QACvD,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAChH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACvC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAY,EAAE,YAAY,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,YAAY,EAAE,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;AAC5H,CAAC"}

package/dist/runtime/daimon/training/native/preparation/engine-config.d.ts

@@ -1,21 +0,0 @@
-import type { NativeLaunch } from '../receipt/index.js';
-/** The compiled Daimon agent fields this check reads (structurally Daimon's runtime config agent). */
-export interface NativeAgentConfig {
-    id: string;
-    engine: {
-        kind: string;
-        model?: string;
-        reasoningEffort?: string;
-        codexSandbox?: Readonly<Record<string, unknown>>;
-    };
-}
-/**
- * Refuse a compiled agent config whose engine differs from the launch agent,
- * before any subject starts.
- *
- * Codex: the same agent and model, with exactly the `workspace-no-network`
- * sandbox (`workspace-write`, no network access, web search disabled, and no
- * other sandbox field). Grok: the same agent, model and reasoning effort, and no
- * Codex sandbox at all — the broker realm is its containment.
- */
-export declare function assertNativeEngineConfig(agentConfig: NativeAgentConfig, launchAgent: NativeLaunch['agent']): void;

package/dist/runtime/daimon/training/native/preparation/engine-config.js

@@ -1,30 +0,0 @@
-/**
- * Refuse a compiled agent config whose engine differs from the launch agent,
- * before any subject starts.
- *
- * Codex: the same agent and model, with exactly the `workspace-no-network`
- * sandbox (`workspace-write`, no network access, web search disabled, and no
- * other sandbox field). Grok: the same agent, model and reasoning effort, and no
- * Codex sandbox at all — the broker realm is its containment.
- */
-export function assertNativeEngineConfig(agentConfig, launchAgent) {
-    const engine = agentConfig.engine;
-    if (agentConfig.id !== launchAgent.id)
-        throw new Error('Compiled native agent differs from the launch agent');
-    if (engine.kind !== launchAgent.engine || engine.model !== launchAgent.model) {
-        throw new Error('Compiled native engine or model differs from the launch agent');
-    }
-    if (launchAgent.engine === 'grok') {
-        if (engine.reasoningEffort !== launchAgent.reasoningEffort)
-            throw new Error('Compiled Grok reasoning effort differs from the launch agent');
-        if (engine.codexSandbox !== undefined)
-            throw new Error('A Grok subject cannot declare a Codex sandbox');
-        return;
-    }
-    const sandbox = engine.codexSandbox;
-    if (!engine.model?.trim() || !sandbox || sandbox.mode !== 'workspace-write' || sandbox.networkAccess !== false ||
-        sandbox.webSearch !== 'disabled' || Object.keys(sandbox).length !== 3) {
-        throw new Error('A Codex subject requires the explicit workspace-no-network sandbox (codex_policy: workspace-no-network)');
-    }
-}
-//# sourceMappingURL=engine-config.js.map

package/dist/runtime/daimon/training/native/preparation/engine-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"engine-config.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/engine-config.ts"],"names":[],"mappings":"AAQA;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAA8B,EAAE,WAAkC;IACzG,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,IAAI,WAAW,CAAC,EAAE,KAAK,WAAW,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC9G,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,eAAe,KAAK,WAAW,CAAC,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAC5I,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACxG,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK;QAC1G,OAAO,CAAC,SAAS,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,yGAAyG,CAAC,CAAC;IAC7H,CAAC;AACH,CAAC"}

package/dist/runtime/daimon/training/native/preparation/fixtures.d.ts

@@ -1,17 +0,0 @@
-import type { TrialSlot } from '../../../../../training/index.js';
-import type { GrokSlotFreshness } from '../child/index.js';
-import type { GrokBrokerLaunch } from '../receipt/index.js';
-import type { NativeTrialRoots, ProvisionedSubject, SubjectProvisionInput, SubjectProvisioner } from './types.js';
-/** Test-only shapes of a Spawnfile-style training slot; never provisioning evidence. */
-export declare const grokSlotRoot = "/run/training/slots/1";
-export declare const grokContextRoot = "/run/spawnfile-training";
-export declare function grokLease(): TrialSlot;
-export declare function codexLease(): TrialSlot;
-export declare function grokBroker(freshness: GrokSlotFreshness): GrokBrokerLaunch;
-export declare function grokSubject(freshness: GrokSlotFreshness): ProvisionedSubject;
-export declare function codexSubject(roots: NativeTrialRoots): ProvisionedSubject;
-export declare const trialRoots: (root?: string) => NativeTrialRoots;
-/** Records every call in order; `shape` decides what the provisioner answers. */
-export declare function fakeProvisioner(shape: (input: SubjectProvisionInput) => ProvisionedSubject, log?: string[]): SubjectProvisioner & {
-    inputs: SubjectProvisionInput[];
-};

package/dist/runtime/daimon/training/native/preparation/fixtures.js

@@ -1,52 +0,0 @@
-import { DAIMON_CODEX_SUBSCRIPTION_REALM } from '../../../index.js';
-/** Test-only shapes of a Spawnfile-style training slot; never provisioning evidence. */
-export const grokSlotRoot = '/run/training/slots/1';
-export const grokContextRoot = '/run/spawnfile-training';
-export function grokLease() {
-    return { index: 1, workerUid: 2201, ports: { base: 20100, count: 100 }, roots: {
-            workspace: `${grokSlotRoot}/workspace`, runtimeHome: `${grokSlotRoot}/runtime-home`, workerHome: '/run/daimon-workers/2201',
-            usageLedger: `${grokSlotRoot}/usage/usage.jsonl`, preflightReceipt: `${grokSlotRoot}/preflight.json`, controlRoot: `${grokSlotRoot}/state`,
-            home: `${grokSlotRoot}/runtime-home`, control: `${grokSlotRoot}/state`, context: grokContextRoot
-        } };
-}
-export function codexLease() {
-    return { index: 2, workerUid: process.geteuid(), isolation: 'shared-uid', roots: {}, ports: { base: 20200, count: 100 } };
-}
-export function grokBroker(freshness) {
-    const evaluatorPaths = [{ role: 'run-root', path: '/run/training/run' }, { role: 'context', path: grokContextRoot },
-        { role: 'sealed-inputs', path: '/run/training/sealed' }, { role: 'judge-home', path: '/run/training/grants' },
-        { role: 'slot-ledger', path: `${grokSlotRoot}/usage` }, { role: 'context', path: '/run/training/slots/0' }];
-    return { projectionVersion: 'noopolis.daimon.grok-broker-projection.v3', workerConfigVariant: 'unclocked',
-        projectionSha256: 'a'.repeat(64), slot: 1, workerUid: 2201, workerHomePath: '/run/daimon-workers/2201', architecture: 'arm64',
-        usageLedgerPath: `${grokSlotRoot}/usage/usage.jsonl`, seccompProfileSha256: 'b'.repeat(64), profileSha256: 'c'.repeat(64),
-        denyPaths: [...evaluatorPaths.map(row => row.path), `${grokSlotRoot}/state`].sort(),
-        limits: { maxRequests: 24, maxTokens: 400000, timeoutMs: 480000 }, evaluatorPaths: evaluatorPaths.map(row => ({ ...row })),
-        slotPreflightReceipt: `${grokSlotRoot}/preflight.json`, ...freshness };
-}
-export function grokSubject(freshness) {
-    const workspace = `${grokSlotRoot}/workspace`, home = `${grokSlotRoot}/runtime-home`;
-    return { agent: { id: 'agent:writer', engine: 'grok', model: 'grok-4.6', reasoningEffort: 'low' },
-        workspace: { source: workspace, target: workspace }, projections: [{ role: 'home', source: home, target: home }],
-        credentials: [], broker: grokBroker(freshness), generation: freshness.minGeneration,
-        roots: { workspace, home, control: `${grokSlotRoot}/state`, context: grokContextRoot },
-        ports: { control: 20101, moltnet: 20100 }, env: { MOLTNET_TOKEN: 'fixture' } };
-}
-export function codexSubject(roots) {
-    const home = `${roots.root}/home`;
-    return { agent: { id: 'agent:writer', engine: 'codex', model: 'gpt-5.5' },
-        workspace: { source: roots.workspace, target: roots.workspace },
-        projections: [{ role: 'home', source: home, target: home },
-            { role: 'memory', source: `${roots.root}/memory`, target: `${roots.root}/memory` },
-            { role: 'transport', source: `${roots.runtimeHome}/native/moltnet`, target: `${roots.runtimeHome}/native/moltnet` },
-            { role: 'subscription', source: DAIMON_CODEX_SUBSCRIPTION_REALM.durableMountPath, target: DAIMON_CODEX_SUBSCRIPTION_REALM.durableMountPath }],
-        credentials: [{ source: '/run/spawnfile-training-auth/codex', target: DAIMON_CODEX_SUBSCRIPTION_REALM.bootstrapMountPath }],
-        roots: { workspace: roots.workspace, home, control: `${roots.runtimeHome}/native/root-control/acceptance` },
-        ports: { control: 20201, moltnet: 20200 }, env: {} };
-}
-export const trialRoots = (root = '/trials/t1') => ({ root, workspace: `${root}/workspace`, control: `${root}/control`, runtimeHome: `${root}/runtime` });
-/** Records every call in order; `shape` decides what the provisioner answers. */
-export function fakeProvisioner(shape, log = []) {
-    const inputs = [];
-    return { inputs, provision: async (input) => { log.push('provision'); inputs.push(input); return shape(input); } };
-}
-//# sourceMappingURL=fixtures.js.map

package/dist/runtime/daimon/training/native/preparation/fixtures.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/fixtures.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AAEpE,wFAAwF;AACxF,MAAM,CAAC,MAAM,YAAY,GAAG,uBAAuB,CAAC;AACpD,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAEzD,MAAM,UAAU,SAAS;IACvB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE;YAC7E,SAAS,EAAE,GAAG,YAAY,YAAY,EAAE,WAAW,EAAE,GAAG,YAAY,eAAe,EAAE,UAAU,EAAE,0BAA0B;YAC3H,WAAW,EAAE,GAAG,YAAY,oBAAoB,EAAE,gBAAgB,EAAE,GAAG,YAAY,iBAAiB,EAAE,WAAW,EAAE,GAAG,YAAY,QAAQ;YAC1I,IAAI,EAAE,GAAG,YAAY,eAAe,EAAE,OAAO,EAAE,GAAG,YAAY,QAAQ,EAAE,OAAO,EAAE,eAAe;SAAE,EAAE,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,OAAQ,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;AAC7H,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAA4B;IACrD,MAAM,cAAc,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE;QACjH,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,sBAAsB,EAAE;QAC7G,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,YAAY,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAU,CAAC;IACvH,OAAO,EAAE,iBAAiB,EAAE,2CAA2C,EAAE,mBAAmB,EAAE,WAAW;QACvG,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,0BAA0B,EAAE,YAAY,EAAE,OAAO;QAC7H,eAAe,EAAE,GAAG,YAAY,oBAAoB,EAAE,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACzH,SAAS,EAAE,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,YAAY,QAAQ,CAAC,CAAC,IAAI,EAAE;QACnF,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAC1H,oBAAoB,EAAE,GAAG,YAAY,iBAAiB,EAAE,GAAG,SAAS,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAA4B;IACtD,MAAM,SAAS,GAAG,GAAG,YAAY,YAAY,EAAE,IAAI,GAAG,GAAG,YAAY,eAAe,CAAC;IACrF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE;QAC/F,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAChH,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,aAAa;QACnF,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,YAAY,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;QACtF,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAuB;IAClD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,OAAO,CAAC;IAClC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;QACvE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE;QAC/D,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,SAAS,EAAE;YAClF,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,iBAAiB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,iBAAiB,EAAE;YACnH,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,+BAA+B,CAAC,gBAAgB,EAAE,MAAM,EAAE,+BAA+B,CAAC,gBAAgB,EAAE,CAAC;QAC/I,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,oCAAoC,EAAE,MAAM,EAAE,+BAA+B,CAAC,kBAAkB,EAAE,CAAC;QAC3H,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,WAAW,iCAAiC,EAAE;QAC3G,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,YAAY,EAAoB,EAAE,CAClE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC,CAAC;AAEzG,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,KAA2D,EAAE,MAAgB,EAAE;IAC7G,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnH,CAAC"}

package/dist/runtime/daimon/training/native/preparation/index.d.ts

@@ -1,7 +0,0 @@
-export { prepareNativeSubject } from './subject.js';
-export { createExperimentSlotFreshness, experimentSlotFreshnessFile } from '../../services/index.js';
-export { bindTrialPathsToSlot, nativeSubjectScratch, nativeTrialInputsRoot } from './layout.js';
-export type { NativeScratchName, NativeSubjectLayout } from './layout.js';
-export { assertNativeEngineConfig } from './engine-config.js';
-export type { NativeAgentConfig } from './engine-config.js';
-export type { NativeSubjectEngine, NativeTrialRoots, PrepareNativeSubjectOptions, ProvisionedSubject, SubjectProvisionInput, SubjectProvisioner } from './types.js';

package/dist/runtime/daimon/training/native/preparation/index.js

@@ -1,5 +0,0 @@
-export { prepareNativeSubject } from './subject.js';
-export { createExperimentSlotFreshness, experimentSlotFreshnessFile } from '../../services/index.js';
-export { bindTrialPathsToSlot, nativeSubjectScratch, nativeTrialInputsRoot } from './layout.js';
-export { assertNativeEngineConfig } from './engine-config.js';
-//# sourceMappingURL=index.js.map

package/dist/runtime/daimon/training/native/preparation/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEhG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/runtime/daimon/training/native/preparation/layout.d.ts

@@ -1,66 +0,0 @@
-import type { NativeSubjectEngine } from './types.js';
-/**
- * The layout fields a prepared subject (or its launch) already fixes. A
- * `ProvisionedSubject` satisfies it; so does a launch with `roots.control` set
- * to its control root.
- */
-export interface NativeSubjectLayout {
-    agent: {
-        engine: NativeSubjectEngine;
-    };
-    projections: readonly {
-        role: string;
-        source: string;
-    }[];
-    roots: Readonly<Record<string, string>> & {
-        readonly control: string;
-    };
-    broker?: {
-        evaluatorPaths: readonly {
-            role: string;
-            path: string;
-        }[];
-    };
-}
-export type NativeScratchName = 'memory' | 'transport';
-/**
- * Point the evaluator's own trial workspace and runtime home at the slot's fixed
- * directories.
- *
- * A brokered slot pins its workspace and runtime home per container and the
- * projection digest binds both, so they cannot move; the adapter requires
- * `realpath(workspacePath)` and `realpath(runtimeHomePath)` to be exactly them.
- * A symlink is what makes the evaluator's trial paths resolve there. Only the
- * evaluator's own entry is replaced (a previous link is unlinked, never
- * followed) and the slot directories themselves are never written or cleared:
- * the next recycle owns them.
- */
-export declare function bindTrialPathsToSlot(paths: {
-    workspace: string;
-    runtimeHome: string;
-}, subject: {
-    roots: {
-        readonly workspace: string;
-        readonly home: string;
-    };
-}): Promise<void>;
-/**
- * Where one trial's private control inputs (config, token, env file) live.
- *
- * Codex: `inputs/` beside the per-trial control root, inside the trial runtime
- * home the adapter anchors every Codex control input to.
- *
- * Grok: the slot control root is shared and its runtime home is subject-writable,
- * so inputs go into the denied `context` evaluator root the provisioner names in
- * `roots.context`, under `trials/trial-<digest>`. That root must be one of the
- * broker's `context` evaluator paths, which launch.v2 requires to be denied.
- */
-export declare function nativeTrialInputsRoot(subject: NativeSubjectLayout, trialId: string): string;
-/**
- * Where a subject's private memory or local transport scratch lives.
- *
- * Grok declares exactly one projection, so scratch sits inside that single home
- * projection under `training/<name>`; the next recycle wipes it with the home.
- * Codex keeps its own fresh `memory` / `transport` projections.
- */
-export declare function nativeSubjectScratch(subject: NativeSubjectLayout, name: NativeScratchName): string;

package/dist/runtime/daimon/training/native/preparation/layout.js

@@ -1,87 +0,0 @@
-import { lstat, realpath, rm, symlink, unlink } from 'node:fs/promises';
-import { basename, dirname, isAbsolute, join } from 'node:path';
-import { nativeTrialLeaf, within } from '../receipt/index.js';
-const canonicalDirectory = async (path) => {
-    if (!isAbsolute(path) || await realpath(path) !== path || !(await lstat(path)).isDirectory()) {
-        throw new Error('A leased slot directory must be a canonical real directory');
-    }
-};
-/**
- * Point the evaluator's own trial workspace and runtime home at the slot's fixed
- * directories.
- *
- * A brokered slot pins its workspace and runtime home per container and the
- * projection digest binds both, so they cannot move; the adapter requires
- * `realpath(workspacePath)` and `realpath(runtimeHomePath)` to be exactly them.
- * A symlink is what makes the evaluator's trial paths resolve there. Only the
- * evaluator's own entry is replaced (a previous link is unlinked, never
- * followed) and the slot directories themselves are never written or cleared:
- * the next recycle owns them.
- */
-export async function bindTrialPathsToSlot(paths, subject) {
-    const pairs = [[paths.workspace, subject.roots.workspace], [paths.runtimeHome, subject.roots.home]];
-    const [workspace, home] = [subject.roots.workspace, subject.roots.home];
-    if (within(workspace, home) || within(home, workspace))
-        throw new Error('Leased slot workspace and home must be disjoint');
-    for (const [trial, slot] of pairs) {
-        await canonicalDirectory(slot);
-        if (!isAbsolute(trial))
-            throw new Error('Trial paths must be absolute');
-        // The trial entry's own location, resolved without following the entry itself.
-        const entry = join(await realpath(dirname(trial)), basename(trial));
-        if ([workspace, home].some(root => within(root, entry) || within(entry, root))) {
-            throw new Error('A trial path cannot be, contain or sit inside a leased slot directory');
-        }
-    }
-    for (const [trial, slot] of pairs) {
-        const existing = await lstat(trial).catch((error) => { if (error.code === 'ENOENT')
-            return undefined; throw error; });
-        if (existing?.isSymbolicLink())
-            await unlink(trial);
-        else if (existing)
-            await rm(trial, { recursive: true });
-        await symlink(slot, trial, 'dir');
-        if (await realpath(trial) !== slot)
-            throw new Error('Trial path does not resolve to its leased slot directory');
-    }
-}
-/**
- * Where one trial's private control inputs (config, token, env file) live.
- *
- * Codex: `inputs/` beside the per-trial control root, inside the trial runtime
- * home the adapter anchors every Codex control input to.
- *
- * Grok: the slot control root is shared and its runtime home is subject-writable,
- * so inputs go into the denied `context` evaluator root the provisioner names in
- * `roots.context`, under `trials/trial-<digest>`. That root must be one of the
- * broker's `context` evaluator paths, which launch.v2 requires to be denied.
- */
-export function nativeTrialInputsRoot(subject, trialId) {
-    if (subject.agent.engine === 'codex')
-        return join(dirname(subject.roots.control), 'inputs');
-    const context = subject.roots.context;
-    if (!context || !subject.broker?.evaluatorPaths.some(row => row.role === 'context' && row.path === context)) {
-        throw new Error('A Grok subject must name a denied context evaluator root for its control inputs');
-    }
-    return join(context, 'trials', nativeTrialLeaf(trialId));
-}
-/**
- * Where a subject's private memory or local transport scratch lives.
- *
- * Grok declares exactly one projection, so scratch sits inside that single home
- * projection under `training/<name>`; the next recycle wipes it with the home.
- * Codex keeps its own fresh `memory` / `transport` projections.
- */
-export function nativeSubjectScratch(subject, name) {
-    if (subject.agent.engine === 'grok') {
-        const homes = subject.projections.filter(row => row.role === 'home');
-        if (homes.length !== 1 || subject.projections.length !== 1)
-            throw new Error('A Grok subject projects exactly its slot runtime home');
-        return join(homes[0].source, 'training', name);
-    }
-    const rows = subject.projections.filter(row => row.role === name);
-    if (rows.length !== 1)
-        throw new Error(`A Codex subject must declare exactly one ${name} projection`);
-    return rows[0].source;
-}
-//# sourceMappingURL=layout.js.map

package/dist/runtime/daimon/training/native/preparation/layout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"layout.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/layout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAiB9D,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;IAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAiD,EAC1F,OAAyE;IACzE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAU,CAAC;IAC7G,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC3H,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACxE,+EAA+E;QAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7I,IAAI,QAAQ,EAAE,cAAc,EAAE;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;aAC/C,IAAI,QAAQ;YAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAClH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA4B,EAAE,OAAe;IACjF,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IACtC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA4B,EAAE,IAAuB;IACxF,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACrI,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,aAAa,CAAC,CAAC;IACtG,OAAO,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;AACzB,CAAC"}

package/dist/runtime/daimon/training/native/preparation/subject.d.ts

@@ -1,14 +0,0 @@
-import type { PrepareNativeSubjectOptions, ProvisionedSubject } from './types.js';
-/**
- * Prepare one native subject on a leased slot, before any trial bytes are written.
- *
- * The order is the contract. A broker (non-shared-uid) slot mints this trial's
- * recycle nonce and generation floor from the experiment's freshness store
- * BEFORE the provisioner runs, so the slot receipt the recycle publishes can only
- * be this trial's. The provisioner's result is then refused unless its broker
- * section parses as launch.v2 `broker`, echoes exactly that nonce and floor, and
- * the launch fields it implies pass the same leased-slot verifier the adapter
- * applies at start. A shared-uid slot admits Codex only and mints nothing; a
- * Codex result is returned unchanged.
- */
-export declare function prepareNativeSubject(options: PrepareNativeSubjectOptions): Promise<ProvisionedSubject>;

package/dist/runtime/daimon/training/native/preparation/subject.js

@@ -1,67 +0,0 @@
-import { assertLeasedLaunch } from '../container/index.js';
-import { grokBrokerLaunchSchema } from '../receipt/index.js';
-/**
- * Prepare one native subject on a leased slot, before any trial bytes are written.
- *
- * The order is the contract. A broker (non-shared-uid) slot mints this trial's
- * recycle nonce and generation floor from the experiment's freshness store
- * BEFORE the provisioner runs, so the slot receipt the recycle publishes can only
- * be this trial's. The provisioner's result is then refused unless its broker
- * section parses as launch.v2 `broker`, echoes exactly that nonce and floor, and
- * the launch fields it implies pass the same leased-slot verifier the adapter
- * applies at start. A shared-uid slot admits Codex only and mints nothing; a
- * Codex result is returned unchanged.
- */
-export async function prepareNativeSubject(options) {
-    const { slot, engine, agentId, provisioner, signal } = options;
-    signal.throwIfAborted();
-    const shared = slot.isolation === 'shared-uid';
-    if (shared && engine === 'grok')
-        throw new Error('A shared-uid slot cannot host a brokered Grok subject');
-    if (!shared && engine !== 'grok')
-        throw new Error('A broker slot lease hosts Grok subjects only');
-    let freshness;
-    if (!shared) {
-        if (!options.freshness)
-            throw new Error('A broker slot requires the experiment slot freshness store');
-        freshness = await options.freshness.request(slot.index);
-        signal.throwIfAborted();
-    }
-    const result = await provisioner.provision({ slot, engine, agentId, ...(freshness ? { freshness } : {}),
-        trialRoots: options.trialRoots, signal });
-    signal.throwIfAborted();
-    if (result.agent.engine !== engine || result.agent.id !== agentId)
-        throw new Error('Provisioned subject names another agent or engine');
-    const homes = result.projections.filter(row => row.role === 'home');
-    if (homes.length !== 1)
-        throw new Error('Provisioned subject must declare exactly one home projection');
-    if (result.roots.workspace !== result.workspace.source || result.roots.home !== homes[0].source) {
-        throw new Error('Provisioned subject roots differ from its workspace and home projection');
-    }
-    if (!Number.isSafeInteger(result.ports?.control))
-        throw new Error('Provisioned subject must declare an integer control port');
-    const host = { bindHost: '127.0.0.1', port: result.ports.control };
-    if (!freshness) {
-        if (result.broker !== undefined || result.generation !== undefined)
-            throw new Error('A Codex subject carries no broker slot evidence');
-        assertLeasedLaunch({ ...result, controlRoot: result.roots.control, host }, slot);
-        return result;
-    }
-    const parsed = grokBrokerLaunchSchema.safeParse(result.broker);
-    if (!parsed.success)
-        throw new Error('Provisioned Grok broker section does not satisfy launch.v2');
-    const broker = parsed.data;
-    if (broker.expectedNonce !== freshness.expectedNonce || broker.minGeneration !== freshness.minGeneration) {
-        throw new Error('Provisioned Grok broker does not echo this trial\'s slot freshness');
-    }
-    if (result.generation !== undefined && (!Number.isSafeInteger(result.generation) || result.generation < freshness.minGeneration)) {
-        throw new Error('Provisioned slot generation is below the evaluator freshness floor');
-    }
-    if (result.credentials.length || result.projections.length !== 1) {
-        throw new Error('A brokered Grok subject carries no credentials and projects only its slot runtime home');
-    }
-    // The verifier reads only identity, paths and the control port; the rest of launch.v2 does not exist yet.
-    assertLeasedLaunch({ ...result, broker, controlRoot: result.roots.control, host }, slot);
-    return { ...result, broker };
-}
-//# sourceMappingURL=subject.js.map

package/dist/runtime/daimon/training/native/preparation/subject.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"subject.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/subject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAqB,MAAM,qBAAqB,CAAC;AAIhF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAoC;IAC7E,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC/D,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC;IAC/C,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1G,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClG,IAAI,SAAwC,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACtG,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,cAAc,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACxI,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9H,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,WAAoB,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC5E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACvI,kBAAkB,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAA6B,EAAE,IAAI,CAAC,CAAC;QAC5G,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;QACjI,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC5G,CAAC;IACD,0GAA0G;IAC1G,kBAAkB,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAA6B,EAAE,IAAI,CAAC,CAAC;IACpH,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC"}

package/dist/runtime/daimon/training/native/preparation/types.d.ts

@@ -1,69 +0,0 @@
-import type { TrialSlot } from '../../../../../training/index.js';
-import type { GrokSlotFreshness, GrokSlotFreshnessStore } from '../child/index.js';
-import type { GrokBrokerLaunch, NativeLaunch } from '../receipt/index.js';
-export type NativeSubjectEngine = NativeLaunch['agent']['engine'];
-/** The evaluator's own per-trial directories (structurally the experiment runner's `TrialPaths`). */
-export interface NativeTrialRoots {
-    root: string;
-    workspace: string;
-    control: string;
-    runtimeHome: string;
-}
-export interface SubjectProvisionInput {
-    slot: TrialSlot;
-    engine: NativeSubjectEngine;
-    agentId: string;
-    /**
-     * This trial's recycle nonce and generation floor, minted by Training before the
-     * provisioner runs. Present for every broker (non-shared-uid) slot: the provisioner
-     * sends the nonce with its recycle request and echoes both into `broker`.
-     */
-    freshness?: GrokSlotFreshness;
-    trialRoots: NativeTrialRoots;
-    signal: AbortSignal;
-}
-/**
- * Everything the provisioner resolved for one leased slot, before any trial bytes
- * are written. The fields are launch receipt fields; nothing here is recomputed
- * by Training, which only validates them against the lease and its freshness.
- */
-export interface ProvisionedSubject {
-    agent: NativeLaunch['agent'];
-    workspace: NativeLaunch['workspace'];
-    projections: NativeLaunch['projections'];
-    credentials: NativeLaunch['credentials'];
-    /** Required for Grok, forbidden for Codex. Carried verbatim into launch.v2. */
-    broker?: GrokBrokerLaunch;
-    /**
-     * Resolved subject roots: `workspace` and `home` are the workspace and home
-     * projection sources, `control` the launch control root. Grok also names
-     * `context`, the denied evaluator root that holds per-trial control inputs.
-     */
-    roots: Readonly<Record<string, string>> & {
-        readonly workspace: string;
-        readonly home: string;
-        readonly control: string;
-    };
-    /** `control` is the worker control port; other named ports stay provisioner-owned. */
-    ports: Readonly<Record<string, number>> & {
-        readonly control: number;
-    };
-    /** The slot generation the provisioner's recycle published. */
-    generation?: number;
-    /** Subject environment entries the caller writes into the launch env file. */
-    env: Readonly<Record<string, string>>;
-}
-/** Implemented by the slot owner (for example Spawnfile's training lease); satisfied structurally. */
-export interface SubjectProvisioner {
-    provision(input: SubjectProvisionInput): Promise<ProvisionedSubject>;
-}
-export interface PrepareNativeSubjectOptions {
-    slot: TrialSlot;
-    engine: NativeSubjectEngine;
-    agentId: string;
-    provisioner: SubjectProvisioner;
-    /** Required for broker slots: the experiment's persisted freshness store. */
-    freshness?: GrokSlotFreshnessStore;
-    trialRoots: NativeTrialRoots;
-    signal: AbortSignal;
-}

package/dist/runtime/daimon/training/native/preparation/types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=types.js.map

package/dist/runtime/daimon/training/native/preparation/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/preparation/types.ts"],"names":[],"mappings":""}

package/dist/runtime/daimon/training/native/receipt/artifacts.d.ts

@@ -1,25 +0,0 @@
-import { type NativeLaunch } from './schema.js';
-/** Fixed name of the Grok control-root subtree Training owns; everything else under a slot control root belongs to Daimon or the container. */
-export declare const grokTrialArtifactsDirectory = "training-trials";
-/**
- * Where one trial's private control artifacts live.
- *
- * Codex: the control root itself. Preparation creates a fresh empty control
- * directory per trial inside that trial's runtime home, so nothing is ever
- * shared and `wx` writes cannot collide.
- *
- * Grok: the broker-capable training container fixes the control root at a slot
- * path (`/run/training/slot/state`) whose mask is what the projection digest
- * binds, and Daimon's own wake-acceptance store already lives inside it. The
- * container cannot move it without changing `projection_sha256`, and the slot
- * supervisor's recycle only wipes Daimon's store, so the control root is
- * neither empty nor per-trial. Training therefore owns exactly one subtree of
- * it and separates trials inside that subtree itself: the directory is created
- * once, non-recursively, so a repeated trial identity fails instead of
- * overwriting or colliding with the previous trial's `wx` artifacts. The leaf
- * name is a digest of the trial identity, so a caller-supplied identity can
- * never escape the control root or collide with `training-trials` itself.
- */
-export declare function nativeTrialArtifactsRoot(launch: NativeLaunch, trialId: string): string;
-/** One trial's directory name: a digest, so a caller-supplied identity can never escape or collide. */
-export declare const nativeTrialLeaf: (trialId: string) => string;

package/dist/runtime/daimon/training/native/receipt/artifacts.js

@@ -1,32 +0,0 @@
-import { join } from 'node:path';
-import { isGrokLaunch } from './schema.js';
-import { sha256 } from './paths.js';
-/** Fixed name of the Grok control-root subtree Training owns; everything else under a slot control root belongs to Daimon or the container. */
-export const grokTrialArtifactsDirectory = 'training-trials';
-/**
- * Where one trial's private control artifacts live.
- *
- * Codex: the control root itself. Preparation creates a fresh empty control
- * directory per trial inside that trial's runtime home, so nothing is ever
- * shared and `wx` writes cannot collide.
- *
- * Grok: the broker-capable training container fixes the control root at a slot
- * path (`/run/training/slot/state`) whose mask is what the projection digest
- * binds, and Daimon's own wake-acceptance store already lives inside it. The
- * container cannot move it without changing `projection_sha256`, and the slot
- * supervisor's recycle only wipes Daimon's store, so the control root is
- * neither empty nor per-trial. Training therefore owns exactly one subtree of
- * it and separates trials inside that subtree itself: the directory is created
- * once, non-recursively, so a repeated trial identity fails instead of
- * overwriting or colliding with the previous trial's `wx` artifacts. The leaf
- * name is a digest of the trial identity, so a caller-supplied identity can
- * never escape the control root or collide with `training-trials` itself.
- */
-export function nativeTrialArtifactsRoot(launch, trialId) {
-    if (!isGrokLaunch(launch))
-        return launch.controlRoot;
-    return join(launch.controlRoot, grokTrialArtifactsDirectory, nativeTrialLeaf(trialId));
-}
-/** One trial's directory name: a digest, so a caller-supplied identity can never escape or collide. */
-export const nativeTrialLeaf = (trialId) => `trial-${sha256(trialId).slice(0, 32)}`;
-//# sourceMappingURL=artifacts.js.map

package/dist/runtime/daimon/training/native/receipt/artifacts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/receipt/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAqB,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC,+IAA+I;AAC/I,MAAM,CAAC,MAAM,2BAA2B,GAAG,iBAAiB,CAAC;AAE7D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAoB,EAAE,OAAe;IAC5E,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC;IACrD,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,2BAA2B,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,SAAS,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC"}