spawnfile 0.1.32 → 0.1.34

package/dist/runtime/daimon/training/native/worker/evidence/io.d.ts

@@ -1,20 +0,0 @@
-/** Retry observations only: never replay a native acceptance or other mutation. */
-export declare function settleNativeRead<T>(kind: string, read: () => Promise<T>, timeoutMs?: number): Promise<T>;
-export declare function readJson(file: string, kind: string, maximum: number): Promise<unknown>;
-export declare function object(value: unknown): Record<string, unknown>;
-export declare function timestamp(value: unknown): value is string;
-export declare function jsonLines(file: string, kind: string, maximum?: number, maximumLine?: number, settleEmpty?: boolean): Promise<unknown[]>;
-export declare function files(directory: string): Promise<string[]>;
-/**
- * Where a single wake's terminal frame is filed, beside the trial's latest one.
- *
- * `evidence.json` is renamed over on every delivery, so a trial that ran several
- * wakes kept only its last frame and the account of every earlier wake — the
- * assignment that really bound, over a closed trace — was gone by the time
- * anything read it. Each delivery now also files its own frame under its
- * delivery ordinal, which is never reused within a trial, so the frames
- * accumulate instead of replacing one another. Nothing is merged: each file
- * holds exactly one wake's frame and that frame names its own wake.
- */
-export declare function wakeEvidenceFile(file: string, ordinal: number): string;
-export declare function writeEvidence(file: string, value: unknown): Promise<void>;

package/dist/runtime/daimon/training/native/worker/evidence/io.js

@@ -1,130 +0,0 @@
-import { lstat, readdir, readFile, rename, open } from 'node:fs/promises';
-import { dirname, extname } from 'node:path';
-import { randomUUID } from 'node:crypto';
-import { readPrivateFile } from '../../receipt/index.js';
-const MAX_STREAM = 64 * 1024 * 1024;
-class IncompleteNativeStreamError extends Error {
-}
-/** Retry observations only: never replay a native acceptance or other mutation. */
-export async function settleNativeRead(kind, read, timeoutMs = 1000) {
-    const deadline = performance.now() + timeoutMs;
-    for (;;) {
-        try {
-            return await read();
-        }
-        catch (error) {
-            if (!(error instanceof SyntaxError) && !(error instanceof IncompleteNativeStreamError))
-                throw error;
-            const remaining = deadline - performance.now();
-            // SyntaxError messages may contain evidence bytes. Publish only our label.
-            if (remaining <= 0) {
-                const Failure = error instanceof SyntaxError ? SyntaxError : Error;
-                throw new Failure(`Native ${kind} JSON did not settle before deadline (empty, torn, truncated or corrupt)`, { cause: new Error('Native JSON decoding failed') });
-            }
-            await new Promise(resolve => setTimeout(resolve, Math.min(25, remaining)));
-        }
-    }
-}
-export async function readJson(file, kind, maximum) {
-    return settleNativeRead(kind, async () => JSON.parse(await readPrivateFile(file, maximum)));
-}
-export function object(value) {
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        throw new Error('Malformed native evidence record');
-    return value;
-}
-export function timestamp(value) {
-    return typeof value === 'string' && !Number.isNaN(Date.parse(value));
-}
-export async function jsonLines(file, kind, maximum = MAX_STREAM, maximumLine = maximum, settleEmpty = false) {
-    let incomplete = false;
-    return settleNativeRead(kind, async () => {
-        let source;
-        try {
-            source = await readPrivateFile(file, maximum);
-        }
-        catch (error) {
-            if (error.code !== 'ENOENT')
-                throw error;
-            if (!incomplete)
-                return [];
-            throw new IncompleteNativeStreamError('incomplete stream disappeared', { cause: new Error('Native stream unavailable') });
-        }
-        // An empty append-only ledger is valid before its first row. After observing
-        // a torn row it cannot erase that row by temporarily becoming empty.
-        if ((incomplete || settleEmpty) && !source || source && !source.endsWith('\n')) {
-            incomplete = true;
-            throw new IncompleteNativeStreamError('torn final record');
-        }
-        try {
-            return source.split('\n').filter(Boolean).map(line => {
-                if (Buffer.byteLength(line, 'utf8') + 1 > maximumLine)
-                    throw new Error(`Native ${kind} record exceeds its byte bound`);
-                return JSON.parse(line);
-            });
-        }
-        catch (error) {
-            incomplete = true;
-            throw error;
-        }
-    });
-}
-export async function files(directory) {
-    try {
-        const info = await lstat(directory);
-        if (!info.isDirectory() || info.isSymbolicLink())
-            throw new Error('Native evidence directory must be real');
-        return await readdir(directory);
-    }
-    catch (error) {
-        if (error.code === 'ENOENT')
-            return [];
-        throw error;
-    }
-}
-/**
- * Where a single wake's terminal frame is filed, beside the trial's latest one.
- *
- * `evidence.json` is renamed over on every delivery, so a trial that ran several
- * wakes kept only its last frame and the account of every earlier wake — the
- * assignment that really bound, over a closed trace — was gone by the time
- * anything read it. Each delivery now also files its own frame under its
- * delivery ordinal, which is never reused within a trial, so the frames
- * accumulate instead of replacing one another. Nothing is merged: each file
- * holds exactly one wake's frame and that frame names its own wake.
- */
-export function wakeEvidenceFile(file, ordinal) {
-    if (!Number.isSafeInteger(ordinal) || ordinal < 1)
-        throw new Error('Invalid native evidence delivery ordinal');
-    const extension = extname(file);
-    return `${file.slice(0, file.length - extension.length)}.${ordinal}${extension}`;
-}
-export async function writeEvidence(file, value) {
-    const temporary = `${file}.${randomUUID()}.tmp`;
-    const handle = await open(temporary, 'wx', 0o600);
-    try {
-        await handle.writeFile(`${JSON.stringify(value, null, 2)}\n`);
-        await handle.sync();
-    }
-    finally {
-        await handle.close();
-    }
-    await rename(temporary, file);
-    const directory = await open(dirname(file), 'r');
-    try {
-        await directory.sync();
-    }
-    finally {
-        await directory.close();
-    }
-    let written;
-    try {
-        written = JSON.parse(await readFile(file, 'utf8'));
-    }
-    catch {
-        throw new Error('Native terminal evidence JSON readback failed');
-    }
-    if (JSON.stringify(written) !== JSON.stringify(value))
-        throw new Error('Native evidence readback differs');
-}
-//# sourceMappingURL=io.js.map

package/dist/runtime/daimon/training/native/worker/evidence/io.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"io.js","sourceRoot":"","sources":["../../../../../../../src/runtime/daimon/training/native/worker/evidence/io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACpC,MAAM,2BAA4B,SAAQ,KAAK;CAAG;AAClD,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAI,IAAY,EAAE,IAAsB,EAAE,SAAS,GAAG,IAAI;IAC9F,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC/C,SAAS,CAAC;QACR,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,EAAE,CAAC;QAAC,CAAC;QAC5B,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,2BAA2B,CAAC;gBAAE,MAAM,KAAK,CAAC;YACpG,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC/C,2EAA2E;YAC3E,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;gBACnE,MAAM,IAAI,OAAO,CAAC,UAAU,IAAI,0EAA0E,EACxG,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IACxE,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAY,CAAC,CAAC;AACzG,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACrH,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,OAAO,GAAG,UAAU,EAAE,WAAW,GAAG,OAAO,EAAE,WAAW,GAAG,KAAK;IAC1H,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACvC,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QACtD,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,IAAI,CAAC,UAAU;gBAAE,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,2BAA2B,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,6EAA6E;QAC7E,qEAAqE;QACrE,IAAI,CAAC,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/E,UAAU,GAAG,IAAI,CAAC;YAClB,MAAM,IAAI,2BAA2B,CAAC,mBAAmB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBACnD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,gCAAgC,CAAC,CAAC;gBACvH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;YACrC,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,UAAU,GAAG,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,SAAiB;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5G,OAAO,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACrG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC/G,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,SAAS,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,KAAc;IAC9D,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YACnF,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IACjC,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC;QAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IACpE,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IAAC,CAAC;IACtE,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AAC7G,CAAC"}

package/dist/runtime/daimon/training/native/worker/evidence/seal.d.ts

@@ -1,3 +0,0 @@
-import type { NativeTurnSeal } from '../types.js';
-/** Unknown members at every level are refused, including protocol-only fields the seal writer omits. */
-export declare function parseNativeTurnSeal(value: unknown, agentId: string, expectedModel: string): NativeTurnSeal;

package/dist/runtime/daimon/training/native/worker/evidence/seal.js

@@ -1,67 +0,0 @@
-import { z } from 'zod';
-import { grokModels } from '../../receipt/index.js';
-import { timestamp } from './io.js';
-// Mirrors Daimon's validated terminal projection, including pre-instrumentation rows.
-// The installed-writer contract test detects drift; product code never loads Daimon internals.
-const count = z.number().int().nonnegative();
-const identifier = z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u);
-const callName = z.string().regex(/^(?:<invalid>|<truncated>|[A-Za-z0-9_.-]{1,64})$/u);
-const reason = z.string().min(1).refine(value => Buffer.byteLength(value, 'utf8') <= 768 &&
-    [...value].every(character => character.charCodeAt(0) >= 0x20 && character.charCodeAt(0) !== 0x7f));
-const diagnostic = z.strictObject({
-    status: z.enum(['prelaunch_failed', 'worker_failed', 'output_failed', 'cancelled']),
-    stage: z.enum(['peer', 'request', 'registration', 'executable', 'exec', 'wait', 'output', 'attestation']),
-    failure_class: z.enum(['peer', 'protocol', 'registration', 'executable', 'exec', 'wait', 'output_limit', 'cancelled', 'profile_missing', 'profile_invalid']),
-    // The terminal protocol accepts signed safe integers here, unlike counters.
-    exit_code: z.number().int(), term_signal: z.number().int(), reason: reason.optional(),
-}).refine(row => {
-    if (row.status === 'prelaunch_failed') {
-        const stages = { peer: 'peer', request: 'protocol', registration: 'registration', executable: 'executable', exec: 'exec' };
-        return row.reason === undefined && stages[row.stage] === row.failure_class;
-    }
-    if (row.status === 'worker_failed' && row.stage === 'attestation') {
-        return row.reason === undefined && ['profile_missing', 'profile_invalid'].includes(row.failure_class);
-    }
-    if (row.status === 'worker_failed')
-        return row.stage === 'wait' && ['exec', 'wait'].includes(row.failure_class);
-    if (row.status === 'output_failed')
-        return row.stage === 'output' && row.failure_class === 'output_limit';
-    return row.stage === 'wait' && row.failure_class === 'cancelled';
-});
-const tunnels = z.strictObject({
-    opened: count, closed: count, delivered: count,
-    open: z.array(z.strictObject({ open_ms: count, delivered: z.boolean() })).max(8),
-}).refine(row => row.closed <= row.opened && row.delivered <= row.opened && row.open.length <= row.opened - row.closed);
-const mcp = z.strictObject({
-    started: count, answered: count, undecoded: count,
-    outstanding: z.array(z.strictObject({ name: callName, outstanding_ms: count })).max(16),
-    refusals: z.strictObject({ route: count, expired: count, exhausted: count, unrouted: count, oversized: count }).optional(),
-    tunnels: tunnels.optional(),
-}).refine(row => row.answered <= row.started && row.outstanding.length <= row.started - row.answered);
-const providerClock = z.strictObject({
-    requests: count, linesRewritten: count, requestsWithoutDateLine: count, linesIgnored: count.optional(),
-    injectedDate: z.string().regex(/^[0-9]{4}-[0-9]{2}-[0-9]{2}$/u).nullable(),
-    taskDate: z.string().regex(/^[0-9]{4}-[0-9]{2}-[0-9]{2}$/u).nullable(),
-}).refine(row => row.requestsWithoutDateLine <= row.requests &&
-    (row.linesRewritten === 0 || row.requestsWithoutDateLine !== row.requests) &&
-    [row.injectedDate, row.taskDate].every(date => row.linesRewritten === 0 ? date === null : date !== null));
-const seal = z.strictObject({
-    v: z.literal('noopolis.daimon.turn-seal.v1'), agent: identifier, wake: identifier, engine: z.literal('grok'),
-    at: z.string().refine(timestamp), turn: identifier, outcome: z.enum(['completed', 'failed']),
-    requests: count.max(1024), model: z.enum(grokModels), limit_reason: z.enum(['tokens', 'requests', 'timeout', 'none']),
-    shell_clock: z.enum(['task', 'real', 'gap']).optional(), provider_clock: providerClock.optional(),
-    code: z.enum(['auth_stale', 'cancelled', 'engine_failed', 'invalid_request', 'limit_exceeded', 'turn_conflict', 'unavailable']).optional(),
-    diagnostic: diagnostic.optional(), mcp: mcp.optional(),
-}).refine(row => row.outcome === 'completed'
-    ? row.code === undefined && row.diagnostic === undefined && row.mcp === undefined && row.limit_reason === 'none'
-    : row.code !== undefined && (row.code === 'limit_exceeded') === (row.limit_reason !== 'none'));
-/** Unknown members at every level are refused, including protocol-only fields the seal writer omits. */
-export function parseNativeTurnSeal(value, agentId, expectedModel) {
-    const parsed = seal.safeParse(value);
-    if (!parsed.success || parsed.data.agent !== agentId || parsed.data.model !== expectedModel) {
-        throw new Error('Native Grok seal schema or execution identity mismatch');
-    }
-    // Keep writer ordering for the ledger's byte-identical replay/conflict check.
-    return value;
-}
-//# sourceMappingURL=seal.js.map

package/dist/runtime/daimon/training/native/worker/evidence/seal.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"seal.js","sourceRoot":"","sources":["../../../../../../../src/runtime/daimon/training/native/worker/evidence/seal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,sFAAsF;AACtF,+FAA+F;AAC/F,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAC7C,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAC5E,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;AACvF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;IACtF,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;AAEtG,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;IACnF,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACzG,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAC5J,4EAA4E;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;CACtF,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;IACd,IAAI,GAAG,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QACtC,MAAM,MAAM,GAA2B,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACnJ,OAAO,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,aAAa,CAAC;IAC7E,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAClE,OAAO,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe;QAAE,OAAO,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAChH,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe;QAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,KAAK,cAAc,CAAC;IAC1G,OAAO,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,aAAa,KAAK,WAAW,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC;IAC7B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK;IAC9C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACjF,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;AAExH,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC;IACzB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK;IACjD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACvF,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1H,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;AAEtG,MAAM,aAAa,GAAG,CAAC,CAAC,YAAY,CAAC;IACnC,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE;IACtG,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IAC1E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,uBAAuB,IAAI,GAAG,CAAC,QAAQ;IAC1D,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,GAAG,CAAC,uBAAuB,KAAK,GAAG,CAAC,QAAQ,CAAC;IAC1E,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AAE5G,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1B,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5G,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5F,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACrH,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1I,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,WAAW;IAC1C,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM;IAChH,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC;AAEjG,wGAAwG;AACxG,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,OAAe,EAAE,aAAqB;IACxF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,8EAA8E;IAC9E,OAAO,KAAuB,CAAC;AACjC,CAAC"}

package/dist/runtime/daimon/training/native/worker/index.d.ts

@@ -1,11 +0,0 @@
-export { runDaimonNativeWorker } from './worker.js';
-/** Startup validation without starting a worker; importing this subpath never runs one. */
-export { verifyNativeWorkerStartup, parseWorkerArguments, assertNativeProfile, verifyWorkerPaths } from './profile.js';
-export { createWorkerController, executionClosed, validateNativeFrame, claimedExecution, disposedWakeExecution, admittedExecutions, AMBIGUOUS_NATIVE_EXECUTION, AMBIGUOUS_WAKE_EXECUTION } from './control.js';
-export { readToolReceipts, readClosedTraces, collectNativeEvidence, assertFreshNativeEvidence, readSealedGrokUsage, readSealedGrokRequests, readSealedGrokTurnSeals, writeEvidence, wakeEvidenceFile, GROK_TURN_NOTIONAL_USD_MAX, plausibleNotionalUsd, declaredLimitStop } from './evidence/index.js';
-export type { NativeStopEvidence } from './control.js';
-export type { NativeConfig, NativeHost, NativeReceipt, NativeActivity, NativeAvailability, NativeTrace, NativeUsage, NativeCodexUsage, NativeGrokUsage, NativeRequestUsage, NativeTurnSeal, NativeEvidence, NativeEvidenceSource, TerminalEvidence, WorkerOptions } from './types.js';
-export { verifyExternalSource, MAX_EXTERNAL_DELIVERIES, MAX_TRIAL_WAKES, engineWakeTimeoutMs } from './deliveries.js';
-export type { ExternalInputSource, DeliveryControls } from './deliveries.js';
-export { parseTransportSource, matchTransportSource } from './wake-delivery/index.js';
-export type { TransportDeliverySource, TransportRunState, TransportEvidence } from './wake-delivery/index.js';

package/dist/runtime/daimon/training/native/worker/index.js

@@ -1,8 +0,0 @@
-export { runDaimonNativeWorker } from './worker.js';
-/** Startup validation without starting a worker; importing this subpath never runs one. */
-export { verifyNativeWorkerStartup, parseWorkerArguments, assertNativeProfile, verifyWorkerPaths } from './profile.js';
-export { createWorkerController, executionClosed, validateNativeFrame, claimedExecution, disposedWakeExecution, admittedExecutions, AMBIGUOUS_NATIVE_EXECUTION, AMBIGUOUS_WAKE_EXECUTION } from './control.js';
-export { readToolReceipts, readClosedTraces, collectNativeEvidence, assertFreshNativeEvidence, readSealedGrokUsage, readSealedGrokRequests, readSealedGrokTurnSeals, writeEvidence, wakeEvidenceFile, GROK_TURN_NOTIONAL_USD_MAX, plausibleNotionalUsd, declaredLimitStop } from './evidence/index.js';
-export { verifyExternalSource, MAX_EXTERNAL_DELIVERIES, MAX_TRIAL_WAKES, engineWakeTimeoutMs } from './deliveries.js';
-export { parseTransportSource, matchTransportSource } from './wake-delivery/index.js';
-//# sourceMappingURL=index.js.map

package/dist/runtime/daimon/training/native/worker/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/worker/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,2FAA2F;AAC3F,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACvH,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,kBAAkB,EAChI,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,aAAa,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAKvS,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtH,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/runtime/daimon/training/native/worker/profile.d.ts

@@ -1,23 +0,0 @@
-import { type NativeLaunch } from '../receipt/index.js';
-import type { NativeConfig, WorkerOptions } from './types.js';
-export declare function parseWorkerArguments(args: readonly string[]): WorkerOptions;
-export declare function assertNativeProfile(config: NativeConfig, launch: NativeLaunch): void;
-export declare function verifyWorkerPaths(config: NativeConfig, options: WorkerOptions, launch: NativeLaunch): Promise<void>;
-/**
- * The worker's own startup validation, run without starting anything.
- *
- * Preparation can check exactly what the worker checks — argument shape, the
- * compiled-config digest, the launch receipt, the profile agreement and the
- * control path rules — instead of reaching past the package export for the
- * pieces. Daimon's own `parseOrganizationRuntimeConfig` is the single step left
- * out: it needs the installed runtime peer, so this validates Training's side of
- * startup and never claims to have validated Daimon's.
- *
- * It composes the same exported functions the worker calls, in the worker's
- * order, so a rule cannot hold here and fail there.
- */
-export declare function verifyNativeWorkerStartup(args: readonly string[]): Promise<{
-    options: WorkerOptions;
-    launch: NativeLaunch;
-    config: NativeConfig;
-}>;

package/dist/runtime/daimon/training/native/worker/profile.js

@@ -1,149 +0,0 @@
-import { lstat, realpath } from 'node:fs/promises';
-import { isAbsolute, join } from 'node:path';
-import { isGrokLaunch, parseNativeLaunch, readPrivateFile, sha256, within } from '../receipt/index.js';
-export function parseWorkerArguments(args) {
-    const keys = ['launch', 'config', 'config-sha256', 'control-root', 'token-file', 'evidence', 'trial-id', 'timeout-ms', 'schedule-override'];
-    const values = new Map();
-    for (let index = 0; index < args.length; index += 2) {
-        const key = args[index]?.slice(2);
-        const value = args[index + 1];
-        if (!args[index]?.startsWith('--') || !key || !keys.includes(key) || values.has(key) || !value) {
-            throw new Error('Worker arguments require one explicit value for each supported option');
-        }
-        values.set(key, value);
-    }
-    if (keys.some(key => !values.has(key)))
-        throw new Error(`Required worker options: ${keys.join(', ')}`);
-    const timeoutMs = Number(values.get('timeout-ms'));
-    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 100 || timeoutMs > 86_400_000)
-        throw new Error('Invalid worker timeout');
-    const configSha256 = values.get('config-sha256');
-    if (!/^[a-f0-9]{64}$/u.test(configSha256))
-        throw new Error('Expected config SHA-256 is required');
-    if (values.get('schedule-override') !== 'disabled')
-        throw new Error('Explicit isolated schedule override is required');
-    const result = { launch: values.get('launch'), config: values.get('config'), configSha256,
-        controlRoot: values.get('control-root'), tokenFile: values.get('token-file'), evidence: values.get('evidence'),
-        trialId: values.get('trial-id'), timeoutMs, scheduleOverride: 'disabled' };
-    for (const value of [result.launch, result.config, result.controlRoot, result.tokenFile, result.evidence]) {
-        if (!isAbsolute(value))
-            throw new Error('Worker paths must be absolute');
-    }
-    if (!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u.test(result.trialId))
-        throw new Error('Invalid trial identity');
-    if (!within(result.controlRoot, result.evidence) || result.evidence === result.controlRoot)
-        throw new Error('Terminal evidence must be inside the protected control root');
-    return result;
-}
-/**
- * Whether the config's declared Mneme root is one the launch actually admits.
- *
- * Codex answers it with its own fresh `memory` projection, which
- * `loadNativeLaunch` validated as separate, non-overlapping trial data.
- *
- * A Grok launch admits exactly one projection — the slot runtime home — so the
- * only placement it can offer is inside that home, and containment rather than
- * exact match is what admits it. That is safe because the question here is
- * different from the caller-protected-path exemption, which stayed exact-match:
- * there, a descendant rule would *subtract* protection from an evaluator-owned
- * file the subject must not read. Here nothing is subtracted. The home
- * projection is already wholly writable, wholly inside the subject's reach and
- * digest-bound as the projection's `runtimeHomePath`, so a root inside it adds
- * no path, no writability and no reachability the launch did not already grant,
- * and it inherits the home's freshness (the slot supervisor's recycle wipes the
- * runtime home whole). A root outside the home is a root no projection admits
- * and no digest covers, and stays refused; so does the home itself, which would
- * make Mneme's store the runtime home rather than a place inside it.
- */
-const nativeMemoryAdmitted = (launch, home, memory) => (isGrokLaunch(launch)
-    ? memory !== home && within(home, memory)
-    : launch.projections.some(row => row.role === 'memory' && row.target === memory));
-export function assertNativeProfile(config, launch) {
-    const agent = config.agents[0];
-    if (config.version !== 'noopolis.daimon.organization-runtime.v2' || config.agents.length !== 1 || agent?.id !== launch.agent.id) {
-        throw new Error('Native config must contain exactly the selected agent');
-    }
-    if (isGrokLaunch(launch)) {
-        if (agent.engine.kind !== 'grok' || agent.engine.model !== launch.agent.model || agent.engine.reasoningEffort !== launch.agent.reasoningEffort) {
-            throw new Error('Only the declared Grok model and reasoning effort are supported');
-        }
-        if (agent.engine.codexSandbox !== undefined)
-            throw new Error('Grok broker trials cannot declare a Codex sandbox');
-        if (launch.broker.limits.maxTokens > launch.limits.wakeTokenCeiling)
-            throw new Error('Grok broker token limit exceeds the launch wake ceiling');
-    }
-    else {
-        if (agent.engine.kind !== 'codex' || agent.engine.model !== launch.agent.model)
-            throw new Error('Only the declared Codex model is supported');
-        const sandbox = agent.engine.codexSandbox;
-        if (!sandbox || sandbox.mode !== 'workspace-write' || sandbox.networkAccess !== false || sandbox.webSearch !== 'disabled') {
-            throw new Error('Native trials require the Codex workspace-no-network sandbox');
-        }
-    }
-    if (!agent.attention)
-        throw new Error('Native trials require durable attention admission');
-    if (agent.schedule?.kind !== 'disabled')
-        throw new Error('The receipted isolated schedule override must be applied');
-    if (config.host.bindHost !== launch.host.bindHost || config.host.port !== launch.host.port)
-        throw new Error('Native host differs from the declared loopback endpoint');
-    const home = launch.projections.find(row => row.role === 'home');
-    if (!home || agent.workspacePath !== launch.workspace.target || agent.runtimeHomePath !== home.target) {
-        throw new Error('Native workspace or home projection identity mismatch');
-    }
-    if (agent.memory && !nativeMemoryAdmitted(launch, home.target, agent.memory.runtimeHomePath)) {
-        throw new Error(isGrokLaunch(launch)
-            ? 'Grok Mneme state must be declared inside the single projected runtime home'
-            : 'Native Mneme state requires its declared fresh memory projection');
-    }
-    if (launch.limits.maxTokens > agent.attention.maxTokens)
-        throw new Error('Trial token budget exceeds native attention policy');
-}
-export async function verifyWorkerPaths(config, options, launch) {
-    const agent = config.agents[0];
-    for (const file of [options.launch, options.config, options.tokenFile]) {
-        if ((await realpath(file)) !== file)
-            throw new Error('Worker control files must not traverse symlinks');
-        if (within(agent.workspacePath, file))
-            throw new Error('Worker controls must be outside the writable workspace');
-    }
-    if (within(agent.workspacePath, options.controlRoot) || within(options.controlRoot, agent.workspacePath))
-        throw new Error('The protected control root must be separate from the workspace');
-    const entry = await lstat(options.controlRoot);
-    if (!entry.isDirectory() || entry.isSymbolicLink() || (entry.mode & 0o077) !== 0 || await realpath(options.controlRoot) !== options.controlRoot) {
-        throw new Error('The control root must be a private real directory');
-    }
-    if (((await lstat(options.tokenFile)).mode & 0o077) !== 0)
-        throw new Error('The control token file must be private');
-    const instructions = await readPrivateFile(join(agent.workspacePath, launch.instructions.relativePath));
-    const rendering = launch.instructions.rendering;
-    const nativeInstructions = rendering.prefix + instructions.trim() + rendering.suffix;
-    if (!instructions.trim() || sha256(instructions) !== launch.instructions.sha256 || agent.instructions !== nativeInstructions ||
-        sha256(agent.instructions) !== rendering.nativeSha256) {
-        throw new Error('Declared candidate bytes are absent from the compiled native instructions');
-    }
-}
-/**
- * The worker's own startup validation, run without starting anything.
- *
- * Preparation can check exactly what the worker checks — argument shape, the
- * compiled-config digest, the launch receipt, the profile agreement and the
- * control path rules — instead of reaching past the package export for the
- * pieces. Daimon's own `parseOrganizationRuntimeConfig` is the single step left
- * out: it needs the installed runtime peer, so this validates Training's side of
- * startup and never claims to have validated Daimon's.
- *
- * It composes the same exported functions the worker calls, in the worker's
- * order, so a rule cannot hold here and fail there.
- */
-export async function verifyNativeWorkerStartup(args) {
-    const options = parseWorkerArguments(args);
-    const launch = parseNativeLaunch(JSON.parse(await readPrivateFile(options.launch, 65_536)));
-    const bytes = await readPrivateFile(options.config);
-    if (sha256(bytes) !== options.configSha256 || launch.configSha256 !== options.configSha256)
-        throw new Error('Compiled native config digest mismatch');
-    const config = JSON.parse(bytes);
-    assertNativeProfile(config, launch);
-    await verifyWorkerPaths(config, options, launch);
-    return { options, launch, config };
-}
-//# sourceMappingURL=profile.js.map

package/dist/runtime/daimon/training/native/worker/profile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/worker/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAqB,MAAM,qBAAqB,CAAC;AAG1H,MAAM,UAAU,oBAAoB,CAAC,IAAuB;IAC1D,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAC5I,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvG,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,GAAG,IAAI,SAAS,GAAG,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC7H,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAE,CAAC;IAClD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAClG,IAAI,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvH,MAAM,MAAM,GAAkB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAE,EAAE,YAAY;QACxG,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAE,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAE;QACjH,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1G,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5G,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC3K,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,oBAAoB,GAAG,CAAC,MAAoB,EAAE,IAAY,EAAE,MAAc,EAAW,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;IACjH,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;IACzC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;AAEpF,MAAM,UAAU,mBAAmB,CAAC,MAAoB,EAAE,MAAoB;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,OAAO,KAAK,yCAAyC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAChI,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YAC/I,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAClH,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAClJ,CAAC;SAAM,CAAC;QACN,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC9I,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAC1H,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC3F,IAAI,KAAK,CAAC,QAAQ,EAAE,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACrH,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACvK,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;YAClC,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,kEAAkE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACjI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAoB,EAAE,OAAsB,EAAE,MAAoB;IACxG,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACxG,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC5L,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAChJ,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACrH,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;IACxG,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;IAChD,MAAM,kBAAkB,GAAG,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;IACrF,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,kBAAkB;QACxH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAuB;IACrE,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAiB,CAAC;IACjD,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC"}

package/dist/runtime/daimon/training/native/worker/public.d.ts

@@ -1,53 +0,0 @@
-import type { NativeConfig, NativeHost } from './types.js';
-import type { NativeSandboxProjection } from '../receipt/index.js';
-import type { NativeWakeRequest } from './wake-delivery/index.js';
-/** Grok projection options passed to Daimon verbatim from the launch receipt's broker section. */
-export interface GrokBrokerProjectionOptions {
-    workerConfigVariant: 'unclocked' | 'clocked';
-    slot: number;
-    workerUid: number;
-    workerHomePath: string;
-    architecture: 'arm64' | 'x64';
-    usageLedgerPath: string;
-    limits: {
-        maxRequests: number;
-        maxTokens: number;
-        timeoutMs: number;
-    };
-    acceptanceStorePath: string;
-    denyPaths: readonly string[];
-    seccompProfileSha256: string;
-    /** The provisioner's sandbox profile digest; Daimon refuses a value that differs from its own render. */
-    profileSha256: string;
-}
-/** Structural public seam keeps the optional runtime out of Training core installs. */
-export interface NativeRuntimeModule {
-    parseWakeAcceptanceRequest?(value: unknown): NativeWakeRequest;
-    parseOrganizationRuntimeConfig(value: unknown): NativeConfig;
-    createOrganizationRuntimeControlHost(value: unknown, options: {
-        acceptanceStorePath: string;
-        controlToken: string;
-        subscriptionRealmPaths?: {
-            codex: {
-                durablePath: string;
-                bootstrapPath: string;
-            };
-        };
-    }): NativeHost;
-    resolveOrganizationCodexSandboxProjection(value: unknown, agentId: string, options: {
-        acceptanceStorePath: string;
-        subscriptionRealmPaths?: {
-            codex: {
-                durablePath: string;
-                bootstrapPath: string;
-            };
-        };
-    }): Promise<NativeSandboxProjection>;
-    resolveOrganizationGrokBrokerProjection?(value: unknown, agentId: string, options: GrokBrokerProjectionOptions): unknown;
-    grokBrokerProjectionSha256?(projection: unknown): string;
-    verifyGrokSlotPreflightReceipt?(value: unknown, projection: unknown, freshness: {
-        expectedNonce: string;
-        minGeneration: number;
-    }): unknown;
-}
-export declare function loadDaimonRuntime(engine?: 'codex' | 'grok', _delivery?: 'direct' | 'transport'): Promise<NativeRuntimeModule>;

package/dist/runtime/daimon/training/native/worker/public.js

@@ -1,22 +0,0 @@
-const grokExports = ['resolveOrganizationGrokBrokerProjection', 'grokBrokerProjectionSha256', 'verifyGrokSlotPreflightReceipt'];
-export async function loadDaimonRuntime(engine = 'codex', _delivery = 'direct') {
-    const packageName = '@noopolis/daimon/runtime';
-    let loaded;
-    try {
-        loaded = await import(packageName);
-    }
-    catch (error) {
-        throw new Error('Install optional @noopolis/daimon with its public /runtime export', { cause: error });
-    }
-    if (typeof loaded['parseOrganizationRuntimeConfig'] !== 'function' || typeof loaded['createOrganizationRuntimeControlHost'] !== 'function') {
-        throw new Error('Installed Daimon lacks the native organization control host');
-    }
-    if (engine === 'grok') {
-        if (grokExports.some(name => typeof loaded[name] !== 'function'))
-            throw new Error('Installed Daimon lacks the Grok broker projection and slot preflight capability');
-    }
-    else if (typeof loaded['resolveOrganizationCodexSandboxProjection'] !== 'function')
-        throw new Error('Installed Daimon lacks exact native sandbox projection capability');
-    return loaded;
-}
-//# sourceMappingURL=public.js.map

package/dist/runtime/daimon/training/native/worker/public.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"public.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/worker/public.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,GAAG,CAAC,yCAAyC,EAAE,4BAA4B,EAAE,gCAAgC,CAAU,CAAC;AAEzI,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAA2B,OAAO,EAAE,YAAoC,QAAQ;IACtH,MAAM,WAAW,GAAG,0BAA0B,CAAC;IAC/C,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAA4B,CAAC;IAAC,CAAC;IACtE,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,mEAAmE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IACzH,IAAI,OAAO,MAAM,CAAC,gCAAgC,CAAC,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,sCAAsC,CAAC,KAAK,UAAU,EAAE,CAAC;QAC3I,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACvK,CAAC;SAAM,IAAI,OAAO,MAAM,CAAC,2CAA2C,CAAC,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IAC3K,OAAO,MAAwC,CAAC;AAClD,CAAC"}

package/dist/runtime/daimon/training/native/worker/sandbox.d.ts

@@ -1,4 +0,0 @@
-import { type NativeLaunch } from '../receipt/index.js';
-import type { NativeRuntimeModule } from './public.js';
-import type { NativeConfig, WorkerOptions } from './types.js';
-export declare function persistNativeSandboxProjection(runtime: NativeRuntimeModule, config: NativeConfig, options: WorkerOptions, launch?: NativeLaunch): Promise<void>;

package/dist/runtime/daimon/training/native/worker/sandbox.js

@@ -1,54 +0,0 @@
-import { writeFile } from 'node:fs/promises';
-import { join } from 'node:path';
-import { bindGrokBrokerProjection, bindNativeSandboxProjection, grokBrokerProjectionSchema, grokProjectionSha256, isGrokLaunch, nativeCodexAccount, nativeTrialArtifactsRoot, parseGrokBrokerReceipt, parseNativeSandboxReceipt, readPrivateFile } from '../receipt/index.js';
-export async function persistNativeSandboxProjection(runtime, config, options, launch) {
-    if (launch && isGrokLaunch(launch))
-        return persistGrokBrokerProjection(runtime, config, options, launch);
-    const agent = config.agents[0];
-    const account = launch && nativeCodexAccount(launch);
-    const value = await runtime.resolveOrganizationCodexSandboxProjection(config, agent.id, { acceptanceStorePath: options.controlRoot,
-        ...(account ? { subscriptionRealmPaths: { codex: { durablePath: account.realm.target, bootstrapPath: account.bootstrap.target } } } : {}) });
-    const receipt = bindNativeSandboxProjection(value, options.trialId, options.configSha256);
-    parseNativeSandboxReceipt(receipt, { trialId: options.trialId, configSha256: options.configSha256,
-        agentId: agent.id, workspacePath: agent.workspacePath, runtimeHomePath: agent.runtimeHomePath });
-    const artifacts = launch ? nativeTrialArtifactsRoot(launch, options.trialId) : options.controlRoot;
-    await writeFile(join(artifacts, 'sandbox-projection.json'), `${JSON.stringify(receipt)}\n`, { flag: 'wx', mode: 0o600 });
-}
-/**
- * Grok never runs a `codex sandbox` probe. Daimon resolves the slot projection
- * from the launch's broker inputs; its digest must equal the launch receipt and
- * Daimon's own digest, and the root supervisor's slot preflight receipt must
- * verify against it (Daimon's verifier) and deny every evaluator root.
- */
-async function persistGrokBrokerProjection(runtime, config, options, launch) {
-    const { resolveOrganizationGrokBrokerProjection: resolve, grokBrokerProjectionSha256: digest, verifyGrokSlotPreflightReceipt: verify } = runtime;
-    if (!resolve || !digest || !verify)
-        throw new Error('Installed Daimon lacks the Grok broker projection and slot preflight capability');
-    const agent = config.agents[0];
-    const { broker } = launch;
-    const projection = grokBrokerProjectionSchema.parse(resolve(config, agent.id, { slot: broker.slot, workerUid: broker.workerUid,
-        workerConfigVariant: broker.workerConfigVariant,
-        workerHomePath: broker.workerHomePath, architecture: broker.architecture, usageLedgerPath: broker.usageLedgerPath, limits: broker.limits,
-        // The deny mask Daimon lifts, and the value `projection_sha256` binds: never the per-trial artifact directory inside it.
-        // `denyPaths` and `profileSha256` are the provisioner's verbatim values (see grokBrokerLaunchSchema): deriving the deny
-        // list from `evaluatorPaths` recomputes a different set and forks the digest.
-        acceptanceStorePath: options.controlRoot, denyPaths: [...broker.denyPaths],
-        seccompProfileSha256: broker.seccompProfileSha256, profileSha256: broker.profileSha256 }));
-    const sha = grokProjectionSha256(projection);
-    if (digest(projection) !== sha)
-        throw new Error('Training and Daimon disagree on the Grok broker projection digest');
-    if (projection.version !== broker.projectionVersion || sha !== broker.projectionSha256)
-        throw new Error('Grok broker projection digest differs from the launch receipt');
-    // The registration is a ceiling. worker.ts lowers the per-wake override to the trial deadline.
-    let slot;
-    try {
-        slot = JSON.parse(await readPrivateFile(broker.slotPreflightReceipt, 262144));
-    }
-    catch (error) {
-        throw new Error('Grok subject turns require the root slot supervisor preflight receipt', { cause: error });
-    }
-    const verified = verify(slot, projection, { expectedNonce: broker.expectedNonce, minGeneration: broker.minGeneration });
-    const receipt = parseGrokBrokerReceipt(bindGrokBrokerProjection(projection, verified, options.trialId, options.configSha256), launch, options.trialId);
-    await writeFile(join(nativeTrialArtifactsRoot(launch, options.trialId), 'sandbox-projection.json'), `${JSON.stringify(receipt)}\n`, { flag: 'wx', mode: 0o600 });
-}
-//# sourceMappingURL=sandbox.js.map

package/dist/runtime/daimon/training/native/worker/sandbox.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/native/worker/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,YAAY,EAC5H,kBAAkB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,eAAe,EACtE,MAAM,qBAAqB,CAAC;AAIxE,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,OAA4B,EAAE,MAAoB,EAAE,OAAsB,EAAE,MAAqB;IACpJ,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACzG,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,yCAAyC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,OAAO,CAAC,WAAW;QAChI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/I,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1F,yBAAyB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY;QAC/F,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;IACnG,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IACnG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3H,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,2BAA2B,CAAC,OAA4B,EAAE,MAAoB,EAAE,OAAsB,EAAE,MAAwB;IAC7I,MAAM,EAAE,uCAAuC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,8BAA8B,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACjJ,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACvI,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;QAC5H,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;QACxI,yHAAyH;QACzH,wHAAwH;QACxH,8EAA8E;QAC9E,mBAAmB,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC1E,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACrH,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,iBAAiB,IAAI,GAAG,KAAK,MAAM,CAAC,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACzK,+FAA+F;IAC/F,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IACtF,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,uEAAuE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IAC7H,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IACxH,MAAM,OAAO,GAAG,sBAAsB,CAAC,wBAAwB,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACvJ,MAAM,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACnK,CAAC"}