spawnfile 0.1.33 → 0.1.35

package/dist/runtime/daimon/training/providers/grok-subscription/cli.js

@@ -1,81 +0,0 @@
-import { runProcess } from '../../../../../training/index.js';
-import { captureInferenceDiagnostic } from '../../../../../training/index.js';
-import { InferenceFailure } from '../../../../../training/index.js';
-import { validateInferenceResponse } from '../../../../../training/index.js';
-import { decodeGrok, grokFailureEvidence, validateGrokInitialization } from './protocol.js';
-/** One tool-free Grok CLI call with init attestation before any further native frame is consumed. */
-export async function runGrokCli(run) {
-    const { request, responseSchema, mode } = run;
-    const frames = {};
-    let malformed = false;
-    let nativeFailure;
-    const process = (run.process ?? runProcess)({ command: run.command, cwd: run.cwd,
-        // Empty --tools means defaults in Grok. Allow one known tool, then remove
-        // it and the automatically injected lazy-tool discovery pair.
-        args: ['--prompt-file', run.promptFile, '--model', run.cliModel, '--tools', 'read_file',
-            '--disallowed-tools', 'read_file,search_tool,use_tool', '--deny', '*', '--permission-mode', 'dontAsk', '--no-plan',
-            '--no-memory', '--disable-web-search', '--no-subagents', '--max-turns', '1',
-            '--reasoning-effort', run.reasoningEffort,
-            '--output-format', 'streaming-messages-json', '--verbatim',
-            ...(request.system === undefined ? [] : ['--system-prompt-override', request.system]),
-            ...(responseSchema === undefined ? [] : ['--json-schema', JSON.stringify(responseSchema)])],
-        env: run.env, stdin: '', timeoutMs: run.timeoutMs, signal: request.signal,
-        onLine(line) {
-            let event;
-            try {
-                const raw = JSON.parse(line);
-                if (raw === null || typeof raw !== 'object' || Array.isArray(raw) || frames.result !== undefined)
-                    throw new Error('Invalid frame');
-                event = raw;
-            }
-            catch {
-                malformed = true;
-                throw new Error('Malformed Grok protocol');
-            }
-            if (event['type'] === 'system' && event['subtype'] === 'init') {
-                frames.init = event;
-                try {
-                    validateGrokInitialization(frames, mode);
-                }
-                catch (error) {
-                    nativeFailure = error;
-                    throw error;
-                }
-            }
-            if (event['type'] === 'assistant')
-                frames.assistant = event;
-            if (event['type'] === 'result' || event['type'] === 'error')
-                frames.result = event;
-            if (frames.init === undefined) {
-                // A refusal may precede init; classify that typed envelope. Every
-                // other frame must fail before further native work is consumed.
-                try {
-                    decodeGrok(frames, 1, mode);
-                }
-                catch (error) {
-                    nativeFailure = error;
-                    throw error;
-                }
-            }
-        },
-    });
-    const completed = await process.completion;
-    const evidence = grokFailureEvidence(frames, mode);
-    if (request.signal?.aborted)
-        throw new InferenceFailure('cancelled', 'Grok inference cancelled', evidence);
-    if (nativeFailure)
-        throw nativeFailure;
-    if (malformed)
-        throw new InferenceFailure('protocol', 'Malformed Grok protocol', { ...evidence, diagnostic: captureInferenceDiagnostic('transport-framing') });
-    if (completed.cancelled || completed.error !== undefined)
-        throw new InferenceFailure('unknown', 'Grok native process did not settle successfully', { ...evidence, diagnostic: captureInferenceDiagnostic('native-process') });
-    const result = decodeGrok(frames, completed.exitCode, mode);
-    try {
-        validateInferenceResponse(result.text, responseSchema);
-    }
-    catch {
-        throw new InferenceFailure('invalid-response', 'Grok response did not match its requested schema', { ...evidence, diagnostic: captureInferenceDiagnostic('response-schema', result.text) });
-    }
-    return result;
-}
-//# sourceMappingURL=cli.js.map

package/dist/runtime/daimon/training/providers/grok-subscription/cli.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/providers/grok-subscription/cli.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,0BAA0B,EAAsC,MAAM,eAAe,CAAC;AAoBhI,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAe;IAC9C,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IAC9C,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,aAA2C,CAAC;IAChD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG;QAC9E,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,EAAE,CAAC,eAAe,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW;YACrF,oBAAoB,EAAE,gCAAgC,EAAE,QAAQ,EAAE,GAAG,EAAE,mBAAmB,EAAE,SAAS,EAAE,WAAW;YAClH,aAAa,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG;YAC3E,oBAAoB,EAAE,GAAG,CAAC,eAAe;YACzC,iBAAiB,EAAE,yBAAyB,EAAE,YAAY;YAC1D,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,0BAA0B,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACrF,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC7F,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;QACzE,MAAM,CAAC,IAAI;YACT,IAAI,KAA8B,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;gBACnI,KAAK,GAAG,GAA8B,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAAC,CAAC;YACzE,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC9D,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;gBACpB,IAAI,CAAC;oBAAC,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;gBACjD,OAAO,KAAK,EAAE,CAAC;oBAAC,aAAa,GAAG,KAAyB,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;YAC3E,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,WAAW;gBAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;YAC5D,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,OAAO;gBAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;YACnF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,kEAAkE;gBAClE,gEAAgE;gBAChE,IAAI,CAAC;oBAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;gBACpC,OAAO,KAAK,EAAE,CAAC;oBAAC,aAAa,GAAG,KAAyB,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;IAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,EAAE,0BAA0B,EAAE,QAAQ,CAAC,CAAC;IAC3G,IAAI,aAAa;QAAE,MAAM,aAAa,CAAC;IACvC,IAAI,SAAS;QAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,EAAE,yBAAyB,EAAE,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,0BAA0B,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC/J,IAAI,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,EAAE,iDAAiD,EAAE,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,0BAA0B,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC9N,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC;QAAC,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAAC,CAAC;IAC/D,MAAM,CAAC;QAAC,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,kDAAkD,EAAE,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,0BAA0B,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IACtM,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/runtime/daimon/training/providers/grok-subscription/index.d.ts

@@ -1,4 +0,0 @@
-export { createGrokInference, type GrokInferenceOptions } from './provider.js';
-export { createGrokBrokerInference, GrokGrantPool } from '../grok-broker/index.js';
-export { runGrokCli } from './cli.js';
-export { decodeGrok, grokFailureEvidence, validateGrokInitialization, type GrokAuthMode, type GrokFrames } from './protocol.js';

package/dist/runtime/daimon/training/providers/grok-subscription/index.js

@@ -1,5 +0,0 @@
-export { createGrokInference } from './provider.js';
-export { createGrokBrokerInference, GrokGrantPool } from '../grok-broker/index.js';
-export { runGrokCli } from './cli.js';
-export { decodeGrok, grokFailureEvidence, validateGrokInitialization } from './protocol.js';
-//# sourceMappingURL=index.js.map

package/dist/runtime/daimon/training/providers/grok-subscription/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/providers/grok-subscription/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAA6B,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,0BAA0B,EAAsC,MAAM,eAAe,CAAC"}

package/dist/runtime/daimon/training/providers/grok-subscription/protocol.d.ts

@@ -1,26 +0,0 @@
-import type { InferenceResult } from '../../../../../training/index.js';
-import { type InferenceFailureEvidence } from '../../../../../training/index.js';
-export interface GrokFrames {
-    init?: Record<string, unknown>;
-    assistant?: Record<string, unknown>;
-    result?: Record<string, unknown>;
-}
-/**
- * How a Grok CLI authenticates. `subscription` is the saved desktop OAuth login;
- * `broker-grant` reaches a Daimon broker proxy with a short inference grant, so
- * its init reports `apiKeySource: "user"` and the pinned client model id, and the
- * broker-enforced catalog model (the grant's) is the response model.
- */
-export type GrokAuthMode = Readonly<{
-    auth: 'subscription';
-}> | Readonly<{
-    auth: 'broker-grant';
-    clientModelId: string;
-    grantModel: string;
-}>;
-export declare const grokRoute: (mode: GrokAuthMode) => string;
-export declare function grokEnvironment(): NodeJS.ProcessEnv;
-export declare function grokFailureEvidence({ init, result }: GrokFrames, mode?: GrokAuthMode): InferenceFailureEvidence;
-/** Validate before generation proceeds; permission denial alone is not tool isolation. */
-export declare function validateGrokInitialization(frames: GrokFrames, mode?: GrokAuthMode): void;
-export declare function decodeGrok(frames: GrokFrames, exitCode: number | null, mode?: GrokAuthMode): InferenceResult;

package/dist/runtime/daimon/training/providers/grok-subscription/protocol.js

@@ -1,102 +0,0 @@
-import { captureInferenceDiagnostic } from '../../../../../training/index.js';
-import { InferenceFailure } from '../../../../../training/index.js';
-const SUBSCRIPTION = Object.freeze({ auth: 'subscription' });
-export const grokRoute = (mode) => mode.auth === 'subscription' ? 'grok-subscription' : 'grok-broker-grant';
-export function grokEnvironment() {
-    const env = { ...process.env };
-    for (const key of Object.keys(env))
-        if (/^(XAI_|GROK_(API_KEY|BASE_URL|AUTH_TOKEN)|TYPESAFE_API_KEY|OPENAI_API_KEY|ANTHROPIC_API_KEY)/u.test(key))
-            delete env[key];
-    return env;
-}
-function usageOf(result, mode) {
-    const raw = result['usage'];
-    const count = (key) => typeof raw?.[key] === 'number' && Number.isSafeInteger(raw[key]) && raw[key] >= 0 ? raw[key] : null;
-    const input = count('input_tokens'), read = count('cache_read_input_tokens'), write = count('cache_creation_input_tokens');
-    const output = count('output_tokens');
-    const total = input === null || read === null || write === null ? null : input + read + write;
-    if (total === 0 && output === 0)
-        return null;
-    return { inputTokens: total !== null && Number.isSafeInteger(total) ? total : null, cachedInputTokens: read,
-        cacheWriteInputTokens: write, outputTokens: output, reasoningTokens: null, source: mode.auth === 'subscription' ? 'grok.result.usage.lower-bound' : 'grok-broker-grant.result.usage.lower-bound' };
-}
-export function grokFailureEvidence({ init, result }, mode = SUBSCRIPTION) {
-    return { usage: result === undefined ? null : usageOf(result, mode), responseModel: reportedModel(init, mode), responseRoute: grokRoute(mode) };
-}
-function reportedModel(init, mode) {
-    const native = typeof init?.['model'] === 'string' && init['model'].trim() ? init['model'] : null;
-    if (mode.auth === 'subscription')
-        return native;
-    return native === mode.clientModelId ? mode.grantModel : null;
-}
-/** Validate before generation proceeds; permission denial alone is not tool isolation. */
-export function validateGrokInitialization(frames, mode = SUBSCRIPTION) {
-    const { init } = frames, evidence = grokFailureEvidence(frames, mode);
-    if (init === undefined)
-        throw new InferenceFailure('protocol', 'Grok omitted initialization', { ...evidence, diagnostic: captureInferenceDiagnostic('initialization') });
-    // Each mode accepts exactly its own source: a grant run reporting OAuth used a desktop login.
-    if (init['apiKeySource'] !== (mode.auth === 'subscription' ? 'oauth' : 'user')) {
-        throw new InferenceFailure('authentication', mode.auth === 'subscription' ? 'Grok did not acknowledge subscription OAuth' : 'Grok did not acknowledge the broker inference grant', { ...evidence, diagnostic: captureInferenceDiagnostic('subscription') });
-    }
-    if (mode.auth === 'broker-grant' && init['model'] !== mode.clientModelId) {
-        throw new InferenceFailure('authentication', 'Grok did not run the pinned broker inference client model', { ...evidence, diagnostic: captureInferenceDiagnostic('subscription') });
-    }
-    if (!Array.isArray(init['tools']) || init['tools'].length !== 0 ||
-        !Array.isArray(init['mcp_servers']) || init['mcp_servers'].length !== 0) {
-        throw new InferenceFailure('protocol', 'Grok tool isolation was not acknowledged', { ...evidence, diagnostic: captureInferenceDiagnostic('tool-isolation') });
-    }
-}
-export function decodeGrok(frames, exitCode, mode = SUBSCRIPTION) {
-    const { init, assistant, result } = frames;
-    const evidence = grokFailureEvidence(frames, mode), usage = evidence.usage ?? null;
-    const model = reportedModel(init, mode);
-    const status = result?.['status'] ?? result?.['status_code'] ?? refusalStatus(result);
-    // The broker's stale shared realm: fail fast, never retry the same authority.
-    if (status === AUTH_STALE)
-        throw new InferenceFailure(mode.auth === 'broker-grant' ? 'auth-stale' : 'authentication', 'Grok credential authority is stale', { ...evidence, detail: 'grant-expired' });
-    if (status === 402 || status === 429 || status === 503 || status === 401 || status === 403) {
-        // The number is the only part of a refusal an operator can act on, so it is
-        // retained as a number rather than left for someone to read back out of prose.
-        throw new InferenceFailure(status === 402 || status === 429 ? 'quota' : status === 503 ? 'unavailable' : 'authentication', 'Grok refused inference', { ...evidence, detail: 'provider-status', status });
-    }
-    validateGrokInitialization(frames, mode);
-    const message = assistant?.['message'];
-    const blocks = message?.['content'];
-    const validBlocks = Array.isArray(blocks) && blocks.every((block) => block !== null && typeof block === 'object' &&
-        (block['type'] === 'thinking' ||
-            (block['type'] === 'text' && typeof block['text'] === 'string')));
-    const text = validBlocks ? blocks.filter((b) => b['type'] === 'text').map((b) => b['text']).join('') : '';
-    const issue = exitCode !== 0 ? 'native-process'
-        : result?.['subtype'] !== 'success' || result['is_error'] !== false || (Array.isArray(result['errors']) && result['errors'].length > 0) ? 'terminal-error'
-            : !['end_turn', 'stop_sequence'].includes(String(result['stop_reason'])) ? 'unfinished-response'
-                : !validBlocks ? 'content-shape' : !text.trim() ? 'empty-response'
-                    : result['result'] !== text ? 'response-mismatch'
-                        : assistant?.['session_id'] !== result['session_id'] ? 'session-mismatch'
-                            : message?.['stop_reason'] !== result['stop_reason'] ? 'stop-mismatch' : model === null ? 'model-missing' : undefined;
-    if (issue)
-        throw new InferenceFailure('protocol', 'Grok omitted a matching completed response', {
-            ...evidence, diagnostic: captureInferenceDiagnostic(issue),
-        });
-    return { text, model: model, modelBasis: 'provider-reported', usage, route: grokRoute(mode) };
-}
-const AUTH_STALE = Symbol('auth_stale');
-/** Grok 1.0.34 surfaces a broker proxy 401 `{"error":"auth_stale"}` as a JSON string, not an object (live capture). */
-const STALE_REALM = /^Unauthorized \(401\) from http:\/\/127\.0\.0\.1:[0-9]{1,5}\/v1\/chat\/completions: auth_stale(?:\n|$)/u;
-/** Decode the native error wrapper, never search arbitrary model output for HTTP text. */
-function refusalStatus(result) {
-    if (result?.['is_error'] !== true || !Array.isArray(result['errors']) || result['errors'].length !== 1)
-        return undefined;
-    const error = result['errors'][0];
-    if (typeof error !== 'string' || !error.startsWith('Internal error: '))
-        return undefined;
-    try {
-        const detail = JSON.parse(error.slice('Internal error: '.length));
-        if (typeof detail === 'string')
-            return STALE_REALM.test(detail) ? AUTH_STALE : /^Unauthorized \(401\) /u.test(detail) ? 401 : undefined;
-        return detail !== null && typeof detail === 'object' ? detail['http_status'] : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-//# sourceMappingURL=protocol.js.map

package/dist/runtime/daimon/training/providers/grok-subscription/protocol.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/providers/grok-subscription/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAE9E,OAAO,EAAE,gBAAgB,EAAiC,MAAM,kCAAkC,CAAC;AAiBnG,MAAM,YAAY,GAAiB,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAkB,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC;AAElI,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,IAAI,+FAA+F,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IACnK,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CAAC,MAA+B,EAAE,IAAkB;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAwC,CAAC;IACnE,MAAM,KAAK,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClJ,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,yBAAyB,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,KAAK,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;IAC9F,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,EAAE,WAAW,EAAE,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI;QACzG,qBAAqB,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,4CAA4C,EAAE,CAAC;AACvM,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAc,EAAE,OAAqB,YAAY;IACjG,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,EAAE,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;AAClJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAyC,EAAE,IAAkB;IAClF,MAAM,MAAM,GAAG,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClG,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,MAAM,CAAC;IAChD,OAAO,MAAM,KAAK,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,0BAA0B,CAAC,MAAkB,EAAE,OAAqB,YAAY;IAC9F,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtE,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,EAAE,6BAA6B,EAAE,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,0BAA0B,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACzK,8FAA8F;IAC9F,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,qDAAqD,EAAE,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,0BAA0B,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAC9P,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;QACzE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,2DAA2D,EAAE,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,0BAA0B,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACrL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAC7D,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,gBAAgB,CAAC,UAAU,EAAE,0CAA0C,EAAE,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,0BAA0B,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAChK,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAkB,EAAE,QAAuB,EAAE,OAAqB,YAAY;IACvG,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC;IACnF,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IACtF,8EAA8E;IAC9E,IAAI,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,oCAAoC,EAAE,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IACtM,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAC3F,4EAA4E;QAC5E,+EAA+E;QAC/E,MAAM,IAAI,gBAAgB,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,EACvH,wBAAwB,EAAE,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,SAAS,CAAwC,CAAC;IAC9E,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAC3E,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3C,CAAE,KAAiC,CAAC,MAAM,CAAC,KAAK,UAAU;YACxD,CAAE,KAAiC,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,OAAQ,KAAiC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChI,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5J,MAAM,KAAK,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB;QAC7C,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB;YAC1J,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB;gBAChG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,gBAAgB;oBAClE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAmB;wBACjD,CAAC,CAAC,SAAS,EAAE,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,kBAAkB;4BACzE,CAAC,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;IACxH,IAAI,KAAK;QAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,EAAE,4CAA4C,EAAE;YAC9F,GAAG,QAAQ,EAAE,UAAU,EAAE,0BAA0B,CAAC,KAAK,CAAC;SAC3D,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;AACxC,uHAAuH;AACvH,MAAM,WAAW,GAAG,yGAAyG,CAAC;AAE9H,0FAA0F;AAC1F,SAAS,aAAa,CAAC,MAA2C;IAChE,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzH,MAAM,KAAK,GAAY,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,OAAO,SAAS,CAAC;IACzF,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3E,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QACxI,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxH,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC"}

package/dist/runtime/daimon/training/providers/grok-subscription/provider.d.ts

@@ -1,9 +0,0 @@
-import type { InferenceProvider } from '../../../../../training/index.js';
-import type { runProcess } from '../../../../../training/index.js';
-export interface GrokInferenceOptions {
-    command?: string;
-    timeoutMs?: number;
-    process?: typeof runProcess;
-    reasoningEffort?: 'low' | 'medium' | 'high' | 'xhigh';
-}
-export declare function createGrokInference(options?: GrokInferenceOptions): InferenceProvider;

package/dist/runtime/daimon/training/providers/grok-subscription/provider.js

@@ -1,38 +0,0 @@
-import { mkdtemp, rm, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-import { InferenceFailure } from '../../../../../training/index.js';
-import { validateInferenceSchema } from '../../../../../training/index.js';
-import { runGrokCli } from './cli.js';
-import { grokEnvironment } from './protocol.js';
-export function createGrokInference(options = {}) {
-    return {
-        id: 'grok-subscription',
-        capabilities: { tools: 'disabled', billing: 'subscription', temperature: false, seed: false },
-        async generate(request) {
-            validateInferenceSchema(request.responseSchema);
-            const responseSchema = request.responseSchema === undefined ? undefined : structuredClone(request.responseSchema);
-            const reasoningEffort = options.reasoningEffort === undefined ? 'medium' : options.reasoningEffort;
-            if (!['low', 'medium', 'high', 'xhigh'].includes(reasoningEffort)) {
-                throw new InferenceFailure('unsupported', 'Invalid Grok reasoning effort');
-            }
-            if (!request.prompt.trim() || !request.model.trim() || request.model.startsWith('-') ||
-                request.temperature !== undefined || request.seed !== undefined)
-                throw new InferenceFailure('unsupported', 'Invalid Grok inference controls');
-            if (request.signal?.aborted)
-                throw new InferenceFailure('cancelled', 'Grok cancelled before launch');
-            const cwd = await mkdtemp(path.join(tmpdir(), 'training-grok-'));
-            try {
-                const promptFile = path.join(cwd, 'prompt.txt');
-                await writeFile(promptFile, request.prompt, { mode: 0o600 });
-                return await runGrokCli({ command: options.command ?? 'grok', cwd, promptFile, env: grokEnvironment(),
-                    timeoutMs: options.timeoutMs ?? 180_000, cliModel: request.model, reasoningEffort, request, responseSchema,
-                    mode: { auth: 'subscription' }, process: options.process });
-            }
-            finally {
-                await rm(cwd, { recursive: true, force: true });
-            }
-        },
-    };
-}
-//# sourceMappingURL=provider.js.map

package/dist/runtime/daimon/training/providers/grok-subscription/provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../../../../src/runtime/daimon/training/providers/grok-subscription/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAShD,MAAM,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IACpE,OAAO;QACL,EAAE,EAAE,mBAAmB;QACvB,YAAY,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;QAC7F,KAAK,CAAC,QAAQ,CAAC,OAAO;YACpB,uBAAuB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAChD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAClH,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;YACnG,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAClF,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;YAChJ,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;YACrG,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAChD,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7D,OAAO,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,EAAE;oBACnG,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc;oBAC1G,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAChE,CAAC;oBAAS,CAAC;gBAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;QAChE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/daimon/training/public.d.ts

@@ -1,6 +0,0 @@
-/** Interim Daimon integration surface; importing it never starts a worker. */
-export { assertNativeEngineConfig, bindTrialPathsToSlot, createDaimonNativeAdapter, createExperimentSlotFreshness, loadNativeLaunch, nativeChildArguments, nativeSubjectScratch, nativeTrialArtifactsRoot, nativeTrialInputsRoot, parseNativeLaunch, prepareNativeSubject, } from './native/index.js';
-export type { GrokSlotFreshnessStore, NativeAdapterOptions, NativeChildExternalInputs, NativeLaunch, NativeMount, NativeSubjectEngine, NativeTransportDelivery, NativeTurnEvidence, ProvisionedSubject, SubjectProvisioner, } from './native/index.js';
-export { nativeChildEnvironment } from './native/child/index.js';
-export { verifyExternalSource, verifyNativeWorkerStartup } from './native/worker/index.js';
-export type { TerminalEvidence } from './native/worker/index.js';

package/dist/runtime/daimon/training/public.js

@@ -1,5 +0,0 @@
-/** Interim Daimon integration surface; importing it never starts a worker. */
-export { assertNativeEngineConfig, bindTrialPathsToSlot, createDaimonNativeAdapter, createExperimentSlotFreshness, loadNativeLaunch, nativeChildArguments, nativeSubjectScratch, nativeTrialArtifactsRoot, nativeTrialInputsRoot, parseNativeLaunch, prepareNativeSubject, } from './native/index.js';
-export { nativeChildEnvironment } from './native/child/index.js';
-export { verifyExternalSource, verifyNativeWorkerStartup } from './native/worker/index.js';
-//# sourceMappingURL=public.js.map

package/dist/runtime/daimon/training/public.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"public.js","sourceRoot":"","sources":["../../../../src/runtime/daimon/training/public.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EACL,wBAAwB,EAAE,oBAAoB,EAAE,yBAAyB,EACzE,6BAA6B,EAAE,gBAAgB,EAAE,oBAAoB,EACrE,oBAAoB,EAAE,wBAAwB,EAAE,qBAAqB,EACrE,iBAAiB,EAAE,oBAAoB,GACxC,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/runtime/daimon/training/services/account-lease.d.ts

@@ -1,7 +0,0 @@
-export declare function recordNativeStartupClosure(error: unknown, confirmed: boolean): unknown;
-export declare const nativeStartupClosureConfirmed: (error: unknown) => boolean;
-/** Serializes complete native hosts on one persistent subscription account.
- * The non-secret SQLite inode is never unlinked: the kernel releases ownership
- * on process death, while cancelling a waiter leaves the active owner intact.
- */
-export declare function acquireNativeAccountLease(root: string, signal?: AbortSignal, maxWaitMs?: number): Promise<() => void>;

package/dist/runtime/daimon/training/services/account-lease.js

@@ -1,76 +0,0 @@
-import { closeSync, constants, openSync } from 'node:fs';
-import { lstat, realpath } from 'node:fs/promises';
-import { join, resolve } from 'node:path';
-import { setTimeout as pause } from 'node:timers/promises';
-const closedStartups = new WeakSet();
-// An unconfirmed native shutdown fences the account until this container exits.
-// Keep ownership strongly reachable; GC must never silently release that fence.
-const activeLeases = new Set();
-export function recordNativeStartupClosure(error, confirmed) {
-    if (!confirmed)
-        return error;
-    const failure = error !== null && typeof error === 'object' ? error : new Error('Native startup failed', { cause: error });
-    closedStartups.add(failure);
-    return failure;
-}
-export const nativeStartupClosureConfirmed = (error) => error !== null && typeof error === 'object' && closedStartups.has(error);
-/** Serializes complete native hosts on one persistent subscription account.
- * The non-secret SQLite inode is never unlinked: the kernel releases ownership
- * on process death, while cancelling a waiter leaves the active owner intact.
- */
-export async function acquireNativeAccountLease(root, signal, maxWaitMs = 30 * 60_000) {
-    signal?.throwIfAborted();
-    if (!Number.isFinite(maxWaitMs) || maxWaitMs < 0)
-        throw new Error('Invalid native account wait bound');
-    const directory = await lstat(root);
-    if (await realpath(root) !== resolve(root) || !directory.isDirectory() || directory.uid !== process.getuid?.()
-        || (directory.mode & 0o777) !== 0o700)
-        throw new Error('Unsafe native account directory');
-    const file = join(root, '.training-host.sqlite');
-    // Do not open/close an existing inode: that could drop another POSIX lock
-    // held in this process. SQLite coordinates all existing-inode descriptors.
-    try {
-        closeSync(openSync(file, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | constants.O_NOFOLLOW, 0o600));
-    }
-    catch (error) {
-        if (error.code !== 'EEXIST')
-            throw error;
-    }
-    const entry = await lstat(file);
-    if (!entry.isFile() || entry.isSymbolicLink() || entry.nlink !== 1 || entry.uid !== process.getuid?.()
-        || (entry.mode & 0o777) !== 0o600)
-        throw new Error('Unsafe native account lease');
-    const { DatabaseSync } = await import('node:sqlite');
-    const database = new DatabaseSync(file);
-    const deadline = performance.now() + maxWaitMs;
-    try {
-        database.exec('PRAGMA busy_timeout = 0');
-        for (;;) {
-            signal?.throwIfAborted();
-            try {
-                database.exec('BEGIN EXCLUSIVE');
-                let closed = false;
-                const close = () => { if (!closed) {
-                    closed = true;
-                    database.close();
-                    activeLeases.delete(close);
-                } };
-                activeLeases.add(close);
-                return close;
-            }
-            catch (error) {
-                if (error.errcode !== 5)
-                    throw error;
-                const remaining = deadline - performance.now();
-                if (remaining <= 0)
-                    throw new Error('Native account admission exceeded its wait bound', { cause: error });
-                await pause(Math.min(25, remaining), undefined, { signal });
-            }
-        }
-    }
-    catch (error) {
-        database.close();
-        throw error;
-    }
-}
-//# sourceMappingURL=account-lease.js.map

package/dist/runtime/daimon/training/services/account-lease.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"account-lease.js","sourceRoot":"","sources":["../../../../../src/runtime/daimon/training/services/account-lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,cAAc,GAAG,IAAI,OAAO,EAAU,CAAC;AAC7C,gFAAgF;AAChF,gFAAgF;AAChF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAc,CAAC;AAC3C,MAAM,UAAU,0BAA0B,CAAC,KAAc,EAAE,SAAkB;IAC3E,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3H,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAEnJ;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAY,EAAE,MAAoB,EAAE,SAAS,GAAG,EAAE,GAAG,MAAM;IACzG,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvG,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE;WACzG,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IACjD,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI,CAAC;QAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IAC3H,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IACtF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE;WACjG,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACpF,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACzC,SAAS,CAAC;YACR,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBACjC,IAAI,MAAM,GAAG,KAAK,CAAC;gBACnB,MAAM,KAAK,GAAG,GAAS,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;oBAAC,MAAM,GAAG,IAAI,CAAC;oBAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;oBAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC,CAAC,CAAC,CAAC;gBAC5G,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACxB,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA8B,CAAC,OAAO,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC/D,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;gBAC/C,IAAI,SAAS,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1G,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACpD,CAAC"}

package/dist/runtime/daimon/training/services/freshness.d.ts

@@ -1,15 +0,0 @@
-import { type GrokSlotFreshnessOptions, type GrokSlotFreshnessStore } from './slot-freshness.js';
-/** The experiment-state file holding every slot's recycle generation floor and pending nonce. */
-export declare const experimentSlotFreshnessFile = "grok-slot-freshness.json";
-/**
- * The one Training-owned slot freshness store for an experiment.
- *
- * The experiment runner creates it inside its own durable state root and passes
- * the same store to subject preparation (`prepareNativeSubject` mints from it)
- * and to `NativeChildExecution.grokSlots` (the child accepts the verified slot
- * receipt into it), so integrations never configure a freshness file. Living
- * beside the run's other state, it survives resume and container replacement,
- * which is what keeps a generation floor from ever moving backwards. Nothing is
- * written until a broker slot first requests a nonce.
- */
-export declare function createExperimentSlotFreshness(stateRoot: string, options?: GrokSlotFreshnessOptions): GrokSlotFreshnessStore;

package/dist/runtime/daimon/training/services/freshness.js

@@ -1,19 +0,0 @@
-import { join } from 'node:path';
-import { createGrokSlotFreshnessStore } from './slot-freshness.js';
-/** The experiment-state file holding every slot's recycle generation floor and pending nonce. */
-export const experimentSlotFreshnessFile = 'grok-slot-freshness.json';
-/**
- * The one Training-owned slot freshness store for an experiment.
- *
- * The experiment runner creates it inside its own durable state root and passes
- * the same store to subject preparation (`prepareNativeSubject` mints from it)
- * and to `NativeChildExecution.grokSlots` (the child accepts the verified slot
- * receipt into it), so integrations never configure a freshness file. Living
- * beside the run's other state, it survives resume and container replacement,
- * which is what keeps a generation floor from ever moving backwards. Nothing is
- * written until a broker slot first requests a nonce.
- */
-export function createExperimentSlotFreshness(stateRoot, options) {
-    return createGrokSlotFreshnessStore(join(stateRoot, experimentSlotFreshnessFile), options);
-}
-//# sourceMappingURL=freshness.js.map

package/dist/runtime/daimon/training/services/freshness.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"freshness.js","sourceRoot":"","sources":["../../../../../src/runtime/daimon/training/services/freshness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,4BAA4B,EAA8D,MAAM,qBAAqB,CAAC;AAE/H,iGAAiG;AACjG,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,SAAiB,EAAE,OAAkC;IACjG,OAAO,4BAA4B,CAAC,IAAI,CAAC,SAAS,EAAE,2BAA2B,CAAC,EAAE,OAAO,CAAC,CAAC;AAC7F,CAAC"}

package/dist/runtime/daimon/training/services/index.d.ts

@@ -1,4 +0,0 @@
-export { createExperimentSlotFreshness, experimentSlotFreshnessFile } from './freshness.js';
-export { createGrokSlotFreshnessStore, assertNoFloorRollback } from './slot-freshness.js';
-export type { GrokSlotFreshness, GrokSlotFreshnessOptions, GrokSlotFreshnessStore } from './slot-freshness.js';
-export { acquireNativeAccountLease, recordNativeStartupClosure, nativeStartupClosureConfirmed } from './account-lease.js';

package/dist/runtime/daimon/training/services/index.js

@@ -1,4 +0,0 @@
-export { createExperimentSlotFreshness, experimentSlotFreshnessFile } from './freshness.js';
-export { createGrokSlotFreshnessStore, assertNoFloorRollback } from './slot-freshness.js';
-export { acquireNativeAccountLease, recordNativeStartupClosure, nativeStartupClosureConfirmed } from './account-lease.js';
-//# sourceMappingURL=index.js.map

package/dist/runtime/daimon/training/services/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/runtime/daimon/training/services/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE1F,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/runtime/daimon/training/services/slot-freshness.d.ts

@@ -1,34 +0,0 @@
-export interface GrokSlotFreshness {
-    expectedNonce: string;
-    minGeneration: number;
-}
-/**
- * Evaluator-owned slot recycle freshness, persisted in the caller's experiment state.
- * `request` mints this trial's recycle nonce and the generation floor to write into
- * launch.v2 `broker`; `accept` records a verified receipt so it can never be replayed.
- */
-export interface GrokSlotFreshnessStore {
-    request(slot: number): Promise<GrokSlotFreshness>;
-    accept(slot: number, receipt: {
-        nonce: string;
-        generation: number;
-    }): Promise<void>;
-}
-export interface GrokSlotFreshnessOptions {
-    lockTimeoutMs?: number;
-}
-interface FreshnessFloors {
-    slots: Record<string, {
-        lastGeneration: number;
-    }>;
-}
-/** Compare-and-swap guard: a write may never lower any slot's generation floor already on disk. */
-export declare function assertNoFloorRollback(disk: FreshnessFloors, next: FreshnessFloors): void;
-/**
- * Every operation re-reads the file under an exclusive O_EXCL lockfile shared by all
- * store instances and processes, then compare-and-swaps: no slot's generation floor on
- * disk is ever lowered. A lock whose owner process is gone (same PID namespace) is
- * reclaimed; a live owner is waited for until the lock deadline.
- */
-export declare function createGrokSlotFreshnessStore(file: string, options?: GrokSlotFreshnessOptions): GrokSlotFreshnessStore;
-export {};