@noopolis/daimon 0.2.0 → 0.2.2

package/dist/runtime/grokWorkerAttestation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokWorkerAttestation.d.ts","sourceRoot":"","sources":["../../src/runtime/grokWorkerAttestation.ts"],"names":[],"mappings":"AAOA,OAAO,EAAiD,KAAK,oBAAoB,EAA4B,MAAM,+BAA+B,CAAC;AAGnJ;;;;;GAKG;AACH,MAAM,MAAM,6BAA6B,GAAC,QAAQ,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IAAA,GAAG,EAAC,MAAM,CAAC;IAAA,IAAI,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,SAAS,MAAM,EAAE,CAAA;CAAC,CAAC,CAAC;AACpH,KAAK,QAAQ,GAAC,6BAA6B,CAAC;AAC5C,qBAAa,4BAA6B,SAAQ,KAAK;IAAe,QAAQ,CAAC,YAAY,EAAC,iBAAiB,GAAC,iBAAiB;gBAAhD,YAAY,EAAC,iBAAiB,GAAC,iBAAiB;CAA4D;AAC3L;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAC,UAAU,EAAC,aAAa,EAAC,MAAM,GAAE,SAAS,MAAM,EAAE,CAUrG;AACD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAC,QAAQ,CAAC;IAAC,WAAW,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,SAAS,CAAC,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,YAAY,EAAC,MAAM,CAAC;IAAA,iBAAiB,CAAC,EAAC,SAAS,QAAQ,CAAC;QAAC,WAAW,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,CAAC,EAAE,CAAA;CAAC,CAAC,EAAC,YAAY,GAAC,QAAQ,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IAAA,GAAG,EAAC,MAAM,CAAC;IAAA,GAAG,CAAC,EAAC,oBAAoB,CAAA;CAAC,CAAe,GAAE,OAAO,CAAC,QAAQ,CAAC,CAW7X;AACD,6HAA6H;AAC7H,eAAO,MAAM,0BAA0B,GAAE,CAAC,SAAS,QAAQ,CAAC;IAAC,WAAW,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;CAAC,CAAC,EAAE,cAAa,CAAC,EAAC,eAAc,SAAS,QAAQ,CAAC;IAAC,WAAW,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;CAAC,CAAC,EAAE,EAAC,cAAa,MAAM;;;;;;;CAA4J,CAAC;AACnZ;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAC;IAAC,QAAQ,CAAC,EAAC,QAAQ,CAAC;QAAC,MAAM,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAA;KAAC,CAAC,CAAC;IAAA,OAAO,CAAC,EAAC,4BAA4B,CAAC,cAAc,CAAC,CAAA;CAAC,CAAC;AAE9J;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAC,UAAU,CAAC,OAAO,2BAA2B,CAAC,CAAC,CAAC,CAAC,EAAC,MAAM,EAAC,QAAQ,GAAE,MAAI,OAAO,CAAC,IAAI,CAAC,CAOxI;AACD,wBAAsB,2BAA2B,CAAC,KAAK,EAAC,QAAQ,CAAC;IAAC,UAAU,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;CAAC,CAAC,EAAC,MAAM,EAAC,QAAQ,EAAC,IAAI,CAAC,EAAC,yBAAyB,GAAE,OAAO,CAAC,IAAI,CAAC,CAyBtM;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAC,UAAU,EAAC,SAAS,EAAC,MAAM,EAAC,SAAS,GAAC,SAAS,MAAM,EAAK,GAAE,IAAI,CAA4D;AAChL,uFAAuF;AACvF,wBAAgB,8BAA8B,CAAC,KAAK,EAAC,UAAU,EAAC,SAAS,EAAC,MAAM,EAAC,SAAS,GAAC,SAAS,MAAM,EAAK,GAAE,QAAQ,CAAC;IAAC,MAAM,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAA;CAAC,CAAC,CAavJ"}
+{"version":3,"file":"grokWorkerAttestation.d.ts","sourceRoot":"","sources":["../../src/runtime/grokWorkerAttestation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAOnF,OAAO,EAAwB,KAAK,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACjG,OAAO,EAAiD,KAAK,oBAAoB,EAA4B,MAAM,+BAA+B,CAAC;AAGnJ;;;;;GAKG;AACH,MAAM,MAAM,6BAA6B,GAAC,QAAQ,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IAAA,GAAG,EAAC,MAAM,CAAC;IAAA,IAAI,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,SAAS,MAAM,EAAE,CAAC;IAAA,aAAa,CAAC,EAAC,uBAAuB,CAAA;CAAC,CAAC,CAAC;AAC3J,KAAK,QAAQ,GAAC,6BAA6B,CAAC;AAC5C,qBAAa,4BAA6B,SAAQ,KAAK;IAAe,QAAQ,CAAC,YAAY,EAAC,iBAAiB,GAAC,iBAAiB;gBAAhD,YAAY,EAAC,iBAAiB,GAAC,iBAAiB;CAA4D;AAC3L;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAC,UAAU,EAAC,aAAa,EAAC,MAAM,GAAE,SAAS,MAAM,EAAE,CAUrG;AACD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAC,QAAQ,CAAC;IAAC,WAAW,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,SAAS,CAAC,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,YAAY,EAAC,oBAAoB,CAAC;IAAA,YAAY,CAAC,EAAC,MAAM,CAAC;IAAA,iBAAiB,CAAC,EAAC,SAAS,QAAQ,CAAC;QAAC,WAAW,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,CAAC,EAAE,CAAA;CAAC,CAAC,EAAC,YAAY,GAAC,QAAQ,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IAAA,GAAG,EAAC,MAAM,CAAC;IAAA,GAAG,CAAC,EAAC,oBAAoB,CAAA;CAAC,CAAe,GAAE,OAAO,CAAC,QAAQ,GAAG;IAAE,aAAa,EAAE,uBAAuB,CAAA;CAAE,CAAC,CAY7c;AACD,6HAA6H;AAC7H,eAAO,MAAM,0BAA0B,GAAE,CAAC,SAAS,QAAQ,CAAC;IAAC,WAAW,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;CAAC,CAAC,EAAE,cAAa,CAAC,EAAC,eAAc,SAAS,QAAQ,CAAC;IAAC,WAAW,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;CAAC,CAAC,EAAE,EAAC,cAAa,oBAAoB;;;;;;;CAA4J,CAAC;AACja;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAC;IAAC,QAAQ,CAAC,EAAC,QAAQ,CAAC;QAAC,MAAM,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAA;KAAC,CAAC,CAAC;IAAA,OAAO,CAAC,EAAC,4BAA4B,CAAC,cAAc,CAAC,CAAA;CAAC,CAAC;AAE9J;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAC,UAAU,CAAC,OAAO,2BAA2B,CAAC,CAAC,CAAC,CAAC,EAAC,MAAM,EAAC,QAAQ,GAAE,MAAI,OAAO,CAAC,IAAI,CAAC,CAOxI;AACD,wBAAsB,2BAA2B,CAAC,KAAK,EAAC,QAAQ,CAAC;IAAC,UAAU,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;CAAC,CAAC,EAAC,MAAM,EAAC,QAAQ,EAAC,IAAI,CAAC,EAAC,yBAAyB,GAAE,OAAO,CAAC,IAAI,CAAC,CAyBtM;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAC,UAAU,EAAC,SAAS,EAAC,MAAM,EAAC,SAAS,GAAC,SAAS,MAAM,EAAK,GAAE,IAAI,CAA4D;AAChL,uFAAuF;AACvF,wBAAgB,8BAA8B,CAAC,KAAK,EAAC,UAAU,EAAC,SAAS,EAAC,MAAM,EAAC,SAAS,GAAC,SAAS,MAAM,EAAK,GAAE,QAAQ,CAAC;IAAC,MAAM,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAA;CAAC,CAAC,CAavJ"}

package/dist/runtime/grokWorkerAttestation.js

@@ -64,7 +64,8 @@ export function parseGrokWorkerSandboxProfile(bytes, profileSha256) {
  * the events watermark it requires the 1.0.34 layout: events under
  * `$GROK_HOME/sessions/` (the root `sandbox-events.jsonl` stays empty on
  * 1.0.34), and a root-owned read-only worker home whose `config.toml` hashes to
- * the declared renderer output (`grokWorkerHomeAttestation.ts`).
+ * the declared renderer output and whose `skills/` is exactly the declared
+ * skills (`skillsSha256`; absent for none) (`grokWorkerHomeAttestation.ts`).
  *
  * It also refuses a deny list bubblewrap could not materialize
  * (`grokWorkerDenyPlacement.ts`), naming the entry and the ancestor that stops
@@ -100,11 +101,12 @@ export async function prepareGrokWorkerAttestation(input, profileOwner = { uid:
     if (workers.some((worker) => worker.home === undefined))
         throw new Error("Grok worker isolation attestation unavailable");
     await verifyGrokWorkerTmp(workers, profileOwner.tmp);
-    await verifyGrokWorkerHome(path.dirname(input.profilePath), input.configSha256);
+    // The home's read-only files share the profile's owner (root in production: `sandbox.toml` is one of them).
+    const configVariant = await verifyGrokWorkerHome(path.dirname(input.profilePath), input.configSha256, profileOwner.uid, input.skillsSha256);
     const events = await secureOpen(input.eventsPath, input.workerUid, input.brokerGid, 0o640, 16 * 1024 * 1024);
     try {
         const stat = await events.stat();
-        return { dev: Number(stat.dev), ino: Number(stat.ino), size: Number(stat.size), denyPaths };
+        return { dev: Number(stat.dev), ino: Number(stat.ino), size: Number(stat.size), denyPaths, configVariant };
     }
     finally {
         await events.close();

package/dist/runtime/grokWorkerHomeAttestation.d.ts

@@ -1,4 +1,6 @@
 import { type Stats } from "node:fs";
+import type { GrokWorkerConfigVariant } from "../contracts/grokBrokerTaskClock.js";
+export type GrokWorkerConfigPins = string | Readonly<Record<GrokWorkerConfigVariant, string>>;
 type Entry = Pick<Stats, "uid" | "mode" | "nlink"> & Partial<Pick<Stats, "dev" | "ino">> & Readonly<{
     isFile(): boolean;
     isDirectory(): boolean;
@@ -11,7 +13,7 @@ type Entry = Pick<Stats, "uid" | "mode" | "nlink"> & Partial<Pick<Stats, "dev" |
  * so the directory is worker-group writable — but root-owned and sticky, so a
  * worker can neither rename nor unlink a root-owned file in it. Every file
  * that decides a turn's behaviour is root-owned with no write bit: `config.toml`
- * (model, effort, MCP, skills), `sandbox.toml`, `trusted_folders.toml` (trust
+ * (model, effort, MCP, bundled-skill toggles), `sandbox.toml`, `trusted_folders.toml` (trust
  * would re-enable cwd `AGENTS.md` and project skills), and the managed and
  * requirements layers that can override user config. A missing file fails
  * too: the worker could create it.
@@ -20,11 +22,55 @@ type Entry = Pick<Stats, "uid" | "mode" | "nlink"> & Partial<Pick<Stats, "dev" |
  */
 export declare function assertGrokWorkerHomeEntries(entries: Readonly<Record<string, Entry | undefined>>, rootUid?: number): void;
 /** The worker's `config.toml` must be exactly the renderer's bytes for the declared policy. */
-export declare function assertGrokWorkerConfigBytes(bytes: Uint8Array, configSha256: string): void;
+export declare function assertGrokWorkerConfigBytes(bytes: Uint8Array, pins: GrokWorkerConfigPins): GrokWorkerConfigVariant;
 /**
- * Attests the worker home layout and that `config.toml` is exactly the
- * renderer's bytes for the declared model policy (`configSha256`).
+ * The worker's `$GROK_HOME/skills` must be exactly the declared skills.
+ *
+ * Grok loads that directory as user-scoped skills even in an untrusted
+ * workspace, and `$GROK_HOME` is worker-group writable, so a worker could plant
+ * a skill there for its next turn. With no `skillsSha256` declared the
+ * directory must be absent (or an empty root-owned read-only directory); with
+ * one declared, every entry must be root-owned with no write bit and the tree
+ * must hash to it. A worker-created or worker-modified tree fails either way.
+ */
+export declare function verifyGrokWorkerSkills(grokHome: string, skillsSha256: string | undefined, rootUid?: number): Promise<void>;
+/**
+ * Every other skill root Grok discovers at user scope, which the worker could
+ * plant into: under `$GROK_HOME` (root-owned but worker-group writable and
+ * sticky, so the worker can create new entries) and under the worker's own
+ * `$HOME` (the launcher exports `HOME=<home>` and `GROK_HOME=<home>/.grok`;
+ * `<home>` is worker-owned). Only `$GROK_HOME/skills` may carry skills, and only
+ * the declared ones; each root here must be absent, or an empty root-owned
+ * directory with no write bit.
+ *
+ * Set from `grok inspect` with scratch `HOME`/`GROK_HOME` and no network
+ * (1.0.60: every root below listed a planted skill or command; `.codex/skills`,
+ * `.ai/skills`, `$HOME/.config/*` and `$HOME/.agents/plugins` did not) and from
+ * the pinned 1.0.34 binary's own skills table (`~/.grok/{skills,commands}`,
+ * `~/.claude/{skills,commands}`, `~/.cursor/skills`, `.agents/{skills,commands}`
+ * at each tier). `bundled/skills` is the bundled-skill cache: never created on
+ * 1.0.34 (P0 container evidence), but a skill planted there loads with a name
+ * `[skills] disabled` does not cover. `plugins/` folders load their skills and
+ * commands as trusted user plugins.
+ */
+export declare const GROK_WORKER_FOREIGN_SKILL_ROOTS: Readonly<{
+    grokHome: readonly ["commands", "bundled/skills", "plugins"];
+    home: readonly [".agents/skills", ".agents/commands", ".claude/skills", ".claude/commands", ".cursor/skills", ".cursor/commands"];
+}>;
+/**
+ * Refuses a foreign skill root (`GROK_WORKER_FOREIGN_SKILL_ROOTS`) that exists
+ * and is not an empty root-owned read-only directory. A deployment that never
+ * creates them passes unchanged. `grokHome` must be `<home>/.grok`, the
+ * launcher's layout, so `<home>` is its parent.
+ */
+export declare function verifyGrokWorkerForeignSkillRoots(grokHome: string, rootUid?: number): Promise<void>;
+/**
+ * Attests the worker home layout, that `config.toml` is exactly the
+ * renderer's bytes for the declared model policy (`configSha256`), that
+ * `skills/` is exactly the declared skills (`skillsSha256`, absent for none),
+ * and that no other user skill root holds anything
+ * (`verifyGrokWorkerForeignSkillRoots`).
  */
-export declare function verifyGrokWorkerHome(grokHome: string, configSha256: string, rootUid?: number): Promise<void>;
+export declare function verifyGrokWorkerHome(grokHome: string, configSha256: GrokWorkerConfigPins, rootUid?: number, skillsSha256?: string): Promise<GrokWorkerConfigVariant>;
 export {};
 //# sourceMappingURL=grokWorkerHomeAttestation.d.ts.map

package/dist/runtime/grokWorkerHomeAttestation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokWorkerHomeAttestation.d.ts","sourceRoot":"","sources":["../../src/runtime/grokWorkerHomeAttestation.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAMhD,KAAK,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC;IAAE,MAAM,IAAI,OAAO,CAAC;IAAC,WAAW,IAAI,OAAO,CAAC;IAAC,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AAG9K;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,OAAO,GAAE,MAA2B,GAAG,IAAI,CAS5I;AAED,+FAA+F;AAC/F,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAEzF;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,GAAE,MAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAetI"}
+{"version":3,"file":"grokWorkerHomeAttestation.d.ts","sourceRoot":"","sources":["../../src/runtime/grokWorkerHomeAttestation.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAKhD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAInF,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9F,KAAK,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC;IAAE,MAAM,IAAI,OAAO,CAAC;IAAC,WAAW,IAAI,OAAO,CAAC;IAAC,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AAG9K;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,OAAO,GAAE,MAA2B,GAAG,IAAI,CAS5I;AAED,+FAA+F;AAC/F,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,oBAAoB,GAAG,uBAAuB,CAQlH;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,GAAE,MAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAKpJ;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,+BAA+B;;;EAG1C,CAAC;AAEH;;;;;GAKG;AACH,wBAAsB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,MAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB7H;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,oBAAoB,EAAE,OAAO,GAAE,MAA2B,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAkB9L"}

package/dist/runtime/grokWorkerHomeAttestation.js

@@ -1,8 +1,10 @@
 import { createHash } from "node:crypto";
 import { constants } from "node:fs";
-import { lstat, open } from "node:fs/promises";
+import { lstat, open, readdir } from "node:fs/promises";
 import path from "node:path";
 import { GROK_ENGINE_BROKER } from "../contracts/runtimeContractManifest.js";
+import { readAgentSkillsDirectory } from "./agentSkillsDirectory.js";
+import { GROK_WORKER_SKILLS_LAYOUT, grokWorkerSkillsSha256 } from "./grokWorkerSkills.js";
 const HOME = GROK_ENGINE_BROKER.worker.home;
 /**
  * The worker must not be able to change what Grok reads before its next turn.
@@ -11,7 +13,7 @@ const HOME = GROK_ENGINE_BROKER.worker.home;
  * so the directory is worker-group writable — but root-owned and sticky, so a
  * worker can neither rename nor unlink a root-owned file in it. Every file
  * that decides a turn's behaviour is root-owned with no write bit: `config.toml`
- * (model, effort, MCP, skills), `sandbox.toml`, `trusted_folders.toml` (trust
+ * (model, effort, MCP, bundled-skill toggles), `sandbox.toml`, `trusted_folders.toml` (trust
  * would re-enable cwd `AGENTS.md` and project skills), and the managed and
  * requirements layers that can override user config. A missing file fails
  * too: the worker could create it.
@@ -30,15 +32,105 @@ export function assertGrokWorkerHomeEntries(entries, rootUid = HOME.directory.ui
     }
 }
 /** The worker's `config.toml` must be exactly the renderer's bytes for the declared policy. */
-export function assertGrokWorkerConfigBytes(bytes, configSha256) {
-    if (!/^[0-9a-f]{64}$/u.test(configSha256) || createHash("sha256").update(bytes).digest("hex") !== configSha256)
+export function assertGrokWorkerConfigBytes(bytes, pins) {
+    const digest = createHash("sha256").update(bytes).digest("hex");
+    const variants = typeof pins === "string" ? { unclocked: pins } : pins;
+    for (const variant of ["unclocked", "clocked"]) {
+        const pin = variants[variant];
+        if (pin !== undefined && /^[0-9a-f]{64}$/u.test(pin) && digest === pin)
+            return variant;
+    }
+    throw unavailable();
+}
+/**
+ * The worker's `$GROK_HOME/skills` must be exactly the declared skills.
+ *
+ * Grok loads that directory as user-scoped skills even in an untrusted
+ * workspace, and `$GROK_HOME` is worker-group writable, so a worker could plant
+ * a skill there for its next turn. With no `skillsSha256` declared the
+ * directory must be absent (or an empty root-owned read-only directory); with
+ * one declared, every entry must be root-owned with no write bit and the tree
+ * must hash to it. A worker-created or worker-modified tree fails either way.
+ */
+export async function verifyGrokWorkerSkills(grokHome, skillsSha256, rootUid = HOME.directory.uid) {
+    if (skillsSha256 !== undefined && !/^[0-9a-f]{64}$/u.test(skillsSha256))
+        throw unavailable();
+    let skills;
+    try {
+        skills = await readAgentSkillsDirectory(path.join(grokHome, GROK_WORKER_SKILLS_LAYOUT.relativePath), { ownerUid: rootUid, readOnly: true });
+    }
+    catch {
+        throw unavailable();
+    }
+    if (grokWorkerSkillsSha256(skills ?? []) !== (skillsSha256 ?? grokWorkerSkillsSha256([])))
+        throw unavailable();
+}
+/**
+ * Every other skill root Grok discovers at user scope, which the worker could
+ * plant into: under `$GROK_HOME` (root-owned but worker-group writable and
+ * sticky, so the worker can create new entries) and under the worker's own
+ * `$HOME` (the launcher exports `HOME=<home>` and `GROK_HOME=<home>/.grok`;
+ * `<home>` is worker-owned). Only `$GROK_HOME/skills` may carry skills, and only
+ * the declared ones; each root here must be absent, or an empty root-owned
+ * directory with no write bit.
+ *
+ * Set from `grok inspect` with scratch `HOME`/`GROK_HOME` and no network
+ * (1.0.60: every root below listed a planted skill or command; `.codex/skills`,
+ * `.ai/skills`, `$HOME/.config/*` and `$HOME/.agents/plugins` did not) and from
+ * the pinned 1.0.34 binary's own skills table (`~/.grok/{skills,commands}`,
+ * `~/.claude/{skills,commands}`, `~/.cursor/skills`, `.agents/{skills,commands}`
+ * at each tier). `bundled/skills` is the bundled-skill cache: never created on
+ * 1.0.34 (P0 container evidence), but a skill planted there loads with a name
+ * `[skills] disabled` does not cover. `plugins/` folders load their skills and
+ * commands as trusted user plugins.
+ */
+export const GROK_WORKER_FOREIGN_SKILL_ROOTS = Object.freeze({
+    grokHome: Object.freeze(["commands", "bundled/skills", "plugins"]),
+    home: Object.freeze([".agents/skills", ".agents/commands", ".claude/skills", ".claude/commands", ".cursor/skills", ".cursor/commands"])
+});
+/**
+ * Refuses a foreign skill root (`GROK_WORKER_FOREIGN_SKILL_ROOTS`) that exists
+ * and is not an empty root-owned read-only directory. A deployment that never
+ * creates them passes unchanged. `grokHome` must be `<home>/.grok`, the
+ * launcher's layout, so `<home>` is its parent.
+ */
+export async function verifyGrokWorkerForeignSkillRoots(grokHome, rootUid = HOME.directory.uid) {
+    if (path.basename(grokHome) !== ".grok")
         throw unavailable();
+    const home = path.dirname(grokHome);
+    const roots = [...GROK_WORKER_FOREIGN_SKILL_ROOTS.grokHome.map((root) => path.join(grokHome, root)), ...GROK_WORKER_FOREIGN_SKILL_ROOTS.home.map((root) => path.join(home, root))];
+    for (const root of roots) {
+        let entry;
+        try {
+            entry = await lstat(root);
+        }
+        catch (error) {
+            // Absent, or a parent that is not a directory: Grok finds nothing there either.
+            if (["ENOENT", "ENOTDIR"].includes(error.code ?? ""))
+                continue;
+            throw unavailable();
+        }
+        if (entry.isSymbolicLink() || !entry.isDirectory() || entry.uid !== rootUid || (Number(entry.mode) & 0o7222) !== 0)
+            throw unavailable();
+        let children;
+        try {
+            children = await readdir(root);
+        }
+        catch {
+            throw unavailable();
+        }
+        if (children.length !== 0)
+            throw unavailable();
+    }
 }
 /**
- * Attests the worker home layout and that `config.toml` is exactly the
- * renderer's bytes for the declared model policy (`configSha256`).
+ * Attests the worker home layout, that `config.toml` is exactly the
+ * renderer's bytes for the declared model policy (`configSha256`), that
+ * `skills/` is exactly the declared skills (`skillsSha256`, absent for none),
+ * and that no other user skill root holds anything
+ * (`verifyGrokWorkerForeignSkillRoots`).
  */
-export async function verifyGrokWorkerHome(grokHome, configSha256, rootUid = HOME.directory.uid) {
+export async function verifyGrokWorkerHome(grokHome, configSha256, rootUid = HOME.directory.uid, skillsSha256) {
     const entries = {};
     for (const name of [".", HOME.sessionsDirectory.relativePath, ...HOME.readOnlyFiles.names]) {
         try {
@@ -57,7 +149,10 @@ export async function verifyGrokWorkerHome(grokHome, configSha256, rootUid = HOM
         // Same inode as the lstat above, as in `secureOpen`: a rename between the two cannot swap in other bytes.
         if (!opened.isFile() || opened.size > 65_536 || opened.dev !== before.dev || opened.ino !== before.ino || opened.uid !== before.uid || opened.mode !== before.mode || opened.nlink !== 1)
             throw unavailable();
-        assertGrokWorkerConfigBytes(await handle.readFile(), configSha256);
+        const variant = assertGrokWorkerConfigBytes(await handle.readFile(), configSha256);
+        await verifyGrokWorkerSkills(grokHome, skillsSha256, rootUid);
+        await verifyGrokWorkerForeignSkillRoots(grokHome, rootUid);
+        return variant;
     }
     catch {
         throw unavailable();

package/dist/runtime/grokWorkerSkills.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Where root provisioning renders the agent's declared skills inside the worker
+ * home (`$GROK_HOME/skills`), and what every entry must be: root-owned, no
+ * write bit. Grok discovers that directory as user-scoped skills even in an
+ * untrusted workspace. Absent when the registration declares no `skillsSha256`.
+ *
+ * Deliberately *not* folded into `RUNTIME_CONTRACT_MANIFEST`, as with
+ * `TURN_USAGE_LEDGER`: the manifest's canonical bytes are digest-pinned by
+ * Spawnfile and attested against the selected runtime image, so a new key
+ * there makes every pinned image fail to attest. Only Daimon reads this layout
+ * (the renderer below and the broker's pre-turn attestation); Spawnfile
+ * consumes it through `renderGrokWorkerSkillsTree`.
+ */
+export declare const GROK_WORKER_SKILLS_LAYOUT: Readonly<{
+    readonly relativePath: "skills";
+    readonly uid: 0;
+    readonly gid: 0;
+    readonly directoryMode: 365;
+    readonly fileMode: 292;
+    readonly digestVersion: "noopolis.daimon.grok-worker-skills.v1";
+}>;
+/**
+ * One file of a declared agent skill, relative to the skill's own directory.
+ * `SKILL.md` is required; supporting files (references, scripts) are optional.
+ */
+export type AgentSkillFile = Readonly<{
+    path: string;
+    content: string;
+}>;
+/** One declared agent skill: its directory name and every file under it. */
+export type AgentSkill = Readonly<{
+    name: string;
+    files: readonly AgentSkillFile[];
+}>;
+/**
+ * The engine-neutral skills input. It is the compiled workspace tree every
+ * engine is given — Spawnfile lowers declared skills (and Moltnet installs its
+ * own) into `<workspace>/.agents/skills/<name>/SKILL.md`, which Codex reads in
+ * place. A brokered Grok worker cannot read it there: its workspace stays
+ * untrusted, so root provisioning renders the same skills into
+ * `$GROK_HOME/skills` instead.
+ */
+export declare const AGENT_SKILLS_WORKSPACE_DIRECTORY: ".agents/skills";
+export declare const GROK_WORKER_SKILLS_VERSION: "noopolis.daimon.grok-worker-skills.v1";
+export declare const AGENT_SKILLS_BOUNDS: Readonly<{
+    skills: 64;
+    filesPerSkill: 64;
+    fileBytes: 262144;
+    totalBytes: 4194304;
+    depth: 8;
+}>;
+/**
+ * Strict, canonicalizing parser: names and path components are plain
+ * identifiers (no `.`/`..`, no hidden entries, no separators other than `/`),
+ * every skill carries `SKILL.md`, nothing collides, and the sizes are bounded.
+ * Output is sorted by name and path so equal sets digest equally.
+ */
+export declare function parseAgentSkills(value: unknown): readonly AgentSkill[];
+/**
+ * sha256 over the canonical description of the rendered tree: every skill's
+ * name and, per file, its path, byte length and content digest. The broker
+ * attests `$GROK_HOME/skills` against it before every turn, and the Grok broker
+ * projection carries it, so the slot preflight receipt and every recomputed
+ * projection bind the exact skills a subject was given.
+ */
+export declare function grokWorkerSkillsSha256(skills: readonly AgentSkill[]): string;
+/** One entry root provisioning creates, relative to `$GROK_HOME`, owned `uid:gid`. */
+export type GrokWorkerSkillsEntry = Readonly<{
+    path: string;
+    kind: "directory" | "file";
+    uid: number;
+    gid: number;
+    mode: number;
+    content?: string;
+}>;
+/**
+ * Every directory and file root provisioning writes for these skills, parents
+ * before children: `skills/` itself, each `skills/<name>/`, any intermediate
+ * directory, and each file. Directories are `root:root 0555` and files
+ * `root:root 0444` (single link), so a worker-uid process can read them but
+ * neither change nor replace them; `$GROK_HOME` is root-owned and sticky, so the
+ * worker cannot rename `skills/` away either. No skills renders nothing: the
+ * directory must then be absent, exactly as before this layout existed.
+ */
+export declare function renderGrokWorkerSkillsTree(skills: readonly AgentSkill[]): readonly GrokWorkerSkillsEntry[];
+//# sourceMappingURL=grokWorkerSkills.d.ts.map

package/dist/runtime/grokWorkerSkills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grokWorkerSkills.d.ts","sourceRoot":"","sources":["../../src/runtime/grokWorkerSkills.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB;;;;;;;EAE3B,CAAC;AAGZ;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACzE,4EAA4E;AAC5E,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;CAAE,CAAC,CAAC;AAEtF;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,EAAG,gBAAyB,CAAC;AAC1E,eAAO,MAAM,0BAA0B,yCAAuB,CAAC;AAC/D,eAAO,MAAM,mBAAmB;;;;;;EAAwG,CAAC;AASzI;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,UAAU,EAAE,CA6BtE;AAID;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,CAO5E;AAED,sFAAsF;AACtF,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAErJ;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,SAAS,qBAAqB,EAAE,CAiB1G"}

package/dist/runtime/grokWorkerSkills.js

@@ -0,0 +1,135 @@
+import { createHash } from "node:crypto";
+import { canonicalJson } from "../contracts/canonicalJson.js";
+/**
+ * Where root provisioning renders the agent's declared skills inside the worker
+ * home (`$GROK_HOME/skills`), and what every entry must be: root-owned, no
+ * write bit. Grok discovers that directory as user-scoped skills even in an
+ * untrusted workspace. Absent when the registration declares no `skillsSha256`.
+ *
+ * Deliberately *not* folded into `RUNTIME_CONTRACT_MANIFEST`, as with
+ * `TURN_USAGE_LEDGER`: the manifest's canonical bytes are digest-pinned by
+ * Spawnfile and attested against the selected runtime image, so a new key
+ * there makes every pinned image fail to attest. Only Daimon reads this layout
+ * (the renderer below and the broker's pre-turn attestation); Spawnfile
+ * consumes it through `renderGrokWorkerSkillsTree`.
+ */
+export const GROK_WORKER_SKILLS_LAYOUT = Object.freeze({
+    relativePath: "skills", uid: 0, gid: 0, directoryMode: 0o555, fileMode: 0o444, digestVersion: "noopolis.daimon.grok-worker-skills.v1"
+});
+const LAYOUT = GROK_WORKER_SKILLS_LAYOUT;
+/**
+ * The engine-neutral skills input. It is the compiled workspace tree every
+ * engine is given — Spawnfile lowers declared skills (and Moltnet installs its
+ * own) into `<workspace>/.agents/skills/<name>/SKILL.md`, which Codex reads in
+ * place. A brokered Grok worker cannot read it there: its workspace stays
+ * untrusted, so root provisioning renders the same skills into
+ * `$GROK_HOME/skills` instead.
+ */
+export const AGENT_SKILLS_WORKSPACE_DIRECTORY = ".agents/skills";
+export const GROK_WORKER_SKILLS_VERSION = LAYOUT.digestVersion;
+export const AGENT_SKILLS_BOUNDS = Object.freeze({ skills: 64, filesPerSkill: 64, fileBytes: 262_144, totalBytes: 4_194_304, depth: 8 });
+const COMPONENT = /^[A-Za-z0-9_][A-Za-z0-9._-]{0,127}$/u;
+const invalid = (detail) => new TypeError(`invalid agent skills: ${detail}`);
+const plain = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+const exact = (value, keys) => Object.keys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
+const byteLength = (content) => Buffer.byteLength(content, "utf8");
+/**
+ * Strict, canonicalizing parser: names and path components are plain
+ * identifiers (no `.`/`..`, no hidden entries, no separators other than `/`),
+ * every skill carries `SKILL.md`, nothing collides, and the sizes are bounded.
+ * Output is sorted by name and path so equal sets digest equally.
+ */
+export function parseAgentSkills(value) {
+    if (!Array.isArray(value) || value.length > AGENT_SKILLS_BOUNDS.skills)
+        throw invalid("expected a bounded array");
+    let total = 0;
+    const names = new Set();
+    const skills = value.map((entry) => {
+        if (!plain(entry) || !exact(entry, ["name", "files"]) || typeof entry.name !== "string" || !COMPONENT.test(entry.name))
+            throw invalid(`skill name ${plain(entry) && typeof entry.name === "string" ? JSON.stringify(entry.name) : "(missing)"}`);
+        if (names.has(entry.name))
+            throw invalid(`duplicate skill ${entry.name}`);
+        names.add(entry.name);
+        if (!Array.isArray(entry.files) || entry.files.length === 0 || entry.files.length > AGENT_SKILLS_BOUNDS.filesPerSkill)
+            throw invalid(`files of ${entry.name}`);
+        const paths = new Set();
+        const files = entry.files.map((file) => {
+            if (!plain(file) || !exact(file, ["path", "content"]) || typeof file.path !== "string" || typeof file.content !== "string")
+                throw invalid(`file ${plain(file) && typeof file.path === "string" ? JSON.stringify(`${entry.name}/${file.path}`) : `of ${entry.name}`}`);
+            const parts = file.path.split("/");
+            if (parts.length > AGENT_SKILLS_BOUNDS.depth || parts.some((part) => !COMPONENT.test(part)))
+                throw invalid(`path ${JSON.stringify(`${entry.name}/${file.path}`)}`);
+            const bytes = byteLength(file.content);
+            if (bytes > AGENT_SKILLS_BOUNDS.fileBytes)
+                throw invalid(`size of ${entry.name}/${file.path}`);
+            total += bytes;
+            if (paths.has(file.path))
+                throw invalid(`duplicate path ${entry.name}/${file.path}`);
+            paths.add(file.path);
+            try {
+                canonicalJson(file.content);
+            }
+            catch {
+                throw invalid(`content of ${entry.name}/${file.path} is not Unicode text`);
+            }
+            return Object.freeze({ path: file.path, content: file.content });
+        });
+        // A file may not also be the directory of another file.
+        for (const candidate of paths)
+            if ([...paths].some((other) => other.startsWith(`${candidate}/`)))
+                throw invalid(`path collision ${entry.name}/${candidate}`);
+        if (!paths.has("SKILL.md"))
+            throw invalid(`${entry.name} has no SKILL.md`);
+        return Object.freeze({ name: entry.name, files: Object.freeze(files.sort((a, b) => compare(a.path, b.path))) });
+    });
+    if (total > AGENT_SKILLS_BOUNDS.totalBytes)
+        throw invalid("total size");
+    return Object.freeze(skills.sort((a, b) => compare(a.name, b.name)));
+}
+const compare = (left, right) => left < right ? -1 : left > right ? 1 : 0;
+/**
+ * sha256 over the canonical description of the rendered tree: every skill's
+ * name and, per file, its path, byte length and content digest. The broker
+ * attests `$GROK_HOME/skills` against it before every turn, and the Grok broker
+ * projection carries it, so the slot preflight receipt and every recomputed
+ * projection bind the exact skills a subject was given.
+ */
+export function grokWorkerSkillsSha256(skills) {
+    const parsed = parseAgentSkills(skills);
+    const description = { version: GROK_WORKER_SKILLS_VERSION, skills: parsed.map((skill) => ({
+            name: skill.name,
+            files: skill.files.map((file) => ({ path: file.path, bytes: byteLength(file.content), sha256: createHash("sha256").update(file.content, "utf8").digest("hex") }))
+        })) };
+    return createHash("sha256").update(canonicalJson(description)).digest("hex");
+}
+/**
+ * Every directory and file root provisioning writes for these skills, parents
+ * before children: `skills/` itself, each `skills/<name>/`, any intermediate
+ * directory, and each file. Directories are `root:root 0555` and files
+ * `root:root 0444` (single link), so a worker-uid process can read them but
+ * neither change nor replace them; `$GROK_HOME` is root-owned and sticky, so the
+ * worker cannot rename `skills/` away either. No skills renders nothing: the
+ * directory must then be absent, exactly as before this layout existed.
+ */
+export function renderGrokWorkerSkillsTree(skills) {
+    const parsed = parseAgentSkills(skills);
+    if (parsed.length === 0)
+        return Object.freeze([]);
+    const directory = (relative) => Object.freeze({ path: relative, kind: "directory", uid: LAYOUT.uid, gid: LAYOUT.gid, mode: LAYOUT.directoryMode });
+    const entries = [directory(LAYOUT.relativePath)];
+    const seen = new Set([LAYOUT.relativePath]);
+    for (const skill of parsed) {
+        for (const file of skill.files) {
+            const parts = [LAYOUT.relativePath, skill.name, ...file.path.split("/")];
+            for (let depth = 2; depth < parts.length; depth += 1) {
+                const relative = parts.slice(0, depth).join("/");
+                if (!seen.has(relative)) {
+                    seen.add(relative);
+                    entries.push(directory(relative));
+                }
+            }
+            entries.push(Object.freeze({ path: parts.join("/"), kind: "file", uid: LAYOUT.uid, gid: LAYOUT.gid, mode: LAYOUT.fileMode, content: file.content }));
+        }
+    }
+    return Object.freeze(entries);
+}

package/dist/runtime/index.d.ts

@@ -1,4 +1,8 @@
+export { brokerTaskClockFileFor } from "./grokBrokerSlot.js";
+export { GROK_BROKER_TASK_CLOCK, GROK_BROKER_TASK_CLOCK_PRELOAD_PATH, GROK_BROKER_TASK_CLOCK_FILE_PATH, type GrokWorkerConfigVariant } from "../contracts/grokBrokerTaskClock.js";
 export * from "./organizationRuntime.js";
+export { relocateRuntimeConfig, type RuntimeConfigLocation } from "./relocateRuntimeConfig.js";
+export { parseTaskClock, TASK_CLOCK_VERSION } from "./taskClock.js";
 export * from "./contractManifest.js";
 export * from "./agySubscriptionRealm.js";
 export { createOrganizationRuntimeHost } from "./organizationRuntimeHost.js";
@@ -14,7 +18,10 @@ export { GROK_INFERENCE_AUTH_STALE_BODY } from "./grokInferenceProxy.js";
 export { assertGrokWorkerDenyPathPlacement, assertGrokWorkerDenyPathShape, assertGrokWorkerDenyPathsPlaceable, GROK_WORKER_BASE_PROFILE_GRANTS, grokWorkerCanSearch, grokWorkerDenyPathChain, GrokWorkerDenyPlacementError, readGrokWorkerDenyPathChain } from "./grokWorkerDenyPlacement.js";
 export type { GrokWorkerDenyPathEntry, GrokWorkerDenyPathStep, GrokWorkerDenyPathWorker } from "./grokWorkerDenyPlacement.js";
 export { grokWorkerSandboxProfileSha256, renderGrokWorkerSandboxProfile } from "./grokWorkerSandboxProfile.js";
-export { engineBrokerRequestLedgerPathFor, engineBrokerSealLedgerPathFor, parseEngineBrokerServiceConfig, type EngineBrokerServiceConfig, type EngineBrokerServiceRegistration } from "./engineBrokerServiceConfig.js";
+export { AGENT_SKILLS_BOUNDS, AGENT_SKILLS_WORKSPACE_DIRECTORY, GROK_WORKER_SKILLS_LAYOUT, GROK_WORKER_SKILLS_VERSION, grokWorkerSkillsSha256, parseAgentSkills, renderGrokWorkerSkillsTree, type AgentSkill, type AgentSkillFile, type GrokWorkerSkillsEntry } from "./grokWorkerSkills.js";
+export { readAgentSkillsDirectory, type AgentSkillsTreePolicy } from "./agentSkillsDirectory.js";
+export { GROK_WORKER_FOREIGN_SKILL_ROOTS, verifyGrokWorkerForeignSkillRoots, verifyGrokWorkerSkills } from "./grokWorkerHomeAttestation.js";
+export { ENGINE_BROKER_SERVICE_V3, engineBrokerRequestLedgerPathFor, engineBrokerSealLedgerPathFor, parseEngineBrokerServiceConfig, type EngineBrokerServiceConfig, type EngineBrokerServiceRegistration } from "./engineBrokerServiceConfig.js";
 export { TURN_SEAL_LEDGER, TURN_SEAL_LEDGER_VERSION } from "./engineBrokerSealLedger.js";
 export { DEFAULT_GROK_BROKER_TURN_LIMITS, ENGINE_BROKER_LIMIT_REASONS, type EngineBrokerLimitReason, type EngineBrokerTurnAccounting, type EngineBrokerTurnLimits, type EngineBrokerTurnUsage } from "./engineBrokerTurnAccounting.js";
 export { dedupeTurnUsageRows } from "./turnUsageLedger.js";
@@ -22,5 +29,6 @@ export { WakeTransitionLockBlockedError } from "./wakeAcceptanceStore.js";
 export { OFFLINE_RECONCILIATION_BLOCKED_CODE, OFFLINE_RECONCILIATION_REQUEST_SCHEMA, OFFLINE_RECONCILIATION_VERSION, assertOfflineReconciliationLeaseAvailable, OfflineTransitionReconciliationBlockedError, parseOfflineTransitionReconciliationRequest, reconcileOfflineWakeTransition, type OfflineDeploymentAttestation, type OfflineTransitionReconciliationAuthorizationContext, type OfflineTransitionReconciliationOptions, type OfflineTransitionReconciliationProofReceipt, type OfflineTransitionReconciliationReceipt, type OfflineTransitionReconciliationRequest, type OfflineTransitionReconciliationResult } from "./wakeAcceptanceReconciliation.js";
 export { MAX_WAKE_ACCEPTANCE_BYTES, MAX_WAKE_ACCEPTANCE_RECORD_BYTES, WAKE_ACCEPTANCE_VERSION, WAKE_ACCEPTANCE_REQUEST_SCHEMA, WAKE_RECEIPT_STATUS_VERSION, WAKE_RECEIPT_STATUS_SCHEMA, WAKE_V2_VERSION, parseWakeAcceptanceRequest, wakeAcceptanceDigest, type OrganizationRuntimeWakeAcceptance, type OrganizationRuntimeWakeAcceptanceRequest, type OrganizationRuntimeWakeAcceptanceResult, type OrganizationRuntimeWakeReceiptStatus, type WakeReceiptCode, type WakeReceiptState } from "./wakeAcceptanceTypes.js";
 export type { OrganizationRuntimeControlHost, OrganizationRuntimeControlOptions } from "./organizationRuntimeControl.js";
-export { EngineBrokerControlClient, EngineBrokerInferenceGrantRefused, type EngineBrokerInferenceGrant } from "./engineBrokerControlClient.js";
+export { EngineBrokerControlClient, EngineBrokerInferenceGrantRefused, type EngineBrokerInferenceGrant, type EngineBrokerTurnOptions } from "./engineBrokerControlClient.js";
+export type { GrokBrokerProviderClockObservation } from "./grokBrokerProviderClock.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,oCAAoC,EAAE,MAAM,iCAAiC,CAAC;AACvF,OAAO,EAAE,gCAAgC,EAAE,yCAAyC,EAClF,KAAK,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,gCAAgC,EAAE,uCAAuC,EAC5I,6CAA6C,EAAE,KAAK,gCAAgC,EAAE,KAAK,uCAAuC,EAAE,MAAM,2BAA2B,CAAC;AACxK,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,6BAA6B,EAAE,KAAK,0BAA0B,EACjK,8BAA8B,EAAE,KAAK,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,yCAAyC,EAAE,KAAK,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAC5P,OAAO,EAAE,6BAA6B,EAAE,qCAAqC,EAAE,KAAK,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACjK,OAAO,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACzJ,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,iCAAiC,EAAE,6BAA6B,EAAE,kCAAkC,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC9R,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAC9H,OAAO,EAAE,8BAA8B,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/G,OAAO,EAAE,gCAAgC,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,KAAK,yBAAyB,EAAE,KAAK,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACvN,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACzF,OAAO,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,KAAK,uBAAuB,EAAE,KAAK,0BAA0B,EAClI,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EACL,mCAAmC,EACnC,qCAAqC,EACrC,8BAA8B,EAC9B,yCAAyC,EACzC,2CAA2C,EAC3C,2CAA2C,EAC3C,8BAA8B,EAC9B,KAAK,4BAA4B,EACjC,KAAK,mDAAmD,EACxD,KAAK,sCAAsC,EAC3C,KAAK,2CAA2C,EAChD,KAAK,sCAAsC,EAC3C,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC3C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,EAC3B,0BAA0B,EAC1B,eAAe,EACf,0BAA0B,EAC1B,oBAAoB,EACpB,KAAK,iCAAiC,EACtC,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,oCAAoC,EACzC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,8BAA8B,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACzH,OAAO,EAAE,yBAAyB,EAAE,iCAAiC,EAAE,KAAK,0BAA0B,EAAE,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,mCAAmC,EAAE,gCAAgC,EAAE,KAAK,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAClL,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpE,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,oCAAoC,EAAE,MAAM,iCAAiC,CAAC;AACvF,OAAO,EAAE,gCAAgC,EAAE,yCAAyC,EAClF,KAAK,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,gCAAgC,EAAE,uCAAuC,EAC5I,6CAA6C,EAAE,KAAK,gCAAgC,EAAE,KAAK,uCAAuC,EAAE,MAAM,2BAA2B,CAAC;AACxK,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,6BAA6B,EAAE,KAAK,0BAA0B,EACjK,8BAA8B,EAAE,KAAK,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,yCAAyC,EAAE,KAAK,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAC5P,OAAO,EAAE,6BAA6B,EAAE,qCAAqC,EAAE,KAAK,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACjK,OAAO,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACzJ,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,iCAAiC,EAAE,6BAA6B,EAAE,kCAAkC,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC9R,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAC9H,OAAO,EAAE,8BAA8B,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/G,OAAO,EAAE,mBAAmB,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC7R,OAAO,EAAE,wBAAwB,EAAE,KAAK,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACjG,OAAO,EAAE,+BAA+B,EAAE,iCAAiC,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC5I,OAAO,EAAE,wBAAwB,EAAE,gCAAgC,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,KAAK,yBAAyB,EAAE,KAAK,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjP,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACzF,OAAO,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,KAAK,uBAAuB,EAAE,KAAK,0BAA0B,EAClI,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EACL,mCAAmC,EACnC,qCAAqC,EACrC,8BAA8B,EAC9B,yCAAyC,EACzC,2CAA2C,EAC3C,2CAA2C,EAC3C,8BAA8B,EAC9B,KAAK,4BAA4B,EACjC,KAAK,mDAAmD,EACxD,KAAK,sCAAsC,EAC3C,KAAK,2CAA2C,EAChD,KAAK,sCAAsC,EAC3C,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC3C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,EAC3B,0BAA0B,EAC1B,eAAe,EACf,0BAA0B,EAC1B,oBAAoB,EACpB,KAAK,iCAAiC,EACtC,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,oCAAoC,EACzC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,8BAA8B,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACzH,OAAO,EAAE,yBAAyB,EAAE,iCAAiC,EAAE,KAAK,0BAA0B,EAAE,KAAK,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC7K,YAAY,EAAE,kCAAkC,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/runtime/index.js

@@ -1,4 +1,8 @@
+export { brokerTaskClockFileFor } from "./grokBrokerSlot.js";
+export { GROK_BROKER_TASK_CLOCK, GROK_BROKER_TASK_CLOCK_PRELOAD_PATH, GROK_BROKER_TASK_CLOCK_FILE_PATH } from "../contracts/grokBrokerTaskClock.js";
 export * from "./organizationRuntime.js";
+export { relocateRuntimeConfig } from "./relocateRuntimeConfig.js";
+export { parseTaskClock, TASK_CLOCK_VERSION } from "./taskClock.js";
 export * from "./contractManifest.js";
 export * from "./agySubscriptionRealm.js";
 export { createOrganizationRuntimeHost } from "./organizationRuntimeHost.js";
@@ -13,7 +17,10 @@ export { dedupeInferenceUsageRows, INFERENCE_USAGE_LEDGER_VERSION, GROK_INFERENC
 export { GROK_INFERENCE_AUTH_STALE_BODY } from "./grokInferenceProxy.js";
 export { assertGrokWorkerDenyPathPlacement, assertGrokWorkerDenyPathShape, assertGrokWorkerDenyPathsPlaceable, GROK_WORKER_BASE_PROFILE_GRANTS, grokWorkerCanSearch, grokWorkerDenyPathChain, GrokWorkerDenyPlacementError, readGrokWorkerDenyPathChain } from "./grokWorkerDenyPlacement.js";
 export { grokWorkerSandboxProfileSha256, renderGrokWorkerSandboxProfile } from "./grokWorkerSandboxProfile.js";
-export { engineBrokerRequestLedgerPathFor, engineBrokerSealLedgerPathFor, parseEngineBrokerServiceConfig } from "./engineBrokerServiceConfig.js";
+export { AGENT_SKILLS_BOUNDS, AGENT_SKILLS_WORKSPACE_DIRECTORY, GROK_WORKER_SKILLS_LAYOUT, GROK_WORKER_SKILLS_VERSION, grokWorkerSkillsSha256, parseAgentSkills, renderGrokWorkerSkillsTree } from "./grokWorkerSkills.js";
+export { readAgentSkillsDirectory } from "./agentSkillsDirectory.js";
+export { GROK_WORKER_FOREIGN_SKILL_ROOTS, verifyGrokWorkerForeignSkillRoots, verifyGrokWorkerSkills } from "./grokWorkerHomeAttestation.js";
+export { ENGINE_BROKER_SERVICE_V3, engineBrokerRequestLedgerPathFor, engineBrokerSealLedgerPathFor, parseEngineBrokerServiceConfig } from "./engineBrokerServiceConfig.js";
 export { TURN_SEAL_LEDGER, TURN_SEAL_LEDGER_VERSION } from "./engineBrokerSealLedger.js";
 export { DEFAULT_GROK_BROKER_TURN_LIMITS, ENGINE_BROKER_LIMIT_REASONS } from "./engineBrokerTurnAccounting.js";
 export { dedupeTurnUsageRows } from "./turnUsageLedger.js";

package/dist/runtime/organizationRuntime.d.ts

@@ -1,4 +1,6 @@
 import type { AttentionConfig } from "../contracts/attentionContract.js";
+import type { WakeMomentRecording } from "../contracts/wakeMomentContract.js";
+export type { WakeMomentRecording } from "../contracts/wakeMomentContract.js";
 import { ORGANIZATION_RUNTIME_CODEX_REASONING_EFFORTS, ORGANIZATION_RUNTIME_CODEX_WORKSPACE_NO_NETWORK_POLICY, ORGANIZATION_RUNTIME_CONFIG_SCHEMA, ORGANIZATION_RUNTIME_CONFIG_V2_SCHEMA, ORGANIZATION_RUNTIME_MAX_AGENTS, ORGANIZATION_RUNTIME_MAX_CONFIG_BYTES, ORGANIZATION_RUNTIME_MAX_INSTRUCTIONS_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_STRING_BYTES, ORGANIZATION_RUNTIME_MAX_STRING_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_WAKE_TEXT_BYTES, ORGANIZATION_RUNTIME_MAX_SCHEDULE_INTERVAL_MS, ORGANIZATION_RUNTIME_MAX_SCHEDULE_JITTER_SECONDS, ORGANIZATION_RUNTIME_V2_VERSION, ORGANIZATION_RUNTIME_VERSION } from "../contracts/organizationRuntimeContract.js";
 export { ORGANIZATION_RUNTIME_CODEX_REASONING_EFFORTS, ORGANIZATION_RUNTIME_CODEX_WORKSPACE_NO_NETWORK_POLICY, ORGANIZATION_RUNTIME_CONFIG_SCHEMA, ORGANIZATION_RUNTIME_CONFIG_V2_SCHEMA, ORGANIZATION_RUNTIME_MAX_AGENTS, ORGANIZATION_RUNTIME_MAX_CONFIG_BYTES, ORGANIZATION_RUNTIME_MAX_INSTRUCTIONS_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_STRING_BYTES, ORGANIZATION_RUNTIME_MAX_STRING_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_WAKE_TEXT_BYTES, ORGANIZATION_RUNTIME_MAX_SCHEDULE_INTERVAL_MS, ORGANIZATION_RUNTIME_MAX_SCHEDULE_JITTER_SECONDS, ORGANIZATION_RUNTIME_V2_VERSION, ORGANIZATION_RUNTIME_VERSION };
 export type OrganizationRuntimeEngineKind = "codex" | "grok" | "agy";
@@ -67,6 +69,7 @@ export type OrganizationRuntimeAgentConfig = Readonly<{
     runtimeHomePath: string;
     engine: OrganizationRuntimeEngineIntent;
     attention?: AttentionConfig;
+    recording?: WakeMomentRecording;
     schedule?: OrganizationRuntimeSchedule;
     mcp?: readonly OrganizationRuntimeMcpServer[];
     moltnet?: OrganizationRuntimeMoltnet;

package/dist/runtime/organizationRuntime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationRuntime.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EACL,4CAA4C,EAC5C,sDAAsD,EACtD,kCAAkC,EAClC,qCAAqC,EACrC,+BAA+B,EAC/B,qCAAqC,EACrC,gDAAgD,EAChD,qCAAqC,EACrC,0CAA0C,EAC1C,wCAAwC,EACxC,6CAA6C,EAC7C,gDAAgD,EAChD,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACL,4CAA4C,EAC5C,sDAAsD,EACtD,kCAAkC,EAClC,qCAAqC,EACrC,+BAA+B,EAC/B,qCAAqC,EACrC,gDAAgD,EAChD,qCAAqC,EACrC,0CAA0C,EAC1C,wCAAwC,EACxC,6CAA6C,EAC7C,gDAAgD,EAChD,+BAA+B,EAC/B,4BAA4B,EAC7B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AACrE;;;;;;;GAOG;AACH,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,aAAa,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AACvI,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,6BAA6B,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,qCAAqC,CAAA;CAAE,CAAC,CAAC;AAChM,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AACxQ,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,SAAS,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC,EAAE,CAAA;CAAE,CAAC,CAAC;AAClL,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACrH,MAAM,MAAM,2BAA2B,GACnC,QAAQ,CAAC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,GAC9B,QAAQ,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACzF,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACxG,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAC;IAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IAAC,GAAG,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,0BAA0B,CAAC;IAAC,MAAM,CAAC,EAAE,yBAAyB,CAAA;CAAE,CAAC,CAAC;AACjY,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,CAAC,2DAA2D;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9K,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,4BAA4B,GAAG,OAAO,+BAA+B,CAAC;IAAC,IAAI,EAAE,6BAA6B,CAAC;IAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAA;CAAE,CAAC,CAAC;AACpO,MAAM,MAAM,iCAAiC,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAChG,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,yBAAyB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAChM,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,4BAA4B,CAAA;CAAE,CAAC,CAAC;AAC3I,MAAM,MAAM,6BAA6B,GACrC,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GAC/I,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,iBAAiB,GAAG,cAAc,GAAG,eAAe,GAAG,YAAY,GAAG,wBAAwB,CAAA;CAAE,CAAC,GAClN,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,GAAG,cAAc,GAAG,qBAAqB,GAAG,qBAAqB,CAAA;CAAE,CAAC,GACnM,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvJ,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,iCAAiC,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAA;CAAE,CAAC,CAAC;AACtM,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,gDAAgD,CAAC;IAAC,KAAK,EAAE,iCAAiC,CAAC;IAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAA;CAAE,CAAC,CAAC;AAC7M,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAChH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,eAAe,GAAG,cAAc,GAAG,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvN,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,kDAAkD,CAAC;IAAC,KAAK,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC5L,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,8CAA8C,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAE5I,sEAAsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACtF,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7D,QAAQ,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAChG,IAAI,IAAI,OAAO,CAAC,qCAAqC,CAAC,CAAC;CACxD;AAED,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,mCAAmC,EACnC,iCAAiC,EAClC,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"organizationRuntime.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,YAAY,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EACL,4CAA4C,EAC5C,sDAAsD,EACtD,kCAAkC,EAClC,qCAAqC,EACrC,+BAA+B,EAC/B,qCAAqC,EACrC,gDAAgD,EAChD,qCAAqC,EACrC,0CAA0C,EAC1C,wCAAwC,EACxC,6CAA6C,EAC7C,gDAAgD,EAChD,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACL,4CAA4C,EAC5C,sDAAsD,EACtD,kCAAkC,EAClC,qCAAqC,EACrC,+BAA+B,EAC/B,qCAAqC,EACrC,gDAAgD,EAChD,qCAAqC,EACrC,0CAA0C,EAC1C,wCAAwC,EACxC,6CAA6C,EAC7C,gDAAgD,EAChD,+BAA+B,EAC/B,4BAA4B,EAC7B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AACrE;;;;;;;GAOG;AACH,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,aAAa,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AACvI,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,6BAA6B,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,qCAAqC,CAAA;CAAE,CAAC,CAAC;AAChM,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AACxQ,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,SAAS,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC,EAAE,CAAA;CAAE,CAAC,CAAC;AAClL,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACrH,MAAM,MAAM,2BAA2B,GACnC,QAAQ,CAAC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,GAC9B,QAAQ,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACzF,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACxG,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAC;IAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IAAC,GAAG,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,0BAA0B,CAAC;IAAC,MAAM,CAAC,EAAE,yBAAyB,CAAA;CAAE,CAAC,CAAC;AACla,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,CAAC,2DAA2D;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9K,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,4BAA4B,GAAG,OAAO,+BAA+B,CAAC;IAAC,IAAI,EAAE,6BAA6B,CAAC;IAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAA;CAAE,CAAC,CAAC;AACpO,MAAM,MAAM,iCAAiC,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAChG,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,yBAAyB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAChM,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,4BAA4B,CAAA;CAAE,CAAC,CAAC;AAC3I,MAAM,MAAM,6BAA6B,GACrC,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GAC/I,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,iBAAiB,GAAG,cAAc,GAAG,eAAe,GAAG,YAAY,GAAG,wBAAwB,CAAA;CAAE,CAAC,GAClN,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,GAAG,cAAc,GAAG,qBAAqB,GAAG,qBAAqB,CAAA;CAAE,CAAC,GACnM,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvJ,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,iCAAiC,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAA;CAAE,CAAC,CAAC;AACtM,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,gDAAgD,CAAC;IAAC,KAAK,EAAE,iCAAiC,CAAC;IAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAA;CAAE,CAAC,CAAC;AAC7M,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAChH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,eAAe,GAAG,cAAc,GAAG,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvN,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,kDAAkD,CAAC;IAAC,KAAK,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC5L,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,8CAA8C,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAE5I,sEAAsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACtF,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7D,QAAQ,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAChG,IAAI,IAAI,OAAO,CAAC,qCAAqC,CAAC,CAAC;CACxD;AAED,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,mCAAmC,EACnC,iCAAiC,EAClC,MAAM,iCAAiC,CAAC"}

package/dist/runtime/organizationRuntimeAdmission.d.ts

@@ -0,0 +1,6 @@
+import type { OrganizationRuntimeHost, OrganizationRuntimeWakeRequest, OrganizationRuntimeWakeResult } from "./organizationRuntime.js";
+export declare function wakeFromDurableInbox(host: OrganizationRuntimeHost, request: OrganizationRuntimeWakeRequest): Promise<OrganizationRuntimeWakeResult>;
+export declare function consumeDurableAdmission(request: OrganizationRuntimeWakeRequest): boolean;
+export declare function registerRecordingVerifier(host: OrganizationRuntimeHost, verify: (agentId: string) => Promise<void>): OrganizationRuntimeHost;
+export declare function verifyHostRecordingStore(host: OrganizationRuntimeHost, agentId: string): Promise<void>;
+//# sourceMappingURL=organizationRuntimeAdmission.d.ts.map

package/dist/runtime/organizationRuntimeAdmission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationRuntimeAdmission.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeAdmission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAMvI,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAIzJ;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAExF;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAG5I;AAED,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5G"}