spawnfile 0.1.14 → 0.1.18

package/dist/runtime/daimon/contractManifest.js

@@ -0,0 +1,335 @@
+import { createHash } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { SpawnfileError } from "../../shared/index.js";
+import { DAIMON_WAKE_MOMENTS, isDaimonWakeMoments } from "./wakeMoments.js";
+export const DAIMON_CONTRACT_MANIFEST_VERSION = "noopolis.daimon.runtime-contract-manifest.v5";
+export const DAIMON_CONTRACT_MANIFEST_SHA256 = "sha256:e39551277c6727c8807b1247e759f57addcee3f17f1405ebc927179647d64de6";
+export const DAIMON_CONTRACT_MANIFEST_FILE = "contract-manifest.json";
+export const DAIMON_CONTRACT_MANIFEST_DIGEST_FILE = "contract-manifest.sha256";
+export const DAIMON_RUNTIME_HOME_ROOT = "/var/lib/spawnfile/instances/daimon";
+export const DAIMON_ENGINE_KINDS = ["agy", "codex", "grok"];
+export const DAIMON_ORGANIZATION_RUNTIME_CONFIG_VERSIONS = ["noopolis.daimon.organization-runtime.v1", "noopolis.daimon.organization-runtime.v2"];
+export const DAIMON_ENGINE_CREDENTIALS = {
+    codex: {
+        destinationRelativePath: ".codex/auth.json",
+        directoryMode: 0o700,
+        fileMode: 0o600,
+        sourceRelativePath: ".daimon-inbound/codex-auth",
+        sourceSlot: "codex-auth"
+    },
+};
+export const DAIMON_GROK_SUBSCRIPTION_REALM = {
+    agentCredentialRelativePath: ".grok/auth.json",
+    bootstrapMountPath: "/var/lib/spawnfile/daimon/grok-bootstrap-auth",
+    bootstrapSourceSlot: "grok-auth",
+    directoryMode: 0o700,
+    durableMountPath: "/var/lib/spawnfile/daimon/grok-subscription-realm",
+    fileMode: 0o600,
+    maxCredentialBytes: 64 * 1024
+};
+export const DAIMON_GROK_BROKER_MODELS = ["grok-4.6", "grok-4.5", "grok-build"];
+export const DAIMON_GROK_BROKER_REASONING_EFFORTS = ["low", "medium", "high"];
+/**
+ * Byte mirror of Daimon's `GROK_ENGINE_BROKER` (daimon
+ * `src/contracts/runtimeContractManifest.ts`), attested key-for-key against the
+ * vendored `contract-manifest.json` by `parseDaimonContractManifest`.
+ */
+export const DAIMON_GROK_ENGINE_BROKER = {
+    nativeAbiVersion: 2,
+    nativeExecutablePath: "/opt/daimon/bin/daimon-engine-broker",
+    grokExecutablePath: "/usr/local/bin/grok",
+    registrationPath: "/etc/daimon-engine-broker/registrations.bin",
+    credentialHomePath: "/var/lib/spawnfile/daimon/grok-subscription-realm",
+    turnStorePath: "/var/lib/spawnfile/daimon/grok-subscription-realm/turns",
+    controlSocketPath: "/run/daimon-engine-broker/control.sock",
+    backendSocketPath: "/run/daimon-engine-broker/backend.sock",
+    launcherSocketPath: "/run/daimon-engine-broker/launcher.sock",
+    serviceConfigPath: "/etc/daimon-engine-broker/service.json",
+    providerProxy: { host: "127.0.0.1", port: 43_123 },
+    mcpFacade: { host: "127.0.0.1", port: 43_124, path: "/mcp" },
+    identities: { organizationUid: 2_000, brokerUid: 2_100, firstWorkerUid: 2_200 },
+    grokCliVersion: "1.0.34",
+    grokCliBuild: "3736acbc8658",
+    grokCliArtifacts: {
+        arm64: { url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-aarch64", sha256: "39ab87666877d64ef3a40aa60fbe0c3b6a6acd7001b78fe60e2c76bb6cfc4a94", bytes: 136_090_504 },
+        x64: { url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-x86_64", sha256: "be5905e107d2b8b5f3c142d21ecfe4c8fd32a913d2fd551b788707930c4dc80d", bytes: 163_035_648 }
+    },
+    worker: {
+        modelId: "daimon-broker-grok",
+        models: DAIMON_GROK_BROKER_MODELS,
+        reasoningEfforts: DAIMON_GROK_BROKER_REASONING_EFFORTS,
+        defaultModel: "grok-4.6",
+        defaultReasoningEffort: "low",
+        toolIds: ["run_terminal_cmd", "read_file", "grep", "list_dir", "search_tool", "use_tool"],
+        visibleTools: ["grep", "list_dir", "read_file", "run_terminal_command", "search_tool", "use_tool"],
+        maxTurns: 48,
+        systemPromptSha256: "2c31c0085a54a4efbf9c0cf0b8124c56e47f38691b7f0c7fa233a74abaa8ddf8",
+        configSha256: {
+            "grok-4.6": { low: "ab58499ac32678097c146479896f2b8a8e2b0e39aea22dc0a60b6227e370538e", medium: "df1a5cc84346e7f6bf6090492fbd19faaefb42953e3bb2e8c6cbc0572242403f", high: "65b0212564fb74042b1503d293fb8d3620276033264c0efade2a539ca09218e3" },
+            "grok-4.5": { low: "8247127c3625ff7c5d8d527a53596b89ec6557a821ac46cfd00bd122b90daff6", medium: "59288cee61297bb8c002097061a48f77b09d310754187a253ee089f7172a9155", high: "c63c3387ce92d94ec3f690abfe98942afcd7c9e17ff84816bbe751f340ab251f" },
+            "grok-build": { low: "fb343f2809903f26d21681470943235031f946e99085542fd89555eb7782cbb5", medium: "8a587ef75c90eab70d19b24583e60051d6fba9d90c558839fdbb15588b4cc656", high: "a23724e00d670caee185ba7690d2daa868173e53905cf446f5329666f01ab4e3" }
+        },
+        clockedConfigSha256: {
+            "grok-4.5": { "high": "907d8967960c342b442d6d256b2585f3c85bd846a78578f596f0b605403d6d34", "low": "3c4f3515b21c1bffb3fb770e2ecb4b918b6c43d5e77c1fd47e1e6698d1fedee7", "medium": "9117e12b2f3f6fa045799592969cbaae1c2f3b1ea79330badac8655b9b41dd7a" },
+            "grok-4.6": { "high": "203744f6f0dfc0bc80cfb896880497edfd9b3de4dcf33060e8ef4d2ef5f220a7", "low": "751f1dcd04983e5e5883df5a8fefa04f201e187e5ef1f344d3bf83f950830432", "medium": "f1406f93a8091eb0c09e07321254a9c783a89b0bbf5548d9613d53a8d087a517" },
+            "grok-build": { "high": "6efddadc82c38020d3351829e54bb09fa456cd6d76ea1247902794d82a4a3ffa", "low": "a8c63ba910623a0686930c27db0733f4a2588c7fca9dd7da25c3f18027720ab5", "medium": "6afcd2b90c0d19794f8c0d22147a0f011946a92e613f89dae98b0ca729313101" },
+        },
+        taskClock: { "directoryMode": 493, "directoryPath": "/run/daimon-engine-broker/task-clock/slot-0", "fileMode": 420, "ownerUid": 2100, "preloadPath": "/usr/local/lib/daimon/libfaketime.so.1", "rootDirectoryPath": "/run/daimon-engine-broker/task-clock", "slotDirectoryPattern": "/run/daimon-engine-broker/task-clock/slot-{slot}", "slotFilePattern": "/run/daimon-engine-broker/task-clock/slot-{slot}/faketime", "timestampFilePath": "/run/daimon-engine-broker/task-clock/slot-0/faketime", "version": "noopolis.daimon.grok-broker-task-clock.v2", "workerView": "own-directory-visible-sibling-directories-denied" },
+        home: {
+            directory: { uid: 0, group: "worker", mode: 0o1771 },
+            sessionsDirectory: { relativePath: "sessions", uid: 0, group: "worker", mode: 0o1771 },
+            readOnlyFiles: { names: ["config.toml", "managed_config.toml", "requirements.toml", "sandbox.toml", "trusted_folders.toml"], uid: 0, gid: 0, mode: 0o444 },
+            sandboxEvents: { relativePath: "sessions/sandbox-events.jsonl", owner: "worker", group: "broker", mode: 0o640 },
+            privateTmp: { relativeToWorkerHome: "tmp", owner: "worker", mode: 0o700 },
+            sharedTmp: { paths: ["/tmp", "/var/tmp"], uid: 0, maxGroupExclusive: 2_200, otherMode: 0o4, mode: 0o1774 },
+            organizationRuntimeHome: { owner: "organization", group: "worker", mode: 0o710 },
+            spillDirectory: { relativeToRuntimeHome: "tool-output", owner: "organization", group: "worker", mode: 0o2750, fileMode: 0o640 }
+        }
+    },
+    bounds: { promptBytes: 65_536, capabilityBytes: 4_096, capabilityBundleBytes: 8_196, outputBytes: 262_144 },
+    controlProtocolVersion: "noopolis.daimon.engine-broker.v4",
+    turnRecordVersions: ["noopolis.daimon.engine-broker-turn.v1", "noopolis.daimon.engine-broker-turn.v2"],
+    serviceConfigVersions: ["noopolis.daimon.engine-broker-service.v1", "noopolis.daimon.engine-broker-service.v2", "noopolis.daimon.engine-broker-service.v3"],
+    slotRouting: { "controlCaller": "organization", "key": "slot", "repeatedAgentIds": true, "resetRequest": "reset_slot", "resetResponse": "slot_reset", "slotEnvironment": "DAIMON_ENGINE_BROKER_SLOT", "turnStoreDirectory": "slot-{slot}", "workersMayControl": false },
+    runRequestBudget: { "countsCredentialRetries": true, "fileName": "run-requests.json", "includesInferenceGrants": true, "maximumField": "maxRunRequests", "storeField": "runRequestStore" },
+    turnLimits: {
+        keys: ["maxRequests", "maxTokens", "timeoutMs"],
+        v1Defaults: { maxRequests: 32, maxTokens: 300_000, timeoutMs: 240_000 },
+        bounds: { maxRequests: [1, 48], maxTokens: [1, 10_000_000], timeoutMs: [1_000, 3_600_000] },
+        limitReasons: ["tokens", "requests", "timeout", "none"],
+        wakeMayOnlyLower: true,
+        tokenCeilingOvershoot: "at-most-one-request",
+        maxInFlightRequests: 1,
+        requestUsageMaxTokens: 500_000,
+        missingUsageEstimate: { inputBytesPerToken: 2, outputTokens: 4_096 }
+    },
+    wakeLimitEnvironment: { timeoutMs: "DAIMON_ENGINE_WAKE_TIMEOUT_MS", maxTokens: "DAIMON_ENGINE_WAKE_TOKEN_CEILING" },
+    projectionVersion: "noopolis.daimon.grok-broker-projection.v3",
+    slotPreflightVersion: "noopolis.daimon.grok-slot-preflight.v2",
+    inferenceGrants: {
+        requestKinds: ["request_inference_grant", "release_inference_grant"],
+        purposes: ["judge", "optimizer"],
+        tokenPrefix: "inference_",
+        ttlMs: 600_000,
+        limits: { maxRequests: 64, maxTokens: 2_000_000 },
+        maxLiveGrants: 8,
+        maxInFlightRequestsPerGrant: 1,
+        bodyMembers: ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"],
+        messageRoles: ["system", "user", "assistant"],
+        failureCodes: ["auth_stale", "grant_limit", "invalid_request", "unavailable"],
+        ledgerVersion: "noopolis.daimon.inference-usage.v1",
+        ledgerDedupeKey: ["grant", "request"],
+        client: {
+            modelId: "daimon-inference-grok",
+            envKey: "DAIMON_INFERENCE_GRANT",
+            configSha256: {
+                "grok-4.6": { low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f", medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8", high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac" },
+                "grok-4.5": { low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74", medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9", high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2" },
+                "grok-build": { low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1", medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d", high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c" }
+            }
+        }
+    },
+    artifacts: {
+        sourceSha256: "15836d7ad69f12ef581a6e5b8635c9db43b2177dac609160c0749d3d1fefbaa8",
+        x64Sha256: "95aa9c272225e74ff9f45f54dde4bc30aee324e9ba24d8a876db9151c81b454d",
+        arm64Sha256: "d0dc1c03197c3e90f09b66ad7c89b4f7b448d06dc84c03b247dce976d6018d6e"
+    }
+};
+/**
+ * Where the Daimon broker writes its per-turn usage ledger, and what this
+ * compiler provisions. Deliberately kept out of `DAIMON_GROK_ENGINE_BROKER`:
+ * that object's canonical bytes are digest-pinned and attested against the
+ * runtime image at compile time, so a new key there would make every pinned
+ * image fail to attest. Mirrors `TURN_USAGE_LEDGER` in
+ * `daimon/src/runtime/turnUsageLedger.ts`.
+ */
+export const DAIMON_GROK_TURN_USAGE_LEDGER = {
+    version: "noopolis.daimon.turn-usage.v1",
+    directoryPath: "/var/lib/spawnfile/daimon/usage",
+    filePath: "/var/lib/spawnfile/daimon/usage/usage.jsonl",
+    rotatedFilePath: "/var/lib/spawnfile/daimon/usage/usage.jsonl.1",
+    directoryMode: 0o750,
+    fileMode: 0o640,
+    /**
+     * Mirrors `TURN_USAGE_ROTATE_BYTES` in `daimon/src/runtime/turnUsageLedger.ts`
+     * (Spawnfile must not import from `daimon/`, so this is the Spawnfile-side
+     * copy of the same agreed number). It is a LOWER bound on the size of a
+     * rotated generation, not an upper one: the broker rotates on the append
+     * *after* the file reaches this size, so `usage.jsonl.1` is always at least
+     * this large and the line that crossed the bound overshoots it. Anything
+     * sizing a read of one generation must therefore leave headroom above this
+     * number rather than matching it (see
+     * `DEFAULT_DOCKER_PROBE_MAX_BUFFER_BYTES`).
+     */
+    rotateBytes: 64 * 1024 * 1024
+};
+export const DAIMON_AGY_SUBSCRIPTION_REALM = {
+    directoryMode: 0o700,
+    durableMountPath: "/var/lib/spawnfile/daimon/agy-subscription-realm",
+    fileMode: 0o600,
+    maxUnlockBytes: 4_096,
+    unlockMountPath: "/var/lib/spawnfile/daimon/agy-unlock-secret",
+    unlockSourceSlot: "agy-unlock-secret"
+};
+const SHA256 = /^[a-f0-9]{64}$/u;
+const expectedConfigFields = [
+    "version", "host.bindHost", "host.port", "host.controlTokenEnv", "agents[].id",
+    "agents[].name", "agents[].instructions", "agents[].workspacePath",
+    "agents[].runtimeHomePath", "agents[].engine.kind", "agents[].engine.model",
+    "agents[].engine.reasoningEffort", "agents[].engine.codexSandbox", "agents[].schedule.kind",
+    "agents[].schedule.interval_ms", "agents[].schedule.cron",
+    "agents[].schedule.timezone", "agents[].schedule.prompt",
+    "agents[].schedule.jitter_seconds",
+    "agents[].mcp", "agents[].moltnet", "agents[].memory", "agents[].attention"
+];
+const exactKeys = (value, keys) => Object.keys(value).sort().join("\0") === [...keys].sort().join("\0");
+const fail = (message) => {
+    throw new SpawnfileError("runtime_error", `Daimon runtime contract manifest ${message}`);
+};
+const asRecord = (value, label) => {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        fail(`${label} must be an object`);
+    return value;
+};
+const canonicalJson = (value) => {
+    if (value === null || typeof value === "boolean" || typeof value === "number" || typeof value === "string") {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    const record = asRecord(value, "JSON value");
+    return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson(record[key])}`).join(",")}}`;
+};
+const matchesCredentialMaterial = (value, expected) => {
+    const material = asRecord(value, "engine credential material");
+    return exactKeys(material, ["destinationRelativePath", "directoryMode", "fileMode", "sourceRelativePath", "sourceSlot"])
+        && material.destinationRelativePath === expected.destinationRelativePath
+        && material.directoryMode === expected.directoryMode
+        && material.fileMode === expected.fileMode
+        && material.sourceRelativePath === expected.sourceRelativePath
+        && material.sourceSlot === expected.sourceSlot;
+};
+const matchesAgyRealm = (value) => {
+    const realm = asRecord(value, "AGY subscription realm");
+    return exactKeys(realm, [
+        "directoryMode", "durableMountPath", "fileMode", "maxUnlockBytes",
+        "unlockMountPath", "unlockSourceSlot"
+    ])
+        && Object.entries(DAIMON_AGY_SUBSCRIPTION_REALM)
+            .every(([name, expected]) => realm[name] === expected);
+};
+const matchesGrokRealm = (value) => {
+    const realm = asRecord(value, "Grok subscription realm");
+    return exactKeys(realm, [
+        "agentCredentialRelativePath", "bootstrapMountPath", "bootstrapSourceSlot",
+        "directoryMode", "durableMountPath", "fileMode", "maxCredentialBytes"
+    ]) && Object.entries(DAIMON_GROK_SUBSCRIPTION_REALM)
+        .every(([name, expected]) => realm[name] === expected);
+};
+const matchesGrokEngineBroker = (value) => {
+    const broker = asRecord(value, "Grok engine broker");
+    if (!exactKeys(broker, Object.keys(DAIMON_GROK_ENGINE_BROKER)))
+        return false;
+    return canonicalJson(broker) === canonicalJson(DAIMON_GROK_ENGINE_BROKER);
+};
+export const parseDaimonContractManifest = (raw) => {
+    const root = asRecord(raw, "root");
+    const hasWakeMoments = Object.hasOwn(root, "wakeMoments");
+    if (hasWakeMoments && !isDaimonWakeMoments(root.wakeMoments))
+        return fail("has an unsupported wakeMoments contract");
+    const configFields = hasWakeMoments ? [...expectedConfigFields, DAIMON_WAKE_MOMENTS.configField] : expectedConfigFields;
+    if (root.version !== DAIMON_CONTRACT_MANIFEST_VERSION ||
+        !Array.isArray(root.supportedEngineKinds) ||
+        root.supportedEngineKinds.join("\0") !== "agy\0codex\0grok" ||
+        !Array.isArray(root.consumedConfigFields) ||
+        root.consumedConfigFields.join("\0") !== configFields.join("\0") ||
+        !Array.isArray(root.wakeAcceptanceTypes) ||
+        root.wakeAcceptanceTypes.join("\0") !== "manual\0message\0schedule\0external")
+        return fail("has an unsupported version or configuration contract");
+    const v2 = asRecord(root.organizationRuntimeConfigV2Schema, "organizationRuntimeConfigV2Schema");
+    const v2Properties = asRecord(v2.properties, "organizationRuntimeConfigV2Schema.properties");
+    const v2Agents = asRecord(v2Properties.agents, "organizationRuntimeConfigV2Schema.properties.agents");
+    const v2Agent = asRecord(v2Agents.items, "organizationRuntimeConfigV2Schema.properties.agents.items");
+    const v2AgentProperties = asRecord(v2Agent.properties, "organizationRuntimeConfigV2Schema.properties.agents.items.properties");
+    const schedule = asRecord(v2AgentProperties.schedule, "organizationRuntimeConfigV2Schema schedule");
+    if (v2.$id !== "noopolis.daimon.organization-runtime.v2" || !Array.isArray(schedule.oneOf) || schedule.oneOf.length !== 3)
+        return fail("does not attest the organization runtime v2 schedule contract");
+    const semantics = asRecord(root.deliverySemantics, "deliverySemantics");
+    if (!exactKeys(semantics, ["activeDeliveryIdempotency", "terminalReceiptHorizon", "recovery", "concurrentSameAgentTurns", "externalEffectsExactlyOnce"]) ||
+        semantics.activeDeliveryIdempotency !== "unbounded-until-terminal" || semantics.terminalReceiptHorizon !== 2_048 ||
+        semantics.recovery !== "at-least-once-with-stable-wake-id" || semantics.concurrentSameAgentTurns !== false || semantics.externalEffectsExactlyOnce !== false)
+        return fail("has unsupported delivery semantics");
+    const materials = asRecord(root.engineCredentialMaterial, "engineCredentialMaterial");
+    if (!exactKeys(materials, ["codex"]))
+        return fail("has unsupported credential material");
+    for (const engine of ["codex"]) {
+        if (!matchesCredentialMaterial(materials[engine], DAIMON_ENGINE_CREDENTIALS[engine])) {
+            return fail(`has unsafe ${engine} credential material`);
+        }
+    }
+    if (!matchesAgyRealm(root.agySubscriptionRealm)) {
+        return fail("has unsafe AGY subscription realm material");
+    }
+    if (!matchesGrokRealm(root.grokSubscriptionRealm)) {
+        return fail("has unsafe Grok subscription realm material");
+    }
+    if (!matchesGrokEngineBroker(root.grokEngineBroker)) {
+        return fail("has unsafe Grok engine broker material");
+    }
+    return Object.freeze({
+        agySubscriptionRealm: Object.freeze({ ...DAIMON_AGY_SUBSCRIPTION_REALM }),
+        consumedConfigFields: Object.freeze([...configFields]),
+        ...(hasWakeMoments ? { wakeMoments: DAIMON_WAKE_MOMENTS } : {}),
+        engineCredentialMaterial: Object.freeze({ ...DAIMON_ENGINE_CREDENTIALS }),
+        grokSubscriptionRealm: Object.freeze({ ...DAIMON_GROK_SUBSCRIPTION_REALM }),
+        grokEngineBroker: Object.freeze({ ...DAIMON_GROK_ENGINE_BROKER }),
+        supportedEngineKinds: Object.freeze([...DAIMON_ENGINE_KINDS]),
+        wakeAcceptanceTypes: Object.freeze(["manual", "message", "schedule", "external"]),
+        deliverySemantics: Object.freeze({
+            activeDeliveryIdempotency: "unbounded-until-terminal", terminalReceiptHorizon: 2_048,
+            recovery: "at-least-once-with-stable-wake-id", concurrentSameAgentTurns: false, externalEffectsExactlyOnce: false
+        }),
+        version: DAIMON_CONTRACT_MANIFEST_VERSION
+    });
+};
+/** Capability comes from receipt-bound manifest content, never a runtime version. */
+export const daimonSupportsWakeMoments = (manifest) => manifest.wakeMoments !== undefined;
+export const assertDaimonRuntimeHome = (candidate) => {
+    if (!path.posix.isAbsolute(candidate))
+        fail("runtime home must be an absolute POSIX path");
+    const normalized = path.posix.normalize(candidate);
+    const relative = path.posix.relative(DAIMON_RUNTIME_HOME_ROOT, normalized);
+    if (!relative || relative === ".." || relative.startsWith("../") || path.posix.isAbsolute(relative)) {
+        fail("runtime home escapes the caller-owned Daimon root");
+    }
+    return normalized;
+};
+export const readVerifiedDaimonContractManifest = async (runtimeRoot) => {
+    const manifestPath = path.join(runtimeRoot, DAIMON_CONTRACT_MANIFEST_FILE);
+    const digestPath = path.join(runtimeRoot, DAIMON_CONTRACT_MANIFEST_DIGEST_FILE);
+    let bytes;
+    let sidecar;
+    try {
+        [bytes, sidecar] = await Promise.all([readFile(manifestPath), readFile(digestPath, "utf8")]);
+    }
+    catch {
+        return fail("is missing its packaged bytes or digest sidecar");
+    }
+    const source = bytes.toString("utf8");
+    if (!source.endsWith("\n") || source.includes("\r"))
+        return fail("is not canonical UTF-8 JSON");
+    let parsed;
+    try {
+        parsed = JSON.parse(source);
+    }
+    catch {
+        return fail("is not valid JSON");
+    }
+    if (`${canonicalJson(parsed)}\n` !== source)
+        return fail("is not canonical JSON");
+    const digest = createHash("sha256").update(bytes).digest("hex");
+    if (sidecar !== `sha256:${digest}\n` || !SHA256.test(digest))
+        return fail("digest sidecar does not match its bytes");
+    return Object.freeze({ digest: `sha256:${digest}`, manifest: parseDaimonContractManifest(parsed) });
+};

package/dist/runtime/daimon/grokModel.d.ts

@@ -0,0 +1,19 @@
+import type { ResolvedAgentNode } from "../../compiler/types.js";
+import { type DaimonGrokBrokerModel, type DaimonGrokBrokerReasoningEffort } from "./contractManifest.js";
+export interface DaimonGrokModel {
+    model: DaimonGrokBrokerModel;
+    reasoningEffort: DaimonGrokBrokerReasoningEffort;
+}
+/**
+ * The declared model of one brokered Daimon Grok agent.
+ *
+ * Every Grok agent runs through Daimon's engine broker, whose worker
+ * `config.toml` bytes are pinned per model x effort and whose provider proxy
+ * refuses any request body carrying another pair. Nothing may be inherited: Grok
+ * 1.0.34 silently drops an effort a model does not declare and its catalog
+ * default for `grok-4.6` is `high`, so the declaration is required in full —
+ * `execution.model.primary` with `provider: xai`, a name from Daimon's closed
+ * list, a target-level `auth.method: grok`, and `reasoning_effort` — and there
+ * is exactly one model (no fallback, no legacy model-level auth).
+ */
+export declare const resolveDaimonGrokModel: (node: ResolvedAgentNode) => DaimonGrokModel;

package/dist/runtime/daimon/grokModel.js

@@ -0,0 +1,33 @@
+import { SpawnfileError } from "../../shared/index.js";
+import { DAIMON_GROK_BROKER_MODELS, DAIMON_GROK_BROKER_REASONING_EFFORTS } from "./contractManifest.js";
+/**
+ * The declared model of one brokered Daimon Grok agent.
+ *
+ * Every Grok agent runs through Daimon's engine broker, whose worker
+ * `config.toml` bytes are pinned per model x effort and whose provider proxy
+ * refuses any request body carrying another pair. Nothing may be inherited: Grok
+ * 1.0.34 silently drops an effort a model does not declare and its catalog
+ * default for `grok-4.6` is `high`, so the declaration is required in full —
+ * `execution.model.primary` with `provider: xai`, a name from Daimon's closed
+ * list, a target-level `auth.method: grok`, and `reasoning_effort` — and there
+ * is exactly one model (no fallback, no legacy model-level auth).
+ */
+export const resolveDaimonGrokModel = (node) => {
+    const fail = (detail) => {
+        throw new SpawnfileError("validation_error", `Daimon Grok agent ${node.name} ${detail}; declare execution.model.primary { provider: xai, name: ${DAIMON_GROK_BROKER_MODELS.join(" | ")}, auth: { method: grok }, reasoning_effort: ${DAIMON_GROK_BROKER_REASONING_EFFORTS.join(" | ")} }`);
+    };
+    const declared = node.execution?.model;
+    if (!declared)
+        return fail("must declare its brokered model and reasoning effort");
+    if (declared.fallback?.length || declared.auth)
+        fail("must declare exactly one model with target-level auth");
+    const primary = declared.primary;
+    if (primary.provider !== "xai" || primary.endpoint || primary.auth?.method !== "grok")
+        fail("must use provider xai with auth.method grok");
+    if (!DAIMON_GROK_BROKER_MODELS.includes(primary.name))
+        fail(`declares unsupported model ${primary.name}`);
+    const effort = primary.reasoning_effort;
+    if (effort === undefined || !DAIMON_GROK_BROKER_REASONING_EFFORTS.includes(effort))
+        fail("must declare reasoning_effort");
+    return { model: primary.name, reasoningEffort: effort };
+};

package/dist/runtime/daimon/grokTurnLimits.d.ts

@@ -0,0 +1,25 @@
+export type DaimonGrokTurnLimits = Readonly<{
+    maxRequests?: number;
+    maxTokens?: number;
+    timeoutMs?: number;
+}>;
+/**
+ * A brokered Grok agent's per-turn budget, declared on the agent rather than inherited.
+ *
+ * Undeclared, a registration takes the contract's `turnLimits.v1Defaults`
+ * (32 requests / 300k tokens / 240s) — which is also the ceiling a wake may lower to, so a
+ * production organization carrying the Codex-era per-wake ceilings had every Grok turn
+ * refused as `invalid_request` before it began: the broker accepts a wake that lowers its
+ * registration's limits and refuses one that raises them. The declaration exists so an
+ * organization can state the budget it actually wants instead of silently living at four
+ * minutes a turn. The bounds are the contract manifest's own, so a declaration can never
+ * exceed what the broker will honour, and every key stays optional: what is not declared
+ * keeps the default.
+ */
+export declare const resolveDaimonGrokTurnLimits: (value: unknown) => DaimonGrokTurnLimits | undefined;
+/** The registration's limits: the contract defaults, lowered or raised only by what the agent declared. */
+export declare const resolveDaimonGrokRegistrationLimits: (declared: DaimonGrokTurnLimits | undefined) => {
+    maxRequests: number;
+    maxTokens: number;
+    timeoutMs: number;
+};

package/dist/runtime/daimon/grokTurnLimits.js

@@ -0,0 +1,51 @@
+import { SpawnfileError } from "../../shared/index.js";
+import { DAIMON_GROK_ENGINE_BROKER } from "./contractManifest.js";
+const bounds = DAIMON_GROK_ENGINE_BROKER.turnLimits.bounds;
+const fields = {
+    max_requests: { target: "maxRequests", range: bounds.maxRequests },
+    max_tokens: { target: "maxTokens", range: bounds.maxTokens },
+    timeout_ms: { target: "timeoutMs", range: bounds.timeoutMs }
+};
+/**
+ * A brokered Grok agent's per-turn budget, declared on the agent rather than inherited.
+ *
+ * Undeclared, a registration takes the contract's `turnLimits.v1Defaults`
+ * (32 requests / 300k tokens / 240s) — which is also the ceiling a wake may lower to, so a
+ * production organization carrying the Codex-era per-wake ceilings had every Grok turn
+ * refused as `invalid_request` before it began: the broker accepts a wake that lowers its
+ * registration's limits and refuses one that raises them. The declaration exists so an
+ * organization can state the budget it actually wants instead of silently living at four
+ * minutes a turn. The bounds are the contract manifest's own, so a declaration can never
+ * exceed what the broker will honour, and every key stays optional: what is not declared
+ * keeps the default.
+ */
+export const resolveDaimonGrokTurnLimits = (value) => {
+    if (value === undefined)
+        return undefined;
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new SpawnfileError("validation_error", "Daimon runtime option turn_limits must be an object");
+    }
+    const result = {};
+    for (const [key, limit] of Object.entries(value)) {
+        if (!Object.hasOwn(fields, key)) {
+            throw new SpawnfileError("validation_error", `Daimon runtime option turn_limits.${key} is unsupported`);
+        }
+        const field = fields[key];
+        const [minimum, maximum] = field.range;
+        if (typeof limit !== "number" || !Number.isSafeInteger(limit) || limit < minimum || limit > maximum) {
+            throw new SpawnfileError("validation_error", `Daimon runtime option turn_limits.${key} must be an integer from ${minimum} to ${maximum}`);
+        }
+        result[field.target] = limit;
+    }
+    if (Object.keys(result).length === 0) {
+        throw new SpawnfileError("validation_error", "Daimon runtime option turn_limits must declare at least one limit");
+    }
+    return result;
+};
+/** The registration's limits: the contract defaults, lowered or raised only by what the agent declared. */
+export const resolveDaimonGrokRegistrationLimits = (declared) => ({
+    ...DAIMON_GROK_ENGINE_BROKER.turnLimits.v1Defaults,
+    ...(declared?.maxRequests === undefined ? {} : { maxRequests: declared.maxRequests }),
+    ...(declared?.maxTokens === undefined ? {} : { maxTokens: declared.maxTokens }),
+    ...(declared?.timeoutMs === undefined ? {} : { timeoutMs: declared.timeoutMs })
+});

package/dist/runtime/daimon/grokWorkerConfigBytes.d.ts

@@ -0,0 +1,43 @@
+/** Daimon `renderGrokBrokerWorkerConfig({ model, reasoningEffort })` bytes, verified against the manifest pins on use. */
+export declare const DAIMON_GROK_WORKER_CONFIG_BYTES: {
+    readonly "grok-4.6": {
+        readonly low: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"low\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.6\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"low\"\nlabel = \"Low\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n";
+        readonly medium: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"medium\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.6\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"medium\"\nlabel = \"Medium\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n";
+        readonly high: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"high\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.6\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"high\"\nlabel = \"High\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n";
+    };
+    readonly "grok-4.5": {
+        readonly low: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"low\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.5\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"low\"\nlabel = \"Low\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n";
+        readonly medium: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"medium\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.5\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"medium\"\nlabel = \"Medium\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n";
+        readonly high: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"high\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.5\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"high\"\nlabel = \"High\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n";
+    };
+    readonly "grok-build": {
+        readonly low: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"low\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-build\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"low\"\nlabel = \"Low\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n";
+        readonly medium: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"medium\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-build\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"medium\"\nlabel = \"Medium\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n";
+        readonly high: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"high\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-build\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"high\"\nlabel = \"High\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n";
+    };
+};
+export declare const DAIMON_GROK_CLOCKED_WORKER_CONFIG_BYTES: {
+    readonly "grok-4.6": {
+        readonly low: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"low\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.6\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"low\"\nlabel = \"Low\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n\n[shell_environment_policy]\ninherit=\"all\"\nignore_default_excludes=false\nexclude=[]\ninclude_only=[]\nset={\"LD_PRELOAD\"=\"/usr/local/lib/daimon/libfaketime.so.1\",\"FAKETIME_TIMESTAMP_FILE\"=\"/run/daimon-engine-broker/task-clock/slot-0/faketime\",\"FAKETIME_DONT_FAKE_MONOTONIC\"=\"1\",\"LC_ALL\"=\"C\"}\n";
+        readonly medium: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"medium\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.6\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"medium\"\nlabel = \"Medium\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n\n[shell_environment_policy]\ninherit=\"all\"\nignore_default_excludes=false\nexclude=[]\ninclude_only=[]\nset={\"LD_PRELOAD\"=\"/usr/local/lib/daimon/libfaketime.so.1\",\"FAKETIME_TIMESTAMP_FILE\"=\"/run/daimon-engine-broker/task-clock/slot-0/faketime\",\"FAKETIME_DONT_FAKE_MONOTONIC\"=\"1\",\"LC_ALL\"=\"C\"}\n";
+        readonly high: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"high\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.6\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"high\"\nlabel = \"High\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n\n[shell_environment_policy]\ninherit=\"all\"\nignore_default_excludes=false\nexclude=[]\ninclude_only=[]\nset={\"LD_PRELOAD\"=\"/usr/local/lib/daimon/libfaketime.so.1\",\"FAKETIME_TIMESTAMP_FILE\"=\"/run/daimon-engine-broker/task-clock/slot-0/faketime\",\"FAKETIME_DONT_FAKE_MONOTONIC\"=\"1\",\"LC_ALL\"=\"C\"}\n";
+    };
+    readonly "grok-4.5": {
+        readonly low: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"low\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.5\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"low\"\nlabel = \"Low\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n\n[shell_environment_policy]\ninherit=\"all\"\nignore_default_excludes=false\nexclude=[]\ninclude_only=[]\nset={\"LD_PRELOAD\"=\"/usr/local/lib/daimon/libfaketime.so.1\",\"FAKETIME_TIMESTAMP_FILE\"=\"/run/daimon-engine-broker/task-clock/slot-0/faketime\",\"FAKETIME_DONT_FAKE_MONOTONIC\"=\"1\",\"LC_ALL\"=\"C\"}\n";
+        readonly medium: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"medium\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.5\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"medium\"\nlabel = \"Medium\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n\n[shell_environment_policy]\ninherit=\"all\"\nignore_default_excludes=false\nexclude=[]\ninclude_only=[]\nset={\"LD_PRELOAD\"=\"/usr/local/lib/daimon/libfaketime.so.1\",\"FAKETIME_TIMESTAMP_FILE\"=\"/run/daimon-engine-broker/task-clock/slot-0/faketime\",\"FAKETIME_DONT_FAKE_MONOTONIC\"=\"1\",\"LC_ALL\"=\"C\"}\n";
+        readonly high: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"high\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-4.5\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"high\"\nlabel = \"High\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n\n[shell_environment_policy]\ninherit=\"all\"\nignore_default_excludes=false\nexclude=[]\ninclude_only=[]\nset={\"LD_PRELOAD\"=\"/usr/local/lib/daimon/libfaketime.so.1\",\"FAKETIME_TIMESTAMP_FILE\"=\"/run/daimon-engine-broker/task-clock/slot-0/faketime\",\"FAKETIME_DONT_FAKE_MONOTONIC\"=\"1\",\"LC_ALL\"=\"C\"}\n";
+    };
+    readonly "grok-build": {
+        readonly low: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"low\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-build\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"low\"\nlabel = \"Low\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n\n[shell_environment_policy]\ninherit=\"all\"\nignore_default_excludes=false\nexclude=[]\ninclude_only=[]\nset={\"LD_PRELOAD\"=\"/usr/local/lib/daimon/libfaketime.so.1\",\"FAKETIME_TIMESTAMP_FILE\"=\"/run/daimon-engine-broker/task-clock/slot-0/faketime\",\"FAKETIME_DONT_FAKE_MONOTONIC\"=\"1\",\"LC_ALL\"=\"C\"}\n";
+        readonly medium: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"medium\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-build\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"medium\"\nlabel = \"Medium\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n\n[shell_environment_policy]\ninherit=\"all\"\nignore_default_excludes=false\nexclude=[]\ninclude_only=[]\nset={\"LD_PRELOAD\"=\"/usr/local/lib/daimon/libfaketime.so.1\",\"FAKETIME_TIMESTAMP_FILE\"=\"/run/daimon-engine-broker/task-clock/slot-0/faketime\",\"FAKETIME_DONT_FAKE_MONOTONIC\"=\"1\",\"LC_ALL\"=\"C\"}\n";
+        readonly high: "[cli]\nauto_update = false\nuse_leader = false\nshow_tips = false\n\n[features]\ntelemetry = false\ntitle_refresh = false\nsession_recap = false\nturn_summary = false\nrepo_status_in_system_prompt = false\ncodebase_indexing = false\nbackend_tools = false\nask_user_question = false\nimage_gen = false\nvideo_gen = false\nweb_fetch = false\ncampaigns = false\nmanaged_config = false\n\n[managed_mcps]\nenabled = false\n\n[skills]\ndisabled = [\"build-with-ai\", \"code-review\", \"create-skill\", \"create-workflow\", \"design\", \"docx\", \"execute-plan\", \"game-animation-frames\", \"game-asset-core\", \"game-character-consistency\", \"game-tilesets\", \"game-ui-icons\", \"imagine\", \"implement\", \"learn\", \"long-running-background-tasks\", \"pdf\", \"pptx\", \"pr-babysit\", \"resume-claude\", \"resume-codex\", \"resume-cursor\", \"review\", \"skill-design-principles\", \"statusline\"]\n\n[workflows]\nenabled = false\n\n[models]\ndefault = \"daimon-broker-grok\"\ndefault_reasoning_effort = \"high\"\nsession_summary = \"daimon-session-title-disabled\"\n\n[model.daimon-session-title-disabled]\nmodel = \"disabled\"\nbase_url = \"http://127.0.0.1:43123/v1\"\napi_key = \"session-title-disabled\"\nmax_retries = 0\nhidden = true\n\n[model.daimon-broker-grok]\nmodel = \"grok-build\"\nbase_url = \"http://127.0.0.1:43123/v1\"\nenv_key = \"DAIMON_PROVIDER_CAPABILITY\"\napi_backend = \"chat_completions\"\ncontext_window = 131072\nsupports_backend_search = false\nmax_retries = 0\n\n[[model.daimon-broker-grok.reasoning_efforts]]\nvalue = \"high\"\nlabel = \"High\"\ndefault = true\n\n[mcp_servers.daimon]\nurl = \"http://127.0.0.1:43124/mcp\"\nbearer_token_env_var = \"DAIMON_MCP_CAPABILITY\"\n\n[shell_environment_policy]\ninherit=\"all\"\nignore_default_excludes=false\nexclude=[]\ninclude_only=[]\nset={\"LD_PRELOAD\"=\"/usr/local/lib/daimon/libfaketime.so.1\",\"FAKETIME_TIMESTAMP_FILE\"=\"/run/daimon-engine-broker/task-clock/slot-0/faketime\",\"FAKETIME_DONT_FAKE_MONOTONIC\"=\"1\",\"LC_ALL\"=\"C\"}\n";
+    };
+};
+/** Daimon `renderGrokWorkerSandboxProfile(denyPaths)` samples; the Spawnfile mirror must reproduce them byte for byte. */
+export declare const DAIMON_GROK_WORKER_PROFILE_SAMPLES: readonly [{
+    readonly bytes: "[profiles.daimon-strict]\nextends = \"strict\"\nrestrict_network = true\ndeny = []\n";
+    readonly denyPaths: readonly [];
+}, {
+    readonly bytes: "[profiles.daimon-strict]\nextends = \"strict\"\nrestrict_network = true\ndeny = [\"/run/daimon-engine-broker\", \"/var/lib/daimon-workers/2201\", \"/var/lib/spawnfile/daimon/usage\"]\n";
+    readonly denyPaths: readonly ["/var/lib/spawnfile/daimon/usage", "/run/daimon-engine-broker", "/run/daimon-engine-broker", "/var/lib/daimon-workers/2201"];
+}];