spawnfile 0.1.17 → 0.1.18

package/dist/report/types.d.ts

@@ -1,5 +1,6 @@
 import type { RuntimeLifecycleStatus } from "../shared/index.js";
 import type { ModelAuthMethod } from "../shared/index.js";
+import type { RecordingAgentReport } from "./recording.js";
 export type CapabilityOutcome = "degraded" | "supported" | "unsupported";
 export interface CapabilityReport {
     key: string;
@@ -11,6 +12,12 @@ export interface DiagnosticReport {
     message: string;
 }
 export interface ContainerRuntimeInstanceReport {
+    /** Per-agent paths for shared runtime instances; all paths are container absolute. */
+    agent_paths?: Record<string, {
+        workspace_path: string;
+        home_path: string | null;
+        skill_roots: string[];
+    }>;
     config_path: string;
     /** Per pi/daimon agent (keyed by node id, e.g. "agent:eleanor"): the resolved pi
      * engine kind (see `PI_ENGINE_KINDS` in `src/runtime/pi/appTemplate.ts`, e.g.
@@ -173,6 +180,7 @@ export interface ContainerPortMappingReport {
     published_port: number;
 }
 export interface ContainerMoltnetNodePlanSummary {
+    node_id?: string;
     config_path: string;
     credential_agent_id?: string;
     credential_id?: string;
@@ -268,6 +276,53 @@ export interface ContainerReport {
     persistent_mounts?: ContainerPersistentMountReport[];
     workspace_resources?: ContainerWorkspaceResourceReport[];
 }
+/** Association captured while walking the resolved compile graph. */
+export interface WorkspaceResourceOwnership {
+    agent_node_ids: string[];
+    declared_by?: string;
+}
+/** One workspace bundle archive the compile staged, with the digest Spawnfile built or verified. */
+export interface CompileReportWorkspaceBundle extends Partial<WorkspaceResourceOwnership> {
+    cache_key?: string;
+    content_bytes?: number;
+    file_count?: number;
+    id: string;
+    identity?: "dev" | "release";
+    /** Input kind of a built bundle. */
+    input?: "dependencies" | "files" | "generated";
+    origin: "built" | "prebuilt";
+    platform?: string;
+    sha256: string;
+}
+/** A `fetch: build` git resource: the commit its selector resolved to and the archive cut from that commit. */
+export interface CompileReportWorkspaceGitResource extends Partial<WorkspaceResourceOwnership> {
+    auth: "none" | "ssh_key" | "ssh_key_env";
+    cache_key: string;
+    commit: string;
+    content_bytes: number;
+    file_count: number;
+    id: string;
+    identity: "dev" | "release";
+    platform: string;
+    selector: {
+        kind: "branch" | "ref" | "tag";
+        value: string;
+    } | {
+        kind: "default_branch";
+    };
+    sha256: string;
+    url: string;
+}
+/** Present only when at least one effective compiled agent enables recording. */
+export interface RecordingReport {
+    agents?: RecordingAgentReport[];
+    /** Maximum recording window across agents, including the 30-day default. */
+    keep_ms: number;
+    /** Durable memory mounts accessible to any recording agent, including team banks. */
+    memory_mount_ids: string[];
+    /** Per-agent recording stores protected by the same destructive-volume guard. */
+    recording_mount_ids?: string[];
+}
 export interface CompileReport {
     compile_fingerprint?: string;
     container?: ContainerReport;
@@ -276,7 +331,10 @@ export interface CompileReport {
     nodes: NodeReport[];
     output_directory?: string;
     project_name?: string;
+    recording?: RecordingReport;
     root: string;
     spawnfile_version: "0.1";
+    workspace_bundles?: CompileReportWorkspaceBundle[];
+    workspace_git_resources?: CompileReportWorkspaceGitResource[];
 }
 export {};

package/dist/runtime/container.js

@@ -1,15 +1,15 @@
+import { createDaimonInstallCommands } from "./daimonInstall.js";
 import { SpawnfileError } from "../shared/index.js";
 import { NOOPOLIS_RUN_ID_ENV, resolveNoopolisRunId } from "./common.js";
 import { createVendorCopyCommand, needsVendorCopyCommand, resolveInstallPackageSpec } from "./containerPackageOverrides.js";
 import { resolveRuntimeInstallSelection } from "./install.js";
 import { DAIMON_LOCAL_RUNTIME_IDENTITY_ENV, loadLocalDaimonRuntimeIdentity } from "./localDaimonAuthority.js";
-import { DAIMON_CONTRACT_MANIFEST_SHA256, DAIMON_GROK_ENGINE_BROKER } from "./daimon/contractManifest.js";
+import { DAIMON_CONTRACT_MANIFEST_SHA256 } from "./daimon/contractManifest.js";
 import { DAIMON_WAKE_FUSE_DIRECTORY, DAIMON_WAKE_FUSE_DIRECTORY_ENV } from "./daimon/config.js";
 export const RUNTIME_INSTALL_ROOT = "/opt/spawnfile/runtime-installs";
 const PI_RUNTIME_BASE_IMAGE_ENV = "SPAWNFILE_PI_RUNTIME_BASE_IMAGE";
 const LEGACY_DAIMON_RUNTIME_IMAGE_ENV = "SPAWNFILE_DAIMON_RUNTIME_IMAGE";
 const LEGACY_DAIMON_RUNTIME_CAPABILITY_RECEIPT_ENV = "SPAWNFILE_DAIMON_RUNTIME_CAPABILITY_RECEIPT";
-const DAIMON_CAPABILITY_RECEIPT_FILE = "capability-receipt.json";
 const OPENCLAW_RUNTIME_IMAGE_ENV = "SPAWNFILE_OPENCLAW_RUNTIME_IMAGE";
 const PICOCLAW_RUNTIME_IMAGE_ENV = "SPAWNFILE_PICOCLAW_RUNTIME_IMAGE";
 const DAIMON_PACKAGE_NAME = "@noopolis/daimon";
@@ -54,7 +54,7 @@ const resolveRuntimeImageRef = (envName, selection) => process.env[envName]?.tri
 const resolveDaimonRuntimeImageRef = async (selection) => {
     if (selection.kind !== "container_image" ||
         !selection.digest ||
-        !selection.capabilityReceipt) {
+        !(selection.capabilityReceipt || selection.capabilityReceipts)) {
         throw new SpawnfileError("runtime_error", "Daimon organization runtime v1 requires a pinned generic Daimon runtime image");
     }
     const pinnedImage = `${selection.image}@${selection.digest}`;
@@ -70,7 +70,10 @@ const resolveDaimonRuntimeImageRef = async (selection) => {
     if (selection.contractManifestSha256 !== DAIMON_CONTRACT_MANIFEST_SHA256) {
         throw new SpawnfileError("runtime_error", "Selected Daimon runtime image does not attest the compiler's exact contract manifest; build and select a matching local artifact or pin a published compatible release");
     }
-    return { capabilityReceipt: selection.capabilityReceipt, image: pinnedImage };
+    return {
+        capabilityReceipt: selection.capabilityReceipts ?? selection.capabilityReceipt,
+        image: pinnedImage
+    };
 };
 export const createRuntimeInstallRecipe = async (runtimeName, options = {}) => {
     const selection = await resolveRuntimeInstallSelection(runtimeName);
@@ -130,15 +133,7 @@ export const createRuntimeInstallRecipe = async (runtimeName, options = {}) => {
         case "daimon": {
             const daimonRuntime = await resolveDaimonRuntimeImageRef(selection);
             return {
-                commands: [
-                    `test -f ${installRoot}/${DAIMON_CAPABILITY_RECEIPT_FILE} && actual="$(sha256sum ${installRoot}/${DAIMON_CAPABILITY_RECEIPT_FILE} | awk '{print "sha256:" $1}')" && test "$actual" = ${JSON.stringify(daimonRuntime.capabilityReceipt)}`,
-                    `test -f ${installRoot}/contract-manifest.json && test -f ${installRoot}/contract-manifest.sha256 && manifest="$(cat ${installRoot}/contract-manifest.sha256)" && test "$manifest" = ${JSON.stringify(DAIMON_CONTRACT_MANIFEST_SHA256)} && test "$(sha256sum ${installRoot}/contract-manifest.json | awk '{print "sha256:" $1}')" = "$manifest" && node -e 'const fs=require("fs");const r=JSON.parse(fs.readFileSync(process.argv[1],"utf8"));if(r.manifest_sha256!==process.argv[2])process.exit(1)' ${installRoot}/${DAIMON_CAPABILITY_RECEIPT_FILE} "$manifest"`,
-                    `ln -sf ${installRoot}/bin/daimon-runtime /usr/local/bin/daimon-runtime`,
-                    `ln -sf ${installRoot}/bin/codex /usr/local/bin/codex`,
-                    `install -o root -g root -m 0555 ${installRoot}/bin/grok /usr/local/bin/grok && arch="$(dpkg --print-architecture)" && case "$arch" in amd64) expected=${DAIMON_GROK_ENGINE_BROKER.grokCliArtifacts.x64.sha256} ;; arm64) expected=${DAIMON_GROK_ENGINE_BROKER.grokCliArtifacts.arm64.sha256} ;; *) exit 1 ;; esac && test "$(sha256sum /usr/local/bin/grok | awk '{print $1}')" = "$expected"`,
-                    `ln -sf ${installRoot}/bin/agy /usr/local/bin/agy`,
-                    `mkdir -p /opt/daimon/bin && install -o root -g root -m 0555 ${installRoot}/bin/daimon-engine-broker /opt/daimon/bin/daimon-engine-broker && arch="$(dpkg --print-architecture)" && case "$arch" in amd64) expected=${DAIMON_GROK_ENGINE_BROKER.artifacts.x64Sha256} ;; arm64) expected=${DAIMON_GROK_ENGINE_BROKER.artifacts.arm64Sha256} ;; *) exit 1 ;; esac && test "$(sha256sum /opt/daimon/bin/daimon-engine-broker | awk '{print $1}')" = "$expected"`
-                ],
+                commands: createDaimonInstallCommands(installRoot, daimonRuntime.capabilityReceipt),
                 copyCommands: [createRuntimeImageCopyCommand(daimonRuntime.image, installRoot)],
                 env: {
                     ...containerEnv,

package/dist/runtime/daimon/adapter.js

@@ -1,7 +1,7 @@
 import { SpawnfileError } from "../../shared/index.js";
 import { CLI_ENGINE_SKILL_BASE_DIRECTORIES, createAgentCapabilities, createDiagnostic, createDocumentFiles, createSkillFiles } from "../common.js";
 import { parseEveryScheduleMs } from "../scheduleUtils.js";
-import { createDaimonContainerTargets, daimonMemoryCapabilityFor, daimonMemorySelectionWarning, daimonMemoryVectorRecallWarning, DAIMON_CONFIG_FILE, DAIMON_CONTROL_PORT, DAIMON_ENGINES, resolveDaimonEngine } from "./config.js";
+import { assertDaimonAgentOptions, assertDaimonInstructionBounds, createDaimonContainerTargets, daimonMemoryCapabilityFor, daimonMemorySelectionWarning, daimonMemoryVectorRecallWarning, DAIMON_CONFIG_FILE, DAIMON_CONTROL_PORT, DAIMON_ENGINES, resolveDaimonEngine } from "./config.js";
 import { resolveDaimonGrokModel } from "./grokModel.js";
 import { prepareDaimonRuntimeAuth } from "./runAuth.js";
 import { hasDaimonScheduleAuthority } from "./scheduleAuthority.js";
@@ -18,7 +18,7 @@ const assertDaimonSurfaces = (surfaces) => {
     }
 };
 const assertDaimonModel = (target) => {
-    if (target.provider === "openai" && target.auth.method === "codex" && !target.endpoint && !target.reasoningEffort)
+    if (target.provider === "openai" && target.auth.method === "codex" && !target.endpoint)
         return;
     if (target.provider === "xai" && target.auth.method === "grok" && !target.endpoint)
         return;
@@ -99,11 +99,14 @@ const daimonCodexPolicyError = (node) => {
  * organization, and the declaration this compiler lowers is one the runtime
  * actually honours. The remaining validations are engine-independent and stay.
  */
+// `${workspace}` in an MCP command resolves to the agent workspace under
+// `<instance-root>`, which container rendering makes absolute.
+const isTargetAbsolutePath = (value) => value !== undefined && (value.startsWith("/") || value.startsWith("<instance-root>/"));
 const unsupportedAgentFeatures = (node) => {
     for (const server of node.mcpServers) {
         if (!server.tools?.length)
             throw new SpawnfileError("validation_error", `Daimon MCP server ${server.name} requires an explicit tools allowlist`);
-        if (server.transport === "stdio" && !server.command?.startsWith("/"))
+        if (server.transport === "stdio" && !isTargetAbsolutePath(server.command))
             throw new SpawnfileError("validation_error", `Daimon stdio MCP server ${server.name} requires an absolute command`);
     }
     const engine = resolveDaimonEngine(node);
@@ -210,6 +213,14 @@ export const daimonAdapter = {
     },
     createContainerTargets: createDaimonContainerTargets,
     name: "daimon",
+    preflightAgent(node, nodeId) {
+        unsupportedAgentFeatures(node);
+        const codexPolicyError = daimonCodexPolicyError(node);
+        if (codexPolicyError)
+            throw new SpawnfileError("validation_error", codexPolicyError);
+        assertDaimonAgentOptions(nodeId, node);
+        assertDaimonInstructionBounds(nodeId, node);
+    },
     prepareRuntimeAuth: prepareDaimonRuntimeAuth,
     systemInstructionSurface: {
         placement: "append_pointer",
@@ -223,7 +234,7 @@ export const daimonAdapter = {
             (typeof options.engine !== "string" || !DAIMON_ENGINES.includes(options.engine))) {
             diagnostics.push(createDiagnostic("error", `Daimon runtime option engine must be one of ${DAIMON_ENGINES.join(", ")}`));
         }
-        for (const key of Object.keys(options).filter((key) => !["engine", "restrict_to_workspace", "codex_policy", "attention"].includes(key))) {
+        for (const key of Object.keys(options).filter((key) => !["engine", "restrict_to_workspace", "codex_policy", "attention", "turn_limits"].includes(key))) {
             diagnostics.push(createDiagnostic("error", `Daimon runtime option ${key} is not part of organization runtime v1`));
         }
         if (options.codex_policy !== undefined && options.codex_policy !== "workspace-no-network") {

package/dist/runtime/daimon/config.d.ts

@@ -21,5 +21,9 @@ export declare const DAIMON_WAKE_FUSE_MOUNT_ID = "daimon-wake-fuse";
 export declare const DAIMON_RUNTIME_HOMES_DIRECTORY = "runtime-homes";
 export declare const DAIMON_ENGINES: readonly ["agy", "codex", "grok"];
 type DaimonEngine = typeof DAIMON_ENGINES[number];
+/** The per-agent option checks `createDaimonContainerTargets` applies, for preflight. */
+export declare const assertDaimonAgentOptions: (agentId: string, node: ResolvedAgentNode) => void;
+/** The instruction-size check compile applies in `createDaimonContainerTargets`, for preflight. */
+export declare const assertDaimonInstructionBounds: (agentId: string, node: ResolvedAgentNode) => void;
 export declare const resolveDaimonEngine: (node: ResolvedAgentNode) => DaimonEngine;
 export declare const createDaimonContainerTargets: (inputs: ContainerTargetInput[]) => Promise<ContainerTarget[]>;

package/dist/runtime/daimon/config.js

@@ -1,11 +1,14 @@
 import path from "node:path";
+import { CLI_ENGINE_SKILL_BASE_DIRECTORIES } from "../common.js";
 import { parseEveryScheduleMs } from "../scheduleUtils.js";
 import { SpawnfileError } from "../../shared/index.js";
 import { DAIMON_AGY_SUBSCRIPTION_REALM, DAIMON_ENGINE_CREDENTIALS, DAIMON_GROK_SUBSCRIPTION_REALM, DAIMON_GROK_TURN_USAGE_LEDGER } from "./contractManifest.js";
 import { DAIMON_INSTANCE_STATE_ROOT, daimonMemoryCapabilityFor, daimonMemorySelectionWarning, daimonMemoryVectorRecallWarning, resolveDaimonAgentMemory } from "./memory.js";
 import { assertDaimonScheduleAuthority } from "./scheduleAuthority.js";
 import { assertDaimonAttentionAuthority, resolveDaimonAttention } from "./attention.js";
+import { resolveDaimonGrokTurnLimits } from "./grokTurnLimits.js";
 import { resolveDaimonGrokModel } from "./grokModel.js";
+import { assertDaimonRecordingIsolation, daimonRecordingMountId, resolveDaimonAgentRecording } from "./recording.js";
 export const DAIMON_CODEX_WORKSPACE_NO_NETWORK_POLICY = { mode: "workspace-write", networkAccess: false, webSearch: "disabled" };
 // Re-exported so every existing importer of these names keeps working; the
 // definitions themselves now live in `./memory.js`.
@@ -50,11 +53,31 @@ const normalizeSchedule = (node) => {
 const formatInstructions = (node) => node.docs.map((document) => `# ${document.role}\n\n${document.content}`).join("\n\n").trim() ||
     `You are ${node.name}. Follow the workspace instructions.`;
 const assertPublicInstructionBounds = (agentId, instructions) => {
-    if (Buffer.byteLength(instructions, "utf8") > DAIMON_MAX_INSTRUCTION_BYTES ||
-        [...instructions].length > DAIMON_MAX_INSTRUCTION_CODEPOINTS) {
-        throw new SpawnfileError("validation_error", `Daimon organization runtime v1 instructions for ${agentId} exceed Daimon's public config limit`);
+    const bytes = Buffer.byteLength(instructions, "utf8");
+    const codepoints = [...instructions].length;
+    if (bytes > DAIMON_MAX_INSTRUCTION_BYTES || codepoints > DAIMON_MAX_INSTRUCTION_CODEPOINTS) {
+        throw new SpawnfileError("validation_error", `Daimon organization runtime v1 instructions for ${agentId} exceed Daimon's public config limit (${bytes} bytes, ${codepoints} code points; limit ${DAIMON_MAX_INSTRUCTION_BYTES} each)`);
     }
 };
+const assertTurnLimitsEngine = (agentId, engine, turnLimits) => {
+    if (engine !== "grok" && turnLimits !== undefined) {
+        throw new SpawnfileError("validation_error", `Daimon runtime option turn_limits is only supported on a brokered Grok agent: ${agentId}`);
+    }
+};
+// Daimon lowers only the primary model; an effort on a fallback would be accepted and dropped.
+const assertNoFallbackReasoningEffort = (agentId, node) => {
+    if ((node.execution?.model?.fallback ?? []).some((target) => target.reasoning_effort !== undefined)) {
+        throw new SpawnfileError("validation_error", `Daimon lowers reasoning_effort only from the primary model; remove it from fallback models: ${agentId}`);
+    }
+};
+/** The per-agent option checks `createDaimonContainerTargets` applies, for preflight. */
+export const assertDaimonAgentOptions = (agentId, node) => {
+    resolveDaimonAttention(node.runtime.options.attention);
+    assertNoFallbackReasoningEffort(agentId, node);
+    assertTurnLimitsEngine(agentId, resolveDaimonEngine(node), resolveDaimonGrokTurnLimits(node.runtime.options.turn_limits));
+};
+/** The instruction-size check compile applies in `createDaimonContainerTargets`, for preflight. */
+export const assertDaimonInstructionBounds = (agentId, node) => assertPublicInstructionBounds(agentId, formatInstructions(node));
 export const resolveDaimonEngine = (node) => {
     const engine = node.runtime.options.engine ?? "codex";
     if (typeof engine === "string" && DAIMON_ENGINES.includes(engine)) {
@@ -69,12 +92,14 @@ const resolveDaimonEngineConfig = (node) => {
         return { kind, model: declared.model, reasoningEffort: declared.reasoningEffort };
     }
     const model = kind === "codex" ? node.execution?.model?.primary?.name : undefined;
+    const reasoningEffort = kind === "codex" ? node.execution?.model?.primary?.reasoning_effort : undefined;
     const codexSandbox = kind === "codex" && node.runtime.options.codex_policy === "workspace-no-network"
         ? DAIMON_CODEX_WORKSPACE_NO_NETWORK_POLICY
         : undefined;
     return {
         kind,
         ...(model === undefined ? {} : { model }),
+        ...(reasoningEffort === undefined ? {} : { reasoningEffort }),
         ...(codexSandbox === undefined ? {} : { codexSandbox })
     };
 };
@@ -127,8 +152,14 @@ export const createDaimonContainerTargets = async (inputs) => {
     if (agents.length > DAIMON_MAX_AGENTS) {
         throw new SpawnfileError("validation_error", `Daimon organization runtime v1 supports at most 32 agents; found ${agents.length}. Split the organization across explicit runtime boundaries.`);
     }
+    for (const input of agents)
+        assertNoFallbackReasoningEffort(input.id, input.value);
     const hasSchedules = agents.some((input) => input.value.schedule !== undefined);
     const attentionById = new Map(agents.map((input) => [input.id, resolveDaimonAttention(input.value.runtime.options.attention)]));
+    // Declared per agent and carried to the broker's service config, never into the Daimon
+    // organization config: `turn_limits` is a registration budget, and the contract's
+    // `consumedConfigFields` does not include it.
+    const turnLimitsById = new Map(agents.map((input) => [input.id, resolveDaimonGrokTurnLimits(input.value.runtime.options.turn_limits)]));
     const hasAttention = [...attentionById.values()].some((attention) => attention !== undefined);
     if (hasAttention)
         await assertDaimonAttentionAuthority();
@@ -137,6 +168,7 @@ export const createDaimonContainerTargets = async (inputs) => {
     const configAgents = agents
         .map((input) => {
         const memory = resolveDaimonAgentMemory(input.value);
+        const recording = resolveDaimonAgentRecording(input, DAIMON_ORGANIZATION_TARGET_ID, agents.length);
         return {
             engine: resolveDaimonEngineConfig(input.value),
             id: input.id,
@@ -148,6 +180,7 @@ export const createDaimonContainerTargets = async (inputs) => {
                     ...(server.auth?.mode === "bearer" ? { authSecretEnv: server.auth.secret } : {})
                 })) }),
             ...(memory ? { memory } : {}),
+            ...(recording ? { recording } : {}),
             ...(attentionById.get(input.id) === undefined ? {} : { attention: attentionById.get(input.id) }),
             ...(input.value.surfaces?.moltnet?.length ? { moltnet: {
                     cliPath: "/usr/local/bin/moltnet",
@@ -160,7 +193,18 @@ export const createDaimonContainerTargets = async (inputs) => {
         };
     })
         .sort((left, right) => left.id.localeCompare(right.id));
+    assertDaimonRecordingIsolation(configAgents.map((agent) => agent.recording), DAIMON_INSTANCE_STATE_ROOT);
+    const recordingMounts = configAgents.flatMap((agent) => agent.recording ? [{
+            id: daimonRecordingMountId(path.posix.basename(agent.recording.directory)),
+            lifecycle: "exclusive-reattach", mountPath: agent.recording.directory,
+            reason: `Daimon wake recording for ${agent.id}`
+        }] : []);
     const engineByNodeId = Object.fromEntries(configAgents.map((agent) => [agent.id, agent.engine.kind]));
+    for (const agent of configAgents)
+        assertTurnLimitsEngine(agent.id, agent.engine.kind, turnLimitsById.get(agent.id));
+    const grokTurnLimitsByNodeId = Object.fromEntries(configAgents
+        .filter((agent) => agent.engine.kind === "grok" && turnLimitsById.get(agent.id) !== undefined)
+        .map((agent) => [agent.id, turnLimitsById.get(agent.id)]));
     const grokModelByNodeId = Object.fromEntries(configAgents
         .filter((agent) => agent.engine.kind === "grok" && agent.engine.model !== undefined && agent.engine.reasoningEffort !== undefined)
         .map((agent) => [agent.id, { model: agent.engine.model, reasoningEffort: agent.engine.reasoningEffort }]));
@@ -204,8 +248,13 @@ export const createDaimonContainerTargets = async (inputs) => {
         throw new SpawnfileError("validation_error", "Daimon organization runtime v1 config exceeds Daimon's public config limit");
     }
     return [{
+            agentPathsByNodeId: Object.fromEntries(configAgents.map((agent) => [agent.id, {
+                    workspacePath: agent.workspacePath, homePath: agent.runtimeHomePath,
+                    skillRoots: agent.engine.kind === "grok" ? [] : CLI_ENGINE_SKILL_BASE_DIRECTORIES.map((root) => path.posix.join(agent.workspacePath, path.posix.relative("workspace", root)))
+                }])),
             engineByNodeId,
             ...(hasGrok ? { grokModelByNodeId } : {}),
+            ...(hasGrok && Object.keys(grokTurnLimitsByNodeId).length > 0 ? { grokTurnLimitsByNodeId } : {}),
             files: [
                 ...agents.flatMap((input) => input.emittedFiles.map((file) => moveWorkspaceFile(file, input.slug))),
                 { content: serializedConfig, path: DAIMON_CONFIG_FILE },
@@ -222,7 +271,7 @@ export const createDaimonContainerTargets = async (inputs) => {
                     ...(hasGrok ? [DAIMON_GROK_SUBSCRIPTION_REALM.bootstrapMountPath] : [])
                 ],
             } : {}),
-            persistentMounts: [...portableEngineHomeMounts, ...toolStateMounts, {
+            persistentMounts: [...portableEngineHomeMounts, ...toolStateMounts, ...recordingMounts, {
                     id: DAIMON_RUNTIME_ACCEPTANCE_STORE_MOUNT_ID,
                     mountPath: `<instance-root>/${DAIMON_RUNTIME_ACCEPTANCE_STORE_DIRECTORY}`,
                     reason: "Daimon organization durable wake acceptance store"

package/dist/runtime/daimon/contract-manifest.json

@@ -0,0 +1 @@
+{"activityResponseSchema":{"additionalProperties":false,"properties":{"items":{"items":{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"id":{"format":"uuid","pattern":"^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$","type":"string"},"kind":{"enum":["wake_started","wake_completed","wake_rejected","wake_aborted","agent_stopped"]},"occurredAt":{"format":"date-time","pattern":"^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$","type":"string"},"wakeId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["id","agentId","kind","occurredAt"],"type":"object"},"maxItems":100,"type":"array"},"nextCursor":{"maxLength":16,"minLength":1,"pattern":"^(0|[1-9][0-9]{0,15})$","type":"string"},"version":{"const":"noopolis.daimon.organization-runtime-activity.v1"}},"required":["version","items"],"type":"object"},"activityV2ResponseSchema":{"additionalProperties":false,"properties":{"executions":{"items":{"additionalProperties":false,"properties":{"agent_id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"delivery_ids":{"items":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"maxItems":32,"type":"array"},"execution_id":{"type":"string"},"state":{"const":"running"}},"required":["agent_id","execution_id","state","delivery_ids"],"type":"object"},"maxItems":32,"type":"array"},"items":{"items":{"additionalProperties":false,"properties":{"acceptance_id":{"type":"string"},"accepted_at":{"format":"date-time","pattern":"^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$","type":"string"},"active":{"type":"boolean"},"agent_id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"code":{"enum":["engine_failed","host_stopped","host_stopping","queued_wake_stopped","active_wake_aborted","queue_full","unknown_agent"]},"deferred":{"type":"boolean"},"delivery_id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"execution_id":{"type":"string"},"queue_position":{"minimum":1,"type":"integer"},"request_digest":{"type":"string"},"state":{"enum":["accepted","running","completed","failed","stopped"]},"text":{"maxLength":16384,"type":"string"},"updated_at":{"format":"date-time","pattern":"^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$","type":"string"},"version":{"const":"noopolis.daimon.wake-receipt-status.v2"}},"required":["version","acceptance_id","agent_id","delivery_id","request_digest","state","accepted_at","updated_at","active"],"type":"object"},"maxItems":2112,"type":"array"},"state":{"enum":["running","stopped"]},"version":{"const":"noopolis.daimon.organization-runtime-activity.v2"}},"required":["version","items"],"type":"object"},"agySubscriptionRealm":{"directoryMode":448,"durableMountPath":"/var/lib/spawnfile/daimon/agy-subscription-realm","fileMode":384,"maxUnlockBytes":4096,"unlockMountPath":"/var/lib/spawnfile/daimon/agy-unlock-secret","unlockSourceSlot":"agy-unlock-secret"},"attention":{"accounting":"execution-start-reservations","busyDispatch":"bounded-pending-message-batch","completion":"explicit-per-delivery","defaultMaxBatchBytes":12000,"defaultMaxBatchMessages":8,"enabledBy":"agents[].attention","idleDispatch":"immediate","unhandled":"deferred-until-new-input"},"consumedConfigFields":["version","host.bindHost","host.port","host.controlTokenEnv","agents[].id","agents[].name","agents[].instructions","agents[].workspacePath","agents[].runtimeHomePath","agents[].engine.kind","agents[].engine.model","agents[].engine.reasoningEffort","agents[].engine.codexSandbox","agents[].schedule.kind","agents[].schedule.interval_ms","agents[].schedule.cron","agents[].schedule.timezone","agents[].schedule.prompt","agents[].schedule.jitter_seconds","agents[].mcp","agents[].moltnet","agents[].memory","agents[].attention","agents[].recording"],"deliverySemantics":{"activeDeliveryIdempotency":"unbounded-until-terminal","concurrentSameAgentTurns":false,"externalEffectsExactlyOnce":false,"recovery":"at-least-once-with-stable-wake-id","terminalReceiptHorizon":2048},"engineCredentialMaterial":{"codex":{"destinationRelativePath":".codex/auth.json","directoryMode":448,"fileMode":384,"sourceRelativePath":".daimon-inbound/codex-auth","sourceSlot":"codex-auth"}},"grokEngineBroker":{"artifacts":{"arm64Sha256":"d0dc1c03197c3e90f09b66ad7c89b4f7b448d06dc84c03b247dce976d6018d6e","sourceSha256":"15836d7ad69f12ef581a6e5b8635c9db43b2177dac609160c0749d3d1fefbaa8","x64Sha256":"95aa9c272225e74ff9f45f54dde4bc30aee324e9ba24d8a876db9151c81b454d"},"backendSocketPath":"/run/daimon-engine-broker/backend.sock","bounds":{"capabilityBundleBytes":8196,"capabilityBytes":4096,"outputBytes":262144,"promptBytes":65536},"controlProtocolVersion":"noopolis.daimon.engine-broker.v4","controlSocketPath":"/run/daimon-engine-broker/control.sock","credentialHomePath":"/var/lib/spawnfile/daimon/grok-subscription-realm","grokCliArtifacts":{"arm64":{"bytes":136090504,"sha256":"39ab87666877d64ef3a40aa60fbe0c3b6a6acd7001b78fe60e2c76bb6cfc4a94","url":"https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-aarch64"},"x64":{"bytes":163035648,"sha256":"be5905e107d2b8b5f3c142d21ecfe4c8fd32a913d2fd551b788707930c4dc80d","url":"https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-x86_64"}},"grokCliBuild":"3736acbc8658","grokCliVersion":"1.0.34","grokExecutablePath":"/usr/local/bin/grok","identities":{"brokerUid":2100,"firstWorkerUid":2200,"organizationUid":2000},"inferenceGrants":{"bodyMembers":["messages","model","reasoning_effort","response_format","stream","stream_options"],"client":{"configSha256":{"grok-4.5":{"high":"ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2","low":"a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74","medium":"1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9"},"grok-4.6":{"high":"5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac","low":"79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f","medium":"6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8"},"grok-build":{"high":"98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c","low":"ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1","medium":"01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d"}},"envKey":"DAIMON_INFERENCE_GRANT","modelId":"daimon-inference-grok"},"failureCodes":["auth_stale","grant_limit","invalid_request","unavailable"],"ledgerDedupeKey":["grant","request"],"ledgerVersion":"noopolis.daimon.inference-usage.v1","limits":{"maxRequests":64,"maxTokens":2000000},"maxInFlightRequestsPerGrant":1,"maxLiveGrants":8,"messageRoles":["system","user","assistant"],"purposes":["judge","optimizer"],"requestKinds":["request_inference_grant","release_inference_grant"],"tokenPrefix":"inference_","ttlMs":600000},"launcherSocketPath":"/run/daimon-engine-broker/launcher.sock","mcpFacade":{"host":"127.0.0.1","path":"/mcp","port":43124},"nativeAbiVersion":2,"nativeExecutablePath":"/opt/daimon/bin/daimon-engine-broker","projectionVersion":"noopolis.daimon.grok-broker-projection.v3","providerProxy":{"host":"127.0.0.1","port":43123},"registrationPath":"/etc/daimon-engine-broker/registrations.bin","runRequestBudget":{"countsCredentialRetries":true,"fileName":"run-requests.json","includesInferenceGrants":true,"maximumField":"maxRunRequests","storeField":"runRequestStore"},"serviceConfigPath":"/etc/daimon-engine-broker/service.json","serviceConfigVersions":["noopolis.daimon.engine-broker-service.v1","noopolis.daimon.engine-broker-service.v2","noopolis.daimon.engine-broker-service.v3"],"slotPreflightVersion":"noopolis.daimon.grok-slot-preflight.v2","slotRouting":{"controlCaller":"organization","key":"slot","repeatedAgentIds":true,"resetRequest":"reset_slot","resetResponse":"slot_reset","slotEnvironment":"DAIMON_ENGINE_BROKER_SLOT","turnStoreDirectory":"slot-{slot}","workersMayControl":false},"turnLimits":{"bounds":{"maxRequests":[1,48],"maxTokens":[1,10000000],"timeoutMs":[1000,3600000]},"keys":["maxRequests","maxTokens","timeoutMs"],"limitReasons":["tokens","requests","timeout","none"],"maxInFlightRequests":1,"missingUsageEstimate":{"inputBytesPerToken":2,"outputTokens":4096},"requestUsageMaxTokens":500000,"tokenCeilingOvershoot":"at-most-one-request","v1Defaults":{"maxRequests":32,"maxTokens":300000,"timeoutMs":240000},"wakeMayOnlyLower":true},"turnRecordVersions":["noopolis.daimon.engine-broker-turn.v1","noopolis.daimon.engine-broker-turn.v2"],"turnStorePath":"/var/lib/spawnfile/daimon/grok-subscription-realm/turns","wakeLimitEnvironment":{"maxTokens":"DAIMON_ENGINE_WAKE_TOKEN_CEILING","timeoutMs":"DAIMON_ENGINE_WAKE_TIMEOUT_MS"},"worker":{"clockedConfigSha256":{"grok-4.5":{"high":"907d8967960c342b442d6d256b2585f3c85bd846a78578f596f0b605403d6d34","low":"3c4f3515b21c1bffb3fb770e2ecb4b918b6c43d5e77c1fd47e1e6698d1fedee7","medium":"9117e12b2f3f6fa045799592969cbaae1c2f3b1ea79330badac8655b9b41dd7a"},"grok-4.6":{"high":"203744f6f0dfc0bc80cfb896880497edfd9b3de4dcf33060e8ef4d2ef5f220a7","low":"751f1dcd04983e5e5883df5a8fefa04f201e187e5ef1f344d3bf83f950830432","medium":"f1406f93a8091eb0c09e07321254a9c783a89b0bbf5548d9613d53a8d087a517"},"grok-build":{"high":"6efddadc82c38020d3351829e54bb09fa456cd6d76ea1247902794d82a4a3ffa","low":"a8c63ba910623a0686930c27db0733f4a2588c7fca9dd7da25c3f18027720ab5","medium":"6afcd2b90c0d19794f8c0d22147a0f011946a92e613f89dae98b0ca729313101"}},"configSha256":{"grok-4.5":{"high":"c63c3387ce92d94ec3f690abfe98942afcd7c9e17ff84816bbe751f340ab251f","low":"8247127c3625ff7c5d8d527a53596b89ec6557a821ac46cfd00bd122b90daff6","medium":"59288cee61297bb8c002097061a48f77b09d310754187a253ee089f7172a9155"},"grok-4.6":{"high":"65b0212564fb74042b1503d293fb8d3620276033264c0efade2a539ca09218e3","low":"ab58499ac32678097c146479896f2b8a8e2b0e39aea22dc0a60b6227e370538e","medium":"df1a5cc84346e7f6bf6090492fbd19faaefb42953e3bb2e8c6cbc0572242403f"},"grok-build":{"high":"a23724e00d670caee185ba7690d2daa868173e53905cf446f5329666f01ab4e3","low":"fb343f2809903f26d21681470943235031f946e99085542fd89555eb7782cbb5","medium":"8a587ef75c90eab70d19b24583e60051d6fba9d90c558839fdbb15588b4cc656"}},"defaultModel":"grok-4.6","defaultReasoningEffort":"low","home":{"directory":{"group":"worker","mode":1017,"uid":0},"organizationRuntimeHome":{"group":"worker","mode":456,"owner":"organization"},"privateTmp":{"mode":448,"owner":"worker","relativeToWorkerHome":"tmp"},"readOnlyFiles":{"gid":0,"mode":292,"names":["config.toml","managed_config.toml","requirements.toml","sandbox.toml","trusted_folders.toml"],"uid":0},"sandboxEvents":{"group":"broker","mode":416,"owner":"worker","relativePath":"sessions/sandbox-events.jsonl"},"sessionsDirectory":{"group":"worker","mode":1017,"relativePath":"sessions","uid":0},"sharedTmp":{"maxGroupExclusive":2200,"mode":1020,"otherMode":4,"paths":["/tmp","/var/tmp"],"uid":0},"spillDirectory":{"fileMode":416,"group":"worker","mode":1512,"owner":"organization","relativeToRuntimeHome":"tool-output"}},"maxTurns":48,"modelId":"daimon-broker-grok","models":["grok-4.6","grok-4.5","grok-build"],"reasoningEfforts":["low","medium","high"],"systemPromptSha256":"2c31c0085a54a4efbf9c0cf0b8124c56e47f38691b7f0c7fa233a74abaa8ddf8","taskClock":{"directoryMode":493,"directoryPath":"/run/daimon-engine-broker/task-clock/slot-0","fileMode":420,"ownerUid":2100,"preloadPath":"/usr/local/lib/daimon/libfaketime.so.1","rootDirectoryPath":"/run/daimon-engine-broker/task-clock","slotDirectoryPattern":"/run/daimon-engine-broker/task-clock/slot-{slot}","slotFilePattern":"/run/daimon-engine-broker/task-clock/slot-{slot}/faketime","timestampFilePath":"/run/daimon-engine-broker/task-clock/slot-0/faketime","version":"noopolis.daimon.grok-broker-task-clock.v2","workerView":"own-directory-visible-sibling-directories-denied"},"toolIds":["run_terminal_cmd","read_file","grep","list_dir","search_tool","use_tool"],"visibleTools":["grep","list_dir","read_file","run_terminal_command","search_tool","use_tool"]}},"grokSubscriptionRealm":{"agentCredentialRelativePath":".grok/auth.json","bootstrapMountPath":"/var/lib/spawnfile/daimon/grok-bootstrap-auth","bootstrapSourceSlot":"grok-auth","directoryMode":448,"durableMountPath":"/var/lib/spawnfile/daimon/grok-subscription-realm","fileMode":384,"maxCredentialBytes":65536},"healthResponseSchema":{"additionalProperties":false,"properties":{"agents":{"items":{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"state":{"enum":["starting","running","stopping","stopped","idle","failed"]}},"required":["agentId","state"],"type":"object"},"maxItems":32,"type":"array"},"state":{"enum":["starting","running","stopping","stopped"]},"version":{"const":"noopolis.daimon.organization-runtime-health.v1"}},"required":["version","state","agents"],"type":"object"},"operatorDrain":{"authorization":"control-bearer","blockedReason":"operator_stop","drainRoute":"POST /v2/drain","queuedWakes":"retained","response":"workAvailabilityResponseSchema","resumeClearsOperatorStop":false,"resumeRoute":"POST /v2/resume","runningTurns":"finish","scope":"process"},"organizationRuntimeConfigSchema":{"$id":"noopolis.daimon.organization-runtime.v1","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"agents":{"items":{"additionalProperties":false,"properties":{"attention":{"additionalProperties":false,"properties":{"maxBatchBytes":{"maximum":12000,"minimum":1024,"type":"integer"},"maxBatchMessages":{"maximum":32,"minimum":1,"type":"integer"},"maxExecutions":{"maximum":9007199254740991,"minimum":1,"type":"integer"},"maxTokens":{"maximum":9007199254740991,"minimum":1,"type":"integer"}},"type":"object"},"engine":{"additionalProperties":false,"allOf":[{"if":{"properties":{"kind":{"const":"grok"}}},"then":{"dependentRequired":{"model":["reasoningEffort"],"reasoningEffort":["model"]},"properties":{"codexSandbox":false,"model":{"enum":["grok-4.6","grok-4.5","grok-build"]},"reasoningEffort":{"enum":["low","medium","high"]}}}},{"if":{"properties":{"kind":{"const":"agy"}}},"then":{"properties":{"codexSandbox":false,"model":false,"reasoningEffort":false}}}],"properties":{"codexSandbox":{"additionalProperties":false,"properties":{"mode":{"const":"workspace-write"},"networkAccess":{"const":false},"webSearch":{"const":"disabled"}},"required":["mode","networkAccess","webSearch"],"type":"object"},"kind":{"enum":["codex","grok","agy"]},"model":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"reasoningEffort":{"enum":["none","minimal","low","medium","high","xhigh","max","ultra","persistent"]}},"required":["kind"],"type":"object"},"id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"instructions":{"maxLength":16384,"minLength":1,"pattern":"\\S","type":"string"},"mcp":{"items":{"additionalProperties":false,"properties":{"args":{"items":{"maxLength":4096,"type":"string"},"maxItems":32,"type":"array"},"authSecretEnv":{"pattern":"^[A-Za-z_][A-Za-z0-9_]*$","type":"string"},"command":{"pattern":"^/","type":"string"},"env":{"additionalProperties":{"type":"string"},"type":"object"},"name":{"maxLength":4096,"minLength":1,"type":"string"},"tools":{"items":{"maxLength":4096,"minLength":1,"type":"string"},"maxItems":32,"minItems":1,"type":"array","uniqueItems":true},"transport":{"enum":["stdio","sse","streamable_http"]},"url":{"type":"string"}},"required":["name","transport","args","env","tools"],"type":"object"},"maxItems":8,"type":"array"},"memory":{"additionalProperties":false,"properties":{"runtimeHomePath":{"maxLength":4096,"pattern":"^/","type":"string"},"source":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"tokenBudget":{"maximum":1000000,"minimum":1,"type":"integer"}},"required":["runtimeHomePath"],"type":"object"},"moltnet":{"additionalProperties":false,"properties":{"cliPath":{"pattern":"^/","type":"string"},"configPath":{"pattern":"^/","type":"string"},"networks":{"items":{"additionalProperties":false,"properties":{"dms":{"type":"boolean"},"id":{"minLength":1,"type":"string"},"rooms":{"items":{"minLength":1,"type":"string"},"type":"array","uniqueItems":true}},"required":["id","rooms","dms"],"type":"object"},"maxItems":16,"type":"array"}},"required":["cliPath","configPath","networks"],"type":"object"},"name":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"recording":{"additionalProperties":false,"properties":{"directory":{"maxLength":4096,"pattern":"^/[^\\u0000]*$","type":"string"},"keepMs":{"maximum":9007199254740991,"minimum":1,"type":"integer"},"snapshots":{"items":{"additionalProperties":false,"properties":{"id":{"pattern":"^[A-Za-z0-9._-]{1,128}$","type":"string"},"path":{"maxLength":4096,"pattern":"^/[^\\u0000]*$","type":"string"}},"required":["id","path"],"type":"object"},"maxItems":16,"type":"array","uniqueItems":true}},"required":["directory","keepMs","snapshots"],"type":"object"},"runtimeHomePath":{"maxLength":4096,"pattern":"^/","type":"string"},"workspacePath":{"maxLength":4096,"pattern":"^/","type":"string"}},"required":["id","name","instructions","workspacePath","runtimeHomePath","engine"],"type":"object"},"maxItems":32,"minItems":1,"type":"array"},"host":{"additionalProperties":false,"properties":{"bindHost":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"controlTokenEnv":{"maxLength":4096,"pattern":"^[A-Za-z_][A-Za-z0-9_]*$","type":"string"},"port":{"maximum":65535,"minimum":1,"type":"integer"}},"required":["bindHost","port","controlTokenEnv"],"type":"object"},"version":{"const":"noopolis.daimon.organization-runtime.v1"}},"required":["version","host","agents"],"type":"object"},"organizationRuntimeConfigV2Schema":{"$id":"noopolis.daimon.organization-runtime.v2","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"agents":{"items":{"additionalProperties":false,"properties":{"attention":{"additionalProperties":false,"properties":{"maxBatchBytes":{"maximum":12000,"minimum":1024,"type":"integer"},"maxBatchMessages":{"maximum":32,"minimum":1,"type":"integer"},"maxExecutions":{"maximum":9007199254740991,"minimum":1,"type":"integer"},"maxTokens":{"maximum":9007199254740991,"minimum":1,"type":"integer"}},"type":"object"},"engine":{"additionalProperties":false,"allOf":[{"if":{"properties":{"kind":{"const":"grok"}}},"then":{"dependentRequired":{"model":["reasoningEffort"],"reasoningEffort":["model"]},"properties":{"codexSandbox":false,"model":{"enum":["grok-4.6","grok-4.5","grok-build"]},"reasoningEffort":{"enum":["low","medium","high"]}}}},{"if":{"properties":{"kind":{"const":"agy"}}},"then":{"properties":{"codexSandbox":false,"model":false,"reasoningEffort":false}}}],"properties":{"codexSandbox":{"additionalProperties":false,"properties":{"mode":{"const":"workspace-write"},"networkAccess":{"const":false},"webSearch":{"const":"disabled"}},"required":["mode","networkAccess","webSearch"],"type":"object"},"kind":{"enum":["codex","grok","agy"]},"model":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"reasoningEffort":{"enum":["none","minimal","low","medium","high","xhigh","max","ultra","persistent"]}},"required":["kind"],"type":"object"},"id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"instructions":{"maxLength":16384,"minLength":1,"pattern":"\\S","type":"string"},"mcp":{"items":{"additionalProperties":false,"properties":{"args":{"items":{"maxLength":4096,"type":"string"},"maxItems":32,"type":"array"},"authSecretEnv":{"pattern":"^[A-Za-z_][A-Za-z0-9_]*$","type":"string"},"command":{"pattern":"^/","type":"string"},"env":{"additionalProperties":{"type":"string"},"type":"object"},"name":{"maxLength":4096,"minLength":1,"type":"string"},"tools":{"items":{"maxLength":4096,"minLength":1,"type":"string"},"maxItems":32,"minItems":1,"type":"array","uniqueItems":true},"transport":{"enum":["stdio","sse","streamable_http"]},"url":{"type":"string"}},"required":["name","transport","args","env","tools"],"type":"object"},"maxItems":8,"type":"array"},"memory":{"additionalProperties":false,"properties":{"runtimeHomePath":{"maxLength":4096,"pattern":"^/","type":"string"},"source":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"tokenBudget":{"maximum":1000000,"minimum":1,"type":"integer"}},"required":["runtimeHomePath"],"type":"object"},"moltnet":{"additionalProperties":false,"properties":{"cliPath":{"pattern":"^/","type":"string"},"configPath":{"pattern":"^/","type":"string"},"networks":{"items":{"additionalProperties":false,"properties":{"dms":{"type":"boolean"},"id":{"minLength":1,"type":"string"},"rooms":{"items":{"minLength":1,"type":"string"},"type":"array","uniqueItems":true}},"required":["id","rooms","dms"],"type":"object"},"maxItems":16,"type":"array"}},"required":["cliPath","configPath","networks"],"type":"object"},"name":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"recording":{"additionalProperties":false,"properties":{"directory":{"maxLength":4096,"pattern":"^/[^\\u0000]*$","type":"string"},"keepMs":{"maximum":9007199254740991,"minimum":1,"type":"integer"},"snapshots":{"items":{"additionalProperties":false,"properties":{"id":{"pattern":"^[A-Za-z0-9._-]{1,128}$","type":"string"},"path":{"maxLength":4096,"pattern":"^/[^\\u0000]*$","type":"string"}},"required":["id","path"],"type":"object"},"maxItems":16,"type":"array","uniqueItems":true}},"required":["directory","keepMs","snapshots"],"type":"object"},"runtimeHomePath":{"maxLength":4096,"pattern":"^/","type":"string"},"schedule":{"oneOf":[{"additionalProperties":false,"properties":{"kind":{"const":"disabled"}},"required":["kind"],"type":"object"},{"additionalProperties":false,"properties":{"interval_ms":{"maximum":31536000000,"minimum":1,"type":"integer"},"jitter_seconds":{"maximum":3600,"minimum":0,"type":"integer"},"kind":{"const":"every"},"prompt":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["kind","interval_ms","prompt"],"type":"object"},{"additionalProperties":false,"properties":{"cron":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"jitter_seconds":{"maximum":3600,"minimum":0,"type":"integer"},"kind":{"const":"cron"},"prompt":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"timezone":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["kind","cron","timezone","prompt"],"type":"object"}]},"workspacePath":{"maxLength":4096,"pattern":"^/","type":"string"}},"required":["id","name","instructions","workspacePath","runtimeHomePath","engine","schedule"],"type":"object"},"maxItems":32,"minItems":1,"type":"array"},"host":{"additionalProperties":false,"properties":{"bindHost":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"controlTokenEnv":{"maxLength":4096,"pattern":"^[A-Za-z_][A-Za-z0-9_]*$","type":"string"},"port":{"maximum":65535,"minimum":1,"type":"integer"}},"required":["bindHost","port","controlTokenEnv"],"type":"object"},"version":{"const":"noopolis.daimon.organization-runtime.v2"}},"required":["version","host","agents"],"type":"object"},"supportedEngineKinds":["agy","codex","grok"],"version":"noopolis.daimon.runtime-contract-manifest.v5","wakeAcceptanceTypes":["manual","message","schedule","external"],"wakeMoments":{"captureDeadlineMs":60000,"completionSuffix":".complete","configField":"agents[].recording","finalizationDeadlineMs":1000,"maxManifestBytes":134217728,"maxRowBytes":4194304,"maxSnapshotEntries":200000,"maxSnapshotRoots":16,"rowsFile":"wake-moments.jsonl","snapshotsDirectory":"snapshots","version":"noopolis.daimon.wake-moment.v1"},"wakeRequestSchema":{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"event":{"additionalProperties":false,"properties":{"id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"kind":{"enum":["manual","message","schedule","external"]},"occurredAt":{"format":"date-time","pattern":"^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$","type":"string"},"text":{"maxLength":4096,"type":"string"},"version":{"const":"noopolis.daimon.wake.v1"}},"required":["version","id","kind","text","occurredAt"],"type":"object"}},"required":["agentId","event"],"type":"object"},"wakeResultSchema":{"oneOf":[{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"durationMs":{"minimum":0,"type":"integer"},"status":{"const":"completed"},"text":{"maxLength":4096,"type":"string"},"version":{"const":"noopolis.daimon.wake-result.v1"},"wakeId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["version","status","agentId","wakeId","text","durationMs"],"type":"object"},{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"code":{"enum":["unauthorized","unknown_agent","queue_full","durable_inbox_required"]},"status":{"const":"rejected"},"version":{"const":"noopolis.daimon.wake-result.v1"},"wakeId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["version","status","agentId","wakeId","code"],"type":"object"},{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"type":"string"},"code":{"const":"invalid_request"},"status":{"const":"rejected"},"version":{"const":"noopolis.daimon.wake-result.v1"},"wakeId":{"maxLength":4096,"type":"string"}},"required":["version","status","agentId","wakeId","code"],"type":"object"},{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"code":{"enum":["host_stopping","host_stopped","queued_wake_stopped","active_wake_aborted"]},"status":{"const":"stopped"},"version":{"const":"noopolis.daimon.wake-result.v1"},"wakeId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["version","status","agentId","wakeId","code"],"type":"object"},{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"code":{"const":"engine_failed"},"status":{"const":"failed"},"version":{"const":"noopolis.daimon.wake-result.v1"},"wakeId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["version","status","agentId","wakeId","code"],"type":"object"}]},"workAvailabilityResponseSchema":{"additionalProperties":false,"properties":{"agents":{"items":{"additionalProperties":false,"properties":{"agent_id":{"type":"string"},"budget":{"additionalProperties":false,"properties":{"agent_executions_remaining":{"minimum":0,"type":"integer"},"agent_executions_used":{"minimum":0,"type":"integer"},"agent_tokens_remaining":{"minimum":0,"type":"integer"},"agent_tokens_used":{"minimum":0,"type":"integer"},"armed":{"type":"boolean"},"epoch":{"type":"string"},"executions_remaining":{"minimum":0,"type":"integer"},"executions_used":{"minimum":0,"type":"integer"},"reason":{"type":"string"},"state":{"enum":["available","paused","stopped"]},"tokens_remaining":{"minimum":0,"type":"integer"},"tokens_used":{"minimum":0,"type":"integer"}},"required":["armed","epoch","state","executions_used","executions_remaining","tokens_used","tokens_remaining","agent_executions_used","agent_tokens_used"],"type":"object"},"deferred":{"minimum":0,"type":"integer"},"error":{"type":"string"},"pending":{"minimum":0,"type":"integer"},"running":{"type":"boolean"}},"required":["agent_id","pending","running","deferred","budget"],"type":"object"},"maxItems":32,"type":"array"},"drain":{"additionalProperties":false,"properties":{"since":{"type":"string"},"state":{"enum":["draining","drained"]}},"required":["state","since"],"type":"object"},"state":{"enum":["running","paused","stopped"]},"version":{"const":"noopolis.daimon.work-availability.v1"}},"required":["version","state","agents"],"type":"object"},"workBlockedSchema":{"additionalProperties":false,"properties":{"reason":{"enum":["operator_stop","ledger_unavailable","host_stopping","host_stopped","queue_full"]},"retry_after_ms":{"maximum":300000,"minimum":1000,"type":"integer"},"version":{"const":"noopolis.daimon.work-blocked.v1"}},"required":["version","reason","retry_after_ms"],"type":"object"}}

package/dist/runtime/daimon/contract-manifest.sha256

@@ -0,0 +1 @@
+sha256:e39551277c6727c8807b1247e759f57addcee3f17f1405ebc927179647d64de6

package/dist/runtime/daimon/contractManifest.d.ts

@@ -1,5 +1,6 @@
-export declare const DAIMON_CONTRACT_MANIFEST_VERSION: "noopolis.daimon.runtime-contract-manifest.v3";
-export declare const DAIMON_CONTRACT_MANIFEST_SHA256: "sha256:c672ed47e4a01a75f1482ea6e4b6ecb28205aab344741a10cad8783f5501b6c4";
+import { DAIMON_WAKE_MOMENTS } from "./wakeMoments.js";
+export declare const DAIMON_CONTRACT_MANIFEST_VERSION: "noopolis.daimon.runtime-contract-manifest.v5";
+export declare const DAIMON_CONTRACT_MANIFEST_SHA256: "sha256:e39551277c6727c8807b1247e759f57addcee3f17f1405ebc927179647d64de6";
 export declare const DAIMON_CONTRACT_MANIFEST_FILE = "contract-manifest.json";
 export declare const DAIMON_CONTRACT_MANIFEST_DIGEST_FILE = "contract-manifest.sha256";
 export declare const DAIMON_RUNTIME_HOME_ROOT = "/var/lib/spawnfile/instances/daimon";
@@ -98,6 +99,36 @@ export declare const DAIMON_GROK_ENGINE_BROKER: {
                 readonly high: "a23724e00d670caee185ba7690d2daa868173e53905cf446f5329666f01ab4e3";
             };
         };
+        readonly clockedConfigSha256: {
+            readonly "grok-4.5": {
+                readonly high: "907d8967960c342b442d6d256b2585f3c85bd846a78578f596f0b605403d6d34";
+                readonly low: "3c4f3515b21c1bffb3fb770e2ecb4b918b6c43d5e77c1fd47e1e6698d1fedee7";
+                readonly medium: "9117e12b2f3f6fa045799592969cbaae1c2f3b1ea79330badac8655b9b41dd7a";
+            };
+            readonly "grok-4.6": {
+                readonly high: "203744f6f0dfc0bc80cfb896880497edfd9b3de4dcf33060e8ef4d2ef5f220a7";
+                readonly low: "751f1dcd04983e5e5883df5a8fefa04f201e187e5ef1f344d3bf83f950830432";
+                readonly medium: "f1406f93a8091eb0c09e07321254a9c783a89b0bbf5548d9613d53a8d087a517";
+            };
+            readonly "grok-build": {
+                readonly high: "6efddadc82c38020d3351829e54bb09fa456cd6d76ea1247902794d82a4a3ffa";
+                readonly low: "a8c63ba910623a0686930c27db0733f4a2588c7fca9dd7da25c3f18027720ab5";
+                readonly medium: "6afcd2b90c0d19794f8c0d22147a0f011946a92e613f89dae98b0ca729313101";
+            };
+        };
+        readonly taskClock: {
+            readonly directoryMode: 493;
+            readonly directoryPath: "/run/daimon-engine-broker/task-clock/slot-0";
+            readonly fileMode: 420;
+            readonly ownerUid: 2100;
+            readonly preloadPath: "/usr/local/lib/daimon/libfaketime.so.1";
+            readonly rootDirectoryPath: "/run/daimon-engine-broker/task-clock";
+            readonly slotDirectoryPattern: "/run/daimon-engine-broker/task-clock/slot-{slot}";
+            readonly slotFilePattern: "/run/daimon-engine-broker/task-clock/slot-{slot}/faketime";
+            readonly timestampFilePath: "/run/daimon-engine-broker/task-clock/slot-0/faketime";
+            readonly version: "noopolis.daimon.grok-broker-task-clock.v2";
+            readonly workerView: "own-directory-visible-sibling-directories-denied";
+        };
         readonly home: {
             readonly directory: {
                 readonly uid: 0;
@@ -154,9 +185,26 @@ export declare const DAIMON_GROK_ENGINE_BROKER: {
         readonly capabilityBundleBytes: 8196;
         readonly outputBytes: 262144;
     };
-    readonly controlProtocolVersion: "noopolis.daimon.engine-broker.v2";
+    readonly controlProtocolVersion: "noopolis.daimon.engine-broker.v4";
     readonly turnRecordVersions: readonly ["noopolis.daimon.engine-broker-turn.v1", "noopolis.daimon.engine-broker-turn.v2"];
-    readonly serviceConfigVersions: readonly ["noopolis.daimon.engine-broker-service.v1", "noopolis.daimon.engine-broker-service.v2"];
+    readonly serviceConfigVersions: readonly ["noopolis.daimon.engine-broker-service.v1", "noopolis.daimon.engine-broker-service.v2", "noopolis.daimon.engine-broker-service.v3"];
+    readonly slotRouting: {
+        readonly controlCaller: "organization";
+        readonly key: "slot";
+        readonly repeatedAgentIds: true;
+        readonly resetRequest: "reset_slot";
+        readonly resetResponse: "slot_reset";
+        readonly slotEnvironment: "DAIMON_ENGINE_BROKER_SLOT";
+        readonly turnStoreDirectory: "slot-{slot}";
+        readonly workersMayControl: false;
+    };
+    readonly runRequestBudget: {
+        readonly countsCredentialRetries: true;
+        readonly fileName: "run-requests.json";
+        readonly includesInferenceGrants: true;
+        readonly maximumField: "maxRunRequests";
+        readonly storeField: "runRequestStore";
+    };
     readonly turnLimits: {
         readonly keys: readonly ["maxRequests", "maxTokens", "timeoutMs"];
         readonly v1Defaults: {
@@ -183,7 +231,7 @@ export declare const DAIMON_GROK_ENGINE_BROKER: {
         readonly timeoutMs: "DAIMON_ENGINE_WAKE_TIMEOUT_MS";
         readonly maxTokens: "DAIMON_ENGINE_WAKE_TOKEN_CEILING";
     };
-    readonly projectionVersion: "noopolis.daimon.grok-broker-projection.v1";
+    readonly projectionVersion: "noopolis.daimon.grok-broker-projection.v3";
     readonly slotPreflightVersion: "noopolis.daimon.grok-slot-preflight.v2";
     readonly inferenceGrants: {
         readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
@@ -224,9 +272,9 @@ export declare const DAIMON_GROK_ENGINE_BROKER: {
         };
     };
     readonly artifacts: {
-        readonly sourceSha256: "dd39aacfece496cc6528f6acdb4f1066a848a0fb5b0961f5c70b0ba00440dc24";
-        readonly x64Sha256: "67e3624d3198e9c59e1ffafa4eca7c895dfe265d5b8bb0614cb547b68b8b93a7";
-        readonly arm64Sha256: "c07d22225ff968bc289e5ddf0981cdd5d64040eee6e3ea45da7d03e1439dea98";
+        readonly sourceSha256: "15836d7ad69f12ef581a6e5b8635c9db43b2177dac609160c0749d3d1fefbaa8";
+        readonly x64Sha256: "95aa9c272225e74ff9f45f54dde4bc30aee324e9ba24d8a876db9151c81b454d";
+        readonly arm64Sha256: "d0dc1c03197c3e90f09b66ad7c89b4f7b448d06dc84c03b247dce976d6018d6e";
     };
 };
 /**
@@ -269,6 +317,7 @@ export type DaimonEngine = typeof DAIMON_ENGINE_KINDS[number];
 export type DaimonPortableEngine = keyof typeof DAIMON_ENGINE_CREDENTIALS;
 type DaimonCredentialMaterial = (typeof DAIMON_ENGINE_CREDENTIALS)[DaimonPortableEngine];
 export interface DaimonContractManifest {
+    readonly wakeMoments?: typeof DAIMON_WAKE_MOMENTS;
     readonly agySubscriptionRealm: typeof DAIMON_AGY_SUBSCRIPTION_REALM;
     readonly consumedConfigFields: readonly string[];
     readonly engineCredentialMaterial: Readonly<Record<DaimonPortableEngine, DaimonCredentialMaterial>>;
@@ -290,6 +339,8 @@ export interface VerifiedDaimonContractManifest {
     readonly manifest: DaimonContractManifest;
 }
 export declare const parseDaimonContractManifest: (raw: unknown) => DaimonContractManifest;
+/** Capability comes from receipt-bound manifest content, never a runtime version. */
+export declare const daimonSupportsWakeMoments: (manifest: DaimonContractManifest) => boolean;
 export declare const assertDaimonRuntimeHome: (candidate: string) => string;
 export declare const readVerifiedDaimonContractManifest: (runtimeRoot: string) => Promise<VerifiedDaimonContractManifest>;
 export {};