spawnfile 0.1.29 → 0.1.31

package/dist/runtime/daimon/contractManifestSchema.d.ts

@@ -23,6 +23,31 @@ export declare const daimonContractManifestV6Schema: z.ZodObject<{
                 refreshTokenKeys: z.ZodArray<z.ZodString>;
                 expiresAtKey: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            staging: z.ZodLiteral<"portable-realm">;
+            realm: z.ZodType<NonNullable<{
+                readonly agentCredentialRelativePath: ".codex/auth.json";
+                readonly bootstrapMountPath: "/var/lib/spawnfile/daimon/codex-bootstrap-auth";
+                readonly bootstrapSourceSlot: "codex-auth";
+                readonly directoryMode: 448;
+                readonly durableMountPath: "/var/lib/spawnfile/daimon/codex-subscription-realm";
+                readonly fileMode: 384;
+                readonly maxCredentialBytes: 65536;
+            }>>;
+            method: z.ZodString;
+            provider: z.ZodString;
+            fileName: z.ZodString;
+            maxCredentialBytes: z.ZodNumber;
+            directoryMode: z.ZodLiteral<448>;
+            fileMode: z.ZodLiteral<384>;
+            format: z.ZodObject<{
+                containerKey: z.ZodOptional<z.ZodString>;
+                fallbackToRoot: z.ZodOptional<z.ZodBoolean>;
+                entryKeyPattern: z.ZodOptional<z.ZodString>;
+                accessTokenKeys: z.ZodArray<z.ZodString>;
+                refreshTokenKeys: z.ZodArray<z.ZodString>;
+                expiresAtKey: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
         }, z.core.$strict>, z.ZodObject<{
             staging: z.ZodLiteral<"broker-realm">;
             realm: z.ZodType<{
@@ -720,6 +745,1533 @@ export declare const DAIMON_CONTRACT_MANIFEST_V6_JSON_SCHEMA: {
                     refreshTokenKeys: z.ZodArray<z.ZodString>;
                     expiresAtKey: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                staging: z.ZodLiteral<"portable-realm">;
+                realm: z.ZodType<NonNullable<{
+                    readonly agentCredentialRelativePath: ".codex/auth.json";
+                    readonly bootstrapMountPath: "/var/lib/spawnfile/daimon/codex-bootstrap-auth";
+                    readonly bootstrapSourceSlot: "codex-auth";
+                    readonly directoryMode: 448;
+                    readonly durableMountPath: "/var/lib/spawnfile/daimon/codex-subscription-realm";
+                    readonly fileMode: 384;
+                    readonly maxCredentialBytes: 65536;
+                }>>;
+                method: z.ZodString;
+                provider: z.ZodString;
+                fileName: z.ZodString;
+                maxCredentialBytes: z.ZodNumber;
+                directoryMode: z.ZodLiteral<448>;
+                fileMode: z.ZodLiteral<384>;
+                format: z.ZodObject<{
+                    containerKey: z.ZodOptional<z.ZodString>;
+                    fallbackToRoot: z.ZodOptional<z.ZodBoolean>;
+                    entryKeyPattern: z.ZodOptional<z.ZodString>;
+                    accessTokenKeys: z.ZodArray<z.ZodString>;
+                    refreshTokenKeys: z.ZodArray<z.ZodString>;
+                    expiresAtKey: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                staging: z.ZodLiteral<"broker-realm">;
+                realm: z.ZodType<{
+                    readonly agentCredentialRelativePath: ".grok/auth.json";
+                    readonly bootstrapMountPath: "/var/lib/spawnfile/daimon/grok-bootstrap-auth";
+                    readonly bootstrapSourceSlot: "grok-auth";
+                    readonly directoryMode: 448;
+                    readonly durableMountPath: "/var/lib/spawnfile/daimon/grok-subscription-realm";
+                    readonly fileMode: 384;
+                    readonly maxCredentialBytes: 65536;
+                }>;
+                method: z.ZodString;
+                provider: z.ZodString;
+                fileName: z.ZodString;
+                maxCredentialBytes: z.ZodNumber;
+                directoryMode: z.ZodLiteral<448>;
+                fileMode: z.ZodLiteral<384>;
+                format: z.ZodObject<{
+                    containerKey: z.ZodOptional<z.ZodString>;
+                    fallbackToRoot: z.ZodOptional<z.ZodBoolean>;
+                    entryKeyPattern: z.ZodOptional<z.ZodString>;
+                    accessTokenKeys: z.ZodArray<z.ZodString>;
+                    refreshTokenKeys: z.ZodArray<z.ZodString>;
+                    expiresAtKey: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                staging: z.ZodLiteral<"secret-service">;
+                method: z.ZodNull;
+                provider: z.ZodNull;
+                realm: z.ZodType<{
+                    readonly directoryMode: 448;
+                    readonly durableMountPath: "/var/lib/spawnfile/daimon/agy-subscription-realm";
+                    readonly fileMode: 384;
+                    readonly maxUnlockBytes: 4096;
+                    readonly unlockMountPath: "/var/lib/spawnfile/daimon/agy-unlock-secret";
+                    readonly unlockSourceSlot: "agy-unlock-secret";
+                }>;
+                busEnvironment: z.ZodString;
+                format: z.ZodNull;
+            }, z.core.$strict>], "staging">;
+            credentialMaterial: z.ZodNullable<z.ZodObject<{
+                destinationRelativePath: z.ZodString;
+                sourceSlot: z.ZodOptional<z.ZodString>;
+                sourceRelativePath: z.ZodOptional<z.ZodString>;
+                directoryMode: z.ZodOptional<z.ZodLiteral<448>>;
+                fileMode: z.ZodOptional<z.ZodLiteral<384>>;
+            }, z.core.$strict>>;
+            piAuthMethod: z.ZodOptional<z.ZodString>;
+            piProvider: z.ZodOptional<z.ZodString>;
+            piSourceProvider: z.ZodOptional<z.ZodString>;
+            homeDirectory: z.ZodUnion<readonly [z.ZodLiteral<"">, z.ZodString]>;
+            homeEnvironment: z.ZodString;
+            requiredBinaries: z.ZodArray<z.ZodString>;
+            modelSelection: z.ZodObject<{
+                configurable: z.ZodBoolean;
+                models: z.ZodUnion<readonly [z.ZodObject<{
+                    kind: z.ZodLiteral<"non-empty-string">;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"enum">;
+                    values: z.ZodArray<z.ZodString>;
+                }, z.core.$strict>, z.ZodNull]>;
+                reasoningEfforts: z.ZodArray<z.ZodString>;
+                defaults: z.ZodObject<{
+                    model: z.ZodNullable<z.ZodString>;
+                    reasoningEffort: z.ZodNullable<z.ZodString>;
+                }, z.core.$strict>;
+                requiresPairedDeclaration: z.ZodBoolean;
+                declarationRequiresBroker: z.ZodBoolean;
+            }, z.core.$strict>;
+            sandbox: z.ZodObject<{
+                configurable: z.ZodBoolean;
+                policy: z.ZodOptional<z.ZodObject<{
+                    mode: z.ZodLiteral<"workspace-write">;
+                    networkAccess: z.ZodLiteral<false>;
+                    webSearch: z.ZodLiteral<"disabled">;
+                }, z.core.$strict>>;
+                profile: z.ZodOptional<z.ZodString>;
+                baseProfile: z.ZodOptional<z.ZodString>;
+                restrictNetwork: z.ZodOptional<z.ZodBoolean>;
+                denyPaths: z.ZodOptional<z.ZodObject<{
+                    canonicalAbsolute: z.ZodBoolean;
+                    rootAllowed: z.ZodBoolean;
+                    trailingSlashAllowed: z.ZodBoolean;
+                    forbiddenCharacterPattern: z.ZodString;
+                }, z.core.$strict>>;
+            }, z.core.$strict>;
+            training: z.ZodObject<{
+                subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    supported: z.ZodLiteral<true>;
+                    isolation: z.ZodEnum<{
+                        "native-sandbox": "native-sandbox";
+                        "broker-worker": "broker-worker";
+                    }>;
+                }, z.core.$strict>, z.ZodObject<{
+                    supported: z.ZodLiteral<false>;
+                    isolation: z.ZodNull;
+                    reason: z.ZodString;
+                }, z.core.$strict>], "supported">;
+                inferenceGrants: z.ZodNullable<z.ZodType<{
+                    readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+                    readonly client: {
+                        readonly configSha256: {
+                            readonly "grok-4.5": {
+                                readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                                readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                                readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                            };
+                            readonly "grok-4.6": {
+                                readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                                readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                                readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                            };
+                            readonly "grok-build": {
+                                readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                                readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                                readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                            };
+                        };
+                        readonly envKey: "DAIMON_INFERENCE_GRANT";
+                        readonly modelId: "daimon-inference-grok";
+                    };
+                    readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+                    readonly ledgerDedupeKey: readonly ["grant", "request"];
+                    readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+                    readonly limits: {
+                        readonly maxRequests: 64;
+                        readonly maxTokens: 2000000;
+                    };
+                    readonly maxInFlightRequestsPerGrant: 1;
+                    readonly maxLiveGrants: 8;
+                    readonly messageRoles: readonly ["system", "user", "assistant"];
+                    readonly purposes: readonly ["judge", "optimizer"];
+                    readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+                    readonly tokenPrefix: "inference_";
+                    readonly ttlMs: 600000;
+                }, unknown, z.core.$ZodTypeInternals<{
+                    readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+                    readonly client: {
+                        readonly configSha256: {
+                            readonly "grok-4.5": {
+                                readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                                readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                                readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                            };
+                            readonly "grok-4.6": {
+                                readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                                readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                                readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                            };
+                            readonly "grok-build": {
+                                readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                                readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                                readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                            };
+                        };
+                        readonly envKey: "DAIMON_INFERENCE_GRANT";
+                        readonly modelId: "daimon-inference-grok";
+                    };
+                    readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+                    readonly ledgerDedupeKey: readonly ["grant", "request"];
+                    readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+                    readonly limits: {
+                        readonly maxRequests: 64;
+                        readonly maxTokens: 2000000;
+                    };
+                    readonly maxInFlightRequestsPerGrant: 1;
+                    readonly maxLiveGrants: 8;
+                    readonly messageRoles: readonly ["system", "user", "assistant"];
+                    readonly purposes: readonly ["judge", "optimizer"];
+                    readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+                    readonly tokenPrefix: "inference_";
+                    readonly ttlMs: 600000;
+                }, unknown>>>;
+            }, z.core.$strict>;
+            broker: z.ZodNullable<z.ZodType<{
+                readonly artifacts: {
+                    readonly arm64Sha256: "d0dc1c03197c3e90f09b66ad7c89b4f7b448d06dc84c03b247dce976d6018d6e";
+                    readonly sourceSha256: "15836d7ad69f12ef581a6e5b8635c9db43b2177dac609160c0749d3d1fefbaa8";
+                    readonly x64Sha256: "95aa9c272225e74ff9f45f54dde4bc30aee324e9ba24d8a876db9151c81b454d";
+                };
+                readonly backendSocketPath: "/run/daimon-engine-broker/backend.sock";
+                readonly bounds: {
+                    readonly capabilityBundleBytes: 8196;
+                    readonly capabilityBytes: 4096;
+                    readonly outputBytes: 262144;
+                    readonly promptBytes: 65536;
+                };
+                readonly controlProtocolVersion: "noopolis.daimon.engine-broker.v4";
+                readonly controlSocketPath: "/run/daimon-engine-broker/control.sock";
+                readonly credentialHomePath: "/var/lib/spawnfile/daimon/grok-subscription-realm";
+                readonly grokCliArtifacts: {
+                    readonly arm64: {
+                        readonly bytes: 136090504;
+                        readonly sha256: "39ab87666877d64ef3a40aa60fbe0c3b6a6acd7001b78fe60e2c76bb6cfc4a94";
+                        readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-aarch64";
+                    };
+                    readonly x64: {
+                        readonly bytes: 163035648;
+                        readonly sha256: "be5905e107d2b8b5f3c142d21ecfe4c8fd32a913d2fd551b788707930c4dc80d";
+                        readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-x86_64";
+                    };
+                };
+                readonly grokCliBuild: "3736acbc8658";
+                readonly grokCliVersion: "1.0.34";
+                readonly grokExecutablePath: "/usr/local/bin/grok";
+                readonly identities: {
+                    readonly brokerUid: 2100;
+                    readonly firstWorkerUid: 2200;
+                    readonly organizationUid: 2000;
+                };
+                readonly inferenceGrants: {
+                    readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+                    readonly client: {
+                        readonly configSha256: {
+                            readonly "grok-4.5": {
+                                readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                                readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                                readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                            };
+                            readonly "grok-4.6": {
+                                readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                                readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                                readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                            };
+                            readonly "grok-build": {
+                                readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                                readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                                readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                            };
+                        };
+                        readonly envKey: "DAIMON_INFERENCE_GRANT";
+                        readonly modelId: "daimon-inference-grok";
+                    };
+                    readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+                    readonly ledgerDedupeKey: readonly ["grant", "request"];
+                    readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+                    readonly limits: {
+                        readonly maxRequests: 64;
+                        readonly maxTokens: 2000000;
+                    };
+                    readonly maxInFlightRequestsPerGrant: 1;
+                    readonly maxLiveGrants: 8;
+                    readonly messageRoles: readonly ["system", "user", "assistant"];
+                    readonly purposes: readonly ["judge", "optimizer"];
+                    readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+                    readonly tokenPrefix: "inference_";
+                    readonly ttlMs: 600000;
+                };
+                readonly launcherSocketPath: "/run/daimon-engine-broker/launcher.sock";
+                readonly mcpFacade: {
+                    readonly host: "127.0.0.1";
+                    readonly path: "/mcp";
+                    readonly port: 43124;
+                };
+                readonly nativeAbiVersion: 2;
+                readonly nativeExecutablePath: "/opt/daimon/bin/daimon-engine-broker";
+                readonly projectionVersion: "noopolis.daimon.grok-broker-projection.v3";
+                readonly providerProxy: {
+                    readonly host: "127.0.0.1";
+                    readonly port: 43123;
+                };
+                readonly registrationPath: "/etc/daimon-engine-broker/registrations.bin";
+                readonly runRequestBudget: {
+                    readonly countsCredentialRetries: true;
+                    readonly fileName: "run-requests.json";
+                    readonly includesInferenceGrants: true;
+                    readonly maximumField: "maxRunRequests";
+                    readonly storeField: "runRequestStore";
+                };
+                readonly serviceConfigPath: "/etc/daimon-engine-broker/service.json";
+                readonly serviceConfigVersions: readonly ["noopolis.daimon.engine-broker-service.v1", "noopolis.daimon.engine-broker-service.v2", "noopolis.daimon.engine-broker-service.v3"];
+                readonly slotPreflightVersion: "noopolis.daimon.grok-slot-preflight.v2";
+                readonly slotRouting: {
+                    readonly controlCaller: "organization";
+                    readonly key: "slot";
+                    readonly repeatedAgentIds: true;
+                    readonly resetRequest: "reset_slot";
+                    readonly resetResponse: "slot_reset";
+                    readonly slotEnvironment: "DAIMON_ENGINE_BROKER_SLOT";
+                    readonly turnStoreDirectory: "slot-{slot}";
+                    readonly workersMayControl: false;
+                };
+                readonly turnLimits: {
+                    readonly bounds: {
+                        readonly maxRequests: readonly [1, 48];
+                        readonly maxTokens: readonly [1, 10000000];
+                        readonly timeoutMs: readonly [1000, 3600000];
+                    };
+                    readonly keys: readonly ["maxRequests", "maxTokens", "timeoutMs"];
+                    readonly limitReasons: readonly ["tokens", "requests", "timeout", "none"];
+                    readonly maxInFlightRequests: 1;
+                    readonly missingUsageEstimate: {
+                        readonly inputBytesPerToken: 2;
+                        readonly outputTokens: 4096;
+                    };
+                    readonly requestUsageMaxTokens: 500000;
+                    readonly tokenCeilingOvershoot: "at-most-one-request";
+                    readonly v1Defaults: {
+                        readonly maxRequests: 32;
+                        readonly maxTokens: 300000;
+                        readonly timeoutMs: 240000;
+                    };
+                    readonly wakeMayOnlyLower: true;
+                };
+                readonly turnRecordVersions: readonly ["noopolis.daimon.engine-broker-turn.v1", "noopolis.daimon.engine-broker-turn.v2"];
+                readonly turnStorePath: "/var/lib/spawnfile/daimon/grok-subscription-realm/turns";
+                readonly wakeLimitEnvironment: {
+                    readonly maxTokens: "DAIMON_ENGINE_WAKE_TOKEN_CEILING";
+                    readonly timeoutMs: "DAIMON_ENGINE_WAKE_TIMEOUT_MS";
+                };
+                readonly worker: {
+                    readonly clockedConfigSha256: {
+                        readonly "grok-4.5": {
+                            readonly high: "907d8967960c342b442d6d256b2585f3c85bd846a78578f596f0b605403d6d34";
+                            readonly low: "3c4f3515b21c1bffb3fb770e2ecb4b918b6c43d5e77c1fd47e1e6698d1fedee7";
+                            readonly medium: "9117e12b2f3f6fa045799592969cbaae1c2f3b1ea79330badac8655b9b41dd7a";
+                        };
+                        readonly "grok-4.6": {
+                            readonly high: "203744f6f0dfc0bc80cfb896880497edfd9b3de4dcf33060e8ef4d2ef5f220a7";
+                            readonly low: "751f1dcd04983e5e5883df5a8fefa04f201e187e5ef1f344d3bf83f950830432";
+                            readonly medium: "f1406f93a8091eb0c09e07321254a9c783a89b0bbf5548d9613d53a8d087a517";
+                        };
+                        readonly "grok-build": {
+                            readonly high: "6efddadc82c38020d3351829e54bb09fa456cd6d76ea1247902794d82a4a3ffa";
+                            readonly low: "a8c63ba910623a0686930c27db0733f4a2588c7fca9dd7da25c3f18027720ab5";
+                            readonly medium: "6afcd2b90c0d19794f8c0d22147a0f011946a92e613f89dae98b0ca729313101";
+                        };
+                    };
+                    readonly configSha256: {
+                        readonly "grok-4.5": {
+                            readonly high: "c63c3387ce92d94ec3f690abfe98942afcd7c9e17ff84816bbe751f340ab251f";
+                            readonly low: "8247127c3625ff7c5d8d527a53596b89ec6557a821ac46cfd00bd122b90daff6";
+                            readonly medium: "59288cee61297bb8c002097061a48f77b09d310754187a253ee089f7172a9155";
+                        };
+                        readonly "grok-4.6": {
+                            readonly high: "65b0212564fb74042b1503d293fb8d3620276033264c0efade2a539ca09218e3";
+                            readonly low: "ab58499ac32678097c146479896f2b8a8e2b0e39aea22dc0a60b6227e370538e";
+                            readonly medium: "df1a5cc84346e7f6bf6090492fbd19faaefb42953e3bb2e8c6cbc0572242403f";
+                        };
+                        readonly "grok-build": {
+                            readonly high: "a23724e00d670caee185ba7690d2daa868173e53905cf446f5329666f01ab4e3";
+                            readonly low: "fb343f2809903f26d21681470943235031f946e99085542fd89555eb7782cbb5";
+                            readonly medium: "8a587ef75c90eab70d19b24583e60051d6fba9d90c558839fdbb15588b4cc656";
+                        };
+                    };
+                    readonly defaultModel: "grok-4.6";
+                    readonly defaultReasoningEffort: "low";
+                    readonly home: {
+                        readonly directory: {
+                            readonly group: "worker";
+                            readonly mode: 1017;
+                            readonly uid: 0;
+                        };
+                        readonly organizationRuntimeHome: {
+                            readonly group: "worker";
+                            readonly mode: 456;
+                            readonly owner: "organization";
+                        };
+                        readonly privateTmp: {
+                            readonly mode: 448;
+                            readonly owner: "worker";
+                            readonly relativeToWorkerHome: "tmp";
+                        };
+                        readonly readOnlyFiles: {
+                            readonly gid: 0;
+                            readonly mode: 292;
+                            readonly names: readonly ["config.toml", "managed_config.toml", "requirements.toml", "sandbox.toml", "trusted_folders.toml"];
+                            readonly uid: 0;
+                        };
+                        readonly sandboxEvents: {
+                            readonly group: "broker";
+                            readonly mode: 416;
+                            readonly owner: "worker";
+                            readonly relativePath: "sessions/sandbox-events.jsonl";
+                        };
+                        readonly sessionsDirectory: {
+                            readonly group: "worker";
+                            readonly mode: 1017;
+                            readonly relativePath: "sessions";
+                            readonly uid: 0;
+                        };
+                        readonly sharedTmp: {
+                            readonly maxGroupExclusive: 2200;
+                            readonly mode: 1020;
+                            readonly otherMode: 4;
+                            readonly paths: readonly ["/tmp", "/var/tmp"];
+                            readonly uid: 0;
+                        };
+                        readonly spillDirectory: {
+                            readonly fileMode: 416;
+                            readonly group: "worker";
+                            readonly mode: 1512;
+                            readonly owner: "organization";
+                            readonly relativeToRuntimeHome: "tool-output";
+                        };
+                    };
+                    readonly maxTurns: 48;
+                    readonly modelId: "daimon-broker-grok";
+                    readonly models: readonly ["grok-4.6", "grok-4.5", "grok-build"];
+                    readonly reasoningEfforts: readonly ["low", "medium", "high"];
+                    readonly systemPromptSha256: "2c31c0085a54a4efbf9c0cf0b8124c56e47f38691b7f0c7fa233a74abaa8ddf8";
+                    readonly taskClock: {
+                        readonly directoryMode: 493;
+                        readonly directoryPath: "/run/daimon-engine-broker/task-clock/slot-0";
+                        readonly fileMode: 420;
+                        readonly ownerUid: 2100;
+                        readonly preloadPath: "/usr/local/lib/daimon/libfaketime.so.1";
+                        readonly rootDirectoryPath: "/run/daimon-engine-broker/task-clock";
+                        readonly slotDirectoryPattern: "/run/daimon-engine-broker/task-clock/slot-{slot}";
+                        readonly slotFilePattern: "/run/daimon-engine-broker/task-clock/slot-{slot}/faketime";
+                        readonly timestampFilePath: "/run/daimon-engine-broker/task-clock/slot-0/faketime";
+                        readonly version: "noopolis.daimon.grok-broker-task-clock.v2";
+                        readonly workerView: "own-directory-visible-sibling-directories-denied";
+                    };
+                    readonly toolIds: readonly ["run_terminal_cmd", "read_file", "grep", "list_dir", "search_tool", "use_tool"];
+                    readonly visibleTools: readonly ["grep", "list_dir", "read_file", "run_terminal_command", "search_tool", "use_tool"];
+                };
+            }, unknown, z.core.$ZodTypeInternals<{
+                readonly artifacts: {
+                    readonly arm64Sha256: "d0dc1c03197c3e90f09b66ad7c89b4f7b448d06dc84c03b247dce976d6018d6e";
+                    readonly sourceSha256: "15836d7ad69f12ef581a6e5b8635c9db43b2177dac609160c0749d3d1fefbaa8";
+                    readonly x64Sha256: "95aa9c272225e74ff9f45f54dde4bc30aee324e9ba24d8a876db9151c81b454d";
+                };
+                readonly backendSocketPath: "/run/daimon-engine-broker/backend.sock";
+                readonly bounds: {
+                    readonly capabilityBundleBytes: 8196;
+                    readonly capabilityBytes: 4096;
+                    readonly outputBytes: 262144;
+                    readonly promptBytes: 65536;
+                };
+                readonly controlProtocolVersion: "noopolis.daimon.engine-broker.v4";
+                readonly controlSocketPath: "/run/daimon-engine-broker/control.sock";
+                readonly credentialHomePath: "/var/lib/spawnfile/daimon/grok-subscription-realm";
+                readonly grokCliArtifacts: {
+                    readonly arm64: {
+                        readonly bytes: 136090504;
+                        readonly sha256: "39ab87666877d64ef3a40aa60fbe0c3b6a6acd7001b78fe60e2c76bb6cfc4a94";
+                        readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-aarch64";
+                    };
+                    readonly x64: {
+                        readonly bytes: 163035648;
+                        readonly sha256: "be5905e107d2b8b5f3c142d21ecfe4c8fd32a913d2fd551b788707930c4dc80d";
+                        readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-x86_64";
+                    };
+                };
+                readonly grokCliBuild: "3736acbc8658";
+                readonly grokCliVersion: "1.0.34";
+                readonly grokExecutablePath: "/usr/local/bin/grok";
+                readonly identities: {
+                    readonly brokerUid: 2100;
+                    readonly firstWorkerUid: 2200;
+                    readonly organizationUid: 2000;
+                };
+                readonly inferenceGrants: {
+                    readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+                    readonly client: {
+                        readonly configSha256: {
+                            readonly "grok-4.5": {
+                                readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                                readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                                readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                            };
+                            readonly "grok-4.6": {
+                                readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                                readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                                readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                            };
+                            readonly "grok-build": {
+                                readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                                readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                                readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                            };
+                        };
+                        readonly envKey: "DAIMON_INFERENCE_GRANT";
+                        readonly modelId: "daimon-inference-grok";
+                    };
+                    readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+                    readonly ledgerDedupeKey: readonly ["grant", "request"];
+                    readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+                    readonly limits: {
+                        readonly maxRequests: 64;
+                        readonly maxTokens: 2000000;
+                    };
+                    readonly maxInFlightRequestsPerGrant: 1;
+                    readonly maxLiveGrants: 8;
+                    readonly messageRoles: readonly ["system", "user", "assistant"];
+                    readonly purposes: readonly ["judge", "optimizer"];
+                    readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+                    readonly tokenPrefix: "inference_";
+                    readonly ttlMs: 600000;
+                };
+                readonly launcherSocketPath: "/run/daimon-engine-broker/launcher.sock";
+                readonly mcpFacade: {
+                    readonly host: "127.0.0.1";
+                    readonly path: "/mcp";
+                    readonly port: 43124;
+                };
+                readonly nativeAbiVersion: 2;
+                readonly nativeExecutablePath: "/opt/daimon/bin/daimon-engine-broker";
+                readonly projectionVersion: "noopolis.daimon.grok-broker-projection.v3";
+                readonly providerProxy: {
+                    readonly host: "127.0.0.1";
+                    readonly port: 43123;
+                };
+                readonly registrationPath: "/etc/daimon-engine-broker/registrations.bin";
+                readonly runRequestBudget: {
+                    readonly countsCredentialRetries: true;
+                    readonly fileName: "run-requests.json";
+                    readonly includesInferenceGrants: true;
+                    readonly maximumField: "maxRunRequests";
+                    readonly storeField: "runRequestStore";
+                };
+                readonly serviceConfigPath: "/etc/daimon-engine-broker/service.json";
+                readonly serviceConfigVersions: readonly ["noopolis.daimon.engine-broker-service.v1", "noopolis.daimon.engine-broker-service.v2", "noopolis.daimon.engine-broker-service.v3"];
+                readonly slotPreflightVersion: "noopolis.daimon.grok-slot-preflight.v2";
+                readonly slotRouting: {
+                    readonly controlCaller: "organization";
+                    readonly key: "slot";
+                    readonly repeatedAgentIds: true;
+                    readonly resetRequest: "reset_slot";
+                    readonly resetResponse: "slot_reset";
+                    readonly slotEnvironment: "DAIMON_ENGINE_BROKER_SLOT";
+                    readonly turnStoreDirectory: "slot-{slot}";
+                    readonly workersMayControl: false;
+                };
+                readonly turnLimits: {
+                    readonly bounds: {
+                        readonly maxRequests: readonly [1, 48];
+                        readonly maxTokens: readonly [1, 10000000];
+                        readonly timeoutMs: readonly [1000, 3600000];
+                    };
+                    readonly keys: readonly ["maxRequests", "maxTokens", "timeoutMs"];
+                    readonly limitReasons: readonly ["tokens", "requests", "timeout", "none"];
+                    readonly maxInFlightRequests: 1;
+                    readonly missingUsageEstimate: {
+                        readonly inputBytesPerToken: 2;
+                        readonly outputTokens: 4096;
+                    };
+                    readonly requestUsageMaxTokens: 500000;
+                    readonly tokenCeilingOvershoot: "at-most-one-request";
+                    readonly v1Defaults: {
+                        readonly maxRequests: 32;
+                        readonly maxTokens: 300000;
+                        readonly timeoutMs: 240000;
+                    };
+                    readonly wakeMayOnlyLower: true;
+                };
+                readonly turnRecordVersions: readonly ["noopolis.daimon.engine-broker-turn.v1", "noopolis.daimon.engine-broker-turn.v2"];
+                readonly turnStorePath: "/var/lib/spawnfile/daimon/grok-subscription-realm/turns";
+                readonly wakeLimitEnvironment: {
+                    readonly maxTokens: "DAIMON_ENGINE_WAKE_TOKEN_CEILING";
+                    readonly timeoutMs: "DAIMON_ENGINE_WAKE_TIMEOUT_MS";
+                };
+                readonly worker: {
+                    readonly clockedConfigSha256: {
+                        readonly "grok-4.5": {
+                            readonly high: "907d8967960c342b442d6d256b2585f3c85bd846a78578f596f0b605403d6d34";
+                            readonly low: "3c4f3515b21c1bffb3fb770e2ecb4b918b6c43d5e77c1fd47e1e6698d1fedee7";
+                            readonly medium: "9117e12b2f3f6fa045799592969cbaae1c2f3b1ea79330badac8655b9b41dd7a";
+                        };
+                        readonly "grok-4.6": {
+                            readonly high: "203744f6f0dfc0bc80cfb896880497edfd9b3de4dcf33060e8ef4d2ef5f220a7";
+                            readonly low: "751f1dcd04983e5e5883df5a8fefa04f201e187e5ef1f344d3bf83f950830432";
+                            readonly medium: "f1406f93a8091eb0c09e07321254a9c783a89b0bbf5548d9613d53a8d087a517";
+                        };
+                        readonly "grok-build": {
+                            readonly high: "6efddadc82c38020d3351829e54bb09fa456cd6d76ea1247902794d82a4a3ffa";
+                            readonly low: "a8c63ba910623a0686930c27db0733f4a2588c7fca9dd7da25c3f18027720ab5";
+                            readonly medium: "6afcd2b90c0d19794f8c0d22147a0f011946a92e613f89dae98b0ca729313101";
+                        };
+                    };
+                    readonly configSha256: {
+                        readonly "grok-4.5": {
+                            readonly high: "c63c3387ce92d94ec3f690abfe98942afcd7c9e17ff84816bbe751f340ab251f";
+                            readonly low: "8247127c3625ff7c5d8d527a53596b89ec6557a821ac46cfd00bd122b90daff6";
+                            readonly medium: "59288cee61297bb8c002097061a48f77b09d310754187a253ee089f7172a9155";
+                        };
+                        readonly "grok-4.6": {
+                            readonly high: "65b0212564fb74042b1503d293fb8d3620276033264c0efade2a539ca09218e3";
+                            readonly low: "ab58499ac32678097c146479896f2b8a8e2b0e39aea22dc0a60b6227e370538e";
+                            readonly medium: "df1a5cc84346e7f6bf6090492fbd19faaefb42953e3bb2e8c6cbc0572242403f";
+                        };
+                        readonly "grok-build": {
+                            readonly high: "a23724e00d670caee185ba7690d2daa868173e53905cf446f5329666f01ab4e3";
+                            readonly low: "fb343f2809903f26d21681470943235031f946e99085542fd89555eb7782cbb5";
+                            readonly medium: "8a587ef75c90eab70d19b24583e60051d6fba9d90c558839fdbb15588b4cc656";
+                        };
+                    };
+                    readonly defaultModel: "grok-4.6";
+                    readonly defaultReasoningEffort: "low";
+                    readonly home: {
+                        readonly directory: {
+                            readonly group: "worker";
+                            readonly mode: 1017;
+                            readonly uid: 0;
+                        };
+                        readonly organizationRuntimeHome: {
+                            readonly group: "worker";
+                            readonly mode: 456;
+                            readonly owner: "organization";
+                        };
+                        readonly privateTmp: {
+                            readonly mode: 448;
+                            readonly owner: "worker";
+                            readonly relativeToWorkerHome: "tmp";
+                        };
+                        readonly readOnlyFiles: {
+                            readonly gid: 0;
+                            readonly mode: 292;
+                            readonly names: readonly ["config.toml", "managed_config.toml", "requirements.toml", "sandbox.toml", "trusted_folders.toml"];
+                            readonly uid: 0;
+                        };
+                        readonly sandboxEvents: {
+                            readonly group: "broker";
+                            readonly mode: 416;
+                            readonly owner: "worker";
+                            readonly relativePath: "sessions/sandbox-events.jsonl";
+                        };
+                        readonly sessionsDirectory: {
+                            readonly group: "worker";
+                            readonly mode: 1017;
+                            readonly relativePath: "sessions";
+                            readonly uid: 0;
+                        };
+                        readonly sharedTmp: {
+                            readonly maxGroupExclusive: 2200;
+                            readonly mode: 1020;
+                            readonly otherMode: 4;
+                            readonly paths: readonly ["/tmp", "/var/tmp"];
+                            readonly uid: 0;
+                        };
+                        readonly spillDirectory: {
+                            readonly fileMode: 416;
+                            readonly group: "worker";
+                            readonly mode: 1512;
+                            readonly owner: "organization";
+                            readonly relativeToRuntimeHome: "tool-output";
+                        };
+                    };
+                    readonly maxTurns: 48;
+                    readonly modelId: "daimon-broker-grok";
+                    readonly models: readonly ["grok-4.6", "grok-4.5", "grok-build"];
+                    readonly reasoningEfforts: readonly ["low", "medium", "high"];
+                    readonly systemPromptSha256: "2c31c0085a54a4efbf9c0cf0b8124c56e47f38691b7f0c7fa233a74abaa8ddf8";
+                    readonly taskClock: {
+                        readonly directoryMode: 493;
+                        readonly directoryPath: "/run/daimon-engine-broker/task-clock/slot-0";
+                        readonly fileMode: 420;
+                        readonly ownerUid: 2100;
+                        readonly preloadPath: "/usr/local/lib/daimon/libfaketime.so.1";
+                        readonly rootDirectoryPath: "/run/daimon-engine-broker/task-clock";
+                        readonly slotDirectoryPattern: "/run/daimon-engine-broker/task-clock/slot-{slot}";
+                        readonly slotFilePattern: "/run/daimon-engine-broker/task-clock/slot-{slot}/faketime";
+                        readonly timestampFilePath: "/run/daimon-engine-broker/task-clock/slot-0/faketime";
+                        readonly version: "noopolis.daimon.grok-broker-task-clock.v2";
+                        readonly workerView: "own-directory-visible-sibling-directories-denied";
+                    };
+                    readonly toolIds: readonly ["run_terminal_cmd", "read_file", "grep", "list_dir", "search_tool", "use_tool"];
+                    readonly visibleTools: readonly ["grep", "list_dir", "read_file", "run_terminal_command", "search_tool", "use_tool"];
+                };
+            }, unknown>>>;
+            capabilities: z.ZodObject<{
+                portableCredential: z.ZodBoolean;
+                nativeSandbox: z.ZodBoolean;
+                broker: z.ZodBoolean;
+                secretService: z.ZodBoolean;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        supportedEngineKinds: z.ZodArray<z.ZodString>;
+        consumedConfigFields: z.ZodArray<z.ZodString>;
+        wakeMoments: z.ZodOptional<z.ZodJSONSchema>;
+    }, z.core.$strict>>;
+    $schema?: "https://json-schema.org/draft/2020-12/schema" | "http://json-schema.org/draft-07/schema#" | "http://json-schema.org/draft-04/schema#";
+    $anchor?: string;
+    $ref?: string;
+    $dynamicRef?: string;
+    $dynamicAnchor?: string;
+    $vocabulary?: Record<string, boolean>;
+    $comment?: string;
+    $defs?: Record<string, z.core.JSONSchema.JSONSchema>;
+    type?: z.core.JSONSchema.SchemaType | z.core.JSONSchema.SchemaType[];
+    additionalItems?: z.core.JSONSchema._JSONSchema;
+    unevaluatedItems?: z.core.JSONSchema._JSONSchema;
+    prefixItems?: z.core.JSONSchema._JSONSchema[];
+    items?: z.core.JSONSchema._JSONSchema | z.core.JSONSchema._JSONSchema[];
+    contains?: z.core.JSONSchema._JSONSchema;
+    additionalProperties?: z.core.JSONSchema._JSONSchema;
+    unevaluatedProperties?: z.core.JSONSchema._JSONSchema;
+    properties?: Record<string, z.core.JSONSchema._JSONSchema>;
+    patternProperties?: Record<string, z.core.JSONSchema._JSONSchema>;
+    dependentSchemas?: Record<string, z.core.JSONSchema._JSONSchema>;
+    propertyNames?: z.core.JSONSchema._JSONSchema;
+    if?: z.core.JSONSchema._JSONSchema;
+    then?: z.core.JSONSchema._JSONSchema;
+    else?: z.core.JSONSchema._JSONSchema;
+    allOf?: z.core.JSONSchema.JSONSchema[];
+    anyOf?: z.core.JSONSchema.JSONSchema[];
+    oneOf?: z.core.JSONSchema.JSONSchema[];
+    not?: z.core.JSONSchema._JSONSchema;
+    multipleOf?: number;
+    maximum?: number;
+    exclusiveMaximum?: number | boolean;
+    minimum?: number;
+    exclusiveMinimum?: number | boolean;
+    maxLength?: number;
+    minLength?: number;
+    pattern?: string;
+    maxItems?: number;
+    minItems?: number;
+    uniqueItems?: boolean;
+    maxContains?: number;
+    minContains?: number;
+    maxProperties?: number;
+    minProperties?: number;
+    required?: string[];
+    dependentRequired?: Record<string, string[]>;
+    enum?: Array<string | number | boolean | null>;
+    const?: string | number | boolean | null;
+    id?: string;
+    title?: string;
+    description?: string;
+    default?: unknown;
+    deprecated?: boolean;
+    readOnly?: boolean;
+    writeOnly?: boolean;
+    nullable?: boolean;
+    examples?: unknown[];
+    format?: string;
+    contentMediaType?: string;
+    contentEncoding?: string;
+    contentSchema?: z.core.JSONSchema.JSONSchema;
+    _prefault?: unknown;
+};
+export declare const DAIMON_CONTRACT_MANIFEST_V7_VERSION: "noopolis.daimon.runtime-contract-manifest.v7";
+export declare const daimonContractManifestV7Schema: z.ZodObject<{
+    engines: z.ZodRecord<z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        authKinds: z.ZodArray<z.ZodString>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            staging: z.ZodLiteral<"portable-file">;
+            realm: z.ZodNull;
+            method: z.ZodString;
+            provider: z.ZodString;
+            fileName: z.ZodString;
+            maxCredentialBytes: z.ZodNumber;
+            directoryMode: z.ZodLiteral<448>;
+            fileMode: z.ZodLiteral<384>;
+            format: z.ZodObject<{
+                containerKey: z.ZodOptional<z.ZodString>;
+                fallbackToRoot: z.ZodOptional<z.ZodBoolean>;
+                entryKeyPattern: z.ZodOptional<z.ZodString>;
+                accessTokenKeys: z.ZodArray<z.ZodString>;
+                refreshTokenKeys: z.ZodArray<z.ZodString>;
+                expiresAtKey: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            staging: z.ZodLiteral<"portable-realm">;
+            realm: z.ZodType<NonNullable<{
+                readonly agentCredentialRelativePath: ".codex/auth.json";
+                readonly bootstrapMountPath: "/var/lib/spawnfile/daimon/codex-bootstrap-auth";
+                readonly bootstrapSourceSlot: "codex-auth";
+                readonly directoryMode: 448;
+                readonly durableMountPath: "/var/lib/spawnfile/daimon/codex-subscription-realm";
+                readonly fileMode: 384;
+                readonly maxCredentialBytes: 65536;
+            }>>;
+            method: z.ZodString;
+            provider: z.ZodString;
+            fileName: z.ZodString;
+            maxCredentialBytes: z.ZodNumber;
+            directoryMode: z.ZodLiteral<448>;
+            fileMode: z.ZodLiteral<384>;
+            format: z.ZodObject<{
+                containerKey: z.ZodOptional<z.ZodString>;
+                fallbackToRoot: z.ZodOptional<z.ZodBoolean>;
+                entryKeyPattern: z.ZodOptional<z.ZodString>;
+                accessTokenKeys: z.ZodArray<z.ZodString>;
+                refreshTokenKeys: z.ZodArray<z.ZodString>;
+                expiresAtKey: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            staging: z.ZodLiteral<"broker-realm">;
+            realm: z.ZodType<{
+                readonly agentCredentialRelativePath: ".grok/auth.json";
+                readonly bootstrapMountPath: "/var/lib/spawnfile/daimon/grok-bootstrap-auth";
+                readonly bootstrapSourceSlot: "grok-auth";
+                readonly directoryMode: 448;
+                readonly durableMountPath: "/var/lib/spawnfile/daimon/grok-subscription-realm";
+                readonly fileMode: 384;
+                readonly maxCredentialBytes: 65536;
+            }>;
+            method: z.ZodString;
+            provider: z.ZodString;
+            fileName: z.ZodString;
+            maxCredentialBytes: z.ZodNumber;
+            directoryMode: z.ZodLiteral<448>;
+            fileMode: z.ZodLiteral<384>;
+            format: z.ZodObject<{
+                containerKey: z.ZodOptional<z.ZodString>;
+                fallbackToRoot: z.ZodOptional<z.ZodBoolean>;
+                entryKeyPattern: z.ZodOptional<z.ZodString>;
+                accessTokenKeys: z.ZodArray<z.ZodString>;
+                refreshTokenKeys: z.ZodArray<z.ZodString>;
+                expiresAtKey: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            staging: z.ZodLiteral<"secret-service">;
+            method: z.ZodNull;
+            provider: z.ZodNull;
+            realm: z.ZodType<{
+                readonly directoryMode: 448;
+                readonly durableMountPath: "/var/lib/spawnfile/daimon/agy-subscription-realm";
+                readonly fileMode: 384;
+                readonly maxUnlockBytes: 4096;
+                readonly unlockMountPath: "/var/lib/spawnfile/daimon/agy-unlock-secret";
+                readonly unlockSourceSlot: "agy-unlock-secret";
+            }>;
+            busEnvironment: z.ZodString;
+            format: z.ZodNull;
+        }, z.core.$strict>], "staging">;
+        credentialMaterial: z.ZodNullable<z.ZodObject<{
+            destinationRelativePath: z.ZodString;
+            sourceSlot: z.ZodOptional<z.ZodString>;
+            sourceRelativePath: z.ZodOptional<z.ZodString>;
+            directoryMode: z.ZodOptional<z.ZodLiteral<448>>;
+            fileMode: z.ZodOptional<z.ZodLiteral<384>>;
+        }, z.core.$strict>>;
+        piAuthMethod: z.ZodOptional<z.ZodString>;
+        piProvider: z.ZodOptional<z.ZodString>;
+        piSourceProvider: z.ZodOptional<z.ZodString>;
+        homeDirectory: z.ZodUnion<readonly [z.ZodLiteral<"">, z.ZodString]>;
+        homeEnvironment: z.ZodString;
+        requiredBinaries: z.ZodArray<z.ZodString>;
+        modelSelection: z.ZodObject<{
+            configurable: z.ZodBoolean;
+            models: z.ZodUnion<readonly [z.ZodObject<{
+                kind: z.ZodLiteral<"non-empty-string">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"enum">;
+                values: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>, z.ZodNull]>;
+            reasoningEfforts: z.ZodArray<z.ZodString>;
+            defaults: z.ZodObject<{
+                model: z.ZodNullable<z.ZodString>;
+                reasoningEffort: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>;
+            requiresPairedDeclaration: z.ZodBoolean;
+            declarationRequiresBroker: z.ZodBoolean;
+        }, z.core.$strict>;
+        sandbox: z.ZodObject<{
+            configurable: z.ZodBoolean;
+            policy: z.ZodOptional<z.ZodObject<{
+                mode: z.ZodLiteral<"workspace-write">;
+                networkAccess: z.ZodLiteral<false>;
+                webSearch: z.ZodLiteral<"disabled">;
+            }, z.core.$strict>>;
+            profile: z.ZodOptional<z.ZodString>;
+            baseProfile: z.ZodOptional<z.ZodString>;
+            restrictNetwork: z.ZodOptional<z.ZodBoolean>;
+            denyPaths: z.ZodOptional<z.ZodObject<{
+                canonicalAbsolute: z.ZodBoolean;
+                rootAllowed: z.ZodBoolean;
+                trailingSlashAllowed: z.ZodBoolean;
+                forbiddenCharacterPattern: z.ZodString;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        training: z.ZodObject<{
+            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                supported: z.ZodLiteral<true>;
+                isolation: z.ZodEnum<{
+                    "native-sandbox": "native-sandbox";
+                    "broker-worker": "broker-worker";
+                }>;
+            }, z.core.$strict>, z.ZodObject<{
+                supported: z.ZodLiteral<false>;
+                isolation: z.ZodNull;
+                reason: z.ZodString;
+            }, z.core.$strict>], "supported">;
+            inferenceGrants: z.ZodNullable<z.ZodType<{
+                readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+                readonly client: {
+                    readonly configSha256: {
+                        readonly "grok-4.5": {
+                            readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                            readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                            readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                        };
+                        readonly "grok-4.6": {
+                            readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                            readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                            readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                        };
+                        readonly "grok-build": {
+                            readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                            readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                            readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                        };
+                    };
+                    readonly envKey: "DAIMON_INFERENCE_GRANT";
+                    readonly modelId: "daimon-inference-grok";
+                };
+                readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+                readonly ledgerDedupeKey: readonly ["grant", "request"];
+                readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+                readonly limits: {
+                    readonly maxRequests: 64;
+                    readonly maxTokens: 2000000;
+                };
+                readonly maxInFlightRequestsPerGrant: 1;
+                readonly maxLiveGrants: 8;
+                readonly messageRoles: readonly ["system", "user", "assistant"];
+                readonly purposes: readonly ["judge", "optimizer"];
+                readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+                readonly tokenPrefix: "inference_";
+                readonly ttlMs: 600000;
+            }, unknown, z.core.$ZodTypeInternals<{
+                readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+                readonly client: {
+                    readonly configSha256: {
+                        readonly "grok-4.5": {
+                            readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                            readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                            readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                        };
+                        readonly "grok-4.6": {
+                            readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                            readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                            readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                        };
+                        readonly "grok-build": {
+                            readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                            readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                            readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                        };
+                    };
+                    readonly envKey: "DAIMON_INFERENCE_GRANT";
+                    readonly modelId: "daimon-inference-grok";
+                };
+                readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+                readonly ledgerDedupeKey: readonly ["grant", "request"];
+                readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+                readonly limits: {
+                    readonly maxRequests: 64;
+                    readonly maxTokens: 2000000;
+                };
+                readonly maxInFlightRequestsPerGrant: 1;
+                readonly maxLiveGrants: 8;
+                readonly messageRoles: readonly ["system", "user", "assistant"];
+                readonly purposes: readonly ["judge", "optimizer"];
+                readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+                readonly tokenPrefix: "inference_";
+                readonly ttlMs: 600000;
+            }, unknown>>>;
+        }, z.core.$strict>;
+        broker: z.ZodNullable<z.ZodType<{
+            readonly artifacts: {
+                readonly arm64Sha256: "d0dc1c03197c3e90f09b66ad7c89b4f7b448d06dc84c03b247dce976d6018d6e";
+                readonly sourceSha256: "15836d7ad69f12ef581a6e5b8635c9db43b2177dac609160c0749d3d1fefbaa8";
+                readonly x64Sha256: "95aa9c272225e74ff9f45f54dde4bc30aee324e9ba24d8a876db9151c81b454d";
+            };
+            readonly backendSocketPath: "/run/daimon-engine-broker/backend.sock";
+            readonly bounds: {
+                readonly capabilityBundleBytes: 8196;
+                readonly capabilityBytes: 4096;
+                readonly outputBytes: 262144;
+                readonly promptBytes: 65536;
+            };
+            readonly controlProtocolVersion: "noopolis.daimon.engine-broker.v4";
+            readonly controlSocketPath: "/run/daimon-engine-broker/control.sock";
+            readonly credentialHomePath: "/var/lib/spawnfile/daimon/grok-subscription-realm";
+            readonly grokCliArtifacts: {
+                readonly arm64: {
+                    readonly bytes: 136090504;
+                    readonly sha256: "39ab87666877d64ef3a40aa60fbe0c3b6a6acd7001b78fe60e2c76bb6cfc4a94";
+                    readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-aarch64";
+                };
+                readonly x64: {
+                    readonly bytes: 163035648;
+                    readonly sha256: "be5905e107d2b8b5f3c142d21ecfe4c8fd32a913d2fd551b788707930c4dc80d";
+                    readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-x86_64";
+                };
+            };
+            readonly grokCliBuild: "3736acbc8658";
+            readonly grokCliVersion: "1.0.34";
+            readonly grokExecutablePath: "/usr/local/bin/grok";
+            readonly identities: {
+                readonly brokerUid: 2100;
+                readonly firstWorkerUid: 2200;
+                readonly organizationUid: 2000;
+            };
+            readonly inferenceGrants: {
+                readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+                readonly client: {
+                    readonly configSha256: {
+                        readonly "grok-4.5": {
+                            readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                            readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                            readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                        };
+                        readonly "grok-4.6": {
+                            readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                            readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                            readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                        };
+                        readonly "grok-build": {
+                            readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                            readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                            readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                        };
+                    };
+                    readonly envKey: "DAIMON_INFERENCE_GRANT";
+                    readonly modelId: "daimon-inference-grok";
+                };
+                readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+                readonly ledgerDedupeKey: readonly ["grant", "request"];
+                readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+                readonly limits: {
+                    readonly maxRequests: 64;
+                    readonly maxTokens: 2000000;
+                };
+                readonly maxInFlightRequestsPerGrant: 1;
+                readonly maxLiveGrants: 8;
+                readonly messageRoles: readonly ["system", "user", "assistant"];
+                readonly purposes: readonly ["judge", "optimizer"];
+                readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+                readonly tokenPrefix: "inference_";
+                readonly ttlMs: 600000;
+            };
+            readonly launcherSocketPath: "/run/daimon-engine-broker/launcher.sock";
+            readonly mcpFacade: {
+                readonly host: "127.0.0.1";
+                readonly path: "/mcp";
+                readonly port: 43124;
+            };
+            readonly nativeAbiVersion: 2;
+            readonly nativeExecutablePath: "/opt/daimon/bin/daimon-engine-broker";
+            readonly projectionVersion: "noopolis.daimon.grok-broker-projection.v3";
+            readonly providerProxy: {
+                readonly host: "127.0.0.1";
+                readonly port: 43123;
+            };
+            readonly registrationPath: "/etc/daimon-engine-broker/registrations.bin";
+            readonly runRequestBudget: {
+                readonly countsCredentialRetries: true;
+                readonly fileName: "run-requests.json";
+                readonly includesInferenceGrants: true;
+                readonly maximumField: "maxRunRequests";
+                readonly storeField: "runRequestStore";
+            };
+            readonly serviceConfigPath: "/etc/daimon-engine-broker/service.json";
+            readonly serviceConfigVersions: readonly ["noopolis.daimon.engine-broker-service.v1", "noopolis.daimon.engine-broker-service.v2", "noopolis.daimon.engine-broker-service.v3"];
+            readonly slotPreflightVersion: "noopolis.daimon.grok-slot-preflight.v2";
+            readonly slotRouting: {
+                readonly controlCaller: "organization";
+                readonly key: "slot";
+                readonly repeatedAgentIds: true;
+                readonly resetRequest: "reset_slot";
+                readonly resetResponse: "slot_reset";
+                readonly slotEnvironment: "DAIMON_ENGINE_BROKER_SLOT";
+                readonly turnStoreDirectory: "slot-{slot}";
+                readonly workersMayControl: false;
+            };
+            readonly turnLimits: {
+                readonly bounds: {
+                    readonly maxRequests: readonly [1, 48];
+                    readonly maxTokens: readonly [1, 10000000];
+                    readonly timeoutMs: readonly [1000, 3600000];
+                };
+                readonly keys: readonly ["maxRequests", "maxTokens", "timeoutMs"];
+                readonly limitReasons: readonly ["tokens", "requests", "timeout", "none"];
+                readonly maxInFlightRequests: 1;
+                readonly missingUsageEstimate: {
+                    readonly inputBytesPerToken: 2;
+                    readonly outputTokens: 4096;
+                };
+                readonly requestUsageMaxTokens: 500000;
+                readonly tokenCeilingOvershoot: "at-most-one-request";
+                readonly v1Defaults: {
+                    readonly maxRequests: 32;
+                    readonly maxTokens: 300000;
+                    readonly timeoutMs: 240000;
+                };
+                readonly wakeMayOnlyLower: true;
+            };
+            readonly turnRecordVersions: readonly ["noopolis.daimon.engine-broker-turn.v1", "noopolis.daimon.engine-broker-turn.v2"];
+            readonly turnStorePath: "/var/lib/spawnfile/daimon/grok-subscription-realm/turns";
+            readonly wakeLimitEnvironment: {
+                readonly maxTokens: "DAIMON_ENGINE_WAKE_TOKEN_CEILING";
+                readonly timeoutMs: "DAIMON_ENGINE_WAKE_TIMEOUT_MS";
+            };
+            readonly worker: {
+                readonly clockedConfigSha256: {
+                    readonly "grok-4.5": {
+                        readonly high: "907d8967960c342b442d6d256b2585f3c85bd846a78578f596f0b605403d6d34";
+                        readonly low: "3c4f3515b21c1bffb3fb770e2ecb4b918b6c43d5e77c1fd47e1e6698d1fedee7";
+                        readonly medium: "9117e12b2f3f6fa045799592969cbaae1c2f3b1ea79330badac8655b9b41dd7a";
+                    };
+                    readonly "grok-4.6": {
+                        readonly high: "203744f6f0dfc0bc80cfb896880497edfd9b3de4dcf33060e8ef4d2ef5f220a7";
+                        readonly low: "751f1dcd04983e5e5883df5a8fefa04f201e187e5ef1f344d3bf83f950830432";
+                        readonly medium: "f1406f93a8091eb0c09e07321254a9c783a89b0bbf5548d9613d53a8d087a517";
+                    };
+                    readonly "grok-build": {
+                        readonly high: "6efddadc82c38020d3351829e54bb09fa456cd6d76ea1247902794d82a4a3ffa";
+                        readonly low: "a8c63ba910623a0686930c27db0733f4a2588c7fca9dd7da25c3f18027720ab5";
+                        readonly medium: "6afcd2b90c0d19794f8c0d22147a0f011946a92e613f89dae98b0ca729313101";
+                    };
+                };
+                readonly configSha256: {
+                    readonly "grok-4.5": {
+                        readonly high: "c63c3387ce92d94ec3f690abfe98942afcd7c9e17ff84816bbe751f340ab251f";
+                        readonly low: "8247127c3625ff7c5d8d527a53596b89ec6557a821ac46cfd00bd122b90daff6";
+                        readonly medium: "59288cee61297bb8c002097061a48f77b09d310754187a253ee089f7172a9155";
+                    };
+                    readonly "grok-4.6": {
+                        readonly high: "65b0212564fb74042b1503d293fb8d3620276033264c0efade2a539ca09218e3";
+                        readonly low: "ab58499ac32678097c146479896f2b8a8e2b0e39aea22dc0a60b6227e370538e";
+                        readonly medium: "df1a5cc84346e7f6bf6090492fbd19faaefb42953e3bb2e8c6cbc0572242403f";
+                    };
+                    readonly "grok-build": {
+                        readonly high: "a23724e00d670caee185ba7690d2daa868173e53905cf446f5329666f01ab4e3";
+                        readonly low: "fb343f2809903f26d21681470943235031f946e99085542fd89555eb7782cbb5";
+                        readonly medium: "8a587ef75c90eab70d19b24583e60051d6fba9d90c558839fdbb15588b4cc656";
+                    };
+                };
+                readonly defaultModel: "grok-4.6";
+                readonly defaultReasoningEffort: "low";
+                readonly home: {
+                    readonly directory: {
+                        readonly group: "worker";
+                        readonly mode: 1017;
+                        readonly uid: 0;
+                    };
+                    readonly organizationRuntimeHome: {
+                        readonly group: "worker";
+                        readonly mode: 456;
+                        readonly owner: "organization";
+                    };
+                    readonly privateTmp: {
+                        readonly mode: 448;
+                        readonly owner: "worker";
+                        readonly relativeToWorkerHome: "tmp";
+                    };
+                    readonly readOnlyFiles: {
+                        readonly gid: 0;
+                        readonly mode: 292;
+                        readonly names: readonly ["config.toml", "managed_config.toml", "requirements.toml", "sandbox.toml", "trusted_folders.toml"];
+                        readonly uid: 0;
+                    };
+                    readonly sandboxEvents: {
+                        readonly group: "broker";
+                        readonly mode: 416;
+                        readonly owner: "worker";
+                        readonly relativePath: "sessions/sandbox-events.jsonl";
+                    };
+                    readonly sessionsDirectory: {
+                        readonly group: "worker";
+                        readonly mode: 1017;
+                        readonly relativePath: "sessions";
+                        readonly uid: 0;
+                    };
+                    readonly sharedTmp: {
+                        readonly maxGroupExclusive: 2200;
+                        readonly mode: 1020;
+                        readonly otherMode: 4;
+                        readonly paths: readonly ["/tmp", "/var/tmp"];
+                        readonly uid: 0;
+                    };
+                    readonly spillDirectory: {
+                        readonly fileMode: 416;
+                        readonly group: "worker";
+                        readonly mode: 1512;
+                        readonly owner: "organization";
+                        readonly relativeToRuntimeHome: "tool-output";
+                    };
+                };
+                readonly maxTurns: 48;
+                readonly modelId: "daimon-broker-grok";
+                readonly models: readonly ["grok-4.6", "grok-4.5", "grok-build"];
+                readonly reasoningEfforts: readonly ["low", "medium", "high"];
+                readonly systemPromptSha256: "2c31c0085a54a4efbf9c0cf0b8124c56e47f38691b7f0c7fa233a74abaa8ddf8";
+                readonly taskClock: {
+                    readonly directoryMode: 493;
+                    readonly directoryPath: "/run/daimon-engine-broker/task-clock/slot-0";
+                    readonly fileMode: 420;
+                    readonly ownerUid: 2100;
+                    readonly preloadPath: "/usr/local/lib/daimon/libfaketime.so.1";
+                    readonly rootDirectoryPath: "/run/daimon-engine-broker/task-clock";
+                    readonly slotDirectoryPattern: "/run/daimon-engine-broker/task-clock/slot-{slot}";
+                    readonly slotFilePattern: "/run/daimon-engine-broker/task-clock/slot-{slot}/faketime";
+                    readonly timestampFilePath: "/run/daimon-engine-broker/task-clock/slot-0/faketime";
+                    readonly version: "noopolis.daimon.grok-broker-task-clock.v2";
+                    readonly workerView: "own-directory-visible-sibling-directories-denied";
+                };
+                readonly toolIds: readonly ["run_terminal_cmd", "read_file", "grep", "list_dir", "search_tool", "use_tool"];
+                readonly visibleTools: readonly ["grep", "list_dir", "read_file", "run_terminal_command", "search_tool", "use_tool"];
+            };
+        }, unknown, z.core.$ZodTypeInternals<{
+            readonly artifacts: {
+                readonly arm64Sha256: "d0dc1c03197c3e90f09b66ad7c89b4f7b448d06dc84c03b247dce976d6018d6e";
+                readonly sourceSha256: "15836d7ad69f12ef581a6e5b8635c9db43b2177dac609160c0749d3d1fefbaa8";
+                readonly x64Sha256: "95aa9c272225e74ff9f45f54dde4bc30aee324e9ba24d8a876db9151c81b454d";
+            };
+            readonly backendSocketPath: "/run/daimon-engine-broker/backend.sock";
+            readonly bounds: {
+                readonly capabilityBundleBytes: 8196;
+                readonly capabilityBytes: 4096;
+                readonly outputBytes: 262144;
+                readonly promptBytes: 65536;
+            };
+            readonly controlProtocolVersion: "noopolis.daimon.engine-broker.v4";
+            readonly controlSocketPath: "/run/daimon-engine-broker/control.sock";
+            readonly credentialHomePath: "/var/lib/spawnfile/daimon/grok-subscription-realm";
+            readonly grokCliArtifacts: {
+                readonly arm64: {
+                    readonly bytes: 136090504;
+                    readonly sha256: "39ab87666877d64ef3a40aa60fbe0c3b6a6acd7001b78fe60e2c76bb6cfc4a94";
+                    readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-aarch64";
+                };
+                readonly x64: {
+                    readonly bytes: 163035648;
+                    readonly sha256: "be5905e107d2b8b5f3c142d21ecfe4c8fd32a913d2fd551b788707930c4dc80d";
+                    readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-x86_64";
+                };
+            };
+            readonly grokCliBuild: "3736acbc8658";
+            readonly grokCliVersion: "1.0.34";
+            readonly grokExecutablePath: "/usr/local/bin/grok";
+            readonly identities: {
+                readonly brokerUid: 2100;
+                readonly firstWorkerUid: 2200;
+                readonly organizationUid: 2000;
+            };
+            readonly inferenceGrants: {
+                readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+                readonly client: {
+                    readonly configSha256: {
+                        readonly "grok-4.5": {
+                            readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                            readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                            readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                        };
+                        readonly "grok-4.6": {
+                            readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                            readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                            readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                        };
+                        readonly "grok-build": {
+                            readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                            readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                            readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                        };
+                    };
+                    readonly envKey: "DAIMON_INFERENCE_GRANT";
+                    readonly modelId: "daimon-inference-grok";
+                };
+                readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+                readonly ledgerDedupeKey: readonly ["grant", "request"];
+                readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+                readonly limits: {
+                    readonly maxRequests: 64;
+                    readonly maxTokens: 2000000;
+                };
+                readonly maxInFlightRequestsPerGrant: 1;
+                readonly maxLiveGrants: 8;
+                readonly messageRoles: readonly ["system", "user", "assistant"];
+                readonly purposes: readonly ["judge", "optimizer"];
+                readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+                readonly tokenPrefix: "inference_";
+                readonly ttlMs: 600000;
+            };
+            readonly launcherSocketPath: "/run/daimon-engine-broker/launcher.sock";
+            readonly mcpFacade: {
+                readonly host: "127.0.0.1";
+                readonly path: "/mcp";
+                readonly port: 43124;
+            };
+            readonly nativeAbiVersion: 2;
+            readonly nativeExecutablePath: "/opt/daimon/bin/daimon-engine-broker";
+            readonly projectionVersion: "noopolis.daimon.grok-broker-projection.v3";
+            readonly providerProxy: {
+                readonly host: "127.0.0.1";
+                readonly port: 43123;
+            };
+            readonly registrationPath: "/etc/daimon-engine-broker/registrations.bin";
+            readonly runRequestBudget: {
+                readonly countsCredentialRetries: true;
+                readonly fileName: "run-requests.json";
+                readonly includesInferenceGrants: true;
+                readonly maximumField: "maxRunRequests";
+                readonly storeField: "runRequestStore";
+            };
+            readonly serviceConfigPath: "/etc/daimon-engine-broker/service.json";
+            readonly serviceConfigVersions: readonly ["noopolis.daimon.engine-broker-service.v1", "noopolis.daimon.engine-broker-service.v2", "noopolis.daimon.engine-broker-service.v3"];
+            readonly slotPreflightVersion: "noopolis.daimon.grok-slot-preflight.v2";
+            readonly slotRouting: {
+                readonly controlCaller: "organization";
+                readonly key: "slot";
+                readonly repeatedAgentIds: true;
+                readonly resetRequest: "reset_slot";
+                readonly resetResponse: "slot_reset";
+                readonly slotEnvironment: "DAIMON_ENGINE_BROKER_SLOT";
+                readonly turnStoreDirectory: "slot-{slot}";
+                readonly workersMayControl: false;
+            };
+            readonly turnLimits: {
+                readonly bounds: {
+                    readonly maxRequests: readonly [1, 48];
+                    readonly maxTokens: readonly [1, 10000000];
+                    readonly timeoutMs: readonly [1000, 3600000];
+                };
+                readonly keys: readonly ["maxRequests", "maxTokens", "timeoutMs"];
+                readonly limitReasons: readonly ["tokens", "requests", "timeout", "none"];
+                readonly maxInFlightRequests: 1;
+                readonly missingUsageEstimate: {
+                    readonly inputBytesPerToken: 2;
+                    readonly outputTokens: 4096;
+                };
+                readonly requestUsageMaxTokens: 500000;
+                readonly tokenCeilingOvershoot: "at-most-one-request";
+                readonly v1Defaults: {
+                    readonly maxRequests: 32;
+                    readonly maxTokens: 300000;
+                    readonly timeoutMs: 240000;
+                };
+                readonly wakeMayOnlyLower: true;
+            };
+            readonly turnRecordVersions: readonly ["noopolis.daimon.engine-broker-turn.v1", "noopolis.daimon.engine-broker-turn.v2"];
+            readonly turnStorePath: "/var/lib/spawnfile/daimon/grok-subscription-realm/turns";
+            readonly wakeLimitEnvironment: {
+                readonly maxTokens: "DAIMON_ENGINE_WAKE_TOKEN_CEILING";
+                readonly timeoutMs: "DAIMON_ENGINE_WAKE_TIMEOUT_MS";
+            };
+            readonly worker: {
+                readonly clockedConfigSha256: {
+                    readonly "grok-4.5": {
+                        readonly high: "907d8967960c342b442d6d256b2585f3c85bd846a78578f596f0b605403d6d34";
+                        readonly low: "3c4f3515b21c1bffb3fb770e2ecb4b918b6c43d5e77c1fd47e1e6698d1fedee7";
+                        readonly medium: "9117e12b2f3f6fa045799592969cbaae1c2f3b1ea79330badac8655b9b41dd7a";
+                    };
+                    readonly "grok-4.6": {
+                        readonly high: "203744f6f0dfc0bc80cfb896880497edfd9b3de4dcf33060e8ef4d2ef5f220a7";
+                        readonly low: "751f1dcd04983e5e5883df5a8fefa04f201e187e5ef1f344d3bf83f950830432";
+                        readonly medium: "f1406f93a8091eb0c09e07321254a9c783a89b0bbf5548d9613d53a8d087a517";
+                    };
+                    readonly "grok-build": {
+                        readonly high: "6efddadc82c38020d3351829e54bb09fa456cd6d76ea1247902794d82a4a3ffa";
+                        readonly low: "a8c63ba910623a0686930c27db0733f4a2588c7fca9dd7da25c3f18027720ab5";
+                        readonly medium: "6afcd2b90c0d19794f8c0d22147a0f011946a92e613f89dae98b0ca729313101";
+                    };
+                };
+                readonly configSha256: {
+                    readonly "grok-4.5": {
+                        readonly high: "c63c3387ce92d94ec3f690abfe98942afcd7c9e17ff84816bbe751f340ab251f";
+                        readonly low: "8247127c3625ff7c5d8d527a53596b89ec6557a821ac46cfd00bd122b90daff6";
+                        readonly medium: "59288cee61297bb8c002097061a48f77b09d310754187a253ee089f7172a9155";
+                    };
+                    readonly "grok-4.6": {
+                        readonly high: "65b0212564fb74042b1503d293fb8d3620276033264c0efade2a539ca09218e3";
+                        readonly low: "ab58499ac32678097c146479896f2b8a8e2b0e39aea22dc0a60b6227e370538e";
+                        readonly medium: "df1a5cc84346e7f6bf6090492fbd19faaefb42953e3bb2e8c6cbc0572242403f";
+                    };
+                    readonly "grok-build": {
+                        readonly high: "a23724e00d670caee185ba7690d2daa868173e53905cf446f5329666f01ab4e3";
+                        readonly low: "fb343f2809903f26d21681470943235031f946e99085542fd89555eb7782cbb5";
+                        readonly medium: "8a587ef75c90eab70d19b24583e60051d6fba9d90c558839fdbb15588b4cc656";
+                    };
+                };
+                readonly defaultModel: "grok-4.6";
+                readonly defaultReasoningEffort: "low";
+                readonly home: {
+                    readonly directory: {
+                        readonly group: "worker";
+                        readonly mode: 1017;
+                        readonly uid: 0;
+                    };
+                    readonly organizationRuntimeHome: {
+                        readonly group: "worker";
+                        readonly mode: 456;
+                        readonly owner: "organization";
+                    };
+                    readonly privateTmp: {
+                        readonly mode: 448;
+                        readonly owner: "worker";
+                        readonly relativeToWorkerHome: "tmp";
+                    };
+                    readonly readOnlyFiles: {
+                        readonly gid: 0;
+                        readonly mode: 292;
+                        readonly names: readonly ["config.toml", "managed_config.toml", "requirements.toml", "sandbox.toml", "trusted_folders.toml"];
+                        readonly uid: 0;
+                    };
+                    readonly sandboxEvents: {
+                        readonly group: "broker";
+                        readonly mode: 416;
+                        readonly owner: "worker";
+                        readonly relativePath: "sessions/sandbox-events.jsonl";
+                    };
+                    readonly sessionsDirectory: {
+                        readonly group: "worker";
+                        readonly mode: 1017;
+                        readonly relativePath: "sessions";
+                        readonly uid: 0;
+                    };
+                    readonly sharedTmp: {
+                        readonly maxGroupExclusive: 2200;
+                        readonly mode: 1020;
+                        readonly otherMode: 4;
+                        readonly paths: readonly ["/tmp", "/var/tmp"];
+                        readonly uid: 0;
+                    };
+                    readonly spillDirectory: {
+                        readonly fileMode: 416;
+                        readonly group: "worker";
+                        readonly mode: 1512;
+                        readonly owner: "organization";
+                        readonly relativeToRuntimeHome: "tool-output";
+                    };
+                };
+                readonly maxTurns: 48;
+                readonly modelId: "daimon-broker-grok";
+                readonly models: readonly ["grok-4.6", "grok-4.5", "grok-build"];
+                readonly reasoningEfforts: readonly ["low", "medium", "high"];
+                readonly systemPromptSha256: "2c31c0085a54a4efbf9c0cf0b8124c56e47f38691b7f0c7fa233a74abaa8ddf8";
+                readonly taskClock: {
+                    readonly directoryMode: 493;
+                    readonly directoryPath: "/run/daimon-engine-broker/task-clock/slot-0";
+                    readonly fileMode: 420;
+                    readonly ownerUid: 2100;
+                    readonly preloadPath: "/usr/local/lib/daimon/libfaketime.so.1";
+                    readonly rootDirectoryPath: "/run/daimon-engine-broker/task-clock";
+                    readonly slotDirectoryPattern: "/run/daimon-engine-broker/task-clock/slot-{slot}";
+                    readonly slotFilePattern: "/run/daimon-engine-broker/task-clock/slot-{slot}/faketime";
+                    readonly timestampFilePath: "/run/daimon-engine-broker/task-clock/slot-0/faketime";
+                    readonly version: "noopolis.daimon.grok-broker-task-clock.v2";
+                    readonly workerView: "own-directory-visible-sibling-directories-denied";
+                };
+                readonly toolIds: readonly ["run_terminal_cmd", "read_file", "grep", "list_dir", "search_tool", "use_tool"];
+                readonly visibleTools: readonly ["grep", "list_dir", "read_file", "run_terminal_command", "search_tool", "use_tool"];
+            };
+        }, unknown>>>;
+        capabilities: z.ZodObject<{
+            portableCredential: z.ZodBoolean;
+            nativeSandbox: z.ZodBoolean;
+            broker: z.ZodBoolean;
+            secretService: z.ZodBoolean;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    supportedEngineKinds: z.ZodArray<z.ZodString>;
+    consumedConfigFields: z.ZodArray<z.ZodString>;
+    wakeMoments: z.ZodOptional<z.ZodJSONSchema>;
+    version: z.ZodLiteral<"noopolis.daimon.runtime-contract-manifest.v7">;
+    codexSubscriptionRealm: z.ZodJSONSchema;
+}, z.core.$strict>;
+export declare const DAIMON_CONTRACT_MANIFEST_V7_JSON_SCHEMA: {
+    $id: "noopolis.daimon.runtime-contract-manifest.v7";
+    "~standard": z.core.ZodStandardSchemaWithJSON<z.ZodObject<{
+        engines: z.ZodRecord<z.ZodString, z.ZodObject<{
+            id: z.ZodString;
+            authKinds: z.ZodArray<z.ZodString>;
+            auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                staging: z.ZodLiteral<"portable-file">;
+                realm: z.ZodNull;
+                method: z.ZodString;
+                provider: z.ZodString;
+                fileName: z.ZodString;
+                maxCredentialBytes: z.ZodNumber;
+                directoryMode: z.ZodLiteral<448>;
+                fileMode: z.ZodLiteral<384>;
+                format: z.ZodObject<{
+                    containerKey: z.ZodOptional<z.ZodString>;
+                    fallbackToRoot: z.ZodOptional<z.ZodBoolean>;
+                    entryKeyPattern: z.ZodOptional<z.ZodString>;
+                    accessTokenKeys: z.ZodArray<z.ZodString>;
+                    refreshTokenKeys: z.ZodArray<z.ZodString>;
+                    expiresAtKey: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                staging: z.ZodLiteral<"portable-realm">;
+                realm: z.ZodType<NonNullable<{
+                    readonly agentCredentialRelativePath: ".codex/auth.json";
+                    readonly bootstrapMountPath: "/var/lib/spawnfile/daimon/codex-bootstrap-auth";
+                    readonly bootstrapSourceSlot: "codex-auth";
+                    readonly directoryMode: 448;
+                    readonly durableMountPath: "/var/lib/spawnfile/daimon/codex-subscription-realm";
+                    readonly fileMode: 384;
+                    readonly maxCredentialBytes: 65536;
+                }>>;
+                method: z.ZodString;
+                provider: z.ZodString;
+                fileName: z.ZodString;
+                maxCredentialBytes: z.ZodNumber;
+                directoryMode: z.ZodLiteral<448>;
+                fileMode: z.ZodLiteral<384>;
+                format: z.ZodObject<{
+                    containerKey: z.ZodOptional<z.ZodString>;
+                    fallbackToRoot: z.ZodOptional<z.ZodBoolean>;
+                    entryKeyPattern: z.ZodOptional<z.ZodString>;
+                    accessTokenKeys: z.ZodArray<z.ZodString>;
+                    refreshTokenKeys: z.ZodArray<z.ZodString>;
+                    expiresAtKey: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>;
             }, z.core.$strict>, z.ZodObject<{
                 staging: z.ZodLiteral<"broker-realm">;
                 realm: z.ZodType<{
@@ -1391,6 +2943,8 @@ export declare const DAIMON_CONTRACT_MANIFEST_V6_JSON_SCHEMA: {
         supportedEngineKinds: z.ZodArray<z.ZodString>;
         consumedConfigFields: z.ZodArray<z.ZodString>;
         wakeMoments: z.ZodOptional<z.ZodJSONSchema>;
+        version: z.ZodLiteral<"noopolis.daimon.runtime-contract-manifest.v7">;
+        codexSubscriptionRealm: z.ZodJSONSchema;
     }, z.core.$strict>>;
     $schema?: "https://json-schema.org/draft/2020-12/schema" | "http://json-schema.org/draft-07/schema#" | "http://json-schema.org/draft-04/schema#";
     $anchor?: string;
@@ -1400,7 +2954,7 @@ export declare const DAIMON_CONTRACT_MANIFEST_V6_JSON_SCHEMA: {
     $vocabulary?: Record<string, boolean>;
     $comment?: string;
     $defs?: Record<string, z.core.JSONSchema.JSONSchema>;
-    type?: "object" | "array" | "string" | "number" | "boolean" | "null" | "integer";
+    type?: z.core.JSONSchema.SchemaType | z.core.JSONSchema.SchemaType[];
     additionalItems?: z.core.JSONSchema._JSONSchema;
     unevaluatedItems?: z.core.JSONSchema._JSONSchema;
     prefixItems?: z.core.JSONSchema._JSONSchema[];