daimon 0.3.0

Added:

• edit_file, a new model tool: write a whole text file, append to it, or replace one exact
  occurrence of a piece of text. Writes are atomic and confined to the directories the sandbox lets
  commands write under, every edit passes the risk classifier and approval as edit_file <mode> <path>, and
  each edit is audited as file.write and listed in the receipt's files.
• triage, a new MCP tool: run a build or test command on this Mac (or read an output file) and get
  back only the failures as kind, location, message, judged chunk by chunk by the on-device model.
  The raw output never leaves the Mac; the command runs under the same policy, sandbox, and approval
  as the model's own run_command.
• Structured output: respond takes a schema (a JSON Schema object in an accepted subset) and
  returns JSON of that shape, parsed into structuredContent.output; the CLI takes --schema <path>.
  A model that does not declare guided generation is refused before generation.
• respond results carry a receipt: the turn's tool calls with arguments and result sizes, commands
  with exit status, policy denials, approval decisions, and errors, folded from the thread's audit
  events so a calling harness can verify delegated work without reading the log.

Fixed:

• --model private-cloud failed after the request with an opaque ModelManagerError 1046. Private
  Cloud Compute needs the managed com.apple.developer.private-cloud-compute entitlement, which an
  ad-hoc signed command-line tool cannot carry; daimon now checks its own signature and refuses the
  model with a sentence before anything is sent. daimon models shows the same reason.

Install or upgrade with Homebrew: brew install pidster/tap/daimon. Downloading the tarball directly leaves it quarantined; use Homebrew.