@impetik/xeer-mcp 0.2.5 → 0.2.7

package/vendor/spec/actions.d.ts

@@ -0,0 +1,1250 @@
+export declare const ACTION_REGISTRY_PROTOCOL: "xeer.actions.v0";
+export type ActionEffect = 'read-source' | 'write-source' | 'write-file' | 'write-generated' | 'run-local' | 'read-state' | 'write-state' | 'network-read' | 'network-write' | 'production-change' | 'secret-metadata' | 'secret-read' | 'secret-write';
+export type ActionPathPolicy = 'project-relative' | 'url' | 'app-or-url' | 'project-or-url' | 'none';
+export declare const XEER_MCP_PROFILES: readonly ["author", "operator"];
+export type XeerMcpProfile = (typeof XEER_MCP_PROFILES)[number];
+export declare const XEER_ARTIFACT_ID_PATTERN: "^sha256:[a-f0-9]{64}$";
+export declare const MCP_INPUT_SCHEMA_DRAFT: "http://json-schema.org/draft-07/schema#";
+interface McpInputPropertyBase {
+    readonly description?: string;
+}
+export type McpInputPropertyDefinition = McpInputPropertyBase & ({
+    readonly type: 'string';
+    readonly enum?: readonly string[];
+    readonly default?: string;
+    readonly minLength?: number;
+    readonly maxLength?: number;
+    readonly pattern?: string;
+    readonly minimum?: never;
+    readonly maximum?: never;
+} | {
+    readonly type: 'integer' | 'number';
+    readonly enum?: never;
+    readonly default?: number;
+    readonly minimum?: number;
+    readonly maximum?: number;
+    readonly minLength?: never;
+    readonly maxLength?: never;
+    readonly pattern?: never;
+} | {
+    readonly type: 'boolean';
+    readonly enum?: never;
+    readonly default?: boolean;
+    readonly minimum?: never;
+    readonly maximum?: never;
+    readonly minLength?: never;
+    readonly maxLength?: never;
+    readonly pattern?: never;
+});
+export interface McpInputSchemaDefinition {
+    readonly type: 'object';
+    readonly properties: Readonly<Record<string, McpInputPropertyDefinition>>;
+    readonly required?: readonly string[];
+}
+export interface XeerActionDefinition {
+    readonly id: string;
+    /** Canonical positional dispatch tokens, without the `xeer` executable. */
+    readonly command: readonly string[];
+    readonly aliases?: readonly (readonly string[])[];
+    readonly summary: string;
+    /** Help syntax without the `xeer ` prefix. May contain `{{templates}}`. */
+    readonly usage: readonly string[];
+    readonly hiddenFromHelp?: boolean;
+    readonly helpOrder?: number;
+    readonly outputProtocol: string;
+    readonly effects: readonly ActionEffect[];
+    readonly idempotent: boolean;
+    readonly reversible: boolean;
+    readonly destructive: boolean;
+    readonly humanPrerequisites: readonly string[];
+    readonly pathPolicy: ActionPathPolicy;
+    readonly surfaces: {
+        readonly cli: boolean;
+        readonly mcpTool?: string;
+        readonly mcpTitle?: string;
+        readonly mcpDescription?: string;
+        /** Server profiles that expose this tool. Required with mcpTool. */
+        readonly mcpProfiles?: readonly XeerMcpProfile[];
+        /** Exact reusable input contract projected by MCP listTools. Required with mcpTool. */
+        readonly mcpInputSchema?: McpInputSchemaDefinition;
+        /** Why this action is intentionally absent from MCP. Required when there is no tool. */
+        readonly mcpExclusion?: string;
+    };
+}
+export interface XeerCliOptionDefinition {
+    readonly name: string;
+    readonly takesValue: boolean;
+}
+export interface McpActionAnnotations {
+    readonly readOnlyHint: boolean;
+    readonly destructiveHint: boolean;
+    readonly idempotentHint: boolean;
+    readonly openWorldHint: boolean;
+}
+export interface McpInputJsonSchema extends McpInputSchemaDefinition {
+    readonly $schema: typeof MCP_INPUT_SCHEMA_DRAFT;
+}
+declare const actions: readonly [{
+    readonly id: "check";
+    readonly command: readonly ["check"];
+    readonly summary: "Validate a project and report structured diagnostics.";
+    readonly usage: readonly ["check [directory] [--json]"];
+    readonly helpOrder: 10;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-source", "write-generated"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly directory: {
+                    readonly description: "Project directory. Relative paths resolve against the server root; defaults to it.";
+                    readonly type: "string";
+                };
+            };
+        };
+        readonly mcpTitle: "Check a Xeer project";
+        readonly mcpDescription: string;
+        readonly cli: true;
+        readonly mcpTool: "xeer_check";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "build";
+    readonly command: readonly ["build"];
+    readonly summary: "Build and verify a content-addressed application artifact.";
+    readonly usage: readonly ["build [directory] [--json]"];
+    readonly helpOrder: 40;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-source", "write-generated", "run-local"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly directory: {
+                    readonly description: "Project directory. Relative paths resolve against the server root; defaults to it.";
+                    readonly type: "string";
+                };
+            };
+        };
+        readonly mcpTitle: "Build a Xeer project";
+        readonly mcpDescription: string;
+        readonly cli: true;
+        readonly mcpTool: "xeer_build";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "test";
+    readonly command: readonly ["test"];
+    readonly summary: "Run application tests against fresh isolated local state.";
+    readonly usage: readonly ["test [directory] [--host <host>] [--json]"];
+    readonly helpOrder: 250;
+    readonly outputProtocol: "xeer.dev.v0";
+    readonly effects: readonly ["read-source", "write-generated", "run-local", "write-state"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly directory: {
+                    readonly description: "Project directory. Relative paths resolve against the server root; defaults to it.";
+                    readonly type: "string";
+                };
+                readonly timeoutMilliseconds: {
+                    readonly type: "integer";
+                    readonly minimum: 1000;
+                    readonly maximum: 1800000;
+                };
+            };
+        };
+        readonly mcpTitle: "Run a Xeer project's tests";
+        readonly mcpDescription: string;
+        readonly cli: true;
+        readonly mcpTool: "xeer_test";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "new";
+    readonly command: readonly ["new"];
+    readonly summary: "Create a new project from a supported scaffold.";
+    readonly usage: readonly ["new <directory> [--template {{templates}}] [--json]"];
+    readonly helpOrder: 30;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["write-source"];
+    readonly idempotent: false;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly directory: {
+                    readonly type: "string";
+                    readonly description: "Target directory, relative to the server root. Must be empty or absent.";
+                };
+                readonly template: {
+                    readonly description: "Which scaffold to write. Defaults to notes.";
+                    readonly type: "string";
+                    readonly enum: readonly ["notes", "todo", "blog", "personal-site"];
+                };
+            };
+            readonly required: readonly ["directory"];
+        };
+        readonly mcpTitle: "Scaffold a Xeer project";
+        readonly mcpDescription: string;
+        readonly cli: true;
+        readonly mcpTool: "xeer_new";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "agent.setup";
+    readonly command: readonly ["agent", "setup"];
+    readonly summary: "Install or verify project-confined agent adapters.";
+    readonly usage: readonly ["agent setup [directory] [--target auto|agents|claude|codex|cursor|vscode|mcp] [--check] [--json]"];
+    readonly helpOrder: 35;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-source", "write-source"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "agent.context";
+    readonly command: readonly ["agent", "context"];
+    readonly summary: "Read normalized project facts, operations, diagnostics, tests, and safe next actions.";
+    readonly usage: readonly ["agent context [directory] [--json]"];
+    readonly helpOrder: 34;
+    readonly outputProtocol: "xeer.agent-context.v0";
+    readonly effects: readonly ["read-source"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpTool: "xeer_agent_context";
+        readonly mcpProfiles: readonly ["author", "operator"];
+        readonly mcpTitle: "Read normalized Xeer project context";
+        readonly mcpDescription: "Read the bounded, deterministic, versioned project context without writing generated files. Returns normalized manifest facts, source zones, operations, diagnostics, tests, safe next actions, resources, and a stable content hash.";
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly directory: {
+                    readonly description: "Project directory. Relative paths resolve against the server root; defaults to it.";
+                    readonly type: "string";
+                };
+            };
+        };
+    };
+}, {
+    readonly id: "docs.search";
+    readonly command: readonly ["docs", "search"];
+    readonly summary: "Search the installed-version Xeer documentation index.";
+    readonly usage: readonly ["docs search <query> [--limit <n>] [--json]"];
+    readonly helpOrder: 36;
+    readonly outputProtocol: "xeer.docs-search.v0";
+    readonly effects: readonly [];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "none";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpTool: "xeer_docs_search";
+        readonly mcpProfiles: readonly ["author", "operator"];
+        readonly mcpTitle: "Search installed Xeer documentation";
+        readonly mcpDescription: "Run deterministic lexical search over the compact index bundled with this exact framework version. Returns matching resource URIs and content hashes; read the selected xeer://docs/<path> resource on demand.";
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly query: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 500;
+                    readonly description: "Terms or phrase to search for.";
+                };
+                readonly limit: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly maximum: 20;
+                    readonly default: 5;
+                    readonly description: "Maximum result count.";
+                };
+            };
+            readonly required: readonly ["query"];
+        };
+    };
+}, {
+    readonly id: "doctor";
+    readonly command: readonly ["doctor"];
+    readonly summary: "Diagnose the toolchain and generated project state.";
+    readonly usage: readonly ["doctor [directory] [--json]"];
+    readonly helpOrder: 20;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-source", "write-generated"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly directory: {
+                    readonly description: "Project directory. Relative paths resolve against the server root; defaults to it.";
+                    readonly type: "string";
+                };
+            };
+        };
+        readonly mcpTitle: "Diagnose the Xeer toolchain";
+        readonly mcpDescription: string;
+        readonly cli: true;
+        readonly mcpTool: "xeer_doctor";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "deploy";
+    readonly command: readonly ["deploy"];
+    readonly summary: "Build and deploy an application artifact.";
+    readonly usage: readonly ["deploy [directory] [--environment prod|preview] [--control-url <url>] [--json]"];
+    readonly helpOrder: 50;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-source", "write-generated", "run-local", "network-read", "network-write", "production-change"];
+    readonly idempotent: false;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must establish the builder credential with xeer auth login."];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "MCP exposes a separate preview-only deploy action; direct production deploy stays CLI-only.";
+    };
+}, {
+    readonly id: "promote";
+    readonly command: readonly ["promote"];
+    readonly summary: "Promote a preview artifact to production.";
+    readonly usage: readonly [string];
+    readonly helpOrder: 80;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "network-write", "production-change"];
+    readonly idempotent: false;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["The preview artifact must be reviewed before production promotion."];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "MCP promotion is a separate action available only when the server starts in operator profile.";
+    };
+}, {
+    readonly id: "deploy.preview";
+    readonly command: readonly ["deploy"];
+    readonly summary: "Build and deploy an artifact to preview only.";
+    readonly usage: readonly [];
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-source", "write-generated", "run-local", "network-read", "network-write"];
+    readonly idempotent: false;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must establish the builder credential with xeer auth login."];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly directory: {
+                    readonly description: "Project directory. Relative paths resolve against the server root; defaults to it.";
+                    readonly type: "string";
+                };
+                readonly controlUrl: {
+                    readonly description: string;
+                    readonly type: "string";
+                };
+            };
+        };
+        readonly mcpTitle: "Deploy a Xeer preview";
+        readonly mcpDescription: string;
+        readonly cli: false;
+        readonly mcpTool: "xeer_deploy_preview";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "promote.operator";
+    readonly command: readonly ["promote"];
+    readonly summary: "Promote an exact review receipt in operator mode.";
+    readonly usage: readonly [];
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "network-write", "production-change"];
+    readonly idempotent: false;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must review the exact artifact and start xeer-mcp with XEER_MCP_PROFILE=operator."];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly directory: {
+                    readonly description: "Project directory. Relative paths resolve against the server root; defaults to it.";
+                    readonly type: "string";
+                };
+                readonly receiptId: {
+                    readonly description: "Versioned receipt returned by the exact reviewed preview deployment.";
+                    readonly type: "string";
+                    readonly minLength: 19;
+                    readonly maxLength: 103;
+                    readonly pattern: "^review_[A-Za-z0-9_-]{12,96}$";
+                };
+                readonly controlUrl: {
+                    readonly description: "Allowed control-plane origin override.";
+                    readonly type: "string";
+                };
+            };
+            readonly required: readonly ["receiptId"];
+        };
+        readonly mcpTitle: "Promote an exact preview artifact (operator)";
+        readonly mcpDescription: string;
+        readonly cli: false;
+        readonly mcpTool: "xeer_promote";
+        readonly mcpProfiles: readonly ["operator"];
+    };
+}, {
+    readonly id: "auth.status";
+    readonly command: readonly ["auth", "status"];
+    readonly summary: "Report builder credential metadata.";
+    readonly usage: readonly ["auth status [--control-url <url>] [--json]"];
+    readonly helpOrder: 180;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "secret-metadata"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "none";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly controlUrl: {
+                    readonly description: "Allowed control-plane origin override.";
+                    readonly type: "string";
+                };
+            };
+        };
+        readonly mcpTitle: "Report builder sign-in status";
+        readonly mcpDescription: string;
+        readonly cli: true;
+        readonly mcpTool: "xeer_auth_status";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "inspect";
+    readonly command: readonly ["inspect"];
+    readonly summary: "Read a running application manifest.";
+    readonly usage: readonly ["inspect <local-url|app> [--environment prod|preview] [--control-url <url>] [--json]"];
+    readonly helpOrder: 230;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "read-state"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "app-or-url";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly previewUrl: {
+                    readonly type: "string";
+                    readonly description: string;
+                };
+                readonly view: {
+                    readonly default: "manifest";
+                    readonly type: "string";
+                    readonly enum: readonly ["manifest", "state", "logs", "export"];
+                };
+                readonly after: {
+                    readonly description: "Log cursor, for view: \"logs\".";
+                    readonly type: "string";
+                };
+            };
+            readonly required: readonly ["previewUrl"];
+        };
+        readonly mcpTitle: "Inspect a running preview";
+        readonly mcpDescription: string;
+        readonly cli: true;
+        readonly mcpTool: "xeer_inspect";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "dev.start";
+    readonly command: readonly ["dev"];
+    readonly summary: "Start a local development session.";
+    readonly usage: readonly ["dev [directory] [--host <host>] [--port <port>] [--json]"];
+    readonly helpOrder: 220;
+    readonly outputProtocol: "xeer.dev.v0";
+    readonly effects: readonly ["read-source", "write-generated", "run-local", "write-state"];
+    readonly idempotent: false;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly directory: {
+                    readonly description: "Project directory. Relative paths resolve against the server root; defaults to it.";
+                    readonly type: "string";
+                };
+                readonly host: {
+                    readonly description: "Defaults to 127.0.0.1.";
+                    readonly type: "string";
+                };
+                readonly port: {
+                    readonly description: "Defaults to 0 (OS-assigned).";
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly maximum: 65535;
+                };
+                readonly timeoutMilliseconds: {
+                    readonly type: "integer";
+                    readonly minimum: 1000;
+                    readonly maximum: 600000;
+                };
+            };
+        };
+        readonly mcpTitle: "Start a dev session";
+        readonly mcpDescription: string;
+        readonly cli: true;
+        readonly mcpTool: "xeer_dev_start";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "dev.status";
+    readonly command: readonly ["dev"];
+    readonly summary: "Read new events from a local development session.";
+    readonly usage: readonly [];
+    readonly outputProtocol: "xeer.dev.v0";
+    readonly effects: readonly [];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "none";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly sessionId: {
+                    readonly description: "Optional when only one session exists.";
+                    readonly type: "string";
+                };
+                readonly cursor: {
+                    readonly default: 0;
+                    readonly description: "Last seq you have already read.";
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly maximum: number;
+                };
+                readonly waitMilliseconds: {
+                    readonly default: 0;
+                    readonly description: "Wait up to this long for new events to arrive and settle.";
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly maximum: 600000;
+                };
+                readonly limit: {
+                    readonly default: 200;
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly maximum: 1000;
+                };
+            };
+        };
+        readonly mcpTitle: "Read new dev-session events";
+        readonly mcpDescription: string;
+        readonly cli: false;
+        readonly mcpTool: "xeer_dev_status";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "dev.stop";
+    readonly command: readonly ["dev"];
+    readonly summary: "Stop a local development session and release its lease.";
+    readonly usage: readonly [];
+    readonly outputProtocol: "xeer.dev.v0";
+    readonly effects: readonly ["run-local"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "none";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly sessionId: {
+                    readonly description: "Optional when only one session exists.";
+                    readonly type: "string";
+                };
+                readonly cursor: {
+                    readonly default: 0;
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly maximum: number;
+                };
+            };
+        };
+        readonly mcpTitle: "Stop a dev session";
+        readonly mcpDescription: string;
+        readonly cli: false;
+        readonly mcpTool: "xeer_dev_stop";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "diagnostics";
+    readonly command: readonly [];
+    readonly summary: "Read the generated diagnostic catalogue.";
+    readonly usage: readonly [];
+    readonly outputProtocol: "unversioned";
+    readonly effects: readonly [];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "none";
+    readonly surfaces: {
+        readonly mcpInputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly code: {
+                    readonly description: "An XE#### code, e.g. XE1202.";
+                    readonly type: "string";
+                };
+            };
+        };
+        readonly mcpTitle: "Look up Xeer diagnostic codes";
+        readonly mcpDescription: string;
+        readonly cli: false;
+        readonly mcpTool: "xeer_diagnostics";
+        readonly mcpProfiles: readonly ["author", "operator"];
+    };
+}, {
+    readonly id: "link";
+    readonly command: readonly ["link"];
+    readonly summary: "Link a checkout to an application the builder owns.";
+    readonly usage: readonly ["link [directory] [--app <appId>] [--new] [--control-url <url>] [--json]"];
+    readonly helpOrder: 60;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-source", "write-source", "network-read", "network-write"];
+    readonly idempotent: false;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must choose which hosted application this checkout controls."];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Human identity and project ownership decisions are not delegated through MCP.";
+    };
+}, {
+    readonly id: "deployments";
+    readonly command: readonly ["deployments"];
+    readonly summary: "List deployment history for an application.";
+    readonly usage: readonly ["deployments [app|directory] [--limit <n>] [--control-url <url>] [--json]"];
+    readonly helpOrder: 70;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "read-state", "secret-metadata"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must establish the builder credential with xeer auth login."];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "rollback";
+    readonly command: readonly ["rollback"];
+    readonly summary: "Redeploy a previously deployed artifact.";
+    readonly usage: readonly ["rollback [app|directory] <artifactId> [--environment prod|preview] [--control-url <url>] [--json]"];
+    readonly helpOrder: 90;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "network-write", "production-change"];
+    readonly idempotent: false;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must choose the artifact and deployment environment to restore."];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "disable";
+    readonly command: readonly ["disable"];
+    readonly summary: "Take an application offline without deleting its data.";
+    readonly usage: readonly ["disable [app|directory] [--control-url <url>] [--json]"];
+    readonly helpOrder: 100;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "network-write", "production-change"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must authorize taking the production application offline."];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "enable";
+    readonly command: readonly ["enable"];
+    readonly summary: "Restore a disabled application to service.";
+    readonly usage: readonly ["enable [app|directory] [--control-url <url>] [--json]"];
+    readonly helpOrder: 110;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "network-write", "production-change"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must authorize restoring the production application."];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "delete";
+    readonly command: readonly ["delete"];
+    readonly summary: "Permanently delete an application and all of its data.";
+    readonly usage: readonly ["delete [app|directory] --confirm <application> [--control-url <url>] [--json]"];
+    readonly helpOrder: 120;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "network-write", "write-state", "production-change"];
+    readonly idempotent: false;
+    readonly reversible: false;
+    readonly destructive: true;
+    readonly humanPrerequisites: readonly ["A human must provide the exact application name as irreversible confirmation."];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "domains.add";
+    readonly command: readonly ["domains", "add"];
+    readonly summary: "Attach a customer-owned hostname to an application.";
+    readonly usage: readonly ["domains add <hostname> [app|directory] [--control-url <url>] [--json]"];
+    readonly helpOrder: 125;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "network-write", "production-change"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must control the hostname DNS and authorize production routing."];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "domains.ls";
+    readonly command: readonly ["domains", "ls"];
+    readonly aliases: readonly [readonly ["domains", "list"]];
+    readonly summary: "List an application's platform and custom domains.";
+    readonly usage: readonly ["domains ls [app|directory] [--control-url <url>] [--json]"];
+    readonly helpOrder: 126;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "domains.status";
+    readonly command: readonly ["domains", "status"];
+    readonly summary: "Refresh hostname and certificate validation.";
+    readonly usage: readonly ["domains status <hostname> [app|directory] [--control-url <url>] [--json]"];
+    readonly helpOrder: 127;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "network-write", "production-change"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must control the hostname DNS and authorize activating production routing."];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "domains.remove";
+    readonly command: readonly ["domains", "remove"];
+    readonly aliases: readonly [readonly ["domains", "rm"]];
+    readonly summary: "Detach a custom hostname and delete its provider certificate.";
+    readonly usage: readonly ["domains remove <hostname> [app|directory] [--control-url <url>] [--json]"];
+    readonly helpOrder: 128;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "network-write", "production-change"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: true;
+    readonly humanPrerequisites: readonly ["A human must authorize removing production routing for the hostname."];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "preview";
+    readonly command: readonly ["preview"];
+    readonly summary: "Run a verified artifact in a local preview server.";
+    readonly usage: readonly ["preview [directory] [--host <host>] [--port <port>] [--json]"];
+    readonly helpOrder: 240;
+    readonly outputProtocol: "xeer.dev.v0";
+    readonly effects: readonly ["read-source", "write-generated", "run-local", "write-state"];
+    readonly idempotent: false;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "state.read";
+    readonly command: readonly ["state"];
+    readonly summary: "Read record counts from a running application.";
+    readonly usage: readonly ["state <local-url|app> [--environment prod|preview] [--control-url <url>] [--json]"];
+    readonly helpOrder: 260;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "read-state"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "app-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "state.reset";
+    readonly command: readonly ["state", "reset"];
+    readonly summary: "Permanently reset local environment state.";
+    readonly usage: readonly ["state reset [directory] --state <dev|preview|test> --confirm <application> [--json]"];
+    readonly helpOrder: 270;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-source", "write-state"];
+    readonly idempotent: false;
+    readonly reversible: false;
+    readonly destructive: true;
+    readonly humanPrerequisites: readonly ["A human must provide the exact application name as destructive confirmation."];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Destructive state replacement requires an explicit CLI invocation.";
+    };
+}, {
+    readonly id: "logs";
+    readonly command: readonly ["logs"];
+    readonly summary: "Read the bounded log ring of a running application.";
+    readonly usage: readonly ["logs <local-url|app> [--environment prod|preview] [--after <cursor>] [--control-url <url>] [--json]"];
+    readonly helpOrder: 280;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "read-state"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "app-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "export";
+    readonly command: readonly ["export"];
+    readonly summary: "Export application state to a document.";
+    readonly usage: readonly ["export <local-url|app> [--environment prod|preview] [--out <file>] [--control-url <url>] [--json]", "export --state <dev|preview> [directory] [--out <file>] [--json]"];
+    readonly helpOrder: 290;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "read-state", "write-file"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "import";
+    readonly command: readonly ["import"];
+    readonly summary: "Replace local or preview state from an export document.";
+    readonly usage: readonly ["import <preview-url> <file> [--json]", "import --state <dev|preview> [directory] <file> [--json]"];
+    readonly helpOrder: 300;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-source", "network-write", "write-state"];
+    readonly idempotent: false;
+    readonly reversible: false;
+    readonly destructive: true;
+    readonly humanPrerequisites: readonly ["A human must choose the export document that replaces existing state."];
+    readonly pathPolicy: "project-or-url";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Destructive state replacement requires an explicit CLI invocation.";
+    };
+}, {
+    readonly id: "auth.login";
+    readonly command: readonly ["auth", "login"];
+    readonly summary: "Establish a human builder credential.";
+    readonly usage: readonly ["auth login [--control-url <url>] [--no-open] [--json]"];
+    readonly helpOrder: 170;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "network-write", "secret-write"];
+    readonly idempotent: false;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must approve the exact browser verification code."];
+    readonly pathPolicy: "none";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Human identity and project ownership decisions are not delegated through MCP.";
+    };
+}, {
+    readonly id: "auth.logout";
+    readonly command: readonly ["auth", "logout"];
+    readonly summary: "Remove the local builder credential.";
+    readonly usage: readonly ["auth logout [--control-url <url>] [--json]"];
+    readonly helpOrder: 190;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-write", "secret-write"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "none";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Human identity and project ownership decisions are not delegated through MCP.";
+    };
+}, {
+    readonly id: "auth.as";
+    readonly command: readonly ["auth", "as"];
+    readonly summary: "Select a deterministic local development persona.";
+    readonly usage: readonly ["auth as <alice|bob> [directory] [--workspace <id>]... [--json]"];
+    readonly helpOrder: 200;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["write-state"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "auth.clear";
+    readonly command: readonly ["auth", "clear"];
+    readonly summary: "Reset the local development persona.";
+    readonly usage: readonly ["auth clear [directory] [--json]"];
+    readonly helpOrder: 210;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["write-state"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "env.set";
+    readonly command: readonly ["env", "set"];
+    readonly summary: "Set an environment value or secret.";
+    readonly usage: readonly ["env set <NAME> [value] [--environment prod|preview|dev] [--dir <directory>] [--control-url <url>] [--json]"];
+    readonly helpOrder: 130;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-write", "write-state", "secret-write"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must deliberately provide the secret value."];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Secret values are intentionally unreachable through MCP; env pull returns plaintext.";
+    };
+}, {
+    readonly id: "env.ls";
+    readonly command: readonly ["env", "ls"];
+    readonly aliases: readonly [readonly ["env", "list"]];
+    readonly summary: "List environment variable names and metadata.";
+    readonly usage: readonly ["env ls [--environment prod|preview|dev] [--dir <directory>] [--control-url <url>] [--json]"];
+    readonly helpOrder: 140;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "secret-metadata"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Secret values are intentionally unreachable through MCP; env pull returns plaintext.";
+    };
+}, {
+    readonly id: "env.rm";
+    readonly command: readonly ["env", "rm"];
+    readonly aliases: readonly [readonly ["env", "remove"]];
+    readonly summary: "Remove an environment value or secret.";
+    readonly usage: readonly ["env rm <NAME> [--environment prod|preview|dev] [--dir <directory>] [--control-url <url>] [--json]"];
+    readonly helpOrder: 150;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-write", "write-state", "secret-write"];
+    readonly idempotent: true;
+    readonly reversible: false;
+    readonly destructive: true;
+    readonly humanPrerequisites: readonly ["A human must choose the secret name to remove."];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Secret values are intentionally unreachable through MCP; env pull returns plaintext.";
+    };
+}, {
+    readonly id: "env.pull";
+    readonly command: readonly ["env", "pull"];
+    readonly summary: "Write development secrets to a local file.";
+    readonly usage: readonly ["env pull [--environment prod|preview|dev] [--dir <directory>] [--control-url <url>] [--json]"];
+    readonly helpOrder: 160;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "write-file", "secret-read"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must authorize writing plaintext secrets to the checkout."];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Secret values are intentionally unreachable through MCP; env pull returns plaintext.";
+    };
+}, {
+    readonly id: "token.create";
+    readonly command: readonly ["token", "create"];
+    readonly summary: "Issue a service builder token.";
+    readonly usage: readonly ["token create --name <label> [--control-url <url>] [--json]"];
+    readonly hiddenFromHelp: true;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-write", "secret-write"];
+    readonly idempotent: false;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human service builder must store the one-time plaintext token securely."];
+    readonly pathPolicy: "none";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Service credential issuance and revocation are intentionally CLI-only.";
+    };
+}, {
+    readonly id: "token.ls";
+    readonly command: readonly ["token", "ls"];
+    readonly aliases: readonly [readonly ["token", "list"]];
+    readonly summary: "List service token metadata.";
+    readonly usage: readonly ["token ls [--control-url <url>] [--json]"];
+    readonly hiddenFromHelp: true;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-read", "secret-metadata"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "none";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Service credential issuance and revocation are intentionally CLI-only.";
+    };
+}, {
+    readonly id: "token.revoke";
+    readonly command: readonly ["token", "revoke"];
+    readonly summary: "Revoke a service builder token.";
+    readonly usage: readonly ["token revoke <tokenId> [--reason <why>] [--control-url <url>] [--json]"];
+    readonly hiddenFromHelp: true;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["network-write", "secret-write"];
+    readonly idempotent: true;
+    readonly reversible: false;
+    readonly destructive: true;
+    readonly humanPrerequisites: readonly ["A human service builder must choose the credential to revoke."];
+    readonly pathPolicy: "none";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Service credential issuance and revocation are intentionally CLI-only.";
+    };
+}, {
+    readonly id: "actions";
+    readonly command: readonly ["actions"];
+    readonly summary: "Print the machine-readable action and safety catalogue.";
+    readonly usage: readonly ["actions [--json]"];
+    readonly helpOrder: 310;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly [];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "none";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "db.tables";
+    readonly command: readonly ["db", "tables"];
+    readonly summary: "List the tables of a running application database.";
+    readonly usage: readonly ["db tables [directory] [--state <dev|preview>] [--json]"];
+    readonly helpOrder: 320;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-state"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "db.schema";
+    readonly command: readonly ["db", "schema"];
+    readonly summary: "Print the declared schema of a running application database.";
+    readonly usage: readonly ["db schema [directory] [--state <dev|preview>] [--json]"];
+    readonly helpOrder: 330;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-state"];
+    readonly idempotent: true;
+    readonly reversible: true;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly [];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Not exposed through MCP v0; use the CLI deliberately.";
+    };
+}, {
+    readonly id: "db.exec";
+    readonly command: readonly ["db", "exec"];
+    readonly summary: "Run one SQL statement against a running application database.";
+    readonly usage: readonly ["db exec [directory] <sql> [--state <dev|preview>] [--write] [--json]"];
+    readonly helpOrder: 340;
+    readonly outputProtocol: "xeer.command.v0";
+    readonly effects: readonly ["read-state", "write-state"];
+    readonly idempotent: false;
+    readonly reversible: false;
+    readonly destructive: false;
+    readonly humanPrerequisites: readonly ["A human must pass --write before any statement that modifies rows."];
+    readonly pathPolicy: "project-relative";
+    readonly surfaces: {
+        readonly cli: true;
+        readonly mcpExclusion: "Destructive state replacement requires an explicit CLI invocation.";
+    };
+}];
+export type XeerRegisteredAction = (typeof actions)[number];
+export type XeerActionId = XeerRegisteredAction['id'];
+export type XeerCliActionId = Extract<XeerRegisteredAction, {
+    surfaces: {
+        cli: true;
+    };
+}>['id'];
+export type XeerMcpActionId = Extract<XeerRegisteredAction, {
+    surfaces: {
+        mcpTool: string;
+    };
+}>['id'];
+type ActionForId<Id extends XeerActionId> = Extract<XeerRegisteredAction, {
+    id: Id;
+}>;
+type McpSchemaForId<Id extends XeerActionId> = ActionForId<Id>['surfaces'] extends {
+    mcpInputSchema: infer Schema extends McpInputSchemaDefinition;
+} ? Schema : never;
+type McpPropertyValue<Property> = Property extends {
+    enum: readonly (infer Value)[];
+} ? Value : Property extends {
+    type: 'string';
+} ? string : Property extends {
+    type: 'integer' | 'number';
+} ? number : Property extends {
+    type: 'boolean';
+} ? boolean : never;
+type McpRequiredOutputKeys<Schema extends McpInputSchemaDefinition> = (Schema extends {
+    required: readonly (infer Key extends string)[];
+} ? Key : never) | {
+    [Key in keyof Schema['properties']]: Schema['properties'][Key] extends {
+        default: unknown;
+    } ? Key : never;
+}[keyof Schema['properties']];
+/** Parsed handler input for an MCP action, including values supplied by schema defaults. */
+export type McpInputForAction<Id extends XeerMcpActionId> = {
+    [Key in keyof McpSchemaForId<Id>['properties'] as Key extends McpRequiredOutputKeys<McpSchemaForId<Id>> ? Key : never]: McpPropertyValue<McpSchemaForId<Id>['properties'][Key]>;
+} & {
+    [Key in keyof McpSchemaForId<Id>['properties'] as Key extends McpRequiredOutputKeys<McpSchemaForId<Id>> ? never : Key]?: McpPropertyValue<McpSchemaForId<Id>['properties'][Key]>;
+};
+export declare const XEER_ACTIONS: readonly XeerActionDefinition[];
+export declare function actionDefinition(id: string): XeerActionDefinition | undefined;
+export declare function mcpActions(profile: XeerMcpProfile): XeerActionDefinition[];
+export declare function cliHelpActions(): XeerActionDefinition[];
+/**
+ * Extract the CLI option contract from the same usage strings that generate `xeer --help`.
+ * An option followed by a documented value token takes one; a closing bracket or end-of-line
+ * denotes a boolean flag. Keeping this derived means help, dispatch validation, and aliases cannot
+ * acquire separate hand-maintained allowlists.
+ */
+export declare function cliOptionDefinitions(action: XeerActionDefinition): XeerCliOptionDefinition[];
+/** Resolves canonical and alias command prefixes, preferring `state reset` over the `state` target action. */
+export declare function cliActionForTokens(tokens: readonly string[]): XeerActionDefinition | undefined;
+export declare function mcpAnnotations(action: XeerActionDefinition): McpActionAnnotations;
+/** Exact Draft-07 object the MCP SDK must advertise for a registered tool. */
+export declare function mcpInputJsonSchema(action: XeerActionDefinition): McpInputJsonSchema | undefined;
+export declare const ACTION_REFERENCE_START = "<!-- xeer-action-reference:start -->";
+export declare const ACTION_REFERENCE_END = "<!-- xeer-action-reference:end -->";
+export declare const ACTION_REFERENCE_TARGETS: readonly ["docs/AGENTS.md", "packages/website/content/guides/agents.md", ".agents/skills/xeer/SKILL.md", "packages/mcp/README.md", "packages/website/content/reference/cli.md"];
+/** One generated block is embedded in every agent-facing action-policy surface. */
+export declare function renderActionReference(): string;
+export {};