@xenosystem/agent-sdk 0.10.31 → 0.10.33

package/dist/index.d.cts

@@ -411,10 +411,42 @@ interface ToolPolicyProjection {
     approvalKey?: string;
     riskLevel?: "low" | "medium" | "high";
 }
+interface ToolAnnotationHints {
+    title?: string;
+    readOnlyHint?: boolean;
+    destructiveHint?: boolean;
+    idempotentHint?: boolean;
+    openWorldHint?: boolean;
+}
+interface ToolOrigin {
+    kind: "mcp";
+    server: string;
+    tool: string;
+}
+interface PermissionToolMetadata {
+    readOnly?: boolean;
+    annotations?: ToolAnnotationHints;
+    origin?: ToolOrigin;
+}
+interface PlanModeReadOnlyClaim {
+    toolName: string;
+    input: Record<string, unknown>;
+    source: "annotation" | "declaration";
+    origin?: ToolOrigin;
+    annotations?: ToolAnnotationHints;
+}
+interface PlanModeToolPolicy {
+    honourReadOnlyAnnotations?: boolean;
+    honourReadOnlyDeclarations?: boolean;
+    allowTools?: readonly string[];
+    validateReadOnlyClaim?: (claim: PlanModeReadOnlyClaim) => boolean | Promise<boolean>;
+}
 interface RegisteredTool {
     definition: ToolDefinition;
     execute: ToolExecutor;
     readOnly?: boolean;
+    annotations?: ToolAnnotationHints;
+    origin?: ToolOrigin;
     projectPolicyInput?: (input: Record<string, unknown>, context?: ToolPolicyProjectionContext) => ToolPolicyProjection | {
         error: ToolResult;
     };
@@ -2442,6 +2474,44 @@ declare class XenoBrowserControlPlaneAdapter implements XenoAutomationAdapter {
     private snapshotEvidence;
     private call;
 }
+type AgentChildOutcome = "completed" | "failed" | "timeout" | "cancelled" | "incomplete";
+type AgentChildKind = "dispatch" | "branch";
+interface AgentChildTokenUsage {
+    input: number;
+    output: number;
+    total: number;
+}
+interface AgentChildInfo {
+    id: string;
+    kind: AgentChildKind;
+    label?: string;
+    promptPreview: string;
+    startedAt: number;
+}
+interface AgentChildSettlement extends AgentChildInfo {
+    outcome: AgentChildOutcome;
+    durationMs: number;
+    tokenUsage?: AgentChildTokenUsage;
+    reason?: string;
+}
+interface AgentChildController {
+    list(): AgentChildInfo[];
+    cancel(id: string, reason?: string): boolean;
+    cancelAll(reason?: string): number;
+    onSettled(listener: (settlement: AgentChildSettlement) => void): () => void;
+}
+interface AgentChildRegistration {
+    readonly id: string;
+    readonly cancelRequested: boolean;
+    readonly cancelReason: string | undefined;
+    settle(result: {
+        outcome: AgentChildOutcome;
+        tokenUsage?: AgentChildTokenUsage;
+        reason?: string;
+    }): void;
+}
+declare function createAgentChildController(): AgentChildController;
+declare function registerAgentChild(controller: AgentChildController, info: Omit<AgentChildInfo, "startedAt">, cancel: (reason?: string) => void): AgentChildRegistration;
 interface MemoryFile {
     level: MemoryLevel;
     path: string;
@@ -2595,9 +2665,21 @@ interface DispatchAgentRequest {
     prompt: string;
     timeoutMs?: number;
     signal?: AbortSignal;
+    dispatchId?: string;
+}
+interface DispatchAgentTermination {
+    status: "completed" | "incomplete" | "suspended" | "interrupted" | "error";
+    reason: string;
+    message?: string;
 }
 interface DispatchAgentResponse {
     output: string;
+    termination?: DispatchAgentTermination;
+    tokenUsage?: {
+        input: number;
+        output: number;
+        total: number;
+    };
 }
 type DispatchAgentHandler = (request: DispatchAgentRequest) => Promise<DispatchAgentResponse>;
 interface FileObservation {
@@ -2681,6 +2763,7 @@ interface DefaultToolRegistryOptions {
     getOwnerSessionId?: () => string | undefined;
     askUser?: AskUserHandler;
     dispatchAgent?: DispatchAgentHandler;
+    childController?: AgentChildController;
     memoryManager?: MemoryManager;
     webSearchApiKey?: string;
     webContext?: WebContextToolOptions;
@@ -3684,6 +3767,39 @@ declare class XenoPageStore {
     }>>>;
     private toPublished;
 }
+declare const XENO_PROCESS_TREE_KILL_TIMEOUT_MS = 5000;
+type XenoProcessTreeKillTool = "taskkill" | "powershell";
+type XenoProcessTreeKillReason = "terminated" | "not-running" | "timeout" | "spawn-error" | "failed";
+interface XenoProcessTreeKillResult {
+    terminated: boolean;
+    reason: XenoProcessTreeKillReason;
+    tool: XenoProcessTreeKillTool;
+    exitCode: number | null;
+    timeoutMs: number;
+    detail?: string;
+}
+interface XenoBoundedProcessOutcome {
+    status: number | null;
+    timedOut: boolean;
+    error?: string;
+}
+type XenoBoundedProcessRunnerSync = (file: string, args: readonly string[], timeoutMs: number) => XenoBoundedProcessOutcome;
+type XenoBoundedProcessRunner = (file: string, args: readonly string[], timeoutMs: number) => Promise<XenoBoundedProcessOutcome>;
+interface XenoProcessTreeKillOptions {
+    timeoutMs?: number;
+}
+declare function classifyXenoProcessTreeKill(tool: XenoProcessTreeKillTool, outcome: XenoBoundedProcessOutcome, timeoutMs: number): XenoProcessTreeKillResult;
+declare const runXenoBoundedProcessSync: XenoBoundedProcessRunnerSync;
+declare const runXenoBoundedProcess: XenoBoundedProcessRunner;
+declare function killWindowsProcessTreeSync(pid: number, options?: XenoProcessTreeKillOptions & {
+    run?: XenoBoundedProcessRunnerSync;
+}): XenoProcessTreeKillResult;
+declare function killWindowsProcessTree(pid: number, options?: XenoProcessTreeKillOptions & {
+    run?: XenoBoundedProcessRunner;
+}): Promise<XenoProcessTreeKillResult>;
+declare function runXenoProcessTreeKillHelper(tool: XenoProcessTreeKillTool, file: string, args: readonly string[], options?: XenoProcessTreeKillOptions & {
+    run?: XenoBoundedProcessRunner;
+}): Promise<XenoProcessTreeKillResult>;
 type HookEventName = "SessionStart" | "UserPromptSubmit" | "PermissionRequest" | "PreToolUse" | "PostToolUse" | "PreCompact" | "PostCompact" | "Stop" | "StopFailure" | "SubagentStart" | "SubagentStop";
 type HookPermissionMode = AgentPermissionMode;
 interface HookInputBase {
@@ -3785,6 +3901,7 @@ interface HookExecutionResult {
     timedOut: boolean;
     durationMs: number;
     error?: string;
+    processTreeKill?: XenoProcessTreeKillResult;
 }
 interface HookRunResult {
     decision: HookDecision;
@@ -3799,6 +3916,7 @@ interface HookRuntimeOptions {
     permissionProfile?: PermissionProfile;
     promptExecutor?: HookModelExecutor;
     agentExecutor?: HookModelExecutor;
+    processTreeKillRunner?: XenoBoundedProcessRunner;
 }
 declare function normalizeHookDecision(value: unknown): HookDecision;
 declare function buildHookEnvironment(input: HookInvocationInput, definition: CommandHookDefinition, sourceEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
@@ -4182,18 +4300,39 @@ interface PermissionCheckContext {
     ephemeralInputPreview?: string;
     onWaitStart?: () => void;
     onWaitEnd?: () => void;
+    tool?: PermissionToolMetadata;
+}
+type ArtifactToolActionClass = "read" | "local-write" | "outward";
+declare function classifyArtifactToolAction(input: Record<string, unknown>): ArtifactToolActionClass;
+interface DerivedPermissionEngineOptions {
+    mode?: "default" | "plan";
+    rules?: PermissionConfig["rules"];
 }
 declare class PermissionEngine {
-    private config;
+    protected config: PermissionConfig;
     private workingDirectory;
     private sessionAllowed;
     private sessionAllowedDirectories;
     private persistentAllowed;
     private persistentAllowedDirectories;
-    private promptFn?;
-    private decisionHook?;
+    protected promptFn?: PermissionPromptFn;
+    protected decisionHook?: PermissionDecisionHook;
+    protected planModeToolPolicy?: PlanModeToolPolicy;
     constructor(config?: Partial<PermissionConfig>, promptFn?: PermissionPromptFn, decisionHook?: PermissionDecisionHook);
     fork(promptFn?: PermissionPromptFn | undefined): PermissionEngine;
+    setPlanModeToolPolicy(policy: PlanModeToolPolicy | undefined): void;
+    get planModePolicy(): PlanModeToolPolicy | undefined;
+    deriveChild(options?: DerivedPermissionEngineOptions): PermissionEngine;
+    protected planModeVerdict(toolName: string, canonicalToolName: string, input: Record<string, unknown>, tool: PermissionToolMetadata | undefined): Promise<{
+        kind: "refuse";
+        reason: string;
+    } | {
+        kind: "admit";
+        reason: string;
+    } | {
+        kind: "defer";
+    }>;
+    private planModeReadOnlyAdmission;
     get mode(): PermissionConfig["mode"];
     setMode(mode: PermissionConfig["mode"]): void;
     setWorkingDirectory(cwd: string): void;
@@ -4206,7 +4345,10 @@ declare class PermissionEngine {
         reason: string;
     }>;
     private checkElevatedBash;
-    private finalizeDecision;
+    protected finalizeDecision(toolName: string, input: Record<string, unknown>, allowed: boolean, reason: string, traceId?: string, requesterLabel?: string): Promise<{
+        allowed: boolean;
+        reason: string;
+    }>;
     classifyAutoPermission(toolName: string, input: Record<string, unknown>): AutoPermissionDecision;
     private contentDigest;
     private bashScopeSuffix;
@@ -4220,7 +4362,7 @@ declare class PermissionEngine {
     private promptUser;
     private getToolDetail;
     private getCommandPrefix;
-    private matchesRule;
+    protected matchesRule(ruleTool: string, pattern: string | undefined, toolName: string, input: Record<string, unknown>): boolean;
     private matchesBashPattern;
     private matchesWildcard;
     private isCredentialLikePath;
@@ -5060,6 +5202,7 @@ interface UnifiedExecProcess {
     outputBytes: number;
     processTreeAdapter?: ProcessTreeAdapter;
     processTreeCleanupVerified?: boolean;
+    processTreeKill?: XenoProcessTreeKillResult;
 }
 interface UnifiedExecOutput {
     process: UnifiedExecProcess;
@@ -5131,6 +5274,7 @@ interface UnifiedExecManagerOptions {
     maxProcesses?: number;
     maxPtyProcesses?: number;
     registerCleanup?: boolean;
+    processTreeKillRunner?: XenoBoundedProcessRunner;
 }
 declare class UnifiedExecError extends Error {
     readonly code: "PTY_UNAVAILABLE" | "PROCESS_LIMIT" | "INVALID_SIZE" | "SPAWN_ERROR" | "INVOCATION_UNSUPPORTED";
@@ -5143,6 +5287,7 @@ declare class UnifiedExecManager {
     private readonly maxPtyProcesses;
     private ptyAdapter?;
     private disposeShutdown?;
+    private readonly processTreeKillRunner?;
     constructor(options?: UnifiedExecManagerOptions);
     registerPtyAdapter(adapter: XenoPtyAdapter): () => void;
     getPtyCapability(): {
@@ -5545,6 +5690,7 @@ interface AgentLoopConfig {
     maxIterations: number;
     reserveFinalSynthesisTurn?: boolean;
     turnTokenBudget?: number;
+    continuationCheckpoints?: boolean;
     systemPrompt: string;
     requesterLabel?: string;
     ownerSessionId?: string;
@@ -6175,6 +6321,8 @@ interface SubagentResult {
     output: string;
     tokensUsed: number;
     error?: string;
+    termination?: AgentChildOutcome;
+    terminationReason?: string;
 }
 interface DelegationLimits {
     maxBranches: number;
@@ -6248,6 +6396,16 @@ interface SubagentExecutionRequest {
 interface SubagentExecutionResponse {
     output: string;
     tokensUsed: number;
+    termination?: {
+        status: string;
+        reason: string;
+        message?: string;
+    };
+}
+declare class SubagentBranchCancelledError extends Error {
+    readonly branchId: string;
+    readonly reason?: string | undefined;
+    constructor(branchId: string, reason?: string | undefined);
 }
 type SubagentExecuteFn = (request: SubagentExecutionRequest) => Promise<SubagentExecutionResponse>;
 interface SubagentWorkflowOptions {
@@ -6269,6 +6427,7 @@ interface ResolvedSubagentWorkflowAnswer {
     answer: string;
     failureReason?: string;
     firstError?: string;
+    incomplete?: boolean;
 }
 declare function coerceSubagentRole(value: string): SubagentRole | null;
 declare function parseSubagentRoleList(value: string): SubagentRole[] | undefined;
@@ -6289,9 +6448,12 @@ declare function summarizeSubagentResults(results: SubagentResult[]): {
     total: number;
     ok: number;
     errors: number;
+    cancelled: number;
+    incomplete: number;
     by_role: Record<string, {
         status: SubagentResult["status"];
         tokens_used: number;
+        termination?: SubagentResult["termination"];
     }>;
 };
 declare function resolveSubagentWorkflowAnswer(workflow: SubagentWorkflowResult): ResolvedSubagentWorkflowAnswer;
@@ -6941,6 +7103,7 @@ declare class ProtectedFileWriteError extends Error {
     constructor(receipt: ProtectedFileWriteReceipt);
 }
 type ProtectedFileWriter = (path: string, ciphertextEnvelope: string, ifAbsent: boolean) => ProtectedFileWriteReceipt;
+type ProtectedFileHelperRunner = (script: string, input: string, timeoutMs: number) => string;
 interface ProtectedStateStore {
     readonly kind: string;
     readonly available: boolean;
@@ -6996,6 +7159,7 @@ interface WindowsDpapiProtectedFileOptions extends WindowsDpapiProtectedStateOpt
     configDir?: string;
     hashKey?: (key: string) => string;
     writeCiphertext?: ProtectedFileWriter;
+    runProtectedFileHelper?: ProtectedFileHelperRunner;
 }
 interface CommandBackedProtectedStateOptions {
     kind: string;
@@ -7337,7 +7501,20 @@ interface BashToolEnvironmentOptions {
 }
 declare function createBashTool(runtime?: ToolRuntimeContext, sandbox?: AgentSandbox, environmentOptions?: BashToolEnvironmentOptions): RegisteredTool;
 declare const bashTool: RegisteredTool;
-declare function createDispatchAgentTool(runtime?: ToolRuntimeContext): RegisteredTool;
+declare const DISPATCH_AGENT_ERROR_CODES: {
+    readonly UNAVAILABLE: "DISPATCH_AGENT_UNAVAILABLE";
+    readonly NO_TIME_LEFT: "DISPATCH_AGENT_NO_TIME_LEFT";
+    readonly TIMEOUT: "DISPATCH_AGENT_TIMEOUT";
+    readonly CANCELLED: "DISPATCH_AGENT_CANCELLED";
+    readonly FAILED: "DISPATCH_AGENT_FAILED";
+    readonly INCOMPLETE: "DISPATCH_AGENT_INCOMPLETE";
+    readonly EMPTY_OUTPUT: "DISPATCH_AGENT_EMPTY_OUTPUT";
+};
+type DispatchAgentErrorCode = typeof DISPATCH_AGENT_ERROR_CODES[keyof typeof DISPATCH_AGENT_ERROR_CODES];
+interface CreateDispatchAgentToolOptions {
+    childController?: AgentChildController;
+}
+declare function createDispatchAgentTool(runtime?: ToolRuntimeContext, options?: CreateDispatchAgentToolOptions): RegisteredTool;
 declare const dispatchAgentTool: RegisteredTool;
 declare function createThinkTool(): RegisteredTool;
 declare const thinkTool: RegisteredTool;
@@ -7410,6 +7587,50 @@ declare class PersistentShellSession {
 declare function getPersistentShellSession(runtime: ToolRuntimeContext, env: NodeJS.ProcessEnv): PersistentShellSession;
 declare function resetPersistentShellSession(runtime: ToolRuntimeContext): Promise<void>;
 declare function resetAllPersistentShellSessions(): Promise<void>;
+declare const ENTER_PLAN_MODE_TOOL_NAME = "EnterPlanMode";
+declare const EXIT_PLAN_MODE_TOOL_NAME = "ExitPlanMode";
+type ExecutingPermissionMode = Exclude<PermissionConfig["mode"], "plan">;
+interface PlanModeEnterRequest {
+    reason: string;
+    signal?: AbortSignal;
+}
+type PlanModeEnterDecision = {
+    entered: true;
+    message?: string;
+} | {
+    entered: false;
+    reason?: string;
+};
+interface PlanReviewRequest {
+    plan: string;
+    signal?: AbortSignal;
+}
+type PlanReviewDecision = {
+    decision: "approve";
+    mode?: ExecutingPermissionMode;
+} | {
+    decision: "approve_with_edits";
+    plan: string;
+    mode?: ExecutingPermissionMode;
+} | {
+    decision: "reject";
+    feedback?: string;
+};
+interface PlanModeToolsOptions {
+    permissionEngine?: PermissionEngine;
+    fallbackMode?: ExecutingPermissionMode;
+    onEnter?: (request: PlanModeEnterRequest) => PlanModeEnterDecision | Promise<PlanModeEnterDecision>;
+    reviewPlan?: (request: PlanReviewRequest) => PlanReviewDecision | Promise<PlanReviewDecision>;
+}
+declare const MAX_PLAN_CHARS = 200000;
+declare function createPlanModeTools(options?: PlanModeToolsOptions): {
+    enterPlanMode: RegisteredTool;
+    exitPlanMode: RegisteredTool;
+};
+declare function registerPlanModeTools(registry: ToolRegistry, options?: PlanModeToolsOptions): {
+    enterPlanMode: RegisteredTool;
+    exitPlanMode: RegisteredTool;
+};
 declare function isQuestionTool(toolName: string): boolean;
 declare const INTERRUPTED_QUESTION_ERROR_CODE = "QUESTION_UNANSWERED";
 declare const UNANSWERED_QUESTION_PREFIX = "Unanswered question.";
@@ -10213,6 +10434,24 @@ interface XenoVerifiedHostedExecutionAdapterCertification {
 }
 declare function xenoHostedExecutionAdapterSigningPayload(certificate: Omit<XenoHostedExecutionAdapterCertification, "signature">): Buffer;
 declare function verifyXenoHostedExecutionAdapterCertification(certificate: XenoHostedExecutionAdapterCertification, options: XenoHostedExecutionAdapterVerificationOptions): XenoVerifiedHostedExecutionAdapterCertification;
+declare const XENO_SLASH_REFUSAL_NOTHING_SENT = "Nothing was sent to the model.";
+declare const XENO_UNSUPPORTED_SLASH_COMMAND_REASON = "unsupported_slash_command";
+declare const APP_SERVER_PROMPT_BEARING_PARAMS: Readonly<Record<string, string>>;
+declare function commandShapedSlashName(input: string): string | null;
+interface XenoSlashInputClassification {
+    kind: "prompt" | "command";
+    command?: string;
+}
+declare function classifyXenoSlashInput(input: string): XenoSlashInputClassification;
+interface XenoSlashGuardOptions {
+    isKnownCommand?: (command: string) => boolean;
+}
+interface AppServerSlashCommandRefusal {
+    command: string;
+    field: string;
+    message: string;
+}
+declare function appServerSlashCommandRefusal(method: string, params: unknown, options?: XenoSlashGuardOptions): AppServerSlashCommandRefusal | null;
 declare const XENO_HOSTED_EXECUTION_PROTOCOL_VERSION: 2;
 declare const XENO_HOSTED_EXECUTION_TOOL_NAMES: readonly [
     "Read",
@@ -10268,10 +10507,27 @@ declare function createXenoHostedExecutionBoundaryReceipt(options: {
     environment: XenoHostedEnvironmentManifest;
     authority: XenoHostedAuthority;
 }): XenoHostedExecutionBoundaryReceipt;
-declare function verifyXenoHostedExecutionJob(value: unknown): {
+interface XenoHostedSlashCommandRefusal {
+    reason: typeof XENO_UNSUPPORTED_SLASH_COMMAND_REASON;
+    command: string;
+    field: "prompt";
+    message: string;
+}
+interface XenoHostedExecutionJobVerification {
     valid: boolean;
     errors: string[];
-};
+    slashCommand?: XenoHostedSlashCommandRefusal;
+}
+declare class XenoHostedExecutionJobError extends Error {
+    readonly code: "INVALID_HOSTED_EXECUTION_JOB";
+    readonly errors: readonly string[];
+    readonly reason?: typeof XENO_UNSUPPORTED_SLASH_COMMAND_REASON;
+    readonly command?: string;
+    readonly field?: "prompt";
+    constructor(verification: XenoHostedExecutionJobVerification);
+}
+declare function hostedSlashCommandRefusal(prompt: unknown): XenoHostedSlashCommandRefusal | null;
+declare function verifyXenoHostedExecutionJob(value: unknown): XenoHostedExecutionJobVerification;
 declare function assertValidXenoHostedExecutionJob(value: unknown): asserts value is XenoHostedExecutionJob;
 declare const XENO_HOSTED_CONTROL_SCHEMA_VERSION: 1;
 declare const XENO_HOSTED_RESULT_SCHEMA_VERSION: 1;
@@ -10732,6 +10988,7 @@ interface CreateXenoAgentOptions {
     queryHardTimeoutMs?: number;
     reserveFinalSynthesisTurn?: boolean;
     turnTokenBudget?: number;
+    continuationCheckpoints?: boolean;
     requesterLabel?: string;
     ownerSessionId?: string;
     getOwnerSessionId?: AgentLoopConfig["getOwnerSessionId"];
@@ -10747,6 +11004,7 @@ interface CreateXenoAgentOptions {
     toolRegistry?: ToolRegistry;
     askUser?: AskUserHandler;
     dispatchAgent?: DispatchAgentHandler;
+    childController?: AgentChildController;
     webSearchApiKey?: string;
     validateToolInputs?: boolean;
     sandbox?: AgentSandbox;
@@ -11062,24 +11320,6 @@ declare class AppServerProtocolError extends Error {
     constructor(machineCode: string, message: string, rpcCode: number, retryable?: boolean, category?: string, details?: Record<string, unknown> | undefined);
     toData(): AppServerProtocolErrorData;
 }
-declare const XENO_SLASH_REFUSAL_NOTHING_SENT = "Nothing was sent to the model.";
-declare const XENO_UNSUPPORTED_SLASH_COMMAND_REASON = "unsupported_slash_command";
-declare const APP_SERVER_PROMPT_BEARING_PARAMS: Readonly<Record<string, string>>;
-declare function commandShapedSlashName(input: string): string | null;
-interface XenoSlashInputClassification {
-    kind: "prompt" | "command";
-    command?: string;
-}
-declare function classifyXenoSlashInput(input: string): XenoSlashInputClassification;
-interface XenoSlashGuardOptions {
-    isKnownCommand?: (command: string) => boolean;
-}
-interface AppServerSlashCommandRefusal {
-    command: string;
-    field: string;
-    message: string;
-}
-declare function appServerSlashCommandRefusal(method: string, params: unknown, options?: XenoSlashGuardOptions): AppServerSlashCommandRefusal | null;
 interface AppServerV2MethodMap {
     "execution.acquire": {
         params: {
@@ -12148,6 +12388,11 @@ interface TokenUsageTotals {
 interface DelegatedBranchAgent {
     lastTraceId: string | null;
     tokenUsage: TokenUsageTotals;
+    lastRunTermination?: {
+        status: string;
+        reason: string;
+        message?: string;
+    } | null;
     run(prompt: string): Promise<string>;
 }
 interface DelegatedBranchAgentCallbacks {
@@ -12190,6 +12435,7 @@ interface RunDelegatedXenoTurnOptions extends DelegatedBranchAgentCallbacks {
     rootTraceId?: string;
     skipAuditCompletion?: boolean;
     signal?: AbortSignal;
+    childController?: AgentChildController;
     createBranchAgent?: CreateDelegatedBranchAgent;
     acquireBranchAdmission?: (task: SubagentExecutionRequest) => Promise<DelegatedBranchAdmission>;
     onBranchStart?: (task: SubagentExecutionRequest) => void | Promise<void>;
@@ -12209,7 +12455,9 @@ interface DelegatedXenoTurnResult {
     tokenUsage: TokenUsageTotals;
     rootTraceId: string;
     selectedTraceId: string;
+    incomplete?: boolean;
 }
+declare function delegatedBranchOwnerSessionId(rootTraceId: string, taskId: string): string;
 declare function runDelegatedXenoTurn(options: RunDelegatedXenoTurnOptions): Promise<DelegatedXenoTurnResult>;
 interface ToolManifestEntry {
     name: string;
@@ -12472,6 +12720,7 @@ interface MCPTool {
     description: string;
     inputSchema: Record<string, unknown>;
     server: string;
+    annotations?: ToolAnnotationHints;
     _meta?: MCPAppExtensionMetadata;
     appResourceUri?: string;
     visibility: MCPAppVisibility[];
@@ -12568,6 +12817,7 @@ interface MCPToolsListResult {
         name: string;
         description?: string;
         inputSchema: Record<string, unknown>;
+        annotations?: Record<string, unknown>;
         _meta?: MCPAppExtensionMetadata;
     }>;
 }
@@ -12663,6 +12913,7 @@ interface MCPElicitationRequest {
     message: string;
     requestedSchema?: Record<string, unknown>;
     params: Record<string, unknown>;
+    signal?: AbortSignal;
 }
 interface MCPElicitationResponse {
     action: MCPElicitationAction;
@@ -12708,6 +12959,7 @@ interface ConnectConfiguredMCPServersResult {
         name: string;
         error: string;
     }>;
+    disconnected?: string[];
 }
 interface MCPServerPromptRegistration {
     name: string;
@@ -12739,6 +12991,29 @@ interface MCPServerModeOptions {
     toolMetadata?: Record<string, MCPAppExtensionMetadata>;
     appCapabilities?: MCPAppCapabilities | false;
 }
+declare const MCP_MAX_CATALOG_ENTRIES = 4096;
+type MCPConnectionErrorCode = "MCP_CONNECTION_CLOSED" | "MCP_TRANSPORT_FAILED" | "MCP_SERVER_NOT_READY" | "MCP_SERVER_NOT_FOUND";
+declare class MCPConnectionError extends Error {
+    readonly code: MCPConnectionErrorCode;
+    readonly serverName: string;
+    readonly details: {
+        method?: string;
+        status?: MCPServerState["status"];
+        cause?: unknown;
+    };
+    constructor(message: string, code: MCPConnectionErrorCode, serverName: string, details?: {
+        method?: string;
+        status?: MCPServerState["status"];
+        cause?: unknown;
+    });
+}
+type MCPCatalogErrorCode = "MCP_CATALOG_MALFORMED" | "MCP_CATALOG_TOO_LARGE";
+declare class MCPCatalogError extends Error {
+    readonly code: MCPCatalogErrorCode;
+    readonly serverName: string;
+    readonly method: string;
+    constructor(message: string, code: MCPCatalogErrorCode, serverName: string, method: string);
+}
 type MCPServerChangeReason = "connected" | "disconnected" | "tools_changed" | "prompts_changed" | "resources_changed" | "resource_updated" | "error";
 interface MCPServerChangeEvent {
     serverName: string;
@@ -12764,6 +13039,8 @@ declare class MCPManager {
     addServer(config: MCPServerConfig): Promise<void>;
     connectConfiguredServers(options: ConnectConfiguredMCPServersOptions): Promise<ConnectConfiguredMCPServersResult>;
     removeServer(name: string): void;
+    private dropEntry;
+    private rejectPendingFor;
     listTools(serverName?: string): MCPTool[];
     listAllTools(serverName?: string): MCPTool[];
     listAppTools(serverName?: string): MCPTool[];
@@ -12782,6 +13059,11 @@ declare class MCPManager {
     static loadConfiguredServers(cwd?: string): MCPConfiguredServer[];
     private createTransport;
     private discoverServerState;
+    private rediscover;
+    private resubscribe;
+    private runRefresh;
+    private fetchCatalog;
+    private isCurrentRefresh;
     private refreshTools;
     private refreshPrompts;
     private refreshResources;
@@ -12789,12 +13071,15 @@ declare class MCPManager {
     private getReadyServer;
     private sendRequest;
     private sendNotification;
+    private answer;
     private sendResponse;
     private sendError;
     private handleMessage;
     private handleRequest;
     private handleElicitationCreate;
     private handleNotification;
+    private failRefresh;
+    private settleCatalogFault;
     private resolveApprovalDecision;
     private emitServerStateChanged;
 }
@@ -12865,6 +13150,9 @@ declare class StdioTransport implements MCPTransportConnection {
     private onError;
     private onClose;
     private closed;
+    private exited;
+    private inputBroken;
+    private killTimer;
     constructor(process: ChildProcess, options?: {
         maxMessageChars?: number;
     });
@@ -12875,6 +13163,7 @@ declare class StdioTransport implements MCPTransportConnection {
     send(message: JsonRpcMessage): void;
     close(): void;
     get isAlive(): boolean;
+    private get hasExited();
     private setupListeners;
     private receive;
     private refuseOversized;
@@ -12971,11 +13260,16 @@ declare class StreamableHTTPTransport implements MCPTransportConnection {
     private receiveLoopActive;
     private reinitializePromise?;
     private challengeHeaders?;
+    private onSessionRenewed;
+    private onSessionLost;
     private readonly seenEventIds;
     constructor(url: string, options?: StreamableHTTPTransportOptions);
     setMessageHandler(handler: MessageHandler): void;
     setErrorHandler(handler: ErrorHandler): void;
     setCloseHandler(handler: CloseHandler): void;
+    setSessionRenewedHandler(handler: () => void): void;
+    setSessionLostHandler(handler: () => void): void;
+    private markSessionExpired;
     send(message: JsonRpcMessage): Promise<void>;
     close(): void;
     get isAlive(): boolean;
@@ -13133,6 +13427,12 @@ declare class MCPOAuthClient {
 type PersistentMcpScope = Exclude<MCPServerScope, "session">;
 declare function loadMcpConfigFile(configPath: string, scope?: PersistentMcpScope): MCPConfigFile;
 declare function saveMcpConfigFile(configPath: string, config: MCPConfigFile, scope?: PersistentMcpScope): void;
+interface MCPConfigSource {
+    scope: Exclude<MCPServerScope, "session">;
+    path: string;
+    state: "absent" | "readable" | "unreadable";
+}
+declare function inspectMcpConfigSources(cwd?: string): MCPConfigSource[];
 declare function loadConfiguredMcpServers(cwd?: string): MCPConfiguredServer[];
 declare function upsertMcpServerConfig(scope: PersistentMcpScope, cwd: string | undefined, config: MCPServerConfig): string;
 declare function removeMcpServerConfig(scope: PersistentMcpScope, cwd: string | undefined, name: string): string;
@@ -13156,9 +13456,10 @@ declare function getMcpToolName(serverName: string, toolName: string): string;
 declare function getMcpPromptToolName(serverName: string, promptName: string): string;
 declare function getMcpResourceToolName(serverName: string, resource: MCPResource): string;
 declare function mcpInputSchemaToToolSchema(inputSchema: Record<string, unknown> | undefined): ToolDefinition["input_schema"];
-declare function createMcpRegisteredTool(manager: MCPManager, tool: MCPTool): RegisteredTool;
-declare function createMcpPromptRegisteredTool(manager: MCPManager, prompt: MCPPrompt): RegisteredTool;
-declare function createMcpResourceRegisteredTool(manager: MCPManager, resource: MCPResource): RegisteredTool;
+declare function getMcpDefinitionFingerprint(kind: MCPRegistryEntryKind, entry: MCPTool | MCPPrompt | MCPResource): string;
+declare function createMcpRegisteredTool(manager: MCPManager, tool: MCPTool, registryName?: string): RegisteredTool;
+declare function createMcpPromptRegisteredTool(manager: MCPManager, prompt: MCPPrompt, registryName?: string): RegisteredTool;
+declare function createMcpResourceRegisteredTool(manager: MCPManager, resource: MCPResource, registryName?: string): RegisteredTool;
 declare function syncMcpToolsToRegistry(manager: MCPManager, registry: ToolRegistry, previouslyRegistered?: string[], filter?: MCPRegistryFilter): string[];
 declare const XENO_PLUGIN_LOCK_SCHEMA_VERSION: 1;
 declare const XENO_PLUGIN_SIGNATURE_SCHEMA_VERSION: 1;
@@ -14676,4 +14977,4 @@ declare class AgentEvaluator {
     clearResults(): void;
     get resultCount(): number;
 }
-export { type A2AMessage, type A2AMessageType, AGENT_DAEMON_PROTOCOL_VERSION, AGENT_EFFORT_LEVELS, AGENT_PERMISSION_MODES, AGENT_PROFILE_EXTERNAL_ACTIONS, APP_SERVER_PROMPT_BEARING_PARAMS, ARCHITECT_CAPABILITIES, ARCHITECT_TOOL_NAMES, type ActiveLayerInfo, type AddXenoArtifactCommentRequest, type AgentArtifact, type AgentCapabilities, type AgentCard, AgentDaemonClient, type AgentDaemonError, type AgentDaemonHandler, type AgentDaemonRequest, type AgentDaemonResponse, AgentDaemonServer, type AgentDaemonTransport, AgentDebugger, type AgentDefinition, type AgentDefinitionBudget, type AgentDefinitionIsolation, type AgentDefinitionIssue, AgentDefinitionLoader, type AgentDefinitionLoaderOptions, type AgentDefinitionMetadata, AgentDefinitionResolver, type AgentDefinitionScanResult, type AgentDefinitionScope, type AgentDefinitionShadowRef, type AgentEffortLevel, AgentEvaluator, AgentEventStore, type AgentHookDefinition, AgentHookRunner, AgentInterruptedError, type AgentIpcChannel, type AgentLoadSnapshot, AgentLoop, type AgentLoopConfig, type AgentLoopOptions, type AgentPermissionMode, type AgentProfileActionDecision, type AgentProfileCapabilities, type AgentProfileCapabilityBoundary, type AgentProfileCollaborationMode, type AgentProfileCompletionPolicy, type AgentProfileEvidenceKind, type AgentProfileExecutionPolicy, type AgentProfileExternalAction, type AgentProfileExternalActionPolicy, type AgentProfileIsolation, type AgentProfileKind, type AgentProfileMemoryPolicy, type AgentProfileMemoryScope, type AgentProfilePresentation, type AgentProfileSkillPolicy, type AgentProfileSoulMode, type AgentProfileV2, AgentProfileValidationError, AgentProtocol, AgentRegistry, type AgentRunAgentDefinitionRef, AgentRunController, type AgentRunControllerOptions, type AgentRunCreateInput, AgentRunError, type AgentRunEvent, type AgentRunListOptions, type AgentRunOptions, type AgentRunRecord, type AgentRunSpawnResult, type AgentRunStatus, AgentRunStore, type AgentRunTermination, type AgentRunTerminationReason, type AgentRunTerminationStatus, type AgentRunUsage, type AgentSandbox, type AgentSelectionStrategy, type AgentSessionHostBindingV1, type AgentStreamCallbacks, type AgentTask, type AgentTaskHandler, type AgentTaskResult, type AgentTaskStatus, type AgentTeam, type AgentToAppChannel, type AgentToAppMessages, type AgentToolPolicy, type AnalysisResult, type ApiMessage, type AppAgentBaseOptions, AppAgentFactory, type AppAgentResult, type AppContext, AppContextInjector, AppContextManager, type AppContextProvider, type AppId, type AppServerDestinationExpectation, type AppServerEventV2, type AppServerExecutionIdentity, type AppServerExecutionLeaseV2, type AppServerHandoffOptions, type AppServerInitializeParamsV2, type AppServerInitializeResultV2, type AppServerIntegrationMetadataV2, type AppServerPermissionRequestV2, type AppServerPrincipalV2, AppServerProtocolError, type AppServerProtocolErrorData, AppServerRemoteError, type AppServerRequestContext, type AppServerSlashCommandRefusal, type AppServerSourcePreparation, type AppServerSubscriptionSnapshotV2, type AppServerThreadStatusV2, type AppServerThreadV2, type AppServerTurnRunnerContextV2, type AppServerTurnRunnerV2, type AppServerTurnStatusV2, type AppServerTurnV2, type AppServerV2ClientTransport, type AppServerV2MethodMap, type AppServerV2Options, type AppToAgentChannel, type AppToAgentMessages, type AppType, type ArchitectAgentOptions, type ArchitectToolAdapter, type AskUserHandler, type AskUserRequest, type AskUserResponse, type AtomicMessageGroup, type AudioProjectInfo, type AudioStemSeparationResult, type AudioToolAdapter, type AudioTrackType, type AudioTranscriptionResult, type AudioTranscriptionSegment, type AuditDecision, type AuditEvent, AuditLogger, type AuditReplayReport, type AuditReplayStep, type AuditRiskLevel, type AuditStatus, type AuditTraceGapEntry, type AuditTraceReport, type AuditTraceSummary, type AuditTraceTimelineEntry, type AuditTraceToolSummary, type AugmentContextOptions, type AuthorizedShellExecution, AutoCheckpointHandler, AutoMemory, type AutoMemoryContext, type AutoMemoryTrigger, AutoPermissionClassifier, type AutoPermissionDecision, BUILT_IN_XENO_PROVIDER_PRESETS, type BackgroundOwnerCleanupResult, type BackgroundOwnerCleanupToken, BackgroundProcessManager, type BackgroundTask, type BaseHookDefinition, type BenchBashMiddlewareOptions, type BlockContent, type BlockType, type BoundedShellOutput, type BreakpointCallback, type BuildResult, type BuildXenoSecureExecutionContractOptions, COMPAT_TOOL_ALIASES, CONFIG_VERSION, type CanonicalSecurityPath, type CanvasSize, type CapabilityLeaseCommand, type CapabilityLeasePersistence, type CapabilityLeaseTransaction, type CapabilityMutationAck, type CapabilityMutationReceipt, type CellRangeData, type ChartConfig, type ChatCompletionChunk, type ChatCompletionRequest, type ChatCompletionResponse, type ChatMessage, type ChatParams, type ChatResponse, type CheckpointData, type CheckpointInfo, CheckpointManager, type CheckpointTrigger, type ClaimXenoHandoffInput, type ClashResult, type CliAutomationAuditEvent, type CliAutomationAuditLoggerPort, type CliAutomationEnvironment, type CliAutomationStatusReport, type CliAutomationSurfaceStatus, CliGovernedAutomationRuntime, type ClipContext, type CodeApplyOptions, type CodeApplyResult, type CodeValidationIssue, type CodeValidationResult, CodeValidator, type CodingBenchmarkAssessment, type CodingBenchmarkMeasurement, type CodingBenchmarkOptions, type CodingBenchmarkReport, type CodingBenchmarkThreshold, type CommandBackedProtectedStateOptions, type CommandHookDefinition, CommandHookRunner, type CompactionRecord, type CompileAgentProfileOptions, type CompiledAgentProfile, type CompiledJsonSchema, type CompletionDecision, type CompletionGuard, type CompletionGuardContext, type CompletionGuardDecision, type CompletionGuardEvaluationContext, CompletionGuardRegistry, type CompletionGuardResult, type CompletionGuardResultObject, type CompletionGuardStopReason, type CompletionGuardToolPolicy, type CompletionGuardToolPolicyMode, type CompletionGuardTurnStats, type CompletionGuardVeto, type ComponentData, type CompressionLLMFn, type CompressionStats, type ConfigProfile, type ConnectConfiguredMCPServersOptions, type ConnectConfiguredMCPServersResult, type ContainedProcessSpec, type ContainmentAdapterIdentity, ContainmentApprovalError, type ContainmentCertificationBinding, ContainmentCertificationError, type ContainmentConformanceCheck, type ContentBlock, type ContextCompressedData, ContextManager, type ContextManagerConfig, type ContextSection, type ContextSource, type ControlPlaneLockHandle, type ControlPlaneLockRecord, ConversationStore, type CreateAuditBackedPermissionEngineOptions, type CreateCliGovernedAutomationRuntimeOptions, type CreateDelegatedBranchAgent, type CreateDelegatedBranchAgentOptions, type CreateDelegatedXenoAgentOptions, type CreateXenoAgentOptions, type CreateXenoAgentResult, type CreateXenoGoalInput, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHandoffInput, type CreateXenoHandoffOptions, type CreateXenoHostGovernedAutomationRuntimeOptions, type CreateXenoShareOptions, type CreateXenoSkillToolOptions, type CreateXenoSourceResearchReportInput, type CrossAppHandler, type CrossAppMessage, CrossAppRouter, CrossAppRouterError, type CrossAppRouterOptions, DEFAULT_API_KEY, DEFAULT_IMAGE_MODEL, DEFAULT_MEMORY_BUDGETS, DEFAULT_MODEL, DEFAULT_PROMPT_SECTIONS_TOKEN_BUDGET, DEFAULT_PROTECTED_STATE_KEY_NAME, DEFAULT_PROTECTED_STATE_SERVICE, DEFAULT_SUBAGENT_BRANCH_POLICY, DEFAULT_SUBAGENT_REMOTE_MCP_BY_ROLE, DEFAULT_SUBAGENT_ROLES, DEFAULT_SUBAGENT_ROLE_PRECEDENCE, DEFAULT_SUBAGENT_TEAM_PRESET, DIRECT_SHELL_CONTEXT_WARNING, DOCS_CAPABILITIES, DOCS_TOOL_NAMES, type DebugBreakpoint, type DebugSnapshot, type DebugStep, type DebugStepCallback, type DecideXenoArtifactRequest, type DefaultToolRegistryOptions, type DefaultWebContextRequestFactoryOptions, type DelegatedBranchAdmission, type DelegatedBranchAdmissionSettlement, type DelegatedBranchAgent, type DelegatedBranchAgentCallbacks, type DelegatedXenoTurnResult, type DelegationBudget, type DelegationLimits, type DelegationSummaryData, type DependencyEdge, type DescendantInstructionHint, type DirectEndpointPolicy, type DirectEndpointProfile, type DirectProviderCapabilityProfile, type DirectProviderConfig, type DirectProviderKind, type DirectShellMessageMetadata, type DirectShellResultRecord, type DispatchAgentHandler, type DispatchAgentRequest, type DispatchAgentResponse, type DocComment, type DocsAgentOptions, type DocsToolAdapter, type DocumentContext, type DualLLMMode, DualLLMProvider, type DualLLMProviderConfig, type DualLLMProviderLike, type DualLLMStatus, type DurableCapabilityLeaseOptions, DurableXenoCapabilityLeaseRegistry, DurableXenoCoordinationStore, ENGINE_CAPABILITIES, ENGINE_TOOL_NAMES, ElectronAgentBridge, type ElectronAgentConfig, type EngineAgentOptions, type EngineToolAdapter, type EntityInfo, type Episode, type EpisodeOutcome, EpisodicStore, type EpisodicStoreOptions, type ErrorData, type EvalReport, type EvalResult, type EvalRunOptions, type EvalTask, type ExchangeMCPOAuthCodeOptions, type ExecuteToolRequest, type ExecuteToolResult, type ExecuteXenoCoordinationActionInput, type ExecuteXenoCoordinationActionResult, ExecutionGovernance, type ExecutionGovernanceOptions, type ExecutionGovernanceSummary, type ExecutionMode, type ExecutionSecurityCapabilities, ExecutionSecurityError, type ExecutionSecurityErrorCode, type ExecutionSecurityLevel, type ExecutionTrustMode, type ExpectedOutputContract, type ExportableSoulSigner, type ExtendedAppType, FALLBACK_MODELS, type FailureCluster, type FileEntry, FileQuotaAuthority, type FileSnapshot, FileXenoArtifactRepository, type FileXenoArtifactRepositoryOptions, FileXenoProviderConnectionStore, type FileXenoProviderConnectionStoreOptions, FileXenoShareRegistry, type FileXenoShareRegistryOptions, type FilterConfig, type GovernanceExtensions, type GovernanceExtensionsOptions, HIGH_RISK_PERMISSIONS, type HarnessTask, type HarnessTaskStatus, type HarnessTaskUpdate, type HookConfig, type HookDecision, type HookDefinition, type HookEventName, type HookExecutionResult, type HookExecutionStatus, type HookInput, type HookInputBase, type HookInvocationInput, type HookModelExecutor, type HookPermissionMode, type HookRunResult, HookRunner, HookRuntime, type HookRuntimeOptions, type HttpHookDefinition, HttpHookRunner, IDENTITY_PATHS, INTERRUPTED_QUESTION_ERROR_CODE, type IdentityFrontmatter, type IdentityLayer, type IdentityLoadResult, IdentityLoader, type IdentityLoaderOptions, type IdentityPaths, IdentityResolver, type IdentitySource, type ImageContentBlock, type ImageDocumentInfo, type ImageGenerationConfig, type ImageLayerInfo, type ImageLayerType, type ImageToolAdapter, type ImageUrlBlock, InMemoryXenoArtifactRepository, type InMemoryXenoArtifactRepositoryOptions, InMemoryXenoCapabilityLeaseRegistry, type InMemoryXenoCapabilityLeaseRegistryOptions, InMemoryXenoTelemetryCollector, type InitializeSessionRuntimeOptions, type InspectSystemPromptOptions, type InstallSignalHandlersOptions, InteractiveChatTurnGovernance, InteractiveTurnGovernance, type InteractiveTurnGovernanceOptions, type IpcHandler, type JsonRpcErrorResponse, type JsonRpcMessage$1 as JsonRpcMessage, type JsonRpcNotification, type JsonRpcRequest$1 as JsonRpcRequest, type JsonRpcResponse, type JsonRpcSuccessResponse, type JsonSchema, JsonSchemaCompilationError, type JsonSchemaCompilationIssue, type JsonSchemaCompileOptions, type JsonSchemaSubset, type JsonSchemaType, type JsonSchemaValidationError, type JsonSchemaValidationResult, type LLMCompletionResult, type LLMProvider, type LLMProviderCapabilities, type LLMProviderMessage, type LLMProviderRequestContext, type ToolDefinition as LLMProviderToolDefinition, type LLMToolDefinition, type LayerContext, type LegacyXenoSkillInput, type LinuxBubblewrapCapability, type LinuxBubblewrapProcessSpec, LlmClient, type LlmClientDeps, LocalLLMProvider, type LocalLLMProviderConfig, type LocalRuntimePreflightResult, LogLevel, type LspDefinitionReport, type LspDiagnosticsReport, type LspDoctorReport, type LspDoctorServer, type LspHoverReport, type LspReferencesReport, MANIFEST_FILENAME, MAX_CONTAINMENT_APPROVAL_AGE_MS, MAX_CONTAINMENT_CERTIFICATION_BYTES, MAX_CONTAINMENT_CERTIFICATION_LIFETIME_MS, MAX_DIRECT_SHELL_OUTPUT_CHARS, type MCPAppCapabilities, type MCPAppContentSecurityPolicy, type MCPAppExtensionMetadata, type MCPAppMetadata, type MCPAppPermissions, type MCPAppResourceDescriptor, type MCPAppValidationResult, type MCPAppVisibility, type MCPApprovalDecision, type MCPBearerTokenRefreshHandler, type MCPBearerTokenResolver, type MCPConfigFile, type MCPConfiguredServer, type MCPElicitationAction, type MCPElicitationHandler, type MCPElicitationRequest, type MCPElicitationResponse, type MCPHttpAuthChallenge, MCPHttpTransportError, type MCPHttpUrlPhase, type MCPInitializeParams, type MCPInitializeResult, MCPManager, type MCPManagerOptions, MCPMessageTooLargeError, type MCPOAuthAuthorizationServerMetadata, type MCPOAuthAuthorizationSession, MCPOAuthClient, type MCPOAuthClientOptions, type MCPOAuthClientRegistration, type MCPOAuthClientRegistrationSource, type MCPOAuthConfig, type MCPOAuthDiscoveryResult, type MCPOAuthProtectedResourceMetadata, type MCPOAuthTokenSet, type MCPOAuthTokenStore, type MCPOAuthUrlPhase, type MCPPrompt, type MCPPromptGetParams, type MCPPromptGetResult, type MCPPromptsListResult, type MCPRegistryAccessPolicy, type MCPRegistryEntryDescriptor, type MCPRegistryEntryKind, type MCPRegistryFilter, type MCPResource, type MCPResourceReadParams, type MCPResourceReadResult, type MCPResourceSubscribeParams, type MCPResourceTemplate, type MCPResourceTemplatesListResult, type MCPResourceUnsubscribeParams, type MCPResourcesListResult, MCPServer, type MCPServerConfig, type MCPServerModeOptions, type MCPServerPromptRegistration, type MCPServerResourceRegistration, type MCPServerScope, type MCPServerState, type MCPTool, type MCPToolCallParams, type MCPToolCallResult, type MCPToolsListResult, type MCPTransport, type MCPTransportConnection, MCP_APPS_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_SCHEME, MCP_PROTOCOL_VERSION, MCP_STDIO_MAX_MESSAGE_CHARS, MCP_SUPPORTED_PROTOCOL_VERSIONS, MEMORY_FILES, MODEL_REQUEST_TIMEOUT_PHASES, MOTION_CAPABILITIES, MOTION_SYSTEM_PROMPT, MOTION_TOOL_NAMES, type ManifestValidationResult, type MaterialConfig, type MaterializeXenoAutomationEvidenceOptions, type MemoryAccessScope, type MemoryBudget, type MemoryEntry, type MemoryFile, type MemoryLevel, MemoryManager, type MemoryManagerOptions, type MeshInfo, type Message, MessageFlow, type MessageFlowDeps, type ModeSwitchRequest, type ModelInfo, type ModelProvider, ModelProviderRegistry, type ModelRequestDeadlines, ModelRequestTimeoutError, type ModelRequestTimeoutPhase, ModelResponseIncompleteError, type ModelWorkAccounting, type ModelWorkRequestIdentity, type ModelWorkSettlement, type MonitorEvent, MonitorManager, type MonitorSnapshot, type MonitorSource, MonitorStopTool, MonitorTool, type MotionAgentOptions, type MotionPromptParams, type MxcContainmentProbe, type MxcNativeAssetDescriptor, type MxcWindowsHostPreparationReport, NOTES_CAPABILITIES, NOTES_TOOL_NAMES, type NormalizedLspDiagnostic, type NormalizedLspHover, type NormalizedLspLocation, type NormalizedLspRange, type NotePageInfo, type NoteSearchResult, type NotesAgentOptions, type NotesToolAdapter, type OllamaNativeProviderConfig, type OnChunkCallback, type OnTaskCompleteInput, type OnTaskCompleteResult, type OpenTelemetryMetricAdapter, type OperationTaskSource, type OsProtectedStateStoreOptions, OtelExporter, type OtelUsageAdapter, PATCH_DIRECTIVES, PATCH_ENVELOPE_BEGIN, PATCH_ENVELOPE_END, PATCH_LINE_PREFIXES, PEER_MESSAGE_DEFAULT_TTL_MS, PEER_PRESENCE_TTL_MS, PEER_SCHEMA_VERSION, PEER_TASK_TERMINAL_STATUSES, PIXEL_CAPABILITIES, PIXEL_SYSTEM_PROMPT, PIXEL_TOOL_NAMES, PROCESS_TREE_ADAPTERS, PROJECT_STATE_VERSION, PROVIDER_TOOL_NAME_PATTERN, type ParameterizedPermissionRule, type ParseUnifiedDiffOptions, type ParsedPatch, type PatchFileSection, type PatchHunk, type PatchLine, type PatchParseError, type PatchParseErrorCode, type PeerAddress, type PeerDelivery, type PeerDeliveryStatus, type PeerInboundPolicy, type PeerMessage, type PeerMessageKind, PeerMessagingStore, type PeerMessagingStoreOptions, type PeerPermissionPosture, type PeerPresence, type PeerPresenceState, type PeerResolution, type PeerSendInput, type PeerSendOutcome, type PeerSurface, type PeerTask, type PeerTaskStatus, type PermissionConfig, type PermissionDecision, type PermissionDecisionEvent, type PermissionDecisionHook, PermissionEngine, type PermissionInfo, type PermissionProfile, type PermissionProfileDecision, type PermissionProfileMode, type PermissionProfileName, type PermissionProfileNetworkDecision, type PermissionProfileResolution, type PermissionPromptFn, type PermissionPromptInfo, type PermissionPromptOperation, type PermissionPromptPreview, type PermissionPromptPreviewLine, type PermissionRequestContext, type PermissionRequestInfo, type PermissionRequestResult, type PermissionRule, type PersistentPermissionState, type PixelAgentOptions, type PixelPromptParams, type PlatformInfo, type PluginActivationEvent, type PluginAuthor, type PluginCapability, type PluginCommandContribution, type PluginCommandHandler, type PluginContext, type PluginContributions, type PluginDetachedSignature, type PluginEngineConstraint, type PluginEvent, PluginEventBus, type PluginEventListener, type PluginEventType, type PluginHook, PluginHost, type PluginHostInfo, type PluginHostOptions, type PluginInfo, type PluginListing, type PluginLogger, PluginManager, type PluginManagerOptions, type PluginManifest, PluginMarketplace, type PluginMarketplaceOptions, type PluginOutputStyleContribution, type PluginPermission, type PluginPromptContribution, type PluginPublishOptions, type PluginRelevanceCandidate, type PluginRelevanceHints, type PluginRelevanceSuggestion, type PluginRepositorySignal, PluginSandbox, type PluginSandboxOptions, type PluginScaffoldOptions, type PluginSearchOptions, type PluginSettingContribution, PluginSettingsManager, type PluginSignatureStatus, type PluginStatus, type PluginStorage, type PluginSupplyChainLockfile, type PluginSupplyChainRecord, type PluginTestCase, type PluginTestResult, PluginToolBuilder, type PluginToolContribution, type PluginTrustBadge, type PluginUIPanel, type PolicyCheckResult, type PolicyEnforcerConfig, type PrepareMCPOAuthAuthorizationOptions, type ProbeXenoProviderOptions, type ProcessContainmentStatus, type ProcessTreeAdapter, type ProfileMCPServerConfig, ProfileManager, type ProjectConfig, type ProjectDomainProfile, type ProjectExecutionPhase, type ProjectExecutionProfile, type ProjectInfo, type ProjectMcpApprovalDecision, type ProjectSessionContext, type ProjectSessionContextEntry, type ProjectSessionSummary, type ProjectTokenUsageSummary, type PromotionRequestResult, type PromptContext, type PromptFn, type PromptHookDefinition, PromptHookRunner, type PromptMemoryContextInfo, type PromptSectionContext, type PromptSectionProvider, PromptSectionRegistry, ProtectedFileWriteError, type ProtectedFileWriteReceipt, type ProtectedStateCipher, type ProtectedStateEnvelopeCipher, type ProtectedStateEnvelopeCipherOptions, type ProtectedStateEnvelopeV1, type ProtectedStateStore, ProviderError, type ProviderErrorCategory, type ProviderErrorCode, type ProviderErrorOptions, type ProviderStatus, type ProviderStreamEvent, type ProviderTransportLimits, QueryLifecycle, type QueryLifecycleOptions, type QueryState, type QueryTransition, type QueryWatchdogReason, QuotaAcknowledgementError, type QuotaAcknowledgementPhase, type QuotaAuthority, type QuotaEntity, QuotaError, type QuotaGovernorOptions, type QuotaLimits, type QuotaReservation, type QuotaScope, READ_ONLY_TOOL_NAMES, REQUIRED_CONTAINMENT_CONFORMANCE_CHECKS, type RecalledEpisode, type RecalledSkill, type RecentSessionEntry, type RecentSessionsIndex, type ReducedResult, type ReducerOptions, type RegisterToolOperationInput, type RegisteredTool, type RenderConfig, type RequestBudgetBreakdown, type RequestDeadline, type ResolveXenoSdkApiKeyOptions, type ResolvedIdentity, type ResolvedMemory, type ResolvedProvider, type ResolvedSubagentWorkflowAnswer, type ResourceContentBlock, type RoomInfo, type RunAuthority, type RunAuthorityDispatch, RunAuthorityRefusedError, type RunAuthorityToolCall, type RunContainmentConformanceOptions, type RunDelegatedXenoTurnOptions, type RunStreamOptions, type RuntimeManifestFileEntry, type RuntimeManifestInspectionResult, type RuntimePluginManifestEntry, SDK_DEFAULT_MAX_ITERATIONS, SDK_DEFAULT_MAX_TOKENS, SDK_VERSION, SESSION_FORMAT_VERSION, SHEETS_CAPABILITIES, SHEETS_TOOL_NAMES, SLIDES_CAPABILITIES, SLIDES_TOOL_NAMES, SOUND_CAPABILITIES, SOUND_SYSTEM_PROMPT, SOUND_TOOL_NAMES, SSETransport, SUBAGENT_ROLE_ALIASES, SUBAGENT_TEAM_PRESETS, type SandboxCheckResult, type ScoredMemory, ScreenCapture, type ScreenCaptureConfig, type ScreenCaptureOptions, type SearchConfig, type SearchProvider, type SecuredProcessSpec, type SecurityPathIssue, type SecurityPathIssueCode, type Session, type SessionCreateOptions, type SessionData, type SessionEndData, type SessionForkRecord, type SessionIntegrationConfig, SessionLock, SessionLock as SessionLockManager, SessionManager, type SessionMeta, type SessionRecoveryIssue, type SessionRecoveryResult, type SessionRecoverySource, SessionRegistry, type SessionResumeOptions, type SessionRuntimeBaseOptions, type SessionRuntimeState, type SessionStartData, type SessionStatus, type SessionSummary, type SetXenoArtifactCommentResolutionRequest, type SetupAIHandlersOptions, type ShapeConfig, type SheetsAgentOptions, type SheetsToolAdapter, type ShellExecutionAuthorization, type ShellExecutionAuthorizationRequest, type ShellPathReference, type ShutdownCleanup, type Skill, SkillStore, type SkillStoreOptions, type SlideInfo, type SlidesAgentOptions, type SlidesToolAdapter, type SortConfig, type SoulCompletion, SoulEngine, type SoulEngineOptions, type SoulMessage, type SoulSigner, type SoundAgentOptions, type SoundPromptParams, type SpeechRecognizer, type SpeechRecognizerCallbacks, type SpeechRecognizerConfig, SqliteAutomationExecutionJournal, SqliteCapabilityLeasePersistence, type StartXenoLoopInput, StdioTransport, type StemSeparationResult, type StopReason, type StoredConversation, type StoredMessage, type StoredToolCall, type StoredToolOutput, type StreamResult, StreamableHTTPTransport, type StreamableHTTPTransportOptions, type StreamableHTTPTransportSnapshot, type SubagentBranchPolicy, type SubagentBriefContext, type SubagentExecuteFn, type SubagentExecutionRequest, type SubagentExecutionResponse, type SubagentRemoteMcpAccess, type SubagentResult, type SubagentRole, type SubagentTask, type SubagentTeamPreset, type SubagentTeamPresetDefinition, type SubagentWorkflowMode, type SubagentWorkflowOptions, type SubagentWorkflowResult, type SynthesizeSkillInput, type SystemPromptInspectionResult, THREE_D_CAPABILITIES, THREE_D_TOOL_NAMES, TOOL_OPERATION_SCHEMA_VERSION, TOOL_OPERATION_TERMINAL_STATES, MAX_READ_BYTES as TOOL_OUTPUT_MAX_READ_BYTES, type TaskCompletionCallback, TaskListManager, type TestResult, type TextBlock, type ThreeDAgentOptions, type ThreeDToolAdapter, type TimelineInfo, type TokenUsageTotals, type ToolAssistantContentBlock, type ToolAuthorizationReceipt, type ToolCallData, type ToolCompletionPolicy, type ToolContinuationCheckpoint, type ToolContinuationGoal, type ToolContinuationNotification, type ToolDefinition, type ToolEvidence, type ToolExchangeRepairResult, type ToolExecutionContext, type ToolExecutor, type ToolFailureCategory, type ToolFailureGuardTrip, ToolFailureLoopGuard, type ToolHistoryRepairDiagnostic, type ToolManifestEntry, type ToolMiddleware, type ToolMiddlewareContext, ToolMiddlewareRegistry, type ToolNameCodec, type ToolOperationEvent, ToolOperationManager, type ToolOperationRuntimeEventType, type ToolOperationSnapshot, type ToolOperationState, type ToolOperationTerminalState, ToolOrchestrator, type ToolOrchestratorCallbacks, type ToolOrchestratorConfig, type ToolOutputRange, type ToolOutputReadError, type ToolPolicyProjection, type ToolPolicyProjectionContext, type ToolProgressUpdate, ToolRegistry, type ToolRegistryOptions, type ToolResult, type ToolResultBlock, type ToolResultContent, type ToolResultData, type ToolRiskLevel, type ToolRuntimeContext, type ToolSchemaProjectionChange, ToolSchemaProjectionError, type ToolSchemaProjectionResult, type ToolSchemaProviderDialect, type ToolUseBlock, type TraceGraph, type TraceGraphEdge, type TraceGraphNode, type TrackContext, type TranscriptBytePage, type TranscriptBytePageOptions, type TranscriptEvent, type TranscriptEventData, type TranscriptEventType, type TranscriptPageRecord, type TranscriptRecordPage, type TranscriptRecordPageOptions, TranscriptWriter, type TranscriptionResult, type TranscriptionSegment, type TransitionConfig, type TurnDiffSummary, TurnDiffTracker, type TurnDiffTrackerOptions, type TurnFileDiff, type TurnRestoreAvailability, type TurnRestoreFilePreview, TurnRestoreManager, type TurnRestorePoint, type TurnRestoreResult, UNANSWERED_QUESTION_PREFIX, UNBOUNDED_OPERATION_CONTINUATION_LIMIT, type UnansweredQuestion, type UnifiedExecCompletionReason, UnifiedExecError, type UnifiedExecEvent, type UnifiedExecEventListener, type UnifiedExecEventType, type UnifiedExecInputSource, UnifiedExecManager, type UnifiedExecManagerOptions, type UnifiedExecMode, type UnifiedExecOrigin, type UnifiedExecOutput, type UnifiedExecOutputChunk, type UnifiedExecOutputDelta, type UnifiedExecPresentation, type UnifiedExecProcess, type UnifiedExecReadDeltaOptions, type UnifiedExecStartOptions, type UnifiedExecStatus, type UnifiedExecStream, type UpdateXenoGoalInput, UsageAccumulator, type UsageAttribution, type UsageEvent, UsageLedger, type UsageQuery, type UsageTotals, type ValidateXenoSdkApiKeyOptions, type ValidatedContainmentCertification, type ValidationSignal, type VectorDocument, VectorMemoryStore, type VectorSearchResult, type VectorStoreAdapter, type VectorStoreOptions, type VerifyContainmentApprovalExpected, type VerifyPluginSupplyChainOptions, type VerifyPluginSupplyChainResult, type VerifyXenoHostedWebhookOptions, type VerifyXenoShareOptions, type VideoToolAdapter, WEB_CONTEXT_CONTRACT_VERSION, WEB_CONTEXT_TOOL_RESULT_SCHEMA, WORKFLOW_CAPABILITIES, WORKFLOW_TOOL_NAMES, type WebContextClientPort, type WebContextEvidenceProjection, type WebContextRequestBase, type WebContextRequestFactory, type WebContextToolOptions, type WebContextToolResult, type WebContextWaitPortOptions, type WebSearchResult, type WindowsDpapiCredentialFile, type WindowsDpapiProtectedFileOptions, type WindowsDpapiProtectedStateOptions, type WorkflowAgentOptions, type WorkflowDefinition, type WorkflowEvent, type WorkflowExecutionResult, type WorkflowInfo, type WorkflowNodeConfig, type WorkflowNodeDefinition, type WorkflowNodeExecutor, type WorkflowNodeStatus, type WorkflowPlan, WorkflowPlanner, type WorkflowRunNodeRecord, type WorkflowRunRecord, type WorkflowRunStatus, WorkflowRuntime, WorkflowStore, type WorkflowToolAdapter, WorkspaceIndex, type WorkspaceScanOptions, XENO_AGENT_PROFILE_SCHEMA_VERSION, XENO_API_BASE, XENO_APP_PROTOCOL_V2_METHODS, XENO_APP_PROTOCOL_VERSIONS, XENO_ARTIFACT_ACTOR_KINDS, XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION, XENO_ARTIFACT_SCHEMA_VERSION, XENO_ARTIFACT_SENSITIVITIES, XENO_ARTIFACT_STATES, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BROWSER_CONTROL_PLANE_OPERATIONS, XENO_BUILTIN_ARTIFACT_KINDS, XENO_CAPABILITY_LEASE_SCHEMA_VERSION, XENO_CONTAINMENT_APPROVAL_SCHEMA, XENO_CONTAINMENT_CERTIFICATION_SCHEMA, XENO_CONTAINMENT_CONFORMANCE_SCHEMA, XENO_CONTAINMENT_REVIEWER_TRUST_STORE_SCHEMA, XENO_CONTEXT_DIGEST_PATTERN, XENO_CONTROL_ROOM_SCHEMA_VERSION, XENO_COORDINATION_BUDGET_SESSION_SCHEMA_VERSION, XENO_COORDINATION_MANAGED_SESSION_SCHEMA_VERSION, XENO_COORDINATION_SCHEMA_VERSION, XENO_COORDINATION_TURN_SESSION_SCHEMA_VERSION, XENO_DEFLATE_CODEC_NAME, XENO_DEFLATE_CODEC_VERSION, XENO_EVIDENCE_EDGE_TYPES, XENO_EVIDENCE_GRAPH_SCHEMA_VERSION, XENO_EVIDENCE_NODE_TYPES, XENO_GIF_ANIMATION_POLICY, XENO_GIF_CODEC_NAME, XENO_GIF_CODEC_VERSION, XENO_HANDOFF_SCHEMA_VERSION, XENO_HOSTED_CONTROL_SCHEMA_VERSION, XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION, XENO_HOSTED_EVENT_SCHEMA_VERSION, XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA, XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS, XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_TOOL_NAMES, XENO_HOSTED_RESULT_SCHEMA_VERSION, XENO_HOSTED_RUN_SCHEMA_VERSION, XENO_HOSTED_TRIGGER_SCHEMA_VERSION, XENO_JPEG_CODEC_NAME, XENO_JPEG_CODEC_VERSION, XENO_MXC_ADAPTER_NAME, XENO_MXC_POLICY_VERSION, XENO_MXC_VERSION, XENO_ORACLE_REPORT_SCHEMA_VERSION, XENO_PAGE_ENTRY, XENO_PAGE_MAX_BYTES, XENO_PAGE_MAX_FILES, XENO_PLUGIN_LOCK_FILENAME, XENO_PLUGIN_LOCK_SCHEMA_VERSION, XENO_PLUGIN_SIGNATURE_FILENAME, XENO_PLUGIN_SIGNATURE_SCHEMA_VERSION, XENO_PROVIDER_CATALOG_SCHEMA_VERSION, XENO_PROVIDER_CONNECTION_STORE_SCHEMA_VERSION, XENO_RASTER_CODEC_NAME, XENO_RASTER_CODEC_VERSION, XENO_RASTER_PREVIEW_FORMATS, XENO_RECIPE_SCHEMA_VERSION, XENO_REPOSITORY_INDEX_SCHEMA_VERSION, XENO_REVIEW_DIMENSIONS, XENO_REVIEW_EVIDENCE_KINDS, XENO_REVIEW_REPORT_SCHEMA_VERSION, XENO_RT_DEFAULT_URL, XENO_SECURE_EXECUTION_CONTRACT_SCHEMA_VERSION, XENO_SHARE_REGISTRY_SCHEMA_VERSION, XENO_SHARE_SCHEMA_VERSION, XENO_SKILL_SCHEMA_VERSION, XENO_SLASH_REFUSAL_NOTHING_SENT, XENO_SOURCE_RESEARCH_SCHEMA_VERSION, XENO_SPEC_EXECUTION_SCHEMA_VERSION, XENO_SPEC_SCHEMA_VERSION, XENO_SVG_RENDERER_NAME, XENO_SVG_RENDERER_VERSION, XENO_TELEMETRY_SCHEMA_VERSION, XENO_UNSUPPORTED_SLASH_COMMAND_REASON, XENO_VP8_CODEC_NAME, XENO_VP8_CODEC_VERSION, XENO_WEBP_ANIMATION_POLICY, XENO_WEBP_CODEC_NAME, XENO_WEBP_CODEC_VERSION, type XenoAnsiEscapeFamily, type XenoAnsiFormatter, type XenoAnsiPolicy, type XenoAnsiStyle, type XenoAnsiToken, type XenoAnsiWrapOptions, type XenoAppProtocolVersion, XenoAppServer, type XenoAppServerOptions, XenoAppServerV2Client, type XenoArtifactActor, type XenoArtifactActorKind, type XenoArtifactAnchor, type XenoArtifactAppendReviewRequest, type XenoArtifactContent, type XenoArtifactEnvelope, type XenoArtifactFileRecoveryNotice, type XenoArtifactFileSnapshot, type XenoArtifactIdentity, type XenoArtifactKind, type XenoArtifactLifecycleEvent, type XenoArtifactListQuery, type XenoArtifactMutationOptions, type XenoArtifactPersistedRecord, type XenoArtifactProvenance, type XenoArtifactRecord, type XenoArtifactRelationship, type XenoArtifactRepository, XenoArtifactRepositoryError, type XenoArtifactRepositoryErrorCode, type XenoArtifactRepositoryState, type XenoArtifactRetention, type XenoArtifactReviewAnchorInput, type XenoArtifactReviewDecision, type XenoArtifactReviewEvent, type XenoArtifactReviewEventInput, XenoArtifactReviewService, type XenoArtifactReviewServiceOptions, type XenoArtifactReviewSummary, type XenoArtifactRevisionOptions, type XenoArtifactSensitivity, type XenoArtifactState, XenoArtifactStateTransitionError, type XenoArtifactStorageReference, type XenoArtifactTransitionRequest, XenoArtifactValidationError, type XenoArtifactValidationIssue, XenoAuthError, type XenoAuthErrorCode, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionJournal, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationJournalIdentity, type XenoAutomationJournalRecord, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBasicRasterImage, type XenoBrowserAutomationOperation, XenoBrowserControlPlaneAdapter, type XenoBrowserControlPlaneAdapterOptions, type XenoBrowserExecutionPolicy, type XenoCapabilityEffect, type XenoCapabilityEligibility, type XenoCapabilityKind, type XenoCapabilityLease, type XenoCapabilityLeaseApprovalContext, type XenoCapabilityLeaseApprovalRequest, type XenoCapabilityLeaseDenialRequest, XenoCapabilityLeaseError, type XenoCapabilityLeaseErrorCode, type XenoCapabilityLeaseRequest, type XenoCapabilityLeaseRevocationRequest, type XenoCapabilityLeaseState, type XenoCapabilityScope, type XenoCapabilitySubject, type XenoCapabilityUse, type XenoColorDepth, type XenoColorPolicy, type XenoCompiledRecipe, type XenoCompiledRecipeStep, type XenoComputerAutomationOperation, type XenoComputerExecutionPolicy, type XenoConfig, type XenoContainmentApprovalReport, type XenoContainmentCertificationApproval, type XenoContainmentCertificationManifest, type XenoContainmentConformanceReport, type XenoContainmentReviewerTrustStore, type XenoContentHash, type XenoControlRoomActionKind, type XenoControlRoomActionPlan, type XenoControlRoomActionRequest, type XenoControlRoomAgent, type XenoControlRoomAgentInput, type XenoControlRoomAgentStatus, type XenoControlRoomApprovalInput, type XenoControlRoomApprovalKind, type XenoControlRoomArtifactInput, type XenoControlRoomAttentionItem, type XenoControlRoomAttentionKind, type XenoControlRoomGoalInput, type XenoControlRoomInput, type XenoControlRoomMonitorInput, type XenoControlRoomNotificationInput, type XenoControlRoomProjectionOptions, type XenoControlRoomSnapshot, type XenoControlRoomStatusCategory, type XenoControlRoomSummary, type XenoControlRoomTask, type XenoControlRoomTaskInput, type XenoControlRoomUsage, XenoControlRoomValidationError, type XenoCoordinationAction, type XenoCoordinationAdmissionFence, XenoCoordinationError, type XenoCoordinationEvent, type XenoCoordinationEventType, type XenoCoordinationSessionState, type XenoCoordinationStoreOptions, type XenoCreatedShare, type XenoCredentialSource, type XenoCredentialType, type XenoDesktopCaptureSource, type XenoDesktopCapturer, type XenoDiffArtifactContext, type XenoDiffDocument, type XenoDiffFile, type XenoDiffFileStatus, type XenoDiffHunk, type XenoDiffLine, type XenoDiffLineKind, type XenoDiffMode, XenoDiffParseError, type XenoDurableAutomationOptions, type XenoEd25519Signature, type XenoEnvironmentExecutionPolicy, type XenoEvidenceEdge, type XenoEvidenceEdgeType, type XenoEvidenceGraph, XenoEvidenceGraphBuilder, type XenoEvidenceGraphBuilderOptions, XenoEvidenceGraphValidationError, type XenoEvidenceNode, type XenoEvidenceNodeType, type XenoEvidenceReference, type XenoExecutionAdapterIdentity, type XenoExecutionEnforcement, type XenoExecutionIdentity, XenoExecutionLeaseSession, type XenoExecutionLeaseSessionOptions, type XenoExecutionLeaseStore, type XenoExecutionOwner, type XenoExternalActionExecutionPolicy, type XenoFilesystemExecutionPolicy, type XenoGifAnimation, type XenoGifDisposal, type XenoGifFrame, type XenoGitHubReviewComment, type XenoGoalCriterion, type XenoGoalCriterionResult, type XenoGoalMilestone, type XenoGoalProgress, type XenoGoalRecord, type XenoGoalStatus, type XenoGoalTask, type XenoGoalTaskStatus, type XenoGoalTurnAdmission, type XenoGoalTurnRequest, type XenoGoalTurnState, type XenoGoalVerification, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHandoffAuthority, type XenoHandoffOperation, type XenoHandoffPayload, type XenoHandoffRecord, type XenoHandoffResumePoint, type XenoHandoffSnapshot, type XenoHandoffSnapshotFile, type XenoHandoffSnapshotManifest, type XenoHandoffStatus, type XenoHandoffStatusInput, type XenoHandoffStatusReceipt, type XenoHandoffTarget, type XenoHostAutomationAuditEvent, type XenoHostAutomationAuditLoggerPort, type XenoHostAutomationEnvironment, type XenoHostAutomationStatusReport, type XenoHostAutomationSurfaceStatus, CliGovernedAutomationRuntime as XenoHostGovernedAutomationRuntime, type XenoHostedArchitecture, type XenoHostedAuthority, type XenoHostedBudget, type XenoHostedCacheMount, type XenoHostedControlAcknowledgement, type XenoHostedControlAction, type XenoHostedControlCommand, type XenoHostedControlCommandPayload, type XenoHostedEnvironmentManifest, type XenoHostedEnvironmentManifestPayload, type XenoHostedEventRecord, type XenoHostedExecutionAdapterCertification, type XenoHostedExecutionAdapterVerificationOptions, type XenoHostedExecutionBoundaryReceipt, type XenoHostedExecutionJob, type XenoHostedExecutionSecretValue, type XenoHostedImageReference, type XenoHostedNetworkDestination, type XenoHostedNetworkPolicy, type XenoHostedOs, type XenoHostedQuotaLease, type XenoHostedReplayCursor, type XenoHostedReplayPage, type XenoHostedRepositorySource, type XenoHostedResourceLimits, type XenoHostedRetentionPolicy, type XenoHostedRunRecord, type XenoHostedRunRequest, type XenoHostedRunResult, type XenoHostedRunResultPayload, type XenoHostedRunStatus, type XenoHostedSecretProjection, type XenoHostedSetupStep, type XenoHostedTriggerDefinition, type XenoHostedTriggerDelivery, type XenoHostedTriggerKind, type XenoHostedWebhookSource, type XenoHostedWebhookVerification, type XenoJsonObject, type XenoJsonPrimitive, type XenoJsonValue, type XenoJwtPayload, type XenoLegacyAgentArtifactContext, type XenoLegacyArtifactContext, type XenoLoadedSkill, type XenoLoopIteration, type XenoLoopKind, type XenoLoopRecord, type XenoLoopSchedule, type XenoLoopStatus, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, XenoMultiAgentReviewCoordinator, type XenoMultiAgentReviewCoordinatorOptions, type XenoNetworkDestination, type XenoNetworkExecutionPolicy, type XenoOracleAdjudication, type XenoOracleAdjudicationDraft, type XenoOracleAdjudicationRequest, type XenoOracleAdjudicationResult, type XenoOracleArtifactContext, type XenoOracleCitation, type XenoOracleClaim, XenoOracleCoordinator, type XenoOracleCoordinatorOptions, type XenoOracleDisagreement, type XenoOracleExecutionRequest, type XenoOracleExecutionResult, type XenoOracleModelIdentity, type XenoOracleOpinion, type XenoOracleOpinionDraft, type XenoOracleReport, type XenoOracleRole, type XenoOracleRunOptions, XenoOracleValidationError, type XenoOracleVerdict, type XenoPageFileInput, type XenoPageFileRecord, type XenoPageHome, type XenoPagePublication, XenoPageStore, type XenoPageStoreOptions, type XenoProcessExecutionPolicy, type XenoProjectState, type XenoProviderAdapterKind, type XenoProviderAuthPreset, type XenoProviderCapabilities, XenoProviderCatalog, type XenoProviderConnection, type XenoProviderConnectionSnapshot, type XenoProviderConnectionView, type XenoProviderCredentialMode, type XenoProviderModelDescriptor, type XenoProviderPreset, type XenoProviderProbeResult, type XenoProviderReadiness, type XenoProviderRouteCandidate, type XenoProviderRoutingPolicy, type XenoPtyAdapter, type XenoPtyProcess, type XenoPtySpawnOptions, type XenoPublishPageInput, type XenoPublishedPage, type XenoRasterImage, type XenoRasterPreview, type XenoRecipeDefinition, type XenoRecipeInputDefinition, type XenoRecipeMode, type XenoRecipePermissionMode, type XenoRecipeStepDefinition, XenoRecipeValidationError, type XenoRedactionCategory, type XenoRedactionEvent, type XenoRedactionOptions, type XenoRedactionReport, type XenoRedactionResult, type XenoRemoteRepositoryIdentity, type XenoRemoteSourceFile, type XenoRemoteSourceProvider, type XenoRepositoryChunk, type XenoRepositoryDocumentKind, type XenoRepositoryEmbedding, type XenoRepositoryEmbeddingProvider, type XenoRepositoryEmbeddingRequest, type XenoRepositoryFileRecord, type XenoRepositoryFreshnessInput, type XenoRepositoryFreshnessReport, type XenoRepositoryGitProvenance, type XenoRepositoryIndexBuildOptions, XenoRepositoryIndexFileStore, type XenoRepositoryIndexSnapshot, type XenoRepositoryIndexStats, type XenoRepositoryRelationship, type XenoRepositoryRelationshipKind, type XenoRepositorySearchMode, type XenoRepositorySearchQuery, type XenoRepositorySearchResponse, type XenoRepositorySearchResult, type XenoRepositorySourceDocument, type XenoRepositorySymbol, type XenoRepositorySymbolGraph, type XenoRepositorySymbolKind, type XenoRequestContext, type XenoResolvedApiKey, type XenoReviewAgentExecutor, type XenoReviewAgentResult, type XenoReviewArtifactContext, type XenoReviewCoordinatorContext, type XenoReviewDimension, type XenoReviewEvidence, type XenoReviewEvidenceKind, type XenoReviewFinding, type XenoReviewFindingProposal, type XenoReviewFindingState, type XenoReviewPack, type XenoReviewReport, type XenoReviewSeverity, type XenoReviewTarget, XenoReviewValidationError, type XenoReviewVerificationOutcome, type XenoReviewVerificationResult, type XenoReviewVerifierExecutor, type XenoRuntimeEvent, type XenoRuntimeEventBase, XenoRuntimeEventBus, type XenoRuntimeEventDraft, type XenoRuntimeEventSink, type XenoRuntimeEventType, type XenoSecretProjection, type XenoSecureExecutionContract, XenoSecureExecutionContractError, type XenoSecureExecutionContractErrorCode, type XenoShareAccessPolicy, type XenoShareContent, type XenoShareGitContext, type XenoShareIssuer, type XenoSharePayload, type XenoSharePrincipal, type XenoShareReference, type XenoShareRegistryRecord, type XenoShareRegistrySnapshot, type XenoShareSessionIdentity, type XenoShareSigningIdentity, type XenoShareStatus, type XenoShareSurface, type XenoShareVerificationResult, type XenoShareVisibility, type XenoSignedHandoffEnvelope, type XenoSignedShareEnvelope, type XenoSkillActivation, type XenoSkillAuditEvent, type XenoSkillCatalog, type XenoSkillDescriptor, type XenoSkillDiagnostic, type XenoSkillDiscoveryOptions, type XenoSkillDiscoveryRoot, type XenoSkillExternalActionPolicy, type XenoSkillInvocationDecision, type XenoSkillInvocationPolicy, type XenoSkillResourceDescriptor, type XenoSkillShadowRecord, type XenoSkillSource, type XenoSkillTool, type XenoSkillToolPolicy, type XenoSlashGuardOptions, type XenoSlashInputClassification, type XenoSourceResearchArtifactContext, type XenoSourceResearchExcerpt, type XenoSourceResearchFinding, type XenoSourceResearchModelIdentity, type XenoSourceResearchReport, type XenoSourceResearchSeverity, XenoSourceResearchValidationError, type XenoSpecAcceptanceCriterion, type XenoSpecArtifactBundle, type XenoSpecArtifactContext, type XenoSpecDesign, type XenoSpecDesignDecision, type XenoSpecDocument, type XenoSpecDriftFinding, type XenoSpecDriftReport, type XenoSpecExecutionRecord, type XenoSpecExecutionState, XenoSpecLifecycleService, type XenoSpecLifecycleServiceOptions, type XenoSpecPriority, type XenoSpecRequirement, type XenoSpecRisk, type XenoSpecSourceBaseline, type XenoSpecTask, type XenoSpecTaskExecution, type XenoSpecTaskStatus, XenoSpecValidationError, type XenoTelemetryAttributeValue, type XenoTelemetryRecord, type XenoTelemetrySignalKind, type XenoTelemetrySubscriber, type XenoThreadRunOptions, type XenoThreadRunResult, XenoTraceGraphRecorder, type XenoUserConfig, type XenoVerifiedHostedExecutionAdapterCertification, type XenoVp8Image, acquireControlPlaneLock, activateSessionRuntime, addProjectAllowedDirectory, addProjectAllowedTool, agentDefinitionFromProfile, agentProfileFromDefinition, appServerSlashCommandRefusal, appendBoundedShellOutput, appendGuidanceToResult, applyPatch, approveMcpServer, areSignalHandlersInstalled, artifactCompareTool, askUserTool, assertDirectEndpointResolution, assertPersistedXenoCapabilityLease, assertRequiredXenoAutomationEvidence, assertSupportedMcpProtocolVersion, assertUsableXenoApiKey, assertValidMcpAppResource, assertValidXenoArtifact, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertValidXenoEvidenceGraph, assertValidXenoHostedExecutionJob, assertValidXenoOracleReport, assertValidXenoRecipeDefinition, assertValidXenoReviewPack, assertValidXenoReviewReport, assertValidXenoReviewTarget, assertValidXenoSecureExecutionContract, assertValidXenoSourceResearchReport, assertValidXenoSpecDocument, assertValidXenoSpecExecution, assertXenoArtifactStateTransition, assertXenoAutomationAdapterConformant, assertXenoAutomationAuthority, auditRiskLevelForTool, authorizeShellExecution, backgroundProcessManager, bashTool, benchmarkCodingTools, bridgeXenoTelemetryToOpenTelemetry, buildAtomicMessageGroups, buildAuditReplayReport, buildAuditTraceReport, buildContainedProcessSpec, buildContractLedgerGuidance, buildDefaultSubagentTasks, buildDelegatedRoleSystemPrompt, buildHookEnvironment, buildLinuxBubblewrapProcessSpec, buildLspDefinitionReport, buildLspDiagnosticsReport, buildLspDoctorReport, buildLspHoverReport, buildLspReferencesReport, buildMotionSystemPrompt, buildPixelSystemPrompt, buildProcessHardenedProcessSpec, buildProjectBudgetFinalizationGuidance, buildProjectExecutionGuidance, buildProjectExecutionProfile, buildPromptMemoryContext, buildSecuredProcessSpec, buildSoundSystemPrompt, buildSystemPrompt, buildToolFailureGuardResult, buildXenoArtifactReviewAnchor, buildXenoAutomationCapabilityUse, buildXenoRepositoryIndex, buildXenoRepositoryIndexWithEmbeddings, buildXenoSecureExecutionContract, cachedModelContextWindow, cachedModelImageInput, calculateCost, canTransitionXenoArtifactState, canXenoRasterPreview, canonicalPayload, canonicalizeArtifactJson, canonicalizeMcpResourceUri, canonicalizeSecurityPath, canonicalizeToolName, captureXenoHandoffSnapshot, checkSandbox, classifyProviderHttpError, classifyXenoSlashInput, cleanupReadImagePreviews, cleanupSessionRuntime, clearMcpServerApproval, clearProjectAllowedTools, clearProjectLastSessionSummary, clearProjectMcpApproval, clearProjectMcpApprovals, clipXenoAnsi, coerceSubagentRole, coerceSubagentTeamPreset, commandShapedSlashName, compileAgentProfile, compileJsonSchema, compileToolInputSchema, compileXenoRecipe, compileXenoSkillActivation, computeXenoContextDigest, configureImageGeneration, configureSearch, configureSearchPermissionProfile, configureXenoAnsi, containmentApprovalSigningPayload, containmentCertificationSigningPayload, copyTextToClipboard, create3DTools, createAgentDefinitionFile, createAgentDefinitionPromptSection, createAgentRunId, createAppServerExecutionLeaseStore, createAppServerV2HttpTransport, createArchitectTools, createArtifactCompareTool, createAskUserTool, createAudioTools, createAuditBackedPermissionEngine, createBashTool, createBenchBashMiddleware, createCliAutomationAuditSink, createCliGovernedAutomationRuntime, createCommandBackedProtectedStateStore, createDefaultToolRegistry, createDelegatedXenoAgent, createDirectProvider, createDirectShellMessage, createDispatchAgentTool, createDocsTools, createEd25519Signer, createEditTool, createElfAnalyzeTool, createEngineTools, createGcodeAnalyzeTool, createGenerateImageTool, createGlobTool, createGovernanceExtensions, createGrepTool, createHtmlSanitizerAuditTool, createImageTools, createListAgentsTool, createListSessionsTool, createLsTool, createLspDefinitionTool, createLspDiagnosticsTool, createLspHoverTool, createLspReferencesTool, createMcpAppCapabilities, createMcpAppExtensionCapabilities, createMcpPkcePair, createMcpPromptRegisteredTool, createMcpRegisteredTool, createMcpResourceRegisteredTool, createMemoryProtectedStateStore, createMemoryReadTool, createMemoryWriteTool, createNotebookEditTool, createNotebookReadTool, createNotesTools, createOllamaNativeProvider, createOsProtectedStateStore, createPatchTool, createProtectedStateEnvelopeCipher, createQuotaGovernedProvider, createReadImageTool, createReadTool, createReceiveTool, createRequestDeadline, createSendTool, createSheetsTools, createSlidesTools, createSpeechRecognizer, createSqliteAnalyzeTool, createTaskInputTool, createTaskListTools, createTaskOutputTool, createTaskStopTool, createThinkTool, createToolAlias, createToolNameCodec, createToolOutputTool, createToolRuntimeContext, createUnavailableProtectedStateStore, createVideoTools, createWebContextFetchTool, createWebContextRequestFactory, createWebContextSearchTool, createWebSearchTool, createWindowsDpapiProtectedCipher, createWindowsDpapiProtectedFileStore, createWorkflowTools, createWriteTool, createXenoAgent, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createCliAutomationAuditSink as createXenoHostAutomationAuditSink, createCliGovernedAutomationRuntime as createXenoHostGovernedAutomationRuntime, createXenoHostedControlCommand, createXenoHostedEnvironmentManifest, createXenoHostedEvent, createXenoHostedExecutionBoundaryReceipt, createXenoHostedRunResult, createXenoRasterPreview, createXenoSecureShare, createXenoSessionHandoff, createXenoShareSigningIdentity, createXenoSkillTool, createXenoSourceResearchExcerpt, createXenoSourceResearchReport, currentExecutionAdapterStatus, decodeJwtPayload, decodeXenoBmp, decodeXenoGif, decodeXenoGifAnimation, decodeXenoJpeg, decodeXenoNetpbm, decodeXenoPng, decodeXenoSvg, decodeXenoVp8, decodeXenoWebp, defaultPeerDirectory, defaultToolRuntimeContext, defaultXenoReviewPack, deflateXenoZlib, delegatedBranchOutputTokens, deleteSession, denyMcpServer, deriveHostedIdempotencyKey, describeXenoAutomationOperation, detectLanguage, detectPluginRepositorySignals, detectRepositoryDocumentKind, detectRepositoryLanguage, detectXenoSpecDrift, deterministicReduce, digestMessages, directProviderConfigFromConnection, discoverXenoSkills, dispatchAgentTool, editTool, elfAnalyzeTool, emitPatchGbnf, emitXenoTelemetry, encodeXenoPngRgb, enforceShellCommandPolicy, enforceToolPolicy, ensureConfigDir, ensureDurableMessageIds, ensureProjectStateDir, estimateFullRequestBudget, evaluateContainmentUiRestrictions, evaluatePermissionProfileNetworkUrl, evaluateXenoCapabilityEligibility, executeXenoCoordinationAction, extractJsonObject, extractPageTitle, extractToolPath, findUnansweredQuestion, findXenoSkill, fingerprintXenoSecureExecutionContract, forgetRecentSession, forgetRecentSessionById, formatBoundedShellOutput, formatCost, formatDirectShellContext, formatJsonSchemaErrors, formatModelList, formatPromptContextBreakdown, gcodeAnalyzeTool, generateImageTool, generateSessionId, getAgentHome, getAgentRunDir, getAgentRunStoreDir, getAvailableModels, getBenchmarkComputeBudgetHintForCommand, getBenchmarkForegroundTimeoutForCommand, getBestExecutionSecurityStatus, getChatModels, getConfigDir, getDefaultProviderRegistry, getExecutionSecurityCapabilityReport, getExecutionSecurityStatus, getGlobIgnores, getGrepIgnores, getHighRiskPermissions, getImageGenerationConfig, getJwtExpiry, getLinuxBubblewrapCapability, getLogLevel, getManagedConfigPath, getMcpAppMetadata, getMcpAppResourceUri, getMcpApprovalDecision, getMcpAuthorizationServerMetadataUrls, getMcpPromptToolName, getMcpProtectedResourceMetadataUrls, getMcpResourceToolName, getMcpToolName, getModelName, getMxcContainmentProbe, getMxcNativeAssetDescriptor, getMxcWindowsHostPreparationDescriptor, getMxcWindowsHostPreparationHelperArchitecture, getPermissionProfile, getPersistentShellSession, getPersistentShellSpawnSpec, getProcessContainmentStatus, getProjectAgentDefinitionDirs, getProjectAgentDefinitionsDir, getProjectLastSessionSummary, getProjectMcpApproval, getProjectStatePath, getReadImagePreviewCapability, getRecentSessionsIndexPath, getSubagentTeamPresetDefinition, getToolRiskLevel, getUserAgentDefinitionsDir, gitBranchTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, globTool, grepTool, gzipXeno, hasProjectOnboardingCompleted, hasXenoTelemetrySubscribers, hashContainmentConformanceReport, hashPluginManifest, hashPluginTree, hookResultStatus, hostedEnvironmentIdentity, htmlSanitizerAuditTool, importLegacyXenoSkill, inflateXenoZlib, initializeSessionRuntime, inspectCliAutomationStatus, inspectRuntimeManifests, inspectSecurityPath, inspectSystemPrompt, inspectCliAutomationStatus as inspectXenoHostAutomationStatus, inspectXenoRepositoryFreshness, inspectXenoRepositorySymbol, installSignalHandlers, interruptedQuestionResult, invalidateAllObservedFiles, invokeXenoSkill, isChatModel, isDangerousCommand, isDirectShellMessage, isExpiredJwt, isExplicitResearchPrompt, isJwt, isLocalModel, isMcpAppResourceUri, isMcpOAuthTokenExpired, isMcpToolVisibleToApp, isMcpToolVisibleToModel, isModelRequestTimeoutPhase, isNotBeforeJwt, isPathWithinAllowed, isPeerTaskTerminal, isQuestionTool, isQuotaControlError, isReadOnlyToolName, isScreenCaptureAvailable, isSensitiveEnvironmentKey, isSimpleInformationalPrompt, isSpeechRecognitionAvailable, isSupportedMcpProtocolVersion, isToolAllowedByXenoSkillActivation, isToolOperationTerminalState, isUncOrDevicePath, isValidAgentDefinitionName, isValidModel, isValidSessionId, isWorkspaceTrusted, isXenoAutomationOperation, isXenoContextDigest, legacyAgentArtifactToXenoArtifact, listBuiltInAgentProfiles, listPermissionProfiles, listProjectAllowedTools, listProjectMcpApprovals, listSessions, loadConfig, loadConfiguredMcpServers, loadMcpConfigFile, loadProjectConfig, loadProjectState, loadRecentSessionsIndex, loadSession, loadUserConfig, loadXenoSkill, lookupRecentSession, lsTool, lspDefinitionTool, lspDiagnosticsTool, lspHoverTool, lspReferencesTool, matchPermissionRule, matchesMcpRegistryEntryPolicy, materializeXenoAutomationEvidence, mcpInputSchemaToToolSchema, memoryReadTool, memoryWriteTool, mergeConfigs, movesTrustUpward, mxcWarningsRequireWindowsHostPreparation, normalizeDirectShellResultRecord, normalizeHookDecision, normalizeMcpAppVisibility, normalizePagePath, normalizePermissionProfileName, normalizeQuotaScope, normalizeRepositoryRelativePath, normalizeSourceText, normalizeSubagentBranchPolicy, normalizeWorkingDirectory, normalizeXenoHostedControlAcknowledgement, normalizeXenoRequestContext, notebookEditTool, notebookReadTool, openSqliteAutomationExecutionJournal, openSqliteCapabilityLeasePersistence, pageContentType, parseContainmentReviewerTrustStore, parseMcpWwwAuthenticate, parsePatch, parsePermissionRule, parseRetryAfter, parseSessionId, parseShellPathReferences, parseSubagentRemoteMcpPolicy, parseSubagentRoleList, parseUnifiedDiff, parseXenoAnsi, parseXenoRecipeDefinition, patchPaths, patchTool, peerShortId, pending, persistXenoAutomationEvidence, planXenoControlRoomAction, pluginInfoRelevanceCandidate, pluginListingRelevanceCandidate, pluginSignaturePayload, preflightLocalModel, prepareMxcWindowsHost, probeXenoProvider, projectToolDefinitionsForProvider, projectToolSchemaForProvider, projectXenoControlRoom, providerCapabilityError, providerProtocolError, publicKeyFingerprint, publishPlugin, quotaAncestors, quotaInteger, quotaScopeKey, quotaText, rankPluginRelevance, readCliAutomationEnvironment, readImageTool, readManifestFromDisk, readPluginDetachedSignature, readPluginSupplyChainLockfile, readSessionFormatVersion, readTool, readToolOutput, readXenoApiKey, readCliAutomationEnvironment as readXenoHostAutomationEnvironment, recordRecentSession, recordXenoCounter, recordXenoEvent, recordXenoHistogram, recoverSessionMessages, redactXenoShareValue, registerShutdownCleanup, registry, removeMcpServerConfig, removeProjectAllowedTool, renderAgentDefinition, renderAgentDefinitions, renderAuditReplayMarkdown, renderAuditReplayReport, renderAuditTraceMarkdown, renderAuditTraceReport, renderAuditTraceSummaries, renderCliAutomationStatus, renderCodingBenchmarkMarkdown, renderCodingBenchmarkReport, renderContinuationIncompleteStatus, renderLspDefinitionReport, renderLspDiagnosticsReport, renderLspDoctorReport, renderLspHoverReport, renderLspReferencesReport, renderPeerLabel, renderToolContinuationInput, renderCliAutomationStatus as renderXenoHostAutomationStatus, renderXenoSkillCatalog, repairInterruptedToolCalls, repairToolExchangeHistory, requestBackground, requiresSecuredProcessLaunch, resetAllPersistentShellSessions, resetBashBenchmarkGuards, resetImageGenerationConfig, resetMcpServerApprovals, resetMxcContainmentProbe, resetPersistentShellSession, resetXenoAnsiPolicy, resetXenoTelemetryCardinalityForTests, resizeXenoRaster, resolveAgentDefinition, resolveAgentProfile, resolveAgentToolPolicy, resolveBuiltInAgentProfile, resolveCommandOnPath, resolveContainmentConformanceTemporaryRoot, resolveDelegatedExecutionMode, resolveExecutionSecurityLevel, resolveExecutionTrustMode, resolveInteractiveTurnMaxIterations, resolveLocalRuntimeUrl, resolveModelContextTokens, resolveModelRequestDeadlines, resolvePeerTarget, resolvePermissionProfile, resolveShellInvocation, resolveSubagentRemoteMcpAccess, resolveSubagentWorkflowAnswer, resolveXenoAutomationEvidencePolicy, resolveXenoSdkApiKey, restoreXenoHandoffSnapshot, runAgentHook, runCommandHook, runContainmentConformanceSuite, runDelegatedXenoTurn, runDelegationPlan, runDurableAutomation, runHookDefinition, runHooks, runHttpHook, runPromptHook, runSubagentWorkflow, runXenoThread, runXenoThreadStreamed, sanitizeEnvironment, sanitizeXenoTelemetryAttributes, saveConfig, saveMcpConfigFile, saveProjectState, saveSession, scaffoldPlugin, scanAgentDefinitions, scoreMemories, scorePluginRelevance, searchXenoRepositoryIndex, selectXenoProviderRoute, serializeXenoRecipe, setLogLevel, setProjectLastSessionSummary, setProjectMcpApproval, setProjectOnboardingCompleted, setToolOutputStoreDirectory, setWorkspaceTrusted, setupAIHandlers, sha256ArtifactBytes, sha256ArtifactJson, shouldEnableExecutionGovernance, shouldSourceShellProfile, shouldUseIsolatedStdinForCommand, signSharePayload, sqliteAnalyzeTool, storeToolOutput, stripXenoAnsi, subscribeXenoTelemetry, summarizeAuditInputRecord, summarizeAuditTraces, summarizeRuntimeInput, summarizeSubagentResults, summarizeXenoArtifactReview, syncMcpToolsToRegistry, synthesizeSkill, taskInputTool, taskOutputTool, taskStopTool, testPlugin, thinkTool, toAgentDefinitionMetadata, toLLMProvider, toPeerPosture, toolEvidenceToXenoArtifact, toolOperationManager, toolOutputTool, toolRiskLevel, truncationNotice, turnDiffSummaryToXenoArtifact, unifiedDiffToXenoArtifact, unifiedExecManager, updateProjectState, upsertMcpServerConfig, validateAgentDefinition, validateCapabilityLeaseRequest, validateCapabilityMutationReceipt, validateDelegationPlan, validateDirectEndpoint, validateExecutionSecurityPolicy, validateJsonSchema, validateManifest, validateMcpAppResource, validateToolContinuationGoal, validateXenoArtifact, validateXenoArtifactReviewEvent, validateXenoControlRoomSnapshot, validateXenoEvidenceGraph, validateXenoRepositoryIndex, validateXenoSdkApiKey, validateXenoSecureExecutionContract, validateXenoSpecDocument, verifyContainmentCertification, verifyContainmentCertificationApproval, verifyPluginSupplyChain, verifySignature, verifySoulRecord, verifyXenoHostedControlCommand, verifyXenoHostedEnvironmentManifest, verifyXenoHostedEventChain, verifyXenoHostedExecutionAdapterCertification, verifyXenoHostedExecutionJob, verifyXenoHostedRunResult, verifyXenoHostedWebhook, verifyXenoSecureShare, verifyXenoSessionHandoff, waitForXenoHandoffStatus, webFetchTool, webSearchTool, windowsDpapiProtect, windowsDpapiUnprotect, withXenoTelemetrySpan, wrapXenoAnsi, writePluginSupplyChainLockfile, writeTool, xenoAnsi, xenoAnsiVisibleWidth, xenoArtifactToDiffDocument, xenoArtifactToLegacyAgentArtifact, xenoArtifactToOracleReport, xenoArtifactToReviewReport, xenoArtifactToSourceResearchReport, xenoArtifactToSpecDocument, xenoArtifactToSpecExecution, xenoArtifactToToolEvidence, xenoArtifactToTurnDiffSummary, xenoHostedExecutionAdapterSigningPayload, xenoOracleReportToArtifact, xenoRecipeFingerprint, xenoRequestContextHeaders, xenoReviewReportToArtifact, xenoReviewReportToGitHubComments, xenoSourceResearchReportToArtifact, xenoSpecArtifactIds, xenoSpecExecutionToArtifact, xenoSpecToArtifactBundle };
+export { type A2AMessage, type A2AMessageType, AGENT_DAEMON_PROTOCOL_VERSION, AGENT_EFFORT_LEVELS, AGENT_PERMISSION_MODES, AGENT_PROFILE_EXTERNAL_ACTIONS, APP_SERVER_PROMPT_BEARING_PARAMS, ARCHITECT_CAPABILITIES, ARCHITECT_TOOL_NAMES, type ActiveLayerInfo, type AddXenoArtifactCommentRequest, type AgentArtifact, type AgentCapabilities, type AgentCard, type AgentChildController, type AgentChildInfo, type AgentChildKind, type AgentChildOutcome, type AgentChildRegistration, type AgentChildSettlement, type AgentChildTokenUsage, AgentDaemonClient, type AgentDaemonError, type AgentDaemonHandler, type AgentDaemonRequest, type AgentDaemonResponse, AgentDaemonServer, type AgentDaemonTransport, AgentDebugger, type AgentDefinition, type AgentDefinitionBudget, type AgentDefinitionIsolation, type AgentDefinitionIssue, AgentDefinitionLoader, type AgentDefinitionLoaderOptions, type AgentDefinitionMetadata, AgentDefinitionResolver, type AgentDefinitionScanResult, type AgentDefinitionScope, type AgentDefinitionShadowRef, type AgentEffortLevel, AgentEvaluator, AgentEventStore, type AgentHookDefinition, AgentHookRunner, AgentInterruptedError, type AgentIpcChannel, type AgentLoadSnapshot, AgentLoop, type AgentLoopConfig, type AgentLoopOptions, type AgentPermissionMode, type AgentProfileActionDecision, type AgentProfileCapabilities, type AgentProfileCapabilityBoundary, type AgentProfileCollaborationMode, type AgentProfileCompletionPolicy, type AgentProfileEvidenceKind, type AgentProfileExecutionPolicy, type AgentProfileExternalAction, type AgentProfileExternalActionPolicy, type AgentProfileIsolation, type AgentProfileKind, type AgentProfileMemoryPolicy, type AgentProfileMemoryScope, type AgentProfilePresentation, type AgentProfileSkillPolicy, type AgentProfileSoulMode, type AgentProfileV2, AgentProfileValidationError, AgentProtocol, AgentRegistry, type AgentRunAgentDefinitionRef, AgentRunController, type AgentRunControllerOptions, type AgentRunCreateInput, AgentRunError, type AgentRunEvent, type AgentRunListOptions, type AgentRunOptions, type AgentRunRecord, type AgentRunSpawnResult, type AgentRunStatus, AgentRunStore, type AgentRunTermination, type AgentRunTerminationReason, type AgentRunTerminationStatus, type AgentRunUsage, type AgentSandbox, type AgentSelectionStrategy, type AgentSessionHostBindingV1, type AgentStreamCallbacks, type AgentTask, type AgentTaskHandler, type AgentTaskResult, type AgentTaskStatus, type AgentTeam, type AgentToAppChannel, type AgentToAppMessages, type AgentToolPolicy, type AnalysisResult, type ApiMessage, type AppAgentBaseOptions, AppAgentFactory, type AppAgentResult, type AppContext, AppContextInjector, AppContextManager, type AppContextProvider, type AppId, type AppServerDestinationExpectation, type AppServerEventV2, type AppServerExecutionIdentity, type AppServerExecutionLeaseV2, type AppServerHandoffOptions, type AppServerInitializeParamsV2, type AppServerInitializeResultV2, type AppServerIntegrationMetadataV2, type AppServerPermissionRequestV2, type AppServerPrincipalV2, AppServerProtocolError, type AppServerProtocolErrorData, AppServerRemoteError, type AppServerRequestContext, type AppServerSlashCommandRefusal, type AppServerSourcePreparation, type AppServerSubscriptionSnapshotV2, type AppServerThreadStatusV2, type AppServerThreadV2, type AppServerTurnRunnerContextV2, type AppServerTurnRunnerV2, type AppServerTurnStatusV2, type AppServerTurnV2, type AppServerV2ClientTransport, type AppServerV2MethodMap, type AppServerV2Options, type AppToAgentChannel, type AppToAgentMessages, type AppType, type ArchitectAgentOptions, type ArchitectToolAdapter, type ArtifactToolActionClass, type AskUserHandler, type AskUserRequest, type AskUserResponse, type AtomicMessageGroup, type AudioProjectInfo, type AudioStemSeparationResult, type AudioToolAdapter, type AudioTrackType, type AudioTranscriptionResult, type AudioTranscriptionSegment, type AuditDecision, type AuditEvent, AuditLogger, type AuditReplayReport, type AuditReplayStep, type AuditRiskLevel, type AuditStatus, type AuditTraceGapEntry, type AuditTraceReport, type AuditTraceSummary, type AuditTraceTimelineEntry, type AuditTraceToolSummary, type AugmentContextOptions, type AuthorizedShellExecution, AutoCheckpointHandler, AutoMemory, type AutoMemoryContext, type AutoMemoryTrigger, AutoPermissionClassifier, type AutoPermissionDecision, BUILT_IN_XENO_PROVIDER_PRESETS, type BackgroundOwnerCleanupResult, type BackgroundOwnerCleanupToken, BackgroundProcessManager, type BackgroundTask, type BaseHookDefinition, type BenchBashMiddlewareOptions, type BlockContent, type BlockType, type BoundedShellOutput, type BreakpointCallback, type BuildResult, type BuildXenoSecureExecutionContractOptions, COMPAT_TOOL_ALIASES, CONFIG_VERSION, type CanonicalSecurityPath, type CanvasSize, type CapabilityLeaseCommand, type CapabilityLeasePersistence, type CapabilityLeaseTransaction, type CapabilityMutationAck, type CapabilityMutationReceipt, type CellRangeData, type ChartConfig, type ChatCompletionChunk, type ChatCompletionRequest, type ChatCompletionResponse, type ChatMessage, type ChatParams, type ChatResponse, type CheckpointData, type CheckpointInfo, CheckpointManager, type CheckpointTrigger, type ClaimXenoHandoffInput, type ClashResult, type CliAutomationAuditEvent, type CliAutomationAuditLoggerPort, type CliAutomationEnvironment, type CliAutomationStatusReport, type CliAutomationSurfaceStatus, CliGovernedAutomationRuntime, type ClipContext, type CodeApplyOptions, type CodeApplyResult, type CodeValidationIssue, type CodeValidationResult, CodeValidator, type CodingBenchmarkAssessment, type CodingBenchmarkMeasurement, type CodingBenchmarkOptions, type CodingBenchmarkReport, type CodingBenchmarkThreshold, type CommandBackedProtectedStateOptions, type CommandHookDefinition, CommandHookRunner, type CompactionRecord, type CompileAgentProfileOptions, type CompiledAgentProfile, type CompiledJsonSchema, type CompletionDecision, type CompletionGuard, type CompletionGuardContext, type CompletionGuardDecision, type CompletionGuardEvaluationContext, CompletionGuardRegistry, type CompletionGuardResult, type CompletionGuardResultObject, type CompletionGuardStopReason, type CompletionGuardToolPolicy, type CompletionGuardToolPolicyMode, type CompletionGuardTurnStats, type CompletionGuardVeto, type ComponentData, type CompressionLLMFn, type CompressionStats, type ConfigProfile, type ConnectConfiguredMCPServersOptions, type ConnectConfiguredMCPServersResult, type ContainedProcessSpec, type ContainmentAdapterIdentity, ContainmentApprovalError, type ContainmentCertificationBinding, ContainmentCertificationError, type ContainmentConformanceCheck, type ContentBlock, type ContextCompressedData, ContextManager, type ContextManagerConfig, type ContextSection, type ContextSource, type ControlPlaneLockHandle, type ControlPlaneLockRecord, ConversationStore, type CreateAuditBackedPermissionEngineOptions, type CreateCliGovernedAutomationRuntimeOptions, type CreateDelegatedBranchAgent, type CreateDelegatedBranchAgentOptions, type CreateDelegatedXenoAgentOptions, type CreateDispatchAgentToolOptions, type CreateXenoAgentOptions, type CreateXenoAgentResult, type CreateXenoGoalInput, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHandoffInput, type CreateXenoHandoffOptions, type CreateXenoHostGovernedAutomationRuntimeOptions, type CreateXenoShareOptions, type CreateXenoSkillToolOptions, type CreateXenoSourceResearchReportInput, type CrossAppHandler, type CrossAppMessage, CrossAppRouter, CrossAppRouterError, type CrossAppRouterOptions, DEFAULT_API_KEY, DEFAULT_IMAGE_MODEL, DEFAULT_MEMORY_BUDGETS, DEFAULT_MODEL, DEFAULT_PROMPT_SECTIONS_TOKEN_BUDGET, DEFAULT_PROTECTED_STATE_KEY_NAME, DEFAULT_PROTECTED_STATE_SERVICE, DEFAULT_SUBAGENT_BRANCH_POLICY, DEFAULT_SUBAGENT_REMOTE_MCP_BY_ROLE, DEFAULT_SUBAGENT_ROLES, DEFAULT_SUBAGENT_ROLE_PRECEDENCE, DEFAULT_SUBAGENT_TEAM_PRESET, DIRECT_SHELL_CONTEXT_WARNING, DISPATCH_AGENT_ERROR_CODES, DOCS_CAPABILITIES, DOCS_TOOL_NAMES, type DebugBreakpoint, type DebugSnapshot, type DebugStep, type DebugStepCallback, type DecideXenoArtifactRequest, type DefaultToolRegistryOptions, type DefaultWebContextRequestFactoryOptions, type DelegatedBranchAdmission, type DelegatedBranchAdmissionSettlement, type DelegatedBranchAgent, type DelegatedBranchAgentCallbacks, type DelegatedXenoTurnResult, type DelegationBudget, type DelegationLimits, type DelegationSummaryData, type DependencyEdge, type DerivedPermissionEngineOptions, type DescendantInstructionHint, type DirectEndpointPolicy, type DirectEndpointProfile, type DirectProviderCapabilityProfile, type DirectProviderConfig, type DirectProviderKind, type DirectShellMessageMetadata, type DirectShellResultRecord, type DispatchAgentErrorCode, type DispatchAgentHandler, type DispatchAgentRequest, type DispatchAgentResponse, type DispatchAgentTermination, type DocComment, type DocsAgentOptions, type DocsToolAdapter, type DocumentContext, type DualLLMMode, DualLLMProvider, type DualLLMProviderConfig, type DualLLMProviderLike, type DualLLMStatus, type DurableCapabilityLeaseOptions, DurableXenoCapabilityLeaseRegistry, DurableXenoCoordinationStore, ENGINE_CAPABILITIES, ENGINE_TOOL_NAMES, ENTER_PLAN_MODE_TOOL_NAME, EXIT_PLAN_MODE_TOOL_NAME, ElectronAgentBridge, type ElectronAgentConfig, type EngineAgentOptions, type EngineToolAdapter, type EntityInfo, type Episode, type EpisodeOutcome, EpisodicStore, type EpisodicStoreOptions, type ErrorData, type EvalReport, type EvalResult, type EvalRunOptions, type EvalTask, type ExchangeMCPOAuthCodeOptions, type ExecuteToolRequest, type ExecuteToolResult, type ExecuteXenoCoordinationActionInput, type ExecuteXenoCoordinationActionResult, ExecutionGovernance, type ExecutionGovernanceOptions, type ExecutionGovernanceSummary, type ExecutionMode, type ExecutionSecurityCapabilities, ExecutionSecurityError, type ExecutionSecurityErrorCode, type ExecutionSecurityLevel, type ExecutionTrustMode, type ExpectedOutputContract, type ExportableSoulSigner, type ExtendedAppType, FALLBACK_MODELS, type FailureCluster, type FileEntry, FileQuotaAuthority, type FileSnapshot, FileXenoArtifactRepository, type FileXenoArtifactRepositoryOptions, FileXenoProviderConnectionStore, type FileXenoProviderConnectionStoreOptions, FileXenoShareRegistry, type FileXenoShareRegistryOptions, type FilterConfig, type GovernanceExtensions, type GovernanceExtensionsOptions, HIGH_RISK_PERMISSIONS, type HarnessTask, type HarnessTaskStatus, type HarnessTaskUpdate, type HookConfig, type HookDecision, type HookDefinition, type HookEventName, type HookExecutionResult, type HookExecutionStatus, type HookInput, type HookInputBase, type HookInvocationInput, type HookModelExecutor, type HookPermissionMode, type HookRunResult, HookRunner, HookRuntime, type HookRuntimeOptions, type HttpHookDefinition, HttpHookRunner, IDENTITY_PATHS, INTERRUPTED_QUESTION_ERROR_CODE, type IdentityFrontmatter, type IdentityLayer, type IdentityLoadResult, IdentityLoader, type IdentityLoaderOptions, type IdentityPaths, IdentityResolver, type IdentitySource, type ImageContentBlock, type ImageDocumentInfo, type ImageGenerationConfig, type ImageLayerInfo, type ImageLayerType, type ImageToolAdapter, type ImageUrlBlock, InMemoryXenoArtifactRepository, type InMemoryXenoArtifactRepositoryOptions, InMemoryXenoCapabilityLeaseRegistry, type InMemoryXenoCapabilityLeaseRegistryOptions, InMemoryXenoTelemetryCollector, type InitializeSessionRuntimeOptions, type InspectSystemPromptOptions, type InstallSignalHandlersOptions, InteractiveChatTurnGovernance, InteractiveTurnGovernance, type InteractiveTurnGovernanceOptions, type IpcHandler, type JsonRpcErrorResponse, type JsonRpcMessage$1 as JsonRpcMessage, type JsonRpcNotification, type JsonRpcRequest$1 as JsonRpcRequest, type JsonRpcResponse, type JsonRpcSuccessResponse, type JsonSchema, JsonSchemaCompilationError, type JsonSchemaCompilationIssue, type JsonSchemaCompileOptions, type JsonSchemaSubset, type JsonSchemaType, type JsonSchemaValidationError, type JsonSchemaValidationResult, type LLMCompletionResult, type LLMProvider, type LLMProviderCapabilities, type LLMProviderMessage, type LLMProviderRequestContext, type ToolDefinition as LLMProviderToolDefinition, type LLMToolDefinition, type LayerContext, type LegacyXenoSkillInput, type LinuxBubblewrapCapability, type LinuxBubblewrapProcessSpec, LlmClient, type LlmClientDeps, LocalLLMProvider, type LocalLLMProviderConfig, type LocalRuntimePreflightResult, LogLevel, type LspDefinitionReport, type LspDiagnosticsReport, type LspDoctorReport, type LspDoctorServer, type LspHoverReport, type LspReferencesReport, MANIFEST_FILENAME, MAX_CONTAINMENT_APPROVAL_AGE_MS, MAX_CONTAINMENT_CERTIFICATION_BYTES, MAX_CONTAINMENT_CERTIFICATION_LIFETIME_MS, MAX_DIRECT_SHELL_OUTPUT_CHARS, MAX_PLAN_CHARS, type MCPAppCapabilities, type MCPAppContentSecurityPolicy, type MCPAppExtensionMetadata, type MCPAppMetadata, type MCPAppPermissions, type MCPAppResourceDescriptor, type MCPAppValidationResult, type MCPAppVisibility, type MCPApprovalDecision, type MCPBearerTokenRefreshHandler, type MCPBearerTokenResolver, MCPCatalogError, type MCPCatalogErrorCode, type MCPConfigFile, type MCPConfigSource, type MCPConfiguredServer, MCPConnectionError, type MCPConnectionErrorCode, type MCPElicitationAction, type MCPElicitationHandler, type MCPElicitationRequest, type MCPElicitationResponse, type MCPHttpAuthChallenge, MCPHttpTransportError, type MCPHttpUrlPhase, type MCPInitializeParams, type MCPInitializeResult, MCPManager, type MCPManagerOptions, MCPMessageTooLargeError, type MCPOAuthAuthorizationServerMetadata, type MCPOAuthAuthorizationSession, MCPOAuthClient, type MCPOAuthClientOptions, type MCPOAuthClientRegistration, type MCPOAuthClientRegistrationSource, type MCPOAuthConfig, type MCPOAuthDiscoveryResult, type MCPOAuthProtectedResourceMetadata, type MCPOAuthTokenSet, type MCPOAuthTokenStore, type MCPOAuthUrlPhase, type MCPPrompt, type MCPPromptGetParams, type MCPPromptGetResult, type MCPPromptsListResult, type MCPRegistryAccessPolicy, type MCPRegistryEntryDescriptor, type MCPRegistryEntryKind, type MCPRegistryFilter, type MCPResource, type MCPResourceReadParams, type MCPResourceReadResult, type MCPResourceSubscribeParams, type MCPResourceTemplate, type MCPResourceTemplatesListResult, type MCPResourceUnsubscribeParams, type MCPResourcesListResult, MCPServer, type MCPServerConfig, type MCPServerModeOptions, type MCPServerPromptRegistration, type MCPServerResourceRegistration, type MCPServerScope, type MCPServerState, type MCPTool, type MCPToolCallParams, type MCPToolCallResult, type MCPToolsListResult, type MCPTransport, type MCPTransportConnection, MCP_APPS_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_SCHEME, MCP_MAX_CATALOG_ENTRIES, MCP_PROTOCOL_VERSION, MCP_STDIO_MAX_MESSAGE_CHARS, MCP_SUPPORTED_PROTOCOL_VERSIONS, MEMORY_FILES, MODEL_REQUEST_TIMEOUT_PHASES, MOTION_CAPABILITIES, MOTION_SYSTEM_PROMPT, MOTION_TOOL_NAMES, type ManifestValidationResult, type MaterialConfig, type MaterializeXenoAutomationEvidenceOptions, type MemoryAccessScope, type MemoryBudget, type MemoryEntry, type MemoryFile, type MemoryLevel, MemoryManager, type MemoryManagerOptions, type MeshInfo, type Message, MessageFlow, type MessageFlowDeps, type ModeSwitchRequest, type ModelInfo, type ModelProvider, ModelProviderRegistry, type ModelRequestDeadlines, ModelRequestTimeoutError, type ModelRequestTimeoutPhase, ModelResponseIncompleteError, type ModelWorkAccounting, type ModelWorkRequestIdentity, type ModelWorkSettlement, type MonitorEvent, MonitorManager, type MonitorSnapshot, type MonitorSource, MonitorStopTool, MonitorTool, type MotionAgentOptions, type MotionPromptParams, type MxcContainmentProbe, type MxcNativeAssetDescriptor, type MxcWindowsHostPreparationReport, NOTES_CAPABILITIES, NOTES_TOOL_NAMES, type NormalizedLspDiagnostic, type NormalizedLspHover, type NormalizedLspLocation, type NormalizedLspRange, type NotePageInfo, type NoteSearchResult, type NotesAgentOptions, type NotesToolAdapter, type OllamaNativeProviderConfig, type OnChunkCallback, type OnTaskCompleteInput, type OnTaskCompleteResult, type OpenTelemetryMetricAdapter, type OperationTaskSource, type OsProtectedStateStoreOptions, OtelExporter, type OtelUsageAdapter, PATCH_DIRECTIVES, PATCH_ENVELOPE_BEGIN, PATCH_ENVELOPE_END, PATCH_LINE_PREFIXES, PEER_MESSAGE_DEFAULT_TTL_MS, PEER_PRESENCE_TTL_MS, PEER_SCHEMA_VERSION, PEER_TASK_TERMINAL_STATUSES, PIXEL_CAPABILITIES, PIXEL_SYSTEM_PROMPT, PIXEL_TOOL_NAMES, PROCESS_TREE_ADAPTERS, PROJECT_STATE_VERSION, PROVIDER_TOOL_NAME_PATTERN, type ParameterizedPermissionRule, type ParseUnifiedDiffOptions, type ParsedPatch, type PatchFileSection, type PatchHunk, type PatchLine, type PatchParseError, type PatchParseErrorCode, type PeerAddress, type PeerDelivery, type PeerDeliveryStatus, type PeerInboundPolicy, type PeerMessage, type PeerMessageKind, PeerMessagingStore, type PeerMessagingStoreOptions, type PeerPermissionPosture, type PeerPresence, type PeerPresenceState, type PeerResolution, type PeerSendInput, type PeerSendOutcome, type PeerSurface, type PeerTask, type PeerTaskStatus, type PermissionCheckContext, type PermissionConfig, type PermissionDecision, type PermissionDecisionEvent, type PermissionDecisionHook, PermissionEngine, type PermissionInfo, type PermissionProfile, type PermissionProfileDecision, type PermissionProfileMode, type PermissionProfileName, type PermissionProfileNetworkDecision, type PermissionProfileResolution, type PermissionPromptFn, type PermissionPromptInfo, type PermissionPromptOperation, type PermissionPromptPreview, type PermissionPromptPreviewLine, type PermissionRequestContext, type PermissionRequestInfo, type PermissionRequestResult, type PermissionRule, type PermissionToolMetadata, type PersistentPermissionState, type PixelAgentOptions, type PixelPromptParams, type ExecutingPermissionMode as PlanApprovalPermissionMode, type PlanModeEnterDecision, type PlanModeEnterRequest, type PlanModeReadOnlyClaim, type PlanModeToolPolicy, type PlanModeToolsOptions, type PlanReviewDecision, type PlanReviewRequest, type PlatformInfo, type PluginActivationEvent, type PluginAuthor, type PluginCapability, type PluginCommandContribution, type PluginCommandHandler, type PluginContext, type PluginContributions, type PluginDetachedSignature, type PluginEngineConstraint, type PluginEvent, PluginEventBus, type PluginEventListener, type PluginEventType, type PluginHook, PluginHost, type PluginHostInfo, type PluginHostOptions, type PluginInfo, type PluginListing, type PluginLogger, PluginManager, type PluginManagerOptions, type PluginManifest, PluginMarketplace, type PluginMarketplaceOptions, type PluginOutputStyleContribution, type PluginPermission, type PluginPromptContribution, type PluginPublishOptions, type PluginRelevanceCandidate, type PluginRelevanceHints, type PluginRelevanceSuggestion, type PluginRepositorySignal, PluginSandbox, type PluginSandboxOptions, type PluginScaffoldOptions, type PluginSearchOptions, type PluginSettingContribution, PluginSettingsManager, type PluginSignatureStatus, type PluginStatus, type PluginStorage, type PluginSupplyChainLockfile, type PluginSupplyChainRecord, type PluginTestCase, type PluginTestResult, PluginToolBuilder, type PluginToolContribution, type PluginTrustBadge, type PluginUIPanel, type PolicyCheckResult, type PolicyEnforcerConfig, type PrepareMCPOAuthAuthorizationOptions, type ProbeXenoProviderOptions, type ProcessContainmentStatus, type ProcessTreeAdapter, type ProfileMCPServerConfig, ProfileManager, type ProjectConfig, type ProjectDomainProfile, type ProjectExecutionPhase, type ProjectExecutionProfile, type ProjectInfo, type ProjectMcpApprovalDecision, type ProjectSessionContext, type ProjectSessionContextEntry, type ProjectSessionSummary, type ProjectTokenUsageSummary, type PromotionRequestResult, type PromptContext, type PromptFn, type PromptHookDefinition, PromptHookRunner, type PromptMemoryContextInfo, type PromptSectionContext, type PromptSectionProvider, PromptSectionRegistry, type ProtectedFileHelperRunner, ProtectedFileWriteError, type ProtectedFileWriteReceipt, type ProtectedStateCipher, type ProtectedStateEnvelopeCipher, type ProtectedStateEnvelopeCipherOptions, type ProtectedStateEnvelopeV1, type ProtectedStateStore, ProviderError, type ProviderErrorCategory, type ProviderErrorCode, type ProviderErrorOptions, type ProviderStatus, type ProviderStreamEvent, type ProviderTransportLimits, QueryLifecycle, type QueryLifecycleOptions, type QueryState, type QueryTransition, type QueryWatchdogReason, QuotaAcknowledgementError, type QuotaAcknowledgementPhase, type QuotaAuthority, type QuotaEntity, QuotaError, type QuotaGovernorOptions, type QuotaLimits, type QuotaReservation, type QuotaScope, READ_ONLY_TOOL_NAMES, REQUIRED_CONTAINMENT_CONFORMANCE_CHECKS, type RecalledEpisode, type RecalledSkill, type RecentSessionEntry, type RecentSessionsIndex, type ReducedResult, type ReducerOptions, type RegisterToolOperationInput, type RegisteredTool, type RenderConfig, type RequestBudgetBreakdown, type RequestDeadline, type ResolveXenoSdkApiKeyOptions, type ResolvedIdentity, type ResolvedMemory, type ResolvedProvider, type ResolvedSubagentWorkflowAnswer, type ResourceContentBlock, type RoomInfo, type RunAuthority, type RunAuthorityDispatch, RunAuthorityRefusedError, type RunAuthorityToolCall, type RunContainmentConformanceOptions, type RunDelegatedXenoTurnOptions, type RunStreamOptions, type RuntimeManifestFileEntry, type RuntimeManifestInspectionResult, type RuntimePluginManifestEntry, SDK_DEFAULT_MAX_ITERATIONS, SDK_DEFAULT_MAX_TOKENS, SDK_VERSION, SESSION_FORMAT_VERSION, SHEETS_CAPABILITIES, SHEETS_TOOL_NAMES, SLIDES_CAPABILITIES, SLIDES_TOOL_NAMES, SOUND_CAPABILITIES, SOUND_SYSTEM_PROMPT, SOUND_TOOL_NAMES, SSETransport, SUBAGENT_ROLE_ALIASES, SUBAGENT_TEAM_PRESETS, type SandboxCheckResult, type ScoredMemory, ScreenCapture, type ScreenCaptureConfig, type ScreenCaptureOptions, type SearchConfig, type SearchProvider, type SecuredProcessSpec, type SecurityPathIssue, type SecurityPathIssueCode, type Session, type SessionCreateOptions, type SessionData, type SessionEndData, type SessionForkRecord, type SessionIntegrationConfig, SessionLock, SessionLock as SessionLockManager, SessionManager, type SessionMeta, type SessionRecoveryIssue, type SessionRecoveryResult, type SessionRecoverySource, SessionRegistry, type SessionResumeOptions, type SessionRuntimeBaseOptions, type SessionRuntimeState, type SessionStartData, type SessionStatus, type SessionSummary, type SetXenoArtifactCommentResolutionRequest, type SetupAIHandlersOptions, type ShapeConfig, type SheetsAgentOptions, type SheetsToolAdapter, type ShellExecutionAuthorization, type ShellExecutionAuthorizationRequest, type ShellPathReference, type ShutdownCleanup, type Skill, SkillStore, type SkillStoreOptions, type SlideInfo, type SlidesAgentOptions, type SlidesToolAdapter, type SortConfig, type SoulCompletion, SoulEngine, type SoulEngineOptions, type SoulMessage, type SoulSigner, type SoundAgentOptions, type SoundPromptParams, type SpeechRecognizer, type SpeechRecognizerCallbacks, type SpeechRecognizerConfig, SqliteAutomationExecutionJournal, SqliteCapabilityLeasePersistence, type StartXenoLoopInput, StdioTransport, type StemSeparationResult, type StopReason, type StoredConversation, type StoredMessage, type StoredToolCall, type StoredToolOutput, type StreamResult, StreamableHTTPTransport, type StreamableHTTPTransportOptions, type StreamableHTTPTransportSnapshot, SubagentBranchCancelledError, type SubagentBranchPolicy, type SubagentBriefContext, type SubagentExecuteFn, type SubagentExecutionRequest, type SubagentExecutionResponse, type SubagentRemoteMcpAccess, type SubagentResult, type SubagentRole, type SubagentTask, type SubagentTeamPreset, type SubagentTeamPresetDefinition, type SubagentWorkflowMode, type SubagentWorkflowOptions, type SubagentWorkflowResult, type SynthesizeSkillInput, type SystemPromptInspectionResult, THREE_D_CAPABILITIES, THREE_D_TOOL_NAMES, TOOL_OPERATION_SCHEMA_VERSION, TOOL_OPERATION_TERMINAL_STATES, MAX_READ_BYTES as TOOL_OUTPUT_MAX_READ_BYTES, type TaskCompletionCallback, TaskListManager, type TestResult, type TextBlock, type ThreeDAgentOptions, type ThreeDToolAdapter, type TimelineInfo, type TokenUsageTotals, type ToolAnnotationHints, type ToolAssistantContentBlock, type ToolAuthorizationReceipt, type ToolCallData, type ToolCompletionPolicy, type ToolContinuationCheckpoint, type ToolContinuationGoal, type ToolContinuationNotification, type ToolDefinition, type ToolEvidence, type ToolExchangeRepairResult, type ToolExecutionContext, type ToolExecutor, type ToolFailureCategory, type ToolFailureGuardTrip, ToolFailureLoopGuard, type ToolHistoryRepairDiagnostic, type ToolManifestEntry, type ToolMiddleware, type ToolMiddlewareContext, ToolMiddlewareRegistry, type ToolNameCodec, type ToolOperationEvent, ToolOperationManager, type ToolOperationRuntimeEventType, type ToolOperationSnapshot, type ToolOperationState, type ToolOperationTerminalState, ToolOrchestrator, type ToolOrchestratorCallbacks, type ToolOrchestratorConfig, type ToolOrigin, type ToolOutputRange, type ToolOutputReadError, type ToolPolicyProjection, type ToolPolicyProjectionContext, type ToolProgressUpdate, ToolRegistry, type ToolRegistryOptions, type ToolResult, type ToolResultBlock, type ToolResultContent, type ToolResultData, type ToolRiskLevel, type ToolRuntimeContext, type ToolSchemaProjectionChange, ToolSchemaProjectionError, type ToolSchemaProjectionResult, type ToolSchemaProviderDialect, type ToolUseBlock, type TraceGraph, type TraceGraphEdge, type TraceGraphNode, type TrackContext, type TranscriptBytePage, type TranscriptBytePageOptions, type TranscriptEvent, type TranscriptEventData, type TranscriptEventType, type TranscriptPageRecord, type TranscriptRecordPage, type TranscriptRecordPageOptions, TranscriptWriter, type TranscriptionResult, type TranscriptionSegment, type TransitionConfig, type TurnDiffSummary, TurnDiffTracker, type TurnDiffTrackerOptions, type TurnFileDiff, type TurnRestoreAvailability, type TurnRestoreFilePreview, TurnRestoreManager, type TurnRestorePoint, type TurnRestoreResult, UNANSWERED_QUESTION_PREFIX, UNBOUNDED_OPERATION_CONTINUATION_LIMIT, type UnansweredQuestion, type UnifiedExecCompletionReason, UnifiedExecError, type UnifiedExecEvent, type UnifiedExecEventListener, type UnifiedExecEventType, type UnifiedExecInputSource, UnifiedExecManager, type UnifiedExecManagerOptions, type UnifiedExecMode, type UnifiedExecOrigin, type UnifiedExecOutput, type UnifiedExecOutputChunk, type UnifiedExecOutputDelta, type UnifiedExecPresentation, type UnifiedExecProcess, type UnifiedExecReadDeltaOptions, type UnifiedExecStartOptions, type UnifiedExecStatus, type UnifiedExecStream, type UpdateXenoGoalInput, UsageAccumulator, type UsageAttribution, type UsageEvent, UsageLedger, type UsageQuery, type UsageTotals, type ValidateXenoSdkApiKeyOptions, type ValidatedContainmentCertification, type ValidationSignal, type VectorDocument, VectorMemoryStore, type VectorSearchResult, type VectorStoreAdapter, type VectorStoreOptions, type VerifyContainmentApprovalExpected, type VerifyPluginSupplyChainOptions, type VerifyPluginSupplyChainResult, type VerifyXenoHostedWebhookOptions, type VerifyXenoShareOptions, type VideoToolAdapter, WEB_CONTEXT_CONTRACT_VERSION, WEB_CONTEXT_TOOL_RESULT_SCHEMA, WORKFLOW_CAPABILITIES, WORKFLOW_TOOL_NAMES, type WebContextClientPort, type WebContextEvidenceProjection, type WebContextRequestBase, type WebContextRequestFactory, type WebContextToolOptions, type WebContextToolResult, type WebContextWaitPortOptions, type WebSearchResult, type WindowsDpapiCredentialFile, type WindowsDpapiProtectedFileOptions, type WindowsDpapiProtectedStateOptions, type WorkflowAgentOptions, type WorkflowDefinition, type WorkflowEvent, type WorkflowExecutionResult, type WorkflowInfo, type WorkflowNodeConfig, type WorkflowNodeDefinition, type WorkflowNodeExecutor, type WorkflowNodeStatus, type WorkflowPlan, WorkflowPlanner, type WorkflowRunNodeRecord, type WorkflowRunRecord, type WorkflowRunStatus, WorkflowRuntime, WorkflowStore, type WorkflowToolAdapter, WorkspaceIndex, type WorkspaceScanOptions, XENO_AGENT_PROFILE_SCHEMA_VERSION, XENO_API_BASE, XENO_APP_PROTOCOL_V2_METHODS, XENO_APP_PROTOCOL_VERSIONS, XENO_ARTIFACT_ACTOR_KINDS, XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION, XENO_ARTIFACT_SCHEMA_VERSION, XENO_ARTIFACT_SENSITIVITIES, XENO_ARTIFACT_STATES, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BROWSER_CONTROL_PLANE_OPERATIONS, XENO_BUILTIN_ARTIFACT_KINDS, XENO_CAPABILITY_LEASE_SCHEMA_VERSION, XENO_CONTAINMENT_APPROVAL_SCHEMA, XENO_CONTAINMENT_CERTIFICATION_SCHEMA, XENO_CONTAINMENT_CONFORMANCE_SCHEMA, XENO_CONTAINMENT_REVIEWER_TRUST_STORE_SCHEMA, XENO_CONTEXT_DIGEST_PATTERN, XENO_CONTROL_ROOM_SCHEMA_VERSION, XENO_COORDINATION_BUDGET_SESSION_SCHEMA_VERSION, XENO_COORDINATION_MANAGED_SESSION_SCHEMA_VERSION, XENO_COORDINATION_SCHEMA_VERSION, XENO_COORDINATION_TURN_SESSION_SCHEMA_VERSION, XENO_DEFLATE_CODEC_NAME, XENO_DEFLATE_CODEC_VERSION, XENO_EVIDENCE_EDGE_TYPES, XENO_EVIDENCE_GRAPH_SCHEMA_VERSION, XENO_EVIDENCE_NODE_TYPES, XENO_GIF_ANIMATION_POLICY, XENO_GIF_CODEC_NAME, XENO_GIF_CODEC_VERSION, XENO_HANDOFF_SCHEMA_VERSION, XENO_HOSTED_CONTROL_SCHEMA_VERSION, XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION, XENO_HOSTED_EVENT_SCHEMA_VERSION, XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA, XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS, XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_TOOL_NAMES, XENO_HOSTED_RESULT_SCHEMA_VERSION, XENO_HOSTED_RUN_SCHEMA_VERSION, XENO_HOSTED_TRIGGER_SCHEMA_VERSION, XENO_JPEG_CODEC_NAME, XENO_JPEG_CODEC_VERSION, XENO_MXC_ADAPTER_NAME, XENO_MXC_POLICY_VERSION, XENO_MXC_VERSION, XENO_ORACLE_REPORT_SCHEMA_VERSION, XENO_PAGE_ENTRY, XENO_PAGE_MAX_BYTES, XENO_PAGE_MAX_FILES, XENO_PLUGIN_LOCK_FILENAME, XENO_PLUGIN_LOCK_SCHEMA_VERSION, XENO_PLUGIN_SIGNATURE_FILENAME, XENO_PLUGIN_SIGNATURE_SCHEMA_VERSION, XENO_PROCESS_TREE_KILL_TIMEOUT_MS, XENO_PROVIDER_CATALOG_SCHEMA_VERSION, XENO_PROVIDER_CONNECTION_STORE_SCHEMA_VERSION, XENO_RASTER_CODEC_NAME, XENO_RASTER_CODEC_VERSION, XENO_RASTER_PREVIEW_FORMATS, XENO_RECIPE_SCHEMA_VERSION, XENO_REPOSITORY_INDEX_SCHEMA_VERSION, XENO_REVIEW_DIMENSIONS, XENO_REVIEW_EVIDENCE_KINDS, XENO_REVIEW_REPORT_SCHEMA_VERSION, XENO_RT_DEFAULT_URL, XENO_SECURE_EXECUTION_CONTRACT_SCHEMA_VERSION, XENO_SHARE_REGISTRY_SCHEMA_VERSION, XENO_SHARE_SCHEMA_VERSION, XENO_SKILL_SCHEMA_VERSION, XENO_SLASH_REFUSAL_NOTHING_SENT, XENO_SOURCE_RESEARCH_SCHEMA_VERSION, XENO_SPEC_EXECUTION_SCHEMA_VERSION, XENO_SPEC_SCHEMA_VERSION, XENO_SVG_RENDERER_NAME, XENO_SVG_RENDERER_VERSION, XENO_TELEMETRY_SCHEMA_VERSION, XENO_UNSUPPORTED_SLASH_COMMAND_REASON, XENO_VP8_CODEC_NAME, XENO_VP8_CODEC_VERSION, XENO_WEBP_ANIMATION_POLICY, XENO_WEBP_CODEC_NAME, XENO_WEBP_CODEC_VERSION, type XenoAnsiEscapeFamily, type XenoAnsiFormatter, type XenoAnsiPolicy, type XenoAnsiStyle, type XenoAnsiToken, type XenoAnsiWrapOptions, type XenoAppProtocolVersion, XenoAppServer, type XenoAppServerOptions, XenoAppServerV2Client, type XenoArtifactActor, type XenoArtifactActorKind, type XenoArtifactAnchor, type XenoArtifactAppendReviewRequest, type XenoArtifactContent, type XenoArtifactEnvelope, type XenoArtifactFileRecoveryNotice, type XenoArtifactFileSnapshot, type XenoArtifactIdentity, type XenoArtifactKind, type XenoArtifactLifecycleEvent, type XenoArtifactListQuery, type XenoArtifactMutationOptions, type XenoArtifactPersistedRecord, type XenoArtifactProvenance, type XenoArtifactRecord, type XenoArtifactRelationship, type XenoArtifactRepository, XenoArtifactRepositoryError, type XenoArtifactRepositoryErrorCode, type XenoArtifactRepositoryState, type XenoArtifactRetention, type XenoArtifactReviewAnchorInput, type XenoArtifactReviewDecision, type XenoArtifactReviewEvent, type XenoArtifactReviewEventInput, XenoArtifactReviewService, type XenoArtifactReviewServiceOptions, type XenoArtifactReviewSummary, type XenoArtifactRevisionOptions, type XenoArtifactSensitivity, type XenoArtifactState, XenoArtifactStateTransitionError, type XenoArtifactStorageReference, type XenoArtifactTransitionRequest, XenoArtifactValidationError, type XenoArtifactValidationIssue, XenoAuthError, type XenoAuthErrorCode, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionJournal, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationJournalIdentity, type XenoAutomationJournalRecord, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBasicRasterImage, type XenoBoundedProcessOutcome, type XenoBoundedProcessRunner, type XenoBoundedProcessRunnerSync, type XenoBrowserAutomationOperation, XenoBrowserControlPlaneAdapter, type XenoBrowserControlPlaneAdapterOptions, type XenoBrowserExecutionPolicy, type XenoCapabilityEffect, type XenoCapabilityEligibility, type XenoCapabilityKind, type XenoCapabilityLease, type XenoCapabilityLeaseApprovalContext, type XenoCapabilityLeaseApprovalRequest, type XenoCapabilityLeaseDenialRequest, XenoCapabilityLeaseError, type XenoCapabilityLeaseErrorCode, type XenoCapabilityLeaseRequest, type XenoCapabilityLeaseRevocationRequest, type XenoCapabilityLeaseState, type XenoCapabilityScope, type XenoCapabilitySubject, type XenoCapabilityUse, type XenoColorDepth, type XenoColorPolicy, type XenoCompiledRecipe, type XenoCompiledRecipeStep, type XenoComputerAutomationOperation, type XenoComputerExecutionPolicy, type XenoConfig, type XenoContainmentApprovalReport, type XenoContainmentCertificationApproval, type XenoContainmentCertificationManifest, type XenoContainmentConformanceReport, type XenoContainmentReviewerTrustStore, type XenoContentHash, type XenoControlRoomActionKind, type XenoControlRoomActionPlan, type XenoControlRoomActionRequest, type XenoControlRoomAgent, type XenoControlRoomAgentInput, type XenoControlRoomAgentStatus, type XenoControlRoomApprovalInput, type XenoControlRoomApprovalKind, type XenoControlRoomArtifactInput, type XenoControlRoomAttentionItem, type XenoControlRoomAttentionKind, type XenoControlRoomGoalInput, type XenoControlRoomInput, type XenoControlRoomMonitorInput, type XenoControlRoomNotificationInput, type XenoControlRoomProjectionOptions, type XenoControlRoomSnapshot, type XenoControlRoomStatusCategory, type XenoControlRoomSummary, type XenoControlRoomTask, type XenoControlRoomTaskInput, type XenoControlRoomUsage, XenoControlRoomValidationError, type XenoCoordinationAction, type XenoCoordinationAdmissionFence, XenoCoordinationError, type XenoCoordinationEvent, type XenoCoordinationEventType, type XenoCoordinationSessionState, type XenoCoordinationStoreOptions, type XenoCreatedShare, type XenoCredentialSource, type XenoCredentialType, type XenoDesktopCaptureSource, type XenoDesktopCapturer, type XenoDiffArtifactContext, type XenoDiffDocument, type XenoDiffFile, type XenoDiffFileStatus, type XenoDiffHunk, type XenoDiffLine, type XenoDiffLineKind, type XenoDiffMode, XenoDiffParseError, type XenoDurableAutomationOptions, type XenoEd25519Signature, type XenoEnvironmentExecutionPolicy, type XenoEvidenceEdge, type XenoEvidenceEdgeType, type XenoEvidenceGraph, XenoEvidenceGraphBuilder, type XenoEvidenceGraphBuilderOptions, XenoEvidenceGraphValidationError, type XenoEvidenceNode, type XenoEvidenceNodeType, type XenoEvidenceReference, type XenoExecutionAdapterIdentity, type XenoExecutionEnforcement, type XenoExecutionIdentity, XenoExecutionLeaseSession, type XenoExecutionLeaseSessionOptions, type XenoExecutionLeaseStore, type XenoExecutionOwner, type XenoExternalActionExecutionPolicy, type XenoFilesystemExecutionPolicy, type XenoGifAnimation, type XenoGifDisposal, type XenoGifFrame, type XenoGitHubReviewComment, type XenoGoalCriterion, type XenoGoalCriterionResult, type XenoGoalMilestone, type XenoGoalProgress, type XenoGoalRecord, type XenoGoalStatus, type XenoGoalTask, type XenoGoalTaskStatus, type XenoGoalTurnAdmission, type XenoGoalTurnRequest, type XenoGoalTurnState, type XenoGoalVerification, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHandoffAuthority, type XenoHandoffOperation, type XenoHandoffPayload, type XenoHandoffRecord, type XenoHandoffResumePoint, type XenoHandoffSnapshot, type XenoHandoffSnapshotFile, type XenoHandoffSnapshotManifest, type XenoHandoffStatus, type XenoHandoffStatusInput, type XenoHandoffStatusReceipt, type XenoHandoffTarget, type XenoHostAutomationAuditEvent, type XenoHostAutomationAuditLoggerPort, type XenoHostAutomationEnvironment, type XenoHostAutomationStatusReport, type XenoHostAutomationSurfaceStatus, CliGovernedAutomationRuntime as XenoHostGovernedAutomationRuntime, type XenoHostedArchitecture, type XenoHostedAuthority, type XenoHostedBudget, type XenoHostedCacheMount, type XenoHostedControlAcknowledgement, type XenoHostedControlAction, type XenoHostedControlCommand, type XenoHostedControlCommandPayload, type XenoHostedEnvironmentManifest, type XenoHostedEnvironmentManifestPayload, type XenoHostedEventRecord, type XenoHostedExecutionAdapterCertification, type XenoHostedExecutionAdapterVerificationOptions, type XenoHostedExecutionBoundaryReceipt, type XenoHostedExecutionJob, XenoHostedExecutionJobError, type XenoHostedExecutionJobVerification, type XenoHostedExecutionSecretValue, type XenoHostedImageReference, type XenoHostedNetworkDestination, type XenoHostedNetworkPolicy, type XenoHostedOs, type XenoHostedQuotaLease, type XenoHostedReplayCursor, type XenoHostedReplayPage, type XenoHostedRepositorySource, type XenoHostedResourceLimits, type XenoHostedRetentionPolicy, type XenoHostedRunRecord, type XenoHostedRunRequest, type XenoHostedRunResult, type XenoHostedRunResultPayload, type XenoHostedRunStatus, type XenoHostedSecretProjection, type XenoHostedSetupStep, type XenoHostedSlashCommandRefusal, type XenoHostedTriggerDefinition, type XenoHostedTriggerDelivery, type XenoHostedTriggerKind, type XenoHostedWebhookSource, type XenoHostedWebhookVerification, type XenoJsonObject, type XenoJsonPrimitive, type XenoJsonValue, type XenoJwtPayload, type XenoLegacyAgentArtifactContext, type XenoLegacyArtifactContext, type XenoLoadedSkill, type XenoLoopIteration, type XenoLoopKind, type XenoLoopRecord, type XenoLoopSchedule, type XenoLoopStatus, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, XenoMultiAgentReviewCoordinator, type XenoMultiAgentReviewCoordinatorOptions, type XenoNetworkDestination, type XenoNetworkExecutionPolicy, type XenoOracleAdjudication, type XenoOracleAdjudicationDraft, type XenoOracleAdjudicationRequest, type XenoOracleAdjudicationResult, type XenoOracleArtifactContext, type XenoOracleCitation, type XenoOracleClaim, XenoOracleCoordinator, type XenoOracleCoordinatorOptions, type XenoOracleDisagreement, type XenoOracleExecutionRequest, type XenoOracleExecutionResult, type XenoOracleModelIdentity, type XenoOracleOpinion, type XenoOracleOpinionDraft, type XenoOracleReport, type XenoOracleRole, type XenoOracleRunOptions, XenoOracleValidationError, type XenoOracleVerdict, type XenoPageFileInput, type XenoPageFileRecord, type XenoPageHome, type XenoPagePublication, XenoPageStore, type XenoPageStoreOptions, type XenoProcessExecutionPolicy, type XenoProcessTreeKillOptions, type XenoProcessTreeKillReason, type XenoProcessTreeKillResult, type XenoProcessTreeKillTool, type XenoProjectState, type XenoProviderAdapterKind, type XenoProviderAuthPreset, type XenoProviderCapabilities, XenoProviderCatalog, type XenoProviderConnection, type XenoProviderConnectionSnapshot, type XenoProviderConnectionView, type XenoProviderCredentialMode, type XenoProviderModelDescriptor, type XenoProviderPreset, type XenoProviderProbeResult, type XenoProviderReadiness, type XenoProviderRouteCandidate, type XenoProviderRoutingPolicy, type XenoPtyAdapter, type XenoPtyProcess, type XenoPtySpawnOptions, type XenoPublishPageInput, type XenoPublishedPage, type XenoRasterImage, type XenoRasterPreview, type XenoRecipeDefinition, type XenoRecipeInputDefinition, type XenoRecipeMode, type XenoRecipePermissionMode, type XenoRecipeStepDefinition, XenoRecipeValidationError, type XenoRedactionCategory, type XenoRedactionEvent, type XenoRedactionOptions, type XenoRedactionReport, type XenoRedactionResult, type XenoRemoteRepositoryIdentity, type XenoRemoteSourceFile, type XenoRemoteSourceProvider, type XenoRepositoryChunk, type XenoRepositoryDocumentKind, type XenoRepositoryEmbedding, type XenoRepositoryEmbeddingProvider, type XenoRepositoryEmbeddingRequest, type XenoRepositoryFileRecord, type XenoRepositoryFreshnessInput, type XenoRepositoryFreshnessReport, type XenoRepositoryGitProvenance, type XenoRepositoryIndexBuildOptions, XenoRepositoryIndexFileStore, type XenoRepositoryIndexSnapshot, type XenoRepositoryIndexStats, type XenoRepositoryRelationship, type XenoRepositoryRelationshipKind, type XenoRepositorySearchMode, type XenoRepositorySearchQuery, type XenoRepositorySearchResponse, type XenoRepositorySearchResult, type XenoRepositorySourceDocument, type XenoRepositorySymbol, type XenoRepositorySymbolGraph, type XenoRepositorySymbolKind, type XenoRequestContext, type XenoResolvedApiKey, type XenoReviewAgentExecutor, type XenoReviewAgentResult, type XenoReviewArtifactContext, type XenoReviewCoordinatorContext, type XenoReviewDimension, type XenoReviewEvidence, type XenoReviewEvidenceKind, type XenoReviewFinding, type XenoReviewFindingProposal, type XenoReviewFindingState, type XenoReviewPack, type XenoReviewReport, type XenoReviewSeverity, type XenoReviewTarget, XenoReviewValidationError, type XenoReviewVerificationOutcome, type XenoReviewVerificationResult, type XenoReviewVerifierExecutor, type XenoRuntimeEvent, type XenoRuntimeEventBase, XenoRuntimeEventBus, type XenoRuntimeEventDraft, type XenoRuntimeEventSink, type XenoRuntimeEventType, type XenoSecretProjection, type XenoSecureExecutionContract, XenoSecureExecutionContractError, type XenoSecureExecutionContractErrorCode, type XenoShareAccessPolicy, type XenoShareContent, type XenoShareGitContext, type XenoShareIssuer, type XenoSharePayload, type XenoSharePrincipal, type XenoShareReference, type XenoShareRegistryRecord, type XenoShareRegistrySnapshot, type XenoShareSessionIdentity, type XenoShareSigningIdentity, type XenoShareStatus, type XenoShareSurface, type XenoShareVerificationResult, type XenoShareVisibility, type XenoSignedHandoffEnvelope, type XenoSignedShareEnvelope, type XenoSkillActivation, type XenoSkillAuditEvent, type XenoSkillCatalog, type XenoSkillDescriptor, type XenoSkillDiagnostic, type XenoSkillDiscoveryOptions, type XenoSkillDiscoveryRoot, type XenoSkillExternalActionPolicy, type XenoSkillInvocationDecision, type XenoSkillInvocationPolicy, type XenoSkillResourceDescriptor, type XenoSkillShadowRecord, type XenoSkillSource, type XenoSkillTool, type XenoSkillToolPolicy, type XenoSlashGuardOptions, type XenoSlashInputClassification, type XenoSourceResearchArtifactContext, type XenoSourceResearchExcerpt, type XenoSourceResearchFinding, type XenoSourceResearchModelIdentity, type XenoSourceResearchReport, type XenoSourceResearchSeverity, XenoSourceResearchValidationError, type XenoSpecAcceptanceCriterion, type XenoSpecArtifactBundle, type XenoSpecArtifactContext, type XenoSpecDesign, type XenoSpecDesignDecision, type XenoSpecDocument, type XenoSpecDriftFinding, type XenoSpecDriftReport, type XenoSpecExecutionRecord, type XenoSpecExecutionState, XenoSpecLifecycleService, type XenoSpecLifecycleServiceOptions, type XenoSpecPriority, type XenoSpecRequirement, type XenoSpecRisk, type XenoSpecSourceBaseline, type XenoSpecTask, type XenoSpecTaskExecution, type XenoSpecTaskStatus, XenoSpecValidationError, type XenoTelemetryAttributeValue, type XenoTelemetryRecord, type XenoTelemetrySignalKind, type XenoTelemetrySubscriber, type XenoThreadRunOptions, type XenoThreadRunResult, XenoTraceGraphRecorder, type XenoUserConfig, type XenoVerifiedHostedExecutionAdapterCertification, type XenoVp8Image, acquireControlPlaneLock, activateSessionRuntime, addProjectAllowedDirectory, addProjectAllowedTool, agentDefinitionFromProfile, agentProfileFromDefinition, appServerSlashCommandRefusal, appendBoundedShellOutput, appendGuidanceToResult, applyPatch, approveMcpServer, areSignalHandlersInstalled, artifactCompareTool, askUserTool, assertDirectEndpointResolution, assertPersistedXenoCapabilityLease, assertRequiredXenoAutomationEvidence, assertSupportedMcpProtocolVersion, assertUsableXenoApiKey, assertValidMcpAppResource, assertValidXenoArtifact, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertValidXenoEvidenceGraph, assertValidXenoHostedExecutionJob, assertValidXenoOracleReport, assertValidXenoRecipeDefinition, assertValidXenoReviewPack, assertValidXenoReviewReport, assertValidXenoReviewTarget, assertValidXenoSecureExecutionContract, assertValidXenoSourceResearchReport, assertValidXenoSpecDocument, assertValidXenoSpecExecution, assertXenoArtifactStateTransition, assertXenoAutomationAdapterConformant, assertXenoAutomationAuthority, auditRiskLevelForTool, authorizeShellExecution, backgroundProcessManager, bashTool, benchmarkCodingTools, bridgeXenoTelemetryToOpenTelemetry, buildAtomicMessageGroups, buildAuditReplayReport, buildAuditTraceReport, buildContainedProcessSpec, buildContractLedgerGuidance, buildDefaultSubagentTasks, buildDelegatedRoleSystemPrompt, buildHookEnvironment, buildLinuxBubblewrapProcessSpec, buildLspDefinitionReport, buildLspDiagnosticsReport, buildLspDoctorReport, buildLspHoverReport, buildLspReferencesReport, buildMotionSystemPrompt, buildPixelSystemPrompt, buildProcessHardenedProcessSpec, buildProjectBudgetFinalizationGuidance, buildProjectExecutionGuidance, buildProjectExecutionProfile, buildPromptMemoryContext, buildSecuredProcessSpec, buildSoundSystemPrompt, buildSystemPrompt, buildToolFailureGuardResult, buildXenoArtifactReviewAnchor, buildXenoAutomationCapabilityUse, buildXenoRepositoryIndex, buildXenoRepositoryIndexWithEmbeddings, buildXenoSecureExecutionContract, cachedModelContextWindow, cachedModelImageInput, calculateCost, canTransitionXenoArtifactState, canXenoRasterPreview, canonicalPayload, canonicalizeArtifactJson, canonicalizeMcpResourceUri, canonicalizeSecurityPath, canonicalizeToolName, captureXenoHandoffSnapshot, checkSandbox, classifyArtifactToolAction, classifyProviderHttpError, classifyXenoProcessTreeKill, classifyXenoSlashInput, cleanupReadImagePreviews, cleanupSessionRuntime, clearMcpServerApproval, clearProjectAllowedTools, clearProjectLastSessionSummary, clearProjectMcpApproval, clearProjectMcpApprovals, clipXenoAnsi, coerceSubagentRole, coerceSubagentTeamPreset, commandShapedSlashName, compileAgentProfile, compileJsonSchema, compileToolInputSchema, compileXenoRecipe, compileXenoSkillActivation, computeXenoContextDigest, configureImageGeneration, configureSearch, configureSearchPermissionProfile, configureXenoAnsi, containmentApprovalSigningPayload, containmentCertificationSigningPayload, copyTextToClipboard, create3DTools, createAgentChildController, createAgentDefinitionFile, createAgentDefinitionPromptSection, createAgentRunId, createAppServerExecutionLeaseStore, createAppServerV2HttpTransport, createArchitectTools, createArtifactCompareTool, createAskUserTool, createAudioTools, createAuditBackedPermissionEngine, createBashTool, createBenchBashMiddleware, createCliAutomationAuditSink, createCliGovernedAutomationRuntime, createCommandBackedProtectedStateStore, createDefaultToolRegistry, createDelegatedXenoAgent, createDirectProvider, createDirectShellMessage, createDispatchAgentTool, createDocsTools, createEd25519Signer, createEditTool, createElfAnalyzeTool, createEngineTools, createGcodeAnalyzeTool, createGenerateImageTool, createGlobTool, createGovernanceExtensions, createGrepTool, createHtmlSanitizerAuditTool, createImageTools, createListAgentsTool, createListSessionsTool, createLsTool, createLspDefinitionTool, createLspDiagnosticsTool, createLspHoverTool, createLspReferencesTool, createMcpAppCapabilities, createMcpAppExtensionCapabilities, createMcpPkcePair, createMcpPromptRegisteredTool, createMcpRegisteredTool, createMcpResourceRegisteredTool, createMemoryProtectedStateStore, createMemoryReadTool, createMemoryWriteTool, createNotebookEditTool, createNotebookReadTool, createNotesTools, createOllamaNativeProvider, createOsProtectedStateStore, createPatchTool, createPlanModeTools, createProtectedStateEnvelopeCipher, createQuotaGovernedProvider, createReadImageTool, createReadTool, createReceiveTool, createRequestDeadline, createSendTool, createSheetsTools, createSlidesTools, createSpeechRecognizer, createSqliteAnalyzeTool, createTaskInputTool, createTaskListTools, createTaskOutputTool, createTaskStopTool, createThinkTool, createToolAlias, createToolNameCodec, createToolOutputTool, createToolRuntimeContext, createUnavailableProtectedStateStore, createVideoTools, createWebContextFetchTool, createWebContextRequestFactory, createWebContextSearchTool, createWebSearchTool, createWindowsDpapiProtectedCipher, createWindowsDpapiProtectedFileStore, createWorkflowTools, createWriteTool, createXenoAgent, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createCliAutomationAuditSink as createXenoHostAutomationAuditSink, createCliGovernedAutomationRuntime as createXenoHostGovernedAutomationRuntime, createXenoHostedControlCommand, createXenoHostedEnvironmentManifest, createXenoHostedEvent, createXenoHostedExecutionBoundaryReceipt, createXenoHostedRunResult, createXenoRasterPreview, createXenoSecureShare, createXenoSessionHandoff, createXenoShareSigningIdentity, createXenoSkillTool, createXenoSourceResearchExcerpt, createXenoSourceResearchReport, currentExecutionAdapterStatus, decodeJwtPayload, decodeXenoBmp, decodeXenoGif, decodeXenoGifAnimation, decodeXenoJpeg, decodeXenoNetpbm, decodeXenoPng, decodeXenoSvg, decodeXenoVp8, decodeXenoWebp, defaultPeerDirectory, defaultToolRuntimeContext, defaultXenoReviewPack, deflateXenoZlib, delegatedBranchOutputTokens, delegatedBranchOwnerSessionId, deleteSession, denyMcpServer, deriveHostedIdempotencyKey, describeXenoAutomationOperation, detectLanguage, detectPluginRepositorySignals, detectRepositoryDocumentKind, detectRepositoryLanguage, detectXenoSpecDrift, deterministicReduce, digestMessages, directProviderConfigFromConnection, discoverXenoSkills, dispatchAgentTool, editTool, elfAnalyzeTool, emitPatchGbnf, emitXenoTelemetry, encodeXenoPngRgb, enforceShellCommandPolicy, enforceToolPolicy, ensureConfigDir, ensureDurableMessageIds, ensureProjectStateDir, estimateFullRequestBudget, evaluateContainmentUiRestrictions, evaluatePermissionProfileNetworkUrl, evaluateXenoCapabilityEligibility, executeXenoCoordinationAction, extractJsonObject, extractPageTitle, extractToolPath, findUnansweredQuestion, findXenoSkill, fingerprintXenoSecureExecutionContract, forgetRecentSession, forgetRecentSessionById, formatBoundedShellOutput, formatCost, formatDirectShellContext, formatJsonSchemaErrors, formatModelList, formatPromptContextBreakdown, gcodeAnalyzeTool, generateImageTool, generateSessionId, getAgentHome, getAgentRunDir, getAgentRunStoreDir, getAvailableModels, getBenchmarkComputeBudgetHintForCommand, getBenchmarkForegroundTimeoutForCommand, getBestExecutionSecurityStatus, getChatModels, getConfigDir, getDefaultProviderRegistry, getExecutionSecurityCapabilityReport, getExecutionSecurityStatus, getGlobIgnores, getGrepIgnores, getHighRiskPermissions, getImageGenerationConfig, getJwtExpiry, getLinuxBubblewrapCapability, getLogLevel, getManagedConfigPath, getMcpAppMetadata, getMcpAppResourceUri, getMcpApprovalDecision, getMcpAuthorizationServerMetadataUrls, getMcpDefinitionFingerprint, getMcpPromptToolName, getMcpProtectedResourceMetadataUrls, getMcpResourceToolName, getMcpToolName, getModelName, getMxcContainmentProbe, getMxcNativeAssetDescriptor, getMxcWindowsHostPreparationDescriptor, getMxcWindowsHostPreparationHelperArchitecture, getPermissionProfile, getPersistentShellSession, getPersistentShellSpawnSpec, getProcessContainmentStatus, getProjectAgentDefinitionDirs, getProjectAgentDefinitionsDir, getProjectLastSessionSummary, getProjectMcpApproval, getProjectStatePath, getReadImagePreviewCapability, getRecentSessionsIndexPath, getSubagentTeamPresetDefinition, getToolRiskLevel, getUserAgentDefinitionsDir, gitBranchTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, globTool, grepTool, gzipXeno, hasProjectOnboardingCompleted, hasXenoTelemetrySubscribers, hashContainmentConformanceReport, hashPluginManifest, hashPluginTree, hookResultStatus, hostedEnvironmentIdentity, hostedSlashCommandRefusal, htmlSanitizerAuditTool, importLegacyXenoSkill, inflateXenoZlib, initializeSessionRuntime, inspectCliAutomationStatus, inspectMcpConfigSources, inspectRuntimeManifests, inspectSecurityPath, inspectSystemPrompt, inspectCliAutomationStatus as inspectXenoHostAutomationStatus, inspectXenoRepositoryFreshness, inspectXenoRepositorySymbol, installSignalHandlers, interruptedQuestionResult, invalidateAllObservedFiles, invokeXenoSkill, isChatModel, isDangerousCommand, isDirectShellMessage, isExpiredJwt, isExplicitResearchPrompt, isJwt, isLocalModel, isMcpAppResourceUri, isMcpOAuthTokenExpired, isMcpToolVisibleToApp, isMcpToolVisibleToModel, isModelRequestTimeoutPhase, isNotBeforeJwt, isPathWithinAllowed, isPeerTaskTerminal, isQuestionTool, isQuotaControlError, isReadOnlyToolName, isScreenCaptureAvailable, isSensitiveEnvironmentKey, isSimpleInformationalPrompt, isSpeechRecognitionAvailable, isSupportedMcpProtocolVersion, isToolAllowedByXenoSkillActivation, isToolOperationTerminalState, isUncOrDevicePath, isValidAgentDefinitionName, isValidModel, isValidSessionId, isWorkspaceTrusted, isXenoAutomationOperation, isXenoContextDigest, killWindowsProcessTree, killWindowsProcessTreeSync, legacyAgentArtifactToXenoArtifact, listBuiltInAgentProfiles, listPermissionProfiles, listProjectAllowedTools, listProjectMcpApprovals, listSessions, loadConfig, loadConfiguredMcpServers, loadMcpConfigFile, loadProjectConfig, loadProjectState, loadRecentSessionsIndex, loadSession, loadUserConfig, loadXenoSkill, lookupRecentSession, lsTool, lspDefinitionTool, lspDiagnosticsTool, lspHoverTool, lspReferencesTool, matchPermissionRule, matchesMcpRegistryEntryPolicy, materializeXenoAutomationEvidence, mcpInputSchemaToToolSchema, memoryReadTool, memoryWriteTool, mergeConfigs, movesTrustUpward, mxcWarningsRequireWindowsHostPreparation, normalizeDirectShellResultRecord, normalizeHookDecision, normalizeMcpAppVisibility, normalizePagePath, normalizePermissionProfileName, normalizeQuotaScope, normalizeRepositoryRelativePath, normalizeSourceText, normalizeSubagentBranchPolicy, normalizeWorkingDirectory, normalizeXenoHostedControlAcknowledgement, normalizeXenoRequestContext, notebookEditTool, notebookReadTool, openSqliteAutomationExecutionJournal, openSqliteCapabilityLeasePersistence, pageContentType, parseContainmentReviewerTrustStore, parseMcpWwwAuthenticate, parsePatch, parsePermissionRule, parseRetryAfter, parseSessionId, parseShellPathReferences, parseSubagentRemoteMcpPolicy, parseSubagentRoleList, parseUnifiedDiff, parseXenoAnsi, parseXenoRecipeDefinition, patchPaths, patchTool, peerShortId, pending, persistXenoAutomationEvidence, planXenoControlRoomAction, pluginInfoRelevanceCandidate, pluginListingRelevanceCandidate, pluginSignaturePayload, preflightLocalModel, prepareMxcWindowsHost, probeXenoProvider, projectToolDefinitionsForProvider, projectToolSchemaForProvider, projectXenoControlRoom, providerCapabilityError, providerProtocolError, publicKeyFingerprint, publishPlugin, quotaAncestors, quotaInteger, quotaScopeKey, quotaText, rankPluginRelevance, readCliAutomationEnvironment, readImageTool, readManifestFromDisk, readPluginDetachedSignature, readPluginSupplyChainLockfile, readSessionFormatVersion, readTool, readToolOutput, readXenoApiKey, readCliAutomationEnvironment as readXenoHostAutomationEnvironment, recordRecentSession, recordXenoCounter, recordXenoEvent, recordXenoHistogram, recoverSessionMessages, redactXenoShareValue, registerAgentChild, registerPlanModeTools, registerShutdownCleanup, registry, removeMcpServerConfig, removeProjectAllowedTool, renderAgentDefinition, renderAgentDefinitions, renderAuditReplayMarkdown, renderAuditReplayReport, renderAuditTraceMarkdown, renderAuditTraceReport, renderAuditTraceSummaries, renderCliAutomationStatus, renderCodingBenchmarkMarkdown, renderCodingBenchmarkReport, renderContinuationIncompleteStatus, renderLspDefinitionReport, renderLspDiagnosticsReport, renderLspDoctorReport, renderLspHoverReport, renderLspReferencesReport, renderPeerLabel, renderToolContinuationInput, renderCliAutomationStatus as renderXenoHostAutomationStatus, renderXenoSkillCatalog, repairInterruptedToolCalls, repairToolExchangeHistory, requestBackground, requiresSecuredProcessLaunch, resetAllPersistentShellSessions, resetBashBenchmarkGuards, resetImageGenerationConfig, resetMcpServerApprovals, resetMxcContainmentProbe, resetPersistentShellSession, resetXenoAnsiPolicy, resetXenoTelemetryCardinalityForTests, resizeXenoRaster, resolveAgentDefinition, resolveAgentProfile, resolveAgentToolPolicy, resolveBuiltInAgentProfile, resolveCommandOnPath, resolveContainmentConformanceTemporaryRoot, resolveDelegatedExecutionMode, resolveExecutionSecurityLevel, resolveExecutionTrustMode, resolveInteractiveTurnMaxIterations, resolveLocalRuntimeUrl, resolveModelContextTokens, resolveModelRequestDeadlines, resolvePeerTarget, resolvePermissionProfile, resolveShellInvocation, resolveSubagentRemoteMcpAccess, resolveSubagentWorkflowAnswer, resolveXenoAutomationEvidencePolicy, resolveXenoSdkApiKey, restoreXenoHandoffSnapshot, runAgentHook, runCommandHook, runContainmentConformanceSuite, runDelegatedXenoTurn, runDelegationPlan, runDurableAutomation, runHookDefinition, runHooks, runHttpHook, runPromptHook, runSubagentWorkflow, runXenoBoundedProcess, runXenoBoundedProcessSync, runXenoProcessTreeKillHelper, runXenoThread, runXenoThreadStreamed, sanitizeEnvironment, sanitizeXenoTelemetryAttributes, saveConfig, saveMcpConfigFile, saveProjectState, saveSession, scaffoldPlugin, scanAgentDefinitions, scoreMemories, scorePluginRelevance, searchXenoRepositoryIndex, selectXenoProviderRoute, serializeXenoRecipe, setLogLevel, setProjectLastSessionSummary, setProjectMcpApproval, setProjectOnboardingCompleted, setToolOutputStoreDirectory, setWorkspaceTrusted, setupAIHandlers, sha256ArtifactBytes, sha256ArtifactJson, shouldEnableExecutionGovernance, shouldSourceShellProfile, shouldUseIsolatedStdinForCommand, signSharePayload, sqliteAnalyzeTool, storeToolOutput, stripXenoAnsi, subscribeXenoTelemetry, summarizeAuditInputRecord, summarizeAuditTraces, summarizeRuntimeInput, summarizeSubagentResults, summarizeXenoArtifactReview, syncMcpToolsToRegistry, synthesizeSkill, taskInputTool, taskOutputTool, taskStopTool, testPlugin, thinkTool, toAgentDefinitionMetadata, toLLMProvider, toPeerPosture, toolEvidenceToXenoArtifact, toolOperationManager, toolOutputTool, toolRiskLevel, truncationNotice, turnDiffSummaryToXenoArtifact, unifiedDiffToXenoArtifact, unifiedExecManager, updateProjectState, upsertMcpServerConfig, validateAgentDefinition, validateCapabilityLeaseRequest, validateCapabilityMutationReceipt, validateDelegationPlan, validateDirectEndpoint, validateExecutionSecurityPolicy, validateJsonSchema, validateManifest, validateMcpAppResource, validateToolContinuationGoal, validateXenoArtifact, validateXenoArtifactReviewEvent, validateXenoControlRoomSnapshot, validateXenoEvidenceGraph, validateXenoRepositoryIndex, validateXenoSdkApiKey, validateXenoSecureExecutionContract, validateXenoSpecDocument, verifyContainmentCertification, verifyContainmentCertificationApproval, verifyPluginSupplyChain, verifySignature, verifySoulRecord, verifyXenoHostedControlCommand, verifyXenoHostedEnvironmentManifest, verifyXenoHostedEventChain, verifyXenoHostedExecutionAdapterCertification, verifyXenoHostedExecutionJob, verifyXenoHostedRunResult, verifyXenoHostedWebhook, verifyXenoSecureShare, verifyXenoSessionHandoff, waitForXenoHandoffStatus, webFetchTool, webSearchTool, windowsDpapiProtect, windowsDpapiUnprotect, withXenoTelemetrySpan, wrapXenoAnsi, writePluginSupplyChainLockfile, writeTool, xenoAnsi, xenoAnsiVisibleWidth, xenoArtifactToDiffDocument, xenoArtifactToLegacyAgentArtifact, xenoArtifactToOracleReport, xenoArtifactToReviewReport, xenoArtifactToSourceResearchReport, xenoArtifactToSpecDocument, xenoArtifactToSpecExecution, xenoArtifactToToolEvidence, xenoArtifactToTurnDiffSummary, xenoHostedExecutionAdapterSigningPayload, xenoOracleReportToArtifact, xenoRecipeFingerprint, xenoRequestContextHeaders, xenoReviewReportToArtifact, xenoReviewReportToGitHubComments, xenoSourceResearchReportToArtifact, xenoSpecArtifactIds, xenoSpecExecutionToArtifact, xenoSpecToArtifactBundle };