@xenosystem/agent-sdk 0.10.36 → 0.10.37

package/dist/automation/index.d.cts

@@ -547,6 +547,12 @@ interface ToolDefinition {
         additionalProperties?: boolean | Record<string, unknown>;
         [keyword: string]: unknown;
     };
+    grammar?: ToolInputGrammar;
+}
+interface ToolInputGrammar {
+    syntax: "gbnf";
+    definition: string;
+    inputField: string;
 }
 interface ImageUrlBlock {
     type: "image_url";
@@ -705,6 +711,14 @@ interface TextBlock {
     type: "text";
     text: string;
 }
+type MemoryLevel = "global" | "project" | "role" | "session";
+interface MemoryBudget {
+    global: number;
+    project: number;
+    role: number;
+    session: number;
+    total: number;
+}
 interface AgentCapabilities {
     terminal: boolean;
     fileRead: boolean;
@@ -1023,6 +1037,7 @@ interface XenoAutomationAdapterExecutionResult {
     };
 }
 interface XenoAutomationAdapter {
+    assertCurrent?(request: XenoAutomationRequest): Promise<void> | void;
     manifest(): Promise<XenoAutomationAdapterManifest> | XenoAutomationAdapterManifest;
     preflight(request: XenoAutomationRequest, signal: AbortSignal): Promise<XenoAutomationPreflight>;
     execute(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, grant: XenoAutomationExecutionGrant, signal: AbortSignal): Promise<XenoAutomationAdapterExecutionResult>;
@@ -1083,6 +1098,7 @@ declare class XenoAutomationError extends Error {
 }
 declare function assertValidXenoAutomationRequest(request: XenoAutomationRequest): void;
 declare function assertValidXenoAutomationAdapterManifest(manifest: XenoAutomationAdapterManifest): void;
+declare function assertXenoAutomationAdapterRequirements(request: XenoAutomationRequest, manifest: XenoAutomationAdapterManifest): void;
 declare function assertXenoAutomationAuthority(request: XenoAutomationRequest, manifest: XenoAutomationAdapterManifest, observedTarget: XenoAutomationTarget): void;
 declare function buildXenoAutomationCapabilityUse(request: XenoAutomationRequest, target: XenoAutomationTarget): XenoCapabilityUse;
 declare function resolveXenoAutomationEvidencePolicy(request: XenoAutomationRequest): XenoAutomationEvidencePolicy;
@@ -1188,6 +1204,9 @@ interface XenoGovernedAutomationExecutorOptions {
     durable?: XenoDurableAutomationOptions;
     artifactRepository?: XenoArtifactRepository;
     now?: () => string;
+    assertCurrent?: (request: XenoAutomationRequest) => void | Promise<void>;
+    onPreflight?: (request: XenoAutomationRequest, preflight: XenoAutomationPreflight, signal: AbortSignal) => Promise<void>;
+    onGrant?: (request: XenoAutomationRequest, preflight: XenoAutomationPreflight, grant: XenoAutomationExecutionGrant, signal: AbortSignal) => Promise<void>;
 }
 declare class XenoGovernedAutomationExecutor {
     private readonly adapter;
@@ -1195,9 +1214,12 @@ declare class XenoGovernedAutomationExecutor {
     private readonly durable;
     private readonly artifactRepository?;
     private readonly now;
+    private readonly assertCurrent;
     private readonly executions;
     private readonly active;
     constructor(options: XenoGovernedAutomationExecutorOptions);
+    private readonly onPreflight;
+    private readonly onGrant;
     execute(request: XenoAutomationRequest, signal?: AbortSignal): Promise<XenoAutomationExecutionResult>;
     stop(operationId: string, reason?: string): Promise<boolean>;
     private executeFresh;
@@ -1211,6 +1233,10 @@ interface XenoLoopbackAutomationAdapterOptions {
     timeoutMs?: number;
     maxResponseBytes?: number;
     fetch?: typeof globalThis.fetch;
+    ownedView?: {
+        ownerId: string;
+        sessionId: string;
+    };
 }
 declare class XenoLoopbackAutomationAdapter implements XenoAutomationAdapter {
     private readonly endpoint;
@@ -1218,6 +1244,7 @@ declare class XenoLoopbackAutomationAdapter implements XenoAutomationAdapter {
     private readonly timeoutMs;
     private readonly maxResponseBytes;
     private readonly fetchImpl;
+    private readonly ownedView;
     constructor(options: XenoLoopbackAutomationAdapterOptions);
     manifest(): Promise<XenoAutomationAdapterManifest>;
     preflight(request: XenoAutomationRequest, signal: AbortSignal): Promise<XenoAutomationPreflight>;
@@ -1255,20 +1282,141 @@ interface XenoBrowserControlPlaneAdapterOptions {
     driver: "browser" | "extension";
     fetch?: typeof globalThis.fetch;
     timeoutMs?: number;
+    ownedView?: {
+        ownerId: string;
+        sessionId: string;
+    };
 }
-declare class XenoBrowserControlPlaneAdapter implements XenoAutomationAdapter {
-    private readonly options;
-    private readonly base;
-    private readonly fetchImpl;
-    private readonly timeoutMs;
+declare class XenoBrowserControlPlaneAdapter extends XenoLoopbackAutomationAdapter {
+    private readonly driver;
     constructor(options: XenoBrowserControlPlaneAdapterOptions);
     manifest(): Promise<XenoAutomationAdapterManifest>;
-    preflight(request: XenoAutomationRequest, signal: AbortSignal): Promise<XenoAutomationPreflight>;
-    execute(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, _grant: XenoAutomationExecutionGrant, signal: AbortSignal): Promise<XenoAutomationAdapterExecutionResult>;
-    stop(_operationId: string, _reason: string): Promise<void>;
-    private resultEvidence;
-    private snapshotEvidence;
-    private call;
+}
+interface MemoryFile {
+    level: MemoryLevel;
+    path: string;
+    content: string;
+    tokenCount: number;
+    lastModified?: Date;
+}
+interface ResolvedMemory {
+    files: MemoryFile[];
+    byLevel: Record<MemoryLevel, string>;
+    totalTokens: number;
+    truncated: boolean;
+}
+interface ProjectSessionContextEntry {
+    sessionId: string;
+    model: string;
+    lastActivity: string;
+    messageCount: number;
+    excerpt: string;
+}
+interface ProjectSessionContext {
+    entries: ProjectSessionContextEntry[];
+    totalTokens: number;
+    truncated: boolean;
+    content: string;
+}
+interface MemoryManagerOptions {
+    cwd: string;
+    globalDir?: string;
+    role?: string;
+    sessionDir?: string;
+    scope?: MemoryAccessScope;
+    budgets?: Partial<MemoryBudget>;
+    projectSessionContext?: {
+        limit?: number;
+        maxTokens?: number;
+        maxCharsPerSession?: number;
+    };
+}
+type MemoryAccessScope = "none" | "session" | "project" | "user";
+declare class MemoryManager {
+    private cwd;
+    private globalDir;
+    private role?;
+    private sessionDir?;
+    private scope;
+    private budgets;
+    private projectSessionContextDefaults;
+    constructor(options: MemoryManagerOptions);
+    get accessScope(): MemoryAccessScope;
+    canAccessLevel(level: MemoryLevel): boolean;
+    private assertLevelAccess;
+    getProjectSessionContextDefaults(): {
+        limit: number;
+        maxTokens: number;
+        maxCharsPerSession: number;
+    };
+    getPath(level: MemoryLevel): string;
+    loadForPrompt(): Promise<ResolvedMemory>;
+    loadProjectSessionContext(options?: {
+        excludeSessionId?: string;
+        limit?: number;
+        maxTokens?: number;
+        maxCharsPerSession?: number;
+    }): Promise<ProjectSessionContext>;
+    private filterProjectSessions;
+    private normalizePath;
+    private extractRecentTranscriptExcerpt;
+    private formatProjectSessionEntry;
+    add(level: MemoryLevel, content: string, source: "user" | "auto"): Promise<void>;
+    set(level: MemoryLevel, content: string): Promise<void>;
+    formatForPrompt(memory: ResolvedMemory): string;
+    private truncateContent;
+}
+interface AskUserRequest {
+    question: string;
+    options?: string[];
+    context?: string;
+    signal?: AbortSignal;
+}
+interface AskUserResponse {
+    answer: string;
+    selectedOption?: string;
+}
+interface DispatchAgentRequest {
+    agent?: string;
+    prompt: string;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    dispatchId?: string;
+}
+interface DispatchAgentTermination {
+    status: "completed" | "incomplete" | "suspended" | "interrupted" | "error";
+    reason: string;
+    message?: string;
+}
+interface DispatchAgentResponse {
+    output: string;
+    termination?: DispatchAgentTermination;
+    tokenUsage?: {
+        input: number;
+        output: number;
+        total: number;
+    };
+}
+interface FileObservation {
+    path: string;
+    mtimeMs: number;
+    size: number;
+    source: "read" | "write" | "edit" | "notebook" | "shell";
+    requiresRefresh?: boolean;
+    reason?: string;
+}
+interface ToolRuntimeContext {
+    getCwd(): string;
+    setCwd(nextCwd: string): void;
+    getOwnerSessionId(): string | undefined;
+    getMemoryManager(): MemoryManager | undefined;
+    setMemoryManager(memoryManager: MemoryManager | undefined): void;
+    noteFileObservation(filePath: string, observation: Omit<FileObservation, "path">): void;
+    getFileObservation(filePath: string): FileObservation | undefined;
+    invalidateFileObservation(filePath: string, reason: string): void;
+    listFileObservations(): FileObservation[];
+    askUser?(request: AskUserRequest): Promise<AskUserResponse>;
+    dispatchAgent?(request: DispatchAgentRequest): Promise<DispatchAgentResponse>;
 }
 interface ToolRegistryOptions {
     validateInputs?: boolean;
@@ -1282,10 +1430,14 @@ declare class ToolRegistry {
     private validateInputs;
     private readonly toolSchemaMode;
     private readonly activatedDefinitions;
+    private memoryRuntime?;
+    private memoryBindingScope?;
     constructor(options?: ToolRegistryOptions);
     setValidateInputs(enabled: boolean): this;
     get inputValidationEnabled(): boolean;
     get schemaLoadingMode(): "all" | "demand";
+    bindMemoryManager(manager: MemoryManager | undefined): void;
+    attachMemoryRuntime(runtime: ToolRuntimeContext, scope?: MemoryManager["accessScope"]): void;
     register(tool: RegisteredTool): void;
     registerAlias(tool: RegisteredTool): void;
     registerAll(tools: Iterable<RegisteredTool>): void;
@@ -1353,6 +1505,11 @@ interface CliAutomationAuditLoggerPort {
         metadata: Record<string, unknown>;
     }): Promise<unknown>;
 }
+type XenoComputerRequestAuthorizer = (method: string, url: string) => Promise<{
+    token: string;
+    tokenType: "Bearer" | "DPoP";
+    headers?: Record<string, string>;
+} | null>;
 interface CliAutomationEnvironment {
     browser?: {
         driver: "browser" | "extension";
@@ -1366,10 +1523,15 @@ interface CliAutomationEnvironment {
         uploads: "deny" | "prompt" | "allow";
         downloads: "deny" | "prompt" | "allow";
         recording: "disabled" | "bounded";
+        ownedView?: {
+            ownerId: string;
+            sessionId: string;
+        };
     };
     computer?: {
         baseUrl?: string;
         token?: string;
+        authorize?: XenoComputerRequestAuthorizer;
         deviceId?: string;
         allowedApplications: string[];
     };
@@ -1405,6 +1567,23 @@ interface CreateCliGovernedAutomationRuntimeOptions {
     safeMode?: boolean;
     environment?: CliAutomationEnvironment;
     onAudit?: (event: CliAutomationAuditEvent) => Promise<void> | void;
+    computerOwnerAdmission?: {
+        executingPrincipalId: string;
+        authorize(input: unknown, signal: AbortSignal): Promise<unknown>;
+    };
+    computerAdapter?: XenoAutomationAdapter;
+    computerHostAuthority?: XenoComputerHostAuthority;
+}
+interface XenoComputerHostAuthority {
+    begin(request: XenoAutomationRequest, decision: {
+        authorization: ToolAuthorizationReceipt;
+        profileFingerprint: string;
+        assertCurrent(): void;
+    }, signal: AbortSignal): Promise<void>;
+    recordPreflight(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, signal: AbortSignal): Promise<void>;
+    recordGrant(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, grant: XenoAutomationExecutionGrant, signal: AbortSignal): Promise<void>;
+    assertCurrent(request: XenoAutomationRequest): Promise<void>;
+    finish(request: XenoAutomationRequest): Promise<void>;
 }
 declare class CliGovernedAutomationRuntime implements XenoGovernedAutomationToolRuntime {
     private readonly options;
@@ -1413,8 +1592,11 @@ declare class CliGovernedAutomationRuntime implements XenoGovernedAutomationTool
     private readonly environment;
     private browserAdapter?;
     private computerAdapter?;
+    private verifiedOperations;
+    private readonly registered;
     constructor(options: CreateCliGovernedAutomationRuntimeOptions);
     register(registry: ToolRegistry): number;
+    registerVerified(registry: ToolRegistry): Promise<number>;
     execute(input: XenoGovernedAutomationToolExecution): Promise<XenoAutomationExecutionResult>;
     stop(operationId: string, reason?: string): Promise<boolean>;
     private securityPolicy;
@@ -1432,4 +1614,4 @@ type XenoHostAutomationEnvironment = CliAutomationEnvironment;
 type XenoHostAutomationSurfaceStatus = CliAutomationSurfaceStatus;
 type XenoHostAutomationStatusReport = CliAutomationStatusReport;
 type CreateXenoHostGovernedAutomationRuntimeOptions = CreateCliGovernedAutomationRuntimeOptions;
-export { type CliAutomationAuditEvent, type CliAutomationAuditLoggerPort, type CliAutomationEnvironment, type CliAutomationStatusReport, type CliAutomationSurfaceStatus, CliGovernedAutomationRuntime, type CreateCliGovernedAutomationRuntimeOptions, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHostGovernedAutomationRuntimeOptions, type MaterializeXenoAutomationEvidenceOptions, SqliteAutomationExecutionJournal, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BROWSER_CONTROL_PLANE_OPERATIONS, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionJournal, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationJournalIdentity, type XenoAutomationJournalRecord, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBrowserAutomationOperation, XenoBrowserControlPlaneAdapter, type XenoBrowserControlPlaneAdapterOptions, type XenoComputerAutomationOperation, type XenoDurableAutomationOptions, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHostAutomationAuditEvent, type XenoHostAutomationAuditLoggerPort, type XenoHostAutomationEnvironment, type XenoHostAutomationStatusReport, type XenoHostAutomationSurfaceStatus, CliGovernedAutomationRuntime as XenoHostGovernedAutomationRuntime, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, assertRequiredXenoAutomationEvidence, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertXenoAutomationAdapterConformant, assertXenoAutomationAuthority, buildXenoAutomationCapabilityUse, createCliAutomationAuditSink, createCliGovernedAutomationRuntime, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createCliAutomationAuditSink as createXenoHostAutomationAuditSink, createCliGovernedAutomationRuntime as createXenoHostGovernedAutomationRuntime, describeXenoAutomationOperation, inspectCliAutomationStatus, inspectCliAutomationStatus as inspectXenoHostAutomationStatus, isXenoAutomationOperation, materializeXenoAutomationEvidence, openSqliteAutomationExecutionJournal, pending, persistXenoAutomationEvidence, readCliAutomationEnvironment, readCliAutomationEnvironment as readXenoHostAutomationEnvironment, renderCliAutomationStatus, renderCliAutomationStatus as renderXenoHostAutomationStatus, resolveXenoAutomationEvidencePolicy, runDurableAutomation };
+export { type CliAutomationAuditEvent, type CliAutomationAuditLoggerPort, type CliAutomationEnvironment, type CliAutomationStatusReport, type CliAutomationSurfaceStatus, CliGovernedAutomationRuntime, type CreateCliGovernedAutomationRuntimeOptions, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHostGovernedAutomationRuntimeOptions, type MaterializeXenoAutomationEvidenceOptions, SqliteAutomationExecutionJournal, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BROWSER_CONTROL_PLANE_OPERATIONS, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionJournal, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationJournalIdentity, type XenoAutomationJournalRecord, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBrowserAutomationOperation, XenoBrowserControlPlaneAdapter, type XenoBrowserControlPlaneAdapterOptions, type XenoComputerAutomationOperation, type XenoComputerHostAuthority, type XenoComputerRequestAuthorizer, type XenoDurableAutomationOptions, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHostAutomationAuditEvent, type XenoHostAutomationAuditLoggerPort, type XenoHostAutomationEnvironment, type XenoHostAutomationStatusReport, type XenoHostAutomationSurfaceStatus, CliGovernedAutomationRuntime as XenoHostGovernedAutomationRuntime, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, assertRequiredXenoAutomationEvidence, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertXenoAutomationAdapterConformant, assertXenoAutomationAdapterRequirements, assertXenoAutomationAuthority, buildXenoAutomationCapabilityUse, createCliAutomationAuditSink, createCliGovernedAutomationRuntime, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createCliAutomationAuditSink as createXenoHostAutomationAuditSink, createCliGovernedAutomationRuntime as createXenoHostGovernedAutomationRuntime, describeXenoAutomationOperation, inspectCliAutomationStatus, inspectCliAutomationStatus as inspectXenoHostAutomationStatus, isXenoAutomationOperation, materializeXenoAutomationEvidence, openSqliteAutomationExecutionJournal, pending, persistXenoAutomationEvidence, readCliAutomationEnvironment, readCliAutomationEnvironment as readXenoHostAutomationEnvironment, renderCliAutomationStatus, renderCliAutomationStatus as renderXenoHostAutomationStatus, resolveXenoAutomationEvidencePolicy, runDurableAutomation };

package/dist/automation/index.d.ts

@@ -547,6 +547,12 @@ interface ToolDefinition {
         additionalProperties?: boolean | Record<string, unknown>;
         [keyword: string]: unknown;
     };
+    grammar?: ToolInputGrammar;
+}
+interface ToolInputGrammar {
+    syntax: "gbnf";
+    definition: string;
+    inputField: string;
 }
 interface ImageUrlBlock {
     type: "image_url";
@@ -705,6 +711,14 @@ interface TextBlock {
     type: "text";
     text: string;
 }
+type MemoryLevel = "global" | "project" | "role" | "session";
+interface MemoryBudget {
+    global: number;
+    project: number;
+    role: number;
+    session: number;
+    total: number;
+}
 interface AgentCapabilities {
     terminal: boolean;
     fileRead: boolean;
@@ -1023,6 +1037,7 @@ interface XenoAutomationAdapterExecutionResult {
     };
 }
 interface XenoAutomationAdapter {
+    assertCurrent?(request: XenoAutomationRequest): Promise<void> | void;
     manifest(): Promise<XenoAutomationAdapterManifest> | XenoAutomationAdapterManifest;
     preflight(request: XenoAutomationRequest, signal: AbortSignal): Promise<XenoAutomationPreflight>;
     execute(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, grant: XenoAutomationExecutionGrant, signal: AbortSignal): Promise<XenoAutomationAdapterExecutionResult>;
@@ -1083,6 +1098,7 @@ declare class XenoAutomationError extends Error {
 }
 declare function assertValidXenoAutomationRequest(request: XenoAutomationRequest): void;
 declare function assertValidXenoAutomationAdapterManifest(manifest: XenoAutomationAdapterManifest): void;
+declare function assertXenoAutomationAdapterRequirements(request: XenoAutomationRequest, manifest: XenoAutomationAdapterManifest): void;
 declare function assertXenoAutomationAuthority(request: XenoAutomationRequest, manifest: XenoAutomationAdapterManifest, observedTarget: XenoAutomationTarget): void;
 declare function buildXenoAutomationCapabilityUse(request: XenoAutomationRequest, target: XenoAutomationTarget): XenoCapabilityUse;
 declare function resolveXenoAutomationEvidencePolicy(request: XenoAutomationRequest): XenoAutomationEvidencePolicy;
@@ -1188,6 +1204,9 @@ interface XenoGovernedAutomationExecutorOptions {
     durable?: XenoDurableAutomationOptions;
     artifactRepository?: XenoArtifactRepository;
     now?: () => string;
+    assertCurrent?: (request: XenoAutomationRequest) => void | Promise<void>;
+    onPreflight?: (request: XenoAutomationRequest, preflight: XenoAutomationPreflight, signal: AbortSignal) => Promise<void>;
+    onGrant?: (request: XenoAutomationRequest, preflight: XenoAutomationPreflight, grant: XenoAutomationExecutionGrant, signal: AbortSignal) => Promise<void>;
 }
 declare class XenoGovernedAutomationExecutor {
     private readonly adapter;
@@ -1195,9 +1214,12 @@ declare class XenoGovernedAutomationExecutor {
     private readonly durable;
     private readonly artifactRepository?;
     private readonly now;
+    private readonly assertCurrent;
     private readonly executions;
     private readonly active;
     constructor(options: XenoGovernedAutomationExecutorOptions);
+    private readonly onPreflight;
+    private readonly onGrant;
     execute(request: XenoAutomationRequest, signal?: AbortSignal): Promise<XenoAutomationExecutionResult>;
     stop(operationId: string, reason?: string): Promise<boolean>;
     private executeFresh;
@@ -1211,6 +1233,10 @@ interface XenoLoopbackAutomationAdapterOptions {
     timeoutMs?: number;
     maxResponseBytes?: number;
     fetch?: typeof globalThis.fetch;
+    ownedView?: {
+        ownerId: string;
+        sessionId: string;
+    };
 }
 declare class XenoLoopbackAutomationAdapter implements XenoAutomationAdapter {
     private readonly endpoint;
@@ -1218,6 +1244,7 @@ declare class XenoLoopbackAutomationAdapter implements XenoAutomationAdapter {
     private readonly timeoutMs;
     private readonly maxResponseBytes;
     private readonly fetchImpl;
+    private readonly ownedView;
     constructor(options: XenoLoopbackAutomationAdapterOptions);
     manifest(): Promise<XenoAutomationAdapterManifest>;
     preflight(request: XenoAutomationRequest, signal: AbortSignal): Promise<XenoAutomationPreflight>;
@@ -1255,20 +1282,141 @@ interface XenoBrowserControlPlaneAdapterOptions {
     driver: "browser" | "extension";
     fetch?: typeof globalThis.fetch;
     timeoutMs?: number;
+    ownedView?: {
+        ownerId: string;
+        sessionId: string;
+    };
 }
-declare class XenoBrowserControlPlaneAdapter implements XenoAutomationAdapter {
-    private readonly options;
-    private readonly base;
-    private readonly fetchImpl;
-    private readonly timeoutMs;
+declare class XenoBrowserControlPlaneAdapter extends XenoLoopbackAutomationAdapter {
+    private readonly driver;
     constructor(options: XenoBrowserControlPlaneAdapterOptions);
     manifest(): Promise<XenoAutomationAdapterManifest>;
-    preflight(request: XenoAutomationRequest, signal: AbortSignal): Promise<XenoAutomationPreflight>;
-    execute(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, _grant: XenoAutomationExecutionGrant, signal: AbortSignal): Promise<XenoAutomationAdapterExecutionResult>;
-    stop(_operationId: string, _reason: string): Promise<void>;
-    private resultEvidence;
-    private snapshotEvidence;
-    private call;
+}
+interface MemoryFile {
+    level: MemoryLevel;
+    path: string;
+    content: string;
+    tokenCount: number;
+    lastModified?: Date;
+}
+interface ResolvedMemory {
+    files: MemoryFile[];
+    byLevel: Record<MemoryLevel, string>;
+    totalTokens: number;
+    truncated: boolean;
+}
+interface ProjectSessionContextEntry {
+    sessionId: string;
+    model: string;
+    lastActivity: string;
+    messageCount: number;
+    excerpt: string;
+}
+interface ProjectSessionContext {
+    entries: ProjectSessionContextEntry[];
+    totalTokens: number;
+    truncated: boolean;
+    content: string;
+}
+interface MemoryManagerOptions {
+    cwd: string;
+    globalDir?: string;
+    role?: string;
+    sessionDir?: string;
+    scope?: MemoryAccessScope;
+    budgets?: Partial<MemoryBudget>;
+    projectSessionContext?: {
+        limit?: number;
+        maxTokens?: number;
+        maxCharsPerSession?: number;
+    };
+}
+type MemoryAccessScope = "none" | "session" | "project" | "user";
+declare class MemoryManager {
+    private cwd;
+    private globalDir;
+    private role?;
+    private sessionDir?;
+    private scope;
+    private budgets;
+    private projectSessionContextDefaults;
+    constructor(options: MemoryManagerOptions);
+    get accessScope(): MemoryAccessScope;
+    canAccessLevel(level: MemoryLevel): boolean;
+    private assertLevelAccess;
+    getProjectSessionContextDefaults(): {
+        limit: number;
+        maxTokens: number;
+        maxCharsPerSession: number;
+    };
+    getPath(level: MemoryLevel): string;
+    loadForPrompt(): Promise<ResolvedMemory>;
+    loadProjectSessionContext(options?: {
+        excludeSessionId?: string;
+        limit?: number;
+        maxTokens?: number;
+        maxCharsPerSession?: number;
+    }): Promise<ProjectSessionContext>;
+    private filterProjectSessions;
+    private normalizePath;
+    private extractRecentTranscriptExcerpt;
+    private formatProjectSessionEntry;
+    add(level: MemoryLevel, content: string, source: "user" | "auto"): Promise<void>;
+    set(level: MemoryLevel, content: string): Promise<void>;
+    formatForPrompt(memory: ResolvedMemory): string;
+    private truncateContent;
+}
+interface AskUserRequest {
+    question: string;
+    options?: string[];
+    context?: string;
+    signal?: AbortSignal;
+}
+interface AskUserResponse {
+    answer: string;
+    selectedOption?: string;
+}
+interface DispatchAgentRequest {
+    agent?: string;
+    prompt: string;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    dispatchId?: string;
+}
+interface DispatchAgentTermination {
+    status: "completed" | "incomplete" | "suspended" | "interrupted" | "error";
+    reason: string;
+    message?: string;
+}
+interface DispatchAgentResponse {
+    output: string;
+    termination?: DispatchAgentTermination;
+    tokenUsage?: {
+        input: number;
+        output: number;
+        total: number;
+    };
+}
+interface FileObservation {
+    path: string;
+    mtimeMs: number;
+    size: number;
+    source: "read" | "write" | "edit" | "notebook" | "shell";
+    requiresRefresh?: boolean;
+    reason?: string;
+}
+interface ToolRuntimeContext {
+    getCwd(): string;
+    setCwd(nextCwd: string): void;
+    getOwnerSessionId(): string | undefined;
+    getMemoryManager(): MemoryManager | undefined;
+    setMemoryManager(memoryManager: MemoryManager | undefined): void;
+    noteFileObservation(filePath: string, observation: Omit<FileObservation, "path">): void;
+    getFileObservation(filePath: string): FileObservation | undefined;
+    invalidateFileObservation(filePath: string, reason: string): void;
+    listFileObservations(): FileObservation[];
+    askUser?(request: AskUserRequest): Promise<AskUserResponse>;
+    dispatchAgent?(request: DispatchAgentRequest): Promise<DispatchAgentResponse>;
 }
 interface ToolRegistryOptions {
     validateInputs?: boolean;
@@ -1282,10 +1430,14 @@ declare class ToolRegistry {
     private validateInputs;
     private readonly toolSchemaMode;
     private readonly activatedDefinitions;
+    private memoryRuntime?;
+    private memoryBindingScope?;
     constructor(options?: ToolRegistryOptions);
     setValidateInputs(enabled: boolean): this;
     get inputValidationEnabled(): boolean;
     get schemaLoadingMode(): "all" | "demand";
+    bindMemoryManager(manager: MemoryManager | undefined): void;
+    attachMemoryRuntime(runtime: ToolRuntimeContext, scope?: MemoryManager["accessScope"]): void;
     register(tool: RegisteredTool): void;
     registerAlias(tool: RegisteredTool): void;
     registerAll(tools: Iterable<RegisteredTool>): void;
@@ -1353,6 +1505,11 @@ interface CliAutomationAuditLoggerPort {
         metadata: Record<string, unknown>;
     }): Promise<unknown>;
 }
+type XenoComputerRequestAuthorizer = (method: string, url: string) => Promise<{
+    token: string;
+    tokenType: "Bearer" | "DPoP";
+    headers?: Record<string, string>;
+} | null>;
 interface CliAutomationEnvironment {
     browser?: {
         driver: "browser" | "extension";
@@ -1366,10 +1523,15 @@ interface CliAutomationEnvironment {
         uploads: "deny" | "prompt" | "allow";
         downloads: "deny" | "prompt" | "allow";
         recording: "disabled" | "bounded";
+        ownedView?: {
+            ownerId: string;
+            sessionId: string;
+        };
     };
     computer?: {
         baseUrl?: string;
         token?: string;
+        authorize?: XenoComputerRequestAuthorizer;
         deviceId?: string;
         allowedApplications: string[];
     };
@@ -1405,6 +1567,23 @@ interface CreateCliGovernedAutomationRuntimeOptions {
     safeMode?: boolean;
     environment?: CliAutomationEnvironment;
     onAudit?: (event: CliAutomationAuditEvent) => Promise<void> | void;
+    computerOwnerAdmission?: {
+        executingPrincipalId: string;
+        authorize(input: unknown, signal: AbortSignal): Promise<unknown>;
+    };
+    computerAdapter?: XenoAutomationAdapter;
+    computerHostAuthority?: XenoComputerHostAuthority;
+}
+interface XenoComputerHostAuthority {
+    begin(request: XenoAutomationRequest, decision: {
+        authorization: ToolAuthorizationReceipt;
+        profileFingerprint: string;
+        assertCurrent(): void;
+    }, signal: AbortSignal): Promise<void>;
+    recordPreflight(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, signal: AbortSignal): Promise<void>;
+    recordGrant(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, grant: XenoAutomationExecutionGrant, signal: AbortSignal): Promise<void>;
+    assertCurrent(request: XenoAutomationRequest): Promise<void>;
+    finish(request: XenoAutomationRequest): Promise<void>;
 }
 declare class CliGovernedAutomationRuntime implements XenoGovernedAutomationToolRuntime {
     private readonly options;
@@ -1413,8 +1592,11 @@ declare class CliGovernedAutomationRuntime implements XenoGovernedAutomationTool
     private readonly environment;
     private browserAdapter?;
     private computerAdapter?;
+    private verifiedOperations;
+    private readonly registered;
     constructor(options: CreateCliGovernedAutomationRuntimeOptions);
     register(registry: ToolRegistry): number;
+    registerVerified(registry: ToolRegistry): Promise<number>;
     execute(input: XenoGovernedAutomationToolExecution): Promise<XenoAutomationExecutionResult>;
     stop(operationId: string, reason?: string): Promise<boolean>;
     private securityPolicy;
@@ -1432,4 +1614,4 @@ type XenoHostAutomationEnvironment = CliAutomationEnvironment;
 type XenoHostAutomationSurfaceStatus = CliAutomationSurfaceStatus;
 type XenoHostAutomationStatusReport = CliAutomationStatusReport;
 type CreateXenoHostGovernedAutomationRuntimeOptions = CreateCliGovernedAutomationRuntimeOptions;
-export { type CliAutomationAuditEvent, type CliAutomationAuditLoggerPort, type CliAutomationEnvironment, type CliAutomationStatusReport, type CliAutomationSurfaceStatus, CliGovernedAutomationRuntime, type CreateCliGovernedAutomationRuntimeOptions, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHostGovernedAutomationRuntimeOptions, type MaterializeXenoAutomationEvidenceOptions, SqliteAutomationExecutionJournal, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BROWSER_CONTROL_PLANE_OPERATIONS, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionJournal, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationJournalIdentity, type XenoAutomationJournalRecord, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBrowserAutomationOperation, XenoBrowserControlPlaneAdapter, type XenoBrowserControlPlaneAdapterOptions, type XenoComputerAutomationOperation, type XenoDurableAutomationOptions, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHostAutomationAuditEvent, type XenoHostAutomationAuditLoggerPort, type XenoHostAutomationEnvironment, type XenoHostAutomationStatusReport, type XenoHostAutomationSurfaceStatus, CliGovernedAutomationRuntime as XenoHostGovernedAutomationRuntime, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, assertRequiredXenoAutomationEvidence, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertXenoAutomationAdapterConformant, assertXenoAutomationAuthority, buildXenoAutomationCapabilityUse, createCliAutomationAuditSink, createCliGovernedAutomationRuntime, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createCliAutomationAuditSink as createXenoHostAutomationAuditSink, createCliGovernedAutomationRuntime as createXenoHostGovernedAutomationRuntime, describeXenoAutomationOperation, inspectCliAutomationStatus, inspectCliAutomationStatus as inspectXenoHostAutomationStatus, isXenoAutomationOperation, materializeXenoAutomationEvidence, openSqliteAutomationExecutionJournal, pending, persistXenoAutomationEvidence, readCliAutomationEnvironment, readCliAutomationEnvironment as readXenoHostAutomationEnvironment, renderCliAutomationStatus, renderCliAutomationStatus as renderXenoHostAutomationStatus, resolveXenoAutomationEvidencePolicy, runDurableAutomation };
+export { type CliAutomationAuditEvent, type CliAutomationAuditLoggerPort, type CliAutomationEnvironment, type CliAutomationStatusReport, type CliAutomationSurfaceStatus, CliGovernedAutomationRuntime, type CreateCliGovernedAutomationRuntimeOptions, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHostGovernedAutomationRuntimeOptions, type MaterializeXenoAutomationEvidenceOptions, SqliteAutomationExecutionJournal, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BROWSER_CONTROL_PLANE_OPERATIONS, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionJournal, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationJournalIdentity, type XenoAutomationJournalRecord, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBrowserAutomationOperation, XenoBrowserControlPlaneAdapter, type XenoBrowserControlPlaneAdapterOptions, type XenoComputerAutomationOperation, type XenoComputerHostAuthority, type XenoComputerRequestAuthorizer, type XenoDurableAutomationOptions, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHostAutomationAuditEvent, type XenoHostAutomationAuditLoggerPort, type XenoHostAutomationEnvironment, type XenoHostAutomationStatusReport, type XenoHostAutomationSurfaceStatus, CliGovernedAutomationRuntime as XenoHostGovernedAutomationRuntime, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, assertRequiredXenoAutomationEvidence, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertXenoAutomationAdapterConformant, assertXenoAutomationAdapterRequirements, assertXenoAutomationAuthority, buildXenoAutomationCapabilityUse, createCliAutomationAuditSink, createCliGovernedAutomationRuntime, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createCliAutomationAuditSink as createXenoHostAutomationAuditSink, createCliGovernedAutomationRuntime as createXenoHostGovernedAutomationRuntime, describeXenoAutomationOperation, inspectCliAutomationStatus, inspectCliAutomationStatus as inspectXenoHostAutomationStatus, isXenoAutomationOperation, materializeXenoAutomationEvidence, openSqliteAutomationExecutionJournal, pending, persistXenoAutomationEvidence, readCliAutomationEnvironment, readCliAutomationEnvironment as readXenoHostAutomationEnvironment, renderCliAutomationStatus, renderCliAutomationStatus as renderXenoHostAutomationStatus, resolveXenoAutomationEvidencePolicy, runDurableAutomation };