@xenosystem/agent-sdk 0.10.36 → 0.10.38

package/dist/index.d.ts

@@ -277,6 +277,12 @@ interface ToolDefinition {
         additionalProperties?: boolean | Record<string, unknown>;
         [keyword: string]: unknown;
     };
+    grammar?: ToolInputGrammar;
+}
+interface ToolInputGrammar {
+    syntax: "gbnf";
+    definition: string;
+    inputField: string;
 }
 interface ImageUrlBlock {
     type: "image_url";
@@ -1048,6 +1054,7 @@ interface AgentDefinitionMetadata {
     tags: string[];
     skills: string[];
     hooks: string[];
+    mcpServers?: string[];
     active: boolean;
     shadowedBy?: AgentDefinitionShadowRef;
     toolPolicy?: AgentToolPolicy;
@@ -1091,6 +1098,7 @@ declare function getUserAgentDefinitionsDir(agentHome?: string): string;
 declare function getProjectAgentDefinitionDirs(cwd?: string): string[];
 declare function getProjectAgentDefinitionsDir(cwd?: string): string;
 declare function isValidAgentDefinitionName(name: string): boolean;
+declare function validateAgentMcpServers(value: unknown): string[];
 declare function validateAgentDefinition(definition: Pick<AgentDefinition, "name" | "prompt">): string[];
 declare function scanAgentDefinitions(cwd?: string, options?: AgentDefinitionLoaderOptions): AgentDefinitionScanResult;
 declare function resolveAgentDefinition(name: string, cwd?: string, options?: AgentDefinitionLoaderOptions): {
@@ -1127,6 +1135,7 @@ declare function createAgentDefinitionFile(input: {
     isolation?: AgentDefinitionIsolation;
     skills?: string[];
     hooks?: string[];
+    mcpServers?: string[];
     toolPolicy?: AgentToolPolicy;
     prompt?: string;
     force?: boolean;
@@ -2123,6 +2132,7 @@ interface XenoAutomationAdapterExecutionResult {
     };
 }
 interface XenoAutomationAdapter {
+    assertCurrent?(request: XenoAutomationRequest): Promise<void> | void;
     manifest(): Promise<XenoAutomationAdapterManifest> | XenoAutomationAdapterManifest;
     preflight(request: XenoAutomationRequest, signal: AbortSignal): Promise<XenoAutomationPreflight>;
     execute(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, grant: XenoAutomationExecutionGrant, signal: AbortSignal): Promise<XenoAutomationAdapterExecutionResult>;
@@ -2183,6 +2193,7 @@ declare class XenoAutomationError extends Error {
 }
 declare function assertValidXenoAutomationRequest(request: XenoAutomationRequest): void;
 declare function assertValidXenoAutomationAdapterManifest(manifest: XenoAutomationAdapterManifest): void;
+declare function assertXenoAutomationAdapterRequirements(request: XenoAutomationRequest, manifest: XenoAutomationAdapterManifest): void;
 declare function assertXenoAutomationAuthority(request: XenoAutomationRequest, manifest: XenoAutomationAdapterManifest, observedTarget: XenoAutomationTarget): void;
 declare function buildXenoAutomationCapabilityUse(request: XenoAutomationRequest, target: XenoAutomationTarget): XenoCapabilityUse;
 declare function resolveXenoAutomationEvidencePolicy(request: XenoAutomationRequest): XenoAutomationEvidencePolicy;
@@ -2392,6 +2403,9 @@ interface XenoGovernedAutomationExecutorOptions {
     durable?: XenoDurableAutomationOptions;
     artifactRepository?: XenoArtifactRepository;
     now?: () => string;
+    assertCurrent?: (request: XenoAutomationRequest) => void | Promise<void>;
+    onPreflight?: (request: XenoAutomationRequest, preflight: XenoAutomationPreflight, signal: AbortSignal) => Promise<void>;
+    onGrant?: (request: XenoAutomationRequest, preflight: XenoAutomationPreflight, grant: XenoAutomationExecutionGrant, signal: AbortSignal) => Promise<void>;
 }
 declare class XenoGovernedAutomationExecutor {
     private readonly adapter;
@@ -2399,9 +2413,12 @@ declare class XenoGovernedAutomationExecutor {
     private readonly durable;
     private readonly artifactRepository?;
     private readonly now;
+    private readonly assertCurrent;
     private readonly executions;
     private readonly active;
     constructor(options: XenoGovernedAutomationExecutorOptions);
+    private readonly onPreflight;
+    private readonly onGrant;
     execute(request: XenoAutomationRequest, signal?: AbortSignal): Promise<XenoAutomationExecutionResult>;
     stop(operationId: string, reason?: string): Promise<boolean>;
     private executeFresh;
@@ -2415,6 +2432,10 @@ interface XenoLoopbackAutomationAdapterOptions {
     timeoutMs?: number;
     maxResponseBytes?: number;
     fetch?: typeof globalThis.fetch;
+    ownedView?: {
+        ownerId: string;
+        sessionId: string;
+    };
 }
 declare class XenoLoopbackAutomationAdapter implements XenoAutomationAdapter {
     private readonly endpoint;
@@ -2422,6 +2443,7 @@ declare class XenoLoopbackAutomationAdapter implements XenoAutomationAdapter {
     private readonly timeoutMs;
     private readonly maxResponseBytes;
     private readonly fetchImpl;
+    private readonly ownedView;
     constructor(options: XenoLoopbackAutomationAdapterOptions);
     manifest(): Promise<XenoAutomationAdapterManifest>;
     preflight(request: XenoAutomationRequest, signal: AbortSignal): Promise<XenoAutomationPreflight>;
@@ -2459,20 +2481,15 @@ interface XenoBrowserControlPlaneAdapterOptions {
     driver: "browser" | "extension";
     fetch?: typeof globalThis.fetch;
     timeoutMs?: number;
+    ownedView?: {
+        ownerId: string;
+        sessionId: string;
+    };
 }
-declare class XenoBrowserControlPlaneAdapter implements XenoAutomationAdapter {
-    private readonly options;
-    private readonly base;
-    private readonly fetchImpl;
-    private readonly timeoutMs;
+declare class XenoBrowserControlPlaneAdapter extends XenoLoopbackAutomationAdapter {
+    private readonly driver;
     constructor(options: XenoBrowserControlPlaneAdapterOptions);
     manifest(): Promise<XenoAutomationAdapterManifest>;
-    preflight(request: XenoAutomationRequest, signal: AbortSignal): Promise<XenoAutomationPreflight>;
-    execute(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, _grant: XenoAutomationExecutionGrant, signal: AbortSignal): Promise<XenoAutomationAdapterExecutionResult>;
-    stop(_operationId: string, _reason: string): Promise<void>;
-    private resultEvidence;
-    private snapshotEvidence;
-    private call;
 }
 type AgentChildOutcome = "completed" | "failed" | "timeout" | "cancelled" | "incomplete";
 type AgentChildKind = "dispatch" | "branch";
@@ -2787,10 +2804,14 @@ declare class ToolRegistry {
     private validateInputs;
     private readonly toolSchemaMode;
     private readonly activatedDefinitions;
+    private memoryRuntime?;
+    private memoryBindingScope?;
     constructor(options?: ToolRegistryOptions);
     setValidateInputs(enabled: boolean): this;
     get inputValidationEnabled(): boolean;
     get schemaLoadingMode(): "all" | "demand";
+    bindMemoryManager(manager: MemoryManager | undefined): void;
+    attachMemoryRuntime(runtime: ToolRuntimeContext, scope?: MemoryManager["accessScope"]): void;
     register(tool: RegisteredTool): void;
     registerAlias(tool: RegisteredTool): void;
     registerAll(tools: Iterable<RegisteredTool>): void;
@@ -2860,6 +2881,11 @@ interface CliAutomationAuditLoggerPort {
         metadata: Record<string, unknown>;
     }): Promise<unknown>;
 }
+type XenoComputerRequestAuthorizer = (method: string, url: string) => Promise<{
+    token: string;
+    tokenType: "Bearer" | "DPoP";
+    headers?: Record<string, string>;
+} | null>;
 interface CliAutomationEnvironment {
     browser?: {
         driver: "browser" | "extension";
@@ -2873,10 +2899,15 @@ interface CliAutomationEnvironment {
         uploads: "deny" | "prompt" | "allow";
         downloads: "deny" | "prompt" | "allow";
         recording: "disabled" | "bounded";
+        ownedView?: {
+            ownerId: string;
+            sessionId: string;
+        };
     };
     computer?: {
         baseUrl?: string;
         token?: string;
+        authorize?: XenoComputerRequestAuthorizer;
         deviceId?: string;
         allowedApplications: string[];
     };
@@ -2912,6 +2943,23 @@ interface CreateCliGovernedAutomationRuntimeOptions {
     safeMode?: boolean;
     environment?: CliAutomationEnvironment;
     onAudit?: (event: CliAutomationAuditEvent) => Promise<void> | void;
+    computerOwnerAdmission?: {
+        executingPrincipalId: string;
+        authorize(input: unknown, signal: AbortSignal): Promise<unknown>;
+    };
+    computerAdapter?: XenoAutomationAdapter;
+    computerHostAuthority?: XenoComputerHostAuthority;
+}
+interface XenoComputerHostAuthority {
+    begin(request: XenoAutomationRequest, decision: {
+        authorization: ToolAuthorizationReceipt;
+        profileFingerprint: string;
+        assertCurrent(): void;
+    }, signal: AbortSignal): Promise<void>;
+    recordPreflight(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, signal: AbortSignal): Promise<void>;
+    recordGrant(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, grant: XenoAutomationExecutionGrant, signal: AbortSignal): Promise<void>;
+    assertCurrent(request: XenoAutomationRequest): Promise<void>;
+    finish(request: XenoAutomationRequest): Promise<void>;
 }
 declare class CliGovernedAutomationRuntime implements XenoGovernedAutomationToolRuntime {
     private readonly options;
@@ -2920,8 +2968,11 @@ declare class CliGovernedAutomationRuntime implements XenoGovernedAutomationTool
     private readonly environment;
     private browserAdapter?;
     private computerAdapter?;
+    private verifiedOperations;
+    private readonly registered;
     constructor(options: CreateCliGovernedAutomationRuntimeOptions);
     register(registry: ToolRegistry): number;
+    registerVerified(registry: ToolRegistry): Promise<number>;
     execute(input: XenoGovernedAutomationToolExecution): Promise<XenoAutomationExecutionResult>;
     stop(operationId: string, reason?: string): Promise<boolean>;
     private securityPolicy;
@@ -4107,154 +4158,6 @@ declare function validateXenoSdkApiKey(options: ValidateXenoSdkApiKeyOptions): P
     valid: boolean;
     error?: string;
 }>;
-declare const DEFAULT_API_KEY: string;
-declare const XENO_API_BASE: string;
-declare const XENO_RT_DEFAULT_URL: string;
-declare function resolveLocalRuntimeUrl(options?: {
-    localRuntimeUrl?: string;
-    ollamaBaseURL?: string;
-}): string;
-declare const DEFAULT_MODEL: string;
-declare const FALLBACK_MODELS: readonly string[];
-interface ModelInfo {
-    id: string;
-    name: string;
-    owned_by: string;
-    source: "xeno" | "local";
-    type?: string;
-    output_modalities?: string[];
-    input_modalities?: string[];
-    available?: boolean;
-    contextWindow?: number;
-    maxCompletionTokens?: number;
-}
-interface LocalRuntimePreflightResult {
-    ok: boolean;
-    model: string;
-    baseUrl: string;
-    endpoint?: "openai" | "native";
-    warning?: string;
-    error?: string;
-}
-declare function cachedModelContextWindow(modelId: string): number | undefined;
-declare function cachedModelImageInput(modelId: string): boolean | undefined;
-declare function getAvailableModels(options?: {
-    apiKey?: string;
-    localRuntimeUrl?: string;
-    forceRefresh?: boolean;
-    requestContext?: XenoRequestContext;
-}): Promise<ModelInfo[]>;
-declare function isLocalModel(model: string): boolean;
-declare function getModelName(model: string): string;
-declare function preflightLocalModel(model: string, options?: {
-    localRuntimeUrl?: string;
-    timeoutMs?: number;
-}): Promise<LocalRuntimePreflightResult>;
-declare function isValidModel(model: string, apiKey?: string, forceRefresh?: boolean): Promise<boolean>;
-declare function isChatModel(model: ModelInfo): boolean;
-declare function getChatModels(apiKey?: string, forceRefresh?: boolean): Promise<ModelInfo[]>;
-declare function formatModelList(apiKey?: string, showAll?: boolean, forceRefresh?: boolean): Promise<string>;
-interface ProfileMCPServerConfig {
-    name: string;
-    command: string;
-    args?: string[];
-    env?: Record<string, string>;
-    cwd?: string;
-}
-interface ConfigProfile {
-    name: string;
-    apiKey?: string;
-    baseURL?: string;
-    model?: string;
-    maxTokens?: number;
-    permissionMode?: "default" | "acceptEdits" | "bypassPermissions" | "auto";
-    plugins?: string[];
-    mcpServers?: ProfileMCPServerConfig[];
-}
-declare class ProfileManager {
-    private data;
-    private filePath;
-    constructor();
-    listProfiles(): ConfigProfile[];
-    getActiveProfile(): ConfigProfile;
-    getActiveProfileName(): string;
-    switchProfile(name: string): void;
-    createProfile(profile: ConfigProfile): void;
-    deleteProfile(name: string): void;
-    updateProfile(name: string, updates: Partial<ConfigProfile>): void;
-    getProfile(name: string): ConfigProfile | undefined;
-    reload(): void;
-    private load;
-    private save;
-}
-interface ProjectConfig {
-    model?: string;
-    systemPrompt?: string;
-    permissions?: {
-        allowedCommands?: string[];
-        deniedCommands?: string[];
-    };
-    ignorePatterns?: string[];
-}
-declare function loadProjectConfig(cwd?: string): ProjectConfig | null;
-declare function mergeConfigs(base: ProjectConfig, override: ProjectConfig): ProjectConfig;
-interface SessionData {
-    id: string;
-    model: string;
-    workingDirectory: string;
-    createdAt: string;
-    updatedAt: string;
-    messages: Message[];
-    totalTokensUsed: number;
-}
-interface SessionSummary {
-    id: string;
-    createdAt: string;
-    updatedAt: string;
-    model: string;
-    workingDirectory: string;
-    preview: string;
-    messageCount: number;
-}
-declare function saveSession(id: string | null, messages: Message[], model: string, totalTokensUsed: number): string;
-declare function loadSession(id: string): SessionData | null;
-declare function listSessions(limit?: number): SessionSummary[];
-declare function deleteSession(id: string): boolean;
-interface ModelProvider {
-    id: string;
-    name: string;
-    baseURL: string;
-    apiKeyEnvVar: string;
-    defaultApiKey?: string;
-    modelPrefixes: string[];
-    models: string[];
-    supportsStreaming: boolean;
-    supportsToolUse: boolean;
-    maxContextTokens?: number;
-    headers?: Record<string, string>;
-    requestFormat?: "openai" | "google";
-}
-interface ResolvedProvider {
-    provider: ModelProvider;
-    model: string;
-    baseURL: string;
-    apiKey: string;
-    headers: Record<string, string>;
-}
-declare function resolveModelContextTokens(model: string): number | undefined;
-declare class ModelProviderRegistry {
-    private providers;
-    constructor();
-    addProvider(provider: ModelProvider): void;
-    removeProvider(id: string): boolean;
-    getProvider(id: string): ModelProvider | undefined;
-    listProviders(): ModelProvider[];
-    resolveProvider(model: string, overrides?: {
-        apiKey?: string;
-        baseURL?: string;
-    }): ResolvedProvider;
-}
-declare function getDefaultProviderRegistry(): ModelProviderRegistry;
 type DirectEndpointProfile = "public-https" | "local-network";
 interface DirectEndpointPolicy {
     profile?: DirectEndpointProfile;
@@ -4454,6 +4357,7 @@ type XenoChatMessage = {
 };
 interface StreamResult {
     content: ContentBlock[];
+    reasoningContent?: string;
     stopReason: "end_turn" | "tool_use" | "max_tokens" | "stop_sequence";
     inputTokens: number;
     outputTokens: number;
@@ -4512,8 +4416,10 @@ interface LlmClientDeps {
     reportFailure(diagnostics: ApiRequestFailureDiagnostics): Promise<void>;
 }
 declare class LlmClient {
-    private readonly deps;
+    private deps;
     constructor(deps: LlmClientDeps);
+    configureAuthorization(options: Pick<LlmClientDeps, "apiKey" | "authorizeRequest">): void;
+    private localGrammarProbe?;
     readonly id = "xeno-llm-client";
     complete(model: string, messages: ApiMessage[], tools: ToolDefinition[], onText?: (text: string) => void, signal?: AbortSignal): Promise<StreamResult>;
     completeLocal(model: string, messages: ApiMessage[], tools: ToolDefinition[], onText?: (text: string) => void, signal?: AbortSignal): Promise<StreamResult>;
@@ -4624,6 +4530,9 @@ interface LLMProviderRequestContext {
     systemPrompt: string;
     attemptId?: string;
     quotaRemainingTokens?: number;
+    toolChoice?: "auto" | "none" | "required" | {
+        name: string;
+    };
     onEvent?: (event: ProviderStreamEvent) => void | Promise<void>;
 }
 interface LLMProviderCapabilities {
@@ -4639,6 +4548,8 @@ interface LLMProviderCapabilities {
     readonly cancellation?: boolean;
     readonly retryAfter?: boolean;
     readonly promptCaching?: boolean;
+    readonly customToolGrammarsGbnf?: boolean;
+    readonly customToolGrammarsGbnfStreaming?: boolean;
     readonly [capability: string]: boolean | undefined;
 }
 interface LLMProvider {
@@ -5294,6 +5205,8 @@ declare class UnifiedExecError extends Error {
     constructor(code: "PTY_UNAVAILABLE" | "PROCESS_LIMIT" | "INVALID_SIZE" | "SPAWN_ERROR" | "INVOCATION_UNSUPPORTED", message: string);
 }
 declare class UnifiedExecManager {
+    private disposed;
+    private readonly disposal;
     private readonly processes;
     private readonly listeners;
     private readonly maxProcesses;
@@ -5308,6 +5221,8 @@ declare class UnifiedExecManager {
         adapter?: string;
     };
     onEvent(listener: UnifiedExecEventListener): () => void;
+    prepareStart(options?: UnifiedExecStartOptions, signal?: AbortSignal): Promise<void>;
+    startAsync(command: string, options?: UnifiedExecStartOptions, signal?: AbortSignal): Promise<UnifiedExecProcess>;
     start(command: string, options?: UnifiedExecStartOptions): UnifiedExecProcess;
     writeStdin(processId: string, text: string, options?: {
         source?: UnifiedExecInputSource;
@@ -5882,6 +5797,11 @@ declare class AgentLoop {
         modelWorkAccounting?: ModelWorkAccounting;
         runAuthority?: RunAuthority;
     }): void;
+    configureRequestAuthorization(options: {
+        apiKey?: string;
+        authorizeRequest?: AgentLoopConfig["authorizeRequest"];
+    }): void;
+    createChildRequestAuthorizer(): NonNullable<AgentLoopConfig["authorizeRequest"]>;
     get lastTraceId(): string | null;
     get lastRunTermination(): AgentRunTermination | null;
     get queryState(): QueryState;
@@ -5976,6 +5896,158 @@ declare class AgentLoop {
     private runInternal;
     clearHistory(): void;
 }
+declare const DEFAULT_API_KEY: string;
+declare const XENO_API_BASE: string;
+declare const MODEL_CATALOG_ACCOUNT_AUTH_VERSION = 1;
+declare const XENO_RT_DEFAULT_URL: string;
+declare function resolveLocalRuntimeUrl(options?: {
+    localRuntimeUrl?: string;
+    ollamaBaseURL?: string;
+}): string;
+declare const DEFAULT_MODEL: string;
+declare const FALLBACK_MODELS: readonly string[];
+interface ModelInfo {
+    id: string;
+    name: string;
+    owned_by: string;
+    source: "xeno" | "local";
+    type?: string;
+    output_modalities?: string[];
+    input_modalities?: string[];
+    available?: boolean;
+    availability?: string;
+    availabilityFailureCode?: string;
+    contextWindow?: number;
+    maxCompletionTokens?: number;
+}
+interface LocalRuntimePreflightResult {
+    ok: boolean;
+    model: string;
+    baseUrl: string;
+    endpoint?: "openai" | "native";
+    warning?: string;
+    error?: string;
+}
+declare function cachedModelContextWindow(modelId: string): number | undefined;
+declare function cachedModelImageInput(modelId: string): boolean | undefined;
+declare function getAvailableModels(options?: {
+    apiKey?: string;
+    localRuntimeUrl?: string;
+    forceRefresh?: boolean;
+    requestContext?: XenoRequestContext;
+    authorizeRequest?: AgentLoopConfig["authorizeRequest"];
+}): Promise<ModelInfo[]>;
+declare function isLocalModel(model: string): boolean;
+declare function getModelName(model: string): string;
+declare function preflightLocalModel(model: string, options?: {
+    localRuntimeUrl?: string;
+    timeoutMs?: number;
+}): Promise<LocalRuntimePreflightResult>;
+declare function isValidModel(model: string, apiKey?: string, forceRefresh?: boolean): Promise<boolean>;
+declare function isChatModel(model: ModelInfo): boolean;
+declare function getChatModels(apiKey?: string, forceRefresh?: boolean): Promise<ModelInfo[]>;
+declare function formatModelList(apiKey?: string, showAll?: boolean, forceRefresh?: boolean, authorizeRequest?: AgentLoopConfig["authorizeRequest"]): Promise<string>;
+interface ProfileMCPServerConfig {
+    name: string;
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+    cwd?: string;
+}
+interface ConfigProfile {
+    name: string;
+    apiKey?: string;
+    baseURL?: string;
+    model?: string;
+    maxTokens?: number;
+    permissionMode?: "default" | "acceptEdits" | "bypassPermissions" | "auto";
+    plugins?: string[];
+    mcpServers?: ProfileMCPServerConfig[];
+}
+declare class ProfileManager {
+    private data;
+    private filePath;
+    constructor();
+    listProfiles(): ConfigProfile[];
+    getActiveProfile(): ConfigProfile;
+    getActiveProfileName(): string;
+    switchProfile(name: string): void;
+    createProfile(profile: ConfigProfile): void;
+    deleteProfile(name: string): void;
+    updateProfile(name: string, updates: Partial<ConfigProfile>): void;
+    getProfile(name: string): ConfigProfile | undefined;
+    reload(): void;
+    private load;
+    private save;
+}
+interface ProjectConfig {
+    model?: string;
+    systemPrompt?: string;
+    permissions?: {
+        allowedCommands?: string[];
+        deniedCommands?: string[];
+    };
+    ignorePatterns?: string[];
+}
+declare function loadProjectConfig(cwd?: string): ProjectConfig | null;
+declare function mergeConfigs(base: ProjectConfig, override: ProjectConfig): ProjectConfig;
+interface SessionData {
+    id: string;
+    model: string;
+    workingDirectory: string;
+    createdAt: string;
+    updatedAt: string;
+    messages: Message[];
+    totalTokensUsed: number;
+}
+interface SessionSummary {
+    id: string;
+    createdAt: string;
+    updatedAt: string;
+    model: string;
+    workingDirectory: string;
+    preview: string;
+    messageCount: number;
+}
+declare function saveSession(id: string | null, messages: Message[], model: string, totalTokensUsed: number): string;
+declare function loadSession(id: string): SessionData | null;
+declare function listSessions(limit?: number): SessionSummary[];
+declare function deleteSession(id: string): boolean;
+interface ModelProvider {
+    id: string;
+    name: string;
+    baseURL: string;
+    apiKeyEnvVar: string;
+    defaultApiKey?: string;
+    modelPrefixes: string[];
+    models: string[];
+    supportsStreaming: boolean;
+    supportsToolUse: boolean;
+    maxContextTokens?: number;
+    headers?: Record<string, string>;
+    requestFormat?: "openai" | "google";
+}
+interface ResolvedProvider {
+    provider: ModelProvider;
+    model: string;
+    baseURL: string;
+    apiKey: string;
+    headers: Record<string, string>;
+}
+declare function resolveModelContextTokens(model: string): number | undefined;
+declare class ModelProviderRegistry {
+    private providers;
+    constructor();
+    addProvider(provider: ModelProvider): void;
+    removeProvider(id: string): boolean;
+    getProvider(id: string): ModelProvider | undefined;
+    listProviders(): ModelProvider[];
+    resolveProvider(model: string, overrides?: {
+        apiKey?: string;
+        baseURL?: string;
+    }): ResolvedProvider;
+}
+declare function getDefaultProviderRegistry(): ModelProviderRegistry;
 interface RetryErrorContext {
     statusCode?: number;
     retryAfterMs?: number;
@@ -6138,6 +6210,7 @@ interface PromptContext {
     memory?: string;
     sessionId?: string;
     executionMode?: ExecutionMode;
+    gitRepo?: boolean;
 }
 declare function buildSystemPrompt(ctx: PromptContext): string;
 interface BackgroundTask {
@@ -6260,12 +6333,16 @@ interface BackgroundOwnerCleanupResult {
     taskIds: string[];
     pendingTaskIds: string[];
     unknownTaskIds: string[];
+    pendingOutputTaskIds?: string[];
     error?: string;
 }
 declare class BackgroundProcessManager {
     private readonly execManager;
+    private disposed;
+    private readonly disposal;
     private readonly managerInstanceId;
     private readonly cleanupFences;
+    private readonly ownerPreparations;
     private readonly states;
     private readonly processToTask;
     private readonly listeners;
@@ -6284,6 +6361,7 @@ declare class BackgroundProcessManager {
     onTaskComplete(cb: TaskCompletionCallback): void;
     onTaskEvent(listener: (event: BackgroundTaskEvent) => void): () => void;
     waitForChange(taskId: string, offset: number, timeoutMs: number, signal?: AbortSignal): Promise<BackgroundTask | null>;
+    spawnAsync(command: string, options?: BackgroundTaskSpawnOptions, signal?: AbortSignal): Promise<string>;
     spawn(command: string, options?: BackgroundTaskSpawnOptions): string;
     registerExternal(options: ExternalBackgroundTaskOptions): string;
     appendExternalOutput(taskId: string, stream: "stdout" | "stderr", text: string): boolean;
@@ -6314,6 +6392,7 @@ declare class BackgroundProcessManager {
     restoreOwnerAdmission(ownerSessionId: string, authority: BackgroundOwnerCleanupToken): boolean;
     private validateCleanupAuthority;
     private assertOwnerAdmission;
+    private fenceOwnerAdmission;
     deleteOutput(taskId: string): boolean;
     killAll(): void;
     dispose(): void;
@@ -7241,6 +7320,7 @@ declare function createOsProtectedStateStore(options?: OsProtectedStateStoreOpti
 declare function createUnavailableProtectedStateStore(kind?: string): ProtectedStateStore;
 declare function createMemoryProtectedStateStore(kind?: string): ProtectedStateStore;
 declare function createProtectedStateEnvelopeCipher(options?: ProtectedStateEnvelopeCipherOptions): ProtectedStateEnvelopeCipher;
+declare function assertCurrentToolAuthorization(receipt: ToolAuthorizationReceipt, toolName: string, input: Record<string, unknown>): void;
 declare const XENO_SKILL_SCHEMA_VERSION: 2;
 type XenoSkillSource = "managed" | "built-in" | "user" | "project" | "plugin" | "compatible" | "legacy";
 type XenoSkillExternalActionPolicy = "deny" | "ask" | "allow";
@@ -7629,6 +7709,8 @@ declare class PersistentShellSession {
     private child;
     private readonly detachedChildren;
     private readonly closingChildren;
+    private readonly unconfirmedChildren;
+    private readonly closedChildren;
     private queue;
     private processing;
     private knownCwd;
@@ -7737,7 +7819,7 @@ interface XenoBasicRasterImage {
 }
 declare function decodeXenoBmp(buffer: Buffer): XenoBasicRasterImage;
 declare function decodeXenoNetpbm(buffer: Buffer): XenoBasicRasterImage;
-declare function cleanupReadImagePreviews(ownerSessionId?: string): void;
+declare function cleanupReadImagePreviews(ownerSessionId?: string): boolean;
 declare function getReadImagePreviewCapability(): {
     available: boolean;
     adapter: string;
@@ -11686,6 +11768,7 @@ interface XenoAppServerOptions {
 declare class XenoAppServer {
     private readonly options;
     private stopping;
+    private readonly executionStop;
     private readonly execManager;
     private readonly ownerId;
     private v2Runtime?;
@@ -12028,6 +12111,36 @@ interface ScreenCaptureConfig {
 }
 interface ScreenCaptureOptions extends Partial<ScreenCaptureConfig> {
     desktopCapturer?: XenoDesktopCapturer;
+    windowId?: string;
+    windowCapture?: XenoWindowCaptureAdapter;
+    elementCapture?: XenoElementCaptureAdapter;
+    authorizeCapture?: (target: ScreenCaptureTarget, phase: ScreenCaptureAuthorizationPhase, signal: AbortSignal) => boolean | Promise<boolean>;
+    timeoutMs?: number;
+}
+type ScreenCaptureTarget = {
+    readonly kind: "window";
+    readonly windowId: string;
+} | {
+    readonly kind: "element";
+    readonly element: unknown;
+};
+type ScreenCaptureAuthorizationPhase = "before-capture" | "before-release";
+interface XenoWindowCaptureAdapter {
+    captureWindow(windowId: string, config: Readonly<ScreenCaptureConfig>, signal: AbortSignal): Promise<{
+        windowId: string;
+        thumbnail: XenoDesktopCaptureSource["thumbnail"];
+    }>;
+}
+interface XenoElementCaptureAdapter {
+    captureElement(element: unknown, config: Readonly<ScreenCaptureConfig>, signal: AbortSignal): Promise<{
+        element: unknown;
+        dataUrl: string;
+    }>;
+}
+type ScreenCaptureErrorCode = "SCREEN_CAPTURE_CONFIG_INVALID" | "SCREEN_CAPTURE_TARGET_REQUIRED" | "SCREEN_CAPTURE_AUTHORIZATION_REQUIRED" | "SCREEN_CAPTURE_DENIED" | "SCREEN_CAPTURE_ADAPTER_REQUIRED" | "SCREEN_CAPTURE_TARGET_CHANGED" | "SCREEN_CAPTURE_ELEMENT_UNSUPPORTED" | "SCREEN_CAPTURE_IMAGE_INVALID" | "SCREEN_CAPTURE_TIMEOUT";
+declare class ScreenCaptureError extends Error {
+    readonly code: ScreenCaptureErrorCode;
+    constructor(code: ScreenCaptureErrorCode, message: string);
 }
 interface ImageContentBlock {
     type: "image";
@@ -12063,19 +12176,25 @@ interface XenoDesktopCapturer {
     }): Promise<XenoDesktopCaptureSource[]>;
 }
 declare class ScreenCapture {
-    private config;
-    private desktopCapturer?;
+    private readonly config;
+    private readonly windowId;
+    private readonly windowCapture;
+    private readonly elementCapture;
+    private readonly authorizeCapture;
+    private readonly timeoutMs;
     constructor(options?: ScreenCaptureOptions);
-    captureWindow(): Promise<string>;
+    captureWindow(windowId?: string | undefined): Promise<string>;
     captureElement(element: unknown): Promise<string>;
     formatForLLM(base64: string, mimeType: string): ImageContentBlock;
     getMimeType(): string;
-    private getDesktopCapturer;
+    private assertAuthorized;
+    private assertActive;
+    private bounded;
     private encodeThumbnail;
     private isCanvasElement;
-    private canvasToBase64;
+    private validateDataUrl;
 }
-declare function isScreenCaptureAvailable(desktopCapturer?: XenoDesktopCapturer): boolean;
+declare function isScreenCaptureAvailable(options?: ScreenCaptureOptions | XenoDesktopCapturer): boolean;
 interface ProjectInfo {
     name: string;
     language: string;
@@ -13063,6 +13182,7 @@ interface MCPConfiguredServer extends MCPServerConfig {
 }
 interface ConnectConfiguredMCPServersOptions {
     cwd: string;
+    filter?: (server: MCPConfiguredServer) => boolean;
     promptForApproval?: (server: MCPConfiguredServer) => Promise<MCPApprovalDecision>;
 }
 interface ConnectConfiguredMCPServersResult {
@@ -13149,6 +13269,7 @@ declare class MCPManager {
     private readonly fetcher?;
     private readonly appCapabilities?;
     constructor(options?: MCPManagerOptions);
+    get configuredServerFilterVersion(): 1;
     onServerStateChanged(listener: MCPServerChangeListener): () => void;
     addServer(config: MCPServerConfig): Promise<void>;
     connectConfiguredServers(options: ConnectConfiguredMCPServersOptions): Promise<ConnectConfiguredMCPServersResult>;
@@ -14690,14 +14811,22 @@ declare const SOUND_CAPABILITIES: readonly [
     "Export (WAV, MP3, FLAC, OGG, AIFF)"
 ];
 type DirectProviderKind = "anthropic" | "openai-responses" | "google" | "openai-compatible";
-type DirectProviderCapabilityProfile = Pick<LLMProviderCapabilities, "streaming" | "textInput" | "imageInput" | "tools" | "parallelToolCalls" | "structuredOutput" | "reasoningMetadata" | "usageAccounting" | "cancellation" | "retryAfter" | "promptCaching">;
+type DirectProviderCapabilityProfile = Pick<LLMProviderCapabilities, "streaming" | "textInput" | "imageInput" | "tools" | "parallelToolCalls" | "structuredOutput" | "reasoningMetadata" | "usageAccounting" | "cancellation" | "retryAfter" | "promptCaching" | "customToolGrammarsGbnf" | "customToolGrammarsGbnfStreaming">;
+interface DirectProviderSamplingOptions {
+    temperature?: number;
+    topP?: number;
+    seed?: number;
+}
 interface DirectProviderConfig {
     kind: DirectProviderKind;
     apiKey: string;
     baseURL?: string;
     anthropicVersion?: string;
     maxTokens?: number;
+    sampling?: DirectProviderSamplingOptions;
     xenoPromptTokenCeiling?: number;
+    xenoEnableThinking?: boolean;
+    xenoToolFormat?: "qwen_native";
     streaming?: boolean;
     capabilityProfile?: DirectProviderCapabilityProfile;
     endpointProfile?: DirectEndpointProfile;
@@ -14715,10 +14844,18 @@ interface DirectProviderConfig {
         type: "none";
     };
 }
+interface LocalToolGrammarSupport {
+    gbnf: boolean;
+    streaming: boolean;
+}
+declare function probeLocalToolGrammarSupport(baseURL: string, options?: {
+    signal?: AbortSignal;
+    limits?: ProviderTransportLimits;
+}): Promise<LocalToolGrammarSupport>;
 declare function createDirectProvider(config: DirectProviderConfig): LLMProvider;
-type OllamaNativeProviderConfig = Omit<DirectProviderConfig, "kind" | "streaming" | "capabilityProfile" | "chatCompletionsPath">;
+type OllamaNativeProviderConfig = Omit<DirectProviderConfig, "kind" | "streaming" | "capabilityProfile" | "chatCompletionsPath" | "sampling">;
 declare function createOllamaNativeProvider(config: OllamaNativeProviderConfig): LLMProvider;
-type ToolSchemaProviderDialect = "xeno" | "anthropic" | "openai-responses" | "openai-chat" | "google";
+type ToolSchemaProviderDialect = "xeno" | "anthropic" | "openai-responses" | "openai-chat" | "google" | "google-json-schema";
 interface ToolSchemaProjectionChange {
     path: string;
     keyword: string;
@@ -14806,12 +14943,28 @@ interface XenoProviderModelDescriptor {
     id: string;
     displayName?: string;
     ownedBy?: string;
+    type?: string;
+    supportedInputModalities?: string[];
+    supportedOutputModalities?: string[];
+    supportedParameters?: string[];
+    supportedGenerationMethods?: string[];
+    execution?: XenoProviderModelExecution;
+    available?: boolean;
+    availability?: string;
     contextTokens?: number;
     inputCostPerMillion?: number;
     outputCostPerMillion?: number;
     capabilities?: Partial<XenoProviderCapabilities>;
     metadataSource: "provider" | "configuration" | "catalog";
 }
+interface XenoProviderModelExecution {
+    sync?: boolean;
+    stream?: boolean;
+    async?: boolean;
+    batch?: boolean;
+    maxBatchItems?: number;
+    endpoint?: string;
+}
 interface XenoProviderProbeResult {
     schemaVersion: 1;
     connectionId: string;
@@ -14859,7 +15012,7 @@ declare class XenoProviderCatalog {
 }
 declare function probeXenoProvider(options: ProbeXenoProviderOptions): Promise<XenoProviderProbeResult>;
 declare function selectXenoProviderRoute(candidates: XenoProviderRouteCandidate[], policy?: XenoProviderRoutingPolicy): XenoProviderRouteCandidate[];
-declare function directProviderConfigFromConnection(view: XenoProviderConnectionView, secret: string | undefined): DirectProviderConfig;
+declare function directProviderConfigFromConnection(view: XenoProviderConnectionView, secret: string | undefined, model?: XenoProviderModelDescriptor): DirectProviderConfig;
 declare const XENO_PROVIDER_CONNECTION_STORE_SCHEMA_VERSION: 1;
 interface XenoProviderConnectionSnapshot {
     schemaVersion: typeof XENO_PROVIDER_CONNECTION_STORE_SCHEMA_VERSION;
@@ -15059,4 +15212,4 @@ declare class AgentEvaluator {
     clearResults(): void;
     get resultCount(): number;
 }
-export { type A2AMessage, type A2AMessageType, AGENT_DAEMON_PROTOCOL_VERSION, AGENT_EFFORT_LEVELS, AGENT_PERMISSION_MODES, AGENT_PROFILE_EXTERNAL_ACTIONS, APP_SERVER_PROMPT_BEARING_PARAMS, ARCHITECT_CAPABILITIES, ARCHITECT_TOOL_NAMES, type ActiveLayerInfo, type AddXenoArtifactCommentRequest, type AgentArtifact, type AgentCapabilities, type AgentCard, type AgentChildController, type AgentChildInfo, type AgentChildKind, type AgentChildOutcome, type AgentChildRegistration, type AgentChildSettlement, type AgentChildTokenUsage, AgentDaemonClient, type AgentDaemonError, type AgentDaemonHandler, type AgentDaemonRequest, type AgentDaemonResponse, AgentDaemonServer, type AgentDaemonTransport, AgentDebugger, type AgentDefinition, type AgentDefinitionBudget, type AgentDefinitionIsolation, type AgentDefinitionIssue, AgentDefinitionLoader, type AgentDefinitionLoaderOptions, type AgentDefinitionMetadata, AgentDefinitionResolver, type AgentDefinitionScanResult, type AgentDefinitionScope, type AgentDefinitionShadowRef, type AgentEffortLevel, AgentEvaluator, AgentEventStore, type AgentHookDefinition, AgentHookRunner, AgentInterruptedError, type AgentIpcChannel, type AgentLoadSnapshot, AgentLoop, type AgentLoopConfig, type AgentLoopOptions, type AgentPermissionMode, type AgentProfileActionDecision, type AgentProfileCapabilities, type AgentProfileCapabilityBoundary, type AgentProfileCollaborationMode, type AgentProfileCompletionPolicy, type AgentProfileEvidenceKind, type AgentProfileExecutionPolicy, type AgentProfileExternalAction, type AgentProfileExternalActionPolicy, type AgentProfileIsolation, type AgentProfileKind, type AgentProfileMemoryPolicy, type AgentProfileMemoryScope, type AgentProfilePresentation, type AgentProfileSkillPolicy, type AgentProfileSoulMode, type AgentProfileV2, AgentProfileValidationError, AgentProtocol, AgentRegistry, type AgentRunAgentDefinitionRef, AgentRunController, type AgentRunControllerOptions, type AgentRunCreateInput, AgentRunError, type AgentRunEvent, type AgentRunListOptions, type AgentRunOptions, type AgentRunRecord, type AgentRunSpawnResult, type AgentRunStatus, AgentRunStore, type AgentRunTermination, type AgentRunTerminationReason, type AgentRunTerminationStatus, type AgentRunUsage, type AgentSandbox, type AgentSelectionStrategy, type AgentSessionHostBindingV1, type AgentStreamCallbacks, type AgentTask, type AgentTaskHandler, type AgentTaskResult, type AgentTaskStatus, type AgentTeam, type AgentToAppChannel, type AgentToAppMessages, type AgentToolPolicy, type AnalysisResult, type ApiMessage, type AppAgentBaseOptions, AppAgentFactory, type AppAgentResult, type AppContext, AppContextInjector, AppContextManager, type AppContextProvider, type AppId, type AppServerDestinationExpectation, type AppServerEventV2, type AppServerExecutionIdentity, type AppServerExecutionLeaseV2, type AppServerHandoffOptions, type AppServerInitializeParamsV2, type AppServerInitializeResultV2, type AppServerIntegrationMetadataV2, type AppServerPermissionRequestV2, type AppServerPrincipalV2, AppServerProtocolError, type AppServerProtocolErrorData, AppServerRemoteError, type AppServerRequestContext, type AppServerSlashCommandRefusal, type AppServerSourcePreparation, type AppServerSubscriptionSnapshotV2, type AppServerThreadStatusV2, type AppServerThreadV2, type AppServerTurnRunnerContextV2, type AppServerTurnRunnerV2, type AppServerTurnStatusV2, type AppServerTurnV2, type AppServerV2ClientTransport, type AppServerV2MethodMap, type AppServerV2Options, type AppToAgentChannel, type AppToAgentMessages, type AppType, type ArchitectAgentOptions, type ArchitectToolAdapter, type ArtifactToolActionClass, type AskUserHandler, type AskUserRequest, type AskUserResponse, type AtomicMessageGroup, type AudioProjectInfo, type AudioStemSeparationResult, type AudioToolAdapter, type AudioTrackType, type AudioTranscriptionResult, type AudioTranscriptionSegment, type AuditDecision, type AuditEvent, AuditLogger, type AuditReplayReport, type AuditReplayStep, type AuditRiskLevel, type AuditStatus, type AuditTraceGapEntry, type AuditTraceReport, type AuditTraceSummary, type AuditTraceTimelineEntry, type AuditTraceToolSummary, type AugmentContextOptions, type AuthorizedShellExecution, AutoCheckpointHandler, AutoMemory, type AutoMemoryContext, type AutoMemoryTrigger, AutoPermissionClassifier, type AutoPermissionDecision, BUILT_IN_XENO_PROVIDER_PRESETS, type BackgroundOwnerCleanupResult, type BackgroundOwnerCleanupToken, BackgroundProcessManager, type BackgroundTask, type BaseHookDefinition, type BenchBashMiddlewareOptions, type BlockContent, type BlockType, type BoundedShellOutput, type BreakpointCallback, type BuildResult, type BuildXenoSecureExecutionContractOptions, COMPAT_TOOL_ALIASES, CONFIG_VERSION, type CanonicalSecurityPath, type CanvasSize, type CapabilityLeaseCommand, type CapabilityLeasePersistence, type CapabilityLeaseTransaction, type CapabilityMutationAck, type CapabilityMutationReceipt, type CellRangeData, type ChartConfig, type ChatCompletionChunk, type ChatCompletionRequest, type ChatCompletionResponse, type ChatMessage, type ChatParams, type ChatResponse, type CheckpointData, type CheckpointInfo, CheckpointManager, type CheckpointTrigger, type ClaimXenoHandoffInput, type ClashResult, type CliAutomationAuditEvent, type CliAutomationAuditLoggerPort, type CliAutomationEnvironment, type CliAutomationStatusReport, type CliAutomationSurfaceStatus, CliGovernedAutomationRuntime, type ClipContext, type CodeApplyOptions, type CodeApplyResult, type CodeValidationIssue, type CodeValidationResult, CodeValidator, type CodingBenchmarkAssessment, type CodingBenchmarkMeasurement, type CodingBenchmarkOptions, type CodingBenchmarkReport, type CodingBenchmarkThreshold, type CommandBackedProtectedStateOptions, type CommandHookDefinition, CommandHookRunner, type CompactionRecord, type CompileAgentProfileOptions, type CompiledAgentProfile, type CompiledJsonSchema, type CompletionDecision, type CompletionGuard, type CompletionGuardContext, type CompletionGuardDecision, type CompletionGuardEvaluationContext, CompletionGuardRegistry, type CompletionGuardResult, type CompletionGuardResultObject, type CompletionGuardStopReason, type CompletionGuardToolPolicy, type CompletionGuardToolPolicyMode, type CompletionGuardTurnStats, type CompletionGuardVeto, type ComponentData, type CompressionLLMFn, type CompressionStats, type ConfigProfile, type ConnectConfiguredMCPServersOptions, type ConnectConfiguredMCPServersResult, type ContainedProcessSpec, type ContainmentAdapterIdentity, ContainmentApprovalError, type ContainmentCertificationBinding, ContainmentCertificationError, type ContainmentConformanceCheck, type ContentBlock, type ContextCompressedData, ContextManager, type ContextManagerConfig, type ContextSection, type ContextSource, type ControlPlaneLockHandle, type ControlPlaneLockRecord, ConversationStore, type CreateAuditBackedPermissionEngineOptions, type CreateCliGovernedAutomationRuntimeOptions, type CreateDelegatedBranchAgent, type CreateDelegatedBranchAgentOptions, type CreateDelegatedXenoAgentOptions, type CreateDispatchAgentToolOptions, type CreateXenoAgentOptions, type CreateXenoAgentResult, type CreateXenoGoalInput, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHandoffInput, type CreateXenoHandoffOptions, type CreateXenoHostGovernedAutomationRuntimeOptions, type CreateXenoShareOptions, type CreateXenoSkillToolOptions, type CreateXenoSourceResearchReportInput, type CrossAppHandler, type CrossAppMessage, CrossAppRouter, CrossAppRouterError, type CrossAppRouterOptions, DEFAULT_API_KEY, DEFAULT_IMAGE_MODEL, DEFAULT_MEMORY_BUDGETS, DEFAULT_MODEL, DEFAULT_PROMPT_SECTIONS_TOKEN_BUDGET, DEFAULT_PROTECTED_STATE_KEY_NAME, DEFAULT_PROTECTED_STATE_SERVICE, DEFAULT_SUBAGENT_BRANCH_POLICY, DEFAULT_SUBAGENT_REMOTE_MCP_BY_ROLE, DEFAULT_SUBAGENT_ROLES, DEFAULT_SUBAGENT_ROLE_PRECEDENCE, DEFAULT_SUBAGENT_TEAM_PRESET, DIRECT_SHELL_CONTEXT_WARNING, DISPATCH_AGENT_ERROR_CODES, DOCS_CAPABILITIES, DOCS_TOOL_NAMES, type DebugBreakpoint, type DebugSnapshot, type DebugStep, type DebugStepCallback, type DecideXenoArtifactRequest, type DefaultToolRegistryOptions, type DefaultWebContextRequestFactoryOptions, type DelegatedBranchAdmission, type DelegatedBranchAdmissionSettlement, type DelegatedBranchAgent, type DelegatedBranchAgentCallbacks, type DelegatedXenoTurnResult, type DelegationBudget, type DelegationLimits, type DelegationSummaryData, type DependencyEdge, type DerivedPermissionEngineOptions, type DescendantInstructionHint, type DirectEndpointPolicy, type DirectEndpointProfile, type DirectProviderCapabilityProfile, type DirectProviderConfig, type DirectProviderKind, type DirectShellMessageMetadata, type DirectShellResultRecord, type DispatchAgentErrorCode, type DispatchAgentHandler, type DispatchAgentRequest, type DispatchAgentResponse, type DispatchAgentTermination, type DocComment, type DocsAgentOptions, type DocsToolAdapter, type DocumentContext, type DualLLMMode, DualLLMProvider, type DualLLMProviderConfig, type DualLLMProviderLike, type DualLLMStatus, type DurableCapabilityLeaseOptions, DurableXenoCapabilityLeaseRegistry, DurableXenoCoordinationStore, ENGINE_CAPABILITIES, ENGINE_TOOL_NAMES, ENTER_PLAN_MODE_TOOL_NAME, EXIT_PLAN_MODE_TOOL_NAME, ElectronAgentBridge, type ElectronAgentConfig, type EngineAgentOptions, type EngineToolAdapter, type EntityInfo, type Episode, type EpisodeOutcome, EpisodicStore, type EpisodicStoreOptions, type ErrorData, type EvalReport, type EvalResult, type EvalRunOptions, type EvalTask, type ExchangeMCPOAuthCodeOptions, type ExecuteToolRequest, type ExecuteToolResult, type ExecuteXenoCoordinationActionInput, type ExecuteXenoCoordinationActionResult, ExecutionGovernance, type ExecutionGovernanceOptions, type ExecutionGovernanceSummary, type ExecutionMode, type ExecutionSecurityCapabilities, ExecutionSecurityError, type ExecutionSecurityErrorCode, type ExecutionSecurityLevel, type ExecutionTrustMode, type ExpectedOutputContract, type ExportableSoulSigner, type ExtendedAppType, FALLBACK_MODELS, type FailureCluster, type FileEntry, FileQuotaAuthority, type FileSnapshot, FileXenoArtifactRepository, type FileXenoArtifactRepositoryOptions, FileXenoProviderConnectionStore, type FileXenoProviderConnectionStoreOptions, FileXenoShareRegistry, type FileXenoShareRegistryOptions, type FilterConfig, type FormatVerdict, type GovernanceExtensions, type GovernanceExtensionsOptions, HIGH_RISK_PERMISSIONS, type HarnessTask, type HarnessTaskStatus, type HarnessTaskUpdate, type HookConfig, type HookDecision, type HookDefinition, type HookEventName, type HookExecutionResult, type HookExecutionStatus, type HookInput, type HookInputBase, type HookInvocationInput, type HookModelExecutor, type HookPermissionMode, type HookRunResult, HookRunner, HookRuntime, type HookRuntimeOptions, type HttpHookDefinition, HttpHookRunner, IDENTITY_PATHS, INTERRUPTED_QUESTION_ERROR_CODE, type IdentityFrontmatter, type IdentityLayer, type IdentityLoadResult, IdentityLoader, type IdentityLoaderOptions, type IdentityPaths, IdentityResolver, type IdentitySource, type ImageContentBlock, type ImageDocumentInfo, type ImageGenerationConfig, type ImageLayerInfo, type ImageLayerType, type ImageToolAdapter, type ImageUrlBlock, InMemoryXenoArtifactRepository, type InMemoryXenoArtifactRepositoryOptions, InMemoryXenoCapabilityLeaseRegistry, type InMemoryXenoCapabilityLeaseRegistryOptions, InMemoryXenoTelemetryCollector, type InitializeSessionRuntimeOptions, type InspectSystemPromptOptions, type InstallSignalHandlersOptions, InteractiveChatTurnGovernance, InteractiveTurnGovernance, type InteractiveTurnGovernanceOptions, type IpcHandler, type JsonRpcErrorResponse, type JsonRpcMessage$1 as JsonRpcMessage, type JsonRpcNotification, type JsonRpcRequest$1 as JsonRpcRequest, type JsonRpcResponse, type JsonRpcSuccessResponse, type JsonSchema, JsonSchemaCompilationError, type JsonSchemaCompilationIssue, type JsonSchemaCompileOptions, type JsonSchemaSubset, type JsonSchemaType, type JsonSchemaValidationError, type JsonSchemaValidationResult, type LLMCompletionResult, type LLMProvider, type LLMProviderCapabilities, type LLMProviderMessage, type LLMProviderRequestContext, type ToolDefinition as LLMProviderToolDefinition, type LLMToolDefinition, type LayerContext, type LegacyXenoSkillInput, type LinuxBubblewrapCapability, type LinuxBubblewrapProcessSpec, LlmClient, type LlmClientDeps, LocalLLMProvider, type LocalLLMProviderConfig, type LocalRuntimePreflightResult, LogLevel, type LspDefinitionReport, type LspDiagnosticsReport, type LspDoctorReport, type LspDoctorServer, type LspHoverReport, type LspReferencesReport, MANIFEST_FILENAME, MAX_CONTAINMENT_APPROVAL_AGE_MS, MAX_CONTAINMENT_CERTIFICATION_BYTES, MAX_CONTAINMENT_CERTIFICATION_LIFETIME_MS, MAX_DIRECT_SHELL_OUTPUT_CHARS, MAX_PLAN_CHARS, MAX_READ_FILE_BYTES, MAX_READ_OUTPUT_CHARS, type MCPAppCapabilities, type MCPAppContentSecurityPolicy, type MCPAppExtensionMetadata, type MCPAppMetadata, type MCPAppPermissions, type MCPAppResourceDescriptor, type MCPAppValidationResult, type MCPAppVisibility, type MCPApprovalDecision, type MCPBearerTokenRefreshHandler, type MCPBearerTokenResolver, MCPCatalogError, type MCPCatalogErrorCode, type MCPConfigFile, type MCPConfigSource, type MCPConfiguredServer, MCPConnectionError, type MCPConnectionErrorCode, type MCPElicitationAction, type MCPElicitationHandler, type MCPElicitationRequest, type MCPElicitationResponse, type MCPHttpAuthChallenge, MCPHttpTransportError, type MCPHttpUrlPhase, type MCPInitializeParams, type MCPInitializeResult, MCPManager, type MCPManagerOptions, MCPMessageTooLargeError, type MCPOAuthAuthorizationServerMetadata, type MCPOAuthAuthorizationSession, MCPOAuthClient, type MCPOAuthClientOptions, type MCPOAuthClientRegistration, type MCPOAuthClientRegistrationSource, type MCPOAuthConfig, type MCPOAuthDiscoveryResult, type MCPOAuthProtectedResourceMetadata, type MCPOAuthTokenSet, type MCPOAuthTokenStore, type MCPOAuthUrlPhase, type MCPPrompt, type MCPPromptGetParams, type MCPPromptGetResult, type MCPPromptsListResult, type MCPRegistryAccessPolicy, type MCPRegistryEntryDescriptor, type MCPRegistryEntryKind, type MCPRegistryFilter, type MCPResource, type MCPResourceReadParams, type MCPResourceReadResult, type MCPResourceSubscribeParams, type MCPResourceTemplate, type MCPResourceTemplatesListResult, type MCPResourceUnsubscribeParams, type MCPResourcesListResult, MCPServer, type MCPServerConfig, type MCPServerModeOptions, type MCPServerPromptRegistration, type MCPServerResourceRegistration, type MCPServerScope, type MCPServerState, type MCPTool, type MCPToolCallParams, type MCPToolCallResult, type MCPToolsListResult, type MCPTransport, type MCPTransportConnection, MCP_APPS_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_SCHEME, MCP_MAX_CATALOG_ENTRIES, MCP_PROTOCOL_VERSION, MCP_STDIO_MAX_MESSAGE_CHARS, MCP_SUPPORTED_PROTOCOL_VERSIONS, MEMORY_FILES, MODEL_REQUEST_TIMEOUT_PHASES, MOTION_CAPABILITIES, MOTION_SYSTEM_PROMPT, MOTION_TOOL_NAMES, type ManifestValidationResult, type MaterialConfig, type MaterializeXenoAutomationEvidenceOptions, type MemoryAccessScope, type MemoryBudget, type MemoryEntry, type MemoryFile, type MemoryLevel, MemoryManager, type MemoryManagerOptions, type MeshInfo, type Message, MessageFlow, type MessageFlowDeps, type ModeSwitchRequest, type ModelInfo, type ModelProvider, ModelProviderRegistry, type ModelRequestDeadlines, ModelRequestTimeoutError, type ModelRequestTimeoutPhase, ModelResponseIncompleteError, type ModelWorkAccounting, type ModelWorkRequestIdentity, type ModelWorkSettlement, type MonitorEvent, MonitorManager, type MonitorSnapshot, type MonitorSource, MonitorStopTool, MonitorTool, type MotionAgentOptions, type MotionPromptParams, type MxcContainmentProbe, type MxcNativeAssetDescriptor, type MxcWindowsHostPreparationReport, NOTEBOOK_READ_NOT_A_NOTEBOOK, NOTES_CAPABILITIES, NOTES_TOOL_NAMES, type NormalizedLspDiagnostic, type NormalizedLspHover, type NormalizedLspLocation, type NormalizedLspRange, type NotePageInfo, type NoteSearchResult, type NotesAgentOptions, type NotesToolAdapter, type OllamaNativeProviderConfig, type OnChunkCallback, type OnTaskCompleteInput, type OnTaskCompleteResult, type OpenTelemetryMetricAdapter, type OperationTaskSource, type OsProtectedStateStoreOptions, OtelExporter, type OtelUsageAdapter, PATCH_DIRECTIVES, PATCH_ENVELOPE_BEGIN, PATCH_ENVELOPE_END, PATCH_LINE_PREFIXES, PEER_MESSAGE_DEFAULT_TTL_MS, PEER_PRESENCE_TTL_MS, PEER_SCHEMA_VERSION, PEER_TASK_TERMINAL_STATUSES, PIXEL_CAPABILITIES, PIXEL_SYSTEM_PROMPT, PIXEL_TOOL_NAMES, PROCESS_TREE_ADAPTERS, PROJECT_STATE_VERSION, PROVIDER_TOOL_NAME_PATTERN, type ParameterizedPermissionRule, type ParseUnifiedDiffOptions, type ParsedPatch, type PatchFileSection, type PatchHunk, type PatchLine, type PatchParseError, type PatchParseErrorCode, type PeerAddress, type PeerDelivery, type PeerDeliveryStatus, type PeerInboundPolicy, type PeerMessage, type PeerMessageKind, PeerMessagingStore, type PeerMessagingStoreOptions, type PeerPermissionPosture, type PeerPresence, type PeerPresenceState, type PeerResolution, type PeerSendInput, type PeerSendOutcome, type PeerSurface, type PeerTask, type PeerTaskStatus, type PermissionCheckContext, type PermissionConfig, type PermissionDecision, type PermissionDecisionEvent, type PermissionDecisionHook, PermissionEngine, type PermissionInfo, type PermissionProfile, type PermissionProfileDecision, type PermissionProfileMode, type PermissionProfileName, type PermissionProfileNetworkDecision, type PermissionProfileResolution, type PermissionPromptFn, type PermissionPromptInfo, type PermissionPromptOperation, type PermissionPromptPreview, type PermissionPromptPreviewLine, type PermissionRequestContext, type PermissionRequestInfo, type PermissionRequestResult, type PermissionRule, type PermissionToolMetadata, type PersistentPermissionState, type PixelAgentOptions, type PixelPromptParams, type ExecutingPermissionMode as PlanApprovalPermissionMode, type PlanModeEnterDecision, type PlanModeEnterRequest, type PlanModeReadOnlyClaim, type PlanModeToolPolicy, type PlanModeToolsOptions, type PlanReviewDecision, type PlanReviewRequest, type PlatformInfo, type PluginActivationEvent, type PluginAuthor, type PluginCapability, type PluginCommandContribution, type PluginCommandHandler, type PluginContext, type PluginContributions, type PluginDetachedSignature, type PluginEngineConstraint, type PluginEvent, PluginEventBus, type PluginEventListener, type PluginEventType, type PluginHook, PluginHost, type PluginHostInfo, type PluginHostOptions, type PluginInfo, type PluginListing, type PluginLogger, PluginManager, type PluginManagerOptions, type PluginManifest, PluginMarketplace, type PluginMarketplaceOptions, type PluginOutputStyleContribution, type PluginPermission, type PluginPromptContribution, type PluginPublishOptions, type PluginRelevanceCandidate, type PluginRelevanceHints, type PluginRelevanceSuggestion, type PluginRepositorySignal, PluginSandbox, type PluginSandboxOptions, type PluginScaffoldOptions, type PluginSearchOptions, type PluginSettingContribution, PluginSettingsManager, type PluginSignatureStatus, type PluginStatus, type PluginStorage, type PluginSupplyChainLockfile, type PluginSupplyChainRecord, type PluginTestCase, type PluginTestResult, PluginToolBuilder, type PluginToolContribution, type PluginTrustBadge, type PluginUIPanel, type PolicyCheckResult, type PolicyEnforcerConfig, type PrepareMCPOAuthAuthorizationOptions, type ProbeXenoProviderOptions, type ProcessContainmentStatus, type ProcessTreeAdapter, type ProfileMCPServerConfig, ProfileManager, type ProjectConfig, type ProjectDomainProfile, type ProjectExecutionPhase, type ProjectExecutionProfile, type ProjectInfo, type ProjectMcpApprovalDecision, type ProjectSessionContext, type ProjectSessionContextEntry, type ProjectSessionSummary, type ProjectTokenUsageSummary, type PromotionRequestResult, type PromptContext, type PromptFn, type PromptHookDefinition, PromptHookRunner, type PromptMemoryContextInfo, type PromptSectionContext, type PromptSectionProvider, PromptSectionRegistry, type ProtectedFileHelperRunner, ProtectedFileWriteError, type ProtectedFileWriteReceipt, type ProtectedStateCipher, type ProtectedStateEnvelopeCipher, type ProtectedStateEnvelopeCipherOptions, type ProtectedStateEnvelopeV1, type ProtectedStateStore, ProviderError, type ProviderErrorCategory, type ProviderErrorCode, type ProviderErrorOptions, type ProviderStatus, type ProviderStreamEvent, type ProviderTransportLimits, QueryLifecycle, type QueryLifecycleOptions, type QueryState, type QueryTransition, type QueryWatchdogReason, QuotaAcknowledgementError, type QuotaAcknowledgementPhase, type QuotaAuthority, type QuotaEntity, QuotaError, type QuotaGovernorOptions, type QuotaLimits, type QuotaReservation, type QuotaScope, READ_FILE_TOO_LARGE, READ_IMAGE_INVALID_CONTENT, READ_IMAGE_PREVIEW_UNAVAILABLE, READ_IMAGE_UNSUPPORTED_FORMAT, READ_IS_DIRECTORY, READ_ONLY_TOOL_NAMES, READ_UNSUPPORTED_ENCODING, READ_UNSUPPORTED_FORMAT, READ_USE_NOTEBOOKREAD, READ_USE_READIMAGE, REQUIRED_CONTAINMENT_CONFORMANCE_CHECKS, type RecalledEpisode, type RecalledSkill, type RecentSessionEntry, type RecentSessionsIndex, type ReducedResult, type ReducerOptions, type RegisterToolOperationInput, type RegisteredTool, type RenderConfig, type RequestBudgetBreakdown, type RequestDeadline, type ResolveXenoSdkApiKeyOptions, type ResolvedIdentity, type ResolvedMemory, type ResolvedProvider, type ResolvedSubagentWorkflowAnswer, type ResourceContentBlock, type RoomInfo, type RunAuthority, type RunAuthorityDispatch, RunAuthorityRefusedError, type RunAuthorityToolCall, type RunContainmentConformanceOptions, type RunDelegatedXenoTurnOptions, type RunDispatchCredential, type RunStreamOptions, type RuntimeManifestFileEntry, type RuntimeManifestInspectionResult, type RuntimePluginManifestEntry, SDK_DEFAULT_MAX_ITERATIONS, SDK_DEFAULT_MAX_TOKENS, SDK_VERSION, SESSION_FORMAT_VERSION, SHEETS_CAPABILITIES, SHEETS_TOOL_NAMES, SLIDES_CAPABILITIES, SLIDES_TOOL_NAMES, SOUND_CAPABILITIES, SOUND_SYSTEM_PROMPT, SOUND_TOOL_NAMES, SSETransport, SUBAGENT_ROLE_ALIASES, SUBAGENT_TEAM_PRESETS, type SandboxCheckResult, type ScoredMemory, ScreenCapture, type ScreenCaptureConfig, type ScreenCaptureOptions, type SearchConfig, type SearchProvider, type SecuredProcessSpec, type SecurityPathIssue, type SecurityPathIssueCode, type Session, type SessionCreateOptions, type SessionData, type SessionEndData, type SessionForkRecord, type SessionIntegrationConfig, SessionLock, SessionLock as SessionLockManager, SessionManager, type SessionMeta, type SessionRecoveryIssue, type SessionRecoveryResult, type SessionRecoverySource, SessionRegistry, type SessionResumeOptions, type SessionRuntimeBaseOptions, type SessionRuntimeState, type SessionStartData, type SessionStatus, type SessionSummary, type SetXenoArtifactCommentResolutionRequest, type SetupAIHandlersOptions, type ShapeConfig, type SheetsAgentOptions, type SheetsToolAdapter, type ShellExecutionAuthorization, type ShellExecutionAuthorizationRequest, type ShellPathReference, type ShutdownCleanup, type Skill, SkillStore, type SkillStoreOptions, type SlideInfo, type SlidesAgentOptions, type SlidesToolAdapter, type SortConfig, type SoulCompletion, SoulEngine, type SoulEngineOptions, type SoulMessage, type SoulSigner, type SoundAgentOptions, type SoundPromptParams, type SpeechRecognizer, type SpeechRecognizerCallbacks, type SpeechRecognizerConfig, SqliteAutomationExecutionJournal, SqliteCapabilityLeasePersistence, type StartXenoLoopInput, StdioTransport, type StemSeparationResult, type StopReason, type StoredConversation, type StoredMessage, type StoredToolCall, type StoredToolOutput, type StreamResult, StreamableHTTPTransport, type StreamableHTTPTransportOptions, type StreamableHTTPTransportSnapshot, SubagentBranchCancelledError, type SubagentBranchPolicy, type SubagentBriefContext, type SubagentExecuteFn, type SubagentExecutionRequest, type SubagentExecutionResponse, type SubagentRemoteMcpAccess, type SubagentResult, type SubagentRole, type SubagentTask, type SubagentTeamPreset, type SubagentTeamPresetDefinition, type SubagentWorkflowMode, type SubagentWorkflowOptions, type SubagentWorkflowResult, type SynthesizeSkillInput, type SystemPromptInspectionResult, THREE_D_CAPABILITIES, THREE_D_TOOL_NAMES, TOOL_OPERATION_SCHEMA_VERSION, TOOL_OPERATION_TERMINAL_STATES, MAX_READ_BYTES as TOOL_OUTPUT_MAX_READ_BYTES, type TaskCompletionCallback, TaskListManager, type TestResult, type TextBlock, type ThreeDAgentOptions, type ThreeDToolAdapter, type TimelineInfo, type TokenUsageTotals, type ToolAnnotationHints, type ToolAssistantContentBlock, type ToolAuthorizationReceipt, type ToolCallData, type ToolCompletionPolicy, type ToolContinuationCheckpoint, type ToolContinuationGoal, type ToolContinuationNotification, type ToolDefinition, type ToolEvidence, type ToolExchangeRepairResult, type ToolExecutionContext, type ToolExecutor, type ToolFailureCategory, type ToolFailureGuardTrip, ToolFailureLoopGuard, type ToolHistoryRepairDiagnostic, type ToolManifestEntry, type ToolMiddleware, type ToolMiddlewareContext, ToolMiddlewareRegistry, type ToolNameCodec, type ToolOperationEvent, ToolOperationManager, type ToolOperationRuntimeEventType, type ToolOperationSnapshot, type ToolOperationState, type ToolOperationTerminalState, ToolOrchestrator, type ToolOrchestratorCallbacks, type ToolOrchestratorConfig, type ToolOrigin, type ToolOutputRange, type ToolOutputReadError, type ToolPolicyProjection, type ToolPolicyProjectionContext, type ToolProgressUpdate, ToolRegistry, type ToolRegistryOptions, type ToolResult, type ToolResultBlock, type ToolResultContent, type ToolResultData, type ToolRiskLevel, type ToolRuntimeContext, type ToolSchemaProjectionChange, ToolSchemaProjectionError, type ToolSchemaProjectionResult, type ToolSchemaProviderDialect, type ToolUseBlock, type TraceGraph, type TraceGraphEdge, type TraceGraphNode, type TrackContext, type TranscriptBytePage, type TranscriptBytePageOptions, type TranscriptEvent, type TranscriptEventData, type TranscriptEventType, type TranscriptPageRecord, type TranscriptRecordPage, type TranscriptRecordPageOptions, TranscriptWriter, type TranscriptionResult, type TranscriptionSegment, type TransitionConfig, type TurnDiffSummary, TurnDiffTracker, type TurnDiffTrackerOptions, type TurnFileDiff, type TurnRestoreAvailability, type TurnRestoreFilePreview, TurnRestoreManager, type TurnRestorePoint, type TurnRestoreResult, UNANSWERED_QUESTION_PREFIX, UNBOUNDED_OPERATION_CONTINUATION_LIMIT, type UnansweredQuestion, type UnifiedExecCompletionReason, UnifiedExecError, type UnifiedExecEvent, type UnifiedExecEventListener, type UnifiedExecEventType, type UnifiedExecInputSource, UnifiedExecManager, type UnifiedExecManagerOptions, type UnifiedExecMode, type UnifiedExecOrigin, type UnifiedExecOutput, type UnifiedExecOutputChunk, type UnifiedExecOutputDelta, type UnifiedExecPresentation, type UnifiedExecProcess, type UnifiedExecReadDeltaOptions, type UnifiedExecStartOptions, type UnifiedExecStatus, type UnifiedExecStream, type UnsupportedFormatFamily, type UpdateXenoGoalInput, UsageAccumulator, type UsageAttribution, type UsageEvent, UsageLedger, type UsageQuery, type UsageTotals, type ValidateXenoSdkApiKeyOptions, type ValidatedContainmentCertification, type ValidationSignal, type VectorDocument, VectorMemoryStore, type VectorSearchResult, type VectorStoreAdapter, type VectorStoreOptions, type VerifyContainmentApprovalExpected, type VerifyPluginSupplyChainOptions, type VerifyPluginSupplyChainResult, type VerifyXenoHostedWebhookOptions, type VerifyXenoShareOptions, type VideoToolAdapter, WEB_CONTEXT_CONTRACT_VERSION, WEB_CONTEXT_TOOL_RESULT_SCHEMA, WORKFLOW_CAPABILITIES, WORKFLOW_TOOL_NAMES, type WebContextClientPort, type WebContextEvidenceProjection, type WebContextRequestBase, type WebContextRequestFactory, type WebContextToolOptions, type WebContextToolResult, type WebContextWaitPortOptions, type WebSearchResult, type WindowsDpapiCredentialFile, type WindowsDpapiProtectedFileOptions, type WindowsDpapiProtectedStateOptions, type WorkflowAgentOptions, type WorkflowDefinition, type WorkflowEvent, type WorkflowExecutionResult, type WorkflowInfo, type WorkflowNodeConfig, type WorkflowNodeDefinition, type WorkflowNodeExecutor, type WorkflowNodeStatus, type WorkflowPlan, WorkflowPlanner, type WorkflowRunNodeRecord, type WorkflowRunRecord, type WorkflowRunStatus, WorkflowRuntime, WorkflowStore, type WorkflowToolAdapter, WorkspaceIndex, type WorkspaceScanOptions, XENO_AGENT_PROFILE_SCHEMA_VERSION, XENO_API_BASE, XENO_APP_PROTOCOL_V2_METHODS, XENO_APP_PROTOCOL_VERSIONS, XENO_ARTIFACT_ACTOR_KINDS, XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION, XENO_ARTIFACT_SCHEMA_VERSION, XENO_ARTIFACT_SENSITIVITIES, XENO_ARTIFACT_STATES, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BROWSER_CONTROL_PLANE_OPERATIONS, XENO_BUILTIN_ARTIFACT_KINDS, XENO_CAPABILITY_LEASE_SCHEMA_VERSION, XENO_CONTAINMENT_APPROVAL_SCHEMA, XENO_CONTAINMENT_CERTIFICATION_SCHEMA, XENO_CONTAINMENT_CONFORMANCE_SCHEMA, XENO_CONTAINMENT_REVIEWER_TRUST_STORE_SCHEMA, XENO_CONTEXT_DIGEST_PATTERN, XENO_CONTROL_ROOM_SCHEMA_VERSION, XENO_COORDINATION_BUDGET_SESSION_SCHEMA_VERSION, XENO_COORDINATION_MANAGED_SESSION_SCHEMA_VERSION, XENO_COORDINATION_SCHEMA_VERSION, XENO_COORDINATION_TURN_SESSION_SCHEMA_VERSION, XENO_DEFLATE_CODEC_NAME, XENO_DEFLATE_CODEC_VERSION, XENO_EVIDENCE_EDGE_TYPES, XENO_EVIDENCE_GRAPH_SCHEMA_VERSION, XENO_EVIDENCE_NODE_TYPES, XENO_GIF_ANIMATION_POLICY, XENO_GIF_CODEC_NAME, XENO_GIF_CODEC_VERSION, XENO_HANDOFF_SCHEMA_VERSION, XENO_HOSTED_CONTROL_SCHEMA_VERSION, XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION, XENO_HOSTED_EVENT_SCHEMA_VERSION, XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA, XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS, XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_TOOL_NAMES, XENO_HOSTED_RESULT_SCHEMA_VERSION, XENO_HOSTED_RUN_SCHEMA_VERSION, XENO_HOSTED_TRIGGER_SCHEMA_VERSION, XENO_JPEG_CODEC_NAME, XENO_JPEG_CODEC_VERSION, XENO_MXC_ADAPTER_NAME, XENO_MXC_POLICY_VERSION, XENO_MXC_VERSION, XENO_ORACLE_REPORT_SCHEMA_VERSION, XENO_PAGE_ENTRY, XENO_PAGE_MAX_BYTES, XENO_PAGE_MAX_FILES, XENO_PLUGIN_LOCK_FILENAME, XENO_PLUGIN_LOCK_SCHEMA_VERSION, XENO_PLUGIN_SIGNATURE_FILENAME, XENO_PLUGIN_SIGNATURE_SCHEMA_VERSION, XENO_PROCESS_TREE_KILL_TIMEOUT_MS, XENO_PROVIDER_CATALOG_SCHEMA_VERSION, XENO_PROVIDER_CONNECTION_STORE_SCHEMA_VERSION, XENO_RASTER_CODEC_NAME, XENO_RASTER_CODEC_VERSION, XENO_RASTER_PREVIEW_FORMATS, XENO_RECIPE_SCHEMA_VERSION, XENO_REPOSITORY_INDEX_SCHEMA_VERSION, XENO_REVIEW_DIMENSIONS, XENO_REVIEW_EVIDENCE_KINDS, XENO_REVIEW_REPORT_SCHEMA_VERSION, XENO_RT_DEFAULT_URL, XENO_SECURE_EXECUTION_CONTRACT_SCHEMA_VERSION, XENO_SHARE_REGISTRY_SCHEMA_VERSION, XENO_SHARE_SCHEMA_VERSION, XENO_SKILL_SCHEMA_VERSION, XENO_SLASH_REFUSAL_NOTHING_SENT, XENO_SOURCE_RESEARCH_SCHEMA_VERSION, XENO_SPEC_EXECUTION_SCHEMA_VERSION, XENO_SPEC_SCHEMA_VERSION, XENO_SVG_RENDERER_NAME, XENO_SVG_RENDERER_VERSION, XENO_TELEMETRY_SCHEMA_VERSION, XENO_UNSUPPORTED_SLASH_COMMAND_REASON, XENO_VP8_CODEC_NAME, XENO_VP8_CODEC_VERSION, XENO_WEBP_ANIMATION_POLICY, XENO_WEBP_CODEC_NAME, XENO_WEBP_CODEC_VERSION, type XenoAnsiEscapeFamily, type XenoAnsiFormatter, type XenoAnsiPolicy, type XenoAnsiStyle, type XenoAnsiToken, type XenoAnsiWrapOptions, type XenoAppProtocolVersion, XenoAppServer, type XenoAppServerOptions, XenoAppServerV2Client, type XenoArtifactActor, type XenoArtifactActorKind, type XenoArtifactAnchor, type XenoArtifactAppendReviewRequest, type XenoArtifactContent, type XenoArtifactEnvelope, type XenoArtifactFileRecoveryNotice, type XenoArtifactFileSnapshot, type XenoArtifactIdentity, type XenoArtifactKind, type XenoArtifactLifecycleEvent, type XenoArtifactListQuery, type XenoArtifactMutationOptions, type XenoArtifactPersistedRecord, type XenoArtifactProvenance, type XenoArtifactRecord, type XenoArtifactRelationship, type XenoArtifactRepository, XenoArtifactRepositoryError, type XenoArtifactRepositoryErrorCode, type XenoArtifactRepositoryState, type XenoArtifactRetention, type XenoArtifactReviewAnchorInput, type XenoArtifactReviewDecision, type XenoArtifactReviewEvent, type XenoArtifactReviewEventInput, XenoArtifactReviewService, type XenoArtifactReviewServiceOptions, type XenoArtifactReviewSummary, type XenoArtifactRevisionOptions, type XenoArtifactSensitivity, type XenoArtifactState, XenoArtifactStateTransitionError, type XenoArtifactStorageReference, type XenoArtifactTransitionRequest, XenoArtifactValidationError, type XenoArtifactValidationIssue, XenoAuthError, type XenoAuthErrorCode, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionJournal, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationJournalIdentity, type XenoAutomationJournalRecord, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBasicRasterImage, type XenoBoundedProcessOutcome, type XenoBoundedProcessRunner, type XenoBoundedProcessRunnerSync, type XenoBrowserAutomationOperation, XenoBrowserControlPlaneAdapter, type XenoBrowserControlPlaneAdapterOptions, type XenoBrowserExecutionPolicy, type XenoCapabilityEffect, type XenoCapabilityEligibility, type XenoCapabilityKind, type XenoCapabilityLease, type XenoCapabilityLeaseApprovalContext, type XenoCapabilityLeaseApprovalRequest, type XenoCapabilityLeaseDenialRequest, XenoCapabilityLeaseError, type XenoCapabilityLeaseErrorCode, type XenoCapabilityLeaseRequest, type XenoCapabilityLeaseRevocationRequest, type XenoCapabilityLeaseState, type XenoCapabilityScope, type XenoCapabilitySubject, type XenoCapabilityUse, type XenoColorDepth, type XenoColorPolicy, type XenoCompiledRecipe, type XenoCompiledRecipeStep, type XenoComputerAutomationOperation, type XenoComputerExecutionPolicy, type XenoConfig, type XenoContainmentApprovalReport, type XenoContainmentCertificationApproval, type XenoContainmentCertificationManifest, type XenoContainmentConformanceReport, type XenoContainmentReviewerTrustStore, type XenoContentHash, type XenoControlRoomActionKind, type XenoControlRoomActionPlan, type XenoControlRoomActionRequest, type XenoControlRoomAgent, type XenoControlRoomAgentInput, type XenoControlRoomAgentStatus, type XenoControlRoomApprovalInput, type XenoControlRoomApprovalKind, type XenoControlRoomArtifactInput, type XenoControlRoomAttentionItem, type XenoControlRoomAttentionKind, type XenoControlRoomGoalInput, type XenoControlRoomInput, type XenoControlRoomMonitorInput, type XenoControlRoomNotificationInput, type XenoControlRoomProjectionOptions, type XenoControlRoomSnapshot, type XenoControlRoomStatusCategory, type XenoControlRoomSummary, type XenoControlRoomTask, type XenoControlRoomTaskInput, type XenoControlRoomUsage, XenoControlRoomValidationError, type XenoCoordinationAction, type XenoCoordinationAdmissionFence, XenoCoordinationError, type XenoCoordinationEvent, type XenoCoordinationEventType, type XenoCoordinationSessionState, type XenoCoordinationStoreOptions, type XenoCreatedShare, type XenoCredentialSource, type XenoCredentialType, type XenoDesktopCaptureSource, type XenoDesktopCapturer, type XenoDiffArtifactContext, type XenoDiffDocument, type XenoDiffFile, type XenoDiffFileStatus, type XenoDiffHunk, type XenoDiffLine, type XenoDiffLineKind, type XenoDiffMode, XenoDiffParseError, type XenoDurableAutomationOptions, type XenoEd25519Signature, type XenoEnvironmentExecutionPolicy, type XenoEvidenceEdge, type XenoEvidenceEdgeType, type XenoEvidenceGraph, XenoEvidenceGraphBuilder, type XenoEvidenceGraphBuilderOptions, XenoEvidenceGraphValidationError, type XenoEvidenceNode, type XenoEvidenceNodeType, type XenoEvidenceReference, type XenoExecutionAdapterIdentity, type XenoExecutionEnforcement, type XenoExecutionIdentity, XenoExecutionLeaseSession, type XenoExecutionLeaseSessionOptions, type XenoExecutionLeaseStore, type XenoExecutionOwner, type XenoExternalActionExecutionPolicy, type XenoFilesystemExecutionPolicy, type XenoGifAnimation, type XenoGifDisposal, type XenoGifFrame, type XenoGitHubReviewComment, type XenoGoalCriterion, type XenoGoalCriterionResult, type XenoGoalMilestone, type XenoGoalProgress, type XenoGoalRecord, type XenoGoalStatus, type XenoGoalTask, type XenoGoalTaskStatus, type XenoGoalTurnAdmission, type XenoGoalTurnRequest, type XenoGoalTurnState, type XenoGoalVerification, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHandoffAuthority, type XenoHandoffOperation, type XenoHandoffPayload, type XenoHandoffRecord, type XenoHandoffResumePoint, type XenoHandoffSnapshot, type XenoHandoffSnapshotFile, type XenoHandoffSnapshotManifest, type XenoHandoffStatus, type XenoHandoffStatusInput, type XenoHandoffStatusReceipt, type XenoHandoffTarget, type XenoHostAutomationAuditEvent, type XenoHostAutomationAuditLoggerPort, type XenoHostAutomationEnvironment, type XenoHostAutomationStatusReport, type XenoHostAutomationSurfaceStatus, CliGovernedAutomationRuntime as XenoHostGovernedAutomationRuntime, type XenoHostedArchitecture, type XenoHostedAuthority, type XenoHostedBudget, type XenoHostedCacheMount, type XenoHostedControlAcknowledgement, type XenoHostedControlAction, type XenoHostedControlCommand, type XenoHostedControlCommandPayload, type XenoHostedEnvironmentManifest, type XenoHostedEnvironmentManifestPayload, type XenoHostedEventRecord, type XenoHostedExecutionAdapterCertification, type XenoHostedExecutionAdapterVerificationOptions, type XenoHostedExecutionBoundaryReceipt, type XenoHostedExecutionJob, XenoHostedExecutionJobError, type XenoHostedExecutionJobVerification, type XenoHostedExecutionSecretValue, type XenoHostedImageReference, type XenoHostedNetworkDestination, type XenoHostedNetworkPolicy, type XenoHostedOs, type XenoHostedQuotaLease, type XenoHostedReplayCursor, type XenoHostedReplayPage, type XenoHostedRepositorySource, type XenoHostedResourceLimits, type XenoHostedRetentionPolicy, type XenoHostedRunRecord, type XenoHostedRunRequest, type XenoHostedRunResult, type XenoHostedRunResultPayload, type XenoHostedRunStatus, type XenoHostedSecretProjection, type XenoHostedSetupStep, type XenoHostedSlashCommandRefusal, type XenoHostedTriggerDefinition, type XenoHostedTriggerDelivery, type XenoHostedTriggerKind, type XenoHostedWebhookSource, type XenoHostedWebhookVerification, type XenoJsonObject, type XenoJsonPrimitive, type XenoJsonValue, type XenoJwtPayload, type XenoLegacyAgentArtifactContext, type XenoLegacyArtifactContext, type XenoLoadedSkill, type XenoLoopIteration, type XenoLoopKind, type XenoLoopRecord, type XenoLoopSchedule, type XenoLoopStatus, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, XenoMultiAgentReviewCoordinator, type XenoMultiAgentReviewCoordinatorOptions, type XenoNetworkDestination, type XenoNetworkExecutionPolicy, type XenoOracleAdjudication, type XenoOracleAdjudicationDraft, type XenoOracleAdjudicationRequest, type XenoOracleAdjudicationResult, type XenoOracleArtifactContext, type XenoOracleCitation, type XenoOracleClaim, XenoOracleCoordinator, type XenoOracleCoordinatorOptions, type XenoOracleDisagreement, type XenoOracleExecutionRequest, type XenoOracleExecutionResult, type XenoOracleModelIdentity, type XenoOracleOpinion, type XenoOracleOpinionDraft, type XenoOracleReport, type XenoOracleRole, type XenoOracleRunOptions, XenoOracleValidationError, type XenoOracleVerdict, type XenoPageFileInput, type XenoPageFileRecord, type XenoPageHome, type XenoPagePublication, XenoPageStore, type XenoPageStoreOptions, type XenoProcessExecutionPolicy, type XenoProcessTreeKillOptions, type XenoProcessTreeKillReason, type XenoProcessTreeKillResult, type XenoProcessTreeKillTool, type XenoProjectState, type XenoProviderAdapterKind, type XenoProviderAuthPreset, type XenoProviderCapabilities, XenoProviderCatalog, type XenoProviderConnection, type XenoProviderConnectionSnapshot, type XenoProviderConnectionView, type XenoProviderCredentialMode, type XenoProviderModelDescriptor, type XenoProviderPreset, type XenoProviderProbeResult, type XenoProviderReadiness, type XenoProviderRouteCandidate, type XenoProviderRoutingPolicy, type XenoPtyAdapter, type XenoPtyProcess, type XenoPtySpawnOptions, type XenoPublishPageInput, type XenoPublishedPage, type XenoRasterImage, type XenoRasterPreview, type XenoRecipeDefinition, type XenoRecipeInputDefinition, type XenoRecipeMode, type XenoRecipePermissionMode, type XenoRecipeStepDefinition, XenoRecipeValidationError, type XenoRedactionCategory, type XenoRedactionEvent, type XenoRedactionOptions, type XenoRedactionReport, type XenoRedactionResult, type XenoRemoteRepositoryIdentity, type XenoRemoteSourceFile, type XenoRemoteSourceProvider, type XenoRepositoryChunk, type XenoRepositoryDocumentKind, type XenoRepositoryEmbedding, type XenoRepositoryEmbeddingProvider, type XenoRepositoryEmbeddingRequest, type XenoRepositoryFileRecord, type XenoRepositoryFreshnessInput, type XenoRepositoryFreshnessReport, type XenoRepositoryGitProvenance, type XenoRepositoryIndexBuildOptions, XenoRepositoryIndexFileStore, type XenoRepositoryIndexSnapshot, type XenoRepositoryIndexStats, type XenoRepositoryRelationship, type XenoRepositoryRelationshipKind, type XenoRepositorySearchMode, type XenoRepositorySearchQuery, type XenoRepositorySearchResponse, type XenoRepositorySearchResult, type XenoRepositorySourceDocument, type XenoRepositorySymbol, type XenoRepositorySymbolGraph, type XenoRepositorySymbolKind, type XenoRequestContext, type XenoResolvedApiKey, type XenoReviewAgentExecutor, type XenoReviewAgentResult, type XenoReviewArtifactContext, type XenoReviewCoordinatorContext, type XenoReviewDimension, type XenoReviewEvidence, type XenoReviewEvidenceKind, type XenoReviewFinding, type XenoReviewFindingProposal, type XenoReviewFindingState, type XenoReviewPack, type XenoReviewReport, type XenoReviewSeverity, type XenoReviewTarget, XenoReviewValidationError, type XenoReviewVerificationOutcome, type XenoReviewVerificationResult, type XenoReviewVerifierExecutor, type XenoRuntimeEvent, type XenoRuntimeEventBase, XenoRuntimeEventBus, type XenoRuntimeEventDraft, type XenoRuntimeEventSink, type XenoRuntimeEventType, type XenoSecretProjection, type XenoSecureExecutionContract, XenoSecureExecutionContractError, type XenoSecureExecutionContractErrorCode, type XenoShareAccessPolicy, type XenoShareContent, type XenoShareGitContext, type XenoShareIssuer, type XenoSharePayload, type XenoSharePrincipal, type XenoShareReference, type XenoShareRegistryRecord, type XenoShareRegistrySnapshot, type XenoShareSessionIdentity, type XenoShareSigningIdentity, type XenoShareStatus, type XenoShareSurface, type XenoShareVerificationResult, type XenoShareVisibility, type XenoSignedHandoffEnvelope, type XenoSignedShareEnvelope, type XenoSkillActivation, type XenoSkillAuditEvent, type XenoSkillCatalog, type XenoSkillDescriptor, type XenoSkillDiagnostic, type XenoSkillDiscoveryOptions, type XenoSkillDiscoveryRoot, type XenoSkillExternalActionPolicy, type XenoSkillInvocationDecision, type XenoSkillInvocationPolicy, type XenoSkillResourceDescriptor, type XenoSkillShadowRecord, type XenoSkillSource, type XenoSkillTool, type XenoSkillToolPolicy, type XenoSlashGuardOptions, type XenoSlashInputClassification, type XenoSourceResearchArtifactContext, type XenoSourceResearchExcerpt, type XenoSourceResearchFinding, type XenoSourceResearchModelIdentity, type XenoSourceResearchReport, type XenoSourceResearchSeverity, XenoSourceResearchValidationError, type XenoSpecAcceptanceCriterion, type XenoSpecArtifactBundle, type XenoSpecArtifactContext, type XenoSpecDesign, type XenoSpecDesignDecision, type XenoSpecDocument, type XenoSpecDriftFinding, type XenoSpecDriftReport, type XenoSpecExecutionRecord, type XenoSpecExecutionState, XenoSpecLifecycleService, type XenoSpecLifecycleServiceOptions, type XenoSpecPriority, type XenoSpecRequirement, type XenoSpecRisk, type XenoSpecSourceBaseline, type XenoSpecTask, type XenoSpecTaskExecution, type XenoSpecTaskStatus, XenoSpecValidationError, type XenoTelemetryAttributeValue, type XenoTelemetryRecord, type XenoTelemetrySignalKind, type XenoTelemetrySubscriber, type XenoThreadRunOptions, type XenoThreadRunResult, XenoTraceGraphRecorder, type XenoUserConfig, type XenoVerifiedHostedExecutionAdapterCertification, type XenoVp8Image, acquireControlPlaneLock, activateSessionRuntime, addProjectAllowedDirectory, addProjectAllowedTool, agentDefinitionFromProfile, agentProfileFromDefinition, appServerSlashCommandRefusal, appendBoundedShellOutput, appendGuidanceToResult, applyPatch, approveMcpServer, areSignalHandlersInstalled, artifactCompareTool, askUserTool, assertDirectEndpointResolution, assertPersistedXenoCapabilityLease, assertRequiredXenoAutomationEvidence, assertSupportedMcpProtocolVersion, assertUsableXenoApiKey, assertValidMcpAppResource, assertValidXenoArtifact, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertValidXenoEvidenceGraph, assertValidXenoHostedExecutionJob, assertValidXenoOracleReport, assertValidXenoRecipeDefinition, assertValidXenoReviewPack, assertValidXenoReviewReport, assertValidXenoReviewTarget, assertValidXenoSecureExecutionContract, assertValidXenoSourceResearchReport, assertValidXenoSpecDocument, assertValidXenoSpecExecution, assertXenoArtifactStateTransition, assertXenoAutomationAdapterConformant, assertXenoAutomationAuthority, auditRiskLevelForTool, authorizeShellExecution, backgroundProcessManager, bashTool, benchmarkCodingTools, bridgeXenoTelemetryToOpenTelemetry, buildAtomicMessageGroups, buildAuditReplayReport, buildAuditTraceReport, buildContainedProcessSpec, buildContractLedgerGuidance, buildDefaultSubagentTasks, buildDelegatedRoleSystemPrompt, buildHookEnvironment, buildLinuxBubblewrapProcessSpec, buildLspDefinitionReport, buildLspDiagnosticsReport, buildLspDoctorReport, buildLspHoverReport, buildLspReferencesReport, buildMotionSystemPrompt, buildPixelSystemPrompt, buildProcessHardenedProcessSpec, buildProjectBudgetFinalizationGuidance, buildProjectExecutionGuidance, buildProjectExecutionProfile, buildPromptMemoryContext, buildSecuredProcessSpec, buildSoundSystemPrompt, buildSystemPrompt, buildToolFailureGuardResult, buildXenoArtifactReviewAnchor, buildXenoAutomationCapabilityUse, buildXenoRepositoryIndex, buildXenoRepositoryIndexWithEmbeddings, buildXenoSecureExecutionContract, cachedModelContextWindow, cachedModelImageInput, calculateCost, canTransitionXenoArtifactState, canXenoRasterPreview, canonicalPayload, canonicalizeArtifactJson, canonicalizeMcpResourceUri, canonicalizeSecurityPath, canonicalizeToolName, captureXenoHandoffSnapshot, checkSandbox, classifyArtifactToolAction, classifyForRead, classifyProviderHttpError, classifyProviderStreamError, classifyXenoProcessTreeKill, classifyXenoSlashInput, cleanupReadImagePreviews, cleanupSessionRuntime, clearMcpServerApproval, clearProjectAllowedTools, clearProjectLastSessionSummary, clearProjectMcpApproval, clearProjectMcpApprovals, clipXenoAnsi, coerceSubagentRole, coerceSubagentTeamPreset, commandShapedSlashName, compileAgentProfile, compileJsonSchema, compileToolInputSchema, compileXenoRecipe, compileXenoSkillActivation, computeXenoContextDigest, configureImageGeneration, configureSearch, configureSearchPermissionProfile, configureXenoAnsi, containmentApprovalSigningPayload, containmentCertificationSigningPayload, copyTextToClipboard, create3DTools, createAgentChildController, createAgentDefinitionFile, createAgentDefinitionPromptSection, createAgentRunId, createAppServerExecutionLeaseStore, createAppServerV2HttpTransport, createArchitectTools, createArtifactCompareTool, createAskUserTool, createAudioTools, createAuditBackedPermissionEngine, createBashTool, createBenchBashMiddleware, createCliAutomationAuditSink, createCliGovernedAutomationRuntime, createCommandBackedProtectedStateStore, createDefaultToolRegistry, createDelegatedXenoAgent, createDirectProvider, createDirectShellMessage, createDispatchAgentTool, createDocsTools, createEd25519Signer, createEditTool, createElfAnalyzeTool, createEngineTools, createGcodeAnalyzeTool, createGenerateImageTool, createGlobTool, createGovernanceExtensions, createGrepTool, createHtmlSanitizerAuditTool, createImageTools, createListAgentsTool, createListSessionsTool, createLsTool, createLspDefinitionTool, createLspDiagnosticsTool, createLspHoverTool, createLspReferencesTool, createMcpAppCapabilities, createMcpAppExtensionCapabilities, createMcpPkcePair, createMcpPromptRegisteredTool, createMcpRegisteredTool, createMcpResourceRegisteredTool, createMemoryProtectedStateStore, createMemoryReadTool, createMemoryWriteTool, createNotebookEditTool, createNotebookReadTool, createNotesTools, createOllamaNativeProvider, createOsProtectedStateStore, createPatchTool, createPlanModeTools, createProtectedStateEnvelopeCipher, createQuotaGovernedProvider, createReadImageTool, createReadTool, createReceiveTool, createRequestDeadline, createSendTool, createSheetsTools, createSlidesTools, createSpeechRecognizer, createSqliteAnalyzeTool, createTaskInputTool, createTaskListTools, createTaskOutputTool, createTaskStopTool, createThinkTool, createToolAlias, createToolNameCodec, createToolOutputTool, createToolRuntimeContext, createUnavailableProtectedStateStore, createVideoTools, createWebContextFetchTool, createWebContextRequestFactory, createWebContextSearchTool, createWebSearchTool, createWindowsDpapiProtectedCipher, createWindowsDpapiProtectedFileStore, createWorkflowTools, createWriteTool, createXenoAgent, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createCliAutomationAuditSink as createXenoHostAutomationAuditSink, createCliGovernedAutomationRuntime as createXenoHostGovernedAutomationRuntime, createXenoHostedControlCommand, createXenoHostedEnvironmentManifest, createXenoHostedEvent, createXenoHostedExecutionBoundaryReceipt, createXenoHostedRunResult, createXenoRasterPreview, createXenoSecureShare, createXenoSessionHandoff, createXenoShareSigningIdentity, createXenoSkillTool, createXenoSourceResearchExcerpt, createXenoSourceResearchReport, currentExecutionAdapterStatus, decodeJwtPayload, decodeXenoBmp, decodeXenoGif, decodeXenoGifAnimation, decodeXenoJpeg, decodeXenoNetpbm, decodeXenoPng, decodeXenoSvg, decodeXenoVp8, decodeXenoWebp, defaultPeerDirectory, defaultToolRuntimeContext, defaultXenoReviewPack, deflateXenoZlib, delegatedBranchOutputTokens, delegatedBranchOwnerSessionId, deleteSession, denyMcpServer, deriveHostedIdempotencyKey, describeXenoAutomationOperation, detectLanguage, detectPluginRepositorySignals, detectRepositoryDocumentKind, detectRepositoryLanguage, detectXenoSpecDrift, deterministicReduce, digestMessages, directProviderConfigFromConnection, discoverXenoSkills, dispatchAgentTool, editTool, elfAnalyzeTool, emitPatchGbnf, emitXenoTelemetry, encodeXenoPngRgb, enforceShellCommandPolicy, enforceToolPolicy, ensureConfigDir, ensureDurableMessageIds, ensureProjectStateDir, estimateFullRequestBudget, evaluateContainmentUiRestrictions, evaluatePermissionProfileNetworkUrl, evaluateXenoCapabilityEligibility, executeXenoCoordinationAction, extractJsonObject, extractPageTitle, extractToolPath, findUnansweredQuestion, findXenoSkill, fingerprintXenoSecureExecutionContract, forgetRecentSession, forgetRecentSessionById, formatBoundedShellOutput, formatCost, formatDirectShellContext, formatJsonSchemaErrors, formatModelList, formatPromptContextBreakdown, gcodeAnalyzeTool, generateImageTool, generateSessionId, getAgentHome, getAgentRunDir, getAgentRunStoreDir, getAvailableModels, getBenchmarkComputeBudgetHintForCommand, getBenchmarkForegroundTimeoutForCommand, getBestExecutionSecurityStatus, getChatModels, getConfigDir, getDefaultProviderRegistry, getExecutionSecurityCapabilityReport, getExecutionSecurityStatus, getGlobIgnores, getGrepIgnores, getHighRiskPermissions, getImageGenerationConfig, getJwtExpiry, getLinuxBubblewrapCapability, getLogLevel, getManagedConfigPath, getMcpAppMetadata, getMcpAppResourceUri, getMcpApprovalDecision, getMcpAuthorizationServerMetadataUrls, getMcpDefinitionFingerprint, getMcpPromptToolName, getMcpProtectedResourceMetadataUrls, getMcpResourceToolName, getMcpToolName, getModelName, getMxcContainmentProbe, getMxcNativeAssetDescriptor, getMxcWindowsHostPreparationDescriptor, getMxcWindowsHostPreparationHelperArchitecture, getPermissionProfile, getPersistentShellSession, getPersistentShellSpawnSpec, getProcessContainmentStatus, getProjectAgentDefinitionDirs, getProjectAgentDefinitionsDir, getProjectLastSessionSummary, getProjectMcpApproval, getProjectStatePath, getReadImagePreviewCapability, getRecentSessionsIndexPath, getSubagentTeamPresetDefinition, getToolRiskLevel, getUserAgentDefinitionsDir, gitBranchTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, globTool, grepTool, gzipXeno, hasProjectOnboardingCompleted, hasXenoTelemetrySubscribers, hashContainmentConformanceReport, hashPluginManifest, hashPluginTree, hookResultStatus, hostedEnvironmentIdentity, hostedSlashCommandRefusal, htmlSanitizerAuditTool, importLegacyXenoSkill, inflateXenoZlib, initializeSessionRuntime, inspectCliAutomationStatus, inspectMcpConfigSources, inspectRuntimeManifests, inspectSecurityPath, inspectSystemPrompt, inspectCliAutomationStatus as inspectXenoHostAutomationStatus, inspectXenoRepositoryFreshness, inspectXenoRepositorySymbol, installSignalHandlers, interruptedQuestionResult, invalidateAllObservedFiles, invokeXenoSkill, isChatModel, isDangerousCommand, isDirectShellMessage, isExpiredJwt, isExplicitResearchPrompt, isJwt, isLocalModel, isMcpAppResourceUri, isMcpOAuthTokenExpired, isMcpToolVisibleToApp, isMcpToolVisibleToModel, isModelRequestTimeoutPhase, isNotBeforeJwt, isPathWithinAllowed, isPeerTaskTerminal, isQuestionTool, isQuotaControlError, isReadOnlyToolName, isScreenCaptureAvailable, isSensitiveEnvironmentKey, isSimpleInformationalPrompt, isSpeechRecognitionAvailable, isSupportedMcpProtocolVersion, isToolAllowedByXenoSkillActivation, isToolOperationTerminalState, isUncOrDevicePath, isValidAgentDefinitionName, isValidModel, isValidSessionId, isWorkspaceTrusted, isXenoAutomationOperation, isXenoContextDigest, killWindowsProcessTree, killWindowsProcessTreeSync, legacyAgentArtifactToXenoArtifact, listBuiltInAgentProfiles, listPermissionProfiles, listProjectAllowedTools, listProjectMcpApprovals, listSessions, loadConfig, loadConfiguredMcpServers, loadMcpConfigFile, loadProjectConfig, loadProjectState, loadRecentSessionsIndex, loadSession, loadUserConfig, loadXenoSkill, lookupRecentSession, lsTool, lspDefinitionTool, lspDiagnosticsTool, lspHoverTool, lspReferencesTool, matchPermissionRule, matchesMcpRegistryEntryPolicy, materializeXenoAutomationEvidence, mcpInputSchemaToToolSchema, memoryReadTool, memoryWriteTool, mergeConfigs, movesTrustUpward, mxcWarningsRequireWindowsHostPreparation, normalizeDirectShellResultRecord, normalizeHookDecision, normalizeMcpAppVisibility, normalizePagePath, normalizePermissionProfileName, normalizeQuotaScope, normalizeRepositoryRelativePath, normalizeSourceText, normalizeSubagentBranchPolicy, normalizeWorkingDirectory, normalizeXenoHostedControlAcknowledgement, normalizeXenoRequestContext, notebookEditTool, notebookReadTool, openSqliteAutomationExecutionJournal, openSqliteCapabilityLeasePersistence, pageContentType, parseContainmentReviewerTrustStore, parseMcpWwwAuthenticate, parsePatch, parsePermissionRule, parseRetryAfter, parseSessionId, parseShellPathReferences, parseSubagentRemoteMcpPolicy, parseSubagentRoleList, parseUnifiedDiff, parseXenoAnsi, parseXenoRecipeDefinition, patchPaths, patchTool, peerShortId, pending, persistXenoAutomationEvidence, planXenoControlRoomAction, pluginInfoRelevanceCandidate, pluginListingRelevanceCandidate, pluginSignaturePayload, preflightLocalModel, prepareMxcWindowsHost, probeXenoProvider, projectToolDefinitionsForProvider, projectToolSchemaForProvider, projectXenoControlRoom, providerCapabilityError, providerProtocolError, publicKeyFingerprint, publishPlugin, quotaAncestors, quotaInteger, quotaScopeKey, quotaText, rankPluginRelevance, readCliAutomationEnvironment, readImageTool, readManifestFromDisk, readPluginDetachedSignature, readPluginSupplyChainLockfile, readSessionFormatVersion, readTool, readToolOutput, readXenoApiKey, readCliAutomationEnvironment as readXenoHostAutomationEnvironment, recordRecentSession, recordXenoCounter, recordXenoEvent, recordXenoHistogram, recoverSessionMessages, redactXenoShareValue, registerAgentChild, registerPlanModeTools, registerShutdownCleanup, registry, removeMcpServerConfig, removeProjectAllowedTool, renderAgentDefinition, renderAgentDefinitions, renderAuditReplayMarkdown, renderAuditReplayReport, renderAuditTraceMarkdown, renderAuditTraceReport, renderAuditTraceSummaries, renderCliAutomationStatus, renderCodingBenchmarkMarkdown, renderCodingBenchmarkReport, renderContinuationIncompleteStatus, renderLspDefinitionReport, renderLspDiagnosticsReport, renderLspDoctorReport, renderLspHoverReport, renderLspReferencesReport, renderPeerLabel, renderToolContinuationInput, renderCliAutomationStatus as renderXenoHostAutomationStatus, renderXenoSkillCatalog, repairInterruptedToolCalls, repairToolExchangeHistory, requestBackground, requiresSecuredProcessLaunch, resetAllPersistentShellSessions, resetBashBenchmarkGuards, resetImageGenerationConfig, resetMcpServerApprovals, resetMxcContainmentProbe, resetPersistentShellSession, resetXenoAnsiPolicy, resetXenoTelemetryCardinalityForTests, resizeXenoRaster, resolveAgentDefinition, resolveAgentProfile, resolveAgentToolPolicy, resolveBuiltInAgentProfile, resolveCommandOnPath, resolveContainmentConformanceTemporaryRoot, resolveDelegatedExecutionMode, resolveExecutionSecurityLevel, resolveExecutionTrustMode, resolveInteractiveTurnMaxIterations, resolveLocalRuntimeUrl, resolveModelContextTokens, resolveModelRequestDeadlines, resolvePeerTarget, resolvePermissionProfile, resolveShellInvocation, resolveSubagentRemoteMcpAccess, resolveSubagentWorkflowAnswer, resolveXenoAutomationEvidencePolicy, resolveXenoSdkApiKey, restoreXenoHandoffSnapshot, runAgentHook, runCommandHook, runContainmentConformanceSuite, runDelegatedXenoTurn, runDelegationPlan, runDurableAutomation, runHookDefinition, runHooks, runHttpHook, runPromptHook, runSubagentWorkflow, runXenoBoundedProcess, runXenoBoundedProcessSync, runXenoProcessTreeKillHelper, runXenoThread, runXenoThreadStreamed, sanitizeEnvironment, sanitizeXenoTelemetryAttributes, saveConfig, saveMcpConfigFile, saveProjectState, saveSession, scaffoldPlugin, scanAgentDefinitions, scoreMemories, scorePluginRelevance, searchXenoRepositoryIndex, selectXenoProviderRoute, serializeXenoRecipe, setLogLevel, setProjectLastSessionSummary, setProjectMcpApproval, setProjectOnboardingCompleted, setToolOutputStoreDirectory, setWorkspaceTrusted, setupAIHandlers, sha256ArtifactBytes, sha256ArtifactJson, shouldEnableExecutionGovernance, shouldSourceShellProfile, shouldUseIsolatedStdinForCommand, signSharePayload, sqliteAnalyzeTool, storeToolOutput, stripXenoAnsi, subscribeXenoTelemetry, summarizeAuditInputRecord, summarizeAuditTraces, summarizeRuntimeInput, summarizeSubagentResults, summarizeXenoArtifactReview, syncMcpToolsToRegistry, synthesizeSkill, taskInputTool, taskOutputTool, taskStopTool, testPlugin, thinkTool, toAgentDefinitionMetadata, toLLMProvider, toPeerPosture, toolEvidenceToXenoArtifact, toolOperationManager, toolOutputTool, toolRiskLevel, truncationNotice, turnDiffSummaryToXenoArtifact, unifiedDiffToXenoArtifact, unifiedExecManager, updateProjectState, upsertMcpServerConfig, validateAgentDefinition, validateCapabilityLeaseRequest, validateCapabilityMutationReceipt, validateDelegationPlan, validateDirectEndpoint, validateExecutionSecurityPolicy, validateJsonSchema, validateManifest, validateMcpAppResource, validateToolContinuationGoal, validateXenoArtifact, validateXenoArtifactReviewEvent, validateXenoControlRoomSnapshot, validateXenoEvidenceGraph, validateXenoRepositoryIndex, validateXenoSdkApiKey, validateXenoSecureExecutionContract, validateXenoSpecDocument, verifyContainmentCertification, verifyContainmentCertificationApproval, verifyPluginSupplyChain, verifySignature, verifySoulRecord, verifyXenoHostedControlCommand, verifyXenoHostedEnvironmentManifest, verifyXenoHostedEventChain, verifyXenoHostedExecutionAdapterCertification, verifyXenoHostedExecutionJob, verifyXenoHostedRunResult, verifyXenoHostedWebhook, verifyXenoSecureShare, verifyXenoSessionHandoff, waitForXenoHandoffStatus, webFetchTool, webSearchTool, windowsDpapiProtect, windowsDpapiUnprotect, withXenoTelemetrySpan, wrapXenoAnsi, writePluginSupplyChainLockfile, writeTool, xenoAnsi, xenoAnsiVisibleWidth, xenoArtifactToDiffDocument, xenoArtifactToLegacyAgentArtifact, xenoArtifactToOracleReport, xenoArtifactToReviewReport, xenoArtifactToSourceResearchReport, xenoArtifactToSpecDocument, xenoArtifactToSpecExecution, xenoArtifactToToolEvidence, xenoArtifactToTurnDiffSummary, xenoHostedExecutionAdapterSigningPayload, xenoOracleReportToArtifact, xenoRecipeFingerprint, xenoRequestContextHeaders, xenoReviewReportToArtifact, xenoReviewReportToGitHubComments, xenoSourceResearchReportToArtifact, xenoSpecArtifactIds, xenoSpecExecutionToArtifact, xenoSpecToArtifactBundle };
+export { type A2AMessage, type A2AMessageType, AGENT_DAEMON_PROTOCOL_VERSION, AGENT_EFFORT_LEVELS, AGENT_PERMISSION_MODES, AGENT_PROFILE_EXTERNAL_ACTIONS, APP_SERVER_PROMPT_BEARING_PARAMS, ARCHITECT_CAPABILITIES, ARCHITECT_TOOL_NAMES, type ActiveLayerInfo, type AddXenoArtifactCommentRequest, type AgentArtifact, type AgentCapabilities, type AgentCard, type AgentChildController, type AgentChildInfo, type AgentChildKind, type AgentChildOutcome, type AgentChildRegistration, type AgentChildSettlement, type AgentChildTokenUsage, AgentDaemonClient, type AgentDaemonError, type AgentDaemonHandler, type AgentDaemonRequest, type AgentDaemonResponse, AgentDaemonServer, type AgentDaemonTransport, AgentDebugger, type AgentDefinition, type AgentDefinitionBudget, type AgentDefinitionIsolation, type AgentDefinitionIssue, AgentDefinitionLoader, type AgentDefinitionLoaderOptions, type AgentDefinitionMetadata, AgentDefinitionResolver, type AgentDefinitionScanResult, type AgentDefinitionScope, type AgentDefinitionShadowRef, type AgentEffortLevel, AgentEvaluator, AgentEventStore, type AgentHookDefinition, AgentHookRunner, AgentInterruptedError, type AgentIpcChannel, type AgentLoadSnapshot, AgentLoop, type AgentLoopConfig, type AgentLoopOptions, type AgentPermissionMode, type AgentProfileActionDecision, type AgentProfileCapabilities, type AgentProfileCapabilityBoundary, type AgentProfileCollaborationMode, type AgentProfileCompletionPolicy, type AgentProfileEvidenceKind, type AgentProfileExecutionPolicy, type AgentProfileExternalAction, type AgentProfileExternalActionPolicy, type AgentProfileIsolation, type AgentProfileKind, type AgentProfileMemoryPolicy, type AgentProfileMemoryScope, type AgentProfilePresentation, type AgentProfileSkillPolicy, type AgentProfileSoulMode, type AgentProfileV2, AgentProfileValidationError, AgentProtocol, AgentRegistry, type AgentRunAgentDefinitionRef, AgentRunController, type AgentRunControllerOptions, type AgentRunCreateInput, AgentRunError, type AgentRunEvent, type AgentRunListOptions, type AgentRunOptions, type AgentRunRecord, type AgentRunSpawnResult, type AgentRunStatus, AgentRunStore, type AgentRunTermination, type AgentRunTerminationReason, type AgentRunTerminationStatus, type AgentRunUsage, type AgentSandbox, type AgentSelectionStrategy, type AgentSessionHostBindingV1, type AgentStreamCallbacks, type AgentTask, type AgentTaskHandler, type AgentTaskResult, type AgentTaskStatus, type AgentTeam, type AgentToAppChannel, type AgentToAppMessages, type AgentToolPolicy, type AnalysisResult, type ApiMessage, type AppAgentBaseOptions, AppAgentFactory, type AppAgentResult, type AppContext, AppContextInjector, AppContextManager, type AppContextProvider, type AppId, type AppServerDestinationExpectation, type AppServerEventV2, type AppServerExecutionIdentity, type AppServerExecutionLeaseV2, type AppServerHandoffOptions, type AppServerInitializeParamsV2, type AppServerInitializeResultV2, type AppServerIntegrationMetadataV2, type AppServerPermissionRequestV2, type AppServerPrincipalV2, AppServerProtocolError, type AppServerProtocolErrorData, AppServerRemoteError, type AppServerRequestContext, type AppServerSlashCommandRefusal, type AppServerSourcePreparation, type AppServerSubscriptionSnapshotV2, type AppServerThreadStatusV2, type AppServerThreadV2, type AppServerTurnRunnerContextV2, type AppServerTurnRunnerV2, type AppServerTurnStatusV2, type AppServerTurnV2, type AppServerV2ClientTransport, type AppServerV2MethodMap, type AppServerV2Options, type AppToAgentChannel, type AppToAgentMessages, type AppType, type ArchitectAgentOptions, type ArchitectToolAdapter, type ArtifactToolActionClass, type AskUserHandler, type AskUserRequest, type AskUserResponse, type AtomicMessageGroup, type AudioProjectInfo, type AudioStemSeparationResult, type AudioToolAdapter, type AudioTrackType, type AudioTranscriptionResult, type AudioTranscriptionSegment, type AuditDecision, type AuditEvent, AuditLogger, type AuditReplayReport, type AuditReplayStep, type AuditRiskLevel, type AuditStatus, type AuditTraceGapEntry, type AuditTraceReport, type AuditTraceSummary, type AuditTraceTimelineEntry, type AuditTraceToolSummary, type AugmentContextOptions, type AuthorizedShellExecution, AutoCheckpointHandler, AutoMemory, type AutoMemoryContext, type AutoMemoryTrigger, AutoPermissionClassifier, type AutoPermissionDecision, BUILT_IN_XENO_PROVIDER_PRESETS, type BackgroundOwnerCleanupResult, type BackgroundOwnerCleanupToken, BackgroundProcessManager, type BackgroundTask, type BaseHookDefinition, type BenchBashMiddlewareOptions, type BlockContent, type BlockType, type BoundedShellOutput, type BreakpointCallback, type BuildResult, type BuildXenoSecureExecutionContractOptions, COMPAT_TOOL_ALIASES, CONFIG_VERSION, type CanonicalSecurityPath, type CanvasSize, type CapabilityLeaseCommand, type CapabilityLeasePersistence, type CapabilityLeaseTransaction, type CapabilityMutationAck, type CapabilityMutationReceipt, type CellRangeData, type ChartConfig, type ChatCompletionChunk, type ChatCompletionRequest, type ChatCompletionResponse, type ChatMessage, type ChatParams, type ChatResponse, type CheckpointData, type CheckpointInfo, CheckpointManager, type CheckpointTrigger, type ClaimXenoHandoffInput, type ClashResult, type CliAutomationAuditEvent, type CliAutomationAuditLoggerPort, type CliAutomationEnvironment, type CliAutomationStatusReport, type CliAutomationSurfaceStatus, CliGovernedAutomationRuntime, type ClipContext, type CodeApplyOptions, type CodeApplyResult, type CodeValidationIssue, type CodeValidationResult, CodeValidator, type CodingBenchmarkAssessment, type CodingBenchmarkMeasurement, type CodingBenchmarkOptions, type CodingBenchmarkReport, type CodingBenchmarkThreshold, type CommandBackedProtectedStateOptions, type CommandHookDefinition, CommandHookRunner, type CompactionRecord, type CompileAgentProfileOptions, type CompiledAgentProfile, type CompiledJsonSchema, type CompletionDecision, type CompletionGuard, type CompletionGuardContext, type CompletionGuardDecision, type CompletionGuardEvaluationContext, CompletionGuardRegistry, type CompletionGuardResult, type CompletionGuardResultObject, type CompletionGuardStopReason, type CompletionGuardToolPolicy, type CompletionGuardToolPolicyMode, type CompletionGuardTurnStats, type CompletionGuardVeto, type ComponentData, type CompressionLLMFn, type CompressionStats, type ConfigProfile, type ConnectConfiguredMCPServersOptions, type ConnectConfiguredMCPServersResult, type ContainedProcessSpec, type ContainmentAdapterIdentity, ContainmentApprovalError, type ContainmentCertificationBinding, ContainmentCertificationError, type ContainmentConformanceCheck, type ContentBlock, type ContextCompressedData, ContextManager, type ContextManagerConfig, type ContextSection, type ContextSource, type ControlPlaneLockHandle, type ControlPlaneLockRecord, ConversationStore, type CreateAuditBackedPermissionEngineOptions, type CreateCliGovernedAutomationRuntimeOptions, type CreateDelegatedBranchAgent, type CreateDelegatedBranchAgentOptions, type CreateDelegatedXenoAgentOptions, type CreateDispatchAgentToolOptions, type CreateXenoAgentOptions, type CreateXenoAgentResult, type CreateXenoGoalInput, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHandoffInput, type CreateXenoHandoffOptions, type CreateXenoHostGovernedAutomationRuntimeOptions, type CreateXenoShareOptions, type CreateXenoSkillToolOptions, type CreateXenoSourceResearchReportInput, type CrossAppHandler, type CrossAppMessage, CrossAppRouter, CrossAppRouterError, type CrossAppRouterOptions, DEFAULT_API_KEY, DEFAULT_IMAGE_MODEL, DEFAULT_MEMORY_BUDGETS, DEFAULT_MODEL, DEFAULT_PROMPT_SECTIONS_TOKEN_BUDGET, DEFAULT_PROTECTED_STATE_KEY_NAME, DEFAULT_PROTECTED_STATE_SERVICE, DEFAULT_SUBAGENT_BRANCH_POLICY, DEFAULT_SUBAGENT_REMOTE_MCP_BY_ROLE, DEFAULT_SUBAGENT_ROLES, DEFAULT_SUBAGENT_ROLE_PRECEDENCE, DEFAULT_SUBAGENT_TEAM_PRESET, DIRECT_SHELL_CONTEXT_WARNING, DISPATCH_AGENT_ERROR_CODES, DOCS_CAPABILITIES, DOCS_TOOL_NAMES, type DebugBreakpoint, type DebugSnapshot, type DebugStep, type DebugStepCallback, type DecideXenoArtifactRequest, type DefaultToolRegistryOptions, type DefaultWebContextRequestFactoryOptions, type DelegatedBranchAdmission, type DelegatedBranchAdmissionSettlement, type DelegatedBranchAgent, type DelegatedBranchAgentCallbacks, type DelegatedXenoTurnResult, type DelegationBudget, type DelegationLimits, type DelegationSummaryData, type DependencyEdge, type DerivedPermissionEngineOptions, type DescendantInstructionHint, type DirectEndpointPolicy, type DirectEndpointProfile, type DirectProviderCapabilityProfile, type DirectProviderConfig, type DirectProviderKind, type DirectProviderSamplingOptions, type DirectShellMessageMetadata, type DirectShellResultRecord, type DispatchAgentErrorCode, type DispatchAgentHandler, type DispatchAgentRequest, type DispatchAgentResponse, type DispatchAgentTermination, type DocComment, type DocsAgentOptions, type DocsToolAdapter, type DocumentContext, type DualLLMMode, DualLLMProvider, type DualLLMProviderConfig, type DualLLMProviderLike, type DualLLMStatus, type DurableCapabilityLeaseOptions, DurableXenoCapabilityLeaseRegistry, DurableXenoCoordinationStore, ENGINE_CAPABILITIES, ENGINE_TOOL_NAMES, ENTER_PLAN_MODE_TOOL_NAME, EXIT_PLAN_MODE_TOOL_NAME, ElectronAgentBridge, type ElectronAgentConfig, type EngineAgentOptions, type EngineToolAdapter, type EntityInfo, type Episode, type EpisodeOutcome, EpisodicStore, type EpisodicStoreOptions, type ErrorData, type EvalReport, type EvalResult, type EvalRunOptions, type EvalTask, type ExchangeMCPOAuthCodeOptions, type ExecuteToolRequest, type ExecuteToolResult, type ExecuteXenoCoordinationActionInput, type ExecuteXenoCoordinationActionResult, ExecutionGovernance, type ExecutionGovernanceOptions, type ExecutionGovernanceSummary, type ExecutionMode, type ExecutionSecurityCapabilities, ExecutionSecurityError, type ExecutionSecurityErrorCode, type ExecutionSecurityLevel, type ExecutionTrustMode, type ExpectedOutputContract, type ExportableSoulSigner, type ExtendedAppType, FALLBACK_MODELS, type FailureCluster, type FileEntry, FileQuotaAuthority, type FileSnapshot, FileXenoArtifactRepository, type FileXenoArtifactRepositoryOptions, FileXenoProviderConnectionStore, type FileXenoProviderConnectionStoreOptions, FileXenoShareRegistry, type FileXenoShareRegistryOptions, type FilterConfig, type FormatVerdict, type GovernanceExtensions, type GovernanceExtensionsOptions, HIGH_RISK_PERMISSIONS, type HarnessTask, type HarnessTaskStatus, type HarnessTaskUpdate, type HookConfig, type HookDecision, type HookDefinition, type HookEventName, type HookExecutionResult, type HookExecutionStatus, type HookInput, type HookInputBase, type HookInvocationInput, type HookModelExecutor, type HookPermissionMode, type HookRunResult, HookRunner, HookRuntime, type HookRuntimeOptions, type HttpHookDefinition, HttpHookRunner, IDENTITY_PATHS, INTERRUPTED_QUESTION_ERROR_CODE, type IdentityFrontmatter, type IdentityLayer, type IdentityLoadResult, IdentityLoader, type IdentityLoaderOptions, type IdentityPaths, IdentityResolver, type IdentitySource, type ImageContentBlock, type ImageDocumentInfo, type ImageGenerationConfig, type ImageLayerInfo, type ImageLayerType, type ImageToolAdapter, type ImageUrlBlock, InMemoryXenoArtifactRepository, type InMemoryXenoArtifactRepositoryOptions, InMemoryXenoCapabilityLeaseRegistry, type InMemoryXenoCapabilityLeaseRegistryOptions, InMemoryXenoTelemetryCollector, type InitializeSessionRuntimeOptions, type InspectSystemPromptOptions, type InstallSignalHandlersOptions, InteractiveChatTurnGovernance, InteractiveTurnGovernance, type InteractiveTurnGovernanceOptions, type IpcHandler, type JsonRpcErrorResponse, type JsonRpcMessage$1 as JsonRpcMessage, type JsonRpcNotification, type JsonRpcRequest$1 as JsonRpcRequest, type JsonRpcResponse, type JsonRpcSuccessResponse, type JsonSchema, JsonSchemaCompilationError, type JsonSchemaCompilationIssue, type JsonSchemaCompileOptions, type JsonSchemaSubset, type JsonSchemaType, type JsonSchemaValidationError, type JsonSchemaValidationResult, type LLMCompletionResult, type LLMProvider, type LLMProviderCapabilities, type LLMProviderMessage, type LLMProviderRequestContext, type ToolDefinition as LLMProviderToolDefinition, type LLMToolDefinition, type LayerContext, type LegacyXenoSkillInput, type LinuxBubblewrapCapability, type LinuxBubblewrapProcessSpec, LlmClient, type LlmClientDeps, LocalLLMProvider, type LocalLLMProviderConfig, type LocalRuntimePreflightResult, type LocalToolGrammarSupport, LogLevel, type LspDefinitionReport, type LspDiagnosticsReport, type LspDoctorReport, type LspDoctorServer, type LspHoverReport, type LspReferencesReport, MANIFEST_FILENAME, MAX_CONTAINMENT_APPROVAL_AGE_MS, MAX_CONTAINMENT_CERTIFICATION_BYTES, MAX_CONTAINMENT_CERTIFICATION_LIFETIME_MS, MAX_DIRECT_SHELL_OUTPUT_CHARS, MAX_PLAN_CHARS, MAX_READ_FILE_BYTES, MAX_READ_OUTPUT_CHARS, type MCPAppCapabilities, type MCPAppContentSecurityPolicy, type MCPAppExtensionMetadata, type MCPAppMetadata, type MCPAppPermissions, type MCPAppResourceDescriptor, type MCPAppValidationResult, type MCPAppVisibility, type MCPApprovalDecision, type MCPBearerTokenRefreshHandler, type MCPBearerTokenResolver, MCPCatalogError, type MCPCatalogErrorCode, type MCPConfigFile, type MCPConfigSource, type MCPConfiguredServer, MCPConnectionError, type MCPConnectionErrorCode, type MCPElicitationAction, type MCPElicitationHandler, type MCPElicitationRequest, type MCPElicitationResponse, type MCPHttpAuthChallenge, MCPHttpTransportError, type MCPHttpUrlPhase, type MCPInitializeParams, type MCPInitializeResult, MCPManager, type MCPManagerOptions, MCPMessageTooLargeError, type MCPOAuthAuthorizationServerMetadata, type MCPOAuthAuthorizationSession, MCPOAuthClient, type MCPOAuthClientOptions, type MCPOAuthClientRegistration, type MCPOAuthClientRegistrationSource, type MCPOAuthConfig, type MCPOAuthDiscoveryResult, type MCPOAuthProtectedResourceMetadata, type MCPOAuthTokenSet, type MCPOAuthTokenStore, type MCPOAuthUrlPhase, type MCPPrompt, type MCPPromptGetParams, type MCPPromptGetResult, type MCPPromptsListResult, type MCPRegistryAccessPolicy, type MCPRegistryEntryDescriptor, type MCPRegistryEntryKind, type MCPRegistryFilter, type MCPResource, type MCPResourceReadParams, type MCPResourceReadResult, type MCPResourceSubscribeParams, type MCPResourceTemplate, type MCPResourceTemplatesListResult, type MCPResourceUnsubscribeParams, type MCPResourcesListResult, MCPServer, type MCPServerConfig, type MCPServerModeOptions, type MCPServerPromptRegistration, type MCPServerResourceRegistration, type MCPServerScope, type MCPServerState, type MCPTool, type MCPToolCallParams, type MCPToolCallResult, type MCPToolsListResult, type MCPTransport, type MCPTransportConnection, MCP_APPS_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_SCHEME, MCP_MAX_CATALOG_ENTRIES, MCP_PROTOCOL_VERSION, MCP_STDIO_MAX_MESSAGE_CHARS, MCP_SUPPORTED_PROTOCOL_VERSIONS, MEMORY_FILES, MODEL_CATALOG_ACCOUNT_AUTH_VERSION, MODEL_REQUEST_TIMEOUT_PHASES, MOTION_CAPABILITIES, MOTION_SYSTEM_PROMPT, MOTION_TOOL_NAMES, type ManifestValidationResult, type MaterialConfig, type MaterializeXenoAutomationEvidenceOptions, type MemoryAccessScope, type MemoryBudget, type MemoryEntry, type MemoryFile, type MemoryLevel, MemoryManager, type MemoryManagerOptions, type MeshInfo, type Message, MessageFlow, type MessageFlowDeps, type ModeSwitchRequest, type ModelInfo, type ModelProvider, ModelProviderRegistry, type ModelRequestDeadlines, ModelRequestTimeoutError, type ModelRequestTimeoutPhase, ModelResponseIncompleteError, type ModelWorkAccounting, type ModelWorkRequestIdentity, type ModelWorkSettlement, type MonitorEvent, MonitorManager, type MonitorSnapshot, type MonitorSource, MonitorStopTool, MonitorTool, type MotionAgentOptions, type MotionPromptParams, type MxcContainmentProbe, type MxcNativeAssetDescriptor, type MxcWindowsHostPreparationReport, NOTEBOOK_READ_NOT_A_NOTEBOOK, NOTES_CAPABILITIES, NOTES_TOOL_NAMES, type NormalizedLspDiagnostic, type NormalizedLspHover, type NormalizedLspLocation, type NormalizedLspRange, type NotePageInfo, type NoteSearchResult, type NotesAgentOptions, type NotesToolAdapter, type OllamaNativeProviderConfig, type OnChunkCallback, type OnTaskCompleteInput, type OnTaskCompleteResult, type OpenTelemetryMetricAdapter, type OperationTaskSource, type OsProtectedStateStoreOptions, OtelExporter, type OtelUsageAdapter, PATCH_DIRECTIVES, PATCH_ENVELOPE_BEGIN, PATCH_ENVELOPE_END, PATCH_LINE_PREFIXES, PEER_MESSAGE_DEFAULT_TTL_MS, PEER_PRESENCE_TTL_MS, PEER_SCHEMA_VERSION, PEER_TASK_TERMINAL_STATUSES, PIXEL_CAPABILITIES, PIXEL_SYSTEM_PROMPT, PIXEL_TOOL_NAMES, PROCESS_TREE_ADAPTERS, PROJECT_STATE_VERSION, PROVIDER_TOOL_NAME_PATTERN, type ParameterizedPermissionRule, type ParseUnifiedDiffOptions, type ParsedPatch, type PatchFileSection, type PatchHunk, type PatchLine, type PatchParseError, type PatchParseErrorCode, type PeerAddress, type PeerDelivery, type PeerDeliveryStatus, type PeerInboundPolicy, type PeerMessage, type PeerMessageKind, PeerMessagingStore, type PeerMessagingStoreOptions, type PeerPermissionPosture, type PeerPresence, type PeerPresenceState, type PeerResolution, type PeerSendInput, type PeerSendOutcome, type PeerSurface, type PeerTask, type PeerTaskStatus, type PermissionCheckContext, type PermissionConfig, type PermissionDecision, type PermissionDecisionEvent, type PermissionDecisionHook, PermissionEngine, type PermissionInfo, type PermissionProfile, type PermissionProfileDecision, type PermissionProfileMode, type PermissionProfileName, type PermissionProfileNetworkDecision, type PermissionProfileResolution, type PermissionPromptFn, type PermissionPromptInfo, type PermissionPromptOperation, type PermissionPromptPreview, type PermissionPromptPreviewLine, type PermissionRequestContext, type PermissionRequestInfo, type PermissionRequestResult, type PermissionRule, type PermissionToolMetadata, type PersistentPermissionState, type PixelAgentOptions, type PixelPromptParams, type ExecutingPermissionMode as PlanApprovalPermissionMode, type PlanModeEnterDecision, type PlanModeEnterRequest, type PlanModeReadOnlyClaim, type PlanModeToolPolicy, type PlanModeToolsOptions, type PlanReviewDecision, type PlanReviewRequest, type PlatformInfo, type PluginActivationEvent, type PluginAuthor, type PluginCapability, type PluginCommandContribution, type PluginCommandHandler, type PluginContext, type PluginContributions, type PluginDetachedSignature, type PluginEngineConstraint, type PluginEvent, PluginEventBus, type PluginEventListener, type PluginEventType, type PluginHook, PluginHost, type PluginHostInfo, type PluginHostOptions, type PluginInfo, type PluginListing, type PluginLogger, PluginManager, type PluginManagerOptions, type PluginManifest, PluginMarketplace, type PluginMarketplaceOptions, type PluginOutputStyleContribution, type PluginPermission, type PluginPromptContribution, type PluginPublishOptions, type PluginRelevanceCandidate, type PluginRelevanceHints, type PluginRelevanceSuggestion, type PluginRepositorySignal, PluginSandbox, type PluginSandboxOptions, type PluginScaffoldOptions, type PluginSearchOptions, type PluginSettingContribution, PluginSettingsManager, type PluginSignatureStatus, type PluginStatus, type PluginStorage, type PluginSupplyChainLockfile, type PluginSupplyChainRecord, type PluginTestCase, type PluginTestResult, PluginToolBuilder, type PluginToolContribution, type PluginTrustBadge, type PluginUIPanel, type PolicyCheckResult, type PolicyEnforcerConfig, type PrepareMCPOAuthAuthorizationOptions, type ProbeXenoProviderOptions, type ProcessContainmentStatus, type ProcessTreeAdapter, type ProfileMCPServerConfig, ProfileManager, type ProjectConfig, type ProjectDomainProfile, type ProjectExecutionPhase, type ProjectExecutionProfile, type ProjectInfo, type ProjectMcpApprovalDecision, type ProjectSessionContext, type ProjectSessionContextEntry, type ProjectSessionSummary, type ProjectTokenUsageSummary, type PromotionRequestResult, type PromptContext, type PromptFn, type PromptHookDefinition, PromptHookRunner, type PromptMemoryContextInfo, type PromptSectionContext, type PromptSectionProvider, PromptSectionRegistry, type ProtectedFileHelperRunner, ProtectedFileWriteError, type ProtectedFileWriteReceipt, type ProtectedStateCipher, type ProtectedStateEnvelopeCipher, type ProtectedStateEnvelopeCipherOptions, type ProtectedStateEnvelopeV1, type ProtectedStateStore, ProviderError, type ProviderErrorCategory, type ProviderErrorCode, type ProviderErrorOptions, type ProviderStatus, type ProviderStreamEvent, type ProviderTransportLimits, QueryLifecycle, type QueryLifecycleOptions, type QueryState, type QueryTransition, type QueryWatchdogReason, QuotaAcknowledgementError, type QuotaAcknowledgementPhase, type QuotaAuthority, type QuotaEntity, QuotaError, type QuotaGovernorOptions, type QuotaLimits, type QuotaReservation, type QuotaScope, READ_FILE_TOO_LARGE, READ_IMAGE_INVALID_CONTENT, READ_IMAGE_PREVIEW_UNAVAILABLE, READ_IMAGE_UNSUPPORTED_FORMAT, READ_IS_DIRECTORY, READ_ONLY_TOOL_NAMES, READ_UNSUPPORTED_ENCODING, READ_UNSUPPORTED_FORMAT, READ_USE_NOTEBOOKREAD, READ_USE_READIMAGE, REQUIRED_CONTAINMENT_CONFORMANCE_CHECKS, type RecalledEpisode, type RecalledSkill, type RecentSessionEntry, type RecentSessionsIndex, type ReducedResult, type ReducerOptions, type RegisterToolOperationInput, type RegisteredTool, type RenderConfig, type RequestBudgetBreakdown, type RequestDeadline, type ResolveXenoSdkApiKeyOptions, type ResolvedIdentity, type ResolvedMemory, type ResolvedProvider, type ResolvedSubagentWorkflowAnswer, type ResourceContentBlock, type RoomInfo, type RunAuthority, type RunAuthorityDispatch, RunAuthorityRefusedError, type RunAuthorityToolCall, type RunContainmentConformanceOptions, type RunDelegatedXenoTurnOptions, type RunDispatchCredential, type RunStreamOptions, type RuntimeManifestFileEntry, type RuntimeManifestInspectionResult, type RuntimePluginManifestEntry, SDK_DEFAULT_MAX_ITERATIONS, SDK_DEFAULT_MAX_TOKENS, SDK_VERSION, SESSION_FORMAT_VERSION, SHEETS_CAPABILITIES, SHEETS_TOOL_NAMES, SLIDES_CAPABILITIES, SLIDES_TOOL_NAMES, SOUND_CAPABILITIES, SOUND_SYSTEM_PROMPT, SOUND_TOOL_NAMES, SSETransport, SUBAGENT_ROLE_ALIASES, SUBAGENT_TEAM_PRESETS, type SandboxCheckResult, type ScoredMemory, ScreenCapture, type ScreenCaptureAuthorizationPhase, type ScreenCaptureConfig, ScreenCaptureError, type ScreenCaptureErrorCode, type ScreenCaptureOptions, type ScreenCaptureTarget, type SearchConfig, type SearchProvider, type SecuredProcessSpec, type SecurityPathIssue, type SecurityPathIssueCode, type Session, type SessionCreateOptions, type SessionData, type SessionEndData, type SessionForkRecord, type SessionIntegrationConfig, SessionLock, SessionLock as SessionLockManager, SessionManager, type SessionMeta, type SessionRecoveryIssue, type SessionRecoveryResult, type SessionRecoverySource, SessionRegistry, type SessionResumeOptions, type SessionRuntimeBaseOptions, type SessionRuntimeState, type SessionStartData, type SessionStatus, type SessionSummary, type SetXenoArtifactCommentResolutionRequest, type SetupAIHandlersOptions, type ShapeConfig, type SheetsAgentOptions, type SheetsToolAdapter, type ShellExecutionAuthorization, type ShellExecutionAuthorizationRequest, type ShellPathReference, type ShutdownCleanup, type Skill, SkillStore, type SkillStoreOptions, type SlideInfo, type SlidesAgentOptions, type SlidesToolAdapter, type SortConfig, type SoulCompletion, SoulEngine, type SoulEngineOptions, type SoulMessage, type SoulSigner, type SoundAgentOptions, type SoundPromptParams, type SpeechRecognizer, type SpeechRecognizerCallbacks, type SpeechRecognizerConfig, SqliteAutomationExecutionJournal, SqliteCapabilityLeasePersistence, type StartXenoLoopInput, StdioTransport, type StemSeparationResult, type StopReason, type StoredConversation, type StoredMessage, type StoredToolCall, type StoredToolOutput, type StreamResult, StreamableHTTPTransport, type StreamableHTTPTransportOptions, type StreamableHTTPTransportSnapshot, SubagentBranchCancelledError, type SubagentBranchPolicy, type SubagentBriefContext, type SubagentExecuteFn, type SubagentExecutionRequest, type SubagentExecutionResponse, type SubagentRemoteMcpAccess, type SubagentResult, type SubagentRole, type SubagentTask, type SubagentTeamPreset, type SubagentTeamPresetDefinition, type SubagentWorkflowMode, type SubagentWorkflowOptions, type SubagentWorkflowResult, type SynthesizeSkillInput, type SystemPromptInspectionResult, THREE_D_CAPABILITIES, THREE_D_TOOL_NAMES, TOOL_OPERATION_SCHEMA_VERSION, TOOL_OPERATION_TERMINAL_STATES, MAX_READ_BYTES as TOOL_OUTPUT_MAX_READ_BYTES, type TaskCompletionCallback, TaskListManager, type TestResult, type TextBlock, type ThreeDAgentOptions, type ThreeDToolAdapter, type TimelineInfo, type TokenUsageTotals, type ToolAnnotationHints, type ToolAssistantContentBlock, type ToolAuthorizationReceipt, type ToolCallData, type ToolCompletionPolicy, type ToolContinuationCheckpoint, type ToolContinuationGoal, type ToolContinuationNotification, type ToolDefinition, type ToolEvidence, type ToolExchangeRepairResult, type ToolExecutionContext, type ToolExecutor, type ToolFailureCategory, type ToolFailureGuardTrip, ToolFailureLoopGuard, type ToolHistoryRepairDiagnostic, type ToolInputGrammar, type ToolManifestEntry, type ToolMiddleware, type ToolMiddlewareContext, ToolMiddlewareRegistry, type ToolNameCodec, type ToolOperationEvent, ToolOperationManager, type ToolOperationRuntimeEventType, type ToolOperationSnapshot, type ToolOperationState, type ToolOperationTerminalState, ToolOrchestrator, type ToolOrchestratorCallbacks, type ToolOrchestratorConfig, type ToolOrigin, type ToolOutputRange, type ToolOutputReadError, type ToolPolicyProjection, type ToolPolicyProjectionContext, type ToolProgressUpdate, ToolRegistry, type ToolRegistryOptions, type ToolResult, type ToolResultBlock, type ToolResultContent, type ToolResultData, type ToolRiskLevel, type ToolRuntimeContext, type ToolSchemaProjectionChange, ToolSchemaProjectionError, type ToolSchemaProjectionResult, type ToolSchemaProviderDialect, type ToolUseBlock, type TraceGraph, type TraceGraphEdge, type TraceGraphNode, type TrackContext, type TranscriptBytePage, type TranscriptBytePageOptions, type TranscriptEvent, type TranscriptEventData, type TranscriptEventType, type TranscriptPageRecord, type TranscriptRecordPage, type TranscriptRecordPageOptions, TranscriptWriter, type TranscriptionResult, type TranscriptionSegment, type TransitionConfig, type TurnDiffSummary, TurnDiffTracker, type TurnDiffTrackerOptions, type TurnFileDiff, type TurnRestoreAvailability, type TurnRestoreFilePreview, TurnRestoreManager, type TurnRestorePoint, type TurnRestoreResult, UNANSWERED_QUESTION_PREFIX, UNBOUNDED_OPERATION_CONTINUATION_LIMIT, type UnansweredQuestion, type UnifiedExecCompletionReason, UnifiedExecError, type UnifiedExecEvent, type UnifiedExecEventListener, type UnifiedExecEventType, type UnifiedExecInputSource, UnifiedExecManager, type UnifiedExecManagerOptions, type UnifiedExecMode, type UnifiedExecOrigin, type UnifiedExecOutput, type UnifiedExecOutputChunk, type UnifiedExecOutputDelta, type UnifiedExecPresentation, type UnifiedExecProcess, type UnifiedExecReadDeltaOptions, type UnifiedExecStartOptions, type UnifiedExecStatus, type UnifiedExecStream, type UnsupportedFormatFamily, type UpdateXenoGoalInput, UsageAccumulator, type UsageAttribution, type UsageEvent, UsageLedger, type UsageQuery, type UsageTotals, type ValidateXenoSdkApiKeyOptions, type ValidatedContainmentCertification, type ValidationSignal, type VectorDocument, VectorMemoryStore, type VectorSearchResult, type VectorStoreAdapter, type VectorStoreOptions, type VerifyContainmentApprovalExpected, type VerifyPluginSupplyChainOptions, type VerifyPluginSupplyChainResult, type VerifyXenoHostedWebhookOptions, type VerifyXenoShareOptions, type VideoToolAdapter, WEB_CONTEXT_CONTRACT_VERSION, WEB_CONTEXT_TOOL_RESULT_SCHEMA, WORKFLOW_CAPABILITIES, WORKFLOW_TOOL_NAMES, type WebContextClientPort, type WebContextEvidenceProjection, type WebContextRequestBase, type WebContextRequestFactory, type WebContextToolOptions, type WebContextToolResult, type WebContextWaitPortOptions, type WebSearchResult, type WindowsDpapiCredentialFile, type WindowsDpapiProtectedFileOptions, type WindowsDpapiProtectedStateOptions, type WorkflowAgentOptions, type WorkflowDefinition, type WorkflowEvent, type WorkflowExecutionResult, type WorkflowInfo, type WorkflowNodeConfig, type WorkflowNodeDefinition, type WorkflowNodeExecutor, type WorkflowNodeStatus, type WorkflowPlan, WorkflowPlanner, type WorkflowRunNodeRecord, type WorkflowRunRecord, type WorkflowRunStatus, WorkflowRuntime, WorkflowStore, type WorkflowToolAdapter, WorkspaceIndex, type WorkspaceScanOptions, XENO_AGENT_PROFILE_SCHEMA_VERSION, XENO_API_BASE, XENO_APP_PROTOCOL_V2_METHODS, XENO_APP_PROTOCOL_VERSIONS, XENO_ARTIFACT_ACTOR_KINDS, XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION, XENO_ARTIFACT_SCHEMA_VERSION, XENO_ARTIFACT_SENSITIVITIES, XENO_ARTIFACT_STATES, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BROWSER_CONTROL_PLANE_OPERATIONS, XENO_BUILTIN_ARTIFACT_KINDS, XENO_CAPABILITY_LEASE_SCHEMA_VERSION, XENO_CONTAINMENT_APPROVAL_SCHEMA, XENO_CONTAINMENT_CERTIFICATION_SCHEMA, XENO_CONTAINMENT_CONFORMANCE_SCHEMA, XENO_CONTAINMENT_REVIEWER_TRUST_STORE_SCHEMA, XENO_CONTEXT_DIGEST_PATTERN, XENO_CONTROL_ROOM_SCHEMA_VERSION, XENO_COORDINATION_BUDGET_SESSION_SCHEMA_VERSION, XENO_COORDINATION_MANAGED_SESSION_SCHEMA_VERSION, XENO_COORDINATION_SCHEMA_VERSION, XENO_COORDINATION_TURN_SESSION_SCHEMA_VERSION, XENO_DEFLATE_CODEC_NAME, XENO_DEFLATE_CODEC_VERSION, XENO_EVIDENCE_EDGE_TYPES, XENO_EVIDENCE_GRAPH_SCHEMA_VERSION, XENO_EVIDENCE_NODE_TYPES, XENO_GIF_ANIMATION_POLICY, XENO_GIF_CODEC_NAME, XENO_GIF_CODEC_VERSION, XENO_HANDOFF_SCHEMA_VERSION, XENO_HOSTED_CONTROL_SCHEMA_VERSION, XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION, XENO_HOSTED_EVENT_SCHEMA_VERSION, XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA, XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS, XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_TOOL_NAMES, XENO_HOSTED_RESULT_SCHEMA_VERSION, XENO_HOSTED_RUN_SCHEMA_VERSION, XENO_HOSTED_TRIGGER_SCHEMA_VERSION, XENO_JPEG_CODEC_NAME, XENO_JPEG_CODEC_VERSION, XENO_MXC_ADAPTER_NAME, XENO_MXC_POLICY_VERSION, XENO_MXC_VERSION, XENO_ORACLE_REPORT_SCHEMA_VERSION, XENO_PAGE_ENTRY, XENO_PAGE_MAX_BYTES, XENO_PAGE_MAX_FILES, XENO_PLUGIN_LOCK_FILENAME, XENO_PLUGIN_LOCK_SCHEMA_VERSION, XENO_PLUGIN_SIGNATURE_FILENAME, XENO_PLUGIN_SIGNATURE_SCHEMA_VERSION, XENO_PROCESS_TREE_KILL_TIMEOUT_MS, XENO_PROVIDER_CATALOG_SCHEMA_VERSION, XENO_PROVIDER_CONNECTION_STORE_SCHEMA_VERSION, XENO_RASTER_CODEC_NAME, XENO_RASTER_CODEC_VERSION, XENO_RASTER_PREVIEW_FORMATS, XENO_RECIPE_SCHEMA_VERSION, XENO_REPOSITORY_INDEX_SCHEMA_VERSION, XENO_REVIEW_DIMENSIONS, XENO_REVIEW_EVIDENCE_KINDS, XENO_REVIEW_REPORT_SCHEMA_VERSION, XENO_RT_DEFAULT_URL, XENO_SECURE_EXECUTION_CONTRACT_SCHEMA_VERSION, XENO_SHARE_REGISTRY_SCHEMA_VERSION, XENO_SHARE_SCHEMA_VERSION, XENO_SKILL_SCHEMA_VERSION, XENO_SLASH_REFUSAL_NOTHING_SENT, XENO_SOURCE_RESEARCH_SCHEMA_VERSION, XENO_SPEC_EXECUTION_SCHEMA_VERSION, XENO_SPEC_SCHEMA_VERSION, XENO_SVG_RENDERER_NAME, XENO_SVG_RENDERER_VERSION, XENO_TELEMETRY_SCHEMA_VERSION, XENO_UNSUPPORTED_SLASH_COMMAND_REASON, XENO_VP8_CODEC_NAME, XENO_VP8_CODEC_VERSION, XENO_WEBP_ANIMATION_POLICY, XENO_WEBP_CODEC_NAME, XENO_WEBP_CODEC_VERSION, type XenoAnsiEscapeFamily, type XenoAnsiFormatter, type XenoAnsiPolicy, type XenoAnsiStyle, type XenoAnsiToken, type XenoAnsiWrapOptions, type XenoAppProtocolVersion, XenoAppServer, type XenoAppServerOptions, XenoAppServerV2Client, type XenoArtifactActor, type XenoArtifactActorKind, type XenoArtifactAnchor, type XenoArtifactAppendReviewRequest, type XenoArtifactContent, type XenoArtifactEnvelope, type XenoArtifactFileRecoveryNotice, type XenoArtifactFileSnapshot, type XenoArtifactIdentity, type XenoArtifactKind, type XenoArtifactLifecycleEvent, type XenoArtifactListQuery, type XenoArtifactMutationOptions, type XenoArtifactPersistedRecord, type XenoArtifactProvenance, type XenoArtifactRecord, type XenoArtifactRelationship, type XenoArtifactRepository, XenoArtifactRepositoryError, type XenoArtifactRepositoryErrorCode, type XenoArtifactRepositoryState, type XenoArtifactRetention, type XenoArtifactReviewAnchorInput, type XenoArtifactReviewDecision, type XenoArtifactReviewEvent, type XenoArtifactReviewEventInput, XenoArtifactReviewService, type XenoArtifactReviewServiceOptions, type XenoArtifactReviewSummary, type XenoArtifactRevisionOptions, type XenoArtifactSensitivity, type XenoArtifactState, XenoArtifactStateTransitionError, type XenoArtifactStorageReference, type XenoArtifactTransitionRequest, XenoArtifactValidationError, type XenoArtifactValidationIssue, XenoAuthError, type XenoAuthErrorCode, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionJournal, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationJournalIdentity, type XenoAutomationJournalRecord, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBasicRasterImage, type XenoBoundedProcessOutcome, type XenoBoundedProcessRunner, type XenoBoundedProcessRunnerSync, type XenoBrowserAutomationOperation, XenoBrowserControlPlaneAdapter, type XenoBrowserControlPlaneAdapterOptions, type XenoBrowserExecutionPolicy, type XenoCapabilityEffect, type XenoCapabilityEligibility, type XenoCapabilityKind, type XenoCapabilityLease, type XenoCapabilityLeaseApprovalContext, type XenoCapabilityLeaseApprovalRequest, type XenoCapabilityLeaseDenialRequest, XenoCapabilityLeaseError, type XenoCapabilityLeaseErrorCode, type XenoCapabilityLeaseRequest, type XenoCapabilityLeaseRevocationRequest, type XenoCapabilityLeaseState, type XenoCapabilityScope, type XenoCapabilitySubject, type XenoCapabilityUse, type XenoColorDepth, type XenoColorPolicy, type XenoCompiledRecipe, type XenoCompiledRecipeStep, type XenoComputerAutomationOperation, type XenoComputerExecutionPolicy, type XenoComputerHostAuthority, type XenoComputerRequestAuthorizer, type XenoConfig, type XenoContainmentApprovalReport, type XenoContainmentCertificationApproval, type XenoContainmentCertificationManifest, type XenoContainmentConformanceReport, type XenoContainmentReviewerTrustStore, type XenoContentHash, type XenoControlRoomActionKind, type XenoControlRoomActionPlan, type XenoControlRoomActionRequest, type XenoControlRoomAgent, type XenoControlRoomAgentInput, type XenoControlRoomAgentStatus, type XenoControlRoomApprovalInput, type XenoControlRoomApprovalKind, type XenoControlRoomArtifactInput, type XenoControlRoomAttentionItem, type XenoControlRoomAttentionKind, type XenoControlRoomGoalInput, type XenoControlRoomInput, type XenoControlRoomMonitorInput, type XenoControlRoomNotificationInput, type XenoControlRoomProjectionOptions, type XenoControlRoomSnapshot, type XenoControlRoomStatusCategory, type XenoControlRoomSummary, type XenoControlRoomTask, type XenoControlRoomTaskInput, type XenoControlRoomUsage, XenoControlRoomValidationError, type XenoCoordinationAction, type XenoCoordinationAdmissionFence, XenoCoordinationError, type XenoCoordinationEvent, type XenoCoordinationEventType, type XenoCoordinationSessionState, type XenoCoordinationStoreOptions, type XenoCreatedShare, type XenoCredentialSource, type XenoCredentialType, type XenoDesktopCaptureSource, type XenoDesktopCapturer, type XenoDiffArtifactContext, type XenoDiffDocument, type XenoDiffFile, type XenoDiffFileStatus, type XenoDiffHunk, type XenoDiffLine, type XenoDiffLineKind, type XenoDiffMode, XenoDiffParseError, type XenoDurableAutomationOptions, type XenoEd25519Signature, type XenoElementCaptureAdapter, type XenoEnvironmentExecutionPolicy, type XenoEvidenceEdge, type XenoEvidenceEdgeType, type XenoEvidenceGraph, XenoEvidenceGraphBuilder, type XenoEvidenceGraphBuilderOptions, XenoEvidenceGraphValidationError, type XenoEvidenceNode, type XenoEvidenceNodeType, type XenoEvidenceReference, type XenoExecutionAdapterIdentity, type XenoExecutionEnforcement, type XenoExecutionIdentity, XenoExecutionLeaseSession, type XenoExecutionLeaseSessionOptions, type XenoExecutionLeaseStore, type XenoExecutionOwner, type XenoExternalActionExecutionPolicy, type XenoFilesystemExecutionPolicy, type XenoGifAnimation, type XenoGifDisposal, type XenoGifFrame, type XenoGitHubReviewComment, type XenoGoalCriterion, type XenoGoalCriterionResult, type XenoGoalMilestone, type XenoGoalProgress, type XenoGoalRecord, type XenoGoalStatus, type XenoGoalTask, type XenoGoalTaskStatus, type XenoGoalTurnAdmission, type XenoGoalTurnRequest, type XenoGoalTurnState, type XenoGoalVerification, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHandoffAuthority, type XenoHandoffOperation, type XenoHandoffPayload, type XenoHandoffRecord, type XenoHandoffResumePoint, type XenoHandoffSnapshot, type XenoHandoffSnapshotFile, type XenoHandoffSnapshotManifest, type XenoHandoffStatus, type XenoHandoffStatusInput, type XenoHandoffStatusReceipt, type XenoHandoffTarget, type XenoHostAutomationAuditEvent, type XenoHostAutomationAuditLoggerPort, type XenoHostAutomationEnvironment, type XenoHostAutomationStatusReport, type XenoHostAutomationSurfaceStatus, CliGovernedAutomationRuntime as XenoHostGovernedAutomationRuntime, type XenoHostedArchitecture, type XenoHostedAuthority, type XenoHostedBudget, type XenoHostedCacheMount, type XenoHostedControlAcknowledgement, type XenoHostedControlAction, type XenoHostedControlCommand, type XenoHostedControlCommandPayload, type XenoHostedEnvironmentManifest, type XenoHostedEnvironmentManifestPayload, type XenoHostedEventRecord, type XenoHostedExecutionAdapterCertification, type XenoHostedExecutionAdapterVerificationOptions, type XenoHostedExecutionBoundaryReceipt, type XenoHostedExecutionJob, XenoHostedExecutionJobError, type XenoHostedExecutionJobVerification, type XenoHostedExecutionSecretValue, type XenoHostedImageReference, type XenoHostedNetworkDestination, type XenoHostedNetworkPolicy, type XenoHostedOs, type XenoHostedQuotaLease, type XenoHostedReplayCursor, type XenoHostedReplayPage, type XenoHostedRepositorySource, type XenoHostedResourceLimits, type XenoHostedRetentionPolicy, type XenoHostedRunRecord, type XenoHostedRunRequest, type XenoHostedRunResult, type XenoHostedRunResultPayload, type XenoHostedRunStatus, type XenoHostedSecretProjection, type XenoHostedSetupStep, type XenoHostedSlashCommandRefusal, type XenoHostedTriggerDefinition, type XenoHostedTriggerDelivery, type XenoHostedTriggerKind, type XenoHostedWebhookSource, type XenoHostedWebhookVerification, type XenoJsonObject, type XenoJsonPrimitive, type XenoJsonValue, type XenoJwtPayload, type XenoLegacyAgentArtifactContext, type XenoLegacyArtifactContext, type XenoLoadedSkill, type XenoLoopIteration, type XenoLoopKind, type XenoLoopRecord, type XenoLoopSchedule, type XenoLoopStatus, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, XenoMultiAgentReviewCoordinator, type XenoMultiAgentReviewCoordinatorOptions, type XenoNetworkDestination, type XenoNetworkExecutionPolicy, type XenoOracleAdjudication, type XenoOracleAdjudicationDraft, type XenoOracleAdjudicationRequest, type XenoOracleAdjudicationResult, type XenoOracleArtifactContext, type XenoOracleCitation, type XenoOracleClaim, XenoOracleCoordinator, type XenoOracleCoordinatorOptions, type XenoOracleDisagreement, type XenoOracleExecutionRequest, type XenoOracleExecutionResult, type XenoOracleModelIdentity, type XenoOracleOpinion, type XenoOracleOpinionDraft, type XenoOracleReport, type XenoOracleRole, type XenoOracleRunOptions, XenoOracleValidationError, type XenoOracleVerdict, type XenoPageFileInput, type XenoPageFileRecord, type XenoPageHome, type XenoPagePublication, XenoPageStore, type XenoPageStoreOptions, type XenoProcessExecutionPolicy, type XenoProcessTreeKillOptions, type XenoProcessTreeKillReason, type XenoProcessTreeKillResult, type XenoProcessTreeKillTool, type XenoProjectState, type XenoProviderAdapterKind, type XenoProviderAuthPreset, type XenoProviderCapabilities, XenoProviderCatalog, type XenoProviderConnection, type XenoProviderConnectionSnapshot, type XenoProviderConnectionView, type XenoProviderCredentialMode, type XenoProviderModelDescriptor, type XenoProviderModelExecution, type XenoProviderPreset, type XenoProviderProbeResult, type XenoProviderReadiness, type XenoProviderRouteCandidate, type XenoProviderRoutingPolicy, type XenoPtyAdapter, type XenoPtyProcess, type XenoPtySpawnOptions, type XenoPublishPageInput, type XenoPublishedPage, type XenoRasterImage, type XenoRasterPreview, type XenoRecipeDefinition, type XenoRecipeInputDefinition, type XenoRecipeMode, type XenoRecipePermissionMode, type XenoRecipeStepDefinition, XenoRecipeValidationError, type XenoRedactionCategory, type XenoRedactionEvent, type XenoRedactionOptions, type XenoRedactionReport, type XenoRedactionResult, type XenoRemoteRepositoryIdentity, type XenoRemoteSourceFile, type XenoRemoteSourceProvider, type XenoRepositoryChunk, type XenoRepositoryDocumentKind, type XenoRepositoryEmbedding, type XenoRepositoryEmbeddingProvider, type XenoRepositoryEmbeddingRequest, type XenoRepositoryFileRecord, type XenoRepositoryFreshnessInput, type XenoRepositoryFreshnessReport, type XenoRepositoryGitProvenance, type XenoRepositoryIndexBuildOptions, XenoRepositoryIndexFileStore, type XenoRepositoryIndexSnapshot, type XenoRepositoryIndexStats, type XenoRepositoryRelationship, type XenoRepositoryRelationshipKind, type XenoRepositorySearchMode, type XenoRepositorySearchQuery, type XenoRepositorySearchResponse, type XenoRepositorySearchResult, type XenoRepositorySourceDocument, type XenoRepositorySymbol, type XenoRepositorySymbolGraph, type XenoRepositorySymbolKind, type XenoRequestContext, type XenoResolvedApiKey, type XenoReviewAgentExecutor, type XenoReviewAgentResult, type XenoReviewArtifactContext, type XenoReviewCoordinatorContext, type XenoReviewDimension, type XenoReviewEvidence, type XenoReviewEvidenceKind, type XenoReviewFinding, type XenoReviewFindingProposal, type XenoReviewFindingState, type XenoReviewPack, type XenoReviewReport, type XenoReviewSeverity, type XenoReviewTarget, XenoReviewValidationError, type XenoReviewVerificationOutcome, type XenoReviewVerificationResult, type XenoReviewVerifierExecutor, type XenoRuntimeEvent, type XenoRuntimeEventBase, XenoRuntimeEventBus, type XenoRuntimeEventDraft, type XenoRuntimeEventSink, type XenoRuntimeEventType, type XenoSecretProjection, type XenoSecureExecutionContract, XenoSecureExecutionContractError, type XenoSecureExecutionContractErrorCode, type XenoShareAccessPolicy, type XenoShareContent, type XenoShareGitContext, type XenoShareIssuer, type XenoSharePayload, type XenoSharePrincipal, type XenoShareReference, type XenoShareRegistryRecord, type XenoShareRegistrySnapshot, type XenoShareSessionIdentity, type XenoShareSigningIdentity, type XenoShareStatus, type XenoShareSurface, type XenoShareVerificationResult, type XenoShareVisibility, type XenoSignedHandoffEnvelope, type XenoSignedShareEnvelope, type XenoSkillActivation, type XenoSkillAuditEvent, type XenoSkillCatalog, type XenoSkillDescriptor, type XenoSkillDiagnostic, type XenoSkillDiscoveryOptions, type XenoSkillDiscoveryRoot, type XenoSkillExternalActionPolicy, type XenoSkillInvocationDecision, type XenoSkillInvocationPolicy, type XenoSkillResourceDescriptor, type XenoSkillShadowRecord, type XenoSkillSource, type XenoSkillTool, type XenoSkillToolPolicy, type XenoSlashGuardOptions, type XenoSlashInputClassification, type XenoSourceResearchArtifactContext, type XenoSourceResearchExcerpt, type XenoSourceResearchFinding, type XenoSourceResearchModelIdentity, type XenoSourceResearchReport, type XenoSourceResearchSeverity, XenoSourceResearchValidationError, type XenoSpecAcceptanceCriterion, type XenoSpecArtifactBundle, type XenoSpecArtifactContext, type XenoSpecDesign, type XenoSpecDesignDecision, type XenoSpecDocument, type XenoSpecDriftFinding, type XenoSpecDriftReport, type XenoSpecExecutionRecord, type XenoSpecExecutionState, XenoSpecLifecycleService, type XenoSpecLifecycleServiceOptions, type XenoSpecPriority, type XenoSpecRequirement, type XenoSpecRisk, type XenoSpecSourceBaseline, type XenoSpecTask, type XenoSpecTaskExecution, type XenoSpecTaskStatus, XenoSpecValidationError, type XenoTelemetryAttributeValue, type XenoTelemetryRecord, type XenoTelemetrySignalKind, type XenoTelemetrySubscriber, type XenoThreadRunOptions, type XenoThreadRunResult, XenoTraceGraphRecorder, type XenoUserConfig, type XenoVerifiedHostedExecutionAdapterCertification, type XenoVp8Image, type XenoWindowCaptureAdapter, acquireControlPlaneLock, activateSessionRuntime, addProjectAllowedDirectory, addProjectAllowedTool, agentDefinitionFromProfile, agentProfileFromDefinition, appServerSlashCommandRefusal, appendBoundedShellOutput, appendGuidanceToResult, applyPatch, approveMcpServer, areSignalHandlersInstalled, artifactCompareTool, askUserTool, assertCurrentToolAuthorization, assertDirectEndpointResolution, assertPersistedXenoCapabilityLease, assertRequiredXenoAutomationEvidence, assertSupportedMcpProtocolVersion, assertUsableXenoApiKey, assertValidMcpAppResource, assertValidXenoArtifact, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertValidXenoEvidenceGraph, assertValidXenoHostedExecutionJob, assertValidXenoOracleReport, assertValidXenoRecipeDefinition, assertValidXenoReviewPack, assertValidXenoReviewReport, assertValidXenoReviewTarget, assertValidXenoSecureExecutionContract, assertValidXenoSourceResearchReport, assertValidXenoSpecDocument, assertValidXenoSpecExecution, assertXenoArtifactStateTransition, assertXenoAutomationAdapterConformant, assertXenoAutomationAdapterRequirements, assertXenoAutomationAuthority, auditRiskLevelForTool, authorizeShellExecution, backgroundProcessManager, bashTool, benchmarkCodingTools, bridgeXenoTelemetryToOpenTelemetry, buildAtomicMessageGroups, buildAuditReplayReport, buildAuditTraceReport, buildContainedProcessSpec, buildContractLedgerGuidance, buildDefaultSubagentTasks, buildDelegatedRoleSystemPrompt, buildHookEnvironment, buildLinuxBubblewrapProcessSpec, buildLspDefinitionReport, buildLspDiagnosticsReport, buildLspDoctorReport, buildLspHoverReport, buildLspReferencesReport, buildMotionSystemPrompt, buildPixelSystemPrompt, buildProcessHardenedProcessSpec, buildProjectBudgetFinalizationGuidance, buildProjectExecutionGuidance, buildProjectExecutionProfile, buildPromptMemoryContext, buildSecuredProcessSpec, buildSoundSystemPrompt, buildSystemPrompt, buildToolFailureGuardResult, buildXenoArtifactReviewAnchor, buildXenoAutomationCapabilityUse, buildXenoRepositoryIndex, buildXenoRepositoryIndexWithEmbeddings, buildXenoSecureExecutionContract, cachedModelContextWindow, cachedModelImageInput, calculateCost, canTransitionXenoArtifactState, canXenoRasterPreview, canonicalPayload, canonicalizeArtifactJson, canonicalizeMcpResourceUri, canonicalizeSecurityPath, canonicalizeToolName, captureXenoHandoffSnapshot, checkSandbox, classifyArtifactToolAction, classifyForRead, classifyProviderHttpError, classifyProviderStreamError, classifyXenoProcessTreeKill, classifyXenoSlashInput, cleanupReadImagePreviews, cleanupSessionRuntime, clearMcpServerApproval, clearProjectAllowedTools, clearProjectLastSessionSummary, clearProjectMcpApproval, clearProjectMcpApprovals, clipXenoAnsi, coerceSubagentRole, coerceSubagentTeamPreset, commandShapedSlashName, compileAgentProfile, compileJsonSchema, compileToolInputSchema, compileXenoRecipe, compileXenoSkillActivation, computeXenoContextDigest, configureImageGeneration, configureSearch, configureSearchPermissionProfile, configureXenoAnsi, containmentApprovalSigningPayload, containmentCertificationSigningPayload, copyTextToClipboard, create3DTools, createAgentChildController, createAgentDefinitionFile, createAgentDefinitionPromptSection, createAgentRunId, createAppServerExecutionLeaseStore, createAppServerV2HttpTransport, createArchitectTools, createArtifactCompareTool, createAskUserTool, createAudioTools, createAuditBackedPermissionEngine, createBashTool, createBenchBashMiddleware, createCliAutomationAuditSink, createCliGovernedAutomationRuntime, createCommandBackedProtectedStateStore, createDefaultToolRegistry, createDelegatedXenoAgent, createDirectProvider, createDirectShellMessage, createDispatchAgentTool, createDocsTools, createEd25519Signer, createEditTool, createElfAnalyzeTool, createEngineTools, createGcodeAnalyzeTool, createGenerateImageTool, createGlobTool, createGovernanceExtensions, createGrepTool, createHtmlSanitizerAuditTool, createImageTools, createListAgentsTool, createListSessionsTool, createLsTool, createLspDefinitionTool, createLspDiagnosticsTool, createLspHoverTool, createLspReferencesTool, createMcpAppCapabilities, createMcpAppExtensionCapabilities, createMcpPkcePair, createMcpPromptRegisteredTool, createMcpRegisteredTool, createMcpResourceRegisteredTool, createMemoryProtectedStateStore, createMemoryReadTool, createMemoryWriteTool, createNotebookEditTool, createNotebookReadTool, createNotesTools, createOllamaNativeProvider, createOsProtectedStateStore, createPatchTool, createPlanModeTools, createProtectedStateEnvelopeCipher, createQuotaGovernedProvider, createReadImageTool, createReadTool, createReceiveTool, createRequestDeadline, createSendTool, createSheetsTools, createSlidesTools, createSpeechRecognizer, createSqliteAnalyzeTool, createTaskInputTool, createTaskListTools, createTaskOutputTool, createTaskStopTool, createThinkTool, createToolAlias, createToolNameCodec, createToolOutputTool, createToolRuntimeContext, createUnavailableProtectedStateStore, createVideoTools, createWebContextFetchTool, createWebContextRequestFactory, createWebContextSearchTool, createWebSearchTool, createWindowsDpapiProtectedCipher, createWindowsDpapiProtectedFileStore, createWorkflowTools, createWriteTool, createXenoAgent, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createCliAutomationAuditSink as createXenoHostAutomationAuditSink, createCliGovernedAutomationRuntime as createXenoHostGovernedAutomationRuntime, createXenoHostedControlCommand, createXenoHostedEnvironmentManifest, createXenoHostedEvent, createXenoHostedExecutionBoundaryReceipt, createXenoHostedRunResult, createXenoRasterPreview, createXenoSecureShare, createXenoSessionHandoff, createXenoShareSigningIdentity, createXenoSkillTool, createXenoSourceResearchExcerpt, createXenoSourceResearchReport, currentExecutionAdapterStatus, decodeJwtPayload, decodeXenoBmp, decodeXenoGif, decodeXenoGifAnimation, decodeXenoJpeg, decodeXenoNetpbm, decodeXenoPng, decodeXenoSvg, decodeXenoVp8, decodeXenoWebp, defaultPeerDirectory, defaultToolRuntimeContext, defaultXenoReviewPack, deflateXenoZlib, delegatedBranchOutputTokens, delegatedBranchOwnerSessionId, deleteSession, denyMcpServer, deriveHostedIdempotencyKey, describeXenoAutomationOperation, detectLanguage, detectPluginRepositorySignals, detectRepositoryDocumentKind, detectRepositoryLanguage, detectXenoSpecDrift, deterministicReduce, digestMessages, directProviderConfigFromConnection, discoverXenoSkills, dispatchAgentTool, editTool, elfAnalyzeTool, emitPatchGbnf, emitXenoTelemetry, encodeXenoPngRgb, enforceShellCommandPolicy, enforceToolPolicy, ensureConfigDir, ensureDurableMessageIds, ensureProjectStateDir, estimateFullRequestBudget, evaluateContainmentUiRestrictions, evaluatePermissionProfileNetworkUrl, evaluateXenoCapabilityEligibility, executeXenoCoordinationAction, extractJsonObject, extractPageTitle, extractToolPath, findUnansweredQuestion, findXenoSkill, fingerprintXenoSecureExecutionContract, forgetRecentSession, forgetRecentSessionById, formatBoundedShellOutput, formatCost, formatDirectShellContext, formatJsonSchemaErrors, formatModelList, formatPromptContextBreakdown, gcodeAnalyzeTool, generateImageTool, generateSessionId, getAgentHome, getAgentRunDir, getAgentRunStoreDir, getAvailableModels, getBenchmarkComputeBudgetHintForCommand, getBenchmarkForegroundTimeoutForCommand, getBestExecutionSecurityStatus, getChatModels, getConfigDir, getDefaultProviderRegistry, getExecutionSecurityCapabilityReport, getExecutionSecurityStatus, getGlobIgnores, getGrepIgnores, getHighRiskPermissions, getImageGenerationConfig, getJwtExpiry, getLinuxBubblewrapCapability, getLogLevel, getManagedConfigPath, getMcpAppMetadata, getMcpAppResourceUri, getMcpApprovalDecision, getMcpAuthorizationServerMetadataUrls, getMcpDefinitionFingerprint, getMcpPromptToolName, getMcpProtectedResourceMetadataUrls, getMcpResourceToolName, getMcpToolName, getModelName, getMxcContainmentProbe, getMxcNativeAssetDescriptor, getMxcWindowsHostPreparationDescriptor, getMxcWindowsHostPreparationHelperArchitecture, getPermissionProfile, getPersistentShellSession, getPersistentShellSpawnSpec, getProcessContainmentStatus, getProjectAgentDefinitionDirs, getProjectAgentDefinitionsDir, getProjectLastSessionSummary, getProjectMcpApproval, getProjectStatePath, getReadImagePreviewCapability, getRecentSessionsIndexPath, getSubagentTeamPresetDefinition, getToolRiskLevel, getUserAgentDefinitionsDir, gitBranchTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, globTool, grepTool, gzipXeno, hasProjectOnboardingCompleted, hasXenoTelemetrySubscribers, hashContainmentConformanceReport, hashPluginManifest, hashPluginTree, hookResultStatus, hostedEnvironmentIdentity, hostedSlashCommandRefusal, htmlSanitizerAuditTool, importLegacyXenoSkill, inflateXenoZlib, initializeSessionRuntime, inspectCliAutomationStatus, inspectMcpConfigSources, inspectRuntimeManifests, inspectSecurityPath, inspectSystemPrompt, inspectCliAutomationStatus as inspectXenoHostAutomationStatus, inspectXenoRepositoryFreshness, inspectXenoRepositorySymbol, installSignalHandlers, interruptedQuestionResult, invalidateAllObservedFiles, invokeXenoSkill, isChatModel, isDangerousCommand, isDirectShellMessage, isExpiredJwt, isExplicitResearchPrompt, isJwt, isLocalModel, isMcpAppResourceUri, isMcpOAuthTokenExpired, isMcpToolVisibleToApp, isMcpToolVisibleToModel, isModelRequestTimeoutPhase, isNotBeforeJwt, isPathWithinAllowed, isPeerTaskTerminal, isQuestionTool, isQuotaControlError, isReadOnlyToolName, isScreenCaptureAvailable, isSensitiveEnvironmentKey, isSimpleInformationalPrompt, isSpeechRecognitionAvailable, isSupportedMcpProtocolVersion, isToolAllowedByXenoSkillActivation, isToolOperationTerminalState, isUncOrDevicePath, isValidAgentDefinitionName, isValidModel, isValidSessionId, isWorkspaceTrusted, isXenoAutomationOperation, isXenoContextDigest, killWindowsProcessTree, killWindowsProcessTreeSync, legacyAgentArtifactToXenoArtifact, listBuiltInAgentProfiles, listPermissionProfiles, listProjectAllowedTools, listProjectMcpApprovals, listSessions, loadConfig, loadConfiguredMcpServers, loadMcpConfigFile, loadProjectConfig, loadProjectState, loadRecentSessionsIndex, loadSession, loadUserConfig, loadXenoSkill, lookupRecentSession, lsTool, lspDefinitionTool, lspDiagnosticsTool, lspHoverTool, lspReferencesTool, matchPermissionRule, matchesMcpRegistryEntryPolicy, materializeXenoAutomationEvidence, mcpInputSchemaToToolSchema, memoryReadTool, memoryWriteTool, mergeConfigs, movesTrustUpward, mxcWarningsRequireWindowsHostPreparation, normalizeDirectShellResultRecord, normalizeHookDecision, normalizeMcpAppVisibility, normalizePagePath, normalizePermissionProfileName, normalizeQuotaScope, normalizeRepositoryRelativePath, normalizeSourceText, normalizeSubagentBranchPolicy, normalizeWorkingDirectory, normalizeXenoHostedControlAcknowledgement, normalizeXenoRequestContext, notebookEditTool, notebookReadTool, openSqliteAutomationExecutionJournal, openSqliteCapabilityLeasePersistence, pageContentType, parseContainmentReviewerTrustStore, parseMcpWwwAuthenticate, parsePatch, parsePermissionRule, parseRetryAfter, parseSessionId, parseShellPathReferences, parseSubagentRemoteMcpPolicy, parseSubagentRoleList, parseUnifiedDiff, parseXenoAnsi, parseXenoRecipeDefinition, patchPaths, patchTool, peerShortId, pending, persistXenoAutomationEvidence, planXenoControlRoomAction, pluginInfoRelevanceCandidate, pluginListingRelevanceCandidate, pluginSignaturePayload, preflightLocalModel, prepareMxcWindowsHost, probeLocalToolGrammarSupport, probeXenoProvider, projectToolDefinitionsForProvider, projectToolSchemaForProvider, projectXenoControlRoom, providerCapabilityError, providerProtocolError, publicKeyFingerprint, publishPlugin, quotaAncestors, quotaInteger, quotaScopeKey, quotaText, rankPluginRelevance, readCliAutomationEnvironment, readImageTool, readManifestFromDisk, readPluginDetachedSignature, readPluginSupplyChainLockfile, readSessionFormatVersion, readTool, readToolOutput, readXenoApiKey, readCliAutomationEnvironment as readXenoHostAutomationEnvironment, recordRecentSession, recordXenoCounter, recordXenoEvent, recordXenoHistogram, recoverSessionMessages, redactXenoShareValue, registerAgentChild, registerPlanModeTools, registerShutdownCleanup, registry, removeMcpServerConfig, removeProjectAllowedTool, renderAgentDefinition, renderAgentDefinitions, renderAuditReplayMarkdown, renderAuditReplayReport, renderAuditTraceMarkdown, renderAuditTraceReport, renderAuditTraceSummaries, renderCliAutomationStatus, renderCodingBenchmarkMarkdown, renderCodingBenchmarkReport, renderContinuationIncompleteStatus, renderLspDefinitionReport, renderLspDiagnosticsReport, renderLspDoctorReport, renderLspHoverReport, renderLspReferencesReport, renderPeerLabel, renderToolContinuationInput, renderCliAutomationStatus as renderXenoHostAutomationStatus, renderXenoSkillCatalog, repairInterruptedToolCalls, repairToolExchangeHistory, requestBackground, requiresSecuredProcessLaunch, resetAllPersistentShellSessions, resetBashBenchmarkGuards, resetImageGenerationConfig, resetMcpServerApprovals, resetMxcContainmentProbe, resetPersistentShellSession, resetXenoAnsiPolicy, resetXenoTelemetryCardinalityForTests, resizeXenoRaster, resolveAgentDefinition, resolveAgentProfile, resolveAgentToolPolicy, resolveBuiltInAgentProfile, resolveCommandOnPath, resolveContainmentConformanceTemporaryRoot, resolveDelegatedExecutionMode, resolveExecutionSecurityLevel, resolveExecutionTrustMode, resolveInteractiveTurnMaxIterations, resolveLocalRuntimeUrl, resolveModelContextTokens, resolveModelRequestDeadlines, resolvePeerTarget, resolvePermissionProfile, resolveShellInvocation, resolveSubagentRemoteMcpAccess, resolveSubagentWorkflowAnswer, resolveXenoAutomationEvidencePolicy, resolveXenoSdkApiKey, restoreXenoHandoffSnapshot, runAgentHook, runCommandHook, runContainmentConformanceSuite, runDelegatedXenoTurn, runDelegationPlan, runDurableAutomation, runHookDefinition, runHooks, runHttpHook, runPromptHook, runSubagentWorkflow, runXenoBoundedProcess, runXenoBoundedProcessSync, runXenoProcessTreeKillHelper, runXenoThread, runXenoThreadStreamed, sanitizeEnvironment, sanitizeXenoTelemetryAttributes, saveConfig, saveMcpConfigFile, saveProjectState, saveSession, scaffoldPlugin, scanAgentDefinitions, scoreMemories, scorePluginRelevance, searchXenoRepositoryIndex, selectXenoProviderRoute, serializeXenoRecipe, setLogLevel, setProjectLastSessionSummary, setProjectMcpApproval, setProjectOnboardingCompleted, setToolOutputStoreDirectory, setWorkspaceTrusted, setupAIHandlers, sha256ArtifactBytes, sha256ArtifactJson, shouldEnableExecutionGovernance, shouldSourceShellProfile, shouldUseIsolatedStdinForCommand, signSharePayload, sqliteAnalyzeTool, storeToolOutput, stripXenoAnsi, subscribeXenoTelemetry, summarizeAuditInputRecord, summarizeAuditTraces, summarizeRuntimeInput, summarizeSubagentResults, summarizeXenoArtifactReview, syncMcpToolsToRegistry, synthesizeSkill, taskInputTool, taskOutputTool, taskStopTool, testPlugin, thinkTool, toAgentDefinitionMetadata, toLLMProvider, toPeerPosture, toolEvidenceToXenoArtifact, toolOperationManager, toolOutputTool, toolRiskLevel, truncationNotice, turnDiffSummaryToXenoArtifact, unifiedDiffToXenoArtifact, unifiedExecManager, updateProjectState, upsertMcpServerConfig, validateAgentDefinition, validateAgentMcpServers, validateCapabilityLeaseRequest, validateCapabilityMutationReceipt, validateDelegationPlan, validateDirectEndpoint, validateExecutionSecurityPolicy, validateJsonSchema, validateManifest, validateMcpAppResource, validateToolContinuationGoal, validateXenoArtifact, validateXenoArtifactReviewEvent, validateXenoControlRoomSnapshot, validateXenoEvidenceGraph, validateXenoRepositoryIndex, validateXenoSdkApiKey, validateXenoSecureExecutionContract, validateXenoSpecDocument, verifyContainmentCertification, verifyContainmentCertificationApproval, verifyPluginSupplyChain, verifySignature, verifySoulRecord, verifyXenoHostedControlCommand, verifyXenoHostedEnvironmentManifest, verifyXenoHostedEventChain, verifyXenoHostedExecutionAdapterCertification, verifyXenoHostedExecutionJob, verifyXenoHostedRunResult, verifyXenoHostedWebhook, verifyXenoSecureShare, verifyXenoSessionHandoff, waitForXenoHandoffStatus, webFetchTool, webSearchTool, windowsDpapiProtect, windowsDpapiUnprotect, withXenoTelemetrySpan, wrapXenoAnsi, writePluginSupplyChainLockfile, writeTool, xenoAnsi, xenoAnsiVisibleWidth, xenoArtifactToDiffDocument, xenoArtifactToLegacyAgentArtifact, xenoArtifactToOracleReport, xenoArtifactToReviewReport, xenoArtifactToSourceResearchReport, xenoArtifactToSpecDocument, xenoArtifactToSpecExecution, xenoArtifactToToolEvidence, xenoArtifactToTurnDiffSummary, xenoHostedExecutionAdapterSigningPayload, xenoOracleReportToArtifact, xenoRecipeFingerprint, xenoRequestContextHeaders, xenoReviewReportToArtifact, xenoReviewReportToGitHubComments, xenoSourceResearchReportToArtifact, xenoSpecArtifactIds, xenoSpecExecutionToArtifact, xenoSpecToArtifactBundle };