@xenosystem/agent-sdk 0.9.21 → 0.9.24

package/dist/index.d.ts

@@ -72,6 +72,131 @@ declare function estimateFullRequestBudget(input: {
     legacyEstimator?: TokenEstimator;
 }): RequestBudgetBreakdown;
 declare function buildAtomicMessageGroups(messages: Message[], keepRecentMessages: number): AtomicMessageGroup[];
+declare const WEB_CONTEXT_TOOL_RESULT_SCHEMA: "xeno.web-context.tool-result.v1";
+declare const WEB_CONTEXT_CONTRACT_VERSION: "1.0.0";
+interface WebContextRequestBase {
+    contractVersion: typeof WEB_CONTEXT_CONTRACT_VERSION;
+    requestId: string;
+    actor: {
+        id: string;
+        kind: "human" | "agent" | "service";
+    };
+    purpose: string;
+    classification: "public" | "authenticated-local" | "private-local";
+    scope: {
+        kind: "tenant";
+        tenantId: string;
+    } | {
+        kind: "workspace";
+        workspaceId: string;
+    } | {
+        kind: "local-profile";
+        profileId: string;
+    };
+    budget: {
+        deadline: string;
+        maxAttempts: number;
+        maxConcurrency: number;
+        maxBytes: number;
+        maxPages: number;
+        maxDurationMs: number;
+        maxRedirects: number;
+        maxProviderCostUsd: number;
+    };
+    policyContext: {
+        allowedDomains?: string[];
+        deniedDomains?: string[];
+        allowedPorts?: number[];
+        allowedMediaTypes?: string[];
+    };
+    idempotencyKey?: string;
+}
+interface WebContextEvidenceProjection {
+    evidenceId: string;
+    requestId: string;
+    sourceUrl: string;
+    finalUrl?: string;
+    citations: Array<{
+        url: string;
+        title?: string;
+        artifactId?: string;
+    }>;
+}
+interface WebContextToolResult {
+    schemaVersion: typeof WEB_CONTEXT_TOOL_RESULT_SCHEMA;
+    operation: "search" | "fetch";
+    requestId: string;
+    evidence: WebContextEvidenceProjection;
+    job?: {
+        jobId: string;
+        state: string;
+    };
+    artifact?: {
+        artifactId: string;
+        mediaType: string;
+        bytes: number;
+    };
+}
+interface WebContextClientPort {
+    search(request: WebContextRequestBase & {
+        query: string;
+        resultHandling: "transient" | "persist";
+        count?: number;
+    }): Promise<{
+        requestId: string;
+        terminalReason: string;
+        items: Array<{
+            url: string;
+            title: string;
+            description?: string;
+            rank: number;
+            provider: string;
+        }>;
+        evidence: WebContextEvidenceProjection;
+    }>;
+    scrapeAndWait(request: WebContextRequestBase & {
+        url: string;
+        format?: "text" | "markdown";
+    }, options?: {
+        timeoutMs?: number;
+        pollMs?: number;
+        signal?: AbortSignal;
+    }): Promise<{
+        job: {
+            jobId: string;
+            state: string;
+        };
+        item: {
+            evidenceId?: string;
+            result?: Record<string, unknown>;
+        } & Record<string, unknown>;
+        artifact: {
+            artifactId: string;
+            mediaType: string;
+            bytes: Uint8Array;
+        };
+        text: string;
+    }>;
+}
+type WebContextRequestFactory = (operation: "search" | "fetch", input: Readonly<Record<string, unknown>>) => WebContextRequestBase;
+interface WebContextToolOptions {
+    client: WebContextClientPort;
+    createRequest: WebContextRequestFactory;
+    fetchTimeoutMs?: number;
+}
+interface DefaultWebContextRequestFactoryOptions {
+    actor: WebContextRequestBase["actor"];
+    scope: WebContextRequestBase["scope"];
+    classification?: WebContextRequestBase["classification"];
+    purposePrefix?: string;
+    policyContext?: WebContextRequestBase["policyContext"];
+    budget?: Partial<Omit<WebContextRequestBase["budget"], "deadline">> & {
+        durationMs?: number;
+    };
+}
+declare function createWebContextRequestFactory(options: DefaultWebContextRequestFactoryOptions): WebContextRequestFactory;
+declare function createWebContextSearchTool(options: WebContextToolOptions): RegisteredTool;
+declare function createWebContextFetchTool(options: WebContextToolOptions): RegisteredTool;
 type PermissionProfileName = "default" | "read-only" | "trusted-dev";
 type PermissionProfileDecision = "allow" | "ask" | "deny";
 type PermissionProfileMode = "default" | "acceptEdits" | "bypassPermissions" | "auto";
@@ -240,6 +365,7 @@ interface ToolResult {
     assistantOnlyContent?: ToolAssistantContentBlock[];
     operation?: ToolOperationSnapshot;
     evidence?: ToolEvidence[];
+    webContext?: WebContextToolResult;
     retryable?: boolean;
 }
 interface ToolExecutionContext {
@@ -283,6 +409,7 @@ interface ToolResultBlock {
     is_error?: boolean;
     operation?: ToolOperationSnapshot;
     evidence?: ToolEvidence[];
+    web_context?: WebContextToolResult;
     retryable?: boolean;
 }
 type ContentBlock = TextBlock | ToolUseBlock;
@@ -532,6 +659,7 @@ interface ContextCompressedData {
     messagesRemoved: number;
     tokensSaved: number;
     compaction?: CompactionRecord;
+    activeContextMessages?: Message[];
 }
 interface SessionEndData {
     reason: "user_exit" | "error" | "completed";
@@ -644,7 +772,7 @@ interface PolicyEnforcerConfig {
     };
 }
 type AgentSandbox = PolicyEnforcerConfig;
-declare const SDK_VERSION = "0.9.21";
+declare const SDK_VERSION = "0.9.24";
 type AuditRiskLevel = "none" | "low" | "medium" | "high" | "critical";
 type AuditDecision = "allow" | "ask" | "deny";
 type AuditStatus = "ok" | "error";
@@ -2078,326 +2206,762 @@ declare class XenoLoopbackAutomationAdapter implements XenoAutomationAdapter {
     stop(operationId: string, reason: string): Promise<void>;
     private request;
 }
-interface XenoGovernedAutomationToolExecution {
-    operation: XenoAutomationOperation;
-    governingToolName: string;
-    operationId: string;
-    idempotencyKey: string;
-    parameters: Record<string, unknown>;
-    declaredTarget?: XenoAutomationTarget;
-    authorization: ToolAuthorizationReceipt;
-    signal?: AbortSignal;
-    reportProgress?: ToolExecutionContext["reportProgress"];
-}
-interface XenoGovernedAutomationToolRuntime {
-    execute(input: XenoGovernedAutomationToolExecution): Promise<XenoAutomationExecutionResult>;
-    stop?(operationId: string, reason?: string): Promise<boolean> | boolean;
+declare const XENO_BROWSER_CONTROL_PLANE_OPERATIONS: readonly [
+    "browser.navigate",
+    "browser.back",
+    "browser.forward",
+    "browser.reload",
+    "browser.wait",
+    "browser.snapshot",
+    "browser.screenshot",
+    "browser.locate",
+    "browser.tabs.list",
+    "browser.tabs.open",
+    "browser.console.read",
+    "browser.network.read",
+    "browser.storage.read",
+    "browser.page-errors.read",
+    "browser.click",
+    "browser.type",
+    "browser.key",
+    "browser.select",
+    "browser.scroll",
+    "browser.tabs.close",
+    "browser.upload",
+    "browser.download"
+];
+interface XenoBrowserControlPlaneAdapterOptions {
+    baseUrl: string;
+    token: string;
+    driver: "browser" | "extension";
+    fetch?: typeof globalThis.fetch;
+    timeoutMs?: number;
 }
-interface CreateXenoGovernedAutomationToolsOptions {
-    runtime: XenoGovernedAutomationToolRuntime;
-    operations?: readonly XenoAutomationOperation[];
+declare class XenoBrowserControlPlaneAdapter implements XenoAutomationAdapter {
+    private readonly options;
+    private readonly base;
+    private readonly fetchImpl;
+    private readonly timeoutMs;
+    constructor(options: XenoBrowserControlPlaneAdapterOptions);
+    manifest(): Promise<XenoAutomationAdapterManifest>;
+    preflight(request: XenoAutomationRequest, signal: AbortSignal): Promise<XenoAutomationPreflight>;
+    execute(request: XenoAutomationRequest, preflight: XenoAutomationPreflight, _grant: XenoAutomationExecutionGrant, signal: AbortSignal): Promise<XenoAutomationAdapterExecutionResult>;
+    stop(_operationId: string, _reason: string): Promise<void>;
+    private resultEvidence;
+    private snapshotEvidence;
+    private call;
 }
-declare function createXenoGovernedAutomationTools(options: CreateXenoGovernedAutomationToolsOptions): RegisteredTool[];
-interface XenoArtifactValidationIssue {
+interface MemoryFile {
+    level: MemoryLevel;
     path: string;
-    code: string;
-    message: string;
-}
-declare class XenoArtifactValidationError extends Error {
-    readonly code = "ARTIFACT_INVALID";
-    readonly issues: XenoArtifactValidationIssue[];
-    constructor(message: string, issues: XenoArtifactValidationIssue[]);
-}
-declare class XenoArtifactStateTransitionError extends Error {
-    readonly fromState: XenoArtifactState;
-    readonly toState: XenoArtifactState;
-    readonly code = "ARTIFACT_STATE_TRANSITION_INVALID";
-    constructor(fromState: XenoArtifactState, toState: XenoArtifactState);
+    content: string;
+    tokenCount: number;
+    lastModified?: Date;
 }
-declare function validateXenoArtifact(artifact: XenoArtifactEnvelope): XenoArtifactValidationIssue[];
-declare function assertValidXenoArtifact(artifact: XenoArtifactEnvelope): void;
-declare function canTransitionXenoArtifactState(fromState: XenoArtifactState, toState: XenoArtifactState): boolean;
-declare function assertXenoArtifactStateTransition(fromState: XenoArtifactState, toState: XenoArtifactState): void;
-declare function validateXenoArtifactReviewEvent(event: XenoArtifactReviewEvent, artifact?: XenoArtifactEnvelope): XenoArtifactValidationIssue[];
-declare function summarizeXenoArtifactReview(events: readonly XenoArtifactReviewEvent[]): XenoArtifactReviewSummary;
-declare function sha256ArtifactBytes(content: Uint8Array | string): XenoContentHash;
-declare function canonicalizeArtifactJson(value: XenoJsonValue): string;
-declare function sha256ArtifactJson(value: XenoJsonValue): XenoContentHash;
-declare class XenoEvidenceGraphValidationError extends Error {
-    readonly code = "EVIDENCE_GRAPH_INVALID";
-    readonly issues: XenoArtifactValidationIssue[];
-    constructor(issues: XenoArtifactValidationIssue[]);
+interface ResolvedMemory {
+    files: MemoryFile[];
+    byLevel: Record<MemoryLevel, string>;
+    totalTokens: number;
+    truncated: boolean;
 }
-declare function validateXenoEvidenceGraph(graph: XenoEvidenceGraph): XenoArtifactValidationIssue[];
-declare function assertValidXenoEvidenceGraph(graph: XenoEvidenceGraph): void;
-interface XenoEvidenceGraphBuilderOptions {
-    graphId: string;
-    now?: () => string;
+interface ProjectSessionContextEntry {
+    sessionId: string;
+    model: string;
+    lastActivity: string;
+    messageCount: number;
+    excerpt: string;
 }
-declare class XenoEvidenceGraphBuilder {
-    private readonly now;
-    private graph;
-    constructor(options: XenoEvidenceGraphBuilderOptions | XenoEvidenceGraph);
-    addNode(node: XenoEvidenceNode): this;
-    addEdge(edge: XenoEvidenceEdge): this;
-    build(): XenoEvidenceGraph;
-    private touch;
+interface ProjectSessionContext {
+    entries: ProjectSessionContextEntry[];
+    totalTokens: number;
+    truncated: boolean;
+    content: string;
 }
-declare const XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION: 1;
-interface XenoArtifactFileSnapshotPayload {
-    schemaVersion: typeof XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION;
-    generation: number;
-    createdAt: string;
-    updatedAt: string;
-    state: XenoArtifactRepositoryState;
+declare const DEFAULT_MEMORY_BUDGETS: MemoryBudget;
+declare const MEMORY_FILES: Record<MemoryLevel, string>;
+interface MemoryManagerOptions {
+    cwd: string;
+    globalDir?: string;
+    role?: string;
+    sessionDir?: string;
+    scope?: MemoryAccessScope;
+    budgets?: Partial<MemoryBudget>;
+    projectSessionContext?: {
+        limit?: number;
+        maxTokens?: number;
+        maxCharsPerSession?: number;
+    };
 }
-interface XenoArtifactFileSnapshot extends XenoArtifactFileSnapshotPayload {
-    checksum: {
-        algorithm: "sha256";
-        value: string;
+type MemoryAccessScope = "none" | "session" | "project" | "user";
+declare class MemoryManager {
+    private cwd;
+    private globalDir;
+    private role?;
+    private sessionDir?;
+    private scope;
+    private budgets;
+    private projectSessionContextDefaults;
+    constructor(options: MemoryManagerOptions);
+    get accessScope(): MemoryAccessScope;
+    canAccessLevel(level: MemoryLevel): boolean;
+    private assertLevelAccess;
+    getProjectSessionContextDefaults(): {
+        limit: number;
+        maxTokens: number;
+        maxCharsPerSession: number;
     };
+    getPath(level: MemoryLevel): string;
+    loadForPrompt(): Promise<ResolvedMemory>;
+    loadProjectSessionContext(options?: {
+        excludeSessionId?: string;
+        limit?: number;
+        maxTokens?: number;
+        maxCharsPerSession?: number;
+    }): Promise<ProjectSessionContext>;
+    private filterProjectSessions;
+    private normalizePath;
+    private extractRecentTranscriptExcerpt;
+    private formatProjectSessionEntry;
+    add(level: MemoryLevel, content: string, source: "user" | "auto"): Promise<void>;
+    set(level: MemoryLevel, content: string): Promise<void>;
+    formatForPrompt(memory: ResolvedMemory): string;
+    private truncateContent;
 }
-interface XenoArtifactFileRecoveryNotice {
-    snapshotPath: string;
-    backupPath: string;
-    reason: string;
+interface AutoMemoryContext {
+    error?: string;
+    correction?: string;
+    taskCompleted?: boolean;
+    userPreference?: string;
 }
-interface FileXenoArtifactRepositoryOptions {
-    directory: string;
-    snapshotFileName?: string;
-    lockTimeoutMs?: number;
-    lockRetryMs?: number;
-    maxSnapshotBytes?: number;
-    now?: () => string;
-    onRecovery?: (notice: XenoArtifactFileRecoveryNotice) => void;
+declare class AutoMemory {
+    private manager;
+    private recentErrors;
+    constructor(manager: MemoryManager);
+    shouldTrigger(context: AutoMemoryContext): AutoMemoryTrigger | null;
+    extract(trigger: AutoMemoryTrigger, messages: Message[]): Promise<string | null>;
+    private extractErrorCorrection;
+    private extractPattern;
+    private extractPreference;
+    private extractTaskSummary;
+    private messagesToText;
+    private normalizeError;
 }
-declare class FileXenoArtifactRepository implements XenoArtifactRepository {
-    readonly directory: string;
-    readonly snapshotPath: string;
-    readonly backupPath: string;
-    readonly lockPath: string;
-    private readonly now;
-    private readonly lockTimeoutMs;
-    private readonly lockRetryMs;
-    private readonly maxSnapshotBytes;
-    private readonly onRecovery?;
-    private mutationTail;
-    constructor(options: FileXenoArtifactRepositoryOptions);
-    create(artifact: XenoArtifactEnvelope): Promise<XenoArtifactRecord>;
-    createRevision(artifact: XenoArtifactEnvelope, options?: XenoArtifactRevisionOptions): Promise<XenoArtifactRecord>;
-    get(artifactId: string, revision?: number): Promise<XenoArtifactRecord | undefined>;
-    require(artifactId: string, revision?: number): Promise<XenoArtifactRecord>;
-    list(query?: XenoArtifactListQuery): Promise<XenoArtifactRecord[]>;
-    listRevisions(artifactId: string): Promise<XenoArtifactRecord[]>;
-    transition(request: XenoArtifactTransitionRequest): Promise<XenoArtifactRecord>;
-    appendReviewEvent(request: XenoArtifactAppendReviewRequest): Promise<XenoArtifactRecord>;
-    inspectSnapshot(): Promise<XenoArtifactFileSnapshot | undefined>;
-    private mutate;
-    private enqueueMutation;
-    private acquireLock;
-    private load;
-    private persist;
-    private readSnapshot;
+interface VectorDocument {
+    id: string;
+    content: string;
+    embedding: number[];
+    metadata: Record<string, unknown>;
 }
-type XenoDiffMode = "working-tree" | "staged" | "turn" | "commit" | "preview";
-type XenoDiffFileStatus = "added" | "modified" | "deleted" | "renamed" | "copied" | "binary";
-type XenoDiffLineKind = "context" | "addition" | "deletion" | "no-newline";
-interface XenoDiffLine {
-    kind: XenoDiffLineKind;
-    text: string;
-    oldLine?: number;
-    newLine?: number;
+interface VectorSearchResult {
+    id: string;
+    content: string;
+    score: number;
+    metadata: Record<string, unknown>;
 }
-interface XenoDiffHunk {
-    hunkId: string;
-    header: string;
-    section?: string;
-    oldStart: number;
-    oldLines: number;
-    newStart: number;
-    newLines: number;
-    additions: number;
-    deletions: number;
-    lines: XenoDiffLine[];
-}
-interface XenoDiffFile {
-    oldPath?: string;
-    newPath?: string;
-    displayPath: string;
-    status: XenoDiffFileStatus;
-    additions: number;
-    deletions: number;
-    binary: boolean;
-    headerLines: string[];
-    hunks: XenoDiffHunk[];
-}
-interface XenoDiffDocument {
-    schemaVersion: 1;
-    mode: XenoDiffMode;
-    repositoryId?: string;
-    baseRef?: string;
-    headRef?: string;
-    files: XenoDiffFile[];
-    additions: number;
-    deletions: number;
-    rawDiff: string;
+interface VectorStoreOptions {
+    maxDocuments?: number;
+    embeddingDimension?: number;
+    embedFn?: (text: string) => Promise<number[]>;
 }
-interface ParseUnifiedDiffOptions {
-    mode?: XenoDiffMode;
-    repositoryId?: string;
-    baseRef?: string;
-    headRef?: string;
-    maxBytes?: number;
-    maxFiles?: number;
-    maxHunks?: number;
-    maxLines?: number;
+interface VectorStoreAdapter {
+    add(id: string, embedding: number[], metadata: Record<string, unknown>): Promise<void>;
+    search(query: number[], topK: number): Promise<Array<{
+        id: string;
+        score: number;
+    }>>;
+    remove(id: string): Promise<void>;
+    readonly size: number;
 }
-interface XenoDiffArtifactContext {
-    kind?: "diff" | "patch";
-    artifactId?: string;
-    revision?: number;
-    predecessorRevision?: number;
-    createdAt?: string;
-    title?: string;
-    description?: string;
-    producer: XenoArtifactActor;
-    identity?: XenoArtifactIdentity;
-    sensitivity?: XenoArtifactSensitivity;
-    accessPolicyId?: string;
-    mode?: XenoDiffMode;
-    repositoryId?: string;
-    baseRef?: string;
-    headRef?: string;
+declare class VectorMemoryStore {
+    private documents;
+    private insertionOrder;
+    private maxDocuments;
+    private embedder;
+    private customEmbedFn?;
+    constructor(options?: VectorStoreOptions);
+    addDocument(id: string, content: string, metadata?: Record<string, unknown>): Promise<void>;
+    search(query: string, topK?: number, minScore?: number): Promise<VectorSearchResult[]>;
+    removeDocument(id: string): boolean;
+    getDocument(id: string): VectorDocument | undefined;
+    get size(): number;
+    clear(): void;
+    exportDocuments(): VectorDocument[];
+    importDocuments(docs: VectorDocument[]): void;
 }
-declare class XenoDiffParseError extends Error {
-    readonly line?: number | undefined;
-    readonly code = "XENO_DIFF_INVALID";
-    constructor(message: string, line?: number | undefined);
+interface AskUserRequest {
+    question: string;
+    options?: string[];
+    context?: string;
 }
-declare function parseUnifiedDiff(diff: string, options?: ParseUnifiedDiffOptions): XenoDiffDocument;
-declare function unifiedDiffToXenoArtifact(diff: string, context: XenoDiffArtifactContext): XenoArtifactEnvelope;
-declare function xenoArtifactToDiffDocument(artifact: XenoArtifactEnvelope): XenoDiffDocument;
-interface XenoArtifactReviewServiceOptions {
-    repository: XenoArtifactRepository;
-    actor: XenoArtifactActor;
-    idFactory?: () => string;
+interface AskUserResponse {
+    answer: string;
+    selectedOption?: string;
 }
-interface XenoArtifactReviewAnchorInput {
-    file?: string;
-    line?: number;
-    hunkId?: string;
+type AskUserHandler = (request: AskUserRequest) => Promise<AskUserResponse>;
+interface DispatchAgentRequest {
+    agent?: string;
+    prompt: string;
+    timeoutMs?: number;
+    signal?: AbortSignal;
 }
-interface AddXenoArtifactCommentRequest extends XenoArtifactReviewAnchorInput {
-    artifactId: string;
-    revision?: number;
-    body: string;
-    parentCommentId?: string;
+interface DispatchAgentResponse {
+    output: string;
 }
-interface SetXenoArtifactCommentResolutionRequest {
-    artifactId: string;
-    revision?: number;
-    commentId: string;
-    resolved: boolean;
+type DispatchAgentHandler = (request: DispatchAgentRequest) => Promise<DispatchAgentResponse>;
+interface FileObservation {
+    path: string;
+    mtimeMs: number;
+    size: number;
+    source: "read" | "write" | "edit" | "notebook" | "shell";
+    requiresRefresh?: boolean;
     reason?: string;
 }
-interface DecideXenoArtifactRequest extends Omit<XenoArtifactReviewAnchorInput, "line"> {
-    artifactId: string;
-    revision?: number;
-    decision: XenoArtifactReviewDecision;
-    rationale?: string;
-}
-declare class XenoArtifactReviewService {
-    private readonly repository;
-    private readonly actor;
-    private readonly idFactory;
-    constructor(options: XenoArtifactReviewServiceOptions);
-    addComment(request: AddXenoArtifactCommentRequest): Promise<XenoArtifactRecord>;
-    setCommentResolution(request: SetXenoArtifactCommentResolutionRequest): Promise<XenoArtifactRecord>;
-    decide(request: DecideXenoArtifactRequest): Promise<XenoArtifactRecord>;
-}
-declare function buildXenoArtifactReviewAnchor(record: XenoArtifactRecord, input: XenoArtifactReviewAnchorInput): XenoArtifactAnchor | undefined;
-declare function normalizeRepositoryRelativePath(value: string): string;
-declare const XENO_SPEC_SCHEMA_VERSION: "xeno.spec.v1";
-declare const XENO_SPEC_EXECUTION_SCHEMA_VERSION: "xeno.spec-execution.v1";
-type XenoSpecPriority = "must" | "should" | "could";
-type XenoSpecTaskStatus = "pending" | "in_progress" | "completed" | "blocked" | "skipped";
-type XenoSpecExecutionState = "ready" | "running" | "completed" | "failed" | "cancelled";
-interface XenoSpecAcceptanceCriterion {
-    id: string;
-    text: string;
-    requiredEvidenceKinds?: string[];
-}
-interface XenoSpecRequirement {
-    id: string;
-    text: string;
-    priority: XenoSpecPriority;
-    acceptanceCriteria: XenoSpecAcceptanceCriterion[];
-    sourceReferences?: XenoEvidenceReference[];
-}
-interface XenoSpecDesignDecision {
-    id: string;
-    decision: string;
-    rationale: string;
-    alternatives?: string[];
-    requirementIds?: string[];
+interface ToolRuntimeContext {
+    getCwd(): string;
+    setCwd(nextCwd: string): void;
+    getOwnerSessionId(): string | undefined;
+    getMemoryManager(): MemoryManager | undefined;
+    setMemoryManager(memoryManager: MemoryManager | undefined): void;
+    noteFileObservation(filePath: string, observation: Omit<FileObservation, "path">): void;
+    getFileObservation(filePath: string): FileObservation | undefined;
+    invalidateFileObservation(filePath: string, reason: string): void;
+    listFileObservations(): FileObservation[];
+    askUser?(request: AskUserRequest): Promise<AskUserResponse>;
+    dispatchAgent?(request: DispatchAgentRequest): Promise<DispatchAgentResponse>;
 }
-interface XenoSpecRisk {
+declare function createToolRuntimeContext(initialCwd?: string, options?: {
+    askUser?: AskUserHandler;
+    dispatchAgent?: DispatchAgentHandler;
+    memoryManager?: MemoryManager;
+    ownerSessionId?: string;
+}): ToolRuntimeContext;
+declare const defaultToolRuntimeContext: ToolRuntimeContext;
+type HarnessTaskStatus = "pending" | "in_progress" | "completed";
+interface HarnessTask {
     id: string;
+    subject: string;
     description: string;
-    impact: "low" | "medium" | "high" | "critical";
-    mitigation: string;
+    status: HarnessTaskStatus;
+    activeForm?: string;
     owner?: string;
-}
-interface XenoSpecDesign {
-    summary: string;
-    decisions: XenoSpecDesignDecision[];
-    risks: XenoSpecRisk[];
-}
-interface XenoSpecTask {
-    id: string;
-    title: string;
-    description: string;
-    dependsOn?: string[];
-    requirementIds: string[];
-    acceptanceCriterionIds: string[];
-    expectedPaths?: string[];
-    preferredAgentProfile?: string;
-}
-interface XenoSpecSourceBaseline {
-    repositoryId?: string;
-    commit?: string;
-    workspaceFingerprint?: XenoContentHash;
-}
-interface XenoSpecDocument {
-    schemaVersion: typeof XENO_SPEC_SCHEMA_VERSION;
-    specId: string;
-    revision: number;
-    title: string;
-    problem: string;
-    requirements: XenoSpecRequirement[];
-    design: XenoSpecDesign;
-    tasks: XenoSpecTask[];
-    acceptanceCriteria: XenoSpecAcceptanceCriterion[];
-    sourceBaseline?: XenoSpecSourceBaseline;
+    metadata: Record<string, unknown>;
+    blocks: string[];
+    blockedBy: string[];
     createdAt: string;
     updatedAt: string;
-    predecessorRevision?: number;
-}
-interface XenoSpecArtifactContext {
-    producer: XenoArtifactActor;
-    identity?: XenoArtifactIdentity;
-    sensitivity?: XenoArtifactSensitivity;
-    accessPolicyId?: string;
-    createdAt?: string;
 }
-interface XenoSpecArtifactBundle {
-    document: XenoSpecDocument;
-    plan: XenoArtifactEnvelope;
-    requirements: XenoArtifactEnvelope;
-    design: XenoArtifactEnvelope;
-    taskGraph: XenoArtifactEnvelope;
+interface HarnessTaskUpdate {
+    subject?: string;
+    description?: string;
+    status?: HarnessTaskStatus | "deleted";
+    activeForm?: string;
+    owner?: string;
+    metadata?: Record<string, unknown>;
+    addBlocks?: string[];
+    addBlockedBy?: string[];
 }
-interface XenoSpecTaskExecution {
+declare class TaskListManager {
+    private readonly tasks;
+    private nextId;
+    create(input: {
+        subject: string;
+        description: string;
+        activeForm?: string;
+        metadata?: Record<string, unknown>;
+    }): HarnessTask;
+    get(taskId: string): HarnessTask | undefined;
+    list(): HarnessTask[];
+    update(taskId: string, input: HarnessTaskUpdate): HarnessTask | undefined;
+    delete(taskId: string): boolean;
+    private incompleteBlockers;
+    private assertDependencyTargets;
+    private link;
+    private assertAcyclic;
+    private snapshot;
+    private restore;
+}
+declare function createTaskListTools(manager?: TaskListManager): RegisteredTool[];
+interface DefaultToolRegistryOptions {
+    cwd?: string;
+    runtime?: ToolRuntimeContext;
+    ownerSessionId?: string;
+    askUser?: AskUserHandler;
+    dispatchAgent?: DispatchAgentHandler;
+    memoryManager?: MemoryManager;
+    webSearchApiKey?: string;
+    webContext?: WebContextToolOptions;
+    permissionProfile?: PermissionProfile;
+    sandbox?: AgentSandbox;
+    validateInputs?: boolean;
+    toolSchemaMode?: "all" | "demand";
+    taskListManager?: TaskListManager;
+    shellEnvironment?: NodeJS.ProcessEnv;
+    shellSensitiveEnvironmentKeys?: readonly string[];
+}
+interface ToolRegistryOptions {
+    validateInputs?: boolean;
+    toolSchemaMode?: "all" | "demand";
+}
+declare class ToolRegistry {
+    private tools;
+    private compiledSchemas;
+    private changeListeners;
+    private aliasNames;
+    private validateInputs;
+    private readonly toolSchemaMode;
+    private readonly activatedDefinitions;
+    constructor(options?: ToolRegistryOptions);
+    setValidateInputs(enabled: boolean): this;
+    get inputValidationEnabled(): boolean;
+    get schemaLoadingMode(): "all" | "demand";
+    register(tool: RegisteredTool): void;
+    registerAlias(tool: RegisteredTool): void;
+    registerAll(tools: Iterable<RegisteredTool>): void;
+    unregister(name: string): boolean;
+    onChange(listener: () => void): () => void;
+    private emitChange;
+    get(name: string): RegisteredTool | undefined;
+    getDefinitions(): ToolDefinition[];
+    getDefinitionsForRequest(): ToolDefinition[];
+    getCapabilityCatalog(): string;
+    activateMatchingDefinitions(query: string, limit?: number): ToolDefinition[];
+    private static namespaceOf;
+    getDefinitionsByNamespace(namespace: string): ToolDefinition[];
+    listNamespaces(): string[];
+    execute(name: string, input: Record<string, unknown>, context?: ToolExecutionContext): Promise<ToolResult>;
+    listNames(): string[];
+    has(name: string): boolean;
+    projectPolicyInput(name: string, input: Record<string, unknown>): ToolPolicyProjection | {
+        error: ToolResult;
+    };
+    get size(): number;
+    private compileDefinition;
+    private assertDefinitionsExportable;
+}
+declare function createDefaultToolRegistry(options?: DefaultToolRegistryOptions): ToolRegistry;
+declare const registry: ToolRegistry;
+interface XenoGovernedAutomationToolExecution {
+    operation: XenoAutomationOperation;
+    governingToolName: string;
+    operationId: string;
+    idempotencyKey: string;
+    parameters: Record<string, unknown>;
+    declaredTarget?: XenoAutomationTarget;
+    authorization: ToolAuthorizationReceipt;
+    signal?: AbortSignal;
+    reportProgress?: ToolExecutionContext["reportProgress"];
+}
+interface XenoGovernedAutomationToolRuntime {
+    execute(input: XenoGovernedAutomationToolExecution): Promise<XenoAutomationExecutionResult>;
+    stop?(operationId: string, reason?: string): Promise<boolean> | boolean;
+}
+interface CreateXenoGovernedAutomationToolsOptions {
+    runtime: XenoGovernedAutomationToolRuntime;
+    operations?: readonly XenoAutomationOperation[];
+}
+declare function createXenoGovernedAutomationTools(options: CreateXenoGovernedAutomationToolsOptions): RegisteredTool[];
+interface CliAutomationAuditEvent {
+    eventType: "automation_lease_approved" | "automation_completed" | "automation_failed";
+    traceId: string;
+    operation: XenoAutomationOperation;
+    operationId: string;
+    leaseId?: string;
+    contractFingerprint?: string;
+    status?: string;
+    artifactIds?: string[];
+    permissionReason?: string;
+}
+interface CliAutomationAuditLoggerPort {
+    append(event: {
+        trace_id: string;
+        event_type: string;
+        actor: "system";
+        risk_level: "low" | "high";
+        decision?: "allow";
+        status: "ok" | "error";
+        reason?: string;
+        metadata: Record<string, unknown>;
+    }): Promise<unknown>;
+}
+interface CliAutomationEnvironment {
+    browser?: {
+        driver: "browser" | "extension";
+        baseUrl?: string;
+        token?: string;
+        readDomains: string[];
+        actDomains: string[];
+        deniedDomains: string[];
+        ports: number[];
+        allowLoopbackDevelopment: boolean;
+        uploads: "deny" | "prompt" | "allow";
+        downloads: "deny" | "prompt" | "allow";
+        recording: "disabled" | "bounded";
+    };
+    computer?: {
+        baseUrl?: string;
+        token?: string;
+        deviceId?: string;
+        allowedApplications: string[];
+    };
+}
+interface CliAutomationSurfaceStatus {
+    surface: "browser" | "computer";
+    configured: boolean;
+    available: boolean;
+    certified: boolean;
+    adapterId?: string;
+    adapterVersion?: string;
+    operations: string[];
+    limitations: string[];
+    error?: string;
+}
+interface CliAutomationStatusReport {
+    schemaVersion: 1;
+    protocolVersion: 1;
+    enabled: boolean;
+    surfaces: CliAutomationSurfaceStatus[];
+    docs: string;
+}
+interface CreateCliGovernedAutomationRuntimeOptions {
+    cwd: () => string;
+    profile: () => CompiledAgentProfile;
+    runId: string;
+    agentId?: string;
+    sessionId?: string;
+    workspaceId?: string;
+    surface: "cli" | "hub" | "ide" | "api" | "hosted";
+    securityPolicy?: () => PolicyEnforcerConfig | undefined;
+    securityStatus?: ProcessContainmentStatus;
+    safeMode?: boolean;
+    environment?: CliAutomationEnvironment;
+    onAudit?: (event: CliAutomationAuditEvent) => Promise<void> | void;
+}
+declare class CliGovernedAutomationRuntime implements XenoGovernedAutomationToolRuntime {
+    private readonly options;
+    private readonly leases;
+    private readonly activeExecutors;
+    private readonly environment;
+    private browserAdapter?;
+    private computerAdapter?;
+    constructor(options: CreateCliGovernedAutomationRuntimeOptions);
+    register(registry: ToolRegistry): number;
+    execute(input: XenoGovernedAutomationToolExecution): Promise<XenoAutomationExecutionResult>;
+    stop(operationId: string, reason?: string): Promise<boolean>;
+    private securityPolicy;
+    private adapterFor;
+    private audit;
+}
+declare function createCliGovernedAutomationRuntime(options: CreateCliGovernedAutomationRuntimeOptions): CliGovernedAutomationRuntime;
+declare function createCliAutomationAuditSink(logger: CliAutomationAuditLoggerPort | undefined): ((event: CliAutomationAuditEvent) => Promise<void>) | undefined;
+declare function inspectCliAutomationStatus(environment?: CliAutomationEnvironment): Promise<CliAutomationStatusReport>;
+declare function readCliAutomationEnvironment(env?: NodeJS.ProcessEnv): CliAutomationEnvironment;
+declare function renderCliAutomationStatus(report: CliAutomationStatusReport): string;
+type XenoHostAutomationAuditEvent = CliAutomationAuditEvent;
+type XenoHostAutomationAuditLoggerPort = CliAutomationAuditLoggerPort;
+type XenoHostAutomationEnvironment = CliAutomationEnvironment;
+type XenoHostAutomationSurfaceStatus = CliAutomationSurfaceStatus;
+type XenoHostAutomationStatusReport = CliAutomationStatusReport;
+type CreateXenoHostGovernedAutomationRuntimeOptions = CreateCliGovernedAutomationRuntimeOptions;
+interface XenoArtifactValidationIssue {
+    path: string;
+    code: string;
+    message: string;
+}
+declare class XenoArtifactValidationError extends Error {
+    readonly code = "ARTIFACT_INVALID";
+    readonly issues: XenoArtifactValidationIssue[];
+    constructor(message: string, issues: XenoArtifactValidationIssue[]);
+}
+declare class XenoArtifactStateTransitionError extends Error {
+    readonly fromState: XenoArtifactState;
+    readonly toState: XenoArtifactState;
+    readonly code = "ARTIFACT_STATE_TRANSITION_INVALID";
+    constructor(fromState: XenoArtifactState, toState: XenoArtifactState);
+}
+declare function validateXenoArtifact(artifact: XenoArtifactEnvelope): XenoArtifactValidationIssue[];
+declare function assertValidXenoArtifact(artifact: XenoArtifactEnvelope): void;
+declare function canTransitionXenoArtifactState(fromState: XenoArtifactState, toState: XenoArtifactState): boolean;
+declare function assertXenoArtifactStateTransition(fromState: XenoArtifactState, toState: XenoArtifactState): void;
+declare function validateXenoArtifactReviewEvent(event: XenoArtifactReviewEvent, artifact?: XenoArtifactEnvelope): XenoArtifactValidationIssue[];
+declare function summarizeXenoArtifactReview(events: readonly XenoArtifactReviewEvent[]): XenoArtifactReviewSummary;
+declare function sha256ArtifactBytes(content: Uint8Array | string): XenoContentHash;
+declare function canonicalizeArtifactJson(value: XenoJsonValue): string;
+declare function sha256ArtifactJson(value: XenoJsonValue): XenoContentHash;
+declare class XenoEvidenceGraphValidationError extends Error {
+    readonly code = "EVIDENCE_GRAPH_INVALID";
+    readonly issues: XenoArtifactValidationIssue[];
+    constructor(issues: XenoArtifactValidationIssue[]);
+}
+declare function validateXenoEvidenceGraph(graph: XenoEvidenceGraph): XenoArtifactValidationIssue[];
+declare function assertValidXenoEvidenceGraph(graph: XenoEvidenceGraph): void;
+interface XenoEvidenceGraphBuilderOptions {
+    graphId: string;
+    now?: () => string;
+}
+declare class XenoEvidenceGraphBuilder {
+    private readonly now;
+    private graph;
+    constructor(options: XenoEvidenceGraphBuilderOptions | XenoEvidenceGraph);
+    addNode(node: XenoEvidenceNode): this;
+    addEdge(edge: XenoEvidenceEdge): this;
+    build(): XenoEvidenceGraph;
+    private touch;
+}
+declare const XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION: 1;
+interface XenoArtifactFileSnapshotPayload {
+    schemaVersion: typeof XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION;
+    generation: number;
+    createdAt: string;
+    updatedAt: string;
+    state: XenoArtifactRepositoryState;
+}
+interface XenoArtifactFileSnapshot extends XenoArtifactFileSnapshotPayload {
+    checksum: {
+        algorithm: "sha256";
+        value: string;
+    };
+}
+interface XenoArtifactFileRecoveryNotice {
+    snapshotPath: string;
+    backupPath: string;
+    reason: string;
+}
+interface FileXenoArtifactRepositoryOptions {
+    directory: string;
+    snapshotFileName?: string;
+    lockTimeoutMs?: number;
+    lockRetryMs?: number;
+    maxSnapshotBytes?: number;
+    now?: () => string;
+    onRecovery?: (notice: XenoArtifactFileRecoveryNotice) => void;
+}
+declare class FileXenoArtifactRepository implements XenoArtifactRepository {
+    readonly directory: string;
+    readonly snapshotPath: string;
+    readonly backupPath: string;
+    readonly lockPath: string;
+    private readonly now;
+    private readonly lockTimeoutMs;
+    private readonly lockRetryMs;
+    private readonly maxSnapshotBytes;
+    private readonly onRecovery?;
+    private mutationTail;
+    constructor(options: FileXenoArtifactRepositoryOptions);
+    create(artifact: XenoArtifactEnvelope): Promise<XenoArtifactRecord>;
+    createRevision(artifact: XenoArtifactEnvelope, options?: XenoArtifactRevisionOptions): Promise<XenoArtifactRecord>;
+    get(artifactId: string, revision?: number): Promise<XenoArtifactRecord | undefined>;
+    require(artifactId: string, revision?: number): Promise<XenoArtifactRecord>;
+    list(query?: XenoArtifactListQuery): Promise<XenoArtifactRecord[]>;
+    listRevisions(artifactId: string): Promise<XenoArtifactRecord[]>;
+    transition(request: XenoArtifactTransitionRequest): Promise<XenoArtifactRecord>;
+    appendReviewEvent(request: XenoArtifactAppendReviewRequest): Promise<XenoArtifactRecord>;
+    inspectSnapshot(): Promise<XenoArtifactFileSnapshot | undefined>;
+    private mutate;
+    private enqueueMutation;
+    private acquireLock;
+    private load;
+    private persist;
+    private readSnapshot;
+}
+type XenoDiffMode = "working-tree" | "staged" | "turn" | "commit" | "preview";
+type XenoDiffFileStatus = "added" | "modified" | "deleted" | "renamed" | "copied" | "binary";
+type XenoDiffLineKind = "context" | "addition" | "deletion" | "no-newline";
+interface XenoDiffLine {
+    kind: XenoDiffLineKind;
+    text: string;
+    oldLine?: number;
+    newLine?: number;
+}
+interface XenoDiffHunk {
+    hunkId: string;
+    header: string;
+    section?: string;
+    oldStart: number;
+    oldLines: number;
+    newStart: number;
+    newLines: number;
+    additions: number;
+    deletions: number;
+    lines: XenoDiffLine[];
+}
+interface XenoDiffFile {
+    oldPath?: string;
+    newPath?: string;
+    displayPath: string;
+    status: XenoDiffFileStatus;
+    additions: number;
+    deletions: number;
+    binary: boolean;
+    headerLines: string[];
+    hunks: XenoDiffHunk[];
+}
+interface XenoDiffDocument {
+    schemaVersion: 1;
+    mode: XenoDiffMode;
+    repositoryId?: string;
+    baseRef?: string;
+    headRef?: string;
+    files: XenoDiffFile[];
+    additions: number;
+    deletions: number;
+    rawDiff: string;
+}
+interface ParseUnifiedDiffOptions {
+    mode?: XenoDiffMode;
+    repositoryId?: string;
+    baseRef?: string;
+    headRef?: string;
+    maxBytes?: number;
+    maxFiles?: number;
+    maxHunks?: number;
+    maxLines?: number;
+}
+interface XenoDiffArtifactContext {
+    kind?: "diff" | "patch";
+    artifactId?: string;
+    revision?: number;
+    predecessorRevision?: number;
+    createdAt?: string;
+    title?: string;
+    description?: string;
+    producer: XenoArtifactActor;
+    identity?: XenoArtifactIdentity;
+    sensitivity?: XenoArtifactSensitivity;
+    accessPolicyId?: string;
+    mode?: XenoDiffMode;
+    repositoryId?: string;
+    baseRef?: string;
+    headRef?: string;
+}
+declare class XenoDiffParseError extends Error {
+    readonly line?: number | undefined;
+    readonly code = "XENO_DIFF_INVALID";
+    constructor(message: string, line?: number | undefined);
+}
+declare function parseUnifiedDiff(diff: string, options?: ParseUnifiedDiffOptions): XenoDiffDocument;
+declare function unifiedDiffToXenoArtifact(diff: string, context: XenoDiffArtifactContext): XenoArtifactEnvelope;
+declare function xenoArtifactToDiffDocument(artifact: XenoArtifactEnvelope): XenoDiffDocument;
+interface XenoArtifactReviewServiceOptions {
+    repository: XenoArtifactRepository;
+    actor: XenoArtifactActor;
+    idFactory?: () => string;
+}
+interface XenoArtifactReviewAnchorInput {
+    file?: string;
+    line?: number;
+    hunkId?: string;
+}
+interface AddXenoArtifactCommentRequest extends XenoArtifactReviewAnchorInput {
+    artifactId: string;
+    revision?: number;
+    body: string;
+    parentCommentId?: string;
+}
+interface SetXenoArtifactCommentResolutionRequest {
+    artifactId: string;
+    revision?: number;
+    commentId: string;
+    resolved: boolean;
+    reason?: string;
+}
+interface DecideXenoArtifactRequest extends Omit<XenoArtifactReviewAnchorInput, "line"> {
+    artifactId: string;
+    revision?: number;
+    decision: XenoArtifactReviewDecision;
+    rationale?: string;
+}
+declare class XenoArtifactReviewService {
+    private readonly repository;
+    private readonly actor;
+    private readonly idFactory;
+    constructor(options: XenoArtifactReviewServiceOptions);
+    addComment(request: AddXenoArtifactCommentRequest): Promise<XenoArtifactRecord>;
+    setCommentResolution(request: SetXenoArtifactCommentResolutionRequest): Promise<XenoArtifactRecord>;
+    decide(request: DecideXenoArtifactRequest): Promise<XenoArtifactRecord>;
+}
+declare function buildXenoArtifactReviewAnchor(record: XenoArtifactRecord, input: XenoArtifactReviewAnchorInput): XenoArtifactAnchor | undefined;
+declare function normalizeRepositoryRelativePath(value: string): string;
+declare const XENO_SPEC_SCHEMA_VERSION: "xeno.spec.v1";
+declare const XENO_SPEC_EXECUTION_SCHEMA_VERSION: "xeno.spec-execution.v1";
+type XenoSpecPriority = "must" | "should" | "could";
+type XenoSpecTaskStatus = "pending" | "in_progress" | "completed" | "blocked" | "skipped";
+type XenoSpecExecutionState = "ready" | "running" | "completed" | "failed" | "cancelled";
+interface XenoSpecAcceptanceCriterion {
+    id: string;
+    text: string;
+    requiredEvidenceKinds?: string[];
+}
+interface XenoSpecRequirement {
+    id: string;
+    text: string;
+    priority: XenoSpecPriority;
+    acceptanceCriteria: XenoSpecAcceptanceCriterion[];
+    sourceReferences?: XenoEvidenceReference[];
+}
+interface XenoSpecDesignDecision {
+    id: string;
+    decision: string;
+    rationale: string;
+    alternatives?: string[];
+    requirementIds?: string[];
+}
+interface XenoSpecRisk {
+    id: string;
+    description: string;
+    impact: "low" | "medium" | "high" | "critical";
+    mitigation: string;
+    owner?: string;
+}
+interface XenoSpecDesign {
+    summary: string;
+    decisions: XenoSpecDesignDecision[];
+    risks: XenoSpecRisk[];
+}
+interface XenoSpecTask {
+    id: string;
+    title: string;
+    description: string;
+    dependsOn?: string[];
+    requirementIds: string[];
+    acceptanceCriterionIds: string[];
+    expectedPaths?: string[];
+    preferredAgentProfile?: string;
+}
+interface XenoSpecSourceBaseline {
+    repositoryId?: string;
+    commit?: string;
+    workspaceFingerprint?: XenoContentHash;
+}
+interface XenoSpecDocument {
+    schemaVersion: typeof XENO_SPEC_SCHEMA_VERSION;
+    specId: string;
+    revision: number;
+    title: string;
+    problem: string;
+    requirements: XenoSpecRequirement[];
+    design: XenoSpecDesign;
+    tasks: XenoSpecTask[];
+    acceptanceCriteria: XenoSpecAcceptanceCriterion[];
+    sourceBaseline?: XenoSpecSourceBaseline;
+    createdAt: string;
+    updatedAt: string;
+    predecessorRevision?: number;
+}
+interface XenoSpecArtifactContext {
+    producer: XenoArtifactActor;
+    identity?: XenoArtifactIdentity;
+    sensitivity?: XenoArtifactSensitivity;
+    accessPolicyId?: string;
+    createdAt?: string;
+}
+interface XenoSpecArtifactBundle {
+    document: XenoSpecDocument;
+    plan: XenoArtifactEnvelope;
+    requirements: XenoArtifactEnvelope;
+    design: XenoArtifactEnvelope;
+    taskGraph: XenoArtifactEnvelope;
+}
+interface XenoSpecTaskExecution {
     taskId: string;
     status: XenoSpecTaskStatus;
     ownerAgentId?: string;
@@ -2539,1036 +3103,748 @@ interface XenoReviewFinding {
     reviewerAgentIds: string[];
     title: string;
     summary: string;
-    severity: XenoReviewSeverity;
-    confidence: number;
-    state: XenoReviewFindingState;
-    verificationBasis: "verifier" | "independent-evidence" | "none";
-    anchors: XenoArtifactAnchor[];
-    evidence: XenoReviewEvidence[];
-    verifications: XenoReviewVerificationResult[];
-    remediation?: string;
-    duplicateProposalCount: number;
-}
-interface XenoReviewTarget {
-    artifactId: string;
-    revision: number;
-    contentHash: XenoContentHash;
-    title: string;
-    repositoryId?: string;
-    commit?: string;
-    anchors?: XenoArtifactAnchor[];
-}
-interface XenoReviewPack {
-    schemaVersion: "xeno.review-pack.v1";
-    packId: string;
-    version: string;
-    dimensions: XenoReviewDimension[];
-    verifierCount: number;
-    minimumVerifierReproductions: number;
-    allowIndependentEvidenceVerification: boolean;
-    minimumIndependentEvidenceProducers: number;
-    maxFindings: number;
-}
-interface XenoReviewReport {
-    schemaVersion: typeof XENO_REVIEW_REPORT_SCHEMA_VERSION;
-    reportId: string;
-    runId: string;
-    pack: XenoReviewPack;
-    target: XenoReviewTarget;
-    startedAt: string;
-    completedAt: string;
-    reviewers: Array<{
-        agentId: string;
-        dimension: XenoReviewDimension;
-        findingCount: number;
-    }>;
-    findings: XenoReviewFinding[];
-    summary: {
-        total: number;
-        verified: number;
-        unverified: number;
-        rejected: number;
-        bySeverity: Record<XenoReviewSeverity, number>;
-    };
-}
-interface XenoReviewCoordinatorContext {
-    runId: string;
-    target: XenoReviewTarget;
-    pack: XenoReviewPack;
-}
-type XenoReviewAgentExecutor = (request: XenoReviewCoordinatorContext & {
-    dimension: XenoReviewDimension;
-    reviewerSlot: number;
-}) => Promise<XenoReviewAgentResult>;
-type XenoReviewVerifierExecutor = (request: XenoReviewCoordinatorContext & {
-    finding: XenoReviewFinding;
-    verifierSlot: number;
-}) => Promise<XenoReviewVerificationResult>;
-interface XenoMultiAgentReviewCoordinatorOptions {
-    reviewer: XenoReviewAgentExecutor;
-    verifier?: XenoReviewVerifierExecutor;
-    now?: () => string;
-    idFactory?: (prefix: "report" | "finding") => string;
-}
-interface XenoReviewArtifactContext {
-    producer: XenoArtifactActor;
-    identity?: XenoArtifactIdentity;
-    sensitivity?: XenoArtifactSensitivity;
-    accessPolicyId?: string;
-    artifactId?: string;
-    createdAt?: string;
-}
-interface XenoGitHubReviewComment {
-    findingId: string;
-    path: string;
-    line?: number;
-    body: string;
-    severity: XenoReviewSeverity;
-    verified: boolean;
-}
-declare class XenoReviewValidationError extends Error {
-    readonly issues: string[];
-    readonly code = "XENO_REVIEW_INVALID";
-    constructor(issues: string[]);
-}
-declare class XenoMultiAgentReviewCoordinator {
-    private readonly reviewer;
-    private readonly verifier?;
-    private readonly now;
-    private readonly idFactory;
-    constructor(options: XenoMultiAgentReviewCoordinatorOptions);
-    run(context: XenoReviewCoordinatorContext): Promise<XenoReviewReport>;
-}
-declare function defaultXenoReviewPack(packId?: string): XenoReviewPack;
-declare function assertValidXenoReviewPack(pack: XenoReviewPack): void;
-declare function assertValidXenoReviewTarget(target: XenoReviewTarget): void;
-declare function assertValidXenoReviewReport(report: XenoReviewReport): void;
-declare function xenoReviewReportToArtifact(report: XenoReviewReport, context: XenoReviewArtifactContext): XenoArtifactEnvelope;
-declare function xenoArtifactToReviewReport(artifact: XenoArtifactEnvelope): XenoReviewReport;
-declare function xenoReviewReportToGitHubComments(report: XenoReviewReport, options?: {
-    verifiedOnly?: boolean;
-}): XenoGitHubReviewComment[];
-type AgentSelectionStrategy = "first" | "least-loaded" | "round-robin";
-interface AgentCard {
-    id: string;
-    name: string;
-    description?: string;
-    capabilities: string[];
-    maxConcurrentTasks?: number;
-    handler: AgentTaskHandler;
-}
-interface AgentTeam {
-    id: string;
-    name: string;
-    description?: string;
-    agentIds: string[];
-    strategy?: AgentSelectionStrategy;
-}
-interface AgentLoadSnapshot {
-    agentId: string;
-    agentName: string;
-    activeTasks: number;
-    maxConcurrentTasks: number;
-    availableSlots: number;
-    isAvailable: boolean;
-}
-interface AgentTask {
-    id: string;
-    type: string;
-    description: string;
-    input: Record<string, unknown>;
-    priority?: "low" | "normal" | "high" | "critical";
-    createdAt: string;
-    status: AgentTaskStatus;
-    assignedTo?: string;
-    createdBy?: string;
-    parentTaskId?: string;
-    timeoutMs?: number;
-}
-type AgentTaskStatus = "pending" | "assigned" | "running" | "completed" | "failed" | "cancelled" | "timeout";
-interface AgentTaskResult {
-    taskId: string;
-    status: "completed" | "failed" | "cancelled";
-    result: unknown;
-    error?: string;
-    artifacts?: AgentArtifact[];
-    durationMs?: number;
-}
-interface AgentArtifact {
-    name: string;
-    mimeType?: string;
-    content: string;
-}
-type AgentTaskHandler = (task: AgentTask) => Promise<AgentTaskResult>;
-type A2AMessageType = "task-request" | "task-accepted" | "task-rejected" | "task-progress" | "task-completed" | "task-failed" | "capability-query" | "capability-response";
-interface A2AMessage {
-    id: string;
-    type: A2AMessageType;
-    from: string;
-    to: string;
-    payload: Record<string, unknown>;
-    timestamp: string;
-    correlationId?: string;
-}
-interface AgentDispatchOptions {
-    timeoutMs?: number;
-    priority?: AgentTask["priority"];
-    parentTaskId?: string;
-    createdBy?: string;
-    waitForCapacity?: boolean;
-    maxQueueWaitMs?: number;
-}
-interface AgentCapabilityDispatchOptions extends AgentDispatchOptions {
-    strategy?: AgentSelectionStrategy;
-    teamId?: string;
-}
-declare class AgentRegistry {
-    private agents;
-    private teams;
-    registerAgent(card: AgentCard): void;
-    unregisterAgent(id: string): boolean;
-    getAgent(id: string): AgentCard | undefined;
-    findByCapability(capability: string): AgentCard[];
-    listAgents(): AgentCard[];
-    registerTeam(team: AgentTeam): void;
-    unregisterTeam(id: string): boolean;
-    getTeam(id: string): AgentTeam | undefined;
-    listTeams(): AgentTeam[];
-    listAgentsForTeam(teamId: string): AgentCard[];
-    get size(): number;
-}
-declare class AgentProtocol {
-    private registry;
-    private messageLog;
-    private activeTasks;
-    private activeTasksByAgent;
-    private capabilityRoundRobinCursor;
-    constructor(registry: AgentRegistry);
-    private getAgentCapacity;
-    private getAgentActiveTaskCount;
-    private isAgentAvailable;
-    private reserveAgentTask;
-    private releaseAgentTask;
-    private waitForAgentCapacity;
-    private getCapabilityCandidates;
-    private compareAgentLoad;
-    private selectAgentForCapability;
-    getAgentLoad(agentId: string): AgentLoadSnapshot | undefined;
-    listAgentLoads(options?: {
-        capability?: string;
-        teamId?: string;
-    }): AgentLoadSnapshot[];
-    delegateTask(agentId: string, taskSpec: {
-        type: string;
-        description: string;
-        input: Record<string, unknown>;
-    }, options?: AgentDispatchOptions): Promise<AgentTaskResult>;
-    delegateByCapability(capability: string, taskSpec: {
-        description: string;
-        input: Record<string, unknown>;
-    }, options?: AgentCapabilityDispatchOptions): Promise<AgentTaskResult>;
-    delegateToTeam(teamId: string, taskSpec: {
-        type: string;
-        description: string;
-        input: Record<string, unknown>;
-    }, options?: Omit<AgentCapabilityDispatchOptions, "teamId">): Promise<AgentTaskResult>;
-    getMessageLog(limit?: number): A2AMessage[];
-    getActiveTasks(): AgentTask[];
-    private logMessage;
+    severity: XenoReviewSeverity;
+    confidence: number;
+    state: XenoReviewFindingState;
+    verificationBasis: "verifier" | "independent-evidence" | "none";
+    anchors: XenoArtifactAnchor[];
+    evidence: XenoReviewEvidence[];
+    verifications: XenoReviewVerificationResult[];
+    remediation?: string;
+    duplicateProposalCount: number;
 }
-interface FileSnapshot {
-    path: string;
-    exists: boolean;
-    size: number;
-    mtimeMs: number;
-    text?: string;
-    binary?: boolean;
-    truncated?: boolean;
+interface XenoReviewTarget {
+    artifactId: string;
+    revision: number;
+    contentHash: XenoContentHash;
+    title: string;
+    repositoryId?: string;
+    commit?: string;
+    anchors?: XenoArtifactAnchor[];
 }
-interface TurnFileDiff {
-    path: string;
-    status: "created" | "modified" | "deleted" | "unchanged";
-    before?: FileSnapshot;
-    after?: FileSnapshot;
-    patch?: string;
+interface XenoReviewPack {
+    schemaVersion: "xeno.review-pack.v1";
+    packId: string;
+    version: string;
+    dimensions: XenoReviewDimension[];
+    verifierCount: number;
+    minimumVerifierReproductions: number;
+    allowIndependentEvidenceVerification: boolean;
+    minimumIndependentEvidenceProducers: number;
+    maxFindings: number;
 }
-interface TurnDiffSummary {
-    turnId: string;
+interface XenoReviewReport {
+    schemaVersion: typeof XENO_REVIEW_REPORT_SCHEMA_VERSION;
+    reportId: string;
+    runId: string;
+    pack: XenoReviewPack;
+    target: XenoReviewTarget;
     startedAt: string;
     completedAt: string;
-    files: TurnFileDiff[];
+    reviewers: Array<{
+        agentId: string;
+        dimension: XenoReviewDimension;
+        findingCount: number;
+    }>;
+    findings: XenoReviewFinding[];
+    summary: {
+        total: number;
+        verified: number;
+        unverified: number;
+        rejected: number;
+        bySeverity: Record<XenoReviewSeverity, number>;
+    };
 }
-interface TurnDiffTrackerOptions {
-    maxFileBytes?: number;
-    cwd?: string;
+interface XenoReviewCoordinatorContext {
+    runId: string;
+    target: XenoReviewTarget;
+    pack: XenoReviewPack;
 }
-declare class TurnDiffTracker {
-    private active?;
-    private readonly maxFileBytes;
-    private readonly cwd;
-    constructor(options?: TurnDiffTrackerOptions);
-    beginTurn(turnId: string): void;
-    observeBefore(paths: Iterable<string | null | undefined>): void;
-    observeAfter(paths: Iterable<string | null | undefined>): void;
-    endTurn(): TurnDiffSummary | undefined;
-    inferToolPaths(toolName: string, input: Record<string, unknown>): string[];
-    private resolvePath;
-    private snapshot;
+type XenoReviewAgentExecutor = (request: XenoReviewCoordinatorContext & {
+    dimension: XenoReviewDimension;
+    reviewerSlot: number;
+}) => Promise<XenoReviewAgentResult>;
+type XenoReviewVerifierExecutor = (request: XenoReviewCoordinatorContext & {
+    finding: XenoReviewFinding;
+    verifierSlot: number;
+}) => Promise<XenoReviewVerificationResult>;
+interface XenoMultiAgentReviewCoordinatorOptions {
+    reviewer: XenoReviewAgentExecutor;
+    verifier?: XenoReviewVerifierExecutor;
+    now?: () => string;
+    idFactory?: (prefix: "report" | "finding") => string;
 }
-interface XenoLegacyArtifactContext {
-    artifactId?: string;
-    revision?: number;
-    createdAt?: string;
+interface XenoReviewArtifactContext {
     producer: XenoArtifactActor;
     identity?: XenoArtifactIdentity;
-    state?: XenoArtifactState;
     sensitivity?: XenoArtifactSensitivity;
     accessPolicyId?: string;
+    artifactId?: string;
+    createdAt?: string;
 }
-interface XenoLegacyAgentArtifactContext extends XenoLegacyArtifactContext {
-    contentEncoding?: "utf8" | "base64";
-    kind?: XenoArtifactKind;
-}
-declare function legacyAgentArtifactToXenoArtifact(legacy: AgentArtifact, context: XenoLegacyAgentArtifactContext): XenoArtifactEnvelope;
-declare function xenoArtifactToLegacyAgentArtifact(artifact: XenoArtifactEnvelope): AgentArtifact;
-declare function toolEvidenceToXenoArtifact(evidence: ToolEvidence, context: XenoLegacyArtifactContext): XenoArtifactEnvelope;
-declare function xenoArtifactToToolEvidence(artifact: XenoArtifactEnvelope): ToolEvidence;
-declare function turnDiffSummaryToXenoArtifact(summary: TurnDiffSummary, context: XenoLegacyArtifactContext): XenoArtifactEnvelope;
-declare function xenoArtifactToTurnDiffSummary(artifact: XenoArtifactEnvelope): TurnDiffSummary;
-type HookEventName = "SessionStart" | "UserPromptSubmit" | "PermissionRequest" | "PreToolUse" | "PostToolUse" | "PreCompact" | "PostCompact" | "Stop" | "StopFailure" | "SubagentStart" | "SubagentStop";
-type HookPermissionMode = AgentPermissionMode;
-interface HookInputBase {
-    schemaVersion: 1;
-    event: HookEventName;
-    sessionId: string;
-    runId: string;
-    rootRunId: string;
-    agentId: string;
-    agentName?: string;
-    agentColor?: string;
-    parentAgentId?: string;
-    cwd: string;
-    transcriptPath?: string;
-    permissionMode: HookPermissionMode;
-    model: string;
-    effort?: string;
-    timestamp: string;
-}
-interface HookInvocationInput extends HookInputBase {
-    prompt?: string;
-    toolName?: string;
-    toolInput?: Record<string, unknown>;
-    toolResult?: unknown;
-    finalText?: string;
-    metadata?: Record<string, unknown>;
-}
-type HookDecision = {
-    decision: "allow";
-    systemMessage?: string;
-    context?: string;
-} | {
-    decision: "block";
-    reason: string;
-    systemMessage?: string;
-} | {
-    decision: "ask";
-    reason: string;
-    prompt: string;
-} | {
-    decision: "modify";
-    patch: unknown;
-    reason?: string;
-} | {
-    decision: "continue";
-    context?: string;
-    systemMessage?: string;
-};
-interface BaseHookDefinition {
-    name?: string;
-    events?: HookEventName[];
-    timeoutMs?: number;
-    maxOutputBytes?: number;
-    failClosed?: boolean;
-    async?: boolean;
-}
-interface CommandHookDefinition extends BaseHookDefinition {
-    type: "command";
-    command: string;
-    args?: string[];
-    cwd?: string;
-    shell?: boolean;
-    env?: Record<string, string>;
-}
-interface HttpHookDefinition extends BaseHookDefinition {
-    type: "http";
-    url: string;
-    method?: "POST";
-    headers?: Record<string, string>;
-}
-interface PromptHookDefinition extends BaseHookDefinition {
-    type: "prompt";
-    prompt: string;
-}
-interface AgentHookDefinition extends BaseHookDefinition {
-    type: "agent";
-    prompt: string;
-    agent?: string;
-    model?: string;
-}
-type HookDefinition = CommandHookDefinition | HttpHookDefinition | PromptHookDefinition | AgentHookDefinition;
-type HookInput = HookInvocationInput;
-interface HookConfig {
-    hooks?: HookDefinition[];
-    events?: Partial<Record<HookEventName, HookDefinition[]>>;
+interface XenoGitHubReviewComment {
+    findingId: string;
+    path: string;
+    line?: number;
+    body: string;
+    severity: XenoReviewSeverity;
+    verified: boolean;
 }
-type HookModelExecutor = (definition: PromptHookDefinition | AgentHookDefinition, input: HookInvocationInput) => HookDecision | Promise<HookDecision>;
-type HookExecutionStatus = "allowed" | "blocked" | "asked" | "modified" | "continued" | "errored" | "timed_out";
-interface HookExecutionResult {
-    hook: HookDefinition;
-    status: HookExecutionStatus;
-    decision?: HookDecision;
-    exitCode?: number | null;
-    signal?: NodeJS.Signals | null;
-    stdout: string;
-    stderr: string;
-    stdoutTruncated: boolean;
-    stderrTruncated: boolean;
-    timedOut: boolean;
-    durationMs: number;
-    error?: string;
+declare class XenoReviewValidationError extends Error {
+    readonly issues: string[];
+    readonly code = "XENO_REVIEW_INVALID";
+    constructor(issues: string[]);
 }
-interface HookRunResult {
-    decision: HookDecision;
-    results: HookExecutionResult[];
-    context: string[];
-    systemMessages: string[];
+declare class XenoMultiAgentReviewCoordinator {
+    private readonly reviewer;
+    private readonly verifier?;
+    private readonly now;
+    private readonly idFactory;
+    constructor(options: XenoMultiAgentReviewCoordinatorOptions);
+    run(context: XenoReviewCoordinatorContext): Promise<XenoReviewReport>;
 }
-interface HookRuntimeOptions {
-    defaultTimeoutMs?: number;
-    defaultMaxOutputBytes?: number;
-    env?: NodeJS.ProcessEnv;
-    permissionProfile?: PermissionProfile;
-    promptExecutor?: HookModelExecutor;
-    agentExecutor?: HookModelExecutor;
+declare function defaultXenoReviewPack(packId?: string): XenoReviewPack;
+declare function assertValidXenoReviewPack(pack: XenoReviewPack): void;
+declare function assertValidXenoReviewTarget(target: XenoReviewTarget): void;
+declare function assertValidXenoReviewReport(report: XenoReviewReport): void;
+declare function xenoReviewReportToArtifact(report: XenoReviewReport, context: XenoReviewArtifactContext): XenoArtifactEnvelope;
+declare function xenoArtifactToReviewReport(artifact: XenoArtifactEnvelope): XenoReviewReport;
+declare function xenoReviewReportToGitHubComments(report: XenoReviewReport, options?: {
+    verifiedOnly?: boolean;
+}): XenoGitHubReviewComment[];
+type AgentSelectionStrategy = "first" | "least-loaded" | "round-robin";
+interface AgentCard {
+    id: string;
+    name: string;
+    description?: string;
+    capabilities: string[];
+    maxConcurrentTasks?: number;
+    handler: AgentTaskHandler;
 }
-declare function normalizeHookDecision(value: unknown): HookDecision;
-declare function buildHookEnvironment(input: HookInvocationInput, definition: CommandHookDefinition, sourceEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
-declare function hookResultStatus(decision: HookDecision | undefined): HookExecutionResult["status"];
-declare function runCommandHook(definition: CommandHookDefinition, input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookExecutionResult>;
-declare function runHttpHook(definition: HttpHookDefinition, input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookExecutionResult>;
-declare function runPromptHook(definition: PromptHookDefinition, input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookExecutionResult>;
-declare function runAgentHook(definition: AgentHookDefinition, input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookExecutionResult>;
-declare class PromptHookRunner {
-    private readonly executor;
-    private readonly options;
-    constructor(executor: HookModelExecutor, options?: HookRuntimeOptions);
-    run(definition: PromptHookDefinition, input: HookInvocationInput): Promise<HookExecutionResult>;
+interface AgentTeam {
+    id: string;
+    name: string;
+    description?: string;
+    agentIds: string[];
+    strategy?: AgentSelectionStrategy;
 }
-declare class AgentHookRunner {
-    private readonly executor;
-    private readonly options;
-    constructor(executor: HookModelExecutor, options?: HookRuntimeOptions);
-    run(definition: AgentHookDefinition, input: HookInvocationInput): Promise<HookExecutionResult>;
+interface AgentLoadSnapshot {
+    agentId: string;
+    agentName: string;
+    activeTasks: number;
+    maxConcurrentTasks: number;
+    availableSlots: number;
+    isAvailable: boolean;
 }
-declare function runHookDefinition(hook: HookDefinition, input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookExecutionResult>;
-declare function runHooks(hooks: readonly HookDefinition[], input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookRunResult>;
-declare class HookRunner {
-    private readonly hooks;
-    private readonly options;
-    constructor(hooks: readonly HookDefinition[], options?: HookRuntimeOptions);
-    run(input: HookInvocationInput): Promise<HookRunResult>;
+interface AgentTask {
+    id: string;
+    type: string;
+    description: string;
+    input: Record<string, unknown>;
+    priority?: "low" | "normal" | "high" | "critical";
+    createdAt: string;
+    status: AgentTaskStatus;
+    assignedTo?: string;
+    createdBy?: string;
+    parentTaskId?: string;
+    timeoutMs?: number;
 }
-declare class HookRuntime {
-    private readonly config;
-    private readonly options;
-    constructor(config: HookConfig, options?: HookRuntimeOptions);
-    run(input: HookInvocationInput): Promise<HookRunResult>;
+type AgentTaskStatus = "pending" | "assigned" | "running" | "completed" | "failed" | "cancelled" | "timeout";
+interface AgentTaskResult {
+    taskId: string;
+    status: "completed" | "failed" | "cancelled";
+    result: unknown;
+    error?: string;
+    artifacts?: AgentArtifact[];
+    durationMs?: number;
 }
-declare class CommandHookRunner {
-    private readonly options;
-    constructor(options?: HookRuntimeOptions);
-    run(definition: CommandHookDefinition, input: HookInvocationInput): Promise<HookExecutionResult>;
+interface AgentArtifact {
+    name: string;
+    mimeType?: string;
+    content: string;
 }
-declare class HttpHookRunner {
-    private readonly options;
-    constructor(options?: HookRuntimeOptions);
-    run(definition: HttpHookDefinition, input: HookInvocationInput): Promise<HookExecutionResult>;
+type AgentTaskHandler = (task: AgentTask) => Promise<AgentTaskResult>;
+type A2AMessageType = "task-request" | "task-accepted" | "task-rejected" | "task-progress" | "task-completed" | "task-failed" | "capability-query" | "capability-response";
+interface A2AMessage {
+    id: string;
+    type: A2AMessageType;
+    from: string;
+    to: string;
+    payload: Record<string, unknown>;
+    timestamp: string;
+    correlationId?: string;
 }
-declare const CONFIG_VERSION = 2;
-declare const PROJECT_STATE_VERSION = 3;
-type ProjectMcpApprovalDecision = "approved" | "denied";
-interface ProjectTokenUsageSummary {
-    input: number;
-    output: number;
-    total: number;
+interface AgentDispatchOptions {
+    timeoutMs?: number;
+    priority?: AgentTask["priority"];
+    parentTaskId?: string;
+    createdBy?: string;
+    waitForCapacity?: boolean;
+    maxQueueWaitMs?: number;
 }
-interface ProjectSessionSummary {
-    sessionId?: string;
-    mode?: "chat" | "run" | "save";
-    status?: string;
-    role?: string;
-    model: string;
-    startedAt: string;
-    endedAt: string;
-    durationMs: number;
-    messageCount?: number;
-    tokenUsage: ProjectTokenUsageSummary;
-    estimatedCostUsd: number;
+interface AgentCapabilityDispatchOptions extends AgentDispatchOptions {
+    strategy?: AgentSelectionStrategy;
+    teamId?: string;
 }
-interface XenoUserConfig {
-    configVersion?: number;
-    apiKey?: string;
-    model?: string;
-    effort?: AgentEffortLevel;
-    fallbackModels?: string[];
-    worktree?: {
-        enabledForBackgroundRuns?: boolean;
-        baseRef?: string;
-        root?: string;
-        cleanupCompletedAfterDays?: number;
-    };
-    baseURL?: string;
-    maxTokens?: number;
-    maxIterations?: number;
-    permissionMode?: "default" | "acceptEdits" | "bypassPermissions" | "auto";
-    permissionProfile?: "default" | "read-only" | "trusted-dev";
-    executionMode?: "agent" | "chatOnly";
-    uiColor?: string;
-    outputStyle?: string;
-    memoryContextSessions?: number;
-    memoryContextTokens?: number;
-    memoryContextChars?: number;
-    searchApiKey?: string;
-    searchProvider?: "brave" | "google" | "searxng" | "duckduckgo";
-    searxngUrl?: string;
-    googleCx?: string;
-    mcpEnabled?: boolean;
-    lastReleaseNotesSeen?: string;
-    terminalShiftEnterInstalled?: boolean;
+declare class AgentRegistry {
+    private agents;
+    private teams;
+    registerAgent(card: AgentCard): void;
+    unregisterAgent(id: string): boolean;
+    getAgent(id: string): AgentCard | undefined;
+    findByCapability(capability: string): AgentCard[];
+    listAgents(): AgentCard[];
+    registerTeam(team: AgentTeam): void;
+    unregisterTeam(id: string): boolean;
+    getTeam(id: string): AgentTeam | undefined;
+    listTeams(): AgentTeam[];
+    listAgentsForTeam(teamId: string): AgentCard[];
+    get size(): number;
 }
-interface XenoProjectState {
-    configVersion?: number;
-    trustedWorkspace?: boolean;
-    allowedTools?: string[];
-    allowedDirectories?: string[];
-    mcpApprovals?: Record<string, ProjectMcpApprovalDecision>;
-    lastSessionSummary?: ProjectSessionSummary;
-    hasCompletedProjectOnboarding?: boolean;
+declare class AgentProtocol {
+    private registry;
+    private messageLog;
+    private activeTasks;
+    private activeTasksByAgent;
+    private capabilityRoundRobinCursor;
+    constructor(registry: AgentRegistry);
+    private getAgentCapacity;
+    private getAgentActiveTaskCount;
+    private isAgentAvailable;
+    private reserveAgentTask;
+    private releaseAgentTask;
+    private waitForAgentCapacity;
+    private getCapabilityCandidates;
+    private compareAgentLoad;
+    private selectAgentForCapability;
+    getAgentLoad(agentId: string): AgentLoadSnapshot | undefined;
+    listAgentLoads(options?: {
+        capability?: string;
+        teamId?: string;
+    }): AgentLoadSnapshot[];
+    delegateTask(agentId: string, taskSpec: {
+        type: string;
+        description: string;
+        input: Record<string, unknown>;
+    }, options?: AgentDispatchOptions): Promise<AgentTaskResult>;
+    delegateByCapability(capability: string, taskSpec: {
+        description: string;
+        input: Record<string, unknown>;
+    }, options?: AgentCapabilityDispatchOptions): Promise<AgentTaskResult>;
+    delegateToTeam(teamId: string, taskSpec: {
+        type: string;
+        description: string;
+        input: Record<string, unknown>;
+    }, options?: Omit<AgentCapabilityDispatchOptions, "teamId">): Promise<AgentTaskResult>;
+    getMessageLog(limit?: number): A2AMessage[];
+    getActiveTasks(): AgentTask[];
+    private logMessage;
 }
-declare function getConfigDir(): string;
-declare function getAgentHome(): string;
-declare function getManagedConfigPath(): string | undefined;
-declare function getProjectStatePath(cwd?: string): string;
-declare function ensureProjectStateDir(cwd?: string): void;
-declare function loadProjectState(cwd?: string): XenoProjectState;
-declare function saveProjectState(cwd: string, updates: Partial<XenoProjectState>): void;
-declare function updateProjectState(cwd: string, updater: (current: XenoProjectState) => XenoProjectState): XenoProjectState;
-declare function isWorkspaceTrusted(cwd?: string): boolean;
-declare function setWorkspaceTrusted(cwd?: string, trusted?: boolean): void;
-declare function hasProjectOnboardingCompleted(cwd?: string): boolean;
-declare function setProjectOnboardingCompleted(cwd?: string, completed?: boolean): void;
-declare function addProjectAllowedTool(cwd: string, approvalKey: string): XenoProjectState;
-declare function listProjectAllowedTools(cwd: string): string[];
-declare function removeProjectAllowedTool(cwd: string, approvalKey: string): XenoProjectState;
-declare function clearProjectAllowedTools(cwd: string): XenoProjectState;
-declare function addProjectAllowedDirectory(cwd: string, directory: string): XenoProjectState;
-declare function getProjectMcpApproval(cwd: string, approvalKey: string): ProjectMcpApprovalDecision | undefined;
-declare function setProjectMcpApproval(cwd: string, approvalKey: string, decision: ProjectMcpApprovalDecision): XenoProjectState;
-declare function clearProjectMcpApproval(cwd: string, approvalKey: string): XenoProjectState;
-declare function listProjectMcpApprovals(cwd: string, scope?: string): Record<string, ProjectMcpApprovalDecision>;
-declare function clearProjectMcpApprovals(cwd: string, scope?: string): XenoProjectState;
-declare function getProjectLastSessionSummary(cwd?: string): ProjectSessionSummary | undefined;
-declare function setProjectLastSessionSummary(cwd: string, summary: ProjectSessionSummary): XenoProjectState;
-declare function clearProjectLastSessionSummary(cwd: string): XenoProjectState;
-declare function ensureConfigDir(): void;
-declare function loadConfig(): XenoUserConfig;
-declare function loadUserConfig(): XenoUserConfig;
-declare function saveConfig(updates: Partial<XenoUserConfig>): void;
-type XenoCredentialType = "api-key" | "jwt" | "empty";
-type XenoCredentialSource = "explicit" | "env" | "default" | "none";
-type XenoAuthErrorCode = "token_expired" | "token_not_active" | "token_malformed";
-interface XenoJwtPayload {
-    exp?: number;
-    iat?: number;
-    nbf?: number;
-    sub?: string;
-    userId?: string;
-    email?: string;
-    username?: string;
-    [key: string]: unknown;
+interface FileSnapshot {
+    path: string;
+    exists: boolean;
+    size: number;
+    mtimeMs: number;
+    text?: string;
+    binary?: boolean;
+    truncated?: boolean;
 }
-interface XenoResolvedApiKey {
-    apiKey: string;
-    source: XenoCredentialSource;
-    credentialType: XenoCredentialType;
-    expiresAt?: string;
-    expiresInMs?: number;
+interface TurnFileDiff {
+    path: string;
+    status: "created" | "modified" | "deleted" | "unchanged";
+    before?: FileSnapshot;
+    after?: FileSnapshot;
+    patch?: string;
 }
-interface ResolveXenoSdkApiKeyOptions {
-    explicitApiKey?: string;
-    env?: Record<string, string | undefined>;
-    envVar?: string;
-    defaultApiKey?: string;
-    nowMs?: number;
-    skewMs?: number;
-    allowExpired?: boolean;
+interface TurnDiffSummary {
+    turnId: string;
+    startedAt: string;
+    completedAt: string;
+    files: TurnFileDiff[];
 }
-interface ValidateXenoSdkApiKeyOptions {
-    apiKey: string;
-    apiBaseURL: string;
-    fetchImpl?: typeof fetch;
+interface TurnDiffTrackerOptions {
+    maxFileBytes?: number;
+    cwd?: string;
 }
-declare class XenoAuthError extends Error {
-    readonly code: XenoAuthErrorCode;
-    readonly expiresAt?: string;
-    constructor(message: string, code: XenoAuthErrorCode, context?: {
-        expiresAt?: string;
-    });
+declare class TurnDiffTracker {
+    private active?;
+    private readonly maxFileBytes;
+    private readonly cwd;
+    constructor(options?: TurnDiffTrackerOptions);
+    beginTurn(turnId: string): void;
+    observeBefore(paths: Iterable<string | null | undefined>): void;
+    observeAfter(paths: Iterable<string | null | undefined>): void;
+    endTurn(): TurnDiffSummary | undefined;
+    inferToolPaths(toolName: string, input: Record<string, unknown>): string[];
+    private resolvePath;
+    private snapshot;
 }
-declare function isJwt(value: string | undefined): value is string;
-declare function decodeJwtPayload(token: string | undefined): XenoJwtPayload | undefined;
-declare function getJwtExpiry(token: string | undefined): Date | undefined;
-declare function isExpiredJwt(token: string | undefined, nowMs?: number, skewMs?: number): boolean;
-declare function isNotBeforeJwt(token: string | undefined, nowMs?: number, skewMs?: number): boolean;
-declare function assertUsableXenoApiKey(apiKey: string | undefined, options?: {
-    nowMs?: number;
-    skewMs?: number;
-    allowExpired?: boolean;
-}): string;
-declare function resolveXenoSdkApiKey(options?: ResolveXenoSdkApiKeyOptions): XenoResolvedApiKey;
-declare function validateXenoSdkApiKey(options: ValidateXenoSdkApiKeyOptions): Promise<{
-    valid: boolean;
-    error?: string;
-}>;
-declare const DEFAULT_API_KEY: string;
-declare const XENO_API_BASE: string;
-declare const XENO_RT_DEFAULT_URL: string;
-declare const DEFAULT_MODEL: string;
-declare const FALLBACK_MODELS: readonly string[];
-interface ModelInfo {
-    id: string;
-    name: string;
-    owned_by: string;
-    source: "xeno" | "local";
-    type?: string;
-    output_modalities?: string[];
-    available?: boolean;
-    contextWindow?: number;
-    maxCompletionTokens?: number;
+interface XenoLegacyArtifactContext {
+    artifactId?: string;
+    revision?: number;
+    createdAt?: string;
+    producer: XenoArtifactActor;
+    identity?: XenoArtifactIdentity;
+    state?: XenoArtifactState;
+    sensitivity?: XenoArtifactSensitivity;
+    accessPolicyId?: string;
 }
-interface LocalRuntimePreflightResult {
-    ok: boolean;
+interface XenoLegacyAgentArtifactContext extends XenoLegacyArtifactContext {
+    contentEncoding?: "utf8" | "base64";
+    kind?: XenoArtifactKind;
+}
+declare function legacyAgentArtifactToXenoArtifact(legacy: AgentArtifact, context: XenoLegacyAgentArtifactContext): XenoArtifactEnvelope;
+declare function xenoArtifactToLegacyAgentArtifact(artifact: XenoArtifactEnvelope): AgentArtifact;
+declare function toolEvidenceToXenoArtifact(evidence: ToolEvidence, context: XenoLegacyArtifactContext): XenoArtifactEnvelope;
+declare function xenoArtifactToToolEvidence(artifact: XenoArtifactEnvelope): ToolEvidence;
+declare function turnDiffSummaryToXenoArtifact(summary: TurnDiffSummary, context: XenoLegacyArtifactContext): XenoArtifactEnvelope;
+declare function xenoArtifactToTurnDiffSummary(artifact: XenoArtifactEnvelope): TurnDiffSummary;
+type HookEventName = "SessionStart" | "UserPromptSubmit" | "PermissionRequest" | "PreToolUse" | "PostToolUse" | "PreCompact" | "PostCompact" | "Stop" | "StopFailure" | "SubagentStart" | "SubagentStop";
+type HookPermissionMode = AgentPermissionMode;
+interface HookInputBase {
+    schemaVersion: 1;
+    event: HookEventName;
+    sessionId: string;
+    runId: string;
+    rootRunId: string;
+    agentId: string;
+    agentName?: string;
+    agentColor?: string;
+    parentAgentId?: string;
+    cwd: string;
+    transcriptPath?: string;
+    permissionMode: HookPermissionMode;
     model: string;
-    baseUrl: string;
-    endpoint?: "openai" | "native";
-    warning?: string;
-    error?: string;
+    effort?: string;
+    timestamp: string;
 }
-declare function cachedModelContextWindow(modelId: string): number | undefined;
-declare function getAvailableModels(options?: {
-    apiKey?: string;
-    localRuntimeUrl?: string;
-    forceRefresh?: boolean;
-}): Promise<ModelInfo[]>;
-declare function isLocalModel(model: string): boolean;
-declare function getModelName(model: string): string;
-declare function preflightLocalModel(model: string, options?: {
-    localRuntimeUrl?: string;
+interface HookInvocationInput extends HookInputBase {
+    prompt?: string;
+    toolName?: string;
+    toolInput?: Record<string, unknown>;
+    toolResult?: unknown;
+    finalText?: string;
+    metadata?: Record<string, unknown>;
+}
+type HookDecision = {
+    decision: "allow";
+    systemMessage?: string;
+    context?: string;
+} | {
+    decision: "block";
+    reason: string;
+    systemMessage?: string;
+} | {
+    decision: "ask";
+    reason: string;
+    prompt: string;
+} | {
+    decision: "modify";
+    patch: unknown;
+    reason?: string;
+} | {
+    decision: "continue";
+    context?: string;
+    systemMessage?: string;
+};
+interface BaseHookDefinition {
+    name?: string;
+    events?: HookEventName[];
     timeoutMs?: number;
-}): Promise<LocalRuntimePreflightResult>;
-declare function isValidModel(model: string, apiKey?: string, forceRefresh?: boolean): Promise<boolean>;
-declare function isChatModel(model: ModelInfo): boolean;
-declare function getChatModels(apiKey?: string, forceRefresh?: boolean): Promise<ModelInfo[]>;
-declare function formatModelList(apiKey?: string, showAll?: boolean, forceRefresh?: boolean): Promise<string>;
-interface ProfileMCPServerConfig {
-    name: string;
+    maxOutputBytes?: number;
+    failClosed?: boolean;
+    async?: boolean;
+}
+interface CommandHookDefinition extends BaseHookDefinition {
+    type: "command";
     command: string;
     args?: string[];
-    env?: Record<string, string>;
     cwd?: string;
+    shell?: boolean;
+    env?: Record<string, string>;
 }
-interface ConfigProfile {
-    name: string;
-    apiKey?: string;
-    baseURL?: string;
-    model?: string;
-    maxTokens?: number;
-    permissionMode?: "default" | "acceptEdits" | "bypassPermissions" | "auto";
-    plugins?: string[];
-    mcpServers?: ProfileMCPServerConfig[];
-}
-declare class ProfileManager {
-    private data;
-    private filePath;
-    constructor();
-    listProfiles(): ConfigProfile[];
-    getActiveProfile(): ConfigProfile;
-    getActiveProfileName(): string;
-    switchProfile(name: string): void;
-    createProfile(profile: ConfigProfile): void;
-    deleteProfile(name: string): void;
-    updateProfile(name: string, updates: Partial<ConfigProfile>): void;
-    getProfile(name: string): ConfigProfile | undefined;
-    reload(): void;
-    private load;
-    private save;
-}
-interface ProjectConfig {
-    model?: string;
-    systemPrompt?: string;
-    permissions?: {
-        allowedCommands?: string[];
-        deniedCommands?: string[];
-    };
-    ignorePatterns?: string[];
-}
-declare function loadProjectConfig(cwd?: string): ProjectConfig | null;
-declare function mergeConfigs(base: ProjectConfig, override: ProjectConfig): ProjectConfig;
-interface SessionData {
-    id: string;
-    model: string;
-    workingDirectory: string;
-    createdAt: string;
-    updatedAt: string;
-    messages: Message[];
-    totalTokensUsed: number;
-}
-interface SessionSummary {
-    id: string;
-    createdAt: string;
-    updatedAt: string;
-    model: string;
-    workingDirectory: string;
-    preview: string;
-    messageCount: number;
-}
-declare function saveSession(id: string | null, messages: Message[], model: string, totalTokensUsed: number): string;
-declare function loadSession(id: string): SessionData | null;
-declare function listSessions(limit?: number): SessionSummary[];
-declare function deleteSession(id: string): boolean;
-interface ModelProvider {
-    id: string;
-    name: string;
-    baseURL: string;
-    apiKeyEnvVar: string;
-    defaultApiKey?: string;
-    modelPrefixes: string[];
-    models: string[];
-    supportsStreaming: boolean;
-    supportsToolUse: boolean;
-    maxContextTokens?: number;
+interface HttpHookDefinition extends BaseHookDefinition {
+    type: "http";
+    url: string;
+    method?: "POST";
     headers?: Record<string, string>;
-    requestFormat?: "openai" | "google";
 }
-interface ResolvedProvider {
-    provider: ModelProvider;
-    model: string;
-    baseURL: string;
-    apiKey: string;
-    headers: Record<string, string>;
+interface PromptHookDefinition extends BaseHookDefinition {
+    type: "prompt";
+    prompt: string;
+}
+interface AgentHookDefinition extends BaseHookDefinition {
+    type: "agent";
+    prompt: string;
+    agent?: string;
+    model?: string;
 }
-declare function resolveModelContextTokens(model: string): number | undefined;
-declare class ModelProviderRegistry {
-    private providers;
-    constructor();
-    addProvider(provider: ModelProvider): void;
-    removeProvider(id: string): boolean;
-    getProvider(id: string): ModelProvider | undefined;
-    listProviders(): ModelProvider[];
-    resolveProvider(model: string, overrides?: {
-        apiKey?: string;
-        baseURL?: string;
-    }): ResolvedProvider;
+type HookDefinition = CommandHookDefinition | HttpHookDefinition | PromptHookDefinition | AgentHookDefinition;
+type HookInput = HookInvocationInput;
+interface HookConfig {
+    hooks?: HookDefinition[];
+    events?: Partial<Record<HookEventName, HookDefinition[]>>;
 }
-declare function getDefaultProviderRegistry(): ModelProviderRegistry;
-interface MemoryFile {
-    level: MemoryLevel;
-    path: string;
-    content: string;
-    tokenCount: number;
-    lastModified?: Date;
+type HookModelExecutor = (definition: PromptHookDefinition | AgentHookDefinition, input: HookInvocationInput) => HookDecision | Promise<HookDecision>;
+type HookExecutionStatus = "allowed" | "blocked" | "asked" | "modified" | "continued" | "errored" | "timed_out";
+interface HookExecutionResult {
+    hook: HookDefinition;
+    status: HookExecutionStatus;
+    decision?: HookDecision;
+    exitCode?: number | null;
+    signal?: NodeJS.Signals | null;
+    stdout: string;
+    stderr: string;
+    stdoutTruncated: boolean;
+    stderrTruncated: boolean;
+    timedOut: boolean;
+    durationMs: number;
+    error?: string;
 }
-interface ResolvedMemory {
-    files: MemoryFile[];
-    byLevel: Record<MemoryLevel, string>;
-    totalTokens: number;
-    truncated: boolean;
+interface HookRunResult {
+    decision: HookDecision;
+    results: HookExecutionResult[];
+    context: string[];
+    systemMessages: string[];
 }
-interface ProjectSessionContextEntry {
-    sessionId: string;
-    model: string;
-    lastActivity: string;
-    messageCount: number;
-    excerpt: string;
+interface HookRuntimeOptions {
+    defaultTimeoutMs?: number;
+    defaultMaxOutputBytes?: number;
+    env?: NodeJS.ProcessEnv;
+    permissionProfile?: PermissionProfile;
+    promptExecutor?: HookModelExecutor;
+    agentExecutor?: HookModelExecutor;
 }
-interface ProjectSessionContext {
-    entries: ProjectSessionContextEntry[];
-    totalTokens: number;
-    truncated: boolean;
-    content: string;
+declare function normalizeHookDecision(value: unknown): HookDecision;
+declare function buildHookEnvironment(input: HookInvocationInput, definition: CommandHookDefinition, sourceEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+declare function hookResultStatus(decision: HookDecision | undefined): HookExecutionResult["status"];
+declare function runCommandHook(definition: CommandHookDefinition, input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookExecutionResult>;
+declare function runHttpHook(definition: HttpHookDefinition, input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookExecutionResult>;
+declare function runPromptHook(definition: PromptHookDefinition, input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookExecutionResult>;
+declare function runAgentHook(definition: AgentHookDefinition, input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookExecutionResult>;
+declare class PromptHookRunner {
+    private readonly executor;
+    private readonly options;
+    constructor(executor: HookModelExecutor, options?: HookRuntimeOptions);
+    run(definition: PromptHookDefinition, input: HookInvocationInput): Promise<HookExecutionResult>;
 }
-declare const DEFAULT_MEMORY_BUDGETS: MemoryBudget;
-declare const MEMORY_FILES: Record<MemoryLevel, string>;
-interface MemoryManagerOptions {
-    cwd: string;
-    globalDir?: string;
-    role?: string;
-    sessionDir?: string;
-    scope?: MemoryAccessScope;
-    budgets?: Partial<MemoryBudget>;
-    projectSessionContext?: {
-        limit?: number;
-        maxTokens?: number;
-        maxCharsPerSession?: number;
-    };
+declare class AgentHookRunner {
+    private readonly executor;
+    private readonly options;
+    constructor(executor: HookModelExecutor, options?: HookRuntimeOptions);
+    run(definition: AgentHookDefinition, input: HookInvocationInput): Promise<HookExecutionResult>;
 }
-type MemoryAccessScope = "none" | "session" | "project" | "user";
-declare class MemoryManager {
-    private cwd;
-    private globalDir;
-    private role?;
-    private sessionDir?;
-    private scope;
-    private budgets;
-    private projectSessionContextDefaults;
-    constructor(options: MemoryManagerOptions);
-    get accessScope(): MemoryAccessScope;
-    canAccessLevel(level: MemoryLevel): boolean;
-    private assertLevelAccess;
-    getProjectSessionContextDefaults(): {
-        limit: number;
-        maxTokens: number;
-        maxCharsPerSession: number;
-    };
-    getPath(level: MemoryLevel): string;
-    loadForPrompt(): Promise<ResolvedMemory>;
-    loadProjectSessionContext(options?: {
-        excludeSessionId?: string;
-        limit?: number;
-        maxTokens?: number;
-        maxCharsPerSession?: number;
-    }): Promise<ProjectSessionContext>;
-    private filterProjectSessions;
-    private normalizePath;
-    private extractRecentTranscriptExcerpt;
-    private formatProjectSessionEntry;
-    add(level: MemoryLevel, content: string, source: "user" | "auto"): Promise<void>;
-    set(level: MemoryLevel, content: string): Promise<void>;
-    formatForPrompt(memory: ResolvedMemory): string;
-    private truncateContent;
+declare function runHookDefinition(hook: HookDefinition, input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookExecutionResult>;
+declare function runHooks(hooks: readonly HookDefinition[], input: HookInvocationInput, options?: HookRuntimeOptions): Promise<HookRunResult>;
+declare class HookRunner {
+    private readonly hooks;
+    private readonly options;
+    constructor(hooks: readonly HookDefinition[], options?: HookRuntimeOptions);
+    run(input: HookInvocationInput): Promise<HookRunResult>;
 }
-interface AutoMemoryContext {
-    error?: string;
-    correction?: string;
-    taskCompleted?: boolean;
-    userPreference?: string;
+declare class HookRuntime {
+    private readonly config;
+    private readonly options;
+    constructor(config: HookConfig, options?: HookRuntimeOptions);
+    run(input: HookInvocationInput): Promise<HookRunResult>;
 }
-declare class AutoMemory {
-    private manager;
-    private recentErrors;
-    constructor(manager: MemoryManager);
-    shouldTrigger(context: AutoMemoryContext): AutoMemoryTrigger | null;
-    extract(trigger: AutoMemoryTrigger, messages: Message[]): Promise<string | null>;
-    private extractErrorCorrection;
-    private extractPattern;
-    private extractPreference;
-    private extractTaskSummary;
-    private messagesToText;
-    private normalizeError;
+declare class CommandHookRunner {
+    private readonly options;
+    constructor(options?: HookRuntimeOptions);
+    run(definition: CommandHookDefinition, input: HookInvocationInput): Promise<HookExecutionResult>;
 }
-interface VectorDocument {
-    id: string;
-    content: string;
-    embedding: number[];
-    metadata: Record<string, unknown>;
+declare class HttpHookRunner {
+    private readonly options;
+    constructor(options?: HookRuntimeOptions);
+    run(definition: HttpHookDefinition, input: HookInvocationInput): Promise<HookExecutionResult>;
 }
-interface VectorSearchResult {
-    id: string;
-    content: string;
-    score: number;
-    metadata: Record<string, unknown>;
+declare const CONFIG_VERSION = 2;
+declare const PROJECT_STATE_VERSION = 3;
+type ProjectMcpApprovalDecision = "approved" | "denied";
+interface ProjectTokenUsageSummary {
+    input: number;
+    output: number;
+    total: number;
 }
-interface VectorStoreOptions {
-    maxDocuments?: number;
-    embeddingDimension?: number;
-    embedFn?: (text: string) => Promise<number[]>;
+interface ProjectSessionSummary {
+    sessionId?: string;
+    mode?: "chat" | "run" | "save";
+    status?: string;
+    role?: string;
+    model: string;
+    startedAt: string;
+    endedAt: string;
+    durationMs: number;
+    messageCount?: number;
+    tokenUsage: ProjectTokenUsageSummary;
+    estimatedCostUsd: number;
+}
+interface XenoUserConfig {
+    configVersion?: number;
+    apiKey?: string;
+    model?: string;
+    effort?: AgentEffortLevel;
+    fallbackModels?: string[];
+    worktree?: {
+        enabledForBackgroundRuns?: boolean;
+        baseRef?: string;
+        root?: string;
+        cleanupCompletedAfterDays?: number;
+    };
+    baseURL?: string;
+    maxTokens?: number;
+    maxIterations?: number;
+    permissionMode?: "default" | "acceptEdits" | "bypassPermissions" | "auto";
+    permissionProfile?: "default" | "read-only" | "trusted-dev";
+    executionMode?: "agent" | "chatOnly";
+    uiColor?: string;
+    outputStyle?: string;
+    memoryContextSessions?: number;
+    memoryContextTokens?: number;
+    memoryContextChars?: number;
+    searchApiKey?: string;
+    searchProvider?: "brave" | "google" | "searxng" | "duckduckgo";
+    searxngUrl?: string;
+    googleCx?: string;
+    mcpEnabled?: boolean;
+    lastReleaseNotesSeen?: string;
+    terminalShiftEnterInstalled?: boolean;
+}
+interface XenoProjectState {
+    configVersion?: number;
+    trustedWorkspace?: boolean;
+    allowedTools?: string[];
+    allowedDirectories?: string[];
+    mcpApprovals?: Record<string, ProjectMcpApprovalDecision>;
+    lastSessionSummary?: ProjectSessionSummary;
+    hasCompletedProjectOnboarding?: boolean;
 }
-interface VectorStoreAdapter {
-    add(id: string, embedding: number[], metadata: Record<string, unknown>): Promise<void>;
-    search(query: number[], topK: number): Promise<Array<{
-        id: string;
-        score: number;
-    }>>;
-    remove(id: string): Promise<void>;
-    readonly size: number;
+declare function getConfigDir(): string;
+declare function getAgentHome(): string;
+declare function getManagedConfigPath(): string | undefined;
+declare function getProjectStatePath(cwd?: string): string;
+declare function ensureProjectStateDir(cwd?: string): void;
+declare function loadProjectState(cwd?: string): XenoProjectState;
+declare function saveProjectState(cwd: string, updates: Partial<XenoProjectState>): void;
+declare function updateProjectState(cwd: string, updater: (current: XenoProjectState) => XenoProjectState): XenoProjectState;
+declare function isWorkspaceTrusted(cwd?: string): boolean;
+declare function setWorkspaceTrusted(cwd?: string, trusted?: boolean): void;
+declare function hasProjectOnboardingCompleted(cwd?: string): boolean;
+declare function setProjectOnboardingCompleted(cwd?: string, completed?: boolean): void;
+declare function addProjectAllowedTool(cwd: string, approvalKey: string): XenoProjectState;
+declare function listProjectAllowedTools(cwd: string): string[];
+declare function removeProjectAllowedTool(cwd: string, approvalKey: string): XenoProjectState;
+declare function clearProjectAllowedTools(cwd: string): XenoProjectState;
+declare function addProjectAllowedDirectory(cwd: string, directory: string): XenoProjectState;
+declare function getProjectMcpApproval(cwd: string, approvalKey: string): ProjectMcpApprovalDecision | undefined;
+declare function setProjectMcpApproval(cwd: string, approvalKey: string, decision: ProjectMcpApprovalDecision): XenoProjectState;
+declare function clearProjectMcpApproval(cwd: string, approvalKey: string): XenoProjectState;
+declare function listProjectMcpApprovals(cwd: string, scope?: string): Record<string, ProjectMcpApprovalDecision>;
+declare function clearProjectMcpApprovals(cwd: string, scope?: string): XenoProjectState;
+declare function getProjectLastSessionSummary(cwd?: string): ProjectSessionSummary | undefined;
+declare function setProjectLastSessionSummary(cwd: string, summary: ProjectSessionSummary): XenoProjectState;
+declare function clearProjectLastSessionSummary(cwd: string): XenoProjectState;
+declare function ensureConfigDir(): void;
+declare function loadConfig(): XenoUserConfig;
+declare function loadUserConfig(): XenoUserConfig;
+declare function saveConfig(updates: Partial<XenoUserConfig>): void;
+type XenoCredentialType = "api-key" | "jwt" | "empty";
+type XenoCredentialSource = "explicit" | "env" | "default" | "none";
+type XenoAuthErrorCode = "token_expired" | "token_not_active" | "token_malformed";
+interface XenoJwtPayload {
+    exp?: number;
+    iat?: number;
+    nbf?: number;
+    sub?: string;
+    userId?: string;
+    email?: string;
+    username?: string;
+    [key: string]: unknown;
 }
-declare class VectorMemoryStore {
-    private documents;
-    private insertionOrder;
-    private maxDocuments;
-    private embedder;
-    private customEmbedFn?;
-    constructor(options?: VectorStoreOptions);
-    addDocument(id: string, content: string, metadata?: Record<string, unknown>): Promise<void>;
-    search(query: string, topK?: number, minScore?: number): Promise<VectorSearchResult[]>;
-    removeDocument(id: string): boolean;
-    getDocument(id: string): VectorDocument | undefined;
-    get size(): number;
-    clear(): void;
-    exportDocuments(): VectorDocument[];
-    importDocuments(docs: VectorDocument[]): void;
+interface XenoResolvedApiKey {
+    apiKey: string;
+    source: XenoCredentialSource;
+    credentialType: XenoCredentialType;
+    expiresAt?: string;
+    expiresInMs?: number;
 }
-interface AskUserRequest {
-    question: string;
-    options?: string[];
-    context?: string;
+interface ResolveXenoSdkApiKeyOptions {
+    explicitApiKey?: string;
+    env?: Record<string, string | undefined>;
+    envVar?: string;
+    defaultApiKey?: string;
+    nowMs?: number;
+    skewMs?: number;
+    allowExpired?: boolean;
 }
-interface AskUserResponse {
-    answer: string;
-    selectedOption?: string;
+interface ValidateXenoSdkApiKeyOptions {
+    apiKey: string;
+    apiBaseURL: string;
+    fetchImpl?: typeof fetch;
 }
-type AskUserHandler = (request: AskUserRequest) => Promise<AskUserResponse>;
-interface DispatchAgentRequest {
-    agent?: string;
-    prompt: string;
-    timeoutMs?: number;
-    signal?: AbortSignal;
+declare class XenoAuthError extends Error {
+    readonly code: XenoAuthErrorCode;
+    readonly expiresAt?: string;
+    constructor(message: string, code: XenoAuthErrorCode, context?: {
+        expiresAt?: string;
+    });
 }
-interface DispatchAgentResponse {
-    output: string;
+declare function isJwt(value: string | undefined): value is string;
+declare function decodeJwtPayload(token: string | undefined): XenoJwtPayload | undefined;
+declare function getJwtExpiry(token: string | undefined): Date | undefined;
+declare function isExpiredJwt(token: string | undefined, nowMs?: number, skewMs?: number): boolean;
+declare function isNotBeforeJwt(token: string | undefined, nowMs?: number, skewMs?: number): boolean;
+declare function assertUsableXenoApiKey(apiKey: string | undefined, options?: {
+    nowMs?: number;
+    skewMs?: number;
+    allowExpired?: boolean;
+}): string;
+declare function resolveXenoSdkApiKey(options?: ResolveXenoSdkApiKeyOptions): XenoResolvedApiKey;
+declare function validateXenoSdkApiKey(options: ValidateXenoSdkApiKeyOptions): Promise<{
+    valid: boolean;
+    error?: string;
+}>;
+declare const DEFAULT_API_KEY: string;
+declare const XENO_API_BASE: string;
+declare const XENO_RT_DEFAULT_URL: string;
+declare const DEFAULT_MODEL: string;
+declare const FALLBACK_MODELS: readonly string[];
+interface ModelInfo {
+    id: string;
+    name: string;
+    owned_by: string;
+    source: "xeno" | "local";
+    type?: string;
+    output_modalities?: string[];
+    available?: boolean;
+    contextWindow?: number;
+    maxCompletionTokens?: number;
 }
-type DispatchAgentHandler = (request: DispatchAgentRequest) => Promise<DispatchAgentResponse>;
-interface FileObservation {
-    path: string;
-    mtimeMs: number;
-    size: number;
-    source: "read" | "write" | "edit" | "notebook" | "shell";
-    requiresRefresh?: boolean;
-    reason?: string;
+interface LocalRuntimePreflightResult {
+    ok: boolean;
+    model: string;
+    baseUrl: string;
+    endpoint?: "openai" | "native";
+    warning?: string;
+    error?: string;
 }
-interface ToolRuntimeContext {
-    getCwd(): string;
-    setCwd(nextCwd: string): void;
-    getOwnerSessionId(): string | undefined;
-    getMemoryManager(): MemoryManager | undefined;
-    setMemoryManager(memoryManager: MemoryManager | undefined): void;
-    noteFileObservation(filePath: string, observation: Omit<FileObservation, "path">): void;
-    getFileObservation(filePath: string): FileObservation | undefined;
-    invalidateFileObservation(filePath: string, reason: string): void;
-    listFileObservations(): FileObservation[];
-    askUser?(request: AskUserRequest): Promise<AskUserResponse>;
-    dispatchAgent?(request: DispatchAgentRequest): Promise<DispatchAgentResponse>;
+declare function cachedModelContextWindow(modelId: string): number | undefined;
+declare function getAvailableModels(options?: {
+    apiKey?: string;
+    localRuntimeUrl?: string;
+    forceRefresh?: boolean;
+}): Promise<ModelInfo[]>;
+declare function isLocalModel(model: string): boolean;
+declare function getModelName(model: string): string;
+declare function preflightLocalModel(model: string, options?: {
+    localRuntimeUrl?: string;
+    timeoutMs?: number;
+}): Promise<LocalRuntimePreflightResult>;
+declare function isValidModel(model: string, apiKey?: string, forceRefresh?: boolean): Promise<boolean>;
+declare function isChatModel(model: ModelInfo): boolean;
+declare function getChatModels(apiKey?: string, forceRefresh?: boolean): Promise<ModelInfo[]>;
+declare function formatModelList(apiKey?: string, showAll?: boolean, forceRefresh?: boolean): Promise<string>;
+interface ProfileMCPServerConfig {
+    name: string;
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+    cwd?: string;
 }
-declare function createToolRuntimeContext(initialCwd?: string, options?: {
-    askUser?: AskUserHandler;
-    dispatchAgent?: DispatchAgentHandler;
-    memoryManager?: MemoryManager;
-    ownerSessionId?: string;
-}): ToolRuntimeContext;
-declare const defaultToolRuntimeContext: ToolRuntimeContext;
-type HarnessTaskStatus = "pending" | "in_progress" | "completed";
-interface HarnessTask {
-    id: string;
-    subject: string;
-    description: string;
-    status: HarnessTaskStatus;
-    activeForm?: string;
-    owner?: string;
-    metadata: Record<string, unknown>;
-    blocks: string[];
-    blockedBy: string[];
-    createdAt: string;
-    updatedAt: string;
+interface ConfigProfile {
+    name: string;
+    apiKey?: string;
+    baseURL?: string;
+    model?: string;
+    maxTokens?: number;
+    permissionMode?: "default" | "acceptEdits" | "bypassPermissions" | "auto";
+    plugins?: string[];
+    mcpServers?: ProfileMCPServerConfig[];
 }
-interface HarnessTaskUpdate {
-    subject?: string;
-    description?: string;
-    status?: HarnessTaskStatus | "deleted";
-    activeForm?: string;
-    owner?: string;
-    metadata?: Record<string, unknown>;
-    addBlocks?: string[];
-    addBlockedBy?: string[];
+declare class ProfileManager {
+    private data;
+    private filePath;
+    constructor();
+    listProfiles(): ConfigProfile[];
+    getActiveProfile(): ConfigProfile;
+    getActiveProfileName(): string;
+    switchProfile(name: string): void;
+    createProfile(profile: ConfigProfile): void;
+    deleteProfile(name: string): void;
+    updateProfile(name: string, updates: Partial<ConfigProfile>): void;
+    getProfile(name: string): ConfigProfile | undefined;
+    reload(): void;
+    private load;
+    private save;
 }
-declare class TaskListManager {
-    private readonly tasks;
-    private nextId;
-    create(input: {
-        subject: string;
-        description: string;
-        activeForm?: string;
-        metadata?: Record<string, unknown>;
-    }): HarnessTask;
-    get(taskId: string): HarnessTask | undefined;
-    list(): HarnessTask[];
-    update(taskId: string, input: HarnessTaskUpdate): HarnessTask | undefined;
-    delete(taskId: string): boolean;
-    private incompleteBlockers;
-    private assertDependencyTargets;
-    private link;
-    private assertAcyclic;
-    private snapshot;
-    private restore;
+interface ProjectConfig {
+    model?: string;
+    systemPrompt?: string;
+    permissions?: {
+        allowedCommands?: string[];
+        deniedCommands?: string[];
+    };
+    ignorePatterns?: string[];
 }
-declare function createTaskListTools(manager?: TaskListManager): RegisteredTool[];
-interface DefaultToolRegistryOptions {
-    cwd?: string;
-    runtime?: ToolRuntimeContext;
-    ownerSessionId?: string;
-    askUser?: AskUserHandler;
-    dispatchAgent?: DispatchAgentHandler;
-    memoryManager?: MemoryManager;
-    webSearchApiKey?: string;
-    permissionProfile?: PermissionProfile;
-    sandbox?: AgentSandbox;
-    validateInputs?: boolean;
-    toolSchemaMode?: "all" | "demand";
-    taskListManager?: TaskListManager;
-    shellEnvironment?: NodeJS.ProcessEnv;
-    shellSensitiveEnvironmentKeys?: readonly string[];
+declare function loadProjectConfig(cwd?: string): ProjectConfig | null;
+declare function mergeConfigs(base: ProjectConfig, override: ProjectConfig): ProjectConfig;
+interface SessionData {
+    id: string;
+    model: string;
+    workingDirectory: string;
+    createdAt: string;
+    updatedAt: string;
+    messages: Message[];
+    totalTokensUsed: number;
 }
-interface ToolRegistryOptions {
-    validateInputs?: boolean;
-    toolSchemaMode?: "all" | "demand";
+interface SessionSummary {
+    id: string;
+    createdAt: string;
+    updatedAt: string;
+    model: string;
+    workingDirectory: string;
+    preview: string;
+    messageCount: number;
 }
-declare class ToolRegistry {
-    private tools;
-    private compiledSchemas;
-    private changeListeners;
-    private aliasNames;
-    private validateInputs;
-    private readonly toolSchemaMode;
-    private readonly activatedDefinitions;
-    constructor(options?: ToolRegistryOptions);
-    setValidateInputs(enabled: boolean): this;
-    get inputValidationEnabled(): boolean;
-    get schemaLoadingMode(): "all" | "demand";
-    register(tool: RegisteredTool): void;
-    registerAlias(tool: RegisteredTool): void;
-    registerAll(tools: Iterable<RegisteredTool>): void;
-    unregister(name: string): boolean;
-    onChange(listener: () => void): () => void;
-    private emitChange;
-    get(name: string): RegisteredTool | undefined;
-    getDefinitions(): ToolDefinition[];
-    getDefinitionsForRequest(): ToolDefinition[];
-    getCapabilityCatalog(): string;
-    activateMatchingDefinitions(query: string, limit?: number): ToolDefinition[];
-    private static namespaceOf;
-    getDefinitionsByNamespace(namespace: string): ToolDefinition[];
-    listNamespaces(): string[];
-    execute(name: string, input: Record<string, unknown>, context?: ToolExecutionContext): Promise<ToolResult>;
-    listNames(): string[];
-    has(name: string): boolean;
-    projectPolicyInput(name: string, input: Record<string, unknown>): ToolPolicyProjection | {
-        error: ToolResult;
-    };
-    get size(): number;
-    private compileDefinition;
-    private assertDefinitionsExportable;
+declare function saveSession(id: string | null, messages: Message[], model: string, totalTokensUsed: number): string;
+declare function loadSession(id: string): SessionData | null;
+declare function listSessions(limit?: number): SessionSummary[];
+declare function deleteSession(id: string): boolean;
+interface ModelProvider {
+    id: string;
+    name: string;
+    baseURL: string;
+    apiKeyEnvVar: string;
+    defaultApiKey?: string;
+    modelPrefixes: string[];
+    models: string[];
+    supportsStreaming: boolean;
+    supportsToolUse: boolean;
+    maxContextTokens?: number;
+    headers?: Record<string, string>;
+    requestFormat?: "openai" | "google";
 }
-declare function createDefaultToolRegistry(options?: DefaultToolRegistryOptions): ToolRegistry;
-declare const registry: ToolRegistry;
+interface ResolvedProvider {
+    provider: ModelProvider;
+    model: string;
+    baseURL: string;
+    apiKey: string;
+    headers: Record<string, string>;
+}
+declare function resolveModelContextTokens(model: string): number | undefined;
+declare class ModelProviderRegistry {
+    private providers;
+    constructor();
+    addProvider(provider: ModelProvider): void;
+    removeProvider(id: string): boolean;
+    getProvider(id: string): ModelProvider | undefined;
+    listProviders(): ModelProvider[];
+    resolveProvider(model: string, overrides?: {
+        apiKey?: string;
+        baseURL?: string;
+    }): ResolvedProvider;
+}
+declare function getDefaultProviderRegistry(): ModelProviderRegistry;
 interface PermissionDecisionEvent {
     traceId?: string;
     toolName: string;
@@ -4033,6 +4309,7 @@ type XenoRuntimeEvent = (XenoRuntimeEventBase & {
     success: boolean;
     outputPreview: string;
     error?: string;
+    webContext?: WebContextToolResult;
     elapsedMs: number;
     iteration?: number;
 }) | (XenoRuntimeEventBase & {
@@ -4570,6 +4847,16 @@ declare class TranscriptWriter {
         offset?: number;
     }): Promise<TranscriptEvent[]>;
     private isMessageData;
+    isMessageEvent(event: TranscriptEvent): event is TranscriptEvent & {
+        data: Message;
+    };
+    readValidated(): Promise<{
+        events: TranscriptEvent[];
+        issues: Array<{
+            code: "torn_transcript_tail" | "invalid_transcript_event" | "non_monotonic_sequence";
+            detail: string;
+        }>;
+    }>;
     getMessages(): Promise<Message[]>;
     replaceMessages(messages: Message[]): Promise<void>;
     truncateAfterMessageCount(messageCount: number): Promise<void>;
@@ -4612,18 +4899,46 @@ interface SessionResumeOptions {
     sessionId: string;
     fromCheckpoint?: string;
 }
+type SessionRecoverySource = "transcript" | "checkpoint" | "empty";
+interface SessionRecoveryIssue {
+    code: "torn_transcript_tail" | "invalid_transcript_event" | "non_monotonic_sequence" | "interrupted_tool_call" | "checkpoint_fallback" | "divergent_checkpoint" | "stale_metadata" | "invalid_compaction_snapshot";
+    detail: string;
+}
+interface SessionRecoveryResult {
+    messages: Message[];
+    transcriptMessages: Message[];
+    source: SessionRecoverySource;
+    sourceId?: string;
+    issues: SessionRecoveryIssue[];
+    repairMessages: Message[];
+    transcriptEventCount: number;
+    latestTimestamp?: string;
+}
+declare function repairInterruptedToolCalls(messages: Message[]): {
+    messages: Message[];
+    repairs: Message[];
+    interruptedToolUseIds: string[];
+};
+declare function recoverSessionMessages(sessionDir: string, options?: {
+    metadataMessageCount?: number;
+}): Promise<SessionRecoveryResult>;
 declare class SessionManager {
     private sessionDir;
     private _meta;
     private _transcript;
     private _checkpoints;
     private _lock;
+    private _recovery;
+    private _detachedForHandoff;
     private constructor();
     static create(options: SessionCreateOptions): Promise<SessionManager>;
     static resume(options: SessionResumeOptions): Promise<SessionManager>;
     get meta(): SessionMeta;
     get transcript(): TranscriptWriter;
     get checkpoints(): CheckpointManager;
+    get recovery(): SessionRecoveryResult;
+    detachForHandoff(): Promise<void>;
+    get detachedForHandoff(): boolean;
     updateMeta(partial: Partial<SessionMeta>): Promise<void>;
     end(status?: "completed" | "abandoned"): Promise<void>;
     recordUserMessage(content: string): Promise<void>;
@@ -5008,7 +5323,7 @@ interface MessageFlowDeps {
     readonly tokenAccountingAdapter?: TokenAccountingAdapter;
     readonly historyMarkdownPath?: string;
     buildRuntimeSystemPrompt(): string;
-    onContextCompressed(messagesRemoved: number, tokensSaved: number, record: CompactionRecord): Promise<void>;
+    onContextCompressed(messagesRemoved: number, tokensSaved: number, record: CompactionRecord, activeContextMessages: Message[]): Promise<void>;
     onToolHistoryRepaired?(diagnostic: ToolHistoryRepairDiagnostic): void;
 }
 declare class MessageFlow {
@@ -7163,7 +7478,7 @@ interface XenoControlRoomMonitorInput {
 }
 interface XenoControlRoomGoalInput {
     goalId: string;
-    status: "active" | "complete" | "blocked" | "cancelled" | "expired";
+    status: "active" | "complete" | "blocked" | "cancelled" | "failed" | "expired";
     condition: string;
     runId?: string;
     updatedAt: string;
@@ -7977,6 +8292,400 @@ declare class FileXenoShareRegistry {
     load(): Promise<XenoShareRegistrySnapshot>;
     private mutate;
 }
+declare const XENO_COORDINATION_SCHEMA_VERSION: 1;
+type XenoGoalStatus = "active" | "paused" | "waiting" | "blocked" | "completed" | "failed" | "cancelled";
+type XenoGoalTaskStatus = "pending" | "ready" | "running" | "blocked" | "failed" | "completed" | "cancelled" | "interrupted";
+interface XenoGoalCriterion {
+    id: string;
+    description: string;
+    required: boolean;
+}
+interface XenoGoalCriterionResult {
+    criterionId: string;
+    satisfied: boolean;
+    evidence: string[];
+    reason: string;
+    evaluatedAt: string;
+}
+interface XenoGoalVerification {
+    status: "pending" | "running" | "passed" | "failed";
+    criteria: XenoGoalCriterionResult[];
+    evidence: string[];
+    summary?: string;
+    verifiedAt?: string;
+    verifiedBy?: string;
+}
+interface XenoGoalTask {
+    id: string;
+    milestoneId: string;
+    parentTaskId?: string;
+    title: string;
+    description?: string;
+    status: XenoGoalTaskStatus;
+    assignedAgentId?: string;
+    dependsOn?: string[];
+    progress?: string;
+    resultEventId?: string;
+    createdAt: string;
+    updatedAt: string;
+    completedAt?: string;
+}
+interface XenoGoalMilestone {
+    id: string;
+    title: string;
+    description?: string;
+    status: "pending" | "active" | "blocked" | "completed" | "cancelled";
+    taskIds: string[];
+    createdAt: string;
+    updatedAt: string;
+    completedAt?: string;
+}
+interface XenoGoalProgress {
+    summary: string;
+    currentMilestoneId?: string;
+    currentTaskId?: string;
+    completedTaskCount: number;
+    totalTaskCount: number;
+    percent?: number;
+    outstanding: string[];
+    decisions: string[];
+    updatedAt: string;
+}
+interface XenoGoalRecord {
+    schemaVersion: typeof XENO_COORDINATION_SCHEMA_VERSION;
+    id: string;
+    version: number;
+    sessionId: string;
+    objective: string;
+    why?: string;
+    successCriteria: XenoGoalCriterion[];
+    constraints: string[];
+    limits?: {
+        maxIterations?: number;
+        maxTokens?: number;
+        maxWallClockMs?: number;
+    };
+    metadata: Record<string, string | number | boolean>;
+    status: XenoGoalStatus;
+    milestones: XenoGoalMilestone[];
+    tasks: XenoGoalTask[];
+    progress: XenoGoalProgress;
+    verification: XenoGoalVerification;
+    steering: Array<{
+        id: string;
+        instruction: string;
+        createdAt: string;
+        consumedAt?: string;
+    }>;
+    createdAt: string;
+    updatedAt: string;
+    completedAt?: string;
+}
+type XenoLoopKind = "agentic-development" | "goal-continuation" | "scheduled";
+type XenoLoopStatus = "running" | "paused" | "waiting" | "stopped" | "completed" | "failed";
+interface XenoLoopSchedule {
+    kind: "fixed-interval" | "dynamic";
+    intervalMs?: number;
+    nextRunAt?: string;
+    expiresAt?: string;
+}
+interface XenoLoopIteration {
+    number: number;
+    startedAt: string;
+    completedAt?: string;
+    status: "running" | "completed" | "failed" | "interrupted";
+    activity: string;
+    taskId?: string;
+    verificationEventId?: string;
+    error?: string;
+}
+interface XenoLoopRecord {
+    schemaVersion: typeof XENO_COORDINATION_SCHEMA_VERSION;
+    id: string;
+    version: number;
+    sessionId: string;
+    goalId?: string;
+    kind: XenoLoopKind;
+    status: XenoLoopStatus;
+    currentActivity?: string;
+    iterations: XenoLoopIteration[];
+    schedule?: XenoLoopSchedule;
+    stopReason?: string;
+    createdAt: string;
+    updatedAt: string;
+    stoppedAt?: string;
+}
+type XenoHandoffStatus = "prepared" | "available" | "claimed" | "completed" | "failed" | "cancelled";
+interface XenoHandoffOperation {
+    operationId: string;
+    kind: "tool" | "command" | "build" | "subagent" | "other";
+    status: "running" | "completed" | "interrupted";
+    sideEffecting: boolean;
+    recovery: "waited" | "resume" | "retry" | "manual";
+}
+interface XenoHandoffRecord {
+    schemaVersion: typeof XENO_COORDINATION_SCHEMA_VERSION;
+    id: string;
+    version: number;
+    sessionId: string;
+    goalId?: string;
+    loopId?: string;
+    status: XenoHandoffStatus;
+    sourceOwnerId: string;
+    targetOwnerId?: string;
+    claimedBy?: string;
+    sourceLeaseEpoch: number;
+    targetLeaseEpoch?: number;
+    workspace?: string;
+    branch?: string;
+    currentMilestoneId?: string;
+    currentTaskId?: string;
+    agentIds: string[];
+    operations: XenoHandoffOperation[];
+    contextDigest?: string;
+    createdAt: string;
+    updatedAt: string;
+    claimedAt?: string;
+    completedAt?: string;
+    failedAt?: string;
+    failureReason?: string;
+}
+interface XenoExecutionOwner {
+    ownerId: string;
+    leaseId: string;
+    epoch: number;
+    acquiredAt: string;
+    heartbeatAt: string;
+    expiresAt: string;
+    processId?: number;
+    host?: string;
+}
+type XenoCoordinationEventType = "goal.created" | "goal.updated" | "goal.steered" | "goal.completed" | "goal.cancelled" | "loop.started" | "loop.iteration" | "loop.paused" | "loop.waiting" | "loop.resumed" | "loop.stopped" | "loop.completed" | "loop.failed" | "handoff.created" | "handoff.claimed" | "handoff.completed" | "handoff.failed" | "ownership.acquired" | "ownership.renewed" | "ownership.released";
+interface XenoCoordinationEvent {
+    schemaVersion: typeof XENO_COORDINATION_SCHEMA_VERSION;
+    id: string;
+    sequence: number;
+    type: XenoCoordinationEventType;
+    sessionId: string;
+    goalId?: string;
+    loopId?: string;
+    handoffId?: string;
+    ownerId?: string;
+    timestamp: string;
+    data: Record<string, unknown>;
+}
+interface XenoCoordinationSessionState {
+    schemaVersion: typeof XENO_COORDINATION_SCHEMA_VERSION;
+    sessionId: string;
+    version: number;
+    ownershipEpoch: number;
+    owner?: XenoExecutionOwner;
+    goals: XenoGoalRecord[];
+    loops: XenoLoopRecord[];
+    handoffs: XenoHandoffRecord[];
+    events: XenoCoordinationEvent[];
+    createdAt: string;
+    updatedAt: string;
+}
+interface XenoCoordinationStoreOptions {
+    rootDirectory?: string;
+    now?: () => string;
+    idFactory?: (prefix: string) => string;
+    ownerLeaseMs?: number;
+    lockTimeoutMs?: number;
+    lockStaleMs?: number;
+    maximumEventsPerSession?: number;
+}
+interface CreateXenoGoalInput {
+    sessionId: string;
+    objective: string;
+    why?: string;
+    successCriteria?: Array<string | Omit<XenoGoalCriterion, "id"> & {
+        id?: string;
+    }>;
+    constraints?: string[];
+    limits?: XenoGoalRecord["limits"];
+    metadata?: Record<string, string | number | boolean>;
+}
+interface CreateXenoHandoffInput {
+    sessionId: string;
+    sourceOwnerId: string;
+    sourceLeaseId: string;
+    goalId?: string;
+    loopId?: string;
+    targetOwnerId?: string;
+    workspace?: string;
+    branch?: string;
+    currentMilestoneId?: string;
+    currentTaskId?: string;
+    agentIds?: string[];
+    operations?: XenoHandoffOperation[];
+    contextDigest?: string;
+}
+declare class XenoCoordinationError extends Error {
+    readonly code: "INVALID" | "NOT_FOUND" | "CONFLICT" | "NOT_OWNER" | "LEASE_EXPIRED" | "UNSAFE_HANDOFF" | "VERIFICATION_REQUIRED";
+    readonly details: Record<string, unknown>;
+    constructor(code: "INVALID" | "NOT_FOUND" | "CONFLICT" | "NOT_OWNER" | "LEASE_EXPIRED" | "UNSAFE_HANDOFF" | "VERIFICATION_REQUIRED", message: string, details?: Record<string, unknown>);
+}
+interface UpdateXenoGoalInput {
+    objective?: string;
+    why?: string;
+    constraints?: string[];
+    successCriteria?: XenoGoalCriterion[];
+    status?: Exclude<XenoGoalStatus, "completed">;
+    progress?: Partial<Omit<XenoGoalProgress, "updatedAt">>;
+    verification?: XenoGoalVerification;
+    metadata?: Record<string, string | number | boolean>;
+}
+interface StartXenoLoopInput {
+    sessionId: string;
+    goalId?: string;
+    kind: XenoLoopKind;
+    activity?: string;
+    schedule?: XenoLoopSchedule;
+}
+interface ClaimXenoHandoffInput {
+    sessionId: string;
+    handoffId: string;
+    targetOwnerId: string;
+    processId?: number;
+    host?: string;
+}
+declare class DurableXenoCoordinationStore {
+    private readonly rootDirectory;
+    private readonly now;
+    private readonly idFactory;
+    private readonly ownerLeaseMs;
+    private readonly lockTimeoutMs;
+    private readonly lockStaleMs;
+    private readonly maximumEventsPerSession;
+    constructor(options?: XenoCoordinationStoreOptions);
+    getSessionState(sessionId: string): Promise<XenoCoordinationSessionState>;
+    listSessionStates(): Promise<XenoCoordinationSessionState[]>;
+    createGoal(input: CreateXenoGoalInput): Promise<XenoGoalRecord>;
+    getGoal(sessionId: string, goalId?: string): Promise<XenoGoalRecord | undefined>;
+    updateGoal(sessionId: string, goalId: string, expectedVersion: number, update: UpdateXenoGoalInput): Promise<XenoGoalRecord>;
+    addMilestone(sessionId: string, goalId: string, expectedVersion: number, input: {
+        title: string;
+        description?: string;
+    }): Promise<XenoGoalRecord>;
+    addTask(sessionId: string, goalId: string, expectedVersion: number, input: {
+        milestoneId: string;
+        parentTaskId?: string;
+        title: string;
+        description?: string;
+        assignedAgentId?: string;
+        dependsOn?: string[];
+    }): Promise<XenoGoalRecord>;
+    updateTask(sessionId: string, goalId: string, taskId: string, expectedVersion: number, update: Pick<XenoGoalTask, "status"> & Partial<Pick<XenoGoalTask, "progress" | "resultEventId" | "assignedAgentId">>): Promise<XenoGoalRecord>;
+    steerGoal(sessionId: string, goalId: string, expectedVersion: number, instruction: string): Promise<XenoGoalRecord>;
+    consumeGoalSteering(sessionId: string, goalId: string, expectedVersion: number): Promise<{
+        goal: XenoGoalRecord;
+        instructions: Array<{
+            id: string;
+            instruction: string;
+            createdAt: string;
+        }>;
+    }>;
+    completeGoal(sessionId: string, goalId: string, expectedVersion: number, verification: XenoGoalVerification): Promise<XenoGoalRecord>;
+    cancelGoal(sessionId: string, goalId: string, expectedVersion: number, reason: string): Promise<XenoGoalRecord>;
+    startLoop(input: StartXenoLoopInput): Promise<XenoLoopRecord>;
+    getLoop(sessionId: string, loopId?: string): Promise<XenoLoopRecord | undefined>;
+    beginLoopIteration(sessionId: string, loopId: string, expectedVersion: number, activity: string, taskId?: string): Promise<XenoLoopRecord>;
+    finishLoopIteration(sessionId: string, loopId: string, expectedVersion: number, result: {
+        status: "completed" | "failed" | "interrupted";
+        verificationEventId?: string;
+        error?: string;
+        nextStatus?: Extract<XenoLoopStatus, "running" | "waiting" | "failed">;
+    }): Promise<XenoLoopRecord>;
+    setLoopStatus(sessionId: string, loopId: string, expectedVersion: number, status: Extract<XenoLoopStatus, "paused" | "running" | "waiting" | "stopped" | "completed" | "failed">, reason?: string): Promise<XenoLoopRecord>;
+    acquireOwnership(sessionId: string, ownerId: string, options?: {
+        processId?: number;
+        host?: string;
+        leaseMs?: number;
+    }): Promise<XenoExecutionOwner>;
+    renewOwnership(sessionId: string, ownerId: string, leaseId: string, leaseMs?: number): Promise<XenoExecutionOwner>;
+    releaseOwnership(sessionId: string, ownerId: string, leaseId: string): Promise<XenoExecutionOwner>;
+    createHandoff(input: CreateXenoHandoffInput): Promise<XenoHandoffRecord>;
+    claimHandoff(input: ClaimXenoHandoffInput): Promise<{
+        handoff: XenoHandoffRecord;
+        owner: XenoExecutionOwner;
+    }>;
+    completeHandoff(sessionId: string, handoffId: string, ownerId: string, leaseId: string): Promise<XenoHandoffRecord>;
+    failHandoff(sessionId: string, handoffId: string, reason: string): Promise<XenoHandoffRecord>;
+    private mutateGoal;
+    private mutateLoop;
+    private recalculateProgress;
+    private requireGoal;
+    private requireOwner;
+    private assertVersion;
+    private newOwner;
+    private ownerExpired;
+    private appendEvent;
+    private mutate;
+    private statePath;
+    private lockPath;
+    private readState;
+    private writeState;
+    private renameReplacing;
+    private withSessionLock;
+    private staleLockOwner;
+    private quarantineLock;
+}
+type XenoCoordinationAction = "state.get" | "goal.create" | "goal.update" | "goal.complete" | "goal.cancel" | "goal.steer" | "loop.start" | "loop.get" | "loop.begin" | "loop.finish" | "loop.set_status" | "ownership.acquire" | "ownership.renew" | "ownership.release" | "handoff.create" | "handoff.claim" | "handoff.complete" | "handoff.fail";
+interface ExecuteXenoCoordinationActionInput {
+    action: XenoCoordinationAction;
+    sessionId: string;
+    payload?: Record<string, unknown>;
+}
+interface ExecuteXenoCoordinationActionResult {
+    action: XenoCoordinationAction;
+    sessionId: string;
+    result: unknown;
+    state: XenoCoordinationSessionState;
+    event?: XenoCoordinationEvent;
+}
+declare function executeXenoCoordinationAction(store: DurableXenoCoordinationStore, input: ExecuteXenoCoordinationActionInput): Promise<ExecuteXenoCoordinationActionResult>;
+interface XenoExecutionLeaseSessionOptions {
+    store?: DurableXenoCoordinationStore;
+    sessionId: string;
+    ownerId?: string;
+    processId?: number;
+    host?: string;
+    leaseMs?: number;
+    heartbeatMs?: number;
+    claimHandoffId?: string;
+    onOwnershipLost?: (error: unknown) => void;
+}
+declare class XenoExecutionLeaseSession {
+    readonly sessionId: string;
+    readonly ownerId: string;
+    private readonly store;
+    private readonly processId;
+    private readonly host;
+    private readonly leaseMs;
+    private readonly heartbeatMs;
+    private readonly claimHandoffId?;
+    private readonly onOwnershipLost?;
+    private timer?;
+    private heartbeatInFlight;
+    private owner?;
+    private stopped;
+    private lostError?;
+    private preparedHandoffId?;
+    constructor(options: XenoExecutionLeaseSessionOptions);
+    get currentOwner(): XenoExecutionOwner | undefined;
+    get active(): boolean;
+    start(): Promise<XenoExecutionOwner>;
+    assertOwned(): Promise<XenoExecutionOwner>;
+    private renewHeldLease;
+    prepareHandoff(input?: Omit<CreateXenoHandoffInput, "sessionId" | "sourceOwnerId" | "sourceLeaseId">): Promise<XenoHandoffRecord>;
+    stop(options?: {
+        release?: boolean;
+    }): Promise<void>;
+    private heartbeat;
+    private markLost;
+}
 declare const XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION: 1;
 declare const XENO_HOSTED_RUN_SCHEMA_VERSION: 1;
 declare const XENO_HOSTED_EVENT_SCHEMA_VERSION: 1;
@@ -9374,6 +10083,7 @@ declare class SessionLock {
     private legacyLockPath;
     private sessionId;
     private heartbeatTimer?;
+    private acquiredOwner?;
     constructor(sessionDir: string);
     acquire(): Promise<void>;
     release(): Promise<void>;
@@ -12594,4 +13304,4 @@ declare class AgentEvaluator {
     clearResults(): void;
     get resultCount(): number;
 }
-export { type A2AMessage, type A2AMessageType, AGENT_DAEMON_PROTOCOL_VERSION, AGENT_EFFORT_LEVELS, AGENT_PERMISSION_MODES, AGENT_PROFILE_EXTERNAL_ACTIONS, ARCHITECT_CAPABILITIES, ARCHITECT_TOOL_NAMES, type ActiveLayerInfo, type AddXenoArtifactCommentRequest, type AgentArtifact, type AgentCapabilities, type AgentCard, AgentDaemonClient, type AgentDaemonError, type AgentDaemonHandler, type AgentDaemonRequest, type AgentDaemonResponse, AgentDaemonServer, type AgentDaemonTransport, AgentDebugger, type AgentDefinition, type AgentDefinitionIsolation, type AgentDefinitionIssue, AgentDefinitionLoader, type AgentDefinitionLoaderOptions, type AgentDefinitionMetadata, AgentDefinitionResolver, type AgentDefinitionScanResult, type AgentDefinitionScope, type AgentDefinitionShadowRef, type AgentEffortLevel, AgentEvaluator, AgentEventStore, type AgentHookDefinition, AgentHookRunner, AgentInterruptedError, type AgentIpcChannel, type AgentLoadSnapshot, AgentLoop, type AgentLoopConfig, type AgentLoopOptions, type AgentPermissionMode, type AgentProfileActionDecision, type AgentProfileCapabilities, type AgentProfileCapabilityBoundary, type AgentProfileCollaborationMode, type AgentProfileCompletionPolicy, type AgentProfileEvidenceKind, type AgentProfileExecutionPolicy, type AgentProfileExternalAction, type AgentProfileExternalActionPolicy, type AgentProfileIsolation, type AgentProfileKind, type AgentProfileMemoryPolicy, type AgentProfileMemoryScope, type AgentProfilePresentation, type AgentProfileSkillPolicy, type AgentProfileSoulMode, type AgentProfileV2, AgentProfileValidationError, AgentProtocol, AgentRegistry, type AgentRunAgentDefinitionRef, AgentRunController, type AgentRunControllerOptions, type AgentRunCreateInput, AgentRunError, type AgentRunEvent, type AgentRunListOptions, type AgentRunOptions, type AgentRunRecord, type AgentRunSpawnResult, type AgentRunStatus, AgentRunStore, type AgentRunTermination, type AgentRunTerminationReason, type AgentRunTerminationStatus, type AgentRunUsage, type AgentSandbox, type AgentSelectionStrategy, type AgentSessionHostBindingV1, type AgentStreamCallbacks, type AgentTask, type AgentTaskHandler, type AgentTaskResult, type AgentTaskStatus, type AgentTeam, type AgentToAppChannel, type AgentToAppMessages, type AgentToolPolicy, type AnalysisResult, type ApiMessage, type AppAgentBaseOptions, AppAgentFactory, type AppAgentResult, type AppContext, AppContextInjector, AppContextManager, type AppContextProvider, type AppId, type AppServerEventV2, type AppServerInitializeParamsV2, type AppServerInitializeResultV2, type AppServerIntegrationMetadataV2, type AppServerPermissionRequestV2, type AppServerPrincipalV2, AppServerProtocolError, type AppServerProtocolErrorData, AppServerRemoteError, type AppServerRequestContext, type AppServerSubscriptionSnapshotV2, type AppServerThreadStatusV2, type AppServerThreadV2, type AppServerTurnRunnerContextV2, type AppServerTurnRunnerV2, type AppServerTurnStatusV2, type AppServerTurnV2, type AppServerV2ClientTransport, type AppServerV2MethodMap, type AppServerV2Options, type AppToAgentChannel, type AppToAgentMessages, type AppType, type ArchitectAgentOptions, type ArchitectToolAdapter, type AskUserHandler, type AskUserRequest, type AskUserResponse, type AtomicMessageGroup, type AudioProjectInfo, type AudioStemSeparationResult, type AudioToolAdapter, type AudioTrackType, type AudioTranscriptionResult, type AudioTranscriptionSegment, type AuditDecision, type AuditEvent, AuditLogger, type AuditReplayReport, type AuditReplayStep, type AuditRiskLevel, type AuditStatus, type AuditTraceGapEntry, type AuditTraceReport, type AuditTraceSummary, type AuditTraceTimelineEntry, type AuditTraceToolSummary, type AugmentContextOptions, type AuthorizedShellExecution, AutoCheckpointHandler, AutoMemory, type AutoMemoryContext, type AutoMemoryTrigger, AutoPermissionClassifier, type AutoPermissionDecision, BUILT_IN_XENO_PROVIDER_PRESETS, BackgroundProcessManager, type BackgroundTask, type BaseHookDefinition, type BenchBashMiddlewareOptions, type BlockContent, type BlockType, type BoundedShellOutput, type BreakpointCallback, type BuildResult, type BuildXenoSecureExecutionContractOptions, COMPAT_TOOL_ALIASES, CONFIG_VERSION, type CanonicalSecurityPath, type CanvasSize, type CellRangeData, type ChartConfig, type ChatCompletionChunk, type ChatCompletionRequest, type ChatCompletionResponse, type ChatMessage, type ChatParams, type ChatResponse, type CheckpointData, type CheckpointInfo, CheckpointManager, type CheckpointTrigger, type ClashResult, type ClipContext, type CodeApplyOptions, type CodeApplyResult, type CodeValidationIssue, type CodeValidationResult, CodeValidator, type CodingBenchmarkAssessment, type CodingBenchmarkMeasurement, type CodingBenchmarkOptions, type CodingBenchmarkReport, type CodingBenchmarkThreshold, type CommandBackedProtectedStateOptions, type CommandHookDefinition, CommandHookRunner, type CompactionRecord, type CompileAgentProfileOptions, type CompiledAgentProfile, type CompiledJsonSchema, type CompletionDecision, type CompletionGuard, type CompletionGuardContext, type CompletionGuardDecision, type CompletionGuardEvaluationContext, CompletionGuardRegistry, type CompletionGuardResult, type CompletionGuardResultObject, type CompletionGuardStopReason, type CompletionGuardToolPolicy, type CompletionGuardToolPolicyMode, type CompletionGuardTurnStats, type CompletionGuardVeto, type ComponentData, type CompressionLLMFn, type CompressionStats, type ConfigProfile, type ConnectConfiguredMCPServersOptions, type ConnectConfiguredMCPServersResult, type ContainedProcessSpec, type ContainmentAdapterIdentity, ContainmentApprovalError, type ContainmentCertificationBinding, ContainmentCertificationError, type ContainmentConformanceCheck, type ContentBlock, type ContextCompressedData, ContextManager, type ContextManagerConfig, type ContextSection, type ContextSource, type ControlPlaneLockHandle, type ControlPlaneLockRecord, ConversationStore, type CreateAuditBackedPermissionEngineOptions, type CreateDelegatedBranchAgent, type CreateDelegatedBranchAgentOptions, type CreateDelegatedXenoAgentOptions, type CreateXenoAgentOptions, type CreateXenoAgentResult, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHandoffOptions, type CreateXenoShareOptions, type CreateXenoSkillToolOptions, type CreateXenoSourceResearchReportInput, type CrossAppHandler, type CrossAppMessage, CrossAppRouter, CrossAppRouterError, type CrossAppRouterOptions, DEFAULT_API_KEY, DEFAULT_IMAGE_MODEL, DEFAULT_MEMORY_BUDGETS, DEFAULT_MODEL, DEFAULT_PROMPT_SECTIONS_TOKEN_BUDGET, DEFAULT_PROTECTED_STATE_KEY_NAME, DEFAULT_PROTECTED_STATE_SERVICE, DEFAULT_SUBAGENT_BRANCH_POLICY, DEFAULT_SUBAGENT_REMOTE_MCP_BY_ROLE, DEFAULT_SUBAGENT_ROLES, DEFAULT_SUBAGENT_ROLE_PRECEDENCE, DEFAULT_SUBAGENT_TEAM_PRESET, DIRECT_SHELL_CONTEXT_WARNING, DOCS_CAPABILITIES, DOCS_TOOL_NAMES, type DebugBreakpoint, type DebugSnapshot, type DebugStep, type DebugStepCallback, type DecideXenoArtifactRequest, type DefaultToolRegistryOptions, type DelegatedBranchAdmission, type DelegatedBranchAdmissionSettlement, type DelegatedBranchAgent, type DelegatedBranchAgentCallbacks, type DelegatedXenoTurnResult, type DelegationBudget, type DelegationLimits, type DelegationSummaryData, type DependencyEdge, type DescendantInstructionHint, type DirectEndpointPolicy, type DirectEndpointProfile, type DirectProviderCapabilityProfile, type DirectProviderConfig, type DirectProviderKind, type DirectShellMessageMetadata, type DirectShellResultRecord, type DispatchAgentHandler, type DispatchAgentRequest, type DispatchAgentResponse, type DocComment, type DocsAgentOptions, type DocsToolAdapter, type DocumentContext, type DualLLMMode, DualLLMProvider, type DualLLMProviderConfig, type DualLLMProviderLike, type DualLLMStatus, ENGINE_CAPABILITIES, ENGINE_TOOL_NAMES, ElectronAgentBridge, type ElectronAgentConfig, type EngineAgentOptions, type EngineToolAdapter, type EntityInfo, type Episode, type EpisodeOutcome, EpisodicStore, type EpisodicStoreOptions, type ErrorData, type EvalReport, type EvalResult, type EvalRunOptions, type EvalTask, type ExchangeMCPOAuthCodeOptions, type ExecuteToolRequest, type ExecuteToolResult, ExecutionGovernance, type ExecutionGovernanceOptions, type ExecutionGovernanceSummary, type ExecutionMode, type ExecutionSecurityCapabilities, ExecutionSecurityError, type ExecutionSecurityErrorCode, type ExecutionSecurityLevel, type ExecutionTrustMode, type ExpectedOutputContract, type ExportableSoulSigner, type ExtendedAppType, FALLBACK_MODELS, type FailureCluster, type FileEntry, type FileSnapshot, FileXenoArtifactRepository, type FileXenoArtifactRepositoryOptions, FileXenoProviderConnectionStore, type FileXenoProviderConnectionStoreOptions, FileXenoShareRegistry, type FileXenoShareRegistryOptions, type FilterConfig, type GovernanceExtensions, type GovernanceExtensionsOptions, HIGH_RISK_PERMISSIONS, type HarnessTask, type HarnessTaskStatus, type HarnessTaskUpdate, type HookConfig, type HookDecision, type HookDefinition, type HookEventName, type HookExecutionResult, type HookExecutionStatus, type HookInput, type HookInputBase, type HookInvocationInput, type HookModelExecutor, type HookPermissionMode, type HookRunResult, HookRunner, HookRuntime, type HookRuntimeOptions, type HttpHookDefinition, HttpHookRunner, IDENTITY_PATHS, type IdentityFrontmatter, type IdentityLayer, type IdentityLoadResult, IdentityLoader, type IdentityLoaderOptions, type IdentityPaths, IdentityResolver, type IdentitySource, type ImageContentBlock, type ImageDocumentInfo, type ImageGenerationConfig, type ImageLayerInfo, type ImageLayerType, type ImageToolAdapter, type ImageUrlBlock, InMemoryXenoArtifactRepository, type InMemoryXenoArtifactRepositoryOptions, InMemoryXenoCapabilityLeaseRegistry, type InMemoryXenoCapabilityLeaseRegistryOptions, InMemoryXenoTelemetryCollector, type InitializeSessionRuntimeOptions, type InspectSystemPromptOptions, type InstallSignalHandlersOptions, InteractiveChatTurnGovernance, InteractiveTurnGovernance, type InteractiveTurnGovernanceOptions, type IpcHandler, type JsonRpcErrorResponse, type JsonRpcMessage$1 as JsonRpcMessage, type JsonRpcNotification, type JsonRpcRequest$1 as JsonRpcRequest, type JsonRpcResponse, type JsonRpcSuccessResponse, type JsonSchema, JsonSchemaCompilationError, type JsonSchemaCompilationIssue, type JsonSchemaCompileOptions, type JsonSchemaSubset, type JsonSchemaType, type JsonSchemaValidationError, type JsonSchemaValidationResult, type LLMCompletionResult, type LLMProvider, type LLMProviderCapabilities, type LLMProviderMessage, type LLMProviderRequestContext, type ToolDefinition as LLMProviderToolDefinition, type LLMToolDefinition, type LayerContext, type LegacyXenoSkillInput, type LinuxBubblewrapCapability, type LinuxBubblewrapProcessSpec, LlmClient, type LlmClientDeps, LocalLLMProvider, type LocalLLMProviderConfig, type LocalRuntimePreflightResult, LogLevel, type LspDefinitionReport, type LspDiagnosticsReport, type LspDoctorReport, type LspDoctorServer, type LspHoverReport, type LspReferencesReport, MANIFEST_FILENAME, MAX_CONTAINMENT_APPROVAL_AGE_MS, MAX_CONTAINMENT_CERTIFICATION_BYTES, MAX_CONTAINMENT_CERTIFICATION_LIFETIME_MS, MAX_DIRECT_SHELL_OUTPUT_CHARS, type MCPAppCapabilities, type MCPAppContentSecurityPolicy, type MCPAppExtensionMetadata, type MCPAppMetadata, type MCPAppPermissions, type MCPAppResourceDescriptor, type MCPAppValidationResult, type MCPAppVisibility, type MCPApprovalDecision, type MCPBearerTokenRefreshHandler, type MCPBearerTokenResolver, type MCPConfigFile, type MCPConfiguredServer, type MCPElicitationAction, type MCPElicitationHandler, type MCPElicitationRequest, type MCPElicitationResponse, type MCPHttpAuthChallenge, MCPHttpTransportError, type MCPHttpUrlPhase, type MCPInitializeParams, type MCPInitializeResult, MCPManager, type MCPManagerOptions, type MCPOAuthAuthorizationServerMetadata, type MCPOAuthAuthorizationSession, MCPOAuthClient, type MCPOAuthClientOptions, type MCPOAuthClientRegistration, type MCPOAuthClientRegistrationSource, type MCPOAuthConfig, type MCPOAuthDiscoveryResult, type MCPOAuthProtectedResourceMetadata, type MCPOAuthTokenSet, type MCPOAuthTokenStore, type MCPOAuthUrlPhase, type MCPPrompt, type MCPPromptGetParams, type MCPPromptGetResult, type MCPPromptsListResult, type MCPRegistryAccessPolicy, type MCPRegistryEntryDescriptor, type MCPRegistryEntryKind, type MCPRegistryFilter, type MCPResource, type MCPResourceReadParams, type MCPResourceReadResult, type MCPResourceSubscribeParams, type MCPResourceUnsubscribeParams, type MCPResourcesListResult, MCPServer, type MCPServerConfig, type MCPServerModeOptions, type MCPServerPromptRegistration, type MCPServerResourceRegistration, type MCPServerScope, type MCPServerState, type MCPTool, type MCPToolCallParams, type MCPToolCallResult, type MCPToolsListResult, type MCPTransport, type MCPTransportConnection, MCP_APPS_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_SCHEME, MCP_PROTOCOL_VERSION, MCP_SUPPORTED_PROTOCOL_VERSIONS, MEMORY_FILES, MOTION_CAPABILITIES, MOTION_SYSTEM_PROMPT, MOTION_TOOL_NAMES, type ManifestValidationResult, type MaterialConfig, type MaterializeXenoAutomationEvidenceOptions, type MemoryAccessScope, type MemoryBudget, type MemoryEntry, type MemoryFile, type MemoryLevel, MemoryManager, type MemoryManagerOptions, type MeshInfo, type Message, MessageFlow, type MessageFlowDeps, type ModeSwitchRequest, type ModelInfo, type ModelProvider, ModelProviderRegistry, type MonitorEvent, MonitorManager, type MonitorSnapshot, type MonitorSource, MonitorStopTool, MonitorTool, type MotionAgentOptions, type MotionPromptParams, type MxcContainmentProbe, type MxcNativeAssetDescriptor, type MxcWindowsHostPreparationReport, NOTES_CAPABILITIES, NOTES_TOOL_NAMES, type NormalizedLspDiagnostic, type NormalizedLspHover, type NormalizedLspLocation, type NormalizedLspRange, type NotePageInfo, type NoteSearchResult, type NotesAgentOptions, type NotesToolAdapter, type OnChunkCallback, type OnTaskCompleteInput, type OnTaskCompleteResult, type OpenTelemetryMetricAdapter, type OperationTaskSource, type OsProtectedStateStoreOptions, OtelExporter, type OtelUsageAdapter, PIXEL_CAPABILITIES, PIXEL_SYSTEM_PROMPT, PIXEL_TOOL_NAMES, PROCESS_TREE_ADAPTERS, PROJECT_STATE_VERSION, type ParameterizedPermissionRule, type ParseUnifiedDiffOptions, type PermissionConfig, type PermissionDecision, type PermissionDecisionEvent, type PermissionDecisionHook, PermissionEngine, type PermissionInfo, type PermissionProfile, type PermissionProfileDecision, type PermissionProfileMode, type PermissionProfileName, type PermissionProfileNetworkDecision, type PermissionProfileResolution, type PermissionPromptFn, type PermissionPromptInfo, type PermissionPromptOperation, type PermissionPromptPreview, type PermissionPromptPreviewLine, type PermissionRequestContext, type PermissionRequestInfo, type PermissionRequestResult, type PermissionRule, type PersistentPermissionState, type PixelAgentOptions, type PixelPromptParams, type PlatformInfo, type PluginActivationEvent, type PluginAuthor, type PluginCapability, type PluginCommandContribution, type PluginCommandHandler, type PluginContext, type PluginContributions, type PluginDetachedSignature, type PluginEngineConstraint, type PluginEvent, PluginEventBus, type PluginEventListener, type PluginEventType, type PluginHook, PluginHost, type PluginHostInfo, type PluginHostOptions, type PluginInfo, type PluginListing, type PluginLogger, PluginManager, type PluginManagerOptions, type PluginManifest, PluginMarketplace, type PluginMarketplaceOptions, type PluginOutputStyleContribution, type PluginPermission, type PluginPromptContribution, type PluginPublishOptions, type PluginRelevanceCandidate, type PluginRelevanceHints, type PluginRelevanceSuggestion, type PluginRepositorySignal, PluginSandbox, type PluginSandboxOptions, type PluginScaffoldOptions, type PluginSearchOptions, type PluginSettingContribution, PluginSettingsManager, type PluginSignatureStatus, type PluginStatus, type PluginStorage, type PluginSupplyChainLockfile, type PluginSupplyChainRecord, type PluginTestCase, type PluginTestResult, PluginToolBuilder, type PluginToolContribution, type PluginTrustBadge, type PluginUIPanel, type PolicyCheckResult, type PolicyEnforcerConfig, type PrepareMCPOAuthAuthorizationOptions, type ProbeXenoProviderOptions, type ProcessContainmentStatus, type ProcessTreeAdapter, type ProfileMCPServerConfig, ProfileManager, type ProjectConfig, type ProjectDomainProfile, type ProjectExecutionPhase, type ProjectExecutionProfile, type ProjectInfo, type ProjectMcpApprovalDecision, type ProjectSessionContext, type ProjectSessionContextEntry, type ProjectSessionSummary, type ProjectTokenUsageSummary, type PromotionRequestResult, type PromptContext, type PromptFn, type PromptHookDefinition, PromptHookRunner, type PromptMemoryContextInfo, type PromptSectionContext, type PromptSectionProvider, PromptSectionRegistry, type ProtectedStateCipher, type ProtectedStateEnvelopeCipher, type ProtectedStateEnvelopeCipherOptions, type ProtectedStateEnvelopeV1, type ProtectedStateStore, ProviderError, type ProviderErrorCategory, type ProviderErrorCode, type ProviderErrorOptions, type ProviderStatus, type ProviderStreamEvent, type ProviderTransportLimits, QueryLifecycle, type QueryLifecycleOptions, type QueryState, type QueryTransition, type QueryWatchdogReason, REQUIRED_CONTAINMENT_CONFORMANCE_CHECKS, type RecalledEpisode, type RecalledSkill, type RecentSessionEntry, type RecentSessionsIndex, type ReducedResult, type ReducerOptions, type RegisterToolOperationInput, type RegisteredTool, type RenderConfig, type RequestBudgetBreakdown, type ResolveXenoSdkApiKeyOptions, type ResolvedIdentity, type ResolvedMemory, type ResolvedProvider, type ResolvedSubagentWorkflowAnswer, type ResourceContentBlock, type RoomInfo, type RunContainmentConformanceOptions, type RunDelegatedXenoTurnOptions, type RunStreamOptions, type RuntimeManifestFileEntry, type RuntimeManifestInspectionResult, type RuntimePluginManifestEntry, SDK_DEFAULT_MAX_ITERATIONS, SDK_DEFAULT_MAX_TOKENS, SDK_VERSION, SESSION_FORMAT_VERSION, SHEETS_CAPABILITIES, SHEETS_TOOL_NAMES, SLIDES_CAPABILITIES, SLIDES_TOOL_NAMES, SOUND_CAPABILITIES, SOUND_SYSTEM_PROMPT, SOUND_TOOL_NAMES, SSETransport, SUBAGENT_ROLE_ALIASES, SUBAGENT_TEAM_PRESETS, type SandboxCheckResult, type ScoredMemory, ScreenCapture, type ScreenCaptureConfig, type ScreenCaptureOptions, type SearchConfig, type SearchProvider, type SecuredProcessSpec, type SecurityPathIssue, type SecurityPathIssueCode, type Session, type SessionCreateOptions, type SessionData, type SessionEndData, type SessionIntegrationConfig, SessionLock, SessionLock as SessionLockManager, SessionManager, type SessionMeta, SessionRegistry, type SessionResumeOptions, type SessionRuntimeBaseOptions, type SessionRuntimeState, type SessionStartData, type SessionStatus, type SessionSummary, type SetXenoArtifactCommentResolutionRequest, type SetupAIHandlersOptions, type ShapeConfig, type SheetsAgentOptions, type SheetsToolAdapter, type ShellExecutionAuthorization, type ShellExecutionAuthorizationRequest, type ShellPathReference, type ShutdownCleanup, type Skill, SkillStore, type SkillStoreOptions, type SlideInfo, type SlidesAgentOptions, type SlidesToolAdapter, type SortConfig, type SoulCompletion, SoulEngine, type SoulEngineOptions, type SoulMessage, type SoulSigner, type SoundAgentOptions, type SoundPromptParams, type SpeechRecognizer, type SpeechRecognizerCallbacks, type SpeechRecognizerConfig, StdioTransport, type StemSeparationResult, type StopReason, type StoredConversation, type StoredMessage, type StoredToolCall, type StreamResult, StreamableHTTPTransport, type StreamableHTTPTransportOptions, type StreamableHTTPTransportSnapshot, type SubagentBranchPolicy, type SubagentBriefContext, type SubagentExecuteFn, type SubagentExecutionRequest, type SubagentExecutionResponse, type SubagentRemoteMcpAccess, type SubagentResult, type SubagentRole, type SubagentTask, type SubagentTeamPreset, type SubagentTeamPresetDefinition, type SubagentWorkflowMode, type SubagentWorkflowOptions, type SubagentWorkflowResult, type SynthesizeSkillInput, type SystemPromptInspectionResult, THREE_D_CAPABILITIES, THREE_D_TOOL_NAMES, TOOL_OPERATION_SCHEMA_VERSION, type TaskCompletionCallback, TaskListManager, type TestResult, type TextBlock, type ThreeDAgentOptions, type ThreeDToolAdapter, type TimelineInfo, type TokenUsageTotals, type ToolAssistantContentBlock, type ToolAuthorizationReceipt, type ToolCallData, type ToolCompletionPolicy, type ToolContinuationCheckpoint, type ToolContinuationNotification, type ToolDefinition, type ToolEvidence, type ToolExchangeRepairResult, type ToolExecutionContext, type ToolExecutor, type ToolFailureCategory, type ToolFailureGuardTrip, ToolFailureLoopGuard, type ToolHistoryRepairDiagnostic, type ToolManifestEntry, type ToolMiddleware, type ToolMiddlewareContext, ToolMiddlewareRegistry, type ToolOperationEvent, ToolOperationManager, type ToolOperationRuntimeEventType, type ToolOperationSnapshot, type ToolOperationState, ToolOrchestrator, type ToolOrchestratorCallbacks, type ToolOrchestratorConfig, type ToolPolicyProjection, type ToolProgressUpdate, ToolRegistry, type ToolRegistryOptions, type ToolResult, type ToolResultBlock, type ToolResultContent, type ToolResultData, type ToolRiskLevel, type ToolRuntimeContext, type ToolSchemaProjectionChange, ToolSchemaProjectionError, type ToolSchemaProjectionResult, type ToolSchemaProviderDialect, type ToolUseBlock, type TraceGraph, type TraceGraphEdge, type TraceGraphNode, type TrackContext, type TranscriptEvent, type TranscriptEventData, type TranscriptEventType, TranscriptWriter, type TranscriptionResult, type TranscriptionSegment, type TransitionConfig, type TurnDiffSummary, TurnDiffTracker, type TurnDiffTrackerOptions, type TurnFileDiff, type TurnRestoreAvailability, type TurnRestoreFilePreview, TurnRestoreManager, type TurnRestorePoint, type TurnRestoreResult, UNBOUNDED_OPERATION_CONTINUATION_LIMIT, type UnifiedExecCompletionReason, UnifiedExecError, type UnifiedExecEvent, type UnifiedExecEventListener, type UnifiedExecEventType, type UnifiedExecInputSource, UnifiedExecManager, type UnifiedExecManagerOptions, type UnifiedExecMode, type UnifiedExecOrigin, type UnifiedExecOutput, type UnifiedExecOutputChunk, type UnifiedExecOutputDelta, type UnifiedExecPresentation, type UnifiedExecProcess, type UnifiedExecReadDeltaOptions, type UnifiedExecStartOptions, type UnifiedExecStatus, type UnifiedExecStream, UsageAccumulator, type UsageAttribution, type UsageEvent, UsageLedger, type UsageQuery, type UsageTotals, type ValidateXenoSdkApiKeyOptions, type ValidatedContainmentCertification, type ValidationSignal, type VectorDocument, VectorMemoryStore, type VectorSearchResult, type VectorStoreAdapter, type VectorStoreOptions, type VerifyContainmentApprovalExpected, type VerifyPluginSupplyChainOptions, type VerifyPluginSupplyChainResult, type VerifyXenoHostedWebhookOptions, type VerifyXenoShareOptions, type VideoToolAdapter, WORKFLOW_CAPABILITIES, WORKFLOW_TOOL_NAMES, type WebSearchResult, type WindowsDpapiCredentialFile, type WindowsDpapiProtectedFileOptions, type WindowsDpapiProtectedStateOptions, type WorkflowAgentOptions, type WorkflowDefinition, type WorkflowEvent, type WorkflowExecutionResult, type WorkflowInfo, type WorkflowNodeConfig, type WorkflowNodeDefinition, type WorkflowNodeExecutor, type WorkflowNodeStatus, type WorkflowPlan, WorkflowPlanner, type WorkflowRunNodeRecord, type WorkflowRunRecord, type WorkflowRunStatus, WorkflowRuntime, WorkflowStore, type WorkflowToolAdapter, WorkspaceIndex, type WorkspaceScanOptions, XENO_AGENT_PROFILE_SCHEMA_VERSION, XENO_API_BASE, XENO_APP_PROTOCOL_V2_METHODS, XENO_APP_PROTOCOL_VERSIONS, XENO_ARTIFACT_ACTOR_KINDS, XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION, XENO_ARTIFACT_SCHEMA_VERSION, XENO_ARTIFACT_SENSITIVITIES, XENO_ARTIFACT_STATES, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BUILTIN_ARTIFACT_KINDS, XENO_CAPABILITY_LEASE_SCHEMA_VERSION, XENO_CONTAINMENT_APPROVAL_SCHEMA, XENO_CONTAINMENT_CERTIFICATION_SCHEMA, XENO_CONTAINMENT_CONFORMANCE_SCHEMA, XENO_CONTAINMENT_REVIEWER_TRUST_STORE_SCHEMA, XENO_CONTROL_ROOM_SCHEMA_VERSION, XENO_DEFLATE_CODEC_NAME, XENO_DEFLATE_CODEC_VERSION, XENO_EVIDENCE_EDGE_TYPES, XENO_EVIDENCE_GRAPH_SCHEMA_VERSION, XENO_EVIDENCE_NODE_TYPES, XENO_GIF_ANIMATION_POLICY, XENO_GIF_CODEC_NAME, XENO_GIF_CODEC_VERSION, XENO_HANDOFF_SCHEMA_VERSION, XENO_HOSTED_CONTROL_SCHEMA_VERSION, XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION, XENO_HOSTED_EVENT_SCHEMA_VERSION, XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA, XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS, XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_TOOL_NAMES, XENO_HOSTED_RESULT_SCHEMA_VERSION, XENO_HOSTED_RUN_SCHEMA_VERSION, XENO_HOSTED_TRIGGER_SCHEMA_VERSION, XENO_JPEG_CODEC_NAME, XENO_JPEG_CODEC_VERSION, XENO_MXC_ADAPTER_NAME, XENO_MXC_POLICY_VERSION, XENO_MXC_VERSION, XENO_ORACLE_REPORT_SCHEMA_VERSION, XENO_PLUGIN_LOCK_FILENAME, XENO_PLUGIN_LOCK_SCHEMA_VERSION, XENO_PLUGIN_SIGNATURE_FILENAME, XENO_PLUGIN_SIGNATURE_SCHEMA_VERSION, XENO_PROVIDER_CATALOG_SCHEMA_VERSION, XENO_PROVIDER_CONNECTION_STORE_SCHEMA_VERSION, XENO_RASTER_CODEC_NAME, XENO_RASTER_CODEC_VERSION, XENO_RASTER_PREVIEW_FORMATS, XENO_RECIPE_SCHEMA_VERSION, XENO_REPOSITORY_INDEX_SCHEMA_VERSION, XENO_REVIEW_DIMENSIONS, XENO_REVIEW_EVIDENCE_KINDS, XENO_REVIEW_REPORT_SCHEMA_VERSION, XENO_RT_DEFAULT_URL, XENO_SECURE_EXECUTION_CONTRACT_SCHEMA_VERSION, XENO_SHARE_REGISTRY_SCHEMA_VERSION, XENO_SHARE_SCHEMA_VERSION, XENO_SKILL_SCHEMA_VERSION, XENO_SOURCE_RESEARCH_SCHEMA_VERSION, XENO_SPEC_EXECUTION_SCHEMA_VERSION, XENO_SPEC_SCHEMA_VERSION, XENO_SVG_RENDERER_NAME, XENO_SVG_RENDERER_VERSION, XENO_TELEMETRY_SCHEMA_VERSION, XENO_VP8_CODEC_NAME, XENO_VP8_CODEC_VERSION, XENO_WEBP_ANIMATION_POLICY, XENO_WEBP_CODEC_NAME, XENO_WEBP_CODEC_VERSION, type XenoAnsiEscapeFamily, type XenoAnsiFormatter, type XenoAnsiPolicy, type XenoAnsiStyle, type XenoAnsiToken, type XenoAnsiWrapOptions, type XenoAppProtocolVersion, XenoAppServer, type XenoAppServerOptions, XenoAppServerV2Client, type XenoArtifactActor, type XenoArtifactActorKind, type XenoArtifactAnchor, type XenoArtifactAppendReviewRequest, type XenoArtifactContent, type XenoArtifactEnvelope, type XenoArtifactFileRecoveryNotice, type XenoArtifactFileSnapshot, type XenoArtifactIdentity, type XenoArtifactKind, type XenoArtifactLifecycleEvent, type XenoArtifactListQuery, type XenoArtifactMutationOptions, type XenoArtifactPersistedRecord, type XenoArtifactProvenance, type XenoArtifactRecord, type XenoArtifactRelationship, type XenoArtifactRepository, XenoArtifactRepositoryError, type XenoArtifactRepositoryErrorCode, type XenoArtifactRepositoryState, type XenoArtifactRetention, type XenoArtifactReviewAnchorInput, type XenoArtifactReviewDecision, type XenoArtifactReviewEvent, type XenoArtifactReviewEventInput, XenoArtifactReviewService, type XenoArtifactReviewServiceOptions, type XenoArtifactReviewSummary, type XenoArtifactRevisionOptions, type XenoArtifactSensitivity, type XenoArtifactState, XenoArtifactStateTransitionError, type XenoArtifactStorageReference, type XenoArtifactTransitionRequest, XenoArtifactValidationError, type XenoArtifactValidationIssue, XenoAuthError, type XenoAuthErrorCode, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBasicRasterImage, type XenoBrowserAutomationOperation, type XenoBrowserExecutionPolicy, type XenoCapabilityEffect, type XenoCapabilityEligibility, type XenoCapabilityKind, type XenoCapabilityLease, type XenoCapabilityLeaseApprovalContext, type XenoCapabilityLeaseApprovalRequest, type XenoCapabilityLeaseDenialRequest, XenoCapabilityLeaseError, type XenoCapabilityLeaseErrorCode, type XenoCapabilityLeaseRequest, type XenoCapabilityLeaseRevocationRequest, type XenoCapabilityLeaseState, type XenoCapabilityScope, type XenoCapabilitySubject, type XenoCapabilityUse, type XenoColorDepth, type XenoColorPolicy, type XenoCompiledRecipe, type XenoCompiledRecipeStep, type XenoComputerAutomationOperation, type XenoComputerExecutionPolicy, type XenoConfig, type XenoContainmentApprovalReport, type XenoContainmentCertificationApproval, type XenoContainmentCertificationManifest, type XenoContainmentConformanceReport, type XenoContainmentReviewerTrustStore, type XenoContentHash, type XenoControlRoomActionKind, type XenoControlRoomActionPlan, type XenoControlRoomActionRequest, type XenoControlRoomAgent, type XenoControlRoomAgentInput, type XenoControlRoomAgentStatus, type XenoControlRoomApprovalInput, type XenoControlRoomApprovalKind, type XenoControlRoomArtifactInput, type XenoControlRoomAttentionItem, type XenoControlRoomAttentionKind, type XenoControlRoomGoalInput, type XenoControlRoomInput, type XenoControlRoomMonitorInput, type XenoControlRoomNotificationInput, type XenoControlRoomProjectionOptions, type XenoControlRoomSnapshot, type XenoControlRoomStatusCategory, type XenoControlRoomSummary, type XenoControlRoomTask, type XenoControlRoomTaskInput, type XenoControlRoomUsage, XenoControlRoomValidationError, type XenoCreatedShare, type XenoCredentialSource, type XenoCredentialType, type XenoDesktopCaptureSource, type XenoDesktopCapturer, type XenoDiffArtifactContext, type XenoDiffDocument, type XenoDiffFile, type XenoDiffFileStatus, type XenoDiffHunk, type XenoDiffLine, type XenoDiffLineKind, type XenoDiffMode, XenoDiffParseError, type XenoEd25519Signature, type XenoEnvironmentExecutionPolicy, type XenoEvidenceEdge, type XenoEvidenceEdgeType, type XenoEvidenceGraph, XenoEvidenceGraphBuilder, type XenoEvidenceGraphBuilderOptions, XenoEvidenceGraphValidationError, type XenoEvidenceNode, type XenoEvidenceNodeType, type XenoEvidenceReference, type XenoExecutionAdapterIdentity, type XenoExecutionEnforcement, type XenoExecutionIdentity, type XenoExternalActionExecutionPolicy, type XenoFilesystemExecutionPolicy, type XenoGifAnimation, type XenoGifDisposal, type XenoGifFrame, type XenoGitHubReviewComment, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHandoffAuthority, type XenoHandoffPayload, type XenoHandoffResumePoint, type XenoHandoffTarget, type XenoHostedArchitecture, type XenoHostedAuthority, type XenoHostedBudget, type XenoHostedCacheMount, type XenoHostedControlAcknowledgement, type XenoHostedControlAction, type XenoHostedControlCommand, type XenoHostedControlCommandPayload, type XenoHostedEnvironmentManifest, type XenoHostedEnvironmentManifestPayload, type XenoHostedEventRecord, type XenoHostedExecutionAdapterCertification, type XenoHostedExecutionAdapterVerificationOptions, type XenoHostedExecutionBoundaryReceipt, type XenoHostedExecutionJob, type XenoHostedExecutionSecretValue, type XenoHostedImageReference, type XenoHostedNetworkDestination, type XenoHostedNetworkPolicy, type XenoHostedOs, type XenoHostedQuotaLease, type XenoHostedReplayCursor, type XenoHostedReplayPage, type XenoHostedRepositorySource, type XenoHostedResourceLimits, type XenoHostedRetentionPolicy, type XenoHostedRunRecord, type XenoHostedRunRequest, type XenoHostedRunResult, type XenoHostedRunResultPayload, type XenoHostedRunStatus, type XenoHostedSecretProjection, type XenoHostedSetupStep, type XenoHostedTriggerDefinition, type XenoHostedTriggerDelivery, type XenoHostedTriggerKind, type XenoHostedWebhookSource, type XenoHostedWebhookVerification, type XenoJsonObject, type XenoJsonPrimitive, type XenoJsonValue, type XenoJwtPayload, type XenoLegacyAgentArtifactContext, type XenoLegacyArtifactContext, type XenoLoadedSkill, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, XenoMultiAgentReviewCoordinator, type XenoMultiAgentReviewCoordinatorOptions, type XenoNetworkDestination, type XenoNetworkExecutionPolicy, type XenoOracleAdjudication, type XenoOracleAdjudicationDraft, type XenoOracleAdjudicationRequest, type XenoOracleAdjudicationResult, type XenoOracleArtifactContext, type XenoOracleCitation, type XenoOracleClaim, XenoOracleCoordinator, type XenoOracleCoordinatorOptions, type XenoOracleDisagreement, type XenoOracleExecutionRequest, type XenoOracleExecutionResult, type XenoOracleModelIdentity, type XenoOracleOpinion, type XenoOracleOpinionDraft, type XenoOracleReport, type XenoOracleRole, type XenoOracleRunOptions, XenoOracleValidationError, type XenoOracleVerdict, type XenoProcessExecutionPolicy, type XenoProjectState, type XenoProviderAdapterKind, type XenoProviderAuthPreset, type XenoProviderCapabilities, XenoProviderCatalog, type XenoProviderConnection, type XenoProviderConnectionSnapshot, type XenoProviderConnectionView, type XenoProviderCredentialMode, type XenoProviderModelDescriptor, type XenoProviderPreset, type XenoProviderProbeResult, type XenoProviderReadiness, type XenoProviderRouteCandidate, type XenoProviderRoutingPolicy, type XenoPtyAdapter, type XenoPtyProcess, type XenoPtySpawnOptions, type XenoRasterImage, type XenoRasterPreview, type XenoRecipeDefinition, type XenoRecipeInputDefinition, type XenoRecipeMode, type XenoRecipePermissionMode, type XenoRecipeStepDefinition, XenoRecipeValidationError, type XenoRedactionCategory, type XenoRedactionEvent, type XenoRedactionOptions, type XenoRedactionReport, type XenoRedactionResult, type XenoRemoteRepositoryIdentity, type XenoRemoteSourceFile, type XenoRemoteSourceProvider, type XenoRepositoryChunk, type XenoRepositoryDocumentKind, type XenoRepositoryEmbedding, type XenoRepositoryEmbeddingProvider, type XenoRepositoryEmbeddingRequest, type XenoRepositoryFileRecord, type XenoRepositoryFreshnessInput, type XenoRepositoryFreshnessReport, type XenoRepositoryGitProvenance, type XenoRepositoryIndexBuildOptions, XenoRepositoryIndexFileStore, type XenoRepositoryIndexSnapshot, type XenoRepositoryIndexStats, type XenoRepositoryRelationship, type XenoRepositoryRelationshipKind, type XenoRepositorySearchMode, type XenoRepositorySearchQuery, type XenoRepositorySearchResponse, type XenoRepositorySearchResult, type XenoRepositorySourceDocument, type XenoRepositorySymbol, type XenoRepositorySymbolGraph, type XenoRepositorySymbolKind, type XenoResolvedApiKey, type XenoReviewAgentExecutor, type XenoReviewAgentResult, type XenoReviewArtifactContext, type XenoReviewCoordinatorContext, type XenoReviewDimension, type XenoReviewEvidence, type XenoReviewEvidenceKind, type XenoReviewFinding, type XenoReviewFindingProposal, type XenoReviewFindingState, type XenoReviewPack, type XenoReviewReport, type XenoReviewSeverity, type XenoReviewTarget, XenoReviewValidationError, type XenoReviewVerificationOutcome, type XenoReviewVerificationResult, type XenoReviewVerifierExecutor, type XenoRuntimeEvent, type XenoRuntimeEventBase, XenoRuntimeEventBus, type XenoRuntimeEventDraft, type XenoRuntimeEventSink, type XenoRuntimeEventType, type XenoSecretProjection, type XenoSecureExecutionContract, XenoSecureExecutionContractError, type XenoSecureExecutionContractErrorCode, type XenoShareAccessPolicy, type XenoShareContent, type XenoShareGitContext, type XenoShareIssuer, type XenoSharePayload, type XenoSharePrincipal, type XenoShareReference, type XenoShareRegistryRecord, type XenoShareRegistrySnapshot, type XenoShareSessionIdentity, type XenoShareSigningIdentity, type XenoShareStatus, type XenoShareSurface, type XenoShareVerificationResult, type XenoShareVisibility, type XenoSignedHandoffEnvelope, type XenoSignedShareEnvelope, type XenoSkillActivation, type XenoSkillAuditEvent, type XenoSkillCatalog, type XenoSkillDescriptor, type XenoSkillDiagnostic, type XenoSkillDiscoveryOptions, type XenoSkillDiscoveryRoot, type XenoSkillExternalActionPolicy, type XenoSkillInvocationDecision, type XenoSkillInvocationPolicy, type XenoSkillResourceDescriptor, type XenoSkillShadowRecord, type XenoSkillSource, type XenoSkillTool, type XenoSkillToolPolicy, type XenoSourceResearchArtifactContext, type XenoSourceResearchExcerpt, type XenoSourceResearchFinding, type XenoSourceResearchModelIdentity, type XenoSourceResearchReport, type XenoSourceResearchSeverity, XenoSourceResearchValidationError, type XenoSpecAcceptanceCriterion, type XenoSpecArtifactBundle, type XenoSpecArtifactContext, type XenoSpecDesign, type XenoSpecDesignDecision, type XenoSpecDocument, type XenoSpecDriftFinding, type XenoSpecDriftReport, type XenoSpecExecutionRecord, type XenoSpecExecutionState, XenoSpecLifecycleService, type XenoSpecLifecycleServiceOptions, type XenoSpecPriority, type XenoSpecRequirement, type XenoSpecRisk, type XenoSpecSourceBaseline, type XenoSpecTask, type XenoSpecTaskExecution, type XenoSpecTaskStatus, XenoSpecValidationError, type XenoTelemetryAttributeValue, type XenoTelemetryRecord, type XenoTelemetrySignalKind, type XenoTelemetrySubscriber, type XenoThreadRunOptions, type XenoThreadRunResult, XenoTraceGraphRecorder, type XenoUserConfig, type XenoVerifiedHostedExecutionAdapterCertification, type XenoVp8Image, acquireControlPlaneLock, activateSessionRuntime, addProjectAllowedDirectory, addProjectAllowedTool, agentDefinitionFromProfile, agentProfileFromDefinition, appendBoundedShellOutput, appendGuidanceToResult, approveMcpServer, areSignalHandlersInstalled, artifactCompareTool, askUserTool, assertDirectEndpointResolution, assertRequiredXenoAutomationEvidence, assertSupportedMcpProtocolVersion, assertUsableXenoApiKey, assertValidMcpAppResource, assertValidXenoArtifact, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertValidXenoEvidenceGraph, assertValidXenoHostedExecutionJob, assertValidXenoOracleReport, assertValidXenoRecipeDefinition, assertValidXenoReviewPack, assertValidXenoReviewReport, assertValidXenoReviewTarget, assertValidXenoSecureExecutionContract, assertValidXenoSourceResearchReport, assertValidXenoSpecDocument, assertValidXenoSpecExecution, assertXenoArtifactStateTransition, assertXenoAutomationAdapterConformant, assertXenoAutomationAuthority, auditRiskLevelForTool, authorizeShellExecution, backgroundProcessManager, bashTool, benchmarkCodingTools, bridgeXenoTelemetryToOpenTelemetry, buildAtomicMessageGroups, buildAuditReplayReport, buildAuditTraceReport, buildContainedProcessSpec, buildContractLedgerGuidance, buildDefaultSubagentTasks, buildDelegatedRoleSystemPrompt, buildHookEnvironment, buildLinuxBubblewrapProcessSpec, buildLspDefinitionReport, buildLspDiagnosticsReport, buildLspDoctorReport, buildLspHoverReport, buildLspReferencesReport, buildMotionSystemPrompt, buildPixelSystemPrompt, buildProcessHardenedProcessSpec, buildProjectBudgetFinalizationGuidance, buildProjectExecutionGuidance, buildProjectExecutionProfile, buildPromptMemoryContext, buildSecuredProcessSpec, buildSoundSystemPrompt, buildSystemPrompt, buildToolFailureGuardResult, buildXenoArtifactReviewAnchor, buildXenoAutomationCapabilityUse, buildXenoRepositoryIndex, buildXenoRepositoryIndexWithEmbeddings, buildXenoSecureExecutionContract, cachedModelContextWindow, calculateCost, canTransitionXenoArtifactState, canXenoRasterPreview, canonicalPayload, canonicalizeArtifactJson, canonicalizeMcpResourceUri, canonicalizeSecurityPath, canonicalizeToolName, checkSandbox, classifyProviderHttpError, cleanupReadImagePreviews, cleanupSessionRuntime, clearMcpServerApproval, clearProjectAllowedTools, clearProjectLastSessionSummary, clearProjectMcpApproval, clearProjectMcpApprovals, clipXenoAnsi, coerceSubagentRole, coerceSubagentTeamPreset, compileAgentProfile, compileJsonSchema, compileToolInputSchema, compileXenoRecipe, compileXenoSkillActivation, configureImageGeneration, configureSearch, configureSearchPermissionProfile, configureXenoAnsi, containmentApprovalSigningPayload, containmentCertificationSigningPayload, copyTextToClipboard, create3DTools, createAgentDefinitionFile, createAgentDefinitionPromptSection, createAgentRunId, createAppServerV2HttpTransport, createArchitectTools, createArtifactCompareTool, createAskUserTool, createAudioTools, createAuditBackedPermissionEngine, createBashTool, createBenchBashMiddleware, createCommandBackedProtectedStateStore, createDefaultToolRegistry, createDelegatedXenoAgent, createDirectProvider, createDirectShellMessage, createDispatchAgentTool, createDocsTools, createEd25519Signer, createEditTool, createElfAnalyzeTool, createEngineTools, createGcodeAnalyzeTool, createGenerateImageTool, createGlobTool, createGovernanceExtensions, createGrepTool, createHtmlSanitizerAuditTool, createImageTools, createLsTool, createLspDefinitionTool, createLspDiagnosticsTool, createLspHoverTool, createLspReferencesTool, createMcpAppCapabilities, createMcpAppExtensionCapabilities, createMcpPkcePair, createMcpPromptRegisteredTool, createMcpRegisteredTool, createMcpResourceRegisteredTool, createMemoryProtectedStateStore, createMemoryReadTool, createMemoryWriteTool, createNotebookEditTool, createNotebookReadTool, createNotesTools, createOsProtectedStateStore, createProtectedStateEnvelopeCipher, createReadImageTool, createReadTool, createSheetsTools, createSlidesTools, createSpeechRecognizer, createSqliteAnalyzeTool, createTaskInputTool, createTaskListTools, createTaskOutputTool, createTaskStopTool, createThinkTool, createToolAlias, createToolRuntimeContext, createUnavailableProtectedStateStore, createVideoTools, createWebSearchTool, createWindowsDpapiProtectedCipher, createWindowsDpapiProtectedFileStore, createWorkflowTools, createWriteTool, createXenoAgent, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createXenoHostedControlCommand, createXenoHostedEnvironmentManifest, createXenoHostedEvent, createXenoHostedExecutionBoundaryReceipt, createXenoHostedRunResult, createXenoRasterPreview, createXenoSecureShare, createXenoSessionHandoff, createXenoShareSigningIdentity, createXenoSkillTool, createXenoSourceResearchExcerpt, createXenoSourceResearchReport, currentExecutionAdapterStatus, decodeJwtPayload, decodeXenoBmp, decodeXenoGif, decodeXenoGifAnimation, decodeXenoJpeg, decodeXenoNetpbm, decodeXenoPng, decodeXenoSvg, decodeXenoVp8, decodeXenoWebp, defaultToolRuntimeContext, defaultXenoReviewPack, deflateXenoZlib, deleteSession, denyMcpServer, deriveHostedIdempotencyKey, describeXenoAutomationOperation, detectLanguage, detectPluginRepositorySignals, detectRepositoryDocumentKind, detectRepositoryLanguage, detectXenoSpecDrift, deterministicReduce, digestMessages, directProviderConfigFromConnection, discoverXenoSkills, dispatchAgentTool, editTool, elfAnalyzeTool, emitXenoTelemetry, encodeXenoPngRgb, enforceShellCommandPolicy, enforceToolPolicy, ensureConfigDir, ensureDurableMessageIds, ensureProjectStateDir, estimateFullRequestBudget, evaluateContainmentUiRestrictions, evaluatePermissionProfileNetworkUrl, evaluateXenoCapabilityEligibility, extractJsonObject, extractToolPath, findXenoSkill, fingerprintXenoSecureExecutionContract, forgetRecentSession, forgetRecentSessionById, formatBoundedShellOutput, formatCost, formatDirectShellContext, formatJsonSchemaErrors, formatModelList, formatPromptContextBreakdown, gcodeAnalyzeTool, generateImageTool, generateSessionId, getAgentHome, getAgentRunDir, getAgentRunStoreDir, getAvailableModels, getBenchmarkComputeBudgetHintForCommand, getBenchmarkForegroundTimeoutForCommand, getBestExecutionSecurityStatus, getChatModels, getConfigDir, getDefaultProviderRegistry, getExecutionSecurityCapabilityReport, getExecutionSecurityStatus, getGlobIgnores, getGrepIgnores, getHighRiskPermissions, getImageGenerationConfig, getJwtExpiry, getLinuxBubblewrapCapability, getLogLevel, getManagedConfigPath, getMcpAppMetadata, getMcpAppResourceUri, getMcpApprovalDecision, getMcpAuthorizationServerMetadataUrls, getMcpPromptToolName, getMcpProtectedResourceMetadataUrls, getMcpResourceToolName, getMcpToolName, getModelName, getMxcContainmentProbe, getMxcNativeAssetDescriptor, getMxcWindowsHostPreparationDescriptor, getMxcWindowsHostPreparationHelperArchitecture, getPermissionProfile, getPersistentShellSession, getPersistentShellSpawnSpec, getProcessContainmentStatus, getProjectAgentDefinitionDirs, getProjectAgentDefinitionsDir, getProjectLastSessionSummary, getProjectMcpApproval, getProjectStatePath, getReadImagePreviewCapability, getRecentSessionsIndexPath, getSubagentTeamPresetDefinition, getToolRiskLevel, getUserAgentDefinitionsDir, gitBranchTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, globTool, grepTool, gzipXeno, hasProjectOnboardingCompleted, hasXenoTelemetrySubscribers, hashContainmentConformanceReport, hashPluginManifest, hashPluginTree, hookResultStatus, hostedEnvironmentIdentity, htmlSanitizerAuditTool, importLegacyXenoSkill, inflateXenoZlib, initializeSessionRuntime, inspectRuntimeManifests, inspectSecurityPath, inspectSystemPrompt, inspectXenoRepositoryFreshness, inspectXenoRepositorySymbol, installSignalHandlers, invalidateAllObservedFiles, invokeXenoSkill, isChatModel, isDangerousCommand, isDirectShellMessage, isExpiredJwt, isExplicitResearchPrompt, isJwt, isLocalModel, isMcpAppResourceUri, isMcpOAuthTokenExpired, isMcpToolVisibleToApp, isMcpToolVisibleToModel, isNotBeforeJwt, isPathWithinAllowed, isScreenCaptureAvailable, isSensitiveEnvironmentKey, isSimpleInformationalPrompt, isSpeechRecognitionAvailable, isSupportedMcpProtocolVersion, isToolAllowedByXenoSkillActivation, isUncOrDevicePath, isValidAgentDefinitionName, isValidModel, isValidSessionId, isWorkspaceTrusted, isXenoAutomationOperation, legacyAgentArtifactToXenoArtifact, listBuiltInAgentProfiles, listPermissionProfiles, listProjectAllowedTools, listProjectMcpApprovals, listSessions, loadConfig, loadConfiguredMcpServers, loadMcpConfigFile, loadProjectConfig, loadProjectState, loadRecentSessionsIndex, loadSession, loadUserConfig, loadXenoSkill, lookupRecentSession, lsTool, lspDefinitionTool, lspDiagnosticsTool, lspHoverTool, lspReferencesTool, matchPermissionRule, matchesMcpRegistryEntryPolicy, materializeXenoAutomationEvidence, memoryReadTool, memoryWriteTool, mergeConfigs, mxcWarningsRequireWindowsHostPreparation, normalizeDirectShellResultRecord, normalizeHookDecision, normalizeMcpAppVisibility, normalizePermissionProfileName, normalizeRepositoryRelativePath, normalizeSourceText, normalizeSubagentBranchPolicy, normalizeWorkingDirectory, normalizeXenoHostedControlAcknowledgement, notebookEditTool, notebookReadTool, parseContainmentReviewerTrustStore, parseMcpWwwAuthenticate, parsePermissionRule, parseRetryAfter, parseSessionId, parseShellPathReferences, parseSubagentRemoteMcpPolicy, parseSubagentRoleList, parseUnifiedDiff, parseXenoAnsi, parseXenoRecipeDefinition, persistXenoAutomationEvidence, planXenoControlRoomAction, pluginInfoRelevanceCandidate, pluginListingRelevanceCandidate, pluginSignaturePayload, preflightLocalModel, prepareMxcWindowsHost, probeXenoProvider, projectToolDefinitionsForProvider, projectToolSchemaForProvider, projectXenoControlRoom, providerCapabilityError, providerProtocolError, publicKeyFingerprint, publishPlugin, rankPluginRelevance, readImageTool, readManifestFromDisk, readPluginDetachedSignature, readPluginSupplyChainLockfile, readSessionFormatVersion, readTool, readXenoApiKey, recordRecentSession, recordXenoCounter, recordXenoEvent, recordXenoHistogram, redactXenoShareValue, registerShutdownCleanup, registry, removeMcpServerConfig, removeProjectAllowedTool, renderAgentDefinition, renderAgentDefinitions, renderAuditReplayMarkdown, renderAuditReplayReport, renderAuditTraceMarkdown, renderAuditTraceReport, renderAuditTraceSummaries, renderCodingBenchmarkMarkdown, renderCodingBenchmarkReport, renderContinuationIncompleteStatus, renderLspDefinitionReport, renderLspDiagnosticsReport, renderLspDoctorReport, renderLspHoverReport, renderLspReferencesReport, renderToolContinuationInput, renderXenoSkillCatalog, repairToolExchangeHistory, requestBackground, requiresSecuredProcessLaunch, resetAllPersistentShellSessions, resetBashBenchmarkGuards, resetImageGenerationConfig, resetMcpServerApprovals, resetMxcContainmentProbe, resetPersistentShellSession, resetXenoAnsiPolicy, resetXenoTelemetryCardinalityForTests, resizeXenoRaster, resolveAgentDefinition, resolveAgentProfile, resolveAgentToolPolicy, resolveBuiltInAgentProfile, resolveCommandOnPath, resolveContainmentConformanceTemporaryRoot, resolveDelegatedExecutionMode, resolveExecutionSecurityLevel, resolveExecutionTrustMode, resolveInteractiveTurnMaxIterations, resolveModelContextTokens, resolvePermissionProfile, resolveShellInvocation, resolveSubagentRemoteMcpAccess, resolveSubagentWorkflowAnswer, resolveXenoAutomationEvidencePolicy, resolveXenoSdkApiKey, runAgentHook, runCommandHook, runContainmentConformanceSuite, runDelegatedXenoTurn, runDelegationPlan, runHookDefinition, runHooks, runHttpHook, runPromptHook, runSubagentWorkflow, runXenoThread, runXenoThreadStreamed, sanitizeEnvironment, sanitizeXenoTelemetryAttributes, saveConfig, saveMcpConfigFile, saveProjectState, saveSession, scaffoldPlugin, scanAgentDefinitions, scoreMemories, scorePluginRelevance, searchXenoRepositoryIndex, selectXenoProviderRoute, serializeXenoRecipe, setLogLevel, setProjectLastSessionSummary, setProjectMcpApproval, setProjectOnboardingCompleted, setWorkspaceTrusted, setupAIHandlers, sha256ArtifactBytes, sha256ArtifactJson, shouldEnableExecutionGovernance, shouldSourceShellProfile, shouldUseIsolatedStdinForCommand, signSharePayload, sqliteAnalyzeTool, stripXenoAnsi, subscribeXenoTelemetry, summarizeAuditInputRecord, summarizeAuditTraces, summarizeRuntimeInput, summarizeSubagentResults, summarizeXenoArtifactReview, syncMcpToolsToRegistry, synthesizeSkill, taskInputTool, taskOutputTool, taskStopTool, testPlugin, thinkTool, toAgentDefinitionMetadata, toLLMProvider, toolEvidenceToXenoArtifact, toolOperationManager, toolRiskLevel, turnDiffSummaryToXenoArtifact, unifiedDiffToXenoArtifact, unifiedExecManager, updateProjectState, upsertMcpServerConfig, validateAgentDefinition, validateCapabilityLeaseRequest, validateDelegationPlan, validateDirectEndpoint, validateExecutionSecurityPolicy, validateJsonSchema, validateManifest, validateMcpAppResource, validateXenoArtifact, validateXenoArtifactReviewEvent, validateXenoControlRoomSnapshot, validateXenoEvidenceGraph, validateXenoRepositoryIndex, validateXenoSdkApiKey, validateXenoSecureExecutionContract, validateXenoSpecDocument, verifyContainmentCertification, verifyContainmentCertificationApproval, verifyPluginSupplyChain, verifySignature, verifySoulRecord, verifyXenoHostedControlCommand, verifyXenoHostedEnvironmentManifest, verifyXenoHostedEventChain, verifyXenoHostedExecutionAdapterCertification, verifyXenoHostedExecutionJob, verifyXenoHostedRunResult, verifyXenoHostedWebhook, verifyXenoSecureShare, verifyXenoSessionHandoff, webFetchTool, webSearchTool, windowsDpapiProtect, windowsDpapiUnprotect, withXenoTelemetrySpan, wrapXenoAnsi, writePluginSupplyChainLockfile, writeTool, xenoAnsi, xenoAnsiVisibleWidth, xenoArtifactToDiffDocument, xenoArtifactToLegacyAgentArtifact, xenoArtifactToOracleReport, xenoArtifactToReviewReport, xenoArtifactToSourceResearchReport, xenoArtifactToSpecDocument, xenoArtifactToSpecExecution, xenoArtifactToToolEvidence, xenoArtifactToTurnDiffSummary, xenoHostedExecutionAdapterSigningPayload, xenoOracleReportToArtifact, xenoRecipeFingerprint, xenoReviewReportToArtifact, xenoReviewReportToGitHubComments, xenoSourceResearchReportToArtifact, xenoSpecArtifactIds, xenoSpecExecutionToArtifact, xenoSpecToArtifactBundle };
+export { type A2AMessage, type A2AMessageType, AGENT_DAEMON_PROTOCOL_VERSION, AGENT_EFFORT_LEVELS, AGENT_PERMISSION_MODES, AGENT_PROFILE_EXTERNAL_ACTIONS, ARCHITECT_CAPABILITIES, ARCHITECT_TOOL_NAMES, type ActiveLayerInfo, type AddXenoArtifactCommentRequest, type AgentArtifact, type AgentCapabilities, type AgentCard, AgentDaemonClient, type AgentDaemonError, type AgentDaemonHandler, type AgentDaemonRequest, type AgentDaemonResponse, AgentDaemonServer, type AgentDaemonTransport, AgentDebugger, type AgentDefinition, type AgentDefinitionIsolation, type AgentDefinitionIssue, AgentDefinitionLoader, type AgentDefinitionLoaderOptions, type AgentDefinitionMetadata, AgentDefinitionResolver, type AgentDefinitionScanResult, type AgentDefinitionScope, type AgentDefinitionShadowRef, type AgentEffortLevel, AgentEvaluator, AgentEventStore, type AgentHookDefinition, AgentHookRunner, AgentInterruptedError, type AgentIpcChannel, type AgentLoadSnapshot, AgentLoop, type AgentLoopConfig, type AgentLoopOptions, type AgentPermissionMode, type AgentProfileActionDecision, type AgentProfileCapabilities, type AgentProfileCapabilityBoundary, type AgentProfileCollaborationMode, type AgentProfileCompletionPolicy, type AgentProfileEvidenceKind, type AgentProfileExecutionPolicy, type AgentProfileExternalAction, type AgentProfileExternalActionPolicy, type AgentProfileIsolation, type AgentProfileKind, type AgentProfileMemoryPolicy, type AgentProfileMemoryScope, type AgentProfilePresentation, type AgentProfileSkillPolicy, type AgentProfileSoulMode, type AgentProfileV2, AgentProfileValidationError, AgentProtocol, AgentRegistry, type AgentRunAgentDefinitionRef, AgentRunController, type AgentRunControllerOptions, type AgentRunCreateInput, AgentRunError, type AgentRunEvent, type AgentRunListOptions, type AgentRunOptions, type AgentRunRecord, type AgentRunSpawnResult, type AgentRunStatus, AgentRunStore, type AgentRunTermination, type AgentRunTerminationReason, type AgentRunTerminationStatus, type AgentRunUsage, type AgentSandbox, type AgentSelectionStrategy, type AgentSessionHostBindingV1, type AgentStreamCallbacks, type AgentTask, type AgentTaskHandler, type AgentTaskResult, type AgentTaskStatus, type AgentTeam, type AgentToAppChannel, type AgentToAppMessages, type AgentToolPolicy, type AnalysisResult, type ApiMessage, type AppAgentBaseOptions, AppAgentFactory, type AppAgentResult, type AppContext, AppContextInjector, AppContextManager, type AppContextProvider, type AppId, type AppServerEventV2, type AppServerInitializeParamsV2, type AppServerInitializeResultV2, type AppServerIntegrationMetadataV2, type AppServerPermissionRequestV2, type AppServerPrincipalV2, AppServerProtocolError, type AppServerProtocolErrorData, AppServerRemoteError, type AppServerRequestContext, type AppServerSubscriptionSnapshotV2, type AppServerThreadStatusV2, type AppServerThreadV2, type AppServerTurnRunnerContextV2, type AppServerTurnRunnerV2, type AppServerTurnStatusV2, type AppServerTurnV2, type AppServerV2ClientTransport, type AppServerV2MethodMap, type AppServerV2Options, type AppToAgentChannel, type AppToAgentMessages, type AppType, type ArchitectAgentOptions, type ArchitectToolAdapter, type AskUserHandler, type AskUserRequest, type AskUserResponse, type AtomicMessageGroup, type AudioProjectInfo, type AudioStemSeparationResult, type AudioToolAdapter, type AudioTrackType, type AudioTranscriptionResult, type AudioTranscriptionSegment, type AuditDecision, type AuditEvent, AuditLogger, type AuditReplayReport, type AuditReplayStep, type AuditRiskLevel, type AuditStatus, type AuditTraceGapEntry, type AuditTraceReport, type AuditTraceSummary, type AuditTraceTimelineEntry, type AuditTraceToolSummary, type AugmentContextOptions, type AuthorizedShellExecution, AutoCheckpointHandler, AutoMemory, type AutoMemoryContext, type AutoMemoryTrigger, AutoPermissionClassifier, type AutoPermissionDecision, BUILT_IN_XENO_PROVIDER_PRESETS, BackgroundProcessManager, type BackgroundTask, type BaseHookDefinition, type BenchBashMiddlewareOptions, type BlockContent, type BlockType, type BoundedShellOutput, type BreakpointCallback, type BuildResult, type BuildXenoSecureExecutionContractOptions, COMPAT_TOOL_ALIASES, CONFIG_VERSION, type CanonicalSecurityPath, type CanvasSize, type CellRangeData, type ChartConfig, type ChatCompletionChunk, type ChatCompletionRequest, type ChatCompletionResponse, type ChatMessage, type ChatParams, type ChatResponse, type CheckpointData, type CheckpointInfo, CheckpointManager, type CheckpointTrigger, type ClaimXenoHandoffInput, type ClashResult, type CliAutomationAuditEvent, type CliAutomationAuditLoggerPort, type CliAutomationEnvironment, type CliAutomationStatusReport, type CliAutomationSurfaceStatus, CliGovernedAutomationRuntime, type ClipContext, type CodeApplyOptions, type CodeApplyResult, type CodeValidationIssue, type CodeValidationResult, CodeValidator, type CodingBenchmarkAssessment, type CodingBenchmarkMeasurement, type CodingBenchmarkOptions, type CodingBenchmarkReport, type CodingBenchmarkThreshold, type CommandBackedProtectedStateOptions, type CommandHookDefinition, CommandHookRunner, type CompactionRecord, type CompileAgentProfileOptions, type CompiledAgentProfile, type CompiledJsonSchema, type CompletionDecision, type CompletionGuard, type CompletionGuardContext, type CompletionGuardDecision, type CompletionGuardEvaluationContext, CompletionGuardRegistry, type CompletionGuardResult, type CompletionGuardResultObject, type CompletionGuardStopReason, type CompletionGuardToolPolicy, type CompletionGuardToolPolicyMode, type CompletionGuardTurnStats, type CompletionGuardVeto, type ComponentData, type CompressionLLMFn, type CompressionStats, type ConfigProfile, type ConnectConfiguredMCPServersOptions, type ConnectConfiguredMCPServersResult, type ContainedProcessSpec, type ContainmentAdapterIdentity, ContainmentApprovalError, type ContainmentCertificationBinding, ContainmentCertificationError, type ContainmentConformanceCheck, type ContentBlock, type ContextCompressedData, ContextManager, type ContextManagerConfig, type ContextSection, type ContextSource, type ControlPlaneLockHandle, type ControlPlaneLockRecord, ConversationStore, type CreateAuditBackedPermissionEngineOptions, type CreateCliGovernedAutomationRuntimeOptions, type CreateDelegatedBranchAgent, type CreateDelegatedBranchAgentOptions, type CreateDelegatedXenoAgentOptions, type CreateXenoAgentOptions, type CreateXenoAgentResult, type CreateXenoGoalInput, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHandoffInput, type CreateXenoHandoffOptions, type CreateXenoHostGovernedAutomationRuntimeOptions, type CreateXenoShareOptions, type CreateXenoSkillToolOptions, type CreateXenoSourceResearchReportInput, type CrossAppHandler, type CrossAppMessage, CrossAppRouter, CrossAppRouterError, type CrossAppRouterOptions, DEFAULT_API_KEY, DEFAULT_IMAGE_MODEL, DEFAULT_MEMORY_BUDGETS, DEFAULT_MODEL, DEFAULT_PROMPT_SECTIONS_TOKEN_BUDGET, DEFAULT_PROTECTED_STATE_KEY_NAME, DEFAULT_PROTECTED_STATE_SERVICE, DEFAULT_SUBAGENT_BRANCH_POLICY, DEFAULT_SUBAGENT_REMOTE_MCP_BY_ROLE, DEFAULT_SUBAGENT_ROLES, DEFAULT_SUBAGENT_ROLE_PRECEDENCE, DEFAULT_SUBAGENT_TEAM_PRESET, DIRECT_SHELL_CONTEXT_WARNING, DOCS_CAPABILITIES, DOCS_TOOL_NAMES, type DebugBreakpoint, type DebugSnapshot, type DebugStep, type DebugStepCallback, type DecideXenoArtifactRequest, type DefaultToolRegistryOptions, type DefaultWebContextRequestFactoryOptions, type DelegatedBranchAdmission, type DelegatedBranchAdmissionSettlement, type DelegatedBranchAgent, type DelegatedBranchAgentCallbacks, type DelegatedXenoTurnResult, type DelegationBudget, type DelegationLimits, type DelegationSummaryData, type DependencyEdge, type DescendantInstructionHint, type DirectEndpointPolicy, type DirectEndpointProfile, type DirectProviderCapabilityProfile, type DirectProviderConfig, type DirectProviderKind, type DirectShellMessageMetadata, type DirectShellResultRecord, type DispatchAgentHandler, type DispatchAgentRequest, type DispatchAgentResponse, type DocComment, type DocsAgentOptions, type DocsToolAdapter, type DocumentContext, type DualLLMMode, DualLLMProvider, type DualLLMProviderConfig, type DualLLMProviderLike, type DualLLMStatus, DurableXenoCoordinationStore, ENGINE_CAPABILITIES, ENGINE_TOOL_NAMES, ElectronAgentBridge, type ElectronAgentConfig, type EngineAgentOptions, type EngineToolAdapter, type EntityInfo, type Episode, type EpisodeOutcome, EpisodicStore, type EpisodicStoreOptions, type ErrorData, type EvalReport, type EvalResult, type EvalRunOptions, type EvalTask, type ExchangeMCPOAuthCodeOptions, type ExecuteToolRequest, type ExecuteToolResult, type ExecuteXenoCoordinationActionInput, type ExecuteXenoCoordinationActionResult, ExecutionGovernance, type ExecutionGovernanceOptions, type ExecutionGovernanceSummary, type ExecutionMode, type ExecutionSecurityCapabilities, ExecutionSecurityError, type ExecutionSecurityErrorCode, type ExecutionSecurityLevel, type ExecutionTrustMode, type ExpectedOutputContract, type ExportableSoulSigner, type ExtendedAppType, FALLBACK_MODELS, type FailureCluster, type FileEntry, type FileSnapshot, FileXenoArtifactRepository, type FileXenoArtifactRepositoryOptions, FileXenoProviderConnectionStore, type FileXenoProviderConnectionStoreOptions, FileXenoShareRegistry, type FileXenoShareRegistryOptions, type FilterConfig, type GovernanceExtensions, type GovernanceExtensionsOptions, HIGH_RISK_PERMISSIONS, type HarnessTask, type HarnessTaskStatus, type HarnessTaskUpdate, type HookConfig, type HookDecision, type HookDefinition, type HookEventName, type HookExecutionResult, type HookExecutionStatus, type HookInput, type HookInputBase, type HookInvocationInput, type HookModelExecutor, type HookPermissionMode, type HookRunResult, HookRunner, HookRuntime, type HookRuntimeOptions, type HttpHookDefinition, HttpHookRunner, IDENTITY_PATHS, type IdentityFrontmatter, type IdentityLayer, type IdentityLoadResult, IdentityLoader, type IdentityLoaderOptions, type IdentityPaths, IdentityResolver, type IdentitySource, type ImageContentBlock, type ImageDocumentInfo, type ImageGenerationConfig, type ImageLayerInfo, type ImageLayerType, type ImageToolAdapter, type ImageUrlBlock, InMemoryXenoArtifactRepository, type InMemoryXenoArtifactRepositoryOptions, InMemoryXenoCapabilityLeaseRegistry, type InMemoryXenoCapabilityLeaseRegistryOptions, InMemoryXenoTelemetryCollector, type InitializeSessionRuntimeOptions, type InspectSystemPromptOptions, type InstallSignalHandlersOptions, InteractiveChatTurnGovernance, InteractiveTurnGovernance, type InteractiveTurnGovernanceOptions, type IpcHandler, type JsonRpcErrorResponse, type JsonRpcMessage$1 as JsonRpcMessage, type JsonRpcNotification, type JsonRpcRequest$1 as JsonRpcRequest, type JsonRpcResponse, type JsonRpcSuccessResponse, type JsonSchema, JsonSchemaCompilationError, type JsonSchemaCompilationIssue, type JsonSchemaCompileOptions, type JsonSchemaSubset, type JsonSchemaType, type JsonSchemaValidationError, type JsonSchemaValidationResult, type LLMCompletionResult, type LLMProvider, type LLMProviderCapabilities, type LLMProviderMessage, type LLMProviderRequestContext, type ToolDefinition as LLMProviderToolDefinition, type LLMToolDefinition, type LayerContext, type LegacyXenoSkillInput, type LinuxBubblewrapCapability, type LinuxBubblewrapProcessSpec, LlmClient, type LlmClientDeps, LocalLLMProvider, type LocalLLMProviderConfig, type LocalRuntimePreflightResult, LogLevel, type LspDefinitionReport, type LspDiagnosticsReport, type LspDoctorReport, type LspDoctorServer, type LspHoverReport, type LspReferencesReport, MANIFEST_FILENAME, MAX_CONTAINMENT_APPROVAL_AGE_MS, MAX_CONTAINMENT_CERTIFICATION_BYTES, MAX_CONTAINMENT_CERTIFICATION_LIFETIME_MS, MAX_DIRECT_SHELL_OUTPUT_CHARS, type MCPAppCapabilities, type MCPAppContentSecurityPolicy, type MCPAppExtensionMetadata, type MCPAppMetadata, type MCPAppPermissions, type MCPAppResourceDescriptor, type MCPAppValidationResult, type MCPAppVisibility, type MCPApprovalDecision, type MCPBearerTokenRefreshHandler, type MCPBearerTokenResolver, type MCPConfigFile, type MCPConfiguredServer, type MCPElicitationAction, type MCPElicitationHandler, type MCPElicitationRequest, type MCPElicitationResponse, type MCPHttpAuthChallenge, MCPHttpTransportError, type MCPHttpUrlPhase, type MCPInitializeParams, type MCPInitializeResult, MCPManager, type MCPManagerOptions, type MCPOAuthAuthorizationServerMetadata, type MCPOAuthAuthorizationSession, MCPOAuthClient, type MCPOAuthClientOptions, type MCPOAuthClientRegistration, type MCPOAuthClientRegistrationSource, type MCPOAuthConfig, type MCPOAuthDiscoveryResult, type MCPOAuthProtectedResourceMetadata, type MCPOAuthTokenSet, type MCPOAuthTokenStore, type MCPOAuthUrlPhase, type MCPPrompt, type MCPPromptGetParams, type MCPPromptGetResult, type MCPPromptsListResult, type MCPRegistryAccessPolicy, type MCPRegistryEntryDescriptor, type MCPRegistryEntryKind, type MCPRegistryFilter, type MCPResource, type MCPResourceReadParams, type MCPResourceReadResult, type MCPResourceSubscribeParams, type MCPResourceUnsubscribeParams, type MCPResourcesListResult, MCPServer, type MCPServerConfig, type MCPServerModeOptions, type MCPServerPromptRegistration, type MCPServerResourceRegistration, type MCPServerScope, type MCPServerState, type MCPTool, type MCPToolCallParams, type MCPToolCallResult, type MCPToolsListResult, type MCPTransport, type MCPTransportConnection, MCP_APPS_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_SCHEME, MCP_PROTOCOL_VERSION, MCP_SUPPORTED_PROTOCOL_VERSIONS, MEMORY_FILES, MOTION_CAPABILITIES, MOTION_SYSTEM_PROMPT, MOTION_TOOL_NAMES, type ManifestValidationResult, type MaterialConfig, type MaterializeXenoAutomationEvidenceOptions, type MemoryAccessScope, type MemoryBudget, type MemoryEntry, type MemoryFile, type MemoryLevel, MemoryManager, type MemoryManagerOptions, type MeshInfo, type Message, MessageFlow, type MessageFlowDeps, type ModeSwitchRequest, type ModelInfo, type ModelProvider, ModelProviderRegistry, type MonitorEvent, MonitorManager, type MonitorSnapshot, type MonitorSource, MonitorStopTool, MonitorTool, type MotionAgentOptions, type MotionPromptParams, type MxcContainmentProbe, type MxcNativeAssetDescriptor, type MxcWindowsHostPreparationReport, NOTES_CAPABILITIES, NOTES_TOOL_NAMES, type NormalizedLspDiagnostic, type NormalizedLspHover, type NormalizedLspLocation, type NormalizedLspRange, type NotePageInfo, type NoteSearchResult, type NotesAgentOptions, type NotesToolAdapter, type OnChunkCallback, type OnTaskCompleteInput, type OnTaskCompleteResult, type OpenTelemetryMetricAdapter, type OperationTaskSource, type OsProtectedStateStoreOptions, OtelExporter, type OtelUsageAdapter, PIXEL_CAPABILITIES, PIXEL_SYSTEM_PROMPT, PIXEL_TOOL_NAMES, PROCESS_TREE_ADAPTERS, PROJECT_STATE_VERSION, type ParameterizedPermissionRule, type ParseUnifiedDiffOptions, type PermissionConfig, type PermissionDecision, type PermissionDecisionEvent, type PermissionDecisionHook, PermissionEngine, type PermissionInfo, type PermissionProfile, type PermissionProfileDecision, type PermissionProfileMode, type PermissionProfileName, type PermissionProfileNetworkDecision, type PermissionProfileResolution, type PermissionPromptFn, type PermissionPromptInfo, type PermissionPromptOperation, type PermissionPromptPreview, type PermissionPromptPreviewLine, type PermissionRequestContext, type PermissionRequestInfo, type PermissionRequestResult, type PermissionRule, type PersistentPermissionState, type PixelAgentOptions, type PixelPromptParams, type PlatformInfo, type PluginActivationEvent, type PluginAuthor, type PluginCapability, type PluginCommandContribution, type PluginCommandHandler, type PluginContext, type PluginContributions, type PluginDetachedSignature, type PluginEngineConstraint, type PluginEvent, PluginEventBus, type PluginEventListener, type PluginEventType, type PluginHook, PluginHost, type PluginHostInfo, type PluginHostOptions, type PluginInfo, type PluginListing, type PluginLogger, PluginManager, type PluginManagerOptions, type PluginManifest, PluginMarketplace, type PluginMarketplaceOptions, type PluginOutputStyleContribution, type PluginPermission, type PluginPromptContribution, type PluginPublishOptions, type PluginRelevanceCandidate, type PluginRelevanceHints, type PluginRelevanceSuggestion, type PluginRepositorySignal, PluginSandbox, type PluginSandboxOptions, type PluginScaffoldOptions, type PluginSearchOptions, type PluginSettingContribution, PluginSettingsManager, type PluginSignatureStatus, type PluginStatus, type PluginStorage, type PluginSupplyChainLockfile, type PluginSupplyChainRecord, type PluginTestCase, type PluginTestResult, PluginToolBuilder, type PluginToolContribution, type PluginTrustBadge, type PluginUIPanel, type PolicyCheckResult, type PolicyEnforcerConfig, type PrepareMCPOAuthAuthorizationOptions, type ProbeXenoProviderOptions, type ProcessContainmentStatus, type ProcessTreeAdapter, type ProfileMCPServerConfig, ProfileManager, type ProjectConfig, type ProjectDomainProfile, type ProjectExecutionPhase, type ProjectExecutionProfile, type ProjectInfo, type ProjectMcpApprovalDecision, type ProjectSessionContext, type ProjectSessionContextEntry, type ProjectSessionSummary, type ProjectTokenUsageSummary, type PromotionRequestResult, type PromptContext, type PromptFn, type PromptHookDefinition, PromptHookRunner, type PromptMemoryContextInfo, type PromptSectionContext, type PromptSectionProvider, PromptSectionRegistry, type ProtectedStateCipher, type ProtectedStateEnvelopeCipher, type ProtectedStateEnvelopeCipherOptions, type ProtectedStateEnvelopeV1, type ProtectedStateStore, ProviderError, type ProviderErrorCategory, type ProviderErrorCode, type ProviderErrorOptions, type ProviderStatus, type ProviderStreamEvent, type ProviderTransportLimits, QueryLifecycle, type QueryLifecycleOptions, type QueryState, type QueryTransition, type QueryWatchdogReason, REQUIRED_CONTAINMENT_CONFORMANCE_CHECKS, type RecalledEpisode, type RecalledSkill, type RecentSessionEntry, type RecentSessionsIndex, type ReducedResult, type ReducerOptions, type RegisterToolOperationInput, type RegisteredTool, type RenderConfig, type RequestBudgetBreakdown, type ResolveXenoSdkApiKeyOptions, type ResolvedIdentity, type ResolvedMemory, type ResolvedProvider, type ResolvedSubagentWorkflowAnswer, type ResourceContentBlock, type RoomInfo, type RunContainmentConformanceOptions, type RunDelegatedXenoTurnOptions, type RunStreamOptions, type RuntimeManifestFileEntry, type RuntimeManifestInspectionResult, type RuntimePluginManifestEntry, SDK_DEFAULT_MAX_ITERATIONS, SDK_DEFAULT_MAX_TOKENS, SDK_VERSION, SESSION_FORMAT_VERSION, SHEETS_CAPABILITIES, SHEETS_TOOL_NAMES, SLIDES_CAPABILITIES, SLIDES_TOOL_NAMES, SOUND_CAPABILITIES, SOUND_SYSTEM_PROMPT, SOUND_TOOL_NAMES, SSETransport, SUBAGENT_ROLE_ALIASES, SUBAGENT_TEAM_PRESETS, type SandboxCheckResult, type ScoredMemory, ScreenCapture, type ScreenCaptureConfig, type ScreenCaptureOptions, type SearchConfig, type SearchProvider, type SecuredProcessSpec, type SecurityPathIssue, type SecurityPathIssueCode, type Session, type SessionCreateOptions, type SessionData, type SessionEndData, type SessionIntegrationConfig, SessionLock, SessionLock as SessionLockManager, SessionManager, type SessionMeta, type SessionRecoveryIssue, type SessionRecoveryResult, type SessionRecoverySource, SessionRegistry, type SessionResumeOptions, type SessionRuntimeBaseOptions, type SessionRuntimeState, type SessionStartData, type SessionStatus, type SessionSummary, type SetXenoArtifactCommentResolutionRequest, type SetupAIHandlersOptions, type ShapeConfig, type SheetsAgentOptions, type SheetsToolAdapter, type ShellExecutionAuthorization, type ShellExecutionAuthorizationRequest, type ShellPathReference, type ShutdownCleanup, type Skill, SkillStore, type SkillStoreOptions, type SlideInfo, type SlidesAgentOptions, type SlidesToolAdapter, type SortConfig, type SoulCompletion, SoulEngine, type SoulEngineOptions, type SoulMessage, type SoulSigner, type SoundAgentOptions, type SoundPromptParams, type SpeechRecognizer, type SpeechRecognizerCallbacks, type SpeechRecognizerConfig, type StartXenoLoopInput, StdioTransport, type StemSeparationResult, type StopReason, type StoredConversation, type StoredMessage, type StoredToolCall, type StreamResult, StreamableHTTPTransport, type StreamableHTTPTransportOptions, type StreamableHTTPTransportSnapshot, type SubagentBranchPolicy, type SubagentBriefContext, type SubagentExecuteFn, type SubagentExecutionRequest, type SubagentExecutionResponse, type SubagentRemoteMcpAccess, type SubagentResult, type SubagentRole, type SubagentTask, type SubagentTeamPreset, type SubagentTeamPresetDefinition, type SubagentWorkflowMode, type SubagentWorkflowOptions, type SubagentWorkflowResult, type SynthesizeSkillInput, type SystemPromptInspectionResult, THREE_D_CAPABILITIES, THREE_D_TOOL_NAMES, TOOL_OPERATION_SCHEMA_VERSION, type TaskCompletionCallback, TaskListManager, type TestResult, type TextBlock, type ThreeDAgentOptions, type ThreeDToolAdapter, type TimelineInfo, type TokenUsageTotals, type ToolAssistantContentBlock, type ToolAuthorizationReceipt, type ToolCallData, type ToolCompletionPolicy, type ToolContinuationCheckpoint, type ToolContinuationNotification, type ToolDefinition, type ToolEvidence, type ToolExchangeRepairResult, type ToolExecutionContext, type ToolExecutor, type ToolFailureCategory, type ToolFailureGuardTrip, ToolFailureLoopGuard, type ToolHistoryRepairDiagnostic, type ToolManifestEntry, type ToolMiddleware, type ToolMiddlewareContext, ToolMiddlewareRegistry, type ToolOperationEvent, ToolOperationManager, type ToolOperationRuntimeEventType, type ToolOperationSnapshot, type ToolOperationState, ToolOrchestrator, type ToolOrchestratorCallbacks, type ToolOrchestratorConfig, type ToolPolicyProjection, type ToolProgressUpdate, ToolRegistry, type ToolRegistryOptions, type ToolResult, type ToolResultBlock, type ToolResultContent, type ToolResultData, type ToolRiskLevel, type ToolRuntimeContext, type ToolSchemaProjectionChange, ToolSchemaProjectionError, type ToolSchemaProjectionResult, type ToolSchemaProviderDialect, type ToolUseBlock, type TraceGraph, type TraceGraphEdge, type TraceGraphNode, type TrackContext, type TranscriptEvent, type TranscriptEventData, type TranscriptEventType, TranscriptWriter, type TranscriptionResult, type TranscriptionSegment, type TransitionConfig, type TurnDiffSummary, TurnDiffTracker, type TurnDiffTrackerOptions, type TurnFileDiff, type TurnRestoreAvailability, type TurnRestoreFilePreview, TurnRestoreManager, type TurnRestorePoint, type TurnRestoreResult, UNBOUNDED_OPERATION_CONTINUATION_LIMIT, type UnifiedExecCompletionReason, UnifiedExecError, type UnifiedExecEvent, type UnifiedExecEventListener, type UnifiedExecEventType, type UnifiedExecInputSource, UnifiedExecManager, type UnifiedExecManagerOptions, type UnifiedExecMode, type UnifiedExecOrigin, type UnifiedExecOutput, type UnifiedExecOutputChunk, type UnifiedExecOutputDelta, type UnifiedExecPresentation, type UnifiedExecProcess, type UnifiedExecReadDeltaOptions, type UnifiedExecStartOptions, type UnifiedExecStatus, type UnifiedExecStream, type UpdateXenoGoalInput, UsageAccumulator, type UsageAttribution, type UsageEvent, UsageLedger, type UsageQuery, type UsageTotals, type ValidateXenoSdkApiKeyOptions, type ValidatedContainmentCertification, type ValidationSignal, type VectorDocument, VectorMemoryStore, type VectorSearchResult, type VectorStoreAdapter, type VectorStoreOptions, type VerifyContainmentApprovalExpected, type VerifyPluginSupplyChainOptions, type VerifyPluginSupplyChainResult, type VerifyXenoHostedWebhookOptions, type VerifyXenoShareOptions, type VideoToolAdapter, WEB_CONTEXT_CONTRACT_VERSION, WEB_CONTEXT_TOOL_RESULT_SCHEMA, WORKFLOW_CAPABILITIES, WORKFLOW_TOOL_NAMES, type WebContextClientPort, type WebContextEvidenceProjection, type WebContextRequestBase, type WebContextRequestFactory, type WebContextToolOptions, type WebContextToolResult, type WebSearchResult, type WindowsDpapiCredentialFile, type WindowsDpapiProtectedFileOptions, type WindowsDpapiProtectedStateOptions, type WorkflowAgentOptions, type WorkflowDefinition, type WorkflowEvent, type WorkflowExecutionResult, type WorkflowInfo, type WorkflowNodeConfig, type WorkflowNodeDefinition, type WorkflowNodeExecutor, type WorkflowNodeStatus, type WorkflowPlan, WorkflowPlanner, type WorkflowRunNodeRecord, type WorkflowRunRecord, type WorkflowRunStatus, WorkflowRuntime, WorkflowStore, type WorkflowToolAdapter, WorkspaceIndex, type WorkspaceScanOptions, XENO_AGENT_PROFILE_SCHEMA_VERSION, XENO_API_BASE, XENO_APP_PROTOCOL_V2_METHODS, XENO_APP_PROTOCOL_VERSIONS, XENO_ARTIFACT_ACTOR_KINDS, XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION, XENO_ARTIFACT_SCHEMA_VERSION, XENO_ARTIFACT_SENSITIVITIES, XENO_ARTIFACT_STATES, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BROWSER_CONTROL_PLANE_OPERATIONS, XENO_BUILTIN_ARTIFACT_KINDS, XENO_CAPABILITY_LEASE_SCHEMA_VERSION, XENO_CONTAINMENT_APPROVAL_SCHEMA, XENO_CONTAINMENT_CERTIFICATION_SCHEMA, XENO_CONTAINMENT_CONFORMANCE_SCHEMA, XENO_CONTAINMENT_REVIEWER_TRUST_STORE_SCHEMA, XENO_CONTROL_ROOM_SCHEMA_VERSION, XENO_COORDINATION_SCHEMA_VERSION, XENO_DEFLATE_CODEC_NAME, XENO_DEFLATE_CODEC_VERSION, XENO_EVIDENCE_EDGE_TYPES, XENO_EVIDENCE_GRAPH_SCHEMA_VERSION, XENO_EVIDENCE_NODE_TYPES, XENO_GIF_ANIMATION_POLICY, XENO_GIF_CODEC_NAME, XENO_GIF_CODEC_VERSION, XENO_HANDOFF_SCHEMA_VERSION, XENO_HOSTED_CONTROL_SCHEMA_VERSION, XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION, XENO_HOSTED_EVENT_SCHEMA_VERSION, XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA, XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS, XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_TOOL_NAMES, XENO_HOSTED_RESULT_SCHEMA_VERSION, XENO_HOSTED_RUN_SCHEMA_VERSION, XENO_HOSTED_TRIGGER_SCHEMA_VERSION, XENO_JPEG_CODEC_NAME, XENO_JPEG_CODEC_VERSION, XENO_MXC_ADAPTER_NAME, XENO_MXC_POLICY_VERSION, XENO_MXC_VERSION, XENO_ORACLE_REPORT_SCHEMA_VERSION, XENO_PLUGIN_LOCK_FILENAME, XENO_PLUGIN_LOCK_SCHEMA_VERSION, XENO_PLUGIN_SIGNATURE_FILENAME, XENO_PLUGIN_SIGNATURE_SCHEMA_VERSION, XENO_PROVIDER_CATALOG_SCHEMA_VERSION, XENO_PROVIDER_CONNECTION_STORE_SCHEMA_VERSION, XENO_RASTER_CODEC_NAME, XENO_RASTER_CODEC_VERSION, XENO_RASTER_PREVIEW_FORMATS, XENO_RECIPE_SCHEMA_VERSION, XENO_REPOSITORY_INDEX_SCHEMA_VERSION, XENO_REVIEW_DIMENSIONS, XENO_REVIEW_EVIDENCE_KINDS, XENO_REVIEW_REPORT_SCHEMA_VERSION, XENO_RT_DEFAULT_URL, XENO_SECURE_EXECUTION_CONTRACT_SCHEMA_VERSION, XENO_SHARE_REGISTRY_SCHEMA_VERSION, XENO_SHARE_SCHEMA_VERSION, XENO_SKILL_SCHEMA_VERSION, XENO_SOURCE_RESEARCH_SCHEMA_VERSION, XENO_SPEC_EXECUTION_SCHEMA_VERSION, XENO_SPEC_SCHEMA_VERSION, XENO_SVG_RENDERER_NAME, XENO_SVG_RENDERER_VERSION, XENO_TELEMETRY_SCHEMA_VERSION, XENO_VP8_CODEC_NAME, XENO_VP8_CODEC_VERSION, XENO_WEBP_ANIMATION_POLICY, XENO_WEBP_CODEC_NAME, XENO_WEBP_CODEC_VERSION, type XenoAnsiEscapeFamily, type XenoAnsiFormatter, type XenoAnsiPolicy, type XenoAnsiStyle, type XenoAnsiToken, type XenoAnsiWrapOptions, type XenoAppProtocolVersion, XenoAppServer, type XenoAppServerOptions, XenoAppServerV2Client, type XenoArtifactActor, type XenoArtifactActorKind, type XenoArtifactAnchor, type XenoArtifactAppendReviewRequest, type XenoArtifactContent, type XenoArtifactEnvelope, type XenoArtifactFileRecoveryNotice, type XenoArtifactFileSnapshot, type XenoArtifactIdentity, type XenoArtifactKind, type XenoArtifactLifecycleEvent, type XenoArtifactListQuery, type XenoArtifactMutationOptions, type XenoArtifactPersistedRecord, type XenoArtifactProvenance, type XenoArtifactRecord, type XenoArtifactRelationship, type XenoArtifactRepository, XenoArtifactRepositoryError, type XenoArtifactRepositoryErrorCode, type XenoArtifactRepositoryState, type XenoArtifactRetention, type XenoArtifactReviewAnchorInput, type XenoArtifactReviewDecision, type XenoArtifactReviewEvent, type XenoArtifactReviewEventInput, XenoArtifactReviewService, type XenoArtifactReviewServiceOptions, type XenoArtifactReviewSummary, type XenoArtifactRevisionOptions, type XenoArtifactSensitivity, type XenoArtifactState, XenoArtifactStateTransitionError, type XenoArtifactStorageReference, type XenoArtifactTransitionRequest, XenoArtifactValidationError, type XenoArtifactValidationIssue, XenoAuthError, type XenoAuthErrorCode, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBasicRasterImage, type XenoBrowserAutomationOperation, XenoBrowserControlPlaneAdapter, type XenoBrowserControlPlaneAdapterOptions, type XenoBrowserExecutionPolicy, type XenoCapabilityEffect, type XenoCapabilityEligibility, type XenoCapabilityKind, type XenoCapabilityLease, type XenoCapabilityLeaseApprovalContext, type XenoCapabilityLeaseApprovalRequest, type XenoCapabilityLeaseDenialRequest, XenoCapabilityLeaseError, type XenoCapabilityLeaseErrorCode, type XenoCapabilityLeaseRequest, type XenoCapabilityLeaseRevocationRequest, type XenoCapabilityLeaseState, type XenoCapabilityScope, type XenoCapabilitySubject, type XenoCapabilityUse, type XenoColorDepth, type XenoColorPolicy, type XenoCompiledRecipe, type XenoCompiledRecipeStep, type XenoComputerAutomationOperation, type XenoComputerExecutionPolicy, type XenoConfig, type XenoContainmentApprovalReport, type XenoContainmentCertificationApproval, type XenoContainmentCertificationManifest, type XenoContainmentConformanceReport, type XenoContainmentReviewerTrustStore, type XenoContentHash, type XenoControlRoomActionKind, type XenoControlRoomActionPlan, type XenoControlRoomActionRequest, type XenoControlRoomAgent, type XenoControlRoomAgentInput, type XenoControlRoomAgentStatus, type XenoControlRoomApprovalInput, type XenoControlRoomApprovalKind, type XenoControlRoomArtifactInput, type XenoControlRoomAttentionItem, type XenoControlRoomAttentionKind, type XenoControlRoomGoalInput, type XenoControlRoomInput, type XenoControlRoomMonitorInput, type XenoControlRoomNotificationInput, type XenoControlRoomProjectionOptions, type XenoControlRoomSnapshot, type XenoControlRoomStatusCategory, type XenoControlRoomSummary, type XenoControlRoomTask, type XenoControlRoomTaskInput, type XenoControlRoomUsage, XenoControlRoomValidationError, type XenoCoordinationAction, XenoCoordinationError, type XenoCoordinationEvent, type XenoCoordinationEventType, type XenoCoordinationSessionState, type XenoCoordinationStoreOptions, type XenoCreatedShare, type XenoCredentialSource, type XenoCredentialType, type XenoDesktopCaptureSource, type XenoDesktopCapturer, type XenoDiffArtifactContext, type XenoDiffDocument, type XenoDiffFile, type XenoDiffFileStatus, type XenoDiffHunk, type XenoDiffLine, type XenoDiffLineKind, type XenoDiffMode, XenoDiffParseError, type XenoEd25519Signature, type XenoEnvironmentExecutionPolicy, type XenoEvidenceEdge, type XenoEvidenceEdgeType, type XenoEvidenceGraph, XenoEvidenceGraphBuilder, type XenoEvidenceGraphBuilderOptions, XenoEvidenceGraphValidationError, type XenoEvidenceNode, type XenoEvidenceNodeType, type XenoEvidenceReference, type XenoExecutionAdapterIdentity, type XenoExecutionEnforcement, type XenoExecutionIdentity, XenoExecutionLeaseSession, type XenoExecutionLeaseSessionOptions, type XenoExecutionOwner, type XenoExternalActionExecutionPolicy, type XenoFilesystemExecutionPolicy, type XenoGifAnimation, type XenoGifDisposal, type XenoGifFrame, type XenoGitHubReviewComment, type XenoGoalCriterion, type XenoGoalCriterionResult, type XenoGoalMilestone, type XenoGoalProgress, type XenoGoalRecord, type XenoGoalStatus, type XenoGoalTask, type XenoGoalTaskStatus, type XenoGoalVerification, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHandoffAuthority, type XenoHandoffOperation, type XenoHandoffPayload, type XenoHandoffRecord, type XenoHandoffResumePoint, type XenoHandoffStatus, type XenoHandoffTarget, type XenoHostAutomationAuditEvent, type XenoHostAutomationAuditLoggerPort, type XenoHostAutomationEnvironment, type XenoHostAutomationStatusReport, type XenoHostAutomationSurfaceStatus, CliGovernedAutomationRuntime as XenoHostGovernedAutomationRuntime, type XenoHostedArchitecture, type XenoHostedAuthority, type XenoHostedBudget, type XenoHostedCacheMount, type XenoHostedControlAcknowledgement, type XenoHostedControlAction, type XenoHostedControlCommand, type XenoHostedControlCommandPayload, type XenoHostedEnvironmentManifest, type XenoHostedEnvironmentManifestPayload, type XenoHostedEventRecord, type XenoHostedExecutionAdapterCertification, type XenoHostedExecutionAdapterVerificationOptions, type XenoHostedExecutionBoundaryReceipt, type XenoHostedExecutionJob, type XenoHostedExecutionSecretValue, type XenoHostedImageReference, type XenoHostedNetworkDestination, type XenoHostedNetworkPolicy, type XenoHostedOs, type XenoHostedQuotaLease, type XenoHostedReplayCursor, type XenoHostedReplayPage, type XenoHostedRepositorySource, type XenoHostedResourceLimits, type XenoHostedRetentionPolicy, type XenoHostedRunRecord, type XenoHostedRunRequest, type XenoHostedRunResult, type XenoHostedRunResultPayload, type XenoHostedRunStatus, type XenoHostedSecretProjection, type XenoHostedSetupStep, type XenoHostedTriggerDefinition, type XenoHostedTriggerDelivery, type XenoHostedTriggerKind, type XenoHostedWebhookSource, type XenoHostedWebhookVerification, type XenoJsonObject, type XenoJsonPrimitive, type XenoJsonValue, type XenoJwtPayload, type XenoLegacyAgentArtifactContext, type XenoLegacyArtifactContext, type XenoLoadedSkill, type XenoLoopIteration, type XenoLoopKind, type XenoLoopRecord, type XenoLoopSchedule, type XenoLoopStatus, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, XenoMultiAgentReviewCoordinator, type XenoMultiAgentReviewCoordinatorOptions, type XenoNetworkDestination, type XenoNetworkExecutionPolicy, type XenoOracleAdjudication, type XenoOracleAdjudicationDraft, type XenoOracleAdjudicationRequest, type XenoOracleAdjudicationResult, type XenoOracleArtifactContext, type XenoOracleCitation, type XenoOracleClaim, XenoOracleCoordinator, type XenoOracleCoordinatorOptions, type XenoOracleDisagreement, type XenoOracleExecutionRequest, type XenoOracleExecutionResult, type XenoOracleModelIdentity, type XenoOracleOpinion, type XenoOracleOpinionDraft, type XenoOracleReport, type XenoOracleRole, type XenoOracleRunOptions, XenoOracleValidationError, type XenoOracleVerdict, type XenoProcessExecutionPolicy, type XenoProjectState, type XenoProviderAdapterKind, type XenoProviderAuthPreset, type XenoProviderCapabilities, XenoProviderCatalog, type XenoProviderConnection, type XenoProviderConnectionSnapshot, type XenoProviderConnectionView, type XenoProviderCredentialMode, type XenoProviderModelDescriptor, type XenoProviderPreset, type XenoProviderProbeResult, type XenoProviderReadiness, type XenoProviderRouteCandidate, type XenoProviderRoutingPolicy, type XenoPtyAdapter, type XenoPtyProcess, type XenoPtySpawnOptions, type XenoRasterImage, type XenoRasterPreview, type XenoRecipeDefinition, type XenoRecipeInputDefinition, type XenoRecipeMode, type XenoRecipePermissionMode, type XenoRecipeStepDefinition, XenoRecipeValidationError, type XenoRedactionCategory, type XenoRedactionEvent, type XenoRedactionOptions, type XenoRedactionReport, type XenoRedactionResult, type XenoRemoteRepositoryIdentity, type XenoRemoteSourceFile, type XenoRemoteSourceProvider, type XenoRepositoryChunk, type XenoRepositoryDocumentKind, type XenoRepositoryEmbedding, type XenoRepositoryEmbeddingProvider, type XenoRepositoryEmbeddingRequest, type XenoRepositoryFileRecord, type XenoRepositoryFreshnessInput, type XenoRepositoryFreshnessReport, type XenoRepositoryGitProvenance, type XenoRepositoryIndexBuildOptions, XenoRepositoryIndexFileStore, type XenoRepositoryIndexSnapshot, type XenoRepositoryIndexStats, type XenoRepositoryRelationship, type XenoRepositoryRelationshipKind, type XenoRepositorySearchMode, type XenoRepositorySearchQuery, type XenoRepositorySearchResponse, type XenoRepositorySearchResult, type XenoRepositorySourceDocument, type XenoRepositorySymbol, type XenoRepositorySymbolGraph, type XenoRepositorySymbolKind, type XenoResolvedApiKey, type XenoReviewAgentExecutor, type XenoReviewAgentResult, type XenoReviewArtifactContext, type XenoReviewCoordinatorContext, type XenoReviewDimension, type XenoReviewEvidence, type XenoReviewEvidenceKind, type XenoReviewFinding, type XenoReviewFindingProposal, type XenoReviewFindingState, type XenoReviewPack, type XenoReviewReport, type XenoReviewSeverity, type XenoReviewTarget, XenoReviewValidationError, type XenoReviewVerificationOutcome, type XenoReviewVerificationResult, type XenoReviewVerifierExecutor, type XenoRuntimeEvent, type XenoRuntimeEventBase, XenoRuntimeEventBus, type XenoRuntimeEventDraft, type XenoRuntimeEventSink, type XenoRuntimeEventType, type XenoSecretProjection, type XenoSecureExecutionContract, XenoSecureExecutionContractError, type XenoSecureExecutionContractErrorCode, type XenoShareAccessPolicy, type XenoShareContent, type XenoShareGitContext, type XenoShareIssuer, type XenoSharePayload, type XenoSharePrincipal, type XenoShareReference, type XenoShareRegistryRecord, type XenoShareRegistrySnapshot, type XenoShareSessionIdentity, type XenoShareSigningIdentity, type XenoShareStatus, type XenoShareSurface, type XenoShareVerificationResult, type XenoShareVisibility, type XenoSignedHandoffEnvelope, type XenoSignedShareEnvelope, type XenoSkillActivation, type XenoSkillAuditEvent, type XenoSkillCatalog, type XenoSkillDescriptor, type XenoSkillDiagnostic, type XenoSkillDiscoveryOptions, type XenoSkillDiscoveryRoot, type XenoSkillExternalActionPolicy, type XenoSkillInvocationDecision, type XenoSkillInvocationPolicy, type XenoSkillResourceDescriptor, type XenoSkillShadowRecord, type XenoSkillSource, type XenoSkillTool, type XenoSkillToolPolicy, type XenoSourceResearchArtifactContext, type XenoSourceResearchExcerpt, type XenoSourceResearchFinding, type XenoSourceResearchModelIdentity, type XenoSourceResearchReport, type XenoSourceResearchSeverity, XenoSourceResearchValidationError, type XenoSpecAcceptanceCriterion, type XenoSpecArtifactBundle, type XenoSpecArtifactContext, type XenoSpecDesign, type XenoSpecDesignDecision, type XenoSpecDocument, type XenoSpecDriftFinding, type XenoSpecDriftReport, type XenoSpecExecutionRecord, type XenoSpecExecutionState, XenoSpecLifecycleService, type XenoSpecLifecycleServiceOptions, type XenoSpecPriority, type XenoSpecRequirement, type XenoSpecRisk, type XenoSpecSourceBaseline, type XenoSpecTask, type XenoSpecTaskExecution, type XenoSpecTaskStatus, XenoSpecValidationError, type XenoTelemetryAttributeValue, type XenoTelemetryRecord, type XenoTelemetrySignalKind, type XenoTelemetrySubscriber, type XenoThreadRunOptions, type XenoThreadRunResult, XenoTraceGraphRecorder, type XenoUserConfig, type XenoVerifiedHostedExecutionAdapterCertification, type XenoVp8Image, acquireControlPlaneLock, activateSessionRuntime, addProjectAllowedDirectory, addProjectAllowedTool, agentDefinitionFromProfile, agentProfileFromDefinition, appendBoundedShellOutput, appendGuidanceToResult, approveMcpServer, areSignalHandlersInstalled, artifactCompareTool, askUserTool, assertDirectEndpointResolution, assertRequiredXenoAutomationEvidence, assertSupportedMcpProtocolVersion, assertUsableXenoApiKey, assertValidMcpAppResource, assertValidXenoArtifact, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertValidXenoEvidenceGraph, assertValidXenoHostedExecutionJob, assertValidXenoOracleReport, assertValidXenoRecipeDefinition, assertValidXenoReviewPack, assertValidXenoReviewReport, assertValidXenoReviewTarget, assertValidXenoSecureExecutionContract, assertValidXenoSourceResearchReport, assertValidXenoSpecDocument, assertValidXenoSpecExecution, assertXenoArtifactStateTransition, assertXenoAutomationAdapterConformant, assertXenoAutomationAuthority, auditRiskLevelForTool, authorizeShellExecution, backgroundProcessManager, bashTool, benchmarkCodingTools, bridgeXenoTelemetryToOpenTelemetry, buildAtomicMessageGroups, buildAuditReplayReport, buildAuditTraceReport, buildContainedProcessSpec, buildContractLedgerGuidance, buildDefaultSubagentTasks, buildDelegatedRoleSystemPrompt, buildHookEnvironment, buildLinuxBubblewrapProcessSpec, buildLspDefinitionReport, buildLspDiagnosticsReport, buildLspDoctorReport, buildLspHoverReport, buildLspReferencesReport, buildMotionSystemPrompt, buildPixelSystemPrompt, buildProcessHardenedProcessSpec, buildProjectBudgetFinalizationGuidance, buildProjectExecutionGuidance, buildProjectExecutionProfile, buildPromptMemoryContext, buildSecuredProcessSpec, buildSoundSystemPrompt, buildSystemPrompt, buildToolFailureGuardResult, buildXenoArtifactReviewAnchor, buildXenoAutomationCapabilityUse, buildXenoRepositoryIndex, buildXenoRepositoryIndexWithEmbeddings, buildXenoSecureExecutionContract, cachedModelContextWindow, calculateCost, canTransitionXenoArtifactState, canXenoRasterPreview, canonicalPayload, canonicalizeArtifactJson, canonicalizeMcpResourceUri, canonicalizeSecurityPath, canonicalizeToolName, checkSandbox, classifyProviderHttpError, cleanupReadImagePreviews, cleanupSessionRuntime, clearMcpServerApproval, clearProjectAllowedTools, clearProjectLastSessionSummary, clearProjectMcpApproval, clearProjectMcpApprovals, clipXenoAnsi, coerceSubagentRole, coerceSubagentTeamPreset, compileAgentProfile, compileJsonSchema, compileToolInputSchema, compileXenoRecipe, compileXenoSkillActivation, configureImageGeneration, configureSearch, configureSearchPermissionProfile, configureXenoAnsi, containmentApprovalSigningPayload, containmentCertificationSigningPayload, copyTextToClipboard, create3DTools, createAgentDefinitionFile, createAgentDefinitionPromptSection, createAgentRunId, createAppServerV2HttpTransport, createArchitectTools, createArtifactCompareTool, createAskUserTool, createAudioTools, createAuditBackedPermissionEngine, createBashTool, createBenchBashMiddleware, createCliAutomationAuditSink, createCliGovernedAutomationRuntime, createCommandBackedProtectedStateStore, createDefaultToolRegistry, createDelegatedXenoAgent, createDirectProvider, createDirectShellMessage, createDispatchAgentTool, createDocsTools, createEd25519Signer, createEditTool, createElfAnalyzeTool, createEngineTools, createGcodeAnalyzeTool, createGenerateImageTool, createGlobTool, createGovernanceExtensions, createGrepTool, createHtmlSanitizerAuditTool, createImageTools, createLsTool, createLspDefinitionTool, createLspDiagnosticsTool, createLspHoverTool, createLspReferencesTool, createMcpAppCapabilities, createMcpAppExtensionCapabilities, createMcpPkcePair, createMcpPromptRegisteredTool, createMcpRegisteredTool, createMcpResourceRegisteredTool, createMemoryProtectedStateStore, createMemoryReadTool, createMemoryWriteTool, createNotebookEditTool, createNotebookReadTool, createNotesTools, createOsProtectedStateStore, createProtectedStateEnvelopeCipher, createReadImageTool, createReadTool, createSheetsTools, createSlidesTools, createSpeechRecognizer, createSqliteAnalyzeTool, createTaskInputTool, createTaskListTools, createTaskOutputTool, createTaskStopTool, createThinkTool, createToolAlias, createToolRuntimeContext, createUnavailableProtectedStateStore, createVideoTools, createWebContextFetchTool, createWebContextRequestFactory, createWebContextSearchTool, createWebSearchTool, createWindowsDpapiProtectedCipher, createWindowsDpapiProtectedFileStore, createWorkflowTools, createWriteTool, createXenoAgent, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createCliAutomationAuditSink as createXenoHostAutomationAuditSink, createCliGovernedAutomationRuntime as createXenoHostGovernedAutomationRuntime, createXenoHostedControlCommand, createXenoHostedEnvironmentManifest, createXenoHostedEvent, createXenoHostedExecutionBoundaryReceipt, createXenoHostedRunResult, createXenoRasterPreview, createXenoSecureShare, createXenoSessionHandoff, createXenoShareSigningIdentity, createXenoSkillTool, createXenoSourceResearchExcerpt, createXenoSourceResearchReport, currentExecutionAdapterStatus, decodeJwtPayload, decodeXenoBmp, decodeXenoGif, decodeXenoGifAnimation, decodeXenoJpeg, decodeXenoNetpbm, decodeXenoPng, decodeXenoSvg, decodeXenoVp8, decodeXenoWebp, defaultToolRuntimeContext, defaultXenoReviewPack, deflateXenoZlib, deleteSession, denyMcpServer, deriveHostedIdempotencyKey, describeXenoAutomationOperation, detectLanguage, detectPluginRepositorySignals, detectRepositoryDocumentKind, detectRepositoryLanguage, detectXenoSpecDrift, deterministicReduce, digestMessages, directProviderConfigFromConnection, discoverXenoSkills, dispatchAgentTool, editTool, elfAnalyzeTool, emitXenoTelemetry, encodeXenoPngRgb, enforceShellCommandPolicy, enforceToolPolicy, ensureConfigDir, ensureDurableMessageIds, ensureProjectStateDir, estimateFullRequestBudget, evaluateContainmentUiRestrictions, evaluatePermissionProfileNetworkUrl, evaluateXenoCapabilityEligibility, executeXenoCoordinationAction, extractJsonObject, extractToolPath, findXenoSkill, fingerprintXenoSecureExecutionContract, forgetRecentSession, forgetRecentSessionById, formatBoundedShellOutput, formatCost, formatDirectShellContext, formatJsonSchemaErrors, formatModelList, formatPromptContextBreakdown, gcodeAnalyzeTool, generateImageTool, generateSessionId, getAgentHome, getAgentRunDir, getAgentRunStoreDir, getAvailableModels, getBenchmarkComputeBudgetHintForCommand, getBenchmarkForegroundTimeoutForCommand, getBestExecutionSecurityStatus, getChatModels, getConfigDir, getDefaultProviderRegistry, getExecutionSecurityCapabilityReport, getExecutionSecurityStatus, getGlobIgnores, getGrepIgnores, getHighRiskPermissions, getImageGenerationConfig, getJwtExpiry, getLinuxBubblewrapCapability, getLogLevel, getManagedConfigPath, getMcpAppMetadata, getMcpAppResourceUri, getMcpApprovalDecision, getMcpAuthorizationServerMetadataUrls, getMcpPromptToolName, getMcpProtectedResourceMetadataUrls, getMcpResourceToolName, getMcpToolName, getModelName, getMxcContainmentProbe, getMxcNativeAssetDescriptor, getMxcWindowsHostPreparationDescriptor, getMxcWindowsHostPreparationHelperArchitecture, getPermissionProfile, getPersistentShellSession, getPersistentShellSpawnSpec, getProcessContainmentStatus, getProjectAgentDefinitionDirs, getProjectAgentDefinitionsDir, getProjectLastSessionSummary, getProjectMcpApproval, getProjectStatePath, getReadImagePreviewCapability, getRecentSessionsIndexPath, getSubagentTeamPresetDefinition, getToolRiskLevel, getUserAgentDefinitionsDir, gitBranchTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, globTool, grepTool, gzipXeno, hasProjectOnboardingCompleted, hasXenoTelemetrySubscribers, hashContainmentConformanceReport, hashPluginManifest, hashPluginTree, hookResultStatus, hostedEnvironmentIdentity, htmlSanitizerAuditTool, importLegacyXenoSkill, inflateXenoZlib, initializeSessionRuntime, inspectCliAutomationStatus, inspectRuntimeManifests, inspectSecurityPath, inspectSystemPrompt, inspectCliAutomationStatus as inspectXenoHostAutomationStatus, inspectXenoRepositoryFreshness, inspectXenoRepositorySymbol, installSignalHandlers, invalidateAllObservedFiles, invokeXenoSkill, isChatModel, isDangerousCommand, isDirectShellMessage, isExpiredJwt, isExplicitResearchPrompt, isJwt, isLocalModel, isMcpAppResourceUri, isMcpOAuthTokenExpired, isMcpToolVisibleToApp, isMcpToolVisibleToModel, isNotBeforeJwt, isPathWithinAllowed, isScreenCaptureAvailable, isSensitiveEnvironmentKey, isSimpleInformationalPrompt, isSpeechRecognitionAvailable, isSupportedMcpProtocolVersion, isToolAllowedByXenoSkillActivation, isUncOrDevicePath, isValidAgentDefinitionName, isValidModel, isValidSessionId, isWorkspaceTrusted, isXenoAutomationOperation, legacyAgentArtifactToXenoArtifact, listBuiltInAgentProfiles, listPermissionProfiles, listProjectAllowedTools, listProjectMcpApprovals, listSessions, loadConfig, loadConfiguredMcpServers, loadMcpConfigFile, loadProjectConfig, loadProjectState, loadRecentSessionsIndex, loadSession, loadUserConfig, loadXenoSkill, lookupRecentSession, lsTool, lspDefinitionTool, lspDiagnosticsTool, lspHoverTool, lspReferencesTool, matchPermissionRule, matchesMcpRegistryEntryPolicy, materializeXenoAutomationEvidence, memoryReadTool, memoryWriteTool, mergeConfigs, mxcWarningsRequireWindowsHostPreparation, normalizeDirectShellResultRecord, normalizeHookDecision, normalizeMcpAppVisibility, normalizePermissionProfileName, normalizeRepositoryRelativePath, normalizeSourceText, normalizeSubagentBranchPolicy, normalizeWorkingDirectory, normalizeXenoHostedControlAcknowledgement, notebookEditTool, notebookReadTool, parseContainmentReviewerTrustStore, parseMcpWwwAuthenticate, parsePermissionRule, parseRetryAfter, parseSessionId, parseShellPathReferences, parseSubagentRemoteMcpPolicy, parseSubagentRoleList, parseUnifiedDiff, parseXenoAnsi, parseXenoRecipeDefinition, persistXenoAutomationEvidence, planXenoControlRoomAction, pluginInfoRelevanceCandidate, pluginListingRelevanceCandidate, pluginSignaturePayload, preflightLocalModel, prepareMxcWindowsHost, probeXenoProvider, projectToolDefinitionsForProvider, projectToolSchemaForProvider, projectXenoControlRoom, providerCapabilityError, providerProtocolError, publicKeyFingerprint, publishPlugin, rankPluginRelevance, readCliAutomationEnvironment, readImageTool, readManifestFromDisk, readPluginDetachedSignature, readPluginSupplyChainLockfile, readSessionFormatVersion, readTool, readXenoApiKey, readCliAutomationEnvironment as readXenoHostAutomationEnvironment, recordRecentSession, recordXenoCounter, recordXenoEvent, recordXenoHistogram, recoverSessionMessages, redactXenoShareValue, registerShutdownCleanup, registry, removeMcpServerConfig, removeProjectAllowedTool, renderAgentDefinition, renderAgentDefinitions, renderAuditReplayMarkdown, renderAuditReplayReport, renderAuditTraceMarkdown, renderAuditTraceReport, renderAuditTraceSummaries, renderCliAutomationStatus, renderCodingBenchmarkMarkdown, renderCodingBenchmarkReport, renderContinuationIncompleteStatus, renderLspDefinitionReport, renderLspDiagnosticsReport, renderLspDoctorReport, renderLspHoverReport, renderLspReferencesReport, renderToolContinuationInput, renderCliAutomationStatus as renderXenoHostAutomationStatus, renderXenoSkillCatalog, repairInterruptedToolCalls, repairToolExchangeHistory, requestBackground, requiresSecuredProcessLaunch, resetAllPersistentShellSessions, resetBashBenchmarkGuards, resetImageGenerationConfig, resetMcpServerApprovals, resetMxcContainmentProbe, resetPersistentShellSession, resetXenoAnsiPolicy, resetXenoTelemetryCardinalityForTests, resizeXenoRaster, resolveAgentDefinition, resolveAgentProfile, resolveAgentToolPolicy, resolveBuiltInAgentProfile, resolveCommandOnPath, resolveContainmentConformanceTemporaryRoot, resolveDelegatedExecutionMode, resolveExecutionSecurityLevel, resolveExecutionTrustMode, resolveInteractiveTurnMaxIterations, resolveModelContextTokens, resolvePermissionProfile, resolveShellInvocation, resolveSubagentRemoteMcpAccess, resolveSubagentWorkflowAnswer, resolveXenoAutomationEvidencePolicy, resolveXenoSdkApiKey, runAgentHook, runCommandHook, runContainmentConformanceSuite, runDelegatedXenoTurn, runDelegationPlan, runHookDefinition, runHooks, runHttpHook, runPromptHook, runSubagentWorkflow, runXenoThread, runXenoThreadStreamed, sanitizeEnvironment, sanitizeXenoTelemetryAttributes, saveConfig, saveMcpConfigFile, saveProjectState, saveSession, scaffoldPlugin, scanAgentDefinitions, scoreMemories, scorePluginRelevance, searchXenoRepositoryIndex, selectXenoProviderRoute, serializeXenoRecipe, setLogLevel, setProjectLastSessionSummary, setProjectMcpApproval, setProjectOnboardingCompleted, setWorkspaceTrusted, setupAIHandlers, sha256ArtifactBytes, sha256ArtifactJson, shouldEnableExecutionGovernance, shouldSourceShellProfile, shouldUseIsolatedStdinForCommand, signSharePayload, sqliteAnalyzeTool, stripXenoAnsi, subscribeXenoTelemetry, summarizeAuditInputRecord, summarizeAuditTraces, summarizeRuntimeInput, summarizeSubagentResults, summarizeXenoArtifactReview, syncMcpToolsToRegistry, synthesizeSkill, taskInputTool, taskOutputTool, taskStopTool, testPlugin, thinkTool, toAgentDefinitionMetadata, toLLMProvider, toolEvidenceToXenoArtifact, toolOperationManager, toolRiskLevel, turnDiffSummaryToXenoArtifact, unifiedDiffToXenoArtifact, unifiedExecManager, updateProjectState, upsertMcpServerConfig, validateAgentDefinition, validateCapabilityLeaseRequest, validateDelegationPlan, validateDirectEndpoint, validateExecutionSecurityPolicy, validateJsonSchema, validateManifest, validateMcpAppResource, validateXenoArtifact, validateXenoArtifactReviewEvent, validateXenoControlRoomSnapshot, validateXenoEvidenceGraph, validateXenoRepositoryIndex, validateXenoSdkApiKey, validateXenoSecureExecutionContract, validateXenoSpecDocument, verifyContainmentCertification, verifyContainmentCertificationApproval, verifyPluginSupplyChain, verifySignature, verifySoulRecord, verifyXenoHostedControlCommand, verifyXenoHostedEnvironmentManifest, verifyXenoHostedEventChain, verifyXenoHostedExecutionAdapterCertification, verifyXenoHostedExecutionJob, verifyXenoHostedRunResult, verifyXenoHostedWebhook, verifyXenoSecureShare, verifyXenoSessionHandoff, webFetchTool, webSearchTool, windowsDpapiProtect, windowsDpapiUnprotect, withXenoTelemetrySpan, wrapXenoAnsi, writePluginSupplyChainLockfile, writeTool, xenoAnsi, xenoAnsiVisibleWidth, xenoArtifactToDiffDocument, xenoArtifactToLegacyAgentArtifact, xenoArtifactToOracleReport, xenoArtifactToReviewReport, xenoArtifactToSourceResearchReport, xenoArtifactToSpecDocument, xenoArtifactToSpecExecution, xenoArtifactToToolEvidence, xenoArtifactToTurnDiffSummary, xenoHostedExecutionAdapterSigningPayload, xenoOracleReportToArtifact, xenoRecipeFingerprint, xenoReviewReportToArtifact, xenoReviewReportToGitHubComments, xenoSourceResearchReportToArtifact, xenoSpecArtifactIds, xenoSpecExecutionToArtifact, xenoSpecToArtifactBundle };