@xenosystem/agent-sdk 0.9.25 → 0.9.27

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 import { WebJobProgress, WebJobProgressListener } from "@xenosystem/web-context-client/progress";
 export { WebJobProgress, WebJobProgressListener } from "@xenosystem/web-context-client/progress";
+import { DatabaseSync } from "node:sqlite";
 import { Readable, Writable } from "node:stream";
 import { ChildProcess } from "node:child_process";
 type TokenEstimator = (text: string, model: string) => number;
@@ -781,7 +782,7 @@ interface PolicyEnforcerConfig {
     };
 }
 type AgentSandbox = PolicyEnforcerConfig;
-declare const SDK_VERSION = "0.9.25";
+declare const SDK_VERSION = "0.9.26";
 type AuditRiskLevel = "none" | "low" | "medium" | "high" | "critical";
 type AuditDecision = "allow" | "ask" | "deny";
 type AuditStatus = "ok" | "error";
@@ -1661,6 +1662,7 @@ declare class InMemoryXenoCapabilityLeaseRegistry {
     private readonly maximumUses;
     private idCounter;
     constructor(options?: InMemoryXenoCapabilityLeaseRegistryOptions);
+    static fromPersistedLease(value: unknown, options?: InMemoryXenoCapabilityLeaseRegistryOptions): InMemoryXenoCapabilityLeaseRegistry;
     request(request: XenoCapabilityLeaseRequest, profile: CompiledAgentProfile): XenoCapabilityLease;
     approve(request: XenoCapabilityLeaseApprovalRequest): XenoCapabilityLease;
     deny(request: XenoCapabilityLeaseDenialRequest): XenoCapabilityLease;
@@ -1672,6 +1674,7 @@ declare class InMemoryXenoCapabilityLeaseRegistry {
     private assertVersion;
     private refreshState;
 }
+declare function assertPersistedXenoCapabilityLease(value: unknown): asserts value is XenoCapabilityLease;
 type ExecutionSecurityErrorCode = "CONTAINMENT_CERTIFICATION_INVALID" | "CONTAINMENT_UNAVAILABLE" | "NETWORK_ISOLATION_UNAVAILABLE" | "PROCESS_HARDENING_UNAVAILABLE" | "SECURITY_POLICY_INVALID" | "UNTRUSTED_EXECUTION_DISABLED";
 declare class ExecutionSecurityError extends Error {
     readonly code: ExecutionSecurityErrorCode;
@@ -2015,6 +2018,7 @@ interface XenoAutomationExecutionGrant {
     capabilityUse: XenoCapabilityUse;
 }
 interface XenoAutomationAdapterExecutionResult {
+    operationId?: string;
     status: "ok" | "denied" | "cancelled" | "error";
     startedAt: string;
     completedAt: string;
@@ -2037,6 +2041,7 @@ interface XenoAutomationLeaseAuthority {
     consume(leaseId: string, expectedVersion: number, use: XenoCapabilityUse): Promise<XenoCapabilityLease> | XenoCapabilityLease;
 }
 interface XenoAutomationExecutionResult {
+    replayed?: boolean;
     operationId: string;
     status: "ok" | "denied" | "cancelled" | "error" | "evidence-incomplete";
     effect: XenoAutomationEffect;
@@ -2079,7 +2084,7 @@ interface XenoAutomationOperationDescriptor {
 declare const XENO_AUTOMATION_OPERATIONS: readonly XenoAutomationOperation[];
 declare function describeXenoAutomationOperation(operation: XenoAutomationOperation): XenoAutomationOperationDescriptor;
 declare function isXenoAutomationOperation(value: string): value is XenoAutomationOperation;
-type XenoAutomationErrorCode = "AUTOMATION_REQUEST_INVALID" | "AUTOMATION_CONTRACT_INVALID" | "AUTOMATION_CONTRACT_EXPIRED" | "AUTOMATION_IDENTITY_MISMATCH" | "AUTOMATION_OPERATION_UNSUPPORTED" | "AUTOMATION_POLICY_DENIED" | "AUTOMATION_TARGET_CHANGED" | "AUTOMATION_PREFLIGHT_INVALID" | "AUTOMATION_EVIDENCE_REQUIRED" | "AUTOMATION_EVIDENCE_INVALID" | "AUTOMATION_EVIDENCE_PERSISTENCE_FAILED" | "AUTOMATION_CANCELLED" | "AUTOMATION_TRANSPORT_ERROR" | "AUTOMATION_RESPONSE_INVALID" | "AUTOMATION_OPERATION_CONFLICT";
+type XenoAutomationErrorCode = "AUTOMATION_REQUEST_INVALID" | "AUTOMATION_CONTRACT_INVALID" | "AUTOMATION_CONTRACT_EXPIRED" | "AUTOMATION_IDENTITY_MISMATCH" | "AUTOMATION_OPERATION_UNSUPPORTED" | "AUTOMATION_POLICY_DENIED" | "AUTOMATION_TARGET_CHANGED" | "AUTOMATION_PREFLIGHT_INVALID" | "AUTOMATION_EVIDENCE_REQUIRED" | "AUTOMATION_EVIDENCE_INVALID" | "AUTOMATION_EVIDENCE_PERSISTENCE_FAILED" | "AUTOMATION_CANCELLED" | "AUTOMATION_TRANSPORT_ERROR" | "AUTOMATION_RESPONSE_INVALID" | "AUTOMATION_OPERATION_CONFLICT" | "AUTOMATION_OUTCOME_PENDING";
 declare class XenoAutomationError extends Error {
     readonly code: XenoAutomationErrorCode;
     readonly detail?: Record<string, string | number | boolean | null> | undefined;
@@ -2174,15 +2179,133 @@ interface MaterializeXenoAutomationEvidenceOptions {
 declare function materializeXenoAutomationEvidence(options: MaterializeXenoAutomationEvidenceOptions): XenoArtifactEnvelope[];
 declare function persistXenoAutomationEvidence(repository: XenoArtifactRepository | undefined, artifacts: readonly XenoArtifactEnvelope[]): Promise<XenoArtifactEnvelope[]>;
 declare function assertRequiredXenoAutomationEvidence(evidence: readonly XenoAutomationEvidenceInput[], policy: XenoAutomationEvidencePolicy, phase: "before" | "after" | "recording"): void;
+interface XenoAutomationJournalIdentity {
+    operationId: string;
+    fingerprint: string;
+    ownerToken: string;
+}
+interface XenoAutomationJournalRecord extends XenoAutomationJournalIdentity {
+    schemaVersion: 1;
+    outcome: {
+        kind: "pending";
+    } | {
+        kind: "result";
+        artifactId: string;
+        sha256: string;
+    } | {
+        kind: "failed";
+        code: string;
+    };
+}
+interface XenoAutomationExecutionJournal {
+    get(operationId: string): Promise<XenoAutomationJournalRecord | undefined>;
+    begin(identity: XenoAutomationJournalIdentity): Promise<{
+        claimed: boolean;
+        record: XenoAutomationJournalRecord;
+    }>;
+    finish(identity: XenoAutomationJournalIdentity, outcome: Exclude<XenoAutomationJournalRecord["outcome"], {
+        kind: "pending";
+    }>): Promise<void>;
+}
+declare function openSqliteAutomationExecutionJournal(path: string): Promise<SqliteAutomationExecutionJournal>;
+declare class SqliteAutomationExecutionJournal implements XenoAutomationExecutionJournal {
+    private readonly database;
+    private closed;
+    constructor(database: DatabaseSync);
+    begin(identity: XenoAutomationJournalIdentity): Promise<{
+        claimed: boolean;
+        record: XenoAutomationJournalRecord;
+    }>;
+    get(operationId: string): Promise<XenoAutomationJournalRecord | undefined>;
+    finish(identity: XenoAutomationJournalIdentity, outcome: Exclude<XenoAutomationJournalRecord["outcome"], {
+        kind: "pending";
+    }>): Promise<void>;
+    close(): void;
+    private read;
+    private transaction;
+}
+interface CapabilityMutationReceipt {
+    schemaVersion: 1;
+    commandId: string;
+    fingerprint: string;
+    lease: XenoCapabilityLease;
+}
+interface CapabilityLeaseTransaction {
+    lease(id: string): unknown | undefined;
+    receipt(id: string): unknown | undefined;
+    writeLease(lease: XenoCapabilityLease, expectedVersion: number | null): void;
+    writeReceipt(receipt: CapabilityMutationReceipt): void;
+}
+interface CapabilityLeasePersistence {
+    transaction<T>(callback: (transaction: CapabilityLeaseTransaction) => T): Promise<T>;
+    readLease?(id: string): Promise<unknown | undefined>;
+}
+interface CapabilityMutationAck {
+    lease: XenoCapabilityLease;
+    replayed: boolean;
+    executionDisposition: "dispatch-once" | "receipt-only";
+}
+type CapabilityLeaseCommand = {
+    kind: "request";
+    request: XenoCapabilityLeaseRequest & {
+        leaseId: string;
+    };
+    profile: CompiledAgentProfile;
+} | {
+    kind: "approve";
+    request: XenoCapabilityLeaseApprovalRequest;
+} | {
+    kind: "deny";
+    request: XenoCapabilityLeaseDenialRequest;
+} | {
+    kind: "revoke";
+    request: XenoCapabilityLeaseRevocationRequest;
+} | {
+    kind: "consume";
+    request: {
+        leaseId: string;
+        expectedVersion: number;
+        use: XenoCapabilityUse;
+    };
+};
+interface DurableCapabilityLeaseOptions extends InMemoryXenoCapabilityLeaseRegistryOptions {
+    persistence: CapabilityLeasePersistence;
+    authorizeMutation(command: Readonly<CapabilityLeaseCommand>): boolean;
+}
+declare class DurableXenoCapabilityLeaseRegistry {
+    private readonly options;
+    constructor(options: DurableCapabilityLeaseOptions);
+    request(commandId: string, request: XenoCapabilityLeaseRequest & {
+        leaseId: string;
+    }, profile: CompiledAgentProfile): Promise<CapabilityMutationAck>;
+    approve(commandId: string, request: XenoCapabilityLeaseApprovalRequest): Promise<CapabilityMutationAck>;
+    deny(commandId: string, request: XenoCapabilityLeaseDenialRequest): Promise<CapabilityMutationAck>;
+    revoke(commandId: string, request: XenoCapabilityLeaseRevocationRequest): Promise<CapabilityMutationAck>;
+    consume(commandId: string, leaseId: string, expectedVersion: number, use: XenoCapabilityUse): Promise<CapabilityMutationAck>;
+    get(leaseId: string): Promise<XenoCapabilityLease | undefined>;
+    inspect(leaseId: string): Promise<XenoCapabilityLease | undefined>;
+    private apply;
+}
+declare function validateCapabilityMutationReceipt(value: unknown): CapabilityMutationReceipt;
+interface XenoDurableAutomationOptions {
+    journal: XenoAutomationExecutionJournal;
+    artifactRepository: XenoArtifactRepository;
+    assertCurrent(request: Readonly<XenoAutomationRequest>): Promise<void>;
+    consume(commandId: string, leaseId: string, expectedVersion: number, use: XenoCapabilityUse): Promise<CapabilityMutationAck>;
+}
+declare function runDurableAutomation(options: XenoDurableAutomationOptions, request: XenoAutomationRequest, fingerprint: string, run: (consumeCommandId: string) => Promise<XenoAutomationExecutionResult>): Promise<XenoAutomationExecutionResult>;
+declare function pending(): XenoAutomationError;
 interface XenoGovernedAutomationExecutorOptions {
     adapter: XenoAutomationAdapter;
-    leaseAuthority: XenoAutomationLeaseAuthority;
+    leaseAuthority?: XenoAutomationLeaseAuthority;
+    durable?: XenoDurableAutomationOptions;
     artifactRepository?: XenoArtifactRepository;
     now?: () => string;
 }
 declare class XenoGovernedAutomationExecutor {
     private readonly adapter;
     private readonly leaseAuthority;
+    private readonly durable;
     private readonly artifactRepository?;
     private readonly now;
     private readonly executions;
@@ -3716,6 +3839,10 @@ declare function validateXenoSdkApiKey(options: ValidateXenoSdkApiKeyOptions): P
 declare const DEFAULT_API_KEY: string;
 declare const XENO_API_BASE: string;
 declare const XENO_RT_DEFAULT_URL: string;
+declare function resolveLocalRuntimeUrl(options?: {
+    localRuntimeUrl?: string;
+    ollamaBaseURL?: string;
+}): string;
 declare const DEFAULT_MODEL: string;
 declare const FALLBACK_MODELS: readonly string[];
 interface ModelInfo {
@@ -3854,6 +3981,22 @@ declare class ModelProviderRegistry {
     }): ResolvedProvider;
 }
 declare function getDefaultProviderRegistry(): ModelProviderRegistry;
+type DirectEndpointProfile = "public-https" | "local-network";
+interface DirectEndpointPolicy {
+    profile?: DirectEndpointProfile;
+    allowedHosts?: string[];
+    resolveHostname?: (hostname: string) => Promise<string[]>;
+}
+declare function validateDirectEndpoint(raw: string, policy?: DirectEndpointPolicy): URL;
+declare function assertDirectEndpointResolution(url: URL, policy?: DirectEndpointPolicy): Promise<void>;
+interface ProviderTransportLimits {
+    connectTimeoutMs?: number;
+    totalTimeoutMs?: number;
+    idleTimeoutMs?: number;
+    maxResponseBytes?: number;
+    maxHeaderBytes?: number;
+    maxEventBytes?: number;
+}
 interface PermissionDecisionEvent {
     traceId?: string;
     toolName: string;
@@ -4028,6 +4171,8 @@ interface ApiRequestFailureDiagnostics {
 interface LlmClientDeps {
     readonly baseURL: string;
     readonly ollamaBaseUrl: string;
+    readonly localRuntimeProtocol?: "openai-chat" | "ollama-native";
+    readonly localTransportLimits?: ProviderTransportLimits;
     readonly apiKey?: string;
     readonly maxTokens: number;
     getApiRequestTimeoutMs(): number;
@@ -4036,7 +4181,6 @@ interface LlmClientDeps {
 }
 declare class LlmClient {
     private readonly deps;
-    private ollamaMode;
     constructor(deps: LlmClientDeps);
     readonly id = "xeno-llm-client";
     complete(model: string, messages: ApiMessage[], tools: ToolDefinition[], onText?: (text: string) => void, signal?: AbortSignal): Promise<StreamResult>;
@@ -4080,8 +4224,6 @@ declare class LlmClient {
     callChatCompletionsNonStream(model: string, apiMessages: ApiMessage[], tools: ToolDefinition[], onText?: (text: string) => void, signal?: AbortSignal): Promise<StreamResult>;
     callChatCompletions(model: string, apiMessages: ApiMessage[], tools: ToolDefinition[], onText?: (text: string) => void, signal?: AbortSignal): Promise<StreamResult>;
     callOllama(model: string, apiMessages: ApiMessage[], tools: ToolDefinition[], onText?: (text: string) => void, signal?: AbortSignal): Promise<StreamResult>;
-    private callOllamaOpenAI;
-    private callOllamaNative;
 }
 type LLMProviderMessage = ApiMessage;
 type LLMCompletionResult = StreamResult;
@@ -4154,6 +4296,12 @@ interface LLMProviderCapabilities {
     readonly [capability: string]: boolean | undefined;
 }
 interface LLMProvider {
+    prepareQuotaRequest?(model: string, messages: LLMProviderMessage[], tools: ToolDefinition[], context?: LLMProviderRequestContext, signal?: AbortSignal): Promise<{
+        basis: "provider-enforced";
+        inputTokensUpperBound: number;
+        outputTokensUpperBound: number;
+        execute(onText?: (text: string) => void, signal?: AbortSignal): Promise<LLMCompletionResult>;
+    }>;
     readonly id: string;
     readonly model?: string;
     readonly capabilities?: LLMProviderCapabilities;
@@ -4751,7 +4899,7 @@ interface XenoPtyAdapter {
     readonly name?: string;
     spawn(options: XenoPtySpawnOptions): XenoPtyProcess;
 }
-type UnifiedExecEventType = "process.started" | "process.output" | "process.input" | "process.resized" | "process.attached" | "process.detached" | "process.presentation_changed" | "process.exited" | "process.failed" | "process.terminated" | "process.output_limit" | "process.pty_unavailable";
+type UnifiedExecEventType = "process.started" | "process.output" | "process.input" | "process.resized" | "process.attached" | "process.detached" | "process.presentation_changed" | "process.exited" | "process.settled" | "process.failed" | "process.terminated" | "process.output_limit" | "process.pty_unavailable";
 interface UnifiedExecEvent {
     type: UnifiedExecEventType;
     process: UnifiedExecProcess;
@@ -4811,10 +4959,12 @@ declare class UnifiedExecManager {
         ownerSessionId?: string;
     }): UnifiedExecProcess[];
     get(processId: string): UnifiedExecProcess | null;
+    hasExited(processId: string): boolean;
     remove(processId: string): boolean;
     dispose(): void;
     private startPipe;
     private startPty;
+    private observeExit;
     private captureBuffer;
     private captureText;
     private appendText;
@@ -5067,6 +5217,9 @@ interface AgentLoopConfig {
     apiKey?: string;
     baseURL: string;
     ollamaBaseURL?: string;
+    localRuntimeUrl?: string;
+    localRuntimeProtocol?: "openai-chat" | "ollama-native";
+    localTransportLimits?: ProviderTransportLimits;
     model: string;
     fallbackModels?: string[];
     effort?: AgentEffortLevel;
@@ -5511,8 +5664,27 @@ interface BackgroundProcessManagerOptions {
     maxPendingWriteBytes?: number;
     registerCleanup?: boolean;
 }
+interface BackgroundOwnerCleanupToken {
+    schemaVersion: 1;
+    managerInstanceId: string;
+    ownerSessionId: string;
+    tasks: Array<{
+        taskId: string;
+        processId?: string;
+        operationId?: string;
+    }>;
+}
+interface BackgroundOwnerCleanupResult {
+    settled: boolean;
+    taskIds: string[];
+    pendingTaskIds: string[];
+    unknownTaskIds: string[];
+    error?: string;
+}
 declare class BackgroundProcessManager {
     private readonly execManager;
+    private readonly managerInstanceId;
+    private readonly cleanupFences;
     private readonly states;
     private readonly processToTask;
     private readonly listeners;
@@ -5549,6 +5721,15 @@ declare class BackgroundProcessManager {
     cleanupOwner(ownerSessionId: string, options?: {
         deleteOutputs?: boolean;
     }): number;
+    captureOwnerCleanup(ownerSessionId: string): BackgroundOwnerCleanupToken;
+    sealOwnerAdmission(ownerSessionId: string, authority: BackgroundOwnerCleanupToken): BackgroundOwnerCleanupResult;
+    cleanupOwnerAndWait(ownerSessionId: string, options: {
+        authority: BackgroundOwnerCleanupToken;
+        timeoutMs?: number;
+    }): Promise<BackgroundOwnerCleanupResult>;
+    restoreOwnerAdmission(ownerSessionId: string, authority: BackgroundOwnerCleanupToken): boolean;
+    private validateCleanupAuthority;
+    private assertOwnerAdmission;
     deleteOutput(taskId: string): boolean;
     killAll(): void;
     dispose(): void;
@@ -6111,6 +6292,15 @@ declare function getLinuxBubblewrapCapability(): LinuxBubblewrapCapability;
 declare function buildLinuxBubblewrapProcessSpec(command: string, policy: PolicyEnforcerConfig, workingDirectory: string): LinuxBubblewrapProcessSpec;
 declare function isSensitiveEnvironmentKey(key: string): boolean;
 declare function sanitizeEnvironment(env: NodeJS.ProcessEnv, allowedSensitiveKeys?: readonly string[]): NodeJS.ProcessEnv;
+declare function openSqliteCapabilityLeasePersistence(path: string): Promise<SqliteCapabilityLeasePersistence>;
+declare class SqliteCapabilityLeasePersistence implements CapabilityLeasePersistence {
+    private readonly database;
+    private closed;
+    constructor(database: DatabaseSync);
+    readLease(id: string): Promise<unknown | undefined>;
+    transaction<T>(callback: (transaction: CapabilityLeaseTransaction) => T): Promise<T>;
+    close(): void;
+}
 declare const XENO_CONTAINMENT_APPROVAL_SCHEMA: "xeno.containment-certification-approval.v1";
 declare const XENO_CONTAINMENT_REVIEWER_TRUST_STORE_SCHEMA: "xeno.containment-reviewer-trusted-keys.v1";
 declare const MAX_CONTAINMENT_APPROVAL_AGE_MS: number;
@@ -6339,6 +6529,17 @@ declare function getMxcContainmentProbe(options?: {
 }): MxcContainmentProbe;
 declare function resetMxcContainmentProbe(): void;
 declare function prepareMxcWindowsHost(): MxcWindowsHostPreparationReport;
+interface ProtectedFileWriteReceipt {
+    outcome: "committed" | "not-committed" | "uncertain" | "exists";
+    phase: string;
+    errorCode: number;
+    retainedFiles: string[];
+}
+declare class ProtectedFileWriteError extends Error {
+    readonly receipt: ProtectedFileWriteReceipt;
+    constructor(receipt: ProtectedFileWriteReceipt);
+}
+type ProtectedFileWriter = (path: string, ciphertextEnvelope: string, ifAbsent: boolean) => ProtectedFileWriteReceipt;
 interface ProtectedStateStore {
     readonly kind: string;
     readonly available: boolean;
@@ -6348,6 +6549,8 @@ interface ProtectedStateStore {
     getBytes(key: string): Uint8Array | null;
     setBytes(key: string, value: Uint8Array): void;
     setBytesIfAbsent?(key: string, value: Uint8Array): boolean;
+    readonly writeContract?: "windows-replace-file-flush-v1";
+    readonly lastWriteReceipt?: ProtectedFileWriteReceipt;
 }
 interface ProtectedStateCipher {
     readonly kind: string;
@@ -6391,6 +6594,7 @@ interface WindowsDpapiProtectedFileOptions extends WindowsDpapiProtectedStateOpt
     storageDir?: string;
     configDir?: string;
     hashKey?: (key: string) => string;
+    writeCiphertext?: ProtectedFileWriter;
 }
 interface CommandBackedProtectedStateOptions {
     kind: string;
@@ -8302,6 +8506,7 @@ declare class FileXenoShareRegistry {
     private mutate;
 }
 declare const XENO_COORDINATION_SCHEMA_VERSION: 1;
+declare const XENO_COORDINATION_MANAGED_SESSION_SCHEMA_VERSION: 2;
 type XenoGoalStatus = "active" | "paused" | "waiting" | "blocked" | "completed" | "failed" | "cancelled";
 type XenoGoalTaskStatus = "pending" | "ready" | "running" | "blocked" | "failed" | "completed" | "cancelled" | "interrupted";
 interface XenoGoalCriterion {
@@ -8469,7 +8674,7 @@ interface XenoExecutionOwner {
     processId?: number;
     host?: string;
 }
-type XenoCoordinationEventType = "goal.created" | "goal.updated" | "goal.steered" | "goal.completed" | "goal.cancelled" | "loop.started" | "loop.iteration" | "loop.paused" | "loop.waiting" | "loop.resumed" | "loop.stopped" | "loop.completed" | "loop.failed" | "handoff.created" | "handoff.claimed" | "handoff.completed" | "handoff.failed" | "ownership.acquired" | "ownership.renewed" | "ownership.released";
+type XenoCoordinationEventType = "goal.created" | "goal.updated" | "goal.steered" | "goal.completed" | "goal.cancelled" | "loop.started" | "loop.iteration" | "loop.paused" | "loop.waiting" | "loop.resumed" | "loop.stopped" | "loop.completed" | "loop.failed" | "handoff.created" | "handoff.claimed" | "handoff.completed" | "handoff.failed" | "ownership.acquired" | "admission.fenced" | "admission.restored" | "ownership.renewed" | "ownership.released";
 interface XenoCoordinationEvent {
     schemaVersion: typeof XENO_COORDINATION_SCHEMA_VERSION;
     id: string;
@@ -8484,10 +8689,11 @@ interface XenoCoordinationEvent {
     data: Record<string, unknown>;
 }
 interface XenoCoordinationSessionState {
-    schemaVersion: typeof XENO_COORDINATION_SCHEMA_VERSION;
+    schemaVersion: typeof XENO_COORDINATION_SCHEMA_VERSION | typeof XENO_COORDINATION_MANAGED_SESSION_SCHEMA_VERSION;
     sessionId: string;
     version: number;
     ownershipEpoch: number;
+    admissionFence?: XenoCoordinationAdmissionFence;
     owner?: XenoExecutionOwner;
     goals: XenoGoalRecord[];
     loops: XenoLoopRecord[];
@@ -8496,6 +8702,13 @@ interface XenoCoordinationSessionState {
     createdAt: string;
     updatedAt: string;
 }
+interface XenoCoordinationAdmissionFence {
+    schemaVersion: 1;
+    authorityId: string;
+    operationId: string;
+    action: "archive" | "delete";
+    createdAt: string;
+}
 interface XenoCoordinationStoreOptions {
     rootDirectory?: string;
     now?: () => string;
@@ -8570,6 +8783,9 @@ declare class DurableXenoCoordinationStore {
     private readonly maximumEventsPerSession;
     constructor(options?: XenoCoordinationStoreOptions);
     getSessionState(sessionId: string): Promise<XenoCoordinationSessionState>;
+    fenceAdmission(sessionId: string, expectedVersion: number, input: Omit<XenoCoordinationAdmissionFence, "schemaVersion" | "createdAt">): Promise<XenoCoordinationAdmissionFence>;
+    clearAdmissionFence(sessionId: string, expectedVersion: number, authorityId: string, operationId: string): Promise<void>;
+    releaseDeadLifecycleOwner(sessionId: string, expectedVersion: number, authorityId: string, operationId: string): Promise<void>;
     listSessionStates(): Promise<XenoCoordinationSessionState[]>;
     createGoal(input: CreateXenoGoalInput): Promise<XenoGoalRecord>;
     getGoal(sessionId: string, goalId?: string): Promise<XenoGoalRecord | undefined>;
@@ -9543,6 +9759,11 @@ interface CreateXenoAgentOptions {
     cwd?: string;
     apiKey?: string;
     baseURL?: string;
+    localRuntimeUrl?: string;
+    ollamaBaseURL?: string;
+    localRuntimeProtocol?: "openai-chat" | "ollama-native";
+    localTransportLimits?: ProviderTransportLimits;
+    apiRequestTimeoutMs?: number;
     model?: string;
     fallbackModels?: string[];
     effort?: AgentEffortLevel;
@@ -11780,6 +12001,7 @@ declare function matchesMcpRegistryEntryPolicy(entry: MCPRegistryEntryDescriptor
 declare function getMcpToolName(serverName: string, toolName: string): string;
 declare function getMcpPromptToolName(serverName: string, promptName: string): string;
 declare function getMcpResourceToolName(serverName: string, resource: MCPResource): string;
+declare function mcpInputSchemaToToolSchema(inputSchema: Record<string, unknown> | undefined): ToolDefinition["input_schema"];
 declare function createMcpRegisteredTool(manager: MCPManager, tool: MCPTool): RegisteredTool;
 declare function createMcpPromptRegisteredTool(manager: MCPManager, prompt: MCPPrompt): RegisteredTool;
 declare function createMcpResourceRegisteredTool(manager: MCPManager, resource: MCPResource): RegisteredTool;
@@ -12898,22 +13120,6 @@ declare const SOUND_CAPABILITIES: readonly [
     "BPM and time signature control",
     "Export (WAV, MP3, FLAC, OGG, AIFF)"
 ];
-type DirectEndpointProfile = "public-https" | "local-network";
-interface DirectEndpointPolicy {
-    profile?: DirectEndpointProfile;
-    allowedHosts?: string[];
-    resolveHostname?: (hostname: string) => Promise<string[]>;
-}
-declare function validateDirectEndpoint(raw: string, policy?: DirectEndpointPolicy): URL;
-declare function assertDirectEndpointResolution(url: URL, policy?: DirectEndpointPolicy): Promise<void>;
-interface ProviderTransportLimits {
-    connectTimeoutMs?: number;
-    totalTimeoutMs?: number;
-    idleTimeoutMs?: number;
-    maxResponseBytes?: number;
-    maxHeaderBytes?: number;
-    maxEventBytes?: number;
-}
 type DirectProviderKind = "anthropic" | "openai-responses" | "google" | "openai-compatible";
 type DirectProviderCapabilityProfile = Pick<LLMProviderCapabilities, "streaming" | "textInput" | "imageInput" | "tools" | "parallelToolCalls" | "structuredOutput" | "reasoningMetadata" | "usageAccounting" | "cancellation" | "retryAfter" | "promptCaching">;
 interface DirectProviderConfig {
@@ -12940,6 +13146,8 @@ interface DirectProviderConfig {
     };
 }
 declare function createDirectProvider(config: DirectProviderConfig): LLMProvider;
+type OllamaNativeProviderConfig = Omit<DirectProviderConfig, "kind" | "streaming" | "capabilityProfile" | "chatCompletionsPath">;
+declare function createOllamaNativeProvider(config: OllamaNativeProviderConfig): LLMProvider;
 type ProviderErrorCategory = "authentication" | "authorization" | "unsupported_model" | "unsupported_capability" | "rate_limit" | "context_overflow" | "safety_refusal" | "timeout" | "disconnect" | "malformed_response" | "server" | "transport" | "endpoint_policy" | "cancelled";
 type ProviderErrorCode = "PROVIDER_AUTHENTICATION_FAILED" | "PROVIDER_AUTHORIZATION_FAILED" | "PROVIDER_MODEL_UNSUPPORTED" | "PROVIDER_CAPABILITY_UNSUPPORTED" | "PROVIDER_RATE_LIMITED" | "PROVIDER_CONTEXT_OVERFLOW" | "PROVIDER_SAFETY_REFUSAL" | "PROVIDER_TIMEOUT" | "PROVIDER_DISCONNECTED" | "PROVIDER_MALFORMED_RESPONSE" | "PROVIDER_SERVER_ERROR" | "PROVIDER_TRANSPORT_ERROR" | "PROVIDER_ENDPOINT_REJECTED" | "PROVIDER_CANCELLED";
 interface ProviderErrorOptions {
@@ -13146,6 +13354,73 @@ declare class FileXenoProviderConnectionStore {
     load(): Promise<XenoProviderConnectionSnapshot>;
     private mutate;
 }
+interface QuotaEntity {
+    id: string;
+    generation: string;
+}
+interface QuotaScope {
+    workspace: QuotaEntity;
+    team?: QuotaEntity;
+    agent?: QuotaEntity;
+}
+interface QuotaLimits {
+    requestsPerMinute: number | null;
+    tokensPerDay: number | null;
+}
+interface QuotaReservation {
+    id: string;
+    scope: QuotaScope;
+    requestHash: string;
+    reservedTokens: number;
+    admittedAt: number;
+    state: "reserved" | "dispatched" | "settled" | "void";
+    actualTokens?: number;
+}
+interface QuotaAuthority {
+    reserve(input: Omit<QuotaReservation, "admittedAt" | "state" | "actualTokens">): Promise<QuotaReservation>;
+    dispatch(id: string): Promise<void>;
+    settle(id: string, actualTokens: number): Promise<void>;
+    void(id: string): Promise<void>;
+}
+declare class QuotaError extends Error {
+    readonly code: "INVALID" | "CONFLICT" | "EXCEEDED" | "UNSUPPORTED" | "CORRUPT" | "CAPACITY" | "CLOCK_ROLLBACK";
+    constructor(code: "INVALID" | "CONFLICT" | "EXCEEDED" | "UNSUPPORTED" | "CORRUPT" | "CAPACITY" | "CLOCK_ROLLBACK", message: string);
+}
+declare function quotaInteger(value: unknown): number;
+declare function quotaText(value: unknown): string;
+declare function normalizeQuotaScope(scope: QuotaScope): QuotaScope;
+declare function quotaScopeKey(scope: QuotaScope): string;
+declare function quotaAncestors(scope: QuotaScope): QuotaScope[];
+declare function createQuotaGovernedProvider(provider: LLMProvider, authority: QuotaAuthority, scope: QuotaScope): LLMProvider;
+interface Policy {
+    scope: QuotaScope;
+    revision: number;
+    limits: QuotaLimits;
+}
+declare class FileQuotaAuthority implements QuotaAuthority {
+    private readonly now;
+    private readonly maximumEntries;
+    readonly directory: string;
+    constructor(directory: string, now?: () => number, maximumEntries?: number);
+    policy(scope: QuotaScope): Promise<Policy | null>;
+    setPolicy(scope: QuotaScope, value: QuotaLimits, expectedRevision: number): Promise<Policy>;
+    reservation(id: string): Promise<QuotaReservation | null>;
+    reserve(input: Omit<QuotaReservation, "admittedAt" | "state" | "actualTokens">): Promise<QuotaReservation>;
+    dispatch(id: string): Promise<void>;
+    void(id: string): Promise<void>;
+    settle(id: string, actualTokens: number): Promise<void>;
+    snapshot(scope: QuotaScope): Promise<{
+        authority: "local-file";
+        policies: Policy[];
+        heldTokens: number;
+        usedTokens: number;
+        requestsInLastMinute: number;
+        unresolved: number;
+    }>;
+    private apply;
+    private load;
+    private append;
+}
 interface CodeValidationResult {
     valid: boolean;
     errors: CodeValidationIssue[];
@@ -13313,4 +13588,4 @@ declare class AgentEvaluator {
     clearResults(): void;
     get resultCount(): number;
 }
-export { type A2AMessage, type A2AMessageType, AGENT_DAEMON_PROTOCOL_VERSION, AGENT_EFFORT_LEVELS, AGENT_PERMISSION_MODES, AGENT_PROFILE_EXTERNAL_ACTIONS, ARCHITECT_CAPABILITIES, ARCHITECT_TOOL_NAMES, type ActiveLayerInfo, type AddXenoArtifactCommentRequest, type AgentArtifact, type AgentCapabilities, type AgentCard, AgentDaemonClient, type AgentDaemonError, type AgentDaemonHandler, type AgentDaemonRequest, type AgentDaemonResponse, AgentDaemonServer, type AgentDaemonTransport, AgentDebugger, type AgentDefinition, type AgentDefinitionIsolation, type AgentDefinitionIssue, AgentDefinitionLoader, type AgentDefinitionLoaderOptions, type AgentDefinitionMetadata, AgentDefinitionResolver, type AgentDefinitionScanResult, type AgentDefinitionScope, type AgentDefinitionShadowRef, type AgentEffortLevel, AgentEvaluator, AgentEventStore, type AgentHookDefinition, AgentHookRunner, AgentInterruptedError, type AgentIpcChannel, type AgentLoadSnapshot, AgentLoop, type AgentLoopConfig, type AgentLoopOptions, type AgentPermissionMode, type AgentProfileActionDecision, type AgentProfileCapabilities, type AgentProfileCapabilityBoundary, type AgentProfileCollaborationMode, type AgentProfileCompletionPolicy, type AgentProfileEvidenceKind, type AgentProfileExecutionPolicy, type AgentProfileExternalAction, type AgentProfileExternalActionPolicy, type AgentProfileIsolation, type AgentProfileKind, type AgentProfileMemoryPolicy, type AgentProfileMemoryScope, type AgentProfilePresentation, type AgentProfileSkillPolicy, type AgentProfileSoulMode, type AgentProfileV2, AgentProfileValidationError, AgentProtocol, AgentRegistry, type AgentRunAgentDefinitionRef, AgentRunController, type AgentRunControllerOptions, type AgentRunCreateInput, AgentRunError, type AgentRunEvent, type AgentRunListOptions, type AgentRunOptions, type AgentRunRecord, type AgentRunSpawnResult, type AgentRunStatus, AgentRunStore, type AgentRunTermination, type AgentRunTerminationReason, type AgentRunTerminationStatus, type AgentRunUsage, type AgentSandbox, type AgentSelectionStrategy, type AgentSessionHostBindingV1, type AgentStreamCallbacks, type AgentTask, type AgentTaskHandler, type AgentTaskResult, type AgentTaskStatus, type AgentTeam, type AgentToAppChannel, type AgentToAppMessages, type AgentToolPolicy, type AnalysisResult, type ApiMessage, type AppAgentBaseOptions, AppAgentFactory, type AppAgentResult, type AppContext, AppContextInjector, AppContextManager, type AppContextProvider, type AppId, type AppServerEventV2, type AppServerInitializeParamsV2, type AppServerInitializeResultV2, type AppServerIntegrationMetadataV2, type AppServerPermissionRequestV2, type AppServerPrincipalV2, AppServerProtocolError, type AppServerProtocolErrorData, AppServerRemoteError, type AppServerRequestContext, type AppServerSubscriptionSnapshotV2, type AppServerThreadStatusV2, type AppServerThreadV2, type AppServerTurnRunnerContextV2, type AppServerTurnRunnerV2, type AppServerTurnStatusV2, type AppServerTurnV2, type AppServerV2ClientTransport, type AppServerV2MethodMap, type AppServerV2Options, type AppToAgentChannel, type AppToAgentMessages, type AppType, type ArchitectAgentOptions, type ArchitectToolAdapter, type AskUserHandler, type AskUserRequest, type AskUserResponse, type AtomicMessageGroup, type AudioProjectInfo, type AudioStemSeparationResult, type AudioToolAdapter, type AudioTrackType, type AudioTranscriptionResult, type AudioTranscriptionSegment, type AuditDecision, type AuditEvent, AuditLogger, type AuditReplayReport, type AuditReplayStep, type AuditRiskLevel, type AuditStatus, type AuditTraceGapEntry, type AuditTraceReport, type AuditTraceSummary, type AuditTraceTimelineEntry, type AuditTraceToolSummary, type AugmentContextOptions, type AuthorizedShellExecution, AutoCheckpointHandler, AutoMemory, type AutoMemoryContext, type AutoMemoryTrigger, AutoPermissionClassifier, type AutoPermissionDecision, BUILT_IN_XENO_PROVIDER_PRESETS, BackgroundProcessManager, type BackgroundTask, type BaseHookDefinition, type BenchBashMiddlewareOptions, type BlockContent, type BlockType, type BoundedShellOutput, type BreakpointCallback, type BuildResult, type BuildXenoSecureExecutionContractOptions, COMPAT_TOOL_ALIASES, CONFIG_VERSION, type CanonicalSecurityPath, type CanvasSize, type CellRangeData, type ChartConfig, type ChatCompletionChunk, type ChatCompletionRequest, type ChatCompletionResponse, type ChatMessage, type ChatParams, type ChatResponse, type CheckpointData, type CheckpointInfo, CheckpointManager, type CheckpointTrigger, type ClaimXenoHandoffInput, type ClashResult, type CliAutomationAuditEvent, type CliAutomationAuditLoggerPort, type CliAutomationEnvironment, type CliAutomationStatusReport, type CliAutomationSurfaceStatus, CliGovernedAutomationRuntime, type ClipContext, type CodeApplyOptions, type CodeApplyResult, type CodeValidationIssue, type CodeValidationResult, CodeValidator, type CodingBenchmarkAssessment, type CodingBenchmarkMeasurement, type CodingBenchmarkOptions, type CodingBenchmarkReport, type CodingBenchmarkThreshold, type CommandBackedProtectedStateOptions, type CommandHookDefinition, CommandHookRunner, type CompactionRecord, type CompileAgentProfileOptions, type CompiledAgentProfile, type CompiledJsonSchema, type CompletionDecision, type CompletionGuard, type CompletionGuardContext, type CompletionGuardDecision, type CompletionGuardEvaluationContext, CompletionGuardRegistry, type CompletionGuardResult, type CompletionGuardResultObject, type CompletionGuardStopReason, type CompletionGuardToolPolicy, type CompletionGuardToolPolicyMode, type CompletionGuardTurnStats, type CompletionGuardVeto, type ComponentData, type CompressionLLMFn, type CompressionStats, type ConfigProfile, type ConnectConfiguredMCPServersOptions, type ConnectConfiguredMCPServersResult, type ContainedProcessSpec, type ContainmentAdapterIdentity, ContainmentApprovalError, type ContainmentCertificationBinding, ContainmentCertificationError, type ContainmentConformanceCheck, type ContentBlock, type ContextCompressedData, ContextManager, type ContextManagerConfig, type ContextSection, type ContextSource, type ControlPlaneLockHandle, type ControlPlaneLockRecord, ConversationStore, type CreateAuditBackedPermissionEngineOptions, type CreateCliGovernedAutomationRuntimeOptions, type CreateDelegatedBranchAgent, type CreateDelegatedBranchAgentOptions, type CreateDelegatedXenoAgentOptions, type CreateXenoAgentOptions, type CreateXenoAgentResult, type CreateXenoGoalInput, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHandoffInput, type CreateXenoHandoffOptions, type CreateXenoHostGovernedAutomationRuntimeOptions, type CreateXenoShareOptions, type CreateXenoSkillToolOptions, type CreateXenoSourceResearchReportInput, type CrossAppHandler, type CrossAppMessage, CrossAppRouter, CrossAppRouterError, type CrossAppRouterOptions, DEFAULT_API_KEY, DEFAULT_IMAGE_MODEL, DEFAULT_MEMORY_BUDGETS, DEFAULT_MODEL, DEFAULT_PROMPT_SECTIONS_TOKEN_BUDGET, DEFAULT_PROTECTED_STATE_KEY_NAME, DEFAULT_PROTECTED_STATE_SERVICE, DEFAULT_SUBAGENT_BRANCH_POLICY, DEFAULT_SUBAGENT_REMOTE_MCP_BY_ROLE, DEFAULT_SUBAGENT_ROLES, DEFAULT_SUBAGENT_ROLE_PRECEDENCE, DEFAULT_SUBAGENT_TEAM_PRESET, DIRECT_SHELL_CONTEXT_WARNING, DOCS_CAPABILITIES, DOCS_TOOL_NAMES, type DebugBreakpoint, type DebugSnapshot, type DebugStep, type DebugStepCallback, type DecideXenoArtifactRequest, type DefaultToolRegistryOptions, type DefaultWebContextRequestFactoryOptions, type DelegatedBranchAdmission, type DelegatedBranchAdmissionSettlement, type DelegatedBranchAgent, type DelegatedBranchAgentCallbacks, type DelegatedXenoTurnResult, type DelegationBudget, type DelegationLimits, type DelegationSummaryData, type DependencyEdge, type DescendantInstructionHint, type DirectEndpointPolicy, type DirectEndpointProfile, type DirectProviderCapabilityProfile, type DirectProviderConfig, type DirectProviderKind, type DirectShellMessageMetadata, type DirectShellResultRecord, type DispatchAgentHandler, type DispatchAgentRequest, type DispatchAgentResponse, type DocComment, type DocsAgentOptions, type DocsToolAdapter, type DocumentContext, type DualLLMMode, DualLLMProvider, type DualLLMProviderConfig, type DualLLMProviderLike, type DualLLMStatus, DurableXenoCoordinationStore, ENGINE_CAPABILITIES, ENGINE_TOOL_NAMES, ElectronAgentBridge, type ElectronAgentConfig, type EngineAgentOptions, type EngineToolAdapter, type EntityInfo, type Episode, type EpisodeOutcome, EpisodicStore, type EpisodicStoreOptions, type ErrorData, type EvalReport, type EvalResult, type EvalRunOptions, type EvalTask, type ExchangeMCPOAuthCodeOptions, type ExecuteToolRequest, type ExecuteToolResult, type ExecuteXenoCoordinationActionInput, type ExecuteXenoCoordinationActionResult, ExecutionGovernance, type ExecutionGovernanceOptions, type ExecutionGovernanceSummary, type ExecutionMode, type ExecutionSecurityCapabilities, ExecutionSecurityError, type ExecutionSecurityErrorCode, type ExecutionSecurityLevel, type ExecutionTrustMode, type ExpectedOutputContract, type ExportableSoulSigner, type ExtendedAppType, FALLBACK_MODELS, type FailureCluster, type FileEntry, type FileSnapshot, FileXenoArtifactRepository, type FileXenoArtifactRepositoryOptions, FileXenoProviderConnectionStore, type FileXenoProviderConnectionStoreOptions, FileXenoShareRegistry, type FileXenoShareRegistryOptions, type FilterConfig, type GovernanceExtensions, type GovernanceExtensionsOptions, HIGH_RISK_PERMISSIONS, type HarnessTask, type HarnessTaskStatus, type HarnessTaskUpdate, type HookConfig, type HookDecision, type HookDefinition, type HookEventName, type HookExecutionResult, type HookExecutionStatus, type HookInput, type HookInputBase, type HookInvocationInput, type HookModelExecutor, type HookPermissionMode, type HookRunResult, HookRunner, HookRuntime, type HookRuntimeOptions, type HttpHookDefinition, HttpHookRunner, IDENTITY_PATHS, type IdentityFrontmatter, type IdentityLayer, type IdentityLoadResult, IdentityLoader, type IdentityLoaderOptions, type IdentityPaths, IdentityResolver, type IdentitySource, type ImageContentBlock, type ImageDocumentInfo, type ImageGenerationConfig, type ImageLayerInfo, type ImageLayerType, type ImageToolAdapter, type ImageUrlBlock, InMemoryXenoArtifactRepository, type InMemoryXenoArtifactRepositoryOptions, InMemoryXenoCapabilityLeaseRegistry, type InMemoryXenoCapabilityLeaseRegistryOptions, InMemoryXenoTelemetryCollector, type InitializeSessionRuntimeOptions, type InspectSystemPromptOptions, type InstallSignalHandlersOptions, InteractiveChatTurnGovernance, InteractiveTurnGovernance, type InteractiveTurnGovernanceOptions, type IpcHandler, type JsonRpcErrorResponse, type JsonRpcMessage$1 as JsonRpcMessage, type JsonRpcNotification, type JsonRpcRequest$1 as JsonRpcRequest, type JsonRpcResponse, type JsonRpcSuccessResponse, type JsonSchema, JsonSchemaCompilationError, type JsonSchemaCompilationIssue, type JsonSchemaCompileOptions, type JsonSchemaSubset, type JsonSchemaType, type JsonSchemaValidationError, type JsonSchemaValidationResult, type LLMCompletionResult, type LLMProvider, type LLMProviderCapabilities, type LLMProviderMessage, type LLMProviderRequestContext, type ToolDefinition as LLMProviderToolDefinition, type LLMToolDefinition, type LayerContext, type LegacyXenoSkillInput, type LinuxBubblewrapCapability, type LinuxBubblewrapProcessSpec, LlmClient, type LlmClientDeps, LocalLLMProvider, type LocalLLMProviderConfig, type LocalRuntimePreflightResult, LogLevel, type LspDefinitionReport, type LspDiagnosticsReport, type LspDoctorReport, type LspDoctorServer, type LspHoverReport, type LspReferencesReport, MANIFEST_FILENAME, MAX_CONTAINMENT_APPROVAL_AGE_MS, MAX_CONTAINMENT_CERTIFICATION_BYTES, MAX_CONTAINMENT_CERTIFICATION_LIFETIME_MS, MAX_DIRECT_SHELL_OUTPUT_CHARS, type MCPAppCapabilities, type MCPAppContentSecurityPolicy, type MCPAppExtensionMetadata, type MCPAppMetadata, type MCPAppPermissions, type MCPAppResourceDescriptor, type MCPAppValidationResult, type MCPAppVisibility, type MCPApprovalDecision, type MCPBearerTokenRefreshHandler, type MCPBearerTokenResolver, type MCPConfigFile, type MCPConfiguredServer, type MCPElicitationAction, type MCPElicitationHandler, type MCPElicitationRequest, type MCPElicitationResponse, type MCPHttpAuthChallenge, MCPHttpTransportError, type MCPHttpUrlPhase, type MCPInitializeParams, type MCPInitializeResult, MCPManager, type MCPManagerOptions, type MCPOAuthAuthorizationServerMetadata, type MCPOAuthAuthorizationSession, MCPOAuthClient, type MCPOAuthClientOptions, type MCPOAuthClientRegistration, type MCPOAuthClientRegistrationSource, type MCPOAuthConfig, type MCPOAuthDiscoveryResult, type MCPOAuthProtectedResourceMetadata, type MCPOAuthTokenSet, type MCPOAuthTokenStore, type MCPOAuthUrlPhase, type MCPPrompt, type MCPPromptGetParams, type MCPPromptGetResult, type MCPPromptsListResult, type MCPRegistryAccessPolicy, type MCPRegistryEntryDescriptor, type MCPRegistryEntryKind, type MCPRegistryFilter, type MCPResource, type MCPResourceReadParams, type MCPResourceReadResult, type MCPResourceSubscribeParams, type MCPResourceUnsubscribeParams, type MCPResourcesListResult, MCPServer, type MCPServerConfig, type MCPServerModeOptions, type MCPServerPromptRegistration, type MCPServerResourceRegistration, type MCPServerScope, type MCPServerState, type MCPTool, type MCPToolCallParams, type MCPToolCallResult, type MCPToolsListResult, type MCPTransport, type MCPTransportConnection, MCP_APPS_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_SCHEME, MCP_PROTOCOL_VERSION, MCP_SUPPORTED_PROTOCOL_VERSIONS, MEMORY_FILES, MOTION_CAPABILITIES, MOTION_SYSTEM_PROMPT, MOTION_TOOL_NAMES, type ManifestValidationResult, type MaterialConfig, type MaterializeXenoAutomationEvidenceOptions, type MemoryAccessScope, type MemoryBudget, type MemoryEntry, type MemoryFile, type MemoryLevel, MemoryManager, type MemoryManagerOptions, type MeshInfo, type Message, MessageFlow, type MessageFlowDeps, type ModeSwitchRequest, type ModelInfo, type ModelProvider, ModelProviderRegistry, type MonitorEvent, MonitorManager, type MonitorSnapshot, type MonitorSource, MonitorStopTool, MonitorTool, type MotionAgentOptions, type MotionPromptParams, type MxcContainmentProbe, type MxcNativeAssetDescriptor, type MxcWindowsHostPreparationReport, NOTES_CAPABILITIES, NOTES_TOOL_NAMES, type NormalizedLspDiagnostic, type NormalizedLspHover, type NormalizedLspLocation, type NormalizedLspRange, type NotePageInfo, type NoteSearchResult, type NotesAgentOptions, type NotesToolAdapter, type OnChunkCallback, type OnTaskCompleteInput, type OnTaskCompleteResult, type OpenTelemetryMetricAdapter, type OperationTaskSource, type OsProtectedStateStoreOptions, OtelExporter, type OtelUsageAdapter, PIXEL_CAPABILITIES, PIXEL_SYSTEM_PROMPT, PIXEL_TOOL_NAMES, PROCESS_TREE_ADAPTERS, PROJECT_STATE_VERSION, type ParameterizedPermissionRule, type ParseUnifiedDiffOptions, type PermissionConfig, type PermissionDecision, type PermissionDecisionEvent, type PermissionDecisionHook, PermissionEngine, type PermissionInfo, type PermissionProfile, type PermissionProfileDecision, type PermissionProfileMode, type PermissionProfileName, type PermissionProfileNetworkDecision, type PermissionProfileResolution, type PermissionPromptFn, type PermissionPromptInfo, type PermissionPromptOperation, type PermissionPromptPreview, type PermissionPromptPreviewLine, type PermissionRequestContext, type PermissionRequestInfo, type PermissionRequestResult, type PermissionRule, type PersistentPermissionState, type PixelAgentOptions, type PixelPromptParams, type PlatformInfo, type PluginActivationEvent, type PluginAuthor, type PluginCapability, type PluginCommandContribution, type PluginCommandHandler, type PluginContext, type PluginContributions, type PluginDetachedSignature, type PluginEngineConstraint, type PluginEvent, PluginEventBus, type PluginEventListener, type PluginEventType, type PluginHook, PluginHost, type PluginHostInfo, type PluginHostOptions, type PluginInfo, type PluginListing, type PluginLogger, PluginManager, type PluginManagerOptions, type PluginManifest, PluginMarketplace, type PluginMarketplaceOptions, type PluginOutputStyleContribution, type PluginPermission, type PluginPromptContribution, type PluginPublishOptions, type PluginRelevanceCandidate, type PluginRelevanceHints, type PluginRelevanceSuggestion, type PluginRepositorySignal, PluginSandbox, type PluginSandboxOptions, type PluginScaffoldOptions, type PluginSearchOptions, type PluginSettingContribution, PluginSettingsManager, type PluginSignatureStatus, type PluginStatus, type PluginStorage, type PluginSupplyChainLockfile, type PluginSupplyChainRecord, type PluginTestCase, type PluginTestResult, PluginToolBuilder, type PluginToolContribution, type PluginTrustBadge, type PluginUIPanel, type PolicyCheckResult, type PolicyEnforcerConfig, type PrepareMCPOAuthAuthorizationOptions, type ProbeXenoProviderOptions, type ProcessContainmentStatus, type ProcessTreeAdapter, type ProfileMCPServerConfig, ProfileManager, type ProjectConfig, type ProjectDomainProfile, type ProjectExecutionPhase, type ProjectExecutionProfile, type ProjectInfo, type ProjectMcpApprovalDecision, type ProjectSessionContext, type ProjectSessionContextEntry, type ProjectSessionSummary, type ProjectTokenUsageSummary, type PromotionRequestResult, type PromptContext, type PromptFn, type PromptHookDefinition, PromptHookRunner, type PromptMemoryContextInfo, type PromptSectionContext, type PromptSectionProvider, PromptSectionRegistry, type ProtectedStateCipher, type ProtectedStateEnvelopeCipher, type ProtectedStateEnvelopeCipherOptions, type ProtectedStateEnvelopeV1, type ProtectedStateStore, ProviderError, type ProviderErrorCategory, type ProviderErrorCode, type ProviderErrorOptions, type ProviderStatus, type ProviderStreamEvent, type ProviderTransportLimits, QueryLifecycle, type QueryLifecycleOptions, type QueryState, type QueryTransition, type QueryWatchdogReason, REQUIRED_CONTAINMENT_CONFORMANCE_CHECKS, type RecalledEpisode, type RecalledSkill, type RecentSessionEntry, type RecentSessionsIndex, type ReducedResult, type ReducerOptions, type RegisterToolOperationInput, type RegisteredTool, type RenderConfig, type RequestBudgetBreakdown, type ResolveXenoSdkApiKeyOptions, type ResolvedIdentity, type ResolvedMemory, type ResolvedProvider, type ResolvedSubagentWorkflowAnswer, type ResourceContentBlock, type RoomInfo, type RunContainmentConformanceOptions, type RunDelegatedXenoTurnOptions, type RunStreamOptions, type RuntimeManifestFileEntry, type RuntimeManifestInspectionResult, type RuntimePluginManifestEntry, SDK_DEFAULT_MAX_ITERATIONS, SDK_DEFAULT_MAX_TOKENS, SDK_VERSION, SESSION_FORMAT_VERSION, SHEETS_CAPABILITIES, SHEETS_TOOL_NAMES, SLIDES_CAPABILITIES, SLIDES_TOOL_NAMES, SOUND_CAPABILITIES, SOUND_SYSTEM_PROMPT, SOUND_TOOL_NAMES, SSETransport, SUBAGENT_ROLE_ALIASES, SUBAGENT_TEAM_PRESETS, type SandboxCheckResult, type ScoredMemory, ScreenCapture, type ScreenCaptureConfig, type ScreenCaptureOptions, type SearchConfig, type SearchProvider, type SecuredProcessSpec, type SecurityPathIssue, type SecurityPathIssueCode, type Session, type SessionCreateOptions, type SessionData, type SessionEndData, type SessionIntegrationConfig, SessionLock, SessionLock as SessionLockManager, SessionManager, type SessionMeta, type SessionRecoveryIssue, type SessionRecoveryResult, type SessionRecoverySource, SessionRegistry, type SessionResumeOptions, type SessionRuntimeBaseOptions, type SessionRuntimeState, type SessionStartData, type SessionStatus, type SessionSummary, type SetXenoArtifactCommentResolutionRequest, type SetupAIHandlersOptions, type ShapeConfig, type SheetsAgentOptions, type SheetsToolAdapter, type ShellExecutionAuthorization, type ShellExecutionAuthorizationRequest, type ShellPathReference, type ShutdownCleanup, type Skill, SkillStore, type SkillStoreOptions, type SlideInfo, type SlidesAgentOptions, type SlidesToolAdapter, type SortConfig, type SoulCompletion, SoulEngine, type SoulEngineOptions, type SoulMessage, type SoulSigner, type SoundAgentOptions, type SoundPromptParams, type SpeechRecognizer, type SpeechRecognizerCallbacks, type SpeechRecognizerConfig, type StartXenoLoopInput, StdioTransport, type StemSeparationResult, type StopReason, type StoredConversation, type StoredMessage, type StoredToolCall, type StreamResult, StreamableHTTPTransport, type StreamableHTTPTransportOptions, type StreamableHTTPTransportSnapshot, type SubagentBranchPolicy, type SubagentBriefContext, type SubagentExecuteFn, type SubagentExecutionRequest, type SubagentExecutionResponse, type SubagentRemoteMcpAccess, type SubagentResult, type SubagentRole, type SubagentTask, type SubagentTeamPreset, type SubagentTeamPresetDefinition, type SubagentWorkflowMode, type SubagentWorkflowOptions, type SubagentWorkflowResult, type SynthesizeSkillInput, type SystemPromptInspectionResult, THREE_D_CAPABILITIES, THREE_D_TOOL_NAMES, TOOL_OPERATION_SCHEMA_VERSION, type TaskCompletionCallback, TaskListManager, type TestResult, type TextBlock, type ThreeDAgentOptions, type ThreeDToolAdapter, type TimelineInfo, type TokenUsageTotals, type ToolAssistantContentBlock, type ToolAuthorizationReceipt, type ToolCallData, type ToolCompletionPolicy, type ToolContinuationCheckpoint, type ToolContinuationNotification, type ToolDefinition, type ToolEvidence, type ToolExchangeRepairResult, type ToolExecutionContext, type ToolExecutor, type ToolFailureCategory, type ToolFailureGuardTrip, ToolFailureLoopGuard, type ToolHistoryRepairDiagnostic, type ToolManifestEntry, type ToolMiddleware, type ToolMiddlewareContext, ToolMiddlewareRegistry, type ToolOperationEvent, ToolOperationManager, type ToolOperationRuntimeEventType, type ToolOperationSnapshot, type ToolOperationState, ToolOrchestrator, type ToolOrchestratorCallbacks, type ToolOrchestratorConfig, type ToolPolicyProjection, type ToolProgressUpdate, ToolRegistry, type ToolRegistryOptions, type ToolResult, type ToolResultBlock, type ToolResultContent, type ToolResultData, type ToolRiskLevel, type ToolRuntimeContext, type ToolSchemaProjectionChange, ToolSchemaProjectionError, type ToolSchemaProjectionResult, type ToolSchemaProviderDialect, type ToolUseBlock, type TraceGraph, type TraceGraphEdge, type TraceGraphNode, type TrackContext, type TranscriptEvent, type TranscriptEventData, type TranscriptEventType, TranscriptWriter, type TranscriptionResult, type TranscriptionSegment, type TransitionConfig, type TurnDiffSummary, TurnDiffTracker, type TurnDiffTrackerOptions, type TurnFileDiff, type TurnRestoreAvailability, type TurnRestoreFilePreview, TurnRestoreManager, type TurnRestorePoint, type TurnRestoreResult, UNBOUNDED_OPERATION_CONTINUATION_LIMIT, type UnifiedExecCompletionReason, UnifiedExecError, type UnifiedExecEvent, type UnifiedExecEventListener, type UnifiedExecEventType, type UnifiedExecInputSource, UnifiedExecManager, type UnifiedExecManagerOptions, type UnifiedExecMode, type UnifiedExecOrigin, type UnifiedExecOutput, type UnifiedExecOutputChunk, type UnifiedExecOutputDelta, type UnifiedExecPresentation, type UnifiedExecProcess, type UnifiedExecReadDeltaOptions, type UnifiedExecStartOptions, type UnifiedExecStatus, type UnifiedExecStream, type UpdateXenoGoalInput, UsageAccumulator, type UsageAttribution, type UsageEvent, UsageLedger, type UsageQuery, type UsageTotals, type ValidateXenoSdkApiKeyOptions, type ValidatedContainmentCertification, type ValidationSignal, type VectorDocument, VectorMemoryStore, type VectorSearchResult, type VectorStoreAdapter, type VectorStoreOptions, type VerifyContainmentApprovalExpected, type VerifyPluginSupplyChainOptions, type VerifyPluginSupplyChainResult, type VerifyXenoHostedWebhookOptions, type VerifyXenoShareOptions, type VideoToolAdapter, WEB_CONTEXT_CONTRACT_VERSION, WEB_CONTEXT_TOOL_RESULT_SCHEMA, WORKFLOW_CAPABILITIES, WORKFLOW_TOOL_NAMES, type WebContextClientPort, type WebContextEvidenceProjection, type WebContextRequestBase, type WebContextRequestFactory, type WebContextToolOptions, type WebContextToolResult, type WebContextWaitPortOptions, type WebSearchResult, type WindowsDpapiCredentialFile, type WindowsDpapiProtectedFileOptions, type WindowsDpapiProtectedStateOptions, type WorkflowAgentOptions, type WorkflowDefinition, type WorkflowEvent, type WorkflowExecutionResult, type WorkflowInfo, type WorkflowNodeConfig, type WorkflowNodeDefinition, type WorkflowNodeExecutor, type WorkflowNodeStatus, type WorkflowPlan, WorkflowPlanner, type WorkflowRunNodeRecord, type WorkflowRunRecord, type WorkflowRunStatus, WorkflowRuntime, WorkflowStore, type WorkflowToolAdapter, WorkspaceIndex, type WorkspaceScanOptions, XENO_AGENT_PROFILE_SCHEMA_VERSION, XENO_API_BASE, XENO_APP_PROTOCOL_V2_METHODS, XENO_APP_PROTOCOL_VERSIONS, XENO_ARTIFACT_ACTOR_KINDS, XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION, XENO_ARTIFACT_SCHEMA_VERSION, XENO_ARTIFACT_SENSITIVITIES, XENO_ARTIFACT_STATES, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BROWSER_CONTROL_PLANE_OPERATIONS, XENO_BUILTIN_ARTIFACT_KINDS, XENO_CAPABILITY_LEASE_SCHEMA_VERSION, XENO_CONTAINMENT_APPROVAL_SCHEMA, XENO_CONTAINMENT_CERTIFICATION_SCHEMA, XENO_CONTAINMENT_CONFORMANCE_SCHEMA, XENO_CONTAINMENT_REVIEWER_TRUST_STORE_SCHEMA, XENO_CONTROL_ROOM_SCHEMA_VERSION, XENO_COORDINATION_SCHEMA_VERSION, XENO_DEFLATE_CODEC_NAME, XENO_DEFLATE_CODEC_VERSION, XENO_EVIDENCE_EDGE_TYPES, XENO_EVIDENCE_GRAPH_SCHEMA_VERSION, XENO_EVIDENCE_NODE_TYPES, XENO_GIF_ANIMATION_POLICY, XENO_GIF_CODEC_NAME, XENO_GIF_CODEC_VERSION, XENO_HANDOFF_SCHEMA_VERSION, XENO_HOSTED_CONTROL_SCHEMA_VERSION, XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION, XENO_HOSTED_EVENT_SCHEMA_VERSION, XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA, XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS, XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_TOOL_NAMES, XENO_HOSTED_RESULT_SCHEMA_VERSION, XENO_HOSTED_RUN_SCHEMA_VERSION, XENO_HOSTED_TRIGGER_SCHEMA_VERSION, XENO_JPEG_CODEC_NAME, XENO_JPEG_CODEC_VERSION, XENO_MXC_ADAPTER_NAME, XENO_MXC_POLICY_VERSION, XENO_MXC_VERSION, XENO_ORACLE_REPORT_SCHEMA_VERSION, XENO_PLUGIN_LOCK_FILENAME, XENO_PLUGIN_LOCK_SCHEMA_VERSION, XENO_PLUGIN_SIGNATURE_FILENAME, XENO_PLUGIN_SIGNATURE_SCHEMA_VERSION, XENO_PROVIDER_CATALOG_SCHEMA_VERSION, XENO_PROVIDER_CONNECTION_STORE_SCHEMA_VERSION, XENO_RASTER_CODEC_NAME, XENO_RASTER_CODEC_VERSION, XENO_RASTER_PREVIEW_FORMATS, XENO_RECIPE_SCHEMA_VERSION, XENO_REPOSITORY_INDEX_SCHEMA_VERSION, XENO_REVIEW_DIMENSIONS, XENO_REVIEW_EVIDENCE_KINDS, XENO_REVIEW_REPORT_SCHEMA_VERSION, XENO_RT_DEFAULT_URL, XENO_SECURE_EXECUTION_CONTRACT_SCHEMA_VERSION, XENO_SHARE_REGISTRY_SCHEMA_VERSION, XENO_SHARE_SCHEMA_VERSION, XENO_SKILL_SCHEMA_VERSION, XENO_SOURCE_RESEARCH_SCHEMA_VERSION, XENO_SPEC_EXECUTION_SCHEMA_VERSION, XENO_SPEC_SCHEMA_VERSION, XENO_SVG_RENDERER_NAME, XENO_SVG_RENDERER_VERSION, XENO_TELEMETRY_SCHEMA_VERSION, XENO_VP8_CODEC_NAME, XENO_VP8_CODEC_VERSION, XENO_WEBP_ANIMATION_POLICY, XENO_WEBP_CODEC_NAME, XENO_WEBP_CODEC_VERSION, type XenoAnsiEscapeFamily, type XenoAnsiFormatter, type XenoAnsiPolicy, type XenoAnsiStyle, type XenoAnsiToken, type XenoAnsiWrapOptions, type XenoAppProtocolVersion, XenoAppServer, type XenoAppServerOptions, XenoAppServerV2Client, type XenoArtifactActor, type XenoArtifactActorKind, type XenoArtifactAnchor, type XenoArtifactAppendReviewRequest, type XenoArtifactContent, type XenoArtifactEnvelope, type XenoArtifactFileRecoveryNotice, type XenoArtifactFileSnapshot, type XenoArtifactIdentity, type XenoArtifactKind, type XenoArtifactLifecycleEvent, type XenoArtifactListQuery, type XenoArtifactMutationOptions, type XenoArtifactPersistedRecord, type XenoArtifactProvenance, type XenoArtifactRecord, type XenoArtifactRelationship, type XenoArtifactRepository, XenoArtifactRepositoryError, type XenoArtifactRepositoryErrorCode, type XenoArtifactRepositoryState, type XenoArtifactRetention, type XenoArtifactReviewAnchorInput, type XenoArtifactReviewDecision, type XenoArtifactReviewEvent, type XenoArtifactReviewEventInput, XenoArtifactReviewService, type XenoArtifactReviewServiceOptions, type XenoArtifactReviewSummary, type XenoArtifactRevisionOptions, type XenoArtifactSensitivity, type XenoArtifactState, XenoArtifactStateTransitionError, type XenoArtifactStorageReference, type XenoArtifactTransitionRequest, XenoArtifactValidationError, type XenoArtifactValidationIssue, XenoAuthError, type XenoAuthErrorCode, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBasicRasterImage, type XenoBrowserAutomationOperation, XenoBrowserControlPlaneAdapter, type XenoBrowserControlPlaneAdapterOptions, type XenoBrowserExecutionPolicy, type XenoCapabilityEffect, type XenoCapabilityEligibility, type XenoCapabilityKind, type XenoCapabilityLease, type XenoCapabilityLeaseApprovalContext, type XenoCapabilityLeaseApprovalRequest, type XenoCapabilityLeaseDenialRequest, XenoCapabilityLeaseError, type XenoCapabilityLeaseErrorCode, type XenoCapabilityLeaseRequest, type XenoCapabilityLeaseRevocationRequest, type XenoCapabilityLeaseState, type XenoCapabilityScope, type XenoCapabilitySubject, type XenoCapabilityUse, type XenoColorDepth, type XenoColorPolicy, type XenoCompiledRecipe, type XenoCompiledRecipeStep, type XenoComputerAutomationOperation, type XenoComputerExecutionPolicy, type XenoConfig, type XenoContainmentApprovalReport, type XenoContainmentCertificationApproval, type XenoContainmentCertificationManifest, type XenoContainmentConformanceReport, type XenoContainmentReviewerTrustStore, type XenoContentHash, type XenoControlRoomActionKind, type XenoControlRoomActionPlan, type XenoControlRoomActionRequest, type XenoControlRoomAgent, type XenoControlRoomAgentInput, type XenoControlRoomAgentStatus, type XenoControlRoomApprovalInput, type XenoControlRoomApprovalKind, type XenoControlRoomArtifactInput, type XenoControlRoomAttentionItem, type XenoControlRoomAttentionKind, type XenoControlRoomGoalInput, type XenoControlRoomInput, type XenoControlRoomMonitorInput, type XenoControlRoomNotificationInput, type XenoControlRoomProjectionOptions, type XenoControlRoomSnapshot, type XenoControlRoomStatusCategory, type XenoControlRoomSummary, type XenoControlRoomTask, type XenoControlRoomTaskInput, type XenoControlRoomUsage, XenoControlRoomValidationError, type XenoCoordinationAction, XenoCoordinationError, type XenoCoordinationEvent, type XenoCoordinationEventType, type XenoCoordinationSessionState, type XenoCoordinationStoreOptions, type XenoCreatedShare, type XenoCredentialSource, type XenoCredentialType, type XenoDesktopCaptureSource, type XenoDesktopCapturer, type XenoDiffArtifactContext, type XenoDiffDocument, type XenoDiffFile, type XenoDiffFileStatus, type XenoDiffHunk, type XenoDiffLine, type XenoDiffLineKind, type XenoDiffMode, XenoDiffParseError, type XenoEd25519Signature, type XenoEnvironmentExecutionPolicy, type XenoEvidenceEdge, type XenoEvidenceEdgeType, type XenoEvidenceGraph, XenoEvidenceGraphBuilder, type XenoEvidenceGraphBuilderOptions, XenoEvidenceGraphValidationError, type XenoEvidenceNode, type XenoEvidenceNodeType, type XenoEvidenceReference, type XenoExecutionAdapterIdentity, type XenoExecutionEnforcement, type XenoExecutionIdentity, XenoExecutionLeaseSession, type XenoExecutionLeaseSessionOptions, type XenoExecutionOwner, type XenoExternalActionExecutionPolicy, type XenoFilesystemExecutionPolicy, type XenoGifAnimation, type XenoGifDisposal, type XenoGifFrame, type XenoGitHubReviewComment, type XenoGoalCriterion, type XenoGoalCriterionResult, type XenoGoalMilestone, type XenoGoalProgress, type XenoGoalRecord, type XenoGoalStatus, type XenoGoalTask, type XenoGoalTaskStatus, type XenoGoalVerification, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHandoffAuthority, type XenoHandoffOperation, type XenoHandoffPayload, type XenoHandoffRecord, type XenoHandoffResumePoint, type XenoHandoffStatus, type XenoHandoffTarget, type XenoHostAutomationAuditEvent, type XenoHostAutomationAuditLoggerPort, type XenoHostAutomationEnvironment, type XenoHostAutomationStatusReport, type XenoHostAutomationSurfaceStatus, CliGovernedAutomationRuntime as XenoHostGovernedAutomationRuntime, type XenoHostedArchitecture, type XenoHostedAuthority, type XenoHostedBudget, type XenoHostedCacheMount, type XenoHostedControlAcknowledgement, type XenoHostedControlAction, type XenoHostedControlCommand, type XenoHostedControlCommandPayload, type XenoHostedEnvironmentManifest, type XenoHostedEnvironmentManifestPayload, type XenoHostedEventRecord, type XenoHostedExecutionAdapterCertification, type XenoHostedExecutionAdapterVerificationOptions, type XenoHostedExecutionBoundaryReceipt, type XenoHostedExecutionJob, type XenoHostedExecutionSecretValue, type XenoHostedImageReference, type XenoHostedNetworkDestination, type XenoHostedNetworkPolicy, type XenoHostedOs, type XenoHostedQuotaLease, type XenoHostedReplayCursor, type XenoHostedReplayPage, type XenoHostedRepositorySource, type XenoHostedResourceLimits, type XenoHostedRetentionPolicy, type XenoHostedRunRecord, type XenoHostedRunRequest, type XenoHostedRunResult, type XenoHostedRunResultPayload, type XenoHostedRunStatus, type XenoHostedSecretProjection, type XenoHostedSetupStep, type XenoHostedTriggerDefinition, type XenoHostedTriggerDelivery, type XenoHostedTriggerKind, type XenoHostedWebhookSource, type XenoHostedWebhookVerification, type XenoJsonObject, type XenoJsonPrimitive, type XenoJsonValue, type XenoJwtPayload, type XenoLegacyAgentArtifactContext, type XenoLegacyArtifactContext, type XenoLoadedSkill, type XenoLoopIteration, type XenoLoopKind, type XenoLoopRecord, type XenoLoopSchedule, type XenoLoopStatus, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, XenoMultiAgentReviewCoordinator, type XenoMultiAgentReviewCoordinatorOptions, type XenoNetworkDestination, type XenoNetworkExecutionPolicy, type XenoOracleAdjudication, type XenoOracleAdjudicationDraft, type XenoOracleAdjudicationRequest, type XenoOracleAdjudicationResult, type XenoOracleArtifactContext, type XenoOracleCitation, type XenoOracleClaim, XenoOracleCoordinator, type XenoOracleCoordinatorOptions, type XenoOracleDisagreement, type XenoOracleExecutionRequest, type XenoOracleExecutionResult, type XenoOracleModelIdentity, type XenoOracleOpinion, type XenoOracleOpinionDraft, type XenoOracleReport, type XenoOracleRole, type XenoOracleRunOptions, XenoOracleValidationError, type XenoOracleVerdict, type XenoProcessExecutionPolicy, type XenoProjectState, type XenoProviderAdapterKind, type XenoProviderAuthPreset, type XenoProviderCapabilities, XenoProviderCatalog, type XenoProviderConnection, type XenoProviderConnectionSnapshot, type XenoProviderConnectionView, type XenoProviderCredentialMode, type XenoProviderModelDescriptor, type XenoProviderPreset, type XenoProviderProbeResult, type XenoProviderReadiness, type XenoProviderRouteCandidate, type XenoProviderRoutingPolicy, type XenoPtyAdapter, type XenoPtyProcess, type XenoPtySpawnOptions, type XenoRasterImage, type XenoRasterPreview, type XenoRecipeDefinition, type XenoRecipeInputDefinition, type XenoRecipeMode, type XenoRecipePermissionMode, type XenoRecipeStepDefinition, XenoRecipeValidationError, type XenoRedactionCategory, type XenoRedactionEvent, type XenoRedactionOptions, type XenoRedactionReport, type XenoRedactionResult, type XenoRemoteRepositoryIdentity, type XenoRemoteSourceFile, type XenoRemoteSourceProvider, type XenoRepositoryChunk, type XenoRepositoryDocumentKind, type XenoRepositoryEmbedding, type XenoRepositoryEmbeddingProvider, type XenoRepositoryEmbeddingRequest, type XenoRepositoryFileRecord, type XenoRepositoryFreshnessInput, type XenoRepositoryFreshnessReport, type XenoRepositoryGitProvenance, type XenoRepositoryIndexBuildOptions, XenoRepositoryIndexFileStore, type XenoRepositoryIndexSnapshot, type XenoRepositoryIndexStats, type XenoRepositoryRelationship, type XenoRepositoryRelationshipKind, type XenoRepositorySearchMode, type XenoRepositorySearchQuery, type XenoRepositorySearchResponse, type XenoRepositorySearchResult, type XenoRepositorySourceDocument, type XenoRepositorySymbol, type XenoRepositorySymbolGraph, type XenoRepositorySymbolKind, type XenoResolvedApiKey, type XenoReviewAgentExecutor, type XenoReviewAgentResult, type XenoReviewArtifactContext, type XenoReviewCoordinatorContext, type XenoReviewDimension, type XenoReviewEvidence, type XenoReviewEvidenceKind, type XenoReviewFinding, type XenoReviewFindingProposal, type XenoReviewFindingState, type XenoReviewPack, type XenoReviewReport, type XenoReviewSeverity, type XenoReviewTarget, XenoReviewValidationError, type XenoReviewVerificationOutcome, type XenoReviewVerificationResult, type XenoReviewVerifierExecutor, type XenoRuntimeEvent, type XenoRuntimeEventBase, XenoRuntimeEventBus, type XenoRuntimeEventDraft, type XenoRuntimeEventSink, type XenoRuntimeEventType, type XenoSecretProjection, type XenoSecureExecutionContract, XenoSecureExecutionContractError, type XenoSecureExecutionContractErrorCode, type XenoShareAccessPolicy, type XenoShareContent, type XenoShareGitContext, type XenoShareIssuer, type XenoSharePayload, type XenoSharePrincipal, type XenoShareReference, type XenoShareRegistryRecord, type XenoShareRegistrySnapshot, type XenoShareSessionIdentity, type XenoShareSigningIdentity, type XenoShareStatus, type XenoShareSurface, type XenoShareVerificationResult, type XenoShareVisibility, type XenoSignedHandoffEnvelope, type XenoSignedShareEnvelope, type XenoSkillActivation, type XenoSkillAuditEvent, type XenoSkillCatalog, type XenoSkillDescriptor, type XenoSkillDiagnostic, type XenoSkillDiscoveryOptions, type XenoSkillDiscoveryRoot, type XenoSkillExternalActionPolicy, type XenoSkillInvocationDecision, type XenoSkillInvocationPolicy, type XenoSkillResourceDescriptor, type XenoSkillShadowRecord, type XenoSkillSource, type XenoSkillTool, type XenoSkillToolPolicy, type XenoSourceResearchArtifactContext, type XenoSourceResearchExcerpt, type XenoSourceResearchFinding, type XenoSourceResearchModelIdentity, type XenoSourceResearchReport, type XenoSourceResearchSeverity, XenoSourceResearchValidationError, type XenoSpecAcceptanceCriterion, type XenoSpecArtifactBundle, type XenoSpecArtifactContext, type XenoSpecDesign, type XenoSpecDesignDecision, type XenoSpecDocument, type XenoSpecDriftFinding, type XenoSpecDriftReport, type XenoSpecExecutionRecord, type XenoSpecExecutionState, XenoSpecLifecycleService, type XenoSpecLifecycleServiceOptions, type XenoSpecPriority, type XenoSpecRequirement, type XenoSpecRisk, type XenoSpecSourceBaseline, type XenoSpecTask, type XenoSpecTaskExecution, type XenoSpecTaskStatus, XenoSpecValidationError, type XenoTelemetryAttributeValue, type XenoTelemetryRecord, type XenoTelemetrySignalKind, type XenoTelemetrySubscriber, type XenoThreadRunOptions, type XenoThreadRunResult, XenoTraceGraphRecorder, type XenoUserConfig, type XenoVerifiedHostedExecutionAdapterCertification, type XenoVp8Image, acquireControlPlaneLock, activateSessionRuntime, addProjectAllowedDirectory, addProjectAllowedTool, agentDefinitionFromProfile, agentProfileFromDefinition, appendBoundedShellOutput, appendGuidanceToResult, approveMcpServer, areSignalHandlersInstalled, artifactCompareTool, askUserTool, assertDirectEndpointResolution, assertRequiredXenoAutomationEvidence, assertSupportedMcpProtocolVersion, assertUsableXenoApiKey, assertValidMcpAppResource, assertValidXenoArtifact, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertValidXenoEvidenceGraph, assertValidXenoHostedExecutionJob, assertValidXenoOracleReport, assertValidXenoRecipeDefinition, assertValidXenoReviewPack, assertValidXenoReviewReport, assertValidXenoReviewTarget, assertValidXenoSecureExecutionContract, assertValidXenoSourceResearchReport, assertValidXenoSpecDocument, assertValidXenoSpecExecution, assertXenoArtifactStateTransition, assertXenoAutomationAdapterConformant, assertXenoAutomationAuthority, auditRiskLevelForTool, authorizeShellExecution, backgroundProcessManager, bashTool, benchmarkCodingTools, bridgeXenoTelemetryToOpenTelemetry, buildAtomicMessageGroups, buildAuditReplayReport, buildAuditTraceReport, buildContainedProcessSpec, buildContractLedgerGuidance, buildDefaultSubagentTasks, buildDelegatedRoleSystemPrompt, buildHookEnvironment, buildLinuxBubblewrapProcessSpec, buildLspDefinitionReport, buildLspDiagnosticsReport, buildLspDoctorReport, buildLspHoverReport, buildLspReferencesReport, buildMotionSystemPrompt, buildPixelSystemPrompt, buildProcessHardenedProcessSpec, buildProjectBudgetFinalizationGuidance, buildProjectExecutionGuidance, buildProjectExecutionProfile, buildPromptMemoryContext, buildSecuredProcessSpec, buildSoundSystemPrompt, buildSystemPrompt, buildToolFailureGuardResult, buildXenoArtifactReviewAnchor, buildXenoAutomationCapabilityUse, buildXenoRepositoryIndex, buildXenoRepositoryIndexWithEmbeddings, buildXenoSecureExecutionContract, cachedModelContextWindow, calculateCost, canTransitionXenoArtifactState, canXenoRasterPreview, canonicalPayload, canonicalizeArtifactJson, canonicalizeMcpResourceUri, canonicalizeSecurityPath, canonicalizeToolName, checkSandbox, classifyProviderHttpError, cleanupReadImagePreviews, cleanupSessionRuntime, clearMcpServerApproval, clearProjectAllowedTools, clearProjectLastSessionSummary, clearProjectMcpApproval, clearProjectMcpApprovals, clipXenoAnsi, coerceSubagentRole, coerceSubagentTeamPreset, compileAgentProfile, compileJsonSchema, compileToolInputSchema, compileXenoRecipe, compileXenoSkillActivation, configureImageGeneration, configureSearch, configureSearchPermissionProfile, configureXenoAnsi, containmentApprovalSigningPayload, containmentCertificationSigningPayload, copyTextToClipboard, create3DTools, createAgentDefinitionFile, createAgentDefinitionPromptSection, createAgentRunId, createAppServerV2HttpTransport, createArchitectTools, createArtifactCompareTool, createAskUserTool, createAudioTools, createAuditBackedPermissionEngine, createBashTool, createBenchBashMiddleware, createCliAutomationAuditSink, createCliGovernedAutomationRuntime, createCommandBackedProtectedStateStore, createDefaultToolRegistry, createDelegatedXenoAgent, createDirectProvider, createDirectShellMessage, createDispatchAgentTool, createDocsTools, createEd25519Signer, createEditTool, createElfAnalyzeTool, createEngineTools, createGcodeAnalyzeTool, createGenerateImageTool, createGlobTool, createGovernanceExtensions, createGrepTool, createHtmlSanitizerAuditTool, createImageTools, createLsTool, createLspDefinitionTool, createLspDiagnosticsTool, createLspHoverTool, createLspReferencesTool, createMcpAppCapabilities, createMcpAppExtensionCapabilities, createMcpPkcePair, createMcpPromptRegisteredTool, createMcpRegisteredTool, createMcpResourceRegisteredTool, createMemoryProtectedStateStore, createMemoryReadTool, createMemoryWriteTool, createNotebookEditTool, createNotebookReadTool, createNotesTools, createOsProtectedStateStore, createProtectedStateEnvelopeCipher, createReadImageTool, createReadTool, createSheetsTools, createSlidesTools, createSpeechRecognizer, createSqliteAnalyzeTool, createTaskInputTool, createTaskListTools, createTaskOutputTool, createTaskStopTool, createThinkTool, createToolAlias, createToolRuntimeContext, createUnavailableProtectedStateStore, createVideoTools, createWebContextFetchTool, createWebContextRequestFactory, createWebContextSearchTool, createWebSearchTool, createWindowsDpapiProtectedCipher, createWindowsDpapiProtectedFileStore, createWorkflowTools, createWriteTool, createXenoAgent, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createCliAutomationAuditSink as createXenoHostAutomationAuditSink, createCliGovernedAutomationRuntime as createXenoHostGovernedAutomationRuntime, createXenoHostedControlCommand, createXenoHostedEnvironmentManifest, createXenoHostedEvent, createXenoHostedExecutionBoundaryReceipt, createXenoHostedRunResult, createXenoRasterPreview, createXenoSecureShare, createXenoSessionHandoff, createXenoShareSigningIdentity, createXenoSkillTool, createXenoSourceResearchExcerpt, createXenoSourceResearchReport, currentExecutionAdapterStatus, decodeJwtPayload, decodeXenoBmp, decodeXenoGif, decodeXenoGifAnimation, decodeXenoJpeg, decodeXenoNetpbm, decodeXenoPng, decodeXenoSvg, decodeXenoVp8, decodeXenoWebp, defaultToolRuntimeContext, defaultXenoReviewPack, deflateXenoZlib, deleteSession, denyMcpServer, deriveHostedIdempotencyKey, describeXenoAutomationOperation, detectLanguage, detectPluginRepositorySignals, detectRepositoryDocumentKind, detectRepositoryLanguage, detectXenoSpecDrift, deterministicReduce, digestMessages, directProviderConfigFromConnection, discoverXenoSkills, dispatchAgentTool, editTool, elfAnalyzeTool, emitXenoTelemetry, encodeXenoPngRgb, enforceShellCommandPolicy, enforceToolPolicy, ensureConfigDir, ensureDurableMessageIds, ensureProjectStateDir, estimateFullRequestBudget, evaluateContainmentUiRestrictions, evaluatePermissionProfileNetworkUrl, evaluateXenoCapabilityEligibility, executeXenoCoordinationAction, extractJsonObject, extractToolPath, findXenoSkill, fingerprintXenoSecureExecutionContract, forgetRecentSession, forgetRecentSessionById, formatBoundedShellOutput, formatCost, formatDirectShellContext, formatJsonSchemaErrors, formatModelList, formatPromptContextBreakdown, gcodeAnalyzeTool, generateImageTool, generateSessionId, getAgentHome, getAgentRunDir, getAgentRunStoreDir, getAvailableModels, getBenchmarkComputeBudgetHintForCommand, getBenchmarkForegroundTimeoutForCommand, getBestExecutionSecurityStatus, getChatModels, getConfigDir, getDefaultProviderRegistry, getExecutionSecurityCapabilityReport, getExecutionSecurityStatus, getGlobIgnores, getGrepIgnores, getHighRiskPermissions, getImageGenerationConfig, getJwtExpiry, getLinuxBubblewrapCapability, getLogLevel, getManagedConfigPath, getMcpAppMetadata, getMcpAppResourceUri, getMcpApprovalDecision, getMcpAuthorizationServerMetadataUrls, getMcpPromptToolName, getMcpProtectedResourceMetadataUrls, getMcpResourceToolName, getMcpToolName, getModelName, getMxcContainmentProbe, getMxcNativeAssetDescriptor, getMxcWindowsHostPreparationDescriptor, getMxcWindowsHostPreparationHelperArchitecture, getPermissionProfile, getPersistentShellSession, getPersistentShellSpawnSpec, getProcessContainmentStatus, getProjectAgentDefinitionDirs, getProjectAgentDefinitionsDir, getProjectLastSessionSummary, getProjectMcpApproval, getProjectStatePath, getReadImagePreviewCapability, getRecentSessionsIndexPath, getSubagentTeamPresetDefinition, getToolRiskLevel, getUserAgentDefinitionsDir, gitBranchTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, globTool, grepTool, gzipXeno, hasProjectOnboardingCompleted, hasXenoTelemetrySubscribers, hashContainmentConformanceReport, hashPluginManifest, hashPluginTree, hookResultStatus, hostedEnvironmentIdentity, htmlSanitizerAuditTool, importLegacyXenoSkill, inflateXenoZlib, initializeSessionRuntime, inspectCliAutomationStatus, inspectRuntimeManifests, inspectSecurityPath, inspectSystemPrompt, inspectCliAutomationStatus as inspectXenoHostAutomationStatus, inspectXenoRepositoryFreshness, inspectXenoRepositorySymbol, installSignalHandlers, invalidateAllObservedFiles, invokeXenoSkill, isChatModel, isDangerousCommand, isDirectShellMessage, isExpiredJwt, isExplicitResearchPrompt, isJwt, isLocalModel, isMcpAppResourceUri, isMcpOAuthTokenExpired, isMcpToolVisibleToApp, isMcpToolVisibleToModel, isNotBeforeJwt, isPathWithinAllowed, isScreenCaptureAvailable, isSensitiveEnvironmentKey, isSimpleInformationalPrompt, isSpeechRecognitionAvailable, isSupportedMcpProtocolVersion, isToolAllowedByXenoSkillActivation, isUncOrDevicePath, isValidAgentDefinitionName, isValidModel, isValidSessionId, isWorkspaceTrusted, isXenoAutomationOperation, legacyAgentArtifactToXenoArtifact, listBuiltInAgentProfiles, listPermissionProfiles, listProjectAllowedTools, listProjectMcpApprovals, listSessions, loadConfig, loadConfiguredMcpServers, loadMcpConfigFile, loadProjectConfig, loadProjectState, loadRecentSessionsIndex, loadSession, loadUserConfig, loadXenoSkill, lookupRecentSession, lsTool, lspDefinitionTool, lspDiagnosticsTool, lspHoverTool, lspReferencesTool, matchPermissionRule, matchesMcpRegistryEntryPolicy, materializeXenoAutomationEvidence, memoryReadTool, memoryWriteTool, mergeConfigs, mxcWarningsRequireWindowsHostPreparation, normalizeDirectShellResultRecord, normalizeHookDecision, normalizeMcpAppVisibility, normalizePermissionProfileName, normalizeRepositoryRelativePath, normalizeSourceText, normalizeSubagentBranchPolicy, normalizeWorkingDirectory, normalizeXenoHostedControlAcknowledgement, notebookEditTool, notebookReadTool, parseContainmentReviewerTrustStore, parseMcpWwwAuthenticate, parsePermissionRule, parseRetryAfter, parseSessionId, parseShellPathReferences, parseSubagentRemoteMcpPolicy, parseSubagentRoleList, parseUnifiedDiff, parseXenoAnsi, parseXenoRecipeDefinition, persistXenoAutomationEvidence, planXenoControlRoomAction, pluginInfoRelevanceCandidate, pluginListingRelevanceCandidate, pluginSignaturePayload, preflightLocalModel, prepareMxcWindowsHost, probeXenoProvider, projectToolDefinitionsForProvider, projectToolSchemaForProvider, projectXenoControlRoom, providerCapabilityError, providerProtocolError, publicKeyFingerprint, publishPlugin, rankPluginRelevance, readCliAutomationEnvironment, readImageTool, readManifestFromDisk, readPluginDetachedSignature, readPluginSupplyChainLockfile, readSessionFormatVersion, readTool, readXenoApiKey, readCliAutomationEnvironment as readXenoHostAutomationEnvironment, recordRecentSession, recordXenoCounter, recordXenoEvent, recordXenoHistogram, recoverSessionMessages, redactXenoShareValue, registerShutdownCleanup, registry, removeMcpServerConfig, removeProjectAllowedTool, renderAgentDefinition, renderAgentDefinitions, renderAuditReplayMarkdown, renderAuditReplayReport, renderAuditTraceMarkdown, renderAuditTraceReport, renderAuditTraceSummaries, renderCliAutomationStatus, renderCodingBenchmarkMarkdown, renderCodingBenchmarkReport, renderContinuationIncompleteStatus, renderLspDefinitionReport, renderLspDiagnosticsReport, renderLspDoctorReport, renderLspHoverReport, renderLspReferencesReport, renderToolContinuationInput, renderCliAutomationStatus as renderXenoHostAutomationStatus, renderXenoSkillCatalog, repairInterruptedToolCalls, repairToolExchangeHistory, requestBackground, requiresSecuredProcessLaunch, resetAllPersistentShellSessions, resetBashBenchmarkGuards, resetImageGenerationConfig, resetMcpServerApprovals, resetMxcContainmentProbe, resetPersistentShellSession, resetXenoAnsiPolicy, resetXenoTelemetryCardinalityForTests, resizeXenoRaster, resolveAgentDefinition, resolveAgentProfile, resolveAgentToolPolicy, resolveBuiltInAgentProfile, resolveCommandOnPath, resolveContainmentConformanceTemporaryRoot, resolveDelegatedExecutionMode, resolveExecutionSecurityLevel, resolveExecutionTrustMode, resolveInteractiveTurnMaxIterations, resolveModelContextTokens, resolvePermissionProfile, resolveShellInvocation, resolveSubagentRemoteMcpAccess, resolveSubagentWorkflowAnswer, resolveXenoAutomationEvidencePolicy, resolveXenoSdkApiKey, runAgentHook, runCommandHook, runContainmentConformanceSuite, runDelegatedXenoTurn, runDelegationPlan, runHookDefinition, runHooks, runHttpHook, runPromptHook, runSubagentWorkflow, runXenoThread, runXenoThreadStreamed, sanitizeEnvironment, sanitizeXenoTelemetryAttributes, saveConfig, saveMcpConfigFile, saveProjectState, saveSession, scaffoldPlugin, scanAgentDefinitions, scoreMemories, scorePluginRelevance, searchXenoRepositoryIndex, selectXenoProviderRoute, serializeXenoRecipe, setLogLevel, setProjectLastSessionSummary, setProjectMcpApproval, setProjectOnboardingCompleted, setWorkspaceTrusted, setupAIHandlers, sha256ArtifactBytes, sha256ArtifactJson, shouldEnableExecutionGovernance, shouldSourceShellProfile, shouldUseIsolatedStdinForCommand, signSharePayload, sqliteAnalyzeTool, stripXenoAnsi, subscribeXenoTelemetry, summarizeAuditInputRecord, summarizeAuditTraces, summarizeRuntimeInput, summarizeSubagentResults, summarizeXenoArtifactReview, syncMcpToolsToRegistry, synthesizeSkill, taskInputTool, taskOutputTool, taskStopTool, testPlugin, thinkTool, toAgentDefinitionMetadata, toLLMProvider, toolEvidenceToXenoArtifact, toolOperationManager, toolRiskLevel, turnDiffSummaryToXenoArtifact, unifiedDiffToXenoArtifact, unifiedExecManager, updateProjectState, upsertMcpServerConfig, validateAgentDefinition, validateCapabilityLeaseRequest, validateDelegationPlan, validateDirectEndpoint, validateExecutionSecurityPolicy, validateJsonSchema, validateManifest, validateMcpAppResource, validateXenoArtifact, validateXenoArtifactReviewEvent, validateXenoControlRoomSnapshot, validateXenoEvidenceGraph, validateXenoRepositoryIndex, validateXenoSdkApiKey, validateXenoSecureExecutionContract, validateXenoSpecDocument, verifyContainmentCertification, verifyContainmentCertificationApproval, verifyPluginSupplyChain, verifySignature, verifySoulRecord, verifyXenoHostedControlCommand, verifyXenoHostedEnvironmentManifest, verifyXenoHostedEventChain, verifyXenoHostedExecutionAdapterCertification, verifyXenoHostedExecutionJob, verifyXenoHostedRunResult, verifyXenoHostedWebhook, verifyXenoSecureShare, verifyXenoSessionHandoff, webFetchTool, webSearchTool, windowsDpapiProtect, windowsDpapiUnprotect, withXenoTelemetrySpan, wrapXenoAnsi, writePluginSupplyChainLockfile, writeTool, xenoAnsi, xenoAnsiVisibleWidth, xenoArtifactToDiffDocument, xenoArtifactToLegacyAgentArtifact, xenoArtifactToOracleReport, xenoArtifactToReviewReport, xenoArtifactToSourceResearchReport, xenoArtifactToSpecDocument, xenoArtifactToSpecExecution, xenoArtifactToToolEvidence, xenoArtifactToTurnDiffSummary, xenoHostedExecutionAdapterSigningPayload, xenoOracleReportToArtifact, xenoRecipeFingerprint, xenoReviewReportToArtifact, xenoReviewReportToGitHubComments, xenoSourceResearchReportToArtifact, xenoSpecArtifactIds, xenoSpecExecutionToArtifact, xenoSpecToArtifactBundle };
+export { type A2AMessage, type A2AMessageType, AGENT_DAEMON_PROTOCOL_VERSION, AGENT_EFFORT_LEVELS, AGENT_PERMISSION_MODES, AGENT_PROFILE_EXTERNAL_ACTIONS, ARCHITECT_CAPABILITIES, ARCHITECT_TOOL_NAMES, type ActiveLayerInfo, type AddXenoArtifactCommentRequest, type AgentArtifact, type AgentCapabilities, type AgentCard, AgentDaemonClient, type AgentDaemonError, type AgentDaemonHandler, type AgentDaemonRequest, type AgentDaemonResponse, AgentDaemonServer, type AgentDaemonTransport, AgentDebugger, type AgentDefinition, type AgentDefinitionIsolation, type AgentDefinitionIssue, AgentDefinitionLoader, type AgentDefinitionLoaderOptions, type AgentDefinitionMetadata, AgentDefinitionResolver, type AgentDefinitionScanResult, type AgentDefinitionScope, type AgentDefinitionShadowRef, type AgentEffortLevel, AgentEvaluator, AgentEventStore, type AgentHookDefinition, AgentHookRunner, AgentInterruptedError, type AgentIpcChannel, type AgentLoadSnapshot, AgentLoop, type AgentLoopConfig, type AgentLoopOptions, type AgentPermissionMode, type AgentProfileActionDecision, type AgentProfileCapabilities, type AgentProfileCapabilityBoundary, type AgentProfileCollaborationMode, type AgentProfileCompletionPolicy, type AgentProfileEvidenceKind, type AgentProfileExecutionPolicy, type AgentProfileExternalAction, type AgentProfileExternalActionPolicy, type AgentProfileIsolation, type AgentProfileKind, type AgentProfileMemoryPolicy, type AgentProfileMemoryScope, type AgentProfilePresentation, type AgentProfileSkillPolicy, type AgentProfileSoulMode, type AgentProfileV2, AgentProfileValidationError, AgentProtocol, AgentRegistry, type AgentRunAgentDefinitionRef, AgentRunController, type AgentRunControllerOptions, type AgentRunCreateInput, AgentRunError, type AgentRunEvent, type AgentRunListOptions, type AgentRunOptions, type AgentRunRecord, type AgentRunSpawnResult, type AgentRunStatus, AgentRunStore, type AgentRunTermination, type AgentRunTerminationReason, type AgentRunTerminationStatus, type AgentRunUsage, type AgentSandbox, type AgentSelectionStrategy, type AgentSessionHostBindingV1, type AgentStreamCallbacks, type AgentTask, type AgentTaskHandler, type AgentTaskResult, type AgentTaskStatus, type AgentTeam, type AgentToAppChannel, type AgentToAppMessages, type AgentToolPolicy, type AnalysisResult, type ApiMessage, type AppAgentBaseOptions, AppAgentFactory, type AppAgentResult, type AppContext, AppContextInjector, AppContextManager, type AppContextProvider, type AppId, type AppServerEventV2, type AppServerInitializeParamsV2, type AppServerInitializeResultV2, type AppServerIntegrationMetadataV2, type AppServerPermissionRequestV2, type AppServerPrincipalV2, AppServerProtocolError, type AppServerProtocolErrorData, AppServerRemoteError, type AppServerRequestContext, type AppServerSubscriptionSnapshotV2, type AppServerThreadStatusV2, type AppServerThreadV2, type AppServerTurnRunnerContextV2, type AppServerTurnRunnerV2, type AppServerTurnStatusV2, type AppServerTurnV2, type AppServerV2ClientTransport, type AppServerV2MethodMap, type AppServerV2Options, type AppToAgentChannel, type AppToAgentMessages, type AppType, type ArchitectAgentOptions, type ArchitectToolAdapter, type AskUserHandler, type AskUserRequest, type AskUserResponse, type AtomicMessageGroup, type AudioProjectInfo, type AudioStemSeparationResult, type AudioToolAdapter, type AudioTrackType, type AudioTranscriptionResult, type AudioTranscriptionSegment, type AuditDecision, type AuditEvent, AuditLogger, type AuditReplayReport, type AuditReplayStep, type AuditRiskLevel, type AuditStatus, type AuditTraceGapEntry, type AuditTraceReport, type AuditTraceSummary, type AuditTraceTimelineEntry, type AuditTraceToolSummary, type AugmentContextOptions, type AuthorizedShellExecution, AutoCheckpointHandler, AutoMemory, type AutoMemoryContext, type AutoMemoryTrigger, AutoPermissionClassifier, type AutoPermissionDecision, BUILT_IN_XENO_PROVIDER_PRESETS, type BackgroundOwnerCleanupResult, type BackgroundOwnerCleanupToken, BackgroundProcessManager, type BackgroundTask, type BaseHookDefinition, type BenchBashMiddlewareOptions, type BlockContent, type BlockType, type BoundedShellOutput, type BreakpointCallback, type BuildResult, type BuildXenoSecureExecutionContractOptions, COMPAT_TOOL_ALIASES, CONFIG_VERSION, type CanonicalSecurityPath, type CanvasSize, type CapabilityLeaseCommand, type CapabilityLeasePersistence, type CapabilityLeaseTransaction, type CapabilityMutationAck, type CapabilityMutationReceipt, type CellRangeData, type ChartConfig, type ChatCompletionChunk, type ChatCompletionRequest, type ChatCompletionResponse, type ChatMessage, type ChatParams, type ChatResponse, type CheckpointData, type CheckpointInfo, CheckpointManager, type CheckpointTrigger, type ClaimXenoHandoffInput, type ClashResult, type CliAutomationAuditEvent, type CliAutomationAuditLoggerPort, type CliAutomationEnvironment, type CliAutomationStatusReport, type CliAutomationSurfaceStatus, CliGovernedAutomationRuntime, type ClipContext, type CodeApplyOptions, type CodeApplyResult, type CodeValidationIssue, type CodeValidationResult, CodeValidator, type CodingBenchmarkAssessment, type CodingBenchmarkMeasurement, type CodingBenchmarkOptions, type CodingBenchmarkReport, type CodingBenchmarkThreshold, type CommandBackedProtectedStateOptions, type CommandHookDefinition, CommandHookRunner, type CompactionRecord, type CompileAgentProfileOptions, type CompiledAgentProfile, type CompiledJsonSchema, type CompletionDecision, type CompletionGuard, type CompletionGuardContext, type CompletionGuardDecision, type CompletionGuardEvaluationContext, CompletionGuardRegistry, type CompletionGuardResult, type CompletionGuardResultObject, type CompletionGuardStopReason, type CompletionGuardToolPolicy, type CompletionGuardToolPolicyMode, type CompletionGuardTurnStats, type CompletionGuardVeto, type ComponentData, type CompressionLLMFn, type CompressionStats, type ConfigProfile, type ConnectConfiguredMCPServersOptions, type ConnectConfiguredMCPServersResult, type ContainedProcessSpec, type ContainmentAdapterIdentity, ContainmentApprovalError, type ContainmentCertificationBinding, ContainmentCertificationError, type ContainmentConformanceCheck, type ContentBlock, type ContextCompressedData, ContextManager, type ContextManagerConfig, type ContextSection, type ContextSource, type ControlPlaneLockHandle, type ControlPlaneLockRecord, ConversationStore, type CreateAuditBackedPermissionEngineOptions, type CreateCliGovernedAutomationRuntimeOptions, type CreateDelegatedBranchAgent, type CreateDelegatedBranchAgentOptions, type CreateDelegatedXenoAgentOptions, type CreateXenoAgentOptions, type CreateXenoAgentResult, type CreateXenoGoalInput, type CreateXenoGovernedAutomationToolsOptions, type CreateXenoHandoffInput, type CreateXenoHandoffOptions, type CreateXenoHostGovernedAutomationRuntimeOptions, type CreateXenoShareOptions, type CreateXenoSkillToolOptions, type CreateXenoSourceResearchReportInput, type CrossAppHandler, type CrossAppMessage, CrossAppRouter, CrossAppRouterError, type CrossAppRouterOptions, DEFAULT_API_KEY, DEFAULT_IMAGE_MODEL, DEFAULT_MEMORY_BUDGETS, DEFAULT_MODEL, DEFAULT_PROMPT_SECTIONS_TOKEN_BUDGET, DEFAULT_PROTECTED_STATE_KEY_NAME, DEFAULT_PROTECTED_STATE_SERVICE, DEFAULT_SUBAGENT_BRANCH_POLICY, DEFAULT_SUBAGENT_REMOTE_MCP_BY_ROLE, DEFAULT_SUBAGENT_ROLES, DEFAULT_SUBAGENT_ROLE_PRECEDENCE, DEFAULT_SUBAGENT_TEAM_PRESET, DIRECT_SHELL_CONTEXT_WARNING, DOCS_CAPABILITIES, DOCS_TOOL_NAMES, type DebugBreakpoint, type DebugSnapshot, type DebugStep, type DebugStepCallback, type DecideXenoArtifactRequest, type DefaultToolRegistryOptions, type DefaultWebContextRequestFactoryOptions, type DelegatedBranchAdmission, type DelegatedBranchAdmissionSettlement, type DelegatedBranchAgent, type DelegatedBranchAgentCallbacks, type DelegatedXenoTurnResult, type DelegationBudget, type DelegationLimits, type DelegationSummaryData, type DependencyEdge, type DescendantInstructionHint, type DirectEndpointPolicy, type DirectEndpointProfile, type DirectProviderCapabilityProfile, type DirectProviderConfig, type DirectProviderKind, type DirectShellMessageMetadata, type DirectShellResultRecord, type DispatchAgentHandler, type DispatchAgentRequest, type DispatchAgentResponse, type DocComment, type DocsAgentOptions, type DocsToolAdapter, type DocumentContext, type DualLLMMode, DualLLMProvider, type DualLLMProviderConfig, type DualLLMProviderLike, type DualLLMStatus, type DurableCapabilityLeaseOptions, DurableXenoCapabilityLeaseRegistry, DurableXenoCoordinationStore, ENGINE_CAPABILITIES, ENGINE_TOOL_NAMES, ElectronAgentBridge, type ElectronAgentConfig, type EngineAgentOptions, type EngineToolAdapter, type EntityInfo, type Episode, type EpisodeOutcome, EpisodicStore, type EpisodicStoreOptions, type ErrorData, type EvalReport, type EvalResult, type EvalRunOptions, type EvalTask, type ExchangeMCPOAuthCodeOptions, type ExecuteToolRequest, type ExecuteToolResult, type ExecuteXenoCoordinationActionInput, type ExecuteXenoCoordinationActionResult, ExecutionGovernance, type ExecutionGovernanceOptions, type ExecutionGovernanceSummary, type ExecutionMode, type ExecutionSecurityCapabilities, ExecutionSecurityError, type ExecutionSecurityErrorCode, type ExecutionSecurityLevel, type ExecutionTrustMode, type ExpectedOutputContract, type ExportableSoulSigner, type ExtendedAppType, FALLBACK_MODELS, type FailureCluster, type FileEntry, FileQuotaAuthority, type FileSnapshot, FileXenoArtifactRepository, type FileXenoArtifactRepositoryOptions, FileXenoProviderConnectionStore, type FileXenoProviderConnectionStoreOptions, FileXenoShareRegistry, type FileXenoShareRegistryOptions, type FilterConfig, type GovernanceExtensions, type GovernanceExtensionsOptions, HIGH_RISK_PERMISSIONS, type HarnessTask, type HarnessTaskStatus, type HarnessTaskUpdate, type HookConfig, type HookDecision, type HookDefinition, type HookEventName, type HookExecutionResult, type HookExecutionStatus, type HookInput, type HookInputBase, type HookInvocationInput, type HookModelExecutor, type HookPermissionMode, type HookRunResult, HookRunner, HookRuntime, type HookRuntimeOptions, type HttpHookDefinition, HttpHookRunner, IDENTITY_PATHS, type IdentityFrontmatter, type IdentityLayer, type IdentityLoadResult, IdentityLoader, type IdentityLoaderOptions, type IdentityPaths, IdentityResolver, type IdentitySource, type ImageContentBlock, type ImageDocumentInfo, type ImageGenerationConfig, type ImageLayerInfo, type ImageLayerType, type ImageToolAdapter, type ImageUrlBlock, InMemoryXenoArtifactRepository, type InMemoryXenoArtifactRepositoryOptions, InMemoryXenoCapabilityLeaseRegistry, type InMemoryXenoCapabilityLeaseRegistryOptions, InMemoryXenoTelemetryCollector, type InitializeSessionRuntimeOptions, type InspectSystemPromptOptions, type InstallSignalHandlersOptions, InteractiveChatTurnGovernance, InteractiveTurnGovernance, type InteractiveTurnGovernanceOptions, type IpcHandler, type JsonRpcErrorResponse, type JsonRpcMessage$1 as JsonRpcMessage, type JsonRpcNotification, type JsonRpcRequest$1 as JsonRpcRequest, type JsonRpcResponse, type JsonRpcSuccessResponse, type JsonSchema, JsonSchemaCompilationError, type JsonSchemaCompilationIssue, type JsonSchemaCompileOptions, type JsonSchemaSubset, type JsonSchemaType, type JsonSchemaValidationError, type JsonSchemaValidationResult, type LLMCompletionResult, type LLMProvider, type LLMProviderCapabilities, type LLMProviderMessage, type LLMProviderRequestContext, type ToolDefinition as LLMProviderToolDefinition, type LLMToolDefinition, type LayerContext, type LegacyXenoSkillInput, type LinuxBubblewrapCapability, type LinuxBubblewrapProcessSpec, LlmClient, type LlmClientDeps, LocalLLMProvider, type LocalLLMProviderConfig, type LocalRuntimePreflightResult, LogLevel, type LspDefinitionReport, type LspDiagnosticsReport, type LspDoctorReport, type LspDoctorServer, type LspHoverReport, type LspReferencesReport, MANIFEST_FILENAME, MAX_CONTAINMENT_APPROVAL_AGE_MS, MAX_CONTAINMENT_CERTIFICATION_BYTES, MAX_CONTAINMENT_CERTIFICATION_LIFETIME_MS, MAX_DIRECT_SHELL_OUTPUT_CHARS, type MCPAppCapabilities, type MCPAppContentSecurityPolicy, type MCPAppExtensionMetadata, type MCPAppMetadata, type MCPAppPermissions, type MCPAppResourceDescriptor, type MCPAppValidationResult, type MCPAppVisibility, type MCPApprovalDecision, type MCPBearerTokenRefreshHandler, type MCPBearerTokenResolver, type MCPConfigFile, type MCPConfiguredServer, type MCPElicitationAction, type MCPElicitationHandler, type MCPElicitationRequest, type MCPElicitationResponse, type MCPHttpAuthChallenge, MCPHttpTransportError, type MCPHttpUrlPhase, type MCPInitializeParams, type MCPInitializeResult, MCPManager, type MCPManagerOptions, type MCPOAuthAuthorizationServerMetadata, type MCPOAuthAuthorizationSession, MCPOAuthClient, type MCPOAuthClientOptions, type MCPOAuthClientRegistration, type MCPOAuthClientRegistrationSource, type MCPOAuthConfig, type MCPOAuthDiscoveryResult, type MCPOAuthProtectedResourceMetadata, type MCPOAuthTokenSet, type MCPOAuthTokenStore, type MCPOAuthUrlPhase, type MCPPrompt, type MCPPromptGetParams, type MCPPromptGetResult, type MCPPromptsListResult, type MCPRegistryAccessPolicy, type MCPRegistryEntryDescriptor, type MCPRegistryEntryKind, type MCPRegistryFilter, type MCPResource, type MCPResourceReadParams, type MCPResourceReadResult, type MCPResourceSubscribeParams, type MCPResourceUnsubscribeParams, type MCPResourcesListResult, MCPServer, type MCPServerConfig, type MCPServerModeOptions, type MCPServerPromptRegistration, type MCPServerResourceRegistration, type MCPServerScope, type MCPServerState, type MCPTool, type MCPToolCallParams, type MCPToolCallResult, type MCPToolsListResult, type MCPTransport, type MCPTransportConnection, MCP_APPS_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_SCHEME, MCP_PROTOCOL_VERSION, MCP_SUPPORTED_PROTOCOL_VERSIONS, MEMORY_FILES, MOTION_CAPABILITIES, MOTION_SYSTEM_PROMPT, MOTION_TOOL_NAMES, type ManifestValidationResult, type MaterialConfig, type MaterializeXenoAutomationEvidenceOptions, type MemoryAccessScope, type MemoryBudget, type MemoryEntry, type MemoryFile, type MemoryLevel, MemoryManager, type MemoryManagerOptions, type MeshInfo, type Message, MessageFlow, type MessageFlowDeps, type ModeSwitchRequest, type ModelInfo, type ModelProvider, ModelProviderRegistry, type MonitorEvent, MonitorManager, type MonitorSnapshot, type MonitorSource, MonitorStopTool, MonitorTool, type MotionAgentOptions, type MotionPromptParams, type MxcContainmentProbe, type MxcNativeAssetDescriptor, type MxcWindowsHostPreparationReport, NOTES_CAPABILITIES, NOTES_TOOL_NAMES, type NormalizedLspDiagnostic, type NormalizedLspHover, type NormalizedLspLocation, type NormalizedLspRange, type NotePageInfo, type NoteSearchResult, type NotesAgentOptions, type NotesToolAdapter, type OllamaNativeProviderConfig, type OnChunkCallback, type OnTaskCompleteInput, type OnTaskCompleteResult, type OpenTelemetryMetricAdapter, type OperationTaskSource, type OsProtectedStateStoreOptions, OtelExporter, type OtelUsageAdapter, PIXEL_CAPABILITIES, PIXEL_SYSTEM_PROMPT, PIXEL_TOOL_NAMES, PROCESS_TREE_ADAPTERS, PROJECT_STATE_VERSION, type ParameterizedPermissionRule, type ParseUnifiedDiffOptions, type PermissionConfig, type PermissionDecision, type PermissionDecisionEvent, type PermissionDecisionHook, PermissionEngine, type PermissionInfo, type PermissionProfile, type PermissionProfileDecision, type PermissionProfileMode, type PermissionProfileName, type PermissionProfileNetworkDecision, type PermissionProfileResolution, type PermissionPromptFn, type PermissionPromptInfo, type PermissionPromptOperation, type PermissionPromptPreview, type PermissionPromptPreviewLine, type PermissionRequestContext, type PermissionRequestInfo, type PermissionRequestResult, type PermissionRule, type PersistentPermissionState, type PixelAgentOptions, type PixelPromptParams, type PlatformInfo, type PluginActivationEvent, type PluginAuthor, type PluginCapability, type PluginCommandContribution, type PluginCommandHandler, type PluginContext, type PluginContributions, type PluginDetachedSignature, type PluginEngineConstraint, type PluginEvent, PluginEventBus, type PluginEventListener, type PluginEventType, type PluginHook, PluginHost, type PluginHostInfo, type PluginHostOptions, type PluginInfo, type PluginListing, type PluginLogger, PluginManager, type PluginManagerOptions, type PluginManifest, PluginMarketplace, type PluginMarketplaceOptions, type PluginOutputStyleContribution, type PluginPermission, type PluginPromptContribution, type PluginPublishOptions, type PluginRelevanceCandidate, type PluginRelevanceHints, type PluginRelevanceSuggestion, type PluginRepositorySignal, PluginSandbox, type PluginSandboxOptions, type PluginScaffoldOptions, type PluginSearchOptions, type PluginSettingContribution, PluginSettingsManager, type PluginSignatureStatus, type PluginStatus, type PluginStorage, type PluginSupplyChainLockfile, type PluginSupplyChainRecord, type PluginTestCase, type PluginTestResult, PluginToolBuilder, type PluginToolContribution, type PluginTrustBadge, type PluginUIPanel, type PolicyCheckResult, type PolicyEnforcerConfig, type PrepareMCPOAuthAuthorizationOptions, type ProbeXenoProviderOptions, type ProcessContainmentStatus, type ProcessTreeAdapter, type ProfileMCPServerConfig, ProfileManager, type ProjectConfig, type ProjectDomainProfile, type ProjectExecutionPhase, type ProjectExecutionProfile, type ProjectInfo, type ProjectMcpApprovalDecision, type ProjectSessionContext, type ProjectSessionContextEntry, type ProjectSessionSummary, type ProjectTokenUsageSummary, type PromotionRequestResult, type PromptContext, type PromptFn, type PromptHookDefinition, PromptHookRunner, type PromptMemoryContextInfo, type PromptSectionContext, type PromptSectionProvider, PromptSectionRegistry, ProtectedFileWriteError, type ProtectedFileWriteReceipt, type ProtectedStateCipher, type ProtectedStateEnvelopeCipher, type ProtectedStateEnvelopeCipherOptions, type ProtectedStateEnvelopeV1, type ProtectedStateStore, ProviderError, type ProviderErrorCategory, type ProviderErrorCode, type ProviderErrorOptions, type ProviderStatus, type ProviderStreamEvent, type ProviderTransportLimits, QueryLifecycle, type QueryLifecycleOptions, type QueryState, type QueryTransition, type QueryWatchdogReason, type QuotaAuthority, type QuotaEntity, QuotaError, type QuotaLimits, type QuotaReservation, type QuotaScope, REQUIRED_CONTAINMENT_CONFORMANCE_CHECKS, type RecalledEpisode, type RecalledSkill, type RecentSessionEntry, type RecentSessionsIndex, type ReducedResult, type ReducerOptions, type RegisterToolOperationInput, type RegisteredTool, type RenderConfig, type RequestBudgetBreakdown, type ResolveXenoSdkApiKeyOptions, type ResolvedIdentity, type ResolvedMemory, type ResolvedProvider, type ResolvedSubagentWorkflowAnswer, type ResourceContentBlock, type RoomInfo, type RunContainmentConformanceOptions, type RunDelegatedXenoTurnOptions, type RunStreamOptions, type RuntimeManifestFileEntry, type RuntimeManifestInspectionResult, type RuntimePluginManifestEntry, SDK_DEFAULT_MAX_ITERATIONS, SDK_DEFAULT_MAX_TOKENS, SDK_VERSION, SESSION_FORMAT_VERSION, SHEETS_CAPABILITIES, SHEETS_TOOL_NAMES, SLIDES_CAPABILITIES, SLIDES_TOOL_NAMES, SOUND_CAPABILITIES, SOUND_SYSTEM_PROMPT, SOUND_TOOL_NAMES, SSETransport, SUBAGENT_ROLE_ALIASES, SUBAGENT_TEAM_PRESETS, type SandboxCheckResult, type ScoredMemory, ScreenCapture, type ScreenCaptureConfig, type ScreenCaptureOptions, type SearchConfig, type SearchProvider, type SecuredProcessSpec, type SecurityPathIssue, type SecurityPathIssueCode, type Session, type SessionCreateOptions, type SessionData, type SessionEndData, type SessionIntegrationConfig, SessionLock, SessionLock as SessionLockManager, SessionManager, type SessionMeta, type SessionRecoveryIssue, type SessionRecoveryResult, type SessionRecoverySource, SessionRegistry, type SessionResumeOptions, type SessionRuntimeBaseOptions, type SessionRuntimeState, type SessionStartData, type SessionStatus, type SessionSummary, type SetXenoArtifactCommentResolutionRequest, type SetupAIHandlersOptions, type ShapeConfig, type SheetsAgentOptions, type SheetsToolAdapter, type ShellExecutionAuthorization, type ShellExecutionAuthorizationRequest, type ShellPathReference, type ShutdownCleanup, type Skill, SkillStore, type SkillStoreOptions, type SlideInfo, type SlidesAgentOptions, type SlidesToolAdapter, type SortConfig, type SoulCompletion, SoulEngine, type SoulEngineOptions, type SoulMessage, type SoulSigner, type SoundAgentOptions, type SoundPromptParams, type SpeechRecognizer, type SpeechRecognizerCallbacks, type SpeechRecognizerConfig, SqliteAutomationExecutionJournal, SqliteCapabilityLeasePersistence, type StartXenoLoopInput, StdioTransport, type StemSeparationResult, type StopReason, type StoredConversation, type StoredMessage, type StoredToolCall, type StreamResult, StreamableHTTPTransport, type StreamableHTTPTransportOptions, type StreamableHTTPTransportSnapshot, type SubagentBranchPolicy, type SubagentBriefContext, type SubagentExecuteFn, type SubagentExecutionRequest, type SubagentExecutionResponse, type SubagentRemoteMcpAccess, type SubagentResult, type SubagentRole, type SubagentTask, type SubagentTeamPreset, type SubagentTeamPresetDefinition, type SubagentWorkflowMode, type SubagentWorkflowOptions, type SubagentWorkflowResult, type SynthesizeSkillInput, type SystemPromptInspectionResult, THREE_D_CAPABILITIES, THREE_D_TOOL_NAMES, TOOL_OPERATION_SCHEMA_VERSION, type TaskCompletionCallback, TaskListManager, type TestResult, type TextBlock, type ThreeDAgentOptions, type ThreeDToolAdapter, type TimelineInfo, type TokenUsageTotals, type ToolAssistantContentBlock, type ToolAuthorizationReceipt, type ToolCallData, type ToolCompletionPolicy, type ToolContinuationCheckpoint, type ToolContinuationNotification, type ToolDefinition, type ToolEvidence, type ToolExchangeRepairResult, type ToolExecutionContext, type ToolExecutor, type ToolFailureCategory, type ToolFailureGuardTrip, ToolFailureLoopGuard, type ToolHistoryRepairDiagnostic, type ToolManifestEntry, type ToolMiddleware, type ToolMiddlewareContext, ToolMiddlewareRegistry, type ToolOperationEvent, ToolOperationManager, type ToolOperationRuntimeEventType, type ToolOperationSnapshot, type ToolOperationState, ToolOrchestrator, type ToolOrchestratorCallbacks, type ToolOrchestratorConfig, type ToolPolicyProjection, type ToolProgressUpdate, ToolRegistry, type ToolRegistryOptions, type ToolResult, type ToolResultBlock, type ToolResultContent, type ToolResultData, type ToolRiskLevel, type ToolRuntimeContext, type ToolSchemaProjectionChange, ToolSchemaProjectionError, type ToolSchemaProjectionResult, type ToolSchemaProviderDialect, type ToolUseBlock, type TraceGraph, type TraceGraphEdge, type TraceGraphNode, type TrackContext, type TranscriptEvent, type TranscriptEventData, type TranscriptEventType, TranscriptWriter, type TranscriptionResult, type TranscriptionSegment, type TransitionConfig, type TurnDiffSummary, TurnDiffTracker, type TurnDiffTrackerOptions, type TurnFileDiff, type TurnRestoreAvailability, type TurnRestoreFilePreview, TurnRestoreManager, type TurnRestorePoint, type TurnRestoreResult, UNBOUNDED_OPERATION_CONTINUATION_LIMIT, type UnifiedExecCompletionReason, UnifiedExecError, type UnifiedExecEvent, type UnifiedExecEventListener, type UnifiedExecEventType, type UnifiedExecInputSource, UnifiedExecManager, type UnifiedExecManagerOptions, type UnifiedExecMode, type UnifiedExecOrigin, type UnifiedExecOutput, type UnifiedExecOutputChunk, type UnifiedExecOutputDelta, type UnifiedExecPresentation, type UnifiedExecProcess, type UnifiedExecReadDeltaOptions, type UnifiedExecStartOptions, type UnifiedExecStatus, type UnifiedExecStream, type UpdateXenoGoalInput, UsageAccumulator, type UsageAttribution, type UsageEvent, UsageLedger, type UsageQuery, type UsageTotals, type ValidateXenoSdkApiKeyOptions, type ValidatedContainmentCertification, type ValidationSignal, type VectorDocument, VectorMemoryStore, type VectorSearchResult, type VectorStoreAdapter, type VectorStoreOptions, type VerifyContainmentApprovalExpected, type VerifyPluginSupplyChainOptions, type VerifyPluginSupplyChainResult, type VerifyXenoHostedWebhookOptions, type VerifyXenoShareOptions, type VideoToolAdapter, WEB_CONTEXT_CONTRACT_VERSION, WEB_CONTEXT_TOOL_RESULT_SCHEMA, WORKFLOW_CAPABILITIES, WORKFLOW_TOOL_NAMES, type WebContextClientPort, type WebContextEvidenceProjection, type WebContextRequestBase, type WebContextRequestFactory, type WebContextToolOptions, type WebContextToolResult, type WebContextWaitPortOptions, type WebSearchResult, type WindowsDpapiCredentialFile, type WindowsDpapiProtectedFileOptions, type WindowsDpapiProtectedStateOptions, type WorkflowAgentOptions, type WorkflowDefinition, type WorkflowEvent, type WorkflowExecutionResult, type WorkflowInfo, type WorkflowNodeConfig, type WorkflowNodeDefinition, type WorkflowNodeExecutor, type WorkflowNodeStatus, type WorkflowPlan, WorkflowPlanner, type WorkflowRunNodeRecord, type WorkflowRunRecord, type WorkflowRunStatus, WorkflowRuntime, WorkflowStore, type WorkflowToolAdapter, WorkspaceIndex, type WorkspaceScanOptions, XENO_AGENT_PROFILE_SCHEMA_VERSION, XENO_API_BASE, XENO_APP_PROTOCOL_V2_METHODS, XENO_APP_PROTOCOL_VERSIONS, XENO_ARTIFACT_ACTOR_KINDS, XENO_ARTIFACT_FILE_REPOSITORY_SCHEMA_VERSION, XENO_ARTIFACT_SCHEMA_VERSION, XENO_ARTIFACT_SENSITIVITIES, XENO_ARTIFACT_STATES, XENO_AUTOMATION_OPERATIONS, XENO_AUTOMATION_PROTOCOL_VERSION, XENO_BROWSER_CONTROL_PLANE_OPERATIONS, XENO_BUILTIN_ARTIFACT_KINDS, XENO_CAPABILITY_LEASE_SCHEMA_VERSION, XENO_CONTAINMENT_APPROVAL_SCHEMA, XENO_CONTAINMENT_CERTIFICATION_SCHEMA, XENO_CONTAINMENT_CONFORMANCE_SCHEMA, XENO_CONTAINMENT_REVIEWER_TRUST_STORE_SCHEMA, XENO_CONTROL_ROOM_SCHEMA_VERSION, XENO_COORDINATION_MANAGED_SESSION_SCHEMA_VERSION, XENO_COORDINATION_SCHEMA_VERSION, XENO_DEFLATE_CODEC_NAME, XENO_DEFLATE_CODEC_VERSION, XENO_EVIDENCE_EDGE_TYPES, XENO_EVIDENCE_GRAPH_SCHEMA_VERSION, XENO_EVIDENCE_NODE_TYPES, XENO_GIF_ANIMATION_POLICY, XENO_GIF_CODEC_NAME, XENO_GIF_CODEC_VERSION, XENO_HANDOFF_SCHEMA_VERSION, XENO_HOSTED_CONTROL_SCHEMA_VERSION, XENO_HOSTED_ENVIRONMENT_SCHEMA_VERSION, XENO_HOSTED_EVENT_SCHEMA_VERSION, XENO_HOSTED_EXECUTION_ADAPTER_CERTIFICATION_SCHEMA, XENO_HOSTED_EXECUTION_ADAPTER_MAX_CERTIFICATE_LIFETIME_MS, XENO_HOSTED_EXECUTION_ADAPTER_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_PROTOCOL_VERSION, XENO_HOSTED_EXECUTION_TOOL_NAMES, XENO_HOSTED_RESULT_SCHEMA_VERSION, XENO_HOSTED_RUN_SCHEMA_VERSION, XENO_HOSTED_TRIGGER_SCHEMA_VERSION, XENO_JPEG_CODEC_NAME, XENO_JPEG_CODEC_VERSION, XENO_MXC_ADAPTER_NAME, XENO_MXC_POLICY_VERSION, XENO_MXC_VERSION, XENO_ORACLE_REPORT_SCHEMA_VERSION, XENO_PLUGIN_LOCK_FILENAME, XENO_PLUGIN_LOCK_SCHEMA_VERSION, XENO_PLUGIN_SIGNATURE_FILENAME, XENO_PLUGIN_SIGNATURE_SCHEMA_VERSION, XENO_PROVIDER_CATALOG_SCHEMA_VERSION, XENO_PROVIDER_CONNECTION_STORE_SCHEMA_VERSION, XENO_RASTER_CODEC_NAME, XENO_RASTER_CODEC_VERSION, XENO_RASTER_PREVIEW_FORMATS, XENO_RECIPE_SCHEMA_VERSION, XENO_REPOSITORY_INDEX_SCHEMA_VERSION, XENO_REVIEW_DIMENSIONS, XENO_REVIEW_EVIDENCE_KINDS, XENO_REVIEW_REPORT_SCHEMA_VERSION, XENO_RT_DEFAULT_URL, XENO_SECURE_EXECUTION_CONTRACT_SCHEMA_VERSION, XENO_SHARE_REGISTRY_SCHEMA_VERSION, XENO_SHARE_SCHEMA_VERSION, XENO_SKILL_SCHEMA_VERSION, XENO_SOURCE_RESEARCH_SCHEMA_VERSION, XENO_SPEC_EXECUTION_SCHEMA_VERSION, XENO_SPEC_SCHEMA_VERSION, XENO_SVG_RENDERER_NAME, XENO_SVG_RENDERER_VERSION, XENO_TELEMETRY_SCHEMA_VERSION, XENO_VP8_CODEC_NAME, XENO_VP8_CODEC_VERSION, XENO_WEBP_ANIMATION_POLICY, XENO_WEBP_CODEC_NAME, XENO_WEBP_CODEC_VERSION, type XenoAnsiEscapeFamily, type XenoAnsiFormatter, type XenoAnsiPolicy, type XenoAnsiStyle, type XenoAnsiToken, type XenoAnsiWrapOptions, type XenoAppProtocolVersion, XenoAppServer, type XenoAppServerOptions, XenoAppServerV2Client, type XenoArtifactActor, type XenoArtifactActorKind, type XenoArtifactAnchor, type XenoArtifactAppendReviewRequest, type XenoArtifactContent, type XenoArtifactEnvelope, type XenoArtifactFileRecoveryNotice, type XenoArtifactFileSnapshot, type XenoArtifactIdentity, type XenoArtifactKind, type XenoArtifactLifecycleEvent, type XenoArtifactListQuery, type XenoArtifactMutationOptions, type XenoArtifactPersistedRecord, type XenoArtifactProvenance, type XenoArtifactRecord, type XenoArtifactRelationship, type XenoArtifactRepository, XenoArtifactRepositoryError, type XenoArtifactRepositoryErrorCode, type XenoArtifactRepositoryState, type XenoArtifactRetention, type XenoArtifactReviewAnchorInput, type XenoArtifactReviewDecision, type XenoArtifactReviewEvent, type XenoArtifactReviewEventInput, XenoArtifactReviewService, type XenoArtifactReviewServiceOptions, type XenoArtifactReviewSummary, type XenoArtifactRevisionOptions, type XenoArtifactSensitivity, type XenoArtifactState, XenoArtifactStateTransitionError, type XenoArtifactStorageReference, type XenoArtifactTransitionRequest, XenoArtifactValidationError, type XenoArtifactValidationIssue, XenoAuthError, type XenoAuthErrorCode, type XenoAutomationAdapter, type XenoAutomationAdapterExecutionResult, type XenoAutomationAdapterManifest, type XenoAutomationConformanceCheck, type XenoAutomationConformanceReport, type XenoAutomationEffect, XenoAutomationError, type XenoAutomationErrorCode, type XenoAutomationEvidenceContent, type XenoAutomationEvidenceInput, type XenoAutomationEvidencePhase, type XenoAutomationEvidencePolicy, type XenoAutomationExecutionGrant, type XenoAutomationExecutionJournal, type XenoAutomationExecutionResult, type XenoAutomationIdentity, type XenoAutomationJournalIdentity, type XenoAutomationJournalRecord, type XenoAutomationLeaseAuthority, type XenoAutomationOperation, type XenoAutomationOperationDescriptor, type XenoAutomationPreflight, type XenoAutomationRequest, type XenoAutomationSurface, type XenoAutomationTarget, type XenoBasicRasterImage, type XenoBrowserAutomationOperation, XenoBrowserControlPlaneAdapter, type XenoBrowserControlPlaneAdapterOptions, type XenoBrowserExecutionPolicy, type XenoCapabilityEffect, type XenoCapabilityEligibility, type XenoCapabilityKind, type XenoCapabilityLease, type XenoCapabilityLeaseApprovalContext, type XenoCapabilityLeaseApprovalRequest, type XenoCapabilityLeaseDenialRequest, XenoCapabilityLeaseError, type XenoCapabilityLeaseErrorCode, type XenoCapabilityLeaseRequest, type XenoCapabilityLeaseRevocationRequest, type XenoCapabilityLeaseState, type XenoCapabilityScope, type XenoCapabilitySubject, type XenoCapabilityUse, type XenoColorDepth, type XenoColorPolicy, type XenoCompiledRecipe, type XenoCompiledRecipeStep, type XenoComputerAutomationOperation, type XenoComputerExecutionPolicy, type XenoConfig, type XenoContainmentApprovalReport, type XenoContainmentCertificationApproval, type XenoContainmentCertificationManifest, type XenoContainmentConformanceReport, type XenoContainmentReviewerTrustStore, type XenoContentHash, type XenoControlRoomActionKind, type XenoControlRoomActionPlan, type XenoControlRoomActionRequest, type XenoControlRoomAgent, type XenoControlRoomAgentInput, type XenoControlRoomAgentStatus, type XenoControlRoomApprovalInput, type XenoControlRoomApprovalKind, type XenoControlRoomArtifactInput, type XenoControlRoomAttentionItem, type XenoControlRoomAttentionKind, type XenoControlRoomGoalInput, type XenoControlRoomInput, type XenoControlRoomMonitorInput, type XenoControlRoomNotificationInput, type XenoControlRoomProjectionOptions, type XenoControlRoomSnapshot, type XenoControlRoomStatusCategory, type XenoControlRoomSummary, type XenoControlRoomTask, type XenoControlRoomTaskInput, type XenoControlRoomUsage, XenoControlRoomValidationError, type XenoCoordinationAction, type XenoCoordinationAdmissionFence, XenoCoordinationError, type XenoCoordinationEvent, type XenoCoordinationEventType, type XenoCoordinationSessionState, type XenoCoordinationStoreOptions, type XenoCreatedShare, type XenoCredentialSource, type XenoCredentialType, type XenoDesktopCaptureSource, type XenoDesktopCapturer, type XenoDiffArtifactContext, type XenoDiffDocument, type XenoDiffFile, type XenoDiffFileStatus, type XenoDiffHunk, type XenoDiffLine, type XenoDiffLineKind, type XenoDiffMode, XenoDiffParseError, type XenoDurableAutomationOptions, type XenoEd25519Signature, type XenoEnvironmentExecutionPolicy, type XenoEvidenceEdge, type XenoEvidenceEdgeType, type XenoEvidenceGraph, XenoEvidenceGraphBuilder, type XenoEvidenceGraphBuilderOptions, XenoEvidenceGraphValidationError, type XenoEvidenceNode, type XenoEvidenceNodeType, type XenoEvidenceReference, type XenoExecutionAdapterIdentity, type XenoExecutionEnforcement, type XenoExecutionIdentity, XenoExecutionLeaseSession, type XenoExecutionLeaseSessionOptions, type XenoExecutionOwner, type XenoExternalActionExecutionPolicy, type XenoFilesystemExecutionPolicy, type XenoGifAnimation, type XenoGifDisposal, type XenoGifFrame, type XenoGitHubReviewComment, type XenoGoalCriterion, type XenoGoalCriterionResult, type XenoGoalMilestone, type XenoGoalProgress, type XenoGoalRecord, type XenoGoalStatus, type XenoGoalTask, type XenoGoalTaskStatus, type XenoGoalVerification, XenoGovernedAutomationExecutor, type XenoGovernedAutomationExecutorOptions, type XenoGovernedAutomationToolExecution, type XenoGovernedAutomationToolRuntime, type XenoHandoffAuthority, type XenoHandoffOperation, type XenoHandoffPayload, type XenoHandoffRecord, type XenoHandoffResumePoint, type XenoHandoffStatus, type XenoHandoffTarget, type XenoHostAutomationAuditEvent, type XenoHostAutomationAuditLoggerPort, type XenoHostAutomationEnvironment, type XenoHostAutomationStatusReport, type XenoHostAutomationSurfaceStatus, CliGovernedAutomationRuntime as XenoHostGovernedAutomationRuntime, type XenoHostedArchitecture, type XenoHostedAuthority, type XenoHostedBudget, type XenoHostedCacheMount, type XenoHostedControlAcknowledgement, type XenoHostedControlAction, type XenoHostedControlCommand, type XenoHostedControlCommandPayload, type XenoHostedEnvironmentManifest, type XenoHostedEnvironmentManifestPayload, type XenoHostedEventRecord, type XenoHostedExecutionAdapterCertification, type XenoHostedExecutionAdapterVerificationOptions, type XenoHostedExecutionBoundaryReceipt, type XenoHostedExecutionJob, type XenoHostedExecutionSecretValue, type XenoHostedImageReference, type XenoHostedNetworkDestination, type XenoHostedNetworkPolicy, type XenoHostedOs, type XenoHostedQuotaLease, type XenoHostedReplayCursor, type XenoHostedReplayPage, type XenoHostedRepositorySource, type XenoHostedResourceLimits, type XenoHostedRetentionPolicy, type XenoHostedRunRecord, type XenoHostedRunRequest, type XenoHostedRunResult, type XenoHostedRunResultPayload, type XenoHostedRunStatus, type XenoHostedSecretProjection, type XenoHostedSetupStep, type XenoHostedTriggerDefinition, type XenoHostedTriggerDelivery, type XenoHostedTriggerKind, type XenoHostedWebhookSource, type XenoHostedWebhookVerification, type XenoJsonObject, type XenoJsonPrimitive, type XenoJsonValue, type XenoJwtPayload, type XenoLegacyAgentArtifactContext, type XenoLegacyArtifactContext, type XenoLoadedSkill, type XenoLoopIteration, type XenoLoopKind, type XenoLoopRecord, type XenoLoopSchedule, type XenoLoopStatus, XenoLoopbackAutomationAdapter, type XenoLoopbackAutomationAdapterOptions, XenoMultiAgentReviewCoordinator, type XenoMultiAgentReviewCoordinatorOptions, type XenoNetworkDestination, type XenoNetworkExecutionPolicy, type XenoOracleAdjudication, type XenoOracleAdjudicationDraft, type XenoOracleAdjudicationRequest, type XenoOracleAdjudicationResult, type XenoOracleArtifactContext, type XenoOracleCitation, type XenoOracleClaim, XenoOracleCoordinator, type XenoOracleCoordinatorOptions, type XenoOracleDisagreement, type XenoOracleExecutionRequest, type XenoOracleExecutionResult, type XenoOracleModelIdentity, type XenoOracleOpinion, type XenoOracleOpinionDraft, type XenoOracleReport, type XenoOracleRole, type XenoOracleRunOptions, XenoOracleValidationError, type XenoOracleVerdict, type XenoProcessExecutionPolicy, type XenoProjectState, type XenoProviderAdapterKind, type XenoProviderAuthPreset, type XenoProviderCapabilities, XenoProviderCatalog, type XenoProviderConnection, type XenoProviderConnectionSnapshot, type XenoProviderConnectionView, type XenoProviderCredentialMode, type XenoProviderModelDescriptor, type XenoProviderPreset, type XenoProviderProbeResult, type XenoProviderReadiness, type XenoProviderRouteCandidate, type XenoProviderRoutingPolicy, type XenoPtyAdapter, type XenoPtyProcess, type XenoPtySpawnOptions, type XenoRasterImage, type XenoRasterPreview, type XenoRecipeDefinition, type XenoRecipeInputDefinition, type XenoRecipeMode, type XenoRecipePermissionMode, type XenoRecipeStepDefinition, XenoRecipeValidationError, type XenoRedactionCategory, type XenoRedactionEvent, type XenoRedactionOptions, type XenoRedactionReport, type XenoRedactionResult, type XenoRemoteRepositoryIdentity, type XenoRemoteSourceFile, type XenoRemoteSourceProvider, type XenoRepositoryChunk, type XenoRepositoryDocumentKind, type XenoRepositoryEmbedding, type XenoRepositoryEmbeddingProvider, type XenoRepositoryEmbeddingRequest, type XenoRepositoryFileRecord, type XenoRepositoryFreshnessInput, type XenoRepositoryFreshnessReport, type XenoRepositoryGitProvenance, type XenoRepositoryIndexBuildOptions, XenoRepositoryIndexFileStore, type XenoRepositoryIndexSnapshot, type XenoRepositoryIndexStats, type XenoRepositoryRelationship, type XenoRepositoryRelationshipKind, type XenoRepositorySearchMode, type XenoRepositorySearchQuery, type XenoRepositorySearchResponse, type XenoRepositorySearchResult, type XenoRepositorySourceDocument, type XenoRepositorySymbol, type XenoRepositorySymbolGraph, type XenoRepositorySymbolKind, type XenoResolvedApiKey, type XenoReviewAgentExecutor, type XenoReviewAgentResult, type XenoReviewArtifactContext, type XenoReviewCoordinatorContext, type XenoReviewDimension, type XenoReviewEvidence, type XenoReviewEvidenceKind, type XenoReviewFinding, type XenoReviewFindingProposal, type XenoReviewFindingState, type XenoReviewPack, type XenoReviewReport, type XenoReviewSeverity, type XenoReviewTarget, XenoReviewValidationError, type XenoReviewVerificationOutcome, type XenoReviewVerificationResult, type XenoReviewVerifierExecutor, type XenoRuntimeEvent, type XenoRuntimeEventBase, XenoRuntimeEventBus, type XenoRuntimeEventDraft, type XenoRuntimeEventSink, type XenoRuntimeEventType, type XenoSecretProjection, type XenoSecureExecutionContract, XenoSecureExecutionContractError, type XenoSecureExecutionContractErrorCode, type XenoShareAccessPolicy, type XenoShareContent, type XenoShareGitContext, type XenoShareIssuer, type XenoSharePayload, type XenoSharePrincipal, type XenoShareReference, type XenoShareRegistryRecord, type XenoShareRegistrySnapshot, type XenoShareSessionIdentity, type XenoShareSigningIdentity, type XenoShareStatus, type XenoShareSurface, type XenoShareVerificationResult, type XenoShareVisibility, type XenoSignedHandoffEnvelope, type XenoSignedShareEnvelope, type XenoSkillActivation, type XenoSkillAuditEvent, type XenoSkillCatalog, type XenoSkillDescriptor, type XenoSkillDiagnostic, type XenoSkillDiscoveryOptions, type XenoSkillDiscoveryRoot, type XenoSkillExternalActionPolicy, type XenoSkillInvocationDecision, type XenoSkillInvocationPolicy, type XenoSkillResourceDescriptor, type XenoSkillShadowRecord, type XenoSkillSource, type XenoSkillTool, type XenoSkillToolPolicy, type XenoSourceResearchArtifactContext, type XenoSourceResearchExcerpt, type XenoSourceResearchFinding, type XenoSourceResearchModelIdentity, type XenoSourceResearchReport, type XenoSourceResearchSeverity, XenoSourceResearchValidationError, type XenoSpecAcceptanceCriterion, type XenoSpecArtifactBundle, type XenoSpecArtifactContext, type XenoSpecDesign, type XenoSpecDesignDecision, type XenoSpecDocument, type XenoSpecDriftFinding, type XenoSpecDriftReport, type XenoSpecExecutionRecord, type XenoSpecExecutionState, XenoSpecLifecycleService, type XenoSpecLifecycleServiceOptions, type XenoSpecPriority, type XenoSpecRequirement, type XenoSpecRisk, type XenoSpecSourceBaseline, type XenoSpecTask, type XenoSpecTaskExecution, type XenoSpecTaskStatus, XenoSpecValidationError, type XenoTelemetryAttributeValue, type XenoTelemetryRecord, type XenoTelemetrySignalKind, type XenoTelemetrySubscriber, type XenoThreadRunOptions, type XenoThreadRunResult, XenoTraceGraphRecorder, type XenoUserConfig, type XenoVerifiedHostedExecutionAdapterCertification, type XenoVp8Image, acquireControlPlaneLock, activateSessionRuntime, addProjectAllowedDirectory, addProjectAllowedTool, agentDefinitionFromProfile, agentProfileFromDefinition, appendBoundedShellOutput, appendGuidanceToResult, approveMcpServer, areSignalHandlersInstalled, artifactCompareTool, askUserTool, assertDirectEndpointResolution, assertPersistedXenoCapabilityLease, assertRequiredXenoAutomationEvidence, assertSupportedMcpProtocolVersion, assertUsableXenoApiKey, assertValidMcpAppResource, assertValidXenoArtifact, assertValidXenoAutomationAdapterManifest, assertValidXenoAutomationRequest, assertValidXenoEvidenceGraph, assertValidXenoHostedExecutionJob, assertValidXenoOracleReport, assertValidXenoRecipeDefinition, assertValidXenoReviewPack, assertValidXenoReviewReport, assertValidXenoReviewTarget, assertValidXenoSecureExecutionContract, assertValidXenoSourceResearchReport, assertValidXenoSpecDocument, assertValidXenoSpecExecution, assertXenoArtifactStateTransition, assertXenoAutomationAdapterConformant, assertXenoAutomationAuthority, auditRiskLevelForTool, authorizeShellExecution, backgroundProcessManager, bashTool, benchmarkCodingTools, bridgeXenoTelemetryToOpenTelemetry, buildAtomicMessageGroups, buildAuditReplayReport, buildAuditTraceReport, buildContainedProcessSpec, buildContractLedgerGuidance, buildDefaultSubagentTasks, buildDelegatedRoleSystemPrompt, buildHookEnvironment, buildLinuxBubblewrapProcessSpec, buildLspDefinitionReport, buildLspDiagnosticsReport, buildLspDoctorReport, buildLspHoverReport, buildLspReferencesReport, buildMotionSystemPrompt, buildPixelSystemPrompt, buildProcessHardenedProcessSpec, buildProjectBudgetFinalizationGuidance, buildProjectExecutionGuidance, buildProjectExecutionProfile, buildPromptMemoryContext, buildSecuredProcessSpec, buildSoundSystemPrompt, buildSystemPrompt, buildToolFailureGuardResult, buildXenoArtifactReviewAnchor, buildXenoAutomationCapabilityUse, buildXenoRepositoryIndex, buildXenoRepositoryIndexWithEmbeddings, buildXenoSecureExecutionContract, cachedModelContextWindow, calculateCost, canTransitionXenoArtifactState, canXenoRasterPreview, canonicalPayload, canonicalizeArtifactJson, canonicalizeMcpResourceUri, canonicalizeSecurityPath, canonicalizeToolName, checkSandbox, classifyProviderHttpError, cleanupReadImagePreviews, cleanupSessionRuntime, clearMcpServerApproval, clearProjectAllowedTools, clearProjectLastSessionSummary, clearProjectMcpApproval, clearProjectMcpApprovals, clipXenoAnsi, coerceSubagentRole, coerceSubagentTeamPreset, compileAgentProfile, compileJsonSchema, compileToolInputSchema, compileXenoRecipe, compileXenoSkillActivation, configureImageGeneration, configureSearch, configureSearchPermissionProfile, configureXenoAnsi, containmentApprovalSigningPayload, containmentCertificationSigningPayload, copyTextToClipboard, create3DTools, createAgentDefinitionFile, createAgentDefinitionPromptSection, createAgentRunId, createAppServerV2HttpTransport, createArchitectTools, createArtifactCompareTool, createAskUserTool, createAudioTools, createAuditBackedPermissionEngine, createBashTool, createBenchBashMiddleware, createCliAutomationAuditSink, createCliGovernedAutomationRuntime, createCommandBackedProtectedStateStore, createDefaultToolRegistry, createDelegatedXenoAgent, createDirectProvider, createDirectShellMessage, createDispatchAgentTool, createDocsTools, createEd25519Signer, createEditTool, createElfAnalyzeTool, createEngineTools, createGcodeAnalyzeTool, createGenerateImageTool, createGlobTool, createGovernanceExtensions, createGrepTool, createHtmlSanitizerAuditTool, createImageTools, createLsTool, createLspDefinitionTool, createLspDiagnosticsTool, createLspHoverTool, createLspReferencesTool, createMcpAppCapabilities, createMcpAppExtensionCapabilities, createMcpPkcePair, createMcpPromptRegisteredTool, createMcpRegisteredTool, createMcpResourceRegisteredTool, createMemoryProtectedStateStore, createMemoryReadTool, createMemoryWriteTool, createNotebookEditTool, createNotebookReadTool, createNotesTools, createOllamaNativeProvider, createOsProtectedStateStore, createProtectedStateEnvelopeCipher, createQuotaGovernedProvider, createReadImageTool, createReadTool, createSheetsTools, createSlidesTools, createSpeechRecognizer, createSqliteAnalyzeTool, createTaskInputTool, createTaskListTools, createTaskOutputTool, createTaskStopTool, createThinkTool, createToolAlias, createToolRuntimeContext, createUnavailableProtectedStateStore, createVideoTools, createWebContextFetchTool, createWebContextRequestFactory, createWebContextSearchTool, createWebSearchTool, createWindowsDpapiProtectedCipher, createWindowsDpapiProtectedFileStore, createWorkflowTools, createWriteTool, createXenoAgent, createXenoAutomationConformanceReport, createXenoGovernedAutomationTools, createCliAutomationAuditSink as createXenoHostAutomationAuditSink, createCliGovernedAutomationRuntime as createXenoHostGovernedAutomationRuntime, createXenoHostedControlCommand, createXenoHostedEnvironmentManifest, createXenoHostedEvent, createXenoHostedExecutionBoundaryReceipt, createXenoHostedRunResult, createXenoRasterPreview, createXenoSecureShare, createXenoSessionHandoff, createXenoShareSigningIdentity, createXenoSkillTool, createXenoSourceResearchExcerpt, createXenoSourceResearchReport, currentExecutionAdapterStatus, decodeJwtPayload, decodeXenoBmp, decodeXenoGif, decodeXenoGifAnimation, decodeXenoJpeg, decodeXenoNetpbm, decodeXenoPng, decodeXenoSvg, decodeXenoVp8, decodeXenoWebp, defaultToolRuntimeContext, defaultXenoReviewPack, deflateXenoZlib, deleteSession, denyMcpServer, deriveHostedIdempotencyKey, describeXenoAutomationOperation, detectLanguage, detectPluginRepositorySignals, detectRepositoryDocumentKind, detectRepositoryLanguage, detectXenoSpecDrift, deterministicReduce, digestMessages, directProviderConfigFromConnection, discoverXenoSkills, dispatchAgentTool, editTool, elfAnalyzeTool, emitXenoTelemetry, encodeXenoPngRgb, enforceShellCommandPolicy, enforceToolPolicy, ensureConfigDir, ensureDurableMessageIds, ensureProjectStateDir, estimateFullRequestBudget, evaluateContainmentUiRestrictions, evaluatePermissionProfileNetworkUrl, evaluateXenoCapabilityEligibility, executeXenoCoordinationAction, extractJsonObject, extractToolPath, findXenoSkill, fingerprintXenoSecureExecutionContract, forgetRecentSession, forgetRecentSessionById, formatBoundedShellOutput, formatCost, formatDirectShellContext, formatJsonSchemaErrors, formatModelList, formatPromptContextBreakdown, gcodeAnalyzeTool, generateImageTool, generateSessionId, getAgentHome, getAgentRunDir, getAgentRunStoreDir, getAvailableModels, getBenchmarkComputeBudgetHintForCommand, getBenchmarkForegroundTimeoutForCommand, getBestExecutionSecurityStatus, getChatModels, getConfigDir, getDefaultProviderRegistry, getExecutionSecurityCapabilityReport, getExecutionSecurityStatus, getGlobIgnores, getGrepIgnores, getHighRiskPermissions, getImageGenerationConfig, getJwtExpiry, getLinuxBubblewrapCapability, getLogLevel, getManagedConfigPath, getMcpAppMetadata, getMcpAppResourceUri, getMcpApprovalDecision, getMcpAuthorizationServerMetadataUrls, getMcpPromptToolName, getMcpProtectedResourceMetadataUrls, getMcpResourceToolName, getMcpToolName, getModelName, getMxcContainmentProbe, getMxcNativeAssetDescriptor, getMxcWindowsHostPreparationDescriptor, getMxcWindowsHostPreparationHelperArchitecture, getPermissionProfile, getPersistentShellSession, getPersistentShellSpawnSpec, getProcessContainmentStatus, getProjectAgentDefinitionDirs, getProjectAgentDefinitionsDir, getProjectLastSessionSummary, getProjectMcpApproval, getProjectStatePath, getReadImagePreviewCapability, getRecentSessionsIndexPath, getSubagentTeamPresetDefinition, getToolRiskLevel, getUserAgentDefinitionsDir, gitBranchTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, globTool, grepTool, gzipXeno, hasProjectOnboardingCompleted, hasXenoTelemetrySubscribers, hashContainmentConformanceReport, hashPluginManifest, hashPluginTree, hookResultStatus, hostedEnvironmentIdentity, htmlSanitizerAuditTool, importLegacyXenoSkill, inflateXenoZlib, initializeSessionRuntime, inspectCliAutomationStatus, inspectRuntimeManifests, inspectSecurityPath, inspectSystemPrompt, inspectCliAutomationStatus as inspectXenoHostAutomationStatus, inspectXenoRepositoryFreshness, inspectXenoRepositorySymbol, installSignalHandlers, invalidateAllObservedFiles, invokeXenoSkill, isChatModel, isDangerousCommand, isDirectShellMessage, isExpiredJwt, isExplicitResearchPrompt, isJwt, isLocalModel, isMcpAppResourceUri, isMcpOAuthTokenExpired, isMcpToolVisibleToApp, isMcpToolVisibleToModel, isNotBeforeJwt, isPathWithinAllowed, isScreenCaptureAvailable, isSensitiveEnvironmentKey, isSimpleInformationalPrompt, isSpeechRecognitionAvailable, isSupportedMcpProtocolVersion, isToolAllowedByXenoSkillActivation, isUncOrDevicePath, isValidAgentDefinitionName, isValidModel, isValidSessionId, isWorkspaceTrusted, isXenoAutomationOperation, legacyAgentArtifactToXenoArtifact, listBuiltInAgentProfiles, listPermissionProfiles, listProjectAllowedTools, listProjectMcpApprovals, listSessions, loadConfig, loadConfiguredMcpServers, loadMcpConfigFile, loadProjectConfig, loadProjectState, loadRecentSessionsIndex, loadSession, loadUserConfig, loadXenoSkill, lookupRecentSession, lsTool, lspDefinitionTool, lspDiagnosticsTool, lspHoverTool, lspReferencesTool, matchPermissionRule, matchesMcpRegistryEntryPolicy, materializeXenoAutomationEvidence, mcpInputSchemaToToolSchema, memoryReadTool, memoryWriteTool, mergeConfigs, mxcWarningsRequireWindowsHostPreparation, normalizeDirectShellResultRecord, normalizeHookDecision, normalizeMcpAppVisibility, normalizePermissionProfileName, normalizeQuotaScope, normalizeRepositoryRelativePath, normalizeSourceText, normalizeSubagentBranchPolicy, normalizeWorkingDirectory, normalizeXenoHostedControlAcknowledgement, notebookEditTool, notebookReadTool, openSqliteAutomationExecutionJournal, openSqliteCapabilityLeasePersistence, parseContainmentReviewerTrustStore, parseMcpWwwAuthenticate, parsePermissionRule, parseRetryAfter, parseSessionId, parseShellPathReferences, parseSubagentRemoteMcpPolicy, parseSubagentRoleList, parseUnifiedDiff, parseXenoAnsi, parseXenoRecipeDefinition, pending, persistXenoAutomationEvidence, planXenoControlRoomAction, pluginInfoRelevanceCandidate, pluginListingRelevanceCandidate, pluginSignaturePayload, preflightLocalModel, prepareMxcWindowsHost, probeXenoProvider, projectToolDefinitionsForProvider, projectToolSchemaForProvider, projectXenoControlRoom, providerCapabilityError, providerProtocolError, publicKeyFingerprint, publishPlugin, quotaAncestors, quotaInteger, quotaScopeKey, quotaText, rankPluginRelevance, readCliAutomationEnvironment, readImageTool, readManifestFromDisk, readPluginDetachedSignature, readPluginSupplyChainLockfile, readSessionFormatVersion, readTool, readXenoApiKey, readCliAutomationEnvironment as readXenoHostAutomationEnvironment, recordRecentSession, recordXenoCounter, recordXenoEvent, recordXenoHistogram, recoverSessionMessages, redactXenoShareValue, registerShutdownCleanup, registry, removeMcpServerConfig, removeProjectAllowedTool, renderAgentDefinition, renderAgentDefinitions, renderAuditReplayMarkdown, renderAuditReplayReport, renderAuditTraceMarkdown, renderAuditTraceReport, renderAuditTraceSummaries, renderCliAutomationStatus, renderCodingBenchmarkMarkdown, renderCodingBenchmarkReport, renderContinuationIncompleteStatus, renderLspDefinitionReport, renderLspDiagnosticsReport, renderLspDoctorReport, renderLspHoverReport, renderLspReferencesReport, renderToolContinuationInput, renderCliAutomationStatus as renderXenoHostAutomationStatus, renderXenoSkillCatalog, repairInterruptedToolCalls, repairToolExchangeHistory, requestBackground, requiresSecuredProcessLaunch, resetAllPersistentShellSessions, resetBashBenchmarkGuards, resetImageGenerationConfig, resetMcpServerApprovals, resetMxcContainmentProbe, resetPersistentShellSession, resetXenoAnsiPolicy, resetXenoTelemetryCardinalityForTests, resizeXenoRaster, resolveAgentDefinition, resolveAgentProfile, resolveAgentToolPolicy, resolveBuiltInAgentProfile, resolveCommandOnPath, resolveContainmentConformanceTemporaryRoot, resolveDelegatedExecutionMode, resolveExecutionSecurityLevel, resolveExecutionTrustMode, resolveInteractiveTurnMaxIterations, resolveLocalRuntimeUrl, resolveModelContextTokens, resolvePermissionProfile, resolveShellInvocation, resolveSubagentRemoteMcpAccess, resolveSubagentWorkflowAnswer, resolveXenoAutomationEvidencePolicy, resolveXenoSdkApiKey, runAgentHook, runCommandHook, runContainmentConformanceSuite, runDelegatedXenoTurn, runDelegationPlan, runDurableAutomation, runHookDefinition, runHooks, runHttpHook, runPromptHook, runSubagentWorkflow, runXenoThread, runXenoThreadStreamed, sanitizeEnvironment, sanitizeXenoTelemetryAttributes, saveConfig, saveMcpConfigFile, saveProjectState, saveSession, scaffoldPlugin, scanAgentDefinitions, scoreMemories, scorePluginRelevance, searchXenoRepositoryIndex, selectXenoProviderRoute, serializeXenoRecipe, setLogLevel, setProjectLastSessionSummary, setProjectMcpApproval, setProjectOnboardingCompleted, setWorkspaceTrusted, setupAIHandlers, sha256ArtifactBytes, sha256ArtifactJson, shouldEnableExecutionGovernance, shouldSourceShellProfile, shouldUseIsolatedStdinForCommand, signSharePayload, sqliteAnalyzeTool, stripXenoAnsi, subscribeXenoTelemetry, summarizeAuditInputRecord, summarizeAuditTraces, summarizeRuntimeInput, summarizeSubagentResults, summarizeXenoArtifactReview, syncMcpToolsToRegistry, synthesizeSkill, taskInputTool, taskOutputTool, taskStopTool, testPlugin, thinkTool, toAgentDefinitionMetadata, toLLMProvider, toolEvidenceToXenoArtifact, toolOperationManager, toolRiskLevel, turnDiffSummaryToXenoArtifact, unifiedDiffToXenoArtifact, unifiedExecManager, updateProjectState, upsertMcpServerConfig, validateAgentDefinition, validateCapabilityLeaseRequest, validateCapabilityMutationReceipt, validateDelegationPlan, validateDirectEndpoint, validateExecutionSecurityPolicy, validateJsonSchema, validateManifest, validateMcpAppResource, validateXenoArtifact, validateXenoArtifactReviewEvent, validateXenoControlRoomSnapshot, validateXenoEvidenceGraph, validateXenoRepositoryIndex, validateXenoSdkApiKey, validateXenoSecureExecutionContract, validateXenoSpecDocument, verifyContainmentCertification, verifyContainmentCertificationApproval, verifyPluginSupplyChain, verifySignature, verifySoulRecord, verifyXenoHostedControlCommand, verifyXenoHostedEnvironmentManifest, verifyXenoHostedEventChain, verifyXenoHostedExecutionAdapterCertification, verifyXenoHostedExecutionJob, verifyXenoHostedRunResult, verifyXenoHostedWebhook, verifyXenoSecureShare, verifyXenoSessionHandoff, webFetchTool, webSearchTool, windowsDpapiProtect, windowsDpapiUnprotect, withXenoTelemetrySpan, wrapXenoAnsi, writePluginSupplyChainLockfile, writeTool, xenoAnsi, xenoAnsiVisibleWidth, xenoArtifactToDiffDocument, xenoArtifactToLegacyAgentArtifact, xenoArtifactToOracleReport, xenoArtifactToReviewReport, xenoArtifactToSourceResearchReport, xenoArtifactToSpecDocument, xenoArtifactToSpecExecution, xenoArtifactToToolEvidence, xenoArtifactToTurnDiffSummary, xenoHostedExecutionAdapterSigningPayload, xenoOracleReportToArtifact, xenoRecipeFingerprint, xenoReviewReportToArtifact, xenoReviewReportToGitHubComments, xenoSourceResearchReportToArtifact, xenoSpecArtifactIds, xenoSpecExecutionToArtifact, xenoSpecToArtifactBundle };