@moxxy/config 0.27.0

package/dist/schema.d.ts

@@ -0,0 +1,1200 @@
+import { z } from 'zod';
+import { pluginSettingsSchema } from './plugin-settings-schema.js';
+export declare const watcherModeSchema: z.ZodEnum<["auto", "manual", "off"]>;
+export declare const permissionsConfigSchema: z.ZodObject<{
+    policyPath: z.ZodOptional<z.ZodString>;
+    allow: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        inputMatches: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        inputMatches?: Record<string, string> | undefined;
+        reason?: string | undefined;
+    }, {
+        name: string;
+        inputMatches?: Record<string, string> | undefined;
+        reason?: string | undefined;
+    }>, "many">>;
+    deny: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        inputMatches: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        inputMatches?: Record<string, string> | undefined;
+        reason?: string | undefined;
+    }, {
+        name: string;
+        inputMatches?: Record<string, string> | undefined;
+        reason?: string | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    policyPath?: string | undefined;
+    allow?: {
+        name: string;
+        inputMatches?: Record<string, string> | undefined;
+        reason?: string | undefined;
+    }[] | undefined;
+    deny?: {
+        name: string;
+        inputMatches?: Record<string, string> | undefined;
+        reason?: string | undefined;
+    }[] | undefined;
+}, {
+    policyPath?: string | undefined;
+    allow?: {
+        name: string;
+        inputMatches?: Record<string, string> | undefined;
+        reason?: string | undefined;
+    }[] | undefined;
+    deny?: {
+        name: string;
+        inputMatches?: Record<string, string> | undefined;
+        reason?: string | undefined;
+    }[] | undefined;
+}>;
+export declare const securityConfigSchema: z.ZodObject<{
+    /**
+     * Master toggle. When omitted or false (the default), `@moxxy/plugin-security`
+     * is a no-op even if registered — every tool runs exactly as it does
+     * without the plugin. Per-tool `isolation: { ... }` declarations
+     * remain as documentation but are not enforced. Optional so a partial
+     * `security:` block (e.g. only `isolator`) validates and config_set can
+     * write one field at a time; consumers default it to false.
+     */
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    /**
+     * Per-tool isolator overrides keyed by tool name. e.g.
+     * `{ bash: 'subprocess', memory_save: 'none' }`. Falls back to the
+     * default isolator above when a tool isn't listed.
+     */
+    perTool: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    /**
+     * Per-plugin isolator overrides keyed by plugin name. Applies to
+     * every tool the plugin contributes unless overridden in `perTool`.
+     */
+    perPlugin: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    /**
+     * When true, tools without a declared `isolation` field are denied
+     * outright (instead of falling through to the default isolator).
+     * Useful for hardening once every in-use tool has been audited.
+     */
+    requireDeclaration: z.ZodOptional<z.ZodBoolean>;
+    /**
+     * The requireDeclaration ratchet for THIRD-PARTY plugins only — packages
+     * outside the trusted `@moxxy/` scope. Applies when a tool has no
+     * `isolation` declaration and the global `requireDeclaration` above did
+     * not already deny it:
+     * - 'off'     — third-party tools are treated like first-party ones.
+     * - 'warn'    — grace mode (the default while `security.enabled`): the
+     *               call runs, but a structured warning is logged once per
+     *               tool per process.
+     * - 'enforce' — the call is denied with a reason naming this flag.
+     * Tools with no resolvable owning plugin (e.g. runtime-attached MCP
+     * tools) are exempt — the npm-scope test is meaningless for them.
+     * Consumed by `@moxxy/plugin-security`
+     * (`SecurityPluginConfig.thirdPartyRequireDeclaration`).
+     */
+    thirdPartyRequireDeclaration: z.ZodOptional<z.ZodEnum<["off", "warn", "enforce"]>>;
+    /**
+     * Tighten the in-process input cap-check from best-effort to fail-closed.
+     * By default the fs/net checks only inspect string values under a recognized
+     * key name (`file`, `path`, `url`, …), so a path/URL carried by an
+     * unrecognized field (`config`, `manifest`, `webhook`) is not checked. With
+     * `strict: true`, any string value that is unambiguously an absolute path or a
+     * bare http(s) URL is treated as in-scope-required regardless of key name, so
+     * an unrecognized carrier fails closed. Consumed by `@moxxy/plugin-security`
+     * (`SecurityPluginConfig.strict`); without this field the loader's schema would
+     * silently strip a user's `security.strict: true` and the hardening would be
+     * lost. Defaults to false at the consumer.
+     */
+    strict: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    enabled?: boolean | undefined;
+    strict?: boolean | undefined;
+    perTool?: Record<string, string> | undefined;
+    perPlugin?: Record<string, string> | undefined;
+    requireDeclaration?: boolean | undefined;
+    thirdPartyRequireDeclaration?: "off" | "warn" | "enforce" | undefined;
+}, {
+    enabled?: boolean | undefined;
+    strict?: boolean | undefined;
+    perTool?: Record<string, string> | undefined;
+    perPlugin?: Record<string, string> | undefined;
+    requireDeclaration?: boolean | undefined;
+    thirdPartyRequireDeclaration?: "off" | "warn" | "enforce" | undefined;
+}>;
+export declare const embeddingsConfigSchema: z.ZodObject<{
+    /**
+     * 'tfidf' (default, zero deps) | 'openai' (text-embedding-3-*)
+     * | 'transformers' (local, @huggingface/transformers) | 'none' (disable).
+     * Optional so a partial `embeddings:` block (e.g. only `model`) validates and
+     * config_set can write one field at a time; consumers default it to 'tfidf'.
+     */
+    provider: z.ZodOptional<z.ZodEnum<["tfidf", "openai", "transformers", "none"]>>;
+    model: z.ZodOptional<z.ZodString>;
+    dimensions: z.ZodOptional<z.ZodNumber>;
+    apiKey: z.ZodOptional<z.ZodString>;
+    batchSize: z.ZodOptional<z.ZodNumber>;
+    cacheDir: z.ZodOptional<z.ZodString>;
+    /** Persist computed embeddings to ~/.moxxy/memory/.embeddings.json. */
+    persistIndex: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    model?: string | undefined;
+    provider?: "tfidf" | "openai" | "transformers" | "none" | undefined;
+    dimensions?: number | undefined;
+    apiKey?: string | undefined;
+    batchSize?: number | undefined;
+    cacheDir?: string | undefined;
+    persistIndex?: boolean | undefined;
+}, {
+    model?: string | undefined;
+    provider?: "tfidf" | "openai" | "transformers" | "none" | undefined;
+    dimensions?: number | undefined;
+    apiKey?: string | undefined;
+    batchSize?: number | undefined;
+    cacheDir?: string | undefined;
+    persistIndex?: boolean | undefined;
+}>;
+/**
+ * Turn-boundary elision settings (context-on-demand). Off-by-floor safety:
+ * `keepRecentTurns` never drops below 2 and elision is skipped while the
+ * context is under `minContextRatioToElide` full.
+ */
+export declare const elisionConfigSchema: z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    keepRecentTurns: z.ZodOptional<z.ZodNumber>;
+    minContextRatioToElide: z.ZodOptional<z.ZodNumber>;
+    /** Also collapse old user/assistant text turns (not just bulky tool results). */
+    elideConversational: z.ZodOptional<z.ZodBoolean>;
+    /** Auto-disable conversational elision after this many `recall({seq})` calls. */
+    conversationalRecallThreshold: z.ZodOptional<z.ZodNumber>;
+    maxRecallBytes: z.ZodOptional<z.ZodNumber>;
+    neverElideTools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    enabled?: boolean | undefined;
+    keepRecentTurns?: number | undefined;
+    minContextRatioToElide?: number | undefined;
+    elideConversational?: boolean | undefined;
+    conversationalRecallThreshold?: number | undefined;
+    maxRecallBytes?: number | undefined;
+    neverElideTools?: string[] | undefined;
+}, {
+    enabled?: boolean | undefined;
+    keepRecentTurns?: number | undefined;
+    minContextRatioToElide?: number | undefined;
+    elideConversational?: boolean | undefined;
+    conversationalRecallThreshold?: number | undefined;
+    maxRecallBytes?: number | undefined;
+    neverElideTools?: string[] | undefined;
+}>;
+/** Context-window / token-efficiency settings. */
+export declare const contextConfigSchema: z.ZodObject<{
+    /** Master switch for prompt caching. Default true (lossless). */
+    caching: z.ZodOptional<z.ZodBoolean>;
+    elision: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        keepRecentTurns: z.ZodOptional<z.ZodNumber>;
+        minContextRatioToElide: z.ZodOptional<z.ZodNumber>;
+        /** Also collapse old user/assistant text turns (not just bulky tool results). */
+        elideConversational: z.ZodOptional<z.ZodBoolean>;
+        /** Auto-disable conversational elision after this many `recall({seq})` calls. */
+        conversationalRecallThreshold: z.ZodOptional<z.ZodNumber>;
+        maxRecallBytes: z.ZodOptional<z.ZodNumber>;
+        neverElideTools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        enabled?: boolean | undefined;
+        keepRecentTurns?: number | undefined;
+        minContextRatioToElide?: number | undefined;
+        elideConversational?: boolean | undefined;
+        conversationalRecallThreshold?: number | undefined;
+        maxRecallBytes?: number | undefined;
+        neverElideTools?: string[] | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        keepRecentTurns?: number | undefined;
+        minContextRatioToElide?: number | undefined;
+        elideConversational?: boolean | undefined;
+        conversationalRecallThreshold?: number | undefined;
+        maxRecallBytes?: number | undefined;
+        neverElideTools?: string[] | undefined;
+    }>>;
+    /** Lazy tool loading: send only core + loaded tool schemas, index the rest. Default false. */
+    lazyTools: z.ZodOptional<z.ZodBoolean>;
+    /**
+     * Reasoning/thinking preview. `true` enables it at the model's default depth;
+     * `{ effort }` sets the depth. Honored only by providers/models that support
+     * reasoning (Anthropic adaptive thinking, OpenAI/Codex reasoning). Default off.
+     */
+    reasoning: z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodObject<{
+        effort: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
+    }, "strip", z.ZodTypeAny, {
+        effort?: "low" | "medium" | "high" | undefined;
+    }, {
+        effort?: "low" | "medium" | "high" | undefined;
+    }>]>>;
+    /**
+     * Stuck-loop guard tuning. The guard bails a turn early when the model keeps
+     * making the same tool call; `maxIterations` is the hard backstop. Raise the
+     * thresholds if legitimately-repeated work is being cut short, or set
+     * `enabled: false` to disable the guard and rely on `maxIterations` alone.
+     */
+    loopGuard: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        windowSize: z.ZodOptional<z.ZodNumber>;
+        repeatThreshold: z.ZodOptional<z.ZodNumber>;
+        nearWindowSize: z.ZodOptional<z.ZodNumber>;
+        nearThreshold: z.ZodOptional<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        enabled?: boolean | undefined;
+        windowSize?: number | undefined;
+        repeatThreshold?: number | undefined;
+        nearWindowSize?: number | undefined;
+        nearThreshold?: number | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        windowSize?: number | undefined;
+        repeatThreshold?: number | undefined;
+        nearWindowSize?: number | undefined;
+        nearThreshold?: number | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    caching?: boolean | undefined;
+    elision?: {
+        enabled?: boolean | undefined;
+        keepRecentTurns?: number | undefined;
+        minContextRatioToElide?: number | undefined;
+        elideConversational?: boolean | undefined;
+        conversationalRecallThreshold?: number | undefined;
+        maxRecallBytes?: number | undefined;
+        neverElideTools?: string[] | undefined;
+    } | undefined;
+    lazyTools?: boolean | undefined;
+    reasoning?: boolean | {
+        effort?: "low" | "medium" | "high" | undefined;
+    } | undefined;
+    loopGuard?: {
+        enabled?: boolean | undefined;
+        windowSize?: number | undefined;
+        repeatThreshold?: number | undefined;
+        nearWindowSize?: number | undefined;
+        nearThreshold?: number | undefined;
+    } | undefined;
+}, {
+    caching?: boolean | undefined;
+    elision?: {
+        enabled?: boolean | undefined;
+        keepRecentTurns?: number | undefined;
+        minContextRatioToElide?: number | undefined;
+        elideConversational?: boolean | undefined;
+        conversationalRecallThreshold?: number | undefined;
+        maxRecallBytes?: number | undefined;
+        neverElideTools?: string[] | undefined;
+    } | undefined;
+    lazyTools?: boolean | undefined;
+    reasoning?: boolean | {
+        effort?: "low" | "medium" | "high" | undefined;
+    } | undefined;
+    loopGuard?: {
+        enabled?: boolean | undefined;
+        windowSize?: number | undefined;
+        repeatThreshold?: number | undefined;
+        nearWindowSize?: number | undefined;
+        nearThreshold?: number | undefined;
+    } | undefined;
+}>;
+export declare const moxxyConfigSchema: z.ZodObject<{
+    /**
+     * The unified plugins manifest — the single source of truth for what's
+     * installed/enabled (`plugins.packages`) and the active default per category
+     * (`plugins.<category>.default`). Replaces the legacy flat
+     * provider/mode/compactor/workflowExecutor keys, the old `plugins:` map, and
+     * `preferences.json`.
+     */
+    plugins: z.ZodOptional<z.ZodObject<{
+        packages: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            exclude: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            enabled?: boolean | undefined;
+            options?: Record<string, unknown> | undefined;
+            exclude?: string[] | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            options?: Record<string, unknown> | undefined;
+            exclude?: string[] | undefined;
+        }>>>;
+        provider: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            fallbacks: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                model: z.ZodOptional<z.ZodString>;
+                config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                enabled: z.ZodOptional<z.ZodBoolean>;
+            }, "strict", z.ZodTypeAny, {
+                enabled?: boolean | undefined;
+                model?: string | undefined;
+                config?: Record<string, unknown> | undefined;
+            }, {
+                enabled?: boolean | undefined;
+                model?: string | undefined;
+                config?: Record<string, unknown> | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            fallbacks?: string[] | undefined;
+            items?: Record<string, {
+                enabled?: boolean | undefined;
+                model?: string | undefined;
+                config?: Record<string, unknown> | undefined;
+            }> | undefined;
+        }, {
+            default?: string | undefined;
+            fallbacks?: string[] | undefined;
+            items?: Record<string, {
+                enabled?: boolean | undefined;
+                model?: string | undefined;
+                config?: Record<string, unknown> | undefined;
+            }> | undefined;
+        }>>;
+        mode: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        compactor: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        cacheStrategy: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        workflowExecutor: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        transcriber: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        synthesizer: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        embedder: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        isolator: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        viewRenderer: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        tunnelProvider: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        eventStore: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        reflector: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+        channel: z.ZodOptional<z.ZodObject<{
+            default: z.ZodOptional<z.ZodString>;
+            items: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strict", z.ZodTypeAny, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }, {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        packages?: Record<string, {
+            enabled?: boolean | undefined;
+            options?: Record<string, unknown> | undefined;
+            exclude?: string[] | undefined;
+        }> | undefined;
+        provider?: {
+            default?: string | undefined;
+            fallbacks?: string[] | undefined;
+            items?: Record<string, {
+                enabled?: boolean | undefined;
+                model?: string | undefined;
+                config?: Record<string, unknown> | undefined;
+            }> | undefined;
+        } | undefined;
+        mode?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        compactor?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        cacheStrategy?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        workflowExecutor?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        transcriber?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        synthesizer?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        embedder?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        isolator?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        viewRenderer?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        tunnelProvider?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        eventStore?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        reflector?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        channel?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+    }, {
+        packages?: Record<string, {
+            enabled?: boolean | undefined;
+            options?: Record<string, unknown> | undefined;
+            exclude?: string[] | undefined;
+        }> | undefined;
+        provider?: {
+            default?: string | undefined;
+            fallbacks?: string[] | undefined;
+            items?: Record<string, {
+                enabled?: boolean | undefined;
+                model?: string | undefined;
+                config?: Record<string, unknown> | undefined;
+            }> | undefined;
+        } | undefined;
+        mode?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        compactor?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        cacheStrategy?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        workflowExecutor?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        transcriber?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        synthesizer?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        embedder?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        isolator?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        viewRenderer?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        tunnelProvider?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        eventStore?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        reflector?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        channel?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+    }>>;
+    context: z.ZodOptional<z.ZodObject<{
+        /** Master switch for prompt caching. Default true (lossless). */
+        caching: z.ZodOptional<z.ZodBoolean>;
+        elision: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            keepRecentTurns: z.ZodOptional<z.ZodNumber>;
+            minContextRatioToElide: z.ZodOptional<z.ZodNumber>;
+            /** Also collapse old user/assistant text turns (not just bulky tool results). */
+            elideConversational: z.ZodOptional<z.ZodBoolean>;
+            /** Auto-disable conversational elision after this many `recall({seq})` calls. */
+            conversationalRecallThreshold: z.ZodOptional<z.ZodNumber>;
+            maxRecallBytes: z.ZodOptional<z.ZodNumber>;
+            neverElideTools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            enabled?: boolean | undefined;
+            keepRecentTurns?: number | undefined;
+            minContextRatioToElide?: number | undefined;
+            elideConversational?: boolean | undefined;
+            conversationalRecallThreshold?: number | undefined;
+            maxRecallBytes?: number | undefined;
+            neverElideTools?: string[] | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            keepRecentTurns?: number | undefined;
+            minContextRatioToElide?: number | undefined;
+            elideConversational?: boolean | undefined;
+            conversationalRecallThreshold?: number | undefined;
+            maxRecallBytes?: number | undefined;
+            neverElideTools?: string[] | undefined;
+        }>>;
+        /** Lazy tool loading: send only core + loaded tool schemas, index the rest. Default false. */
+        lazyTools: z.ZodOptional<z.ZodBoolean>;
+        /**
+         * Reasoning/thinking preview. `true` enables it at the model's default depth;
+         * `{ effort }` sets the depth. Honored only by providers/models that support
+         * reasoning (Anthropic adaptive thinking, OpenAI/Codex reasoning). Default off.
+         */
+        reasoning: z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodObject<{
+            effort: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
+        }, "strip", z.ZodTypeAny, {
+            effort?: "low" | "medium" | "high" | undefined;
+        }, {
+            effort?: "low" | "medium" | "high" | undefined;
+        }>]>>;
+        /**
+         * Stuck-loop guard tuning. The guard bails a turn early when the model keeps
+         * making the same tool call; `maxIterations` is the hard backstop. Raise the
+         * thresholds if legitimately-repeated work is being cut short, or set
+         * `enabled: false` to disable the guard and rely on `maxIterations` alone.
+         */
+        loopGuard: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            windowSize: z.ZodOptional<z.ZodNumber>;
+            repeatThreshold: z.ZodOptional<z.ZodNumber>;
+            nearWindowSize: z.ZodOptional<z.ZodNumber>;
+            nearThreshold: z.ZodOptional<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            enabled?: boolean | undefined;
+            windowSize?: number | undefined;
+            repeatThreshold?: number | undefined;
+            nearWindowSize?: number | undefined;
+            nearThreshold?: number | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            windowSize?: number | undefined;
+            repeatThreshold?: number | undefined;
+            nearWindowSize?: number | undefined;
+            nearThreshold?: number | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        caching?: boolean | undefined;
+        elision?: {
+            enabled?: boolean | undefined;
+            keepRecentTurns?: number | undefined;
+            minContextRatioToElide?: number | undefined;
+            elideConversational?: boolean | undefined;
+            conversationalRecallThreshold?: number | undefined;
+            maxRecallBytes?: number | undefined;
+            neverElideTools?: string[] | undefined;
+        } | undefined;
+        lazyTools?: boolean | undefined;
+        reasoning?: boolean | {
+            effort?: "low" | "medium" | "high" | undefined;
+        } | undefined;
+        loopGuard?: {
+            enabled?: boolean | undefined;
+            windowSize?: number | undefined;
+            repeatThreshold?: number | undefined;
+            nearWindowSize?: number | undefined;
+            nearThreshold?: number | undefined;
+        } | undefined;
+    }, {
+        caching?: boolean | undefined;
+        elision?: {
+            enabled?: boolean | undefined;
+            keepRecentTurns?: number | undefined;
+            minContextRatioToElide?: number | undefined;
+            elideConversational?: boolean | undefined;
+            conversationalRecallThreshold?: number | undefined;
+            maxRecallBytes?: number | undefined;
+            neverElideTools?: string[] | undefined;
+        } | undefined;
+        lazyTools?: boolean | undefined;
+        reasoning?: boolean | {
+            effort?: "low" | "medium" | "high" | undefined;
+        } | undefined;
+        loopGuard?: {
+            enabled?: boolean | undefined;
+            windowSize?: number | undefined;
+            repeatThreshold?: number | undefined;
+            nearWindowSize?: number | undefined;
+            nearThreshold?: number | undefined;
+        } | undefined;
+    }>>;
+    systemPrompt: z.ZodOptional<z.ZodString>;
+    maxIterations: z.ZodOptional<z.ZodNumber>;
+    hookTimeoutMs: z.ZodOptional<z.ZodNumber>;
+    watcher: z.ZodOptional<z.ZodEnum<["auto", "manual", "off"]>>;
+    skills: z.ZodOptional<z.ZodObject<{
+        projectDir: z.ZodOptional<z.ZodString>;
+        userDir: z.ZodOptional<z.ZodString>;
+        extraDirs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        projectDir?: string | undefined;
+        userDir?: string | undefined;
+        extraDirs?: string[] | undefined;
+    }, {
+        projectDir?: string | undefined;
+        userDir?: string | undefined;
+        extraDirs?: string[] | undefined;
+    }>>;
+    security: z.ZodOptional<z.ZodObject<{
+        /**
+         * Master toggle. When omitted or false (the default), `@moxxy/plugin-security`
+         * is a no-op even if registered — every tool runs exactly as it does
+         * without the plugin. Per-tool `isolation: { ... }` declarations
+         * remain as documentation but are not enforced. Optional so a partial
+         * `security:` block (e.g. only `isolator`) validates and config_set can
+         * write one field at a time; consumers default it to false.
+         */
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        /**
+         * Per-tool isolator overrides keyed by tool name. e.g.
+         * `{ bash: 'subprocess', memory_save: 'none' }`. Falls back to the
+         * default isolator above when a tool isn't listed.
+         */
+        perTool: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        /**
+         * Per-plugin isolator overrides keyed by plugin name. Applies to
+         * every tool the plugin contributes unless overridden in `perTool`.
+         */
+        perPlugin: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        /**
+         * When true, tools without a declared `isolation` field are denied
+         * outright (instead of falling through to the default isolator).
+         * Useful for hardening once every in-use tool has been audited.
+         */
+        requireDeclaration: z.ZodOptional<z.ZodBoolean>;
+        /**
+         * The requireDeclaration ratchet for THIRD-PARTY plugins only — packages
+         * outside the trusted `@moxxy/` scope. Applies when a tool has no
+         * `isolation` declaration and the global `requireDeclaration` above did
+         * not already deny it:
+         * - 'off'     — third-party tools are treated like first-party ones.
+         * - 'warn'    — grace mode (the default while `security.enabled`): the
+         *               call runs, but a structured warning is logged once per
+         *               tool per process.
+         * - 'enforce' — the call is denied with a reason naming this flag.
+         * Tools with no resolvable owning plugin (e.g. runtime-attached MCP
+         * tools) are exempt — the npm-scope test is meaningless for them.
+         * Consumed by `@moxxy/plugin-security`
+         * (`SecurityPluginConfig.thirdPartyRequireDeclaration`).
+         */
+        thirdPartyRequireDeclaration: z.ZodOptional<z.ZodEnum<["off", "warn", "enforce"]>>;
+        /**
+         * Tighten the in-process input cap-check from best-effort to fail-closed.
+         * By default the fs/net checks only inspect string values under a recognized
+         * key name (`file`, `path`, `url`, …), so a path/URL carried by an
+         * unrecognized field (`config`, `manifest`, `webhook`) is not checked. With
+         * `strict: true`, any string value that is unambiguously an absolute path or a
+         * bare http(s) URL is treated as in-scope-required regardless of key name, so
+         * an unrecognized carrier fails closed. Consumed by `@moxxy/plugin-security`
+         * (`SecurityPluginConfig.strict`); without this field the loader's schema would
+         * silently strip a user's `security.strict: true` and the hardening would be
+         * lost. Defaults to false at the consumer.
+         */
+        strict: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        enabled?: boolean | undefined;
+        strict?: boolean | undefined;
+        perTool?: Record<string, string> | undefined;
+        perPlugin?: Record<string, string> | undefined;
+        requireDeclaration?: boolean | undefined;
+        thirdPartyRequireDeclaration?: "off" | "warn" | "enforce" | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        strict?: boolean | undefined;
+        perTool?: Record<string, string> | undefined;
+        perPlugin?: Record<string, string> | undefined;
+        requireDeclaration?: boolean | undefined;
+        thirdPartyRequireDeclaration?: "off" | "warn" | "enforce" | undefined;
+    }>>;
+    channels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    permissions: z.ZodOptional<z.ZodObject<{
+        policyPath: z.ZodOptional<z.ZodString>;
+        allow: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            inputMatches: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            reason: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }, {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }>, "many">>;
+        deny: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            inputMatches: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            reason: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }, {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        policyPath?: string | undefined;
+        allow?: {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }[] | undefined;
+        deny?: {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }[] | undefined;
+    }, {
+        policyPath?: string | undefined;
+        allow?: {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }[] | undefined;
+        deny?: {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }[] | undefined;
+    }>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    /** TUI presentation preferences (read at TUI boot; edited via /settings). */
+    tui: z.ZodOptional<z.ZodObject<{
+        /** `mono` drops color like NO_COLOR; `default` is the standard palette. */
+        theme: z.ZodOptional<z.ZodEnum<["default", "mono"]>>;
+        /** Hide the footer key-hint row when false. */
+        hints: z.ZodOptional<z.ZodBoolean>;
+        /**
+         * Ctrl+<letter> overrides for the input-editor command hotkeys. Values
+         * are single letters; unknown/conflicting letters are ignored at boot.
+         */
+        keys: z.ZodOptional<z.ZodObject<{
+            forceSend: z.ZodOptional<z.ZodString>;
+            dropQueued: z.ZodOptional<z.ZodString>;
+            toggleTools: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            forceSend?: string | undefined;
+            dropQueued?: string | undefined;
+            toggleTools?: string | undefined;
+        }, {
+            forceSend?: string | undefined;
+            dropQueued?: string | undefined;
+            toggleTools?: string | undefined;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        keys?: {
+            forceSend?: string | undefined;
+            dropQueued?: string | undefined;
+            toggleTools?: string | undefined;
+        } | undefined;
+        theme?: "default" | "mono" | undefined;
+        hints?: boolean | undefined;
+    }, {
+        keys?: {
+            forceSend?: string | undefined;
+            dropQueued?: string | undefined;
+            toggleTools?: string | undefined;
+        } | undefined;
+        theme?: "default" | "mono" | undefined;
+        hints?: boolean | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    plugins?: {
+        packages?: Record<string, {
+            enabled?: boolean | undefined;
+            options?: Record<string, unknown> | undefined;
+            exclude?: string[] | undefined;
+        }> | undefined;
+        provider?: {
+            default?: string | undefined;
+            fallbacks?: string[] | undefined;
+            items?: Record<string, {
+                enabled?: boolean | undefined;
+                model?: string | undefined;
+                config?: Record<string, unknown> | undefined;
+            }> | undefined;
+        } | undefined;
+        mode?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        compactor?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        cacheStrategy?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        workflowExecutor?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        transcriber?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        synthesizer?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        embedder?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        isolator?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        viewRenderer?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        tunnelProvider?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        eventStore?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        reflector?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        channel?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+    } | undefined;
+    context?: {
+        caching?: boolean | undefined;
+        elision?: {
+            enabled?: boolean | undefined;
+            keepRecentTurns?: number | undefined;
+            minContextRatioToElide?: number | undefined;
+            elideConversational?: boolean | undefined;
+            conversationalRecallThreshold?: number | undefined;
+            maxRecallBytes?: number | undefined;
+            neverElideTools?: string[] | undefined;
+        } | undefined;
+        lazyTools?: boolean | undefined;
+        reasoning?: boolean | {
+            effort?: "low" | "medium" | "high" | undefined;
+        } | undefined;
+        loopGuard?: {
+            enabled?: boolean | undefined;
+            windowSize?: number | undefined;
+            repeatThreshold?: number | undefined;
+            nearWindowSize?: number | undefined;
+            nearThreshold?: number | undefined;
+        } | undefined;
+    } | undefined;
+    systemPrompt?: string | undefined;
+    maxIterations?: number | undefined;
+    hookTimeoutMs?: number | undefined;
+    watcher?: "auto" | "manual" | "off" | undefined;
+    skills?: {
+        projectDir?: string | undefined;
+        userDir?: string | undefined;
+        extraDirs?: string[] | undefined;
+    } | undefined;
+    security?: {
+        enabled?: boolean | undefined;
+        strict?: boolean | undefined;
+        perTool?: Record<string, string> | undefined;
+        perPlugin?: Record<string, string> | undefined;
+        requireDeclaration?: boolean | undefined;
+        thirdPartyRequireDeclaration?: "off" | "warn" | "enforce" | undefined;
+    } | undefined;
+    channels?: Record<string, Record<string, unknown>> | undefined;
+    permissions?: {
+        policyPath?: string | undefined;
+        allow?: {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }[] | undefined;
+        deny?: {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }[] | undefined;
+    } | undefined;
+    env?: Record<string, string> | undefined;
+    tui?: {
+        keys?: {
+            forceSend?: string | undefined;
+            dropQueued?: string | undefined;
+            toggleTools?: string | undefined;
+        } | undefined;
+        theme?: "default" | "mono" | undefined;
+        hints?: boolean | undefined;
+    } | undefined;
+}, {
+    plugins?: {
+        packages?: Record<string, {
+            enabled?: boolean | undefined;
+            options?: Record<string, unknown> | undefined;
+            exclude?: string[] | undefined;
+        }> | undefined;
+        provider?: {
+            default?: string | undefined;
+            fallbacks?: string[] | undefined;
+            items?: Record<string, {
+                enabled?: boolean | undefined;
+                model?: string | undefined;
+                config?: Record<string, unknown> | undefined;
+            }> | undefined;
+        } | undefined;
+        mode?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        compactor?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        cacheStrategy?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        workflowExecutor?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        transcriber?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        synthesizer?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        embedder?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        isolator?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        viewRenderer?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        tunnelProvider?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        eventStore?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        reflector?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+        channel?: {
+            default?: string | undefined;
+            items?: Record<string, Record<string, unknown>> | undefined;
+        } | undefined;
+    } | undefined;
+    context?: {
+        caching?: boolean | undefined;
+        elision?: {
+            enabled?: boolean | undefined;
+            keepRecentTurns?: number | undefined;
+            minContextRatioToElide?: number | undefined;
+            elideConversational?: boolean | undefined;
+            conversationalRecallThreshold?: number | undefined;
+            maxRecallBytes?: number | undefined;
+            neverElideTools?: string[] | undefined;
+        } | undefined;
+        lazyTools?: boolean | undefined;
+        reasoning?: boolean | {
+            effort?: "low" | "medium" | "high" | undefined;
+        } | undefined;
+        loopGuard?: {
+            enabled?: boolean | undefined;
+            windowSize?: number | undefined;
+            repeatThreshold?: number | undefined;
+            nearWindowSize?: number | undefined;
+            nearThreshold?: number | undefined;
+        } | undefined;
+    } | undefined;
+    systemPrompt?: string | undefined;
+    maxIterations?: number | undefined;
+    hookTimeoutMs?: number | undefined;
+    watcher?: "auto" | "manual" | "off" | undefined;
+    skills?: {
+        projectDir?: string | undefined;
+        userDir?: string | undefined;
+        extraDirs?: string[] | undefined;
+    } | undefined;
+    security?: {
+        enabled?: boolean | undefined;
+        strict?: boolean | undefined;
+        perTool?: Record<string, string> | undefined;
+        perPlugin?: Record<string, string> | undefined;
+        requireDeclaration?: boolean | undefined;
+        thirdPartyRequireDeclaration?: "off" | "warn" | "enforce" | undefined;
+    } | undefined;
+    channels?: Record<string, Record<string, unknown>> | undefined;
+    permissions?: {
+        policyPath?: string | undefined;
+        allow?: {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }[] | undefined;
+        deny?: {
+            name: string;
+            inputMatches?: Record<string, string> | undefined;
+            reason?: string | undefined;
+        }[] | undefined;
+    } | undefined;
+    env?: Record<string, string> | undefined;
+    tui?: {
+        keys?: {
+            forceSend?: string | undefined;
+            dropQueued?: string | undefined;
+            toggleTools?: string | undefined;
+        } | undefined;
+        theme?: "default" | "mono" | undefined;
+        hints?: boolean | undefined;
+    } | undefined;
+}>;
+export type MoxxyConfig = z.infer<typeof moxxyConfigSchema>;
+export type ContextConfig = z.infer<typeof contextConfigSchema>;
+export type ElisionConfig = z.infer<typeof elisionConfigSchema>;
+export type WatcherMode = z.infer<typeof watcherModeSchema>;
+export type PermissionsConfig = z.infer<typeof permissionsConfigSchema>;
+export type EmbeddingsConfig = z.infer<typeof embeddingsConfigSchema>;
+export type SecurityConfig = z.infer<typeof securityConfigSchema>;
+export { pluginSettingsSchema };
+export type { PluginSettings } from './plugin-settings-schema.js';
+//# sourceMappingURL=schema.d.ts.map