@poolzin/pool-bot 2026.2.24 → 2026.2.26

package/dist/config/zod-schema.hooks.js

@@ -1,4 +1,33 @@
+import path from "node:path";
 import { z } from "zod";
+import { InstallRecordShape } from "./zod-schema.installs.js";
+import { sensitive } from "./zod-schema.sensitive.js";
+function isSafeRelativeModulePath(raw) {
+    const value = raw.trim();
+    if (!value) {
+        return false;
+    }
+    // Hook modules are loaded via file-path resolution + dynamic import().
+    // Keep this strictly relative to a configured base dir to avoid path traversal and surprises.
+    if (path.isAbsolute(value)) {
+        return false;
+    }
+    if (value.startsWith("~")) {
+        return false;
+    }
+    // Disallow URL-ish and drive-relative forms (e.g. "file:...", "C:foo").
+    if (value.includes(":")) {
+        return false;
+    }
+    const parts = value.split(/[\\/]+/g);
+    if (parts.some((part) => part === "..")) {
+        return false;
+    }
+    return true;
+}
+const SafeRelativeModulePathSchema = z
+    .string()
+    .refine(isSafeRelativeModulePath, "module must be a safe relative path (no absolute paths)");
 export const HookMappingSchema = z
     .object({
     id: z.string().optional(),
@@ -11,7 +40,8 @@ export const HookMappingSchema = z
     action: z.union([z.literal("wake"), z.literal("agent")]).optional(),
     wakeMode: z.union([z.literal("now"), z.literal("next-heartbeat")]).optional(),
     name: z.string().optional(),
-    sessionKey: z.string().optional(),
+    agentId: z.string().optional(),
+    sessionKey: z.string().optional().register(sensitive),
     messageTemplate: z.string().optional(),
     textTemplate: z.string().optional(),
     deliver: z.boolean().optional(),
@@ -22,6 +52,7 @@ export const HookMappingSchema = z
         z.literal("whatsapp"),
         z.literal("telegram"),
         z.literal("discord"),
+        z.literal("irc"),
         z.literal("slack"),
         z.literal("signal"),
         z.literal("imessage"),
@@ -34,7 +65,7 @@ export const HookMappingSchema = z
     timeoutSeconds: z.number().int().positive().optional(),
     transform: z
         .object({
-        module: z.string(),
+        module: SafeRelativeModulePathSchema,
         export: z.string().optional(),
     })
         .strict()
@@ -45,7 +76,7 @@ export const HookMappingSchema = z
 export const InternalHookHandlerSchema = z
     .object({
     event: z.string(),
-    module: z.string(),
+    module: SafeRelativeModulePathSchema,
     export: z.string().optional(),
 })
     .strict();
@@ -54,15 +85,13 @@ const HookConfigSchema = z
     enabled: z.boolean().optional(),
     env: z.record(z.string(), z.string()).optional(),
 })
-    .strict();
+    // Hook configs are intentionally open-ended (handlers can define their own keys).
+    // Keep enabled/env typed, but allow additional per-hook keys without marking the
+    // whole config invalid (which triggers doctor/best-effort loads).
+    .passthrough();
 const HookInstallRecordSchema = z
     .object({
-    source: z.union([z.literal("npm"), z.literal("archive"), z.literal("path")]),
-    spec: z.string().optional(),
-    sourcePath: z.string().optional(),
-    installPath: z.string().optional(),
-    version: z.string().optional(),
-    installedAt: z.string().optional(),
+    ...InstallRecordShape,
     hooks: z.array(z.string()).optional(),
 })
     .strict();
@@ -87,7 +116,7 @@ export const HooksGmailSchema = z
     label: z.string().optional(),
     topic: z.string().optional(),
     subscription: z.string().optional(),
-    pushToken: z.string().optional(),
+    pushToken: z.string().optional().register(sensitive),
     hookUrl: z.string().optional(),
     includeBody: z.boolean().optional(),
     maxBytes: z.number().int().positive().optional(),

package/dist/config/zod-schema.installs.js

@@ -0,0 +1,20 @@
+import { z } from "zod";
+export const InstallSourceSchema = z.union([
+    z.literal("npm"),
+    z.literal("archive"),
+    z.literal("path"),
+]);
+export const InstallRecordShape = {
+    source: InstallSourceSchema,
+    spec: z.string().optional(),
+    sourcePath: z.string().optional(),
+    installPath: z.string().optional(),
+    version: z.string().optional(),
+    resolvedName: z.string().optional(),
+    resolvedVersion: z.string().optional(),
+    resolvedSpec: z.string().optional(),
+    integrity: z.string().optional(),
+    shasum: z.string().optional(),
+    resolvedAt: z.string().optional(),
+    installedAt: z.string().optional(),
+};

package/dist/config/zod-schema.js

@@ -1,11 +1,13 @@
 import { z } from "zod";
 import { ToolsSchema } from "./zod-schema.agent-runtime.js";
-import { ApprovalsSchema } from "./zod-schema.approvals.js";
 import { AgentsSchema, AudioSchema, BindingsSchema, BroadcastSchema } from "./zod-schema.agents.js";
+import { ApprovalsSchema } from "./zod-schema.approvals.js";
 import { HexColorSchema, ModelsConfigSchema } from "./zod-schema.core.js";
 import { HookMappingSchema, HooksGmailSchema, InternalHooksSchema } from "./zod-schema.hooks.js";
+import { InstallRecordShape } from "./zod-schema.installs.js";
 import { ChannelsSchema } from "./zod-schema.providers.js";
-import { CommandsSchema, MessagesSchema, SessionSchema } from "./zod-schema.session.js";
+import { sensitive } from "./zod-schema.sensitive.js";
+import { CommandsSchema, MessagesSchema, SessionSchema, SessionSendPolicySchema, } from "./zod-schema.session.js";
 const BrowserSnapshotDefaultsSchema = z
     .object({
     mode: z.literal("efficient").optional(),
@@ -24,8 +26,78 @@ const NodeHostSchema = z
 })
     .strict()
     .optional();
+const MemoryQmdPathSchema = z
+    .object({
+    path: z.string(),
+    name: z.string().optional(),
+    pattern: z.string().optional(),
+})
+    .strict();
+const MemoryQmdSessionSchema = z
+    .object({
+    enabled: z.boolean().optional(),
+    exportDir: z.string().optional(),
+    retentionDays: z.number().int().nonnegative().optional(),
+})
+    .strict();
+const MemoryQmdUpdateSchema = z
+    .object({
+    interval: z.string().optional(),
+    debounceMs: z.number().int().nonnegative().optional(),
+    onBoot: z.boolean().optional(),
+    waitForBootSync: z.boolean().optional(),
+    embedInterval: z.string().optional(),
+    commandTimeoutMs: z.number().int().nonnegative().optional(),
+    updateTimeoutMs: z.number().int().nonnegative().optional(),
+    embedTimeoutMs: z.number().int().nonnegative().optional(),
+})
+    .strict();
+const MemoryQmdLimitsSchema = z
+    .object({
+    maxResults: z.number().int().positive().optional(),
+    maxSnippetChars: z.number().int().positive().optional(),
+    maxInjectedChars: z.number().int().positive().optional(),
+    timeoutMs: z.number().int().nonnegative().optional(),
+})
+    .strict();
+const MemoryQmdMcporterSchema = z
+    .object({
+    enabled: z.boolean().optional(),
+    serverName: z.string().optional(),
+    startDaemon: z.boolean().optional(),
+})
+    .strict();
+const MemoryQmdSchema = z
+    .object({
+    command: z.string().optional(),
+    mcporter: MemoryQmdMcporterSchema.optional(),
+    searchMode: z.union([z.literal("query"), z.literal("search"), z.literal("vsearch")]).optional(),
+    includeDefaultMemory: z.boolean().optional(),
+    paths: z.array(MemoryQmdPathSchema).optional(),
+    sessions: MemoryQmdSessionSchema.optional(),
+    update: MemoryQmdUpdateSchema.optional(),
+    limits: MemoryQmdLimitsSchema.optional(),
+    scope: SessionSendPolicySchema.optional(),
+})
+    .strict();
+const MemorySchema = z
+    .object({
+    backend: z.union([z.literal("builtin"), z.literal("qmd")]).optional(),
+    citations: z.union([z.literal("auto"), z.literal("on"), z.literal("off")]).optional(),
+    qmd: MemoryQmdSchema.optional(),
+})
+    .strict()
+    .optional();
+const HttpUrlSchema = z
+    .string()
+    .url()
+    .refine((value) => {
+    const protocol = new URL(value).protocol;
+    return protocol === "http:" || protocol === "https:";
+}, "Expected http:// or https:// URL");
 export const PoolBotSchema = z
     .object({
+    $schema: z.string().optional(),
     meta: z
         .object({
         lastTouchedVersion: z.string().optional(),
@@ -142,6 +214,14 @@ export const PoolBotSchema = z
         attachOnly: z.boolean().optional(),
         defaultProfile: z.string().optional(),
         snapshotDefaults: BrowserSnapshotDefaultsSchema,
+        ssrfPolicy: z
+            .object({
+            allowPrivateNetwork: z.boolean().optional(),
+            allowedHostnames: z.array(z.string()).optional(),
+            hostnameAllowlist: z.array(z.string()).optional(),
+        })
+            .strict()
+            .optional(),
         profiles: z
             .record(z
             .string()
@@ -219,6 +299,9 @@ export const PoolBotSchema = z
         enabled: z.boolean().optional(),
         store: z.string().optional(),
         maxConcurrentRuns: z.number().int().positive().optional(),
+        webhook: HttpUrlSchema.optional(),
+        webhookToken: z.string().optional().register(sensitive),
+        sessionRetention: z.union([z.string(), z.literal(false)]).optional(),
     })
         .strict()
         .optional(),
@@ -226,7 +309,11 @@ export const PoolBotSchema = z
         .object({
         enabled: z.boolean().optional(),
         path: z.string().optional(),
-        token: z.string().optional(),
+        token: z.string().optional().register(sensitive),
+        defaultSessionKey: z.string().optional(),
+        allowRequestSessionKey: z.boolean().optional(),
+        allowedSessionKeyPrefixes: z.array(z.string()).optional(),
+        allowedAgentIds: z.array(z.string()).optional(),
         maxBodyBytes: z.number().int().positive().optional(),
         presets: z.array(z.string()).optional(),
         transformsDir: z.string().optional(),
@@ -286,7 +373,7 @@ export const PoolBotSchema = z
         voiceAliases: z.record(z.string(), z.string()).optional(),
         modelId: z.string().optional(),
         outputFormat: z.string().optional(),
-        apiKey: z.string().optional(),
+        apiKey: z.string().optional().register(sensitive),
         interruptOnSpeech: z.boolean().optional(),
     })
         .strict()
@@ -304,10 +391,13 @@ export const PoolBotSchema = z
             z.literal("tailnet"),
         ])
             .optional(),
+        customBindHost: z.string().optional(),
         controlUi: z
             .object({
             enabled: z.boolean().optional(),
             basePath: z.string().optional(),
+            root: z.string().optional(),
+            allowedOrigins: z.array(z.string()).optional(),
             allowInsecureAuth: z.boolean().optional(),
             dangerouslyDisableDeviceAuth: z.boolean().optional(),
         })
@@ -315,14 +405,47 @@ export const PoolBotSchema = z
             .optional(),
         auth: z
             .object({
-            mode: z.union([z.literal("token"), z.literal("password")]).optional(),
-            token: z.string().optional(),
-            password: z.string().optional(),
+            mode: z
+                .union([
+                z.literal("none"),
+                z.literal("token"),
+                z.literal("password"),
+                z.literal("trusted-proxy"),
+            ])
+                .optional(),
+            token: z.string().optional().register(sensitive),
+            password: z.string().optional().register(sensitive),
             allowTailscale: z.boolean().optional(),
+            rateLimit: z
+                .object({
+                maxAttempts: z.number().optional(),
+                windowMs: z.number().optional(),
+                lockoutMs: z.number().optional(),
+                exemptLoopback: z.boolean().optional(),
+            })
+                .strict()
+                .optional(),
+            trustedProxy: z
+                .object({
+                userHeader: z.string().min(1, "userHeader is required for trusted-proxy mode"),
+                requiredHeaders: z.array(z.string()).optional(),
+                allowUsers: z.array(z.string()).optional(),
+            })
+                .strict()
+                .optional(),
         })
             .strict()
             .optional(),
         trustedProxies: z.array(z.string()).optional(),
+        allowRealIpFallback: z.boolean().optional(),
+        tools: z
+            .object({
+            deny: z.array(z.string()).optional(),
+            allow: z.array(z.string()).optional(),
+        })
+            .strict()
+            .optional(),
+        channelHealthCheckMinutes: z.number().int().min(0).optional(),
         tailscale: z
             .object({
             mode: z.union([z.literal("off"), z.literal("serve"), z.literal("funnel")]).optional(),
@@ -334,8 +457,8 @@ export const PoolBotSchema = z
             .object({
             url: z.string().optional(),
             transport: z.union([z.literal("ssh"), z.literal("direct")]).optional(),
-            token: z.string().optional(),
-            password: z.string().optional(),
+            token: z.string().optional().register(sensitive),
+            password: z.string().optional().register(sensitive),
             tlsFingerprint: z.string().optional(),
             sshTarget: z.string().optional(),
             sshIdentity: z.string().optional(),
@@ -379,9 +502,11 @@ export const PoolBotSchema = z
                     .object({
                     enabled: z.boolean().optional(),
                     maxBodyBytes: z.number().int().positive().optional(),
+                    maxUrlParts: z.number().int().nonnegative().optional(),
                     files: z
                         .object({
                         allowUrl: z.boolean().optional(),
+                        urlAllowlist: z.array(z.string()).optional(),
                         allowedMimes: z.array(z.string()).optional(),
                         maxBytes: z.number().int().positive().optional(),
                         maxChars: z.number().int().positive().optional(),
@@ -401,6 +526,7 @@ export const PoolBotSchema = z
                     images: z
                         .object({
                         allowUrl: z.boolean().optional(),
+                        urlAllowlist: z.array(z.string()).optional(),
                         allowedMimes: z.array(z.string()).optional(),
                         maxBytes: z.number().int().positive().optional(),
                         maxRedirects: z.number().int().nonnegative().optional(),
@@ -436,6 +562,7 @@ export const PoolBotSchema = z
     })
         .strict()
         .optional(),
+    memory: MemorySchema,
     skills: z
         .object({
         allowBundled: z.array(z.string()).optional(),
@@ -456,11 +583,21 @@ export const PoolBotSchema = z
         })
             .strict()
             .optional(),
+        limits: z
+            .object({
+            maxCandidatesPerRoot: z.number().int().min(1).optional(),
+            maxSkillsLoadedPerSource: z.number().int().min(1).optional(),
+            maxSkillsInPrompt: z.number().int().min(0).optional(),
+            maxSkillsPromptChars: z.number().int().min(0).optional(),
+            maxSkillFileBytes: z.number().int().min(0).optional(),
+        })
+            .strict()
+            .optional(),
         entries: z
             .record(z.string(), z
             .object({
             enabled: z.boolean().optional(),
-            apiKey: z.string().optional(),
+            apiKey: z.string().optional().register(sensitive),
             env: z.record(z.string(), z.string()).optional(),
             config: z.record(z.string(), z.unknown()).optional(),
         })
@@ -497,12 +634,7 @@ export const PoolBotSchema = z
         installs: z
             .record(z.string(), z
             .object({
-            source: z.union([z.literal("npm"), z.literal("archive"), z.literal("path")]),
-            spec: z.string().optional(),
-            sourcePath: z.string().optional(),
-            installPath: z.string().optional(),
-            version: z.string().optional(),
-            installedAt: z.string().optional(),
+            ...InstallRecordShape,
         })
             .strict())
             .optional(),
@@ -513,17 +645,21 @@ export const PoolBotSchema = z
     .strict()
     .superRefine((cfg, ctx) => {
     const agents = cfg.agents?.list ?? [];
-    if (agents.length === 0)
+    if (agents.length === 0) {
         return;
+    }
     const agentIds = new Set(agents.map((agent) => agent.id));
     const broadcast = cfg.broadcast;
-    if (!broadcast)
+    if (!broadcast) {
         return;
+    }
     for (const [peerId, ids] of Object.entries(broadcast)) {
-        if (peerId === "strategy")
+        if (peerId === "strategy") {
             continue;
-        if (!Array.isArray(ids))
+        }
+        if (!Array.isArray(ids)) {
             continue;
+        }
         for (let idx = 0; idx < ids.length; idx += 1) {
             const agentId = ids[idx];
             if (!agentIds.has(agentId)) {

package/dist/config/zod-schema.providers-core.js

@@ -1,8 +1,11 @@
 import { z } from "zod";
+import { isSafeScpRemoteHost } from "../infra/scp-host.js";
+import { isValidInboundPathRootPattern } from "../media/inbound-path-policy.js";
+import { resolveDiscordPreviewStreamMode, resolveSlackNativeStreaming, resolveSlackStreamingMode, resolveTelegramPreviewStreamMode, } from "./discord-preview-streaming.js";
 import { normalizeTelegramCommandDescription, normalizeTelegramCommandName, resolveTelegramCustomCommands, } from "./telegram-custom-commands.js";
 import { ToolPolicySchema } from "./zod-schema.agent-runtime.js";
 import { ChannelHeartbeatVisibilitySchema } from "./zod-schema.channels.js";
-import { BlockStreamingChunkSchema, BlockStreamingCoalesceSchema, DmConfigSchema, DmPolicySchema, ExecutableTokenSchema, GroupPolicySchema, HexColorSchema, MarkdownConfigSchema, MSTeamsReplyStyleSchema, ProviderCommandsSchema, ReplyToModeSchema, RetryConfigSchema, requireOpenAllowFrom, } from "./zod-schema.core.js";
+import { BlockStreamingChunkSchema, BlockStreamingCoalesceSchema, DmConfigSchema, DmPolicySchema, ExecutableTokenSchema, GroupPolicySchema, HexColorSchema, MarkdownConfigSchema, MSTeamsReplyStyleSchema, ProviderCommandsSchema, ReplyToModeSchema, RetryConfigSchema, TtsConfigSchema, requireOpenAllowFrom, } from "./zod-schema.core.js";
 import { sensitive } from "./zod-schema.sensitive.js";
 const ToolPolicyBySenderSchema = z.record(z.string(), ToolPolicySchema).optional();
 const DiscordIdSchema = z
@@ -66,6 +69,19 @@ const validateTelegramCustomCommands = (value, ctx) => {
         });
     }
 };
+function normalizeTelegramStreamingConfig(value) {
+    value.streaming = resolveTelegramPreviewStreamMode(value);
+    delete value.streamMode;
+}
+function normalizeDiscordStreamingConfig(value) {
+    value.streaming = resolveDiscordPreviewStreamMode(value);
+    delete value.streamMode;
+}
+function normalizeSlackStreamingConfig(value) {
+    value.nativeStreaming = resolveSlackNativeStreaming(value);
+    value.streaming = resolveSlackStreamingMode(value);
+    delete value.streamMode;
+}
 export const TelegramAccountSchemaBase = z
     .object({
     name: z.string().optional(),
@@ -81,6 +97,7 @@ export const TelegramAccountSchemaBase = z
     replyToMode: ReplyToModeSchema.optional(),
     groups: z.record(z.string(), TelegramGroupSchema.optional()).optional(),
     allowFrom: z.array(z.union([z.string(), z.number()])).optional(),
+    defaultTo: z.union([z.string(), z.number()]).optional(),
     groupAllowFrom: z.array(z.union([z.string(), z.number()])).optional(),
     groupPolicy: GroupPolicySchema.optional().default("allowlist"),
     historyLimit: z.number().int().min(0).optional(),
@@ -88,10 +105,12 @@ export const TelegramAccountSchemaBase = z
     dms: z.record(z.string(), DmConfigSchema.optional()).optional(),
     textChunkLimit: z.number().int().positive().optional(),
     chunkMode: z.enum(["length", "newline"]).optional(),
+    streaming: z.union([z.boolean(), z.enum(["off", "partial", "block", "progress"])]).optional(),
     blockStreaming: z.boolean().optional(),
     draftChunk: BlockStreamingChunkSchema.optional(),
     blockStreamingCoalesce: BlockStreamingCoalesceSchema.optional(),
-    streamMode: z.enum(["off", "partial", "block"]).optional().default("partial"),
+    // Legacy key kept for automatic migration to `streaming`.
+    streamMode: z.enum(["off", "partial", "block"]).optional(),
     mediaMaxMb: z.number().positive().optional(),
     timeoutSeconds: z.number().int().positive().optional(),
     retry: RetryConfigSchema,
@@ -124,6 +143,7 @@ export const TelegramAccountSchemaBase = z
 })
     .strict();
 export const TelegramAccountSchema = TelegramAccountSchemaBase.superRefine((value, ctx) => {
+    normalizeTelegramStreamingConfig(value);
     requireOpenAllowFrom({
         policy: value.dmPolicy,
         allowFrom: value.allowFrom,
@@ -136,6 +156,7 @@ export const TelegramAccountSchema = TelegramAccountSchemaBase.superRefine((valu
 export const TelegramConfigSchema = TelegramAccountSchemaBase.extend({
     accounts: z.record(z.string(), TelegramAccountSchema.optional()).optional(),
 }).superRefine((value, ctx) => {
+    normalizeTelegramStreamingConfig(value);
     requireOpenAllowFrom({
         policy: value.dmPolicy,
         allowFrom: value.allowFrom,
@@ -224,6 +245,20 @@ const DiscordUiSchema = z
 })
     .strict()
     .optional();
+const DiscordVoiceAutoJoinSchema = z
+    .object({
+    guildId: z.string().min(1),
+    channelId: z.string().min(1),
+})
+    .strict();
+const DiscordVoiceSchema = z
+    .object({
+    enabled: z.boolean().optional(),
+    autoJoin: z.array(DiscordVoiceAutoJoinSchema).optional(),
+    tts: TtsConfigSchema.optional(),
+})
+    .strict()
+    .optional();
 export const DiscordAccountSchema = z
     .object({
     name: z.string().optional(),
@@ -243,6 +278,10 @@ export const DiscordAccountSchema = z
     chunkMode: z.enum(["length", "newline"]).optional(),
     blockStreaming: z.boolean().optional(),
     blockStreamingCoalesce: BlockStreamingCoalesceSchema.optional(),
+    // Canonical streaming mode. Legacy aliases (`streamMode`, boolean `streaming`) are auto-mapped.
+    streaming: z.union([z.boolean(), z.enum(["off", "partial", "block", "progress"])]).optional(),
+    streamMode: z.enum(["partial", "block", "off"]).optional(),
+    draftChunk: BlockStreamingChunkSchema.optional(),
     maxLinesPerMessage: z.number().int().positive().optional(),
     mediaMaxMb: z.number().positive().optional(),
     retry: RetryConfigSchema,
@@ -275,6 +314,7 @@ export const DiscordAccountSchema = z
     // inheritance in multi-account setups (shallow merge works; nested dm object doesn't).
     dmPolicy: DmPolicySchema.optional(),
     allowFrom: DiscordIdListSchema.optional(),
+    defaultTo: z.string().optional(),
     dm: DiscordDmSchema.optional(),
     guilds: z.record(z.string(), DiscordGuildSchema.optional()).optional(),
     heartbeat: ChannelHeartbeatVisibilitySchema,
@@ -290,6 +330,20 @@ export const DiscordAccountSchema = z
         .strict()
         .optional(),
     ui: DiscordUiSchema,
+    slashCommand: z
+        .object({
+        ephemeral: z.boolean().optional(),
+    })
+        .strict()
+        .optional(),
+    threadBindings: z
+        .object({
+        enabled: z.boolean().optional(),
+        ttlHours: z.number().nonnegative().optional(),
+        spawnSubagentSessions: z.boolean().optional(),
+    })
+        .strict()
+        .optional(),
     intents: z
         .object({
         presence: z.boolean().optional(),
@@ -297,6 +351,7 @@ export const DiscordAccountSchema = z
     })
         .strict()
         .optional(),
+    voice: DiscordVoiceSchema,
     pluralkit: z
         .object({
         enabled: z.boolean().optional(),
@@ -315,6 +370,7 @@ export const DiscordAccountSchema = z
 })
     .strict()
     .superRefine((value, ctx) => {
+    normalizeDiscordStreamingConfig(value);
     const activityText = typeof value.activity === "string" ? value.activity.trim() : "";
     const hasActivity = Boolean(activityText);
     const hasActivityType = value.activityType !== undefined;
@@ -391,6 +447,7 @@ export const GoogleChatAccountSchema = z
     groupPolicy: GroupPolicySchema.optional().default("allowlist"),
     groupAllowFrom: z.array(z.union([z.string(), z.number()])).optional(),
     groups: z.record(z.string(), GoogleChatGroupSchema.optional()).optional(),
+    defaultTo: z.string().optional(),
     serviceAccount: z.union([z.string(), z.record(z.string(), z.unknown())]).optional(),
     serviceAccountFile: z.string().optional(),
     audienceType: z.enum(["app-url", "project-number"]).optional(),
@@ -485,7 +542,9 @@ export const SlackAccountSchema = z
     chunkMode: z.enum(["length", "newline"]).optional(),
     blockStreaming: z.boolean().optional(),
     blockStreamingCoalesce: BlockStreamingCoalesceSchema.optional(),
-    streaming: z.boolean().optional(),
+    streaming: z.union([z.boolean(), z.enum(["off", "partial", "block", "progress"])]).optional(),
+    nativeStreaming: z.boolean().optional(),
+    streamMode: z.enum(["replace", "status_final", "append"]).optional(),
     mediaMaxMb: z.number().positive().optional(),
     reactionNotifications: z.enum(["off", "own", "all", "allowlist"]).optional(),
     reactionAllowlist: z.array(z.union([z.string(), z.number()])).optional(),
@@ -518,6 +577,7 @@ export const SlackAccountSchema = z
     // inheritance in multi-account setups (shallow merge works; nested dm object doesn't).
     dmPolicy: DmPolicySchema.optional(),
     allowFrom: z.array(z.union([z.string(), z.number()])).optional(),
+    defaultTo: z.string().optional(),
     dm: SlackDmSchema.optional(),
     channels: z.record(z.string(), SlackChannelSchema.optional()).optional(),
     heartbeat: ChannelHeartbeatVisibilitySchema,
@@ -526,6 +586,7 @@ export const SlackAccountSchema = z
 })
     .strict()
     .superRefine((value, ctx) => {
+    normalizeSlackStreamingConfig(value);
     const dmPolicy = value.dmPolicy ?? value.dm?.policy ?? "pairing";
     const allowFrom = value.allowFrom ?? value.dm?.allowFrom;
     const allowFromPath = value.allowFrom !== undefined ? ["allowFrom"] : ["dm", "allowFrom"];
@@ -595,6 +656,7 @@ export const SignalAccountSchemaBase = z
     sendReadReceipts: z.boolean().optional(),
     dmPolicy: DmPolicySchema.optional().default("pairing"),
     allowFrom: z.array(z.union([z.string(), z.number()])).optional(),
+    defaultTo: z.string().optional(),
     groupAllowFrom: z.array(z.union([z.string(), z.number()])).optional(),
     groupPolicy: GroupPolicySchema.optional().default("allowlist"),
     historyLimit: z.number().int().min(0).optional(),
@@ -678,6 +740,7 @@ export const IrcAccountSchemaBase = z
     channels: z.array(z.string()).optional(),
     dmPolicy: DmPolicySchema.optional().default("pairing"),
     allowFrom: z.array(z.union([z.string(), z.number()])).optional(),
+    defaultTo: z.string().optional(),
     groupAllowFrom: z.array(z.union([z.string(), z.number()])).optional(),
     groupPolicy: GroupPolicySchema.optional().default("allowlist"),
     groups: z.record(z.string(), IrcGroupSchema.optional()).optional(),
@@ -727,17 +790,27 @@ export const IMessageAccountSchemaBase = z
     configWrites: z.boolean().optional(),
     cliPath: ExecutableTokenSchema.optional(),
     dbPath: z.string().optional(),
-    remoteHost: z.string().optional(),
+    remoteHost: z
+        .string()
+        .refine(isSafeScpRemoteHost, "expected SSH host or user@host (no spaces/options)")
+        .optional(),
     service: z.union([z.literal("imessage"), z.literal("sms"), z.literal("auto")]).optional(),
     region: z.string().optional(),
     dmPolicy: DmPolicySchema.optional().default("pairing"),
     allowFrom: z.array(z.union([z.string(), z.number()])).optional(),
+    defaultTo: z.string().optional(),
     groupAllowFrom: z.array(z.union([z.string(), z.number()])).optional(),
     groupPolicy: GroupPolicySchema.optional().default("allowlist"),
     historyLimit: z.number().int().min(0).optional(),
     dmHistoryLimit: z.number().int().min(0).optional(),
     dms: z.record(z.string(), DmConfigSchema.optional()).optional(),
     includeAttachments: z.boolean().optional(),
+    attachmentRoots: z
+        .array(z.string().refine(isValidInboundPathRootPattern, "expected absolute path root"))
+        .optional(),
+    remoteAttachmentRoots: z
+        .array(z.string().refine(isValidInboundPathRootPattern, "expected absolute path root"))
+        .optional(),
     mediaMaxMb: z.number().int().positive().optional(),
     textChunkLimit: z.number().int().positive().optional(),
     chunkMode: z.enum(["length", "newline"]).optional(),
@@ -886,6 +959,7 @@ export const MSTeamsConfigSchema = z
         .optional(),
     dmPolicy: DmPolicySchema.optional().default("pairing"),
     allowFrom: z.array(z.string()).optional(),
+    defaultTo: z.string().optional(),
     groupAllowFrom: z.array(z.string()).optional(),
     groupPolicy: GroupPolicySchema.optional().default("allowlist"),
     textChunkLimit: z.number().int().positive().optional(),

package/dist/config/zod-schema.providers.js

@@ -1,11 +1,14 @@
 import { z } from "zod";
-import { BlueBubblesConfigSchema, DiscordConfigSchema, GoogleChatConfigSchema, IMessageConfigSchema, MSTeamsConfigSchema, SignalConfigSchema, SlackConfigSchema, TelegramConfigSchema, } from "./zod-schema.providers-core.js";
+import { BlueBubblesConfigSchema, DiscordConfigSchema, GoogleChatConfigSchema, IMessageConfigSchema, IrcConfigSchema, MSTeamsConfigSchema, SignalConfigSchema, SlackConfigSchema, TelegramConfigSchema, } from "./zod-schema.providers-core.js";
 import { WhatsAppConfigSchema } from "./zod-schema.providers-whatsapp.js";
 import { GroupPolicySchema } from "./zod-schema.core.js";
 import { ChannelHeartbeatVisibilitySchema } from "./zod-schema.channels.js";
 export * from "./zod-schema.providers-core.js";
 export * from "./zod-schema.providers-whatsapp.js";
 export { ChannelHeartbeatVisibilitySchema } from "./zod-schema.channels.js";
+const ChannelModelByChannelSchema = z
+    .record(z.string(), z.record(z.string(), z.string()))
+    .optional();
 export const ChannelsSchema = z
     .object({
     defaults: z
@@ -15,9 +18,11 @@ export const ChannelsSchema = z
     })
         .strict()
         .optional(),
+    modelByChannel: ChannelModelByChannelSchema,
     whatsapp: WhatsAppConfigSchema.optional(),
     telegram: TelegramConfigSchema.optional(),
     discord: DiscordConfigSchema.optional(),
+    irc: IrcConfigSchema.optional(),
     googlechat: GoogleChatConfigSchema.optional(),
     slack: SlackConfigSchema.optional(),
     signal: SignalConfigSchema.optional(),