@xopcai/xopc 0.0.120 → 0.0.121

package/dist/src/config/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","names":[],"sources":["../../../src/config/schema.ts"],"sourcesContent":["import { z } from 'zod';\n\nimport {\n  AgentConfigEntrySchema,\n  CapabilityPresetSchema,\n  DEFAULT_CAPABILITY_PRESET_ID,\n} from '../agent-manifest/schema.js';\nimport { checkCacheDir } from '../browser/cache-dir-policy.js';\nimport { validatePublicUrl } from './public-url.js';\n\n// ============================================\n// Agent Configs\n// ============================================\n\n/**\n * Agent model ref. Always an object with explicit `primary` and optional\n * `fallbacks` chain. No string-form shorthand — every write site builds the\n * object explicitly so reads never branch on shape.\n */\nexport const AgentModelRefSchema = z\n  .object({\n    primary: z.string().min(1),\n    fallbacks: z.array(z.string()).optional(),\n  })\n  .strict();\n\nexport type AgentModelConfig = z.infer<typeof AgentModelRefSchema>;\n\nexport const AgentTypedModelRoleSchema = z\n  .object({\n    description: z.string().max(500).optional(),\n    model: z.string().min(1),\n    fallbacks: z.array(z.string().min(1)).optional(),\n  })\n  .strict()\n  .superRefine((entry, ctx) => {\n    const validateRef = (ref: string) => {\n      const trimmed = ref.trim();\n      const idx = trimmed.indexOf('/');\n      return idx > 0 && idx < trimmed.length - 1;\n    };\n    if (!validateRef(entry.model)) {\n      ctx.addIssue({\n        code: 'custom',\n        message: `model must be provider/model format (got '${entry.model}')`,\n        path: ['model'],\n      });\n    }\n    for (const [index, fallback] of (entry.fallbacks ?? []).entries()) {\n      if (!validateRef(fallback)) {\n        ctx.addIssue({\n          code: 'custom',\n          message: `fallback must be provider/model format (got '${fallback}')`,\n          path: ['fallbacks', index],\n        });\n      }\n    }\n  });\n\nexport type AgentTypedModelRole = z.infer<typeof AgentTypedModelRoleSchema>;\n\nconst AgentTypedModelRolesSchema = z\n  .record(z.string().regex(/^[a-z][a-z0-9_-]{0,63}$/), AgentTypedModelRoleSchema)\n  .optional();\n\nexport const AgentModelsSchema = z\n  .object({\n    defaultRole: z.string().regex(/^[a-z][a-z0-9_-]{0,63}$/).optional(),\n    roles: AgentTypedModelRolesSchema,\n  })\n  .strict()\n  .optional();\n\nexport type AgentModelsConfig = z.infer<typeof AgentModelsSchema>;\n\n/**\n * Image-generation model ref. {@link AgentModelRefSchema} plus runtime knobs\n * (`timeoutMs`, `autoProviderFallback`) used by the image-generation runtime.\n */\nexport const AgentImageGenerationModelSchema = z\n  .object({\n    primary: z.string().min(1),\n    fallbacks: z.array(z.string()).optional(),\n    /** Hard cap for the whole generation attempt (ms). */\n    timeoutMs: z.number().int().positive().optional(),\n    /**\n     * When all `primary + fallbacks` candidates fail, sweep every other\n     * configured provider before giving up.\n     */\n    autoProviderFallback: z.boolean().optional(),\n  })\n  .strict();\n\nexport type AgentImageGenerationModelConfig = z.infer<typeof AgentImageGenerationModelSchema>;\n\nexport type AgentTypedModel = AgentTypedModelRole & { id: string };\n\nexport const AgentsConfigSchema = z.object({\n  /** Default agent id when not specified (routing / session creation). */\n  default: z.string().optional(),\n  /** Protected global defaults preset applied before each agent's own presets. */\n  defaultPreset: z.string().default(DEFAULT_CAPABILITY_PRESET_ID),\n  capabilityPresets: z.record(z.string(), CapabilityPresetSchema).default({}),\n  list: z.array(AgentConfigEntrySchema).default([]),\n}).strict().default({\n  default: 'main',\n  defaultPreset: DEFAULT_CAPABILITY_PRESET_ID,\n  capabilityPresets: {\n    [DEFAULT_CAPABILITY_PRESET_ID]: {\n      id: DEFAULT_CAPABILITY_PRESET_ID,\n      name: 'Global defaults',\n      description: 'Default capabilities inherited by every agent.',\n      version: 1,\n      models: {\n        defaultRole: 'deep',\n        roles: {},\n      },\n    },\n  },\n  list: [\n    {\n      id: 'main',\n      enabled: true,\n      identity: {\n        name: 'Main',\n        role: 'General assistant',\n        language: 'en',\n        tone: 'direct',\n      },\n      responsibilities: {\n        primary: ['Help the user complete tasks'],\n      },\n      workspace: { root: '~/.xopc/workspace/main' },\n      tools: { builtin: {} },\n      skills: { mode: 'all' },\n      memory: {\n        mode: 'confirmWrite',\n        sources: ['session', 'curated'],\n        writePolicy: { curated: 'confirm' },\n      },\n      workflows: {},\n      boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n    },\n  ],\n});\n\nconst BrowserCloudConfigSchema = z\n  .object({\n    apiKey: z.string().optional(),\n    projectId: z.string().optional(),\n    region: z.string().optional(),\n  })\n  .strict()\n  .optional();\n\nconst BrowserExtensionConfigSchema = z\n  .object({\n    port: z.number().int().min(1024).max(65535).optional(),\n    host: z.string().min(1).optional(),\n    connectionTimeout: z.number().int().positive().optional(),\n  })\n  .strict()\n  .optional();\n\nconst BrowserCloakConfigSchema = z\n  .object({\n    keepOpen: z.boolean().optional(),\n    temporaryProfile: z.boolean().optional(),\n    cacheDir: z.string().optional().superRefine((value, ctx) => {\n      const result = checkCacheDir(value);\n      if (result.ok === false) {\n        ctx.addIssue({ code: 'custom', message: result.message });\n      }\n    }),\n    binaryPath: z.string().optional(),\n    timezone: z.string().optional(),\n    locale: z.string().optional(),\n    webrtcIp: z.string().optional(),\n    fingerprintPlatform: z.string().optional(),\n    extraArgs: z.array(z.string()).optional(),\n  })\n  .strict()\n  .optional();\n\nexport const BrowserConfigSchema = z\n  .object({\n    enabled: z.boolean().default(true),\n    backend: z.enum(['local', 'cdp', 'cloud', 'extension', 'cloakbrowser']).default('extension'),\n    headless: z.boolean().optional(),\n    allowPrivateUrls: z.boolean().optional(),\n    commandTimeout: z.number().int().min(5).max(900).optional(),\n    cloudProvider: z.enum(['local', 'browserbase', 'browser-use']).optional(),\n    cloud: BrowserCloudConfigSchema,\n    cdpUrl: z.string().optional(),\n    extension: BrowserExtensionConfigSchema,\n    cloakbrowser: BrowserCloakConfigSchema,\n    humanize: z.boolean().optional(),\n    humanPreset: z.enum(['default', 'careful']).optional(),\n    dialogPolicy: z.enum(['must_respond', 'auto_dismiss', 'auto_accept']).optional(),\n    dialogTimeoutSeconds: z.number().int().positive().optional(),\n  })\n  .strict()\n  .default({ enabled: true, backend: 'extension' });\n\n// ============================================\n// Channel Configs (per-channel Zod lives in bundled extensions; root schema is open)\n// ============================================\n\nexport {\n  TelegramTopicConfigSchema,\n  TelegramGroupConfigSchema,\n  TelegramAccountConfigSchema,\n  TelegramConfigSchema,\n} from '../../extensions/telegram/src/config-schema.js';\nexport type { TelegramConfig } from '../../extensions/telegram/src/config-schema.js';\nexport { WeixinAccountConfigSchema, WeixinConfigSchema } from '../../extensions/weixin/src/config-schema.js';\nexport type { WeixinConfig } from '../../extensions/weixin/src/config-schema.js';\n// ============================================\n// Session Routing Configuration\n// ============================================\n\nexport const BindingMatchSchema = z.object({\n  channel: z.string(),\n  accountId: z.string().optional(),\n  peerKind: z.string().optional(),\n  peerId: z.string().optional(),\n  guildId: z.string().optional(),\n  teamId: z.string().optional(),\n  memberRoleIds: z.array(z.string()).optional(),\n});\n\nexport const BindingRuleSchema = z.object({\n  id: z.string().optional(),\n  agentId: z.string(),\n  priority: z.number().default(100),\n  match: BindingMatchSchema,\n  enabled: z.boolean().default(true),\n});\n\nexport const BindingsConfigSchema = z.array(BindingRuleSchema).default([]);\n\nexport const SessionDmScopeSchema = z.enum([\n  'main',\n  'per-peer',\n  'per-channel-peer',\n  'per-account-channel-peer',\n]);\n\nexport const SessionStorageConfigSchema = z.object({\n  pruneAfterMs: z.number().optional(),\n  maxEntries: z.number().optional(),\n});\n\nexport const SessionResetModeSchema = z.enum(['daily', 'idle']);\n\nexport const SessionResetConfigSchema = z\n  .object({\n    mode: SessionResetModeSchema.optional(),\n    /** Local hour (0–23) for the daily reset boundary. */\n    atHour: z.number().int().min(0).max(23).optional(),\n    /** Sliding idle window (minutes). When set with daily mode, whichever expires first wins. */\n    idleMinutes: z.number().int().min(0).optional(),\n  })\n  .strict();\n\nexport const SessionResetByTypeSchema = z\n  .object({\n    direct: SessionResetConfigSchema.optional(),\n    group: SessionResetConfigSchema.optional(),\n    thread: SessionResetConfigSchema.optional(),\n  })\n  .strict();\n\nexport const SessionScopeSchema = z.enum(['per-sender', 'global']);\n\nexport const SessionConfigSchema = z.object({\n  scope: SessionScopeSchema.default('per-sender'),\n  mainKey: z.string().default('main'),\n  dmScope: SessionDmScopeSchema.default('main'),\n  identityLinks: z.record(z.string(), z.array(z.string())).optional(),\n  resetTriggers: z.array(z.string()).optional(),\n  idleMinutes: z.number().int().positive().optional(),\n  reset: SessionResetConfigSchema.optional(),\n  resetByType: SessionResetByTypeSchema.optional(),\n  resetByChannel: z.record(z.string(), SessionResetConfigSchema).optional(),\n  storage: SessionStorageConfigSchema.optional(),\n}).default({\n  scope: 'per-sender',\n  mainKey: 'main',\n  dmScope: 'main',\n});\n\n/** Channel buckets — shapes validated post-parse by registered channel plugins. */\nexport const ChannelsConfigSchema = z.record(z.string(), z.unknown()).default({});\n\nexport const SearchProviderEntrySchema = z.object({\n  type: z.enum(['brave', 'tavily', 'bing', 'searxng']),\n  apiKey: z.string().optional(),\n  /** SearXNG instance base URL (e.g. http://localhost:8080) */\n  url: z.string().optional(),\n  disabled: z.boolean().optional(),\n});\n\nexport type SearchProviderEntry = z.infer<typeof SearchProviderEntrySchema>;\n\nexport const WebSearchConfigSchema = z.object({\n  maxResults: z.number().default(5),\n  /** Ordered API providers; empty → HTML fallback only */\n  providers: z.array(SearchProviderEntrySchema).default([]),\n});\n\nexport type WebSearchConfig = z.infer<typeof WebSearchConfigSchema>;\n\nexport const WebsiteBlocklistSchema = z.object({\n  /** Master switch. Default false (no blocking). */\n  enabled: z.boolean().default(false),\n  /** Domain patterns to block (e.g. \"example.com\", \"*.evil.org\"). */\n  domains: z.array(z.string()).default([]),\n});\n\nexport type WebsiteBlocklistConfig = z.infer<typeof WebsiteBlocklistSchema>;\n\nexport const WebToolsConfigSchema = z.object({\n  /** Search result HTML fallback: cn → Bing, otherwise DuckDuckGo */\n  region: z.enum(['cn', 'global']).optional(),\n  search: WebSearchConfigSchema.optional(),\n  /** Domain blocklist for web_fetch / web_extract / browser tools. */\n  blocklist: WebsiteBlocklistSchema.optional(),\n});\n\nexport type WebToolsConfig = z.infer<typeof WebToolsConfigSchema>;\n\nexport const ToolsConfigSchema = z.object({\n  web: WebToolsConfigSchema.optional(),\n  /**\n   * Per-capability media providers. Currently only `audio` (STT) is wired;\n   * `image` / `video` slots are reserved for future capabilities.\n   */\n  media: z.lazy(() => ToolsMediaConfigSchema),\n}).default({\n  web: {\n    search: {\n      maxResults: 5,\n      providers: [],\n    },\n  },\n});\n\n// ============================================\n// Gateway Configuration\n// ============================================\n\nexport const GatewayAuthRateLimitSchema = z\n  .object({\n    enabled: z.boolean().default(true),\n    maxAttempts: z.number().int().min(1).default(5),\n    windowMs: z.number().default(900_000),\n    blockDurationMs: z.number().default(300_000),\n    /** OpenClaw alias for blockDurationMs. */\n    lockoutMs: z.number().optional(),\n    /** Skip rate limiting for loopback client IPs (default true). Remote browser Origin requests never exempt. */\n    exemptLoopback: z.boolean().default(true),\n    /**\n     * Coalesce same-client failures arriving within this window into a single\n     * attempt. Absorbs SPA fan-out / SDK auto-retry storms without weakening\n     * brute-force protection (deliberate attackers are still rate-limited to\n     * one effective attempt per window). Set to 0 to disable.\n     */\n    burstCoalesceMs: z.number().int().min(0).default(1000),\n  })\n  .optional();\n\nexport const GatewaySecuritySchema = z\n  .object({\n    /** When true, non-loopback binds require explicit gateway.auth.rateLimit configuration. */\n    strict: z.boolean().optional(),\n  })\n  .optional();\n\nexport const GatewayTrustedProxySchema = z\n  .object({\n    /** Header set by the reverse proxy with the authenticated user identity. */\n    userHeader: z.string().min(1),\n    /** Additional headers that must be present (e.g. proxy auth markers). */\n    requiredHeaders: z.array(z.string()).optional(),\n    /** When non-empty, only these user identities are allowed. */\n    allowUsers: z.array(z.string()).optional(),\n    /** Allow trusted-proxy auth when the TCP source is loopback (same-host reverse proxy). */\n    allowLoopback: z.boolean().optional(),\n  })\n  .strict();\n\nexport const GatewayAuthSchema = z\n  .object({\n    mode: z.enum(['none', 'token', 'password', 'trusted-proxy']).default('token'),\n    token: z.string().optional(),\n    password: z.string().optional(),\n    /** When true (default for Serve), browser UI may auth via Tailscale identity headers. API routes still require token. */\n    allowTailscale: z.boolean().optional(),\n    rateLimit: GatewayAuthRateLimitSchema,\n    trustedProxy: GatewayTrustedProxySchema.optional(),\n  })\n  .default({\n    mode: 'token',\n  });\n\nexport const GatewayTailscaleConsentSchema = z.object({\n  version: z.string().min(1),\n  acceptedAt: z.string().min(1),\n});\n\nexport const GatewayTailscaleSchema = z\n  .object({\n    mode: z.enum(['off', 'serve', 'funnel']).default('off'),\n    resetOnExit: z.boolean().default(true),\n    consent: GatewayTailscaleConsentSchema.optional(),\n  })\n  .default({\n    mode: 'off',\n    resetOnExit: true,\n  });\n\nexport const GatewayRemoteSchema = z.object({\n  url: z.string().url(),\n  token: z.string().optional(),\n  password: z.string().optional(),\n  transport: z.enum(['direct', 'ssh']).default('direct'),\n  sshTarget: z.string().optional(),\n  sshIdentity: z.string().optional(),\n  tlsFingerprint: z.string().optional(),\n});\n\nexport const GatewayTlsSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    autoGenerate: z.boolean().default(false),\n    certPath: z.string().optional(),\n    keyPath: z.string().optional(),\n  })\n  .default({\n    enabled: false,\n    autoGenerate: false,\n  });\n\nexport const GatewayModeSchema = z.enum(['local', 'remote']).default('local');\n\nexport const HeartbeatConfigSchema = z\n  .object({\n    enabled: z.boolean(),\n    intervalMs: z.number(),\n    /** When false, heartbeat instructions are only sent during heartbeat polling turns (not in every chat system prompt). */\n    includeSystemPromptSection: z.boolean().optional().default(false),\n    target: z.string().optional(),\n    targetChatId: z.string().optional(),\n    prompt: z.string().optional(),\n    ackMaxChars: z.number().optional(),\n    isolatedSession: z.boolean().optional(),\n    activeHours: z\n      .object({\n        start: z.string(),\n        end: z.string(),\n        timezone: z.string().optional(),\n      })\n      .optional(),\n  })\n  .default({\n    enabled: true,\n    intervalMs: 1_800_000,\n    includeSystemPromptSection: false,\n  });\n\nexport const GatewayChannelConnectDeferModeSchema = z.enum(['auto', 'off', 'explicit']);\n\nexport const TunnelConsentSchema = z.object({\n  version: z.string().min(1),\n  acceptedAt: z.string().min(1),\n});\n\nexport const TunnelConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    brokerUrl: z.string().url().default('https://frp.xopc.ai/api'),\n    /** Broker register API secret (env `XOPC_TUNNEL_REGISTRATION_SECRET` overrides when set). */\n    registrationSecret: z.string().min(1).optional(),\n    autoStart: z.boolean().default(false),\n    subdomain: z.string().optional(),\n    consent: TunnelConsentSchema.optional(),\n  })\n  .default({\n    enabled: false,\n    brokerUrl: 'https://frp.xopc.ai/api',\n    autoStart: false,\n  });\n\nexport type TunnelConfig = z.infer<typeof TunnelConfigSchema>;\n\n/**\n * Workspace-scoped concerns (file import, etc.). Distinct from\n * agent manifest workspace roots; this block carries\n * feature configuration for workspace-related routes.\n */\nexport const WorkspaceImportConfigSchema = z.object({\n  /** Workspace-relative subdir for imported files. Default `imports`. */\n  targetDir: z.string().default('imports'),\n  /** Per-file byte cap. Default 100 MiB. */\n  maxBytes: z.number().int().min(1024).max(10_737_418_240).default(104_857_600),\n  /** When false, the route rejects `onConflict: 'overwrite'`. Default true. */\n  allowOverwrite: z.boolean().default(true),\n});\nexport type WorkspaceImportConfig = z.infer<typeof WorkspaceImportConfigSchema>;\n\nexport const WorkspaceConfigSchema = z.object({\n  import: WorkspaceImportConfigSchema.optional(),\n}).optional();\nexport type WorkspaceConfig = z.infer<typeof WorkspaceConfigSchema>;\n\nexport const GatewayBindModeSchema = z.enum(['auto', 'loopback', 'lan', 'tailnet', 'custom']);\n\nexport const GatewayConfigSchema = z.object({\n  /** Semantic bind mode. */\n  bind: GatewayBindModeSchema.optional(),\n  /** IPv4 listen address when `bind` is `custom`. */\n  customBindHost: z.string().optional(),\n  port: z.number().optional(),\n  /** local: this process runs the gateway; remote: CLI clients target gateway.remote. */\n  mode: GatewayModeSchema.optional(),\n  /** Persistent remote gateway target for CLI/TUI/MCP when mode=remote. */\n  remote: GatewayRemoteSchema.optional(),\n  tailscale: GatewayTailscaleSchema.optional(),\n  tls: GatewayTlsSchema.optional(),\n  auth: GatewayAuthSchema.optional(),\n  heartbeat: HeartbeatConfigSchema.optional(),\n  maxSseConnections: z.number().optional(),\n  corsOrigins: z.array(z.string()).optional(),\n  /**\n   * Reverse-proxy publicly reachable URL (e.g. `https://gateway.example.com`).\n   * Optional. When set, mobile pairing surfaces this URL as the preferred\n   * baseUrl and it is auto-added to the browser CORS/CSRF allowlist.\n   * - Must be a URL with no path / query / userinfo.\n   * - Must use `https:` for public hosts; `http:` is only allowed when the\n   *   hostname is in an RFC1918 / `.local` private range.\n   */\n  publicUrl: z\n    .string()\n    .superRefine((value, ctx) => {\n      const result = validatePublicUrl(value);\n      if (result.ok === false) {\n        ctx.addIssue({ code: 'custom', message: `gateway.publicUrl: ${result.message}` });\n      }\n    })\n    .optional(),\n  /** Dangerous: allow browser Origin to match the HTTP Host header when not in corsOrigins. */\n  dangerouslyAllowHostHeaderOriginFallback: z.boolean().optional(),\n  /** CIDRs or exact IPs of reverse proxies allowed to terminate auth (trusted-proxy mode). */\n  trustedProxies: z.array(z.string()).optional(),\n  /** When true, fall back to X-Real-IP if X-Forwarded-For chain parsing fails. Default false (fail closed). */\n  allowRealIpFallback: z.boolean().optional(),\n  security: GatewaySecuritySchema,\n  /**\n   * How channel `start()` is split around HTTP listen when using `GatewayServer`.\n   * - `auto` (default): defer ids come from channel plugin `meta.deferConnectUntilAfterListen` + enabled config.\n   * - `off`: always start all channels in phase1 (troubleshooting / strict ordering).\n   * - `explicit`: defer only `channelConnectDeferIds` (empty = defer none).\n   */\n  channelConnectDeferMode: GatewayChannelConnectDeferModeSchema.optional(),\n  /** When `channelConnectDeferMode` is `explicit`, these channel plugin ids are deferred until after listen. */\n  channelConnectDeferIds: z.array(z.string().min(1)).max(24).optional(),\n  /** Removed from the defer set (applied after `auto` or `explicit` resolution). */\n  channelConnectDeferSkipIds: z.array(z.string().min(1)).max(24).optional(),\n  /** Default skills marketplace provider id. Built-in: 'store', 'skillhub', 'clawhub'. Extensions may register more. */\n  skillsMarketplaceProvider: z.string().optional(),\n  /** Base URL for the xopc skills marketplace (public REST API). */\n  skillsStoreBaseUrl: z.string().url().optional(),\n  /** File sharing configuration (temporary public download links for workspace files). */\n  share: z.object({\n    enabled: z.boolean().default(true),\n    /** Default TTL in ms (default 24h). */\n    defaultTtlMs: z.number().min(60_000).max(604_800_000).default(86_400_000),\n    /** Maximum TTL in ms (default 7 days). */\n    maxTtlMs: z.number().min(60_000).max(2_592_000_000).default(604_800_000),\n    /** Maximum concurrent active shares (default 100). */\n    maxActiveShares: z.number().min(1).max(10_000).default(100),\n    /** Maximum shareable file size in bytes (default 100MB). */\n    maxFileSize: z.number().min(1_048_576).max(10_737_418_240).default(104_857_600),\n    /** MIME types allowed for inline preview (?inline=1). */\n    inlinePreviewMimes: z.array(z.string()).default([\n      'image/png',\n      'image/jpeg',\n      'image/gif',\n      'image/webp',\n      'image/svg+xml',\n      'application/pdf',\n      'text/html',\n      'text/markdown',\n      'text/plain',\n      'application/json',\n    ]),\n    /** Folder-sharing controls (browse + ZIP). */\n    directory: z.object({\n      enabled: z.boolean().default(true),\n      /** Maximum folder size in bytes at scan time (default 1 GB). */\n      maxFolderSize: z.number().int().min(1_048_576).max(10_737_418_240).default(1_073_741_824),\n      /** Maximum number of entries scanned for a single folder share. */\n      maxFileCount: z.number().int().min(1).max(100_000).default(1_000),\n      /** Traversal depth cap (defense against recursive symlinks). */\n      maxDepth: z.number().int().min(1).max(64).default(20),\n      /** In-memory directory listing cache TTL. */\n      listingCacheMs: z.number().int().min(0).max(600_000).default(60_000),\n      /** Maximum simultaneous ZIP streams per share token. */\n      zipConcurrency: z.number().int().min(1).max(8).default(1),\n    }).default({\n      enabled: true,\n      maxFolderSize: 1_073_741_824,\n      maxFileCount: 1_000,\n      maxDepth: 20,\n      listingCacheMs: 60_000,\n      zipConcurrency: 1,\n    }),\n  }).optional(),\n  /** Site-share configuration (static directory or reverse-proxy a local dev server). */\n  siteShare: z.object({\n    enabled: z.boolean().default(true),\n    /** Public host suffix that subdomain shares are served under. */\n    publicHostSuffix: z.string().min(1).default('share.xopc.ai'),\n    /** Default TTL in ms (default 6h, shorter than file shares — live app surface). */\n    defaultTtlMs: z.number().int().min(60_000).max(604_800_000).default(21_600_000),\n    /** Maximum TTL in ms (default 7 days). */\n    maxTtlMs: z.number().int().min(60_000).max(2_592_000_000).default(604_800_000),\n    /** Maximum concurrent active site shares. */\n    maxActiveSites: z.number().int().min(1).max(1_000).default(5),\n    static: z.object({\n      enabled: z.boolean().default(true),\n      /** Maximum total bytes of files served per static site. */\n      maxRootDirSize: z.number().int().min(1_048_576).max(10_737_418_240).default(524_288_000),\n      /** Maximum file count under root dir. */\n      maxFileCount: z.number().int().min(1).max(100_000).default(10_000),\n      /** Whether HTML/CSS rewrite of absolute paths is on by default. */\n      rewriteEnabledByDefault: z.boolean().default(false),\n    }).default({\n      enabled: true,\n      maxRootDirSize: 524_288_000,\n      maxFileCount: 10_000,\n      rewriteEnabledByDefault: false,\n    }),\n    proxy: z.object({\n      /** Reverse-proxy mode default-enabled per the product brief. */\n      enabled: z.boolean().default(true),\n      /** Upstream host whitelist. Loopback by default. */\n      allowedUpstreamHosts: z\n        .array(z.string().min(1))\n        .default(['127.0.0.1', 'localhost', '::1']),\n      /** Upstream port whitelist (common dev-server ports). */\n      allowedUpstreamPorts: z\n        .array(z.number().int().min(1).max(65535))\n        .default([3000, 3001, 4321, 5173, 8000, 8080, 8888, 9000]),\n      /** Whether to forward WebSocket upgrades. */\n      forwardWebSocket: z.boolean().default(true),\n      /** Maximum request body size in bytes (50 MB). */\n      bodySizeLimit: z.number().int().min(0).max(1_073_741_824).default(52_428_800),\n      /** Per-request HTTP timeout in ms. */\n      requestTimeoutMs: z.number().int().min(1_000).max(600_000).default(30_000),\n      /** Per-WebSocket idle timeout in ms. */\n      wsIdleTimeoutMs: z.number().int().min(10_000).max(3_600_000).default(300_000),\n      /** Rewrite Set-Cookie Path attribute (subpath mode only). */\n      rewriteSetCookiePath: z.boolean().default(true),\n    }).default({\n      enabled: true,\n      allowedUpstreamHosts: ['127.0.0.1', 'localhost', '::1'],\n      allowedUpstreamPorts: [3000, 3001, 4321, 5173, 8000, 8080, 8888, 9000],\n      forwardWebSocket: true,\n      bodySizeLimit: 52_428_800,\n      requestTimeoutMs: 30_000,\n      wsIdleTimeoutMs: 300_000,\n      rewriteSetCookiePath: true,\n    }),\n  }).optional(),\n}).default({\n  bind: 'loopback',\n  port: 18790,\n  auth: {\n    mode: 'token',\n  },\n  heartbeat: {\n    enabled: true,\n    intervalMs: 1_800_000,\n    includeSystemPromptSection: false,\n  },\n  maxSseConnections: 100,\n  corsOrigins: [],\n  skillsMarketplaceProvider: 'skillhub',\n  skillsStoreBaseUrl: 'https://store.xopc.ai',\n});\n\nexport const ModelsDevConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n}).default({\n  enabled: true,\n});\n\n// ============================================\n// STT (Speech-to-Text) Config\n// ============================================\n\nconst SttProviderConfigCatchallSchema = z.union([\n  z.string(),\n  z.number(),\n  z.boolean(),\n  z.null(),\n  z.array(z.unknown()),\n  z.record(z.string(), z.unknown()),\n]);\n\nexport const STTProviderConfigSchema = z\n  .object({\n    apiKey: z.string().optional(),\n    model: z.string().optional(),\n    baseUrl: z.string().optional(),\n    headers: z.record(z.string(), z.string()).optional(),\n    language: z.string().optional(),\n    prompt: z.string().optional(),\n  })\n  .catchall(SttProviderConfigCatchallSchema);\n\nexport const STTFallbackConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  order: z.array(z.string().min(1)).default(['alibaba', 'openai']),\n});\n\nexport const MediaUnderstandingCapabilitiesSchema = z\n  .array(z.enum(['image', 'audio', 'video']))\n  .optional();\n\nexport const MediaUnderstandingModelSchema = z\n  .object({\n    provider: z.string().optional(),\n    model: z.string().optional(),\n    capabilities: MediaUnderstandingCapabilitiesSchema,\n    type: z.union([z.literal('provider'), z.literal('cli')]).optional(),\n    command: z.string().optional(),\n    baseUrl: z.string().optional(),\n    headers: z.record(z.string(), z.string()).optional(),\n    apiKey: z.string().optional(),\n    language: z.string().optional(),\n    prompt: z.string().optional(),\n  })\n  .catchall(SttProviderConfigCatchallSchema);\n\nexport const STTConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    /** Primary provider id — any registered MediaUnderstandingProvider id. */\n    provider: z.string().min(1).default('alibaba'),\n    fallback: STTFallbackConfigSchema.optional(),\n    timeoutMs: z.number().int().min(1000).max(180000).optional(),\n    /** Ordered model entries for this capability (OpenClaw `tools.media.audio.models`). */\n    models: z.array(MediaUnderstandingModelSchema).optional(),\n    /** Provider settings map keyed by provider id. */\n    providers: z.record(z.string(), STTProviderConfigSchema).optional(),\n  })\n  .strict();\n\n// ============================================\n// TTS (Text-to-Speech) Config\n// ============================================\n\nconst TtsProviderConfigCatchallSchema = z.union([\n  z.string(),\n  z.number(),\n  z.boolean(),\n  z.null(),\n  z.array(z.unknown()),\n  z.record(z.string(), z.unknown()),\n]);\n\nexport const TTSProviderConfigSchema = z\n  .object({\n    apiKey: z.string().optional(),\n    model: z.string().optional(),\n    voice: z.string().optional(),\n  })\n  .catchall(TtsProviderConfigCatchallSchema);\n\nexport const TTSFallbackConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  order: z\n    .array(z.string().min(1))\n    .default(['openai', 'alibaba', 'minimax', 'edge']),\n});\n\nexport const TTSModelOverridesConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  allowText: z.boolean().default(true),\n  allowProvider: z.boolean().default(false),\n  allowVoice: z.boolean().default(true),\n  allowModelId: z.boolean().default(true),\n  allowVoiceSettings: z.boolean().default(false),\n  allowNormalization: z.boolean().default(false),\n  allowSeed: z.boolean().default(false),\n});\n\nexport const TTSEdgeConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  voice: z.string().optional(),\n  lang: z.string().optional(),\n  outputFormat: z.string().optional(),\n  pitch: z.string().optional(),\n  rate: z.string().optional(),\n  volume: z.string().optional(),\n  proxy: z.string().optional(),\n  timeoutMs: z.number().int().min(1000).max(120000).optional(),\n});\n\nexport const TTSSummarizationConfigSchema = z.object({\n  enabled: z.boolean().optional(),\n  targetLength: z.number().int().min(1).optional(),\n  threshold: z.number().int().min(1).optional(),\n  model: z.string().optional(),\n});\n\nexport const TTSConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    /** Primary provider id — any registered SpeechProviderPlugin id. */\n    provider: z.string().min(1).default('edge'),\n    trigger: z.enum(['off', 'always', 'inbound', 'tagged']).default('always'),\n    fallback: TTSFallbackConfigSchema.optional(),\n    maxTextLength: z.number().int().min(1).default(512), // Conservative default to accommodate all providers (Alibaba limit is 512)\n    timeoutMs: z.number().int().min(1000).max(180000).default(60000),\n    summarization: TTSSummarizationConfigSchema.optional(),\n    modelOverrides: TTSModelOverridesConfigSchema.optional(),\n    /** Provider settings map keyed by provider id. */\n    providers: z.record(z.string(), TTSProviderConfigSchema).optional(),\n  })\n  .strict();\n\n// ============================================\n// messages.* — delivery / presentation concerns\n// ============================================\n\nexport const MessagesConfigSchema = z.object({\n  /** Voice (text-to-speech) output configuration. */\n  tts: TTSConfigSchema.optional(),\n}).optional();\n\nexport const ToolsMediaAudioConfigSchema = STTConfigSchema;\n\nexport const ToolsMediaConfigSchema = z\n  .object({\n    /** Shared model entries applied across media capabilities when entry lacks capabilities. */\n    models: z.array(MediaUnderstandingModelSchema).optional(),\n    /** Audio (speech-to-text) capability provider config. */\n    audio: ToolsMediaAudioConfigSchema.optional(),\n  })\n  .optional();\n\n// ============================================\n// Provider Configs (capability providers: image / audio / video)\n// ============================================\n\n/**\n * Optional Azure OpenAI overrides used when an OpenAI image-generation\n * request should hit an Azure deployment instead of `api.openai.com`.\n *\n * URL template (when present):\n *   `https://<resource>.openai.azure.com/openai/deployments/<deployment>/images/generations?api-version=<apiVersion>`\n */\nexport const ProviderAzureConfigSchema = z\n  .object({\n    /** Azure resource name (subdomain before `.openai.azure.com`). */\n    resource: z.string().min(1).optional(),\n    /** Azure deployment id (configured per model). */\n    deployment: z.string().min(1).optional(),\n    /** Azure REST API version, e.g. `2024-08-01-preview`. */\n    apiVersion: z.string().min(1).optional(),\n  })\n  .strict();\n\n/** Per-vendor request overrides applied by the provider HTTP layer. */\nexport const ProviderRequestOverridesSchema = z\n  .object({\n    /** Hard cap for a single HTTP call (ms). */\n    timeoutMs: z.number().int().positive().optional(),\n    /** Extra headers merged into every outbound request. */\n    headers: z.record(z.string(), z.string()).optional(),\n  })\n  .strict();\n\n/**\n * Generic per-vendor provider config — used by image / audio / video\n * capability providers via `cfg.providers.<id>`. Kept loose (`.strict()` but\n * everything optional) so adding a new vendor never requires a config\n * migration.\n */\nexport const ProviderAuthConfigSchema = z\n  .object({\n    /** Static API key (api-key / azure-key modes). */\n    apiKey: z.string().optional(),\n    /** Override the default REST base URL. */\n    baseUrl: z.string().url().optional(),\n    /** Vendor region (DashScope: `beijing` / `singapore`; AWS: region id). */\n    region: z.string().optional(),\n    /** Image-only base URL override (DashScope splits image vs LLM). */\n    imageBaseUrl: z.string().url().optional(),\n    /** Per-vendor request overrides. */\n    request: ProviderRequestOverridesSchema.optional(),\n    /** Azure OpenAI deployment overrides; only consumed by OpenAI image provider. */\n    azure: ProviderAzureConfigSchema.optional(),\n  })\n  .strict();\n\nexport type ProviderAuthConfig = z.infer<typeof ProviderAuthConfigSchema>;\n\n/**\n * `cfg.providers.<id>` is keyed by provider id (`openai`, `dashscope`,\n * `minimax`, `google`, `fal`, …). Every entry is optional and validated by\n * {@link ProviderAuthConfigSchema}.\n */\nexport const ProvidersConfigSchema = z.record(z.string(), ProviderAuthConfigSchema);\n\nexport type ProvidersConfig = z.infer<typeof ProvidersConfigSchema>;\n\n// ============================================\n// Extension Configs \n// ============================================\n\n// Security config for extensions \nexport const ExtensionSecurityConfigSchema = z.object({\n  checkPermissions: z.boolean().default(true),\n  allowUntrusted: z.boolean().default(false),\n  allow: z.array(z.string()).default([]),\n  trackProvenance: z.boolean().default(true),\n  allowPromptInjection: z.boolean().default(false),\n});\n\n// Slot config for extensions \nexport const ExtensionSlotsConfigSchema = z.object({\n  memory: z.string().optional(),\n  tts: z.string().optional(),\n  imageGeneration: z.string().optional(),\n  webSearch: z.string().optional(),\n});\n\n// Complete extensions config\n// Extension config allows both known fields AND arbitrary extension-specific config\n// Known fields: enabled (array), allow (array), security (object), slots (object)\n// Arbitrary: any other key is extension-specific config (e.g., extensions.hello.greeting)\nexport const ExtensionsConfigSchema: z.ZodType<Record<string, unknown>> = z.record(z.string(), z.unknown());\n\n// ============================================\n// Update Config\n// ============================================\n\nexport const UpdateAutoConfigSchema = z\n  .object({\n    /** Enable automatic update installation. Default false. */\n    enabled: z.boolean().default(false),\n    /** Hours to wait before applying a stable update after first detection. */\n    stableDelayHours: z.number().min(0).default(6),\n    /** Additional random jitter hours for stable rollout (avoids thundering herd). */\n    stableJitterHours: z.number().min(0).default(12),\n    /** How often to re-check for beta updates (hours). Min 0.25. */\n    betaCheckIntervalHours: z.number().min(0.25).default(1),\n  })\n  .strict()\n  .optional();\n\n/** Persistent `/goal` (Ralph loop) — Hermes-aligned defaults. */\nexport const GoalNotificationEventSchema = z.enum([\n  'done',\n  'blocked',\n  'needs_input',\n  'queue_failed',\n  'queue_retry',\n  'queue_succeeded',\n  'queue_skipped',\n]);\n\nexport const GoalNotificationTargetSchema = z\n  .object({\n    channel: z.string().min(1),\n    chatId: z.string().min(1),\n    accountId: z.string().optional(),\n    threadId: z.union([z.string(), z.number()]).optional(),\n    silent: z.boolean().optional(),\n    events: z.array(GoalNotificationEventSchema).optional(),\n  })\n  .strict();\n\nexport const GoalNotificationsConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    /** Notify Telegram/Weixin chats bound to the goal activeSessionKey. */\n    includeLinkedSessions: z.boolean().default(true),\n    /** Channels eligible for linked-session notifications. */\n    channels: z.array(z.string().min(1)).default(['telegram', 'weixin']),\n    events: z\n      .array(GoalNotificationEventSchema)\n      .default(['done', 'blocked', 'needs_input', 'queue_failed', 'queue_retry']),\n    targets: z.array(GoalNotificationTargetSchema).default([]),\n  })\n  .strict()\n  .default({\n    enabled: false,\n    includeLinkedSessions: true,\n    channels: ['telegram', 'weixin'],\n    events: ['done', 'blocked', 'needs_input', 'queue_failed', 'queue_retry'],\n    targets: [],\n  });\n\nexport const GoalsConfigSchema = z\n  .object({\n    /** Max continuation turns before auto-pause (Hermes default 20). */\n    maxTurns: z.number().int().min(1).max(500).default(20),\n    /** Optional judge model ref; defaults to the active agent model. */\n    judgeModelRef: z.string().optional(),\n    /**\n     * When true (default), first post-turn runs a decomposition judge to build a checklist;\n     * subsequent turns evaluate progress per item (Hermes-style). When false, use legacy freeform judge only.\n     */\n    checklistMode: z.boolean().default(true),\n    /**\n     * empty_only preserves legacy behavior: the first post-turn decomposition runs only when the\n     * goal has no checklist. supplement_existing lets the first post-turn add non-duplicate judge\n     * criteria even when the user supplied initial acceptance criteria.\n     */\n    checklistDecomposePolicy: z.enum(['empty_only', 'supplement_existing']).default('empty_only'),\n    /** Auto-pause after this many consecutive judge JSON/tool parse failures (Hermes default 3). */\n    maxConsecutiveParseFailures: z.number().int().min(1).max(20).default(3),\n    /** Judge LLM call timeout in ms (Hermes uses 60s). */\n    judgeTimeoutMs: z.number().int().min(5_000).max(120_000).default(60_000),\n    /** Max characters of recent transcript JSON passed to the checklist judge as extra context. */\n    checklistHistoryChars: z.number().int().min(0).max(100_000).default(24_000),\n    /** External channel notification policy for durable goal lifecycle events. */\n    notifications: GoalNotificationsConfigSchema,\n  })\n  .strict();\n\nexport type GoalsConfig = z.infer<typeof GoalsConfigSchema>;\n\nexport const UpdateConfigSchema = z\n  .object({\n    /** Check for updates on gateway startup. Default true. */\n    checkOnStart: z.boolean().default(true),\n    /** Update channel: stable (default), beta, or dev. */\n    channel: z.enum(['stable', 'beta', 'dev']).default('stable'),\n    /** Automatic update policy. */\n    auto: UpdateAutoConfigSchema,\n  })\n  .strict()\n  .optional();\n\nexport type UpdateConfig = z.infer<typeof UpdateConfigSchema>;\n\nexport const CommandsConfigSchema = z\n  .object({\n    restart: z.boolean().optional(),\n  })\n  .strict()\n  .optional();\n\nexport type CommandsConfig = z.infer<typeof CommandsConfigSchema>;\n\nexport const TuiConfigSchema = z\n  .object({\n    /** Default agent id for fresh TUI sessions. Leaves global routing (`agents.default`) untouched. */\n    defaultAgent: z.string().min(1).optional(),\n  })\n  .strict()\n  .default({});\n\nexport type TuiConfig = z.infer<typeof TuiConfigSchema>;\n\n// ============================================\n// MCP (Model Context Protocol)\n// ============================================\n\nconst McpHttpUrlSchema = z\n  .string()\n  .url()\n  .refine((value) => {\n    try {\n      const protocol = new URL(value).protocol;\n      return protocol === 'http:' || protocol === 'https:';\n    } catch {\n      return false;\n    }\n  }, 'MCP server URL must use http or https');\n\nconst ConnectorSecretReferenceSchema = z.object({\n  xopcSecretRef: z.object({\n    provider: z.string().min(1),\n    fieldKey: z.string().min(1),\n  }),\n});\n\nconst McpConfigScalarSchema = z.union([z.string(), z.number(), z.boolean(), ConnectorSecretReferenceSchema]);\n\nexport const McpServerSchema = z\n  .object({\n    command: z.string().optional(),\n    args: z.array(z.string()).optional(),\n    env: z.record(z.string(), McpConfigScalarSchema).optional(),\n    cwd: z.string().optional(),\n    workingDirectory: z.string().optional(),\n    url: McpHttpUrlSchema.optional(),\n    transport: z.enum(['sse', 'streamable-http']).optional(),\n    headers: z.record(z.string(), McpConfigScalarSchema).optional(),\n    connectionTimeoutMs: z.number().finite().positive().optional(),\n  })\n  .catchall(z.unknown())\n  .superRefine((value, ctx) => {\n    const hasCommand = typeof value.command === 'string' && value.command.trim().length > 0;\n    const hasUrl = typeof value.url === 'string' && value.url.trim().length > 0;\n    if (hasCommand && hasUrl) {\n      ctx.addIssue({\n        code: 'custom',\n        message: 'MCP server cannot define both command and url',\n      });\n    }\n  });\n\nexport const McpConfigSchema = z\n  .object({\n    servers: z.record(z.string(), McpServerSchema).optional(),\n    sessionIdleTtlMs: z.number().finite().min(0).optional(),\n  })\n  .strict()\n  .optional();\n\nexport type McpServerConfig = z.infer<typeof McpServerSchema>;\nexport type McpConfig = z.infer<typeof McpConfigSchema>;\n\nexport const ConnectorsConfigSchema = z\n  .object({\n    instances: z.record(z.string(), z.record(z.string(), z.unknown())).optional(),\n  })\n  .strict()\n  .optional();\n\nexport type ConnectorsConfig = z.infer<typeof ConnectorsConfigSchema>;\n\n// ============================================\n// Root Config\n// ============================================\n\nexport const ConfigSchema = z.object({\n  agents: AgentsConfigSchema,\n  bindings: BindingsConfigSchema,\n  session: SessionConfigSchema,\n  channels: ChannelsConfigSchema,\n  gateway: GatewayConfigSchema,\n  browser: BrowserConfigSchema,\n  tunnel: TunnelConfigSchema.optional(),\n  workspace: WorkspaceConfigSchema,\n  tools: ToolsConfigSchema,\n  mcp: McpConfigSchema,\n  connectors: ConnectorsConfigSchema,\n  goals: GoalsConfigSchema.optional(),\n  extensions: ExtensionsConfigSchema.default({}),\n  /** Per-vendor capability provider config (image / audio / video). */\n  providers: ProvidersConfigSchema.optional(),\n  modelsDev: ModelsDevConfigSchema,\n  /** Delivery / presentation concerns (currently `tts`). */\n  messages: MessagesConfigSchema,\n  update: UpdateConfigSchema,\n  commands: CommandsConfigSchema,\n  tui: TuiConfigSchema,\n}).default({\n  agents: {\n    default: 'main',\n    defaultPreset: DEFAULT_CAPABILITY_PRESET_ID,\n    capabilityPresets: {\n      [DEFAULT_CAPABILITY_PRESET_ID]: {\n        id: DEFAULT_CAPABILITY_PRESET_ID,\n        name: 'Global defaults',\n        description: 'Default capabilities inherited by every agent.',\n        version: 1,\n        models: {\n          defaultRole: 'deep',\n          roles: {},\n        },\n      },\n    },\n    list: [\n      {\n        id: 'main',\n        enabled: true,\n        identity: {\n          name: 'Main',\n          role: 'General assistant',\n          language: 'en',\n          tone: 'direct',\n        },\n        responsibilities: {\n          primary: ['Help the user complete tasks'],\n        },\n        workspace: { root: '~/.xopc/workspace/main' },\n        tools: { builtin: {} },\n        skills: { mode: 'all' },\n        memory: {\n          mode: 'confirmWrite',\n          sources: ['session', 'curated'],\n          writePolicy: { curated: 'confirm' },\n        },\n        workflows: {},\n        boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n      },\n    ],\n  },\n  bindings: [],\n  session: {\n    scope: 'per-sender' as const,\n    mainKey: 'main',\n    dmScope: 'main' as const,\n  },\n  channels: {\n    telegram: {\n      enabled: false,\n      debug: false,\n      defaults: {\n        dmPolicy: 'pairing' as const,\n        groupPolicy: 'open' as const,\n        replyToMode: 'off' as const,\n        historyLimit: 50,\n        textChunkLimit: 4000,\n        streaming: { mode: 'partial' as const },\n      },\n      accounts: {\n        default: {\n          accountId: 'default',\n          enabled: true,\n          botToken: '',\n          allowFrom: [],\n          groupAllowFrom: [],\n        },\n      },\n    },\n  },\n  gateway: {\n    bind: 'loopback',\n    port: 18790,\n    auth: {\n      mode: 'token',\n    },\n    heartbeat: {\n      enabled: true,\n      intervalMs: 1_800_000,\n      includeSystemPromptSection: false,\n    },\n    maxSseConnections: 100,\n    corsOrigins: [],\n    skillsMarketplaceProvider: 'skillhub',\n    skillsStoreBaseUrl: 'https://store.xopc.ai',\n  },\n  browser: {\n    enabled: true,\n    backend: 'extension' as const,\n  },\n  tools: {\n    web: {\n      search: {\n        maxResults: 5,\n        providers: [],\n      },\n    },\n  },\n  goals: {\n    maxTurns: 20,\n    checklistMode: true,\n    checklistDecomposePolicy: 'empty_only',\n    maxConsecutiveParseFailures: 3,\n    judgeTimeoutMs: 60_000,\n    checklistHistoryChars: 24_000,\n    notifications: {\n      enabled: false,\n      includeLinkedSessions: true,\n      channels: ['telegram', 'weixin'],\n      events: ['done', 'blocked', 'needs_input', 'queue_failed', 'queue_retry'],\n      targets: [],\n    },\n  },\n  extensions: {\n    allow: [],\n    security: {\n      checkPermissions: true,\n      allowUntrusted: false,\n      allow: [],\n      trackProvenance: true,\n      allowPromptInjection: false,\n    },\n    slots: {},\n  },\n  modelsDev: {\n    enabled: true,\n  },\n  tui: {},\n  // messages.tts / tools.media.audio start undefined; the factory layer fills\n  // in provider-level defaults (model/voice) on demand. Fresh configs don't\n  // ship with enabled providers so they never make surprise STT/TTS calls.\n});\n\nexport type Config = z.infer<typeof ConfigSchema>;\nexport type GatewayAuthConfig = z.infer<typeof GatewayAuthSchema>;\nexport type GatewayTrustedProxyConfig = z.infer<typeof GatewayTrustedProxySchema>;\nexport type GatewayAuthRateLimitConfig = z.infer<typeof GatewayAuthRateLimitSchema>;\nexport type GatewayBindMode = z.infer<typeof GatewayBindModeSchema>;\nexport type STTConfig = z.infer<typeof STTConfigSchema>;\nexport type TTSConfig = z.infer<typeof TTSConfigSchema>;\n\n// ============================================\n// Helper Functions\n// ============================================\n\n/**\n * Parse a model reference string.\n */\nexport interface ParsedModelRef {\n  provider: string;\n  model: string;\n}\n\nexport function getAgentDefaultModelRef(config: Config): string | undefined {\n  const list = Array.isArray(config.agents?.list) ? config.agents.list : [];\n  const defaultId =\n    config.agents?.default?.trim() ||\n    list.find((entry) => (entry as { default?: boolean }).default === true)?.id?.trim() ||\n    list[0]?.id;\n  const agent = list.find((entry) => entry.enabled !== false && entry.id === defaultId) ?? list[0];\n  if (!agent) return undefined;\n\n  let modelRef: string | undefined;\n  const visited = new Set<string>();\n  const applyModels = (models: AgentModelsConfig | undefined): void => {\n    const roles = models?.roles ?? {};\n    const defaultRole = models?.defaultRole ?? Object.keys(roles)[0];\n    const role = defaultRole ? roles[defaultRole] : undefined;\n    const next = role?.model.trim();\n    if (next) modelRef = next;\n  };\n  const applyPreset = (presetId: string): void => {\n    if (visited.has(presetId)) return;\n    visited.add(presetId);\n    const preset = config.agents.capabilityPresets[presetId];\n    if (!preset) return;\n    for (const parent of preset.extends ?? []) {\n      applyPreset(parent);\n    }\n    applyModels(preset.models);\n  };\n\n  applyPreset(config.agents.defaultPreset);\n  for (const presetId of agent.extends ?? []) {\n    if (presetId !== config.agents.defaultPreset) {\n      applyPreset(presetId);\n    }\n  }\n  applyModels(agent.models);\n  return modelRef;\n}\n\n/** `provider/model` or null when invalid. */\nexport function parseModelRef(ref: string): ParsedModelRef | null {\n  const trimmed = ref.trim();\n  const idx = trimmed.indexOf('/');\n  if (idx <= 0 || idx === trimmed.length - 1) {\n    return null;\n  }\n  return { provider: trimmed.slice(0, idx).trim(), model: trimmed.slice(idx + 1).trim() };\n}\n"],"mappings":";;;;;;;;AAyyCA,SAAgB,wBAAwB,QAAoC;CAC1E,MAAM,OAAO,MAAM,QAAQ,OAAO,QAAQ,KAAK,GAAG,OAAO,OAAO,OAAO,EAAE;CACzE,MAAM,YACJ,OAAO,QAAQ,SAAS,MAAM,IAC9B,KAAK,MAAM,UAAW,MAAgC,YAAY,KAAK,EAAE,IAAI,MAAM,IACnF,KAAK,IAAI;CACX,MAAM,QAAQ,KAAK,MAAM,UAAU,MAAM,YAAY,SAAS,MAAM,OAAO,UAAU,IAAI,KAAK;AAC9F,KAAI,CAAC,MAAO,QAAO,KAAA;CAEnB,IAAI;CACJ,MAAM,0BAAU,IAAI,KAAa;CACjC,MAAM,eAAe,WAAgD;EACnE,MAAM,QAAQ,QAAQ,SAAS,EAAE;EACjC,MAAM,cAAc,QAAQ,eAAe,OAAO,KAAK,MAAM,CAAC;EAE9D,MAAM,QADO,cAAc,MAAM,eAAe,KAAA,IAC7B,MAAM,MAAM;AAC/B,MAAI,KAAM,YAAW;;CAEvB,MAAM,eAAe,aAA2B;AAC9C,MAAI,QAAQ,IAAI,SAAS,CAAE;AAC3B,UAAQ,IAAI,SAAS;EACrB,MAAM,SAAS,OAAO,OAAO,kBAAkB;AAC/C,MAAI,CAAC,OAAQ;AACb,OAAK,MAAM,UAAU,OAAO,WAAW,EAAE,CACvC,aAAY,OAAO;AAErB,cAAY,OAAO,OAAO;;AAG5B,aAAY,OAAO,OAAO,cAAc;AACxC,MAAK,MAAM,YAAY,MAAM,WAAW,EAAE,CACxC,KAAI,aAAa,OAAO,OAAO,cAC7B,aAAY,SAAS;AAGzB,aAAY,MAAM,OAAO;AACzB,QAAO;;;AAIT,SAAgB,cAAc,KAAoC;CAChE,MAAM,UAAU,IAAI,MAAM;CAC1B,MAAM,MAAM,QAAQ,QAAQ,IAAI;AAChC,KAAI,OAAO,KAAK,QAAQ,QAAQ,SAAS,EACvC,QAAO;AAET,QAAO;EAAE,UAAU,QAAQ,MAAM,GAAG,IAAI,CAAC,MAAM;EAAE,OAAO,QAAQ,MAAM,MAAM,EAAE,CAAC,MAAM;EAAE;;;;gBAj1CpD;wBAC0B;kBACX;qBA6MI;uBAEqD;AApMhG,uBAAsB,EAChC,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC1C,CAAC,CACD,QAAQ;AAIE,6BAA4B,EACtC,OAAO;EACN,aAAa,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU;EAC3C,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;EACxB,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU;EACjD,CAAC,CACD,QAAQ,CACR,aAAa,OAAO,QAAQ;EAC3B,MAAM,eAAe,QAAgB;GACnC,MAAM,UAAU,IAAI,MAAM;GAC1B,MAAM,MAAM,QAAQ,QAAQ,IAAI;AAChC,UAAO,MAAM,KAAK,MAAM,QAAQ,SAAS;;AAE3C,MAAI,CAAC,YAAY,MAAM,MAAM,CAC3B,KAAI,SAAS;GACX,MAAM;GACN,SAAS,6CAA6C,MAAM,MAAM;GAClE,MAAM,CAAC,QAAQ;GAChB,CAAC;AAEJ,OAAK,MAAM,CAAC,OAAO,cAAc,MAAM,aAAa,EAAE,EAAE,SAAS,CAC/D,KAAI,CAAC,YAAY,SAAS,CACxB,KAAI,SAAS;GACX,MAAM;GACN,SAAS,gDAAgD,SAAS;GAClE,MAAM,CAAC,aAAa,MAAM;GAC3B,CAAC;GAGN;AAIE,8BAA6B,EAChC,OAAO,EAAE,QAAQ,CAAC,MAAM,0BAA0B,EAAE,0BAA0B,CAC9E,UAAU;AAEA,qBAAoB,EAC9B,OAAO;EACN,aAAa,EAAE,QAAQ,CAAC,MAAM,0BAA0B,CAAC,UAAU;EACnE,OAAO;EACR,CAAC,CACD,QAAQ,CACR,UAAU;AAQA,mCAAkC,EAC5C,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAEzC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;;;;;EAKjD,sBAAsB,EAAE,SAAS,CAAC,UAAU;EAC7C,CAAC,CACD,QAAQ;AAME,sBAAqB,EAAE,OAAO;;EAEzC,SAAS,EAAE,QAAQ,CAAC,UAAU;;EAE9B,eAAe,EAAE,QAAQ,CAAC,QAAQ,6BAA6B;EAC/D,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC;EAC3E,MAAM,EAAE,MAAM,uBAAuB,CAAC,QAAQ,EAAE,CAAC;EAClD,CAAC,CAAC,QAAQ,CAAC,QAAQ;EAClB,SAAS;EACT,eAAe;EACf,mBAAmB,GAChB,+BAA+B;GAC9B,IAAI;GACJ,MAAM;GACN,aAAa;GACb,SAAS;GACT,QAAQ;IACN,aAAa;IACb,OAAO,EAAE;IACV;GACF,EACF;EACD,MAAM,CACJ;GACE,IAAI;GACJ,SAAS;GACT,UAAU;IACR,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;IACP;GACD,kBAAkB,EAChB,SAAS,CAAC,+BAA+B,EAC1C;GACD,WAAW,EAAE,MAAM,0BAA0B;GAC7C,OAAO,EAAE,SAAS,EAAE,EAAE;GACtB,QAAQ,EAAE,MAAM,OAAO;GACvB,QAAQ;IACN,MAAM;IACN,SAAS,CAAC,WAAW,UAAU;IAC/B,aAAa,EAAE,SAAS,WAAW;IACpC;GACD,WAAW,EAAE;GACb,YAAY;IAAE,sBAAsB,EAAE;IAAE,WAAW,EAAE;IAAE,YAAY,EAAE;IAAE;GACxE,CACF;EACF,CAAC;AAEI,4BAA2B,EAC9B,OAAO;EACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC,CACD,QAAQ,CACR,UAAU;AAEP,gCAA+B,EAClC,OAAO;EACN,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU;EACtD,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EAClC,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EAC1D,CAAC,CACD,QAAQ,CACR,UAAU;AAEP,4BAA2B,EAC9B,OAAO;EACN,UAAU,EAAE,SAAS,CAAC,UAAU;EAChC,kBAAkB,EAAE,SAAS,CAAC,UAAU;EACxC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,aAAa,OAAO,QAAQ;GAC1D,MAAM,SAAS,cAAc,MAAM;AACnC,OAAI,OAAO,OAAO,MAChB,KAAI,SAAS;IAAE,MAAM;IAAU,SAAS,OAAO;IAAS,CAAC;IAE3D;EACF,YAAY,EAAE,QAAQ,CAAC,UAAU;EACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,qBAAqB,EAAE,QAAQ,CAAC,UAAU;EAC1C,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC1C,CAAC,CACD,QAAQ,CACR,UAAU;AAEA,uBAAsB,EAChC,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,SAAS,EAAE,KAAK;GAAC;GAAS;GAAO;GAAS;GAAa;GAAe,CAAC,CAAC,QAAQ,YAAY;EAC5F,UAAU,EAAE,SAAS,CAAC,UAAU;EAChC,kBAAkB,EAAE,SAAS,CAAC,UAAU;EACxC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU;EAC3D,eAAe,EAAE,KAAK;GAAC;GAAS;GAAe;GAAc,CAAC,CAAC,UAAU;EACzE,OAAO;EACP,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,WAAW;EACX,cAAc;EACd,UAAU,EAAE,SAAS,CAAC,UAAU;EAChC,aAAa,EAAE,KAAK,CAAC,WAAW,UAAU,CAAC,CAAC,UAAU;EACtD,cAAc,EAAE,KAAK;GAAC;GAAgB;GAAgB;GAAc,CAAC,CAAC,UAAU;EAChF,sBAAsB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EAC7D,CAAC,CACD,QAAQ,CACR,QAAQ;EAAE,SAAS;EAAM,SAAS;EAAa,CAAC;AAmBtC,sBAAqB,EAAE,OAAO;EACzC,SAAS,EAAE,QAAQ;EACnB,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC9C,CAAC;AAEW,qBAAoB,EAAE,OAAO;EACxC,IAAI,EAAE,QAAQ,CAAC,UAAU;EACzB,SAAS,EAAE,QAAQ;EACnB,UAAU,EAAE,QAAQ,CAAC,QAAQ,IAAI;EACjC,OAAO;EACP,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EACnC,CAAC;AAEW,wBAAuB,EAAE,MAAM,kBAAkB,CAAC,QAAQ,EAAE,CAAC;AAE7D,wBAAuB,EAAE,KAAK;EACzC;EACA;EACA;EACA;EACD,CAAC;AAEW,8BAA6B,EAAE,OAAO;EACjD,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,YAAY,EAAE,QAAQ,CAAC,UAAU;EAClC,CAAC;AAEW,0BAAyB,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC;AAElD,4BAA2B,EACrC,OAAO;EACN,MAAM,uBAAuB,UAAU;;EAEvC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU;;EAElD,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;EAChD,CAAC,CACD,QAAQ;AAEE,4BAA2B,EACrC,OAAO;EACN,QAAQ,yBAAyB,UAAU;EAC3C,OAAO,yBAAyB,UAAU;EAC1C,QAAQ,yBAAyB,UAAU;EAC5C,CAAC,CACD,QAAQ;AAEE,sBAAqB,EAAE,KAAK,CAAC,cAAc,SAAS,CAAC;AAErD,uBAAsB,EAAE,OAAO;EAC1C,OAAO,mBAAmB,QAAQ,aAAa;EAC/C,SAAS,EAAE,QAAQ,CAAC,QAAQ,OAAO;EACnC,SAAS,qBAAqB,QAAQ,OAAO;EAC7C,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU;EACnE,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC7C,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EACnD,OAAO,yBAAyB,UAAU;EAC1C,aAAa,yBAAyB,UAAU;EAChD,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,UAAU;EACzE,SAAS,2BAA2B,UAAU;EAC/C,CAAC,CAAC,QAAQ;EACT,OAAO;EACP,SAAS;EACT,SAAS;EACV,CAAC;AAGW,wBAAuB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEpE,6BAA4B,EAAE,OAAO;EAChD,MAAM,EAAE,KAAK;GAAC;GAAS;GAAU;GAAQ;GAAU,CAAC;EACpD,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,UAAU,EAAE,SAAS,CAAC,UAAU;EACjC,CAAC;AAIW,yBAAwB,EAAE,OAAO;EAC5C,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE;;EAEjC,WAAW,EAAE,MAAM,0BAA0B,CAAC,QAAQ,EAAE,CAAC;EAC1D,CAAC;AAIW,0BAAyB,EAAE,OAAO;;EAE7C,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;EACzC,CAAC;AAIW,wBAAuB,EAAE,OAAO;;EAE3C,QAAQ,EAAE,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU;EAC3C,QAAQ,sBAAsB,UAAU;;EAExC,WAAW,uBAAuB,UAAU;EAC7C,CAAC;AAIW,qBAAoB,EAAE,OAAO;EACxC,KAAK,qBAAqB,UAAU;;;;;EAKpC,OAAO,EAAE,WAAW,uBAAuB;EAC5C,CAAC,CAAC,QAAQ,EACT,KAAK,EACH,QAAQ;EACN,YAAY;EACZ,WAAW,EAAE;EACd,EACF,EACF,CAAC;AAMW,8BAA6B,EACvC,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;EAC/C,UAAU,EAAE,QAAQ,CAAC,QAAQ,IAAQ;EACrC,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,IAAQ;;EAE5C,WAAW,EAAE,QAAQ,CAAC,UAAU;;EAEhC,gBAAgB,EAAE,SAAS,CAAC,QAAQ,KAAK;;;;;;;EAOzC,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,IAAK;EACvD,CAAC,CACD,UAAU;AAEA,yBAAwB,EAClC,OAAO;;AAEN,QAAQ,EAAE,SAAS,CAAC,UAAU,EAC/B,CAAC,CACD,UAAU;AAEA,6BAA4B,EACtC,OAAO;;EAEN,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;;EAE7B,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE/C,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE1C,eAAe,EAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,QAAQ;AAEE,qBAAoB,EAC9B,OAAO;EACN,MAAM,EAAE,KAAK;GAAC;GAAQ;GAAS;GAAY;GAAgB,CAAC,CAAC,QAAQ,QAAQ;EAC7E,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;;EAE/B,gBAAgB,EAAE,SAAS,CAAC,UAAU;EACtC,WAAW;EACX,cAAc,0BAA0B,UAAU;EACnD,CAAC,CACD,QAAQ,EACP,MAAM,SACP,CAAC;AAES,iCAAgC,EAAE,OAAO;EACpD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC9B,CAAC;AAEW,0BAAyB,EACnC,OAAO;EACN,MAAM,EAAE,KAAK;GAAC;GAAO;GAAS;GAAS,CAAC,CAAC,QAAQ,MAAM;EACvD,aAAa,EAAE,SAAS,CAAC,QAAQ,KAAK;EACtC,SAAS,8BAA8B,UAAU;EAClD,CAAC,CACD,QAAQ;EACP,MAAM;EACN,aAAa;EACd,CAAC;AAES,uBAAsB,EAAE,OAAO;EAC1C,KAAK,EAAE,QAAQ,CAAC,KAAK;EACrB,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,WAAW,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC,CAAC,QAAQ,SAAS;EACtD,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;EACtC,CAAC;AAEW,oBAAmB,EAC7B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;EACnC,cAAc,EAAE,SAAS,CAAC,QAAQ,MAAM;EACxC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC/B,CAAC,CACD,QAAQ;EACP,SAAS;EACT,cAAc;EACf,CAAC;AAES,qBAAoB,EAAE,KAAK,CAAC,SAAS,SAAS,CAAC,CAAC,QAAQ,QAAQ;AAEhE,yBAAwB,EAClC,OAAO;EACN,SAAS,EAAE,SAAS;EACpB,YAAY,EAAE,QAAQ;;EAEtB,4BAA4B,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,MAAM;EACjE,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,iBAAiB,EAAE,SAAS,CAAC,UAAU;EACvC,aAAa,EACV,OAAO;GACN,OAAO,EAAE,QAAQ;GACjB,KAAK,EAAE,QAAQ;GACf,UAAU,EAAE,QAAQ,CAAC,UAAU;GAChC,CAAC,CACD,UAAU;EACd,CAAC,CACD,QAAQ;EACP,SAAS;EACT,YAAY;EACZ,4BAA4B;EAC7B,CAAC;AAES,wCAAuC,EAAE,KAAK;EAAC;EAAQ;EAAO;EAAW,CAAC;AAE1E,uBAAsB,EAAE,OAAO;EAC1C,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC9B,CAAC;AAEW,sBAAqB,EAC/B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;EACnC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,0BAA0B;;EAE9D,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EAChD,WAAW,EAAE,SAAS,CAAC,QAAQ,MAAM;EACrC,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,SAAS,oBAAoB,UAAU;EACxC,CAAC,CACD,QAAQ;EACP,SAAS;EACT,WAAW;EACX,WAAW;EACZ,CAAC;AASS,+BAA8B,EAAE,OAAO;;EAElD,WAAW,EAAE,QAAQ,CAAC,QAAQ,UAAU;;EAExC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,YAAe,CAAC,QAAQ,UAAY;;EAE7E,gBAAgB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC1C,CAAC;AAGW,yBAAwB,EAAE,OAAO,EAC5C,QAAQ,4BAA4B,UAAU,EAC/C,CAAC,CAAC,UAAU;AAGA,yBAAwB,EAAE,KAAK;EAAC;EAAQ;EAAY;EAAO;EAAW;EAAS,CAAC;AAEhF,uBAAsB,EAAE,OAAO;;EAE1C,MAAM,sBAAsB,UAAU;;EAEtC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;EACrC,MAAM,EAAE,QAAQ,CAAC,UAAU;;EAE3B,MAAM,kBAAkB,UAAU;;EAElC,QAAQ,oBAAoB,UAAU;EACtC,WAAW,uBAAuB,UAAU;EAC5C,KAAK,iBAAiB,UAAU;EAChC,MAAM,kBAAkB,UAAU;EAClC,WAAW,sBAAsB,UAAU;EAC3C,mBAAmB,EAAE,QAAQ,CAAC,UAAU;EACxC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;;;;;;;;EAS3C,WAAW,EACR,QAAQ,CACR,aAAa,OAAO,QAAQ;GAC3B,MAAM,SAAS,kBAAkB,MAAM;AACvC,OAAI,OAAO,OAAO,MAChB,KAAI,SAAS;IAAE,MAAM;IAAU,SAAS,sBAAsB,OAAO;IAAW,CAAC;IAEnF,CACD,UAAU;;EAEb,0CAA0C,EAAE,SAAS,CAAC,UAAU;;EAEhE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE9C,qBAAqB,EAAE,SAAS,CAAC,UAAU;EAC3C,UAAU;;;;;;;EAOV,yBAAyB,qCAAqC,UAAU;;EAExE,wBAAwB,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU;;EAErE,4BAA4B,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU;;EAEzE,2BAA2B,EAAE,QAAQ,CAAC,UAAU;;EAEhD,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAE/C,OAAO,EAAE,OAAO;GACd,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;GAElC,cAAc,EAAE,QAAQ,CAAC,IAAI,IAAO,CAAC,IAAI,OAAY,CAAC,QAAQ,MAAW;;GAEzE,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAO,CAAC,IAAI,OAAc,CAAC,QAAQ,OAAY;;GAExE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAO,CAAC,QAAQ,IAAI;;GAE3D,aAAa,EAAE,QAAQ,CAAC,IAAI,QAAU,CAAC,IAAI,YAAe,CAAC,QAAQ,UAAY;;GAE/E,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ;IAC9C;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD,CAAC;;GAEF,WAAW,EAAE,OAAO;IAClB,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAElC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAU,CAAC,IAAI,YAAe,CAAC,QAAQ,WAAc;;IAEzF,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAM;;IAEjE,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,GAAG;;IAErD,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAO;;IAEpE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC1D,CAAC,CAAC,QAAQ;IACT,SAAS;IACT,eAAe;IACf,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,gBAAgB;IACjB,CAAC;GACH,CAAC,CAAC,UAAU;;EAEb,WAAW,EAAE,OAAO;GAClB,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;GAElC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,gBAAgB;;GAE5D,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,OAAY,CAAC,QAAQ,MAAW;;GAE/E,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,OAAc,CAAC,QAAQ,OAAY;;GAE9E,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAM,CAAC,QAAQ,EAAE;GAC7D,QAAQ,EAAE,OAAO;IACf,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAElC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAU,CAAC,IAAI,YAAe,CAAC,QAAQ,SAAY;;IAExF,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAO;;IAElE,yBAAyB,EAAE,SAAS,CAAC,QAAQ,MAAM;IACpD,CAAC,CAAC,QAAQ;IACT,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,yBAAyB;IAC1B,CAAC;GACF,OAAO,EAAE,OAAO;;IAEd,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAElC,sBAAsB,EACnB,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CACxB,QAAQ;KAAC;KAAa;KAAa;KAAM,CAAC;;IAE7C,sBAAsB,EACnB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,CACzC,QAAQ;KAAC;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAK,CAAC;;IAE5D,kBAAkB,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAE3C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,WAAc,CAAC,QAAQ,SAAW;;IAE7E,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAM,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAO;;IAE1E,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,KAAU,CAAC,QAAQ,IAAQ;;IAE7E,sBAAsB,EAAE,SAAS,CAAC,QAAQ,KAAK;IAChD,CAAC,CAAC,QAAQ;IACT,SAAS;IACT,sBAAsB;KAAC;KAAa;KAAa;KAAM;IACvD,sBAAsB;KAAC;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAK;IACtE,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,iBAAiB;IACjB,sBAAsB;IACvB,CAAC;GACH,CAAC,CAAC,UAAU;EACd,CAAC,CAAC,QAAQ;EACT,MAAM;EACN,MAAM;EACN,MAAM,EACJ,MAAM,SACP;EACD,WAAW;GACT,SAAS;GACT,YAAY;GACZ,4BAA4B;GAC7B;EACD,mBAAmB;EACnB,aAAa,EAAE;EACf,2BAA2B;EAC3B,oBAAoB;EACrB,CAAC;AAEW,yBAAwB,EAAE,OAAO,EAC5C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK,EACnC,CAAC,CAAC,QAAQ,EACT,SAAS,MACV,CAAC;AAMI,mCAAkC,EAAE,MAAM;EAC9C,EAAE,QAAQ;EACV,EAAE,QAAQ;EACV,EAAE,SAAS;EACX,EAAE,MAAM;EACR,EAAE,MAAM,EAAE,SAAS,CAAC;EACpB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;EAClC,CAAC;AAEW,2BAA0B,EACpC,OAAO;EACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpD,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC,CACD,SAAS,gCAAgC;AAE/B,2BAA0B,EAAE,OAAO;EAC9C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,SAAS,CAAC;EACjE,CAAC;AAEW,wCAAuC,EACjD,MAAM,EAAE,KAAK;EAAC;EAAS;EAAS;EAAQ,CAAC,CAAC,CAC1C,UAAU;AAEA,iCAAgC,EAC1C,OAAO;EACN,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,cAAc;EACd,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,WAAW,EAAE,EAAE,QAAQ,MAAM,CAAC,CAAC,CAAC,UAAU;EACnE,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpD,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC,CACD,SAAS,gCAAgC;AAE/B,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,UAAU;EAC9C,UAAU,wBAAwB,UAAU;EAC5C,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,UAAU;;EAE5D,QAAQ,EAAE,MAAM,8BAA8B,CAAC,UAAU;;EAEzD,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,CAAC,UAAU;EACpE,CAAC,CACD,QAAQ;AAML,mCAAkC,EAAE,MAAM;EAC9C,EAAE,QAAQ;EACV,EAAE,QAAQ;EACV,EAAE,SAAS;EACX,EAAE,MAAM;EACR,EAAE,MAAM,EAAE,SAAS,CAAC;EACpB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;EAClC,CAAC;AAEW,2BAA0B,EACpC,OAAO;EACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC7B,CAAC,CACD,SAAS,gCAAgC;AAE/B,2BAA0B,EAAE,OAAO;EAC9C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EACJ,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CACxB,QAAQ;GAAC;GAAU;GAAW;GAAW;GAAO,CAAC;EACrD,CAAC;AAEW,iCAAgC,EAAE,OAAO;EACpD,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,WAAW,EAAE,SAAS,CAAC,QAAQ,KAAK;EACpC,eAAe,EAAE,SAAS,CAAC,QAAQ,MAAM;EACzC,YAAY,EAAE,SAAS,CAAC,QAAQ,KAAK;EACrC,cAAc,EAAE,SAAS,CAAC,QAAQ,KAAK;EACvC,oBAAoB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC9C,oBAAoB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC9C,WAAW,EAAE,SAAS,CAAC,QAAQ,MAAM;EACtC,CAAC;AAEW,uBAAsB,EAAE,OAAO;EAC1C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC3B,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,UAAU;EAC7D,CAAC;AAEW,gCAA+B,EAAE,OAAO;EACnD,SAAS,EAAE,SAAS,CAAC,UAAU;EAC/B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;EAChD,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;EAC7C,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC7B,CAAC;AAEW,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,OAAO;EAC3C,SAAS,EAAE,KAAK;GAAC;GAAO;GAAU;GAAW;GAAS,CAAC,CAAC,QAAQ,SAAS;EACzE,UAAU,wBAAwB,UAAU;EAC5C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,IAAI;EACnD,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,QAAQ,IAAM;EAChE,eAAe,6BAA6B,UAAU;EACtD,gBAAgB,8BAA8B,UAAU;;EAExD,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,CAAC,UAAU;EACpE,CAAC,CACD,QAAQ;AAME,wBAAuB,EAAE,OAAO;;AAE3C,KAAK,gBAAgB,UAAU,EAChC,CAAC,CAAC,UAAU;AAEA,+BAA8B;AAE9B,0BAAyB,EACnC,OAAO;;EAEN,QAAQ,EAAE,MAAM,8BAA8B,CAAC,UAAU;;EAEzD,OAAO,4BAA4B,UAAU;EAC9C,CAAC,CACD,UAAU;AAaA,6BAA4B,EACtC,OAAO;;EAEN,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;EAEtC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;EAExC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EACzC,CAAC,CACD,QAAQ;AAGE,kCAAiC,EAC3C,OAAO;;EAEN,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;;EAEjD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrD,CAAC,CACD,QAAQ;AAQE,4BAA2B,EACrC,OAAO;;EAEN,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAEpC,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAEzC,SAAS,+BAA+B,UAAU;;EAElD,OAAO,0BAA0B,UAAU;EAC5C,CAAC,CACD,QAAQ;AASE,yBAAwB,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB;AAStE,iCAAgC,EAAE,OAAO;EACpD,kBAAkB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC3C,gBAAgB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;EACtC,iBAAiB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC1C,sBAAsB,EAAE,SAAS,CAAC,QAAQ,MAAM;EACjD,CAAC;AAGW,8BAA6B,EAAE,OAAO;EACjD,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,iBAAiB,EAAE,QAAQ,CAAC,UAAU;EACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;EACjC,CAAC;AAMW,0BAA6D,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;AAM9F,0BAAyB,EACnC,OAAO;;EAEN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;;EAE9C,mBAAmB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,GAAG;;EAEhD,wBAAwB,EAAE,QAAQ,CAAC,IAAI,IAAK,CAAC,QAAQ,EAAE;EACxD,CAAC,CACD,QAAQ,CACR,UAAU;AAGA,+BAA8B,EAAE,KAAK;EAChD;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEW,gCAA+B,EACzC,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;EACzB,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,UAAU,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU;EACtD,QAAQ,EAAE,SAAS,CAAC,UAAU;EAC9B,QAAQ,EAAE,MAAM,4BAA4B,CAAC,UAAU;EACxD,CAAC,CACD,QAAQ;AAEE,iCAAgC,EAC1C,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,uBAAuB,EAAE,SAAS,CAAC,QAAQ,KAAK;;EAEhD,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,SAAS,CAAC;EACpE,QAAQ,EACL,MAAM,4BAA4B,CAClC,QAAQ;GAAC;GAAQ;GAAW;GAAe;GAAgB;GAAc,CAAC;EAC7E,SAAS,EAAE,MAAM,6BAA6B,CAAC,QAAQ,EAAE,CAAC;EAC3D,CAAC,CACD,QAAQ,CACR,QAAQ;EACP,SAAS;EACT,uBAAuB;EACvB,UAAU,CAAC,YAAY,SAAS;EAChC,QAAQ;GAAC;GAAQ;GAAW;GAAe;GAAgB;GAAc;EACzE,SAAS,EAAE;EACZ,CAAC;AAES,qBAAoB,EAC9B,OAAO;;EAEN,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG;;EAEtD,eAAe,EAAE,QAAQ,CAAC,UAAU;;;;;EAKpC,eAAe,EAAE,SAAS,CAAC,QAAQ,KAAK;;;;;;EAMxC,0BAA0B,EAAE,KAAK,CAAC,cAAc,sBAAsB,CAAC,CAAC,QAAQ,aAAa;;EAE7F,6BAA6B,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE;;EAEvE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAM,CAAC,IAAI,KAAQ,CAAC,QAAQ,IAAO;;EAExE,uBAAuB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,KAAO;;EAE3E,eAAe;EAChB,CAAC,CACD,QAAQ;AAIE,sBAAqB,EAC/B,OAAO;;EAEN,cAAc,EAAE,SAAS,CAAC,QAAQ,KAAK;;EAEvC,SAAS,EAAE,KAAK;GAAC;GAAU;GAAQ;GAAM,CAAC,CAAC,QAAQ,SAAS;;EAE5D,MAAM;EACP,CAAC,CACD,QAAQ,CACR,UAAU;AAIA,wBAAuB,EACjC,OAAO,EACN,SAAS,EAAE,SAAS,CAAC,UAAU,EAChC,CAAC,CACD,QAAQ,CACR,UAAU;AAIA,mBAAkB,EAC5B,OAAO;;AAEN,cAAc,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,EAC3C,CAAC,CACD,QAAQ,CACR,QAAQ,EAAE,CAAC;AAQR,oBAAmB,EACtB,QAAQ,CACR,KAAK,CACL,QAAQ,UAAU;AACjB,MAAI;GACF,MAAM,WAAW,IAAI,IAAI,MAAM,CAAC;AAChC,UAAO,aAAa,WAAW,aAAa;UACtC;AACN,UAAO;;IAER,wCAAwC;AAEvC,kCAAiC,EAAE,OAAO,EAC9C,eAAe,EAAE,OAAO;EACtB,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC3B,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC5B,CAAC,EACH,CAAC;AAEI,yBAAwB,EAAE,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,SAAS;EAAE;EAA+B,CAAC;AAE/F,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,CAAC,UAAU;EAC3D,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,kBAAkB,EAAE,QAAQ,CAAC,UAAU;EACvC,KAAK,iBAAiB,UAAU;EAChC,WAAW,EAAE,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC,UAAU;EACxD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,CAAC,UAAU;EAC/D,qBAAqB,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC/D,CAAC,CACD,SAAS,EAAE,SAAS,CAAC,CACrB,aAAa,OAAO,QAAQ;EAC3B,MAAM,aAAa,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,MAAM,CAAC,SAAS;EACtF,MAAM,SAAS,OAAO,MAAM,QAAQ,YAAY,MAAM,IAAI,MAAM,CAAC,SAAS;AAC1E,MAAI,cAAc,OAChB,KAAI,SAAS;GACX,MAAM;GACN,SAAS;GACV,CAAC;GAEJ;AAES,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,UAAU;EACzD,kBAAkB,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EACxD,CAAC,CACD,QAAQ,CACR,UAAU;AAKA,0BAAyB,EACnC,OAAO,EACN,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,EAC9E,CAAC,CACD,QAAQ,CACR,UAAU;AAQA,gBAAe,EAAE,OAAO;EACnC,QAAQ;EACR,UAAU;EACV,SAAS;EACT,UAAU;EACV,SAAS;EACT,SAAS;EACT,QAAQ,mBAAmB,UAAU;EACrC,WAAW;EACX,OAAO;EACP,KAAK;EACL,YAAY;EACZ,OAAO,kBAAkB,UAAU;EACnC,YAAY,uBAAuB,QAAQ,EAAE,CAAC;;EAE9C,WAAW,sBAAsB,UAAU;EAC3C,WAAW;;EAEX,UAAU;EACV,QAAQ;EACR,UAAU;EACV,KAAK;EACN,CAAC,CAAC,QAAQ;EACT,QAAQ;GACN,SAAS;GACT,eAAe;GACf,mBAAmB,GAChB,+BAA+B;IAC9B,IAAI;IACJ,MAAM;IACN,aAAa;IACb,SAAS;IACT,QAAQ;KACN,aAAa;KACb,OAAO,EAAE;KACV;IACF,EACF;GACD,MAAM,CACJ;IACE,IAAI;IACJ,SAAS;IACT,UAAU;KACR,MAAM;KACN,MAAM;KACN,UAAU;KACV,MAAM;KACP;IACD,kBAAkB,EAChB,SAAS,CAAC,+BAA+B,EAC1C;IACD,WAAW,EAAE,MAAM,0BAA0B;IAC7C,OAAO,EAAE,SAAS,EAAE,EAAE;IACtB,QAAQ,EAAE,MAAM,OAAO;IACvB,QAAQ;KACN,MAAM;KACN,SAAS,CAAC,WAAW,UAAU;KAC/B,aAAa,EAAE,SAAS,WAAW;KACpC;IACD,WAAW,EAAE;IACb,YAAY;KAAE,sBAAsB,EAAE;KAAE,WAAW,EAAE;KAAE,YAAY,EAAE;KAAE;IACxE,CACF;GACF;EACD,UAAU,EAAE;EACZ,SAAS;GACP,OAAO;GACP,SAAS;GACT,SAAS;GACV;EACD,UAAU,EACR,UAAU;GACR,SAAS;GACT,OAAO;GACP,UAAU;IACR,UAAU;IACV,aAAa;IACb,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,WAAW,EAAE,MAAM,WAAoB;IACxC;GACD,UAAU,EACR,SAAS;IACP,WAAW;IACX,SAAS;IACT,UAAU;IACV,WAAW,EAAE;IACb,gBAAgB,EAAE;IACnB,EACF;GACF,EACF;EACD,SAAS;GACP,MAAM;GACN,MAAM;GACN,MAAM,EACJ,MAAM,SACP;GACD,WAAW;IACT,SAAS;IACT,YAAY;IACZ,4BAA4B;IAC7B;GACD,mBAAmB;GACnB,aAAa,EAAE;GACf,2BAA2B;GAC3B,oBAAoB;GACrB;EACD,SAAS;GACP,SAAS;GACT,SAAS;GACV;EACD,OAAO,EACL,KAAK,EACH,QAAQ;GACN,YAAY;GACZ,WAAW,EAAE;GACd,EACF,EACF;EACD,OAAO;GACL,UAAU;GACV,eAAe;GACf,0BAA0B;GAC1B,6BAA6B;GAC7B,gBAAgB;GAChB,uBAAuB;GACvB,eAAe;IACb,SAAS;IACT,uBAAuB;IACvB,UAAU,CAAC,YAAY,SAAS;IAChC,QAAQ;KAAC;KAAQ;KAAW;KAAe;KAAgB;KAAc;IACzE,SAAS,EAAE;IACZ;GACF;EACD,YAAY;GACV,OAAO,EAAE;GACT,UAAU;IACR,kBAAkB;IAClB,gBAAgB;IAChB,OAAO,EAAE;IACT,iBAAiB;IACjB,sBAAsB;IACvB;GACD,OAAO,EAAE;GACV;EACD,WAAW,EACT,SAAS,MACV;EACD,KAAK,EAAE;EAIR,CAAC"}
+{"version":3,"file":"schema.js","names":[],"sources":["../../../src/config/schema.ts"],"sourcesContent":["import { z } from 'zod';\n\nimport {\n  AgentConfigEntrySchema,\n  CapabilityPresetSchema,\n  DEFAULT_CAPABILITY_PRESET_ID,\n} from '../agent-manifest/schema.js';\nimport { checkCacheDir } from '../browser/cache-dir-policy.js';\nimport { DEFAULT_AGENT_MODELS } from './default-model.js';\nimport { validatePublicUrl } from './public-url.js';\n\n// ============================================\n// Agent Configs\n// ============================================\n\n/**\n * Agent model ref. Always an object with explicit `primary` and optional\n * `fallbacks` chain. No string-form shorthand — every write site builds the\n * object explicitly so reads never branch on shape.\n */\nexport const AgentModelRefSchema = z\n  .object({\n    primary: z.string().min(1),\n    fallbacks: z.array(z.string()).optional(),\n  })\n  .strict();\n\nexport type AgentModelConfig = z.infer<typeof AgentModelRefSchema>;\n\n/**\n * Image-generation model ref. {@link AgentModelRefSchema} plus runtime knobs\n * (`timeoutMs`, `autoProviderFallback`) used by the image-generation runtime.\n */\nexport const AgentImageGenerationModelSchema = z\n  .object({\n    primary: z.string().min(1),\n    fallbacks: z.array(z.string()).optional(),\n    /** Hard cap for the whole generation attempt (ms). */\n    timeoutMs: z.number().int().positive().optional(),\n    /**\n     * When all `primary + fallbacks` candidates fail, sweep every other\n     * configured provider before giving up.\n     */\n    autoProviderFallback: z.boolean().optional(),\n  })\n  .strict();\n\nexport type AgentImageGenerationModelConfig = z.infer<typeof AgentImageGenerationModelSchema>;\n\nexport const AgentTypedModelRoleSchema = z\n  .object({\n    description: z.string().max(500).optional(),\n    model: z.string().min(1),\n    fallbacks: z.array(z.string().min(1)).optional(),\n  })\n  .strict()\n  .superRefine((entry, ctx) => {\n    const validateRef = (ref: string) => {\n      const trimmed = ref.trim();\n      const idx = trimmed.indexOf('/');\n      return idx > 0 && idx < trimmed.length - 1;\n    };\n    if (!validateRef(entry.model)) {\n      ctx.addIssue({\n        code: 'custom',\n        message: `model must be provider/model format (got '${entry.model}')`,\n        path: ['model'],\n      });\n    }\n    for (const [index, fallback] of (entry.fallbacks ?? []).entries()) {\n      if (!validateRef(fallback)) {\n        ctx.addIssue({\n          code: 'custom',\n          message: `fallback must be provider/model format (got '${fallback}')`,\n          path: ['fallbacks', index],\n        });\n      }\n    }\n  });\n\nexport type AgentTypedModelRole = z.infer<typeof AgentTypedModelRoleSchema>;\n\nconst AgentTypedModelRolesSchema = z\n  .record(z.string().regex(/^[a-z][a-z0-9_-]{0,63}$/), AgentTypedModelRoleSchema)\n  .optional();\n\nexport const AgentModelsSchema = z\n  .object({\n    defaultRole: z.string().regex(/^[a-z][a-z0-9_-]{0,63}$/).optional(),\n    roles: AgentTypedModelRolesSchema,\n    imageModel: AgentModelRefSchema.optional(),\n    imageGenerationModel: AgentImageGenerationModelSchema.optional(),\n  })\n  .strict()\n  .optional();\n\nexport type AgentModelsConfig = z.infer<typeof AgentModelsSchema>;\n\nexport type AgentTypedModel = AgentTypedModelRole & { id: string };\n\nexport const AgentsConfigSchema = z.object({\n  /** Default agent id when not specified (routing / session creation). */\n  default: z.string().optional(),\n  /** Protected global defaults preset applied before each agent's own presets. */\n  defaultPreset: z.string().default(DEFAULT_CAPABILITY_PRESET_ID),\n  capabilityPresets: z.record(z.string(), CapabilityPresetSchema).default({}),\n  list: z.array(AgentConfigEntrySchema).default([]),\n}).strict().default({\n  default: 'main',\n  defaultPreset: DEFAULT_CAPABILITY_PRESET_ID,\n  capabilityPresets: {\n    [DEFAULT_CAPABILITY_PRESET_ID]: {\n      id: DEFAULT_CAPABILITY_PRESET_ID,\n      name: 'Global defaults',\n      description: 'Default capabilities inherited by every agent.',\n      version: 1,\n      models: DEFAULT_AGENT_MODELS,\n    },\n  },\n  list: [\n    {\n      id: 'main',\n      enabled: true,\n      identity: {\n        name: 'Main',\n        role: 'General assistant',\n        language: 'en',\n        tone: 'direct',\n      },\n      responsibilities: {\n        primary: ['Help the user complete tasks'],\n      },\n      workspace: { root: '~/.xopc/workspace/main' },\n      tools: { builtin: {} },\n      skills: { mode: 'all' },\n      memory: {\n        mode: 'confirmWrite',\n        sources: ['session', 'curated'],\n        writePolicy: { curated: 'confirm' },\n      },\n      workflows: {},\n      boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n    },\n  ],\n});\n\nconst BrowserCloudConfigSchema = z\n  .object({\n    apiKey: z.string().optional(),\n    projectId: z.string().optional(),\n    region: z.string().optional(),\n  })\n  .strict()\n  .optional();\n\nconst BrowserExtensionConfigSchema = z\n  .object({\n    port: z.number().int().min(1024).max(65535).optional(),\n    host: z.string().min(1).optional(),\n    connectionTimeout: z.number().int().positive().optional(),\n  })\n  .strict()\n  .optional();\n\nconst BrowserCloakConfigSchema = z\n  .object({\n    keepOpen: z.boolean().optional(),\n    temporaryProfile: z.boolean().optional(),\n    cacheDir: z.string().optional().superRefine((value, ctx) => {\n      const result = checkCacheDir(value);\n      if (result.ok === false) {\n        ctx.addIssue({ code: 'custom', message: result.message });\n      }\n    }),\n    binaryPath: z.string().optional(),\n    timezone: z.string().optional(),\n    locale: z.string().optional(),\n    webrtcIp: z.string().optional(),\n    fingerprintPlatform: z.string().optional(),\n    extraArgs: z.array(z.string()).optional(),\n  })\n  .strict()\n  .optional();\n\nexport const BrowserConfigSchema = z\n  .object({\n    enabled: z.boolean().default(true),\n    backend: z.enum(['local', 'cdp', 'cloud', 'extension', 'cloakbrowser']).default('extension'),\n    headless: z.boolean().optional(),\n    allowPrivateUrls: z.boolean().optional(),\n    commandTimeout: z.number().int().min(5).max(900).optional(),\n    cloudProvider: z.enum(['local', 'browserbase', 'browser-use']).optional(),\n    cloud: BrowserCloudConfigSchema,\n    cdpUrl: z.string().optional(),\n    extension: BrowserExtensionConfigSchema,\n    cloakbrowser: BrowserCloakConfigSchema,\n    humanize: z.boolean().optional(),\n    humanPreset: z.enum(['default', 'careful']).optional(),\n    dialogPolicy: z.enum(['must_respond', 'auto_dismiss', 'auto_accept']).optional(),\n    dialogTimeoutSeconds: z.number().int().positive().optional(),\n  })\n  .strict()\n  .default({ enabled: true, backend: 'extension' });\n\n// ============================================\n// Channel Configs (per-channel Zod lives in bundled extensions; root schema is open)\n// ============================================\n\nexport {\n  TelegramTopicConfigSchema,\n  TelegramGroupConfigSchema,\n  TelegramAccountConfigSchema,\n  TelegramConfigSchema,\n} from '../../extensions/telegram/src/config-schema.js';\nexport type { TelegramConfig } from '../../extensions/telegram/src/config-schema.js';\nexport { WeixinAccountConfigSchema, WeixinConfigSchema } from '../../extensions/weixin/src/config-schema.js';\nexport type { WeixinConfig } from '../../extensions/weixin/src/config-schema.js';\n// ============================================\n// Session Routing Configuration\n// ============================================\n\nexport const BindingMatchSchema = z.object({\n  channel: z.string(),\n  accountId: z.string().optional(),\n  peerKind: z.string().optional(),\n  peerId: z.string().optional(),\n  guildId: z.string().optional(),\n  teamId: z.string().optional(),\n  memberRoleIds: z.array(z.string()).optional(),\n});\n\nexport const BindingRuleSchema = z.object({\n  id: z.string().optional(),\n  agentId: z.string(),\n  priority: z.number().default(100),\n  match: BindingMatchSchema,\n  enabled: z.boolean().default(true),\n});\n\nexport const BindingsConfigSchema = z.array(BindingRuleSchema).default([]);\n\nexport const SessionDmScopeSchema = z.enum([\n  'main',\n  'per-peer',\n  'per-channel-peer',\n  'per-account-channel-peer',\n]);\n\nexport const SessionStorageConfigSchema = z.object({\n  pruneAfterMs: z.number().optional(),\n  maxEntries: z.number().optional(),\n});\n\nexport const SessionResetModeSchema = z.enum(['daily', 'idle']);\n\nexport const SessionResetConfigSchema = z\n  .object({\n    mode: SessionResetModeSchema.optional(),\n    /** Local hour (0–23) for the daily reset boundary. */\n    atHour: z.number().int().min(0).max(23).optional(),\n    /** Sliding idle window (minutes). When set with daily mode, whichever expires first wins. */\n    idleMinutes: z.number().int().min(0).optional(),\n  })\n  .strict();\n\nexport const SessionResetByTypeSchema = z\n  .object({\n    direct: SessionResetConfigSchema.optional(),\n    group: SessionResetConfigSchema.optional(),\n    thread: SessionResetConfigSchema.optional(),\n  })\n  .strict();\n\nexport const SessionScopeSchema = z.enum(['per-sender', 'global']);\n\nexport const SessionConfigSchema = z.object({\n  scope: SessionScopeSchema.default('per-sender'),\n  mainKey: z.string().default('main'),\n  dmScope: SessionDmScopeSchema.default('main'),\n  identityLinks: z.record(z.string(), z.array(z.string())).optional(),\n  resetTriggers: z.array(z.string()).optional(),\n  idleMinutes: z.number().int().positive().optional(),\n  reset: SessionResetConfigSchema.optional(),\n  resetByType: SessionResetByTypeSchema.optional(),\n  resetByChannel: z.record(z.string(), SessionResetConfigSchema).optional(),\n  storage: SessionStorageConfigSchema.optional(),\n}).default({\n  scope: 'per-sender',\n  mainKey: 'main',\n  dmScope: 'main',\n});\n\n/** Channel buckets — shapes validated post-parse by registered channel plugins. */\nexport const ChannelsConfigSchema = z.record(z.string(), z.unknown()).default({});\n\nexport const SearchProviderEntrySchema = z.object({\n  type: z.enum(['brave', 'tavily', 'bing', 'searxng']),\n  apiKey: z.string().optional(),\n  /** SearXNG instance base URL (e.g. http://localhost:8080) */\n  url: z.string().optional(),\n  disabled: z.boolean().optional(),\n});\n\nexport type SearchProviderEntry = z.infer<typeof SearchProviderEntrySchema>;\n\nexport const WebSearchConfigSchema = z.object({\n  maxResults: z.number().default(5),\n  /** Ordered API providers; empty → HTML fallback only */\n  providers: z.array(SearchProviderEntrySchema).default([]),\n});\n\nexport type WebSearchConfig = z.infer<typeof WebSearchConfigSchema>;\n\nexport const WebsiteBlocklistSchema = z.object({\n  /** Master switch. Default false (no blocking). */\n  enabled: z.boolean().default(false),\n  /** Domain patterns to block (e.g. \"example.com\", \"*.evil.org\"). */\n  domains: z.array(z.string()).default([]),\n});\n\nexport type WebsiteBlocklistConfig = z.infer<typeof WebsiteBlocklistSchema>;\n\nexport const WebToolsConfigSchema = z.object({\n  /** Search result HTML fallback: cn → Bing, otherwise DuckDuckGo */\n  region: z.enum(['cn', 'global']).optional(),\n  search: WebSearchConfigSchema.optional(),\n  /** Domain blocklist for web_fetch / web_extract / browser tools. */\n  blocklist: WebsiteBlocklistSchema.optional(),\n});\n\nexport type WebToolsConfig = z.infer<typeof WebToolsConfigSchema>;\n\nexport const ToolsConfigSchema = z.object({\n  web: WebToolsConfigSchema.optional(),\n  /**\n   * Per-capability media providers. Currently only `audio` (STT) is wired;\n   * `image` / `video` slots are reserved for future capabilities.\n   */\n  media: z.lazy(() => ToolsMediaConfigSchema),\n}).default({\n  web: {\n    search: {\n      maxResults: 5,\n      providers: [],\n    },\n  },\n});\n\n// ============================================\n// Gateway Configuration\n// ============================================\n\nexport const GatewayAuthRateLimitSchema = z\n  .object({\n    enabled: z.boolean().default(true),\n    maxAttempts: z.number().int().min(1).default(5),\n    windowMs: z.number().default(900_000),\n    blockDurationMs: z.number().default(300_000),\n    /** OpenClaw alias for blockDurationMs. */\n    lockoutMs: z.number().optional(),\n    /** Skip rate limiting for loopback client IPs (default true). Remote browser Origin requests never exempt. */\n    exemptLoopback: z.boolean().default(true),\n    /**\n     * Coalesce same-client failures arriving within this window into a single\n     * attempt. Absorbs SPA fan-out / SDK auto-retry storms without weakening\n     * brute-force protection (deliberate attackers are still rate-limited to\n     * one effective attempt per window). Set to 0 to disable.\n     */\n    burstCoalesceMs: z.number().int().min(0).default(1000),\n  })\n  .optional();\n\nexport const GatewaySecuritySchema = z\n  .object({\n    /** When true, non-loopback binds require explicit gateway.auth.rateLimit configuration. */\n    strict: z.boolean().optional(),\n  })\n  .optional();\n\nexport const GatewayTrustedProxySchema = z\n  .object({\n    /** Header set by the reverse proxy with the authenticated user identity. */\n    userHeader: z.string().min(1),\n    /** Additional headers that must be present (e.g. proxy auth markers). */\n    requiredHeaders: z.array(z.string()).optional(),\n    /** When non-empty, only these user identities are allowed. */\n    allowUsers: z.array(z.string()).optional(),\n    /** Allow trusted-proxy auth when the TCP source is loopback (same-host reverse proxy). */\n    allowLoopback: z.boolean().optional(),\n  })\n  .strict();\n\nexport const GatewayAuthSchema = z\n  .object({\n    mode: z.enum(['none', 'token', 'password', 'trusted-proxy']).default('token'),\n    token: z.string().optional(),\n    password: z.string().optional(),\n    /** When true (default for Serve), browser UI may auth via Tailscale identity headers. API routes still require token. */\n    allowTailscale: z.boolean().optional(),\n    rateLimit: GatewayAuthRateLimitSchema,\n    trustedProxy: GatewayTrustedProxySchema.optional(),\n  })\n  .default({\n    mode: 'token',\n  });\n\nexport const GatewayTailscaleConsentSchema = z.object({\n  version: z.string().min(1),\n  acceptedAt: z.string().min(1),\n});\n\nexport const GatewayTailscaleSchema = z\n  .object({\n    mode: z.enum(['off', 'serve', 'funnel']).default('off'),\n    resetOnExit: z.boolean().default(true),\n    consent: GatewayTailscaleConsentSchema.optional(),\n  })\n  .default({\n    mode: 'off',\n    resetOnExit: true,\n  });\n\nexport const GatewayRemoteSchema = z.object({\n  url: z.string().url(),\n  token: z.string().optional(),\n  password: z.string().optional(),\n  transport: z.enum(['direct', 'ssh']).default('direct'),\n  sshTarget: z.string().optional(),\n  sshIdentity: z.string().optional(),\n  tlsFingerprint: z.string().optional(),\n});\n\nexport const GatewayTlsSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    autoGenerate: z.boolean().default(false),\n    certPath: z.string().optional(),\n    keyPath: z.string().optional(),\n  })\n  .default({\n    enabled: false,\n    autoGenerate: false,\n  });\n\nexport const GatewayModeSchema = z.enum(['local', 'remote']).default('local');\n\nexport const HeartbeatConfigSchema = z\n  .object({\n    enabled: z.boolean(),\n    intervalMs: z.number(),\n    /** When false, heartbeat instructions are only sent during heartbeat polling turns (not in every chat system prompt). */\n    includeSystemPromptSection: z.boolean().optional().default(false),\n    target: z.string().optional(),\n    targetChatId: z.string().optional(),\n    prompt: z.string().optional(),\n    ackMaxChars: z.number().optional(),\n    isolatedSession: z.boolean().optional(),\n    activeHours: z\n      .object({\n        start: z.string(),\n        end: z.string(),\n        timezone: z.string().optional(),\n      })\n      .optional(),\n  })\n  .default({\n    enabled: true,\n    intervalMs: 1_800_000,\n    includeSystemPromptSection: false,\n  });\n\nexport const GatewayChannelConnectDeferModeSchema = z.enum(['auto', 'off', 'explicit']);\n\nexport const TunnelConsentSchema = z.object({\n  version: z.string().min(1),\n  acceptedAt: z.string().min(1),\n});\n\nexport const TunnelConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    brokerUrl: z.string().url().default('https://frp.xopc.ai/api'),\n    /** Broker register API secret (env `XOPC_TUNNEL_REGISTRATION_SECRET` overrides when set). */\n    registrationSecret: z.string().min(1).optional(),\n    autoStart: z.boolean().default(false),\n    subdomain: z.string().optional(),\n    consent: TunnelConsentSchema.optional(),\n  })\n  .default({\n    enabled: false,\n    brokerUrl: 'https://frp.xopc.ai/api',\n    autoStart: false,\n  });\n\nexport type TunnelConfig = z.infer<typeof TunnelConfigSchema>;\n\n/**\n * Workspace-scoped concerns (file import, etc.). Distinct from\n * agent manifest workspace roots; this block carries\n * feature configuration for workspace-related routes.\n */\nexport const WorkspaceImportConfigSchema = z.object({\n  /** Workspace-relative subdir for imported files. Default `imports`. */\n  targetDir: z.string().default('imports'),\n  /** Per-file byte cap. Default 100 MiB. */\n  maxBytes: z.number().int().min(1024).max(10_737_418_240).default(104_857_600),\n  /** When false, the route rejects `onConflict: 'overwrite'`. Default true. */\n  allowOverwrite: z.boolean().default(true),\n});\nexport type WorkspaceImportConfig = z.infer<typeof WorkspaceImportConfigSchema>;\n\nexport const WorkspaceConfigSchema = z.object({\n  import: WorkspaceImportConfigSchema.optional(),\n}).optional();\nexport type WorkspaceConfig = z.infer<typeof WorkspaceConfigSchema>;\n\nexport const GatewayBindModeSchema = z.enum(['auto', 'loopback', 'lan', 'tailnet', 'custom']);\n\nexport const GatewayConfigSchema = z.object({\n  /** Semantic bind mode. */\n  bind: GatewayBindModeSchema.optional(),\n  /** IPv4 listen address when `bind` is `custom`. */\n  customBindHost: z.string().optional(),\n  port: z.number().optional(),\n  /** local: this process runs the gateway; remote: CLI clients target gateway.remote. */\n  mode: GatewayModeSchema.optional(),\n  /** Persistent remote gateway target for CLI/TUI/MCP when mode=remote. */\n  remote: GatewayRemoteSchema.optional(),\n  tailscale: GatewayTailscaleSchema.optional(),\n  tls: GatewayTlsSchema.optional(),\n  auth: GatewayAuthSchema.optional(),\n  heartbeat: HeartbeatConfigSchema.optional(),\n  maxSseConnections: z.number().optional(),\n  corsOrigins: z.array(z.string()).optional(),\n  /**\n   * Reverse-proxy publicly reachable URL (e.g. `https://gateway.example.com`).\n   * Optional. When set, mobile pairing surfaces this URL as the preferred\n   * baseUrl and it is auto-added to the browser CORS/CSRF allowlist.\n   * - Must be a URL with no path / query / userinfo.\n   * - Must use `https:` for public hosts; `http:` is only allowed when the\n   *   hostname is in an RFC1918 / `.local` private range.\n   */\n  publicUrl: z\n    .string()\n    .superRefine((value, ctx) => {\n      const result = validatePublicUrl(value);\n      if (result.ok === false) {\n        ctx.addIssue({ code: 'custom', message: `gateway.publicUrl: ${result.message}` });\n      }\n    })\n    .optional(),\n  /** Dangerous: allow browser Origin to match the HTTP Host header when not in corsOrigins. */\n  dangerouslyAllowHostHeaderOriginFallback: z.boolean().optional(),\n  /** CIDRs or exact IPs of reverse proxies allowed to terminate auth (trusted-proxy mode). */\n  trustedProxies: z.array(z.string()).optional(),\n  /** When true, fall back to X-Real-IP if X-Forwarded-For chain parsing fails. Default false (fail closed). */\n  allowRealIpFallback: z.boolean().optional(),\n  security: GatewaySecuritySchema,\n  /**\n   * How channel `start()` is split around HTTP listen when using `GatewayServer`.\n   * - `auto` (default): defer ids come from channel plugin `meta.deferConnectUntilAfterListen` + enabled config.\n   * - `off`: always start all channels in phase1 (troubleshooting / strict ordering).\n   * - `explicit`: defer only `channelConnectDeferIds` (empty = defer none).\n   */\n  channelConnectDeferMode: GatewayChannelConnectDeferModeSchema.optional(),\n  /** When `channelConnectDeferMode` is `explicit`, these channel plugin ids are deferred until after listen. */\n  channelConnectDeferIds: z.array(z.string().min(1)).max(24).optional(),\n  /** Removed from the defer set (applied after `auto` or `explicit` resolution). */\n  channelConnectDeferSkipIds: z.array(z.string().min(1)).max(24).optional(),\n  /** Default skills marketplace provider id. Built-in: 'store', 'skillhub', 'clawhub'. Extensions may register more. */\n  skillsMarketplaceProvider: z.string().optional(),\n  /** Base URL for the xopc skills marketplace (public REST API). */\n  skillsStoreBaseUrl: z.string().url().optional(),\n  /** File sharing configuration (temporary public download links for workspace files). */\n  share: z.object({\n    enabled: z.boolean().default(true),\n    /** Default TTL in ms (default 24h). */\n    defaultTtlMs: z.number().min(60_000).max(604_800_000).default(86_400_000),\n    /** Maximum TTL in ms (default 7 days). */\n    maxTtlMs: z.number().min(60_000).max(2_592_000_000).default(604_800_000),\n    /** Maximum concurrent active shares (default 100). */\n    maxActiveShares: z.number().min(1).max(10_000).default(100),\n    /** Maximum shareable file size in bytes (default 100MB). */\n    maxFileSize: z.number().min(1_048_576).max(10_737_418_240).default(104_857_600),\n    /** MIME types allowed for inline preview (?inline=1). */\n    inlinePreviewMimes: z.array(z.string()).default([\n      'image/png',\n      'image/jpeg',\n      'image/gif',\n      'image/webp',\n      'image/svg+xml',\n      'application/pdf',\n      'text/html',\n      'text/markdown',\n      'text/plain',\n      'application/json',\n    ]),\n    /** Folder-sharing controls (browse + ZIP). */\n    directory: z.object({\n      enabled: z.boolean().default(true),\n      /** Maximum folder size in bytes at scan time (default 1 GB). */\n      maxFolderSize: z.number().int().min(1_048_576).max(10_737_418_240).default(1_073_741_824),\n      /** Maximum number of entries scanned for a single folder share. */\n      maxFileCount: z.number().int().min(1).max(100_000).default(1_000),\n      /** Traversal depth cap (defense against recursive symlinks). */\n      maxDepth: z.number().int().min(1).max(64).default(20),\n      /** In-memory directory listing cache TTL. */\n      listingCacheMs: z.number().int().min(0).max(600_000).default(60_000),\n      /** Maximum simultaneous ZIP streams per share token. */\n      zipConcurrency: z.number().int().min(1).max(8).default(1),\n    }).default({\n      enabled: true,\n      maxFolderSize: 1_073_741_824,\n      maxFileCount: 1_000,\n      maxDepth: 20,\n      listingCacheMs: 60_000,\n      zipConcurrency: 1,\n    }),\n  }).optional(),\n  /** Site-share configuration (static directory or reverse-proxy a local dev server). */\n  siteShare: z.object({\n    enabled: z.boolean().default(true),\n    /** Public host suffix that subdomain shares are served under. */\n    publicHostSuffix: z.string().min(1).default('share.xopc.ai'),\n    /** Default TTL in ms (default 6h, shorter than file shares — live app surface). */\n    defaultTtlMs: z.number().int().min(60_000).max(604_800_000).default(21_600_000),\n    /** Maximum TTL in ms (default 7 days). */\n    maxTtlMs: z.number().int().min(60_000).max(2_592_000_000).default(604_800_000),\n    /** Maximum concurrent active site shares. */\n    maxActiveSites: z.number().int().min(1).max(1_000).default(5),\n    static: z.object({\n      enabled: z.boolean().default(true),\n      /** Maximum total bytes of files served per static site. */\n      maxRootDirSize: z.number().int().min(1_048_576).max(10_737_418_240).default(524_288_000),\n      /** Maximum file count under root dir. */\n      maxFileCount: z.number().int().min(1).max(100_000).default(10_000),\n      /** Whether HTML/CSS rewrite of absolute paths is on by default. */\n      rewriteEnabledByDefault: z.boolean().default(false),\n    }).default({\n      enabled: true,\n      maxRootDirSize: 524_288_000,\n      maxFileCount: 10_000,\n      rewriteEnabledByDefault: false,\n    }),\n    proxy: z.object({\n      /** Reverse-proxy mode default-enabled per the product brief. */\n      enabled: z.boolean().default(true),\n      /** Upstream host whitelist. Loopback by default. */\n      allowedUpstreamHosts: z\n        .array(z.string().min(1))\n        .default(['127.0.0.1', 'localhost', '::1']),\n      /** Upstream port whitelist (common dev-server ports). */\n      allowedUpstreamPorts: z\n        .array(z.number().int().min(1).max(65535))\n        .default([3000, 3001, 4321, 5173, 8000, 8080, 8888, 9000]),\n      /** Whether to forward WebSocket upgrades. */\n      forwardWebSocket: z.boolean().default(true),\n      /** Maximum request body size in bytes (50 MB). */\n      bodySizeLimit: z.number().int().min(0).max(1_073_741_824).default(52_428_800),\n      /** Per-request HTTP timeout in ms. */\n      requestTimeoutMs: z.number().int().min(1_000).max(600_000).default(30_000),\n      /** Per-WebSocket idle timeout in ms. */\n      wsIdleTimeoutMs: z.number().int().min(10_000).max(3_600_000).default(300_000),\n      /** Rewrite Set-Cookie Path attribute (subpath mode only). */\n      rewriteSetCookiePath: z.boolean().default(true),\n    }).default({\n      enabled: true,\n      allowedUpstreamHosts: ['127.0.0.1', 'localhost', '::1'],\n      allowedUpstreamPorts: [3000, 3001, 4321, 5173, 8000, 8080, 8888, 9000],\n      forwardWebSocket: true,\n      bodySizeLimit: 52_428_800,\n      requestTimeoutMs: 30_000,\n      wsIdleTimeoutMs: 300_000,\n      rewriteSetCookiePath: true,\n    }),\n  }).optional(),\n}).default({\n  bind: 'loopback',\n  port: 18790,\n  auth: {\n    mode: 'token',\n  },\n  heartbeat: {\n    enabled: true,\n    intervalMs: 1_800_000,\n    includeSystemPromptSection: false,\n  },\n  maxSseConnections: 100,\n  corsOrigins: [],\n  skillsMarketplaceProvider: 'skillhub',\n  skillsStoreBaseUrl: 'https://store.xopc.ai',\n});\n\nexport const ModelsDevConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n}).default({\n  enabled: true,\n});\n\n// ============================================\n// STT (Speech-to-Text) Config\n// ============================================\n\nconst SttProviderConfigCatchallSchema = z.union([\n  z.string(),\n  z.number(),\n  z.boolean(),\n  z.null(),\n  z.array(z.unknown()),\n  z.record(z.string(), z.unknown()),\n]);\n\nexport const STTProviderConfigSchema = z\n  .object({\n    apiKey: z.string().optional(),\n    model: z.string().optional(),\n    baseUrl: z.string().optional(),\n    headers: z.record(z.string(), z.string()).optional(),\n    language: z.string().optional(),\n    prompt: z.string().optional(),\n  })\n  .catchall(SttProviderConfigCatchallSchema);\n\nexport const STTFallbackConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  order: z.array(z.string().min(1)).default(['alibaba', 'openai']),\n});\n\nexport const MediaUnderstandingCapabilitiesSchema = z\n  .array(z.enum(['image', 'audio', 'video']))\n  .optional();\n\nexport const MediaUnderstandingModelSchema = z\n  .object({\n    provider: z.string().optional(),\n    model: z.string().optional(),\n    capabilities: MediaUnderstandingCapabilitiesSchema,\n    type: z.union([z.literal('provider'), z.literal('cli')]).optional(),\n    command: z.string().optional(),\n    baseUrl: z.string().optional(),\n    headers: z.record(z.string(), z.string()).optional(),\n    apiKey: z.string().optional(),\n    language: z.string().optional(),\n    prompt: z.string().optional(),\n  })\n  .catchall(SttProviderConfigCatchallSchema);\n\nexport const STTConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    /** Primary provider id — any registered MediaUnderstandingProvider id. */\n    provider: z.string().min(1).default('alibaba'),\n    fallback: STTFallbackConfigSchema.optional(),\n    timeoutMs: z.number().int().min(1000).max(180000).optional(),\n    /** Ordered model entries for this capability (OpenClaw `tools.media.audio.models`). */\n    models: z.array(MediaUnderstandingModelSchema).optional(),\n    /** Provider settings map keyed by provider id. */\n    providers: z.record(z.string(), STTProviderConfigSchema).optional(),\n  })\n  .strict();\n\n// ============================================\n// TTS (Text-to-Speech) Config\n// ============================================\n\nconst TtsProviderConfigCatchallSchema = z.union([\n  z.string(),\n  z.number(),\n  z.boolean(),\n  z.null(),\n  z.array(z.unknown()),\n  z.record(z.string(), z.unknown()),\n]);\n\nexport const TTSProviderConfigSchema = z\n  .object({\n    apiKey: z.string().optional(),\n    model: z.string().optional(),\n    voice: z.string().optional(),\n  })\n  .catchall(TtsProviderConfigCatchallSchema);\n\nexport const TTSFallbackConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  order: z\n    .array(z.string().min(1))\n    .default(['openai', 'alibaba', 'minimax', 'edge']),\n});\n\nexport const TTSModelOverridesConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  allowText: z.boolean().default(true),\n  allowProvider: z.boolean().default(false),\n  allowVoice: z.boolean().default(true),\n  allowModelId: z.boolean().default(true),\n  allowVoiceSettings: z.boolean().default(false),\n  allowNormalization: z.boolean().default(false),\n  allowSeed: z.boolean().default(false),\n});\n\nexport const TTSEdgeConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  voice: z.string().optional(),\n  lang: z.string().optional(),\n  outputFormat: z.string().optional(),\n  pitch: z.string().optional(),\n  rate: z.string().optional(),\n  volume: z.string().optional(),\n  proxy: z.string().optional(),\n  timeoutMs: z.number().int().min(1000).max(120000).optional(),\n});\n\nexport const TTSSummarizationConfigSchema = z.object({\n  enabled: z.boolean().optional(),\n  targetLength: z.number().int().min(1).optional(),\n  threshold: z.number().int().min(1).optional(),\n  model: z.string().optional(),\n});\n\nexport const TTSConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    /** Primary provider id — any registered SpeechProviderPlugin id. */\n    provider: z.string().min(1).default('edge'),\n    trigger: z.enum(['off', 'always', 'inbound', 'tagged']).default('always'),\n    fallback: TTSFallbackConfigSchema.optional(),\n    maxTextLength: z.number().int().min(1).default(512), // Conservative default to accommodate all providers (Alibaba limit is 512)\n    timeoutMs: z.number().int().min(1000).max(180000).default(60000),\n    summarization: TTSSummarizationConfigSchema.optional(),\n    modelOverrides: TTSModelOverridesConfigSchema.optional(),\n    /** Provider settings map keyed by provider id. */\n    providers: z.record(z.string(), TTSProviderConfigSchema).optional(),\n  })\n  .strict();\n\n// ============================================\n// messages.* — delivery / presentation concerns\n// ============================================\n\nexport const MessagesConfigSchema = z.object({\n  /** Voice (text-to-speech) output configuration. */\n  tts: TTSConfigSchema.optional(),\n}).optional();\n\nexport const ToolsMediaAudioConfigSchema = STTConfigSchema;\n\nexport const ToolsMediaConfigSchema = z\n  .object({\n    /** Shared model entries applied across media capabilities when entry lacks capabilities. */\n    models: z.array(MediaUnderstandingModelSchema).optional(),\n    /** Audio (speech-to-text) capability provider config. */\n    audio: ToolsMediaAudioConfigSchema.optional(),\n  })\n  .optional();\n\n// ============================================\n// Provider Configs (capability providers: image / audio / video)\n// ============================================\n\n/**\n * Optional Azure OpenAI overrides used when an OpenAI image-generation\n * request should hit an Azure deployment instead of `api.openai.com`.\n *\n * URL template (when present):\n *   `https://<resource>.openai.azure.com/openai/deployments/<deployment>/images/generations?api-version=<apiVersion>`\n */\nexport const ProviderAzureConfigSchema = z\n  .object({\n    /** Azure resource name (subdomain before `.openai.azure.com`). */\n    resource: z.string().min(1).optional(),\n    /** Azure deployment id (configured per model). */\n    deployment: z.string().min(1).optional(),\n    /** Azure REST API version, e.g. `2024-08-01-preview`. */\n    apiVersion: z.string().min(1).optional(),\n  })\n  .strict();\n\n/** Per-vendor request overrides applied by the provider HTTP layer. */\nexport const ProviderRequestOverridesSchema = z\n  .object({\n    /** Hard cap for a single HTTP call (ms). */\n    timeoutMs: z.number().int().positive().optional(),\n    /** Extra headers merged into every outbound request. */\n    headers: z.record(z.string(), z.string()).optional(),\n  })\n  .strict();\n\n/**\n * Generic per-vendor provider config — used by image / audio / video\n * capability providers via `cfg.providers.<id>`. Kept loose (`.strict()` but\n * everything optional) so adding a new vendor never requires a config\n * migration.\n */\nexport const ProviderAuthConfigSchema = z\n  .object({\n    /** Static API key (api-key / azure-key modes). */\n    apiKey: z.string().optional(),\n    /** Override the default REST base URL. */\n    baseUrl: z.string().url().optional(),\n    /** Vendor region (DashScope: `beijing` / `singapore`; AWS: region id). */\n    region: z.string().optional(),\n    /** Image-only base URL override (DashScope splits image vs LLM). */\n    imageBaseUrl: z.string().url().optional(),\n    /** Per-vendor request overrides. */\n    request: ProviderRequestOverridesSchema.optional(),\n    /** Azure OpenAI deployment overrides; only consumed by OpenAI image provider. */\n    azure: ProviderAzureConfigSchema.optional(),\n  })\n  .strict();\n\nexport type ProviderAuthConfig = z.infer<typeof ProviderAuthConfigSchema>;\n\n/**\n * `cfg.providers.<id>` is keyed by provider id (`openai`, `dashscope`,\n * `minimax`, `google`, `fal`, …). Every entry is optional and validated by\n * {@link ProviderAuthConfigSchema}.\n */\nexport const ProvidersConfigSchema = z.record(z.string(), ProviderAuthConfigSchema);\n\nexport type ProvidersConfig = z.infer<typeof ProvidersConfigSchema>;\n\n// ============================================\n// Extension Configs \n// ============================================\n\n// Security config for extensions \nexport const ExtensionSecurityConfigSchema = z.object({\n  checkPermissions: z.boolean().default(true),\n  allowUntrusted: z.boolean().default(false),\n  allow: z.array(z.string()).default([]),\n  trackProvenance: z.boolean().default(true),\n  allowPromptInjection: z.boolean().default(false),\n});\n\n// Slot config for extensions \nexport const ExtensionSlotsConfigSchema = z.object({\n  memory: z.string().optional(),\n  tts: z.string().optional(),\n  imageGeneration: z.string().optional(),\n  webSearch: z.string().optional(),\n});\n\n// Complete extensions config\n// Extension config allows both known fields AND arbitrary extension-specific config\n// Known fields: enabled (array), allow (array), security (object), slots (object)\n// Arbitrary: any other key is extension-specific config (e.g., extensions.hello.greeting)\nexport const ExtensionsConfigSchema: z.ZodType<Record<string, unknown>> = z.record(z.string(), z.unknown());\n\n// ============================================\n// Update Config\n// ============================================\n\nexport const UpdateAutoConfigSchema = z\n  .object({\n    /** Enable automatic update installation. Default false. */\n    enabled: z.boolean().default(false),\n    /** Hours to wait before applying a stable update after first detection. */\n    stableDelayHours: z.number().min(0).default(6),\n    /** Additional random jitter hours for stable rollout (avoids thundering herd). */\n    stableJitterHours: z.number().min(0).default(12),\n    /** How often to re-check for beta updates (hours). Min 0.25. */\n    betaCheckIntervalHours: z.number().min(0.25).default(1),\n  })\n  .strict()\n  .optional();\n\n/** Persistent `/goal` (Ralph loop) — Hermes-aligned defaults. */\nexport const GoalNotificationEventSchema = z.enum([\n  'done',\n  'blocked',\n  'needs_input',\n  'queue_failed',\n  'queue_retry',\n  'queue_succeeded',\n  'queue_skipped',\n]);\n\nexport const GoalNotificationTargetSchema = z\n  .object({\n    channel: z.string().min(1),\n    chatId: z.string().min(1),\n    accountId: z.string().optional(),\n    threadId: z.union([z.string(), z.number()]).optional(),\n    silent: z.boolean().optional(),\n    events: z.array(GoalNotificationEventSchema).optional(),\n  })\n  .strict();\n\nexport const GoalNotificationsConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    /** Notify Telegram/Weixin chats bound to the goal activeSessionKey. */\n    includeLinkedSessions: z.boolean().default(true),\n    /** Channels eligible for linked-session notifications. */\n    channels: z.array(z.string().min(1)).default(['telegram', 'weixin']),\n    events: z\n      .array(GoalNotificationEventSchema)\n      .default(['done', 'blocked', 'needs_input', 'queue_failed', 'queue_retry']),\n    targets: z.array(GoalNotificationTargetSchema).default([]),\n  })\n  .strict()\n  .default({\n    enabled: false,\n    includeLinkedSessions: true,\n    channels: ['telegram', 'weixin'],\n    events: ['done', 'blocked', 'needs_input', 'queue_failed', 'queue_retry'],\n    targets: [],\n  });\n\nexport const GoalsConfigSchema = z\n  .object({\n    /** Max continuation turns before auto-pause (Hermes default 20). */\n    maxTurns: z.number().int().min(1).max(500).default(20),\n    /** Optional judge model ref; defaults to the active agent model. */\n    judgeModelRef: z.string().optional(),\n    /**\n     * When true (default), first post-turn runs a decomposition judge to build a checklist;\n     * subsequent turns evaluate progress per item (Hermes-style). When false, use legacy freeform judge only.\n     */\n    checklistMode: z.boolean().default(true),\n    /**\n     * empty_only preserves legacy behavior: the first post-turn decomposition runs only when the\n     * goal has no checklist. supplement_existing lets the first post-turn add non-duplicate judge\n     * criteria even when the user supplied initial acceptance criteria.\n     */\n    checklistDecomposePolicy: z.enum(['empty_only', 'supplement_existing']).default('empty_only'),\n    /** Auto-pause after this many consecutive judge JSON/tool parse failures (Hermes default 3). */\n    maxConsecutiveParseFailures: z.number().int().min(1).max(20).default(3),\n    /** Judge LLM call timeout in ms (Hermes uses 60s). */\n    judgeTimeoutMs: z.number().int().min(5_000).max(120_000).default(60_000),\n    /** Max characters of recent transcript JSON passed to the checklist judge as extra context. */\n    checklistHistoryChars: z.number().int().min(0).max(100_000).default(24_000),\n    /** External channel notification policy for durable goal lifecycle events. */\n    notifications: GoalNotificationsConfigSchema,\n  })\n  .strict();\n\nexport type GoalsConfig = z.infer<typeof GoalsConfigSchema>;\n\nexport const UpdateConfigSchema = z\n  .object({\n    /** Check for updates on gateway startup. Default true. */\n    checkOnStart: z.boolean().default(true),\n    /** Update channel: stable (default), beta, or dev. */\n    channel: z.enum(['stable', 'beta', 'dev']).default('stable'),\n    /** Automatic update policy. */\n    auto: UpdateAutoConfigSchema,\n  })\n  .strict()\n  .optional();\n\nexport type UpdateConfig = z.infer<typeof UpdateConfigSchema>;\n\nexport const CommandsConfigSchema = z\n  .object({\n    restart: z.boolean().optional(),\n  })\n  .strict()\n  .optional();\n\nexport type CommandsConfig = z.infer<typeof CommandsConfigSchema>;\n\nexport const TuiConfigSchema = z\n  .object({\n    /** Default agent id for fresh TUI sessions. Leaves global routing (`agents.default`) untouched. */\n    defaultAgent: z.string().min(1).optional(),\n  })\n  .strict()\n  .default({});\n\nexport type TuiConfig = z.infer<typeof TuiConfigSchema>;\n\n// ============================================\n// MCP (Model Context Protocol)\n// ============================================\n\nconst McpHttpUrlSchema = z\n  .string()\n  .url()\n  .refine((value) => {\n    try {\n      const protocol = new URL(value).protocol;\n      return protocol === 'http:' || protocol === 'https:';\n    } catch {\n      return false;\n    }\n  }, 'MCP server URL must use http or https');\n\nconst ConnectorSecretReferenceSchema = z.object({\n  xopcSecretRef: z.object({\n    provider: z.string().min(1),\n    fieldKey: z.string().min(1),\n  }),\n});\n\nconst McpConfigScalarSchema = z.union([z.string(), z.number(), z.boolean(), ConnectorSecretReferenceSchema]);\n\nexport const McpServerSchema = z\n  .object({\n    command: z.string().optional(),\n    args: z.array(z.string()).optional(),\n    env: z.record(z.string(), McpConfigScalarSchema).optional(),\n    cwd: z.string().optional(),\n    workingDirectory: z.string().optional(),\n    url: McpHttpUrlSchema.optional(),\n    transport: z.enum(['sse', 'streamable-http']).optional(),\n    headers: z.record(z.string(), McpConfigScalarSchema).optional(),\n    connectionTimeoutMs: z.number().finite().positive().optional(),\n  })\n  .catchall(z.unknown())\n  .superRefine((value, ctx) => {\n    const hasCommand = typeof value.command === 'string' && value.command.trim().length > 0;\n    const hasUrl = typeof value.url === 'string' && value.url.trim().length > 0;\n    if (hasCommand && hasUrl) {\n      ctx.addIssue({\n        code: 'custom',\n        message: 'MCP server cannot define both command and url',\n      });\n    }\n  });\n\nexport const McpConfigSchema = z\n  .object({\n    servers: z.record(z.string(), McpServerSchema).optional(),\n    sessionIdleTtlMs: z.number().finite().min(0).optional(),\n  })\n  .strict()\n  .optional();\n\nexport type McpServerConfig = z.infer<typeof McpServerSchema>;\nexport type McpConfig = z.infer<typeof McpConfigSchema>;\n\nexport const ConnectorsConfigSchema = z\n  .object({\n    instances: z.record(z.string(), z.record(z.string(), z.unknown())).optional(),\n  })\n  .strict()\n  .optional();\n\nexport type ConnectorsConfig = z.infer<typeof ConnectorsConfigSchema>;\n\n// ============================================\n// Root Config\n// ============================================\n\nexport const ConfigSchema = z.object({\n  agents: AgentsConfigSchema,\n  bindings: BindingsConfigSchema,\n  session: SessionConfigSchema,\n  channels: ChannelsConfigSchema,\n  gateway: GatewayConfigSchema,\n  browser: BrowserConfigSchema,\n  tunnel: TunnelConfigSchema.optional(),\n  workspace: WorkspaceConfigSchema,\n  tools: ToolsConfigSchema,\n  mcp: McpConfigSchema,\n  connectors: ConnectorsConfigSchema,\n  goals: GoalsConfigSchema.optional(),\n  extensions: ExtensionsConfigSchema.default({}),\n  /** Per-vendor capability provider config (image / audio / video). */\n  providers: ProvidersConfigSchema.optional(),\n  modelsDev: ModelsDevConfigSchema,\n  /** Delivery / presentation concerns (currently `tts`). */\n  messages: MessagesConfigSchema,\n  update: UpdateConfigSchema,\n  commands: CommandsConfigSchema,\n  tui: TuiConfigSchema,\n}).default({\n  agents: {\n    default: 'main',\n    defaultPreset: DEFAULT_CAPABILITY_PRESET_ID,\n    capabilityPresets: {\n      [DEFAULT_CAPABILITY_PRESET_ID]: {\n        id: DEFAULT_CAPABILITY_PRESET_ID,\n        name: 'Global defaults',\n        description: 'Default capabilities inherited by every agent.',\n        version: 1,\n        models: DEFAULT_AGENT_MODELS,\n      },\n    },\n    list: [\n      {\n        id: 'main',\n        enabled: true,\n        identity: {\n          name: 'Main',\n          role: 'General assistant',\n          language: 'en',\n          tone: 'direct',\n        },\n        responsibilities: {\n          primary: ['Help the user complete tasks'],\n        },\n        workspace: { root: '~/.xopc/workspace/main' },\n        tools: { builtin: {} },\n        skills: { mode: 'all' },\n        memory: {\n          mode: 'confirmWrite',\n          sources: ['session', 'curated'],\n          writePolicy: { curated: 'confirm' },\n        },\n        workflows: {},\n        boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n      },\n    ],\n  },\n  bindings: [],\n  session: {\n    scope: 'per-sender' as const,\n    mainKey: 'main',\n    dmScope: 'main' as const,\n  },\n  channels: {\n    telegram: {\n      enabled: false,\n      debug: false,\n      defaults: {\n        dmPolicy: 'pairing' as const,\n        groupPolicy: 'open' as const,\n        replyToMode: 'off' as const,\n        historyLimit: 50,\n        textChunkLimit: 4000,\n        streaming: { mode: 'partial' as const },\n      },\n      accounts: {\n        default: {\n          accountId: 'default',\n          enabled: true,\n          botToken: '',\n          allowFrom: [],\n          groupAllowFrom: [],\n        },\n      },\n    },\n  },\n  gateway: {\n    bind: 'loopback',\n    port: 18790,\n    auth: {\n      mode: 'token',\n    },\n    heartbeat: {\n      enabled: true,\n      intervalMs: 1_800_000,\n      includeSystemPromptSection: false,\n    },\n    maxSseConnections: 100,\n    corsOrigins: [],\n    skillsMarketplaceProvider: 'skillhub',\n    skillsStoreBaseUrl: 'https://store.xopc.ai',\n  },\n  browser: {\n    enabled: true,\n    backend: 'extension' as const,\n  },\n  tools: {\n    web: {\n      search: {\n        maxResults: 5,\n        providers: [],\n      },\n    },\n  },\n  goals: {\n    maxTurns: 20,\n    checklistMode: true,\n    checklistDecomposePolicy: 'empty_only',\n    maxConsecutiveParseFailures: 3,\n    judgeTimeoutMs: 60_000,\n    checklistHistoryChars: 24_000,\n    notifications: {\n      enabled: false,\n      includeLinkedSessions: true,\n      channels: ['telegram', 'weixin'],\n      events: ['done', 'blocked', 'needs_input', 'queue_failed', 'queue_retry'],\n      targets: [],\n    },\n  },\n  extensions: {\n    allow: [],\n    security: {\n      checkPermissions: true,\n      allowUntrusted: false,\n      allow: [],\n      trackProvenance: true,\n      allowPromptInjection: false,\n    },\n    slots: {},\n  },\n  modelsDev: {\n    enabled: true,\n  },\n  tui: {},\n  // messages.tts / tools.media.audio start undefined; the factory layer fills\n  // in provider-level defaults (model/voice) on demand. Fresh configs don't\n  // ship with enabled providers so they never make surprise STT/TTS calls.\n});\n\nexport type Config = z.infer<typeof ConfigSchema>;\nexport type GatewayAuthConfig = z.infer<typeof GatewayAuthSchema>;\nexport type GatewayTrustedProxyConfig = z.infer<typeof GatewayTrustedProxySchema>;\nexport type GatewayAuthRateLimitConfig = z.infer<typeof GatewayAuthRateLimitSchema>;\nexport type GatewayBindMode = z.infer<typeof GatewayBindModeSchema>;\nexport type STTConfig = z.infer<typeof STTConfigSchema>;\nexport type TTSConfig = z.infer<typeof TTSConfigSchema>;\n\n// ============================================\n// Helper Functions\n// ============================================\n\n/**\n * Parse a model reference string.\n */\nexport interface ParsedModelRef {\n  provider: string;\n  model: string;\n}\n\nexport function getAgentDefaultModelRef(config: Config): string | undefined {\n  const list = Array.isArray(config.agents?.list) ? config.agents.list : [];\n  const defaultId =\n    config.agents?.default?.trim() ||\n    list.find((entry) => (entry as { default?: boolean }).default === true)?.id?.trim() ||\n    list[0]?.id;\n  const agent = list.find((entry) => entry.enabled !== false && entry.id === defaultId) ?? list[0];\n  if (!agent) return undefined;\n\n  let modelRef: string | undefined;\n  const visited = new Set<string>();\n  const applyModels = (models: AgentModelsConfig | undefined): void => {\n    const roles = models?.roles ?? {};\n    const defaultRole = models?.defaultRole ?? Object.keys(roles)[0];\n    const role = defaultRole ? roles[defaultRole] : undefined;\n    const next = role?.model.trim();\n    if (next) modelRef = next;\n  };\n  const applyPreset = (presetId: string): void => {\n    if (visited.has(presetId)) return;\n    visited.add(presetId);\n    const preset = config.agents.capabilityPresets[presetId];\n    if (!preset) return;\n    for (const parent of preset.extends ?? []) {\n      applyPreset(parent);\n    }\n    applyModels(preset.models);\n  };\n\n  applyPreset(config.agents.defaultPreset);\n  for (const presetId of agent.extends ?? []) {\n    if (presetId !== config.agents.defaultPreset) {\n      applyPreset(presetId);\n    }\n  }\n  applyModels(agent.models);\n  return modelRef;\n}\n\nfunction getAgentDefaultModelsConfig(config: Config): AgentModelsConfig | undefined {\n  const list = Array.isArray(config.agents?.list) ? config.agents.list : [];\n  const defaultId =\n    config.agents?.default?.trim() ||\n    list.find((entry) => (entry as { default?: boolean }).default === true)?.id?.trim() ||\n    list[0]?.id;\n  const agent = list.find((entry) => entry.enabled !== false && entry.id === defaultId) ?? list[0];\n  if (!agent) return undefined;\n\n  let modelConfig: AgentModelsConfig | undefined;\n  const visited = new Set<string>();\n  const applyModels = (models: AgentModelsConfig | undefined): void => {\n    if (!models) return;\n    modelConfig = {\n      ...modelConfig,\n      ...models,\n      roles: {\n        ...(modelConfig?.roles ?? {}),\n        ...(models.roles ?? {}),\n      },\n    };\n  };\n  const applyPreset = (presetId: string): void => {\n    if (visited.has(presetId)) return;\n    visited.add(presetId);\n    const preset = config.agents.capabilityPresets[presetId];\n    if (!preset) return;\n    for (const parent of preset.extends ?? []) {\n      applyPreset(parent);\n    }\n    applyModels(preset.models);\n  };\n\n  applyPreset(config.agents.defaultPreset);\n  for (const presetId of agent.extends ?? []) {\n    if (presetId !== config.agents.defaultPreset) {\n      applyPreset(presetId);\n    }\n  }\n  applyModels(agent.models);\n  return modelConfig;\n}\n\nexport function getAgentDefaultImageModelConfig(config: Config): AgentModelConfig | undefined {\n  return getAgentDefaultModelsConfig(config)?.imageModel;\n}\n\nexport function getAgentDefaultImageGenerationModelConfig(\n  config: Config,\n): AgentImageGenerationModelConfig | undefined {\n  return getAgentDefaultModelsConfig(config)?.imageGenerationModel;\n}\n\n/** `provider/model` or null when invalid. */\nexport function parseModelRef(ref: string): ParsedModelRef | null {\n  const trimmed = ref.trim();\n  const idx = trimmed.indexOf('/');\n  if (idx <= 0 || idx === trimmed.length - 1) {\n    return null;\n  }\n  return { provider: trimmed.slice(0, idx).trim(), model: trimmed.slice(idx + 1).trim() };\n}\n"],"mappings":";;;;;;;;;AAsyCA,SAAgB,wBAAwB,QAAoC;CAC1E,MAAM,OAAO,MAAM,QAAQ,OAAO,QAAQ,KAAK,GAAG,OAAO,OAAO,OAAO,EAAE;CACzE,MAAM,YACJ,OAAO,QAAQ,SAAS,MAAM,IAC9B,KAAK,MAAM,UAAW,MAAgC,YAAY,KAAK,EAAE,IAAI,MAAM,IACnF,KAAK,IAAI;CACX,MAAM,QAAQ,KAAK,MAAM,UAAU,MAAM,YAAY,SAAS,MAAM,OAAO,UAAU,IAAI,KAAK;AAC9F,KAAI,CAAC,MAAO,QAAO,KAAA;CAEnB,IAAI;CACJ,MAAM,0BAAU,IAAI,KAAa;CACjC,MAAM,eAAe,WAAgD;EACnE,MAAM,QAAQ,QAAQ,SAAS,EAAE;EACjC,MAAM,cAAc,QAAQ,eAAe,OAAO,KAAK,MAAM,CAAC;EAE9D,MAAM,QADO,cAAc,MAAM,eAAe,KAAA,IAC7B,MAAM,MAAM;AAC/B,MAAI,KAAM,YAAW;;CAEvB,MAAM,eAAe,aAA2B;AAC9C,MAAI,QAAQ,IAAI,SAAS,CAAE;AAC3B,UAAQ,IAAI,SAAS;EACrB,MAAM,SAAS,OAAO,OAAO,kBAAkB;AAC/C,MAAI,CAAC,OAAQ;AACb,OAAK,MAAM,UAAU,OAAO,WAAW,EAAE,CACvC,aAAY,OAAO;AAErB,cAAY,OAAO,OAAO;;AAG5B,aAAY,OAAO,OAAO,cAAc;AACxC,MAAK,MAAM,YAAY,MAAM,WAAW,EAAE,CACxC,KAAI,aAAa,OAAO,OAAO,cAC7B,aAAY,SAAS;AAGzB,aAAY,MAAM,OAAO;AACzB,QAAO;;AAGT,SAAS,4BAA4B,QAA+C;CAClF,MAAM,OAAO,MAAM,QAAQ,OAAO,QAAQ,KAAK,GAAG,OAAO,OAAO,OAAO,EAAE;CACzE,MAAM,YACJ,OAAO,QAAQ,SAAS,MAAM,IAC9B,KAAK,MAAM,UAAW,MAAgC,YAAY,KAAK,EAAE,IAAI,MAAM,IACnF,KAAK,IAAI;CACX,MAAM,QAAQ,KAAK,MAAM,UAAU,MAAM,YAAY,SAAS,MAAM,OAAO,UAAU,IAAI,KAAK;AAC9F,KAAI,CAAC,MAAO,QAAO,KAAA;CAEnB,IAAI;CACJ,MAAM,0BAAU,IAAI,KAAa;CACjC,MAAM,eAAe,WAAgD;AACnE,MAAI,CAAC,OAAQ;AACb,gBAAc;GACZ,GAAG;GACH,GAAG;GACH,OAAO;IACL,GAAI,aAAa,SAAS,EAAE;IAC5B,GAAI,OAAO,SAAS,EAAE;IACvB;GACF;;CAEH,MAAM,eAAe,aAA2B;AAC9C,MAAI,QAAQ,IAAI,SAAS,CAAE;AAC3B,UAAQ,IAAI,SAAS;EACrB,MAAM,SAAS,OAAO,OAAO,kBAAkB;AAC/C,MAAI,CAAC,OAAQ;AACb,OAAK,MAAM,UAAU,OAAO,WAAW,EAAE,CACvC,aAAY,OAAO;AAErB,cAAY,OAAO,OAAO;;AAG5B,aAAY,OAAO,OAAO,cAAc;AACxC,MAAK,MAAM,YAAY,MAAM,WAAW,EAAE,CACxC,KAAI,aAAa,OAAO,OAAO,cAC7B,aAAY,SAAS;AAGzB,aAAY,MAAM,OAAO;AACzB,QAAO;;AAGT,SAAgB,gCAAgC,QAA8C;AAC5F,QAAO,4BAA4B,OAAO,EAAE;;AAG9C,SAAgB,0CACd,QAC6C;AAC7C,QAAO,4BAA4B,OAAO,EAAE;;;AAI9C,SAAgB,cAAc,KAAoC;CAChE,MAAM,UAAU,IAAI,MAAM;CAC1B,MAAM,MAAM,QAAQ,QAAQ,IAAI;AAChC,KAAI,OAAO,KAAK,QAAQ,QAAQ,SAAS,EACvC,QAAO;AAET,QAAO;EAAE,UAAU,QAAQ,MAAM,GAAG,IAAI,CAAC,MAAM;EAAE,OAAO,QAAQ,MAAM,MAAM,EAAE,CAAC,MAAM;EAAE;;;;gBAn4CpD;wBAC0B;qBACL;kBACN;qBA4MI;uBAEqD;AAnMhG,uBAAsB,EAChC,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC1C,CAAC,CACD,QAAQ;AAQE,mCAAkC,EAC5C,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAEzC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;;;;;EAKjD,sBAAsB,EAAE,SAAS,CAAC,UAAU;EAC7C,CAAC,CACD,QAAQ;AAIE,6BAA4B,EACtC,OAAO;EACN,aAAa,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU;EAC3C,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;EACxB,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU;EACjD,CAAC,CACD,QAAQ,CACR,aAAa,OAAO,QAAQ;EAC3B,MAAM,eAAe,QAAgB;GACnC,MAAM,UAAU,IAAI,MAAM;GAC1B,MAAM,MAAM,QAAQ,QAAQ,IAAI;AAChC,UAAO,MAAM,KAAK,MAAM,QAAQ,SAAS;;AAE3C,MAAI,CAAC,YAAY,MAAM,MAAM,CAC3B,KAAI,SAAS;GACX,MAAM;GACN,SAAS,6CAA6C,MAAM,MAAM;GAClE,MAAM,CAAC,QAAQ;GAChB,CAAC;AAEJ,OAAK,MAAM,CAAC,OAAO,cAAc,MAAM,aAAa,EAAE,EAAE,SAAS,CAC/D,KAAI,CAAC,YAAY,SAAS,CACxB,KAAI,SAAS;GACX,MAAM;GACN,SAAS,gDAAgD,SAAS;GAClE,MAAM,CAAC,aAAa,MAAM;GAC3B,CAAC;GAGN;AAIE,8BAA6B,EAChC,OAAO,EAAE,QAAQ,CAAC,MAAM,0BAA0B,EAAE,0BAA0B,CAC9E,UAAU;AAEA,qBAAoB,EAC9B,OAAO;EACN,aAAa,EAAE,QAAQ,CAAC,MAAM,0BAA0B,CAAC,UAAU;EACnE,OAAO;EACP,YAAY,oBAAoB,UAAU;EAC1C,sBAAsB,gCAAgC,UAAU;EACjE,CAAC,CACD,QAAQ,CACR,UAAU;AAMA,sBAAqB,EAAE,OAAO;;EAEzC,SAAS,EAAE,QAAQ,CAAC,UAAU;;EAE9B,eAAe,EAAE,QAAQ,CAAC,QAAQ,6BAA6B;EAC/D,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC;EAC3E,MAAM,EAAE,MAAM,uBAAuB,CAAC,QAAQ,EAAE,CAAC;EAClD,CAAC,CAAC,QAAQ,CAAC,QAAQ;EAClB,SAAS;EACT,eAAe;EACf,mBAAmB,GAChB,+BAA+B;GAC9B,IAAI;GACJ,MAAM;GACN,aAAa;GACb,SAAS;GACT,QAAQ;GACT,EACF;EACD,MAAM,CACJ;GACE,IAAI;GACJ,SAAS;GACT,UAAU;IACR,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;IACP;GACD,kBAAkB,EAChB,SAAS,CAAC,+BAA+B,EAC1C;GACD,WAAW,EAAE,MAAM,0BAA0B;GAC7C,OAAO,EAAE,SAAS,EAAE,EAAE;GACtB,QAAQ,EAAE,MAAM,OAAO;GACvB,QAAQ;IACN,MAAM;IACN,SAAS,CAAC,WAAW,UAAU;IAC/B,aAAa,EAAE,SAAS,WAAW;IACpC;GACD,WAAW,EAAE;GACb,YAAY;IAAE,sBAAsB,EAAE;IAAE,WAAW,EAAE;IAAE,YAAY,EAAE;IAAE;GACxE,CACF;EACF,CAAC;AAEI,4BAA2B,EAC9B,OAAO;EACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC,CACD,QAAQ,CACR,UAAU;AAEP,gCAA+B,EAClC,OAAO;EACN,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU;EACtD,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EAClC,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EAC1D,CAAC,CACD,QAAQ,CACR,UAAU;AAEP,4BAA2B,EAC9B,OAAO;EACN,UAAU,EAAE,SAAS,CAAC,UAAU;EAChC,kBAAkB,EAAE,SAAS,CAAC,UAAU;EACxC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,aAAa,OAAO,QAAQ;GAC1D,MAAM,SAAS,cAAc,MAAM;AACnC,OAAI,OAAO,OAAO,MAChB,KAAI,SAAS;IAAE,MAAM;IAAU,SAAS,OAAO;IAAS,CAAC;IAE3D;EACF,YAAY,EAAE,QAAQ,CAAC,UAAU;EACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,qBAAqB,EAAE,QAAQ,CAAC,UAAU;EAC1C,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC1C,CAAC,CACD,QAAQ,CACR,UAAU;AAEA,uBAAsB,EAChC,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,SAAS,EAAE,KAAK;GAAC;GAAS;GAAO;GAAS;GAAa;GAAe,CAAC,CAAC,QAAQ,YAAY;EAC5F,UAAU,EAAE,SAAS,CAAC,UAAU;EAChC,kBAAkB,EAAE,SAAS,CAAC,UAAU;EACxC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU;EAC3D,eAAe,EAAE,KAAK;GAAC;GAAS;GAAe;GAAc,CAAC,CAAC,UAAU;EACzE,OAAO;EACP,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,WAAW;EACX,cAAc;EACd,UAAU,EAAE,SAAS,CAAC,UAAU;EAChC,aAAa,EAAE,KAAK,CAAC,WAAW,UAAU,CAAC,CAAC,UAAU;EACtD,cAAc,EAAE,KAAK;GAAC;GAAgB;GAAgB;GAAc,CAAC,CAAC,UAAU;EAChF,sBAAsB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EAC7D,CAAC,CACD,QAAQ,CACR,QAAQ;EAAE,SAAS;EAAM,SAAS;EAAa,CAAC;AAmBtC,sBAAqB,EAAE,OAAO;EACzC,SAAS,EAAE,QAAQ;EACnB,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC9C,CAAC;AAEW,qBAAoB,EAAE,OAAO;EACxC,IAAI,EAAE,QAAQ,CAAC,UAAU;EACzB,SAAS,EAAE,QAAQ;EACnB,UAAU,EAAE,QAAQ,CAAC,QAAQ,IAAI;EACjC,OAAO;EACP,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EACnC,CAAC;AAEW,wBAAuB,EAAE,MAAM,kBAAkB,CAAC,QAAQ,EAAE,CAAC;AAE7D,wBAAuB,EAAE,KAAK;EACzC;EACA;EACA;EACA;EACD,CAAC;AAEW,8BAA6B,EAAE,OAAO;EACjD,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,YAAY,EAAE,QAAQ,CAAC,UAAU;EAClC,CAAC;AAEW,0BAAyB,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC;AAElD,4BAA2B,EACrC,OAAO;EACN,MAAM,uBAAuB,UAAU;;EAEvC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU;;EAElD,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;EAChD,CAAC,CACD,QAAQ;AAEE,4BAA2B,EACrC,OAAO;EACN,QAAQ,yBAAyB,UAAU;EAC3C,OAAO,yBAAyB,UAAU;EAC1C,QAAQ,yBAAyB,UAAU;EAC5C,CAAC,CACD,QAAQ;AAEE,sBAAqB,EAAE,KAAK,CAAC,cAAc,SAAS,CAAC;AAErD,uBAAsB,EAAE,OAAO;EAC1C,OAAO,mBAAmB,QAAQ,aAAa;EAC/C,SAAS,EAAE,QAAQ,CAAC,QAAQ,OAAO;EACnC,SAAS,qBAAqB,QAAQ,OAAO;EAC7C,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU;EACnE,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC7C,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EACnD,OAAO,yBAAyB,UAAU;EAC1C,aAAa,yBAAyB,UAAU;EAChD,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,UAAU;EACzE,SAAS,2BAA2B,UAAU;EAC/C,CAAC,CAAC,QAAQ;EACT,OAAO;EACP,SAAS;EACT,SAAS;EACV,CAAC;AAGW,wBAAuB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEpE,6BAA4B,EAAE,OAAO;EAChD,MAAM,EAAE,KAAK;GAAC;GAAS;GAAU;GAAQ;GAAU,CAAC;EACpD,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,UAAU,EAAE,SAAS,CAAC,UAAU;EACjC,CAAC;AAIW,yBAAwB,EAAE,OAAO;EAC5C,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE;;EAEjC,WAAW,EAAE,MAAM,0BAA0B,CAAC,QAAQ,EAAE,CAAC;EAC1D,CAAC;AAIW,0BAAyB,EAAE,OAAO;;EAE7C,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;EACzC,CAAC;AAIW,wBAAuB,EAAE,OAAO;;EAE3C,QAAQ,EAAE,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU;EAC3C,QAAQ,sBAAsB,UAAU;;EAExC,WAAW,uBAAuB,UAAU;EAC7C,CAAC;AAIW,qBAAoB,EAAE,OAAO;EACxC,KAAK,qBAAqB,UAAU;;;;;EAKpC,OAAO,EAAE,WAAW,uBAAuB;EAC5C,CAAC,CAAC,QAAQ,EACT,KAAK,EACH,QAAQ;EACN,YAAY;EACZ,WAAW,EAAE;EACd,EACF,EACF,CAAC;AAMW,8BAA6B,EACvC,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;EAC/C,UAAU,EAAE,QAAQ,CAAC,QAAQ,IAAQ;EACrC,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,IAAQ;;EAE5C,WAAW,EAAE,QAAQ,CAAC,UAAU;;EAEhC,gBAAgB,EAAE,SAAS,CAAC,QAAQ,KAAK;;;;;;;EAOzC,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,IAAK;EACvD,CAAC,CACD,UAAU;AAEA,yBAAwB,EAClC,OAAO;;AAEN,QAAQ,EAAE,SAAS,CAAC,UAAU,EAC/B,CAAC,CACD,UAAU;AAEA,6BAA4B,EACtC,OAAO;;EAEN,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;;EAE7B,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE/C,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE1C,eAAe,EAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,QAAQ;AAEE,qBAAoB,EAC9B,OAAO;EACN,MAAM,EAAE,KAAK;GAAC;GAAQ;GAAS;GAAY;GAAgB,CAAC,CAAC,QAAQ,QAAQ;EAC7E,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;;EAE/B,gBAAgB,EAAE,SAAS,CAAC,UAAU;EACtC,WAAW;EACX,cAAc,0BAA0B,UAAU;EACnD,CAAC,CACD,QAAQ,EACP,MAAM,SACP,CAAC;AAES,iCAAgC,EAAE,OAAO;EACpD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC9B,CAAC;AAEW,0BAAyB,EACnC,OAAO;EACN,MAAM,EAAE,KAAK;GAAC;GAAO;GAAS;GAAS,CAAC,CAAC,QAAQ,MAAM;EACvD,aAAa,EAAE,SAAS,CAAC,QAAQ,KAAK;EACtC,SAAS,8BAA8B,UAAU;EAClD,CAAC,CACD,QAAQ;EACP,MAAM;EACN,aAAa;EACd,CAAC;AAES,uBAAsB,EAAE,OAAO;EAC1C,KAAK,EAAE,QAAQ,CAAC,KAAK;EACrB,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,WAAW,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC,CAAC,QAAQ,SAAS;EACtD,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;EACtC,CAAC;AAEW,oBAAmB,EAC7B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;EACnC,cAAc,EAAE,SAAS,CAAC,QAAQ,MAAM;EACxC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC/B,CAAC,CACD,QAAQ;EACP,SAAS;EACT,cAAc;EACf,CAAC;AAES,qBAAoB,EAAE,KAAK,CAAC,SAAS,SAAS,CAAC,CAAC,QAAQ,QAAQ;AAEhE,yBAAwB,EAClC,OAAO;EACN,SAAS,EAAE,SAAS;EACpB,YAAY,EAAE,QAAQ;;EAEtB,4BAA4B,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,MAAM;EACjE,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,iBAAiB,EAAE,SAAS,CAAC,UAAU;EACvC,aAAa,EACV,OAAO;GACN,OAAO,EAAE,QAAQ;GACjB,KAAK,EAAE,QAAQ;GACf,UAAU,EAAE,QAAQ,CAAC,UAAU;GAChC,CAAC,CACD,UAAU;EACd,CAAC,CACD,QAAQ;EACP,SAAS;EACT,YAAY;EACZ,4BAA4B;EAC7B,CAAC;AAES,wCAAuC,EAAE,KAAK;EAAC;EAAQ;EAAO;EAAW,CAAC;AAE1E,uBAAsB,EAAE,OAAO;EAC1C,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC9B,CAAC;AAEW,sBAAqB,EAC/B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;EACnC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,0BAA0B;;EAE9D,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EAChD,WAAW,EAAE,SAAS,CAAC,QAAQ,MAAM;EACrC,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,SAAS,oBAAoB,UAAU;EACxC,CAAC,CACD,QAAQ;EACP,SAAS;EACT,WAAW;EACX,WAAW;EACZ,CAAC;AASS,+BAA8B,EAAE,OAAO;;EAElD,WAAW,EAAE,QAAQ,CAAC,QAAQ,UAAU;;EAExC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,YAAe,CAAC,QAAQ,UAAY;;EAE7E,gBAAgB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC1C,CAAC;AAGW,yBAAwB,EAAE,OAAO,EAC5C,QAAQ,4BAA4B,UAAU,EAC/C,CAAC,CAAC,UAAU;AAGA,yBAAwB,EAAE,KAAK;EAAC;EAAQ;EAAY;EAAO;EAAW;EAAS,CAAC;AAEhF,uBAAsB,EAAE,OAAO;;EAE1C,MAAM,sBAAsB,UAAU;;EAEtC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;EACrC,MAAM,EAAE,QAAQ,CAAC,UAAU;;EAE3B,MAAM,kBAAkB,UAAU;;EAElC,QAAQ,oBAAoB,UAAU;EACtC,WAAW,uBAAuB,UAAU;EAC5C,KAAK,iBAAiB,UAAU;EAChC,MAAM,kBAAkB,UAAU;EAClC,WAAW,sBAAsB,UAAU;EAC3C,mBAAmB,EAAE,QAAQ,CAAC,UAAU;EACxC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;;;;;;;;EAS3C,WAAW,EACR,QAAQ,CACR,aAAa,OAAO,QAAQ;GAC3B,MAAM,SAAS,kBAAkB,MAAM;AACvC,OAAI,OAAO,OAAO,MAChB,KAAI,SAAS;IAAE,MAAM;IAAU,SAAS,sBAAsB,OAAO;IAAW,CAAC;IAEnF,CACD,UAAU;;EAEb,0CAA0C,EAAE,SAAS,CAAC,UAAU;;EAEhE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE9C,qBAAqB,EAAE,SAAS,CAAC,UAAU;EAC3C,UAAU;;;;;;;EAOV,yBAAyB,qCAAqC,UAAU;;EAExE,wBAAwB,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU;;EAErE,4BAA4B,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU;;EAEzE,2BAA2B,EAAE,QAAQ,CAAC,UAAU;;EAEhD,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAE/C,OAAO,EAAE,OAAO;GACd,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;GAElC,cAAc,EAAE,QAAQ,CAAC,IAAI,IAAO,CAAC,IAAI,OAAY,CAAC,QAAQ,MAAW;;GAEzE,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAO,CAAC,IAAI,OAAc,CAAC,QAAQ,OAAY;;GAExE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAO,CAAC,QAAQ,IAAI;;GAE3D,aAAa,EAAE,QAAQ,CAAC,IAAI,QAAU,CAAC,IAAI,YAAe,CAAC,QAAQ,UAAY;;GAE/E,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ;IAC9C;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD,CAAC;;GAEF,WAAW,EAAE,OAAO;IAClB,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAElC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAU,CAAC,IAAI,YAAe,CAAC,QAAQ,WAAc;;IAEzF,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAM;;IAEjE,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,GAAG;;IAErD,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAO;;IAEpE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC1D,CAAC,CAAC,QAAQ;IACT,SAAS;IACT,eAAe;IACf,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,gBAAgB;IACjB,CAAC;GACH,CAAC,CAAC,UAAU;;EAEb,WAAW,EAAE,OAAO;GAClB,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;GAElC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,gBAAgB;;GAE5D,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,OAAY,CAAC,QAAQ,MAAW;;GAE/E,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,OAAc,CAAC,QAAQ,OAAY;;GAE9E,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAM,CAAC,QAAQ,EAAE;GAC7D,QAAQ,EAAE,OAAO;IACf,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAElC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAU,CAAC,IAAI,YAAe,CAAC,QAAQ,SAAY;;IAExF,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAO;;IAElE,yBAAyB,EAAE,SAAS,CAAC,QAAQ,MAAM;IACpD,CAAC,CAAC,QAAQ;IACT,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,yBAAyB;IAC1B,CAAC;GACF,OAAO,EAAE,OAAO;;IAEd,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAElC,sBAAsB,EACnB,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CACxB,QAAQ;KAAC;KAAa;KAAa;KAAM,CAAC;;IAE7C,sBAAsB,EACnB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,CACzC,QAAQ;KAAC;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAK,CAAC;;IAE5D,kBAAkB,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAE3C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,WAAc,CAAC,QAAQ,SAAW;;IAE7E,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAM,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAO;;IAE1E,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,KAAU,CAAC,QAAQ,IAAQ;;IAE7E,sBAAsB,EAAE,SAAS,CAAC,QAAQ,KAAK;IAChD,CAAC,CAAC,QAAQ;IACT,SAAS;IACT,sBAAsB;KAAC;KAAa;KAAa;KAAM;IACvD,sBAAsB;KAAC;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAK;IACtE,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,iBAAiB;IACjB,sBAAsB;IACvB,CAAC;GACH,CAAC,CAAC,UAAU;EACd,CAAC,CAAC,QAAQ;EACT,MAAM;EACN,MAAM;EACN,MAAM,EACJ,MAAM,SACP;EACD,WAAW;GACT,SAAS;GACT,YAAY;GACZ,4BAA4B;GAC7B;EACD,mBAAmB;EACnB,aAAa,EAAE;EACf,2BAA2B;EAC3B,oBAAoB;EACrB,CAAC;AAEW,yBAAwB,EAAE,OAAO,EAC5C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK,EACnC,CAAC,CAAC,QAAQ,EACT,SAAS,MACV,CAAC;AAMI,mCAAkC,EAAE,MAAM;EAC9C,EAAE,QAAQ;EACV,EAAE,QAAQ;EACV,EAAE,SAAS;EACX,EAAE,MAAM;EACR,EAAE,MAAM,EAAE,SAAS,CAAC;EACpB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;EAClC,CAAC;AAEW,2BAA0B,EACpC,OAAO;EACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpD,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC,CACD,SAAS,gCAAgC;AAE/B,2BAA0B,EAAE,OAAO;EAC9C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,SAAS,CAAC;EACjE,CAAC;AAEW,wCAAuC,EACjD,MAAM,EAAE,KAAK;EAAC;EAAS;EAAS;EAAQ,CAAC,CAAC,CAC1C,UAAU;AAEA,iCAAgC,EAC1C,OAAO;EACN,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,cAAc;EACd,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,WAAW,EAAE,EAAE,QAAQ,MAAM,CAAC,CAAC,CAAC,UAAU;EACnE,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpD,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC,CACD,SAAS,gCAAgC;AAE/B,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,UAAU;EAC9C,UAAU,wBAAwB,UAAU;EAC5C,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,UAAU;;EAE5D,QAAQ,EAAE,MAAM,8BAA8B,CAAC,UAAU;;EAEzD,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,CAAC,UAAU;EACpE,CAAC,CACD,QAAQ;AAML,mCAAkC,EAAE,MAAM;EAC9C,EAAE,QAAQ;EACV,EAAE,QAAQ;EACV,EAAE,SAAS;EACX,EAAE,MAAM;EACR,EAAE,MAAM,EAAE,SAAS,CAAC;EACpB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;EAClC,CAAC;AAEW,2BAA0B,EACpC,OAAO;EACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC7B,CAAC,CACD,SAAS,gCAAgC;AAE/B,2BAA0B,EAAE,OAAO;EAC9C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EACJ,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CACxB,QAAQ;GAAC;GAAU;GAAW;GAAW;GAAO,CAAC;EACrD,CAAC;AAEW,iCAAgC,EAAE,OAAO;EACpD,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,WAAW,EAAE,SAAS,CAAC,QAAQ,KAAK;EACpC,eAAe,EAAE,SAAS,CAAC,QAAQ,MAAM;EACzC,YAAY,EAAE,SAAS,CAAC,QAAQ,KAAK;EACrC,cAAc,EAAE,SAAS,CAAC,QAAQ,KAAK;EACvC,oBAAoB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC9C,oBAAoB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC9C,WAAW,EAAE,SAAS,CAAC,QAAQ,MAAM;EACtC,CAAC;AAEW,uBAAsB,EAAE,OAAO;EAC1C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC3B,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,UAAU;EAC7D,CAAC;AAEW,gCAA+B,EAAE,OAAO;EACnD,SAAS,EAAE,SAAS,CAAC,UAAU;EAC/B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;EAChD,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;EAC7C,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC7B,CAAC;AAEW,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,OAAO;EAC3C,SAAS,EAAE,KAAK;GAAC;GAAO;GAAU;GAAW;GAAS,CAAC,CAAC,QAAQ,SAAS;EACzE,UAAU,wBAAwB,UAAU;EAC5C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,IAAI;EACnD,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,QAAQ,IAAM;EAChE,eAAe,6BAA6B,UAAU;EACtD,gBAAgB,8BAA8B,UAAU;;EAExD,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,CAAC,UAAU;EACpE,CAAC,CACD,QAAQ;AAME,wBAAuB,EAAE,OAAO;;AAE3C,KAAK,gBAAgB,UAAU,EAChC,CAAC,CAAC,UAAU;AAEA,+BAA8B;AAE9B,0BAAyB,EACnC,OAAO;;EAEN,QAAQ,EAAE,MAAM,8BAA8B,CAAC,UAAU;;EAEzD,OAAO,4BAA4B,UAAU;EAC9C,CAAC,CACD,UAAU;AAaA,6BAA4B,EACtC,OAAO;;EAEN,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;EAEtC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;EAExC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EACzC,CAAC,CACD,QAAQ;AAGE,kCAAiC,EAC3C,OAAO;;EAEN,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;;EAEjD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrD,CAAC,CACD,QAAQ;AAQE,4BAA2B,EACrC,OAAO;;EAEN,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAEpC,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAEzC,SAAS,+BAA+B,UAAU;;EAElD,OAAO,0BAA0B,UAAU;EAC5C,CAAC,CACD,QAAQ;AASE,yBAAwB,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB;AAStE,iCAAgC,EAAE,OAAO;EACpD,kBAAkB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC3C,gBAAgB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;EACtC,iBAAiB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC1C,sBAAsB,EAAE,SAAS,CAAC,QAAQ,MAAM;EACjD,CAAC;AAGW,8BAA6B,EAAE,OAAO;EACjD,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,iBAAiB,EAAE,QAAQ,CAAC,UAAU;EACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;EACjC,CAAC;AAMW,0BAA6D,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;AAM9F,0BAAyB,EACnC,OAAO;;EAEN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;;EAE9C,mBAAmB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,GAAG;;EAEhD,wBAAwB,EAAE,QAAQ,CAAC,IAAI,IAAK,CAAC,QAAQ,EAAE;EACxD,CAAC,CACD,QAAQ,CACR,UAAU;AAGA,+BAA8B,EAAE,KAAK;EAChD;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEW,gCAA+B,EACzC,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;EACzB,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,UAAU,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU;EACtD,QAAQ,EAAE,SAAS,CAAC,UAAU;EAC9B,QAAQ,EAAE,MAAM,4BAA4B,CAAC,UAAU;EACxD,CAAC,CACD,QAAQ;AAEE,iCAAgC,EAC1C,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,uBAAuB,EAAE,SAAS,CAAC,QAAQ,KAAK;;EAEhD,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,SAAS,CAAC;EACpE,QAAQ,EACL,MAAM,4BAA4B,CAClC,QAAQ;GAAC;GAAQ;GAAW;GAAe;GAAgB;GAAc,CAAC;EAC7E,SAAS,EAAE,MAAM,6BAA6B,CAAC,QAAQ,EAAE,CAAC;EAC3D,CAAC,CACD,QAAQ,CACR,QAAQ;EACP,SAAS;EACT,uBAAuB;EACvB,UAAU,CAAC,YAAY,SAAS;EAChC,QAAQ;GAAC;GAAQ;GAAW;GAAe;GAAgB;GAAc;EACzE,SAAS,EAAE;EACZ,CAAC;AAES,qBAAoB,EAC9B,OAAO;;EAEN,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG;;EAEtD,eAAe,EAAE,QAAQ,CAAC,UAAU;;;;;EAKpC,eAAe,EAAE,SAAS,CAAC,QAAQ,KAAK;;;;;;EAMxC,0BAA0B,EAAE,KAAK,CAAC,cAAc,sBAAsB,CAAC,CAAC,QAAQ,aAAa;;EAE7F,6BAA6B,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE;;EAEvE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAM,CAAC,IAAI,KAAQ,CAAC,QAAQ,IAAO;;EAExE,uBAAuB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,KAAO;;EAE3E,eAAe;EAChB,CAAC,CACD,QAAQ;AAIE,sBAAqB,EAC/B,OAAO;;EAEN,cAAc,EAAE,SAAS,CAAC,QAAQ,KAAK;;EAEvC,SAAS,EAAE,KAAK;GAAC;GAAU;GAAQ;GAAM,CAAC,CAAC,QAAQ,SAAS;;EAE5D,MAAM;EACP,CAAC,CACD,QAAQ,CACR,UAAU;AAIA,wBAAuB,EACjC,OAAO,EACN,SAAS,EAAE,SAAS,CAAC,UAAU,EAChC,CAAC,CACD,QAAQ,CACR,UAAU;AAIA,mBAAkB,EAC5B,OAAO;;AAEN,cAAc,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,EAC3C,CAAC,CACD,QAAQ,CACR,QAAQ,EAAE,CAAC;AAQR,oBAAmB,EACtB,QAAQ,CACR,KAAK,CACL,QAAQ,UAAU;AACjB,MAAI;GACF,MAAM,WAAW,IAAI,IAAI,MAAM,CAAC;AAChC,UAAO,aAAa,WAAW,aAAa;UACtC;AACN,UAAO;;IAER,wCAAwC;AAEvC,kCAAiC,EAAE,OAAO,EAC9C,eAAe,EAAE,OAAO;EACtB,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC3B,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC5B,CAAC,EACH,CAAC;AAEI,yBAAwB,EAAE,MAAM;EAAC,EAAE,QAAQ;EAAE,EAAE,QAAQ;EAAE,EAAE,SAAS;EAAE;EAA+B,CAAC;AAE/F,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,CAAC,UAAU;EAC3D,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,kBAAkB,EAAE,QAAQ,CAAC,UAAU;EACvC,KAAK,iBAAiB,UAAU;EAChC,WAAW,EAAE,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC,UAAU;EACxD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,CAAC,UAAU;EAC/D,qBAAqB,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC/D,CAAC,CACD,SAAS,EAAE,SAAS,CAAC,CACrB,aAAa,OAAO,QAAQ;EAC3B,MAAM,aAAa,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,MAAM,CAAC,SAAS;EACtF,MAAM,SAAS,OAAO,MAAM,QAAQ,YAAY,MAAM,IAAI,MAAM,CAAC,SAAS;AAC1E,MAAI,cAAc,OAChB,KAAI,SAAS;GACX,MAAM;GACN,SAAS;GACV,CAAC;GAEJ;AAES,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,UAAU;EACzD,kBAAkB,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EACxD,CAAC,CACD,QAAQ,CACR,UAAU;AAKA,0BAAyB,EACnC,OAAO,EACN,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,EAC9E,CAAC,CACD,QAAQ,CACR,UAAU;AAQA,gBAAe,EAAE,OAAO;EACnC,QAAQ;EACR,UAAU;EACV,SAAS;EACT,UAAU;EACV,SAAS;EACT,SAAS;EACT,QAAQ,mBAAmB,UAAU;EACrC,WAAW;EACX,OAAO;EACP,KAAK;EACL,YAAY;EACZ,OAAO,kBAAkB,UAAU;EACnC,YAAY,uBAAuB,QAAQ,EAAE,CAAC;;EAE9C,WAAW,sBAAsB,UAAU;EAC3C,WAAW;;EAEX,UAAU;EACV,QAAQ;EACR,UAAU;EACV,KAAK;EACN,CAAC,CAAC,QAAQ;EACT,QAAQ;GACN,SAAS;GACT,eAAe;GACf,mBAAmB,GAChB,+BAA+B;IAC9B,IAAI;IACJ,MAAM;IACN,aAAa;IACb,SAAS;IACT,QAAQ;IACT,EACF;GACD,MAAM,CACJ;IACE,IAAI;IACJ,SAAS;IACT,UAAU;KACR,MAAM;KACN,MAAM;KACN,UAAU;KACV,MAAM;KACP;IACD,kBAAkB,EAChB,SAAS,CAAC,+BAA+B,EAC1C;IACD,WAAW,EAAE,MAAM,0BAA0B;IAC7C,OAAO,EAAE,SAAS,EAAE,EAAE;IACtB,QAAQ,EAAE,MAAM,OAAO;IACvB,QAAQ;KACN,MAAM;KACN,SAAS,CAAC,WAAW,UAAU;KAC/B,aAAa,EAAE,SAAS,WAAW;KACpC;IACD,WAAW,EAAE;IACb,YAAY;KAAE,sBAAsB,EAAE;KAAE,WAAW,EAAE;KAAE,YAAY,EAAE;KAAE;IACxE,CACF;GACF;EACD,UAAU,EAAE;EACZ,SAAS;GACP,OAAO;GACP,SAAS;GACT,SAAS;GACV;EACD,UAAU,EACR,UAAU;GACR,SAAS;GACT,OAAO;GACP,UAAU;IACR,UAAU;IACV,aAAa;IACb,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,WAAW,EAAE,MAAM,WAAoB;IACxC;GACD,UAAU,EACR,SAAS;IACP,WAAW;IACX,SAAS;IACT,UAAU;IACV,WAAW,EAAE;IACb,gBAAgB,EAAE;IACnB,EACF;GACF,EACF;EACD,SAAS;GACP,MAAM;GACN,MAAM;GACN,MAAM,EACJ,MAAM,SACP;GACD,WAAW;IACT,SAAS;IACT,YAAY;IACZ,4BAA4B;IAC7B;GACD,mBAAmB;GACnB,aAAa,EAAE;GACf,2BAA2B;GAC3B,oBAAoB;GACrB;EACD,SAAS;GACP,SAAS;GACT,SAAS;GACV;EACD,OAAO,EACL,KAAK,EACH,QAAQ;GACN,YAAY;GACZ,WAAW,EAAE;GACd,EACF,EACF;EACD,OAAO;GACL,UAAU;GACV,eAAe;GACf,0BAA0B;GAC1B,6BAA6B;GAC7B,gBAAgB;GAChB,uBAAuB;GACvB,eAAe;IACb,SAAS;IACT,uBAAuB;IACvB,UAAU,CAAC,YAAY,SAAS;IAChC,QAAQ;KAAC;KAAQ;KAAW;KAAe;KAAgB;KAAc;IACzE,SAAS,EAAE;IACZ;GACF;EACD,YAAY;GACV,OAAO,EAAE;GACT,UAAU;IACR,kBAAkB;IAClB,gBAAgB;IAChB,OAAO,EAAE;IACT,iBAAiB;IACjB,sBAAsB;IACvB;GACD,OAAO,EAAE;GACV;EACD,WAAW,EACT,SAAS,MACV;EACD,KAAK,EAAE;EAIR,CAAC"}

package/dist/src/connectors/registries/smithery.js

@@ -18,6 +18,7 @@ function connectorFromSmitheryServer(server, apiKey) {
 	if (!qualifiedName || !displayName) return void 0;
 	const serverId = slugFrom(qualifiedName);
 	const url = `https://server.smithery.ai/${qualifiedName.split("/").map((part) => encodeURIComponent(part)).join("/")}/mcp`;
+	const headers = apiKey ? { Authorization: `Bearer ${apiKey}` } : void 0;
 	return {
 		id: `smithery-${serverId}`,
 		version: readString(server.version) ?? "registry",
@@ -26,32 +27,32 @@ function connectorFromSmitheryServer(server, apiKey) {
 		category: "custom",
 		kind: "mcp",
 		source: "registry",
-		capabilities: [
+		capabilities: apiKey ? [
 			"tools",
 			"resources",
 			"prompts",
 			"auth.apiKey",
 			"runtime.mcp.streamableHttp"
+		] : [
+			"tools",
+			"resources",
+			"prompts",
+			"runtime.mcp.streamableHttp"
 		],
 		tags: [
 			"smithery",
 			"registry",
 			"mcp"
 		],
-		auth: { mode: "apiKey" },
-		setup: apiKey ? {} : { secrets: [{
-			key: "SMITHERY_AUTHORIZATION_HEADER",
-			label: "Smithery Authorization header",
-			description: "Full Authorization header used when launching hosted Smithery MCP servers, for example \"Bearer ...\".",
-			required: true
-		}] },
+		auth: { mode: apiKey ? "apiKey" : "none" },
+		setup: {},
 		runtime: {
 			type: "mcp",
 			serverId,
 			serverTemplate: {
 				url,
 				transport: "streamable-http",
-				headers: { Authorization: apiKey ? `Bearer ${apiKey}` : "{{secrets.SMITHERY_AUTHORIZATION_HEADER}}" }
+				...headers ? { headers } : {}
 			}
 		}
 	};

package/dist/src/connectors/registries/smithery.js.map

@@ -1 +1 @@
-{"version":3,"file":"smithery.js","names":[],"sources":["../../../../src/connectors/registries/smithery.ts"],"sourcesContent":["import type { ConnectorDefinition } from '../types.js';\nimport type { ConnectorRegistryAdapter, ConnectorRegistrySearchParams, ConnectorRegistrySearchResult } from './types.js';\n\nconst DEFAULT_BASE_URL = 'https://registry.smithery.ai';\n\nfunction smitheryApiKey(): string | undefined {\n  return process.env.XOPC_SMITHERY_API_KEY?.trim() || process.env.SMITHERY_API_KEY?.trim() || undefined;\n}\n\nfunction smitheryBaseUrl(): string {\n  return process.env.XOPC_SMITHERY_REGISTRY_URL?.trim().replace(/\\/+$/, '') || DEFAULT_BASE_URL;\n}\n\nfunction readString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined;\n}\n\nfunction slugFrom(value: string): string {\n  return value\n    .trim()\n    .toLowerCase()\n    .replace(/^@/, '')\n    .replace(/[^a-z0-9_-]+/g, '-')\n    .replace(/^-+|-+$/g, '')\n    .slice(0, 64) || 'smithery-mcp';\n}\n\nfunction connectorFromSmitheryServer(server: Record<string, unknown>, apiKey?: string): ConnectorDefinition | undefined {\n  const qualifiedName = readString(server.qualifiedName ?? server.qualified_name ?? server.name ?? server.id);\n  const displayName = readString(server.displayName ?? server.display_name ?? server.name) ?? qualifiedName;\n  if (!qualifiedName || !displayName) return undefined;\n  const serverId = slugFrom(qualifiedName);\n  const encodedPath = qualifiedName.split('/').map((part) => encodeURIComponent(part)).join('/');\n  const url = `https://server.smithery.ai/${encodedPath}/mcp`;\n  return {\n    id: `smithery-${serverId}`,\n    version: readString(server.version) ?? 'registry',\n    displayName,\n    description: readString(server.description) ?? 'MCP server hosted through Smithery.',\n    category: 'custom',\n    kind: 'mcp',\n    source: 'registry',\n    capabilities: ['tools', 'resources', 'prompts', 'auth.apiKey', 'runtime.mcp.streamableHttp'],\n    tags: ['smithery', 'registry', 'mcp'],\n    auth: { mode: 'apiKey' },\n    setup: apiKey\n      ? {}\n      : {\n          secrets: [\n            {\n              key: 'SMITHERY_AUTHORIZATION_HEADER',\n              label: 'Smithery Authorization header',\n              description: 'Full Authorization header used when launching hosted Smithery MCP servers, for example \"Bearer ...\".',\n              required: true,\n            },\n          ],\n        },\n    runtime: {\n      type: 'mcp',\n      serverId,\n      serverTemplate: {\n        url,\n        transport: 'streamable-http',\n        headers: {\n          Authorization: apiKey ? `Bearer ${apiKey}` : '{{secrets.SMITHERY_AUTHORIZATION_HEADER}}',\n        },\n      },\n    },\n  };\n}\n\nfunction extractServers(payload: unknown): Record<string, unknown>[] {\n  if (Array.isArray(payload)) return payload.filter((item): item is Record<string, unknown> => Boolean(item && typeof item === 'object' && !Array.isArray(item)));\n  if (!payload || typeof payload !== 'object' || Array.isArray(payload)) return [];\n  const data = payload as Record<string, unknown>;\n  for (const key of ['servers', 'items', 'results', 'data']) {\n    const value = data[key];\n    if (Array.isArray(value)) {\n      return value.filter((item): item is Record<string, unknown> => Boolean(item && typeof item === 'object' && !Array.isArray(item)));\n    }\n  }\n  return [];\n}\n\nexport const smitheryRegistryAdapter: ConnectorRegistryAdapter = {\n  source: 'smithery',\n  displayName: 'Smithery',\n  async search(params: ConnectorRegistrySearchParams): Promise<ConnectorRegistrySearchResult> {\n    const apiKey = smitheryApiKey();\n    const url = new URL('/servers', smitheryBaseUrl());\n    const query = params.query?.trim();\n    if (query) url.searchParams.set('q', query);\n    url.searchParams.set('pageSize', String(Math.min(Math.max(params.pageSize ?? 24, 1), 100)));\n    if (params.page && params.page > 1) url.searchParams.set('page', String(params.page));\n    const response = await fetch(url, {\n      headers: {\n        Accept: 'application/json',\n        ...(apiKey ? { Authorization: `Bearer ${apiKey}` } : {}),\n      },\n    });\n    if (!response.ok) throw new Error(`Smithery registry returned ${response.status}`);\n    const payload = await response.json();\n    return {\n      source: 'smithery',\n      connectors: extractServers(payload).map((server) => connectorFromSmitheryServer(server, apiKey)).filter((item): item is ConnectorDefinition => Boolean(item)),\n    };\n  },\n};\n"],"mappings":";AAGA,MAAM,mBAAmB;AAEzB,SAAS,iBAAqC;AAC5C,QAAO,QAAQ,IAAI,uBAAuB,MAAM,IAAI,QAAQ,IAAI,kBAAkB,MAAM,IAAI,KAAA;;AAG9F,SAAS,kBAA0B;AACjC,QAAO,QAAQ,IAAI,4BAA4B,MAAM,CAAC,QAAQ,QAAQ,GAAG,IAAI;;AAG/E,SAAS,WAAW,OAAoC;AACtD,QAAO,OAAO,UAAU,YAAY,MAAM,MAAM,GAAG,MAAM,MAAM,GAAG,KAAA;;AAGpE,SAAS,SAAS,OAAuB;AACvC,QAAO,MACJ,MAAM,CACN,aAAa,CACb,QAAQ,MAAM,GAAG,CACjB,QAAQ,iBAAiB,IAAI,CAC7B,QAAQ,YAAY,GAAG,CACvB,MAAM,GAAG,GAAG,IAAI;;AAGrB,SAAS,4BAA4B,QAAiC,QAAkD;CACtH,MAAM,gBAAgB,WAAW,OAAO,iBAAiB,OAAO,kBAAkB,OAAO,QAAQ,OAAO,GAAG;CAC3G,MAAM,cAAc,WAAW,OAAO,eAAe,OAAO,gBAAgB,OAAO,KAAK,IAAI;AAC5F,KAAI,CAAC,iBAAiB,CAAC,YAAa,QAAO,KAAA;CAC3C,MAAM,WAAW,SAAS,cAAc;CAExC,MAAM,MAAM,8BADQ,cAAc,MAAM,IAAI,CAAC,KAAK,SAAS,mBAAmB,KAAK,CAAC,CAAC,KAAK,IACrC,CAAC;AACtD,QAAO;EACL,IAAI,YAAY;EAChB,SAAS,WAAW,OAAO,QAAQ,IAAI;EACvC;EACA,aAAa,WAAW,OAAO,YAAY,IAAI;EAC/C,UAAU;EACV,MAAM;EACN,QAAQ;EACR,cAAc;GAAC;GAAS;GAAa;GAAW;GAAe;GAA6B;EAC5F,MAAM;GAAC;GAAY;GAAY;GAAM;EACrC,MAAM,EAAE,MAAM,UAAU;EACxB,OAAO,SACH,EAAE,GACF,EACE,SAAS,CACP;GACE,KAAK;GACL,OAAO;GACP,aAAa;GACb,UAAU;GACX,CACF,EACF;EACL,SAAS;GACP,MAAM;GACN;GACA,gBAAgB;IACd;IACA,WAAW;IACX,SAAS,EACP,eAAe,SAAS,UAAU,WAAW,6CAC9C;IACF;GACF;EACF;;AAGH,SAAS,eAAe,SAA6C;AACnE,KAAI,MAAM,QAAQ,QAAQ,CAAE,QAAO,QAAQ,QAAQ,SAA0C,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,CAAC,CAAC;AAC/J,KAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,QAAQ,CAAE,QAAO,EAAE;CAChF,MAAM,OAAO;AACb,MAAK,MAAM,OAAO;EAAC;EAAW;EAAS;EAAW;EAAO,EAAE;EACzD,MAAM,QAAQ,KAAK;AACnB,MAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,QAAQ,SAA0C,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,CAAC,CAAC;;AAGrI,QAAO,EAAE;;AAGX,MAAa,0BAAoD;CAC/D,QAAQ;CACR,aAAa;CACb,MAAM,OAAO,QAA+E;EAC1F,MAAM,SAAS,gBAAgB;EAC/B,MAAM,MAAM,IAAI,IAAI,YAAY,iBAAiB,CAAC;EAClD,MAAM,QAAQ,OAAO,OAAO,MAAM;AAClC,MAAI,MAAO,KAAI,aAAa,IAAI,KAAK,MAAM;AAC3C,MAAI,aAAa,IAAI,YAAY,OAAO,KAAK,IAAI,KAAK,IAAI,OAAO,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;AAC3F,MAAI,OAAO,QAAQ,OAAO,OAAO,EAAG,KAAI,aAAa,IAAI,QAAQ,OAAO,OAAO,KAAK,CAAC;EACrF,MAAM,WAAW,MAAM,MAAM,KAAK,EAChC,SAAS;GACP,QAAQ;GACR,GAAI,SAAS,EAAE,eAAe,UAAU,UAAU,GAAG,EAAE;GACxD,EACF,CAAC;AACF,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,8BAA8B,SAAS,SAAS;AAElF,SAAO;GACL,QAAQ;GACR,YAAY,eAAe,MAHP,SAAS,MAAM,CAGA,CAAC,KAAK,WAAW,4BAA4B,QAAQ,OAAO,CAAC,CAAC,QAAQ,SAAsC,QAAQ,KAAK,CAAC;GAC9J;;CAEJ"}
+{"version":3,"file":"smithery.js","names":[],"sources":["../../../../src/connectors/registries/smithery.ts"],"sourcesContent":["import type { ConnectorDefinition } from '../types.js';\nimport type { ConnectorRegistryAdapter, ConnectorRegistrySearchParams, ConnectorRegistrySearchResult } from './types.js';\n\nconst DEFAULT_BASE_URL = 'https://registry.smithery.ai';\n\nfunction smitheryApiKey(): string | undefined {\n  return process.env.XOPC_SMITHERY_API_KEY?.trim() || process.env.SMITHERY_API_KEY?.trim() || undefined;\n}\n\nfunction smitheryBaseUrl(): string {\n  return process.env.XOPC_SMITHERY_REGISTRY_URL?.trim().replace(/\\/+$/, '') || DEFAULT_BASE_URL;\n}\n\nfunction readString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined;\n}\n\nfunction slugFrom(value: string): string {\n  return value\n    .trim()\n    .toLowerCase()\n    .replace(/^@/, '')\n    .replace(/[^a-z0-9_-]+/g, '-')\n    .replace(/^-+|-+$/g, '')\n    .slice(0, 64) || 'smithery-mcp';\n}\n\nfunction connectorFromSmitheryServer(server: Record<string, unknown>, apiKey?: string): ConnectorDefinition | undefined {\n  const qualifiedName = readString(server.qualifiedName ?? server.qualified_name ?? server.name ?? server.id);\n  const displayName = readString(server.displayName ?? server.display_name ?? server.name) ?? qualifiedName;\n  if (!qualifiedName || !displayName) return undefined;\n  const serverId = slugFrom(qualifiedName);\n  const encodedPath = qualifiedName.split('/').map((part) => encodeURIComponent(part)).join('/');\n  const url = `https://server.smithery.ai/${encodedPath}/mcp`;\n  const headers = apiKey ? { Authorization: `Bearer ${apiKey}` } : undefined;\n  return {\n    id: `smithery-${serverId}`,\n    version: readString(server.version) ?? 'registry',\n    displayName,\n    description: readString(server.description) ?? 'MCP server hosted through Smithery.',\n    category: 'custom',\n    kind: 'mcp',\n    source: 'registry',\n    capabilities: apiKey\n      ? ['tools', 'resources', 'prompts', 'auth.apiKey', 'runtime.mcp.streamableHttp']\n      : ['tools', 'resources', 'prompts', 'runtime.mcp.streamableHttp'],\n    tags: ['smithery', 'registry', 'mcp'],\n    auth: { mode: apiKey ? 'apiKey' : 'none' },\n    setup: {},\n    runtime: {\n      type: 'mcp',\n      serverId,\n      serverTemplate: {\n        url,\n        transport: 'streamable-http',\n        ...(headers ? { headers } : {}),\n      },\n    },\n  };\n}\n\nfunction extractServers(payload: unknown): Record<string, unknown>[] {\n  if (Array.isArray(payload)) return payload.filter((item): item is Record<string, unknown> => Boolean(item && typeof item === 'object' && !Array.isArray(item)));\n  if (!payload || typeof payload !== 'object' || Array.isArray(payload)) return [];\n  const data = payload as Record<string, unknown>;\n  for (const key of ['servers', 'items', 'results', 'data']) {\n    const value = data[key];\n    if (Array.isArray(value)) {\n      return value.filter((item): item is Record<string, unknown> => Boolean(item && typeof item === 'object' && !Array.isArray(item)));\n    }\n  }\n  return [];\n}\n\nexport const smitheryRegistryAdapter: ConnectorRegistryAdapter = {\n  source: 'smithery',\n  displayName: 'Smithery',\n  async search(params: ConnectorRegistrySearchParams): Promise<ConnectorRegistrySearchResult> {\n    const apiKey = smitheryApiKey();\n    const url = new URL('/servers', smitheryBaseUrl());\n    const query = params.query?.trim();\n    if (query) url.searchParams.set('q', query);\n    url.searchParams.set('pageSize', String(Math.min(Math.max(params.pageSize ?? 24, 1), 100)));\n    if (params.page && params.page > 1) url.searchParams.set('page', String(params.page));\n    const response = await fetch(url, {\n      headers: {\n        Accept: 'application/json',\n        ...(apiKey ? { Authorization: `Bearer ${apiKey}` } : {}),\n      },\n    });\n    if (!response.ok) throw new Error(`Smithery registry returned ${response.status}`);\n    const payload = await response.json();\n    return {\n      source: 'smithery',\n      connectors: extractServers(payload).map((server) => connectorFromSmitheryServer(server, apiKey)).filter((item): item is ConnectorDefinition => Boolean(item)),\n    };\n  },\n};\n"],"mappings":";AAGA,MAAM,mBAAmB;AAEzB,SAAS,iBAAqC;AAC5C,QAAO,QAAQ,IAAI,uBAAuB,MAAM,IAAI,QAAQ,IAAI,kBAAkB,MAAM,IAAI,KAAA;;AAG9F,SAAS,kBAA0B;AACjC,QAAO,QAAQ,IAAI,4BAA4B,MAAM,CAAC,QAAQ,QAAQ,GAAG,IAAI;;AAG/E,SAAS,WAAW,OAAoC;AACtD,QAAO,OAAO,UAAU,YAAY,MAAM,MAAM,GAAG,MAAM,MAAM,GAAG,KAAA;;AAGpE,SAAS,SAAS,OAAuB;AACvC,QAAO,MACJ,MAAM,CACN,aAAa,CACb,QAAQ,MAAM,GAAG,CACjB,QAAQ,iBAAiB,IAAI,CAC7B,QAAQ,YAAY,GAAG,CACvB,MAAM,GAAG,GAAG,IAAI;;AAGrB,SAAS,4BAA4B,QAAiC,QAAkD;CACtH,MAAM,gBAAgB,WAAW,OAAO,iBAAiB,OAAO,kBAAkB,OAAO,QAAQ,OAAO,GAAG;CAC3G,MAAM,cAAc,WAAW,OAAO,eAAe,OAAO,gBAAgB,OAAO,KAAK,IAAI;AAC5F,KAAI,CAAC,iBAAiB,CAAC,YAAa,QAAO,KAAA;CAC3C,MAAM,WAAW,SAAS,cAAc;CAExC,MAAM,MAAM,8BADQ,cAAc,MAAM,IAAI,CAAC,KAAK,SAAS,mBAAmB,KAAK,CAAC,CAAC,KAAK,IACrC,CAAC;CACtD,MAAM,UAAU,SAAS,EAAE,eAAe,UAAU,UAAU,GAAG,KAAA;AACjE,QAAO;EACL,IAAI,YAAY;EAChB,SAAS,WAAW,OAAO,QAAQ,IAAI;EACvC;EACA,aAAa,WAAW,OAAO,YAAY,IAAI;EAC/C,UAAU;EACV,MAAM;EACN,QAAQ;EACR,cAAc,SACV;GAAC;GAAS;GAAa;GAAW;GAAe;GAA6B,GAC9E;GAAC;GAAS;GAAa;GAAW;GAA6B;EACnE,MAAM;GAAC;GAAY;GAAY;GAAM;EACrC,MAAM,EAAE,MAAM,SAAS,WAAW,QAAQ;EAC1C,OAAO,EAAE;EACT,SAAS;GACP,MAAM;GACN;GACA,gBAAgB;IACd;IACA,WAAW;IACX,GAAI,UAAU,EAAE,SAAS,GAAG,EAAE;IAC/B;GACF;EACF;;AAGH,SAAS,eAAe,SAA6C;AACnE,KAAI,MAAM,QAAQ,QAAQ,CAAE,QAAO,QAAQ,QAAQ,SAA0C,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,CAAC,CAAC;AAC/J,KAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,QAAQ,CAAE,QAAO,EAAE;CAChF,MAAM,OAAO;AACb,MAAK,MAAM,OAAO;EAAC;EAAW;EAAS;EAAW;EAAO,EAAE;EACzD,MAAM,QAAQ,KAAK;AACnB,MAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,QAAQ,SAA0C,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,CAAC,CAAC;;AAGrI,QAAO,EAAE;;AAGX,MAAa,0BAAoD;CAC/D,QAAQ;CACR,aAAa;CACb,MAAM,OAAO,QAA+E;EAC1F,MAAM,SAAS,gBAAgB;EAC/B,MAAM,MAAM,IAAI,IAAI,YAAY,iBAAiB,CAAC;EAClD,MAAM,QAAQ,OAAO,OAAO,MAAM;AAClC,MAAI,MAAO,KAAI,aAAa,IAAI,KAAK,MAAM;AAC3C,MAAI,aAAa,IAAI,YAAY,OAAO,KAAK,IAAI,KAAK,IAAI,OAAO,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;AAC3F,MAAI,OAAO,QAAQ,OAAO,OAAO,EAAG,KAAI,aAAa,IAAI,QAAQ,OAAO,OAAO,KAAK,CAAC;EACrF,MAAM,WAAW,MAAM,MAAM,KAAK,EAChC,SAAS;GACP,QAAQ;GACR,GAAI,SAAS,EAAE,eAAe,UAAU,UAAU,GAAG,EAAE;GACxD,EACF,CAAC;AACF,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,8BAA8B,SAAS,SAAS;AAElF,SAAO;GACL,QAAQ;GACR,YAAY,eAAe,MAHP,SAAS,MAAM,CAGA,CAAC,KAAK,WAAW,4BAA4B,QAAQ,OAAO,CAAC,CAAC,QAAQ,SAAsC,QAAQ,KAAK,CAAC;GAC9J;;CAEJ"}

package/dist/src/daemon/install-plan.js

@@ -5,6 +5,7 @@ import { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription } from "./cons
 import { homedir } from "node:os";
 import path from "node:path";
 import { existsSync } from "node:fs";
+import { fileURLToPath } from "node:url";
 //#region src/daemon/install-plan.ts
 /**
 * Install Plan Builder - Build gateway installation configuration
@@ -33,7 +34,7 @@ function isSEABinary() {
 }
 function resolveEntryPoint() {
 	if (isSEABinary()) return process.execPath;
-	const thisDir = path.dirname(new URL(import.meta.url).pathname);
+	const thisDir = path.dirname(fileURLToPath(import.meta.url));
 	const sourceEntryPoint = path.join(thisDir, "..", "cli", "bin.ts");
 	if (existsSync(sourceEntryPoint)) return sourceEntryPoint;
 	return path.join(thisDir, "..", "cli", "bin.js");

package/dist/src/daemon/install-plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"install-plan.js","names":[],"sources":["../../../src/daemon/install-plan.ts"],"sourcesContent":["/**\n * Install Plan Builder - Build gateway installation configuration\n *\n * Aligned with OpenClaw: adds XOPC_SERVICE_VERSION, StandardOut/ErrorPath,\n * supports binary runtime detection, and --foreground arg passing.\n */\n\nimport { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport { homedir } from 'node:os';\nimport { createLogger } from '../utils/logger.js';\nimport { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription } from './constants.js';\nimport { PACKAGE_VERSION } from '../package-version.js';\nimport type { GatewayServiceInstallArgs, GatewayServiceEnv } from './types.js';\n\nconst log = createLogger('InstallPlan');\n\nexport interface InstallPlan {\n  programArguments: string[];\n  workingDirectory: string;\n  environment: Record<string, string>;\n  description: string;\n}\n\n// ─── Path Resolution ───\n\nfunction resolveDefaultConfigPath(): string {\n  const envConfig = process.env.XOPC_CONFIG || process.env.XOPC_CONFIG_PATH;\n  if (envConfig) return envConfig;\n  return path.join(homedir(), '.xopc', 'xopc.json');\n}\n\nfunction resolveDefaultWorkspace(): string {\n  const envWorkspace = process.env.XOPC_WORKSPACE;\n  if (envWorkspace) return envWorkspace;\n  return path.join(homedir(), '.xopc', 'workspace');\n}\n\nfunction resolveLogDir(): string {\n  return path.join(homedir(), '.xopc', 'logs');\n}\n\n// ─── Binary Detection ───\n\nfunction isSEABinary(): boolean {\n  // Node.js SEA (Single Executable Application) detection\n  return !!(process as NodeJS.Process & { pkg?: unknown }).pkg ||\n    process.execPath.endsWith('xopc') ||\n    process.execPath.endsWith('xopc.exe');\n}\n\nfunction resolveEntryPoint(): string {\n  if (isSEABinary()) {\n    return process.execPath;\n  }\n  // Must match package.json \"bin\" in built packages, while source/dev runs use bin.ts.\n  // index.js only exports runCli and exits immediately when executed directly.\n  const thisDir = path.dirname(new URL(import.meta.url).pathname);\n  const sourceEntryPoint = path.join(thisDir, '..', 'cli', 'bin.ts');\n  if (existsSync(sourceEntryPoint)) {\n    return sourceEntryPoint;\n  }\n  return path.join(thisDir, '..', 'cli', 'bin.js');\n}\n\nfunction resolveServiceNodeArgs(): string[] {\n  const serviceNodeArgs: string[] = [];\n  const skipValueFlags = new Set(['-e', '--eval', '-p', '--print', '--test-name-pattern']);\n\n  for (let index = 0; index < process.execArgv.length; index += 1) {\n    const arg = process.execArgv[index];\n    if (!arg) continue;\n    if (arg.startsWith('--inspect') || arg.startsWith('--debug')) continue;\n    if (skipValueFlags.has(arg)) {\n      index += 1;\n      continue;\n    }\n    if ([...skipValueFlags].some((flag) => arg.startsWith(`${flag}=`))) continue;\n    serviceNodeArgs.push(arg);\n  }\n\n  return serviceNodeArgs;\n}\n\n// ─── Plan Builder ───\n\nexport function buildGatewayInstallPlan(params: {\n  port: number;\n  bind?: import('../config/schema.js').GatewayBindMode;\n  token?: string;\n  env?: GatewayServiceEnv;\n  runtime?: 'node' | 'binary';\n  version?: string;\n}): InstallPlan {\n  const configPath = resolveDefaultConfigPath();\n  const workspace = resolveDefaultWorkspace();\n  const version = params.version || PACKAGE_VERSION;\n\n  // Determine program + arguments\n  let programArguments: string[];\n\n  if (params.runtime === 'binary' || isSEABinary()) {\n    // SEA binary: direct execution\n    const binaryPath = process.execPath;\n    programArguments = [binaryPath, 'gateway', '--foreground', '--port', params.port.toString()];\n  } else {\n    // Node.js runtime\n    const nodeArgs = resolveServiceNodeArgs();\n    const entryPoint = resolveEntryPoint();\n    programArguments = [\n      process.execPath,\n      ...nodeArgs,\n      entryPoint,\n      'gateway',\n      '--foreground',\n      '--port', params.port.toString(),\n    ];\n  }\n\n  if (params.bind && params.bind !== 'loopback') {\n    programArguments.push('--bind', params.bind);\n  }\n\n  // Build environment\n  const environment: Record<string, string> = {\n    XOPC_CONFIG: configPath,\n    XOPC_WORKSPACE: workspace,\n    XOPC_LOG_LEVEL: process.env.XOPC_LOG_LEVEL || 'info',\n    XOPC_LOG_FILE: 'true',\n    XOPC_LOG_CONSOLE: 'false',\n    XOPC_LOG_DIR: resolveLogDir(),\n    [SERVICE_VERSION_ENV_KEY]: version,\n    XOPC_SERVICE_MARKER: '1',\n  };\n\n  if (params.token) {\n    environment.XOPC_GATEWAY_TOKEN = params.token;\n  }\n\n  // Copy relevant API key env vars\n  const relevantEnvVars = [\n    'OPENAI_API_KEY',\n    'ANTHROPIC_API_KEY',\n    'GOOGLE_API_KEY',\n    'BRAVE_API_KEY',\n    'DASHSCOPE_API_KEY',\n    'XOPC_LOG_RETENTION_DAYS',\n  ];\n\n  for (const key of relevantEnvVars) {\n    if (process.env[key]) {\n      environment[key] = process.env[key]!;\n    }\n  }\n\n  // Add custom env from params (non-XOPC keys only; XOPC keys already handled)\n  if (params.env) {\n    for (const [key, value] of Object.entries(params.env)) {\n      if (value !== undefined && !key.startsWith('XOPC_')) {\n        environment[key] = value;\n      }\n    }\n  }\n\n  // Service description\n  const profile = params.env?.XOPC_PROFILE?.trim() || undefined;\n  const description = formatGatewayServiceDescription({ profile, version });\n\n  log.info({\n    programArguments: programArguments.slice(0, 3),\n    envKeys: Object.keys(environment),\n    version,\n  }, 'Built gateway install plan');\n\n  return {\n    programArguments,\n    workingDirectory: path.dirname(configPath),\n    environment,\n    description,\n  };\n}\n\n// ─── Install Args Builder ───\n\nexport function buildGatewayInstallArgs(params: {\n  port: number;\n  bind?: import('../config/schema.js').GatewayBindMode;\n  token?: string;\n  env?: GatewayServiceEnv;\n  runtime?: 'node' | 'binary';\n  version?: string;\n}): GatewayServiceInstallArgs {\n  const plan = buildGatewayInstallPlan(params);\n\n  return {\n    env: params.env || process.env,\n    programArguments: plan.programArguments,\n    workingDirectory: plan.workingDirectory,\n    environment: plan.environment,\n    description: plan.description,\n  };\n}\n\n// ─── Validation ───\n\n/** Check if the program in an install plan still exists on disk */\nexport function validateInstallPlanProgram(programArguments: string[]): boolean {\n  if (programArguments.length === 0) return false;\n  const program = programArguments[0];\n  return existsSync(program);\n}\n"],"mappings":";;;;;;;;;;;;;;aAUkD;sBAEM;AAGxD,MAAM,MAAM,aAAa,cAAc;AAWvC,SAAS,2BAAmC;CAC1C,MAAM,YAAY,QAAQ,IAAI,eAAe,QAAQ,IAAI;AACzD,KAAI,UAAW,QAAO;AACtB,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,YAAY;;AAGnD,SAAS,0BAAkC;CACzC,MAAM,eAAe,QAAQ,IAAI;AACjC,KAAI,aAAc,QAAO;AACzB,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,YAAY;;AAGnD,SAAS,gBAAwB;AAC/B,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,OAAO;;AAK9C,SAAS,cAAuB;AAE9B,QAAO,CAAC,CAAE,QAA+C,OACvD,QAAQ,SAAS,SAAS,OAAO,IACjC,QAAQ,SAAS,SAAS,WAAW;;AAGzC,SAAS,oBAA4B;AACnC,KAAI,aAAa,CACf,QAAO,QAAQ;CAIjB,MAAM,UAAU,KAAK,QAAQ,IAAI,IAAI,OAAO,KAAK,IAAI,CAAC,SAAS;CAC/D,MAAM,mBAAmB,KAAK,KAAK,SAAS,MAAM,OAAO,SAAS;AAClE,KAAI,WAAW,iBAAiB,CAC9B,QAAO;AAET,QAAO,KAAK,KAAK,SAAS,MAAM,OAAO,SAAS;;AAGlD,SAAS,yBAAmC;CAC1C,MAAM,kBAA4B,EAAE;CACpC,MAAM,iBAAiB,IAAI,IAAI;EAAC;EAAM;EAAU;EAAM;EAAW;EAAsB,CAAC;AAExF,MAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,QAAQ,SAAS,GAAG;EAC/D,MAAM,MAAM,QAAQ,SAAS;AAC7B,MAAI,CAAC,IAAK;AACV,MAAI,IAAI,WAAW,YAAY,IAAI,IAAI,WAAW,UAAU,CAAE;AAC9D,MAAI,eAAe,IAAI,IAAI,EAAE;AAC3B,YAAS;AACT;;AAEF,MAAI,CAAC,GAAG,eAAe,CAAC,MAAM,SAAS,IAAI,WAAW,GAAG,KAAK,GAAG,CAAC,CAAE;AACpE,kBAAgB,KAAK,IAAI;;AAG3B,QAAO;;AAKT,SAAgB,wBAAwB,QAOxB;CACd,MAAM,aAAa,0BAA0B;CAC7C,MAAM,YAAY,yBAAyB;CAC3C,MAAM,UAAU,OAAO,WAAW;CAGlC,IAAI;AAEJ,KAAI,OAAO,YAAY,YAAY,aAAa,CAG9C,oBAAmB;EADA,QAAQ;EACK;EAAW;EAAgB;EAAU,OAAO,KAAK,UAAU;EAAC;MACvF;EAEL,MAAM,WAAW,wBAAwB;EACzC,MAAM,aAAa,mBAAmB;AACtC,qBAAmB;GACjB,QAAQ;GACR,GAAG;GACH;GACA;GACA;GACA;GAAU,OAAO,KAAK,UAAU;GACjC;;AAGH,KAAI,OAAO,QAAQ,OAAO,SAAS,WACjC,kBAAiB,KAAK,UAAU,OAAO,KAAK;CAI9C,MAAM,cAAsC;EAC1C,aAAa;EACb,gBAAgB;EAChB,gBAAgB,QAAQ,IAAI,kBAAkB;EAC9C,eAAe;EACf,kBAAkB;EAClB,cAAc,eAAe;GAC5B,0BAA0B;EAC3B,qBAAqB;EACtB;AAED,KAAI,OAAO,MACT,aAAY,qBAAqB,OAAO;AAa1C,MAAK,MAAM,OAAO;EARhB;EACA;EACA;EACA;EACA;EACA;EAG+B,CAC/B,KAAI,QAAQ,IAAI,KACd,aAAY,OAAO,QAAQ,IAAI;AAKnC,KAAI,OAAO;OACJ,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,IAAI,CACnD,KAAI,UAAU,KAAA,KAAa,CAAC,IAAI,WAAW,QAAQ,CACjD,aAAY,OAAO;;CAOzB,MAAM,cAAc,gCAAgC;EAAE,SADtC,OAAO,KAAK,cAAc,MAAM,IAAI,KAAA;EACW;EAAS,CAAC;AAEzE,KAAI,KAAK;EACP,kBAAkB,iBAAiB,MAAM,GAAG,EAAE;EAC9C,SAAS,OAAO,KAAK,YAAY;EACjC;EACD,EAAE,6BAA6B;AAEhC,QAAO;EACL;EACA,kBAAkB,KAAK,QAAQ,WAAW;EAC1C;EACA;EACD;;AAKH,SAAgB,wBAAwB,QAOV;CAC5B,MAAM,OAAO,wBAAwB,OAAO;AAE5C,QAAO;EACL,KAAK,OAAO,OAAO,QAAQ;EAC3B,kBAAkB,KAAK;EACvB,kBAAkB,KAAK;EACvB,aAAa,KAAK;EAClB,aAAa,KAAK;EACnB;;;AAMH,SAAgB,2BAA2B,kBAAqC;AAC9E,KAAI,iBAAiB,WAAW,EAAG,QAAO;CAC1C,MAAM,UAAU,iBAAiB;AACjC,QAAO,WAAW,QAAQ"}
+{"version":3,"file":"install-plan.js","names":[],"sources":["../../../src/daemon/install-plan.ts"],"sourcesContent":["/**\n * Install Plan Builder - Build gateway installation configuration\n *\n * Aligned with OpenClaw: adds XOPC_SERVICE_VERSION, StandardOut/ErrorPath,\n * supports binary runtime detection, and --foreground arg passing.\n */\n\nimport { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport { homedir } from 'node:os';\nimport { fileURLToPath } from 'node:url';\nimport { createLogger } from '../utils/logger.js';\nimport { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription } from './constants.js';\nimport { PACKAGE_VERSION } from '../package-version.js';\nimport type { GatewayServiceInstallArgs, GatewayServiceEnv } from './types.js';\n\nconst log = createLogger('InstallPlan');\n\nexport interface InstallPlan {\n  programArguments: string[];\n  workingDirectory: string;\n  environment: Record<string, string>;\n  description: string;\n}\n\n// ─── Path Resolution ───\n\nfunction resolveDefaultConfigPath(): string {\n  const envConfig = process.env.XOPC_CONFIG || process.env.XOPC_CONFIG_PATH;\n  if (envConfig) return envConfig;\n  return path.join(homedir(), '.xopc', 'xopc.json');\n}\n\nfunction resolveDefaultWorkspace(): string {\n  const envWorkspace = process.env.XOPC_WORKSPACE;\n  if (envWorkspace) return envWorkspace;\n  return path.join(homedir(), '.xopc', 'workspace');\n}\n\nfunction resolveLogDir(): string {\n  return path.join(homedir(), '.xopc', 'logs');\n}\n\n// ─── Binary Detection ───\n\nfunction isSEABinary(): boolean {\n  // Node.js SEA (Single Executable Application) detection\n  return !!(process as NodeJS.Process & { pkg?: unknown }).pkg ||\n    process.execPath.endsWith('xopc') ||\n    process.execPath.endsWith('xopc.exe');\n}\n\nfunction resolveEntryPoint(): string {\n  if (isSEABinary()) {\n    return process.execPath;\n  }\n  // Must match package.json \"bin\" in built packages, while source/dev runs use bin.ts.\n  // index.js only exports runCli and exits immediately when executed directly.\n  const thisDir = path.dirname(fileURLToPath(import.meta.url));\n  const sourceEntryPoint = path.join(thisDir, '..', 'cli', 'bin.ts');\n  if (existsSync(sourceEntryPoint)) {\n    return sourceEntryPoint;\n  }\n  return path.join(thisDir, '..', 'cli', 'bin.js');\n}\n\nfunction resolveServiceNodeArgs(): string[] {\n  const serviceNodeArgs: string[] = [];\n  const skipValueFlags = new Set(['-e', '--eval', '-p', '--print', '--test-name-pattern']);\n\n  for (let index = 0; index < process.execArgv.length; index += 1) {\n    const arg = process.execArgv[index];\n    if (!arg) continue;\n    if (arg.startsWith('--inspect') || arg.startsWith('--debug')) continue;\n    if (skipValueFlags.has(arg)) {\n      index += 1;\n      continue;\n    }\n    if ([...skipValueFlags].some((flag) => arg.startsWith(`${flag}=`))) continue;\n    serviceNodeArgs.push(arg);\n  }\n\n  return serviceNodeArgs;\n}\n\n// ─── Plan Builder ───\n\nexport function buildGatewayInstallPlan(params: {\n  port: number;\n  bind?: import('../config/schema.js').GatewayBindMode;\n  token?: string;\n  env?: GatewayServiceEnv;\n  runtime?: 'node' | 'binary';\n  version?: string;\n}): InstallPlan {\n  const configPath = resolveDefaultConfigPath();\n  const workspace = resolveDefaultWorkspace();\n  const version = params.version || PACKAGE_VERSION;\n\n  // Determine program + arguments\n  let programArguments: string[];\n\n  if (params.runtime === 'binary' || isSEABinary()) {\n    // SEA binary: direct execution\n    const binaryPath = process.execPath;\n    programArguments = [binaryPath, 'gateway', '--foreground', '--port', params.port.toString()];\n  } else {\n    // Node.js runtime\n    const nodeArgs = resolveServiceNodeArgs();\n    const entryPoint = resolveEntryPoint();\n    programArguments = [\n      process.execPath,\n      ...nodeArgs,\n      entryPoint,\n      'gateway',\n      '--foreground',\n      '--port', params.port.toString(),\n    ];\n  }\n\n  if (params.bind && params.bind !== 'loopback') {\n    programArguments.push('--bind', params.bind);\n  }\n\n  // Build environment\n  const environment: Record<string, string> = {\n    XOPC_CONFIG: configPath,\n    XOPC_WORKSPACE: workspace,\n    XOPC_LOG_LEVEL: process.env.XOPC_LOG_LEVEL || 'info',\n    XOPC_LOG_FILE: 'true',\n    XOPC_LOG_CONSOLE: 'false',\n    XOPC_LOG_DIR: resolveLogDir(),\n    [SERVICE_VERSION_ENV_KEY]: version,\n    XOPC_SERVICE_MARKER: '1',\n  };\n\n  if (params.token) {\n    environment.XOPC_GATEWAY_TOKEN = params.token;\n  }\n\n  // Copy relevant API key env vars\n  const relevantEnvVars = [\n    'OPENAI_API_KEY',\n    'ANTHROPIC_API_KEY',\n    'GOOGLE_API_KEY',\n    'BRAVE_API_KEY',\n    'DASHSCOPE_API_KEY',\n    'XOPC_LOG_RETENTION_DAYS',\n  ];\n\n  for (const key of relevantEnvVars) {\n    if (process.env[key]) {\n      environment[key] = process.env[key]!;\n    }\n  }\n\n  // Add custom env from params (non-XOPC keys only; XOPC keys already handled)\n  if (params.env) {\n    for (const [key, value] of Object.entries(params.env)) {\n      if (value !== undefined && !key.startsWith('XOPC_')) {\n        environment[key] = value;\n      }\n    }\n  }\n\n  // Service description\n  const profile = params.env?.XOPC_PROFILE?.trim() || undefined;\n  const description = formatGatewayServiceDescription({ profile, version });\n\n  log.info({\n    programArguments: programArguments.slice(0, 3),\n    envKeys: Object.keys(environment),\n    version,\n  }, 'Built gateway install plan');\n\n  return {\n    programArguments,\n    workingDirectory: path.dirname(configPath),\n    environment,\n    description,\n  };\n}\n\n// ─── Install Args Builder ───\n\nexport function buildGatewayInstallArgs(params: {\n  port: number;\n  bind?: import('../config/schema.js').GatewayBindMode;\n  token?: string;\n  env?: GatewayServiceEnv;\n  runtime?: 'node' | 'binary';\n  version?: string;\n}): GatewayServiceInstallArgs {\n  const plan = buildGatewayInstallPlan(params);\n\n  return {\n    env: params.env || process.env,\n    programArguments: plan.programArguments,\n    workingDirectory: plan.workingDirectory,\n    environment: plan.environment,\n    description: plan.description,\n  };\n}\n\n// ─── Validation ───\n\n/** Check if the program in an install plan still exists on disk */\nexport function validateInstallPlanProgram(programArguments: string[]): boolean {\n  if (programArguments.length === 0) return false;\n  const program = programArguments[0];\n  return existsSync(program);\n}\n"],"mappings":";;;;;;;;;;;;;;;aAWkD;sBAEM;AAGxD,MAAM,MAAM,aAAa,cAAc;AAWvC,SAAS,2BAAmC;CAC1C,MAAM,YAAY,QAAQ,IAAI,eAAe,QAAQ,IAAI;AACzD,KAAI,UAAW,QAAO;AACtB,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,YAAY;;AAGnD,SAAS,0BAAkC;CACzC,MAAM,eAAe,QAAQ,IAAI;AACjC,KAAI,aAAc,QAAO;AACzB,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,YAAY;;AAGnD,SAAS,gBAAwB;AAC/B,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,OAAO;;AAK9C,SAAS,cAAuB;AAE9B,QAAO,CAAC,CAAE,QAA+C,OACvD,QAAQ,SAAS,SAAS,OAAO,IACjC,QAAQ,SAAS,SAAS,WAAW;;AAGzC,SAAS,oBAA4B;AACnC,KAAI,aAAa,CACf,QAAO,QAAQ;CAIjB,MAAM,UAAU,KAAK,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;CAC5D,MAAM,mBAAmB,KAAK,KAAK,SAAS,MAAM,OAAO,SAAS;AAClE,KAAI,WAAW,iBAAiB,CAC9B,QAAO;AAET,QAAO,KAAK,KAAK,SAAS,MAAM,OAAO,SAAS;;AAGlD,SAAS,yBAAmC;CAC1C,MAAM,kBAA4B,EAAE;CACpC,MAAM,iBAAiB,IAAI,IAAI;EAAC;EAAM;EAAU;EAAM;EAAW;EAAsB,CAAC;AAExF,MAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,QAAQ,SAAS,GAAG;EAC/D,MAAM,MAAM,QAAQ,SAAS;AAC7B,MAAI,CAAC,IAAK;AACV,MAAI,IAAI,WAAW,YAAY,IAAI,IAAI,WAAW,UAAU,CAAE;AAC9D,MAAI,eAAe,IAAI,IAAI,EAAE;AAC3B,YAAS;AACT;;AAEF,MAAI,CAAC,GAAG,eAAe,CAAC,MAAM,SAAS,IAAI,WAAW,GAAG,KAAK,GAAG,CAAC,CAAE;AACpE,kBAAgB,KAAK,IAAI;;AAG3B,QAAO;;AAKT,SAAgB,wBAAwB,QAOxB;CACd,MAAM,aAAa,0BAA0B;CAC7C,MAAM,YAAY,yBAAyB;CAC3C,MAAM,UAAU,OAAO,WAAW;CAGlC,IAAI;AAEJ,KAAI,OAAO,YAAY,YAAY,aAAa,CAG9C,oBAAmB;EADA,QAAQ;EACK;EAAW;EAAgB;EAAU,OAAO,KAAK,UAAU;EAAC;MACvF;EAEL,MAAM,WAAW,wBAAwB;EACzC,MAAM,aAAa,mBAAmB;AACtC,qBAAmB;GACjB,QAAQ;GACR,GAAG;GACH;GACA;GACA;GACA;GAAU,OAAO,KAAK,UAAU;GACjC;;AAGH,KAAI,OAAO,QAAQ,OAAO,SAAS,WACjC,kBAAiB,KAAK,UAAU,OAAO,KAAK;CAI9C,MAAM,cAAsC;EAC1C,aAAa;EACb,gBAAgB;EAChB,gBAAgB,QAAQ,IAAI,kBAAkB;EAC9C,eAAe;EACf,kBAAkB;EAClB,cAAc,eAAe;GAC5B,0BAA0B;EAC3B,qBAAqB;EACtB;AAED,KAAI,OAAO,MACT,aAAY,qBAAqB,OAAO;AAa1C,MAAK,MAAM,OAAO;EARhB;EACA;EACA;EACA;EACA;EACA;EAG+B,CAC/B,KAAI,QAAQ,IAAI,KACd,aAAY,OAAO,QAAQ,IAAI;AAKnC,KAAI,OAAO;OACJ,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,IAAI,CACnD,KAAI,UAAU,KAAA,KAAa,CAAC,IAAI,WAAW,QAAQ,CACjD,aAAY,OAAO;;CAOzB,MAAM,cAAc,gCAAgC;EAAE,SADtC,OAAO,KAAK,cAAc,MAAM,IAAI,KAAA;EACW;EAAS,CAAC;AAEzE,KAAI,KAAK;EACP,kBAAkB,iBAAiB,MAAM,GAAG,EAAE;EAC9C,SAAS,OAAO,KAAK,YAAY;EACjC;EACD,EAAE,6BAA6B;AAEhC,QAAO;EACL;EACA,kBAAkB,KAAK,QAAQ,WAAW;EAC1C;EACA;EACD;;AAKH,SAAgB,wBAAwB,QAOV;CAC5B,MAAM,OAAO,wBAAwB,OAAO;AAE5C,QAAO;EACL,KAAK,OAAO,OAAO,QAAQ;EAC3B,kBAAkB,KAAK;EACvB,kBAAkB,KAAK;EACvB,aAAa,KAAK;EAClB,aAAa,KAAK;EACnB;;;AAMH,SAAgB,2BAA2B,kBAAqC;AAC9E,KAAI,iBAAiB,WAAW,EAAG,QAAO;CAC1C,MAAM,UAAU,iBAAiB;AACjC,QAAO,WAAW,QAAQ"}

package/dist/src/gateway/agents-admin.js

@@ -1,5 +1,5 @@
-import { resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
+import { resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths, resolveUserProfilePath } from "../config/paths.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";

package/dist/src/gateway/global-defaults-admin.js

@@ -1,8 +1,10 @@
 import { CapabilityPresetSchema, init_schema } from "../agent-manifest/schema.js";
+import { DEFAULT_AGENT_MODELS, init_default_model } from "../config/default-model.js";
 import { getAllProviders, getModelsByProvider, getProviderAuthState, getProviderDisplayName, init_providers } from "../providers/index.js";
 import { getRecommendedModelsForProvider } from "../providers/presentation.js";
 //#region src/gateway/global-defaults-admin.ts
 init_schema();
+init_default_model();
 init_providers();
 function defaultPresetId(cfg) {
 	return cfg.agents.defaultPreset || "default";
@@ -13,10 +15,7 @@ function emptyGlobalDefaultsPreset(id) {
 		name: "Global defaults",
 		description: "Default capabilities inherited by every agent.",
 		version: 1,
-		models: {
-			defaultRole: "deep",
-			roles: {}
-		}
+		models: DEFAULT_AGENT_MODELS
 	};
 }
 function ensureGlobalDefaultsConfig(cfg) {
@@ -27,10 +26,7 @@ function ensureGlobalDefaultsConfig(cfg) {
 		id: presetId,
 		name: current.name || "Global defaults",
 		version: current.version || 1,
-		models: current.models ?? {
-			defaultRole: "deep",
-			roles: {}
-		}
+		models: current.models ?? DEFAULT_AGENT_MODELS
 	} : emptyGlobalDefaultsPreset(presetId);
 	return {
 		...cfg,
@@ -87,10 +83,7 @@ async function listGlobalDefaults(cfg) {
 	providers.sort((a, b) => Number(b.configured) - Number(a.configured) || a.name.localeCompare(b.name));
 	return {
 		presetId,
-		models: preset.models ?? {
-			defaultRole: "deep",
-			roles: {}
-		},
+		models: preset.models ?? DEFAULT_AGENT_MODELS,
 		providers,
 		recommendations
 	};
@@ -106,10 +99,7 @@ function prepareUpdateGlobalDefaults(cfg, body) {
 			error: `models ${parsed.error.issues[0]?.message ?? "is invalid"}`,
 			status: 400
 		};
-		const models = parsed.data.models ?? {
-			defaultRole: "deep",
-			roles: {}
-		};
+		const models = parsed.data.models ?? DEFAULT_AGENT_MODELS;
 		const roles = models.roles ?? {};
 		const defaultRole = models.defaultRole ?? Object.keys(roles)[0] ?? "deep";
 		if (Object.keys(roles).length > 0 && !roles[defaultRole]) return {