@xopcai/xopc 0.0.83 → 0.0.85

package/dist/src/config/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","names":[],"sources":["../../../src/config/schema.ts"],"sourcesContent":["import { z } from 'zod';\n\nimport { checkCacheDir } from '../browser/cache-dir-policy.js';\n\n// ============================================\n// Agent Configs\n// ============================================\n\nexport const AgentModelRefSchema = z.union([\n  z.string(),\n  z\n    .object({\n      primary: z.string().optional(),\n      fallbacks: z.array(z.string()).optional(),\n    })\n    .strict(),\n]);\n\nexport type AgentModelConfig = z.infer<typeof AgentModelRefSchema>;\n\n/**\n * Image-generation model ref. Superset of {@link AgentModelRefSchema} with\n * runtime knobs (`timeoutMs`, `autoProviderFallback`) used by the\n * image-generation runtime; falls back to a plain string for backward\n * compatibility with old configs.\n */\nexport const AgentImageGenerationModelSchema = z.union([\n  z.string(),\n  z\n    .object({\n      primary: z.string().optional(),\n      fallbacks: z.array(z.string()).optional(),\n      /** Hard cap for the whole generation attempt (ms). */\n      timeoutMs: z.number().int().positive().optional(),\n      /**\n       * When all `primary + fallbacks` candidates fail, sweep every other\n       * configured provider before giving up.\n       */\n      autoProviderFallback: z.boolean().optional(),\n    })\n    .strict(),\n]);\n\nexport type AgentImageGenerationModelConfig = z.infer<typeof AgentImageGenerationModelSchema>;\n\nexport const AgentDefaultsSchema = z.object({\n  /** Parent directory: each agent’s Markdown root is `<expanded>/<agentId>/` (e.g. `.../workspace/main`). */\n  workspace: z.string().default('~/.xopc/workspace'),\n  model: z.union([\n    z.string(),\n    z.object({\n      primary: z.string().optional(),\n      fallbacks: z.array(z.string()).optional(),\n    }).strict(),\n  ]).default(''), // Empty default - will be resolved dynamically at runtime\n  /** Vision / image understanding model (provider/model). Falls back to heuristics when unset. */\n  imageModel: AgentModelRefSchema.optional(),\n  /** Image generation model (provider/model), e.g. openai/gpt-image-1. Supports plugin-based providers (OpenAI / DashScope / MiniMax / Google / Fal). */\n  imageGenerationModel: AgentImageGenerationModelSchema.optional(),\n  /** Max image size for image tool loads (MB). */\n  mediaMaxMb: z.number().positive().optional(),\n  maxTokens: z.number().default(8192),\n  temperature: z.number().default(0.7),\n  maxToolIterations: z.number().default(20),\n  // Wall-clock limit for one user turn (LLM + tools). Default 30m if unset; cap 4h.\n  maxTaskDurationMs: z.number().min(60000).max(14_400_000).optional(),\n  // Reliability settings\n  maxRequestsPerTurn: z.number().min(10).max(200).default(50),\n  maxToolFailuresPerTurn: z.number().min(1).max(20).default(3),\n  // Thinking ability settings\n  thinkingDefault: z.enum(['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'adaptive']).optional(),\n  reasoningDefault: z.enum(['off', 'on', 'stream']).optional(),\n  verboseDefault: z.enum(['off', 'on', 'full']).optional(),\n  bootstrapMaxChars: z.number().int().positive().optional(),\n  bootstrapTotalMaxChars: z.number().int().positive().optional(),\n  bootstrapPromptTruncationWarning: z.enum(['off', 'once', 'always']).optional(),\n  startupContext: z\n    .object({\n      enabled: z.boolean().optional(),\n      applyOn: z.array(z.enum(['new', 'reset'])).optional(),\n      dailyMemoryDays: z.number().int().min(1).optional(),\n      maxFileBytes: z.number().int().positive().optional(),\n      maxFileChars: z.number().int().positive().optional(),\n      maxTotalChars: z.number().int().positive().optional(),\n    })\n    .optional(),\n  contextLimits: z\n    .object({\n      postCompactionMaxChars: z.number().int().positive().optional(),\n    })\n    .optional(),\n  compaction: z.object({\n    enabled: z.boolean().default(true),\n    mode: z.enum(['default', 'safeguard']).default('default'),\n    reserveTokens: z.number().default(8000),\n    triggerThreshold: z.number().min(0.5).max(0.95).default(0.8),\n    minMessagesBeforeCompact: z.number().default(10),\n    keepRecentMessages: z.number().default(5),\n    // Dual-strategy compaction\n    evictionWindow: z.number().min(0.1).max(0.5).default(0.2),\n    retentionWindow: z.number().min(3).max(20).default(6),\n    postCompactionSections: z.array(z.string()).optional(),\n  }).optional(),\n  pruning: z.object({\n    enabled: z.boolean().default(true),\n    maxToolResultChars: z.number().default(10000),\n    headKeepRatio: z.number().default(0.3),\n    tailKeepRatio: z.number().default(0.3),\n  }).optional(),\n  /**\n   * Curated memory (`agents/<id>/memories/`) + pluggable external provider.\n   * Only one external provider at a time.\n   */\n  memory: z\n    .object({\n      /** Master switch: `curated_memory` tool, prefetch, and external provider. Default true. */\n      enabled: z.boolean().optional(),\n      /** When false, disable curated_memory tool and memory subsystem helpers. Default true. */\n      useEnhancedSystem: z.boolean().optional(),\n      /** Include USER.md in snapshot. Default true. */\n      userProfileEnabled: z.boolean().optional(),\n      memoryCharLimit: z.number().positive().optional(),\n      userCharLimit: z.number().positive().optional(),\n      provider: z.enum(['none', 'stub']).optional(),\n      /** How often prefetched external memory is injected into the user message. */\n      injectionFrequency: z.enum(['every-turn', 'first-turn']).optional(),\n      /** Inject prefetch on turns 1, 1+N, 1+2N, … (only when injectionFrequency is every-turn). Min 1. */\n      contextCadence: z.number().int().min(1).optional(),\n      /** Reserved for future external “dialectic” sync cadence (not wired yet). */\n      dialecticCadence: z.number().int().min(1).optional(),\n      /**\n       * Background memory consolidation (\"dreaming\"): three-phase sleep model that\n       * promotes short-term recall signals into long-term memory (`MEMORY.md`).\n       *\n       * Phases:\n       * - **light** — fast, frequent sweep (default every 6 h): dedup + signal collection.\n       * - **deep**  — daily deep promotion (default 3 AM): score-gated write to MEMORY.md.\n       * - **rem**   — weekly pattern discovery (default Sun 5 AM): cross-session insight mining.\n       */\n      dreaming: z\n        .object({\n          enabled: z.boolean().optional(),\n          /** Default deep-phase cron when `phases.deep.cron` is omitted. */\n          frequency: z.string().optional(),\n          timezone: z.string().optional(),\n          phases: z\n            .object({\n              light: z\n                .object({\n                  enabled: z.boolean().optional(),\n                  cron: z.string().optional(),\n                  lookbackDays: z.number().int().min(1).optional(),\n                  limit: z.number().int().min(0).optional(),\n                  dedupeSimilarity: z.number().min(0).max(1).optional(),\n                })\n                .optional(),\n              deep: z\n                .object({\n                  enabled: z.boolean().optional(),\n                  cron: z.string().optional(),\n                  minScore: z.number().min(0).max(1).optional(),\n                  minRecallCount: z.number().int().min(1).optional(),\n                  minUniqueQueries: z.number().int().min(1).optional(),\n                  limit: z.number().int().min(0).optional(),\n                  recencyHalfLifeDays: z.number().min(1).optional(),\n                  maxAgeDays: z.number().int().min(1).optional(),\n                })\n                .optional(),\n              rem: z\n                .object({\n                  enabled: z.boolean().optional(),\n                  cron: z.string().optional(),\n                  lookbackDays: z.number().int().min(1).optional(),\n                  limit: z.number().int().min(0).optional(),\n                  minPatternStrength: z.number().min(0).max(1).optional(),\n                })\n                .optional(),\n            })\n            .optional(),\n        })\n        .optional(),\n    })\n    .optional(),\n  /** Cross-session transcript search (`session_search` tool). */\n  sessionSearch: z\n    .object({\n      /** Model ref for per-session summaries (e.g. openai/gpt-4o-mini). */\n      summaryModel: z.string().optional(),\n    })\n    .optional(),\n  /**\n   * Post-turn background review (Hermes-style): optional quiet follow-up that may call\n   * `curated_memory` / `skill_manage` so durable facts and reusable workflows persist\n   * without bloating the main user-visible turn.\n   */\n  backgroundReview: z\n    .object({\n      /** When true, nudges may run after successful turns. Default false (opt-in). */\n      enabled: z.boolean().optional(),\n      /** User-turn cadence for memory review. 0 disables the memory channel. Default 10. */\n      memoryNudgeInterval: z.number().int().min(0).optional(),\n      /** LLM rounds without `skill_manage` before a skill review. 0 disables the skill channel. Default 10. */\n      skillNudgeInterval: z.number().int().min(0).optional(),\n      /** Max tool executions for the review agent. Default 8. */\n      maxToolRounds: z.number().int().min(1).max(32).optional(),\n      /** Max prior messages passed into the review context (tail). Default 80. */\n      maxHistoryMessages: z.number().int().min(10).max(200).optional(),\n      /** Wall-clock cap for the review run (ms). Default 120000. */\n      maxDurationMs: z.number().int().min(30_000).max(600_000).optional(),\n    })\n    .optional(),\n  /** LLM pass for `web_extract` (markdown-focused extraction). */\n  webExtract: z\n    .object({\n      model: z.string().optional(),\n      maxLength: z.number().positive().optional(),\n    })\n    .optional(),\n  /**\n   * Browser capability via unified `browser_use` tool. Enabled by default (set `enabled: false` to disable).\n   * The local Playwright backend requires Chromium on the gateway host: `npx playwright install chromium`.\n   */\n  browser: z\n    .object({\n      enabled: z.boolean().optional(),\n      /** Run browser in headless mode (default: false — visible window). */\n      headless: z.boolean().optional(),\n      /** When true, skip private-IP blocking for browser navigation (cloud metadata endpoints are always blocked). */\n      allowPrivateUrls: z.boolean().optional(),\n      /** Browser command timeout in seconds (default: 30). */\n      commandTimeout: z.number().min(5).optional(),\n      /** Browser backend mode (default: 'extension'). Also: 'local' (Playwright), 'cdp', 'cloud', or 'cloakbrowser'. */\n      backend: z.enum(['local', 'cdp', 'cloud', 'extension', 'cloakbrowser']).optional(),\n      /** Cloud browser backend: 'local' (default Playwright), 'browserbase', or 'browser-use'. */\n      cloudProvider: z.enum(['local', 'browserbase', 'browser-use']).optional(),\n      /** Cloud browser credentials and optional session hints. */\n      cloud: z.object({\n        /** API key for the selected cloud provider. Environment variables are still supported as fallback. */\n        apiKey: z.string().optional(),\n        /** Browserbase project id. Falls back to BROWSERBASE_PROJECT_ID. */\n        projectId: z.string().optional(),\n        /** Optional cloud provider region. */\n        region: z.string().optional(),\n      }).optional(),\n      /** Direct CDP WebSocket endpoint URL (bypasses cloud provider). */\n      cdpUrl: z.string().optional(),\n      /** Chrome Extension bridge settings (only used when backend = 'extension'). */\n      extension: z.object({\n        /** WebSocket server port. Default: 19820. */\n        port: z.number().min(1024).max(65535).optional(),\n        /** Host to bind. Default: 127.0.0.1. */\n        host: z.string().optional(),\n        /** Timeout waiting for extension connection (ms). Default: 30000. */\n        connectionTimeout: z.number().min(1000).optional(),\n      }).optional(),\n      /** JS dialog handling policy: 'must_respond' (agent must act), 'auto_dismiss', or 'auto_accept'. */\n      dialogPolicy: z.enum(['must_respond', 'auto_dismiss', 'auto_accept']).optional(),\n      /** Dialog auto-dismiss/accept timeout in seconds (default: 300). */\n      dialogTimeoutSeconds: z.number().min(1).optional(),\n      /** Enable humanized input simulation (Bezier mouse, per-char typing, wheel scroll). Default: false. */\n      humanize: z.boolean().optional(),\n      /** Humanize behavior preset: 'default' (fast) or 'careful' (slower, more realistic). Default: 'careful'. */\n      humanPreset: z.enum(['default', 'careful']).optional(),\n      /** CloakBrowser settings (only used when backend = 'cloakbrowser'). */\n      cloakbrowser: z.object({\n        /** Keep browser process alive between tasks. Default: true. */\n        keepOpen: z.boolean().optional(),\n        /** Create a temporary profile directory, cleaned up on close. Default: false. */\n        temporaryProfile: z.boolean().optional(),\n        /** Directory for cached CloakBrowser binaries. Must live under the user's home directory. Default: ~/.xopc/bin/cloakbrowser. */\n        cacheDir: z\n          .string()\n          .optional()\n          .superRefine((v, ctx) => {\n            const r = checkCacheDir(v);\n            if (r.ok === false) ctx.addIssue({ code: 'custom', message: r.message });\n          }),\n        /** Override the CloakBrowser binary path (skip auto-download). */\n        binaryPath: z.string().optional(),\n        /** Timezone to emulate (e.g. \"America/New_York\"). */\n        timezone: z.string().optional(),\n        /** Locale to emulate (e.g. \"en-US\"). */\n        locale: z.string().optional(),\n        /** Public IP for WebRTC leak prevention. */\n        webrtcIp: z.string().optional(),\n        /** Platform to emulate in fingerprint (e.g. \"windows\", \"macos\"). */\n        fingerprintPlatform: z.string().optional(),\n        /** Extra Chromium launch args (override defaults with same --key= prefix). */\n        extraArgs: z.array(z.string()).optional(),\n      }).optional(),\n    })\n    .optional(),\n  /** Sub-agent delegation (`delegate_task`). Opt-in. */\n  delegate: z\n    .object({\n      enabled: z.boolean().optional(),\n    })\n    .optional(),\n  /** Sandboxed `execute_code` (programmatic tool calls). Opt-in. */\n  executeCode: z\n    .object({\n      enabled: z.boolean().optional(),\n    })\n    .optional(),\n  /** Optional full system prompt replacement (merged with per-agent entry; entry wins). */\n  systemPromptOverride: z.string().optional(),\n  /** Optional allowlist of skill names for `<available_skills>`; when set, replaces unfiltered list. */\n  skills: z.array(z.string()).optional(),\n  /** Disable built-in tools by name (e.g. `shell`, `web_search`). */\n  tools: z\n    .object({\n      disable: z.array(z.string()).optional(),\n    })\n    .optional(),\n  /** Opaque per-process params (reserved for extensions / future use). */\n  params: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport const AgentConfigSchema = z.object({\n  id: z.string(),\n  /** When true, this entry is the default routing agent. */\n  default: z.boolean().optional(),\n  name: z.string().optional(),\n  /** Short human-readable summary for UIs (gateway console, pickers). */\n  description: z.string().max(4000).optional(),\n  enabled: z.boolean().default(true),\n  /** Per-agent workspace root (`~` expanded at runtime). */\n  workspace: z.string().optional(),\n  /**\n   * Internal agent state directory (`…/credentials`, `agent.json`, pid, inbox).\n   * Default: `<stateDir>/agents/<id>/agent`.\n   */\n  agentDir: z.string().optional(),\n  model: AgentModelRefSchema.optional(),\n  thinkingDefault: z.enum(['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'adaptive']).optional(),\n  reasoningDefault: z.enum(['off', 'on', 'stream']).optional(),\n  verboseDefault: z.enum(['off', 'on', 'full']).optional(),\n  systemPromptOverride: z.string().optional(),\n  skills: z.array(z.string()).optional(),\n  tools: z\n    .object({\n      disable: z.array(z.string()).optional(),\n    })\n    .optional(),\n  params: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport const AgentsConfigSchema = z.object({\n  /** Default agent id when not specified (routing / session creation). */\n  default: z.string().optional(),\n  defaults: AgentDefaultsSchema.optional(),\n  list: z.array(AgentConfigSchema).optional(),\n}).default({\n  defaults: {\n    workspace: '~/.xopc/workspace',\n    model: '', // Empty default - will be resolved dynamically at runtime\n    maxTokens: 8192,\n    temperature: 0.7,\n    maxToolIterations: 20,\n    maxRequestsPerTurn: 50,\n    maxToolFailuresPerTurn: 3,\n    thinkingDefault: 'medium',\n    reasoningDefault: 'stream',\n    verboseDefault: 'full',\n    compaction: {\n      enabled: true,\n      mode: 'default',\n      reserveTokens: 8000,\n      triggerThreshold: 0.8,\n      minMessagesBeforeCompact: 10,\n      keepRecentMessages: 5,\n      evictionWindow: 0.2,\n      retentionWindow: 6,\n    },\n    pruning: {\n      enabled: true,\n      maxToolResultChars: 10000,\n      headKeepRatio: 0.3,\n      tailKeepRatio: 0.3,\n    },\n    browser: {\n      backend: 'extension',\n    },\n  },\n} as any);\n\n// ============================================\n// Channel Configs (per-channel Zod lives in bundled extensions; root schema is open)\n// ============================================\n\nexport {\n  TelegramTopicConfigSchema,\n  TelegramGroupConfigSchema,\n  TelegramAccountConfigSchema,\n  TelegramConfigSchema,\n} from '../../extensions/telegram/src/config-schema.js';\nexport type { TelegramConfig } from '../../extensions/telegram/src/config-schema.js';\nexport { WeixinAccountConfigSchema, WeixinConfigSchema } from '../../extensions/weixin/src/config-schema.js';\nexport type { WeixinConfig } from '../../extensions/weixin/src/config-schema.js';\n// ============================================\n// Session Routing Configuration\n// ============================================\n\nexport const BindingMatchSchema = z.object({\n  channel: z.string(),\n  accountId: z.string().optional(),\n  peerKind: z.string().optional(),\n  peerId: z.string().optional(),\n  guildId: z.string().optional(),\n  teamId: z.string().optional(),\n  memberRoleIds: z.array(z.string()).optional(),\n});\n\nexport const BindingRuleSchema = z.object({\n  id: z.string().optional(),\n  agentId: z.string(),\n  priority: z.number().default(100),\n  match: BindingMatchSchema,\n  enabled: z.boolean().default(true),\n});\n\nexport const BindingsConfigSchema = z.array(BindingRuleSchema).default([]);\n\nexport const SessionDmScopeSchema = z.enum([\n  'main',\n  'per-peer',\n  'per-channel-peer',\n  'per-account-channel-peer',\n]);\n\nexport const SessionStorageConfigSchema = z.object({\n  pruneAfterMs: z.number().optional(),\n  maxEntries: z.number().optional(),\n});\n\nexport const SessionConfigSchema = z.object({\n  dmScope: SessionDmScopeSchema.default('main'),\n  identityLinks: z.record(z.string(), z.array(z.string())).optional(),\n  storage: SessionStorageConfigSchema.optional(),\n}).default({\n  dmScope: 'main',\n});\n\n/** Channel buckets — shapes validated post-parse by registered channel plugins. */\nexport const ChannelsConfigSchema = z.record(z.string(), z.unknown()).default({\n  telegram: {\n    enabled: false,\n    allowFrom: [],\n    groupAllowFrom: [],\n    debug: false,\n    accounts: {\n      default: {\n        accountId: 'default',\n        enabled: true,\n        botToken: '',\n        allowFrom: [],\n        dmPolicy: 'pairing' as const,\n        groupPolicy: 'open' as const,\n        replyToMode: 'off' as const,\n        historyLimit: 50,\n        textChunkLimit: 4000,\n        streamMode: 'partial' as const,\n      },\n    },\n    dmPolicy: 'pairing' as const,\n    groupPolicy: 'open' as const,\n    replyToMode: 'off' as const,\n    historyLimit: 50,\n    textChunkLimit: 4000,\n  },\n});\n\nexport const SearchProviderEntrySchema = z.object({\n  type: z.enum(['brave', 'tavily', 'bing', 'searxng']),\n  apiKey: z.string().optional(),\n  /** SearXNG instance base URL (e.g. http://localhost:8080) */\n  url: z.string().optional(),\n  disabled: z.boolean().optional(),\n});\n\nexport type SearchProviderEntry = z.infer<typeof SearchProviderEntrySchema>;\n\nexport const WebSearchConfigSchema = z.object({\n  maxResults: z.number().default(5),\n  /** Ordered API providers; empty → HTML fallback only */\n  providers: z.array(SearchProviderEntrySchema).default([]),\n});\n\nexport type WebSearchConfig = z.infer<typeof WebSearchConfigSchema>;\n\nexport const WebsiteBlocklistSchema = z.object({\n  /** Master switch. Default false (no blocking). */\n  enabled: z.boolean().default(false),\n  /** Domain patterns to block (e.g. \"example.com\", \"*.evil.org\"). */\n  domains: z.array(z.string()).default([]),\n});\n\nexport type WebsiteBlocklistConfig = z.infer<typeof WebsiteBlocklistSchema>;\n\nexport const WebToolsConfigSchema = z.object({\n  /** Search result HTML fallback: cn → Bing, otherwise DuckDuckGo */\n  region: z.enum(['cn', 'global']).optional(),\n  search: WebSearchConfigSchema.optional(),\n  /** Domain blocklist for web_fetch / web_extract / browser tools. */\n  blocklist: WebsiteBlocklistSchema.optional(),\n});\n\nexport type WebToolsConfig = z.infer<typeof WebToolsConfigSchema>;\n\nexport const ToolsConfigSchema = z.object({\n  web: WebToolsConfigSchema.optional(),\n  /**\n   * Per-capability media providers. Currently only `audio` (STT) is wired;\n   * `image` / `video` slots are reserved for future capabilities.\n   */\n  media: z.lazy(() => ToolsMediaConfigSchema),\n}).default({\n  web: {\n    search: {\n      maxResults: 5,\n      providers: [],\n    },\n  },\n});\n\n// ============================================\n// Gateway Configuration\n// ============================================\n\nexport const GatewayAuthRateLimitSchema = z\n  .object({\n    enabled: z.boolean().default(true),\n    maxAttempts: z.number().int().min(1).default(5),\n    windowMs: z.number().default(900_000),\n    blockDurationMs: z.number().default(300_000),\n    /** OpenClaw alias for blockDurationMs. */\n    lockoutMs: z.number().optional(),\n    /** Skip rate limiting for loopback client IPs (default true). Remote browser Origin requests never exempt. */\n    exemptLoopback: z.boolean().default(true),\n    /**\n     * Coalesce same-client failures arriving within this window into a single\n     * attempt. Absorbs SPA fan-out / SDK auto-retry storms without weakening\n     * brute-force protection (deliberate attackers are still rate-limited to\n     * one effective attempt per window). Set to 0 to disable.\n     */\n    burstCoalesceMs: z.number().int().min(0).default(1000),\n  })\n  .optional();\n\nexport const GatewaySecuritySchema = z\n  .object({\n    /** When true, non-loopback binds require explicit gateway.auth.rateLimit configuration. */\n    strict: z.boolean().optional(),\n  })\n  .optional();\n\nexport const GatewayTrustedProxySchema = z\n  .object({\n    /** Header set by the reverse proxy with the authenticated user identity. */\n    userHeader: z.string().min(1),\n    /** Additional headers that must be present (e.g. proxy auth markers). */\n    requiredHeaders: z.array(z.string()).optional(),\n    /** When non-empty, only these user identities are allowed. */\n    allowUsers: z.array(z.string()).optional(),\n    /** Allow trusted-proxy auth when the TCP source is loopback (same-host reverse proxy). */\n    allowLoopback: z.boolean().optional(),\n  })\n  .strict();\n\nexport const GatewayAuthSchema = z\n  .object({\n    mode: z.enum(['none', 'token', 'password', 'trusted-proxy']).default('token'),\n    token: z.string().optional(),\n    password: z.string().optional(),\n    /** When true (default for Serve), browser UI may auth via Tailscale identity headers. API routes still require token. */\n    allowTailscale: z.boolean().optional(),\n    rateLimit: GatewayAuthRateLimitSchema,\n    trustedProxy: GatewayTrustedProxySchema.optional(),\n  })\n  .default({\n    mode: 'token',\n  });\n\nexport const GatewayTailscaleConsentSchema = z.object({\n  version: z.string().min(1),\n  acceptedAt: z.string().min(1),\n});\n\nexport const GatewayTailscaleSchema = z\n  .object({\n    mode: z.enum(['off', 'serve', 'funnel']).default('off'),\n    resetOnExit: z.boolean().default(true),\n    consent: GatewayTailscaleConsentSchema.optional(),\n  })\n  .default({\n    mode: 'off',\n    resetOnExit: true,\n  });\n\nexport const GatewayRemoteSchema = z.object({\n  url: z.string().url(),\n  token: z.string().optional(),\n  password: z.string().optional(),\n  transport: z.enum(['direct', 'ssh']).default('direct'),\n  sshTarget: z.string().optional(),\n  sshIdentity: z.string().optional(),\n  tlsFingerprint: z.string().optional(),\n});\n\nexport const GatewayTlsSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    autoGenerate: z.boolean().default(false),\n    certPath: z.string().optional(),\n    keyPath: z.string().optional(),\n  })\n  .default({\n    enabled: false,\n    autoGenerate: false,\n  });\n\nexport const GatewayModeSchema = z.enum(['local', 'remote']).default('local');\n\nexport const HeartbeatConfigSchema = z\n  .object({\n    enabled: z.boolean(),\n    intervalMs: z.number(),\n    /** When false, heartbeat instructions are only sent during heartbeat polling turns (not in every chat system prompt). */\n    includeSystemPromptSection: z.boolean().optional().default(false),\n    target: z.string().optional(),\n    targetChatId: z.string().optional(),\n    prompt: z.string().optional(),\n    ackMaxChars: z.number().optional(),\n    isolatedSession: z.boolean().optional(),\n    activeHours: z\n      .object({\n        start: z.string(),\n        end: z.string(),\n        timezone: z.string().optional(),\n      })\n      .optional(),\n  })\n  .default({\n    enabled: true,\n    intervalMs: 1_800_000,\n    includeSystemPromptSection: false,\n  });\n\nexport const GatewayChannelConnectDeferModeSchema = z.enum(['auto', 'off', 'explicit']);\n\nexport const TunnelConsentSchema = z.object({\n  version: z.string().min(1),\n  acceptedAt: z.string().min(1),\n});\n\nexport const TunnelConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    brokerUrl: z.string().url().default('https://frp.xopc.ai/api'),\n    /** Broker register API secret (env `XOPC_TUNNEL_REGISTRATION_SECRET` overrides when set). */\n    registrationSecret: z.string().min(1).optional(),\n    autoStart: z.boolean().default(false),\n    subdomain: z.string().optional(),\n    consent: TunnelConsentSchema.optional(),\n  })\n  .default({\n    enabled: false,\n    brokerUrl: 'https://frp.xopc.ai/api',\n    autoStart: false,\n  });\n\nexport type TunnelConfig = z.infer<typeof TunnelConfigSchema>;\n\n/**\n * Workspace-scoped concerns (file import, etc.). Distinct from\n * `agents.defaults.workspace`, which is the workspace *path*; this block carries\n * feature configuration for workspace-related routes.\n */\nexport const WorkspaceImportConfigSchema = z.object({\n  /** Workspace-relative subdir for imported files. Default `imports`. */\n  targetDir: z.string().default('imports'),\n  /** Per-file byte cap. Default 100 MiB. */\n  maxBytes: z.number().int().min(1024).max(10_737_418_240).default(104_857_600),\n  /** When false, the route rejects `onConflict: 'overwrite'`. Default true. */\n  allowOverwrite: z.boolean().default(true),\n});\nexport type WorkspaceImportConfig = z.infer<typeof WorkspaceImportConfigSchema>;\n\nexport const WorkspaceConfigSchema = z.object({\n  import: WorkspaceImportConfigSchema.optional(),\n}).optional();\nexport type WorkspaceConfig = z.infer<typeof WorkspaceConfigSchema>;\n\nexport const GatewayBindModeSchema = z.enum(['auto', 'loopback', 'lan', 'tailnet', 'custom']);\n\nexport const GatewayConfigSchema = z.object({\n  /** Semantic bind mode. */\n  bind: GatewayBindModeSchema.optional(),\n  /** IPv4 listen address when `bind` is `custom`. */\n  customBindHost: z.string().optional(),\n  port: z.number().optional(),\n  /** local: this process runs the gateway; remote: CLI clients target gateway.remote. */\n  mode: GatewayModeSchema.optional(),\n  /** Persistent remote gateway target for CLI/TUI/MCP when mode=remote. */\n  remote: GatewayRemoteSchema.optional(),\n  tailscale: GatewayTailscaleSchema.optional(),\n  tls: GatewayTlsSchema.optional(),\n  auth: GatewayAuthSchema.optional(),\n  heartbeat: HeartbeatConfigSchema.optional(),\n  maxSseConnections: z.number().optional(),\n  corsOrigins: z.array(z.string()).optional(),\n  /** Dangerous: allow browser Origin to match the HTTP Host header when not in corsOrigins. */\n  dangerouslyAllowHostHeaderOriginFallback: z.boolean().optional(),\n  /** CIDRs or exact IPs of reverse proxies allowed to terminate auth (trusted-proxy mode). */\n  trustedProxies: z.array(z.string()).optional(),\n  /** When true, fall back to X-Real-IP if X-Forwarded-For chain parsing fails. Default false (fail closed). */\n  allowRealIpFallback: z.boolean().optional(),\n  security: GatewaySecuritySchema,\n  /**\n   * How channel `start()` is split around HTTP listen when using `GatewayServer`.\n   * - `auto` (default): defer ids come from channel plugin `meta.deferConnectUntilAfterListen` + enabled config.\n   * - `off`: always start all channels in phase1 (troubleshooting / strict ordering).\n   * - `explicit`: defer only `channelConnectDeferIds` (empty = defer none).\n   */\n  channelConnectDeferMode: GatewayChannelConnectDeferModeSchema.optional(),\n  /** When `channelConnectDeferMode` is `explicit`, these channel plugin ids are deferred until after listen. */\n  channelConnectDeferIds: z.array(z.string().min(1)).max(24).optional(),\n  /** Removed from the defer set (applied after `auto` or `explicit` resolution). */\n  channelConnectDeferSkipIds: z.array(z.string().min(1)).max(24).optional(),\n  /** Default skills marketplace provider id. Built-in: 'store', 'skillhub', 'clawhub'. Extensions may register more. */\n  skillsMarketplaceProvider: z.string().optional(),\n  /** Base URL for the xopc skills marketplace (public REST API). */\n  skillsStoreBaseUrl: z.string().url().optional(),\n  /** File sharing configuration (temporary public download links for workspace files). */\n  share: z.object({\n    enabled: z.boolean().default(true),\n    /** Default TTL in ms (default 24h). */\n    defaultTtlMs: z.number().min(60_000).max(604_800_000).default(86_400_000),\n    /** Maximum TTL in ms (default 7 days). */\n    maxTtlMs: z.number().min(60_000).max(2_592_000_000).default(604_800_000),\n    /** Maximum concurrent active shares (default 100). */\n    maxActiveShares: z.number().min(1).max(10_000).default(100),\n    /** Maximum shareable file size in bytes (default 100MB). */\n    maxFileSize: z.number().min(1_048_576).max(10_737_418_240).default(104_857_600),\n    /** MIME types allowed for inline preview (?inline=1). */\n    inlinePreviewMimes: z.array(z.string()).default([\n      'image/png',\n      'image/jpeg',\n      'image/gif',\n      'image/webp',\n      'image/svg+xml',\n      'application/pdf',\n      'text/html',\n      'text/markdown',\n      'text/plain',\n      'application/json',\n    ]),\n  }).optional(),\n}).default({\n  bind: 'loopback',\n  port: 18790,\n  auth: {\n    mode: 'token',\n  },\n  heartbeat: {\n    enabled: true,\n    intervalMs: 1_800_000,\n    includeSystemPromptSection: false,\n  },\n  maxSseConnections: 100,\n  corsOrigins: [],\n  skillsMarketplaceProvider: 'skillhub',\n  skillsStoreBaseUrl: 'https://store.xopc.ai',\n});\n\nexport const CronConfigSchema = z.object({\n  enabled: z.boolean().optional(),\n  maxConcurrentJobs: z.number().optional(),\n  defaultTimezone: z.string().optional(),\n  historyRetentionDays: z.number().optional(),\n  enableMetrics: z.boolean().optional(),\n}).default({\n  enabled: true,\n  maxConcurrentJobs: 5,\n  defaultTimezone: 'UTC',\n  historyRetentionDays: 7,\n  enableMetrics: true,\n});\n\nexport const ModelsDevConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n}).default({\n  enabled: true,\n});\n\n// ============================================\n// STT (Speech-to-Text) Config\n// ============================================\n\nconst SttProviderConfigCatchallSchema = z.union([\n  z.string(),\n  z.number(),\n  z.boolean(),\n  z.null(),\n  z.array(z.unknown()),\n  z.record(z.string(), z.unknown()),\n]);\n\nexport const STTProviderConfigSchema = z\n  .object({\n    apiKey: z.string().optional(),\n    model: z.string().optional(),\n    baseUrl: z.string().optional(),\n    headers: z.record(z.string(), z.string()).optional(),\n    language: z.string().optional(),\n    prompt: z.string().optional(),\n  })\n  .catchall(SttProviderConfigCatchallSchema);\n\nexport const STTFallbackConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  order: z.array(z.string().min(1)).default(['alibaba', 'openai']),\n});\n\nexport const MediaUnderstandingCapabilitiesSchema = z\n  .array(z.enum(['image', 'audio', 'video']))\n  .optional();\n\nexport const MediaUnderstandingModelSchema = z\n  .object({\n    provider: z.string().optional(),\n    model: z.string().optional(),\n    capabilities: MediaUnderstandingCapabilitiesSchema,\n    type: z.union([z.literal('provider'), z.literal('cli')]).optional(),\n    command: z.string().optional(),\n    baseUrl: z.string().optional(),\n    headers: z.record(z.string(), z.string()).optional(),\n    apiKey: z.string().optional(),\n    language: z.string().optional(),\n    prompt: z.string().optional(),\n  })\n  .catchall(SttProviderConfigCatchallSchema);\n\nexport const STTConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    /** Primary provider id — any registered MediaUnderstandingProvider id. */\n    provider: z.string().min(1).default('alibaba'),\n    fallback: STTFallbackConfigSchema.optional(),\n    timeoutMs: z.number().int().min(1000).max(180000).optional(),\n    /** Ordered model entries for this capability (OpenClaw `tools.media.audio.models`). */\n    models: z.array(MediaUnderstandingModelSchema).optional(),\n    /** OpenClaw-aligned provider settings map (`tools.media.audio.providers.<id>`). */\n    providers: z.record(z.string(), STTProviderConfigSchema).optional(),\n    /** Legacy flat provider keys — kept for backward compatibility. */\n    alibaba: STTProviderConfigSchema.optional(),\n    openai: STTProviderConfigSchema.optional(),\n  })\n  .passthrough();\n\n// ============================================\n// TTS (Text-to-Speech) Config\n// ============================================\n\nconst TtsProviderConfigCatchallSchema = z.union([\n  z.string(),\n  z.number(),\n  z.boolean(),\n  z.null(),\n  z.array(z.unknown()),\n  z.record(z.string(), z.unknown()),\n]);\n\nexport const TTSProviderConfigSchema = z\n  .object({\n    apiKey: z.string().optional(),\n    model: z.string().optional(),\n    voice: z.string().optional(),\n  })\n  .catchall(TtsProviderConfigCatchallSchema);\n\nexport const TTSFallbackConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  order: z\n    .array(z.string().min(1))\n    .default(['openai', 'alibaba', 'minimax', 'edge']),\n});\n\nexport const TTSModelOverridesConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  allowText: z.boolean().default(true),\n  allowProvider: z.boolean().default(false),\n  allowVoice: z.boolean().default(true),\n  allowModelId: z.boolean().default(true),\n  allowVoiceSettings: z.boolean().default(false),\n  allowNormalization: z.boolean().default(false),\n  allowSeed: z.boolean().default(false),\n});\n\nexport const TTSEdgeConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  voice: z.string().optional(),\n  lang: z.string().optional(),\n  outputFormat: z.string().optional(),\n  pitch: z.string().optional(),\n  rate: z.string().optional(),\n  volume: z.string().optional(),\n  proxy: z.string().optional(),\n  timeoutMs: z.number().int().min(1000).max(120000).optional(),\n});\n\nexport const TTSSummarizationConfigSchema = z.object({\n  enabled: z.boolean().optional(),\n  targetLength: z.number().int().min(1).optional(),\n  threshold: z.number().int().min(1).optional(),\n  model: z.string().optional(),\n});\n\nexport const TTSConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    /** Primary provider id — any registered SpeechProviderPlugin id. */\n    provider: z.string().min(1).default('openai'),\n    trigger: z.enum(['off', 'always', 'inbound', 'tagged']).default('always'),\n    fallback: TTSFallbackConfigSchema.optional(),\n    maxTextLength: z.number().int().min(1).default(512), // Conservative default to accommodate all providers (Alibaba limit is 512)\n    timeoutMs: z.number().int().min(1000).max(180000).default(60000),\n    summarization: TTSSummarizationConfigSchema.optional(),\n    modelOverrides: TTSModelOverridesConfigSchema.optional(),\n    /** OpenClaw-aligned provider settings map (`messages.tts.providers.<id>`). */\n    providers: z.record(z.string(), TTSProviderConfigSchema).optional(),\n    /** Legacy flat provider keys — kept for backward compatibility. */\n    alibaba: TTSProviderConfigSchema.optional(),\n    openai: TTSProviderConfigSchema.optional(),\n    edge: TTSEdgeConfigSchema.optional(),\n    minimax: TTSProviderConfigSchema.optional(),\n  })\n  .passthrough();\n\n// ============================================\n// messages.* — delivery / presentation concerns\n// ============================================\n\nexport const MessagesConfigSchema = z.object({\n  /** Voice (text-to-speech) output configuration. */\n  tts: TTSConfigSchema.optional(),\n}).optional();\n\nexport const ToolsMediaAudioConfigSchema = STTConfigSchema;\n\nexport const ToolsMediaConfigSchema = z\n  .object({\n    /** Shared model entries applied across media capabilities when entry lacks capabilities. */\n    models: z.array(MediaUnderstandingModelSchema).optional(),\n    /** Audio (speech-to-text) capability provider config. */\n    audio: ToolsMediaAudioConfigSchema.optional(),\n  })\n  .optional();\n\n// ============================================\n// Provider Configs (capability providers: image / audio / video)\n// ============================================\n\n/**\n * Optional Azure OpenAI overrides used when an OpenAI image-generation\n * request should hit an Azure deployment instead of `api.openai.com`.\n *\n * URL template (when present):\n *   `https://<resource>.openai.azure.com/openai/deployments/<deployment>/images/generations?api-version=<apiVersion>`\n */\nexport const ProviderAzureConfigSchema = z\n  .object({\n    /** Azure resource name (subdomain before `.openai.azure.com`). */\n    resource: z.string().min(1).optional(),\n    /** Azure deployment id (configured per model). */\n    deployment: z.string().min(1).optional(),\n    /** Azure REST API version, e.g. `2024-08-01-preview`. */\n    apiVersion: z.string().min(1).optional(),\n  })\n  .strict();\n\n/** Per-vendor request overrides applied by the provider HTTP layer. */\nexport const ProviderRequestOverridesSchema = z\n  .object({\n    /** Hard cap for a single HTTP call (ms). */\n    timeoutMs: z.number().int().positive().optional(),\n    /** Extra headers merged into every outbound request. */\n    headers: z.record(z.string(), z.string()).optional(),\n  })\n  .strict();\n\n/**\n * Generic per-vendor provider config — used by image / audio / video\n * capability providers via `cfg.providers.<id>`. Kept loose (`.strict()` but\n * everything optional) so adding a new vendor never requires a config\n * migration.\n */\nexport const ProviderAuthConfigSchema = z\n  .object({\n    /** Static API key (api-key / azure-key modes). */\n    apiKey: z.string().optional(),\n    /** Override the default REST base URL. */\n    baseUrl: z.string().url().optional(),\n    /** Vendor region (DashScope: `beijing` / `singapore`; AWS: region id). */\n    region: z.string().optional(),\n    /** Image-only base URL override (DashScope splits image vs LLM). */\n    imageBaseUrl: z.string().url().optional(),\n    /** Per-vendor request overrides. */\n    request: ProviderRequestOverridesSchema.optional(),\n    /** Azure OpenAI deployment overrides; only consumed by OpenAI image provider. */\n    azure: ProviderAzureConfigSchema.optional(),\n  })\n  .strict();\n\nexport type ProviderAuthConfig = z.infer<typeof ProviderAuthConfigSchema>;\n\n/**\n * `cfg.providers.<id>` is keyed by provider id (`openai`, `dashscope`,\n * `minimax`, `google`, `fal`, …). Every entry is optional and validated by\n * {@link ProviderAuthConfigSchema}.\n */\nexport const ProvidersConfigSchema = z.record(z.string(), ProviderAuthConfigSchema);\n\nexport type ProvidersConfig = z.infer<typeof ProvidersConfigSchema>;\n\n// ============================================\n// Extension Configs \n// ============================================\n\n// Security config for extensions \nexport const ExtensionSecurityConfigSchema = z.object({\n  checkPermissions: z.boolean().default(true),\n  allowUntrusted: z.boolean().default(false),\n  allow: z.array(z.string()).default([]),\n  trackProvenance: z.boolean().default(true),\n  allowPromptInjection: z.boolean().default(false),\n});\n\n// Slot config for extensions \nexport const ExtensionSlotsConfigSchema = z.object({\n  memory: z.string().optional(),\n  tts: z.string().optional(),\n  imageGeneration: z.string().optional(),\n  webSearch: z.string().optional(),\n});\n\n// Complete extensions config\n// Extension config allows both known fields AND arbitrary extension-specific config\n// Known fields: enabled (array), allow (array), security (object), slots (object)\n// Arbitrary: any other key is extension-specific config (e.g., extensions.hello.greeting)\nexport const ExtensionsConfigSchema: z.ZodType<Record<string, unknown>> = z.record(z.string(), z.unknown());\n\n// ============================================\n// Update Config\n// ============================================\n\nexport const UpdateAutoConfigSchema = z\n  .object({\n    /** Enable automatic update installation. Default false. */\n    enabled: z.boolean().default(false),\n    /** Hours to wait before applying a stable update after first detection. */\n    stableDelayHours: z.number().min(0).default(6),\n    /** Additional random jitter hours for stable rollout (avoids thundering herd). */\n    stableJitterHours: z.number().min(0).default(12),\n    /** How often to re-check for beta updates (hours). Min 0.25. */\n    betaCheckIntervalHours: z.number().min(0.25).default(1),\n  })\n  .strict()\n  .optional();\n\n/** Persistent `/goal` (Ralph loop) — Hermes-aligned defaults. */\nexport const GoalsConfigSchema = z\n  .object({\n    /** Max continuation turns before auto-pause (Hermes default 20). */\n    maxTurns: z.number().int().min(1).max(500).default(20),\n    /** Optional judge model ref; defaults to `agents.defaults.model`. */\n    judgeModelRef: z.string().optional(),\n    /**\n     * When true (default), first post-turn runs a decomposition judge to build a checklist;\n     * subsequent turns evaluate progress per item (Hermes-style). When false, use legacy freeform judge only.\n     */\n    checklistMode: z.boolean().default(true),\n    /** Auto-pause after this many consecutive judge JSON/tool parse failures (Hermes default 3). */\n    maxConsecutiveParseFailures: z.number().int().min(1).max(20).default(3),\n    /** Judge LLM call timeout in ms (Hermes uses 60s). */\n    judgeTimeoutMs: z.number().int().min(5_000).max(120_000).default(60_000),\n    /** Max characters of recent transcript JSON passed to the checklist judge as extra context. */\n    checklistHistoryChars: z.number().int().min(0).max(100_000).default(24_000),\n  })\n  .strict();\n\nexport type GoalsConfig = z.infer<typeof GoalsConfigSchema>;\n\nexport const UpdateConfigSchema = z\n  .object({\n    /** Check for updates on gateway startup. Default true. */\n    checkOnStart: z.boolean().default(true),\n    /** Update channel: stable (default), beta, or dev. */\n    channel: z.enum(['stable', 'beta', 'dev']).default('stable'),\n    /** Automatic update policy. */\n    auto: UpdateAutoConfigSchema,\n  })\n  .strict()\n  .optional();\n\nexport type UpdateConfig = z.infer<typeof UpdateConfigSchema>;\n\nexport const CommandsConfigSchema = z\n  .object({\n    restart: z.boolean().optional(),\n  })\n  .strict()\n  .optional();\n\nexport type CommandsConfig = z.infer<typeof CommandsConfigSchema>;\n\n// ============================================\n// MCP (Model Context Protocol)\n// ============================================\n\nconst McpHttpUrlSchema = z\n  .string()\n  .url()\n  .refine((value) => {\n    try {\n      const protocol = new URL(value).protocol;\n      return protocol === 'http:' || protocol === 'https:';\n    } catch {\n      return false;\n    }\n  }, 'MCP server URL must use http or https');\n\nexport const McpServerSchema = z\n  .object({\n    command: z.string().optional(),\n    args: z.array(z.string()).optional(),\n    env: z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])).optional(),\n    cwd: z.string().optional(),\n    workingDirectory: z.string().optional(),\n    url: McpHttpUrlSchema.optional(),\n    transport: z.enum(['sse', 'streamable-http']).optional(),\n    headers: z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])).optional(),\n    connectionTimeoutMs: z.number().finite().positive().optional(),\n  })\n  .catchall(z.unknown())\n  .superRefine((value, ctx) => {\n    const hasCommand = typeof value.command === 'string' && value.command.trim().length > 0;\n    const hasUrl = typeof value.url === 'string' && value.url.trim().length > 0;\n    if (hasCommand && hasUrl) {\n      ctx.addIssue({\n        code: 'custom',\n        message: 'MCP server cannot define both command and url',\n      });\n    }\n  });\n\nexport const McpConfigSchema = z\n  .object({\n    servers: z.record(z.string(), McpServerSchema).optional(),\n    sessionIdleTtlMs: z.number().finite().min(0).optional(),\n  })\n  .strict()\n  .optional();\n\nexport type McpServerConfig = z.infer<typeof McpServerSchema>;\nexport type McpConfig = z.infer<typeof McpConfigSchema>;\n\n// ============================================\n// Root Config\n// ============================================\n\nexport const ConfigSchema = z.object({\n  agents: AgentsConfigSchema,\n  bindings: BindingsConfigSchema,\n  session: SessionConfigSchema,\n  channels: ChannelsConfigSchema,\n  gateway: GatewayConfigSchema,\n  tunnel: TunnelConfigSchema.optional(),\n  workspace: WorkspaceConfigSchema,\n  tools: ToolsConfigSchema,\n  mcp: McpConfigSchema,\n  cron: CronConfigSchema,\n  goals: GoalsConfigSchema.optional(),\n  extensions: ExtensionsConfigSchema.default({}),\n  /** Per-vendor capability provider config (image / audio / video). */\n  providers: ProvidersConfigSchema.optional(),\n  modelsDev: ModelsDevConfigSchema,\n  /** Delivery / presentation concerns (currently `tts`). */\n  messages: MessagesConfigSchema,\n  update: UpdateConfigSchema,\n  commands: CommandsConfigSchema,\n}).default({\n  agents: {\n    defaults: {\n      workspace: '~/.xopc/workspace',\n      model: '', // Empty default - will be resolved dynamically at runtime\n      maxTokens: 8192,\n      temperature: 0.7,\n      maxToolIterations: 20,\n      maxRequestsPerTurn: 50,\n      maxToolFailuresPerTurn: 3,\n      thinkingDefault: 'medium',\n      reasoningDefault: 'stream',\n      verboseDefault: 'full',\n      compaction: {\n        enabled: true,\n        mode: 'default',\n        reserveTokens: 8000,\n        triggerThreshold: 0.8,\n        minMessagesBeforeCompact: 10,\n        keepRecentMessages: 5,\n        evictionWindow: 0.2,\n        retentionWindow: 6,\n      },\n      pruning: {\n        enabled: true,\n        maxToolResultChars: 10000,\n        headKeepRatio: 0.3,\n        tailKeepRatio: 0.3,\n      },\n      browser: {\n        backend: 'extension',\n      },\n    },\n  },\n  bindings: [],\n  session: {\n    dmScope: 'main' as const,\n  },\n  channels: {\n    telegram: {\n      enabled: false,\n      allowFrom: [],\n      groupAllowFrom: [],\n      debug: false,\n      accounts: {\n        default: {\n          accountId: 'default',\n          enabled: true,\n          botToken: '',\n          allowFrom: [],\n          dmPolicy: 'pairing' as const,\n          groupPolicy: 'open' as const,\n          replyToMode: 'off' as const,\n          historyLimit: 50,\n          textChunkLimit: 4000,\n          streamMode: 'partial' as const,\n        },\n      },\n      dmPolicy: 'pairing' as const,\n      groupPolicy: 'open' as const,\n      replyToMode: 'off' as const,\n      historyLimit: 50,\n      textChunkLimit: 4000,\n    },\n  },\n  gateway: {\n    bind: 'loopback',\n    port: 18790,\n    auth: {\n      mode: 'token',\n    },\n    heartbeat: {\n      enabled: true,\n      intervalMs: 1_800_000,\n      includeSystemPromptSection: false,\n    },\n    maxSseConnections: 100,\n    corsOrigins: [],\n    skillsMarketplaceProvider: 'skillhub',\n    skillsStoreBaseUrl: 'https://store.xopc.ai',\n  },\n  tools: {\n    web: {\n      search: {\n        maxResults: 5,\n        providers: [],\n      },\n    },\n  },\n  cron: {\n    enabled: true,\n    maxConcurrentJobs: 5,\n    defaultTimezone: 'UTC',\n    historyRetentionDays: 7,\n    enableMetrics: true,\n  },\n  goals: {\n    maxTurns: 20,\n    checklistMode: true,\n    maxConsecutiveParseFailures: 3,\n    judgeTimeoutMs: 60_000,\n    checklistHistoryChars: 24_000,\n  },\n  extensions: {\n    allow: [],\n    security: {\n      checkPermissions: true,\n      allowUntrusted: false,\n      allow: [],\n      trackProvenance: true,\n      allowPromptInjection: false,\n    },\n    slots: {},\n  },\n  modelsDev: {\n    enabled: true,\n  },\n  // messages.tts / tools.media.audio start undefined; the factory layer fills\n  // in provider-level defaults (model/voice) on demand. Fresh configs don't\n  // ship with enabled providers so they never make surprise STT/TTS calls.\n});\n\nexport type Config = z.infer<typeof ConfigSchema>;\nexport type AgentDefaults = z.infer<typeof AgentDefaultsSchema>;\nexport type GatewayAuthConfig = z.infer<typeof GatewayAuthSchema>;\nexport type GatewayTrustedProxyConfig = z.infer<typeof GatewayTrustedProxySchema>;\nexport type GatewayAuthRateLimitConfig = z.infer<typeof GatewayAuthRateLimitSchema>;\nexport type GatewayBindMode = z.infer<typeof GatewayBindModeSchema>;\nexport type STTConfig = z.infer<typeof STTConfigSchema>;\nexport type TTSConfig = z.infer<typeof TTSConfigSchema>;\n\n// ============================================\n// Helper Functions\n// ============================================\n\n/**\n * Parse a model reference string.\n */\nexport interface ParsedModelRef {\n  provider: string;\n  model: string;\n}\n\n/**\n * Primary model ref from `agents.defaults.model` (string or `{ primary }`).\n * Returns undefined when unset or empty.\n */\nexport function getAgentDefaultModelRef(config: Config): string | undefined {\n  const raw = config.agents?.defaults?.model;\n  if (raw === undefined || raw === null) return undefined;\n  const ref = typeof raw === 'string' ? raw : raw.primary;\n  if (ref === undefined || ref === null) return undefined;\n  const s = String(ref).trim();\n  return s ? s : undefined;\n}\n\n/** `provider/model` or null when invalid. */\nexport function parseModelRef(ref: string): ParsedModelRef | null {\n  const trimmed = ref.trim();\n  const idx = trimmed.indexOf('/');\n  if (idx <= 0 || idx === trimmed.length - 1) {\n    return null;\n  }\n  return { provider: trimmed.slice(0, idx).trim(), model: trimmed.slice(idx + 1).trim() };\n}\n"],"mappings":";;;;;;;;;;AA0zCA,SAAgB,wBAAwB,QAAoC;CAC1E,MAAM,MAAM,OAAO,QAAQ,UAAU;AACrC,KAAI,QAAQ,KAAA,KAAa,QAAQ,KAAM,QAAO,KAAA;CAC9C,MAAM,MAAM,OAAO,QAAQ,WAAW,MAAM,IAAI;AAChD,KAAI,QAAQ,KAAA,KAAa,QAAQ,KAAM,QAAO,KAAA;CAC9C,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM;AAC5B,QAAO,IAAI,IAAI,KAAA;;;AAIjB,SAAgB,cAAc,KAAoC;CAChE,MAAM,UAAU,IAAI,MAAM;CAC1B,MAAM,MAAM,QAAQ,QAAQ,IAAI;AAChC,KAAI,OAAO,KAAK,QAAQ,QAAQ,SAAS,EACvC,QAAO;AAET,QAAO;EAAE,UAAU,QAAQ,MAAM,GAAG,IAAI,CAAC,MAAM;EAAE,OAAO,QAAQ,MAAM,MAAM,EAAE,CAAC,MAAM;EAAE;;;;wBAx0C1B;qBAyYP;uBAEqD;AArYhG,uBAAsB,EAAE,MAAM,CACzC,EAAE,QAAQ,EACV,EACG,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC1C,CAAC,CACD,QAAQ,CACZ,CAAC;AAUW,mCAAkC,EAAE,MAAM,CACrD,EAAE,QAAQ,EACV,EACG,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAEzC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;;;;;EAKjD,sBAAsB,EAAE,SAAS,CAAC,UAAU;EAC7C,CAAC,CACD,QAAQ,CACZ,CAAC;AAIW,uBAAsB,EAAE,OAAO;;EAE1C,WAAW,EAAE,QAAQ,CAAC,QAAQ,oBAAoB;EAClD,OAAO,EAAE,MAAM,CACb,EAAE,QAAQ,EACV,EAAE,OAAO;GACP,SAAS,EAAE,QAAQ,CAAC,UAAU;GAC9B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;GAC1C,CAAC,CAAC,QAAQ,CACZ,CAAC,CAAC,QAAQ,GAAG;;EAEd,YAAY,oBAAoB,UAAU;;EAE1C,sBAAsB,gCAAgC,UAAU;;EAEhE,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC5C,WAAW,EAAE,QAAQ,CAAC,QAAQ,KAAK;EACnC,aAAa,EAAE,QAAQ,CAAC,QAAQ,GAAI;EACpC,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,GAAG;EAEzC,mBAAmB,EAAE,QAAQ,CAAC,IAAI,IAAM,CAAC,IAAI,MAAW,CAAC,UAAU;EAEnE,oBAAoB,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG;EAC3D,wBAAwB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE;EAE5D,iBAAiB,EAAE,KAAK;GAAC;GAAO;GAAW;GAAO;GAAU;GAAQ;GAAS;GAAW,CAAC,CAAC,UAAU;EACpG,kBAAkB,EAAE,KAAK;GAAC;GAAO;GAAM;GAAS,CAAC,CAAC,UAAU;EAC5D,gBAAgB,EAAE,KAAK;GAAC;GAAO;GAAM;GAAO,CAAC,CAAC,UAAU;EACxD,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EACzD,wBAAwB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EAC9D,kCAAkC,EAAE,KAAK;GAAC;GAAO;GAAQ;GAAS,CAAC,CAAC,UAAU;EAC9E,gBAAgB,EACb,OAAO;GACN,SAAS,EAAE,SAAS,CAAC,UAAU;GAC/B,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,UAAU;GACrD,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;GACnD,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;GACpD,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;GACpD,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;GACtD,CAAC,CACD,UAAU;EACb,eAAe,EACZ,OAAO,EACN,wBAAwB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAC/D,CAAC,CACD,UAAU;EACb,YAAY,EAAE,OAAO;GACnB,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;GAClC,MAAM,EAAE,KAAK,CAAC,WAAW,YAAY,CAAC,CAAC,QAAQ,UAAU;GACzD,eAAe,EAAE,QAAQ,CAAC,QAAQ,IAAK;GACvC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,GAAI,CAAC,IAAI,IAAK,CAAC,QAAQ,GAAI;GAC5D,0BAA0B,EAAE,QAAQ,CAAC,QAAQ,GAAG;GAChD,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,EAAE;GAEzC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,GAAI,CAAC,IAAI,GAAI,CAAC,QAAQ,GAAI;GACzD,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE;GACrD,wBAAwB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;GACvD,CAAC,CAAC,UAAU;EACb,SAAS,EAAE,OAAO;GAChB,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;GAClC,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,IAAM;GAC7C,eAAe,EAAE,QAAQ,CAAC,QAAQ,GAAI;GACtC,eAAe,EAAE,QAAQ,CAAC,QAAQ,GAAI;GACvC,CAAC,CAAC,UAAU;;;;;EAKb,QAAQ,EACL,OAAO;;GAEN,SAAS,EAAE,SAAS,CAAC,UAAU;;GAE/B,mBAAmB,EAAE,SAAS,CAAC,UAAU;;GAEzC,oBAAoB,EAAE,SAAS,CAAC,UAAU;GAC1C,iBAAiB,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;GACjD,eAAe,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;GAC/C,UAAU,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,UAAU;;GAE7C,oBAAoB,EAAE,KAAK,CAAC,cAAc,aAAa,CAAC,CAAC,UAAU;;GAEnE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;;GAElD,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;;;;;;;;;;GAUpD,UAAU,EACP,OAAO;IACN,SAAS,EAAE,SAAS,CAAC,UAAU;;IAE/B,WAAW,EAAE,QAAQ,CAAC,UAAU;IAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;IAC/B,QAAQ,EACL,OAAO;KACN,OAAO,EACJ,OAAO;MACN,SAAS,EAAE,SAAS,CAAC,UAAU;MAC/B,MAAM,EAAE,QAAQ,CAAC,UAAU;MAC3B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MAChD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MACzC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU;MACtD,CAAC,CACD,UAAU;KACb,MAAM,EACH,OAAO;MACN,SAAS,EAAE,SAAS,CAAC,UAAU;MAC/B,MAAM,EAAE,QAAQ,CAAC,UAAU;MAC3B,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU;MAC7C,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MAClD,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MACpD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MACzC,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;MACjD,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MAC/C,CAAC,CACD,UAAU;KACb,KAAK,EACF,OAAO;MACN,SAAS,EAAE,SAAS,CAAC,UAAU;MAC/B,MAAM,EAAE,QAAQ,CAAC,UAAU;MAC3B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MAChD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MACzC,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU;MACxD,CAAC,CACD,UAAU;KACd,CAAC,CACD,UAAU;IACd,CAAC,CACD,UAAU;GACd,CAAC,CACD,UAAU;;EAEb,eAAe,EACZ,OAAO;;AAEN,cAAc,EAAE,QAAQ,CAAC,UAAU,EACpC,CAAC,CACD,UAAU;;;;;;EAMb,kBAAkB,EACf,OAAO;;GAEN,SAAS,EAAE,SAAS,CAAC,UAAU;;GAE/B,qBAAqB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;;GAEvD,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;;GAEtD,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU;;GAEzD,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU;;GAEhE,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,IAAQ,CAAC,UAAU;GACpE,CAAC,CACD,UAAU;;EAEb,YAAY,EACT,OAAO;GACN,OAAO,EAAE,QAAQ,CAAC,UAAU;GAC5B,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;GAC5C,CAAC,CACD,UAAU;;;;;EAKb,SAAS,EACN,OAAO;GACN,SAAS,EAAE,SAAS,CAAC,UAAU;;GAE/B,UAAU,EAAE,SAAS,CAAC,UAAU;;GAEhC,kBAAkB,EAAE,SAAS,CAAC,UAAU;;GAExC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;GAE5C,SAAS,EAAE,KAAK;IAAC;IAAS;IAAO;IAAS;IAAa;IAAe,CAAC,CAAC,UAAU;;GAElF,eAAe,EAAE,KAAK;IAAC;IAAS;IAAe;IAAc,CAAC,CAAC,UAAU;;GAEzE,OAAO,EAAE,OAAO;;IAEd,QAAQ,EAAE,QAAQ,CAAC,UAAU;;IAE7B,WAAW,EAAE,QAAQ,CAAC,UAAU;;IAEhC,QAAQ,EAAE,QAAQ,CAAC,UAAU;IAC9B,CAAC,CAAC,UAAU;;GAEb,QAAQ,EAAE,QAAQ,CAAC,UAAU;;GAE7B,WAAW,EAAE,OAAO;;IAElB,MAAM,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU;;IAEhD,MAAM,EAAE,QAAQ,CAAC,UAAU;;IAE3B,mBAAmB,EAAE,QAAQ,CAAC,IAAI,IAAK,CAAC,UAAU;IACnD,CAAC,CAAC,UAAU;;GAEb,cAAc,EAAE,KAAK;IAAC;IAAgB;IAAgB;IAAc,CAAC,CAAC,UAAU;;GAEhF,sBAAsB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;GAElD,UAAU,EAAE,SAAS,CAAC,UAAU;;GAEhC,aAAa,EAAE,KAAK,CAAC,WAAW,UAAU,CAAC,CAAC,UAAU;;GAEtD,cAAc,EAAE,OAAO;;IAErB,UAAU,EAAE,SAAS,CAAC,UAAU;;IAEhC,kBAAkB,EAAE,SAAS,CAAC,UAAU;;IAExC,UAAU,EACP,QAAQ,CACR,UAAU,CACV,aAAa,GAAG,QAAQ;KACvB,MAAM,IAAI,cAAc,EAAE;AAC1B,SAAI,EAAE,OAAO,MAAO,KAAI,SAAS;MAAE,MAAM;MAAU,SAAS,EAAE;MAAS,CAAC;MACxE;;IAEJ,YAAY,EAAE,QAAQ,CAAC,UAAU;;IAEjC,UAAU,EAAE,QAAQ,CAAC,UAAU;;IAE/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;;IAE7B,UAAU,EAAE,QAAQ,CAAC,UAAU;;IAE/B,qBAAqB,EAAE,QAAQ,CAAC,UAAU;;IAE1C,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;IAC1C,CAAC,CAAC,UAAU;GACd,CAAC,CACD,UAAU;;EAEb,UAAU,EACP,OAAO,EACN,SAAS,EAAE,SAAS,CAAC,UAAU,EAChC,CAAC,CACD,UAAU;;EAEb,aAAa,EACV,OAAO,EACN,SAAS,EAAE,SAAS,CAAC,UAAU,EAChC,CAAC,CACD,UAAU;;EAEb,sBAAsB,EAAE,QAAQ,CAAC,UAAU;;EAE3C,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAEtC,OAAO,EACJ,OAAO,EACN,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EACxC,CAAC,CACD,UAAU;;EAEb,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,UAAU;EACrD,CAAC;AAEW,qBAAoB,EAAE,OAAO;EACxC,IAAI,EAAE,QAAQ;;EAEd,SAAS,EAAE,SAAS,CAAC,UAAU;EAC/B,MAAM,EAAE,QAAQ,CAAC,UAAU;;EAE3B,aAAa,EAAE,QAAQ,CAAC,IAAI,IAAK,CAAC,UAAU;EAC5C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;EAElC,WAAW,EAAE,QAAQ,CAAC,UAAU;;;;;EAKhC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,OAAO,oBAAoB,UAAU;EACrC,iBAAiB,EAAE,KAAK;GAAC;GAAO;GAAW;GAAO;GAAU;GAAQ;GAAS;GAAW,CAAC,CAAC,UAAU;EACpG,kBAAkB,EAAE,KAAK;GAAC;GAAO;GAAM;GAAS,CAAC,CAAC,UAAU;EAC5D,gBAAgB,EAAE,KAAK;GAAC;GAAO;GAAM;GAAO,CAAC,CAAC,UAAU;EACxD,sBAAsB,EAAE,QAAQ,CAAC,UAAU;EAC3C,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACtC,OAAO,EACJ,OAAO,EACN,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EACxC,CAAC,CACD,UAAU;EACb,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,UAAU;EACrD,CAAC;AAEW,sBAAqB,EAAE,OAAO;;EAEzC,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,UAAU,oBAAoB,UAAU;EACxC,MAAM,EAAE,MAAM,kBAAkB,CAAC,UAAU;EAC5C,CAAC,CAAC,QAAQ,EACT,UAAU;EACR,WAAW;EACX,OAAO;EACP,WAAW;EACX,aAAa;EACb,mBAAmB;EACnB,oBAAoB;EACpB,wBAAwB;EACxB,iBAAiB;EACjB,kBAAkB;EAClB,gBAAgB;EAChB,YAAY;GACV,SAAS;GACT,MAAM;GACN,eAAe;GACf,kBAAkB;GAClB,0BAA0B;GAC1B,oBAAoB;GACpB,gBAAgB;GAChB,iBAAiB;GAClB;EACD,SAAS;GACP,SAAS;GACT,oBAAoB;GACpB,eAAe;GACf,eAAe;GAChB;EACD,SAAS,EACP,SAAS,aACV;EACF,EACF,CAAQ;AAmBI,sBAAqB,EAAE,OAAO;EACzC,SAAS,EAAE,QAAQ;EACnB,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC9C,CAAC;AAEW,qBAAoB,EAAE,OAAO;EACxC,IAAI,EAAE,QAAQ,CAAC,UAAU;EACzB,SAAS,EAAE,QAAQ;EACnB,UAAU,EAAE,QAAQ,CAAC,QAAQ,IAAI;EACjC,OAAO;EACP,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EACnC,CAAC;AAEW,wBAAuB,EAAE,MAAM,kBAAkB,CAAC,QAAQ,EAAE,CAAC;AAE7D,wBAAuB,EAAE,KAAK;EACzC;EACA;EACA;EACA;EACD,CAAC;AAEW,8BAA6B,EAAE,OAAO;EACjD,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,YAAY,EAAE,QAAQ,CAAC,UAAU;EAClC,CAAC;AAEW,uBAAsB,EAAE,OAAO;EAC1C,SAAS,qBAAqB,QAAQ,OAAO;EAC7C,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU;EACnE,SAAS,2BAA2B,UAAU;EAC/C,CAAC,CAAC,QAAQ,EACT,SAAS,QACV,CAAC;AAGW,wBAAuB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,QAAQ,EAC5E,UAAU;EACR,SAAS;EACT,WAAW,EAAE;EACb,gBAAgB,EAAE;EAClB,OAAO;EACP,UAAU,EACR,SAAS;GACP,WAAW;GACX,SAAS;GACT,UAAU;GACV,WAAW,EAAE;GACb,UAAU;GACV,aAAa;GACb,aAAa;GACb,cAAc;GACd,gBAAgB;GAChB,YAAY;GACb,EACF;EACD,UAAU;EACV,aAAa;EACb,aAAa;EACb,cAAc;EACd,gBAAgB;EACjB,EACF,CAAC;AAEW,6BAA4B,EAAE,OAAO;EAChD,MAAM,EAAE,KAAK;GAAC;GAAS;GAAU;GAAQ;GAAU,CAAC;EACpD,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,UAAU,EAAE,SAAS,CAAC,UAAU;EACjC,CAAC;AAIW,yBAAwB,EAAE,OAAO;EAC5C,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE;;EAEjC,WAAW,EAAE,MAAM,0BAA0B,CAAC,QAAQ,EAAE,CAAC;EAC1D,CAAC;AAIW,0BAAyB,EAAE,OAAO;;EAE7C,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;EACzC,CAAC;AAIW,wBAAuB,EAAE,OAAO;;EAE3C,QAAQ,EAAE,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU;EAC3C,QAAQ,sBAAsB,UAAU;;EAExC,WAAW,uBAAuB,UAAU;EAC7C,CAAC;AAIW,qBAAoB,EAAE,OAAO;EACxC,KAAK,qBAAqB,UAAU;;;;;EAKpC,OAAO,EAAE,WAAW,uBAAuB;EAC5C,CAAC,CAAC,QAAQ,EACT,KAAK,EACH,QAAQ;EACN,YAAY;EACZ,WAAW,EAAE;EACd,EACF,EACF,CAAC;AAMW,8BAA6B,EACvC,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;EAC/C,UAAU,EAAE,QAAQ,CAAC,QAAQ,IAAQ;EACrC,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,IAAQ;;EAE5C,WAAW,EAAE,QAAQ,CAAC,UAAU;;EAEhC,gBAAgB,EAAE,SAAS,CAAC,QAAQ,KAAK;;;;;;;EAOzC,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,IAAK;EACvD,CAAC,CACD,UAAU;AAEA,yBAAwB,EAClC,OAAO;;AAEN,QAAQ,EAAE,SAAS,CAAC,UAAU,EAC/B,CAAC,CACD,UAAU;AAEA,6BAA4B,EACtC,OAAO;;EAEN,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;;EAE7B,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE/C,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE1C,eAAe,EAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,QAAQ;AAEE,qBAAoB,EAC9B,OAAO;EACN,MAAM,EAAE,KAAK;GAAC;GAAQ;GAAS;GAAY;GAAgB,CAAC,CAAC,QAAQ,QAAQ;EAC7E,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;;EAE/B,gBAAgB,EAAE,SAAS,CAAC,UAAU;EACtC,WAAW;EACX,cAAc,0BAA0B,UAAU;EACnD,CAAC,CACD,QAAQ,EACP,MAAM,SACP,CAAC;AAES,iCAAgC,EAAE,OAAO;EACpD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC9B,CAAC;AAEW,0BAAyB,EACnC,OAAO;EACN,MAAM,EAAE,KAAK;GAAC;GAAO;GAAS;GAAS,CAAC,CAAC,QAAQ,MAAM;EACvD,aAAa,EAAE,SAAS,CAAC,QAAQ,KAAK;EACtC,SAAS,8BAA8B,UAAU;EAClD,CAAC,CACD,QAAQ;EACP,MAAM;EACN,aAAa;EACd,CAAC;AAES,uBAAsB,EAAE,OAAO;EAC1C,KAAK,EAAE,QAAQ,CAAC,KAAK;EACrB,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,WAAW,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC,CAAC,QAAQ,SAAS;EACtD,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;EACtC,CAAC;AAEW,oBAAmB,EAC7B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;EACnC,cAAc,EAAE,SAAS,CAAC,QAAQ,MAAM;EACxC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC/B,CAAC,CACD,QAAQ;EACP,SAAS;EACT,cAAc;EACf,CAAC;AAES,qBAAoB,EAAE,KAAK,CAAC,SAAS,SAAS,CAAC,CAAC,QAAQ,QAAQ;AAEhE,yBAAwB,EAClC,OAAO;EACN,SAAS,EAAE,SAAS;EACpB,YAAY,EAAE,QAAQ;;EAEtB,4BAA4B,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,MAAM;EACjE,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,iBAAiB,EAAE,SAAS,CAAC,UAAU;EACvC,aAAa,EACV,OAAO;GACN,OAAO,EAAE,QAAQ;GACjB,KAAK,EAAE,QAAQ;GACf,UAAU,EAAE,QAAQ,CAAC,UAAU;GAChC,CAAC,CACD,UAAU;EACd,CAAC,CACD,QAAQ;EACP,SAAS;EACT,YAAY;EACZ,4BAA4B;EAC7B,CAAC;AAES,wCAAuC,EAAE,KAAK;EAAC;EAAQ;EAAO;EAAW,CAAC;AAE1E,uBAAsB,EAAE,OAAO;EAC1C,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC9B,CAAC;AAEW,sBAAqB,EAC/B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;EACnC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,0BAA0B;;EAE9D,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EAChD,WAAW,EAAE,SAAS,CAAC,QAAQ,MAAM;EACrC,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,SAAS,oBAAoB,UAAU;EACxC,CAAC,CACD,QAAQ;EACP,SAAS;EACT,WAAW;EACX,WAAW;EACZ,CAAC;AASS,+BAA8B,EAAE,OAAO;;EAElD,WAAW,EAAE,QAAQ,CAAC,QAAQ,UAAU;;EAExC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,YAAe,CAAC,QAAQ,UAAY;;EAE7E,gBAAgB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC1C,CAAC;AAGW,yBAAwB,EAAE,OAAO,EAC5C,QAAQ,4BAA4B,UAAU,EAC/C,CAAC,CAAC,UAAU;AAGA,yBAAwB,EAAE,KAAK;EAAC;EAAQ;EAAY;EAAO;EAAW;EAAS,CAAC;AAEhF,uBAAsB,EAAE,OAAO;;EAE1C,MAAM,sBAAsB,UAAU;;EAEtC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;EACrC,MAAM,EAAE,QAAQ,CAAC,UAAU;;EAE3B,MAAM,kBAAkB,UAAU;;EAElC,QAAQ,oBAAoB,UAAU;EACtC,WAAW,uBAAuB,UAAU;EAC5C,KAAK,iBAAiB,UAAU;EAChC,MAAM,kBAAkB,UAAU;EAClC,WAAW,sBAAsB,UAAU;EAC3C,mBAAmB,EAAE,QAAQ,CAAC,UAAU;EACxC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE3C,0CAA0C,EAAE,SAAS,CAAC,UAAU;;EAEhE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE9C,qBAAqB,EAAE,SAAS,CAAC,UAAU;EAC3C,UAAU;;;;;;;EAOV,yBAAyB,qCAAqC,UAAU;;EAExE,wBAAwB,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU;;EAErE,4BAA4B,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU;;EAEzE,2BAA2B,EAAE,QAAQ,CAAC,UAAU;;EAEhD,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAE/C,OAAO,EAAE,OAAO;GACd,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;GAElC,cAAc,EAAE,QAAQ,CAAC,IAAI,IAAO,CAAC,IAAI,OAAY,CAAC,QAAQ,MAAW;;GAEzE,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAO,CAAC,IAAI,OAAc,CAAC,QAAQ,OAAY;;GAExE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAO,CAAC,QAAQ,IAAI;;GAE3D,aAAa,EAAE,QAAQ,CAAC,IAAI,QAAU,CAAC,IAAI,YAAe,CAAC,QAAQ,UAAY;;GAE/E,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ;IAC9C;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD,CAAC;GACH,CAAC,CAAC,UAAU;EACd,CAAC,CAAC,QAAQ;EACT,MAAM;EACN,MAAM;EACN,MAAM,EACJ,MAAM,SACP;EACD,WAAW;GACT,SAAS;GACT,YAAY;GACZ,4BAA4B;GAC7B;EACD,mBAAmB;EACnB,aAAa,EAAE;EACf,2BAA2B;EAC3B,oBAAoB;EACrB,CAAC;AAEW,oBAAmB,EAAE,OAAO;EACvC,SAAS,EAAE,SAAS,CAAC,UAAU;EAC/B,mBAAmB,EAAE,QAAQ,CAAC,UAAU;EACxC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;EACtC,sBAAsB,EAAE,QAAQ,CAAC,UAAU;EAC3C,eAAe,EAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CAAC,QAAQ;EACT,SAAS;EACT,mBAAmB;EACnB,iBAAiB;EACjB,sBAAsB;EACtB,eAAe;EAChB,CAAC;AAEW,yBAAwB,EAAE,OAAO,EAC5C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK,EACnC,CAAC,CAAC,QAAQ,EACT,SAAS,MACV,CAAC;AAMI,mCAAkC,EAAE,MAAM;EAC9C,EAAE,QAAQ;EACV,EAAE,QAAQ;EACV,EAAE,SAAS;EACX,EAAE,MAAM;EACR,EAAE,MAAM,EAAE,SAAS,CAAC;EACpB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;EAClC,CAAC;AAEW,2BAA0B,EACpC,OAAO;EACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpD,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC,CACD,SAAS,gCAAgC;AAE/B,2BAA0B,EAAE,OAAO;EAC9C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,SAAS,CAAC;EACjE,CAAC;AAEW,wCAAuC,EACjD,MAAM,EAAE,KAAK;EAAC;EAAS;EAAS;EAAQ,CAAC,CAAC,CAC1C,UAAU;AAEA,iCAAgC,EAC1C,OAAO;EACN,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,cAAc;EACd,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,WAAW,EAAE,EAAE,QAAQ,MAAM,CAAC,CAAC,CAAC,UAAU;EACnE,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpD,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC,CACD,SAAS,gCAAgC;AAE/B,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,UAAU;EAC9C,UAAU,wBAAwB,UAAU;EAC5C,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,UAAU;;EAE5D,QAAQ,EAAE,MAAM,8BAA8B,CAAC,UAAU;;EAEzD,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,CAAC,UAAU;;EAEnE,SAAS,wBAAwB,UAAU;EAC3C,QAAQ,wBAAwB,UAAU;EAC3C,CAAC,CACD,aAAa;AAMV,mCAAkC,EAAE,MAAM;EAC9C,EAAE,QAAQ;EACV,EAAE,QAAQ;EACV,EAAE,SAAS;EACX,EAAE,MAAM;EACR,EAAE,MAAM,EAAE,SAAS,CAAC;EACpB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;EAClC,CAAC;AAEW,2BAA0B,EACpC,OAAO;EACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC7B,CAAC,CACD,SAAS,gCAAgC;AAE/B,2BAA0B,EAAE,OAAO;EAC9C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EACJ,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CACxB,QAAQ;GAAC;GAAU;GAAW;GAAW;GAAO,CAAC;EACrD,CAAC;AAEW,iCAAgC,EAAE,OAAO;EACpD,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,WAAW,EAAE,SAAS,CAAC,QAAQ,KAAK;EACpC,eAAe,EAAE,SAAS,CAAC,QAAQ,MAAM;EACzC,YAAY,EAAE,SAAS,CAAC,QAAQ,KAAK;EACrC,cAAc,EAAE,SAAS,CAAC,QAAQ,KAAK;EACvC,oBAAoB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC9C,oBAAoB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC9C,WAAW,EAAE,SAAS,CAAC,QAAQ,MAAM;EACtC,CAAC;AAEW,uBAAsB,EAAE,OAAO;EAC1C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC3B,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,UAAU;EAC7D,CAAC;AAEW,gCAA+B,EAAE,OAAO;EACnD,SAAS,EAAE,SAAS,CAAC,UAAU;EAC/B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;EAChD,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;EAC7C,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC7B,CAAC;AAEW,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,SAAS;EAC7C,SAAS,EAAE,KAAK;GAAC;GAAO;GAAU;GAAW;GAAS,CAAC,CAAC,QAAQ,SAAS;EACzE,UAAU,wBAAwB,UAAU;EAC5C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,IAAI;EACnD,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,QAAQ,IAAM;EAChE,eAAe,6BAA6B,UAAU;EACtD,gBAAgB,8BAA8B,UAAU;;EAExD,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,CAAC,UAAU;;EAEnE,SAAS,wBAAwB,UAAU;EAC3C,QAAQ,wBAAwB,UAAU;EAC1C,MAAM,oBAAoB,UAAU;EACpC,SAAS,wBAAwB,UAAU;EAC5C,CAAC,CACD,aAAa;AAMH,wBAAuB,EAAE,OAAO;;AAE3C,KAAK,gBAAgB,UAAU,EAChC,CAAC,CAAC,UAAU;AAEA,+BAA8B;AAE9B,0BAAyB,EACnC,OAAO;;EAEN,QAAQ,EAAE,MAAM,8BAA8B,CAAC,UAAU;;EAEzD,OAAO,4BAA4B,UAAU;EAC9C,CAAC,CACD,UAAU;AAaA,6BAA4B,EACtC,OAAO;;EAEN,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;EAEtC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;EAExC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EACzC,CAAC,CACD,QAAQ;AAGE,kCAAiC,EAC3C,OAAO;;EAEN,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;;EAEjD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrD,CAAC,CACD,QAAQ;AAQE,4BAA2B,EACrC,OAAO;;EAEN,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAEpC,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAEzC,SAAS,+BAA+B,UAAU;;EAElD,OAAO,0BAA0B,UAAU;EAC5C,CAAC,CACD,QAAQ;AASE,yBAAwB,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB;AAStE,iCAAgC,EAAE,OAAO;EACpD,kBAAkB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC3C,gBAAgB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;EACtC,iBAAiB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC1C,sBAAsB,EAAE,SAAS,CAAC,QAAQ,MAAM;EACjD,CAAC;AAGW,8BAA6B,EAAE,OAAO;EACjD,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,iBAAiB,EAAE,QAAQ,CAAC,UAAU;EACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;EACjC,CAAC;AAMW,0BAA6D,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;AAM9F,0BAAyB,EACnC,OAAO;;EAEN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;;EAE9C,mBAAmB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,GAAG;;EAEhD,wBAAwB,EAAE,QAAQ,CAAC,IAAI,IAAK,CAAC,QAAQ,EAAE;EACxD,CAAC,CACD,QAAQ,CACR,UAAU;AAGA,qBAAoB,EAC9B,OAAO;;EAEN,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG;;EAEtD,eAAe,EAAE,QAAQ,CAAC,UAAU;;;;;EAKpC,eAAe,EAAE,SAAS,CAAC,QAAQ,KAAK;;EAExC,6BAA6B,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE;;EAEvE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAM,CAAC,IAAI,KAAQ,CAAC,QAAQ,IAAO;;EAExE,uBAAuB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,KAAO;EAC5E,CAAC,CACD,QAAQ;AAIE,sBAAqB,EAC/B,OAAO;;EAEN,cAAc,EAAE,SAAS,CAAC,QAAQ,KAAK;;EAEvC,SAAS,EAAE,KAAK;GAAC;GAAU;GAAQ;GAAM,CAAC,CAAC,QAAQ,SAAS;;EAE5D,MAAM;EACP,CAAC,CACD,QAAQ,CACR,UAAU;AAIA,wBAAuB,EACjC,OAAO,EACN,SAAS,EAAE,SAAS,CAAC,UAAU,EAChC,CAAC,CACD,QAAQ,CACR,UAAU;AAQP,oBAAmB,EACtB,QAAQ,CACR,KAAK,CACL,QAAQ,UAAU;AACjB,MAAI;GACF,MAAM,WAAW,IAAI,IAAI,MAAM,CAAC;AAChC,UAAO,aAAa,WAAW,aAAa;UACtC;AACN,UAAO;;IAER,wCAAwC;AAEhC,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM;GAAC,EAAE,QAAQ;GAAE,EAAE,QAAQ;GAAE,EAAE,SAAS;GAAC,CAAC,CAAC,CAAC,UAAU;EACpF,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,kBAAkB,EAAE,QAAQ,CAAC,UAAU;EACvC,KAAK,iBAAiB,UAAU;EAChC,WAAW,EAAE,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC,UAAU;EACxD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM;GAAC,EAAE,QAAQ;GAAE,EAAE,QAAQ;GAAE,EAAE,SAAS;GAAC,CAAC,CAAC,CAAC,UAAU;EACxF,qBAAqB,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC/D,CAAC,CACD,SAAS,EAAE,SAAS,CAAC,CACrB,aAAa,OAAO,QAAQ;EAC3B,MAAM,aAAa,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,MAAM,CAAC,SAAS;EACtF,MAAM,SAAS,OAAO,MAAM,QAAQ,YAAY,MAAM,IAAI,MAAM,CAAC,SAAS;AAC1E,MAAI,cAAc,OAChB,KAAI,SAAS;GACX,MAAM;GACN,SAAS;GACV,CAAC;GAEJ;AAES,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,UAAU;EACzD,kBAAkB,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EACxD,CAAC,CACD,QAAQ,CACR,UAAU;AASA,gBAAe,EAAE,OAAO;EACnC,QAAQ;EACR,UAAU;EACV,SAAS;EACT,UAAU;EACV,SAAS;EACT,QAAQ,mBAAmB,UAAU;EACrC,WAAW;EACX,OAAO;EACP,KAAK;EACL,MAAM;EACN,OAAO,kBAAkB,UAAU;EACnC,YAAY,uBAAuB,QAAQ,EAAE,CAAC;;EAE9C,WAAW,sBAAsB,UAAU;EAC3C,WAAW;;EAEX,UAAU;EACV,QAAQ;EACR,UAAU;EACX,CAAC,CAAC,QAAQ;EACT,QAAQ,EACN,UAAU;GACR,WAAW;GACX,OAAO;GACP,WAAW;GACX,aAAa;GACb,mBAAmB;GACnB,oBAAoB;GACpB,wBAAwB;GACxB,iBAAiB;GACjB,kBAAkB;GAClB,gBAAgB;GAChB,YAAY;IACV,SAAS;IACT,MAAM;IACN,eAAe;IACf,kBAAkB;IAClB,0BAA0B;IAC1B,oBAAoB;IACpB,gBAAgB;IAChB,iBAAiB;IAClB;GACD,SAAS;IACP,SAAS;IACT,oBAAoB;IACpB,eAAe;IACf,eAAe;IAChB;GACD,SAAS,EACP,SAAS,aACV;GACF,EACF;EACD,UAAU,EAAE;EACZ,SAAS,EACP,SAAS,QACV;EACD,UAAU,EACR,UAAU;GACR,SAAS;GACT,WAAW,EAAE;GACb,gBAAgB,EAAE;GAClB,OAAO;GACP,UAAU,EACR,SAAS;IACP,WAAW;IACX,SAAS;IACT,UAAU;IACV,WAAW,EAAE;IACb,UAAU;IACV,aAAa;IACb,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,YAAY;IACb,EACF;GACD,UAAU;GACV,aAAa;GACb,aAAa;GACb,cAAc;GACd,gBAAgB;GACjB,EACF;EACD,SAAS;GACP,MAAM;GACN,MAAM;GACN,MAAM,EACJ,MAAM,SACP;GACD,WAAW;IACT,SAAS;IACT,YAAY;IACZ,4BAA4B;IAC7B;GACD,mBAAmB;GACnB,aAAa,EAAE;GACf,2BAA2B;GAC3B,oBAAoB;GACrB;EACD,OAAO,EACL,KAAK,EACH,QAAQ;GACN,YAAY;GACZ,WAAW,EAAE;GACd,EACF,EACF;EACD,MAAM;GACJ,SAAS;GACT,mBAAmB;GACnB,iBAAiB;GACjB,sBAAsB;GACtB,eAAe;GAChB;EACD,OAAO;GACL,UAAU;GACV,eAAe;GACf,6BAA6B;GAC7B,gBAAgB;GAChB,uBAAuB;GACxB;EACD,YAAY;GACV,OAAO,EAAE;GACT,UAAU;IACR,kBAAkB;IAClB,gBAAgB;IAChB,OAAO,EAAE;IACT,iBAAiB;IACjB,sBAAsB;IACvB;GACD,OAAO,EAAE;GACV;EACD,WAAW,EACT,SAAS,MACV;EAIF,CAAC"}
+{"version":3,"file":"schema.js","names":[],"sources":["../../../src/config/schema.ts"],"sourcesContent":["import { z } from 'zod';\n\nimport { checkCacheDir } from '../browser/cache-dir-policy.js';\nimport { validatePublicUrl } from './public-url.js';\n\n// ============================================\n// Agent Configs\n// ============================================\n\nexport const AgentModelRefSchema = z.union([\n  z.string(),\n  z\n    .object({\n      primary: z.string().optional(),\n      fallbacks: z.array(z.string()).optional(),\n    })\n    .strict(),\n]);\n\nexport type AgentModelConfig = z.infer<typeof AgentModelRefSchema>;\n\n/**\n * Image-generation model ref. Superset of {@link AgentModelRefSchema} with\n * runtime knobs (`timeoutMs`, `autoProviderFallback`) used by the\n * image-generation runtime; falls back to a plain string for backward\n * compatibility with old configs.\n */\nexport const AgentImageGenerationModelSchema = z.union([\n  z.string(),\n  z\n    .object({\n      primary: z.string().optional(),\n      fallbacks: z.array(z.string()).optional(),\n      /** Hard cap for the whole generation attempt (ms). */\n      timeoutMs: z.number().int().positive().optional(),\n      /**\n       * When all `primary + fallbacks` candidates fail, sweep every other\n       * configured provider before giving up.\n       */\n      autoProviderFallback: z.boolean().optional(),\n    })\n    .strict(),\n]);\n\nexport type AgentImageGenerationModelConfig = z.infer<typeof AgentImageGenerationModelSchema>;\n\nexport const AgentDefaultsSchema = z.object({\n  /** Parent directory: each agent’s Markdown root is `<expanded>/<agentId>/` (e.g. `.../workspace/main`). */\n  workspace: z.string().default('~/.xopc/workspace'),\n  model: z.union([\n    z.string(),\n    z.object({\n      primary: z.string().optional(),\n      fallbacks: z.array(z.string()).optional(),\n    }).strict(),\n  ]).default(''), // Empty default - will be resolved dynamically at runtime\n  /** Vision / image understanding model (provider/model). Falls back to heuristics when unset. */\n  imageModel: AgentModelRefSchema.optional(),\n  /** Image generation model (provider/model), e.g. openai/gpt-image-1. Supports plugin-based providers (OpenAI / DashScope / MiniMax / Google / Fal). */\n  imageGenerationModel: AgentImageGenerationModelSchema.optional(),\n  /** Max image size for image tool loads (MB). */\n  mediaMaxMb: z.number().positive().optional(),\n  maxTokens: z.number().default(8192),\n  temperature: z.number().default(0.7),\n  maxToolIterations: z.number().default(20),\n  // Wall-clock limit for one user turn (LLM + tools). Default 30m if unset; cap 4h.\n  maxTaskDurationMs: z.number().min(60000).max(14_400_000).optional(),\n  // Reliability settings\n  maxRequestsPerTurn: z.number().min(10).max(200).default(50),\n  maxToolFailuresPerTurn: z.number().min(1).max(20).default(3),\n  // Thinking ability settings\n  thinkingDefault: z.enum(['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'adaptive']).optional(),\n  reasoningDefault: z.enum(['off', 'on', 'stream']).optional(),\n  verboseDefault: z.enum(['off', 'on', 'full']).optional(),\n  bootstrapMaxChars: z.number().int().positive().optional(),\n  bootstrapTotalMaxChars: z.number().int().positive().optional(),\n  bootstrapPromptTruncationWarning: z.enum(['off', 'once', 'always']).optional(),\n  startupContext: z\n    .object({\n      enabled: z.boolean().optional(),\n      applyOn: z.array(z.enum(['new', 'reset'])).optional(),\n      dailyMemoryDays: z.number().int().min(1).optional(),\n      maxFileBytes: z.number().int().positive().optional(),\n      maxFileChars: z.number().int().positive().optional(),\n      maxTotalChars: z.number().int().positive().optional(),\n    })\n    .optional(),\n  contextLimits: z\n    .object({\n      postCompactionMaxChars: z.number().int().positive().optional(),\n    })\n    .optional(),\n  compaction: z.object({\n    enabled: z.boolean().default(true),\n    mode: z.enum(['default', 'safeguard']).default('default'),\n    reserveTokens: z.number().default(8000),\n    triggerThreshold: z.number().min(0.5).max(0.95).default(0.8),\n    minMessagesBeforeCompact: z.number().default(10),\n    keepRecentMessages: z.number().default(5),\n    // Dual-strategy compaction\n    evictionWindow: z.number().min(0.1).max(0.5).default(0.2),\n    retentionWindow: z.number().min(3).max(20).default(6),\n    postCompactionSections: z.array(z.string()).optional(),\n  }).optional(),\n  pruning: z.object({\n    enabled: z.boolean().default(true),\n    maxToolResultChars: z.number().default(10000),\n    headKeepRatio: z.number().default(0.3),\n    tailKeepRatio: z.number().default(0.3),\n  }).optional(),\n  /**\n   * Curated memory (`agents/<id>/memories/`) + pluggable external provider.\n   * Only one external provider at a time.\n   */\n  memory: z\n    .object({\n      /** Master switch: `curated_memory` tool, prefetch, and external provider. Default true. */\n      enabled: z.boolean().optional(),\n      /** When false, disable curated_memory tool and memory subsystem helpers. Default true. */\n      useEnhancedSystem: z.boolean().optional(),\n      /** Include USER.md in snapshot. Default true. */\n      userProfileEnabled: z.boolean().optional(),\n      memoryCharLimit: z.number().positive().optional(),\n      userCharLimit: z.number().positive().optional(),\n      provider: z.enum(['none', 'stub']).optional(),\n      /** How often prefetched external memory is injected into the user message. */\n      injectionFrequency: z.enum(['every-turn', 'first-turn']).optional(),\n      /** Inject prefetch on turns 1, 1+N, 1+2N, … (only when injectionFrequency is every-turn). Min 1. */\n      contextCadence: z.number().int().min(1).optional(),\n      /** Reserved for future external “dialectic” sync cadence (not wired yet). */\n      dialecticCadence: z.number().int().min(1).optional(),\n      /**\n       * Background memory consolidation (\"dreaming\"): three-phase sleep model that\n       * promotes short-term recall signals into long-term memory (`MEMORY.md`).\n       *\n       * Phases:\n       * - **light** — fast, frequent sweep (default every 6 h): dedup + signal collection.\n       * - **deep**  — daily deep promotion (default 3 AM): score-gated write to MEMORY.md.\n       * - **rem**   — weekly pattern discovery (default Sun 5 AM): cross-session insight mining.\n       */\n      dreaming: z\n        .object({\n          enabled: z.boolean().optional(),\n          /** Default deep-phase cron when `phases.deep.cron` is omitted. */\n          frequency: z.string().optional(),\n          timezone: z.string().optional(),\n          phases: z\n            .object({\n              light: z\n                .object({\n                  enabled: z.boolean().optional(),\n                  cron: z.string().optional(),\n                  lookbackDays: z.number().int().min(1).optional(),\n                  limit: z.number().int().min(0).optional(),\n                  dedupeSimilarity: z.number().min(0).max(1).optional(),\n                })\n                .optional(),\n              deep: z\n                .object({\n                  enabled: z.boolean().optional(),\n                  cron: z.string().optional(),\n                  minScore: z.number().min(0).max(1).optional(),\n                  minRecallCount: z.number().int().min(1).optional(),\n                  minUniqueQueries: z.number().int().min(1).optional(),\n                  limit: z.number().int().min(0).optional(),\n                  recencyHalfLifeDays: z.number().min(1).optional(),\n                  maxAgeDays: z.number().int().min(1).optional(),\n                })\n                .optional(),\n              rem: z\n                .object({\n                  enabled: z.boolean().optional(),\n                  cron: z.string().optional(),\n                  lookbackDays: z.number().int().min(1).optional(),\n                  limit: z.number().int().min(0).optional(),\n                  minPatternStrength: z.number().min(0).max(1).optional(),\n                })\n                .optional(),\n            })\n            .optional(),\n        })\n        .optional(),\n    })\n    .optional(),\n  /** Cross-session transcript search (`session_search` tool). */\n  sessionSearch: z\n    .object({\n      /** Model ref for per-session summaries (e.g. openai/gpt-4o-mini). */\n      summaryModel: z.string().optional(),\n    })\n    .optional(),\n  /**\n   * Post-turn background review (Hermes-style): optional quiet follow-up that may call\n   * `curated_memory` / `skill_manage` so durable facts and reusable workflows persist\n   * without bloating the main user-visible turn.\n   */\n  backgroundReview: z\n    .object({\n      /** When true, nudges may run after successful turns. Default false (opt-in). */\n      enabled: z.boolean().optional(),\n      /** User-turn cadence for memory review. 0 disables the memory channel. Default 10. */\n      memoryNudgeInterval: z.number().int().min(0).optional(),\n      /** LLM rounds without `skill_manage` before a skill review. 0 disables the skill channel. Default 10. */\n      skillNudgeInterval: z.number().int().min(0).optional(),\n      /** Max tool executions for the review agent. Default 8. */\n      maxToolRounds: z.number().int().min(1).max(32).optional(),\n      /** Max prior messages passed into the review context (tail). Default 80. */\n      maxHistoryMessages: z.number().int().min(10).max(200).optional(),\n      /** Wall-clock cap for the review run (ms). Default 120000. */\n      maxDurationMs: z.number().int().min(30_000).max(600_000).optional(),\n    })\n    .optional(),\n  /** LLM pass for `web_extract` (markdown-focused extraction). */\n  webExtract: z\n    .object({\n      model: z.string().optional(),\n      maxLength: z.number().positive().optional(),\n    })\n    .optional(),\n  /**\n   * Browser capability via unified `browser_use` tool. Enabled by default (set `enabled: false` to disable).\n   * The local Playwright backend requires Chromium on the gateway host: `npx playwright install chromium`.\n   */\n  browser: z\n    .object({\n      enabled: z.boolean().optional(),\n      /** Run browser in headless mode (default: false — visible window). */\n      headless: z.boolean().optional(),\n      /** When true, skip private-IP blocking for browser navigation (cloud metadata endpoints are always blocked). */\n      allowPrivateUrls: z.boolean().optional(),\n      /** Browser command timeout in seconds (default: 30). */\n      commandTimeout: z.number().min(5).optional(),\n      /** Browser backend mode (default: 'extension'). Also: 'local' (Playwright), 'cdp', 'cloud', or 'cloakbrowser'. */\n      backend: z.enum(['local', 'cdp', 'cloud', 'extension', 'cloakbrowser']).optional(),\n      /** Cloud browser backend: 'local' (default Playwright), 'browserbase', or 'browser-use'. */\n      cloudProvider: z.enum(['local', 'browserbase', 'browser-use']).optional(),\n      /** Cloud browser credentials and optional session hints. */\n      cloud: z.object({\n        /** API key for the selected cloud provider. Environment variables are still supported as fallback. */\n        apiKey: z.string().optional(),\n        /** Browserbase project id. Falls back to BROWSERBASE_PROJECT_ID. */\n        projectId: z.string().optional(),\n        /** Optional cloud provider region. */\n        region: z.string().optional(),\n      }).optional(),\n      /** Direct CDP WebSocket endpoint URL (bypasses cloud provider). */\n      cdpUrl: z.string().optional(),\n      /** Chrome Extension bridge settings (only used when backend = 'extension'). */\n      extension: z.object({\n        /** WebSocket server port. Default: 19820. */\n        port: z.number().min(1024).max(65535).optional(),\n        /** Host to bind. Default: 127.0.0.1. */\n        host: z.string().optional(),\n        /** Timeout waiting for extension connection (ms). Default: 30000. */\n        connectionTimeout: z.number().min(1000).optional(),\n      }).optional(),\n      /** JS dialog handling policy: 'must_respond' (agent must act), 'auto_dismiss', or 'auto_accept'. */\n      dialogPolicy: z.enum(['must_respond', 'auto_dismiss', 'auto_accept']).optional(),\n      /** Dialog auto-dismiss/accept timeout in seconds (default: 300). */\n      dialogTimeoutSeconds: z.number().min(1).optional(),\n      /** Enable humanized input simulation (Bezier mouse, per-char typing, wheel scroll). Default: false. */\n      humanize: z.boolean().optional(),\n      /** Humanize behavior preset: 'default' (fast) or 'careful' (slower, more realistic). Default: 'careful'. */\n      humanPreset: z.enum(['default', 'careful']).optional(),\n      /** CloakBrowser settings (only used when backend = 'cloakbrowser'). */\n      cloakbrowser: z.object({\n        /** Keep browser process alive between tasks. Default: true. */\n        keepOpen: z.boolean().optional(),\n        /** Create a temporary profile directory, cleaned up on close. Default: false. */\n        temporaryProfile: z.boolean().optional(),\n        /** Directory for cached CloakBrowser binaries. Must live under the user's home directory. Default: ~/.xopc/bin/cloakbrowser. */\n        cacheDir: z\n          .string()\n          .optional()\n          .superRefine((v, ctx) => {\n            const r = checkCacheDir(v);\n            if (r.ok === false) ctx.addIssue({ code: 'custom', message: r.message });\n          }),\n        /** Override the CloakBrowser binary path (skip auto-download). */\n        binaryPath: z.string().optional(),\n        /** Timezone to emulate (e.g. \"America/New_York\"). */\n        timezone: z.string().optional(),\n        /** Locale to emulate (e.g. \"en-US\"). */\n        locale: z.string().optional(),\n        /** Public IP for WebRTC leak prevention. */\n        webrtcIp: z.string().optional(),\n        /** Platform to emulate in fingerprint (e.g. \"windows\", \"macos\"). */\n        fingerprintPlatform: z.string().optional(),\n        /** Extra Chromium launch args (override defaults with same --key= prefix). */\n        extraArgs: z.array(z.string()).optional(),\n      }).optional(),\n    })\n    .optional(),\n  /** Sub-agent delegation (`delegate_task`). Opt-in. */\n  delegate: z\n    .object({\n      enabled: z.boolean().optional(),\n    })\n    .optional(),\n  /** Sandboxed `execute_code` (programmatic tool calls). Opt-in. */\n  executeCode: z\n    .object({\n      enabled: z.boolean().optional(),\n    })\n    .optional(),\n  /**\n   * Dynamic workflows (`workflow` tool). On by default — disable to remove the\n   * tool from the agent surface entirely. Subagents spawned by workflows still\n   * obey the global `delegate` allowlist; `maxSubagents` caps a single workflow\n   * run, `defaultTimeoutSec` caps wall-clock per run.\n   */\n  workflow: z\n    .object({\n      enabled: z.boolean().default(true),\n      maxConcurrency: z.number().int().min(1).max(64).default(16),\n      maxSubagents: z.number().int().min(1).max(10000).default(1000),\n      defaultTimeoutSec: z.number().int().min(60).max(14_400).default(1800),\n    })\n    .optional(),\n  /** Optional full system prompt replacement (merged with per-agent entry; entry wins). */\n  systemPromptOverride: z.string().optional(),\n  /** Optional allowlist of skill names for `<available_skills>`; when set, replaces unfiltered list. */\n  skills: z.array(z.string()).optional(),\n  /** Disable built-in tools by name (e.g. `shell`, `web_search`). */\n  tools: z\n    .object({\n      disable: z.array(z.string()).optional(),\n    })\n    .optional(),\n  /** Opaque per-process params (reserved for extensions / future use). */\n  params: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport const AgentConfigSchema = z.object({\n  id: z.string(),\n  /** When true, this entry is the default routing agent. */\n  default: z.boolean().optional(),\n  name: z.string().optional(),\n  /** Short human-readable summary for UIs (gateway console, pickers). */\n  description: z.string().max(4000).optional(),\n  enabled: z.boolean().default(true),\n  /** Per-agent workspace root (`~` expanded at runtime). */\n  workspace: z.string().optional(),\n  /**\n   * Internal agent state directory (`…/credentials`, `agent.json`, pid, inbox).\n   * Default: `<stateDir>/agents/<id>/agent`.\n   */\n  agentDir: z.string().optional(),\n  model: AgentModelRefSchema.optional(),\n  thinkingDefault: z.enum(['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'adaptive']).optional(),\n  reasoningDefault: z.enum(['off', 'on', 'stream']).optional(),\n  verboseDefault: z.enum(['off', 'on', 'full']).optional(),\n  systemPromptOverride: z.string().optional(),\n  skills: z.array(z.string()).optional(),\n  tools: z\n    .object({\n      disable: z.array(z.string()).optional(),\n    })\n    .optional(),\n  params: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport const AgentsConfigSchema = z.object({\n  /** Default agent id when not specified (routing / session creation). */\n  default: z.string().optional(),\n  defaults: AgentDefaultsSchema.optional(),\n  list: z.array(AgentConfigSchema).optional(),\n}).default({\n  defaults: {\n    workspace: '~/.xopc/workspace',\n    model: '', // Empty default - will be resolved dynamically at runtime\n    maxTokens: 8192,\n    temperature: 0.7,\n    maxToolIterations: 20,\n    maxRequestsPerTurn: 50,\n    maxToolFailuresPerTurn: 3,\n    thinkingDefault: 'medium',\n    reasoningDefault: 'stream',\n    verboseDefault: 'full',\n    compaction: {\n      enabled: true,\n      mode: 'default',\n      reserveTokens: 8000,\n      triggerThreshold: 0.8,\n      minMessagesBeforeCompact: 10,\n      keepRecentMessages: 5,\n      evictionWindow: 0.2,\n      retentionWindow: 6,\n    },\n    pruning: {\n      enabled: true,\n      maxToolResultChars: 10000,\n      headKeepRatio: 0.3,\n      tailKeepRatio: 0.3,\n    },\n    browser: {\n      backend: 'extension',\n    },\n  },\n} as any);\n\n// ============================================\n// Channel Configs (per-channel Zod lives in bundled extensions; root schema is open)\n// ============================================\n\nexport {\n  TelegramTopicConfigSchema,\n  TelegramGroupConfigSchema,\n  TelegramAccountConfigSchema,\n  TelegramConfigSchema,\n} from '../../extensions/telegram/src/config-schema.js';\nexport type { TelegramConfig } from '../../extensions/telegram/src/config-schema.js';\nexport { WeixinAccountConfigSchema, WeixinConfigSchema } from '../../extensions/weixin/src/config-schema.js';\nexport type { WeixinConfig } from '../../extensions/weixin/src/config-schema.js';\n// ============================================\n// Session Routing Configuration\n// ============================================\n\nexport const BindingMatchSchema = z.object({\n  channel: z.string(),\n  accountId: z.string().optional(),\n  peerKind: z.string().optional(),\n  peerId: z.string().optional(),\n  guildId: z.string().optional(),\n  teamId: z.string().optional(),\n  memberRoleIds: z.array(z.string()).optional(),\n});\n\nexport const BindingRuleSchema = z.object({\n  id: z.string().optional(),\n  agentId: z.string(),\n  priority: z.number().default(100),\n  match: BindingMatchSchema,\n  enabled: z.boolean().default(true),\n});\n\nexport const BindingsConfigSchema = z.array(BindingRuleSchema).default([]);\n\nexport const SessionDmScopeSchema = z.enum([\n  'main',\n  'per-peer',\n  'per-channel-peer',\n  'per-account-channel-peer',\n]);\n\nexport const SessionStorageConfigSchema = z.object({\n  pruneAfterMs: z.number().optional(),\n  maxEntries: z.number().optional(),\n});\n\nexport const SessionConfigSchema = z.object({\n  dmScope: SessionDmScopeSchema.default('main'),\n  identityLinks: z.record(z.string(), z.array(z.string())).optional(),\n  storage: SessionStorageConfigSchema.optional(),\n}).default({\n  dmScope: 'main',\n});\n\n/** Channel buckets — shapes validated post-parse by registered channel plugins. */\nexport const ChannelsConfigSchema = z.record(z.string(), z.unknown()).default({\n  telegram: {\n    enabled: false,\n    allowFrom: [],\n    groupAllowFrom: [],\n    debug: false,\n    accounts: {\n      default: {\n        accountId: 'default',\n        enabled: true,\n        botToken: '',\n        allowFrom: [],\n        dmPolicy: 'pairing' as const,\n        groupPolicy: 'open' as const,\n        replyToMode: 'off' as const,\n        historyLimit: 50,\n        textChunkLimit: 4000,\n        streamMode: 'partial' as const,\n      },\n    },\n    dmPolicy: 'pairing' as const,\n    groupPolicy: 'open' as const,\n    replyToMode: 'off' as const,\n    historyLimit: 50,\n    textChunkLimit: 4000,\n  },\n});\n\nexport const SearchProviderEntrySchema = z.object({\n  type: z.enum(['brave', 'tavily', 'bing', 'searxng']),\n  apiKey: z.string().optional(),\n  /** SearXNG instance base URL (e.g. http://localhost:8080) */\n  url: z.string().optional(),\n  disabled: z.boolean().optional(),\n});\n\nexport type SearchProviderEntry = z.infer<typeof SearchProviderEntrySchema>;\n\nexport const WebSearchConfigSchema = z.object({\n  maxResults: z.number().default(5),\n  /** Ordered API providers; empty → HTML fallback only */\n  providers: z.array(SearchProviderEntrySchema).default([]),\n});\n\nexport type WebSearchConfig = z.infer<typeof WebSearchConfigSchema>;\n\nexport const WebsiteBlocklistSchema = z.object({\n  /** Master switch. Default false (no blocking). */\n  enabled: z.boolean().default(false),\n  /** Domain patterns to block (e.g. \"example.com\", \"*.evil.org\"). */\n  domains: z.array(z.string()).default([]),\n});\n\nexport type WebsiteBlocklistConfig = z.infer<typeof WebsiteBlocklistSchema>;\n\nexport const WebToolsConfigSchema = z.object({\n  /** Search result HTML fallback: cn → Bing, otherwise DuckDuckGo */\n  region: z.enum(['cn', 'global']).optional(),\n  search: WebSearchConfigSchema.optional(),\n  /** Domain blocklist for web_fetch / web_extract / browser tools. */\n  blocklist: WebsiteBlocklistSchema.optional(),\n});\n\nexport type WebToolsConfig = z.infer<typeof WebToolsConfigSchema>;\n\nexport const ToolsConfigSchema = z.object({\n  web: WebToolsConfigSchema.optional(),\n  /**\n   * Per-capability media providers. Currently only `audio` (STT) is wired;\n   * `image` / `video` slots are reserved for future capabilities.\n   */\n  media: z.lazy(() => ToolsMediaConfigSchema),\n}).default({\n  web: {\n    search: {\n      maxResults: 5,\n      providers: [],\n    },\n  },\n});\n\n// ============================================\n// Gateway Configuration\n// ============================================\n\nexport const GatewayAuthRateLimitSchema = z\n  .object({\n    enabled: z.boolean().default(true),\n    maxAttempts: z.number().int().min(1).default(5),\n    windowMs: z.number().default(900_000),\n    blockDurationMs: z.number().default(300_000),\n    /** OpenClaw alias for blockDurationMs. */\n    lockoutMs: z.number().optional(),\n    /** Skip rate limiting for loopback client IPs (default true). Remote browser Origin requests never exempt. */\n    exemptLoopback: z.boolean().default(true),\n    /**\n     * Coalesce same-client failures arriving within this window into a single\n     * attempt. Absorbs SPA fan-out / SDK auto-retry storms without weakening\n     * brute-force protection (deliberate attackers are still rate-limited to\n     * one effective attempt per window). Set to 0 to disable.\n     */\n    burstCoalesceMs: z.number().int().min(0).default(1000),\n  })\n  .optional();\n\nexport const GatewaySecuritySchema = z\n  .object({\n    /** When true, non-loopback binds require explicit gateway.auth.rateLimit configuration. */\n    strict: z.boolean().optional(),\n  })\n  .optional();\n\nexport const GatewayTrustedProxySchema = z\n  .object({\n    /** Header set by the reverse proxy with the authenticated user identity. */\n    userHeader: z.string().min(1),\n    /** Additional headers that must be present (e.g. proxy auth markers). */\n    requiredHeaders: z.array(z.string()).optional(),\n    /** When non-empty, only these user identities are allowed. */\n    allowUsers: z.array(z.string()).optional(),\n    /** Allow trusted-proxy auth when the TCP source is loopback (same-host reverse proxy). */\n    allowLoopback: z.boolean().optional(),\n  })\n  .strict();\n\nexport const GatewayAuthSchema = z\n  .object({\n    mode: z.enum(['none', 'token', 'password', 'trusted-proxy']).default('token'),\n    token: z.string().optional(),\n    password: z.string().optional(),\n    /** When true (default for Serve), browser UI may auth via Tailscale identity headers. API routes still require token. */\n    allowTailscale: z.boolean().optional(),\n    rateLimit: GatewayAuthRateLimitSchema,\n    trustedProxy: GatewayTrustedProxySchema.optional(),\n  })\n  .default({\n    mode: 'token',\n  });\n\nexport const GatewayTailscaleConsentSchema = z.object({\n  version: z.string().min(1),\n  acceptedAt: z.string().min(1),\n});\n\nexport const GatewayTailscaleSchema = z\n  .object({\n    mode: z.enum(['off', 'serve', 'funnel']).default('off'),\n    resetOnExit: z.boolean().default(true),\n    consent: GatewayTailscaleConsentSchema.optional(),\n  })\n  .default({\n    mode: 'off',\n    resetOnExit: true,\n  });\n\nexport const GatewayRemoteSchema = z.object({\n  url: z.string().url(),\n  token: z.string().optional(),\n  password: z.string().optional(),\n  transport: z.enum(['direct', 'ssh']).default('direct'),\n  sshTarget: z.string().optional(),\n  sshIdentity: z.string().optional(),\n  tlsFingerprint: z.string().optional(),\n});\n\nexport const GatewayTlsSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    autoGenerate: z.boolean().default(false),\n    certPath: z.string().optional(),\n    keyPath: z.string().optional(),\n  })\n  .default({\n    enabled: false,\n    autoGenerate: false,\n  });\n\nexport const GatewayModeSchema = z.enum(['local', 'remote']).default('local');\n\nexport const HeartbeatConfigSchema = z\n  .object({\n    enabled: z.boolean(),\n    intervalMs: z.number(),\n    /** When false, heartbeat instructions are only sent during heartbeat polling turns (not in every chat system prompt). */\n    includeSystemPromptSection: z.boolean().optional().default(false),\n    target: z.string().optional(),\n    targetChatId: z.string().optional(),\n    prompt: z.string().optional(),\n    ackMaxChars: z.number().optional(),\n    isolatedSession: z.boolean().optional(),\n    activeHours: z\n      .object({\n        start: z.string(),\n        end: z.string(),\n        timezone: z.string().optional(),\n      })\n      .optional(),\n  })\n  .default({\n    enabled: true,\n    intervalMs: 1_800_000,\n    includeSystemPromptSection: false,\n  });\n\nexport const GatewayChannelConnectDeferModeSchema = z.enum(['auto', 'off', 'explicit']);\n\nexport const TunnelConsentSchema = z.object({\n  version: z.string().min(1),\n  acceptedAt: z.string().min(1),\n});\n\nexport const TunnelConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    brokerUrl: z.string().url().default('https://frp.xopc.ai/api'),\n    /** Broker register API secret (env `XOPC_TUNNEL_REGISTRATION_SECRET` overrides when set). */\n    registrationSecret: z.string().min(1).optional(),\n    autoStart: z.boolean().default(false),\n    subdomain: z.string().optional(),\n    consent: TunnelConsentSchema.optional(),\n  })\n  .default({\n    enabled: false,\n    brokerUrl: 'https://frp.xopc.ai/api',\n    autoStart: false,\n  });\n\nexport type TunnelConfig = z.infer<typeof TunnelConfigSchema>;\n\n/**\n * Workspace-scoped concerns (file import, etc.). Distinct from\n * `agents.defaults.workspace`, which is the workspace *path*; this block carries\n * feature configuration for workspace-related routes.\n */\nexport const WorkspaceImportConfigSchema = z.object({\n  /** Workspace-relative subdir for imported files. Default `imports`. */\n  targetDir: z.string().default('imports'),\n  /** Per-file byte cap. Default 100 MiB. */\n  maxBytes: z.number().int().min(1024).max(10_737_418_240).default(104_857_600),\n  /** When false, the route rejects `onConflict: 'overwrite'`. Default true. */\n  allowOverwrite: z.boolean().default(true),\n});\nexport type WorkspaceImportConfig = z.infer<typeof WorkspaceImportConfigSchema>;\n\nexport const WorkspaceConfigSchema = z.object({\n  import: WorkspaceImportConfigSchema.optional(),\n}).optional();\nexport type WorkspaceConfig = z.infer<typeof WorkspaceConfigSchema>;\n\nexport const GatewayBindModeSchema = z.enum(['auto', 'loopback', 'lan', 'tailnet', 'custom']);\n\nexport const GatewayConfigSchema = z.object({\n  /** Semantic bind mode. */\n  bind: GatewayBindModeSchema.optional(),\n  /** IPv4 listen address when `bind` is `custom`. */\n  customBindHost: z.string().optional(),\n  port: z.number().optional(),\n  /** local: this process runs the gateway; remote: CLI clients target gateway.remote. */\n  mode: GatewayModeSchema.optional(),\n  /** Persistent remote gateway target for CLI/TUI/MCP when mode=remote. */\n  remote: GatewayRemoteSchema.optional(),\n  tailscale: GatewayTailscaleSchema.optional(),\n  tls: GatewayTlsSchema.optional(),\n  auth: GatewayAuthSchema.optional(),\n  heartbeat: HeartbeatConfigSchema.optional(),\n  maxSseConnections: z.number().optional(),\n  corsOrigins: z.array(z.string()).optional(),\n  /**\n   * Reverse-proxy publicly reachable URL (e.g. `https://gateway.example.com`).\n   * Optional. When set, mobile pairing surfaces this URL as the preferred\n   * baseUrl and it is auto-added to the browser CORS/CSRF allowlist.\n   * - Must be a URL with no path / query / userinfo.\n   * - Must use `https:` for public hosts; `http:` is only allowed when the\n   *   hostname is in an RFC1918 / `.local` private range.\n   */\n  publicUrl: z\n    .string()\n    .superRefine((value, ctx) => {\n      const result = validatePublicUrl(value);\n      if (result.ok === false) {\n        ctx.addIssue({ code: 'custom', message: `gateway.publicUrl: ${result.message}` });\n      }\n    })\n    .optional(),\n  /** Dangerous: allow browser Origin to match the HTTP Host header when not in corsOrigins. */\n  dangerouslyAllowHostHeaderOriginFallback: z.boolean().optional(),\n  /** CIDRs or exact IPs of reverse proxies allowed to terminate auth (trusted-proxy mode). */\n  trustedProxies: z.array(z.string()).optional(),\n  /** When true, fall back to X-Real-IP if X-Forwarded-For chain parsing fails. Default false (fail closed). */\n  allowRealIpFallback: z.boolean().optional(),\n  security: GatewaySecuritySchema,\n  /**\n   * How channel `start()` is split around HTTP listen when using `GatewayServer`.\n   * - `auto` (default): defer ids come from channel plugin `meta.deferConnectUntilAfterListen` + enabled config.\n   * - `off`: always start all channels in phase1 (troubleshooting / strict ordering).\n   * - `explicit`: defer only `channelConnectDeferIds` (empty = defer none).\n   */\n  channelConnectDeferMode: GatewayChannelConnectDeferModeSchema.optional(),\n  /** When `channelConnectDeferMode` is `explicit`, these channel plugin ids are deferred until after listen. */\n  channelConnectDeferIds: z.array(z.string().min(1)).max(24).optional(),\n  /** Removed from the defer set (applied after `auto` or `explicit` resolution). */\n  channelConnectDeferSkipIds: z.array(z.string().min(1)).max(24).optional(),\n  /** Default skills marketplace provider id. Built-in: 'store', 'skillhub', 'clawhub'. Extensions may register more. */\n  skillsMarketplaceProvider: z.string().optional(),\n  /** Base URL for the xopc skills marketplace (public REST API). */\n  skillsStoreBaseUrl: z.string().url().optional(),\n  /** File sharing configuration (temporary public download links for workspace files). */\n  share: z.object({\n    enabled: z.boolean().default(true),\n    /** Default TTL in ms (default 24h). */\n    defaultTtlMs: z.number().min(60_000).max(604_800_000).default(86_400_000),\n    /** Maximum TTL in ms (default 7 days). */\n    maxTtlMs: z.number().min(60_000).max(2_592_000_000).default(604_800_000),\n    /** Maximum concurrent active shares (default 100). */\n    maxActiveShares: z.number().min(1).max(10_000).default(100),\n    /** Maximum shareable file size in bytes (default 100MB). */\n    maxFileSize: z.number().min(1_048_576).max(10_737_418_240).default(104_857_600),\n    /** MIME types allowed for inline preview (?inline=1). */\n    inlinePreviewMimes: z.array(z.string()).default([\n      'image/png',\n      'image/jpeg',\n      'image/gif',\n      'image/webp',\n      'image/svg+xml',\n      'application/pdf',\n      'text/html',\n      'text/markdown',\n      'text/plain',\n      'application/json',\n    ]),\n    /** Folder-sharing controls (browse + ZIP). */\n    directory: z.object({\n      enabled: z.boolean().default(true),\n      /** Maximum folder size in bytes at scan time (default 1 GB). */\n      maxFolderSize: z.number().int().min(1_048_576).max(10_737_418_240).default(1_073_741_824),\n      /** Maximum number of entries scanned for a single folder share. */\n      maxFileCount: z.number().int().min(1).max(100_000).default(1_000),\n      /** Traversal depth cap (defense against recursive symlinks). */\n      maxDepth: z.number().int().min(1).max(64).default(20),\n      /** In-memory directory listing cache TTL. */\n      listingCacheMs: z.number().int().min(0).max(600_000).default(60_000),\n      /** Maximum simultaneous ZIP streams per share token. */\n      zipConcurrency: z.number().int().min(1).max(8).default(1),\n    }).default({\n      enabled: true,\n      maxFolderSize: 1_073_741_824,\n      maxFileCount: 1_000,\n      maxDepth: 20,\n      listingCacheMs: 60_000,\n      zipConcurrency: 1,\n    }),\n  }).optional(),\n  /** Site-share configuration (static directory or reverse-proxy a local dev server). */\n  siteShare: z.object({\n    enabled: z.boolean().default(true),\n    /** Public host suffix that subdomain shares are served under. */\n    publicHostSuffix: z.string().min(1).default('share.xopc.ai'),\n    /** Default TTL in ms (default 6h, shorter than file shares — live app surface). */\n    defaultTtlMs: z.number().int().min(60_000).max(604_800_000).default(21_600_000),\n    /** Maximum TTL in ms (default 7 days). */\n    maxTtlMs: z.number().int().min(60_000).max(2_592_000_000).default(604_800_000),\n    /** Maximum concurrent active site shares. */\n    maxActiveSites: z.number().int().min(1).max(1_000).default(5),\n    static: z.object({\n      enabled: z.boolean().default(true),\n      /** Maximum total bytes of files served per static site. */\n      maxRootDirSize: z.number().int().min(1_048_576).max(10_737_418_240).default(524_288_000),\n      /** Maximum file count under root dir. */\n      maxFileCount: z.number().int().min(1).max(100_000).default(10_000),\n      /** Whether HTML/CSS rewrite of absolute paths is on by default. */\n      rewriteEnabledByDefault: z.boolean().default(false),\n    }).default({\n      enabled: true,\n      maxRootDirSize: 524_288_000,\n      maxFileCount: 10_000,\n      rewriteEnabledByDefault: false,\n    }),\n    proxy: z.object({\n      /** Reverse-proxy mode default-enabled per the product brief. */\n      enabled: z.boolean().default(true),\n      /** Upstream host whitelist. Loopback by default. */\n      allowedUpstreamHosts: z\n        .array(z.string().min(1))\n        .default(['127.0.0.1', 'localhost', '::1']),\n      /** Upstream port whitelist (common dev-server ports). */\n      allowedUpstreamPorts: z\n        .array(z.number().int().min(1).max(65535))\n        .default([3000, 3001, 4321, 5173, 8000, 8080, 8888, 9000]),\n      /** Whether to forward WebSocket upgrades. */\n      forwardWebSocket: z.boolean().default(true),\n      /** Maximum request body size in bytes (50 MB). */\n      bodySizeLimit: z.number().int().min(0).max(1_073_741_824).default(52_428_800),\n      /** Per-request HTTP timeout in ms. */\n      requestTimeoutMs: z.number().int().min(1_000).max(600_000).default(30_000),\n      /** Per-WebSocket idle timeout in ms. */\n      wsIdleTimeoutMs: z.number().int().min(10_000).max(3_600_000).default(300_000),\n      /** Rewrite Set-Cookie Path attribute (subpath mode only). */\n      rewriteSetCookiePath: z.boolean().default(true),\n    }).default({\n      enabled: true,\n      allowedUpstreamHosts: ['127.0.0.1', 'localhost', '::1'],\n      allowedUpstreamPorts: [3000, 3001, 4321, 5173, 8000, 8080, 8888, 9000],\n      forwardWebSocket: true,\n      bodySizeLimit: 52_428_800,\n      requestTimeoutMs: 30_000,\n      wsIdleTimeoutMs: 300_000,\n      rewriteSetCookiePath: true,\n    }),\n  }).optional(),\n}).default({\n  bind: 'loopback',\n  port: 18790,\n  auth: {\n    mode: 'token',\n  },\n  heartbeat: {\n    enabled: true,\n    intervalMs: 1_800_000,\n    includeSystemPromptSection: false,\n  },\n  maxSseConnections: 100,\n  corsOrigins: [],\n  skillsMarketplaceProvider: 'skillhub',\n  skillsStoreBaseUrl: 'https://store.xopc.ai',\n});\n\nexport const CronConfigSchema = z.object({\n  enabled: z.boolean().optional(),\n  maxConcurrentJobs: z.number().optional(),\n  defaultTimezone: z.string().optional(),\n  historyRetentionDays: z.number().optional(),\n  enableMetrics: z.boolean().optional(),\n}).default({\n  enabled: true,\n  maxConcurrentJobs: 5,\n  defaultTimezone: 'UTC',\n  historyRetentionDays: 7,\n  enableMetrics: true,\n});\n\nexport const ModelsDevConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n}).default({\n  enabled: true,\n});\n\n// ============================================\n// STT (Speech-to-Text) Config\n// ============================================\n\nconst SttProviderConfigCatchallSchema = z.union([\n  z.string(),\n  z.number(),\n  z.boolean(),\n  z.null(),\n  z.array(z.unknown()),\n  z.record(z.string(), z.unknown()),\n]);\n\nexport const STTProviderConfigSchema = z\n  .object({\n    apiKey: z.string().optional(),\n    model: z.string().optional(),\n    baseUrl: z.string().optional(),\n    headers: z.record(z.string(), z.string()).optional(),\n    language: z.string().optional(),\n    prompt: z.string().optional(),\n  })\n  .catchall(SttProviderConfigCatchallSchema);\n\nexport const STTFallbackConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  order: z.array(z.string().min(1)).default(['alibaba', 'openai']),\n});\n\nexport const MediaUnderstandingCapabilitiesSchema = z\n  .array(z.enum(['image', 'audio', 'video']))\n  .optional();\n\nexport const MediaUnderstandingModelSchema = z\n  .object({\n    provider: z.string().optional(),\n    model: z.string().optional(),\n    capabilities: MediaUnderstandingCapabilitiesSchema,\n    type: z.union([z.literal('provider'), z.literal('cli')]).optional(),\n    command: z.string().optional(),\n    baseUrl: z.string().optional(),\n    headers: z.record(z.string(), z.string()).optional(),\n    apiKey: z.string().optional(),\n    language: z.string().optional(),\n    prompt: z.string().optional(),\n  })\n  .catchall(SttProviderConfigCatchallSchema);\n\nexport const STTConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    /** Primary provider id — any registered MediaUnderstandingProvider id. */\n    provider: z.string().min(1).default('alibaba'),\n    fallback: STTFallbackConfigSchema.optional(),\n    timeoutMs: z.number().int().min(1000).max(180000).optional(),\n    /** Ordered model entries for this capability (OpenClaw `tools.media.audio.models`). */\n    models: z.array(MediaUnderstandingModelSchema).optional(),\n    /** OpenClaw-aligned provider settings map (`tools.media.audio.providers.<id>`). */\n    providers: z.record(z.string(), STTProviderConfigSchema).optional(),\n    /** Legacy flat provider keys — kept for backward compatibility. */\n    alibaba: STTProviderConfigSchema.optional(),\n    openai: STTProviderConfigSchema.optional(),\n  })\n  .passthrough();\n\n// ============================================\n// TTS (Text-to-Speech) Config\n// ============================================\n\nconst TtsProviderConfigCatchallSchema = z.union([\n  z.string(),\n  z.number(),\n  z.boolean(),\n  z.null(),\n  z.array(z.unknown()),\n  z.record(z.string(), z.unknown()),\n]);\n\nexport const TTSProviderConfigSchema = z\n  .object({\n    apiKey: z.string().optional(),\n    model: z.string().optional(),\n    voice: z.string().optional(),\n  })\n  .catchall(TtsProviderConfigCatchallSchema);\n\nexport const TTSFallbackConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  order: z\n    .array(z.string().min(1))\n    .default(['openai', 'alibaba', 'minimax', 'edge']),\n});\n\nexport const TTSModelOverridesConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  allowText: z.boolean().default(true),\n  allowProvider: z.boolean().default(false),\n  allowVoice: z.boolean().default(true),\n  allowModelId: z.boolean().default(true),\n  allowVoiceSettings: z.boolean().default(false),\n  allowNormalization: z.boolean().default(false),\n  allowSeed: z.boolean().default(false),\n});\n\nexport const TTSEdgeConfigSchema = z.object({\n  enabled: z.boolean().default(true),\n  voice: z.string().optional(),\n  lang: z.string().optional(),\n  outputFormat: z.string().optional(),\n  pitch: z.string().optional(),\n  rate: z.string().optional(),\n  volume: z.string().optional(),\n  proxy: z.string().optional(),\n  timeoutMs: z.number().int().min(1000).max(120000).optional(),\n});\n\nexport const TTSSummarizationConfigSchema = z.object({\n  enabled: z.boolean().optional(),\n  targetLength: z.number().int().min(1).optional(),\n  threshold: z.number().int().min(1).optional(),\n  model: z.string().optional(),\n});\n\nexport const TTSConfigSchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    /** Primary provider id — any registered SpeechProviderPlugin id. */\n    provider: z.string().min(1).default('openai'),\n    trigger: z.enum(['off', 'always', 'inbound', 'tagged']).default('always'),\n    fallback: TTSFallbackConfigSchema.optional(),\n    maxTextLength: z.number().int().min(1).default(512), // Conservative default to accommodate all providers (Alibaba limit is 512)\n    timeoutMs: z.number().int().min(1000).max(180000).default(60000),\n    summarization: TTSSummarizationConfigSchema.optional(),\n    modelOverrides: TTSModelOverridesConfigSchema.optional(),\n    /** OpenClaw-aligned provider settings map (`messages.tts.providers.<id>`). */\n    providers: z.record(z.string(), TTSProviderConfigSchema).optional(),\n    /** Legacy flat provider keys — kept for backward compatibility. */\n    alibaba: TTSProviderConfigSchema.optional(),\n    openai: TTSProviderConfigSchema.optional(),\n    edge: TTSEdgeConfigSchema.optional(),\n    minimax: TTSProviderConfigSchema.optional(),\n  })\n  .passthrough();\n\n// ============================================\n// messages.* — delivery / presentation concerns\n// ============================================\n\nexport const MessagesConfigSchema = z.object({\n  /** Voice (text-to-speech) output configuration. */\n  tts: TTSConfigSchema.optional(),\n}).optional();\n\nexport const ToolsMediaAudioConfigSchema = STTConfigSchema;\n\nexport const ToolsMediaConfigSchema = z\n  .object({\n    /** Shared model entries applied across media capabilities when entry lacks capabilities. */\n    models: z.array(MediaUnderstandingModelSchema).optional(),\n    /** Audio (speech-to-text) capability provider config. */\n    audio: ToolsMediaAudioConfigSchema.optional(),\n  })\n  .optional();\n\n// ============================================\n// Provider Configs (capability providers: image / audio / video)\n// ============================================\n\n/**\n * Optional Azure OpenAI overrides used when an OpenAI image-generation\n * request should hit an Azure deployment instead of `api.openai.com`.\n *\n * URL template (when present):\n *   `https://<resource>.openai.azure.com/openai/deployments/<deployment>/images/generations?api-version=<apiVersion>`\n */\nexport const ProviderAzureConfigSchema = z\n  .object({\n    /** Azure resource name (subdomain before `.openai.azure.com`). */\n    resource: z.string().min(1).optional(),\n    /** Azure deployment id (configured per model). */\n    deployment: z.string().min(1).optional(),\n    /** Azure REST API version, e.g. `2024-08-01-preview`. */\n    apiVersion: z.string().min(1).optional(),\n  })\n  .strict();\n\n/** Per-vendor request overrides applied by the provider HTTP layer. */\nexport const ProviderRequestOverridesSchema = z\n  .object({\n    /** Hard cap for a single HTTP call (ms). */\n    timeoutMs: z.number().int().positive().optional(),\n    /** Extra headers merged into every outbound request. */\n    headers: z.record(z.string(), z.string()).optional(),\n  })\n  .strict();\n\n/**\n * Generic per-vendor provider config — used by image / audio / video\n * capability providers via `cfg.providers.<id>`. Kept loose (`.strict()` but\n * everything optional) so adding a new vendor never requires a config\n * migration.\n */\nexport const ProviderAuthConfigSchema = z\n  .object({\n    /** Static API key (api-key / azure-key modes). */\n    apiKey: z.string().optional(),\n    /** Override the default REST base URL. */\n    baseUrl: z.string().url().optional(),\n    /** Vendor region (DashScope: `beijing` / `singapore`; AWS: region id). */\n    region: z.string().optional(),\n    /** Image-only base URL override (DashScope splits image vs LLM). */\n    imageBaseUrl: z.string().url().optional(),\n    /** Per-vendor request overrides. */\n    request: ProviderRequestOverridesSchema.optional(),\n    /** Azure OpenAI deployment overrides; only consumed by OpenAI image provider. */\n    azure: ProviderAzureConfigSchema.optional(),\n  })\n  .strict();\n\nexport type ProviderAuthConfig = z.infer<typeof ProviderAuthConfigSchema>;\n\n/**\n * `cfg.providers.<id>` is keyed by provider id (`openai`, `dashscope`,\n * `minimax`, `google`, `fal`, …). Every entry is optional and validated by\n * {@link ProviderAuthConfigSchema}.\n */\nexport const ProvidersConfigSchema = z.record(z.string(), ProviderAuthConfigSchema);\n\nexport type ProvidersConfig = z.infer<typeof ProvidersConfigSchema>;\n\n// ============================================\n// Extension Configs \n// ============================================\n\n// Security config for extensions \nexport const ExtensionSecurityConfigSchema = z.object({\n  checkPermissions: z.boolean().default(true),\n  allowUntrusted: z.boolean().default(false),\n  allow: z.array(z.string()).default([]),\n  trackProvenance: z.boolean().default(true),\n  allowPromptInjection: z.boolean().default(false),\n});\n\n// Slot config for extensions \nexport const ExtensionSlotsConfigSchema = z.object({\n  memory: z.string().optional(),\n  tts: z.string().optional(),\n  imageGeneration: z.string().optional(),\n  webSearch: z.string().optional(),\n});\n\n// Complete extensions config\n// Extension config allows both known fields AND arbitrary extension-specific config\n// Known fields: enabled (array), allow (array), security (object), slots (object)\n// Arbitrary: any other key is extension-specific config (e.g., extensions.hello.greeting)\nexport const ExtensionsConfigSchema: z.ZodType<Record<string, unknown>> = z.record(z.string(), z.unknown());\n\n// ============================================\n// Update Config\n// ============================================\n\nexport const UpdateAutoConfigSchema = z\n  .object({\n    /** Enable automatic update installation. Default false. */\n    enabled: z.boolean().default(false),\n    /** Hours to wait before applying a stable update after first detection. */\n    stableDelayHours: z.number().min(0).default(6),\n    /** Additional random jitter hours for stable rollout (avoids thundering herd). */\n    stableJitterHours: z.number().min(0).default(12),\n    /** How often to re-check for beta updates (hours). Min 0.25. */\n    betaCheckIntervalHours: z.number().min(0.25).default(1),\n  })\n  .strict()\n  .optional();\n\n/** Persistent `/goal` (Ralph loop) — Hermes-aligned defaults. */\nexport const GoalsConfigSchema = z\n  .object({\n    /** Max continuation turns before auto-pause (Hermes default 20). */\n    maxTurns: z.number().int().min(1).max(500).default(20),\n    /** Optional judge model ref; defaults to `agents.defaults.model`. */\n    judgeModelRef: z.string().optional(),\n    /**\n     * When true (default), first post-turn runs a decomposition judge to build a checklist;\n     * subsequent turns evaluate progress per item (Hermes-style). When false, use legacy freeform judge only.\n     */\n    checklistMode: z.boolean().default(true),\n    /** Auto-pause after this many consecutive judge JSON/tool parse failures (Hermes default 3). */\n    maxConsecutiveParseFailures: z.number().int().min(1).max(20).default(3),\n    /** Judge LLM call timeout in ms (Hermes uses 60s). */\n    judgeTimeoutMs: z.number().int().min(5_000).max(120_000).default(60_000),\n    /** Max characters of recent transcript JSON passed to the checklist judge as extra context. */\n    checklistHistoryChars: z.number().int().min(0).max(100_000).default(24_000),\n  })\n  .strict();\n\nexport type GoalsConfig = z.infer<typeof GoalsConfigSchema>;\n\nexport const UpdateConfigSchema = z\n  .object({\n    /** Check for updates on gateway startup. Default true. */\n    checkOnStart: z.boolean().default(true),\n    /** Update channel: stable (default), beta, or dev. */\n    channel: z.enum(['stable', 'beta', 'dev']).default('stable'),\n    /** Automatic update policy. */\n    auto: UpdateAutoConfigSchema,\n  })\n  .strict()\n  .optional();\n\nexport type UpdateConfig = z.infer<typeof UpdateConfigSchema>;\n\nexport const CommandsConfigSchema = z\n  .object({\n    restart: z.boolean().optional(),\n  })\n  .strict()\n  .optional();\n\nexport type CommandsConfig = z.infer<typeof CommandsConfigSchema>;\n\n// ============================================\n// MCP (Model Context Protocol)\n// ============================================\n\nconst McpHttpUrlSchema = z\n  .string()\n  .url()\n  .refine((value) => {\n    try {\n      const protocol = new URL(value).protocol;\n      return protocol === 'http:' || protocol === 'https:';\n    } catch {\n      return false;\n    }\n  }, 'MCP server URL must use http or https');\n\nexport const McpServerSchema = z\n  .object({\n    command: z.string().optional(),\n    args: z.array(z.string()).optional(),\n    env: z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])).optional(),\n    cwd: z.string().optional(),\n    workingDirectory: z.string().optional(),\n    url: McpHttpUrlSchema.optional(),\n    transport: z.enum(['sse', 'streamable-http']).optional(),\n    headers: z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])).optional(),\n    connectionTimeoutMs: z.number().finite().positive().optional(),\n  })\n  .catchall(z.unknown())\n  .superRefine((value, ctx) => {\n    const hasCommand = typeof value.command === 'string' && value.command.trim().length > 0;\n    const hasUrl = typeof value.url === 'string' && value.url.trim().length > 0;\n    if (hasCommand && hasUrl) {\n      ctx.addIssue({\n        code: 'custom',\n        message: 'MCP server cannot define both command and url',\n      });\n    }\n  });\n\nexport const McpConfigSchema = z\n  .object({\n    servers: z.record(z.string(), McpServerSchema).optional(),\n    sessionIdleTtlMs: z.number().finite().min(0).optional(),\n  })\n  .strict()\n  .optional();\n\nexport type McpServerConfig = z.infer<typeof McpServerSchema>;\nexport type McpConfig = z.infer<typeof McpConfigSchema>;\n\n// ============================================\n// Root Config\n// ============================================\n\nexport const ConfigSchema = z.object({\n  agents: AgentsConfigSchema,\n  bindings: BindingsConfigSchema,\n  session: SessionConfigSchema,\n  channels: ChannelsConfigSchema,\n  gateway: GatewayConfigSchema,\n  tunnel: TunnelConfigSchema.optional(),\n  workspace: WorkspaceConfigSchema,\n  tools: ToolsConfigSchema,\n  mcp: McpConfigSchema,\n  cron: CronConfigSchema,\n  goals: GoalsConfigSchema.optional(),\n  extensions: ExtensionsConfigSchema.default({}),\n  /** Per-vendor capability provider config (image / audio / video). */\n  providers: ProvidersConfigSchema.optional(),\n  modelsDev: ModelsDevConfigSchema,\n  /** Delivery / presentation concerns (currently `tts`). */\n  messages: MessagesConfigSchema,\n  update: UpdateConfigSchema,\n  commands: CommandsConfigSchema,\n}).default({\n  agents: {\n    defaults: {\n      workspace: '~/.xopc/workspace',\n      model: '', // Empty default - will be resolved dynamically at runtime\n      maxTokens: 8192,\n      temperature: 0.7,\n      maxToolIterations: 20,\n      maxRequestsPerTurn: 50,\n      maxToolFailuresPerTurn: 3,\n      thinkingDefault: 'medium',\n      reasoningDefault: 'stream',\n      verboseDefault: 'full',\n      compaction: {\n        enabled: true,\n        mode: 'default',\n        reserveTokens: 8000,\n        triggerThreshold: 0.8,\n        minMessagesBeforeCompact: 10,\n        keepRecentMessages: 5,\n        evictionWindow: 0.2,\n        retentionWindow: 6,\n      },\n      pruning: {\n        enabled: true,\n        maxToolResultChars: 10000,\n        headKeepRatio: 0.3,\n        tailKeepRatio: 0.3,\n      },\n      browser: {\n        backend: 'extension',\n      },\n    },\n  },\n  bindings: [],\n  session: {\n    dmScope: 'main' as const,\n  },\n  channels: {\n    telegram: {\n      enabled: false,\n      allowFrom: [],\n      groupAllowFrom: [],\n      debug: false,\n      accounts: {\n        default: {\n          accountId: 'default',\n          enabled: true,\n          botToken: '',\n          allowFrom: [],\n          dmPolicy: 'pairing' as const,\n          groupPolicy: 'open' as const,\n          replyToMode: 'off' as const,\n          historyLimit: 50,\n          textChunkLimit: 4000,\n          streamMode: 'partial' as const,\n        },\n      },\n      dmPolicy: 'pairing' as const,\n      groupPolicy: 'open' as const,\n      replyToMode: 'off' as const,\n      historyLimit: 50,\n      textChunkLimit: 4000,\n    },\n  },\n  gateway: {\n    bind: 'loopback',\n    port: 18790,\n    auth: {\n      mode: 'token',\n    },\n    heartbeat: {\n      enabled: true,\n      intervalMs: 1_800_000,\n      includeSystemPromptSection: false,\n    },\n    maxSseConnections: 100,\n    corsOrigins: [],\n    skillsMarketplaceProvider: 'skillhub',\n    skillsStoreBaseUrl: 'https://store.xopc.ai',\n  },\n  tools: {\n    web: {\n      search: {\n        maxResults: 5,\n        providers: [],\n      },\n    },\n  },\n  cron: {\n    enabled: true,\n    maxConcurrentJobs: 5,\n    defaultTimezone: 'UTC',\n    historyRetentionDays: 7,\n    enableMetrics: true,\n  },\n  goals: {\n    maxTurns: 20,\n    checklistMode: true,\n    maxConsecutiveParseFailures: 3,\n    judgeTimeoutMs: 60_000,\n    checklistHistoryChars: 24_000,\n  },\n  extensions: {\n    allow: [],\n    security: {\n      checkPermissions: true,\n      allowUntrusted: false,\n      allow: [],\n      trackProvenance: true,\n      allowPromptInjection: false,\n    },\n    slots: {},\n  },\n  modelsDev: {\n    enabled: true,\n  },\n  // messages.tts / tools.media.audio start undefined; the factory layer fills\n  // in provider-level defaults (model/voice) on demand. Fresh configs don't\n  // ship with enabled providers so they never make surprise STT/TTS calls.\n});\n\nexport type Config = z.infer<typeof ConfigSchema>;\nexport type AgentDefaults = z.infer<typeof AgentDefaultsSchema>;\nexport type GatewayAuthConfig = z.infer<typeof GatewayAuthSchema>;\nexport type GatewayTrustedProxyConfig = z.infer<typeof GatewayTrustedProxySchema>;\nexport type GatewayAuthRateLimitConfig = z.infer<typeof GatewayAuthRateLimitSchema>;\nexport type GatewayBindMode = z.infer<typeof GatewayBindModeSchema>;\nexport type STTConfig = z.infer<typeof STTConfigSchema>;\nexport type TTSConfig = z.infer<typeof TTSConfigSchema>;\n\n// ============================================\n// Helper Functions\n// ============================================\n\n/**\n * Parse a model reference string.\n */\nexport interface ParsedModelRef {\n  provider: string;\n  model: string;\n}\n\n/**\n * Primary model ref from `agents.defaults.model` (string or `{ primary }`).\n * Returns undefined when unset or empty.\n */\nexport function getAgentDefaultModelRef(config: Config): string | undefined {\n  const raw = config.agents?.defaults?.model;\n  if (raw === undefined || raw === null) return undefined;\n  const ref = typeof raw === 'string' ? raw : raw.primary;\n  if (ref === undefined || ref === null) return undefined;\n  const s = String(ref).trim();\n  return s ? s : undefined;\n}\n\n/** `provider/model` or null when invalid. */\nexport function parseModelRef(ref: string): ParsedModelRef | null {\n  const trimmed = ref.trim();\n  const idx = trimmed.indexOf('/');\n  if (idx <= 0 || idx === trimmed.length - 1) {\n    return null;\n  }\n  return { provider: trimmed.slice(0, idx).trim(), model: trimmed.slice(idx + 1).trim() };\n}\n"],"mappings":";;;;;;;;;;;AAw6CA,SAAgB,wBAAwB,QAAoC;CAC1E,MAAM,MAAM,OAAO,QAAQ,UAAU;AACrC,KAAI,QAAQ,KAAA,KAAa,QAAQ,KAAM,QAAO,KAAA;CAC9C,MAAM,MAAM,OAAO,QAAQ,WAAW,MAAM,IAAI;AAChD,KAAI,QAAQ,KAAA,KAAa,QAAQ,KAAM,QAAO,KAAA;CAC9C,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM;AAC5B,QAAO,IAAI,IAAI,KAAA;;;AAIjB,SAAgB,cAAc,KAAoC;CAChE,MAAM,UAAU,IAAI,MAAM;CAC1B,MAAM,MAAM,QAAQ,QAAQ,IAAI;AAChC,KAAI,OAAO,KAAK,QAAQ,QAAQ,SAAS,EACvC,QAAO;AAET,QAAO;EAAE,UAAU,QAAQ,MAAM,GAAG,IAAI,CAAC,MAAM;EAAE,OAAO,QAAQ,MAAM,MAAM,EAAE,CAAC,MAAM;EAAE;;;;wBAt7C1B;kBACX;qBAuZI;uBAEqD;AAnZhG,uBAAsB,EAAE,MAAM,CACzC,EAAE,QAAQ,EACV,EACG,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC1C,CAAC,CACD,QAAQ,CACZ,CAAC;AAUW,mCAAkC,EAAE,MAAM,CACrD,EAAE,QAAQ,EACV,EACG,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAEzC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;;;;;EAKjD,sBAAsB,EAAE,SAAS,CAAC,UAAU;EAC7C,CAAC,CACD,QAAQ,CACZ,CAAC;AAIW,uBAAsB,EAAE,OAAO;;EAE1C,WAAW,EAAE,QAAQ,CAAC,QAAQ,oBAAoB;EAClD,OAAO,EAAE,MAAM,CACb,EAAE,QAAQ,EACV,EAAE,OAAO;GACP,SAAS,EAAE,QAAQ,CAAC,UAAU;GAC9B,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;GAC1C,CAAC,CAAC,QAAQ,CACZ,CAAC,CAAC,QAAQ,GAAG;;EAEd,YAAY,oBAAoB,UAAU;;EAE1C,sBAAsB,gCAAgC,UAAU;;EAEhE,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC5C,WAAW,EAAE,QAAQ,CAAC,QAAQ,KAAK;EACnC,aAAa,EAAE,QAAQ,CAAC,QAAQ,GAAI;EACpC,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,GAAG;EAEzC,mBAAmB,EAAE,QAAQ,CAAC,IAAI,IAAM,CAAC,IAAI,MAAW,CAAC,UAAU;EAEnE,oBAAoB,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG;EAC3D,wBAAwB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE;EAE5D,iBAAiB,EAAE,KAAK;GAAC;GAAO;GAAW;GAAO;GAAU;GAAQ;GAAS;GAAW,CAAC,CAAC,UAAU;EACpG,kBAAkB,EAAE,KAAK;GAAC;GAAO;GAAM;GAAS,CAAC,CAAC,UAAU;EAC5D,gBAAgB,EAAE,KAAK;GAAC;GAAO;GAAM;GAAO,CAAC,CAAC,UAAU;EACxD,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EACzD,wBAAwB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EAC9D,kCAAkC,EAAE,KAAK;GAAC;GAAO;GAAQ;GAAS,CAAC,CAAC,UAAU;EAC9E,gBAAgB,EACb,OAAO;GACN,SAAS,EAAE,SAAS,CAAC,UAAU;GAC/B,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,UAAU;GACrD,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;GACnD,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;GACpD,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;GACpD,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;GACtD,CAAC,CACD,UAAU;EACb,eAAe,EACZ,OAAO,EACN,wBAAwB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAC/D,CAAC,CACD,UAAU;EACb,YAAY,EAAE,OAAO;GACnB,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;GAClC,MAAM,EAAE,KAAK,CAAC,WAAW,YAAY,CAAC,CAAC,QAAQ,UAAU;GACzD,eAAe,EAAE,QAAQ,CAAC,QAAQ,IAAK;GACvC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,GAAI,CAAC,IAAI,IAAK,CAAC,QAAQ,GAAI;GAC5D,0BAA0B,EAAE,QAAQ,CAAC,QAAQ,GAAG;GAChD,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,EAAE;GAEzC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,GAAI,CAAC,IAAI,GAAI,CAAC,QAAQ,GAAI;GACzD,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE;GACrD,wBAAwB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;GACvD,CAAC,CAAC,UAAU;EACb,SAAS,EAAE,OAAO;GAChB,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;GAClC,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,IAAM;GAC7C,eAAe,EAAE,QAAQ,CAAC,QAAQ,GAAI;GACtC,eAAe,EAAE,QAAQ,CAAC,QAAQ,GAAI;GACvC,CAAC,CAAC,UAAU;;;;;EAKb,QAAQ,EACL,OAAO;;GAEN,SAAS,EAAE,SAAS,CAAC,UAAU;;GAE/B,mBAAmB,EAAE,SAAS,CAAC,UAAU;;GAEzC,oBAAoB,EAAE,SAAS,CAAC,UAAU;GAC1C,iBAAiB,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;GACjD,eAAe,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;GAC/C,UAAU,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,UAAU;;GAE7C,oBAAoB,EAAE,KAAK,CAAC,cAAc,aAAa,CAAC,CAAC,UAAU;;GAEnE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;;GAElD,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;;;;;;;;;;GAUpD,UAAU,EACP,OAAO;IACN,SAAS,EAAE,SAAS,CAAC,UAAU;;IAE/B,WAAW,EAAE,QAAQ,CAAC,UAAU;IAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;IAC/B,QAAQ,EACL,OAAO;KACN,OAAO,EACJ,OAAO;MACN,SAAS,EAAE,SAAS,CAAC,UAAU;MAC/B,MAAM,EAAE,QAAQ,CAAC,UAAU;MAC3B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MAChD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MACzC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU;MACtD,CAAC,CACD,UAAU;KACb,MAAM,EACH,OAAO;MACN,SAAS,EAAE,SAAS,CAAC,UAAU;MAC/B,MAAM,EAAE,QAAQ,CAAC,UAAU;MAC3B,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU;MAC7C,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MAClD,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MACpD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MACzC,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;MACjD,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MAC/C,CAAC,CACD,UAAU;KACb,KAAK,EACF,OAAO;MACN,SAAS,EAAE,SAAS,CAAC,UAAU;MAC/B,MAAM,EAAE,QAAQ,CAAC,UAAU;MAC3B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MAChD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;MACzC,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU;MACxD,CAAC,CACD,UAAU;KACd,CAAC,CACD,UAAU;IACd,CAAC,CACD,UAAU;GACd,CAAC,CACD,UAAU;;EAEb,eAAe,EACZ,OAAO;;AAEN,cAAc,EAAE,QAAQ,CAAC,UAAU,EACpC,CAAC,CACD,UAAU;;;;;;EAMb,kBAAkB,EACf,OAAO;;GAEN,SAAS,EAAE,SAAS,CAAC,UAAU;;GAE/B,qBAAqB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;;GAEvD,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;;GAEtD,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU;;GAEzD,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU;;GAEhE,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,IAAQ,CAAC,UAAU;GACpE,CAAC,CACD,UAAU;;EAEb,YAAY,EACT,OAAO;GACN,OAAO,EAAE,QAAQ,CAAC,UAAU;GAC5B,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;GAC5C,CAAC,CACD,UAAU;;;;;EAKb,SAAS,EACN,OAAO;GACN,SAAS,EAAE,SAAS,CAAC,UAAU;;GAE/B,UAAU,EAAE,SAAS,CAAC,UAAU;;GAEhC,kBAAkB,EAAE,SAAS,CAAC,UAAU;;GAExC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;GAE5C,SAAS,EAAE,KAAK;IAAC;IAAS;IAAO;IAAS;IAAa;IAAe,CAAC,CAAC,UAAU;;GAElF,eAAe,EAAE,KAAK;IAAC;IAAS;IAAe;IAAc,CAAC,CAAC,UAAU;;GAEzE,OAAO,EAAE,OAAO;;IAEd,QAAQ,EAAE,QAAQ,CAAC,UAAU;;IAE7B,WAAW,EAAE,QAAQ,CAAC,UAAU;;IAEhC,QAAQ,EAAE,QAAQ,CAAC,UAAU;IAC9B,CAAC,CAAC,UAAU;;GAEb,QAAQ,EAAE,QAAQ,CAAC,UAAU;;GAE7B,WAAW,EAAE,OAAO;;IAElB,MAAM,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU;;IAEhD,MAAM,EAAE,QAAQ,CAAC,UAAU;;IAE3B,mBAAmB,EAAE,QAAQ,CAAC,IAAI,IAAK,CAAC,UAAU;IACnD,CAAC,CAAC,UAAU;;GAEb,cAAc,EAAE,KAAK;IAAC;IAAgB;IAAgB;IAAc,CAAC,CAAC,UAAU;;GAEhF,sBAAsB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;GAElD,UAAU,EAAE,SAAS,CAAC,UAAU;;GAEhC,aAAa,EAAE,KAAK,CAAC,WAAW,UAAU,CAAC,CAAC,UAAU;;GAEtD,cAAc,EAAE,OAAO;;IAErB,UAAU,EAAE,SAAS,CAAC,UAAU;;IAEhC,kBAAkB,EAAE,SAAS,CAAC,UAAU;;IAExC,UAAU,EACP,QAAQ,CACR,UAAU,CACV,aAAa,GAAG,QAAQ;KACvB,MAAM,IAAI,cAAc,EAAE;AAC1B,SAAI,EAAE,OAAO,MAAO,KAAI,SAAS;MAAE,MAAM;MAAU,SAAS,EAAE;MAAS,CAAC;MACxE;;IAEJ,YAAY,EAAE,QAAQ,CAAC,UAAU;;IAEjC,UAAU,EAAE,QAAQ,CAAC,UAAU;;IAE/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;;IAE7B,UAAU,EAAE,QAAQ,CAAC,UAAU;;IAE/B,qBAAqB,EAAE,QAAQ,CAAC,UAAU;;IAE1C,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;IAC1C,CAAC,CAAC,UAAU;GACd,CAAC,CACD,UAAU;;EAEb,UAAU,EACP,OAAO,EACN,SAAS,EAAE,SAAS,CAAC,UAAU,EAChC,CAAC,CACD,UAAU;;EAEb,aAAa,EACV,OAAO,EACN,SAAS,EAAE,SAAS,CAAC,UAAU,EAChC,CAAC,CACD,UAAU;;;;;;;EAOb,UAAU,EACP,OAAO;GACN,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;GAClC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,GAAG;GAC3D,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAM,CAAC,QAAQ,IAAK;GAC9D,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,MAAO,CAAC,QAAQ,KAAK;GACtE,CAAC,CACD,UAAU;;EAEb,sBAAsB,EAAE,QAAQ,CAAC,UAAU;;EAE3C,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAEtC,OAAO,EACJ,OAAO,EACN,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EACxC,CAAC,CACD,UAAU;;EAEb,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,UAAU;EACrD,CAAC;AAEW,qBAAoB,EAAE,OAAO;EACxC,IAAI,EAAE,QAAQ;;EAEd,SAAS,EAAE,SAAS,CAAC,UAAU;EAC/B,MAAM,EAAE,QAAQ,CAAC,UAAU;;EAE3B,aAAa,EAAE,QAAQ,CAAC,IAAI,IAAK,CAAC,UAAU;EAC5C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;EAElC,WAAW,EAAE,QAAQ,CAAC,UAAU;;;;;EAKhC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,OAAO,oBAAoB,UAAU;EACrC,iBAAiB,EAAE,KAAK;GAAC;GAAO;GAAW;GAAO;GAAU;GAAQ;GAAS;GAAW,CAAC,CAAC,UAAU;EACpG,kBAAkB,EAAE,KAAK;GAAC;GAAO;GAAM;GAAS,CAAC,CAAC,UAAU;EAC5D,gBAAgB,EAAE,KAAK;GAAC;GAAO;GAAM;GAAO,CAAC,CAAC,UAAU;EACxD,sBAAsB,EAAE,QAAQ,CAAC,UAAU;EAC3C,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACtC,OAAO,EACJ,OAAO,EACN,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,EACxC,CAAC,CACD,UAAU;EACb,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,UAAU;EACrD,CAAC;AAEW,sBAAqB,EAAE,OAAO;;EAEzC,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,UAAU,oBAAoB,UAAU;EACxC,MAAM,EAAE,MAAM,kBAAkB,CAAC,UAAU;EAC5C,CAAC,CAAC,QAAQ,EACT,UAAU;EACR,WAAW;EACX,OAAO;EACP,WAAW;EACX,aAAa;EACb,mBAAmB;EACnB,oBAAoB;EACpB,wBAAwB;EACxB,iBAAiB;EACjB,kBAAkB;EAClB,gBAAgB;EAChB,YAAY;GACV,SAAS;GACT,MAAM;GACN,eAAe;GACf,kBAAkB;GAClB,0BAA0B;GAC1B,oBAAoB;GACpB,gBAAgB;GAChB,iBAAiB;GAClB;EACD,SAAS;GACP,SAAS;GACT,oBAAoB;GACpB,eAAe;GACf,eAAe;GAChB;EACD,SAAS,EACP,SAAS,aACV;EACF,EACF,CAAQ;AAmBI,sBAAqB,EAAE,OAAO;EACzC,SAAS,EAAE,QAAQ;EACnB,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EAC9C,CAAC;AAEW,qBAAoB,EAAE,OAAO;EACxC,IAAI,EAAE,QAAQ,CAAC,UAAU;EACzB,SAAS,EAAE,QAAQ;EACnB,UAAU,EAAE,QAAQ,CAAC,QAAQ,IAAI;EACjC,OAAO;EACP,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EACnC,CAAC;AAEW,wBAAuB,EAAE,MAAM,kBAAkB,CAAC,QAAQ,EAAE,CAAC;AAE7D,wBAAuB,EAAE,KAAK;EACzC;EACA;EACA;EACA;EACD,CAAC;AAEW,8BAA6B,EAAE,OAAO;EACjD,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,YAAY,EAAE,QAAQ,CAAC,UAAU;EAClC,CAAC;AAEW,uBAAsB,EAAE,OAAO;EAC1C,SAAS,qBAAqB,QAAQ,OAAO;EAC7C,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU;EACnE,SAAS,2BAA2B,UAAU;EAC/C,CAAC,CAAC,QAAQ,EACT,SAAS,QACV,CAAC;AAGW,wBAAuB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,QAAQ,EAC5E,UAAU;EACR,SAAS;EACT,WAAW,EAAE;EACb,gBAAgB,EAAE;EAClB,OAAO;EACP,UAAU,EACR,SAAS;GACP,WAAW;GACX,SAAS;GACT,UAAU;GACV,WAAW,EAAE;GACb,UAAU;GACV,aAAa;GACb,aAAa;GACb,cAAc;GACd,gBAAgB;GAChB,YAAY;GACb,EACF;EACD,UAAU;EACV,aAAa;EACb,aAAa;EACb,cAAc;EACd,gBAAgB;EACjB,EACF,CAAC;AAEW,6BAA4B,EAAE,OAAO;EAChD,MAAM,EAAE,KAAK;GAAC;GAAS;GAAU;GAAQ;GAAU,CAAC;EACpD,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,UAAU,EAAE,SAAS,CAAC,UAAU;EACjC,CAAC;AAIW,yBAAwB,EAAE,OAAO;EAC5C,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE;;EAEjC,WAAW,EAAE,MAAM,0BAA0B,CAAC,QAAQ,EAAE,CAAC;EAC1D,CAAC;AAIW,0BAAyB,EAAE,OAAO;;EAE7C,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;EACzC,CAAC;AAIW,wBAAuB,EAAE,OAAO;;EAE3C,QAAQ,EAAE,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU;EAC3C,QAAQ,sBAAsB,UAAU;;EAExC,WAAW,uBAAuB,UAAU;EAC7C,CAAC;AAIW,qBAAoB,EAAE,OAAO;EACxC,KAAK,qBAAqB,UAAU;;;;;EAKpC,OAAO,EAAE,WAAW,uBAAuB;EAC5C,CAAC,CAAC,QAAQ,EACT,KAAK,EACH,QAAQ;EACN,YAAY;EACZ,WAAW,EAAE;EACd,EACF,EACF,CAAC;AAMW,8BAA6B,EACvC,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;EAC/C,UAAU,EAAE,QAAQ,CAAC,QAAQ,IAAQ;EACrC,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,IAAQ;;EAE5C,WAAW,EAAE,QAAQ,CAAC,UAAU;;EAEhC,gBAAgB,EAAE,SAAS,CAAC,QAAQ,KAAK;;;;;;;EAOzC,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,IAAK;EACvD,CAAC,CACD,UAAU;AAEA,yBAAwB,EAClC,OAAO;;AAEN,QAAQ,EAAE,SAAS,CAAC,UAAU,EAC/B,CAAC,CACD,UAAU;AAEA,6BAA4B,EACtC,OAAO;;EAEN,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;;EAE7B,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE/C,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE1C,eAAe,EAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,QAAQ;AAEE,qBAAoB,EAC9B,OAAO;EACN,MAAM,EAAE,KAAK;GAAC;GAAQ;GAAS;GAAY;GAAgB,CAAC,CAAC,QAAQ,QAAQ;EAC7E,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;;EAE/B,gBAAgB,EAAE,SAAS,CAAC,UAAU;EACtC,WAAW;EACX,cAAc,0BAA0B,UAAU;EACnD,CAAC,CACD,QAAQ,EACP,MAAM,SACP,CAAC;AAES,iCAAgC,EAAE,OAAO;EACpD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC9B,CAAC;AAEW,0BAAyB,EACnC,OAAO;EACN,MAAM,EAAE,KAAK;GAAC;GAAO;GAAS;GAAS,CAAC,CAAC,QAAQ,MAAM;EACvD,aAAa,EAAE,SAAS,CAAC,QAAQ,KAAK;EACtC,SAAS,8BAA8B,UAAU;EAClD,CAAC,CACD,QAAQ;EACP,MAAM;EACN,aAAa;EACd,CAAC;AAES,uBAAsB,EAAE,OAAO;EAC1C,KAAK,EAAE,QAAQ,CAAC,KAAK;EACrB,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,WAAW,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC,CAAC,QAAQ,SAAS;EACtD,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;EACtC,CAAC;AAEW,oBAAmB,EAC7B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;EACnC,cAAc,EAAE,SAAS,CAAC,QAAQ,MAAM;EACxC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC/B,CAAC,CACD,QAAQ;EACP,SAAS;EACT,cAAc;EACf,CAAC;AAES,qBAAoB,EAAE,KAAK,CAAC,SAAS,SAAS,CAAC,CAAC,QAAQ,QAAQ;AAEhE,yBAAwB,EAClC,OAAO;EACN,SAAS,EAAE,SAAS;EACpB,YAAY,EAAE,QAAQ;;EAEtB,4BAA4B,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,MAAM;EACjE,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,iBAAiB,EAAE,SAAS,CAAC,UAAU;EACvC,aAAa,EACV,OAAO;GACN,OAAO,EAAE,QAAQ;GACjB,KAAK,EAAE,QAAQ;GACf,UAAU,EAAE,QAAQ,CAAC,UAAU;GAChC,CAAC,CACD,UAAU;EACd,CAAC,CACD,QAAQ;EACP,SAAS;EACT,YAAY;EACZ,4BAA4B;EAC7B,CAAC;AAES,wCAAuC,EAAE,KAAK;EAAC;EAAQ;EAAO;EAAW,CAAC;AAE1E,uBAAsB,EAAE,OAAO;EAC1C,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC1B,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC9B,CAAC;AAEW,sBAAqB,EAC/B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;EACnC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,0BAA0B;;EAE9D,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EAChD,WAAW,EAAE,SAAS,CAAC,QAAQ,MAAM;EACrC,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,SAAS,oBAAoB,UAAU;EACxC,CAAC,CACD,QAAQ;EACP,SAAS;EACT,WAAW;EACX,WAAW;EACZ,CAAC;AASS,+BAA8B,EAAE,OAAO;;EAElD,WAAW,EAAE,QAAQ,CAAC,QAAQ,UAAU;;EAExC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,YAAe,CAAC,QAAQ,UAAY;;EAE7E,gBAAgB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC1C,CAAC;AAGW,yBAAwB,EAAE,OAAO,EAC5C,QAAQ,4BAA4B,UAAU,EAC/C,CAAC,CAAC,UAAU;AAGA,yBAAwB,EAAE,KAAK;EAAC;EAAQ;EAAY;EAAO;EAAW;EAAS,CAAC;AAEhF,uBAAsB,EAAE,OAAO;;EAE1C,MAAM,sBAAsB,UAAU;;EAEtC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;EACrC,MAAM,EAAE,QAAQ,CAAC,UAAU;;EAE3B,MAAM,kBAAkB,UAAU;;EAElC,QAAQ,oBAAoB,UAAU;EACtC,WAAW,uBAAuB,UAAU;EAC5C,KAAK,iBAAiB,UAAU;EAChC,MAAM,kBAAkB,UAAU;EAClC,WAAW,sBAAsB,UAAU;EAC3C,mBAAmB,EAAE,QAAQ,CAAC,UAAU;EACxC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;;;;;;;;EAS3C,WAAW,EACR,QAAQ,CACR,aAAa,OAAO,QAAQ;GAC3B,MAAM,SAAS,kBAAkB,MAAM;AACvC,OAAI,OAAO,OAAO,MAChB,KAAI,SAAS;IAAE,MAAM;IAAU,SAAS,sBAAsB,OAAO;IAAW,CAAC;IAEnF,CACD,UAAU;;EAEb,0CAA0C,EAAE,SAAS,CAAC,UAAU;;EAEhE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;;EAE9C,qBAAqB,EAAE,SAAS,CAAC,UAAU;EAC3C,UAAU;;;;;;;EAOV,yBAAyB,qCAAqC,UAAU;;EAExE,wBAAwB,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU;;EAErE,4BAA4B,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU;;EAEzE,2BAA2B,EAAE,QAAQ,CAAC,UAAU;;EAEhD,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAE/C,OAAO,EAAE,OAAO;GACd,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;GAElC,cAAc,EAAE,QAAQ,CAAC,IAAI,IAAO,CAAC,IAAI,OAAY,CAAC,QAAQ,MAAW;;GAEzE,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAO,CAAC,IAAI,OAAc,CAAC,QAAQ,OAAY;;GAExE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAO,CAAC,QAAQ,IAAI;;GAE3D,aAAa,EAAE,QAAQ,CAAC,IAAI,QAAU,CAAC,IAAI,YAAe,CAAC,QAAQ,UAAY;;GAE/E,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ;IAC9C;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD,CAAC;;GAEF,WAAW,EAAE,OAAO;IAClB,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAElC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAU,CAAC,IAAI,YAAe,CAAC,QAAQ,WAAc;;IAEzF,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAM;;IAEjE,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,GAAG;;IAErD,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAO;;IAEpE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC1D,CAAC,CAAC,QAAQ;IACT,SAAS;IACT,eAAe;IACf,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,gBAAgB;IACjB,CAAC;GACH,CAAC,CAAC,UAAU;;EAEb,WAAW,EAAE,OAAO;GAClB,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;GAElC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,gBAAgB;;GAE5D,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,OAAY,CAAC,QAAQ,MAAW;;GAE/E,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,OAAc,CAAC,QAAQ,OAAY;;GAE9E,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAM,CAAC,QAAQ,EAAE;GAC7D,QAAQ,EAAE,OAAO;IACf,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAElC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAU,CAAC,IAAI,YAAe,CAAC,QAAQ,SAAY;;IAExF,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAO;;IAElE,yBAAyB,EAAE,SAAS,CAAC,QAAQ,MAAM;IACpD,CAAC,CAAC,QAAQ;IACT,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,yBAAyB;IAC1B,CAAC;GACF,OAAO,EAAE,OAAO;;IAEd,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAElC,sBAAsB,EACnB,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CACxB,QAAQ;KAAC;KAAa;KAAa;KAAM,CAAC;;IAE7C,sBAAsB,EACnB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,CACzC,QAAQ;KAAC;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAK,CAAC;;IAE5D,kBAAkB,EAAE,SAAS,CAAC,QAAQ,KAAK;;IAE3C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,WAAc,CAAC,QAAQ,SAAW;;IAE7E,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAM,CAAC,IAAI,IAAQ,CAAC,QAAQ,IAAO;;IAE1E,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,KAAU,CAAC,QAAQ,IAAQ;;IAE7E,sBAAsB,EAAE,SAAS,CAAC,QAAQ,KAAK;IAChD,CAAC,CAAC,QAAQ;IACT,SAAS;IACT,sBAAsB;KAAC;KAAa;KAAa;KAAM;IACvD,sBAAsB;KAAC;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAM;KAAK;IACtE,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,iBAAiB;IACjB,sBAAsB;IACvB,CAAC;GACH,CAAC,CAAC,UAAU;EACd,CAAC,CAAC,QAAQ;EACT,MAAM;EACN,MAAM;EACN,MAAM,EACJ,MAAM,SACP;EACD,WAAW;GACT,SAAS;GACT,YAAY;GACZ,4BAA4B;GAC7B;EACD,mBAAmB;EACnB,aAAa,EAAE;EACf,2BAA2B;EAC3B,oBAAoB;EACrB,CAAC;AAEW,oBAAmB,EAAE,OAAO;EACvC,SAAS,EAAE,SAAS,CAAC,UAAU;EAC/B,mBAAmB,EAAE,QAAQ,CAAC,UAAU;EACxC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;EACtC,sBAAsB,EAAE,QAAQ,CAAC,UAAU;EAC3C,eAAe,EAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CAAC,QAAQ;EACT,SAAS;EACT,mBAAmB;EACnB,iBAAiB;EACjB,sBAAsB;EACtB,eAAe;EAChB,CAAC;AAEW,yBAAwB,EAAE,OAAO,EAC5C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK,EACnC,CAAC,CAAC,QAAQ,EACT,SAAS,MACV,CAAC;AAMI,mCAAkC,EAAE,MAAM;EAC9C,EAAE,QAAQ;EACV,EAAE,QAAQ;EACV,EAAE,SAAS;EACX,EAAE,MAAM;EACR,EAAE,MAAM,EAAE,SAAS,CAAC;EACpB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;EAClC,CAAC;AAEW,2BAA0B,EACpC,OAAO;EACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpD,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC,CACD,SAAS,gCAAgC;AAE/B,2BAA0B,EAAE,OAAO;EAC9C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,SAAS,CAAC;EACjE,CAAC;AAEW,wCAAuC,EACjD,MAAM,EAAE,KAAK;EAAC;EAAS;EAAS;EAAQ,CAAC,CAAC,CAC1C,UAAU;AAEA,iCAAgC,EAC1C,OAAO;EACN,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,cAAc;EACd,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,WAAW,EAAE,EAAE,QAAQ,MAAM,CAAC,CAAC,CAAC,UAAU;EACnE,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpD,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC,CACD,SAAS,gCAAgC;AAE/B,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,UAAU;EAC9C,UAAU,wBAAwB,UAAU;EAC5C,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,UAAU;;EAE5D,QAAQ,EAAE,MAAM,8BAA8B,CAAC,UAAU;;EAEzD,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,CAAC,UAAU;;EAEnE,SAAS,wBAAwB,UAAU;EAC3C,QAAQ,wBAAwB,UAAU;EAC3C,CAAC,CACD,aAAa;AAMV,mCAAkC,EAAE,MAAM;EAC9C,EAAE,QAAQ;EACV,EAAE,QAAQ;EACV,EAAE,SAAS;EACX,EAAE,MAAM;EACR,EAAE,MAAM,EAAE,SAAS,CAAC;EACpB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;EAClC,CAAC;AAEW,2BAA0B,EACpC,OAAO;EACN,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC7B,CAAC,CACD,SAAS,gCAAgC;AAE/B,2BAA0B,EAAE,OAAO;EAC9C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EACJ,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CACxB,QAAQ;GAAC;GAAU;GAAW;GAAW;GAAO,CAAC;EACrD,CAAC;AAEW,iCAAgC,EAAE,OAAO;EACpD,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,WAAW,EAAE,SAAS,CAAC,QAAQ,KAAK;EACpC,eAAe,EAAE,SAAS,CAAC,QAAQ,MAAM;EACzC,YAAY,EAAE,SAAS,CAAC,QAAQ,KAAK;EACrC,cAAc,EAAE,SAAS,CAAC,QAAQ,KAAK;EACvC,oBAAoB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC9C,oBAAoB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC9C,WAAW,EAAE,SAAS,CAAC,QAAQ,MAAM;EACtC,CAAC;AAEW,uBAAsB,EAAE,OAAO;EAC1C,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC3B,cAAc,EAAE,QAAQ,CAAC,UAAU;EACnC,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,UAAU;EAC7D,CAAC;AAEW,gCAA+B,EAAE,OAAO;EACnD,SAAS,EAAE,SAAS,CAAC,UAAU;EAC/B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;EAChD,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU;EAC7C,OAAO,EAAE,QAAQ,CAAC,UAAU;EAC7B,CAAC;AAEW,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,SAAS;EAC7C,SAAS,EAAE,KAAK;GAAC;GAAO;GAAU;GAAW;GAAS,CAAC,CAAC,QAAQ,SAAS;EACzE,UAAU,wBAAwB,UAAU;EAC5C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,IAAI;EACnD,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAK,CAAC,IAAI,KAAO,CAAC,QAAQ,IAAM;EAChE,eAAe,6BAA6B,UAAU;EACtD,gBAAgB,8BAA8B,UAAU;;EAExD,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,CAAC,UAAU;;EAEnE,SAAS,wBAAwB,UAAU;EAC3C,QAAQ,wBAAwB,UAAU;EAC1C,MAAM,oBAAoB,UAAU;EACpC,SAAS,wBAAwB,UAAU;EAC5C,CAAC,CACD,aAAa;AAMH,wBAAuB,EAAE,OAAO;;AAE3C,KAAK,gBAAgB,UAAU,EAChC,CAAC,CAAC,UAAU;AAEA,+BAA8B;AAE9B,0BAAyB,EACnC,OAAO;;EAEN,QAAQ,EAAE,MAAM,8BAA8B,CAAC,UAAU;;EAEzD,OAAO,4BAA4B,UAAU;EAC9C,CAAC,CACD,UAAU;AAaA,6BAA4B,EACtC,OAAO;;EAEN,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;EAEtC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;;EAExC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EACzC,CAAC,CACD,QAAQ;AAGE,kCAAiC,EAC3C,OAAO;;EAEN,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;;EAEjD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrD,CAAC,CACD,QAAQ;AAQE,4BAA2B,EACrC,OAAO;;EAEN,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAEpC,QAAQ,EAAE,QAAQ,CAAC,UAAU;;EAE7B,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;;EAEzC,SAAS,+BAA+B,UAAU;;EAElD,OAAO,0BAA0B,UAAU;EAC5C,CAAC,CACD,QAAQ;AASE,yBAAwB,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB;AAStE,iCAAgC,EAAE,OAAO;EACpD,kBAAkB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC3C,gBAAgB,EAAE,SAAS,CAAC,QAAQ,MAAM;EAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;EACtC,iBAAiB,EAAE,SAAS,CAAC,QAAQ,KAAK;EAC1C,sBAAsB,EAAE,SAAS,CAAC,QAAQ,MAAM;EACjD,CAAC;AAGW,8BAA6B,EAAE,OAAO;EACjD,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,iBAAiB,EAAE,QAAQ,CAAC,UAAU;EACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;EACjC,CAAC;AAMW,0BAA6D,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;AAM9F,0BAAyB,EACnC,OAAO;;EAEN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;;EAEnC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;;EAE9C,mBAAmB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,GAAG;;EAEhD,wBAAwB,EAAE,QAAQ,CAAC,IAAI,IAAK,CAAC,QAAQ,EAAE;EACxD,CAAC,CACD,QAAQ,CACR,UAAU;AAGA,qBAAoB,EAC9B,OAAO;;EAEN,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG;;EAEtD,eAAe,EAAE,QAAQ,CAAC,UAAU;;;;;EAKpC,eAAe,EAAE,SAAS,CAAC,QAAQ,KAAK;;EAExC,6BAA6B,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE;;EAEvE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAM,CAAC,IAAI,KAAQ,CAAC,QAAQ,IAAO;;EAExE,uBAAuB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,QAAQ,KAAO;EAC5E,CAAC,CACD,QAAQ;AAIE,sBAAqB,EAC/B,OAAO;;EAEN,cAAc,EAAE,SAAS,CAAC,QAAQ,KAAK;;EAEvC,SAAS,EAAE,KAAK;GAAC;GAAU;GAAQ;GAAM,CAAC,CAAC,QAAQ,SAAS;;EAE5D,MAAM;EACP,CAAC,CACD,QAAQ,CACR,UAAU;AAIA,wBAAuB,EACjC,OAAO,EACN,SAAS,EAAE,SAAS,CAAC,UAAU,EAChC,CAAC,CACD,QAAQ,CACR,UAAU;AAQP,oBAAmB,EACtB,QAAQ,CACR,KAAK,CACL,QAAQ,UAAU;AACjB,MAAI;GACF,MAAM,WAAW,IAAI,IAAI,MAAM,CAAC;AAChC,UAAO,aAAa,WAAW,aAAa;UACtC;AACN,UAAO;;IAER,wCAAwC;AAEhC,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM;GAAC,EAAE,QAAQ;GAAE,EAAE,QAAQ;GAAE,EAAE,SAAS;GAAC,CAAC,CAAC,CAAC,UAAU;EACpF,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,kBAAkB,EAAE,QAAQ,CAAC,UAAU;EACvC,KAAK,iBAAiB,UAAU;EAChC,WAAW,EAAE,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC,UAAU;EACxD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM;GAAC,EAAE,QAAQ;GAAE,EAAE,QAAQ;GAAE,EAAE,SAAS;GAAC,CAAC,CAAC,CAAC,UAAU;EACxF,qBAAqB,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC/D,CAAC,CACD,SAAS,EAAE,SAAS,CAAC,CACrB,aAAa,OAAO,QAAQ;EAC3B,MAAM,aAAa,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,MAAM,CAAC,SAAS;EACtF,MAAM,SAAS,OAAO,MAAM,QAAQ,YAAY,MAAM,IAAI,MAAM,CAAC,SAAS;AAC1E,MAAI,cAAc,OAChB,KAAI,SAAS;GACX,MAAM;GACN,SAAS;GACV,CAAC;GAEJ;AAES,mBAAkB,EAC5B,OAAO;EACN,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,UAAU;EACzD,kBAAkB,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EACxD,CAAC,CACD,QAAQ,CACR,UAAU;AASA,gBAAe,EAAE,OAAO;EACnC,QAAQ;EACR,UAAU;EACV,SAAS;EACT,UAAU;EACV,SAAS;EACT,QAAQ,mBAAmB,UAAU;EACrC,WAAW;EACX,OAAO;EACP,KAAK;EACL,MAAM;EACN,OAAO,kBAAkB,UAAU;EACnC,YAAY,uBAAuB,QAAQ,EAAE,CAAC;;EAE9C,WAAW,sBAAsB,UAAU;EAC3C,WAAW;;EAEX,UAAU;EACV,QAAQ;EACR,UAAU;EACX,CAAC,CAAC,QAAQ;EACT,QAAQ,EACN,UAAU;GACR,WAAW;GACX,OAAO;GACP,WAAW;GACX,aAAa;GACb,mBAAmB;GACnB,oBAAoB;GACpB,wBAAwB;GACxB,iBAAiB;GACjB,kBAAkB;GAClB,gBAAgB;GAChB,YAAY;IACV,SAAS;IACT,MAAM;IACN,eAAe;IACf,kBAAkB;IAClB,0BAA0B;IAC1B,oBAAoB;IACpB,gBAAgB;IAChB,iBAAiB;IAClB;GACD,SAAS;IACP,SAAS;IACT,oBAAoB;IACpB,eAAe;IACf,eAAe;IAChB;GACD,SAAS,EACP,SAAS,aACV;GACF,EACF;EACD,UAAU,EAAE;EACZ,SAAS,EACP,SAAS,QACV;EACD,UAAU,EACR,UAAU;GACR,SAAS;GACT,WAAW,EAAE;GACb,gBAAgB,EAAE;GAClB,OAAO;GACP,UAAU,EACR,SAAS;IACP,WAAW;IACX,SAAS;IACT,UAAU;IACV,WAAW,EAAE;IACb,UAAU;IACV,aAAa;IACb,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,YAAY;IACb,EACF;GACD,UAAU;GACV,aAAa;GACb,aAAa;GACb,cAAc;GACd,gBAAgB;GACjB,EACF;EACD,SAAS;GACP,MAAM;GACN,MAAM;GACN,MAAM,EACJ,MAAM,SACP;GACD,WAAW;IACT,SAAS;IACT,YAAY;IACZ,4BAA4B;IAC7B;GACD,mBAAmB;GACnB,aAAa,EAAE;GACf,2BAA2B;GAC3B,oBAAoB;GACrB;EACD,OAAO,EACL,KAAK,EACH,QAAQ;GACN,YAAY;GACZ,WAAW,EAAE;GACd,EACF,EACF;EACD,MAAM;GACJ,SAAS;GACT,mBAAmB;GACnB,iBAAiB;GACjB,sBAAsB;GACtB,eAAe;GAChB;EACD,OAAO;GACL,UAAU;GACV,eAAe;GACf,6BAA6B;GAC7B,gBAAgB;GAChB,uBAAuB;GACxB;EACD,YAAY;GACV,OAAO,EAAE;GACT,UAAU;IACR,kBAAkB;IAClB,gBAAgB;IAChB,OAAO,EAAE;IACT,iBAAiB;IACjB,sBAAsB;IACvB;GACD,OAAO,EAAE;GACV;EACD,WAAW,EACT,SAAS,MACV;EAIF,CAAC"}

package/dist/src/config/workspace-path.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { parse, resolve } from "node:path";
 import { homedir } from "node:os";
+import { parse, resolve } from "node:path";
 //#region src/config/workspace-path.ts
 /** Expand leading `~` to the user home directory. */
 function expandWorkspacePathString(raw) {

package/dist/src/cron/executor.js

@@ -1,7 +1,7 @@
-import { createLogger } from "../utils/logger/index.js";
-import { init_logger } from "../utils/logger.js";
 import { init_agent_scope, normalizeAgentId } from "../agent/agent-scope.js";
 import { buildSessionKey, init_session_key } from "../routing/session-key.js";
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
 import { bundledChannelPlugins } from "../generated/bundled-channel-plugins.js";
 import { shouldSilence, stripHeartbeatToken } from "../heartbeat/tokens.js";
 import { getChannelPlugin, listChannelPlugins, syncChannelPluginsFromManager } from "../channels/plugins/registry.js";

package/dist/src/cron/persistence.js

@@ -1,6 +1,6 @@
-import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { JobDataSchema } from "./validation.js";
 import { access, readFile } from "fs/promises";
 //#region src/cron/persistence.ts

package/dist/src/cron/run-log-store.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveCronRunsDir } from "../config/paths.js";
-import { appendFile, mkdir, readFile, readdir, unlink, writeFile } from "fs/promises";
 import { join } from "path";
+import { appendFile, mkdir, readFile, readdir, unlink, writeFile } from "fs/promises";
 //#region src/cron/run-log-store.ts
 init_paths();
 init_logger();

package/dist/src/daemon/constants.js

@@ -1,5 +1,5 @@
-import path from "node:path";
 import os from "node:os";
+import path from "node:path";
 //#region src/daemon/constants.ts
 /**
 * Daemon Constants - Service labels, paths, and configuration values

package/dist/src/daemon/install-plan.js

@@ -2,9 +2,9 @@ import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription } from "./constants.js";
-import { existsSync } from "node:fs";
-import path from "node:path";
 import { homedir } from "node:os";
+import path from "node:path";
+import { existsSync } from "node:fs";
 //#region src/daemon/install-plan.ts
 /**
 * Install Plan Builder - Build gateway installation configuration
@@ -34,7 +34,7 @@ function isSEABinary() {
 function resolveEntryPoint() {
 	if (isSEABinary()) return process.execPath;
 	const thisDir = path.dirname(new URL(import.meta.url).pathname);
-	return path.join(thisDir, "..", "cli", "index.js");
+	return path.join(thisDir, "..", "cli", "bin.js");
 }
 function buildGatewayInstallPlan(params) {
 	const configPath = resolveDefaultConfigPath();

package/dist/src/daemon/install-plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"install-plan.js","names":[],"sources":["../../../src/daemon/install-plan.ts"],"sourcesContent":["/**\n * Install Plan Builder - Build gateway installation configuration\n *\n * Aligned with OpenClaw: adds XOPC_SERVICE_VERSION, StandardOut/ErrorPath,\n * supports binary runtime detection, and --foreground arg passing.\n */\n\nimport { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport { homedir } from 'node:os';\nimport { createLogger } from '../utils/logger.js';\nimport { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription } from './constants.js';\nimport { PACKAGE_VERSION } from '../package-version.js';\nimport type { GatewayServiceInstallArgs, GatewayServiceEnv } from './types.js';\n\nconst log = createLogger('InstallPlan');\n\nexport interface InstallPlan {\n  programArguments: string[];\n  workingDirectory: string;\n  environment: Record<string, string>;\n  description: string;\n}\n\n// ─── Path Resolution ───\n\nfunction resolveDefaultConfigPath(): string {\n  const envConfig = process.env.XOPC_CONFIG || process.env.XOPC_CONFIG_PATH;\n  if (envConfig) return envConfig;\n  return path.join(homedir(), '.xopc', 'xopc.json');\n}\n\nfunction resolveDefaultWorkspace(): string {\n  const envWorkspace = process.env.XOPC_WORKSPACE;\n  if (envWorkspace) return envWorkspace;\n  return path.join(homedir(), '.xopc', 'workspace');\n}\n\nfunction resolveLogDir(): string {\n  return path.join(homedir(), '.xopc', 'logs');\n}\n\n// ─── Binary Detection ───\n\nfunction isSEABinary(): boolean {\n  // Node.js SEA (Single Executable Application) detection\n  return !!(process as NodeJS.Process & { pkg?: unknown }).pkg ||\n    process.execPath.endsWith('xopc') ||\n    process.execPath.endsWith('xopc.exe');\n}\n\nfunction resolveEntryPoint(): string {\n  if (isSEABinary()) {\n    return process.execPath;\n  }\n  // Resolve relative to this file's location → ../cli/index.js (built output)\n  const thisDir = path.dirname(new URL(import.meta.url).pathname);\n  return path.join(thisDir, '..', 'cli', 'index.js');\n}\n\n// ─── Plan Builder ───\n\nexport function buildGatewayInstallPlan(params: {\n  port: number;\n  bind?: import('../config/schema.js').GatewayBindMode;\n  token?: string;\n  env?: GatewayServiceEnv;\n  runtime?: 'node' | 'binary';\n  version?: string;\n}): InstallPlan {\n  const configPath = resolveDefaultConfigPath();\n  const workspace = resolveDefaultWorkspace();\n  const version = params.version || PACKAGE_VERSION;\n\n  // Determine program + arguments\n  let programArguments: string[];\n\n  if (params.runtime === 'binary' || isSEABinary()) {\n    // SEA binary: direct execution\n    const binaryPath = process.execPath;\n    programArguments = [binaryPath, 'gateway', '--foreground', '--port', params.port.toString()];\n  } else {\n    // Node.js runtime\n    const nodeArgs = process.execArgv.filter(\n      (arg) => !arg.startsWith('--inspect') && !arg.startsWith('--debug'),\n    );\n    const entryPoint = resolveEntryPoint();\n    programArguments = [\n      process.execPath,\n      ...nodeArgs,\n      entryPoint,\n      'gateway',\n      '--foreground',\n      '--port', params.port.toString(),\n    ];\n  }\n\n  if (params.bind && params.bind !== 'loopback') {\n    programArguments.push('--bind', params.bind);\n  }\n\n  // Build environment\n  const environment: Record<string, string> = {\n    XOPC_CONFIG: configPath,\n    XOPC_WORKSPACE: workspace,\n    XOPC_LOG_LEVEL: process.env.XOPC_LOG_LEVEL || 'info',\n    XOPC_LOG_FILE: 'true',\n    XOPC_LOG_CONSOLE: 'false',\n    XOPC_LOG_DIR: resolveLogDir(),\n    [SERVICE_VERSION_ENV_KEY]: version,\n    XOPC_SERVICE_MARKER: '1',\n  };\n\n  if (params.token) {\n    environment.XOPC_GATEWAY_TOKEN = params.token;\n  }\n\n  // Copy relevant API key env vars\n  const relevantEnvVars = [\n    'OPENAI_API_KEY',\n    'ANTHROPIC_API_KEY',\n    'GOOGLE_API_KEY',\n    'BRAVE_API_KEY',\n    'DASHSCOPE_API_KEY',\n    'XOPC_LOG_RETENTION_DAYS',\n  ];\n\n  for (const key of relevantEnvVars) {\n    if (process.env[key]) {\n      environment[key] = process.env[key]!;\n    }\n  }\n\n  // Add custom env from params (non-XOPC keys only; XOPC keys already handled)\n  if (params.env) {\n    for (const [key, value] of Object.entries(params.env)) {\n      if (value !== undefined && !key.startsWith('XOPC_')) {\n        environment[key] = value;\n      }\n    }\n  }\n\n  // Service description\n  const profile = params.env?.XOPC_PROFILE?.trim() || undefined;\n  const description = formatGatewayServiceDescription({ profile, version });\n\n  log.info({\n    programArguments: programArguments.slice(0, 3),\n    envKeys: Object.keys(environment),\n    version,\n  }, 'Built gateway install plan');\n\n  return {\n    programArguments,\n    workingDirectory: path.dirname(configPath),\n    environment,\n    description,\n  };\n}\n\n// ─── Install Args Builder ───\n\nexport function buildGatewayInstallArgs(params: {\n  port: number;\n  bind?: import('../config/schema.js').GatewayBindMode;\n  token?: string;\n  env?: GatewayServiceEnv;\n  runtime?: 'node' | 'binary';\n  version?: string;\n}): GatewayServiceInstallArgs {\n  const plan = buildGatewayInstallPlan(params);\n\n  return {\n    env: params.env || process.env,\n    programArguments: plan.programArguments,\n    workingDirectory: plan.workingDirectory,\n    environment: plan.environment,\n    description: plan.description,\n  };\n}\n\n// ─── Validation ───\n\n/** Check if the program in an install plan still exists on disk */\nexport function validateInstallPlanProgram(programArguments: string[]): boolean {\n  if (programArguments.length === 0) return false;\n  const program = programArguments[0];\n  return existsSync(program);\n}\n"],"mappings":";;;;;;;;;;;;;;aAUkD;sBAEM;AAGxD,MAAM,MAAM,aAAa,cAAc;AAWvC,SAAS,2BAAmC;CAC1C,MAAM,YAAY,QAAQ,IAAI,eAAe,QAAQ,IAAI;AACzD,KAAI,UAAW,QAAO;AACtB,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,YAAY;;AAGnD,SAAS,0BAAkC;CACzC,MAAM,eAAe,QAAQ,IAAI;AACjC,KAAI,aAAc,QAAO;AACzB,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,YAAY;;AAGnD,SAAS,gBAAwB;AAC/B,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,OAAO;;AAK9C,SAAS,cAAuB;AAE9B,QAAO,CAAC,CAAE,QAA+C,OACvD,QAAQ,SAAS,SAAS,OAAO,IACjC,QAAQ,SAAS,SAAS,WAAW;;AAGzC,SAAS,oBAA4B;AACnC,KAAI,aAAa,CACf,QAAO,QAAQ;CAGjB,MAAM,UAAU,KAAK,QAAQ,IAAI,IAAI,OAAO,KAAK,IAAI,CAAC,SAAS;AAC/D,QAAO,KAAK,KAAK,SAAS,MAAM,OAAO,WAAW;;AAKpD,SAAgB,wBAAwB,QAOxB;CACd,MAAM,aAAa,0BAA0B;CAC7C,MAAM,YAAY,yBAAyB;CAC3C,MAAM,UAAU,OAAO,WAAW;CAGlC,IAAI;AAEJ,KAAI,OAAO,YAAY,YAAY,aAAa,CAG9C,oBAAmB;EADA,QAAQ;EACK;EAAW;EAAgB;EAAU,OAAO,KAAK,UAAU;EAAC;MACvF;EAEL,MAAM,WAAW,QAAQ,SAAS,QAC/B,QAAQ,CAAC,IAAI,WAAW,YAAY,IAAI,CAAC,IAAI,WAAW,UAAU,CACpE;EACD,MAAM,aAAa,mBAAmB;AACtC,qBAAmB;GACjB,QAAQ;GACR,GAAG;GACH;GACA;GACA;GACA;GAAU,OAAO,KAAK,UAAU;GACjC;;AAGH,KAAI,OAAO,QAAQ,OAAO,SAAS,WACjC,kBAAiB,KAAK,UAAU,OAAO,KAAK;CAI9C,MAAM,cAAsC;EAC1C,aAAa;EACb,gBAAgB;EAChB,gBAAgB,QAAQ,IAAI,kBAAkB;EAC9C,eAAe;EACf,kBAAkB;EAClB,cAAc,eAAe;GAC5B,0BAA0B;EAC3B,qBAAqB;EACtB;AAED,KAAI,OAAO,MACT,aAAY,qBAAqB,OAAO;AAa1C,MAAK,MAAM,OAAO;EARhB;EACA;EACA;EACA;EACA;EACA;EAG+B,CAC/B,KAAI,QAAQ,IAAI,KACd,aAAY,OAAO,QAAQ,IAAI;AAKnC,KAAI,OAAO;OACJ,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,IAAI,CACnD,KAAI,UAAU,KAAA,KAAa,CAAC,IAAI,WAAW,QAAQ,CACjD,aAAY,OAAO;;CAOzB,MAAM,cAAc,gCAAgC;EAAE,SADtC,OAAO,KAAK,cAAc,MAAM,IAAI,KAAA;EACW;EAAS,CAAC;AAEzE,KAAI,KAAK;EACP,kBAAkB,iBAAiB,MAAM,GAAG,EAAE;EAC9C,SAAS,OAAO,KAAK,YAAY;EACjC;EACD,EAAE,6BAA6B;AAEhC,QAAO;EACL;EACA,kBAAkB,KAAK,QAAQ,WAAW;EAC1C;EACA;EACD;;AAKH,SAAgB,wBAAwB,QAOV;CAC5B,MAAM,OAAO,wBAAwB,OAAO;AAE5C,QAAO;EACL,KAAK,OAAO,OAAO,QAAQ;EAC3B,kBAAkB,KAAK;EACvB,kBAAkB,KAAK;EACvB,aAAa,KAAK;EAClB,aAAa,KAAK;EACnB;;;AAMH,SAAgB,2BAA2B,kBAAqC;AAC9E,KAAI,iBAAiB,WAAW,EAAG,QAAO;CAC1C,MAAM,UAAU,iBAAiB;AACjC,QAAO,WAAW,QAAQ"}
+{"version":3,"file":"install-plan.js","names":[],"sources":["../../../src/daemon/install-plan.ts"],"sourcesContent":["/**\n * Install Plan Builder - Build gateway installation configuration\n *\n * Aligned with OpenClaw: adds XOPC_SERVICE_VERSION, StandardOut/ErrorPath,\n * supports binary runtime detection, and --foreground arg passing.\n */\n\nimport { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport { homedir } from 'node:os';\nimport { createLogger } from '../utils/logger.js';\nimport { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription } from './constants.js';\nimport { PACKAGE_VERSION } from '../package-version.js';\nimport type { GatewayServiceInstallArgs, GatewayServiceEnv } from './types.js';\n\nconst log = createLogger('InstallPlan');\n\nexport interface InstallPlan {\n  programArguments: string[];\n  workingDirectory: string;\n  environment: Record<string, string>;\n  description: string;\n}\n\n// ─── Path Resolution ───\n\nfunction resolveDefaultConfigPath(): string {\n  const envConfig = process.env.XOPC_CONFIG || process.env.XOPC_CONFIG_PATH;\n  if (envConfig) return envConfig;\n  return path.join(homedir(), '.xopc', 'xopc.json');\n}\n\nfunction resolveDefaultWorkspace(): string {\n  const envWorkspace = process.env.XOPC_WORKSPACE;\n  if (envWorkspace) return envWorkspace;\n  return path.join(homedir(), '.xopc', 'workspace');\n}\n\nfunction resolveLogDir(): string {\n  return path.join(homedir(), '.xopc', 'logs');\n}\n\n// ─── Binary Detection ───\n\nfunction isSEABinary(): boolean {\n  // Node.js SEA (Single Executable Application) detection\n  return !!(process as NodeJS.Process & { pkg?: unknown }).pkg ||\n    process.execPath.endsWith('xopc') ||\n    process.execPath.endsWith('xopc.exe');\n}\n\nfunction resolveEntryPoint(): string {\n  if (isSEABinary()) {\n    return process.execPath;\n  }\n  // Must match package.json \"bin\" (cli/bin.js). index.js only exports runCli and exits\n  // immediately when executed directly — systemd/LaunchAgent need the real entry.\n  const thisDir = path.dirname(new URL(import.meta.url).pathname);\n  return path.join(thisDir, '..', 'cli', 'bin.js');\n}\n\n// ─── Plan Builder ───\n\nexport function buildGatewayInstallPlan(params: {\n  port: number;\n  bind?: import('../config/schema.js').GatewayBindMode;\n  token?: string;\n  env?: GatewayServiceEnv;\n  runtime?: 'node' | 'binary';\n  version?: string;\n}): InstallPlan {\n  const configPath = resolveDefaultConfigPath();\n  const workspace = resolveDefaultWorkspace();\n  const version = params.version || PACKAGE_VERSION;\n\n  // Determine program + arguments\n  let programArguments: string[];\n\n  if (params.runtime === 'binary' || isSEABinary()) {\n    // SEA binary: direct execution\n    const binaryPath = process.execPath;\n    programArguments = [binaryPath, 'gateway', '--foreground', '--port', params.port.toString()];\n  } else {\n    // Node.js runtime\n    const nodeArgs = process.execArgv.filter(\n      (arg) => !arg.startsWith('--inspect') && !arg.startsWith('--debug'),\n    );\n    const entryPoint = resolveEntryPoint();\n    programArguments = [\n      process.execPath,\n      ...nodeArgs,\n      entryPoint,\n      'gateway',\n      '--foreground',\n      '--port', params.port.toString(),\n    ];\n  }\n\n  if (params.bind && params.bind !== 'loopback') {\n    programArguments.push('--bind', params.bind);\n  }\n\n  // Build environment\n  const environment: Record<string, string> = {\n    XOPC_CONFIG: configPath,\n    XOPC_WORKSPACE: workspace,\n    XOPC_LOG_LEVEL: process.env.XOPC_LOG_LEVEL || 'info',\n    XOPC_LOG_FILE: 'true',\n    XOPC_LOG_CONSOLE: 'false',\n    XOPC_LOG_DIR: resolveLogDir(),\n    [SERVICE_VERSION_ENV_KEY]: version,\n    XOPC_SERVICE_MARKER: '1',\n  };\n\n  if (params.token) {\n    environment.XOPC_GATEWAY_TOKEN = params.token;\n  }\n\n  // Copy relevant API key env vars\n  const relevantEnvVars = [\n    'OPENAI_API_KEY',\n    'ANTHROPIC_API_KEY',\n    'GOOGLE_API_KEY',\n    'BRAVE_API_KEY',\n    'DASHSCOPE_API_KEY',\n    'XOPC_LOG_RETENTION_DAYS',\n  ];\n\n  for (const key of relevantEnvVars) {\n    if (process.env[key]) {\n      environment[key] = process.env[key]!;\n    }\n  }\n\n  // Add custom env from params (non-XOPC keys only; XOPC keys already handled)\n  if (params.env) {\n    for (const [key, value] of Object.entries(params.env)) {\n      if (value !== undefined && !key.startsWith('XOPC_')) {\n        environment[key] = value;\n      }\n    }\n  }\n\n  // Service description\n  const profile = params.env?.XOPC_PROFILE?.trim() || undefined;\n  const description = formatGatewayServiceDescription({ profile, version });\n\n  log.info({\n    programArguments: programArguments.slice(0, 3),\n    envKeys: Object.keys(environment),\n    version,\n  }, 'Built gateway install plan');\n\n  return {\n    programArguments,\n    workingDirectory: path.dirname(configPath),\n    environment,\n    description,\n  };\n}\n\n// ─── Install Args Builder ───\n\nexport function buildGatewayInstallArgs(params: {\n  port: number;\n  bind?: import('../config/schema.js').GatewayBindMode;\n  token?: string;\n  env?: GatewayServiceEnv;\n  runtime?: 'node' | 'binary';\n  version?: string;\n}): GatewayServiceInstallArgs {\n  const plan = buildGatewayInstallPlan(params);\n\n  return {\n    env: params.env || process.env,\n    programArguments: plan.programArguments,\n    workingDirectory: plan.workingDirectory,\n    environment: plan.environment,\n    description: plan.description,\n  };\n}\n\n// ─── Validation ───\n\n/** Check if the program in an install plan still exists on disk */\nexport function validateInstallPlanProgram(programArguments: string[]): boolean {\n  if (programArguments.length === 0) return false;\n  const program = programArguments[0];\n  return existsSync(program);\n}\n"],"mappings":";;;;;;;;;;;;;;aAUkD;sBAEM;AAGxD,MAAM,MAAM,aAAa,cAAc;AAWvC,SAAS,2BAAmC;CAC1C,MAAM,YAAY,QAAQ,IAAI,eAAe,QAAQ,IAAI;AACzD,KAAI,UAAW,QAAO;AACtB,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,YAAY;;AAGnD,SAAS,0BAAkC;CACzC,MAAM,eAAe,QAAQ,IAAI;AACjC,KAAI,aAAc,QAAO;AACzB,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,YAAY;;AAGnD,SAAS,gBAAwB;AAC/B,QAAO,KAAK,KAAK,SAAS,EAAE,SAAS,OAAO;;AAK9C,SAAS,cAAuB;AAE9B,QAAO,CAAC,CAAE,QAA+C,OACvD,QAAQ,SAAS,SAAS,OAAO,IACjC,QAAQ,SAAS,SAAS,WAAW;;AAGzC,SAAS,oBAA4B;AACnC,KAAI,aAAa,CACf,QAAO,QAAQ;CAIjB,MAAM,UAAU,KAAK,QAAQ,IAAI,IAAI,OAAO,KAAK,IAAI,CAAC,SAAS;AAC/D,QAAO,KAAK,KAAK,SAAS,MAAM,OAAO,SAAS;;AAKlD,SAAgB,wBAAwB,QAOxB;CACd,MAAM,aAAa,0BAA0B;CAC7C,MAAM,YAAY,yBAAyB;CAC3C,MAAM,UAAU,OAAO,WAAW;CAGlC,IAAI;AAEJ,KAAI,OAAO,YAAY,YAAY,aAAa,CAG9C,oBAAmB;EADA,QAAQ;EACK;EAAW;EAAgB;EAAU,OAAO,KAAK,UAAU;EAAC;MACvF;EAEL,MAAM,WAAW,QAAQ,SAAS,QAC/B,QAAQ,CAAC,IAAI,WAAW,YAAY,IAAI,CAAC,IAAI,WAAW,UAAU,CACpE;EACD,MAAM,aAAa,mBAAmB;AACtC,qBAAmB;GACjB,QAAQ;GACR,GAAG;GACH;GACA;GACA;GACA;GAAU,OAAO,KAAK,UAAU;GACjC;;AAGH,KAAI,OAAO,QAAQ,OAAO,SAAS,WACjC,kBAAiB,KAAK,UAAU,OAAO,KAAK;CAI9C,MAAM,cAAsC;EAC1C,aAAa;EACb,gBAAgB;EAChB,gBAAgB,QAAQ,IAAI,kBAAkB;EAC9C,eAAe;EACf,kBAAkB;EAClB,cAAc,eAAe;GAC5B,0BAA0B;EAC3B,qBAAqB;EACtB;AAED,KAAI,OAAO,MACT,aAAY,qBAAqB,OAAO;AAa1C,MAAK,MAAM,OAAO;EARhB;EACA;EACA;EACA;EACA;EACA;EAG+B,CAC/B,KAAI,QAAQ,IAAI,KACd,aAAY,OAAO,QAAQ,IAAI;AAKnC,KAAI,OAAO;OACJ,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,IAAI,CACnD,KAAI,UAAU,KAAA,KAAa,CAAC,IAAI,WAAW,QAAQ,CACjD,aAAY,OAAO;;CAOzB,MAAM,cAAc,gCAAgC;EAAE,SADtC,OAAO,KAAK,cAAc,MAAM,IAAI,KAAA;EACW;EAAS,CAAC;AAEzE,KAAI,KAAK;EACP,kBAAkB,iBAAiB,MAAM,GAAG,EAAE;EAC9C,SAAS,OAAO,KAAK,YAAY;EACjC;EACD,EAAE,6BAA6B;AAEhC,QAAO;EACL;EACA,kBAAkB,KAAK,QAAQ,WAAW;EAC1C;EACA;EACD;;AAKH,SAAgB,wBAAwB,QAOV;CAC5B,MAAM,OAAO,wBAAwB,OAAO;AAE5C,QAAO;EACL,KAAK,OAAO,OAAO,QAAQ;EAC3B,kBAAkB,KAAK;EACvB,kBAAkB,KAAK;EACvB,aAAa,KAAK;EAClB,aAAa,KAAK;EACnB;;;AAMH,SAAgB,2BAA2B,kBAAqC;AAC9E,KAAI,iBAAiB,WAAW,EAAG,QAAO;CAC1C,MAAM,UAAU,iBAAiB;AACjC,QAAO,WAAW,QAAQ"}

package/dist/src/daemon/launchd.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { resolveGatewayLaunchAgentLabel, resolveLaunchAgentPlistPath as resolveLaunchAgentPlistPath$1 } from "./constants.js";
+import os from "node:os";
+import path from "node:path";
 import { existsSync } from "node:fs";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
-import path from "node:path";
-import os from "node:os";
 import { spawn, spawnSync } from "node:child_process";
 //#region src/daemon/launchd.ts
 /**

package/dist/src/daemon/schtasks.js

@@ -1,6 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { resolveGatewayWindowsTaskName } from "./constants.js";
+import os from "node:os";
+import path from "node:path";
+import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
 //#region src/daemon/schtasks.ts
 /**
@@ -57,6 +60,36 @@ async function schtasksExec(args) {
 	}
 	return result.stdout;
 }
+function resolveTaskEnvSidecarPath(taskName) {
+	const configDir = path.join(os.homedir(), ".xopc", "daemon");
+	return path.join(configDir, `${taskName}.env.json`);
+}
+function writeTaskEnvSidecar(taskName, environment) {
+	const sidecarPath = resolveTaskEnvSidecarPath(taskName);
+	try {
+		mkdirSync(path.dirname(sidecarPath), { recursive: true });
+		writeFileSync(sidecarPath, JSON.stringify(environment, null, 2), "utf8");
+	} catch (err) {
+		log.warn({
+			err,
+			sidecarPath
+		}, "Failed to write task environment sidecar");
+	}
+}
+function readTaskEnvSidecar(taskName) {
+	const sidecarPath = resolveTaskEnvSidecarPath(taskName);
+	try {
+		const raw = readFileSync(sidecarPath, "utf8");
+		const parsed = JSON.parse(raw);
+		if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) return parsed;
+	} catch {}
+}
+function removeTaskEnvSidecar(taskName) {
+	const sidecarPath = resolveTaskEnvSidecarPath(taskName);
+	try {
+		rmSync(sidecarPath, { force: true });
+	} catch {}
+}
 function isSchtasksAvailable() {
 	if (process.platform !== "win32") return false;
 	try {
@@ -101,6 +134,7 @@ const schtasksService = {
 			"LIMITED",
 			"/f"
 		]);
+		if (args.environment && Object.keys(args.environment).length > 0) writeTaskEnvSidecar(taskName, args.environment);
 		args.stdout?.write(`Created scheduled task: ${taskName}\n`);
 		args.stdout?.write(`  Program: ${program}\n`);
 		args.stdout?.write(`  Args: ${programArgs}\n`);
@@ -126,6 +160,7 @@ const schtasksService = {
 		} catch (err) {
 			log.debug({ err }, "Uninstall task not found");
 		}
+		removeTaskEnvSidecar(taskName);
 		log.info({ taskName }, "Scheduled task uninstalled");
 	},
 	async stop(args) {
@@ -228,9 +263,11 @@ const schtasksService = {
 				if (closeQuote > 0) programArguments = [taskRun.slice(1, closeQuote), ...taskRun.slice(closeQuote + 1).trim().split(/\s+/).filter(Boolean)];
 				else programArguments = taskRun.split(/\s+/);
 			} else programArguments = taskRun.split(/\s+/);
+			const environment = readTaskEnvSidecar(taskName);
 			return {
 				programArguments,
-				workingDirectory: workDirMatch?.[1]?.trim() || void 0
+				workingDirectory: workDirMatch?.[1]?.trim() || void 0,
+				environment
 			};
 		} catch {
 			return null;