aimeat 2.6.1 → 3.0.0

package/dist/src/config-site-contacts.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @file src/config-site-contacts.ts
+ * @description parseSiteContacts(): the people printed on the public pages, read from
+ *   AIMEAT_SITE_CONTACTS. Moved out of config.ts by pure extraction when that file reached the
+ *   800-line limit; the code is unchanged and config.ts calls it exactly where it used to.
+ * @structure parseSiteContacts() — the only export
+ * @usage import { parseSiteContacts } from './config-site-contacts.js';
+ * @version-history
+ *   v1.0.0 — 2026-08-11 — Pure extraction from config.ts (max-file-lines). No behaviour change.
+ */
+import type { SiteContact } from './config-types.js';
+/**
+ * The people printed on the public pages, from `AIMEAT_SITE_CONTACTS` (a JSON array of
+ * `{ name, role, email, phone }`, ordered by who should field the first contact).
+ *
+ * Falls back to the single-contact vars this replaced, and finally to the operator email, so a
+ * node configured before multi-contact keeps its card. An entry without an email is dropped:
+ * a "talk to a human" card with no way to reach anyone is worse than no card.
+ *
+ * Malformed JSON degrades to the fallback and warns rather than refusing to boot — a typo in a
+ * marketing contact must never take a node down.
+ */
+export declare function parseSiteContacts(): SiteContact[];
+//# sourceMappingURL=config-site-contacts.d.ts.map

package/dist/src/config-site-contacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-site-contacts.d.ts","sourceRoot":"","sources":["../../src/config-site-contacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,WAAW,EAAE,CA0BjD"}

package/dist/src/config-site-contacts.js

@@ -0,0 +1,42 @@
+import { logger } from './utils/logger.js';
+/**
+ * The people printed on the public pages, from `AIMEAT_SITE_CONTACTS` (a JSON array of
+ * `{ name, role, email, phone }`, ordered by who should field the first contact).
+ *
+ * Falls back to the single-contact vars this replaced, and finally to the operator email, so a
+ * node configured before multi-contact keeps its card. An entry without an email is dropped:
+ * a "talk to a human" card with no way to reach anyone is worse than no card.
+ *
+ * Malformed JSON degrades to the fallback and warns rather than refusing to boot — a typo in a
+ * marketing contact must never take a node down.
+ */
+export function parseSiteContacts() {
+    const raw = (process.env.AIMEAT_SITE_CONTACTS ?? '').trim();
+    const clean = (c) => ({
+        name: String(c.name ?? '').trim(),
+        role: String(c.role ?? '').trim(),
+        email: String(c.email ?? '').trim(),
+        phone: String(c.phone ?? '').trim(),
+        linkedin: String(c.linkedin ?? '').trim(),
+    });
+    if (raw) {
+        try {
+            const parsed = JSON.parse(raw);
+            if (Array.isArray(parsed))
+                return parsed.map(c => clean(c)).filter(c => c.email !== '');
+            logger.warn('AIMEAT_SITE_CONTACTS is not a JSON array — ignoring it and falling back');
+        }
+        catch (err) {
+            logger.warn('AIMEAT_SITE_CONTACTS is not valid JSON — ignoring it and falling back', { error: String(err) });
+        }
+    }
+    const single = clean({
+        name: process.env.AIMEAT_SITE_CONTACT_NAME,
+        role: process.env.AIMEAT_SITE_CONTACT_ROLE,
+        email: process.env.AIMEAT_SITE_CONTACT_EMAIL ?? process.env.AIMEAT_OPERATOR_EMAIL,
+        phone: process.env.AIMEAT_SITE_CONTACT_PHONE,
+        linkedin: process.env.AIMEAT_SITE_CONTACT_LINKEDIN,
+    });
+    return single.email ? [single] : [];
+}
+//# sourceMappingURL=config-site-contacts.js.map

package/dist/src/config-site-contacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-site-contacts.js","sourceRoot":"","sources":["../../src/config-site-contacts.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,CAAuB,EAAe,EAAE,CAAC,CAAC;QACvD,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACjC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACjC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACnC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACnC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;KAC1C,CAAC,CAAC;IACH,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAyB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;YAChH,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,uEAAuE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QAC1C,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QAC1C,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjF,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;QAC5C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B;KACnD,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC"}

package/dist/src/config-types.d.ts

@@ -46,6 +46,8 @@ export interface RateLimitsConfig {
     federation: RateLimitTier;
     catalogue: RateLimitTier;
     authChallenge: RateLimitTier;
+    /** The agent door (POST /v1/registration-invites) — open, and it emails strangers. Hour window. */
+    registrationInvites: RateLimitTier;
     openrouter: RateLimitTier;
     roleMultipliers: RoleMultipliers;
 }
@@ -182,6 +184,25 @@ export interface AimeatConfig {
      * advertised and the serve route stays inert.
      */
     portfolioOriginEnabled: boolean;
+    /**
+     * Company origin host — `{slug}.co.<apex>` serves a registered company's front page,
+     * the same way `{app}.apps.<apex>` serves an app. Host form, e.g. `co.aimeat.io`;
+     * empty when unset (localhost/IP baseUrls, unless AIMEAT_CO_HOST is set explicitly).
+     */
+    coHost: string;
+    /**
+     * Feature flag for the company origin. OFF until DNS/TLS/nginx for `*.coHost` are
+     * provisioned; when off the serve route stays inert and the addresses are not advertised.
+     */
+    coOriginEnabled: boolean;
+    /** Home room 3 (monetising). Default OFF — see services/home-rooms.ts for why it is a flag. */
+    homeRoomMonetise: boolean;
+    /**
+     * Send the fortnight-of-silence nudge email. Default OFF: it is UNSOLICITED mail to real
+     * people, so switching it on has to be a decision somebody made, not a deploy side effect.
+     * See services/inactivity-nudge.ts.
+     */
+    inactivityNudge: boolean;
     nodeId: string;
     nodeType: NodeType;
     dbUrl: string | null;
@@ -234,6 +255,18 @@ export interface AimeatConfig {
     aiSupervisoryName: string;
     /** Homepage of the AI market-surveillance authority above. */
     aiSupervisoryUrl: string;
+    /** Which SECTIONS of the EU Code of Practice on Transparency of AI-generated Content this node's
+     *  operator has actually signed (`['2']`). Empty is the shipped default and means "not a
+     *  signatory", which is what /v1/ai-transparency then reports.
+     *
+     *  CONFIGURATION AND NOT A CONSTANT, for one reason that decides it: the signature belongs to the
+     *  OPERATOR, not to the software. This is MIT code that other people run, so a `true` written into
+     *  a source file would have every node in the world publishing somebody else's compliance claim —
+     *  in the one artefact a regulator reads first. */
+    aiCopSections: string[];
+    /** ISO date (`2026-08-01`) the operator signed the Code of Practice, published beside the sections.
+     *  A signature without a date is the shape a reader cannot check; empty unless sections are set. */
+    aiCopSignedOn: string;
     /** Node auto-generates thumbnails for published apps that have none (needs a headless browser). */
     screenshotAutoCapture: boolean;
     /** Minutes between auto-screenshot scans (default 15). */
@@ -285,6 +318,14 @@ export interface AimeatConfig {
     minTrustForPaidActions: number;
     appMaxSizeMb: number;
     maxAppsPerAgent: number;
+    /**
+     * Ask this node, over loopback, whether the asset URLs a published app loads actually resolve —
+     * a 404 refuses the publish (services/app-artifact-lint.ts). On by default: the destination is
+     * always 127.0.0.1 on this node's own port, so it reaches nowhere else, and the check is what
+     * stops an app whose script tags 404 from going live. Turn it off only where the node cannot
+     * reach itself over loopback; the publish then simply says nothing about those URLs.
+     */
+    appAssetProbe: boolean;
     agentPortingFeeMorsels: number;
     memoryOverageMorselsPerMbMonth: number;
     storageOverageMorselsPerGbMonth: number;
@@ -422,6 +463,12 @@ export interface AimeatConfig {
     pushMaxSubscriptionsPerNode: number;
     pushMaxFailures: number;
     emailRateLimitMin: number;
+    /** Outbound door: max sent messages per owner per rolling 24 h (AIMEAT_OUTBOUND_DAILY_LIMIT, default 200). */
+    outboundDailyLimit: number;
+    /** E-invoice operator adapter: '' = disabled (safe default), 'mock' = test double, 'rest' = generic gateway. */
+    finvoiceOperator: string;
+    finvoiceOperatorUrl: string | null;
+    finvoiceOperatorApiKey: string | null;
     eudiwEnabled: boolean;
     eudiwClientId: string;
     eudiwRedirectUri: string;
@@ -449,6 +496,12 @@ export interface AimeatConfig {
     connectionsEnabled: boolean;
     connectGoogleClientId: string;
     connectGoogleClientSecret: string;
+    /** LinkedIn app client id. Consumer tier, self-serve: no product review to wait on. */
+    connectLinkedinClientId: string;
+    connectLinkedinClientSecret: string;
+    /** X app client id. Pay-per-use: every post is a charge, capped by a spend limit set at X. */
+    connectXClientId: string;
+    connectXClientSecret: string;
     connectRedirectUri: string;
     connectFakeBaseUrl: string;
     crossFederationEnabled: boolean;
@@ -506,6 +559,7 @@ export interface AimeatConfig {
     extensionTimeoutMs: number;
     extensionMaxApiCalls: number;
     extensionMaxDebitPerCall: number;
+    extensionMaxPayMorsels: number;
     /**
      * Morsels burned per METERED call when the capability declares no toll of its own — the node-wide
      * pacing floor. Applies on every metered path (app tools, exchange runs, agent work, raw extension

package/dist/src/config-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-types.d.ts","sourceRoot":"","sources":["../../src/config-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,cAAc;IAC7B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IAEtB,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,aAAa,CAAC;IAC1B,UAAU,EAAE,aAAa,CAAC;IAC1B,SAAS,EAAE,aAAa,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,aAAa,CAAC;IAC1B,eAAe,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;AAChE,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,aAAa,GAAG,YAAY,CAAC;AAEvE;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,SAAS,GAAG,cAAc,GAAG,aAAa,CAAC;AAEzF,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,IAAI,EAAE,YAAY,CAAC;IACnB;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,eAAe,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,eAAe,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,cAAc,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAC;IACtB,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,eAAe;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,cAAc,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,QAAQ,EAAE,WAAW,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,sBAAsB,EAAE,OAAO,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,CAAC;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,OAAO,CAAC;IACvB;2GACuG;IACvG,SAAS,EAAE,OAAO,CAAC;IACnB;;sGAEkG;IAClG,eAAe,EAAE,OAAO,GAAG,QAAQ,CAAC;IACpC;;mFAE+E;IAC/E,kBAAkB,EAAE,OAAO,CAAC;IAC5B;qGACiG;IACjG,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B;;;sGAGkG;IAClG,YAAY,EAAE,OAAO,CAAC;IACtB;;;;sFAIkF;IAClF,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC;;;;;;;;4GAQwG;IACxG,aAAa,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAC;IAC1C;;;;2GAIuG;IACvG,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8DAA8D;IAC9D,gBAAgB,EAAE,MAAM,CAAC;IACzB,mGAAmG;IACnG,qBAAqB,EAAE,OAAO,CAAC;IAC/B,0DAA0D;IAC1D,qBAAqB,EAAE,MAAM,CAAC;IAC9B,wHAAwH;IACxH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IAEzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,uBAAuB,EAAE,OAAO,CAAC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,yBAAyB,EAAE,MAAM,CAAC;IAClC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gHAAgH;IAChH,sBAAsB,EAAE,MAAM,CAAC;IAC/B;;+CAE2C;IAC3C,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,2BAA2B,EAAE,MAAM,CAAC;IACpC;6FACyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB;yGACqG;IACrG,aAAa,EAAE,MAAM,CAAC;IACtB;qEACiE;IACjE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0BAA0B,EAAE,MAAM,CAAC;IACnC,wBAAwB,EAAE,MAAM,CAAC;IACjC,4BAA4B,EAAE,MAAM,CAAC;IACrC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,MAAM,CAAC;IACvC,+BAA+B,EAAE,MAAM,CAAC;IACxC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,gBAAgB,CAAC;IAG7B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IAGxB,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oBAAoB,EAAE,UAAU,GAAG,WAAW,GAAG,gBAAgB,CAAC;IAClE,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,0IAA0I;IAC1I,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wGAAwG;IACxG,oBAAoB,EAAE,OAAO,CAAC;IAC9B,iFAAiF;IACjF,gCAAgC,EAAE,MAAM,CAAC;IACzC,iFAAiF;IACjF,wCAAwC,EAAE,MAAM,CAAC;IACjD,4FAA4F;IAC5F,gCAAgC,EAAE,MAAM,CAAC;IAGzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,6BAA6B,EAAE,MAAM,CAAC;IACtC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,0BAA0B,EAAE,MAAM,CAAC;IACnC,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAG7B,cAAc,EAAE,OAAO,CAAC;IACxB,yBAAyB,EAAE,MAAM,CAAC;IAClC,yBAAyB,EAAE,MAAM,CAAC;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAG1B,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAG3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAG7B,cAAc,EAAE,UAAU,GAAG,OAAO,CAAC;IAGrC,cAAc,EAAE,UAAU,GAAG,OAAO,CAAC;IACrC,yGAAyG;IACzG,gBAAgB,EAAE,OAAO,CAAC;IAM1B,WAAW,EAAE,OAAO,CAAC;IACrB,+FAA+F;IAC/F,WAAW,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,sGAAsG;IACtG,mBAAmB,EAAE,OAAO,CAAC;IAG7B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,0BAA0B,EAAE,MAAM,CAAC;IACnC,gCAAgC,EAAE,MAAM,CAAC;IACzC,+BAA+B,EAAE,MAAM,CAAC;IACxC,8BAA8B,EAAE,MAAM,CAAC;IACvC,4BAA4B,EAAE,MAAM,CAAC;IAGrC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,gCAAgC,EAAE,MAAM,CAAC;IACzC,+BAA+B,EAAE,MAAM,CAAC;IACxC,6BAA6B,EAAE,MAAM,CAAC;IAGtC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,sBAAsB,EAAE,OAAO,CAAC;IAChC,yBAAyB,EAAE,OAAO,CAAC;IACnC,YAAY,EAAE,OAAO,CAAC;IAGtB,8BAA8B,EAAE,MAAM,CAAC;IACvC,wBAAwB,EAAE,OAAO,CAAC;IAGlC,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAG1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,4BAA4B,EAAE,MAAM,CAAC;IACrC,gCAAgC,EAAE,MAAM,CAAC;IACzC,wBAAwB,EAAE,OAAO,CAAC;IAGlC,2FAA2F;IAC3F,kBAAkB,EAAE,UAAU,GAAG,MAAM,CAAC;IACxC,oGAAoG;IACpG,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oFAAoF;IACpF,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,OAAO,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;IAClC,8GAA8G;IAC9G,oBAAoB,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3C,+GAA+G;IAC/G,aAAa,EAAE,MAAM,CAAC;IACtB,mGAAmG;IACnG,cAAc,EAAE,OAAO,CAAC;IAGxB,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,2BAA2B,EAAE,MAAM,CAAC;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAG1B,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAG5B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,CAAC;IAG/B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wBAAwB,EAAE,MAAM,CAAC;IACjC,uBAAuB,EAAE,MAAM,CAAC;IAGhC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAM9B,kBAAkB,EAAE,OAAO,CAAC;IAK5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,yBAAyB,EAAE,MAAM,CAAC;IAClC,kBAAkB,EAAE,MAAM,CAAC;IAI3B,kBAAkB,EAAE,MAAM,CAAC;IAG3B,sBAAsB,EAAE,OAAO,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,wBAAwB,EAAE,MAAM,CAAC;IAGjC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAG5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,0BAA0B,EAAE,MAAM,CAAC;IAGnC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtC,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,uBAAuB,EAAE,MAAM,CAAC;IAChC,yBAAyB,EAAE,MAAM,CAAC;IAClC,2BAA2B,EAAE,MAAM,CAAC;IACpC,0BAA0B,EAAE,MAAM,CAAC;IACnC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAG9B,cAAc,EAAE,OAAO,CAAC;IAGxB,WAAW,EAAE,OAAO,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,OAAO,CAAC;IAG7B,eAAe,EAAE,MAAM,EAAE,CAAC;IAG1B,iBAAiB,EAAE,MAAM,CAAC;IAG1B,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,QAAQ,GAAG,eAAe,GAAG,UAAU,CAAC;IAGrD,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,2HAA2H;IAC3H,oBAAoB,EAAE,OAAO,CAAC;IAC9B,kGAAkG;IAClG,gBAAgB,EAAE,OAAO,CAAC;IAI1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,EAAE,MAAM,EAAE,CAAC;IAGvB,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,QAAQ,GAAG,eAAe,GAAG,UAAU,CAAC;IAGvD,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wBAAwB,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAI9B,iBAAiB,EAAE,OAAO,CAAC;IAG3B,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAG3B,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,UAAU,GAAG,OAAO,CAAC;IACxC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,sBAAsB,EAAE,OAAO,CAAC;IAChC,0BAA0B,EAAE,OAAO,CAAC;IACpC,wBAAwB,EAAE,OAAO,CAAC;IAClC,2BAA2B,EAAE,OAAO,CAAC;IAGrC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAG3B,oBAAoB,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC;IACtE,oBAAoB,EAAE,WAAW,GAAG,cAAc,GAAG,WAAW,CAAC;IACjE,2BAA2B,EAAE,MAAM,CAAC;IACpC,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,kBAAkB,EAAE,UAAU,GAAG,gBAAgB,GAAG,MAAM,CAAC;IAC3D,gCAAgC,EAAE,MAAM,EAAE,CAAC;IAC3C,0BAA0B,EAAE,MAAM,CAAC;IAGnC,yBAAyB,EAAE,MAAM,CAAC;IAIlC,eAAe,EAAE,OAAO,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAG9B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,uBAAuB,EAAE,OAAO,CAAC;IAOjC,QAAQ,EAAE,cAAc,CAAC;IAIzB,SAAS,EAAE,eAAe,CAAC;IAG3B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAG7B,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B,EAAE,MAAM,CAAC;IACnC,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,uFAAuF;IACvF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB"}
+{"version":3,"file":"config-types.d.ts","sourceRoot":"","sources":["../../src/config-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,cAAc;IAC7B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IAEtB,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,aAAa,CAAC;IAC1B,UAAU,EAAE,aAAa,CAAC;IAC1B,SAAS,EAAE,aAAa,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,mGAAmG;IACnG,mBAAmB,EAAE,aAAa,CAAC;IACnC,UAAU,EAAE,aAAa,CAAC;IAC1B,eAAe,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;AAChE,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,aAAa,GAAG,YAAY,CAAC;AAEvE;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,SAAS,GAAG,cAAc,GAAG,aAAa,CAAC;AAEzF,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,IAAI,EAAE,YAAY,CAAC;IACnB;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,eAAe,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,eAAe,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,cAAc,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAC;IACtB,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,eAAe;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,cAAc,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,QAAQ,EAAE,WAAW,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,sBAAsB,EAAE,OAAO,CAAC;IAChC;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,+FAA+F;IAC/F,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,CAAC;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,OAAO,CAAC;IACvB;2GACuG;IACvG,SAAS,EAAE,OAAO,CAAC;IACnB;;sGAEkG;IAClG,eAAe,EAAE,OAAO,GAAG,QAAQ,CAAC;IACpC;;mFAE+E;IAC/E,kBAAkB,EAAE,OAAO,CAAC;IAC5B;qGACiG;IACjG,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B;;;sGAGkG;IAClG,YAAY,EAAE,OAAO,CAAC;IACtB;;;;sFAIkF;IAClF,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC;;;;;;;;4GAQwG;IACxG,aAAa,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAC;IAC1C;;;;2GAIuG;IACvG,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8DAA8D;IAC9D,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;;;;uDAOmD;IACnD,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB;wGACoG;IACpG,aAAa,EAAE,MAAM,CAAC;IACtB,mGAAmG;IACnG,qBAAqB,EAAE,OAAO,CAAC;IAC/B,0DAA0D;IAC1D,qBAAqB,EAAE,MAAM,CAAC;IAC9B,wHAAwH;IACxH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IAEzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,uBAAuB,EAAE,OAAO,CAAC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,yBAAyB,EAAE,MAAM,CAAC;IAClC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gHAAgH;IAChH,sBAAsB,EAAE,MAAM,CAAC;IAC/B;;+CAE2C;IAC3C,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,2BAA2B,EAAE,MAAM,CAAC;IACpC;6FACyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB;yGACqG;IACrG,aAAa,EAAE,MAAM,CAAC;IACtB;qEACiE;IACjE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0BAA0B,EAAE,MAAM,CAAC;IACnC,wBAAwB,EAAE,MAAM,CAAC;IACjC,4BAA4B,EAAE,MAAM,CAAC;IACrC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,MAAM,CAAC;IACvC,+BAA+B,EAAE,MAAM,CAAC;IACxC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,gBAAgB,CAAC;IAG7B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IAGxB,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oBAAoB,EAAE,UAAU,GAAG,WAAW,GAAG,gBAAgB,CAAC;IAClE,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,0IAA0I;IAC1I,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wGAAwG;IACxG,oBAAoB,EAAE,OAAO,CAAC;IAC9B,iFAAiF;IACjF,gCAAgC,EAAE,MAAM,CAAC;IACzC,iFAAiF;IACjF,wCAAwC,EAAE,MAAM,CAAC;IACjD,4FAA4F;IAC5F,gCAAgC,EAAE,MAAM,CAAC;IAGzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,6BAA6B,EAAE,MAAM,CAAC;IACtC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,0BAA0B,EAAE,MAAM,CAAC;IACnC,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAG7B,cAAc,EAAE,OAAO,CAAC;IACxB,yBAAyB,EAAE,MAAM,CAAC;IAClC,yBAAyB,EAAE,MAAM,CAAC;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAG1B,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAG3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAG7B,cAAc,EAAE,UAAU,GAAG,OAAO,CAAC;IAGrC,cAAc,EAAE,UAAU,GAAG,OAAO,CAAC;IACrC,yGAAyG;IACzG,gBAAgB,EAAE,OAAO,CAAC;IAM1B,WAAW,EAAE,OAAO,CAAC;IACrB,+FAA+F;IAC/F,WAAW,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,sGAAsG;IACtG,mBAAmB,EAAE,OAAO,CAAC;IAG7B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,0BAA0B,EAAE,MAAM,CAAC;IACnC,gCAAgC,EAAE,MAAM,CAAC;IACzC,+BAA+B,EAAE,MAAM,CAAC;IACxC,8BAA8B,EAAE,MAAM,CAAC;IACvC,4BAA4B,EAAE,MAAM,CAAC;IAGrC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,gCAAgC,EAAE,MAAM,CAAC;IACzC,+BAA+B,EAAE,MAAM,CAAC;IACxC,6BAA6B,EAAE,MAAM,CAAC;IAGtC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,sBAAsB,EAAE,OAAO,CAAC;IAChC,yBAAyB,EAAE,OAAO,CAAC;IACnC,YAAY,EAAE,OAAO,CAAC;IAGtB,8BAA8B,EAAE,MAAM,CAAC;IACvC,wBAAwB,EAAE,OAAO,CAAC;IAGlC,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAG1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,4BAA4B,EAAE,MAAM,CAAC;IACrC,gCAAgC,EAAE,MAAM,CAAC;IACzC,wBAAwB,EAAE,OAAO,CAAC;IAGlC,2FAA2F;IAC3F,kBAAkB,EAAE,UAAU,GAAG,MAAM,CAAC;IACxC,oGAAoG;IACpG,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oFAAoF;IACpF,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,OAAO,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;IAClC,8GAA8G;IAC9G,oBAAoB,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3C,+GAA+G;IAC/G,aAAa,EAAE,MAAM,CAAC;IACtB,mGAAmG;IACnG,cAAc,EAAE,OAAO,CAAC;IAGxB,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,2BAA2B,EAAE,MAAM,CAAC;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8GAA8G;IAC9G,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gHAAgH;IAChH,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtC,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAG5B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,CAAC;IAG/B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wBAAwB,EAAE,MAAM,CAAC;IACjC,uBAAuB,EAAE,MAAM,CAAC;IAGhC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAM9B,kBAAkB,EAAE,OAAO,CAAC;IAK5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,yBAAyB,EAAE,MAAM,CAAC;IAClC,uFAAuF;IACvF,uBAAuB,EAAE,MAAM,CAAC;IAChC,2BAA2B,EAAE,MAAM,CAAC;IACpC,8FAA8F;IAC9F,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAI3B,kBAAkB,EAAE,MAAM,CAAC;IAG3B,sBAAsB,EAAE,OAAO,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,wBAAwB,EAAE,MAAM,CAAC;IAGjC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAG5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,0BAA0B,EAAE,MAAM,CAAC;IAGnC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtC,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,uBAAuB,EAAE,MAAM,CAAC;IAChC,yBAAyB,EAAE,MAAM,CAAC;IAClC,2BAA2B,EAAE,MAAM,CAAC;IACpC,0BAA0B,EAAE,MAAM,CAAC;IACnC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAG9B,cAAc,EAAE,OAAO,CAAC;IAGxB,WAAW,EAAE,OAAO,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,OAAO,CAAC;IAG7B,eAAe,EAAE,MAAM,EAAE,CAAC;IAG1B,iBAAiB,EAAE,MAAM,CAAC;IAG1B,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,QAAQ,GAAG,eAAe,GAAG,UAAU,CAAC;IAGrD,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,2HAA2H;IAC3H,oBAAoB,EAAE,OAAO,CAAC;IAC9B,kGAAkG;IAClG,gBAAgB,EAAE,OAAO,CAAC;IAI1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,EAAE,MAAM,EAAE,CAAC;IAGvB,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,QAAQ,GAAG,eAAe,GAAG,UAAU,CAAC;IAGvD,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wBAAwB,EAAE,MAAM,CAAC;IACjC,sBAAsB,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAI9B,iBAAiB,EAAE,OAAO,CAAC;IAG3B,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAG3B,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,UAAU,GAAG,OAAO,CAAC;IACxC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,sBAAsB,EAAE,OAAO,CAAC;IAChC,0BAA0B,EAAE,OAAO,CAAC;IACpC,wBAAwB,EAAE,OAAO,CAAC;IAClC,2BAA2B,EAAE,OAAO,CAAC;IAGrC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAG3B,oBAAoB,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC;IACtE,oBAAoB,EAAE,WAAW,GAAG,cAAc,GAAG,WAAW,CAAC;IACjE,2BAA2B,EAAE,MAAM,CAAC;IACpC,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,kBAAkB,EAAE,UAAU,GAAG,gBAAgB,GAAG,MAAM,CAAC;IAC3D,gCAAgC,EAAE,MAAM,EAAE,CAAC;IAC3C,0BAA0B,EAAE,MAAM,CAAC;IAGnC,yBAAyB,EAAE,MAAM,CAAC;IAIlC,eAAe,EAAE,OAAO,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAG9B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,uBAAuB,EAAE,OAAO,CAAC;IAOjC,QAAQ,EAAE,cAAc,CAAC;IAIzB,SAAS,EAAE,eAAe,CAAC;IAG3B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAG7B,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B,EAAE,MAAM,CAAC;IACnC,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,uFAAuF;IACvF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB"}

package/dist/src/config.d.ts

@@ -1,13 +1,7 @@
 import type { ConfigProvenance } from './services/config-provenance.js';
 export type { ExtensionHooks, HookName, RateLimitTier, RoleMultipliers, RateLimitsConfig, NodeType, FederationRole, OperatorType, OperatorConfig, AimeatConfig, LoadConfigOptions, LoadConfigResult, } from './config-types.js';
 import type { AimeatConfig, LoadConfigOptions, LoadConfigResult } from './config-types.js';
-/**
- * Startup posture self-check. When the resolved security profile is `public`, return a list of
- * unsafe-combination warnings so being insecure on the internet is a conscious operator choice,
- * not an accident. Warn-only by contract (the caller logs them) — never throws, so an operator can
- * still run any combination deliberately. Empty list on a `local` node. See security-development-dna.md.
- */
-export declare function securityPostureWarnings(config: AimeatConfig): string[];
+export { securityPostureWarnings } from './config-posture.js';
 export declare function loadConfig(options?: LoadConfigOptions): LoadConfigResult;
 import type { Storage } from './storage/interface.js';
 /**

package/dist/src/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE,YAAY,EACV,cAAc,EACd,QAAQ,EACR,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,YAAY,EAMZ,iBAAiB,EACjB,gBAAgB,EAEjB,MAAM,mBAAmB,CAAC;AA6E3B;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,CAetE;AAED,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,gBAAgB,CA6iBxE;AAID,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAGtD;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,gBAAgB,GAC3B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAqDnD;AAID,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE,YAAY,EACV,cAAc,EACd,QAAQ,EACR,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,YAAY,EAMZ,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,mBAAmB,CAAC;AAqB3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,gBAAgB,CAylBxE;AAID,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAGtD;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,gBAAgB,GAC3B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAqDnD;AAID,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/src/config.js

@@ -23,6 +23,14 @@
  *     for url-validator, add securityPostureWarnings() startup self-check. See security-development-dna.md.
  *   v1.5.1 -- 2026-08-01 -- Pure extraction: missingOperatorConfig / operatorTypeLabel moved to
  *     config-operator.ts (max-file-lines) and are re-exported here, so no importer changes.
+ *   v1.7.0 -- 2026-08-11 -- appOriginEnabled follows the security profile when
+ *     AIMEAT_APP_ORIGIN_ENABLED is unset (public node on, local node off). Audit H-24: an opt-in
+ *     default meant a node that never met the flag served every app on its own session origin.
+ *     parseSiteContacts moved to config-site-contacts.ts by pure extraction to stay under the
+ *     800-line limit; it is called from the same place and behaves identically.
+ *   v1.6.0 -- 2026-08-10 -- extensionMaxPayMorsels: a ceiling on the price an action may put on
+ *     itself in its manifest. securityPostureWarnings moved to config-posture.ts by pure
+ *     extraction when this file reached the 800-line limit; it is re-exported from here.
  *   v1.5.0 -- 2026-08-01 -- TARGET-058 Phase 3: AIMEAT_AI_LABEL_PUBLIC (strict|light|off, `off`
  *     refused + coerced to `strict` on a public node, reported by securityPostureWarnings) and
  *     AIMEAT_AI_SUPERVISORY_NAME/_URL (the AI market-surveillance authority, distinct from the
@@ -31,48 +39,10 @@
  *   v1.3.0 -- 2026-07-14 -- mcpCardCommerceTools: AIMEAT_MCP_CARD_COMMERCE_TOOLS inline|pointer
  *     for the MCP Server Card commerce_tools block (TARGET-034 phase D).
  */
+import { deriveAppHost, derivePortfolioHost, deriveCoHost } from './config-hosts.js';
+import { parseSiteContacts } from './config-site-contacts.js';
 import { loadFileSource } from './services/config-loader.js';
 import { CONFIG_FIELDS, DOT_PATH_TO_ENV, MUTABLE_CONFIG_MAP, parseConfigValue, isImmutable } from './services/config-schema.js';
-/**
- * The people printed on the public pages, from `AIMEAT_SITE_CONTACTS` (a JSON array of
- * `{ name, role, email, phone }`, ordered by who should field the first contact).
- *
- * Falls back to the single-contact vars this replaced, and finally to the operator email, so a
- * node configured before multi-contact keeps its card. An entry without an email is dropped:
- * a "talk to a human" card with no way to reach anyone is worse than no card.
- *
- * Malformed JSON degrades to the fallback and warns rather than refusing to boot — a typo in a
- * marketing contact must never take a node down.
- */
-function parseSiteContacts() {
-    const raw = (process.env.AIMEAT_SITE_CONTACTS ?? '').trim();
-    const clean = (c) => ({
-        name: String(c.name ?? '').trim(),
-        role: String(c.role ?? '').trim(),
-        email: String(c.email ?? '').trim(),
-        phone: String(c.phone ?? '').trim(),
-        linkedin: String(c.linkedin ?? '').trim(),
-    });
-    if (raw) {
-        try {
-            const parsed = JSON.parse(raw);
-            if (Array.isArray(parsed))
-                return parsed.map(c => clean(c)).filter(c => c.email !== '');
-            logger.warn('AIMEAT_SITE_CONTACTS is not a JSON array — ignoring it and falling back');
-        }
-        catch (err) {
-            logger.warn('AIMEAT_SITE_CONTACTS is not valid JSON — ignoring it and falling back', { error: String(err) });
-        }
-    }
-    const single = clean({
-        name: process.env.AIMEAT_SITE_CONTACT_NAME,
-        role: process.env.AIMEAT_SITE_CONTACT_ROLE,
-        email: process.env.AIMEAT_SITE_CONTACT_EMAIL ?? process.env.AIMEAT_OPERATOR_EMAIL,
-        phone: process.env.AIMEAT_SITE_CONTACT_PHONE,
-        linkedin: process.env.AIMEAT_SITE_CONTACT_LINKEDIN,
-    });
-    return single.email ? [single] : [];
-}
 /**
  * True if `baseUrl` points at localhost / loopback / RFC1918 / link-local / IPv6-ULA — i.e. NOT a
  * public host. Drives the default security profile (private host → `local`, public host → `public`).
@@ -100,58 +70,9 @@ function isPrivateHost(baseUrl) {
         return true; // IPv6 unique-local
     return false;
 }
-/**
- * Derive the app-origin host (`apps.<apexHost>`) from a baseUrl. Returns '' for
- * localhost / IP / host-less baseUrls where a public app subdomain makes no sense
- * (the operator can still set AIMEAT_APP_HOST explicitly, e.g. for local testing).
- */
-function deriveAppHost(baseUrl) {
-    let host;
-    // eslint-disable-next-line aimeat/no-silent-catch -- the exception IS the answer here: the input is not of that shape
-    try {
-        host = new URL(baseUrl).hostname.toLowerCase();
-    }
-    catch {
-        return '';
-    }
-    if (!host || host === 'localhost' || /^[\d.]+$/.test(host) || host.endsWith('.localhost'))
-        return '';
-    return `apps.${host}`;
-}
-/** Same derivation for the standalone-portfolio origin (`portfolio.<apexHost>`). */
-function derivePortfolioHost(baseUrl) {
-    const appHost = deriveAppHost(baseUrl);
-    return appHost ? appHost.replace(/^apps\./, 'portfolio.') : '';
-}
-/**
- * Startup posture self-check. When the resolved security profile is `public`, return a list of
- * unsafe-combination warnings so being insecure on the internet is a conscious operator choice,
- * not an accident. Warn-only by contract (the caller logs them) — never throws, so an operator can
- * still run any combination deliberately. Empty list on a `local` node. See security-development-dna.md.
- */
-export function securityPostureWarnings(config) {
-    const w = [];
-    if (config.securityProfile !== 'public')
-        return w;
-    if (config.anonymousMode)
-        w.push('AIMEAT_ANONYMOUS=true — anyone can act as the shared anonymous identity.');
-    if (config.allowPrivateEgress)
-        w.push('AIMEAT_ALLOW_PRIVATE_EGRESS=true — server-side fetches can reach loopback/internal services (SSRF).');
-    if (config.federationOpenJoin)
-        w.push('AIMEAT_FEDERATION_OPEN_JOIN=true — any peer can federate without operator approval.');
-    if (!config.encryptionKey)
-        w.push('AIMEAT_ENCRYPTION_KEY is unset — secrets (AI keys, TOTP) cannot be encrypted at rest.');
-    if (config.corsAllowedOrigins.includes('*'))
-        w.push('AIMEAT_CORS_ALLOWED_ORIGINS=* — with credentials this is a CSRF / data-exfil footgun.');
-    if (config.statsAccess === 'public')
-        w.push('AIMEAT_STATS_ACCESS=public — internal metrics are exposed to anyone.');
-    // Not "you chose something unsafe" but "your choice was not honoured" — the one entry here that
-    // reports a coercion rather than a risk, so an operator who set it never believes it took effect.
-    if (process.env.AIMEAT_AI_LABEL_PUBLIC?.trim().toLowerCase() === 'off') {
-        w.push('AIMEAT_AI_LABEL_PUBLIC=off was REFUSED and reset to `strict` — a publicly reachable node may not hide the visible AI label (EU AI Act Art. 50). Use `light` to label only what the law requires.');
-    }
-    return w;
-}
+// Moved to config-posture.ts when this file hit the line limit. Re-exported so the dozen
+// modules that import it from here keep working; the move was not meant to be visible.
+export { securityPostureWarnings } from './config-posture.js';
 export function loadConfig(options) {
     const { configPath, cliOverrides } = options ?? {};
     // ── Source tracking for provenance ──
@@ -206,6 +127,13 @@ export function loadConfig(options) {
     const rlFederation = Math.max(1, parseInt(process.env.AIMEAT_RL_FEDERATION ?? String(rlGlobal), 10));
     const rlCatalogue = Math.max(1, parseInt(process.env.AIMEAT_RL_CATALOGUE ?? String(rlGlobal), 10));
     const rlAuthChallenge = Math.max(1, parseInt(process.env.AIMEAT_RL_AUTH_CHALLENGE ?? String(rlGlobal), 10));
+    // The agent door: an OPEN endpoint that sends email to a stranger's address. Its window is an
+    // HOUR, not a second, and its default is deliberately small — a person's inbox is the thing
+    // being protected. Raised only where a test needs to make more calls than a human ever would.
+    const rlRegistrationInvites = Math.max(1, parseInt(process.env.AIMEAT_RL_REGISTRATION_INVITES ?? '5', 10));
+    // The home's monetising room. OFF unless an operator has checked that walking in lands somewhere.
+    const homeRoomMonetise = process.env.AIMEAT_HOME_ROOM_MONETISE === 'true';
+    const inactivityNudge = process.env.AIMEAT_INACTIVITY_NUDGE === 'true';
     // ── Security posture (localhost-flexible → public-strict) ──
     // The profile sets safe DEFAULTS; any explicit AIMEAT_* var overrides it. Full rationale + the
     // ten security invariants: docs/coding-guidelines/security-development-dna.md
@@ -222,6 +150,17 @@ export function loadConfig(options) {
     if (process.env.AIMEAT_ALLOW_PRIVATE_EGRESS === undefined) {
         process.env.AIMEAT_ALLOW_PRIVATE_EGRESS = String(allowPrivateEgress);
     }
+    // Runnable app HTML must not execute on the origin that carries the user's session (H-2). The
+    // redirect that moves it to `apps.<apex>` was opt-in, so a node whose operator never met the flag
+    // ran every published app beside the SPA and the isolation existed only where someone had typed
+    // it out. The profile decides instead: a node reachable from the internet isolates apps, a
+    // localhost or personal node does not, having no wildcard DNS to redirect to. An explicit
+    // AIMEAT_APP_ORIGIN_ENABLED still wins, which is why aimeat.io and the E2E suites are unmoved.
+    // A public node that has not provisioned `apps.<domain>` (wildcard DNS + TLS, see
+    // docs/internal/app-origin-deployment.md) sets it to false and keeps the old behaviour.
+    const appOriginEnabled = process.env.AIMEAT_APP_ORIGIN_ENABLED !== undefined
+        ? process.env.AIMEAT_APP_ORIGIN_ENABLED === 'true'
+        : securityProfile === 'public';
     const aiProviderAllowlist = (process.env.AIMEAT_AI_PROVIDER_ALLOWLIST ?? '')
         .split(',').map(s => s.trim().toLowerCase()).filter(Boolean);
     // AI provenance (TARGET-058): ON unless explicitly switched off, and _DETAIL governs what is
@@ -243,11 +182,14 @@ export function loadConfig(options) {
         // App origin: explicit AIMEAT_APP_HOST wins; otherwise derive `apps.<apexHost>`
         // from the baseUrl. Left empty for host-less baseUrls (so nothing breaks in dev).
         appHost: (process.env.AIMEAT_APP_HOST ?? deriveAppHost(process.env.AIMEAT_BASE_URL ?? `http://localhost:${port}`)).trim().toLowerCase(),
-        appOriginEnabled: process.env.AIMEAT_APP_ORIGIN_ENABLED === 'true',
+        appOriginEnabled,
         // Portfolio origin: explicit AIMEAT_PORTFOLIO_HOST wins; otherwise derive
         // `portfolio.<apexHost>` from the baseUrl (empty for host-less baseUrls).
         portfolioHost: (process.env.AIMEAT_PORTFOLIO_HOST ?? derivePortfolioHost(process.env.AIMEAT_BASE_URL ?? `http://localhost:${port}`)).trim().toLowerCase(),
         portfolioOriginEnabled: process.env.AIMEAT_PORTFOLIO_ORIGIN_ENABLED === 'true',
+        // Company origin: {slug}.co.<apex>, same shape as the app origin.
+        coHost: (process.env.AIMEAT_CO_HOST ?? deriveCoHost(process.env.AIMEAT_BASE_URL ?? `http://localhost:${port}`)).trim().toLowerCase(),
+        coOriginEnabled: process.env.AIMEAT_CO_ORIGIN_ENABLED === 'true',
         nodeId: process.env.AIMEAT_NODE_ID ?? 'aimeat-local-001-dev',
         nodeType,
         dbUrl: process.env.DATABASE_URL ?? null,
@@ -271,6 +213,10 @@ export function loadConfig(options) {
         aiLabelPublic,
         aiSupervisoryName: process.env.AIMEAT_AI_SUPERVISORY_NAME ?? '',
         aiSupervisoryUrl: process.env.AIMEAT_AI_SUPERVISORY_URL ?? '',
+        // Code of Practice: from the env, never a constant — the signature is the OPERATOR's, and a
+        // `true` in this file would have every node running this code claim one it never gave.
+        aiCopSections: (process.env.AIMEAT_AI_COP_SECTIONS ?? '').split(',').map(s => s.trim()).filter(Boolean),
+        aiCopSignedOn: (process.env.AIMEAT_AI_COP_SIGNED_ON ?? '').trim(),
         screenshotAutoCapture: process.env.AIMEAT_SCREENSHOT_AUTO === 'true',
         screenshotIntervalMin: parseInt(process.env.AIMEAT_SCREENSHOT_INTERVAL_MIN ?? '15', 10),
         screenshotSettleMs: parseInt(process.env.AIMEAT_SCREENSHOT_SETTLE_MS ?? '6000', 10),
@@ -309,6 +255,7 @@ export function loadConfig(options) {
         minTrustForPaidActions: parseInt(process.env.AIMEAT_MIN_TRUST_PAID_ACTIONS ?? '10', 10),
         appMaxSizeMb: parseInt(process.env.AIMEAT_APP_MAX_SIZE_MB ?? '5', 10),
         maxAppsPerAgent: parseInt(process.env.AIMEAT_MAX_APPS_PER_AGENT ?? '50', 10),
+        appAssetProbe: process.env.AIMEAT_APP_ASSET_PROBE !== 'false',
         agentPortingFeeMorsels: parseInt(process.env.AIMEAT_AGENT_PORTING_FEE ?? '50', 10),
         memoryOverageMorselsPerMbMonth: parseInt(process.env.AIMEAT_MEMORY_OVERAGE_MORSELS ?? '10', 10),
         storageOverageMorselsPerGbMonth: parseInt(process.env.AIMEAT_STORAGE_OVERAGE_MORSELS ?? '100', 10),
@@ -452,6 +399,10 @@ export function loadConfig(options) {
         pushMaxSubscriptionsPerNode: parseInt(process.env.AIMEAT_PUSH_MAX_SUBSCRIPTIONS_PER_NODE ?? '5', 10),
         pushMaxFailures: parseInt(process.env.AIMEAT_PUSH_MAX_FAILURES ?? '3', 10),
         emailRateLimitMin: parseInt(process.env.AIMEAT_EMAIL_RATE_LIMIT_MIN ?? '30', 10),
+        outboundDailyLimit: parseInt(process.env.AIMEAT_OUTBOUND_DAILY_LIMIT ?? '200', 10),
+        finvoiceOperator: process.env.AIMEAT_FINVOICE_OPERATOR ?? '',
+        finvoiceOperatorUrl: process.env.AIMEAT_FINVOICE_OPERATOR_URL ?? null,
+        finvoiceOperatorApiKey: process.env.AIMEAT_FINVOICE_OPERATOR_KEY ?? null,
         eudiwEnabled: process.env.AIMEAT_EUDIW_ENABLED === 'true',
         eudiwClientId: process.env.AIMEAT_EUDIW_CLIENT_ID ?? 'aimeat-verifier-001',
         eudiwRedirectUri: process.env.AIMEAT_EUDIW_REDIRECT_URI ?? '',
@@ -481,6 +432,10 @@ export function loadConfig(options) {
         connectionsEnabled: process.env.AIMEAT_CONNECTIONS_ENABLED === 'true',
         connectGoogleClientId: process.env.AIMEAT_CONNECT_GOOGLE_CLIENT_ID ?? '',
         connectGoogleClientSecret: process.env.AIMEAT_CONNECT_GOOGLE_CLIENT_SECRET ?? '',
+        connectLinkedinClientId: process.env.AIMEAT_CONNECT_LINKEDIN_CLIENT_ID ?? '',
+        connectLinkedinClientSecret: process.env.AIMEAT_CONNECT_LINKEDIN_CLIENT_SECRET ?? '',
+        connectXClientId: process.env.AIMEAT_CONNECT_X_CLIENT_ID ?? '',
+        connectXClientSecret: process.env.AIMEAT_CONNECT_X_CLIENT_SECRET ?? '',
         connectRedirectUri: process.env.AIMEAT_CONNECT_REDIRECT_URI ?? '',
         connectFakeBaseUrl: process.env.AIMEAT_CONNECT_FAKE_BASE_URL ?? '',
         crossFederationEnabled: process.env.AIMEAT_CROSS_FEDERATION_ENABLED !== 'false',
@@ -545,7 +500,8 @@ export function loadConfig(options) {
         mcpEnforceScopes: process.env.AIMEAT_MCP_ENFORCE_SCOPES !== 'false',
         // Ecosystem application (GEAI) scope bounds. Defaults lean read + deposit (ecosystem apps mostly
         // deposit refined data into owner areas). Events/capability scopes are deferred to later chunks.
-        defaultEcoScopes: (process.env.AIMEAT_DEFAULT_ECO_SCOPES ?? 'memory:read,memory:write,knowledge:contribute,organism:read').split(',').map(s => s.trim()),
+        // knowledge:contribute dropped 2026-08-08 — nothing gates on it (see ECO_PRESETS).
+        defaultEcoScopes: (process.env.AIMEAT_DEFAULT_ECO_SCOPES ?? 'memory:read,memory:write,organism:read').split(',').map(s => s.trim()),
         maxEcoScopes: (process.env.AIMEAT_MAX_ECO_SCOPES ?? '*').split(',').map(s => s.trim()),
         // Node Extensions (Sandboxed)
         extensionsEnabled: process.env.AIMEAT_EXTENSIONS_ENABLED !== 'false',
@@ -553,6 +509,13 @@ export function loadConfig(options) {
         extensionTimeoutMs: parseInt(process.env.AIMEAT_EXT_TIMEOUT_MS ?? '5000', 10),
         extensionMaxApiCalls: parseInt(process.env.AIMEAT_EXT_MAX_API_CALLS ?? '500', 10),
         extensionMaxDebitPerCall: parseInt(process.env.AIMEAT_EXT_MAX_DEBIT ?? '100', 10),
+        // Ceiling on a PRICE an action may put on itself in its manifest (commercial.payMorsels).
+        // A price is revenue and the caller must hold the balance, so this is a sanity bound rather
+        // than a spend control: it stops a manifest asking for a number nobody meant to type, and an
+        // agent invoking a capability does not necessarily read the price before it calls. The burn
+        // side (tollMorsels) is bounded by extensionMaxDebitPerCall instead, since a burn takes the
+        // morsels and gives nothing back.
+        extensionMaxPayMorsels: parseInt(process.env.AIMEAT_EXT_MAX_PAY_MORSELS ?? '10000', 10),
         // Morsels burned per metered call when the capability declares no toll of its own. Morsels
         // replenish daily with a hard ceiling, so a non-zero value puts an absolute rate floor under
         // every capability — including money-priced ones, whose only other brake is the buyer's budget.
@@ -656,6 +619,8 @@ export function loadConfig(options) {
         rlFederation,
         rlCatalogue,
         rlAuthChallenge,
+        homeRoomMonetise,
+        inactivityNudge,
         rateLimits: {
             global: { windowMs: 1_000, max: rlGlobal },
             auth: { windowMs: 1_000, max: rlAuth },
@@ -670,6 +635,7 @@ export function loadConfig(options) {
             federation: { windowMs: 1_000, max: rlFederation },
             catalogue: { windowMs: 1_000, max: rlCatalogue },
             authChallenge: { windowMs: 1_000, max: rlAuthChallenge },
+            registrationInvites: { windowMs: 3_600_000, max: rlRegistrationInvites },
             openrouter: { windowMs: 60_000, max: parseInt(process.env.AIMEAT_RL_OPENROUTER ?? '30', 10) },
             roleMultipliers: { operator: 10, owner: 2, agent: 1, anonymous: 0.5 },
         },