airlock-bot 0.0.1 → 0.2.2

package/dist/config/schema.d.ts

@@ -0,0 +1,2034 @@
+import { z } from 'zod';
+export declare const McpServerConfig: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"stdio">;
+    command: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodString, string, string>>>;
+}, "strip", z.ZodTypeAny, {
+    type: "stdio";
+    command: string;
+    args: string[];
+    env?: Record<string, string> | undefined;
+}, {
+    type: "stdio";
+    command: string;
+    args?: string[] | undefined;
+    env?: Record<string, string> | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"sse">;
+    url: z.ZodString;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    type: "sse";
+    headers?: Record<string, string> | undefined;
+}, {
+    url: string;
+    type: "sse";
+    headers?: Record<string, string> | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"http">;
+    url: z.ZodString;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    oauth: z.ZodDefault<z.ZodBoolean>;
+    oauth_callback_port: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    type: "http";
+    oauth: boolean;
+    oauth_callback_port: number;
+    headers?: Record<string, string> | undefined;
+}, {
+    url: string;
+    type: "http";
+    oauth?: boolean | undefined;
+    headers?: Record<string, string> | undefined;
+    oauth_callback_port?: number | undefined;
+}>]>;
+export type McpServerConfig = z.infer<typeof McpServerConfig>;
+export declare const ProviderConfig: z.ZodUnion<[z.ZodLiteral<"builtin">, z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"stdio">;
+    command: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodString, string, string>>>;
+}, "strip", z.ZodTypeAny, {
+    type: "stdio";
+    command: string;
+    args: string[];
+    env?: Record<string, string> | undefined;
+}, {
+    type: "stdio";
+    command: string;
+    args?: string[] | undefined;
+    env?: Record<string, string> | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"sse">;
+    url: z.ZodString;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    type: "sse";
+    headers?: Record<string, string> | undefined;
+}, {
+    url: string;
+    type: "sse";
+    headers?: Record<string, string> | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"http">;
+    url: z.ZodString;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    oauth: z.ZodDefault<z.ZodBoolean>;
+    oauth_callback_port: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    type: "http";
+    oauth: boolean;
+    oauth_callback_port: number;
+    headers?: Record<string, string> | undefined;
+}, {
+    url: string;
+    type: "http";
+    oauth?: boolean | undefined;
+    headers?: Record<string, string> | undefined;
+    oauth_callback_port?: number | undefined;
+}>]>]>;
+export type ProviderConfig = z.infer<typeof ProviderConfig>;
+/** Extract only MCP server configs from the providers map */
+export declare function getMcpConfigs(providers: Record<string, ProviderConfig>): Record<string, McpServerConfig>;
+/** Extract the set of builtin provider names (e.g. "exec", "http") */
+export declare function getBuiltinProviders(providers: Record<string, ProviderConfig>): Set<string>;
+export declare const ToolOverride: z.ZodObject<{
+    description: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    description?: string | undefined;
+}, {
+    description?: string | undefined;
+}>;
+export declare const AgentExecConfig: z.ZodObject<{
+    allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    ask: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    deny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    default_timeout_ms: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    env: Record<string, string>;
+    allow: string[];
+    ask: string[];
+    deny: string[];
+    default_timeout_ms: number;
+}, {
+    env?: Record<string, string> | undefined;
+    allow?: string[] | undefined;
+    ask?: string[] | undefined;
+    deny?: string[] | undefined;
+    default_timeout_ms?: number | undefined;
+}>;
+export type AgentExecConfig = z.infer<typeof AgentExecConfig>;
+export declare const AgentHttpConfig: z.ZodObject<{
+    domain_allowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    max_response_bytes: z.ZodDefault<z.ZodNumber>;
+    timeout_ms: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    domain_allowlist: string[];
+    max_response_bytes: number;
+    timeout_ms: number;
+}, {
+    domain_allowlist?: string[] | undefined;
+    max_response_bytes?: number | undefined;
+    timeout_ms?: number | undefined;
+}>;
+export type AgentHttpConfig = z.infer<typeof AgentHttpConfig>;
+export declare const MiddlewareItemConfig: z.ZodObject<{
+    name: z.ZodEnum<["schema-validator", "rate-limiter", "untrusted-envelope", "strip-query-params", "output-injection-detector", "canary-token-injector", "output-size-limiter", "output-summarizer", "injection-detector", "sensitivity-classifier"]>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    exclude: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    max_requests: z.ZodOptional<z.ZodNumber>;
+    window_ms: z.ZodOptional<z.ZodNumber>;
+    per: z.ZodOptional<z.ZodEnum<["agent", "tool"]>>;
+    mode: z.ZodOptional<z.ZodEnum<["detect", "mangle", "escalate"]>>;
+    backend: z.ZodOptional<z.ZodEnum<["regex", "deberta", "heuristic", "llm"]>>;
+    inference_url: z.ZodOptional<z.ZodString>;
+    threshold: z.ZodOptional<z.ZodNumber>;
+    max_lines: z.ZodOptional<z.ZodNumber>;
+    max_chars: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodOptional<z.ZodString>;
+    threshold_chars: z.ZodOptional<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+    enabled: boolean;
+    model?: string | undefined;
+    tools?: string[] | undefined;
+    exclude?: string[] | undefined;
+    max_requests?: number | undefined;
+    window_ms?: number | undefined;
+    per?: "agent" | "tool" | undefined;
+    mode?: "detect" | "mangle" | "escalate" | undefined;
+    backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+    inference_url?: string | undefined;
+    threshold?: number | undefined;
+    max_lines?: number | undefined;
+    max_chars?: number | undefined;
+    threshold_chars?: number | undefined;
+}, {
+    name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+    model?: string | undefined;
+    tools?: string[] | undefined;
+    enabled?: boolean | undefined;
+    exclude?: string[] | undefined;
+    max_requests?: number | undefined;
+    window_ms?: number | undefined;
+    per?: "agent" | "tool" | undefined;
+    mode?: "detect" | "mangle" | "escalate" | undefined;
+    backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+    inference_url?: string | undefined;
+    threshold?: number | undefined;
+    max_lines?: number | undefined;
+    max_chars?: number | undefined;
+    threshold_chars?: number | undefined;
+}>;
+export type MiddlewareItemConfig = z.infer<typeof MiddlewareItemConfig>;
+export declare const AgentConfig: z.ZodObject<{
+    token: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    extends: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    ask: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    deny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    tool_overrides: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        description?: string | undefined;
+    }, {
+        description?: string | undefined;
+    }>>>;
+    exec: z.ZodDefault<z.ZodObject<{
+        allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        ask: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        deny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        default_timeout_ms: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        env: Record<string, string>;
+        allow: string[];
+        ask: string[];
+        deny: string[];
+        default_timeout_ms: number;
+    }, {
+        env?: Record<string, string> | undefined;
+        allow?: string[] | undefined;
+        ask?: string[] | undefined;
+        deny?: string[] | undefined;
+        default_timeout_ms?: number | undefined;
+    }>>;
+    http: z.ZodDefault<z.ZodObject<{
+        domain_allowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        max_response_bytes: z.ZodDefault<z.ZodNumber>;
+        timeout_ms: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        domain_allowlist: string[];
+        max_response_bytes: number;
+        timeout_ms: number;
+    }, {
+        domain_allowlist?: string[] | undefined;
+        max_response_bytes?: number | undefined;
+        timeout_ms?: number | undefined;
+    }>>;
+    middleware: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodEnum<["schema-validator", "rate-limiter", "untrusted-envelope", "strip-query-params", "output-injection-detector", "canary-token-injector", "output-size-limiter", "output-summarizer", "injection-detector", "sensitivity-classifier"]>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        exclude: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        max_requests: z.ZodOptional<z.ZodNumber>;
+        window_ms: z.ZodOptional<z.ZodNumber>;
+        per: z.ZodOptional<z.ZodEnum<["agent", "tool"]>>;
+        mode: z.ZodOptional<z.ZodEnum<["detect", "mangle", "escalate"]>>;
+        backend: z.ZodOptional<z.ZodEnum<["regex", "deberta", "heuristic", "llm"]>>;
+        inference_url: z.ZodOptional<z.ZodString>;
+        threshold: z.ZodOptional<z.ZodNumber>;
+        max_lines: z.ZodOptional<z.ZodNumber>;
+        max_chars: z.ZodOptional<z.ZodNumber>;
+        model: z.ZodOptional<z.ZodString>;
+        threshold_chars: z.ZodOptional<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+        enabled: boolean;
+        model?: string | undefined;
+        tools?: string[] | undefined;
+        exclude?: string[] | undefined;
+        max_requests?: number | undefined;
+        window_ms?: number | undefined;
+        per?: "agent" | "tool" | undefined;
+        mode?: "detect" | "mangle" | "escalate" | undefined;
+        backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+        inference_url?: string | undefined;
+        threshold?: number | undefined;
+        max_lines?: number | undefined;
+        max_chars?: number | undefined;
+        threshold_chars?: number | undefined;
+    }, {
+        name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+        model?: string | undefined;
+        tools?: string[] | undefined;
+        enabled?: boolean | undefined;
+        exclude?: string[] | undefined;
+        max_requests?: number | undefined;
+        window_ms?: number | undefined;
+        per?: "agent" | "tool" | undefined;
+        mode?: "detect" | "mangle" | "escalate" | undefined;
+        backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+        inference_url?: string | undefined;
+        threshold?: number | undefined;
+        max_lines?: number | undefined;
+        max_chars?: number | undefined;
+        threshold_chars?: number | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    http: {
+        domain_allowlist: string[];
+        max_response_bytes: number;
+        timeout_ms: number;
+    };
+    allow: string[];
+    ask: string[];
+    deny: string[];
+    extends: string[];
+    tool_overrides: Record<string, {
+        description?: string | undefined;
+    }>;
+    exec: {
+        env: Record<string, string>;
+        allow: string[];
+        ask: string[];
+        deny: string[];
+        default_timeout_ms: number;
+    };
+    token?: string | undefined;
+    middleware?: {
+        name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+        enabled: boolean;
+        model?: string | undefined;
+        tools?: string[] | undefined;
+        exclude?: string[] | undefined;
+        max_requests?: number | undefined;
+        window_ms?: number | undefined;
+        per?: "agent" | "tool" | undefined;
+        mode?: "detect" | "mangle" | "escalate" | undefined;
+        backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+        inference_url?: string | undefined;
+        threshold?: number | undefined;
+        max_lines?: number | undefined;
+        max_chars?: number | undefined;
+        threshold_chars?: number | undefined;
+    }[] | undefined;
+}, {
+    http?: {
+        domain_allowlist?: string[] | undefined;
+        max_response_bytes?: number | undefined;
+        timeout_ms?: number | undefined;
+    } | undefined;
+    allow?: string[] | undefined;
+    ask?: string[] | undefined;
+    deny?: string[] | undefined;
+    token?: string | undefined;
+    extends?: string[] | undefined;
+    tool_overrides?: Record<string, {
+        description?: string | undefined;
+    }> | undefined;
+    exec?: {
+        env?: Record<string, string> | undefined;
+        allow?: string[] | undefined;
+        ask?: string[] | undefined;
+        deny?: string[] | undefined;
+        default_timeout_ms?: number | undefined;
+    } | undefined;
+    middleware?: {
+        name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+        model?: string | undefined;
+        tools?: string[] | undefined;
+        enabled?: boolean | undefined;
+        exclude?: string[] | undefined;
+        max_requests?: number | undefined;
+        window_ms?: number | undefined;
+        per?: "agent" | "tool" | undefined;
+        mode?: "detect" | "mangle" | "escalate" | undefined;
+        backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+        inference_url?: string | undefined;
+        threshold?: number | undefined;
+        max_lines?: number | undefined;
+        max_chars?: number | undefined;
+        threshold_chars?: number | undefined;
+    }[] | undefined;
+}>;
+export type AgentConfig = z.infer<typeof AgentConfig>;
+export declare const ProfileConfig: z.ZodObject<{
+    allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    ask: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    allow: string[];
+    ask: string[];
+}, {
+    allow?: string[] | undefined;
+    ask?: string[] | undefined;
+}>;
+export type ProfileConfig = z.infer<typeof ProfileConfig>;
+export declare const ApprovalProviderConfig: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"telegram">;
+    bot_token: z.ZodEffects<z.ZodString, string, string>;
+    chat_id: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    type: "telegram";
+    bot_token: string;
+    chat_id: string;
+}, {
+    type: "telegram";
+    bot_token: string;
+    chat_id: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"openclaw">;
+    gateway_url: z.ZodDefault<z.ZodString>;
+    token: z.ZodEffects<z.ZodString, string, string>;
+    session_key: z.ZodDefault<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "openclaw";
+    token: string;
+    gateway_url: string;
+    session_key: string;
+}, {
+    type: "openclaw";
+    token: string;
+    gateway_url?: string | undefined;
+    session_key?: string | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"slack">;
+    webhook_url: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    type: "slack";
+    webhook_url: string;
+}, {
+    type: "slack";
+    webhook_url: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"webhook">;
+    url: z.ZodEffects<z.ZodString, string, string>;
+    headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    type: "webhook";
+    headers: Record<string, string>;
+}, {
+    url: string;
+    type: "webhook";
+    headers?: Record<string, string> | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"tui">;
+}, "strip", z.ZodTypeAny, {
+    type: "tui";
+}, {
+    type: "tui";
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"macos">;
+}, "strip", z.ZodTypeAny, {
+    type: "macos";
+}, {
+    type: "macos";
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard">;
+    port: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    type: "dashboard";
+    port: number;
+}, {
+    type: "dashboard";
+    port?: number | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"stdio">;
+}, "strip", z.ZodTypeAny, {
+    type: "stdio";
+}, {
+    type: "stdio";
+}>]>;
+export type ApprovalProviderConfig = z.infer<typeof ApprovalProviderConfig>;
+export type HitlProviderConfig = ApprovalProviderConfig;
+export declare const ApprovalsConfig: z.ZodObject<{
+    provider: z.ZodDefault<z.ZodUnion<[z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        type: z.ZodLiteral<"telegram">;
+        bot_token: z.ZodEffects<z.ZodString, string, string>;
+        chat_id: z.ZodEffects<z.ZodString, string, string>;
+    }, "strip", z.ZodTypeAny, {
+        type: "telegram";
+        bot_token: string;
+        chat_id: string;
+    }, {
+        type: "telegram";
+        bot_token: string;
+        chat_id: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"openclaw">;
+        gateway_url: z.ZodDefault<z.ZodString>;
+        token: z.ZodEffects<z.ZodString, string, string>;
+        session_key: z.ZodDefault<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: "openclaw";
+        token: string;
+        gateway_url: string;
+        session_key: string;
+    }, {
+        type: "openclaw";
+        token: string;
+        gateway_url?: string | undefined;
+        session_key?: string | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"slack">;
+        webhook_url: z.ZodEffects<z.ZodString, string, string>;
+    }, "strip", z.ZodTypeAny, {
+        type: "slack";
+        webhook_url: string;
+    }, {
+        type: "slack";
+        webhook_url: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"webhook">;
+        url: z.ZodEffects<z.ZodString, string, string>;
+        headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        url: string;
+        type: "webhook";
+        headers: Record<string, string>;
+    }, {
+        url: string;
+        type: "webhook";
+        headers?: Record<string, string> | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"tui">;
+    }, "strip", z.ZodTypeAny, {
+        type: "tui";
+    }, {
+        type: "tui";
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"macos">;
+    }, "strip", z.ZodTypeAny, {
+        type: "macos";
+    }, {
+        type: "macos";
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"dashboard">;
+        port: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        type: "dashboard";
+        port: number;
+    }, {
+        type: "dashboard";
+        port?: number | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"stdio">;
+    }, "strip", z.ZodTypeAny, {
+        type: "stdio";
+    }, {
+        type: "stdio";
+    }>]>, z.ZodArray<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        type: z.ZodLiteral<"telegram">;
+        bot_token: z.ZodEffects<z.ZodString, string, string>;
+        chat_id: z.ZodEffects<z.ZodString, string, string>;
+    }, "strip", z.ZodTypeAny, {
+        type: "telegram";
+        bot_token: string;
+        chat_id: string;
+    }, {
+        type: "telegram";
+        bot_token: string;
+        chat_id: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"openclaw">;
+        gateway_url: z.ZodDefault<z.ZodString>;
+        token: z.ZodEffects<z.ZodString, string, string>;
+        session_key: z.ZodDefault<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: "openclaw";
+        token: string;
+        gateway_url: string;
+        session_key: string;
+    }, {
+        type: "openclaw";
+        token: string;
+        gateway_url?: string | undefined;
+        session_key?: string | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"slack">;
+        webhook_url: z.ZodEffects<z.ZodString, string, string>;
+    }, "strip", z.ZodTypeAny, {
+        type: "slack";
+        webhook_url: string;
+    }, {
+        type: "slack";
+        webhook_url: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"webhook">;
+        url: z.ZodEffects<z.ZodString, string, string>;
+        headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        url: string;
+        type: "webhook";
+        headers: Record<string, string>;
+    }, {
+        url: string;
+        type: "webhook";
+        headers?: Record<string, string> | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"tui">;
+    }, "strip", z.ZodTypeAny, {
+        type: "tui";
+    }, {
+        type: "tui";
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"macos">;
+    }, "strip", z.ZodTypeAny, {
+        type: "macos";
+    }, {
+        type: "macos";
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"dashboard">;
+        port: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        type: "dashboard";
+        port: number;
+    }, {
+        type: "dashboard";
+        port?: number | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"stdio">;
+    }, "strip", z.ZodTypeAny, {
+        type: "stdio";
+    }, {
+        type: "stdio";
+    }>]>, "many">]>>;
+    timeout_ms: z.ZodDefault<z.ZodNumber>;
+    batch_window_ms: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    timeout_ms: number;
+    provider: {
+        type: "telegram";
+        bot_token: string;
+        chat_id: string;
+    } | {
+        type: "openclaw";
+        token: string;
+        gateway_url: string;
+        session_key: string;
+    } | {
+        type: "slack";
+        webhook_url: string;
+    } | {
+        url: string;
+        type: "webhook";
+        headers: Record<string, string>;
+    } | {
+        type: "tui";
+    } | {
+        type: "macos";
+    } | {
+        type: "dashboard";
+        port: number;
+    } | {
+        type: "stdio";
+    } | ({
+        type: "telegram";
+        bot_token: string;
+        chat_id: string;
+    } | {
+        type: "openclaw";
+        token: string;
+        gateway_url: string;
+        session_key: string;
+    } | {
+        type: "slack";
+        webhook_url: string;
+    } | {
+        url: string;
+        type: "webhook";
+        headers: Record<string, string>;
+    } | {
+        type: "tui";
+    } | {
+        type: "macos";
+    } | {
+        type: "dashboard";
+        port: number;
+    } | {
+        type: "stdio";
+    })[];
+    batch_window_ms: number;
+}, {
+    timeout_ms?: number | undefined;
+    provider?: {
+        type: "telegram";
+        bot_token: string;
+        chat_id: string;
+    } | {
+        type: "openclaw";
+        token: string;
+        gateway_url?: string | undefined;
+        session_key?: string | undefined;
+    } | {
+        type: "slack";
+        webhook_url: string;
+    } | {
+        url: string;
+        type: "webhook";
+        headers?: Record<string, string> | undefined;
+    } | {
+        type: "tui";
+    } | {
+        type: "macos";
+    } | {
+        type: "dashboard";
+        port?: number | undefined;
+    } | {
+        type: "stdio";
+    } | ({
+        type: "telegram";
+        bot_token: string;
+        chat_id: string;
+    } | {
+        type: "openclaw";
+        token: string;
+        gateway_url?: string | undefined;
+        session_key?: string | undefined;
+    } | {
+        type: "slack";
+        webhook_url: string;
+    } | {
+        url: string;
+        type: "webhook";
+        headers?: Record<string, string> | undefined;
+    } | {
+        type: "tui";
+    } | {
+        type: "macos";
+    } | {
+        type: "dashboard";
+        port?: number | undefined;
+    } | {
+        type: "stdio";
+    })[] | undefined;
+    batch_window_ms?: number | undefined;
+}>;
+export type ApprovalsConfig = z.infer<typeof ApprovalsConfig>;
+export type HitlConfig = ApprovalsConfig;
+export declare const SecurityConfig: z.ZodObject<{
+    blocked_hosts: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    allowed_local: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    blocked_hosts: string[];
+    allowed_local: string[];
+}, {
+    blocked_hosts?: string[] | undefined;
+    allowed_local?: string[] | undefined;
+}>;
+export type SecurityConfig = z.infer<typeof SecurityConfig>;
+export declare const AuditConfig: z.ZodObject<{
+    db_path: z.ZodDefault<z.ZodString>;
+    retention_days: z.ZodDefault<z.ZodNumber>;
+    redact_fields: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    db_path: string;
+    retention_days: number;
+    redact_fields: string[];
+}, {
+    db_path?: string | undefined;
+    retention_days?: number | undefined;
+    redact_fields?: string[] | undefined;
+}>;
+export type AuditConfig = z.infer<typeof AuditConfig>;
+export declare const ServerConfig: z.ZodObject<{
+    port: z.ZodDefault<z.ZodNumber>;
+    host: z.ZodDefault<z.ZodString>;
+    api_secret: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, "strip", z.ZodTypeAny, {
+    port: number;
+    host: string;
+    api_secret?: string | undefined;
+}, {
+    port?: number | undefined;
+    host?: string | undefined;
+    api_secret?: string | undefined;
+}>;
+export type ServerConfig = z.infer<typeof ServerConfig>;
+export declare const CliParamConfig: z.ZodObject<{
+    type: z.ZodEnum<["string", "number", "boolean"]>;
+    flag: z.ZodOptional<z.ZodString>;
+    positional: z.ZodDefault<z.ZodBoolean>;
+    required: z.ZodDefault<z.ZodBoolean>;
+    default: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+    description: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "string" | "number" | "boolean";
+    required: boolean;
+    positional: boolean;
+    default?: string | number | boolean | undefined;
+    description?: string | undefined;
+    flag?: string | undefined;
+}, {
+    type: "string" | "number" | "boolean";
+    default?: string | number | boolean | undefined;
+    description?: string | undefined;
+    required?: boolean | undefined;
+    flag?: string | undefined;
+    positional?: boolean | undefined;
+}>;
+export type CliParamConfig = z.infer<typeof CliParamConfig>;
+export declare const CliCommandConfig: z.ZodObject<{
+    exec: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        type: z.ZodEnum<["string", "number", "boolean"]>;
+        flag: z.ZodOptional<z.ZodString>;
+        positional: z.ZodDefault<z.ZodBoolean>;
+        required: z.ZodDefault<z.ZodBoolean>;
+        default: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+        description: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: "string" | "number" | "boolean";
+        required: boolean;
+        positional: boolean;
+        default?: string | number | boolean | undefined;
+        description?: string | undefined;
+        flag?: string | undefined;
+    }, {
+        type: "string" | "number" | "boolean";
+        default?: string | number | boolean | undefined;
+        description?: string | undefined;
+        required?: boolean | undefined;
+        flag?: string | undefined;
+        positional?: boolean | undefined;
+    }>>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    timeout: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    params: Record<string, {
+        type: "string" | "number" | "boolean";
+        required: boolean;
+        positional: boolean;
+        default?: string | number | boolean | undefined;
+        description?: string | undefined;
+        flag?: string | undefined;
+    }>;
+    timeout: number;
+    exec: string;
+    description?: string | undefined;
+    cwd?: string | undefined;
+}, {
+    exec: string;
+    params?: Record<string, {
+        type: "string" | "number" | "boolean";
+        default?: string | number | boolean | undefined;
+        description?: string | undefined;
+        required?: boolean | undefined;
+        flag?: string | undefined;
+        positional?: boolean | undefined;
+    }> | undefined;
+    description?: string | undefined;
+    timeout?: number | undefined;
+    cwd?: string | undefined;
+}>;
+export type CliCommandConfig = z.infer<typeof CliCommandConfig>;
+export declare const CliConfig: z.ZodObject<{
+    discovered: z.ZodOptional<z.ZodString>;
+    shell: z.ZodOptional<z.ZodString>;
+    cwd: z.ZodOptional<z.ZodString>;
+    max_output_bytes: z.ZodDefault<z.ZodNumber>;
+    commands: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        exec: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodEnum<["string", "number", "boolean"]>;
+            flag: z.ZodOptional<z.ZodString>;
+            positional: z.ZodDefault<z.ZodBoolean>;
+            required: z.ZodDefault<z.ZodBoolean>;
+            default: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+            description: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            type: "string" | "number" | "boolean";
+            required: boolean;
+            positional: boolean;
+            default?: string | number | boolean | undefined;
+            description?: string | undefined;
+            flag?: string | undefined;
+        }, {
+            type: "string" | "number" | "boolean";
+            default?: string | number | boolean | undefined;
+            description?: string | undefined;
+            required?: boolean | undefined;
+            flag?: string | undefined;
+            positional?: boolean | undefined;
+        }>>>;
+        cwd: z.ZodOptional<z.ZodString>;
+        timeout: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        params: Record<string, {
+            type: "string" | "number" | "boolean";
+            required: boolean;
+            positional: boolean;
+            default?: string | number | boolean | undefined;
+            description?: string | undefined;
+            flag?: string | undefined;
+        }>;
+        timeout: number;
+        exec: string;
+        description?: string | undefined;
+        cwd?: string | undefined;
+    }, {
+        exec: string;
+        params?: Record<string, {
+            type: "string" | "number" | "boolean";
+            default?: string | number | boolean | undefined;
+            description?: string | undefined;
+            required?: boolean | undefined;
+            flag?: string | undefined;
+            positional?: boolean | undefined;
+        }> | undefined;
+        description?: string | undefined;
+        timeout?: number | undefined;
+        cwd?: string | undefined;
+    }>>>;
+}, "strip", z.ZodTypeAny, {
+    max_output_bytes: number;
+    commands: Record<string, {
+        params: Record<string, {
+            type: "string" | "number" | "boolean";
+            required: boolean;
+            positional: boolean;
+            default?: string | number | boolean | undefined;
+            description?: string | undefined;
+            flag?: string | undefined;
+        }>;
+        timeout: number;
+        exec: string;
+        description?: string | undefined;
+        cwd?: string | undefined;
+    }>;
+    cwd?: string | undefined;
+    discovered?: string | undefined;
+    shell?: string | undefined;
+}, {
+    cwd?: string | undefined;
+    discovered?: string | undefined;
+    shell?: string | undefined;
+    max_output_bytes?: number | undefined;
+    commands?: Record<string, {
+        exec: string;
+        params?: Record<string, {
+            type: "string" | "number" | "boolean";
+            default?: string | number | boolean | undefined;
+            description?: string | undefined;
+            required?: boolean | undefined;
+            flag?: string | undefined;
+            positional?: boolean | undefined;
+        }> | undefined;
+        description?: string | undefined;
+        timeout?: number | undefined;
+        cwd?: string | undefined;
+    }> | undefined;
+}>;
+export type CliConfig = z.infer<typeof CliConfig>;
+export declare const ApiAuthConfig: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"bearer">;
+    token: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    type: "bearer";
+    token: string;
+}, {
+    type: "bearer";
+    token: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"header">;
+    name: z.ZodString;
+    value: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    type: "header";
+    value: string;
+}, {
+    name: string;
+    type: "header";
+    value: string;
+}>]>;
+export type ApiAuthConfig = z.infer<typeof ApiAuthConfig>;
+export declare const ApiConfig: z.ZodObject<{
+    spec: z.ZodString;
+    base_url: z.ZodOptional<z.ZodString>;
+    auth: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        type: z.ZodLiteral<"bearer">;
+        token: z.ZodEffects<z.ZodString, string, string>;
+    }, "strip", z.ZodTypeAny, {
+        type: "bearer";
+        token: string;
+    }, {
+        type: "bearer";
+        token: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"header">;
+        name: z.ZodString;
+        value: z.ZodEffects<z.ZodString, string, string>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        type: "header";
+        value: string;
+    }, {
+        name: string;
+        type: "header";
+        value: string;
+    }>]>>;
+    include: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    exclude: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    timeout_ms: z.ZodDefault<z.ZodNumber>;
+    max_response_bytes: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    max_response_bytes: number;
+    timeout_ms: number;
+    spec: string;
+    exclude?: string[] | undefined;
+    base_url?: string | undefined;
+    auth?: {
+        type: "bearer";
+        token: string;
+    } | {
+        name: string;
+        type: "header";
+        value: string;
+    } | undefined;
+    include?: string[] | undefined;
+}, {
+    spec: string;
+    max_response_bytes?: number | undefined;
+    timeout_ms?: number | undefined;
+    exclude?: string[] | undefined;
+    base_url?: string | undefined;
+    auth?: {
+        type: "bearer";
+        token: string;
+    } | {
+        name: string;
+        type: "header";
+        value: string;
+    } | undefined;
+    include?: string[] | undefined;
+}>;
+export type ApiConfig = z.infer<typeof ApiConfig>;
+export declare const GatewayConfig: z.ZodObject<{
+    providers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodLiteral<"builtin">, z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        type: z.ZodLiteral<"stdio">;
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodString, string, string>>>;
+    }, "strip", z.ZodTypeAny, {
+        type: "stdio";
+        command: string;
+        args: string[];
+        env?: Record<string, string> | undefined;
+    }, {
+        type: "stdio";
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"sse">;
+        url: z.ZodString;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        url: string;
+        type: "sse";
+        headers?: Record<string, string> | undefined;
+    }, {
+        url: string;
+        type: "sse";
+        headers?: Record<string, string> | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"http">;
+        url: z.ZodString;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        oauth: z.ZodDefault<z.ZodBoolean>;
+        oauth_callback_port: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        url: string;
+        type: "http";
+        oauth: boolean;
+        oauth_callback_port: number;
+        headers?: Record<string, string> | undefined;
+    }, {
+        url: string;
+        type: "http";
+        oauth?: boolean | undefined;
+        headers?: Record<string, string> | undefined;
+        oauth_callback_port?: number | undefined;
+    }>]>]>>>;
+    profiles: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        ask: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        allow: string[];
+        ask: string[];
+    }, {
+        allow?: string[] | undefined;
+        ask?: string[] | undefined;
+    }>>>;
+    clis: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        discovered: z.ZodOptional<z.ZodString>;
+        shell: z.ZodOptional<z.ZodString>;
+        cwd: z.ZodOptional<z.ZodString>;
+        max_output_bytes: z.ZodDefault<z.ZodNumber>;
+        commands: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            exec: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+                type: z.ZodEnum<["string", "number", "boolean"]>;
+                flag: z.ZodOptional<z.ZodString>;
+                positional: z.ZodDefault<z.ZodBoolean>;
+                required: z.ZodDefault<z.ZodBoolean>;
+                default: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+                description: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                type: "string" | "number" | "boolean";
+                required: boolean;
+                positional: boolean;
+                default?: string | number | boolean | undefined;
+                description?: string | undefined;
+                flag?: string | undefined;
+            }, {
+                type: "string" | "number" | "boolean";
+                default?: string | number | boolean | undefined;
+                description?: string | undefined;
+                required?: boolean | undefined;
+                flag?: string | undefined;
+                positional?: boolean | undefined;
+            }>>>;
+            cwd: z.ZodOptional<z.ZodString>;
+            timeout: z.ZodDefault<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            params: Record<string, {
+                type: "string" | "number" | "boolean";
+                required: boolean;
+                positional: boolean;
+                default?: string | number | boolean | undefined;
+                description?: string | undefined;
+                flag?: string | undefined;
+            }>;
+            timeout: number;
+            exec: string;
+            description?: string | undefined;
+            cwd?: string | undefined;
+        }, {
+            exec: string;
+            params?: Record<string, {
+                type: "string" | "number" | "boolean";
+                default?: string | number | boolean | undefined;
+                description?: string | undefined;
+                required?: boolean | undefined;
+                flag?: string | undefined;
+                positional?: boolean | undefined;
+            }> | undefined;
+            description?: string | undefined;
+            timeout?: number | undefined;
+            cwd?: string | undefined;
+        }>>>;
+    }, "strip", z.ZodTypeAny, {
+        max_output_bytes: number;
+        commands: Record<string, {
+            params: Record<string, {
+                type: "string" | "number" | "boolean";
+                required: boolean;
+                positional: boolean;
+                default?: string | number | boolean | undefined;
+                description?: string | undefined;
+                flag?: string | undefined;
+            }>;
+            timeout: number;
+            exec: string;
+            description?: string | undefined;
+            cwd?: string | undefined;
+        }>;
+        cwd?: string | undefined;
+        discovered?: string | undefined;
+        shell?: string | undefined;
+    }, {
+        cwd?: string | undefined;
+        discovered?: string | undefined;
+        shell?: string | undefined;
+        max_output_bytes?: number | undefined;
+        commands?: Record<string, {
+            exec: string;
+            params?: Record<string, {
+                type: "string" | "number" | "boolean";
+                default?: string | number | boolean | undefined;
+                description?: string | undefined;
+                required?: boolean | undefined;
+                flag?: string | undefined;
+                positional?: boolean | undefined;
+            }> | undefined;
+            description?: string | undefined;
+            timeout?: number | undefined;
+            cwd?: string | undefined;
+        }> | undefined;
+    }>>>;
+    apis: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        spec: z.ZodString;
+        base_url: z.ZodOptional<z.ZodString>;
+        auth: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+            type: z.ZodLiteral<"bearer">;
+            token: z.ZodEffects<z.ZodString, string, string>;
+        }, "strip", z.ZodTypeAny, {
+            type: "bearer";
+            token: string;
+        }, {
+            type: "bearer";
+            token: string;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"header">;
+            name: z.ZodString;
+            value: z.ZodEffects<z.ZodString, string, string>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            type: "header";
+            value: string;
+        }, {
+            name: string;
+            type: "header";
+            value: string;
+        }>]>>;
+        include: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        exclude: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        timeout_ms: z.ZodDefault<z.ZodNumber>;
+        max_response_bytes: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        max_response_bytes: number;
+        timeout_ms: number;
+        spec: string;
+        exclude?: string[] | undefined;
+        base_url?: string | undefined;
+        auth?: {
+            type: "bearer";
+            token: string;
+        } | {
+            name: string;
+            type: "header";
+            value: string;
+        } | undefined;
+        include?: string[] | undefined;
+    }, {
+        spec: string;
+        max_response_bytes?: number | undefined;
+        timeout_ms?: number | undefined;
+        exclude?: string[] | undefined;
+        base_url?: string | undefined;
+        auth?: {
+            type: "bearer";
+            token: string;
+        } | {
+            name: string;
+            type: "header";
+            value: string;
+        } | undefined;
+        include?: string[] | undefined;
+    }>>>;
+    agents: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        token: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+        extends: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        ask: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        deny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        tool_overrides: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            description: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            description?: string | undefined;
+        }, {
+            description?: string | undefined;
+        }>>>;
+        exec: z.ZodDefault<z.ZodObject<{
+            allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            ask: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            deny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+            default_timeout_ms: z.ZodDefault<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            env: Record<string, string>;
+            allow: string[];
+            ask: string[];
+            deny: string[];
+            default_timeout_ms: number;
+        }, {
+            env?: Record<string, string> | undefined;
+            allow?: string[] | undefined;
+            ask?: string[] | undefined;
+            deny?: string[] | undefined;
+            default_timeout_ms?: number | undefined;
+        }>>;
+        http: z.ZodDefault<z.ZodObject<{
+            domain_allowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            max_response_bytes: z.ZodDefault<z.ZodNumber>;
+            timeout_ms: z.ZodDefault<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            domain_allowlist: string[];
+            max_response_bytes: number;
+            timeout_ms: number;
+        }, {
+            domain_allowlist?: string[] | undefined;
+            max_response_bytes?: number | undefined;
+            timeout_ms?: number | undefined;
+        }>>;
+        middleware: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodEnum<["schema-validator", "rate-limiter", "untrusted-envelope", "strip-query-params", "output-injection-detector", "canary-token-injector", "output-size-limiter", "output-summarizer", "injection-detector", "sensitivity-classifier"]>;
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            exclude: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            max_requests: z.ZodOptional<z.ZodNumber>;
+            window_ms: z.ZodOptional<z.ZodNumber>;
+            per: z.ZodOptional<z.ZodEnum<["agent", "tool"]>>;
+            mode: z.ZodOptional<z.ZodEnum<["detect", "mangle", "escalate"]>>;
+            backend: z.ZodOptional<z.ZodEnum<["regex", "deberta", "heuristic", "llm"]>>;
+            inference_url: z.ZodOptional<z.ZodString>;
+            threshold: z.ZodOptional<z.ZodNumber>;
+            max_lines: z.ZodOptional<z.ZodNumber>;
+            max_chars: z.ZodOptional<z.ZodNumber>;
+            model: z.ZodOptional<z.ZodString>;
+            threshold_chars: z.ZodOptional<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+            enabled: boolean;
+            model?: string | undefined;
+            tools?: string[] | undefined;
+            exclude?: string[] | undefined;
+            max_requests?: number | undefined;
+            window_ms?: number | undefined;
+            per?: "agent" | "tool" | undefined;
+            mode?: "detect" | "mangle" | "escalate" | undefined;
+            backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+            inference_url?: string | undefined;
+            threshold?: number | undefined;
+            max_lines?: number | undefined;
+            max_chars?: number | undefined;
+            threshold_chars?: number | undefined;
+        }, {
+            name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+            model?: string | undefined;
+            tools?: string[] | undefined;
+            enabled?: boolean | undefined;
+            exclude?: string[] | undefined;
+            max_requests?: number | undefined;
+            window_ms?: number | undefined;
+            per?: "agent" | "tool" | undefined;
+            mode?: "detect" | "mangle" | "escalate" | undefined;
+            backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+            inference_url?: string | undefined;
+            threshold?: number | undefined;
+            max_lines?: number | undefined;
+            max_chars?: number | undefined;
+            threshold_chars?: number | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        http: {
+            domain_allowlist: string[];
+            max_response_bytes: number;
+            timeout_ms: number;
+        };
+        allow: string[];
+        ask: string[];
+        deny: string[];
+        extends: string[];
+        tool_overrides: Record<string, {
+            description?: string | undefined;
+        }>;
+        exec: {
+            env: Record<string, string>;
+            allow: string[];
+            ask: string[];
+            deny: string[];
+            default_timeout_ms: number;
+        };
+        token?: string | undefined;
+        middleware?: {
+            name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+            enabled: boolean;
+            model?: string | undefined;
+            tools?: string[] | undefined;
+            exclude?: string[] | undefined;
+            max_requests?: number | undefined;
+            window_ms?: number | undefined;
+            per?: "agent" | "tool" | undefined;
+            mode?: "detect" | "mangle" | "escalate" | undefined;
+            backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+            inference_url?: string | undefined;
+            threshold?: number | undefined;
+            max_lines?: number | undefined;
+            max_chars?: number | undefined;
+            threshold_chars?: number | undefined;
+        }[] | undefined;
+    }, {
+        http?: {
+            domain_allowlist?: string[] | undefined;
+            max_response_bytes?: number | undefined;
+            timeout_ms?: number | undefined;
+        } | undefined;
+        allow?: string[] | undefined;
+        ask?: string[] | undefined;
+        deny?: string[] | undefined;
+        token?: string | undefined;
+        extends?: string[] | undefined;
+        tool_overrides?: Record<string, {
+            description?: string | undefined;
+        }> | undefined;
+        exec?: {
+            env?: Record<string, string> | undefined;
+            allow?: string[] | undefined;
+            ask?: string[] | undefined;
+            deny?: string[] | undefined;
+            default_timeout_ms?: number | undefined;
+        } | undefined;
+        middleware?: {
+            name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+            model?: string | undefined;
+            tools?: string[] | undefined;
+            enabled?: boolean | undefined;
+            exclude?: string[] | undefined;
+            max_requests?: number | undefined;
+            window_ms?: number | undefined;
+            per?: "agent" | "tool" | undefined;
+            mode?: "detect" | "mangle" | "escalate" | undefined;
+            backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+            inference_url?: string | undefined;
+            threshold?: number | undefined;
+            max_lines?: number | undefined;
+            max_chars?: number | undefined;
+            threshold_chars?: number | undefined;
+        }[] | undefined;
+    }>>>;
+    approvals: z.ZodDefault<z.ZodObject<{
+        provider: z.ZodDefault<z.ZodUnion<[z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+            type: z.ZodLiteral<"telegram">;
+            bot_token: z.ZodEffects<z.ZodString, string, string>;
+            chat_id: z.ZodEffects<z.ZodString, string, string>;
+        }, "strip", z.ZodTypeAny, {
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        }, {
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"openclaw">;
+            gateway_url: z.ZodDefault<z.ZodString>;
+            token: z.ZodEffects<z.ZodString, string, string>;
+            session_key: z.ZodDefault<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            type: "openclaw";
+            token: string;
+            gateway_url: string;
+            session_key: string;
+        }, {
+            type: "openclaw";
+            token: string;
+            gateway_url?: string | undefined;
+            session_key?: string | undefined;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"slack">;
+            webhook_url: z.ZodEffects<z.ZodString, string, string>;
+        }, "strip", z.ZodTypeAny, {
+            type: "slack";
+            webhook_url: string;
+        }, {
+            type: "slack";
+            webhook_url: string;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"webhook">;
+            url: z.ZodEffects<z.ZodString, string, string>;
+            headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            url: string;
+            type: "webhook";
+            headers: Record<string, string>;
+        }, {
+            url: string;
+            type: "webhook";
+            headers?: Record<string, string> | undefined;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"tui">;
+        }, "strip", z.ZodTypeAny, {
+            type: "tui";
+        }, {
+            type: "tui";
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"macos">;
+        }, "strip", z.ZodTypeAny, {
+            type: "macos";
+        }, {
+            type: "macos";
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"dashboard">;
+            port: z.ZodDefault<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            type: "dashboard";
+            port: number;
+        }, {
+            type: "dashboard";
+            port?: number | undefined;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"stdio">;
+        }, "strip", z.ZodTypeAny, {
+            type: "stdio";
+        }, {
+            type: "stdio";
+        }>]>, z.ZodArray<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+            type: z.ZodLiteral<"telegram">;
+            bot_token: z.ZodEffects<z.ZodString, string, string>;
+            chat_id: z.ZodEffects<z.ZodString, string, string>;
+        }, "strip", z.ZodTypeAny, {
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        }, {
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"openclaw">;
+            gateway_url: z.ZodDefault<z.ZodString>;
+            token: z.ZodEffects<z.ZodString, string, string>;
+            session_key: z.ZodDefault<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            type: "openclaw";
+            token: string;
+            gateway_url: string;
+            session_key: string;
+        }, {
+            type: "openclaw";
+            token: string;
+            gateway_url?: string | undefined;
+            session_key?: string | undefined;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"slack">;
+            webhook_url: z.ZodEffects<z.ZodString, string, string>;
+        }, "strip", z.ZodTypeAny, {
+            type: "slack";
+            webhook_url: string;
+        }, {
+            type: "slack";
+            webhook_url: string;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"webhook">;
+            url: z.ZodEffects<z.ZodString, string, string>;
+            headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            url: string;
+            type: "webhook";
+            headers: Record<string, string>;
+        }, {
+            url: string;
+            type: "webhook";
+            headers?: Record<string, string> | undefined;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"tui">;
+        }, "strip", z.ZodTypeAny, {
+            type: "tui";
+        }, {
+            type: "tui";
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"macos">;
+        }, "strip", z.ZodTypeAny, {
+            type: "macos";
+        }, {
+            type: "macos";
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"dashboard">;
+            port: z.ZodDefault<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            type: "dashboard";
+            port: number;
+        }, {
+            type: "dashboard";
+            port?: number | undefined;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"stdio">;
+        }, "strip", z.ZodTypeAny, {
+            type: "stdio";
+        }, {
+            type: "stdio";
+        }>]>, "many">]>>;
+        timeout_ms: z.ZodDefault<z.ZodNumber>;
+        batch_window_ms: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        timeout_ms: number;
+        provider: {
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        } | {
+            type: "openclaw";
+            token: string;
+            gateway_url: string;
+            session_key: string;
+        } | {
+            type: "slack";
+            webhook_url: string;
+        } | {
+            url: string;
+            type: "webhook";
+            headers: Record<string, string>;
+        } | {
+            type: "tui";
+        } | {
+            type: "macos";
+        } | {
+            type: "dashboard";
+            port: number;
+        } | {
+            type: "stdio";
+        } | ({
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        } | {
+            type: "openclaw";
+            token: string;
+            gateway_url: string;
+            session_key: string;
+        } | {
+            type: "slack";
+            webhook_url: string;
+        } | {
+            url: string;
+            type: "webhook";
+            headers: Record<string, string>;
+        } | {
+            type: "tui";
+        } | {
+            type: "macos";
+        } | {
+            type: "dashboard";
+            port: number;
+        } | {
+            type: "stdio";
+        })[];
+        batch_window_ms: number;
+    }, {
+        timeout_ms?: number | undefined;
+        provider?: {
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        } | {
+            type: "openclaw";
+            token: string;
+            gateway_url?: string | undefined;
+            session_key?: string | undefined;
+        } | {
+            type: "slack";
+            webhook_url: string;
+        } | {
+            url: string;
+            type: "webhook";
+            headers?: Record<string, string> | undefined;
+        } | {
+            type: "tui";
+        } | {
+            type: "macos";
+        } | {
+            type: "dashboard";
+            port?: number | undefined;
+        } | {
+            type: "stdio";
+        } | ({
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        } | {
+            type: "openclaw";
+            token: string;
+            gateway_url?: string | undefined;
+            session_key?: string | undefined;
+        } | {
+            type: "slack";
+            webhook_url: string;
+        } | {
+            url: string;
+            type: "webhook";
+            headers?: Record<string, string> | undefined;
+        } | {
+            type: "tui";
+        } | {
+            type: "macos";
+        } | {
+            type: "dashboard";
+            port?: number | undefined;
+        } | {
+            type: "stdio";
+        })[] | undefined;
+        batch_window_ms?: number | undefined;
+    }>>;
+    security: z.ZodDefault<z.ZodObject<{
+        blocked_hosts: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        allowed_local: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        blocked_hosts: string[];
+        allowed_local: string[];
+    }, {
+        blocked_hosts?: string[] | undefined;
+        allowed_local?: string[] | undefined;
+    }>>;
+    audit: z.ZodDefault<z.ZodObject<{
+        db_path: z.ZodDefault<z.ZodString>;
+        retention_days: z.ZodDefault<z.ZodNumber>;
+        redact_fields: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        db_path: string;
+        retention_days: number;
+        redact_fields: string[];
+    }, {
+        db_path?: string | undefined;
+        retention_days?: number | undefined;
+        redact_fields?: string[] | undefined;
+    }>>;
+    server: z.ZodDefault<z.ZodObject<{
+        port: z.ZodDefault<z.ZodNumber>;
+        host: z.ZodDefault<z.ZodString>;
+        api_secret: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    }, "strip", z.ZodTypeAny, {
+        port: number;
+        host: string;
+        api_secret?: string | undefined;
+    }, {
+        port?: number | undefined;
+        host?: string | undefined;
+        api_secret?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    providers: Record<string, {
+        type: "stdio";
+        command: string;
+        args: string[];
+        env?: Record<string, string> | undefined;
+    } | {
+        url: string;
+        type: "sse";
+        headers?: Record<string, string> | undefined;
+    } | {
+        url: string;
+        type: "http";
+        oauth: boolean;
+        oauth_callback_port: number;
+        headers?: Record<string, string> | undefined;
+    } | "builtin">;
+    profiles: Record<string, {
+        allow: string[];
+        ask: string[];
+    }>;
+    clis: Record<string, {
+        max_output_bytes: number;
+        commands: Record<string, {
+            params: Record<string, {
+                type: "string" | "number" | "boolean";
+                required: boolean;
+                positional: boolean;
+                default?: string | number | boolean | undefined;
+                description?: string | undefined;
+                flag?: string | undefined;
+            }>;
+            timeout: number;
+            exec: string;
+            description?: string | undefined;
+            cwd?: string | undefined;
+        }>;
+        cwd?: string | undefined;
+        discovered?: string | undefined;
+        shell?: string | undefined;
+    }>;
+    apis: Record<string, {
+        max_response_bytes: number;
+        timeout_ms: number;
+        spec: string;
+        exclude?: string[] | undefined;
+        base_url?: string | undefined;
+        auth?: {
+            type: "bearer";
+            token: string;
+        } | {
+            name: string;
+            type: "header";
+            value: string;
+        } | undefined;
+        include?: string[] | undefined;
+    }>;
+    agents: Record<string, {
+        http: {
+            domain_allowlist: string[];
+            max_response_bytes: number;
+            timeout_ms: number;
+        };
+        allow: string[];
+        ask: string[];
+        deny: string[];
+        extends: string[];
+        tool_overrides: Record<string, {
+            description?: string | undefined;
+        }>;
+        exec: {
+            env: Record<string, string>;
+            allow: string[];
+            ask: string[];
+            deny: string[];
+            default_timeout_ms: number;
+        };
+        token?: string | undefined;
+        middleware?: {
+            name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+            enabled: boolean;
+            model?: string | undefined;
+            tools?: string[] | undefined;
+            exclude?: string[] | undefined;
+            max_requests?: number | undefined;
+            window_ms?: number | undefined;
+            per?: "agent" | "tool" | undefined;
+            mode?: "detect" | "mangle" | "escalate" | undefined;
+            backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+            inference_url?: string | undefined;
+            threshold?: number | undefined;
+            max_lines?: number | undefined;
+            max_chars?: number | undefined;
+            threshold_chars?: number | undefined;
+        }[] | undefined;
+    }>;
+    approvals: {
+        timeout_ms: number;
+        provider: {
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        } | {
+            type: "openclaw";
+            token: string;
+            gateway_url: string;
+            session_key: string;
+        } | {
+            type: "slack";
+            webhook_url: string;
+        } | {
+            url: string;
+            type: "webhook";
+            headers: Record<string, string>;
+        } | {
+            type: "tui";
+        } | {
+            type: "macos";
+        } | {
+            type: "dashboard";
+            port: number;
+        } | {
+            type: "stdio";
+        } | ({
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        } | {
+            type: "openclaw";
+            token: string;
+            gateway_url: string;
+            session_key: string;
+        } | {
+            type: "slack";
+            webhook_url: string;
+        } | {
+            url: string;
+            type: "webhook";
+            headers: Record<string, string>;
+        } | {
+            type: "tui";
+        } | {
+            type: "macos";
+        } | {
+            type: "dashboard";
+            port: number;
+        } | {
+            type: "stdio";
+        })[];
+        batch_window_ms: number;
+    };
+    security: {
+        blocked_hosts: string[];
+        allowed_local: string[];
+    };
+    audit: {
+        db_path: string;
+        retention_days: number;
+        redact_fields: string[];
+    };
+    server: {
+        port: number;
+        host: string;
+        api_secret?: string | undefined;
+    };
+}, {
+    providers?: Record<string, {
+        type: "stdio";
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    } | {
+        url: string;
+        type: "sse";
+        headers?: Record<string, string> | undefined;
+    } | {
+        url: string;
+        type: "http";
+        oauth?: boolean | undefined;
+        headers?: Record<string, string> | undefined;
+        oauth_callback_port?: number | undefined;
+    } | "builtin"> | undefined;
+    profiles?: Record<string, {
+        allow?: string[] | undefined;
+        ask?: string[] | undefined;
+    }> | undefined;
+    clis?: Record<string, {
+        cwd?: string | undefined;
+        discovered?: string | undefined;
+        shell?: string | undefined;
+        max_output_bytes?: number | undefined;
+        commands?: Record<string, {
+            exec: string;
+            params?: Record<string, {
+                type: "string" | "number" | "boolean";
+                default?: string | number | boolean | undefined;
+                description?: string | undefined;
+                required?: boolean | undefined;
+                flag?: string | undefined;
+                positional?: boolean | undefined;
+            }> | undefined;
+            description?: string | undefined;
+            timeout?: number | undefined;
+            cwd?: string | undefined;
+        }> | undefined;
+    }> | undefined;
+    apis?: Record<string, {
+        spec: string;
+        max_response_bytes?: number | undefined;
+        timeout_ms?: number | undefined;
+        exclude?: string[] | undefined;
+        base_url?: string | undefined;
+        auth?: {
+            type: "bearer";
+            token: string;
+        } | {
+            name: string;
+            type: "header";
+            value: string;
+        } | undefined;
+        include?: string[] | undefined;
+    }> | undefined;
+    agents?: Record<string, {
+        http?: {
+            domain_allowlist?: string[] | undefined;
+            max_response_bytes?: number | undefined;
+            timeout_ms?: number | undefined;
+        } | undefined;
+        allow?: string[] | undefined;
+        ask?: string[] | undefined;
+        deny?: string[] | undefined;
+        token?: string | undefined;
+        extends?: string[] | undefined;
+        tool_overrides?: Record<string, {
+            description?: string | undefined;
+        }> | undefined;
+        exec?: {
+            env?: Record<string, string> | undefined;
+            allow?: string[] | undefined;
+            ask?: string[] | undefined;
+            deny?: string[] | undefined;
+            default_timeout_ms?: number | undefined;
+        } | undefined;
+        middleware?: {
+            name: "schema-validator" | "rate-limiter" | "untrusted-envelope" | "strip-query-params" | "output-injection-detector" | "canary-token-injector" | "output-size-limiter" | "output-summarizer" | "injection-detector" | "sensitivity-classifier";
+            model?: string | undefined;
+            tools?: string[] | undefined;
+            enabled?: boolean | undefined;
+            exclude?: string[] | undefined;
+            max_requests?: number | undefined;
+            window_ms?: number | undefined;
+            per?: "agent" | "tool" | undefined;
+            mode?: "detect" | "mangle" | "escalate" | undefined;
+            backend?: "regex" | "deberta" | "heuristic" | "llm" | undefined;
+            inference_url?: string | undefined;
+            threshold?: number | undefined;
+            max_lines?: number | undefined;
+            max_chars?: number | undefined;
+            threshold_chars?: number | undefined;
+        }[] | undefined;
+    }> | undefined;
+    approvals?: {
+        timeout_ms?: number | undefined;
+        provider?: {
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        } | {
+            type: "openclaw";
+            token: string;
+            gateway_url?: string | undefined;
+            session_key?: string | undefined;
+        } | {
+            type: "slack";
+            webhook_url: string;
+        } | {
+            url: string;
+            type: "webhook";
+            headers?: Record<string, string> | undefined;
+        } | {
+            type: "tui";
+        } | {
+            type: "macos";
+        } | {
+            type: "dashboard";
+            port?: number | undefined;
+        } | {
+            type: "stdio";
+        } | ({
+            type: "telegram";
+            bot_token: string;
+            chat_id: string;
+        } | {
+            type: "openclaw";
+            token: string;
+            gateway_url?: string | undefined;
+            session_key?: string | undefined;
+        } | {
+            type: "slack";
+            webhook_url: string;
+        } | {
+            url: string;
+            type: "webhook";
+            headers?: Record<string, string> | undefined;
+        } | {
+            type: "tui";
+        } | {
+            type: "macos";
+        } | {
+            type: "dashboard";
+            port?: number | undefined;
+        } | {
+            type: "stdio";
+        })[] | undefined;
+        batch_window_ms?: number | undefined;
+    } | undefined;
+    security?: {
+        blocked_hosts?: string[] | undefined;
+        allowed_local?: string[] | undefined;
+    } | undefined;
+    audit?: {
+        db_path?: string | undefined;
+        retention_days?: number | undefined;
+        redact_fields?: string[] | undefined;
+    } | undefined;
+    server?: {
+        port?: number | undefined;
+        host?: string | undefined;
+        api_secret?: string | undefined;
+    } | undefined;
+}>;
+export type GatewayConfig = z.infer<typeof GatewayConfig>;
+//# sourceMappingURL=schema.d.ts.map