openclaw-cortex 3.4.0 → 3.5.0

package/dist/plugin-sdk/config/types.hooks.d.ts

@@ -0,0 +1,134 @@
+export type HookMappingMatch = {
+    path?: string;
+    source?: string;
+};
+export type HookMappingTransform = {
+    module: string;
+    export?: string;
+};
+export type HookMappingConfig = {
+    id?: string;
+    match?: HookMappingMatch;
+    action?: "wake" | "agent";
+    wakeMode?: "now" | "next-heartbeat";
+    name?: string;
+    /** Route this hook to a specific agent (unknown ids fall back to the default agent). */
+    agentId?: string;
+    sessionKey?: string;
+    messageTemplate?: string;
+    textTemplate?: string;
+    deliver?: boolean;
+    /** DANGEROUS: Disable external content safety wrapping for this hook. */
+    allowUnsafeExternalContent?: boolean;
+    channel?: "last" | "whatsapp" | "telegram" | "discord" | "irc" | "googlechat" | "slack" | "signal" | "imessage" | "msteams";
+    to?: string;
+    /** Override model for this hook (provider/model or alias). */
+    model?: string;
+    thinking?: string;
+    timeoutSeconds?: number;
+    transform?: HookMappingTransform;
+};
+export type HooksGmailTailscaleMode = "off" | "serve" | "funnel";
+export type HooksGmailConfig = {
+    account?: string;
+    label?: string;
+    topic?: string;
+    subscription?: string;
+    pushToken?: string;
+    hookUrl?: string;
+    includeBody?: boolean;
+    maxBytes?: number;
+    renewEveryMinutes?: number;
+    /** DANGEROUS: Disable external content safety wrapping for Gmail hooks. */
+    allowUnsafeExternalContent?: boolean;
+    serve?: {
+        bind?: string;
+        port?: number;
+        path?: string;
+    };
+    tailscale?: {
+        mode?: HooksGmailTailscaleMode;
+        path?: string;
+        /** Optional tailscale serve/funnel target (port, host:port, or full URL). */
+        target?: string;
+    };
+    /** Optional model override for Gmail hook processing (provider/model or alias). */
+    model?: string;
+    /** Optional thinking level override for Gmail hook processing. */
+    thinking?: "off" | "minimal" | "low" | "medium" | "high";
+};
+export type InternalHookHandlerConfig = {
+    /** Event key to listen for (e.g., 'command:new', 'session:start') */
+    event: string;
+    /** Path to handler module (workspace-relative) */
+    module: string;
+    /** Export name from module (default: 'default') */
+    export?: string;
+};
+export type HookConfig = {
+    enabled?: boolean;
+    env?: Record<string, string>;
+    [key: string]: unknown;
+};
+export type HookInstallRecord = {
+    source: "npm" | "archive" | "path";
+    spec?: string;
+    sourcePath?: string;
+    installPath?: string;
+    version?: string;
+    resolvedName?: string;
+    resolvedVersion?: string;
+    resolvedSpec?: string;
+    integrity?: string;
+    shasum?: string;
+    resolvedAt?: string;
+    installedAt?: string;
+    hooks?: string[];
+};
+export type InternalHooksConfig = {
+    /** Enable hooks system */
+    enabled?: boolean;
+    /** Legacy: List of internal hook handlers to register (still supported) */
+    handlers?: InternalHookHandlerConfig[];
+    /** Per-hook configuration overrides */
+    entries?: Record<string, HookConfig>;
+    /** Load configuration */
+    load?: {
+        /** Additional hook directories to scan */
+        extraDirs?: string[];
+    };
+    /** Install records for hook packs or hooks */
+    installs?: Record<string, HookInstallRecord>;
+};
+export type HooksConfig = {
+    enabled?: boolean;
+    path?: string;
+    token?: string;
+    /**
+     * Default session key used for hook agent runs when no request/mapping session key is used.
+     * If omitted, OpenClaw generates `hook:<uuid>` per request.
+     */
+    defaultSessionKey?: string;
+    /**
+     * Allow `sessionKey` from external `/hooks/agent` request payloads.
+     * Default: false.
+     */
+    allowRequestSessionKey?: boolean;
+    /**
+     * Optional allowlist for explicit session keys (request + mapping). Example: ["hook:"].
+     * Empty/omitted means no prefix restriction.
+     */
+    allowedSessionKeyPrefixes?: string[];
+    /**
+     * Restrict explicit hook `agentId` routing to these agent ids.
+     * Omit or include `*` to allow any agent. Set `[]` to deny all explicit `agentId` routing.
+     */
+    allowedAgentIds?: string[];
+    maxBodyBytes?: number;
+    presets?: string[];
+    transformsDir?: string;
+    mappings?: HookMappingConfig[];
+    gmail?: HooksGmailConfig;
+    /** Internal agent event hooks */
+    internal?: InternalHooksConfig;
+};

package/dist/plugin-sdk/config/types.imessage.d.ts

@@ -0,0 +1,77 @@
+import type { BlockStreamingCoalesceConfig, DmPolicy, GroupPolicy, MarkdownConfig } from "./types.base.js";
+import type { ChannelHeartbeatVisibilityConfig } from "./types.channels.js";
+import type { DmConfig } from "./types.messages.js";
+import type { GroupToolPolicyBySenderConfig, GroupToolPolicyConfig } from "./types.tools.js";
+export type IMessageAccountConfig = {
+    /** Optional display name for this account (used in CLI/UI lists). */
+    name?: string;
+    /** Optional provider capability tags used for agent/runtime guidance. */
+    capabilities?: string[];
+    /** Markdown formatting overrides (tables). */
+    markdown?: MarkdownConfig;
+    /** Allow channel-initiated config writes (default: true). */
+    configWrites?: boolean;
+    /** If false, do not start this iMessage account. Default: true. */
+    enabled?: boolean;
+    /** imsg CLI binary path (default: imsg). */
+    cliPath?: string;
+    /** Optional Messages db path override. */
+    dbPath?: string;
+    /** Remote SSH host token for SCP attachment fetches (`host` or `user@host`). */
+    remoteHost?: string;
+    /** Optional default send service (imessage|sms|auto). */
+    service?: "imessage" | "sms" | "auto";
+    /** Optional default region (used when sending SMS). */
+    region?: string;
+    /** Direct message access policy (default: pairing). */
+    dmPolicy?: DmPolicy;
+    /** Optional allowlist for inbound handles or chat_id targets. */
+    allowFrom?: Array<string | number>;
+    /** Default delivery target for CLI --deliver when no explicit --reply-to is provided. */
+    defaultTo?: string;
+    /** Optional allowlist for group senders or chat_id targets. */
+    groupAllowFrom?: Array<string | number>;
+    /**
+     * Controls how group messages are handled:
+     * - "open": groups bypass allowFrom; mention-gating applies
+     * - "disabled": block all group messages entirely
+     * - "allowlist": only allow group messages from senders in groupAllowFrom/allowFrom
+     */
+    groupPolicy?: GroupPolicy;
+    /** Max group messages to keep as history context (0 disables). */
+    historyLimit?: number;
+    /** Max DM turns to keep as history context. */
+    dmHistoryLimit?: number;
+    /** Per-DM config overrides keyed by user ID. */
+    dms?: Record<string, DmConfig>;
+    /** Include attachments + reactions in watch payloads. */
+    includeAttachments?: boolean;
+    /** Allowed local iMessage attachment roots (supports single-segment `*` wildcards). */
+    attachmentRoots?: string[];
+    /** Allowed remote iMessage attachment roots for SCP fetches (supports `*`). */
+    remoteAttachmentRoots?: string[];
+    /** Max outbound media size in MB. */
+    mediaMaxMb?: number;
+    /** Timeout for probe/RPC operations in milliseconds (default: 10000). */
+    probeTimeoutMs?: number;
+    /** Outbound text chunk size (chars). Default: 4000. */
+    textChunkLimit?: number;
+    /** Chunking mode: "length" (default) splits by size; "newline" splits on every newline. */
+    chunkMode?: "length" | "newline";
+    blockStreaming?: boolean;
+    /** Merge streamed block replies before sending. */
+    blockStreamingCoalesce?: BlockStreamingCoalesceConfig;
+    groups?: Record<string, {
+        requireMention?: boolean;
+        tools?: GroupToolPolicyConfig;
+        toolsBySender?: GroupToolPolicyBySenderConfig;
+    }>;
+    /** Heartbeat visibility settings for this channel. */
+    heartbeat?: ChannelHeartbeatVisibilityConfig;
+    /** Outbound response prefix override for this channel/account. */
+    responsePrefix?: string;
+};
+export type IMessageConfig = {
+    /** Optional per-account iMessage configuration (multi-account). */
+    accounts?: Record<string, IMessageAccountConfig>;
+} & IMessageAccountConfig;

package/dist/plugin-sdk/config/types.irc.d.ts

@@ -0,0 +1,98 @@
+import type { BlockStreamingCoalesceConfig, DmPolicy, GroupPolicy, MarkdownConfig } from "./types.base.js";
+import type { ChannelHeartbeatVisibilityConfig } from "./types.channels.js";
+import type { DmConfig } from "./types.messages.js";
+import type { GroupToolPolicyBySenderConfig, GroupToolPolicyConfig } from "./types.tools.js";
+export type IrcAccountConfig = {
+    /** Optional display name for this account (used in CLI/UI lists). */
+    name?: string;
+    /** Optional provider capability tags used for agent/runtime guidance. */
+    capabilities?: string[];
+    /** Markdown formatting overrides (tables). */
+    markdown?: MarkdownConfig;
+    /** Allow channel-initiated config writes (default: true). */
+    configWrites?: boolean;
+    /** If false, do not start this IRC account. Default: true. */
+    enabled?: boolean;
+    /** IRC server hostname (example: irc.libera.chat). */
+    host?: string;
+    /** IRC server port (default: 6697 with TLS, otherwise 6667). */
+    port?: number;
+    /** Use TLS for IRC connection (default: true). */
+    tls?: boolean;
+    /** IRC nickname to identify this bot. */
+    nick?: string;
+    /** IRC USER field username (defaults to nick). */
+    username?: string;
+    /** IRC USER field realname (default: OpenClaw). */
+    realname?: string;
+    /** Optional IRC server password (sensitive). */
+    password?: string;
+    /** Optional file path containing IRC server password. */
+    passwordFile?: string;
+    /** Optional NickServ identify/register settings. */
+    nickserv?: {
+        /** Enable NickServ identify/register after connect (default: enabled when password is set). */
+        enabled?: boolean;
+        /** NickServ service nick (default: NickServ). */
+        service?: string;
+        /** NickServ password (sensitive). */
+        password?: string;
+        /** Optional file path containing NickServ password. */
+        passwordFile?: string;
+        /** If true, send NickServ REGISTER on connect. */
+        register?: boolean;
+        /** Email used with NickServ REGISTER. */
+        registerEmail?: string;
+    };
+    /** Auto-join channel list at connect (example: ["#openclaw"]). */
+    channels?: string[];
+    /** Direct message access policy (default: pairing). */
+    dmPolicy?: DmPolicy;
+    /** Optional allowlist for inbound DM senders. */
+    allowFrom?: Array<string | number>;
+    /** Default delivery target for CLI --deliver when no explicit --reply-to is provided. */
+    defaultTo?: string;
+    /** Optional allowlist for IRC channel senders. */
+    groupAllowFrom?: Array<string | number>;
+    /**
+     * Controls how channel messages are handled:
+     * - "open": channels bypass allowFrom; mention-gating applies
+     * - "disabled": block all channel messages entirely
+     * - "allowlist": only allow channel messages from senders in groupAllowFrom/allowFrom
+     */
+    groupPolicy?: GroupPolicy;
+    /** Max channel messages to keep as history context (0 disables). */
+    historyLimit?: number;
+    /** Max DM turns to keep as history context. */
+    dmHistoryLimit?: number;
+    /** Per-DM config overrides keyed by sender ID. */
+    dms?: Record<string, DmConfig>;
+    /** Outbound text chunk size (chars). Default: 350. */
+    textChunkLimit?: number;
+    /** Chunking mode: "length" (default) splits by size; "newline" splits on every newline. */
+    chunkMode?: "length" | "newline";
+    blockStreaming?: boolean;
+    /** Merge streamed block replies before sending. */
+    blockStreamingCoalesce?: BlockStreamingCoalesceConfig;
+    groups?: Record<string, {
+        requireMention?: boolean;
+        tools?: GroupToolPolicyConfig;
+        toolsBySender?: GroupToolPolicyBySenderConfig;
+        allowFrom?: Array<string | number>;
+        skills?: string[];
+        enabled?: boolean;
+        systemPrompt?: string;
+    }>;
+    /** Optional mention patterns specific to IRC channel messages. */
+    mentionPatterns?: string[];
+    /** Heartbeat visibility settings for this channel. */
+    heartbeat?: ChannelHeartbeatVisibilityConfig;
+    /** Outbound response prefix override for this channel/account. */
+    responsePrefix?: string;
+    /** Max outbound media size in MB. */
+    mediaMaxMb?: number;
+};
+export type IrcConfig = {
+    /** Optional per-account IRC configuration (multi-account). */
+    accounts?: Record<string, IrcAccountConfig>;
+} & IrcAccountConfig;

package/dist/plugin-sdk/config/types.memory.d.ts

@@ -0,0 +1,45 @@
+import type { SessionSendPolicyConfig } from "./types.base.js";
+export type MemoryBackend = "builtin" | "qmd";
+export type MemoryCitationsMode = "auto" | "on" | "off";
+export type MemoryQmdSearchMode = "query" | "search" | "vsearch";
+export type MemoryConfig = {
+    backend?: MemoryBackend;
+    citations?: MemoryCitationsMode;
+    qmd?: MemoryQmdConfig;
+};
+export type MemoryQmdConfig = {
+    command?: string;
+    searchMode?: MemoryQmdSearchMode;
+    includeDefaultMemory?: boolean;
+    paths?: MemoryQmdIndexPath[];
+    sessions?: MemoryQmdSessionConfig;
+    update?: MemoryQmdUpdateConfig;
+    limits?: MemoryQmdLimitsConfig;
+    scope?: SessionSendPolicyConfig;
+};
+export type MemoryQmdIndexPath = {
+    path: string;
+    name?: string;
+    pattern?: string;
+};
+export type MemoryQmdSessionConfig = {
+    enabled?: boolean;
+    exportDir?: string;
+    retentionDays?: number;
+};
+export type MemoryQmdUpdateConfig = {
+    interval?: string;
+    debounceMs?: number;
+    onBoot?: boolean;
+    waitForBootSync?: boolean;
+    embedInterval?: string;
+    commandTimeoutMs?: number;
+    updateTimeoutMs?: number;
+    embedTimeoutMs?: number;
+};
+export type MemoryQmdLimitsConfig = {
+    maxResults?: number;
+    maxSnippetChars?: number;
+    maxInjectedChars?: number;
+    timeoutMs?: number;
+};

package/dist/plugin-sdk/config/types.messages.d.ts

@@ -0,0 +1,153 @@
+import type { QueueDropPolicy, QueueMode, QueueModeByProvider } from "./types.queue.js";
+import type { TtsConfig } from "./types.tts.js";
+export type GroupChatConfig = {
+    mentionPatterns?: string[];
+    historyLimit?: number;
+};
+export type DmConfig = {
+    historyLimit?: number;
+};
+export type QueueConfig = {
+    mode?: QueueMode;
+    byChannel?: QueueModeByProvider;
+    debounceMs?: number;
+    /** Per-channel debounce overrides (ms). */
+    debounceMsByChannel?: InboundDebounceByProvider;
+    cap?: number;
+    drop?: QueueDropPolicy;
+};
+export type InboundDebounceByProvider = Record<string, number>;
+export type InboundDebounceConfig = {
+    debounceMs?: number;
+    byChannel?: InboundDebounceByProvider;
+};
+export type BroadcastStrategy = "parallel" | "sequential";
+export type BroadcastConfig = {
+    /** Default processing strategy for broadcast peers. */
+    strategy?: BroadcastStrategy;
+    /**
+     * Map peer IDs to arrays of agent IDs that should ALL process messages.
+     *
+     * Note: the index signature includes `undefined` so `strategy?: ...` remains type-safe.
+     */
+    [peerId: string]: string[] | BroadcastStrategy | undefined;
+};
+export type AudioConfig = {
+    /** @deprecated Use tools.media.audio.models instead. */
+    transcription?: {
+        command: string[];
+        timeoutSeconds?: number;
+    };
+};
+export type StatusReactionsEmojiConfig = {
+    thinking?: string;
+    tool?: string;
+    coding?: string;
+    web?: string;
+    done?: string;
+    error?: string;
+    stallSoft?: string;
+    stallHard?: string;
+};
+export type StatusReactionsTimingConfig = {
+    /** Debounce interval for intermediate states (ms). Default: 700. */
+    debounceMs?: number;
+    /** Soft stall warning timeout (ms). Default: 25000. */
+    stallSoftMs?: number;
+    /** Hard stall warning timeout (ms). Default: 60000. */
+    stallHardMs?: number;
+    /** How long to hold done emoji before cleanup (ms). Default: 1500. */
+    doneHoldMs?: number;
+    /** How long to hold error emoji before cleanup (ms). Default: 2500. */
+    errorHoldMs?: number;
+};
+export type StatusReactionsConfig = {
+    /** Enable lifecycle status reactions (default: false). */
+    enabled?: boolean;
+    /** Override default emojis. */
+    emojis?: StatusReactionsEmojiConfig;
+    /** Override default timing. */
+    timing?: StatusReactionsTimingConfig;
+};
+export type MessagesConfig = {
+    /** @deprecated Use `whatsapp.messagePrefix` (WhatsApp-only inbound prefix). */
+    messagePrefix?: string;
+    /**
+     * Prefix auto-added to all outbound replies.
+     *
+     * - string: explicit prefix (may include template variables)
+     * - special value: `"auto"` derives `[{agents.list[].identity.name}]` for the routed agent (when set)
+     *
+     * Supported template variables (case-insensitive):
+     * - `{model}` - short model name (e.g., `claude-opus-4-6`, `gpt-4o`)
+     * - `{modelFull}` - full model identifier (e.g., `anthropic/claude-opus-4-6`)
+     * - `{provider}` - provider name (e.g., `anthropic`, `openai`)
+     * - `{thinkingLevel}` or `{think}` - current thinking level (`high`, `low`, `off`)
+     * - `{identity.name}` or `{identityName}` - agent identity name
+     *
+     * Example: `"[{model} | think:{thinkingLevel}]"` → `"[claude-opus-4-6 | think:high]"`
+     *
+     * Unresolved variables remain as literal text (e.g., `{model}` if context unavailable).
+     *
+     * Default: none
+     */
+    responsePrefix?: string;
+    groupChat?: GroupChatConfig;
+    queue?: QueueConfig;
+    /** Debounce rapid inbound messages per sender (global + per-channel overrides). */
+    inbound?: InboundDebounceConfig;
+    /** Emoji reaction used to acknowledge inbound messages (empty disables). */
+    ackReaction?: string;
+    /** When to send ack reactions. Default: "group-mentions". */
+    ackReactionScope?: "group-mentions" | "group-all" | "direct" | "all";
+    /** Remove ack reaction after reply is sent (default: false). */
+    removeAckAfterReply?: boolean;
+    /** Lifecycle status reactions configuration. */
+    statusReactions?: StatusReactionsConfig;
+    /** When true, suppress ⚠️ tool-error warnings from being shown to the user. Default: false. */
+    suppressToolErrors?: boolean;
+    /** Text-to-speech settings for outbound replies. */
+    tts?: TtsConfig;
+};
+export type NativeCommandsSetting = boolean | "auto";
+/**
+ * Per-provider allowlist for command authorization.
+ * Keys are channel IDs (e.g., "discord", "whatsapp") or "*" for global default.
+ * Values are arrays of sender IDs allowed to use commands on that channel.
+ */
+export type CommandAllowFrom = Record<string, Array<string | number>>;
+export type CommandsConfig = {
+    /** Enable native command registration when supported (default: "auto"). */
+    native?: NativeCommandsSetting;
+    /** Enable native skill command registration when supported (default: "auto"). */
+    nativeSkills?: NativeCommandsSetting;
+    /** Enable text command parsing (default: true). */
+    text?: boolean;
+    /** Allow bash chat command (`!`; `/bash` alias) (default: false). */
+    bash?: boolean;
+    /** How long bash waits before backgrounding (default: 2000; 0 backgrounds immediately). */
+    bashForegroundMs?: number;
+    /** Allow /config command (default: false). */
+    config?: boolean;
+    /** Allow /debug command (default: false). */
+    debug?: boolean;
+    /** Allow restart commands/tools (default: true). */
+    restart?: boolean;
+    /** Enforce access-group allowlists/policies for commands (default: true). */
+    useAccessGroups?: boolean;
+    /** Explicit owner allowlist for owner-only tools/commands (channel-native IDs). */
+    ownerAllowFrom?: Array<string | number>;
+    /**
+     * Per-provider allowlist restricting who can use slash commands.
+     * If set, overrides the channel's allowFrom for command authorization.
+     * Use "*" key for global default, provider-specific keys override the global.
+     * Example: { "*": ["user1"], discord: ["user:123"] }
+     */
+    allowFrom?: CommandAllowFrom;
+};
+export type ProviderCommandsConfig = {
+    /** Override native command registration for this provider (bool or "auto"). */
+    native?: NativeCommandsSetting;
+    /** Override native skill command registration for this provider (bool or "auto"). */
+    nativeSkills?: NativeCommandsSetting;
+};

package/dist/plugin-sdk/config/types.models.d.ts

@@ -0,0 +1,54 @@
+export type ModelApi = "openai-completions" | "openai-responses" | "anthropic-messages" | "google-generative-ai" | "github-copilot" | "bedrock-converse-stream" | "ollama";
+export type ModelCompatConfig = {
+    supportsStore?: boolean;
+    supportsDeveloperRole?: boolean;
+    supportsReasoningEffort?: boolean;
+    supportsUsageInStreaming?: boolean;
+    supportsStrictMode?: boolean;
+    maxTokensField?: "max_completion_tokens" | "max_tokens";
+    thinkingFormat?: "openai" | "zai" | "qwen";
+    requiresToolResultName?: boolean;
+    requiresAssistantAfterToolResult?: boolean;
+    requiresThinkingAsText?: boolean;
+    requiresMistralToolIds?: boolean;
+};
+export type ModelProviderAuthMode = "api-key" | "aws-sdk" | "oauth" | "token";
+export type ModelDefinitionConfig = {
+    id: string;
+    name: string;
+    api?: ModelApi;
+    reasoning: boolean;
+    input: Array<"text" | "image">;
+    cost: {
+        input: number;
+        output: number;
+        cacheRead: number;
+        cacheWrite: number;
+    };
+    contextWindow: number;
+    maxTokens: number;
+    headers?: Record<string, string>;
+    compat?: ModelCompatConfig;
+};
+export type ModelProviderConfig = {
+    baseUrl: string;
+    apiKey?: string;
+    auth?: ModelProviderAuthMode;
+    api?: ModelApi;
+    headers?: Record<string, string>;
+    authHeader?: boolean;
+    models: ModelDefinitionConfig[];
+};
+export type BedrockDiscoveryConfig = {
+    enabled?: boolean;
+    region?: string;
+    providerFilter?: string[];
+    refreshInterval?: number;
+    defaultContextWindow?: number;
+    defaultMaxTokens?: number;
+};
+export type ModelsConfig = {
+    mode?: "merge" | "replace";
+    providers?: Record<string, ModelProviderConfig>;
+    bedrockDiscovery?: BedrockDiscoveryConfig;
+};

package/dist/plugin-sdk/config/types.msteams.d.ts

@@ -0,0 +1,103 @@
+import type { BlockStreamingCoalesceConfig, DmPolicy, GroupPolicy, MarkdownConfig } from "./types.base.js";
+import type { ChannelHeartbeatVisibilityConfig } from "./types.channels.js";
+import type { DmConfig } from "./types.messages.js";
+import type { GroupToolPolicyBySenderConfig, GroupToolPolicyConfig } from "./types.tools.js";
+export type MSTeamsWebhookConfig = {
+    /** Port for the webhook server. Default: 3978. */
+    port?: number;
+    /** Path for the messages endpoint. Default: /api/messages. */
+    path?: string;
+};
+/** Reply style for MS Teams messages. */
+export type MSTeamsReplyStyle = "thread" | "top-level";
+/** Channel-level config for MS Teams. */
+export type MSTeamsChannelConfig = {
+    /** Require @mention to respond. Default: true. */
+    requireMention?: boolean;
+    /** Optional tool policy overrides for this channel. */
+    tools?: GroupToolPolicyConfig;
+    toolsBySender?: GroupToolPolicyBySenderConfig;
+    /** Reply style: "thread" replies to the message, "top-level" posts a new message. */
+    replyStyle?: MSTeamsReplyStyle;
+};
+/** Team-level config for MS Teams. */
+export type MSTeamsTeamConfig = {
+    /** Default requireMention for channels in this team. */
+    requireMention?: boolean;
+    /** Default tool policy for channels in this team. */
+    tools?: GroupToolPolicyConfig;
+    toolsBySender?: GroupToolPolicyBySenderConfig;
+    /** Default reply style for channels in this team. */
+    replyStyle?: MSTeamsReplyStyle;
+    /** Per-channel overrides. Key is conversation ID (e.g., "19:...@thread.tacv2"). */
+    channels?: Record<string, MSTeamsChannelConfig>;
+};
+export type MSTeamsConfig = {
+    /** If false, do not start the MS Teams provider. Default: true. */
+    enabled?: boolean;
+    /** Optional provider capability tags used for agent/runtime guidance. */
+    capabilities?: string[];
+    /** Markdown formatting overrides (tables). */
+    markdown?: MarkdownConfig;
+    /** Allow channel-initiated config writes (default: true). */
+    configWrites?: boolean;
+    /** Azure Bot App ID (from Azure Bot registration). */
+    appId?: string;
+    /** Azure Bot App Password / Client Secret. */
+    appPassword?: string;
+    /** Azure AD Tenant ID (for single-tenant bots). */
+    tenantId?: string;
+    /** Webhook server configuration. */
+    webhook?: MSTeamsWebhookConfig;
+    /** Direct message access policy (default: pairing). */
+    dmPolicy?: DmPolicy;
+    /** Allowlist for DM senders (AAD object IDs or UPNs). */
+    allowFrom?: Array<string>;
+    /** Default delivery target for CLI --deliver when no explicit --reply-to is provided. */
+    defaultTo?: string;
+    /** Optional allowlist for group/channel senders (AAD object IDs or UPNs). */
+    groupAllowFrom?: Array<string>;
+    /**
+     * Controls how group/channel messages are handled:
+     * - "open": groups bypass allowFrom; mention-gating applies
+     * - "disabled": block all group messages
+     * - "allowlist": only allow group messages from senders in groupAllowFrom/allowFrom
+     */
+    groupPolicy?: GroupPolicy;
+    /** Outbound text chunk size (chars). Default: 4000. */
+    textChunkLimit?: number;
+    /** Chunking mode: "length" (default) splits by size; "newline" splits on every newline. */
+    chunkMode?: "length" | "newline";
+    /** Merge streamed block replies before sending. */
+    blockStreamingCoalesce?: BlockStreamingCoalesceConfig;
+    /**
+     * Allowed host suffixes for inbound attachment downloads.
+     * Use ["*"] to allow any host (not recommended).
+     */
+    mediaAllowHosts?: Array<string>;
+    /**
+     * Allowed host suffixes for attaching Authorization headers to inbound media retries.
+     * Use specific hosts only; avoid multi-tenant suffixes.
+     */
+    mediaAuthAllowHosts?: Array<string>;
+    /** Default: require @mention to respond in channels/groups. */
+    requireMention?: boolean;
+    /** Max group/channel messages to keep as history context (0 disables). */
+    historyLimit?: number;
+    /** Max DM turns to keep as history context. */
+    dmHistoryLimit?: number;
+    /** Per-DM config overrides keyed by user ID. */
+    dms?: Record<string, DmConfig>;
+    /** Default reply style: "thread" replies to the message, "top-level" posts a new message. */
+    replyStyle?: MSTeamsReplyStyle;
+    /** Per-team config. Key is team ID (from the /team/ URL path segment). */
+    teams?: Record<string, MSTeamsTeamConfig>;
+    /** Max media size in MB (default: 100MB for OneDrive upload support). */
+    mediaMaxMb?: number;
+    /** SharePoint site ID for file uploads in group chats/channels (e.g., "contoso.sharepoint.com,guid1,guid2"). */
+    sharePointSiteId?: string;
+    /** Heartbeat visibility settings for this channel. */
+    heartbeat?: ChannelHeartbeatVisibilityConfig;
+    /** Outbound response prefix override for this channel/account. */
+    responsePrefix?: string;
+};

package/dist/plugin-sdk/config/types.node-host.d.ts

@@ -0,0 +1,10 @@
+export type NodeHostBrowserProxyConfig = {
+    /** Enable the browser proxy on the node host (default: true). */
+    enabled?: boolean;
+    /** Optional allowlist of profile names exposed via the proxy. */
+    allowProfiles?: string[];
+};
+export type NodeHostConfig = {
+    /** Browser proxy settings for node hosts. */
+    browserProxy?: NodeHostBrowserProxyConfig;
+};