remoteclaw 0.0.0 → 0.1.0-next.2abd2fa

package/dist/plugin-sdk/config/types.gateway.d.ts

@@ -0,0 +1,335 @@
+export type GatewayBindMode = "auto" | "lan" | "loopback" | "custom" | "tailnet";
+export type GatewayTlsConfig = {
+    /** Enable TLS for the gateway server. */
+    enabled?: boolean;
+    /** Auto-generate a self-signed cert if cert/key are missing (default: true). */
+    autoGenerate?: boolean;
+    /** PEM certificate path for the gateway server. */
+    certPath?: string;
+    /** PEM private key path for the gateway server. */
+    keyPath?: string;
+    /** Optional PEM CA bundle for TLS clients (mTLS or custom roots). */
+    caPath?: string;
+};
+export type WideAreaDiscoveryConfig = {
+    enabled?: boolean;
+    /** Optional unicast DNS-SD domain (e.g. "remoteclaw.internal"). */
+    domain?: string;
+};
+export type MdnsDiscoveryMode = "off" | "minimal" | "full";
+export type MdnsDiscoveryConfig = {
+    /**
+     * mDNS/Bonjour discovery broadcast mode (default: minimal).
+     * - off: disable mDNS entirely
+     * - minimal: omit cliPath/sshPort from TXT records
+     * - full: include cliPath/sshPort in TXT records
+     */
+    mode?: MdnsDiscoveryMode;
+};
+export type DiscoveryConfig = {
+    wideArea?: WideAreaDiscoveryConfig;
+    mdns?: MdnsDiscoveryConfig;
+};
+export type CanvasHostConfig = {
+    enabled?: boolean;
+    /** Directory to serve (default: ~/.remoteclaw/workspace/canvas). */
+    root?: string;
+    /** HTTP port to listen on (default: 18793). */
+    port?: number;
+    /** Enable live-reload file watching + WS reloads (default: true). */
+    liveReload?: boolean;
+};
+export type TalkProviderConfig = {
+    /** Default voice ID for the provider's Talk mode implementation. */
+    voiceId?: string;
+    /** Optional voice name -> provider voice ID map. */
+    voiceAliases?: Record<string, string>;
+    /** Default provider model ID for Talk mode. */
+    modelId?: string;
+    /** Default provider output format (for example pcm_44100). */
+    outputFormat?: string;
+    /** Provider API key (optional; provider-specific env fallback may apply). */
+    apiKey?: string;
+    /** Provider-specific extensions. */
+    [key: string]: unknown;
+};
+export type TalkConfig = {
+    /** Active Talk TTS provider (for example "elevenlabs"). */
+    provider?: string;
+    /** Provider-specific Talk config keyed by provider id. */
+    providers?: Record<string, TalkProviderConfig>;
+    /** Stop speaking when user starts talking (default: true). */
+    interruptOnSpeech?: boolean;
+    /**
+     * Legacy ElevenLabs compatibility fields.
+     * Kept during rollout while older clients migrate to provider/providers.
+     */
+    voiceId?: string;
+    voiceAliases?: Record<string, string>;
+    modelId?: string;
+    outputFormat?: string;
+    apiKey?: string;
+};
+export type GatewayControlUiConfig = {
+    /** If false, the Gateway will not serve the Control UI (default /). */
+    enabled?: boolean;
+    /** Optional base path prefix for the Control UI (e.g. "/remoteclaw"). */
+    basePath?: string;
+    /** Optional filesystem root for Control UI assets (defaults to dist/control-ui). */
+    root?: string;
+    /** Allowed browser origins for Control UI/WebChat websocket connections. */
+    allowedOrigins?: string[];
+    /**
+     * DANGEROUS: Keep Host-header origin fallback behavior.
+     * Supported long-term for deployments that intentionally rely on this policy.
+     */
+    dangerouslyAllowHostHeaderOriginFallback?: boolean;
+    /**
+     * Insecure-auth toggle.
+     * Control UI still requires secure context + device identity unless
+     * dangerouslyDisableDeviceAuth is enabled.
+     */
+    allowInsecureAuth?: boolean;
+    /** DANGEROUS: Disable device identity checks for the Control UI (default: false). */
+    dangerouslyDisableDeviceAuth?: boolean;
+};
+export type GatewayAuthMode = "none" | "token" | "password" | "trusted-proxy";
+/**
+ * Configuration for trusted reverse proxy authentication.
+ * Used when Clawdbot runs behind an identity-aware proxy (Pomerium, Caddy + OAuth, etc.)
+ * that handles authentication and passes user identity via headers.
+ */
+export type GatewayTrustedProxyConfig = {
+    /**
+     * Header name containing the authenticated user identity (required).
+     * Common values: "x-forwarded-user", "x-remote-user", "x-pomerium-claim-email"
+     */
+    userHeader: string;
+    /**
+     * Additional headers that MUST be present for the request to be trusted.
+     * Use this to verify the request actually came through the proxy.
+     * Example: ["x-forwarded-proto", "x-forwarded-host"]
+     */
+    requiredHeaders?: string[];
+    /**
+     * Optional allowlist of user identities that can access the gateway.
+     * If empty or omitted, all authenticated users from the proxy are allowed.
+     * Example: ["nick@example.com", "admin@company.org"]
+     */
+    allowUsers?: string[];
+};
+export type GatewayAuthConfig = {
+    /** Authentication mode for Gateway connections. Defaults to token when unset. */
+    mode?: GatewayAuthMode;
+    /** Shared token for token mode (stored locally for CLI auth). */
+    token?: string;
+    /** Shared password for password mode (consider env instead). */
+    password?: string;
+    /** Allow Tailscale identity headers when serve mode is enabled. */
+    allowTailscale?: boolean;
+    /** Rate-limit configuration for failed authentication attempts. */
+    rateLimit?: GatewayAuthRateLimitConfig;
+    /**
+     * Configuration for trusted-proxy auth mode.
+     * Required when mode is "trusted-proxy".
+     */
+    trustedProxy?: GatewayTrustedProxyConfig;
+};
+export type GatewayAuthRateLimitConfig = {
+    /** Maximum failed attempts per IP before blocking.  @default 10 */
+    maxAttempts?: number;
+    /** Sliding window duration in milliseconds.  @default 60000 (1 min) */
+    windowMs?: number;
+    /** Lockout duration in milliseconds after the limit is exceeded.  @default 300000 (5 min) */
+    lockoutMs?: number;
+    /** Exempt localhost/loopback addresses from auth rate limiting.  @default true */
+    exemptLoopback?: boolean;
+};
+export type GatewayTailscaleMode = "off" | "serve" | "funnel";
+export type GatewayTailscaleConfig = {
+    /** Tailscale exposure mode for the Gateway control UI. */
+    mode?: GatewayTailscaleMode;
+    /** Reset serve/funnel configuration on shutdown. */
+    resetOnExit?: boolean;
+};
+export type GatewayRemoteConfig = {
+    /** Remote Gateway WebSocket URL (ws:// or wss://). */
+    url?: string;
+    /** Transport for macOS remote connections (ssh tunnel or direct WS). */
+    transport?: "ssh" | "direct";
+    /** Token for remote auth (when the gateway requires token auth). */
+    token?: string;
+    /** Password for remote auth (when the gateway requires password auth). */
+    password?: string;
+    /** Expected TLS certificate fingerprint (sha256) for remote gateways. */
+    tlsFingerprint?: string;
+    /** SSH target for tunneling remote Gateway (user@host). */
+    sshTarget?: string;
+    /** SSH identity file path for tunneling remote Gateway. */
+    sshIdentity?: string;
+};
+export type GatewayReloadMode = "off" | "restart" | "hot" | "hybrid";
+export type GatewayReloadConfig = {
+    /** Reload strategy for config changes (default: hybrid). */
+    mode?: GatewayReloadMode;
+    /** Debounce window for config reloads (ms). Default: 300. */
+    debounceMs?: number;
+};
+export type GatewayHttpChatCompletionsConfig = {
+    /**
+     * If false, the Gateway will not serve `POST /v1/chat/completions`.
+     * Default: false when absent.
+     */
+    enabled?: boolean;
+};
+export type GatewayHttpResponsesConfig = {
+    /**
+     * If false, the Gateway will not serve `POST /v1/responses` (OpenResponses API).
+     * Default: false when absent.
+     */
+    enabled?: boolean;
+    /**
+     * Max request body size in bytes for `/v1/responses`.
+     * Default: 20MB.
+     */
+    maxBodyBytes?: number;
+    /**
+     * Max number of URL-based `input_file` + `input_image` parts per request.
+     * Default: 8.
+     */
+    maxUrlParts?: number;
+    /** File inputs (input_file). */
+    files?: GatewayHttpResponsesFilesConfig;
+    /** Image inputs (input_image). */
+    images?: GatewayHttpResponsesImagesConfig;
+};
+export type GatewayHttpResponsesFilesConfig = {
+    /** Allow URL fetches for input_file. Default: true. */
+    allowUrl?: boolean;
+    /**
+     * Optional hostname allowlist for URL fetches.
+     * Supports exact hosts and `*.example.com` wildcards.
+     */
+    urlAllowlist?: string[];
+    /** Allowed MIME types (case-insensitive). */
+    allowedMimes?: string[];
+    /** Max bytes per file. Default: 5MB. */
+    maxBytes?: number;
+    /** Max decoded characters per file. Default: 200k. */
+    maxChars?: number;
+    /** Max redirects when fetching a URL. Default: 3. */
+    maxRedirects?: number;
+    /** Fetch timeout in ms. Default: 10s. */
+    timeoutMs?: number;
+    /** PDF handling (application/pdf). */
+    pdf?: GatewayHttpResponsesPdfConfig;
+};
+export type GatewayHttpResponsesPdfConfig = {
+    /** Max pages to parse/render. Default: 4. */
+    maxPages?: number;
+    /** Max pixels per rendered page. Default: 4M. */
+    maxPixels?: number;
+    /** Minimum extracted text length to skip rasterization. Default: 200 chars. */
+    minTextChars?: number;
+};
+export type GatewayHttpResponsesImagesConfig = {
+    /** Allow URL fetches for input_image. Default: true. */
+    allowUrl?: boolean;
+    /**
+     * Optional hostname allowlist for URL fetches.
+     * Supports exact hosts and `*.example.com` wildcards.
+     */
+    urlAllowlist?: string[];
+    /** Allowed MIME types (case-insensitive). */
+    allowedMimes?: string[];
+    /** Max bytes per image. Default: 10MB. */
+    maxBytes?: number;
+    /** Max redirects when fetching a URL. Default: 3. */
+    maxRedirects?: number;
+    /** Fetch timeout in ms. Default: 10s. */
+    timeoutMs?: number;
+};
+export type GatewayHttpEndpointsConfig = {
+    chatCompletions?: GatewayHttpChatCompletionsConfig;
+    responses?: GatewayHttpResponsesConfig;
+};
+export type GatewayHttpSecurityHeadersConfig = {
+    /**
+     * Value for the Strict-Transport-Security response header.
+     * Set to false to disable explicitly.
+     *
+     * Example: "max-age=31536000; includeSubDomains"
+     */
+    strictTransportSecurity?: string | false;
+};
+export type GatewayHttpConfig = {
+    endpoints?: GatewayHttpEndpointsConfig;
+    securityHeaders?: GatewayHttpSecurityHeadersConfig;
+};
+export type GatewayNodesConfig = {
+    /** Browser routing policy for node-hosted browser proxies. */
+    browser?: {
+        /** Routing mode (default: auto). */
+        mode?: "auto" | "manual" | "off";
+        /** Pin to a specific node id/name (optional). */
+        node?: string;
+    };
+    /** Additional node.invoke commands to allow on the gateway. */
+    allowCommands?: string[];
+    /** Commands to deny even if they appear in the defaults or node claims. */
+    denyCommands?: string[];
+};
+export type GatewayToolsConfig = {
+    /** Tools to deny via gateway HTTP /tools/invoke (extends defaults). */
+    deny?: string[];
+    /** Tools to explicitly allow (removes from default deny list). */
+    allow?: string[];
+};
+export type GatewayConfig = {
+    /** Single multiplexed port for Gateway WS + HTTP (default: 18789). */
+    port?: number;
+    /**
+     * Explicit gateway mode. When set to "remote", local gateway start is disabled.
+     * When set to "local", the CLI may start the gateway locally.
+     */
+    mode?: "local" | "remote";
+    /**
+     * Bind address policy for the Gateway WebSocket + Control UI HTTP server.
+     * - auto: Loopback (127.0.0.1) if available, else 0.0.0.0 (fallback to all interfaces)
+     * - lan: 0.0.0.0 (all interfaces, no fallback)
+     * - loopback: 127.0.0.1 (local-only)
+     * - tailnet: Tailnet IPv4 if available (100.64.0.0/10), else loopback
+     * - custom: User-specified IP, fallback to 0.0.0.0 if unavailable (requires customBindHost)
+     * Default: loopback (127.0.0.1).
+     */
+    bind?: GatewayBindMode;
+    /** Custom IP address for bind="custom" mode. Fallback: 0.0.0.0. */
+    customBindHost?: string;
+    controlUi?: GatewayControlUiConfig;
+    auth?: GatewayAuthConfig;
+    tailscale?: GatewayTailscaleConfig;
+    remote?: GatewayRemoteConfig;
+    reload?: GatewayReloadConfig;
+    tls?: GatewayTlsConfig;
+    http?: GatewayHttpConfig;
+    nodes?: GatewayNodesConfig;
+    /**
+     * IPs of trusted reverse proxies (e.g. Traefik, nginx). When a connection
+     * arrives from one of these IPs, the Gateway trusts `x-forwarded-for`
+     * to determine the client IP for local pairing and HTTP checks.
+     */
+    trustedProxies?: string[];
+    /**
+     * Allow `x-real-ip` as a fallback only when `x-forwarded-for` is missing.
+     * Default: false (safer fail-closed behavior).
+     */
+    allowRealIpFallback?: boolean;
+    /** Tool access restrictions for HTTP /tools/invoke endpoint. */
+    tools?: GatewayToolsConfig;
+    /**
+     * Channel health monitor interval in minutes.
+     * Periodically checks channel health and restarts unhealthy channels.
+     * Set to 0 to disable. Default: 5.
+     */
+    channelHealthCheckMinutes?: number;
+};

package/dist/plugin-sdk/config/types.googlechat.d.ts

@@ -0,0 +1,107 @@
+import type { BlockStreamingCoalesceConfig, DmPolicy, GroupPolicy, ReplyToMode } from "./types.base.js";
+import type { DmConfig } from "./types.messages.js";
+export type GoogleChatDmConfig = {
+    /** If false, ignore all incoming Google Chat DMs. Default: true. */
+    enabled?: boolean;
+    /** Direct message access policy (default: pairing). */
+    policy?: DmPolicy;
+    /** Allowlist for DM senders (user ids or emails). */
+    allowFrom?: Array<string | number>;
+};
+export type GoogleChatGroupConfig = {
+    /** If false, disable the bot in this space. (Alias for allow: false.) */
+    enabled?: boolean;
+    /** Legacy allow toggle; prefer enabled. */
+    allow?: boolean;
+    /** Require mentioning the bot to trigger replies. */
+    requireMention?: boolean;
+    /** Allowlist of users that can invoke the bot in this space. */
+    users?: Array<string | number>;
+    /** Optional system prompt for this space. */
+    systemPrompt?: string;
+};
+export type GoogleChatActionConfig = {
+    reactions?: boolean;
+};
+export type GoogleChatAccountConfig = {
+    /** Optional display name for this account (used in CLI/UI lists). */
+    name?: string;
+    /** Optional provider capability tags used for agent/runtime guidance. */
+    capabilities?: string[];
+    /** Allow channel-initiated config writes (default: true). */
+    configWrites?: boolean;
+    /** If false, do not start this Google Chat account. Default: true. */
+    enabled?: boolean;
+    /** Allow bot-authored messages to trigger replies (default: false). */
+    allowBots?: boolean;
+    /**
+     * Break-glass override: allow mutable principal matching (raw email entries) in allowlists.
+     * Default behavior is ID-only matching.
+     */
+    dangerouslyAllowNameMatching?: boolean;
+    /** Default mention requirement for space messages (default: true). */
+    requireMention?: boolean;
+    /**
+     * Controls how space messages are handled:
+     * - "open": spaces bypass allowlists; mention-gating applies
+     * - "disabled": block all space messages
+     * - "allowlist": only allow spaces present in channels.googlechat.groups
+     */
+    groupPolicy?: GroupPolicy;
+    /** Optional allowlist for space senders (user ids or emails). */
+    groupAllowFrom?: Array<string | number>;
+    /** Default delivery target for CLI --deliver when no explicit --reply-to is provided. */
+    defaultTo?: string;
+    /** Per-space configuration keyed by space id or name. */
+    groups?: Record<string, GoogleChatGroupConfig>;
+    /** Service account JSON (inline string or object). */
+    serviceAccount?: string | Record<string, unknown>;
+    /** Service account JSON file path. */
+    serviceAccountFile?: string;
+    /** Webhook audience type (app-url or project-number). */
+    audienceType?: "app-url" | "project-number";
+    /** Audience value (app URL or project number). */
+    audience?: string;
+    /** Google Chat webhook path (default: /googlechat). */
+    webhookPath?: string;
+    /** Google Chat webhook URL (used to derive the path). */
+    webhookUrl?: string;
+    /** Optional bot user resource name (users/...). */
+    botUser?: string;
+    /** Max space messages to keep as history context (0 disables). */
+    historyLimit?: number;
+    /** Max DM turns to keep as history context. */
+    dmHistoryLimit?: number;
+    /** Per-DM config overrides keyed by user id. */
+    dms?: Record<string, DmConfig>;
+    /** Outbound text chunk size (chars). Default: 4000. */
+    textChunkLimit?: number;
+    /** Chunking mode: "length" (default) splits by size; "newline" splits on every newline. */
+    chunkMode?: "length" | "newline";
+    blockStreaming?: boolean;
+    /** Merge streamed block replies before sending. */
+    blockStreamingCoalesce?: BlockStreamingCoalesceConfig;
+    mediaMaxMb?: number;
+    /** Control reply threading when reply tags are present (off|first|all). */
+    replyToMode?: ReplyToMode;
+    /** Per-action tool gating (default: true for all). */
+    actions?: GoogleChatActionConfig;
+    dm?: GoogleChatDmConfig;
+    /**
+     * Typing indicator mode (default: "message").
+     * - "none": No indicator
+     * - "message": Send "_<name> is typing..._" then edit with response
+     * - "reaction": React with 👀 to user message, remove on reply
+     *   NOTE: Reaction mode requires user OAuth (not supported with service account auth).
+     *   If configured, falls back to message mode with a warning.
+     */
+    typingIndicator?: "none" | "message" | "reaction";
+    /** Outbound response prefix override for this channel/account. */
+    responsePrefix?: string;
+};
+export type GoogleChatConfig = {
+    /** Optional per-account Google Chat configuration (multi-account). */
+    accounts?: Record<string, GoogleChatAccountConfig>;
+    /** Optional default account id when multiple accounts are configured. */
+    defaultAccount?: string;
+} & GoogleChatAccountConfig;

package/dist/plugin-sdk/config/types.hooks.d.ts

@@ -0,0 +1,123 @@
+export type HookMappingMatch = {
+    path?: string;
+    source?: string;
+};
+export type HookMappingTransform = {
+    module: string;
+    export?: string;
+};
+export type HookMappingConfig = {
+    id?: string;
+    match?: HookMappingMatch;
+    action?: "wake" | "agent";
+    wakeMode?: "now" | "next-heartbeat";
+    name?: string;
+    /** Route this hook to a specific agent (unknown ids fall back to the default agent). */
+    agentId?: string;
+    sessionKey?: string;
+    messageTemplate?: string;
+    textTemplate?: string;
+    deliver?: boolean;
+    /** DANGEROUS: Disable external content safety wrapping for this hook. */
+    allowUnsafeExternalContent?: boolean;
+    channel?: "last" | "whatsapp" | "telegram" | "discord" | "irc" | "googlechat" | "slack" | "signal" | "imessage" | "msteams";
+    to?: string;
+    /** Override model for this hook (provider/model or alias). */
+    model?: string;
+    thinking?: string;
+    timeoutSeconds?: number;
+    transform?: HookMappingTransform;
+};
+export type HooksGmailTailscaleMode = "off" | "serve" | "funnel";
+export type HooksGmailConfig = {
+    account?: string;
+    label?: string;
+    topic?: string;
+    subscription?: string;
+    pushToken?: string;
+    hookUrl?: string;
+    includeBody?: boolean;
+    maxBytes?: number;
+    renewEveryMinutes?: number;
+    /** DANGEROUS: Disable external content safety wrapping for Gmail hooks. */
+    allowUnsafeExternalContent?: boolean;
+    serve?: {
+        bind?: string;
+        port?: number;
+        path?: string;
+    };
+    tailscale?: {
+        mode?: HooksGmailTailscaleMode;
+        path?: string;
+        /** Optional tailscale serve/funnel target (port, host:port, or full URL). */
+        target?: string;
+    };
+    /** Optional model override for Gmail hook processing (provider/model or alias). */
+    model?: string;
+    /** Optional thinking level override for Gmail hook processing. */
+    thinking?: "off" | "minimal" | "low" | "medium" | "high";
+};
+export type InternalHookHandlerConfig = {
+    /** Event key to listen for (e.g., 'command:new', 'session:start') */
+    event: string;
+    /** Path to handler module (workspace-relative) */
+    module: string;
+    /** Export name from module (default: 'default') */
+    export?: string;
+};
+export type HookConfig = {
+    enabled?: boolean;
+    env?: Record<string, string>;
+    [key: string]: unknown;
+};
+export type HookInstallRecord = InstallRecordBase & {
+    hooks?: string[];
+};
+export type InternalHooksConfig = {
+    /** Enable hooks system */
+    enabled?: boolean;
+    /** Legacy: List of internal hook handlers to register (still supported) */
+    handlers?: InternalHookHandlerConfig[];
+    /** Per-hook configuration overrides */
+    entries?: Record<string, HookConfig>;
+    /** Load configuration */
+    load?: {
+        /** Additional hook directories to scan */
+        extraDirs?: string[];
+    };
+    /** Install records for hook packs or hooks */
+    installs?: Record<string, HookInstallRecord>;
+};
+export type HooksConfig = {
+    enabled?: boolean;
+    path?: string;
+    token?: string;
+    /**
+     * Default session key used for hook agent runs when no request/mapping session key is used.
+     * If omitted, RemoteClaw generates `hook:<uuid>` per request.
+     */
+    defaultSessionKey?: string;
+    /**
+     * Allow `sessionKey` from external `/hooks/agent` request payloads.
+     * Default: false.
+     */
+    allowRequestSessionKey?: boolean;
+    /**
+     * Optional allowlist for explicit session keys (request + mapping). Example: ["hook:"].
+     * Empty/omitted means no prefix restriction.
+     */
+    allowedSessionKeyPrefixes?: string[];
+    /**
+     * Restrict explicit hook `agentId` routing to these agent ids.
+     * Omit or include `*` to allow any agent. Set `[]` to deny all explicit `agentId` routing.
+     */
+    allowedAgentIds?: string[];
+    maxBodyBytes?: number;
+    presets?: string[];
+    transformsDir?: string;
+    mappings?: HookMappingConfig[];
+    gmail?: HooksGmailConfig;
+    /** Internal agent event hooks */
+    internal?: InternalHooksConfig;
+};
+import type { InstallRecordBase } from "./types.installs.js";

package/dist/plugin-sdk/config/types.imessage.d.ts

@@ -0,0 +1,77 @@
+import type { BlockStreamingCoalesceConfig, DmPolicy, GroupPolicy, MarkdownConfig } from "./types.base.js";
+import type { ChannelHeartbeatVisibilityConfig } from "./types.channels.js";
+import type { DmConfig } from "./types.messages.js";
+import type { GroupToolPolicyBySenderConfig, GroupToolPolicyConfig } from "./types.tools.js";
+export type IMessageAccountConfig = {
+    /** Optional display name for this account (used in CLI/UI lists). */
+    name?: string;
+    /** Optional provider capability tags used for agent/runtime guidance. */
+    capabilities?: string[];
+    /** Markdown formatting overrides (tables). */
+    markdown?: MarkdownConfig;
+    /** Allow channel-initiated config writes (default: true). */
+    configWrites?: boolean;
+    /** If false, do not start this iMessage account. Default: true. */
+    enabled?: boolean;
+    /** imsg CLI binary path (default: imsg). */
+    cliPath?: string;
+    /** Optional Messages db path override. */
+    dbPath?: string;
+    /** Remote SSH host token for SCP attachment fetches (`host` or `user@host`). */
+    remoteHost?: string;
+    /** Optional default send service (imessage|sms|auto). */
+    service?: "imessage" | "sms" | "auto";
+    /** Optional default region (used when sending SMS). */
+    region?: string;
+    /** Direct message access policy (default: pairing). */
+    dmPolicy?: DmPolicy;
+    /** Optional allowlist for inbound handles or chat_id targets. */
+    allowFrom?: Array<string | number>;
+    /** Default delivery target for CLI --deliver when no explicit --reply-to is provided. */
+    defaultTo?: string;
+    /** Optional allowlist for group senders or chat_id targets. */
+    groupAllowFrom?: Array<string | number>;
+    /**
+     * Controls how group messages are handled:
+     * - "open": groups bypass allowFrom; mention-gating applies
+     * - "disabled": block all group messages entirely
+     * - "allowlist": only allow group messages from senders in groupAllowFrom/allowFrom
+     */
+    groupPolicy?: GroupPolicy;
+    /** Max group messages to keep as history context (0 disables). */
+    historyLimit?: number;
+    /** Max DM turns to keep as history context. */
+    dmHistoryLimit?: number;
+    /** Per-DM config overrides keyed by user ID. */
+    dms?: Record<string, DmConfig>;
+    /** Include attachments + reactions in watch payloads. */
+    includeAttachments?: boolean;
+    /** Allowed local iMessage attachment roots (supports single-segment `*` wildcards). */
+    attachmentRoots?: string[];
+    /** Allowed remote iMessage attachment roots for SCP fetches (supports `*`). */
+    remoteAttachmentRoots?: string[];
+    /** Max outbound media size in MB. */
+    mediaMaxMb?: number;
+    /** Timeout for probe/RPC operations in milliseconds (default: 10000). */
+    probeTimeoutMs?: number;
+    /** Outbound text chunk size (chars). Default: 4000. */
+    textChunkLimit?: number;
+    /** Chunking mode: "length" (default) splits by size; "newline" splits on every newline. */
+    chunkMode?: "length" | "newline";
+    blockStreaming?: boolean;
+    /** Merge streamed block replies before sending. */
+    blockStreamingCoalesce?: BlockStreamingCoalesceConfig;
+    groups?: Record<string, {
+        requireMention?: boolean;
+        tools?: GroupToolPolicyConfig;
+        toolsBySender?: GroupToolPolicyBySenderConfig;
+    }>;
+    /** Heartbeat visibility settings for this channel. */
+    heartbeat?: ChannelHeartbeatVisibilityConfig;
+    /** Outbound response prefix override for this channel/account. */
+    responsePrefix?: string;
+};
+export type IMessageConfig = {
+    /** Optional per-account iMessage configuration (multi-account). */
+    accounts?: Record<string, IMessageAccountConfig>;
+} & IMessageAccountConfig;

package/dist/plugin-sdk/config/types.installs.d.ts

@@ -0,0 +1,14 @@
+export type InstallRecordBase = {
+    source: "npm" | "archive" | "path";
+    spec?: string;
+    sourcePath?: string;
+    installPath?: string;
+    version?: string;
+    resolvedName?: string;
+    resolvedVersion?: string;
+    resolvedSpec?: string;
+    integrity?: string;
+    shasum?: string;
+    resolvedAt?: string;
+    installedAt?: string;
+};