skykoi 2026.3.21 → 2026.3.23

package/dist/plugin-sdk/config/types.auth.d.ts

@@ -0,0 +1,28 @@
+export type AuthProfileConfig = {
+    provider: string;
+    /**
+     * Credential type expected in auth-profiles.json for this profile id.
+     * - api_key: static provider API key
+     * - oauth: refreshable OAuth credentials (access+refresh+expires)
+     * - token: static bearer-style token (optionally expiring; no refresh)
+     */
+    mode: "api_key" | "oauth" | "token";
+    email?: string;
+};
+export type AuthConfig = {
+    profiles?: Record<string, AuthProfileConfig>;
+    order?: Record<string, string[]>;
+    cooldowns?: {
+        /** Default billing backoff (hours). Default: 5. */
+        billingBackoffHours?: number;
+        /** Optional per-provider billing backoff (hours). */
+        billingBackoffHoursByProvider?: Record<string, number>;
+        /** Billing backoff cap (hours). Default: 24. */
+        billingMaxHours?: number;
+        /**
+         * Failure window for backoff counters (hours). If no failures occur within
+         * this window, counters reset. Default: 24.
+         */
+        failureWindowHours?: number;
+    };
+};

package/dist/plugin-sdk/config/types.base.d.ts

@@ -0,0 +1,149 @@
+import type { NormalizedChatType } from "../channels/chat-type.js";
+export type ReplyMode = "text" | "command";
+export type TypingMode = "never" | "instant" | "thinking" | "message";
+export type SessionScope = "per-sender" | "global";
+export type DmScope = "main" | "per-peer" | "per-channel-peer" | "per-account-channel-peer";
+export type ReplyToMode = "off" | "first" | "all";
+export type GroupPolicy = "open" | "disabled" | "allowlist";
+export type DmPolicy = "pairing" | "allowlist" | "open" | "disabled";
+export type OutboundRetryConfig = {
+    /** Max retry attempts for outbound requests (default: 3). */
+    attempts?: number;
+    /** Minimum retry delay in ms (default: 300-500ms depending on provider). */
+    minDelayMs?: number;
+    /** Maximum retry delay cap in ms (default: 30000). */
+    maxDelayMs?: number;
+    /** Jitter factor (0-1) applied to delays (default: 0.1). */
+    jitter?: number;
+};
+export type BlockStreamingCoalesceConfig = {
+    minChars?: number;
+    maxChars?: number;
+    idleMs?: number;
+};
+export type BlockStreamingChunkConfig = {
+    minChars?: number;
+    maxChars?: number;
+    breakPreference?: "paragraph" | "newline" | "sentence";
+};
+export type MarkdownTableMode = "off" | "bullets" | "code";
+export type MarkdownConfig = {
+    /** Table rendering mode (off|bullets|code). */
+    tables?: MarkdownTableMode;
+};
+export type HumanDelayConfig = {
+    /** Delay style for block replies (off|natural|custom). */
+    mode?: "off" | "natural" | "custom";
+    /** Minimum delay in milliseconds (default: 800). */
+    minMs?: number;
+    /** Maximum delay in milliseconds (default: 2500). */
+    maxMs?: number;
+};
+export type SessionSendPolicyAction = "allow" | "deny";
+export type SessionSendPolicyMatch = {
+    channel?: string;
+    chatType?: NormalizedChatType;
+    keyPrefix?: string;
+};
+export type SessionSendPolicyRule = {
+    action: SessionSendPolicyAction;
+    match?: SessionSendPolicyMatch;
+};
+export type SessionSendPolicyConfig = {
+    default?: SessionSendPolicyAction;
+    rules?: SessionSendPolicyRule[];
+};
+export type SessionResetMode = "daily" | "idle";
+export type SessionResetConfig = {
+    mode?: SessionResetMode;
+    /** Local hour (0-23) for the daily reset boundary. */
+    atHour?: number;
+    /** Sliding idle window (minutes). When set with daily mode, whichever expires first wins. */
+    idleMinutes?: number;
+};
+export type SessionResetByTypeConfig = {
+    dm?: SessionResetConfig;
+    group?: SessionResetConfig;
+    thread?: SessionResetConfig;
+};
+export type SessionConfig = {
+    scope?: SessionScope;
+    /** DM session scoping (default: "main"). */
+    dmScope?: DmScope;
+    /** Map platform-prefixed identities (e.g. "telegram:123") to canonical DM peers. */
+    identityLinks?: Record<string, string[]>;
+    resetTriggers?: string[];
+    idleMinutes?: number;
+    reset?: SessionResetConfig;
+    resetByType?: SessionResetByTypeConfig;
+    /** Channel-specific reset overrides (e.g. { discord: { mode: "idle", idleMinutes: 10080 } }). */
+    resetByChannel?: Record<string, SessionResetConfig>;
+    store?: string;
+    typingIntervalSeconds?: number;
+    typingMode?: TypingMode;
+    mainKey?: string;
+    sendPolicy?: SessionSendPolicyConfig;
+    agentToAgent?: {
+        /** Max ping-pong turns between requester/target (0–5). Default: 5. */
+        maxPingPongTurns?: number;
+    };
+};
+export type LoggingConfig = {
+    level?: "silent" | "fatal" | "error" | "warn" | "info" | "debug" | "trace";
+    file?: string;
+    consoleLevel?: "silent" | "fatal" | "error" | "warn" | "info" | "debug" | "trace";
+    consoleStyle?: "pretty" | "compact" | "json";
+    /** Redact sensitive tokens in tool summaries. Default: "tools". */
+    redactSensitive?: "off" | "tools";
+    /** Regex patterns used to redact sensitive tokens (defaults apply when unset). */
+    redactPatterns?: string[];
+};
+export type DiagnosticsOtelConfig = {
+    enabled?: boolean;
+    endpoint?: string;
+    protocol?: "http/protobuf" | "grpc";
+    headers?: Record<string, string>;
+    serviceName?: string;
+    traces?: boolean;
+    metrics?: boolean;
+    logs?: boolean;
+    /** Trace sample rate (0.0 - 1.0). */
+    sampleRate?: number;
+    /** Metric export interval (ms). */
+    flushIntervalMs?: number;
+};
+export type DiagnosticsCacheTraceConfig = {
+    enabled?: boolean;
+    filePath?: string;
+    includeMessages?: boolean;
+    includePrompt?: boolean;
+    includeSystem?: boolean;
+};
+export type DiagnosticsConfig = {
+    enabled?: boolean;
+    /** Optional ad-hoc diagnostics flags (e.g. "telegram.http"). */
+    flags?: string[];
+    otel?: DiagnosticsOtelConfig;
+    cacheTrace?: DiagnosticsCacheTraceConfig;
+};
+export type WebReconnectConfig = {
+    initialMs?: number;
+    maxMs?: number;
+    factor?: number;
+    jitter?: number;
+    maxAttempts?: number;
+};
+export type WebConfig = {
+    /** If false, do not start the WhatsApp web provider. Default: true. */
+    enabled?: boolean;
+    heartbeatSeconds?: number;
+    reconnect?: WebReconnectConfig;
+};
+export type AgentElevatedAllowFromConfig = Partial<Record<string, Array<string | number>>>;
+export type IdentityConfig = {
+    name?: string;
+    theme?: string;
+    emoji?: string;
+    /** Avatar image: workspace-relative path, http(s) URL, or data URI. */
+    avatar?: string;
+};

package/dist/plugin-sdk/config/types.browser.d.ts

@@ -0,0 +1,41 @@
+export type BrowserProfileConfig = {
+    /** CDP port for this profile. Allocated once at creation, persisted permanently. */
+    cdpPort?: number;
+    /** CDP URL for this profile (use for remote Chrome). */
+    cdpUrl?: string;
+    /** Profile driver (default: SKYKOI). */
+    driver?: "skykoi" | "extension";
+    /** Profile color (hex). Auto-assigned at creation. */
+    color: string;
+};
+export type BrowserSnapshotDefaults = {
+    /** Default snapshot mode (applies when mode is not provided). */
+    mode?: "efficient";
+};
+export type BrowserConfig = {
+    enabled?: boolean;
+    /** If false, disable browser act:evaluate (arbitrary JS). Default: true */
+    evaluateEnabled?: boolean;
+    /** Base URL of the CDP endpoint (for remote browsers). Default: loopback CDP on the derived port. */
+    cdpUrl?: string;
+    /** Remote CDP HTTP timeout (ms). Default: 1500. */
+    remoteCdpTimeoutMs?: number;
+    /** Remote CDP WebSocket handshake timeout (ms). Default: max(remoteCdpTimeoutMs * 2, 2000). */
+    remoteCdpHandshakeTimeoutMs?: number;
+    /** Accent color for the SKYKOI browser profile (hex). Default: #FF4500 */
+    color?: string;
+    /** Override the browser executable path (all platforms). */
+    executablePath?: string;
+    /** Start Chrome headless (best-effort). Default: false */
+    headless?: boolean;
+    /** Pass --no-sandbox to Chrome (Linux containers). Default: false */
+    noSandbox?: boolean;
+    /** If true: never launch; only attach to an existing browser. Default: false */
+    attachOnly?: boolean;
+    /** Default profile to use when profile param is omitted. Default: "chrome" */
+    defaultProfile?: string;
+    /** Named browser profiles with explicit CDP ports or URLs. */
+    profiles?: Record<string, BrowserProfileConfig>;
+    /** Default snapshot options (applied by the browser tool/CLI when unset). */
+    snapshotDefaults?: BrowserSnapshotDefaults;
+};

package/dist/plugin-sdk/config/types.channels.d.ts

@@ -0,0 +1,34 @@
+import type { GroupPolicy } from "./types.base.js";
+import type { DiscordConfig } from "./types.discord.js";
+import type { GoogleChatConfig } from "./types.googlechat.js";
+import type { IMessageConfig } from "./types.imessage.js";
+import type { MSTeamsConfig } from "./types.msteams.js";
+import type { SignalConfig } from "./types.signal.js";
+import type { SlackConfig } from "./types.slack.js";
+import type { TelegramConfig } from "./types.telegram.js";
+import type { WhatsAppConfig } from "./types.whatsapp.js";
+export type ChannelHeartbeatVisibilityConfig = {
+    /** Show HEARTBEAT_OK acknowledgments in chat (default: false). */
+    showOk?: boolean;
+    /** Show heartbeat alerts with actual content (default: true). */
+    showAlerts?: boolean;
+    /** Emit indicator events for UI status display (default: true). */
+    useIndicator?: boolean;
+};
+export type ChannelDefaultsConfig = {
+    groupPolicy?: GroupPolicy;
+    /** Default heartbeat visibility for all channels. */
+    heartbeat?: ChannelHeartbeatVisibilityConfig;
+};
+export type ChannelsConfig = {
+    defaults?: ChannelDefaultsConfig;
+    whatsapp?: WhatsAppConfig;
+    telegram?: TelegramConfig;
+    discord?: DiscordConfig;
+    googlechat?: GoogleChatConfig;
+    slack?: SlackConfig;
+    signal?: SignalConfig;
+    imessage?: IMessageConfig;
+    msteams?: MSTeamsConfig;
+    [key: string]: unknown;
+};

package/dist/plugin-sdk/config/types.cron.d.ts

@@ -0,0 +1,5 @@
+export type CronConfig = {
+    enabled?: boolean;
+    store?: string;
+    maxConcurrentRuns?: number;
+};

package/dist/plugin-sdk/config/types.d.ts

@@ -0,0 +1,29 @@
+export * from "./types.agent-defaults.js";
+export * from "./types.agents.js";
+export * from "./types.approvals.js";
+export * from "./types.auth.js";
+export * from "./types.base.js";
+export * from "./types.browser.js";
+export * from "./types.channels.js";
+export * from "./types.SKYKOI.js";
+export * from "./types.cron.js";
+export * from "./types.discord.js";
+export * from "./types.googlechat.js";
+export * from "./types.gateway.js";
+export * from "./types.hooks.js";
+export * from "./types.imessage.js";
+export * from "./types.messages.js";
+export * from "./types.models.js";
+export * from "./types.node-host.js";
+export * from "./types.msteams.js";
+export * from "./types.plugins.js";
+export * from "./types.queue.js";
+export * from "./types.sandbox.js";
+export * from "./types.signal.js";
+export * from "./types.skills.js";
+export * from "./types.slack.js";
+export * from "./types.telegram.js";
+export * from "./types.tts.js";
+export * from "./types.tools.js";
+export * from "./types.whatsapp.js";
+export * from "./types.memory.js";

package/dist/plugin-sdk/config/types.discord.d.ts

@@ -0,0 +1,151 @@
+import type { DiscordPluralKitConfig } from "../discord/pluralkit.js";
+import type { BlockStreamingCoalesceConfig, DmPolicy, GroupPolicy, MarkdownConfig, OutboundRetryConfig, ReplyToMode } from "./types.base.js";
+import type { ChannelHeartbeatVisibilityConfig } from "./types.channels.js";
+import type { DmConfig, ProviderCommandsConfig } from "./types.messages.js";
+import type { GroupToolPolicyBySenderConfig, GroupToolPolicyConfig } from "./types.tools.js";
+export type DiscordDmConfig = {
+    /** If false, ignore all incoming Discord DMs. Default: true. */
+    enabled?: boolean;
+    /** Direct message access policy (default: pairing). */
+    policy?: DmPolicy;
+    /** Allowlist for DM senders (ids or names). */
+    allowFrom?: Array<string | number>;
+    /** If true, allow group DMs (default: false). */
+    groupEnabled?: boolean;
+    /** Optional allowlist for group DM channels (ids or slugs). */
+    groupChannels?: Array<string | number>;
+};
+export type DiscordGuildChannelConfig = {
+    allow?: boolean;
+    requireMention?: boolean;
+    /** Optional tool policy overrides for this channel. */
+    tools?: GroupToolPolicyConfig;
+    toolsBySender?: GroupToolPolicyBySenderConfig;
+    /** If specified, only load these skills for this channel. Omit = all skills; empty = no skills. */
+    skills?: string[];
+    /** If false, disable the bot for this channel. */
+    enabled?: boolean;
+    /** Optional allowlist for channel senders (ids or names). */
+    users?: Array<string | number>;
+    /** Optional system prompt snippet for this channel. */
+    systemPrompt?: string;
+    /** If false, omit thread starter context for this channel (default: true). */
+    includeThreadStarter?: boolean;
+};
+export type DiscordReactionNotificationMode = "off" | "own" | "all" | "allowlist";
+export type DiscordGuildEntry = {
+    slug?: string;
+    requireMention?: boolean;
+    /** Optional tool policy overrides for this guild (used when channel override is missing). */
+    tools?: GroupToolPolicyConfig;
+    toolsBySender?: GroupToolPolicyBySenderConfig;
+    /** Reaction notification mode (off|own|all|allowlist). Default: own. */
+    reactionNotifications?: DiscordReactionNotificationMode;
+    users?: Array<string | number>;
+    channels?: Record<string, DiscordGuildChannelConfig>;
+};
+export type DiscordActionConfig = {
+    reactions?: boolean;
+    stickers?: boolean;
+    polls?: boolean;
+    permissions?: boolean;
+    messages?: boolean;
+    threads?: boolean;
+    pins?: boolean;
+    search?: boolean;
+    memberInfo?: boolean;
+    roleInfo?: boolean;
+    roles?: boolean;
+    channelInfo?: boolean;
+    voiceStatus?: boolean;
+    events?: boolean;
+    moderation?: boolean;
+    emojiUploads?: boolean;
+    stickerUploads?: boolean;
+    channels?: boolean;
+    /** Enable bot presence/activity changes (default: false). */
+    presence?: boolean;
+};
+export type DiscordIntentsConfig = {
+    /** Enable Guild Presences privileged intent (requires Portal opt-in). Default: false. */
+    presence?: boolean;
+    /** Enable Guild Members privileged intent (requires Portal opt-in). Default: false. */
+    guildMembers?: boolean;
+};
+export type DiscordExecApprovalConfig = {
+    /** Enable exec approval forwarding to Discord DMs. Default: false. */
+    enabled?: boolean;
+    /** Discord user IDs to receive approval prompts. Required if enabled. */
+    approvers?: Array<string | number>;
+    /** Only forward approvals for these agent IDs. Omit = all agents. */
+    agentFilter?: string[];
+    /** Only forward approvals matching these session key patterns (substring or regex). */
+    sessionFilter?: string[];
+};
+export type DiscordAccountConfig = {
+    /** Optional display name for this account (used in CLI/UI lists). */
+    name?: string;
+    /** Optional provider capability tags used for agent/runtime guidance. */
+    capabilities?: string[];
+    /** Markdown formatting overrides (tables). */
+    markdown?: MarkdownConfig;
+    /** Override native command registration for Discord (bool or "auto"). */
+    commands?: ProviderCommandsConfig;
+    /** Allow channel-initiated config writes (default: true). */
+    configWrites?: boolean;
+    /** If false, do not start this Discord account. Default: true. */
+    enabled?: boolean;
+    token?: string;
+    /** Allow bot-authored messages to trigger replies (default: false). */
+    allowBots?: boolean;
+    /**
+     * Controls how guild channel messages are handled:
+     * - "open": guild channels bypass allowlists; mention-gating applies
+     * - "disabled": block all guild channel messages
+     * - "allowlist": only allow channels present in discord.guilds.*.channels
+     */
+    groupPolicy?: GroupPolicy;
+    /** Outbound text chunk size (chars). Default: 2000. */
+    textChunkLimit?: number;
+    /** Chunking mode: "length" (default) splits by size; "newline" splits on every newline. */
+    chunkMode?: "length" | "newline";
+    /** Disable block streaming for this account. */
+    blockStreaming?: boolean;
+    /** Merge streamed block replies before sending. */
+    blockStreamingCoalesce?: BlockStreamingCoalesceConfig;
+    /**
+     * Soft max line count per Discord message.
+     * Discord clients can clip/collapse very tall messages; splitting by lines
+     * keeps replies readable in-channel. Default: 17.
+     */
+    maxLinesPerMessage?: number;
+    mediaMaxMb?: number;
+    historyLimit?: number;
+    /** Max DM turns to keep as history context. */
+    dmHistoryLimit?: number;
+    /** Per-DM config overrides keyed by user ID. */
+    dms?: Record<string, DmConfig>;
+    /** Retry policy for outbound Discord API calls. */
+    retry?: OutboundRetryConfig;
+    /** Per-action tool gating (default: true for all). */
+    actions?: DiscordActionConfig;
+    /** Control reply threading when reply tags are present (off|first|all). */
+    replyToMode?: ReplyToMode;
+    dm?: DiscordDmConfig;
+    /** New per-guild config keyed by guild id or slug. */
+    guilds?: Record<string, DiscordGuildEntry>;
+    /** Heartbeat visibility settings for this channel. */
+    heartbeat?: ChannelHeartbeatVisibilityConfig;
+    /** Exec approval forwarding configuration. */
+    execApprovals?: DiscordExecApprovalConfig;
+    /** Privileged Gateway Intents (must also be enabled in Discord Developer Portal). */
+    intents?: DiscordIntentsConfig;
+    /** PluralKit identity resolution for proxied messages. */
+    pluralkit?: DiscordPluralKitConfig;
+    /** Outbound response prefix override for this channel/account. */
+    responsePrefix?: string;
+};
+export type DiscordConfig = {
+    /** Optional per-account Discord configuration (multi-account). */
+    accounts?: Record<string, DiscordAccountConfig>;
+} & DiscordAccountConfig;

package/dist/plugin-sdk/config/types.gateway.d.ts

@@ -0,0 +1,224 @@
+export type GatewayBindMode = "auto" | "lan" | "loopback" | "custom" | "tailnet";
+export type GatewayTlsConfig = {
+    /** Enable TLS for the gateway server. */
+    enabled?: boolean;
+    /** Auto-generate a self-signed cert if cert/key are missing (default: true). */
+    autoGenerate?: boolean;
+    /** PEM certificate path for the gateway server. */
+    certPath?: string;
+    /** PEM private key path for the gateway server. */
+    keyPath?: string;
+    /** Optional PEM CA bundle for TLS clients (mTLS or custom roots). */
+    caPath?: string;
+};
+export type WideAreaDiscoveryConfig = {
+    enabled?: boolean;
+    /** Optional unicast DNS-SD domain (e.g. "skykoi.internal"). */
+    domain?: string;
+};
+export type MdnsDiscoveryMode = "off" | "minimal" | "full";
+export type MdnsDiscoveryConfig = {
+    /**
+     * mDNS/Bonjour discovery broadcast mode (default: minimal).
+     * - off: disable mDNS entirely
+     * - minimal: omit cliPath/sshPort from TXT records
+     * - full: include cliPath/sshPort in TXT records
+     */
+    mode?: MdnsDiscoveryMode;
+};
+export type DiscoveryConfig = {
+    wideArea?: WideAreaDiscoveryConfig;
+    mdns?: MdnsDiscoveryConfig;
+};
+export type CanvasHostConfig = {
+    enabled?: boolean;
+    /** Directory to serve (default: ~/.skykoi/workspace/canvas). */
+    root?: string;
+    /** HTTP port to listen on (default: 18793). */
+    port?: number;
+    /** Enable live-reload file watching + WS reloads (default: true). */
+    liveReload?: boolean;
+};
+export type TalkConfig = {
+    /** Default ElevenLabs voice ID for Talk mode. */
+    voiceId?: string;
+    /** Optional voice name -> ElevenLabs voice ID map. */
+    voiceAliases?: Record<string, string>;
+    /** Default ElevenLabs model ID for Talk mode. */
+    modelId?: string;
+    /** Default ElevenLabs output format (e.g. mp3_44100_128). */
+    outputFormat?: string;
+    /** ElevenLabs API key (optional; falls back to ELEVENLABS_API_KEY). */
+    apiKey?: string;
+    /** Stop speaking when user starts talking (default: true). */
+    interruptOnSpeech?: boolean;
+};
+export type GatewayControlUiConfig = {
+    /** If false, the Gateway will not serve the Control UI (default /). */
+    enabled?: boolean;
+    /** Optional base path prefix for the Control UI (e.g. "/SKYKOI"). */
+    basePath?: string;
+    /** Optional filesystem root for Control UI assets (defaults to dist/control-ui). */
+    root?: string;
+    /** Allowed browser origins for Control UI/WebChat websocket connections. */
+    allowedOrigins?: string[];
+    /** Allow token-only auth over insecure HTTP (default: false). */
+    allowInsecureAuth?: boolean;
+    /** DANGEROUS: Disable device identity checks for the Control UI (default: false). */
+    dangerouslyDisableDeviceAuth?: boolean;
+};
+export type GatewayAuthMode = "token" | "password";
+export type GatewayAuthConfig = {
+    /** Authentication mode for Gateway connections. Defaults to token when set. */
+    mode?: GatewayAuthMode;
+    /** Shared token for token mode (stored locally for CLI auth). */
+    token?: string;
+    /** Shared password for password mode (consider env instead). */
+    password?: string;
+    /** Allow Tailscale identity headers when serve mode is enabled. */
+    allowTailscale?: boolean;
+};
+export type GatewayTailscaleMode = "off" | "serve" | "funnel";
+export type GatewayTailscaleConfig = {
+    /** Tailscale exposure mode for the Gateway control UI. */
+    mode?: GatewayTailscaleMode;
+    /** Reset serve/funnel configuration on shutdown. */
+    resetOnExit?: boolean;
+};
+export type GatewayRemoteConfig = {
+    /** Remote Gateway WebSocket URL (ws:// or wss://). */
+    url?: string;
+    /** Transport for macOS remote connections (ssh tunnel or direct WS). */
+    transport?: "ssh" | "direct";
+    /** Token for remote auth (when the gateway requires token auth). */
+    token?: string;
+    /** Password for remote auth (when the gateway requires password auth). */
+    password?: string;
+    /** Expected TLS certificate fingerprint (sha256) for remote gateways. */
+    tlsFingerprint?: string;
+    /** SSH target for tunneling remote Gateway (user@host). */
+    sshTarget?: string;
+    /** SSH identity file path for tunneling remote Gateway. */
+    sshIdentity?: string;
+};
+export type GatewayReloadMode = "off" | "restart" | "hot" | "hybrid";
+export type GatewayReloadConfig = {
+    /** Reload strategy for config changes (default: hybrid). */
+    mode?: GatewayReloadMode;
+    /** Debounce window for config reloads (ms). Default: 300. */
+    debounceMs?: number;
+};
+export type GatewayHttpChatCompletionsConfig = {
+    /**
+     * If false, the Gateway will not serve `POST /v1/chat/completions`.
+     * Default: false when absent.
+     */
+    enabled?: boolean;
+};
+export type GatewayHttpResponsesConfig = {
+    /**
+     * If false, the Gateway will not serve `POST /v1/responses` (OpenResponses API).
+     * Default: false when absent.
+     */
+    enabled?: boolean;
+    /**
+     * Max request body size in bytes for `/v1/responses`.
+     * Default: 20MB.
+     */
+    maxBodyBytes?: number;
+    /** File inputs (input_file). */
+    files?: GatewayHttpResponsesFilesConfig;
+    /** Image inputs (input_image). */
+    images?: GatewayHttpResponsesImagesConfig;
+};
+export type GatewayHttpResponsesFilesConfig = {
+    /** Allow URL fetches for input_file. Default: true. */
+    allowUrl?: boolean;
+    /** Allowed MIME types (case-insensitive). */
+    allowedMimes?: string[];
+    /** Max bytes per file. Default: 5MB. */
+    maxBytes?: number;
+    /** Max decoded characters per file. Default: 200k. */
+    maxChars?: number;
+    /** Max redirects when fetching a URL. Default: 3. */
+    maxRedirects?: number;
+    /** Fetch timeout in ms. Default: 10s. */
+    timeoutMs?: number;
+    /** PDF handling (application/pdf). */
+    pdf?: GatewayHttpResponsesPdfConfig;
+};
+export type GatewayHttpResponsesPdfConfig = {
+    /** Max pages to parse/render. Default: 4. */
+    maxPages?: number;
+    /** Max pixels per rendered page. Default: 4M. */
+    maxPixels?: number;
+    /** Minimum extracted text length to skip rasterization. Default: 200 chars. */
+    minTextChars?: number;
+};
+export type GatewayHttpResponsesImagesConfig = {
+    /** Allow URL fetches for input_image. Default: true. */
+    allowUrl?: boolean;
+    /** Allowed MIME types (case-insensitive). */
+    allowedMimes?: string[];
+    /** Max bytes per image. Default: 10MB. */
+    maxBytes?: number;
+    /** Max redirects when fetching a URL. Default: 3. */
+    maxRedirects?: number;
+    /** Fetch timeout in ms. Default: 10s. */
+    timeoutMs?: number;
+};
+export type GatewayHttpEndpointsConfig = {
+    chatCompletions?: GatewayHttpChatCompletionsConfig;
+    responses?: GatewayHttpResponsesConfig;
+};
+export type GatewayHttpConfig = {
+    endpoints?: GatewayHttpEndpointsConfig;
+};
+export type GatewayNodesConfig = {
+    /** Browser routing policy for node-hosted browser proxies. */
+    browser?: {
+        /** Routing mode (default: auto). */
+        mode?: "auto" | "manual" | "off";
+        /** Pin to a specific node id/name (optional). */
+        node?: string;
+    };
+    /** Additional node.invoke commands to allow on the gateway. */
+    allowCommands?: string[];
+    /** Commands to deny even if they appear in the defaults or node claims. */
+    denyCommands?: string[];
+};
+export type GatewayConfig = {
+    /** Single multiplexed port for Gateway WS + HTTP (default: 18789). */
+    port?: number;
+    /**
+     * Explicit gateway mode. When set to "remote", local gateway start is disabled.
+     * When set to "local", the CLI may start the gateway locally.
+     */
+    mode?: "local" | "remote";
+    /**
+     * Bind address policy for the Gateway WebSocket + Control UI HTTP server.
+     * - auto: Loopback (127.0.0.1) if available, else 0.0.0.0 (fallback to all interfaces)
+     * - lan: 0.0.0.0 (all interfaces, no fallback)
+     * - loopback: 127.0.0.1 (local-only)
+     * - tailnet: Tailnet IPv4 if available (100.64.0.0/10), else loopback
+     * - custom: User-specified IP, fallback to 0.0.0.0 if unavailable (requires customBindHost)
+     * Default: loopback (127.0.0.1).
+     */
+    bind?: GatewayBindMode;
+    /** Custom IP address for bind="custom" mode. Fallback: 0.0.0.0. */
+    customBindHost?: string;
+    controlUi?: GatewayControlUiConfig;
+    auth?: GatewayAuthConfig;
+    tailscale?: GatewayTailscaleConfig;
+    remote?: GatewayRemoteConfig;
+    reload?: GatewayReloadConfig;
+    tls?: GatewayTlsConfig;
+    http?: GatewayHttpConfig;
+    nodes?: GatewayNodesConfig;
+    /**
+     * IPs of trusted reverse proxies (e.g. Traefik, nginx). When a connection
+     * arrives from one of these IPs, the Gateway trusts `x-forwarded-for` (or
+     * `x-real-ip`) to determine the client IP for local pairing and HTTP checks.
+     */
+    trustedProxies?: string[];
+};