refactor(config): generate paas profile from default overlay

config/paas.yaml

@@ -1,35 +1,134 @@
-# Flynn PaaS-friendly configuration template
+# Flynn generated profile
+# Profile: paas
 #
-# Intended for: Fly.io / Railway / Render (or any platform that provides PORT).
-# - Binds the gateway on all interfaces (required for container/PaaS routing).
-# - Relies on `${ENV_VAR}` expansion so secrets stay in platform env vars.
+# This file is auto-generated from:
+# - config/default.yaml
+# - config/profiles/paas.overlay.yaml
 #
-# For a full example with more options, see: config/default.yaml
-
+# Do not edit this file directly.
+# Regenerate with: pnpm config:profiles:generate
+telegram:
+  bot_token: ${FLYNN_TELEGRAM_TOKEN}
+  allowed_chat_ids: []
 server:
+  tailscale:
+    serve: false
   localhost: false
-  port: 18800 # Overridden by PORT env var when set.
-
+  port: 18800
+  max_request_body_bytes: 1048576
+  ws_rate_limit:
+    enabled: true
+    capacity: 30
+    refill_per_sec: 15
+    max_violations: 8
+    violation_window_ms: 10000
+  queue:
+    mode: collect
+    cap: 50
+    overflow: drop_old
+    debounce_ms: 0
+    summarize_overflow: true
+    overrides:
+      channels: {}
+      sessions: {}
+  nodes:
+    enabled: false
+    allowed_roles:
+      - companion
+    feature_gates: {}
+    location:
+      enabled: false
+    push:
+      enabled: false
+  webchat_push:
+    enabled: false
+    max_subscriptions: 5000
+  discovery:
+    enabled: false
+    service_name: flynn-gateway
+    service_type: _flynn._tcp
+    txt: {}
 models:
-  fast:
-    provider: anthropic
-    model: claude-haiku-4-5-20251001
-    api_key: ${ANTHROPIC_API_KEY}
   default:
     provider: anthropic
     model: claude-sonnet-4-20250514
+    auth_mode: api_key
+    api_key: ${ANTHROPIC_API_KEY}
+  fast:
+    provider: anthropic
+    model: claude-haiku-4-5-20251001
     api_key: ${ANTHROPIC_API_KEY}
   complex:
     provider: anthropic
     model: claude-opus-4-6-20250715
     api_key: ${ANTHROPIC_API_KEY}
-
-# Recommended safe defaults for internet-exposed deployments.
+  local:
+    provider: ollama
+    model: glm-4.7-flash
+  fallback_chain:
+    - local
+  local_providers:
+    ollama:
+      provider: ollama
+      model: glm-4.7-flash
+      endpoint: http://localhost:11434
+    llamacpp:
+      provider: llamacpp
+      model: gpt-oss-20b
+      endpoint: http://localhost:8080
+hooks:
+  confirm:
+    - shell.*
+    - process.start
+    - process.kill
+    - browser.*
+    - message.send
+    - cron.create
+    - cron.delete
+    - file.write
+    - file.patch
+  log:
+    - web.*
+    - file.read
+  silent:
+    - notify
+agents:
+  sensitive_mode: confirm_without_elevation
+memory:
+  enabled: true
+  auto_extract: true
+  embedding:
+    enabled: true
+    provider: ollama
+    model: nomic-embed-text
+    endpoint: http://localhost:11434
+    chunk_size: 512
+    chunk_overlap: 50
+    top_k: 5
+    hybrid_weight: 0.7
+automation:
+  heartbeat:
+    enabled: true
+    interval: 5m
+    notify_cooldown: 30m
+    checks:
+      - gateway
+      - model
+      - channels
+      - memory
+      - disk
+      - process_memory
+      - backup
+      - provider_errors
+    failure_threshold: 2
+    disk_threshold_mb: 100
+    process_memory_threshold_mb: 1500
+    backup_failure_threshold: 1
+    provider_error_rate_threshold: 0.5
+    provider_error_min_calls: 5
 pairing:
   enabled: true
-
 tools:
   profile: messaging
-
 sandbox:
   enabled: true

config/profiles/paas.overlay.yaml

@@ -0,0 +1,25 @@
+# PaaS profile overlay.
+# This file contains only overrides from config/default.yaml.
+
+models:
+  fast:
+    provider: anthropic
+    model: claude-haiku-4-5-20251001
+    api_key: ${ANTHROPIC_API_KEY}
+  default:
+    provider: anthropic
+    model: claude-sonnet-4-20250514
+    api_key: ${ANTHROPIC_API_KEY}
+  complex:
+    provider: anthropic
+    model: claude-opus-4-6-20250715
+    api_key: ${ANTHROPIC_API_KEY}
+
+pairing:
+  enabled: true
+
+tools:
+  profile: messaging
+
+sandbox:
+  enabled: true