mirror of
https://github.com/andrewyng/openworker.git
synced 2026-11-04 05:17:09 +00:00
91 lines
4.7 KiB
TOML
91 lines
4.7 KiB
TOML
# coworker config — copy to one of:
|
|
# ~/.config/coworker/config.toml (global; Windows: %APPDATA%\coworker\config.toml)
|
|
# <your-project>/.coworker/config.toml (per-workspace, overrides global)
|
|
#
|
|
# All keys are optional; unset keys fall back to built-in defaults.
|
|
# Security-sensitive keys (allowed_commands, auto_allow) are honored from the
|
|
# global file only; a workspace file's allowed_commands apply only after you
|
|
# trust that workspace.
|
|
|
|
model = "gpt-5.5" # default model id (override per session in the UI/CLI)
|
|
mode = "interactive" # plan | interactive | auto | custom
|
|
max_iterations = 12 # max model<->tool iterations per turn before stopping
|
|
# max_output_tokens = 64000 # per-reply output cap sent as max_tokens (thinking + text +
|
|
# tool arguments). Unset = provider default (32000; Bedrock
|
|
# 4096). Env override: COWORKER_MAX_OUTPUT_TOKENS.
|
|
# reasoning_effort = "high" # low | medium | high | xhigh | max — how hard the model thinks
|
|
# per reply, translated per provider (Anthropic output_config
|
|
# .effort; Together/Moonshot reasoning_effort). Unset = provider
|
|
# default (Anthropic high, Kimi K3 max). Env override:
|
|
# COWORKER_REASONING_EFFORT.
|
|
|
|
# Web search backend: "duckduckgo" (keyless, default) | "you" (keyless, optional key)
|
|
# | "tavily" | "brave" | "serper" | "exa" | "firecrawl". The usual place to pick one is
|
|
# the app's Settings ▸ Customization ▸ Web search, which also keeps each service's API
|
|
# key in the secret store; a choice made there wins over this line. Keys can also come
|
|
# from the environment as {NAME}_API_KEY (e.g. BRAVE_API_KEY).
|
|
web_search_provider = "duckduckgo"
|
|
|
|
# Commands auto-allowed without an approval prompt (prefix match).
|
|
allowed_commands = [
|
|
"ls", "cat", "pwd", "grep", "find",
|
|
"git status", "git diff", "git log",
|
|
"python3", "pytest", "node", "npm",
|
|
]
|
|
|
|
# In "custom" permission mode, these tools are auto-approved (everything else still
|
|
# asks). e.g. auto-accept file edits but keep asking before running shell commands.
|
|
auto_allow = ["write_file", "replace_in_file", "apply_patch", "apply_unified_diff"]
|
|
|
|
# Server (openworker-server) bind address.
|
|
host = "127.0.0.1"
|
|
port = 8765
|
|
|
|
# --- Sandbox (machine-level; a project's config cannot change it) ---------------------
|
|
# Where a session's commands and file tools run: "direct" (in the OpenWorker process,
|
|
# the default), "openshell" (one NVIDIA OpenShell container per agent) or "seatbelt"
|
|
# (the sandbox built into macOS). See docs/openshell.md and docs/macos-sandbox.md.
|
|
# sandbox_provider = "openshell"
|
|
# Network inside a sandbox: "allowlist" (only the sites listed below) or "open" (any
|
|
# site; the files are still confined). The default is "allowlist", or "open" on Windows.
|
|
# sandbox_network_profile = "allowlist"
|
|
# The sites an allow list lets through (host:port; a bare host means 443). None by default.
|
|
# sandbox_network_hosts = ["github.com:443", "pypi.org:443"]
|
|
# Config and keys exposed to agents, copied into the sandbox for the session and deleted
|
|
# with it. Only the entries named here are listed in Settings ▸ Sandbox; the shipped ones
|
|
# (ssh, gh, aws, aws-credentials, kube, npm, docker, gcloud, terraform) are added by name.
|
|
# An entry is a single file or a whole folder (the path decides), labelled "credential"
|
|
# or "configuration".
|
|
# [[sandbox_credentials]]
|
|
# name = "ssh"
|
|
# enabled = true
|
|
# [[sandbox_credentials]]
|
|
# name = "acme-token"
|
|
# path = "~/.config/acme/token"
|
|
# label = "credential"
|
|
# hosts = ["api.acme.dev:443"]
|
|
# enabled = true
|
|
# Developer tool folders under your home folder a sandbox may read (never write). The
|
|
# shipped list per platform is in Settings ▸ Sandbox; an entry here switches one off or
|
|
# adds one by name.
|
|
# [[sandbox_toolchains]]
|
|
# name = "nvm"
|
|
# enabled = false
|
|
# [[sandbox_toolchains]]
|
|
# name = "mytools"
|
|
# path = "~/tools"
|
|
|
|
# OpenWorker Cloud (sign-in + managed connectors + Slack/GitHub relay).
|
|
# Defaults point at production so a fresh install works out of the box; only
|
|
# dev/staging/BYO-VPC deployments need to change these.
|
|
#cloud_base_url = "https://api.openworker.com"
|
|
#cloud_auth_domain = "opencoworker.us.auth0.com"
|
|
#cloud_client_id = "g1l4Q1lhYWmyS03qPSf4KEJGrgq02Qam"
|
|
#cloud_audience = "https://api.opencoworker.app"
|
|
# Managed relay WebSocket endpoint (Slack/GitHub inbound). Set to "" to disable
|
|
# the relay entirely (manual Socket Mode still works).
|
|
#cloud_relay_ws_url = "wss://l4z1paxb83.execute-api.us-east-1.amazonaws.com/ocw-connect"
|
|
# Hosted machines service the Machines view proxies to. Set to "" to turn the
|
|
# cloud machines surface off entirely.
|
|
#cloud_machines_base = "https://machines.openworker.com"
|