mirror of
https://github.com/andrewyng/openworker.git
synced 2026-11-15 14:48:42 +00:00
47 lines
2.3 KiB
TOML
47 lines
2.3 KiB
TOML
# coworker config — copy to one of:
|
|
# ~/.config/coworker/config.toml (global)
|
|
# <your-project>/.coworker/config.toml (per-workspace, overrides global)
|
|
#
|
|
# All keys are optional; unset keys fall back to built-in defaults.
|
|
|
|
model = "gpt-5.5" # default model id (override per session in the UI/CLI)
|
|
mode = "interactive" # plan | interactive | auto | custom
|
|
max_iterations = 12 # max model<->tool iterations per turn before stopping
|
|
# max_output_tokens = 64000 # per-reply output cap sent as max_tokens (thinking + text +
|
|
# tool arguments). Unset = provider default (32000; Bedrock
|
|
# 4096). Env override: COWORKER_MAX_OUTPUT_TOKENS.
|
|
# reasoning_effort = "high" # low | medium | high | xhigh | max — how hard the model thinks
|
|
# per reply, translated per provider (Anthropic output_config
|
|
# .effort; Together/Moonshot reasoning_effort). Unset = provider
|
|
# default (Anthropic high, Kimi K3 max). Env override:
|
|
# COWORKER_REASONING_EFFORT.
|
|
|
|
# Commands auto-allowed without an approval prompt (prefix match).
|
|
allowed_commands = [
|
|
"ls", "cat", "pwd", "grep", "find",
|
|
"git status", "git diff", "git log",
|
|
"python3", "pytest", "node", "npm",
|
|
]
|
|
|
|
# In "custom" permission mode, these tools are auto-approved (everything else still
|
|
# asks). e.g. auto-accept file edits but keep asking before running shell commands.
|
|
auto_allow = ["write_file", "replace_in_file", "apply_patch", "apply_unified_diff"]
|
|
|
|
# Server (openworker-server) bind address.
|
|
host = "127.0.0.1"
|
|
port = 8765
|
|
|
|
# --- Sandbox (machine-level; a project's config cannot change it) ---------------------
|
|
# Where a session's commands and file tools run: "direct" (in the OpenWorker process,
|
|
# the default) or "openshell" (one NVIDIA OpenShell container per agent).
|
|
# See docs/openshell.md.
|
|
# sandbox_provider = "openshell"
|
|
# Network allow list inside a sandbox: "strict" (code hosts and package registries) or
|
|
# "standard" (plus the search APIs).
|
|
# sandbox_network_profile = "strict"
|
|
# Credentials an agent may be given, copied into the sandbox for the session and deleted
|
|
# with it. All off unless enabled here or in Settings ▸ Sandbox.
|
|
# [[sandbox_credentials]]
|
|
# name = "ssh"
|
|
# enabled = true
|