mirror of
https://github.com/andrewyng/openworker.git
synced 2026-11-15 06:18:13 +00:00
Rohit C Prasad
8e29525970
Any host, no proxy; the files stay confined. Strict remains the default elsewhere. Settings offers it as a third choice; credential rows hide their hosts when it is on.
48 lines
2.5 KiB
TOML
48 lines
2.5 KiB
TOML
# coworker config — copy to one of:
|
|
# ~/.config/coworker/config.toml (global)
|
|
# <your-project>/.coworker/config.toml (per-workspace, overrides global)
|
|
#
|
|
# All keys are optional; unset keys fall back to built-in defaults.
|
|
|
|
model = "gpt-5.5" # default model id (override per session in the UI/CLI)
|
|
mode = "interactive" # plan | interactive | auto | custom
|
|
max_iterations = 12 # max model<->tool iterations per turn before stopping
|
|
# max_output_tokens = 64000 # per-reply output cap sent as max_tokens (thinking + text +
|
|
# tool arguments). Unset = provider default (32000; Bedrock
|
|
# 4096). Env override: COWORKER_MAX_OUTPUT_TOKENS.
|
|
# reasoning_effort = "high" # low | medium | high | xhigh | max — how hard the model thinks
|
|
# per reply, translated per provider (Anthropic output_config
|
|
# .effort; Together/Moonshot reasoning_effort). Unset = provider
|
|
# default (Anthropic high, Kimi K3 max). Env override:
|
|
# COWORKER_REASONING_EFFORT.
|
|
|
|
# Commands auto-allowed without an approval prompt (prefix match).
|
|
allowed_commands = [
|
|
"ls", "cat", "pwd", "grep", "find",
|
|
"git status", "git diff", "git log",
|
|
"python3", "pytest", "node", "npm",
|
|
]
|
|
|
|
# In "custom" permission mode, these tools are auto-approved (everything else still
|
|
# asks). e.g. auto-accept file edits but keep asking before running shell commands.
|
|
auto_allow = ["write_file", "replace_in_file", "apply_patch", "apply_unified_diff"]
|
|
|
|
# Server (openworker-server) bind address.
|
|
host = "127.0.0.1"
|
|
port = 8765
|
|
|
|
# --- Sandbox (machine-level; a project's config cannot change it) ---------------------
|
|
# Where a session's commands and file tools run: "direct" (in the OpenWorker process,
|
|
# the default), "openshell" (one NVIDIA OpenShell container per agent) or "seatbelt"
|
|
# (the sandbox built into macOS). See docs/openshell.md and docs/macos-sandbox.md.
|
|
# sandbox_provider = "openshell"
|
|
# Network allow list inside a sandbox: "strict" (code hosts and package registries),
|
|
# "standard" (plus the search APIs) or "open" (any host; the files are still confined).
|
|
# The default is "strict", or "open" on Windows.
|
|
# sandbox_network_profile = "strict"
|
|
# Credentials an agent may be given, copied into the sandbox for the session and deleted
|
|
# with it. All off unless enabled here or in Settings ▸ Sandbox.
|
|
# [[sandbox_credentials]]
|
|
# name = "ssh"
|
|
# enabled = true
|