WardrikDaemon.Config (wardrik_daemon v0.1.0-rc.1)

Copy Markdown

Reads config.yaml as the daemon starts.

org: acme
base_url: https://agents.acme.example
defaults:
  model: anthropic:claude-haiku-4-5
http:
  port: 4747

Keys

  • org - the deployment's org. default unless set.
  • orgs - other orgs to run agents for. See WardrikDaemon.Config.Orgs.
  • base_url - where people and services reach the deployment. The HTTP API's URL unless set.
  • defaults - what every agent gets where its definition says nothing.
  • models - prices for models the catalog lacks, by model spec, in dollars per million tokens: input, output, cache_read and cache_write, or priced_as another model, each with an optional markup. See Wardrik.Setup.price/2.
  • mcp - MCP servers agents may call. See WardrikDaemon.Config.MCP.
  • oauth - providers people connect accounts with. See WardrikDaemon.Config.OAuth.
  • channels - chat apps agents are reached through. See WardrikDaemon.Config.Channels.
  • notify - where agents' notices go. See WardrikDaemon.Config.Notify.
  • workspace - shared: file trees agents beyond their owners may mount, each with read and write lists of resource patterns.
  • brave - api_key, the key web_search searches with.
  • vault - keys, a list of the vault's keys.
  • http - port (4747), ip (WARDRIK_HTTP_IP, else 127.0.0.1) and trusted_workers (false).
  • storage - postgres: {url: ...} keeps everything in Postgres. The node's disk unless set.

tools, tokens, cluster and ssh aren't supported yet, and are skipped with a warning. Any other key is an error.

Secrets

${NAME} in any string is replaced with:

  1. the environment variable NAME, or one the env file sets, or else
  2. the deployment's secret NAME in the vault, which wardrik vault put NAME seals.

vault, http and storage are read before the vault opens, so they take the environment alone. A ${NAME} nothing sets is an error.

Summary

Types

t()
vault()

Looks up the deployment's secret name in the vault. Returns :error if it isn't there.

Functions

base_url(config)

Returns where people and services reach the deployment: base_url, or url/1 if it isn't set.

bootstrap(dirs, env)

Reads what's needed before the vault opens: the vault's keys, where HTTP listens, and storage. Fills in ${NAME} from env alone.

read(dirs, env, vault \\ nil)

Reads config.yaml in the config directory.

sealable(dirs)

Returns the ${NAME}s config.yaml names outside vault, http and storage. The vault may hold these.

url(config)

Returns the HTTP API's URL. An API bound to 0.0.0.0 is reached at 127.0.0.1.

Types

t()

@type t() :: %WardrikDaemon.Config{
  base_url: String.t() | nil,
  brave: String.t() | nil,
  channels: keyword(),
  defaults: map(),
  ip: :inet.ip_address(),
  keys: [String.t()],
  mcp: keyword(),
  notify: keyword(),
  oauth: keyword(),
  org: String.t(),
  orgs: %{required(String.t()) => WardrikDaemon.Config.Orgs.entry()},
  port: :inet.port_number(),
  prices: %{required(String.t()) => keyword()},
  storage: {:postgres, String.t()} | nil,
  trusted_workers: boolean(),
  warnings: [String.t()],
  workspace: keyword()
}

vault()

@type vault() :: (String.t() -> {:ok, String.t()} | :error)

Looks up the deployment's secret name in the vault. Returns :error if it isn't there.

Functions

base_url(config)

@spec base_url(t()) :: String.t()

Returns where people and services reach the deployment: base_url, or url/1 if it isn't set.

bootstrap(dirs, env)

@spec bootstrap(WardrikDaemon.Dirs.t(), %{required(String.t()) => String.t()}) ::
  {:ok,
   %{
     keys: [String.t()],
     port: :inet.port_number(),
     ip: :inet.ip_address(),
     storage: {:postgres, String.t()} | nil
   }}
  | {:error, String.t()}

Reads what's needed before the vault opens: the vault's keys, where HTTP listens, and storage. Fills in ${NAME} from env alone.

read(dirs, env, vault \\ nil)

@spec read(
  WardrikDaemon.Dirs.t(),
  %{required(String.t()) => String.t()},
  vault() | nil
) ::
  {:ok, t()} | {:error, String.t()}

Reads config.yaml in the config directory.

Fills in ${NAME} from env, then from vault. A missing file reads as the defaults. Returns {:error, reason}, naming the file and key, if it doesn't read.

sealable(dirs)

@spec sealable(WardrikDaemon.Dirs.t()) :: [String.t()]

Returns the ${NAME}s config.yaml names outside vault, http and storage. The vault may hold these.

url(config)

@spec url(t()) :: String.t()

Returns the HTTP API's URL. An API bound to 0.0.0.0 is reached at 127.0.0.1.