-
-
Notifications
You must be signed in to change notification settings - Fork 2
Expand file tree
/
Copy pathexample.toml
More file actions
150 lines (137 loc) · 7.98 KB
/
Copy pathexample.toml
File metadata and controls
150 lines (137 loc) · 7.98 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
# coven-github example configuration
# Copy to config/local.toml and fill in your values.
[server]
bind = "0.0.0.0:3000"
# Public URL for CovenCave deep links in Check Runs and PR comments.
# cave_base_url = "https://cave.opencoven.ai"
[github]
app_id = 123456 # Your GitHub App's numeric ID
private_key_path = "keys/private.pem" # Path to GitHub App private key PEM
webhook_secret = "CHANGE_ME" # Webhook secret set in GitHub App settings
# api_base_url = "https://api.github.com" # Override for GitHub Enterprise Server
[worker]
concurrency = 4
coven_code_bin = "/usr/local/bin/coven-code" # Path to coven-code binary
workspace_root = "/tmp/coven-github-tasks" # Ephemeral workspace root
timeout_secs = 600 # 10 minutes per task
max_retries = 2 # Retries for infra errors (exit code 2)
# ── Execution backend (issue #5) ────────────────────────────────────────────
# "host" — run coven-code directly (development / trusted self-hosting)
# "container" — one fresh hardened container per task attempt (hosted posture)
# With [[installations]] configured, the host backend is refused unless
# allow_host_backend = true.
# backend = "container"
# allow_host_backend = false
# [worker.container]
# image = "ghcr.io/opencoven/coven-code:latest"
# docker_bin = "docker" # docker / podman / nerdctl
# coven_code_bin = "coven-code" # invocation inside the image
# cpus = 1.0 # docker --cpus
# memory = "2g" # docker --memory (SIGKILL at the limit)
# pids = 512 # docker --pids-limit
# tmpfs_size = "256m" # writable /tmp inside the read-only rootfs
# network = "bridge" # or "none", or a custom egress-limited network
[storage]
# Durable adapter state: webhook deliveries (idempotency) and task records.
# SQLite file — keep it on a persistent volume; parents are created at start.
path = "data/coven-github.db"
# task_retention_days = 90 # expire terminal task history after N days (issue #12); omit to keep forever
# ── Task API auth (issue #3) ────────────────────────────────────────────────
# Gate GET /api/github/tasks. "open" = unauthenticated (local development
# ONLY — never expose publicly). "token" = bearer tokens required, fail
# closed; the hosted posture.
# [api]
# mode = "token"
# service_token = "GENERATE_LONG_RANDOM" # operator-wide visibility
# [[api.tenants]]
# token = "GENERATE_LONG_RANDOM" # one installation's visibility
# installation_id = 123456
# repos = ["your-org/your-repo"] # optional narrower scope
# ── Familiar configuration ──────────────────────────────────────────────────
# Add one [[familiars]] block per familiar you want to expose as a GitHub bot.
[[familiars]]
id = "cody"
display_name = "Cody"
bot_username = "coven-cody[bot]" # GitHub bot username for this familiar
model = "anthropic/claude-sonnet-4-6" # Model override (BYOM)
skills = ["systematic-debugging", "test-driven-development"]
trigger_labels = ["coven:fix", "coven:review"] # Labels that trigger this familiar
# [[familiars]]
# id = "nova"
# display_name = "Nova"
# bot_username = "coven-nova[bot]"
# model = "openai/gpt-5.5"
# skills = ["requesting-code-review"]
# trigger_labels = ["coven:review"]
# ── Installation-scoped routing (issue #7) ──────────────────────────────────
# Self-hosted default: no [[installations]] blocks — every installation sees
# every familiar with all triggers on. Once ANY block exists, routing fails
# closed for unlisted installations; hosted deployments list each customer
# installation here (or via the hosted control plane, which feeds the same
# resolution API).
# [[installations]]
# id = 123456 # GitHub App installation id
# account = "your-org"
# familiars = ["cody"] # allow-list; empty = all familiars
# [installations.limits] # tier limits (issue #15); omit = unlimited
# max_concurrent = 2 # tasks running at once for this installation
# max_tasks_per_day = 50 # accepted tasks per rolling 24h; overflow
# # deliveries are recorded ignored:quota_exceeded
# [installations.triggers] # installation-wide lane switches (default on)
# assignment = true
# labels = true
# commands = true
# reviews = true
# [installations.repos."your-org/frozen"]
# enabled = false # every lane off for this repo
# [installations.repos."your-org/quiet"]
# labels = false # only the label lane off
# ── Billing entitlements (hosted, docs/pricing.md) ──────────────────────────
# Marketplace purchases map plans to the same limit knobs automatically:
# `marketplace_purchase` webhooks record the purchasing account's plan, and
# `installation` events map installations to their account. Explicit
# [installations.limits] values always win over plan defaults (Dedicated
# contracts, operator overrides).
# [billing]
# require_plan = false # true (hosted): installations with neither an
# # entitled plan (active/trial) nor an explicit
# # [[installations]] entry are recorded
# # ignored:no_plan — the monetization gate.
# ── Automatic review policy ─────────────────────────────────────────────────
# Hosted PR review lanes (issue #10). Push/commit review is parsed today and
# ships with headless contract v3.
# [review]
# familiar = "cody" # Familiar that runs auto-triggered reviews
# pull_request = true # Review on opened/synchronize/reopened/ready_for_review
# include_drafts = false # Draft PRs are skipped unless explicitly labeled
# audit_instruction = "Focus on correctness and security."
# min_severity = "medium" # Withhold findings below this severity
# # (info | low | medium | high | critical)
# publish = "check_run" # Where gated findings go: check_run (default),
# # advisory_comment (also on the status comment),
# # request_changes (blocking PR review verdict)
# [review.repos."OpenCoven/coven-code"]
# pull_request = false # Per-repo override
# ── Hosted memory governance (issue #6) ─────────────────────────────────────
# Off by default. Enabling memory is a hosted decision coordinated with the
# coven-code side of the contract (docs/memory-contract.md). Fork and external
# actors can never write durable memory regardless of these settings.
# [memory]
# enabled = false
# approval_required = true # learned facts stay pending until a maintainer approves
# retention_days = 365 # forwarded to the runtime; also expires the adapter's memory audit
# [memory.repos."acme/billing"]
# enabled = true # per-repo opt-in
# ── Branch Gardener (issue #14) ──────────────────────────────────────────────
# Scheduled branch hygiene is off by default. Enable it per repository to scan
# branches, open draft PRs for PRless work, and optionally prune dead/merged refs.
# Scheduled runs require [[installations]] so the worker knows the installation id.
# [gardener]
# enabled = false
# autonomy = "propose" # propose (dry-run deletes) or prune-dead
# schedule = "0 4 * * *" # UTC daily; accepted form: M H * * *
# exclude = ["release/*", "hotfix/*"]
# draft_pr_label = "coven:garden"
# [gardener.repos."your-org/your-repo"]
# enabled = true
# autonomy = "propose"