clawverse/apress
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
48b88b0f0d083546fa377d900dbe81db0541565a
apress/deploy/uno-q/onboard-app/config.toml
T
Omar SobhandClaude Opus 4.8 909b9a7671 feat(uno-q): wire the native matrix_count path (relay + allowlist + skill) 
Adds the `count N` command to the host matrix-relay, allowlists + auto-approves
matrix_count for the default agent, and steers the led-matrix skill to use
matrix_count for "count to N once a second" instead of flashing a sketch (which
fails in the App Lab container). Pairs with the zeroclaw sketch/tool changes.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
2026-07-22 19:04:34 -07:00

410 lines
11 KiB
TOML
Raw Blame History

schema_version = 3
[providers.models.openrouter.default]
temperature = 0.3
[risk_profiles.default.delegation_policy]
mode = "forbidden"
[risk_profiles.sense_only.delegation_policy]
mode = "forbidden"
[risk_profiles.field_ops.delegation_policy]
mode = "forbidden"
[risk_profiles.field_flash.delegation_policy]
mode = "forbidden"
[risk_profiles.demo.delegation_policy]
mode = "forbidden"
[runtime_profiles.unoq.context_compression]
enabled = true
identifier_policy = "strict"
max_passes = 3
protect_first_n = 3
protect_last_n = 4
source_max_chars = 50000
summary_max_chars = 4000
summary_provider = ""
threshold_ratio = 0.5
timeout_secs = 60
tool_result_retrim_chars = 2000
tool_result_trim_exempt = []
[runtime_profiles.unoq.eval]
enabled = false
max_retries = 1
min_quality_score = 0.5
[runtime_profiles.unoq.history_pruning]
collapse_tool_results = true
enabled = false
keep_recent = 4
max_tokens = 8192
[runtime_profiles.unoq.thinking]
default_level = "medium"
native_thinking = false
[runtime_profiles.unoq.tool_receipts]
enabled = false
inject_system_prompt = true
show_in_response = false
[runtime_profiles.offline.context_compression]
enabled = true
identifier_policy = "strict"
max_passes = 3
protect_first_n = 3
protect_last_n = 4
source_max_chars = 50000
summary_max_chars = 4000
summary_provider = ""
threshold_ratio = 0.5
timeout_secs = 60
tool_result_retrim_chars = 2000
tool_result_trim_exempt = []
[runtime_profiles.offline.eval]
enabled = false
max_retries = 1
min_quality_score = 0.5
[runtime_profiles.offline.history_pruning]
collapse_tool_results = true
enabled = false
keep_recent = 4
max_tokens = 8192
[runtime_profiles.offline.thinking]
default_level = "medium"
native_thinking = false
[runtime_profiles.offline.tool_receipts]
enabled = false
inject_system_prompt = true
show_in_response = false
[agents.default.a2a]
exposed_skills = []
published = false
[agents.default.identity]
format = "openclaw"
[agents.default.memory]
backend = "sqlite"
[agents.default.precheck]
enabled = true
timeout_secs = 5
[agents.default.workspace]
read_memory_from = []
unrestricted_filesystem = false
[agents.cloud.a2a]
exposed_skills = []
published = false
[agents.cloud.identity]
format = "openclaw"
[agents.cloud.memory]
backend = "sqlite"
[agents.cloud.precheck]
enabled = true
timeout_secs = 5
[agents.cloud.workspace]
read_memory_from = []
unrestricted_filesystem = false
[agents.demo.a2a]
exposed_skills = []
published = false
[agents.demo.identity]
format = "openclaw"
[agents.demo.memory]
backend = "sqlite"
[agents.demo.precheck]
enabled = true
timeout_secs = 5
[agents.demo.workspace]
read_memory_from = []
unrestricted_filesystem = false
[[peripherals.boards]]
baud = 115200
board = "arduino-uno-q"
transport = "bridge"
[peer_groups.telegram_default]
admin_for_agent_scope = false
agents = []
channel = "telegram.default"
external_peers = ["8512813413"]
ignore = []
output_modality = "mirror"
[providers.models.custom.cloud]
uri = "http://127.0.0.1:8091/v1"
model = "sonnet"
native_tools = false
[runtime_profiles.unoq.thinking.budget_tokens]
[runtime_profiles.offline.thinking.budget_tokens]
[agents.default.workspace.access]
[agents.cloud.workspace.access]
[agents.demo.workspace.access]
# Native Anthropic via a Claude Max setup-token (sk-ant-oat01-…). Credential
# comes from the ANTHROPIC_OAUTH_TOKEN env on the daemon — kept OFF DISK.
[providers.models.anthropic.max]
model = "claude-sonnet-5"
[providers.models.custom.claude]
uri = "http://127.0.0.1:8091/v1"
model = "sonnet"
native_tools = false
fallback = ["llamacpp.local"]
[providers.models.llamacpp]
[providers.models.llamacpp.local]
uri = "http://127.0.0.1:8083/v1"
timeout_secs = 300
model = "qwen"
native_tools = false
[providers.models.custom]
[gateway]
port = 8080
host = "0.0.0.0"
allow_public_bind = true
require_pairing = false
web_dist_dir = "/app/web-dist"
paired_tokens = []
[skills]
prompt_injection_mode = "compact"
[risk_profiles.default]
level = "supervised"
allowed_tools = ["matrix_pattern", "matrix_text", "matrix_count", "i2c_scan", "uno_q_flash", "sysfs_led", "camera", "network", "i2cdetect", "read_skill", "file_read", "content_search"]
auto_approve = ["matrix_pattern", "matrix_text", "matrix_count", "i2c_scan", "uno_q_flash", "sysfs_led", "camera", "network", "i2cdetect", "read_skill", "file_read", "content_search", "memory_recall", "web_search_tool", "web_fetch", "calculator", "glob_search", "image_info", "weather", "tool_search", "browser", "browser_open"]
allowed_commands = ["git", "npm", "cargo", "ls", "cat", "grep", "find", "echo", "pwd", "wc", "head", "tail", "date", "df", "du", "uname", "uptime", "hostname", "python", "python3", "pip", "node", "free"]
allowed_roots = []
always_ask = []
block_high_risk_commands = true
excluded_tools = []
firejail_args = []
forbidden_paths = ["/etc", "/root", "/home", "/usr", "/bin", "/sbin", "/lib", "/opt", "/boot", "/dev", "/proc", "/sys", "/var", "/tmp", "~/.ssh", "~/.gnupg", "~/.aws", "~/.config"]
require_approval_for_medium_risk = true
shell_env_passthrough = []
workspace_only = true
[runtime_profiles.unoq]
agentic = true
max_tool_iterations = 6
strict_tool_parsing = false
max_actions_per_hour = 20
max_cost_per_day_cents = 500
max_delegation_depth = 0
shell_timeout_secs = 60
tool_call_dedup_exempt = []
tool_filter_groups = []
[agents.default]
enabled = true
model_provider = "anthropic.max"
risk_profile = "default"
runtime_profile = "unoq"
acp_enable_mcp = false
channels = ["telegram.default"]
classifier_provider = ""
cron_jobs = []
delegate_same_risk_profile = true
delegates = []
knowledge_bundles = []
mcp_bundles = []
skill_bundles = ["unoq"]
summary_provider = ""
transcription_provider = ""
tts_provider = ""
[peripherals]
enabled = true
[agents.cloud]
enabled = false
model_provider = "anthropic.max"
risk_profile = "default"
runtime_profile = "unoq"
acp_enable_mcp = false
channels = []
classifier_provider = ""
cron_jobs = []
delegate_same_risk_profile = true
delegates = []
knowledge_bundles = []
mcp_bundles = []
skill_bundles = ["unoq"]
summary_provider = ""
transcription_provider = ""
tts_provider = ""
[providers.models.custom.dead]
uri = "http://127.0.0.1:9099/v1"
model = "sonnet"
native_tools = false
fallback = ["llamacpp.local"]
[channels.voice_duplex.default]
enabled = true
excluded_tools = []
# ---------------------------------------------------------------------------
# LEAN OFFLINE PROFILE (experiment 2026-07-19)
# Everything that controls prompt size lives on the runtime profile.
# Goal: get the prompt from ~4718 tokens down under ~800 so the on-board
# 0.5B (17 tok/s prefill) can actually answer in seconds, not minutes.
# ---------------------------------------------------------------------------
[runtime_profiles.offline]
agentic = true
max_tool_iterations = 3
strict_tool_parsing = false
compact_context = true
prompt_injection_mode = "compact"
max_system_prompt_chars = 2000
max_context_tokens = 3000
max_history_messages = 2
memory_recall_limit = 1
parallel_tools = false
max_actions_per_hour = 20
max_cost_per_day_cents = 500
max_delegation_depth = 0
shell_timeout_secs = 60
tool_call_dedup_exempt = []
tool_filter_groups = []
# Narrow tool surface. Dropping the other peripheral tools also drops the
# hardware block + Uno-Q flash imperative from the system prompt entirely.
[risk_profiles.sense_only]
level = "supervised"
allowed_tools = ["i2cdetect"]
auto_approve = ["i2cdetect"]
allowed_commands = ["git", "npm", "cargo", "ls", "cat", "grep", "find", "echo", "pwd", "wc", "head", "tail", "date", "df", "du", "uname", "uptime", "hostname", "python", "python3", "pip", "node", "free"]
allowed_roots = []
always_ask = []
block_high_risk_commands = true
excluded_tools = []
firejail_args = []
forbidden_paths = ["/etc", "/root", "/home", "/usr", "/bin", "/sbin", "/lib", "/opt", "/boot", "/dev", "/proc", "/sys", "/var", "/tmp", "~/.ssh", "~/.gnupg", "~/.aws", "~/.config"]
require_approval_for_medium_risk = true
shell_env_passthrough = []
workspace_only = true
[risk_profiles.field_ops]
level = "supervised"
allowed_tools = ["i2cdetect", "sysfs_led", "file_read", "content_search", "network"]
auto_approve = ["i2cdetect", "sysfs_led", "file_read", "content_search", "network"]
allowed_commands = ["git", "npm", "cargo", "ls", "cat", "grep", "find", "echo", "pwd", "wc", "head", "tail", "date", "df", "du", "uname", "uptime", "hostname", "python", "python3", "pip", "node", "free"]
allowed_roots = []
always_ask = []
block_high_risk_commands = true
excluded_tools = []
firejail_args = []
forbidden_paths = ["/etc", "/root", "/home", "/usr", "/bin", "/sbin", "/lib", "/opt", "/boot", "/dev", "/proc", "/sys", "/var", "/tmp", "~/.ssh", "~/.gnupg", "~/.aws", "~/.config"]
require_approval_for_medium_risk = true
shell_env_passthrough = []
workspace_only = true
[risk_profiles.field_flash]
level = "supervised"
allowed_tools = ["i2cdetect", "sysfs_led", "file_read", "content_search", "network", "uno_q_flash"]
auto_approve = ["i2cdetect", "sysfs_led", "file_read", "content_search", "network", "uno_q_flash"]
allowed_commands = ["git", "npm", "cargo", "ls", "cat", "grep", "find", "echo", "pwd", "wc", "head", "tail", "date", "df", "du", "uname", "uptime", "hostname", "python", "python3", "pip", "node", "free"]
allowed_roots = []
always_ask = []
block_high_risk_commands = true
excluded_tools = []
firejail_args = []
forbidden_paths = ["/etc", "/root", "/home", "/usr", "/bin", "/sbin", "/lib", "/opt", "/boot", "/dev", "/proc", "/sys", "/var", "/tmp", "~/.ssh", "~/.gnupg", "~/.aws", "~/.config"]
require_approval_for_medium_risk = true
shell_env_passthrough = []
workspace_only = true
[risk_profiles.demo]
level = "supervised"
allowed_tools = ["matrix_pattern", "i2cdetect"]
auto_approve = ["matrix_pattern", "i2cdetect"]
allowed_commands = ["git", "npm", "cargo", "ls", "cat", "grep", "find", "echo", "pwd", "wc", "head", "tail", "date", "df", "du", "uname", "uptime", "hostname", "python", "python3", "pip", "node", "free"]
allowed_roots = []
always_ask = []
block_high_risk_commands = true
excluded_tools = []
firejail_args = []
forbidden_paths = ["/etc", "/root", "/home", "/usr", "/bin", "/sbin", "/lib", "/opt", "/boot", "/dev", "/proc", "/sys", "/var", "/tmp", "~/.ssh", "~/.gnupg", "~/.aws", "~/.config"]
require_approval_for_medium_risk = true
shell_env_passthrough = []
workspace_only = true
[agents.demo]
enabled = false
model_provider = "anthropic.max"
risk_profile = "default"
runtime_profile = "unoq"
skill_bundles = ["unoq"]
mcp_bundles = []
channels = ["telegram.default"]
acp_enable_mcp = false
classifier_provider = ""
cron_jobs = []
delegate_same_risk_profile = true
delegates = []
knowledge_bundles = []
summary_provider = ""
transcription_provider = ""
tts_provider = ""
[channels.telegram.default]
# Ships DISABLED: a tokenless channel would fail its getUpdates startup probe
# every 5s ("Startup probe: API error"), and that noise leaks into the module
# chat. The Telegram setup wizard flips this to enabled + a real bot_token when
# a team opts in (see api/src/nodes.ts configureTelegram).
enabled = false
bot_token = ""
api_base_url = "https://api.telegram.org"
approval_timeout_secs = 120
draft_update_interval_ms = 1000
excluded_tools = []
interrupt_on_new_message = false
mention_only = false
reply_min_interval_secs = 0
reply_queue_depth_max = 0
stream_mode = "off"
# All Uno Q hardware skills (led-matrix, uno-q-hardware, flashing, sketch-patterns,
# modulino, bridge, i2c/spi, ADXL355 context…) loaded onto every agent so it knows
# the board it is on and how to interface with the onboard devices.
[skill_bundles.unoq]
directory = "shared/skills"
include = []
exclude = []
Reference in New Issue View Git Blame Copy Permalink