Config Reference

ZeroClaw is configured via a TOML file. All fields are optional unless noted.

a2a

[a2a] section wrapper. Kept as a dedicated wrapper so the a2a table can host sibling sub-tables (outbound client config, signing) in later slices without moving server.

Server-level exposure gate for A2A agent discovery. Default-closed: the server serves nothing until [a2a.server] enabled = true, and even then only aliases that opt in via [agents.<alias>.a2a] published = true appear. The discovery routes serve on the gateway’s own listener; public exposure follows the gateway’s bind posture. See crates/zeroclaw-gateway/src/a2a.rs.

a2a.server

[a2a.server] — inbound A2A discovery server.

Wrapped under [a2a.server] (two-level) via [A2aServerSection] so the a2a table can grow sibling sub-tables later (e.g. client config) without a breaking move.

acp

ACP (Agent Client Protocol) server configuration ([acp] section).

agents

Aliased agents in this install. Each entry under [agents.<alias>] is one user-facing agent with its own identity, channels, model provider, risk profile, workspace, and memory scope. DelegateTool consults this map when one agent delegates a subtask to another.

agents.<alias>

Configuration for an aliased agent. Each [agents.<alias>] TOML block deserializes into one of these. The DelegateTool looks up entries here to dispatch a subtask to a named sibling agent.

agents.<alias>.a2a

Per-alias A2A publication block ([agents.<alias>.a2a]).

Default-closed second gate: even with the server enabled, an alias is absent from discovery until published = true. exposed_skills is a filter over the alias’s resolved skill set (from skill_bundles / mcp_bundles), never a parallel registry: empty means expose no skills on the card; a non-empty list selects which resolved skill ids appear. The bundles remain the single source of truth for what the agent can do.

agents.<alias>.identity

Identity format configuration ([identity] section).

Supports "openclaw" (default) or "aieos" identity documents.

agents.<alias>.memory

Per-agent memory backend selection, nested under [agents.<alias>.memory].

The backend field is locked at agent creation and immutable on subsequent loads (Config::validate() enforces this against the persisted on-disk state). Cross-backend memory sharing across the per-agent read_memory_from allowlist is rejected at validation: allowlist entries must point at same-backend siblings.

agents.<alias>.precheck

Channel reply-intent precheck configuration.

The precheck runs a lightweight REPLY / NO_REPLY classifier before the main agent loop so group-chat messages that are not addressed to the assistant do not trigger a full tool-using turn.

In V3 multi-agent configs this block is configured inside each agent as [agents.<alias>.precheck]. Defaults preserve the current behavior: the classifier is enabled, model/provider selection follows the agent’s classifier_provider ref when configured and otherwise reuses the active route model, and provider errors or timeouts fail open to REPLY. timeout_secs must be greater than zero.

agents.<alias>.workspace

Per-agent filesystem and cross-agent access settings, nested under [agents.<alias>.workspace].

path = None means derive the working directory from the install root and agent alias (<install>/agents/<alias>/workspace/); set Some(path) to put a specific agent’s workspace on a different disk or filesystem. The access map is the inbound cross-agent filesystem allowlist (key = sibling agent alias, value = read/write/read+write grant); empty means jailed. unrestricted_filesystem is the escape hatch for agents that genuinely need to read or write outside any per-agent scope; off by default and audited.

read_memory_from is the cross-agent memory allowlist (parallel to access but for the memory layer). The schema validates entries for cross-reference and same-backend invariants at config load.

backup

Backup tool configuration ([backup] section).

browser

Browser automation configuration ([browser] section).

Controls the browser_open tool and browser automation backends.

browser.computer_use

Computer-use sidecar configuration ([browser.computer_use] section).

Delegates OS-level mouse, keyboard, and screenshot actions to a local sidecar.

browser_delegate

channels

Top-level channel configurations ([channels] section).

each channel type is a keyed table of named instances (aliases). [channels.telegram.default] is the conventional single-instance key. Access via config.channels.telegram.get("default").

claude_code

Claude Code CLI tool configuration ([claude_code] section).

Delegates coding tasks to the claude -p CLI. Authentication uses the binary’s own OAuth session (Max subscription) by default — no API key needed unless env_passthrough includes ANTHROPIC_API_KEY.

claude_code_runner

Claude Code task runner configuration ([claude_code_runner] section).

Spawns Claude Code in a tmux session with HTTP hooks that POST tool execution events back to ZeroClaw’s gateway, updating a Slack message in-place with progress plus an SSH handoff link.

cloud_ops

Controls the read-only cloud transformation analysis tools: IaC review, migration assessment, cost analysis, and architecture review.

codex_cli

Codex CLI tool configuration ([codex_cli] section).

Delegates coding tasks to the codex exec CLI. Authentication uses the binary’s own session by default — no API key needed unless env_passthrough includes OPENAI_API_KEY.

composio

Composio managed OAuth tools integration ([composio] section).

Provides access to 1000+ OAuth-connected tools via the Composio platform.

conversational_ai

Conversational AI agent builder configuration ([conversational_ai] section).

Status: Reserved for future use. This configuration is parsed but not yet consumed by the runtime. Setting enabled = true will produce a startup warning.

cost

Cost tracking and budget enforcement configuration ([cost] section).

cost.enforcement

Configuration for cost enforcement behavior when budget limits are reached.

cost.rates

[cost.rates] — top-level rate-sheet namespace. Mirrors the [providers.*] shape so each subsection here points at the same kind of resource its [providers.*] counterpart configures.

cost.rates.providers

[cost.rates.providers.*] — provider-shaped rate sheets. Each field here mirrors a corresponding field on [providers.*] with the trailing alias segment replaced by the resource the rate prices. The inner typed wrappers carry the per-provider-type slot layout and own dispatch (their slot list is the single source of truth, shared with their providers counterpart via the for_each_*_provider_slot! macros in [crate::providers]).

cron

Declarative cron jobs ([cron.<alias>]), alias-keyed.

Each entry is a named scheduled job synced into the database at scheduler startup. Subsystem runtime knobs (enable/disable, catch-up, run-history retention) live on [scheduler].

cron.<alias>

A declarative cron job definition ([cron.<alias>]).

Stored alias-keyed on Config.cron. The map key serves as the stable job id. Synced into the database at scheduler startup with source = "declarative", distinguishing them from jobs created imperatively via CLI or API. Declarative config takes precedence on each sync: if the config changes, the DB is updated to match. Imperative jobs are never deleted by sync.

cron.<alias>.delivery

Delivery configuration for declarative cron jobs.

data_retention

Data retention and purge configuration ([data_retention] section).

delegate

Global delegate tool configuration for default timeout values.

embedding_routes

Embedding-routing rules — route hint:<name> to specific model_provider + model combos for embedding requests.

escalation

Escalation routing configuration ([escalation] section).

Controls which channels receive alert notifications when escalate_to_human is called with high or critical urgency. Channels are identified by name (e.g. "telegram", "slack"). Alerts are sent best-effort and do not block the escalation.

eval

Configuration for the agent evaluation harness ([eval]), surfaced via the zeroclaw eval command. Distinct from [agent.eval], which is the in-loop response-quality scorer.

file_download

Standalone file download tool configuration ([file_download]).

When url is set to a non-empty value, registers a file_download tool that GETs a file from the configured endpoint and writes it to the agent’s workspace filesystem. The LLM supplies only a document identifier and a workspace-relative destination path; the endpoint URL comes solely from this config and is never model-controlled. Response bytes are streamed to disk and never loaded into model context.

When url is None or empty, the tool is not registered.

file_upload

Standalone file upload tool configuration ([file_upload]).

When url is set to a non-empty value, registers a file_upload tool that POSTs files from the agent’s local filesystem to the configured endpoint using multipart/form-data. The LLM provides only a file path; the host reads the bytes and uploads them without ever including file content in the model context.

When url is None or empty, the tool is not registered.

file_upload_bundle

Standalone multi-file bundle upload tool configuration ([file_upload_bundle]).

When url is set to a non-empty value, registers a file_upload_bundle tool that POSTs N files from the agent’s local filesystem to the configured endpoint as a single multipart/form-data request. The LLM provides only file paths; the host reads the bytes.

When url is None or empty, the tool is not registered.

gateway

Gateway server configuration ([gateway] section).

Controls the HTTP gateway for webhook and pairing endpoints.

gateway.pairing_dashboard

Pairing dashboard configuration ([gateway.pairing_dashboard]).

gateway.tls

TLS configuration for the gateway server ([gateway.tls]).

gateway.tls.client_auth

Client certificate authentication (mTLS) configuration ([gateway.tls.client_auth]).

gemini_cli

Gemini CLI tool configuration ([gemini_cli] section).

Delegates coding tasks to the gemini -p CLI. Authentication uses the binary’s own session by default — no API key needed unless env_passthrough includes GOOGLE_API_KEY.

google_workspace

Google Workspace CLI (gws) tool configuration ([google_workspace] section).

Defaults

• enabled: false (tool is not registered unless explicitly opted-in).
• allowed_services: empty vector, which grants access to the full default service set: drive, sheets, gmail, calendar, docs, slides, tasks, people, chat, classroom, forms, keep, meet, events.
• allowed_operations: empty vector, which preserves the legacy behavior of allowing any resource/method under the allowed service set.
• credentials_path: None (uses default gws credential discovery).
• default_account: None (uses the gws active account).
• rate_limit_per_minute: 60.
• timeout_secs: 30.
• audit_log: false.

Compatibility

Configs that omit the [google_workspace] section entirely are treated as GoogleWorkspaceConfig::default() (disabled, all defaults allowed). Adding the section is purely opt-in and does not affect other config sections.

Rollback / Migration

To revert, remove the [google_workspace] section from the config file (or set enabled = false). No data migration is required; the tool simply stops being registered.

hardware

Wizard-driven hardware configuration for physical world interaction.

heartbeat

Heartbeat configuration for periodic health pings ([heartbeat] section).

hooks

hooks.builtin

hooks.builtin.webhook_audit

Configuration for the webhook-audit builtin hook.

Sends an HTTP POST with a JSON body to an external endpoint each time a tool call matches one of the configured patterns. Useful for centralised audit logging, SIEM ingestion, or compliance pipelines.

http_request

HTTP request tool configuration ([http_request] section).

Domain filtering: allowed_domains controls which hosts are reachable (use ["*"] for all public hosts, which is the default). If allowed_domains is empty, all requests are rejected.

image_gen

Standalone image generation tool configuration ([image_gen]).

When enabled, registers an image_gen tool that generates images via fal.ai’s synchronous API (Flux / Nano Banana models) and saves them to the workspace images/ directory.

jira

Jira integration configuration ([jira]).

When enabled = true, registers the jira tool which can get tickets, search with JQL, and add comments. Requires base_url and api_token (or the JIRA_API_TOKEN env var).

Defaults

• enabled: false
• allowed_actions: ["get_ticket"] — read-only by default. Add "search_tickets" or "comment_ticket" to unlock them.
• timeout_secs: 30

Auth

Jira Cloud uses HTTP Basic auth: email + api_token. Jira Server/Data Center uses Bearer token auth: omit email and set api_token to a personal access token. api_token is stored encrypted at rest; set it here or via JIRA_API_TOKEN.

knowledge

Knowledge graph configuration for capturing and reusing expertise.

knowledge_bundles

Named knowledge bundles ([knowledge_bundles.<alias>]).

knowledge_bundles.<alias>

Named knowledge bundle ([knowledge_bundles.<alias>]).

A reusable set of knowledge sources (documents, URLs, or RAG corpus paths) that can be attached to an agent by alias.

link_enricher

Automatic link understanding for inbound channel messages ([link_enricher]).

When enabled, URLs in incoming messages are automatically fetched and summarised. The summary is prepended to the message before the agent processes it, giving the LLM context about linked pages without an explicit tool call.

linkedin

LinkedIn integration configuration ([linkedin] section).

When enabled, the linkedin tool is registered in the agent tool surface. Requires LINKEDIN_* credentials in the workspace .env file.

linkedin.content

Content strategy configuration for LinkedIn auto-posting ([linkedin.content]).

The agent reads this via the linkedin get_content_strategy action to know what feeds to check, which repos to highlight, and how to write posts.

linkedin.image

Image generation configuration for LinkedIn posts ([linkedin.image]).

linkedin.image.dalle

OpenAI DALL-E settings ([linkedin.image.dalle]).

linkedin.image.flux

Flux (fal.ai) image generation settings ([linkedin.image.flux]).

linkedin.image.imagen

Google Imagen (Vertex AI) settings ([linkedin.image.imagen]).

linkedin.image.stability

Stability AI image generation settings ([linkedin.image.stability]).

locale

Locale for tool descriptions (e.g. "en", "zh-CN").

When set, tool descriptions shown in system prompts are loaded from Fluent .ftl locale files. Falls back to embedded English, then to hardcoded descriptions.

If omitted or empty, the locale is auto-detected from the host system’s locale (defaulting to "en" if that can’t be determined).

mcp

External MCP client configuration ([mcp] section).

mcp_bundles

Named MCP server bundles ([mcp_bundles.<alias>]).

mcp_bundles.<alias>

Named MCP server bundle ([mcp_bundles.<alias>]).

A reusable group of MCP servers granted to an agent that references the bundle by alias in agents.<alias>.mcp_bundles. Server IDs are matched against [mcp.servers] by name. Resolution is secure by default (see Config::mcp_servers_for_bundles): an ID with no matching server grants nothing, and exclude wins over servers across every bundle an agent references.

media_pipeline

Automatic media understanding pipeline configuration ([media_pipeline]).

When enabled, inbound channel messages with media attachments are pre-processed before reaching the agent: audio is transcribed, images are annotated, and videos are summarised.

memory

Memory backend configuration ([memory] section).

Controls conversation memory storage, embeddings, hybrid search, response caching, and memory snapshot/hydration. Backend-specific connection settings live under [storage.<backend>.<alias>]; this section selects which storage instance to use via the backend dotted reference.

memory.policy

Memory policy configuration ([memory.policy] section).

microsoft365

Microsoft 365 integration via Microsoft Graph API ([microsoft365] section).

Provides access to Outlook mail, Teams messages, Calendar events, OneDrive files, and SharePoint search.

model_routes

Model-routing rules — route hint:<name> to specific model_provider + model combos.

multimodal

Multimodal (image) handling configuration ([multimodal] section).

Privacy and cost note

Tool results that print real local image paths (e.g. shell tools doing ls /pictures or find . -name '*.png') are canonicalized into [IMAGE:...] markers and base64-inlined into the next provider request. This means image bytes that previously stayed local will be uploaded to the configured provider when surfaced by a tool.

max_images (and the trim_old_images LRU policy) bounds the per-request image budget, but operators running shell-style tools over directories of personal or sensitive images should be aware of the upload semantics. See docs/book/src/contributing/privacy.md for the project’s privacy stance.

node_transport

Secure transport configuration for inter-node communication ([node_transport]).

nodes

Configuration for the dynamic node discovery system ([nodes]).

When enabled, external processes/devices can connect via WebSocket at /ws/nodes and advertise their capabilities at runtime.

notion

Notion integration configuration ([notion]).

When enabled = true, the agent polls a Notion database for pending tasks and exposes a notion tool for querying, reading, creating, and updating pages. Requires api_key (or the NOTION_API_KEY env var) and database_id.

observability

Observability backend configuration ([observability] section).

onboard_state

Multi-client workspace isolation configuration.

When enabled, each client engagement gets an isolated workspace with separate memory, audit, secrets, and tool restrictions. Opaque state the Quickstart flow writes so it can tell, on a re-run, which sections the user has already walked through at least once — which lets it offer “Reconfigure? [y/N]” skip gates instead of forcing users through every field again.

This is meta-state about the Quickstart flow, not user-facing config.

opencode_cli

OpenCode CLI tool configuration ([opencode_cli] section).

Delegates coding tasks to the opencode run CLI. Authentication uses the binary’s own session by default — no API key needed unless env_passthrough includes provider-specific keys.

pacing

Pacing controls for slow/local LLM workloads ([pacing] section).

All fields are optional and default to values that preserve existing behavior. When set, they extend — not replace — the existing timeout and loop-detection subsystems.

peer_groups

Named peer groups ([peer_groups.<name>]). Each entry binds a channel, a list of member agents, and optional non-agent (external) members and a per-group blocklist. Mutual opt-in: two agents become peers only when both appear in the same group’s agents. Empty by default for single-agent installs. See crate::multi_agent::PeerGroupConfig.

peer_groups.<alias>

[peer_groups.<name>] — mutual-opt-in peer group on a channel type.

peripherals

Peripheral board integration configuration ([peripherals] section).

Boards become agent tools when enabled.

pipeline

Pipeline tool configuration ([pipeline] section).

plugins

Plugin system configuration.

plugins.limits

Per-call WASM execution limits ([plugins.limits]).

Bounds a single plugin call so a runaway or malicious component traps instead of hanging the host or exhausting memory. call_fuel caps instructions per call; the memory, table, and instance ceilings bound a store’s growth. Every value is operator-tunable and validated as non-zero.

plugins.security

Plugin signature verification configuration ([plugins.security]).

Controls Ed25519 signature verification for plugin manifests. In strict mode, only plugins signed by a trusted publisher key are loaded. In permissive mode, unsigned or untrusted plugins produce warnings but are still loaded. In disabled mode (the default), no signature checking occurs.

project_intel

Project delivery intelligence configuration ([project_intel] section).

providers

Top-level wrapper for every provider category. TOML root sees a single [providers] table with one sub-key per category:

[providers.models.anthropic.default]
api_key = "..."

[providers.tts.openai.default]
api_key = "..."

[providers.transcription.groq.default]
api_key = "..."

Each category keeps its own typed-slot internals (so per-family endpoints and extras stay validated at the type level); this wrapper just gives them a shared top-level home.

providers.models

Typed model provider container — one slot per canonical model_provider type.

Replaces the HashMap<String, HashMap<String, ModelProviderConfig>> with a typed struct so each family’s per-alias map carries its own typed config (with the family’s *Endpoint enum and family-specific extras visible at the type level).

TOML shape is preserved byte-identical: each named field deserializes from the same [providers.models.<type>.<alias>] block as before.

Adding a new model_provider family means: define the typed config in schema.rs, then add one row to for_each_model_provider_slot!, and every helper picks up the new slot automatically.

One slot per family (ai21, aihubmix, anthropic, anyscale, arcee, astrai, atomic_chat, avian, azure, baichuan, baseten, bedrock, cerebras, cloudflare, cohere, copilot, custom, deepinfra, deepmyst, deepseek, doubao, featherless, fireworks, friendli, gemini, gemini_cli, github_models, glm, groq, huggingface, hunyuan, hyperbolic, inception, kilo, kilocli, lambda_ai, lepton, litellm, llamacpp, lmstudio, manifest, minimax, mistral, moonshot, morph, nearai, nebius, novita, nscale, nvidia, ollama, openai, opencode, openrouter, osaurus, ovh, perplexity, qianfan, qwen, reka, sambanova, sglang, siliconflow, stepfun, synthetic, telnyx, together, upstage, venice, vercel, vllm, xai, yi, zai). Each slot is a [providers.models.<slot>.<alias>] map; see the dedicated section page for the per-field reference.

providers.transcription

Typed transcription-provider container — one slot per STT family. Mirrors ModelProviders / TtsProviders. Closed set of 6 families: groq, openai, deepgram, assemblyai, google, local_whisper.

One slot per family (assemblyai, deepgram, google, groq, local_whisper, openai). Each slot is a [providers.transcription.<slot>.<alias>] map; see the dedicated section page for the per-field reference.

providers.tts

Typed TTS-provider container — one slot per TTS family. Mirrors ModelProviders but smaller (TTS has a closed set of 5 families: openai, elevenlabs, google, edge, piper). No catch-all needed.

One slot per family (edge, elevenlabs, google, openai, piper). Each slot is a [providers.tts.<slot>.<alias>] map; see the dedicated section page for the per-field reference.

proxy

Proxy configuration for outbound HTTP/HTTPS/SOCKS5 traffic ([proxy] section).

query_classification

Automatic query classification — classifies user messages by keyword/pattern and routes to the appropriate model hint. Disabled by default.

reliability

Reliability and supervision configuration ([reliability] section).

Controls model_provider retries, API key rotation, and channel restart backoff.

risk_profiles

Named risk/autonomy profiles ([risk_profiles.<alias>]).

risk_profiles.<alias>

Named risk/autonomy profile ([risk_profiles.<alias>]).

Unified policy surface. Agents reference a profile by alias and the runtime resolves through it for shell command allowlists, approval gates, sandbox/resource limits, and delegation guardrails. The conventional risk_profiles["default"] is the resolution target for non-agent contexts (orchestrator init, cron worker startup); the Default impl below mirrors the legacy safety-first defaults so a fresh install behaves the same as a config from before the per-profile split.

risk_profiles.<alias>.approval_route

Route a risk profile’s tool approvals to a DISTINCT approver channel instead of the channel that triggered the run — closing the cross-channel-HITL gap (an agent’s gated actions can be approved by a separate ops channel / a different principal).

Option<ApprovalRoute> on a risk profile: ABSENT ⇒ today’s behavior (the originating channel approves). Present ⇒ the gate asks approver_channel (a channel registry key, platform-qualified <channel>.<alias> such as matrix.ops, NOT the originator), bounded by timeout_secs, fail-closed by default.

Consulted on both the interactive channel-driven path and the non-interactive turn path (gateway chat/webhook dispatch and agent-to-agent peer messages, which run without an originating channel). The non-interactive path resolves approver_channel from the live daemon channel registry; with no live registry/approver it keeps the non-interactive default (fail-closed deny under the default on_no_approver).

risk_profiles.<alias>.delegation_policy

Whether a risk profile may delegate work to other agents.

Forbidden (the default) means a profile cannot delegate at all; Allow permits delegation. The set of reachable targets is not an explicit allow-list — delegation is gated on the caller and target sharing a risk profile, so the shared profile determines who is reachable.

Wire format: { mode = "forbidden" } or { mode = "allow" }. The struct shape lets the prop layer expose mode as an editable enum leaf.

runtime

Runtime adapter configuration ([runtime] section).

runtime.docker

Docker runtime configuration ([runtime.docker] section).

runtime_profiles

Named runtime/LLM execution profiles ([runtime_profiles.<alias>]).

runtime_profiles.<alias>

Named runtime/LLM execution profile ([runtime_profiles.<alias>]).

Reusable operational tuning: agentic mode, iteration caps, context budget, parallel dispatch, resource ceilings, recursion depth, and the budget knobs that SecurityPolicy enforces with subagent parent-subset discipline. Anything authorization-shaped (allowed commands/tools/paths, approval gates, sandbox) lives on [risk_profiles.<alias>]. Anything model-provider shaped (model, temperature, max_tokens, timeout_secs) lives on [providers.models.<type>.<alias>].

runtime_profiles.<alias>.auto_classify

runtime_profiles.<alias>.context_compression

runtime_profiles.<alias>.eval

runtime_profiles.<alias>.history_pruning

runtime_profiles.<alias>.thinking

Configuration for thinking/reasoning level control.

runtime_profiles.<alias>.tool_receipts

HMAC tool execution receipt configuration, per agent ([agents.<alias>.tool_receipts]).

Receipts are short HMAC-SHA256 tags appended to tool results so the model cannot claim it ran a tool that never actually executed. See docs/book/src/security/tool-receipts.md.

scheduler

Scheduler configuration for periodic task execution ([scheduler] section).

Owns the cron-runtime knobs: per-job declarations live on Config.cron: HashMap<String, CronJobDecl> (alias-keyed), while the scheduler loop’s runtime behavior (enabled, polling cap, catch-up) lives here.

schema_version

Config file schema version.

secrets

Secrets encryption configuration ([secrets] section).

security

Security configuration for audit logging, OTP, e-stop, IAM/SSO, and WebAuthn.

Sandbox backend and resource limits live on per-agent risk profiles (see RiskProfileConfig::sandbox_* and RiskProfileConfig::max_*); the runtime resolves them via Config::active_risk_profile(agent_alias).

security.audit

Audit logging configuration

security.estop

Emergency stop configuration.

security.leak_detection

Outbound credential leak detection configuration.

These settings control the final guardrail pass over outbound channel responses before they are delivered. Deterministic credential patterns include API keys, private keys, database URLs, bot tokens, and related token syntax. The high-entropy pass is a separate heuristic for standalone opaque tokens.

security.nevis

Nevis IAM integration configuration.

When enabled is true, ZeroClaw validates incoming requests against a Nevis Security Suite instance and maps Nevis roles to tool/workspace permissions.

security.otp

Security OTP configuration.

security.webauthn

WebAuthn / FIDO2 hardware key authentication configuration ([security.webauthn]).

Enables registration and authentication via hardware security keys (YubiKey, SoloKey, etc.) and platform authenticators (Touch ID, Windows Hello).

security_ops

Managed Cybersecurity Service (MCSS) dashboard agent configuration ([security_ops]).

shell_tool

Shell tool configuration ([shell_tool] section).

Controls the behaviour of the shell execution tool. The main tunable is timeout_secs — the maximum wall-clock time a single shell command may run before it is killed.

skill_bundles

Named skill bundles ([skill_bundles.<alias>]).

skill_bundles.<alias>

Named skill bundle ([skill_bundles.<alias>]).

A reusable group of skills that can be attached to an agent or channel by alias, controlling which skills are loaded and from where.

skills

Skills loading configuration ([skills] section).

skills.install_suggestions

Prompt-triggered skill install suggestions ([skills.install_suggestions] section).

skills.skill_creation

Autonomous skill creation configuration ([skills.skill_creation] section).

skills.skill_improvement

Skill self-improvement configuration ([skills.skill-improvement] section).

Controls the post-turn background review fork that may patch, expand, or archive skills based on what the conversation revealed. The fork runs in a restricted toolset (only skills_list, skill_view, skill_manage) and never touches the user-visible conversation.

sop

Standard Operating Procedures engine configuration ([sop]).

The default_execution_mode field uses the SopExecutionMode type from sop::types (re-exported via sop::SopExecutionMode). To avoid circular module references, config stores it using the same enum definition.

storage

Persistent storage configuration ([storage] section).

Storage is a two-tier alias-keyed map: [storage.<backend>.<alias>], parallel to [providers.models.<type>.<alias>]. Each backend has its own typed config struct. MemoryConfig.backend carries a dotted reference ("sqlite.default", "postgres.work") that resolves to one of these entries via [Config::resolve_active_storage].

One slot per family (lucid, markdown, postgres, qdrant, sqlite). Each slot is a [storage.<slot>.<alias>] map; see the dedicated section page for the per-field reference.

text_browser

Text browser tool configuration ([text_browser] section).

Uses text-based browsers (lynx, links, w3m) to render web pages as plain text. Designed for headless/SSH environments without graphical browsers.

todotracker

ZeroCode live task tracker configuration ([todotracker] section).

Read-only visual tracker driven by the model’s TodoWrite tool.

transcription

Voice transcription configuration with multi-provider support.

The top-level api_url, model, and api_key fields remain for backward compatibility with existing Groq-based configurations.

transcription.assemblyai

AssemblyAI STT model_provider configuration ([transcription.assemblyai]).

transcription.deepgram

Deepgram STT model_provider configuration ([transcription.deepgram]).