LibreFang 配置参考

~/.librefang/config.toml

[default_model]
provider = "groq"
model = "llama-3.3-70b-versatile"
api_key_env = "GROQ_API_KEY"

# ── 顶层字段 ──────────────────────────────────────────────────────────────
api_key          = "your-bearer-token"
dashboard_user   = "admin"
dashboard_pass_hash = "$argon2id$v=19$m=19456,t=2,p=1$<salt>$<hash>"
api_listen       = "127.0.0.1:4545"
cors_origin      = ["https://dash.example.com"]
mode             = "default"          # stable | default | dev
language         = "zh"
stable_prefix_mode = false
prompt_caching   = true
usage_footer     = "full"             # off | tokens | cost | full
workspaces_dir   = "~/.librefang/workspaces"
max_cron_jobs    = 500
include          = ["secrets.toml"]

[provider_urls]
openai = "https://my-openai-proxy.example.com/v1"

[provider_api_keys]
openai = "MY_CUSTOM_OPENAI_KEY"

# ── 默认模型 ──────────────────────────────────────────────────────────────
[default_model]
provider    = "anthropic"
model       = "claude-sonnet-4-20250514"
api_key_env = "ANTHROPIC_API_KEY"
base_url    = "https://api.anthropic.com"

# ── 记忆 ──────────────────────────────────────────────────────────────────
[memory]
decay_rate                   = 0.1
sqlite_path                  = "~/.librefang/data/librefang.db"
embedding_provider           = "openai"
embedding_api_key_env        = "OPENAI_API_KEY"
consolidation_interval_hours = 24

# ── OFP 网络 ──────────────────────────────────────────────────────────────
[network]
listen_addresses = ["/ip4/0.0.0.0/tcp/0"]
shared_secret    = "your-secret"
mdns_enabled     = true
max_peers        = 50

# ── 通道 ──────────────────────────────────────────────────────────────────
[channels.telegram]
bot_token_env = "TELEGRAM_BOT_TOKEN"
allowed_users = ["123456"]

[channels.discord]
bot_token_env = "DISCORD_BOT_TOKEN"
allowed_guilds = ["987654321"]

[channels.slack]
bot_token_env = "SLACK_BOT_TOKEN"
app_token_env = "SLACK_APP_TOKEN"

[channels.whatsapp]
gateway_url_env = "WHATSAPP_WEB_GATEWAY_URL"
allowed_users   = ["+8613800000000"]
owner_numbers   = ["+8613900000000"]

[channels.qq]
app_id         = "123456789"
app_secret_env = "QQ_BOT_APP_SECRET"

[channels.wecom]
corp_id      = "ww1234567890abcdef"
agent_id     = "1000002"
secret_env   = "WECOM_SECRET"
webhook_port = 8454

# ── 媒体理解 ──────────────────────────────────────────────────────────────
[media]
image_description   = true
audio_transcription = true
video_description   = false
max_concurrency     = 2

# ── 链接理解 ──────────────────────────────────────────────────────────────
[links]
enabled  = false
max_links = 3

# ── MCP 服务器 ────────────────────────────────────────────────────────────
[[mcp_servers]]
name = "filesystem"
timeout_secs = 30

[mcp_servers.transport]
type    = "stdio"
command = "npx"
args    = ["-y", "@modelcontextprotocol/server-filesystem", "/tmp"]

[[mcp_servers]]
name = "my-api"

[mcp_servers.transport]
type     = "http_compat"
base_url = "https://api.example.com"

[[mcp_servers.transport.tools]]
name   = "search"
path   = "/search"
method = "get"

# ── A2A ───────────────────────────────────────────────────────────────────
[a2a]
enabled     = true
name        = "My LibreFang"
description = "An AI agent"
listen_path = "/a2a"

[[a2a.external_agents]]
name = "remote-agent"
url  = "https://agent.example.com/a2a"

# ── 后备提供商 ────────────────────────────────────────────────────────────
[[fallback_providers]]
provider    = "groq"
model       = "llama-3.1-70b-versatile"
api_key_env = "GROQ_API_KEY"

# ── 用户 ──────────────────────────────────────────────────────────────────
[[users]]
name = "alice"
role = "admin"

[[users]]
name = "bob"
role = "user"

# ── 预算 ──────────────────────────────────────────────────────────────────
[budget]
max_hourly_usd  = 1.0
max_daily_usd   = 10.0
max_monthly_usd = 100.0
alert_threshold = 0.8

# ── 执行审批 ──────────────────────────────────────────────────────────────
[approval]
require_approval        = ["shell_exec"]
timeout_secs            = 60
auto_approve_autonomous = false
auto_approve            = false

# ── 执行策略 ──────────────────────────────────────────────────────────────
[exec_policy]
mode             = "allowlist"
timeout_secs     = 30
max_output_bytes = 102400

# ── Docker 沙箱 ───────────────────────────────────────────────────────────
[docker]
enabled      = false
image        = "python:3.12-slim"
memory_limit = "512m"
timeout_secs = 60

# ── 文字转语音 ────────────────────────────────────────────────────────────
[tts]
enabled  = false
provider = "openai"

[tts.openai]
voice = "alloy"
model = "tts-1"

# ── 扩展思考 ──────────────────────────────────────────────────────────────
[thinking]
budget_tokens   = 10000
stream_thinking = false

# ── 配置热重载 ────────────────────────────────────────────────────────────
[reload]
mode        = "hybrid"
debounce_ms = 500

# ── 代理 ──────────────────────────────────────────────────────────────────
[proxy]
http_proxy  = "http://proxy.corp.example:8080"
https_proxy = "http://proxy.corp.example:8080"
no_proxy    = "localhost,127.0.0.1,.internal.corp"

# ── 会话保留 ──────────────────────────────────────────────────────────────
[session]
retention_days          = 30
max_sessions_per_agent  = 100
cleanup_interval_hours  = 24

# ── 工具策略 ──────────────────────────────────────────────────────────────
[tool_policy]
subagent_max_depth      = 10
subagent_max_concurrent = 5

[[tool_policy.global_rules]]
pattern = "shell_*"
effect  = "deny"

[[tool_policy.agent_rules]]
pattern = "web_*"
effect  = "allow"

[[tool_policy.groups]]
name  = "web_tools"
tools = ["web_search", "web_fetch"]

# ── 主动记忆 ──────────────────────────────────────────────────────────────
[proactive_memory]
enabled                = true
auto_memorize          = true
auto_retrieve          = true
max_retrieve           = 10
extraction_threshold   = 0.7
session_ttl_hours      = 24
duplicate_threshold    = 0.5
confidence_decay_rate  = 0.01
max_memories_per_agent = 1000

# ── 审计日志 ──────────────────────────────────────────────────────────────
[audit]
retention_days = 90

# ── 健康检查 ──────────────────────────────────────────────────────────────
[health_check]
health_check_interval_secs = 60

dashboard_user = "admin"
dashboard_pass = "vault:dashboard_password"

librefang hash-password
# Enter password: ********
# Confirm password: ********
# $argon2id$v=19$m=19456,t=2,p=1$<salt>$<hash>

dashboard_user      = "admin"
dashboard_pass_hash = "$argon2id$v=19$m=19456,t=2,p=1$<salt>$<hash>"

[channels.qq]
app_id         = "123456789"
app_secret_env = "QQ_BOT_APP_SECRET"
allowed_users  = ["10001", "10002"]

[channels.wecom]
corp_id              = "ww1234567890abcdef"
agent_id             = "1000002"
secret_env           = "WECOM_SECRET"
webhook_port         = 8454
token_env            = "WECOM_TOKEN"
encoding_aes_key_env = "WECOM_AES_KEY"

[[mcp_servers]]
name = "filesystem"

[mcp_servers.transport]
type    = "stdio"
command = "npx"
args    = ["-y", "@modelcontextprotocol/server-filesystem", "/tmp"]

[[mcp_servers]]
name = "remote"

[mcp_servers.transport]
type = "sse"
url  = "https://mcp.example.com/sse"

[[mcp_servers]]
name = "my-api"

[mcp_servers.transport]
type     = "http_compat"
base_url = "https://api.example.com"

[[mcp_servers.transport.headers]]
name      = "Authorization"
value_env = "MY_API_KEY"

[[mcp_servers.transport.tools]]
name         = "search"
description  = "Search the API"
path         = "/search"
method       = "get"    # get | post | put | patch | delete
request_mode = "query"  # json_body | query | none

[inbox]
enabled = true
directory = "~/.librefang/inbox/"
poll_interval_secs = 5
default_agent = "assistant"

cat > ~/.librefang/inbox/task.txt << 'EOF'
agent:code-reviewer
请审查以下代码的安全性：

def login(user, password):
    query = f"SELECT * FROM users WHERE name='{user}' AND pass='{password}'"
    return db.execute(query)
EOF

echo "帮我总结今天的系统日志" > ~/.librefang/inbox/summarize.txt

# crontab -e
0 9 * * * grep ERROR /var/log/app.log > ~/.librefang/inbox/daily_errors.txt

# Jenkinsfile / GitHub Actions post-build step
echo "agent:devops
构建失败，请分析日志：
$(tail -100 build.log)" > ~/.librefang/inbox/build_$(date +%s).txt

for doc in ~/reports/*.md; do
  cp "$doc" ~/.librefang/inbox/
done

curl -s http://127.0.0.1:4545/api/inbox/status
# {"enabled":true,"pending_count":3,"processed_count":12,...}

[auth_profiles]
anthropic = [
  { name = "primary",   api_key_env = "ANTHROPIC_API_KEY",   priority = 0 },
  { name = "secondary", api_key_env = "ANTHROPIC_API_KEY_2", priority = 1 },
]

[[tool_policy.global_rules]]
pattern = "shell_*"
effect  = "deny"    # allow | deny

[[tool_policy.groups]]
name  = "web_tools"
tools = ["web_search", "web_fetch"]

[media]
image_description   = true
audio_transcription = true
video_description   = false
max_concurrency     = 2
image_provider      = "openai"   # 可选：显式指定提供商
audio_provider      = "openai"   # 可选：显式指定提供商

[links]
enabled           = true
max_links         = 3
max_content_bytes = 102400
timeout_secs      = 10

librefang doctor