AIOS/aios.config.example.yaml at main · ZDStudios/AIOS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
# The AI OS — configuration (single source of truth for non-secret wiring).
# Secrets live in .env (never commit). Re-run `aios setup` after editing this file.
# NOTE: aios ships a small YAML reader — use 2-space indentation and simple
#       `key: value` maps (no anchors/multiline). This file already fits.
version: 1
log_level: info            # debug | info | warn | error

# Model routing. The active provider's API key comes from .env (AIOS_LLM_API_KEY).
model:
  provider: openrouter     # openrouter | anthropic | openai | gemini
  default: anthropic/claude-opus-4.6

services:
  opencode:                # coding-agent engine (headless server)
    enabled: true
    port: 4096
    hostname: 127.0.0.1
  hermes:                  # autonomous agent + web dashboard
    enabled: true
    port: 9119
    hostname: 127.0.0.1
    gateway: false         # also run the multi-channel gateway process
  openclaw:                # messaging/channel gateway
    enabled: true
    port: 18789
  crewai:                  # multi-agent crews (5th agent)
    enabled: true
    port: 4788
  claudecode:              # claude-code-api — Claude Code as an OpenAI-compatible API (6th agent)
    enabled: true
    port: 8000
  codex:                   # ChatGPT/Codex via the local `codex` CLI (no API key)
    enabled: true
    port: 8010
    model: ""              # blank = whatever codex itself is configured to use
    sandbox: read-only     # read-only | workspace-write | danger-full-access
  openclaw_proxy:          # frame-stripping proxy so openclaw's control-UI embeds in the hub
    enabled: true
    port: 8791
  hermes_proxy:            # frame-stripping proxy so hermes' dashboard embeds in the hub
    enabled: true
    port: 8792
  hub:                     # ★ AIOS Hub — unified dashboard + interconnect (the Control Room)
    enabled: true
    port: 8787
  openclaw_os:             # openclaw's own dashboard (a plugin, not an agent)
    enabled: true

# Every agent controls the computer AIOS is installed on: shell, filesystem, network.
# That is the point of an agent OS — and it is why the hub authenticates. Full control
# plus an open control plane is exactly the bug that made OpenClaw's CVE-2026-25253
# critical, so non-loopback and cross-origin requests must carry AIOS_HUB_TOKEN (.env).
security:
  full_control: true       # agents may run shell commands. false = read-only agents.
  guardrails: true         # still refuse `rm -rf /`, mkfs, fork bombs, shutdown, dd to /dev/sd*
  exec_timeout: 120        # seconds before a runaway command is killed
  allowed_hosts: ""        # extra Host: values to accept, comma-separated (DNS-rebinding guard)

memory:
  active: true             # Active Memory: a memory sub-agent runs on EVERY turn.
                           # Recall is a free FTS5 query; fact-extraction is one small
                           # async LLM call, so it never slows the turn you're waiting on.

profile: default           # isolated agents per client/project: AIOS_PROFILE=work aios start

lifeos:
  mount_skills: true       # copy LifeOS skills into openclaw + hermes skill dirs

openui:
  mount_context: true      # mount OpenUI (generative UI) context into the agents

skills:
  mount: true              # mount the bundled skills/ (skill-maker, mcp-maker, …) into agents
  learn: true              # self-improving loop: after a task that ran commands, the Curator
                           # judges whether it taught a reusable procedure and writes
                           # skills/learned/<name>/SKILL.md, which every agent then mounts

updates:
  check_on_start: true     # on `aios start`, check the AIOS repo for updates and notify
  auto_update: true        # on `aios start`, auto git-pull + reinstall if the repo changed
  # Supervised dependency updates: AIOS watches each bundled project's upstream
  # (openclaw, hermes, opencode, CrewAI, fabric, caveman, ponytail), and when one
  # moves ahead an AGENT reviews the commits + changed files and returns
  # SAFE / RISKY / BLOCK before anything is touched.
  supervised: true
  check_interval: 21600    # seconds between upstream scans (6h)
  auto_apply_safe: true    # auto-apply ONLY content-tier projects (prompts/skills —
                           # nothing executes) when an agent says SAFE. Service-tier
                           # projects with dependency trees always wait for you.

swarm:
  enabled: true            # big requests are decomposed into subtasks, run by
                           # different specialist agents in parallel; agents can
                           # consult each other mid-task, then one synthesizes.
                           # Small asks are untouched (a cheap heuristic gates it).

watchdog:
  enabled: true            # if an agent stops responding, auto-restart it
  interval: 45             # seconds between health sweeps; a healthy agent diagnoses failures

# Health-check URLs aios waits on during `start` and checks in `status`/`smoke`.
health:
  opencode: http://127.0.0.1:4096/
  hermes: http://127.0.0.1:9119/
  openclaw: http://127.0.0.1:18789/
  crewai: http://127.0.0.1:4788/health
  claudecode: http://127.0.0.1:8000/health
  codex: http://127.0.0.1:8010/health
  openclaw_proxy: http://127.0.0.1:8791/
  hermes_proxy: http://127.0.0.1:8792/
  hub: http://127.0.0.1:8787/health
  openclaw_os: http://127.0.0.1:18789/plugins/openclawos/