system:
  auto_approve_below_cost: 10.0
  context_compression_threshold: 0.85
  default_channel: cli
  escalation_timeout_seconds: 300
  log_level: INFO
  max_agent_iterations: 50
  opc_home: ''
  browser:
    mode: embedded
    headless: true
    chrome_channel: chrome
    chrome_executable_path: ''
    user_data_dir: ''
    args: []
  native_runtime:
    enabled: true
    stream_llm: true
    emit_runtime_events: true
    event_protocol_version: v2
    enable_tool_hooks: true
    converge_on_parallel_failure: true
    max_parallel_read_tools: 6
    tool_result_budget_chars: 20000
    microcompact_chars: 8000
    history_snip_trigger_messages: 40
    subagent_max_depth: 3
    auto_extract_durable_memory: false
    durable_memory_extract_min_messages: 4
    durable_memory_max_input_chars: 12000
    prompt_prefix_stability:
      enabled: true
      separate_dynamic_context: true
      emit_cache_fingerprint_events: true
    prompt_harness:
      enabled: true
      split_static_dynamic: true
      emit_delta_messages: true
      cache_static_prefix_only: true
      artifact_messages_enabled: true
      section_dedup_enabled: true
      reinject_after_compaction: true
    reactive_compaction:
      enabled: true
      max_overflow_retries: 2
      circuit_breaker_failures: 2
    context_usage_reporting:
      enabled: true
      emit_runtime_events: true
    verification_policy:
      # Native self-verification gate (spawns a `verify` subagent to re-check a
      # finished turn). Disabled by default: it adds latency/cost and is low
      # value for non-code work; company mode already has the manager-review
      # gate as the quality check. Set to true to re-enable for both task and
      # company mode. See opc/layer3_agent/runtime_v2/runtime.py.
      enabled: false
      min_todos_for_verification: 3
      require_on_code_edits: true
      require_on_risky_tools: true
      verifier_profile: verify
      skip_metadata_key: skip_verification
    background_session_memory:
      enabled: true
      update_interval_messages: 4
      max_input_chars: 6000
    prefetch:
      enabled: true
      session_memory: true
      focused_memory: true
      skills_summary: true
      project_memory_candidates: true
      max_chars: 4000
    tool_aware_microcompact:
      enabled: true
      preserve_recent_messages: 8
      tool_result_char_budget: 4000
      assistant_char_budget: 3000
      preserve_failure_outputs: true
    artifact_compaction:
      enabled: true
      session_memory_fast_path: true
      reinject_tool_surface_delta: true
      reinject_skills_delta: true
      reinject_active_subagents: true
      reinject_verification_state: true
      reinject_permission_state: true
      prompt_too_long_retry: true
      max_prompt_too_long_retries: 3
      artifact_char_budget: 12000
    task_ledger:
      enabled: true
      max_items: 24
      persist_to_runtime_session: true
      persist_to_task_metadata: true
      emit_runtime_events: true
    streaming_tool_start:
      enabled: true
      safe_read_only_only: true
      require_allow_prediction: true
    verification_contract:
      enabled: true
      append_status_to_final: true
      require_explicit_status: true
    execution_environment:
      worktree_venv:
        enabled: true
        provider: auto
        venv_dir: .opc-venv
        editable_project: true
        requirements_files: []
        auto_detect_requirements: true
        system_site_packages: false
        fail_if_prepare_fails: false
      sandbox:
        enabled: true
        default_mode: workspace-write
        fail_if_unavailable: false
        allow_direct_fallback: true
        allow_network: true
        windows:
          mode: elevated
          wrapper: none
        linux:
          mode: workspace-write
          wrapper: auto
        macos:
          mode: workspace-write
          wrapper: auto
  task_mode:
    sub_agent_timeout_sec: 86400
  require_confirmation:
  - deploy to production
  - send external emails
  - modify database schema

autonomy:
  enabled: true
  mode: bounded
  approval_model: ''
  approval_confidence_threshold: 0.7
  learned_policy_threshold: 0.8
  max_auto_approve_risk: medium
  allow_native_tool_auto_approval: true
  allow_external_agent_auto_approval: true
  learn_from_feedback: true
  save_external_sessions: true
  tool_first_use_approval: true
  tool_approval_exemptions:
  - read_inbox
  - send_dm
  - ask_peer_and_wait
  - reply_message
  - broadcast_issue
  - annotate_task
  - start_meeting
  - respond_meeting
  - ack_handoff
  - review_handoff
  - propose_task_adjustment
  - propose_runtime_replan
  - request_user_input
  - todo_read
  - todo_write
  command_review_window: 20
  sensitive_keywords:
  - token
  - password
  - secret
  - api key
  - credential
  - private key
  - payment
  - database schema
  - drop table
  - rm -rf
  - terraform destroy
  - deploy to production
  - send email
  safe_command_prefixes:
  - ls
  - pwd
  - echo
  - rg
  - git status
  - git diff
  - curl
  - wget
  - yt-dlp
  - aria2c
  - ffmpeg
  permissions_v2:
    enabled: true
    fail_closed: true
    classifier_enabled: true
    shell_ast_validation: true
    llm_classifier_model: ''
    classifier_thresholds:
      allow: 0.2
      ask: 0.5
      deny: 0.8
    denial_memory:
      enabled: true
      repeat_threshold: 2
    sandbox_policy:
      treat_network_as_risky: true
      treat_external_paths_as_high_risk: true
      explicit_prefix_allowlist: []
    candidate_extractors:
    - path
    - file_path
    - directory
    - working_directory
    - target_output_dir
    - workspace_path
    - command
    - cmd
    - url
    default_scope: once
    allow_scopes:
    - once
    - session
    - project
    - global
    allow_tools: []
    deny_tools: []
    allowed_paths: []
    denied_paths: []
    safe_shell_prefixes:
    - ls
    - pwd
    - echo
    - rg
    - git status
    - git diff
    - curl
    - wget
    - yt-dlp
    - aria2c
    - ffmpeg
    - python -V
    - python3 -V
    - node -v
    - npm -v
    ask_shell_prefixes:
    - git commit
    - git push
    - npm install
    - pip install
    - pnpm install
    - cargo test
    - pytest
    dangerous_shell_patterns:
    - \brm\s+-rf\b
    - \bdrop\s+table\b
    - \btruncate\b
    - \bterraform\s+destroy\b
    - \bgit\s+push\s+--force\b

mcp_servers:
# ── Local MCP servers (stdio) ──────────────────────────────────────
# Native Python Playwright browser tools are enabled by default.
# Leave this browser MCP entry disabled unless you explicitly want the external MCP server.
- name: browser
  type: local
  command: ["npx", "@playwright/mcp@latest", "--headless"]
  enabled: false
  env: {}
  tools_filter: []
  startup_timeout: 30.0

# Example: GitHub MCP server (uncomment and set GITHUB_TOKEN)
# - name: github
#   type: local
#   command: ["npx", "-y", "@modelcontextprotocol/server-github"]
#   enabled: true
#   env:
#     GITHUB_TOKEN: "your-github-token"
#   tools_filter: []
#   startup_timeout: 30.0

# Example: filesystem MCP server
# - name: filesystem
#   type: local
#   command: ["npx", "-y", "@modelcontextprotocol/server-filesystem", "/path/to/allowed/dir"]
#   enabled: true

# ── Remote MCP servers (StreamableHTTP / SSE) ──────────────────────
# Example: remote MCP server with custom headers
# - name: remote-api
#   type: remote
#   url: "https://mcp.example.com/sse"
#   enabled: true
#   headers:
#     Authorization: "Bearer your-token"
#   startup_timeout: 30.0

capabilities:
  enable_recovery: true
  local_first: true
  attach_remote_skill_summaries: true
  promote_remote_skills: true
  remote_skill_source: skillhub
  max_remote_skill_results: 5
  tool_failure_threshold: 2
  skillhub:
    enabled: false
    api_base: https://www.skillhub.club/api/v1
    api_key: ''
    api_key_env: SKILLHUB_API_KEY
    search_limit: 5
    method: hybrid
    cache_remote_skills: true
    promote_after_successes: 2