Struct RuntimeConfig 

pub struct RuntimeConfig {
    pub db_path: Option<PathBuf>,
    pub default_namespace: Namespace,
    pub embedding_model: Option<EmbeddingModel>,
    pub additional_embedding_models: Vec<EmbeddingModel>,
    pub gate: GateRef,
    pub packs: Vec<String>,
    pub backend_id: BackendId,
    pub brain_profile: Option<String>,
    pub visible_namespaces: Vec<Namespace>,
    pub allowed_outbound_namespaces: Vec<Namespace>,
    pub actor_id: Option<String>,
    pub git_write: GitWriteSectionConfig,
}

Runtime configuration.

The db_path and embedding_model fields are deprecated in favour of constructing the backend externally and calling crate::KhiveRuntime::from_backend. They remain for backward compatibility with tests and single-binary deployments.

Fields

db_path: Option<PathBuf>

Path to the SQLite database file. None = in-memory (tests).

Deprecated: use crate::KhiveRuntime::from_backend instead. The boot path constructs backends from khive.toml (AppConfig) and passes them to from_backend. Direct db_path usage persists only in tests.

default_namespace: Namespace

Namespace used when no explicit namespace is provided.

embedding_model: Option<EmbeddingModel>

Local embedding model. None alone does not disable embedding: setting only this field to None while additional_embedding_models is non-empty still registers those models. Both embedding_model and additional_embedding_models must be empty to disable built-in embedding model registration, at which point hybrid_search falls back to text-only. Use RuntimeConfig::no_embeddings to clear both fields together — it is the canonical constructor for this. Custom embedder providers registered later by packs are not affected by this field.

Deprecated: embedding engines move to a per-pack EmbedderRegistry. This field persists for backward compatibility until the embedder registry is fully plumbed.

additional_embedding_models: Vec<EmbeddingModel>

Additional embedding models to make available by request name.

embedding_model remains the default used by existing embed() and embed_batch() callers. This list adds non-default models that can be selected with embedder(name), embed_with_model(...), memory remember.embedding_model, and memory recall.embedding_model.

gate: GateRef

Authorization gate consulted before each verb dispatch. Default: AllowAllGate (permissive). For production policy enforcement, plug in a Rego- or capability-witness-backed impl.

packs: Vec<String>

Names of packs the transport layer should register into the VerbRegistry. The transport layer (e.g. khive-mcp) reads this list and instantiates the matching concrete pack types. Unknown names are reported as errors by the transport, not silently ignored. Default: ["kg"].

backend_id: BackendId

Identifies this runtime’s backend in a multi-backend deployment.

Set by the boot path when constructing per-pack runtimes from khive.toml. Single-backend deployments use the default BackendId::MAIN.

brain_profile: Option<String>

Brain profile to use for memory.feedback / knowledge.feedback and recall-time score boosting (ADR-035 §Brain profile configuration).

Resolution order (highest to lowest, ADR-035): CLI flag, then runtime.brain_profile in project/global khive.toml, then the KHIVE_BRAIN_PROFILE env var as fallback default. Callers must keep env OUT of the base config they pass in (see khive-mcp serve.rs).

1. --brain-profile CLI flag (explicit only)
2. Namespace-bound profile resolved via brain.resolve at feedback time
3. Pack-local global tuning prior (default fallback)

visible_namespaces: Vec<Namespace>

Operator-configured read-visibility set (ADR-007 Rev 4 Rule 3b).

OSS dispatch widens the DEFAULT multi-record read scope to ['local'] ∪ visible_namespaces. Writes remain pinned to 'local'. An explicit namespace= request param is a precise single-namespace escape and is not widened. Populated from actor.visible_namespaces in khive.toml.

allowed_outbound_namespaces: Vec<Namespace>

Namespaces this actor’s comm.send/reply may deliver messages INTO (outbound, sender-side). Populated from actor.allowed_outbound_namespaces in khive.toml. Empty by default — cross-namespace delivery denied unless explicitly declared. The comm handler uses an ordinary NamespaceToken (minted via with_namespace) in an append-only manner; the token itself is NOT type-enforced write-only. The recipient-side allowed_inbound_namespaces (bilateral mutual opt-in) is reserved for a future cloud-path authorization ADR (not yet written).

actor_id: Option<String>

Configured actor identity label (ADR-057). Populated from [actor] id in khive.toml. When Some, authorize() mints tokens carrying this actor label so that comm.inbox filters by to_actor instead of falling back to the party-line “local” behavior. When None (default), tokens carry ActorRef::anonymous() and inbox is scoped to party-line messages — those addressed to "local" or carrying no to_actor stamp.

git_write: GitWriteSectionConfig

Resolved [git_write] policy allowlist (ADR-108 Amendment), populated from khive.toml’s [[git_write.allowed]] entries by runtime_config_from_khive_config. Threaded through so khive-pack-git’s write-verb handlers read an already-resolved policy instead of re-running config discovery (which would ignore an explicit --config path not also exported as KHIVE_CONFIG).

Implementations

impl RuntimeConfig

pub fn no_embeddings() -> Self

Build a RuntimeConfig with embedding disabled entirely.

embedding_model and additional_embedding_models are computed independently inside Default::default, so RuntimeConfig { embedding_model: None, ..RuntimeConfig::default() } does NOT produce a model-less runtime: additional_embedding_models still carries its env-driven fallback seed, and the note-write path fans out embedding to every registered model regardless of embedding_model: so the first memory.remember on a machine without local model files hard-fails instead of degrading to FTS-only.

This constructor clears both fields together and ignores KHIVE_ADDITIONAL_EMBEDDING_MODELS unconditionally: the caller wants zero embedders, not “zero unless the environment disagrees”. Use it on model-less machines (CI runners, fresh installs without local model files) instead of the two-field struct-update form.

Trait Implementations

impl Clone for RuntimeConfig

fn clone(&self) -> RuntimeConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuntimeConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RuntimeConfig

fn default() -> Self

Returns the “default value” for a type.