Production infrastructure for AI agents

Website · Documentation · Guides · Core · Template · Discord

systemprompt-config

Profile-based configuration for systemprompt.io AI governance infrastructure. Bootstraps profiles, secrets, and credentials with zero environment-variable fallback.

Layer: Infra — infrastructure primitives (database, security, events, etc.) consumed by domain crates. Part of the systemprompt-core workspace.

Overview

This crate is the bootstrap layer for the platform. It loads the active profile YAML, the matching secrets document, and installs both into process-wide singletons before any other layer (database, runtime, agent) starts. It also exposes the deployment-time ConfigManager used by systemprompt cloud config and a DomainConfig validator for skill manifests.

• Type-state bootstrap: BootstrapSequence enforces profile before secrets at compile time.
• Profile loading: Parses .systemprompt/profiles/<name>/profile.yaml, with optional catalog overlay.
• Secrets loading: Reads the secrets document referenced by the active profile and seeds the in-process store.
• Runtime config construction: Builds a systemprompt_models::Config from the active profile.
• Deployment config: ConfigManager resolves ${VAR} / ${VAR:-default} patterns and emits .env files for downstream services.
• Schema validation: Generic YAML/JSON validation utilities and a SkillConfigValidator for the skills/ tree.

Architecture

src/
├── lib.rs                      # Crate root — public API surface
├── error.rs                    # ConfigError / ConfigResult<T>
├── config_loader.rs            # init_config, build_from_profile, validate_database_config
├── profile_loader.rs           # load_profile_with_catalog
├── profile_gateway.rs          # Profile lookup gateway
├── skill_validator.rs          # SkillConfigValidator (DomainConfig impl)
├── bootstrap/
│   ├── mod.rs                  # BootstrapSequence, type-state markers, presets
│   ├── profile.rs              # ProfileBootstrap singleton
│   ├── manifest.rs             # Manifest signing seed helpers
│   └── secrets/
│       ├── mod.rs              # SecretsBootstrap singleton
│       ├── loader.rs           # load_secrets_from_path
│       ├── io.rs               # Disk I/O for secrets documents
│       └── logging.rs          # log_secrets_issue / skip / warn helpers
└── services/
    ├── mod.rs                  # Re-exports
    ├── manager.rs              # ConfigManager — YAML loading, merging, variable resolution
    ├── report.rs               # ValidationReport
    ├── schema_validation.rs    # validate_config, validate_yaml_file, generate_schema
    ├── types.rs                # DeployEnvironment, DeploymentConfig, EnvironmentConfig
    ├── validator.rs            # ConfigValidator
    └── writer.rs               # .env file generation

bootstrap/

Process-wide cells for the active profile and secrets document, plus the type-state BootstrapSequence that drives Uninitialized → ProfileInitialized → SecretsInitialized → BootstrapComplete. Manifest seed helpers (generate_seed, decode_seed, persist_seed) live alongside.

config_loader.rs

Builds a runtime Config from the active profile via init_config, try_init_config, init_config_from_profile, and build_from_profile. validate_database_config checks database wiring before startup.

services/

Deployment-pipeline utilities consumed by systemprompt cloud config: ConfigManager loads and merges YAML, ConfigValidator produces a ValidationReport, and the schema-validation helpers operate over arbitrary serde types.

skill_validator.rs

SkillConfigValidator walks the skills/ directory and reports missing or malformed manifests through the DomainConfig trait.

Usage

[dependencies]
systemprompt-config = "0.9.2"

use systemprompt_config::{
    presets, BootstrapSequence, ConfigResult, init_config_from_profile,
};

fn boot() -> ConfigResult<()> {
    let complete = presets::standard()?;
    let config = init_config_from_profile(complete.profile())?;
    let _ = config;
    Ok(())
}

Public API

use systemprompt_config::{
    // Bootstrap
    BootstrapSequence, BootstrapComplete, BootstrapState,
    ProfileBootstrap, ProfileInitialized, ProfileBootstrapError,
    SecretsBootstrap, SecretsInitialized, SecretsBootstrapError,
    Uninitialized, presets,
    build_loaded_secrets_message, load_secrets_from_path,
    log_secrets_issue, log_secrets_skip, log_secrets_warn,
    decode_seed, generate_seed, persist_seed,
    JWT_SECRET_MIN_LENGTH, MANIFEST_SIGNING_SEED_BYTES,

    // Runtime config
    build_from_profile, init_config, init_config_from_profile,
    try_init_config, validate_database_config,
    load_profile_with_catalog,

    // Errors
    ConfigError, ConfigResult,

    // Deployment services
    ConfigManager, ConfigValidator, ConfigValidationError,
    DeployEnvironment, DeploymentConfig, EnvironmentConfig,
    ValidationReport,
    generate_schema, validate_config, validate_yaml_file, validate_yaml_str,

    // Skill validation
    SkillConfigValidator,
};

Dependencies

License

BSL-1.1 (Business Source License). Source-available for evaluation, testing, and non-production use. Production use requires a commercial license. Each version converts to Apache 2.0 four years after publication. See LICENSE.

systemprompt.io · Documentation · Guides · Live Demo · Template · crates.io · docs.rs · Discord

Infra layer · Own how your organization uses AI.