systemprompt-config 0.65.0

Profile-based configuration for systemprompt.io AI governance infrastructure. Bootstraps profiles, secrets, and credentials with zero environment-variable fallback.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124

//! Public error type for `systemprompt-config`.
//!
//! All public APIs of this crate return [`ConfigError`] (or
//! [`ConfigResult<T>`]) instead of `anyhow::Error`. The enum is
//! `#[non_exhaustive]` so additional variants can be added in patch
//! releases without breaking downstream code that performs exhaustive
//! matching only on the documented variants.
//!
//! Upstream errors are composed via `#[from]` so callers can use `?`
//! transparently from `std::io`, `serde_json` and `serde_yaml`
//! operations performed inside the bootstrap pipeline.
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

use std::path::PathBuf;

use systemprompt_identifiers::{ModelId, ProviderId};
use systemprompt_manifest::profile::ProfileError;
use systemprompt_models::errors::{GlobalConfigError, SecretsError};

use crate::bootstrap::{ProfileBootstrapError, SecretsBootstrapError};
use crate::services::ConfigValidationError;

pub type ConfigResult<T> = Result<T, ConfigError>;

#[derive(Debug, thiserror::Error)]
#[non_exhaustive]
pub enum ConfigError {
    #[error("Config already initialized")]
    AlreadyInitialized,

    #[error(
        "cannot resolve a stable instance id for a cloud profile: set server.instance_id or \
         export HOSTNAME so this replica keeps one identity across restarts"
    )]
    InstanceIdUnresolved,

    #[error(transparent)]
    Profile(#[from] ProfileBootstrapError),

    #[error(transparent)]
    Secrets(#[from] SecretsBootstrapError),

    #[error(transparent)]
    ProfileParse(#[from] ProfileError),

    #[error(transparent)]
    SchemaValidation(#[from] ConfigValidationError),

    #[error(transparent)]
    SecretsParse(#[from] SecretsError),

    #[error(transparent)]
    Io(#[from] std::io::Error),

    #[error(transparent)]
    Json(#[from] serde_json::Error),

    #[error(transparent)]
    Yaml(#[from] serde_yaml::Error),

    #[error("Missing required path: paths.{field}")]
    MissingProfilePath { field: String },

    #[error("Failed to canonicalize {name} path: {source}")]
    CanonicalizePath {
        name: String,
        #[source]
        source: std::io::Error,
    },

    #[error("Profile path '{field}' cannot be read: {path}")]
    ReadProfilePath {
        field: String,
        path: PathBuf,
        #[source]
        source: std::io::Error,
    },

    #[error("Profile path '{field}' has invalid YAML: {path}")]
    InvalidProfileYaml {
        field: String,
        path: PathBuf,
        #[source]
        source: serde_yaml::Error,
    },

    #[error("Profile path validation failed: {message}")]
    ProfilePathReport { message: String },

    #[error("Unsupported database type '{db_type}'. Only 'postgres' is supported.")]
    UnsupportedDatabaseType { db_type: String },

    #[error("Invalid database URL: {0}")]
    InvalidDatabaseUrl(#[source] GlobalConfigError),

    #[error(
        "Profile is missing required `system_admin.username` and `SYSTEMPROMPT_SYSTEM_ADMIN` is \
         not set. The platform refuses to start without an explicit system-admin identity."
    )]
    MissingSystemAdmin,

    #[error("No provider named {name}")]
    ProviderNotFound { name: ProviderId },

    #[error("No model with id {id} under provider {provider}")]
    ModelNotFound { id: ModelId, provider: ProviderId },

    #[error("Access token expiry must be positive")]
    NonPositiveAccessTokenExpiry,

    #[error("Refresh token expiry must be positive")]
    NonPositiveRefreshTokenExpiry,

    #[error("No trusted issuer found with issuer {issuer}")]
    TrustedIssuerNotFound { issuer: String },

    #[error("Profile path has no parent directory: {path}")]
    ProfilePathWithoutParent { path: PathBuf },

    #[error("Secrets file root is not a JSON object: {path}")]
    SecretsFileNotObject { path: PathBuf },
}