Struct Config 

pub struct Config {

    pub workspace_dir: PathBuf,
    pub config_path: PathBuf,
    pub api_key: Option<String>,
    pub api_url: Option<String>,
    pub api_path: Option<String>,
    pub default_provider: Option<String>,
    pub default_model: Option<String>,
    pub model_providers: HashMap<String, ModelProviderConfig>,
    pub default_temperature: f64,
    pub provider_timeout_secs: u64,
    pub provider_max_tokens: Option<u32>,
    pub extra_headers: HashMap<String, String>,
    pub observability: ObservabilityConfig,
    pub autonomy: AutonomyConfig,
    pub trust: TrustConfig,
    pub security: SecurityConfig,
    pub backup: BackupConfig,
    pub data_retention: DataRetentionConfig,
    pub cloud_ops: CloudOpsConfig,
    pub conversational_ai: ConversationalAiConfig,
    pub security_ops: SecurityOpsConfig,
    pub runtime: RuntimeConfig,
    pub reliability: ReliabilityConfig,
    pub scheduler: SchedulerConfig,
    pub agent: AgentConfig,
    pub pacing: PacingConfig,
    pub skills: SkillsConfig,
    pub pipeline: PipelineConfig,
    pub model_routes: Vec<ModelRouteConfig>,
    pub embedding_routes: Vec<EmbeddingRouteConfig>,
    pub query_classification: QueryClassificationConfig,
    pub heartbeat: HeartbeatConfig,
    pub cron: CronConfig,
    pub channels_config: ChannelsConfig,
    pub memory: MemoryConfig,
    pub storage: StorageConfig,
    pub tunnel: TunnelConfig,
    pub gateway: GatewayConfig,
    pub composio: ComposioConfig,
    pub microsoft365: Microsoft365Config,
    pub secrets: SecretsConfig,
    pub browser: BrowserConfig,
    pub browser_delegate: BrowserDelegateConfig,
    pub http_request: HttpRequestConfig,
    pub multimodal: MultimodalConfig,
    pub media_pipeline: MediaPipelineConfig,
    pub web_fetch: WebFetchConfig,
    pub link_enricher: LinkEnricherConfig,
    pub text_browser: TextBrowserConfig,
    pub web_search: WebSearchConfig,
    pub project_intel: ProjectIntelConfig,
    pub google_workspace: GoogleWorkspaceConfig,
    pub proxy: ProxyConfig,
    pub identity: IdentityConfig,
    pub cost: CostConfig,
    pub peripherals: PeripheralsConfig,
    pub delegate: DelegateToolConfig,
    pub agents: HashMap<String, DelegateAgentConfig>,
    pub swarms: HashMap<String, SwarmConfig>,
    pub hooks: HooksConfig,
    pub hardware: HardwareConfig,
    pub transcription: TranscriptionConfig,
    pub tts: TtsConfig,
    pub mcp: McpConfig,
    pub kumiho: KumihoConfig,
    pub operator: OperatorConfig,
    pub nodes: NodesConfig,
    pub clawhub: ClawHubConfig,
    pub workspace: WorkspaceConfig,
    pub notion: NotionConfig,
    pub jira: JiraConfig,
    pub node_transport: NodeTransportConfig,
    pub linkedin: LinkedInConfig,
    pub image_gen: ImageGenConfig,
    pub plugins: PluginsConfig,
    pub locale: Option<String>,
    pub verifiable_intent: VerifiableIntentConfig,
    pub claude_code: ClaudeCodeConfig,
    pub claude_code_runner: ClaudeCodeRunnerConfig,
    pub codex_cli: CodexCliConfig,
    pub gemini_cli: GeminiCliConfig,
    pub opencode_cli: OpenCodeCliConfig,
    pub sop: SopConfig,
    pub shell_tool: ShellToolConfig,
}

Top-level Construct configuration, loaded from config.toml.

Resolution order: CONSTRUCT_WORKSPACE env → active_workspace.toml marker → ~/.construct/config.toml.

Fields

workspace_dir: PathBuf

Workspace directory - computed from home, not serialized

config_path: PathBuf

Path to config.toml - computed from home, not serialized

api_key: Option<String>

API key for the selected provider. Overridden by CONSTRUCT_API_KEY or API_KEY env vars.

api_url: Option<String>

Base URL override for provider API (e.g. “http://10.0.0.1:11434” for remote Ollama)

api_path: Option<String>

Custom API path suffix for OpenAI-compatible / custom providers (e.g. “/v2/generate” instead of the default “/v1/chat/completions”).

default_provider: Option<String>

Default provider ID or alias (e.g. "openrouter", "ollama", "anthropic"). Default: "openrouter".

default_model: Option<String>

Default model routed through the selected provider (e.g. "anthropic/claude-sonnet-4-6").

model_providers: HashMap<String, ModelProviderConfig>

Optional named provider profiles keyed by id (Codex app-server compatible layout).

default_temperature: f64

Default model temperature (0.0–2.0). Default: 0.7.

provider_timeout_secs: u64

HTTP request timeout in seconds for LLM provider API calls. Default: 120.

Increase for slower backends (e.g., llama.cpp on constrained hardware) that need more time processing large contexts.

provider_max_tokens: Option<u32>

Maximum output tokens to include in LLM provider API requests.

When set, overrides each provider’s built-in default. This is especially important for OpenRouter where the platform default (65536) can cause 402 errors for models with lower output limits.

extra_headers: HashMap<String, String>

Extra HTTP headers to include in LLM provider API requests.

Some providers require specific headers (e.g., User-Agent, HTTP-Referer, X-Title) for request routing or policy enforcement. Headers defined here augment (and override) the program’s default headers.

Can also be set via CONSTRUCT_EXTRA_HEADERS environment variable using the format Key:Value,Key2:Value2. Env var headers override config file headers.

observability: ObservabilityConfig

Observability backend configuration ([observability]).

autonomy: AutonomyConfig

Autonomy and security policy configuration ([autonomy]).

trust: TrustConfig

Trust scoring and regression detection configuration ([trust]).

security: SecurityConfig

Security subsystem configuration ([security]).

backup: BackupConfig

Backup tool configuration ([backup]).

data_retention: DataRetentionConfig

Data retention and purge configuration ([data_retention]).

cloud_ops: CloudOpsConfig

Cloud transformation accelerator configuration ([cloud_ops]).

conversational_ai: ConversationalAiConfig

Conversational AI agent builder configuration ([conversational_ai]).

Experimental / future feature — not yet wired into the agent runtime. Omitted from generated config files when disabled (the default). Existing configs that already contain this section will continue to deserialize correctly thanks to #[serde(default)].

security_ops: SecurityOpsConfig

Managed cybersecurity service configuration ([security_ops]).

runtime: RuntimeConfig

Runtime adapter configuration ([runtime]). Controls native vs Docker execution.

reliability: ReliabilityConfig

Reliability settings: retries, fallback providers, backoff ([reliability]).

scheduler: SchedulerConfig

Scheduler configuration for periodic task execution ([scheduler]).

agent: AgentConfig

Agent orchestration settings ([agent]).

pacing: PacingConfig

Pacing controls for slow/local LLM workloads ([pacing]).

skills: SkillsConfig

Skills loading and community repository behavior ([skills]).

pipeline: PipelineConfig

Pipeline tool configuration ([pipeline]).

model_routes: Vec<ModelRouteConfig>

Model routing rules — route hint:<name> to specific provider+model combos.

embedding_routes: Vec<EmbeddingRouteConfig>

Embedding routing rules — route hint:<name> to specific provider+model combos.

query_classification: QueryClassificationConfig

Automatic query classification — maps user messages to model hints.

heartbeat: HeartbeatConfig

Heartbeat configuration for periodic health pings ([heartbeat]).

cron: CronConfig

Cron job configuration ([cron]).

channels_config: ChannelsConfig

Channel configurations: Telegram, Discord, Slack, etc. ([channels_config]).

memory: MemoryConfig

Memory backend configuration: sqlite, markdown, embeddings ([memory]).

storage: StorageConfig

Persistent storage provider configuration ([storage]).

tunnel: TunnelConfig

Tunnel configuration for exposing the gateway publicly ([tunnel]).

gateway: GatewayConfig

Gateway server configuration: host, port, pairing, rate limits ([gateway]).

composio: ComposioConfig

Composio managed OAuth tools integration ([composio]).

microsoft365: Microsoft365Config

Microsoft 365 Graph API integration ([microsoft365]).

secrets: SecretsConfig

Secrets encryption configuration ([secrets]).

browser: BrowserConfig

Browser automation configuration ([browser]).

browser_delegate: BrowserDelegateConfig

Browser delegation configuration ([browser_delegate]).

Delegates browser-based tasks to a browser-capable CLI subprocess (e.g. Claude Code with claude-in-chrome MCP tools). Useful for interacting with corporate web apps (Teams, Outlook, Jira, Confluence) that lack direct API access. A persistent Chrome profile can be configured so SSO sessions survive across invocations.

Fields:

• enabled (bool, default false) — enable the browser delegation tool.
• cli_binary (String, default "claude") — CLI binary to spawn for browser tasks.
• chrome_profile_dir (String, default "") — Chrome user-data directory for persistent SSO sessions. When empty, a fresh profile is used each invocation.
• allowed_domains (Vec<String>, default []) — allowlist of domains the browser may navigate to. Empty means all non-blocked domains are permitted.
• blocked_domains (Vec<String>, default []) — denylist of domains. Blocked domains take precedence over allowed domains.
• task_timeout_secs (u64, default 120) — per-task timeout in seconds.

Compatibility: additive and disabled by default; existing configs remain valid when omitted. Rollback/migration: remove [browser_delegate] or keep enabled = false to disable.

http_request: HttpRequestConfig

HTTP request tool configuration ([http_request]).

multimodal: MultimodalConfig

Multimodal (image) handling configuration ([multimodal]).

media_pipeline: MediaPipelineConfig

Automatic media understanding pipeline ([media_pipeline]).

web_fetch: WebFetchConfig

Web fetch tool configuration ([web_fetch]).

link_enricher: LinkEnricherConfig

Link enricher configuration ([link_enricher]).

text_browser: TextBrowserConfig

Text browser tool configuration ([text_browser]).

web_search: WebSearchConfig

Web search tool configuration ([web_search]).

project_intel: ProjectIntelConfig

Project delivery intelligence configuration ([project_intel]).

google_workspace: GoogleWorkspaceConfig

Google Workspace CLI (gws) tool configuration ([google_workspace]).

proxy: ProxyConfig

Proxy configuration for outbound HTTP/HTTPS/SOCKS5 traffic ([proxy]).

identity: IdentityConfig

Identity format configuration: OpenClaw or AIEOS ([identity]).

cost: CostConfig

Cost tracking and budget enforcement configuration ([cost]).

peripherals: PeripheralsConfig

Peripheral board configuration for hardware integration ([peripherals]).

delegate: DelegateToolConfig

Delegate tool global default configuration ([delegate]).

agents: HashMap<String, DelegateAgentConfig>

Delegate agent configurations for multi-agent workflows.

swarms: HashMap<String, SwarmConfig>

Swarm configurations for multi-agent orchestration.

hooks: HooksConfig

Hooks configuration (lifecycle hooks and built-in hook toggles).

hardware: HardwareConfig

Hardware configuration (wizard-driven physical world setup).

transcription: TranscriptionConfig

Voice transcription configuration (Whisper API via Groq).

tts: TtsConfig

Text-to-Speech configuration ([tts]).

mcp: McpConfig

External MCP server connections ([mcp]).

kumiho: KumihoConfig

Kumiho graph-memory integration ([kumiho]).

Automatically injects the Kumiho MCP server and session-bootstrap prompt into every non-internal agent. Disable only for testing or air-gapped deployments where Kumiho is not installed.

operator: OperatorConfig

Operator multi-agent orchestration ([operator]).

Automatically injects the Operator MCP server and system prompt into every non-internal agent, enabling plan-delegate-monitor-synthesize workflows.

nodes: NodesConfig

Dynamic node discovery configuration ([nodes]).

clawhub: ClawHubConfig

ClawHub skill marketplace integration ([clawhub]).

workspace: WorkspaceConfig

Multi-client workspace isolation configuration ([workspace]).

notion: NotionConfig

Notion integration configuration ([notion]).

jira: JiraConfig

Jira integration configuration ([jira]).

node_transport: NodeTransportConfig

Secure inter-node transport configuration ([node_transport]).

linkedin: LinkedInConfig

LinkedIn integration configuration ([linkedin]).

image_gen: ImageGenConfig

Standalone image generation tool configuration ([image_gen]).

plugins: PluginsConfig

Plugin system configuration ([plugins]).

locale: Option<String>

Locale for tool descriptions (e.g. "en", "zh-CN").

When set, tool descriptions shown in system prompts are loaded from tool_descriptions/<locale>.toml. Falls back to English, then to hardcoded descriptions.

If omitted or empty, the locale is auto-detected from CONSTRUCT_LOCALE, LANG, or LC_ALL environment variables (defaulting to "en").

verifiable_intent: VerifiableIntentConfig

Verifiable Intent (VI) credential verification and issuance ([verifiable_intent]).

claude_code: ClaudeCodeConfig

Claude Code tool configuration ([claude_code]).

claude_code_runner: ClaudeCodeRunnerConfig

Claude Code task runner with Slack progress and SSH session handoff ([claude_code_runner]).

codex_cli: CodexCliConfig

Codex CLI tool configuration ([codex_cli]).

gemini_cli: GeminiCliConfig

Gemini CLI tool configuration ([gemini_cli]).

opencode_cli: OpenCodeCliConfig

OpenCode CLI tool configuration ([opencode_cli]).

sop: SopConfig

Standard Operating Procedures engine configuration ([sop]).

shell_tool: ShellToolConfig

Shell tool configuration ([shell_tool]).

Implementations

impl Config

pub async fn load_or_init() -> Result<Self>

pub fn validate(&self) -> Result<()>

Validate configuration values that would cause runtime failures.

Called after TOML deserialization and env-override application to catch obviously invalid values early instead of failing at arbitrary runtime points.

pub fn apply_env_overrides(&mut self)

Apply environment variable overrides to config

pub async fn save(&self) -> Result<()>

Trait Implementations

impl Clone for Config

fn clone(&self) -> Config

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Config

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Config

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Config

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for Config

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl Serialize for Config

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.