Files
roboco/docs/rag/architecture/config-reference.md
T
Renn F 68094d5f2a docs(0.7.0): document Grok provider, self-heal, PR-reviewer across the RAG + how-to docs
Close the doc gaps the audit found in the agent knowledge base and the human
walkthrough:
- config-reference: add the Grok provider env table (host ~/.grok subscription
  mount, grok-build, idle-kill, cost cap) and the Self-Healing CI loop toggles.
- agent-model: provider-aware Model Configuration (ANTHROPIC default / GROK) +
  add the pr_reviewer / prompter / secretary roles to the Roles table.
- tool-permissions: 'three' -> five MCP servers (roboco-optimal, roboco-docs) +
  PR Reviewer / Prompter / Secretary tool sections.
- new roles/pr-reviewer.md (the 22nd agent had no role doc); permissions +
  agent-uuids + task-tools 'PR Reviewer flow' all gain the role.
- api-endpoints: drop the removed USAGE_UPDATE event (only USAGE_SNAPSHOT exists).
- how-to: self-healing CI loop + Company Scorecard (ch.5), inbound external-PR
  review + CEO Supersede/Dismiss queue (ch.4).

Every claim verified against current code by the audit (grok model grok-build,
auth ~/.grok, no metered API; opencode fully removed).
2026-06-19 10:50:58 +02:00

4.9 KiB

Configuration Reference

Environment variables for RoboCo (prefix: ROBOCO_).

API Server

Variable Default Description
ROBOCO_HOST 127.0.0.1 API host (0.0.0.0 for containers)
ROBOCO_PORT 8000 API port
ROBOCO_DEBUG false Debug mode
ROBOCO_ENVIRONMENT development development/staging/production

Database

Variable Default Description
ROBOCO_DATABASE_HOST localhost PostgreSQL host
ROBOCO_DATABASE_PORT 5432 PostgreSQL port
ROBOCO_DATABASE_USER roboco Database user
ROBOCO_DATABASE_PASSWORD roboco Database password
ROBOCO_DATABASE_NAME roboco Database name

Redis

Variable Default Description
ROBOCO_REDIS_HOST localhost Redis host
ROBOCO_REDIS_PORT 6379 Redis port
ROBOCO_REDIS_DB 0 Redis database

Workspaces

Variable Default Description
ROBOCO_WORKSPACES_ROOT /data/workspaces Root for agent workspaces
ROBOCO_WORKSPACE_AUTO_CLONE true Auto-clone on first access
ROBOCO_WORKSPACE_CLONE_TIMEOUT 300 Clone timeout (seconds)

RAG/Embeddings

Variable Default Description
ROBOCO_DEFAULT_EMBEDDING_MODEL qwen3-embedding:0.6b Embedding model
ROBOCO_EMBEDDING_DIMENSIONS 1024 Embedding dimensions
ROBOCO_RAG_CHUNK_STRATEGY fixed fixed/semantic/hierarchical/contextual
ROBOCO_RAG_CHUNK_SIZE 512 Base chunk size
ROBOCO_RAG_CHUNK_SIZE_DOCS 1536 Chunk size for docs
ROBOCO_RAG_CHUNK_SIZE_JOURNALS 1024 Chunk size for journals
ROBOCO_RAG_CHUNK_OVERLAP 128 Chunk overlap
ROBOCO_RAG_USE_HYDE true Use HyDE for queries
ROBOCO_RAG_USE_HYBRID_SEARCH true BM25 + vector search
ROBOCO_RAG_USE_CROSS_ENCODER true Neural reranking
ROBOCO_RAG_AUTO_UPDATE_ENABLED true Auto-update indexes
ROBOCO_RAG_AUTO_UPDATE_INTERVAL 300 Update interval (seconds)

LLM

Variable Default Description
ROBOCO_LOCAL_LLM_MODEL glm-5:cloud Local LLM for RAG
ROBOCO_LOCAL_LLM_BASE_URL http://roboco-ollama:11434/v1 OpenAI-compat API
ROBOCO_OLLAMA_BASE_URL http://roboco-ollama:11434 Native Ollama API

Grok provider (xAI)

Agents whose provider is GROK run xAI's official grok CLI. Auth is the host SuperGrok subscription (mounted ~/.grok), not a metered API key.

Variable Default Description
ROBOCO_HOST_GROK_DIR ~/.grok Host dir holding auth.json, mounted into Grok agents; the orchestrator auto-refreshes the ~6h token in place. Set up once with grok login.
ROBOCO_GROK_CLI_MODEL grok-build Grok CLI model id
ROBOCO_GROK_AGENT_IMAGE roboco-agent-grok:latest Image for Grok delivery agents
ROBOCO_GROK_REASONING_EFFORT (blank) Per-run reasoning-effort override; blank = the grok CLI default
ROBOCO_GROK_IDLE_KILL_SECONDS 900 Kill + evict a Grok container that has been ACTIVE-yet-idle (no gateway verb) this long
ROBOCO_GROK_MAX_COST_USD 0.0 Per-agent Grok cost ceiling (USD); 0 disables

Self-Healing CI loop

RoboCo watching its own repo's CI. All default-off / dormant.

Variable Default Description
ROBOCO_SELF_HEAL_ENABLED false Master switch (detect + notify the CEO); off = the loop never runs and no CI is fetched
ROBOCO_SELF_HEAL_ORIGINATE_ENABLED false Second opt-in: also open a PENDING fix task on a regression — CEO-gated, never auto-started/merged/deployed
ROBOCO_SELF_HEAL_PROJECT_SLUG (empty) The registered project that IS RoboCo itself — the only repo it watches and fixes; empty = no-op
ROBOCO_SELF_HEAL_CI_WORKFLOW (empty) GitHub Actions workflow to scope the CI signal to (e.g. ci.yml); empty = latest across all workflows
ROBOCO_SELF_HEAL_INTERVAL_SECONDS 1800 Seconds between assessment passes
ROBOCO_SELF_HEAL_MAX_OPEN_TASKS 3 Rolling cap on concurrently-open self-heal tasks
ROBOCO_SELF_HEAL_MAX_PER_CYCLE 1 Max fix tasks originated per cycle

Security

Variable Default Description
ROBOCO_ENCRYPTION_KEY (required) Fernet key that encrypts secrets at rest (e.g. per-project git tokens). Generate with Fernet.generate_key().
ROBOCO_AGENT_AUTH_SECRET (required) HMAC secret the orchestrator signs each agent's X-Agent-Token with.
ROBOCO_AGENT_AUTH_REQUIRED false When true, every request must carry a valid agent token (secure mode).
ROBOCO_PANEL_AGENT_TOKEN (unset) The control panel's CEO token, injected by nginx in secure mode. Get it with make panel-token.