ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

docs: reorganize specification and model application protocol

Browse source
This commit is contained in:
ms2k 2026-06-29 00:40:52 +09:00
commit 16123747da
1 changed files with 1121 additions and 448 deletions
Download patch file Download diff file Expand all files Collapse all files

21
docs/example.toml
View file

@ -1,5 +1,6 @@
# Lazaret Configuration Template (config.toml)
# Copy this file to ~/.config/lazaret/config.toml or ./lazaret.toml
# Copy this file to ~/.config/lazaret/config.toml.
# Lazaret configuration is host-only and must not be placed in a mounted workspace.
[storage]
# Mount path on the host where persistent profile directories
@ -8,7 +9,7 @@ data_root = "~/.local/share/lazaret"
[network]
# Default global whitelist applied to the Netlink router gateway.
# Nameservers from the host's /etc/resolv.conf are also appended dynamically.
# Nameservers from the host's /etc/resolv.conf are added during Domain startup.
default_allow = [
"198.51.100.53/32", # Documentation address
"192.0.2.53/32" # Documentation address
@ -26,14 +27,14 @@ default_deny = [
# Set to true to enable the agent-to-host escalation Unix Domain Socket server on the host.
enabled = true
# Path on the host filesystem where profile-specific Unix escalation sockets are created.
socket_dir = "/tmp/lazaret"
# socket_dir is optional. Lazaret defaults to a private directory beneath
# $XDG_RUNTIME_DIR.
# Host commands that the agent is allowed to execute on the host automatically
# without triggering an interactive Human-In-The-Loop (HITL) prompt.
auto_approve = [
"aws sts get-caller-identity "
]
[[escalation.auto_approve]]
argv = ["aws", "sts", "get-caller-identity"]
allow_extra_args = false
# AI AGENT PROFILES
@ -77,11 +78,7 @@ volumes = [
image = "docker.io/library/debian:trixie"
persistent_dirs = ["/root", "/usr", "/var", "/etc", "/opt"]
allow_egress = ["10.222.0.0/16"]
env = {
ANTHROPIC_API_KEY = "env:ANTHROPIC_API_KEY",
OPENAI_API_KEY = "env:OPENAI_API_KEY",
GEMINI_API_KEY = "env:GEMINI_API_KEY"
}
env = { ANTHROPIC_API_KEY = "env:ANTHROPIC_API_KEY", OPENAI_API_KEY = "env:OPENAI_API_KEY", GEMINI_API_KEY = "env:GEMINI_API_KEY" }
volumes = [
{ host = "{profile_dir}/opencode-config", container = "/root/.config/opencode", mode = "z" },
{ host = "{profile_dir}/opencode-share", container = "/root/.local/share/opencode", mode = "z" }