ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Classify serialized and runtime schema records

Browse source
This commit is contained in:
ms2k 2026-07-14 23:34:56 +09:00
commit f106a9f636
1 changed files with 697 additions and 110 deletions
Download patch file Download diff file Expand all files Collapse all files

89
docs/example.toml
View file

@ -1,90 +1,21 @@
# Lazaret Configuration Template (config.toml)
# Copy this file to ~/.config/lazaret/config.toml.
# Lazaret configuration is host-only and must not be placed in a mounted workspace.
# Lazaret trusted-host configuration v1
schema = "lazaret-trusted-host-config-v1"
[storage]
# Mount path on the host where persistent profile directories
# (e.g., usr, var, etc, opt, root) will be initialized and stored.
data_root = "~/.local/share/lazaret"
[network]
# Default global whitelist applied to the Netlink router gateway.
# Nameservers from the host's /etc/resolv.conf are added during Domain startup.
default_allow = [
"198.51.100.53/32", # Documentation address
"192.0.2.53/32" # Documentation address
]
default_allow = ["192.0.2.53/32", "198.51.100.53/32"]
# Default global blacklist applied to the Netlink router gateway.
# Private RFC 1918 ranges are blackholed by default to prevent scanning/accessing the local network.
default_deny = [
"10.0.0.0/8", # Class A Private Network Range
"172.16.0.0/12", # Class B Private Network Range
"192.168.0.0/16" # Class C Private Network Range
]
[escalation]
# Set to true to enable agent-to-host escalation through Lazaret's host-private control plane.
enabled = true
# runtime_dir is optional. Lazaret defaults to a private directory beneath
# $XDG_RUNTIME_DIR.
# Host commands that the agent is allowed to execute on the host automatically
# without triggering an interactive Human-In-The-Loop (HITL) prompt.
[[escalation.auto_approve]]
argv = ["aws", "sts", "get-caller-identity"]
allow_extra_args = false
# AI AGENT PROFILES
[profiles.gemini]
[profiles.default]
image = "docker.io/library/debian:trixie"
isolate_gitignored = true
persistent_dirs = ["/root", "/usr", "/var", "/etc", "/opt"]
allow_egress = ["10.222.0.0/16"]
env = { GEMINI_API_KEY = "env:GEMINI_API_KEY" }
persistent_dirs = ["/root"]
allow_egress = ["203.0.113.10/32"]
volumes = [
{ host = "{profile_dir}/.gemini", container = "/root/.gemini", mode = "z" }
{ host = "{profile_dir}/agent-state", container = "/root/.local/state/agent", kind = "directory", access = "read-write", create = true },
]
[profiles.claude]
image = "docker.io/library/debian:trixie"
isolate_gitignored = true
persistent_dirs = ["/root", "/usr", "/var", "/etc", "/opt"]
allow_egress = ["10.222.0.0/16"]
env = { ANTHROPIC_API_KEY = "env:ANTHROPIC_API_KEY" }
volumes = [
{ host = "{profile_dir}/.claude", container = "/root/.claude", mode = "z" }
]
[profiles.codex]
image = "docker.io/library/debian:trixie"
isolate_gitignored = true
persistent_dirs = ["/root", "/usr", "/var", "/etc", "/opt"]
allow_egress = ["10.222.0.0/16"]
env = { OPENAI_API_KEY = "env:OPENAI_API_KEY" }
volumes = [
{ host = "{profile_dir}/.codex", container = "/root/.codex", mode = "z" }
]
[profiles.grok]
image = "docker.io/library/debian:trixie"
isolate_gitignored = true
persistent_dirs = ["/root", "/usr", "/var", "/etc", "/opt"]
allow_egress = ["10.222.0.0/16"]
env = { XAI_API_KEY = "env:XAI_API_KEY" }
volumes = [
{ host = "{profile_dir}/.grok", container = "/root/.grok", mode = "z" }
]
[profiles.opencode]
image = "docker.io/library/debian:trixie"
isolate_gitignored = true
persistent_dirs = ["/root", "/usr", "/var", "/etc", "/opt"]
allow_egress = ["10.222.0.0/16"]
env = { ANTHROPIC_API_KEY = "env:ANTHROPIC_API_KEY", OPENAI_API_KEY = "env:OPENAI_API_KEY", GEMINI_API_KEY = "env:GEMINI_API_KEY" }
volumes = [
{ host = "{profile_dir}/opencode-config", container = "/root/.config/opencode", mode = "z" },
{ host = "{profile_dir}/opencode-share", container = "/root/.local/share/opencode", mode = "z" }
]
[profiles.default.escalation]
enabled = false