Configuration Reference¶

# ─── Server ───────────────────────────────────────────────
[server]
host = "127.0.0.1"                  # Bind address
port = 8080                          # Bind port
# shutdown_timeout_seconds = 30      # Graceful shutdown drain time
# max_sse_connections_per_tenant = 10  # Max concurrent SSE connections per tenant

# ─── State Backend ────────────────────────────────────────
[state]
backend = "memory"                   # "memory" | "redis" | "postgres" | "dynamodb"
# url = "redis://localhost:6379"     # Connection URL (redis, postgres, dynamodb-local)
# prefix = "acteon"                  # Key/table prefix
# region = "us-east-1"              # AWS region (DynamoDB only)
# table_name = "acteon_state"       # Table name (DynamoDB only)

# ─── Audit Trail ──────────────────────────────────────────
[audit]
enabled = false                      # Enable audit recording
backend = "memory"                   # "memory" | "postgres" | "clickhouse" | "elasticsearch"
# url = "postgres://..."            # Connection URL
prefix = "acteon_"                   # Table/index prefix
ttl_seconds = 2592000                # Record TTL (30 days)
cleanup_interval_seconds = 3600      # Background cleanup interval
store_payload = true                 # Store action payloads in audit

# ─── Audit Redaction ──────────────────────────────────────
[audit.redact]
enabled = false                      # Enable field redaction
fields = ["password", "token", "api_key", "secret"]  # Fields to redact
placeholder = "[REDACTED]"           # Replacement text

# ─── Rules ────────────────────────────────────────────────
[rules]
# directory = "./rules"              # YAML rule files directory

# ─── Executor ─────────────────────────────────────────────
[executor]
max_retries = 3                      # Max retry attempts per action
timeout_seconds = 30                 # Per-action execution timeout
max_concurrent = 10                  # Max concurrent executions

# ─── Providers ───────────────────────────────────────────
# [[providers]]
# name = "email"
# type = "email"
# from_address = "noreply@example.com"

# [[providers]]
# name = "alert-fanout"
# type = "aws-sns"
# aws_region = "us-east-1"
# topic_arn = "arn:aws:sns:us-east-1:123:alerts"
# aws_endpoint_url = "http://localhost:4566"  # LocalStack

# [[providers]]
# name = "archive"
# type = "aws-s3"
# aws_region = "us-east-1"
# bucket_name = "my-bucket"
# object_prefix = "acteon/"

# ─── Authentication ───────────────────────────────────────
# Users and API keys live in auth.toml, a separate file referenced from
# here. Each principal is authorized via a list of grants that scope them
# to specific tenants, namespaces, providers, and action types. Tenant
# grants support hierarchical matching — a grant on "acme" covers
# "acme.us-east" and "acme.us-east.prod". See the "API Key Scoping"
# feature page for the full grant model and worked examples.
[auth]
enabled = false                      # Enable authentication
# config_path = "auth.toml"         # Path to auth config (relative to acteon.toml)
# watch = true                       # Hot-reload auth.toml on file changes

# ─── Background Processing ───────────────────────────────
[background]
# tick_interval_ms = 1000           # Background loop tick interval
# group_flush_timeout_ms = 60000    # Group flush wait time
# timeout_check_batch_size = 100    # Batch size for timeout checks
# enable_scheduled_actions = false  # Enable scheduled action processing
# scheduled_check_interval = 5     # Scheduled action poll interval (seconds)
# enable_recurring_actions = false  # Enable recurring action processing
# recurring_check_interval_seconds = 5  # Recurring action poll interval (seconds)

# ─── State Machines ───────────────────────────────────────
[[state_machines]]
name = "alert"
initial_state = "firing"
states = ["firing", "acknowledged", "resolved", "stale"]

[[state_machines.transitions]]
from = "firing"
to = "acknowledged"

[[state_machines.transitions]]
from = "acknowledged"
to = "resolved"

[[state_machines.transitions]]
from = "firing"
to = "resolved"

[[state_machines.timeouts]]
state = "firing"
after_seconds = 3600
transition_to = "stale"

# ─── Task Chains ──────────────────────────────────────────
[[chains]]
name = "search-summarize-email"
on_failure = "abort"                 # "abort" | "abort_no_dlq"
# timeout_seconds = 604800          # Chain-level timeout (7 days)

[[chains.steps]]
name = "search"
provider = "search-api"
action_type = "web_search"
# delay_seconds = 0                 # Delay before execution
# on_failure = "abort"              # "abort" | "skip" | "dlq"

[[chains.steps]]
name = "summarize"
provider = "llm"
action_type = "summarize"

[[chains.steps]]
name = "send-email"
provider = "email"
action_type = "send_email"

# ─── Circuit Breaker ─────────────────────────────────────
[circuit_breaker]
enabled = false                      # Enable circuit breakers
failure_threshold = 5                # Consecutive failures to open
success_threshold = 2                # Consecutive successes to close
recovery_timeout_seconds = 60        # Seconds before probing

# Per-provider overrides
# [circuit_breaker.providers.email]
# failure_threshold = 10
# recovery_timeout_seconds = 120
# fallback_provider = "webhook"

# ─── LLM Guardrails ──────────────────────────────────────
[llm_guardrail]
# endpoint = "https://api.openai.com/v1/chat/completions"
# model = "gpt-4"
# api_key_env = "OPENAI_API_KEY"
# policy = "block"                  # "block" | "flag"
# temperature = 0.0
# max_tokens = 256

# ─── Embedding / Semantic Routing ────────────────────────
[embedding]
# enabled = false
# endpoint = "https://api.openai.com/v1/embeddings"
# model = "text-embedding-3-small"
# api_key = ""                      # Supports ENC[...] encrypted values
# timeout_seconds = 10
# fail_open = true                  # Return similarity 0.0 on API failure
# topic_cache_capacity = 10000      # Max cached topic embeddings
# topic_cache_ttl_seconds = 3600    # Topic cache TTL (1 hour)
# text_cache_capacity = 1000        # Max cached text embeddings
# text_cache_ttl_seconds = 60       # Text cache TTL (1 minute)

# ─── Telemetry / Distributed Tracing ────────────────────
[telemetry]
# enabled = false                    # Enable OpenTelemetry tracing
# endpoint = "http://localhost:4317" # OTLP collector endpoint
# service_name = "acteon"            # Service name in traces
# sample_ratio = 1.0                 # 0.0 (none) to 1.0 (all)
# protocol = "grpc"                  # "grpc" (port 4317) or "http" (port 4318)
# timeout_seconds = 10               # Exporter timeout

# [telemetry.resource_attributes]
# "deployment.environment" = "production"
# "service.instance.id" = "acteon-01"