tegwick
82ea38b180
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a049a4-ee9f-78e1-9d66-2cb0f9bea3e3
47 lines
2.2 KiB
Python
47 lines
2.2 KiB
Python
from typing import Literal
|
|
|
|
from pydantic_settings import BaseSettings, SettingsConfigDict
|
|
|
|
|
|
class Settings(BaseSettings):
|
|
model_config = SettingsConfigDict(
|
|
env_file=".env",
|
|
env_file_encoding="utf-8",
|
|
extra="ignore",
|
|
)
|
|
|
|
database_url: str = "postgresql+asyncpg://custodian:changeme@127.0.0.1:5432/custodian"
|
|
api_base: str = "http://127.0.0.1:8000"
|
|
# What this instance claims to be. Deliberately defaults to "unknown":
|
|
# an instance that has not declared itself is not the primary, and callers
|
|
# that need the authoritative hub must be able to tell the difference.
|
|
# Answering on a port is not evidence of authority — that assumption cost
|
|
# seven weeks of onboarding (CUST-WP-0067-T03, ADR-010).
|
|
state_hub_instance_role: Literal["primary", "cache", "unknown"] = "unknown"
|
|
# Env vars are STATE_HUB_INSTANCE_ROLE / STATE_HUB_INSTANCE_LABEL — the
|
|
# field name *is* the binding, so renaming either breaks the deployment
|
|
# silently. Covered by tests/test_instance_identity.py.
|
|
# Free-form label to name *which* instance answered, e.g. "railiance01".
|
|
state_hub_instance_label: str | None = None
|
|
debug: bool = False
|
|
state_hub_report_dir: str = "reports/recently-on-scope"
|
|
state_hub_markitect_cli_path: str | None = None
|
|
activity_core_url: str | None = None
|
|
activity_core_worker_token: str | None = None
|
|
ops_run_projection_ttl_seconds: float = 15.0
|
|
ops_run_sla_hours: float = 1.0
|
|
sbom_nexus_url: str | None = None
|
|
sbom_nexus_read_mode: Literal["legacy", "nexus"] = "legacy"
|
|
sbom_nexus_write_mode: Literal["legacy", "nexus"] = "legacy"
|
|
sbom_nexus_timeout_seconds: float = 5.0
|
|
# Repository renames are central-only, compare-and-set operations. The
|
|
# secret signs short-lived, non-persistent preflight evidence; it must be
|
|
# supplied by the deployment (normally through OpenBao), never recorded in
|
|
# State Hub. With no secret the read-only report remains available but no
|
|
# mutation token can be issued.
|
|
repository_rename_preflight_secret: str | None = None
|
|
repository_rename_preflight_ttl_seconds: int = 900
|
|
repository_rename_forge_timeout_seconds: float = 10.0
|
|
|
|
|
|
settings = Settings()
|