config.example.yaml

version: 1

database:
  path: ./build/kendaliai.db

defaultProvider: openai-compatible

chatProviders:
  - name: openai-compatible
    type: openai
    apiKey: your-openai-key-here
    endpoint: https://api.openai.com/v1
    model: gpt-4o
  - name: deepseek
    type: deepseek
    apiKey: your-deepseek-key-here
    model: deepseek-chat

embedding:
  apiKey: your-openai-key-here
  endpoint: https://api.openai.com/v1
  model: text-embedding-3-small

channels:
  - id: telegram-main
    channelName: telegram
    channelType: telegram
    token: your-telegram-token-here

# Object storage for generated artifacts, uploads, and session data.
# Local storage is ALWAYS auto-available — no config needed.
# Cloudflare R2 / S3-compatible is optional, added on top of local.
storage:
  provider: local
  localPath: ./storage

  # Optional: add Cloudflare R2 on top of local storage
  # r2:
  #   bucket: kendaliai
  #   endpoint: https://xxxxx.r2.cloudflarestorage.com
  #   accessKey: your-access-key
  #   secretKey: your-secret-key
  #   publicUrl: https://cdn.example.com
  #   region: auto

# File access permissions. Deny-list takes priority over allow-list.
# Built-in sensitive patterns (config.yaml, .env, .git/, .ssh/, *.key, *.pem, etc.) are ALWAYS denied.
permissions:
  deny:
    - secrets/
    - credentials/
    - tokens/
  allow:
    - path: example/
      permissions: [read, write, update, delete]
    - path: public/
      permissions: [read, write, update, delete]
    - path: ./
      permissions: [read]

# Native function calling (OpenAI tools API). Enabled by default for
# providers that support it; providers that reject it fall back to the legacy
# `tool: NAME({...})` text protocol automatically. Set false to always use
# the text protocol.
# nativeTools: false

# Daily reflection daemon — runs at midnight, generates timeline and auto-skills
reflection:
  enabled: true
  schedule: "0 0 * * *"
  timezone: Asia/Jakarta