model:
  default: kimi-k2.5
  provider: kimi-coding
  context_length: 65536
  base_url: https://api.kimi.com/coding/v1

toolsets:
  - all

fallback_providers:
  - provider: kimi-coding
    model: kimi-k2.5
    base_url: https://api.kimi.com/coding/v1
    timeout: 120
    reason: "Primary — Kimi K2.5 (best value, least friction)"
  - provider: openrouter
    model: google/gemini-2.5-pro
    base_url: https://openrouter.ai/api/v1
    api_key_env: OPENROUTER_API_KEY
    timeout: 120
    reason: "Fallback — Gemini 2.5 Pro via OpenRouter"
  - provider: ollama
    model: gemma4:latest
    base_url: http://localhost:11434/v1
    timeout: 180
    reason: "Terminal fallback — local Ollama (sovereign, no API needed)"

agent:
  max_turns: 90
  reasoning_effort: high
  verbose: false

terminal:
  backend: local
  cwd: .
  timeout: 180
  persistent_shell: true

browser:
  inactivity_timeout: 120
  command_timeout: 30
  record_sessions: false

display:
  compact: false
  personality: ''
  resume_display: full
  busy_input_mode: interrupt
  bell_on_complete: false
  show_reasoning: false
  streaming: false
  show_cost: false
  tool_progress: all

memory:
  memory_enabled: true
  user_profile_enabled: true
  memory_char_limit: 2200
  user_char_limit: 1375
  nudge_interval: 10
  flush_min_turns: 6

approvals:
  mode: auto

security:
  redact_secrets: true
  tirith_enabled: false

platforms:
  api_server:
    enabled: true
    extra:
      host: 127.0.0.1
      port: 8645

session_reset:
  mode: none
  idle_minutes: 0

skills:
  creation_nudge_interval: 15

system_prompt_suffix: |
  You are Ezra, the Infrastructure wizard — Gitea, nginx, hosting.
  Your soul is defined in SOUL.md — read it, live it.
  Hermes is your harness.
  kimi-coding is your primary provider.
  Refusal over fabrication. If you do not know, say so.
  Sovereignty and service always.

providers:
  kimi-coding:
    base_url: https://api.kimi.com/coding/v1
    timeout: 60
    max_retries: 3
  openrouter:
    base_url: https://openrouter.ai/api/v1
    timeout: 120
  ollama:
    base_url: http://localhost:11434/v1
    timeout: 180

# =============================================================================
# BANNED PROVIDERS — DO NOT ADD
# =============================================================================
# The following providers are PERMANENTLY BANNED:
# - anthropic (any model: claude-sonnet, claude-opus, claude-haiku)
# - nous (xiaomi/mimo-v2-pro)
# Enforcement: pre-commit hook, linter, Ansible validation, this comment.
# =============================================================================