iop/configs/iop-agent.providers.yaml

133 lines
3 KiB
YAML

# Secret-free, repository-owned Agent CLI provider catalog.
# Authentication and credentials remain owned by each external CLI.
version: "1"
providers:
- id: codex
command: codex
version_probe:
args: ["--version"]
timeout_ms: 5000
authentication:
args: ["login", "status"]
timeout_ms: 10000
unauthenticated_pattern: "(?i)(not logged in|login required|unauthenticated)"
capabilities:
- approval_bypass
- cancel
- resume
- run
- status
- unattended
- writable_root_confinement
- id: claude
command: claude
version_probe:
args: ["--version"]
timeout_ms: 5000
authentication:
args: ["auth", "status"]
timeout_ms: 10000
unauthenticated_pattern: "(?i)(not logged in|login required|unauthenticated)"
capabilities:
- approval_bypass
- cancel
- run
- status
- unattended
- writable_root_confinement
models:
- id: gpt-5.6-sol
provider: codex
target: gpt-5.6-sol
- id: claude-opus-4-8
provider: claude
target: claude-opus-4-8
profiles:
- id: claude-headless
provider: claude
model: claude-opus-4-8
args:
- "--print"
- "--verbose"
- "--output-format"
- "stream-json"
- "--dangerously-skip-permissions"
- "--model"
- "{{model}}"
output_format: claude-json
max_concurrency: 1
capabilities:
- approval_bypass
- cancel
- run
- status
- unattended
- writable_root_confinement
- id: codex-headless
provider: codex
model: gpt-5.6-sol
args:
- "exec"
- "--json"
- "--dangerously-bypass-approvals-and-sandbox"
- "--skip-git-repo-check"
- "--model"
- "{{model}}"
resume_args:
- "exec"
- "resume"
- "--json"
- "--dangerously-bypass-approvals-and-sandbox"
- "--skip-git-repo-check"
- "--model"
- "{{model}}"
mode: codex-exec
output_format: codex-json
persistent: true
max_concurrency: 1
capabilities:
- approval_bypass
- cancel
- resume
- run
- status
- unattended
- writable_root_confinement
# The authenticated smoke uses the same production profile contract with a
# distinct stable ID so evidence cannot be confused with normal work.
- id: codex-smoke
provider: codex
model: gpt-5.6-sol
args:
- "exec"
- "--json"
- "--dangerously-bypass-approvals-and-sandbox"
- "--skip-git-repo-check"
- "--model"
- "{{model}}"
resume_args:
- "exec"
- "resume"
- "--json"
- "--dangerously-bypass-approvals-and-sandbox"
- "--skip-git-repo-check"
- "--model"
- "{{model}}"
mode: codex-exec
output_format: codex-json
persistent: true
max_concurrency: 1
capabilities:
- approval_bypass
- cancel
- resume
- run
- status
- unattended
- writable_root_confinement