928f23ab1b
Enables exposing the supervisor MCP via Tailscale Funnel for claude.ai custom-connector tests. Auth is opt-in: empty SUPERVISOR_MCP_TOKEN preserves the existing unauthenticated behavior for tailnet-internal callers and local dev. When the token is set, every request must carry "Authorization: Bearer <token>" or it is rejected with HTTP 401 and a JSON-RPC -32001 error. Comparison uses crypto/subtle.ConstantTimeCompare; the token value and the supplied header are never logged. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
42 lines
1.7 KiB
Go
42 lines
1.7 KiB
Go
package config
|
|
|
|
import "os"
|
|
|
|
type Config struct {
|
|
Port string // SUPERVISOR_PORT, default 3200
|
|
LiteLLMBaseURL string // LITELLM_BASE_URL, default http://iguana:4000
|
|
LiteLLMAPIKey string // LITELLM_API_KEY
|
|
ConfigDir string // SUPERVISOR_CONFIG_DIR, default ./config/supervisor
|
|
ModelsFile string // SUPERVISOR_MODELS_FILE, default <ConfigDir>/../models.yaml
|
|
IngestBaseURL string // INGEST_BASE_URL, default http://localhost:3300
|
|
IngestSvcURL string // INGEST_SVC_URL — base URL for brain_ingest (/ingest, /ingest-path)
|
|
KBRetrievalURL string // KB_RETRIEVAL_URL — base URL for brain_search
|
|
SessionsDir string // SUPERVISOR_SESSIONS_DIR, default ./brain/sessions
|
|
BrainDir string // SUPERVISOR_BRAIN_DIR, default ./brain
|
|
MCPAuthToken string // SUPERVISOR_MCP_TOKEN — optional bearer token for MCP HTTP; empty disables auth
|
|
}
|
|
|
|
func Load() (Config, error) {
|
|
cfg := Config{
|
|
Port: envOr("SUPERVISOR_PORT", "3200"),
|
|
LiteLLMBaseURL: envOr("LITELLM_BASE_URL", "http://iguana:4000"),
|
|
LiteLLMAPIKey: os.Getenv("LITELLM_API_KEY"),
|
|
ConfigDir: envOr("SUPERVISOR_CONFIG_DIR", "./config/supervisor"),
|
|
}
|
|
cfg.ModelsFile = envOr("SUPERVISOR_MODELS_FILE", cfg.ConfigDir+"/../models.yaml")
|
|
cfg.IngestBaseURL = envOr("INGEST_BASE_URL", "http://localhost:3300")
|
|
cfg.IngestSvcURL = envOr("INGEST_SVC_URL", "")
|
|
cfg.KBRetrievalURL = envOr("KB_RETRIEVAL_URL", "")
|
|
cfg.SessionsDir = envOr("SUPERVISOR_SESSIONS_DIR", "./brain/sessions")
|
|
cfg.BrainDir = envOr("SUPERVISOR_BRAIN_DIR", "./brain")
|
|
cfg.MCPAuthToken = os.Getenv("SUPERVISOR_MCP_TOKEN")
|
|
return cfg, nil
|
|
}
|
|
|
|
func envOr(key, def string) string {
|
|
if v := os.Getenv(key); v != "" {
|
|
return v
|
|
}
|
|
return def
|
|
}
|