Config Schema

This page summarizes the major configuration messages exposed by Talon’s runtime configuration proto.

`TalonConfig`

Field	Type	Notes
`providers`	`map<string, LlmProviderConfig>`	-
`database`	`DatabaseConfig`	-
`server`	`ServerConfig`	-
`default_provider`	`string`	-
`workspace_dir`	`string`	-
`control_plane`	`ControlPlaneConfig`	-
`controllers`	`map<string, ControllerConfig>`	-
`trust`	`TrustConfig`	-
`models`	`map<string, ModelConfig>`	-
`capabilities`	`map<string, CapabilityGate>`	Deployment-wide action gates; missing actions are allowed by default.

`CapabilityGate`

Field	Type	Notes
`actions`	`map<string, bool>`	Explicit `false` disables the action globally; `true` does not grant agent access.

Static metadata for a model configured in the model catalog. Costs are in USD per one million tokens. The context window includes generated output; compaction reserves max_output_tokens from it when both are configured. long_context_tokens is the input-token threshold above which the optional long-context cost fields replace their corresponding standard cost fields; compaction also uses it as an operational input ceiling.

Field	Type	Notes
`provider`	`string`	-
`context_window_tokens`	`uint64`	optional
`max_output_tokens`	`uint64`	optional
`input_cost_per_million_tokens`	`double`	optional
`output_cost_per_million_tokens`	`double`	optional
`cache_read_cost_per_million_tokens`	`double`	optional
`cache_write_cost_per_million_tokens`	`double`	optional
`long_context_tokens`	`uint64`	optional
`long_context_input_cost_per_million_tokens`	`double`	optional
`long_context_output_cost_per_million_tokens`	`double`	optional
`long_context_cache_read_cost_per_million_tokens`	`double`	optional
`long_context_cache_write_cost_per_million_tokens`	`double`	optional

`TrustConfig`

Field	Type	Notes
`oidc`	`OidcTrustEntry`	repeated

`OidcTrustEntry`

Field	Type	Notes
`name`	`string`	-
`issuer`	`string`	-
`audiences`	`string`	repeated
`allowed_domains`	`string`	repeated
`allowed_emails`	`string`	repeated
`jwks_url`	`string`	-
`clock_skew_seconds`	`uint32`	-
`grants`	`OidcTrustGrant`	repeated

`OidcTrustGrant`

Field	Type	Notes
`kind`	`Kind`	-
`namespace`	`string`	-
`agent`	`string`	-
`session`	`string`	-
`channel`	`string`	-

`ControllerConfig`

Field	Type	Notes
`enabled`	`bool`	-
`workers`	`uint32`	-

`LlmProviderConfig`

Field	Type	Notes
`openai`	`OpenAiConfig`	oneof (config)
`anthropic`	`AnthropicConfig`	oneof (config)
`google`	`GoogleConfig`	oneof (config)
`openai_compatible`	`GenericConfig`	oneof (config)

`OpenAiConfig`

Field	Type	Notes
`model`	`string`	-
`api_key`	`Secret`	-
`org_id`	`string`	-
`api`	`string`	-

`AnthropicConfig`

Field	Type	Notes
`model`	`string`	-
`api_key`	`Secret`	-

`GoogleConfig`

Field	Type	Notes
`model`	`string`	-
`api_key`	`Secret`	-

`GenericConfig`

Field	Type	Notes
`name`	`string`	-
`base_url`	`string`	-
`model`	`string`	-
`api_key`	`Secret`	-

`Secret`

Field	Type	Notes
`plain`	`string`	oneof (source)
`ref`	`SecretRef`	oneof (source)

`SecretRef`

Field	Type	Notes
`source`	`Source`	-
`key`	`string`	-

`DatabaseConfig`

Field	Type	Notes
`data_dir`	`string`	-
`driver`	`string`	-
`url`	`Secret`	-

`MessageBrokerConfig`

Field	Type	Notes
`driver`	`string`	-

`LocalObjectStoreConfig`

Field	Type	Notes
`path`	`string`	-

`GcsObjectStoreConfig`

Field	Type	Notes
`bucket`	`string`	-
`prefix`	`string`	-
`api_base_url`	`string`	-

`S3ObjectStoreConfig`

Field	Type	Notes
`bucket`	`string`	-
`prefix`	`string`	-
`region`	`string`	-
`endpoint_url`	`string`	-
`force_path_style`	`bool`	-

`ObjectStoreConfig`

Field	Type	Notes
`local`	`LocalObjectStoreConfig`	oneof (backend)
`gcs`	`GcsObjectStoreConfig`	oneof (backend)
`s3`	`S3ObjectStoreConfig`	oneof (backend)

`SchedulerCallbackAuthConfig`

Field	Type	Notes
`shared_secret`	`Secret`	oneof (auth)
`google_oidc`	`GoogleOidcAuthConfig`	oneof (auth)

`GoogleOidcAuthConfig`

Field	Type	Notes
`audience`	`string`	-
`service_account_email`	`string`	-

`CloudTasksSchedulerConfig`

Field	Type	Notes
`project_id`	`string`	-
`location`	`string`	-
`queue`	`string`	-
`target_url`	`string`	-
`callback_auth`	`SchedulerCallbackAuthConfig`	-

`AwsEventBridgeSchedulerConfig`

Field	Type	Notes
`group_name`	`string`	-
`queue_url`	`string`	-
`execution_role_arn`	`string`	-
`schedule_name_prefix`	`string`	-
`dlq_arn`	`string`	-
`maximum_event_age_seconds`	`uint32`	-
`maximum_retry_attempts`	`uint32`	optional
`endpoint_url`	`string`	-

`SchedulerConfig`

Field	Type	Notes
`cloud_tasks`	`CloudTasksSchedulerConfig`	oneof (backend)
`aws_eventbridge_scheduler`	`AwsEventBridgeSchedulerConfig`	oneof (backend)

`ControlPlaneConfig`

Field	Type	Notes
`database`	`DatabaseConfig`	-
`message_broker`	`MessageBrokerConfig`	-
`scheduler`	`SchedulerConfig`	-
`object_store`	`ObjectStoreConfig`	-
`documents`	`DatabaseConfig`	-

`ServerConfig`

Field	Type	Notes
`host`	`string`	-
`port`	`uint32`	-