log:
  level: 4
  isJSON: false

# Pull credentials (Lark, Jira password, DB password) from AWS Secrets Manager.
# The named secret should hold a YAML blob in RootConfig shape; values from it
# overwrite the values in this file at startup.
secret:
  rootConfigSecretName: "aisupport-prod/ticket-manager"
  awsASM:
    region: "us-west-2"

apiServer:
  address: ":8080"

database:
  host: vpce-050be0bb3f1cddd13-nblszha8.vpce-svc-0679cde159cc189f2.us-west-2.vpce.amazonaws.com
  port: 4000
  user: "REPLACE_FROM_SECRET"
  password: "REPLACE_FROM_SECRET"
  database: "ticket_manager_prod"
  logLevel: 4                 # 1=silent 2=error 3=warn 4=info
  params:
    parseTime: "true"
    charset: "utf8mb4"

services:
  workspace:
    taskAdvisor: 
      addTask:
        enabled: true
    timeline:
      enabled: true
      syncInterval: "5m"
      aiDraftsEnabled: true
      aiEvidenceLimit: 40
    syncOverviewMessageInterval: "30m"
  collaboration:
    connector:
      loginURL: "https://prod.devops.pingcap.com/public/v1/ticketmanager/channels/lark/login"
  dispatch:
    botEmails:
    - "ai-support-bot@pingcap.com"
    stalledAutoAssignmentRecovery:
      enabled: true
      projectKeys:
        - TCID
        - TCOC
        - GTOC
        - ST
        - APID
        - JPID
        - EMID
        - TCAB

clients:
  core:
    addr: core-server.core-server-prod:9090

  jira:
    dummy: false
    url: "https://tidb.atlassian.net/"
    username: "REPLACE_FROM_SECRET"
    password: "REPLACE_FROM_SECRET"

  lark:
    appCode: "REPLACE_FROM_SECRET"
    appSecret: "REPLACE_FROM_SECRET"
    encryptKey: "REPLACE_FROM_SECRET"
    verificationToken: "REPLACE_FROM_SECRET"

  opencode:
    bin: "opencode"
    workdirBase: "/var/lib/ticket-manager/opencode"
    skillsDir: "/app/packages/agent-skills"
    configFile: "/app/opencode.json"
    debugDir: ""
    model: "alibaba/qwen3.8-max"

  devops:
    apiToken: "REPLACE_FROM_SECRET"
    baseUrl: "https://prod.devops.pingcap.com"
    frontendUrl: "https://ops.tidbcloud.com"
    timeout: "30s"

  aws:
    bedrock:
      region: "us-west-2"
      accessKeyId: "REPLACE_FROM_SECRET"
      secretAccessKey: "REPLACE_FROM_SECRET"

  alicloud:
    bailian:
      dashscopeEndpoint: "https://dashscope-intl.aliyuncs.com/compatible-mode/v1"
      dashscopeApiKey: "REPLACE_FROM_SECRET"

  oncall:
    addr: https://oncall.pingcap.net
    apiKey: "REPLACE_FROM_SECRET"