Configuration

export default {
  server: {
    host: '0.0.0.0',           // Default: '0.0.0.0'
    port: 3000,                 // Default: 3000
    shutdownTimeoutMs: 10_000,  // Default: 10s
    maxBodySize: 26_214_400,    // Default: 25 MB
    trustProxy: false,          // Default: false. When true, reads client IP from X-Forwarded-For / X-Real-IP headers.
    cors: {
      // Or true (permissive) / false (disabled)
      origin: ['https://app.example.com'],
      methods: ['GET', 'POST', 'PUT', 'DELETE'],
      allowedHeaders: ['Content-Type', 'Authorization'],
      exposedHeaders: ['X-Total-Count'],
      credentials: true,
      maxAge: 86400,
    },
  },

  api: {
    enabled: true,              // Default: true. Set false to disable API routes.
    pathPrefix: '/api',         // Default: '/api'. All API routes are prefixed.
  },

  pages: {
    enabled: true,              // Default: true. Set false to disable pages/ rendering.
    fonts: [
      {
        family: 'Inter',
        src: 'fonts/inter',
        preload: [400, 700],
      },
    ],
    vite: {
      enabled: false,           // Default: false. Set true to use Vite for dev HMR.
    },
  },

  database: {
    client: 'better-sqlite3',   // 'better-sqlite3', 'postgres', or 'mysql'
    connection: process.env.DATABASE_URL,
    dir: 'migrations',          // Default: 'migrations'
    sqlite: {
      useNullAsDefault: true,   // SQLite only. Default: true
      foreignKeys: false,       // SQLite only. Enables PRAGMA foreign_keys = ON
    },
  },

  seeds: {
    dir: 'seeds',               // Default: 'seeds'
  },

  session: {
    // No password here — the session signing key is derived from vault.masterSecret.
    cookieName: 'arcway.session',         // Default
    ttl: 1_209_600,                       // 14 days in seconds (default)
    cookie: {
      httpOnly: true,           // Default: true
      secure: true,             // Default: true in production, false in dev
      sameSite: 'lax',          // Default: 'lax'
      path: '/',                // Default: '/'
    },
  },

  queue: {
    driver: 'knex',             // 'knex' (default) or 'redis'
    tableName: 'arcway_queue',  // Default for knex driver
    lockCooldownMs: 300_000,    // Default: 5 min
    redis: { url: '...' },     // Required when driver is 'redis'
  },

  cache: {
    driver: 'memory',           // 'memory' (default) or 'redis'
    defaultTtlMs: '60s',        // Optional default TTL, or 60000
    redis: { url: '...' },     // Required when driver is 'redis'
  },

  events: {
    enabled: true,              // Default: true. Set false to disable event system.
    driver: 'memory',           // 'memory' (default) or 'redis'
    redis: { url: '...' },     // Required when driver is 'redis'
  },

  files: {
    driver: 'local',            // 'local' (default) or 's3'
    storageDir: '.build/storage', // Default: '.build/storage'
    s3: {
      bucket: 'my-bucket',
      region: 'us-east-1',
      endpoint: 'http://localhost:9000', // For MinIO
      forcePathStyle: true,
    },
  },

  jobs: {
    enabled: true,              // Default: true. Set false to disable background jobs.
    pollIntervalMs: 60_000,     // Default: 1 min
    backoffMs: 1_000,           // Default: exponential base
    cooldownMs: 1_000,          // Default: 1s. Global fallback; per-job cooldownMs overrides.
    staleTimeoutMs: 300_000,    // Default: 5 min. Global fallback; per-job staleTimeout overrides.
    workerPoolSize: 3,          // Default: availableParallelism() - 1. Set 0 to run jobs inline on the main thread.
  },

  mail: {
    enabled: true,              // Default: true. Set false to disable mail.
    driver: 'smtp',             // 'smtp' or 'console'
    from: 'noreply@example.com',
    host: 'smtp.example.com',
    port: 587,
    secure: false,
    auth: {
      user: process.env.SMTP_USER,
      pass: process.env.SMTP_PASS,
    },
    throughput: {
      maxPerSecond: 10,
      maxPerMinute: 300,
    },
    inbound: {
      driver: 'imap',
      imap: {
        host: 'imap.example.com',
        port: 993,
        tls: true,
        auth: {
          user: process.env.IMAP_USER,
          pass: process.env.IMAP_PASS,
        },
        mailbox: 'INBOX',
        pollIntervalSeconds: 60,
      },
      retentionDays: 30,        // null to keep forever
    },
  },

  websocket: {
    enabled: true,              // Default: true. Set false to disable WebSocket support.
    path: '/ws',                // Default: '/ws'. WebSocket endpoint path.
    pingIntervalMs: 30_000,     // Default: 30s. How often to ping connected clients.
    driver: 'memory',           // Default: 'memory'. 'redis' for cluster-safe broadcasts.
  },

  mcp: {
    enabled: true,              // Default: true. Set false to disable MCP debug tools in dev.
    secret: 'my-debug-token',   // Optional. Requires Bearer token or ?token= for debug API access.
    logBufferSize: 2000,        // Default: 2000. Max log entries in memory.
  },

  logger: {
    level: 'info',              // 'debug', 'info', 'warn', 'error'
  },

  redis: {
    url: 'redis://localhost:6379', // Shared Redis connection
    keyPrefix: 'arcway:',          // Default: 'arcway:'. Prefix for all Redis keys.
  },

  plugins: {
    enabled: false,             // Default: false. Turn on the native plugin loader.
    dirs: ['plugins'],          // Default: ['plugins']. Directories scanned for plugins.
    enablements: {              // Optional. Per-plugin on/off; overrides the plugin's own `enabled` flag.
      'web-search': true,
    },
  },

  vault: {
    // Root master secret (v1:<base64-32-bytes>). Required whenever the vault is enabled.
    // Generate with `npx arcway vault generate-key`. Wire it to any env var you choose.
    masterSecret: process.env.ARCWAY_MASTER_SECRET,
    // Or pass an array as a rotation keyring (ordered oldest → newest, last = active):
    // masterSecret: [process.env.OLD_MASTER, process.env.NEW_MASTER],
  },
};

pages: {
  fonts: [
    { family: 'Inter', src: 'fonts/inter', preload: [400, 600, 700] },
    { family: 'Fira Code', src: 'fonts/fira-code' },
  ],
},

# .env
DATABASE_URL=postgres://localhost:5432/myapp
ARCWAY_MASTER_SECRET=v1:…
REDIS_URL=redis://localhost:6379

// arcway.config.js -- process.env is populated before this runs
export default {
  database: {
    client: 'postgres',
    connection: process.env.DATABASE_URL,
  },
  vault: {
    masterSecret: process.env.ARCWAY_MASTER_SECRET,
  },
};