Function loadConfig

apps/host-selfhost/src/config.ts:179–201

()

};

export const loadConfig = (): SelfHostConfig => {
  const port = Number.parseInt(process.env.PORT ?? "4788", 10);
  const dataDir = resolveDataDir();
  const webBaseUrl = resolveWebBaseUrl(port);
  return {
    host: process.env.EXECUTOR_HOST ?? "127.0.0.1",
    port,
    dbPath: process.env.EXECUTOR_DB_PATH ?? join(dataDir, "data.db"),
    webBaseUrl,
    trustedOrigins: resolveTrustedOrigins(webBaseUrl),
    allowLocalNetwork: process.env.EXECUTOR_ALLOW_LOCAL_NETWORK === "true",
    authSecret: resolveAuthSecret(),
    bootstrapAdminEmail: process.env.EXECUTOR_BOOTSTRAP_ADMIN_EMAIL,
    bootstrapAdminPassword: process.env.EXECUTOR_BOOTSTRAP_ADMIN_PASSWORD,
    bootstrapAdminName: process.env.EXECUTOR_BOOTSTRAP_ADMIN_NAME ?? "Admin",
    organizationName: process.env.EXECUTOR_ORG_NAME ?? "Default",
    orgSlug: resolveOrgSlug(),
    sandboxTimeoutMs: resolveSandboxTimeoutMs(),
    sso: resolveSso(),
    mcpSessionIdleTtlMs: resolveMcpSessionIdleTtlMs(),
    toolsSyncTtlMs: resolveToolsSyncTtlMs(),
  };
};

// Well-known discovery documents for providers an operator can name without
// hunting down the URL. Anything else (Okta, Entra, Auth0, …) has a