version: 1
kind: unidesk-cli
output:
  maxStdoutBytes: 10240
  dumpDir: /tmp/unidesk-cli-output
  includePreview: false
  warning: "CLI stdout exceeded YAML-configured limit; full output was dumped to /tmp for one-off drill-down only. This is a CLI usability defect: improve the command itself to print concise tables/summaries and id-specific progressive disclosure instead of repeatedly depending on dump extraction."
github:
  prMerge:
    unknownRetry:
      maxAttempts: 5
      initialDelayMs: 1000
      maxDelayMs: 16000
      factor: 2
gc:
  targetUsePercent: null
  fileLogs:
    enabled: true
    keepDays: 7
    maxBytes: 50MiB
    tailBytes: 20MiB
  dockerLogs:
    enabled: true
    maxBytes: 50MiB
  journal:
    enabled: true
    targetBytes: 512MiB
  buildCache:
    enabled: true
    until: 24h
    all: false
  tmp:
    enabled: true
    minAgeHours: 24
    includeStale: false
  browserCache:
    enabled: false
  toolCaches:
    enabled: false
  vscode:
    staleServers:
      enabled: false
      keepServers: 2
    staleExtensions:
      enabled: false
      keepVersions: 1
    cachedVsix:
      enabled: false
      keepDays: 7
  baiduStaging:
    enabled: false
    keepDays: 10
  stateArtifacts:
    enabled: false
    keepDays: 14
    fileRoots:
      e2e: .state/e2e
      validation: .state/validation
      jobs: .state/jobs
      codex-queue-output-archive: .state/codex-queue/output-archive
    dirRoots:
      deploy-exports: .state/deploy/exports
      deploy-resolve: .state/deploy/resolve
  stateStaleScratch:
    enabled: false
    keepHours: 24
    fileRoots:
      playwright-cli-screenshots: .state/playwright-cli/screenshots
      playwright-cli-sessions: .state/playwright-cli/sessions
      perf: .state/perf
      tmp: .state/tmp
      web-observe: .state/web-observe
    dirRoots:
      hwlab-cd: .state/hwlab-cd
      codex-queue-stats-verify: .state/codex-queue-stats-verify
      codex-queue-perf: .state/codex-queue-perf
      tmp: .state/tmp
  legacyDockerImages:
    enabled: true
    minAgeHours: 12
    keepPerRepository: 2
    repositories:
      - 127.0.0.1:5000/hwlab/web-probe-sentinel-${nodeLower}
  legacyDockerRegistryVolumes:
    enabled: true
    requireK8sRegistryReady: true
  codexSessions:
    enabled: false
    keepHours: 72
    root: /root/.codex/sessions
  mergedWorktrees:
    enabled: false
    keepHours: 24
    mainRoot: /root/unidesk
    root: /root/unidesk/.worktree
    baseRef: origin/master
    scanBudgetMs: 20000
    cherryCheckTimeoutMs: 1000
    estimateSizeInPlan: false
  vpnDiagnosticLogs:
    enabled: false
    keepHours: 24
  databaseSummary:
    enabled: true
  output:
    limit: 50
    resultLimit: 50
    full: false
  remote:
    targets:
      JD01:
        memoryPressure:
          processPatterns:
            - chrome
            - chromium
            - web-probe observe
            - playwright
          observeStateRoots:
            - /root/workspace/hwlab-v03/.state/web-observe
            - /root/workspace/hwlab-v03/.state/playwright-cli
          staleRunMaxAgeHours: 6
        pvcAttribution:
          namespaces:
            - agentrun-ci
            - agentrun-v02
            - hwlab-ci
            - hwlab-dev
            - hwlab-prod
            - hwlab-v03
          candidateNamespaces:
            - agentrun-ci
            - hwlab-ci
          hwlabNode: JD01
          hwlabLane: v03
          agentrunNode: JD01
          agentrunLane: jd01-v02
          limit: 80
        containerdImageCache:
          enabled: true
          runtimeEndpoint: unix:///run/k3s/containerd/containerd.sock
          namespace: k8s.io
          ciNamespaces:
            - hwlab-ci
            - agentrun-ci
        hostContainerdCache:
          enabled: true
          root: /var/lib/containerd
          address: /run/containerd/containerd.sock
          namespaces:
            - default
          orphanCleanup:
            enabled: true
            overlaySnapshotsRoot: /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots
            contentBlobRoot: /var/lib/containerd/io.containerd.content.v1.content/blobs/sha256
        localPathStorage:
          enabled: true
          root: /var/lib/rancher/k3s/storage
          orphanDirPrefixes:
            - pvc-
          orphanMinAgeMinutes: 0
        policyTimer:
          enabled: true
          name: unidesk-jd01-low-risk-gc
          onCalendar: daily
          randomizedDelaySec: 20min
          journalTargetBytes: 256MiB
          tmpMinAgeHours: 24
          includeAptCache: true
          includeToolCaches: false
  policyTimer:
    journald:
      systemMaxUse: 512MiB
      runtimeMaxUse: 128MiB
      maxRetentionSec: 7day
    daily:
      buildCacheUntil: 24h
      vpnDiagnosticLogs:
        enabled: true
        keepHours: 24
      stateArtifacts:
        enabled: true
        keepDays: 14
      vscodeCachedVsix:
        enabled: true
        keepDays: 7
      limit: 5000
      resultLimit: 25