On this page
Sigil Configuration Guide
Docs home · Permissions · Appearance · Advanced · Field reference · 简体中文
Start here for the normal configuration path. Provider credentials and service-specific settings belong in Providers.
Choose The Right Page
| Goal | Page |
|---|---|
| Find config, choose a workspace, or set storage | This guide |
| Change approvals, network, external paths, or sandboxing | Permissions and sandbox |
| Change the theme, syntax colors, or info rail | Appearance |
| Configure tasks, checks, memory, agents, context, terminal, plugins, or MCP | Advanced configuration |
| Look up an exact field or default | Configuration Reference |
Resolution Order
Sigil loads --config <path> when supplied; otherwise it uses the per-user config:
~/.sigil/sigil.toml
Quick Setup writes the user config. A workspace sigil.toml is not loaded automatically; pass it explicitly when you intend to use it.
Minimal Path
Open the repository and run sigil. Quick Setup handles the workspace, provider, model, and authentication; saving also explicitly trusts the launch directory. Provider is the first Quick Setup decision. In /config, Enter on Connection opens the explicit saved-connection/provider-template chooser, while A starts adding a provider. A minimal hand-written base is:
config_version = 2
[workspace]
root = "."
[agent]
connection = "my-connection"
model = "my-model"
tool_timeout_secs = 30
[appearance]
info_rail = true
theme = "sigil_dark"
Add the matching [connections.my-connection] block from the chosen provider page. Copyable starting points are under docs/examples/config. Sigil accepts only the current schema; an older config must be replaced with a current template. In the TUI, selecting a connection or model in /config and saving keeps the current conversation open, switches its next turn to that route, and records the same route as the default for future sessions. If validation or publishing fails, the panel stays open with the draft intact, shows a persistent save failed status, and focuses the related field when Sigil can identify one. Editing again clears the stale error so the next save attempt is unambiguous.
A connection ID identifies the saved route but is not itself a trust grant. Correcting only the path on the same endpoint origin can rebind a resumed session automatically. Changing origin, provider protocol, or an account/tenant boundary requires an exact user confirmation or route replacement before any history is sent.
Workspace
workspace.root = "." follows the directory where sigil starts. File tools stay within that workspace unless you deliberately enable a narrow external-directory rule. Review Permissions and sandbox before doing so.
Shell choice and terminal behavior are covered by Terminal compatibility; prefer file tools for portable reads and edits.
Storage And Session Paths
[storage].state_root stores per-user sessions and artifacts; [storage].cache_root stores rebuildable data. SIGIL_STATE_HOME and SIGIL_CACHE_HOME override those roots. [session].log_dir changes only the session-log location for the current workspace.
Retention limits are applied only through an explicit preview and confirmation under /config → Storage. Normal startup, resume, runs, and sigil serve do not delete sessions automatically. See Manage saved sessions.
Task Rollout And Defaults
The current schema defaults to routing_policy = "auto" and multi_agent_mode = "explicit_request_only". Ordinary input therefore runs the automatic Chat / PlanReview / Task route decision on the review-first baseline; explicit manual keeps chat-first behavior. Quick Setup saves auto + proactive only when the installed binary is accompanied by a qualified rollout manifest and the selected provider, model, official endpoint family, task config, and build all match its exact route.
Sigil never rewrites an incompatible config. A missing, malformed, stale, or non-matching manifest stays on the review-first baseline. Use sigil doctor to inspect the effective release qualification, including whether direct task execution is qualified, on the review-first fallback, or unavailable. Setting routing_policy = "manual" is the coarse rollout rollback; it does not delete durable Task or agent history.
Use Doctor When Setup Looks Wrong
Run sigil doctor, or /doctor in the TUI. It checks configuration, workspace, session location, provider credential source, MCP, code intelligence, and terminal support without printing secret values. With an alternate config, use the same --config <path> argument.
Continue with Permissions, Appearance, Advanced configuration, or the Field reference for the setting you need.