fastpace reads from four configuration layers. A later layer overrides an earlier one only for the keys it sets — everything else falls through.
on the command lineHighest precedence — overrides everything below for this single invocation.
--port 7778--no-openprocess envPer-shell or per-CI overrides. Common for setting a custom identity directory.
FASTPACE_PORTFASTPACE_IDENTITY_DIRFASTPACE_NO_UPDATE_CHECKfastpace/config.jsonLives in your repo, committed to git. Picked up by every fastpace command run inside this repo.
{ "approved_runtimes": [...] }~/.fastpace/config.jsonPer-developer baseline. Everything else falls through to these defaults.
{ "port": 7777 }Whatever isn't set here falls through to defaults baked into the binary.
| Key | Default | What it does |
|---|---|---|
port | 7777 | Local UI port |
approved_runtimes | ["claude-opus-4.7", …] | Allow-list of model aliases — calls to anything else are blocked |
pii_pattern_override | null | Extend the prompt-redactor with org-specific regex patterns |
pii_pattern_disable | [] | Turn off bundled redactor patterns by name |
integrations | {} | Jira / Linear / Slack credentials (per-repo) |
webhooks | [] | Outbound webhook receivers for fleet events |
The cryptographic identity (F0.1) lives separately at ~/.fastpace/identity.{json,key} — override with FASTPACE_IDENTITY_DIR. Losing config is annoying; losing the identity key invalidates every signed manifest you've ever shipped.
Run fastpace ui and jump to Settings · Config — every effective value is shown alongside the layer it came from, so you can debug overrides without spelunking through four files.
