Alibaba Cloud Linux 4 Agentic Edition (ANOLISA) manages settings for authentication, models, and tools through a hierarchical configuration system that supports multi-level overrides with project-level and user-level configuration files. This topic describes how to set up various authentication methods, switch models, and understand configuration file precedence and core configuration items.
Authentication methods
ANOLISA requires authentication to connect to an LLM service on its first run. You can use the /auth command to switch the authentication method later.
The following authentication methods are supported.
Alibaba Cloud authentication
Select "Alibaba Cloud authentication" in the interactive interface to receive a free usage quota.
In an ECS environment, the terminal displays an authorization URL and a QR code. Open the URL in a browser or scan the QR code with your phone to log in to your Alibaba Cloud account and grant authorization.
In non-ECS environments, use Alibaba Cloud AK/SK authentication.
Obtain an AK/SK:
Log in to the Alibaba Cloud console.
Create a key on the AccessKey management page.
Alibaba Cloud authentication provides a free usage quota and is suitable for personal development and testing.
Note: Alibaba Cloud authentication supports only Qwen-series text models and does not support multimodal models.
Custom provider
Select "Custom Provider" in the interactive interface and have your API key ready. Supported OpenAI-compatible endpoints include:
Pre-filled base URL: Model services from various cloud providers, such as DashScope, DeepSeek, GLM, Kimi, and Minmax.
Custom base URL: Locally deployed models (such as vLLM and Ollama) and third-party API proxy services.

Authentication management
Actions | Command |
View current authentication status |
|
Switch authentication method |
|
Log out |
|
Troubleshooting: If authentication fails, verify that your API key is correct (note any leading or trailing spaces) and that your network can reach the API endpoint. You can switch to a bash shell using/bashand runco --debugto view detailed error information. Agentic OS supports configuring multiple authentication methods simultaneously. It selects one based on priority, but you can also switch manually using the/authcommand.
Model configuration
Switch models
Use the /model command to switch the model for the current session:
> /model
# A list of available models appears. Select your target model.Configuration files
Interactive configuration
Run the /setting command to open the interactive interface, where you can modify most settings.
Configuration hierarchy and precedence
The Agentic OS system shell, cosh, uses JSON-formatted configuration files to manage settings. Settings are applied according to the following precedence, from highest to lowest:
command-line arguments > environment variables > project settings > user settings > default valuesFile locations
Type | Path | Description |
User settings |
| Global configuration for the current user. |
Project settings |
| Project-level configuration that can be shared with your team. |
Core parameters
General settings
Parameter | Type | Default | Description |
| string | — | The editor to use for opening files. |
| boolean | false | Enables Vim mode key bindings. |
| boolean | true | Automatically checks for updates. |
| boolean | false | Enables session checkpoints. |
| string | "utf-8" | The default file encoding. |
Model settings
Parameter | Type | Default | Description |
| string | — | The name of the model to use. |
| number | -1 | The maximum number of turns in a session. |
| number | 0.7 | The threshold for context compression. |
Tool settings
Parameter | Type | Default | Description |
| string | "default" | The approval mode for tool execution. |
| boolean/string | — | The sandbox environment. |
| array | — | A list of allowed tools (allowlist). |
| array | — | A list of tools to exclude. |
| array | — | Tools that do not require confirmation. |
Context settings
Parameter | Type | Default | Description |
| string/array | "COPILOT.md" | The context file name. |
| array | — | Additional directories to include. |
| boolean | true | Respects rules in .gitignore. |
Security settings
Parameter | Type | Description |
| boolean | Enables the folder trust mechanism. |
| string | The current authentication method. |
| string | The enforced authentication method. |