.env.example

# AI Dev Control Plane -- Environment Configuration
# =================================================
# Copy this file to .env and fill in your actual values:
#   cp .env.example .env
#
# All variables have sensible dev defaults. Only override what you need.

# =============================================================================
# DATABASE
# =============================================================================

# SQLite (default for local development)
DATABASE_URL=file:./data/dev.db?_journal_mode=WAL

# PostgreSQL (for cloud-dev or production)
# DATABASE_URL=postgres://user:pass@localhost:5432/aicp?sslmode=disable
# DATABASE_URL=postgres://user:pass@host.neon.tech/db?sslmode=require

# PostgreSQL DSN used by packages/db migration tests (optional)
# POSTGRES_TEST_DATABASE_URL=postgres://user:pass@localhost:5432/aicp_test?sslmode=disable

# =============================================================================
# AUTHENTICATION
# =============================================================================

# JWT -- minimum 32 characters for production
JWT_SECRET=change-me-in-production-min-32-chars-long

# Comma-separated list of origins allowed by CORS (defaults to http://localhost:3000)
ALLOWED_ORIGINS=http://localhost:3000

# Comma-separated key-id:base64-32-byte-key specs for AES-256-GCM encrypted
# secret storage. First key is used for new writes; keep older keys for decrypting
# previous versions during key rotation.
# Generate: openssl rand -base64 32
# Development placeholder only; replace before storing real secrets.
SECRET_ENCRYPTION_KEYS=primary:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=

# GitHub OAuth App credentials
# Create at: https://github.com/settings/developers
GITHUB_CLIENT_ID=your-github-app-client-id
GITHUB_CLIENT_SECRET=your-github-app-secret
# Set to false for local HTTP development; true (default) in production over HTTPS.
OAUTH_COOKIE_SECURE=true
# Token used by PR factory for non-interactive branch push and GitHub PR creation.
# Use a GitHub App installation token or a fine-scoped token with repo push + PR access.
GITHUB_TOKEN=your-github-token

# GitHub App credentials (for repo webhooks & API access)
# Create at: https://github.com/settings/apps
GITHUB_APP_ID=your-github-app-id
GITHUB_APP_PRIVATE_KEY="-----BEGIN RSA PRIVATE KEY-----\n...\n-----END RSA PRIVATE KEY-----"
GITHUB_APP_WEBHOOK_SECRET=your-webhook-secret

# =============================================================================
# SERVICES
# =============================================================================

# NATS JetStream
NATS_URL=nats://localhost:4222
NATS_STREAM_PREFIX=AICP

# Temporal (optional -- start with: docker-compose --profile temporal up -d)
TEMPORAL_HOST=localhost:7233
TEMPORAL_NAMESPACE=default

# AgentVault integration (optional -- logs task lifecycle events to a local inbox)
AGENTVAULT_URL=
AGENTVAULT_TOKEN=
AGENTVAULT_PROJECT=dev-plane

# =============================================================================
# PORTS
# =============================================================================

# API server
PORT=8080

# Next.js frontend
WEB_PORT=3000

# Runner service
RUNNER_PORT=8082
# When set, the worker and API route workspace runtime calls to a remote runner.
# Leave empty to use the in-process runtime provider selected by WORKSPACE_RUNTIME.
RUNNER_URL=http://localhost:8082
RUNNER_AUTH_TOKEN=change-me-in-production

# Worker health HTTP server (used by container health checks)
WORKER_HEALTH_PORT=8081

# =============================================================================
# AI PROVIDERS (via Bifrost gateway or direct)
# =============================================================================

# Bifrost AI Gateway (recommended -- unified interface)
BIFROST_URL=http://localhost:8083
BIFROST_API_KEY=

# Direct provider keys (fallback)
OPENAI_API_KEY=sk-...
OPENAI_BASE_URL=https://api.openai.com/v1

ANTHROPIC_API_KEY=sk-ant-...
ANTHROPIC_BASE_URL=https://api.anthropic.com/v1

GEMINI_API_KEY=
GEMINI_BASE_URL=https://generativelanguage.googleapis.com/v1beta

GROQ_API_KEY=
GROQ_BASE_URL=https://api.groq.com/openai/v1

FIREWORKS_API_KEY=
FIREWORKS_BASE_URL=https://api.fireworks.ai/inference/v1

# Default model for agent runs
DEFAULT_MODEL=gpt-4o
DEFAULT_PROVIDER=openai

# =============================================================================
# RUNTIME
# =============================================================================

# Workspace directory for sandboxed runs
WORKSPACE_BASE_DIR=./data/workspaces

# Optional tmpfs size limit for the workspace base directory (e.g. 4g, 50%).
# Defaults to half of RAM when unset.
# WORKSPACE_TMPFS_SIZE=

# Set to 1 or true to skip tmpfs mounting and store workspace data on disk.
# WORKSPACE_TMPFS_DISABLE=

# Docker socket path (for Linux)
DOCKER_HOST=unix:///var/run/docker.sock

# For macOS Docker Desktop:
# DOCKER_HOST=unix:///Users/$USER/.docker/run/docker.sock

# Runtime provider: docker | local | remote (via RUNNER_URL)
WORKSPACE_RUNTIME=docker

# Container registry for runner images
RUNNER_REGISTRY=localhost:5000

# =============================================================================
# FRONTEND
# =============================================================================

# API URL (used by frontend to reach backend)
NEXT_PUBLIC_API_URL=http://localhost:8080

# GitHub OAuth client ID (public)
NEXT_PUBLIC_GITHUB_CLIENT_ID=your-github-app-client-id

# =============================================================================
# LOGGING
# =============================================================================

# Log level: debug | info | warn | error
LOG_LEVEL=info

# Log format: json | text
LOG_FORMAT=text

# =============================================================================
# FEATURE FLAGS
# =============================================================================

# Enable Temporal workflow engine
ENABLE_TEMPORAL=false

# Enable sandboxed runtime (Phase 2)
ENABLE_SANDBOXED_RUNTIME=false

# Require approval for high-risk tasks
REQUIRE_RISK_APPROVAL=true

# Max concurrent agent runs per organization
MAX_CONCURRENT_RUNS=5