.env.example

# Copy to .env: loaded automatically (process env wins over .env). Read from the repo
# root only: an installed package resolves it next to itself, so export the vars instead.

# --- default / OpenAI-compatible provider ---
OPENAI_MODEL=gpt-4.1-mini
OPENAI_API_KEY=sk-...
# Unset => SDK default (api.openai.com). Custom endpoints may be keyless:
OPENAI_BASE_URL=https://api.openai.com/v1
# Set false for Chat-Completions-only servers (vLLM, Ollama, ...):
# OPENAI_USE_RESPONSES=false

# --- prefixed model providers (set only those your Agent(model=...) uses) ---
# ANTHROPIC_API_KEY=sk-ant-...
# GEMINI_API_KEY=...
# OLLAMA_BASE_URL=http://localhost:11434/v1
# OPENROUTER_API_KEY=sk-or-...

# --- runner ---
# AGENTDECK_RUNNER_MAX_TURNS=30
# AGENTDECK_RUNNER_TEMPERATURE=1.0
# AGENTDECK_RUNNER_MAX_TOKENS=
# Some OpenAI-compatible endpoints reject a handoff's assistant-terminated request. Set this
# to append a synthetic user turn after the collapsed history instead:
# AGENTDECK_RUNNER_HANDOFF_ENDS_ON_USER_TURN=false
# Content of that synthetic user turn, override for a deployment whose conversations aren't
# English:
# AGENTDECK_RUNNER_HANDOFF_CLOSING_TURN=Please continue.

# --- runtime (one turn per session) ---
# How long an open run may write nothing before it stops holding its session, so a turn can
# take over after a process was killed mid-run. Keep it comfortably longer than the quietest
# stretch of a healthy turn (a slow tool call, a human answering an approval): below that, a
# working turn looks abandoned and the next turn takes its session, which is the one-turn-per-
# session guarantee lost rather than tuned. Clock skew between workers eats into it too.
# AGENTDECK_RUNTIME_STALE_RUN_AFTER_SECONDS=3600

# --- conversation sessions (chat memory) ---
# unset -> in-process SQLite fallback (dev only, lost on exit)
# AGENTDECK_SESSION=redis://localhost:6379/0
# AGENTDECK_SESSION_REDIS_TTL=

# --- observability (optional, needs the [observability] extra) ---
# AGENTDECK_LANGFUSE_PUBLIC_KEY=
# AGENTDECK_LANGFUSE_SECRET_KEY=
# AGENTDECK_LANGFUSE_BASE_URL=http://localhost:3000

# --- MCP servers (optional) ---
# Named MCP servers live in a `.mcp.json` file at the project root, not here:
# {"mcpServers": {"docs": {"type": "http", "url": "http://..."}}}

# --- event log / control signals (optional) ---
# The scheme names the backend. memory:// (default) never persists; sqlite:// survives a
# restart; redis:// and postgresql:// (needs the [postgres] extra) are the two
# several workers can share.
# AGENTDECK_EVENTS=sqlite:///var/lib/agentdeck/events.db
# AGENTDECK_CONTROL=sqlite:///var/lib/agentdeck/control.db