headshot/.env.example at main · worldofhacks/headshot · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
# AgentForge local environment template
#
# Copy to .env.local and use synthetic/local values only. Never commit .env.local.
# Railway environments use sealed, service-scoped variables. Do not copy production
# credentials into local files, Web, the browser bundle, documentation, or logs.

# Core runtime
AGENTFORGE_ENVIRONMENT=local
DATABASE_URL=postgresql://agentforge:local_dev_only@localhost:5432/agentforge
PORT=8000
AGENTFORGE_CONSOLE_DIR=console/dist
AGENTFORGE_MAX_REQUEST_BYTES=1048576

# Optional package/resource overrides for local development
AGENTFORGE_CONTRACTS_DIR=
AGENTFORGE_EVALS_DIR=
AGENTFORGE_REVIEWED_TOOL_BUNDLES_DIR=
AGENTFORGE_MANIFEST_DIR=
ALEMBIC_CONFIG=alembic.ini

# Clerk human identity
#
# VITE_* is public and enters the browser bundle. No secret may use a VITE_ name.
# The backend verifies session JWTs networklessly with the public PEM key.
VITE_CLERK_PUBLISHABLE_KEY=
CLERK_PUBLISHABLE_KEY=
CLERK_JWT_KEY=
CLERK_AUTHORIZED_PARTIES=http://localhost:8000
CLERK_REQUIRED_ORG_ID=
CLERK_FRONTEND_API_ORIGIN=

# Staging-only isolation guards. Leave empty locally and in production.
CLERK_PRODUCTION_ORG_ID=
CLERK_PRODUCTION_AUTHORIZED_PARTIES=

# CLERK_SECRET_KEY is intentionally absent. Request authentication does not use it.

# Trusted target catalog and workload
#
# The catalog is secret-free reviewed JSON. The binding maps opaque secretref URIs to
# environment-variable NAMES. The corresponding values exist only on the private Runner.
AGENTFORGE_LIVE_TARGET_CATALOG_JSON=
AGENTFORGE_CREDENTIAL_BINDINGS_JSON={}
AGENTFORGE_SESSION_LEASES_JSON={}

# Default local workload is selected by code when these are empty. Live deployments pin
# both the reviewed workload ID and expected digest.
AGENTFORGE_WORKLOAD_ID=
AGENTFORGE_WORKLOAD_SHA256=

# Private Runner/Scheduler
AGENTFORGE_RUNNER_WORKER_ID=
AGENTFORGE_JUDGE_CALIBRATION_PATH=
AGENTFORGE_SCHEDULER_POLL_SECONDS=15

# Provider credentials
#
# Hosted role configuration (models, upstreams, prompts, prices, call/token/cost/retry
# limits) is staged as an append-only PostgreSQL configuration set. It is NOT selected by
# ambient model-name environment variables. This example value may be referenced only by
# AGENTFORGE_CREDENTIAL_BINDINGS_JSON on Runner.
OPENROUTER_API_KEY=

# Langfuse — private Runner only
#
# PostgreSQL remains authoritative. SDK flush is not delivery proof; exact remote
# query-back marks rows exported.
LANGFUSE_PUBLIC_KEY=
LANGFUSE_SECRET_KEY=
LANGFUSE_BASE_URL=https://us.cloud.langfuse.com
LANGFUSE_TRACING_ENVIRONMENT=local

# Contracted target-call accounting used for caps/read models. This is not provider billing.
HEADSHOT_PER_CALL_USD=0.01

# Synthetic target preflight helpers used by local/operational scripts
HEADSHOT_SYNTHETIC_ONLY=true
HEADSHOT_CANARY_VALUE=
HEADSHOT_TARGET_AUTH_MODE=none

# Optional governed active-scan boundary. Disabled unless explicitly authorized.
AGENTFORGE_ACTIVE_SCAN_ENABLED=false

# Legacy/standalone Red Team provider adapter settings
#
# Governed campaigns do not use these to select the four-role hosted configuration.
# Keep them only for the isolated provider adapter and preflight tooling.
HEADSHOT_RED_TEAM_PROVIDER=openrouter
HEADSHOT_RED_TEAM_MODEL=qwen/qwen3.5-397b-a17b
TOGETHER_API_KEY=