onevibe/.env.example at main · ONE-Computer/onevibe · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
# Mandatory model boundary: every model request routes through LiteLLM.
ONEVIBE_LITELLM_URL=http://127.0.0.1:4100
ONEVIBE_LITELLM_API_KEY=
ONEVIBE_LITELLM_MODEL=claude-sonnet-5

# Optional operator-selected default; unavailable/incompatible values fail over safely.
ONEVIBE_DEFAULT_PROVIDER=

# Optional model alias for the Codex-compatible LiteLLM route.
ONEVIBE_CODEX_MODEL=

# Optional AgentCore remote runtime. It is exposed only with this explicit route declaration.
AGENTCORE_RUNTIME_URL=
AGENTCORE_RUNTIME_BEARER_TOKEN=
ONEVIBE_AGENTCORE_LITELLM_ROUTED=false

# Optional governed ONEComputer runtime.
ONECOMPUTER_API_URL=
ONECOMPUTER_SERVICE_TOKEN=
ONECOMPUTER_PROJECT_ID=

# Optional remote ONEVibe runtime.
ONEVIBE_RUNTIME_URL=
ONEVIBE_RUNTIME_BEARER_TOKEN=

# Optional local Kimi Code CLI runtime (REST polling, no SSE). KIMI_SESSION_ID
# reuses an existing CLI session; leave unset to create one per task run.
KIMI_SERVER_URL=
# KIMI_SESSION_ID=

# API configuration.
ONEVIBE_API_PORT=4311
ONEVIBE_API_HOST=127.0.0.1
# Local SQLite persistence root. The Docker image overrides this to /var/lib/onevibe.
ONEVIBE_DATA_DIR=.onevibe
# SQLite remains the explicit local default. Set ONEVIBE_PERSISTENCE_DRIVER=postgres
# together with DATABASE_URL only after applying the reviewed Drizzle migrations.
ONEVIBE_PERSISTENCE_DRIVER=sqlite
# ONEVIBE_THEME_TENANT_ID=acme
# ONEVIBE_THEME_TENANT_ORG_MAP={"acme":"org_example"}

# Optional GitHub-backed marketplace catalog. The default is the public
# ONEVibe catalog in this repository; every installed SKILL.md is SHA-256
# verified before it can be selected for a task.
# ONEVIBE_SKILL_CATALOG_URL=https://raw.githubusercontent.com/ONE-Computer/onevibe/main/skills/catalog.json

# Optional, fail-closed MCP optimization. When enabled for a non-chat Claude
# task, ONEVibe exposes only search_capabilities + execute_capability and keeps
# configured MCP processes behind the server-owned stdio facade. MCP env values
# are never accepted from browser input; production use still needs a secret
# broker, health checks, and provider-backed acceptance.
# ONEVIBE_MCP_FACADE_ENABLED=false

# Container publishing (docker-compose.yml and docker-compose.prod.yml).
ONEVIBE_PUBLISH_PORT=4311

# Auth foundation is feature-gated and remains disabled for local demo mode.
# Enabling it requires a real OTP delivery webhook; the data plane still fails closed until owner scoping lands.
# ONEVIBE_AUTH_ENABLED=false
# BETTER_AUTH_SECRET=replace-with-a-random-32-byte-secret
# ONEVIBE_AUTH_OTP_WEBHOOK_URL=https://mailer.example.internal/onevibe/otp
# BETTER_AUTH_URL=http://localhost:4311
# ONEVIBE_TRUSTED_ORIGINS=http://localhost:5173
# Future cloud promotion contract:
# DATABASE_URL=postgres://onevibe:change-me@localhost:5432/onevibe

# Docker production stack (docker-compose.prod.yml). POSTGRES_PASSWORD guards the
# bundled Postgres service; keep the password embedded in DATABASE_URL in sync
# with it. The DATABASE_URL host is the compose service name, reachable only on
# the internal stack network. Apply the reviewed Drizzle ledger before traffic;
# the app never migrates implicitly.
POSTGRES_PASSWORD=change-me
DATABASE_URL=postgres://onevibe:change-me@postgres:5432/onevibe

# Optional ONEComputer governance boundary. When ONECOMPUTER_URL is unset,
# ONEVibe runs standalone (local adapters, no connector brokerage or governance
# events).
ONECOMPUTER_URL=
ONECOMPUTER_HMAC_SECRET=