.env.example

# This example is for Dext's user-owned ~/.dext/.env (or $DEXT_HOME/.env).
# Dext never auto-loads a project .env or searches parent directories.

# Dext provider selection (defaults to the provider catalog's active provider; built-in default is glm)
# DEXT_PROVIDER=glm
# DEXT_MODEL=glm-5.2[1m]

# Local llama.cpp / Qwen (OpenAI-compatible, no API key)
# Start one server first, then select its model alias.
# Local providers use frugal context automatically unless DEXT_CONTEXT_MODE is set.
# DEXT_PROVIDER=local
# DEXT_MODEL=qwen3.6-35b-a3b-mtp-ud-q5_k_m
# DEXT_BASE_URL=http://127.0.0.1:8080
# DEXT_THINKING_EFFORT=off
# DEXT_CONTEXT_MODE=frugal
# DEXT_APPROVAL=always  # default; set ask for interactive prompts
# DEXT_TRUST=1  # explicit alias for DEXT_APPROVAL=always
# DEXT_SANDBOX_PROFILE=danger-full-access  # default ambient authority
# DEXT_SANDBOX_PROFILE=workspace-write  # optional native confinement

# Optional hard overrides (usually managed via `dext auth ...`). Dext uses these
# for provider HTTP calls but removes credential-shaped variables from agent-run
# subprocesses unless DEXT_INHERIT_TOOL_CREDENTIALS=1 is explicitly set for
# a trusted model-invoked tool. Hooks and Dext-owned subprocesses always scrub them.
# DEXT_BASE_URL=https://api.z.ai/api/anthropic
# DEXT_API_KEY=...

# Provider-specific env fallbacks
# ZAI_API_KEY=...
# ANTHROPIC_API_KEY=...
# OPENAI_API_KEY=...
# KIMI_API_KEY=...  # Kimi Code plan key; MOONSHOT_API_KEY is separate
# DEEPSEEK_API_KEY=...
# CHATGPT_ACCESS_TOKEN=...

# Privacy redaction is enabled by default; user-readable files remain readable.
# DEXT_PRIVACY=strict  # additionally block sensitive-looking native read paths
# DEXT_PRIVACY=0       # disable redaction for intentionally raw local output
# High-trust opt-in: pass *_API_KEY, *_TOKEN, *_PASSWORD, and other known
# credential variables through to model-invoked bash/external tools only.
# Hooks, diagnostics, evals, checkpoints, and other Dext-owned children still scrub them.
# DEXT_INHERIT_TOOL_CREDENTIALS=1

# Built-in http tool only. These trusted-network opt-ins are independent and
# disabled by default; they do not affect provider transport or bash clients.
# The built-in client connects directly and ignores proxy environment variables
# so destination DNS/IP checks cannot be delegated to a proxy.
# DEXT_HTTP_ALLOW_LOOPBACK=1
# DEXT_HTTP_ALLOW_PRIVATE=1
# DEXT_HTTP_ALLOW_LINK_LOCAL=1

DEXT_EXTERNAL_TIMEOUT_SECS=60
DEXT_BASH_TIMEOUT_SECS=60
# Optional Bash executable override. On Windows, Dext skips WSL app aliases and
# selects a real bash.exe from PATH (for example Git for Windows).
# DEXT_BASH_PATH=/path/to/bash
DEXT_HOOK_TIMEOUT_SECS=60

# Optional: override detected model context window (tokens) and compaction threshold (chars)
# Local llama.cpp is probed automatically. Set this only as a manual override.
# DEXT_CONTEXT_WINDOW_TOKENS=65536
# DEXT_MAX_HISTORY_CHARS=280000

# Prompt caching (Anthropic-style providers)
# auto (default): cache breakpoints on built-in Anthropic models only.
# on: also send breakpoints to other Anthropic-compatible providers (e.g. test
#     whether ZAI GLM honors them); off: never send breakpoints.
# DEXT_PROMPT_CACHE=auto
# Extended cache TTL; keeps the prefix cache warm across >5min pauses between
# turns (higher one-time write cost, much cheaper long sessions).
# DEXT_PROMPT_CACHE_TTL=1h

# Optional cheaper model for the one-shot compaction summary (same provider).
# DEXT_COMPACT_MODEL=<lower-cost-model-id>

# Optional shelf discovery
# DEXT_SHELVES_DIR=~/.dext/shelves:/path/to/shared-shelves

# Optional: external auth file for `dext auth login <provider> import`
# DEXT_EXTERNAL_AUTH_FILE=~/.dext/external-auth.json