.env.example

APP_ENV=development
# SQLite is for development and isolated integration only. A physical control
# plane must use an Alembic-managed PostgreSQL URL, for example:
# postgresql+psycopg://rarelink:${RARELINK_DB_PASSWORD}@postgres:5432/rarelink
DATABASE_URL=sqlite:///./artifacts/rarelink.db
ARTIFACT_ROOT=./artifacts
DATA_ROOT=./data/runtime

# Step Plan: https://api.stepfun.com/step_plan/v1
# Standard Open Platform: https://api.stepfun.com/v1
STEP_API_BASE=https://api.stepfun.com/step_plan/v1
STEP_API_KEY=
STEP_MODEL=step-3.7-flash
STEP_TIMEOUT_SECONDS=60

# Agent routing: template | step_remote | spark_local | hybrid
# `hybrid` prefers a ready local TensorRT-LLM service and otherwise uses the
# policy-filtered Step API or the deterministic template fallback.
RARELINK_AGENT_BACKEND=hybrid
RARELINK_SPARK_LLM_BASE=http://127.0.0.1:8355/v1
SPARK_LLM_MODEL=nvidia/NVIDIA-Nemotron-3-Super-120B-A12B-NVFP4
SPARK_LLM_TIMEOUT_SECONDS=180

RARELINK_MIN_GROUP_SIZE=5
RARELINK_ALLOW_LLM=true
RARELINK_DEMO_CACHE=false
RARELINK_FL_MODE=mock
CORS_ORIGINS=http://localhost:5173

# Physical federation control plane. Keep real values in a managed runtime
# secret store; never commit them. Mutating operator endpoints are closed when
# the operator token is empty. Site heartbeat secrets are interim P0 transport
# credentials and will be replaced by hospital mTLS/OIDC identity in P1.
RARELINK_PHYSICAL_MODE=disabled
RARELINK_PHYSICAL_AUTH_MODE=legacy-token
RARELINK_PHYSICAL_OPERATOR_TOKEN=
RARELINK_AUDIT_HMAC_KEY=
RARELINK_PHYSICAL_SITE_SECRETS=
RARELINK_PHYSICAL_HEARTBEAT_MAX_AGE_SECONDS=300
# Physical second approvals expire and are rechecked before submit/retry/resume.
RARELINK_PHYSICAL_APPROVAL_TTL_SECONDS=86400
RARELINK_OIDC_ISSUER=
RARELINK_OIDC_AUDIENCE=
RARELINK_OIDC_JWKS_JSON=
RARELINK_OIDC_ROLES_CLAIM=roles
RARELINK_OIDC_ORGANIZATION_CLAIM=organization
RARELINK_OIDC_SITES_CLAIM=site_ids
RARELINK_NVFLARE_ADMIN_KIT=
RARELINK_NVFLARE_EXECUTABLE=nvflare

# Observability is off by default. Production enables it only with a protected
# metrics token and an approved HTTPS OTLP endpoint.
RARELINK_OBSERVABILITY_ENABLED=false
RARELINK_METRICS_PATH=/internal/metrics
RARELINK_METRICS_BEARER_TOKEN=
RARELINK_OTEL_ENABLED=false
RARELINK_OTEL_ENDPOINT=
RARELINK_OTEL_SERVICE_NAME=rarelink-coordinator