.env.example

# ShadcnBrief MCP runtime contract template (non-secret defaults)
# Deprecated key plaintext is intentionally omitted; use LEGACY_KEY_* + digest in docs/env-deprecation-history.md.

# @env GEMINI_API_KEY
# description: Primary Gemini API key. Required for Gemini-only runtime; source must be local .env or shell/CI environment variable.
# default: <empty>
# validation: Trimmed non-empty string from local .env or shell/CI environment variable.
# sensitive: true
GEMINI_API_KEY=

# @env GEMINI_MODEL
# description: Default Gemini model used when explicit model and route are absent.
# default: gemini-3.1-pro-preview
# validation: Trimmed non-empty string when set.
# sensitive: false
GEMINI_MODEL=gemini-3.1-pro-preview

# @env GEMINI_MODEL_FAST
# description: Gemini model used only for explicit "fast" route requests.
# default: gemini-3-flash-preview
# validation: Trimmed non-empty string when set.
# sensitive: false
GEMINI_MODEL_FAST=gemini-3-flash-preview

# @env GEMINI_MODEL_STRONG
# description: Gemini model used for "strong" route requests.
# default: gemini-3.1-pro-preview
# validation: Trimmed string. Empty value falls back to GEMINI_MODEL.
# sensitive: false
GEMINI_MODEL_STRONG=gemini-3.1-pro-preview

# @env GEMINI_MODEL_EMBEDDING
# description: Gemini embedding model used by embedding/RAG tools.
# default: gemini-embedding-001
# validation: Trimmed non-empty string when set.
# sensitive: false
GEMINI_MODEL_EMBEDDING=gemini-embedding-001

# @env GEMINI_DEFAULT_THINKING_LEVEL
# description: Default reasoning depth for Gemini requests.
# default: high
# validation: Enum: low | high. (minimal is intentionally unsupported)
# sensitive: false
GEMINI_DEFAULT_THINKING_LEVEL=high

# @env GEMINI_DEFAULT_TEMPERATURE
# description: Default generation temperature for Gemini requests.
# default: 1
# validation: Positive number.
# sensitive: false
GEMINI_DEFAULT_TEMPERATURE=1.0

# @env NEXT_PUBLIC_SITE_URL
# description: Canonical external site URL used by public pages for canonical links, sitemap/robots indexability, and structured discovery metadata.
# default: <empty>
# validation: Empty string disables canonical-site SEO outputs. When set, must be an absolute http or https URL.
# sensitive: false
NEXT_PUBLIC_SITE_URL=

# @env OPENUI_MODEL_ROUTING
# description: Route switch for fast/strong model selection.
# default: on
# validation: Enum: on | off.
# sensitive: false
OPENUI_MODEL_ROUTING=on

# @env SHADCN_BRIEF_WORKSPACE_ROOT
# description: Workspace root used by filesystem-sensitive MCP tools.
# default: process.cwd()
# validation: Resolved path must exist and must be a directory.
# sensitive: false
SHADCN_BRIEF_WORKSPACE_ROOT=.

# @env OPENUI_TIMEOUT_MS
# description: Per-request model timeout in milliseconds.
# default: 45000
# validation: Positive number.
# sensitive: false
OPENUI_TIMEOUT_MS=45000

# @env OPENUI_MAX_RETRIES
# description: Maximum retriable attempts for Gemini requests.
# default: 2
# validation: Non-negative integer.
# sensitive: false
OPENUI_MAX_RETRIES=2

# @env OPENUI_RETRY_BASE_MS
# description: Exponential backoff base delay in milliseconds.
# default: 450
# validation: Positive number.
# sensitive: false
OPENUI_RETRY_BASE_MS=450

# @env SHADCN_BRIEF_LOG_LEVEL
# description: Server log verbosity threshold.
# default: info
# validation: Enum: debug | info | warn | error.
# sensitive: false
SHADCN_BRIEF_LOG_LEVEL=info

# @env SHADCN_BRIEF_LOG_OUTPUT
# description: Selects log sink output target.
# default: both
# validation: Enum: stderr | file | both.
# sensitive: false
SHADCN_BRIEF_LOG_OUTPUT=both

# @env SHADCN_BRIEF_LOG_ROTATE_ON_START
# description: Controls startup-time rotation for oversized active log file.
# default: on
# validation: Enum: on | off.
# sensitive: false
SHADCN_BRIEF_LOG_ROTATE_ON_START=on

# @env SHADCN_BRIEF_CHILD_ENV_ALLOWLIST
# description: Comma-separated allowlist for environment variables passed to child processes.
# default: <empty>
# validation: Comma-separated env keys or prefix wildcards ending with "*" (for example: PATH,OPENUI_*). Empty uses baseline safe keys only.
# note: Standard proxy variables (HTTP_PROXY / HTTPS_PROXY / ALL_PROXY / NO_PROXY and lowercase variants) are already forwarded by the baseline allowlist.
# sensitive: false
SHADCN_BRIEF_CHILD_ENV_ALLOWLIST=

# @env SHADCN_BRIEF_LOG_DIR
# description: Governed run-scoped MCP runtime log path. Callers must not redirect logs outside the repository runtime layout.
# default: .runtime-cache/runs/<run_id>/logs/runtime.jsonl
# validation: Governed run-scoped path token; arbitrary override is not part of the supported contract.
# sensitive: false
SHADCN_BRIEF_LOG_DIR=.runtime-cache/runs/<run_id>/logs/runtime.jsonl

# @env SHADCN_BRIEF_LOG_RETENTION_DAYS
# description: Number of days to retain MCP log files.
# default: 7
# validation: Positive integer.
# sensitive: false
SHADCN_BRIEF_LOG_RETENTION_DAYS=7

# @env SHADCN_BRIEF_LOG_MAX_FILE_MB
# description: Maximum size per MCP log file in megabytes.
# default: 10
# validation: Positive number.
# sensitive: false
SHADCN_BRIEF_LOG_MAX_FILE_MB=10

# @env SHADCN_BRIEF_CACHE_DIR
# description: Directory for MCP runtime cache artifacts.
# default: .runtime-cache/cache
# validation: Non-empty path string.
# sensitive: false
SHADCN_BRIEF_CACHE_DIR=.runtime-cache/cache

# @env SHADCN_BRIEF_CACHE_RETENTION_DAYS
# description: Number of days to retain MCP cache files.
# default: 7
# validation: Positive integer.
# sensitive: false
SHADCN_BRIEF_CACHE_RETENTION_DAYS=7

# @env SHADCN_BRIEF_CACHE_MAX_BYTES
# description: Maximum total size for MCP cache files in bytes.
# default: 104857600
# validation: Positive integer.
# sensitive: false
SHADCN_BRIEF_CACHE_MAX_BYTES=104857600

# @env SHADCN_BRIEF_CACHE_CLEAN_INTERVAL_MINUTES
# description: Minimum interval in minutes between runtime cache cleanup attempts.
# default: 60
# validation: Positive integer.
# sensitive: false
SHADCN_BRIEF_CACHE_CLEAN_INTERVAL_MINUTES=60

# @env OPENUI_TOOL_CACHE_ROOT
# description: Base root for repo-specific external tool caches (Playwright assets, managed install surfaces, tool HOME, and repo-owned pre-commit/Go caches).
# default: ~/.cache/ShadcnBrief/tooling
# validation: Non-empty path string. The effective per-workspace cache root is derived under this base root using the workspace token.
# sensitive: false
OPENUI_TOOL_CACHE_ROOT=~/.cache/ShadcnBrief/tooling

# @env OPENUI_TOOL_CACHE_RETENTION_DAYS
# description: Number of days to retain repo-specific external tool-cache entries before TTL cleanup.
# default: 3
# validation: Positive integer.
# sensitive: false
OPENUI_TOOL_CACHE_RETENTION_DAYS=3

# @env OPENUI_TOOL_CACHE_MAX_BYTES
# description: Maximum total size for repo-specific external tool-cache entries before oldest-entry cleanup begins.
# default: 5368709120
# validation: Positive integer.
# sensitive: false
OPENUI_TOOL_CACHE_MAX_BYTES=5368709120

# @env OPENUI_TOOL_CACHE_CLEAN_INTERVAL_MINUTES
# description: Minimum interval in minutes between repo-specific external tool-cache janitor runs.
# default: 60
# validation: Positive integer.
# sensitive: false
OPENUI_TOOL_CACHE_CLEAN_INTERVAL_MINUTES=60

# @env OPENUI_CHROME_USER_DATA_DIR
# description: Absolute user-data-dir root for the repo-owned isolated real Chrome lane used by login-state and DOM/Console/API inspection flows.
# default: <empty>
# validation: Empty string disables real Chrome profile mode. When set, must be an absolute path to an existing Chrome user data directory.
# sensitive: false
OPENUI_CHROME_USER_DATA_DIR=~/.cache/ShadcnBrief/browser/chrome-user-data

# @env OPENUI_CHROME_PROFILE_DIRECTORY
# description: Profile directory name inside OPENUI_CHROME_USER_DATA_DIR for the repo-owned isolated Chrome profile.
# default: <empty>
# validation: Empty string disables real Chrome profile mode. When set, must be a trimmed non-empty profile directory name.
# sensitive: false
OPENUI_CHROME_PROFILE_DIRECTORY=Profile 1

# @env OPENUI_CHROME_CHANNEL
# description: Browser channel used for the repo-owned single-instance real Chrome lane.
# default: chrome
# validation: Trimmed non-empty string when set.
# sensitive: false
OPENUI_CHROME_CHANNEL=chrome

# @env OPENUI_CHROME_EXECUTABLE_PATH
# description: Optional absolute Chrome executable override for the repo-owned real Chrome lane.
# default: <empty>
# validation: Empty string uses the configured channel. When set, must be an absolute path to an executable.
# sensitive: false
OPENUI_CHROME_EXECUTABLE_PATH=

# @env OPENUI_CHROME_CDP_PORT
# description: Fixed local Chrome DevTools Protocol port for the repo-owned single-instance real-browser lane.
# default: 9343
# validation: Positive integer.
# sensitive: false
OPENUI_CHROME_CDP_PORT=9343

# @env OPENUI_QUEUE_CONCURRENCY
# description: Concurrency for local ship job queue.
# default: 1
# validation: Positive integer.
# sensitive: false
OPENUI_QUEUE_CONCURRENCY=1

# @env OPENUI_QUEUE_MAX_PENDING
# description: Maximum pending jobs allowed in local ship queue.
# default: 128
# validation: Positive integer. Empty/invalid value falls back to default.
# sensitive: false
OPENUI_QUEUE_MAX_PENDING=128

# @env OPENUI_IDEMPOTENCY_TTL_MINUTES
# description: TTL for ship idempotency cache entries.
# default: 1440
# validation: Positive integer.
# sensitive: false
OPENUI_IDEMPOTENCY_TTL_MINUTES=1440

# @env OPENUI_GEMINI_PYTHON_BIN
# description: Python binary used to start Gemini sidecar.
# default: python3
# validation: Trimmed non-empty string when set.
# sensitive: false
OPENUI_GEMINI_PYTHON_BIN=python3

# @env OPENUI_GEMINI_SIDECAR_PATH
# description: Path to Gemini python sidecar entrypoint.
# default: services/gemini-sidecar/server.py
# validation: Path to an executable Python script.
# sensitive: false
OPENUI_GEMINI_SIDECAR_PATH=services/gemini-sidecar/server.py

# @env OPENUI_GEMINI_SIDECAR_STDOUT_BUFFER_MAX_BYTES
# description: Maximum buffered stdout bytes retained for Gemini sidecar.
# default: 262144
# validation: Positive integer. Empty/invalid value falls back to default.
# sensitive: false
OPENUI_GEMINI_SIDECAR_STDOUT_BUFFER_MAX_BYTES=262144

# @env OPENUI_HOSTED_API_HOST
# description: Bind host for the self-hosted ShadcnBrief Hosted API runtime.
# default: 127.0.0.1
# validation: Trimmed non-empty string.
# sensitive: false
OPENUI_HOSTED_API_HOST=127.0.0.1

# @env OPENUI_HOSTED_API_PORT
# description: Bind port for the self-hosted ShadcnBrief Hosted API runtime.
# default: 7878
# validation: Positive integer.
# sensitive: false
OPENUI_HOSTED_API_PORT=7878

# @env OPENUI_HOSTED_API_BEARER_TOKEN
# description: Bearer token required by protected ShadcnBrief Hosted API routes.
# default: <empty>
# validation: Trimmed non-empty string when the hosted API runtime is started.
# sensitive: true
OPENUI_HOSTED_API_BEARER_TOKEN=

# @env OPENUI_HOSTED_API_MAX_REQUESTS_PER_MINUTE
# description: Fixed-window request budget for the self-hosted ShadcnBrief Hosted API runtime.
# default: 60
# validation: Positive integer.
# sensitive: false
OPENUI_HOSTED_API_MAX_REQUESTS_PER_MINUTE=60