.env.example

# ==========================================
# AgentKit Environment Configuration
# ==========================================

# PostgreSQL & Redis Configuration
# When running locally: localhost:5432 and localhost:6379. Under Docker Compose the
# service names (postgres:5432, redis:6379) are supplied by the compose file itself.
#
# Credentials are configured as components, not inside connection URLs. Generate each
# password with `openssl rand -base64 24`; the generated value contains '/', '+' and '=',
# which would corrupt a hand-built URL. AgentKit escapes every component while it builds
# the URL, so the password can be used exactly as generated. An explicitly configured
# DATABASE_URL / DATABASE_READONLY_URL still wins over the components below.
# Compose refuses to start with an empty or placeholder password, and
# `scripts/check_deploy_credentials.py` rejects the image defaults (`postgres`), documented
# placeholders and passwords under 12 characters.
POSTGRES_HOST=localhost
POSTGRES_PORT=5432
POSTGRES_USER=postgres
POSTGRES_PASSWORD=change_me_generate_with_openssl_rand
POSTGRES_DB=agentkit

# Dedicated read-only role for the sql_readonly tool. It must NOT be the application role:
# the tool refuses to run without it and never falls back to the application credentials.
# Compose provisions it with `scripts/init_readonly_role.py`; for a local database run that
# script yourself.
POSTGRES_READONLY_USER=agentkit_readonly
POSTGRES_READONLY_PASSWORD=change_me_generate_with_openssl_rand

# Redis requires a password in the compose stack. REDIS_PASSWORD is authoritative: when
# REDIS_URL carries no credentials of its own, the password is embedded (percent-encoded)
# automatically, so it never needs to appear inside the URL.
REDIS_PASSWORD=change_me_generate_with_openssl_rand
REDIS_URL=redis://localhost:6379/0

# Host interface the datastore ports bind to. Loopback by default; 0.0.0.0 is an explicit
# opt-in that exposes PostgreSQL and Redis to the network (see docs/DEPLOY.md).
POSTGRES_BIND=127.0.0.1
REDIS_BIND=127.0.0.1

# LLM Provider Configuration
# Supported providers: "gemini", "openai", "fake"
LLM_PROVIDER=gemini
LLM_MODEL=gemini-3.1-flash-lite
GEMINI_API_KEY=your_gemini_api_key_here
OPENAI_API_KEY=your_openai_api_key_here

# Retry policy for transient LLM failures (429 / 5xx / network). Non-transient
# errors such as 401 or 400 are never retried.
LLM_MAX_RETRIES=3
LLM_RETRY_BASE_DELAY_S=0.5
LLM_RETRY_MAX_DELAY_S=10

# External Tools & Sandboxing
SEARCH_API_KEY=your_search_api_key_here
FILE_TOOL_BASE_DIR=/tmp/agentkit_sandbox

# Security & API Authentication
# Comma-separated list of authorized client API keys. Required: AgentKit refuses
# to start when this is empty or unset, so no deployment can come up with a key
# published in this repository. Replace the values below with your own.
API_KEYS=replace_me_key_1,replace_me_key_2
RATE_LIMIT_PER_MIN=30

# Agent Execution Limits & Guardrails
MAX_STEPS=10
RUN_TIMEOUT_S=60
TOOL_TIMEOUT_S=15
SESSION_TTL_S=3600
# Maximum messages retained per session (system prompt included). Truncation never leaves a
# tool result without the assistant tool-call turn it answers.
SESSION_MAX_MESSAGES=40
TOOL_OUTPUT_MAX_CHARS=2000

# Real-infrastructure test suite (optional, test-only)
# `pytest` skips the live tier unless AGENTKIT_REAL_INFRA=1. Point these at a
# DEDICATED test database: the suite truncates runs/steps.
# REDIS_PASSWORD above is reused to authenticate the suite, so REDIS_TEST_URL needs no
# credentials; disclose them in the URL only to point at a Redis with a different password.
# AGENTKIT_REAL_INFRA=1
# DATABASE_TEST_URL=postgresql+asyncpg://postgres:postgres@localhost:5432/agentkit_test
# REDIS_TEST_URL=redis://localhost:6379/15