finitechat/.env.example at main · finitecomputer/finitechat · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
# Copy to .env for local smoke and canary runs. The wrappers source this file
# if it exists, but real .env files stay gitignored.

# Hermes phone canary model provider. Fill in one provider key before running
# scripts/hermes-phone-canary.py or scripts/hermes-remote-docker-canary.py.
OPENROUTER_API_KEY=
# ANTHROPIC_API_KEY=
# OPENAI_API_KEY=

# Optional model override for Hermes canaries. Defaults are OpenRouter Claude.
# FINITECHAT_HERMES_PROVIDER=openrouter
# FINITECHAT_HERMES_MODEL=anthropic/claude-sonnet-4.6
# FINITECHAT_HERMES_BASE_URL=https://openrouter.ai/api/v1
# FINITECHAT_HERMES_API_MODE=chat_completions

# Optional physical-device install defaults for the phone canary. Find device
# identifiers with: xcrun devicectl list devices
# FINITECHAT_IOS_DEVICE_ID=
# RMP_IOS_DEVELOPMENT_TEAM=

# Optional remote Docker canary host. Defaults to ssh://finite-lat-2.
# FINITECHAT_REMOTE_DOCKER_HOST=ssh://finite-lat-2

# Use local for fast Docker proof, or s3 for the Latitude/Tinfoil path.
FINITE_DOCKER_RESTIC_BACKEND=s3

# Option A: provide the full restic repository URL.
# Format: s3:https://<endpoint>/<bucket>/<prefix>
# Example for Latitude Object Storage:
FINITE_DOCKER_RESTIC_REPOSITORY=s3:https://objects.nyc.storage.sh/tinfoil-agent-spike/agents/finite-agent-tinfoil-user-canary/state

# Option B: leave FINITE_DOCKER_RESTIC_REPOSITORY empty and let the runtime
# smoke derive it from the Latitude bucket and per-agent state prefix below.
# FINITE_LATITUDE_OBJECT_ENDPOINT=https://objects.nyc.storage.sh
# FINITE_LATITUDE_STORAGE_BUCKET=tinfoil-agent-spike
# FINITE_DOCKER_RESTIC_PREFIX=agents/finite-agent-tinfoil-user-canary/state

# Temporary canary backup encryption secret. Product should derive or unwrap a
# per-agent backup key from user-controlled key material; the operator should
# not be able to decrypt user state without user-mediated key release.
FINITE_DOCKER_RESTIC_PASSWORD=

# Latitude Object Storage credentials. These are promoted to AWS_* env vars by
# scripts/hermes-sidecar-docker-smoke.sh before restic runs.
FINITE_DOCKER_RESTIC_AWS_ACCESS_KEY_ID=
FINITE_DOCKER_RESTIC_AWS_SECRET_ACCESS_KEY=

# Optional, depending on provider behavior.
# FINITE_DOCKER_RESTIC_AWS_REGION=us-east-1
# FINITE_DOCKER_RESTIC_AWS_SESSION_TOKEN=

# Tinfoil control-plane auth for the later canary phase. The Docker smoke does
# not use this, but the manual Tinfoil canary/runbook will.
TINFOIL_API_KEY=