env.example

# =============================================================================
# opencode-agent-pod — Environment Configuration
# =============================================================================
# Copy this file to `.env` and adjust values for your environment:
#   cp env.example .env
# All variables are optional unless noted; defaults match pod/settings.py.
# =============================================================================

# -----------------------------------------------------------------------------
# Service
# -----------------------------------------------------------------------------
# Bind address / port. The Docker image overrides HOST to 0.0.0.0.
AGENT_POD_HOST=127.0.0.1
AGENT_POD_PORT=8080

# Shared bearer token every caller must present. REQUIRED in practice: when
# unset the pod fails closed and refuses every request.
AGENT_POD_TOKEN=

# -----------------------------------------------------------------------------
# Budgets & run caps
# -----------------------------------------------------------------------------
# Hard ceiling clamped onto every run's budget (USD). Empty = no ceiling.
AGENT_POD_MAX_BUDGET_USD=

# Budget applied when a request names none. Empty = unbounded (up to the ceiling).
AGENT_POD_DEFAULT_BUDGET_USD=

# Wall-clock cap (seconds) and turn cap applied to every run.
AGENT_POD_SESSION_TIMEOUT=900
AGENT_POD_MAX_TURNS=30

# Seconds between SSE keep-alive comments while a run is in flight.
AGENT_POD_KEEPALIVE_SECONDS=15

# -----------------------------------------------------------------------------
# Key custody
# -----------------------------------------------------------------------------
# Run the key-injecting proxy so provider keys never enter the opencode daemon
# or any shell it spawns. On by default; disable only for local debugging.
AGENT_POD_KEY_PROXY=true

# Interface the proxy binds. 127.0.0.1 keeps it unreachable off-host.
AGENT_POD_KEY_PROXY_HOST=127.0.0.1

# -----------------------------------------------------------------------------
# Engine
# -----------------------------------------------------------------------------
# Max concurrent agent runs across the pod.
AGENT_GLOBAL_CONCURRENCY=7

# Seconds to wait for an opencode daemon to come up before failing the run.
AGENT_SERVE_STARTUP_TIMEOUT=60

# -----------------------------------------------------------------------------
# Provider API keys (pod-internal; never returned to callers)
# -----------------------------------------------------------------------------
OPENAI_API_KEY=sk-...
ANTHROPIC_API_KEY=sk-...
GEMINI_API_KEY=AI...
XAI_API_KEY=xai...

# -----------------------------------------------------------------------------
# Custom providers (OpenAI-compatible /v1 endpoints, e.g. local vLLM)
# -----------------------------------------------------------------------------
# JSON array; each entry registers a provider whose models are addressed as
# "<name>/<model>". Prefer api_key_env over api_key so secrets stay in the env.
# Example:
# AGENT_CUSTOM_PROVIDERS=[{"name":"local-vllm","base_url":"http://vllm:8080/v1","models":["gemma-3-27b-it"],"api_key_env":"VLLM_API_KEY"}]
AGENT_CUSTOM_PROVIDERS=

# -----------------------------------------------------------------------------
# MCP servers (deployment-declared tools; the pod bakes in none)
# -----------------------------------------------------------------------------
# JSON array of {name, command, tools}; command is the argv that launches a
# local server, tools names what it exposes (gated per run by the allow-list).
# Example:
# AGENT_MCP_SERVERS=[{"name":"lookup","command":["python","-m","my_mcp_server"],"tools":["search"]}]
AGENT_MCP_SERVERS=