env.example

# test (local) or production (deployed host).
ENVIRONMENT=__placeholder__
# http (local or reverse-proxied server) or https.
PROTOCOL=__placeholder__
# Port the server listens on (defaults to 3000).
PORT=__placeholder__
# Path of the private key file. Required only when PROTOCOL is https.
KEY=__placeholder__
# Path of the certificate file. Required only when PROTOCOL is https.
CERT=__placeholder__
# 3-character password for manager operations.
AUTH_CODE=__placeholder__
# ID of each Testaro worker and, for each, its secret and published name.
TESTARO_WORKERS={"__placeholder__":{"secret":"__placeholder__","name":"__placeholder__"}}
# URL of this host.
THIS_KILOTEST_HOST=__placeholder__
# URL of a dev/test host.
LOCAL_KILOTEST_HOST=http://localhost:3000
# URL of the deployed host.
DEPLOYED_KILOTEST_HOST=https://kilotest.com
# Path of the data directory (defaults to the db subdirectory of the project root). Tests set
# this to a fixture directory so they never read or write the real db.
DB_DIR=__placeholder__
# Whether this deployment allows testing pages at private, loopback, or link-local addresses
# (true) or restricts testing to publicly routable addresses (any other value or omission).
# Set this to true only when every Testaro worker that can poll this Kilotest instance is
# intentionally deployed on a private network to test that network’s own internal pages;
# leave it unset for a deployment whose Testaro workers accept jobs from arbitrary requesters,
# since such a worker could otherwise be induced to fetch a target it has no legitimate reason
# to reach, such as its own host’s cloud-metadata service.
ALLOW_INTERNAL_TARGETS=__placeholder__
# Path of the web tutorial comments file (defaults to db/comments/tutorialWeb.json).
TUTORIAL_WEB_COMMENTS_PATH=__placeholder__
# Path of the AI tutorial comments file (defaults to db/comments/tutorialAI.json).
TUTORIAL_AI_COMMENTS_PATH=__placeholder__
# Path of the feature requests file (defaults to db/featureRequests.json).
FEATURE_REQUESTS_PATH=__placeholder__

# Inbox size limits: each defaults to 20 if unset, empty, or not a non-negative integer.
# A value of 0 means no limit.

# Maximum number of test/retest requests awaiting approval at once, across all URLs.
TEST_REQUEST_QUEUE_MAX=__placeholder__
# Maximum number of comments held on the web tutorial page.
TUTORIAL_WEB_COMMENTS_MAX=__placeholder__
# Maximum number of comments held on the AI agent tutorial page.
TUTORIAL_AI_COMMENTS_MAX=__placeholder__
# Maximum number of feature requests held via the MCP server's requestFeature tool.
FEATURE_REQUESTS_MAX=__placeholder__
# Maximum number of jobs allowed in the job queue (db/jobs/queue) at once. Shared by every
# path that enqueues a job: manager approval of a pending test/retest request, and the
# orderNewTest/orderRetest MCP tools, which enqueue directly.
JOB_QUEUE_MAX=__placeholder__

# Timing for the awaitTest MCP tool's wait on a job ordered via orderNewTest/orderRetest.
# Defaults: 2000ms poll interval, 300000ms (5 minutes) maximum wait. The maximum wait
# deliberately exceeds the "occasionally up to 4 minutes" callers are told to expect, to
# leave margin so a job that is genuinely still running is not mistaken for one that
# never will finish. Lower values are useful for local testing.

# Milliseconds between polls while awaitTest waits for a job to complete.
AWAIT_JOB_POLL_MS=__placeholder__
# Maximum milliseconds awaitTest waits before giving up.
AWAIT_JOB_TIMEOUT_MS=__placeholder__

# Alert configuration:

MANAGER_EMAIL=__placeholder__
ALERT_API_HOST=api.resend.com
ALERT_API_PATH=/emails
ALERT_API_KEY=__placeholder__
ALERT_FROM=__placeholder__
# Threshold in credits.
WAVE_BALANCE_THRESHOLD=__placeholder__
# Threshold in dollars.
AI_SERVICE0_BALANCE_THRESHOLD=__placeholder__
# Per-million-token prices (Claude Haiku 4.5) on 2026-05-01 were $1 in, $5 out.
AI_MODEL0_INPUT_PRICE=0.000001
AI_MODEL0_OUTPUT_PRICE=0.000005