.env.example

# Copy to .env for first use; preserve existing settings when updating.
# Compose and native launches read .env; native zero-configuration startup can omit it.

# Native listener and Compose host mapping; explicit --host/--port override native values.
CODEBUDDY2API_BIND=127.0.0.1
CODEBUDDY2API_PORT=8787

# Compose-only image and host data directory; container data stays in /data/auth.
CODEBUDDY2API_IMAGE=codebuddy2api:local
CODEBUDDY2API_AUTH_PATH=./auth

# Optional native data directory; Compose fixes CODEBUDDY_AUTH_DIR to /data/auth.
# CODEBUDDY_AUTH_DIR=./auth
# Import directory defaults to the data directory's imports/; use container paths in Compose.
# CODEBUDDY_IMPORT_DIR=./auth/imports

# Empty locks management; set a random key before exposing inference beyond loopback.
# Native: omit/comment the variable to use the saved default key (first local start displays it once).
CODEBUDDY2API_KEY=
# Native-only unsafe opt-in; Compose uses its host mapping to control exposure.
# CODEBUDDY2API_ALLOW_OPEN_NOAUTH=false

# Disabling CSRF checks does not disable authentication; use only on trusted local networks.
CODEBUDDY2API_ADMIN_CSRF=true

# Extra trusted management origins behind reverse proxies (comma separated; bare domains use HTTPS).
# Unset leaves the list configurable in the WebUI; an explicit value locks it.
# CODEBUDDY2API_ADMIN_ORIGINS=https://chat.example.com

# Unset leaves tool metadata configurable in the WebUI; an explicit Boolean locks it.
# CODEBUDDY2API_KEEP_TOOL_METADATA=true

# Image overflow keeps the newest blocks or returns 413; zero forbids all images.
CODEBUDDY2API_MAX_IMAGES=16
CODEBUDDY2API_IMAGE_POLICY=truncate
# Positive upstream JSON byte limit after image policy and protocol adaptation.
CODEBUDDY2API_MAX_REQUEST_BYTES=33554432
# Positive raw inbound byte limit, enforced before JSON parsing.
CODEBUDDY2API_MAX_INBOUND_BYTES=67108864
# Aggregated output bytes and concurrent inference requests; zero disables each limit.
CODEBUDDY2API_MAX_COLLECT_BYTES=8388608
CODEBUDDY2API_MAX_CONCURRENT=64
# Optional bounded upstream connection reuse; restart to apply, disabled by default.
# CODEBUDDY2API_UPSTREAM_KEEPALIVE=false
# Per-account in-flight limit; zero preserves unlimited account capacity.
# CODEBUDDY2API_MAX_INFLIGHT_PER_ACCOUNT=0
# Optional session/attempt tracing; legacy preserves existing upstream header behavior.
# CODEBUDDY2API_REQUEST_CONTEXT_MODE=legacy
# Responses projection is hot and WebUI-editable unless explicitly set here.
# balanced rewrites only recognized harness blocks with stable summaries; other text stays verbatim.
# CODEBUDDY2API_RESPONSES_PROJECTION_MODE=balanced
# Per-item head/tail limit for generated assistant text, tool arguments and tool results;
# zero disables per-item trimming. Global request/output gates still apply.
# Non-zero values must be between 256 and 33554432 bytes.
# CODEBUDDY2API_RESPONSES_PROJECTION_MAX_BYTES=40000
# compatible preserves aggregation; realtime forwards all protocol output incrementally
# and does not regenerate malformed tool arguments.
# CODEBUDDY2API_STREAM_MODE=compatible
# Disable only declared model-capability preflight; other safeguards and Intl image merging remain enabled.
# CODEBUDDY2API_MODEL_CAPABILITY_GUARD=true

# Retired: this setting only warns; all persistent logs use logs.sqlite3.
CODEBUDDY2API_LOG=
# Legacy text-preview limit; text output is retired. SQLite diagnostics have a separate budget.
CODEBUDDY2API_LOG_BODY_LIMIT=65536

# International trial credits remain manual-only in the WebUI.
# Preauthorize first-Buddy tasks, one bounded chat (may use credits), adoption and travel.
CODEBUDDY2API_AUTO_ACCEPT_BUDDY=false

# Extra generations for malformed tool arguments; each may consume credits, zero disables retries.
CODEBUDDY2API_TOOL_CALL_MAX_RETRY=3
# Pre-response credential failovers; zero disables replay. See docs/advanced.md for billing risks.
CODEBUDDY2API_FAILOVER_MAX=0
# Replay incomplete writes only when partial requests cannot be billed upstream.
CODEBUDDY2API_RETRY_WRITE_TIMEOUT=false