# Without provider keys: deterministic local sandbox. Never commit real keys.
PORT=4310
HOST=127.0.0.1
DATA_DIR=./data
COOKIE_SECURE=false

# Google-hosted Gemma through Vercel AI SDK. This model was verified on Oct 20, 2026.
GEMMA_PROVIDER=google
GOOGLE_GENERATIVE_AI_API_KEY=
GEMMA_MODEL=gemma-4-26b-a4b-it

# For a self-hosted OpenAI-compatible endpoint, set GEMMA_PROVIDER=compatible,
# GEMMA_BASE_URL and the exact GEMMA_MODEL served by that endpoint.
GEMMA_BASE_URL=
GEMMA_API_KEY=
GEMMA_STRUCTURED_OUTPUTS=false

# Optional ElevenLabs. Recordings are processed in memory, never saved by VOX.
ELEVENLABS_API_KEY=
ELEVENLABS_STT_MODEL=scribe_v2
ELEVENLABS_VOICE_ID=
ELEVENLABS_TTS_MODEL=eleven_multilingual_v2

# In a public HTTPS deployment:
# HOST=0.0.0.0
# COOKIE_SECURE=true
# PUBLIC_ORIGIN=https://your-deployment.example
# Use a persistent disk for DATA_DIR. One instance only for the local Mastra worker.

# Hosted identity: only a verified owner can spend provider credits or approve replies.
AUTH0_ISSUER_BASE_URL=
AUTH0_CLIENT_ID=
AUTH0_CLIENT_SECRET=
AUTH0_SESSION_SECRET=
AUTH0_ALLOWED_EMAIL=
# Production with live providers forces both protections on.
AUTH0_REQUIRE_APPROVAL_LOGIN=false
VOX_REQUIRE_PROVIDER_LOGIN=false
PUBLIC_ORIGIN=http://localhost:4310

# Optional Atlas operational persistence. No fallback if configured Atlas is unavailable.
MONGODB_URI=
MONGODB_DATABASE=vox_hf26

# Optional external Temporal endpoint, namespace and scoped worker key.
# Omit both endpoint and self-hosting for local Mastra mode.
TEMPORAL_ADDRESS=
TEMPORAL_NAMESPACE=
TEMPORAL_TASK_QUEUE=vox-support
TEMPORAL_API_KEY=

# Full Temporal Server co-located with VOX, with durable PostgreSQL persistence.
# Build downloads the pinned, checksum-verified Linux server only when enabled.
# RPCs bind only to loopback. Never use the administrator DB connection here.
TEMPORAL_SELF_HOSTED=false
TEMPORAL_POSTGRES_URI=

# Authored playbooks: read-only Tiger login, strict certificate/hostname verification.
TIGER_DATABASE_URL=
TIGER_CA_PEM=
# Set only after verifying the Google project's billing is disabled.
GOOGLE_EMBEDDING_FREE_TIER_CONFIRMED=false

TABPFN_API_KEY=
PAPERINSTRUMENTS_API_KEY=
# Private, expiring sampler checkpoint. Training remains an explicit offline action.
TINKER_API_KEY=
TINKER_MODEL=
TINKER_MODEL_EXPIRES_AT=

SERPAPI_API_KEY=
BACKBOARD_API_KEY=
SENTRY_DSN=
SENTRY_ORG=
BROWSERBASE_API_KEY=
BROWSERBASE_PROJECT_ID=

# Explicit public judge allowance: default off, hard maximum 8 sessions total.
# Each browser pass lasts 24h: plan 1, STT 1 (20s/2MB), TTS 2, draft ceiling 2.
# Counters persist in Atlas; failed requests count and reset never refills them.
VOX_JUDGE_LIVE_SESSIONS=0