.env.example

# Friday Studio environment variables
#
# Copy this file to `.env` and fill in only the keys you need. Anything
# you don't set falls back to runtime defaults (or disables the feature
# that needs it). The daemon loads `.env` automatically when started via
# `deno task atlas`.

# ──────────────────────────────────────────────────────────────────────
# LLM provider keys
# ──────────────────────────────────────────────────────────────────────
# At least one provider key is required for real agent runs. The
# bundled examples use Anthropic by default.
ANTHROPIC_API_KEY=
OPENAI_API_KEY=
GEMINI_API_KEY=
GROQ_API_KEY=
FIREWORKS_API_KEY=
PARALLEL_API_KEY=

# Optional proxies in front of the provider APIs (e.g. for self-hosted
# rate limiters or audit logging). Leave unset to call providers directly.
# ANTHROPIC_PROXY_URL=
# OPENAI_PROXY_URL=
# GROQ_PROXY_URL=

# LiteLLM gateway — point at any OpenAI-compatible endpoint to route
# all provider traffic through it. Used by the LLM adapters when set.
# LITELLM_BASE_URL=
# LITELLM_API_KEY=

# ──────────────────────────────────────────────────────────────────────
# Web search tools
# ──────────────────────────────────────────────────────────────────────
TAVILY_API_KEY=
BRAVE_SEARCH_API_KEY=

# ──────────────────────────────────────────────────────────────────────
# Source-control credentials
# ──────────────────────────────────────────────────────────────────────
# GitHub personal access token — used by the claude-code agent and the
# `pr-review-github` example.
GH_TOKEN=

# Bitbucket — used by the `pr-review-bitbucket` and
# `jira-bugfix-bitbucket` examples.
BITBUCKET_EMAIL=
BITBUCKET_TOKEN=

# Jira — used by `jira-bugfix-*` examples.
JIRA_SITE=                    # e.g. acme.atlassian.net
JIRA_EMAIL=
JIRA_API_TOKEN=

# GitHub App — only needed if you host a hosted-mode GitHub integration.
# Each *_FILE points at a file on disk that contains the secret value.
# GITHUB_APP_ID_FILE=
# GITHUB_APP_CLIENT_ID_FILE=
# GITHUB_APP_CLIENT_SECRET_FILE=
# GITHUB_APP_PRIVATE_KEY_FILE=
# GITHUB_APP_INSTALLATION_URL=

# ──────────────────────────────────────────────────────────────────────
# Messaging integrations
# ──────────────────────────────────────────────────────────────────────
# Slack
SLACK_BOT_TOKEN=
SLACK_SIGNING_SECRET=
SLACK_APP_ID=

# Discord
DISCORD_BOT_TOKEN=
DISCORD_APPLICATION_ID=
DISCORD_PUBLIC_KEY=

# Telegram
TELEGRAM_BOT_TOKEN=
TELEGRAM_WEBHOOK_SECRET=

# Microsoft Teams
TEAMS_APP_ID=
TEAMS_APP_PASSWORD=
TEAMS_APP_TENANT_ID=
TEAMS_APP_TYPE=               # SingleTenant | MultiTenant

# WhatsApp Business
WHATSAPP_ACCESS_TOKEN=
WHATSAPP_APP_SECRET=
WHATSAPP_PHONE_NUMBER_ID=
WHATSAPP_VERIFY_TOKEN=

# Email — SendGrid is used for outbound notifications.
SENDGRID_FROM_EMAIL=
SENDGRID_FROM_NAME=
SENDGRID_SANDBOX_MODE=        # true | false (test mode, no real send)

# Google
GOOGLE_CALENDAR_ACCESS_TOKEN=
# GOOGLE_PROXY_URL=

# ──────────────────────────────────────────────────────────────────────
# Daemon configuration (all optional)
# ──────────────────────────────────────────────────────────────────────
# Where the daemon stores its state (sqlite db, artifacts, sessions).
# Defaults to ~/.atlas
# FRIDAY_HOME=

# Log level: debug | info | warn | error
FRIDAY_LOG_LEVEL=info

# Daemon HTTP API URL (used by the CLI to talk to the daemon).
# FRIDAY_URL=http://localhost:8080

# Show the internal "kernel" workspace in the picker. Off by default.
# FRIDAY_EXPOSE_KERNEL=0

# Runtime mode: `dev` auto-mints a local /api/* session and skips remote
# credential fetching (local-first UX). Any other value — including unset —
# requires a valid `friday_session` cookie or Bearer token and returns 401
# otherwise. Friday Studio and `atlas daemon start` set this to `dev`
# automatically; only set it explicitly for hand-rolled .env files.
# FRIDAY_ENV=dev

# Allow installing skills from remote registries (off by default in
# closed environments).
# FRIDAY_ALLOW_REMOTE_SKILLS=0

# Override CLI tool paths if they're not on PATH.
# FRIDAY_NODE_PATH=
# FRIDAY_NPX_PATH=
# FRIDAY_UV_PATH=
# FRIDAY_UVX_PATH=
# FRIDAY_CLAUDE_PATH=

# Where bundled and user-authored agents live on disk.
# AGENT_SOURCE_DIR=

# Where session/log files are written. Defaults to under FRIDAY_HOME.
# FRIDAY_LOGS_DIR=

# ──────────────────────────────────────────────────────────────────────
# Storage / persistence
# ──────────────────────────────────────────────────────────────────────
# Path to the `sqlite3` CLI binary used by the CSV→SQLite/DuckDB
# converter. Defaults to whatever `sqlite3` is on PATH.
# FRIDAY_SQLITE3_PATH=

# DuckDB path for analytics / activity views.
# FRIDAY_DUCKDB_PATH=

# Artifact and session storage. Adapter is `local` (default) or `gcs`.
# ARTIFACT_STORAGE_ADAPTER=local
# ARTIFACT_STORAGE_PATH=
# SESSION_STORAGE_PATH=

# Skill storage adapter — `local` (default) reads from local DB.
# SKILL_STORAGE_ADAPTER=local
# SKILL_LOCAL_DB_PATH=

# Postgres connection used by the `link` credential service in
# production. Local dev uses sqlite — leave this empty.
# POSTGRES_CONNECTION=

# ──────────────────────────────────────────────────────────────────────
# Link credential service
# ──────────────────────────────────────────────────────────────────────
# LINK_PORT=3100
# LINK_DB_PATH=
# LINK_KV_PATH=
# LINK_CALLBACK_BASE=https://localhost:3100
# LINK_DEV_MODE=0
# LINK_ALLOW_INSECURE_HTTP=0
# LINK_SERVICE_URL=http://localhost:3100

# JWT verification. The daemon requires a public key file to verify
# tokens minted by Link (or any IdP you configure).
# JWT_PUBLIC_KEY_FILE=
# LINK_JWT_PUBLIC_KEY_FILE=
# LINK_STATE_SIGNING_KEY_FILE=
# FRIDAY_CREDENTIALS_URL=

# ──────────────────────────────────────────────────────────────────────
# Observability
# ──────────────────────────────────────────────────────────────────────
# OpenTelemetry — point at an OTLP collector to ship traces.
# OTEL_EXPORTER_OTLP_ENDPOINT=
# ANALYTICS_OTEL_ENDPOINT=

# ──────────────────────────────────────────────────────────────────────
# Tunneling / webhooks (local dev)
# ──────────────────────────────────────────────────────────────────────
# Bind port for the webhook tunnel. Defaults to 9090.
# TUNNEL_PORT=9090
# TUNNEL_TOKEN=

# Disable the tunnel entirely (useful in CI).
# NO_TUNNEL=1

# Shared secret webhook receivers verify on inbound requests.
# WEBHOOK_SECRET=
# WEBHOOK_MAPPINGS_PATH=

# ──────────────────────────────────────────────────────────────────────
# Knowledge / corpus
# ──────────────────────────────────────────────────────────────────────
# Mount point for the knowledge base sqlite + corpus files.
# KNOWLEDGE_DATA_DIR=
# KNOWLEDGE_CORPUS_PATH=

# ──────────────────────────────────────────────────────────────────────
# Friday gateway / launcher (advanced)
# ──────────────────────────────────────────────────────────────────────
# Gateway URL the launcher and CLI use when running in hosted mode.
# FRIDAY_GATEWAY_URL=

# Where the friday-launcher stores its local state.
# FRIDAY_LAUNCHER_HOME=

# NATS URL for the internal messaging bus. Defaults to nats://localhost:4222.
# NATS_URL=