.env.example

API_HOST=127.0.0.1
API_PORT=8787
WEB_HOST=127.0.0.1
WEB_PORT=3000

# LLM_* values are optional server-side defaults. Models can also be created in the Web UI after deploy.
LLM_PROVIDER=openai-compatible
LLM_MODEL=qwen-plus
LLM_BASE_URL=https://dashscope.aliyuncs.com/compatible-mode/v1
LLM_API_KEY=

# Optional Agent runtime limit overrides. Defaults and safe ranges are defined in
# packages/agent-runtime/src/config/agent-runtime-limits.ts.
# DATAFOUNDRY_AGENT_MAX_STEPS=80
# DATAFOUNDRY_SQL_MAX_EXECUTION_COUNT=60
# DATAFOUNDRY_DATA_ANALYSIS_MAX_PROTOCOL_ACTIONS=500
# DATAFOUNDRY_GENERAL_TASK_MAX_PROTOCOL_ACTIONS=100
# DATAFOUNDRY_PROTOCOL_DEFAULT_MAX_ACTIONS=100
# DATAFOUNDRY_PROTOCOL_MAX_COMPLETION_REJECTIONS=3
# DATAFOUNDRY_PROTOCOL_MAX_COMMIT_RETRIES=8
# DATAFOUNDRY_PROTOCOL_AUTOMATIC_ACTION_MAX_DEPTH=10
# DATAFOUNDRY_SCHEMA_MAX_TABLES=20
# DATAFOUNDRY_SCHEMA_MAX_COLUMNS_PER_TABLE=50
# DATAFOUNDRY_SQL_MAX_MODEL_ROWS=20
# DATAFOUNDRY_SQL_MAX_ACTIVITY_ROWS=20
# DATAFOUNDRY_SQL_MAX_CELL_CHARS=500
# DATAFOUNDRY_SQL_MAX_SQL_CHARS=4000
# DATAFOUNDRY_CONTEXT_MAX_TOKENS=32000
# DATAFOUNDRY_CONTEXT_MAX_CHARS=32000
# DATAFOUNDRY_TOOL_ERROR_MAX_MESSAGE_CHARS=500
# DATAFOUNDRY_KNOWLEDGE_MAX_TOP_K=20
# DATAFOUNDRY_REQUIREMENT_COMMIT_MAX_CLAIMS=16
# DATAFOUNDRY_REQUIREMENT_COMMIT_MAX_OUTPUT_FIELDS=32
# DATAFOUNDRY_MODEL_HELPER_MAX_STEPS=1
# DATAFOUNDRY_PROTOCOL_CLASSIFIER_MAX_OUTPUT_TOKENS=512
# DATAFOUNDRY_REQUIREMENT_EXTRACTOR_MAX_OUTPUT_TOKENS=4096
# DATAFOUNDRY_CONTRACT_GROUNDER_MAX_OUTPUT_TOKENS=8192
# DATAFOUNDRY_CONTRACT_GROUNDER_MAX_ATTEMPTS=2
# DATAFOUNDRY_TOOL_OBSERVATION_MAX_NAMES=5
# DATAFOUNDRY_TOOL_OBSERVATION_MAX_NAME_CHARS=120
# DATAFOUNDRY_TOOL_OBSERVATION_MAX_CHARS=12000

EMBEDDING_PROVIDER=bailian
EMBEDDING_MODEL=text-embedding-v4
EMBEDDING_DIM=1024
EMBEDDING_OUTPUT_TYPE=dense
EMBEDDING_BASE_URL=https://dashscope.aliyuncs.com/compatible-mode/v1
EMBEDDING_API_KEY=

# Agent execute_command sandbox: Python venv with numpy/pandas/matplotlib/scikit-learn.
# Default auto-detects repo `.venv` (also checks npm INIT_CWD). Override with absolute path:
# WORKSPACE_PYTHON_VENV=/path/to/DataFoundry/.venv
# WORKSPACE_COMMAND_TIMEOUT_MS=120000

STORAGE_ROOT_DIR=storage
METADATA_DB_PATH=storage/metadata/workbench.sqlite
SECRET_MASTER_KEY=replace-with-a-long-random-local-key

# ---------------------------------------------------------------------------
# Formal deploy (default): password + build/start. Do NOT use npm run dev here.
#
#
# Two formal environments share the same start commands; differ mainly here:
#
#   Formal test (local / private acceptance):
#     AUTH_PUBLIC_BASE_URL=http://127.0.0.1:3000
#     AUTH_EMAIL_DELIVERY=test          # verification links → API console
#
#   Real production (public service):
#     AUTH_PUBLIC_BASE_URL=https://datafoundry.example.com
#     AUTH_EMAIL_DELIVERY=smtp          # fill AUTH_SMTP_* below
#     + reverse proxy: deploy/nginx.datafoundry.conf.example
#
# ---------------------------------------------------------------------------
AUTH_SESSION_SECRET=replace-with-at-least-32-random-characters
AUTH_PUBLIC_BASE_URL=http://127.0.0.1:3000
# Required in password mode (open|closed). open = self-register; closed = REGISTRATION_CLOSED.
# Exposed via GET /api/v1/auth/status (no secrets). Do not use AUTH_EMAIL_DELIVERY=test
# with a non-loopback AUTH_PUBLIC_BASE_URL.
AUTH_REGISTRATION_MODE=open
# Required when set: only smtp|test. test = log links to console; smtp = send real email.
AUTH_EMAIL_DELIVERY=test
AUTH_EMAIL_FROM=DataFoundry <no-reply@example.com>
AUTH_SMTP_HOST=smtp.example.com
AUTH_SMTP_PORT=587
AUTH_SMTP_SECURE=false
AUTH_SMTP_USER=
AUTH_SMTP_PASSWORD=

# Next.js BFF (apps/web) → API. Set this in apps/web/.env.local (not required in root .env).
# Used in password / formal mode when the browser calls same-origin `/api/v1/*` and `/api/copilotkit`.
# API_PROXY_TARGET=http://127.0.0.1:8787

SQL_DEFAULT_LIMIT=100
SQL_MAX_LIMIT=1000
SQL_TIMEOUT_MS=10000