.env.example

# SenWeaverCoding Environment Variables
# Copy this file to `.env` and fill in your local values.
# Never commit `.env` or any real secrets.

# ── Quick Start (SenWeaver API) ──────────────────────────────
# SenWeaver provides a unified API gateway for all major models.
# Just set your API key below and pick a model — ready to go!
#
# Supported models: kimi-k2.5, deepseek-r1, claude-sonnet-4-6,
#   gpt-4o, gemini-2.5-pro, qwen3-235b, glm-5, and more.
#
# Get your API key at: https://senweaver.com
SENWEAVER_API_KEY=your_senweaver_api_key
SENWEAVER_BASE_URL=https://api3.senweaver.com/v1
PROVIDER=senweaver
SEN_MODEL=kimi-k2.5
# SEN_TEMPERATURE=0.7

# ── Core Runtime ──────────────────────────────────────────────
# Provider key resolution at runtime:
# 1) explicit key passed from config/CLI
# 2) provider-specific env var (OPENROUTER_API_KEY, OPENAI_API_KEY, ...)
# 3) generic fallback env vars below

# Generic fallback API key (used when provider-specific key is absent)
# API_KEY=your-api-key-here
# SEN_API_KEY=your-api-key-here

# Alternative providers (uncomment to switch from SenWeaver):
# PROVIDER=openrouter
# SEN_PROVIDER=openrouter
# SEN_MODEL=anthropic/claude-sonnet-4-6

# Workspace directory override
# SEN_WORKSPACE=/path/to/workspace

# Reasoning mode (enables extended thinking for supported models)
# SEN_REASONING_ENABLED=false
# REASONING_ENABLED=false

# ── Provider-Specific API Keys ────────────────────────────────
# OpenRouter
# OPENROUTER_API_KEY=sk-or-v1-...

# Anthropic
# ANTHROPIC_OAUTH_TOKEN=...
# ANTHROPIC_API_KEY=sk-ant-...

# OpenAI / Gemini
# OPENAI_API_KEY=sk-...
# GEMINI_API_KEY=...
# GOOGLE_API_KEY=...

# Other supported providers
# VENICE_API_KEY=...
# GROQ_API_KEY=...
# MISTRAL_API_KEY=...
# DEEPSEEK_API_KEY=...
# XAI_API_KEY=...
# TOGETHER_API_KEY=...
# FIREWORKS_API_KEY=...
# PERPLEXITY_API_KEY=...
# COHERE_API_KEY=...
# MOONSHOT_API_KEY=...
# GLM_API_KEY=...
# MINIMAX_OAUTH_TOKEN=...
# MINIMAX_API_KEY=...
# MINIMAX_OAUTH_REFRESH_TOKEN=...
# MINIMAX_OAUTH_REGION=global   # optional: global|cn
# QIANFAN_API_KEY=...
# DASHSCOPE_API_KEY=...
# ZAI_API_KEY=...
# SYNTHETIC_API_KEY=...
# OPENCODE_API_KEY=...
# OPENCODE_GO_API_KEY=...
# VERCEL_API_KEY=...
# CLOUDFLARE_API_KEY=...

# ── Gateway ──────────────────────────────────────────────────
# SEN_GATEWAY_PORT=3000
# SEN_GATEWAY_HOST=127.0.0.1
# SEN_ALLOW_PUBLIC_BIND=false

# ── Storage ─────────────────────────────────────────────────
# Backend override for persistent storage (default: sqlite)
# SEN_STORAGE_PROVIDER=sqlite

# ── Proxy ──────────────────────────────────────────────────
# Forward provider/service traffic through an HTTP(S) proxy.
# SEN_PROXY_ENABLED=false
# SEN_HTTP_PROXY=http://proxy.example.com:8080
# SEN_HTTPS_PROXY=http://proxy.example.com:8080
# SEN_ALL_PROXY=socks5://proxy.example.com:1080
# SEN_NO_PROXY=localhost,127.0.0.1
# SEN_PROXY_SCOPE=sen          # environment|sen|services
# SEN_PROXY_SERVICES=openai,anthropic

# ── Optional Integrations ────────────────────────────────────
# Pushover notifications (`pushover` tool)
# PUSHOVER_TOKEN=your-pushover-app-token
# PUSHOVER_USER_KEY=your-pushover-user-key

# ── Docker Compose ───────────────────────────────────────────
# Host port mapping (used by docker-compose.yml)
# HOST_PORT=3000

# ── Z.AI GLM Coding Plan ───────────────────────────────────────
# Z.AI provides GLM models through OpenAI-compatible endpoints.
# API key format: id.secret (e.g., abc123.xyz789)
#
# Usage:
#   sen onboard --provider zai --api-key YOUR_ZAI_API_KEY
#
# Or set the environment variable:
# ZAI_API_KEY=your-id.secret
#
# Common models: glm-5, glm-4.7, glm-4-plus, glm-4-flash
# See docs/zai-glm-setup.md for detailed configuration.

# ── Web Search ────────────────────────────────────────────────
# Web search tool for finding information on the internet.
# Enabled by default with DuckDuckGo (free, no API key required).
#
# WEB_SEARCH_ENABLED=true
# WEB_SEARCH_PROVIDER=duckduckgo
# WEB_SEARCH_MAX_RESULTS=5
# WEB_SEARCH_TIMEOUT_SECS=15
#
# Optional: Brave Search (requires API key from https://brave.com/search/api)
# WEB_SEARCH_PROVIDER=brave
# BRAVE_API_KEY=your-brave-search-api-key
#
# Optional: SearXNG (self-hosted, requires instance URL)
# WEB_SEARCH_PROVIDER=searxng
# SEARXNG_INSTANCE_URL=https://searx.example.com

# ── Guardrails ──────────────────────────────────────────────────
# Pre-tool-execution authorization layer.
# SEN_GUARDRAILS_ENABLED=false

# ── Plan Mode ───────────────────────────────────────────────────
# Structured planning with todo tracking for complex tasks.
# SEN_PLAN_MODE_ENABLED=false

# ── Auto Title ──────────────────────────────────────────────────
# Automatic conversation title generation.
# SEN_AUTO_TITLE_ENABLED=true

# ── Suggestions ─────────────────────────────────────────────────
# Contextual next-action suggestions after responses.
# SEN_SUGGESTIONS_ENABLED=true

# ── Self-Evolution & Reinforcement Learning ─────────────────────
# LLM-as-judge response quality evaluation (PRM-inspired).
# SEN_SELF_EVAL_ENABLED=false
# SEN_SELF_EVAL_VOTES=3
# SEN_SELF_EVAL_ACCEPT_THRESHOLD=0.6

# Multi-signal feedback collection and reward aggregation.
# SEN_FEEDBACK_ENABLED=false

# Experience replay for few-shot learning from past interactions.
# SEN_EXPERIENCE_ENABLED=false
# SEN_EXPERIENCE_CAPACITY=500

# Post-turn self-reflection for behavioral insights.
# SEN_SELF_REFLECTION_ENABLED=false
# SEN_SELF_REFLECTION_LLM=false

# Adaptive prompt optimization from feedback history.
# SEN_PROMPT_OPTIMIZER_ENABLED=false

# Tool/skill performance evolution tracking.
# SEN_SKILL_EVOLUTION_ENABLED=false

# Reinforcement learning engine for policy adjustment.
# SEN_REINFORCEMENT_ENABLED=false
# SEN_REINFORCEMENT_LEARNING_RATE=0.1
# SEN_REINFORCEMENT_ADAPTIVE_ROUTING=false
# SEN_REINFORCEMENT_ADAPTIVE_TEMPERATURE=false

# ── Token Optimization ──────────────────────────

# Tool output compression: shrink tool results before they enter context.
# SEN_TOOL_OUTPUT_COMPRESSOR_ENABLED=false
# SEN_TOOL_OUTPUT_COMPRESSOR_MAX_OUTPUT_CHARS=50000
# SEN_TOOL_OUTPUT_COMPRESSOR_STRIP_COMMENTS=true
# SEN_TOOL_OUTPUT_COMPRESSOR_DEDUP_LINES=true
# SEN_TOOL_OUTPUT_COMPRESSOR_JSON_COMPACT=true
# SEN_TOOL_OUTPUT_COMPRESSOR_ERROR_FOCUS=false
# SEN_TOOL_OUTPUT_COMPRESSOR_TEE_ENABLED=false

# Token budget management and allocation.
# SEN_TOKEN_BUDGET_ENABLED=false
# SEN_TOKEN_BUDGET_CONTEXT_WINDOW=128000
# SEN_TOKEN_BUDGET_SYSTEM_PROMPT_RATIO=0.15
# SEN_TOKEN_BUDGET_OUTPUT_RATIO=0.15
# SEN_TOKEN_BUDGET_COMPRESSION_THRESHOLD=0.75
# SEN_TOKEN_BUDGET_MAX_TOOL_RESULT_TOKENS=12000
# SEN_TOKEN_BUDGET_MAX_RAG_TOKENS=8000

# ── RBAC (Role-Based Access Control) ──
# SEN_RBAC_ENABLED=false
# SEN_RBAC_DEFAULT_ROLE=viewer
# SEN_RBAC_CLI_IS_ADMIN=true
# SEN_RBAC_PAIRING_TOKEN_ROLE=operator

# YouTube search (optional API key for higher quota).
# YOUTUBE_API_KEY=