.env.example

# Every environment variable the services read. Copy only the variables a service needs to its own
# env file, for example `.env.api`, and pass it with `pnpm exec tsx --env-file=.env.api src/api.ts`.
# `render workflows dev` loads .env by default: keep API-only secrets out of that shared file. On
# Render, set variables on the services that need them (see render.yaml and docs/1_EXTENSION.md).

# ── API service ───────────────────────────────────────────────────────────
# Shared with API callers for authentication.
API_TOKEN=
# API only: at least 32 characters, different from API_TOKEN. Keep stable across restarts/replicas.
# Never give this signing secret to the workflow or CLI clients. Rotating it invalidates question IDs.
QUESTION_ID_SECRET=
# WORKFLOW_SLUG=codebase-researcher-workflow
# PORT=3000
# Points the API at `render workflows dev` instead of Render; RENDER_API_KEY is then optional.
# RENDER_LOCAL_DEV_URL=http://localhost:8121

# ── `pnpm ask` ──────────────────────────────────────────────────────────
# API_URL=http://localhost:3000
# (also reads API_TOKEN)

# ── Workflow ─────────────────────────────────────────────────────────────
RENDER_API_KEY=
# RENDER_WORKSPACE_ID=
MODEL_PROVIDER=anthropic
MODEL=claude-opus-5
ANTHROPIC_API_KEY=
# THINKING_LEVEL=medium
# Defaults to render on Render and local elsewhere.
# SANDBOX_PROVIDER=render
SANDBOX_NETWORK_POLICY=allow-list
# Comma-separated HTTPS egress hosts; a wildcard is allowed only as the leftmost label.
# Unset defaults to the selected model provider's API host.
# An override must retain the model provider host so the agent can call the model.
# SANDBOX_ALLOWED_DOMAINS=api.anthropic.com,api.github.com,*.pypi.org
# SANDBOX_TIMEOUT_SECONDS=1800
# SNAPSHOT_NAME=
# AGENT_TIMEOUT_MS=900000
# Deadline for opening a Render investigation Sandbox: restore, boot, verify.sh, and reading its manifest.
# SANDBOX_PROVISION_TIMEOUT_MS=300000
# REPOS=render-oss/cli,render-oss/sdk
# Origins callbacks may be POSTed to; unset turns callbacks off. http://localhost:<port> works locally.
# CALLBACK_ALLOWED_ORIGINS=https://hooks.example.com

# ── Snapshot refresh cron ────────────────────────────────────────────────
GITHUB_TOKEN=

# ── Local development ───────────────────────────────────────────────────
# LOCAL_REPOS_ROOT=.scratch/repos
# Appended to the auto-bundled runner's command; --faux runs without a model.
# LOCAL_RUNNER_ARGS=--faux

# ── Tests ────────────────────────────────────────────────────────────────
# With a provider and its key var (e.g. ANTHROPIC_API_KEY) set, `pnpm test` also runs a live smoke test
# of the runner against that provider. LIVE_MODEL overrides the test's default model for it.
# LIVE_MODEL_PROVIDER=anthropic
# LIVE_MODEL=