.env.example

# Instance auth: /services/* is always gated on the api_key callers send, looked
# up in lightning_clients via APOLLO_CLIENTS_DB_URL (falls back to POSTGRES_URL).
# A known client swaps in its stored Anthropic key; an unknown sk-ant- key is
# forwarded. See platform/src/auth/README.md.

# Database holding the lightning_clients credentials table. Leave unset locally to
# share POSTGRES_URL (one DB for everything). In production point this at a separate
# credentials DB so client secrets don't co-locate with the docs data. The TS auth
# code, `bun run migrate`, and the `client` CLI all resolve this var; the Python docs
# services always use POSTGRES_URL.
# APOLLO_CLIENTS_DB_URL=postgresql://localhost:5432/apollo_clients

# Optional at-rest encryption for stored client Anthropic keys. Base64 of 32 bytes
# (openssl rand -base64 32). See platform/src/auth/README.md.
# APOLLO_ENC_KEY=

# Shared secret for internal Apollo-to-Apollo apollo() calls. In production set
# this to the SAME value across all processes — it is what lets self-calls through
# the gate, and the global ANTHROPIC_API_KEY is a dev-only fallback. If unset,
# each process mints its own token, which only works single-process-per-host.
# APOLLO_INTERNAL_TOKEN=

# Which characters a workflow step name may contain. Apollo sanitises step names
# on the way out and Lightning validates them on the way in, so the two rules
# have to agree.
#
#   false (the default)  ASCII only: letters, digits, spaces, hyphens and
#                        underscores. Accents are folded (Café -> Cafe) and
#                        anything else is dropped. Matches the rule Lightning
#                        enforces today.
#   true                 Anything except control characters: letters and marks
#                        from any script, all punctuation and symbols, emoji,
#                        / : > & and quotes. Vérifier l'état and 患者確認
#                        survive exactly as typed.
#
# Leave this off until Lightning ships its Unicode step names (Lightning#4577),
# then turn it on. Turning it on first means Apollo emits names Lightning
# rejects; leaving it off afterwards means Apollo renames steps people typed
# deliberately.
#
# Both modes reject the same control set and nothing else: C0 (U+0000-U+001F,
# NUL included), DEL (U+007F), C1 (U+0080-U+009F), U+FFFE / U+FFFF, the
# surrogates U+D800-U+DFFF, and the separators U+2028 / U+2029. Names
# are NFC-normalised and capped at 100 graphemes in both modes.
# See services/name_rules.py.
APOLLO_UNICODE_STEP_NAMES=false

# Max concurrent service calls bridge.ts runs at once, per Apollo process
# (python or TypeScript - not python-specific). Calls past this cap queue in
# FIFO order rather than running immediately. Defaults to 10.
# See platform/src/util/python-queue.ts.
# APOLLO_CONCURRENCY=10

# How long a queued call waits for a free slot before giving up (ms).
# Defaults to 5 minutes.
# APOLLO_QUEUE_TIMEOUT_MS=300000

ANTHROPIC_API_KEY=sk-YOUR-API-KEY-HERE

OPENAI_API_KEY=sk-YOUR-API-KEY-HERE
PINECONE_API_KEY=YOUR-API-KEY-HERE
POSTGRES_URL=postgresql://localhost:5432/apollo_dev
# Leave empty to run without Sentry. A placeholder value is not ignored: any
# non-URL DSN makes sentry_sdk.init raise BadDsn and kills every Python service.
SENTRY_DSN=
GITHUB_TOKEN=KEY

# Which backend serves docsite search reads: 'pinecone' (default) or 'postgres'.
DOCSITE_SEARCH_BACKEND=pinecone

# Database for the Postgres docsite integration suite
POSTGRES_TEST_URL=postgresql://postgres:postgres@127.0.0.1:5433/postgres

# Langfuse observability
LANGFUSE_SECRET_KEY=sk-lf-...
LANGFUSE_PUBLIC_KEY=pk-lf-...
LANGFUSE_BASE_URL=https://cloud.langfuse.com

# HF_ACCESS_TOKEN=hf_YOUR-API-KEY-HERE # llama2 base
# ZILLIZ_URI =  https://in01-XXXXXXXXXXXXX.aws-us-west-2.vectordb.zillizcloud.com:XXXXX
# ZILLIZ_TOKEN =db_admin:password (or ApiKey)

# Turn this on to use the fork server mechanism
# APOLLO_FORK_SERVER=true

# macOS only: required when APOLLO_FORK_SERVER=true
# OBJC_DISABLE_INITIALIZE_FORK_SAFETY=YES