Nawab-OS/.env.example at main · Vinayak-RZ/Nawab-OS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
TELEGRAM_BOT_TOKEN=
GROQ_API_KEY=
GOOGLE_GEMINI_API_KEY=
OPENAI_API_KEY=
GMAIL_ADDRESS=
GMAIL_APP_PASSWORD=
MY_TELEGRAM_USER_ID=
# Open the bot to ANYONE who messages it (false = only MY_TELEGRAM_USER_ID).
# WARNING: public users share the SAME brain, CRM, inbox and approval queue —
# enable only for a demo bot, ideally with AUTONOMY_LEVEL=cautious. See README.
PUBLIC_ACCESS=false
SERPER_API_KEY=
TAVILY_API_KEY=
MY_NAME=
MY_COMPANY_NAME=
MY_ROLE=
MY_ONE_LINER=

# ── Knowledge vault object storage (large docs) ────────────
# Full document payloads: S3 when configured, else ./data/vault-objects/
AWS_S3_BUCKET=
AWS_REGION=us-east-1
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
# Local vault folder tree (facet folders + README stubs)
KNOWLEDGE_VAULT_ROOT=./data/knowledge
VAULT_OBJECT_ROOT=./data/vault-objects

# ── GitHub (optional — link repos to worlds) ─────────────
# Create an OAuth App at https://github.com/settings/developers
# Authorization callback URL must match GITHUB_REDIRECT_URI exactly.
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
GITHUB_TOKEN_PATH=./data/github_token.json
GITHUB_REDIRECT_URI=http://127.0.0.1:8787/api/github/callback

# ── Qdrant Cloud (vector memory) ─────────────────────────
# All semantic memory (conversations, research, notes, documents, LLM cache).
# Create a cluster at https://cloud.qdrant.io and copy URL + API key.
QDRANT_URL=
QDRANT_API_KEY=
# Optional prefix for collection names on a shared cluster (e.g. founder_os).
QDRANT_COLLECTION_PREFIX=

# ── Autonomy ─────────────────────────────────────────────
# If true, the agent executes risky actions (send email, post to X, delete
# calendar events) WITHOUT asking. Default false = approval-gated.
AUTO_APPROVE=false
# How often (hours) the proactive heartbeat runs between 09:00-21:00.
HEARTBEAT_HOURS=4
# Autonomy level: cautious (gate writes too) | balanced (default) | autonomous (no gate).
AUTONOMY_LEVEL=balanced
# Daily safety cap on LLM calls (0 = unlimited). Protects against runaway loops.
DAILY_LLM_CALL_CAP=0
# Kill switch: if true, the agent will not act (no model calls, no autonomy).
AGENT_PAUSED=false
# Speak responses back as audio when you message by voice (needs gTTS installed).
VOICE_REPLIES=true

# ── Web UI (primary interface) ───────────────────────────
# Full web dashboard + chat at http://localhost:<port>. Works without Telegram.
WEB_UI_ENABLED=true
WEB_HOST=127.0.0.1
DASHBOARD_PORT=8787
# Production (EC2 behind nginx): PUBLIC_BASE_URL=https://your-domain.com BEHIND_PROXY=true
PUBLIC_BASE_URL=
BEHIND_PROXY=false
# 6-digit PIN for web UI (leave empty for local dev without PIN)
DASHBOARD_PIN=
FLASK_SECRET_KEY=
# Persistent data root on EC2 EBS (see deploy/aws/README.md)
FOUNDER_OS_DATA=./data

# ── Telegram (optional channel) ──────────────────────────
# Set true only if you also want the Telegram bot. Requires TELEGRAM_BOT_TOKEN + MY_TELEGRAM_USER_ID.
TELEGRAM_ENABLED=false

# ── Local model (Ollama, optional) ───────────────────────
# Free, private, offline fallback. Install Ollama + pull a model first.
OLLAMA_ENABLED=false
OLLAMA_BASE_URL=http://localhost:11434/v1
OLLAMA_MODEL=llama3.1

# ── Semantic cache ─────────────────────────────────────
# Cache near-duplicate LLM prompts to save tokens (default on).
SEMANTIC_CACHE=true
CACHE_DISTANCE_THRESHOLD=0.08

# ── Tool-RAG ───────────────────────────────────────────
# Retrieve only the most relevant tools per turn (cheaper, sharper tool choice).
# TOOL_RAG_K = how many tools to retrieve before adding the always-on core set.
TOOL_RAG=true
TOOL_RAG_K=16

# ── Google Calendar (optional) ───────────────────────────
# Put your OAuth client secret JSON at GOOGLE_CREDENTIALS_PATH, then run:
#   python scripts/google_auth.py
GOOGLE_CREDENTIALS_PATH=./data/google_credentials.json
GOOGLE_TOKEN_PATH=./data/google_token.json

# ── X / Twitter (optional, paid API for meaningful access) ─
X_API_KEY=
X_API_SECRET=
X_ACCESS_TOKEN=
X_ACCESS_TOKEN_SECRET=
X_BEARER_TOKEN=

# ── WhatsApp (optional — Baileys linked-device bridge) ───
WHATSAPP_ENABLED=false
WHATSAPP_BRIDGE_URL=http://127.0.0.1:3100
WHATSAPP_BRIDGE_SECRET=
WHATSAPP_ALWAYS_REQUIRE_APPROVAL=true
WHATSAPP_DEFAULT_REGION=GB