NarraNexus/.env.example at main · NetMindAI-Open/NarraNexus · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
# =============================================================================
# LLM API Keys
# =============================================================================
OPENAI_API_KEY=""
GOOGLE_API_KEY=""

# Anthropic（可选）：填写 API Key 则走 API Key 模式，留空/删除则走 Claude Code OAuth 登录
# ANTHROPIC_API_KEY=""
# ANTHROPIC_BASE_URL=""

# =============================================================================
# Database (MySQL)
# =============================================================================
# 方式一：使用 DATABASE_URL
# DATABASE_URL="mysql://root:xyz_root_pass@127.0.0.1:3306/xyz_agent_context"

# 方式二：使用独立变量（推荐，run.sh install 会自动填充 Docker MySQL 默认值）
DB_HOST="127.0.0.1"
DB_PORT=3306
DB_NAME="xyz_agent_context"
DB_USER="root"
DB_PASSWORD="xyz_root_pass"

# =============================================================================
# Auth
# =============================================================================
ADMIN_SECRET_KEY=""

# -----------------------------------------------------------------------------
# NetMind ("Power") account login — local dual-mode (optional)
# -----------------------------------------------------------------------------
# A local install can, in addition to the always-available pure-local username
# login, let users sign in with their NetMind ("Power") account to use their
# recharged plan / quota. This is OFF by default (open-source installs stay
# username-only). Uncomment the block below to enable it; the endpoints here
# point at the protago-DEV environment (retarget for prod). Design:
# .mindflow/mirror/src/xyz_agent_context/utils/deployment_mode.py.md
#
# NARRANEXUS_ENABLE_POWER_LOGIN=true          # show the Power login option
# NETMIND_USE_SUBSCRIPTION_ENABLED=true       # mint the Power inference key on login
# NETMIND_AUTH_API_URL=https://userauth.protago-dev.com
# BILLING_API_BASE=https://billing.api.protago-dev.com
# NETMIND_KEY_API_BASE=https://mind-web.protago-dev.com
# NETMIND_INFERENCE_BASE=https://test.api.netmind.ai/inference-api
# The frontend build/dev must also see VITE_ENABLE_POWER_LOGIN=true (dev-local.sh
# sets it automatically; for a desktop build pass it to `npm run build`).

# =============================================================================
# Workspace（可选，有默认值）
# =============================================================================
# BASE_WORKING_PATH="./agent_workspace"

# =============================================================================
# Public origin（cloud 建议设置；影响安全）
# =============================================================================
# The public origin this deployment is served on (scheme://host). Consumed by
# settings.public_base_url for:
#   1. the artifact URL-tab self-origin guard — refuses opening a URL tab that
#      points at our own origin (which would become a same-origin scriptable
#      iframe able to read the app's token). WITHOUT this set, the cloud guard
#      falls back to the request-derived origin from the HTTP route; setting it
#      explicitly makes the guard robust for the MCP (agent-opened) path too.
#   2. the mixed-content embed check, and NetMind transcription signed URLs.
#   3. the post-payment return target for NetMind/Stripe checkout
#      (backend/routes/billing.py::_return_urls). Must be an https URL on a
#      PUBLIC host; anything else (http, or a loopback/private/single-label
#      host) keeps NetMind's own result page, so the payer finishes on a domain
#      they have never seen. Two reasons for that strictness, both measured:
#      NetMind's edge answers 403 for a loopback/private host on any scheme
#      (which our layer surfaces as a misleading 401), and Stripe's live-mode
#      behavior with a plain-http return URL is unverified. Being wrong there
#      would break checkout itself, not just the redirect — so a local install
#      (`bash run.sh`, http://localhost) deliberately gets no redirect.
# Local dev can leave it empty (localhost URLs are rejected by the SSRF rule).
# PUBLIC_BASE_URL="https://agent.narra.nexus"

# -----------------------------------------------------------------------------
# Product feedback telemetry
# -----------------------------------------------------------------------------
# The agent's submit_feedback tool and the Web UI feedback dialog report
# problems to the NarraNexus team's central intake. What leaves the machine:
# a one-line problem SUMMARY written by the agent/user, a category/severity,
# and sha256-HASHED agent/user ids — never conversation text, never raw ids.
# Set to 1 to disable all outbound feedback (self-hosted opt-out):
# NARRANEXUS_FEEDBACK_DISABLED=1
# Point at a different intake (dev/test environments):
# NARRANEXUS_FEEDBACK_URL=