.env.example

# --- Inkbox identity (required) ---
INKBOX_API_KEY=ApiKey_xxxxxxxxxxxx
INKBOX_IDENTITY=my-agent-handle
INKBOX_SIGNING_KEY=whsec_xxxxxxxxxxxx

# --- Inkbox (optional) ---
# INKBOX_BASE_URL=https://inkbox.ai
# INKBOX_PUBLIC_URL=https://your-public-host.example   # omit to use an Inkbox tunnel
# INKBOX_TUNNEL_NAME=my-agent-handle
# INKBOX_ALLOW_ALL_USERS=true                          # rely on Inkbox contact rules
# INKBOX_ALLOWED_USERS=+15551234567,me@example.com     # optional local allowlist
# INKBOX_REQUIRE_SIGNATURE=true
# INKBOX_CONTACT_MEMORIES_ENABLED=true                # add prior-contact memories to inbound context
# INKBOX_BRIDGE_PORT=8767
# INKBOX_CODEX_AUTO_APPROVE_INKBOX_TOOLS=true          # skip per-call prompts for Inkbox MCP tools only

# --- Phone call voice stack ---
# INKBOX_VOICE_STACK=inkbox_tts_stt                    # inkbox_voice_ai | openai_realtime | inkbox_tts_stt
# INKBOX_VOICE_AI_AUTHORITY_MODE=contact_scoped        # contact_scoped | yolo
# INKBOX_VOICEMAIL_DETECTION=enabled                   # enabled | disabled

# --- Realtime voice (optional; requires INKBOX_VOICE_STACK=openai_realtime) ---
# INKBOX_REALTIME_ENABLED=true
# INKBOX_REALTIME_API_KEY=sk-realtime
# OPENAI_API_KEY=sk-openai-fallback
# INKBOX_REALTIME_MODEL=gpt-realtime-2
# INKBOX_REALTIME_VOICE=cedar
# INKBOX_REALTIME_FALLBACK_TO_INKBOX_STT_TTS=true

# --- External webhook events (optional) ---
# INKBOX_EXTERNAL_EVENTS_ENABLED=true                  # wake the agent on unrecognised webhooks
# INKBOX_WEBHOOK_SECRET_GITHUB=gh_webhook_secret       # per-provider verification secret
# INKBOX_WEBHOOK_SECRET_MOCK=replace-with-random-value # direct header secret for curl/test events

# --- Codex ---
CODEX_PROJECT_DIR=/path/to/the/repo/codex/should/work/in
# CODEX_MODEL=gpt-5.4
# CODEX_BIN=codex
# CODEX_SANDBOX=workspace-write
# CODEX_APPROVAL_POLICY=on-request
# INKBOX_PERMISSION_TIMEOUT_S=600