.env.example

# Read by `docker compose` only — the CLI never reads this file, just its own environment. Copy to
# `.env`, then set the two required values:
#
#   cp .env.example .env
#   echo "KATARI_API_KEY=$(openssl rand -hex 32)"    >> .env
#   echo "KATARI_SECRET_KEY=$(openssl rand -base64 32)" >> .env

# The API key callers authenticate with (sent as a Bearer token). Required — the runtime refuses to
# boot without it. The web console prompts for it on first use; the CLI wants it exported in the
# shell you run `katari` from (`export $(grep '^KATARI_API_KEY=' .env)`).
KATARI_API_KEY=

# At-rest encryption key for secret values (base64, 32 bytes). Separate from the API key above.
KATARI_SECRET_KEY=

# Host port the runtime (API + web console) is published on. Change it if 3000 is taken, and point
# [runtime].url in katari.toml at the same port.
KATARI_PORT=3000

# Where the CLI reaches the runtime, overriding [runtime].url in katari.toml. Compose ignores this
# one: export it in your shell to point the CLI at a remote deployment.
KATARI_API_URL=http://localhost:3000

# NOTE: the bot's own configuration does NOT go in this file — it lives IN the runtime, set with
# `katari env set` after `docker compose up`. The program reads it with `env.get` / `env.get_secret`.
#
# The two secrets (set with --secret; the CLI prompts for the value):
#   DISCORD_TOKEN      required — the bot token, MESSAGE CONTENT intent enabled (see the README)
#   ANTHROPIC_API_KEY  required — the curator's model key
#
# The non-secret config (set without --secret):
#   WATCH_CHANNEL   required — the Discord channel id the bot serves: the curator listens there and
#                   release announcements are posted there. The bot refuses to start without it.
#   POLL_MINUTES    optional — minutes between polls of the watched repositories (default 10). Read
#                   once at run start, so re-run the agent after changing it. Unauthenticated GitHub
#                   allows 60 requests an hour: keep (60 / POLL_MINUTES) * watched repositories
#                   under that, or every check will show rate-limit failures until it clears.