runtime.env.example

# Runtime environment variables passed into the fleet controller container.
# Use newly issued keys here, not keys that have already been exposed.

# Shared API key for one or more api_key accounts:
OPENAI_API_KEY=replace-with-a-newly-issued-key

# Example per-alias key names if you want different accounts to use different keys:
# ACCT_CORE_A_KEY=replace-with-a-newly-issued-key
# ACCT_UI_A_KEY=replace-with-a-newly-issued-key

# Shared operator auth for the browser-facing admin and studio surfaces.
FLEET_OPERATOR_AUTH_REQUIRED=true
FLEET_OPERATOR_USER=operator
FLEET_OPERATOR_PASSWORD=replace-with-a-strong-password

# Shared internal bridge secret for Hub -> Fleet participant-lane control.
FLEET_INTERNAL_API_TOKEN=replace-with-a-strong-shared-secret

# Hub support-case truth that Fleet materializes into SUPPORT_CASE_PACKETS.generated.json.
# In the default local stack, chummer.run-services is published on the host at :8091.
FLEET_SUPPORT_CASE_SOURCE=http://host.docker.internal:8091/api/v1/support/cases/triage

# Optional: registry-owned release-channel runtime truth for publish readiness and cockpit surfaces.
# If omitted, Fleet falls back to the committed registry manifest under chummer6-hub-registry.
CHUMMER_HUB_REGISTRY_BASE_URL=http://host.docker.internal:18091
# Optional: override the exact current-release endpoint instead of deriving it from the base URL.
CHUMMER_RELEASE_REGISTRY_CURRENT_URL=

# Optional: credential OODA and mail alerts.
FLEET_CREDENTIAL_ALERT_FROM=fleet@chummer.run
FLEET_CREDENTIAL_ALERT_TO=
FLEET_SMTP_HOST=
FLEET_SMTP_PORT=587
FLEET_SMTP_USERNAME=
FLEET_SMTP_PASSWORD=
FLEET_SMTP_STARTTLS=true
FLEET_SMTP_SSL=false
# Example BrowserAct / EA repair hook:
# FLEET_CREDENTIAL_REPAIR_COMMAND=bash /docker/fleet/scripts/repair_fleet_credential.sh
FLEET_CREDENTIAL_REPAIR_COMMAND=bash /docker/fleet/scripts/repair_fleet_credential.sh
FLEET_CREDENTIAL_REPAIR_TIMEOUT_SECONDS=240
# Optional: BrowserAct/OpenAI recovery command the repair hook can invoke after local fallback keys are exhausted.
FLEET_OPENAI_BROWSERACT_REPAIR_COMMAND=
# Optional: additional env files the repair hook should scan for OPENAI_API_KEY* candidates.
FLEET_OPENAI_REPAIR_ENV_PATHS=/docker/.env:/docker/fleet/.env:/docker/EA/.env:/docker/chummer5a/.env:/docker/chummer5a/.env.providers

# Daily refresh for the containerized Codex CLI in fleet-controller and fleet-studio.
FLEET_REBUILD_ENABLED=true
FLEET_REBUILD_HOUR_UTC=04
FLEET_REBUILD_MINUTE_UTC=15
FLEET_REBUILD_SERVICES=fleet-controller fleet-studio fleet-quartermaster fleet-dashboard
FLEET_REBUILD_REFRESH_TOKEN_GRANULARITY=day
FLEET_REBUILD_CANARY_ENABLED=true
FLEET_REBUILD_CANARY_SERVICES=fleet-controller
FLEET_REBUILD_CANARY_TIMEOUT_SECONDS=180
FLEET_AUTOHEAL_ENABLED=true
FLEET_AUTOHEAL_SERVICES="fleet-controller fleet-dashboard"
FLEET_AUTOHEAL_THRESHOLD=2
FLEET_AUTOHEAL_COOLDOWN_SECONDS=300
FLEET_AUTOHEAL_TIMEOUT_SECONDS=120
FLEET_CONTROLLER_HEARTBEAT_MAX_AGE_SECONDS=45
FLEET_COMPOSE_PROJECT_NAME=fleet
FLEET_AUTOHEAL_ESCALATE_AFTER_RESTARTS=3
FLEET_AUTOHEAL_ESCALATE_WINDOW_SECONDS=1800

# Optional: steer the long-running Chummer design supervisor and/or pin its account pool.
CHUMMER_DESIGN_SUPERVISOR_ACCOUNT_OWNER_IDS=
CHUMMER_DESIGN_SUPERVISOR_ACCOUNT_ALIASES=
CHUMMER_DESIGN_SUPERVISOR_DYNAMIC_ACCOUNT_ROUTING=auto
CHUMMER_DESIGN_SUPERVISOR_PREFER_FULL_EA_LANES=1
CHUMMER_DESIGN_SUPERVISOR_PIN_ACCOUNT_ALIASES=0
CHUMMER_DESIGN_SUPERVISOR_FOCUS_PROFILE=
CHUMMER_DESIGN_SUPERVISOR_FOCUS_OWNER=
CHUMMER_DESIGN_SUPERVISOR_FOCUS_TEXT=
CHUMMER_DESIGN_SUPERVISOR_WORKER_BIN=/docker/fleet/scripts/codex-shims/codexea
CHUMMER_DESIGN_SUPERVISOR_WORKER_LANE=core
CHUMMER_DESIGN_SUPERVISOR_CORE_RESPONSES_PROFILE=
CHUMMER_DESIGN_SUPERVISOR_WORKER_MODEL=ea-coder-hard
CHUMMER_DESIGN_SUPERVISOR_FALLBACK_MODELS=ea-coder-hard
CHUMMER_DESIGN_SUPERVISOR_FALLBACK_LANES=core_rescue
CHUMMER_DESIGN_SUPERVISOR_OPENAI_ESCAPE_ACCOUNT_ALIASES=
CHUMMER_DESIGN_SUPERVISOR_OPENAI_ESCAPE_ACCOUNT_OWNER_IDS=
CHUMMER_DESIGN_SUPERVISOR_OPENAI_ESCAPE_MODELS=ea-coder-hard
CHUMMER_DESIGN_SUPERVISOR_EA_PROVIDER_HEALTH_URL=http://host.docker.internal:8090/v1/responses/_provider_health
CHUMMER_DESIGN_SUPERVISOR_EA_PROVIDER_HEALTH_TIMEOUT_SECONDS=4
# Optional: keep at least 2 GiB of host RAM free before idle supervisor shards dispatch more work.
CHUMMER_DESIGN_SUPERVISOR_MEMORY_DISPATCH_RESERVE_GIB=2
# Optional: approximate per-shard RAM budget used by the host memory dispatcher when multiple shards are live.
CHUMMER_DESIGN_SUPERVISOR_MEMORY_DISPATCH_SHARD_BUDGET_GIB=0.28
CHUMMER_DESIGN_SUPERVISOR_STREAM_IDLE_TIMEOUT_MS=
CHUMMER_DESIGN_SUPERVISOR_STREAM_MAX_RETRIES=
CHUMMER_DESIGN_SUPERVISOR_WORKER_TIMEOUT_SECONDS=
# Required for parallel shards: this must point to a shared aggregate state directory so shards can be sliced.
CHUMMER_DESIGN_SUPERVISOR_STATE_ROOT=
CHUMMER_DESIGN_SUPERVISOR_PARALLEL_SHARDS=1
CHUMMER_DESIGN_SUPERVISOR_SHARD_OWNER_GROUPS=
CHUMMER_DESIGN_SUPERVISOR_SHARD_FRONTIER_ID_GROUPS=
CHUMMER_DESIGN_SUPERVISOR_SHARD_FOCUS_TEXT_GROUPS=
CHUMMER_DESIGN_SUPERVISOR_SHARD_WORKER_BINS=
CHUMMER_DESIGN_SUPERVISOR_SHARD_WORKER_LANES=core;core;core;core;core;core;core;core;core;core;core;core;core
CHUMMER_DESIGN_SUPERVISOR_SHARD_WORKER_MODELS=ea-coder-hard;ea-coder-hard;ea-coder-hard;ea-coder-hard;ea-coder-hard;ea-coder-hard;ea-coder-hard;ea-coder-hard;ea-coder-hard;ea-coder-hard;ea-coder-hard;ea-coder-hard;ea-coder-hard;ea-coder-hard
CHUMMER_DESIGN_SUPERVISOR_ACCOUNT_FALLBACK_WORKER_BIN=
CHUMMER_DESIGN_SUPERVISOR_ACCOUNT_FALLBACK_WORKER_LANE=
CHUMMER_DESIGN_SUPERVISOR_ACCOUNT_FALLBACK_MODELS=ea-coder-hard
CHUMMER_DESIGN_SUPERVISOR_ACCOUNT_FALLBACK_LANES=core_rescue
# Example temporary desktop-release steering override:
# CHUMMER_DESIGN_SUPERVISOR_FOCUS_PROFILE=desktop_client
# CHUMMER_DESIGN_SUPERVISOR_FOCUS_OWNER=chummer6-ui,chummer6-core,chummer6-hub,chummer6-ui-kit,chummer6-hub-registry,chummer6-design
# CHUMMER_DESIGN_SUPERVISOR_FOCUS_TEXT=desktop,client,workbench,build lab,rules,rule-environment,explain,sr4,sr5,sr6
# Leave focus vars blank in the normal long-running loop so the active registry, blockers, and shard owner groups decide the frontier.
# Example 1min-only EA core hard-coder supervisor path with dynamic healthy-account routing:
# CHUMMER_DESIGN_SUPERVISOR_WORKER_BIN=/docker/fleet/scripts/codex-shims/codexea
# CHUMMER_DESIGN_SUPERVISOR_WORKER_LANE=core
# CHUMMER_DESIGN_SUPERVISOR_CORE_RESPONSES_PROFILE=core_batch
# CHUMMER_DESIGN_SUPERVISOR_DYNAMIC_ACCOUNT_ROUTING=1
# CHUMMER_DESIGN_SUPERVISOR_PREFER_FULL_EA_LANES=1
# CHUMMER_DESIGN_SUPERVISOR_FALLBACK_MODELS=ea-coder-hard
# CHUMMER_DESIGN_SUPERVISOR_FALLBACK_LANES=core_rescue
# CHUMMER_DESIGN_SUPERVISOR_OPENAI_ESCAPE_ACCOUNT_ALIASES=
# CHUMMER_DESIGN_SUPERVISOR_OPENAI_ESCAPE_MODELS=ea-coder-hard
# CHUMMER_DESIGN_SUPERVISOR_EA_PROVIDER_HEALTH_URL=http://host.docker.internal:8090/v1/responses/_provider_health
# CHUMMER_DESIGN_SUPERVISOR_EA_PROVIDER_HEALTH_TIMEOUT_SECONDS=4
# CHUMMER_DESIGN_SUPERVISOR_STREAM_IDLE_TIMEOUT_MS=900000
# CHUMMER_DESIGN_SUPERVISOR_STREAM_MAX_RETRIES=8
# CHUMMER_DESIGN_SUPERVISOR_WORKER_TIMEOUT_SECONDS=21600
# CHUMMER_DESIGN_SUPERVISOR_FOCUS_PROFILE=
# CHUMMER_DESIGN_SUPERVISOR_FOCUS_TEXT=
# CHUMMER_DESIGN_SUPERVISOR_PARALLEL_SHARDS=3
# CHUMMER_DESIGN_SUPERVISOR_SHARD_OWNER_GROUPS=chummer6-ui,chummer6-ui-kit;chummer6-core;chummer6-hub,chummer6-hub-registry,chummer6-design
# Leave CHUMMER_DESIGN_SUPERVISOR_SHARD_FRONTIER_ID_GROUPS blank in the normal long-running loop unless you are intentionally pinning a short-lived debug slice.
# CHUMMER_DESIGN_SUPERVISOR_SHARD_ACCOUNT_GROUPS=
# Leave account alias groups blank when you want the supervisor to route each shard to the first healthy EA / OneMinAI account that matches the lane and model.
# Set CHUMMER_DESIGN_SUPERVISOR_PIN_ACCOUNT_ALIASES=1 only for emergency alias pinning.
# Per-shard overrides are optional and aligned by shard index. Empty entries inherit the global worker/model settings.
# Example widened 5-pack split with a dedicated EA-only fifth shard:
# CHUMMER_DESIGN_SUPERVISOR_PARALLEL_SHARDS=5
# CHUMMER_DESIGN_SUPERVISOR_SHARD_OWNER_GROUPS=chummer6-ui,chummer6-ui-kit,fleet,chummer6-hub-registry;chummer6-core,chummer6-design;chummer6-hub,chummer6-mobile,executive-assistant;chummer6-core,chummer6-hub,chummer6-media-factory;fleet,executive-assistant,product_governor,chummer6-hub-registry
# CHUMMER_DESIGN_SUPERVISOR_SHARD_FRONTIER_ID_GROUPS=1,2,3;13,14,17,18;4,5,6;7,8,9,16;10,11,12,15
# CHUMMER_DESIGN_SUPERVISOR_SHARD_FOCUS_TEXT_GROUPS=install,update,recovery,desktop,workbench,proof;sourcebook,settings,custom-data,xml,translator,import,oracle,supplement,house-rule,storage;campaign,downtime,diary,contacts,heat,aftermath,return,gm,opposition,roster,prep,event,travel,offline,mobile;build lab,explain,rule-environment,dossier,exchange,replay,recap,export,viewer,foundry,crew-fit;trust,support,publication,discovery,moderation,shelf,pulse,launch,governance,utility,dice,initiative,dashboard,canaries
# CHUMMER_DESIGN_SUPERVISOR_DYNAMIC_ACCOUNT_ROUTING=1
# CHUMMER_DESIGN_SUPERVISOR_SHARD_ACCOUNT_GROUPS=
# CHUMMER_DESIGN_SUPERVISOR_SHARD_WORKER_BINS=;;;;/docker/fleet/scripts/codex-shims/codexea
# CHUMMER_DESIGN_SUPERVISOR_SHARD_WORKER_LANES=;;;;core
# CHUMMER_DESIGN_SUPERVISOR_SHARD_WORKER_MODELS=;;;;ea-coder-hard

# Weekly Chummer6 guide refresh via host cron installer.
CHUMMER6_GUIDE_REFRESH_WEEKDAY_UTC=0
CHUMMER6_GUIDE_REFRESH_HOUR_UTC=05
CHUMMER6_GUIDE_REFRESH_MINUTE_UTC=30
CHUMMER6_GUIDE_REFRESH_OUTPUT_DIR=/docker/fleet/state/chummer6/ea_media_assets

# Optional: EA MCP bridge settings (used by scripts/ea_mcp_bridge.py when configured as an MCP server).
# Tip: on Linux, containers need `extra_hosts: host.docker.internal:host-gateway` to reach the host.
EA_MCP_BASE_URL=http://host.docker.internal:8090
EA_MCP_API_TOKEN=
EA_MCP_PRINCIPAL_ID=codex-fleet
EA_MCP_TIMEOUT_SECONDS=120
EA_MCP_MODEL=onemin:gpt-5.4

# Optional: Hub receipt ingest targets for sponsored participant lanes.
FLEET_HUB_LEDGER_RECEIPT_URL=
FLEET_HUB_AI_RECEIPT_URL=
FLEET_RECEIPT_SIGNING_SECRET=