devstack/.env.example at dev · lpb-stack/devstack · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
# Copy this file to .env (same directory) and fill in real values.
# .env is gitignored — never commit real keys.
#
# ENV PRECEDENCE (highest to lowest):
#   1. Shell env (export LPB_ED_PORT=...) — always wins
#   2. .env file — per-project overrides
#   3. lpb.conf.env — runtime defaults (baked into image)
#   4. Hardcoded fallback — never needed if lpb.conf.env is set
#
# If a value from .env doesn't seem to apply, check shell env first:
#   printenv LPB_ED_PORT  # should show your .env value, not something else
#
# All variables use the LPB_ (LocalPibox) prefix to avoid conflicts with
# user environment variables. Loaded by:
#   - start.sh (sources .env from workspace directory)
#   - podman -e LPB_* flags (via podman run command)

# ─── API Keys ────────────────────────────────────────────────────────────────

# Exa MCP search API key
LPB_EXA_API_KEY=

# Context7 MCP server API key (optional — improves rate limits for docs lookup)
LPB_CONTEXT7_API_KEY=

# ─── Editor ──────────────────────────────────────────────────────────────────

# OpenVSCode connection token — leave empty for a random token on every start.
# Set to a custom value for persistence across restarts.
# WARNING: If LPB_EDITOR_HOST=0.0.0.0 (default), editor is LAN-accessible.
LPB_CONNECTION_TOKEN=

# Editor host — use 0.0.0.0 for LAN access, 127.0.0.1 for local-only.
LPB_EDITOR_HOST=0.0.0.0

# Editor port
LPB_ED_PORT=3000

# ─── Browser ─────────────────────────────────────────────────────────────────

# Agent-browser session — uses PI_WORKTREE_ID for worktree isolation.
# Subagent sessions get unique IDs via session-uuid command.
LPB_AGENT_BROWSER_SESSION=${PI_WORKTREE_ID}

# Agent-browser persistent storage on host
# Chrome download, browser profiles, and session state survive container rebuilds.
# Default: ~/.lpb-stack/agent-browser/
# LPB_AGENT_BROWSER_DIR=$HOME/.lpb-stack/agent-browser

# Chrome launch args (container-safe defaults)
LPB_AGENT_BROWSER_ARGS="--no-sandbox,--no-first-run,--disable-gpu,--disable-crashpad"

# Max output length to prevent context flooding
LPB_AGENT_BROWSER_MAX_OUTPUT=4000

# LLM safety markers in content extraction
LPB_AGENT_BROWSER_CONTENT_BOUNDARIES=true

# Action categories requiring approval
LPB_AGENT_BROWSER_CONFIRM_ACTIONS="delete,download,cookie_delete,file_access"

# Daemon idle timeout (5 minutes) — auto-cleanup after inactivity
LPB_AGENT_BROWSER_IDLE_TIMEOUT_MS=300000

# ─── Optional ────────────────────────────────────────────────────────────────

# OpenRouter API key (overflow provider — not needed with Lemonade)
# LPB_OPENROUTER_API_KEY=

# Response ceilings are per-model now — the `maxTokens` field in the
# lemonade-pi-plugin model catalog (~/.pi/agent/model-params.json). The old
# global LPB_MAX_TOKENS_CONTEXT_RATIO was retired 2026-09-02 (exact values
# per model, no formula — see lemonade-pi-plugin/docs/qwen-thinking-
# mainstream-pi.md §5.0).

# Capture outgoing provider payloads (lemonade-pi-plugin) — ALL models.
# 1 = the plugin logs one JSON line per request (tuned view for catalogued
# models, raw view otherwise) to /tmp/pi-payload-capture.jsonl inside the
# container. Used to verify exactly what goes over the wire.
# See lemonade-pi-plugin/docs/qwen-thinking-mainstream-pi.md §5.0/§7.
# LPB_PAYLOAD_DEBUG=1

# SSH port for `lpb --ssh` (default: 2222)
# LPB_SSH_PORT=2222

# ─── Persistence ─────────────────────────────────────────────────────────────

# Persist gh CLI auth to ~/.config/gh inside container, stored in
# ~/.lpb-stack/state/gh-config on the host (in the state volume).
# LPB_PERSIST_GH_CONFIG=true