melchizedek-agents 0.18.0 → 0.20.0

package/.env.example

@@ -19,6 +19,12 @@ GOOGLE_GENAI_API_KEY=
 # keep their task list and job queue. Default: outputs/tasks.json.
 # MELCHIZEDEK_TASKS_FILE=outputs/tasks.json
 
+# ── Optional: runtime (ADR 0045) ──────────────────────────────────────────────
+# Which runtime runs a turn's agents: adk (default) or native (the engine's own loop).
+# MELCHIZEDEK_RUNTIME=adk
+# Which adapter serves a Gemini model id on the native path: adk (default) or engine.
+# GEMINI_ADAPTER=adk
+
 # ── Optional: MCP (Model Context Protocol) ────────────────────────────────────
 # ALLOW_PRIVATE_MCP: set to "true" to permit mcp_server_url values pointing at
 # localhost / private / link-local hosts. Off by default as an SSRF guard;
@@ -234,6 +240,12 @@ PUBLIC_URL=
 # with `melchizedek-db apply --schema <name>` (or this variable) and run the
 # server with the same value. Needs DATABASE_URL.
 # MELCHIZEDEK_DB_SCHEMA=public
+# The key that seals third-party OAuth tokens held for tools, per end user, in
+# melchizedek_tool_credentials (migration 0013, ADR 0072): 32 random bytes as
+# base64 or 64 hex characters. Generate with `openssl rand -base64 32`; keep it
+# out of the database and its backups. Unset = no credential store. A row
+# sealed with another key stays unreadable (the user reconnects).
+# MELCHIZEDEK_CREDENTIAL_KEY=
 
 # ── Optional: Knowledge Bundle (wiki) ─────────────────────────────────────────
 # WIKI_ROOT: filesystem path of the OKF knowledge bundle the wiki tools serve.