engraphis 1.5__tar.gz → 1.7__tar.gz

{engraphis-1.5 → engraphis-1.7}/.env.example

@@ -1,11 +1,15 @@
 # ── Engraphis Configuration ──────────────────────────────────────────
-# Copy this file to .env and edit only the settings you need. Commented values preserve
-# the platform-aware defaults in engraphis/config.py; hosted deployments additionally
-# require the authentication and public-URL settings described below.
+# Put the settings you need in the owner-private `~/.engraphis/config.env` created by
+# `engraphis-init`, or export them in the process environment. To select another file,
+# export ENGRAPHIS_ENV_FILE as an absolute owner-private regular-file path before launch.
+# Engraphis deliberately ignores arbitrary working-directory `.env` files.
 
 # ── Server ──────────────────────────────────────────────────────────────────
 ENGRAPHIS_HOST=127.0.0.1
 ENGRAPHIS_PORT=8700
+# Port precedence for the dashboard bind: a platform-injected $PORT (Railway/Fly/Heroku)
+# wins over ENGRAPHIS_PORT; local and Compose runs without $PORT use ENGRAPHIS_PORT.
+# Docker Compose pins both PORT and ENGRAPHIS_PORT to ENGRAPHIS_COMPOSE_PORT (below).
 # The public package supports only customer mode: dashboard, memory, and managed-service
 # clients. Hosted vendor, relay, compute, and worker roles are not distributed here.
 ENGRAPHIS_SERVICE_MODE=customer
@@ -79,6 +83,8 @@ ENGRAPHIS_EMBED_MODEL=sentence-transformers/all-MiniLM-L6-v2
 # ENGRAPHIS_EMBED_REVISION=<lowercase 40-character model commit>
 # Reject mutable remote embedding, reranker, and chunk-tokenizer tags before loading. Off by default.
 # ENGRAPHIS_REQUIRE_IMMUTABLE_MODELS=0
+# Fail startup when a configured optional backend cannot load instead of silently falling back.
+# ENGRAPHIS_REQUIRE_EXACT_BACKENDS=0
 # Embedding dimension is auto-detected from the model. Override only if needed.
 # ENGRAPHIS_EMBED_DIM=384
 # Vector index backend for server entrypoints: "auto" (default; use sqlite-vec when
@@ -204,17 +210,17 @@ ENGRAPHIS_LLM_MODEL=gpt-4o-mini
 #   engraphis connect --token engr_ct_...        # the command your account portal shows
 #   printf %s "$TOKEN" | engraphis connect --token -   # keep the token out of shell history
 #
-# That is the supported way to connect a client. It redeems the one-time connect token, saves
-# the rotating refresh credential with 0600 permissions, and keeps it rotated afterwards, so
-# none of the variables below are needed on an interactive machine. Set
-# ENGRAPHIS_CLOUD_COMPUTE_URL (or pass --compute-url) only if your account portal shows a
-# compute endpoint different from the default. See docs/AGENT_CONNECT.md.
+# That is the supported way to connect a client. It redeems the one-time connect token,
+# saves the rotating refresh credential with 0600 permissions, and keeps it rotated.
+# The saved control and compute endpoints are immutable members of that credential family:
+# later environment changes cannot redirect its refresh or workspace upload. Reconnect
+# explicitly to change either endpoint. See docs/AGENT_CONNECT.md.
 #
-# For non-interactive deployments a refresh credential may be injected as a bootstrap secret.
-# It rotates on use; the owner-only saved replacement takes precedence afterward, even while
-# the environment variable remains set. Never commit it. Bind environment-only bootstrap
-# credentials to the subject assigned at onboarding (device or member). A short-lived access
-# token is supported for jobs.
+# For non-interactive deployments a refresh credential may be injected as a bootstrap
+# secret. It rotates on use; the owner-only saved replacement and its bound endpoints take
+# precedence afterward, even while the environment variables remain set. Never commit it.
+# Bind environment-only bootstrap credentials to the subject assigned at onboarding
+# (device or member). A short-lived access token is supported for jobs.
 # ENGRAPHIS_CLOUD_REFRESH_CREDENTIAL=
 # ENGRAPHIS_CLOUD_TOKEN_SUBJECT=member
 # ENGRAPHIS_CLOUD_ACCESS_TOKEN=
@@ -320,13 +326,14 @@ ENGRAPHIS_LLM_MODEL=gpt-4o-mini
 # rerankers when ENGRAPHIS_REQUIRE_IMMUTABLE_MODELS=1.
 # ENGRAPHIS_RERANK_REVISION=<lowercase 40-character model commit>
 
-# Workspace allow-list: comma-separated names. Empty = all allowed.
-# ENGRAPHIS_WORKSPACES=acme,personal
-
 # Cloud Sync relay: endpoint and optional token for self-hosted relay.
 # ENGRAPHIS_RELAY_URL=https://relay.example.com
 # ENGRAPHIS_SYNC_TOKEN=
 # ENGRAPHIS_SYNC_READ_ONLY=0
+# Origin binding for standalone sync tokens. Must match the relay origin that issued
+# the token; prevents cross-origin token reuse. Required when using ENGRAPHIS_SYNC_TOKEN
+# without a full session credential.
+# ENGRAPHIS_SYNC_TOKEN_ORIGIN=https://relay.example.com
 # End-to-end encryption key for Cloud Sync bundles (relay transport). A single
 # immutable 32-byte URL-safe base64 value (43 chars, or 44 with one '=' pad) that
 # every authorized device shares; changing it makes previously stored ciphertext
@@ -338,7 +345,8 @@ ENGRAPHIS_LLM_MODEL=gpt-4o-mini
 # ENGRAPHIS_PRO_UPGRADE_URL=
 # ENGRAPHIS_TEAM_UPGRADE_URL=
 
-# Update check cache duration (seconds). Default: 86400 (1 day).
+# Update check cache duration (seconds), bounded to 1..31622400. Invalid values use the
+# 86400-second (1 day) default. The cache path is fixed under owner-private Engraphis state.
 # ENGRAPHIS_UPDATE_CACHE=86400
 
 # Legacy inspector port (retired 2026-07-10; redirects to dashboard).