.env.example

# ─── Friday Environment Variables ───
#
# Copy this file to .env and adjust values.
# All variables are optional — defaults shown in comments.

# HTTP server port.
# FRIDAY_PORT=3141

# Directory for SQLite state files.
# FRIDAY_STATE_DIR=./data

# Comma-separated skill directories to scan.
# FRIDAY_SKILLS_DIR=skills

# Token secret for JWT signing.
# If not set, a random secret is generated and persisted to ~/.friday/token.secret.
# ⚠️  Set explicitly for production!
# FRIDAY_TOKEN_SECRET=

# AES-256 key for encrypting provider API keys at rest.
# Auto-generated to ~/.friday/master.key if not set.
# FRIDAY_MASTER_KEY=

# Comma-separated CORS origins.
# Default: disabled (empty). Set to "*" to allow all origins,
# or specify domains like "https://app.example.com,https://admin.example.com".
# FRIDAY_CORS_ORIGINS=

# Enable request logging ("true" or "false").
# FRIDAY_LOG_REQUESTS=true

# Optional static UI build directory served by `friday start`.
# FRIDAY_UI_DIST_DIR=./dist/ui

# Browser tool runtime.
# FRIDAY_BROWSER_PRESENTATION_MODE=auto
# Legacy fallback knobs (prefer FRIDAY_BROWSER_PRESENTATION_MODE instead).
# FRIDAY_BROWSER_HEADLESS=true
# FRIDAY_BROWSER_USE_HOST_CHROME=false
# FRIDAY_BROWSER_WS_ENDPOINT=
# FRIDAY_BROWSER_CDP_PORT=9222
# FRIDAY_BROWSER_CHROME_PATH=

# Desktop runtime (opt-in).
# Set to true to register the `desktop` tool.
# FRIDAY_DESKTOP_ENABLED=true
# Optional principal identifier used by desktop permission/audit flow.
# FRIDAY_DESKTOP_PRINCIPAL_ID=friday-desktop
# Comma-separated absolute roots for desktop file operations.
# Default when unset: workspace root.
# FRIDAY_DESKTOP_SANDBOX_ALLOWED_ROOTS=/Users/you/Projects/Friday

# Channel bridge config as JSON.
# Use env refs (`$VAR_NAME`) or `secret://channel/...` for secret fields.
# FRIDAY_CHANNEL_SECRET_POLICY=strict
#
# Minimal Discord example (strict-safe):
# DISCORD_BOT_TOKEN=replace-with-discord-token
# FRIDAY_CHANNELS_JSON={"enabled":true,"instances":[{"kind":"discord","enabled":true,"token":"$DISCORD_BOT_TOKEN","requireMention":false}]}
#
# Minimal QQ example:
# FRIDAY_CHANNELS_JSON={"enabled":true,"instances":[{"kind":"qq","enabled":true,"appId":"qq-app-id","appSecret":"qq-app-secret","sandbox":false}]}

# Minimal Lark example:
# FRIDAY_CHANNELS_JSON={"enabled":true,"instances":[{"kind":"lark","enabled":true,"appId":"lark-app-id","appSecret":"lark-app-secret","useFeishu":false,"receiveMode":"websocket"}]}

# Minimal Feishu example:
# FRIDAY_CHANNELS_JSON={"enabled":true,"instances":[{"kind":"feishu","enabled":true,"appId":"feishu-app-id","appSecret":"feishu-app-secret","useFeishu":true,"receiveMode":"websocket"}]}

# Enable HTTP Strict Transport Security header ("true" or "false").
# Only enable behind a TLS-terminating reverse proxy.
# Recommended: enable in production deployments behind TLS.
FRIDAY_ENABLE_HSTS=true

# Optional MCP server bridge.
# FRIDAY_MCP_SERVERS=[{"id":"filesystem","command":"npx","args":["-y","@modelcontextprotocol/server-filesystem","/Users/you/Projects/Friday"],"cwd":"/Users/you/Projects/Friday","timeoutMs":20000}]

# Node environment. Set to "production" for production deployments.
# NODE_ENV=development

# ─── Search ───
# Web search provider for the agent's web_search tool.
# FRIDAY_SEARCH_PROVIDER=auto
# Other options: serper | tavily | duckduckgo | google_news_rss
# FRIDAY_SERPER_API_KEY=
# FRIDAY_TAVILY_API_KEY=

# ─── Agent ───
# Agent review mode: "off" | "always" | "high_risk".
# FRIDAY_AGENT_REVIEW_MODE=off

# ─── Channel security ───
# Channel secret policy: "strict" (block plaintext secrets) or "compat" (allow with warnings).
# FRIDAY_CHANNEL_SECRET_POLICY=strict

# ─── Heartbeat ───
# FRIDAY_HEARTBEAT_INTERVAL_MS=900000
# FRIDAY_HEARTBEAT_COOLDOWN_MS=1800000

# ─── Plugins ───
# FRIDAY_PLUGIN_RUNTIME_MODE=

# ─── Cross-channel identity ───
# FRIDAY_CROSS_CHANNEL_IDENTITY_ENABLED=false
# FRIDAY_CHANNEL_IDENTITY_MAP=

# ─── Session ───
# Max messages retained in conversation context window.
# FRIDAY_SESSION_HISTORY_LIMIT=24

# ─── Multi-tenant security ───
# Enable multi-tenant RBAC, policy engine, and tenant isolation.
# FRIDAY_MULTI_TENANT_ENABLED=false

# ─── Packaging ───
# Enable the package management system (publish, install, verify).
# FRIDAY_PACKAGING_ENABLED=false

# ─── TUI ───
# Enable the terminal UI mode (friday tui).
# FRIDAY_TUI_ENABLED=true

# ─── Media understanding ───
# Enable attachment processing pipeline for media analysis.
# FRIDAY_MEDIA_UNDERSTANDING_ENABLED=false

# ─── TTS ───
# Text-to-speech provider. Leave empty to disable TTS tool.
# FRIDAY_TTS_PROVIDER=
# FRIDAY_TTS_API_KEY=

# ─── Nodes / IoT ───
# Enable device/node control tool.
# FRIDAY_NODES_ENABLED=false