AGeval/.env.example at main · Jeel3011/AGeval · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
# ============================================================
# AGeval — environment variables
# Copy this file to .env and fill in your real values.
# NEVER commit .env to version control.
# ============================================================

# ── Supabase (required) ────────────────────────────────────
AGEVAL_SUPABASE_URL=https://YOUR_PROJECT.supabase.co
AGEVAL_SUPABASE_SERVICE_KEY=eyJ...your-service-role-key...
# Anon/publishable key — used to VERIFY dashboard login JWTs (email/password
# users via Supabase Auth). Safe to expose; same key the frontend uses.
AGEVAL_SUPABASE_ANON_KEY=eyJ...your-anon-key...

# ── API authentication ─────────────────────────────────────
# REQUIRED to enable the /register endpoint (issuing API keys).
# Without this, registration is disabled entirely and no one can get a key.
# Generate one with:  python -c "import secrets; print(secrets.token_hex(32))"
AGEVAL_ADMIN_SECRET=

# ── OpenAI (optional — needed for embeddings, LLM judge, synthetic, red-team) ──
OPENAI_API_KEY=sk-proj-...

# ── Anthropic (optional — for trace_anthropic Claude agents + Claude judge) ──
ANTHROPIC_API_KEY=sk-ant-...

# ── LangSmith (optional — only for LangChain agents) ───────
LANGSMITH_API_KEY=lsv2_pt_...
LANGSMITH_TRACING=true
LANGSMITH_ENDPOINT=https://api.smith.langchain.com
LANGSMITH_PROJECT=ageval-demo

# ── SDK key (for running e2e tests / example agents) ───────
AGEVAL_API_KEY=ageval-sk-...

# ── Webhook HMAC signing (optional) ────────────────────────
AGEVAL_WEBHOOK_SECRET=

# ── Rate limiting ──────────────────────────────────────────
# REDIS_URL=redis://localhost:6379/0
# RATE_LIMIT_REQUESTS=100
# RATE_LIMIT_WINDOW=60

# ── CORS (comma-separated origins, default "*" in dev) ─────
# AGEVAL_CORS_ORIGINS=https://your-dashboard.example.com

# ============================================================
# Real-agent fleet (examples/agents/fleet/) — optional
# ============================================================
# The fleet runs ~150 real agents against LIVE public APIs. Reads need no keys.
# Side effects are OFF unless you opt in here.

# Master switch for ALL real side effects (db_write / is.gd / QR / webhook /
# email / Slack). When unset, a sweep is strictly read-only.
# AGEVAL_LIVE_SIDE_EFFECTS=1

# Real outbound email send (otherwise send_email reports "needs RESEND_API_KEY").
# RESEND_API_KEY=re_...
# RESEND_FROM=onboarding@resend.dev

# Real Slack post via an Incoming Webhook (otherwise post_slack reports the gate).
# SLACK_WEBHOOK_URL=https://hooks.slack.com/services/...

# Google Calendar / Drive writes need a service-account JSON (path).
# GOOGLE_SERVICE_ACCOUNT_JSON=/path/to/service-account.json

# SEC EDGAR fair-access policy wants a real contact (email) in the User-Agent.
# AGEVAL_SEC_CONTACT=you@example.com

# Polite HTTP client tuning (sensible defaults applied if unset).
# AGEVAL_HTTP_USER_AGENT="AGeval-Fleet/1.0 (+https://github.com/ageval)"
# AGEVAL_HTTP_TIMEOUT=20
# AGEVAL_HTTP_RETRIES=3
# AGEVAL_HTTP_MIN_INTERVAL=1.1   # min seconds between calls to the same host