.env.example

# Mission Control MVP flags
# Keep readonly true until explicit live-mode validation is complete.
GATEWAY_URL=ws://127.0.0.1:18789
# Optional UI display timezone for absolute timestamps in the server-rendered pages.
# Examples: UTC, Asia/Shanghai, Europe/Paris, America/Los_Angeles
UI_TIMEZONE=UTC
# Optional absolute URL used in outbound bridge links, for example:
# OPENCLAW_CONTROL_UI_URL=http://127.0.0.1:4310/
# Optional Discord / Telegram mirror for task-room and hall-linked room updates.
# Keep disabled unless you explicitly want room events mirrored out.
# TASK_ROOM_BRIDGE_ENABLED=false
# TASK_ROOM_BRIDGE_DISCORD_WEBHOOK_URL=https://discord.com/api/webhooks/...
# TASK_ROOM_BRIDGE_TELEGRAM_BOT_TOKEN=123456:telegram-bot-token
# TASK_ROOM_BRIDGE_TELEGRAM_CHAT_ID=-1001234567890
# Hall runtime dispatch controls whether hall discussion / assign / handoff
# use the real `openclaw agent` runtime and stream real session output.
# Leave enabled for the full hall experience; disable only when you want
# deterministic synthetic fallback replies for testing.
# HALL_RUNTIME_DISPATCH_ENABLED=true
# HALL_RUNTIME_DIRECT_STREAM_ENABLED=true
# HALL_RUNTIME_THINKING_LEVEL=minimal
# HALL_RUNTIME_TIMEOUT_SECONDS=600
# HALL_RUNTIME_POLL_INTERVAL_MS=350
# HALL_RUNTIME_HISTORY_LIMIT=120
# HALL_RUNTIME_EXECUTION_CHAIN_ENABLED=true
# HALL_RUNTIME_EXECUTION_MAX_TURNS=3
# Optional shared hall collaboration guide override.
# By default, hall reads ./HALL.md from this repo on every turn.
# OPENCLAW_HALL_RULES_PATH=/path/to/HALL.md
# Optional path overrides when your OpenClaw/Codex data is not in the default home locations.
# OPENCLAW_HOME=/path/to/.openclaw
# OPENCLAW_CONFIG_PATH=/path/to/openclaw.json
# OPENCLAW_WORKSPACE_ROOT=/path/to/workspace
# OPENCLAW_AGENT_ROOT=/path/to/one/agent/workspace
# CODEX_HOME=/path/to/.codex
# OPENCLAW_SUBSCRIPTION_SNAPSHOT_PATH=/path/to/subscription.json
READONLY_MODE=true
APPROVAL_ACTIONS_ENABLED=false
APPROVAL_ACTIONS_DRY_RUN=true
IMPORT_MUTATION_ENABLED=false
IMPORT_MUTATION_DRY_RUN=false
# Local token auth protects save/import/approval and hall/task-room write actions.
# Set this to a long random string in `.env`, then enter the same value in the UI
# or send it as `x-local-token` / `Authorization: Bearer ...` for protected routes.
LOCAL_TOKEN_AUTH_REQUIRED=true
# LOCAL_API_TOKEN=<set-a-long-random-local-token>
MONITOR_CONTINUOUS=false
# Optional upper bound for idle continuous-monitor backoff.
# MONITOR_CONTINUOUS_MAX_INTERVAL_MS=60000
UI_MODE=false
UI_PORT=4310
# Optional only when a reverse proxy, container, LAN host, or Tailscale peer must reach the UI.
# If OPENCLAW_CONTROL_UI_URL points at a non-local host, the UI will auto-bind to 0.0.0.0.
# Set UI_BIND_ADDRESS explicitly only when you want to override that behavior.
# For Tailscale, a common setup is:
# OPENCLAW_CONTROL_UI_URL=http://<your-tailscale-host-or-ip>:4310/
# UI_BIND_ADDRESS=0.0.0.0