env.example

# BuildRel bootcamp scaffold - environment variables.
#
# NOTE: this file should be named ".env.example". It is shipped here as
# "env.example" only because this repo's tooling blocks writing dotfiles named
# .env*. Rename it once:   mv env.example .env.example
# Then copy to your real env file:   cp .env.example .env
# Never commit a real .env.
#
# Credentials that are MINTED AT RUNTIME (AWS_*, VOYAGE_API_KEY) are intentionally
# NOT set here: src/credentials.ts fetches them from the DevDay Lambda into memory
# each run so they never land on disk. Set them below only if you want to bypass
# the Lambda with your own keys (then no PASSKEY is needed).

# --- MongoDB -----------------------------------------------------------------
# Connection string for a deployment with Vector Search: an Atlas cluster, or the
# local deployment the bootcamp workspace runs. The workspace sets this for you.
MONGODB_URI="mongodb+srv://<user>:<pass>@<cluster>/?retryWrites=true&w=majority"
# Database that holds the demo collections and the agent's checkpoints.
MONGODB_DB="bootcamp"
# Collection names. Teams repoint these at their own data.
KB_COLLECTION="kb_documents"
EVENTS_COLLECTION="activity_events"
# Name of the Atlas Vector Search index over the KB embedding field.
VECTOR_INDEX_NAME="vector_index"

# --- Presentation language ---------------------------------------------------
# "en" or "es". Selects the agent's prompt set, so it also selects the language
# the agent answers in. Set "es" for a Spanish delivery. Identifiers, JSON keys,
# and the CONSISTENT / INCONSISTENT / NEEDS REVIEW verdict tokens stay English in
# both languages.
AGENT_LANGUAGE="en"

# --- Long-term memory store (cross-thread, keyed by user) --------------------
# Distinct from the per-thread checkpointer. Stores lightweight user context and
# record references (the reference discipline), never raw record contents.
MEMORY_COLLECTION="agent_memory"
# Retention in seconds; 0 = never expire. Example: 2592000 for 30 days.
MEMORY_TTL_SECONDS="0"

# --- Credential bootstrap (DevDay Lambda, get_token task only) ---------------
# Per-session passkey announced by the presenter. Rolling ~3-day validity.
# A 401 from the Lambda means "get a fresh passkey," not a bug.
PASSKEY=""
# Lambda Function URL that mints per-session credentials. Default is the DevDay proxy.
LAMBDA_CREDENTIALS_URL="https://vtqjvgchmwcjwsrela2oyhlegu0hwqnw.lambda-url.us-west-2.on.aws/"

# --- Bedrock chat model (via @langchain/aws ChatBedrockConverse) -------------
# AWS region the minted credentials are scoped to. If invocation fails, try us-east-1
# (the global inference profile routes cross-region).
BEDROCK_REGION="us-west-2"
# Bedrock model / inference profile id the app calls.
BEDROCK_MODEL_ID="global.anthropic.claude-sonnet-4-6"
# Chat model defaults (overridable per call via getChatModel({ temperature })).
LLM_TEMPERATURE="0"
LLM_MAX_TOKENS="4096"

# --- Voyage AI (embeddings + reranking, always Voyage) -----------------------
# Embedding model and its output dimension. numDimensions MUST match the vector index.
# The 4 series is current and mutually compatible; voyage-4 / voyage-4-lite trade quality
# for cost and latency. Swapping to a domain model (voyage-code-3, voyage-law-2,
# voyage-finance-2) or to contextualized chunk embeddings (voyage-context-4) means
# re-running npm run load so the index is rebuilt.
VOYAGE_EMBEDDING_MODEL="voyage-4-large"
VOYAGE_EMBEDDING_DIMENSIONS="1024"
# Reranking model used to reorder retrieved passages.
VOYAGE_RERANK_MODEL="rerank-2.5"
# Embeddings + reranking host. Atlas model API key host (the passkey mints an "al-" key). Use
# https://api.voyageai.com/v1 only with your own Voyage "pa-" key.
VOYAGE_API_BASE="https://ai.mongodb.com/v1"

# --- Retrieval tuning --------------------------------------------------------
# Passages pulled by vector search before reranking, and kept after reranking.
RETRIEVAL_TOP_K="10"
RERANK_TOP_K="4"

# --- Structured query tool (demo ergonomics only, NOT a security control) ----
# Trailing result cap and query timeout. See README on the read-oriented posture.
QUERY_RESULT_CAP="50"
QUERY_MAX_TIME_MS="5000"
# Optional one-line guard: reject $out/$merge stages. Off by default, not part of the
# reference posture. Set to "true" only if you want to protect your own synthetic data.
REJECT_WRITE_STAGES="false"

# --- Credentials normally minted at runtime (leave empty unless bypassing) ---
# AWS_ACCESS_KEY_ID=""
# AWS_SECRET_ACCESS_KEY=""
# VOYAGE_API_KEY=""