1 line
8.4 KiB
JSON
1 line
8.4 KiB
JSON
{"repo": "canhta/specera", "files": {".env.example": {"383d96a74f77febacd665eeee6e47aa716591854": {"t": 1785747121.0440388, "n": 2898, "h": "2c5e8da5fb2e93d2", "c": "# Development only. Copy to .env and fill in; .env is git-ignored.\n#\n# This file is not how the product gets its secrets. Runtime secrets come from\n# GitHub Secrets, GitHub OIDC and IAM task roles; the only real secrets are the\n# provider keys — no database password exists anywhere.\n\n# The local development database, and the image the integration tests start —\n# a migration verified against a Postgres nobody develops on proves nothing.\n# None of it is secret: one container, one machine.\n#\n# `DATABASE_URL` is deliberately absent. It is these values joined, and the\n# README shows the line that joins them.\nPOSTGRES_IMAGE=postgres:18-alpine\nPOSTGRES_USER=specera\nPOSTGRES_PASSWORD=specera\nPOSTGRES_DB=specera\nPOSTGRES_PORT=5432\n\n# Embeddings, and any model work routed to OpenAI.\n# Required: DeepSeek exposes no embeddings endpoint, so this has no substitute.\nOPENAI_API_KEY=\n\n# Corpus generation and other token-heavy work.\n# Optional. Models are V4-Flash and V4-Pro; deepseek-chat and deepseek-reasoner\n# were retired 2026-07-24. Record the exact model string on every run, never the\n# alias.\nDEEPSEEK_API_KEY=\n\n# An OpenAI-compatible server on this machine — `gemma` to start, `gemma stop`\n# to release the model, which only one process may hold at a time. Local\n# development only: no auth, no TLS, bound to 127.0.0.1, so never proxied or\n# tunnelled out.\n# It substitutes for neither key above. No embeddings, no structured output, and\n# ~4 tok/s through the API — background work, not the interactive path.\n# `_MODEL_ID` rather than `GEMMA_MODEL`: sourcing this file exports it, and the\n# `gemma` command reads `GEMMA_MODEL` as a path to the model file.\nGEMMA_BASE_URL=http://127.0.0.1:8080/v1\nGEMMA_MODEL_ID=gemma-4-26b-a4b-it\n# The server ignores this; the OpenAI SDK refuses to send a request without one.\nGEMMA_API_KEY=local\n\n# S3, S3 Vectors. The region is development only and is not a residency decision.\nAWS_PROFILE=canhta\nAWS_REGION=ap-southeast-1\n\n# Integration tests run against LocalStack, never real AWS. The endpoint has no\n# default: a test suite that silently reaches the real account on a missing\n# variable is worse than one that fails.\nLOCALSTACK_IMAGE=localstack/localstack:4\nLOCALSTACK_PORT=4566\nAWS_ENDPOINT_URL=http://localhost:4566\n\n# Created by `docker/localstack/ready.d/seed.sh` when the stack comes up. The key\n# ids are fixed there, which is the only reason these can be written down.\nSPECERA_TEST_BUCKET=specera-test\nSPECERA_TEST_CMK_OPEN=arn:aws:kms:ap-southeast-1:000000000000:key/00000000-0000-0000-0000-000000000001\nSPECERA_TEST_CMK_LICENSED=arn:aws:kms:ap-southeast-1:000000000000:key/00000000-0000-0000-0000-000000000002\nSPECERA_TEST_CMK_USER_UPLOAD=arn:aws:kms:ap-southeast-1:000000000000:key/00000000-0000-0000-0000-000000000003\n\n# Set a hard usage limit on each key before use. A wrong loop is exactly the kind\n# of accident a spend cap exists for.\n"}, "d70a6645e76af92bfa37114009b59e8c52f7e66f": {"t": 1785770568.703763, "n": 2898, "h": "2c5e8da5fb2e93d2", "c": "# Development only. Copy to .env and fill in; .env is git-ignored.\n#\n# This file is not how the product gets its secrets. Runtime secrets come from\n# GitHub Secrets, GitHub OIDC and IAM task roles; the only real secrets are the\n# provider keys — no database password exists anywhere.\n\n# The local development database, and the image the integration tests start —\n# a migration verified against a Postgres nobody develops on proves nothing.\n# None of it is secret: one container, one machine.\n#\n# `DATABASE_URL` is deliberately absent. It is these values joined, and the\n# README shows the line that joins them.\nPOSTGRES_IMAGE=postgres:18-alpine\nPOSTGRES_USER=specera\nPOSTGRES_PASSWORD=specera\nPOSTGRES_DB=specera\nPOSTGRES_PORT=5432\n\n# Embeddings, and any model work routed to OpenAI.\n# Required: DeepSeek exposes no embeddings endpoint, so this has no substitute.\nOPENAI_API_KEY=\n\n# Corpus generation and other token-heavy work.\n# Optional. Models are V4-Flash and V4-Pro; deepseek-chat and deepseek-reasoner\n# were retired 2026-07-24. Record the exact model string on every run, never the\n# alias.\nDEEPSEEK_API_KEY=\n\n# An OpenAI-compatible server on this machine — `gemma` to start, `gemma stop`\n# to release the model, which only one process may hold at a time. Local\n# development only: no auth, no TLS, bound to 127.0.0.1, so never proxied or\n# tunnelled out.\n# It substitutes for neither key above. No embeddings, no structured output, and\n# ~4 tok/s through the API — background work, not the interactive path.\n# `_MODEL_ID` rather than `GEMMA_MODEL`: sourcing this file exports it, and the\n# `gemma` command reads `GEMMA_MODEL` as a path to the model file.\nGEMMA_BASE_URL=http://127.0.0.1:8080/v1\nGEMMA_MODEL_ID=gemma-4-26b-a4b-it\n# The server ignores this; the OpenAI SDK refuses to send a request without one.\nGEMMA_API_KEY=local\n\n# S3, S3 Vectors. The region is development only and is not a residency decision.\nAWS_PROFILE=canhta\nAWS_REGION=ap-southeast-1\n\n# Integration tests run against LocalStack, never real AWS. The endpoint has no\n# default: a test suite that silently reaches the real account on a missing\n# variable is worse than one that fails.\nLOCALSTACK_IMAGE=localstack/localstack:4\nLOCALSTACK_PORT=4566\nAWS_ENDPOINT_URL=http://localhost:4566\n\n# Created by `docker/localstack/ready.d/seed.sh` when the stack comes up. The key\n# ids are fixed there, which is the only reason these can be written down.\nSPECERA_TEST_BUCKET=specera-test\nSPECERA_TEST_CMK_OPEN=arn:aws:kms:ap-southeast-1:000000000000:key/00000000-0000-0000-0000-000000000001\nSPECERA_TEST_CMK_LICENSED=arn:aws:kms:ap-southeast-1:000000000000:key/00000000-0000-0000-0000-000000000002\nSPECERA_TEST_CMK_USER_UPLOAD=arn:aws:kms:ap-southeast-1:000000000000:key/00000000-0000-0000-0000-000000000003\n\n# Set a hard usage limit on each key before use. A wrong loop is exactly the kind\n# of accident a spend cap exists for.\n"}, "74d585262115e5a6c9c11a43a58ffed45636ef2b": {"t": 1785770570.0220375, "n": 2176, "h": "c614866183583113", "c": "# Development only. Copy to .env and fill in; .env is git-ignored.\n#\n# This file is not how the product gets its secrets. Runtime secrets come from\n# GitHub Secrets, GitHub OIDC and IAM task roles; the only real secrets are the\n# provider keys — no database password exists anywhere.\n\n# The local development database, and the image the integration tests start —\n# a migration verified against a Postgres nobody develops on proves nothing.\n# None of it is secret: one container, one machine.\n#\n# `DATABASE_URL` is deliberately absent. It is these values joined, and the\n# README shows the line that joins them.\nPOSTGRES_IMAGE=postgres:18-alpine\nPOSTGRES_USER=specera\nPOSTGRES_PASSWORD=specera\nPOSTGRES_DB=specera\nPOSTGRES_PORT=5432\n\n# Embeddings, and any model work routed to OpenAI.\n# Required: DeepSeek exposes no embeddings endpoint, so this has no substitute.\nOPENAI_API_KEY=\n\n# Corpus generation and other token-heavy work.\n# Optional. Models are V4-Flash and V4-Pro; deepseek-chat and deepseek-reasoner\n# were retired 2026-07-24. Record the exact model string on every run, never the\n# alias.\nDEEPSEEK_API_KEY=\n\n# S3, S3 Vectors. The region is development only and is not a residency decision.\nAWS_PROFILE=canhta\nAWS_REGION=ap-southeast-1\n\n# Integration tests run against LocalStack, never real AWS. The endpoint has no\n# default: a test suite that silently reaches the real account on a missing\n# variable is worse than one that fails.\nLOCALSTACK_IMAGE=localstack/localstack:4\nLOCALSTACK_PORT=4566\nAWS_ENDPOINT_URL=http://localhost:4566\n\n# Created by `docker/localstack/ready.d/seed.sh` when the stack comes up. The key\n# ids are fixed there, which is the only reason these can be written down.\nSPECERA_TEST_BUCKET=specera-test\nSPECERA_TEST_CMK_OPEN=arn:aws:kms:ap-southeast-1:000000000000:key/00000000-0000-0000-0000-000000000001\nSPECERA_TEST_CMK_LICENSED=arn:aws:kms:ap-southeast-1:000000000000:key/00000000-0000-0000-0000-000000000002\nSPECERA_TEST_CMK_USER_UPLOAD=arn:aws:kms:ap-southeast-1:000000000000:key/00000000-0000-0000-0000-000000000003\n\n# Set a hard usage limit on each key before use. A wrong loop is exactly the kind\n# of accident a spend cap exists for.\n"}}}} |