.env.example

# Copyright (c) 2026 Huawei Technologies Co., Ltd.
# All Rights Reserved.
#
#    Licensed under the Apache License, Version 2.0 (the "License"); you may
#    not use this file except in compliance with the License. You may obtain
#    a copy of the License at
#
#         http://www.apache.org/licenses/LICENSE-2.0
#
#    Unless required by applicable law or agreed to in writing, software
#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
#    License for the specific language governing permissions and limitations
#    under the License.

# A2A-T SDK Configuration
# Copy this file to .env and fill in your values

# Full A2A protocol messages are emitted by the dedicated PROTOCOL DEBUG logger.
# Credentials are always anonymized; there is no sensitive-header opt-in.
# Set false to omit request/response bodies; large bodies are truncated at this character count.
WORKFLOW_ENGINE_PROTOCOL_INCLUDE_BODY=true
WORKFLOW_ENGINE_PROTOCOL_MAX_BODY_CHARS=100000

# Prompt runtime
A2AT_LANGUAGE=zh-CN
# classpath: prompt_resources are bundled inside the a2a-t-resources jar on the classpath
# local_file: prompt resources are loaded from local filesystem
A2AT_PROMPT_SOURCE_TYPE=classpath
A2AT_PROMPT_RESOURCE_LOCAL_ROOT_DIR=

# Prompt compliance
A2AT_PROMPT_COMPLIANCE_ENABLED=false

# LLM runtime
# Supported providers: openai (OpenAI-compatible APIs like DeepSeek, Azure OpenAI, etc.)
# For DeepSeek: use provider=openai with base_url=https://api.deepseek.com
A2AT_LLM_PROVIDER=openai
A2AT_LLM_MODEL=deepseek-chat
A2AT_LLM_API_KEY=your-api-key-here
A2AT_LLM_BASE_URL=https://api.deepseek.com
A2AT_LLM_MAX_TOKENS=4000
A2AT_LLM_TEMPERATURE=0
A2AT_LLM_TIMEOUT_SECONDS=60
A2AT_LLM_HISTORY_WINDOW=10
A2AT_LLM_SESSION_MAX_TOTAL=300
A2AT_LLM_SESSION_MAX_PER_PROVIDER=100

# Negotiation
A2AT_NEGOTIATION_STATE_STORE_TYPE=in_memory

# Credential encryption key (32-byte hex, used for enc: prefixed passwords in credentials JSON)
# Generate with: openssl rand -hex 32
A2AT_CRED_KEY=your-32-byte-hex-key-here

# Keep true for production HTTPS. Set false only for local/self-signed integration testing.