example.env

# API Keys
OPENAI_API_KEY="your-openai-key"
ANTHROPIC_API_KEY="your-anthropic-key"
GEMINI_API_KEY="your-gemini-key"
OPENCODE_API_KEY="your-opencode-key"
OPENROUTER_API_KEY="your-openrouter-key"
# Z.ai: agents/glm5 and opencode's zai/... models (e.g. zai/glm-5)
ZAI_API_KEY="your-zai-key"
# Z.ai dedicated endpoint for agents/glmx (a separate key from ZAI_API_KEY)
GLMX_API_KEY="your-glmx-endpoint-key"
# Meta: opencode's meta/... models (agents/opencode/solve.sh "meta" provider)
MODEL_API_KEY="your-meta-key"
KIMI_API_KEY="your-moonshot-key"
# Harbor adapter (src/harbor_adapter) only: run claude-code on a Claude Max subscription
# instead of ANTHROPIC_API_KEY (token from `claude setup-token`). condor's claude_non_api
# agents read agents/claude_non_api/oauth_token instead.
# CLAUDE_CODE_OAUTH_TOKEN="your-oauth-token"
# CLAUDE_FORCE_OAUTH=1

# Paths
HF_HOME="$HOME/.cache/huggingface"
POST_TRAIN_BENCH_RESULTS_DIR="results"
# Extra read-only results roots to union with the primary one above when
# aggregating (scripts/collect.py). Colon-separated (PATH-style). Method-name
# collisions across roots are warned about and resolved by first-seen wins.
# Output CSVs still land in POST_TRAIN_BENCH_RESULTS_DIR. Optional.
# POST_TRAIN_BENCH_EXTRA_RESULTS_DIRS="/fast/other-user/results:/another/root"
# Users (colon-separated) who get read/write ACL access to every result dir this checkout writes
# (src/utils/grant_access.py, run when run_task.sh exits). Optional; unset grants nothing.
# POST_TRAIN_BENCH_USERS_ACCESS="brank:hbhatnagar"
POST_TRAIN_BENCH_CONTAINERS_DIR="containers"

# Hugging Face: required to download the gated GPQA test data
# and HF cache (src/harbor_adapter/gated_hf_resources.json).
HF_TOKEN="hf_..."

# File of extra secrets to redact from extracted traces (dev_utils/extract_traces.py).
# One secret per line; blank lines and lines starting with '#' are ignored.
POST_TRAIN_BENCH_SANITIZATION_SECRETS="$HOME/secrets/api_keys.txt"

# Config
POST_TRAIN_BENCH_CONTAINER_NAME="standard"
POST_TRAIN_BENCH_PROMPT="prompt"
POST_TRAIN_BENCH_JOB_SCHEDULER="htcondor_mpi-is"
# Set to 1 to disable the per-run `npm install ...@latest` in update_agent_cli.sh
# and use the container's pinned CLI versions instead. cli_version.txt is still
# written (update=skipped) so the actual version is recorded.
# POST_TRAIN_BENCH_SKIP_CLI_UPDATE=1
# Exact agent CLI versions to install before the agent starts (npm versions).
# Unset ⇒ latest. A pin overrides POST_TRAIN_BENCH_SKIP_CLI_UPDATE, and a failed
# pinned install aborts the run instead of falling back.
# CLAUDE_CLI_VERSION="2.1.280"
# CODEX_CLI_VERSION="0.144.5"
# GEMINI_CLI_VERSION=""
# OPENCODE_CLI_VERSION=""