fastlab.env.example

# Copy this file to .fastlab/fastlab.env.
# Never commit the file after adding a real App Secret.

# Choose one local Planner: codex or claude.
FASTLAB_PLANNER_BACKEND=codex

# Local CLI commands used by Planners and Workers.
FASTLAB_CODEX_BIN=codex
FASTLAB_CLAUDE_BIN=claude

# Planner, Worker and Verifier total timeout in seconds. Use 0 for no limit.
FASTLAB_AGENT_TIMEOUT=3600

# Optional: pre-approve additional Claude Worker commands with precise rules.
# Modern Claude uses auto mode; Planner/Verifier use dontAsk with read-only tools.
# Keep this as a JSON array. Bare "Bash" / "Bash(*)" is rejected.
# FASTLAB_CLAUDE_EXTRA_ALLOWED_TOOLS=["Bash(npm run *)","Bash(npx vitest *)"]

# Feishu bot (optional; uncomment after configuration).
# FEISHU_APP_ID=cli_xxx
# FEISHU_APP_SECRET=replace_with_your_app_secret
# FASTLAB_FEISHU_ALLOWED_OPEN_IDS=ou_xxx

# Optional: notify this chat about tasks created from the web UI.
# FASTLAB_FEISHU_DEFAULT_CHAT_ID=oc_xxx

# Optional FastCAS identity association. Register a public device-code client
# with openid/profile scopes; no shared secret or login wall is required.
# FASTLAB_FASTCAS_ISSUER=https://auth.example.org
# FASTLAB_FASTCAS_CLIENT_ID=fastlab-desktop
# Explicit loopback-only development exception:
# FASTLAB_FASTCAS_ALLOW_LOOPBACK_HTTP=true

# Hosted web accounts. Use a confidential authorization-code client, separate
# from the local device-code client above. The first FastCAS administrator
# to complete registration becomes a platform administrator automatically.
# FASTLAB_PUBLIC_URL=https://labs.example.org
# FASTLAB_WEB_FASTCAS_ISSUER=https://cas.example.org
# FASTLAB_WEB_FASTCAS_CLIENT_ID=fastlabs-web
# FASTLAB_WEB_FASTCAS_CLIENT_SECRET=replace_with_client_secret
# Optional local administrator bootstrap for an empty account database:
# FASTLAB_ADMIN_EMAIL=admin@example.org
# FASTLAB_ADMIN_PASSWORD=replace_with_at_least_12_characters