# aibo — local developer credentials (template)

#

# Copy to `.env.dev` and fill in the keys you actually have:

#

# cp .env.dev.example .env.dev

#

# `.env.dev` is gitignored. This file is the committed template and must never

# contain a real key.

#

# ---------------------------------------------------------------------------

# How aibo reads these

# ---------------------------------------------------------------------------

#

# There is no dotenv loader in the binary, and deliberately so: §12 keeps

# credential handling in one place, and a second silent source of secrets is the

# kind of thing that later turns out to have been logged. These are ordinary

# environment variables, so `source` them into the shell that launches aibo:

#

# set -a && . ./.env.dev && set +a && cargo run --bin aibo

#

# `EnvCredentials` (aibo-session) reads `AIBO_<PROVIDER>_API_KEY`, where

# `<PROVIDER>` is the provider **id**, uppercased, with `-` replaced by `_`.

#

# Note the id is not always the `backend = "…"` spelling in config.toml:

# `open-ai` is addressed as `openai`, `open-router` as `openrouter`, and

# `samba-nova` as `sambanova`. The variable names below use the ids.

#

# The env var is a *fallback*, consulted only when the credential store has no

# entry for that provider. A key saved in the settings window wins — so if a

# provider misbehaves, check whether a stored key is shadowing what is here.

#

# A provider also needs a `[[providers]]` entry in config.toml before aibo will

# build it; the key alone is not enough. Adding one in Settings does both.

# --- OpenAI (also the STT endpoint for gpt-transcribe) ---------------------

AIBO_OPENAI_API_KEY=

# --- OpenRouter: one key, many upstream vendors ---------------------------

AIBO_OPENROUTER_API_KEY=

# --- Google Gemini, direct Generative Language API ------------------------

AIBO_GEMINI_API_KEY=

# --- Anthropic ------------------------------------------------------------

AIBO_ANTHROPIC_API_KEY=

# --- The fast providers ---------------------------------------------------

AIBO_GROQ_API_KEY=

AIBO_CEREBRAS_API_KEY=

AIBO_SAMBANOVA_API_KEY=

AIBO_XAI_API_KEY=

# --- Azure OpenAI ---------------------------------------------------------

# Also needs `deployment` and `api_version` in its `[[providers]]` entry (§10).

AIBO_AZURE_OPENAI_API_KEY=

# ---------------------------------------------------------------------------

# Not here on purpose

# ---------------------------------------------------------------------------

#

# * **Codex / the ChatGPT subscription.** §3a authenticates by device code, not

# by an API key, and stores a refreshable token pair. There is no variable to

# set; use Sign in in the settings window.

# * **Bedrock and Vertex.** SigV4 and service-account JWTs are not bearer keys.

# * **Ollama and llama.cpp.** Local endpoints take no credential at all.