prooftrail

Reference: Configuration

Generated from configs/env/contract.yaml. Do not edit this file manually.

Name Section Required Sensitive Default Description              
ACTION_SCHEMA_PATH ai no no packages/core/src/ai/action-schema.json Path to AI action schema definition file.              
AI_FIX_MAX_ITERATIONS ai no no 2 Maximum post-fix regression iterations before hard failure.              
AI_MAX_STEPS ai no no 50 Maximum allowed AI computer-use iteration steps.              
AI_PROVIDER ai no no gemini Active AI provider.              
AI_REVIEW_GEMINI_MULTIMODAL ai no no false Enable Gemini multimodal UI/UX review from screenshots/video artifacts.              
AI_REVIEW_GEMINI_TOP_SCREENSHOTS ai no no 3 Maximum screenshot artifacts sent to Gemini for multimodal UI/UX review.              
AI_REVIEW_MODE ai no no llm AI review execution mode (llm or rule_fallback).              
AI_SPEED_MODE ai no no false Prefer speed-oriented AI behavior.              
COMMAND_TOWER_EVIDENCE_MAX_BYTES ai no no 3145728 Max bytes returned for command tower evidence payloads.              
GEMINI_API_KEY ai no yes (empty) Gemini API key (required for Gemini live smoke when UIQ_GEMINI_LIVE_SMOKE_REQUIRED=true).              
GEMINI_CONTEXT_CACHE_MODE ai no no memory Context-caching strategy for Gemini requests (memory or api).              
GEMINI_CONTEXT_CACHE_TTL_SECONDS ai no no 3600 In-memory context-cache TTL in seconds for reconstruction extraction.              
GEMINI_EMBED_MODEL ai no no gemini-embedding-001 Gemini embedding model name.              
GEMINI_INCLUDE_THOUGHTS ai no no true Include Gemini thought signatures in multi-turn flows.              
GEMINI_MEDIA_RESOLUTION ai no no high Default media resolution hint for Gemini multimodal requests.              
GEMINI_MEDIA_RESOLUTION_DEFAULT ai no no high Fallback media resolution when request-specific hint is absent.              
GEMINI_MODEL_FLASH ai no no models/gemini-3-flash-preview Gemini flash model name.              
GEMINI_MODEL_PRIMARY ai no no models/gemini-3.1-pro-preview Primary Gemini model name.              
GEMINI_QUALITY_PROFILE ai no no pro Gemini quality profile selector (pro or fast).              
GEMINI_THINKING_LEVEL ai no no high Gemini thinking effort level.              
GEMINI_TOOL_MODE ai no no auto Gemini function/tool calling mode.              
MIDSCENE_ALLOW_FALLBACK ai no no false Allow Midscene fallback behavior.              
MIDSCENE_MODEL_NAME ai no no (empty) Midscene model identifier.              
MIDSCENE_STRICT ai no no true Strict selector matching in Midscene flows.              
PROVIDER_POLICY_PATH ai no no configs/ai/provider-policy.yaml Path to provider policy configuration file.              
RECON_ENABLE_ENSEMBLE ai no no false Enable multi-engine ensemble reconstruction mode.              
RECON_ENGINE_ALLOWED_HOSTS ai no no (empty) Optional allowlist of hostnames for reconstruction engine calls.              
RECON_ENGINE_TIMEOUT_SECONDS ai no no 20 Timeout for reconstruction engine requests in seconds.              
RECON_EXPERIMENTAL_ENGINES ai no no lavague,uitars,openadapt Optional comma-separated experimental reconstruction engines.              
RECON_MAIN_ENGINE ai no no gemini Primary reconstruction engine identifier.              
RECON_PARAM_INPUT ai no no (empty) Governed env variable detected by automated env scan (ai scope).              
RECON_SECRET_INPUT ai no yes (empty) Governed env variable detected by automated env scan (ai scope).              
RECON_SECRET_PASSWORD ai no yes (empty) Governed env variable detected by automated env scan (ai scope).              
RECONSTRUCTION_ARTIFACT_MAX_BYTES ai no no 16777216 Max reconstruction artifact size in bytes.              
UIQ_AI_FIX_ALLOWLIST ai no no packages,apps,backend,frontend Comma-delimited relative path allowlist for auto-fix targets.              
UIQ_AI_FIX_MODE ai no no report_only AI fix execution mode (report_only or auto).              
UIQ_COMPUTER_USE_TASK ai no no (empty) Fallback computer-use task when profile/target does not define one.              
UIQ_GEMINI_LIVE_BROWSER_TIMEOUT_MS ai no no 20000 Browser navigation timeout in milliseconds for the required external URL check in the Gemini live smoke gate.              
UIQ_GEMINI_LIVE_SMOKE_ENDPOINT ai no no https://generativelanguage.googleapis.com Base endpoint for Gemini live smoke gate requests.              
UIQ_GEMINI_LIVE_SMOKE_MODEL ai no no gemini-3-flash-preview Model name used by the Gemini live smoke gate.              
UIQ_GEMINI_LIVE_SMOKE_PROMPT ai no no Return exactly: OK Prompt text used by the Gemini live smoke gate.              
VIDEO_ANALYZER_PROVIDER ai no no gemini Governed env variable detected by automated env scan (ai scope).              
AUTOMATION_ALLOW_LOCAL_NO_TOKEN auth no no false Allow loopback no-token access only when APP_ENV is development or test; must remain false in production.              
AUTOMATION_API_TOKEN auth yes yes replace-with-strong-token Shared API token used by automation endpoints; placeholders and weak values are rejected fail-fast (min length 16).              
AUTOMATION_REQUIRE_TOKEN auth no no true Enforce token requirement for automation APIs.              
BASELINE_WINDOW ci no no (empty) Governed env variable detected by automated env scan (ci scope).              
DEFAULT_BRANCH ci no no (empty) Governed env variable detected by automated env scan (ci scope).              
MATRIX_PROFILE ci no no (empty) Matrix profile dimension used by workflow jobs.              
MATRIX_TARGET ci no no (empty) Matrix target dimension used by workflow jobs.              
APP_ENV core no no development Runtime environment name.              
COOKIE_SECURE core no no true Set secure cookie policy.              
CORS_ALLOWED_ORIGINS core no no http://127.0.0.1:17373,http://localhost:17373 Comma-separated CORS origin allowlist.              
CSRF_TTL_SECONDS core no no 900 CSRF token TTL in seconds.              
FRONTEND_REGISTER_URL core no no (empty) Optional frontend register URL override.              
LOG_BACKUP_COUNT core no no 5 Number of rotated log files.              
LOG_LEVEL core no no DEBUG Backend log level.              
LOG_MAX_BYTES core no no 5242880 Per-log-file max size in bytes.              
NODE_ENV core no no development Node.js runtime environment name for frontend, MCP, and orchestrator helpers.              
TRUSTED_HOSTS core no no 127.0.0.1,localhost,testserver Comma-separated trusted host allowlist.              
FRONTEND_SRC frontend no no apps/web/src Frontend source root override for CI inventory checks.              
MANIFEST_FILE frontend no no apps/web/src/testing/button-manifest.ts Button inventory manifest file path override.              
VITE_DEFAULT_BASE_URL frontend no no http://127.0.0.1:17380 Frontend default backend base URL.              
VITE_RUM_ENABLED frontend no no false Enable frontend RUM event forwarding.              
AUTOMATION_COMMAND_TIMEOUT_SECONDS limits no no 1800 Command timeout in seconds.              
AUTOMATION_COMPLETED_TASK_TTL_SECONDS limits no no 86400 TTL in seconds for completed task records.              
AUTOMATION_DEFAULT_RETRIES limits no no 1 Default retry count for failed tasks.              
AUTOMATION_FAILURE_ALERT_THRESHOLD limits no no 0.2 Failure ratio threshold for alert state.              
AUTOMATION_GLOBAL_CLEANUP_INTERVAL_MINUTES limits no no 60 Periodic global cleanup interval in minutes.              
AUTOMATION_GLOBAL_CLEANUP_MAX_SIZE_GB limits no no 5 Maximum runtime cache size before cleanup trigger.              
AUTOMATION_GLOBAL_CLEANUP_TTL_HOURS limits no no 24 Time-to-live for global cleanup candidates in hours.              
AUTOMATION_IDEMPOTENCY_TTL_SECONDS limits no no 21600 TTL in seconds for idempotency replay records.              
AUTOMATION_MAX_PARALLEL limits no no 8 Max concurrent automation tasks.              
AUTOMATION_MAX_PARALLEL_LONG limits no no 1 Max concurrent long-running tasks.              
AUTOMATION_MAX_RATE_BUCKETS limits no no 2000 In-memory rate-limit bucket cap.              
AUTOMATION_MAX_TASKS limits no no 300 Max queued/runnable tasks retained.              
AUTOMATION_RATE_LIMIT_PER_MINUTE limits no no 120 Per-route per-client rate limit.              
AUTOMATION_RETENTION_HOURS limits no no 24 Retention window for automation artifacts in hours.              
AUTOMATION_RETRY_BASE_SECONDS limits no no 1.0 Base delay in seconds for retry backoff.              
AUTOMATION_RETRY_JITTER_RATIO limits no no 0.2 Random jitter ratio applied to retry backoff delays.              
AUTOMATION_RETRY_MAX_SECONDS limits no no 30.0 Maximum retry delay in seconds after backoff.              
AUTOMATION_RUNTIME_MAX_BYTES limits no no 1073741824 Max bytes allowed in automation runtime cache.              
CACHE_MAX_ENTRIES limits no no 2000 Maximum in-memory cache entries.              
CACHE_TTL_SECONDS limits no no 3600 Cache entry TTL in seconds.              
RUNTIME_GC_RETENTION_DAYS limits no no 7 Runtime garbage-collection retention window in days.              
UIQ_AUTO_TICKETING limits no no false Enable CI auto-ticketing integration for failure clusters.              
UIQ_GEMINI_LIVE_SMOKE_REQUIRED limits no no false Require Gemini live smoke gate with real browser verification; when true, UIQ_BASE_URL must be external (non-loopback) and GEMINI_API_KEY must be available.              
UIQ_GEMINI_LIVE_SMOKE_TIMEOUT_MS limits no no 15000 Timeout budget in milliseconds for the live Gemini smoke request.              
UIQ_MCP_STRESS_TIME_BUDGET_MS limits no no 300000 CI time-budget threshold in milliseconds for MCP stress gate runs.              
UIQ_MCP_ALLOW_REMOTE_BASE_URL mcp no no false Allow non-loopback backend base URL.              
UIQ_MCP_ALLOW_REMOTE_TOKEN_FORWARDING mcp no no false Allow forwarding token to approved remote hosts.              
UIQ_MCP_API_BASE_URL mcp no no http://127.0.0.1:18080 MCP backend base URL.              
UIQ_MCP_API_RETRY_BASE_DELAY_MS mcp no no 100 Base retry delay in milliseconds for transient MCP API network errors.              
UIQ_MCP_API_RETRY_MAX_ATTEMPTS mcp no no 6 Max attempts for retrying transient MCP API network errors.              
UIQ_MCP_API_TIMEOUT_MS mcp no no 30000 MCP API request timeout budget.              
UIQ_MCP_AUDIT_BACKUP_COUNT mcp no no 10 Number of rotated MCP audit log files.              
UIQ_MCP_AUDIT_MAX_BYTES mcp no no 10485760 Max size per MCP audit log file in bytes.              
UIQ_MCP_AUDIT_RETENTION_DAYS mcp no no 14 MCP audit retention window in days.              
UIQ_MCP_AUTOMATION_TOKEN mcp no yes (empty) Token forwarded by MCP to backend.              
UIQ_MCP_BACKEND_PORT mcp no no 18080 Preferred backend port for MCP-managed runtime.              
UIQ_MCP_DEV_RUNTIME_ROOT mcp no no (empty) Optional runtime directory for MCP local backend.              
UIQ_MCP_FAKE_UIQ_BIN mcp no no (empty) Override path to fake uiq binary in tests.              
UIQ_MCP_GOVERN_RATE_LIMIT_CALLS mcp no no 3 Per-session governed-tool call budget.              
UIQ_MCP_GOVERN_RATE_LIMIT_WINDOW_SECONDS mcp no no 60 Window size for governed-tool rate limiting.              
UIQ_MCP_GOVERN_SESSION_BUDGET_MS mcp no no 120000 Session-wide governed-tool timeout budget.              
UIQ_MCP_GOVERN_TIMEOUT_MS mcp no no 30000 Per-governed-tool timeout budget.              
UIQ_MCP_HEALTH_TIMEOUT_MS mcp no no 2000 MCP health-check timeout budget.              
UIQ_MCP_IMAP_PASSWORD mcp no yes (empty) Governed env variable detected by automated env scan (mcp scope).              
UIQ_MCP_PERFECT_MODE mcp no no true Enable perfect-mode MCP guardrails and strict defaults.              
UIQ_MCP_REMOTE_TOKEN_HOST_ALLOWLIST mcp no no (empty) Comma-separated host allowlist for remote token forwarding.              
UIQ_MCP_RUN_STREAM_TERM_GRACE_MS mcp no no 5000 Grace period before terminating run-stream process.              
UIQ_MCP_RUNTIME_CACHE_ROOT mcp no no .runtime-cache Runtime cache root used by MCP server.              
UIQ_MCP_STRESS_PARALLEL mcp no no 2 Parallel workers for MCP stress gate in CI workflows.              
UIQ_MCP_TOOL_GROUPS mcp no no advanced,register,proof,analysis Optional MCP tool groups to expose; use comma-separated groups or all.              
UIQ_MCP_WORKSPACE_ALLOWLIST mcp no no (empty) Optional workspace allowlist.              
UIQ_MCP_WORKSPACE_ROOT mcp no no . MCP default workspace root.              
RUM_SUMMARY_PATH observability no no .runtime-cache/metrics/rum-summary.json RUM summary file path.              
TRACING_ENABLED observability no no false Enable OpenTelemetry tracing.              
TRACING_EXPORTER observability no no console Tracing exporter: console or otlp.              
TRACING_OTLP_ENDPOINT observability no no (empty) OTLP endpoint URL when exporter=otlp.              
TRACING_OTLP_HEADERS observability no yes (empty) Optional OTLP headers string.              
TRACING_SERVICE_NAME observability no no uiq-backend Service name tag for tracing.              
FLOW_CAPTURE_SCREENSHOTS otp no no true Governed env variable detected by automated env scan (otp scope).              
FLOW_CAPTURE_SENSITIVE_SCREENSHOTS otp no no false Governed env variable detected by automated env scan (otp scope).              
FLOW_DISABLE_AUTO_RUNTIME_CLEANUP otp no no false Governed env variable detected by automated env scan (otp scope).              
FLOW_FROM_STEP_ID otp no no (empty) Governed env variable detected by automated env scan (otp scope).              
FLOW_INPUT otp no no (empty) Governed env variable detected by automated env scan (otp scope).              
FLOW_LOAD_RESUME_CONTEXT otp no no true Governed env variable detected by automated env scan (otp scope).              
FLOW_OTP_CODE otp no yes (empty) Governed env variable detected by automated env scan (otp scope).              
FLOW_OTP_POLL_INTERVAL_SECONDS otp no no 5 OTP polling interval in seconds.              
FLOW_OTP_PROVIDER otp no no gmail OTP provider strategy.              
FLOW_OTP_PROVIDER_TIMEOUT_MS otp no no 8000 Governed env variable detected by automated env scan (otp scope).              
FLOW_OTP_REGEX otp no no \b(\d{6})\b OTP regex capture pattern.              
FLOW_OTP_SENDER_FILTER otp no no (empty) Optional sender filter.              
FLOW_OTP_SUBJECT_FILTER otp no no (empty) Optional subject filter.              
FLOW_OTP_TIMEOUT_SECONDS otp no no 240 OTP polling timeout in seconds.              
FLOW_PROTECTED_PROVIDER_DOMAINS otp no no (empty) Governed env variable detected by automated env scan (otp scope).              
FLOW_PROTECTED_PROVIDER_GATE_POLICY otp no no (empty) Governed env variable detected by automated env scan (otp scope).              
FLOW_REPLAY_PRECONDITIONS otp no no false Governed env variable detected by automated env scan (otp scope).              
FLOW_RESUME_CONTEXT otp no no false Governed env variable detected by automated env scan (otp scope).              
FLOW_SECRET_INPUT otp no yes (empty) Governed env variable detected by automated env scan (otp scope).              
FLOW_SELECTOR_INDEX otp no no 0 Governed env variable detected by automated env scan (otp scope).              
FLOW_SESSION_ID otp no no (empty) Governed env variable detected by automated env scan (otp scope).              
FLOW_STEP_ID otp no no (empty) Governed env variable detected by automated env scan (otp scope).              
GMAIL_IMAP_PASSWORD otp no yes (empty) Gmail IMAP app password.              
GMAIL_IMAP_USER otp no yes (empty) Gmail IMAP username.              
IMAP_HOST otp no no (empty) Generic IMAP host.              
IMAP_PASSWORD otp no yes (empty) Generic IMAP password.              
IMAP_USER otp no yes (empty) Generic IMAP username.              
OTP_CODE otp no yes (empty) Governed env variable detected by automated env scan (otp scope).              
OTP_PROVIDER otp no no (empty) Governed env variable detected by automated env scan (otp scope).              
PYTHON_BIN otp no no (empty) Governed env variable detected by automated env scan (otp scope).              
REGISTER_PASSWORD otp no yes (empty) Governed env variable detected by automated env scan (otp scope).              
REPLAY_PASSWORD otp no yes (empty) Governed env variable detected by automated env scan (otp scope).              
REPLAY_TOKEN otp no yes (empty) Governed env variable detected by automated env scan (otp scope).              
AUTOMATION_BACKEND_PORT runtime no no 17380 Governed env variable detected by automated env scan (runtime scope).              
BACKEND_PID runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
BACKEND_PORT runtime no no 17380 Governed env variable detected by automated env scan (runtime scope).              
BASE_BRANCH runtime no no (empty) Upstream sync script variable for base branch.              
BASE_ORIGIN runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
BASE_URL runtime no no (empty) Legacy runtime base URL alias; prefer UIQ_BASE_URL.              
CANONICAL_PIPELINE_PATH runtime no no Flow -> Template -> Run Canonical pipeline narrative label used by run-pipeline scripts.              
CDP_DISCOVERY_TIMEOUT_MS runtime no no 5000 Governed env variable detected by automated env scan (runtime scope).              
CDP_HTTP_URL runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
CDP_URL runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
COMPUTER_USE_AUTO_CONFIRM runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
CONFIG_REQUIRED runtime no no true Upstream source config required flag read by bootstrap scripts.              
DEFAULT_START_URL runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
DEFAULT_WORKSPACE_ALLOWLIST_ENV runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
EMAIL_A runtime no yes (empty) Governed env variable detected by automated env scan (runtime scope).              
EMAIL_B runtime no yes (empty) Governed env variable detected by automated env scan (runtime scope).              
HEADLESS runtime no no false Governed env variable detected by automated env scan (runtime scope).              
MIDSCENE_DRIVER runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
MODE runtime no no manual Governed env variable detected by automated env scan (runtime scope).              
PASSWORD runtime no yes (empty) Governed env variable detected by automated env scan (runtime scope).              
PIPELINE_BACKEND_PORT runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
POLL_TIMEOUT_SECONDS runtime no no 120 Governed env variable detected by automated env scan (runtime scope).              
RECORD_MODE runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
REDACTED runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
REMOTE_NAME runtime no no upstream Upstream remote name parsed from source config.              
RESUME runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
RETRIES runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
ROOT runtime no no (empty) Script-local root variable detected by env governance scanner.              
ROUND runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
RUNTIME_BACKUP_DIR runtime no no (empty) Backup output directory override for runtime backup scripts.              
RUNTIME_BACKUP_KEEP_COUNT runtime no no 20 Maximum number of runtime backup archives to keep.              
RUNTIME_BACKUP_RETENTION_DAYS runtime no no 14 Runtime backup archive retention in days.              
RUNTIME_CACHE_DIR runtime no no .runtime-cache/cache Runtime cache directory override.              
RUNTIME_GC_CI_KEEP_COUNT runtime no no 30 Canonical number of latest CI artifact entries to keep under .runtime-cache/artifacts/ci.              
RUNTIME_GC_CI_RETENTION_DAYS runtime no no 14 Retention window in days for CI artifact entries under .runtime-cache/artifacts/ci.              
RUNTIME_GC_DIR_SIZE_THRESHOLD_MB runtime no no 256 Trigger cleanup for dev/mcp/automation/backups when directory size reaches threshold MB.              
RUNTIME_GC_KEEP_RUNS runtime no no 50 Canonical number of latest run artifact directories to keep.              
RUNTIME_GC_MAX_DELETE_PER_RUN runtime no no 500 Maximum delete operations allowed in a single runtime-gc execution.              
RUNTIME_GC_SCOPE runtime no no all Default runtime-gc cleanup scope (logs runs cache dev mcp automation backups all).
RUNTIME_GC_STATE_PATH runtime no no .runtime-cache/metrics/runtime-gc-state.json Runtime GC state output path.              
RUNTIME_LOG_DIR runtime no no .runtime-cache/logs Runtime log directory override.              
RUNTIME_ROOT runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
SESSION_ID runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
SPEC_PATH runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
START_URL runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
START_URL_INPUT runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
STRICT_FLAG runtime no no false Computed strict-mode flag used by upstream bootstrap scripts.              
SUCCESS_SELECTOR runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
SYNC_BRANCH runtime no no (empty) Upstream sync script variable for generated sync branch.              
TOTAL_STEPS runtime no no 9 Preflight total-step marker used for progress labeling.              
UIQ_BASE_URL runtime no no (empty) Canonical runtime base URL for E2E/playwright and Gemini live smoke gates; required when UIQ_GEMINI_LIVE_SMOKE_REQUIRED=true.              
UIQ_ORCHESTRATOR_MAX_PARALLEL_TASKS runtime no no 4 Governed env variable detected by automated env scan (runtime scope).              
UIQ_ORCHESTRATOR_PARALLEL runtime no no 1 Governed env variable detected by automated env scan (runtime scope).              
UIQ_TOOLCHAIN_VERSION runtime no no 0.1.0 Governed env variable detected by automated env scan (runtime scope).              
UIQ_UPSTREAM_BOOTSTRAP_STRICT runtime no no 0 Strict-mode toggle for upstream bootstrap (0/1).              
UIQ_UPSTREAM_BRANCH runtime no no main Upstream branch override for sync/bootstrap scripts.              
UIQ_UPSTREAM_REPO_URL runtime no yes (empty) Upstream repository URL override for sync/bootstrap scripts.              
UIQ_UPSTREAM_SOURCE_CONFIG runtime no no configs/upstream/source.yaml Upstream source config path override.              
UPSTREAM_BRANCH runtime no no main Upstream sync script variable for upstream branch.              
UPSTREAM_BRANCH_OVERRIDE runtime no no (empty) CLI-only upstream branch override marker for sync audits.              
UPSTREAM_REF runtime no no (empty) Upstream sync script variable for upstream ref.              
UPSTREAM_REMOTE runtime no no upstream Upstream sync script variable for remote name.              
UPSTREAM_URL runtime no no (empty) Upstream sync script variable for upstream URL.              
USE_SYSTEM_CHROME runtime no no false Governed env variable detected by automated env scan (runtime scope).              
WEB_RUN_ID runtime no no (empty) Governed env variable detected by automated env scan (runtime scope).              
DATABASE_URL storage no yes postgresql+psycopg://automation:automation@postgres:5432/automation SQL persistence backend URL.              
PROJECT_PYTHON_ENV storage no no .runtime-cache/toolchains/python/.venv Managed local Python project environment root used by repo-owned entrypoints.              
REDIS_URL storage no yes redis://redis:6379/0 Redis backend URL for shared rate limiting.              
UIQ_REPO_ROOT storage no no (empty) Optional repository root override for tool routing.              
UIQ_RUNTIME_CACHE_ROOT storage no no .runtime-cache Canonical runtime cache root path.              
UIQ_TRUSTED_BIN_DIRS storage no no (empty) Optional comma-separated trusted binary directories.              
UNIVERSAL_AUTOMATION_RUNTIME_DIR storage no no (empty) Override universal runtime directory.              
UNIVERSAL_PLATFORM_DATA_DIR storage no no (empty) Override universal platform data directory.              
UV_PROJECT_ENVIRONMENT storage no no .runtime-cache/toolchains/python/.venv uv project environment override used to place the Python runtime under the repo-managed toolchains bucket.              
DESKTOP_RUN_ID_PREFIX tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
DRIVER_ID tests no no (empty) Target driver identifier override for desktop smoke scripts.              
MANUAL_RUN_ID tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
NIGHTLY_RUN_ID tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
RUN_ID tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
RUN_ID_BASE tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
RUN_ID_MAX_LENGTH tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
RUN_ID_PREFIX tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
RUN_IDS tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
RUN_SUFFIX tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
SAMPLE_SIZE tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
SEEN_RUN_IDS tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
SWIFT_BUNDLE_ID tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
SWIFT_BUNDLE_ID_INPUT tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
SWIFT_RUN_ID tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
TARGET_ID tests no no (empty) Target identifier override for manifest and smoke scripts.              
TARGET_PLATFORM tests no no (empty) Target platform override (web tauri swift).          
TASK_CENTER_PANEL_COMMAND_RUNS_TEST_ID tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
TASK_CENTER_PANEL_TEMPLATE_RUNS_TEST_ID tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
TASK_CENTER_TAB_COMMAND_RUNS_TEST_ID tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
TASK_CENTER_TAB_TEMPLATE_RUNS_TEST_ID tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
TAURI_APP_PATH tests no no (empty) Legacy Tauri app path alias for desktop webdriver scripts.              
TAURI_APP_PATH_INPUT tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
TAURI_RUN_ID tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
UI_AUDIT_BACKEND_PORT tests no no 17380 Governed env variable detected by automated env scan (tests scope).              
UI_AUDIT_USE_REAL_BACKEND tests no no false Governed env variable detected by automated env scan (tests scope).              
UIQ_AUTOMATION_INSTALL_DEPS tests no no 0 Reinstall automation dependencies before automation-check when set to 1.              
UIQ_AUTOMATION_WORKERS tests no no (empty) Playwright worker override for automation suite.              
UIQ_CAPTURE_API_MOCK tests no no 0 Enable API mock routing for capture/explore/chaos in local CI web target.              
UIQ_CT_HOST tests no no 127.0.0.1 Governed env variable detected by automated env scan (tests scope).              
UIQ_CT_PORT tests no no 4174 Governed env variable detected by automated env scan (tests scope).              
UIQ_DESKTOP_ONLY_STEPS tests no no desktop_readiness,desktop_smoke,desktop_e2e,desktop_business_regression,desktop_soak Optional desktop-only step ID registry (CSV or JSON).              
UIQ_DRIVER_CAPABILITIES_REGISTRY_FILE tests no no configs/drivers/capabilities.registry.json Driver capability registry file path override.              
UIQ_DRIVER_CAPABILITIES_REGISTRY_JSON tests no no (empty) Inline driver capability registry payload (JSON object).              
UIQ_E2E_PORT tests no no 4173 apps/web e2e target port.              
UIQ_ENABLE_REAL_BACKEND_TESTS tests no no false Enable MCP real backend regression tests.              
UIQ_FAILFAST_TERM_GRACE_SEC tests no no 3 Grace window in seconds before fail-fast escalates from TERM to KILL in test matrix cleanup.              
UIQ_FRONTEND_E2E_PORT tests no no 43173 frontend e2e target port.              
UIQ_FRONTEND_E2E_WORKERS tests no no (empty) Playwright worker override for frontend e2e suite.              
UIQ_PLAYWRIGHT_CT_WORKERS tests no no 50% Governed env variable detected by automated env scan (tests scope).              
UIQ_PLAYWRIGHT_E2E_WORKERS tests no no 50% Governed env variable detected by automated env scan (tests scope).              
UIQ_PLAYWRIGHT_WORKERS tests no no 50% Governed env variable detected by automated env scan (tests scope).              
UIQ_PREFLIGHT_MODE tests no no full Preflight mode override: full or minimal.              
UIQ_PROFILE tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
UIQ_PROFILE_REGISTRY_DIR tests no no profiles Profile registry directory override.              
UIQ_PROFILE_REGISTRY_NAMES tests no no (empty) Inline profile registry names (CSV or JSON array).              
UIQ_PROFILE_SCHEMA_REGISTRY_FILE tests no no configs/schemas/profile.v1.schema.json Profile schema registry file path override.              
UIQ_RUN_GATE_CHECK_IDS tests no no (empty) Gate check registry IDs override (CSV or JSON array).              
UIQ_SUITE_AUTOMATION_CHECK tests no no 0 Enable automation-check suite.              
UIQ_SUITE_BACKEND tests no no 1 Enable backend suite.              
UIQ_SUITE_FRONTEND_E2E tests no no 1 Enable frontend e2e suite.              
UIQ_SUITE_FRONTEND_UNIT tests no no 1 Enable frontend unit suite.              
UIQ_SUITE_ORCHESTRATOR_MCP tests no no 1 Enable orchestrator MCP suite in test matrix (0/1).              
UIQ_SUITE_WEB_E2E tests no no 1 Enable apps/web e2e suite.              
UIQ_SWIFT_BUNDLE_ID tests no no (empty) Swift desktop regression target bundle identifier.              
UIQ_TARGET tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
UIQ_TARGET_SCHEMA_REGISTRY_FILE tests no no configs/schemas/target.v1.schema.json Target schema registry file path override.              
UIQ_TAURI_APP_PATH tests no no (empty) Absolute app bundle path for Tauri desktop regression.              
UIQ_TEST_CHILD_PID_FILE tests no no (empty) Temporary file path used by fail-fast matrix tests to pass child process PID across shell/python boundaries.              
UIQ_TEST_LOG_DIR tests no no .runtime-cache/artifacts/ci/test-matrix Test matrix log directory.              
UIQ_TEST_MATRIX_CMD_APPS_WEB_E2E tests no no (empty) Optional command override for the apps/web e2e suite in scripts/test-matrix.sh.              
UIQ_TEST_MATRIX_CMD_AUTOMATION_CHECK tests no no (empty) Optional command override for the automation-check suite in scripts/test-matrix.sh.              
UIQ_TEST_MATRIX_CMD_BACKEND_PYTEST tests no no (empty) Optional command override for the backend pytest suite in scripts/test-matrix.sh.              
UIQ_TEST_MATRIX_CMD_FRONTEND_E2E tests no no (empty) Optional command override for the frontend e2e suite in scripts/test-matrix.sh.              
UIQ_TEST_MATRIX_CMD_FRONTEND_UNIT tests no no (empty) Optional command override for the frontend unit suite in scripts/test-matrix.sh.              
UIQ_TEST_MATRIX_CMD_ORCHESTRATOR_MCP_GATE tests no no (empty) Optional command override for the orchestrator MCP gate suite in scripts/test-matrix.sh.              
UIQ_TEST_MODE tests no no parallel Test matrix mode: parallel or serial.              
UIQ_TEST_RUN_ID tests no no (empty) Optional explicit test run identifier.              
UIQ_UNIT_FILE_PARALLELISM tests no no true Governed env variable detected by automated env scan (tests scope).              
UIQ_UNIT_MAX_WORKERS tests no no 4 Governed env variable detected by automated env scan (tests scope).              
UIQ_UNIT_MIN_WORKERS tests no no 1 Governed env variable detected by automated env scan (tests scope).              
UIQ_WEB_ONLY_STEPS tests no no capture,explore,chaos,a11y,perf,visual,load Optional web-only step ID registry (CSV or JSON).              
UIQ_WEB_PORT tests no no 4173 Governed env variable detected by automated env scan (tests scope).              
USABILITY_SAMPLE_SIZE tests no no (empty) Governed env variable detected by automated env scan (tests scope).              
WEB_PORT tests no no 4173 Governed env variable detected by automated env scan (tests scope).              
WEBDRIVER_CAPABILITIES_JSON tests no no (empty) Optional JSON capabilities override for webdriver sessions.              
WEBDRIVER_PROVIDER tests no no (empty) Webdriver provider label for diagnostics.              
WEBDRIVER_URL tests no no http://127.0.0.1:4444 Webdriver endpoint URL for desktop smoke scripts.              
XCUITEST_CONFIGURATION tests no no (empty) XCUITest build configuration override.              
XCUITEST_DESTINATION tests no no platform=macOS XCUITest destination override.              
XCUITEST_MODE tests no no test XCUITest execution mode (test build-for-testing).            
XCUITEST_ONLY_TESTING tests no no (empty) Comma-separated xcodebuild only-testing entries.              
XCUITEST_PROJECT tests no no (empty) XCUITest .xcodeproj path override.              
XCUITEST_SCHEME tests no no (empty) XCUITest scheme override.              
XCUITEST_SKIP_TESTING tests no no (empty) Comma-separated xcodebuild skip-testing entries.              
XCUITEST_TEST_PLAN tests no no (empty) XCUITest test plan override.              
XCUITEST_WORKSPACE tests no no (empty) XCUITest .xcworkspace path override.              
OTP_DEDUPE_REDIS_PREFIX vonage no no otp:vonage:dedupe Redis key prefix for Vonage OTP dedupe.              
OTP_DEDUPE_STRICT vonage no no false Fail closed when dedupe storage is unavailable.              
VONAGE_API_KEY vonage no yes (empty) Vonage API key for health checks.              
VONAGE_API_SECRET vonage no yes (empty) Vonage API secret for health checks.              
VONAGE_AUDIT_BACKUP_COUNT vonage no no 4 Vonage callback audit log backup file count.              
VONAGE_AUDIT_MAX_BYTES vonage no no 2097152 Vonage callback audit log max file size in bytes.              
VONAGE_AUDIT_RETENTION_DAYS vonage no no 7 Vonage callback audit log retention window in days.              
VONAGE_INBOUND_TOKEN vonage no yes (empty) Vonage inbound webhook token.              
VONAGE_LOAD_CONCURRENCY vonage no no (empty) Governed env variable detected by automated env scan (vonage scope).              
VONAGE_LOAD_TOTAL vonage no no (empty) Governed env variable detected by automated env scan (vonage scope).              
VONAGE_MESSAGE_ID_TTL_SECONDS vonage no no 86400 Message-id dedupe TTL.              
VONAGE_MIN_BALANCE vonage no no 1 Minimum expected account balance.              
VONAGE_OTP_TO_NUMBER vonage no no (empty) Allowed recipient number for OTP pickup.              
VONAGE_POOL_NUMBERS vonage no no (empty) Optional comma-separated required number pool.              
VONAGE_SIGNATURE_ALGO vonage no no sha256 Vonage signature algorithm.              
VONAGE_SIGNATURE_MAX_SKEW_SECONDS vonage no no 600 Max callback timestamp skew.              
VONAGE_SIGNATURE_SECRET vonage no yes (empty) Vonage callback signature secret.              
VONAGE_WEBHOOK_URL vonage no no (empty) Governed env variable detected by automated env scan (vonage scope).