This repository uses a Gemini-only runtime contract.
If you are still deciding whether Provenote is worth your time, do not start here. Start with ../README.md, then quickstart.md, and come back when you need the exact environment contract.
Use only the canonical environment variable names documented in this file.
runtime_allowlist(21)
GEMINI_API_KEYOPEN_NOTEBOOK_ENCRYPTION_KEYSURREAL_URLSURREAL_USERSURREAL_PASSWORDSURREAL_NAMESPACESURREAL_DATABASEAPI_HOSTAPI_PORTAPI_RELOADAPI_URLINTERNAL_API_URLAPI_CLIENT_TIMEOUTOPEN_NOTEBOOK_PASSWORDOPEN_NOTEBOOK_CHUNK_SIZEOPEN_NOTEBOOK_CHUNK_OVERLAPOPEN_NOTEBOOK_PHOENIX_ENABLEDOPEN_NOTEBOOK_PHOENIX_COLLECTOR_ENDPOINTOPEN_NOTEBOOK_PHOENIX_PROJECT_NAMEOPEN_NOTEBOOK_PHOENIX_API_KEYGEMINI_MODELblocked_list(40)
ANTHROPIC_API_KEYAZURE_OPENAI_API_KEYAZURE_OPENAI_API_KEY_EMBEDDINGAZURE_OPENAI_API_KEY_LLMAZURE_OPENAI_API_KEY_STTAZURE_OPENAI_API_KEY_TTSAZURE_OPENAI_API_VERSIONAZURE_OPENAI_API_VERSION_EMBEDDINGAZURE_OPENAI_API_VERSION_LLMAZURE_OPENAI_API_VERSION_STTAZURE_OPENAI_API_VERSION_TTSAZURE_OPENAI_ENDPOINTAZURE_OPENAI_ENDPOINT_EMBEDDINGAZURE_OPENAI_ENDPOINT_LLMAZURE_OPENAI_ENDPOINT_STTAZURE_OPENAI_ENDPOINT_TTSDEEPSEEK_API_KEYELEVENLABS_API_KEYGOOGLE_APPLICATION_CREDENTIALSGROQ_API_KEYMISTRAL_API_KEYOLLAMA_API_BASEOLLAMA_BASE_URLOPENAI_API_KEYOPENAI_COMPATIBLE_API_KEYOPENAI_COMPATIBLE_API_KEY_EMBEDDINGOPENAI_COMPATIBLE_API_KEY_LLMOPENAI_COMPATIBLE_API_KEY_STTOPENAI_COMPATIBLE_API_KEY_TTSOPENAI_COMPATIBLE_BASE_URLOPENAI_COMPATIBLE_BASE_URL_EMBEDDINGOPENAI_COMPATIBLE_BASE_URL_LLMOPENAI_COMPATIBLE_BASE_URL_STTOPENAI_COMPATIBLE_BASE_URL_TTSOPENROUTER_API_KEYOPENROUTER_BASE_URLVERTEX_LOCATIONVERTEX_PROJECTVOYAGE_API_KEYXAI_API_KEYGOOGLE_API_KEYSURREAL_PASSSURREAL_ADDRESSSURREAL_PORTAPI_BASE_URLOPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
GEMINI_API_KEY=your-google-ai-studio-key
SURREAL_URL=ws://127.0.0.1:8000/rpc
SURREAL_USER=root
SURREAL_PASSWORD=root
SURREAL_NAMESPACE=open_notebook
SURREAL_DATABASE=open_notebook
bash tooling/scripts/ci/check_env_governance.sh
bash tooling/scripts/ci/check_secret_leaks.sh