config.example.env

# Copy to .envrc or source manually before running npm run start:http.
CODEXBRIDGE_ROOT=/absolute/path/to/your/repo
CODEXBRIDGE_ALLOWED_ROOTS=/absolute/path/to
CODEXBRIDGE_HOST=127.0.0.1
CODEXBRIDGE_PORT=8787
CODEXBRIDGE_BASH_MODE=safe
# Optional local bash session guard. If required, bash tool calls must include the matching session_id.
# CODEXBRIDGE_BASH_SESSION_ID=main
# CODEXBRIDGE_REQUIRE_BASH_SESSION=1
# Optional non-interactive SSH profiles. Use dry_run first; no passwords, sudo prompts, scp, or interactive shells.
# CODEXBRIDGE_SSH_MODE=safe
# CODEXBRIDGE_SSH_PROFILES={"staging":{"host":"staging.example.com","user":"deploy","port":22,"identityFile":"~/.ssh/id_ed25519","workdir":"/srv/app","mode":"safe"}}
# Task resume needs no configuration: task_plan with plan_steps persists the active task
# under .ai-bridge (current-task.json), resumable in a new session via task_resume.
CODEXBRIDGE_WRITE_MODE=handoff
CODEXBRIDGE_TOOL_MODE=standard
# Dedicated HTTPS origin for ChatGPT widget iframes. Required for app submission.
CODEXBRIDGE_WIDGET_DOMAIN=https://naplesblue.github.io
CODEXBRIDGE_HTTP_TOKEN=replace-with-a-long-random-token
# Require a token even for loopback binds. Non-loopback and tunnel mode require one unless explicitly overridden.
# CODEXBRIDGE_REQUIRE_HTTP_TOKEN=1
# CODEXBRIDGE_ALLOW_NO_HTTP_TOKEN=1
CODEXBRIDGE_CONTEXT_DIR=.ai-bridge
# Optional stable public URL mode. Quick tunnels do not keep the same hostname.
# CODEXBRIDGE_TUNNEL=cloudflare-named
# CODEXBRIDGE_PUBLIC_HOSTNAME=codexbridge.example.com
# CLOUDFLARE_TUNNEL_NAME=codexbridge
# Or use a dashboard-managed tunnel token:
# CLOUDFLARE_TUNNEL_TOKEN_FILE=/Users/you/.codexbridge/cloudflare-tunnel-token
# Optional comma-separated extra block list:
# CODEXBRIDGE_BLOCKED_GLOBS=**/secrets/**,**/*.sqlite,**/*.db