# Declared manifest of required env var NAMES referenced via ${VAR:?...} in
# docker/docker-compose.infra.yml (OMN-15537).
#
# This file declares NAMES ONLY — never values, never secrets. It is checked by
# scripts/check_required_env_vars.py (wired as the check-required-env-vars pre-commit
# hook) as a pure diff between two committed files: this manifest and the compose
# file's ${VAR:?} set. The check never reads the invoking host's environment or any
# local env file, so it is deterministic on every build host and in CI.
#
# When you add a new ${NEW_VAR:?...} to docker/docker-compose.infra.yml, add NEW_VAR
# here in the same commit (alphabetical order). When you remove a required var from
# the compose file, remove it here too. The hook fails on either kind of drift.
ARCH_GRAPH_BOLT_URI
AUXILIARY_SERVICES_OMNIMEMORY_ENABLED
BIFROST_VERIFY_ENDPOINTS
BIFROST_VERTEX_GEMINI_ENDPOINT_URL
DEPLOY_AGENT_HMAC_SECRET
DEV_BOUNDARY_DLQ_ENABLED
DEV_REDPANDA_ADVERTISE_HOST
DEV_RUNTIME_EFFECTS_CAPABILITIES
DEV_RUNTIME_EFFECTS_PORT
DEV_RUNTIME_EFFECTS_SECRET_RESOLVER_CONFIG_JSON
DEV_RUNTIME_EFFECTS_SECRET_RESOLVER_CONFIG_PATH
DEV_RUNTIME_MAIN_CAPABILITIES
DEV_RUNTIME_MAIN_PORT
DEV_RUNTIME_MAIN_PUBLISH_INTROSPECTION
DEV_RUNTIME_MAIN_SECRET_RESOLVER_CONFIG_JSON
DEV_RUNTIME_MAIN_SECRET_RESOLVER_CONFIG_PATH
DEV_RUNTIME_WORKER_CAPABILITIES
DEV_RUNTIME_WORKER_SECRET_RESOLVER_CONFIG_JSON
DEV_RUNTIME_WORKER_SECRET_RESOLVER_CONFIG_PATH
DEV_WORKER_REPLICAS
GEMINI_API_KEY
GITHUB_TOKEN
GOOGLE_API_KEY
GOOGLE_CLOUD_LOCATION
GOOGLE_CLOUD_PROJECT
INFISICAL_AUTH_SECRET
INFISICAL_DB_CONNECTION_URI
INFISICAL_ENCRYPTION_KEY
INFISICAL_REDIS_URL
LINEAR_API_KEY
LLM_CLOUD_ENDPOINT_HOST_ALLOWLIST
LLM_CODER_FAST_URL
LLM_CODER_URL
LLM_DEEPSEEK_R1_URL
LLM_EMBEDDING_URL
LLM_ENDPOINT_CIDR_ALLOWLIST
LLM_GLM_API_KEY
LLM_GLM_MODEL_NAME
LLM_GLM_URL
LOCAL_LLM_SHARED_SECRET
OMNIMEMORY_ENABLED
OMNIMEMORY_MEMGRAPH_PORT
ONEX_ACTIVE_RUNTIME_PACKAGES
ONEX_REGISTRATION_AUTO_ACK
ONEX_SERVICE_CLIENT_SECRET
POSTGRES_PASSWORD
