Environment
Who a run acts as is never read from the environment; these variables configure hosts only.
| variable | read by | what |
|---|---|---|
ATLIBS_SERVER_STATE | atlibs, Node CLI, node-hono | the state dir (default ~/.atlibs-server): sealed sessions, attestation and did:keys, the records ledger. Keep it private; share it between processes to share sessions |
ATLIBS_ORIGIN | atlibs serve, node-hono | the public origin (same as --origin): OAuth client ids and callbacks live on it |
ATLIBS_BUDGET | atlibs, Node CLI | JSON merged over a run's budget; "unlimited" for calls, callsPerMinute, events, wallMs; ioBytes (up to 16 MiB) for bigger events (limits) |
ATLIBS_HTTP | atlibs, Node CLI | JSON, or @file of it: the origins com.fedfork.exec.http.fetch may reach, each with the headers the host adds ({"https://api.anthropic.com":{"headers":{"x-api-key":"..."}}}) or a service-auth token it mints per request with the run's session ({"https://cocore.dev":{"serviceAuth":{"aud":"did:web:cocore.dev","lxm":"dev.cocore.inference.dispatch"}}}); a module reaches those its module.json http lists too (calls). Keep the file private |
ATLIBS_HELD | atlibs, Node CLI | JSON, or @file of it: { name: value }, the held values each run starts with (a composition's: the root's run); counted against heldBytes |
ATLIBS_WASM_CONCURRENCY | atlibs, Node | wasm runs executing at once per process (default: the core count); not a positive integer: exit 1 at startup |
ATLIBS_ALLOW_PRIVATE | atlibs, Node | 1: DID, PDS and blob lookups may use http and private addresses (local development, tests) |
ATLIBS_PLC_URL | atlibs | the PLC directory (default https://plc.directory) |
ATLIBS_HANDLE_RESOLVER | atlibs | where handles resolve (default https://public.api.bsky.app); the DID document must claim the handle back |
ATLIBS_BROWSER | atlibs login | the command that opens the sign-in URL (default open / xdg-open); the URL is printed either way |
ATLIBS_IROH_KEY | iroh transport | the ssh private key for iroh sessions (default <state>/iroh_ed25519) |
ATLIBS_TRANSPORTS | Node CLI | comma-separated module paths, each exporting transport (Transports) |
ATLIBS_STAGE | node-hono | the stage.json to serve (default staged/stage.json) |
ATLIBS_EXTRA_CA | atlibs | tests only: a PEM file of extra roots trusted for wss:// |
PORT | node-hono | listen port (default 8788) |
XDG_CACHE_HOME | atlibs publish | its cache: $XDG_CACHE_HOME/atlibs/<did>/ (default ~/.cache/atlibs/<did>/) |
CONTAINER_ENGINE | atlibs publish, atlibs verify | the container engine (default: the first of podman, docker, container whose info answers) |