# svrnty-hermes-webui-plugin — env contract.
# Copy to .env (gitignored) and edit. NO SECRETS in this file.
#
# Required (set in the hermes-webui process env, NOT in this file unless you
# source it into the venv):
#
#   HERMES_WEBUI_PYTHON_PLUGIN=svrnty_hermes_webui_plugin
#       Tells the fork's loader hook to import this plugin. Without it the
#       fork runs vanilla (no Svrnty mods). Usually set in docker-compose.override.yml
#       or in the systemd unit's EnvironmentFile.
#
# Optional — STT (Speech-to-Text) for voice-message attachments:
#
#   HERMES_WEBUI_STT_URL=http://stt-host:8000/v1/audio/transcriptions
#       External STT endpoint (OpenAI-shape or WhisperX). When unset, the
#       /api/transcribe route returns 503 + audio_attachment_processor is a no-op.
#
#   HERMES_WEBUI_STT_KEY=
#       Optional bearer token for the STT endpoint. Leave empty for open endpoints.
#
# Optional — BTE (sovereign brand backend) — used by routes that talk to BTE:
#
#   BTE_BASE_URL=http://localhost:6001
#   BTE_TENANT_ID=00000000-0000-0000-0000-000000000001
#       Brand truth backend (REST). The plugin reads these at call time.
#
# All other secrets (credctl-managed) resolve at call-time via credbridge —
# they never enter this file. See ../cmo/credbridge.sh.