Deploy: Stack A (NIM brain + Maverick judge + Sarvam voice). D-019.

.env.example

@@ -1,15 +1,33 @@
 # Copy this to .env and fill in. Do NOT commit .env.
 
-# Primary provider — Sarvam (STT, TTS, LLM)
+# Voice + Indic translation — Sarvam AI (STT, TTS, Indic translation)
 SARVAM_API_KEY=sk_your_sarvam_api_key_here
 
-# Embeddings — Voyage AI (Anthropic's recommended partner)
+# (legacy — embeddings now run locally via BGE-small; this is kept only for back-compat
+# with old extracted/ artifacts.)
 VOYAGE_API_KEY=pa-your_voyage_key_here
 
-# Grader / self-critique — Groq (Llama-3.3-70B, free tier, OpenAI-compatible API)
-# Used for eval harness AND as a fallback brain (router escalates here for complex queries).
-GROQ_API_KEY=gsk_your_groq_api_key_here
+# NVIDIA NIM — single provider for the entire reasoning stack:
+#   Brain  = qwen/qwen3-next-80b-a3b-instruct  (Qwen 80B, primary)
+#   Judge  = mistralai/mistral-large-3-675b-instruct-2512  (Mistral Large 3, different family from brain)
+# Free tier: 40 req/min, no daily cap, no card. Get a key at https://build.nvidia.com.
+NVIDIA_NIM_API_KEY=nvapi-your_nim_key_here
 
-# Fallback brain — OpenRouter (DeepSeek-V3 671B, currently SOTA open-source)
-# Used by router for complex multi-policy reasoning queries.
-OPENROUTER_API_KEY=sk-or-v1-your_openrouter_key_here
+# Hugging Face — used by tools/upload_*.py for Space + dataset sync
+HF_TOKEN=hf_your_token_here
+
+# ---------------------------------------------------------------------------
+# Admin control panel (LLM control UI)
+# ---------------------------------------------------------------------------
+# The /admin/llm-control.html page + /api/admin/* endpoints are HIDDEN from
+# non-allowlisted callers. BOTH gates must pass:
+#   1. Client IP must match one of the IPs in ADMIN_IP_ALLOWLIST (comma-sep)
+#   2. Request must include header X-Admin-Password matching ADMIN_PASSWORD
+# Unauthorized requests get 404 (not 401) so the existence of /api/admin/* is
+# concealed. Set BOTH or admin endpoints are disabled by default.
+
+# Find your public IP at https://api.ipify.org (run from where you'll use admin)
+ADMIN_IP_ALLOWLIST=your.public.ip.here
+
+# A strong unique passphrase. Min 16 chars recommended. Keep out of git.
+ADMIN_PASSWORD=replace_with_a_strong_random_passphrase

backend/main.py

@@ -194,11 +194,12 @@ async def _startup_llm_health_probe():
 @app.get("/api/health", response_model=HealthResponse)
 async def health():
     missing = settings.validate()
+    # Post-D-019 the stack is Sarvam (voice + Indic) + NVIDIA NIM (brain +
+    # judge). GROQ + OpenRouter were retired; don't reference them here or
+    # this endpoint AttributeError's on every call.
     providers_ok = {
-        "sarvam": bool(settings.SARVAM_API_KEY),
-        "voyage": bool(settings.VOYAGE_API_KEY),
-        "groq": bool(settings.GROQ_API_KEY),
-        "openrouter": bool(settings.OPENROUTER_API_KEY),
+        "sarvam":     bool(settings.SARVAM_API_KEY),
+        "nvidia_nim": bool(settings.NVIDIA_NIM_API_KEY),
     }
     return HealthResponse(
         status="ok" if not missing else "degraded",