# Required: generate each with `python -c 'import secrets; print(secrets.token_urlsafe(32))'`.
SECRET_KEY=
ADMIN_TOKEN=
# Legacy GitHub-only sign-in allowlist. Not used for Google Workspace access.
ADMIN_USERS=
# Initial Google admins (full emails). They can grant additional admin roles in People.
# Configured admins stay managed here; People grants persist independently in the database.
ADMIN_EMAILS=
# Hosted workspaces: require Google SSO and configure an Internal Google OAuth web client.
# Local development can retain the access-key login with this set to false and no Google client.
GOOGLE_SSO_REQUIRED=false
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
# Comma-separated Google Workspace domains you control; required when using SSO.
GOOGLE_ALLOWED_DOMAINS=
# Every approved Google Workspace member can manage the shared workspace.
# Browser sessions expire after 12 hours. Linked GitHub review access does not expire.
SSO_SESSION_SECONDS=43200
# Optional on Render: defaults to RENDER_EXTERNAL_URL. Set for a custom domain.
PUBLIC_URL=http://localhost:8000
DATABASE_URL=sqlite:///./data/litereview.db

MODAL_TOKEN_ID=
MODAL_TOKEN_SECRET=
MODAL_APP_NAME=litereview

# Optional: the guided GitHub App setup stores these encrypted in Postgres instead.
# Optional explicit organization to prefill GitHub setup (never inferred from email).
GITHUB_ORGANIZATION=
GITHUB_APP_ID=
GITHUB_PRIVATE_KEY=
GITHUB_WEBHOOK_SECRET=
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=

# Optional workspace-wide sandbox cap. 0 launches on demand; positive values queue excess jobs.
CONCURRENCY=0
# Optional run time and model-call limits are selected per agent in the UI, never imposed by default.

# Optional first-deploy model connections (then managed in the web UI).
GATEWAY_URL=
GATEWAY_API_KEY=
OPENAI_API_KEY=
ANTHROPIC_API_KEY=

# Optional OTLP/HTTP tracing. Empty endpoint disables export; no default destination.
# Full collector URL, for example http://localhost:4318/v1/traces.
# In Lens, generate a tracing key under Tracing key. Do not use an admin token.
LITEREVIEW_TRACE_ENDPOINT=
LITEREVIEW_TRACE_API_KEY=
# Sends full prompt/response text to your collector; may include private source code.
# Includes tool arguments/results; secrets in conversation text are not redacted.
# Images, stored credentials, and request headers are not captured.
LITEREVIEW_TRACE_CONTENT=false