# ─── LiteLLM proxy (where every LLM call gets routed) ─────────────────────
# All agent LLM calls go through this proxy so they show up in your dashboard.
#
# IMPORTANT: We use the Anthropic Messages API format (`/v1/messages`), not
# OpenAI Completions. The Anthropic SDK appends `/v1/messages` to baseUrl on
# its own, so set this to the LiteLLM root with NO `/v1` suffix.
#
# This means LITELLM_MODEL_ID must be a Claude model in your model_list (the
# best path through LiteLLM's Anthropic passthrough — no format translation,
# native thinking blocks, native prompt caching).
LITELLM_BASE_URL=http://localhost:4000
LITELLM_API_KEY=sk-<your-litellm-virtual-key>
LITELLM_MODEL_ID=claude-opus-4-7-thinking-xhigh

# ─── Dashboard auth ───────────────────────────────────────────────────────
# Required. Generate strong values, e.g.:
#   openssl rand -base64 32
DASHBOARD_MASTER_KEY=replace-with-long-random-api-key
DASHBOARD_USERNAME=admin
DASHBOARD_PASSWORD=replace-with-long-random-password
DASHBOARD_SESSION_SECRET=replace-with-long-random-session-secret
# Set true when served over HTTPS. Leave false for plain localhost.
DASHBOARD_COOKIE_SECURE=false

# ─── GitHub bot identity ──────────────────────────────────────────────────
# A dedicated bot account, NOT your personal account.
# Fine-grained PAT scopes:
#   - issues:write on BerriAI/litellm
#   - pull_requests:write on BerriAI/litellm
#   - contents:write on <bot>/litellm (the fork)
#   - workflows:write on <bot>/litellm (lets the bot push branches CI runs on)
GITHUB_TOKEN=ghp_xxx
GITHUB_BOT_USERNAME=shin-bot

# ─── Slack bot interface (optional) ───────────────────────────────────────
# Bolt-only mode (Socket Mode). This is the single supported Slack path.
SLACK_USE_BOLT=true
# Required for Bolt Socket Mode.
SLACK_APP_TOKEN=
SLACK_SIGNING_SECRET=
SLACK_BOT_TOKEN=xoxb-xxx
# Optional but recommended for message.channels fallback routing.
SLACK_BOT_USER_ID=
# Legacy poll options (disabled in Bolt-only mode).
SLACK_POLL_ENABLED=false
SLACK_POLL_CHANNELS=
SLACK_POLL_INTERVAL_SEC=10

# ─── Target repo ──────────────────────────────────────────────────────────
TARGET_REPO_OWNER=BerriAI
TARGET_REPO_NAME=litellm

# ─── Scheduling ───────────────────────────────────────────────────────────
INTERVAL_MIN=15
# How often (minutes) to run the automatic batch scheduler. 0 = disabled.
BATCH_INTERVAL_MIN=0
# How many issues to process per batch run.
BATCH_SIZE=10
MAX_RUN_MINUTES=20

# ─── Chat heartbeat + Slack durability ────────────────────────────────────
# Every Slack message is persisted to the slack_tasks DB table the moment
# it arrives. Three mechanisms work together to guarantee every message
# closes the loop with a real Slack reply:
#   1. Per-turn heartbeat in runRootChat — every CHAT_HEARTBEAT_INTERVAL_SEC
#      we inject a HEARTBEAT user message into the running agent via
#      agent.steer(), so it keeps moving between assistant turns.
#   2. Global poller in src/slack/bolt.ts — every CHAT_HEARTBEAT_INTERVAL_SEC
#      we scan the DB for 'running' tasks whose updated_at hasn't advanced
#      in CHAT_HEARTBEAT_STUCK_AFTER_SEC; for each, we post a "still working"
#      nudge to the Slack thread so the user knows we're alive.
#   3. Boot-time recovery — on startup we scan for orphaned 'pending' /
#      'running' tasks (left behind by a process crash) and post a
#      "I crashed, please resend" notice to each thread.
#
# Flip CHAT_HEARTBEAT_ENABLED=false as a kill switch — disables both the
# per-turn heartbeat and the global poller. Boot-time recovery still runs.
CHAT_HEARTBEAT_ENABLED=true
CHAT_HEARTBEAT_INTERVAL_SEC=30
CHAT_HEARTBEAT_STUCK_AFTER_SEC=120

# ─── Safety flags (default OFF — flip when you trust it) ──────────────────
# When false, the daemon writes reports to ./runs/ but does not touch GitHub.
POST_COMMENTS=false
# When false, only Phase 1 (repro) runs. When true, easy/medium issues also
# get a Phase 2 fix attempt with screenshots/GIF and a draft fork-PR.
AUTO_FIX=false
# Hard cap on auto-fix PRs per UTC day.
MAX_FIX_PRS_PER_DAY=5

# ─── Local litellm proxy (the agent runs this against the cloned repo) ────
# Admin credentials for the per-run sandbox proxy are auto-generated at
# runtime — no env vars needed. Each repro run boots its own isolated proxy
# on a unique port (starting at 5001) with random master key + admin creds.
#
# Optional: a sandbox Postgres URL the agent can use for the proxy DB.
# If unset, the proxy runs with its in-memory/SQLite default.
LITELLM_SANDBOX_DB_URL=

# ─── Paths (usually leave as-is) ──────────────────────────────────────────
WORKDIR=./workdir
RUNS_DIR=./runs
STATE_DB=./state.sqlite
SCREENSHOT_DIR=/tmp/shin-watcher-screenshots

# ─── Self-improving agent ─────────────────────────────────────────────────
# The BerriAI/self-improving-agent feedback tools let the root agent propose
# diffs to its OWN prompts/tools/code when you give it feedback in chat.
# apply_proposal opens a draft PR via the GitHub REST API after explicit
# approval — no local clone, no `gh` CLI, no working-tree races.
#
# REPO  = "owner/name" of the repo the agent should PR against
# TOKEN = fine-grained PAT with: contents:write + pull_requests:write
#         on that repo. (You can reuse GITHUB_TOKEN above if it has those
#         scopes on shin-builder-oss.)
SELF_IMPROVING_AGENT_REPO=BerriAI/shin-builder-oss
SELF_IMPROVING_AGENT_GITHUB_TOKEN=
SELF_IMPROVING_AGENT_PROPOSALS_DIR=./runs/improvements
# Optional overrides:
# SELF_IMPROVING_AGENT_BASE_BRANCH=main
# SELF_IMPROVING_AGENT_CACHE_DIR=~/.cache/self-improving-agent/BerriAI__shin-builder-oss

# ─── Langfuse tracing (observability) ─────────────────────────────────────
# Each chat turn is recorded as one Langfuse trace named `chat-turn`:
#   input    = the human message
#   output   = the agent's text reply
#   sessionId = "issue-<N>" derived from the agent's Turn-1 declaration
#               (or the user's "#1234" / GitHub issue URL), so every turn
#               of a conversation about a single issue lands in one
#               Langfuse session. See BerriAI/shin-watcher-oss#2.
#
# If keys are unset the bot still runs — tracing just no-ops.
LANGFUSE_PUBLIC_KEY=
LANGFUSE_SECRET_KEY=
LANGFUSE_BASE_URL=https://us.cloud.langfuse.com