# ComplianceAI -- minimal .env (most endpoints are discovered via ARM + DefaultAzureCredential).
#
# Auth: `az login` (or managed identity in Azure). If you have multiple subscriptions,
# set the one that contains your AI Foundry hub:
# AZURE_SUBSCRIPTION_ID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
#
# ---------------------------------------------------------------------------
#  Auto-discovered endpoints (override only for break-glass / cold-start perf)
# ---------------------------------------------------------------------------
# FOUNDRY_PROJECT_ENDPOINT=https://<subdomain>.services.ai.azure.com/api/projects/<project>
# AZURE_OPENAI_ENDPOINT=https://<subdomain>.openai.azure.com
# DOCUMENT_INTELLIGENCE_ENDPOINT=https://<name>.cognitiveservices.azure.com
# AZURE_AI_SEARCH_ENDPOINT=https://<name>.search.windows.net
#
# Production / Functions: pin at least FOUNDRY_PROJECT_ENDPOINT to skip ARM probes.
# AZURE_DISCOVERY_SILENT=1   # omit stderr line when discovery picks a URL
#
# Hosted Azure safety: by default, ComplianceAI now fails closed instead of silently
# falling back to local disk state/blob storage when Azure backing services are
# missing or misconfigured. For local-style fallback behavior inside a hosted env,
# explicitly opt in:
# COMPLIANCEAI_ALLOW_LOCAL_AZURE_FALLBACKS=1
#
# ---------------------------------------------------------------------------
#  Storage (identity-based -- no connection strings needed)
# ---------------------------------------------------------------------------
# AZURE_STORAGE_ACCOUNT_NAME=<storage account for data + schema cache>
# DATA_STORAGE__accountName=<same; used by Function blob/queue bindings>
# QUESTIONNAIRE_SCHEMA_CONTAINER=questionnaire-schemas
# AI_SEARCH_INDEX_NAME=my-index
# AZURE_AI_SEARCH_CONNECTION_NAME=my-search-connection
#
# ---------------------------------------------------------------------------
#  Questionnaire / schema
# ---------------------------------------------------------------------------
QUESTIONNAIRE_TYPE=caiq
# DETECTED_SCHEMA_JSON=path/to/schema.json

# LLM deployment name (endpoint is auto-discovered)
AZURE_OPENAI_DEPLOYMENT=gpt-4o-mini
OPENAI_API_VERSION=2024-10-21

# Turn off automatic Foundry agent creation on first audit_supervisor() call:
# FOUNDRY_AUTO_PROVISION_AGENTS=0
#
# One-click / container deploy: provision worker+manager agents when the API process starts
# (no manual "Provision agents" in a UI). Set in Dockerfile / App Service / Container Apps.
# COMPLIANCEAI_AUTO_PROVISION_AGENTS=1

# Model deployments when creating agents (foundry_agent_factory):
# FOUNDRY_WORKER_MODEL_DEPLOYMENT=gpt-4.1-mini
# FOUNDRY_MANAGER_MODEL_DEPLOYMENT=gpt-4o
#
# Worker Azure AI Search tool: default is vector_simple_hybrid (vector + keyword; no semantic ranking bill).
# Semantic free tier is limited; if you need semantic reranking, enable billing and set:
# FOUNDRY_SEARCH_QUERY_TYPE=vector_semantic_hybrid
# Agents keep their tool config until recreated. After changing this, run:
#   python foundry_agent_factory.py ensure-both --force

# test_jsonl_supervisor.py
# JSONL_SUPERVISOR_CONCURRENCY=8

# Optional: override LLM calibration factor for confidence_self_assessment (default is model-based)
# CONFIDENCE_LLM_CALIBRATION=0.88
#
# Human-in-the-loop: only if overall confidence_score is BELOW this (default 0.65).
# Signal weights (30/40/20/10) are unchanged — this only affects needs_human_review routing.
# CONFIDENCE_HUMAN_REVIEW_THRESHOLD=0.65

# ---------------------------------------------------------------------------
#  FastAPI server (api/main.py)
# ---------------------------------------------------------------------------
# API_PORT=8000
# API_CORS_ORIGINS=*
#
# Azure AD auth (disabled by default for local dev):
# API_AUTH_ENABLED=0
# API_AUTH_TENANT_ID=<your-entra-tenant-id>
# API_AUTH_CLIENT_ID=<your-app-registration-client-id>