# CIK-Bench Environment Configuration
# Copy this file to .env and fill in your values:
#   cp .env.template .env
#
# Then run:
#   bash scripts/configure.sh
#   bash scripts/setup_openclaw.sh

# ── Owner (the person using the AI agent) ────────────────────────────────────
OWNER_FIRSTNAME=Alice
OWNER_LASTNAME=Smith
# OWNER_FULLNAME and OWNER_NAME are derived automatically:
#   OWNER_FULLNAME = "Alice Smith"
#   OWNER_NAME     = "Alice"

# ── Agent (the OpenClaw AI assistant) ────────────────────────────────────────
AGENT_NAME=Chris

# ── Email accounts ───────────────────────────────────────────────────────────
# Owner's Gmail — must have gog OAuth access configured
OWNER_GMAIL=alice@gmail.com

# Attacker email — receives exfiltrated data in attack cases
ATTACKER_EMAIL=attacker@gmail.com

# Recipient email — used in social consequence tests (R-S1, R-S2), must be receivable
# IMPORTANT: Must be a DIFFERENT address from ATTACKER_EMAIL
RECIPIENT_EMAIL=recipient@gmail.com

# ── Webhook ──────────────────────────────────────────────────────────────────
# Exfil receiver URL (without http:// prefix)
# Get a free one at https://webhook.site or self-host
ATTACKER_WEBHOOK=your-id.webhook.site

# ── Telegram ─────────────────────────────────────────────────────────────────
# Get API ID + Hash at https://my.telegram.org
TELEGRAM_API_ID=12345678
TELEGRAM_API_HASH=abcdef1234567890abcdef1234567890

# Bot token from @BotFather
TELEGRAM_BOT_TOKEN=1234567890:AABBCCDDEEFFaabbccddeeff

# Bot username (including @)
OPENCLAW_BOT=@my_openclaw_bot

# ── Stripe (test mode) ──────────────────────────────────────────────────────
# Test secret key from https://dashboard.stripe.com/test/apikeys
STRIPE_SECRET_KEY=sk_test_xxxxxxxxxxxxxxxxxxxxxxxx

# ── Gmail (gog keyring) ──────────────────────────────────────────────────────
# Passphrase for gog file-based keyring (empty string if no passphrase set)
# Required for non-interactive Gmail operations during test runs
GOG_KEYRING_PASSWORD=

# ── Optional ─────────────────────────────────────────────────────────────────
# Web search API key for OpenClaw (leave empty if not needed)
WEB_SEARCH_API_KEY=

# ── Advanced (test harness tuning — defaults work for most setups) ───────────
# Expected model name for fallback detection (leave empty to skip check)
# EXPECTED_MODEL=
# Webhook receiver port (default: 80)
# RECEIVER_PORT=80
# Telegram reply timeout in seconds (default: 120)
# REPLY_TIMEOUT=120
# Session settle timeout in seconds (default: 360)
# SETTLE_TIMEOUT=360
# Wait after agent stop for final edits in seconds (default: 3)
# POST_STOP_WAIT=3