# AgentGuard environment configuration.
#
# Usage:
#   Docker Compose  →  cp .env.example .env  &&  docker compose up
#   Native dev      →  cp .env.example .env  &&  ./scripts/run-dev.sh
#
# Variables marked "(optional)" have built-in defaults; you can delete or
# leave them blank and everything will still start correctly.
#
# ─────────────────────────────────────────────────────────────────────────────
# PostgreSQL  (docker-compose managed; change credentials if needed)
# ─────────────────────────────────────────────────────────────────────────────
POSTGRES_USER=agentguard
POSTGRES_PASSWORD=agentguard
POSTGRES_DB=agentguard

# ─────────────────────────────────────────────────────────────────────────────
# AgentGuard runtime server
# ─────────────────────────────────────────────────────────────────────────────
AGENTGUARD_PORT=38080                  # (optional) default: 38080
AGENTGUARD_MODE=enforce                # (optional) enforce | monitor | dry_run
AGENTGUARD_RUNTIME_MODE=sync           # (optional) sync | async
AGENTGUARD_LOG_LEVEL=info              # (optional) debug | info | warning | error
AGENTGUARD_API_KEY=sk-agentguard-backend-X9m42Vq7Tz8nL3pA6cR0yH5uJ1sWfKdE

# ─────────────────────────────────────────────────────────────────────────────
# State cache & persistence
# (docker-compose sets these automatically via redis/postgres services)
# Uncomment below only for native dev when Redis / Postgres are running locally.
# ─────────────────────────────────────────────────────────────────────────────
# AGENTGUARD_STATE_CACHE=redis://localhost:6379/0
# AGENTGUARD_POSTGRES_URL=postgresql://agentguard:agentguard@localhost:5432/agentguard

# ─────────────────────────────────────────────────────────────────────────────
# Frontend web UI  (served by the `frontend` docker-compose service)
# ─────────────────────────────────────────────────────────────────────────────
FRONTEND_PORT=8080                     # (optional) host port for the web UI
# AGENTGUARD_API_BASE=http://localhost:38080  # override for native dev

# Server plugin config (optional). Used by the remote/server plugin manager.
# Rule-based plugin settings, including LLM_CHECK reviewer config, live in
# ./config/plugins.json -> rule_based_plugin.env
AGENTGUARD_SERVER_PLUGIN_CONFIG=./config/plugins.json