# ---------------------------------------------------------------------------
# Required
# ---------------------------------------------------------------------------
OPENAI_API_KEY=sk-***
ANTHROPIC_API_KEY=sk-***

# ---------------------------------------------------------------------------
# JWT verification for AgentOS. Generate your JWT_VERIFICATION_KEY at os.agno.com.
# In production, the app refuses to serve traffic without a JWT_VERIFICATION_KEY or JWT_JWKS_FILE.
# Set `authorization=False` in app/main.py to opt out (not recommended).
# ---------------------------------------------------------------------------
# Quote the value so parsers read the multi-line PEM as one variable:
# JWT_VERIFICATION_KEY="-----BEGIN PUBLIC KEY-----
# MIIBIjANBgkq...
# -----END PUBLIC KEY-----"
# JWT_JWKS_FILE=/app/jwks.json

# ---------------------------------------------------------------------------
# AgentOS URL used by the scheduler and MCP server.
# Set this to the public URL of your AgentOS instance.
# ---------------------------------------------------------------------------
# AGENTOS_URL=http://127.0.0.1:8000

# ---------------------------------------------------------------------------
# MCP OAuth — set MCP_CONNECT_SECRET to turn the /mcp endpoint into its own
# OAuth 2.1 authorization server, which is how claude.ai and ChatGPT (web) connect.
# Connecting to the MCP server asks for this secret on a consent page.
# Generate a strong one (≥16 chars):
#   openssl rand -base64 32
# ---------------------------------------------------------------------------
# MCP_CONNECT_SECRET=

# ---------------------------------------------------------------------------
# Web access uses Parallel SDK when authenticated,
# and falls back to Parallel's keyless MCP server for local development.
# ---------------------------------------------------------------------------
# PARALLEL_API_KEY=

# ---------------------------------------------------------------------------
# Slack — set both to enable the Slack interface.
#   SLACK_BOT_TOKEN       Bot User OAuth Token (xoxb-***)
#   SLACK_SIGNING_SECRET  Signing Secret (Basic Information → App Credentials)
# ---------------------------------------------------------------------------
# SLACK_BOT_TOKEN=
# SLACK_SIGNING_SECRET=

# ---------------------------------------------------------------------------
# Database
# ---------------------------------------------------------------------------
# DB_HOST=localhost
# DB_PORT=5432
# DB_USER=ai
# DB_PASS=ai
# DB_DATABASE=ai
# DB_DRIVER=postgresql+psycopg

# ---------------------------------------------------------------------------
# Engineer credentials and optional AgentCore host access
# ---------------------------------------------------------------------------
# Select the sandbox provider, image and runtime ARN in app/sandbox.py.
# AgentCore requires persistent /data storage on the API host; see docs/sandboxes.md.
# ANTHROPIC_API_KEY=              # Claude API authentication
# CLAUDE_CODE_OAUTH_TOKEN=        # alternative Claude Code authentication
# Codex uses OPENAI_API_KEY above. Agno forwards harness model credentials.
# AWS_PROFILE=your-profile
# Alternatively use AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY / AWS_SESSION_TOKEN
# on the host. AgentCore uses the region encoded in its runtime ARN.
# Host AWS credentials are not forwarded into the sandbox; use its execution role.
# Bedrock flags/region and private-repository GITHUB_READ_TOKEN must be supplied
# explicitly through the chosen provider's env mapping; see docs/sandboxes.md.

# Deployment overrides (see README.md)
# GCP_PROJECT_ID=YOUR_PROJECT_ID