# Core
PORT=3001
DEFAULT_WORKSPACE_ID=default
STATE_BACKEND=file
STATE_BACKEND_TABLE=sovereign_state
STATE_BACKEND_KEY=default
STATE_REDIS_KEY=sovereign:state:default
STATE_REDIS_TTL_SECONDS=3600
STATE_PREFER_REDIS_READ=false

# Worker loops
AUTOPILOT_AUTO_START=true
AUTOPILOT_POLL_MS=3000
AUTOPILOT_MAX_CYCLES=12
AUTOPILOT_STEP_TIMEOUT_MS=180000
HEARTBEAT_AUTO_START=true
HEARTBEAT_TICK_MS=15000
COMPANY_COUNCIL_STEP_TIMEOUT_MS=180000
NOTIFICATION_OUTBOX_MAX_ATTEMPTS=8
NOTIFICATION_OUTBOX_BATCH_SIZE=25
NOTIFICATION_OUTBOX_RETRY_BASE_MS=5000
NOTIFICATION_OUTBOX_RETRY_MAX_MS=300000

# LLM providers (set what you use)
OPENAI_API_KEY=
OPENAI_MODEL=gpt-4o-mini
ANTHROPIC_API_KEY=
ANTHROPIC_MODEL=claude-3-5-sonnet-latest
GEMINI_API_KEY=
GEMINI_MODEL=gemini-1.5-pro

OPENROUTER_API_KEY=
OPENROUTER_BASE_URL=https://openrouter.ai/api/v1
OPENROUTER_MODEL=openai/gpt-4o-mini

GROQ_API_KEY=
GROQ_BASE_URL=https://api.groq.com/openai/v1
GROQ_MODEL=llama-3.3-70b-versatile

OLLAMA_BASE_URL=http://localhost:11434/v1
OLLAMA_MODEL=llama3.2

CUSTOM_LLM_API_KEY=
CUSTOM_LLM_BASE_URL=
CUSTOM_LLM_MODEL=gpt-4o-mini

# Web Research APIs (used for agent browsing capabilities)
BRAVE_SEARCH_API_KEY=
TAVILY_API_KEY=
SERPAPI_API_KEY=
PERPLEXITY_API_KEY=

# Channel adapters
CHAT_PROVIDER=openai
CHAT_MODEL_PRIMARY=openai/gpt-4o-mini
CHAT_MODEL_FALLBACKS=anthropic/claude-3-5-sonnet-latest,gemini/gemini-1.5-pro

TELEGRAM_BOT_TOKEN=
TELEGRAM_WEBHOOK_SECRET=
WHATSAPP_ACCESS_TOKEN=
WHATSAPP_VERIFY_TOKEN=
WHATSAPP_PHONE_NUMBER_ID=
GATEWAY_BIND=0.0.0.0
GATEWAY_WS_PATH=/gateway/ws
GATEWAY_WS_MAX_PAYLOAD=1000000
GATEWAY_AUTH_MODE=password
GATEWAY_AUTH_ALLOW_TAILSCALE=true
GATEWAY_TAILSCALE_MODE=off
GATEWAY_TAILSCALE_AUTOMATION=false
GATEWAY_TAILSCALE_RESET_ON_EXIT=false
GATEWAY_HOST_NODE_ID=host-node
GATEWAY_HOST_NODE_NAME=
DEVICE_BRIDGE_PATH=/bridge/ws
DEVICE_BRIDGE_TOKEN=
DEVICE_BRIDGE_MAX_PAYLOAD=1000000
DEVICE_BRIDGE_INVOKE_TIMEOUT_MS=60000

# Security fabric
SECURITY_REQUIRE_AUTH=true
SECURITY_BOOTSTRAP_TOKEN=
SECURITY_RATE_WINDOW_MS=60000
SECURITY_WINDOW_REQUEST_CAP=60
SECURITY_DAY_COST_CAP=1000
SECURITY_KEY_PATH=/app/.data/security.key
SECURITY_SECRETS_PATH=/app/.data/secrets.enc

# Memory engine
MEMORY_VECTOR_DIM=1536
MEMORY_CHUNK_CHARS=900
MEMORY_HYBRID_ALPHA=0.55

# Browser control + host node execution
BROWSER_CONTROL_ENABLED=true
BROWSER_CDP_PORT=9222
BROWSER_HEADLESS=true
BROWSER_CHROME_PATH=
BROWSER_PROFILE_DIR=
BROWSER_ALLOWLIST_DOMAINS=
NODE_SYSTEM_RUN_ENABLED=false
NODE_SYSTEM_SHELL_ENABLED=false
NODE_SYSTEM_RUN_ALLOWLIST=
NODE_SYSTEM_RUN_TIMEOUT_MS=20000
NODE_SYSTEM_RUN_MAX_OUTPUT=20000
NODE_LOCATION_LAT=
NODE_LOCATION_LON=
NODE_LOCATION_SOURCE=

# macOS companion node
BRIDGE_URL=ws://127.0.0.1:3001/bridge/ws
COMPANION_BRIDGE_TOKEN=
COMPANION_NODE_ID=
COMPANION_NODE_NAME=
COMPANION_RECONNECT_MS=2000
COMPANION_HEARTBEAT_MS=10000
COMPANION_SYSTEM_RUN_ENABLED=false
COMPANION_SYSTEM_SHELL_ENABLED=false
COMPANION_SYSTEM_RUN_ALLOWLIST=
COMPANION_SYSTEM_RUN_TIMEOUT_MS=20000
COMPANION_SYSTEM_RUN_MAX_OUTPUT=20000

# Optional external infrastructure (reserved for future adapters)
DATABASE_URL=postgres://sovereign:sovereign@postgres:5432/sovereign
REDIS_URL=redis://redis:6379