# Copy to docker/.env and adjust paths + secrets.
#
#   cd docker && cp .env.example .env
#
# This file is the canonical source for local Docker secrets (gitignored).
# Shell exports are NOT injected into containers — avoids stale keys from
# other projects or terminals. After edits: task restart (from repo root).

# --- LLM endpoint + secret (required for cloud LLM runs) ---
# The API key the agents authenticate with. Read by the proxy from the env var
# named in LLM_PROXY_API_KEY_ENV (default: OPENAI_API_KEY). This may be a real
# OpenAI key OR a key for an OpenAI-compatible proxy (litellm, vLLM, …).
OPENAI_API_KEY=

# Endpoint the agents call. Leave unset to use OpenAI (https://api.openai.com/v1).
# Set it when OPENAI_API_KEY above is for a non-OpenAI proxy — otherwise OpenAI
# rejects the key with "401 Incorrect API key". Examples:
#   LLM_PROXY_API_BASE=https://litellm.example.com/v1     # a LiteLLM proxy
#   LLM_PROXY_API_BASE=http://localhost:8000/v1           # a local vLLM server
# LLM_PROXY_API_BASE=

# Name of the env var holding the key (default: OPENAI_API_KEY). Set only if your
# key lives in a differently-named var (e.g. MY_PROXY_API_KEY).
# LLM_PROXY_API_KEY_ENV=

# Dev-only: skip TLS certificate verification. Needed behind a corporate proxy
# that intercepts TLS (otherwise: "TLS certificate verification failed"). NOT for
# shared/prod use — prefer mounting the corporate CA bundle + SSL_CERT_FILE.
# MAS_LLM_VERIFY_SSL=0

# --- Host paths mounted into containers ---
# Workspace: config.yaml, labs/, infra/, project .env
# Default ".." mounts the repository root when you run compose from docker/
MAS_WORKSPACE_MOUNT=..

# Persistent data: trace cache, benchmark outputs, run artifacts.
# To inspect output someone shared with you, point this at your data dir instead,
# e.g. MAS_DATA_MOUNT=~/.local/share/mas (drop their labs/<name> output under it).
MAS_DATA_MOUNT=./data

# Optional host XDG config directory used as the Docker user-config fallback.
# The project config.yaml mounted at /workspace still takes precedence.
# MAS_XDG_CONFIG_MOUNT=${HOME}/.config/mas

# Directory the Experiment page reads runs from (MAS_LAB_ROOT/labs). Pin it at the
# mounted /data so the API reads the same place the benchmark writes to — otherwise
# it defaults to the workspace and misses both your runs and any shared output.
MAS_LAB_ROOT=/data

# Optional: mount host ~/.mas into the container (user config + legacy paths)
# MAS_USER_CONFIG_MOUNT=~/.mas

# --- Published ports ---
MAS_BACKEND_PORT=8090
MAS_UI_PORT=8080

# API URL injected into the UI (browser on the host reaches this address)
VITE_API_BASE_URL=http://localhost:8090