# ── Credentials ──────────────────────────────────────────────────────────────
# A separate service from App Store Connect with its own credential: an ASC API
# key gives no access to CloudKit, and this token gives no access to ASC.
# Create it at https://icloud.developer.apple.com/dashboard/account/tokens
# (CloudKit Management Tokens). This is Apple's own variable name — `xcrun
# cktool` reads it too — so a shell already set up for cktool configures this
# server for free.
#
# A management token can REWRITE a container's schema. Scope it, keep it out of
# tracked files, and revoke it when you are done.
CLOUDKIT_MANAGEMENT_TOKEN=

# Your 10-character Apple Developer team id (also in exportOptions.plist).
CLOUDKIT_TEAM_ID=

# Default container for the cloudkit_* tools, e.g. iCloud.com.acme.App, so it
# need not be passed on every call. Optional; cloudkit_list_containers finds it.
CLOUDKIT_CONTAINER_ID=

# ── Safety ───────────────────────────────────────────────────────────────────
# Set to 1 to register the WRITE tools (cloudkit_deploy_schema,
# cloudkit_import_schema). Off by default: with the flag unset the mutating
# tools are not merely refused, they are never registered, so an agent cannot
# call them at all. Both additionally require confirm: true.
CLOUDKIT_ALLOW_WRITES=

# ── Optional tuning ──────────────────────────────────────────────────────────
# Retry budget for 429 / 5xx responses. Defaults to 3.
CLOUDKIT_MAX_RETRIES=3

# Set to 1 to log debug output to stderr.
CLOUDKIT_DEBUG=