# Copy this file to `.env.local` in your project root and keep only private
# values or personal overrides here. Public workflow defaults belong in
# `vstack.settings.toml`; see `vstack.settings.toml.example`.
#
# Load order for vstack skill scripts:
#   1. `.env`
#   2. `vstack.settings.toml` or `.vstack/settings.toml`
#   3. `.env.local`
#
# `.env.local` wins so existing projects keep working, but committed settings
# should move to `vstack.settings.toml` whenever they are not secrets.
#
# Launch-time secret injection is supported: when GH_TOKEN, GITHUB_TOKEN,
# GH_BOT_TOKEN, or LINEAR_API_KEY are already resolved in the process
# environment, vstack helpers keep those values and do not resolve matching
# `op://` references from local files.

# LINEAR

LINEAR_API_KEY="lin_api_..."
# Used by: linear
# Set to: a Linear personal API key from Linear Settings -> API.
# Supports direct keys and 1Password references.

# GITHUB

GH_TOKEN="ghp_..."
# Used by: orch (session-init dashboard reads)
# Set to: a user GitHub token for main-repo dashboard reads, distinct from GH_BOT_TOKEN.
# Supports direct keys and 1Password references.

GH_BOT_TOKEN="ghp_..."
# Used by: github, orch
# Set to: a GitHub token for bot PR/comment/review actions.
# Supports direct keys and 1Password references.

# DEEP RESEARCH / WEB TOOLS

EXA_API_KEY="exa_..."
# Used by: deep-research, pi-web-tools
# Set to: an Exa API key for Exa Search and Exa Deep Search.
# Supports direct keys and 1Password references such as:
# EXA_API_KEY="op://Private/Exa API Key/credential"

PERPLEXITY_API_KEY="pplx_..."
# Used by: pi-web-tools (`web_search provider=perplexity`)
# Set to: an optional Perplexity API key for Sonar models.

GEMINI_API_KEY="AIza..."
# Used by: pi-web-tools (`web_search provider=gemini`, video understanding)
# Set to: an optional Google AI Studio API key.

JINA_API_KEY="jina_..."
# Used by: pi-web-tools (Jina Reader fallback in HTML extraction)
# Set to: an optional Jina API key.

OPENAI_API_KEY="sk-..."
# Used by: pi-codex-minimal-tools, pi-web-tools
# Set to: an optional OpenAI API key for direct API paths.

# PUBLISHING TOKENS

VSCE_PAT="..."
# Used by: VS Code extension publishing workflows.

OVSX_PAT="..."
# Used by: Open VSX extension publishing workflows.

# OPTIONAL PRIVATE OVERRIDES
#
# These can stay here when they are personal or machine-specific. Prefer
# `vstack.settings.toml` when the value is safe to commit.

BOT_SIGNING_KEY="ssh-ed25519 AAAA..."
# Used by: worktree
# Set to: optional SSH signing key material or key path for bot commits.

BOT_REMOTE_URL="git@github-bot:org/repo.git"
# Used by: worktree
# Keep here if the URL embeds credentials or is otherwise private.