# Agent Studio — Environment Configuration

# Copy to .env and fill in required values.

# Docker Compose defaults are pre-configured for local development.

# ── Required: AI Providers ───────────────────────────────────────────────────

# DeepSeek is the default chat model. Get a key at https://platform.deepseek.com

DEEPSEEK_API_KEY=your_deepseek_api_key_here

# OpenAI is required for embeddings (text-embedding-3-small). Get a key at https://platform.openai.com

OPENAI_API_KEY=your_openai_api_key_here

# ── Required: Authentication ─────────────────────────────────────────────────

# JWT secret for NextAuth sessions. Generate with: openssl rand -base64 32

AUTH_SECRET=generate_with_openssl_rand_base64_32

# GitHub OAuth App — https://github.com/settings/developers

AUTH_GITHUB_ID=your_github_oauth_app_id

AUTH_GITHUB_SECRET=your_github_oauth_app_secret

# Google OAuth Client — https://console.cloud.google.com/apis/credentials

AUTH_GOOGLE_ID=your_google_oauth_client_id

AUTH_GOOGLE_SECRET=your_google_oauth_client_secret

# ── Database (Docker Compose defaults — no change needed for local dev) ──────

DATABASE_URL=postgresql://postgres:postgres@postgres:5432/agent_studio

DIRECT_URL=postgresql://postgres:postgres@postgres:5432/agent_studio

# ── Redis (Docker Compose defaults — no change needed for local dev) ─────────

REDIS_URL=redis://redis:6379

# ── Optional: Additional AI Providers (uncomment to enable) ──────────────────

# Anthropic — https://console.anthropic.com (Claude Haiku/Sonnet/Opus)

# ANTHROPIC_API_KEY=your_anthropic_key

# Google Gemini — https://aistudio.google.com (Gemini 2.5 Flash/Pro, free tier)

# GOOGLE_GENERATIVE_AI_API_KEY=your_google_ai_key

# Groq — https://console.groq.com (Llama 3.3, Compound Beta, free tier)

# GROQ_API_KEY=your_groq_key

# Mistral — https://console.mistral.ai (Mistral Small/Medium/Large)

# MISTRAL_API_KEY=your_mistral_key

# Moonshot — https://platform.moonshot.cn (Kimi K2)

# MOONSHOT_API_KEY=your_moonshot_key

# ── Required in Production: Admin Access Control ─────────────────────────────

# Comma-separated list of user IDs that have admin access.

# WITHOUT THIS: any authenticated user can access /api/admin/* endpoints.

# Find your user ID in the DB: SELECT id FROM "User" WHERE email = 'you@example.com';

# ADMIN_USER_IDS=clxxxxxxxxxxxxxxx,clyyyyyyyyyyyyyyy

# ── Required in Production: Cron Jobs ────────────────────────────────────────

# Secret for authenticating /api/cron/* endpoints.

# WITHOUT THIS: cron endpoints are publicly accessible without auth.

# Generate with: openssl rand -base64 32

# CRON_SECRET=your_cron_secret

# ── Optional: ECC Module ─────────────────────────────────────────────────────

# ECC_ENABLED=true

# ECC_MCP_URL=http://ecc-skills-mcp:8000

# ── Optional: Observability ──────────────────────────────────────────────────

# OTEL_EXPORTER_OTLP_ENDPOINT=your_otlp_endpoint

# OTEL_SERVICE_NAME=agent-studio

# ── Optional: Sentry Error Tracking ──────────────────────────────────────────

# Server-side DSN (used in API routes and server components)

# SENTRY_DSN=your_sentry_dsn

# Client-side DSN (used in browser — safe to expose publicly)

# NEXT_PUBLIC_SENTRY_DSN=your_sentry_dsn