# Email Agent — environment variable names (values are NOT committed).
#
# Copy to `.env` for local Docker Compose use. In production these come from
# ~/.config/environment.d/10-secrets.conf (or the host environment) and are
# passed through by docker-compose.
#
# Secret values must never be committed to git.

# --- Runtime ---------------------------------------------------------------
EMAIL_AGENT_ENV=production
EMAIL_AGENT_PORT=8790
EMAIL_AGENT_ADDR=:8790
EMAIL_AGENT_DB_PATH=/data/email_agent.db
EMAIL_AGENT_LOG_LEVEL=info
EMAIL_AGENT_PUBLIC_BASE_URL=https://mail.lab.audasmedia.com.au

# --- Session / auth --------------------------------------------------------
# Session cookie signing key. Generate with: python3 -c 'import secrets;print(secrets.token_hex(32))'
EMAIL_AGENT_SESSION_SECRET=change-me
# Login password for the single user (Sam). If unset, the session secret above
# doubles as the password.
EMAIL_AGENT_PASSWORD=

# --- Gmail IMAP (Phase 2) ---------------------------------------------------
# App password only (AGENTS.md §9). Values live in the host environment, never here.
GMAIL_USER=
GMAIL_APP_PASSWORD=
EMAIL_AGENT_IMAP_HOST=imap.gmail.com
EMAIL_AGENT_IMAP_PORT=993
EMAIL_AGENT_IMAP_LOOKBACK_DAYS=14
EMAIL_AGENT_IMAP_MAX_MESSAGES=100

# --- Integrations (used from later phases) ---------------------------------
# JEV is the TypeSafe System One HTTP API. JEV_BASE_URL defaults to the
# documented host https://api.typesafe.ai when unset.
JEV_BASE_URL=
JEV_API_KEY=
JEV_MODEL=jev-latest
# Classifier bounds (FR-3): in-flight JEV requests, and messages per run.
EMAIL_AGENT_CLASSIFY_CONCURRENCY=4
EMAIL_AGENT_CLASSIFY_MAX_MESSAGES=200
OMNIROUTE_BASE_URL=
OMNIROUTE_API_KEY=
HUB_TOKEN=