.env.example

# Local environment configuration — DO NOT COMMIT REAL SECRETS.
# Copy this file to `.env` and fill in your values.

# Application environment: development | testing | production
APP_ENV=development

# Flask secret key — generate with: python -c "import secrets; print(secrets.token_hex(32))"
SECRET_KEY=change-me-to-a-long-random-string

# Database connection (defaults to a local SQLite file for development).
# For Docker compose the DATABASE_URL below is overridden in compose file.
DATABASE_URL=postgresql://aica:aica_secret@localhost:5432/aica

# PostgreSQL credentials (used by docker-compose.yml).
POSTGRES_USER=aica
POSTGRES_PASSWORD=aica_secret
POSTGRES_DB=aica

# Session lifetime in seconds (default: 12 hours).
SESSION_LIFETIME=43200

# LLM provider backend: "mock" (offline, default) or "openai".
LLM_PROVIDER=mock

# OpenAI-compatible provider settings (only needed when LLM_PROVIDER=openai).
OPENAI_API_KEY=
OPENAI_BASE_URL=https://api.openai.com/v1
OPENAI_MODEL=gpt-4o-mini
OPENAI_TEMPERATURE=0.7

# Maximum size of an uploaded file in bytes (default: 16 MB).
MAX_CONTENT_LENGTH=16777216

# GitHub OAuth integration (Phase 4).
# Create an OAuth App at https://github.com/settings/applications/new
#   Homepage URL:  http://localhost:5000
#   Callback URL:  http://localhost:5000/github/callback
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
# Leave blank to use the app's own callback URL automatically.
GITHUB_REDIRECT_URI=
# Optional overrides (defaults shown):
GITHUB_API_URL=https://api.github.com
GITHUB_SCOPES=read:user repo
GITHUB_REQUEST_TIMEOUT=30
GITHUB_MAX_CONTEXT_CHARS=40000

# AI Workspaces & Project Intelligence (Phase 5).
# Limits that protect the server from large or malicious project imports.
# Archive validation (path traversal, symlinks, size and file-count caps) happens
# during extraction; only bounded, sanitized metadata + text content is stored.
PROJECT_MAX_ARCHIVE_BYTES=52428800
PROJECT_MAX_SIZE_BYTES=524288000
PROJECT_MAX_FILE_COUNT=20000
PROJECT_MAX_FILE_CHARS=200000
PROJECT_MAX_CONTEXT_CHARS=40000
PROJECT_SEARCH_MAX_RESULTS=100
PROJECT_GITHUB_MAX_FILES=1000
# Comma-separated directory basenames always skipped during import.
PROJECT_SKIP_DIRS=.git,.hg,.svn,node_modules,.venv,venv,__pycache__,.next,.cache,dist,build,vendor,.tox,.mypy_cache,.pytest_cache
# Comma-separated file basenames / dotfile prefixes always skipped during import.
PROJECT_SKIP_SECRET_FILES=.env,.pem,.key,.p12,.pfx,id_rsa,id_ed25519,id_dsa,credentials,.htpasswd,.npmrc,.pypirc,secrets.yaml,secret.yaml,secret.yml

# AI Code Review & Quality Tooling (Phase 6).
# A review never sends more than REVIEW_MAX_CONTEXT_CHARS of repository text to
# the model, and never analyzes more than REVIEW_MAX_FILES changed files; the
# model is capped at REVIEW_MAX_FINDINGS findings per review.
REVIEW_MAX_FILES=40
REVIEW_MAX_CONTEXT_CHARS=40000
REVIEW_MAX_FINDINGS=100
# Comma-separated project review kinds offered by default.
REVIEW_KINDS=quality,security,tests
# Minimum finding severity stored for project reviews (critical/high/medium/low).
REVIEW_SEVERITY_THRESHOLD=low

# Team Collaboration (Phase 7).
# Default invitation validity in hours (default: 168 = 7 days).
INVITE_TTL_HOURS=168
# Maximum workspace members included in AI team context per project chat.
PROJECT_MAX_MEMBER_CONTEXT=20
# In-memory rate limits for public collaboration endpoints + presence heartbeat.
RATE_LIMIT_MAX=30
RATE_LIMIT_WINDOW_SECONDS=300
# Optional SMTP for invitation emails. When unset, invitations are delivered as
# in-app notifications only (never crashes a request on mail failure).
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASSWORD=
MAIL_DEFAULT_SENDER=
MAIL_USE_TLS=1

# Stellar / Soroban integration (Phase 8).
# Default network used by the Stellar service: mainnet | testnet | futurenet | custom.
# Testnet is the default so nothing touches real XLM unless explicitly configured.
STELLAR_NETWORK=testnet
# Optional explicit Horizon / Soroban RPC endpoints. Leave blank to use the
# built-in presets for STELLAR_NETWORK, or point at a local stellar-core /
# soroban-rpc instance during development.
STELLAR_HORIZON_URL=
STELLAR_RPC_URL=
# Request timeout (seconds) and response-body cap for outbound Stellar calls.
STELLAR_REQUEST_TIMEOUT=15
STELLAR_MAX_RESPONSE_BYTES=2097152
# Maximum ledger keys accepted per Soroban RPC getLedgerEntries call.
STELLAR_RPC_MAX_KEYS=100
# Verify public-network endpoints resolve to a globally routable address (DNS)
# before each request. Keep enabled; disable only for isolated networks.
STELLAR_STRICT_HOST_VALIDATION=1