# Built-in storage adapter.
STORAGE_DRIVER=postgres
DATABASE_URL=postgresql://chopin:chopin@127.0.0.1:5432/chopin?sslmode=disable

# Hosted planner defaults.
AGENT=on
# With HARNESS=pi, use an ID from Pi's catalog, preferably provider-qualified
# (for example github-copilot/gpt-5.6-luna); Pi silently substitutes its default
# model for an ID it does not know, including gpt-6-luna. HARNESS=atomic requires
# a provider/model ID from Atomic's catalog (for example
# vercel-ai-gateway/anthropic/claude-sonnet-4.6) and fails a turn on any other.
MODEL=gpt-6-luna
HARNESS=copilot-sdk
# Auth mode forwarded to the selected harness. The current copilot-sdk adapter
# uses each owner's token and does not consume it. Host-login fallback modes
# such as "auto" require SERVER_HOST to bind only to loopback. HARNESS=pi
# requires this to be set explicitly (auto, openai, anthropic, custom, or
# ai-gateway); only ai-gateway is allowed on a non-loopback SERVER_HOST.
# HARNESS=atomic requires auto (the host's Atomic login and environment keys,
# loopback only) or ai-gateway (AI_GATEWAY_API_KEY, any bind).
#HARNESS_AUTH=
# HARNESS=atomic only: absolute extension or package paths every Planner
# session loads, as Atomic's --extension would, joined by ':' (';' on Windows).
#HARNESS_EXTENSIONS=
BACKGROUND_JOBS=on
WEB_RESEARCH=on

# Optional conversation-derived cards prototype; independent of AGENT.
CONVERSATION_PLAN=off
JEV_MODEL=jev-latest
# Per Jev request, in milliseconds (100–60000; default 30000).
JEV_TIMEOUT_MS=30000
# Required only when CONVERSATION_PLAN=on. Keep this key on the server.
JEV_API_KEY=

# GitHub App sign-in.
# Remote VM mode overrides this local origin in child processes; see docs/exe-dev.md.
APP_ORIGIN=http://127.0.0.1:8787
GITHUB_APP_SLUG=
GITHUB_APP_CLIENT_ID=
GITHUB_APP_CLIENT_SECRET=
# Optional comma-separated GitHub logins. The lists are combined; leave both
# empty to admit every authenticated GitHub user.
GITHUB_ALLOWED_USERS=
GITHUB_ALLOWED_ORGANIZATIONS=
# Encrypts hosted session credentials in PostgreSQL and the short-lived OAuth
# state/PKCE cookie. Keep stable across releases and outside the database.
# Local mode requires a key but uses separate random, HttpOnly browser cookies.
# Generate it with `openssl rand -hex 32`.
SESSION_ENCRYPTION_KEY=

# Local device-flow sign-in. Leave AUTH_MODE unset (or "hosted") for the
# default GitHub App authorization-code flow above. Setting AUTH_MODE=local
# requires a loopback SERVER_HOST and APP_ORIGIN, replaces sign-in with
# GitHub's device flow, and persists the resulting credential so a restart
# can restore the same login; see docs/authentication.md#local-device-flow-sign-in.
# GITHUB_APP_CLIENT_SECRET above is not read in local mode.
#AUTH_MODE=local
# Overrides the plaintext-fallback credential directory used only when the OS
# credential store is unavailable and the user consents; must resolve outside
# the repository. Defaults to a platform-specific config directory.
#CHOPIN_LOCAL_CREDENTIALS_DIR=