.env.example

# Stargate — Environment Variable Reference
#
# Copy this file to .env and fill in your values.
# Secrets (bot token, Apple allowlist) can be loaded from macOS Keychain
# automatically if configured; the env vars here serve as fallbacks or for
# running on machines without a Keychain store.
#
# bridge.py loads .env via python-dotenv on startup.
# auth_server.py does the same.

# ---------------------------------------------------------------------------
# BRIDGE — Required
# ---------------------------------------------------------------------------

# Telegram bot token. Loaded from Keychain/Proton Pass automatically;
# only needed here as a fallback on machines without those stores.
TELEGRAM_BOT_TOKEN=

# ---------------------------------------------------------------------------
# BRIDGE — Optional
# ---------------------------------------------------------------------------

# Comma-separated Telegram user IDs that may interact with the bot.
# If empty, all users can send messages (not recommended in production).
# Example: ALLOWED_USER_IDS=123456789,987654321
ALLOWED_USER_IDS=

# Absolute path to the claude binary.
# Default: /opt/homebrew/bin/claude
CLAUDE_PATH=/opt/homebrew/bin/claude

# Root directory that Claude sessions run in.
# Default: ~/Developer
CLAUDE_WORKING_DIR=~/Developer

# Path to the Fanta PA plugin directory (used for Pac-Man queue routing).
# Default: ~/Developer/Fanta
PA_PLUGIN_DIR=~/Developer/Fanta

# Claude session expiry in seconds (how long idle sessions are kept alive).
# Default: 259200 (3 days)
SESSION_EXPIRY=259200

# Hard timeout for a single Claude invocation in seconds.
# Default: 2700 (45 minutes)
MAX_TIMEOUT=2700

# Maximum agentic turns per Claude invocation.
# Default: 30
MAX_TURNS=30

# Number of parallel agent session worker threads.
# Default: 4
MAX_WORKERS=4

# ---------------------------------------------------------------------------
# MOP (Model Output Protocol — cc-sdk-mop harness)
# ---------------------------------------------------------------------------

# Directory of YAML rule files to load. REQUIRED for cc-sdk-mop — without
# it MOP loads zero rules and the Stop hook still enforces "must call
# submit_message", but no content rules apply. Point at the active/
# subdirectory of a model-output-protocol checkout.
MOP_RULES_DIR=/Users/you/Developer/model-output-protocol/rules/active

# LLM backend for the rule evaluator. Default: haiku
MOP_LLM_BACKEND=haiku

# Where MOP appends violation events.
MOP_LOG_PATH=/Users/you/Developer/patchbay-relay/logs/mop-violations.jsonl

# Verbose mode — when truthy ("1", "true", "yes", "on"), every MOP verdict
# (accepted / rewritten / rejected / failed-open) is mirrored to the chat
# as a separate diagnostic message. Rejected messages also show the
# original text and the violation reasons (normally invisible). Use while
# tuning rules or debugging delivery; turn off in steady state.
MOP_VERBOSE=0