# =============================================================================
# Aurelio / Réplica Omnisciente — Environment Template
# =============================================================================
# Copy this file to `.env` and fill in your actual API keys.
# DO NOT commit `.env` to version control.
# =============================================================================

# ─── AI API KEYS ────────────────────────────────────────────────────────────

# Kimi (Moonshot AI)
# Get your key at: https://platform.moonshot.cn/
KIMI_API_KEY=

# Gemini / Google Vertex AI
# Get your key at: https://aistudio.google.com/app/apikey
GEMINI_API_KEY=

# Jules (Google AI agent)
# Get your key at: https://jules.google.com/
JULES_API_KEY=

# Anthropic Claude
# Get your key at: https://console.anthropic.com/settings/keys
ANTHROPIC_API_KEY=

# OpenRouter (unified LLM gateway)
# Get your key at: https://openrouter.ai/settings/keys
OPENROUTER_API_KEY=

# Google Application Default Credentials
# Path to service-account JSON, or leave blank for ADC via gcloud.
# See: https://cloud.google.com/docs/authentication/application-default-credentials
GOOGLE_APPLICATION_CREDENTIALS=

# ─── KNOWLEDGE & RESEARCH KEYS ──────────────────────────────────────────────

# Zotero — https://www.zotero.org/settings/keys
ZOTERO_API_KEY=

# IEEE Xplore — https://developer.ieee.org/
IEEE_API_KEY=

# Anna's Archive — https://annas-archive.org/
ANNAS_ARCHIVE_KEY=

# ─── LOCAL INFRASTRUCTURE ───────────────────────────────────────────────────

# Icicle FPGA models directory (absolute path)
ICICLE_MODELS_DIR=/home/fcunha/portugalfuturista/replica/infra/lab-gateway/icicle-models

# ─── TELMINAL (Telegram shell bot) ──────────────────────────────────────────
# A sandboxed shell-on-the-host bot for the fleet gateway (CT-217).
# Create a bot + API credentials at:
#   https://core.telegram.org/api/obtaining_api_id  and  https://t.me/botfather
# Deploy via telminal/systemd/telminal.service (secrets sourced from this file).
TELEGRAM_API_ID=
TELEGRAM_API_HASH=
TELEGRAM_TOKEN=
# Comma-separated numeric Telegram user ids allowed to run commands (allowlist).
TELEGRAM_ADMINS=
# Optional sandbox root for `cd` / file transfers (absolute path).
TELEGRAM_WORKING_DIR=/home/hermes/telminal-workspace

# ─── MIRROR PIPELINE (sync-mirrors.py) ──────────────────────────────────────
# Upstream sources replicate into self-hosted mirrors:
#   GitHub      → Forgejo  (code)
#   Jira Cloud  → Plane    (issues)
#   Confluence  → Outline  (docs)
#
# Registry:  .aurelio/mirrors/sync-mirrors.yaml  (edit THIS)
# Run:       python3 scripts/sync-mirrors.py --sync
#
# ALL tokens are API tokens/PATs — fetch from Vaultwarden, never hardcode.

# Forgejo (mirror target) — admin token with repo + org scopes.
# Generate: Settings → Applications → Access Tokens (manage_repo, write:org)
FORGEJO_MIRROR_TOKEN=

# GitHub (upstream source) — classic PAT with repo + read:org scopes.
# Generate: https://github.com/settings/tokens (classic)
GITHUB_MIRROR_TOKEN=

# Plane (mirror target) — personal API token.
# Generate: Profile → Settings → API Tokens
PLANE_API_TOKEN=

# Outline (mirror target) — API token with read+write.
# Generate: Settings → API Tokens
OUTLINE_API_TOKEN=

# Jira Cloud (upstream source) — API token + account email.
# Generate: https://id.atlassian.com/manage-profile/security/api-tokens
JIRA_API_TOKEN=
JIRA_USER_EMAIL=
# Jira Cloud base URL (e.g. https://savearth.atlassian.net) — set in sync-mirrors.yaml
# Leave empty here; the YAML endpoint field is null until the instance exists.

# Confluence Cloud (upstream source) — same Atlassian account as Jira.
# Generate: same path as Jira (shares the Atlassian account)
CONFLUENCE_API_TOKEN=
CONFLUENCE_USER_EMAIL=