# ── LLM Provider (set exactly one) ───────────────────────────────────────────
# ANTHROPIC_API_KEY=sk-ant-...
# OPENAI_API_KEY=sk-...
# GEMINI_API_KEY=AIza...
# GROQ_API_KEY=gsk_...
# MISTRAL_API_KEY=...
# DEEPSEEK_API_KEY=sk-...
# XAI_API_KEY=xai-...
# OPENROUTER_API_KEY=sk-or-...

# ── Security ──────────────────────────────────────────────────────────────────
# Bearer token required on /chat* endpoints (highly recommended in production)
# GARUDUST_API_KEY=change-me

# Command approval: auto | smart (default) | deny
# GARUDUST_APPROVAL_MODE=smart

# Per-IP rate limit in requests/minute (disabled by default)
# GARUDUST_RATE_LIMIT=60

# ── Agent ─────────────────────────────────────────────────────────────────────
# Behaviour now lives in ~/.garudust/config.yaml — these env vars still work
# as overrides for ops scripts but are no longer the primary configuration.
#   GARUDUST_MODEL        → yaml `model:`
#   GARUDUST_PORT         → yaml `server.port:` (default 3000)
#   GARUDUST_CRON_JOBS    → yaml `cron.jobs:` (list of schedule/task pairs)
#   GARUDUST_MEMORY_CRON  → yaml `cron.memory_consolidation:`
# Webhook adapter port/path lives in yaml under `platforms.webhook`.

# ── Optional tools ────────────────────────────────────────────────────────────
# BRAVE_SEARCH_API_KEY=BSA...

# ── Platform adapters (set the ones you need) ─────────────────────────────────
# TELEGRAM_TOKEN=123456:ABC...

# DISCORD_TOKEN=Bot_...

# SLACK_BOT_TOKEN=xoxb-...
# SLACK_APP_TOKEN=xapp-...

# MATRIX_HOMESERVER=https://matrix.org
# MATRIX_USER=@yourbot:matrix.org
# MATRIX_PASSWORD=secret

# Webhook-based adapters (LINE, WhatsApp). Tokens here; enable/port/path
# in ~/.garudust/config.yaml under `platforms.line` / `platforms.whatsapp`.
# LINE_CHANNEL_TOKEN=<channel-access-token>
# LINE_CHANNEL_SECRET=<32-char-hex>
# WHATSAPP_ACCESS_TOKEN=EAA...
# WHATSAPP_PHONE_NUMBER_ID=123456789012345
# WHATSAPP_VERIFY_TOKEN=my_verify_token
# WHATSAPP_APP_SECRET=<32-char-hex>   # optional — skips HMAC check if empty

# ── AWS Bedrock ───────────────────────────────────────────────────────────────
# AWS_ACCESS_KEY_ID=...
# AWS_SECRET_ACCESS_KEY=...
# AWS_DEFAULT_REGION=us-east-1

# ── Cron ──────────────────────────────────────────────────────────────────────
# Cron jobs and memory consolidation/expiry schedules live in
# ~/.garudust/config.yaml under `cron.*`. The env vars below still work as
# one-shot overrides for ops scripts:
#   GARUDUST_CRON_JOBS="0 9 * * *=Write a morning briefing and save to ~/briefing.md"
#   GARUDUST_MEMORY_CRON="0 3 * * *"

# ── Logging ───────────────────────────────────────────────────────────────────
# RUST_LOG=info
