# .env.example — Copy to .env and fill in your values
# Usage: cp .env.example .env && source .env
# NEVER commit .env to version control

# ── Required ─────────────────────────────────────────────────
export PROJECT_ID="propane-will-491900-m5"
export REGION="us-central1"
export BILLING_ACCOUNT_ID="XXXXXX-XXXXXX-XXXXXX"   # gcloud billing accounts list
export ALERT_EMAIL="chris.christiansen@vauco.no"

# ── Service Account ────────────────────────────────────────────
export AGENT_SA="osvauco-agent-sa@${PROJECT_ID}.iam.gserviceaccount.com"

# ── Cloud Run ────────────────────────────────────────────────
export CLOUD_RUN_SERVICE="osvauco-agent"
export ARTIFACT_REPO="agent-images"

# ── Vertex AI RAG Engine ────────────────────────────────────
export RAG_CORPUS_DISPLAY_NAME="osvauco-corpus"
# Populated by 07-rag-setup.sh — copy from script output:
export RAG_CORPUS_NAME=""   # projects/PROJECT_NUM/locations/REGION/ragCorpora/ID
# Optional: override RAG region if us-central1 not allowlisted (OQ-02)
# export RAG_REGION="us-east1"

# ── Memory Bank (Agent Engine) ───────────────────────────────
export MEMORY_INSTANCE_DISPLAY_NAME="${PROJECT_ID}-memory-bank"
# Populated by 08-memorybank-setup.sh — copy from script output:
export MEMORY_ENGINE_NAME=""  # projects/PROJECT_NUM/locations/REGION/reasoningEngines/ID

# ── Agent Models ─────────────────────────────────────────────
export ORCHESTRATOR_MODEL="gemini-2.0-flash-001"
export SUBAGENT_MODEL="gemini-2.0-flash-001"

# ── CI/CD — Cloud Build 2nd gen ──────────────────────────────
export GITHUB_OWNER="chrischristiansen-glitch"
export GITHUB_REPO="OSVauco"
# GitHub PAT — lagres i Secret Manager, ikke her:
#   gcloud secrets create github-token --data-file=<(echo -n "ghp_TOKEN")
# GitHub App Installation ID — finn på:
#   https://github.com/settings/installations → klikk på Cloud Build-appen → URL-en inneholder ID
export GITHUB_APP_INSTALLATION_ID=""   # eks: 12345678

# ── Observability ────────────────────────────────────────────
# ALERT_EMAIL er allerede satt ovenfor

# ── Billing IAM Hardening (11-billing-iam-hardening.sh) ─────────────
# Kommaseparert liste — får roles/billing.viewer på billing-kontoen
# jason.vauger = agentens identitet (kan hente kostnadsdata autonomt)
# chris = eier med eksplisitt viewer i tillegg til admin
export BILLING_VIEWER_EMAILS="chris.christiansen@vauco.no,jason.vauger@vauco.no"
# Google Workspace / Cloud Identity domene:
# Sett kun hvis vauco.no er koblet som org i GCP — fjerner billing.creator fra domenet
# export ORG_DOMAIN="vauco.no"
#
# Fremtidig (Fase C): erstatt enkeltadresser med Google Group:
# export BILLING_VIEWER_EMAILS="billing@vauco.no"

# ── Webhook / Chat-notifikasjoner ────────────────────────────
# Lagres i Secret Manager, ikke her:
#   gcloud secrets create webhook-url --data-file=<(echo -n "https://DIN-WEBHOOK-URL")
# Se: infrastructure/notifications/webhook-setup.md

# ── VPC / Security (valgfritt) ────────────────────────────────
export VPC_NETWORK="default"
# export CMEK_KEY_RING="agent-keyring"
# export CMEK_KEY_NAME="agent-key"

# ── IAP / Domene (Fase B) ─────────────────────────────────────
# export IAP_DOMAIN="opax.vauco.no"
# export IAP_CLIENT_ID=""
# export IAP_CLIENT_SECRET=""

# ── Terraform / Kunde-onboarding (Fase C) ─────────────────────
# export TF_VAR_customer_id="medioteq"
# export TF_VAR_customer_project_id=""
# export TF_VAR_customer_region="europe-north1"
# export TF_STATE_BUCKET="${PROJECT_ID}-tfstate"

# ── LiteLLM proxy (valgfritt) ─────────────────────────────────
# export LITELLM_BASE_URL=""
# export LITELLM_API_KEY=""