# Copy to .env and fill in. .env is gitignored and never committed.
# Note: values in .env never override variables already exported in your shell
# (e.g. from ~/.bashrc). Unset a stale export, or the shell value wins.

# LLM calls (verify, roles, the decision engine): DeepSeek.
DEEPSEEK_API_KEY=
# DEEPSEEK_BASE_URL=https://api.deepseek.com

# Embeddings only: OpenAI text-embedding-3-small through OpenRouter.
OPENROUTER_API_KEY=
OPENROUTER_EMBEDDING_MODEL=openai/text-embedding-3-small

# Plane memory store. Default is a local FileStore under ~/ousast-results/plane/memory.
# For an S3-compatible server (MinIO, RustFS): OUSAST_MEMORY=minio://<bucket>
# OUSAST_MEMORY=minio://sast-memory
# MINIO_ENDPOINT=host[:port]
# MINIO_ACCESS_KEY=
# MINIO_SECRET_KEY=
# MINIO_SECURE=true
# MINIO_REGION=us-east-1
# MINIO_BUCKET=sast-memory
# The bucket must have versioning enabled and a lifecycle rule expiring runs/ (see ops/ax/README.md);
# the store verifies both at startup and refuses to run otherwise.