.env.example

# Server
PORT=3000
NODE_ENV=development

# Logging (debug | info | warn | error)
LOG_LEVEL=info

# --- For Docker / pipeline (clone, push, PR) ---
# Cursor agent API key (required for agent steps in container)
# CURSOR_API_KEY=

# Git identity for commits created by the pipeline
# GIT_AUTHOR_NAME=
# GIT_AUTHOR_EMAIL=
# GIT_COMMITTER_NAME=
# GIT_COMMITTER_EMAIL=

# GitHub (or other) personal access token for git clone/push
# GIT_TOKEN=
# GIT_URL=

# --- Workspace cleanup (2-day retention by default) ---
# Days after which workspace clone dirs are deleted (default 2)
# WORKSPACE_RETENTION_DAYS=2
# Auto-cleanup interval in ms (default 21600000 = 6 hours)
# WORKSPACE_CLEANUP_INTERVAL_MS=21600000

# --- OAuth 2.0 (optional; machine-to-machine) ---
# If BOTH are set, all routes except GET /, GET /health, GET /openapi.json, GET /reference,
# GET /favicon.ico, and POST /oauth/token require Authorization: Bearer <access_token>.
# In src/index.ts, GET /openapi.json, GET /reference, and GET /favicon.ico are registered before
# requireBearerAuth; GET /, GET /health, and POST /oauth/token are skipped by requireBearerAuth (see
# isPublicOAuthRoute in
# src/middleware/requireBearerAuth.ts). JWT signing secret (min 32 characters).
# OAUTH_JWT_SECRET=
# JSON array of { "client_id", "client_secret" } (duplicate client_id not allowed).
# Docker/Coolify may store escaped quotes (echo shows \"); the server accepts that form too.
# OAUTH_CLIENTS=[{"client_id":"my-service","client_secret":"use-a-long-random-secret"}]
# Access token lifetime in seconds (default 3600, min 60, max 86400)
# OAUTH_ACCESS_TOKEN_TTL_SECONDS=3600