# OpenAI Codex SDK
CODEX_API_KEY=
OPENAI_API_KEY=
OPENAI_BASE_URL=
CODEX_SKIP_GIT_CHECK=true
MCP_CONFIG_PATH=./mcp.config.json

# Anthropic Claude Agent SDK
# CLAUDE_CODE_OAUTH_TOKEN takes precedence over ANTHROPIC_API_KEY when both are set.
CLAUDE_CODE_OAUTH_TOKEN=
ANTHROPIC_API_KEY=
CLAUDE_MODEL=
CLAUDE_CODE_PATH=

# Agent management limits
AGENT_MAX_CONCURRENT=4
AGENT_MAX_SESSION=2
AGENT_MAX_RECURSIVE_DEPTH=3

# Schema-driven orchestration limits
AGENT_STATE_ROOT=.ai_ops/state
AGENT_PROJECT_CONTEXT_PATH=.ai_ops/project-context.json
AGENT_TOPOLOGY_MAX_DEPTH=4
AGENT_TOPOLOGY_MAX_RETRIES=2
AGENT_RELATIONSHIP_MAX_CHILDREN=4

# Resource provisioning (hard + soft constraints)
AGENT_WORKTREE_ROOT=.ai_ops/worktrees
AGENT_WORKTREE_BASE_REF=HEAD
AGENT_PORT_BASE=36000
AGENT_PORT_BLOCK_SIZE=32
AGENT_PORT_BLOCK_COUNT=512
AGENT_PORT_PRIMARY_OFFSET=0
AGENT_PORT_LOCK_DIR=.ai_ops/locks/ports
AGENT_DISCOVERY_FILE_RELATIVE_PATH=.agent-context/resources.json

# Security middleware
# AGENT_SECURITY_VIOLATION_MODE: hard_abort | validation_fail
AGENT_SECURITY_VIOLATION_MODE=hard_abort
AGENT_SECURITY_ALLOWED_BINARIES=git,npm,node,cat,ls,pwd,echo,bash,sh
AGENT_SECURITY_COMMAND_TIMEOUT_MS=120000
AGENT_SECURITY_AUDIT_LOG_PATH=.ai_ops/security/command-audit.ndjson
AGENT_SECURITY_ENV_INHERIT=PATH,HOME,TMPDIR,TMP,TEMP,LANG,LC_ALL
AGENT_SECURITY_ENV_SCRUB=
AGENT_SECURITY_DROP_UID=
AGENT_SECURITY_DROP_GID=

# Runtime-injected (do not set manually):
# AGENT_REPO_ROOT, AGENT_WORKTREE_PATH, AGENT_WORKTREE_BASE_REF,
# AGENT_PORT_RANGE_START, AGENT_PORT_RANGE_END, AGENT_PORT_PRIMARY, AGENT_DISCOVERY_FILE