.env.example

# Google Cloud Project Configuration
GOOGLE_CLOUD_PROJECT=evidence-freezer-dev
GOOGLE_CLOUD_REGION=us-east4

# Authentication (Do NOT commit real secrets)
PHOENIX_ENABLE_AUTH=true
PHOENIX_SECRET=replace_with_jwt_secret
PHOENIX_DEFAULT_ADMIN_INITIAL_PASSWORD=replace_with_initial_admin_password
PHOENIX_API_KEY=replace_with_system_api_key

# Phoenix Tracing Configuration
PHOENIX_HOST=http://localhost:6006
PHOENIX_COLLECTOR_ENDPOINT=http://localhost:6006/v1/traces
PHOENIX_CLIENT_HEADERS=
PHOENIX_TRACE_FIXTURES_PATH=packages/shared/fixtures

# Target App Settings
ENABLE_TRACING=true
USE_REAL_GEMINI=false
GEMINI_API_KEY=

# Watcher Settings
WATCHER_POLL_INTERVAL_MS=60000
WATCHER_PROJECT_ID=evidence-freezer-dev
WATCHER_POLLING_WINDOW_MINUTES=15
WATCHER_TRACE_LIMIT=50
WATCHER_AGENT_MODE=fixture
WATCHER_AGENT_FIXTURE_PATH=packages/shared/fixtures/agent-output.prompt-injection.json
WATCHER_DEMO_MODE=true
WATCHER_OPERATOR_TOKEN=
TARGET_APP_BASE_URL=http://localhost:3000

# Deployed Dashboard Settings
EVIDENCE_DASHBOARD_CASE_SOURCE=fixtures
EVIDENCE_DASHBOARD_BASE_URL=http://127.0.0.1:3000
EVIDENCE_DASHBOARD_OPERATOR_EMAIL=dashboard-operator
EVIDENCE_WATCHER_BASE_URL=http://localhost:8080
FIRESTORE_PROJECT_ID=evidence-freezer-dev
FIRESTORE_DATABASE_ID=(default)
FIRESTORE_BEARER_TOKEN=

# ADK Analyst Phoenix MCP Toolset
PHOENIX_MCP_URL=http://localhost:8080/mcp
PHOENIX_MCP_AUTH_MODE=none
PHOENIX_MCP_BEARER_TOKEN=
PHOENIX_MCP_AUDIENCE=
PHOENIX_MCP_SERVICE_ACCOUNT=adk-analyst-sa@evidence-freezer-dev.iam.gserviceaccount.com
PHOENIX_MCP_TOOL_FILTER=list-traces,get-trace,get-spans,get-session,get-prompt,draft-prompt-patch

# Agent Engine Deployment
AGENT_ENGINE_STAGING_BUCKET=gs://evidence-freezer-dev-agent-engine-staging
AGENT_ENGINE_DISPLAY_NAME=Evidence Freezer Analyst
AGENT_ENGINE_DESCRIPTION=Forensic ADK analyst for Evidence Freezer Phoenix traces
AGENT_ENGINE_STREAM_QUERY_URL=
AGENT_ENGINE_ACCESS_TOKEN=