.env.example

# tastytrade OAuth2 (refresh token grant — no browser flow needed)
# Get your refresh token: developer.tastytrade.com → your app → Manage → Create Grant
TASTYTRADE_CLIENT_ID=your-client-id-from-developer-portal
TASTYTRADE_CLIENT_SECRET=your-client-secret-from-developer-portal
TASTYTRADE_REFRESH_TOKEN=
TASTYTRADE_ENV=sandbox

# Safety: trade scope is OFF by default — the monitor is read-only.
# Set to "true" only if you want account streamer to observe order fills.
TASTYTRADE_ENABLE_TRADE_SCOPE=false

# Server ports
PORT=3000
WS_PORT=3001

# Set to "true" for the monitor to serve the built dashboard on the WS port.
# In local dev this is false (Vite serves the dashboard separately).
# In Docker / production this is true.
SERVE_DASHBOARD=false

# ─── Pi Agent — LLM Provider Configuration ──────────────────────
# Set PI_PROVIDER to one of:
#   anthropic, openai, google, openrouter, bedrock,
#   cursor-agent, cliproxy, ollama
PI_PROVIDER=anthropic
PI_MODEL=claude-sonnet-4-20250514

# Direct API providers — set the key for your chosen provider:
ANTHROPIC_API_KEY=
# OPENAI_API_KEY=
# GEMINI_API_KEY=
# OPENROUTER_API_KEY=

# AWS Bedrock (set PI_PROVIDER=bedrock):
# AWS_ACCESS_KEY_ID=
# AWS_SECRET_ACCESS_KEY=
# AWS_REGION=us-east-1

# Cursor Agent proxy (set PI_PROVIDER=cursor-agent):
# Uses your Cursor subscription via OAuth tokens.
# PI_CURSOR_ACCESS_TOKEN=
# PI_CURSOR_REFRESH_TOKEN=

# CLIProxyAPI for Claude Max (set PI_PROVIDER=cliproxy):
# Run CLIProxyAPI separately, then point pi at it.
# CLIPROXY_URL=http://localhost:8317
# CLIPROXY_API_KEY=

# Ollama local models (set PI_PROVIDER=ollama):
# OLLAMA_HOST=http://localhost:11434

# Monitor WS URL — override if pi-agent runs on a different host
# MONITOR_WS_URL=ws://localhost:3001

# ─── Agent Provider Selection ────────────────────────────────────
# Set AGENT_PROVIDER to select which agent runs in Docker/Render:
#   pi         — existing pi-agent (default)
#   claude-sdk — Claude Agent SDK runner
AGENT_PROVIDER=pi

# ─── Claude Agent SDK Configuration ─────────────────────────────
# Required when AGENT_PROVIDER=claude-sdk (falls back to ANTHROPIC_API_KEY)
CLAUDE_API_KEY=
CLAUDE_MODEL=claude-sonnet-4-20250514
CLAUDE_MAX_BUDGET_USD=0.50

# ─── Multi-Tenant Configuration (optional) ───────────────────────
# Set ENCRYPTION_KEY to enable multi-tenant mode.
# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
# When set, the dashboard will require login and each user can configure
# their own agent backend (API key, webhook, or WebSocket).
# When NOT set, the monitor runs in single-tenant mode (no auth, env-var config).
# ENCRYPTION_KEY=

# JWT secret for user sessions (used only in multi-tenant mode)
# JWT_SECRET=change-me-in-production

# ─── OAuth Login (optional) ───────────────────────────────────
# Enable GitHub and/or GitLab OAuth sign-in.
# Create a GitHub OAuth App: https://github.com/settings/developers
#   Callback URL: https://your-domain/auth/github/callback
# GITHUB_CLIENT_ID=
# GITHUB_CLIENT_SECRET=

# Create a GitLab Application: https://gitlab.com/-/user_settings/applications
#   Callback URL: https://your-domain/auth/gitlab/callback
#   Scopes: read_user
# GITLAB_CLIENT_ID=
# GITLAB_CLIENT_SECRET=

# Public URL of the monitor (required for OAuth redirect URIs)
# PUBLIC_URL=https://tasty-v2-monitor.onrender.com