dmtools.env.example

# DMTools Environment Configuration Example
# Copy this file to 'dmtools.env' or '.env' and fill in your actual values
# Keep your actual environment files secure and never commit them to version control

# =============================================================================
# JIRA CONFIGURATION
# =============================================================================
# Your Jira instance base URL (without trailing slash)
JIRA_BASE_PATH=https://yourcompany.atlassian.net

# Your Jira email address
JIRA_EMAIL=your.email@company.com

# Jira API token (create at: https://id.atlassian.com/manage-profile/security/api-tokens)
JIRA_API_TOKEN=your-token-here

# Authentication type (basic, bearer, or cookie)
JIRA_AUTH_TYPE=basic

# Optional: Wait before performing operations (true/false)
# JIRA_WAIT_BEFORE_PERFORM=false

# Optional: Enable debug logging (true/false)
# JIRA_LOGGING_ENABLED=false

# Optional: Clear cache on startup (true/false)
# JIRA_CLEAR_CACHE=false

# Optional: Project for extra fields
# JIRA_EXTRA_FIELDS_PROJECT=YOUR_PROJECT

# =============================================================================
# CONFLUENCE CONFIGURATION  
# =============================================================================
# Your Confluence instance base URL
CONFLUENCE_BASE_PATH=https://yourcompany.atlassian.net/wiki

# Confluence email (usually same as Jira)
CONFLUENCE_EMAIL=your.email@company.com

# Confluence API token (same as Jira token if using Atlassian Cloud)
CONFLUENCE_API_TOKEN=ATATT3xFfGF0T...your-token-here

# Authentication type
CONFLUENCE_AUTH_TYPE=basic

# Optional: Default space key
# CONFLUENCE_DEFAULT_SPACE=YOURSPACE

# Optional: GraphQL path for advanced queries
# CONFLUENCE_GRAPHQL_PATH=/graphql

# =============================================================================
# AZURE DEVOPS CONFIGURATION
# =============================================================================
# Azure DevOps organization name (from your ADO URL: dev.azure.com/{organization})
ADO_ORGANIZATION=yourorganization

# Default Azure DevOps project name
ADO_PROJECT=YourProject

# Azure DevOps Personal Access Token (create at: https://dev.azure.com/{org}/_usersSettings/tokens)
# Scopes needed: Work Items (Read, Write), Code (Read)
ADO_PAT_TOKEN=your-pat-token-here

# Optional: Base path (usually default is fine)
# ADO_BASE_PATH=https://dev.azure.com

# =============================================================================
# AI PROVIDERS CONFIGURATION
# =============================================================================
# Google Gemini API Key (get from: https://aistudio.google.com/app/apikey)
GEMINI_API_KEY=AIza...your-api-key-here

# Default Gemini model
GEMINI_DEFAULT_MODEL=gemini-2.0-flash

# Gemini base path (usually default is fine)
# GEMINI_BASE_PATH=https://generativelanguage.googleapis.com/v1beta/models

# OpenAI API Key (if using OpenAI)
# OPEN_AI_API_KEY=sk-...your-openai-key-here

# OpenAI model
# OPEN_AI_MODEL=gpt-4

# AWS Bedrock Configuration
# BEDROCK_REGION=eu-north-1
# BEDROCK_MODEL_ID=qwen.qwen3-coder-480b-a35b-v1:0
# BEDROCK_BEARER_TOKEN=your-aws-bearer-token-here
# Alternative token name (checked first): AWS_BEARER_TOKEN_BEDROCK=your-aws-bearer-token-here
# BEDROCK_BASE_PATH=https://bedrock-runtime.eu-north-1.amazonaws.com
# BEDROCK_MAX_TOKENS=4096
# BEDROCK_TEMPERATURE=1.0
#
# Available Bedrock Models:
# 
# 1. Amazon Nova Models (supports images via /invoke endpoint):
#    - For inference profile ARN: arn:aws:bedrock:region:account:inference-profile/eu.amazon.nova-lite-v1:0
#    - For direct model ID: eu.amazon.nova-lite-v1:0
#    - Supports: Text and images (PNG, JPEG, GIF, WebP)
#    - Example: BEDROCK_MODEL_ID=arn:aws:bedrock:eu-north-1:YOUR-AWS-ACCOUNT-ID:inference-profile/eu.amazon.nova-lite-v1:0
#
# 2. Qwen Models (text only, no images):
#    - qwen.qwen3-coder-480b-a35b-v1:0
#    - qwen.qwen-max-2401:0
#    - Supports: Text only
#    - Example: BEDROCK_MODEL_ID=qwen.qwen3-coder-480b-a35b-v1:0
#
# 3. Claude Models (supports images):
#    - anthropic.claude-3-5-sonnet-20241022-v2:0
#    - anthropic.claude-3-opus-20240229-v1:0
#    - Supports: Text and images
#    - Example: BEDROCK_MODEL_ID=anthropic.claude-3-5-sonnet-20241022-v2:0
#
# 4. Mistral Models (some support images):
#    - mistral.mistral-large-2407-v1:0
#    - mistral.pixtral-large-2502-v1:0 (supports images)
#    - Supports: Text (and images for pixtral models)
#    - Example: BEDROCK_MODEL_ID=mistral.pixtral-large-2502-v1:0
#
# Note: For inference profile ARN, the system automatically extracts the model ID for the /invoke endpoint.
# The inference profile ARN format is: arn:aws:bedrock:region:account:inference-profile/model-id

# AI retry configuration
# AI_RETRY_AMOUNT=3
# AI_RETRY_DELAY_STEP=20000

# =============================================================================
# SOURCE CONTROL CONFIGURATION
# =============================================================================
# GitHub Personal Access Token (create at: https://github.com/settings/tokens)
GITHUB_TOKEN=g..s...your-github-token-here

# Optional: GitHub configuration
# GITHUB_WORKSPACE=your-org
# GITHUB_REPOSITORY=your-repo
# GITHUB_BRANCH=main
# GITHUB_BASE_PATH=https://api.github.com

# =============================================================================
# APPLE SSO CONFIGURATION
# =============================================================================
# Apple Sign in with Apple configuration (get from Apple Developer Console)
# Team ID from your Apple Developer account
APPLE_TEAM_ID=your-apple-team-id

# Key ID from your Sign in with Apple private key
APPLE_KEY_ID=your-key-id

# Client ID (Services ID) from Apple Developer Console - for web OAuth
APPLE_CLIENT_ID=your-services-id

# Bundle ID from Apple Developer Console - for native app authentication
APPLE_BUNDLE_ID=your-bundle-id

# Private key content (the content of your .p8 file) - for CI/CD deployment
APPLE_PRIVATE_KEY_CONTENT=-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----

# Alternative: Private key file path (for local development)
# APPLE_PRIVATE_KEY_PATH=/path/to/AuthKey_XXXXX.p8

# GitLab Personal Access Token (if using GitLab)
# GITLAB_TOKEN=glpat-...your-gitlab-token-here
# GITLAB_WORKSPACE=your-group
# GITLAB_REPOSITORY=your-repo
# GITLAB_BRANCH=main
# GITLAB_BASE_PATH=https://gitlab.com/api/v4

# Bitbucket App Password (if using Bitbucket)
# BITBUCKET_TOKEN=your-app-password-here
# BITBUCKET_WORKSPACE=your-workspace
# BITBUCKET_REPOSITORY=your-repo
# BITBUCKET_BRANCH=main
# BITBUCKET_API_VERSION=2.0
# BITBUCKET_BASE_PATH=https://api.bitbucket.org

# =============================================================================
# DESIGN TOOLS CONFIGURATION
# =============================================================================
# Figma Personal Access Token (create at: https://www.figma.com/settings)
FIGMA_API_KEY=f...your-figma-token-here

# Figma base path (usually default is fine)
# FIGMA_BASE_PATH=https://api.figma.com

# =============================================================================
# OTHER INTEGRATIONS
# =============================================================================
# Rally configuration (if using Rally)
# RALLY_TOKEN=your-rally-token
# RALLY_PATH=https://rally1.rallydev.com

# Firebase configuration (if using Firebase)
# FIREBASE_PROJECT_ID=your-project-id
# FIREBASE_SERVICE_ACCOUNT_JSON_AUTH={"type":"service_account",...}

# App Center configuration (if using App Center)
# APP_CENTER_TOKEN=your-app-center-token
# APP_CENTER_ORGANIZATION=your-org

# Custom AI/JS configuration
# JS_SCRIPT_PATH=/path/to/your/script.js
# JS_CLIENT_NAME=YourCustomClient
# JS_DEFAULT_MODEL=your-model
# JS_BASE_PATH=https://your-api-endpoint.com

# =============================================================================
# ADVANCED CONFIGURATION
# =============================================================================
# Prompt configuration
# PROMPT_CHUNK_TOKEN_LIMIT=4000
# PROMPT_CHUNK_MAX_SINGLE_FILE_SIZE=50000
# PROMPT_CHUNK_MAX_TOTAL_FILES_SIZE=200000
# PROMPT_CHUNK_MAX_FILES=10

# Metrics configuration
# DEFAULT_TICKET_WEIGHT_IF_NO_SPS=1
# LINES_OF_CODE_DIVIDER=100.0
# TIME_SPENT_ON_DIVIDER=8.0

# Request throttling
# SLEEP_TIME_REQUEST=1000

# Integrations (comma-separated list)
# DMTOOLS_INTEGRATIONS=jira,confluence,figma,github,gitlab

# Cache configuration
# By default, HTTP GET request caching is DISABLED for all clients.
# Set to 'true' to enable caching globally (useful for repeated CLI calls on same data).
# Note: The server (dmtools-server) enables caching explicitly per-client for performance.
# DMTOOLS_CACHE_ENABLED=false

# CLI command executor – extra allowed commands (comma-separated)
# Base whitelist (always allowed): git, gh, dmtools, npm, yarn, docker, kubectl, terraform, ansible, aws, gcloud, az
# Add additional commands or custom scripts as needed per environment:
# CLI_ALLOWED_COMMANDS=find,ls,cat,mkdir,pytest,python3,pip3,curl,ffmpeg,bash,run-cursor-agent.sh

# CLI output format (default: json)
# Controls how MCP tool results are serialised when using the CLI.
# Available formats:
#   json  – pretty-printed JSON (default)
#   toon  – LLM-optimised text format (reduces token count; uses "Next key1,key2" headers)
#   mini  – compact/minified JSON without extra whitespace
# Can also be overridden per invocation with --output <format>, --toon, or --mini flags.
# CLI_OUTPUT=json

# ===== file_read allowlist =====
# By default file_read blocks any path that resolves outside the working directory.
# Set this to a comma-separated list of glob patterns (resolved relative to the working
# directory) to allow specific paths outside it.  Only file_read respects this setting;
# file_write and file_delete are always restricted to the working directory.
#
# Examples:
#   DMTOOLS_FILE_READ_ALLOWED_PATHS=../.dmtools/**
#   DMTOOLS_FILE_READ_ALLOWED_PATHS=../.dmtools/**,../config/**
#
# Pattern rules:
#   **  matches any number of path segments (recursive)
#   *   matches within a single path segment only
#   No wildcard = exact file path match
# DMTOOLS_FILE_READ_ALLOWED_PATHS=