.env.example

# ─────────────────────────────────────────────────────────────────────────────
# Copy this file to .env and fill in your values.
# Never commit .env to source control.
# ─────────────────────────────────────────────────────────────────────────────

# ── CONTROL PLANE (Entra ID — agent management) ──────────────────────────────
# Required for: control_entra.py / control_entra.mjs / dotnet run -- entra-agent
# Authenticate with: az login   (or set the service-principal vars below)
PROJECT_ENDPOINT=https://<your-hub>.services.ai.azure.com
AZURE_AI_MODEL=gpt-4o

# ── RUNTIME PLANE — Option A: Azure AI Foundry inference endpoint (API key) ──
# Required for: runtime_apikey.py / runtime_apikey.mjs / dotnet run -- apikey-inference
# Find this endpoint in: Azure AI Foundry portal → your hub → Endpoints → Azure AI Inference
AZURE_AI_ENDPOINT=https://<your-hub>.services.ai.azure.com/models
AZURE_AI_API_KEY=<your-azure-ai-api-key>

# ── RUNTIME PLANE — Option B: Azure OpenAI resource endpoint (API key) ───────
# Required for: runtime_apikey.py b / runtime_apikey.mjs b / dotnet run -- apikey-openai
# Find this endpoint in: Azure portal → your Azure OpenAI resource → Keys and Endpoint
AZURE_OPENAI_ENDPOINT=https://<your-resource>.openai.azure.com/
AZURE_OPENAI_API_KEY=<your-openai-api-key>
AZURE_OPENAI_DEPLOYMENT=gpt-4o

# ── OPTIONAL: Service-principal auth for CI/CD ────────────────────────────────
# DefaultAzureCredential picks these up automatically when az login is not used.
# AZURE_CLIENT_ID=<sp-application-id>
# AZURE_TENANT_ID=<tenant-id>
# AZURE_CLIENT_SECRET=<sp-secret>