app.yaml

# Databricks App runtime env (deployed with source_code_path: .. from resources/app.yml)
#
# Security (docs/security.md):
# - Secrets: profile in .env; auth in ~/.databrickscfg — never PATs/tokens/UUIDs here
# - LAKEBASE_ENDPOINT + SQL_WAREHOUSE: valueFrom only (injected at deploy)
# - JOB_ID_*: valueFrom only — resolved from resources/app.yml job permissions
# - Product defaults below are non-secret; override locally via .env for uvicorn
#
# Public forks: edit UC_CATALOG / VS_ENDPOINT_NAME / MODEL_* for your workspace.

command:
  - uvicorn
  - app.main:app
  - --host
  - "0.0.0.0"
  - --port
  - "8000"

env:
  # Platform-injected (never commit concrete ids)
  - name: LAKEBASE_ENDPOINT
    valueFrom: postgres
  - name: SQL_WAREHOUSE
    valueFrom: sql-warehouse

  # Clock A product config (non-secret)
  - name: UC_CATALOG
    value: kg_agentic_rag
  - name: VS_ENDPOINT_NAME
    value: kg-agentic-rag-vs-dev
  - name: MODEL_ID
    value: system.ai.meta-llama-3-3-70b-instruct
  - name: EMBEDDING_MODEL
    value: databricks-gte-large-en
  - name: EMBEDDING_DIMENSION
    value: "1024"
  - name: UPLOAD_MAX_BYTES
    value: "10485760"
  - name: ALLOWED_MIME_TYPES
    value: application/pdf,text/plain,text/markdown

  # Clock B job ids (valueFrom — CAN_MANAGE_RUN in resources/app.yml)
  - name: JOB_ID_INGEST_DOCUMENT
    valueFrom: job-ingest-document
  - name: JOB_ID_CHUNK_DOCUMENT
    valueFrom: job-chunk-document
  - name: JOB_ID_INDEX_DOCUMENT
    valueFrom: job-index-document
  - name: JOB_ID_LEARN_CHAT_PIPELINE
    valueFrom: job-learn-chat-pipeline
  - name: JOB_ID_DRAIN_PENDING_MEMORY
    valueFrom: job-drain-pending-memory
  - name: JOB_ID_SYNC_CHAT_TO_UC
    valueFrom: job-sync-chat-to-uc
  - name: JOB_ID_EXPORT_LENS
    valueFrom: job-export-lens
  - name: JOB_ID_DISPOSE
    valueFrom: job-dispose
  - name: JOB_ID_LEARN_FROM_DOCUMENT
    valueFrom: job-learn-from-document