# Supabase (server-side only; use service_role key)

SUPABASE_URL=https://your-project-ref.supabase.co

SUPABASE_KEY=your-service-role-key

# Public MCP endpoint base URL (no /mcp suffix)

PATCHCORD_PUBLIC_URL=https://patchcord.yourdomain.com

# Server bind + MCP path

PATCHCORD_HOST=0.0.0.0

PATCHCORD_PORT=8000

PATCHCORD_MCP_PATH=/mcp

PATCHCORD_STATELESS_HTTP=true

# Agent tokens are managed in the database via: python3 -m patchcord.cli.manage_tokens

# Default namespace for agents without explicit namespace prefix

PATCHCORD_DEFAULT_NAMESPACE=default

# Presence tuning

PATCHCORD_ACTIVE_WINDOW_SECONDS=3600

PATCHCORD_PRESENCE_WRITE_INTERVAL_SECONDS=10

# OAuth token lifecycle

PATCHCORD_OAUTH_ACCESS_TOKEN_TTL_SECONDS=86400

PATCHCORD_OAUTH_REFRESH_TOKEN_TTL_SECONDS=31536000

# Optional explicit OAuth identity map:

# PATCHCORD_OAUTH_CLIENTS=client_id_1=projecta:backend,client_id_2=projecta:frontend

# Add custom OAuth clients (extends built-in list of known clients):

# PATCHCORD_KNOWN_OAUTH_CLIENTS=myapp:myapp.com,myapp.io;internal:internal.example.com

# Attachments via Supabase Storage

PATCHCORD_ATTACHMENTS_BUCKET=attachments

PATCHCORD_ATTACHMENT_MAX_BYTES=10485760

PATCHCORD_ATTACHMENT_URL_EXPIRY_SECONDS=86400

PATCHCORD_ATTACHMENT_ALLOWED_MIME_TYPES=text/*,image/*,application/json,application/pdf,application/xml,application/zip,application/gzip,application/x-gzip,application/x-tar,application/octet-stream

# Rate limiting (per bearer token)

PATCHCORD_RATE_LIMIT_PER_MINUTE=100

PATCHCORD_RATE_BAN_SECONDS=60

# Automatic cleanup (messages, expired tokens, old attachments)

PATCHCORD_CLEANUP_MAX_AGE_DAYS=7

PATCHCORD_CLEANUP_INTERVAL_HOURS=6

# OpenAI App Directory verification (set when submitting)

# OPENAI_VERIFICATION_TOKEN=your-token-from-openai