.env.example

# --- LLM provider --------------------------------------------------------------
# A REAL scan needs a model. Pick ONE of the three below. With none configured, a
# real run refuses (it will NOT fake results); use --test for templated CI/demo only.

# 1) Anthropic (best quality)
ANTHROPIC_API_KEY=
# SYNTHESIS_MODEL=claude-sonnet-4-5-20250929
# SYNTHESIS_WORKER_MODEL=claude-haiku-4-5-20251001   # cheap model for Phase-B fan-out

# 2) OpenAI-compatible (vLLM / Ollama / LM Studio / local server) — used if no Anthropic key
# OPENAI_BASE_URL=http://localhost:11434/v1
# OPENAI_API_KEY=

# 3) Bundled local model (no API key). Requires: pip install 'synthesis-engine[local]'
# SYNTHESIS_USE_LOCAL=1
# SYNTHESIS_LOCAL_MODEL=qwen3-4b              # DEFAULT: Qwen3-4B-Instruct, Apache-2.0, ~2.5GB
# SYNTHESIS_LOCAL_MODEL=foundation-sec        # Foundation-Sec-8B-Instruct, security-domain, ~4.9GB (Cisco license)
# SYNTHESIS_LOCAL_MODEL=foundation-sec-apache # Foundation-Sec-8B base, Apache-2.0, ~4.9GB (not instruct)
# full override (repo + file + pinned revision):
# SYNTHESIS_LOCAL_REPO=org/Some-GGUF
# SYNTHESIS_LOCAL_FILE=model-Q4_K_M.gguf
# SYNTHESIS_LOCAL_REVISION=<commit-sha>
# SYNTHESIS_LOCAL_GPU_LAYERS=0                # raise to offload layers to GPU
# SYNTHESIS_LOCAL_CTX=8192

# --- safety / cost -------------------------------------------------------------
# SYNTHESIS_MAX_LLM_CALLS=200    # per-run cap (cost guard)
# SYNTHESIS_SANDBOX=off          # off | docker  (docker is opt-in; rungs 1-3)
# SYNTHESIS_MCP_TOKEN=           # required to start the SSE (remote) MCP transport

# --- storage (use a local disk path, not a network mount: sqlite needs locking) ---
# SYNTHESIS_DB=~/.synthesis/intent_graph.db   # or postgresql://user:pass@host/db (beta)
# SYNTHESIS_MODELS_DIR=~/.synthesis/models
# SYNTHESIS_AUDIT_LOG=~/.synthesis/audit.log

# --- logging -------------------------------------------------------------------
# SYNTHESIS_LOG_LEVEL=INFO       # DEBUG|INFO|WARNING|ERROR
# SYNTHESIS_LOG_FORMAT=text      # text|json

# Test mode (CI / UI demo only — templated fixtures, not a scan):
# SYNTHESIS_TEST_MODE=1

# --- private repos ---
# GITHUB_TOKEN=

# custom skill set (defaults to the skills shipped inside the package)
# SYNTHESIS_SKILLS_DIR=