# ─── WxO tenant — usado por orchestrate CLI y Plan A webhook ─────────────────
# Pattern: https://api.<region>.watson-orchestrate.cloud.ibm.com/instances/<uuid>
ORCHESTRATE_API_URL=https://api.us-south.watson-orchestrate.cloud.ibm.com/instances/REPLACE_INSTANCE_UUID
ORCHESTRATE_API_KEY=
WATSONX_API_KEY=
WATSONX_PROJECT_ID=

# IAM endpoint para Plan A
IBM_CLOUD_IAM_URL=https://iam.cloud.ibm.com/identity/token

# UUID del agente orchestrator en el env LIVE (capturar tras deploy)
WXO_AGENT_ID=
WXO_INSTANCE_URL=${ORCHESTRATE_API_URL}
WXO_API_KEY=${ORCHESTRATE_API_KEY}

# ─── Token compartido backend ↔ WxO connections ──────────────────────────────
# Custom header (no Bearer — issue C2)
WXO_BACKEND_TOKEN=REPLACE_GENERATE_SECURE_TOKEN

# ─── Observabilidad ──────────────────────────────────────────────────────────
TRACE_SINK=http                                  # sqlite | http | otlp | off
TRACE_SINK_URL=http://web:8000/api/traces
TRACES_DB_PATH=/data/traces.db

# ─── Webhook signing (si tu backend recibe webhooks de WxO) ──────────────────
WEBHOOK_SECRET=REPLACE_GENERATE_HMAC_SECRET

# ─── Host público ────────────────────────────────────────────────────────────
PUBLIC_HOST=mi-cliente.fitlabs.dev

# ─── Coolify (opcional, si deployás via API) ─────────────────────────────────
COOLIFY_API_URL=https://coolify.fitlabs.dev/api/v1
COOLIFY_API_TOKEN=
COOLIFY_PROJECT_UUID=
COOLIFY_APP_UUID=

# ─── DB (si tu solución tiene backend) ──────────────────────────────────────
DATABASE_URL=sqlite:///data/app.db

# ─── Admin seed (rotar tras primer login) ────────────────────────────────────
SEED_ADMIN_USERNAME=admin
SEED_ADMIN_PASSWORD=REPLACE_GENERATE_SECURE_PASSWORD