DEERFLOW_BASE_URL=https://superagent.nianxx.cn
DEERFLOW_OPEN_API_KEY=df_open_replace_me
DEERFLOW_AUTH_MODE=bearer
DEERFLOW_TIMEOUT_SECONDS=60
DEERFLOW_CONNECT_TIMEOUT_SECONDS=10
DEERFLOW_SESSION_DB=runtime/agent_sessions.sqlite3

# Independent bearer used only by the ARR MCP HTTP transport.
ARR_MCP_BEARER_TOKEN=replace_with_independent_random_token

# Independent callback-verification secret shared only by the trusted Agent
# runtime adapter and ARR backend. Do not reuse DEERFLOW_OPEN_API_KEY.
ARR_AGENT_RESULT_HMAC_KEY_ID=arr-callback-key-1
ARR_AGENT_RESULT_HMAC_KEY_B64=base64_of_at_least_32_random_bytes
ARR_AGENT_RESULT_MAX_AGE_SECONDS=600
# Public HTTPS URL reached by the trusted Agent runtime adapter.
ARR_AGENT_CALLBACK_URL=https://arr.example.com/api/integrations/super-agent/results

# ARR backend only. SuperAgent/Agent must never receive this value.
# Use an ARR application role with least privilege before production rollout.
ARR_DATABASE_URL=postgresql://arr_app:replace_me@127.0.0.1:5432/booking_test?sslmode=require
# Optional read/report role override; defaults to ARR_DATABASE_URL when omitted.
MONTHLY_REPORT_DATABASE_URL=postgresql://arr_report:replace_me@127.0.0.1:5432/booking_test?sslmode=require
# Optional least-privilege read-only BI role; defaults to ARR_DATABASE_URL.
DASHBOARD_DATABASE_URL=postgresql://arr_dashboard:replace_me@127.0.0.1:5432/booking_test?sslmode=require

# Non-secret object-store routing only. Credentials belong in platform secret/instance-role configuration.
ARR_OBJECT_PROVIDER=oss
ARR_OBJECT_PREFIX=arr
ARR_OBJECT_BUCKET_ALIAS=arr-private-processing
ARR_OBJECT_GRANT_TTL_SECONDS=300

# Alibaba Cloud OSS SDK V2 routing. Keep the bucket private and unversioned;
# the guarded object workflow rejects Enabled or Suspended versioning.
ARR_OSS_REGION=cn-hangzhou
ARR_OSS_ENDPOINT=https://oss-cn-hangzhou.aliyuncs.com
ARR_OSS_BUCKET=replace-with-private-bucket
ARR_AGENT_OUTPUT_PREFIX=arr-agent-outputs

# OSS SDK credentials are injected by RAM role / STS / deployment Secret.
# They are shown only as variable names; never commit real values.
OSS_ACCESS_KEY_ID=replace_me
OSS_ACCESS_KEY_SECRET=replace_me
# OSS_SESSION_TOKEN=replace_me