.env.example

# Paracosm Simulation Engine
# Copy to .env and fill in your keys
# All search keys are also configurable from the dashboard Settings panel

# === LLM Providers (at least one required) ===
OPENAI_API_KEY=sk-...
ANTHROPIC_API_KEY=sk-ant-...

# === Research & Web Search (all optional, more = better) ===
# These power the research pipeline: department agents use live web search
# to find real citations (NASA papers, medical journals, domain research)
# during crisis analysis. With all 4 providers, search coverage is maximized
# and Cohere neural reranking produces the most relevant results.
#
# Also used by the Scenario Compiler for real-world seed ingestion:
# upload a document and the compiler enriches the scenario knowledge
# bundle with live web research grounded in your seed material.
#
# Get free API keys:
#   Serper:    https://serper.dev (2,500 free searches)
#   Tavily:    https://tavily.com (1,000 free searches/mo)
#   Firecrawl: https://firecrawl.dev (500 free credits)
#   Cohere:    https://cohere.com (rate-limited free tier)

# Google search via Serper (most general web coverage)
SERPER_API_KEY=

# AI-optimized search with structured content extraction
TAVILY_API_KEY=

# Web scraping + search with clean markdown extraction
FIRECRAWL_API_KEY=

# Neural reranking via Cohere rerank-v3.5
# Reorders search results by semantic relevance to the query
# Dramatically improves citation quality when combined with any search provider
COHERE_API_KEY=

# === Scenario Compiler ===
# The compiler generates runtime hooks from scenario JSON via LLM calls
# Uses ANTHROPIC_API_KEY or OPENAI_API_KEY (whichever is set)
# Cost: ~$0.10 per scenario compile, cached after first generation

# === Server ===
PORT=3456

# === Rate Limiting ===
# Max simulations per IP per day. 0 = unlimited (local dev). Default: 3.
# Set to 3 for production to prevent API cost abuse.
RATE_LIMIT=3

# === Admin endpoints (POST /admin/sessions/save + POST /admin/data/wipe) ===
# ADMIN_WRITE is the master switch — off (or unset) means /admin/* returns 403
# regardless of headers. ADMIN_TOKEN is the per-request bearer token; clients
# send it via the `X-Admin-Token` header. When ADMIN_WRITE=true and
# ADMIN_TOKEN is unset, the routes return 503 (fail-closed) instead of being
# open. The dashboard's Wipe All button prompts for the token once and
# stores it in localStorage. Generate a 32-char random secret:
#   openssl rand -hex 16
ADMIN_WRITE=false
ADMIN_TOKEN=