# Add these as Hugging Face Space Secrets, not committed variables.
GEMINI_API_KEY=
# Optional higher-quality web provider. The app falls back to DuckDuckGo without it.
TAVILY_API_KEY=
# Optional bearer token protecting REST write endpoints.
APP_API_TOKEN=

# Safe defaults
DEFAULT_MODEL=gemini-3.5-flash-lite
NATIVE_SEARCH_MODEL=gemini-2.5-flash-lite
ALLOW_SERVER_API_KEY=true
ENABLE_NATIVE_GOOGLE_SEARCH=true
MAX_UPLOAD_MB=20
SESSION_TTL_MINUTES=120
QUERIES_PER_HOUR_PER_IP=40
LLM_MAX_RETRIES=2