# ── App ────────────────────────────────────────────────────────────────────────
APP_VERSION=0.1.0
LOG_LEVEL=INFO
REQUEST_TIMEOUT_MS=60000

# ── Security ───────────────────────────────────────────────────────────────────
REQUIRE_API_KEY=false
API_KEY=
TRUSTED_HOSTS=localhost,127.0.0.1
CORS_ORIGINS=http://localhost:8000,http://127.0.0.1:8000,http://localhost:5000,http://127.0.0.1:5000

# ── Storage ────────────────────────────────────────────────────────────────────
# Default 200 MB max upload (UPDATED README spec)
MAX_UPLOAD_SIZE_BYTES=209715200
MAX_PROGRESS_LOG_CHARS=20000
UPLOAD_RETENTION_HOURS=72
REPORT_RETENTION_HOURS=720
COMPLETED_JOB_RETENTION_HOURS=1440

# ── Database ───────────────────────────────────────────────────────────────────
# Use PostgreSQL in production
DATABASE_URL=sqlite:///./data_analyst_agent.db

# ── Rate limiting ──────────────────────────────────────────────────────────────
RATE_LIMIT_REQUESTS_PER_MINUTE=60
RATE_LIMIT_UPLOADS_PER_MINUTE=10
RATE_LIMIT_ANALYSIS_PER_MINUTE=20
RATE_LIMIT_ANALYSIS_CONCURRENT=5

# ── LLM (Groq API) ─────────────────────────────────────────────────────────────
# Primary key — obtain from https://console.groq.com
GROQ_API_KEY=
# XAI_API_KEY kept for backward compatibility only; GROQ_API_KEY takes precedence
# XAI_API_KEY=

LLM_MODEL=llama-3.1-70b-versatile
LLM_TEMPERATURE=0.1
LLM_MAX_RETRIES=3
LLM_INITIAL_WAIT_MS=1000

# ── Privacy-First Controls (UPDATED README) ────────────────────────────────────
# ENABLE_SECURE_MODE: activates all privacy protections below
ENABLE_SECURE_MODE=true

# DISABLE_DATA_PERSISTENCE: datasets processed in-memory only, never written to disk.
# Raw data is discarded automatically after analysis completes.
DISABLE_DATA_PERSISTENCE=true

# ENABLE_DATA_MASKING: automatically masks sensitive fields before analysis:
# - Emails      → a***@domain.com
# - CNIC / IDs  → XX***XX
# - Financial   → ***XYZ
# - Phone       → XX***XX
ENABLE_DATA_MASKING=true

# ── Flask UI ───────────────────────────────────────────────────────────────────
FLASK_HOST=0.0.0.0
FLASK_PORT=5000
FLASK_DEBUG=false
BACKEND_URL=http://127.0.0.1:8000