# Copy to .env and fill in. .env is git-ignored and is not copied into the Docker image.
# On Hugging Face, set these as Space *secrets* instead (Settings -> Variables and secrets).

# Sawtak Arabi TTS key for the model-answer playback (https://sawtakarabi.ai/dashboard).
# Without it the page falls back to the device's Arabic voice.
SAWTAK_API_KEY=

# Optional: the edge-tts voice of the spoken Hebrew prompts. Empty = he-IL-HilaNeural.
HEBREW_VOICE=

# Optional: where the generated speech (Arabic answers, Hebrew prompts) is cached. Empty = ~/.cache/ihki-tts.
TTS_CACHE_DIR=

# Optional: the Hugging Face CTC phoneme model the scorer runs. Unset = facebook/wav2vec2-xlsr-53-espeak-cv-ft.
# Leave the line commented out rather than empty: an empty value is used as is and fails to load.
# scripts/bench.py and scripts/rescore.py read it too, so a benchmark runs on the same model as the server.
# MODEL_ID=facebook/wav2vec2-xlsr-53-espeak-cv-ft

# Optional: how a vowel's GOP pools its frames (docs/gop-pooling.md): max | mean | topk | lse | energy | gated.
# Empty = gated. "max" is the scoring before pooling. The lab's results show it beside the version, to compare runs.
GOP_RATIO_POOL=

# Optional: which frames a vowel's competitors are read from. Empty = wide (from the sound before to the one after,
# as consonants). "narrow" = its aligned frames +- 1, or a number for another margin. Narrow drops spikes in the
# transitions, but also misses a substitution held just outside it; see scripts/gop_window_bench.py.
GOP_VOWEL_WINDOW=

# Google sign-in through Supabase (Project Settings -> API Keys). Both values are public: the page gets them too.
# Empty = no sign-in, the service is open. On Hugging Face these can be plain Space *variables*.
SUPABASE_URL=
SUPABASE_PUBLISHABLE_KEY=

# Optional: the teacher's account (or several, separated by commas or spaces). After sign-in a teacher chooses
# between "תרגול" (the same as a student) and "ניהול" (the management panel: every student's progress, and the
# classes). Who may sign in is set by the classes the teacher opens there (see the README), not here.
TEACHER_EMAILS=

# Bootstrap accounts with full access, including the Lab. Admins do not get Lab access. Keep at least one address here
# so database permission mistakes cannot lock every developer out.
DEVELOPER_EMAILS=

# Needed by the management panel and the classes: the project's secret key (Project Settings -> API Keys -> secret, or the
# legacy service_role key). It reads every student's rows, so it is NOT public: on Hugging Face set it as a *secret*.
# scripts/bench.py needs it (with the two values above) to read the lab's recordings.
SUPABASE_SECRET_KEY=

# Optional: accounts (separated by commas or spaces) that, like the teachers, get a flag under each score, for a recording they said
# right and the system scored wrong. A flag is kept in the Supabase table `flags` with its recording (see the README),
# so it needs SUPABASE_SECRET_KEY. These accounts may sign in without being in a class.
TUTORS_EMAIL=

# Optional deployment metadata shown to teachers at the bottom of the management panel.
# Without these, the app uses a content hash, the newest source-file time, and the local git commit when available.
APP_VERSION=
BUILD_DATE=
GIT_COMMIT=
GIT_COMMIT_MESSAGE=

# Lets a developer replace SAWTAK_API_KEY / ANTHROPIC_API_KEY from the management panel (kept encrypted in Supabase,
# table app_secrets; see the README). Make one with:
#   python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
# Keep it only here / as a Space secret. Losing it loses the keys set in the panel (the ones above still work).
SECRETS_MASTER_KEY=