1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23# GitHub OAuth (PRD §9.1). Required scope: repo.
# Both can be left blank: the service falls back to the bundled OAuth App and
# the device flow, which needs no setup and no secret (like the `gh` CLI).
# Set CLIENT_ID only to use your own OAuth App. CLIENT_SECRET is needed ONLY for
# the web redirect flow — never commit a real secret.
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
# Upstream agent library repo — target for agent-suggestion issues.
IRIS_UPSTREAM_REPO=https://github.com/EqualifyEverything/equalify-iris
# Service-account PAT (repo or public_repo scope) for auto-filing labeled
# agent-suggestion issues on the upstream repo. Blank = issue filing disabled.
IRIS_GITHUB_TOKEN=
# Model provider credentials (PRD §10.3). Set the one(s) your config uses.
OPENROUTER_API_KEY=
# Bedrock uses the standard AWS credential chain (env, profile, or IAM role).
# AWS_ACCESS_KEY_ID=
# AWS_SECRET_ACCESS_KEY=
# AWS_REGION=us-east-2