1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25# GitHub OAuth (PRD §9.1). Required scope: repo.
# Both can be left blank: the service falls back to the bundled OAuth App and
# the device flow, which needs no setup and no secret (like the `gh` CLI).
# Set CLIENT_ID only to use your own OAuth App. CLIENT_SECRET is needed ONLY for
# the web redirect flow — never commit a real secret.
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
# Upstream agent library repo — target for agent-suggestion issues.
IRIS_UPSTREAM_REPO=https://github.com/EqualifyEverything/equalify-iris
# OPTIONAL override for who authors auto-filed agent-suggestion issues.
# Blank (default): issues are filed as the logged-in user (their token).
# Set to a service-account PAT (repo/public_repo scope) to file everything
# under that bot account instead.
IRIS_GITHUB_TOKEN=
# Model provider credentials (PRD §10.3). Set the one(s) your config uses.
OPENROUTER_API_KEY=
# Bedrock uses the standard AWS credential chain (env, profile, or IAM role).
# AWS_ACCESS_KEY_ID=
# AWS_SECRET_ACCESS_KEY=
# AWS_REGION=us-east-2