.env.example

# Authentication
# QueryArgus uses DefaultAzureCredential — i.e. it rides your `az login` token
# cache. Run `az login` once on your machine and you do not need any of these
# env vars set. The flags below are escape hatches.

# Optional: pre-fetched ARM bearer token (used inside Docker/CI where `az` is
# unavailable). When set, it overrides DefaultAzureCredential.
# AZURE_ACCESS_TOKEN=

# Optional: Cosmos DB emulator shortcut. Skips ARM and hands back a canned local
# connection string. NOTE: the Cosmos emulator does not support the MongoDB API
# on Apple Silicon — this flag is only useful on x86 Linux CI.
# QUERYARGUS_EMULATOR=true

# LLM (Gemini-only for v1 — see project_def.md / locked decisions)
GEMINI_API_KEY=

# Optional: Postgres for persistent audit reports (weekend 3)
# POSTGRES_URL=postgresql://queryargus:queryargus@localhost:5432/queryargus