# Anthropic API Key for Claude
ANTHROPIC_API_KEY=your-api-key-here

# JWT Configuration
JWT_SECRET=cloudswag-secret-change-in-production
JWT_ALGORITHM=HS256

# Mock mode - set to false for real JWT validation
SWAG_MOCK_AUTH=true

# Paths (relative to project root)
SWAG_DB_PATH=data/swag_store.db
POLICIES_PATH=data/policies

# MCP Server Configuration
# Default: use uvx to run the published mcp-server-sqlite package
USE_UVX_SQLITE=true
# Optional: path to custom SQLite MCP server script (only used if USE_UVX_SQLITE=false)
# SQLITE_MCP_SERVER=/path/to/sqlite-mcp-server/start_sqlite_mcp.py

# Security levels: 1 = Weak (vulnerable), 2 = Medium (bypassable), 3 = Strong (secure)
# SECURITY_BOLA=1
# SECURITY_AUTH=1
# SECURITY_PROPERTY_AUTH=1
# SECURITY_FUNCTION_AUTH=1
# SECURITY_SSRF=1
# SECURITY_MISCONFIGURATION=1
# SECURITY_INVENTORY=1
# SECURITY_UNSAFE_CONSUMPTION=1

# Prompt difficulty: "easy" or "hard"
# PROMPT_DIFFICULTY=easy