.env.example

# Copy to .env and fill in only what you need. .env is gitignored — never commit real keys.
# Each provider's credentials are only required for that provider's deploy/import/run path.

# --- Anthropic — Managed Agents deploy/import/run (needs Managed Agents beta access) ---
ANTHROPIC_API_KEY=sk-ant-...

# --- OpenAI — the openai-agents export target and the optional LLM grader ---
OPENAI_API_KEY=sk-...

# --- Google — Vertex AI Agent Engine (deploy --target google) ---
GOOGLE_API_KEY=...
GOOGLE_GENAI_USE_VERTEXAI=true

# --- AWS Bedrock AgentCore (deploy/import --target bedrock) ---
AWS_REGION=us-west-2
AWS_ACCESS_KEY_ID=AKIA...
AWS_SECRET_ACCESS_KEY=...
AWS_BEARER_TOKEN_BEDROCK=ABSK...           # Bedrock model-inference bearer token (Strands runtime)
# Bedrock deploy also reads (set when deploying, not needed for import):
# AGENTLIFT_BEDROCK_EXECUTION_ROLE_ARN=arn:aws:iam::...:role/...
# AGENTLIFT_BEDROCK_S3_BUCKET=your-skill-bucket

# Publishing to PyPI (TWINE_USERNAME / TWINE_PASSWORD) is maintainer-only and is
# intentionally not templated here — set those in your own .env when cutting a release.