.env.example

# GitHub Personal Access Token
# Get one at: https://github.com/settings/tokens
# Required scopes:
#   - repo (for private repos)
#   - public_repo (for public repos only)
GITHUB_TOKEN=ghp_your_token_here

# GitHub organizations to auto-discover all public repos from.
# All public, non-archived, non-fork repos will be tracked automatically.
# Comma-separated for multiple orgs.
GITHUB_ORG=opena2a-org,opena2a-standards,ecolibria

# Optional: Comma-separated list of additional repositories to track.
# Use this to track repos outside the org, or leave empty to only track org repos.
# Format: owner/repo,owner/repo2
# REPOS_TO_TRACK=

# npm package tracking
# Auto-discover all packages by this npm maintainer username
NPM_AUTHOR=ecolibria

# Optional: Comma-separated list of additional npm packages to track
# NPM_PACKAGES=

# PyPI packages.
# New packages are auto-discovered by scanning the GITHUB_ORG repos above for
# Python packaging files (pyproject.toml / setup.py / setup.cfg) and keeping any
# name that is published on PyPI and links back to a tracked org. Requires
# GITHUB_TOKEN. Set PYPI_DISCOVER=false to disable.
# PYPI_PACKAGES is an optional safety-net list for packages whose repo lives
# outside GITHUB_ORG or isn't discoverable (comma-separated).
PYPI_PACKAGES=cryptoserve,cryptoserve-core,cryptoserve-auto,cryptoserve-client,aim-sdk,aicomply
# PYPI_DISCOVER=true

# Docker Hub images to track (comma-separated, namespace/name format)
DOCKER_IMAGES=opena2a/dvaa

# HuggingFace tracking
# Auto-discover all models under these orgs/users (comma-separated)
HF_AUTHOR=opena2a

# Optional: comma-separated list of additional models to track (org/model)
# HF_MODELS=

# Optional: HuggingFace token to raise rate limits / access private repos
# HF_TOKEN=hf_your_token_here

# Chrome Web Store extensions to track (comma-separated 32-char extension ids).
# Google exposes no install/download API, so the collector scrapes the public
# listing's rounded weekly-active-user count (a snapshot, not installs).
# Optional per-entry slug: <id>:<slug>. Leave empty to skip Chrome tracking.
CHROME_EXTENSIONS=ojphpdmabflmcjhglfogmkdgchkncikf

# First-party CLI telemetry (active users, not downloads).
# Registry base URL that serves the COARSE public adoption feed
# (GET /api/v1/telemetry/v1/adoption/public). The collector snapshots only
# coarse, anonymous active-user aggregates (installs, WAU/MAU, version share,
# by country). Leave empty to skip telemetry collection.
# REGISTRY_URL=https://api.oa2a.org

# Service-account bearer token with the internal:telemetry:read scope. Used
# ONLY server-side by /api/telemetry-detail to fetch the Registry's
# authenticated internal usage feed for the password-gated fine-grained view.
# Never exposed to the browser; nothing fetched with it is persisted.
# REGISTRY_TELEMETRY_TOKEN=

# Fine-grained telemetry gate for THIS dashboard (the analytics tracker).
# Named for the service, not a bare DASHBOARD_PASSWORD — the org runs several
# dashboards, so a generic name wouldn't say which one this unlocks.
# When set, /api/telemetry-detail requires this password (sent in the
# x-analytics-tracker-password header) before returning command usage /
# reliability / by-day detail. Leave empty to keep the fine-grained view
# disabled; the coarse active-user metrics remain public either way.
# ANALYTICS_TRACKER_PASSWORD=