.env.example

# REQUIRED — single API key for everything (LLM + STT + TTS)
OPENROUTER_API_KEY=sk-or-v1-xxxxxxxx

# --- Cheap model defaults (change only if needed) ---

# Fraud analysis LLM — ~$0.07/$0.30 per 1M tokens
# Free alternative: openrouter/free
OPENROUTER_LLM_MODEL=google/gemini-2.0-flash-lite-001

# Vision model for OCR-ing text out of images. Optional — defaults to
# OPENROUTER_LLM_MODEL (which is multimodal), so leave blank unless you want a
# dedicated vision model.
OPENROUTER_VISION_MODEL=

# Voice transcription — $0.006 per minute of audio
OPENROUTER_STT_MODEL=openai/whisper-1

# --- Voice synthesis (TTS) ---
# Primary: official Google Cloud Text-to-Speech (production-grade, no IP rate limits).
# Leave GOOGLE_TTS_API_KEY blank to use the free Google Translate TTS fallback instead.
# The free fallback also kicks in automatically if a Cloud TTS request ever fails.
# Get a key: Google Cloud Console -> enable "Cloud Text-to-Speech API" -> create API key.
GOOGLE_TTS_API_KEY=
GOOGLE_TTS_LANGUAGE_CODE=ur-IN
GOOGLE_TTS_VOICE=ur-IN-Wavenet-A

# Optional OpenRouter metadata headers
OPENROUTER_REFERER=https://github.com/fraud-detection-wa
OPENROUTER_TITLE=WhatsApp Fraud Detector

# WhatsApp session persistence
SESSION_STORAGE=./temp/sessions

# Per-sender rate limit (protects against spam loops / runaway API cost).
# Defaults: 5 messages per 60 seconds per WhatsApp number.
RATE_LIMIT_MAX=5
RATE_LIMIT_WINDOW_SEC=60

# Optional: webhook for high-risk fraud alerts
FRAUD_ALERT_WEBHOOK=

# User feedback ("was this helpful? ہاں/نہیں") is appended as JSON lines to this
# file. Default lives on the persistent session volume so labels survive redeploys.
FEEDBACK_LOG_PATH=
# Optional: also POST each feedback record to this webhook (sheet/db/dashboard).
FEEDBACK_WEBHOOK=

# Logging
LOG_LEVEL=info
LOG_DIR=./temp/logs