.env.example

# khive email channel — environment variable reference
# Copy to .env and fill in values. Never commit the filled-in .env.

# ── Connection ──────────────────────────────────────────────────────────────

# SMTP relay host (required)
KHIVE_EMAIL_SMTP_HOST=smtp.example.com

# SMTP port; default 587 (STARTTLS)
# KHIVE_EMAIL_SMTP_PORT=587

# IMAP server host (required)
KHIVE_EMAIL_IMAP_HOST=imap.example.com

# IMAP port; default 993 (TLS)
# KHIVE_EMAIL_IMAP_PORT=993

# Login username — must be a valid email address (required)
KHIVE_EMAIL_USERNAME=leo@example.com

# Sender mailbox address; defaults to KHIVE_EMAIL_USERNAME when unset
# KHIVE_EMAIL_MAILBOX=leo@example.com

# Single authorized maintainer address. Inbound messages from any other sender
# are rejected before ingestion (required).
KHIVE_EMAIL_MAINTAINER_ADDRESS=ocean@example.com

# ── Auth — choose Basic or OAuth, not both ──────────────────────────────────

# Basic auth: set this password
KHIVE_EMAIL_PASSWORD=your-app-password-here

# OAuth (Exchange Online app-only): set all three variables below.
# When any of these are set, Basic auth is ignored; all three are required.
# KHIVE_EMAIL_OAUTH_TENANT_ID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
# KHIVE_EMAIL_OAUTH_CLIENT_ID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
# KHIVE_EMAIL_OAUTH_CLIENT_SECRET=your-client-secret-here

# ── MCP outbox and inbound routing ──────────────────────────────────────────

# Namespace used to store inbound and outbound message notes; default "local"
# KHIVE_EMAIL_INGEST_NAMESPACE=local

# Actor that receives fresh inbound email (no In-Reply-To correlation match).
# Default: channel:email. Set local to retain the previous shared inbox routing.
# KHIVE_EMAIL_DEFAULT_ACTOR=channel:email

# Comma-separated allowlist of recipient addresses the outbox loop may deliver
# to. Defaults to KHIVE_EMAIL_MAINTAINER_ADDRESS when unset or empty.
# KHIVE_EMAIL_SEND_ALLOWED_RECIPIENTS=ocean@example.com,mailbox@example.com