# Codex OAuth onboarding env template for real Google Chrome flow
# Copy to ~/.hermes/env/codex_oauth_onboarding.env and chmod 600.
# Do not commit. Do not paste secrets into chat.

# 0) Local project / browser
CODEX_OAUTH_EXTENSION_DIR=
CHROME_BIN=/Applications/Google Chrome.app/Contents/MacOS/Google Chrome
BROWSER_PROFILE_ROOT=/Users/chick/.Hermes/workspace/browser-profiles/codex-oauth
BROWSER_HEADLESS=false
BROWSER_LANG=zh-CN
RUN_COUNT=1
AUTO_STEP_DELAY_SECONDS=2
AUTO_RUN_SKIP_FAILURES=false
OAUTH_FLOW_TIMEOUT_ENABLED=true

# 1) Panel / target mode. No default: leave empty and the workflow MUST NOT run.
# Must explicitly select exactly one before execution: cpa | sub2api | codex2api
PANEL_MODE=
LOCAL_CPA_STEP9_MODE=submit

# CPA panel fields
CPA_VPS_URL=
CPA_VPS_PASSWORD=

# SUB2API panel fields
SUB2API_URL=
SUB2API_EMAIL=
SUB2API_PASSWORD=
SUB2API_GROUP_NAME=
SUB2API_ACCOUNT_PRIORITY=1
SUB2API_DEFAULT_PROXY_NAME=

# Codex2API panel fields
CODEX2API_URL=
CODEX2API_ADMIN_KEY=

# 2) Browser proxy. BOSS provides SOCKS5 or HTTP proxy without username/password.
# Examples: socks5://host:port or http://host:port
BROWSER_PROXY_SERVER=
BROWSER_PROXY_CHECK_URL=https://api.ipify.org?format=json

# Extension built-in 711proxy/IP proxy fields, only if using original project proxy panel.
IP_PROXY_ENABLED=false
IP_PROXY_SERVICE=
IP_PROXY_MODE=
IP_PROXY_API_URL=
IP_PROXY_ACCOUNT_LIST=
IP_PROXY_ACCOUNT_SESSION_PREFIX=codex
IP_PROXY_ACCOUNT_LIFE_MINUTES=
IP_PROXY_POOL_TARGET_COUNT=20
IP_PROXY_AUTO_SYNC_ENABLED=false
IP_PROXY_AUTO_SYNC_INTERVAL_MINUTES=15
IP_PROXY_HOST=
IP_PROXY_PORT=
IP_PROXY_PROTOCOL=
IP_PROXY_REGION=

# 3) Registration identity and password
# ClawEmail must create a fresh mailbox each run and record it locally with status.
CLAWEMAIL_CREATE_PER_RUN=true
CLAWEMAIL_PREFIX=codex
CLAWEMAIL_UID=
CLAWEMAIL_RECORD_FILE=/Users/chick/.Hermes/workspace/codex-oauth/run-records/clawemail_accounts.jsonl
SIGNUP_METHOD=email
CUSTOM_PASSWORD=

# 4) Mail provider fields from original project, fill only if not using Hermes-side ClawEmail polling.
MAIL_PROVIDER=
EMAIL_GENERATOR=custom
CUSTOM_EMAIL_POOL=
CUSTOM_MAIL_PROVIDER_POOL=
INBUCKET_HOST=
INBUCKET_MAILBOX=
HOTMAIL_SERVICE_MODE=
HOTMAIL_REMOTE_BASE_URL=
HOTMAIL_LOCAL_BASE_URL=
LUCKMAIL_API_KEY=
LUCKMAIL_BASE_URL=
LUCKMAIL_EMAIL_TYPE=
LUCKMAIL_DOMAIN=
CLOUDFLARE_TEMP_EMAIL_BASE_URL=
CLOUDFLARE_TEMP_EMAIL_ADMIN_AUTH=
CLOUDFLARE_TEMP_EMAIL_CUSTOM_AUTH=
CLOUDFLARE_TEMP_EMAIL_RECEIVE_MAILBOX=
CLOUDFLARE_TEMP_EMAIL_USE_RANDOM_SUBDOMAIN=false
CLOUDFLARE_TEMP_EMAIL_DOMAIN=

# 5) Phone/SMS verification fallback. No default provider: leave disabled/empty unless needed.
PHONE_VERIFICATION_ENABLED=false
SIGNUP_PHONE=
PHONE_SMS_PROVIDER=
PHONE_SMS_PROVIDER_ORDER=
VERIFICATION_RESEND_COUNT=0
PHONE_VERIFICATION_REPLACEMENT_LIMIT=3
PHONE_CODE_WAIT_SECONDS=60
PHONE_CODE_TIMEOUT_WINDOWS=2
PHONE_CODE_POLL_INTERVAL_SECONDS=5
PHONE_CODE_POLL_MAX_ROUNDS=12
PHONE_PREFERRED_ACTIVATION=

# HeroSMS
HERO_SMS_API_KEY=
HERO_SMS_REUSE_ENABLED=
HERO_SMS_ACQUIRE_PRIORITY=
HERO_SMS_MAX_PRICE=
HERO_SMS_PREFERRED_PRICE=
HERO_SMS_COUNTRY_ID=
HERO_SMS_COUNTRY_LABEL=
HERO_SMS_COUNTRY_FALLBACK=

# 5sim
FIVE_SIM_API_KEY=
FIVE_SIM_PRODUCT=
FIVE_SIM_COUNTRY_ORDER=
FIVE_SIM_COUNTRY_ID=
FIVE_SIM_COUNTRY_LABEL=
FIVE_SIM_COUNTRY_FALLBACK=
FIVE_SIM_MAX_PRICE=
FIVE_SIM_OPERATOR=any

# NexSMS
NEX_SMS_API_KEY=
NEX_SMS_COUNTRY_ORDER=
NEX_SMS_SERVICE_CODE=

# 6) Plus/payment. BOSS chose GoPay. Paid operation still requires explicit confirmation before execution.
PLUS_MODE_ENABLED=false
PLUS_PAYMENT_METHOD=gopay
GOPAY_COUNTRY_CODE=+86
GOPAY_PHONE=
GOPAY_OTP=
GOPAY_OTP_SOURCE=manual
GOPAY_OTP_MANUAL_TIMEOUT_SECONDS=180
GOPAY_PIN=

# GPC helper fields retained but not used when PLUS_PAYMENT_METHOD=gopay
GPC_HELPER_API_URL=
GPC_HELPER_CARD_KEY=
GPC_HELPER_COUNTRY_CODE=+86
GPC_HELPER_PHONE_NUMBER=
GPC_HELPER_PIN=
GPC_HELPER_OTP_CHANNEL=
GPC_HELPER_LOCAL_SMS_ENABLED=false
GPC_HELPER_LOCAL_SMS_URL=http://127.0.0.1:18767

# 7) Local run records
RUN_RECORD_DIR=/Users/chick/.Hermes/workspace/codex-oauth/run-records
ACCOUNT_SUCCESS_FILE=/Users/chick/.Hermes/workspace/codex-oauth/run-records/success_accounts.jsonl
ACCOUNT_FAILED_FILE=/Users/chick/.Hermes/workspace/codex-oauth/run-records/failed_accounts.jsonl
ACCOUNT_PENDING_FILE=/Users/chick/.Hermes/workspace/codex-oauth/run-records/pending_accounts.jsonl