variable "aws_region" {
  type        = string
  description = "AWS region"
  default     = "us-east-1"
}

variable "environment" {
  type        = string
  description = "Deployment environment"
  default     = "qa"
}

variable "service_name" {
  type        = string
  description = "Service name"
  default     = "mcp-proxy"
}

variable "application_family" {
  type        = string
  description = "Application family"
  default     = "user-platform"
}

variable "team_name" {
  type        = string
  description = "Team name"
  default     = "osp"
}

variable "notification_endpoints" {
  type        = string
  description = "Datadog notification endpoints for monitors"
  default     = "@slack-graphql"
}

variable "auth0_domain" {
  type        = string
  description = "Auth0 tenant domain the OAuth bridge relays to (/authorize redirect, /token forward)."
  default     = "qa-orchard.auth0.com"
}

variable "apollo_mcp_client_id" {
  type        = string
  description = "Pre-registered apollo-mcp-login Auth0 client_id returned by the static /register endpoint. Public client (no secret)."
  default     = "axdhcX5MLHiK2qgQPKwRiw44fwXTTYpa"
}

variable "auth0_organization" {
  type        = string
  description = "Auth0 org_id (not name) of the Sony-branded 'sme' organization (auth0-hosted-pages/src/organizations/sme.json) in the qa-orchard tenant, that /authorize pins logins to so this flow gets Sony branding instead of Orchard's default tenant branding."
  default     = "org_HeC7B7QmKZq2mZoE"
}

variable "client_redirect_uri" {
  type        = string
  description = "Claude Desktop's native MCP connector's own loopback callback (auth0-hosted-pages/src/clients/apollo-mcp-login.json), distinct from Claude Code/mcp-remote's localhost:8511/callback. A client-side address (Desktop always runs on the user's own machine), so it doesn't vary by deployed environment. Returned as the static /register response's redirect_uris entry."
  default     = "http://localhost:8511/oauth/callback"
}