DATABRICKS_HOST=https://adb-1234567890.0.cloud.databricks.com
DATABRICKS_CONFIG_PROFILE=fabric-harness
DATABRICKS_AUTH_MODE=cli
# Headless shells (CI containers, SSH without a desktop keyring): the Databricks CLI cannot
# reach its secure token cache and `databricks auth token` fails. Use plaintext cache storage.
# DATABRICKS_AUTH_STORAGE=plaintext
# Bare foundation-model serving endpoint (pay-per-token). Works on free-tier workspaces.
# A system.ai.* model service requires Unity AI Gateway instead.
DATABRICKS_MODEL=databricks-gpt-oss-20b
DATABRICKS_WAREHOUSE_ID=your-sql-warehouse-id
DATABRICKS_GENIE_SPACE_ID=your-genie-space-id
DATABRICKS_CATALOG=main
DATABRICKS_ANALYTICS_STEWARD_AUDIENCE=analytics-stewards
DATABRICKS_COST_TENANT_ID=your-tenant-id
DATABRICKS_COST_PER_DAY_USD=50
DATABRICKS_APP_OBO_REQUIRED=1
FABRIC_DATABRICKS_APP_CAPABILITIES=genie,obo,system-tables-cost

# CI and production alternative: OAuth M2M service principal
# Unset DATABRICKS_CONFIG_PROFILE and DATABRICKS_AUTH_MODE when using these.
# DATABRICKS_CLIENT_ID=your-service-principal-client-id
# DATABRICKS_CLIENT_SECRET=your-service-principal-client-secret
# Optional Lakebase Autoscaling resource
DATABRICKS_LAKEBASE_HOST=your-endpoint.database.region.cloud.databricks.com
DATABRICKS_LAKEBASE_DATABASE=databricks_postgres
DATABRICKS_LAKEBASE_USER=your-service-principal-client-id
DATABRICKS_LAKEBASE_ENDPOINT=projects/project-id/branches/branch-id/endpoints/endpoint-id