Update settings.py

settings.py

@@ -59,3 +59,27 @@ RAG_INDEX_DIR = os.getenv("RAG_INDEX_DIR", "./rag_index")
 PERSIST_CONTENT = False
 SNAPSHOT_PATH = os.getenv("SNAPSHOT_PATH", "./snapshots")
 
+
+
+# Existing settings you already have:
+# GENERAL_CONVERSATION_PROMPT = os.getenv("GENERAL_CONVERSATION_PROMPT", "You are a helpful data analyst.")
+# COHERE_MODEL_PRIMARY = os.getenv("COHERE_MODEL_PRIMARY", "command-r-plus")
+# COHERE_TIMEOUT_S = int(os.getenv("COHERE_TIMEOUT_S", "60"))
+#USE_OPEN_FALLBACKS = os.getenv("USE_OPEN_FALLBACKS", "false").lower() == "true"
+
+# --- HIPAA flags ---
+# Master switch for PHI-aware behavior
+PHI_MODE = os.getenv("PHI_MODE", "true").lower() == "true"
+
+# Persist history? Default OFF under PHI mode (in-memory only if True).
+PERSIST_HISTORY = os.getenv("PERSIST_HISTORY", "false").lower() == "true"
+
+# For persistent stores, set a non-zero TTL policy (days). 0 = no persistence.
+HISTORY_TTL_DAYS = int(os.getenv("HISTORY_TTL_DAYS", "0"))
+
+# Redact obvious identifiers before external LLM calls
+REDACT_BEFORE_LLM = os.getenv("REDACT_BEFORE_LLM", "true").lower() == "true"
+
+# Allow sending PHI to external LLM vendors (requires BAA!). Default: False
+ALLOW_EXTERNAL_PHI = os.getenv("ALLOW_EXTERNAL_PHI", "false").lower() == "true"
+