locals {
  account_id = data.aws_caller_identity.current.account_id

  # Account-suffixed names so seahaven-prod can apply in parallel with mgmt
  # teardown (S3 bucket names are globally unique; PLAT-73 locked decision).
  traces_bucket_name = "sh-openswe-traces-${local.account_id}"
  logs_bucket_name   = "sh-openswe-traces-logs-${local.account_id}"

  export_user_name = "sh-openswe-langsmith-export"
  secret_name      = "sh-openswe/langsmith-export-s3"
  kms_alias_name   = "alias/sh-openswe-traces"
}

data "aws_caller_identity" "current" {}