# REQUIRED: Postgres connection. Render injects this from the managed Postgres database.
DATABASE_URL="postgresql://meow:meow@localhost:5433/meowcode"

# REQUIRED: long random string for JWT signing.
MEOW_AUTH_SECRET="replace-with-long-random-auth-secret"

# REQUIRED: 32-byte base64 key for provider-secret encryption.
MEOW_ENCRYPTION_KEY="replace-with-32-byte-base64-key"

# REQUIRED IN PRODUCTION: public app URL, used for OAuth and magic-link redirects.
MEOW_WEB_URL="https://your-render-service.onrender.com"
MEOW_API_URL="https://your-render-service.onrender.com"

# OPTIONAL: comma-separated browser origins allowed to call the API.
# Leave unset for same-origin production. Dev mode allows local split frontend/API.
MEOW_CORS_ORIGIN=

# OPTIONAL: Render provides PORT automatically. Local API defaults to 4000.
PORT=4000

# OPTIONAL: leave empty for single-process in-memory cache/rate counters/pubsub.
# Set for multi-instance deployments that need shared cache state.
REDIS_URL=
MEOW_CACHE_MAX_ENTRIES=10000
MEOW_CACHE_TTL_MS=300000
MEOW_CHAT_CACHE_TTL_MS=300000

# OPTIONAL: JSON array of MCP stdio servers. Secrets stay server-side only.
# Example:
# MEOW_MCP_SERVERS='[{"id":"fs","command":"npx","args":["-y","@modelcontextprotocol/server-filesystem","."],"workspaceIds":[],"allowedTools":["read_file"],"timeoutMs":30000}]'
MEOW_MCP_SERVERS=

# OPTIONAL: OAuth provider credentials.
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
MICROSOFT_CLIENT_ID=
MICROSOFT_CLIENT_SECRET=
DISCORD_CLIENT_ID=
DISCORD_CLIENT_SECRET=

# DEV-ONLY: enables local OAuth/magic-link shortcuts.
MEOW_OAUTH_DEV=true

# DEV-ONLY: set only when the static web app should call a separate API origin.
# Production should leave this unset so the browser uses same-origin /v1/*.
NEXT_PUBLIC_MEOW_API_URL=