# Database
DATABASE_URL=

# Redis
UPSTASH_REDIS_REST_URL=
UPSTASH_REDIS_REST_TOKEN=

# OAuth Providers
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=

# OAuth client for the Google Search Console integration
GOOGLE_SEARCH_CONSOLE_CLIENT_ID=
GOOGLE_SEARCH_CONSOLE_CLIENT_SECRET=

# App URLs
APP_URL="http://localhost:3000"

# WorkOS AuthKit
WORKOS_API_KEY=
WORKOS_CLIENT_ID=
# 32+ chars
WORKOS_COOKIE_PASSWORD=
NEXT_PUBLIC_WORKOS_REDIRECT_URI="http://localhost:3000/auth/callback"
WORKOS_WEBHOOK_SECRET=
WORKOS_AUTHKIT_DOMAIN=

# Application
NEXT_PUBLIC_SITE_URL="http://localhost:3000"

# apps/web contact form
NEXT_PUBLIC_TURNSTILE_SITE_KEY=0x4AAAAAAEqhf2-wukRINWu_
# Store the existing widget secret privately; never use a NEXT_PUBLIC_ variable.
TURNSTILE_SECRET=
# Exact frontend hostnames, comma-separated, without schemes or ports.
# Production: usenotra.com,www.usenotra.com (only domains registered on the widget).
# Local development only: localhost,127.0.0.1 (must also be registered on the widget).
TURNSTILE_HOSTNAMES=

# AI Services
OPENROUTER_API_KEY=
SUPERMEMORY_API_KEY=
CONTEXT_DEV_API_KEY=
NEXT_PUBLIC_LOGOLINK_CLIENT_ID=
AI_GATEWAY_API_KEY=
# Agent sandboxes (optional): OpenCode, Claude Code, and Codex GEO engines.
UPSTASH_BOX_API_KEY=
TCC_API_KEY=

# Encryption
INTEGRATION_ENCRYPTION_KEY=

# Email
RESEND_API_KEY=
FEEDBACK_EMAIL_TO=
OSS_PROGRAM_EMAIL_TO=

# DataBuddy
NEXT_PUBLIC_DATABUDDY_DASHBOARD_WEBSITE_ID=
NEXT_PUBLIC_DATABUDDY_WEB_WEBSITE_ID=
NEXT_PUBLIC_DATABUDDY_WEBSITE_ID=
DATABUDDY_API_KEY=

# PostHog Session Replay (dashboard)
NEXT_PUBLIC_POSTHOG_PROJECT_TOKEN=
NEXT_PUBLIC_POSTHOG_HOST=https://us.i.posthog.com

# c15t Consent Management
NEXT_PUBLIC_C15T_BACKEND_URL=https://development-notra.inth.app

# Autumn Billing
AUTUMN_SECRET_KEY=

# Workflows
NEXT_PUBLIC_APP_URL=
WORKFLOW_BASE_URL=
QSTASH_TOKEN=
QSTASH_CURRENT_SIGNING_KEY=
QSTASH_NEXT_SIGNING_KEY=

# Onboarding agent
EVE_ONBOARDING_AGENT_URL=
EVE_ONBOARDING_AGENT_PASSWORD=
DASHBOARD_VERCEL_TEAM_SLUG=
DASHBOARD_VERCEL_PROJECT_NAME=
DASHBOARD_VERCEL_ENVIRONMENT=

# Slack
SLACK_BOT_TOKEN=
SLACK_FOUNDER_MEMBER_ID=
SLACK_AGENT_BOT_TOKEN=
SLACK_AGENT_SIGNING_SECRET=
SLACK_AGENT_CLIENT_ID=
SLACK_AGENT_CLIENT_SECRET=
SLACK_AGENT_ORGANIZATION_ID=
SLACK_AGENT_TEAM_ID=
SLACK_AGENT_ALLOWED_CHANNEL_IDS=

# Unkey (API Keys)
UNKEY_ROOT_KEY=
UNKEY_API_ID=

# Twitter
TWITTER_BEARER_TOKEN=

# GEO grounded scanning (optional)
OPENAI_API_KEY=
ANTHROPIC_API_KEY=
PERPLEXITY_API_KEY=
# GEO Cursor engine (optional): runs cursor/composer-2.5 through the local
# Cursor SDK, which is not reachable through any AI gateway.
CURSOR_API_KEY=
# GEO Google AI Overview engine (optional): SerpApi Google Search, overview only.
SERPAPI_API_KEY=
# Opt-in live SerpApi checks in geo-core tests. Leave unset for the unit suite.
GEO_SERPAPI_LIVE=

# Tinybird (social analytics)
TINYBIRD_TOKEN=
TINYBIRD_BASE_URL=https://api.tinybird.co

# Social account linking provider
POST_FOR_ME_API_KEY=
POST_FOR_ME_API_KEY_TWITTER=
POST_FOR_ME_API_KEY_LINKEDIN=

# Cloudflare R2
CLOUDFLARE_SECRET_ACCESS_KEY=
CLOUDFLARE_ACCESS_KEY_ID=
CLOUDFLARE_S3_ENDPOINT=
CLOUDFLARE_PUBLIC_URL=
CLOUDFLARE_BUCKET_NAME=

# Observability (evlog + Axiom): AI, API requests, and Context.dev integrations
# AXIOM_AI_DATASET: ai-logs in the Notra Axiom organization
# AXIOM_GEO_DATASET: notra-geo-scan (scan and per-check attempt timings)
AXIOM_TOKEN=""
AXIOM_AI_DATASET=""
AXIOM_GEO_DATASET=""
AXIOM_ORG_ID=""

# Notra
NOTRA_API_KEY=""

# Beacon (AI traffic detection)
BEACON_INGEST_SECRET=
BEACON_INGEST_URL="http://localhost:3002/api/beacon"
BEACON_ORG_TOKEN=
BEACON_ORG_ID=

# Agent feedback ingestion (HMAC secret for write-only feedback tokens)
FEEDBACK_INGEST_SECRET=
# Optional: API base the dashboard setup snippets point at (local testing: http://localhost:3010)
FEEDBACK_API_URL=