# Supabase — get from https://supabase.com/dashboard/project/<project>/settings/api
NEXT_PUBLIC_SUPABASE_URL=
NEXT_PUBLIC_SUPABASE_ANON_KEY=
SUPABASE_SERVICE_ROLE_KEY=

# Anthropic — https://console.anthropic.com/settings/keys
# Never expose this in the browser bundle — server-side only
ANTHROPIC_API_KEY=

# Clerk — https://dashboard.clerk.com
# NOTE: the publishable key MUST use the NEXT_PUBLIC_ prefix so Clerk initialises
# on the client side. The secret key is server-only and must NOT have the prefix.
NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY=
CLERK_SECRET_KEY=

# Agent Bridge — used to sign/verify workspace tokens for IDE integrations (Cursor, Claude Code).
# Generate with: openssl rand -hex 32
AGENT_BRIDGE_SECRET=

# Liveblocks (Phase 3) — https://liveblocks.io/dashboard
LIVEBLOCKS_SECRET_KEY=

# Webhook secrets — set these in each integration's dashboard
LINEAR_WEBHOOK_SECRET=
SLACK_BOT_TOKEN=
SLACK_SIGNING_SECRET=
GITHUB_WEBHOOK_SECRET=
INTERCOM_WEBHOOK_SECRET=

# App base URL
NEXT_PUBLIC_APP_URL=http://localhost:3000