# ─── Database (Supabase pooled connection) ────────────────────
DATABASE_URL="postgresql://postgres.<ref>:<password>@aws-0-us-east-1.pooler.supabase.com:6543/postgres"

# ─── Object Storage (Supabase Storage, S3-compatible) ─────────
STORAGE_ENDPOINT="https://<ref>.supabase.co/storage/v1/s3"
STORAGE_REGION="us-east-1"
STORAGE_ACCESS_KEY=""
STORAGE_SECRET_KEY=""
STORAGE_BUCKET="echos-ocr"

# ─── Upstash QStash (job queue) ───────────────────────────────
QSTASH_TOKEN=""
QSTASH_CURRENT_SIGNING_KEY=""
QSTASH_NEXT_SIGNING_KEY=""

# ─── Vercel AI Gateway ────────────────────────────────────────
AI_GATEWAY_API_KEY=""

# ─── Auth.js (required — generate with: npx auth secret) ─────
AUTH_SECRET=""
# AUTH_URL must match the canonical origin this deployment serves.
# Local dev:  http://localhost:3000
# Production: https://<your-canonical-domain>
# Preview:    https://<project>-git-<branch>-<team>.vercel.app
AUTH_URL="http://localhost:3000"

# ─── OIDC SSO (optional) ──────────────────────────────────────
AUTHENTIK_ISSUER=""
AUTHENTIK_CLIENT_ID=""
AUTHENTIK_CLIENT_SECRET=""

# ─── Brevo transactional email ────────────────────────────────
BREVO_API_KEY=""
EMAIL_FROM_NAME="Echo OCR"
EMAIL_FROM_ADDRESS="mars@noreply.stillwell.cloud"

# ─── Support ticketing (Libredesk) ────────────────────────────
# Inbox address that Libredesk ingests as tickets.
# The in-app Contact Support dialog sends tickets here via Brevo.
SUPPORT_EMAIL="support@stillwell.cloud"

# ─── Vercel Cron Secret ────────────────────────────────────────
# Vercel auto-sets this on Pro. Used to authenticate cron job requests.
CRON_SECRET=""

# ─── Public site URL (used for OG metadata, canonical links) ─
# Used by transactional emails, OpenGraph tags, and QR codes.
# If unset, the app falls back to AUTH_URL, then VERCEL_URL, then localhost.
NEXT_PUBLIC_SITE_URL=""

# ─── Environment indicator ────────────────────────────────────
NEXT_PUBLIC_ENV=""

# ─── Integration OAuth credentials ────────────────────────────
# Planning Center Online — create an OAuth app at
# https://api.planningcenteronline.com/oauth/applications
# Redirect URI: {AUTH_URL}/api/integrations/oauth/planning_center/callback
PCO_CLIENT_ID=""
PCO_CLIENT_SECRET=""

# Google Sheets — create OAuth credentials in Google Cloud Console,
# enable the "Google Sheets API", and add the redirect URI:
# {AUTH_URL}/api/integrations/oauth/google_sheets/callback
GOOGLE_CLIENT_ID=""
GOOGLE_CLIENT_SECRET=""