.env.example

# Core runtime
# Required for API auth (unless THUMBGATE_ALLOW_INSECURE=true in local isolated testing)
THUMBGATE_API_KEY=change-me
# THUMBGATE_OPERATOR_KEY=tg_op_...  # Read-only billing key for CLI→prod (run: node bin/cli.js billing:setup)
# THUMBGATE_HUMAN_REVIEWER_KEY=generate-an-independent-high-entropy-key
# THUMBGATE_HUMAN_REVIEWER_ID=stable-reviewer-identity
# THUMBGATE_API_KEY_ROTATED_AT=2026-03-12T00:00:00.000Z
# THUMBGATE_PUBLIC_APP_ORIGIN=https://thumbgate.ai
# THUMBGATE_BILLING_API_BASE_URL=https://thumbgate.ai
# THUMBGATE_FEEDBACK_DIR=/data/feedback
# Optional canonical revenue-pipeline override. Linked Git worktrees otherwise
# share the primary checkout's .thumbgate/sales-pipeline.jsonl automatically.
# THUMBGATE_SALES_PIPELINE_PATH=/absolute/path/to/sales-pipeline.jsonl
# THUMBGATE_GA_MEASUREMENT_ID=G-XXXXXXXXXX
# THUMBGATE_OWNER_EMAILS=you@example.com,alt@example.com  # comma-separated; owner traffic classified separately in analytics
# THUMBGATE_GOOGLE_SITE_VERIFICATION=google-site-verification-token
# GOOGLE_SEARCH_CONSOLE_SITE_URL=sc-domain:thumbgate.ai

# Billing
# STRIPE_PUBLISHABLE_KEY=pk_live_change_me
# STRIPE_SECRET_KEY=sk_live_change_me
# STRIPE_SECRET_KEY_ROTATED_AT=2026-03-12T00:00:00.000Z
# STRIPE_PRODUCT_ID=prod_change_me
# STRIPE_PRICE_ID=price_change_me
# STRIPE_WEBHOOK_SECRET=whsec_change_me
# STRIPE_WEBHOOK_SECRET_ROTATED_AT=2026-03-12T00:00:00.000Z
# GITHUB_MARKETPLACE_WEBHOOK_SECRET=github_webhook_secret
# GITHUB_MARKETPLACE_WEBHOOK_SECRET_ROTATED_AT=2026-03-12T00:00:00.000Z
# THUMBGATE_GITHUB_MARKETPLACE_PLAN_PRICES_JSON={"1":{"amountCents":4900,"currency":"USD"}}
# THUMBGATE_PAYPAL_CLIENT_ID=managed-client-id
# THUMBGATE_PAYPAL_CLIENT_SECRET=managed-client-secret
# THUMBGATE_PAYPAL_WEBHOOK_ID=managedwebhookid
# THUMBGATE_PAYPAL_WEBHOOK_URL=https://thumbgate-production.up.railway.app/v1/billing/paypal-webhook
# THUMBGATE_PAYPAL_WEBHOOK_LEDGER_PATH=/data/feedback/paypal-webhook-deliveries.jsonl
# THUMBGATE_PAYPAL_EVIDENCE_RULES_JSON={"invoiceIdPrefixes":["thumbgate-"],"ownerIdentifiersReviewed":true,"ownerAccountIds":[],"ownerEmails":[],"subscriptionsEnabled":false}

# Trial activation email
# RESEND_API_KEY=re_change_me
# THUMBGATE_TRIAL_EMAIL_FROM=ThumbGate <onboarding@your-domain.example>
# THUMBGATE_TRIAL_EMAIL_REPLY_TO=support@your-domain.example
# THUMBGATE_TRIAL_EMAIL_LEDGER_PATH=/data/feedback/trial-emails.jsonl

# Railway deploy
# RAILWAY_TOKEN=railway_token
# RAILWAY_TOKEN_ROTATED_AT=2026-03-12T00:00:00.000Z
# RAILWAY_PROJECT_ID=project_id
# RAILWAY_ENVIRONMENT_ID=environment_id
# RAILWAY_SERVICE=thumbgate
# RAILWAY_HEALTHCHECK_URL=https://thumbgate-production.up.railway.app/health

# Optional local paths
# THUMBGATE_FEEDBACK_DIR=.claude/memory/feedback
# THUMBGATE_CONTEXTFS_DIR=.claude/memory/feedback/contextfs
# THUMBGATE_REVENUE_LEDGER_PATH=.claude/memory/feedback/revenue-events.jsonl
# GH_PAT=github_pat_for_about_sync_and_secret_management

# Optional strictness toggles
# THUMBGATE_ALLOW_INSECURE=false
# THUMBGATE_ALLOW_EXTERNAL_PATHS=false
# THUMBGATE_SEMANTIC_CACHE_ENABLED=true
# THUMBGATE_SEMANTIC_CACHE_THRESHOLD=0.7
# THUMBGATE_SEMANTIC_CACHE_TTL_SECONDS=86400
# THUMBGATE_MEMORY_FIREWALL_PROVIDER=auto
# THUMBGATE_MEMORY_FIREWALL_MODE=strict

# Monthly budget cap in USD for paid operations (PaperBanana, etc.)
# THUMBGATE_MONTHLY_BUDGET_USD=10

# Optional LLM gateway routing (for paid hosted calls only)
# LLM_GATEWAY_BASE_URL=
# LLM_GATEWAY_API_KEY=
# TETRATE_API_KEY=

# ADK / GTM
# GEMINI_API_KEY=
# GEMINI_API_KEY_ROTATED_AT=2026-03-12T00:00:00.000Z

# Local embedding providers (default: auto-detect).
# ThumbGate's RAG stack supports multiple local embedding back-ends:
#   1. Ollama (fastest — no npm install, runs locally)
#   2. HuggingFace Transformers.js (local model download, no API key)
#   3. Core AI (macOS Apple Silicon AOT-compiled, via local HTTP endpoint)
#   4. Feature hashing (built-in degraded fallback — not semantic)
#
# Ollama local embeddings (primary local path — requires Ollama running).
# nomic-embed-text is the recommended model (768-dim, supports query/document
# role prefixing for asymmetric retrieval).
# THUMBGATE_OLLAMA_EMBED_MODEL=nomic-embed-text
# THUMBGATE_OLLAMA_ENDPOINT=http://127.0.0.1:11434
# THUMBGATE_OLLAMA_TIMEOUT_MS=30000

# Optional managed Gemini embeddings (768-dim Matryoshka, asymmetric task types).
# The Gemini provider is auto-recognized when GEMINI_API_KEY is present, even
# without THUMBGATE_EMBED_PROVIDER=gemini — it serves as an automatic fallback
# after local providers (Ollama, Transformers.js) are exhausted.
# Requires a Google Cloud project with the Generative Language API enabled and
# sufficient quota (free tier: 1500 req/day for text-embedding-004 — monitor usage).
# Set THUMBGATE_GEMINI_EMBED_FALLBACK_LOCAL=false to make Gemini mandatory
# (fail rather than degrade to local feature-hash when API key is set).
# THUMBGATE_EMBED_PROVIDER=gemini
# THUMBGATE_GEMINI_EMBED_MODEL=gemini-embedding-2
# THUMBGATE_GEMINI_EMBED_DIM=768
# THUMBGATE_GEMINI_EMBED_TASK=code retrieval
# THUMBGATE_GEMINI_EMBED_FALLBACK_LOCAL=true

# Local HuggingFace Transformers.js embeddings (optional secondary fallback).
# Requires manual install (not in package.json to avoid npm audit conflicts):
#   npm install @huggingface/transformers onnxruntime
# Only used when Ollama is unavailable — Ollama nomic-embed-text is preferred.
# THUMBGATE_EMBED_MODEL=Xenova/all-MiniLM-L6-v2
# THUMBGATE_EMBED_QUANTIZED=true
# THUMBGATE_EMBED_MAX_CHARS=2048

# Local LLM endpoint for RAG generation (dashboard chat).
# Ollama provides an OpenAI-compatible /v1/chat/completions endpoint.
# Recommended model: qwen2.5:3b (1.9GB) for fast local generation.
# THUMBGATE_LOCAL_LLM_ENDPOINT=http://127.0.0.1:11434/v1
# THUMBGATE_LOCAL_LLM_MODEL=qwen2.5:3b

# Perplexity Max API (for marketing engine — npm run marketing)
# PERPLEXITY_API_KEY=pplx-...
# PERPLEXITY_API_KEY_ROTATED_AT=2026-03-12T00:00:00.000Z

# X.com / Twitter was retired from distribution 2026-04-20.
# Focus channels are Reddit, LinkedIn, Threads, Bluesky, Instagram, YouTube.
# Legacy X_* env vars are no longer consumed by workflows or the post-everywhere
# default loop. scripts/post-to-x.js remains on disk for manual ad-hoc use only.

# Social analytics / Tessl distribution
# PLAUSIBLE_API_KEY=
# PLAUSIBLE_SITE_ID=thumbgate.ai
# THUMBGATE_PLAUSIBLE_REGISTERED_DOMAINS=thumbgate.ai,thumbgate-production.up.railway.app
# TESSL_WORKSPACE=thumbgate

# Checkout conversion experiment
# Default: 0 keeps the proof/price interstitial. Set to 1 only with Stripe
# diagnostic + first-party telemetry monitoring enabled.
# THUMBGATE_CHECKOUT_INTERSTITIAL_BYPASS=0
# THUMBGATE_CHECKOUT_INTERSTITIAL_SAMPLE_RATE=0.1
# THUMBGATE_CHECKOUT_PRO_STRIPE_URL=https://buy.stripe.com/...

# Reddit API (optional direct platform adapter).
# ThumbGate does not publish through Zernio. Configure only for an explicitly
# approved direct-platform workflow that passes the repository browser guard.
# REDDIT_CLIENT_ID=
# REDDIT_CLIENT_SECRET=
# REDDIT_USERNAME=
# REDDIT_PASSWORD=

# Zernio is retired and read-only for historical analytics. Do not configure it
# as a publishing dependency or use it for ThumbGate posting.

# LinkedIn (manual credentials for direct API fallback)
# LINKEDIN_EMAIL=
# LINKEDIN_PASSWORD=

# ElevenLabs (text-to-speech for demo voiceover narration)
# Get a key at https://elevenlabs.io/app/settings/api-keys
# ELEVENLABS_API_KEY=
# ELEVENLABS_VOICE_ID=21m00Tcm4TlvDq8ikWAM   # Rachel (default) — swap via scripts/generate-demo-voiceover.js --voice

# Transactional email (Resend) — used to deliver the license key after Stripe
# checkout. If RESEND_API_KEY is unset, checkout still provisions the key and
# the success page remains the activation source of truth.
# RESEND_FROM_EMAIL=onboarding@resend.dev   # Resend's universal test sender; swap for a verified domain in prod