.env.example

# ── Supabase ──────────────────────────────────────────────────────────
# Get these from your Supabase dashboard: Project Settings → API
# Required for all local development
NEXT_PUBLIC_SUPABASE_URL=
NEXT_PUBLIC_SUPABASE_ANON_KEY=
# SUPABASE_SERVICE_ROLE_KEY=   # only needed for server-side admin jobs — leave empty for now

# ── GitHub OAuth (local Supabase dev only) ────────────────────────────
# Create an OAuth app at https://github.com/settings/developers
# Callback URL: http://localhost:54321/auth/v1/callback
# GH_CLIENT_ID=
# GH_CLIENT_SECRET=

# ── GitHub Webhooks (automatic profile refresh) ──────────────────────
# Shared secret used to verify the X-Hub-Signature-256 header on incoming
# GitHub push webhooks (POST /api/webhooks/github). Set the same value as the
# "Secret" field when creating the webhook in your repo/org settings.
# GITHUB_WEBHOOK_SECRET=

# ── AI Features (optional) ───────────────────────────────────────────
# Provider used by POST /api/developer-insights: "anthropic" or "openai".
AI_PROVIDER=anthropic
# Optional override; defaults to claude-3-5-haiku-latest (Anthropic) or gpt-4o-mini (OpenAI).
AI_MODEL=claude-3-5-haiku-latest
# Required only to enable Developer Insights. Keep this server-only value secret.
# ANTHROPIC_API_KEY=
# OPENAI_API_KEY=

# ── Upstash Redis (REST) ─────────────────────────────────────────────
# Used by the GitHub response cache in `src/lib/github.ts`.
#
# Worth knowing: `src/lib/redis.ts` falls back to a no-op stub when these are missing, so the
# app still builds and runs without them — but the cache goes silently inert, and every profile
# view hits the GitHub API directly. Locally that's convenient; in production it's the rate
# limiting this cache exists to prevent. Set these in any deployed environment.
UPSTASH_REDIS_REST_URL=
UPSTASH_REDIS_REST_TOKEN=