# Authentication secret - REQUIRED in production (startup throws if missing).
# Generate via: openssl rand -hex 32
# BETTER_AUTH_SECRET=

# App's public URL - REQUIRED in production for OAuth redirects and email links.
# BETTER_AUTH_URL=https://your-app.netlify.app

# Anthropic API key - REQUIRED for the embedded agent in production.
# ANTHROPIC_API_KEY=

# Google sign-in (optional)
# Set these to show "Continue with Google" on the account screen.
# For simple local plan generation, the dev auto-session is enough.
# Preferred: low-scope, sign-in-only credentials.
# GOOGLE_SIGN_IN_CLIENT_ID=
# GOOGLE_SIGN_IN_CLIENT_SECRET=
# Fallback: broader-scope legacy credentials, used if the pair above is unset.
# GOOGLE_CLIENT_ID=
# GOOGLE_CLIENT_SECRET=

# OAuth state signing - REQUIRED in prod for Google OAuth flows.
# Falls back to BETTER_AUTH_SECRET if unset; setting it explicitly is recommended.
# Generate via: openssl rand -hex 32
# OAUTH_STATE_SECRET=

# Production database
# DATABASE_URL=

# Inter-app A2A/MCP authentication
# REQUIRED in prod when this app participates in cross-app agent workflows.
# Generate via: openssl rand -hex 32
# A2A_SECRET=

# Hosted first-party identity federation (optional)
# Lets plan.agent-native.com offer "Sign in with Agent-Native" through Dispatch.
# AGENT_NATIVE_IDENTITY_HUB_URL=https://dispatch.agent-native.com