.env.example

# ─── Panogram environment ───────────────────────────────────────────────────
# Copy to `.env.local` and fill in. NEVER commit real secrets — `.env.local` is
# gitignored. With nothing set, the app runs on mock data so you can click through
# immediately (supabaseConfigured === false).
#
# NOTE: this is Next.js, so browser-exposed vars use the NEXT_PUBLIC_ prefix
# (Astro projects like sedulous/shotgundetour use PUBLIC_). Same isolation model,
# different framework prefix — don't mix them up.

# ── Supabase (DB / auth / storage) ──
# From the PANOGRAM Supabase project → Settings → API
NEXT_PUBLIC_SUPABASE_URL=                 # https://<ref>.supabase.co
NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY=     # sb_publishable_...  (browser-safe, RLS-protected)
SUPABASE_SECRET_KEY=                      # sb_secret_...  SERVER ONLY — never ship to client / commit

# ── Mapbox (3D Atlas + the /embed fly-by) ──
# From your Mapbox account → Tokens. Browser-exposed (NEXT_PUBLIC_), so restrict
# it to your domains (Token → URL restrictions): the app's own origin + localhost.
# Without it the flat 2D Atlas still works; the 3D map + embeds show a "needs a key".
NEXT_PUBLIC_MAPBOX_TOKEN=                  # pk.eyJ...

# ── Transactional email ──
RESEND_API_KEY=                           # re_...
RESEND_FROM=                              # e.g. "Panogram <hello@yourdomain.com>" (a verified Resend sender)
REPORT_ALERT_TO=                          # where trust & safety report alerts are emailed

# ── AI vision tagging (/api/annotate) ──
# SERVER ONLY, ADMIN-ONLY FALLBACK. The route is bring-your-own-key: users send
# their own Anthropic key per request (never stored). This key only serves
# signed-in admins so the owner's money can't be spent by strangers.
# No NEXT_PUBLIC_ prefix — must never enter the browser bundle.
ANTHROPIC_API_KEY=                        # sk-ant-...

# ── Deployment ──
# Public origin of the deployed app — used for OG link previews + absolute URLs
# (the auth-callback redirect resolves the public host from forwarded headers,
# so this is a fallback). Local: leave unset (defaults to http://localhost:3000).
# Prod: set to the deployed origin, e.g. https://<app>.ondigitalocean.app.
NEXT_PUBLIC_SITE_URL=                      # https://<your-app>.ondigitalocean.app

# Optional: lock the /admin data room behind a shared key (append ?key=… to view).
ADMIN_KEY=

# ── Product analytics / telemetry ──
NEXT_PUBLIC_POSTHOG_KEY=                  # phc_...  (engagement, CTR, views — Phase 1 telemetry)
NEXT_PUBLIC_POSTHOG_HOST=https://us.i.posthog.com