.env.example

# Postgres connection string (pooled). Set the real value in .env.local.
# Any Postgres works; on Cloudflare Workers use a serverless/HTTP driver (e.g. Neon).
DATABASE_URL="postgresql://USER:PASSWORD@HOST/DB?sslmode=require&channel_binding=require"

# better-auth. Generate a secret with: openssl rand -base64 32
BETTER_AUTH_SECRET=""
# Base URL of the app (no trailing slash). Dev: http://localhost:3000
# Also used as the OAuth issuer for the MCP server, so it MUST match the public
# URL your MCP client connects to (e.g. https://app.example.com). See docs/mcp.md.
BETTER_AUTH_URL="http://localhost:3000"

# Google OAuth (Google Cloud Console → APIs & Services → Credentials → OAuth client ID, type "Web application").
# Authorized redirect URIs (add your prod URLs too when deploying):
#   http://localhost:3000/api/auth/callback/google                  ← sign-in
#   http://localhost:3000/api/auth/oauth2/callback/google-calendar  ← Google Calendar integration
# The Calendar integration reuses these same credentials but is a separate consent
# flow, so signing in never asks for calendar access. Enable the Google Calendar API
# on the project and add the .../auth/calendar scope to the OAuth consent screen.
GOOGLE_CLIENT_ID=""
GOOGLE_CLIENT_SECRET=""