.env.example

# ===== Auth (used by both /health and the gateway) =====
# Health routes read these:
AUTH0_DOMAIN=yourtenant.us.auth0.com
AUTH0_ISSUER=https://yourtenant.us.auth0.com/
AUTH0_JWKS_URI=https://yourtenant.us.auth0.com/.well-known/jwks.json
AUTH0_AUDIENCE=https://gateway.yourdomain.com/api

# Gateway/router code reads these (mirror the values):
OAUTH_ISSUER=https://yourtenant.us.auth0.com              # no trailing slash in code (it trims)
OAUTH_AUDIENCE=https://gateway.yourdomain.com/api         # your Auth0 API Identifier
JWKS_URI=https://yourtenant.us.auth0.com/.well-known/jwks.json
OAUTH_SCOPES=openid email profile inner.dreams:read inner.dreams:write inner.events:read inner.images:create

# ===== DCR promotion webhook (optional) =====
MGMT_DOMAIN=yourtenant.us.auth0.com
MGMT_CLIENT_ID=
MGMT_CLIENT_SECRET=
LOG_WEBHOOK_SECRET=

# ===== Gateway runtime =====
APP_ORIGIN=http://localhost:5173
GATEWAY_HMAC_SECRET=dev-change-me
RATE_LIMIT_PER_MIN=60
LOG_LEVEL=info
PORT=8080

# ===== If you plan to call your own Cloud Functions from tools/call =====
# e.g., https://us-central1-your-project.cloudfunctions.net
FUNCTIONS_BASE=https://us-central1-<YOUR_PROJECT_ID>.cloudfunctions.net