.env.example

# ============================================================
# ROOTSPACE // ENVIRONMENT CONFIGURATION
# Copy this file to .env.local for local development.
# All variables marked [REQUIRED] MUST be set before deployment.
# ============================================================

# ── VERCEL KV (Upstash Redis) ─────────────────────────────
# Provisioned automatically when you add Vercel KV to your project.
# Dashboard: https://vercel.com/dashboard → Storage → KV
KV_URL=                          # [REQUIRED] redis://...
KV_REST_API_URL=                 # [REQUIRED] https://...
KV_REST_API_TOKEN=               # [REQUIRED]
KV_REST_API_READ_ONLY_TOKEN=     # [REQUIRED]

# ── VERCEL POSTGRES ───────────────────────────────────────
# Provisioned automatically when you add Vercel Postgres to your project.
# Dashboard: https://vercel.com/dashboard → Storage → Postgres
POSTGRES_URL=                    # [REQUIRED]
POSTGRES_PRISMA_URL=             # [REQUIRED]
POSTGRES_URL_NO_SSL=
POSTGRES_URL_NON_POOLING=        # [REQUIRED] Used for migrations
POSTGRES_USER=
POSTGRES_HOST=
POSTGRES_PASSWORD=
POSTGRES_DATABASE=

# ── STRIPE ────────────────────────────────────────────────
# Get these from: https://dashboard.stripe.com/apikeys
STRIPE_SECRET_KEY=sk_test_...   # [REQUIRED] Use sk_live_... in production
STRIPE_WEBHOOK_SECRET=whsec_... # [REQUIRED] From: Stripe Dashboard → Webhooks
NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY=pk_test_...

# ── RESEND (Email) ────────────────────────────────────────
# Get your key from: https://resend.com/api-keys
RESEND_API_KEY=re_...           # [REQUIRED] For Neural Link deployment emails
RESEND_FROM_EMAIL=ops@rootspace.dev  # [REQUIRED] Must be a verified sender in Resend

# ── ROOTSPACE CORE ────────────────────────────────────────
# Generate a strong random secret: openssl rand -hex 32
ADMIN_KEY=                      # [REQUIRED] Master Overseer key — keep this secret
SYSTEM_SIGNING_SECRET=          # [REQUIRED] HMAC key for telemetry signatures — openssl rand -hex 32

# ── NOTIFICATIONS ─────────────────────────────────────────
# Where key recovery support tickets are sent (admin inbox)
ADMIN_NOTIFICATION_EMAIL=       # [RECOMMENDED] e.g. support@rootspace.dev

# ── VERCEL SYSTEM ─────────────────────────────────────────
# Automatically injected by Vercel — do NOT set manually in production.
# Set to any random string for local dev testing of cron endpoints.
CRON_SECRET=                    # [AUTO] Vercel populates this for cron auth

# ── APP CONFIG ────────────────────────────────────────────
NEXT_PUBLIC_APP_URL=https://rootspace.dev  # [REQUIRED] Your production domain (used for CORS)
NEXT_PUBLIC_APP_VERSION=v4                 # [OPTIONAL] Version tag shown in /api/health