.env.example

# ATOM Application - Environment Variables Template
# Copy this file to .env and fill in your credentials

# ==============================================================================
# 1. CORE CONFIGURATION
# ==============================================================================
NODE_ENV=development
NEXT_PUBLIC_API_BASE_URL=http://localhost:8000
PYTHON_API_SERVICE_BASE_URL=http://localhost:8000
LOG_LEVEL=info

# ==============================================================================
# 2. DATABASE & STORAGE
# ==============================================================================
LANCEDB_PATH=./data/lancedb
SQLITE_PATH=./data/atom.db
ENABLE_LANCEDB=true

# PostgreSQL (for production)
# DATABASE_URL=postgresql://user:password@localhost:5432/atom_db

# ==============================================================================
# 3. AUTHENTICATION & SECURITY (REQUIRED)
# ==============================================================================
# Generate with: openssl rand -base64 32
NEXTAUTH_SECRET=your-secret-key-change-in-production
NEXTAUTH_URL=http://localhost:3000

# Token encryption keys (32 bytes base64)
ATOM_ENCRYPTION_KEY=your-32-byte-base64-key
BYOK_ENCRYPTION_KEY=your-32-byte-base64-key

# SMTP Settings (Required for password resets)
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USER=
SMTP_PASSWORD=

# ==============================================================================
# 4. AI SERVICE CREDENTIALS (BYOK - Bring Your Own Key)
# ==============================================================================
# Get from: https://platform.openai.com/api-keys
OPENAI_API_KEY=

# Get from: https://console.anthropic.com/
ANTHROPIC_API_KEY=

# Get from: https://platform.deepseek.com/
DEEPSEEK_API_KEY=

# Get from: https://aistudio.google.com/
GOOGLE_GENERATIVE_AI_API_KEY=

# Get from: Z.ai platform
GLM_API_KEY=

# ==============================================================================
# 5. COMMUNICATION INTEGRATIONS (Messaging & BYOK)
# ==============================================================================
# Slack - https://api.slack.com/apps
SLACK_BOT_TOKEN=
SLACK_SIGNING_SECRET=

# Discord - https://discord.com/developers/applications
DISCORD_BOT_TOKEN=
DISCORD_PUBLIC_KEY=

# WhatsApp Cloud API - https://developers.facebook.com/docs/whatsapp/cloud-api
WHATSAPP_ACCESS_TOKEN=
WHATSAPP_PHONE_NUMBER_ID=
WHATSAPP_APP_SECRET=
WHATSAPP_VERIFY_TOKEN=

# Telegram Bot API - https://core.telegram.org/bots
TELEGRAM_BOT_TOKEN=
TELEGRAM_SECRET_TOKEN=

# Microsoft Teams (Bot Framework) - https://portal.azure.com/
MICROSOFT_APP_ID=
MICROSOFT_APP_PASSWORD=

# Twilio (SMS) - https://www.twilio.com/console
TWILIO_ACCOUNT_SID=
TWILIO_AUTH_TOKEN=
TWILIO_PHONE_NUMBER=

# SendGrid - https://app.sendgrid.com/
SENDGRID_API_KEY=

# ==============================================================================
# 6. GOOGLE SERVICES (OAuth)
# ==============================================================================
# Get from: https://console.cloud.google.com/
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_REDIRECT_URI=http://localhost:3000/api/integrations/google/callback

# ==============================================================================
# 7. PROJECT MANAGEMENT (OAuth)
# ==============================================================================
# Asana - https://app.asana.com/0/developer-console
ASANA_CLIENT_ID=
ASANA_CLIENT_SECRET=
ASANA_PERSONAL_ACCESS_TOKEN=

# Jira - https://developer.atlassian.com/console/myapps/
JIRA_CLIENT_ID=
JIRA_CLIENT_SECRET=
JIRA_BASE_URL=

# Linear - https://linear.app/settings/api
LINEAR_CLIENT_ID=
LINEAR_CLIENT_SECRET=
LINEAR_API_KEY=

# Notion - https://www.notion.so/my-integrations
NOTION_CLIENT_ID=
NOTION_CLIENT_SECRET=
NOTION_API_KEY=

# Monday.com - https://monday.com/developers/apps
MONDAY_CLIENT_ID=
MONDAY_CLIENT_SECRET=
MONDAY_API_TOKEN=

# Trello - https://trello.com/app-key
TRELLO_API_KEY=
TRELLO_API_SECRET=

# ClickUp - https://app.clickup.com/settings/apps
CLICKUP_CLIENT_ID=
CLICKUP_CLIENT_SECRET=

# Airtable - https://airtable.com/account
AIRTABLE_API_KEY=
AIRTABLE_PERSONAL_ACCESS_TOKEN=

# ==============================================================================
# 8. CRM & SALES (OAuth)
# ==============================================================================
# Salesforce - https://login.salesforce.com/
SALESFORCE_CLIENT_ID=
SALESFORCE_CLIENT_SECRET=
SALESFORCE_INSTANCE_URL=

# HubSpot - https://app.hubspot.com/
HUBSPOT_CLIENT_ID=
HUBSPOT_CLIENT_SECRET=
HUBSPOT_API_KEY=

# Zendesk - https://www.zendesk.com/
ZENDESK_CLIENT_ID=
ZENDESK_CLIENT_SECRET=
ZENDESK_SUBDOMAIN=

# Intercom - https://app.intercom.com/
INTERCOM_ACCESS_TOKEN=

# Freshdesk - https://www.freshdesk.com/
FRESHDESK_API_KEY=
FRESHDESK_DOMAIN=

# ==============================================================================
# 9. DEVELOPMENT TOOLS (OAuth)
# ==============================================================================
# GitHub - https://github.com/settings/developers
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
GITHUB_PERSONAL_ACCESS_TOKEN=

# GitLab - https://gitlab.com/-/profile/applications
GITLAB_CLIENT_ID=
GITLAB_CLIENT_SECRET=

# Bitbucket - https://bitbucket.org/account/settings/app-passwords/
BITBUCKET_CLIENT_ID=
BITBUCKET_CLIENT_SECRET=

# Figma - https://www.figma.com/developers/api
FIGMA_ACCESS_TOKEN=

# ==============================================================================
# 10. FINANCE & ACCOUNTING (OAuth)
# ==============================================================================
# Stripe - https://dashboard.stripe.com/apikeys
# Note: Only public keys for testing - billing is SaaS-specific
STRIPE_PUBLISHABLE_KEY=pk_test_your_publishable_key_here

# QuickBooks - https://developer.intuit.com/
QUICKBOOKS_CLIENT_ID=
QUICKBOOKS_CLIENT_SECRET=

# Xero - https://developer.xero.com/
XERO_CLIENT_ID=
XERO_CLIENT_SECRET=

# Plaid - https://dashboard.plaid.com/
PLAID_CLIENT_ID=
PLAID_SECRET=
PLAID_ENV=sandbox

# ==============================================================================
# 11. CLOUD STORAGE (OAuth)
# ==============================================================================
# Dropbox - https://www.dropbox.com/developers/apps
DROPBOX_CLIENT_ID=
DROPBOX_CLIENT_SECRET=
DROPBOX_ACCESS_TOKEN=

# OneDrive/Microsoft - covered by TEAMS credentials above
# Box - https://app.box.com/developers/console
BOX_CLIENT_ID=
BOX_CLIENT_SECRET=

# Zoho WorkDrive - https://api-console.zoho.com/
ZOHO_CLIENT_ID=
ZOHO_CLIENT_SECRET=
ZOHO_REDIRECT_URI=http://localhost:3000/api/integrations/zoho-workdrive/callback

# ==============================================================================
# 12. MARKETING & ANALYTICS
# ==============================================================================
# Mailchimp - https://us1.admin.mailchimp.com/account/api/
MAILCHIMP_API_KEY=

# LinkedIn - https://www.linkedin.com/developers/apps
LINKEDIN_CLIENT_ID=
LINKEDIN_CLIENT_SECRET=

# Shopify - https://partners.shopify.com/
SHOPIFY_API_KEY=
SHOPIFY_API_SECRET=
SHOPIFY_SHOP_DOMAIN=

# ==============================================================================
# 13. AUDIO & VIDEO SERVICES
# ==============================================================================
# Deepgram - https://console.deepgram.com/
DEEPGRAM_API_KEY=

# ElevenLabs - https://elevenlabs.io/
ELEVENLABS_API_KEY=

# ==============================================================================
# 14. CALENDAR SERVICES
# ==============================================================================
# Calendly - https://calendly.com/integrations/api_webhooks
CALENDLY_API_KEY=

# ==============================================================================
# 15. PDF & DOCUMENT PROCESSING
# ==============================================================================
# Requires poppler-utils, tesseract-ocr on system
ENABLE_PDF_OCR=true
TESSERACT_PATH=/usr/bin/tesseract

# ==============================================================================
# NOTES
# ==============================================================================
# OAuth Callback URLs use pattern: http://localhost:3000/api/integrations/[service]/callback
# For production, replace with: https://yourdomain.com/api/integrations/[service]/callback
# See docs/missing_credentials_guide.md for detailed setup instructions

# ==============================================================================
# 16. ENHANCED WORKFLOW AUTOMATION (PHASE 1)
# ==============================================================================
AI_WORKFLOW_ENABLED=true
ENHANCED_MONITORING_ENABLED=true
CROSS_SERVICE_ORCHESTRATION_ENABLED=true
WORKFLOW_OPTIMIZATION_ENABLED=true

# Monitoring Thresholds
RESPONSE_TIME_WARNING_MS=1000
RESPONSE_TIME_CRITICAL_MS=5000
SUCCESS_RATE_WARNING=0.95
SUCCESS_RATE_CRITICAL=0.90
HEALTH_SCORE_WARNING=80
HEALTH_SCORE_CRITICAL=60

# ==============================================================================
# 17. PYTHON PACKAGE SCANNING (PHASE 35)
# ==============================================================================
# Safety commercial vulnerability database API key (optional)
# Get API key from: https://pyup.io/safety/
# If not provided, Safety uses free vulnerability database (limited coverage)
SAFETY_API_KEY=

# Package governance cache settings
PACKAGE_CACHE_TTL=60  # Cache duration in seconds (default: 60)

# ==============================================================================
# 18. MARKETPLACE CONNECTION (COMMERCIAL SERVICE)
# ==============================================================================
# Marketplace Configuration - Connection to atomagentos.com
# Get your API token from: https://atomagentos.com/settings/api-tokens

# Marketplace API URL (default: atomagentos.com commercial mothership)
ATOM_SAAS_API_URL=https://atomagentos.com/api/v1/marketplace

# API Token (required for marketplace access)
ATOM_SAAS_API_TOKEN=your_api_token_here

# Enable/disable marketplace (default: true)
MARKETPLACE_ENABLED=true

# Sync Intervals (in minutes)
ATOM_SAAS_SYNC_INTERVAL_MINUTES=15  # Skill/category sync interval
ATOM_SAAS_RATING_SYNC_INTERVAL_MINUTES=30  # Rating sync interval

# Conflict Resolution Strategy
# Options: remote_wins, local_wins, merge, manual
ATOM_SAAS_CONFLICT_STRATEGY=remote_wins

# WebSocket Configuration
ATOM_SAAS_WS_URL=wss://api.atomsaas.com/ws
ATOM_SAAS_WS_RECONNECT_ATTEMPTS=10
ATOM_SAAS_WS_HEARTBEAT_INTERVAL=30

# Scheduler Configuration
ENABLE_SCHEDULER=true  # Enable background sync jobs
PACKAGE_CACHE_MAX_SIZE=1000  # Max cache entries (default: 1000)

# ==============================================================================
# 19. PIECE ENGINE SECURITY (CRITICAL - Command Injection Fix)
# ==============================================================================
# Generate with: openssl rand -base64 32
# This key is required for secure package installation in the Piece Engine
# Without this key, the /sys/install and /execute/action endpoints are vulnerable
PIECE_ENGINE_API_KEY=your-secure-random-piece-engine-key-change-in-production