.env.example

# Demo runner — environment. Copy to .env and fill in. NEVER commit real secrets.
# All secrets live in environment variables / Cloudflare secrets only.

# --- Cloudflare account / API ---
# The account that owns the deployment. Bindings live in workers/api/wrangler.jsonc;
# `wrangler whoami` prints the id of the account you are authenticated against.
CLOUDFLARE_ACCOUNT_ID=
CLOUDFLARE_API_TOKEN=

# --- R2 (source snapshots + built artifacts) ---
# Bucket name; create it once R2 is enabled on the account.
R2_BUCKET=handsontable-demos

# --- D1 (demo metadata + short ids) ---
# `wrangler d1 create <name>` prints the id; schema in workers/api/migrations/.
D1_DATABASE_ID=

# --- KV (edge read-cache for demo JSON) ---
# `wrangler kv namespace create <name>` prints the id.
KV_NAMESPACE_ID=

# --- Auth: Handsontable Google login broker (internal team only) ---
# Public, fixed URL — hardcode it; NOT a secret. Rejects non-@handsontable.com.
LOGIN_BROKER_URL=https://mcp-auth-proxy-j0tb.onrender.com

# --- Embedding: hosts allowed to iframe /embed/:id (docs only) ---
# frame-ancestors allowlist; no other site may embed demos.
EMBED_ALLOWED_ANCESTORS=https://handsontable.com https://*.handsontable.com http://localhost:*

# --- Domains ---
# Deployed to the account's own *.workers.dev subdomain (a valid broker return
# host). The exact subdomain is finalized on the first `wrangler deploy`.
APP_ORIGIN=https://handsontable-demos-api.<account-subdomain>.workers.dev
PUBLIC_VIEWER_ORIGIN=https://handsontable-demos-api.<account-subdomain>.workers.dev

# --- Tier-1 bundler ---
# Phase 1: Sandpack hosted bundler (default, leave blank).
# Phase 2: self-hosted classic bundler URL (see docs/self-host-bundler.md).
SANDPACK_BUNDLER_URL=

# --- Example chat / AI assistant (DEV-2047) ---
# LiteLLM gateway virtual key. Deployed as the Worker secret LITELLM_API_KEY
# (`wrangler secret put LITELLM_API_KEY`). Without it /api/chat answers 503 and
# nothing else is affected.
LITE_LLM_VIRTUAL_KEY=
# Non-secret gateway config; the committed defaults live in wrangler.jsonc.
LITELLM_API_BASE=https://litellm.handsontable.com
LITELLM_MODEL=claude-sonnet-4-6
# Algolia DocSearch, used for the "related documentation" links. The app id and
# index are public (DocSearch ships them in every docs page); the search key is
# deployed as the Worker secret ALGOLIA_API_KEY.
ALGOLIA_APPID=MMN6OTJMGX
ALGOLIA_INDEX=handsontable
ALGOLIA_API_KEY=
# Retrieval endpoint, called from the BROWSER — Cloudflare blocks Worker ->
# workers.dev fetches (error 1042), so the API worker cannot call it.
VITE_DOCS_SEARCH_URL=https://hot-docs-assistant.handsontable-sandbox.workers.dev/api/search

# --- Handsontable version policy ---
HANDSONTABLE_MAX_MAJOR=19