.env.example

# Copy to .env.local (gitignored) to enable the live Hookdeck suite.
#
#   npm run test:live
#
# Without this the live suite skips itself and `npm test` stays offline.
#
# Use a THROWAWAY project. The suite creates and deletes connections, sources
# and destinations named `openclaw-ci-*`; teardown only touches that prefix, but
# a project you care about is still the wrong place to point it.
HOOKDECK_TEST_API_KEY=

# Optional, and read from the ENVIRONMENT only — this file is parsed for
# HOOKDECK_TEST_API_KEY and the AGENT_TEST_* keys, nothing else.
# Defaults to https://api.hookdeck.com/2025-07-01
# HOOKDECK_API_BASE=

# HOOKDECK_TEST_API_KEY above is also picked up by `npm run test:agent`. With it
# set, the smoke test's read tools query the real API, so you can see what an
# agent does with live Issues. That run is read-only by construction, not by
# trusting the questions: provisioning and transport default to off, and it sets
# tools.allowMutations: false, so setup/pause/replay are not registered at all
# and hookdeck_issues can list and inspect but not acknowledge or dismiss.
#
# Optional: enables the end-to-end agent smoke test (`npm run test:agent`),
# which boots a throwaway Gateway and asks a real agent questions that should
# make it reach for the Hookdeck tools. Proves what unit tests cannot — that a
# model picks the right tool from the descriptions. Needs no Hookdeck key.
# AGENT_TEST_ANTHROPIC_API_KEY=
# AGENT_TEST_OPENAI_API_KEY=
# AGENT_TEST_MODEL=anthropic/claude-haiku-4-5   # must be an id this openclaw build knows
#
# To let the smoke test CHANGE real Hookdeck state — it acknowledges one issue —
# set both of these. Without them the run is read-only by construction.
# AGENT_TEST_ALLOW_MUTATIONS=1
# AGENT_TEST_MUTATION_CONNECTION=my-test-connection

# Optional: for scripts/e2e-live-stripe.mjs, which verifies a REAL Stripe
# webhook end to end. Run the script's `setup` step first — it prints a source
# URL to point Stripe at — then paste the signing secret Stripe gives you here
# and run `arm` BEFORE triggering an event: verification happens at ingest, so
# a secret set afterwards proves nothing.
#
# With `stripe listen --forward-to <url>` the CLI mints a fresh secret per
# session, so re-arm whenever you restart it.
# STRIPE_WEBHOOK_SECRET=whsec_...