.env.example

# Environment variables for devprofile
# Copy to .env.local (or appropriate env) and fill real values. Never commit secrets.

# Site — canonical origin for Open Graph / Twitter cards (absolute og:image URLs).
# Production example: https://peramanathan-sathyamoorthy-cv.vercel.app
NEXT_PUBLIC_SITE_URL=http://localhost:3000

# xAI Agentic Profile QA Reactor (Phase 1)
# Create keys at console.x.ai. We recommend **read-only** scopes — no write/upload in this app.

# Chat — Grok model calls (AI SDK streamText for /qa reactor answers)
XAI_API_KEY=your_xai_chat_api_key_here

# Collections — search/list against XAI_PROFILE_COLLECTION (read-only recommended)
# Separate from chat so a leaked key exposes only public collection content, not broader account access.
# If unset, collection search falls back to XAI_API_KEY (only if that key has collection read scope).
XAI_MANAGEMENT_API_KEY=your_read_only_collections_api_key_here

# Collection name or ID (required when ENABLE_XAI_REACTOR=true).
# Populate in console.x.ai (or an external tool). Runtime reads live content via the Collections API.
XAI_PROFILE_COLLECTION=

# Feature flag override (alternative/backup to src/config/feature-flags.ts qaReactor)
# When true, the dual-path route (PR7) can delegate to new reactor.
# Flag in feature-flags.ts takes precedence for UI; this is for explicit server bypass during dev.
ENABLE_XAI_REACTOR=false

# Model for agentic QA (when ENABLE_XAI_REACTOR=true). Required on Vercel for predictable behavior.
# If unset, code defaults to grok-4-1-fast-reasoning (see src/lib/qa/constants.ts).
# Pick one your account can call (console.x.ai → Models):
#   grok-4-1-fast-reasoning
#   grok-4-1-fast-non-reasoning
#   grok-4.3
XAI_MODEL=grok-4-1-fast-reasoning

# Grok generation limits (agentic QA) — maps to AI SDK maxOutputTokens + providerOptions.xai.reasoningEffort
# ~400 tokens ≈ short essence answer; raise only if you need longer narratives
XAI_MAX_OUTPUT_TOKENS=400
# low | high (xAI reasoning_effort on chat API; use low for fast, terse answers)
XAI_REASONING_EFFORT=low
# 0–1; default 0.45 for crisp, non-rambling copy
XAI_TEMPERATURE=0.45

# Optional: abuse defense tuning (Phase 1 uses module defaults + these env overrides)
# See src/lib/qa/abuse-defense.ts (PR4) for the exact var names + config once implemented.
# ABUSE_IP_PER_5M=12
# ABUSE_IP_PER_DAY=400

# Playwright / E2E (for qa-reactor.spec.ts in later PR)
# BRAVE_BETA_PATH=/usr/bin/brave-browser-beta

# GitHub — live dashboard + SVG cards (server-only; never NEXT_PUBLIC_)
# Fine-grained PAT: public read (Metadata, Contents optional). 5k req/hr vs 60/hr anonymous.
GITHUB_TOKEN=

# Other existing (examples; see code for usage)
# CURSOR_HOME=...