.env.example

# PostHog dashboards-as-code (tools/posthog/)
# Generate a Personal API Key at https://us.posthog.com/me/settings#personal-api-keys
# Required scopes: dashboard:write, insight:write, cohort:write, project:read
POSTHOG_PERSONAL_API_KEY=
POSTHOG_HOST=https://us.i.posthog.com
POSTHOG_PROJECT_ID=

# @ngaf/telemetry (libs/telemetry)
# Default ingest URL points to the ThreadPlane website reverse proxy. Self-hosters
# can redirect to their own ingest. See libs/telemetry/README.md.
# NGAF_TELEMETRY_INGEST_URL=https://threadplane.ai/api/ingest
# NGAF_TELEMETRY_SAMPLE_RATE=1.0
# DO_NOT_TRACK=1                          # cross-vendor opt-out
# NGAF_TELEMETRY_DISABLED=1               # package-specific opt-out

# Cockpit shell analytics (apps/cockpit)
NEXT_PUBLIC_COCKPIT_POSTHOG_TOKEN=
NEXT_PUBLIC_COCKPIT_CAPTURE_LOCAL=false

# Cockpit iframe → cockpit-shell /ingest proxy (Spec 1D).
# Production: full absolute URL (e.g. https://cockpit.threadplane.ai/ingest).
# Leave empty in dev to let RunMode derive it from window.location.origin.
NEXT_PUBLIC_COCKPIT_INGEST_HOST=

# CORS origin allowed to POST to cockpit's /ingest from iframes (Spec 1D).
# Production: https://examples.threadplane.ai
# Leave empty in dev — wildcard '*' is used.
NEXT_PUBLIC_COCKPIT_IFRAME_ORIGIN=

# Stripe — see scripts/stripe/sync-products.ts and src/app/api/checkout/session/route.ts
STRIPE_SECRET_KEY=sk_test_…