.env.example

# Supabase connection — required
SUPABASE_URL=https://vfalgymbhyfqsyxkvpqg.supabase.co
SUPABASE_SERVICE_ROLE_KEY=your-service-role-key-here
# Anon key for read-only queries (subject to RLS). Required.
SUPABASE_ANON_KEY=your-anon-key-here

# Stripe — required for checkout, cancel_booking, reschedule_booking
STRIPE_SECRET_KEY=sk_test_your-stripe-secret-key-here

# Optional. Overrides the preview Stripe-Version used when redeeming a
# SharedPaymentToken (SPT) on /acp/checkouts/:id/complete. Unset = the version
# pinned in src/stripe.ts. Set this only to follow a Stripe-side preview roll.
# STRIPE_SPT_API_VERSION=2026-07-08.preview

# Required for the agent-payment path. A payment left in flight keeps its
# booking pending until Stripe reports payment_intent.succeeded — this secret
# is what lets api/stripe-webhook.ts verify and process that event. Without it
# the webhook rejects every delivery and an in-flight payment never confirms
# the booking. Get it from the Stripe Dashboard endpoint you register.
STRIPE_WEBHOOK_SECRET=whsec_your-webhook-signing-secret-here

# API key for MCP and ACP endpoints. When set, all POST/PUT requests must carry
# Authorization: Bearer <key>. Leave unset to allow all callers (open mode).
MCP_API_KEY=your-secret-api-key-here

# Server port (default 3000)
PORT=3000