# Cite — environment variables

#

# Every variable here is actively used by the code. Add new ones only when

# you ship the code that reads them.

# Public URL the app is served from. Used for metadataBase and Supabase

# email-confirmation callback URLs.

NEXT_PUBLIC_APP_URL=http://localhost:3000

# Supabase Postgres connection strings. Two URLs because Postgres usage

# splits into two categories:

#

# DATABASE_URL — the runtime app pool. Use the Transaction Pooler URL

# (port 6543, ends in `pooler.supabase.com`). Add `?pgbouncer=true` so

# Prisma doesn't try to use prepared statements that pgBouncer can't

# handle in transaction mode.

#

# DIRECT_URL — used by `prisma migrate` / `prisma db push` and by

# `yarn db:setup` (which runs setup.sql). DDL needs session state that

# pgBouncer's transaction mode doesn't preserve, so this MUST be the

# direct connection (port 5432, `db.<project>.supabase.co`).

DATABASE_URL=postgresql://postgres:postgres@localhost:5432/postgres?pgbouncer=true

DIRECT_URL=postgresql://postgres:postgres@localhost:5432/postgres

# Supabase Auth. Publishable key is safe to embed in the client bundle; the

# secret key is server-only and bypasses RLS. These are the sb_publishable_*

# and sb_secret_* keys from the Supabase dashboard's API settings (the

# successors to the legacy anon / service_role keys).

NEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co

NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY=

SUPABASE_SECRET_KEY=

# Voyage AI — voyage-3-large embeddings (2048 dims) + rerank-2.5. Required

# for any document ingestion. Sign up at voyageai.com.

VOYAGE_API_KEY=

# LlamaCloud — PDF parsing via LlamaParse. Required to ingest PDFs;

# DOCX/HTML/Markdown parse locally without an API key.

LLAMA_CLOUD_API_KEY=

# Anthropic — Haiku for contextual-retrieval enrichment + the citation

# audit judge; Sonnet for chat synthesis. Optional for ingestion; quality

# drops if absent because chunks ship without contextual preambles.

ANTHROPIC_API_KEY=

# Inngest — required only in production deployments. In dev the SDK

# auto-connects to the local dev server (`inngest-cli dev`).

INNGEST_EVENT_KEY=

INNGEST_SIGNING_KEY=