.env.example

# Server Configuration
NODE_ENV=development
PORT=3000

# Database Configuration
DB_HOST=localhost
DB_PORT=5432
DB_NAME=devflow_db
DB_USER=postgres
DB_PASSWORD=postgres

# AI Insights — Gemini-powered recommendations
# Insights are disabled if GOOGLE_API_KEY is unset (rest of the API still runs).
GOOGLE_API_KEY=your_google_ai_studio_key_here
GEMINI_MODEL=gemini-2.5-flash
INSIGHTS_ENABLED=true
INSIGHT_CHECK_INTERVAL_SECONDS=600
INSIGHT_COOLDOWN_MINUTES=45
SNOOZE_DURATION_MINUTES=30
INSIGHT_ACTIVITY_WINDOW_MINUTES=30

# Background Job Configuration
STUCK_DETECTION_INTERVAL_MS=30000
STUCK_THRESHOLD_MINUTES=15

# Logging
LOG_LEVEL=info

# CORS — comma-separated browser origins allowed to make credentialed requests.
# Exact match, no wildcards. Empty/unset disables browser cross-origin.
# Requests without an Origin header (curl, server-to-server, the VS Code extension) are NOT blocked.
CORS_ALLOWED_ORIGINS=http://localhost:5173,https://who-goes-to-try.hackathon.sev-2.com

# Frontend origin used to build the verification URI returned by POST /api/v1/auth/pairings.
# The extension opens FRONTEND_URL/extension/pair?code=<user_code> in the browser.
# Defaults in code to https://who-goes-to-try.hackathon.sev-2.com — this variable is optional.
# Set it only to override the default (e.g., point the extension at a local frontend during dev).
FRONTEND_URL=http://localhost:5173