OPENAI_API_KEY=sk-...
OPENAI_ORG_ID=org-...              # Optional

ANTHROPIC_API_KEY=sk-ant-...

GROQ_API_KEY=gsk_...

CLOUDFLARE_ACCOUNT_ID=abc123...
CLOUDFLARE_API_TOKEN=...

CF_AI_BINDING=AI                   # Binding name (default: AI)

D1_BINDING=DB                      # Binding name (default: DB)
D1_DATABASE_ID=...                 # Database ID

KV_BINDING=CACHE                   # Binding name (default: CACHE)
KV_NAMESPACE_ID=...                # Namespace ID

R2_BINDING=STORAGE                 # Binding name (default: STORAGE)
R2_BUCKET_NAME=...                 # Bucket name

VECTORIZE_BINDING=VECTORIZE        # Binding name (default: VECTORIZE)
VECTORIZE_INDEX_NAME=...           # Index name

SENDGRID_API_KEY=SG...
SENDGRID_FROM_EMAIL=noreply@example.com

AWS_SES_REGION=us-east-1
AWS_SES_ACCESS_KEY_ID=...
AWS_SES_SECRET_ACCESS_KEY=...
AWS_SES_FROM_EMAIL=noreply@example.com

TWILIO_ACCOUNT_SID=AC...
TWILIO_AUTH_TOKEN=...
TWILIO_FROM_NUMBER=+1234567890

AWS_SNS_REGION=us-east-1
AWS_SNS_ACCESS_KEY_ID=...
AWS_SNS_SECRET_ACCESS_KEY=...

CONDUCTOR_ENV=production           # Environment name
CONDUCTOR_LOG_LEVEL=info           # Log level (debug, info, warn, error)
CONDUCTOR_TIMEOUT=30000            # Default timeout (ms)

CACHE_ENABLED=true                 # Enable caching (default: true)
CACHE_DEFAULT_TTL=3600             # Default TTL (seconds)

RETRY_MAX_ATTEMPTS=3               # Max retry attempts
RETRY_BACKOFF=exponential          # Backoff strategy

DEV_PORT=3000                      # Dev server port
DEV_HOST=localhost                 # Dev server host

NODE_ENV=test                      # Test environment
TEST_TIMEOUT=10000                 # Test timeout (ms)

# Use Wrangler for production secrets
wrangler secret put OPENAI_API_KEY
wrangler secret put DATABASE_PASSWORD

HITL_APPROVAL_URL=https://...      # Approval UI URL
HITL_WEBHOOK_SECRET=...            # Webhook signature secret

LOG_LEVEL=info                     # Log level
LOG_FORMAT=json                    # Log format (json, pretty)

METRICS_ENABLED=true               # Enable metrics
METRICS_ENDPOINT=https://...       # Metrics endpoint

config:
  apiKey: ${env.MY_CUSTOM_API_KEY}
  endpoint: ${env.MY_CUSTOM_ENDPOINT}

const apiKey = process.env.MY_CUSTOM_API_KEY;

# .env
OPENAI_API_KEY=sk-...
ANTHROPIC_API_KEY=sk-ant-...
DATABASE_URL=...

# .env.production
# Production-specific overrides
LOG_LEVEL=error
CACHE_DEFAULT_TTL=7200

# .env.test
# Test-specific config
NODE_ENV=test
LOG_LEVEL=debug

# .gitignore
.env
.env.local
.env.*.local

wrangler secret put OPENAI_API_KEY

# .env.example
OPENAI_API_KEY=sk-...
ANTHROPIC_API_KEY=sk-ant-...
DATABASE_URL=...

if (!process.env.OPENAI_API_KEY) {
  throw new Error('OPENAI_API_KEY required');
}

const env = z.object({
  OPENAI_API_KEY: z.string(),
  DATABASE_URL: z.string().url(),
}).parse(process.env);