env.mjs

import { createEnv } from "@t3-oss/env-nextjs"
import { z } from "zod"

export const env = createEnv({
  emptyStringAsUndefined: true,

  /*
   * Server-side environment variables, not available on the client.
   * Will throw if you access these variables on the client.
   *
   * These are marked as optional to allow Docker builds to succeed without
   * baking variables into the image. Runtime validation in the code is necessary
   * to ensure required variables are present. Making them mandatory here would
   * require them to be present at build time, which is not always desired or possible (see README).
   */
  server: {
    APP_PUBLIC_URL: z.string().url().optional(),
    DEBUG_STATIC_PARAMS_GENERATION: optionalZodBoolean(),
    SHOW_NON_BLOCKING_ERRORS: optionalZodBoolean(),
    DEBUG_STRAPI_CLIENT_API_CALLS: optionalZodBoolean(),
    STRAPI_URL: z.string().url().optional(),
    // Origin of the Strapi media CDN (e.g. https://<project>.media.strapiapp.com).
    // Used only to emit a `preconnect` resource hint so the LCP hero media loads
    // sooner. Server-only — the hint is rendered during SSR and never read on the
    // client. Optional; when unset, no media preconnect is rendered.
    STRAPI_MEDIA_URL: z.string().url().optional(),
    STRAPI_REST_READONLY_API_KEY: z.string().optional(),
    STRAPI_REST_CUSTOM_API_KEY: z.string().optional(),
    STRAPI_PREVIEW_SECRET: z.string().optional(),
    STRAPI_REVALIDATE_SECRET: z.string().optional(),

    NEXT_OUTPUT: z.string().optional(),

    SENTRY_AUTH_TOKEN: z.string().optional(),
    SENTRY_ORG: z.string().optional(),
    SENTRY_PROJECT: z.string().optional(),
    SENTRY_SUPPRESS_GLOBAL_ERROR_HANDLER_FILE_WARNING: z.string().optional(),

    RECAPTCHA_SECRET_KEY: z.string().optional(),

    GTM_ID: z.string().optional(),
    HUBSPOT_PORTAL_ID: z.string().optional(),
    HUBSPOT_API_TOKEN: z.string().optional(),
    HOTJAR_ID: z.string().optional(),
    COOKIEBOT_ID: z.string().optional(),
    KAPA_WEBSITE_ID: z.string().optional(),

    DEMO_OPERATOR_SERVER: z.string().url().optional(),
    DEMO_OPERATOR_TOKEN: z.string().optional(),
    HUBSPOT_DEMO_WORKFLOW_ID: z.string().optional(),

    BASIC_AUTH_ENABLED: optionalZodBoolean(),
    BASIC_AUTH_USERNAME: z.string().optional(),
    BASIC_AUTH_PASSWORD: z.string().optional(),

    DEFAULT_REVALIDATE_TIME: z.coerce.number().int().positive().optional(),

    // Growth-plan pricing used by /order-confirmation (Chargebee price id and
    // per-seat prices in cents). Optional here to keep builds env-free; the
    // page throws a descriptive error at request time when they are missing.
    GROWTH_PLAN_SSO_PRICE_ID: z.string().optional(),
    GROWTH_PLAN_SSO_SEAT_PRICE: z.coerce.number().int().positive().optional(),
    GROWTH_PLAN_SEAT_PRICE: z.coerce.number().int().positive().optional(),

    // AWS CloudFront invalidation (see `src/lib/cdn.ts`). Disabled when
    // the distribution ID is unset. Credentials come from Vercel OIDC
    // federation — the role below is assumed via AssumeRoleWithWebIdentity,
    // because Vercel's Lambda runtime injects unusable AWS_ACCESS_KEY_ID/
    // AWS_SECRET_ACCESS_KEY values that poison the SDK's default chain.
    AWS_CLOUDFRONT_DISTRIBUTION_ID: z.string().optional(),
    AWS_REGION: z.string().optional(),
    AWS_CLOUDFRONT_INVALIDATION_ROLE_ARN: z.string().optional(),
  },

  /*
   * Environment variables available on the client (and server).
   * You'll get type errors if these are not prefixed with NEXT_PUBLIC_.
   *
   * Note: These are baked into the client bundle at build time.
   * If you need different values per environment with a single Docker image,
   * consider runtime injection instead (through `window.__ENV__` or similar hack).
   */
  client: {
    NEXT_PUBLIC_SENTRY_DSN: z.string().optional(),
    NEXT_PUBLIC_RECAPTCHA_SITE_KEY: z.string().optional(),
    NEXT_PUBLIC_PREVENT_UNUSED_FUNCTIONS_ERROR_LOGS: optionalZodBoolean(),
    NEXT_PUBLIC_CHARGEBEE_URL: z.string().url().optional(),
    // Chargebee self-serve portal, linked from the /get-license page.
    NEXT_PUBLIC_CHARGEBEE_PORTAL: z.string().url().optional(),
    // License registry backing /get-license (one-time license reveal).
    NEXT_PUBLIC_LICENSE_REGISTRY_API_URL: z.string().url().optional(),
  },

  shared: {
    // NODE_ENV makes app behave as if in production mode (optimized builds, no dev-only behavior, etc.)
    NODE_ENV: z.enum(["development", "production"]).optional(),
    // APP_ENV is used to determine the environment the app is running in. Used to divide deployments.
    APP_ENV: z.string().optional(),
  },

  /*
   * Due to how Next.js bundles environment variables on Edge and Client,
   * we need to manually destructure them to make sure all are included in bundle.
   * You'll get type errors if not all variables from `server` & `client` are included here.
   */
  runtimeEnv: {
    // server
    APP_PUBLIC_URL: process.env.APP_PUBLIC_URL,
    DEBUG_STATIC_PARAMS_GENERATION: process.env.DEBUG_STATIC_PARAMS_GENERATION,
    DEBUG_STRAPI_CLIENT_API_CALLS: process.env.DEBUG_STRAPI_CLIENT_API_CALLS,
    SHOW_NON_BLOCKING_ERRORS: process.env.SHOW_NON_BLOCKING_ERRORS,
    STRAPI_URL: process.env.STRAPI_URL,
    STRAPI_MEDIA_URL: process.env.STRAPI_MEDIA_URL,
    STRAPI_REST_READONLY_API_KEY: process.env.STRAPI_REST_READONLY_API_KEY,
    STRAPI_REST_CUSTOM_API_KEY: process.env.STRAPI_REST_CUSTOM_API_KEY,
    STRAPI_PREVIEW_SECRET: process.env.STRAPI_PREVIEW_SECRET,
    STRAPI_REVALIDATE_SECRET: process.env.STRAPI_REVALIDATE_SECRET,

    NEXT_OUTPUT: process.env.NEXT_OUTPUT,

    SENTRY_AUTH_TOKEN: process.env.SENTRY_AUTH_TOKEN,
    SENTRY_ORG: process.env.SENTRY_ORG,
    SENTRY_PROJECT: process.env.SENTRY_PROJECT,
    SENTRY_SUPPRESS_GLOBAL_ERROR_HANDLER_FILE_WARNING:
      process.env.SENTRY_SUPPRESS_GLOBAL_ERROR_HANDLER_FILE_WARNING,

    RECAPTCHA_SECRET_KEY: process.env.RECAPTCHA_SECRET_KEY,

    GTM_ID: process.env.GTM_ID,
    HUBSPOT_PORTAL_ID: process.env.HUBSPOT_PORTAL_ID,
    HUBSPOT_API_TOKEN: process.env.HUBSPOT_API_TOKEN,
    HOTJAR_ID: process.env.HOTJAR_ID,
    COOKIEBOT_ID: process.env.COOKIEBOT_ID,
    KAPA_WEBSITE_ID: process.env.KAPA_WEBSITE_ID,

    DEMO_OPERATOR_SERVER: process.env.DEMO_OPERATOR_SERVER,
    DEMO_OPERATOR_TOKEN: process.env.DEMO_OPERATOR_TOKEN,
    HUBSPOT_DEMO_WORKFLOW_ID: process.env.HUBSPOT_DEMO_WORKFLOW_ID,

    BASIC_AUTH_ENABLED: process.env.BASIC_AUTH_ENABLED,
    BASIC_AUTH_USERNAME: process.env.BASIC_AUTH_USERNAME,
    BASIC_AUTH_PASSWORD: process.env.BASIC_AUTH_PASSWORD,

    DEFAULT_REVALIDATE_TIME: process.env.DEFAULT_REVALIDATE_TIME,

    GROWTH_PLAN_SSO_PRICE_ID: process.env.GROWTH_PLAN_SSO_PRICE_ID,
    GROWTH_PLAN_SSO_SEAT_PRICE: process.env.GROWTH_PLAN_SSO_SEAT_PRICE,
    GROWTH_PLAN_SEAT_PRICE: process.env.GROWTH_PLAN_SEAT_PRICE,

    AWS_CLOUDFRONT_DISTRIBUTION_ID: process.env.AWS_CLOUDFRONT_DISTRIBUTION_ID,
    AWS_REGION: process.env.AWS_REGION,
    AWS_CLOUDFRONT_INVALIDATION_ROLE_ARN:
      process.env.AWS_CLOUDFRONT_INVALIDATION_ROLE_ARN,

    // client
    // @dominik-juriga - find out if these are specific per environment
    NEXT_PUBLIC_SENTRY_DSN: process.env.NEXT_PUBLIC_SENTRY_DSN,
    NEXT_PUBLIC_RECAPTCHA_SITE_KEY: process.env.NEXT_PUBLIC_RECAPTCHA_SITE_KEY,
    NEXT_PUBLIC_PREVENT_UNUSED_FUNCTIONS_ERROR_LOGS:
      process.env.NEXT_PUBLIC_PREVENT_UNUSED_FUNCTIONS_ERROR_LOGS,
    NEXT_PUBLIC_CHARGEBEE_URL: process.env.NEXT_PUBLIC_CHARGEBEE_URL,
    NEXT_PUBLIC_CHARGEBEE_PORTAL: process.env.NEXT_PUBLIC_CHARGEBEE_PORTAL,
    NEXT_PUBLIC_LICENSE_REGISTRY_API_URL:
      process.env.NEXT_PUBLIC_LICENSE_REGISTRY_API_URL,

    // shared
    NODE_ENV: process.env.NODE_ENV,
    APP_ENV: process.env.APP_ENV,
  },
})

// Helpers

function optionalZodBoolean() {
  return z
    .string()
    .toLowerCase()
    .transform((x) => x === "true")
    .pipe(z.boolean())
    .optional()
}