Sync export fidelity fixes + more AI providers

.env.example

@@ -0,0 +1,67 @@
+# Copy to editor/.env and fill in. editor/.env is gitignored — never commit real keys.
+
+# --- Auth: Clerk (optional). With BOTH keys set, the app shows a login gate and every project/asset/
+# export is scoped to the signed-in user. Without them, local dev runs as a single "dev_user" (no login).
+# Create a free app at https://clerk.com → API keys, then set ALL THREE below:
+#   - VITE_CLERK_PUBLISHABLE_KEY → the publishable key, VITE_-prefixed for the browser (the login UI)
+#   - CLERK_PUBLISHABLE_KEY      → the SAME publishable key, un-prefixed for the backend middleware
+#   - CLERK_SECRET_KEY           → the secret key (server-only; verifies sessions)
+# VITE_CLERK_PUBLISHABLE_KEY=pk_test_xxx
+# CLERK_PUBLISHABLE_KEY=pk_test_xxx
+# CLERK_SECRET_KEY=sk_test_xxx
+
+# --- Primary LLM: Kimi (Moonshot). Powers the AI agent, scene generation and script writing. ---
+KIMI_API_KEY=sk-xxx
+KIMI_BASE_URL=https://api.moonshot.ai/v1
+
+# --- Cheapest LLM option: DeepInfra (serverless open models — Llama/Qwen, pay-per-token, no token cap). ---
+# Optional. Set this to make the open models appear in the model switcher (and you can drop Groq entirely,
+# since DeepInfra also serves Whisper STT). Get a key at https://deepinfra.com.
+# DEEPINFRA_API_KEY=di-xxx
+
+# --- Database (optional): Postgres for project storage. With DATABASE_URL set, project manifests are
+# stored in a `projects` table (jsonb) scoped by Clerk user id instead of JSON files on disk. Without
+# it, projects are JSON files under public/projects/ (fine for local dev / small beta). Media files
+# (assets/audio) still live on disk for now either way. Use a free Neon (neon.tech) or Supabase db. ---
+# DATABASE_URL=postgresql://user:password@host:5432/dbname?sslmode=require
+
+# --- Object storage (optional): S3-compatible bucket for project media (assets/audio). With these set,
+# uploads go to the bucket and media is served via short-lived signed URLs (private). Without them,
+# media stays on local disk and is served by the authenticated /media route. Works with Cloudflare R2
+# (recommended — zero egress), AWS S3, or MinIO. For R2: S3_REGION=auto, endpoint = your R2 S3 API URL. ---
+# S3_ENDPOINT=https://<accountid>.r2.cloudflarestorage.com
+# S3_BUCKET=motion-graphics-media
+# S3_ACCESS_KEY_ID=xxx
+# S3_SECRET_ACCESS_KEY=xxx
+# S3_REGION=auto
+
+# --- Credits & billing ---
+# Every signed-in user has a CREDIT BALANCE (stored in Clerk metadata). New users start with FREE_CREDITS;
+# every AI action + export debits credits; at 0 they must buy more. The cap is enforced whenever Clerk
+# auth is ON (above) — independent of Stripe — so your API tokens are protected even before payments.
+# Stripe is only needed to SELL top-ups (one-time Checkout). No Stripe products needed — packs use an
+# inline price; just set the secret + webhook (point it at POST /api/billing/webhook).
+# FREE_CREDITS=100                          # credits each new user gets (default 100)
+# STRIPE_SECRET_KEY=sk_test_xxx             # enables buying credit packs
+# STRIPE_WEBHOOK_SECRET=whsec_xxx           # verifies the payment webhook
+# APP_URL=https://your-domain.com           # public origin for Stripe return URLs + the phone-upload QR
+# UNLIMITED_CREDITS=1                       # local dev / disable the cap entirely (omit in production)
+# ADMIN_USER_IDS=user_xxx,user_yyy          # exempt specific accounts from the cap (e.g. YOUR own id)
+
+# --- Groq: kept for Whisper speech-to-text + TTS only (audio-priced, not token-capped). ---
+# Its LLMs were removed (free-tier daily token cap). Keep this key for transcription, OR remove it
+# and set DEEPINFRA_API_KEY to route STT through DeepInfra Whisper instead.
+GROQ_API_KEY=gsk_xxx
+GROQ_BASE_URL=https://api.groq.com/openai/v1
+
+# --- Abuse prevention, rate limits & ops (all optional) ---
+# Device/account free-quota linking needs Postgres (DATABASE_URL above). It hashes signals with this
+# secret — set a long random value in production (changing it invalidates existing hashes).
+# SIGNALS_SECRET=<a long random string>
+# LINK_BY_IP=1                              # also link accounts by network IP (more catches, more false positives on shared Wi-Fi). Off by default.
+# API_RATE_LIMIT=300                        # max API requests per IP per minute (default 300)
+# AI_RATE_LIMIT=40                          # max AI/render requests per user per minute (default 40)
+# DAILY_SPEND_ALERT_USD=20                  # warn in logs when the day's estimated AI spend crosses this
+# SENTRY_DSN=https://...                    # error tracking (also run: npm i @sentry/node)
+# ENABLE_CSP=1                              # send a Content-Security-Policy (test first — can break embeds)
+# VITE_SUPPORT_EMAIL=support@yourdomain.com # shown on the "wrongly blocked? contact support" link (build-time)