Runtime configuration

Deployment-specific values are supplied through Nuxt runtime configuration (nuxt.config.ts maps environment variables into runtimeConfig).

Do not commit .env files with real secrets. This documentation intentionally does not enumerate every secret name—use nuxt.config.ts and server/plugins/init.ts as the checklist for required strength (session secret length, encryption key length, production email-console guardrails, etc.).

Connector OAuth client identifiers, MCP base URLs, and managed OAuth redirect URIs all resolve through the same runtime layer; config/connectors.json declares which configKey names tie JSON metadata to runtime fields.

Optional product analytics hooks exist in server/utils/posthog.ts when keys are present—treat them like any other third-party credential.