e83a0d302c
- Overview/Plant tiles and pages share one vehicle bucket rule (blank unit_type = fleet) - Plant landing equipment figures were always 0; hour diffs now reject 0 baselines and >24h/day jumps - km/L limits on plant (and L/h on vehicles) report unit-mismatch instead of false alerts - formatPercent/formatDecimal replace display toFixed (en-ZA) - POST /api/vehicles/[id]/merge + Merge duplicate dialog (dry run first) - Attention links go to equipment vs vehicles by unit type; PO upload view link fixed - Conditional hook fixed in DN document view; ESLint flat config (next lint removed in 16) - Docs: current modules/routes/env vars; login + Ask reports plans Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
85 lines
4.4 KiB
Text
85 lines
4.4 KiB
Text
# PIN gate — change this in production. Exposed to the client because the
|
|
# lock screen validates it locally before talking to PocketBase.
|
|
NEXT_PUBLIC_APP_PIN=2468
|
|
# Server-side copy of the same PIN. The On-site "Needs attention" missed
|
|
# scan-out correction (/api/clock/events/[id]/correct) checks it and
|
|
# returns 503 when unset. Keep it equal to NEXT_PUBLIC_APP_PIN.
|
|
APP_PIN=2468
|
|
|
|
# Brand
|
|
NEXT_PUBLIC_APP_NAME=MEGA INFRASTRUCTURE
|
|
NEXT_PUBLIC_DEFAULT_THEME=light
|
|
|
|
# Local API base URL (the Next.js app's own /api routes — currently a stub)
|
|
NEXT_PUBLIC_API_BASE_URL=http://localhost:3000/api
|
|
|
|
# ── PocketBase ─────────────────────────────────────────────────────────────
|
|
# Public client-side URL. Safe to expose because PocketBase handles
|
|
# auth at the collection-rule level — public reads need a token, the
|
|
# URL alone is not a credential.
|
|
NEXT_PUBLIC_POCKETBASE_URL=https://your-pocketbase.example.com
|
|
|
|
# Server-side only — used by Next.js server components / route handlers
|
|
# to seed data, sync files and run admin operations. NEVER prefix with
|
|
# NEXT_PUBLIC_ or the credentials leak into every browser bundle.
|
|
POCKETBASE_ADMIN_EMAIL=admin@example.com
|
|
POCKETBASE_ADMIN_PASSWORD=change-me
|
|
|
|
# If you have an existing auth token you can paste it here instead of
|
|
# having the server re-authenticate on every cold start. Leave blank
|
|
# to let the server log in with the email + password above.
|
|
POCKETBASE_ADMIN_TOKEN=
|
|
|
|
# ── n8n (Purchase Order ingestion) ──────────────────────────────────────
|
|
# Webhook URL the Next.js server forwards PO uploads to.
|
|
# Server-only (no NEXT_PUBLIC_ prefix) — never exposed to the browser.
|
|
N8N_PO_INGEST_URL=https://n8n.your-host.example/webhook/purchase-order-upload
|
|
|
|
# Shared secret n8n sends in the x-ingest-secret header when calling
|
|
# /api/purchase-orders/ingest. Generate with: openssl rand -hex 32
|
|
N8N_INGEST_SECRET=replace-with-output-of-openssl-rand-hex-32
|
|
|
|
# ── n8n (Delivery Note OCR webhook) ─────────────────────────────────────
|
|
# Same shared secret as above — used by /api/delivery-notes/[id]/ocr-result.
|
|
# The Delivery Note OCR workflow in n8n imports docs/n8n/delivery-note-ocr-workflow.json
|
|
# and calls POST {MEGA_NEXT_URL}/api/delivery-notes/{id}/ocr-result with this header.
|
|
|
|
# ── Delivery-note batch pipeline (Task 10+) ────────────────────────
|
|
# Customer VAT number the pipeline uses to check the printed
|
|
# identity block on every slip. Suppliers print it on every weighbridge
|
|
# ticket; mismatches get marked needs_attention.
|
|
MEGA_CUSTOMER_VAT_NO=4280307796
|
|
|
|
# How many dn_batches rows the /api/dn-batches/tick route claims per
|
|
# cron hit. Tune for your batch size / model latency.
|
|
DN_TICK_BATCH_SIZE=1
|
|
|
|
# Server-only code required by the posted receipt correction form.
|
|
# Use a unique value of at least 12 characters; do not reuse NEXT_PUBLIC_APP_PIN.
|
|
# Generate with: openssl rand -hex 16
|
|
RECEIPT_CORRECTION_SECRET=
|
|
|
|
# Public URL of the n8n instance (used by your local Codex MCP config).
|
|
N8N_MCP_URL=https://wfdash.n8n.apphub.co.za/mcp-server/http
|
|
|
|
# ── AI chat (phase 3) ─────────────────────────────────────────────────────
|
|
# Master switch. The /api/chat route 404s and /dashboard/chat is unreachable
|
|
# unless this is exactly "true". MUST stay unset in production until real
|
|
# authentication exists — the chat reads every site's financials and spends
|
|
# LLM credits for anyone who can reach it.
|
|
ENABLE_CHAT=true
|
|
|
|
# Which provider the chat uses: "anthropic" or "minimax".
|
|
CHAT_PROVIDER=anthropic
|
|
|
|
# Anthropic. Leave unset to use an `ant auth login` profile instead.
|
|
ANTHROPIC_API_KEY=
|
|
|
|
# MiniMax. This must be an Open Platform API key from platform.minimax.io —
|
|
# a Token Plan "Subscription Key" is a different credential and will not work
|
|
# here. Consumer Hailuo / MiniMax Agent subscriptions cannot be used at all.
|
|
MINIMAX_API_KEY=
|
|
MINIMAX_BASE_URL=https://api.minimax.io/v1
|
|
# Verified for both vision AND tool calling on 2026-08-30: MiniMax-M3.
|
|
# MiniMax-M2 / M2.7 accept tools but reject images. M3 supports both.
|
|
MINIMAX_MODEL=MiniMax-M3
|