Requirements - Streamly

Runtime

Requirement	Version / notes
Node.js	20+
pnpm	Via Corepack (`pnpm@11.9.0` pinned in package)
Supabase	Fresh project; Auth + Postgres
openssl	Generate `TENANT_SECRETS_MASTER_KEY` / cron secret

Account	When required
Supabase	Always
Envato / CodeCanyon	Operator license activation in production (`ENVATO_PERSONAL_TOKEN`)
Resend	Production operator magic-link email (`RESEND_API_KEY`) — required unless demo gate is on
Cloudflare	For Workers deploy and optional Cloudflare for SaaS hostnames
Stripe	When installing `payments.stripe` via Plugins
TMDB	Optional metadata (`TMDB_API_TOKEN`)

Never commit .env.local or .dev.vars. Never expose to the browser:

NEXT_PUBLIC_* values are public build inputs.

Streamly is not a static-only site. Auth, APIs, playback admission, and webhooks need a server runtime.