Configuration

wrangler.jsonc is the canonical source for an instance’s bindings, migrations, secrets, and variables. This page lists everything an instance reads, including the keys contributed by the built-in providers.

Core secrets

Secrets are set at deploy with --secrets-file (never committed to wrangler.jsonc).

Secret	Required	Purpose
SYNC_SHARED_SECRET	Yes	Bearer token guarding every HTTP route. The CLI sends it on every call.
AI_GATEWAY_TOKEN	Yes	AI Gateway token with Run permission, used for extraction.

Core variables

Variables live in the vars block of wrangler.jsonc. Required variables fail fast at runtime if missing or blank; the rest fall back to the listed default.

Variable	Required	Default	Purpose
AI_GATEWAY_ACCOUNT_ID	Yes	—	The account that owns the AI Gateway.
AI_GATEWAY_ID	Yes	—	The AI Gateway name.
FOLLOW_UP_MODEL	Yes	claude-sonnet-4-6	The model id used for follow-up extraction.
SYNC_LOOKBACK_MINUTES	No	10	How far back a scheduled sync looks for updated notes.
INITIAL_BACKFILL_DAYS	No	30	Lookback window for the initial backfill.
FOLLOW_UP_BACKSTOP_LOOKBACK_HOURS	No	48	Window the follow-up backstop cron re-scans.
FOLLOW_UP_BACKFILL_DEFAULT_DAYS	No	30	Default since window for follow-ups backfill.

Note

AI_GATEWAY_TOKEN is a secret; AI_GATEWAY_ACCOUNT_ID and AI_GATEWAY_ID are plain vars. All three are required for extraction. See AI Gateway setup.

Provider configuration

Each provider declares the keys it reads in its configSchema. Only the declared keys are passed to the provider at runtime.

Granola (notes source)

Key	Kind	Required
GRANOLA_API_KEY	secret	Yes
GRANOLA_API_BASE_URL	var	No
GRANOLA_PAGE_SIZE	var	No
GRANOLA_REQUESTS_PER_SECOND	var	No

Linear (follow-up sink)

Key	Kind	Required
LINEAR_API_KEY	secret	Yes
LINEAR_TEAM_ID	var	Yes

Noop (follow-up sink)

No configuration. Empty configSchema.

Bindings

Binding	Type	Class	Source
DB	D1 database	—	core (notewright-db)
FOLLOW_UP_AGENT	Durable Object	FollowUpAgent	core
SPEAKER_CONTEXT_AGENT	Durable Object	SpeakerContextAgent	core
GRANOLA_SYNC_AGENT	Durable Object	GranolaSyncAgent	Granola provider

Migrations

Tag	New SQLite class	Source
v2	FollowUpAgent	core
v3	SpeakerContextAgent	core
granola-v1	GranolaSyncAgent	Granola provider

Do not hand-edit the derived fragment

wrangler.jsonc is canonical. The build derives wrangler.fragment.json from it, and the scaffolder and doctor consume the derived fragment. When changing bindings or migrations, edit wrangler.jsonc and re-derive the fragment; never hand-edit wrangler.fragment.json.

CLI environment

Variable	Purpose
NOTEWRIGHT_URL	Target instance base URL (CI escape hatch, with NOTEWRIGHT_SECRET).
NOTEWRIGHT_SECRET	Shared secret for the target instance.
NOTEWRIGHT_CONFIG_DIR	Override the CLI config directory (used by tests).
NOTEWRIGHT_DISABLE_KEYCHAIN	Set to 1 to force the plain-file secret fallback instead of the OS keychain.

See the CLI overview for how these interact with linked instances and the keychain.