fix: ensure environment variables load correctly in dev workflow

- Fix Next.js client env var bundling with t3-oss/env-nextjs v0.7.3
  - Use experimental__runtimeEnv API for client vars
  - Client vars must be explicitly listed for Next.js static analysis
  - Fixes "Invalid environment variables" error in web app

- Ensure .bin/bun wrapper is used in dev script
  - Explicitly add PROJECT_ROOT/.bin to PATH in scripts/dev.sh
  - Ensures .bin/bun wrapper loads Infisical environment variables
  - Fixes issue where direnv hooks don't run in subshells

Author: brandonkachen

packages/internal/src/env.ts

@@ -7,18 +7,30 @@ if (process.env.NEXT_PUBLIC_CB_ENVIRONMENT !== 'prod') {
   console.log('Using environment:', process.env.NEXT_PUBLIC_CB_ENVIRONMENT)
 }
 
-type ServerEnvKey = keyof typeof serverEnvSchema
-type ClientEnvKey = keyof typeof clientEnvSchema
-
-const runtimeEnv = Object.fromEntries([
-  ...Object.keys(serverEnvSchema).map((key) => [key, process.env[key]]),
-  ...Object.keys(clientEnvSchema).map((key) => [key, process.env[key]]),
-]) as Record<ServerEnvKey | ClientEnvKey, string | undefined>
+// Client env vars MUST be explicitly listed for Next.js to inline them
+const clientRuntimeEnv = {
+  NEXT_PUBLIC_CB_ENVIRONMENT: process.env.NEXT_PUBLIC_CB_ENVIRONMENT,
+  NEXT_PUBLIC_CODEBUFF_APP_URL: process.env.NEXT_PUBLIC_CODEBUFF_APP_URL,
+  NEXT_PUBLIC_CODEBUFF_BACKEND_URL:
+    process.env.NEXT_PUBLIC_CODEBUFF_BACKEND_URL,
+  NEXT_PUBLIC_SUPPORT_EMAIL: process.env.NEXT_PUBLIC_SUPPORT_EMAIL,
+  NEXT_PUBLIC_POSTHOG_API_KEY: process.env.NEXT_PUBLIC_POSTHOG_API_KEY,
+  NEXT_PUBLIC_POSTHOG_HOST_URL: process.env.NEXT_PUBLIC_POSTHOG_HOST_URL,
+  NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY:
+    process.env.NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY,
+  NEXT_PUBLIC_STRIPE_CUSTOMER_PORTAL:
+    process.env.NEXT_PUBLIC_STRIPE_CUSTOMER_PORTAL,
+  NEXT_PUBLIC_LINKEDIN_PARTNER_ID: process.env.NEXT_PUBLIC_LINKEDIN_PARTNER_ID,
+  NEXT_PUBLIC_GOOGLE_SITE_VERIFICATION_ID:
+    process.env.NEXT_PUBLIC_GOOGLE_SITE_VERIFICATION_ID,
+  NEXT_PUBLIC_WEB_PORT: process.env.NEXT_PUBLIC_WEB_PORT,
+}
 
 const envSchema = {
   server: serverEnvSchema,
   client: clientEnvSchema,
-  runtimeEnv,
+  // Only expose NEXT_PUBLIC_* values here; server secrets stay in process.env.
+  experimental__runtimeEnv: clientRuntimeEnv,
 }
 let envTemp
 try {

scripts/dev.sh

@@ -1,5 +1,12 @@
 #!/bin/bash
 
+# Get the project root directory
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
+
+# Ensure .bin/bun is in PATH first so environment variables are loaded
+export PATH="$PROJECT_ROOT/.bin:$PATH"
+
 # Enable job control and set up trap for cleanup
 set -m
 READY_FILE="/tmp/codebuff_server_ready_$$"