dicklesworthstone/pi_agent_rust/firecrawl-multi-env-setup

config/
├── firecrawl/
│   ├── base.json           # Shared config
│   ├── development.json    # Dev overrides
│   ├── staging.json        # Staging overrides
│   └── production.json     # Prod overrides

{
  "timeout": 30000,
  "retries": 3,
  "cache": {
    "enabled": true,
    "ttlSeconds": 60
  }
}

{
  "apiKey": "${FIRECRAWL_API_KEY}",
  "baseUrl": "https://api-sandbox.firecrawl.com",
  "debug": true,
  "cache": {
    "enabled": false
  }
}

{
  "apiKey": "${FIRECRAWL_API_KEY_STAGING}",
  "baseUrl": "https://api-staging.firecrawl.com",
  "debug": false
}

{
  "apiKey": "${FIRECRAWL_API_KEY_PROD}",
  "baseUrl": "https://api.firecrawl.com",
  "debug": false,
  "retries": 5
}

// src/firecrawl/config.ts
import baseConfig from '../../config/firecrawl/base.json';
type Environment = 'development' | 'staging' | 'production';
function detectEnvironment(): Environment {
  const env = process.env.NODE_ENV || 'development';
  const validEnvs: Environment[] = ['development', 'staging', 'production'];
  return validEnvs.includes(env as Environment)
    ? (env as Environment)
    : 'development';
}
export function getFireCrawlConfig() {
  const env = detectEnvironment();
  const envConfig = require(`../../config/firecrawl/${env}.json`);
  return {
    ...baseConfig,
    ...envConfig,
    environment: env,
  };
}

# .env.local (git-ignored)
FIRECRAWL_API_KEY=sk_test_dev_***

env:
  FIRECRAWL_API_KEY: ${{ secrets.FIRECRAWL_API_KEY_${{ matrix.environment }} }}

# AWS Secrets Manager
aws secretsmanager get-secret-value --secret-id firecrawl/production/api-key
 
# GCP Secret Manager
gcloud secrets versions access latest --secret=firecrawl-api-key
 
# HashiCorp Vault
vault kv get -field=api_key secret/firecrawl/production

// Prevent production operations in non-prod
function guardProductionOperation(operation: string): void {
  const config = getFireCrawlConfig();
  if (config.environment !== 'production') {
    console.warn(`[firecrawl] ${operation} blocked in ${config.environment}`);
    throw new Error(`${operation} only allowed in production`);
  }
}
// Usage
async function deleteAllData() {
  guardProductionOperation('deleteAllData');
  // Dangerous operation here
}

const featureFlags: Record<Environment, Record<string, boolean>> = {
  development: {
    newFeature: true,
    betaApi: true,
  },
  staging: {
    newFeature: true,
    betaApi: false,
  },
  production: {
    newFeature: false,
    betaApi: false,
  },
};

const env = getFireCrawlConfig();
console.log(`Running in ${env.environment} with ${env.baseUrl}`);