.env.example

# Copy this file to `.env` and fill in real values.
# `.env` is gitignored — never commit real secrets.

# ─── App backend ──────────────────────────────────────────────
REACT_APP_URL=
REACT_APP_LOCALURL=
REACT_AGENT_APP_LOCALURL=
REACT_APP_MARKETPLACE_URL=

# ─── Hosted login (Supabase Auth) ─────────────────────────────
# Optional overrides. By default, ORGII uses the public OSS Supabase project.
# Set these only when running a fork/self-hosted auth project.
# Hosted login is temporarily disabled by default. Set to true to show it.
REACT_APP_HOSTED_LOGIN_ENABLED=false
REACT_APP_SUPABASE_URL=
REACT_APP_SUPABASE_PUBLISHABLE_KEY=
REACT_APP_SUPABASE_OAUTH_SCOPES=read:user user:email

# ─── Tauri updater signing (minisign keypair) ─────────────────
# Generate with: npx @tauri-apps/cli signer generate -w ~/.tauri/orgii.key
TAURI_SIGNING_PRIVATE_KEY=
TAURI_SIGNING_PRIVATE_KEY_PASSWORD=

# ─── LLM provider keys (dev only) ─────────────────────────────
VITE_OPENAI_API_KEY=
VITE_AZURE_OPENAI_ENDPOINT=
VITE_AZURE_OPENAI_API_KEY=

# ─── Apple code signing & notarization (macOS release builds) ─
# APPLE_ID: your Apple Developer account email
# APPLE_PASSWORD: app-specific password from appleid.apple.com
#                 (format: xxxx-xxxx-xxxx-xxxx)
# APPLE_TEAM_ID:  10-character team identifier (public, baked into every signed build)
# Note: signingIdentity is set in src-tauri/tauri.conf.json (public, baked into signature)
APPLE_ID=
APPLE_PASSWORD=
APPLE_TEAM_ID=