moving

apps/web/.env.example

@@ -0,0 +1,21 @@
+# apps/web environment variables
+# Copy to .env.local and fill in the real values.
+# NEVER commit .env.local — it is gitignored.
+
+# PostHog cloud analytics — project "Default project" id 161685, org "Egzakta"
+# Required for DAY0-04 (≥ 5 distinct onboarding_complete in 24h post-launch).
+# The REAL phc_* key is pasted into apps/web/.env.local at Wave 1 / P2b
+# and is BAKED INTO THE TAURI BUNDLE at P4-win compile time — if missing
+# at build moment, the shipped binary has PostHog as a permanent no-op.
+# Local SQLite telemetry (packages/core/src/telemetry.ts) continues alongside.
+VITE_POSTHOG_KEY=phc_REPLACE_ME
+
+# PR7b Auth — Clerk publishable key (shared instance with apps/www). Public-safe by
+# design (ships in the client bundle); the SECRET key is server-side only and is NOT
+# used by the desktop SPA (the local sidecar authorizes with its device token, not a
+# Clerk JWT). Absent → /auth degrades to the accountless local-first state (honest).
+# Like VITE_POSTHOG_KEY, this is baked into the Tauri bundle at compile time.
+# Leave BLANK/commented here: the key is shape-validated (isPublishableKey), so a
+# non-empty placeholder would be rejected anyway — but shipping it blank guarantees a
+# verbatim copy degrades to the honest accountless state, never a crash.
+# VITE_CLERK_PUBLISHABLE_KEY=