# apps/web environment variables
# Copy to .env.local and fill in the real values.
# NEVER commit .env.local — it is gitignored.

# PostHog cloud analytics — project "Default project" id 161685, org "Egzakta"
# Required for DAY0-04 (≥ 5 distinct onboarding_complete in 24h post-launch).
# The REAL phc_* key is pasted into apps/web/.env.local at Wave 1 / P2b
# and is BAKED INTO THE TAURI BUNDLE at P4-win compile time — if missing
# at build moment, the shipped binary has PostHog as a permanent no-op.
# Local SQLite telemetry (packages/core/src/telemetry.ts) continues alongside.
VITE_POSTHOG_KEY=phc_REPLACE_ME

# PR7b Auth — Clerk publishable key (shared instance with apps/www). Public-safe by
# design (ships in the client bundle); the SECRET key is server-side only and is NOT
# used by the desktop SPA (the local sidecar authorizes with its device token, not a
# Clerk JWT). Absent → /auth degrades to the accountless local-first state (honest).
# Like VITE_POSTHOG_KEY, this is baked into the Tauri bundle at compile time.
# Leave BLANK/commented here: the key is shape-validated (isPublishableKey), so a
# non-empty placeholder would be rejected anyway — but shipping it blank guarantees a
# verbatim copy degrades to the honest accountless state, never a crash.
# VITE_CLERK_PUBLISHABLE_KEY=