.env.example

# Copy to .env.local (ignored). `just web` / `just desktop` run the development
# broker as your account whenever BUZZ_DEV_VIEWER is set; leave it empty for
# shell/fixture development without live identity.
# Existing account PUBLIC key only (npub or hex). Private keys remain in Keychain.
BUZZ_DEV_VIEWER=

# Optional macOS signing for `just desktop-bundle`. Use the same certificate
# across rebuilds so Keychain's Always Allow approval can remain valid.
# Find installed certificates with: security find-identity -v -p codesigning
# BUZZ_DEV_SIGNING_IDENTITY="Apple Development: Your Name (XXXXXXXXXX)"

# Optional default for unscoped development-broker calls, not an automatic join.
# Secure origins only; no credentials, paths, query strings, or fragments.
# BUZZ_RELAY_URL=wss://relay.example.com

# Optional: on a fresh dev port, save and select BUZZ_RELAY_URL as a community.
# Only 1 enables it and it requires BUZZ_RELAY_URL. A saved choice on that port,
# including Personal space, wins. Restart the dev server after changing this.
# Production builds ignore it.
# BUZZ_DEV_OPEN_RELAY=1

# Optional: answer the first-run Builderlab account reads (linked key, owned
# and saved communities, backed-up keys) and fake the key link, unlink,
# community save, backup and restore without kgoose or the native uploader, so
# the first-run screens can be walked against a real account whose key binding
# must not change (docs/configuration.md lists exactly what). `unlinked`,
# or a JSON object with optional fields {"npub":"npub1…",
# "communities":["host",…],"known":["host",…],"backups":["npub1…",…],
# "recovery":"nsec1…","backup":"<failure kind>"|"fail-once",
# "unlink":<HTTP status>}. `known` lists the destinations saved to the account. `recovery` is
# the key every restore recovers: use a throwaway key; without it, restore
# answers that recovery is unavailable.
# Dev server only; production builds ignore it. Restart the dev server after
# changing this.
# BUZZ_DEV_FIRST_RUN_ACCOUNT=unlinked

# Optional compatibility aliases for previously saved community IDs.
# Keep the same alias mapped to the same origin to retain existing memberships.
# Values are public configuration included in the frontend bundle, never secrets.
# BUZZ_COMMUNITY_ALIASES='{"primary":"wss://relay.example.com","secondary":"wss://other.example.com"}'

# Optional: pause notifications in this checkout without changing saved choices.
# Only 0 pauses them; unset keeps normal notification behavior and OS permissions.
# Restart the dev server after changing this. Production builds ignore it.
# BUZZ_DEV_NOTIFICATIONS=0

# Optional public Builderlab URL, exposed as import.meta.env.VITE_BUZZ_BUILDERLAB_URL.
# Read by Vite from .env.local or the build process environment (process wins,
# including empty). Defaults to https://app.builderlab.xyz, the built-in sign-in
# server. Another origin, or an empty value, turns that server off when no FI
# servers are added; that build then has no Builderlab sign-in and no native
# grants for the bundled plugin. Live development is the exception for another
# origin: the Builderlab plugin still signs in to it through the development
# broker, but the welcome screen never offers that sign-in. An empty value
# leaves even that unconfigured.
# Packaging embeds the value; changing the launched app's environment has no effect.
# Restart Vite for development changes; rebuild/repackage for distributed apps.
# BUZZ_BUILDERLAB_URL=https://builderlab.example.com

# Exact Apps domain paired with that login origin for native viewer SSO.
# Other deployments supply it at build time; empty keeps browser login.
# BUZZ_BUILDERLAB_APPS_DOMAIN=apps.example.com

# Federated identity (FI) sign-in servers added to the built-in Builderlab one,
# compiled into native code by `just desktop` and `just desktop-bundle`: a
# descriptor or a JSON list of them. Single-quote the JSON. Unset keeps only the
# built-in server; empty opts out of FI. A `tauri dev` run with BUZZ_DEV_VIEWER
# pinned and this unset turns FI off by itself for the development broker, so
# you don't need to set it empty; packaged and standalone builds keep FI on
# whatever the pin. With a descriptor, leave BUZZ_BUILDERLAB_URL empty and
# BUZZ_DEV_VIEWER unset or empty. See
# docs/configuration.md#federated-identity-build-input.
# BUZZ_BUILD_FEDERATED_IDENTITY_CONFIG='{"version":1,"id":"example","identityOrigin":"https://identity.example","communityHosts":["*.communities.example"],"adapterBase":"https://identity.example/nip-fa/","apiBasePath":"/api/goose/"}'

# Optional https URL of a managed plugin policy. The desktop app fetches it and
# keeps the last good copy, recommended when no managed-plugins.json exists. See
# docs/managed-plugins.md#packaged-policy.
# BUZZ_BUILD_MANAGED_PLUGINS_URL=https://plugins.example/managed-plugins.json