.env.example

# QA Touchstone — environment variables (example)
#
# Copy to `.env` for local dev if you need to override defaults:
#   cp .env.example .env
#
# The app works with NONE of these set — every value below has a safe default.
# `.env` is gitignored; never commit real tokens. Secrets (LLM/AWS keys) are
# NOT read from here — they live in the OS keychain / localStorage at runtime.

# ── Frontend (Vite, build-time) ─────────────────────────────────────────────

# Repo used by the in-app "check for update" feature and release-asset links.
# Default: asdfghj1237890/qa-touchstone  (see vite.config.mjs `__GITHUB_REPO__`)
# VITE_GITHUB_REPO=your-org/your-fork

# ── AI egress policy (read by the Rust backend at runtime) ──────────────────
# See src-tauri/src/commands/ai_policy.rs. These enforce an org/CI lockdown that
# the UI cannot override.

# Allow AI features to call external (cloud) providers.
#   "true" or "1" → external AI allowed.
#   unset / anything else → external AI OFF and the privacy selector is LOCKED.
# QA_ALLOW_EXTERNAL_AI=true

# Force a privacy mode regardless of UI selection.
#   "local" → forces "local only" mode (self-managed endpoint only) and locks
#             the selector. Any other value is ignored (UI stays in control).
# QA_AI_PRIVACY=local

# Standard Node mode. The backend reads this via get_process_env (system.rs).
# NODE_ENV=development

# ── Notes ───────────────────────────────────────────────────────────────────
# * Headless CI runner (qa-touchstone-ci) is configured by a SEPARATE family of
#   variables (QA_TOUCHSTONE_CI_*) documented in packages/qa-touchstone-ci and
#   README "Headless CI Runner". They are not needed for desktop dev.
# * The screenshot script reads CHROME_BIN / APP_URL / LOCALE (see
#   scripts/capture-screenshots.mjs).
# * BROWSER and REACT_APP_NODE_ENV may appear in an old local `.env`; they are
#   Create-React-App leftovers and are NOT read anywhere in this Vite codebase.