# AI Software Factory — web app environment
# Copy to .env.local and adjust. NEXT_PUBLIC_* values are inlined into the
# browser bundle at build time — never put secrets in NEXT_PUBLIC_ vars.

# Base URL of the NestJS API (see apps/api). No trailing slash.
NEXT_PUBLIC_API_URL=http://localhost:4000/api/v1

# WebSocket endpoint of the realtime service (see apps/realtime).
# The access token is passed as a ?token= query param on connect.
NEXT_PUBLIC_WS_URL=ws://localhost:4001

# Public URL of this web app (used for share links, redirects, CSRF origin).
NEXT_PUBLIC_APP_URL=http://localhost:3000

# Server-side only (used by /api BFF route handlers, if any are added):
# The httpOnly factory_session cookie is set by the API at /auth/login and
# refreshed at /auth/refresh; the web app must never read it from JS.
# API_INTERNAL_URL=http://localhost:4000/api/v1
# SESSION_COOKIE_NAME=factory_session