.env.example

OPENAI_API_KEY=
VOICE_DISABLED=0
# Safety approval reviewer for bash/edit/write (1 disables). Wiley runs agent
# work on the gpt-5.6 family only, so a name from an older family is ignored
# here and the default is used instead.
WILEY_APPROVAL_MODEL=gpt-5.6-luna
WILEY_APPROVAL_DISABLED=0

# Wiley Cloud is configured in Settings, not here: the relay base URL lives in
# settings.json and the session token in the secret store, so there is no
# relay variable to set. Bring-your-own key is the default path.

# Optional. The project folder the agent may edit, the SQLite ledger
# directory, and where settings.json plus the secret store live.
# Unset means the app opens the last project you opened, or asks with the
# project picker when there is none. The ledger lives in <project>/.wiley. The
# config directory defaults to the Electron userData path, or ~/.wiley for the
# browser shell.
# WILEY_PROJECT_DIR=
# WILEY_DATA_DIR=
# WILEY_CONFIG_DIR=

# --- Browser shell ---------------------------------------------------------
# The local API is unauthenticated, so the backend binds loopback only. Change
# WILEY_HOST at your own risk and never expose the port to a network.
# WILEY_HOST=127.0.0.1
# WILEY_PORT=5174
# WILEY_WEB_PORT=5173
#
# Secrets typed into a browser tab cross the wire, so only a loopback peer may
# write one. Set this to 1 to lift that check. Do not.
# WILEY_ALLOW_REMOTE_SECRETS=0
#
# Opens the Electron devtools on launch.
# WILEY_DEBUG_RENDERER=0

# WILEY_PROJECT_DIR, WILEY_DATA_DIR, WILEY_HOST, WILEY_PORT and
# WILEY_DEBUG_RENDERER also answer to their old BOARD_AI_ spelling for one more
# release, with a deprecation warning. Nothing else on this list does.

# --- End-to-end scenarios --------------------------------------------------
# Only read by scripts/e2e-*.mjs. These spend tokens; see CONTRIBUTING.md.
# E2E_BACKEND_PORT=5714
# E2E_WEB_PORT=5713
# E2E_STEP_TIMEOUT_MS=600000
# E2E_WORKER_MODEL=haiku

# --- Packaging -------------------------------------------------------------
# `npm run package:mac` signs with the Developer ID identity pinned in
# package.json, which is the maintainer's, and produces a DMG that still shows
# Gatekeeper's warning on another machine. Building it elsewhere means either
# `npm run package:mac:unsigned` (sets CSC_IDENTITY_AUTO_DISCOVERY=false and
# skips signing entirely) or CSC_NAME pointing at your own identity.
#
# `npm run package:mac:notarized` sets WILEY_NOTARIZE=1 and submits to Apple.
# Notarization credentials are NEVER read from this file; export them in the
# shell that runs the build, either as a stored keychain profile:
#
#   xcrun notarytool store-credentials wiley-notary \
#     --apple-id you@example.com --team-id ABCDE12345 \
#     --password <app-specific-password>
#   export APPLE_KEYCHAIN_PROFILE=wiley-notary
#
# or as the three variables directly:
#
#   export APPLE_ID=you@example.com
#   export APPLE_APP_SPECIFIC_PASSWORD=abcd-efgh-ijkl-mnop
#   export APPLE_TEAM_ID=ABCDE12345