# =============================================================================
# Backend Server
# =============================================================================
BACKEND_PORT=8324

GOOGLE_OAUTH_CLIENT_ID=your-google-oauth-client-id.apps.googleusercontent.com
GOOGLE_OAUTH_CLIENT_SECRET=your-google-oauth-client-secret

# =============================================================================
# macOS Code Signing & Notarization (required for ./scripts/build-app.sh --publish)
# =============================================================================
APPLE_ID=your-apple-id@example.com
APPLE_APP_SPECIFIC_PASSWORD=xxxx-xxxx-xxxx-xxxx
APPLE_TEAM_ID=ABCDE12345

# =============================================================================
# GitHub Releases (required for --publish)
# =============================================================================
GH_TOKEN=ghp_your-github-personal-access-token

# =============================================================================
# Telegram MCP (app-level credentials, NOT per-user)
# =============================================================================
# Register an app once at https://my.telegram.org/apps (Platform: Desktop).
# These identify OpenSwarm itself to Telegram; end users sign in with their
# own phone + OTP, never these values. Per Telegram TOS keep the hash secret —
# never commit it. Rotate via the same page if it ever leaks.
OPENSWARM_TELEGRAM_API_ID=
OPENSWARM_TELEGRAM_API_HASH=

# =============================================================================
# Spotify MCP (app-level credentials, NOT per-user)
# =============================================================================
# Register an app once at https://developer.spotify.com/dashboard with the
# Web API enabled. Redirect URI must be EXACTLY:
#   http://127.0.0.1:8324/api/tools/credentials/spotify/callback
# These identify OpenSwarm itself; end users sign in to their own Spotify
# accounts through this app via the Connect button. Per Spotify TOS keep
# the secret out of source control.
OPENSWARM_SPOTIFY_CLIENT_ID=
OPENSWARM_SPOTIFY_CLIENT_SECRET=