Configuration

What the desktop app reads at runtime and where user settings live.

Configuration

CodeVetter is a local desktop app. There are no server-side environment variables in the product. The only env var the desktop app reads is DEBUG_TAURI_DRIVER (see .env.example). Everything else is user-entered in the Settings tab and persisted via Tauri preferences.

The old docs/archive/stale-configuration-2026-04.md described Cloudflare Workers / GitHub OAuth / D1 / dashboard env vars. None of that is in the product anymore — see stale-configuration-2026-04.md. Do not re-add those env vars.

Desktop app runtime

Setting	Where	Notes
`DEBUG_TAURI_DRIVER`	`.env` (optional)	Debug flag for the (removed) tauri-driver path; kept for compatibility.
LLM provider keys	Settings tab → Tauri preferences	Anthropic / OpenAI / OpenRouter. Never written to SQLite review tables.
`gatewayBaseUrl`, `gatewayApiKey`, `gatewayModel`	`codevetter_review_config` (localStorage) mirrored to Tauri preferences	`ReviewConfig` in `apps/desktop/src/lib/review-service.ts`.
`reviewTone`, `customRules`, `activeStandardsPack`, `standardsPacks`	same	Standards packs authored in `/rubrics`.
Auto-updater pubkey + endpoint	`apps/desktop/src-tauri/tauri.conf.json`	`@tauri-apps/plugin-updater` consumes `latest.json` from GitHub Releases.

CSP

tauri.conf.json pins:

default-src 'self'; script-src 'self';
connect-src 'self' https://api.codevetter.com https://api.github.com;
style-src 'self' 'unsafe-inline'; img-src 'self' https: data:

The only network egress from the product is the user-supplied LLM provider and api.github.com for PR reads. api.codevetter.com is reserved for landing-page proxy concerns, not the desktop app.

Build / bundle configuration

File	Purpose
`apps/desktop/vite.config.ts`	Vite build; `outDir` is `out` (not `dist`) — this bit us during the CF Pages reconfig, see knowledge/failed-approaches.md.
`apps/desktop/src-tauri/tauri.conf.json`	Tauri window, CSP, updater, bundle targets, `beforeBuildCommand`. Version bump here triggers `auto-release.yml`.
`apps/desktop/playwright.config.ts`	Playwright e2e config.
`biome.json`	Linter/formatter (root).
`tsconfig.json`	Shared TS config.
`apps/landing-page-astro/astro.config.mjs`	Astro static export.
`apps/landing-page-astro/wrangler.toml` / `wrangler.worker.jsonc`	Cloudflare Pages / Worker config for the landing page.

CI / deployment secrets (GitHub Actions only, not in the product)

These are repo-level GitHub Actions secrets, not desktop-app config:

CLOUDFLARE_API_TOKEN — used by deploy-landing.yml.
APPLE_* signing/notarization secrets — used by release.yml.
GITHUB_TOKEN — used by auto-release.yml to cut releases and dispatch release.yml.

See operations/release-pipeline.md and operations/landing-deploy.md.