first commit

.env.example

@@ -0,0 +1,17 @@
+# The API base the browser calls. Keep this a SAME-ORIGIN PATH in development.
+#
+# The session is an HttpOnly, SameSite=Lax cookie. A Lax cookie is not sent on a
+# cross-site request, and a browser treats localhost:5173 and 127.0.0.1:8080 as
+# different sites — so an absolute URL here means every call after login arrives
+# without the cookie and is answered 401. Vite proxies this path instead
+# (see vite.config.js), which makes the cookie first-party.
+VITE_API_BASE_URL=/api/v1
+
+# Where the Vite dev proxy forwards /api and /health. Read by vite.config.js
+# only; never by client code.
+VITE_API_PROXY_TARGET=http://127.0.0.1:8080
+
+# The agent run endpoint Owliver posts to. Same origin, same reason.
+# Leave it empty to run without the assistant: the panel then says so plainly
+# rather than failing at request time.
+VITE_AGENT_API=/api/v1