# Which CMS the dev server talks to: # live (default) - proxy everything to CMS_TARGET (page HTML is fetched server-side and the editor is injected) # mock - fully offline: in-memory CMS + fixture page (same as `npm run dev:mock`) CMS_MODE=live CMS_TARGET=https://k6n.net # Auth for the dev proxy. The proxy adds these to every upstream request, so the # secret never reaches the browser or the bundle. Use ONE of: # CMS_TOKEN - an OIDC/device-flow JWT -> Authorization: Bearer # CMS_API_KEY - a minted key with write scope -> X-API-Key: # CMS_COOKIE - the admin session cookie string -> Cookie: # Easiest: log in to the backoffice, copy `accessToken` from localStorage['auth.tokens']. CMS_TOKEN= CMS_API_KEY= CMS_COOKIE= # Location of the shared @k6n/cms-editor package sources (EditClient, morph, markdown editor). CMS_EDITOR_SRC=../ecommerce/backoffice/web/packages/cms-editor/src