/// <reference types="vite/client" />

/**
 * The two build-time values that turn on `sso` sign-in in the browser.
 *
 * Both are PUBLIC — an issuer URL and a publishable key — and neither grants
 * anything on its own; the server still revalidates every token against
 * `TERA_AUTH_REVALIDATE_URL`. They are optional, and a build without them keeps
 * the local password form, which is the self-host default.
 */
interface ImportMetaEnv {
  readonly VITE_IDENTITY_URL?: string;
  readonly VITE_IDENTITY_ANON_KEY?: string;
}

interface ImportMeta {
  readonly env: ImportMetaEnv;
}
