.env.example

# ==============================================
# RELAY CORE - Environment Configuration
# ==============================================
# Copy this file to .env and fill in your values
# Last Updated: 2026-01-19

# ==============================================
# SUPABASE CONFIGURATION (REQUIRED)
# ==============================================
# Get these from: https://supabase.com/dashboard/project/_/settings/api

# Frontend (Vite) - Public keys safe to expose
VITE_SUPABASE_URL=https://your-project-id.supabase.co
VITE_SUPABASE_ANON_KEY=your-anon-key-here

# Backend - Service role key (KEEP SECRET!)
SUPABASE_URL=https://your-project-id.supabase.co
SUPABASE_SERVICE_ROLE_KEY=your-service-role-key-here

# ==============================================
# CRONOS NETWORK CONFIGURATION (REQUIRED)
# ==============================================

# Network Selection
# Options: testnet, mainnet
CRONOS_NETWORK=testnet

# RPC Endpoints
# Testnet: https://evm-t3.cronos.org
# Mainnet: https://evm.cronos.org
CRONOS_RPC_URL=https://evm-t3.cronos.org
CRONOS_RPC_PRIMARY=https://evm-t3.cronos.org
CRONOS_RPC_FALLBACK_1=https://cronos-testnet-3.crypto.org:8545
CRONOS_RPC_FALLBACK_2=

# Cronos zkEVM RPC (Chain ID: 388 mainnet, 240 testnet)
CRONOS_ZKEVM_RPC=https://testnet-zkevm.cronos.org

# Frontend RPC (for wallet connections)
VITE_CRONOS_RPC_URL=https://evm-t3.cronos.org

# ==============================================
# CRYPTO.COM DEVELOPER PLATFORM SDK (REQUIRED)
# ==============================================
# Get your API key from: https://developer.crypto.com/
# Single key works for ALL Cronos networks (EVM + zkEVM, testnet + mainnet)

DEVELOPER_PLATFORM_API_KEY=your-api-key-here

# Default network for SDK operations
# Options: cronos-evm-mainnet, cronos-evm-testnet, cronos-zkevm-mainnet, cronos-zkevm-testnet
CRONOS_DEFAULT_NETWORK=cronos-evm-testnet

# ==============================================
# CRONOS EXPLORER API KEYS (OPTIONAL)
# ==============================================
# For contract verification on block explorers
# Get keys from:
# - EVM: https://cronoscan.com/myapikey
# - zkEVM: https://explorer.zkevm.cronos.org

CRONOS_EXPLORER_API_KEY=
CRONOS_EXPLORER_API_KEY_TESTNET=
CRONOS_EXPLORER_API_KEY_MAINNET=
CRONOS_ZKEVM_API_KEY=

# ==============================================
# RELAY CORE WALLET CONFIGURATION (REQUIRED)
# ==============================================
# Wallet address that owns/operates the Relay Core service
# This is used for session management and escrow operations

WALLET_ADDRESS=0xYourRelayWalletAddress

# Private keys for signing operations (KEEP SECRET!)
# WARNING: Never use your personal wallet's private key
# Generate dedicated keys for each service

# For escrow agent operations
ESCROW_AGENT_PRIVATE_KEY=0xYourEscrowAgentPrivateKey

# For general wallet operations (fallback)
WALLET_PRIVATE_KEY=0xYourWalletPrivateKey

# For trade execution
EXECUTOR_PRIVATE_KEY=0xYourExecutorPrivateKey

# For contract deployment
DEPLOYER_PRIVATE_KEY=0xYourDeployerPrivateKey

# ==============================================
# CONTRACT ADDRESSES (REQUIRED)
# ==============================================

# ERC-8004 Registries (Cronos Testnet - Chain 338)
IDENTITY_REGISTRY_ADDRESS=0x4b697D8ABC0e3dA0086011222755d9029DBB9C43
REPUTATION_REGISTRY_ADDRESS=0xdaFC2fA590C5Ba88155a009660dC3b14A3651a67
VALIDATION_REGISTRY_ADDRESS=0x0483d030a1B1dA819dA08e2b73b01eFD28c67322

# Frontend versions (same addresses)
VITE_IDENTITY_REGISTRY_ADDRESS=0x4b697D8ABC0e3dA0086011222755d9029DBB9C43
VITE_REPUTATION_REGISTRY_ADDRESS=0xdaFC2fA590C5Ba88155a009660dC3b14A3651a67
VITE_VALIDATION_REGISTRY_ADDRESS=0x0483d030a1B1dA819dA08e2b73b01eFD28c67322

# Escrow Contract (Deploy your own or use existing)
ESCROW_CONTRACT_ADDRESS=0x9D340a67ddD4Fcf5eC590b7B67e1fE8d020F7D61
ESCROW_CONTRACT_DEPLOY_BLOCK=0

# USDC Token Address (devUSDC.e on Cronos Testnet)
USDC_TOKEN_ADDRESS=0xc01efAaF7C5C61bEbFAeb358E1161b537b8bC0e0
USDC_ADDRESS=0xc01efAaF7C5C61bEbFAeb358E1161b537b8bC0e0
VITE_USDCE_CONTRACT=0xc01efAaF7C5C61bEbFAeb358E1161b537b8bC0e0
VITE_USDC_DECIMALS=6

# ==============================================
# CRYPTO.COM X402 PAYMENT PROTOCOL (REQUIRED)
# ==============================================
# Official x402 Facilitator (no API key needed)
# Docs: https://docs.crypto.com/x402

VITE_X402_FACILITATOR_URL=https://facilitator.cronoslabs.org/v2/x402
X402_FACILITATOR_ADDRESS=0x84D2EF0545514BF121d81769d8E94b94770670Ef

# ==============================================
# PYTH NETWORK PRICE FEEDS (REQUIRED)
# ==============================================
# Docs: https://docs.pyth.network/price-feeds

# Pyth Contract on Cronos Testnet
VITE_PYTH_CONTRACT=0x36825bf3Fbdf5a29E2d5148bfe7Dcf7B5639e320

# Pyth Hermes API (no API key needed for public endpoints)
VITE_PYTH_HERMES_URL=https://hermes.pyth.network

# ==============================================
# DEX INTEGRATIONS (OPTIONAL)
# ==============================================

# VVS Finance (requires client ID from Discord)
# Discord: https://discord.gg/vvsfinance
VITE_VVS_API_CLIENT_ID_338=
VITE_VVS_API_CLIENT_ID_25=

# Moonlander DEX
VITE_MOONLANDER_ADDRESS=0xE6F6351fb66f3a35313fEEFF9116698665FBEeC9

# GMX V2 (Update when deployed on Cronos)
VITE_GMX_EXCHANGE_ROUTER=0x0000000000000000000000000000000000000000
VITE_GMX_READER=0x0000000000000000000000000000000000000000

# Fulcrom Finance (Update with actual addresses)
VITE_FULCROM_TRADING=0x0000000000000000000000000000000000000001
VITE_FULCROM_STORAGE=0x0000000000000000000000000000000000000002
VITE_FULCROM_CALLBACKS=0x0000000000000000000000000000000000000003

# ==============================================
# WALLETCONNECT / REOWN (OPTIONAL)
# ==============================================
# Get project ID from: https://cloud.walletconnect.com/

VITE_WALLETCONNECT_PROJECT_ID=

# ==============================================
# TELEGRAM BOT (OPTIONAL)
# ==============================================
# Get bot token from @BotFather on Telegram
# Docs: https://core.telegram.org/bots/tutorial

TELEGRAM_BOT_TOKEN=
WEBHOOK_DOMAIN=https://your-domain.com

# ==============================================
# ANTHROPIC CLAUDE API (REQUIRED FOR AI)
# ==============================================
# Get API key from: https://console.anthropic.com/
# Docs: https://docs.anthropic.com/

ANTHROPIC_API_KEY=sk-ant-your-api-key-here

# ==============================================
# CHROMA CLOUD (VECTOR DATABASE FOR RAG)
# ==============================================
# Get credentials from: https://www.trychroma.com/
# Used for semantic search over documentation

CHROMA_API_KEY=ck-your-chroma-api-key-here
CHROMA_TENANT=your-tenant-id-here
CHROMA_DATABASE=relaycore

# ==============================================
# OPENAI API (FOR EMBEDDINGS)
# ==============================================
# Get API key from: https://platform.openai.com/api-keys
# Used by RAG service to generate embeddings for semantic search

OPENAI_API_KEY=sk-proj-your-openai-api-key-here

# ==============================================
# IPFS / PINATA (OPTIONAL)
# ==============================================
# Get API keys from: https://app.pinata.cloud/developers/api-keys
# SECURITY: Backend-only (no VITE_ prefix)

PINATA_API_KEY=
PINATA_SECRET_KEY=
PINATA_JWT=

# ==============================================
# RELAY CORE SERVICE CONFIGURATION
# ==============================================

# Relay Core Agent ID (registered on IdentityRegistry)
RELAY_CORE_AGENT_ID=1

# Validator Address (for high-value trade validation)
VALIDATOR_ADDRESS=0xYourValidatorAddress

# Payment Recipient Address
PAYMENT_RECIPIENT_ADDRESS=0xYourPaymentRecipientAddress

# API Configuration
RELAY_CORE_API_URL=http://localhost:4001
RELAY_CORE_API_SECRET=your-api-secret-here
PORT=4001
PUBLIC_HOST=http://localhost:4001

# ==============================================
# INDEXER CONFIGURATION
# ==============================================

# Starting block for indexing (0 = from genesis)
INDEXER_START_BLOCK=0

# ==============================================
# CACHING & MONITORING (OPTIONAL)
# ==============================================

# Redis (for caching & reputation engine)
REDIS_URL=redis://localhost:6379

# Sentry (for error tracking)
SENTRY_DSN=

# ==============================================
# SECURITY NOTES
# ==============================================
#
# PRODUCTION DEPLOYMENT:
#
# 1. NEVER commit .env files to version control
#    - Add .env* to .gitignore (except .env.example)
#
# 2. NEVER store private keys in .env files in production
#    - Use AWS Secrets Manager / KMS
#    - Use hardware wallets for signing
#    - Use AWS Nitro Enclaves for secure key management
#
# 3. Use environment-specific configurations:
#    - Development: .env.local
#    - Staging: .env.staging
#    - Production: Use cloud provider's secret management
#
# 4. Rotate API keys regularly
#
# 5. Use Supabase RLS policies for all database access
#
# 6. Enable rate limiting on all public endpoints
#
# 7. Set up proper CORS headers
#
# ==============================================

# ============================================
# x402 Session Configuration
# ============================================
# Relay wallet that receives user session deposits
# Users send USDC here to fund their sessions
# For production: Use a dedicated wallet you control
# For testing: Can use any wallet address
RELAY_WALLET_ADDRESS=YOUR_RELAY_WALLET_ADDRESS_HERE

# Private key for Relay wallet (REQUIRED for production)
# Used to sign x402 payments to agents from session funds
# KEEP THIS SECURE - Never commit to git
# For testing: Leave empty, payments won't be executed
RELAY_PRIVATE_KEY=


# ============================================
# x402 Session Configuration
# ============================================
# Relay wallet that receives user session deposits
# Users send USDC here to fund their sessions
# For production: Use a dedicated wallet you control
# For testing: Can use any wallet address
RELAY_WALLET_ADDRESS=YOUR_RELAY_WALLET_ADDRESS_HERE

# Private key for Relay wallet (REQUIRED for production)
# Used to sign x402 payments to agents from session funds
# KEEP THIS SECURE - Never commit to git
# For testing: Leave empty, payments won't be executed
RELAY_PRIVATE_KEY=