.env.example

# SENT — environment template.
#
# Copy to .env and fill in. The file .env is gitignored; this one is committed
# and must therefore contain NO real values — not an RPC key, not a deployed
# address, not a connection string that points anywhere real.
#
# Every variable here is validated at startup by packages/config/src/env.ts. A
# malformed value stops the process with a message naming the variable, rather
# than becoming a filter that matches nothing.

# --- Database -------------------------------------------------------------
# Required. No default: a default is how a service quietly writes to the wrong
# database.
DATABASE_URL=postgres://sent:sent@localhost:5432/sent
DATABASE_MAX_CONNECTIONS=10
DATABASE_STATEMENT_TIMEOUT_MS=15000

# --- Chain ----------------------------------------------------------------
# HyperEVM mainnet is 999 (V-01, VERIFIED).
RPC_URL=https://rpc.hyperliquid.xyz/evm
CHAIN_ID=999

# Set from the deployment log after running contracts/script/Deploy.s.sol.
# There is no correct default; leaving these unset is better than guessing.
FACTORY_ADDRESS=
REWARD_VAULT_ADDRESS=

# The factory's deployment block. Starting from 0 works and wastes hours.
START_BLOCK=0

# Blocks below the head treated as settled (§335). Must be at least 1: zero
# would let the finalizer treat the chain head as final, and a reorg beneath a
# signed distribution cannot be undone.
CONFIRMATIONS=20

# --- API ------------------------------------------------------------------
API_PORT=8080
API_HOST=0.0.0.0
API_REFRESH_INTERVAL_MS=2000

# Origins allowed to call the API from a browser, comma separated.
#
# §434 puts the web tier on a different hostname from the API, so every request
# the app makes is cross-origin. Bare origins only — a trailing slash never
# matches the Origin header a browser sends.
#
# Unset means no browser may call it, which is the right default for a service
# that also answers bots. There is deliberately no wildcard.
API_ALLOWED_ORIGINS=http://localhost:3000

# --- Web application ------------------------------------------------------
# Read at build time by Next, so these are baked into the client bundle. Only
# ever put values here that are safe to publish — anything secret would be
# shipped to every visitor.
NEXT_PUBLIC_API_URL=http://localhost:8080
NEXT_PUBLIC_REALTIME_URL=ws://localhost:8081
NEXT_PUBLIC_CHAIN_ID=999

# --- Realtime -------------------------------------------------------------
REALTIME_PORT=8081
REALTIME_HOST=0.0.0.0
REALTIME_REPLAY_CAPACITY=8192
REALTIME_HEARTBEAT_MS=30000
REALTIME_FLUSH_MS=50

# --- Deployment (contracts/script/Deploy.s.sol) ---------------------------
# Used only by forge script, never by a running service.
#
# DEPLOYER_PRIVATE_KEY must never be written into this file or any file in the
# repository. Export it in the shell for the single command that needs it.
# DEPLOYER_PRIVATE_KEY=
#
# On chain 999 both of these must be contracts, and must differ (C-08).
GOVERNANCE=
TREASURY=
LAUNCH_FEE=0