.env.example

# === Robinhood Chain Mainnet ===
NEXT_PUBLIC_CHAIN_ID=4663
NEXT_PUBLIC_RPC_URL=https://rpc.mainnet.chain.robinhood.com
NEXT_PUBLIC_EXPLORER=https://robinhoodchain.blockscout.com
NEXT_PUBLIC_UNISWAP_ROUTER=0xCaf681a66D020601342297493863E78C959E5cb2
NEXT_PUBLIC_WETH_ADDRESS=0x0Bd7D308f8E1639FAb988df18A8011f41EAcAD73
NEXT_PUBLIC_USDG_ADDRESS=0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168
# Optional second-hop intermediates for RWA stock tokens (USDG is always included by default)
NEXT_PUBLIC_USDE_ADDRESS=
# Optional override: comma-separated intermediaries (defaults to USDG [+ USDe/USDC if set])
NEXT_PUBLIC_SWAP_INTERMEDIARIES=
NEXT_PUBLIC_UNISWAP_V3_FACTORY=0x1f7d7550B1b028f7571E69A784071F0205FD2EfA
NEXT_PUBLIC_UNISWAP_QUOTER=0xcE7658f1107FbE3dAF3dE62b604185E1FF56a0F8
NEXT_PUBLIC_USDC_ADDRESS=
NEXT_PUBLIC_UNISWAP_V2_FACTORY=0x8bcEaA40B9AcdfAedF85AdF4FF01F5Ad6517937f
NEXT_PUBLIC_UNISWAP_V2_ROUTER=0x89e5DB8B5aA49aA85AC63f691524311AEB649eba
# Universal Router 2.1.1 on Robinhood Chain (4663) — no 2.0 deployment on this chain
NEXT_PUBLIC_UNIVERSAL_ROUTER=0x8876789976decbfcbbbe364623c63652db8c0904
NEXT_PUBLIC_PERMIT2=0x000000000022D473030F116dDEE9F6B43aC78BA3
SWAP_SLIPPAGE_BPS=50
# Dynamic minOut: max(configured, impactBps + buffer), capped per kind
SWAP_SLIPPAGE_IMPACT_BUFFER_BPS=50
SWAP_SLIPPAGE_CEILING_DEFAULT_BPS=300
SWAP_SLIPPAGE_CEILING_STOCK_BPS=500
# Route discovery cache + RPC resilience
ROUTE_CACHE_TTL_MS=45000
RPC_RETRY_MAX=3
RPC_RETRY_BASE_MS=120
# Worker liquidity census interval (ms)
LIQUIDITY_SNAPSHOT_MS=900000
LIQUIDITY_PROBE_ETH=0.005
LIQUIDITY_AMBER_DEPTH_MULT=3

# Uniswap Trading API (classic V2/V3/V4 routing on chain 4663)
# Create a key at https://developers.uniswap.org — do not commit the real key.
UNISWAP_API_KEY=
UNISWAP_TRADING_API_URL=https://trade-api.gateway.uniswap.org/v1
# Set to 0/false to force on-chain v2/v3 discovery only
ENABLE_TRADING_API_ROUTING=1
# Robinhood Chain defaults to 2.1.1; override only if needed
UNISWAP_UNIVERSAL_ROUTER_VERSION=2.1.1
TRADING_API_TIMEOUT_MS=12000
TRADING_API_CACHE_TTL_MS=20000
TRADING_API_MAX_RPS=6
# RFQ Dutch V3 (requires PolicyExecutor with ERC-1271). Off by default.
ENABLE_UNISWAPX_ROUTING=0
UNISWAPX_MIN_ETH=0.1
NEXT_PUBLIC_UNISWAPX_REACTOR=0x000000007a1C8E575011eEdf86a2A35593013CbA
# Hard cap (max 6). Cached quotes do not count.
TRADING_API_MAX_RPS=6

# Contract addresses — filled after forge deploy
NEXT_PUBLIC_REGISTRY_ADDRESS=
NEXT_PUBLIC_POLICY_EXECUTOR_ADDRESS=
NEXT_PUBLIC_OLD_POLICY_EXECUTOR_ADDRESS=
NEXT_PUBLIC_ETH_SINK_ADDRESS=
NEXT_PUBLIC_RNODE_TOKEN_ADDRESS=
DCA_WORKER_LEASE_MS=180000

# === Phase 4: RWA agent layer ===
# Morpho "Steakhouse USDG" ERC-4626 vault for yield routing.
# NOTE: this vault's maxDeposit/maxMint return 0 — never gate on them.
NEXT_PUBLIC_MORPHO_USDG_VAULT=0xBeEff033F34C046626B8D0A041844C5d1A5409dd
# Yield routing off until the upgraded PolicyExecutor is deployed + smoke-tested.
ENABLE_YIELD_ROUTING=false
# Corporate-action reconciliation (report-only). ERC-8056 tokens do not exist yet.
ENABLE_CORPORATE_ACTIONS=false
# Default session window for RWA agents: any | off_hours | weekend | rth
RWA_DEFAULT_SESSION_WINDOW=off_hours

# WalletConnect / Reown (optional). Leave as demo for local MetaMask/injected.
# For WalletConnect QR: create a project at https://cloud.reown.com and allowlist your origin
NEXT_PUBLIC_WC_PROJECT_ID=demo

# Server secrets
SESSION_SECRET=change-me-to-a-long-random-string-at-least-32-chars
DATABASE_URL="file:./dev.db"
LLM_BASE_URL=https://openrouter.ai/api/v1
LLM_API_KEY=
LLM_MODEL=deepseek/deepseek-chat
AGENT_PRIVATE_KEY=
AGENT_ADDRESS=
TRIAL_LLM_PER_DAY=20
TRIAL_EXEC_PER_DAY=3

# Foundry deploy (packages/contracts)
RH_RPC_URL=https://rpc.mainnet.chain.robinhood.com
DEPLOYER_PRIVATE_KEY=
RNODE_TOKEN_ADDRESS=
UNISWAP_ROUTER=0xCaf681a66D020601342297493863E78C959E5cb2
BLOCKSCOUT_API_KEY=

# Demo mode (default on for open-source): worker checks schedules but does not broadcast swaps
DEMO_MODE=true

# Owner multisig (2-of-3). Fill after you deploy MultiSigOwner.
# Keep signer private keys offline / on separate machines — never commit them.
# Distinct from DEPLOYER_PRIVATE_KEY and AGENT_PRIVATE_KEY.
OWNER_MULTISIG_THRESHOLD=2
OWNER_MULTISIG_ADDRESS=
OWNER_SIGNER_1_ADDRESS=
OWNER_SIGNER_1_PRIVATE_KEY=
OWNER_SIGNER_2_ADDRESS=
OWNER_SIGNER_2_PRIVATE_KEY=
OWNER_SIGNER_3_ADDRESS=
OWNER_SIGNER_3_PRIVATE_KEY=