.env.example

# Vector — environment variables (P0.1)
# Copy to `.env.local` and fill in real values. Never commit `.env*` (see .gitignore).
# Validation runs at startup (lib/config/env.ts); a missing/malformed REQUIRED
# value crashes the server with a redacted message. Secrets are server-only and
# never enter the client bundle.

# --- Required ---------------------------------------------------------------
# Neon (Postgres) connection string. Must be postgres:// or postgresql://.
DATABASE_URL=

# --- Optional (validated only if set; needed in later stages) ----------------
# Mantle testnet RPC URL (http(s) or ws(s)). On-chain stages (P1.7+).
# Public default works for reads: https://rpc.sepolia.mantle.xyz
MANTLE_TESTNET_RPC_URL=
# Deployed VectorMeritRegistry address (Mantle Sepolia, chainId 5003). Non-secret.
# Consumed by scripts/chain/mirror-merit.ts for the merit round-trip.
MERIT_REGISTRY_ADDRESS=0x1894Be93D9ACA27b7A6AF0eaD56354D9EbA0Ffb9
# Nansen smart-money API key (P2.2). Secret.
NANSEN_API_KEY=
# Elfa social-signal API key (P3.1). Secret.
ELFA_API_KEY=
# Owner key: registers seed agents in the ERC-8004 Identity Registry. Secret.
OPERATOR_PRIVATE_KEY=
# Attestor key: authors ERC-8004 feedback writes (P1.8). Secret.
# MUST be a different address than OPERATOR_PRIVATE_KEY — the registry rejects
# self-feedback from an agent's owner/operator.
ATTESTOR_PRIVATE_KEY=
# Operator-console shared token (P2.4): gates /operator and the mutating
# /api/operator/* routes. Min 24 chars; generate with high entropy. Secret.
# Unset => the console renders disabled and every operator route returns 401.
OPERATOR_CONSOLE_TOKEN=
# Deployed commit SHA surfaced by /api/health. Non-secret.
GIT_COMMIT=
# Absolute base URL the off-chain attestation detail is served from, e.g.
# https://vector.app — used to build the ERC-8004 feedbackURI (P1.8). Non-secret.
PUBLIC_BASE_URL=

# --- Byreal perps rail (P2.1) — optional; DEFAULT-OFF, fails closed -----------
# The rail enables only when BOTH the agent key and wallet address are set;
# absent => deterministic seed settlement (byte-identical scores).
# Byreal/Hyperliquid agent API key. Secret; scoped to the CLI child env only.
BYREAL_PERPS_AGENT_KEY=
# Byreal/Hyperliquid wallet address (0x…40 hex) the rail trades from.
BYREAL_PERPS_WALLET_ADDRESS=
# Network the rail may trade on: testnet | mainnet. Defaults to testnet. Safety
# boundary — the adapter refuses to construct with mainnet creds unless this is
# explicitly set to mainnet.
BYREAL_PERPS_NETWORK=
# Explicit path to the @byreal-io/byreal-perps-cli entry; else package-resolved.
BYREAL_PERPS_CLI_PATH=