.env.example

# CoreFlow Environment Variables
# Copy to .env and fill in. NEVER commit a real .env (it is git-ignored).

# ========== DATABASE (Postgres) ==========
# Runtime connection — use a POOLED url in serverless/production
# (PgBouncer / Neon / Supabase pooler). Local dev can use the direct url.
#   Local (docker compose up -d):
DATABASE_URL="postgresql://coreflow:coreflow@localhost:5432/coreflow?schema=public"
# Direct (unpooled) connection — used only by `prisma migrate`/introspection.
# In production set this to the NON-pooled url. Locally it can equal DATABASE_URL.
DIRECT_URL="postgresql://coreflow:coreflow@localhost:5432/coreflow?schema=public"

# ========== AUTHENTICATION ==========
# 32+ char secret for HS256 JWT signing. Generate with:
#   node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
AUTH_SECRET=""

# ========== INDEXER (chain → DB projection) ==========
# Shared secret guarding GET /api/indexer/run. Vercel Cron sends
# `Authorization: Bearer $CRON_SECRET`; set CRON_SECRET (preferred on Vercel) or
# INDEXER_SECRET. The indexer also needs NEXT_PUBLIC_STELLAR_READ_ADDRESS set so
# it can read full escrow detail on `created` events.
INDEXER_SECRET=""

# ========== AUTHORIZATION ==========
# Comma-separated Stellar wallet addresses bootstrapped to the `admin` role on
# login. The first admin then grants manager/finance/worker via
# POST /api/admin/roles. Leave empty in environments with no admin.
ADMIN_WALLETS=""

# ========== ORACLE (server-side signer) ==========
# 32-byte hex Ed25519 seed used to sign verified work-hours proofs. The public
# half is fetched by clients and stored as each escrow's oracle_pubkey.
# Generate with:
#   node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
# NEVER expose this value to the client.
ORACLE_SECRET_KEY=""

# ========== NETWORK CONFIGURATION ==========
# Network to use: testnet or public
NEXT_PUBLIC_STELLAR_NETWORK=testnet

# ========== STELLAR READ ADDRESS ==========
# Public key used for read-only contract simulations (no signing authority).
# Must be a valid Stellar public key on the configured network.
NEXT_PUBLIC_STELLAR_READ_ADDRESS=

# ========== CONTRACT CONFIGURATION ==========
# The deployed CoreFlow contract address on Testnet or Mainnet.
# Update this after deploying the contract.
NEXT_PUBLIC_STELLAR_CONTRACT_ID=

# Settlement token: the Stellar Asset Contract (SAC) address used for custody.
# On escrow creation the contract pulls this token from the manager and releases
# it to workers on finalize. Use the USDC SAC for the configured network.
NEXT_PUBLIC_STELLAR_TOKEN_ID=

# ========== WALLET CONFIGURATION ==========
# Freighter wallet timeout in milliseconds
NEXT_PUBLIC_FREIGHTER_TIMEOUT=5000

# ========== RPC ENDPOINTS ==========
# Selected automatically from NEXT_PUBLIC_STELLAR_NETWORK:
#   Testnet: https://soroban-testnet.stellar.org
#   Mainnet: https://mainnet.sorobanrpc.com