-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy path.env.secrets.example
More file actions
82 lines (73 loc) · 4.37 KB
/
Copy path.env.secrets.example
File metadata and controls
82 lines (73 loc) · 4.37 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
# Commonality private deployment secrets
#
# Copy to .env.secrets only if you are filling values by hand. Prefer:
#
# node scripts/generate-wallets.mjs
#
# That script creates/updates .env.secrets with service hot keys and finder
# trust secrets, writes operator-only keys to ~/.secrets/commonality/operator.env,
# and writes public derived addresses to deployments/operator-addresses.env.
# NEVER commit .env.secrets.
# =============================================================================
# Generated operational private keys (scripts/generate-wallets.mjs)
# =============================================================================
IMPLICATION_ATTESTER_PRIVATE_KEY=0x_your_implication_attester_wallet_private_key
CONTENT_ATTESTER_PRIVATE_KEY=0x_your_content_attester_wallet_private_key
CAUSE_ASSIST_COHERENCE_ATTESTER_PRIVATE_KEY=0x_your_causestarter_coherence_operator_key
ALIGNMENT_TRUST_BOOTSTRAP_PRIVATE_KEY=0x_your_causestarter_alignment_trust_bootstrap_key
BEAT_AGENT_PRIVATE_KEY=0x_your_beat_agent_wallet_private_key
VERIFIER_PRIVATE_KEY=0x_your_channel_verifier_signer_private_key
IMPLICATION_GRAPH_NUDGER_PRIVATE_KEY=0x_your_implication_graph_nudger_private_key
BRIDGE_CREATOR_PRIVATE_KEY=0x_your_bridge_creator_private_key
EXPLORER_CURATOR_PRIVATE_KEY=0x_your_explorer_curator_private_key
COMMONALITY_TESTNET_VERIFIER_PRIVATE_KEY=0x_your_testnet_verifier_mutating_canary_private_key
# Generated shared secrets. The attester and matching finder values must match.
IMPLICATION_ATTESTER_TRUSTED_FINDER_KEY=generated_shared_secret
IMPLICATION_FINDER_ATTESTER_FINDER_KEY=generated_shared_secret
CONTENT_ATTESTER_TRUSTED_FINDER_KEY=generated_shared_secret
CONTENT_FINDER_ATTESTER_FINDER_KEY=generated_shared_secret
BEAT_AGENT_TRUSTED_FINDER_KEY=generated_shared_secret
BEAT_AGENT_FINDER_KEY=generated_shared_secret
# =============================================================================
# External services
# =============================================================================
OPENROUTER_API_KEY=sk-or-v1-your-openrouter-api-key
# xAI key for cause-assist (Grok). Optional — without it, cause-assist uses
# local templates + heuristics.
XAI_API_KEY=xai-your-xai-api-key
VITE_WALLETCONNECT_PROJECT_ID=your_walletconnect_project_id
# Embedded wallet + EIP-4337 (ratified: Privy + Pimlico). See
# workflow/privy-pimlico-setup.md. VITE_PRIVY_APP_ID also goes in the ui env
# (ui/.env / ui/.env.local). The bundler/paymaster URLs contain the Pimlico
# API key; final env var names get settled by the Privy+Pimlico spike.
VITE_PRIVY_APP_ID=your_privy_app_id
# VITE_PRIVY_CLIENT_ID=your_privy_client_id
PIMLICO_API_KEY=your_pimlico_api_key
BASE_SEPOLIA_BUNDLER_URL=https://api.pimlico.io/v2/base-sepolia/rpc?apikey=your_pimlico_api_key
BASE_SEPOLIA_PAYMASTER_URL=https://api.pimlico.io/v2/base-sepolia/rpc?apikey=your_pimlico_api_key
# Prefer a provider account URL for testnet/mainnet. Public RPC is flaky.
BASE_SEPOLIA_RPC_URL=https://sepolia.base.org
MAINNET_RPC_URL=https://eth-mainnet.example.com
# Coinbase Onramp (CDP) — mints the fiat->USDC on-ramp session for the walletless
# donor flow (platform-api POST /onramp/coinbase/session). Same Secret API key as
# spikes/coinbase-onramp/.env (there it's CDP_API_KEY_ID/CDP_API_KEY_SECRET). The
# on-ramp/balance leg is Base MAINNET (where real USDC lands), so BASE_RPC_URL is a
# Base mainnet URL even while contracts deploy to Base Sepolia. See
# workflow/privy-pimlico-setup.md and specs/tech/bridges.md.
COINBASE_CDP_API_KEY_ID=your_cdp_api_key_id
COINBASE_CDP_API_KEY_SECRET=your_cdp_api_key_secret
BASE_RPC_URL=https://mainnet.base.org
# =============================================================================
# Content-attester policy (deployment-specific product decision)
# =============================================================================
# Generate first-testnet defaults with:
# ./scripts/setup-testnet-ai-policy.mjs --alignment-topic-statement-cid=bafy...
ALIGNMENT_TOPIC_STATEMENT_CID=bafy...
X_API_BEARER_TOKEN=your_x_api_bearer_token
# YOUTUBE_API_KEY=...
# =============================================================================
# UI Deployment
# =============================================================================
# UI publish/maintenance secrets (PINATA_JWT, IPNS_PRIVATE_KEY_*,
# ENS_OWNER_PRIVATE_KEY, Cloudflare DNS token) belong in the operator secrets
# file outside the repo; see .env.operator-secrets.example.