# ============================================================================
# PYRE / Prometheus Protocol — environment template
# Copy to .env (per app) and fill in. NEVER commit a real .env.
#
# CORE TRUST RULE: PYRE never holds private keys. There is intentionally NO
# wallet private key / mnemonic variable anywhere in this file. All signing
# happens client-side in the user's wallet.
# ============================================================================

# ---- Solana ----------------------------------------------------------------
# Use an external RPC provider (Helius, Triton, QuickNode, etc.).
# Do NOT run a validator/RPC node on the MVP VPS.
SOLANA_RPC_URL=https://api.mainnet-beta.solana.com
SOLANA_RPC_WS_URL=
SOLANA_CLUSTER=mainnet-beta            # mainnet-beta | devnet | testnet

# ---- Database (PostgreSQL) -------------------------------------------------
DATABASE_URL=postgresql://pyre:pyre@localhost:5432/pyre

# ---- Redis (queues, cache, rate limiting) ----------------------------------
REDIS_URL=redis://localhost:6379

# ---- AI services (Prometheus) ----------------------------------------------
# API-based only for MVP. Do NOT run local LLMs/image models on the server.
# Keys live ONLY in the gitignored ~/pyre/.env (chmod 600), loaded by the API at
# runtime — never in this committed template, never in git.
#
# Provider selection (free-first default): text=gemini (free tier), image=
# pollinations (free, keyless). Falls back to a deterministic stub when a key is
# missing, so generation always runs.
PROMETHEUS_TEXT_PROVIDER=stub          # gemini | anthropic | openai | stub
PROMETHEUS_IMAGE_PROVIDER=stub         # pollinations | fal | deepinfra | replicate | stub
GEMINI_API_KEY=                        # free tier — aistudio.google.com/apikey
ANTHROPIC_API_KEY=
OPENAI_API_KEY=                        # also enables the free omni-moderation pass
FAL_KEY=                               # fal.ai (FLUX schnell ~$0.003/img)
DEEPINFRA_API_KEY=                     # cheapest image (~$0.0005/img)
REPLICATE_API_TOKEN=                   # FLUX schnell ~$0.003/img
PINATA_JWT=                            # IPFS upload of Spawn image + metadata

# ---- App URLs / ports ------------------------------------------------------
WEB_PORT=3000
API_PORT=4000
WEB_PUBLIC_URL=http://localhost:3000
API_PUBLIC_URL=http://localhost:4000

# ---- Admin / security ------------------------------------------------------
ADMIN_API_TOKEN=                       # protects /admin endpoints
RATE_LIMIT_SCAN_PER_MIN=10

# ---- Classification safety thresholds --------------------------------------
PROTECTED_USD_THRESHOLD=50             # skip tokens valued above this (USD)
MAX_PRICE_IMPACT_BPS=300               # skip swap routes above this impact
QUOTE_MAX_AGE_MS=15000                 # skip stale quotes older than this

# ---- Protocol fee (§3.1) — transparent, in-tx, non-custodial ---------------
# The treasury receives ONLY the fee SOL (never user funds). Swap it for a
# multisig before real volume. The fee is shown in the preview before signing.
# IMPORTANT: fund the treasury once to rent-exemption (>= ~0.0009 SOL) BEFORE it
# collects fees — a fee transfer that would leave a 0-balance account below the
# rent-exempt minimum fails the whole tx ("insufficient funds for rent").
PYRE_TREASURY_WALLET=122CNV5ZLu6fqZFpEMUdUSQwDv2zs23pkYQhkNtSQk5k
PYRE_FEE_BPS=500                       # 5% of reclaimed rent
PYRE_SWAP_FEE_BPS=100                  # 1% on swaps (proceeds still go to user)
PYRE_MAX_CONTRIBUTION_BPS=5000         # cap on the optional "feed more" extra (50%)

# ---- Optional: metadata / launch (later phases) ----------------------------
IPFS_OR_ARWEAVE_ENDPOINT=
IPFS_OR_ARWEAVE_TOKEN=
# Public key only — the operator signs Pump.fun launches manually in MVP.
PUMPFUN_CREATOR_WALLET_PUBKEY=