.env.example

# Required by `just run` and model-backed Harbor evals.
OPENAI_API_KEY=

# Managed account SMS OTP through Twilio Verify. Verify generates, delivers,
# and checks six-digit codes, with automatic RCS upgrade where supported.
# NANOCODEX_OTP_HMAC_KEY=
# TWILIO_ACCOUNT_SID=AC...
# TWILIO_API_KEY_SID=SK...
# TWILIO_API_KEY_SECRET=
# TWILIO_AUTH_TOKEN=
# TWILIO_VERIFY_SERVICE_SID=VA...

# Production nanocodex-egress deployments require a base64url-encoded 32-byte
# vault key. It encrypts provider credentials and persistent account root
# wallets at rest; configure it as a Worker secret or Secrets Store binding,
# never as browser or Vite configuration. Local development uses a fixed,
# development-only key when this is unset.
# CREDENTIAL_ENCRYPTION_KEY=
# CREDENTIAL_ENCRYPTION_KEY_PREVIOUS=

# Optional CLI defaults; the eval YAML pins these explicitly.
# OPENAI_REASONING_EFFORT=low

# Local Harbor artifacts use Cargo's fast, symbol-rich dev profile by default.
# Use `profiling` for optimized CPU profiling without stripping debug symbols.
# NANOCODEX_BUILD_PROFILE=dev

# `nanocodex credits` talks to the local NanoUSD service by default.
# NANOCODEX_CREDITS_API_URL=http://127.0.0.1:8789

# `--provider.tempo` pays HTTPS MPP Charge challenges from NanoUSD.
# NANOCODEX_PROVIDER_TEMPO=true
# NANOCODEX_PROVIDER_TEMPO_API_BASE_URL=https://openai.mpp.tempo.xyz/v1
# NANOCODEX_PROVIDER_TEMPO_WALLET_STORE=/absolute/path/to/store.json
# NANOCODEX_PROVIDER_TEMPO_RPC_URL=https://rpc.mainnet.tempo.xyz
# NANOCODEX_PROVIDER_TEMPO_EGRESS_MAX_CHARGE=100000

# NanoUSD service defaults are a loopback-only mock faucet. Stripe mode also
# requires an HTTPS public URL and the two secrets supplied by Stripe.
# NANOUSD_PAYMENT_MODE=mock
# NANOUSD_ISSUER_MODE=mock # use `alloy` for Tempo mainnet fulfillment
# NANOUSD_PUBLIC_URL=https://credits.nanocodex.dev
# NANOUSD_DATABASE=.nanocodex/nanousd-api.sqlite3
# NANOUSD_STRIPE_SECRET_KEY=
# NANOUSD_STRIPE_WEBHOOK_SECRET=