safehands-pharos 1.3.0 → 1.4.0

package/.env.example

@@ -1,26 +1,64 @@
-NODE_ENV=development
-
-PHAROS_ENVIRONMENT=atlantic-testnet
-PHAROS_CHAIN_ID=688689
-PHAROS_RPC_URL=https://atlantic.dplabs-internal.com
-
-DODO_API_KEY=
-FAROSWAP_API_KEY=
-GOPLUS_API_KEY=
-
-WALLET_MODE=none
-PRIVATE_KEY=
-X402_SIGNER_PRIVATE_KEY=
-WALLET_ADDRESS=
-WALLET_ENCRYPTION_KEY=
-
-WRITE_TOOLS_ENABLED=false
-ALLOW_UNLIMITED_APPROVAL=false
-ALLOW_LOCAL_X402_FETCH=false
-
-MAX_TX_AMOUNT_PHRS=0.1
-MAX_X402_PAYMENT_USDC=0.01
-MAX_APPROVAL_AMOUNT_USDC=10
-MAX_DAILY_SPEND_USD=10
-
-X402_SERVER_PORT=4021
+NODE_ENV=development
+
+PHAROS_ENVIRONMENT=atlantic-testnet
+PHAROS_CHAIN_ID=688689
+# Primary RPC URL (single endpoint)
+PHAROS_RPC_URL=https://atlantic.dplabs-internal.com
+# Optional: comma-separated list of RPC URLs for failover (takes priority over PHAROS_RPC_URL)
+# PHAROS_RPC_URLS=https://atlantic.dplabs-internal.com,https://rpc2.pharos.xyz
+
+# DODO API key for swap routing (required for execute_swap, get_pool_info, simulate_transaction swap mode)
+DODO_API_KEY=
+
+# ── Wallet Configuration ──────────────────────────────────────────────────────
+# WALLET_MODE controls how write tools resolve a signer.
+#   none             — no signer; write tools return NO_SIGNER_AVAILABLE (default, safe)
+#   env              — reads PRIVATE_KEY from this file (testnet developer mode)
+#   managed-testnet  — uses a wallet created via create_agent_wallet
+WALLET_MODE=none
+PRIVATE_KEY=
+X402_SIGNER_PRIVATE_KEY=
+WALLET_ADDRESS=
+
+# Encryption key for AES-256-GCM encrypted managed wallet store (WALLET_STORE_PATH).
+# If unset, a random per-process key is generated (wallets do not persist across restarts).
+WALLET_ENCRYPTION_KEY=
+
+# Path to persist managed agent wallets across restarts (optional).
+# If unset, wallets are in-memory only and lost on server restart.
+# WALLET_STORE_PATH=./.agents/wallets.json
+
+# ── Write Tool Gates ──────────────────────────────────────────────────────────
+WRITE_TOOLS_ENABLED=false
+ALLOW_UNLIMITED_APPROVAL=false
+ALLOW_LOCAL_X402_FETCH=false
+
+# ── Spend Limits ──────────────────────────────────────────────────────────────
+MAX_TX_AMOUNT_PHRS=0.1
+MAX_X402_PAYMENT_USDC=0.01
+MAX_APPROVAL_AMOUNT_USDC=10
+
+# Enforced in-memory per-wallet (resets at UTC midnight).
+# USD value of PHRS is estimated using PHRS_USD_PRICE below.
+MAX_DAILY_SPEND_USD=10
+# Assumed PHRS/USD price for daily spend accounting (update as needed)
+PHRS_USD_PRICE=1.0
+
+# ── Observability ─────────────────────────────────────────────────────────────
+# Path to append-only JSON audit log (one JSON object per line).
+# Leave empty to disable. Example: AUDIT_LOG_PATH=./logs/safehands-audit.jsonl
+# AUDIT_LOG_PATH=
+
+# Per-tool MCP rate limits (calls/minute). Defaults shown.
+# MCP_RATE_LIMIT_HEAVY=5        # get_execution_history
+# MCP_RATE_LIMIT_WRITE=15       # execute_swap, send_payment, approve_token, etc.
+# MCP_RATE_LIMIT_DEFAULT=120    # all other tools
+
+# ── x402 Server (only needed when running `npm run x402-server`) ──
+# Receiver wallet address for x402 micro-payments (defaults to WALLET_ADDRESS if unset)
+# X402_PAY_TO=
+# Private key for the x402 facilitator (settles payments on-chain)
+# X402_FACILITATOR_PRIVATE_KEY=
+# Price per paid endpoint in USDC (default: 0.001)
+# X402_PRICE_USDC=0.001
+X402_SERVER_PORT=4021