.env.example

VITE_PINATA_JWT=your_pinata_jwt_here

# Base URL of the external, independently-hosted delegation verifier (separate
# repo, pinned to IPFS). Used to deep-link out from a subscription's detail view.
# The external verifier's current IPFS CID URL. The CID changes on each re-pin of
# the verifier — update this (and redeploy) whenever the verifier is rebuilt.
# VITE_VERIFIER_URL=https://bafybeigja45di5agun7qdwaz3dqiyrrtrqbdm4thwhfgc6nc4fwtjkjuqu.ipfs.dweb.link/

# --- Safe App (frontend, VITE_ = bundled into the public browser build) ---

# URL of the Intuition publisher. In the default (same-app) deploy the publisher
# runs INSIDE the web container and Caddy serves it at /intuition, so the Docker
# build already defaults this to "/intuition" — you do NOT need to set it. Only
# override to point the Safe App at an external publisher service.
# VITE_INTUITION_PUBLISHER_URL=/intuition
# Which Intuition network the Safe App Charge page reads to list delegations made
# to the connected Safe: testnet (default, previews) or mainnet (prod).
VITE_INTUITION_NETWORK=testnet
# Optional shared secret sent as x-publish-secret (must match the backend's
# PUBLISH_SECRET). Note: any VITE_ value is public — this only deters drive-by use.
# VITE_INTUITION_PUBLISHER_SECRET=

# --- Website /redeem page (Next.js, NEXT_PUBLIC_ = inlined at build) ---
# Which Intuition network the redeem page reads to list delegations made to the
# connected wallet: testnet (default, previews) or mainnet (prod).
NEXT_PUBLIC_INTUITION_NETWORK=testnet

# --- Intuition publisher backend (server/intuition-publisher.ts) ---
# NODE-SIDE ONLY. Never prefix these with VITE_ — that would ship them to the
# browser. Set them on the publisher service (e.g. a Coolify backend service),
# NOT on the static Safe App.

# Funded attestor key. tTRUST (testnet) / $TRUST (mainnet). Writes the delegation
# atoms + triples and pays the fees. Also used by scripts/intuition-publish.ts.
INTUITION_ATTESTOR_PK=0xyour_funded_intuition_testnet_private_key
# Pins the DelegationJson document to IPFS (server-side; same Pinata account is fine).
PINATA_JWT=your_pinata_jwt_here
# Target Intuition network: testnet (13579, default) or mainnet (1155).
INTUITION_NETWORK=testnet
# HTTP port for the publisher (own var so a platform PORT doesn.t repoint it).
INTUITION_PUBLISHER_PORT=8787
# Allowed CORS origins: comma-separated, supports `*` and subdomain wildcards.
# Default (when unset) accepts the apex + every PR preview subdomain + local dev:
#   https://ourglass.intuition.box,https://*.ourglass.intuition.box,http://localhost:5173
# ALLOWED_ORIGIN=https://ourglass.intuition.box,https://*.ourglass.intuition.box
# Optional: require this in the x-publish-secret header (matches VITE_INTUITION_PUBLISHER_SECRET).
# PUBLISH_SECRET=