.env.example

# A2A configuration
A2A_AGENT_METADATA_HOST=<your-indexer-host>
A2A_LOCAL_INDEXER_URL=http://<your-indexer-host>
NEXT_PUBLIC_INDEXER_URL=http://<your-indexer-host>

# ── Indexer provider routing (server-only, Phase 2C) ──────────────────────────
# Provider: "custom" (PM2/SQLite, default) or "goldsky" (Supabase reader)
INDEXER_PROVIDER=custom
# Scope: "arclayer" (filtered, default) or "arcnetwork" (global)
INDEXER_SCOPE=arclayer
# PM2/SQLite indexer internal URL (used by custom provider and fallback)
INDEXER_INTERNAL_URL=http://localhost:3535
# Fallback URL when Goldsky reader fails (leave empty to disable fallback)
INDEXER_FALLBACK_URL=
# Supabase service role key (required for Goldsky provider, server-only)
SUPABASE_SERVICE_ROLE_KEY=
# Postgres schema for Goldsky raw tables (default: public)
GOLDSKY_POSTGRES_SCHEMA=public
A2A_AGENT_ROSTER_SOURCE=local-indexer

# ── Indexer comparison tooling (Phase 2D) ────────────────────────────────────
# Enable the /api/indexer/compare diagnostic endpoint (default: false)
INDEXER_COMPARE_ENABLED=false
# Optional Bearer token for compare endpoint auth (leave empty for no-auth mode)
INDEXER_COMPARE_TOKEN=
A2A_ENFORCE_EXTERNAL_REGISTRY=false
A2A_AGENT_ROSTER_LIMIT=50
A2A_AGENT_APPROVAL_MODE=auto
A2A_AUTO_APPROVE_MAX_CANDIDATES=300
A2A_METADATA_FETCH_TIMEOUT_MS=3000
A2A_METADATA_FETCH_CONCURRENCY=10

# Agent Account / Circle Agent Wallet rail.
# EOA is used for ownership and funding only.
# Circle Agent Wallet is used as the agent funding/runtime wallet.
NEXT_PUBLIC_AGENT_ACCOUNT_RAILS_ENABLED=true
AGENT_ACCOUNT_RAILS_ENABLED=true
MCP_AGENT_ACCOUNT_IDENTITY_ENABLED=true
AGENT_ACCOUNT_AS_RUNTIME_PAYER_ENABLED=true

# Keep disabled in this PR.
# This PR does not implement per-agent or x402 payer binding.
AGENT_ACCOUNT_A2A_AUTO_BIND_ENABLED=false

# OAuth secrets are stored as SHA-256 hashes. Set a server-only pepper in production.
OAUTH_TOKEN_PEPPER=<random-server-only-secret>