Somnia-RiskGuard-Agent/.env.example at main · tunghp2002/Somnia-RiskGuard-Agent · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
# Shared
NODE_ENV=development
LOG_LEVEL=info

# Somnia / EVM values
# Public chain id/RPC/explorer/contract metadata lives in config/public-chains.json.
MONITORED_WALLET_ADDRESS=
# Public address of the agent's automation/executor wallet. Used as the policy
# signer for safe on-chain actions (e.g. reward auto-claim). When unset, those
# state-changing actions are blocked at the Somnia execution boundary. The
# matching private key must be configured for the Somnia agent-kit signer to
# actually broadcast.
AGENT_WALLET_ADDRESS=

# Thirdweb Account Abstraction
# THIRDWEB_SECRET_KEY stays backend-only. Never expose it to NEXT_PUBLIC_*.
THIRDWEB_SECRET_KEY=
THIRDWEB_CLIENT_ID=

# Supabase encrypted session-key storage
# For local dev, use values from `supabase status`.
SUPABASE_URL=
SUPABASE_SERVICE_ROLE_KEY=
# 32-byte key, hex (0x...) or base64. Generate once and keep stable.
SESSION_KEY_ENCRYPTION_KEY=

# Risk Engine
# Risk decisions come from the on-chain Somnia risk agent (see Somnia Agent
# Platform below); there is no off-chain LLM provider. Only the alert threshold
# is configured here.
RISK_SCORE_ALERT_THRESHOLD=70

# Heartbeat / Smart-account inheritance
HEARTBEAT_INTERVAL_SECONDS=86400
HEARTBEAT_GRACE_SECONDS=3600
INHERITANCE_REGISTRY_CONTRACT_ADDRESS=
RISK_GUARD_APPROVAL_STORE_ADDRESS=
RISK_GUARD_HOOK_MODULE_ADDRESS=
RISK_GUARD_VALIDATOR_MODULE_ADDRESS=
RISK_GUARD_MODULAR_ACCOUNT_FACTORY_ADDRESS=
RISK_GUARD_DEFAULT_VALIDATOR_ADDRESS=

# Somnia Agent Platform configuration
# Agent IDs and platform/requester addresses are public contract configuration.
# WALLET_DEPLOYER_PRIVATE_KEY is the sensitive value; never commit a real private key.
SOMNIA_AGENT_REQUESTER_ADDRESS=
RISK_GUARD_RISK_ASSESSMENT_AGENT_ID=
INHERITANCE_HEARTBEAT_AGENT_ID=
INHERITANCE_DISTRIBUTION_AGENT_ID=
RISK_GUARD_AGENT_REWARD_PER_CALL_STT=0.1
INHERITANCE_AGENT_REWARD_PER_CALL_STT=0.1

# Approval Risk Scanner (revoke.cash-style Allowances tab).
# Address also accepted via config/public-chains.json → contracts.approvalRiskScanner.
# Agent IDs from agents.somnia.network; LLM id falls back to
# RISK_GUARD_RISK_ASSESSMENT_AGENT_ID when unset.
APPROVAL_SCANNER_CONTRACT_ADDRESS=
APPROVAL_SCANNER_JSON_API_AGENT_ID=13174292974160097713
APPROVAL_SCANNER_PARSE_WEBSITE_AGENT_ID=12875401142070969085
APPROVAL_SCANNER_LLM_INFERENCE_AGENT_ID=12847293847561029384
APPROVAL_SCANNER_AGENT_REWARD_PER_CALL_STT=0.01
APPROVAL_SCAN_LOOKBACK_BLOCKS=400000000

# Reward Claiming
AUTO_CLAIM_ENABLED=false
MAX_CLAIM_GAS_USD=1
MIN_REWARD_VALUE_USD=2

# Telegram
# Users should connect Telegram through the dashboard/bot flow; do not ask them to type chat id manually.
TELEGRAM_BOT_TOKEN=
TELEGRAM_BOT_USERNAME=
NEXT_PUBLIC_TELEGRAM_BOT_USERNAME=
TELEGRAM_CHAT_ID=
TELEGRAM_WEBHOOK_SECRET=

# Deployment (backend)
# Comma-separated frontend origins allowed by CORS in production, e.g.
# https://somguard.vercel.app. Localhost/LAN and *.vercel.app are always allowed.
# The host's $PORT is read automatically; no need to set a port.
ALLOWED_ORIGINS=

# Frontend
NEXT_PUBLIC_AGENT_API_URL=http://localhost:3001
NEXT_PUBLIC_THIRDWEB_CLIENT_ID=
# NEXT_PUBLIC_AGENT_API_BASE_URL=http://localhost:3001