agentic_wallet/.env.example at main · xavierScript/agentic_wallet · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
# ══════════════════════════════════════════════════════════════════════════════
# NETWORK
# ══════════════════════════════════════════════════════════════════════════════

SOLANA_RPC_URL=https://api.devnet.solana.com
SOLANA_CLUSTER=devnet                          # devnet | mainnet-beta | testnet

# ══════════════════════════════════════════════════════════════════════════════
# SECURITY
# ══════════════════════════════════════════════════════════════════════════════

# Passphrase used to encrypt/decrypt all keypairs at rest.
# Must be at least 12 characters.
# Encryption: AES-256-GCM, key derived via PBKDF2 (210 000 iterations, SHA-512).
WALLET_PASSPHRASE=change-me-to-a-strong-passphrase

# ══════════════════════════════════════════════════════════════════════════════
# MASTER WALLET
# Auto-funds newly created agent wallets from a designated funder keypair.
# ══════════════════════════════════════════════════════════════════════════════

# For quick testing you can use `MASTER_WALLET_SECRET_KEY=<base58-key>` directly — remove it after testing

# SECURE SETUP — run once, then remove the raw key:
#
#   Step 1. Paste your base58 private key into MASTER_WALLET_SECRET_KEY below.
#   Step 2. Run:  pnpm key:import
#           → Key is encrypted (AES-256-GCM + PBKDF2) and saved to
#             ~/.agentic-wallet/keys/
#   Step 3. Delete or comment out MASTER_WALLET_SECRET_KEY from this file.
#   Step 4. Set MASTER_WALLET_KEY_LABEL to the label chosen during import.
#   Step 5. Clear your shell history:
#
#           PowerShell:
#             Remove-Item (Get-PSReadLineOption).HistorySavePath
#             Clear-History; [Microsoft.PowerShell.PSConsoleReadLine]::ClearHistory()
#
#           Bash:
#             history -c && history -w           # clear session + write empty file
#             sed -i '/SECRET/d' ~/.bash_history  # or remove just the offending line
#
#           Zsh:
#             sed -i '/SECRET/d' ~/.zsh_history   # remove just the offending line
#
#           Then open a NEW terminal — the old session may still hold the key in memory.

# MASTER_WALLET_SECRET_KEY=your-base58-master-wallet-secret-key   # remove after step 2

# Label assigned during `pnpm key:import` (default: "master-funder").
MASTER_WALLET_KEY_LABEL=master-funder

# SOL to seed each new agent wallet.  Default: 0.05 ≈ 100 simple transfers on devnet.
AGENT_SEED_SOL=0.05

# Operator address — sweep destination when a wallet is closed via the TUI.
# Leave blank to skip the sweep (remaining funds will be permanently inaccessible).
OWNER_ADDRESS=your-base58-owner-public-key

# ══════════════════════════════════════════════════════════════════════════════
# KORA GASLESS RELAY
# ══════════════════════════════════════════════════════════════════════════════

KORA_RPC_URL=http://localhost:8080
# KORA_API_KEY=your-api-key-here          # uncomment if kora.toml has [kora.auth] api_key set

# Generate a signer keypair:  solana-keygen new --outfile kora/kora-signer.json --no-bip39-passphrase
# kora/kora-signer.json is .gitignored — the raw key never enters .env.
#
# Option A (recommended): file path — key stays in the .gitignored JSON file
KORA_SIGNER_PRIVATE_KEY=kora/kora-signer.json
#
# Option B: inline base58 — only use if you cannot provide a file path
# KORA_SIGNER_PRIVATE_KEY=your-base58-kora-signer-private-key

# ══════════════════════════════════════════════════════════════════════════════
# LOGGING
# ══════════════════════════════════════════════════════════════════════════════

LOG_LEVEL=info                                 # debug | info | warn | error