fix(cron): close fail-open hole when CRON_SECRET is unset

.claude/settings.json

@@ -0,0 +1,238 @@
+{
+	"$schema": "https://json.schemastore.org/claude-code-settings.json",
+
+	"permissions": {
+		"defaultMode": "acceptEdits",
+
+		"allow": [
+			"Read",
+			"Glob",
+			"Grep",
+			"WebFetch",
+			"WebSearch",
+
+			"Bash(npm *)",
+			"Bash(npx *)",
+			"Bash(pnpm *)",
+			"Bash(yarn *)",
+			"Bash(node *)",
+
+			"Bash(prettier *)",
+			"Bash(vite *)",
+			"Bash(vitest *)",
+
+			"Bash(forge build*)",
+			"Bash(forge test*)",
+			"Bash(forge fmt*)",
+			"Bash(forge install*)",
+			"Bash(forge update*)",
+			"Bash(forge snapshot*)",
+			"Bash(forge coverage*)",
+			"Bash(forge inspect*)",
+			"Bash(forge remappings*)",
+			"Bash(forge clean*)",
+			"Bash(cast *)",
+
+			"Bash(vercel *)",
+
+			"Bash(git status*)",
+			"Bash(git log*)",
+			"Bash(git diff*)",
+			"Bash(git show*)",
+			"Bash(git add*)",
+			"Bash(git commit*)",
+			"Bash(git push)",
+			"Bash(git push origin *)",
+			"Bash(git push -u origin *)",
+			"Bash(git push --set-upstream origin *)",
+			"Bash(git pull*)",
+			"Bash(git fetch*)",
+			"Bash(git checkout*)",
+			"Bash(git switch*)",
+			"Bash(git branch*)",
+			"Bash(git merge*)",
+			"Bash(git rebase*)",
+			"Bash(git stash*)",
+			"Bash(git restore*)",
+			"Bash(git reset)",
+			"Bash(git reset HEAD*)",
+			"Bash(git reset --soft*)",
+			"Bash(git reset --mixed*)",
+			"Bash(git remote*)",
+			"Bash(git tag*)",
+			"Bash(git ls-files*)",
+			"Bash(git ls-tree*)",
+			"Bash(git rev-parse*)",
+			"Bash(git rev-list*)",
+			"Bash(git describe*)",
+			"Bash(git blame*)",
+			"Bash(git worktree*)",
+			"Bash(git config --get*)",
+			"Bash(git config --list*)",
+
+			"Bash(ls*)",
+			"Bash(pwd)",
+			"Bash(cd *)",
+			"Bash(cat *)",
+			"Bash(head *)",
+			"Bash(tail *)",
+			"Bash(wc *)",
+			"Bash(sort *)",
+			"Bash(uniq *)",
+			"Bash(diff *)",
+			"Bash(file *)",
+			"Bash(stat *)",
+			"Bash(du *)",
+			"Bash(tree *)",
+			"Bash(find *)",
+			"Bash(grep *)",
+			"Bash(rg *)",
+			"Bash(awk *)",
+			"Bash(sed *)",
+			"Bash(jq *)",
+			"Bash(which *)",
+			"Bash(whereis *)",
+			"Bash(command -v *)",
+			"Bash(env)",
+			"Bash(printenv*)",
+			"Bash(echo *)",
+			"Bash(true)",
+			"Bash(false)",
+			"Bash(date*)",
+			"Bash(basename *)",
+			"Bash(dirname *)",
+			"Bash(realpath *)",
+			"Bash(readlink *)",
+
+			"Bash(mkdir *)",
+			"Bash(cp *)",
+			"Bash(mv *)",
+			"Bash(touch *)",
+			"Bash(ln -s *)",
+			"Bash(chmod *)",
+
+			"Bash(curl -s *)",
+			"Bash(curl -I *)",
+			"Bash(curl --head *)",
+			"Bash(curl -o *)",
+			"Bash(curl -sSL *)",
+			"Bash(curl -sL *)",
+			"Bash(wget *)",
+
+			"Bash(tar *)",
+			"Bash(unzip *)",
+			"Bash(zip *)",
+			"Bash(gzip *)",
+			"Bash(gunzip *)",
+
+			"Bash(python *)",
+			"Bash(python3 *)",
+			"Bash(pip *)",
+			"Bash(pip3 *)",
+
+			"Bash(ps *)",
+			"Bash(kill %*)",
+			"Bash(pgrep *)",
+			"Bash(lsof *)",
+			"Bash(netstat *)",
+			"Bash(host *)",
+			"Bash(dig *)",
+			"Bash(nslookup *)"
+		],
+
+		"deny": [
+			"Bash(rm -rf*)",
+			"Bash(rm -fr*)",
+			"Bash(rm -r *)",
+			"Bash(rm -R *)",
+			"Bash(rm --recursive*)",
+			"Bash(sudo*)",
+			"Bash(doas*)",
+			"Bash(su *)",
+			"Bash(su)",
+
+			"Bash(git push --force*)",
+			"Bash(git push -f*)",
+			"Bash(git push --force-with-lease*)",
+			"Bash(git push --mirror*)",
+			"Bash(git push --delete*)",
+			"Bash(git push origin --delete*)",
+			"Bash(git push origin :*)",
+			"Bash(git push origin +*)",
+
+			"Bash(git reset --hard*)",
+			"Bash(git clean -f*)",
+			"Bash(git clean -df*)",
+			"Bash(git clean -xf*)",
+			"Bash(git clean -xdf*)",
+			"Bash(git clean -fd*)",
+			"Bash(git clean -fx*)",
+			"Bash(git clean -fdx*)",
+			"Bash(git branch -D*)",
+			"Bash(git branch --delete --force*)",
+			"Bash(git checkout -- *)",
+			"Bash(git checkout . *)",
+			"Bash(git checkout .)",
+			"Bash(git restore --source=*)",
+			"Bash(git restore .)",
+			"Bash(git restore . *)",
+			"Bash(git update-ref -d*)",
+			"Bash(git filter-branch*)",
+			"Bash(git filter-repo*)",
+			"Bash(git reflog delete*)",
+			"Bash(git reflog expire*)",
+			"Bash(git gc --prune=now*)",
+
+			"Bash(forge script * --broadcast*)",
+			"Bash(forge script *--broadcast*)",
+			"Bash(cast send *)",
+
+			"Bash(vercel --prod*)",
+			"Bash(vercel deploy --prod*)",
+			"Bash(vercel rm*)",
+			"Bash(vercel remove*)",
+			"Bash(vercel alias rm*)",
+			"Bash(npm publish*)",
+			"Bash(yarn publish*)",
+			"Bash(pnpm publish*)",
+
+			"Bash(curl * | sh*)",
+			"Bash(curl * | bash*)",
+			"Bash(curl *|sh*)",
+			"Bash(curl *|bash*)",
+			"Bash(wget * | sh*)",
+			"Bash(wget * | bash*)",
+			"Bash(wget *-O - | sh*)",
+			"Bash(wget *-O- | sh*)",
+
+			"Bash(dd if=*)",
+			"Bash(dd of=*)",
+			"Bash(mkfs*)",
+			"Bash(fdisk*)",
+			"Bash(parted*)",
+			"Bash(shutdown*)",
+			"Bash(reboot*)",
+			"Bash(halt*)",
+			"Bash(poweroff*)",
+			"Bash(init *)",
+
+			"Edit(.env)",
+			"Edit(.env.local)",
+			"Edit(.env.*.local)",
+			"Edit(.env.production)",
+			"Edit(.env.production.local)",
+			"Edit(**/.env)",
+			"Edit(**/.env.local)",
+			"Edit(**/.env.*.local)",
+			"Write(.env)",
+			"Write(.env.local)",
+			"Write(.env.*.local)",
+			"Write(**/.env)",
+			"Write(**/.env.local)",
+			"Write(**/.env.*.local)"
+		]
+	},
+
+	"includeCoAuthoredBy": true,
+	"respectGitignore": true
+}

.env.example

@@ -0,0 +1,149 @@
+# ────────────────────────────────────────────────────────────────────────────
+# three.ws — backend environment
+# Copy to .env.local for local dev. In production, set these in Vercel.
+# ────────────────────────────────────────────────────────────────────────────
+
+# Public site origin (no trailing slash)
+PUBLIC_APP_ORIGIN=https://three.ws
+
+# Postgres (Neon serverless driver — HTTPS connection string)
+DATABASE_URL=postgres://user:pass@ep-xxx.neon.tech/neondb?sslmode=require
+
+# S3-compatible storage (AWS S3, Cloudflare R2, Backblaze B2, etc.)
+S3_ENDPOINT=
+S3_ACCESS_KEY_ID=
+S3_SECRET_ACCESS_KEY=
+S3_BUCKET=3d-agent-avatars
+# Public CDN base URL for the bucket (custom domain or provider default)
+S3_PUBLIC_DOMAIN=https://cdn.3d.irish
+
+# Upstash Redis (rate limiting)
+UPSTASH_REDIS_REST_URL=
+UPSTASH_REDIS_REST_TOKEN=
+
+# Optional: Error monitoring
+SENTRY_DSN=
+
+# JWT signing — rotate by appending to key set, never remove the old one mid-rotation
+# Also used (via HKDF) to derive the AES-256-GCM key that encrypts agent wallet private keys.
+# Generate with: openssl rand -base64 64
+JWT_SECRET=
+# Active key id (for future rotation)
+JWT_KID=k1
+
+# Password hashing cost (bcryptjs rounds)
+PASSWORD_ROUNDS=11
+
+# Anthropic API key for /api/chat (agent LLM backend). If unset, chat falls back
+# to pattern matching client-side.
+ANTHROPIC_API_KEY=
+# Optional overrides for chat model + output cap.
+CHAT_MODEL=claude-sonnet-4-6
+
+# Admin key for three.ws chat brand config. Set in Vercel, enter in chat settings to unlock branding panel.
+# Generate with: openssl rand -base64 32
+CHAT_ADMIN_KEY=
+
+# OpenRouter API key — powers the built-in free model proxy (/api/chat/proxy).
+# Free-tier models (e.g. google/gemini-2.0-flash-exp:free) are forwarded server-side.
+# Sign up free at https://openrouter.ai
+OPENROUTER_API_KEY=
+CHAT_MAX_TOKENS=1024
+
+# Ready Player Me subdomain for the avatar creator iframe (client-side).
+# Register one at https://studio.readyplayer.me — e.g. "your-app" yields
+# https://your-app.readyplayer.me. If unset, falls back to the public
+# `demo.readyplayer.me` builder.
+VITE_RPM_SUBDOMAIN=demo
+
+# Privy wallet auth (client-side — get app ID from https://dashboard.privy.io)
+VITE_PRIVY_APP_ID=
+# Privy app ID (server-side — for verifying identity tokens in /api/auth/privy/verify)
+PRIVY_APP_ID=
+
+# Avaturn (photo-to-avatar pipeline). API key lives server-side; used by
+# /api/onboarding/avaturn-session to exchange 3 selfies for a session URL.
+# Sign up at https://avaturn.me/developer.
+AVATURN_API_KEY=
+# Optional override for self-hosted / staging Avaturn deployments.
+AVATURN_API_URL=https://api.avaturn.me
+
+# Avaturn default editor — opened by the "Use default avatar" card at /create.
+# No session API / no photos required. Point at the hosted editor URL provided
+# by Avaturn; the developer ID (if needed) is appended as a query param.
+VITE_AVATURN_EDITOR_URL=https://editor.avaturn.me/
+VITE_AVATURN_DEVELOPER_ID=
+
+# Avatar regeneration provider (optional)
+# Set to "stub" for testing, or a provider name when configured.
+# Unset or "none" → API returns 501 regen_unconfigured.
+AVATAR_REGEN_PROVIDER=none
+
+# ── ERC-7710 Delegation Relayer (POST /api/permissions/redeem) ───────────────
+# Enable the server-side relayer endpoint (default: false).
+PERMISSIONS_RELAYER_ENABLED=false
+
+# Hex private key of the relayer EOA that pays gas for redeemDelegations.
+# This is NOT the user's key — only the agent's server-side relayer.
+# Generate: node -e "const {Wallet} = require('ethers'); const w = Wallet.createRandom(); console.log(w.privateKey, w.address)"
+# NEVER commit a real value. Rotate via Vercel env vars.
+AGENT_RELAYER_KEY=0x...
+
+# EIP-55 checksummed address derived from AGENT_RELAYER_KEY — fund with testnet ETH.
+AGENT_RELAYER_ADDRESS=0x...
+
+# Per-chain RPC URLs for DelegationManager calls.
+# Pattern: RPC_URL_<CHAINID>. Override the default public RPCs with Alchemy/Infura for production.
+RPC_URL_84532=https://sepolia.base.org        # Base Sepolia (primary dev chain)
+RPC_URL_11155111=https://rpc.sepolia.org      # Ethereum Sepolia
+
+# Per-chain DelegationManager contract address overrides (optional).
+# Defaults are from MetaMask Delegation Toolkit v1. Override if you deploy a custom instance.
+# DELEGATION_MANAGER_ADDRESS_84532=0x...
+# DELEGATION_MANAGER_ADDRESS_11155111=0x...
+
+# ── IPFS pinning — used by POST /api/pinning/pin before on-chain registration.
+# Pinata (preferred): get JWT from https://app.pinata.cloud/keys
+PINATA_JWT=
+# Web3.Storage (fallback): get token from https://web3.storage/tokens
+# (legacy v1 API — upload endpoint: https://api.web3.storage/upload)
+WEB3_STORAGE_TOKEN=
+
+# ── KOL wallet P&L analytics (api/kol/[action].js wallets handler) ─────────
+# Birdeye API key for Solana wallet portfolio + P&L data.
+# Get one at https://birdeye.so — free tier allows ~100 req/min.
+BIRDEYE_API_KEY=
+
+# ── Pump.fun live feed integration (api/_lib/pumpfun-mcp.js) ──────────────
+# Upstream pumpfun-claims-bot MCP server URL. When set, /api/agents/pumpfun
+# and /api/agents/pumpfun-feed are enabled, the cron at /api/cron/pumpfun-signals
+# starts crawling, and the pumpfun-watch agent skills become functional.
+# Run `npx pumpfun-claims-bot` (or deploy via Railway) to host the upstream MCP.
+PUMPFUN_BOT_URL=
+# Optional bearer token if the upstream MCP requires auth.
+PUMPFUN_BOT_TOKEN=
+
+# ── Solana RPC overrides (used by Solana attestation crawler + pump skills) ──
+# Defaults to public mainnet/devnet — set Helius/Triton/QuickNode for prod.
+SOLANA_RPC_URL=
+SOLANA_RPC_URL_DEVNET=
+
+# ── x402 micropayments (POST /api/mcp) ─────────────────────────────────────
+# Per-network payTo wallets that receive USDC for paid MCP calls.
+X402_PAY_TO_SOLANA=BUrwd1nK6tFeeJMyzRHDo6AuVbnSfUULfvwq21X93nSN
+X402_PAY_TO_BASE=0x0C70c0e8453C5667739E41acdF6eC5787B8ff542
+# USDC asset addresses (mainnet).
+X402_ASSET_MINT_SOLANA=EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v
+X402_ASSET_ADDRESS_BASE=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
+# Price in base units (USDC = 6 decimals; 1000 = 0.001 USDC).
+X402_MAX_AMOUNT_REQUIRED=1000
+# Per-network facilitators. Defaults: PayAI for Solana, x402.org reference for Base.
+X402_FACILITATOR_URL_SOLANA=https://facilitator.payai.network
+X402_FACILITATOR_URL_BASE=https://x402.org/facilitator
+# Optional bearer tokens for self-hosted/private facilitators.
+X402_FACILITATOR_TOKEN_SOLANA=
+X402_FACILITATOR_TOKEN_BASE=
+
+# zauthx402 — telemetry + monitoring for x402 endpoints. Optional; when unset
+# the SDK is not invoked. Get a key at https://zauthx402.com.
+ZAUTH_API_KEY=