Merge pull request #38 from kaizencycle/cursor/auth-and-wallet-system-7dd2

Auth and wallet system

Author: kaizencycle

.env.example

@@ -1,29 +1,70 @@
 # OAA API Library Environment Configuration
 # Copy this file to .env.local and fill in your values
 
-# CORS Configuration (comma-separated list of allowed origins)
+# ==============================================================================
+# DATABASE (Required for Auth + Wallet)
+# ==============================================================================
+# PostgreSQL connection string (Render, Supabase, etc.)
+DATABASE_URL=postgresql://user:password@host:5432/database?schema=public
+
+# ==============================================================================
+# AUTH CONFIGURATION (Required)
+# ==============================================================================
+# JWT signing secret - generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
+JWT_SECRET=your-jwt-secret-change-in-production
+
+# App URL for magic links
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+
+# ==============================================================================
+# CORS Configuration
+# ==============================================================================
 # Default origins (localhost:3000,5173,8080 and mobius-browser-shell.vercel.app) are always included
 # Vercel preview deployments matching mobius-browser-shell-*.vercel.app are automatically allowed
 ORIGINS=https://your-custom-domain.com,https://another-domain.com
 
+# ==============================================================================
 # OAA Core Configuration
+# ==============================================================================
 OAA_HMAC_SECRET=your-hmac-secret-here
 EVE_HMAC_SECRET=your-eve-secret-here
 
-# AI Provider API Keys (required for /api/tutor and /api/jade endpoints)
+# ==============================================================================
+# AI Provider API Keys
+# ==============================================================================
 # At least one of ANTHROPIC_API_KEY or OPENAI_API_KEY must be set
 OPENAI_API_KEY=sk-your-openai-key-here
 ANTHROPIC_API_KEY=sk-ant-your-anthropic-key-here
 DEEPSEEK_API_KEY=sk-your-deepseek-key-here
 
+# ==============================================================================
+# EMAIL SERVICE (Optional - for magic links)
+# ==============================================================================
+# SMTP configuration for nodemailer
+# SMTP_HOST=smtp.gmail.com
+# SMTP_PORT=587
+# [email protected]
+# SMTP_PASS=your-app-password
+# SMTP_FROM="Mobius <[email protected]>"
+
+# ==============================================================================
+# INTEGRATIONS
+# ==============================================================================
 # Reflections API (for JADE memory bridge)
-# When set, JADE can access user reflections to surface patterns across cycles
 REFLECTIONS_API_BASE=https://reflections-app.onrender.com
 
-# Optional: Ledger Configuration
+# Ledger Configuration
 LEDGER_BASE_URL=http://localhost:4000
 LEDGER_ADMIN_TOKEN=your-ledger-token-here
 
-# Optional: Development Configuration
+# ==============================================================================
+# FOUNDER WALLET GENERATION
+# ==============================================================================
+# Set this when running generate-founder-wallet script
+# FOUNDER_HANDLE=kaizen
+
+# ==============================================================================
+# Development Configuration
+# ==============================================================================
 OAA_BASE_URL=http://localhost:3000
 NODE_ENV=development

.eslintrc.json

@@ -0,0 +1,9 @@
+{
+  "extends": "next/core-web-vitals",
+  "ignorePatterns": [
+    "src/gic-indexer/**",
+    "gic-indexer/**",
+    "*.mjs",
+    "oaa-central-hub/**"
+  ]
+}