.env.example

# pop-pay policy configuration
# Card credentials are stored in vault.enc — do not add them here.
# Run `pop-init-vault` to set up the encrypted vault.

# ── Vendors the agent is allowed to pay (JSON array) ──
# See docs/CATEGORIES_COOKBOOK.md for guidance on choosing categories.
POP_ALLOWED_CATEGORIES='["aws", "cloudflare", "openai", "github", "Wikipedia", "donation", "Wikimedia"]'

# ── Extra payment processors to trust (JSON array, optional) ──
# pop-pay includes a built-in list of known processors (Stripe, Zoho, Square, PayPal,
# Eventbrite, Tito, Luma, etc.). Add any unlisted processors your vendors use here.
# POP_ALLOWED_PAYMENT_PROCESSORS='["checkout.mybank.com"]'

# ── Spending limits ──
POP_MAX_PER_TX=100.0
POP_MAX_DAILY=500.0
POP_BLOCK_LOOPS=true

# ── CDP injection (required for BYOC card filling) ──
POP_AUTO_INJECT=true
POP_CDP_URL=http://localhost:9222

# ── Guardrail engine: keyword (default, zero-cost) or llm ──
# POP_GUARDRAIL_ENGINE=keyword

# ── Billing info for auto-filling name/address/contact fields on checkout pages ──
# POP_BILLING_FIRST_NAME=Bob
# POP_BILLING_LAST_NAME=Smith
# POP_BILLING_EMAIL=bob@example.com
# POP_BILLING_PHONE_COUNTRY_CODE=US     # Optional: fills country code dropdown; national number auto-derived from E.164
# POP_BILLING_PHONE=+14155551234        # E.164 format (e.g. +14155551234)
# POP_BILLING_STREET="123 Main St"
# POP_BILLING_CITY="Redwood City"
# POP_BILLING_STATE=CA             # State/province — full name or abbreviation, matched fuzzily
# POP_BILLING_COUNTRY=US           # Country — ISO code or full name, matched fuzzily
# POP_BILLING_ZIP=94043

# ── Optional: LLM guardrail config (only needed if POP_GUARDRAIL_ENGINE=llm) ──
# POP_LLM_API_KEY=sk-...
# POP_LLM_BASE_URL=http://localhost:11434/v1   # Ollama / local model
# POP_LLM_MODEL=gpt-4o-mini

# ── Optional: Stripe Issuing (commercial edition) ──
# POP_STRIPE_KEY=sk_live_...