🍪 Cookie Jar v3.1.0 Release - Production Ready

.cursorignore

@@ -0,0 +1,7 @@
+# Add directories or file patterns to ignore during indexing (e.g. foo/ or *.csv)
+.env
+.env.local
+.env.development
+.env.test
+.env.production
+

.env.sample

@@ -1,67 +1,108 @@
-# 🍪 Cookie Jar Environment Configuration
-# Copy this file to .env.local and fill in your values
+# Cookie Jar Environment Configuration
 
 # =============================================================================
-# FRONTEND CONFIGURATION
+# BLOCKCHAIN NETWORKS & RPC ENDPOINTS
 # =============================================================================
 
-# WalletConnect Project ID (required for wallet connections)
-# Get one at: https://cloud.walletconnect.com/
-NEXT_PUBLIC_WALLET_CONNECT_PROJECT_ID=""
+# Alchemy API Key (works across all supported networks)
+NEXT_PUBLIC_ALCHEMY_API_KEY=your_alchemy_api_key
 
-# Alchemy API Key (optional but recommended for better RPC performance)
-# Get one at: https://www.alchemy.com/
-NEXT_PUBLIC_ALCHEMY_ID=""
+# Moralis API Key (alternative NFT provider)
+NEXT_PUBLIC_MORALIS_API_KEY=your_moralis_api_key
 
 # =============================================================================
-# CONTRACTS CONFIGURATION  
+# NFT & METADATA SERVICES
 # =============================================================================
 
-# Deployer private key (for testnet/mainnet deployments)
-# ⚠️ NEVER commit real private keys to version control!
-PRIVATE_KEY=
+# OpenSea API Key (for collection verification and floor prices)
+NEXT_PUBLIC_OPENSEA_API_KEY=your_opensea_api_key
 
-# Anvil private key (hardcoded for local development - safe to commit)
-ANVIL_PRIVATE_KEY=0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80
+# Reservoir API Key (for NFT marketplace data)
+NEXT_PUBLIC_RESERVOIR_API_KEY=your_reservoir_api_key
 
-# Etherscan API key for contract verification
-ETHERSCAN_API_KEY=dummy
+# IPFS Gateway Configuration
+NEXT_PUBLIC_IPFS_GATEWAY=https://gateway.pinata.cloud/ipfs/
+NEXT_PUBLIC_PINATA_JWT=your_pinata_jwt_for_uploads
 
-# Deployment configuration
-DEPLOYER_SCRIPT=Deploy.s.sol:Deploy
-DEPLOYER_CHAIN_NAME=celo-alfajores
+# =============================================================================
+# DEVELOPMENT & TESTING
+# =============================================================================
+
+# Enable debug mode for NFT validation
+NEXT_PUBLIC_DEBUG_NFT_VALIDATION=false
+
+# Mock NFT data in development (set to true to use mock data)
+NEXT_PUBLIC_USE_MOCK_NFT_DATA=false
+
+# NFT validation cache duration (minutes)
+NEXT_PUBLIC_NFT_CACHE_DURATION=60
+
+# Maximum NFTs to load per collection (performance limit)
+NEXT_PUBLIC_MAX_NFTS_PER_COLLECTION=1000
 
 # =============================================================================
-# RPC ENDPOINTS
+# SECURITY & RATE LIMITING
 # =============================================================================
 
-# Celo Network
-CELO_URL="https://forno.celo.org"
-ALFAJORES_URL="https://alfajores-forno.celo-testnet.org"
+# Rate limiting for NFT API calls (requests per minute)
+NEXT_PUBLIC_API_RATE_LIMIT=60
+
+# Timeout for NFT metadata fetching (milliseconds)
+NEXT_PUBLIC_NFT_FETCH_TIMEOUT=10000
+
+# Maximum concurrent NFT validation requests
+NEXT_PUBLIC_MAX_CONCURRENT_VALIDATIONS=5
+
+# =============================================================================
+# ANALYTICS & MONITORING
+# =============================================================================
 
-# Ethereum Network  
-ETHEREUM_URL="https://eth.drpc.org"
-SEPOLIA_URL="https://sepolia.drpc.org"
+# Enable NFT gating analytics
+NEXT_PUBLIC_ENABLE_NFT_ANALYTICS=true
 
-# Base Network
-BASE_URL="https://base.drpc.org" 
-BASE_SEPOLIA_URL="https://sepolia.base.org"
+# Sentry DSN for error tracking
+NEXT_PUBLIC_SENTRY_DSN=your_sentry_dsn
 
-# Local development (Anvil)
-RPC_URL=http://127.0.0.1:8545
 
 # =============================================================================
-# CONTRACT VERIFICATION
+# CONTRACT DEPLOYMENT CONFIGURATION  
 # =============================================================================
+# Production deployments use Foundry Keystore (SECURE)
+# Import your account: cast wallet import deployer --interactive
+KEYSTORE_ACCOUNT=deployer
+
+# Local development only (NOT for production!)
+# Only set this for local Anvil deployments
+# PRIVATE_KEY=your_private_key_for_local_development_only
+
+# Deployer address for reference (not used in deployment)
+DEPLOYER_ADDRESS=your_deployer_address
+
 
-# Etherscan API keys for different networks
-ETHERSCAN_API_KEY=
-BASESCAN_API_KEY=
-CELOSCAN_API_KEY=
+# RPC URLs for deployment
+ETHEREUM_RPC_URL=https://eth-mainnet.g.alchemy.com/v2/your_api_key
+BASE_RPC_URL=https://base-mainnet.g.alchemy.com/v2/your_api_key
+SEPOLIA_RPC_URL=https://eth-sepolia.g.alchemy.com/v2/your_api_key
+
+# Etherscan API keys for contract verification
+ETHERSCAN_API_KEY=your_etherscan_api_key
 
 # =============================================================================
-# LOCAL DEVELOPMENT CONFIGURATION
+# USAGE INSTRUCTIONS
 # =============================================================================
 
-# Path to local deployment file (relative to contracts directory)
-LOCAL_DEPLOYMENT_FILE=../client/public/contracts/local-deployment.json
+# 1. Copy this file to .env.local for local development
+# 2. Replace placeholder values with your actual API keys
+# 3. Never commit .env.local to version control
+# 4. For production, set these as environment variables on your deployment platform
+
+# REQUIRED for basic functionality:
+# - NEXT_PUBLIC_ALCHEMY_API_KEY (at minimum)
+
+# RECOMMENDED for full features:
+# - NEXT_PUBLIC_OPENSEA_API_KEY (for collection verification)
+# - NEXT_PUBLIC_PINATA_JWT (for IPFS uploads)
+
+# OPTIONAL enhancements:
+# - NEXT_PUBLIC_MORALIS_API_KEY (alternative NFT provider)
+# - NEXT_PUBLIC_RESERVOIR_API_KEY (marketplace data)

.github/actions/setup-node-pnpm/action.yml

@@ -0,0 +1,44 @@
+name: 'Setup Node.js and pnpm'
+description: 'Setup Node.js, pnpm, and install dependencies for Cookie Jar project'
+
+inputs:
+  node-version:
+    description: 'Node.js version to use'
+    required: false
+    default: '18'
+  pnpm-version:
+    description: 'pnpm version to use'
+    required: false
+    default: '8'
+  working-directory:
+    description: 'Working directory to run commands'
+    required: false
+    default: '.'
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Setup Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: ${{ inputs.node-version }}
+        cache: 'npm'
+        cache-dependency-path: '${{ inputs.working-directory }}/pnpm-lock.yaml'
+
+    - name: Setup pnpm
+      uses: pnpm/action-setup@v3
+      with:
+        version: ${{ inputs.pnpm-version }}
+
+    - name: Install dependencies
+      shell: bash
+      working-directory: ${{ inputs.working-directory }}
+      run: |
+        # Try frozen lockfile first, fallback to regular install in CI
+        if [ "$CI" = "true" ] || [ "$GITHUB_ACTIONS" = "true" ]; then
+          echo "🤖 CI environment detected"
+          pnpm install --no-frozen-lockfile || pnpm install
+        else
+          echo "🔒 Using frozen lockfile for local consistency"
+          pnpm install --frozen-lockfile
+        fi