.env.example

# =============================================================================
# EVO CAMPAIGN - CONFIGURAÇÃO DE AMBIENTE
# =============================================================================

# -----------------------------------------------------------------------------
# 🧩 EXTENSION POINTS BOOTSTRAP (multi-tenant overlay)
# -----------------------------------------------------------------------------
# Module specifier resolved by `loadExternalExtensions()` before
# `NestFactory.create`. When unset (default OSS run), evo-flow keeps the no-op
# extension-point implementations and behaves as a single-tenant deployment.
#
# To enable multi-tenant mode, install the enterprise overlay and set:
#   EVO_EXTENSIONS_BOOTSTRAP=@evoapi/enterprise-licensing-nestjs
# The overlay's `register()` then wires the real `runtime_context` enricher
# (header + membership), the per-request RLS transaction runner, and the
# `TenantContextModule`.
EVO_EXTENSIONS_BOOTSTRAP=

# Read by the overlay's `tenant-config.ts`. When `false` (default) the overlay
# falls back to `DEFAULT_TENANT_ID` for every request — keeps single-tenant
# deployments and tests trivially working. Flip to `true` only when the
# membership SELECT is wired and the request header is being supplied.
MULTI_TENANT_ENABLED=false

# UUID assigned to every row in single-tenant mode (used by the overlay's
# migration `1763000000000-AddTenantIdAndRLSToAllEntities` to backfill existing
# data and by the overlay enricher when `MULTI_TENANT_ENABLED=false`).
DEFAULT_TENANT_ID=00000000-0000-0000-0000-000000000000

# =============================================================================
# Auth (evo-auth-service-community)
# =============================================================================
# Single auth strategy: tokens are validated against evo-auth-service.
EVO_AUTH_SERVICE_URL=http://localhost:3001
EVO_AUTH_VALIDATE_TOKEN_ENDPOINT=/api/v1/auth/validate
EVO_AUTH_SIGN_IN_ENDPOINT=/api/v1/auth/sign_in

# Service-to-service API key (bypasses evo-auth-service)
AUTH_APIKEY_INTEGRATION_LOCAL=

# -----------------------------------------------------------------------------
# 🚀 MODOS DE EXECUÇÃO
# -----------------------------------------------------------------------------
# RUN_MODE: Como o serviço deve executar (valor obrigatório — boot falha com
# RUN_MODE inválido listando todos os valores aceitos).
#
#   Modos consolidados:
#   - single:           Tudo junto — APIs + Workers (dev / single-node)
#   - api:              Gateway HTTP (events + segments + journeys)
#   - event-worker:     Worker monolítico de eventos
#   - segment-worker:   Worker de segmentos (ClickHouse)
#   - temporal-worker:  Worker Temporal (journeys)
#   - campaign-worker:  Worker monolítico de campanhas
#
#   Modos distribuídos (split do pipeline — adicionados em EVO-1194; stubs
#   sem módulo real até as stories downstream pousarem):
#   - campaign-packer:  Materialização de audience da campanha
#   - campaign-sender:  Dispatch da campanha
#   - event-receiver:   Recebe webhook HTTP e publica no broker
#   - event-process:    Consome do broker e processa o evento
RUN_MODE=single

# QUEUE_MODE: Como processar eventos
#   - redis: Enviar para Redis Queue
#   - rabbitmq: Enviar para RabbitMQ
#   - kafka: Enviar para Kafka
QUEUE_MODE=kafka

# -----------------------------------------------------------------------------
# 🔀 BROKER SELECTOR (EVO-1196)
# -----------------------------------------------------------------------------
# BROKER_TYPE: Seleciona o adapter concreto resolvido pelo BrokerModule global
# (IMessageBroker). Valor obrigatório — boot falha com BROKER_TYPE ausente ou
# inválido, listando os valores aceitos.
#   - kafka:    KafkaBrokerAdapter (implementação real em EVO-1197)
#   - rabbitmq: RabbitMQBrokerAdapter (implementação real em EVO-1198)
BROKER_TYPE=kafka

# WRITE_MODE: Como escrever no ClickHouse (quando STORAGE_MODE=clickhouse)
#   - ch-sync: Escrita síncrona direta (para testes/debug)
#   - ch-async: Escrita assíncrona com batching (produção)
#   - kafka: Via Kafka queue (alta escala)
#   - redis: Via Redis queue (nossa implementação)
#   - rabbitmq: Via RabbitMQ queue (messaging robusto)
WRITE_MODE=kafka

# -----------------------------------------------------------------------------
# 🗄️ BANCO DE DADOS PRINCIPAL (PostgreSQL)
# -----------------------------------------------------------------------------
# Para modo híbrido (integração com evo-ai-crm)
POSTGRES_DB_HOST=localhost
POSTGRES_DB_PORT=5432
# OSS default is `postgres` (superuser) so a vanilla `cp .env.example .env`
# works out of the box. Multi-tenant deployments MUST switch this to a
# NOBYPASSRLS role (e.g. `evo_app`, provisioned by evo-enterprise-docker's
# postgres-init, story EVO-1620) so the overlay's RLS policies actually filter.
POSTGRES_DB_USERNAME=postgres
POSTGRES_DB_PASSWORD=password
POSTGRES_DB_DATABASE=evo_campaign

# -----------------------------------------------------------------------------
# 📊 CLICKHOUSE (Analytics Database)
# -----------------------------------------------------------------------------
CLICKHOUSE_HOST=localhost
CLICKHOUSE_PORT=8123
CLICKHOUSE_DATABASE=evo_campaign
CLICKHOUSE_USERNAME=default
CLICKHOUSE_PASSWORD=password
CLICKHOUSE_TABLE=contact_events

# -----------------------------------------------------------------------------
# 🔴 REDIS (Queue Mode)
# -----------------------------------------------------------------------------
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=
REDIS_DB=0
REDIS_QUEUE_NAME=evo-campaign-events

# -----------------------------------------------------------------------------
# 🐰 RABBITMQ (Queue Mode)
# -----------------------------------------------------------------------------
RABBITMQ_URL=amqp://localhost:5672
RABBITMQ_EXCHANGE=evo-campaign-events
RABBITMQ_QUEUE=events-queue
RABBITMQ_ROUTING_KEY=event

# -----------------------------------------------------------------------------
# ⚡ KAFKA (Queue Mode)
# -----------------------------------------------------------------------------
KAFKA_BROKERS=localhost:9092
KAFKA_TOPIC=evo-campaign-events
KAFKA_GROUP_ID=evo-campaign-consumers
KAFKA_PARTITIONS=3
KAFKA_TOPIC_REPLICATION_FACTOR=1
KAFKA_TOPIC_RETENTION_MS=86400000
KAFKA_TOPIC_RETENTION_BYTES=64424509440
# kafkajs consumers only decode gzip natively (zstd/snappy need a registered codec). Keep gzip.
KAFKA_TOPIC_COMPRESSION_TYPE=gzip
KAFKA_TOPIC_MAX_MESSAGE_BYTES=10485760

# -----------------------------------------------------------------------------
# ⏱️ TEMPORAL (Journey Orchestration)
# -----------------------------------------------------------------------------
# Endereço do servidor Temporal
TEMPORAL_ADDRESS=localhost:7233

# Namespace do Temporal (padrão: default)
TEMPORAL_NAMESPACE=default

# Task Queue para execução de jornadas
TEMPORAL_TASK_QUEUE=journey-execution

# -----------------------------------------------------------------------------
# 🌐 SERVIDOR HTTP
# -----------------------------------------------------------------------------
# Porta padrão do servidor (evite conflito com evo-auth na 3001)
PORT=3334

# -----------------------------------------------------------------------------
# 🔗 CLICK TRACKING & SHORT LINKS
# -----------------------------------------------------------------------------
# Domínio base para links encurtados (sem protocolo)
SHORT_URL_BASE_DOMAIN=http://localhost:3005
# Tamanho do código curto gerado
SHORT_URL_LENGTH=7

# -----------------------------------------------------------------------------
# 🛠️ CONFIGURAÇÕES DE PROCESSAMENTO
# -----------------------------------------------------------------------------
# Número máximo de tentativas em caso de erro
MAX_RETRIES=3

# Delay entre tentativas (ms)
RETRY_DELAY=1000

# Tamanho do batch para processamento
BATCH_SIZE=100

# Número de workers simultâneos
WORKER_CONCURRENCY=5

# -----------------------------------------------------------------------------
# 🎯 CONFIGURAÇÕES DE SEGMENTOS
# -----------------------------------------------------------------------------
# real-time, cron-job or both
SEGMENT_COMPUTATION_TYPE=cron-job

# Habilitar processamento distribuído de segmentos
ENABLE_DISTRIBUTED_PROCESSING=true

# Configurações otimizadas para segmentos
SEGMENT_BATCH_SIZE=50
SEGMENT_MAX_CONCURRENCY=20
SEGMENT_TIMEOUT=45000
SEGMENT_CIRCUIT_BREAKER_ENABLED=true
SEGMENT_METRICS_ENABLED=true

# Pool de conexões ClickHouse otimizado
CLICKHOUSE_MAX_CONNECTIONS=100
CLICKHOUSE_MIN_CONNECTIONS=20
CLICKHOUSE_ACQUIRE_TIMEOUT=45000
CLICKHOUSE_IDLE_TIMEOUT=180000

# -----------------------------------------------------------------------------
# 📝 LOGS E DEBUG
# -----------------------------------------------------------------------------
# Habilitar logs do TypeORM
TYPEORM_LOGGING=false

# Nível de log (error, warn, log, debug, verbose)
LOG_LEVEL=log

# -----------------------------------------------------------------------------
# 🔧 EXEMPLOS DE CONFIGURAÇÃO PARA DIFERENTES CENÁRIOS
# -----------------------------------------------------------------------------

# DESENVOLVIMENTO LOCAL (tudo junto):
# RUN_MODE=single
# QUEUE_MODE=direct
# STORAGE_MODE=postgres
# WRITE_MODE=ch-sync

# ALTA ESCALA - FRONTEND (só API):
# RUN_MODE=api
# QUEUE_MODE=kafka
# STORAGE_MODE=postgres
# WRITE_MODE=kafka

# ALTA ESCALA - BACKEND (só processamento):
# RUN_MODE=event-worker
# QUEUE_MODE=kafka
# STORAGE_MODE=clickhouse
# WRITE_MODE=ch-async

# ESCALA MÉDIA - COM REDIS:
# RUN_MODE=single
# QUEUE_MODE=redis
# STORAGE_MODE=clickhouse
# WRITE_MODE=redis

# -----------------------------------------------------------------------------
# 🔧 CONFIGURAÇÕES DO EVOAI CRM
# -----------------------------------------------------------------------------
# URL do servidor do EvoAI CRM
EVOAI_CRM_BASE_URL=http://localhost:3000
# Token de autenticação do EvoAI CRM
EVOAI_CRM_API_TOKEN=

# CrmClientService tuning (src/shared/crm-client/)
EVOAI_CRM_TIMEOUT_MS=30000
EVOAI_CRM_RETRY_MAX_ATTEMPTS=3
EVOAI_CRM_CACHE_TTL_MS=30000
EVOAI_CRM_CIRCUIT_THRESHOLD=5
EVOAI_CRM_CIRCUIT_RECOVERY_MS=60000

# AuthClientService tuning (src/shared/auth-client/)
# Dedicated s2s token for evo-auth-service (falls back to AUTH_APIKEY_INTEGRATION_LOCAL when blank)
EVO_AUTH_API_TOKEN=
EVO_AUTH_TIMEOUT_MS=10000
EVO_AUTH_CACHE_TTL_MS=30000

# Webhook signature validation — RUN_MODE=event-process (story 3.4 / EVO-1210)
# Per-provider secrets for src/runners/event-process/validators/. When a secret
# is unset that provider fails-closed (drops every event) and logs an
# "unconfigured-secrets" warning at boot. SendGrid is opt-in: with no key it
# passes through unverified. SES needs no secret (AWS SNS certificate-based).
EVOLUTION_API_WEBHOOK_TOKEN=
SPARKPOST_WEBHOOK_USER=
SPARKPOST_WEBHOOK_PASSWORD=
SENDGRID_WEBHOOK_VERIFICATION_KEY=
MAILERSEND_WEBHOOK_SECRET=
RESEND_WEBHOOK_SECRET=
MANDRILL_WEBHOOK_SECRET=
MANDRILL_WEBHOOK_URL=