Ship realtime read-model integration

.env.example

@@ -7,6 +7,8 @@ PRIVY_APP_SECRET=
 # Required in production. Use two independent authenticated Ethereum RPCs.
 ETHEREUM_RPC_URL=
 ETHEREUM_RPC_URL_B=
+PROGRAMMABLE_ALCHEMY_MAINNET_RPC_URL=
+PROGRAMMABLE_QUICKNODE_MAINNET_RPC_URL=
 
 # Optional for contract rehearsal. Use a reliable Sepolia RPC before broadcasting.
 SEPOLIA_RPC_URL=
@@ -28,6 +30,75 @@ UNISWAP_API_KEY=
 UNISWAP_V4_SUBGRAPH_URL=https://gateway.thegraph.com/api/subgraphs/id/DiYPVdygkfjDWhbxGSqAQxwBKmfKnkWQojqeM2rkLb3G
 UNISWAP_V4_SUBGRAPH_API_KEY=
 
+# Server-only realtime read-model providers. Keep every indexed route disabled
+# until the migrated database, full backfill, parity, reorg and fallback gates
+# have passed. The Envio endpoint is public by design; Postgres and Graph
+# credentials must never use a NEXT_PUBLIC_ prefix.
+PROGRAMMABLE_PROJECTOR_ACTIVE=false
+PROGRAMMABLE_MARKET_PROJECTOR_ACTIVE=false
+PROGRAMMABLE_ENVIO_GRAPHQL_URL=https://indexer.hyperindex.xyz/d7a39a2/v1/graphql
+PROGRAMMABLE_ENVIO_GRAPHQL_TOKEN=
+PROGRAMMABLE_ENVIO_MAXIMUM_BODY_BYTES=131072
+# Remote URLs must include an explicit port and sslmode=verify-full.
+# Store the downloaded Supabase root certificate as this server-only PEM value.
+PROGRAMMABLE_API_READER_DATABASE_URL=
+# Operator-only direct connection. This must be the verified
+# db.<project-ref>.supabase.co:5432 endpoint and must never be added to Vercel.
+PROGRAMMABLE_MIGRATOR_DATABASE_URL=
+# Dedicated least-privilege login used only to consume signed release-probe nonces.
+PROGRAMMABLE_RELEASE_PROBE_DATABASE_URL=
+# Writer-only projector connection. It must authenticate as the constrained
+# programmable_projector_login role and must never use a NEXT_PUBLIC_ prefix.
+PROGRAMMABLE_PROJECTOR_DATABASE_URL=
+PROGRAMMABLE_PROJECTOR_RUNTIME_DATABASE_URL=
+# Dedicated server-only shadow-reconciler login. It receives only the narrow
+# preparity/corpus/commit capabilities, serves the market projector through the
+# same private source, and must not reuse a projector or API reader credential.
+PROGRAMMABLE_RECONCILER_DATABASE_URL=
+# PEM trust root used only by the reconciler database connection.
+PROGRAMMABLE_RECONCILER_DATABASE_SSL_CA=
+# Every market page is bound to this exact source projector generation.
+PROGRAMMABLE_SOURCE_PROJECTOR_VERSION=projector-v1
+PROGRAMMABLE_POSTGRES_SSL_CA_PEM=
+PROGRAMMABLE_POSTGRES_MAX_CONNECTIONS=2
+PROGRAMMABLE_POSTGRES_CONNECT_TIMEOUT_MS=1000
+PROGRAMMABLE_POSTGRES_IDLE_TIMEOUT_MS=5000
+PROGRAMMABLE_POSTGRES_LOCK_TIMEOUT_MS=250
+PROGRAMMABLE_UNISWAP_GRAPH_BASE_URL=https://gateway.thegraph.com
+PROGRAMMABLE_UNISWAP_GRAPH_API_KEY=
+# Public provenance labels and commitments for the reviewed official Uniswap
+# v4 subgraph query/parser contract. These are evidence, never credentials.
+PROGRAMMABLE_UNISWAP_GRAPH_REDACTED_IDENTITY=uniswap-v4-official
+PROGRAMMABLE_UNISWAP_GRAPH_DEPLOYMENT_COMMITMENT=0x44c8d7127503563653f7f53ea339caa383453e00224a6c33cf95fc29f5c3e35c
+PROGRAMMABLE_UNISWAP_GRAPH_SCHEMA_COMMITMENT=0xd0d2087059ca0a7c1e7c633999ff75ea34fcc00d42cee8985a79d0ef76e6813c
+# Generated by the reviewed bootstrap plan from the credential-free provider
+# endpoint identity. These values must match the exact release commit.
+PROGRAMMABLE_ALCHEMY_MAINNET_RPC_ENDPOINT_COMMITMENT=
+PROGRAMMABLE_QUICKNODE_MAINNET_RPC_ENDPOINT_COMMITMENT=
+# Random server-only secret used to verify route-bound release-probe HMACs.
+PROGRAMMABLE_SHADOW_PROBE_TOKEN=
+
+INDEXED_EXPLORE_LIST_READS_ENABLED=false
+INDEXED_EXPLORE_TOKEN_READS_ENABLED=false
+INDEXED_EXPLORE_CHART_READS_ENABLED=false
+INDEXED_CREATOR_PROFILE_READS_ENABLED=false
+INDEXED_CLASSIC_V3_PROFILE_READS_ENABLED=false
+INDEXED_LAUNCH_LOOKUP_ENABLED=false
+INDEXED_PUBLIC_INDEXER_FEED_READS_ENABLED=false
+INDEXED_READ_SHADOW_COMPARE_ENABLED=false
+INDEXED_READ_REQUIRE_PARITY_ENABLED=true
+INDEXED_READ_LIVE_FALLBACK_ENABLED=true
+
+# Exact public identities and reviewed commitments recorded with each
+# projector generation. These values are evidence labels, not credentials.
+PROGRAMMABLE_PROJECTOR_ENVIO_REDACTED_IDENTITY=envio:production-7f24e63
+PROGRAMMABLE_PROJECTOR_ENVIO_MIRROR_COMMIT=7ffd15c2a28c481a2d3632e30b315262c2471b2e
+PROGRAMMABLE_PROJECTOR_BINDING_MODE=release
+
+# Private token for a staged read-model performance capture. Never expose it
+# through a NEXT_PUBLIC_ variable or include it in captured evidence.
+PROGRAMMABLE_PERFORMANCE_PROBE_TOKEN=
+
 # Required by release tooling when publishing and checking source
 # verification on Etherscan.
 ETHERSCAN_API_KEY=
@@ -53,5 +124,3 @@ DEEP_V3_LAUNCHER_TRANSACTION=
 DEEP_V3_RELEASE_COMMIT=
 # Required by Vercel Cron when refreshing the durable Mainnet index.
 CRON_SECRET=
-
-OPS_BLOB_READ_WRITE_TOKEN=