<?php
// config/env.php — adjust for your server
return [
  'debug' => true,

  'db' => [
    'dsn'  => 'mysql:host=127.0.0.1;dbname=dewepw_emojiapi;charset=utf8mb4',
    'user' => 'dewepw_emojiapi_admin',
    'pass' => 'o$NUF(.4AHuV{RzT',
  ],

  // SPA + extension origins
  'allowed_origins' => [
    'https://emoji.dewe.pw',
    'chrome-extension://YOUR_EXTENSION_ID',
    'http://localhost:5173', // dev
  ],

  // First-party whitelist logic
  'site_host'       => 'emoji.dewe.pw',
  'frontend_header' => 'web-v1',   // your SPA sets: X-Dewemoji-Frontend: web-v1

  // Free daily limit for API (Pro/Whitelist are unlimited)
  'free_daily_limit' => 30,

  'gateway_mode' => 'sandbox', // 'sandbox' or 'live'

  // Gumroad
  'gumroad' => [
    // product_ids allowed (array); if empty => accept any product (useful for sandbox)
    'product_ids' => ['YOUR_GUMROAD_PRODUCT_ID_SUB', 'YOUR_GUMROAD_PRODUCT_ID_LIFETIME'],
    'verify_url'  => 'https://api.gumroad.com/v2/licenses/verify',
  ],

  // Mayar
  'mayar' => [
    'api_base'     => 'https://api.mayar.id', // adjust if your doc shows a different base
    'secret_key'   => 'sk_test_xxx',          // if required for Mayar verify
    // Endpoints — keep configurable; adjust to exact spec later
    'endpoint_verify'    => '/v1/license/verify',    // software license code verify
    'endpoint_activate'  => '/v1/license/activate',  // for subscription type only
    'endpoint_deactivate'=> '/v1/license/deactivate'
  ],
];