RC-10

.env.example

@@ -109,6 +109,9 @@ BEACON_DRAND_BEACON_ID=quicknet
 # Same secret is read by the game server and Customer Service. Generate a
 # separate random value; do not reuse JWT_SECRET.
 CUSTOMER_SERVICE_SHARED_SECRET=replace-with-a-separate-32-plus-char-random-secret
+# Game -> Customer Service internal callback for durable hosted-worker credit rewards.
+# Docker/Compose: http://customer-service:8092 ; local go run: http://127.0.0.1:8092
+CUSTOMER_SERVICE_INTERNAL_URL=http://127.0.0.1:8092
 
 # Customer portal (8090), private Customer-Service admin (8091), and the
 # Docker-network-only worker registration listener (8092).
@@ -129,6 +132,20 @@ CS_ADMIN_PASSWORD=replace-with-another-strong-unique-password
 # in production unless you explicitly need private admin grants.
 CS_ALLOW_MANUAL_CREDITS=0
 
+# Customer engagement defaults. They are seeded into customer-service SQLite
+# only once and can then be changed live in the private Customer Admin UI.
+CS_CUSTOMER_LOGIN_ENABLED=true
+CS_CUSTOMER_REGISTRATION_ENABLED=true
+# 0 disables browser registration proof-of-work; 16 is a moderate default.
+CS_REGISTRATION_POW_BITS=16
+# When true, registration also requires an admin-generated one-shot invite.
+CS_REGISTRATION_INVITE_REQUIRED=false
+# Free prepaid credits for a newly created customer account. 0 disables.
+CS_NEW_CUSTOMER_CREDITS=0
+# Credits granted when a hosted worker improves its personal best score.
+# 0 disables the reward. Normal browser/CLI identities are never credited here.
+CS_POSITIVE_TIP_CREDITS=0
+
 # Hosted worker billing: 1.0 means one credit is consumed for each paid minute
 # of each running worker. Billing is prepaid; the worker stops before a minute
 # that cannot be funded.