# /etc/zopu/agents.env — runtime environment for zopu-agents.service
#
# Install at /etc/zopu/agents.env, owner root:zopu, mode 0600. Fill in every
# REPLACE-WITH-... value; the process validates the full schema at start and
# will refuse to boot if a required key is missing or malformed. This file is
# the single source of secrets for the VDS agents process — never commit a
# filled-in copy.

# --- Process listener --------------------------------------------------------
# Binds the private loopback only. Caddy (or an equivalent reverse proxy)
# terminates TLS upstream and forwards to 127.0.0.1:3000.
HOST=127.0.0.1
PORT=3000
NODE_ENV=production

# --- Rivet Engine ------------------------------------------------------------
#
# RIVET_ENDPOINT is the Engine CONTROL PLANE this process connects TO for actor
# metadata/management. The engine is a separate private service on this host.
RIVET_ENDPOINT=http://127.0.0.1:6420
#
# Shared secret authenticating actor connections between the in-process envoy
# and the AgentOS project workspace actor. Must match the value used by the
# engine.
RIVET_WORKSPACE_TOKEN=REPLACE-WITH-LONG-RANDOM-WORKSPACE-TOKEN

# RivetKit runtime selection. These make the native Mode A choice explicit;
# the registry still connects outbound to the private Engine.
RIVETKIT_RUNTIME_MODE=envoy
RIVETKIT_RUNTIME=native

# --- Actor versioning --------------------------------------------------------
#
# RivetKit uses this to drain actors when the envoy version changes. Bump it
# whenever the actor definition or envoy behavior changes in a way that cannot
# coexist with the previous version.
RIVET_ENVOY_VERSION=1

# --- Flue SQLite persistence -------------------------------------------------
# Canonical conversation state. Parent dir must be one of the unit's
# ReadWritePaths (/srv/zopu/data).
FLUE_DB_PATH=/srv/zopu/data/flue/flue.db
# Bearer token shared with Convex for /internal/* service calls.
FLUE_DB_TOKEN=REPLACE-WITH-LONG-RANDOM-SERVICE-TOKEN

# --- Project workspaces ------------------------------------------------------
# Root for project-bound AgentOS VMs and generated artifacts. Must be one of
# the unit's ReadWritePaths (/srv/zopu/workspaces).
AGENT_WORKSPACE_ROOT=/srv/zopu/workspaces

# --- Convex control plane ----------------------------------------------------
CONVEX_URL=REPLACE-WITH-DEPLOYMENT.convex.cloud
CONVEX_SITE_URL=REPLACE-WITH-DEPLOYMENT.convex.site

# --- Agent model provider (OpenAI-compatible) --------------------------------
AGENT_MODEL_PROVIDER=cheaptricks
AGENT_MODEL_API=openai-completions
AGENT_MODEL_NAME=mimo-v2.5
AGENT_MODEL_BASE_URL=https://ai.example.com/v1
AGENT_MODEL_API_KEY=REPLACE-WITH-PROVIDER-API-KEY
AGENT_MODEL_CONTEXT_WINDOW=1048576
AGENT_MODEL_MAX_TOKENS=131072