# /etc/zopu/agents.env — runtime environment for zopu-agents.service
#
# Install at /etc/zopu/agents.env, owner root:zopu, mode 0600. Fill in every
# REPLACE-WITH-... value; the process validates the full schema at start and
# will refuse to boot if a required key is missing or malformed. This file is
# the single source of secrets for the VDS agents process — never commit a
# filled-in copy.

# --- Process listener --------------------------------------------------------
# Binds the private loopback only. Caddy (or an equivalent reverse proxy)
# terminates TLS upstream and forwards to 127.0.0.1:3000.
HOST=127.0.0.1
PORT=3000
NODE_ENV=production

# --- Rivet Engine + in-process registry (two distinct endpoints) -------------
#
# RIVET_ENDPOINT is the Engine CONTROL PLANE this process connects TO for actor
# metadata/management. The engine is a separate private service on this host.
RIVET_ENDPOINT=http://127.0.0.1:6420
#
# RIVET_SERVERLESS_ENDPOINT is the address the Engine calls BACK INTO this same
# process to reach the in-process serverless AgentOS registry handler, which is
# mounted at /internal/rivet/*. It must resolve to this process's own listener
# plus that base path. Do NOT point this at the engine; do NOT drop the path.
RIVET_SERVERLESS_ENDPOINT=http://127.0.0.1:3000/internal/rivet
#
# Shared secret authenticating actor connections between the engine and this
# registry's onBeforeConnect. Must match the value configured on the engine.
RIVET_WORKSPACE_TOKEN=REPLACE-WITH-LONG-RANDOM-WORKSPACE-TOKEN

# --- Flue SQLite persistence -------------------------------------------------
# Canonical conversation state. Parent dir must be one of the unit's
# ReadWritePaths (/srv/zopu/data).
FLUE_DB_PATH=/srv/zopu/data/flue/flue.db
# Bearer token shared with Convex for /internal/* service calls.
FLUE_DB_TOKEN=REPLACE-WITH-LONG-RANDOM-SERVICE-TOKEN

# --- Project workspaces ------------------------------------------------------
# Root for project-bound AgentOS VMs and generated artifacts. Must be one of
# the unit's ReadWritePaths (/srv/zopu/workspaces).
AGENT_WORKSPACE_ROOT=/srv/zopu/workspaces

# --- Convex control plane ----------------------------------------------------
CONVEX_URL=REPLACE-WITH-DEPLOYMENT.convex.cloud
CONVEX_SITE_URL=REPLACE-WITH-DEPLOYMENT.convex.site

# --- Agent model provider (OpenAI-compatible) --------------------------------
AGENT_MODEL_PROVIDER=cheaptricks
AGENT_MODEL_API=openai-completions
AGENT_MODEL_NAME=mimo-v2.5
AGENT_MODEL_BASE_URL=https://ai.example.com/v1
AGENT_MODEL_API_KEY=REPLACE-WITH-PROVIDER-API-KEY
AGENT_MODEL_CONTEXT_WINDOW=1048576
AGENT_MODEL_MAX_TOKENS=131072