jason.woltje
c2365ae519
- Containerized Pi hello-world proof (image mosaic-poc-agent:0.84.4, non-root) - Four immutable contract fixtures loaded into a generated system prompt - build/hello/verify/reset scripts with exact-match gating and reset safety - Documented Pi discovery (v0.84.4, -p mode, --system-prompt, container auth) - Append-only BUILD-LOG with corrections; deferred layers in LAYERS.md - Architecture plan: docs/plans/2026-09-02_atomic-mosaic-foundation.md
25 lines
951 B
Bash
25 lines
951 B
Bash
# Non-secret runtime settings for the mosaic-poc-agent container.
|
|
# Copy to .env if you want to override the defaults in compose.yaml.
|
|
#
|
|
# NEVER put credentials in this file. Authentication is supplied at
|
|
# runtime only, via one of the two documented paths:
|
|
# 1. read-only mounted pi auth file (default: ~/.pi/agent/auth.json,
|
|
# override the host path with PI_AUTH_FILE)
|
|
# 2. provider API key environment variable (ZAI_API_KEY or
|
|
# ANTHROPIC_API_KEY), passed through by compose.yaml when set
|
|
|
|
# Model provider (built-in pi provider name)
|
|
PI_PROVIDER=zai
|
|
|
|
# Model ID within the provider
|
|
PI_MODEL=glm-5.3-flash
|
|
|
|
# Optional: alternative host path of the pi credential file mounted
|
|
# read-only at /home/node/.pi/agent/auth.json in the container
|
|
#PI_AUTH_FILE=/home/jwoltje/.pi/agent/auth.json
|
|
|
|
# Optional: documented env-var auth alternative (secret! set in your
|
|
# shell or a gitignored .env, never commit)
|
|
#ZAI_API_KEY=
|
|
#ANTHROPIC_API_KEY=
|