# Agent config for the live integration tests, aimed at test resources: the
# testing identities, the dedicated test room, and the sandbox repo. Never
# point it at production.
#
# Secrets are ${…} references. CI passes them as environment variables;
# locally they come from .env at the repository root. A missing one fails
# the live tests that need it, rather than skipping them, so a broken
# credential cannot hide as a skip.

# Unused by the live tests, which work in pytest's temporary directories on a
# throwaway local sshd (the `ssh_host` fixture); present because every agent
# config has them.
state_db: /tmp/nisse-test/state.db
workspace: /tmp/nisse-test/work
project: nisse-dev-testing
build_host:
  address: 127.0.0.1
  key: /tmp/nisse-test/unused-key

llm:
  base_url: https://litellm.dongar.net
  token: ${NISSE_LLM_TOKEN}

# The live tests exercise the gated loop and the routes over a real proxy,
# not local-model competence (measured separately by test_model_capability),
# so every role uses a model that holds the tool-call contract.
roles:
  executor: claude-haiku-4-5
  planner: claude-haiku-4-5
  helper: claude-haiku-4-5
  expert: claude-haiku-4-5

matrix:
  homeserver: https://matrix.dongar.net
  user_id: "@nisse-dev-testing:dongar.net"
  token: ${NISSE_MATRIX_TOKEN}
  room_id: "!UxpXhTlQsFIeNZwkgv:dongar.net"   # the test room, never production
  operators: ["@dongar:dongar.net"]

gitea:
  url: https://gitea.dongar.net
  token: ${NISSE_GITEA_TOKEN}
  repo: dongar/nisse-dev-testing-sandbox      # the sandbox, never a real project
  # nisse-testing-operator plays the operator in the end-to-end tests
  # (NISSE_OPERATOR_TOKEN); an operator here and nowhere else.
  operators: [dongar, nisse-testing-operator]
  # What pushes go by (D4): the sandbox's deploy key, whose private half CI
  # writes to this path from the NISSE_PUSH_KEY secret (locally: copy it
  # there). An HTTPS push token works too: push_user plus push_token.
  push_key: /tmp/nisse-test/push_key