dongarandClaude Opus 5
dfa574aeec
CI / checks (push) Skipped
CI / checks (pull_request) Successful in 1m14s
Answering "is the workspace where the agent runs, or what it works on?" — it is what it works on, and conflating the two is dangerous rather than merely untidy. The agent commits its workspace with git add -A and pushes it, so anything inside the clone reaches the project repository. A .env placed there would publish the LiteLLM, Matrix and Gitea tokens as a side effect of the agent working correctly: silently, once, and probably unnoticed. Startup now refuses both that and a state store inside the clone, and .env.example documents the intended layout. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
60 lines
2.7 KiB
Bash
60 lines
2.7 KiB
Bash
# Copy to .env (chmod 600). Real environment variables win over this file.
|
|
# .env is gitignored; never commit real values.
|
|
|
|
# --- LLM access (A5): the LiteLLM proxy is the single LLM destination ---
|
|
NISSE_LLM_BASE_URL=http://litellm.example:4000
|
|
NISSE_LLM_TOKEN=sk-your-litellm-virtual-key
|
|
|
|
# --- Role mapping (A11): roles resolve to concrete model strings ---
|
|
NISSE_ROLE_EXECUTOR=anthropic/claude-haiku-4-5-20251001
|
|
NISSE_ROLE_PLANNER=anthropic/claude-opus-5
|
|
NISSE_ROLE_DELEGATE=anthropic/claude-opus-5
|
|
NISSE_ROLE_CONSULTANT=anthropic/claude-opus-5
|
|
|
|
# Opt-in for the live planning test: a model the virtual key can reach that
|
|
# holds the tool-call contract. Planning escalates unconditionally (A12), and
|
|
# small local models do not hold the contract reliably — llama3.2 returns
|
|
# truncated tool arguments, Haiku-class and up are solid.
|
|
NISSE_LIVE_PLANNER_MODEL=claude-haiku-4-5
|
|
|
|
# --- Matrix transport (A1), used by nisse-dev's MatrixTransport ---
|
|
NISSE_MATRIX_HOMESERVER=https://matrix.example
|
|
NISSE_MATRIX_USER_ID=@nisse-dev:example
|
|
NISSE_MATRIX_TOKEN=syt_your_matrix_access_token
|
|
NISSE_MATRIX_ROOM_ID=!roomid:example
|
|
# Dedicated room for the live integration test; never the production room.
|
|
NISSE_MATRIX_TEST_ROOM_ID=!testroomid:example
|
|
NISSE_MATRIX_OPERATORS=@you:example
|
|
|
|
# --- Gitea (B2): service account for branches, PRs, and comment intake ---
|
|
NISSE_GITEA_URL=https://gitea.example
|
|
NISSE_GITEA_TOKEN=your-scoped-service-account-token
|
|
# Sandbox repo for live tests; never the real project repo.
|
|
NISSE_GITEA_TEST_REPO=owner/sandbox-repo
|
|
# Gitea logins allowed to drive the agent via PR comments (A4 per-channel
|
|
# allowlist; a Matrix MXID and a Gitea login are different names).
|
|
NISSE_GITEA_OPERATORS=your-gitea-login
|
|
|
|
# --- Running the agent (the demo, not the tests) ---
|
|
# The tests use NISSE_GITEA_TEST_REPO; a running agent uses these.
|
|
#
|
|
# Layout. NISSE_WORKSPACE is the *clone the agent works in*, not the directory
|
|
# the agent runs from — they must not be the same place:
|
|
#
|
|
# ~/nisse-demo-workspace/ deployment root, not a git repo
|
|
# ├── .env this file
|
|
# ├── state.db the A2 state store
|
|
# └── project/ NISSE_WORKSPACE, the clone
|
|
#
|
|
# The agent commits its workspace with `git add -A` and pushes it, so anything
|
|
# inside the clone reaches the project repository. A .env or state store placed
|
|
# there would publish credentials as a side effect of the agent working
|
|
# correctly; startup refuses to proceed if either is inside the workspace.
|
|
NISSE_STATE_DB=~/nisse-demo-workspace/state.db
|
|
NISSE_WORKSPACE=~/nisse-demo-workspace/project
|
|
NISSE_PROJECT=demo
|
|
NISSE_GITEA_REPO=owner/demo-repo
|
|
# NISSE_BASE_BRANCH=main
|
|
# Path to this file, if not ./.env
|
|
# NISSE_ENV=~/nisse-demo-workspace/.env
|