From 3d0d483239f09716e3d71022ba1bfa706c65c4a0 Mon Sep 17 00:00:00 2001
From: Anthony Ettinger <anthony@chovy.com>
Date: Sun, 14 Jun 2026 11:46:38 +0000
Subject: [PATCH] deploy: inject AGENTBBS_QRYPT_ISSUER_KEY to enable qrypt
 invite minting

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .github/workflows/deploy.yml | 3 +++
 setup.sh                     | 2 ++
 2 files changed, 5 insertions(+)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 7d087bb..a6967ea 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -55,6 +55,7 @@ jobs:
           # GitHub masks these in logs; setup.sh upserts them idempotently.
           COINPAY_API_KEY: ${{ secrets.COINPAY_API_KEY }}
           COINPAY_MERCHANT_ID: ${{ secrets.COINPAY_MERCHANT_ID }}
+          AGENTBBS_QRYPT_ISSUER_KEY: ${{ secrets.AGENTBBS_QRYPT_ISSUER_KEY }}
         run: |
           ssh -i ~/.ssh/id_deploy -p "$DEPLOY_PORT" \
               -o BatchMode=yes -o StrictHostKeyChecking=yes \
@@ -62,6 +63,7 @@ jobs:
               "sudo -n env BRANCH=$(printf %q "$DEPLOY_BRANCH") \
                  COINPAY_API_KEY=$(printf %q "$COINPAY_API_KEY") \
                  COINPAY_MERCHANT_ID=$(printf %q "$COINPAY_MERCHANT_ID") \
+                 AGENTBBS_QRYPT_ISSUER_KEY=$(printf %q "$AGENTBBS_QRYPT_ISSUER_KEY") \
                  bash -s" <<'REMOTE'
           set -euo pipefail
           REPO=https://github.com/profullstack/agentbbs.git
@@ -77,6 +79,7 @@ jobs:
           exec env BRANCH="$BRANCH" \
             COINPAY_API_KEY="${COINPAY_API_KEY:-}" \
             COINPAY_MERCHANT_ID="${COINPAY_MERCHANT_ID:-}" \
+            AGENTBBS_QRYPT_ISSUER_KEY="${AGENTBBS_QRYPT_ISSUER_KEY:-}" \
             "$SRC/setup.sh"
           REMOTE
 
diff --git a/setup.sh b/setup.sh
index ec43b0e..fbf0f63 100755
--- a/setup.sh
+++ b/setup.sh
@@ -297,6 +297,8 @@ upsert_env() {  # KEY VALUE — skips when VALUE is empty
 upsert_env COINPAY_API_KEY "${COINPAY_API_KEY:-}"
 upsert_env AGENTBBS_COINPAY_MERCHANT_ID "${COINPAY_MERCHANT_ID:-${AGENTBBS_COINPAY_MERCHANT_ID:-}}"
 upsert_env COINPAY_BUSINESS_ID "${COINPAY_MERCHANT_ID:-${AGENTBBS_COINPAY_MERCHANT_ID:-}}"
+# qrypt.chat invite issuer: Ed25519 seed (minting is disabled without it).
+upsert_env AGENTBBS_QRYPT_ISSUER_KEY "${AGENTBBS_QRYPT_ISSUER_KEY:-}"
 
 # ---- 7. systemd unit (runs as $SVC_USER, binds :22 via ambient capability) --
 log "installing agentbbs.service"