deploy: inject AGENTBBS_QRYPT_ISSUER_KEY to enable qrypt invite minting

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Anthony Ettinger 2026-06-14 11:46:38 +00:00
parent d5135cd1fe
commit 3d0d483239
2 changed files with 5 additions and 0 deletions

View file

@ -55,6 +55,7 @@ jobs:
# GitHub masks these in logs; setup.sh upserts them idempotently. # GitHub masks these in logs; setup.sh upserts them idempotently.
COINPAY_API_KEY: ${{ secrets.COINPAY_API_KEY }} COINPAY_API_KEY: ${{ secrets.COINPAY_API_KEY }}
COINPAY_MERCHANT_ID: ${{ secrets.COINPAY_MERCHANT_ID }} COINPAY_MERCHANT_ID: ${{ secrets.COINPAY_MERCHANT_ID }}
AGENTBBS_QRYPT_ISSUER_KEY: ${{ secrets.AGENTBBS_QRYPT_ISSUER_KEY }}
run: | run: |
ssh -i ~/.ssh/id_deploy -p "$DEPLOY_PORT" \ ssh -i ~/.ssh/id_deploy -p "$DEPLOY_PORT" \
-o BatchMode=yes -o StrictHostKeyChecking=yes \ -o BatchMode=yes -o StrictHostKeyChecking=yes \
@ -62,6 +63,7 @@ jobs:
"sudo -n env BRANCH=$(printf %q "$DEPLOY_BRANCH") \ "sudo -n env BRANCH=$(printf %q "$DEPLOY_BRANCH") \
COINPAY_API_KEY=$(printf %q "$COINPAY_API_KEY") \ COINPAY_API_KEY=$(printf %q "$COINPAY_API_KEY") \
COINPAY_MERCHANT_ID=$(printf %q "$COINPAY_MERCHANT_ID") \ COINPAY_MERCHANT_ID=$(printf %q "$COINPAY_MERCHANT_ID") \
AGENTBBS_QRYPT_ISSUER_KEY=$(printf %q "$AGENTBBS_QRYPT_ISSUER_KEY") \
bash -s" <<'REMOTE' bash -s" <<'REMOTE'
set -euo pipefail set -euo pipefail
REPO=https://github.com/profullstack/agentbbs.git REPO=https://github.com/profullstack/agentbbs.git
@ -77,6 +79,7 @@ jobs:
exec env BRANCH="$BRANCH" \ exec env BRANCH="$BRANCH" \
COINPAY_API_KEY="${COINPAY_API_KEY:-}" \ COINPAY_API_KEY="${COINPAY_API_KEY:-}" \
COINPAY_MERCHANT_ID="${COINPAY_MERCHANT_ID:-}" \ COINPAY_MERCHANT_ID="${COINPAY_MERCHANT_ID:-}" \
AGENTBBS_QRYPT_ISSUER_KEY="${AGENTBBS_QRYPT_ISSUER_KEY:-}" \
"$SRC/setup.sh" "$SRC/setup.sh"
REMOTE REMOTE

View file

@ -297,6 +297,8 @@ upsert_env() { # KEY VALUE — skips when VALUE is empty
upsert_env COINPAY_API_KEY "${COINPAY_API_KEY:-}" upsert_env COINPAY_API_KEY "${COINPAY_API_KEY:-}"
upsert_env AGENTBBS_COINPAY_MERCHANT_ID "${COINPAY_MERCHANT_ID:-${AGENTBBS_COINPAY_MERCHANT_ID:-}}" upsert_env AGENTBBS_COINPAY_MERCHANT_ID "${COINPAY_MERCHANT_ID:-${AGENTBBS_COINPAY_MERCHANT_ID:-}}"
upsert_env COINPAY_BUSINESS_ID "${COINPAY_MERCHANT_ID:-${AGENTBBS_COINPAY_MERCHANT_ID:-}}" upsert_env COINPAY_BUSINESS_ID "${COINPAY_MERCHANT_ID:-${AGENTBBS_COINPAY_MERCHANT_ID:-}}"
# qrypt.chat invite issuer: Ed25519 seed (minting is disabled without it).
upsert_env AGENTBBS_QRYPT_ISSUER_KEY "${AGENTBBS_QRYPT_ISSUER_KEY:-}"
# ---- 7. systemd unit (runs as $SVC_USER, binds :22 via ambient capability) -- # ---- 7. systemd unit (runs as $SVC_USER, binds :22 via ambient capability) --
log "installing agentbbs.service" log "installing agentbbs.service"