# Kottos — fast-agent secrets (rendered by Ansible from the vault)
# ------------------------------------------------------------------
# Never commit the rendered file.  Each value here pulls from a vault
# variable — if a vault variable is missing, Ansible will fail the
# template step with a clear error before the file is written.
#
# Same structure as fastagent.config.yaml; values merge with secrets
# taking precedence (fast-agent deep-merges the two).

openai:
  api_key: "{{ vault_kottos_openai_api_key }}"

mcp:
  servers:
    github:
      env:
        GITHUB_PERSONAL_ACCESS_TOKEN: "{{ vault_kottos_github_pat }}"

    angelia:
      headers:
        Authorization: "Bearer {{ vault_kottos_angelia_bearer }}"

    # Long-lived team JWT minted in Daedalus admin UI.
    # See kottos/README.md § "Mnemosyne memory" for the rotation procedure.
    mnemosyne:
      headers:
        Authorization: "Bearer {{ vault_kottos_mnemosyne_jwt }}"