Paul O'Reilly 455d8d135b fix(z-ai): wire auth_token via apiKeyHelper, never via env
Mirrors the minimax fix to z-ai. Replaces bin/anthropic-compat-wrapper.sh
(which did `exec env ANTHROPIC_AUTH_TOKEN="$(cat ...)" claude "$@"`,
exposing the secret in the claude subprocess' /proc/<pid>/environ) with
init.sh that writes ~/.claude/settings.json with:

  apiKeyHelper: "cat /run/agent/secrets/z-ai/auth_token"

Claude Code routes apiKeyHelper output to `Authorization: Bearer <value>`
when ANTHROPIC_BASE_URL is non-anthropic.com — exactly what the Z.ai
proxy at api.z.ai/api/anthropic requires.

The legacy K8s Secret may still ship a `base_url` file; it is
intentionally ignored by init.sh (the base URL is not a credential and
lives in harness.yaml).

Mirrors agent-runtimes commit (z-ai apiKeyHelper). CRS serves these
harness files to dispatchers, so this repo must match.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-07 13:47:52 +12:00

agent-runtime-framework

Framework reference config repo for the agent-runtimes platform.

This repo is attached at CP scope with tags [harnesses, templates, workflows, model-registry, models] and provides the default content that all installations inherit.

Contents

  • harnesses/ — capabilities, contexts, composites
  • task-templates/ — dispatch-task template YAMLs
  • workflows/ — workflow DAG definitions
  • model-registry/ — model scoring YAMLs
  • models/ — model endpoint YAMLs

Usage

Registered as a CRS attachment at CP scope (priority 100). Customer installations attach their own repos at lower priority to override or extend.

Description
Agent Runtimes framework reference config — harnesses, templates, workflows, model-registry, models
Readme 428 KiB
Languages
Shell 86.6%
Python 13.4%