Paul O'Reilly d68d1b0f6b fix(minimax,z-ai): write apiKeyHelper to agent home, mode 0444 for read ...

Mirrors agent-runtimes commit 166c19b. CRS serves these harness files to
dispatchers, so this repo must match.

Two fixes from the failing smoke test:

1. init.sh resolves the agent user's home via getent (init.sh runs as
   root, but claude runs as the agent user — different $HOME).
2. secrets_required mode "0400" → "0444" so the agent user can read the
   ESO-mounted secret via apiKeyHelper. The file is in pod-local tmpfs.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-07 15:42:20 +12:00

2.8 KiB

Executable File

Raw Blame History

View Raw