deploy: hop production Coder inference to the rust coder API

Phoenix keeps grant auth and credit. When the fleet starts, it now presents
the shared internal token to coder.openagents.com so admitted turns run the
rust classifier and pin path.

Deploy story

What this commit did to the running system — joined from the forge receipt chain, the part a commit page elsewhere cannot show.

pushed

by user · WAL seq 477 · 2026-08-28T07:32:02.696052Z

built

3 modules in 131.2 s

deployed

live · 3 modules on 3 nodes · push→live —

deployed

needs_rolling_replace · 3 modules on 0 nodes · push→live —

Changed files

• modified ops/deploy/fleet-startup.template.sh

Diff

1 file changed, +4 -1

export OPENAGENTS_HTTPS_ALIASES="www.openagents.com,fleet.openagents.com"

export OPENAGENTS_IMAGE_DIGEST="$IMAGE_DIGEST"

export OPENAGENTS_INFERENCE_PROXY_URL="https://openagents.com/api/inference/proxy"

export OPENAGENTS_CODER_API_ORIGIN="https://coder.openagents.com"

export OPENAGENTS_CODER_API_INTERNAL_TOKEN="$(secret openagents-coder-api-internal-token)"

export OPENAGENTS_MACHINE_TOKEN_TTL_SECONDS="2592000"

export OPENAGENTS_MIGRATE_ON_BOOT="true"

export OPENAGENTS_RELEASES_BUCKET="openagentsgemini-cli-releases"

  OPENAGENTS_FORGE_WAL_BUCKET OPENAGENTS_FORGE_WAL_DIR

  OPENAGENTS_GCP_COMPUTE_TIMEOUT_MS OPENAGENTS_GCP_ROLLING_RPC_TIMEOUT_MS

  OPENAGENTS_HTTPS_ALIASES OPENAGENTS_IMAGE_DIGEST

  OPENAGENTS_INFERENCE_PROXY_URL OPENAGENTS_MACHINE_TOKEN_TTL_SECONDS

  OPENAGENTS_INFERENCE_PROXY_URL OPENAGENTS_CODER_API_ORIGIN

  OPENAGENTS_CODER_API_INTERNAL_TOKEN OPENAGENTS_MACHINE_TOKEN_TTL_SECONDS

  OPENAGENTS_MIGRATE_ON_BOOT OPENAGENTS_PRODUCTION_DEPLOY_ENABLED

  OPENAGENTS_RA_DATA_DIR OPENAGENTS_RA_EXPECTED_SIZE

  OPENAGENTS_RELEASES_BUCKET