Agent Profiles

image: giglabo/claude-heretic:latest
runner: docker

image: giglabo/claude-heretic:latest
runner: docker
agent_type: claude
provider: anthropic
description: "Claude agent with full tooling"

# Secrets — resolved before interpolation, never stored in YAML
secrets:
  ANTHROPIC_API_KEY: "~/.heretic/get-anthropic-key.sh"
  ZAI_API_KEY: "~/.heretic/get-secret.sh zai"

volumes:
  - source: "${CWD}"
    target: /workspace
    readonly: false
  - source: "${CWD}/.env"
    target: /workspace/.env
    readonly: true

env:
  ANTHROPIC_API_KEY: "${ANTHROPIC_API_KEY}"     # from secrets above
  NODE_ENV: development

workdir: /workspace
command: ["--profile", "default"]
interactive: true
tty: true

extra:
  network: host
  ports: ["3000:3000", "5173:5173"]
  capabilities: [SYS_PTRACE]
  privileged: false
  user: "1000:1000"
  run_as_root: false
  hostname: heretic-agent
  memory: "4g"
  cpus: "2.0"
  shm_size: "2g"
  labels:
    team: platform

tool_backends:
  sidecars:
    - runtime: node
      image: heretic-builder-node:latest
      cache_volumes: ["heretic-npm-cache:/home/builder/.npm"]
  workspace_target: /workspace
  ready_timeout: 60

mcp_file: ~/shared/mcp-servers.json
mcp:
  - name: filesystem
    command: npx
    args: ["-y", "@modelcontextprotocol/server-filesystem", "/workspace"]
  - name: github
    command: npx
    args: ["-y", "@modelcontextprotocol/server-github"]
    env:
      GITHUB_TOKEN: "${GH_TOKEN}"
mcp_override: false

git:
  token: "${GH_TOKEN}"
  author_name: "Heretic Agent"
  author_email: "[email protected]"

dind: false
claude_settings: ~/.heretic/claude-settings.json

volumes:
  - source: ${CWD}          # host path; ${VAR} allowed; must be absolute after interpolation
    target: /workspace      # container path
    readonly: false         # optional → mounted :ro

extra:
  run_as_root: true

ssh:
  host: dev-server.example.com    # required, non-empty
  port: 22                        # optional, 1–65535
  user: agent                     # optional, default "agent"
  key_path: "${HOME}/.ssh/id_rsa" # optional, must be ABSOLUTE; mounted read-only
  host_cwd: /home/agent/workspace # optional working directory on the remote host

tool_backends:
  sidecars:
    - runtime: node               # node | python | java | go | rust only
      image: heretic-builder-node:latest
      port: 8080                  # optional, default 8080
      command: ["exec-server", "-port", "8080", "-cwd", "/workspace"]
      env: { NPM_CONFIG_FUND: "false" }
      env_passthrough: ["NPM_TOKEN"]
      cache_volumes: ["node-cache:/home/builder/.npm"]
  workspace_target: /workspace    # default; MUST match one volume target
  ready_timeout: 60               # seconds, ≥ 1
  run_as_caller_uid: true         # default true

secrets:
  CLAUDE_API_KEY: ~/.heretic/get-claude-key.sh   # script → stdout (trimmed)
  ZAI_KEY: $ZAI_TOKEN                            # environment reference
  PLAIN: sk-literal-value                        # literal

.heretic/temp/<session>            → /home/agent/.claude and /root/.claude
                                     (or the .copilot pair for agent_type: copilot-cli)
.heretic/temp/<session>/.claude.json → /home/agent/.claude.json and /root/.claude.json
                                       (non-copilot agents only)
.heretic/temp/<session>/entrypoint.sh → /entrypoint.sh:ro          (run_as_root only)
<host docker socket>               → /var/run/docker.sock          (dind: true)
<ssh.key_path>                     → /home/agent/.ssh/id_rsa:ro    (when set)
generated .mcp.json                → see the agent_type table above

runner: compose
compose:
  services:
    redis:
      image: redis:7-alpine
      ports: ["6379:6379"]

# docker, Claude, workspace mount, key from a script
image: giglabo/claude-heretic:latest
runner: docker
provider: anthropic
agent_type: claude
workdir: /workspace
volumes: [{ source: "${CWD}", target: /workspace }]
env: { ANTHROPIC_API_KEY: "${CLAUDE_API_KEY}" }
secrets: { CLAUDE_API_KEY: ~/.heretic/get-claude-key.sh }
claude_settings: ~/.heretic/claude-settings.json

# compose, extra database service, node build sidecar
image: giglabo/claude-heretic:latest
runner: compose
workdir: /workspace
volumes: [{ source: "${CWD}", target: /workspace }]
compose:
  services:
    db: { image: postgres:16, environment: { POSTGRES_PASSWORD: dev } }
  volumes: { pgdata: null }
tool_backends:
  sidecars: [{ runtime: node, image: heretic-builder-node:latest }]

# custom runner — uses .heretic/cli/compose.yaml verbatim
image: unused-but-required:latest
runner: custom