apiVersion: apps/v1
kind: Deployment
metadata:
  name: backend
spec:
  strategy:
    type: Recreate
  template:
    spec:
      containers:
        - name: backend
          env:
            - name: ACP_AGENT_TYPE
              value: "pi"
            - name: ACP_MODEL_STANDARD
              $patch: delete
            - name: ACP_MODEL_PRO
              $patch: delete
            - name: AGENT_PROVIDER_CONFIG
              value: "/data/opencode-config/opencode/opencode.jsonc"
            - name: AGENT_MODEL_STANDARD
              value: "chat/claude-standard/high"
            - name: AGENT_MODEL_PRO
              value: "chat/claude-pro/high"
            - name: XDG_CONFIG_HOME
              value: "/data/opencode-config"
            - name: AUTH0_DOMAIN
              $patch: delete
            - name: AUTH0_CLIENT_ID
              $patch: delete
            - name: DEVOPS_API_KEY
              $patch: delete
            - name: LARK_APP_ID
              $patch: delete
            - name: LARK_APP_SECRET
              $patch: delete
            - name: LARK_VERIFICATION_TOKEN
              $patch: delete
            - name: LARK_ENCRYPT_KEY
              $patch: delete
            - name: INVESTIBOOK_JIRA_USERNAME
              $patch: delete
            - name: INVESTIBOOK_JIRA_API_TOKEN
              $patch: delete
            - name: INVESTIBOOK_CLINIC_API_KEY
              $patch: delete
            - name: INVESTIBOOK_OPENAI_API_KEY
              $patch: delete
            - name: INVESTIBOOK_CALLBACK_API_KEY
              $patch: delete
            - name: SKILL_CLINIC_API_KEY
              $patch: delete
            - name: SKILL_GITHUB_TOKEN
              $patch: delete
            - name: RUN9_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: run9-api-secret
                  key: RUN9_ACCESS_KEY
            - name: RUN9_SECRET_KEY
              valueFrom:
                secretKeyRef:
                  name: run9-api-secret
                  key: RUN9_SECRET_KEY
          volumeMounts:
            - name: agent-config
              mountPath: /data/opencode-config/opencode/opencode.jsonc
              subPath: opencode.jsonc
              readOnly: true
          resources:
            requests:
              cpu: "500m"
              memory: "1Gi"
            limits:
              cpu: "4000m"
              memory: "16Gi"