From a4981c780f4855e833a8ef1aa9008481a838e346 Mon Sep 17 00:00:00 2001 From: Amit Paz Date: Thu, 2 Jul 2026 23:02:17 +0300 Subject: [PATCH] =?UTF-8?q?fix:=20correct=20Lore=20key=20wiring=20?= =?UTF-8?q?=E2=80=94=20require=20lore=5Fsk=5F=20prefix,=20drop=20dead=20LO?= =?UTF-8?q?RE=5FMODE?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - .env.example: LORE_API_KEY must keep its `lore_sk_` prefix. Lore's auth only accepts prefixed keys (and now refuses to boot without one), but the file's generic "openssl rand -hex 32" guidance produced a prefix-less key that seeded green yet 401'd every AgentLens call. Guidance now generates a prefixed key. - docker-compose.yml: remove the orphan LORE_MODE env — AgentLens's server never reads it (it's always remote since v0.5.0). Co-Authored-By: Claude Opus 4.8 (1M context) Claude-Session: https://claude.ai/code/session_01CKkfVA3iY5G3Q43Mg4Xsu2 --- .env.example | 9 ++++++--- docker-compose.yml | 1 - 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/.env.example b/.env.example index 4c7eed4..02742ab 100644 --- a/.env.example +++ b/.env.example @@ -9,10 +9,13 @@ COMPOSE_PROFILES=full # # These are LOCAL-DEV placeholders. Generate fresh values for any -# non-local use (e.g. `openssl rand -hex 32`). +# non-local use (e.g. `openssl rand -hex 32`) — EXCEPT LORE_API_KEY, +# which must keep its `lore_sk_` prefix (see below). -# API key AgentLens uses to call the Lore service. Must match a key the -# Lore instance accepts. +# API key AgentLens uses to call the Lore service, and the value Lore seeds +# its root key from on first boot. MUST start with `lore_sk_` — Lore's auth +# rejects any other format (Lore now refuses to boot without the prefix). +# Generate one with: echo lore_sk_$(openssl rand -hex 32) LORE_API_KEY=lore_sk_localdev_replace_me # AgentGate admin API key. diff --git a/docker-compose.yml b/docker-compose.yml index 9b5acf8..92a4d85 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -21,7 +21,6 @@ services: - JWT_SECRET=${JWT_SECRET:?set JWT_SECRET in .env (copy from .env.example)} - AGENTGATE_URL=http://agentgate:3002 - LORE_ENABLED=true - - LORE_MODE=remote - LORE_API_URL=http://lore:8765 - LORE_API_KEY=${LORE_API_KEY:?set LORE_API_KEY in .env (copy from .env.example)} volumes: