From e0a50d2adc73da57e80fc4bd5ca6a18af9a04c61 Mon Sep 17 00:00:00 2001
From: fullsend-code
 <278716306+fullsend-ai-coder[bot]@users.noreply.github.com>
Date: Tue, 4 Aug 2026 18:55:06 +0000
Subject: [PATCH] docs(#4168): document scripts/load-secrets.sh in boost
 AGENTS.md

Add the scripts/ directory and load-secrets.sh to the workspace
directory tree and add a new "Scripts directory" section that
documents the env-var synchronization requirement between
load-secrets.sh and app-config.yaml. This ensures code agents
discover load-secrets.sh during rename or refactor tasks that
touch config keys under boost.providers.*.

Root cause: PR #4167 renamed llamastack to ogx across 46 files
but missed load-secrets.sh because AGENTS.md did not mention the
scripts/ directory. The review agent caught the desync before
merge, but a /fs-fix round-trip was needed to complete the rename.

Closes #4168
---
 workspaces/boost/AGENTS.md | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/workspaces/boost/AGENTS.md b/workspaces/boost/AGENTS.md
index 826c9542a0..c8b39f40e5 100644
--- a/workspaces/boost/AGENTS.md
+++ b/workspaces/boost/AGENTS.md
@@ -30,7 +30,9 @@ workspaces/boost/
 │           ├── design.md          # Architecture decisions
 │           ├── tasks.md           # Implementation task breakdown
 │           └── specs/             # Behavioral specs (Given/When/Then)
-└── plugins/                       # Plugin packages (implementation target)
+├── plugins/                       # Plugin packages (implementation target)
+└── scripts/                       # Dev/deployment helper scripts
+    └── load-secrets.sh            # Loads env vars from K8s secrets for local dev
 ```
 
 When implementing an issue:
@@ -112,3 +114,9 @@ Every feature ships with tests. Integration tests use real database and cache ba
 - Do not create raw `Map<>` caches — always use `coreServices.cache`
 - Do not add authorization checks outside `permissions.authorize()` / `permissions.authorizeConditional()`
 - Do not add provider ID string checks in the frontend
+
+## Scripts directory
+
+`scripts/load-secrets.sh` is sourced before local development to populate environment variables from a Kubernetes secret. The env var names it exports (e.g., `BOOST_OGX_URL`, `BOOST_MODEL`) and the route-discovery function names (e.g., `_discover_ogx_route`) must stay synchronized with the config keys in `app-config.yaml` (under `boost.providers.*`).
+
+When renaming or refactoring config keys in `app-config.yaml`, also check and update `scripts/load-secrets.sh` for corresponding env var names, function names, and log messages.