Build the agent-native compute CRM platform

.env.example

@@ -47,12 +47,21 @@ PRIME_SYNC_ENABLED=false
 PRIME_SYNC_INTERVAL_MINUTES=30
 
 # --- Piggy (the in-app agent) ----------------------------------------------
-# Piggy drains a leased queue in Postgres. Leave the key unset to run PIG with
-# no agent at all — every human-facing feature works without it.
-ANTHROPIC_API_KEY=
+# Piggy drains a leased queue and serves chat on an authenticated internal
+# listener. Generate one internal token and give the same value to API + Piggy.
+# Never publish the Piggy listener or put this token in a URL.
+PIGGY_INFERENCE_API_KEY=
 PIGGY_ENABLED=false
-PIGGY_MODEL=claude-sonnet-5
+PIGGY_MODEL=nvidia/nemotron-3-nano-30b-a3b
+PIGGY_INFERENCE_BASE=https://api.pinference.ai/api/v1
 PIGGY_LEASE_SECONDS=300
+PIGGY_INTERNAL_URL=http://127.0.0.1:8931
+PIGGY_INTERNAL_TOKEN=
+PIGGY_CHAT_HOST=127.0.0.1
+PIGGY_CHAT_PORT=8931
+# Only containers on a private network need this; never combine it with a
+# published Piggy port.
+PIGGY_CHAT_ALLOW_NON_LOOPBACK=false
 
 # --- Slack ------------------------------------------------------------------
 SLACK_BOT_TOKEN=
@@ -63,4 +72,13 @@ SLACK_APP_TOKEN=
 # Buzz agents reach PIG through the MCP server, so no PIG-specific credential is
 # required. These are only for PIG pushing notifications into a Buzz relay.
 BUZZ_RELAY_URL=
-BUZZ_SECRET_KEY=
+NOTION_CLIENT_ID=
+NOTION_CLIENT_SECRET=
+NOTION_REDIRECT_URI=http://localhost:8920/api/imports/notion/oauth/callback
+GOOGLE_CLIENT_ID=
+GOOGLE_CLIENT_SECRET=
+# Must use the PIG_PUBLIC_URL origin and exact /oauth/google/callback path.
+GOOGLE_REDIRECT_URI=http://localhost:8920/oauth/google/callback
+BUZZ_PRIVATE_KEY=
+# Optional NIP-OA owner attestation JSON for an agent identity.
+BUZZ_AUTH_TAG=