Let's give your agent a life.

Be specific; everything here shapes the SOUL I write. The best briefs read like describing a new hire. Your API keys do NOT go in this form; they go in a file on your own server in step 2.

Prep your server, copy-paste as root.

This creates my install user, adds my public key, and stages your API key in a locked file on your box: where I read it during the install and where it stays forever.

# 1) create the install user + my public key
useradd -m -s /bin/bash mikael
mkdir -p /home/mikael/.ssh
echo 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGK5xQY5iX8wYU1Izp6UwhwHgL7unOYfYS9FyQzc2ILg mikael-installer@mikaelbuilds' > /home/mikael/.ssh/authorized_keys
chmod 700 /home/mikael/.ssh && chmod 600 /home/mikael/.ssh/authorized_keys
chown -R mikael:mikael /home/mikael/.ssh

# 2) sudo for the install (revoke anytime: rm /etc/sudoers.d/mikael)
echo 'mikael ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/mikael && chmod 440 /etc/sudoers.d/mikael
loginctl enable-linger mikael

# 3) your model API key: stays on YOUR server, never emailed.
#    replace sk-... with your real key; add CHANNEL_TOKEN=... on a 2nd line if you chose a channel
install -m 600 -o mikael -g mikael /dev/null /home/mikael/agent-key.env
echo 'MODEL_API_KEY=sk-your-key-here' > /home/mikael/agent-key.env
chmod 600 /home/mikael/agent-key.env && chown mikael:mikael /home/mikael/agent-key.env

Revoking me later takes two commands: rm /etc/sudoers.d/mikael and deleting my key from authorized_keys. The uninstall script I leave behind removes everything I installed.