schema = "m64/capsule@1"description = "DeepSeek V4.1 Flash chat endpoint (OpenRouter). An OpenAI-compatible chat endpoint for DeepSeek V4.1 Flash on OpenRouter, for opencode (or any client) running on your own machine: opencode and its file access stay there, only the model calls come here. Streams. No GPU; the only egress is openrouter.ai:443, and the m64 gate adds the OpenRouter key, so the capsule never holds it."kinds = ["chat"]authors = ["dh7"]license = "apache-2.0"[hardware]platform = "linux-aarch64"[runtime]sandbox = "container"# python:3.12-slim (multi-arch index digest). server.py uses the standard library only.image = "python@sha256:2f17fc044b579bab302c2e8054d3a686e2cb9a83de48e70534b94cd8ebbe06a9"gpu = falseinternal_port = 9600health = "/health"expected_load_seconds = 20# The front rewrites every request's "model" to this; server.py maps it to# deepseek/deepseek-v4.1-flash on OpenRouter. Also the name `m64 <capsule> --ui opencode` uses.model_name = "deepseek-v4.1-flash"user = "65534:65534"[network]needs = ["openrouter.ai:443"]why = "the model runs on OpenRouter: your prompts and its replies go through openrouter.ai"[secrets]required = ["OPENROUTER_API_KEY"]# The key never enters the container: server.py calls http://openrouter.ai/api/v1 through# the gate, which adds the header and goes on over TLS. The capsule's env var holds only the# placeholder m64-injected:OPENROUTER_API_KEY (and server.py does not even read it).[[secrets.inject]]name = "OPENROUTER_API_KEY"host = "openrouter.ai"header = "Authorization"value = "Bearer {secret}"