fix: add aipod imageRef work-ready runner reuse

src/mgr/kubernetes-runner-job.ts

@@ -7,6 +7,8 @@ import type { ExecutionPolicy, JsonRecord } from "../common/types.js";
 import { stableHash, validateEnvName } from "../common/validation.js";
 import { renderRunnerJobManifest } from "../runner/k8s-job.js";
 import type { RunnerSessionPvcOptions, RunnerTransientEnv } from "../runner/k8s-job.js";
+import { staticWorkReadyCapabilitySummary } from "../common/work-ready.js";
+import { resolveRunnerEnvImage } from "../common/env-image-ref.js";
 
 const reusableCredentialEnvNames = new Set([
   "AUTH_PASSWORD",
@@ -36,6 +38,8 @@ export interface RunnerJobDefaults {
   managerUrl: string;
   image: string;
   sourceCommit: string;
+  envIdentity?: string;
+  artifactCatalogFile?: string;
   serviceAccountName?: string;
   kubectlCommand?: string;
   unideskSshEndpointEnv?: JsonRecord;
@@ -51,6 +55,7 @@ export interface CreateRunnerJobInput extends JsonRecord {
   sourceCommit?: string;
   serviceAccountName?: string;
   idempotencyKey?: string;
+  imageRef?: JsonRecord;
   transientEnv?: JsonRecord[];
 }
 
@@ -61,8 +66,14 @@ export async function createKubernetesRunnerJob(options: { store: AgentRunStore;
   if (command.runId !== run.id) throw new AgentRunError("schema-invalid", `command ${commandId} does not belong to run ${run.id}`, { httpStatus: 400 });
   if (command.type !== "turn") throw new AgentRunError("schema-invalid", `command ${commandId} is not a turn command`, { httpStatus: 400 });
 
-  const image = optionalString(options.input.image) ?? options.defaults.image;
-  if (!image) throw new AgentRunError("schema-invalid", "runner job image is required; set --image or AGENTRUN_RUNNER_IMAGE", { httpStatus: 400 });
+  const envImage = await resolveRunnerEnvImage({
+    ...(options.input.imageRef !== undefined ? { imageRef: options.input.imageRef } : {}),
+    ...(optionalString(options.input.image) ? { explicitImage: optionalString(options.input.image) as string } : {}),
+    defaultImage: options.defaults.image,
+    ...(options.defaults.envIdentity ? { envIdentity: options.defaults.envIdentity } : {}),
+    ...(options.defaults.artifactCatalogFile ? { artifactCatalogFile: options.defaults.artifactCatalogFile } : {}),
+  });
+  const image = envImage.image;
   const namespace = optionalString(options.input.namespace) ?? options.defaults.namespace;
   const managerUrl = optionalString(options.input.managerUrl) ?? options.defaults.managerUrl;
   const sourceCommit = optionalString(options.input.sourceCommit) ?? options.defaults.sourceCommit;
@@ -79,6 +90,7 @@ export async function createKubernetesRunnerJob(options: { store: AgentRunStore;
     namespace,
     managerUrl,
     sourceCommit,
+    envImage,
     serviceAccountName: serviceAccountName ?? null,
     attemptId: optionalString(options.input.attemptId) ?? null,
     runnerId: optionalString(options.input.runnerId) ?? null,
@@ -144,6 +156,7 @@ export async function createKubernetesRunnerJob(options: { store: AgentRunStore;
     runnerId: render.runnerId,
     namespace: render.namespace,
     jobName: render.jobName,
+    image,
     jobIdentity: {
       kind: "Job",
       namespace: render.namespace,
@@ -158,14 +171,17 @@ export async function createKubernetesRunnerJob(options: { store: AgentRunStore;
       runnerId: render.runnerId,
       backendProfile: run.backendProfile,
       managerUrl,
+      image,
       sourceCommit,
       placement: "kubernetes-job",
       logPath: `kubectl -n ${render.namespace} logs job/${render.jobName}`,
     },
+    envImage,
     secretRefs: render.secretRefs.map((item) => ({ profile: item.profile, name: item.secretRef.name, namespace: item.secretRef.namespace ?? render.namespace, keys: item.secretRef.keys ?? [], mountPath: item.runtimeMountPath, projectionPath: item.projectionMountPath, writableCopy: true, valuesPrinted: false })),
     toolCredentials: summarizeToolCredentials(render.toolCredentials, render.namespace),
     transientEnv: summarizeTransientEnv(transientEnv),
     transientEnvSecret: transientEnvSecretResponse,
+    workReady: staticWorkReadyCapabilitySummary(),
     retention: {
       ttlSecondsAfterFinished: render.ttlSecondsAfterFinished,
     },
@@ -208,6 +224,8 @@ export async function createKubernetesRunnerJob(options: { store: AgentRunStore;
     idempotencyKey: idempotencyKey ? "present" : null,
     transientEnv: summarizeTransientEnv(transientEnv),
     transientEnvSecret: transientEnvSecretResponse,
+    envImage,
+    workReady: staticWorkReadyCapabilitySummary(),
     toolCredentials: summarizeToolCredentials(render.toolCredentials, render.namespace),
     sessionRef: summarizeSessionRef(run.sessionRef ?? null),
     resourceBundleRef: summarizeResourceBundleRef(run.resourceBundleRef ?? null),