feat: 支持 v0.1 deepseek backend profile

src/runner/k8s-job.ts

@@ -1,5 +1,6 @@
 import { stableHash } from "../common/validation.js";
 import type { BackendProfile, ExecutionPolicy, JsonRecord, JsonValue, RunRecord, SecretRef } from "../common/types.js";
+import { backendProfileSpec } from "../common/backend-profiles.js";
 
 export interface RunnerJobRenderOptions {
   run: RunRecord;
@@ -130,8 +131,8 @@ export function renderRunnerJobManifest(options: RunnerJobRenderOptions): { mani
 }
 
 function runnerEnv(options: RunnerJobRenderOptions, context: { namespace: string; jobName: string; runnerId: string; attemptId: string; sourceCommit: string; secretRefs: CredentialProjection[] }): JsonRecord[] {
-  const codexSecret = context.secretRefs.find((item) => item.profile === "codex");
-  const codexHome = codexSecret?.runtimeMountPath ?? "/home/agentrun/.codex";
+  const selectedSecret = context.secretRefs.find((item) => item.profile === options.run.backendProfile);
+  const codexHome = selectedSecret?.runtimeMountPath ?? defaultRuntimeHome(options.run.backendProfile);
   return [
     { name: "AGENTRUN_MGR_URL", value: options.managerUrl },
     { name: "AGENTRUN_RUN_ID", value: options.run.id },
@@ -146,18 +147,18 @@ function runnerEnv(options: RunnerJobRenderOptions, context: { namespace: string
     { name: "AGENTRUN_LOG_PATH", value: "/tmp/agentrun-runner.jsonl" },
     { name: "HOME", value: "/home/agentrun" },
     { name: "CODEX_HOME", value: codexHome },
-    ...(codexSecret ? [{ name: "AGENTRUN_CODEX_SECRET_HOME", value: codexSecret.projectionMountPath }] : []),
+    ...(selectedSecret ? [{ name: "AGENTRUN_CODEX_SECRET_HOME", value: selectedSecret.projectionMountPath }] : []),
   ];
 }
 
 function credentialProjections(run: RunRecord, namespace: string): CredentialProjection[] {
   const policy: ExecutionPolicy = run.executionPolicy;
-  const credentials = policy.secretScope.providerCredentials ?? [];
+  const credentials = (policy.secretScope.providerCredentials ?? []).filter((item) => item.profile === run.backendProfile);
   return credentials.map((item, index) => ({
     profile: item.profile,
     secretRef: item.secretRef.namespace ? item.secretRef : { ...item.secretRef, namespace },
     volumeName: sanitizeVolumeName(`${String(item.profile)}-${index}`),
-    runtimeMountPath: normalizeMountPath(item.secretRef.mountPath),
+    runtimeMountPath: normalizeMountPath(item.secretRef.mountPath, String(item.profile)),
     projectionMountPath: `/var/run/agentrun/secrets/${sanitizeVolumeName(`${String(item.profile)}-${index}`)}`,
   }));
 }
@@ -172,12 +173,18 @@ function secretVolume(item: CredentialProjection): JsonRecord {
   return { name: item.volumeName, secret };
 }
 
-function normalizeMountPath(value: string | undefined): string {
-  if (!value || value === "~/.codex") return "/home/agentrun/.codex";
-  if (value.startsWith("~/")) return `/home/agentrun/${value.slice(2)}`;
+function normalizeMountPath(value: string | undefined, profile: string): string {
+  const spec = backendProfileSpec(profile);
+  const suffix = spec ? spec.profile : sanitizeVolumeName(profile);
+  if (!value || value === "~/.codex") return defaultRuntimeHome(suffix);
+  if (value.startsWith("~/")) return `/home/agentrun/${value.slice(2)}-${suffix}`;
   return value;
 }
 
+function defaultRuntimeHome(profile: string): string {
+  return `/home/agentrun/.codex-${sanitizeVolumeName(profile)}`;
+}
+
 function labels(run: RunRecord, jobName: string): JsonRecord {
   return {
     "app.kubernetes.io/name": "agentrun-runner",

src/runner/main.ts

@@ -1,6 +1,7 @@
 import { runOnce, type RunnerOnceOptions } from "./run-once.js";
 import { AgentRunError, errorToJson } from "../common/errors.js";
 import { failureKindFromError } from "./manager-api.js";
+import { isBackendProfile } from "../common/backend-profiles.js";
 
 const managerUrl = process.env.AGENTRUN_MGR_URL;
 const runId = process.env.AGENTRUN_RUN_ID;
@@ -16,7 +17,13 @@ const options: RunnerOnceOptions = {
 if (process.env.AGENTRUN_COMMAND_ID) options.commandId = process.env.AGENTRUN_COMMAND_ID;
 if (process.env.AGENTRUN_ATTEMPT_ID) options.attemptId = process.env.AGENTRUN_ATTEMPT_ID;
 if (process.env.AGENTRUN_RUNNER_ID) options.runnerId = process.env.AGENTRUN_RUNNER_ID;
-if (process.env.AGENTRUN_BACKEND_PROFILE === "codex") options.backendProfile = "codex";
+if (process.env.AGENTRUN_BACKEND_PROFILE) {
+  if (!isBackendProfile(process.env.AGENTRUN_BACKEND_PROFILE)) {
+    console.log(JSON.stringify({ ok: false, failureKind: "schema-invalid", message: `AGENTRUN_BACKEND_PROFILE ${process.env.AGENTRUN_BACKEND_PROFILE} is not supported in v0.1` }));
+    process.exit(2);
+  }
+  options.backendProfile = process.env.AGENTRUN_BACKEND_PROFILE;
+}
 if (process.env.AGENTRUN_K8S_JOB_NAME) options.placement = "kubernetes-job";
 if (process.env.AGENTRUN_SOURCE_COMMIT) options.sourceCommit = process.env.AGENTRUN_SOURCE_COMMIT;
 if (process.env.AGENTRUN_K8S_JOB_NAME) options.jobName = process.env.AGENTRUN_K8S_JOB_NAME;

src/runner/run-once.ts

@@ -1,6 +1,7 @@
 import { RunnerManagerApi, failureKindFromError, terminalStatusForFailure, errorMessage } from "./manager-api.js";
 import { runBackendTurn, type BackendAdapterOptions } from "../backend/adapter.js";
 import type { BackendProfile, JsonRecord, RunRecord, RunnerRecord } from "../common/types.js";
+import { AgentRunError } from "../common/errors.js";
 
 export interface RunnerOnceOptions extends BackendAdapterOptions {
   managerUrl: string;
@@ -19,12 +20,16 @@ export interface RunnerOnceOptions extends BackendAdapterOptions {
 
 export async function runOnce(options: RunnerOnceOptions): Promise<JsonRecord> {
   const api = new RunnerManagerApi(options.managerUrl);
+  const targetRun = await api.client.get(`/api/v1/runs/${encodeURIComponent(options.runId)}`) as RunRecord;
+  if (options.backendProfile && options.backendProfile !== targetRun.backendProfile) {
+    throw new AgentRunError("schema-invalid", `runner backendProfile ${options.backendProfile} does not match run backendProfile ${targetRun.backendProfile}`, { httpStatus: 400 });
+  }
   const leaseMs = options.leaseMs ?? 60_000;
   const attemptId = options.attemptId ?? `attempt_${Date.now().toString(36)}`;
   const runner = await api.register({
     runId: options.runId,
     attemptId,
-    backendProfile: options.backendProfile ?? "codex",
+    backendProfile: targetRun.backendProfile,
     placement: options.placement ?? "host-process",
     sourceCommit: options.sourceCommit ?? process.env.AGENTRUN_SOURCE_COMMIT ?? "unknown",
     ...(options.runnerId ? { runnerId: options.runnerId } : {}),