fix: assemble UniDesk SSH endpoint env

src/selftest/cases/75-queue-q2-dispatch.ts

@@ -30,6 +30,7 @@ console.log(JSON.stringify({ apiVersion: manifest.apiVersion, kind: manifest.kin
       managerUrl: "http://agentrun-mgr.agentrun-v01.svc.cluster.local:8080",
       image: "127.0.0.1:5000/agentrun/agentrun-mgr@sha256:1111111111111111111111111111111111111111111111111111111111111111",
       kubectlCommand: fakeKubectl,
+      unideskSshEndpointEnv: { name: "UNIDESK_MAIN_SERVER_IP", value: "https://unidesk.default.example.test" },
     },
   });
   try {
@@ -96,6 +97,46 @@ console.log(JSON.stringify({ apiVersion: manifest.apiVersion, kind: manifest.kin
     const dispatchManifest = JSON.parse(await readFile(createdManifest, "utf8")) as JsonRecord;
     assert.ok(JSON.stringify(dispatchManifest).includes(dispatched.run.id));
 
+    const unideskCreated = await client.post("/api/v1/queue/tasks", {
+      tenantId: "unidesk",
+      projectId: "pikasTech/unidesk",
+      queue: "dev",
+      lane: "q2",
+      title: "Q2 queue unidesk ssh dispatch task",
+      priority: 22,
+      backendProfile: "codex",
+      providerId: "G14",
+      workspaceRef: { kind: "host-path", path: context.workspace },
+      sessionRef: { sessionId: "sess_queue_q2_unidesk_ssh_selftest", metadata: { source: "queue-q2-unidesk-ssh-self-test" } },
+      executionPolicy: {
+        sandbox: "workspace-write",
+        approval: "never",
+        timeoutMs: 15_000,
+        network: "default",
+        secretScope: {
+          allowCredentialEcho: false,
+          providerCredentials: [{ profile: "codex", secretRef: { name: "agentrun-v01-provider-codex", keys: ["auth.json", "config.toml"], mountPath: context.codexHome } }],
+          toolCredentials: [{
+            tool: "unidesk-ssh",
+            purpose: "ssh-passthrough-readonly",
+            secretRef: { name: "agentrun-v01-tool-unidesk-ssh", keys: ["UNIDESK_SSH_CLIENT_TOKEN"] },
+            projection: { kind: "env", envName: "UNIDESK_SSH_CLIENT_TOKEN", secretKey: "UNIDESK_SSH_CLIENT_TOKEN" },
+          }],
+        },
+      },
+      resourceBundleRef: null,
+      payload: { prompt: "queue unidesk ssh dispatch hello" },
+      references: [{ kind: "issue", url: "https://github.com/pikasTech/agentrun/issues/112" }],
+      metadata: { source: "queue-q2-unidesk-ssh-self-test" },
+      idempotencyKey: "queue-q2-unidesk-ssh-self-test",
+    }) as QueueTaskRecord;
+    const unideskDispatched = await client.post(`/api/v1/queue/tasks/${unideskCreated.id}/dispatch`, { attemptId: "attempt_queue_q2_unidesk_ssh_selftest" }) as QueueDispatchResult;
+    assert.deepEqual((((unideskDispatched.runnerJob as JsonRecord).transientEnv as JsonRecord).names) as string[], ["UNIDESK_MAIN_SERVER_IP"]);
+    const unideskManifest = JSON.parse(await readFile(createdManifest, "utf8")) as JsonRecord;
+    assert.equal(runnerEnvValue(unideskManifest, "UNIDESK_MAIN_SERVER_IP"), "https://unidesk.default.example.test");
+    assert.equal(runnerEnvValue(unideskManifest, "UNIDESK_SSH_CLIENT_TOKEN"), "secretRef");
+    assertNoSecretLeak(unideskDispatched);
+
     const cancelCreated = await client.post("/api/v1/queue/tasks", {
       tenantId: "unidesk",
       projectId: "pikasTech/unidesk",
@@ -142,10 +183,22 @@ console.log(JSON.stringify({ apiVersion: manifest.apiVersion, kind: manifest.kin
     assert.ok(JSON.stringify(cancelManifest).includes(cancelDispatched.run.id));
     assertNoSecretLeak(dispatched);
     assertNoSecretLeak(cancelled);
-    return { name: "queue-q2-dispatch", tests: ["queue-dispatch-run-command-runner-job", "queue-refresh-from-core-status", "queue-dispatch-no-repeat", "queue-cancel-propagates-to-run-command-session"] };
+    return { name: "queue-q2-dispatch", tests: ["queue-dispatch-run-command-runner-job", "queue-refresh-from-core-status", "queue-dispatch-no-repeat", "queue-unidesk-ssh-endpoint-auto-env", "queue-cancel-propagates-to-run-command-session"] };
   } finally {
     await new Promise<void>((resolve) => server.server.close(() => resolve()));
   }
 };
 
 export default selfTest;
+
+function runnerEnvValue(manifest: JsonRecord, name: string): unknown {
+  const spec = manifest.spec as JsonRecord;
+  const template = spec.template as JsonRecord;
+  const podSpec = template.spec as JsonRecord;
+  const containers = podSpec.containers as JsonRecord[];
+  const env = containers[0]?.env as JsonRecord[];
+  const item = env.find((entry) => entry.name === name);
+  if (!item) return undefined;
+  if (item.valueFrom) return "secretRef";
+  return item.value;
+}