feat: support env reuse and git mirror in v0.1 cicd

src/runner/k8s-job.ts

@@ -2,6 +2,8 @@ import { stableHash } from "../common/validation.js";
 import type { BackendProfile, ExecutionPolicy, JsonRecord, JsonValue, RunRecord, SecretRef } from "../common/types.js";
 import { backendProfileSpec } from "../common/backend-profiles.js";
 
+const defaultBootRepoUrl = "http://git-mirror-http.devops-infra.svc.cluster.local/pikasTech/agentrun.git";
+
 export interface RunnerJobRenderOptions {
   run: RunRecord;
   commandId: string;
@@ -124,7 +126,7 @@ export function renderRunnerJobManifest(options: RunnerJobRenderOptions): { mani
               name: "runner",
               image: options.image,
               imagePullPolicy: options.imagePullPolicy ?? "IfNotPresent",
-              command: ["bun", "src/runner/main.ts"],
+              command: ["/opt/agentrun/deploy/runtime/boot/agentrun-runner.sh"],
               env,
               volumeMounts: [
                 { name: "runner-home", mountPath: "/home/agentrun" },
@@ -164,6 +166,10 @@ function runnerEnv(options: RunnerJobRenderOptions, context: { namespace: string
     { name: "AGENTRUN_RESOURCE_BUNDLE_JSON", value: JSON.stringify(options.run.resourceBundleRef ?? null) },
     { name: "AGENTRUN_WORKSPACE_ROOT", value: "/home/agentrun/workspaces" },
     { name: "AGENTRUN_SOURCE_COMMIT", value: context.sourceCommit },
+    { name: "AGENTRUN_BOOT_COMMIT", value: context.sourceCommit },
+    { name: "AGENTRUN_BOOT_REPO_URL", value: defaultBootRepoUrl },
+    { name: "AGENTRUN_BOOT_MODE", value: "runner" },
+    { name: "AGENTRUN_APP_ROOT", value: "/home/agentrun/agentrun-source" },
     { name: "AGENTRUN_RUNTIME_NAMESPACE", value: context.namespace },
     { name: "AGENTRUN_K8S_JOB_NAME", value: context.jobName },
     { name: "AGENTRUN_LOG_PATH", value: "/tmp/agentrun-runner.jsonl" },

src/selftest/cases/50-hwlab-manual-dispatch.ts

@@ -15,6 +15,8 @@ const execFile = promisify(execFileCallback);
 const selfTest: SelfTestCase = async (context) => {
   const containerfile = await readFile(path.join(context.root, "deploy/container/Containerfile"), "utf8");
   assert.ok(containerfile.includes(" git ") && containerfile.includes(" openssh-client"), "runtime image must include git and openssh-client for ResourceBundleRef checkout");
+  assert.ok(containerfile.includes("deploy/runtime/boot") && containerfile.includes("agentrun-mgr.sh"), "runtime image must boot through the env-reuse source checkout script");
+  assert.ok(!containerfile.includes("COPY src ./src"), "runtime env image must not bake source files into every source commit image");
   const fakeKubectl = path.join(context.tmp, "fake-kubectl-hwlab.js");
   const createdManifest = path.join(context.tmp, "created-hwlab-runner-job.json");
   await writeFile(fakeKubectl, `#!/usr/bin/env bun
@@ -54,6 +56,8 @@ console.log(JSON.stringify({ apiVersion: manifest.apiVersion, kind: manifest.kin
     );
     const manifest = JSON.parse(await readFile(createdManifest, "utf8")) as JsonRecord;
     assert.ok(JSON.stringify(manifest).includes("AGENTRUN_RESOURCE_BUNDLE_JSON"));
+    assert.ok(JSON.stringify(manifest).includes("/opt/agentrun/deploy/runtime/boot/agentrun-runner.sh"));
+    assert.ok(JSON.stringify(manifest).includes("AGENTRUN_BOOT_COMMIT"));
     assertNoSecretLeak(created);
 
     const pendingCancel = await createHwlabRun(client, context, bundle, "hwlab-session-cancel-pending", "cancel pending", "hwlab-command-cancel-pending");