Shared agent runtime: curl, jq, find, htop, grep, vi, nano, which, clear, CA certs, and agentfile conventions.
Packages
- curl-8.21.0-bin
- jq-1.8.2-bin
- findutils-4.11.0
- htop-3.5.3
- gnugrep-3.12
- busybox-vi
- nano-9.2
- which-2.25
- ncurses-6.6
- nss-cacert-3.126
pstack unslop — cut AI tells from writing (fetchFromGitHub pin).
Node 26 + Flue runtime and the warm `flue-agent-server` session service.
Packages
- nodejs-26.8.1
- flue-agent-server-0.1.0
Sandbox
- write /workspace
- write /home/agent
Git CLI and base VCS conventions.
Agency toolkit: GitLab host/token, Flue DB, model keys, @slopkit/agency. No MCP.
Secrets
| Name | Required | Description |
ANTHROPIC_API_KEY |
optional |
Anthropic API key when FLUE_MODEL uses anthropic/ |
DEEPSEEK_API_KEY |
required |
Default model provider API key (deepseek) |
FLUE_DATABASE_URL |
required |
Postgres URL for Flue session state |
GITLAB_HOST |
optional |
GitLab host |
GITLAB_TOKEN |
required |
GitLab PAT for this agent role (KIT_TOKEN_<ROLE>) |
GITLAB_WEBHOOK_TOKEN |
required |
GitLab webhook secret token (shared with the kit-relay trigger POST) |
KIT_MEMORY_GROUP |
optional |
Group path for the kit-memory wiki |
OPENAI_API_KEY |
optional |
OpenAI API key when FLUE_MODEL uses openai/ |
Packages
- nodejs-26.8.1
- slopkit-agency-0.1.0
Models
- default deepseek/deepseek-chat
- DeepSeek: DeepSeek Chat
- DeepSeek: DeepSeek Reasoner
Sandbox
- net gitlab.techtailors.net
- net *.gitlab.techtailors.net
- net api.deepseek.com
- net *.deepseek.com
- net api.openai.com
- net api.anthropic.com
- write /workspace
- write /home/agent
Protector CLI binary + usage skill for the guardian agent.