Shared agent runtime: curl, jq, find, htop, grep, vi, nano, which, clear, CA certs, and agentfile conventions.
Packages
- curl-8.21.0-bin
- jq-1.8.2-bin
- findutils-4.11.0
- htop-3.5.3
- gnugrep-3.12
- busybox-vi
- nano-9.2
- which-2.25
- ncurses-6.6
- nss-cacert-3.126
pstack unslop — cut AI tells from writing (fetchFromGitHub pin).
Git CLI and base VCS conventions.
GitLab forge integration: workflow skill, MCP server, and GITLAB_* secrets.
Secrets
| Name | Required | Description |
GITLAB_HOST |
optional |
GitLab host (e.g. gitlab.com) |
GITLAB_TOKEN |
required |
GitLab personal access or project token |
Hooks
- tool.beforeecho kit-hook:gitlab-tool-before
MCP
- gitlabGitLab Model Context Protocol server (stdio).
Sandbox
- net gitlab.com
- net *.gitlab.com
- write /workspace
OpenCode harness: CLI, ACP session service, and generated vendor configuration.
Packages
- opencode-1.18.25
- opencode-ai-plugin-1.18.25
Files
- harness/opencode/acp.sh
- .config/opencode/package.json
- .opencode/package.json
- .opencode/plugins/kit-tools.ts
- harness/opencode/hook-meta.mjs
- harness/opencode/opencode-kit-hooks.js
- opencode.json
- .config/opencode/package-lock.json
- .opencode/package-lock.json
- .opencode/tools/git-push-branch.ts
- .opencode/tools/memory-list.ts
- .opencode/tools/memory-read.ts
- .opencode/tools/memory-search.ts
- .opencode/tools/memory-write.ts
- .opencode/tools/mr-comment.ts
- .opencode/tools/mr-merge.ts
- .opencode/tools/mr-open-draft.ts
- .opencode/tools/mr-set-status.ts
- .opencode/tools/session-stop.ts
- .opencode/tools/session-subscribe.ts
- .opencode/tools/session-transcripts.ts
- .opencode/tools/session-unsubscribe.ts
- .opencode/tools/spec-split-to-plans.ts
- .opencode/tools/web-search.ts
devenv CLI plus Nix substituter/experimental config for project dev environments.
Files
- .config/nix/nix.conf
- AGENTS.md
Sandbox
- net cache.slopkit.dev
- net cache.nixos.org
- net *.cachix.org
- net gitlab.techtailors.net
- net *.gitlab.techtailors.net
- net github.com
- net *.githubusercontent.com
- net codeload.github.com
- write $HOME
- write /workspace
Operator toolkit: GitLab host/token, DeepSeek model, shell tools. No Flue, no MCP.
Secrets
| Name | Required | Description |
ANTHROPIC_API_KEY |
optional |
Anthropic API key when the operator's model uses anthropic/ |
DEEPSEEK_API_KEY |
required |
Default model provider API key (deepseek) |
GITLAB_HOST |
optional |
GitLab host |
GITLAB_TOKEN |
required |
GitLab PAT for the operator (KIT_TOKEN_OPERATOR) |
GITLAB_WEBHOOK_TOKEN |
required |
GitLab webhook secret token (shared with the kit-relay trigger POST) |
KIT_MEMORY_GROUP |
optional |
Group path for the kit-memory wiki |
OPENAI_API_KEY |
optional |
OpenAI API key when the operator's model uses openai/ |
Packages
- nodejs-26.8.1
- gnused-4.10
- gawk-5.4.1
- diffutils-3.12
- ripgrep-15.2.0
- glab-1.114.0
Files
- .opencode/kit/agent-ci/conversation-id.ts
- .opencode/kit/gitlab/client.ts
- .opencode/kit/gitlab/labels.ts
- .opencode/kit/gitlab/mr-history.ts
- .opencode/kit/gitlab/status-machine.ts
- .opencode/kit/memory/core.ts
- .opencode/kit/memory/gitlab-api.ts
- .opencode/kit/memory/paths.ts
- .opencode/kit/memory/repo.ts
- .opencode/kit/memory/store.ts
- .opencode/kit/roles.ts
- .opencode/kit/runtime/session-control.ts
- .opencode/kit/runtime/session.ts
- .opencode/kit/subscriptions/match.ts
- .opencode/kit/subscriptions/store.ts
- .opencode/kit/subscriptions/types.ts
- .opencode/kit/sync/frontmatter.ts
- .opencode/kit/tools/acl.ts
- .opencode/kit/tools/context.ts
- .opencode/kit/tools/core/acl.ts
- .opencode/kit/tools/core/gitlab-actions.ts
- .opencode/kit/tools/core/session-stop.ts
- .opencode/kit/tools/core/session-transcripts.ts
- .opencode/kit/tools/core/set-status.ts
- .opencode/kit/tools/core/subscriptions.ts
- .opencode/kit/tools/core/web-search.ts
- .opencode/kit/tools/opencode/shared.ts
- .opencode/kit/tools/step.ts
- .opencode/kit/tools/types.ts
- AGENTS.md
Models
- default deepseek/deepseek-chat
- DeepSeek: DeepSeek Chat
- DeepSeek: DeepSeek Reasoner
Sandbox
- net gitlab.techtailors.net
- net *.gitlab.techtailors.net
- net api.deepseek.com
- net *.deepseek.com
- net api.openai.com
- net api.anthropic.com
- write /workspace
- write /home/agent