Shared agent runtime: curl, jq, find, htop, grep, vi, nano, which, clear, CA certs, and agentfile conventions.
Packages
- curl-8.21.0-bin
- jq-1.8.2-bin
- findutils-4.11.0
- htop-3.5.3
- gnugrep-3.12
- busybox-vi
- nano-9.2
- which-2.25
- ncurses-6.6
- nss-cacert-3.126
Node 26 + Flue runtime and the warm `flue-agent-server` session service.
Packages
- nodejs-26.8.1
- flue-agent-server-0.1.0
Sandbox
- write /workspace
- write /home/agent
DeepSeek API; DEEPSEEK_API_KEY from secretspec. Harnesses map models.* to vendor config.
Secrets
| Name | Required | Description |
DEEPSEEK_API_KEY |
required |
DeepSeek API key (https://platform.deepseek.com) |
Models
- default deepseek/deepseek-chat
- DeepSeek: DeepSeek Chat
- DeepSeek: DeepSeek Reasoner
Sandbox
- net api.deepseek.com
- net *.deepseek.com
- write /workspace
Git CLI and base VCS conventions.
devenv CLI plus Nix substituter/experimental config for project dev environments.
Files
- .config/nix/nix.conf
- AGENTS.md
Sandbox
- net cache.slopkit.dev
- net cache.nixos.org
- net *.cachix.org
- net gitlab.techtailors.net
- net *.gitlab.techtailors.net
- net github.com
- net *.githubusercontent.com
- net codeload.github.com
- write $HOME
- write /workspace
gawk dashboard agent: viz-repo skill, push-then-refresh tool, and GitLab credentials.
Secrets
| Name | Required | Description |
GITLAB_TOKEN |
required |
GitLab token the agent uses to push the dashboard repo. |
Hooks
- tool.aftercase "$KIT_HOOK_META" in *push*) curl -fsS -X POST -H "Authorization: Bearer $GAWK_AGENT_TOKEN" "$GAWK_AGENT_ENDPOINT" >/dev/null 2>&1 || true ;; esac
Packages
- git-minimal-2.55.0
- curl-8.21.0-bin
- gawk-agent-module
- gawk-git-credential
Sandbox
- net gitlab.techtailors.net