ag-ai 0.1.4 → 0.1.5

package/dist/k8s/runner.js

@@ -10,7 +10,7 @@ const ag_rpi_mega_1 = require("ag-rpi-mega");
 const common_1 = require("./common");
 const networkInitTemplate = (0, node_fs_1.readFileSync)(node_path_1.default.join(__dirname, 'assets', 'network-init.sh'), 'utf8');
 /** The published runtime is installed into a writable emptyDir at pod start. */
-const AG_AI_PACKAGE = 'ag-ai@0.1.1';
+const AG_AI_PACKAGE = 'ag-ai@^0.1.1';
 const AG_AI_RUNTIME_DIR = '/opt/ag-ai';
 const AG_AI_BRIDGE = `${AG_AI_RUNTIME_DIR}/node_modules/ag-ai/runtime/bridge.mjs`;
 const networkInitScript = ({ generationCidr, generationPort, opencodePort, }) => networkInitTemplate

package/dist/k8s/t3code.js

@@ -3,6 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.t3codeStack = void 0;
 const ag_rpi_mega_1 = require("ag-rpi-mega");
 const common_1 = require("./common");
+/** The published T3 Code CLI is installed into a writable emptyDir at pod start. */
+const T3_VERSION = '0.0.42';
+const T3_PREFIX = '/opt/t3';
+const T3_BIN = `${T3_PREFIX}/bin/t3`;
 /** T3 Code control surface: durable home, OpenCode provider, outbound T3 Connect only. */
 const t3codeStack = (context) => {
     const { facilities } = context;
@@ -22,7 +26,17 @@ const t3codeStack = (context) => {
         name: 't3code',
         image: facilities.image('ag-ai-t3code'),
         imagePullPolicy: 'IfNotPresent',
-        command: ['t3', 'serve', '--host', '0.0.0.0'],
+        command: [
+            T3_BIN,
+            'serve',
+            '--host',
+            '0.0.0.0',
+            '--port',
+            String(common_1.T3_PORT),
+            '--no-browser',
+            '--base-dir',
+            '/data/t3code',
+        ],
         ports: [{ name: 't3', containerPort: common_1.T3_PORT, protocol: 'TCP' }],
         env: [
             (0, common_1.env)('T3CODE_HOME', '/data/t3code'),
@@ -42,17 +56,60 @@ const t3codeStack = (context) => {
             requests: { cpu: '50m', memory: '256Mi' },
             limits: { cpu: '1000m', memory: '1Gi' },
         },
-        volumeMounts: [...dataMounts, credentials.mount, { name: 'tmp', mountPath: '/tmp' }],
+        volumeMounts: [
+            ...dataMounts,
+            credentials.mount,
+            { name: 't3', mountPath: T3_PREFIX, readOnly: true },
+            { name: 'tmp', mountPath: '/tmp' },
+        ],
+    };
+    const installer = {
+        name: 'install-t3',
+        image: facilities.image('ag-ai-t3code'),
+        command: ['/bin/sh', '-c'],
+        args: ['curl -fsSL https://t3.codes/install.sh | sh'],
+        env: [
+            (0, common_1.env)('T3CODE_VERSION', T3_VERSION),
+            (0, common_1.env)('T3CODE_HOME', T3_PREFIX),
+            (0, common_1.env)('T3CODE_INSTALL_BIN_DIR', `${T3_PREFIX}/bin`),
+            (0, common_1.env)('HOME', '/tmp'),
+            (0, common_1.env)('TMPDIR', '/tmp'),
+        ],
+        volumeMounts: [
+            { name: 't3', mountPath: T3_PREFIX },
+            { name: 'tmp', mountPath: '/tmp' },
+        ],
+        resources: {
+            requests: { cpu: '100m', memory: '256Mi' },
+            limits: { cpu: '1000m', memory: '1Gi' },
+        },
     };
-    stack.addDeployment({
+    const deployment = stack.addDeployment({
         name: 'server',
         containers: [container],
-        volumes: [dataVolume, credentials.volume, { name: 'tmp', emptyDir: { sizeLimit: '256Mi' } }],
+        initContainers: [installer],
+        volumes: [
+            dataVolume,
+            credentials.volume,
+            { name: 't3', emptyDir: { sizeLimit: '1Gi' } },
+            { name: 'tmp', emptyDir: { sizeLimit: '256Mi' } },
+        ],
         replicas: 1,
         architecture: facilities.arch,
         securityMode: 'None',
         changeNFSFilePerms: true,
     });
+    const spec = deployment.spec;
+    // oxlint-disable-next-line typescript/no-unnecessary-condition -- the SDK class type hides runtime optionality.
+    const pod = spec?.template?.spec;
+    if (!spec || !pod)
+        throw new Error('t3code deployment is missing its pod specification');
+    // Group-own the emptyDirs for the non-root install and runtime containers.
+    pod.securityContext = {
+        fsGroup: 65534,
+        fsGroupChangePolicy: 'OnRootMismatch',
+        seccompProfile: { type: 'RuntimeDefault' },
+    };
     // Internal only; T3 Connect is the outbound path. Never add an Ingress.
     stack.addService({ name: common_1.T3_SERVICE, tcp: [common_1.T3_PORT], type: 'ClusterIP' });
     return stack;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ag-ai",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Provider-neutral AI client and cluster runtime for the rpi-mega cluster.",
   "license": "ISC",
   "author": "admin@gec.dev",

package/runtime/executor/opencode.mjs

@@ -400,7 +400,7 @@ const createOpenCodeExecutor = async ({
         models.push({
           id: `${providerId}/${modelId}`,
           inputModalities,
-          outputModalities: ['text'],
+          outputModalities: imageAdapter !== undefined ? ['text', 'image'] : ['text'],
           supportedReasoningEfforts: [DEFAULT_REASONING_EFFORT],
           defaultReasoningEffort: DEFAULT_REASONING_EFFORT,
           webSearch: false,