feat: dev tools
This commit is contained in:
@@ -69,6 +69,33 @@ impact. Agent CI initializes or refreshes the index before every Codex turn and
|
||||
locally excludes `.codegraph/` from Git. The research subagent intentionally
|
||||
does not receive CodeGraph.
|
||||
|
||||
### Development environments
|
||||
|
||||
`AGENTCI_INSTALL_SCRIPTS` is a comma-delimited ordered list of development
|
||||
environment installers. The supplied `python` and `dotnet` scripts install only
|
||||
their runtimes; they are ordinary scripts that can be replaced or removed.
|
||||
Implementation agents remain responsible for restoring project dependencies
|
||||
and selecting build/test commands. Configure the supplied scripts with
|
||||
`AGENTCI_PYTHON_VERSION` and `AGENTCI_DOTNET_CHANNEL`:
|
||||
|
||||
```env
|
||||
AGENTCI_INSTALL_SCRIPTS=python,dotnet,company-tools
|
||||
AGENTCI_PYTHON_VERSION=3.13
|
||||
AGENTCI_DOTNET_CHANNEL=10.0
|
||||
```
|
||||
|
||||
Every name resolves to an executable file in `install-scripts/`, mounted
|
||||
read-only at `/etc/agentci/install-scripts`. Names cannot contain paths and
|
||||
duplicates are rejected. See `install-scripts/README.md` for the script contract.
|
||||
|
||||
Installers run in order after each implementation clone or branch sync and fail
|
||||
the job on an unknown script, timeout, or non-zero exit. They receive no AgentCI
|
||||
or Gitea secret values in their environment, but remain trusted operator code
|
||||
running as the service user. Tools persist under `/var/lib/agentci/dev-tools`;
|
||||
its `bin` directory is added to implementation agents' `PATH` with read-only
|
||||
sandbox access. The agents can use those tools for builds and validation, but
|
||||
Agent CI does not impose host-side build commands.
|
||||
|
||||
Planning/review commands can only read their workflow clone and have no shell
|
||||
network access. Implementation/fix commands can edit the clone but cannot
|
||||
modify `.git`; they can reach public internet destinations while private and
|
||||
@@ -83,7 +110,8 @@ remove Codex's configured filesystem and network restrictions.
|
||||
|
||||
## State and recovery
|
||||
|
||||
The `agentci_data` volume contains SQLite and persistent workflow clones.
|
||||
The `agentci_data` volume contains SQLite, persistent workflow clones, and
|
||||
installed development runtimes.
|
||||
`codex_home` contains login state and resumable Codex sessions. Both are kept
|
||||
indefinitely and should be backed up together.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user