mirror of
https://github.com/rennf93/roboco.git
synced 2026-08-03 07:23:24 +02:00
Renn F
059dc91a4f
Address review findings on the Grok provider work: - budget-feed plugin failed open unconditionally, so a one-shot task agent whose in-container SDK budget server went unreachable would run with the cost cap unenforced. The entrypoint now exports ROBOCO_BUDGET_ENFORCE=1 (one-shot agents always start that server) and the plugin's pre-exec gate fails CLOSED when the flag is set and the budget endpoint is unreachable, halting an uncapped burn. Interactive serve agents (intake/secretary) set no flag and keep failing open (they run no budget server by design). - Pin opencode-ai to the live-verified 1.17.8 (was an unpinned global npm install). Untrusted model output runs under it; bump the pin deliberately. - Document the ROBOCO_GROK_* operator vars in .env.example (image, the three opencode permissions, reasoning effort, idle-kill, cost ceiling). - Refresh stale plugin comments: the MCP tool-name shape and the secretary tool-registration path are confirmed live, and secret-scrub's load route is the auto-discovery dir (not a config plugin: array). Keep the honest not-yet-exercised caveat on secret-scrub's deny path and the reasoning variant — those remain genuinely unverified.
56 lines
3.0 KiB
Docker
56 lines
3.0 KiB
Docker
# Grok (xAI) Agent Image
|
|
# =============================================================================
|
|
# Runs grok-build-0.1 through the opencode CLI (OpenAI protocol) instead of
|
|
# Claude Code, while reusing the base image's roboco venv + uv + the RoboCo MCP
|
|
# gateway servers. The entrypoint renders opencode.json from the spawn env +
|
|
# mounted mcp-config.json (see roboco.llm.providers.opencode_config) and runs
|
|
# opencode. One runtime image serves every role — role behaviour comes from the
|
|
# mounted system prompt / manifest / mcp-config, exactly as on the Claude path.
|
|
# =============================================================================
|
|
|
|
FROM roboco-agent-base
|
|
|
|
USER root
|
|
|
|
# opencode — the OpenAI-protocol agent runtime. grok-build-0.1 runs on opencode's
|
|
# BUILT-IN xai provider (no custom provider block / npm needed), so only
|
|
# opencode-ai is installed; it resolves the provider SDK at runtime.
|
|
# Pinned: this version is the live-verified runtime (grok-build-0.1 on the NAS).
|
|
# Untrusted model output runs under it, so bump the pin deliberately, never float.
|
|
ARG OPENCODE_VERSION=1.17.8
|
|
RUN npm install -g "opencode-ai@${OPENCODE_VERSION}" \
|
|
&& npm cache clean --force \
|
|
&& rm -rf /root/.npm /tmp/*
|
|
|
|
# opencode plugins, baked into the AUTO-DISCOVERY dir (~/.config/opencode/plugin/)
|
|
# rather than referenced by a config `plugin:` path — the dir is the simplest
|
|
# registration route. Each plugin uses a NAMED export (opencode's convention).
|
|
# secret-scrub — bash-guard parity (PAT/credential deny on tool.execute.before)
|
|
# budget-feed — POSTs budget/loop/terminal counters to the in-container SDK
|
|
# server (tool.execute.{before,after}); the entrypoint starts
|
|
# that server (roboco.agent_sdk.server) for Claude-parity.
|
|
COPY docker/grok/secret-scrub.js /home/agent/.config/opencode/plugin/secret-scrub.js
|
|
COPY docker/grok/budget-feed.js /home/agent/.config/opencode/plugin/budget-feed.js
|
|
|
|
# Entrypoint: render opencode.json, then run opencode (overrides base's `claude`).
|
|
COPY docker/scripts/grok-agent-entrypoint.sh /app/scripts/grok-agent-entrypoint.sh
|
|
RUN chmod 0755 /app/scripts/grok-agent-entrypoint.sh
|
|
|
|
# opencode persists data under ~/.local/share and state under ~/.local/state, and
|
|
# reads config + plugins from ~/.config/opencode. When the orchestrator
|
|
# bind-mounts the opencode store at ~/.local/share/opencode, docker creates the
|
|
# intermediate ~/.local AS ROOT, so the non-root agent can no longer create its
|
|
# siblings and opencode EACCESes at boot. Pre-create the trees agent-owned so the
|
|
# mount leaves the parents writable (complements the orchestrator's 0777
|
|
# host-source pre-create), and so the baked plugin dir is agent-owned.
|
|
RUN mkdir -p /home/agent/.local/share/opencode /home/agent/.local/state \
|
|
/home/agent/.config/opencode/plugin \
|
|
&& chown -R agent:agent /home/agent/.local /home/agent/.config
|
|
|
|
USER agent
|
|
|
|
LABEL role="grok-runtime"
|
|
LABEL description="Grok (xAI) agent runtime — grok-build-0.1 via opencode (OpenAI protocol)"
|
|
|
|
ENTRYPOINT ["/app/scripts/grok-agent-entrypoint.sh"]
|