runner-base.txt

# Base image for Dockerfile.runner: upstream's published omnigent host image,
# ghcr.io/omnigent-ai/omnigent-host. omnigent-ai/omnigent's oss-publish-images.yml
# builds it from deploy/docker/Dockerfile --target host for every release tag. It
# carries omnigent, git, tmux, gh, and the harness CLIs; upstream installs claude,
# codex and pi from npm `latest` when it builds the release, so a newer release is
# the way to newer CLIs.
#
# Read by ecr-runner.yml and verify-runner-image.yml. Pinned as tag@digest: the
# digest is what resolves, and the tag names the release for a reader and for the
# check in verify-runner-image.yml.
#
# Pin the SAME release as server-base.txt. The host dials the server over a tunnel
# that neither side version-negotiates, so a split between them is a combination
# upstream does not test. verify-runner-image.yml fails a pull request that splits
# them.
#
# Current: v0.17.0 (2026-10-06), the multi-arch index; ecr-runner.yml builds its
# amd64 variant. It bakes claude-code 2.1.290, codex 0.160.1, pi 1.0.4, gh 2.100.0
# and Node 22.
ghcr.io/omnigent-ai/omnigent-host:v0.17.0@sha256:51880f0edb7e0357f395f88f4bc3c4e1dfc3df06e46cffb55ae6700c1dfd82b2