fix(supervisor): strip image digest in ComputeWorkloadManager

Author: nicktrn

apps/supervisor/src/workloadManager/compute.ts

@@ -17,10 +17,10 @@ export class ComputeWorkloadManager implements WorkloadManager {
   private readonly logger = new SimpleStructuredLogger("compute-workload-manager");
 
   constructor(private opts: ComputeWorkloadManagerOptions) {
-    if (!opts.workloadApiDomain) {
-      this.logger.warn(
-        "⚠️ workloadApiDomain is unset — VMs need an explicit host IP to reach the supervisor"
-      );
+    if (opts.workloadApiDomain) {
+      this.logger.warn("⚠️ Custom workload API domain", {
+        domain: opts.workloadApiDomain,
+      });
     }
   }
 
@@ -76,14 +76,17 @@ export class ComputeWorkloadManager implements WorkloadManager {
       headers["Authorization"] = `Bearer ${this.opts.gatewayAuthToken}`;
     }
 
+    // Strip image digest — resolve by tag, not digest
+    const imageRef = opts.image.split("@")[0]!;
+
     const url = `${this.opts.gatewayUrl}/api/sandboxes`;
 
     const [fetchError, response] = await tryCatch(
       fetch(url, {
         method: "POST",
         headers,
         body: JSON.stringify({
-          image: opts.image,
+          image: imageRef,
           env: envVars,
         }),
       })