@herdctl/core 1.3.0 → 2.0.0

package/dist/runner/runtime/container-runner.js

@@ -0,0 +1,235 @@
+/**
+ * ContainerRunner - Docker container decorator for RuntimeInterface
+ *
+ * Wraps any runtime (SDK or CLI) and transparently executes inside Docker containers.
+ * Handles path translation, mount configuration, and container lifecycle.
+ *
+ * @example
+ * ```typescript
+ * const baseRuntime = new CLIRuntime();
+ * const dockerRuntime = new ContainerRunner(baseRuntime, dockerConfig);
+ *
+ * // Execution happens inside Docker container
+ * for await (const message of dockerRuntime.execute(options)) {
+ *   console.log(message);
+ * }
+ * ```
+ */
+import { execa } from "execa";
+import * as path from "node:path";
+import * as fs from "node:fs/promises";
+import { PassThrough } from "node:stream";
+import { createInterface } from "node:readline";
+import { ContainerManager, buildContainerMounts, buildContainerEnv, } from "./container-manager.js";
+import { CLIRuntime } from "./cli-runtime.js";
+import { SDKRuntime } from "./sdk-runtime.js";
+import { toSDKOptions } from "../sdk-adapter.js";
+import Dockerode from "dockerode";
+/**
+ * Container runtime decorator
+ *
+ * Decorates any RuntimeInterface to execute inside Docker containers.
+ * The wrapped runtime's execute logic runs via `docker exec` inside the container.
+ */
+export class ContainerRunner {
+    wrapped;
+    config;
+    manager;
+    stateDir;
+    /**
+     * Create a new ContainerRunner
+     *
+     * @param wrapped - The underlying runtime to execute inside containers
+     * @param config - Docker configuration
+     * @param stateDir - herdctl state directory (.herdctl/)
+     * @param docker - Optional Docker client for testing
+     */
+    constructor(wrapped, config, stateDir, docker) {
+        this.wrapped = wrapped;
+        this.config = config;
+        this.manager = new ContainerManager(docker);
+        this.stateDir = stateDir;
+    }
+    /**
+     * Execute agent inside Docker container
+     *
+     * Creates or reuses container, then executes based on runtime type:
+     * - CLI runtime: docker exec claude, watch session files on host
+     * - SDK runtime: docker exec wrapper script, stream JSONL from stdout
+     */
+    async *execute(options) {
+        const { agent } = options;
+        // Ensure docker-sessions directory exists on host (for CLI runtime)
+        const dockerSessionsDir = path.join(this.stateDir, "docker-sessions");
+        await fs.mkdir(dockerSessionsDir, { recursive: true });
+        // Build mounts and environment
+        const mounts = buildContainerMounts(agent, this.config, this.stateDir);
+        const env = buildContainerEnv(agent, this.config);
+        // Get or create container
+        const container = await this.manager.getOrCreateContainer(agent.name, this.config, mounts, env);
+        try {
+            // Get container ID for docker exec
+            const containerInfo = await container.inspect();
+            const containerId = containerInfo.Id;
+            // Handle CLI runtime with session file watching
+            if (this.wrapped instanceof CLIRuntime) {
+                yield* this.executeCLIRuntime(containerId, dockerSessionsDir, options);
+            }
+            // Handle SDK runtime with wrapper script
+            else if (this.wrapped instanceof SDKRuntime) {
+                yield* this.executeSDKRuntime(container, options);
+            }
+            // Unknown runtime type
+            else {
+                throw new Error(`Unsupported runtime type for Docker execution: ${this.wrapped.constructor.name}`);
+            }
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            yield {
+                type: "error",
+                message: `Docker execution failed: ${errorMessage}`,
+            };
+            // Container cleanup happens in finally block
+        }
+        finally {
+            // For ephemeral containers, stop immediately after execution
+            // This triggers AutoRemove so the container is cleaned up automatically
+            if (this.config.ephemeral) {
+                try {
+                    await this.manager.stopContainer(container);
+                }
+                catch (stopError) {
+                    // Log but don't fail - container might already be stopped
+                    console.error('[ContainerRunner] Failed to stop ephemeral container:', stopError);
+                }
+            }
+            // Always cleanup old containers, regardless of success/failure
+            // This prevents container accumulation from failed executions
+            try {
+                await this.manager.cleanupOldContainers(agent.name, this.config.maxContainers);
+            }
+            catch (cleanupError) {
+                // Log cleanup errors but don't fail the execution
+                console.error('[ContainerRunner] Failed to cleanup old containers:', cleanupError);
+            }
+        }
+    }
+    /**
+     * Execute CLI runtime inside Docker container
+     *
+     * Spawns claude CLI via docker exec and watches session files on host.
+     */
+    async *executeCLIRuntime(containerId, dockerSessionsDir, options) {
+        // Create CLI runtime with Docker-specific spawner
+        const cliRuntime = new CLIRuntime({
+            processSpawner: (args, _cwd, prompt, signal) => {
+                // Build docker exec command with prompt piped to stdin
+                // Uses printf to avoid issues with newlines and special chars in prompt
+                // Command: docker exec <container> sh -c 'cd /workspace && printf %s "prompt" | claude <args>'
+                const escapedPrompt = prompt.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+                const claudeArgs = args.map(arg => {
+                    // Escape single quotes in arguments
+                    return `'${arg.replace(/'/g, "'\\''")}'`;
+                }).join(" ");
+                const claudeCommand = `cd /workspace && printf %s "${escapedPrompt}" | claude ${claudeArgs}`;
+                console.log("[ContainerRunner] Executing docker command:", "docker", ["exec", containerId, "sh", "-c", claudeCommand]);
+                console.log("[ContainerRunner] Prompt length:", prompt.length);
+                // execa returns Subprocess directly (which is promise-like)
+                return execa("docker", ["exec", containerId, "sh", "-c", claudeCommand], {
+                    cancelSignal: signal,
+                });
+            },
+            // Session files are written inside container but mounted to host
+            sessionDirOverride: dockerSessionsDir,
+        });
+        // Delegate to CLI runtime - it handles session watching, timeout, errors
+        yield* cliRuntime.execute(options);
+    }
+    /**
+     * Execute SDK runtime inside Docker container
+     *
+     * Runs docker-sdk-wrapper.js script which imports SDK and streams messages as JSONL.
+     */
+    async *executeSDKRuntime(container, options) {
+        // Build SDK options
+        const sdkOptions = toSDKOptions(options.agent, {
+            resume: options.resume,
+            fork: options.fork,
+        });
+        // Override cwd for Docker - workspace is always mounted at /workspace
+        sdkOptions.cwd = "/workspace";
+        // Prepare options JSON for wrapper script
+        const wrapperOptions = {
+            prompt: options.prompt,
+            sdkOptions,
+        };
+        // Create exec with environment variable
+        // Use bash login shell to get full environment including PATH
+        const optionsJson = JSON.stringify(wrapperOptions).replace(/'/g, "'\\''");
+        const command = `export HERDCTL_SDK_OPTIONS='${optionsJson}' && node /usr/local/lib/docker-sdk-wrapper.js`;
+        console.log("[ContainerRunner] SDK exec command:", command);
+        console.log("[ContainerRunner] Options JSON length:", optionsJson.length);
+        const exec = await container.exec({
+            Cmd: [
+                "bash",
+                "-l",
+                "-c",
+                command,
+            ],
+            AttachStdout: true,
+            AttachStderr: true,
+            AttachStdin: false,
+            Tty: false,
+            WorkingDir: "/workspace",
+        });
+        // Start exec and get stream
+        const stream = await exec.start({ hijack: true, stdin: false });
+        // Demultiplex stdout/stderr
+        const stdout = new PassThrough();
+        const stderr = new PassThrough();
+        const modem = new Dockerode().modem;
+        modem.demuxStream(stream, stdout, stderr);
+        // Collect stderr for error diagnosis
+        const stderrLines = [];
+        const stderrRl = createInterface({
+            input: stderr,
+            crlfDelay: Infinity,
+        });
+        stderrRl.on("line", (line) => {
+            const trimmed = line.trim();
+            if (trimmed) {
+                console.error("[ContainerRunner] SDK stderr:", trimmed);
+                stderrLines.push(trimmed);
+            }
+        });
+        // Parse stdout line-by-line as JSONL
+        const rl = createInterface({
+            input: stdout,
+            crlfDelay: Infinity,
+        });
+        for await (const line of rl) {
+            const trimmed = line.trim();
+            if (!trimmed)
+                continue;
+            try {
+                const message = JSON.parse(trimmed);
+                yield message;
+            }
+            catch (error) {
+                console.warn(`[ContainerRunner] Failed to parse SDK output: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+        // Check exec exit code
+        const inspectData = await exec.inspect();
+        const exitCode = inspectData.ExitCode ?? 0;
+        if (exitCode !== 0) {
+            const stderr = stderrLines.join("\n");
+            yield {
+                type: "error",
+                message: `SDK wrapper exited with code ${exitCode}${stderr ? `\n\nStderr:\n${stderr}` : ""}`,
+            };
+        }
+    }
+}
+//# sourceMappingURL=container-runner.js.map

package/dist/runner/runtime/container-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-runner.js","sourceRoot":"","sources":["../../../src/runner/runtime/container-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIhD,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,SAAS,MAAM,WAAW,CAAC;AAElC;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IAahB;IACA;IAbF,OAAO,CAAmB;IAC1B,QAAQ,CAAS;IAEzB;;;;;;;OAOG;IACH,YACU,OAAyB,EACzB,MAAoB,EAC5B,QAAgB,EAChB,MAA4B;QAHpB,YAAO,GAAP,OAAO,CAAkB;QACzB,WAAM,GAAN,MAAM,CAAc;QAI5B,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,CAAC,OAAO,CAAC,OAA8B;QAC3C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE1B,oEAAoE;QACpE,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACtE,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvD,+BAA+B;QAC/B,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAElD,0BAA0B;QAC1B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CACvD,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,MAAM,EACX,MAAM,EACN,GAAG,CACJ,CAAC;QAEF,IAAI,CAAC;YACH,mCAAmC;YACnC,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YAChD,MAAM,WAAW,GAAG,aAAa,CAAC,EAAE,CAAC;YAErC,gDAAgD;YAChD,IAAI,IAAI,CAAC,OAAO,YAAY,UAAU,EAAE,CAAC;gBACvC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;YACzE,CAAC;YACD,yCAAyC;iBACpC,IAAI,IAAI,CAAC,OAAO,YAAY,UAAU,EAAE,CAAC;gBAC5C,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;YACD,uBAAuB;iBAClB,CAAC;gBACJ,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEzD,MAAM;gBACJ,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,4BAA4B,YAAY,EAAE;aACtC,CAAC;YAEhB,6CAA6C;QAC/C,CAAC;gBAAS,CAAC;YACT,6DAA6D;YAC7D,wEAAwE;YACxE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC9C,CAAC;gBAAC,OAAO,SAAS,EAAE,CAAC;oBACnB,0DAA0D;oBAC1D,OAAO,CAAC,KAAK,CAAC,uDAAuD,EAAE,SAAS,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,8DAA8D;YAC9D,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACjF,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,kDAAkD;gBAClD,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,YAAY,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,CAAC,iBAAiB,CAC9B,WAAmB,EACnB,iBAAyB,EACzB,OAA8B;QAE9B,kDAAkD;QAClD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;YAChC,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBAC7C,uDAAuD;gBACvD,wEAAwE;gBACxE,+FAA+F;gBAC/F,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACzE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;oBAChC,oCAAoC;oBACpC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;gBAC3C,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACb,MAAM,aAAa,GAAG,+BAA+B,aAAa,cAAc,UAAU,EAAE,CAAC;gBAE7F,OAAO,CAAC,GAAG,CAAC,6CAA6C,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;gBACvH,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBAE/D,4DAA4D;gBAC5D,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE;oBACvE,YAAY,EAAE,MAAM;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,iEAAiE;YACjE,kBAAkB,EAAE,iBAAiB;SACtC,CAAC,CAAC;QAEH,yEAAyE;QACzE,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,CAAC,iBAAiB,CAC9B,SAAwC,EACxC,OAA8B;QAE9B,oBAAoB;QACpB,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE;YAC7C,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QAEH,sEAAsE;QACtE,UAAU,CAAC,GAAG,GAAG,YAAY,CAAC;QAE9B,0CAA0C;QAC1C,MAAM,cAAc,GAAG;YACrB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU;SACX,CAAC;QAEF,wCAAwC;QACxC,8DAA8D;QAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,+BAA+B,WAAW,gDAAgD,CAAC;QAE3G,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,wCAAwC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAE1E,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC;YAChC,GAAG,EAAE;gBACH,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,OAAO;aACR;YACD,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,KAAK;YACV,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;QAEH,4BAA4B;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhE,4BAA4B;QAC5B,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC,KAAK,CAAC;QACpC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAE1C,qCAAqC;QACrC,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,eAAe,CAAC;YAC/B,KAAK,EAAE,MAAM;YACb,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QAEH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,OAAO,CAAC,CAAC;gBACxD,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,qCAAqC;QACrC,MAAM,EAAE,GAAG,eAAe,CAAC;YACzB,KAAK,EAAE,MAAM;YACb,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QAEH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;gBAClD,MAAM,OAAO,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CACV,iDAAiD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC1G,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM;gBACJ,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,gCAAgC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;aAC/E,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}

package/dist/runner/runtime/docker-config.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Docker configuration types and utilities
+ *
+ * This module provides TypeScript types for Docker container configuration
+ * and utility functions for path mapping and container management.
+ */
+import type { DockerInput } from "../../config/schema.js";
+/**
+ * Network isolation modes for Docker containers
+ */
+export type NetworkMode = "none" | "bridge" | "host";
+/**
+ * Volume mount mode
+ */
+export type VolumeMode = "ro" | "rw";
+/**
+ * Path mapping between host and container
+ */
+export interface PathMapping {
+    /** Absolute path on the host system */
+    hostPath: string;
+    /** Path inside the container */
+    containerPath: string;
+    /** Mount mode: read-only or read-write */
+    mode: VolumeMode;
+}
+/**
+ * Resolved Docker configuration with defaults applied
+ */
+export interface DockerConfig {
+    /** Whether Docker is enabled */
+    enabled: boolean;
+    /** Use ephemeral containers (fresh per job) vs persistent (reuse across jobs) */
+    ephemeral: boolean;
+    /** Docker image to use */
+    image: string;
+    /** Network isolation mode */
+    network: NetworkMode;
+    /** Memory limit in bytes */
+    memoryBytes: number;
+    /** CPU shares (relative weight) */
+    cpuShares?: number;
+    /** Container user as "UID:GID" string */
+    user: string;
+    /** Maximum containers to keep per agent */
+    maxContainers: number;
+    /** Additional volume mounts */
+    volumes: PathMapping[];
+    /** Workspace mount mode */
+    workspaceMode: VolumeMode;
+    /** Environment variables to pass to the container */
+    env: Record<string, string>;
+}
+/**
+ * Default Docker image for Claude Code containers
+ *
+ * Users must build this image locally using the Dockerfile in the repository root:
+ *   docker build -t herdctl/runtime:latest .
+ */
+export declare const DEFAULT_DOCKER_IMAGE = "herdctl/runtime:latest";
+/**
+ * Default memory limit (2GB)
+ */
+export declare const DEFAULT_MEMORY_LIMIT = "2g";
+/**
+ * Default max containers to keep per agent
+ */
+export declare const DEFAULT_MAX_CONTAINERS = 5;
+/**
+ * Parse memory string (e.g., "2g", "512m") to bytes
+ *
+ * @param memory - Memory string with unit suffix
+ * @returns Memory in bytes
+ * @throws Error if format is invalid
+ */
+export declare function parseMemoryToBytes(memory: string): number;
+/**
+ * Parse volume mount string to PathMapping
+ *
+ * @param volume - Volume mount string in format "host:container" or "host:container:mode"
+ * @returns PathMapping object
+ * @throws Error if format is invalid
+ */
+export declare function parseVolumeMount(volume: string): PathMapping;
+/**
+ * Get the current user's UID:GID for container user mapping
+ *
+ * @returns User string in "UID:GID" format
+ */
+export declare function getHostUser(): string;
+/**
+ * Resolve Docker config from agent configuration
+ *
+ * Applies defaults and parses string values to typed equivalents.
+ *
+ * @param docker - Docker configuration from agent config (may be partial)
+ * @returns Fully resolved DockerConfig
+ */
+export declare function resolveDockerConfig(docker?: DockerInput): DockerConfig;
+//# sourceMappingURL=docker-config.d.ts.map

package/dist/runner/runtime/docker-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-config.d.ts","sourceRoot":"","sources":["../../../src/runner/runtime/docker-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAU,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;AAErD;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,0CAA0C;IAC1C,IAAI,EAAE,UAAU,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,SAAS,EAAE,OAAO,CAAC;IACnB,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,OAAO,EAAE,WAAW,CAAC;IACrB,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,2BAA2B;IAC3B,aAAa,EAAE,UAAU,CAAC;IAC1B,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAE7D;;GAEG;AACH,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC;;GAEG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAoBzD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAoB5D;AAED;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAKpC;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,YAAY,CActE"}

package/dist/runner/runtime/docker-config.js

@@ -0,0 +1,98 @@
+/**
+ * Docker configuration types and utilities
+ *
+ * This module provides TypeScript types for Docker container configuration
+ * and utility functions for path mapping and container management.
+ */
+/**
+ * Default Docker image for Claude Code containers
+ *
+ * Users must build this image locally using the Dockerfile in the repository root:
+ *   docker build -t herdctl/runtime:latest .
+ */
+export const DEFAULT_DOCKER_IMAGE = "herdctl/runtime:latest";
+/**
+ * Default memory limit (2GB)
+ */
+export const DEFAULT_MEMORY_LIMIT = "2g";
+/**
+ * Default max containers to keep per agent
+ */
+export const DEFAULT_MAX_CONTAINERS = 5;
+/**
+ * Parse memory string (e.g., "2g", "512m") to bytes
+ *
+ * @param memory - Memory string with unit suffix
+ * @returns Memory in bytes
+ * @throws Error if format is invalid
+ */
+export function parseMemoryToBytes(memory) {
+    const match = memory.toLowerCase().match(/^(\d+(?:\.\d+)?)\s*([kmgt]?)b?$/i);
+    if (!match) {
+        throw new Error(`Invalid memory format: "${memory}". Use format like "2g", "512m", "1024k", or "2048" (bytes).`);
+    }
+    const value = parseFloat(match[1]);
+    const unit = match[2]?.toLowerCase() ?? "";
+    const multipliers = {
+        "": 1,
+        k: 1024,
+        m: 1024 * 1024,
+        g: 1024 * 1024 * 1024,
+        t: 1024 * 1024 * 1024 * 1024,
+    };
+    return Math.floor(value * multipliers[unit]);
+}
+/**
+ * Parse volume mount string to PathMapping
+ *
+ * @param volume - Volume mount string in format "host:container" or "host:container:mode"
+ * @returns PathMapping object
+ * @throws Error if format is invalid
+ */
+export function parseVolumeMount(volume) {
+    const parts = volume.split(":");
+    if (parts.length < 2 || parts.length > 3) {
+        throw new Error(`Invalid volume format: "${volume}". Use "host:container" or "host:container:ro|rw".`);
+    }
+    const [hostPath, containerPath, modeStr] = parts;
+    const mode = modeStr === "ro" ? "ro" : modeStr === "rw" || !modeStr ? "rw" : "rw";
+    if (modeStr && modeStr !== "ro" && modeStr !== "rw") {
+        throw new Error(`Invalid volume mode: "${modeStr}". Use "ro" (read-only) or "rw" (read-write).`);
+    }
+    return { hostPath, containerPath, mode };
+}
+/**
+ * Get the current user's UID:GID for container user mapping
+ *
+ * @returns User string in "UID:GID" format
+ */
+export function getHostUser() {
+    // process.getuid() and process.getgid() are available on POSIX systems
+    const uid = process.getuid?.() ?? 1000;
+    const gid = process.getgid?.() ?? 1000;
+    return `${uid}:${gid}`;
+}
+/**
+ * Resolve Docker config from agent configuration
+ *
+ * Applies defaults and parses string values to typed equivalents.
+ *
+ * @param docker - Docker configuration from agent config (may be partial)
+ * @returns Fully resolved DockerConfig
+ */
+export function resolveDockerConfig(docker) {
+    return {
+        enabled: docker?.enabled ?? false,
+        ephemeral: docker?.ephemeral ?? true,
+        image: docker?.image ?? docker?.base_image ?? DEFAULT_DOCKER_IMAGE,
+        network: docker?.network ?? "bridge",
+        memoryBytes: parseMemoryToBytes(docker?.memory ?? DEFAULT_MEMORY_LIMIT),
+        cpuShares: docker?.cpu_shares,
+        user: docker?.user ?? getHostUser(),
+        maxContainers: docker?.max_containers ?? DEFAULT_MAX_CONTAINERS,
+        volumes: docker?.volumes?.map(parseVolumeMount) ?? [],
+        workspaceMode: docker?.workspace_mode ?? "rw",
+        env: docker?.env ?? {},
+    };
+}
+//# sourceMappingURL=docker-config.js.map

package/dist/runner/runtime/docker-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-config.js","sourceRoot":"","sources":["../../../src/runner/runtime/docker-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsDH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAE7D;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAEzC;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,2BAA2B,MAAM,8DAA8D,CAChG,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAE3C,MAAM,WAAW,GAA2B;QAC1C,EAAE,EAAE,CAAC;QACL,CAAC,EAAE,IAAI;QACP,CAAC,EAAE,IAAI,GAAG,IAAI;QACd,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI;QACrB,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;KAC7B,CAAC;IAEF,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEhC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,2BAA2B,MAAM,oDAAoD,CACtF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;IACjD,MAAM,IAAI,GACR,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAEvE,IAAI,OAAO,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,+CAA+C,CAChF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,uEAAuE;IACvE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;IACvC,OAAO,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,OAAO;QACL,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK;QACjC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI;QACpC,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,MAAM,EAAE,UAAU,IAAI,oBAAoB;QAClE,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,QAAQ;QACpC,WAAW,EAAE,kBAAkB,CAAC,MAAM,EAAE,MAAM,IAAI,oBAAoB,CAAC;QACvE,SAAS,EAAE,MAAM,EAAE,UAAU;QAC7B,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,WAAW,EAAE;QACnC,aAAa,EAAE,MAAM,EAAE,cAAc,IAAI,sBAAsB;QAC/D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE;QACrD,aAAa,EAAE,MAAM,EAAE,cAAc,IAAI,IAAI;QAC7C,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE;KACvB,CAAC;AACJ,CAAC"}

package/dist/runner/runtime/factory.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Runtime factory for creating runtime instances
+ *
+ * Creates appropriate runtime implementations based on agent configuration.
+ * Supports SDK runtime, CLI runtime, and optional Docker containerization.
+ */
+import type { ResolvedAgent } from "../../config/index.js";
+import type { RuntimeInterface } from "./interface.js";
+/**
+ * Runtime type identifier
+ *
+ * - 'sdk': Claude Agent SDK runtime (default, standard pricing)
+ * - 'cli': Claude CLI runtime (Max plan pricing)
+ */
+export type RuntimeType = "sdk" | "cli";
+/**
+ * Options for runtime factory
+ */
+export interface RuntimeFactoryOptions {
+    /**
+     * herdctl state directory (.herdctl/)
+     *
+     * Required when Docker is enabled to locate docker-sessions directory.
+     * If not provided, defaults to '.herdctl' in current working directory.
+     */
+    stateDir?: string;
+}
+/**
+ * Runtime factory for creating runtime instances
+ *
+ * This factory creates the appropriate runtime implementation based on
+ * agent configuration. It provides a centralized point for runtime
+ * instantiation and validation.
+ *
+ * When docker.enabled is true, the base runtime is wrapped with
+ * ContainerRunner for Docker containerization.
+ *
+ * @example
+ * ```typescript
+ * // SDK runtime (default)
+ * const runtime = RuntimeFactory.create(resolvedAgent);
+ *
+ * // CLI runtime with Docker
+ * const dockerRuntime = RuntimeFactory.create(dockerAgent, {
+ *   stateDir: '/path/to/.herdctl'
+ * });
+ * ```
+ */
+export declare class RuntimeFactory {
+    /**
+     * Create a runtime instance based on agent configuration
+     *
+     * Determines the runtime type from agent.runtime (defaults to 'sdk')
+     * and wraps with ContainerRunner if agent.docker.enabled is true.
+     *
+     * @param agent - Resolved agent configuration
+     * @param options - Factory options including stateDir for Docker
+     * @returns Runtime implementation (possibly wrapped with ContainerRunner)
+     * @throws Error if runtime type is unsupported or invalid
+     */
+    static create(agent: ResolvedAgent, options?: RuntimeFactoryOptions): RuntimeInterface;
+}
+//# sourceMappingURL=factory.d.ts.map

package/dist/runner/runtime/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/runner/runtime/factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAMvD;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,KAAK,CAAC;AAExC;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,cAAc;IACzB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAM,CACX,KAAK,EAAE,aAAa,EACpB,OAAO,GAAE,qBAA0B,GAClC,gBAAgB;CAgCpB"}

package/dist/runner/runtime/factory.js

@@ -0,0 +1,68 @@
+/**
+ * Runtime factory for creating runtime instances
+ *
+ * Creates appropriate runtime implementations based on agent configuration.
+ * Supports SDK runtime, CLI runtime, and optional Docker containerization.
+ */
+import { SDKRuntime } from "./sdk-runtime.js";
+import { CLIRuntime } from "./cli-runtime.js";
+import { ContainerRunner } from "./container-runner.js";
+import { resolveDockerConfig } from "./docker-config.js";
+/**
+ * Runtime factory for creating runtime instances
+ *
+ * This factory creates the appropriate runtime implementation based on
+ * agent configuration. It provides a centralized point for runtime
+ * instantiation and validation.
+ *
+ * When docker.enabled is true, the base runtime is wrapped with
+ * ContainerRunner for Docker containerization.
+ *
+ * @example
+ * ```typescript
+ * // SDK runtime (default)
+ * const runtime = RuntimeFactory.create(resolvedAgent);
+ *
+ * // CLI runtime with Docker
+ * const dockerRuntime = RuntimeFactory.create(dockerAgent, {
+ *   stateDir: '/path/to/.herdctl'
+ * });
+ * ```
+ */
+export class RuntimeFactory {
+    /**
+     * Create a runtime instance based on agent configuration
+     *
+     * Determines the runtime type from agent.runtime (defaults to 'sdk')
+     * and wraps with ContainerRunner if agent.docker.enabled is true.
+     *
+     * @param agent - Resolved agent configuration
+     * @param options - Factory options including stateDir for Docker
+     * @returns Runtime implementation (possibly wrapped with ContainerRunner)
+     * @throws Error if runtime type is unsupported or invalid
+     */
+    static create(agent, options = {}) {
+        // Determine runtime type from agent config (default to SDK)
+        const runtimeType = agent.runtime ?? "sdk";
+        let runtime;
+        switch (runtimeType) {
+            case "sdk":
+                runtime = new SDKRuntime();
+                break;
+            case "cli":
+                runtime = new CLIRuntime();
+                break;
+            default:
+                throw new Error(`Unknown runtime type: ${runtimeType}. ` +
+                    "Supported types: 'sdk' (default), 'cli'");
+        }
+        // Wrap with ContainerRunner if Docker is enabled
+        if (agent.docker?.enabled) {
+            const dockerConfig = resolveDockerConfig(agent.docker);
+            const stateDir = options.stateDir ?? process.cwd() + "/.herdctl";
+            runtime = new ContainerRunner(runtime, dockerConfig, stateDir);
+        }
+        return runtime;
+    }
+}
+//# sourceMappingURL=factory.js.map

package/dist/runner/runtime/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../src/runner/runtime/factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAuBzD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,cAAc;IACzB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAM,CACX,KAAoB,EACpB,UAAiC,EAAE;QAEnC,4DAA4D;QAC5D,MAAM,WAAW,GAAiB,KAAK,CAAC,OAAuB,IAAI,KAAK,CAAC;QAEzE,IAAI,OAAyB,CAAC;QAE9B,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,KAAK;gBACR,OAAO,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC3B,MAAM;YAER,KAAK,KAAK;gBACR,OAAO,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC3B,MAAM;YAER;gBACE,MAAM,IAAI,KAAK,CACb,yBAAyB,WAAW,IAAI;oBACtC,yCAAyC,CAC5C,CAAC;QACN,CAAC;QAED,iDAAiD;QACjD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAEjE,OAAO,GAAG,IAAI,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/runner/runtime/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Runtime module barrel export
+ *
+ * Exports all public runtime types and classes for easy importing:
+ * - RuntimeInterface and RuntimeExecuteOptions types
+ * - SDKRuntime and CLIRuntime implementations
+ * - RuntimeFactory for runtime instantiation
+ * - RuntimeType for type identification
+ * - CLI session path utilities
+ */
+export type { RuntimeInterface, RuntimeExecuteOptions } from "./interface.js";
+export { SDKRuntime } from "./sdk-runtime.js";
+export { CLIRuntime } from "./cli-runtime.js";
+export { RuntimeFactory, type RuntimeType } from "./factory.js";
+export { encodePathForCli, getCliSessionDir, getCliSessionFile, } from "./cli-session-path.js";
+export { CLISessionWatcher, watchSessionFile, } from "./cli-session-watcher.js";
+export { type DockerConfig, type PathMapping, type NetworkMode, type VolumeMode, parseMemoryToBytes, parseVolumeMount, getHostUser, resolveDockerConfig, DEFAULT_DOCKER_IMAGE, DEFAULT_MEMORY_LIMIT, DEFAULT_MAX_CONTAINERS, } from "./docker-config.js";
+export { ContainerRunner } from "./container-runner.js";
+export { ContainerManager, buildContainerMounts, buildContainerEnv, } from "./container-manager.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/runner/runtime/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runner/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC"}

package/dist/runner/runtime/index.js

@@ -0,0 +1,21 @@
+/**
+ * Runtime module barrel export
+ *
+ * Exports all public runtime types and classes for easy importing:
+ * - RuntimeInterface and RuntimeExecuteOptions types
+ * - SDKRuntime and CLIRuntime implementations
+ * - RuntimeFactory for runtime instantiation
+ * - RuntimeType for type identification
+ * - CLI session path utilities
+ */
+export { SDKRuntime } from "./sdk-runtime.js";
+export { CLIRuntime } from "./cli-runtime.js";
+export { RuntimeFactory } from "./factory.js";
+export { encodePathForCli, getCliSessionDir, getCliSessionFile, } from "./cli-session-path.js";
+export { CLISessionWatcher, watchSessionFile, } from "./cli-session-watcher.js";
+// Docker configuration
+export { parseMemoryToBytes, parseVolumeMount, getHostUser, resolveDockerConfig, DEFAULT_DOCKER_IMAGE, DEFAULT_MEMORY_LIMIT, DEFAULT_MAX_CONTAINERS, } from "./docker-config.js";
+// Container execution
+export { ContainerRunner } from "./container-runner.js";
+export { ContainerManager, buildContainerMounts, buildContainerEnv, } from "./container-manager.js";
+//# sourceMappingURL=index.js.map

package/dist/runner/runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runner/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAoB,MAAM,cAAc,CAAC;AAChE,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAElC,uBAAuB;AACvB,OAAO,EAKL,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAE5B,sBAAsB;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC"}