buildhive-agent 1.0.0-beta.1

package/dist/config/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAID,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,0DAA0D;IAC1D,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oEAAoE;IACpE,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,oDAAoD;IACpD,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kDAAkD;IAClD,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yCAAyC;IACzC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,iDAAiD;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,gBAAgB,EAAE,MAAM,CAAC;IACzB,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC;IACvB,gCAAgC;IAChC,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,2DAA2D;IAC3D,OAAO,EAAE,OAAO,CAAC;IACjB,iCAAiC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,0CAA0C;IAC1C,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,mCAAmC;AACnC,MAAM,WAAW,eAAe;IAC9B,uEAAuE;IACvE,WAAW,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC1C,gCAAgC;IAChC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,sBAAsB;IACtB,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,gCAAgC;AAChC,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,QAAQ,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACjC,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAE7B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAG3B,WAAW,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC/B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,oBAAoB,EAAE,OAAO,CAAC;IAG9B,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IAGtB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,uBAAuB,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAG3B,wBAAwB,EAAE,OAAO,CAAC;IAClC,sBAAsB,EAAE,OAAO,CAAC;IAChC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAGrB,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,EAAE,CAAC,EAAE,QAAQ,CAAC;IAGd,kBAAkB,EAAE,OAAO,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAE1B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAGhB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,MAAM,EAAE,CAAC;IAGf,YAAY,EAAE,YAAY,CAAC;IAG3B,cAAc,EAAE,cAAc,CAAC;IAG/B,aAAa,EAAE,aAAa,CAAC;IAG7B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IAGrB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC9C,gBAAgB,EAAE,MAAM,CAAC;IAGzB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAG/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,wBAAwB,EAAE,MAAM,CAAC;IAGjC,aAAa,EAAE,OAAO,CAAC;IACvB,iBAAiB,EAAE,OAAO,CAAC;IAG3B,eAAe,EAAE,eAAe,CAAC;IACjC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,GAAG,CAAC;CACb;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,qBAAqB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IAGvC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAGpC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,kCAAkC,CAAC,EAAE,MAAM,CAAC;IAC5C,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAGlC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAGlC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,2BAA2B,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,eAAO,MAAM,cAAc,EAAE,OAAO,CAAC,WAAW,CAmF/C,CAAC"}

package/dist/config/types.js

@@ -0,0 +1,90 @@
+/**
+ * Agent Configuration Types
+ *
+ * Defines TypeScript types for agent configuration schema
+ * Requirements: 1.1, 1.2
+ */
+export const DEFAULT_CONFIG = {
+    maxConcurrentJobs: 1,
+    heartbeatInterval: 30,
+    tags: [],
+    dockerConfig: {
+        baseImage: 'ubuntu:22.04',
+        networkMode: 'none',
+        memoryLimit: '2g',
+        cpuLimit: '1.0',
+        volumeMounts: []
+    },
+    securityConfig: {
+        maxMemoryMB: 2048,
+        maxCpuCores: 2,
+        maxDiskSpaceMB: 10240,
+        maxProcesses: 256,
+        maxFileDescriptors: 1024,
+        networkMode: 'none',
+        allowedOutboundPorts: [],
+        blockPrivateNetworks: true,
+        readOnlyRoot: true,
+        allowedWritePaths: ['/workspace', '/tmp/buildhive'],
+        tempDirSizeMB: 512,
+        dropAllCapabilities: true,
+        allowedCapabilities: ['CHOWN', 'DAC_OVERRIDE', 'FOWNER'],
+        noNewPrivileges: true,
+        maxExecutionTimeSeconds: 3600,
+        killTimeoutSeconds: 30,
+        enableResourceMonitoring: true,
+        enableSecurityAuditing: true,
+        logSecurityEvents: true
+    },
+    storageConfig: {
+        type: 'local',
+        localPath: '/tmp/buildhive/artifacts',
+        cleanupAfterUpload: true,
+        retentionDays: 7
+    },
+    maxMemoryUsage: 80,
+    maxCpuUsage: 80,
+    maxDiskUsage: 90,
+    logLevel: 'info',
+    logRetentionDays: 7,
+    jobTimeoutMinutes: 60,
+    connectionTimeoutSeconds: 30,
+    enableMetrics: true,
+    enableAutoUpdates: true,
+    // Enhanced configuration defaults
+    acceptanceRules: {
+        allowedRecipes: ['*'],
+        blockedRecipes: [],
+        allowedRepositories: ['*'],
+        maxJobDurationMinutes: 120,
+        requireDocker: false
+    },
+    resourceGovernance: {
+        maxCpuPercent: 80,
+        maxMemoryPercent: 70,
+        reservedDiskGB: 10
+    },
+    executionConfig: {
+        defaultMode: 'docker',
+        native: {
+            enabled: false,
+            allowedPaths: ['/tmp/buildhive'],
+            userIsolation: true
+        },
+        docker: {
+            baseImage: 'ubuntu:22.04',
+            networkMode: 'none',
+            memoryLimit: '2g',
+            cpuLimit: '1.0',
+            volumeMounts: []
+        }
+    },
+    cacheConfig: {
+        enabled: true,
+        directory: '/tmp/buildhive/cache',
+        maxSizeGB: 20,
+        strategy: 'lru',
+        volumes: {}
+    }
+};
+//# sourceMappingURL=types.js.map

package/dist/config/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA2PH,MAAM,CAAC,MAAM,cAAc,GAAyB;IAClD,iBAAiB,EAAE,CAAC;IACpB,iBAAiB,EAAE,EAAE;IACrB,IAAI,EAAE,EAAE;IACR,YAAY,EAAE;QACZ,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,EAAE;KACjB;IACD,cAAc,EAAE;QACd,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,CAAC;QACd,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,GAAG;QACjB,kBAAkB,EAAE,IAAI;QACxB,WAAW,EAAE,MAAM;QACnB,oBAAoB,EAAE,EAAE;QACxB,oBAAoB,EAAE,IAAI;QAC1B,YAAY,EAAE,IAAI;QAClB,iBAAiB,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;QACnD,aAAa,EAAE,GAAG;QAClB,mBAAmB,EAAE,IAAI;QACzB,mBAAmB,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC;QACxD,eAAe,EAAE,IAAI;QACrB,uBAAuB,EAAE,IAAI;QAC7B,kBAAkB,EAAE,EAAE;QACtB,wBAAwB,EAAE,IAAI;QAC9B,sBAAsB,EAAE,IAAI;QAC5B,iBAAiB,EAAE,IAAI;KACxB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,0BAA0B;QACrC,kBAAkB,EAAE,IAAI;QACxB,aAAa,EAAE,CAAC;KACjB;IACD,cAAc,EAAE,EAAE;IAClB,WAAW,EAAE,EAAE;IACf,YAAY,EAAE,EAAE;IAChB,QAAQ,EAAE,MAAM;IAChB,gBAAgB,EAAE,CAAC;IACnB,iBAAiB,EAAE,EAAE;IACrB,wBAAwB,EAAE,EAAE;IAC5B,aAAa,EAAE,IAAI;IACnB,iBAAiB,EAAE,IAAI;IAEvB,kCAAkC;IAClC,eAAe,EAAE;QACf,cAAc,EAAE,CAAC,GAAG,CAAC;QACrB,cAAc,EAAE,EAAE;QAClB,mBAAmB,EAAE,CAAC,GAAG,CAAC;QAC1B,qBAAqB,EAAE,GAAG;QAC1B,aAAa,EAAE,KAAK;KACrB;IACD,kBAAkB,EAAE;QAClB,aAAa,EAAE,EAAE;QACjB,gBAAgB,EAAE,EAAE;QACpB,cAAc,EAAE,EAAE;KACnB;IACD,eAAe,EAAE;QACf,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE;YACN,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,CAAC,gBAAgB,CAAC;YAChC,aAAa,EAAE,IAAI;SACpB;QACD,MAAM,EAAE;YACN,SAAS,EAAE,cAAc;YACzB,WAAW,EAAE,MAAM;YACnB,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,EAAE;SACjB;KACF;IACD,WAAW,EAAE;QACX,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,sBAAsB;QACjC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,EAAE;KACZ;CACF,CAAC"}

package/dist/config/validation.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Configuration Validation
+ *
+ * Validates agent configuration against schema and business rules
+ * Requirements: 1.1, 1.2
+ */
+import { AgentConfig, ConfigValidationResult } from './types.js';
+export declare class ConfigValidator {
+    /**
+     * Validates the complete agent configuration
+     */
+    static validate(config: Partial<AgentConfig>): ConfigValidationResult;
+    private static validateRequiredFields;
+    private static validateTypes;
+    private static validateBusinessRules;
+    private static validateDockerConfig;
+    private static validateAcceptanceRules;
+    private static validateResourceGovernance;
+    private static validateQuietHours;
+    private static validateCacheConfig;
+    private static validateExecutionConfig;
+    /** Validates "HH:MM-HH:MM" format */
+    static isValidQuietHoursSchedule(schedule: string): boolean;
+    private static isValidUrl;
+    private static isValidMemoryLimit;
+    private static isValidCpuLimit;
+}
+//# sourceMappingURL=validation.d.ts.map

package/dist/config/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/config/validation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAyB,sBAAsB,EAAuF,MAAM,YAAY,CAAC;AAE7K,qBAAa,eAAe;IAC1B;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,sBAAsB;IA2BrE,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAmBrC,OAAO,CAAC,MAAM,CAAC,aAAa;IA6E5B,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAgFpC,OAAO,CAAC,MAAM,CAAC,oBAAoB;IA6EnC,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAqCtC,OAAO,CAAC,MAAM,CAAC,0BAA0B;IAiCzC,OAAO,CAAC,MAAM,CAAC,kBAAkB;IA0BjC,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAqBlC,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAatC,qCAAqC;IACrC,MAAM,CAAC,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAK3D,OAAO,CAAC,MAAM,CAAC,UAAU;IASzB,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAIjC,OAAO,CAAC,MAAM,CAAC,eAAe;CAI/B"}

package/dist/config/validation.js

@@ -0,0 +1,397 @@
+/**
+ * Configuration Validation
+ *
+ * Validates agent configuration against schema and business rules
+ * Requirements: 1.1, 1.2
+ */
+export class ConfigValidator {
+    /**
+     * Validates the complete agent configuration
+     */
+    static validate(config) {
+        const errors = [];
+        // Required fields validation
+        this.validateRequiredFields(config, errors);
+        // Type and format validation
+        this.validateTypes(config, errors);
+        // Business rules validation
+        this.validateBusinessRules(config, errors);
+        // Docker configuration validation
+        this.validateDockerConfig(config, errors);
+        // Enhanced configuration validation
+        this.validateAcceptanceRules(config, errors);
+        this.validateResourceGovernance(config, errors);
+        this.validateCacheConfig(config, errors);
+        this.validateExecutionConfig(config, errors);
+        return {
+            isValid: errors.length === 0,
+            errors
+        };
+    }
+    static validateRequiredFields(config, errors) {
+        const requiredFields = [
+            'platformUrl',
+            'apiKey',
+            'agentId',
+            'name'
+        ];
+        for (const field of requiredFields) {
+            if (!config[field]) {
+                errors.push({
+                    field,
+                    message: `${field} is required`,
+                    value: config[field]
+                });
+            }
+        }
+    }
+    static validateTypes(config, errors) {
+        // URL validation
+        if (config.platformUrl && !this.isValidUrl(config.platformUrl)) {
+            errors.push({
+                field: 'platformUrl',
+                message: 'platformUrl must be a valid URL',
+                value: config.platformUrl
+            });
+        }
+        // String validations
+        if (config.apiKey && typeof config.apiKey !== 'string') {
+            errors.push({
+                field: 'apiKey',
+                message: 'apiKey must be a string',
+                value: config.apiKey
+            });
+        }
+        if (config.agentId && typeof config.agentId !== 'string') {
+            errors.push({
+                field: 'agentId',
+                message: 'agentId must be a string',
+                value: config.agentId
+            });
+        }
+        if (config.name && typeof config.name !== 'string') {
+            errors.push({
+                field: 'name',
+                message: 'name must be a string',
+                value: config.name
+            });
+        }
+        // Number validations
+        if (config.maxConcurrentJobs !== undefined && (!Number.isInteger(config.maxConcurrentJobs) || config.maxConcurrentJobs < 1)) {
+            errors.push({
+                field: 'maxConcurrentJobs',
+                message: 'maxConcurrentJobs must be a positive integer',
+                value: config.maxConcurrentJobs
+            });
+        }
+        if (config.heartbeatInterval !== undefined && (!Number.isInteger(config.heartbeatInterval) || config.heartbeatInterval < 5)) {
+            errors.push({
+                field: 'heartbeatInterval',
+                message: 'heartbeatInterval must be an integer >= 5 seconds',
+                value: config.heartbeatInterval
+            });
+        }
+        // Array validations
+        if (config.tags && !Array.isArray(config.tags)) {
+            errors.push({
+                field: 'tags',
+                message: 'tags must be an array of strings',
+                value: config.tags
+            });
+        }
+        else if (config.tags && !config.tags.every(tag => typeof tag === 'string')) {
+            errors.push({
+                field: 'tags',
+                message: 'all tags must be strings',
+                value: config.tags
+            });
+        }
+        // Log level validation
+        if (config.logLevel && !['debug', 'info', 'warn', 'error'].includes(config.logLevel)) {
+            errors.push({
+                field: 'logLevel',
+                message: 'logLevel must be one of: debug, info, warn, error',
+                value: config.logLevel
+            });
+        }
+    }
+    static validateBusinessRules(config, errors) {
+        // Resource usage limits
+        if (config.maxMemoryUsage !== undefined && (config.maxMemoryUsage < 10 || config.maxMemoryUsage > 95)) {
+            errors.push({
+                field: 'maxMemoryUsage',
+                message: 'maxMemoryUsage must be between 10 and 95 percent',
+                value: config.maxMemoryUsage
+            });
+        }
+        if (config.maxCpuUsage !== undefined && (config.maxCpuUsage < 10 || config.maxCpuUsage > 95)) {
+            errors.push({
+                field: 'maxCpuUsage',
+                message: 'maxCpuUsage must be between 10 and 95 percent',
+                value: config.maxCpuUsage
+            });
+        }
+        if (config.maxDiskUsage !== undefined && (config.maxDiskUsage < 50 || config.maxDiskUsage > 95)) {
+            errors.push({
+                field: 'maxDiskUsage',
+                message: 'maxDiskUsage must be between 50 and 95 percent',
+                value: config.maxDiskUsage
+            });
+        }
+        // Timeout validations
+        if (config.jobTimeoutMinutes !== undefined && (config.jobTimeoutMinutes < 1 || config.jobTimeoutMinutes > 480)) {
+            errors.push({
+                field: 'jobTimeoutMinutes',
+                message: 'jobTimeoutMinutes must be between 1 and 480 minutes (8 hours)',
+                value: config.jobTimeoutMinutes
+            });
+        }
+        if (config.connectionTimeoutSeconds !== undefined && (config.connectionTimeoutSeconds < 5 || config.connectionTimeoutSeconds > 300)) {
+            errors.push({
+                field: 'connectionTimeoutSeconds',
+                message: 'connectionTimeoutSeconds must be between 5 and 300 seconds',
+                value: config.connectionTimeoutSeconds
+            });
+        }
+        // Log retention validation
+        if (config.logRetentionDays !== undefined && (config.logRetentionDays < 1 || config.logRetentionDays > 90)) {
+            errors.push({
+                field: 'logRetentionDays',
+                message: 'logRetentionDays must be between 1 and 90 days',
+                value: config.logRetentionDays
+            });
+        }
+        // Repository list validations
+        if (config.allowedRepositories && config.blockedRepositories) {
+            errors.push({
+                field: 'allowedRepositories',
+                message: 'Cannot specify both allowedRepositories and blockedRepositories',
+                value: { allowed: config.allowedRepositories, blocked: config.blockedRepositories }
+            });
+        }
+        // Agent name validation
+        if (config.name && (config.name.length < 1 || config.name.length > 100)) {
+            errors.push({
+                field: 'name',
+                message: 'name must be between 1 and 100 characters',
+                value: config.name
+            });
+        }
+        // API key validation
+        if (config.apiKey && config.apiKey.length < 10) {
+            errors.push({
+                field: 'apiKey',
+                message: 'apiKey appears to be too short (minimum 10 characters)',
+                value: config.apiKey
+            });
+        }
+    }
+    static validateDockerConfig(config, errors) {
+        if (!config.dockerConfig)
+            return;
+        const dockerConfig = config.dockerConfig;
+        // Base image validation
+        if (!dockerConfig.baseImage || typeof dockerConfig.baseImage !== 'string') {
+            errors.push({
+                field: 'dockerConfig.baseImage',
+                message: 'dockerConfig.baseImage must be a non-empty string',
+                value: dockerConfig.baseImage
+            });
+        }
+        // Network mode validation
+        if (!['none', 'bridge'].includes(dockerConfig.networkMode)) {
+            errors.push({
+                field: 'dockerConfig.networkMode',
+                message: 'dockerConfig.networkMode must be "none" or "bridge"',
+                value: dockerConfig.networkMode
+            });
+        }
+        // Memory limit validation
+        if (!this.isValidMemoryLimit(dockerConfig.memoryLimit)) {
+            errors.push({
+                field: 'dockerConfig.memoryLimit',
+                message: 'dockerConfig.memoryLimit must be a valid memory specification (e.g., "1g", "512m")',
+                value: dockerConfig.memoryLimit
+            });
+        }
+        // CPU limit validation
+        if (!this.isValidCpuLimit(dockerConfig.cpuLimit)) {
+            errors.push({
+                field: 'dockerConfig.cpuLimit',
+                message: 'dockerConfig.cpuLimit must be a valid CPU specification (e.g., "1.0", "0.5")',
+                value: dockerConfig.cpuLimit
+            });
+        }
+        // Volume mounts validation
+        if (!Array.isArray(dockerConfig.volumeMounts)) {
+            errors.push({
+                field: 'dockerConfig.volumeMounts',
+                message: 'dockerConfig.volumeMounts must be an array',
+                value: dockerConfig.volumeMounts
+            });
+        }
+        else {
+            dockerConfig.volumeMounts.forEach((mount, index) => {
+                if (!mount.hostPath || typeof mount.hostPath !== 'string') {
+                    errors.push({
+                        field: `dockerConfig.volumeMounts[${index}].hostPath`,
+                        message: 'hostPath must be a non-empty string',
+                        value: mount.hostPath
+                    });
+                }
+                if (!mount.containerPath || typeof mount.containerPath !== 'string') {
+                    errors.push({
+                        field: `dockerConfig.volumeMounts[${index}].containerPath`,
+                        message: 'containerPath must be a non-empty string',
+                        value: mount.containerPath
+                    });
+                }
+                if (typeof mount.readOnly !== 'boolean') {
+                    errors.push({
+                        field: `dockerConfig.volumeMounts[${index}].readOnly`,
+                        message: 'readOnly must be a boolean',
+                        value: mount.readOnly
+                    });
+                }
+            });
+        }
+    }
+    static validateAcceptanceRules(config, errors) {
+        const rules = config.acceptanceRules;
+        if (!rules)
+            return;
+        if (rules.maxJobDurationMinutes !== undefined && (rules.maxJobDurationMinutes < 1 || rules.maxJobDurationMinutes > 1440)) {
+            errors.push({
+                field: 'acceptanceRules.maxJobDurationMinutes',
+                message: 'maxJobDurationMinutes must be between 1 and 1440 (24 hours)',
+                value: rules.maxJobDurationMinutes
+            });
+        }
+        if (rules.allowedRecipes && !Array.isArray(rules.allowedRecipes)) {
+            errors.push({
+                field: 'acceptanceRules.allowedRecipes',
+                message: 'allowedRecipes must be an array of glob patterns',
+                value: rules.allowedRecipes
+            });
+        }
+        if (rules.blockedRecipes && !Array.isArray(rules.blockedRecipes)) {
+            errors.push({
+                field: 'acceptanceRules.blockedRecipes',
+                message: 'blockedRecipes must be an array of glob patterns',
+                value: rules.blockedRecipes
+            });
+        }
+        if (rules.allowedRepositories && !Array.isArray(rules.allowedRepositories)) {
+            errors.push({
+                field: 'acceptanceRules.allowedRepositories',
+                message: 'allowedRepositories must be an array of glob patterns',
+                value: rules.allowedRepositories
+            });
+        }
+    }
+    static validateResourceGovernance(config, errors) {
+        const rg = config.resourceGovernance;
+        if (!rg)
+            return;
+        if (rg.maxCpuPercent !== undefined && (rg.maxCpuPercent < 1 || rg.maxCpuPercent > 100)) {
+            errors.push({
+                field: 'resourceGovernance.maxCpuPercent',
+                message: 'maxCpuPercent must be between 1 and 100',
+                value: rg.maxCpuPercent
+            });
+        }
+        if (rg.maxMemoryPercent !== undefined && (rg.maxMemoryPercent < 1 || rg.maxMemoryPercent > 100)) {
+            errors.push({
+                field: 'resourceGovernance.maxMemoryPercent',
+                message: 'maxMemoryPercent must be between 1 and 100',
+                value: rg.maxMemoryPercent
+            });
+        }
+        if (rg.reservedDiskGB !== undefined && rg.reservedDiskGB < 0) {
+            errors.push({
+                field: 'resourceGovernance.reservedDiskGB',
+                message: 'reservedDiskGB must be >= 0',
+                value: rg.reservedDiskGB
+            });
+        }
+        if (rg.quietHours) {
+            this.validateQuietHours(rg.quietHours, errors);
+        }
+    }
+    static validateQuietHours(qh, errors) {
+        if (qh.schedule && !this.isValidQuietHoursSchedule(qh.schedule)) {
+            errors.push({
+                field: 'resourceGovernance.quietHours.schedule',
+                message: 'schedule must be in "HH:MM-HH:MM" format (24h)',
+                value: qh.schedule
+            });
+        }
+        if (qh.maxConcurrentJobs !== undefined && (qh.maxConcurrentJobs < 0 || !Number.isInteger(qh.maxConcurrentJobs))) {
+            errors.push({
+                field: 'resourceGovernance.quietHours.maxConcurrentJobs',
+                message: 'maxConcurrentJobs must be a non-negative integer',
+                value: qh.maxConcurrentJobs
+            });
+        }
+        if (qh.maxCpuPercent !== undefined && (qh.maxCpuPercent < 1 || qh.maxCpuPercent > 100)) {
+            errors.push({
+                field: 'resourceGovernance.quietHours.maxCpuPercent',
+                message: 'maxCpuPercent must be between 1 and 100',
+                value: qh.maxCpuPercent
+            });
+        }
+    }
+    static validateCacheConfig(config, errors) {
+        const cc = config.cacheConfig;
+        if (!cc)
+            return;
+        if (cc.maxSizeGB !== undefined && cc.maxSizeGB < 0) {
+            errors.push({
+                field: 'cacheConfig.maxSizeGB',
+                message: 'maxSizeGB must be >= 0',
+                value: cc.maxSizeGB
+            });
+        }
+        if (cc.strategy && !['lru', 'fifo', 'lfu'].includes(cc.strategy)) {
+            errors.push({
+                field: 'cacheConfig.strategy',
+                message: 'strategy must be one of: lru, fifo, lfu',
+                value: cc.strategy
+            });
+        }
+    }
+    static validateExecutionConfig(config, errors) {
+        const ec = config.executionConfig;
+        if (!ec)
+            return;
+        if (ec.defaultMode && !['docker', 'native', 'auto'].includes(ec.defaultMode)) {
+            errors.push({
+                field: 'executionConfig.defaultMode',
+                message: 'defaultMode must be one of: docker, native, auto',
+                value: ec.defaultMode
+            });
+        }
+    }
+    /** Validates "HH:MM-HH:MM" format */
+    static isValidQuietHoursSchedule(schedule) {
+        const pattern = /^([01]\d|2[0-3]):[0-5]\d-([01]\d|2[0-3]):[0-5]\d$/;
+        return pattern.test(schedule);
+    }
+    static isValidUrl(url) {
+        try {
+            new URL(url);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    static isValidMemoryLimit(limit) {
+        return /^\d+[kmg]$/i.test(limit);
+    }
+    static isValidCpuLimit(limit) {
+        const num = parseFloat(limit);
+        return !isNaN(num) && num > 0 && num <= 32;
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/config/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/config/validation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,OAAO,eAAe;IAC1B;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,MAA4B;QAC1C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAE3C,6BAA6B;QAC7B,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE5C,6BAA6B;QAC7B,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEnC,4BAA4B;QAC5B,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE3C,kCAAkC;QAClC,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE1C,oCAAoC;QACpC,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE7C,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC5B,MAAM;SACP,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,sBAAsB,CAAC,MAA4B,EAAE,MAA+B;QACjG,MAAM,cAAc,GAA0B;YAC5C,aAAa;YACb,QAAQ;YACR,SAAS;YACT,MAAM;SACP,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK;oBACL,OAAO,EAAE,GAAG,KAAK,cAAc;oBAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,aAAa,CAAC,MAA4B,EAAE,MAA+B;QACxF,iBAAiB;QACjB,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,aAAa;gBACpB,OAAO,EAAE,iCAAiC;gBAC1C,KAAK,EAAE,MAAM,CAAC,WAAW;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,qBAAqB;QACrB,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,yBAAyB;gBAClC,KAAK,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,0BAA0B;gBACnC,KAAK,EAAE,MAAM,CAAC,OAAO;aACtB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE,MAAM,CAAC,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QAED,qBAAqB;QACrB,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5H,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,mBAAmB;gBAC1B,OAAO,EAAE,8CAA8C;gBACvD,KAAK,EAAE,MAAM,CAAC,iBAAiB;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5H,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,mBAAmB;gBAC1B,OAAO,EAAE,mDAAmD;gBAC5D,KAAK,EAAE,MAAM,CAAC,iBAAiB;aAChC,CAAC,CAAC;QACL,CAAC;QAED,oBAAoB;QACpB,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,kCAAkC;gBAC3C,KAAK,EAAE,MAAM,CAAC,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC7E,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,0BAA0B;gBACnC,KAAK,EAAE,MAAM,CAAC,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QAED,uBAAuB;QACvB,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,UAAU;gBACjB,OAAO,EAAE,mDAAmD;gBAC5D,KAAK,EAAE,MAAM,CAAC,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,qBAAqB,CAAC,MAA4B,EAAE,MAA+B;QAChG,wBAAwB;QACxB,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,EAAE,IAAI,MAAM,CAAC,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC;YACtG,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,gBAAgB;gBACvB,OAAO,EAAE,kDAAkD;gBAC3D,KAAK,EAAE,MAAM,CAAC,cAAc;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC;YAC7F,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,aAAa;gBACpB,OAAO,EAAE,+CAA+C;gBACxD,KAAK,EAAE,MAAM,CAAC,WAAW;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,EAAE,IAAI,MAAM,CAAC,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC;YAChG,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,gDAAgD;gBACzD,KAAK,EAAE,MAAM,CAAC,YAAY;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,sBAAsB;QACtB,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,CAAC,IAAI,MAAM,CAAC,iBAAiB,GAAG,GAAG,CAAC,EAAE,CAAC;YAC/G,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,mBAAmB;gBAC1B,OAAO,EAAE,+DAA+D;gBACxE,KAAK,EAAE,MAAM,CAAC,iBAAiB;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,wBAAwB,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,wBAAwB,GAAG,CAAC,IAAI,MAAM,CAAC,wBAAwB,GAAG,GAAG,CAAC,EAAE,CAAC;YACpI,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,0BAA0B;gBACjC,OAAO,EAAE,4DAA4D;gBACrE,KAAK,EAAE,MAAM,CAAC,wBAAwB;aACvC,CAAC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,IAAI,MAAM,CAAC,gBAAgB,GAAG,EAAE,CAAC,EAAE,CAAC;YAC3G,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,gDAAgD;gBACzD,KAAK,EAAE,MAAM,CAAC,gBAAgB;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,8BAA8B;QAC9B,IAAI,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,qBAAqB;gBAC5B,OAAO,EAAE,iEAAiE;gBAC1E,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,mBAAmB,EAAE;aACpF,CAAC,CAAC;QACL,CAAC;QAED,wBAAwB;QACxB,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,2CAA2C;gBACpD,KAAK,EAAE,MAAM,CAAC,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QAED,qBAAqB;QACrB,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,wDAAwD;gBACjE,KAAK,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,oBAAoB,CAAC,MAA4B,EAAE,MAA+B;QAC/F,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,OAAO;QAEjC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAEzC,wBAAwB;QACxB,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,OAAO,YAAY,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,wBAAwB;gBAC/B,OAAO,EAAE,mDAAmD;gBAC5D,KAAK,EAAE,YAAY,CAAC,SAAS;aAC9B,CAAC,CAAC;QACL,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,0BAA0B;gBACjC,OAAO,EAAE,qDAAqD;gBAC9D,KAAK,EAAE,YAAY,CAAC,WAAW;aAChC,CAAC,CAAC;QACL,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,0BAA0B;gBACjC,OAAO,EAAE,oFAAoF;gBAC7F,KAAK,EAAE,YAAY,CAAC,WAAW;aAChC,CAAC,CAAC;QACL,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,uBAAuB;gBAC9B,OAAO,EAAE,8EAA8E;gBACvF,KAAK,EAAE,YAAY,CAAC,QAAQ;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,2BAA2B;gBAClC,OAAO,EAAE,4CAA4C;gBACrD,KAAK,EAAE,YAAY,CAAC,YAAY;aACjC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBACjD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC1D,MAAM,CAAC,IAAI,CAAC;wBACV,KAAK,EAAE,6BAA6B,KAAK,YAAY;wBACrD,OAAO,EAAE,qCAAqC;wBAC9C,KAAK,EAAE,KAAK,CAAC,QAAQ;qBACtB,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;oBACpE,MAAM,CAAC,IAAI,CAAC;wBACV,KAAK,EAAE,6BAA6B,KAAK,iBAAiB;wBAC1D,OAAO,EAAE,0CAA0C;wBACnD,KAAK,EAAE,KAAK,CAAC,aAAa;qBAC3B,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACxC,MAAM,CAAC,IAAI,CAAC;wBACV,KAAK,EAAE,6BAA6B,KAAK,YAAY;wBACrD,OAAO,EAAE,4BAA4B;wBACrC,KAAK,EAAE,KAAK,CAAC,QAAQ;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,uBAAuB,CAAC,MAA4B,EAAE,MAA+B;QAClG,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,CAAC,IAAI,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC,EAAE,CAAC;YACzH,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,uCAAuC;gBAC9C,OAAO,EAAE,6DAA6D;gBACtE,KAAK,EAAE,KAAK,CAAC,qBAAqB;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,gCAAgC;gBACvC,OAAO,EAAE,kDAAkD;gBAC3D,KAAK,EAAE,KAAK,CAAC,cAAc;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,gCAAgC;gBACvC,OAAO,EAAE,kDAAkD;gBAC3D,KAAK,EAAE,KAAK,CAAC,cAAc;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC3E,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,qCAAqC;gBAC5C,OAAO,EAAE,uDAAuD;gBAChE,KAAK,EAAE,KAAK,CAAC,mBAAmB;aACjC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,0BAA0B,CAAC,MAA4B,EAAE,MAA+B;QACrG,MAAM,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACrC,IAAI,CAAC,EAAE;YAAE,OAAO;QAEhB,IAAI,EAAE,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,aAAa,GAAG,CAAC,IAAI,EAAE,CAAC,aAAa,GAAG,GAAG,CAAC,EAAE,CAAC;YACvF,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,kCAAkC;gBACzC,OAAO,EAAE,yCAAyC;gBAClD,KAAK,EAAE,EAAE,CAAC,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,EAAE,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,gBAAgB,GAAG,CAAC,IAAI,EAAE,CAAC,gBAAgB,GAAG,GAAG,CAAC,EAAE,CAAC;YAChG,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,qCAAqC;gBAC5C,OAAO,EAAE,4CAA4C;gBACrD,KAAK,EAAE,EAAE,CAAC,gBAAgB;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,EAAE,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,mCAAmC;gBAC1C,OAAO,EAAE,6BAA6B;gBACtC,KAAK,EAAE,EAAE,CAAC,cAAc;aACzB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAAC,EAAoB,EAAE,MAA+B;QACrF,IAAI,EAAE,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,wCAAwC;gBAC/C,OAAO,EAAE,gDAAgD;gBACzD,KAAK,EAAE,EAAE,CAAC,QAAQ;aACnB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,EAAE,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,iBAAiB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;YAChH,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,iDAAiD;gBACxD,OAAO,EAAE,kDAAkD;gBAC3D,KAAK,EAAE,EAAE,CAAC,iBAAiB;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,EAAE,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,aAAa,GAAG,CAAC,IAAI,EAAE,CAAC,aAAa,GAAG,GAAG,CAAC,EAAE,CAAC;YACvF,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,6CAA6C;gBACpD,OAAO,EAAE,yCAAyC;gBAClD,KAAK,EAAE,EAAE,CAAC,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,mBAAmB,CAAC,MAA4B,EAAE,MAA+B;QAC9F,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAO;QAEhB,IAAI,EAAE,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,uBAAuB;gBAC9B,OAAO,EAAE,wBAAwB;gBACjC,KAAK,EAAE,EAAE,CAAC,SAAS;aACpB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,EAAE,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,sBAAsB;gBAC7B,OAAO,EAAE,yCAAyC;gBAClD,KAAK,EAAE,EAAE,CAAC,QAAQ;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,uBAAuB,CAAC,MAA4B,EAAE,MAA+B;QAClG,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,OAAO;QAEhB,IAAI,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7E,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,6BAA6B;gBACpC,OAAO,EAAE,kDAAkD;gBAC3D,KAAK,EAAE,EAAE,CAAC,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,MAAM,CAAC,yBAAyB,CAAC,QAAgB;QAC/C,MAAM,OAAO,GAAG,mDAAmD,CAAC;QACpE,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,GAAW;QACnC,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAAC,KAAa;QAC7C,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,KAAa;QAC1C,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;IAC7C,CAAC;CACF"}

package/dist/docker.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Docker Manager - Container management for job execution
+ *
+ * Handles Docker container lifecycle, security configuration,
+ * and resource management for isolated job execution.
+ *
+ * Enhanced with comprehensive security measures and monitoring.
+ *
+ * Requirements: 4.1, 4.2, 4.3, 4.4, 4.5
+ */
+import { DockerConfig } from './config/types.js';
+import { SecurityConfig, SecurityViolation } from './security.js';
+export interface ContainerConfig {
+    image: string;
+    workDir: string;
+    environment: Record<string, string>;
+    volumeMounts: Array<{
+        hostPath: string;
+        containerPath: string;
+        readOnly: boolean;
+    }>;
+}
+export interface ExecutionOptions {
+    timeout?: number;
+    onOutput?: (output: string) => void;
+}
+export interface ExecutionResult {
+    exitCode: number;
+    output: string;
+    error?: string;
+}
+export declare class DockerManager {
+    private config;
+    private securityManager;
+    private activeContainers;
+    private containerTempDirs;
+    constructor(config: DockerConfig, securityConfig: SecurityConfig);
+    /**
+     * Clean up orphaned BuildHive containers from previous agent crashes.
+     * Should be called on startup before accepting new jobs.
+     */
+    cleanupOrphanedContainers(): Promise<number>;
+    /**
+     * Check if Docker is available and running
+     */
+    checkDockerAvailability(): Promise<boolean>;
+    /**
+     * Pull Docker image
+     */
+    pullImage(image: string): Promise<void>;
+    /**
+     * Create a Docker container with enhanced security configuration
+     */
+    createContainer(containerConfig: ContainerConfig): Promise<string>;
+    /**
+     * Start a Docker container with security monitoring
+     */
+    startContainer(containerId: string): Promise<void>;
+    /**
+     * Execute a command in a running container
+     */
+    executeCommand(containerId: string, command: string, options?: ExecutionOptions): Promise<ExecutionResult>;
+    /**
+     * Stop a running container
+     */
+    stopContainer(containerId: string, timeout?: number): Promise<void>;
+    /**
+     * Remove a container with security cleanup
+     */
+    removeContainer(containerId: string): Promise<void>;
+    /**
+     * Copy file from container to host
+     */
+    copyFromContainer(containerId: string, containerPath: string, hostPath: string): Promise<void>;
+    /**
+     * Get container logs
+     */
+    getContainerLogs(containerId: string): Promise<string>;
+    /**
+     * Get security violations for monitoring
+     */
+    getSecurityViolations(): SecurityViolation[];
+    /**
+     * Get resource usage for a container
+     */
+    getResourceUsage(containerId: string): Promise<import("./security.js").ResourceUsage>;
+    /**
+     * Clean up all active containers with security cleanup
+     */
+    cleanup(): Promise<void>;
+    /**
+     * Execute a Docker command
+     */
+    private executeDockerCommand;
+}
+//# sourceMappingURL=docker.d.ts.map

package/dist/docker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAmB,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAOnF,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,YAAY,EAAE,KAAK,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,iBAAiB,CAA6B;gBAE1C,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc;IAMhE;;;OAGG;IACG,yBAAyB,IAAI,OAAO,CAAC,MAAM,CAAC;IAgClD;;OAEG;IACG,uBAAuB,IAAI,OAAO,CAAC,OAAO,CAAC;IAUjD;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6B7C;;OAEG;IACG,eAAe,CAAC,eAAe,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAwGxE;;OAEG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBxD;;OAEG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC;IA0B3B;;OAEG;IACG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE,MAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB7E;;OAEG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCzD;;OAEG;IACG,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BpG;;OAEG;IACG,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAU5D;;OAEG;IACH,qBAAqB,IAAI,iBAAiB,EAAE;IAI5C;;OAEG;IACG,gBAAgB,CAAC,WAAW,EAAE,MAAM;IAI1C;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAiB9B;;OAEG;YACW,oBAAoB;CAuEnC"}