ci: add agent-runner type check + Docker image workflow

- ci.yml: add agent-runner job (npm ci + tsc --noEmit)
- agent-runner-image.yml: build and push Docker image to ghcr.io
- Dockerfile: multi-stage build, bundles agent-runner + mcp-server
- .dockerignore: exclude node_modules, dist, config secrets

Author: xmujx

.github/workflows/agent-runner-image.yml

@@ -0,0 +1,50 @@
+name: Agent Runner Image
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [main]
+    paths:
+      - "agent-runner/**"
+      - "mcp-server/**"
+      - ".github/workflows/agent-runner-image.yml"
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  build-and-push:
+    name: Build and push agent-runner image
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set image name and short SHA
+        run: |
+          echo "IMAGE_NAME=ghcr.io/${GITHUB_REPOSITORY,,}/agent-runner" >> "$GITHUB_ENV"
+          echo "SHORT_SHA=${GITHUB_SHA::7}" >> "$GITHUB_ENV"
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: agent-runner/Dockerfile
+          push: true
+          tags: |
+            ${{ env.IMAGE_NAME }}:latest
+            ${{ env.IMAGE_NAME }}:sha-${{ env.SHORT_SHA }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/ci.yml

@@ -51,6 +51,48 @@ jobs:
       - name: Build
         run: npx next build
 
+  agent-runner:
+    name: Agent Runner
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: agent-runner
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: npm
+          cache-dependency-path: agent-runner/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Type check
+        run: npx tsc --noEmit
+
+  agent-runner:
+    name: Agent Runner
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: agent-runner
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: npm
+          cache-dependency-path: agent-runner/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Type check
+        run: npx tsc --noEmit
+
   mcp-server:
     name: MCP Server
     runs-on: ubuntu-latest

agent-runner/.dockerignore

@@ -0,0 +1,5 @@
+node_modules
+dist
+config/*.toml
+config/*.env
+*.env

agent-runner/Dockerfile

@@ -0,0 +1,40 @@
+FROM node:20-alpine AS builder
+
+WORKDIR /app
+
+# Build mcp-server (agent-runner spawns it as a child process)
+COPY mcp-server/package.json mcp-server/package-lock.json ./mcp-server/
+RUN cd mcp-server && npm ci
+
+COPY mcp-server/tsconfig.json ./mcp-server/
+COPY mcp-server/src ./mcp-server/src
+RUN cd mcp-server && npx tsc
+
+# Build agent-runner
+COPY agent-runner/package.json agent-runner/package-lock.json ./agent-runner/
+RUN cd agent-runner && npm ci
+
+COPY agent-runner/tsconfig.json ./agent-runner/
+COPY agent-runner/src ./agent-runner/src
+RUN cd agent-runner && npx tsc
+
+# ── Production stage ──
+FROM node:20-alpine
+
+WORKDIR /app
+
+# mcp-server: prod deps + compiled JS
+COPY mcp-server/package.json mcp-server/package-lock.json ./mcp-server/
+RUN cd mcp-server && npm ci --omit=dev
+COPY --from=builder /app/mcp-server/dist ./mcp-server/dist
+
+# agent-runner: prod deps + compiled JS + accounts
+COPY agent-runner/package.json agent-runner/package-lock.json ./agent-runner/
+RUN cd agent-runner && npm ci --omit=dev
+COPY --from=builder /app/agent-runner/dist ./agent-runner/dist
+COPY agent-runner/accounts.json ./agent-runner/
+
+WORKDIR /app/agent-runner
+
+ENTRYPOINT ["node", "dist/index.js"]
+CMD ["--config", "config/config.toml"]