replace ContainerRuntime CLI to Bollard crate (default: docker socket)

limit tool result to open router tool response (with truncated info for
ai)

Hard kill if graceful shutdown is too long

crates/herald-server/src/main.rs

@@ -1,3 +1,5 @@
+use std::time::Duration;
+
 use crate::{
     bot::Bot,
     gitea::{GiteaAPI, WebhookType},
@@ -23,6 +25,13 @@ mod metrics;
 mod open_router;
 mod sandbox;
 mod state;
+mod text;
+
+/// Délai laissé aux reviews en cours et aux serveurs pour s'arrêter proprement.
+///
+/// Sans lui, une review prise dans une sandbox récalcitrante garderait le processus
+/// en vie jusqu'à ce que le superviseur le tue.
+const SHUTDOWN_TIMEOUT: Duration = Duration::from_secs(60);
 
 fn main() -> anyhow::Result<()> {
     dotenv().ok();
@@ -79,14 +88,14 @@ async fn run() -> anyhow::Result<()> {
     let shutdown = CancellationToken::new();
 
     let sandbox = SandboxConfig {
-        runtime: devcontainer_rs::ContainerRuntime::new(config.container_runtime.clone()),
+        runtime: devcontainer_rs::ContainerRuntime::connect()?,
         max_iterations: config.sandbox_max_iterations,
     };
 
     if !sandbox.runtime.available().await {
         warn!(
-            runtime = sandbox.runtime.program(),
-            "Container runtime is not available, every review will fail"
+            endpoint = sandbox.runtime.endpoint(),
+            "Container daemon is not reachable, every review will fail"
         );
     }
 
@@ -119,11 +128,28 @@ async fn run() -> anyhow::Result<()> {
         anyhow::Ok(())
     };
 
-    tokio::try_join!(
-        bot.start(rx, shutdown.clone()),
-        api::start(app_state, shutdown.clone()),
-        signal
-    )?;
+    let shutdown_deadline = async {
+        shutdown.cancelled().await;
+        tokio::time::sleep(SHUTDOWN_TIMEOUT).await;
+    };
+
+    tokio::select! {
+        result = async {
+            tokio::try_join!(
+                bot.start(rx, shutdown.clone()),
+                api::start(app_state, shutdown.clone()),
+                signal
+            )
+        } => {
+            result?;
+        }
+        () = shutdown_deadline => {
+            warn!(
+                timeout = ?SHUTDOWN_TIMEOUT,
+                "Shutdown did not finish in time, exiting anyway"
+            );
+        }
+    }
 
     info!("Shutdown complete");