Add web auth, infinite-scroll, agent admission and review fixes across agent/server/web

agent/internal/config/config_test.go

@@ -48,6 +48,59 @@ func TestLoadMinimal(t *testing.T) {
 	}
 }
 
+func TestLoadResourceLimits(t *testing.T) {
+	c, err := Load(writeTmp(t, `
+agent_id = "host-1"
+state_dir = "/tmp/x"
+
+[server]
+enabled = true
+url = "http://localhost"
+
+[[checks]]
+id = "c1"
+command = "true"
+interval = "10s"
+timeout = "5s"
+resource_limits = { cpu_time = "2s", memory = "256MiB", open_files = 128 }
+`))
+	if err != nil {
+		t.Fatal(err)
+	}
+	limits := c.Checks[0].ResourceLimits
+	if limits.CPUTime.Duration != 2_000_000_000 || limits.Memory.Bytes != 256*1024*1024 || limits.OpenFiles != 128 {
+		t.Fatalf("unexpected limits: %+v", limits)
+	}
+}
+
+func TestValidateBadResourceLimits(t *testing.T) {
+	for name, line := range map[string]string{
+		"memory_too_small":     `resource_limits = { memory = "512KiB" }`,
+		"open_files_too_small": `resource_limits = { open_files = 8 }`,
+	} {
+		t.Run(name, func(t *testing.T) {
+			_, err := Load(writeTmp(t, `
+agent_id = "host-1"
+state_dir = "/tmp/x"
+
+[server]
+enabled = true
+url = "http://localhost"
+
+[[checks]]
+id = "c1"
+command = "true"
+interval = "10s"
+timeout = "5s"
+`+line+`
+`))
+			if err == nil {
+				t.Fatal("expected resource limit error")
+			}
+		})
+	}
+}
+
 func TestLoadMultilineCommand(t *testing.T) {
 	c, err := Load(writeTmp(t, `
 agent_id = "host-1"
@@ -72,9 +125,6 @@ timeout = "5s"
 	if !strings.Contains(c.Checks[0].Command, "echo ok") {
 		t.Fatalf("command not loaded: %q", c.Checks[0].Command)
 	}
-	if got := c.Checks[0].Argv(); len(got) != 3 || got[0] != "/bin/sh" || got[1] != "-c" {
-		t.Fatalf("argv: %#v", got)
-	}
 }
 
 func TestCommandArrayRejected(t *testing.T) {