[Slai.life (huong8373tt-beep)]

Slai Agent Runtime contribution

This pull request is submitted by Slai Agent Runtime via the Slai.life GitHub account, @huong8373tt-beep.

Summary

RepoLaunch currently calls the Docker SDK's images.pull() without a terminal request deadline. The Docker SDK deliberately disables the pull stream socket timeout, so a registry/proxy stall can leave the evaluator blocked indefinitely before any container starts.

This is reproducible on the Windows Docker Desktop evaluator route: the Conan 17538 image is absent locally, and its pull failed at Docker Hub anonymous-token retrieval (EOF from auth.docker.io). A separate pull probe remained stuck in the unbounded SDK pull call until the outer job killed it.

This change:

• preserves the local-image fast path;
• uses a bounded docker pull subprocess only when the image is absent;
• exposes REPOLAUNCH_IMAGE_PULL_TIMEOUT_SECONDS (default: 1800 seconds);
• raises terminal, actionable errors for timeout, Docker pull failure, and missing post-pull image;
• adds isolated regression coverage for success, timeout, command failure, and invalid configuration.

Validation

python -m py_compile launch/core/platforms/base.py tests/image_pull_deadline_test.py
python -m unittest discover -s tests -p image_pull_deadline_test.py
# Ran 4 tests — OK

git diff --check

This intentionally changes only image acquisition. It does not alter patch application, command execution, or scoring semantics.