# syntax=docker/dockerfile:1
# Base: Node 24 LTS, pinned by digest for reproducible builds. Registry images are fully qualified: Podman on
# Fedora-family hosts enforces short-name resolution and refuses bare Docker Hub names without a TTY
ARG NODE_IMAGE=docker.io/library/node:24.21.0-bookworm-slim@sha256:0e0ff40c39bc087845bfb27465a0df4ea419520094bc35842ff83dd8cbe6f9b6
ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.12.19@sha256:04d046b13e60d6bcec73cbc5e1cad25d680dea90c8573340950a0ac2d1aef424

FROM ${UV_IMAGE} AS uv

FROM ${NODE_IMAGE}
ARG CLAUDE_CODE_VERSION=2.1.283
ARG PLAYWRIGHT_VERSION=1.63.0
ARG PG_MAJOR=18
SHELL ["/bin/bash", "-euo", "pipefail", "-c"]

# PGDG repo: Debian's psql 15 can't pg_dump newer servers. The signing key is pinned by fingerprint so a swapped
# key on the download host fails the build instead of being trusted; grep reads all input (no -q) to avoid SIGPIPE under pipefail
RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl gnupg \
    && curl -fsSL --proto '=https' --proto-redir '=https' https://www.postgresql.org/media/keys/ACCC4CF8.asc | gpg --dearmor -o /usr/share/keyrings/pgdg.gpg \
    && gpg --batch --show-keys --with-colons /usr/share/keyrings/pgdg.gpg | grep '^fpr:.*:B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8:' >/dev/null \
    && echo "deb [signed-by=/usr/share/keyrings/pgdg.gpg] https://apt.postgresql.org/pub/repos/apt bookworm-pgdg main" > /etc/apt/sources.list.d/pgdg.list \
    && apt-get update && apt-get install -y --no-install-recommends \
      tini tmux git openssh-client less procps ripgrep unzip shellcheck build-essential \
      python3 python3-pip python3-venv "postgresql-client-${PG_MAJOR}" \
    && rm -rf /var/lib/apt/lists/*

COPY --from=uv /uv /uvx /usr/local/bin/

# gh, terraform, AWS CLI, yq, jq, pnpm and Bruno install at runtime via install-tools.sh (versions from .env)
# Playwright browsers are installed per project; the image only carries their system libraries
RUN npm install -g "@anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}" \
    && npx -y "playwright@${PLAYWRIGHT_VERSION}" install-deps \
    && npm cache clean --force && rm -rf /var/lib/apt/lists/* /root/.npm

# OCI labels: source links the GHCR package to this repository
LABEL org.opencontainers.image.source="https://github.com/ganesh35/claude-in-container" \
      org.opencontainers.image.description="Always-on Claude Code in a container, reachable via Remote Control" \
      org.opencontainers.image.licenses="MIT"
# Updates come from rebuilding the image, not in-place self-updates
ENV DISABLE_AUTOUPDATER=1 TERM=xterm-256color LANG=C.UTF-8
# Single mount: /data is the workspace, HOME lives inside it so every instance on the folder shares it
ENV HOME=/data/.home
# Runtime-installed tools and npm -g land in the shared folder and win over image binaries
ENV PATH=/data/.home/.local/bin:$PATH NPM_CONFIG_PREFIX=/data/.home/.local
# Created before COPY --chmod, which would otherwise apply the file mode to this auto-created directory too (losing +x)
RUN mkdir -p /usr/local/share/claude-in-container && chmod 755 /usr/local/share/claude-in-container
# node user; numeric so runtimes can verify it is non-root
USER 1000:1000
WORKDIR /data
COPY --chmod=755 start.sh install-tools.sh /usr/local/bin/
COPY --chmod=444 keys/aws-cli.asc /usr/local/share/claude-in-container/aws-cli.asc
# Unhealthy when Claude exited and only the fallback shell remains; the long start period covers first-start tool installs
HEALTHCHECK --interval=30s --timeout=5s --start-period=10m --retries=3 \
  CMD ["sh", "-c", "tmux has-session -t main 2>/dev/null && pgrep -x claude >/dev/null"]
# tini reaps zombies and forwards signals so the container stops cleanly
ENTRYPOINT ["/usr/bin/tini", "--"]
CMD ["/usr/local/bin/start.sh"]