FROM node:22-bookworm-slim

USER root

RUN apt-get update && apt-get install -y --no-install-recommends \
    python3 python3-pip python3-venv ca-certificates curl git bash procps \
    && rm -rf /var/lib/apt/lists/*

# Official OpenAI Codex CLI runtime.
RUN npm install -g @openai/codex

RUN usermod -l user -d /home/user -m node && groupmod -n user node

ENV HOME=/home/user \
    PATH=/home/user/.local/bin:/usr/local/bin:$PATH \
    PYTHONUNBUFFERED=1 \
    PORT=7860


WORKDIR /home/user/app

COPY --chown=user:user requirements.txt /home/user/app/requirements.txt

RUN python3 -m pip install --break-system-packages --no-cache-dir -r /home/user/app/requirements.txt

COPY --chown=user:user . /home/user/app

RUN chmod +x /home/user/app/start.sh

USER user

CMD ["/home/user/app/start.sh"]