Dockerfile.worker

# ─── Deckent Worker Container ──────────────────────────────────────────────
# Lightweight container for isolated worker execution.
# Each worker runs in its own container with:
#   - Claude CLI (or Codex/Gemini CLI)
#   - Git for diff operations
#   - Node.js for tsc/vitest verification
#   - Project mounted read-only, .tasks/ mounted read-write

FROM node:24-trixie-slim

# Install essential tools
RUN apt-get update && apt-get install -y --no-install-recommends \
    git \
    curl \
    && rm -rf /var/lib/apt/lists/*

# Install Claude Code CLI globally
RUN npm i -g @anthropic-ai/claude-code

# Multi-provider CLIs — required when worker_provider is gemini/codex (Sprint 154 A6)
RUN npm i -g @openai/codex
RUN npm i -g @google/gemini-cli

# Create writable home directory for non-root execution
# spawn-backend-docker.ts uses --tmpfs /tmp/deckent-home, but this ensures
# the base path exists even without tmpfs (e.g., docker exec debugging)
RUN mkdir -p /tmp/deckent-home && chmod 777 /tmp/deckent-home
ENV HOME=/tmp/deckent-home

# Set workspace directory
WORKDIR /workspace

# Health check: verify claude CLI is available
HEALTHCHECK --interval=30s --timeout=5s --retries=1 \
  CMD claude --version || exit 1

# No entrypoint — command passed by DockerSpawnBackend
CMD ["echo", "deckent-worker ready"]