FROM node:22-bookworm-slim

RUN apt-get update \
 && apt-get install -y --no-install-recommends \
      git \
      ripgrep \
      ca-certificates \
      curl \
      less \
      jq \
      procps \
      python3 \
      python-is-python3 \
      xxd \
      python3-pip \
      python3-pycryptodome \
      python3-cryptography

# Docker Engine for docker-in-docker. Only started when CCC_DIND=1 (needs --privileged).
RUN install -m 0755 -d /etc/apt/keyrings \
 && curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc \
 && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian $(. /etc/os-release && echo "$VERSION_CODENAME") stable" \
      > /etc/apt/sources.list.d/docker.list \
 && apt-get update \
 && apt-get install -y --no-install-recommends \
      docker-ce \
      docker-ce-cli \
      containerd.io \
      docker-buildx-plugin \
      docker-compose-plugin \
      iptables \
      kmod

RUN npm install -g @anthropic-ai/claude-code && npm cache clean --force

COPY sandbox-prompt.md /etc/ccc/sandbox-prompt.md
COPY sandbox-prompt-dind.md /etc/ccc/sandbox-prompt-dind.md
COPY entrypoint.sh /usr/local/bin/ccc-entrypoint
RUN chmod +x /usr/local/bin/ccc-entrypoint

ENTRYPOINT ["/usr/local/bin/ccc-entrypoint"]
CMD []