FROM node:20-bookworm

ENV DEBIAN_FRONTEND=noninteractive \
    PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PUID=1000 \
    PGID=1000 \
    CODEX_HOME=/home/codex

RUN apt-get update \
    && apt-get install --yes --no-install-recommends \
        python3 \
        python3-venv \
        gosu \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

RUN npm install --location=global codex-cli || true

RUN groupadd -r codex && \
    useradd -r -m -g codex -s /bin/bash codex

WORKDIR /app

COPY watch_and_customize.py entrypoint.sh JobDescriptionNormalizerPrompt.md ./

RUN chmod +x /app/watch_and_customize.py /app/entrypoint.sh

ENTRYPOINT ["/app/entrypoint.sh"]