FROM python:3.11-slim

# Set working directory
WORKDIR /app

# Install system dependencies
# - Docker CLI for docker executor
# - curl for health checks
RUN apt-get update && \
    apt-get install -y --no-install-recommends \
        docker-cli \
        curl \
    && rm -rf /var/lib/apt/lists/*

# Install Docker Compose plugin (not in Debian repos, download from Docker)
RUN mkdir -p /usr/local/lib/docker/cli-plugins && \
    curl -SL "https://github.com/docker/compose/releases/download/v2.32.1/docker-compose-linux-x86_64" \
        -o /usr/local/lib/docker/cli-plugins/docker-compose && \
    chmod +x /usr/local/lib/docker/cli-plugins/docker-compose

# Copy requirements first for layer caching
COPY requirements.txt .

# Install Python dependencies
RUN pip install --no-cache-dir -r requirements.txt

# Copy application code
COPY app/ ./app/

# Create non-root user for security
RUN useradd -m -s /bin/bash agent && \
    mkdir -p /home/agent/.letsbe-agent && \
    chown -R agent:agent /home/agent/.letsbe-agent

# Environment
ENV PYTHONUNBUFFERED=1
ENV PYTHONDONTWRITEBYTECODE=1

# Default to non-root user
# Note: May need root for Docker socket access; use docker group instead
USER agent

# Entry point
CMD ["python", "-m", "app.main"]

# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
    CMD python -c "import sys; sys.exit(0)"