# Per-repo harbor task Dockerfile for stocks-in-the-future (rubyforgood, Rails 8.1 / Ruby 3.4.4).
#
# Postgres + Redis; importmap; Minitest; system specs use Selenium + headless Chrome (the
# repo's own driver config passes --no-sandbox + --disable-dev-shm-usage, so no chromium
# wrapper). Bakes the workspace + Claude Code (grader); git-commits a baseline.
FROM ruby:3.4.4
ARG TOOLKIT_BUILD_ID=dev

RUN apt-get update && apt-get install -y --no-install-recommends \
      build-essential pkg-config libpq-dev \
      postgresql postgresql-client redis-server \
      chromium chromium-driver \
      libvips libyaml-dev locales \
      python3 \
      git sudo curl ca-certificates gnupg xz-utils jq \
 && rm -rf /var/lib/apt/lists/*

RUN ln -sf /usr/bin/chromium /usr/local/bin/google-chrome \
 && ln -sf /usr/bin/chromium /usr/local/bin/google-chrome-stable

# en_US.UTF-8 Postgres collation (matches CI's postgres image; avoids locale-ordering issues).
RUN sed -i 's/^# *en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/' /etc/locale.gen \
 && locale-gen \
 && PG_VERSION=$(ls /etc/postgresql) \
 && pg_dropcluster "${PG_VERSION}" main \
 && LANG=en_US.UTF-8 pg_createcluster --locale en_US.UTF-8 "${PG_VERSION}" main
ENV LANG=en_US.UTF-8
ENV LC_ALL=en_US.UTF-8

RUN PG_VERSION=$(ls /etc/postgresql) \
 && printf 'local all all trust\nhost all all 127.0.0.1/32 trust\nhost all all ::1/128 trust\nhost all all 0.0.0.0/0 trust\n' > "/etc/postgresql/${PG_VERSION}/main/pg_hba.conf" \
 && echo "listen_addresses='*'" >> "/etc/postgresql/${PG_VERSION}/main/postgresql.conf"

# database.yml.sample has no host/user; pin PGHOST/PGUSER → connect as postgres over TCP (trust).
ENV PGHOST=localhost
ENV PGUSER=postgres
ENV REDIS_URL=redis://localhost:6379/1

RUN gem install bundler -v 2.6.7

# Install Claude Code globally (grader runs `claude`); hard-gate on presence.
RUN for i in 1 2 3; do \
      if curl -fsSL https://claude.ai/install.sh -o /tmp/claude-install.sh && bash /tmp/claude-install.sh; then break; fi; \
      echo "WARNING: claude install attempt $i failed; retrying in 5s" >&2; sleep 5; \
    done; \
    rm -f /tmp/claude-install.sh; \
    for p in /root/.claude-code/claude /root/.local/bin/claude "$(find /root -name claude -type f 2>/dev/null | head -1)"; do \
      [ -n "$p" ] && [ -x "$p" ] && ln -sf "$p" /usr/local/bin/claude && break; \
    done; \
    command -v claude >/dev/null 2>&1 || { echo "FATAL: claude CLI not installed — the grader needs it" >&2; exit 1; }; \
    echo "claude installed at $(command -v claude)"

USER root

WORKDIR /workspace
COPY workspace/ .

# config/database.yml is gitignored; materialize it from the committed sample.
RUN if [ -f config/database.yml.sample ] && [ ! -f config/database.yml ]; then \
      cp config/database.yml.sample config/database.yml; \
    fi

RUN mkdir -p .claude && \
    echo '{"permissions":{"deny":["WebFetch","WebSearch"]}}' > .claude/settings.json

RUN git init -q && \
    git config user.email "dev@agent" && \
    git config user.name "Dev" && \
    git add -A && \
    git commit -m "initial" --quiet

RUN bundle config set --local frozen false \
    && bundle lock --add-platform x86_64-linux \
    && bundle lock --add-platform aarch64-linux \
    && bundle install --jobs 4 --retry 3

RUN for t in ruby bundle psql redis-server chromium chromedriver claude python3; do \
      command -v "$t" >/dev/null 2>&1 || { echo "FATAL: required tool '$t' missing from image" >&2; exit 1; }; \
    done; \
    echo "toolchain OK: ruby=$(ruby --version) claude=$(command -v claude)"

RUN git add -A && git commit --amend --no-edit --quiet

# Start Postgres + Redis, wait, create + schema-load the dev + test databases.
RUN cat > /usr/local/bin/start-services.sh <<'EOF'
#!/bin/bash
set -e
service postgresql start
service redis-server start || redis-server --daemonize yes
until pg_isready -h localhost -p 5432 -U postgres >/dev/null 2>&1; do sleep 0.5; done
cd /workspace && bin/rails db:create db:schema:load 2>/dev/null || true
cd /workspace && RAILS_ENV=test bin/rails db:create db:schema:load 2>/dev/null || true
exec "$@"
EOF
RUN chmod +x /usr/local/bin/start-services.sh

ENTRYPOINT ["/usr/local/bin/start-services.sh"]
CMD ["sleep", "infinity"]