# CASAN harness runtime image (Level 1/2). Runs the governance gate on a mounted repo.
# Minimal: bash + python3 + openssl (+ git for repo-root marker). No app runtime.
#
# Build (from source hub or an extracted casan-devkit bundle):
#   docker build -f packages/casan-devkit/Dockerfile.harness -t casan-harness:1.0.0 .
# Run the gate against a project mounted at /workspace:
#   docker run --rm -v "$PWD":/workspace -w /workspace casan-harness:1.0.0 casan gate
FROM debian:bookworm-slim

RUN apt-get update \
 && apt-get install -y --no-install-recommends bash python3 openssl git ca-certificates rsync \
 && rm -rf /var/lib/apt/lists/*

# Ship the core harness + CLI inside the image.
WORKDIR /opt/casan
COPY packages/casan-harness/ ./packages/casan-harness/
COPY bin/casan ./bin/casan
COPY VERSION ./VERSION
RUN chmod +x ./bin/casan && ln -s /opt/casan/bin/casan /usr/local/bin/casan

# Default working dir is the mounted project.
WORKDIR /workspace
ENV CASAN_HARNESS_ROOT=/opt/casan/packages/casan-harness
ENTRYPOINT ["casan"]
CMD ["help"]