# ============================================================================
# 最终镜像 Dockerfile - rcoder-agent-runner
# ============================================================================
# 此镜像基于基础镜像 rcoder-agent-base:latest
# 只包含业务代码和配置文件，构建速度快
# 构建命令: make docker-build-agent-runner 或 make dev-restart
# ============================================================================

# 使用本地基础镜像
ARG BASE_IMAGE=rcoder-agent-base:latest
FROM ${BASE_IMAGE}

# 设置工作目录
WORKDIR /home/user

# agent-browser 默认配置（独立 Chromium profile，避免与 MCP 锁冲突）
ENV AGENT_BROWSER_EXECUTABLE_PATH=/usr/local/bin/chromium \
    AGENT_BROWSER_PROFILE=/home/user/.config/agent-browser/chromium \
    AGENT_BROWSER_HEADED=1


# ============================================================================
# 📦 复制业务代码和配置文件
# ============================================================================

# 使用构建参数破坏缓存（每次构建都获取最新版本的工具）
ARG CACHEBUST=1

# 安装 mcp-stdio-proxy（频繁更新的工具，放在最终镜像以加快构建）
# 使用 CACHEBUST 变量触发缓存失效
RUN . /opt/cargo/env && echo "Cache bust: ${CACHEBUST}" && cargo install mcp-stdio-proxy

# # 安装 claude-code-acp-rs CLI 工具
# RUN . /opt/cargo/env && echo "Cache bust: ${CACHEBUST}" && cargo install claude-code-acp-rs --no-default-features --features otel,sacp-flush

# 安装 agent-browser CLI（仅安装命令行工具，不在构建期下载浏览器）
RUN . /opt/cargo/env && \
    echo "Cache bust: ${CACHEBUST}" && \
    cargo install agent-browser && \
    agent-browser --version

# 测试agent
RUN  echo "Cache bust: ${CACHEBUST}" && npm install -g claude-code-acp-ts@latest


# 安装 nuwaxcode（频繁更新的工具，放在最终镜像以加快构建）
# 使用 CACHEBUST 变量触发缓存失效
# 安装失败时主动退出，避免构建包含不完整的镜像
RUN echo "Cache bust: ${CACHEBUST}" && \
    echo "📦 开始安装 nuwaxcode..." && \
    npm i -g nuwaxcode@latest && \
    echo "✅ nuwaxcode 安装完成，开始验证..." && \
    which nuwaxcode && \
    echo "✅ nuwaxcode 验证成功: $(nuwaxcode -v)" || \
    (echo "❌ nuwaxcode 安装或验证失败，构建中断" && exit 1)


# 配置 nuwaxcode - 禁用 websearch, webfetch 和 question 权限
RUN mkdir -p /root/.config/opencode && \
    echo '{\n  "permission": {\n    "websearch": "deny",\n    "webfetch": "deny",\n    "question": "deny"\n  }\n}' > /root/.config/opencode/opencode.json


# # 安装 opencode - AI 驱动的代码导航工具
# # 注意：npm 包不支持 ARM64，使用官方安装脚本
# RUN echo "📦 安装 opencode..." && \
#     curl -fsSL https://opencode.ai/install | bash && \
#     ln -sf /root/.opencode/bin/opencode /usr/local/bin/opencode && \
#     echo "验证 opencode 安装..." && \
#     opencode --version && \
#     echo "✅ opencode 安装成功（已创建符号链接到 /usr/local/bin）"

# ============================================================================
# 🔧 eBPF 诊断工具安装
# 注意：这些工具会增加镜像大小 (~500MB)
# 通过 make dev-restart 默认启用
# ============================================================================
ARG INSTALL_EBPF_TOOLS=false

RUN if [ "$INSTALL_EBPF_TOOLS" = "true" ]; then \
    echo "🔧 开始安装 eBPF 诊断工具..."; \
    apt-get update && \
    echo "📦 安装 bpftrace（核心 eBPF 诊断工具）..."; \
    apt-get install -y bpftrace && \
    echo "📦 安装 strace（系统调用追踪）..."; \
    apt-get install -y strace && \
    echo "📦 安装 sysstat（性能监控：iostat, mpstat 等）..."; \
    apt-get install -y sysstat && \
    echo "📦 安装 jq（JSON 处理）..."; \
    apt-get install -y jq && \
    rm -rf /var/lib/apt/lists/*; \
    echo "✅ eBPF 诊断工具安装完成"; \
    which bpftrace && bpftrace --version || echo "❌ bpftrace 未安装"; \
    else \
    echo "⚠️  eBPF 工具未安装（生产模式）"; \
    fi

# 安装 FlameGraph 工具
RUN if [ "$INSTALL_EBPF_TOOLS" = "true" ]; then \
    if [ "${USE_GITHUB_MIRROR}" = "true" ]; then \
        git clone ${GITHUB_MIRROR_URL}brendangregg/FlameGraph /tmp/FlameGraph; \
    else \
        git clone https://github.com/brendangregg/FlameGraph /tmp/FlameGraph; \
    fi && \
    cp /tmp/FlameGraph/*.pl /usr/local/bin/ \
    && rm -rf /tmp/FlameGraph \
    && echo "✅ FlameGraph 工具已安装"; \
    fi

# ============================================================================
# 📊 Pyroscope Agent - 持续剖析（已废弃，保留用于兼容性）
# ============================================================================
ARG INSTALL_PYROSCOPE=false
RUN if [ "$INSTALL_PYROSCOPE" = "true" ]; then \
    echo "📦 安装 Pyroscope Agent..."; \
    apt-get update && \
    apt-get install -y curl ca-certificates && \
    echo "下载 Pyroscope Agent (v1.17.0)..." && \
    curl -fsSL "https://github.com/grafana/pyroscope/releases/download/v1.17.0/pyroscope_1.17.0_linux_arm64.tar.gz" \
    -o /tmp/pyroscope.tar.gz && \
    echo "解压 Pyroscope Agent..." && \
    tar -xzf /tmp/pyroscope.tar.gz -C /usr/local/bin/ && \
    rm /tmp/pyroscope.tar.gz && \
    chmod +x /usr/local/bin/pyroscope && \
    echo "验证 Pyroscope Agent..." && \
    pyroscope --version || echo "⚠️  Pyroscope 安装失败"; \
    else \
    echo "⚠️  Pyroscope 未安装"; \
    fi

# ============================================================================
# 📊 Grafana Alloy - 持续性能数据采集（替代已废弃的 Pyroscope Agent）
# ============================================================================
ARG INSTALL_ALLOY=false
ARG ALLOY_VERSION=v1.12.2
RUN if [ "$INSTALL_ALLOY" = "true" ]; then \
    echo "📦 安装 Grafana Alloy ${ALLOY_VERSION}..."; \
    apt-get update && \
    apt-get install -y wget ca-certificates && \
    echo "检测系统架构..."; \
    ARCH=$(dpkg --print-architecture); \
    echo "系统架构: ${ARCH}"; \
    ALLOY_VER=${ALLOY_VERSION}; \
    ALLOY_VER_NUM=${ALLOY_VER#v}; \
    echo "下载 Alloy deb 包 (${ARCH})..."; \
    wget -qO- "https://github.com/grafana/alloy/releases/download/${ALLOY_VER}/alloy-${ALLOY_VER_NUM}-1.${ARCH}.deb" > /tmp/alloy.deb && \
    echo "下载完成，文件大小: $(ls -lh /tmp/alloy.deb | awk '{print $5}')"; \
    echo "安装 Alloy..."; \
    dpkg -i /tmp/alloy.deb && \
    apt-get install -y -f && \
    rm /tmp/alloy.deb && \
    echo "验证 Alloy 安装..."; \
    alloy --version; \
    else \
    echo "⚠️  Alloy 未安装"; \
    fi

# ============================================================================
# 🔍 bpfcc-tools - Off-CPU 阻塞分析工具
# ============================================================================
RUN if [ "$INSTALL_EBPF_TOOLS" = "true" ]; then \
    echo "📦 安装 bpfcc-tools (包含 offcputime)..."; \
    apt-get update && \
    apt-get install -y bpfcc-tools && \
    rm -rf /var/lib/apt/lists/* && \
    which offcputime-bpfcc && offcputime-bpfcc --help | head -3 || echo "⚠️  offcputime-bpfcc 安装失败"; \
    fi

# 复制预构建的 agent_runner 二进制文件
COPY bin/agent_runner /usr/local/bin/agent_runner
RUN chmod +x /usr/local/bin/agent_runner

# 复制启动脚本
COPY ./start-up.sh /root/
RUN chmod +x /root/start-up.sh

# 复制中文输入法修复脚本（容器内运行 fix-ime 命令）
COPY ./fix-chrome-ime-final.sh /usr/local/bin/fix-ime
RUN chmod +x /usr/local/bin/fix-ime

# 复制音频服务脚本和静态文件
COPY audio_server.py /usr/local/bin/audio_server.py
COPY audio_static /usr/local/share/audio_static
RUN chmod +x /usr/local/bin/audio_server.py

# 复制 MCP 配置文件（用于容器启动时的共享 MCP 代理服务）
COPY mcp /etc/mcp

# 复制 IME 服务脚本（允许用户使用宿主机输入法输入到远程桌面）
COPY ime_server.py /usr/local/bin/ime_server.py
RUN chmod +x /usr/local/bin/ime_server.py

# ============================================================================
# 🔧 eBPF 工具目录
# ============================================================================
# 复制整个 eBPF 工具目录到容器中
COPY ebpf-tools /usr/local/bin/ebpf-tools
RUN chmod +x /usr/local/bin/ebpf-tools/*.sh && \
    ls -la /usr/local/bin/ebpf-tools/ && \
    echo "✅ eBPF 工具目录已创建: /usr/local/bin/ebpf-tools/"

# 创建便捷的快捷命令（包装脚本）
RUN echo '#!/bin/bash\n/usr/local/bin/ebpf-tools/diag-tool.sh offcpu "$@"' > /usr/local/bin/e-offcpu && \
    echo '#!/bin/bash\n/usr/local/bin/ebpf-tools/diag-tool.sh flame "$@"' > /usr/local/bin/e-flame && \
    echo '#!/bin/bash\n/usr/local/bin/ebpf-tools/diag-tool.sh profile "$@"' > /usr/local/bin/e-profile && \
    echo '#!/bin/bash\n/usr/local/bin/ebpf-tools/diag-tool.sh all "$@"' > /usr/local/bin/e-all && \
    echo '#!/bin/bash\n/usr/local/bin/ebpf-tools/auto-flamegraph.sh start' > /usr/local/bin/e-auto-flame && \
    echo '#!/bin/bash\n/usr/local/bin/ebpf-tools/offcpu-monitor.sh start' > /usr/local/bin/e-offcpu-monitor && \
    echo '#!/bin/bash\n/usr/local/bin/ebpf-tools/syscall-monitor.sh start' > /usr/local/bin/e-syscall-monitor && \
    chmod +x /usr/local/bin/e-offcpu /usr/local/bin/e-flame /usr/local/bin/e-profile /usr/local/bin/e-all /usr/local/bin/e-auto-flame /usr/local/bin/e-offcpu-monitor /usr/local/bin/e-syscall-monitor && \
    echo "✅ eBPF 诊断快捷命令已创建:" && \
    echo "   - e-offcpu, e-flame, e-profile, e-all (手动 CPU 诊断)" && \
    echo "   - e-auto-flame (自动火焰图生成)" && \
    echo "   - e-offcpu-monitor (Off-CPU 阻塞监控)" && \
    echo "   - e-syscall-monitor (系统调用监控)"

# ============================================================================
# 📊 Grafana Alloy 配置文件
# ============================================================================
# 复制 Alloy 配置文件到容器（从 ebpf-tools 目录统一管理）
COPY ebpf-tools/alloy-config.alloy /etc/alloy/config.alloy

# 验证 Alloy 配置文件语法
RUN if command -v alloy >/dev/null 2>&1; then \
    echo "验证 Alloy 配置文件..." && \
    alloy validate /etc/alloy/config.alloy || echo "⚠️  Alloy 配置验证失败"; \
    else \
    echo "⚠️  Alloy 未安装，跳过配置验证"; \
    fi

# ============================================================================
# 🔧 暴露端口
# ============================================================================
# 暴露 agent_runner 端口
EXPOSE 8086

# 暴露音频流端口
EXPOSE 6090
EXPOSE 6089

# 暴露 IME 服务端口
EXPOSE 6091

# ============================================================================
# 🚀 启动配置
# ============================================================================
ENTRYPOINT ["/root/start-up.sh"]