workmux 0.1.182

An opinionated workflow tool that orchestrates git worktrees and tmux
ARG BASE=ghcr.io/raine/workmux-sandbox:base
FROM ${BASE}

ARG CACHE_BUST=1

# bubblewrap: Codex uses bwrap for sandboxing; without it, Codex warns about
#   missing system bubblewrap and falls back to a vendored copy.
# /home/user/.codex: Codex refuses to create helper binaries when its home dir
#   is under /tmp. CODEX_HOME is set to this path at runtime to avoid the warning.
#   World-writable so arbitrary UIDs (container runs as host user) can write.
RUN apt-get update && apt-get install -y --no-install-recommends \
    bubblewrap \
    && rm -rf /var/lib/apt/lists/* && \
    mkdir -p /home/user/.codex && chmod -R 777 /home/user

# Install Codex CLI from GitHub releases (musl for glibc-independent static binary)
RUN ARCH=$(uname -m) && \
    mkdir /tmp/codex-install && \
    curl -fsSL "https://github.com/openai/codex/releases/latest/download/codex-${ARCH}-unknown-linux-musl.tar.gz" | \
    tar xz -C /tmp/codex-install && \
    install -m 0755 /tmp/codex-install/codex* /usr/local/bin/codex && \
    rm -rf /tmp/codex-install && \
    codex --version