FROM node:26.5.0

RUN apt-get update && apt-get install -yq socat netcat-openbsd && rm -rf /var/lib/apt/lists/*

WORKDIR /app
RUN mkdir /sandbox

COPY readflag /
RUN chmod +x /readflag

COPY jail.js ./

CMD ["socat", "-T30", "tcp-listen:1337,fork,reuseaddr", "exec:'node --permission --allow-fs-read=/sandbox --allow-fs-write=/sandbox --jitless --freeze-flags-after-init --frozen-intrinsics jail.js',stderr"]
