docker-compose.integration.yml

services:
  supabase-db:
    image: supabase/postgres:15.1.0.117
    ports:
      - "54332:5432"
    environment:
      POSTGRES_PASSWORD: postgres
      POSTGRES_DB: postgres
    volumes:
      - ./tests/integration/db/99-service-role-passwords.sql:/docker-entrypoint-initdb.d/init-scripts/99-service-role-passwords.sql:ro
      - ./packages/database/supabase/migrations/20260203000001_initial_schema.sql:/docker-entrypoint-initdb.d/migrations/20260203000001_initial_schema.sql:ro
      - ./packages/database/supabase/migrations/20260203000002_row_level_security.sql:/docker-entrypoint-initdb.d/migrations/20260203000002_row_level_security.sql:ro
      - ./packages/database/supabase/migrations/20260203000003_soft_delete.sql:/docker-entrypoint-initdb.d/migrations/20260203000003_soft_delete.sql:ro
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - integration

  supabase-auth:
    image: supabase/gotrue:v2.143.0
    depends_on:
      supabase-db:
        condition: service_healthy
    ports:
      - "9998:9999"
    environment:
      GOTRUE_API_HOST: 0.0.0.0
      GOTRUE_API_PORT: 9999
      GOTRUE_DB_DRIVER: postgres
      GOTRUE_DB_DATABASE_URL: postgres://supabase_auth_admin:postgres@supabase-db:5432/postgres
      GOTRUE_SITE_URL: http://localhost:3000
      GOTRUE_JWT_SECRET: super-secret-jwt-token-with-at-least-32-characters-long
      GOTRUE_JWT_EXP: 3600
      GOTRUE_JWT_DEFAULT_GROUP_NAME: authenticated
      GOTRUE_DISABLE_SIGNUP: false
      GOTRUE_EXTERNAL_EMAIL_ENABLED: true
      GOTRUE_MAILER_AUTOCONFIRM: true
      API_EXTERNAL_URL: http://localhost:9999
    healthcheck:
      test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://localhost:9999/health"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - integration

  supabase-rest:
    image: postgrest/postgrest:v12.0.2
    depends_on:
      supabase-db:
        condition: service_healthy
    environment:
      PGRST_DB_URI: postgres://authenticator:postgres@supabase-db:5432/postgres
      PGRST_DB_SCHEMAS: public,storage,graphql_public
      PGRST_DB_ANON_ROLE: anon
      PGRST_JWT_SECRET: super-secret-jwt-token-with-at-least-32-characters-long
      PGRST_DB_USE_LEGACY_GUCS: "false"
    ports:
      - "3001:3000"
    healthcheck:
      test: ["CMD-SHELL", "bash -c 'echo > /dev/tcp/localhost/3000'"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - integration

  supabase-kong:
    image: kong:2.8.1
    depends_on:
      supabase-rest:
        condition: service_healthy
      supabase-auth:
        condition: service_healthy
    ports:
      - "8000:8000"
    environment:
      KONG_DATABASE: "off"
      KONG_DECLARATIVE_CONFIG: /var/lib/kong/kong.yml
      KONG_DNS_ORDER: LAST,A,CNAME
      KONG_PLUGINS: request-transformer,cors,key-auth,acl,basic-auth
      KONG_NGINX_PROXY_PROXY_BUFFER_SIZE: 160k
      KONG_NGINX_PROXY_PROXY_BUFFERS: 64 160k
    volumes:
      - ./tests/integration/kong/kong.yml:/var/lib/kong/kong.yml:ro
    healthcheck:
      test: ["CMD-SHELL", "kong health"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - integration

  mission-control:
    build:
      context: .
      dockerfile: apps/web/Dockerfile
      args:
        NEXT_PUBLIC_SUPABASE_URL: http://localhost:8000
        NEXT_PUBLIC_SUPABASE_ANON_KEY: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRXP1A7WOeoJeXxjNni43kdQwgnWNReilDMblYTn_I0
    depends_on:
      supabase-db:
        condition: service_healthy
      supabase-auth:
        condition: service_healthy
      supabase-kong:
        condition: service_healthy
    ports:
      - "3100:3000"
    environment:
      SUPABASE_URL: http://supabase-kong:8000
      NEXT_PUBLIC_SUPABASE_URL: http://supabase-kong:8000
      NEXT_PUBLIC_SUPABASE_ANON_KEY: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRXP1A7WOeoJeXxjNni43kdQwgnWNReilDMblYTn_I0
      SUPABASE_SERVICE_ROLE_KEY: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
    healthcheck:
      test: ["CMD-SHELL", "node -e \"fetch('http://localhost:3000/api/health').then(r => {if(!r.ok) process.exit(1)}).catch(() => process.exit(1))\""]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 30s
    networks:
      - integration

  openclaw-gateway:
    image: openclaw:local
    depends_on:
      mission-control:
        condition: service_healthy
    ports:
      - "18789:18789"
    environment:
      HOME: /home/node
      TERM: xterm-256color
      MISSION_CONTROL_API_URL: http://mission-control:3000
      MISSION_CONTROL_API_KEY: ""
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
      AI_TESTS_ENABLED: ${AI_TESTS_ENABLED:-false}
    volumes:
      # Mount integration test OpenClaw config files
      - ./tests/integration/openclaw:/opt/openclaw-config:ro
      # Mount scripts
      - ./tests/integration/scripts:/opt/openclaw-scripts:ro
      # Mount real Mission Control skill
      - ./skills/mission-control:/opt/real-skill:ro
    entrypoint: ["bash", "/opt/openclaw-scripts/entrypoint-openclaw.sh"]
    user: "0:0"
    healthcheck:
      test: ["CMD-SHELL", "curl -sf http://localhost:18789/ > /dev/null || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 15
      start_period: 60s
    networks:
      - integration

networks:
  integration:
    driver: bridge