koan/docker-compose.yml at main · atoomic/koan · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
# Kōan Docker Compose
#
# Claude CLI is installed in the image. Auth options:
#   1. ANTHROPIC_API_KEY in .env (API billing accounts)
#   2. make docker-auth (subscription — generates OAuth token from host CLI)
#
# Run ./setup-docker.sh first — it generates docker-compose.override.yml
# with workspace mounts and GitHub CLI auth for your system.
#
# Two ways to get the image:
#   - Prebuilt (recommended): set KOAN_IMAGE to the published GHCR ref and pull it.
#       KOAN_IMAGE=ghcr.io/anantys-oss/koan:latest docker compose pull
#       KOAN_IMAGE=ghcr.io/anantys-oss/koan:latest docker compose up -d --no-build
#       (or just: make docker-pull-up)
#   - Build from source (fallback): docker compose up --build  (tags koan:local)
#
# Usage:
#   ./setup-docker.sh                        # Auto-detect host setup
#   make docker-auth                         # Generate OAuth token from host CLI
#   make docker-pull-up                      # Pull prebuilt image + start (recommended)
#   docker compose up --build                # Build from source (agent + bridge)
#   docker compose run --rm koan test        # Run test suite
#   docker compose run --rm koan shell       # Interactive shell

services:
  koan:
    # Defaults to a locally-built tag (koan:local). Override with the published
    # GHCR ref to run the prebuilt image: KOAN_IMAGE=ghcr.io/anantys-oss/koan:latest
    image: ${KOAN_IMAGE:-koan:local}
    build:
      context: .
      args:
        HOST_UID: ${HOST_UID:-1000}
        HOST_GID: ${HOST_GID:-1000}
    container_name: koan
    env_file:
      - .env
      - path: .env.docker
        required: false
    environment:
      - KOAN_ROOT=/app
      - PYTHONPATH=/app/koan
      - SSH_AUTH_SOCK=/run/ssh-agent.sock
    volumes:
      # Instance state — persisted across restarts
      - ./instance:/app/instance
      # Isolated mission queue for Docker (overlays instance/ mount)
      - ./instance/missions.docker.md:/app/instance/missions.md
      # Logs
      - ./logs:/app/logs
    restart: unless-stopped
    # No ports exposed by default — Telegram/Slack only
    # Uncomment to expose dashboard:
    # ports:
    #   - "5001:5001"