Agent/docker-compose.yml

services:
  feishu:
    build:
      context: .
      dockerfile: docker/Dockerfile.feishu
    image: agent/feishu:latest
    container_name: agent-feishu
    restart: unless-stopped
    volumes:
      - ./gateway/core/channels/feishu/openclaw-lark-patch/src/http/config.yml:/app/config.yml
    env_file:
      - .env
    environment:
      - FEISHU_HTTP_PORT=4380
      - GATEWAY_FEISHU_WEBHOOK_URL=http://gateway:8000/api/channels/feishu/inbound/webhook
    ports:
      - "4380:4380"
    networks:
      - agent

  server:
    build:
      context: .
      dockerfile: docker/Dockerfile.server
    image: agent/server:latest
    profiles:
      - build-only

  api:
    image: agent/server:latest
    container_name: agent-api
    restart: unless-stopped
    env_file:
      - .env
    environment:
      - FEISHU_HTTP_BASE_URL=http://feishu:4380
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    ports:
      - "8001:8000"
    entrypoint: "python /app/api_server.py"
    networks:
      - agent

  gateway:
    image: agent/server:latest
    container_name: agent-gateway
    restart: unless-stopped
    env_file:
      - .env
    environment:
      - FEISHU_HTTP_BASE_URL=http://feishu:4380
      - GATEWAY_AGENT_API_BASE_URL=http://api:8000
      - CHANNELS_DISPATCH_REACTIONS=false
      - CHANNELS_DISPATCH_CARD_ACTIONS=true
      # Workspace 沙箱：与下方命名卷一致（Compose 项目名为 agent 时卷名为 agent_workspace_root）
      - GATEWAY_WORKSPACE_DOCKER_NETWORK=agent
      - GATEWAY_WORKSPACE_MOUNT_MODE=volume_subpath
      - GATEWAY_WORKSPACE_DOCKER_VOLUME=agent_workspace_root
      - GATEWAY_SHARED_DOCKER_VOLUME=agent_workspace_shared
    volumes:
      # workspace 与 shared 数据卷
      - workspace_root:/root/.gateway/workspaces
      - workspace_shared:/root/.gateway/shared
      # 将宿主机的 docker.sock 暴露给 gateway，用于创建 workspace 容器
      - /var/run/docker.sock:/var/run/docker.sock:ro
    ports:
      - "8002:8000"
    entrypoint: "python /app/gateway_server.py"
    networks:
      - agent

  workspace:
    build:
      context: .
      dockerfile: docker/Dockerfile.workspace
    image: agent/workspace:latest
    profiles:
      - build-only

volumes:
  workspace_root:
    name: agent_workspace_root
  workspace_shared:
    name: agent_workspace_shared
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${GATEWAY_SHARED_HOST_BIND:-${PWD}/.gateway/shared}

networks:
  agent:
    name: agent