docker-compose.yml

# Local/dev runner for the review worker.
# Prod: drop the ./src bind mount — source is already baked into the image.
#
#   docker compose build
#   git diff | docker compose run --rm review --repo /workspace --reporter terminal

services:
  review:
    build:
      context: .
      dockerfile: Dockerfile
    image: code-review-agent:dev
    env_file:
      - .env
    environment:
      # Pin trusted, bundled assets inside the image even when .env has local defaults.
      SKILLS_PATH: /app/skills
      REVIEW_CONFIG: /app/review.toml
      # Keep file reporter artifacts outside the reviewed checkout.
      REPORT_DIR: /reports
    working_dir: /app
    volumes:
      # The checkout to review; mounted read-only to enforce read-and-report behavior.
      - .:/workspace:ro
      # Durable file reporter artifacts, host-visible after `docker compose run --rm`.
      - ./reports:/reports
      # Dev hot-reload of source — remove for prod.
      - ./src:/app/src:ro