docker-compose.yml

services:
  dev:
    image: ${IMAGE_TAG:-sam-dev-container}
    container_name: ${CONTAINER_NAME:-sam-dev-container-active}
    hostname: ${HOSTNAME:-sam-dev}
    shm_size: 2gb
    environment:
      - MCP_GATEWAY_AUTH_TOKEN=${MCP_GATEWAY_AUTH_TOKEN}
      - ADO_ORG=${ADO_ORG}
      - ENABLE_CLAUDEAI_MCP_SERVERS=false
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - dev-workspace:/workspace
    ports:
      - "${HOST_PORTS:-3002}:${CONTAINER_PORTS:-3000}"
      - "${HOST_PORT_RANGE:-3010-3019}:${CONTAINER_PORT_RANGE:-3010-3019}"
      - "${NOVNC_HOST_PORT:-6080}:6080"
    security_opt:
      - seccomp=custom-seccomp.json
    stdin_open: true
    tty: true

volumes:
  # Persistent /workspace for the dev stack. Survives container recreation.
  # Managed out-of-band by workspace.sh. `name:` pins a stable, unprefixed
  # volume name so it matches workspace.sh regardless of compose project name.
  dev-workspace:
    name: dev-workspace
    labels:
      com.docker-dev.workspace: "dev"