docker-compose.test.yml

services:
  chroma:
    image: chromadb/chroma:1.5.9
    tmpfs:
      - /chroma/chroma
    # The published chromadb/chroma:1.5.9 image is a single 541MB compiled binary
    # at /usr/local/bin/chroma (built via docker-bake.hcl, not the GitHub Dockerfile).
    # It has NO python, NO python3, NO curl, NO wget — empirically verified via
    # `docker exec` by @neo-gemini-3-1-pro. bash IS present, so use the bash-builtin
    # /dev/tcp probe to verify the TCP listener is up. Bypasses the missing-binary
    # nightmare entirely. (#10908, #10911, #10913)
    healthcheck:
      test: ["CMD-SHELL", "bash -c '</dev/tcp/127.0.0.1/8000'"]
      interval: 5s
      timeout: 5s
      retries: 12
      # Cold-start grace: keeps failed probes during the binding window from
      # exhausting retry budget on slow CI (preserved from prior iteration).
      start_period: 60s
    networks:
      - neo-mcp-test-network
    ports:
      - "18080:8000"

  # #10917: CI has no local Ollama/OpenAI-compatible daemon. Keep the Memory
  # Core integration stack on its real HTTP embedding path by providing a tiny
  # deterministic OpenAI-compatible endpoint inside the compose network.
  embedding-server:
    image: node:24-alpine
    working_dir: /app
    command: ["node", "ai/deploy/mock-openai-embedding-server.mjs"]
    environment:
      - NEO_TEST_EMBEDDING_DIMENSIONS=4096
      - NEO_TEST_EMBEDDING_MODEL=text-embedding-qwen3-embedding-8b
    volumes:
      - ../..:/app:ro
    healthcheck:
      test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:11434/health').then(r => process.exit(r.ok ? 0 : 1)).catch(() => process.exit(1))"]
      interval: 5s
      timeout: 5s
      retries: 12
    networks:
      - neo-mcp-test-network

  kb-server:
    build:
      context: ../..
      dockerfile: ai/deploy/Dockerfile
      args:
        NEO_SOURCE: local  # build the local checkout under test, not a remote clone
        TARGET_SERVER: knowledge-base
    environment:
      - NEO_TRANSPORT=sse
      - NEO_AUTO_SYNC=false
      - NEO_KB_AUTO_START_DATABASE=false
      - NEO_CHROMA_HOST=chroma
      - NEO_CHROMA_PORT=8000
      - NEO_AUTH_TRUST_PROXY_IDENTITY=true
      - MCP_HTTP_PORT=3000
      - NEO_MEMORY_DB_PATH=/tmp/neo-integration/memory-core-graph.sqlite
      - NEO_MODEL_PROVIDER=openAiCompatible
      - NEO_EMBEDDING_PROVIDER=openAiCompatible
      - NEO_OPENAI_COMPATIBLE_HOST=http://embedding-server:11434
      - NEO_OPENAI_COMPATIBLE_EMBEDDING_MODEL=text-embedding-qwen3-embedding-8b
      - NEO_OPENAI_COMPATIBLE_API_KEY=test-integration-key
    tmpfs:
      - /tmp/neo-integration
    volumes:
      # Production deploy images keep the broad `test` tree out of the build
      # context; this test-only mount preserves the KB ingestion golden fixtures
      # that the integration matrix executes from inside the kb-server container.
      - ../../test/playwright/integration/ai/kb-ingestion/fixtures/external-workspaces:/app/test/playwright/integration/ai/kb-ingestion/fixtures/external-workspaces:ro
    depends_on:
      chroma:
        condition: service_healthy
      embedding-server:
        condition: service_healthy
    networks:
      - neo-mcp-test-network
    ports:
      - "13000:3000"

  kb-server-oidc:
    build:
      context: ../..
      dockerfile: ai/deploy/Dockerfile
      args:
        NEO_SOURCE: local  # build the local checkout under test, not a remote clone
        TARGET_SERVER: knowledge-base
    environment:
      - NEO_TRANSPORT=sse
      - NEO_AUTO_SYNC=false
      - NEO_KB_AUTO_START_DATABASE=false
      - NEO_CHROMA_HOST=chroma
      - NEO_CHROMA_PORT=8000
      - NEO_AUTH_TRUST_PROXY_IDENTITY=false
      - NEO_AUTH_ISSUER_URL=http://oidc-server:4000
      - MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL=1
      - NEO_PUBLIC_URL=http://127.0.0.1:13003
      - MCP_HTTP_PORT=3003
      - NEO_MEMORY_DB_PATH=/tmp/neo-integration/kb-recorder-oidc.sqlite
      - NEO_MODEL_PROVIDER=openAiCompatible
      - NEO_EMBEDDING_PROVIDER=openAiCompatible
      - NEO_OPENAI_COMPATIBLE_HOST=http://embedding-server:11434
      - NEO_OPENAI_COMPATIBLE_EMBEDDING_MODEL=text-embedding-qwen3-embedding-8b
      - NEO_OPENAI_COMPATIBLE_API_KEY=test-integration-key
    tmpfs:
      - /tmp/neo-integration
    depends_on:
      chroma:
        condition: service_healthy
      embedding-server:
        condition: service_healthy
      oidc-server:
        condition: service_healthy
    networks:
      - neo-mcp-test-network
    ports:
      - "13003:3003"

  mc-server:
    build:
      context: ../..
      dockerfile: ai/deploy/Dockerfile
      args:
        NEO_SOURCE: local  # build the local checkout under test, not a remote clone
        TARGET_SERVER: memory-core
    environment:
      - NEO_TRANSPORT=sse
      - NEO_MC_PRIMARY=false
      - NEO_AUTO_SUMMARIZE=false
      - NEO_MEM_AUTO_START_DATABASE=false
      - NEO_MEM_AUTO_START_INFERENCE=false
      - NEO_AUTO_DREAM=false
      - NEO_AUTO_GOLDEN_PATH=false
      - NEO_REAL_TIME_MEMORY_PARSING=false
      - NEO_AUTO_INGEST_FS=false
      - NEO_CHROMA_HOST=chroma
      - NEO_CHROMA_PORT=8000
      - NEO_AUTH_TRUST_PROXY_IDENTITY=true
      - MCP_HTTP_PORT=3001
      - NEO_MEMORY_DB_PATH=/tmp/neo-integration/memory-core-graph.sqlite
      - NEO_MODEL_PROVIDER=openAiCompatible
      - NEO_EMBEDDING_PROVIDER=openAiCompatible
      - NEO_OPENAI_COMPATIBLE_HOST=http://embedding-server:11434
      - NEO_OPENAI_COMPATIBLE_EMBEDDING_MODEL=text-embedding-qwen3-embedding-8b
      - NEO_OPENAI_COMPATIBLE_API_KEY=test-integration-key
    tmpfs:
      - /tmp/neo-integration
    depends_on:
      chroma:
        condition: service_healthy
      embedding-server:
        condition: service_healthy
    networks:
      - neo-mcp-test-network
    ports:
      - "13001:3001"

  oidc-server:
    image: node:24-alpine
    working_dir: /app
    command: ["node", "ai/deploy/mock-oidc-server.mjs"]
    volumes:
      - ../..:/app:ro
    healthcheck:
      test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:4000/health').then(r => process.exit(r.ok ? 0 : 1)).catch(() => process.exit(1))"]
      interval: 5s
      timeout: 5s
      retries: 12
    networks:
      - neo-mcp-test-network

  mc-server-oidc:
    build:
      context: ../..
      dockerfile: ai/deploy/Dockerfile
      args:
        NEO_SOURCE: local  # build the local checkout under test, not a remote clone
        TARGET_SERVER: memory-core
    environment:
      - NEO_TRANSPORT=sse
      - NEO_MC_PRIMARY=false
      - NEO_AUTO_SUMMARIZE=false
      - NEO_MEM_AUTO_START_DATABASE=false
      - NEO_MEM_AUTO_START_INFERENCE=false
      - NEO_AUTO_DREAM=false
      - NEO_AUTO_GOLDEN_PATH=false
      - NEO_REAL_TIME_MEMORY_PARSING=false
      - NEO_AUTO_INGEST_FS=false
      - NEO_CHROMA_HOST=chroma
      - NEO_CHROMA_PORT=8000
      - NEO_AUTH_TRUST_PROXY_IDENTITY=false
      - NEO_AUTH_ISSUER_URL=http://oidc-server:4000
      - MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL=1
      - NEO_PUBLIC_URL=http://127.0.0.1:13002
      - MCP_HTTP_PORT=3002
      - NEO_MEMORY_DB_PATH=/tmp/neo-integration/memory-core-graph-oidc.sqlite
      - NEO_MODEL_PROVIDER=openAiCompatible
      - NEO_EMBEDDING_PROVIDER=openAiCompatible
      - NEO_OPENAI_COMPATIBLE_HOST=http://embedding-server:11434
      - NEO_OPENAI_COMPATIBLE_EMBEDDING_MODEL=text-embedding-qwen3-embedding-8b
      - NEO_OPENAI_COMPATIBLE_API_KEY=test-integration-key
    tmpfs:
      - /tmp/neo-integration
    depends_on:
      chroma:
        condition: service_healthy
      embedding-server:
        condition: service_healthy
      oidc-server:
        condition: service_healthy
    networks:
      - neo-mcp-test-network
    ports:
      - "13002:3002"

networks:
  neo-mcp-test-network:
    driver: bridge