docker-compose.yml

# Local development: runs the agent container and Chainlit UI together.
#
# The UI calls the agent directly via HTTP (AGENT_ENDPOINT_URL) instead of
# going through AgentCore Runtime. Both containers use static AWS credentials
# passed via environment variables (no aws-vault / SSO required inside containers).
#
# Usage:
#   docker compose up --build
#
# Then open http://localhost:8000 in your browser.
#
# Required env vars (set in .env or export before running):
#   AWS_REGION              - AWS region (default: eu-central-1)
#   AWS_ACCESS_KEY_ID       - AWS access key (from `aws-vault exec dev_vault -- env | grep AWS`)
#   AWS_SECRET_ACCESS_KEY   - AWS secret key
#   AWS_SESSION_TOKEN       - AWS session token (required for SSO/assumed-role credentials)
#   KNOWLEDGE_BASE_ID       - Bedrock Knowledge Base ID (from terraform output)
#   AGENTCORE_MEMORY_ID     - AgentCore Memory ID (from terraform output)
#
# Optional (for remote AgentCore mode in the UI):
#   AGENT_RUNTIME_ARN       - If set, the UI will use invoke_agent_runtime instead of direct HTTP

services:
  agent:
    build:
      context: agent
      dockerfile: Dockerfile
    ports:
      - "8080:8080"
    environment:
      AWS_REGION: ${AWS_REGION:-eu-central-1}
      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
      KNOWLEDGE_BASE_ID: ${KNOWLEDGE_BASE_ID}
      AGENTCORE_MEMORY_ID: ${AGENTCORE_MEMORY_ID}
      AGENTCORE_GATEWAY_URL: ${AGENTCORE_GATEWAY_URL:-}
      GUARDRAIL_ID: ${GUARDRAIL_ID:-}
      MODEL_ID: ${MODEL_ID:-anthropic.claude-sonnet-4-6-v1:0}
      # OpenTelemetry / CloudWatch observability (disabled locally by default)
      OTEL_PYTHON_DISTRO: aws_distro
      OTEL_PYTHON_CONFIGURATOR: aws_configurator
      OTEL_EXPORTER_OTLP_PROTOCOL: http/protobuf
      OTEL_TRACES_EXPORTER: otlp
      OTEL_EXPORTER_OTLP_LOGS_HEADERS: ${OTEL_EXPORTER_OTLP_LOGS_HEADERS:-x-aws-log-group=/aws/bedrockagentcore/local,x-aws-log-stream=default,x-aws-metric-namespace=bedrock-agentcore}
      OTEL_RESOURCE_ATTRIBUTES: ${OTEL_RESOURCE_ATTRIBUTES:-service.name=strands-agent}
      AGENT_OBSERVABILITY_ENABLED: ${AGENT_OBSERVABILITY_ENABLED:-false}
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/ping"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 15s

  ui:
    build:
      context: ui
      dockerfile: Dockerfile
    ports:
      - "8000:8000"
    environment:
      AWS_REGION: ${AWS_REGION:-eu-central-1}
      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
      # Direct HTTP to the local agent container (bypasses AgentCore Runtime)
      AGENT_ENDPOINT_URL: http://agent:8080
    depends_on:
      agent:
        condition: service_healthy