services:
  frontend:
    build:
      context: ..
      dockerfile: .devcontainer/Dockerfile
      # Match host UID/GID so files written in the container aren't root-owned.
      args:
        USER_UID: ${UID:-1000}
        USER_GID: ${GID:-1000}
    command: sleep infinity
    ports:
      - "3000:3000"
    volumes:
      - ..:/workspaces/assessment-model
      - ~/.gitconfig:/home/vscode/.gitconfig
      # GitHub CLI auth from host (created by `gh auth login`). Used by the
      # postCreate skill installer to clone private Hestia-Homes repos.
      - ~/.config/gh:/home/vscode/.config/gh:ro
    environment:
      # Host SSH agent — for `git push` etc. inside the container.
      - SSH_AUTH_SOCK=${SSH_AUTH_SOCK:-}
      # Fallback HTTPS auth if ~/.config/gh isn't present on the host.
      - GITHUB_TOKEN=${GITHUB_TOKEN:-}
    networks:
      - frontend-net
      - shared-dev

  pgadmin:
    image: dpage/pgadmin4
    hostname: pgadmin
    ports:
      - 5556:80
    env_file:
      - ../.db-env
    restart: unless-stopped
    networks:
      - frontend-net

networks:
  frontend-net:
    driver: bridge
  shared-dev:
    external: true
    name: shared-dev