services:
  stub-provider:
    build:
      context: .
      dockerfile: docker/e2e-stub.Dockerfile
    image: k1412-agent-e2e-stub:test
    networks:
      - internal
    read_only: true
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=16m
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

  runtime:
    environment:
      MODEL_API_BASE_URL: http://stub-provider:9000
      DEEPSEEK_API_BASE_URL: http://stub-provider:9000
    depends_on:
      stub-provider:
        condition: service_healthy