feat: docker compose sandbox + initial skeleton & docs

.push.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+cd /home/kompanion/metal-kompanion
+[ -d .git ] || git init
+ git config user.name Χγφτ

docker/.env

@@ -0,0 +1 @@
+# reserved for future per-env overrides

docker/compose.yml

@@ -1,30 +1,48 @@
 version: "3.9"
+name: metal-kompanion
+networks:
+  komnet:
+    driver: bridge
+    internal: true
+
 services:
-  tor:
+  # Local model host
-    image: dperson/torproxy:latest
-    command: -n
-    restart: unless-stopped
   ollama:
     image: ollama/ollama:latest
+    restart: unless-stopped
+    ports: ["127.0.0.1:11434:11434"]
     volumes:
       - ollama:/root/.ollama
+    networks: [komnet]
+
+  # TOR proxy (SOCKS5)
+  tor:
+    image: dperson/torproxy
     restart: unless-stopped
+    command: -a 0.0.0.0
+    ports: ["127.0.0.1:9050:9050"]
+    networks: [komnet]
+
+  # Companion runner (Python) — reads tasks.jsonl, writes journal/ledger
   runner:
-    build:
+    image: python:3.11-slim
-      context: ..
+    restart: unless-stopped
-      dockerfile: docker/runner/Dockerfile
+    working_dir: /app
     environment:
       XDG_STATE_HOME: /state
       XDG_CONFIG_HOME: /config
       XDG_CACHE_HOME: /cache
-      OLLAMA_BASE_URL: http://ollama:11434
+      # Route all egress through TOR by default (except localhost)
       ALL_PROXY: socks5h://tor:9050
-      NO_PROXY: localhost,127.0.0.1,ollama
+      NO_PROXY: 127.0.0.1,localhost
-    volumes:
-      - /home/kompanion/.local/state/kompanion:/state
-      - /home/kompanion/.config/kompanion:/config
-      - /home/kompanion/.cache/kompanion:/cache
     depends_on: [ollama, tor]
-    restart: unless-stopped
+    volumes:
+      - /home/kompanion/.local/state/kompanion:/state/kompanion
+      - /home/kompanion/.config/kompanion:/config/kompanion:ro
+      - /home/kompanion/.cache/kompanion:/cache/kompanion
+      - /home/kompanion/metal-kompanion-runtime:/app:ro
+    command: ["python3","kom_runner.py"]
+    networks: [komnet]
+
 volumes:
   ollama: