decodingtrust-agent-sdk 0.1.0__py3-none-any.whl

dt_arena/config/mcp.yaml

@@ -0,0 +1,642 @@
+global:
+  base_dir: "../mcp_server"
+  log_dir: "../../logs"
+  python_executable: "python3"
+
+servers:
+  - name: gmail
+    description: Gmail MCP server backed by Mailpit for sandboxed email operations
+    path: gmail/main.py
+    enabled: true
+    port: 8853
+    environment: gmail
+    env:
+      PORT: ""  # Dynamically allocated by task_runner
+      MAILPIT_BASE_URL: "http://127.0.0.1:${GMAIL_UI_PORT}"
+      API_PROXY_URL: "http://127.0.0.1:${GMAIL_PROXY_PORT}"
+      MAILPIT_SMTP_HOST: "127.0.0.1"
+      MAILPIT_SMTP_PORT: "${GMAIL_SMTP_PORT}"
+      AUTH_API_URL: "http://127.0.0.1:${GMAIL_AUTH_PORT}"
+      USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  - name: salesforce
+    description: Salesforce CRM MCP server for comprehensive CRM operations
+    path: salesforce/main.py
+    enabled: true
+    port: 8005
+    environment: salesforce  # Docker environment name from env.yaml
+    env:
+      # HTTP MCP Server Port (dynamically allocated by task_runner)
+      PORT: ""
+
+      # Base URL for Salesforce instance (uses environment's API port)
+      SALESFORCE_BASE_URL: "http://127.0.0.1:${SALESFORCE_API_PORT}"
+
+      # OAuth2 Grant Type: "password" or "client_credentials"
+      SALESFORCE_GRANT_TYPE: "client_credentials"
+
+      # OAuth2 Client Credentials
+      SALESFORCE_CLIENT_ID: "17817554-086b-83d1-bf9d-69026221f529"
+      SALESFORCE_CLIENT_SECRET: "mcp-secret-123"
+
+      # Password Grant Credentials (when using grant_type="password")
+      SALESFORCE_USERNAME: "bitnami"
+      SALESFORCE_PASSWORD: "user"
+
+      # Optional: Pre-supplied access token (if already authenticated). If empty,
+      # start.sh will auto-fetch using the grant type above.
+      SALESFORCE_ACCESS_TOKEN: ""
+
+    transport: http
+    # Directly run the MCP server with uv (HTTP at http://localhost:$PORT/mcp)
+    command: ["uv", "run", "python", "main.py"]
+
+  # Calendar MCP Server
+  - name: calendar
+    description: Google Calendar Sandbox MCP server
+    path: calendar/main.py
+    enabled: true
+    port: 8841
+    environment: calendar
+    env:
+      PORT: ""
+      CALENDAR_API_URL: "http://127.0.0.1:${CALENDAR_API_PORT}"
+      USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Zoom MCP Server
+  - name: zoom
+    description: Zoom Sandbox MCP server
+    path: zoom/main.py
+    enabled: true
+    port: 8847
+    environment: zoom
+    env:
+      PORT: ""
+      ZOOM_API_URL: "http://127.0.0.1:${ZOOM_API_PORT}"
+      USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Slack MCP Server
+  - name: slack
+    description: Slack Sandbox MCP server
+    path: slack/main.py
+    enabled: true
+    port: 8844
+    environment: slack
+    env:
+      PORT: ""
+      SLACK_API_URL: "http://127.0.0.1:${SLACK_API_PORT}"
+      USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Snowflake MCP Server
+  - name: snowflake
+    description: Snowflake MCP server
+    path: snowflake/main.py
+    enabled: true
+    port: 8842
+    environment: snowflake
+    env:
+      PORT: ""
+      HOST: "0.0.0.0"
+      # Local PostgreSQL (see envs/snowflake/docker-compose.yml)
+      POSTGRES_DSN: "postgresql://snow:snow@127.0.0.1:${SNOWFLAKE_PG_PORT}/snowdb"
+      # Search configuration
+      SEARCH_MODE: "faiss"  # "faiss" or "simple"
+      SEARCH_TABLE: "product_search_view"
+      SEARCH_COLUMNS: "name,description"
+      # Optional OpenAI config (key should be provided via secure environment, not committed)
+      OPENAI_MODEL: "gpt-4o-mini"
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Databricks MCP Server
+  - name: databricks
+    description: Databricks MCP server
+    path: databricks/main.py
+    enabled: true
+    port: 8843
+    environment: databricks
+    env:
+      PORT: ""
+      HOST: "0.0.0.0"
+      POSTGRES_DSN: "postgresql://dbx:dbx@127.0.0.1:${DATABRICKS_PG_PORT}/dbxdb"
+      SEARCH_MODE: "faiss"
+      SEARCH_TABLE: "product_search_view"
+      SEARCH_COLUMNS: "name,description"
+      OPENAI_MODEL: "gpt-4o-mini"
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # PayPal MCP Server (Local Sandbox)
+  - name: paypal
+    description: PayPal MCP server (local sandbox, no external API)
+    path: paypal/main.py
+    enabled: true
+    port: 8861
+    environment: paypal
+    env:
+      PORT: ""
+      PAYPAL_API_URL: "http://127.0.0.1:${PAYPAL_API_PORT}"
+      PAYPAL_USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # ERS MCP Server
+  - name: ers
+    description: ERS (Employee Reimbursement System) MCP server
+    path: ers/main.py
+    enabled: true
+    port: 8859
+    environment: ers
+    env:
+      PORT: ""
+      ERS_API_URL: "http://127.0.0.1:${ERS_API_PORT}"
+      USER_ACCESS_TOKEN: ""
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # macOS MCP
+  - name: macos-os
+    description: macOS desktop automation MCP server (requires FastAPI backend)
+    path: macos/mcp_server.py
+    enabled: true
+    port: 8847
+    environment: macos
+    env:
+      PORT: ""
+      MACOS_API_URL: "http://127.0.0.1:${MCP_SERVICE_PORT}"
+    transport: http
+    command: ["uv", "run", "python", "mcp_server.py", "--transport", "streamable-http", "--port", "$PORT"]
+
+  # Windows MCP
+  - name: windows-os
+    description: Windows desktop automation MCP server (requires FastAPI backend)
+    path: windows/mcp_server.py
+    enabled: true
+    port: 8846
+    environment: windows
+    env:
+      PORT: ""
+      WINDOWS_API_URL: "http://127.0.0.1:${MCP_SERVICE_PORT}"
+    transport: http
+    command: ["uv", "run", "python", "mcp_server.py", "--transport", "streamable-http", "--port", "$PORT"]
+
+  # Browser MCP Server
+  - name: browser
+    description: Browser MCP server
+    path: browser/main.py
+    enabled: true
+    port: 8850
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+    environment: [ecommerce, custom-website]
+    env:
+      ECOMMERCE_UI_URL: "http://127.0.0.1:${ECOMMERCE_UI_PORT}"
+      CUSTOM_WEBSITE_UI_URL: "http://127.0.0.1:${CUSTOM_WEBSITE_UI_PORT}"
+
+  - name: OS-filesystem
+    description: OS-Filesystem MCP server for agent evaluation
+    path: os-filesystem/main.py
+    enabled: true
+    port: 8033
+    environment: os-filesystem  # Docker environment name from env.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+    env:
+      HOST: "0.0.0.0"
+      PORT: ""
+      FILESYSTEM_API_URL: "http://127.0.0.1:${OS_FILESYSTEM_API_PORT}"
+      USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+
+  # Local Google Form MCP Server
+  - name: google-form
+    description: Local Google Form MCP server (manages schema and submissions for the dockerized form)
+    path: google_form/main.py
+    enabled: true
+    port: 8855
+    environment: google-form
+    env:
+      PORT: ""
+      FORM_API_BASE: "http://127.0.0.1:${GOOGLE_FORM_API_PORT}"
+      # Optional: direct file path to schema.json for edits (outside docker)
+      SCHEMA_PATH: ""  # Will be set dynamically by task
+      UI_URL: "http://127.0.0.1:${GOOGLE_FORM_UI_PORT}/"
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  - name: googlesheets
+    description: Google Sheets MCP server
+    path: googlesheets/main.py
+    enabled: true
+    port: 8868
+    environment: googlesheets
+    env:
+      PORT: ""
+      GOOGLESHEETS_API_URL: "http://127.0.0.1:${GOOGLESHEETS_API_PORT}"
+      GOOGLESHEETS_USER_ACCESS_TOKEN: ""
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  - name: googledrive
+    description: Google Drive MCP server
+    path: googledrive/main.py
+    enabled: true
+    port: 8869
+    environment: googledrive
+    env:
+      PORT: ""
+      GOOGLEDRIVE_API_URL: "http://127.0.0.1:${GOOGLEDRIVE_API_PORT}"
+      GOOGLEDRIVE_USER_ACCESS_TOKEN: ""
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  - name: travel-suite
+    description: "Travel MCP server for travel bookings and itineraries"
+    path: travel/mcp_server.py
+    enabled: true
+    port: 10301
+    environment: travel
+    env:
+      PORT: ""
+      TRAVEL_HOST: "127.0.0.1"
+      TRAVEL_PORT: "${TRAVEL_PORT}"
+    transport: http
+    command: ["python3", "mcp_server.py"]
+
+  # Atlassian MCP Server (Jira + Confluence)
+  - name: atlassian
+    description: Atlassian MCP server for Jira issues and Confluence pages
+    path: atlassian/main.py
+    enabled: true
+    port: 8862
+    environment: atlassian
+    env:
+      PORT: ""
+      ATLASSIAN_API_URL: "http://127.0.0.1:${ATLASSIAN_API_PORT}"
+      USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Terminal MCP Server
+  - name: terminal
+    description: Terminal MCP server for code execution and terminal operations
+    path: terminal/main.py
+    enabled: true
+    port: 8845
+    environment: terminal  # Docker environment name from env.yaml
+    env:
+      PORT: ""  # Dynamically allocated by task_runner
+    transport: http  # streamable-http transport (uses /mcp path, not /sse)
+    command: ["uv", "run", "python", "main.py"]
+
+  # Research MCP Server
+  - name: Research
+    description: Research MCP server for academic search and code execution
+    path: research/main.py
+    enabled: true
+    port: 8846
+    environment: [research, arxiv]  # Docker environment names
+    env:
+      PORT: ""  # Dynamically allocated by task_runner
+      HOST: "0.0.0.0"
+      # TERMINAL_CONTAINER_NAME: inherited from parent process (set dynamically by evaluation.py)
+      ARXIV_API_URL: "http://127.0.0.1:${ARXIV_API_PORT}"  # Resolved dynamically from env
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+    
+  # Telecom MCP Server
+  - name: telecom
+    description: Telecom MCP server for managing customers, accounts, bills, tickets, and more
+    path: telecom/mcp_server.py
+    enabled: true
+    port: 12345
+    environment: telecom
+    transport: http
+    command: ["python", "mcp_server.py"]
+    env:
+      TELECOM_MCP_PORT: ""  # Dynamically allocated by task_runner
+      TELECOM_MCP_TRANSPORT: "http"
+      TELECOM_HOST: "127.0.0.1"
+      TELECOM_PORT: "${TELECOM_PORT}"  # Resolved from Docker-allocated port
+
+  - name: github
+    description: GitHub Clone MCP server for repositories, issues, pull requests, and git operations
+    path: github/main.py
+    enabled: true
+    port: 8867
+    environment: github
+    env:
+      PORT: ""
+      GITHUB_API_URL: "http://127.0.0.1:${GITHUB_API_PORT}"
+      USER_ACCESS_TOKEN: ""
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  - name: gitlab
+    description: GitLab MCP server for projects, repository files, issues, and merge requests
+    path: gitlab/main.py
+    enabled: true
+    port: 8872
+    environment: gitlab
+    env:
+      PORT: ""
+      GITLAB_API_URL: "http://127.0.0.1:${GITLAB_UI_PORT}/api/v4"
+      USER_ACCESS_TOKEN: ""
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  - name: HospitalClient
+    description: Hospital MCP server for medical diagnosis tools
+    path: hospital/mcp_server.py
+    enabled: true
+    port: 12002
+    environment: hospital
+    env:
+      PORT: ""
+      HOSPITAL_HOST: "127.0.0.1"
+      HOSPITAL_PORT: "${HOSPITAL_PORT}"
+      HOSPITAL_MCP_HOST: "0.0.0.0"
+      HOSPITAL_MCP_PORT: "${PORT}"
+    transport: http
+    command: ["python", "mcp_server.py"]
+
+  # Finance MCP Server (Docker-backed Flask web server)
+  - name: finance
+    description: Finance Trading MCP server for FINRA benchmark
+    path: finance/main.py
+    enabled: true
+    port: 8002
+    environment: finance
+    transport: http
+    command: ["uv", "run", "python", "main.py", "mcp", "--port", "$PORT", "--web-url", "http://127.0.0.1:${FINANCE_WEB_PORT}", "--auto-web"]
+    env:
+      HOST: "0.0.0.0"
+      PORT: "8002"
+      FINANCE_WEB_PORT: "${FINANCE_WEB_PORT}"
+
+  # Telegram MCP Server (Docker-backed PostgreSQL + FastAPI)
+  - name: telegram
+    description: Telegram MCP server for messaging, contacts, and calls
+    path: telegram/main.py
+    enabled: true
+    port: 8864
+    environment: telegram
+    env:
+      PORT: ""
+      TELEGRAM_API_URL: "http://127.0.0.1:${TELEGRAM_API_PORT}"
+      TELEGRAM_USER_ACCESS_TOKEN: ""
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Legal MCP Server (Docker-backed Flask web server)
+  - name: legal
+    description: Legal MCP server for legal research
+    path: legal/main.py
+    enabled: true
+    port: 8003
+    environment: legal
+    transport: http
+    command: ["uv", "run", "python", "main.py", "mcp", "--port", "$PORT"]
+    env:
+      HOST: "0.0.0.0"
+      PORT: "8003"
+      LEGAL_WEB_PORT: "${LEGAL_WEB_PORT}"
+
+  # Customer Service MCP Server
+  - name: customer_service
+    description: Customer Service MCP server
+    path: customer_service/main.py
+    enabled: true
+    port: 22631
+    environment: customer_service
+    env:
+      PORT: ""
+      CS_API_BASE: "http://127.0.0.1:${CUSTOMER_SERVICE_API_PORT}"
+    transport: http
+    command: ["python3", "main.py"]
+
+  # BigQuery MCP Server (backed by local emulator)
+  - name: bigquery
+    description: BigQuery MCP server backed by local emulator
+    path: bigquery/main.py
+    enabled: true
+    port: 8868
+    environment: bigquery
+    env:
+      PORT: ""
+      HOST: "0.0.0.0"
+      BIGQUERY_API_URL: "http://127.0.0.1:${BIGQUERY_API_PORT}"
+      BIGQUERY_GRPC_TARGET: "127.0.0.1:${BIGQUERY_GRPC_PORT}"
+      BIGQUERY_PROJECT_ID: "test-project"
+      BIGQUERY_LOCATION: "US"
+  # Chase MCP Server (Local Sandbox)
+  - name: chase
+    description: Chase retail banking MCP server (accounts, transfers, Zelle, cards)
+    path: chase/main.py
+    enabled: true
+    port: 8880
+    environment: chase
+    env:
+      PORT: ""
+      CHASE_API_URL: "http://127.0.0.1:${CHASE_API_PORT}"
+      CHASE_USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # LinkedIn MCP Server (Local Sandbox)
+  - name: linkedin
+    description: LinkedIn MCP server (profiles, jobs, posts, connections, messaging)
+    path: linkedin/main.py
+    enabled: true
+    port: 8881
+    environment: linkedin
+    env:
+      PORT: ""
+      LINKEDIN_API_URL: "http://127.0.0.1:${LINKEDIN_API_PORT}"
+      LINKEDIN_USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # X (Twitter) MCP Server (Local Sandbox)
+  - name: x
+    description: X / Twitter MCP server (tweets, timeline, DMs, bookmarks, search)
+    path: x/main.py
+    enabled: true
+    port: 8882
+    environment: x
+    env:
+      PORT: ""
+      X_API_URL: "http://127.0.0.1:${X_API_PORT}"
+      X_USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Notion MCP Server (Local Sandbox)
+  - name: notion
+    description: Notion MCP server (pages, blocks, databases, comments)
+    path: notion/main.py
+    enabled: true
+    port: 8883
+    environment: notion
+    env:
+      PORT: ""
+      NOTION_API_URL: "http://127.0.0.1:${NOTION_API_PORT}"
+      NOTION_USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Reddit MCP Server (Local Sandbox)
+  - name: reddit
+    description: Reddit MCP server (subreddits, posts, comments, votes, DMs, search)
+    path: reddit/main.py
+    enabled: true
+    port: 8884
+    environment: reddit
+    env:
+      PORT: ""
+      REDDIT_API_URL: "http://127.0.0.1:${REDDIT_API_PORT}"
+      REDDIT_USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Robinhood MCP Server (Local Sandbox)
+  - name: robinhood
+    description: Robinhood MCP server (stocks, crypto, orders, portfolio, watchlists)
+    path: robinhood/main.py
+    enabled: true
+    port: 8885
+    environment: robinhood
+    env:
+      PORT: ""
+      ROBINHOOD_API_URL: "http://127.0.0.1:${ROBINHOOD_API_PORT}"
+      ROBINHOOD_USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Dropbox MCP Server (Local Sandbox)
+  - name: dropbox
+    description: Dropbox MCP server (files, folders, sharing, search)
+    path: dropbox/main.py
+    enabled: true
+    port: 8886
+    environment: dropbox
+    env:
+      PORT: ""
+      DROPBOX_API_URL: "http://127.0.0.1:${DROPBOX_API_PORT}"
+      DROPBOX_USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+  # DoorDash MCP Server (Local Sandbox)
+  - name: doordash
+    description: DoorDash MCP server (restaurants, cart, orders, DashPass)
+    path: doordash/main.py
+    enabled: true
+    port: 8873
+    environment: doordash
+    env:
+      PORT: ""
+      DOORDASH_API_URL: "http://127.0.0.1:${DOORDASH_API_PORT}"
+      DOORDASH_USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # United Airlines MCP Server (Local Sandbox)
+  - name: united
+    description: United Airlines MCP server (flight search, booking, status)
+    path: united/main.py
+    enabled: true
+    port: 8874
+    environment: united
+    env:
+      PORT: ""
+      UNITED_API_URL: "http://127.0.0.1:${UNITED_API_PORT}"
+      UNITED_USER_ACCESS_TOKEN: ""
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Southwest Airlines MCP Server (Local Sandbox)
+  - name: southwest
+    description: Southwest Airlines MCP server (flight search, booking, low fare calendar)
+    path: southwest/main.py
+    enabled: true
+    port: 8875
+    environment: southwest
+    env:
+      PORT: ""
+      SOUTHWEST_API_URL: "http://127.0.0.1:${SOUTHWEST_API_PORT}"
+      SOUTHWEST_USER_ACCESS_TOKEN: ""
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Enterprise Rent-A-Car MCP Server (Local Sandbox)
+  - name: enterprise
+    description: Enterprise Rent-A-Car MCP server (locations, vehicle classes, car booking)
+    path: enterprise/main.py
+    enabled: true
+    port: 8876
+    environment: enterprise
+    env:
+      PORT: ""
+      ENTERPRISE_API_URL: "http://127.0.0.1:${ENTERPRISE_API_PORT}"
+      ENTERPRISE_USER_ACCESS_TOKEN: ""
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Expedia MCP Server (Local Sandbox)
+  - name: expedia
+    description: Expedia MCP server (destinations, property search, hotel booking)
+    path: expedia/main.py
+    enabled: true
+    port: 8877
+    environment: expedia
+    env:
+      PORT: ""
+      EXPEDIA_API_URL: "http://127.0.0.1:${EXPEDIA_API_PORT}"
+      EXPEDIA_USER_ACCESS_TOKEN: ""
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Booking.com MCP Server (Local Sandbox)
+  - name: booking
+    description: Booking.com MCP server (destinations, property search, hotel booking)
+    path: booking/main.py
+    enabled: true
+    port: 8878
+    environment: booking
+    env:
+      PORT: ""
+      BOOKING_API_URL: "http://127.0.0.1:${BOOKING_API_PORT}"
+      BOOKING_USER_ACCESS_TOKEN: ""
+
+  # WhatsApp MCP Server
+  - name: whatsapp
+    description: WhatsApp MCP server backed by local PostgreSQL + FastAPI sandbox
+    path: whatsapp/main.py
+    enabled: true
+    port: 8865
+    environment: whatsapp
+    env:
+      PORT: ""
+      WHATSAPP_API_URL: "http://127.0.0.1:${WHATSAPP_API_PORT}"
+      WHATSAPP_USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]
+
+  # Google Docs MCP Server
+  - name: googledocs
+    description: Google Docs MCP server backed by local PostgreSQL + FastAPI sandbox
+    path: googledocs/main.py
+    enabled: true
+    port: 8866
+    environment: googledocs
+    env:
+      PORT: ""
+      GOOGLEDOCS_API_URL: "http://127.0.0.1:${GOOGLEDOCS_API_PORT}"
+      GOOGLEDOCS_USER_ACCESS_TOKEN: ""  # Set per-task in config.yaml
+    transport: http
+    command: ["uv", "run", "python", "main.py"]

dt_arena/envs/arxiv/docker-compose-hub.yml

@@ -0,0 +1,31 @@
+services:
+  arxiv-api:
+    image: decodingtrustagent/arxiv:api-latest
+    restart: unless-stopped
+    ports:
+      - "${ARXIV_API_PORT:-8034}:8033"
+    volumes:
+      - arxiv_data:/app/data
+    environment:
+      - DATABASE_URL=sqlite:////app/data/arxiv.db
+    command: >
+      sh -c "python sandbox_init.py && python main.py"
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8033/health')"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  arxiv-ui:
+    image: decodingtrustagent/arxiv:ui-latest
+    restart: unless-stopped
+    ports:
+      - "${ARXIV_UI_PORT:-8058}:80"
+    depends_on:
+      - arxiv-api
+    environment:
+      - NODE_ENV=production
+      - REACT_APP_API_URL=http://localhost:${ARXIV_API_PORT:-8034}
+
+volumes:
+  arxiv_data:

dt_arena/envs/arxiv/docker-compose.yml

@@ -0,0 +1,36 @@
+services:
+  arxiv-api:
+    build:
+      context: ./arxiv_api
+      dockerfile: Dockerfile
+    restart: unless-stopped
+    ports:
+      - "${ARXIV_API_PORT:-8034}:8033"
+    volumes:
+      - arxiv_data:/app/data
+    environment:
+      - DATABASE_URL=sqlite:////app/data/arxiv.db
+    command: >
+      sh -c "python sandbox_init.py && python main.py"
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8033/health')"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  arxiv-ui:
+    build:
+      context: ./arxiv_ui
+      dockerfile: Dockerfile
+    restart: unless-stopped
+    ports:
+      - "${ARXIV_UI_PORT:-8058}:80"
+    depends_on:
+      - arxiv-api
+    environment:
+      - NODE_ENV=production
+      - REACT_APP_API_URL=http://localhost:${ARXIV_API_PORT:-8034}
+
+volumes:
+  arxiv_data:
+