docker/sbx-kit-code-server:1.0.0

schemaVersion: "3"
displayName: code-server (web VS Code) with Claude Code
description: Runs code-server on port 8080, opened on the sandbox workspace, with the Claude Code VS Code extension preinstalled. Pair with the built-in claude agent so the extension inherits the sandbox's Anthropic credentials.
version: 1.0.0
kind: mixin
provides:
    - code-server
requires:
    - claude
capabilities:
    - type: com.docker.sandbox/port@1
      config:
        container: 8080
        name: code-server
        transport: tcp
    - type: com.docker.sandbox/network-policy@1
      config:
        install:
            allow:
                - code-server.dev
                - raw.githubusercontent.com
                - github.com
                - api.github.com
                - objects.githubusercontent.com
                - release-assets.githubusercontent.com
                - open-vsx.org
                - openvsx.eclipsecontent.org
        runtime:
            allow:
                - open-vsx.org
                - openvsx.eclipsecontent.org
    - type: com.docker.sandbox/lifecycle@1
      config:
        install:
            - command: curl -fsSL https://code-server.dev/install.sh | sh
              description: Install code-server via the upstream install script
            - command: code-server --install-extension anthropic.claude-code
              description: Pre-install the Claude Code extension from open-vsx so you have a native chat panel that talks to the claude agent's credentials
              user: "1000"
            - command: |
                set -eu
                ws="${WORKSPACE_DIR:-/}"
                esc=$(printf '%s' "$ws" | sed "s/'/'\\\\''/g")
                mkdir -p /home/agent/.local/bin
                printf '%s\n' '#!/bin/sh' \
                  "exec code-server --bind-addr 0.0.0.0:8080 --auth none '$esc'" \
                  > /home/agent/.local/bin/start-code-server.sh
                chmod 0755 /home/agent/.local/bin/start-code-server.sh
              description: Startup wrapper with the workspace path baked in at sandbox create
              env:
                - WORKSPACE_DIR
              user: "1000"
        startup:
            - background: true
              command:
                - sh
                - -c
                - exec /home/agent/.local/bin/start-code-server.sh > /tmp/code-server.log 2>&1
              description: Start code-server in the background, opened on the primary workspace
              user: "1000"