Add devcontainer for sandboxed Claude Code development

Provides a containerized dev environment so Claude Code can be run with
--dangerously-skip-permissions while confining the blast radius to the
container's filesystem.

- Base on Microsoft's digest-pinned devcontainers/base:ubuntu24.04, which
  ships a non-root `vscode` user (UID 1000) with passwordless sudo.
- Install the project toolchain via single-user Nix + direnv/nix-direnv,
  matching the project's flake (python, uv, make, wabt, K Framework).
- Install the Claude Code CLI to a per-user npm prefix.
- init: true for proper PID 1 / zombie reaping.
- Share the host git identity read-only and expose it through a writable
  GIT_CONFIG_GLOBAL (~/.gitconfig.local) so every user can git commit and
  run git config inside the container; openssh-client enables SSH remotes
  via the forwarded host SSH agent.

Claude Code runs in its normal permission-prompting mode by default; users
opt into bypass per session with --dangerously-skip-permissions.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: RaoulSchaffranek

.devcontainer/Dockerfile

@@ -0,0 +1,75 @@
+# Microsoft's official devcontainer base (Ubuntu 24.04), pinned by digest for
+# reproducibility. It ships a non-root `vscode` user (UID 1000) with passwordless
+# sudo plus the common dev tools (git, curl, sudo, ca-certificates, openssh-client),
+# so no manual user creation is needed here.
+FROM mcr.microsoft.com/devcontainers/base:ubuntu24.04@sha256:4bcb1b466771b1ba1ea110e2a27daea2f6093f9527fb75ee59703ec89b5561cb
+
+ENV DEBIAN_FRONTEND=noninteractive \
+    LANG=C.UTF-8 \
+    LC_ALL=C.UTF-8
+
+# The base already provides git/sudo/ca-certificates/curl/openssh-client; we only
+# strictly need xz-utils for the Nix installer tarball. The rest are listed
+# defensively (apt is idempotent and skips already-present packages).
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        git sudo ca-certificates curl less xz-utils openssh-client \
+    && rm -rf /var/lib/apt/lists/*
+
+# Pre-create /nix owned by the vscode user and a system-wide nix.conf. Two things to note:
+#   - Sandboxing relies on CAP_SYS_ADMIN (sethostname etc.), which container
+#     builds don't grant — without `sandbox = false` both the Nix self-install
+#     and every subsequent `nix profile install` fail.
+#   - The K Framework binary caches let `kup install k` pull prebuilt K binaries
+#     instead of compiling from source. Single-user Nix (vscode owns /nix) honors
+#     these substituters from the system config, so no per-user nix.conf needed.
+RUN mkdir -m 0755 /nix \
+    && chown vscode:vscode /nix \
+    && mkdir -p /etc/nix \
+    && printf '%s\n' \
+        'sandbox = false' \
+        'filter-syscalls = false' \
+        'experimental-features = nix-command flakes' \
+        'substituters = https://cache.nixos.org https://k-framework.cachix.org https://k-framework-binary.cachix.org' \
+        'trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= k-framework.cachix.org-1:jeyMXB2h28gpNRjuVkehg+zLj62ma1RnyyopA/20yFE= k-framework-binary.cachix.org-1:pJedQ8iG19BW3v/DMMmiRVtwRBGO3fyMv2Ws0OpBADs=' \
+        > /etc/nix/nix.conf
+
+USER vscode
+WORKDIR /home/vscode
+
+# Single-user Nix install — the variant that works in containers without
+# systemd / a running daemon.
+RUN curl -fsSL https://nixos.org/nix/install | sh -s -- --no-daemon --no-channel-add
+
+ENV PATH=/home/vscode/.nix-profile/bin:/home/vscode/.npm-global/bin:$PATH
+
+# Pin the `nixpkgs` flake to nixos-25.05 (matches the project's flake.nix), then
+# install only the container-level bootstrap/runtime tooling via Nix:
+#   - direnv + nix-direnv → auto-load and cache the flake's `nix develop` shell on
+#                           entry to /workspace; this is what actually provides the
+#                           project toolchain (python, uv, make, wabt, K Framework),
+#                           so those live in flake.nix's devShell, not here.
+#   - nodejs_22           → host for the Claude Code CLI (run as `claude` from
+#                           anywhere, so it stays globally on PATH, not in the shell)
+RUN . /home/vscode/.nix-profile/etc/profile.d/nix.sh \
+    && nix registry add nixpkgs github:NixOS/nixpkgs/nixos-25.05 \
+    && nix profile install \
+        nixpkgs#direnv \
+        nixpkgs#nix-direnv \
+        nixpkgs#nodejs_22
+
+# Claude Code CLI — installed to a per-user prefix so root isn't required.
+RUN . /home/vscode/.nix-profile/etc/profile.d/nix.sh \
+    && npm config set prefix /home/vscode/.npm-global \
+    && npm install -g @anthropic-ai/claude-code
+
+# Wire up nix-direnv, then hook direnv into interactive shells. Order matters:
+# Nix must be sourced before the direnv hook so the profile PATH is in place when
+# direnv evaluates the flake.
+RUN mkdir -p /home/vscode/.config/direnv \
+    && echo 'source $HOME/.nix-profile/share/nix-direnv/direnvrc' > /home/vscode/.config/direnv/direnvrc \
+    && printf '%s\n' \
+        '. /home/vscode/.nix-profile/etc/profile.d/nix.sh' \
+        'eval "$(direnv hook bash)"' \
+        >> /home/vscode/.bashrc
+
+WORKDIR /workspace

.devcontainer/devcontainer.json

@@ -0,0 +1,27 @@
+{
+  "name": "komet_node",
+  "build": {
+    "dockerfile": "Dockerfile"
+  },
+  "remoteUser": "vscode",
+  "workspaceFolder": "/workspace",
+  "workspaceMount": "source=${localWorkspaceFolder},target=/workspace,type=bind",
+  "init": true,
+  "mounts": [
+    "source=claude-code-config-${devcontainerId},target=/home/vscode/.claude,type=volume",
+    "source=${localEnv:HOME}/.gitconfig,target=/home/vscode/.gitconfig,type=bind,readonly"
+  ],
+  "containerEnv": {
+    "CLAUDE_CONFIG_DIR": "/home/vscode/.claude",
+    "GIT_CONFIG_GLOBAL": "/home/vscode/.gitconfig.local"
+  },
+  "postCreateCommand": "sudo chown -R vscode:vscode /home/vscode/.claude && bash .devcontainer/setup-git.sh && direnv allow /workspace && nix develop /workspace --command bash -c 'uv sync --frozen'",
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "anthropic.claude-code",
+        "mkhl.direnv"
+      ]
+    }
+  }
+}

.devcontainer/setup-git.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+# Wire up a writable global git config that inherits the host user's identity.
+#
+# devcontainer.json bind-mounts the host ~/.gitconfig read-only at
+# /home/vscode/.gitconfig and sets GIT_CONFIG_GLOBAL=/home/vscode/.gitconfig.local.
+# Git therefore writes global config to the (writable) .gitconfig.local while
+# still reading the host's name/email/aliases through the include set up below.
+#
+# The result: every user of this container can `git commit` with their own host
+# identity and run `git config --global ...` inside the container, without the
+# EBUSY breakage a directly-writable bind mount over ~/.gitconfig would cause.
+#
+# Adapted from trailofbits/claude-code-devcontainer's post_install.py. Invoked
+# from devcontainer.json's postCreateCommand. Idempotent — safe to re-run.
+set -euo pipefail
+
+host_gitconfig="/home/vscode/.gitconfig"
+local_gitconfig="/home/vscode/.gitconfig.local"
+
+if [ -f "${host_gitconfig}" ]; then
+    # Host provided a ~/.gitconfig (bind-mounted as a regular file): inherit it.
+    printf '[include]\n\tpath = %s\n' "${host_gitconfig}" > "${local_gitconfig}"
+    echo "setup-git: global config includes host identity from ${host_gitconfig}"
+else
+    # No host ~/.gitconfig — the missing bind source is materialized as an empty
+    # directory, which must NOT be included. Leave an empty writable global.
+    : > "${local_gitconfig}"
+    echo "setup-git: no host ~/.gitconfig found; created empty ${local_gitconfig}"
+    echo "setup-git: set your identity with 'git config --global user.name ...' / user.email"
+fi