chore(deps-dev): bump @types/vscode from 1.108.1 to 1.109.0 in /vsix (#75)

* chore(deps-dev): bump @types/vscode from 1.108.1 to 1.109.0 in /vsix

Bumps [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) from 1.108.1 to 1.109.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode)

---
updated-dependencies:
- dependency-name: "@types/vscode"
  dependency-version: 1.109.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* perf(ci): skip VS Code extensions and postCreateCommand in CI

Strip customizations.vscode.extensions, postCreateCommand, and waitFor
from devcontainer.json before running devcontainers/ci to speed up
the Build Dev Container step.

* perf: remove VS Code extensions from devcontainer.json

- Remove extensions array from customizations.vscode (not needed)
- Simplify CI strip step to only remove postCreateCommand and waitFor

* refactor(ci): remove strip step, simplify devcontainer config

* perf: remove unnecessary sudo chown from post-create.sh

* perf(docker): remove unnecessary chown layer (saves 739MB)

The base image already has /usr/local/cargo and /usr/local/rustup
owned by vscode:rustlang. CI uses workspace-mounted CARGO_HOME,
so this chown was creating a redundant 739MB layer.

* perf(docker): switch to rust:1-bookworm base image (saves ~1.2GB)

- Switch FROM mcr.microsoft.com/devcontainers/rust to rust:1-bookworm
- Add common-utils feature to devcontainer.json to handle vscode user creation
- Restore sudo chown in post-create.sh for local dev permissions

* fix(ci): robust CI detection and vscode engine update

- Update post-create.sh to check GITHUB_ACTIONS env var (fixes CI skipping)
- Update engines.vscode to ^1.109.0 to match @types/vscode 1.109.0 (fixes local dev npm install)

* fix(docker): install rustfmt and clippy components

The official rust:1-bookworm image does not include these by default.

* feat(docker): add ripgrep and vim

Useful tools for development inside the container.

* perf(docker): clean up apt cache

Reduce image size by removing /var/lib/apt/lists/* after install.

* refactor(docker): combine cargo-binstall installation and usage

Reduces layers and clarifies dependency.

* perf(docker): switch to rust:1-slim-bookworm

Significantly reduce image size (~63% reduction) by using slim base image.

* chore(docker): remove outdated comment

* docs: add dev container performance requirement

Specify that dev container images should be kept small.

* docs: remove accidental line numbers

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: sonesuke <iamsonesuke@gmail.com>

Author: dependabot[bot]

.devcontainer/Dockerfile

@@ -1,37 +1,30 @@
-FROM mcr.microsoft.com/devcontainers/rust:1-bookworm
+FROM rust:1-slim-bookworm
 
 # Install Node.js and other dependencies as root
 RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
     && apt-get -y install --no-install-recommends \
     curl \
     git \
     pkg-config \
-    libssl-dev
+    libssl-dev \
+    ripgrep \
+    vim \
+    && apt-get clean -y && rm -rf /var/lib/apt/lists/*
 
 # Install Node.js LTS manually
 RUN curl -fsSL https://deb.nodesource.com/setup_lts.x | bash - \
-    && apt-get install -y nodejs
-
-# Install vsce for VSIX packaging (global install needs root)
-RUN npm install -g @vscode/vsce
-
-# Ensure vscode user has ownership of cargo and rustup directories before switching
-RUN chown -R vscode:vscode /usr/local/cargo /usr/local/rustup
-
-# Switch to vscode user
-USER vscode
+    && apt-get install -y nodejs \
+    && apt-get clean -y && rm -rf /var/lib/apt/lists/*
 
 # Ensure pre-installed tools are always in PATH even if CARGO_HOME is overridden at runtime
 ENV PATH=/usr/local/cargo/bin:$PATH
 
-# No pre-build (cache is disabled by user request)
 
-# Install cargo-binstall as vscode
-RUN curl -L --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/cargo-bins/cargo-binstall/main/install-from-binstall-release.sh | bash
 
-# Install cargo tools and components as vscode
-RUN rustup component add llvm-tools-preview \
+# Install cargo-binstall and other rust tools as root (installs to /usr/local/cargo/bin)
+RUN curl -L --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/cargo-bins/cargo-binstall/main/install-from-binstall-release.sh | bash \
+    && rustup component add rustfmt clippy llvm-tools-preview \
     && cargo binstall -y cargo-audit cargo-llvm-cov
 
-# Install Claude CLI as vscode
+# Install Claude CLI as root
 RUN curl -fsSL https://claude.ai/install.sh | bash

.devcontainer/devcontainer.json

@@ -4,22 +4,18 @@
         "dockerfile": "Dockerfile",
         "context": ".."
     },
-    "features": {},
-    "remoteUser": "vscode",
-    "containerUser": "vscode",
-    "remoteEnv": {
-        "Z_AI_API_KEY": "${localEnv:Z_AI_API_KEY}",
-        "CI": "${localEnv:CI}"
+    "features": {
+        "ghcr.io/devcontainers/features/common-utils:2": {
+            "installZsh": "true",
+            "username": "vscode",
+            "userUid": "1000",
+            "userGid": "1000",
+            "upgradePackages": "false"
+        },
+        "ghcr.io/devcontainers/features/git:1": {}
     },
     "customizations": {
-        "vscode": {
-            "extensions": [
-                "rust-lang.rust-analyzer",
-                "tamasfe.even-better-toml",
-                "vadimcn.vscode-lldb",
-                "dbaeumer.vscode-eslint"
-            ]
-        }
+        "vscode": {}
     },
     "postCreateCommand": "bash .devcontainer/post-create.sh",
     "waitFor": "postCreateCommand"

.devcontainer/post-create.sh

@@ -1,10 +1,10 @@
 #!/bin/bash
 set -e
 
-# Fix permissions for CI environment where volume mounts may be root-owned
-sudo chown -R vscode:vscode /usr/local/cargo
+if [ -z "$CI" ] && [ -z "$GITHUB_ACTIONS" ]; then
+    # Fix permissions for local development where CARGO_HOME is root-owned by the base image
+    sudo chown -R vscode:vscode /usr/local/cargo
 
-if [ -z "$CI" ]; then
     echo "Installing VSIX dependencies..."
     npm install --prefix vsix
     (cd vsix && npx vsce package -o ../docgraph.vsix)

doc/architecture/design/development-norm.md

@@ -22,6 +22,12 @@ Defined in [.devcontainer/devcontainer.json](../../../.devcontainer/devcontainer
 - **Linting**: `cargo clippy` (Rust), `npm run lint` (VSIX).
 - **Security**: `cargo audit`.
 
+### Performance
+
+- **Image Size**: The Dev Container image should be kept as small as possible to ensure fast CI/CD execution and minimize local disk usage.
+  - Use minimal base images (e.g., `slim` variants).
+  - Remove unnecessary build artifacts and caches (e.g., `apt-get clean`).
+
 ---
 
 <a id="CC_CONVENTIONAL_COMMITS"></a>

vsix/package-lock.json

@@ -10,7 +10,7 @@
   },
   "license": "MIT",
   "engines": {
-    "vscode": "^1.75.0"
+    "vscode": "^1.109.0"
   },
   "categories": [
     "Programming Languages",
@@ -52,7 +52,7 @@
   "devDependencies": {
     "@biomejs/biome": "2.3.14",
     "@types/node": "25.x",
-    "@types/vscode": "^1.75.0",
+    "@types/vscode": "^1.109.0",
     "@vscode/vsce": "^3.7.1",
     "typescript": "^5.9.3"
   },