Add Linux Docker socket support and fix OAuth credential discovery

- Add rootless Docker socket paths ($XDG_RUNTIME_DIR/docker.sock, /run/user/<uid>/docker.sock)
- Add Docker Desktop for Linux socket path (~/.docker/desktop/docker.sock)
- Add Colima socket paths for macOS (~/.colima/default/docker.sock, ~/.docker/run/docker.sock)
- Fix OAuth credential detection to find ~/.claude/.credentials.json with claudeAiOauth key
- Exclude actively-written directories when copying .claude config to prevent tar errors

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: jlaustill

src/container.ts

@@ -790,7 +790,20 @@ exec claude --dangerously-skip-permissions' > /start-claude.sh && \\
         const tarFlags = getTarFlags();
         // On macOS, also exclude extended attributes that cause Docker issues
         const additionalFlags = (process.platform as string) === "darwin" ? "--no-xattrs --no-fflags" : "";
-        const combinedFlags = `${tarFlags} ${additionalFlags}`.trim();
+        // Exclude directories that are large, temporary, or actively written to
+        const excludeFlags = [
+          "--exclude=.claude/debug",
+          "--exclude=.claude/cache",
+          "--exclude=.claude/file-history",
+          "--exclude=.claude/session-env",
+          "--exclude=.claude/tasks",
+          "--exclude=.claude/paste-cache",
+          "--exclude=.claude/shell-snapshots",
+          "--exclude=.claude/telemetry",
+          "--exclude=.claude/todos",
+          "--exclude=.claude/statsig",
+        ].join(" ");
+        const combinedFlags = `${tarFlags} ${additionalFlags} ${excludeFlags}`.trim();
         execSync(
           `tar -cf "${tarFile}" ${combinedFlags} -C "${os.homedir()}" .claude`,
           {

src/credentials.ts

@@ -85,25 +85,31 @@ export class CredentialManager {
   }
 
   private async findOAuthToken(): Promise<string | null> {
-    // Check common locations for Claude OAuth tokens
+    // Check common locations for Claude OAuth tokens/credentials
     const possiblePaths = [
+      // Linux/cross-platform credential locations
+      path.join(os.homedir(), ".claude", ".credentials.json"),
       path.join(os.homedir(), ".claude", "auth.json"),
+      path.join(os.homedir(), ".config", "claude", "auth.json"),
+      // macOS credential locations
       path.join(
         os.homedir(),
         "Library",
         "Application Support",
         "Claude",
         "auth.json",
       ),
-      path.join(os.homedir(), ".config", "claude", "auth.json"),
     ];
 
     for (const authPath of possiblePaths) {
       try {
         const content = await fs.readFile(authPath, "utf-8");
         const auth = JSON.parse(content);
-        if (auth.access_token) {
-          return auth.access_token;
+        // Check various token field names used by Claude Code
+        if (auth.claudeAiOauth || auth.accessToken || auth.access_token) {
+          // Return indicator that OAuth credentials exist
+          // The actual credentials will be copied via _copyClaudeConfig
+          return "oauth-credentials-found";
         }
       } catch {
         // Continue checking other paths

src/docker-config.ts

@@ -1,12 +1,13 @@
 import * as fs from "fs";
 import * as path from "path";
+import * as os from "os";
 
 interface DockerConfig {
   socketPath?: string;
 }
 
 /**
- * Detects whether Docker or Podman is available and returns appropriate configuration
+ * Detects whether Docker, Colima, or Podman is available and returns appropriate configuration
  * @param customSocketPath - Optional custom socket path from configuration
  */
 export function getDockerConfig(customSocketPath?: string): DockerConfig {
@@ -22,9 +23,21 @@ export function getDockerConfig(customSocketPath?: string): DockerConfig {
 
   // Common socket paths to check
   const socketPaths = [
-    // Docker socket paths
+    // Docker standard socket paths
     "/var/run/docker.sock",
 
+    // Docker rootless socket paths (Linux)
+    process.env.XDG_RUNTIME_DIR &&
+      path.join(process.env.XDG_RUNTIME_DIR, "docker.sock"),
+    `/run/user/${process.getuid?.() || 1000}/docker.sock`,
+
+    // Docker Desktop for Linux
+    path.join(os.homedir(), ".docker", "desktop", "docker.sock"),
+
+    // Colima socket paths (macOS)
+    path.join(os.homedir(), ".colima", "default", "docker.sock"),
+    path.join(os.homedir(), ".docker", "run", "docker.sock"),
+
     // Podman rootless socket paths
     process.env.XDG_RUNTIME_DIR &&
       path.join(process.env.XDG_RUNTIME_DIR, "podman", "podman.sock"),