@getmonoceros/workbench 1.30.0 → 1.31.0

package/bundled-components/languages/dotnet/component.yml

@@ -6,3 +6,8 @@ language:
   feature: ghcr.io/devcontainers/features/dotnet:2
   defaultVersion: latest
   versions: [latest, lts, 10.0, 9.0, 8.0, 7.0, 6.0]
+  # No single C# extension on both registries: ms-dotnettools.csharp is
+  # MS-Marketplace-only, muhammad-sammy.csharp is Open-VSX-only. Listing
+  # both lets VS Code and VSCodium each pick the one its registry has and
+  # silently skip the other. See ADR 0016.
+  vscodeExtensions: [ms-dotnettools.csharp, muhammad-sammy.csharp]

package/bundled-components/languages/go/component.yml

@@ -6,3 +6,4 @@ language:
   feature: ghcr.io/devcontainers/features/go:1
   defaultVersion: latest
   versions: [latest, 1.24, 1.23]
+  vscodeExtensions: [golang.go]

package/bundled-components/languages/java/component.yml

@@ -6,6 +6,7 @@ language:
   feature: ghcr.io/devcontainers/features/java:1
   defaultVersion: latest
   versions: [latest, 21, 17, 11, 8]
+  vscodeExtensions: [vscjava.vscode-java-pack]
 options:
   installMaven:
     type: boolean

package/bundled-components/languages/python/component.yml

@@ -6,3 +6,6 @@ language:
   feature: ghcr.io/devcontainers/features/python:1
   defaultVersion: latest
   versions: [latest, 3.12, 3.11, 3.10, 3.9, 3.8]
+  # Pylance is MS-Marketplace-only (not on Open VSX); VSCodium silently
+  # skips it and keeps ms-python.python. See ADR 0016.
+  vscodeExtensions: [ms-python.python, ms-python.vscode-pylance]

package/bundled-components/languages/rust/component.yml

@@ -6,3 +6,4 @@ language:
   feature: ghcr.io/devcontainers/features/rust:1
   defaultVersion: latest
   versions: [latest, 1.87]
+  vscodeExtensions: [rust-lang.rust-analyzer]

package/bundled-components/services/keycloak/component.yml

@@ -0,0 +1,46 @@
+id: keycloak
+category: service
+displayName: Keycloak
+description: 'Keycloak identity & access management (OAuth2 / OpenID Connect / SAML) for local dev. Reachable in-container as host `keycloak`. Starts in dev mode and imports realm JSON from a repo you mount; see the usage notes.'
+documentationURL: https://www.keycloak.org/
+service:
+  image: quay.io/keycloak/keycloak:26.6
+  defaultPort: 8080
+  # Dev mode + realm import. The Keycloak image has no auto-start default,
+  # so a command is mandatory. `--import-realm` reads every *.json from
+  # /opt/keycloak/data/import at startup (a no-op if the dir is empty).
+  command: start-dev --import-realm
+  # Starts in a host-side second wave AFTER the repo clone (ADR 0025), so a
+  # mounted realm.json / theme from the project is present at boot. No
+  # dataMount: the dev H2 database is ephemeral and re-seeds from the
+  # mounted realm JSON on every apply. No healthcheck: the service is not
+  # in runServices (nothing gates on it) and the image ships no curl.
+  deferStart: true
+  # Rendered as a COMMENTED volumes: scaffold in the yml (the catalog
+  # can't know your repo path). Uncomment + edit to mount realm/theme.
+  exampleVolumes:
+    - projects/<app>/keycloak/realm.json:/opt/keycloak/data/import/<app>.json:ro
+    - projects/<app>/keycloak/theme:/opt/keycloak/themes/<app>
+  connectionEnv:
+    URL: http://${host}:${port}
+    HOST: ${host}
+    PORT: ${port}
+    USER: ${KC_BOOTSTRAP_ADMIN_USERNAME}
+    PASSWORD: ${KC_BOOTSTRAP_ADMIN_PASSWORD}
+options:
+  KC_BOOTSTRAP_ADMIN_USERNAME:
+    type: string
+    default: admin
+    surface: env
+  KC_BOOTSTRAP_ADMIN_PASSWORD:
+    type: string
+    default: admin
+    surface: env
+usageNotes:
+  - 'Realm import: keep your realm export(s) in the repo and bind-mount them into `/opt/keycloak/data/import`. Add an entry to the service `volumes:`, e.g. `projects/<app>/keycloak/realm.json:/opt/keycloak/data/import/<app>.json:ro`. With no mount, Keycloak starts with an empty realm.'
+  - 'Multiple realms from different projects: one file-mount per realm to a distinct target name (two directories cannot mount onto the same target). Keycloak imports every *.json in the import dir.'
+  - 'Custom theme: bind-mount it into `/opt/keycloak/themes/<name>`, e.g. `projects/<app>/keycloak/theme:/opt/keycloak/themes/<app>`, then set `loginTheme`/`accountTheme` to `<name>` in the realm. In dev mode themes are not cached, so edits show on reload.'
+  - 'Paths are relative to the container root (`projects/<app>/...`); Monoceros resolves the bind source for you. Do not turn off the deferred start while mounting a repo file - the file would not exist at boot.'
+  - 'Import is one-way: admin-UI changes live in the Keycloak database, not the file. To keep them, export the realm and overwrite the committed JSON.'
+briefing:
+  - text: 'Keycloak (identity & access management) runs as service `keycloak`. Reach it at `$KEYCLOAK_URL` (admin user `$KEYCLOAK_USER` / `$KEYCLOAK_PASSWORD`). Realms come from JSON files the project mounts into `/opt/keycloak/data/import`; the database is ephemeral and re-seeds from them on each apply.'