create-claude-workspace 1.1.151 → 2.0.0

package/dist/template/.claude/docker/Dockerfile

@@ -1,54 +0,0 @@
-FROM node:latest
-
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends git ca-certificates curl gosu jq && \
-    apt-get clean && rm -rf /var/lib/apt/lists/*
-
-
-# Non-root user — Claude Code refuses --dangerously-skip-permissions as root
-RUN apt-get update && apt-get install -y --no-install-recommends sudo gpg && \
-    apt-get clean && rm -rf /var/lib/apt/lists/* && \
-    useradd -m -s /bin/bash claude && \
-    echo 'claude ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/claude && \
-    mkdir -p /home/claude/.claude && \
-    chown -R claude:claude /home/claude
-
-# Install gh (GitHub CLI) from official apt repo
-RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
-      | gpg --dearmor -o /usr/share/keyrings/githubcli-archive-keyring.gpg && \
-    echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
-      > /etc/apt/sources.list.d/github-cli.list && \
-    apt-get update && apt-get install -y --no-install-recommends gh && \
-    apt-get clean && rm -rf /var/lib/apt/lists/*
-
-# Install glab (GitLab CLI) — latest .deb from GitLab releases
-RUN GLAB_VER=$(curl -fsSL "https://gitlab.com/api/v4/projects/34675721/releases/permalink/latest" \
-      | node -pe 'JSON.parse(require("fs").readFileSync("/dev/stdin","utf8")).tag_name.slice(1)') && \
-    DEB_ARCH=$(dpkg --print-architecture) && \
-    curl -fsSL "https://gitlab.com/gitlab-org/cli/-/releases/v${GLAB_VER}/downloads/glab_${GLAB_VER}_linux_${DEB_ARCH}.deb" \
-      -o /tmp/glab.deb && \
-    dpkg -i /tmp/glab.deb && rm /tmp/glab.deb
-
-# Install bun (system-wide via npm — reliable PATH, works for non-root claude user)
-RUN npm install -g bun
-
-# Install Claude Code natively as the claude user
-RUN gosu claude bash -c 'curl -fsSL https://claude.ai/install.sh | bash'
-ENV PATH="/home/claude/.local/bin:$PATH"
-
-# Pre-configure Claude to skip first-run onboarding (theme, permissions prompts)
-RUN echo '{"hasCompletedOnboarding":true,"theme":"dark"}' > /home/claude/.claude.json && \
-    chown claude:claude /home/claude/.claude.json
-
-# Git config for commits inside container
-RUN git config --system user.name "Claude Code" && \
-    git config --system user.email "claude@localhost"
-
-WORKDIR /project
-
-COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
-# Fix Windows CRLF line endings and set executable
-RUN sed -i 's/\r$//' /usr/local/bin/docker-entrypoint.sh && \
-    chmod +x /usr/local/bin/docker-entrypoint.sh
-
-ENTRYPOINT ["docker-entrypoint.sh", "bash"]

package/dist/template/.claude/docker/docker-compose.yml

@@ -1,22 +0,0 @@
-services:
-  claude:
-    build: .
-    init: true
-    stop_grace_period: 3s
-    stdin_open: true
-    tty: true
-    volumes:
-      - ../..:/project
-      - claude-home:/home/claude/.claude
-    environment:
-      - ANTHROPIC_API_KEY
-      - NPM_TOKEN
-      - NPM_REGISTRY
-      - GH_TOKEN
-      - GITLAB_TOKEN
-      - FIGMA_API_KEY
-      - CLAUDE_DOCKER=1
-      - NODE_OPTIONS
-
-volumes:
-  claude-home:

package/dist/template/.claude/docker/docker-entrypoint.sh

@@ -1,101 +0,0 @@
-#!/bin/bash
-set +x
-
-# Strip \r from all env vars — Windows .env files use \r\n line endings,
-# and a trailing \r in tokens causes "invalid header field value" HTTP errors.
-# This is a blanket fix that covers all tokens (GITLAB_TOKEN, GH_TOKEN, NPM_TOKEN, etc.)
-while IFS='=' read -r name value; do
-  if [[ -n "$name" && "${!name}" == *$'\r'* ]]; then
-    export "$name"="${!name//$'\r'/}"
-  fi
-done < <(env)
-
-# Also convert project .env to LF so that `source .env` inside the container works correctly
-if [[ -f /project/.env ]]; then
-  sed -i 's/\r$//' /project/.env
-fi
-
-# npm auth — create .npmrc from env var if set
-if [[ -n "${NPM_TOKEN:-}" ]]; then
-  npm_registry="${NPM_REGISTRY:-registry.npmjs.org}"
-  echo "//${npm_registry}/:_authToken=${NPM_TOKEN}" > /home/claude/.npmrc
-  chown claude:claude /home/claude/.npmrc
-fi
-
-# Restore .claude.json if missing (volume only mounts $HOME/.claude/, not $HOME/.claude.json).
-# First try backup from previous session, then fall back to onboarding-skip defaults.
-if [[ ! -f /home/claude/.claude.json ]]; then
-  backup=$(find /home/claude/.claude/backups -name '.claude.json.backup.*' 2>/dev/null | sort -V | tail -1)
-  if [[ -n "$backup" ]]; then
-    cp "$backup" /home/claude/.claude.json
-  else
-    echo '{"hasCompletedOnboarding":true,"theme":"dark"}' > /home/claude/.claude.json
-  fi
-  chown claude:claude /home/claude/.claude.json
-fi
-
-# Ensure claude user owns its home dir (volume mounts come in as root)
-chown claude:claude /home/claude
-chown -R claude:claude /home/claude/.claude 2>/dev/null || true
-
-# Fix git "dubious ownership" — /project is mounted from host with different uid
-git config --global --add safe.directory /project
-
-# Git platform auth — configure gh/glab + git credentials from env vars if set
-if [[ -n "${GH_TOKEN:-}" ]]; then
-  echo "GH_TOKEN detected — GitHub CLI authenticated."
-  git config --global credential.helper store
-  echo "https://oauth2:${GH_TOKEN}@github.com" > /home/claude/.git-credentials
-  chown claude:claude /home/claude/.git-credentials
-fi
-if [[ -n "${GITLAB_TOKEN:-}" ]]; then
-  echo "GITLAB_TOKEN detected — GitLab CLI authenticated."
-  git config --global credential.helper store
-  echo "https://oauth2:${GITLAB_TOKEN}@gitlab.com" >> /home/claude/.git-credentials
-  chown claude:claude /home/claude/.git-credentials
-  # Configure glab auth (glab reads GITLAB_TOKEN env var automatically,
-  # but explicit login ensures 'glab auth status' reports correctly)
-  gosu claude glab auth login --hostname gitlab.com --token "$GITLAB_TOKEN" 2>/dev/null || true
-fi
-
-# Package manager configs — docker-run.mts mounts host ~/.npmrc and ~/.bunfig.toml
-# automatically. As fallback, copy project-level configs if host ones weren't mounted.
-if [[ ! -f /home/claude/.bunfig.toml ]] && [[ -f /project/.bunfig.toml ]]; then
-  cp /project/.bunfig.toml /home/claude/.bunfig.toml
-  chown claude:claude /home/claude/.bunfig.toml
-  echo "Copied project .bunfig.toml to claude home."
-fi
-
-# Node.js heap limit — auto-detect from available memory if not explicitly set.
-# Uses 75% of container memory for Node.js heap (leaves room for OS, git, native tools).
-# Override: set NODE_OPTIONS="--max-old-space-size=XXXX" in .env or docker-compose environment.
-if [[ -z "${NODE_OPTIONS:-}" ]]; then
-  mem_kb=$(grep MemTotal /proc/meminfo 2>/dev/null | awk '{print $2}')
-  if [[ -n "$mem_kb" && "$mem_kb" -gt 0 ]]; then
-    heap_mb=$(( mem_kb * 3 / 4 / 1024 ))
-    # Floor at 2 GB, no ceiling — use whatever the host gives us
-    [[ "$heap_mb" -lt 2048 ]] && heap_mb=2048
-    export NODE_OPTIONS="--max-old-space-size=${heap_mb}"
-    echo "Node.js heap auto-configured: ${heap_mb} MB (75% of ${mem_kb} KB available)"
-  fi
-fi
-
-# Auth pre-check — fail fast if no credentials available
-if [[ -z "${ANTHROPIC_API_KEY:-}" ]]; then
-  creds="/home/claude/.claude/.credentials.json"
-  if [[ ! -f "$creds" ]] || [[ ! -s "$creds" ]]; then
-    echo ""
-    echo "ERROR: No Claude authentication found."
-    echo ""
-    echo "  Option 1 — On your HOST machine:"
-    echo "    claude auth login"
-    echo "    Then re-run docker-run.mjs"
-    echo ""
-    echo "  Option 2 — API key:"
-    echo "    ANTHROPIC_API_KEY=sk-... npx create-claude-workspace docker"
-    echo ""
-    exit 1
-  fi
-fi
-
-exec gosu claude "$@"