feat(vscode-cloud): fix internet access, type safety, and improve UX#26
Merged
Conversation
- Set `enableInternet = true` on CodeServerContainer so the container can reach the R2 S3-compat HTTPS endpoint (for geesefs FUSE mount) and github.com for repo cloning — this was blocking both features - Fix `onStop` signature to use `StopParams` from @cloudflare/containers instead of a manually typed object with wider `reason: string` - Fix `DurableObjectState<unknown>` cast to the correct `SqlStorage` type - Call `renewActivityTimeout()` directly instead of via duck-typing — the method is part of the public Container API - Guard `getConfig()` with try/catch so SQL SELECT errors on an uninitialised table return null rather than throwing - Add `/__internal/state` RPC on the DO to expose container state JSON - Add `/status` endpoint on the Worker returning userId + container state - Revamp first-visit setup page: copy button, idle timeout display, reset-password form, R2/GitHub info section - Add Google OAuth landing page at /auth/login (branded sign-in card with Google logo); /auth/login?direct= still redirects immediately - Redirect OAuth callback to /setup so users see their password before code-server prompts for it - Require GOOGLE_CLIENT_SECRET in authenticate() consistently with handleAuthRoutes() to prevent accidental dev-mode fallback - Document FUSE availability and internet access in wrangler.jsonc https://claude.ai/code/session_01VSbGCNLi5Ydg8ViQijJEzG
…ed AI/dev extensions Auth - Switch code-server from --auth password to --auth none; the Cloudflare Worker (CF Access JWT or Google OAuth session) is the auth gatekeeper — the container is never directly reachable, so no password is needed - Remove all password generation, storage, and reset machinery from the Container DO and Worker (getOrCreatePassword, /setup, /reset-password, /__internal/password) - /auth/login now redirects straight to Google; the landing page explains the app before users sign in Landing page - Unauthenticated GET requests to any path (Google OAuth mode) now render a full landing page instead of bouncing to /auth/login - Six feature tiles: isolated container, R2 persistence, GitHub auto-clone, Claude Code + Codex CLI, pre-installed extensions, idle sleep billing - Responsive CSS-grid layout; adapts sign-in button to auth mode (Google / CF Access / dev mode) Dockerfile - Install python3, python3-pip, python3-venv for Python development - Install Claude Code CLI (@anthropic-ai/claude-code) globally - Install Codex CLI (@openai/codex) globally - Pre-install ten VS Code extensions at build time via Open VSX: GitLens, Prettier, ESLint, Python, Tailwind CSS IntelliSense, Path Intellisense, Code Runner, Material Icon Theme, Error Lens, Code Spell Checker (failures are non-fatal; IDE still launches without them) entrypoint.sh - Remove PASSWORD env var and --auth password flag - Richer default workspace settings.json: icon theme, font ligatures, word wrap, tab size, GitLens current-line blame, Error Lens levels, spell checker enabled https://claude.ai/code/session_01VSbGCNLi5Ydg8ViQijJEzG
…anding page Teams (new src/teams.ts + src/admin.ts) - D1-backed data layer: teams, team_members, team_invites tables auto-created via initTeamsSchema() on first /admin request - Admin dashboard at /admin — lists all teams the user belongs to (ADMIN_EMAILS env var grants platform-wide visibility) - Create team at /admin/team/new — creator becomes team admin - Team detail at /admin/team/:id — members table with email, role, container status (fetched live from each user's DO), and join date - Invite members: admin fills in email → generates a 7-day invite URL to copy and share (no email infrastructure required) - Accept invite at /admin/accept-invite?token=... — validates token, adds user as member, deletes the single-use invite token - Remove member: team admin can remove any member except themselves - Pending invites table with remaining expiry shown on team detail page - WakaTime card on team detail page explaining the pre-installed extension and linking to wakatime.com/dashboard WakaTime time tracking - Add WAKATIME_API_KEY env var — if set, auto-writes ~/.wakatime.cfg inside every container so the extension activates without manual setup - Add WakaTime.vscode-wakatime to pre-installed extension list in Dockerfile Landing page (src/index.ts) - Reworked hero: "The cloud IDE for developer teams" - Separate "For developers" feature grid (6 tiles) and a "Built for engineering teams" CTA section with purple accent and 5 bullet pills (team accounts, admin dashboard, email invites, WakaTime, container status) - Nav shows "Team dashboard" link alongside primary sign-in action - Footer updated to mention WakaTime Config (wrangler.jsonc) - Add D1 binding: TEAMS_DB / vscode-cloud-teams - Add ADMIN_EMAILS var (comma-separated platform-admin emails) - Add WAKATIME_API_KEY var with setup note - Updated initial-setup comment block to include wrangler d1 create step https://claude.ai/code/session_01VSbGCNLi5Ydg8ViQijJEzG
Complete rewrite reflecting the current implementation: - Architecture diagram updated: passwordless auth, D1 teams DB, WakaTime, AI CLIs, admin dashboard - Step-by-step quick start: install, login, create R2/D1/KV resources, set secrets, configure wrangler.jsonc, deploy - Auth option A (CF Access) and option B (Google OAuth) each with numbered steps and exact config snippets - R2 setup: how to generate an API token, FUSE performance settings - GitHub auto-clone: config and private repo PAT - Teams dashboard: first-time setup, workflow walkthrough, routes table - WakaTime: manual per-user setup, auto-configure via WAKATIME_API_KEY - Pre-installed tools: AI CLIs table, VS Code extensions table - Full configuration reference: env vars, secrets, Cloudflare resources, container sizing - Cost estimates and all HTTP endpoints - Local development and troubleshooting sections Removed: all references to passwords, /setup, /reset-password (removed in previous commits) https://claude.ai/code/session_01VSbGCNLi5Ydg8ViQijJEzG
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
vscode-cloud | 076e2b4 | May 19 2026, 02:22 AM |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
enableInternet = trueon CodeServerContainer so the containercan reach the R2 S3-compat HTTPS endpoint (for geesefs FUSE mount)
and github.com for repo cloning — this was blocking both features
onStopsignature to useStopParamsfrom @cloudflare/containersinstead of a manually typed object with wider
reason: stringDurableObjectState<unknown>cast to the correctSqlStoragetyperenewActivityTimeout()directly instead of via duck-typing —the method is part of the public Container API
getConfig()with try/catch so SQL SELECT errors on anuninitialised table return null rather than throwing
/__internal/stateRPC on the DO to expose container state JSON/statusendpoint on the Worker returning userId + container statereset-password form, R2/GitHub info section
with Google logo); /auth/login?direct= still redirects immediately
code-server prompts for it
handleAuthRoutes() to prevent accidental dev-mode fallback
https://claude.ai/code/session_01VSbGCNLi5Ydg8ViQijJEzG