Sets up a devcontainer for this repo using the same strategy as crunchloop/dap — a two-file build split where CI prebuilds a multi-arch toolchain image and the runtime config just pulls it.

Build

• devcontainer-build.json — heavy image built in CI: base:debian + Go 1.26, Node 22 (for Claude Code), github-cli, docker-in-docker, vscode-server, make, plus local features.
• devcontainer.json + docker-compose.yml — runtime config pulls ghcr.io/crunchloop/devcontainer/devcontainer:latest; privileged for docker-in-docker so go test -tags=integration ./test/integration/... can drive docker compose.
• post-create.sh — persists Claude config across rebuilds + go mod download.

Local features (published like dap's)

• golangci-lint — pinned to v2.5.0, matching the Makefile and ci.yml lint job.
• claude-code — Claude Code CLI (npm-based).

CI

• devcontainer-cache.yml — multi-arch (amd64/arm64) prebuild on pushes to main touching .devcontainer/**, merged into a :latest manifest on GHCR.
• devcontainer-release.yml — publishes the local features (manual dispatch).

Repo-specific departures from dap

• docker-in-docker instead of backing services — this repo's only runtime dependency is Docker itself (for the integration suite), not postgres/rabbitmq/etc.
• Dropped dap's ECR pull-through-cache invalidation job — that used dap's AWS role and tenant infra.

Notes

• The Apple container backend (runtime/applecontainer) is darwin/arm64-only and is not built in this Linux container, matching the Linux CI jobs (make bridge no-ops). Use a native macOS checkout for that backend.
• The prebuild image won't exist until devcontainer-cache.yml runs on main (or via workflow_dispatch); until then "Reopen in Container" can't pull :latest.

🤖 Generated with Claude Code