refactor: replace editor proxy with on-demand code-server on direct port

Remove the 305-line HTTP/WebSocket reverse proxy and per-session
code-server management. Instead, expose a single code-server instance
on its own port (default 8080) with on-demand lifecycle:

- Starts only when a user requests the editor (zero memory when idle)
- Auto-shuts down after configurable idle timeout (default 10 min)
- Opens directly in a new browser tab — no iframe, no proxy

Config: CODE_SERVER_URL (Tailscale IP), CODE_SERVER_PORT, CODE_SERVER_IDLE_TIMEOUT

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Remote Agent

docker/Dockerfile

@@ -170,8 +170,9 @@ LABEL org.opencontainers.image.version=$VERSION
 LABEL org.opencontainers.image.source="https://github.com/mrtcmn/remote-agent"
 LABEL org.opencontainers.image.licenses="MIT"
 
-# Expose port
+# Expose ports (API + code-server)
 EXPOSE 5100
+EXPOSE 8080
 
 # Switch back to root for entrypoint (entrypoint drops to agent after fixing permissions)
 # Entrypoint (--chmod eliminates ghost layer from separate chmod)

docker/docker-compose.dev.yml

@@ -26,6 +26,7 @@ services:
     ports:
       - "127.0.0.1:${PORT:-5100}:5100"
       - "127.0.0.1:${DEBUG_PORT:-6499}:6499"  # Bun inspector port
+      - "0.0.0.0:${CODE_SERVER_PORT:-8080}:8080"
     depends_on:
       db:
         condition: service_healthy
@@ -71,6 +72,10 @@ services:
       - CORS_ORIGIN=*
       - PORT=5100
 
+      # Code Server
+      - CODE_SERVER_PORT=${CODE_SERVER_PORT:-8080}
+      - VITE_CODE_SERVER_URL=${CODE_SERVER_URL:-}
+
       # Debug settings
       - BUN_DEBUG_QUIET_LOGS=0
     stdin_open: true

docker/docker-compose.prod.yml

@@ -28,6 +28,7 @@ services:
     container_name: remote-agent
     ports:
       - "127.0.0.1:${PORT:-5100}:5100"
+      - "0.0.0.0:${CODE_SERVER_PORT:-8080}:8080"
     depends_on:
       db:
         condition: service_healthy
@@ -70,6 +71,10 @@ services:
       - APP_VERSION=${IMAGE_TAG:-latest}
       - CORS_ORIGIN=${CORS_ORIGIN:-*}
       - NODE_ENV=production
+
+      # Code Server (VS Code in the browser)
+      - CODE_SERVER_PORT=${CODE_SERVER_PORT:-8080}
+      - VITE_CODE_SERVER_URL=${CODE_SERVER_URL:-}
     restart: unless-stopped
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:5100/health"]

docker/docker-compose.yml

@@ -26,6 +26,7 @@ services:
     container_name: remote-agent
     ports:
       - "127.0.0.1:${PORT:-5100}:5100"
+      - "0.0.0.0:${CODE_SERVER_PORT:-8080}:8080"
     depends_on:
       db:
         condition: service_healthy
@@ -69,6 +70,10 @@ services:
       - APP_VERSION=${IMAGE_TAG:-dev}
       - CORS_ORIGIN=${CORS_ORIGIN:-*}
       - NODE_ENV=${NODE_ENV:-production}
+
+      # Code Server (VS Code in the browser)
+      - CODE_SERVER_PORT=${CODE_SERVER_PORT:-8080}
+      - VITE_CODE_SERVER_URL=${CODE_SERVER_URL:-}
     restart: unless-stopped
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:5100/health"]

docker/entrypoint.sh

@@ -83,5 +83,6 @@ fi
 echo "Environment ready"
 echo ""
 
+
 # Drop privileges and execute command as agent user
 exec gosu agent "$@"

packages/api/src/index.ts

@@ -1,13 +1,13 @@
 import { Elysia } from 'elysia';
 import { cors } from '@elysiajs/cors';
 import { staticPlugin } from '@elysiajs/static';
-import { api, internalRoutes, editorProxyRoutes } from './routes';
+import { api, internalRoutes } from './routes';
 import { terminalWebsocketRoutes } from './routes/terminal-websocket';
 import { previewWebsocketRoutes } from './routes/preview-websocket';
 import { notificationService } from './services/notification';
 import { terminalService } from './services/terminal';
 import { browserPreviewService } from './services/browser-preview';
-import { codeEditorService } from './services/code-editor';
+import { codeServerManager } from './services/code-server/code-server.service';
 import { originsService } from './services/origins';
 import { seedTestUser } from './auth/seed';
 
@@ -27,6 +27,7 @@ const CLIENT_ENV_KEYS = [
   'VITE_FIREBASE_APP_ID',
   'VITE_FIREBASE_MEASUREMENT_ID',
   'VITE_FIREBASE_VAPID_KEY',
+  'VITE_CODE_SERVER_URL',
 ];
 
 function buildEnvScript(): string {
@@ -44,7 +45,6 @@ const indexHtml = rawHtml.replace('<head>', `<head>\n    ${buildEnvScript()}`);
 await originsService.initialize();
 await notificationService.initialize();
 await terminalService.initialize();
-await codeEditorService.initialize();
 
 // Seed test user
 await seedTestUser();
@@ -73,9 +73,6 @@ const app = new Elysia()
   // Browser preview WebSocket routes
   .use(previewWebsocketRoutes)
 
-  // Code editor proxy (outside /api prefix)
-  .use(editorProxyRoutes)
-
   // Health check
   .get('/health', () => ({
     status: 'ok',
@@ -128,23 +125,22 @@ Endpoints:
   - API:        http://localhost:${PORT}/api
   - Terminal:   ws://localhost:${PORT}/ws/terminal/:terminalId
   - Preview:    ws://localhost:${PORT}/ws/preview/:previewId
-  - Editor:     http://localhost:${PORT}/editor-proxy/:editorId/
   - Health:     http://localhost:${PORT}/health
   - UI:         http://localhost:${PORT}
 `);
 
 // Graceful shutdown
 process.on('SIGTERM', async () => {
   console.log('Shutting down...');
-  await codeEditorService.shutdown();
+  await codeServerManager.shutdown();
   await browserPreviewService.shutdown();
   await notificationService.shutdown();
   process.exit(0);
 });
 
 process.on('SIGINT', async () => {
   console.log('Shutting down...');
-  await codeEditorService.shutdown();
+  await codeServerManager.shutdown();
   await browserPreviewService.shutdown();
   await notificationService.shutdown();
   process.exit(0);