AI Coding Assistants in Cloud Development Environments

// .devcontainer/devcontainer.json
{
  "name": "AI-Enabled Workspace",
  "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
  "customizations": {
    "vscode": {
      "extensions": [
        "GitHub.copilot",
        "GitHub.copilot-chat"
      ],
      "settings": {
        "github.copilot.enable": {
          "*": true,
          "plaintext": false,
          "markdown": true
        },
        "github.copilot.advanced": {
          "length": 500,
          "temperature": ""
        }
      }
    }
  },
  "features": {
    "ghcr.io/devcontainers/features/node:1": {},
    "ghcr.io/devcontainers/features/python:1": {}
  }
}

# Coder template - Secrets injection
data "coder_parameter" "ai_tool" {
  name        = "ai_tool"
  description = "Select your AI coding assistant"
  type        = "string"
  default     = "copilot"
  option {
    name  = "GitHub Copilot"
    value = "copilot"
  }
  option {
    name  = "Claude Code"
    value = "claude"
  }
}

# Inject API keys from Vault
resource "vault_generic_secret" "ai_keys" {
  path = "secret/ai-tools/${data.coder_workspace
    .me.owner}"
}

resource "coder_agent" "main" {
  env = {
    ANTHROPIC_API_KEY = vault_generic_secret
      .ai_keys.data["anthropic_key"]
    GITHUB_COPILOT_TOKEN = vault_generic_secret
      .ai_keys.data["copilot_token"]
  }
}

# Kubernetes NetworkPolicy for AI egress
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: ai-service-egress
  namespace: cde-workspaces
spec:
  podSelector:
    matchLabels:
      app: cde-workspace
  policyTypes:
    - Egress
  egress:
    # GitHub Copilot endpoints
    - to:
        - ipBlock:
            cidr: 140.82.112.0/20
      ports:
        - port: 443
    # Anthropic API
    - to:
        - ipBlock:
            cidr: 104.18.0.0/16
      ports:
        - port: 443
    # Internal AI proxy
    - to:
        - namespaceSelector:
            matchLabels:
              name: ai-proxy
      ports:
        - port: 8443

# .claude/CLAUDE.md - workspace AI config
# Project-level AI instructions
- Use TypeScript strict mode
- Follow existing code patterns
- Write tests for all new functions
- Never commit secrets or API keys
- Use the project's ESLint configuration

# .github/copilot-instructions.md
- This is a React 18 project with Next.js
- Use server components by default
- Follow the existing naming conventions
- Prefer composition over inheritance
- All API routes use zod validation

# .cursorrules
- Use functional components only
- State management via Zustand
- CSS via Tailwind utility classes
- Error boundaries on all page routes