Hardened Python 3.12+ Development Container for AI Agents
High-performance Python container preloaded with uv, ruff, mypy, pytest, debugpy, Pyright LSP, 4-pane TMUX IDE, and stdio Model Context Protocol (MCP) server.
# src/agent/pipeline.py · Python 3.12+ Async Pipeline
from typing import AsyncIterator
from dataclasses import dataclass
@dataclass(frozen=True, slots=True)
class StreamResult:
payload: bytes
latency_ms: float
async def transform(stream: AsyncIterator[str]) -> list[StreamResult]:
return [StreamResult(s.encode(), 0.12) async for s in stream]Engineered for Python Developers & Terminal AI Agents
Ultra-fast Python workflows powered by uv package manager, Pyright LSP, and native MCP container tooling.
Python 3.12+ Toolchain
Pre-installed with uv for instant virtualenvs and package resolution, ruff linter/formatter, mypy, and pytest.
4-Pane TMUX IDE (Prefix + i)
Dedicated split layout with File Tree Explorer, Neovim (Pyright LSP + Ruff), terminal shell, and AI Agent pane.
Parallel AI Task Worktrees (muxtree)
Automate Git worktrees paired with separate TMUX sessions for concurrent multi-agent and human feature branches.
Model Context Protocol (MCP)
Stdio JSON-RPC 2.0 interface exposing pytest execution, python file discovery, and repository diagnostics to Claude Code and Cursor.
Quick Start in 30 Seconds
Disposable developer environment running anywhere Docker or Podman runs.
# 1. Clone the repository
git clone https://github.com/sebastienrousseau/pythondev.git
cd pythondev
# 2. Build and launch 4-pane TMUX IDE
make up
# 3. Mobile WebTTY (port 7681) & Mosh roaming
make web
make mosh
Unified Multi-Language Suite
Every container shares an identical security baseline, TMUX shortcuts, and MCP interfaces.
| Container | Language Stack | Built-in Tooling | Version |
|---|---|---|---|
| langdev | Core Foundation | TMUX IDE, MCP server, ai-pack, WebTTY, OSC 52 | v0.0.4 |
| pythondev | Python 3.12+ | uv, ruff, mypy, pytest, debugpy, Pyright | v0.0.4 |
| rustdev | Rust 1.85+ | rustup, rust-analyzer, clippy, cargo-audit, sccache | v0.0.4 |
| godev | Go 1.24+ | gopls, golangci-lint, delve, Go toolchain | v0.0.4 |
| javadev | Java 21+ | OpenJDK 21, Maven, Gradle, JDTLS | v0.0.4 |
| kotlindev | Kotlin 2.1+ | kotlinc, OpenJDK 21, Gradle, Maven, KLS | v0.0.4 |
| swiftdev | Swift 6.0+ | Swift toolchain, SourceKit-LSP, swift-format | v0.0.4 |
Zero-Trust Hardened Security
Strict security guarantees verified in CI and container runtime.
Unprivileged Non-Root
Runs as unprivileged dev user (UID/GID 1000). Drops all Linux capabilities (cap_drop: [ALL]) with no-new-privileges:true.
Read-Only Root Filesystem
Immutable rootfs prevents container modification or persistent malware. Writable state is restricted to explicit tmpfs mounts.
Supply Chain Integrity
Base images pinned to cryptographic SHA256 digests. Zero unpinned curl-to-sh scripts. Automated CycloneDX SBOM generation.
Hermetic CI & SAST
100% unit tested with Bats, ShellCheck linting, Hadolint OCI auditing, and Trivy CVE vulnerability scans.
Frequently Asked Questions
What package manager is used?
uv is pre-installed for ultra-fast package resolution and pip replacement.
How fast is the container cold start?
Under 500 milliseconds. All dotfiles, Python runtimes, and linters are baked at build time.