Hardened Java 21+ Development Container for AI Agents
Enterprise Java container preloaded with OpenJDK 21, Maven, Gradle, JDTLS language server, 4-pane TMUX IDE, and stdio Model Context Protocol (MCP) server.
// src/main/java/dev/App.java · Java 21 LTS Pattern Matching
public sealed interface Task permits Query, Mutation {
record Query(String id, Instant timestamp) implements Task {}
record Mutation(String id, byte[] payload) implements Task {}
static String describe(Task t) {
return switch (t) {
case Query(var id, var ts) -> "Query " + id;
case Mutation(var id, _) -> "Mutation " + id;
};
}
}Engineered for Java Developers & Terminal AI Agents
Enterprise-grade Java runtime powered by OpenJDK 21, Eclipse JDTLS, and native MCP container tooling.
Java 21+ Toolchain
Pre-installed with OpenJDK 21, Gradle, Apache Maven, and Eclipse JDT Language Server (JDTLS).
4-Pane TMUX IDE (Prefix + i)
Dedicated split layout with File Tree Explorer, Neovim (JDTLS + Treesitter), bash shell, and AI Agent pane.
Parallel AI Task Worktrees (muxtree)
Automate Git worktrees paired with separate TMUX sessions for concurrent multi-agent and human feature branches.
Model Context Protocol (MCP)
Stdio JSON-RPC 2.0 interface exposing Maven/Gradle test execution and repository diagnostics to Claude Code and Cursor.
Quick Start in 30 Seconds
Disposable developer environment running anywhere Docker or Podman runs.
# 1. Clone the repository
git clone https://github.com/sebastienrousseau/javadev.git
cd javadev
# 2. Build and launch 4-pane TMUX IDE
make up
# 3. Mobile WebTTY (port 7681) & Mosh roaming
make web
make mosh
Unified Multi-Language Suite
Every container shares an identical security baseline, TMUX shortcuts, and MCP interfaces.
| Container | Language Stack | Built-in Tooling | Version |
|---|---|---|---|
| langdev | Core Foundation | TMUX IDE, MCP server, ai-pack, WebTTY, OSC 52 | v0.0.4 |
| pythondev | Python 3.12+ | uv, ruff, mypy, pytest, debugpy, Pyright | v0.0.4 |
| rustdev | Rust 1.85+ | rustup, rust-analyzer, clippy, cargo-audit, sccache | v0.0.4 |
| godev | Go 1.24+ | gopls, golangci-lint, delve, Go toolchain | v0.0.4 |
| javadev | Java 21+ | OpenJDK 21, Maven, Gradle, JDTLS | v0.0.4 |
| kotlindev | Kotlin 2.1+ | kotlinc, OpenJDK 21, Gradle, Maven, KLS | v0.0.4 |
| swiftdev | Swift 6.0+ | Swift toolchain, SourceKit-LSP, swift-format | v0.0.4 |
Zero-Trust Hardened Security
Strict security guarantees verified in CI and container runtime.
Unprivileged Non-Root
Runs as unprivileged dev user (UID/GID 1000). Drops all Linux capabilities (cap_drop: [ALL]) with no-new-privileges:true.
Read-Only Root Filesystem
Immutable rootfs prevents container modification or persistent malware. Writable state is restricted to explicit tmpfs mounts.
Supply Chain Integrity
Base images pinned to cryptographic SHA256 digests. Zero unpinned curl-to-sh scripts. Automated CycloneDX SBOM generation.
Hermetic CI & SAST
100% unit tested with Bats, ShellCheck linting, Hadolint OCI auditing, and Trivy CVE vulnerability scans.
Frequently Asked Questions
Does it support both Maven and Gradle?
Yes. Both latest Gradle and Apache Maven distributions are pre-installed and available on PATH.
How fast is the container cold start?
Under 500 milliseconds. JVM and JDTLS launcher are pre-baked at image build time.