feat: remove webui

claude/Dockerfile

@@ -5,8 +5,7 @@ RUN apk add --no-cache \
   git \
   curl \
   ca-certificates \
-  bash \
-  ttyd
+  bash
 
 # Install kubectl — architecture-aware, checksum-verified
 RUN KUBECTL_VERSION=$(curl -fsSL https://dl.k8s.io/release/stable.txt) \
@@ -19,9 +18,6 @@ RUN KUBECTL_VERSION=$(curl -fsSL https://dl.k8s.io/release/stable.txt) \
   && rm /tmp/kubectl.sha256 \
   && chmod +x /usr/local/bin/kubectl
 
-# Entrypoint used by the webui service (ttyd wrapping claude)
-COPY --chmod=755 webui-entrypoint.sh /usr/local/bin/webui-entrypoint.sh
-
 # System-level Claude Code policy — owned by root, not writable by the node user.
 # Restricts available models; cannot be bypassed via CLI flags or env vars.
 COPY settings.json /etc/claude-code/managed-settings.json

claude/webui-entrypoint.sh

@@ -1,14 +0,0 @@
-#!/usr/bin/env bash
-# Entrypoint for the webui service.
-# Wraps Claude Code in ttyd (terminal-over-WebSocket) with basic auth.
-set -euo pipefail
-
-: "${WEBUI_PASSWORD:?WEBUI_PASSWORD must be set in .env}"
-WEBUI_USER="${WEBUI_USER:-claude}"
-WEBUI_PORT="${WEBUI_PORT:-7681}"
-
-exec ttyd \
-    --port "${WEBUI_PORT}" \
-    --writable \
-    --credential "${WEBUI_USER}:${WEBUI_PASSWORD}" \
-    claude