maesttro 0.5.0 → 0.6.0

package/docker/Dockerfile

@@ -65,8 +65,8 @@ RUN UV_PYTHON_INSTALL_DIR=/usr/local/share/uv/python UV_PYTHON_BIN_DIR=/usr/loca
     && ln -s "$(dirname "$(readlink -f /usr/local/bin/python3)")/pip3" /usr/local/bin/pip3 \
     && ln -s pip3 /usr/local/bin/pip
 
-# System-level, not ~/.gitconfig: /home/agent is the persistent volume and
-# shadows anything baked into home for existing installs
+# System-level, not ~/.gitconfig: the per-session home mounted at /home/agent
+# shadows anything baked into the image's home
 COPY gitconfig /etc/gitconfig
 COPY runner-marker /etc/maesttro/runner
 
@@ -82,13 +82,10 @@ ENV DISABLE_AUTOUPDATER=1
 
 RUN useradd -m -s /bin/bash agent
 USER agent
-# Created as agent so a fresh volume inherits them; otherwise Docker creates
-# ~/.config and ~/.claude as root when it sets up the nested read-only mounts
-RUN mkdir -p /home/agent/.config/opencode /home/agent/.claude
 WORKDIR /workspace
 
 # Everything the agent installs lands on the container's writable layer, never
-# the shared /home/agent volume, so it is gone when the session's container exits
+# the session's home, so it is gone when the session's container exits
 ENV AGENT_TOOLS=/opt/agent-tools
 ENV NPM_CONFIG_PREFIX=${AGENT_TOOLS} \
     NPM_CONFIG_CACHE=${AGENT_TOOLS}/cache/npm \
@@ -109,8 +106,7 @@ ENV NPM_CONFIG_PREFIX=${AGENT_TOOLS} \
 ENV PATH=${AGENT_TOOLS}/bin:${AGENT_TOOLS}/bun/bin:${AGENT_TOOLS}/dotnet/.dotnet/tools:${PATH}
 
 # Client configs are applied at container start by `maesttro configure`
-# (mounted from the host's install): /home/agent is a persistent volume, so
-# anything baked here would only ever reach brand-new volumes.
+# (mounted from the host's install): the session home shadows /home/agent
 
 # Starts as root only to remap agent to the host user's uid/gid (bind mounts
 # keep host ownership on Linux), then drops to agent before running anything

package/docker/entrypoint.sh

@@ -9,11 +9,14 @@ if [ -n "$uid" ] && [ "$uid" != "$(id -u agent)" ]; then
   usermod --non-unique --uid "$uid" --gid "$gid" agent
 fi
 
-owner="$(id -u agent):$(id -g agent)"
-if [ -n "$uid" ] && [ "$(stat -c %u:%g /home/agent)" != "$owner" ]; then
-  find /home/agent -xdev -exec chown -h "$owner" {} + 2>/dev/null || true
+# cp -a onto the directory itself would copy /etc/skel's own mode, clobbering the 0700 the host set
+if [ ! -e /home/agent/.profile ]; then
+  find /etc/skel -mindepth 1 -maxdepth 1 -exec cp -a {} /home/agent/ \;
 fi
 
+owner="$(id -u agent):$(id -g agent)"
+find /home/agent /home/agent/.claude -xdev \! -user agent -exec chown -h "$owner" {} + 2>/dev/null || true
+
 mkdir -p "$AGENT_TOOLS"
 chown "$owner" "$AGENT_TOOLS"
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maesttro",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Isolated Docker runner for local coding agents (opencode, claude, ...) under a dedicated bot GitHub identity, with curated configs baked in per client.",
   "type": "module",
   "bin": {