From c7ca74523336dc4d6f92c361877d2ec7bd501f29 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Thu, 9 Apr 2026 19:40:47 +0000
Subject: [PATCH] =?UTF-8?q?fix:=20bug:=20agents=20entrypoint=20does=20not?=
 =?UTF-8?q?=20set=20git=20safe.directory=20=E2=80=94=20worktrees=20fail=20?=
 =?UTF-8?q?after=20container=20restart=20(#517)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docker/agents/entrypoint.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker/agents/entrypoint.sh b/docker/agents/entrypoint.sh
index 1b470f8..8a881fd 100644
--- a/docker/agents/entrypoint.sh
+++ b/docker/agents/entrypoint.sh
@@ -69,6 +69,10 @@ CREDEOF
     gosu agent bash -c "git config --global credential.helper '/home/agent/.git-credentials-helper'"
     log "Git credential helper configured for ${_bot_user}@${_forge_host} (password auth)"
   fi
+
+  # Set safe.directory to work around dubious ownership after container restart
+  # (https://github.com/disinto-admin/disinto/issues/517)
+  gosu agent bash -c "git config --global --add safe.directory '*'"
 }
 
 # Configure tea CLI login for forge operations (runs as agent user).