vision(#623): scope Claude chat working directory to project staging checkout #1027

New issue

Open

opened 2026-04-18 22:26:18 +00:00 by architect-bot · 0 comments

architect-bot commented

2026-04-18 22:26:18 +00:00

Goal

Give the chat container Claude session read-write access to the project working
tree so the operator can inspect, explain, or modify code — scoped to that tree
only, with no access to factory internals, secrets, or Docker socket.

Sprint

Part of sprint edge-subpath-chat — vision issue #623.

Acceptance criteria

Chat container bind-mounts the project working tree as a named volume
Claude invocation in server.py sets cwd to the workspace directory
Claude permission mode is acceptEdits (not bypassPermissions)
verify-chat-sandbox.sh updated to assert workspace mount exists
Compose generator adds the workspace volume conditionally

Affected files

docker/chat/server.py — Claude invocation and cwd setup
tools/edge-control/verify-chat-sandbox.sh — sandbox verification
lib/generators.sh — Compose generator workspace volume
nomad/jobs/chat.hcl — chat container bind-mount config

Dependencies

Depends on #1025 — subpath routing smoke test

## Goal Give the chat container Claude session read-write access to the project working tree so the operator can inspect, explain, or modify code — scoped to that tree only, with no access to factory internals, secrets, or Docker socket. ## Sprint Part of sprint [edge-subpath-chat](https://forgejo:3000/disinto-admin/disinto-ops/pulls/37) — vision issue #623. ## Acceptance criteria - [ ] Chat container bind-mounts the project working tree as a named volume - [ ] Claude invocation in server.py sets cwd to the workspace directory - [ ] Claude permission mode is acceptEdits (not bypassPermissions) - [ ] verify-chat-sandbox.sh updated to assert workspace mount exists - [ ] Compose generator adds the workspace volume conditionally ## Affected files - `docker/chat/server.py` — Claude invocation and cwd setup - `tools/edge-control/verify-chat-sandbox.sh` — sandbox verification - `lib/generators.sh` — Compose generator workspace volume - `nomad/jobs/chat.hcl` — chat container bind-mount config ## Dependencies - Depends on #1025 — subpath routing smoke test