From e02b350043b181bbf3a59cde62302b89faca8a41 Mon Sep 17 00:00:00 2001
From: hailin <hailin.zhao@gdzx.xyz>
Date: Wed, 25 Feb 2026 02:52:57 -0800
Subject: [PATCH] fix: create /data/claude-tenants dir with appuser ownership
 in Dockerfile

Without this, the SDK engine fails to create tenant HOME directories
because the Docker volume mount point doesn't exist and appuser lacks
write permissions.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 Dockerfile.service | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Dockerfile.service b/Dockerfile.service
index b15734e..08fd21f 100644
--- a/Dockerfile.service
+++ b/Dockerfile.service
@@ -81,7 +81,8 @@ WORKDIR /app/packages/services/${SERVICE_NAME}
 
 # Run as non-root user (required for SDK bypassPermissions mode)
 RUN adduser -D -h /home/appuser appuser && \
-    chown -R appuser:appuser /app
+    mkdir -p /data/claude-tenants && \
+    chown -R appuser:appuser /app /data/claude-tenants
 USER appuser
 
 ARG SERVICE_PORT=3000