fix: align container UID with host and fix artifact permission issues

Author: QueryPlanner

Dockerfile

@@ -42,12 +42,16 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     netcat-openbsd \
     && rm -rf /var/lib/apt/lists/*
 
-# Create non-root user for security
-RUN groupadd -r app && useradd -r -g app app
+# Create non-root user for security (matching common host UID 1000)
+RUN groupadd -g 1000 app && \
+    useradd -u 1000 -g app -s /bin/sh -m app
 
 # Set working directory
 WORKDIR /app
 
+# Pre-create the artifacts directory and set ownership
+RUN mkdir -p /app/src/.adk/artifacts && chown -R app:app /app
+
 # Copy application and virtual environment from builder
 COPY --from=builder --chown=app:app /app .
 

compose.yaml

@@ -14,9 +14,8 @@ services:
       # DATABASE_URL and API Keys will be loaded from the .env file
     env_file:
       - .env
-    # Volumes are for hot-reloading during development.
-    # For production, remove these volumes to use the immutable code from the image.
+    # Volumes are for hot-reloading and persisting artifacts.
     volumes:
       - ./src:/app/src
-    # restart: always # Uncomment for production to auto-restart
+    restart: always
     command: python -m agent_foundation.server