From 8efb1ecf80f4803c3e66e5392813eba4c2fb2874 Mon Sep 17 00:00:00 2001
From: Wesley Ray <raywes88@gmail.com>
Date: Tue, 21 Jul 2026 21:41:32 -0400
Subject: [PATCH] build.sh: run the build container as the invoking user

Root-owned node_modules/dist/public from the container blocked git pull
(public/fonts could not be created). Chown once, then keep artifacts
user-owned via --user + HOME/npm cache in /tmp.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 deploy/build.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/deploy/build.sh b/deploy/build.sh
index cc9464f..83847f1 100755
--- a/deploy/build.sh
+++ b/deploy/build.sh
@@ -5,11 +5,16 @@ set -eu
 
 VAULT="${VAULT:-/home/nox/docker/obsidian/vaults/weeslahw_coppermind}"
 
+# --user: build artifacts (node_modules, dist, public/assets) must stay
+# owned by the invoking user, or the next git pull can't write the tree
 docker run --rm \
+    --user "$(id -u):$(id -g)" \
     -v "$(pwd):/app" \
     -v "$VAULT:/content:ro" \
     -e GARDEN_CONTENT=/content/Digital_Garden \
     -e ASTRO_TELEMETRY_DISABLED=1 \
+    -e HOME=/tmp \
+    -e npm_config_cache=/tmp/.npm \
     -w /app \
     node:24-slim \
     sh -c "npm ci && npm run build"