fix(sandcastle): pre-create .local/share dirs in Dockerfile

Docker creates intermediate directories as root:root for bind mounts.
Pre-creating /home/agent/.local/share/pnpm/store and opencode with
correct ownership prevents EACCES when opencode writes to its data dir.

diff --git a/.sandcastle/Dockerfile b/.sandcastle/Dockerfile
index e7c4912845037b0c85c9a41dbccbf034121c78fb..dda73f84b457665f7648c40ace958b2e0baa1153 100644 (file)
--- a/.sandcastle/Dockerfile
+++ b/.sandcastle/Dockerfile
@@ -27,6 +27,8 @@ RUN npm install -g \
 ARG AGENT_UID=1001
 RUN usermod -u ${AGENT_UID} -d /home/agent -m -l agent node \
     && groupmod -g ${AGENT_UID} -n agent node \
+    && mkdir -p /home/agent/.local/share/pnpm/store \
+               /home/agent/.local/share/opencode \
     && chown -R ${AGENT_UID}:${AGENT_UID} /home/agent
 USER agent