Attempt to fix devcontainer perms

Author: Claude

.devcontainer/devcontainer.json

@@ -25,7 +25,7 @@
   "mounts": [
     "source=${localWorkspaceFolderBasename}-node_modules,target=${containerWorkspaceFolder}/node_modules,type=volume",
     "source=${localWorkspaceFolderBasename}-catnip-volume,target=/home/vscode/.catnip/volume,type=volume",
-    "source=${localWorkspaceFolderBasename}-go-mods,target=/go/pkg/mod,type=volume"
+    "source=${localWorkspaceFolderBasename}-go-mods,target=/go/pkg/mod,type=volume,uid=1000,gid=1000"
   ],
   "features": {
     "ghcr.io/devcontainers/features/git:1": {},

.devcontainer/post-create.sh

@@ -6,7 +6,20 @@ OPT_DIR="/opt/catnip"
 
 # ensure mounted volumes have proper permissions
 sudo install -d -o "$USER" -g "$USER" "$WORKDIR/node_modules"
+# Ensure /go/pkg exists and fix ownership only where needed
 sudo install -d -o "$USER" -g "$USER" "/go/pkg"
+
+# Only fix permissions if they're actually wrong (much faster than chmod -R)
+if [ "$(stat -c '%U:%G' /go/pkg 2>/dev/null)" != "$USER:$USER" ]; then
+  echo "Fixing /go/pkg permissions..."
+  sudo chown "$USER:$USER" /go/pkg
+fi
+
+# Fix subdirectories only if they exist and have wrong ownership
+if [ -d "/go/pkg/mod" ] && [ "$(stat -c '%U:%G' /go/pkg/mod 2>/dev/null)" != "$USER:$USER" ]; then
+  echo "Fixing /go/pkg/mod permissions..."
+  sudo chown -R "$USER:$USER" /go/pkg/mod
+fi
 sudo install -d -o "$USER" -g "$USER" "/home/vscode/.catnip/volume"
 
 # Run the main setup script (it will handle installing pnpm and just if needed)

.github/workflows/publish-feature.yml

@@ -9,6 +9,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
       pull-requests: write
     steps:
       - uses: actions/checkout@v4