Merge pull request #99 from AgentWorkforce/ssh-config

Author: khaliqgant

.trajectories/completed/2026-01/traj_c9izbh2snpzf.json

@@ -0,0 +1,49 @@
+{
+  "id": "traj_c9izbh2snpzf",
+  "version": 1,
+  "task": {
+    "title": "Fix sshd startup for Codex tunnel"
+  },
+  "status": "completed",
+  "startedAt": "2026-01-07T16:17:28.232Z",
+  "agents": [
+    {
+      "name": "default",
+      "role": "lead",
+      "joinedAt": "2026-01-07T16:17:32.534Z"
+    }
+  ],
+  "chapters": [
+    {
+      "id": "chap_qmv0yinkqhe1",
+      "title": "Work",
+      "agentName": "default",
+      "startedAt": "2026-01-07T16:17:32.534Z",
+      "events": [
+        {
+          "ts": 1767802652535,
+          "type": "decision",
+          "content": "Run workspace image as root for sshd: Run workspace image as root for sshd",
+          "raw": {
+            "question": "Run workspace image as root for sshd",
+            "chosen": "Run workspace image as root for sshd",
+            "alternatives": [],
+            "reasoning": "entrypoint sshd block only runs as root; we drop to workspace via gosu so app still non-root"
+          },
+          "significance": "high"
+        }
+      ],
+      "endedAt": "2026-01-07T16:17:39.267Z"
+    }
+  ],
+  "commits": [],
+  "filesChanged": [],
+  "projectId": "/Users/khaliqgant/Projects/agent-workforce/relay",
+  "tags": [],
+  "completedAt": "2026-01-07T16:17:39.267Z",
+  "retrospective": {
+    "summary": "Set workspace image to run entrypoint as root so sshd starts for Codex tunnel",
+    "approach": "Standard approach",
+    "confidence": 0.62
+  }
+}

.trajectories/completed/2026-01/traj_c9izbh2snpzf.md

@@ -0,0 +1,31 @@
+# Trajectory: Fix sshd startup for Codex tunnel
+
+> **Status:** ✅ Completed
+> **Confidence:** 62%
+> **Started:** January 7, 2026 at 05:17 PM
+> **Completed:** January 7, 2026 at 05:17 PM
+
+---
+
+## Summary
+
+Set workspace image to run entrypoint as root so sshd starts for Codex tunnel
+
+**Approach:** Standard approach
+
+---
+
+## Key Decisions
+
+### Run workspace image as root for sshd
+- **Chose:** Run workspace image as root for sshd
+- **Reasoning:** entrypoint sshd block only runs as root; we drop to workspace via gosu so app still non-root
+
+---
+
+## Chapters
+
+### 1. Work
+*Agent: default*
+
+- Run workspace image as root for sshd: Run workspace image as root for sshd

.trajectories/index.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "lastUpdated": "2026-01-07T14:19:04.152Z",
+  "lastUpdated": "2026-01-07T16:17:39.299Z",
   "trajectories": {
     "traj_ozd98si6a7ns": {
       "title": "Fix thinking indicator showing on all messages",
@@ -463,6 +463,13 @@
       "startedAt": "2026-01-07T14:18:40.736Z",
       "completedAt": "2026-01-07T14:19:04.139Z",
       "path": "/Users/khaliqgant/Projects/agent-workforce/relay/.trajectories/completed/2026-01/traj_hf81ey93uz6t.json"
+    },
+    "traj_c9izbh2snpzf": {
+      "title": "Fix sshd startup for Codex tunnel",
+      "status": "completed",
+      "startedAt": "2026-01-07T16:17:28.232Z",
+      "completedAt": "2026-01-07T16:17:39.267Z",
+      "path": "/Users/khaliqgant/Projects/agent-workforce/relay/.trajectories/completed/2026-01/traj_c9izbh2snpzf.json"
     }
   }
 }

deploy/workspace/Dockerfile

@@ -59,7 +59,8 @@ RUN ln -sf /app/dist/cli/index.js /usr/local/bin/agent-relay && \
 # Fix ownership
 RUN chown -R workspace:workspace /app
 
-USER workspace
+# Run entrypoint as root so it can start sshd; entrypoint drops to workspace via gosu
+USER root
 
 # Environment
 ENV NODE_ENV=production