feat(docker): configure static git identity

docker/.env.example

@@ -15,6 +15,12 @@ TZ=Australia/Perth
 # this value rebuilds the image with a matching account.
 CODEMAN_RUNTIME_USER=codeman
 
+# Required for Git commits made by Codeman and Docker-case agents. These values
+# are written to each image's system Git configuration when it is rebuilt, so
+# they remain available even when the runtime home directory is a fresh mount.
+GIT_USER_NAME=
+GIT_USER_EMAIL=
+
 # Required. Persistent Codeman application data, CLI credentials, and session
 # state are stored here on the host and mounted at the runtime account's home
 # directory in the container.

docker/README.md

@@ -67,6 +67,25 @@ two volumes are removed, by name within this Compose project; any volume a
 `docker-compose.override.yml` adds is left alone, and application data and
 case workspaces are host bind mounts, never touched either way.
 
+## Git commit identity
+
+Set `GIT_USER_NAME` and `GIT_USER_EMAIL` in `docker/.env` before rebuilding:
+
+```sh
+GIT_USER_NAME='Your Name'
+GIT_USER_EMAIL='you@example.com'
+```
+
+Compose passes the values to the Codeman server build, and to the server process
+when it builds Docker-case agent images. Both images write the pair to Git's
+system configuration during their build, so commits retain the same identity
+after a container or agent image is recreated. Set both values together; an
+image build with only one value fails rather than using a partial identity.
+
+Run `bash docker/Start-Codeman.sh` after changing the server values. Rebuild an
+existing agent image with `node scripts/build-agent-image.mjs --no-cache` in the
+server container, then recreate any Docker cases that should use it.
+
 ## Private repositories (GitHub and Azure DevOps)
 
 The images can include the GitHub CLI (`gh`) and the Azure CLI (`az`, with the `azure-devops` extension), wired into the system Git configuration as credential helpers, so Codeman can clone private repositories. Both are **opt-in and off by default**, and are turned on per host in `docker-compose.override.yml`.

docker/agent.Dockerfile

@@ -12,6 +12,9 @@
 # writable even though the uid is not the baked 1000.
 FROM node:22-bookworm-slim
 
+ARG GIT_USER_EMAIL=
+ARG GIT_USER_NAME=
+
 # Base toolchain. `curl` is needed for the hook callbacks (`curl -sk $CODEMAN_API_URL`),
 # `procps` for `ps`, `tmux` for the durable in-container session.
 RUN apt-get update \
@@ -27,6 +30,17 @@ RUN apt-get update \
       openssh-client \
  && rm -rf /var/lib/apt/lists/*
 
+# Docker cases run with a fresh, container-owned home directory. Configure Git
+# at the system level during the build so the identity supplied in docker/.env
+# remains stable after an agent image rebuild. Refuse an incomplete identity.
+RUN set -eux; \
+    if [ -n "${GIT_USER_NAME}" ] || [ -n "${GIT_USER_EMAIL}" ]; then \
+      test -n "${GIT_USER_NAME}"; \
+      test -n "${GIT_USER_EMAIL}"; \
+      git config --system user.name "${GIT_USER_NAME}"; \
+      git config --system user.email "${GIT_USER_EMAIL}"; \
+    fi
+
 # GitHub CLI and Azure CLI (+ the azure-devops extension) with the same system
 # git credential helpers as docker/server.Dockerfile, so an agent in a Docker
 # case can clone and push to private GitHub / Azure DevOps repositories. The

docker/docker-compose.yaml

@@ -7,6 +7,8 @@ services:
       dockerfile: docker/server.Dockerfile
       args:
         CODEMAN_RUNTIME_USER: ${CODEMAN_RUNTIME_USER}
+        GIT_USER_EMAIL: ${GIT_USER_EMAIL:-}
+        GIT_USER_NAME: ${GIT_USER_NAME:-}
         PGID: ${PGID:-1000}
         PUID: ${PUID:-1000}
     image: ${CODEMAN_IMAGE}
@@ -32,6 +34,10 @@ services:
       CODEMAN_DOCKER_HOST_HOME: ${CODEMAN_APPDATA_PATH}
       CODEMAN_DOCKER_DISABLE_SWAP_LIMIT: ${CODEMAN_DOCKER_DISABLE_SWAP_LIMIT}
       CODEMAN_CASES_PATH: ${CODEMAN_CASES_PATH}
+      # Passed through only so Codeman can use the same identity when it builds
+      # the Docker-case agent image.
+      GIT_USER_EMAIL: ${GIT_USER_EMAIL:-}
+      GIT_USER_NAME: ${GIT_USER_NAME:-}
       # Extra Host-header allowlist entries for a reverse-proxied deployment
       # (docker/README.md, "Reverse-proxy host allowlist"). Optional, so it
       # defaults to empty rather than requiring a line in every .env.

docker/server.Dockerfile

@@ -25,6 +25,8 @@ RUN npm ci \
 FROM node:22-bookworm-slim
 
 ARG CODEMAN_RUNTIME_USER=codeman
+ARG GIT_USER_EMAIL=
+ARG GIT_USER_NAME=
 ARG PUID=1000
 ARG PGID=1000
 
@@ -48,6 +50,18 @@ RUN apt-get update \
       tmux \
  && rm -rf /var/lib/apt/lists/*
 
+# A runtime home is normally a bind mount, so user-level Git configuration is
+# not durable across a fresh deployment. Keep the operator-supplied identity in
+# the image's system config instead. Both values are required together to avoid
+# producing commits with a misleading partial identity.
+RUN set -eux; \
+    if [ -n "${GIT_USER_NAME}" ] || [ -n "${GIT_USER_EMAIL}" ]; then \
+      test -n "${GIT_USER_NAME}"; \
+      test -n "${GIT_USER_EMAIL}"; \
+      git config --system user.name "${GIT_USER_NAME}"; \
+      git config --system user.email "${GIT_USER_EMAIL}"; \
+    fi
+
 # The Docker CLI, taken from the official image rather than Debian's `docker.io`.
 # That package is the full ENGINE: with --no-install-recommends it still pulls 15
 # packages including containerd, runc, dmsetup and iptables, none of which a