[luv-27] Fall back to docker rm for root-owned files in luv --clean (#27)

A previous fix made _force_rmtree chmod-and-retry, but Docker
bind-mounts can leave files owned by root (e.g. Rust target-docker
caches built inside dev-environment). nivedit can't chmod those —
os.chmod raises EPERM.

On PermissionError, run a busybox container with the workspace's
parent dir bind-mounted and have its root rm -rf the workspace.
Symmetric with how Docker created the mess. Cron-friendly: no sudo,
no root crontab. No-op if docker isn't installed.

Bump to 0.0.20.

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

Author: NiveditJain

luv/__init__.py

@@ -411,10 +411,36 @@ def _on_rm_error(func, path, _exc):
     func(path)
 
 
+def _docker_wipe(path: Path) -> bool:
+    """rm -rf `path` from inside a busybox container so the container's root can
+    delete files that a previous container bind-mounted in as root (e.g. Rust
+    target dirs built inside the workspace's dev-environment). Returns True on
+    success. No-op if docker isn't available."""
+    if shutil.which("docker") is None:
+        return False
+    parent = path.resolve().parent
+    name = path.name
+    r = subprocess.run(
+        ["docker", "run", "--rm",
+         "-v", f"{parent}:/p",
+         "busybox", "rm", "-rf", f"/p/{name}"],
+        capture_output=True, text=True,
+    )
+    if r.returncode != 0:
+        sys.stderr.write(f"luv: docker rm fallback failed for {path}: {r.stderr.strip()}\n")
+        return False
+    return not path.exists()
+
+
 def _force_rmtree(path: Path) -> None:
-    """rmtree that chmods read-only files (e.g. uv's CACHEDIR.TAG) instead of crashing."""
+    """rmtree that survives read-only files (chmod-and-retry) and root-owned
+    files left behind by Docker bind-mounts (containerized rm -rf fallback)."""
     kwargs = {"onexc": _on_rm_error} if sys.version_info >= (3, 12) else {"onerror": _on_rm_error}
-    shutil.rmtree(path, **kwargs)
+    try:
+        shutil.rmtree(path, **kwargs)
+    except PermissionError:
+        if not _docker_wipe(path):
+            raise
 
 
 def cmd_clean(force: bool = False, safe: bool = False) -> None:

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "luv-cli"
-version = "0.0.19"
+version = "0.0.20"
 description = "Launch Claude Code agents on GitHub repos with isolated workspaces and optional Docker dev environments"
 requires-python = ">=3.10"
 license = "MIT"