From 4b580a69b4ba39be8f7b39947a4dc101721be5cc Mon Sep 17 00:00:00 2001
From: haras-unicorn <github@haras-unicorn.net>
Date: Thu, 20 Aug 2026 11:19:39 +0200
Subject: [PATCH] fix(zeroclaw): restrict git-mcp-server to agent projects
 directory

---
 src/modules/ai/zeroclaw/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/modules/ai/zeroclaw/default.nix b/src/modules/ai/zeroclaw/default.nix
index 16aa91af..f4fda99f 100644
--- a/src/modules/ai/zeroclaw/default.nix
+++ b/src/modules/ai/zeroclaw/default.nix
@@ -466,6 +466,7 @@ in
                 MCP_TRANSPORT_TYPE = "stdio";
                 MCP_LOG_LEVEL = "warn";
                 GIT_SSH_COMMAND = lib.getExe gitSshCommand;
+                GIT_BASE_DIR = "${agentWorkspaceDir}/projects";
               };
             }
             {