fix(agents): entrypoint utilisé; safe.directory; guard diff si hors repo

scripts/agents/run.sh

@@ -87,7 +87,11 @@ pushd "$TARGET_DIR" >/dev/null || true
   if [[ -s "$after_status_file" ]]; then sed "s/^/  /" "$after_status_file"; else echo "  (aucun)"; fi
   echo
   echo "## Diff par rapport au dernier commit"
+  if git -C "$TARGET_DIR" rev-parse --is-inside-work-tree >/dev/null 2>&1; then
     git -C "$TARGET_DIR" diff --name-status || true
+  else
+    echo "(pas un dépôt git, diff ignoré)"
+  fi
 } > "$changes_report"
 popd >/dev/null || true
 

scripts/local/run_agents_for_project.sh

@@ -32,13 +32,14 @@ if [[ -f "$MODULE_LAST_IMAGE_FILE" ]]; then
   if [[ -f "$HOME/.4nk_template/.env" ]]; then
     ENV_MOUNT="-v $HOME/.4nk_template/.env:/root/.4nk_template/.env:ro"
   fi
-  # Lancer le conteneur en forçant l'entrypoint bash pour appeler run.sh
+  # Lancer le conteneur en utilisant l'ENTRYPOINT qui configure safe.directory
   docker run --rm \
+    -e RUNNER_MODE=agents \
+    -e TARGET_DIR=/work \
+    -e OUTPUT_DIR=/work/$OUTPUT_DIR \
     -v "$(realpath "$PROJECT_PATH"):/work" \
     $ENV_MOUNT \
-    --entrypoint bash \
-    "$IMAGE_NAME" -lc "cd /work && scripts/agents/run.sh /work /work/$OUTPUT_DIR all" \
-    || true
+    "$IMAGE_NAME" || true
 else
   echo "Aucune image de module détectée, fallback docker compose dans 4NK_template"
   cd "$TEMPLATE_DIR"