Created by: voorhs
it happened on ubuntu laptop, while macos worked ok
propable reason:
the MCP server runs in Docker with a bind mount of work_dir. On Linux, files created in the container are owned by the container user (usually root, UID 0), so the host user can't delete them during teardown. Docker Desktop on macOS often masks this via its VM. We should not run Python with sudo — we'll add --user to match the host UID/GID so created files remain deletable.