diff --git a/app/src/components/projects/FileManagerModal.tsx b/app/src/components/projects/FileManagerModal.tsx
index 642aec2..a955d28 100644
--- a/app/src/components/projects/FileManagerModal.tsx
+++ b/app/src/components/projects/FileManagerModal.tsx
@@ -70,7 +70,7 @@ export default function FileManagerModal({ projectId, projectName, onClose }: Pr
     >
       <div className="bg-[var(--bg-secondary)] border border-[var(--border-color)] rounded-lg shadow-xl w-[36rem] max-h-[80vh] flex flex-col">
         {/* Header */}
-        <div className="flex items-center justify-between px-4 py-3 border-b border-[var(--border-color)]">
+        <div className="flex items-center justify-between px-4 py-3 border-b border-[var(--border-color)] flex-shrink-0">
           <h2 className="text-sm font-semibold">Files — {projectName}</h2>
           <button
             onClick={onClose}
@@ -177,7 +177,7 @@ export default function FileManagerModal({ projectId, projectName, onClose }: Pr
         </div>
 
         {/* Footer */}
-        <div className="flex items-center justify-between px-4 py-3 border-t border-[var(--border-color)]">
+        <div className="flex items-center justify-between px-4 py-3 border-t border-[var(--border-color)] flex-shrink-0">
           <button
             onClick={uploadFile}
             className="text-xs text-[var(--accent)] hover:text-[var(--accent-hover)] transition-colors"
diff --git a/container/entrypoint.sh b/container/entrypoint.sh
index 9da22c9..7485cec 100644
--- a/container/entrypoint.sh
+++ b/container/entrypoint.sh
@@ -292,6 +292,16 @@ if ls "$SCHEDULER_DIR/tasks/"*.json >/dev/null 2>&1; then
     echo "entrypoint: restored crontab from persisted tasks"
 fi
 
+# ── Claude Code self-update ──────────────────────────────────────────────────
+# Update the Claude Code CLI to the latest version on container start, before
+# any terminal session launches `claude`. Runs as the claude user (the CLI is
+# installed under /home/claude/.claude/bin). Non-fatal and time-bounded so a
+# slow or offline network never blocks container readiness.
+echo "entrypoint: checking for Claude Code updates..."
+timeout 120 su -s /bin/bash claude -c 'export PATH="/home/claude/.claude/bin:/home/claude/.local/bin:$PATH"; claude update' \
+    && echo "entrypoint: Claude Code is up to date" \
+    || echo "entrypoint: warning — Claude Code update skipped or failed (continuing)"
+
 # ── Stay alive as claude ─────────────────────────────────────────────────────
 echo "Triple-C container ready."
 exec su -s /bin/bash claude -c "exec sleep infinity"