claude-bot 98528710d4 feat(fs): legacy root-owned ownership detect + actionable worktree error (ORCH-057) ...

Follow-up ORCH-040: legacy root:root files in /repos broke worktree creation
under uid 1000 with a raw "Permission denied" (agent never started, no diagnosis).
Three additive, kill-switch-reversible layers; STAGE_TRANSITIONS / QG_CHECKS /
check_* / machine-verdict keys / DB schema are byte-for-byte unchanged.

- D1: ensure_worktree classifies the permission class and raises an actionable
  RuntimeError (cause + chown command + INFRA.md ref); non-permission errors keep
  the prior raw-stderr contract; kill-switch off -> contract 1:1 as before ORCH-057.
- D2: new never-raise leaf src/fs_normalize.py — scan_ownership (TTL-cached,
  early-exit per root), applies()-first scope (empty CSV -> self-hosting only),
  opt-in normalize() that chowns ONLY when privileged (no-op under uid 1000).
- D3: best-effort startup detect in main.lifespan (WARNING + Telegram on mismatch,
  never-fatal); read-only fs_ownership block in GET /queue; POST /fs-normalize/check.
  Claim is NOT blocked — the clear early outcome is delivered by D1 at launch.
- Docs/config: .env.example flags + CHANGELOG (architecture README / adr-0031 /
  INFRA.md procedure already landed on the branch).
- Tests: test_fs_normalize.py, test_git_worktree_perm.py,
  test_fs_normalize_startup.py, test_api_queue.py (TC-01..TC-12). Full suite green.

Refs: ORCH-057
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-10 02:53:15 +03:00

..

manual

docs(prompts): rewrite 6 agent prompts in Anthropic canon + emit 52c schema (ORCH-52d)

2026-06-09 15:08:27 +03:00

__init__.py

feat: orchestrator MVP — webhooks, agent launcher, QG checks

2026-05-19 15:57:00 +03:00

conftest.py

feat(merge-verify): guarantee idempotent open code-PR before merge_pr (ORCH-082)

2026-06-09 00:57:08 +03:00

test_agent_frontmatter_no_model.py

feat(launcher): drop dead frontmatter model + validate model name (never-break)

2026-06-08 22:00:54 +03:00

test_agent_prompts_canon.py

docs(prompts): ORCH-092 — аудит 6 агент-промптов (расхардкод, escalation, чистка)

2026-06-09 17:46:27 +03:00

test_analysis_approve_flow_links.py

feat(notifications): direct BRD + Plane links in approve ping (ORCH-017)

2026-06-05 17:58:00 +00:00

test_analyst_comment_regression.py

feat(plane): unified status-comment format with duration line (ORCH-016) (#34)

2026-06-05 17:50:47 +03:00

test_analyst_comment.py

feat(config): external gitea_public_url for clickable doc links

2026-06-03 22:58:18 +03:00

test_analyst_status_only_regression.py

feat(plane): unified status-comment format with duration line (ORCH-016) (#34)

2026-06-05 17:50:47 +03:00

test_api_queue.py

feat(fs): legacy root-owned ownership detect + actionable worktree error (ORCH-057)

2026-06-10 02:53:15 +03:00

test_auto_approve_brd.py

feat(labels): auto-mode by Plane labels — autoApprove + autoDeploy (ORCH-089)

2026-06-09 12:31:24 +03:00

test_auto_deploy.py

feat(labels): auto-mode by Plane labels — autoApprove + autoDeploy (ORCH-089)

2026-06-09 12:31:24 +03:00

test_auto_label_combinations.py

feat(labels): auto-mode by Plane labels — autoApprove + autoDeploy (ORCH-089)

2026-06-09 12:31:24 +03:00

test_auto_labels_integration.py

feat(labels): auto-mode by Plane labels — autoApprove + autoDeploy (ORCH-089)

2026-06-09 12:31:24 +03:00

test_auto_labels_invariants.py

feat(cancel): STOP-status task cancellation + relaunch-hole close (ORCH-090)

2026-06-09 21:31:56 +03:00

test_build_cache_pruner.py

feat(infra): auto-prune docker build cache on mva154 (ORCH-062)

2026-06-09 19:55:00 +03:00

test_config.py

feat(metrics): lightweight read-only GET /metrics raw-signal endpoint (ORCH-099)

2026-06-10 02:09:19 +03:00

test_confirm_deploy_integration.py

fix(tests): integ fixtures — to_analyse always present (066), full status keys, security_gate registered (022)

2026-06-08 06:41:52 +00:00

test_coverage_gate.py

feat(coverage): deterministic test-coverage gate on deploy-staging->deploy edge (ORCH-027)

2026-06-10 01:26:24 +03:00

test_deploy_approve.py

fix(deploy): terminal-window-aware guard so done tasks hold Done in Plane (ORCH-094)

2026-06-09 23:41:24 +03:00

test_deploy_build_once.py

developer(ET): auto-commit from developer run_id=264

2026-06-07 07:46:19 +00:00

test_deploy_finalizer_merge_gate.py

developer(ET): auto-commit from developer run_id=355

2026-06-08 08:45:31 +00:00

test_deploy_hook_mapping.py

developer(ET): auto-commit from developer run_id=264

2026-06-07 07:46:19 +00:00

test_deploy_hook_provenance.py

fix(deploy): drop COPY data/ from Dockerfile so worktree-context staging build succeeds

2026-06-07 14:40:06 +00:00

test_deploy_hook_rollback_sim.py

developer(ET): auto-commit from developer run_id=192

2026-06-06 21:07:35 +00:00

test_deploy_notifications.py

developer(ET): auto-commit from developer run_id=192

2026-06-06 21:07:35 +00:00

test_deploy_restart_merge_recovery.py

developer(ET): auto-commit from developer run_id=355

2026-06-08 08:45:31 +00:00

test_deploy_rollback.py

fix(deploy): clear stale self-deploy markers on rollback; document env

2026-06-06 21:07:35 +00:00

test_deploy_routing.py

developer(ET): auto-commit from developer run_id=192

2026-06-06 21:07:35 +00:00

test_deploy_status_observability.py

fix(deploy): terminal-window-aware guard so done tasks hold Done in Plane (ORCH-094)

2026-06-09 23:41:24 +03:00

test_deploy_status_terminal_guard.py

fix(deploy): terminal-window-aware guard so done tasks hold Done in Plane (ORCH-094)

2026-06-09 23:41:24 +03:00

test_deploy_terminal_sync.py

fix(deploy): terminal-window-aware guard so done tasks hold Done in Plane (ORCH-094)

2026-06-09 23:41:24 +03:00

test_disk_watchdog.py

feat(disk-watchdog): host-FS fill heartbeat + Telegram alert at >=85% (ORCH-063)

2026-06-09 19:04:36 +03:00

test_fmt_duration.py

feat(plane): unified status-comment format with duration line (ORCH-016) (#34)

2026-06-05 17:50:47 +03:00

test_frontmatter.py

refactor(frontmatter): unified frontmatter contract + handoff spec (ORCH-52c)

2026-06-09 14:14:30 +03:00

test_fs_normalize_startup.py

feat(fs): legacy root-owned ownership detect + actionable worktree error (ORCH-057)

2026-06-10 02:53:15 +03:00

test_fs_normalize.py

feat(fs): legacy root-owned ownership detect + actionable worktree error (ORCH-057)

2026-06-10 02:53:15 +03:00

test_git_worktree_perm.py

feat(fs): legacy root-owned ownership detect + actionable worktree error (ORCH-057)

2026-06-10 02:53:15 +03:00

test_git_worktree.py

feat(worktree): git worktree per task to isolate shared /repos (ORCH-2 / S-4)

2026-06-02 21:12:06 +03:00

test_gitea_sha_resolve.py

feat(reconciler): sweeper потерянных webhook (реконсиляция застрявших стадий)

2026-06-06 20:55:25 +00:00

test_image_freshness.py

developer(ET): auto-commit from developer run_id=264

2026-06-07 07:46:19 +00:00

test_job_reaper.py

fix(reaper): Tier-2 finalization grace + claim-before-act (no dup advance)

2026-06-07 16:14:45 +00:00

test_labels.py

feat(labels): auto-mode by Plane labels — autoApprove + autoDeploy (ORCH-089)

2026-06-09 12:31:24 +03:00

test_launcher.py

fix(launcher): runs log dir from settings, not hardcoded /app (CI fix)

2026-06-09 10:06:17 +03:00

test_link_preview_disabled.py

fix: disable Telegram link-preview in tracker notifications (ORCH-080)

2026-06-09 01:32:53 +03:00

test_log_rotation.py

feat(launcher): prune old run logs (L-2)

2026-06-03 09:53:55 +03:00

test_m6_sequence.py

feat(plane): осмысленная статусная модель Plane (слой B — индикация)

2026-06-07 22:02:45 +00:00

test_merge_actor.py

fix(merge-gate): SHA-in-main as sole merge-verify criterion + main regression guard

2026-06-08 16:30:46 +03:00

test_merge_gate_race.py

feat(ORCH-026): task dependencies (B waits for A) + single-repo merge serialization

2026-06-08 19:17:44 +03:00

test_merge_gate.py

fix(merge_gate): retry transient Gitea merge errors + already-in-main guard

2026-06-09 22:47:20 +03:00

test_merge_lease_reclaim.py

feat(reaper): job-reaper + stale merge-lease reclaim + idempotent merge finalization

2026-06-07 16:14:45 +00:00

test_merge_verify.py

fix(merge_gate): retry transient Gitea merge errors + already-in-main guard

2026-06-09 22:47:20 +03:00

test_metrics.py

feat(metrics): lightweight read-only GET /metrics raw-signal endpoint (ORCH-099)

2026-06-10 02:09:19 +03:00

test_notifications_orphans.py

fix(notifications): tracker orphan cleanup + effort-in-line + honest done-time (ORCH-087)

2026-06-09 10:06:17 +03:00

test_notify_approve_links.py

feat(notifications): direct BRD + Plane links in approve ping (ORCH-017)

2026-06-05 17:58:00 +00:00

test_notify_done_regression.py

feat(plane): unified status-comment format with duration line (ORCH-016) (#34)

2026-06-05 17:50:47 +03:00

test_notify_issue_links.py

developer(ET): auto-commit from developer run_id=363

2026-06-08 10:34:33 +00:00

test_orch10_states.py

feat(plane): осмысленная статусная модель Plane (слой B — индикация)

2026-06-07 22:02:45 +00:00

test_orch026_conditionality.py

feat(ORCH-026): task dependencies (B waits for A) + single-repo merge serialization

2026-06-08 19:17:44 +03:00

test_orch026_dep_cycles.py

feat(ORCH-026): task dependencies (B waits for A) + single-repo merge serialization

2026-06-08 19:17:44 +03:00

test_orch026_dep_visibility.py

feat(ORCH-026): task dependencies (B waits for A) + single-repo merge serialization

2026-06-08 19:17:44 +03:00

test_orch026_deps_integration.py

feat(ORCH-026): task dependencies (B waits for A) + single-repo merge serialization

2026-06-08 19:17:44 +03:00

test_orch026_merge_serialize.py

feat(ORCH-026): task dependencies (B waits for A) + single-repo merge serialization

2026-06-08 19:17:44 +03:00

test_orch026_migration.py

feat(ORCH-026): task dependencies (B waits for A) + single-repo merge serialization

2026-06-08 19:17:44 +03:00

test_orch026_premerge_rebase.py

feat(ORCH-026): task dependencies (B waits for A) + single-repo merge serialization

2026-06-08 19:17:44 +03:00

test_orch026_queue_observability.py

feat(ORCH-026): task dependencies (B waits for A) + single-repo merge serialization

2026-06-08 19:17:44 +03:00

test_orch026_serialize_integration.py

feat(ORCH-026): task dependencies (B waits for A) + single-repo merge serialization

2026-06-08 19:17:44 +03:00

test_orch026_task_deps.py

fix(reconciler): terminal-skip + state_uuid dedup on F-1 path

2026-06-09 02:26:49 +03:00

test_orch040_compose.py

fix(infra): run orchestrator containers as host uid 1000:1000 (not root)

2026-06-06 15:02:33 +00:00

test_orch073_conditionality.py

fix(merge-gate): SHA-in-main as sole merge-verify criterion + main regression guard

2026-06-08 16:30:46 +03:00

test_orch073_gitattributes.py

fix(merge-gate): SHA-in-main as sole merge-verify criterion + main regression guard

2026-06-08 16:30:46 +03:00

test_orch073_merge_pr.py

fix(merge-gate): SHA-in-main as sole merge-verify criterion + main regression guard

2026-06-08 16:30:46 +03:00

test_orch073_merge_verify.py

fix(merge-gate): SHA-in-main as sole merge-verify criterion + main regression guard

2026-06-08 16:30:46 +03:00

test_orch073_pr_classify.py

fix(merge-gate): SHA-in-main as sole merge-verify criterion + main regression guard

2026-06-08 16:30:46 +03:00

test_orch073_regression_guard.py

fix(merge-gate): SHA-in-main as sole merge-verify criterion + main regression guard

2026-06-08 16:30:46 +03:00

test_orch082_ensure_pr.py

fix(merge_gate): retry transient Gitea merge errors + already-in-main guard

2026-06-09 22:47:20 +03:00

test_orch082_merge_verify_autocreate.py

feat(merge-verify): guarantee idempotent open code-PR before merge_pr (ORCH-082)

2026-06-09 00:57:08 +03:00

test_orch_52b_docs_standard.py

docs(standards): pipeline docs standard — manifest + templates + ADR-naming

2026-06-09 13:25:39 +03:00

test_pipeline_start_bugs.py

fix(pipeline): fetch issue name from Plane API on status-trigger start

2026-06-03 22:42:53 +03:00

test_plane_author.py

feat(plane): per-agent bot authorship for comments

2026-06-03 10:53:25 +03:00

test_plane_confirm_deploy.py

fix(tests): integ fixtures — to_analyse always present (066), full status keys, security_gate registered (022)

2026-06-08 06:41:52 +00:00

test_plane_issue_link.py

developer(ET): auto-commit from developer run_id=363

2026-06-08 10:34:33 +00:00

test_plane_states_cache.py

fix(reconciler): stop F-2 livelock spam on synced terminal tasks + cache TTL

2026-06-08 05:18:46 +00:00

test_plane_states.py

feat(deploy): dedicated "Confirm Deploy" status triggers prod deploy

2026-06-07 19:20:41 +00:00

test_plane_status_failclosed.py

feat(plane): осмысленная статусная модель Plane (слой B — индикация)

2026-06-07 22:02:45 +00:00

test_plane_status_model.py

feat(coverage): deterministic test-coverage gate on deploy-staging->deploy edge (ORCH-027)

2026-06-10 01:26:24 +03:00

test_plane_sync_labels.py

feat(labels): auto-mode by Plane labels — autoApprove + autoDeploy (ORCH-089)

2026-06-09 12:31:24 +03:00

test_plane_to_analyse_resume.py

feat(plane): осмысленная статусная модель Plane (слой B — индикация)

2026-06-07 22:02:45 +00:00

test_plane_webhook.py

feat(serial-gate): per-repo serial gate + deferred branch cut + rollback-freeze (ORCH-088)

2026-06-09 11:24:48 +03:00

test_post_deploy_integration.py

feat(plane): осмысленная статусная модель Plane (слой B — индикация)

2026-06-07 22:02:45 +00:00

test_post_deploy_monitor_termination.py

fix(deploy): terminal-window-aware guard so done tasks hold Done in Plane (ORCH-094)

2026-06-09 23:41:24 +03:00

test_post_deploy.py

feat(post-deploy): post-deploy prod monitoring + degradation reaction (ORCH-021)

2026-06-07 14:40:06 +00:00

test_post_usage_comments_integration.py

feat(plane): unified status-comment format with duration line (ORCH-016) (#34)

2026-06-05 17:50:47 +03:00

test_projects.py

test(projects,webhook): cover registry resolvers + project filter

2026-06-02 22:30:51 +03:00

test_qg0_title_limit.py

feat(qg0): configurable QG-0 title limit via ORCH_QG0_TITLE_MAX (default 200)

2026-06-08 11:24:01 +00:00

test_qg_checks.py

developer(ET): auto-commit from developer run_id=355

2026-06-08 08:45:31 +00:00

test_qg_merge_gate.py

feat(ORCH-026): task dependencies (B waits for A) + single-repo merge serialization

2026-06-08 19:17:44 +03:00

test_qg_registry_snapshot.py

feat(coverage): deterministic test-coverage gate on deploy-staging->deploy edge (ORCH-027)

2026-06-10 01:26:24 +03:00

test_qg_security.py

feat(security): security-gate (gitleaks secret-scan + pip-audit) before merge

2026-06-07 18:04:50 +00:00

test_qg_verdicts.py

refactor(frontmatter): unified frontmatter contract + handoff spec (ORCH-52c)

2026-06-09 14:14:30 +03:00

test_qg.py

fix(staging): tolerate sandbox-infra-only FAILs (C9a/C9b) in deploy-staging verdict

2026-06-07 12:39:00 +00:00

test_queue_endpoint.py

feat(serial-gate): per-repo serial gate + deferred branch cut + rollback-freeze (ORCH-088)

2026-06-09 11:24:48 +03:00

test_queue.py

feat(reaper): job-reaper + stale merge-lease reclaim + idempotent merge finalization

2026-06-07 16:14:45 +00:00

test_readme_limitations.py

docs(ORCH-079): ORCH-52f — sync README with code + reviewer overview-docs axis

2026-06-09 16:33:33 +03:00

test_reconciler_done_deploy_convergence.py

fix(deploy): terminal-window-aware guard so done tasks hold Done in Plane (ORCH-094)

2026-06-09 23:41:24 +03:00

test_reconciler_plane.py

fix(reconciler): terminal-skip + state_uuid dedup on F-1 path

2026-06-09 02:26:49 +03:00

test_reconciler.py

fix(reconciler): terminal-skip + state_uuid dedup on F-1 path

2026-06-09 02:26:49 +03:00

test_resilience.py

test(resilience): 34 tests for preflight/classifier/backoff/breaker (ORCH-1)

2026-06-03 00:12:17 +03:00

test_resolve_agent_effort.py

fix(effort): per-role floor for --effort resolution + developer→xhigh

2026-06-08 22:50:47 +03:00

test_resolve_agent_model.py

feat(launcher): drop dead frontmatter model + validate model name (never-break)

2026-06-08 22:00:54 +03:00

test_review_parse.py

feat(stage-engine): embed verbatim reviewer/tester findings in rollback task_desc

2026-06-06 04:42:11 +00:00

test_security_gate.py

refactor(frontmatter): unified frontmatter contract + handoff spec (ORCH-52c)

2026-06-09 14:14:30 +03:00

test_self_deploy_cycle_regression.py

fix(deploy): terminal-window-aware guard so done tasks hold Done in Plane (ORCH-094)

2026-06-09 23:41:24 +03:00

test_serial_gate_branch.py

feat(serial-gate): per-repo serial gate + deferred branch cut + rollback-freeze (ORCH-088)

2026-06-09 11:24:48 +03:00

test_serial_gate_e2e.py

feat(serial-gate): per-repo serial gate + deferred branch cut + rollback-freeze (ORCH-088)

2026-06-09 11:24:48 +03:00

test_serial_gate_freeze.py

feat(serial-gate): per-repo serial gate + deferred branch cut + rollback-freeze (ORCH-088)

2026-06-09 11:24:48 +03:00

test_serial_gate.py

feat(cancel): STOP-status task cancellation + relaunch-hole close (ORCH-090)

2026-06-09 21:31:56 +03:00

test_stage_engine_phase_a_cta.py

fix(tests): integ fixtures — to_analyse always present (066), full status keys, security_gate registered (022)

2026-06-08 06:41:52 +00:00

test_stage_engine_phase_b.py

feat(deploy): dedicated "Confirm Deploy" status triggers prod deploy

2026-06-07 19:20:41 +00:00

test_stage_engine_security_gate.py

test(ORCH-022): isolate TC-17 worktree under tmp_path (fix CI PermissionError on /repos/_wt)

2026-06-07 18:04:50 +00:00

test_stage_engine.py

feat(coverage): deterministic test-coverage gate on deploy-staging->deploy edge (ORCH-027)

2026-06-10 01:26:24 +03:00

test_stage_visibility.py

feat(plane): осмысленная статусная модель Plane (слой B — индикация)

2026-06-07 22:02:45 +00:00

test_stages_invariants.py

feat(coverage): deterministic test-coverage gate on deploy-staging->deploy edge (ORCH-027)

2026-06-10 01:26:24 +03:00

test_stages.py

developer(ET): auto-commit from developer run_id=355

2026-06-08 08:45:31 +00:00

test_staging_check_b6.py

fix(staging): tolerate sandbox-infra-only FAILs (C9a/C9b) in deploy-staging verdict

2026-06-07 12:39:00 +00:00

test_staging_precondition.py

developer(ET): auto-commit from developer run_id=192

2026-06-06 21:07:35 +00:00

test_status_comment_authorship.py

feat(plane): unified status-comment format with duration line (ORCH-016) (#34)

2026-06-05 17:50:47 +03:00

test_status_comment_dedup_regression.py

feat(plane): unified status-comment format with duration line (ORCH-016) (#34)

2026-06-05 17:50:47 +03:00

test_status_comment_duration_db_fallback.py

feat(plane): unified status-comment format with duration line (ORCH-016) (#34)

2026-06-05 17:50:47 +03:00

test_status_comment_format.py

feat(plane): unified status-comment format with duration line (ORCH-016) (#34)

2026-06-05 17:50:47 +03:00

test_status_only_verdict.py

feat(webhook): pull reject reason from latest comment

2026-06-03 22:18:24 +03:00

test_status_trigger.py

feat(serial-gate): per-repo serial gate + deferred branch cut + rollback-freeze (ORCH-088)

2026-06-09 11:24:48 +03:00

test_stop_status.py

fix(cancel): narrow STOP critical-window so deploy-park cancel applies (ORCH-090)

2026-06-09 21:31:56 +03:00

test_taskmd_description.py

fix(pipeline): fetch issue name from Plane API on status-trigger start

2026-06-03 22:42:53 +03:00

test_telegram_tracker.py

fix(notifications): tracker orphan cleanup + effort-in-line + honest done-time (ORCH-087)

2026-06-09 10:06:17 +03:00

test_tracker_bump_default.py

developer(ET): auto-commit from developer run_id=363

2026-06-08 10:34:33 +00:00

test_tracker_bump.py

feat(notifications): add bump mode + russify Telegram live-tracker

2026-06-06 10:13:49 +00:00

test_tracker_effort_time.py

fix(notifications): tracker orphan cleanup + effort-in-line + honest done-time (ORCH-087)

2026-06-09 10:06:17 +03:00

test_tracker_html_escape.py

fix(notifications): escape all card data fields at the render boundary (ORCH-095)

2026-06-10 00:17:26 +03:00

test_tracker_issue_link.py

developer(ET): auto-commit from developer run_id=363

2026-06-08 10:34:33 +00:00

test_tracker_rollback_metrics.py

fix(notifications): tracker card — status-map completeness, rollback reflection, stage-metric summation (ORCH-091)

2026-06-09 22:08:52 +03:00

test_tracker_status_line.py

fix(notifications): tracker card — status-map completeness, rollback reflection, stage-metric summation (ORCH-091)

2026-06-09 22:08:52 +03:00

test_usage.py

fix(observability): merge-gate on deploy, full token input, Plane Done, artifact links

2026-06-04 11:17:58 +03:00

test_verdict_status.py

feat(webhook): pull reject reason from latest comment

2026-06-03 22:18:24 +03:00

test_webhook_dedup.py

feat(webhook): start pipeline on In Progress status (not on create)

2026-06-03 18:18:26 +03:00

test_webhooks.py

test: migrate sequential_ids test to In Progress contract

2026-06-04 22:38:09 +03:00