Complete issues #144 and #147 with a green deep matrix

[Anthony Johnson II (AJ-EthereaLogic-ai)]

Root cause

• body-only agent test selects skipped README on Linux #144 coverage selected the first agents/*.md entry, which could be README.md; mutating that file did not exercise an actual agent definition, so the Linux regression was nondeterministic.
• RUN_VALIDATE=1 TypeScript and polyglot legs fail on root-owned npm cache #147 prepared /opt/npm-cache before dependency installation, but root-created descendants could remain unwritable when local CI later ran as an arbitrary host UID:GID.
• The carried body-only agent test selects skipped README on Linux #144/RUN_VALIDATE=1 TypeScript and polyglot legs fail on root-owned npm cache #147 candidate also needed a behavior-preserving compatibility correction: rendered ty rejects the two direct pytest.skip call forms introduced by PR refactor: issue #111 remaining cleanups — loader fan-out, read-lines helper, dead code, __main__ guard, copier portability #148.

Change

• Select a sorted, non-README agent definition for the body-only model-key regression.
• Normalize permissions recursively within /opt/npm-cache after installs, without broadening runtime privileges or changing the host-UID execution model.
• Express the two template-source skips with the existing _TEMPLATE_SOURCE pytest.mark.skipif pattern and unchanged reason text.
• Reconcile the local-CI guide, changelog, and project dashboard with the measured behavior.

Impact

The governance regression now deterministically exercises a real agent on Linux. Arbitrary runtime UIDs can write every required npm-cache descendant. Rendered ty accepts the preserved template-source skip behavior. Validation runners, package manifests, matrix selection, hooks, workflows, Jinja expressions, and check-governance.sh are unchanged.

Checks

• Focused body-only agent test selects skipped README on Linux #144 regression: macOS 1 passed in 0.38s; Linux/arm64 1 passed in 0.10s.
• Complete skill-contract file: 10 passed in 2.39s.
• Arbitrary UID:GID probe: uid=12345 gid=23456 cache-write=PASS npm-cache-verify=PASS.
• TypeScript two-renderer reproduction: exit 0; cookiecutter pass, copier pass, render equivalence pass.
• Tracked pre-push Tier 1 at dd82f8921df98b3e2c4aa146ddf77281047cfee7: {"event":"gate","run_id":"20260720T044837Z","git_commit":"dd82f8921df98b3e2c4aa146ddf77281047cfee7","branch":"adws/job_20260720_0003/issues-144-147-deep-green","dirty":false,"overall":"pass","steps":[{"step":"pytest","status":"pass","duration_s":7},{"step":"render-smoke","status":"pass","duration_s":1}]}
• Exact full matrix evidence: {"event":"orb_matrix","run_id":"20260720T043115Z","git_commit":"916b0468e0608ea096bd22dab9d5d514421813a3","run_validate":"1","overall":"pass","legs":[{"step":"pytest","status":"pass"},{"tool":"cookiecutter","variant":"python-mit-ty","language":"python","status":"pass","duration_s":7},{"tool":"copier","variant":"python-mit-ty","language":"python","status":"pass","duration_s":7},{"tool":"cookiecutter","variant":"python-mit-mypy","language":"python","status":"pass","duration_s":9},{"tool":"copier","variant":"python-mit-mypy","language":"python","status":"pass","duration_s":8},{"tool":"cookiecutter","variant":"python-apache-sbom-ty","language":"python","status":"pass","duration_s":7},{"tool":"copier","variant":"python-apache-sbom-ty","language":"python","status":"pass","duration_s":8},{"tool":"cookiecutter","variant":"typescript-mit","language":"typescript","status":"pass","duration_s":5},{"tool":"copier","variant":"typescript-mit","language":"typescript","status":"pass","duration_s":4},{"tool":"cookiecutter","variant":"typescript-apache-tools","language":"typescript","status":"pass","duration_s":4},{"tool":"copier","variant":"typescript-apache-tools","language":"typescript","status":"pass","duration_s":4},{"tool":"cookiecutter","variant":"polyglot-mit-all-ty","language":"polyglot","status":"pass","duration_s":10},{"tool":"copier","variant":"polyglot-mit-all-ty","language":"polyglot","status":"pass","duration_s":10},{"tool":"cookiecutter","variant":"polyglot-mit-all-macaron-mypy","language":"polyglot","status":"pass","duration_s":11},{"tool":"copier","variant":"polyglot-mit-all-macaron-mypy","language":"polyglot","status":"pass","duration_s":11},{"step":"render-equivalence","status":"pass"}]}
• Full matrix overall: pass in 114s; all 14 renderer/variant legs plus render equivalence passed.
• git diff --check: pass; exact six-file scope confirmed.

ADWS evidence: artifacts/job_20260720_0003/

Closes #144
Closes #147

Field-verification evidence

The dashboard now carries a dated, tracked record for the execution-only criteria. It includes the corrected SkillContractTests::test_governance_check_rejects_body_only_agent_key host command, retained focused/Tier 1/UID/targeted-deep outcomes, the exact shipped-code 14-leg matrix JSON, and the linked-worktree clone failure explicitly scoped as occurring before any matrix leg.

Fresh test attempt 3 materialized the complete documentation-bearing candidate at scratch commit 04cdafdf80287475f004f57d88e4a55f06a9e63c and reported:

• corrected focused body-only agent test selects skipped README on Linux #144 node: macOS 1 passed in 0.38s; Linux/arm64 1 passed in 0.08s;
• complete skill-contract file: 10 passed in 2.44s;
• Tier 1: pytest 7s and render smoke 1s, overall pass;
• Python python-mit-ty deep leg: pass;
• arbitrary UID:GID probe: uid=12345 gid=23456 cache-write=PASS npm-cache-verify=PASS;
• two-renderer typescript-mit deep run plus equivalence: pass;
• full RUN_VALIDATE=1 matrix: all 14 renderer/variant legs plus render equivalence passed in 119s (run_id=20260720T050822Z).

The final tracked dashboard commit is ae750b5504ce85bf1c19a3d5f6cafcda98792a6e. Its normal push ran the tracked pre-push gate successfully:

{"event":"gate","run_id":"20260720T052631Z","git_commit":"ae750b5504ce85bf1c19a3d5f6cafcda98792a6e","branch":"adws/job_20260720_0003/issues-144-147-deep-green","dirty":false,"overall":"pass","steps":[{"step":"pytest","status":"pass","duration_s":7},{"step":"render-smoke","status":"pass","duration_s":1}]}

These are local-CI and ADWS records; no hosted GitHub Actions pass is claimed.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4be66d21-7f43-4ee4-aa51-37d74003da92

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch adws/job_20260720_0003/issues-144-147-deep-green

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

The job was not started because the account is locked due to a billing issue.

[codacy-production]

Not up to standards ⛔

🔴 Issues 1 minor

Alerts:
⚠ 1 issue (≤ 0 issues of at least minor severity)

Results:
1 new issue

Category	Results
CodeStyle	1 minor

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}