Wookiee Hygiene Run — 2026-04-28

Status: verification-run (Phases 1, 2, 5, 6, 7 only — auto-fix Phase 3a/4 skipped to avoid PR collision with #65)

Run ID: 20260428T113723Z

Triggered by: manual (Claude Code session)

Duration: ~3min

Tokens used: ~12k (Claude classification of 17 findings)

---

Summary

PR: [feat/hygiene-skill](https://github.com/danila-matveev/Wookiee/pull/65) — open, awaiting manual merge

---

Auto-fixed (would-be in Phase 3a)

Guard guard_path would allow:

icloud-dupes — 3 items

• wookiee-hub/tsconfig.temp 2.json — iCloud dupe (suffix " 2.")
• wookiee-hub/package-lock 2.json — iCloud dupe
• wookiee-hub/index 2.html — iCloud dupe

gitignore-violations — 4 items (auto_ignore)

• docs/reports/2026-04-07-product-data-audit-report.md (tracked but ignored)
• docs/reports/database-audit-2026-04-11.md
• scripts/familia_eval/data/contract_summary.md
• scripts/familia_eval/data/supply_conditions.md

empty-directories — 3 items

• .agents/skills 2 (iCloud-dupe-of-dir)
• .kiro/skills 2
• services/sheets_sync/docs/scripts 2

skill-registry-drift / cross-platform-skill-prep — auto_sync (deferred — would call /tool-register + /ecosystem-sync)

---

Needs review

unpushed-work: parallel session WIP

• Paths: services/sheets_etl/article_resolver.py (M), services/sheets_sync/sync/promocodes/ (??)
• Reason: NOT in whitelist.unpushed_paths (parallel CRM Phase 2 work in another window)
• Suggested action: leave alone — parallel session active

stray-binaries: 22 user-generated reports

• Reason: 22 binary files (.xlsx/.pdf) in services/wb_localization/Отчеты готовые/, services/logistics_audit/, docs/archive/ — not in whitelist.binaries_keep
• Suggested action: review before mass-delete (most are genuine reports, not garbage)

orphan-docs: 72 candidates (heuristic over-broad)

• Reason: basename grep finds 72 docs without other-doc references — TOC entries usually use full paths, false-positive rate >90%
• Suggested action: refine heuristic before action

broken-doc-links: 6

• Reason: 6 markdown links pointing to non-existent files
• Suggested action: enumerate + fix (could be intentional renames)

missing-readme: services/sheets_etl/

• Suggested action: propose stub README

stale-branches: origin/refactor/project-restructure (2 months)

• Suggested action: keep/merge/delete?

security-scan FALSE POSITIVE

• Path: .env.example (GOOGLE_SERVICE_ACCOUNT_FILE=...)
• Reason: regex matched path-shaped value; H3 fix excludes _FILE=/_PATH=/_DIR= patterns going forward

---

Security flags

0 findings — no real secrets in tracked files, no .env tracked, no real values in .env.example after H3 fix.

---

Stats

• Phase 1 (SCAN): ~45s
• Phase 2 (CLASSIFY): ~15s
• Phase 3a (ACT auto): SKIPPED (verification mode)
• Phase 3c (security): n/a (0 findings)
• Phase 4 (PR): SKIPPED (verification mode — PR #65 already open)
• Phase 5 (PUBLISH): ~5s
• Phase 6 (NOTIFY): ~2s
• Phase 7 (LOG): ~3s
• Repo state hash: 453c1258de80afba99b4ee67a82a6e47c8b0b372

Notes for production v1.0+

• H1-H6 fixes applied in commit 453c125
• orphan-docs heuristic still over-broad — defer until v1.1
• structure-conventions LLM-driven check deferred
• First production run via GH Actions cron expected ~00:00 São Paulo after merge