fix(hayabusa): restore scheduled EVTX upload pipeline

ansible/README.md

@@ -157,6 +157,7 @@ Playbook:
 - `aw_windows_hayabusa_auto_upload_hours_back: 6` — lookback для каждого запуска;
 - `aw_windows_hayabusa_auto_upload_mode: "incident"` — mode для server-side processing;
 - `aw_windows_hayabusa_auto_upload_task_name: "ActivityWatch Hayabusa Upload"` — имя scheduled task.
+- `aw_windows_hayabusa_auto_upload_run_as_user: "Администратор"` — production principal для scheduled task на RDP-хосте. На `SHARKON2025` запуск `powershell.exe` из `SYSTEM` возвращал `0xC0000142`, поэтому авто-upload должен идти как interactive/highest task от локального администратора.
 
 ## Server-side Hayabusa auto-case и Telegram alerting
 
@@ -176,6 +177,8 @@ Playbook:
 - пишет bounded metadata в `forensics.hayabusa`;
 - отправляет Telegram alert.
 
+Для Windows direct upload пользователь `awops` на AW-server должен иметь право записи в `/opt/activitywatch/aw-rus-ops/drop`; нормальное состояние каталога: owner/group `awops:awops`, mode `0750`. Unit `aw-hayabusa-drop.service` работает от root и после обработки очищает `drop`.
+
 Основные vars:
 
 - `aw_hayabusa_auto_case_enabled: true`

ansible/deploy_aw_server.yml

@@ -2591,6 +2591,22 @@
             - /opt/activitywatch/aw-rus-ops/ansible
             - /opt/activitywatch/aw-rus-ops/drop
 
+        - name: Проверить наличие upload user awops для Hayabusa drop-zone
+          ansible.builtin.command:
+            cmd: id -u awops
+          register: aw_hayabusa_drop_upload_user
+          changed_when: false
+          failed_when: false
+
+        - name: Разрешить awops писать в Hayabusa drop-zone
+          ansible.builtin.file:
+            path: /opt/activitywatch/aw-rus-ops/drop
+            state: directory
+            owner: awops
+            group: awops
+            mode: "0750"
+          when: aw_hayabusa_drop_upload_user.rc == 0
+
         - name: Положить исходный wrapper в server-side ops bundle
           ansible.builtin.copy:
             src: "{{ aw_repo_root }}/aw-server/hayabusa/aw-hayabusa.sh"

ansible/deploy_aw_windows.yml

@@ -41,6 +41,7 @@
     aw_windows_hayabusa_auto_upload_hours_back: 6
     aw_windows_hayabusa_auto_upload_mode: "incident"
     aw_windows_hayabusa_auto_upload_task_name: "ActivityWatch Hayabusa Upload"
+    aw_windows_hayabusa_auto_upload_run_as_user: ""
     aw_windows_file_1c_auto_upload_enabled: true
     aw_windows_file_1c_auto_upload_interval_minutes: 15
     aw_windows_file_1c_auto_upload_task_name: "ActivityWatch File1C Upload"
@@ -311,6 +312,7 @@
             HayabusaAutoUploadHoursBack = {{ aw_windows_hayabusa_auto_upload_hours_back | int }}
             HayabusaAutoUploadMode = "{{ aw_windows_hayabusa_auto_upload_mode }}"
             HayabusaAutoUploadTaskName = "{{ aw_windows_hayabusa_auto_upload_task_name }}"
+            HayabusaAutoUploadRunAsUser = "{{ aw_windows_hayabusa_auto_upload_run_as_user }}"
             File1CAutoUploadEnabled = {{ '$true' if (aw_windows_file_1c_auto_upload_enabled | bool) else '$false' }}
             File1CAutoUploadIntervalMinutes = {{ aw_windows_file_1c_auto_upload_interval_minutes | int }}
             File1CAutoUploadTaskName = "{{ aw_windows_file_1c_auto_upload_task_name }}"

ansible/group_vars/aw_windows.yml

@@ -39,6 +39,7 @@ aw_windows_hayabusa_auto_upload_interval_hours: 6
 aw_windows_hayabusa_auto_upload_hours_back: 6
 aw_windows_hayabusa_auto_upload_mode: "incident"
 aw_windows_hayabusa_auto_upload_task_name: "ActivityWatch Hayabusa Upload"
+aw_windows_hayabusa_auto_upload_run_as_user: "{{ aw_windows_builtin_administrator_name }}"
 
 aw_windows_afk_enabled: true
 aw_windows_window_enabled: true

ansible/group_vars/windows.example.yml

@@ -9,6 +9,7 @@ aw_windows_hayabusa_auto_upload_interval_hours: 6
 aw_windows_hayabusa_auto_upload_hours_back: 6
 aw_windows_hayabusa_auto_upload_mode: "incident"
 aw_windows_hayabusa_auto_upload_task_name: "ActivityWatch Hayabusa Upload"
+aw_windows_hayabusa_auto_upload_run_as_user: ""
 aw_windows_package_version: "v0.13.2"
 aw_windows_package_url: "https://github.com/ActivityWatch/activitywatch/releases/download/v0.13.2/activitywatch-v0.13.2-windows-x86_64.zip"
 aw_windows_package_zip_path: ""