Make ordinary workspaces group shareable

internal/adapters/subprocess/run.go

@@ -12,6 +12,7 @@ import (
 	"strings"
 	"time"
 
+	"gitea.maximumdirect.net/eric/narratio/internal/fileops"
 	"gopkg.in/yaml.v3"
 )
 
@@ -134,7 +135,7 @@ func WriteFileAtomic(path string, data []byte, perm os.FileMode) error {
 	}
 
 	dir := filepath.Dir(path)
-	if err := os.MkdirAll(dir, 0o755); err != nil {
+	if err := fileops.EnsureWorkspaceDirectory(dir); err != nil {
 		return fmt.Errorf("create parent directory %q: %w", dir, err)
 	}
 
@@ -246,13 +247,17 @@ func logWriter(path string) (*os.File, io.Writer, error) {
 }
 
 func openLogFile(path string) (*os.File, error) {
-	if err := os.MkdirAll(filepath.Dir(path), 0o755); err != nil {
+	if err := fileops.EnsureWorkspaceDirectory(filepath.Dir(path)); err != nil {
 		return nil, fmt.Errorf("create log directory for %q: %w", path, err)
 	}
 	f, err := os.Create(path)
 	if err != nil {
 		return nil, fmt.Errorf("open log file %q: %w", path, err)
 	}
+	if err := f.Chmod(fileops.WorkspaceFileMode); err != nil {
+		_ = f.Close()
+		return nil, fmt.Errorf("set log file permissions %q: %w", path, err)
+	}
 	return f, nil
 }