From 49ca415471d21d8feff8f8a7a56a6cb24d4f2478 Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Wed, 23 Sep 2026 12:11:12 +0000 Subject: [PATCH] runtime: publish SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1 --- ...-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1.json | 38 ++ ...S-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1.txt | 93 +++++ runtime/latest.json | 16 +- runtime/latest.txt | 388 +++--------------- 4 files changed, 205 insertions(+), 330 deletions(-) create mode 100644 runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1.json create mode 100644 runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1.txt diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1.json b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1.json new file mode 100644 index 00000000..c2bff37a --- /dev/null +++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "spb-tls-bridge-9189-local-carrier-rca", + "started_at_utc": "2026-09-23T12:11:08Z", + "finished_at_utc": "2026-09-23T12:11:11Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "67f2bec7a01f39fbfdf79b5496aec0aae6532cca8cfd5192bb6552cbcbe851b9", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "575faa031e1c1f1224a7c9cae59ecf22d97781ab22ca48ffdb8a6b50cc3e528c", + "sanitized_output_sha256": "575faa031e1c1f1224a7c9cae59ecf22d97781ab22ca48ffdb8a6b50cc3e528c", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "RECOVERY9190_BEGIN=true\nTARGET_CHANGE_CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1\nTARGET_LOCAL_CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1\nTARGET_CHANGE_EXACT_GITEA=404\nTARGET_LOCAL_EXACT_GITEA=404\nMUTATION_BOUNDARY=READ_ONLY_ONLY;NO_VM130_WRITE;NO_SPB_WRITE;NO_DNS_WRITE;NO_NGINX_RELOAD\nLOCAL_ARTIFACT=dir.txt|PRESENT=true\nLOCAL_ARTIFACT_META=dir.txt|SIZE=182|SHA16=09fb7d225bf69875\nLOCAL_SAFE=dir.txt|L1|endpoint.b64\nLOCAL_SAFE=dir.txt|L2|local-preflight-err.txt\nLOCAL_SAFE=dir.txt|L3|local-preflight-out.txt\nLOCAL_SAFE=dir.txt|L4|local-summary.env\nLOCAL_SAFE=dir.txt|L5|outer.b64\nLOCAL_SAFE=dir.txt|L6|outer.sh\nLOCAL_SAFE=dir.txt|L7|preflight.b64\nLOCAL_SAFE=dir.txt|L8|preflight.ps1\nLOCAL_SAFE=dir.txt|L9|spb-probe-err.txt\nLOCAL_SAFE=dir.txt|L10|spb-probe-out.txt\nLOCAL_SAFE=dir.txt|L11|sudo.b64\nLOCAL_ARTIFACT=local-preflight-err.txt|PRESENT=true\nLOCAL_ARTIFACT_META=local-preflight-err.txt|SIZE=0|SHA16=e3b0c44298fc1c14\nLOCAL_ARTIFACT=local-preflight-out.txt|PRESENT=true\nLOCAL_ARTIFACT_META=local-preflight-out.txt|SIZE=0|SHA16=e3b0c44298fc1c14\nLOCAL_ARTIFACT=local-summary.env|PRESENT=true\nLOCAL_ARTIFACT_META=local-summary.env|SIZE=365|SHA16=8c6afc015d07d942\nLOCAL_SAFE=local-summary.env|L1|LOCAL_PREFLIGHT_BEGIN=true\nLOCAL_SAFE=local-summary.env|L2|CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1\nLOCAL_SAFE=local-summary.env|L3|PLINK_PRESENT=true\nLOCAL_SAFE=local-summary.env|L4|WINDOWS_ENDPOINT_SHA16=6d6149f42864ce03\nLOCAL_SAFE=local-summary.env|L5|WINDOWS_DNS_IPV4_COUNT=1\nLOCAL_SAFE=local-summary.env|L6|WINDOWS_ENDPOINT_HASH_MATCH=true\nLOCAL_SAFE=local-summary.env|L7|WINDOWS_PINNED_SPB_PROBE_RC=0\nLOCAL_SAFE=local-summary.env|L8|WINDOWS_EDGEADMIN_MATCH=false\nLOCAL_SAFE=local-summary.env|L9|WINDOWS_DPAPI_DECRYPTABLE_COUNT=1\nLOCAL_SAFE=local-summary.env|L10|LOCAL_PREFLIGHT_STATUS=FAIL\nLOCAL_SAFE=local-summary.env|L11|LOCAL_PREFLIGHT_END=true\nLOCAL_ARTIFACT=status.txt|PRESENT=false\nLOCAL_ARTIFACT=stdout.txt|PRESENT=false\nLOCAL_ARTIFACT=stderr.txt|PRESENT=false\nLOCAL_ARTIFACT=preflight.ps1|PRESENT=true\nLOCAL_ARTIFACT_META=preflight.ps1|SIZE=5509|SHA16=ccc6689ad5229a5f\nLOCAL_ARTIFACT=outer.sh|PRESENT=true\nLOCAL_ARTIFACT_META=outer.sh|SIZE=24740|SHA16=1444bb7fae636e67\nTARGET_LEDGER_MATCH_COUNT=0\nTARGET_LOCAL_FILE_COUNT=0\nTARGET_PROCESS_COUNT=0\nTARGET_RUN_FILE_COUNT=1\nTARGET_JOURNAL_MATCH_COUNT=0\nVM130_QGA_TRANSPORT_RC=0\nVM130_QGA_STDERR_SHA16=e3b0c44298fc1c14\nVM130_QGA_EXITCODE=0\nVM130_GUEST_STDERR_SHA16=e3b0c44298fc1c14\nRECOVERY9188_VM130={\"bridge_root_exists\":false,\"certs\":{\"git-read.gram1.ru\":{\"checkend48h\":false,\"checkhost\":false,\"dir_exists\":false,\"fullchain_exists\":false,\"privkey_exists\":false,\"spki_match\":false},\"www.hbarhub.ru\":{\"checkend48h\":false,\"checkhost\":false,\"dir_exists\":false,\"fullchain_exists\":false,\"privkey_exists\":false,\"spki_match\":false},\"www.newfilya.ru\":{\"checkend48h\":false,\"checkhost\":false,\"dir_exists\":false,\"fullchain_exists\":false,\"privkey_exists\":false,\"spki_match\":false}},\"classification\":\"CLEAN_BASELINE\",\"configs\":{\"991201.conf\":{\"exists\":false},\"991202.conf\":{\"exists\":false},\"991203.conf\":{\"exists\":false}},\"https\":{\"git-read.gram1.ru\":{\"code\":\"000\",\"rc\":60,\"stderr_sha16\":\"6039978cbf174c90\"},\"www.hbarhub.ru\":{\"code\":\"000\",\"rc\":60,\"stderr_sha16\":\"6039978cbf174c90\"},\"www.newfilya.ru\":{\"code\":\"000\",\"rc\":60,\"stderr_sha16\":\"6039978cbf174c90\"}},\"nginx_test\":{\"rc\":0,\"stderr_sha16\":\"9cb221b6993277a1\"},\"npm_root_exists\":true,\"npmplus\":{\"data_mount_exact\":true,\"health\":\"healthy\",\"inspect_rc\":0,\"running\":true},\"proxy_root_exists\":true,\"uid\":0}\nACTUAL_VM130_CLASSIFICATION=CLEAN_BASELINE\nRECOVERY9190_COMPLETE=true\nCHANGES_MADE=NO\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_9189_LOCAL_CARRIER_RCA\nDECISION=READ_EXACT_9190_AND_FIX_ONLY_PROVEN_9189_LOCAL_STAGE\nNEXT_GATE=EXACT_9190_LOCAL_ERROR_AND_VM130_CLASSIFICATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1.txt b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1.txt new file mode 100644 index 00000000..f57f49c5 --- /dev/null +++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1.txt @@ -0,0 +1,93 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=spb-tls-bridge-9189-local-carrier-rca +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=67f2bec7a01f39fbfdf79b5496aec0aae6532cca8cfd5192bb6552cbcbe851b9 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=575faa031e1c1f1224a7c9cae59ecf22d97781ab22ca48ffdb8a6b50cc3e528c +SANITIZED_OUTPUT_SHA256=575faa031e1c1f1224a7c9cae59ecf22d97781ab22ca48ffdb8a6b50cc3e528c +OUTPUT_BEGIN +RECOVERY9190_BEGIN=true +TARGET_CHANGE_CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1 +TARGET_LOCAL_CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1 +TARGET_CHANGE_EXACT_GITEA=404 +TARGET_LOCAL_EXACT_GITEA=404 +MUTATION_BOUNDARY=READ_ONLY_ONLY;NO_VM130_WRITE;NO_SPB_WRITE;NO_DNS_WRITE;NO_NGINX_RELOAD +LOCAL_ARTIFACT=dir.txt|PRESENT=true +LOCAL_ARTIFACT_META=dir.txt|SIZE=182|SHA16=09fb7d225bf69875 +LOCAL_SAFE=dir.txt|L1|endpoint.b64 +LOCAL_SAFE=dir.txt|L2|local-preflight-err.txt +LOCAL_SAFE=dir.txt|L3|local-preflight-out.txt +LOCAL_SAFE=dir.txt|L4|local-summary.env +LOCAL_SAFE=dir.txt|L5|outer.b64 +LOCAL_SAFE=dir.txt|L6|outer.sh +LOCAL_SAFE=dir.txt|L7|preflight.b64 +LOCAL_SAFE=dir.txt|L8|preflight.ps1 +LOCAL_SAFE=dir.txt|L9|spb-probe-err.txt +LOCAL_SAFE=dir.txt|L10|spb-probe-out.txt +LOCAL_SAFE=dir.txt|L11|sudo.b64 +LOCAL_ARTIFACT=local-preflight-err.txt|PRESENT=true +LOCAL_ARTIFACT_META=local-preflight-err.txt|SIZE=0|SHA16=e3b0c44298fc1c14 +LOCAL_ARTIFACT=local-preflight-out.txt|PRESENT=true +LOCAL_ARTIFACT_META=local-preflight-out.txt|SIZE=0|SHA16=e3b0c44298fc1c14 +LOCAL_ARTIFACT=local-summary.env|PRESENT=true +LOCAL_ARTIFACT_META=local-summary.env|SIZE=365|SHA16=8c6afc015d07d942 +LOCAL_SAFE=local-summary.env|L1|LOCAL_PREFLIGHT_BEGIN=true +LOCAL_SAFE=local-summary.env|L2|CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1 +LOCAL_SAFE=local-summary.env|L3|PLINK_PRESENT=true +LOCAL_SAFE=local-summary.env|L4|WINDOWS_ENDPOINT_SHA16=6d6149f42864ce03 +LOCAL_SAFE=local-summary.env|L5|WINDOWS_DNS_IPV4_COUNT=1 +LOCAL_SAFE=local-summary.env|L6|WINDOWS_ENDPOINT_HASH_MATCH=true +LOCAL_SAFE=local-summary.env|L7|WINDOWS_PINNED_SPB_PROBE_RC=0 +LOCAL_SAFE=local-summary.env|L8|WINDOWS_EDGEADMIN_MATCH=false +LOCAL_SAFE=local-summary.env|L9|WINDOWS_DPAPI_DECRYPTABLE_COUNT=1 +LOCAL_SAFE=local-summary.env|L10|LOCAL_PREFLIGHT_STATUS=FAIL +LOCAL_SAFE=local-summary.env|L11|LOCAL_PREFLIGHT_END=true +LOCAL_ARTIFACT=status.txt|PRESENT=false +LOCAL_ARTIFACT=stdout.txt|PRESENT=false +LOCAL_ARTIFACT=stderr.txt|PRESENT=false +LOCAL_ARTIFACT=preflight.ps1|PRESENT=true +LOCAL_ARTIFACT_META=preflight.ps1|SIZE=5509|SHA16=ccc6689ad5229a5f +LOCAL_ARTIFACT=outer.sh|PRESENT=true +LOCAL_ARTIFACT_META=outer.sh|SIZE=24740|SHA16=1444bb7fae636e67 +TARGET_LEDGER_MATCH_COUNT=0 +TARGET_LOCAL_FILE_COUNT=0 +TARGET_PROCESS_COUNT=0 +TARGET_RUN_FILE_COUNT=1 +TARGET_JOURNAL_MATCH_COUNT=0 +VM130_QGA_TRANSPORT_RC=0 +VM130_QGA_STDERR_SHA16=e3b0c44298fc1c14 +VM130_QGA_EXITCODE=0 +VM130_GUEST_STDERR_SHA16=e3b0c44298fc1c14 +RECOVERY9188_VM130={"bridge_root_exists":false,"certs":{"git-read.gram1.ru":{"checkend48h":false,"checkhost":false,"dir_exists":false,"fullchain_exists":false,"privkey_exists":false,"spki_match":false},"www.hbarhub.ru":{"checkend48h":false,"checkhost":false,"dir_exists":false,"fullchain_exists":false,"privkey_exists":false,"spki_match":false},"www.newfilya.ru":{"checkend48h":false,"checkhost":false,"dir_exists":false,"fullchain_exists":false,"privkey_exists":false,"spki_match":false}},"classification":"CLEAN_BASELINE","configs":{"991201.conf":{"exists":false},"991202.conf":{"exists":false},"991203.conf":{"exists":false}},"https":{"git-read.gram1.ru":{"code":"000","rc":60,"stderr_sha16":"6039978cbf174c90"},"www.hbarhub.ru":{"code":"000","rc":60,"stderr_sha16":"6039978cbf174c90"},"www.newfilya.ru":{"code":"000","rc":60,"stderr_sha16":"6039978cbf174c90"}},"nginx_test":{"rc":0,"stderr_sha16":"9cb221b6993277a1"},"npm_root_exists":true,"npmplus":{"data_mount_exact":true,"health":"healthy","inspect_rc":0,"running":true},"proxy_root_exists":true,"uid":0} +ACTUAL_VM130_CLASSIFICATION=CLEAN_BASELINE +RECOVERY9190_COMPLETE=true +CHANGES_MADE=NO +TASK_COMPLETE=true +TASK_RESULT=PASS_SPB_TLS_BRIDGE_9189_LOCAL_CARRIER_RCA +DECISION=READ_EXACT_9190_AND_FIX_ONLY_PROVEN_9189_LOCAL_STAGE +NEXT_GATE=EXACT_9190_LOCAL_ERROR_AND_VM130_CLASSIFICATION +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index f54056ab..c2bff37a 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260923-SKLADCHIK-PREFLIGHT-LINE13-RCA-943R1", + "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1", "status": "OK", "rc": 0, "host": "pve01", "mode": "read-only", - "component": "skladchik-preflight-line13-rca", - "started_at_utc": "2026-09-23T12:08:41Z", - "finished_at_utc": "2026-09-23T12:08:41Z", + "component": "spb-tls-bridge-9189-local-carrier-rca", + "started_at_utc": "2026-09-23T12:11:08Z", + "finished_at_utc": "2026-09-23T12:11:11Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "dd3a88084befa0f31cc5f49ef676cb01eec2dfd507c1e1bfd993fba637e753d7", + "command_sha256": "67f2bec7a01f39fbfdf79b5496aec0aae6532cca8cfd5192bb6552cbcbe851b9", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "2c42ff80da827c41e303d1369683a91c76fe254e8a5cc304eeb6038334a8dafa", - "sanitized_output_sha256": "17ace4d0e724d6b41d9460dad37dfe85e5b452f724ea763d0ba457d6ad255c77", + "raw_evidence_sha256": "575faa031e1c1f1224a7c9cae59ecf22d97781ab22ca48ffdb8a6b50cc3e528c", + "sanitized_output_sha256": "575faa031e1c1f1224a7c9cae59ecf22d97781ab22ca48ffdb8a6b50cc3e528c", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "SKLADCHIK943_BEGIN=true\nCOMMAND_ID=SUPPORT-260923-SKLADCHIK-PREFLIGHT-LINE13-RCA-943R1\nMODE=read-only\nCOMPONENT=skladchik-preflight-line13-rca\nPREDECESSOR_942=FAILED_STAGE_PREFLIGHT;DETAIL_phase_preflight_line_13_rc_1\nMUTATION_BOUNDARY=NONE_READ_ONLY\nPHASE_PREFLIGHT_SOURCE_BEGIN\nPHASE_PREFLIGHT_SOURCE_PRESENT=true\nPHASE_PREFLIGHT_SOURCE_SHA256=f3e533ebd72ba2343a78797a8087c529c9fcfa2b3cabc45b3c0bd477356a8cc9\nPHASE_PREFLIGHT_SOURCE_BYTES=3076\nPHASE_PREFLIGHT_SOURCE_LINES=29\n0001:#!/usr/bin/env bash\n0002:set -Eeuo pipefail\n0003:on_err(){ local rc=$?; trap - ERR; printf 'ROOT_CAUSE=UNEXPECTED_PHASE_ERROR\\nROOT_CAUSE_COUNT=1\\nDETAIL=phase=preflight line=%s rc=%s\\n' \"${1:-0}\" \"$rc\"; exit \"$rc\"; }\n0004:trap 'on_err \"$LINENO\"' ERR\n0005:export SYSTEMD_PAGER=cat PAGER=cat SYSTEMD_LESS=FRXMK\n0006:TASK_ID=skladchik-reports-monitor-controlled-reauth-v1\n0007:EDGE=debian@[PRIVATE_IP]\n0008:CURRENT_EDGE_SHA=b13d846cf089d450e3d5ac9e85ad1e232c198930e466bb8b82f6983a4d48ce0e\n0009:TARGET_EDGE_SHA=10fe854274dca1a053cfd8c0155340bd689bf3f6555c70dbc14b890cbafb93fa\n0010:SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH]\n0011:test \"$(hostname -f)\" = pve01.gram1.ru\n0012:test -z \"$(git -C /srv/homelab-desired-state status --porcelain)\"\n0013:test \"$(sha256sum /usr/local/sbin/skladchik-reports-monitor-cookie-update | awk '{print $1}')\" = a3006723d902fb7735c593003a6c6755fa3d69683126ec5f53165131f754fd7a\n0014:test \"$(sha256sum /usr/local/sbin/skladchik-reports-monitor-backup | awk '{print $1}')\" = ad0652d1e154fca94a20bdf831b40b831fd0d862eb104ec3377f486e96270d0a\n0015:test \"$(sha256sum /usr/local/sbin/skladchik-reports-monitor-monthly-selftest-watch | awk '{print $1}')\" = dd2c7e26aaa6835fa4ac4365eade338eb7b19f4bfe7528179c59cf8039454180\n0016:test \"$(sha256sum /usr/local/sbin/skladchik-reports-monitor-status | awk '{print $1}')\" = f94ec75155f415b35517dade0bfba00926eba6088e0c2b5c96ae79daa5dc368f\n0017:test \"$(sha256sum /usr/local/sbin/skladchik-reports-monitor-supervisor | awk '{print $1}')\" = 69494a4c32fa632844cdb54aabbe302a14d478924efcb719c6cd3d594d102369\n0018:test \"$(sha256sum /srv/homelab-desired-state/sbin/skladchik-reports-monitor-backup | awk '{print $1}')\" = ad0652d1e154fca94a20bdf831b40b831fd0d862eb104ec3377f486e96270d0a\n0019:test \"$(sha256sum \"$HOMELAB_TASK_DIR/assets/edge/skladchik-reports-monitor-cookie-update-edge\" | awk '{print $1}')\" = \"$TARGET_EDGE_SHA\"\n0020:RESULT=\"$(ssh \"${SSH[@]}\" \"$EDGE\" sudo -n /bin/bash -s -- \"$CURRENT_EDGE_SHA\" < \"$HOMELAB_TASK_DIR/assets/edge-preflight.sh\")\"\n0021:grep -Fq 'EDGE_PREFLIGHT_STATUS=OK' <<<\"$RESULT\"\n0022:test \"$(systemctl is-enabled skladchik-reports-monitor-supervisor.timer)\" = enabled\n0023:test \"$(systemctl is-active skladchik-reports-monitor-supervisor.timer)\" = active\n0024:test \"$(systemctl show skladchik-reports-monitor-supervisor.service -p Result --value)\" = exit-code\n0025:grep -q '^STATUS=OK$' /var/lib/skladchik-reports-monitor-backup/health.txt\n0026:grep -q '^STATUS=OK$' /var/lib/skladchik-reports-monitor-backup/restore-check-health.txt\n0027:jq -n --arg status OK --arg current_edge_script_sha \"$CURRENT_EDGE_SHA\" --arg target_edge_script_sha \"$TARGET_EDGE_SHA\" '{status:$status,root_cause_count:0,production_changed:false,edge_monitor_status:\"AUTH_REQUIRED\",current_edge_script_sha256:$current_edge_script_sha,target_edge_script_sha256:$target_edge_script_sha,strict_hostkey:true,active_skladchik_sources_pinned:true}' > \"$HOMELAB_RUN_DIR/preflight.json\"\n0028:printf '%s\\n' \"$RESULT\"\n0029:printf 'PREFLIGHT_STATUS=OK\\nACTIVE_SKLADCHIK_SOURCE_HASHES=PINNED\\nEDGE_MUTATION_SCRIPT=VERSIONED\\nROOT_CAUSE_COUNT=0\\nPRODUCTION_CHANGED=NO\\nREAUTH_EXECUTED=NO\\n'\nPHASE_PREFLIGHT_SOURCE_END\nEDGE_PREFLIGHT_SOURCE_BEGIN\nEDGE_PREFLIGHT_SOURCE_PRESENT=true\nEDGE_PREFLIGHT_SOURCE_SHA256=77ebb2893962550f97d80bdfd2eb414f666578a272b6c35a3f4ca669df117878\nEDGE_PREFLIGHT_SOURCE_BYTES=1351\nEDGE_PREFLIGHT_SOURCE_LINES=29\n0001:#!/usr/bin/env bash\n0002:set -Eeuo pipefail\n0003:EXPECTED_SHA=\"${1:?expected script sha required}\"\n0004:SCRIPT=/usr/local/sbin/skladchik-reports-monitor-cookie-update-edge\n0005:HEALTH=/var/lib/skladchik-reports-monitor/health.txt\n0006:test -x \"$SCRIPT\"\n0007:test \"$(sha256sum \"$SCRIPT\" | awk '{print $1}')\" = \"$EXPECTED_SHA\"\n0008:test -s /etc/skladchik-reports-monitor/secrets.env\n0009:test -s /opt/skladchik-reports-monitor/monitor.py\n0010:test -s \"$HEALTH\"\n0011:STATUS=\"$(awk -F= '$1==\"STATUS\"{print $2;exit}' \"$HEALTH\")\"\n0012:test \"$STATUS\" = AUTH_REQUIRED\n0013:test \"$(systemctl is-enabled skladchik-reports-monitor.timer)\" = enabled\n0014:test \"$(systemctl is-active skladchik-reports-monitor.timer)\" = active\n0015:WAIT_SECONDS=90\n0016:DEADLINE=$((SECONDS+WAIT_SECONDS))\n0017:monitor_busy() {\n0018: systemctl is-active --quiet skladchik-reports-monitor.service ||\n0019: pgrep -f '/opt/skladchik-reports-monitor/monitor.py' >/dev/null ||\n0020: pgrep -f 'skladchik-reports-monitor-cookie-update-edge' >/dev/null\n0021:}\n0022:while monitor_busy; do\n0023: if (( SECONDS >= DEADLINE )); then\n0024: printf 'EDGE_PREFLIGHT_STATUS=BUSY\\nFAILED_PHASE=WAIT_MONITOR_QUIESCENCE\\nWAIT_SECONDS=%s\\n' \"$WAIT_SECONDS\"\n0025: exit 75\n0026: fi\n0027: sleep 2\n0028:done\n0029:printf 'EDGE_PREFLIGHT_STATUS=OK\\nEDGE_MONITOR_STATUS=%s\\nEDGE_SCRIPT_SHA256=%s\\nEDGE_TIMER_ENABLED=YES\\nEDGE_TIMER_ACTIVE=YES\\nMONITOR_QUIESCENCE=OK\\nWAIT_LIMIT_SECONDS=%s\\n' \"$STATUS\" \"$EXPECTED_SHA\" \"$WAIT_SECONDS\"\nEDGE_PREFLIGHT_SOURCE_END\nFAILED_LINE_CONTEXT_BEGIN\nPHASE_LINE_0009=TARGET_EDGE_SHA=10fe854274dca1a053cfd8c0155340bd689bf3f6555c70dbc14b890cbafb93fa\nPHASE_LINE_0010=SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH]\nPHASE_LINE_0011=test \"$(hostname -f)\" = pve01.gram1.ru\nPHASE_LINE_0012=test -z \"$(git -C /srv/homelab-desired-state status --porcelain)\"\nPHASE_LINE_0013=test \"$(sha256sum /usr/local/sbin/skladchik-reports-monitor-cookie-update | awk '{print $1}')\" = a3006723d902fb7735c593003a6c6755fa3d69683126ec5f53165131f754fd7a\nPHASE_LINE_0014=test \"$(sha256sum /usr/local/sbin/skladchik-reports-monitor-backup | awk '{print $1}')\" = ad0652d1e154fca94a20bdf831b40b831fd0d862eb104ec3377f486e96270d0a\nPHASE_LINE_0015=test \"$(sha256sum /usr/local/sbin/skladchik-reports-monitor-monthly-selftest-watch | awk '{print $1}')\" = dd2c7e26aaa6835fa4ac4365eade338eb7b19f4bfe7528179c59cf8039454180\nPHASE_LINE_0016=test \"$(sha256sum /usr/local/sbin/skladchik-reports-monitor-status | awk '{print $1}')\" = f94ec75155f415b35517dade0bfba00926eba6088e0c2b5c96ae79daa5dc368f\nPHASE_LINE_0017=test \"$(sha256sum /usr/local/sbin/skladchik-reports-monitor-supervisor | awk '{print $1}')\" = 69494a4c32fa632844cdb54aabbe302a14d478924efcb719c6cd3d594d102369\nEDGE_LINE_0009=test -s /opt/skladchik-reports-monitor/monitor.py\nEDGE_LINE_0010=test -s \"$HEALTH\"\nEDGE_LINE_0011=STATUS=\"$(awk -F= '$1==\"STATUS\"{print $2;exit}' \"$HEALTH\")\"\nEDGE_LINE_0012=test \"$STATUS\" = AUTH_REQUIRED\nEDGE_LINE_0013=test \"$(systemctl is-enabled skladchik-reports-monitor.timer)\" = enabled\nEDGE_LINE_0014=test \"$(systemctl is-active skladchik-reports-monitor.timer)\" = active\nEDGE_LINE_0015=WAIT_SECONDS=90\nEDGE_LINE_0016=DEADLINE=$((SECONDS+WAIT_SECONDS))\nEDGE_LINE_0017=monitor_busy() {\nFAILED_LINE_CONTEXT_END\nRUN_EVIDENCE_BEGIN\nRUN_FILE=stdout.log|present=true|bytes=89\nstdout.log|ROOT_CAUSE=UNEXPECTED_PHASE_ERROR\nstdout.log|ROOT_CAUSE_COUNT=1\nstdout.log|DETAIL=phase=preflight line=13 rc=1\nRUN_FILE=stderr.log|present=true|bytes=0\nRUN_FILE=preflight.json|present=false|bytes=0\nRUN_FILE=result.json|present=true|bytes=592\nresult.json|{\nresult.json| \"run_id\": \"20260923T120316Z-986653-preflight\",\nresult.json| \"task_id\": \"skladchik-reports-monitor-controlled-reauth-v1\",\nresult.json| \"phase\": \"preflight\",\nresult.json| \"mutation_scope\": \"controlled_apply\",\nresult.json| \"production_change\": true,\nresult.json| \"started_at\": \"2026-09-23T12:03:16Z\",\nresult.json| \"finished_at\": \"2026-09-23T12:03:16Z\",\nresult.json| \"status\": \"FAILED\",\nresult.json| \"rc\": 1,\nresult.json| \"stdout\": \"/var/lib/homelab-admin/runs/skladchik-reports-monitor-controlled-reauth-v1/20260923T120316Z-986653-preflight/stdout.log\",\nresult.json| \"stderr\": \"/var/lib/homelab-admin/runs/skladchik-reports-monitor-controlled-reauth-v1/20260923T120316Z-986653-preflight/stderr.log\"\nresult.json|}\nRUN_FILE=task.json|present=true|bytes=13579\ntask.json|{\ntask.json| \"schema_version\": 2,\ntask.json| \"task_id\": \"skladchik-reports-monitor-controlled-reauth-v1\",\ntask.json| \"target_host\": \"pve01.gram1.ru\",\ntask.json| \"mutation_scope\": \"controlled_apply\",\ntask.json| \"production_change\": true,\ntask.json| \"failure_mode\": \"fail_fast\",\ntask.json| \"guards\": {\ntask.json| \"desired_state_clean\": true,\ntask.json| \"failed_units_max\": 4,\ntask.json| \"active_backup_restore_max\": 0\ntask.json| },\ntask.json| \"reads\": [\ntask.json| \"[SENSITIVE_PATH]\ntask.json| \"/var/lib/skladchik-reports-monitor-backup/health.txt\",\ntask.json| \"/var/lib/skladchik-reports-monitor-backup/restore-check-health.txt\",\ntask.json| \"systemd:skladchik-reports-monitor-supervisor.service\",\ntask.json| \"systemd:skladchik-reports-monitor-supervisor.timer\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/usr/local/sbin/skladchik-reports-monitor-cookie-update-edge\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/etc/skladchik-reports-monitor/secrets.env\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/var/lib/skladchik-reports-monitor/cookies.jar\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/var/lib/skladchik-reports-monitor/health.txt\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-cookie-update\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-backup\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-monthly-selftest-watch\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-status\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-supervisor\",\ntask.json| \"/srv/homelab-desired-state/sbin/skladchik-reports-monitor-backup\",\ntask.json| \"/var/lib/skladchik-reports-monitor-supervisor\"\ntask.json| ],\ntask.json| \"writes\": [\ntask.json| \"/var/lib/homelab-admin/seals/skladchik-reports-monitor-controlled-reauth-v1.json\",\ntask.json| \"systemd:skladchik-reports-monitor-supervisor.service\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/etc/skladchik-reports-monitor/secrets.env\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/var/lib/skladchik-reports-monitor/cookies.jar\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/var/lib/skladchik-reports-monitor/health.txt\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/var/lib/homelab-admin/rollback/skladchik-reports-monitor-controlled-reauth-v1\",\ntask.json| \"$HOMELAB_RUN_DIR/preflight.json\",\ntask.json| \"$HOMELAB_RUN_DIR/prepare.json\",\ntask.json| \"$HOMELAB_RUN_DIR/dry-run.json\",\ntask.json| \"$HOMELAB_RUN_DIR/apply.json\",\ntask.json| \"$HOMELAB_RUN_DIR/verify.json\",\ntask.json| \"$HOMELAB_RUN_DIR/rollback.json\",\ntask.json| \"$HOMELAB_RUN_DIR/seal.json\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-cookie-update\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-backup\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-monthly-selftest-watch\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-status\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-supervisor\",\ntask.json| \"/srv/homelab-desired-state/sbin/skladchik-reports-monitor-cookie-update\",\ntask.json| \"/srv/homelab-desired-state/sbin/skladchik-reports-monitor-backup\",\ntask.json| \"/srv/homelab-desired-state/sbin/skladchik-reports-monitor-monthly-selftest-watch\",\ntask.json| \"/srv/homelab-desired-state/sbin/skladchik-reports-monitor-status\",\ntask.json| \"/srv/homelab-desired-state/sbin/skladchik-reports-monitor-supervisor\",\ntask.json| \"/mnt/staging/homelab-admin-rollback/skladchik-reports-monitor-controlled-reauth-v1\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/usr/local/sbin/skladchik-reports-monitor-cookie-update-edge\"\ntask.json| ],\ntask.json| \"mutates\": [\ntask.json| \"systemd:skladchik-reports-monitor-supervisor.service\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/etc/skladchik-reports-monitor/secrets.env\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/var/lib/skladchik-reports-monitor/cookies.jar\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:systemd:skladchik-reports-monitor.service\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:systemd:skladchik-reports-monitor.timer\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-cookie-update\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-backup\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-monthly-selftest-watch\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-status\",\ntask.json| \"/usr/local/sbin/skladchik-reports-monitor-supervisor\",\ntask.json| \"git:/srv/homelab-desired-state\",\ntask.json| \"ssh:debian@[PRIVATE_IP]:/usr/local/sbin/skladchik-reports-monitor-cookie-update-edge\"\ntask.json| ],\ntask.json| \"expected_outputs\": [\ntask.json| {\ntask.json| \"path\": \"$HOMELAB_RUN_DIR/preflight.json\",\ntask.json| \"producer\": \"phases/preflight.sh\",\ntask.json| \"verification\": \"strict host-key access, the pinned live predecessor edge script, the versioned target edge script, AUTH_REQUIRED and bounded monitor quiescence are confirmed; evidence records both SHAs\"\ntask.json| },\ntask.json| {\ntask.json| \"path\": \"$HOMELAB_RUN_DIR/prepare.json\",\ntask.json| \"producer\": \"phases/prepare.sh\",\ntask.json| \"verification\": \"root-only local and edge rollback snapshots have self-contained SHA256 manifests\"\ntask.json| },\ntask.json| {\ntask.json| \"path\": \"$HOMELAB_RUN_DIR/dry-run.json\",\ntask.json| \"producer\": \"phases/dry-run.sh\",\ntask.json| \"verification\": \"rollback manifests validate, the pre-apply live edge script remains the pinned predecessor, the versioned deployment asset matches the pinned target SHA256, and evidence records both SHAs\"\ntask.json| },\ntask.json| {\ntask.json| \"path\": \"$HOMELAB_RUN_DIR/apply.json\",\ntask.json| \"producer\": \"phases/apply.sh\",\ntask.json| \"verification\": \"apply replaces the pinned predecessor edge script with the pinned target script, quiesces the timer, performs one controlled reauthentication and restores or enables the timer\"\ntask.json| },\ntask.json| {\ntask.json| \"path\": \"$HOMELAB_RUN_DIR/verify.json\",\ntask.json| \"producer\": \"phases/verify.sh\",\ntask.json| \"verification\": \"edge monitor, counts, timer, supervisor, backup and restore are OK\"\ntask.json| },\ntask.json| {\ntask.json| \"path\": \"$HOMELAB_RUN_DIR/rollback.json\",\ntask.json| \"producer\": \"phases/rollback.sh\",\ntask.json| \"verification\": \"previous auth artifacts and timer state are restored\"\ntask.json| },\ntask.json| {\ntask.json| \"path\": \"$HOMELAB_RUN_DIR/seal.json\",\ntask.json| \"producer\": \"phases/seal.sh\",\ntask.json| \"verification\": \"standard seal exists and rollback snapshot is removed\"\ntask.json| }\ntask.json| ],\ntask.json| \"runtime_matrix\": [\ntask.json| {\ntask.json| \"host\": \"pve01.gram1.ru\",\ntask.json| \"runtime\": \"bash,jq,git,systemd,ssh\",\ntask.json| \"compile\": \"bash -n; jq -e\"\ntask.json| },\ntask.json| {\ntask.json| \"host\": \"edge\",\ntask.json| \"runtime\": \"bash,python3,systemd,sha256sum\",\ntask.json| \"compile\": \"bash -n\"\ntask.json| }\ntask.json| ],\ntask.json| \"rollback\": {\ntask.json| \"command\": \"HOMELAB_CONTROLLED_APPLY_CONFIRM=skladchik-reports-monitor-controlled-reauth-v1 /opt/homelab-admin/bin/homelab-admin run TASK_DIR rollback\",\ntask.json| \"verification\": \"self-contained local and edge manifests validate; prior auth artifacts, scripts, desired-state HEAD, supervisor state and timer state are restorable\"\ntask.json| },\ntask.json| \"no_change_assertions\": [\ntask.json| \"vm160_backup_job\",\ntask.json| \"cluster_backup_jobs\",\ntask.json| \"unrelated_guests\",\ntask.json| \"network\",\ntask.json| \"dns\",\ntask.json| \"known_hosts\",\ntask.json| \"mail_cloud\",\ntask.json| \"gitea\",\ntask.json| \"backup_and_restore_artifacts\"\ntask.json| ],\ntask.json| \"source_of_truth\": {\ntask.json| \"change_id\": \"CR-2026-0012\",\ntask.json| \"incident\": \"Skladchik monitor AUTH_REQUIRED with missing complaint counts\",\ntask.json| \"edge_script_sha256\": \"10fe854274dca1a053cfd8c0155340bd689bf3f6555c70dbc14b890cbafb93fa\",\ntask.json| \"edge_script_path\": \"/usr/local/sbin/skladchik-reports-monitor-cookie-update-edge\",\ntask.json| \"unsafe_legacy_wrapper_path\": \"/usr/local/sbin/skladchik-reports-monitor-cookie-update\",\ntask.json| \"unsafe_legacy_wrapper_reason\": \"legacy host-key auto-acceptance\",\ntask.json| \"strict_hostkey_required\": true,\ntask.json| \"hidden_interactive_prompt_required\": true,\ntask.json| \"cookie_content_must_not_enter_git_or_logs\": true,\ntask.json| \"backup_status_before\": \"OK\",\ntask.json| \"restore_status_before\": \"OK\",\ntask.json| \"regression_lock\": \"REG-024-SKLADCHIK-REAUTH-STRICT-HOSTKEY\",\ntask.json| \"active_pve01_script_count\": 5,\ntask.json| \"active_pve01_original_sha256\": {\ntask.json| \"skladchik-reports-monitor-cookie-update\": \"a3006723d902fb7735c593003a6c6755fa3d69683126ec5f53165131f754fd7a\",\ntask.json| \"skladchik-reports-monitor-backup\": \"ad0652d1e154fca94a20bdf831b40b831fd0d862eb104ec3377f486e96270d0a\",\ntask.json| \"skladchik-reports-monitor-monthly-selftest-watch\": \"dd2c7e26aaa6835fa4ac4365eade338eb7b19f4bfe7528179c59cf8039454180\",\ntask.json| \"skladchik-reports-monitor-status\": \"f94ec75155f415b35517dade0bfba00926eba6088e0c2b5c96ae79daa5dc368f\",\ntask.json| \"skladchik-reports-monitor-supervisor\": \"69494a4c32fa632844cdb54aabbe302a14d478924efcb719c6cd3d594d102369\"\ntask.json| },\ntask.json| \"active_pve01_deployed_sha256\": {\ntask.json| \"skladchik-reports-monitor-cookie-update\": \"ea2d89ce67893a6d89b29610e4d46e207932ecc157173454585f67890f58810c\",\ntask.json| \"skladchik-reports-monitor-backup\": \"1912f8f0559637563972bb8ac984fb0036694092056ae53968c02cc3b67855f3\",\ntask.json| \"skladchik-reports-monitor-monthly-selftest-watch\": \"48c6ca01d2430d14c6af797c079640815ba1352a98466d4014ecbb80a27eaada\",\ntask.json| \"skladchik-reports-monitor-status\": \"f902a61109efbac5918360f2235c2523bd10704ac484a4e8591e8a1c490faf5a\",\ntask.json| \"skladchik-reports-monitor-supervisor\": \"35c68ae0929ff3795be2bde40de334fc8e26413a3d8a620a137be90d1f2c164e\"\ntask.json| },\ntask.json| \"edge_mutation_script_versioned\": true,\ntask.json| \"desired_state_script_count_after_apply\": 5,\ntask.json| \"all_active_skladchik_ssh_requires_strict_known_hosts\": true,\ntask.json| \"unsafe_active_hostkey_markers_after_verify\": 0,\ntask.json| \"pve01_assets_checked_by_repository_tests\": true,\ntask.json| \"regression_locks\": [\ntask.json| \"REG-024-SKLADCHIK-REAUTH-STRICT-HOSTKEY\",\ntask.json| \"REG-025-EXACT-SHA256-LENGTH-VALIDATION\",\ntask.json| \"REG-026-ACTIVE-SKLADCHIK-STRICT-HOSTKEY-COVERAGE\",\ntask.json| \"REG-027-REMOTE-MUTATION-SCRIPT-MUST-BE-VERSIONED\",\ntask.json| \"REG-028-FORBIDDEN-TOKEN-IN-NEGATIVE-ASSERTION\",\ntask.json| \"REG-029-LEGACY-WRAPPER-NOT-COPIED-VERBATIM\",\ntask.json| \"REG-030-BINARY-ARTIFACT-TEXT-SCAN\",\ntask.json| \"REG-031-SEMANTIC-TEST-LOOP-EXPANSION-MISMATCH\",\ntask.json| \"REG-032-OVERBROAD-INLINE-PYTHON-TEST\",\ntask.json| \"REG-033-INSTALLED-SOURCE-MUST-BE-DECLARED\",\ntask.json| \"REG-034-ROLLBACK-STAGE-PARENT-MODE\",\nRUN_EVIDENCE_END\nCURRENT_FACTS_BEGIN\nEDGE_SCRIPT_LOCAL_EXISTS=true\nEDGE_SCRIPT_LOCAL_META=mode=700|uid=0|gid=0|size=5247\nEDGE_SCRIPT_LOCAL_SHA256=10fe854274dca1a053cfd8c0155340bd689bf3f6555c70dbc14b890cbafb93fa\nLOCAL_HEALTH_EXISTS=false\nSECRETS_ENV_EXISTS=false\nMONITOR_PY_EXISTS=false\nUNIT=skladchik-reports-monitor.service|active=inactive|enabled=not-found\nUNIT=skladchik-reports-monitor.timer|active=inactive|enabled=not-found\nUNIT=skladchik-reports-monitor-supervisor.service|active=failed|enabled=static\nUNIT=skladchik-reports-monitor-supervisor.timer|active=active|enabled=enabled\nCURRENT_FACTS_END\nRCA_CAPTURE_COMPLETE=true\nCHANGES_MADE_BY_943=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SKLADCHIK-PREFLIGHT-LINE13-RCA-943R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nSKLADCHIK943_END=true\n" + "output": "RECOVERY9190_BEGIN=true\nTARGET_CHANGE_CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1\nTARGET_LOCAL_CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1\nTARGET_CHANGE_EXACT_GITEA=404\nTARGET_LOCAL_EXACT_GITEA=404\nMUTATION_BOUNDARY=READ_ONLY_ONLY;NO_VM130_WRITE;NO_SPB_WRITE;NO_DNS_WRITE;NO_NGINX_RELOAD\nLOCAL_ARTIFACT=dir.txt|PRESENT=true\nLOCAL_ARTIFACT_META=dir.txt|SIZE=182|SHA16=09fb7d225bf69875\nLOCAL_SAFE=dir.txt|L1|endpoint.b64\nLOCAL_SAFE=dir.txt|L2|local-preflight-err.txt\nLOCAL_SAFE=dir.txt|L3|local-preflight-out.txt\nLOCAL_SAFE=dir.txt|L4|local-summary.env\nLOCAL_SAFE=dir.txt|L5|outer.b64\nLOCAL_SAFE=dir.txt|L6|outer.sh\nLOCAL_SAFE=dir.txt|L7|preflight.b64\nLOCAL_SAFE=dir.txt|L8|preflight.ps1\nLOCAL_SAFE=dir.txt|L9|spb-probe-err.txt\nLOCAL_SAFE=dir.txt|L10|spb-probe-out.txt\nLOCAL_SAFE=dir.txt|L11|sudo.b64\nLOCAL_ARTIFACT=local-preflight-err.txt|PRESENT=true\nLOCAL_ARTIFACT_META=local-preflight-err.txt|SIZE=0|SHA16=e3b0c44298fc1c14\nLOCAL_ARTIFACT=local-preflight-out.txt|PRESENT=true\nLOCAL_ARTIFACT_META=local-preflight-out.txt|SIZE=0|SHA16=e3b0c44298fc1c14\nLOCAL_ARTIFACT=local-summary.env|PRESENT=true\nLOCAL_ARTIFACT_META=local-summary.env|SIZE=365|SHA16=8c6afc015d07d942\nLOCAL_SAFE=local-summary.env|L1|LOCAL_PREFLIGHT_BEGIN=true\nLOCAL_SAFE=local-summary.env|L2|CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1\nLOCAL_SAFE=local-summary.env|L3|PLINK_PRESENT=true\nLOCAL_SAFE=local-summary.env|L4|WINDOWS_ENDPOINT_SHA16=6d6149f42864ce03\nLOCAL_SAFE=local-summary.env|L5|WINDOWS_DNS_IPV4_COUNT=1\nLOCAL_SAFE=local-summary.env|L6|WINDOWS_ENDPOINT_HASH_MATCH=true\nLOCAL_SAFE=local-summary.env|L7|WINDOWS_PINNED_SPB_PROBE_RC=0\nLOCAL_SAFE=local-summary.env|L8|WINDOWS_EDGEADMIN_MATCH=false\nLOCAL_SAFE=local-summary.env|L9|WINDOWS_DPAPI_DECRYPTABLE_COUNT=1\nLOCAL_SAFE=local-summary.env|L10|LOCAL_PREFLIGHT_STATUS=FAIL\nLOCAL_SAFE=local-summary.env|L11|LOCAL_PREFLIGHT_END=true\nLOCAL_ARTIFACT=status.txt|PRESENT=false\nLOCAL_ARTIFACT=stdout.txt|PRESENT=false\nLOCAL_ARTIFACT=stderr.txt|PRESENT=false\nLOCAL_ARTIFACT=preflight.ps1|PRESENT=true\nLOCAL_ARTIFACT_META=preflight.ps1|SIZE=5509|SHA16=ccc6689ad5229a5f\nLOCAL_ARTIFACT=outer.sh|PRESENT=true\nLOCAL_ARTIFACT_META=outer.sh|SIZE=24740|SHA16=1444bb7fae636e67\nTARGET_LEDGER_MATCH_COUNT=0\nTARGET_LOCAL_FILE_COUNT=0\nTARGET_PROCESS_COUNT=0\nTARGET_RUN_FILE_COUNT=1\nTARGET_JOURNAL_MATCH_COUNT=0\nVM130_QGA_TRANSPORT_RC=0\nVM130_QGA_STDERR_SHA16=e3b0c44298fc1c14\nVM130_QGA_EXITCODE=0\nVM130_GUEST_STDERR_SHA16=e3b0c44298fc1c14\nRECOVERY9188_VM130={\"bridge_root_exists\":false,\"certs\":{\"git-read.gram1.ru\":{\"checkend48h\":false,\"checkhost\":false,\"dir_exists\":false,\"fullchain_exists\":false,\"privkey_exists\":false,\"spki_match\":false},\"www.hbarhub.ru\":{\"checkend48h\":false,\"checkhost\":false,\"dir_exists\":false,\"fullchain_exists\":false,\"privkey_exists\":false,\"spki_match\":false},\"www.newfilya.ru\":{\"checkend48h\":false,\"checkhost\":false,\"dir_exists\":false,\"fullchain_exists\":false,\"privkey_exists\":false,\"spki_match\":false}},\"classification\":\"CLEAN_BASELINE\",\"configs\":{\"991201.conf\":{\"exists\":false},\"991202.conf\":{\"exists\":false},\"991203.conf\":{\"exists\":false}},\"https\":{\"git-read.gram1.ru\":{\"code\":\"000\",\"rc\":60,\"stderr_sha16\":\"6039978cbf174c90\"},\"www.hbarhub.ru\":{\"code\":\"000\",\"rc\":60,\"stderr_sha16\":\"6039978cbf174c90\"},\"www.newfilya.ru\":{\"code\":\"000\",\"rc\":60,\"stderr_sha16\":\"6039978cbf174c90\"}},\"nginx_test\":{\"rc\":0,\"stderr_sha16\":\"9cb221b6993277a1\"},\"npm_root_exists\":true,\"npmplus\":{\"data_mount_exact\":true,\"health\":\"healthy\",\"inspect_rc\":0,\"running\":true},\"proxy_root_exists\":true,\"uid\":0}\nACTUAL_VM130_CLASSIFICATION=CLEAN_BASELINE\nRECOVERY9190_COMPLETE=true\nCHANGES_MADE=NO\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_9189_LOCAL_CARRIER_RCA\nDECISION=READ_EXACT_9190_AND_FIX_ONLY_PROVEN_9189_LOCAL_STAGE\nNEXT_GATE=EXACT_9190_LOCAL_ERROR_AND_VM130_CLASSIFICATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 6893533f..f57f49c5 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,15 +1,15 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-260923-SKLADCHIK-PREFLIGHT-LINE13-RCA-943R1 +COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1 STATUS=OK RC=0 HOST=pve01 MODE=read-only -COMPONENT=skladchik-preflight-line13-rca +COMPONENT=spb-tls-bridge-9189-local-carrier-rca REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=dd3a88084befa0f31cc5f49ef676cb01eec2dfd507c1e1bfd993fba637e753d7 +COMMAND_SHA256=67f2bec7a01f39fbfdf79b5496aec0aae6532cca8cfd5192bb6552cbcbe851b9 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false @@ -24,326 +24,70 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=2c42ff80da827c41e303d1369683a91c76fe254e8a5cc304eeb6038334a8dafa -SANITIZED_OUTPUT_SHA256=17ace4d0e724d6b41d9460dad37dfe85e5b452f724ea763d0ba457d6ad255c77 +RAW_EVIDENCE_SHA256=575faa031e1c1f1224a7c9cae59ecf22d97781ab22ca48ffdb8a6b50cc3e528c +SANITIZED_OUTPUT_SHA256=575faa031e1c1f1224a7c9cae59ecf22d97781ab22ca48ffdb8a6b50cc3e528c OUTPUT_BEGIN -SKLADCHIK943_BEGIN=true -COMMAND_ID=SUPPORT-260923-SKLADCHIK-PREFLIGHT-LINE13-RCA-943R1 -MODE=read-only -COMPONENT=skladchik-preflight-line13-rca -PREDECESSOR_942=FAILED_STAGE_PREFLIGHT;DETAIL_phase_preflight_line_13_rc_1 -MUTATION_BOUNDARY=NONE_READ_ONLY -PHASE_PREFLIGHT_SOURCE_BEGIN -PHASE_PREFLIGHT_SOURCE_PRESENT=true -PHASE_PREFLIGHT_SOURCE_SHA256=f3e533ebd72ba2343a78797a8087c529c9fcfa2b3cabc45b3c0bd477356a8cc9 -PHASE_PREFLIGHT_SOURCE_BYTES=3076 -PHASE_PREFLIGHT_SOURCE_LINES=29 -0001:#!/usr/bin/env bash -0002:set -Eeuo pipefail -0003:on_err(){ local rc=$?; trap - ERR; printf 'ROOT_CAUSE=UNEXPECTED_PHASE_ERROR\nROOT_CAUSE_COUNT=1\nDETAIL=phase=preflight line=%s rc=%s\n' "${1:-0}" "$rc"; exit "$rc"; } -0004:trap 'on_err "$LINENO"' ERR -0005:export SYSTEMD_PAGER=cat PAGER=cat SYSTEMD_LESS=FRXMK -0006:TASK_ID=skladchik-reports-monitor-controlled-reauth-v1 -0007:EDGE=debian@[PRIVATE_IP] -0008:CURRENT_EDGE_SHA=b13d846cf089d450e3d5ac9e85ad1e232c198930e466bb8b82f6983a4d48ce0e -0009:TARGET_EDGE_SHA=10fe854274dca1a053cfd8c0155340bd689bf3f6555c70dbc14b890cbafb93fa -0010:SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] -0011:test "$(hostname -f)" = pve01.gram1.ru -0012:test -z "$(git -C /srv/homelab-desired-state status --porcelain)" -0013:test "$(sha256sum /usr/local/sbin/skladchik-reports-monitor-cookie-update | awk '{print $1}')" = a3006723d902fb7735c593003a6c6755fa3d69683126ec5f53165131f754fd7a -0014:test "$(sha256sum /usr/local/sbin/skladchik-reports-monitor-backup | awk '{print $1}')" = ad0652d1e154fca94a20bdf831b40b831fd0d862eb104ec3377f486e96270d0a -0015:test "$(sha256sum /usr/local/sbin/skladchik-reports-monitor-monthly-selftest-watch | awk '{print $1}')" = dd2c7e26aaa6835fa4ac4365eade338eb7b19f4bfe7528179c59cf8039454180 -0016:test "$(sha256sum /usr/local/sbin/skladchik-reports-monitor-status | awk '{print $1}')" = f94ec75155f415b35517dade0bfba00926eba6088e0c2b5c96ae79daa5dc368f -0017:test "$(sha256sum /usr/local/sbin/skladchik-reports-monitor-supervisor | awk '{print $1}')" = 69494a4c32fa632844cdb54aabbe302a14d478924efcb719c6cd3d594d102369 -0018:test "$(sha256sum /srv/homelab-desired-state/sbin/skladchik-reports-monitor-backup | awk '{print $1}')" = ad0652d1e154fca94a20bdf831b40b831fd0d862eb104ec3377f486e96270d0a -0019:test "$(sha256sum "$HOMELAB_TASK_DIR/assets/edge/skladchik-reports-monitor-cookie-update-edge" | awk '{print $1}')" = "$TARGET_EDGE_SHA" -0020:RESULT="$(ssh "${SSH[@]}" "$EDGE" sudo -n /bin/bash -s -- "$CURRENT_EDGE_SHA" < "$HOMELAB_TASK_DIR/assets/edge-preflight.sh")" -0021:grep -Fq 'EDGE_PREFLIGHT_STATUS=OK' <<<"$RESULT" -0022:test "$(systemctl is-enabled skladchik-reports-monitor-supervisor.timer)" = enabled -0023:test "$(systemctl is-active skladchik-reports-monitor-supervisor.timer)" = active -0024:test "$(systemctl show skladchik-reports-monitor-supervisor.service -p Result --value)" = exit-code -0025:grep -q '^STATUS=OK$' /var/lib/skladchik-reports-monitor-backup/health.txt -0026:grep -q '^STATUS=OK$' /var/lib/skladchik-reports-monitor-backup/restore-check-health.txt -0027:jq -n --arg status OK --arg current_edge_script_sha "$CURRENT_EDGE_SHA" --arg target_edge_script_sha "$TARGET_EDGE_SHA" '{status:$status,root_cause_count:0,production_changed:false,edge_monitor_status:"AUTH_REQUIRED",current_edge_script_sha256:$current_edge_script_sha,target_edge_script_sha256:$target_edge_script_sha,strict_hostkey:true,active_skladchik_sources_pinned:true}' > "$HOMELAB_RUN_DIR/preflight.json" -0028:printf '%s\n' "$RESULT" -0029:printf 'PREFLIGHT_STATUS=OK\nACTIVE_SKLADCHIK_SOURCE_HASHES=PINNED\nEDGE_MUTATION_SCRIPT=VERSIONED\nROOT_CAUSE_COUNT=0\nPRODUCTION_CHANGED=NO\nREAUTH_EXECUTED=NO\n' -PHASE_PREFLIGHT_SOURCE_END -EDGE_PREFLIGHT_SOURCE_BEGIN -EDGE_PREFLIGHT_SOURCE_PRESENT=true -EDGE_PREFLIGHT_SOURCE_SHA256=77ebb2893962550f97d80bdfd2eb414f666578a272b6c35a3f4ca669df117878 -EDGE_PREFLIGHT_SOURCE_BYTES=1351 -EDGE_PREFLIGHT_SOURCE_LINES=29 -0001:#!/usr/bin/env bash -0002:set -Eeuo pipefail -0003:EXPECTED_SHA="${1:?expected script sha required}" -0004:SCRIPT=/usr/local/sbin/skladchik-reports-monitor-cookie-update-edge -0005:HEALTH=/var/lib/skladchik-reports-monitor/health.txt -0006:test -x "$SCRIPT" -0007:test "$(sha256sum "$SCRIPT" | awk '{print $1}')" = "$EXPECTED_SHA" -0008:test -s /etc/skladchik-reports-monitor/secrets.env -0009:test -s /opt/skladchik-reports-monitor/monitor.py -0010:test -s "$HEALTH" -0011:STATUS="$(awk -F= '$1=="STATUS"{print $2;exit}' "$HEALTH")" -0012:test "$STATUS" = AUTH_REQUIRED -0013:test "$(systemctl is-enabled skladchik-reports-monitor.timer)" = enabled -0014:test "$(systemctl is-active skladchik-reports-monitor.timer)" = active -0015:WAIT_SECONDS=90 -0016:DEADLINE=$((SECONDS+WAIT_SECONDS)) -0017:monitor_busy() { -0018: systemctl is-active --quiet skladchik-reports-monitor.service || -0019: pgrep -f '/opt/skladchik-reports-monitor/monitor.py' >/dev/null || -0020: pgrep -f 'skladchik-reports-monitor-cookie-update-edge' >/dev/null -0021:} -0022:while monitor_busy; do -0023: if (( SECONDS >= DEADLINE )); then -0024: printf 'EDGE_PREFLIGHT_STATUS=BUSY\nFAILED_PHASE=WAIT_MONITOR_QUIESCENCE\nWAIT_SECONDS=%s\n' "$WAIT_SECONDS" -0025: exit 75 -0026: fi -0027: sleep 2 -0028:done -0029:printf 'EDGE_PREFLIGHT_STATUS=OK\nEDGE_MONITOR_STATUS=%s\nEDGE_SCRIPT_SHA256=%s\nEDGE_TIMER_ENABLED=YES\nEDGE_TIMER_ACTIVE=YES\nMONITOR_QUIESCENCE=OK\nWAIT_LIMIT_SECONDS=%s\n' "$STATUS" "$EXPECTED_SHA" "$WAIT_SECONDS" -EDGE_PREFLIGHT_SOURCE_END -FAILED_LINE_CONTEXT_BEGIN -PHASE_LINE_0009=TARGET_EDGE_SHA=10fe854274dca1a053cfd8c0155340bd689bf3f6555c70dbc14b890cbafb93fa -PHASE_LINE_0010=SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] -PHASE_LINE_0011=test "$(hostname -f)" = pve01.gram1.ru -PHASE_LINE_0012=test -z "$(git -C /srv/homelab-desired-state status --porcelain)" -PHASE_LINE_0013=test "$(sha256sum /usr/local/sbin/skladchik-reports-monitor-cookie-update | awk '{print $1}')" = a3006723d902fb7735c593003a6c6755fa3d69683126ec5f53165131f754fd7a -PHASE_LINE_0014=test "$(sha256sum /usr/local/sbin/skladchik-reports-monitor-backup | awk '{print $1}')" = ad0652d1e154fca94a20bdf831b40b831fd0d862eb104ec3377f486e96270d0a -PHASE_LINE_0015=test "$(sha256sum /usr/local/sbin/skladchik-reports-monitor-monthly-selftest-watch | awk '{print $1}')" = dd2c7e26aaa6835fa4ac4365eade338eb7b19f4bfe7528179c59cf8039454180 -PHASE_LINE_0016=test "$(sha256sum /usr/local/sbin/skladchik-reports-monitor-status | awk '{print $1}')" = f94ec75155f415b35517dade0bfba00926eba6088e0c2b5c96ae79daa5dc368f -PHASE_LINE_0017=test "$(sha256sum /usr/local/sbin/skladchik-reports-monitor-supervisor | awk '{print $1}')" = 69494a4c32fa632844cdb54aabbe302a14d478924efcb719c6cd3d594d102369 -EDGE_LINE_0009=test -s /opt/skladchik-reports-monitor/monitor.py -EDGE_LINE_0010=test -s "$HEALTH" -EDGE_LINE_0011=STATUS="$(awk -F= '$1=="STATUS"{print $2;exit}' "$HEALTH")" -EDGE_LINE_0012=test "$STATUS" = AUTH_REQUIRED -EDGE_LINE_0013=test "$(systemctl is-enabled skladchik-reports-monitor.timer)" = enabled -EDGE_LINE_0014=test "$(systemctl is-active skladchik-reports-monitor.timer)" = active -EDGE_LINE_0015=WAIT_SECONDS=90 -EDGE_LINE_0016=DEADLINE=$((SECONDS+WAIT_SECONDS)) -EDGE_LINE_0017=monitor_busy() { -FAILED_LINE_CONTEXT_END -RUN_EVIDENCE_BEGIN -RUN_FILE=stdout.log|present=true|bytes=89 -stdout.log|ROOT_CAUSE=UNEXPECTED_PHASE_ERROR -stdout.log|ROOT_CAUSE_COUNT=1 -stdout.log|DETAIL=phase=preflight line=13 rc=1 -RUN_FILE=stderr.log|present=true|bytes=0 -RUN_FILE=preflight.json|present=false|bytes=0 -RUN_FILE=result.json|present=true|bytes=592 -result.json|{ -result.json| "run_id": "20260923T120316Z-986653-preflight", -result.json| "task_id": "skladchik-reports-monitor-controlled-reauth-v1", -result.json| "phase": "preflight", -result.json| "mutation_scope": "controlled_apply", -result.json| "production_change": true, -result.json| "started_at": "2026-09-23T12:03:16Z", -result.json| "finished_at": "2026-09-23T12:03:16Z", -result.json| "status": "FAILED", -result.json| "rc": 1, -result.json| "stdout": "/var/lib/homelab-admin/runs/skladchik-reports-monitor-controlled-reauth-v1/20260923T120316Z-986653-preflight/stdout.log", -result.json| "stderr": "/var/lib/homelab-admin/runs/skladchik-reports-monitor-controlled-reauth-v1/20260923T120316Z-986653-preflight/stderr.log" -result.json|} -RUN_FILE=task.json|present=true|bytes=13579 -task.json|{ -task.json| "schema_version": 2, -task.json| "task_id": "skladchik-reports-monitor-controlled-reauth-v1", -task.json| "target_host": "pve01.gram1.ru", -task.json| "mutation_scope": "controlled_apply", -task.json| "production_change": true, -task.json| "failure_mode": "fail_fast", -task.json| "guards": { -task.json| "desired_state_clean": true, -task.json| "failed_units_max": 4, -task.json| "active_backup_restore_max": 0 -task.json| }, -task.json| "reads": [ -task.json| "[SENSITIVE_PATH] -task.json| "/var/lib/skladchik-reports-monitor-backup/health.txt", -task.json| "/var/lib/skladchik-reports-monitor-backup/restore-check-health.txt", -task.json| "systemd:skladchik-reports-monitor-supervisor.service", -task.json| "systemd:skladchik-reports-monitor-supervisor.timer", -task.json| "ssh:debian@[PRIVATE_IP]:/usr/local/sbin/skladchik-reports-monitor-cookie-update-edge", -task.json| "ssh:debian@[PRIVATE_IP]:/etc/skladchik-reports-monitor/secrets.env", -task.json| "ssh:debian@[PRIVATE_IP]:/var/lib/skladchik-reports-monitor/cookies.jar", -task.json| "ssh:debian@[PRIVATE_IP]:/var/lib/skladchik-reports-monitor/health.txt", -task.json| "/usr/local/sbin/skladchik-reports-monitor-cookie-update", -task.json| "/usr/local/sbin/skladchik-reports-monitor-backup", -task.json| "/usr/local/sbin/skladchik-reports-monitor-monthly-selftest-watch", -task.json| "/usr/local/sbin/skladchik-reports-monitor-status", -task.json| "/usr/local/sbin/skladchik-reports-monitor-supervisor", -task.json| "/srv/homelab-desired-state/sbin/skladchik-reports-monitor-backup", -task.json| "/var/lib/skladchik-reports-monitor-supervisor" -task.json| ], -task.json| "writes": [ -task.json| "/var/lib/homelab-admin/seals/skladchik-reports-monitor-controlled-reauth-v1.json", -task.json| "systemd:skladchik-reports-monitor-supervisor.service", -task.json| "ssh:debian@[PRIVATE_IP]:/etc/skladchik-reports-monitor/secrets.env", -task.json| "ssh:debian@[PRIVATE_IP]:/var/lib/skladchik-reports-monitor/cookies.jar", -task.json| "ssh:debian@[PRIVATE_IP]:/var/lib/skladchik-reports-monitor/health.txt", -task.json| "ssh:debian@[PRIVATE_IP]:/var/lib/homelab-admin/rollback/skladchik-reports-monitor-controlled-reauth-v1", -task.json| "$HOMELAB_RUN_DIR/preflight.json", -task.json| "$HOMELAB_RUN_DIR/prepare.json", -task.json| "$HOMELAB_RUN_DIR/dry-run.json", -task.json| "$HOMELAB_RUN_DIR/apply.json", -task.json| "$HOMELAB_RUN_DIR/verify.json", -task.json| "$HOMELAB_RUN_DIR/rollback.json", -task.json| "$HOMELAB_RUN_DIR/seal.json", -task.json| "/usr/local/sbin/skladchik-reports-monitor-cookie-update", -task.json| "/usr/local/sbin/skladchik-reports-monitor-backup", -task.json| "/usr/local/sbin/skladchik-reports-monitor-monthly-selftest-watch", -task.json| "/usr/local/sbin/skladchik-reports-monitor-status", -task.json| "/usr/local/sbin/skladchik-reports-monitor-supervisor", -task.json| "/srv/homelab-desired-state/sbin/skladchik-reports-monitor-cookie-update", -task.json| "/srv/homelab-desired-state/sbin/skladchik-reports-monitor-backup", -task.json| "/srv/homelab-desired-state/sbin/skladchik-reports-monitor-monthly-selftest-watch", -task.json| "/srv/homelab-desired-state/sbin/skladchik-reports-monitor-status", -task.json| "/srv/homelab-desired-state/sbin/skladchik-reports-monitor-supervisor", -task.json| "/mnt/staging/homelab-admin-rollback/skladchik-reports-monitor-controlled-reauth-v1", -task.json| "ssh:debian@[PRIVATE_IP]:/usr/local/sbin/skladchik-reports-monitor-cookie-update-edge" -task.json| ], -task.json| "mutates": [ -task.json| "systemd:skladchik-reports-monitor-supervisor.service", -task.json| "ssh:debian@[PRIVATE_IP]:/etc/skladchik-reports-monitor/secrets.env", -task.json| "ssh:debian@[PRIVATE_IP]:/var/lib/skladchik-reports-monitor/cookies.jar", -task.json| "ssh:debian@[PRIVATE_IP]:systemd:skladchik-reports-monitor.service", -task.json| "ssh:debian@[PRIVATE_IP]:systemd:skladchik-reports-monitor.timer", -task.json| "/usr/local/sbin/skladchik-reports-monitor-cookie-update", -task.json| "/usr/local/sbin/skladchik-reports-monitor-backup", -task.json| "/usr/local/sbin/skladchik-reports-monitor-monthly-selftest-watch", -task.json| "/usr/local/sbin/skladchik-reports-monitor-status", -task.json| "/usr/local/sbin/skladchik-reports-monitor-supervisor", -task.json| "git:/srv/homelab-desired-state", -task.json| "ssh:debian@[PRIVATE_IP]:/usr/local/sbin/skladchik-reports-monitor-cookie-update-edge" -task.json| ], -task.json| "expected_outputs": [ -task.json| { -task.json| "path": "$HOMELAB_RUN_DIR/preflight.json", -task.json| "producer": "phases/preflight.sh", -task.json| "verification": "strict host-key access, the pinned live predecessor edge script, the versioned target edge script, AUTH_REQUIRED and bounded monitor quiescence are confirmed; evidence records both SHAs" -task.json| }, -task.json| { -task.json| "path": "$HOMELAB_RUN_DIR/prepare.json", -task.json| "producer": "phases/prepare.sh", -task.json| "verification": "root-only local and edge rollback snapshots have self-contained SHA256 manifests" -task.json| }, -task.json| { -task.json| "path": "$HOMELAB_RUN_DIR/dry-run.json", -task.json| "producer": "phases/dry-run.sh", -task.json| "verification": "rollback manifests validate, the pre-apply live edge script remains the pinned predecessor, the versioned deployment asset matches the pinned target SHA256, and evidence records both SHAs" -task.json| }, -task.json| { -task.json| "path": "$HOMELAB_RUN_DIR/apply.json", -task.json| "producer": "phases/apply.sh", -task.json| "verification": "apply replaces the pinned predecessor edge script with the pinned target script, quiesces the timer, performs one controlled reauthentication and restores or enables the timer" -task.json| }, -task.json| { -task.json| "path": "$HOMELAB_RUN_DIR/verify.json", -task.json| "producer": "phases/verify.sh", -task.json| "verification": "edge monitor, counts, timer, supervisor, backup and restore are OK" -task.json| }, -task.json| { -task.json| "path": "$HOMELAB_RUN_DIR/rollback.json", -task.json| "producer": "phases/rollback.sh", -task.json| "verification": "previous auth artifacts and timer state are restored" -task.json| }, -task.json| { -task.json| "path": "$HOMELAB_RUN_DIR/seal.json", -task.json| "producer": "phases/seal.sh", -task.json| "verification": "standard seal exists and rollback snapshot is removed" -task.json| } -task.json| ], -task.json| "runtime_matrix": [ -task.json| { -task.json| "host": "pve01.gram1.ru", -task.json| "runtime": "bash,jq,git,systemd,ssh", -task.json| "compile": "bash -n; jq -e" -task.json| }, -task.json| { -task.json| "host": "edge", -task.json| "runtime": "bash,python3,systemd,sha256sum", -task.json| "compile": "bash -n" -task.json| } -task.json| ], -task.json| "rollback": { -task.json| "command": "HOMELAB_CONTROLLED_APPLY_CONFIRM=skladchik-reports-monitor-controlled-reauth-v1 /opt/homelab-admin/bin/homelab-admin run TASK_DIR rollback", -task.json| "verification": "self-contained local and edge manifests validate; prior auth artifacts, scripts, desired-state HEAD, supervisor state and timer state are restorable" -task.json| }, -task.json| "no_change_assertions": [ -task.json| "vm160_backup_job", -task.json| "cluster_backup_jobs", -task.json| "unrelated_guests", -task.json| "network", -task.json| "dns", -task.json| "known_hosts", -task.json| "mail_cloud", -task.json| "gitea", -task.json| "backup_and_restore_artifacts" -task.json| ], -task.json| "source_of_truth": { -task.json| "change_id": "CR-2026-0012", -task.json| "incident": "Skladchik monitor AUTH_REQUIRED with missing complaint counts", -task.json| "edge_script_sha256": "10fe854274dca1a053cfd8c0155340bd689bf3f6555c70dbc14b890cbafb93fa", -task.json| "edge_script_path": "/usr/local/sbin/skladchik-reports-monitor-cookie-update-edge", -task.json| "unsafe_legacy_wrapper_path": "/usr/local/sbin/skladchik-reports-monitor-cookie-update", -task.json| "unsafe_legacy_wrapper_reason": "legacy host-key auto-acceptance", -task.json| "strict_hostkey_required": true, -task.json| "hidden_interactive_prompt_required": true, -task.json| "cookie_content_must_not_enter_git_or_logs": true, -task.json| "backup_status_before": "OK", -task.json| "restore_status_before": "OK", -task.json| "regression_lock": "REG-024-SKLADCHIK-REAUTH-STRICT-HOSTKEY", -task.json| "active_pve01_script_count": 5, -task.json| "active_pve01_original_sha256": { -task.json| "skladchik-reports-monitor-cookie-update": "a3006723d902fb7735c593003a6c6755fa3d69683126ec5f53165131f754fd7a", -task.json| "skladchik-reports-monitor-backup": "ad0652d1e154fca94a20bdf831b40b831fd0d862eb104ec3377f486e96270d0a", -task.json| "skladchik-reports-monitor-monthly-selftest-watch": "dd2c7e26aaa6835fa4ac4365eade338eb7b19f4bfe7528179c59cf8039454180", -task.json| "skladchik-reports-monitor-status": "f94ec75155f415b35517dade0bfba00926eba6088e0c2b5c96ae79daa5dc368f", -task.json| "skladchik-reports-monitor-supervisor": "69494a4c32fa632844cdb54aabbe302a14d478924efcb719c6cd3d594d102369" -task.json| }, -task.json| "active_pve01_deployed_sha256": { -task.json| "skladchik-reports-monitor-cookie-update": "ea2d89ce67893a6d89b29610e4d46e207932ecc157173454585f67890f58810c", -task.json| "skladchik-reports-monitor-backup": "1912f8f0559637563972bb8ac984fb0036694092056ae53968c02cc3b67855f3", -task.json| "skladchik-reports-monitor-monthly-selftest-watch": "48c6ca01d2430d14c6af797c079640815ba1352a98466d4014ecbb80a27eaada", -task.json| "skladchik-reports-monitor-status": "f902a61109efbac5918360f2235c2523bd10704ac484a4e8591e8a1c490faf5a", -task.json| "skladchik-reports-monitor-supervisor": "35c68ae0929ff3795be2bde40de334fc8e26413a3d8a620a137be90d1f2c164e" -task.json| }, -task.json| "edge_mutation_script_versioned": true, -task.json| "desired_state_script_count_after_apply": 5, -task.json| "all_active_skladchik_ssh_requires_strict_known_hosts": true, -task.json| "unsafe_active_hostkey_markers_after_verify": 0, -task.json| "pve01_assets_checked_by_repository_tests": true, -task.json| "regression_locks": [ -task.json| "REG-024-SKLADCHIK-REAUTH-STRICT-HOSTKEY", -task.json| "REG-025-EXACT-SHA256-LENGTH-VALIDATION", -task.json| "REG-026-ACTIVE-SKLADCHIK-STRICT-HOSTKEY-COVERAGE", -task.json| "REG-027-REMOTE-MUTATION-SCRIPT-MUST-BE-VERSIONED", -task.json| "REG-028-FORBIDDEN-TOKEN-IN-NEGATIVE-ASSERTION", -task.json| "REG-029-LEGACY-WRAPPER-NOT-COPIED-VERBATIM", -task.json| "REG-030-BINARY-ARTIFACT-TEXT-SCAN", -task.json| "REG-031-SEMANTIC-TEST-LOOP-EXPANSION-MISMATCH", -task.json| "REG-032-OVERBROAD-INLINE-PYTHON-TEST", -task.json| "REG-033-INSTALLED-SOURCE-MUST-BE-DECLARED", -task.json| "REG-034-ROLLBACK-STAGE-PARENT-MODE", -RUN_EVIDENCE_END -CURRENT_FACTS_BEGIN -EDGE_SCRIPT_LOCAL_EXISTS=true -EDGE_SCRIPT_LOCAL_META=mode=700|uid=0|gid=0|size=5247 -EDGE_SCRIPT_LOCAL_SHA256=10fe854274dca1a053cfd8c0155340bd689bf3f6555c70dbc14b890cbafb93fa -LOCAL_HEALTH_EXISTS=false -SECRETS_ENV_EXISTS=false -MONITOR_PY_EXISTS=false -UNIT=skladchik-reports-monitor.service|active=inactive|enabled=not-found -UNIT=skladchik-reports-monitor.timer|active=inactive|enabled=not-found -UNIT=skladchik-reports-monitor-supervisor.service|active=failed|enabled=static -UNIT=skladchik-reports-monitor-supervisor.timer|active=active|enabled=enabled -CURRENT_FACTS_END -RCA_CAPTURE_COMPLETE=true -CHANGES_MADE_BY_943=false -ROLLBACK_STARTED=false -ROLLBACK_RESTORED=null -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SKLADCHIK-PREFLIGHT-LINE13-RCA-943R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} -SKLADCHIK943_END=true +RECOVERY9190_BEGIN=true +TARGET_CHANGE_CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1 +TARGET_LOCAL_CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1 +TARGET_CHANGE_EXACT_GITEA=404 +TARGET_LOCAL_EXACT_GITEA=404 +MUTATION_BOUNDARY=READ_ONLY_ONLY;NO_VM130_WRITE;NO_SPB_WRITE;NO_DNS_WRITE;NO_NGINX_RELOAD +LOCAL_ARTIFACT=dir.txt|PRESENT=true +LOCAL_ARTIFACT_META=dir.txt|SIZE=182|SHA16=09fb7d225bf69875 +LOCAL_SAFE=dir.txt|L1|endpoint.b64 +LOCAL_SAFE=dir.txt|L2|local-preflight-err.txt +LOCAL_SAFE=dir.txt|L3|local-preflight-out.txt +LOCAL_SAFE=dir.txt|L4|local-summary.env +LOCAL_SAFE=dir.txt|L5|outer.b64 +LOCAL_SAFE=dir.txt|L6|outer.sh +LOCAL_SAFE=dir.txt|L7|preflight.b64 +LOCAL_SAFE=dir.txt|L8|preflight.ps1 +LOCAL_SAFE=dir.txt|L9|spb-probe-err.txt +LOCAL_SAFE=dir.txt|L10|spb-probe-out.txt +LOCAL_SAFE=dir.txt|L11|sudo.b64 +LOCAL_ARTIFACT=local-preflight-err.txt|PRESENT=true +LOCAL_ARTIFACT_META=local-preflight-err.txt|SIZE=0|SHA16=e3b0c44298fc1c14 +LOCAL_ARTIFACT=local-preflight-out.txt|PRESENT=true +LOCAL_ARTIFACT_META=local-preflight-out.txt|SIZE=0|SHA16=e3b0c44298fc1c14 +LOCAL_ARTIFACT=local-summary.env|PRESENT=true +LOCAL_ARTIFACT_META=local-summary.env|SIZE=365|SHA16=8c6afc015d07d942 +LOCAL_SAFE=local-summary.env|L1|LOCAL_PREFLIGHT_BEGIN=true +LOCAL_SAFE=local-summary.env|L2|CID=SUPPORT-260923-SPB-TLS-BRIDGE-SELF-PUBLISHING-FINAL-9189R1 +LOCAL_SAFE=local-summary.env|L3|PLINK_PRESENT=true +LOCAL_SAFE=local-summary.env|L4|WINDOWS_ENDPOINT_SHA16=6d6149f42864ce03 +LOCAL_SAFE=local-summary.env|L5|WINDOWS_DNS_IPV4_COUNT=1 +LOCAL_SAFE=local-summary.env|L6|WINDOWS_ENDPOINT_HASH_MATCH=true +LOCAL_SAFE=local-summary.env|L7|WINDOWS_PINNED_SPB_PROBE_RC=0 +LOCAL_SAFE=local-summary.env|L8|WINDOWS_EDGEADMIN_MATCH=false +LOCAL_SAFE=local-summary.env|L9|WINDOWS_DPAPI_DECRYPTABLE_COUNT=1 +LOCAL_SAFE=local-summary.env|L10|LOCAL_PREFLIGHT_STATUS=FAIL +LOCAL_SAFE=local-summary.env|L11|LOCAL_PREFLIGHT_END=true +LOCAL_ARTIFACT=status.txt|PRESENT=false +LOCAL_ARTIFACT=stdout.txt|PRESENT=false +LOCAL_ARTIFACT=stderr.txt|PRESENT=false +LOCAL_ARTIFACT=preflight.ps1|PRESENT=true +LOCAL_ARTIFACT_META=preflight.ps1|SIZE=5509|SHA16=ccc6689ad5229a5f +LOCAL_ARTIFACT=outer.sh|PRESENT=true +LOCAL_ARTIFACT_META=outer.sh|SIZE=24740|SHA16=1444bb7fae636e67 +TARGET_LEDGER_MATCH_COUNT=0 +TARGET_LOCAL_FILE_COUNT=0 +TARGET_PROCESS_COUNT=0 +TARGET_RUN_FILE_COUNT=1 +TARGET_JOURNAL_MATCH_COUNT=0 +VM130_QGA_TRANSPORT_RC=0 +VM130_QGA_STDERR_SHA16=e3b0c44298fc1c14 +VM130_QGA_EXITCODE=0 +VM130_GUEST_STDERR_SHA16=e3b0c44298fc1c14 +RECOVERY9188_VM130={"bridge_root_exists":false,"certs":{"git-read.gram1.ru":{"checkend48h":false,"checkhost":false,"dir_exists":false,"fullchain_exists":false,"privkey_exists":false,"spki_match":false},"www.hbarhub.ru":{"checkend48h":false,"checkhost":false,"dir_exists":false,"fullchain_exists":false,"privkey_exists":false,"spki_match":false},"www.newfilya.ru":{"checkend48h":false,"checkhost":false,"dir_exists":false,"fullchain_exists":false,"privkey_exists":false,"spki_match":false}},"classification":"CLEAN_BASELINE","configs":{"991201.conf":{"exists":false},"991202.conf":{"exists":false},"991203.conf":{"exists":false}},"https":{"git-read.gram1.ru":{"code":"000","rc":60,"stderr_sha16":"6039978cbf174c90"},"www.hbarhub.ru":{"code":"000","rc":60,"stderr_sha16":"6039978cbf174c90"},"www.newfilya.ru":{"code":"000","rc":60,"stderr_sha16":"6039978cbf174c90"}},"nginx_test":{"rc":0,"stderr_sha16":"9cb221b6993277a1"},"npm_root_exists":true,"npmplus":{"data_mount_exact":true,"health":"healthy","inspect_rc":0,"running":true},"proxy_root_exists":true,"uid":0} +ACTUAL_VM130_CLASSIFICATION=CLEAN_BASELINE +RECOVERY9190_COMPLETE=true +CHANGES_MADE=NO +TASK_COMPLETE=true +TASK_RESULT=PASS_SPB_TLS_BRIDGE_9189_LOCAL_CARRIER_RCA +DECISION=READ_EXACT_9190_AND_FIX_ONLY_PROVEN_9189_LOCAL_STAGE +NEXT_GATE=EXACT_9190_LOCAL_ERROR_AND_VM130_CLASSIFICATION +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SPB-TLS-BRIDGE-9189-LOCAL-CARRIER-RCA-9190R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} OUTPUT_END CHAT_OUTPUT_END