{
  "action": "noop",
  "apply_performed": false,
  "contract_valid": true,
  "error_count": 0,
  "errors": [],
  "exact_line": "10.253.1.13 cs4 canary_vpn1",
  "idempotent_noop": true,
  "mode": "remote-dry-run",
  "payload_summary": {
    "fwmark": "0x201",
    "interface_name": "vpn1",
    "manager_id": "hmn_pool",
    "provider_type": "hmn_amneziawg",
    "selector_class": "cs4",
    "selector_label": "canary_vpn1",
    "slot_code": "vpn1",
    "table_id": 201,
    "tunnel_ip": "10.253.1.13"
  },
  "remote_commands_executed": false,
  "remote_script": "#!/bin/sh\nset -u\n\nCONF=/etc/router-wgpay-selector.d/peers.conf\nSERVICE=router-wgpay-canary\nLINE='10.253.1.13 cs4 canary_vpn1'\nTUNNEL_IP=10.253.1.13\nSELECTOR_CLASS=cs4\nBACKUP=\"/root/peers.conf.before-agent-selector-apply-$(date +%Y%m%d-%H%M%S)\"\nROLLBACK=\"/root/rollback-agent-selector-apply.sh\"\n\necho \"remote_script_schema=wg-access-agent-selector-remote-script-v2\"\necho \"remote_script_action=noop\"\n\ntest -f \"$CONF\"\n\ncp \"$CONF\" \"$BACKUP\"\necho \"selector_backup_path=$BACKUP\"\n\ncat > \"$ROLLBACK\" <<RB\n#!/bin/sh\nset -u\ncp \"$BACKUP\" \"$CONF\"\n/etc/init.d/$SERVICE start\nRB\nchmod 700 \"$ROLLBACK\"\necho \"rollback_path=$ROLLBACK\"\n\n\ngrep -Fxq \"$LINE\" \"$CONF\"\necho \"selector_apply_action=noop_verified_present\"\n\n\n/etc/init.d \"$SERVICE\" start 2>/dev/null || /etc/init.d/$SERVICE start\n\ngrep -Fxq \"$LINE\" \"$CONF\"\n/etc/init.d \"$SERVICE\" enabled 2>/dev/null || /etc/init.d/$SERVICE enabled\nnft -a list ruleset 2>/dev/null | grep -q \"$TUNNEL_IP.*$SELECTOR_CLASS\"\n\necho \"postcheck_selector_line_present=YES\"\necho \"postcheck_selector_service_enabled=YES\"\necho \"postcheck_nft_rule_visible=YES\"\n",
  "remote_script_contains_actual_backup_rollback": true,
  "remote_script_contains_placeholder_backup": false,
  "remote_script_contains_runtime_backup_date": true,
  "remote_script_executed": false,
  "remote_script_line_count": 42,
  "remote_script_model": "single_shell_script",
  "remote_script_sha256": "99d9301dd8b4029b20126ce2c384be9efb8da4969edfddbecff3b0e95910f4fd",
  "requires_wg_peer_before_real_apply": true,
  "schema": "wg-access-agent-selector-remote-plan-v2",
  "selector_plan": {
    "action": "noop",
    "apply_performed": false,
    "contract_valid": true,
    "errors": [],
    "exact_line": "10.253.1.13 cs4 canary_vpn1",
    "exact_present": true,
    "idempotent_noop": true,
    "mode": "dry-run",
    "payload_summary": {
      "fwmark": "0x201",
      "interface_name": "vpn1",
      "manager_id": "hmn_pool",
      "peer_id": "219a1f63-ec47-4f72-9663-c1a17d82301e",
      "provider_type": "hmn_amneziawg",
      "selector_class": "cs4",
      "selector_label": "canary_vpn1",
      "slot_code": "vpn1",
      "subscription_id": "b782fb4e-b43c-4b76-966e-28a145b80485",
      "table_id": 201,
      "tunnel_ip": "10.253.1.13"
    },
    "same_ip_conflict_count": 0,
    "same_selector_class_conflict_count": 0,
    "same_selector_label_conflict_count": 0,
    "schema": "wg-access-agent-selector-apply-plan-v1",
    "selector_entry_count_after_planned": 4,
    "selector_entry_count_before": 4,
    "slot_status": "healthy",
    "warnings": [],
    "would_append": false
  },
  "selector_plan_rc": 0,
  "target": {
    "host": "10.71.100.1",
    "name": "vm100",
    "selector_conf": "/etc/router-wgpay-selector.d/peers.conf",
    "selector_service": "router-wgpay-canary"
  },
  "would_append": false
}