>>> [router-machine-close] machine=vm101 mode=--publish
>>> [vm101-source] precheck
MODE=--publish
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm101.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm101
>>> [vm101-source] run VM101 git publisher through approved nested SSH
>>> [vm101-git] precheck
MODE=--publish
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=38d1c76fefbf2a9203a10019d91b25c0c7ec5b67a9f97af623fd89058751d6fc
MACHINE_ID=vm101
GIT_DIR=/root/.vm101-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm101.git
LOCAL_HEAD=f02789cd2398a7ac2e6cfd372b535539607b9227
>>> [vm101-git] verify remote branch
REMOTE_HEAD=f02789cd2398a7ac2e6cfd372b535539607b9227
>>> [vm101-git] build current project allowlist
>>> [vm101-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=48
TRACKED_COUNT=48
MANAGED_UNION_COUNT=48
>>> [vm101-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm101-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm101-git] build simulated git index
STAGED_CHANGE_COUNT=3
=== STAGED PATHS ===
usr/local/lib/router-egress-recovery-state.sh
usr/local/sbin/router-egress-full-pool-refresh.sh
usr/local/sbin/router-egress-health-repair-watch.sh
>>> [vm101-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=bc98a61312b3500a62db7836eca607c2656d4916
SIMULATED_TREE_FILE_COUNT=48
>>> [vm101-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm101-git] keyword review scan
=== FILES REQUIRING KEYWORD REVIEW ===
bc98a61312b3500a62db7836eca607c2656d4916:hmn/hmn-load-vpn-test.sh
bc98a61312b3500a62db7836eca607c2656d4916:hmn/hmn-set-code.sh
>>> [vm101-git] verify real git index has no pre-staged changes
>>> [vm101-git] install validated simulated index
>>> [vm101-git] create commit
[main 64af273] vm101: publish managed source 2026-07-28T15:39:49Z
 3 files changed, 132 insertions(+), 9 deletions(-)
NEW_COMMIT=64af27342fd93c53a3ebf4abf223f044d406df6a
NEW_TREE=bc98a61312b3500a62db7836eca607c2656d4916
>>> [vm101-git] push branch to remote
To github.com:DChuvelev/wg-paid-vm101.git
   f02789c..64af273  main -> main
>>> [vm101-git] verify remote commit
LOCAL_COMMIT=64af27342fd93c53a3ebf4abf223f044d406df6a
REMOTE_COMMIT=64af27342fd93c53a3ebf4abf223f044d406df6a

RESULT=PASS_vm101_GIT_PUBLISH
MACHINE_ID=vm101
GIT_COMMIT=64af27342fd93c53a3ebf4abf223f044d406df6a
GIT_TREE=bc98a61312b3500a62db7836eca607c2656d4916
GIT_FILE_COUNT=48
COMMIT_CREATED=true
PUSH_PERFORMED=true
REPOSITORY=https://github.com/DChuvelev/wg-paid-vm101

VM101_PUBLISHER_RC=0

VM101_RESULT=PASS_vm101_GIT_PUBLISH
VM101_COMMIT=64af27342fd93c53a3ebf4abf223f044d406df6a
VM101_REMOTE_COMMIT=64af27342fd93c53a3ebf4abf223f044d406df6a
>>> [vm101-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm101.git
From https://github.com/DChuvelev/wg-paid-vm101
 * branch            main       -> FETCH_HEAD
   f02789c..64af273  main       -> origin/main
Reset branch 'main'
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at 64af273 vm101: publish managed source 2026-07-28T15:39:49Z

VM130_COMMIT=64af27342fd93c53a3ebf4abf223f044d406df6a
VM130_TREE=bc98a61312b3500a62db7836eca607c2656d4916
VM130_FILE_COUNT=48
VM130_STATUS=CLEAN
>>> [vm101-source] verify required managed paths
REQUIRED_PATH_OK=etc/crontabs/root
REQUIRED_PATH_OK=usr/local/sbin/router-vm101-git-publish.sh
>>> [vm101-source] create archive and metadata from exact Git commit
ARCHIVE=/tmp/vm101-git-source-publish.WVAb7I/wg-paid-vm101-64af27342fd9.tar.gz
ARCHIVE_SHA256=35f6d1565bc0d95ca06f5322739eecc93bc5939b1fce40016dd8f1c44b057ca6
ARCHIVE_BASE64=/tmp/vm101-git-source-publish.WVAb7I/wg-paid-vm101-64af27342fd9.tar.gz.b64.txt
MANIFEST=/tmp/vm101-git-source-publish.WVAb7I/git-tree-manifest.txt
PATHS=/tmp/vm101-git-source-publish.WVAb7I/managed-paths.txt
FACTS=/tmp/vm101-git-source-publish.WVAb7I/facts.json
>>> [vm101-source] publish atomically into latest/ and archive prior version into old/
PUBLISHED_DIR=/opt/router-ops/public/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260728-153953_vm101_git_source_64af27342fd9
PUBLISHED_RELATIVE_PATH=latest/20260728-153953_vm101_git_source_64af27342fd9
PUBLIC_OBJECT_KIND=vm101
PREVIOUS_MOVED_COUNT=1
COLLISION_DEDUPLICATED_COUNT=0
PUBLICATION_REUSED=false
PUBLICATION_TRANSACTION_ID=20260728-153953_489400_14353
PUBLICATION_COMMITTED=true
LOCAL_POSTCHECK=PASS
LATEST_INDEX_CONTAINS_FOLDER=true
LOCAL_INDEX=http://192.168.30.84:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260728-153953_vm101_git_source_64af27342fd9/
LATEST_ROOT_URL=https://reports.secret-studio.ru/latest/
OLD_ROOT_URL=https://reports.secret-studio.ru/old/
PUBLIC_INDEX=https://reports.secret-studio.ru/latest/
PUBLIC_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/
VM101_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/
TRYCF_INDEX=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/
TRYCF_REPORT=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260728-153953_vm101_git_source_64af27342fd9/
RESULT=PASS_ROUTER_PUBLISH_REPORT
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=21f2c8bb44bc0e9deef783fc0ecb0cb9493f9d097df633f2c8fa05be845635e7
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=21f2c8bb44bc0e9deef783fc0ecb0cb9493f9d097df633f2c8fa05be845635e7
HTTP_OUTPUT=/tmp/vm101-git-source-publish.WVAb7I/http-index.html
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=35f6d1565bc0d95ca06f5322739eecc93bc5939b1fce40016dd8f1c44b057ca6
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/wg-paid-vm101-64af27342fd9.tar.gz
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=35f6d1565bc0d95ca06f5322739eecc93bc5939b1fce40016dd8f1c44b057ca6
HTTP_OUTPUT=/tmp/vm101-git-source-publish.WVAb7I/http-archive.tar.gz
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=572e4e83063d7b9ca1e0ace3509c52af316b958d0fb180ee3c759ba496709d57
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/facts.json
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=572e4e83063d7b9ca1e0ace3509c52af316b958d0fb180ee3c759ba496709d57
HTTP_OUTPUT=/tmp/vm101-git-source-publish.WVAb7I/http-facts.json
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=1a8674c75de749658c64424049799dd2885d85014933149c946ad21bc4638f4e
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/git-tree-manifest.txt
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=1a8674c75de749658c64424049799dd2885d85014933149c946ad21bc4638f4e
HTTP_OUTPUT=/tmp/vm101-git-source-publish.WVAb7I/http-manifest.txt
>>> [vm101-source] save current source archive state

RESULT=PASS_VM130_VM101_GIT_SOURCE_PUBLISH
VM101_GIT_SOURCE_COMMIT=64af27342fd93c53a3ebf4abf223f044d406df6a
VM101_GIT_SOURCE_TREE=bc98a61312b3500a62db7836eca607c2656d4916
VM101_GIT_SOURCE_FILE_COUNT=48
VM101_GIT_SOURCE_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/
VM101_GIT_SOURCE_ARCHIVE_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/wg-paid-vm101-64af27342fd9.tar.gz
VM101_GIT_SOURCE_ARCHIVE_B64_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/wg-paid-vm101-64af27342fd9.tar.gz.b64.txt
VM101_GIT_SOURCE_FACTS_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/facts.json
VM101_GIT_SOURCE_MANIFEST_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/git-tree-manifest.txt
VM101_GIT_SOURCE_ARCHIVE_SHA256=35f6d1565bc0d95ca06f5322739eecc93bc5939b1fce40016dd8f1c44b057ca6
VM101_PUSH_PERFORMED=true
ARCHIVE_CREATED=true
PUBLISHER_RESULT=PASS_ROUTER_PUBLISH_REPORT
PUBLISHER_RC=0
PUBLISHER_RC_NONZERO_SALVAGED=false
PUBLICATION_COMMITTED=true
LOCAL_POSTCHECK=PASS
LATEST_INDEX_CONTAINS_FOLDER=true
HTTP_POSTCHECK=PASS
SOURCE_STATE_UPDATED=true
PERMANENT_HTTPS_PUBLISHED=true
RESULT=PASS_ROUTER_MACHINE_CLOSE
MACHINE=vm101
DESCRIPTION=STEP_050M07R20QK: add atomic idempotent full-refresh request API, connect no_pool_file/stale_pool/no_eligible_candidate to the existing controller, and make pending+due the complete run-if-due gate without changing durable retry scheduling
COMMIT=64af27342fd93c53a3ebf4abf223f044d406df6a
TREE=bc98a61312b3500a62db7836eca607c2656d4916
GIT_FILE_COUNT=48
SOURCE_PUBLISH_BACKEND=/opt/router-ops/bin/router-vm101-git-source-publish
BACKEND_LOG=/opt/router-ops/state/machine-close-runs/20260728-153947_vm101_489357/backend.txt
BACKEND_RC=0
BACKEND_RC_NONZERO_SALVAGED=false
CLASSIFICATION=PASS_AUTHORITATIVE_BACKEND_AND_PUBLICATION
VM101_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/
VM100_GIT_COMMIT=5d65131ca0228a73ed56e68ece7c44fd5c666585
VM100_GIT_TREE=b47f00980b78a60d8c98c98b24558e14d3c0d040
VM100_GIT_FILE_COUNT=27
VM100_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260728-141805_vm100_git_source_5d65131ca022/
VM100_SOURCE_CHANGE=false
VM101_GIT_COMMIT=64af27342fd93c53a3ebf4abf223f044d406df6a
VM101_GIT_TREE=bc98a61312b3500a62db7836eca607c2656d4916
VM101_GIT_FILE_COUNT=48
VM101_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260728-153953_vm101_git_source_64af27342fd9/
VM101_SOURCE_CHANGE=true
VM101_CHANGED_PATHS=usr/local/lib/router-egress-recovery-state.sh,usr/local/sbin/router-egress-health-repair-watch.sh,usr/local/sbin/router-egress-full-pool-refresh.sh
RESULT=PASS_R20QK_SOURCE_PUBLISH