#!/usr/bin/env bash
set -Eeuo pipefail
umask 077
BASE="${ROUTER_OPS_BASE:-/opt/router-ops}"
ROOT="${BUNDLE_ROOT:?}"
RUN_DIR="${ROUTER_DETACHED_RUN_DIR:?}"
CHILD_RESULT="${ROUTER_DETACHED_CHILD_RESULT:?}"
INCOMING="${ROUTER_STEP_INCOMING:-/home/ops/incoming}"
SELFTEST="${ROUTER_EXACT_WORKER_SELFTEST:-false}"
CASE=pass
if [[ "$SELFTEST" == true ]]; then
 case "${ROUTER_PUBLIC_ROOT:-}" in
   */fail-retained/public) CASE=fail-retained ;;
   */fail-live/public) CASE=fail-live ;;
   */fail-source/public) CASE=fail-source ;;
 esac
fi
STEP=STEP_050M07P23B_R03_VM121_DOMAIN_V2_LIVE_ACTIVATION_AND_MODEL_COMPATIBILITY_CONTINUATION
R01_STEP=STEP_050M07P23B_R01_VM121_DOMAIN_V2_LIVE_ACTIVATION_AND_MODEL_COMPATIBILITY
R02_STEP=STEP_050M07P23B_R02_VM121_DOMAIN_V2_LIVE_ACTIVATION_AND_MODEL_COMPATIBILITY_CONTINUATION
EXPECTED_COMMIT=e9bfa90773a8cd3c25e0e8d734c4232121272f43
EXPECTED_TREE=b264b8b1d60510766bdd9775b8d2ffaea4015501
EXPECTED_COUNT=43
EXPECTED_URL=https://reports.secret-studio.ru/latest/20260810-024332_vm121_git_source_e9bfa90773a8/
MIGRATION_SHA=56c1fe6fd85d4d8a7a048ccf4efc807c8f3b20f2c98b24d6f21e4230153a9d8d
CORE_MODEL_SHA=d267b4340fd0f61e3da9d37a19ac43d5099d673ac7da1d6f2b35997436ffcd6b
MODELS_INIT_SHA=4a5f7b75ceda608f7493c3b409dbcf662b883b4cc9899bc981384780b583b9e8
DEV_API_SHA=44d9cdb0454c70e1339568d34a60cba5f603e858edb759c043a7b63f793d8b46
VM100_COMMIT=e865282f4837747b1babfac4ac199680c6b43d04
VM100_TREE=8f04afbbc77006fe117bf1228b1f4fc977be9a47
VM100_COUNT=33
CURRENT="$RUN_DIR/workflow-current.txt"; EVENTS="$RUN_DIR/workflow-events.tsv"; EVIDENCE="$RUN_DIR/evidence"; REPORT="$RUN_DIR/report"; PAYLOAD="$RUN_DIR/public-payload"; FINAL_ENV="$RUN_DIR/final-publication.env"; TARGET_DIR="$RUN_DIR/target"
mkdir -p "$EVIDENCE" "$REPORT" "$PAYLOAD" "$TARGET_DIR" "$INCOMING"; chmod 700 "$EVIDENCE" "$REPORT" "$PAYLOAD" "$TARGET_DIR"
source "$BASE/lib/router-step-workflow.sh"
source <("$BASE/bin/router-release-contract" env --root "$ROOT")
router_step_workflow_init "$CURRENT" "$EVENTS" preflight retained_evidence postcheck report_publish archive
STOP_DETAIL=unknown; STOP_HANDLED=false; STEP_REPORT_URL=unknown; LATEST_ARCHIVE=not_created; LATEST_ARCHIVE_SHA256=unknown; R01_RUN_DIR=unknown; R02_RUN_DIR=unknown
VM121_PUBLIC_URL=$EXPECTED_URL
VALIDATION_BACKUP_PATH=unknown; VALIDATION_BACKUP_SHA256=unknown; ROLLBACK_BACKUP_PATH=unknown; ROLLBACK_BACKUP_SHA256=unknown; DELTA_SQL_SHA256=unknown
field(){ awk -F= -v k="$1" '$1==k{print substr($0,index($0,"=")+1); exit}' "$2"; }
write_child(){ local result="$1" rc="$2" tmp="${CHILD_RESULT}.tmp.$$"; cat > "$tmp" <<EOF
RESULT=$result
WORKER_RC=$rc
STOP_DETAIL=$STOP_DETAIL
R01_RUN_DIR=$R01_RUN_DIR
R02_RUN_DIR=$R02_RUN_DIR
CORE_CHANGE_COMPLETE=true
CORE_CHANGE_REPEATED=false
SOURCE_CHANGED=false
TARGET_INSTALLER_RERUN=false
TARGET_POSTCHECK_REPEATED=false
ROUTER_MACHINE_CLOSE_RERUN=false
LIVE_DATABASE_WRITTEN=false
DATABASE_SCHEMA_CHANGED=false
ROLLBACK_STATUS=not_applicable_continuation
SOURCE_ROLLBACK_STATUS=not_applicable_continuation
RUNTIME_RECOVERY_STATUS=not_applicable_continuation
VM121_NEW_COMMIT=$EXPECTED_COMMIT
VM121_NEW_TREE=$EXPECTED_TREE
VM121_NEW_FILE_COUNT=$EXPECTED_COUNT
VM121_NEW_PUBLIC_URL=$EXPECTED_URL
STEP_REPORT_URL=$STEP_REPORT_URL
LATEST_ARCHIVE=$LATEST_ARCHIVE
LATEST_ARCHIVE_SHA256=$LATEST_ARCHIVE_SHA256
EOF
chmod 600 "$tmp"; mv "$tmp" "$CHILD_RESULT"; }
archive_latest(){ local log="$EVIDENCE/archive.log"; router_step_archive_latest_python "$BASE" "$INCOMING" "$(date -u +%Y%m%d-%H%M%S)" | tee "$log"; LATEST_ARCHIVE="$(field LATEST_ARCHIVE "$log")"; LATEST_ARCHIVE_SHA256="$(field LATEST_ARCHIVE_SHA256 "$log")"; }
write_stop_report(){ local rc="$1" line="$2" cmd="$3"; cat > "$REPORT/report.txt" <<EOF
RESULT=STOP_P23B_R03_DOMAIN_V2_LIVE_ACTIVATION_CONTINUATION
REVISION=R03
STOP_RC=$rc
STOP_LINE=$line
STOP_DETAIL=$STOP_DETAIL
CORE_CHANGE_COMPLETE=true
CORE_CHANGE_REPEATED=false
SOURCE_CHANGED=false
LIVE_DATABASE_WRITTEN=false
DATABASE_SCHEMA_CHANGED=false
TARGET_INSTALLER_RERUN=false
TARGET_POSTCHECK_REPEATED=false
ROUTER_MACHINE_CLOSE_RERUN=false
ROLLBACK_STATUS=not_applicable_continuation
EOF
printf 'STOP_COMMAND=%q
' "$cmd" >> "$REPORT/report.txt"; cp "$REPORT/report.txt" "$REPORT/verify.txt"; cp "$ROOT/scripts/run-step.sh" "$REPORT/executed-step.sh"; cp "$ROOT/release-info.json" "$REPORT/release-info.json"; cp "$ROOT/rollback/README.md" "$REPORT/rollback.txt"; }
stop_handler(){ local rc="$1" line="$2" cmd="$3"; trap - ERR; [[ "$STOP_HANDLED" == false ]] || return "$rc"; STOP_HANDLED=true; set +e; write_stop_report "$rc" "$line" "$cmd"; if [[ "$SELFTEST" == true ]]; then DEST="${ROUTER_PUBLIC_ROOT:?}/latest/p23b-r03-$CASE-selftest"; rm -rf "$DEST"; mkdir -p "$DEST"; cp -a "$REPORT"/. "$DEST"/; STEP_REPORT_URL="selftest://p23b-r03-$CASE/"; archive_latest >/dev/null 2>&1; else args=(); while IFS= read -r file; do args+=("$file" "$(basename "$file")"); done < <(find "$REPORT" -maxdepth 1 -type f -print | LC_ALL=C sort); router_step_publish_payload step050m07p23b_r03_vm121_domain_v2_live_activation_and_model_compatibility_continuation_stop "$REPORT" "$PAYLOAD" "$CURRENT" "$EVENTS" "$FINAL_ENV" "${args[@]}" >/dev/null 2>&1 || true; [[ -f "$FINAL_ENV" ]] && STEP_REPORT_URL="$(field PUBLIC_URL "$FINAL_ENV")"; archive_latest >/dev/null 2>&1; fi; set -e; write_child STOP_P23B_R03_DOMAIN_V2_LIVE_ACTIVATION_CONTINUATION "$rc"; return "$rc"; }
trap 'rc=$?; stop_handler "$rc" "$LINENO" "$BASH_COMMAND"; exit "$rc"' ERR

find_prior_run(){
 local step_id="$1" expected_result="$2"; shift 2
 local state_root
 if [[ "$SELFTEST" == true ]]; then state_root="$(dirname "${ROUTER_PUBLIC_ROOT:?}")/retained-detached"; else state_root="$BASE/state/detached-step-runs"; fi
 "$ROOT/scripts/find-retained-detached-run.sh" "$state_root" "$step_id" "$expected_result" "$@"
}
write_selftest_source(){ cat <<EOF
RESULT=PASS_VM130_VM121_GIT_SOURCE_CHECK
VM121_COMMIT=$EXPECTED_COMMIT
VM130_COMMIT=$EXPECTED_COMMIT
VM130_TREE=$EXPECTED_TREE
VM130_FILE_COUNT=$EXPECTED_COUNT
VM121_PUSH_PERFORMED=false
EOF
}
write_selftest_state(){ cat <<EOF
VM121_GIT_SOURCE_COMMIT=$EXPECTED_COMMIT
VM121_GIT_SOURCE_TREE=$EXPECTED_TREE
VM121_GIT_SOURCE_FILE_COUNT=$EXPECTED_COUNT
VM121_GIT_SOURCE_URL=$EXPECTED_URL
EOF
}
write_selftest_live(){ cat <<EOF
ALEMBIC_VERSION=0003_domain_v2_schema
MIGRATION_SHA256=$MIGRATION_SHA
CORE_MODEL_SHA256=$CORE_MODEL_SHA
MODELS_INIT_SHA256=$MODELS_INIT_SHA
DEV_API_SHA256=$DEV_API_SHA
LIVE_DOMAIN_V2_TABLE_COUNT=10
LEGACY_BUSINESS_ROWS=0
EGRESS_TARGET_COUNT=5
EGRESS_ALLOCATOR_COUNT=14
LEGACY_DEV_WRITER_RETIRED=true
BACKEND_HEALTH=PASS
EOF
}
collect_live(){
 if [[ "$SELFTEST" == true ]]; then write_selftest_live; return 0; fi
 ssh -T -o BatchMode=yes -o ConnectTimeout=20 vm121 /bin/bash -s <<'VM121'
set -euo pipefail
PG=wgaccess-postgres; BACKEND=wgaccess-backend
PGUSER="$(docker exec "$PG" sh -lc 'printf %s "$POSTGRES_USER"')"; PGDB="$(docker exec "$PG" sh -lc 'printf %s "$POSTGRES_DB"')"
q(){ docker exec "$PG" psql -v ON_ERROR_STOP=1 -U "$PGUSER" -d "$PGDB" -Atqc "$1"; }
echo "ALEMBIC_VERSION=$(q 'SELECT version_num FROM alembic_version')"
echo "MIGRATION_SHA256=$(sha256sum /opt/wg-access/backend/alembic/versions/0003_domain_v2_schema.py | awk '{print $1}')"
echo "CORE_MODEL_SHA256=$(sha256sum /opt/wg-access/backend/app/models/core.py | awk '{print $1}')"
echo "MODELS_INIT_SHA256=$(sha256sum /opt/wg-access/backend/app/models/__init__.py | awk '{print $1}')"
echo "DEV_API_SHA256=$(sha256sum /opt/wg-access/backend/app/api/dev.py | awk '{print $1}')"
echo "LIVE_DOMAIN_V2_TABLE_COUNT=$(q "SELECT count(*) FROM information_schema.tables WHERE table_schema='public' AND table_name IN ('plans','access_grants','access_grant_protocol_limits','invites','invite_redemptions','magic_link_tokens','auth_sessions','connection_profiles','peer_credentials','audit_events')")"
echo "LEGACY_BUSINESS_ROWS=$(q "SELECT (SELECT count(*) FROM users)+(SELECT count(*) FROM invite_codes)+(SELECT count(*) FROM orders)+(SELECT count(*) FROM subscriptions)+(SELECT count(*) FROM peers)+(SELECT count(*) FROM provisioning_jobs)+(SELECT count(*) FROM peer_egress_leases)")"
echo "EGRESS_TARGET_COUNT=$(q 'SELECT count(*) FROM egress_targets')"
echo "EGRESS_ALLOCATOR_COUNT=$(q 'SELECT count(*) FROM egress_allocator_settings')"
grep -Fq 'status_code=410' /opt/wg-access/backend/app/api/dev.py && echo LEGACY_DEV_WRITER_RETIRED=true || { echo LEGACY_DEV_WRITER_RETIRED=false; exit 1; }
if docker exec -i "$BACKEND" python - <<'PYVM' >/dev/null 2>&1
import urllib.request
for u in ('http://127.0.0.1:8000/health','http://127.0.0.1:8000/health/db'):
    with urllib.request.urlopen(u,timeout=5) as r: assert r.status==200
PYVM
then echo BACKEND_HEALTH=PASS; else echo BACKEND_HEALTH=FAIL; exit 1; fi
VM121
}
write_vm100_zero(){ cat <<EOF
MODE=--check
MACHINE_ID=vm100
LOCAL_HEAD=$VM100_COMMIT
REMOTE_HEAD=$VM100_COMMIT
STAGED_CHANGE_COUNT=0
SIMULATED_TREE_SHA=$VM100_TREE
SIMULATED_TREE_FILE_COUNT=$VM100_COUNT
RESULT=PASS_VM100_GIT_PUBLISH_CHECK
MACHINE_ID=vm100
GIT_COMMIT=$VM100_COMMIT
GIT_TREE=$VM100_TREE
GIT_FILE_COUNT=$VM100_COUNT
COMMIT_CREATED=false
PUSH_PERFORMED=false
LIFECYCLE_RESULT=PASS_PEER_LIFECYCLE_STATUS
LIFECYCLE_INITIALIZED=true
LIFECYCLE_REGISTRY_VALID=true
LIFECYCLE_PROFILE_COUNT=0
LIFECYCLE_WIREGUARD_COUNT=0
LIFECYCLE_AMNEZIAWG_COUNT=0
LIFECYCLE_SELECTOR_REGISTRY_CONSISTENT=true
WG_PAID_RUNTIME_PEER_COUNT=0
LIFECYCLE_ACTIVE_SELECTOR_ROW_COUNT=0
LIFECYCLE_CANONICAL_SELECTOR_ROW_COUNT=0
EOF
}
collect_vm100_zero(){
 if [[ "$SELFTEST" == true ]]; then write_vm100_zero > "$EVIDENCE/vm100-zero.txt"; else
 ssh -T -o BatchMode=yes -o ConnectTimeout=20 pve-mgts /bin/bash -s > "$EVIDENCE/vm100-zero.txt" 2>&1 <<'PVE'
set -euo pipefail
ssh -T -o BatchMode=yes -o ConnectTimeout=20 -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.1 /bin/sh -s <<'VM100'
set -eu
/usr/local/sbin/router-vm100-git-publish.sh --check
status="$(/usr/local/sbin/router-wgpay-peer-lifecycle.sh --status)"
get_status(){ printf '%s
' "$status" | awk -F= -v k="$1" '$1==k{print substr($0,index($0,"=")+1); exit}'; }
echo "LIFECYCLE_RESULT=$(get_status RESULT)"
echo "LIFECYCLE_INITIALIZED=$(get_status initialized)"
echo "LIFECYCLE_REGISTRY_VALID=$(get_status registry_valid)"
echo "LIFECYCLE_PROFILE_COUNT=$(get_status profile_count)"
echo "LIFECYCLE_WIREGUARD_COUNT=$(get_status wireguard_count)"
echo "LIFECYCLE_AMNEZIAWG_COUNT=$(get_status amneziawg_count)"
echo "LIFECYCLE_SELECTOR_REGISTRY_CONSISTENT=$(get_status selector_registry_consistent)"
. /etc/router-wgpay-peer-lifecycle.conf
echo "WG_PAID_RUNTIME_PEER_COUNT=$(wg show "$PEER_WIREGUARD_INTERFACE" peers 2>/dev/null | awk 'NF{n++} END{print n+0}')"
echo "LIFECYCLE_ACTIVE_SELECTOR_ROW_COUNT=$(awk '$0!~/^[[:space:]]*#/ && NF{n++} END{print n+0}' "$PEER_ACTIVE_SELECTOR_FILE")"
echo "LIFECYCLE_CANONICAL_SELECTOR_ROW_COUNT=$(awk '$0!~/^[[:space:]]*#/ && NF{n++} END{print n+0}' "$PEER_CANONICAL_SELECTOR_FILE")"
VM100
PVE
 fi
 "$ROOT/scripts/source-check-validate.sh" vm100 "$EVIDENCE/vm100-zero.txt" "$VM100_COMMIT" "$VM100_TREE" "$VM100_COUNT" > "$EVIDENCE/vm100-source-validation.txt"
 "$ROOT/scripts/vm100-zero-validate.sh" "$EVIDENCE/vm100-zero.txt" > "$EVIDENCE/vm100-zero-validation.txt"
}

router_step_phase_begin preflight
"$ROOT/scripts/target-apply.sh" "$ROUTER_RELEASE_TARGET_PACKAGE_SHA256" "$ROOT/$ROUTER_RELEASE_TARGET_PACKAGE_PATH" "$TARGET_DIR" > "$EVIDENCE/target-package.txt"
router_step_phase_complete preflight continuation_release_contract_verified_no_target_mutation

router_step_phase_begin retained_evidence
R02_RUN_DIR="$(find_prior_run "$R02_STEP" STOP_P23B_R02_DOMAIN_V2_LIVE_ACTIVATION_CONTINUATION CORE_CHANGE_REPEATED=false SOURCE_CHANGED=false LIVE_DATABASE_WRITTEN=false STOP_DETAIL=r01_retained_run_not_found)" || { STOP_DETAIL=r02_retained_run_not_found; false; }
"$ROOT/scripts/retained-r02-validate.sh" "$R02_RUN_DIR" > "$EVIDENCE/r02-retained-validation.txt" || { STOP_DETAIL=r02_retained_evidence; false; }
R01_RUN_DIR="$(find_prior_run "$R01_STEP" STOP_P23B_VM121_DOMAIN_V2_LIVE_ACTIVATION_AND_MODEL_COMPATIBILITY CORE_CHANGE_COMPLETE=true VM121_NEW_COMMIT=e9bfa90773a8cd3c25e0e8d734c4232121272f43)" || { STOP_DETAIL=r01_retained_run_not_found; false; }
if [[ "$CASE" == fail-retained ]]; then rm -f "$R01_RUN_DIR/evidence/live-activation-validation.txt"; fi
"$ROOT/scripts/retained-r01-validate.sh" "$R01_RUN_DIR" > "$EVIDENCE/r01-retained-validation.txt" || { STOP_DETAIL=r01_retained_evidence; false; }
ACT="$R01_RUN_DIR/evidence/live-activation.txt"
VALIDATION_BACKUP_PATH="$(field VALIDATION_BACKUP_PATH "$ACT")"; VALIDATION_BACKUP_SHA256="$(field VALIDATION_BACKUP_SHA256 "$ACT")"; ROLLBACK_BACKUP_PATH="$(field ROLLBACK_BACKUP_PATH "$ACT")"; ROLLBACK_BACKUP_SHA256="$(field ROLLBACK_BACKUP_SHA256 "$ACT")"; DELTA_SQL_SHA256="$(field DELTA_SQL_SHA256 "$ACT")"
router_step_phase_complete retained_evidence r02_no_mutation_stop_and_r01_class_c_core_proof_validated_from_canonical_detached_state

router_step_phase_begin postcheck
if [[ "$SELFTEST" == true ]]; then write_selftest_source > "$EVIDENCE/source-check.txt"; write_selftest_state > "$EVIDENCE/current-vm121-git-source.env"; else
 "$BASE/bin/router-vm121-git-source-publish" --check > "$EVIDENCE/source-check.txt" 2>&1
 cp "$BASE/state/current-vm121-git-source.env" "$EVIDENCE/current-vm121-git-source.env"
fi
if [[ "$CASE" == fail-source ]]; then sed -i 's/VM130_TREE=.*/VM130_TREE=0000000000000000000000000000000000000000/' "$EVIDENCE/source-check.txt"; fi
"$ROOT/scripts/current-source-validate.sh" "$EVIDENCE/source-check.txt" "$EVIDENCE/current-vm121-git-source.env" > "$EVIDENCE/current-source-validation.txt" || { STOP_DETAIL=current_source_check; false; }
collect_live > "$EVIDENCE/live-state.txt" || { STOP_DETAIL=vm121_live_readback_transport; false; }
if [[ "$CASE" == fail-live ]]; then sed -i 's/ALEMBIC_VERSION=0003_domain_v2_schema/ALEMBIC_VERSION=0002_live_drift_bridge/' "$EVIDENCE/live-state.txt"; fi
"$ROOT/scripts/live-state-validate.sh" "$EVIDENCE/live-state.txt" > "$EVIDENCE/live-state-validation.txt" || { STOP_DETAIL=vm121_live_invariants; false; }
collect_vm100_zero || { STOP_DETAIL=vm100_zero_baseline; false; }
router_step_phase_complete postcheck current_machine_git_vm121_live_and_vm100_zero_invariants_proven_separately

cat > "$REPORT/report.txt" <<EOF
RESULT=PASS_P23B_VM121_DOMAIN_V2_LIVE_ACTIVATION_AND_MODEL_COMPATIBILITY
REVISION=R03
CONTINUATION=true
PREVIOUS_STEP=$R02_STEP
ORIGINAL_CORE_STEP=$R01_STEP
R02_RESULT=STOP_P23B_R02_DOMAIN_V2_LIVE_ACTIVATION_CONTINUATION
R02_STOP_DETAIL=r01_retained_run_not_found
R02_CORE_CHANGE_REPEATED=false
R02_SOURCE_CHANGED=false
R02_LIVE_DATABASE_WRITTEN=false
R01_RESULT=STOP_P23B_VM121_DOMAIN_V2_LIVE_ACTIVATION_AND_MODEL_COMPATIBILITY
R01_STOP_STAGE=late_composite_postcheck
R01_STOP_RC=2
R01_STOP_DETAIL=unknown
R01_EXACT_FAILING_SUBCOMMAND=not_asserted_from_public_evidence
R01_CORE_CHANGE_COMPLETE=true
CORE_CHANGE_COMPLETE=true
CORE_CHANGE_REPEATED=false
SOURCE_CHANGED=false
TARGET_INSTALLER_RERUN=false
TARGET_POSTCHECK_REPEATED=false
ROUTER_MACHINE_CLOSE_RERUN=false
LIVE_ALEMBIC_VERSION_BEFORE=0002_live_drift_bridge
LIVE_ALEMBIC_VERSION_AFTER=0003_domain_v2_schema
MIGRATION_SHA256=$MIGRATION_SHA
DELTA_SQL_SHA256=$DELTA_SQL_SHA256
VALIDATION_BACKUP_CREATED=true
VALIDATION_BACKUP_ENCRYPTED=true
VALIDATION_BACKUP_PATH=$VALIDATION_BACKUP_PATH
VALIDATION_BACKUP_SHA256=$VALIDATION_BACKUP_SHA256
ROLLBACK_BACKUP_CREATED=true
ROLLBACK_BACKUP_ENCRYPTED=true
ROLLBACK_BACKUP_PATH=$ROLLBACK_BACKUP_PATH
ROLLBACK_BACKUP_SHA256=$ROLLBACK_BACKUP_SHA256
ONLINE_UPGRADE_FIXTURE=PASS
OFFLINE_SQL_EQUIVALENCE_FIXTURE=PASS
CLEAN_INSTALL_FIXTURE=PASS
CANDIDATE_ORM_FIXTURE=PASS
DATABASE_SCHEMA_CHANGED=true
LIVE_DATABASE_WRITTEN_R01=true
LIVE_DATABASE_WRITTEN_R02=false
LIVE_DATABASE_WRITTEN_R03=false
LIVE_DOMAIN_V2_TABLE_COUNT=10
LEGACY_BUSINESS_ROWS=0
EGRESS_TARGET_COUNT=5
EGRESS_ALLOCATOR_COUNT=14
LEGACY_DEV_WRITER_RETIRED=true
DOMAIN_V2_PRODUCT_WRITER_ACTIVE=false
VM100_ZERO_BASELINE_AFTER=true
BACKEND_HEALTH=PASS
RUNTIME_RECOVERY_STATUS=PASS_R01_RETAINED
ROLLBACK_STATUS=not_required
SOURCE_ROLLBACK_STATUS=not_required
VM121_COMMIT=$EXPECTED_COMMIT
VM121_TREE=$EXPECTED_TREE
VM121_FILE_COUNT=$EXPECTED_COUNT
VM121_PUBLIC_URL=$EXPECTED_URL
VM100_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260809-142753_vm100_git_source_e865282f4837/
VM101_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260801-095331_vm101_git_source_ac678d1b3164/
PROJECT_SOURCES_CHECKPOINT=AFTER_P22B
RUNTIME_IMPACT_R03=false
COPY_VERIFY=PASS
NEXT_ACTION=P23C Domain V2 service-layer primitives on live 0003 without external onboarding yet
EOF
cp "$REPORT/report.txt" "$REPORT/verify.txt"; cp "$ROOT/scripts/run-step.sh" "$REPORT/executed-step.sh"; cp "$ROOT/release-info.json" "$REPORT/release-info.json"; cp "$ROOT/manifest.sha256" "$REPORT/bundle-manifest.sha256"; cp "$ROOT/rollback/README.md" "$REPORT/rollback.txt"; cp "$ROOT/reference/continuation-contract.md" "$REPORT/continuation-contract.md"; cp "$EVIDENCE/r02-retained-validation.txt" "$REPORT/"; cp "$EVIDENCE/r01-retained-validation.txt" "$REPORT/"; cp "$EVIDENCE/current-source-validation.txt" "$REPORT/"; cp "$EVIDENCE/live-state-validation.txt" "$REPORT/"; cp "$EVIDENCE/vm100-zero-validation.txt" "$REPORT/"
router_step_phase_begin report_publish
if [[ "$SELFTEST" == true ]]; then DEST="${ROUTER_PUBLIC_ROOT:?}/latest/p23b-r03-pass-selftest"; rm -rf "$DEST"; mkdir -p "$DEST"; cp -a "$REPORT"/. "$DEST"/; STEP_REPORT_URL=selftest://p23b-r03-pass/; else args=(); while IFS= read -r file; do args+=("$file" "$(basename "$file")"); done < <(find "$REPORT" -maxdepth 1 -type f -print | LC_ALL=C sort); router_step_publish_payload step050m07p23b_r03_vm121_domain_v2_live_activation_and_model_compatibility_continuation "$REPORT" "$PAYLOAD" "$CURRENT" "$EVENTS" "$FINAL_ENV" "${args[@]}"; STEP_REPORT_URL="$(field PUBLIC_URL "$FINAL_ENV")"; fi
router_step_phase_complete report_publish p23b_final_pass_report_published
router_step_phase_begin archive
archive_latest
router_step_phase_complete archive latest_created
router_step_workflow_mark_complete
trap - ERR; STOP_DETAIL=none; write_child PASS_P23B_VM121_DOMAIN_V2_LIVE_ACTIVATION_AND_MODEL_COMPATIBILITY 0
echo RESULT=PASS_P23B_VM121_DOMAIN_V2_LIVE_ACTIVATION_AND_MODEL_COMPATIBILITY
echo REVISION=R03
echo CORE_CHANGE_REPEATED=false
echo LIVE_DATABASE_WRITTEN_R03=false
echo LIVE_ALEMBIC_VERSION_AFTER=0003_domain_v2_schema
echo VM121_PUBLIC_URL="$EXPECTED_URL"
echo STEP_REPORT_URL="$STEP_REPORT_URL"
echo LATEST_ARCHIVE="$LATEST_ARCHIVE"
echo LATEST_ARCHIVE_SHA256="$LATEST_ARCHIVE_SHA256"
