>>> [router-machine-close] machine=vm121 mode=--publish
>>> [vm121-source] precheck
MODE=--publish
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm121.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm121
>>> [vm121-source] run VM121 git publisher through approved direct SSH
>>> [vm121-git] precheck
MODE=--publish
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=7af60e3d7de8335842addc60ced35672f821fb173eaccb59a830d8aba0c606da
MACHINE_ID=vm121
GIT_DIR=/root/.vm121-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm121.git
LOCAL_HEAD=963a5cf3db7cacdad52976189dd3946d41d87cf7
>>> [vm121-git] verify remote branch
REMOTE_HEAD=963a5cf3db7cacdad52976189dd3946d41d87cf7
>>> [vm121-git] build current project allowlist
>>> [vm121-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=72
TRACKED_COUNT=71
MANAGED_UNION_COUNT=72
>>> [vm121-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm121-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm121-git] build simulated git index
STAGED_CHANGE_COUNT=6
=== STAGED PATHS ===
opt/wg-access/backend/alembic/versions/0014_bulk_invite_campaigns.py
opt/wg-access/backend/app/api/auth_v2.py
opt/wg-access/backend/app/models/__init__.py
opt/wg-access/backend/app/models/core.py
opt/wg-access/backend/app/services/auth_v2.py
opt/wg-access/backend/app/services/commercial.py
>>> [vm121-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=0a9a9a8e0c7a89cac626d7b905b901f8d9701d16
SIMULATED_TREE_FILE_COUNT=72
>>> [vm121-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm121-git] keyword review scan
KEYWORD_REVIEW_FILES=NONE
>>> [vm121-git] verify real git index has no pre-staged changes
>>> [vm121-git] install validated simulated index
>>> [vm121-git] create commit
[main 9d13dde] vm121: publish managed source 2026-09-24T12:50:23Z
 6 files changed, 664 insertions(+), 21 deletions(-)
 create mode 100644 opt/wg-access/backend/alembic/versions/0014_bulk_invite_campaigns.py
NEW_COMMIT=9d13dde3ce81e62ba452145a8f8cf52432e4082b
NEW_TREE=0a9a9a8e0c7a89cac626d7b905b901f8d9701d16
>>> [vm121-git] push branch to remote
To github.com:DChuvelev/wg-paid-vm121.git
   963a5cf..9d13dde  main -> main
>>> [vm121-git] verify remote commit
LOCAL_COMMIT=9d13dde3ce81e62ba452145a8f8cf52432e4082b
REMOTE_COMMIT=9d13dde3ce81e62ba452145a8f8cf52432e4082b

RESULT=PASS_VM121_GIT_PUBLISH
MACHINE_ID=vm121
GIT_COMMIT=9d13dde3ce81e62ba452145a8f8cf52432e4082b
GIT_TREE=0a9a9a8e0c7a89cac626d7b905b901f8d9701d16
GIT_FILE_COUNT=72
COMMIT_CREATED=true
PUSH_PERFORMED=true
REPOSITORY=https://github.com/DChuvelev/wg-paid-vm121

VM121_RESULT=PASS_VM121_GIT_PUBLISH
VM121_COMMIT=9d13dde3ce81e62ba452145a8f8cf52432e4082b
VM121_REMOTE_COMMIT=9d13dde3ce81e62ba452145a8f8cf52432e4082b
>>> [vm121-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm121.git
From https://github.com/DChuvelev/wg-paid-vm121
 * branch            main       -> FETCH_HEAD
   963a5cf..9d13dde  main       -> origin/main
Reset branch 'main'
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at 9d13dde vm121: publish managed source 2026-09-24T12:50:23Z

VM130_COMMIT=9d13dde3ce81e62ba452145a8f8cf52432e4082b
VM130_TREE=0a9a9a8e0c7a89cac626d7b905b901f8d9701d16
VM130_FILE_COUNT=72
VM130_STATUS=CLEAN
>>> [vm121-source] verify required managed paths
REQUIRED_PATH_OK=etc/router-machine-git-source.conf
REQUIRED_PATH_OK=usr/local/sbin/router-machine-git-publish.sh
REQUIRED_PATH_OK=usr/local/sbin/router-vm121-git-publish.sh
>>> [vm121-source] create archive and metadata from exact Git commit
ARCHIVE=/tmp/vm121-git-source-publish.RDVU9g/wg-paid-vm121-9d13dde3ce81.tar.gz
ARCHIVE_SHA256=5b5ed7e494dd4e305d9e7cc97aa9a9bc6bfe63bad37ccba521cab080a25b53b9
ARCHIVE_BASE64=/tmp/vm121-git-source-publish.RDVU9g/wg-paid-vm121-9d13dde3ce81.tar.gz.b64.txt
MANIFEST=/tmp/vm121-git-source-publish.RDVU9g/git-tree-manifest.txt
PATHS=/tmp/vm121-git-source-publish.RDVU9g/managed-paths.txt
FACTS=/tmp/vm121-git-source-publish.RDVU9g/facts.json
>>> [vm121-source] publish atomically into latest/ and archive prior version into old/
PUBLISHED_DIR=/opt/router-ops/public/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260924-125027_vm121_git_source_9d13dde3ce81
PUBLISHED_RELATIVE_PATH=latest/20260924-125027_vm121_git_source_9d13dde3ce81
PUBLIC_OBJECT_KIND=vm121
PREVIOUS_MOVED_COUNT=1
COLLISION_DEDUPLICATED_COUNT=0
PUBLICATION_REUSED=false
PUBLICATION_TRANSACTION_ID=20260924-125027_2179104_28107
PUBLICATION_COMMITTED=true
LOCAL_POSTCHECK=PASS
LATEST_INDEX_CONTAINS_FOLDER=true
LOCAL_INDEX=http://192.168.30.84:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260924-125027_vm121_git_source_9d13dde3ce81/
LATEST_ROOT_URL=https://reports.secret-studio.ru/latest/
OLD_ROOT_URL=https://reports.secret-studio.ru/old/
PUBLIC_INDEX=https://reports.secret-studio.ru/latest/
PUBLIC_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/
VM121_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/
TRYCF_INDEX=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/
TRYCF_REPORT=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260924-125027_vm121_git_source_9d13dde3ce81/
VM103_REPORT_MIRROR=PASS
RESULT=PASS_ROUTER_PUBLISH_REPORT
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=09202ef44bb1cf8fb9695d98f8998e23da4f2db727c8b530ba80c6bc778820ec
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=09202ef44bb1cf8fb9695d98f8998e23da4f2db727c8b530ba80c6bc778820ec
HTTP_OUTPUT=/tmp/vm121-git-source-publish.RDVU9g/http-index.html
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=5b5ed7e494dd4e305d9e7cc97aa9a9bc6bfe63bad37ccba521cab080a25b53b9
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/wg-paid-vm121-9d13dde3ce81.tar.gz
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=5b5ed7e494dd4e305d9e7cc97aa9a9bc6bfe63bad37ccba521cab080a25b53b9
HTTP_OUTPUT=/tmp/vm121-git-source-publish.RDVU9g/http-archive.tar.gz
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=b9cba7f6c0d0058dbf699d5c3f28cea34fc8334f38b1763de618ba7f49b8016b
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/facts.json
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=b9cba7f6c0d0058dbf699d5c3f28cea34fc8334f38b1763de618ba7f49b8016b
HTTP_OUTPUT=/tmp/vm121-git-source-publish.RDVU9g/http-facts.json
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=ea47ee8b97b54be1723805b413d2ad5e966031d54508cea127e4c095d57fcd25
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/git-tree-manifest.txt
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=ea47ee8b97b54be1723805b413d2ad5e966031d54508cea127e4c095d57fcd25
HTTP_OUTPUT=/tmp/vm121-git-source-publish.RDVU9g/http-manifest.txt
>>> [vm121-source] save current source archive state

RESULT=PASS_VM130_VM121_GIT_SOURCE_PUBLISH
VM121_GIT_SOURCE_COMMIT=9d13dde3ce81e62ba452145a8f8cf52432e4082b
VM121_GIT_SOURCE_TREE=0a9a9a8e0c7a89cac626d7b905b901f8d9701d16
VM121_GIT_SOURCE_FILE_COUNT=72
VM121_GIT_SOURCE_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/
VM121_GIT_SOURCE_ARCHIVE_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/wg-paid-vm121-9d13dde3ce81.tar.gz
VM121_GIT_SOURCE_ARCHIVE_B64_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/wg-paid-vm121-9d13dde3ce81.tar.gz.b64.txt
VM121_GIT_SOURCE_FACTS_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/facts.json
VM121_GIT_SOURCE_MANIFEST_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/git-tree-manifest.txt
VM121_GIT_SOURCE_ARCHIVE_SHA256=5b5ed7e494dd4e305d9e7cc97aa9a9bc6bfe63bad37ccba521cab080a25b53b9
VM121_PUSH_PERFORMED=true
ARCHIVE_CREATED=true
PUBLISHER_RESULT=PASS_ROUTER_PUBLISH_REPORT
PUBLISHER_RC=0
PUBLISHER_RC_NONZERO_SALVAGED=false
PUBLICATION_COMMITTED=true
LOCAL_POSTCHECK=PASS
LATEST_INDEX_CONTAINS_FOLDER=true
HTTP_POSTCHECK=PASS
SOURCE_STATE_UPDATED=true
PERMANENT_HTTPS_PUBLISHED=true
RESULT=PASS_ROUTER_MACHINE_CLOSE
MACHINE=vm121
DESCRIPTION=STEP_050M07P30A_R01_VM121_BULK_INVITE P30A bulk invite backend: admin-only campaign, one reusable share token, isolated one-use child Invite per recipient, atomic successful-registration cap, campaign trial override, revoke/expiry and ordinary invite-list isolation
COMMIT=9d13dde3ce81e62ba452145a8f8cf52432e4082b
TREE=0a9a9a8e0c7a89cac626d7b905b901f8d9701d16
GIT_FILE_COUNT=72
SOURCE_PUBLISH_BACKEND=/opt/router-ops/bin/router-vm121-git-source-publish
BACKEND_LOG=/opt/router-ops/state/machine-close-runs/20260924-125020_vm121_2179061/backend.txt
BACKEND_RC=0
BACKEND_RC_NONZERO_SALVAGED=false
CLASSIFICATION=PASS_AUTHORITATIVE_BACKEND_AND_PUBLICATION
VM121_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260924-125027_vm121_git_source_9d13dde3ce81/