>>> [router-machine-close] machine=vm121 mode=--publish
>>> [vm121-source] precheck
MODE=--publish
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm121.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm121
>>> [vm121-source] run VM121 git publisher through approved direct SSH
>>> [vm121-git] precheck
MODE=--publish
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=7af60e3d7de8335842addc60ced35672f821fb173eaccb59a830d8aba0c606da
MACHINE_ID=vm121
GIT_DIR=/root/.vm121-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm121.git
LOCAL_HEAD=6fd33f1f16d9f3ce3fc548d860900ee2323d576a
>>> [vm121-git] verify remote branch
REMOTE_HEAD=6fd33f1f16d9f3ce3fc548d860900ee2323d576a
>>> [vm121-git] build current project allowlist
>>> [vm121-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=77
TRACKED_COUNT=77
MANAGED_UNION_COUNT=77
>>> [vm121-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm121-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm121-git] build simulated git index
STAGED_CHANGE_COUNT=1
=== STAGED PATHS ===
opt/wg-access/backend/app/api/auth_v2.py
>>> [vm121-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=2b17781e3f412eff1fb84573c0203696d42866bf
SIMULATED_TREE_FILE_COUNT=77
>>> [vm121-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm121-git] keyword review scan
KEYWORD_REVIEW_FILES=NONE
>>> [vm121-git] verify real git index has no pre-staged changes
>>> [vm121-git] install validated simulated index
>>> [vm121-git] create commit
[main bc7c4db] vm121: publish managed source 2026-10-06T05:58:41Z
 1 file changed, 184 insertions(+), 18 deletions(-)
NEW_COMMIT=bc7c4db1cf7ecc567a9a65960c3ff703ece762a6
NEW_TREE=2b17781e3f412eff1fb84573c0203696d42866bf
>>> [vm121-git] push branch to remote
To github.com:DChuvelev/wg-paid-vm121.git
   6fd33f1..bc7c4db  main -> main
>>> [vm121-git] verify remote commit
LOCAL_COMMIT=bc7c4db1cf7ecc567a9a65960c3ff703ece762a6
REMOTE_COMMIT=bc7c4db1cf7ecc567a9a65960c3ff703ece762a6

RESULT=PASS_VM121_GIT_PUBLISH
MACHINE_ID=vm121
GIT_COMMIT=bc7c4db1cf7ecc567a9a65960c3ff703ece762a6
GIT_TREE=2b17781e3f412eff1fb84573c0203696d42866bf
GIT_FILE_COUNT=77
COMMIT_CREATED=true
PUSH_PERFORMED=true
REPOSITORY=https://github.com/DChuvelev/wg-paid-vm121

VM121_RESULT=PASS_VM121_GIT_PUBLISH
VM121_COMMIT=bc7c4db1cf7ecc567a9a65960c3ff703ece762a6
VM121_REMOTE_COMMIT=bc7c4db1cf7ecc567a9a65960c3ff703ece762a6
>>> [vm121-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm121.git
From https://github.com/DChuvelev/wg-paid-vm121
 * branch            main       -> FETCH_HEAD
   6fd33f1..bc7c4db  main       -> origin/main
Reset branch 'main'
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at bc7c4db vm121: publish managed source 2026-10-06T05:58:41Z

VM130_COMMIT=bc7c4db1cf7ecc567a9a65960c3ff703ece762a6
VM130_TREE=2b17781e3f412eff1fb84573c0203696d42866bf
VM130_FILE_COUNT=77
VM130_STATUS=CLEAN
>>> [vm121-source] verify required managed paths
REQUIRED_PATH_OK=etc/router-machine-git-source.conf
REQUIRED_PATH_OK=usr/local/sbin/router-machine-git-publish.sh
REQUIRED_PATH_OK=usr/local/sbin/router-vm121-git-publish.sh
>>> [vm121-source] create archive and metadata from exact Git commit
ARCHIVE=/tmp/vm121-git-source-publish.jaZivk/wg-paid-vm121-bc7c4db1cf7e.tar.gz
ARCHIVE_SHA256=22449fc36f810b59e7c12cc4a6cefb589b0cf6a7e19df0bf71a12ed78533b7ed
ARCHIVE_BASE64=/tmp/vm121-git-source-publish.jaZivk/wg-paid-vm121-bc7c4db1cf7e.tar.gz.b64.txt
MANIFEST=/tmp/vm121-git-source-publish.jaZivk/git-tree-manifest.txt
PATHS=/tmp/vm121-git-source-publish.jaZivk/managed-paths.txt
FACTS=/tmp/vm121-git-source-publish.jaZivk/facts.json
>>> [vm121-source] publish atomically into latest/ and archive prior version into old/
mv: cannot move '/opt/router-ops/public/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20261003-094504_vm121_git_source_6fd33f1f16d9' to '/opt/router-ops/public/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/old/20261003-094504_vm121_git_source_6fd33f1f16d9': Permission denied
STOP=PUBLISHER_OUTPUT_CONTRACT_INVALID_RC_1
RESULT=STOP_ROUTER_MACHINE_CLOSE_BACKEND_OR_PUBLICATION
MACHINE=vm121
MODE=--publish
BACKEND_RC=1
CLASSIFICATION=STOP_BACKEND_OR_PUBLICATION_MARKER
BACKEND_LOG=/opt/router-ops/state/machine-close-runs/20261006-055838_vm121_312761/backend.txt