{
  "schema_version": 1,
  "channel": "homelab-runtime",
  "command_id": "HOMELAB-GITEA-CHAT-TRANSPORT-AUDIT-373",
  "status": "OK",
  "rc": 0,
  "host": "pve01",
  "mode": "read-only",
  "component": "cluster-audit",
  "started_at_utc": "2026-07-23T15:55:33Z",
  "finished_at_utc": "2026-07-23T15:55:34Z",
  "reference_register_checked": true,
  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
  "error_register_checked": true,
  "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752",
  "command_sha256": "3a9ed987129355bdf4bf8196206f17e111bde7c10cf4865a4e860249e49dd2e5",
  "duplicate_failed_command_blocked": false,
  "block_reason": null,
  "execution_started": true,
  "changes_made": false,
  "sanitized": true,
  "secrets_included": false,
  "private_addresses_included": false,
  "raw_evidence_retained_locally": true,
  "raw_evidence_sha256": "1e8ff2ecf2d6dba9d86a31d1dd9c3c11a02eb154d7c42a46a8d0fe282146a619",
  "sanitized_output_sha256": "1e8ff2ecf2d6dba9d86a31d1dd9c3c11a02eb154d7c42a46a8d0fe282146a619",
  "output_truncated_in_json": false,
  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
  "output": "DETAIL=RUNNER_FILE=/usr/local/sbin/homelab-chat-run|SHEBANG=#!/usr/bin/env bash|META=root:root|750|11864|regular file|SHA256=2a88defef9517f89bc60934dce82097f8e316b08af9417e95167ea5d759a10d9|BASH_SYNTAX=PASS\nDETAIL=RUNNER_FILE=/usr/local/sbin/homelab-chat-run-linked|SHEBANG=#!/usr/bin/env bash|META=root:root|755|1289|regular file|SHA256=efa9fce3c768e6e0650903ca14fe4b6d5319d57f20ec87c465a4a00cb300d4e0|BASH_SYNTAX=PASS\nDETAIL=LINKED_WRAPPER_SOURCE_BEGIN\n#!/usr/bin/env bash\nset -o pipefail\ntmp=$(/usr/bin/mktemp)\ntrap '/usr/bin/rm -f \"$tmp\"' EXIT\n\n/usr/local/sbin/homelab-chat-run \"$@\" 2>&1 | /usr/bin/tee \"$tmp\"\nrc=${PIPESTATUS[0]}\n\ncid=$(/usr/bin/sed -n \"s/^COMMAND_ID=//p\" \"$tmp\" | /usr/bin/tail -n 1)\nsha=$(/usr/bin/sed -n \"s/^COMMIT_SHA=//p\" \"$tmp\" | /usr/bin/tail -n 1)\nraw=$(/usr/bin/sed -n \"s/^LOCAL_RAW_FILE=//p\" \"$tmp\" | /usr/bin/tail -n 1)\n\nif [[ \"$cid\" =~ ^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$ && \"$sha\" =~ ^[0-9a-f]{40}$ ]]; then\n    /usr/bin/printf \"COMMIT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/commit/%s\\n\" \"$sha\"\n    /usr/bin/printf \"IMMUTABLE_RESULT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/raw/commit/%s/runtime/history/%s.txt\\n\" \"$sha\" \"$cid\"\nfi\n\n/usr/bin/printf \"FAILURE_DIAGNOSTIC_BEGIN\\n\"\nif [[ -n \"$raw\" && -r \"$raw\" ]]; then\n    /usr/bin/grep -Ei '^(DECISION|DETAIL|FAILURE_REASON|ERROR_CODE|SOURCE_DECISION|NGINX_[A-Z0-9_]*|READER_[A-Z0-9_]*|RESULT_FEED_URL|PUBLIC_HEALTH_URL|HTTPS_[A-Z0-9_]*|LOCAL_[A-Z0-9_]*|CHANGES_MADE)=|Traceback|RuntimeError|SystemExit|FileNotFoundError|PermissionError|command not found|No such file or directory|Connection refused|failed|invalid|missing' \"$raw\" | /usr/bin/tail -n 100 || true\nfi\n/usr/bin/printf \"FAILURE_DIAGNOSTIC_END\\n\"\n\nexit \"$rc\"\nDETAIL=LINKED_WRAPPER_SOURCE_END\nDETAIL=MAIN_RUNNER_PUBLICATION_HOOKS_BEGIN\n88-    exit 70\n89-}\n90-\n91-STATE_DIR=/var/lib/homelab-chat-run\n92-RAW_DIR=\"$STATE_DIR/raw\"\n93-PUBLIC_DIR=\"$STATE_DIR/public\"\n94:LEDGER=\"$STATE_DIR/state/command-ledger.tsv\"\n95-LOCK=\"$STATE_DIR/state/runner.lock\"\n96-\n97-mkdir -p \"$RAW_DIR\" \"$PUBLIC_DIR\" \"$(dirname \"$LEDGER\")\"\n98-chmod 0700 \"$STATE_DIR\" \"$RAW_DIR\" \"$PUBLIC_DIR\" \"$(dirname \"$LEDGER\")\"\n99-touch \"$LEDGER\"\n100-chmod 0600 \"$LEDGER\"\n--\n490-        '${REMOTE_PREFIX}.json' \\\n491-        '${REMOTE_PREFIX}.txt'\n492-\n493-    exit \\$receiver_rc\n494-\"\n495-\n496:PUBLIC_URL='https://git.gram1.ru/.well-known/homelab-runtime/latest.json'\n497-PUBLIC_VISIBLE=false\n498-\n499-for ATTEMPT in $(seq 1 30); do\n500-    CONTENT=\"$(\n501-        curl -fsS \\\n502-            --max-time 15 \\\n503:            \"$PUBLIC_URL\" 2>/dev/null ||\n504-        true\n505-    )\"\n506-\n507-    if printf '%s\\n' \"$CONTENT\" |\n508-       grep -Fq \"\\\"command_id\\\": \\\"$COMMAND_ID\\\"\"; then\n509-        PUBLIC_VISIBLE=true\n--\n534-echo \"COMMAND_ID=$COMMAND_ID\"\n535-echo \"STATUS=$STATUS\"\n536-echo \"RC=$RC\"\n537-echo 'REFERENCE_REGISTER_CHECK=OK'\n538-echo 'ERROR_REGISTER_CHECK=OK'\n539-echo \"DUPLICATE_FAILED_COMMAND_BLOCKED=$REPEAT_BLOCKED\"\n540:echo 'GITEA_PUBLICATION=OK'\n541:echo \"PUBLIC_URL=$PUBLIC_URL\"\n542-echo \"LOCAL_RAW_FILE=$RAW_FILE\"\n543-echo 'SHELL_SESSION_PRESERVED=yes'\n544-\n545-exit \"$RC\"\nDETAIL=MAIN_RUNNER_PUBLICATION_HOOKS_END\nDETAIL=VM170_PUBLIC_DIRECTORY_METADATA=debian:debian|755|4096|directory\nDETAIL=VM170_WELLKNOWN_FILES_BEGIN\n/opt/stacks/gitea/data/gitea/public/.well-known/gitea-auth-check-014.txt|132|644|root:root\n/opt/stacks/gitea/data/gitea/public/.well-known/homelab-context-manifest.json|838|644|debian:debian\n/opt/stacks/gitea/data/gitea/public/.well-known/runtime-receiver-state-026.txt|368|644|root:root\n/opt/stacks/gitea/data/gitea/public/.well-known/gitea-push-auth-stage-012.txt|115|644|root:root\n/opt/stacks/gitea/data/gitea/public/.well-known/homelab-runtime/latest.json|1517|644|root:root\n/opt/stacks/gitea/data/gitea/public/.well-known/homelab-runtime/index.json|436|644|root:root\n/opt/stacks/gitea/data/gitea/public/.well-known/homelab-runtime/latest.txt|1063|644|root:root\n/opt/stacks/gitea/data/gitea/public/.well-known/homelab-bootstrap.json|3097|644|root:root\n/opt/stacks/gitea/data/gitea/public/.well-known/homelab-context.txt|1710|644|debian:debian\n/opt/stacks/gitea/data/gitea/public/.well-known/homelab-bootstrap.json.bak.20260721T093110Z|3154|644|root:root\n/opt/stacks/gitea/data/gitea/public/.well-known/gitea-real-push-canary.txt|136|644|root:root\n/opt/stacks/gitea/data/gitea/public/.well-known/homelab-context.json|2334|644|debian:debian\n/opt/stacks/gitea/data/gitea/public/.well-known/homelab-bootstrap.json.bak.20260721T092825Z|1915|644|root:root\n/opt/stacks/gitea/data/gitea/public/.well-known/runtime-receiver-preflight-020.txt|807|644|root:root\n/opt/stacks/gitea/data/gitea/public/.well-known/gitea-auth-check-017.txt|82|644|root:root\nDETAIL=VM170_WELLKNOWN_FILES_END\nDETAIL=BOOTSTRAP_HTTP_HEADERS_BEGIN\nHTTP/2 200 \ncontent-type: application/json\ncache-control: max-age=0, private, must-revalidate, no-transform\nlast-modified: Tue, 21 Jul 2026 09:31:10 GMT\nDETAIL=BOOTSTRAP_HTTP_HEADERS_END\nDETAIL=PUBLIC_HANDOFF_HTTP_STATUS=404\nDETAIL=GITEA_CHAT_TRANSPORT_AUDIT=PASS\nCHANGES_MADE=NO\n"
}
