diff --git a/runtime/history/READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z.json b/runtime/history/READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z.json new file mode 100644 index 0000000..d3664ea --- /dev/null +++ b/runtime/history/READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "verify", + "component": "result-integration", + "started_at_utc": "2026-07-27T06:34:43Z", + "finished_at_utc": "2026-07-27T06:34:43Z", + "reference_register_checked": true, + "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", + "error_register_checked": true, + "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83", + "command_sha256": "40bda9b155cf948984b2e9bbc40656c15bbdfcfdd5b10cd3d62ebfb1ade2b2dc", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "4b382c3e292d0f7e9e7b1d12c0c7c75e47b1739672d313901dec9cbfc5897229", + "sanitized_output_sha256": "4b382c3e292d0f7e9e7b1d12c0c7c75e47b1739672d313901dec9cbfc5897229", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "{\"backup_changed\":false,\"capabilities\":{\"adapter\":{\"monotonic_worker_registry\":true,\"sanitize_includes_evidence\":true,\"sanitize_includes_execution\":true,\"sanitized_state_fields\":[\"bytes\",\"capsule_bytes\",\"capsule_sha256\",\"command_object\",\"error\",\"evidence\",\"execution\",\"finished_at_utc\",\"gateway_verified\",\"imported_at_utc\",\"manifest\",\"object_key\",\"runner_document_rc\",\"runner_json_sha256\",\"runner_rc\",\"runner_status\",\"runner_text_sha256\",\"runner_wrapper_matches_document\",\"schema_version\",\"sha256\",\"short_id\",\"started_at_utc\",\"status\"],\"supports_evidence_url\":true},\"evidence_signing\":{\"digest_bound\":false,\"expiry_bound\":false,\"hmac_or_signature_present\":false,\"object_key_bound\":false,\"presign_helper_exists\":false,\"sign_helper_exists\":false},\"portal\":{\"has_anonymous_terminal_result_route\":false,\"has_evidence_url_route\":true,\"has_execute_route\":true,\"has_health_route\":true,\"has_import_route\":true,\"has_state_route\":true,\"state_uses_session_token\":true},\"runner\":{\"creates_command_scoped_json\":true,\"creates_command_scoped_text\":true,\"public_document_has_command_id\":true,\"public_document_has_evidence_sha\":true,\"public_document_has_status\":true,\"public_document_is_sanitized\":true,\"publishes_latest_json\":true,\"publishes_latest_text\":true}},\"changes_made\":false,\"checks\":{\"adapter_expected_sha\":true,\"adapter_healthy\":true,\"adapter_sanitizes_evidence\":true,\"adapter_sanitizes_execution\":true,\"portal_expected_sha\":true,\"portal_health_reachable\":true,\"portal_healthy\":true,\"runner_expected_sha\":true,\"runtime_latest_has_command_id\":true,\"runtime_latest_has_status\":true,\"runtime_latest_is_json\":true,\"runtime_latest_reachable\":true},\"cluster_changed\":false,\"command_id\":\"READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z\",\"gaps\":[\"no_anonymous_readonly_terminal_result_route\",\"current_latest_json_missing_evidence_reference\",\"mutable_latest_pointer_not_sufficient_for_command_specific_lookup\",\"signed_immutable_per_command_status_document_required\"],\"gitea_changed\":false,\"inventory\":{\"adapter\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"sha256\":\"8d0af84dcfcf6ddbfd1c4e6cbb059cef66b4cfc6c75bfd66da649acc229c7f5e\"},\"evidence_presign_put\":{\"exists\":false,\"expected_match\":true,\"is_symlink\":false,\"sha256\":null},\"evidence_sign\":{\"exists\":false,\"expected_match\":true,\"is_symlink\":false,\"sha256\":null},\"portal\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"sha256\":\"8056faf4ef6348f0b06319ad3c49fbfeeadf25b6370f857ea19569bd27652ee2\"},\"runner\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"sha256\":\"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\"}},\"private_addresses_included\":false,\"public_surfaces\":{\"evidence_healthz\":{\"http_code\":200,\"json_shape\":{\"keys\":[\"service\",\"status\"],\"type\":\"object\"},\"reachable\":true},\"evidence_root\":{\"http_code\":404,\"json_shape\":null,\"reachable\":false},\"portal_health\":{\"http_code\":200,\"json_shape\":{\"keys\":[\"adapter\",\"status\",\"version\"],\"type\":\"object\"},\"reachable\":true},\"runtime_latest\":{\"http_code\":200,\"json_shape\":{\"keys\":[\"block_reason\",\"change_declared\",\"changes_made\",\"channel\",\"command_id\",\"command_rc\",\"command_sha256\",\"component\",\"duplicate_failed_command_blocked\",\"error_register_checked\",\"error_register_sha256\",\"execution_started\",\"finished_at_utc\",\"full_sanitized_output_url\",\"host\",\"mode\",\"mutation_outcome\",\"output\",\"output_truncated_in_json\",\"private_addresses_included\",\"raw_evidence_retained_locally\",\"raw_evidence_sha256\",\"rc\",\"reference_register_checked\",\"reference_sha256\",\"result_contract_error\",\"result_contract_status\",\"result_contract_valid\",\"rollback_restored\",\"rollback_started\",\"sanitized\",\"sanitized_output_sha256\",\"schema_version\",\"secrets_included\",\"started_at_utc\",\"status\"],\"type\":\"object\"},\"reachable\":true},\"runtime_latest_text\":{\"http_code\":200,\"json_shape\":null,\"reachable\":true}},\"recommended_design\":{\"immutable_path_template\":\"/.json\",\"latest_pointer\":\"optional; never authoritative\",\"must_not_publish\":[\"session_token\",\"bootstrap_token\",\"device_token\",\"presigned_url\",\"cookies\",\"private_keys\",\"raw_logs\",\"private_addresses\"],\"public_readonly_base\":\"https://run.vpn.gram1.ru/.well-known/homelab-result/\",\"read_semantics\":\"anonymous GET of signed sanitized terminal documents only\",\"required_fields\":[\"schema_version\",\"command_id\",\"capsule_sha256\",\"status\",\"started_at_utc\",\"finished_at_utc\",\"runner_rc\",\"runner_document_rc\",\"runner_wrapper_matches_document\",\"evidence_sha256\",\"gateway_verified\",\"summary\",\"document_sha256\",\"signature\",\"key_id\"],\"write_semantics\":\"internal Adapter publication only\"},\"rollback_started\":false,\"runtime_latest\":{\"command_id\":\"READONLY-RESULT-INTEGRATION-AUDIT-20260727T062905Z\",\"has_evidence_sha256\":false,\"has_gateway_verified\":false,\"has_summary\":false,\"is_mutable_pointer\":true,\"json_text_consistent\":true,\"latest_text_header\":{\"CHANGES_MADE\":\"false\",\"COMMAND_ID\":\"READONLY-RESULT-INTEGRATION-AUDIT-20260727T062905Z\",\"COMPONENT\":\"result-integration\",\"MODE\":\"verify\",\"PRIVATE_ADDRESSES_INCLUDED\":\"no\",\"RC\":\"1\",\"ROLLBACK_STARTED\":\"false\",\"SANITIZED\":\"yes\",\"SECRETS_INCLUDED\":\"no\",\"STATUS\":\"FAIL\"},\"shape\":{\"keys\":[\"block_reason\",\"change_declared\",\"changes_made\",\"channel\",\"command_id\",\"command_rc\",\"command_sha256\",\"component\",\"duplicate_failed_command_blocked\",\"error_register_checked\",\"error_register_sha256\",\"execution_started\",\"finished_at_utc\",\"full_sanitized_output_url\",\"host\",\"mode\",\"mutation_outcome\",\"output\",\"output_truncated_in_json\",\"private_addresses_included\",\"raw_evidence_retained_locally\",\"raw_evidence_sha256\",\"rc\",\"reference_register_checked\",\"reference_sha256\",\"result_contract_error\",\"result_contract_status\",\"result_contract_valid\",\"rollback_restored\",\"rollback_started\",\"sanitized\",\"sanitized_output_sha256\",\"schema_version\",\"secrets_included\",\"started_at_utc\",\"status\"],\"type\":\"object\"},\"status\":\"FAIL\"},\"sanitized\":true,\"schema\":1,\"secrets_included\":false,\"services\":{\"adapter\":{\"active\":\"active\",\"pid\":\"976008\",\"restarts\":\"0\",\"sub\":\"running\"},\"portal\":{\"active\":\"active\",\"pid\":\"976035\",\"restarts\":\"0\",\"sub\":\"running\"}},\"status\":\"OK\"}\n" +} diff --git a/runtime/history/READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z.txt b/runtime/history/READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z.txt new file mode 100644 index 0000000..ddab233 --- /dev/null +++ b/runtime/history/READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z.txt @@ -0,0 +1,33 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z +STATUS=OK +RC=0 +HOST=pve01 +MODE=verify +COMPONENT=result-integration +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83 +COMMAND_SHA256=40bda9b155cf948984b2e9bbc40656c15bbdfcfdd5b10cd3d62ebfb1ade2b2dc +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=4b382c3e292d0f7e9e7b1d12c0c7c75e47b1739672d313901dec9cbfc5897229 +SANITIZED_OUTPUT_SHA256=4b382c3e292d0f7e9e7b1d12c0c7c75e47b1739672d313901dec9cbfc5897229 +OUTPUT_BEGIN +{"backup_changed":false,"capabilities":{"adapter":{"monotonic_worker_registry":true,"sanitize_includes_evidence":true,"sanitize_includes_execution":true,"sanitized_state_fields":["bytes","capsule_bytes","capsule_sha256","command_object","error","evidence","execution","finished_at_utc","gateway_verified","imported_at_utc","manifest","object_key","runner_document_rc","runner_json_sha256","runner_rc","runner_status","runner_text_sha256","runner_wrapper_matches_document","schema_version","sha256","short_id","started_at_utc","status"],"supports_evidence_url":true},"evidence_signing":{"digest_bound":false,"expiry_bound":false,"hmac_or_signature_present":false,"object_key_bound":false,"presign_helper_exists":false,"sign_helper_exists":false},"portal":{"has_anonymous_terminal_result_route":false,"has_evidence_url_route":true,"has_execute_route":true,"has_health_route":true,"has_import_route":true,"has_state_route":true,"state_uses_session_token":true},"runner":{"creates_command_scoped_json":true,"creates_command_scoped_text":true,"public_document_has_command_id":true,"public_document_has_evidence_sha":true,"public_document_has_status":true,"public_document_is_sanitized":true,"publishes_latest_json":true,"publishes_latest_text":true}},"changes_made":false,"checks":{"adapter_expected_sha":true,"adapter_healthy":true,"adapter_sanitizes_evidence":true,"adapter_sanitizes_execution":true,"portal_expected_sha":true,"portal_health_reachable":true,"portal_healthy":true,"runner_expected_sha":true,"runtime_latest_has_command_id":true,"runtime_latest_has_status":true,"runtime_latest_is_json":true,"runtime_latest_reachable":true},"cluster_changed":false,"command_id":"READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z","gaps":["no_anonymous_readonly_terminal_result_route","current_latest_json_missing_evidence_reference","mutable_latest_pointer_not_sufficient_for_command_specific_lookup","signed_immutable_per_command_status_document_required"],"gitea_changed":false,"inventory":{"adapter":{"exists":true,"expected_match":true,"is_symlink":false,"sha256":"8d0af84dcfcf6ddbfd1c4e6cbb059cef66b4cfc6c75bfd66da649acc229c7f5e"},"evidence_presign_put":{"exists":false,"expected_match":true,"is_symlink":false,"sha256":null},"evidence_sign":{"exists":false,"expected_match":true,"is_symlink":false,"sha256":null},"portal":{"exists":true,"expected_match":true,"is_symlink":false,"sha256":"8056faf4ef6348f0b06319ad3c49fbfeeadf25b6370f857ea19569bd27652ee2"},"runner":{"exists":true,"expected_match":true,"is_symlink":false,"sha256":"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d"}},"private_addresses_included":false,"public_surfaces":{"evidence_healthz":{"http_code":200,"json_shape":{"keys":["service","status"],"type":"object"},"reachable":true},"evidence_root":{"http_code":404,"json_shape":null,"reachable":false},"portal_health":{"http_code":200,"json_shape":{"keys":["adapter","status","version"],"type":"object"},"reachable":true},"runtime_latest":{"http_code":200,"json_shape":{"keys":["block_reason","change_declared","changes_made","channel","command_id","command_rc","command_sha256","component","duplicate_failed_command_blocked","error_register_checked","error_register_sha256","execution_started","finished_at_utc","full_sanitized_output_url","host","mode","mutation_outcome","output","output_truncated_in_json","private_addresses_included","raw_evidence_retained_locally","raw_evidence_sha256","rc","reference_register_checked","reference_sha256","result_contract_error","result_contract_status","result_contract_valid","rollback_restored","rollback_started","sanitized","sanitized_output_sha256","schema_version","secrets_included","started_at_utc","status"],"type":"object"},"reachable":true},"runtime_latest_text":{"http_code":200,"json_shape":null,"reachable":true}},"recommended_design":{"immutable_path_template":"/.json","latest_pointer":"optional; never authoritative","must_not_publish":["session_token","bootstrap_token","device_token","presigned_url","cookies","private_keys","raw_logs","private_addresses"],"public_readonly_base":"https://run.vpn.gram1.ru/.well-known/homelab-result/","read_semantics":"anonymous GET of signed sanitized terminal documents only","required_fields":["schema_version","command_id","capsule_sha256","status","started_at_utc","finished_at_utc","runner_rc","runner_document_rc","runner_wrapper_matches_document","evidence_sha256","gateway_verified","summary","document_sha256","signature","key_id"],"write_semantics":"internal Adapter publication only"},"rollback_started":false,"runtime_latest":{"command_id":"READONLY-RESULT-INTEGRATION-AUDIT-20260727T062905Z","has_evidence_sha256":false,"has_gateway_verified":false,"has_summary":false,"is_mutable_pointer":true,"json_text_consistent":true,"latest_text_header":{"CHANGES_MADE":"false","COMMAND_ID":"READONLY-RESULT-INTEGRATION-AUDIT-20260727T062905Z","COMPONENT":"result-integration","MODE":"verify","PRIVATE_ADDRESSES_INCLUDED":"no","RC":"1","ROLLBACK_STARTED":"false","SANITIZED":"yes","SECRETS_INCLUDED":"no","STATUS":"FAIL"},"shape":{"keys":["block_reason","change_declared","changes_made","channel","command_id","command_rc","command_sha256","component","duplicate_failed_command_blocked","error_register_checked","error_register_sha256","execution_started","finished_at_utc","full_sanitized_output_url","host","mode","mutation_outcome","output","output_truncated_in_json","private_addresses_included","raw_evidence_retained_locally","raw_evidence_sha256","rc","reference_register_checked","reference_sha256","result_contract_error","result_contract_status","result_contract_valid","rollback_restored","rollback_started","sanitized","sanitized_output_sha256","schema_version","secrets_included","started_at_utc","status"],"type":"object"},"status":"FAIL"},"sanitized":true,"schema":1,"secrets_included":false,"services":{"adapter":{"active":"active","pid":"976008","restarts":"0","sub":"running"},"portal":{"active":"active","pid":"976035","restarts":"0","sub":"running"}},"status":"OK"} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 59c3934..d3664ea 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "READONLY-RESULT-INTEGRATION-AUDIT-20260727T062905Z", - "status": "FAIL", - "rc": 1, + "command_id": "READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z", + "status": "OK", + "rc": 0, "host": "pve01", "mode": "verify", "component": "result-integration", - "started_at_utc": "2026-07-27T06:29:57Z", - "finished_at_utc": "2026-07-27T06:29:58Z", + "started_at_utc": "2026-07-27T06:34:43Z", + "finished_at_utc": "2026-07-27T06:34:43Z", "reference_register_checked": true, "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", "error_register_checked": true, "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83", - "command_sha256": "8046cccd0a79735fb4d92d212374f7bf70fbe820670b0b11fbf5c90b0034fcb3", + "command_sha256": "40bda9b155cf948984b2e9bbc40656c15bbdfcfdd5b10cd3d62ebfb1ade2b2dc", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -21,7 +21,7 @@ "result_contract_valid": true, "result_contract_status": null, "result_contract_error": null, - "command_rc": 1, + "command_rc": 0, "changes_made": false, "rollback_started": false, "rollback_restored": null, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "ebaf3b2299c523af65061ab730a85e8753b5d47ec3427fa3947662acb7239911", - "sanitized_output_sha256": "ebaf3b2299c523af65061ab730a85e8753b5d47ec3427fa3947662acb7239911", + "raw_evidence_sha256": "4b382c3e292d0f7e9e7b1d12c0c7c75e47b1739672d313901dec9cbfc5897229", + "sanitized_output_sha256": "4b382c3e292d0f7e9e7b1d12c0c7c75e47b1739672d313901dec9cbfc5897229", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "Traceback (most recent call last):\n File \"/var/lib/homelab-command-adapter/capsules/68856b3837c49738a5c0e67429bb71e95c3f2fae80b62011f2ed7922e1db133d/payload/audit.py\", line 676, in \n raise SystemExit(main())\n ~~~~^^\n File \"/var/lib/homelab-command-adapter/capsules/68856b3837c49738a5c0e67429bb71e95c3f2fae80b62011f2ed7922e1db133d/payload/audit.py\", line 262, in main\n sanitize_match = re.search(\n r\"def sanitize_state\\\\(\"\n ...<3 lines>...\n flags=re.DOTALL,\n )\n File \"/usr/lib/python3.13/re/__init__.py\", line 177, in search\n return _compile(pattern, flags).search(string)\n ~~~~~~~~^^^^^^^^^^^^^^^^\n File \"/usr/lib/python3.13/re/__init__.py\", line 350, in _compile\n p = _compiler.compile(pattern, flags)\n File \"/usr/lib/python3.13/re/_compiler.py\", line 748, in compile\n p = _parser.parse(p, flags)\n File \"/usr/lib/python3.13/re/_parser.py\", line 980, in parse\n p = _parse_sub(source, state, flags & SRE_FLAG_VERBOSE, 0)\n File \"/usr/lib/python3.13/re/_parser.py\", line 459, in _parse_sub\n itemsappend(_parse(source, state, verbose, nested + 1,\n ~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n not nested and not items))\n ^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/usr/lib/python3.13/re/_parser.py\", line 865, in _parse\n raise source.error(\"missing ), unterminated subpattern\",\n source.tell() - start)\nre.PatternError: missing ), unterminated subpattern at position 20\n" + "output": "{\"backup_changed\":false,\"capabilities\":{\"adapter\":{\"monotonic_worker_registry\":true,\"sanitize_includes_evidence\":true,\"sanitize_includes_execution\":true,\"sanitized_state_fields\":[\"bytes\",\"capsule_bytes\",\"capsule_sha256\",\"command_object\",\"error\",\"evidence\",\"execution\",\"finished_at_utc\",\"gateway_verified\",\"imported_at_utc\",\"manifest\",\"object_key\",\"runner_document_rc\",\"runner_json_sha256\",\"runner_rc\",\"runner_status\",\"runner_text_sha256\",\"runner_wrapper_matches_document\",\"schema_version\",\"sha256\",\"short_id\",\"started_at_utc\",\"status\"],\"supports_evidence_url\":true},\"evidence_signing\":{\"digest_bound\":false,\"expiry_bound\":false,\"hmac_or_signature_present\":false,\"object_key_bound\":false,\"presign_helper_exists\":false,\"sign_helper_exists\":false},\"portal\":{\"has_anonymous_terminal_result_route\":false,\"has_evidence_url_route\":true,\"has_execute_route\":true,\"has_health_route\":true,\"has_import_route\":true,\"has_state_route\":true,\"state_uses_session_token\":true},\"runner\":{\"creates_command_scoped_json\":true,\"creates_command_scoped_text\":true,\"public_document_has_command_id\":true,\"public_document_has_evidence_sha\":true,\"public_document_has_status\":true,\"public_document_is_sanitized\":true,\"publishes_latest_json\":true,\"publishes_latest_text\":true}},\"changes_made\":false,\"checks\":{\"adapter_expected_sha\":true,\"adapter_healthy\":true,\"adapter_sanitizes_evidence\":true,\"adapter_sanitizes_execution\":true,\"portal_expected_sha\":true,\"portal_health_reachable\":true,\"portal_healthy\":true,\"runner_expected_sha\":true,\"runtime_latest_has_command_id\":true,\"runtime_latest_has_status\":true,\"runtime_latest_is_json\":true,\"runtime_latest_reachable\":true},\"cluster_changed\":false,\"command_id\":\"READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z\",\"gaps\":[\"no_anonymous_readonly_terminal_result_route\",\"current_latest_json_missing_evidence_reference\",\"mutable_latest_pointer_not_sufficient_for_command_specific_lookup\",\"signed_immutable_per_command_status_document_required\"],\"gitea_changed\":false,\"inventory\":{\"adapter\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"sha256\":\"8d0af84dcfcf6ddbfd1c4e6cbb059cef66b4cfc6c75bfd66da649acc229c7f5e\"},\"evidence_presign_put\":{\"exists\":false,\"expected_match\":true,\"is_symlink\":false,\"sha256\":null},\"evidence_sign\":{\"exists\":false,\"expected_match\":true,\"is_symlink\":false,\"sha256\":null},\"portal\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"sha256\":\"8056faf4ef6348f0b06319ad3c49fbfeeadf25b6370f857ea19569bd27652ee2\"},\"runner\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"sha256\":\"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\"}},\"private_addresses_included\":false,\"public_surfaces\":{\"evidence_healthz\":{\"http_code\":200,\"json_shape\":{\"keys\":[\"service\",\"status\"],\"type\":\"object\"},\"reachable\":true},\"evidence_root\":{\"http_code\":404,\"json_shape\":null,\"reachable\":false},\"portal_health\":{\"http_code\":200,\"json_shape\":{\"keys\":[\"adapter\",\"status\",\"version\"],\"type\":\"object\"},\"reachable\":true},\"runtime_latest\":{\"http_code\":200,\"json_shape\":{\"keys\":[\"block_reason\",\"change_declared\",\"changes_made\",\"channel\",\"command_id\",\"command_rc\",\"command_sha256\",\"component\",\"duplicate_failed_command_blocked\",\"error_register_checked\",\"error_register_sha256\",\"execution_started\",\"finished_at_utc\",\"full_sanitized_output_url\",\"host\",\"mode\",\"mutation_outcome\",\"output\",\"output_truncated_in_json\",\"private_addresses_included\",\"raw_evidence_retained_locally\",\"raw_evidence_sha256\",\"rc\",\"reference_register_checked\",\"reference_sha256\",\"result_contract_error\",\"result_contract_status\",\"result_contract_valid\",\"rollback_restored\",\"rollback_started\",\"sanitized\",\"sanitized_output_sha256\",\"schema_version\",\"secrets_included\",\"started_at_utc\",\"status\"],\"type\":\"object\"},\"reachable\":true},\"runtime_latest_text\":{\"http_code\":200,\"json_shape\":null,\"reachable\":true}},\"recommended_design\":{\"immutable_path_template\":\"/.json\",\"latest_pointer\":\"optional; never authoritative\",\"must_not_publish\":[\"session_token\",\"bootstrap_token\",\"device_token\",\"presigned_url\",\"cookies\",\"private_keys\",\"raw_logs\",\"private_addresses\"],\"public_readonly_base\":\"https://run.vpn.gram1.ru/.well-known/homelab-result/\",\"read_semantics\":\"anonymous GET of signed sanitized terminal documents only\",\"required_fields\":[\"schema_version\",\"command_id\",\"capsule_sha256\",\"status\",\"started_at_utc\",\"finished_at_utc\",\"runner_rc\",\"runner_document_rc\",\"runner_wrapper_matches_document\",\"evidence_sha256\",\"gateway_verified\",\"summary\",\"document_sha256\",\"signature\",\"key_id\"],\"write_semantics\":\"internal Adapter publication only\"},\"rollback_started\":false,\"runtime_latest\":{\"command_id\":\"READONLY-RESULT-INTEGRATION-AUDIT-20260727T062905Z\",\"has_evidence_sha256\":false,\"has_gateway_verified\":false,\"has_summary\":false,\"is_mutable_pointer\":true,\"json_text_consistent\":true,\"latest_text_header\":{\"CHANGES_MADE\":\"false\",\"COMMAND_ID\":\"READONLY-RESULT-INTEGRATION-AUDIT-20260727T062905Z\",\"COMPONENT\":\"result-integration\",\"MODE\":\"verify\",\"PRIVATE_ADDRESSES_INCLUDED\":\"no\",\"RC\":\"1\",\"ROLLBACK_STARTED\":\"false\",\"SANITIZED\":\"yes\",\"SECRETS_INCLUDED\":\"no\",\"STATUS\":\"FAIL\"},\"shape\":{\"keys\":[\"block_reason\",\"change_declared\",\"changes_made\",\"channel\",\"command_id\",\"command_rc\",\"command_sha256\",\"component\",\"duplicate_failed_command_blocked\",\"error_register_checked\",\"error_register_sha256\",\"execution_started\",\"finished_at_utc\",\"full_sanitized_output_url\",\"host\",\"mode\",\"mutation_outcome\",\"output\",\"output_truncated_in_json\",\"private_addresses_included\",\"raw_evidence_retained_locally\",\"raw_evidence_sha256\",\"rc\",\"reference_register_checked\",\"reference_sha256\",\"result_contract_error\",\"result_contract_status\",\"result_contract_valid\",\"rollback_restored\",\"rollback_started\",\"sanitized\",\"sanitized_output_sha256\",\"schema_version\",\"secrets_included\",\"started_at_utc\",\"status\"],\"type\":\"object\"},\"status\":\"FAIL\"},\"sanitized\":true,\"schema\":1,\"secrets_included\":false,\"services\":{\"adapter\":{\"active\":\"active\",\"pid\":\"976008\",\"restarts\":\"0\",\"sub\":\"running\"},\"portal\":{\"active\":\"active\",\"pid\":\"976035\",\"restarts\":\"0\",\"sub\":\"running\"}},\"status\":\"OK\"}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 08eac18..ddab233 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,7 +1,7 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=READONLY-RESULT-INTEGRATION-AUDIT-20260727T062905Z -STATUS=FAIL -RC=1 +COMMAND_ID=READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z +STATUS=OK +RC=0 HOST=pve01 MODE=verify COMPONENT=result-integration @@ -9,14 +9,14 @@ REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83 -COMMAND_SHA256=8046cccd0a79735fb4d92d212374f7bf70fbe820670b0b11fbf5c90b0034fcb3 +COMMAND_SHA256=40bda9b155cf948984b2e9bbc40656c15bbdfcfdd5b10cd3d62ebfb1ade2b2dc DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false RESULT_CONTRACT_VALID=true RESULT_CONTRACT_STATUS=NOT_APPLICABLE RESULT_CONTRACT_ERROR=NONE -COMMAND_RC=1 +COMMAND_RC=0 CHANGES_MADE=false ROLLBACK_STARTED=false ROLLBACK_RESTORED=null @@ -24,37 +24,10 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=ebaf3b2299c523af65061ab730a85e8753b5d47ec3427fa3947662acb7239911 -SANITIZED_OUTPUT_SHA256=ebaf3b2299c523af65061ab730a85e8753b5d47ec3427fa3947662acb7239911 +RAW_EVIDENCE_SHA256=4b382c3e292d0f7e9e7b1d12c0c7c75e47b1739672d313901dec9cbfc5897229 +SANITIZED_OUTPUT_SHA256=4b382c3e292d0f7e9e7b1d12c0c7c75e47b1739672d313901dec9cbfc5897229 OUTPUT_BEGIN -Traceback (most recent call last): - File "/var/lib/homelab-command-adapter/capsules/68856b3837c49738a5c0e67429bb71e95c3f2fae80b62011f2ed7922e1db133d/payload/audit.py", line 676, in - raise SystemExit(main()) - ~~~~^^ - File "/var/lib/homelab-command-adapter/capsules/68856b3837c49738a5c0e67429bb71e95c3f2fae80b62011f2ed7922e1db133d/payload/audit.py", line 262, in main - sanitize_match = re.search( - r"def sanitize_state\\(" - ...<3 lines>... - flags=re.DOTALL, - ) - File "/usr/lib/python3.13/re/__init__.py", line 177, in search - return _compile(pattern, flags).search(string) - ~~~~~~~~^^^^^^^^^^^^^^^^ - File "/usr/lib/python3.13/re/__init__.py", line 350, in _compile - p = _compiler.compile(pattern, flags) - File "/usr/lib/python3.13/re/_compiler.py", line 748, in compile - p = _parser.parse(p, flags) - File "/usr/lib/python3.13/re/_parser.py", line 980, in parse - p = _parse_sub(source, state, flags & SRE_FLAG_VERBOSE, 0) - File "/usr/lib/python3.13/re/_parser.py", line 459, in _parse_sub - itemsappend(_parse(source, state, verbose, nested + 1, - ~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ - not nested and not items)) - ^^^^^^^^^^^^^^^^^^^^^^^^^ - File "/usr/lib/python3.13/re/_parser.py", line 865, in _parse - raise source.error("missing ), unterminated subpattern", - source.tell() - start) -re.PatternError: missing ), unterminated subpattern at position 20 +{"backup_changed":false,"capabilities":{"adapter":{"monotonic_worker_registry":true,"sanitize_includes_evidence":true,"sanitize_includes_execution":true,"sanitized_state_fields":["bytes","capsule_bytes","capsule_sha256","command_object","error","evidence","execution","finished_at_utc","gateway_verified","imported_at_utc","manifest","object_key","runner_document_rc","runner_json_sha256","runner_rc","runner_status","runner_text_sha256","runner_wrapper_matches_document","schema_version","sha256","short_id","started_at_utc","status"],"supports_evidence_url":true},"evidence_signing":{"digest_bound":false,"expiry_bound":false,"hmac_or_signature_present":false,"object_key_bound":false,"presign_helper_exists":false,"sign_helper_exists":false},"portal":{"has_anonymous_terminal_result_route":false,"has_evidence_url_route":true,"has_execute_route":true,"has_health_route":true,"has_import_route":true,"has_state_route":true,"state_uses_session_token":true},"runner":{"creates_command_scoped_json":true,"creates_command_scoped_text":true,"public_document_has_command_id":true,"public_document_has_evidence_sha":true,"public_document_has_status":true,"public_document_is_sanitized":true,"publishes_latest_json":true,"publishes_latest_text":true}},"changes_made":false,"checks":{"adapter_expected_sha":true,"adapter_healthy":true,"adapter_sanitizes_evidence":true,"adapter_sanitizes_execution":true,"portal_expected_sha":true,"portal_health_reachable":true,"portal_healthy":true,"runner_expected_sha":true,"runtime_latest_has_command_id":true,"runtime_latest_has_status":true,"runtime_latest_is_json":true,"runtime_latest_reachable":true},"cluster_changed":false,"command_id":"READONLY-RESULT-INTEGRATION-AUDIT-FIX1-20260727T063309Z","gaps":["no_anonymous_readonly_terminal_result_route","current_latest_json_missing_evidence_reference","mutable_latest_pointer_not_sufficient_for_command_specific_lookup","signed_immutable_per_command_status_document_required"],"gitea_changed":false,"inventory":{"adapter":{"exists":true,"expected_match":true,"is_symlink":false,"sha256":"8d0af84dcfcf6ddbfd1c4e6cbb059cef66b4cfc6c75bfd66da649acc229c7f5e"},"evidence_presign_put":{"exists":false,"expected_match":true,"is_symlink":false,"sha256":null},"evidence_sign":{"exists":false,"expected_match":true,"is_symlink":false,"sha256":null},"portal":{"exists":true,"expected_match":true,"is_symlink":false,"sha256":"8056faf4ef6348f0b06319ad3c49fbfeeadf25b6370f857ea19569bd27652ee2"},"runner":{"exists":true,"expected_match":true,"is_symlink":false,"sha256":"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d"}},"private_addresses_included":false,"public_surfaces":{"evidence_healthz":{"http_code":200,"json_shape":{"keys":["service","status"],"type":"object"},"reachable":true},"evidence_root":{"http_code":404,"json_shape":null,"reachable":false},"portal_health":{"http_code":200,"json_shape":{"keys":["adapter","status","version"],"type":"object"},"reachable":true},"runtime_latest":{"http_code":200,"json_shape":{"keys":["block_reason","change_declared","changes_made","channel","command_id","command_rc","command_sha256","component","duplicate_failed_command_blocked","error_register_checked","error_register_sha256","execution_started","finished_at_utc","full_sanitized_output_url","host","mode","mutation_outcome","output","output_truncated_in_json","private_addresses_included","raw_evidence_retained_locally","raw_evidence_sha256","rc","reference_register_checked","reference_sha256","result_contract_error","result_contract_status","result_contract_valid","rollback_restored","rollback_started","sanitized","sanitized_output_sha256","schema_version","secrets_included","started_at_utc","status"],"type":"object"},"reachable":true},"runtime_latest_text":{"http_code":200,"json_shape":null,"reachable":true}},"recommended_design":{"immutable_path_template":"/.json","latest_pointer":"optional; never authoritative","must_not_publish":["session_token","bootstrap_token","device_token","presigned_url","cookies","private_keys","raw_logs","private_addresses"],"public_readonly_base":"https://run.vpn.gram1.ru/.well-known/homelab-result/","read_semantics":"anonymous GET of signed sanitized terminal documents only","required_fields":["schema_version","command_id","capsule_sha256","status","started_at_utc","finished_at_utc","runner_rc","runner_document_rc","runner_wrapper_matches_document","evidence_sha256","gateway_verified","summary","document_sha256","signature","key_id"],"write_semantics":"internal Adapter publication only"},"rollback_started":false,"runtime_latest":{"command_id":"READONLY-RESULT-INTEGRATION-AUDIT-20260727T062905Z","has_evidence_sha256":false,"has_gateway_verified":false,"has_summary":false,"is_mutable_pointer":true,"json_text_consistent":true,"latest_text_header":{"CHANGES_MADE":"false","COMMAND_ID":"READONLY-RESULT-INTEGRATION-AUDIT-20260727T062905Z","COMPONENT":"result-integration","MODE":"verify","PRIVATE_ADDRESSES_INCLUDED":"no","RC":"1","ROLLBACK_STARTED":"false","SANITIZED":"yes","SECRETS_INCLUDED":"no","STATUS":"FAIL"},"shape":{"keys":["block_reason","change_declared","changes_made","channel","command_id","command_rc","command_sha256","component","duplicate_failed_command_blocked","error_register_checked","error_register_sha256","execution_started","finished_at_utc","full_sanitized_output_url","host","mode","mutation_outcome","output","output_truncated_in_json","private_addresses_included","raw_evidence_retained_locally","raw_evidence_sha256","rc","reference_register_checked","reference_sha256","result_contract_error","result_contract_status","result_contract_valid","rollback_restored","rollback_started","sanitized","sanitized_output_sha256","schema_version","secrets_included","started_at_utc","status"],"type":"object"},"status":"FAIL"},"sanitized":true,"schema":1,"secrets_included":false,"services":{"adapter":{"active":"active","pid":"976008","restarts":"0","sub":"running"},"portal":{"active":"active","pid":"976035","restarts":"0","sub":"running"}},"status":"OK"} OUTPUT_END CHAT_OUTPUT_END