diff --git a/.github/workflows/linux-release.yml b/.github/workflows/linux-release.yml index 36dd284..ad0ac4c 100644 --- a/.github/workflows/linux-release.yml +++ b/.github/workflows/linux-release.yml @@ -2,6 +2,11 @@ name: Release pipeline on: workflow_dispatch: + inputs: + tag: + description: 'Release tag to rehearse (for example v0.1.0-alpha.20)' + required: false + type: string push: tags: - 'v*' @@ -40,6 +45,8 @@ jobs: - name: Package bootstrap shell: bash + env: + REHEARSAL_TAG: ${{ inputs.tag }} run: | set -Eeuo pipefail DIST_DIR=dist @@ -47,10 +54,19 @@ jobs: install -m 0755 deploy/ochenstarik-server-monitor-manager.sh "$DIST_DIR/ochenstarik-server-monitor-manager.sh" install -m 0755 deploy/smm-setup.sh "$DIST_DIR/smm-setup.sh" - # Substitute PROGRAM_VERSION from tag + # A branch rehearsal with an explicit tag must exercise the same + # version-consistency gate as an immutable tag build. + RELEASE_TAG="" if [[ "${GITHUB_REF}" == refs/tags/* ]]; then - sed -i "s/^PROGRAM_VERSION=.*$/PROGRAM_VERSION=\"${GITHUB_REF_NAME}\"/" "$DIST_DIR/ochenstarik-server-monitor-manager.sh" - grep -Fq "readonly DEFAULT_RELEASE_TAG=\"${GITHUB_REF_NAME}\"" "$DIST_DIR/smm-setup.sh" + RELEASE_TAG="${GITHUB_REF_NAME}" + elif [[ "${GITHUB_EVENT_NAME}" == "workflow_dispatch" && -n "$REHEARSAL_TAG" ]]; then + RELEASE_TAG="$REHEARSAL_TAG" + fi + if [[ -n "$RELEASE_TAG" ]]; then + [[ "$RELEASE_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.-]+)?$ ]] \ + || { printf 'Invalid release tag: %s\n' "$RELEASE_TAG" >&2; exit 1; } + sed -i "s/^PROGRAM_VERSION=.*$/PROGRAM_VERSION=\"${RELEASE_TAG}\"/" "$DIST_DIR/ochenstarik-server-monitor-manager.sh" + grep -Fq "readonly DEFAULT_RELEASE_TAG=\"${RELEASE_TAG}\"" "$DIST_DIR/smm-setup.sh" fi ( @@ -86,9 +102,13 @@ jobs: - name: Set Version id: version shell: bash + env: + REHEARSAL_TAG: ${{ inputs.tag }} run: | if [[ "${GITHUB_REF}" == refs/tags/* ]]; then VERSION="${GITHUB_REF_NAME#v}" + elif [[ "${GITHUB_EVENT_NAME}" == "workflow_dispatch" && -n "$REHEARSAL_TAG" ]]; then + VERSION="${REHEARSAL_TAG#v}" else VERSION="0.2.0-dev" fi @@ -176,9 +196,13 @@ jobs: - name: Set Version id: version shell: bash + env: + REHEARSAL_TAG: ${{ inputs.tag }} run: | if [[ "${GITHUB_REF}" == refs/tags/* ]]; then VERSION="${GITHUB_REF_NAME#v}" + elif [[ "${GITHUB_EVENT_NAME}" == "workflow_dispatch" && -n "$REHEARSAL_TAG" ]]; then + VERSION="${REHEARSAL_TAG#v}" else VERSION="0.2.0-dev" fi @@ -235,6 +259,8 @@ jobs: - name: Generate Manifest v2 shell: bash + env: + REHEARSAL_TAG: ${{ inputs.tag }} run: | set -Eeuo pipefail @@ -248,8 +274,11 @@ jobs: ) # Version fallback for non-tag runs - VERSION="${GITHUB_REF_NAME}" - if [[ ! "${GITHUB_REF}" == refs/tags/* ]]; then + if [[ "${GITHUB_REF}" == refs/tags/* ]]; then + VERSION="${GITHUB_REF_NAME}" + elif [[ "${GITHUB_EVENT_NAME}" == "workflow_dispatch" && -n "$REHEARSAL_TAG" ]]; then + VERSION="$REHEARSAL_TAG" + else VERSION="0.0.0-dev" fi diff --git a/.github/workflows/windows-build.yml b/.github/workflows/windows-build.yml index c5e3102..c35920e 100644 --- a/.github/workflows/windows-build.yml +++ b/.github/workflows/windows-build.yml @@ -40,7 +40,7 @@ jobs: - name: Test Desktop security (live release) env: - SMM_TEST_RELEASE_TAG: v0.1.0-alpha.18 + SMM_TEST_RELEASE_TAG: ${{ vars.SMM_TEST_RELEASE_TAG || 'v0.1.0-alpha.20' }} run: dotnet test tests/ServerMonitorManager.Desktop.Security.Tests/ServerMonitorManager.Desktop.Security.Tests.csproj --configuration Release -p:RestoreLockedMode=true --filter Category=LiveRelease - name: Build test-signed MSIX installer diff --git a/AGENTS.md b/AGENTS.md new file mode 100644 index 0000000..cdb88a8 --- /dev/null +++ b/AGENTS.md @@ -0,0 +1,34 @@ +# Правила работы агентов — server-monitor-manager + +Документ адресован любому исполнителю: человеку или агенту. Он описывает не +устройство проекта, а порядок работы над ним. + +## 1. Границы задачи + +Задание определяет область. Выход за неё запрещён, даже когда исправление +очевидно и занимает минуту: перемешанные изменения нельзя ни отревьюить, ни +откатить по отдельности. Замеченное рядом — списком в отчёт, отдельными +предложениями задач. + +## 2. Факты и догадки + +Выдумывать нельзя. Если решение не принято, версия неизвестна, а поведение не +проверено — так и пишем. Правдоподобная выдумка дороже честного «не определено»: +по ней начнут работать. + +## 3. Проверка + +«Работает» — не результат проверки. В отчёт идёт команда и её фактический +вывод. Если проверка не запускалась, это пишется прямо. + +## 4. Задания и результаты + +Задания и отчёты живут в `agents/`. Схема одинакова во всех репозиториях +рабочего пространства `Agent_projects`, полные правила — в `agents/README.md`. + +Коротко: задание — в `agents/<твой-id>/inbox/`, результат — в +`agents/<твой-id>/done/`, черновики — в `agents/<твой-id>/notes/`. Задание, +пришедшее в чате, агент сначала записывает в свой `inbox/`, и только потом +работает. Своих папок за пределами `agents/<твой-id>/` не заводить. + +Принимает работу и пушит в `main` только главный агент. diff --git a/agents/README.md b/agents/README.md new file mode 100644 index 0000000..9951515 --- /dev/null +++ b/agents/README.md @@ -0,0 +1,62 @@ +# Задания агентов — server-monitor-manager + +Единая схема для всех репозиториев в `Agent_projects`. Смысл один: задание, +результат и приёмка лежат в репозитории, а не в переписке и не в личных папках +агента на диске. Через месяц найти работу можно только так. + +## Правило, из-за которого всё это заведено + +Агент не создаёт папок за пределами `agents/<свой-id>/`. Черновики, логи +прогонов, промежуточные заметки — в `notes/`. Если своей папки не хватило, +это повод изменить схему в этом файле, а не завести `my_review/` в корне. + +## Кто есть кто + +| id | Агент | Папка | Префикс ветки | +|----|-------|-------|---------------| +| `claude` | Claude | `agents/claude/` | `claude/` | +| `codex` | Codex | `agents/codex/` | `codex/` | +| `antigravity` | Antigravity | `agents/antigravity/` | `antigravity/` | +| `hermes` | Hermes | `agents/hermes/` | `hermes/` | +| `grok` | Grok | `agents/grok/` | `grok/` | +| `opencode` | OpenCode | `agents/opencode/` | `opencode/` | + +Внутри каждой папки: + +- `inbox/` — задания агенту; +- `done/` — готовые результаты и отчёты; +- `notes/` — рабочие черновики агента. + +## Маршрут задания + +1. **Задание попадает в `/inbox/`** файлом `ГГГГ-ММ-ДД-краткое-имя.md` + по шаблону [TASK-TEMPLATE.md](TASK-TEMPLATE.md). Если задание пришло голосом + или в чате — агент сам записывает его в свой inbox **до** начала работы. + Незаписанного задания не существует: его нельзя ни проверить, ни повторить. +2. **Агент работает.** Черновики — в `/notes/`. Ветка — с префиксом + из таблицы выше. +3. **Результат — в `/done/`** файлом с тем же именем, что и задание, + по шаблону [REPORT-TEMPLATE.md](REPORT-TEMPLATE.md). Задание остаётся + в inbox до приёмки: пара «задание — отчёт» должна читаться рядом. +4. **Главный агент принимает работу:** сверяет отчёт с тем, что реально + изменилось, объединяет результаты разных агентов, переносит пару файлов + в `agents/_accepted/ГГГГ-ММ-ДД-краткое-имя/` и только после этого пушит. + +Пункт 4 выполняет только главный агент. Остальные в `main` не пушат — иначе +приёмка превращается в разбор того, что уже влито. + +## Что обязано быть в отчёте + +- что сделано и какими файлами; +- как это проверено — команда и её вывод, а не «протестировано»; +- что не сделано и почему; незакрытая часть в отчёте лучше, чем найденная + при приёмке; +- замеченные рядом дефекты — списком, отдельными предложениями задач, без + самовольного исправления. + +## Чего делать нельзя + +- Класть результат в `inbox/`, а задание в `done/`. +- Править чужой отчёт в `done/`. Возражения — отдельным файлом в своём + `done/` со ссылкой на разбираемый отчёт. +- Удалять принятое из `_accepted/`. Это архив приёмки. diff --git a/agents/REPORT-TEMPLATE.md b/agents/REPORT-TEMPLATE.md new file mode 100644 index 0000000..f434508 --- /dev/null +++ b/agents/REPORT-TEMPLATE.md @@ -0,0 +1,27 @@ +# Отчёт: заголовок задания + +- **Задание:** `../inbox/` — файл с тем же именем +- **Агент:** id агента +- **Дата:** ГГГГ-ММ-ДД +- **Ветка / коммиты:** ветка и хеши + +## Что сделано + +Списком, с указанием файлов. + +## Как проверено + +Команда и её фактический вывод. Если проверка не запускалась — так и написать. + +## Что не сделано + +Незакрытая часть задания и причина. Пусто — тоже ответ, но осознанный. + +## Замечено рядом + +Дефекты и улучшения за границами задачи — предложениями отдельных задач, +без самовольного исправления. + +## Вопросы к приёмке + +Места, где решение спорное и нужен взгляд главного агента. diff --git a/agents/TASK-TEMPLATE.md b/agents/TASK-TEMPLATE.md new file mode 100644 index 0000000..ada3c9f --- /dev/null +++ b/agents/TASK-TEMPLATE.md @@ -0,0 +1,27 @@ +# Заголовок задания + +- **Кому:** id агента из таблицы в README +- **Дата:** ГГГГ-ММ-ДД +- **От кого:** владелец проекта / главный агент +- **Ветка:** `<префикс-агента>/краткое-имя` +- **Файл отчёта:** `../done/` с тем же именем, что у этого файла + +## Что нужно сделать + +Одна задача — один файл. Если задач две, это два файла: иначе половину примут, +а половину нет, и состояние станет непонятным. + +## Границы + +Чего в этой задаче делать не нужно, даже если исправление очевидно и занимает +минуту. Замеченное рядом — в отчёт списком. + +## Как проверить результат + +Команды, которые должны пройти, и что считается доказательством. «Работает» — +не критерий приёмки. + +## Контекст и ограничения + +Файлы, документы, решения, которые нельзя нарушать. Если чего-то не знаешь — +пиши «не определено», а не правдоподобную выдумку. diff --git a/agents/_accepted/.gitkeep b/agents/_accepted/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/AD_HOC_CHANGED_BEHAVIOR_VERIFICATION.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/AD_HOC_CHANGED_BEHAVIOR_VERIFICATION.log new file mode 100644 index 0000000..75fce9b --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/AD_HOC_CHANGED_BEHAVIOR_VERIFICATION.log @@ -0,0 +1,172 @@ + Определение проектов для восстановления... + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Provisioning.Helper\ServerMonitorManager.Provisioning.Helper.csproj (за 320 мс). + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Core\ServerMonitorManager.Core.csproj (за 6 мс). + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Control\ServerMonitorManager.Control.csproj (за 473 мс). + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Agent\ServerMonitorManager.Agent.csproj (за 473 мс). + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\ServerMonitorManager.Control.Tests.csproj (за 522 мс). + ServerMonitorManager.Core -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Core\bin\Release\net10.0\ServerMonitorManager.Core.dll + ServerMonitorManager.Agent -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Agent\bin\Release\net10.0\ochenstarik-smm-agent.dll + ServerMonitorManager.Provisioning.Helper -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Provisioning.Helper\bin\Release\net10.0\ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Control -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Control\bin\Release\net10.0\ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll +Тестовый запуск для C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +Общее количество тестовых файлов (1), соответствующих указанному шаблону. + +Пройден! : не пройдено 0, пройдено 2, пропущено 0, всего 2, длительность 1 s. - ServerMonitorManager.Control.Tests.dll (net10.0) + Determining projects to restore... + Restored /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Provisioning.Helper/ServerMonitorManager.Provisioning.Helper.csproj (in 321 ms). + Restored /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 297 ms). + Restored /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 261 ms). + Restored /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Agent/ServerMonitorManager.Agent.csproj (in 726 ms). + Restored /home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj (in 1.2 sec). +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] + ServerMonitorManager.Core -> /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll + ServerMonitorManager.Provisioning.Helper -> /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Provisioning.Helper/bin/Release/net10.0/ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Agent -> /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Agent/bin/Release/net10.0/ochenstarik-smm-agent.dll + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/bin/Release/net10.0/ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> /home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll +Test run for /home/starik/hermes-b3r-native.5l4v3kU6/source/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +A total of 1 test files matched the specified pattern. + +Passed! - Failed: 0, Passed: 93, Skipped: 0, Total: 93, Duration: 6 s - ServerMonitorManager.Control.Tests.dll (net10.0) + Determining projects to restore... + Restored /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 2.33 sec). + Restored /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 2.34 sec). + ServerMonitorManager.Core -> /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(99,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(196,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(72,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(171,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(81,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(157,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(263,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(389,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(471,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(550,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/bin/Release/net10.0/linux-x64/ochenstarik-smm-control.dll + Optimizing assemblies for size. This process might take a while. +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(155,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__55.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(79,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__53.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(194,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__47.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(97,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__45.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(70,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__48.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(261,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__58.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(387,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__60.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(169,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__50.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(469,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__61.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(548,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__62.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.5l4v3kU6/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.5l4v3kU6/publish/ +PUBLISHED_CONTROL_SHA256=f338dad878bbead45b4fe19e08b692c260af00e9b72851d936ff43a19e18b0b5 +CONFIG_DATABASE_PATH=/home/starik/hermes-b3r-native.5l4v3kU6/control.db +AUDIT=system:reconcile|link.orphan-removed|source:target:tcp:2222|{"sourceNodeId":"source","targetNodeId":"target","protocol":"tcp","port":2222} +TRIMMED_NATIVE_ORPHAN_AUDIT=PASS +HELPER_CALLS=list:2,disconnect:1 +RUNTIME_DIR=/home/starik/hermes-b3r-native.5l4v3kU6 +reconcile-status +link-list +link-disconnect source target tcp 2222 +link-list +AD_HOC_B3R_CHANGED_BEHAVIOR=PASS diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_CHANGE_DESIGN.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_CHANGE_DESIGN.md new file mode 100644 index 0000000..f18bae4 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_CHANGE_DESIGN.md @@ -0,0 +1,54 @@ +# B-3R change design + +## Scope + +Добавочный contract `B3R_SPEC.md` применяется вместе с полным исходным B-3. Block C исключён. + +## Инварианты реализации + +1. Full pass начинает с одного `link-list` и одного `ListEffectiveLinksAsync`. +2. При отсутствии mutations дополнительных privileged calls нет. +3. При наличии любого числа mutations выполняется ровно один общий финальный `link-list`. +4. Для каждого natural key финальный count обязан быть: + - Active: ровно `1`; + - Disabled или DB-less orphan: ровно `0`. +5. События успешной mutation и orphan audit формируются только после финальной factual verification. +6. Для orphan audit порядок: factual verification → source-generated audit → success event. +7. Итог каждого examined key принадлежит ровно одному классу: `Converged`, `Failed`, `Deferred`. +8. `Converged + Failed + Deferred == Examined`; нарушение — программная ошибка, а не молчаливый успех. +9. `PendingActivation` относится к `Deferred`; Deferred не удерживает generation marker. Marker удерживает только Failed. +10. Lock order остаётся: sorted node locks → current effective per-Link gate. Новых lock-классов нет. +11. `lookup_node_ip` принимает только production-shape active row с валидным IPv4; reserved/missing → exit 80; malformed status/IP → exit 78. +12. Foreign nft comments никогда не становятся trusted keys и не мутируются. + +## Минимальный двухфазный full-pass design + +- Phase A: initial factual snapshot; natural-key reconciliation under existing locks; actual helper mutations; собрать mutated keys и preliminary states (`PendingActivation`, helper failures). +- Phase B: если были mutation attempts, один final factual snapshot; exact-count verification всех затронутых keys; затем DB state/audit/success events. +- `ConvergeAsync` остаётся единственным convergence core: phase/mode передаётся явно; отдельная копия connect/disconnect/error logic не допускается. + +## Обязательные regressions + +- DB-less no-op disconnect → Failed. +- Persisted Disabled при отсутствующем Node → Disabled после list verification. +- Mixed six-policy invariant с Converged/Failed/Deferred. +- Failed удерживает marker; только Converged+Deferred marker потребляет. +- 10 последовательных PendingActivation passes не создают prompt hot-loop. +- k mutations → два `link-list`; no drift → один. +- production-shape reserved/active-invalid/missing helper fixtures. +- Linux process integration fake поддерживает fact-first `link-list` protocol. +- Published linux-x64 trimmed Control assembly выполняет orphan removal и пишет ожидаемый source-generated audit JSON. + +## Verification gates + +- Windows focused/full Control; +- bootstrap contracts и `bash -n`; +- Desktop x64 Release + Windows contracts; +- WSL Ubuntu Linux full Control suite; +- linux-x64 PublishTrimmed + ad-hoc orphan audit execution through published assembly; +- `git diff --check`; +- independent reviewer получает оба полных spec: B-3 и B-3R. + +## External residual + +Physical acceptance требует реальных SSH/topology inputs и остаётся pending независимо от локальных tests/CI. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_DELIVERY_2026-08-07.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_DELIVERY_2026-08-07.md new file mode 100644 index 0000000..b5b02ef --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_DELIVERY_2026-08-07.md @@ -0,0 +1,49 @@ +# B-3R: довести до PR и зелёного Linux CI + +## Состояние + +Рабочая копия `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3`, ветка `hermes/task3-b3-fact-reconciliation`, база `b11c277`. Изменения **не закоммичены**: 23 отслеживаемых файла, +1735/−145, плюс новый файл `src/ServerMonitorManager.Control/ControlJsonContext.cs`. + +Ветки на GitHub нет, PR нет, CI не запускался ни разу. + +## Что проверено как сделанное + +Сверял по коду рабочей копии, а не по отчёту: + +| Пункт | Состояние | +|---|---| +| R1, пакетная верификация | `FinalizeBatchAsync` и единственный `finalRules = await applier.ListRulesAsync(…)` — реализовано | +| R2, класс `Deferred` | присутствует, инвариант классификации с диагностикой в `LinkService.cs:836` | +| R4, source-generated audit | `LinkOrphanAuditDetails` + `ControlJsonContext.Default.LinkOrphanAuditDetails`, новый `ControlJsonContext.cs` | +| R5, integration test | `link-list` в fake helper, 10 вхождений | +| R6, fail-open default | `ListRulesAsync` — обычный член интерфейса, тела по умолчанию нет | +| Мусор в статусе `nodes.tsv` | `node_status_pattern`: невалидный формат → 78, валидный не-`active` → 80 | + +Содержательная часть закрыта. Осталась доставка. + +## Что доделать + +**1. Проверить бюджет привилегированных вызовов.** В `ConvergeAsync` остались вызовы `VerifyExactFactualCountAsync` на строках 487, 496, 505, 514 — помимо пакетной верификации через `FinalizeBatchAsync`. Убедиться, что проход без расхождений выполняет ровно один `link-list`, а проход с `k` мутациями — ровно два. Если пер-мутационные вызовы остались в пути полного прохода, бюджет нарушен и требование R1 не выполнено. Если они относятся к другим путям (`CreateAsync`, `DisableAsync`, TTL) — это допустимо, но должно быть явно сказано в отчёте. + +**2. Прогнать Control suite на Linux.** Это отдельное требование, а не формальность: integration-тест помечен `OperatingSystem.IsLinux()` и на Windows молча пропускается. Именно так дефект H2 и дожил до ревью в прошлый раз. + +**3. Прогнать orphan-путь на опубликованном `linux-x64 PublishTrimmed` артефакте** и приложить содержимое audit-записи. Reflection-сериализация заменена на source-generated, но проверка на trimmed-сборке — единственное доказательство, что путь исполняется. + +**4. Семь обязательных тестов** из задания `smm-hermes-task-b3r-2026-08-06.md`, раздел «Тесты, без которых задание не принимается». Проверить наличие каждого поимённо. + +**5. Коммит, push, PR.** Ветка `hermes/task3-b3-fact-reconciliation`. Дождаться завершения CI **до** того, как писать в описании PR о проверках. + +## Критерий приёмки + +- PR создан, CI зелёный — впервые для этой ветки; +- Control suite прогнан на Linux, результат приложен; +- бюджет вызовов `link-list` подтверждён числом, а не утверждением; +- семь обязательных тестов присутствуют и проходят; +- отчёт раздельно перечисляет: что локально, что в CI со ссылками, что не запускалось; +- независимый review получил полный текст `smm-hermes-task-b3r-2026-08-06.md` и `B3R_SPEC.md`. + +## Отдельно + +Физическая приёмка на трёх серверах готовится параллельно — runbook `smm-acceptance-runbook-2026-08-07.md`. Она не входит в это задание, но именно merge B-3R делает её осмысленной: до него реконсиляция от фактического состояния не в `main`. + +Статус после merge — `merged / verified, physical acceptance pending`. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_SPEC.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_SPEC.md new file mode 100644 index 0000000..58f2a9e --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_SPEC.md @@ -0,0 +1,204 @@ +# ТЗ: B-3R — репарация Block B-3 до пригодного к merge состояния + +Репозиторий реализации: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` +Ветка: `hermes/task3-b3-fact-reconciliation`, база `b11c277`, изменения не закоммичены. +Исходное ТЗ: `smm-task-B3-spec-2026-08-03.md` — остаётся в силе целиком, этот документ его не заменяет, а добавляет условия приёмки. + +Пакет `Task3-B3-2026-08-04` — промежуточный (`STATUS-WIP.md` + первичный review), кода в нём нет. Проверку проводил по рабочей копии напрямую. + +--- + +## 1. Что подтверждено независимо + +Обе блокирующие находки первичного review — **реальны и в текущем состоянии рабочей копии не закрыты**. Проверял по коду, а не по отчёту. + +### B1 подтверждён + +`src/ServerMonitorManager.Control/LinkService.cs`: + +```csharp +:416 if (persisted) +:418 await VerifyFactualStateAsync(current, expectedConnected, cancellationToken); + +:431 else if (!persisted) +:433 current = current with { ActualState = completedState, LastError = null }; +``` + +DB-less orphan удаляется сырым `link-disconnect`, после чего успех **присваивается синтетическому объекту без единой проверки факта**. Доказательства, что все handles с этим comment исчезли, нет. + +Для persisted-политики проверка есть, но идёт через `link-status`, а `status_rule` по-прежнему вызывает `lookup_node_ip` для обоих узлов. Если Node отсутствует или не активирован, helper возвращает 80 **уже после успешного удаления правила**, и `ConvergeAsync:444-455` записывает `PendingActivation` / `mesh.node-not-activated`. + +Дальше в `ReconcileAllAsync:274-284` классификация такова, что `PendingActivation` не попадает ни в `Converged`, ни в `Failed`. Возможен результат `Examined=1, Converged=0, Failed=0`, при котором фоновый сервис видит `Failed == 0` и **потребляет marker**, хотя фактический результат не подтверждён. + +### B2 подтверждён + +`deploy/ochenstarik-smm-policy-apply:37-44`: + +```bash +lookup_node_ip() { + record="$(awk -F '\t' -v node="$node_id" '$1 == node { print; exit }' "$STATE_FILE")" + [[ -n "$record" ]] || node_not_activated + ip="$(awk -F '\t' '{ print $2 }' <<<"$record")" + [[ "$ip" =~ $ipv4_pattern ]] || fail "node has no valid mesh address: $node_id" +``` + +Читается только второе поле. Четвёртое — статус — не читается никогда. `reserve_node_address` пишет строку `node10.77.0.x-reserved`, `peer-add` меняет статус на `active`. Значит зарезервированный, но не активированный Node проходит проверку, и `link-connect` создаёт accept-правило. Exit 80 возникает только при полном отсутствии строки — случай, которого в реальной топологии не бывает, потому что строку создаёт сам `node-code`. + +Новый тест моделирует именно отсутствующую строку и поэтому дефект не ловит. Воспроизведение ревьюера на production-shaped фикстуре считаю корректным. + +### Что уже сделано правильно и ломать не надо + +- `disconnect_rule` больше не вызывает `lookup_node_ip` — удаление правила перестало зависеть от `nodes.tsv`. Это верное направление, сохранить. +- `list_rules` разбирает только managed-comment, проверяет арность 5 полей, node-паттерны, протокол и диапазон порта, отбрасывает подделки в stderr, чужие правила не выводит. +- `reconcile-status` возвращает `complete` при отсутствующем каталоге mesh; добавлена явная проверка `-x /usr/sbin/nft`; режим `SMM_POLICY_LISTING_FILE` для контрактных тестов. +- `Examined` / `Converged` / `Failed` разведены, `FailedPolicyIds` пробрасывается. + +--- + +## 2. Обязательные исправления + +### R1 — верификация факта только через `link-list` (закрывает B1) + +Корень дефекта: проход стал fact-first, а верификация осталась per-link через `link-status`. Отсюда и пропуск проверки для DB-less, и зависимость от `nodes.tsv`, и лишние привилегированные вызовы. + +Сделать: + +1. `VerifyFactualStateAsync` переписать на `link-list`: считать число записей с ключом `(source, target, protocol, port)`. + - ожидается `Active` → **ровно 1**; + - ожидается `Disabled` или DB-less orphan → **ровно 0**; + - любое иное число — отказ применения с явным кодом. +2. Убрать условие `if (persisted)` вокруг верификации. DB-less orphan проверяется теми же правилами, что и persisted. +3. Убрать присваивание `current with { ActualState = completedState }` без предшествующей проверки. Синтетический объект имеет право получить `Disabled` только после подтверждённого нуля записей. +4. Верификация удаления **не должна** зависеть от наличия узла в `nodes.tsv`. `link-list` этого не требует — после перехода зависимость исчезает сама. +5. Оптимизация, которую даёт этот же переход: в проходе выполнять **один** финальный `link-list` после всех мутаций и сверять по нему все затронутые ключи разом, вместо вызова на каждую мутацию. Требование «проход без расхождений — один привилегированный вызов» из B3-2 сохраняется; для прохода с `k` мутациями допускается ровно два вызова (стартовый и верифицирующий). + +### R2 — исчерпывающая классификация результата (закрывает вторую половину B1) + +Ввести явный третий класс — `Deferred` — и инвариант: + +``` +Converged + Failed + Deferred == Examined +``` + +Инвариант проверять в коде (нарушение — исключение либо `LogError` с идентификаторами) и отдельным тестом. Ни одно состояние не должно молча выпадать из классификации. + +**Решение, которое нужно принять явно, потому что иначе оно будет принято неправильно:** + +- `PendingActivation` — это `Deferred`, а не `Failed`. Это ожидаемое устойчивое состояние: Node зарезервирован, `peer-add` ещё не выполнен, и так может продолжаться сутками. +- `Deferred` **не блокирует** потребление marker. Иначе один зарезервированный Node навсегда удержит маркер и вернёт ровно тот бесконечный цикл проходов каждые 30 секунд, который был закрыт в B-2 и B3-3. +- Marker блокирует только `Failed`, и на него уже действует ограничение в три попытки. +- `Deferred` обязан быть видимым: отдельное событие (`link.pending-node-activation` уже есть), отдельная подпись в Desktop, отражение в журнале прохода. Ошибкой не называется. + +`LinkFullReconciliationResult` и `LinkReconciliationResult` дополнить полем `Deferred` и списком `DeferredPolicyIds` по образцу `FailedPolicyIds`. + +### R3 — читать статус узла в `lookup_node_ip` (закрывает B2) + +Разбирать минимум два поля — адрес и статус — и различать три исхода: + +| Строка в `nodes.tsv` | Результат | +|---|---| +| статус `active`, валидный IPv4 | успех | +| статус `reserved` (или любой не-`active`) | exit **80**, точный маркер `mesh.node-not-activated` | +| статус `active`, IP пустой или невалидный | exit **78** — повреждённое состояние, fail-closed | +| строки нет вовсе | exit **80** | + +Неизвестное значение статуса трактовать как не-`active` только если оно проходит валидацию формата; мусор в поле — это exit 78, а не 80. Fail-closed при сомнении. + +Тесты обязаны использовать **production-shape** фикстуру из четырёх полей, разделённых табуляцией: + +``` +source 10.77.0.2 key-source active +target 10.77.0.3 - reserved +``` + +Три случая: `reserved` + валидный IP → 80; `active` + валидный IP → успех; `active` + невалидный IP → 78. Тест на полностью отсутствующую строку сохранить, но он не заменяет перечисленные. + +### R4 — source-generated сериализация orphan audit (H1) + +Заменить анонимный тип в `ControlStore.cs:1376-1398` именованным DTO, добавить его в source-generated JSON-контекст Control и сериализовать через `Context.Default.`. Мотив не в предупреждениях компилятора, а в том, что отказ произойдёт **после** мутации firewall и **после** публикации `link.orphan-removed`, дав противоречивую телеметрию. + +Дополнительно к тому, что предложил review: проверить не локально, а прогоном опубликованного `linux-x64 PublishTrimmed` артефакта по orphan-пути и сверкой содержимого audit-записи. Разово, руками, с приложением вывода в `TEST_EVIDENCE.md`. + +Порядок операций зафиксировать явно: запись audit — до публикации финального события успеха. + +### R5 — Linux integration test на новый протокол (H2) + +`tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs` остался на протоколе `link-status`-first: fake helper не реализует `link-list`, ожидаемый журнал вызовов начинается с `link-status`. На Windows тест выходит по `OperatingSystem.IsLinux() == false`, поэтому заявленные локальные 85/85 дефект не показывают, а `linux-control-agent.yml` гоняет Control-тесты на Ubuntu, где пропуска не будет. + +Сделать: + +- реализовать `link-list` в fake helper; +- переписать ожидаемый журнал на fact-first протокол; +- проверить: no-drift → ровно один `link-list`; отсутствующая таблица классифицируется прямо на `link-list` без промежуточной мутации; мутация сопровождается финальной верификацией через `link-list`; DB-less raw disconnect проходит верификацию; +- прогнать Control suite **на Linux**, а не только на Windows. + +Пока это не сделано, утверждение «CI зелёный» не имеет оснований: PR не создан, Linux-прогон не выполнялся. + +### R6 — убрать fail-open default в интерфейсе (M1) + +`ILinkPolicyApplier.ListRulesAsync` с телом по умолчанию, возвращающим пустой список, означает, что забытая реализация молча сообщает «firewall пуст» — для источника истины о факте это худший из возможных дефолтов, и он уже позволил старым test doubles скомпилироваться без нового протокола. Сделать `ListRulesAsync` и raw `ApplyDisconnectAsync(LinkRule, …)` обязательными членами интерфейса, все test doubles обновить явно. + +### R7 — читаемость вложенных scope (L1) + +Переформатировать `LinkService.cs:181-229` и `240-293` либо вынести обработку одного tuple и одного orphan в приватные методы без дублирования логики сходимости. Порядок блокировок `sorted node locks → per-Link gate` должен быть виден глазами, а не восстанавливаться разбором отступов. + +--- + +## 3. Дополнительные тесты к обязательным из исходного ТЗ + +1. DB-less orphan: helper сообщает успех удаления, но правило осталось → проход обязан классифицировать это как `Failed`, а не как успех. +2. Persisted `Disabled`, узел отсутствует в `nodes.tsv` → удаление подтверждается через `link-list`, состояние становится `Disabled`, а не `PendingActivation`. +3. Marker не потребляется, если хоть один элемент попал в `Failed`; потребляется, если остались только `Converged` и `Deferred`. +4. Инвариант `Converged + Failed + Deferred == Examined` на смешанном наборе из шести политик. +5. Проход с `k` мутациями выполняет ровно два привилегированных вызова `link-list`. +6. Production-shape `reserved` → exit 80 (см. R3). +7. Зарезервированный Node в течение десяти последовательных проходов: `Deferred` каждый раз, marker потребляется, число проходов не превышает расписание. + +--- + +## 4. Definition of Done B-3R + +- [ ] Верификация факта выполняется только через `link-list`, счётом записей, одинаково для persisted и DB-less +- [ ] Синтетический успех без проверки факта отсутствует в коде +- [ ] Верификация удаления не зависит от `nodes.tsv` +- [ ] `Converged + Failed + Deferred == Examined` выполняется и проверяется тестом +- [ ] `PendingActivation` классифицирован как `Deferred`, marker им не блокируется, состояние видно в UI и журнале +- [ ] `lookup_node_ip` читает статус; `reserved` → 80, `active` + битый IP → 78; тесты на production-shape фикстуре +- [ ] orphan audit сериализуется через source-generated контекст; проверено на опубликованном trimmed артефакте +- [ ] Linux integration test переведён на fact-first протокол и **прогнан на Linux** +- [ ] `ListRulesAsync` и raw disconnect — обязательные члены интерфейса +- [ ] Все пункты DoD исходного ТЗ B-3 по-прежнему выполняются +- [ ] PR создан, CI зелёный — впервые для этой ветки +- [ ] Финальный независимый review получает **полный текст исходного ТЗ B-3 и этот документ**, а не только диф + +--- + +## 5. Формат сдачи + +Как в предыдущих блоках: `REPORT.md`, `TEST_EVIDENCE.md`, патч и/или ZIP, `CI_CHECKS.txt`, финальный `INDEPENDENT_REVIEW.md`, `SHA256SUMS` — считать последним действием, после всех правок отчётов, включая все файлы пакета. + +Промежуточный пакет из двух файлов, как сейчас, — нормальная практика для отчёта о ходе работ, если он так и назван. Финальный обязан быть полным. + +Статус по итогам merge формулировать как `merged / verified, physical acceptance pending`. + +--- + +## 6. Оценка первичного review + +Обе блокирующие находки верны, воспроизведение B2 корректно, разбор границ безопасности содержательный. Ревьюер честно указал, что `dotnet` в его окружении отсутствует и заявленные 85/85 он не воспроизводил — и именно из этого сделал правильный вывод про H2, что Linux-прогон обязателен. Это ровно тот способ работы, который нужен. + +Практика передачи ревьюеру полного текста ТЗ продолжает окупаться: B2 и H2 — пропущенные требования, а не ошибки в написанном коде, при diff-only ревью они не находятся. + +--- + +## 7. Внешний блокер, без изменений + +Physical acceptance не выполнялся ни разу за четыре блока. Нужны `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE` и прогон + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh +``` + +Harness готов и содержит и firewall-restore, и инъекцию orphan-правила. Критерий B6 и пункт «выполнить физический acceptance» Этапа 3 roadmap до этого прогона остаются открытыми при любом состоянии CI. Исполнитель закрыть их не может. + +Следующий блок после B-3R — **Блок C**, доверенная поставка, по разделу 3 документа `smm-task-4-2026-08-03.md`. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_TASK_2026-08-06.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_TASK_2026-08-06.md new file mode 100644 index 0000000..bc89bde --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_TASK_2026-08-06.md @@ -0,0 +1,122 @@ +# B-3R: завершить реконсиляцию от фактического состояния + +## Репозиторий и ветка + +- Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +- Рабочая копия: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` +- Ветка: `hermes/task3-b3-fact-reconciliation`, **изменения не закоммичены** — 24 файла, около +1276/−141 +- База: `b11c277ac7f79a18670932eca4622982d9ff48e0` +- Ветки на GitHub нет; коммит и push ещё не выполнялись + +Нормативные документы задания: `B3R_SPEC.md` и исходное ТЗ B-3 — оба в `C:\Users\Ochenstarik\Сюда\Panel control\Task3-B3-2026-08-04\`. Они остаются в силе целиком; ниже — только то, что осталось не сделано. + +## Зачем + +Проход реконсиляции стал fact-first: сначала один `link-list`, потом сверка с базой. Но верификация результата мутации осталась пер-линковой, а классификация результата неполна. Из-за этого два дефекта, оба на пути kill switch: + +- удаление правила может быть засчитано без доказательства, что правило исчезло; +- результат, не попавший ни в `Converged`, ни в `Failed`, позволяет фоновому сервису потребить marker внеочередной реконсиляции при неподтверждённом исходе. + +## Что уже закрыто — проверено по коду, переделывать не нужно + +- **R3 полностью.** `lookup_node_ip` читает четвёртое поле `nodes.tsv` и требует `active`; проверка статуса стоит раньше проверки IP, поэтому `reserved` + валидный адрес даёт exit 80, а `active` + битый адрес даёт 78. +- **R1 на уровне отдельной мутации.** Появился `VerifyExactFactualCountAsync`, считающий записи через `ListRulesAsync`, то есть через `link-list`, а не `link-status`. Условие `if (persisted)` вокруг верификации снято — DB-less orphan теперь тоже проверяется. Синтетическое присваивание `ActualState` выполняется после доказанного нуля записей, а не вместо доказательства. +- `list_rules` разбирает только managed-comment, проверяет арность, node-паттерны, протокол и диапазон порта, подделки отбрасывает в stderr, чужие правила не выводит. +- `disconnect_rule` больше не вызывает `lookup_node_ip` — удаление правила не зависит от `nodes.tsv`. Это верно, сохранить. + +## Работы + +### 1. Пакетная финальная верификация + +Сейчас `VerifyExactFactualCountAsync` вызывается на каждую мутацию: проход с `k` мутациями делает `1 + k` вызовов `link-list`. + +Требуется: один стартовый `link-list` и, при наличии мутаций, **ровно один финальный** `link-list`, по которому сверяются все затронутые ключи разом. Проход без расхождений — один привилегированный вызов, проход с мутациями — ровно два. + +Проверяется счётчиком вызовов фейкового applier и журналом вызовов в интеграционном тесте. + +### 2. Класс `Deferred` и инвариант классификации + +Ввести третий класс результата и инвариант: + +``` +Converged + Failed + Deferred == Examined +``` + +Инвариант проверять в коде — нарушение это `LogError` с идентификаторами политик — и отдельным тестом на смешанном наборе. + +Решение, которое нужно реализовать именно так: + +- `PendingActivation` — это `Deferred`, а не `Failed`. Node зарезервирован, `peer-add` не выполнен, состояние может держаться сутками и ошибкой не является. +- `Deferred` **не блокирует** потребление marker. Иначе один зарезервированный Node навсегда удержит marker и вернёт бесконечный полный проход каждые 30 секунд — ровно то, что закрывали в B-2 и B3-3. +- Marker блокирует только `Failed`, и на него уже действует ограничение в три попытки. +- `Deferred` обязан быть видимым: событие `link.pending-node-activation`, отдельная подпись в Desktop, отражение в журнале прохода. Ошибкой не называется. + +`LinkFullReconciliationResult` и `LinkReconciliationResult` дополнить полем `Deferred` и списком `DeferredPolicyIds` по образцу `FailedPolicyIds`. + +### 3. Source-generated сериализация orphan audit (R4) + +В `ControlStore.cs` запись audit для orphan-правила сериализуется анонимным типом через reflection, тогда как остальной Control последовательно использует source-generated `JsonTypeInfo`. + +Отказ произойдёт **после** мутации firewall и **после** публикации `link.orphan-removed`, дав противоречивую телеметрию: правило удалено, событие отправлено, проход помечен неуспешным. + +- ввести именованный DTO, добавить его в source-generated контекст Control, сериализовать через `Context.Default.`; +- зафиксировать порядок: запись audit до публикации финального события успеха; +- проверить на **опубликованном** `linux-x64 PublishTrimmed` артефакте, прогнав orphan-путь и сверив содержимое audit-записи. Приложить вывод к отчёту. + +### 4. Linux integration test на fact-first протокол (R5) + +`tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs` остался на протоколе `link-status`-first: fake helper не реализует `link-list`, ожидаемый журнал вызовов начинается с `link-status`. + +На Windows тест выходит по `OperatingSystem.IsLinux() == false`, поэтому локальные прогоны его не показывают. `linux-control-agent.yml` гоняет Control-тесты на Ubuntu, где пропуска не будет. + +- реализовать `link-list` в fake helper; +- переписать ожидаемый журнал на fact-first протокол; +- проверить: no-drift → ровно один `link-list`; отсутствующая таблица классифицируется прямо на `link-list` без промежуточной мутации; мутация сопровождается одной финальной верификацией; DB-less raw disconnect проходит верификацию; +- **прогнать Control suite на Linux.** Windows-прогон этот тест не выполняет и заявленные локальные результаты дефект не выявляют. + +### 5. Убрать fail-open default в интерфейсе (R6) + +`ILinkPolicyApplier.ListRulesAsync` имеет тело по умолчанию, возвращающее пустой список. Забытая реализация молча сообщает «firewall пуст» — худший возможный дефолт для источника истины о факте, и он уже позволил старым test doubles скомпилироваться без нового протокола. + +Сделать `ListRulesAsync` и raw `ApplyDisconnectAsync(LinkRule, …)` обязательными членами интерфейса, все test doubles обновить явно. + +### 6. Читаемость вложенных scope (R7) + +`LinkService.cs`, участки обработки persisted-кандидатов и factual-orphans: тела `try` визуально на уровне внешнего scope, порядок блокировок `sorted node locks → per-Link gate` восстанавливается только разбором отступов. Переформатировать либо вынести обработку одного tuple и одного orphan в приватные методы без дублирования логики сходимости. + +### 7. Мусор в поле статуса `nodes.tsv` + +Сейчас любое не-`active` значение даёт exit 80 и уходит в `Deferred` навсегда. Разграничить: известные значения (`reserved` и подобные) → 80; значение, не проходящее валидацию формата, → 78. Повреждённое состояние — это отказ, который должен всплыть, а не ожидаемое состояние, которое можно откладывать бесконечно. + +## Тесты, без которых задание не принимается + +1. DB-less orphan: helper сообщает успех удаления, но правило осталось → классифицируется как `Failed`, не как успех. +2. Persisted `Disabled`, узел отсутствует в `nodes.tsv` → удаление подтверждается через `link-list`, состояние `Disabled`, не `PendingActivation`. +3. Marker не потребляется при наличии `Failed`; потребляется, если остались только `Converged` и `Deferred`. +4. Инвариант `Converged + Failed + Deferred == Examined` на наборе из шести политик со всеми тремя исходами. +5. Проход с `k` мутациями выполняет ровно два вызова `link-list`. +6. Production-shape фикстура `nodes.tsv` из четырёх полей: `reserved` + валидный IP → 80; `active` + валидный IP → успех; `active` + невалидный IP → 78; мусор в статусе → 78. +7. Зарезервированный Node на десяти последовательных проходах: каждый раз `Deferred`, marker потребляется, число проходов не превышает расписание. + +## Критерий приёмки + +- все семь пунктов работ закрыты; +- семь тестов выше зелёные; +- Control suite прогнан **на Linux**, а не только на Windows; +- orphan audit проверен на опубликованном trimmed-артефакте; +- все критерии исходного ТЗ B-3 по-прежнему выполняются; +- PR создан, CI зелёный — впервые для этой ветки; +- независимый review получил полный текст этого задания, `B3R_SPEC.md` и исходное ТЗ B-3. + +## Границы + +- не трогать файлы вне области реконсиляции Links; изменения в Desktop ограничены отображением `Deferred`; +- не менять порядок блокировок и не вводить новых классов блокировок; +- не ослаблять fail-closed поведение: неизвестная ошибка `nft` остаётся отказом, а не «правил нет»; +- `TreatWarningsAsErrors` в этой задаче не включать. + +## Отчётность + +Отдельно перечислить: что запущено локально, что в CI, что не запускалось и почему. Физический acceptance (`SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh`) выполнить нельзя — не выданы topology inputs; contract- и mock-тесты за него не выдавать. + +Статус после merge — `merged / verified, physical acceptance pending`, а не «выполнено». diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_VERIFICATION_SNAPSHOT.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_VERIFICATION_SNAPSHOT.md new file mode 100644 index 0000000..194fc58 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3R_VERIFICATION_SNAPSHOT.md @@ -0,0 +1,51 @@ +# B-3R Linux verification snapshot + +Дата: 2026-08-04 + +## WSL2 Ubuntu 26.04 + +- .NET SDK: `10.0.302` +- Runtime: `10.0.10` +- `DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1` +- Worktree: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` + +## Windows verification (parent orchestrator) + +| Проверка | Результат | +|---|---| +| Control Release tests | **93/93 PASS** | +| Bootstrap contract | **PASS** (`BOOTSTRAP_CONTRACT=PASS`) | +| `bash -n` helper/bootstrap/acceptance | **PASS** | +| Desktop x64 Release | **0 warnings, 0 errors** | +| Windows Desktop contracts | **PASS** (`Windows desktop contracts passed.`) | +| `git diff --check` | **PASS** | + +## Linux verification (clean WSL snapshot) + +Снапшот исходников был скопирован в `/tmp/hermes-b3r-linux.Qx5SYwBt` и затем удалён при сбросе WSL session. + +| Проверка | Результат | +|---|---| +| Control Release tests (clean snapshot) | **93/93 PASS** | +| Restore warnings | `NETSDK1188` (invalid locale `zh-hant` etc. в сторонних пакетах) — не причина failure | + +## Linux PublishTrimmed + +| Конфигурация | Результат | +|---|---| +| `--self-contained false` | **FAIL** `NETSDK1102: Optimizing assemblies for size is not supported for the selected publish configuration` | +| `--self-contained true` | **PASS** (publish log saved) | +| Executable generated | `ochenstarik-smm-control` (78,256 bytes) | +| Executable startup (`backup-create`) | **NOT VERIFIED** — snapshot and executable were lost when WSL session ended | + +## Trimming warnings + +`IL2026` warnings present in `ProvisioningStore.cs`, `ProvisioningBaseInstallPlanStore.cs`, `ProvisioningFactsStore.cs` — pre-existing reflection-based JSON serialization in Provisioning paths, not in B-3 Link/orphan audit paths. + +## Orphan audit runtime verification + +Not completed before snapshot loss. The `TRIMMED_ORPHAN_AUDIT_VERIFIER.log` contains the last failed attempt (MissingMethodException for `ControlOptions.set_DatabasePath` in external host), which was subsequently addressed by adding `[DynamicDependency]` to `ControlOptions`, but the executable runtime verification was not rerun after the snapshot was lost. + +## Conclusion + +B-3R Linux Control suite passes on a clean snapshot. PublishTrimmed self-contained compilation succeeds. Runtime execution of the trimmed native executable and orphan audit verification remain pending due to WSL session loss. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3_B3R_COMPLETE.patch b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3_B3R_COMPLETE.patch new file mode 100644 index 0000000..64e05fe --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3_B3R_COMPLETE.patch @@ -0,0 +1,3020 @@ +diff --git a/deploy/ochenstarik-server-monitor-manager.sh b/deploy/ochenstarik-server-monitor-manager.sh +index d043fbc..0d87103 100755 +--- a/deploy/ochenstarik-server-monitor-manager.sh ++++ b/deploy/ochenstarik-server-monitor-manager.sh +@@ -495,6 +495,7 @@ Control__BackupDirectory=$STATE_DIR/backups + Control__HubHelperPath=$POLICY_HELPER + Control__PrivilegeEscalationPath=/usr/bin/sudo + Control__LinkReconciliationSeconds=300 ++Control__LinkRetentionDays=90 + EOF + printf '%s\n' "https://$public_host:$port" >"$ETC_DIR/control-public-url" + chown root:"$CONTROL_USER" "$ETC_DIR/control.env" +diff --git a/deploy/ochenstarik-smm-policy-apply b/deploy/ochenstarik-smm-policy-apply +index 87b3392..62ea298 100755 +--- a/deploy/ochenstarik-smm-policy-apply ++++ b/deploy/ochenstarik-smm-policy-apply +@@ -10,6 +10,7 @@ readonly CHAIN_NAME="links" + + fail() { printf '%s\n' "policy helper: $*" >&2; exit 78; } + firewall_unavailable() { printf '%s\n' "mesh.firewall-unavailable" >&2; exit 79; } ++node_not_activated() { printf '%s\n' "mesh.node-not-activated" >&2; exit 80; } + + testing="${SMM_POLICY_TESTING:-0}" + if [[ "$testing" != "1" ]]; then +@@ -28,16 +29,36 @@ fi + node_pattern='^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$' + ipv4_pattern='^([0-9]{1,3}\.){3}[0-9]{1,3}$' + generation_pattern='^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$' ++# Mesh node lifecycle statuses are lowercase tokens (for example active or reserved). ++node_status_pattern='^[a-z][a-z0-9-]{0,31}$' + + validate_node_id() { + [[ "$1" =~ $node_pattern ]] || fail "invalid node id" + } + ++is_valid_ipv4() { ++ local address="$1" octet ++ local -a octets ++ [[ "$address" =~ $ipv4_pattern ]] || return 1 ++ IFS='.' read -r -a octets <<<"$address" ++ [[ ${#octets[@]} -eq 4 ]] || return 1 ++ for octet in "${octets[@]}"; do ++ (( 10#$octet <= 255 )) || return 1 ++ done ++} ++ + lookup_node_ip() { +- local node_id="$1" ip ++ local node_id="$1" record field_count ip status + [[ -r "$STATE_FILE" ]] || fail "mesh node state is unavailable" +- ip="$(awk -F '\t' -v node="$node_id" '$1 == node { print $2; exit }' "$STATE_FILE")" +- [[ "$ip" =~ $ipv4_pattern ]] || fail "node has no valid mesh address: $node_id" ++ record="$(awk -F '\t' -v node="$node_id" '$1 == node { print; exit }' "$STATE_FILE")" ++ [[ -n "$record" ]] || node_not_activated ++ field_count="$(awk -F '\t' '{ print NF }' <<<"$record")" ++ [[ "$field_count" == "4" ]] || fail "invalid mesh node record: $node_id" ++ ip="$(awk -F '\t' '{ print $2 }' <<<"$record")" ++ status="$(awk -F '\t' '{ print $4 }' <<<"$record")" ++ [[ "$status" =~ $node_status_pattern ]] || fail "invalid mesh node status: $node_id" ++ [[ "$status" == "active" ]] || node_not_activated ++ is_valid_ipv4 "$ip" || fail "node has no valid mesh address: $node_id" + printf '%s\n' "$ip" + } + +@@ -65,6 +86,7 @@ run_nft() { + printf ' %q' "$@" + printf '\n' + else ++ [[ -x /usr/sbin/nft ]] || fail "nft executable is missing: /usr/sbin/nft" + /usr/sbin/nft "$@" + fi + } +@@ -75,8 +97,13 @@ inspect_firewall() { + [[ "${SMM_POLICY_FIREWALL_UNAVAILABLE:-0}" != "1" ]] || firewall_unavailable + [[ -z "${SMM_POLICY_FIREWALL_ERROR:-}" ]] \ + || fail "could not inspect nftables Link policy: $SMM_POLICY_FIREWALL_ERROR" ++ if [[ -n "${SMM_POLICY_LISTING_FILE:-}" ]]; then ++ [[ -r "$SMM_POLICY_LISTING_FILE" ]] || fail "test firewall listing is unavailable" ++ cat -- "$SMM_POLICY_LISTING_FILE" ++ fi + return 0 + fi ++ [[ -x /usr/sbin/nft ]] || fail "nft executable is missing: /usr/sbin/nft" + if listing="$(/usr/sbin/nft -a list chain "$TABLE_FAMILY" "$TABLE_NAME" "$CHAIN_NAME" 2>&1)"; then + printf '%s\n' "$listing" + return 0 +@@ -113,9 +140,6 @@ connect_rule() { + disconnect_rule() { + local source_id="$1" target_id="$2" protocol="$3" port="$4" comment handle + ensure_firewall_available +- # Resolve both identities before touching firewall state. +- lookup_node_ip "$source_id" >/dev/null +- lookup_node_ip "$target_id" >/dev/null + comment="smm:${source_id}:${target_id}:${protocol}:${port}" + if [[ "$testing" == "1" ]]; then + printf 'nft-delete-comment %q\n' "$comment" +@@ -131,6 +155,39 @@ disconnect_rule() { + ) + } + ++list_rules() { ++ local listing line comment source_id target_id protocol port invalid ++ local -a fields ++ listing="$(inspect_firewall)" ++ while IFS= read -r line; do ++ [[ "$line" =~ comment[[:space:]]+\"([^\"]*)\" ]] || continue ++ comment="${BASH_REMATCH[1]}" ++ [[ "$comment" == smm:* ]] || continue ++ IFS=':' read -r -a fields <<<"$comment" ++ invalid=0 ++ if [[ ${#fields[@]} -ne 5 ]]; then ++ invalid=1 ++ else ++ source_id="${fields[1]}" ++ target_id="${fields[2]}" ++ protocol="${fields[3]}" ++ port="${fields[4]}" ++ [[ "$source_id" =~ $node_pattern && "$target_id" =~ $node_pattern \ ++ && "$source_id" != "$target_id" ]] || invalid=1 ++ [[ "$protocol" == "tcp" || "$protocol" == "udp" ]] || invalid=1 ++ if [[ ! "$port" =~ ^[0-9]+$ ]] \ ++ || (( 10#$port < 1 || 10#$port > 65535 )); then ++ invalid=1 ++ fi ++ fi ++ if (( invalid != 0 )); then ++ printf '%s\n' "policy helper: forged managed comment ignored: $comment" >&2 ++ continue ++ fi ++ printf '%s\t%s\t%s\t%s\n' "$source_id" "$target_id" "$protocol" "$port" ++ done <<<"$listing" ++} ++ + status_rule() { + local source_id="$1" target_id="$2" protocol="$3" port="$4" comment + ensure_firewall_available +@@ -147,6 +204,10 @@ status_rule() { + + reconcile_status() { + local generation ++ if [[ ! -d "$(dirname -- "$RECONCILE_MARKER")" ]]; then ++ printf '%s\n' complete ++ return ++ fi + exec 9>"$RECONCILE_LOCK" + chmod 0600 "$RECONCILE_LOCK" + "$FLOCK_COMMAND" -x 9 +@@ -177,6 +238,11 @@ reconcile_complete() { + + action="${1:-}" + case "$action" in ++ link-list) ++ [[ $# -eq 1 ]] || fail "invalid link-list argument count" ++ list_rules ++ exit 0 ++ ;; + reconcile-status) + [[ $# -eq 1 ]] || fail "invalid reconcile-status argument count" + reconcile_status +diff --git a/docs/linux-bootstrap.md b/docs/linux-bootstrap.md +index 47566f8..1dc5426 100644 +--- a/docs/linux-bootstrap.md ++++ b/docs/linux-bootstrap.md +@@ -108,4 +108,4 @@ sudo ochenstarik-smm-emergency firewall-restore + sudo ochenstarik-smm-emergency mesh-enable + ``` + +-`mesh-disable` останавливает WireGuard, удаляет только таблицу `inet ochenstarik_smm` и ставит локальный emergency marker, не останавливая Control, Agent или SSH. `firewall-restore` восстанавливает базовую политику deny-by-default и атомарно создаёт root-only запрос реконсиляции с уникальным generation. Control немедленно выполняет первый фоновый проход после старта, затем сверяет все действующие Link-политики не реже настроенного интервала `Control__LinkReconciliationSeconds` (по умолчанию 300 секунд). Новый marker запускает внеочередной проход на следующем poll tick, но не обходит backoff недоступного firewall. Helper удаляет только тот generation, который был прочитан перед успешно завершившимся проходом; более новый запрос сохраняется. При недоступной таблице запрос остаётся для retry с backoff, а Desktop показывает единый баннер «Mesh firewall не загружен». Если firewall не удаётся восстановить, команда отключает Mesh для fail-closed результата. `mesh-enable` также создаёт запрос реконсиляции; запускайте его только после проверки конфигурации и доступности Hub. ++`mesh-disable` останавливает WireGuard, удаляет только таблицу `inet ochenstarik_smm` и ставит локальный emergency marker, не останавливая Control, Agent или SSH. `firewall-restore` восстанавливает базовую политику deny-by-default и атомарно создаёт root-only запрос реконсиляции с уникальным generation. Control немедленно выполняет первый фоновый проход после старта, затем одним `link-list` сверяет фактические managed-правила со всеми последними Link-политиками не реже настроенного интервала `Control__LinkReconciliationSeconds` (по умолчанию 300 секунд). Новый marker запускает до трёх внеочередных проходов на следующих poll tick; после трёх отказов обычный throttle восстанавливается, marker сохраняется, а журнал получает одно предупреждение с id проблемных политик. Marker не обходит backoff недоступного firewall. Завершённые политики `Disabled/Disabled` удаляются вместе со своей историей после `Control__LinkRetentionDays` (по умолчанию 90 дней); действующие политики и расхождения retention не затрагивает. Helper удаляет только тот generation, который был прочитан перед успешно завершившимся проходом; более новый запрос сохраняется. При недоступной таблице запрос остаётся для retry с backoff, а Desktop показывает единый баннер «Mesh firewall не загружен». Если firewall не удаётся восстановить, команда отключает Mesh для fail-closed результата. `mesh-enable` также создаёт запрос реконсиляции; запускайте его только после проверки конфигурации и доступности Hub. +diff --git a/docs/roadmap.md b/docs/roadmap.md +index da161fc..ecf6d6d 100644 +--- a/docs/roadmap.md ++++ b/docs/roadmap.md +@@ -58,7 +58,7 @@ + - [x] append-only audit операций Link; + - [x] интеграционные тесты kill switch, process restart и helper failure; + - [x] B-2: независимая фоновая и emergency-triggered реконсиляция, агрегированное состояние недоступного Mesh firewall и Desktop banner; +-- [ ] B-3: развести результат реконсиляции на `Examined` / `Converged` / `Failed` (M2), выбрать фильтр или retention завершённых Disabled-политик (M4) и типизировать ещё не активированный Mesh Node (M5). Эти изменения вынесены отдельно, потому что меняют API/UI semantics и helper classification, тогда как B-2 ограничен восстановлением фактических правил и общим firewall failure; ++- [x] B-3: факт-первичная реконсиляция использует один `link-list`, удаляет orphan/дубликаты (включая `Disabled/Disabled`), разводит `Examined` / `Converged` / `Failed` (M2), ограничивает marker-prompt тремя попытками, добавляет фильтр истории и retention завершённых Links (M4), а также типизированное ожидание активации Mesh Node (M5). Physical acceptance остаётся внешним блокером; + - [ ] выполнить физический acceptance Hub + source Node + два destination Node с WireGuard/nftables/reboot. + + ## Этап 4 — мониторинг и терминал +diff --git a/src/ServerMonitorManager.Control/ControlJsonContext.cs b/src/ServerMonitorManager.Control/ControlJsonContext.cs +new file mode 100644 +index 0000000..cf30905 +--- /dev/null ++++ b/src/ServerMonitorManager.Control/ControlJsonContext.cs +@@ -0,0 +1,13 @@ ++using System.Text.Json.Serialization; ++ ++namespace ServerMonitorManager.Control; ++ ++internal sealed record LinkOrphanAuditDetails( ++ string SourceNodeId, ++ string TargetNodeId, ++ string Protocol, ++ int Port); ++ ++[JsonSourceGenerationOptions(PropertyNamingPolicy = JsonKnownNamingPolicy.CamelCase)] ++[JsonSerializable(typeof(LinkOrphanAuditDetails))] ++internal sealed partial class ControlJsonContext : JsonSerializerContext; +diff --git a/src/ServerMonitorManager.Control/ControlMaintenance.cs b/src/ServerMonitorManager.Control/ControlMaintenance.cs +index de3db45..d8e401b 100644 +--- a/src/ServerMonitorManager.Control/ControlMaintenance.cs ++++ b/src/ServerMonitorManager.Control/ControlMaintenance.cs +@@ -10,6 +10,7 @@ public sealed record ControlMaintenanceResult( + int MetricsDeleted, + int IdempotencyDeleted, + int AuditDeleted, ++ int LinksDeleted, + int TokensDeleted, + int ProvisioningJobsCancelled, + int ProvisioningJobsNeedingReconciliation); +@@ -68,16 +69,17 @@ public sealed class ControlMaintenanceBackgroundService( + var result = await store.MaintainAsync(timeProvider.GetUtcNow(), stoppingToken); + await backups.CreateIfDueAsync(timeProvider.GetUtcNow(), stoppingToken); + if (result.MetricsDeleted + result.IdempotencyDeleted + result.AuditDeleted +- + result.TokensDeleted + result.ProvisioningJobsCancelled ++ + result.LinksDeleted + result.TokensDeleted + result.ProvisioningJobsCancelled + + result.ProvisioningJobsNeedingReconciliation > 0) + { + logger.LogInformation( + "Control maintenance removed {Metrics} metrics, {Idempotency} replay records, " +- + "{Audit} audit records, and {Tokens} enrollment tokens; cancelled {Cancelled} " ++ + "{Audit} audit records, {Links} completed Link policies, and {Tokens} enrollment tokens; cancelled {Cancelled} " + + "expired jobs and marked {Reconciliation} jobs for reconciliation.", + result.MetricsDeleted, + result.IdempotencyDeleted, + result.AuditDeleted, ++ result.LinksDeleted, + result.TokensDeleted, + result.ProvisioningJobsCancelled, + result.ProvisioningJobsNeedingReconciliation); +diff --git a/src/ServerMonitorManager.Control/ControlOptions.cs b/src/ServerMonitorManager.Control/ControlOptions.cs +index 3db0896..a618f6d 100644 +--- a/src/ServerMonitorManager.Control/ControlOptions.cs ++++ b/src/ServerMonitorManager.Control/ControlOptions.cs +@@ -1,38 +1,47 @@ ++using System.Diagnostics.CodeAnalysis; ++ + namespace ServerMonitorManager.Control; + + public sealed class ControlOptions + { ++ [DynamicDependency(DynamicallyAccessedMemberTypes.PublicProperties, typeof(ControlOptions))] ++ public ControlOptions() ++ { ++ } ++ + public const string SectionName = "Control"; + +- public string DatabasePath { get; init; } = "/var/lib/ochenstarik-server-monitor-manager/control.db"; ++ public string DatabasePath { get; set; } = "/var/lib/ochenstarik-server-monitor-manager/control.db"; ++ ++ public string CertificateAuthorityPath { get; set; } = "/etc/ochenstarik-server-monitor-manager/control-ca.pfx"; + +- public string CertificateAuthorityPath { get; init; } = "/etc/ochenstarik-server-monitor-manager/control-ca.pfx"; ++ public string? CertificateAuthorityPassword { get; set; } + +- public string? CertificateAuthorityPassword { get; init; } ++ public int HeartbeatSeconds { get; set; } = 30; + +- public int HeartbeatSeconds { get; init; } = 30; ++ public int MaxBufferedMetricAgeHours { get; set; } = 24; + +- public int MaxBufferedMetricAgeHours { get; init; } = 24; ++ public int MetricRetentionHours { get; set; } = 168; + +- public int MetricRetentionHours { get; init; } = 168; ++ public int IdempotencyRetentionHours { get; set; } = 24; + +- public int IdempotencyRetentionHours { get; init; } = 24; ++ public int AuditRetentionDays { get; set; } = 90; + +- public int AuditRetentionDays { get; init; } = 90; ++ public int LinkRetentionDays { get; set; } = 90; + +- public int MaintenanceIntervalMinutes { get; init; } = 15; ++ public int MaintenanceIntervalMinutes { get; set; } = 15; + +- public int LinkExpirationPollSeconds { get; init; } = 15; ++ public int LinkExpirationPollSeconds { get; set; } = 15; + +- public int LinkReconciliationSeconds { get; init; } = 300; ++ public int LinkReconciliationSeconds { get; set; } = 300; + +- public string BackupDirectory { get; init; } = "/var/lib/ochenstarik-server-monitor-manager/backups"; ++ public string BackupDirectory { get; set; } = "/var/lib/ochenstarik-server-monitor-manager/backups"; + +- public int BackupIntervalHours { get; init; } = 24; ++ public int BackupIntervalHours { get; set; } = 24; + +- public int BackupRetentionCount { get; init; } = 7; ++ public int BackupRetentionCount { get; set; } = 7; + +- public string HubHelperPath { get; init; } = "/usr/local/libexec/ochenstarik-smm-policy-apply"; ++ public string HubHelperPath { get; set; } = "/usr/local/libexec/ochenstarik-smm-policy-apply"; + +- public string PrivilegeEscalationPath { get; init; } = "/usr/bin/sudo"; ++ public string PrivilegeEscalationPath { get; set; } = "/usr/bin/sudo"; + } +diff --git a/src/ServerMonitorManager.Control/ControlStore.cs b/src/ServerMonitorManager.Control/ControlStore.cs +index f970fe9..b349fb5 100644 +--- a/src/ServerMonitorManager.Control/ControlStore.cs ++++ b/src/ServerMonitorManager.Control/ControlStore.cs +@@ -352,6 +352,24 @@ public sealed partial class ControlStore(IOptions options) + SELECT changes(); + DELETE FROM audit WHERE recorded_at < $audit_cutoff; + SELECT changes(); ++ DELETE FROM links AS historical ++ WHERE EXISTS ( ++ SELECT 1 FROM links AS latest ++ WHERE latest.source_node_id = historical.source_node_id ++ AND latest.target_node_id = historical.target_node_id ++ AND latest.protocol = historical.protocol ++ AND latest.port = historical.port ++ AND latest.desired_state = 'Disabled' ++ AND latest.actual_state = 'Disabled' ++ AND latest.updated_at < $link_cutoff ++ AND NOT EXISTS ( ++ SELECT 1 FROM links AS newer ++ WHERE newer.source_node_id = latest.source_node_id ++ AND newer.target_node_id = latest.target_node_id ++ AND newer.protocol = latest.protocol ++ AND newer.port = latest.port ++ AND newer.version > latest.version)); ++ SELECT changes(); + DELETE FROM enrollment_tokens WHERE consumed_at IS NOT NULL OR expires_at < $now; + SELECT changes(); + DELETE FROM device_tokens WHERE consumed_at IS NOT NULL OR expires_at < $now; +@@ -365,8 +383,10 @@ public sealed partial class ControlStore(IOptions options) + "$idempotency_cutoff", now.AddHours(-_options.IdempotencyRetentionHours).ToString("O")); + command.Parameters.AddWithValue( + "$audit_cutoff", now.AddDays(-_options.AuditRetentionDays).ToString("O")); ++ command.Parameters.AddWithValue( ++ "$link_cutoff", now.AddDays(-_options.LinkRetentionDays).ToString("O")); + command.Parameters.AddWithValue("$now", now.ToString("O")); +- var changes = new int[9]; ++ var changes = new int[10]; + await using (var reader = await command.ExecuteReaderAsync(cancellationToken)) + { + for (var index = 0; index < changes.Length; index++) +@@ -384,7 +404,7 @@ public sealed partial class ControlStore(IOptions options) + optimize.CommandText = "PRAGMA optimize; PRAGMA wal_checkpoint(PASSIVE);"; + await optimize.ExecuteNonQueryAsync(cancellationToken); + return new ControlMaintenanceResult( +- changes[3], changes[4], changes[5], changes[6] + changes[7] + changes[8], ++ changes[3], changes[4], changes[5], changes[6], changes[7] + changes[8] + changes[9], + changes[0], changes[1] + changes[2]); + } + +@@ -1353,6 +1373,31 @@ public sealed partial class ControlStore(IOptions options) + return link; + } + ++ public async Task RecordLinkOrphanRemovedAsync( ++ LinkRule rule, ++ string actor, ++ CancellationToken cancellationToken = default) ++ { ++ await using var connection = await OpenAsync(cancellationToken); ++ await using var transaction = (SqliteTransaction)await connection.BeginTransactionAsync(cancellationToken); ++ var subject = $"{rule.SourceNodeId}:{rule.TargetNodeId}:{rule.Protocol}:{rule.Port}"; ++ await WriteAuditAsync( ++ connection, ++ transaction, ++ actor, ++ "link.orphan-removed", ++ subject, ++ JsonSerializer.Serialize( ++ new LinkOrphanAuditDetails( ++ rule.SourceNodeId, ++ rule.TargetNodeId, ++ rule.Protocol, ++ rule.Port), ++ ControlJsonContext.Default.LinkOrphanAuditDetails), ++ cancellationToken); ++ await transaction.CommitAsync(cancellationToken); ++ } ++ + public async Task GetLinkAsync( + string id, + CancellationToken cancellationToken = default) +@@ -1364,6 +1409,29 @@ public sealed partial class ControlStore(IOptions options) + return link; + } + ++ public async Task GetEffectiveLinkAsync( ++ LinkRule rule, ++ CancellationToken cancellationToken = default) ++ { ++ await using var connection = await OpenAsync(cancellationToken); ++ var command = connection.CreateCommand(); ++ command.CommandText = """ ++ SELECT * FROM links ++ WHERE source_node_id = $source ++ AND target_node_id = $target ++ AND protocol = $protocol ++ AND port = $port ++ ORDER BY version DESC ++ LIMIT 1; ++ """; ++ command.Parameters.AddWithValue("$source", rule.SourceNodeId); ++ command.Parameters.AddWithValue("$target", rule.TargetNodeId); ++ command.Parameters.AddWithValue("$protocol", rule.Protocol); ++ command.Parameters.AddWithValue("$port", rule.Port); ++ await using var reader = await command.ExecuteReaderAsync(cancellationToken); ++ return await reader.ReadAsync(cancellationToken) ? ReadLink(reader) : null; ++ } ++ + public async Task> ListLinksAsync(CancellationToken cancellationToken = default) + { + var result = new List(); +@@ -1387,9 +1455,7 @@ public sealed partial class ControlStore(IOptions options) + command.CommandText = """ + SELECT current.* + FROM links AS current +- WHERE (current.desired_state = 'Active' +- OR (current.desired_state = 'Disabled' AND current.actual_state != 'Disabled')) +- AND NOT EXISTS ( ++ WHERE NOT EXISTS ( + SELECT 1 FROM links AS newer + WHERE newer.source_node_id = current.source_node_id + AND newer.target_node_id = current.target_node_id +@@ -1705,7 +1771,39 @@ public sealed record AgentHeartbeatMutation( + AgentHeartbeatResponse Response, + bool RequiresReconciliation); + +-public sealed record LinkReconciliationResult(int Applied, int Failed); ++public sealed record LinkReconciliationResult ++{ ++ public LinkReconciliationResult( ++ int examined, ++ int converged, ++ int failed, ++ int deferred, ++ IReadOnlyList failedPolicyIds, ++ IReadOnlyList deferredPolicyIds) ++ { ++ if (converged + failed + deferred != examined) ++ { ++ throw new InvalidOperationException( ++ $"Link reconciliation classification invariant failed: examined={examined}, " ++ + $"converged={converged}, failed={failed}, deferred={deferred}; " ++ + $"failed IDs=[{string.Join(',', failedPolicyIds)}], " ++ + $"deferred IDs=[{string.Join(',', deferredPolicyIds)}]."); ++ } ++ Examined = examined; ++ Converged = converged; ++ Failed = failed; ++ Deferred = deferred; ++ FailedPolicyIds = failedPolicyIds; ++ DeferredPolicyIds = deferredPolicyIds; ++ } ++ ++ public int Examined { get; } ++ public int Converged { get; } ++ public int Failed { get; } ++ public int Deferred { get; } ++ public IReadOnlyList FailedPolicyIds { get; } ++ public IReadOnlyList DeferredPolicyIds { get; } ++} + + public sealed record AgentReenrollmentMutation( + CertificateReenrollmentTicket Ticket, +diff --git a/src/ServerMonitorManager.Control/LinkPolicyApplier.cs b/src/ServerMonitorManager.Control/LinkPolicyApplier.cs +index 106a948..688deae 100644 +--- a/src/ServerMonitorManager.Control/LinkPolicyApplier.cs ++++ b/src/ServerMonitorManager.Control/LinkPolicyApplier.cs +@@ -6,8 +6,10 @@ namespace ServerMonitorManager.Control; + + public interface ILinkPolicyApplier + { ++ Task> ListRulesAsync(CancellationToken cancellationToken); + Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken); + Task ApplyDisconnectAsync(LinkPolicy link, CancellationToken cancellationToken); ++ Task ApplyDisconnectAsync(LinkRule rule, CancellationToken cancellationToken); + Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken); + Task GetReconciliationRequestAsync(CancellationToken cancellationToken) + => Task.FromResult(null); +@@ -15,6 +17,8 @@ public interface ILinkPolicyApplier + => Task.CompletedTask; + } + ++public sealed record LinkRule(string SourceNodeId, string TargetNodeId, string Protocol, int Port); ++ + public sealed class MeshFirewallUnavailableException : InvalidOperationException + { + public MeshFirewallUnavailableException(string message) : base(message) +@@ -22,8 +26,38 @@ public sealed class MeshFirewallUnavailableException : InvalidOperationException + } + } + ++public sealed class MeshNodeNotActivatedException : InvalidOperationException ++{ ++ public MeshNodeNotActivatedException(string message) : base(message) ++ { ++ } ++} ++ + public sealed class LinkPolicyApplier(IOptions options) : ILinkPolicyApplier + { ++ public async Task> ListRulesAsync(CancellationToken cancellationToken) ++ { ++ var output = await RunAsync(["link-list"], cancellationToken); ++ if (output.Length == 0) ++ { ++ return []; ++ } ++ var rules = new List(); ++ foreach (var line in output.Split('\n', StringSplitOptions.RemoveEmptyEntries)) ++ { ++ var fields = line.Trim().Split('\t'); ++ if (fields.Length != 4 ++ || !int.TryParse(fields[3], System.Globalization.NumberStyles.None, ++ System.Globalization.CultureInfo.InvariantCulture, out var port) ++ || port is < 1 or > 65535) ++ { ++ throw new InvalidOperationException("Hub policy helper returned an invalid link-list record."); ++ } ++ rules.Add(new LinkRule(fields[0], fields[1], fields[2], port)); ++ } ++ return rules; ++ } ++ + public Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken) + => RunAsync( + [ +@@ -37,13 +71,18 @@ public sealed class LinkPolicyApplier(IOptions options) : ILinkP + cancellationToken); + + public Task ApplyDisconnectAsync(LinkPolicy link, CancellationToken cancellationToken) ++ => ApplyDisconnectAsync( ++ new LinkRule(link.SourceNodeId, link.TargetNodeId, link.Protocol, link.Port), ++ cancellationToken); ++ ++ public Task ApplyDisconnectAsync(LinkRule rule, CancellationToken cancellationToken) + => RunAsync( + [ + "link-disconnect", +- link.SourceNodeId, +- link.TargetNodeId, +- link.Protocol, +- link.Port.ToString(System.Globalization.CultureInfo.InvariantCulture) ++ rule.SourceNodeId, ++ rule.TargetNodeId, ++ rule.Protocol, ++ rule.Port.ToString(System.Globalization.CultureInfo.InvariantCulture) + ], + cancellationToken); + +@@ -114,6 +153,11 @@ public sealed class LinkPolicyApplier(IOptions options) : ILinkP + { + throw new MeshFirewallUnavailableException(LinkService.FirewallUnavailableCode); + } ++ if (process.ExitCode == 80 ++ && string.Equals(message, LinkService.NodeNotActivatedCode, StringComparison.Ordinal)) ++ { ++ throw new MeshNodeNotActivatedException(LinkService.NodeNotActivatedCode); ++ } + throw new InvalidOperationException(string.IsNullOrWhiteSpace(message) + ? $"Hub policy helper exited with code {process.ExitCode}." + : message); +diff --git a/src/ServerMonitorManager.Control/LinkReconciliationBackgroundService.cs b/src/ServerMonitorManager.Control/LinkReconciliationBackgroundService.cs +index ac7abe5..5e971bf 100644 +--- a/src/ServerMonitorManager.Control/LinkReconciliationBackgroundService.cs ++++ b/src/ServerMonitorManager.Control/LinkReconciliationBackgroundService.cs +@@ -9,10 +9,13 @@ public sealed class LinkReconciliationBackgroundService( + TimeProvider timeProvider, + ILogger logger) : BackgroundService + { ++ private const int PromptAttemptLimit = 3; + private readonly SemaphoreSlim _passGate = new(1, 1); + private DateTimeOffset? _nextRegularAt; + private DateTimeOffset? _backoffUntil; + private int _unavailableAttempts; ++ private int _promptFailureAttempts; ++ private bool _promptThrottleWarningLogged; + + internal async Task RunOnceAsync( + CancellationToken cancellationToken = default) +@@ -34,27 +37,59 @@ public sealed class LinkReconciliationBackgroundService( + { + return null; + } +- if (requestGeneration is null && _nextRegularAt is not null && now < _nextRegularAt) ++ var promptBypassesThrottle = requestGeneration is not null ++ && _promptFailureAttempts < PromptAttemptLimit; ++ if (!promptBypassesThrottle && _nextRegularAt is not null && now < _nextRegularAt) + { + return null; + } + +- var result = await links.ReconcileAllAsync(cancellationToken); + var interval = TimeSpan.FromSeconds(options.Value.LinkReconciliationSeconds); ++ _nextRegularAt = now + interval; ++ LinkFullReconciliationResult result; ++ try ++ { ++ result = await links.ReconcileAllAsync(cancellationToken); ++ } ++ catch (Exception exception) when ( ++ exception is not OperationCanceledException && requestGeneration is not null) ++ { ++ RegisterPromptFailure([]); ++ throw; ++ } + if (result.FirewallUnavailable) + { + _unavailableAttempts = Math.Min(_unavailableAttempts + 1, 4); + _backoffUntil = now + TimeSpan.FromTicks(interval.Ticks * _unavailableAttempts); ++ return result; ++ } ++ ++ _unavailableAttempts = 0; ++ _backoffUntil = null; ++ if (requestGeneration is null) ++ { ++ return result; + } +- else ++ ++ if (result.Failed > 0) + { +- _unavailableAttempts = 0; +- _backoffUntil = null; +- _nextRegularAt = now + interval; +- if (requestGeneration is not null && result.Failed == 0) +- { +- await applier.CompleteReconciliationAsync(requestGeneration, cancellationToken); +- } ++ RegisterPromptFailure(result.FailedPolicyIds); ++ return result; ++ } ++ ++ try ++ { ++ await applier.CompleteReconciliationAsync(requestGeneration, cancellationToken); ++ _promptFailureAttempts = 0; ++ _promptThrottleWarningLogged = false; ++ } ++ catch (Exception exception) when (exception is not OperationCanceledException) ++ { ++ logger.LogWarning( ++ exception, ++ "Link reconciliation completed, but marker generation {Generation} could not be consumed.", ++ requestGeneration); ++ RegisterPromptFailure(["marker-completion"]); + } + return result; + } +@@ -64,6 +99,19 @@ public sealed class LinkReconciliationBackgroundService( + } + } + ++ private void RegisterPromptFailure(IReadOnlyList failedPolicyIds) ++ { ++ _promptFailureAttempts = Math.Min(_promptFailureAttempts + 1, PromptAttemptLimit); ++ if (_promptFailureAttempts == PromptAttemptLimit && !_promptThrottleWarningLogged) ++ { ++ _promptThrottleWarningLogged = true; ++ logger.LogWarning( ++ "Link reconciliation marker prompt exhausted after {Attempts} failures; regular throttle restored. Failed policy IDs: {FailedPolicyIds}.", ++ PromptAttemptLimit, ++ failedPolicyIds.Count == 0 ? "unknown" : string.Join(",", failedPolicyIds)); ++ } ++ } ++ + protected override async Task ExecuteAsync(CancellationToken stoppingToken) + { + var pollSeconds = Math.Min(options.Value.LinkReconciliationSeconds, 30); +@@ -76,10 +124,15 @@ public sealed class LinkReconciliationBackgroundService( + if (result is not null) + { + logger.LogInformation( +- "Link reconciliation completed: {Examined} examined, {Failed} failed, firewall unavailable: {Unavailable}.", ++ "Link reconciliation completed: {Examined} examined, {Converged} converged, {Deferred} deferred, {Failed} failed, firewall unavailable: {Unavailable}. Deferred policy IDs: {DeferredPolicyIds}.", + result.Examined, ++ result.Converged, ++ result.Deferred, + result.Failed, +- result.FirewallUnavailable); ++ result.FirewallUnavailable, ++ result.DeferredPolicyIds.Count == 0 ++ ? "none" ++ : string.Join(",", result.DeferredPolicyIds)); + } + } + catch (OperationCanceledException) when (stoppingToken.IsCancellationRequested) +diff --git a/src/ServerMonitorManager.Control/LinkService.cs b/src/ServerMonitorManager.Control/LinkService.cs +index e76176a..21c5ed9 100644 +--- a/src/ServerMonitorManager.Control/LinkService.cs ++++ b/src/ServerMonitorManager.Control/LinkService.cs +@@ -11,6 +11,7 @@ public sealed class LinkService( + { + public const string FirewallUnavailableCode = "mesh.firewall-unavailable"; + public const string FirewallAvailableCode = "mesh.firewall-available"; ++ public const string NodeNotActivatedCode = "mesh.node-not-activated"; + private readonly ConcurrentDictionary _reconciliationLocks = new(); + private readonly ConcurrentDictionary _nodeLocks = new(); + +@@ -108,8 +109,12 @@ public sealed class LinkService( + string nodeId, + CancellationToken cancellationToken) + { +- var reconciled = 0; ++ var examined = 0; ++ var converged = 0; ++ var deferred = 0; + var failed = 0; ++ var failedPolicyIds = new List(); ++ var deferredPolicyIds = new List(); + var links = await store.ListEffectiveLinksForNodeAsync(nodeId, cancellationToken); + foreach (var candidate in links) + { +@@ -128,10 +133,20 @@ public sealed class LinkService( + current.DesiredState == "Active", + $"system:reconnect:{nodeId}", + cancellationToken); +- reconciled++; ++ examined++; + if (result.ActualState is "Failed" or "Partial") + { + failed++; ++ failedPolicyIds.Add(result.Id); ++ } ++ else if (result.ActualState == "PendingActivation") ++ { ++ deferred++; ++ deferredPolicyIds.Add(result.Id); ++ } ++ else if (result.ActualState == (current.DesiredState == "Active" ? "Active" : "Disabled")) ++ { ++ converged++; + } + } + finally +@@ -139,61 +154,223 @@ public sealed class LinkService( + gate.Release(); + } + } +- return new LinkReconciliationResult(reconciled, failed); ++ return new LinkReconciliationResult( ++ examined, converged, failed, deferred, failedPolicyIds, deferredPolicyIds); + } + + public async Task ReconcileAllAsync( + CancellationToken cancellationToken = default) + { ++ IReadOnlyList factualRules; ++ try ++ { ++ factualRules = await applier.ListRulesAsync(cancellationToken); ++ } ++ catch (MeshFirewallUnavailableException) ++ { ++ var unavailableCandidates = await store.ListEffectiveLinksAsync(cancellationToken); ++ return await CompleteFirewallUnavailablePassAsync( ++ unavailableCandidates, 0, 0, cancellationToken); ++ } ++ + var candidates = await store.ListEffectiveLinksAsync(cancellationToken); + var recoveringFirewall = candidates.Any(candidate => + string.Equals(candidate.LastError, FirewallUnavailableCode, StringComparison.Ordinal)); ++ var factualCounts = factualRules ++ .GroupBy(static rule => rule) ++ .ToDictionary(static group => group.Key, static group => group.Count()); ++ var processedKeys = new HashSet(); ++ var batch = new FullReconciliationBatch(); ++ var pendingClassifications = new List<(string Id, string ExpectedState)>(); + var examined = 0; ++ var converged = 0; ++ var deferred = 0; + var failed = 0; +- var firewallUnavailable = false; ++ var failedPolicyIds = new List(); ++ var deferredPolicyIds = new List(); ++ + foreach (var candidate in candidates) + { +- using var nodeLease = await AcquireNodeLocksAsync( +- [candidate.SourceNodeId, candidate.TargetNodeId], cancellationToken); +- var gate = await AcquireLinkGateAsync(candidate.Id, cancellationToken); +- try ++ var firewallUnavailable = false; ++ using (await AcquireNodeLocksAsync( ++ [candidate.SourceNodeId, candidate.TargetNodeId], cancellationToken)) + { +- var current = await GetCurrentEffectiveAsync(candidate.Id, cancellationToken); +- if (current is null || !IsEligibleForFullReconciliation(current)) ++ var candidateRule = ToRule(candidate); ++ var selected = await store.GetEffectiveLinkAsync(candidateRule, cancellationToken); ++ if (selected is null) + { + continue; + } +- var result = await ConvergeAsync( +- current, current.DesiredState == "Active", "system:reconcile", cancellationToken); +- examined++; +- if (result.LastError == FirewallUnavailableCode) ++ var gate = await AcquireLinkGateAsync(selected.Id, cancellationToken); ++ try + { +- firewallUnavailable = true; ++ var current = await store.GetEffectiveLinkAsync(candidateRule, cancellationToken); ++ if (current is null) ++ { ++ continue; ++ } ++ var rule = ToRule(current); ++ if (!processedKeys.Add(rule)) ++ { ++ continue; ++ } ++ factualCounts.TryGetValue(rule, out var factualCount); ++ var result = await ConvergeAsync( ++ current, ++ current.DesiredState == "Active", ++ "system:reconcile", ++ cancellationToken, ++ factualCount, ++ batch: batch); ++ examined++; ++ if (result.LastError == FirewallUnavailableCode) ++ { ++ firewallUnavailable = true; ++ } ++ else if (result.ActualState is "Failed" or "Partial") ++ { ++ failed++; ++ failedPolicyIds.Add(result.Id); ++ } ++ else if (result.ActualState == "PendingActivation") ++ { ++ deferred++; ++ deferredPolicyIds.Add(result.Id); ++ } ++ else if (result.ActualState == (current.DesiredState == "Active" ? "Active" : "Disabled")) ++ { ++ converged++; ++ } ++ else if (batch.Contains(result.Id)) ++ { ++ pendingClassifications.Add(( ++ result.Id, ++ current.DesiredState == "Active" ? "Active" : "Disabled")); ++ } ++ else ++ { ++ failed++; ++ failedPolicyIds.Add(result.Id); ++ } + } +- else if (result.ActualState is "Failed" or "Partial") ++ finally + { +- failed++; ++ gate.Release(); + } + } +- finally ++ if (firewallUnavailable) + { +- gate.Release(); ++ return await CompleteFirewallUnavailablePassAsync( ++ candidates, examined, converged, cancellationToken); ++ } ++ } ++ ++ foreach (var orphan in factualCounts.Keys.Where(rule => !processedKeys.Contains(rule))) ++ { ++ var firewallUnavailable = false; ++ using (await AcquireNodeLocksAsync( ++ [orphan.SourceNodeId, orphan.TargetNodeId], cancellationToken)) ++ { ++ var selected = await store.GetEffectiveLinkAsync(orphan, cancellationToken); ++ var gate = await AcquireLinkGateAsync( ++ selected?.Id ++ ?? $"orphan:{orphan.SourceNodeId}:{orphan.TargetNodeId}:{orphan.Protocol}:{orphan.Port}", ++ cancellationToken); ++ try ++ { ++ var persisted = await store.GetEffectiveLinkAsync(orphan, cancellationToken); ++ var target = persisted ?? new LinkPolicy( ++ $"orphan:{orphan.SourceNodeId}:{orphan.TargetNodeId}:{orphan.Protocol}:{orphan.Port}", ++ orphan.SourceNodeId, ++ orphan.TargetNodeId, ++ orphan.Protocol, ++ orphan.Port, ++ 0, ++ "factual orphan", ++ "Disabled", ++ "Active", ++ 0, ++ DateTimeOffset.UtcNow, ++ null, ++ DateTimeOffset.UtcNow, ++ null); ++ var result = await ConvergeAsync( ++ target, ++ expectedConnected: persisted?.DesiredState == "Active", ++ "system:reconcile", ++ cancellationToken, ++ factualCounts[orphan], ++ persisted: persisted is not null, ++ batch: batch); ++ examined++; ++ var expectedState = persisted?.DesiredState == "Active" ? "Active" : "Disabled"; ++ if (result.LastError == FirewallUnavailableCode) ++ { ++ firewallUnavailable = true; ++ } ++ else if (result.ActualState == expectedState) ++ { ++ converged++; ++ } ++ else if (result.ActualState == "PendingActivation") ++ { ++ deferred++; ++ deferredPolicyIds.Add(result.Id); ++ } ++ else if (batch.Contains(result.Id)) ++ { ++ pendingClassifications.Add((result.Id, expectedState)); ++ } ++ else ++ { ++ failed++; ++ failedPolicyIds.Add(result.Id); ++ } ++ } ++ finally ++ { ++ gate.Release(); ++ } + } + if (firewallUnavailable) + { +- break; ++ return await CompleteFirewallUnavailablePassAsync( ++ candidates, examined, converged, cancellationToken); + } + } +- if (firewallUnavailable) ++ ++ if (batch.MutationAttempted) + { +- await MarkFirewallUnavailableAsync(candidates, cancellationToken); +- events.Publish( +- FirewallUnavailableCode, +- "mesh", +- JsonSerializer.Serialize( +- new ControlError(FirewallUnavailableCode), SmmJsonContext.Default.ControlError)); +- return new LinkFullReconciliationResult(examined, candidates.Count, true); ++ IReadOnlyDictionary finalized; ++ try ++ { ++ finalized = await FinalizeBatchAsync(batch, cancellationToken); ++ } ++ catch (MeshFirewallUnavailableException) ++ { ++ return await CompleteFirewallUnavailablePassAsync( ++ candidates, examined, converged, cancellationToken); ++ } ++ foreach (var pendingClassification in pendingClassifications) ++ { ++ var result = finalized[pendingClassification.Id]; ++ if (result.ActualState == pendingClassification.ExpectedState) ++ { ++ converged++; ++ } ++ else if (result.ActualState == "PendingActivation") ++ { ++ deferred++; ++ deferredPolicyIds.Add(result.Id); ++ } ++ else ++ { ++ failed++; ++ failedPolicyIds.Add(result.Id); ++ } ++ } + } ++ + if (recoveringFirewall) + { + events.Publish( +@@ -202,7 +379,14 @@ public sealed class LinkService( + JsonSerializer.Serialize( + new ControlError(FirewallAvailableCode), SmmJsonContext.Default.ControlError)); + } +- return new LinkFullReconciliationResult(examined, failed, false); ++ return new LinkFullReconciliationResult( ++ examined, ++ converged, ++ failed, ++ deferred, ++ false, ++ failedPolicyIds, ++ deferredPolicyIds); + } + + public async Task ExpireDueLinksAsync( +@@ -259,11 +443,17 @@ public sealed class LinkService( + LinkPolicy link, + bool expectedConnected, + string actor, +- CancellationToken cancellationToken) ++ CancellationToken cancellationToken, ++ int? knownFactualCount = null, ++ bool persisted = true, ++ FullReconciliationBatch? batch = null) + { +- var current = await store.GetLinkAsync(link.Id, cancellationToken) ?? link; +- if ((current.DesiredState == "Active") != expectedConnected +- || !await store.IsEffectiveLinkAsync(current, cancellationToken)) ++ var current = persisted ++ ? await store.GetLinkAsync(link.Id, cancellationToken) ?? link ++ : link; ++ if (persisted ++ && ((current.DesiredState == "Active") != expectedConnected ++ || !await store.IsEffectiveLinkAsync(current, cancellationToken))) + { + return current; + } +@@ -274,45 +464,87 @@ public sealed class LinkService( + var failureEvent = expectedConnected ? "link.failed" : "link.partial"; + try + { +- var isConnected = await applier.IsConnectedAsync(current, cancellationToken); +- var changedFact = isConnected != expectedConnected; ++ var factualCount = knownFactualCount ++ ?? await CountExactRulesAsync(current, cancellationToken); ++ var isConnected = factualCount > 0; ++ var duplicateActiveRule = expectedConnected && factualCount > 1; ++ var changedFact = isConnected != expectedConnected || duplicateActiveRule; + if (changedFact) + { + var pendingState = expectedConnected ? "Connecting" : "Disconnecting"; +- if (current.ActualState != pendingState || current.LastError is not null) ++ if (persisted && (current.ActualState != pendingState || current.LastError is not null)) + { + current = await store.SetLinkActualStateAsync( + current.Id, pendingState, null, actor, cancellationToken) ?? current; + } +- if (actor.StartsWith("system:", StringComparison.Ordinal)) ++ if (duplicateActiveRule) + { +- Publish("link.reconciling", current); ++ batch?.MarkMutationAttempted(); ++ await applier.ApplyDisconnectAsync(current, cancellationToken); ++ if (batch is null) ++ { ++ await VerifyExactFactualCountAsync(current, 0, cancellationToken); ++ } + } + if (expectedConnected) + { ++ batch?.MarkMutationAttempted(); + await applier.ApplyConnectAsync(current, cancellationToken); ++ if (batch is null) ++ { ++ await VerifyExactFactualCountAsync(current, 1, cancellationToken); ++ } + } +- else ++ else if (persisted) + { ++ batch?.MarkMutationAttempted(); + await applier.ApplyDisconnectAsync(current, cancellationToken); ++ if (batch is null) ++ { ++ await VerifyExactFactualCountAsync(current, 0, cancellationToken); ++ } ++ } ++ else ++ { ++ batch?.MarkMutationAttempted(); ++ await applier.ApplyDisconnectAsync(ToRule(current), cancellationToken); ++ if (batch is null) ++ { ++ await VerifyExactFactualCountAsync(current, 0, cancellationToken); ++ } ++ } ++ if (actor.StartsWith("system:", StringComparison.Ordinal)) ++ { ++ Publish("link.reconciling", current); ++ } ++ if (batch is not null) ++ { ++ batch.Stage(current, expectedConnected, actor, persisted); ++ return current; + } +- await VerifyFactualStateAsync(current, expectedConnected, cancellationToken); + } +- if (current.ActualState != completedState || current.LastError is not null) ++ current = await FinalizeConvergenceAsync( ++ current, expectedConnected, actor, persisted, changedFact, cancellationToken); ++ } ++ catch (MeshNodeNotActivatedException) when (expectedConnected) ++ { ++ if (persisted) + { + current = await store.SetLinkActualStateAsync( +- current.Id, completedState, null, actor, cancellationToken) ?? current; +- Publish(completedEvent, current); ++ current.Id, "PendingActivation", NodeNotActivatedCode, actor, cancellationToken) ?? current; ++ Publish("link.pending-node-activation", current); + } +- if (changedFact && actor == "system:reconcile") ++ else + { +- Publish(expectedConnected ? "link.reapplied" : "link.orphan-removed", current); ++ current = current with { ActualState = "PendingActivation", LastError = NodeNotActivatedCode }; + } + } + catch (MeshFirewallUnavailableException) + { +- current = await store.SetLinkActualStateAsync( +- current.Id, failureState, FirewallUnavailableCode, actor, cancellationToken) ?? current; ++ current = persisted ++ ? await store.SetLinkActualStateAsync( ++ current.Id, failureState, FirewallUnavailableCode, actor, cancellationToken) ?? current ++ : current with { ActualState = failureState, LastError = FirewallUnavailableCode }; + if (actor != "system:reconcile") + { + Publish(failureEvent, current); +@@ -320,13 +552,148 @@ public sealed class LinkService( + } + catch (Exception exception) when (exception is not OperationCanceledException) + { +- current = await store.SetLinkActualStateAsync( +- current.Id, failureState, CompactError(exception), actor, cancellationToken) ?? current; ++ var error = CompactError(exception); ++ current = persisted ++ ? await store.SetLinkActualStateAsync( ++ current.Id, failureState, error, actor, cancellationToken) ?? current ++ : current with { ActualState = failureState, LastError = error }; + Publish(failureEvent, current); + } + return current; + } + ++ private async Task> FinalizeBatchAsync( ++ FullReconciliationBatch batch, ++ CancellationToken cancellationToken) ++ { ++ var pendingItems = batch.Pending.ToArray(); ++ using var nodeLease = await AcquireNodeLocksAsync( ++ pendingItems.SelectMany(static pending => ++ new[] { pending.Link.SourceNodeId, pending.Link.TargetNodeId }), ++ cancellationToken); ++ var selectedByPendingId = new Dictionary(StringComparer.Ordinal); ++ foreach (var pending in pendingItems) ++ { ++ selectedByPendingId[pending.Link.Id] = await store.GetEffectiveLinkAsync( ++ ToRule(pending.Link), cancellationToken); ++ } ++ using var linkLease = await AcquireLinkGatesAsync( ++ pendingItems.Select(pending => ++ selectedByPendingId[pending.Link.Id]?.Id ?? pending.Link.Id), ++ cancellationToken); ++ var finalRules = await applier.ListRulesAsync(cancellationToken); ++ var currentByPendingId = new Dictionary(StringComparer.Ordinal); ++ foreach (var pending in pendingItems) ++ { ++ currentByPendingId[pending.Link.Id] = await store.GetEffectiveLinkAsync( ++ ToRule(pending.Link), cancellationToken); ++ } ++ var finalCounts = finalRules ++ .GroupBy(static rule => rule) ++ .ToDictionary(static group => group.Key, static group => group.Count()); ++ var finalized = new Dictionary(StringComparer.Ordinal); ++ foreach (var pending in pendingItems) ++ { ++ var current = currentByPendingId[pending.Link.Id]; ++ if (IsStale(pending, current)) ++ { ++ finalized.Add(pending.Link.Id, CreateStaleBatchResult(pending, current)); ++ continue; ++ } ++ finalCounts.TryGetValue(ToRule(pending.Link), out var actualCount); ++ var expectedCount = pending.ExpectedConnected ? 1 : 0; ++ LinkPolicy result; ++ if (actualCount == expectedCount) ++ { ++ result = await FinalizeConvergenceAsync( ++ pending.Link, ++ pending.ExpectedConnected, ++ pending.Actor, ++ pending.Persisted, ++ changedFact: true, ++ cancellationToken); ++ } ++ else ++ { ++ result = await FailConvergenceAsync( ++ pending.Link, ++ pending.ExpectedConnected, ++ pending.Actor, ++ pending.Persisted, ++ $"Factual Link policy count must be exactly {expectedCount} after application, but was {actualCount}.", ++ cancellationToken); ++ } ++ finalized.Add(pending.Link.Id, result); ++ } ++ return finalized; ++ } ++ ++ private static bool IsStale(PendingConvergence pending, LinkPolicy? current) ++ => pending.Persisted ++ ? current is null ++ || current.Id != pending.Link.Id ++ || current.Version != pending.Link.Version ++ || (current.DesiredState == "Active") != pending.ExpectedConnected ++ : current is not null; ++ ++ private static LinkPolicy CreateStaleBatchResult( ++ PendingConvergence pending, ++ LinkPolicy? current) ++ => (current ?? pending.Link) with ++ { ++ ActualState = pending.ExpectedConnected ? "Failed" : "Partial", ++ LastError = "Link policy changed before batch finalization." ++ }; ++ ++ private async Task FinalizeConvergenceAsync( ++ LinkPolicy current, ++ bool expectedConnected, ++ string actor, ++ bool persisted, ++ bool changedFact, ++ CancellationToken cancellationToken) ++ { ++ var completedState = expectedConnected ? "Active" : "Disabled"; ++ var completedEvent = expectedConnected ? "link.active" : "link.disabled"; ++ if (persisted && (current.ActualState != completedState || current.LastError is not null)) ++ { ++ current = await store.SetLinkActualStateAsync( ++ current.Id, completedState, null, actor, cancellationToken) ?? current; ++ Publish(completedEvent, current); ++ } ++ else if (!persisted) ++ { ++ current = current with { ActualState = completedState, LastError = null }; ++ } ++ if (changedFact && actor == "system:reconcile") ++ { ++ if (!expectedConnected) ++ { ++ await store.RecordLinkOrphanRemovedAsync(ToRule(current), actor, cancellationToken); ++ } ++ Publish(expectedConnected ? "link.reapplied" : "link.orphan-removed", current); ++ } ++ return current; ++ } ++ ++ private async Task FailConvergenceAsync( ++ LinkPolicy current, ++ bool expectedConnected, ++ string actor, ++ bool persisted, ++ string error, ++ CancellationToken cancellationToken) ++ { ++ var failureState = expectedConnected ? "Failed" : "Partial"; ++ var failureEvent = expectedConnected ? "link.failed" : "link.partial"; ++ current = persisted ++ ? await store.SetLinkActualStateAsync( ++ current.Id, failureState, error, actor, cancellationToken) ?? current ++ : current with { ActualState = failureState, LastError = error }; ++ Publish(failureEvent, current); ++ return current; ++ } ++ + private async Task GetCurrentEffectiveAsync( + string id, + CancellationToken cancellationToken) +@@ -347,11 +714,17 @@ public sealed class LinkService( + { + using var nodeLease = await AcquireNodeLocksAsync( + [candidate.SourceNodeId, candidate.TargetNodeId], cancellationToken); +- var gate = await AcquireLinkGateAsync(candidate.Id, cancellationToken); ++ var rule = ToRule(candidate); ++ var selected = await store.GetEffectiveLinkAsync(rule, cancellationToken); ++ if (selected is null) ++ { ++ continue; ++ } ++ var gate = await AcquireLinkGateAsync(selected.Id, cancellationToken); + try + { +- var current = await GetCurrentEffectiveAsync(candidate.Id, cancellationToken); +- if (current is not null && IsEligibleForFullReconciliation(current)) ++ var current = await store.GetEffectiveLinkAsync(rule, cancellationToken); ++ if (current is not null) + { + await store.SetLinkActualStateAsync( + current.Id, "Partial", FirewallUnavailableCode, "system:reconcile", cancellationToken); +@@ -364,9 +737,29 @@ public sealed class LinkService( + } + } + +- private static bool IsEligibleForFullReconciliation(LinkPolicy link) +- => link.DesiredState == "Active" +- || (link.DesiredState == "Disabled" && link.ActualState != "Disabled"); ++ private async Task CompleteFirewallUnavailablePassAsync( ++ IReadOnlyList candidates, ++ int examined, ++ int converged, ++ CancellationToken cancellationToken) ++ { ++ await MarkFirewallUnavailableAsync(candidates, cancellationToken); ++ events.Publish( ++ FirewallUnavailableCode, ++ "mesh", ++ JsonSerializer.Serialize( ++ new ControlError(FirewallUnavailableCode), SmmJsonContext.Default.ControlError)); ++ var failed = examined - converged; ++ var failedPolicyIds = candidates ++ .Take(failed) ++ .Select(static candidate => candidate.Id) ++ .ToArray(); ++ return new LinkFullReconciliationResult( ++ examined, converged, failed, 0, true, failedPolicyIds, []); ++ } ++ ++ private static LinkRule ToRule(LinkPolicy link) ++ => new(link.SourceNodeId, link.TargetNodeId, link.Protocol, link.Port); + + private void Publish(string type, LinkPolicy link) + => events.Publish( +@@ -412,15 +805,50 @@ public sealed class LinkService( + return gate; + } + +- private async Task VerifyFactualStateAsync( ++ private async Task AcquireLinkGatesAsync( ++ IEnumerable ids, ++ CancellationToken cancellationToken) ++ { ++ var gates = ids ++ .Distinct(StringComparer.Ordinal) ++ .Order(StringComparer.Ordinal) ++ .Select(id => _reconciliationLocks.GetOrAdd(id, static _ => new SemaphoreSlim(1, 1))) ++ .ToArray(); ++ var acquired = 0; ++ try ++ { ++ foreach (var gate in gates) ++ { ++ await gate.WaitAsync(cancellationToken); ++ acquired++; ++ } ++ return new LockLease(gates); ++ } ++ catch ++ { ++ for (var index = acquired - 1; index >= 0; index--) ++ { ++ gates[index].Release(); ++ } ++ throw; ++ } ++ } ++ ++ private async Task CountExactRulesAsync( + LinkPolicy link, +- bool expectedConnected, ++ CancellationToken cancellationToken) ++ => (await applier.ListRulesAsync(cancellationToken)).Count(rule => rule == ToRule(link)); ++ ++ private async Task VerifyExactFactualCountAsync( ++ LinkPolicy link, ++ int expectedCount, + CancellationToken cancellationToken) + { +- if (await applier.IsConnectedAsync(link, cancellationToken) != expectedConnected) ++ var actualCount = await CountExactRulesAsync(link, cancellationToken); ++ if (actualCount != expectedCount) + { + throw new InvalidOperationException( +- $"Factual Link policy is {(expectedConnected ? "disabled" : "active")} after application."); ++ $"Factual Link policy count must be exactly {expectedCount} after application, but was {actualCount}."); + } + } + +@@ -438,7 +866,64 @@ public sealed class LinkService( + } + } + } ++ ++ private sealed class FullReconciliationBatch ++ { ++ private readonly Dictionary _pending = ++ new(StringComparer.Ordinal); ++ ++ public bool MutationAttempted { get; private set; } ++ public IReadOnlyCollection Pending => _pending.Values; ++ ++ public void MarkMutationAttempted() => MutationAttempted = true; ++ ++ public void Stage(LinkPolicy link, bool expectedConnected, string actor, bool persisted) ++ => _pending[link.Id] = new PendingConvergence(link, expectedConnected, actor, persisted); ++ ++ public bool Contains(string id) => _pending.ContainsKey(id); ++ } ++ ++ private sealed record PendingConvergence( ++ LinkPolicy Link, ++ bool ExpectedConnected, ++ string Actor, ++ bool Persisted); + } + + public sealed record LinkExpirationResult(int Disabled, int Failed); +-public sealed record LinkFullReconciliationResult(int Examined, int Failed, bool FirewallUnavailable); ++public sealed record LinkFullReconciliationResult ++{ ++ public LinkFullReconciliationResult( ++ int examined, ++ int converged, ++ int failed, ++ int deferred, ++ bool firewallUnavailable, ++ IReadOnlyList failedPolicyIds, ++ IReadOnlyList deferredPolicyIds) ++ { ++ if (converged + failed + deferred != examined) ++ { ++ throw new InvalidOperationException( ++ $"Full Link reconciliation classification invariant failed: examined={examined}, " ++ + $"converged={converged}, failed={failed}, deferred={deferred}; " ++ + $"failed IDs=[{string.Join(',', failedPolicyIds)}], " ++ + $"deferred IDs=[{string.Join(',', deferredPolicyIds)}]."); ++ } ++ Examined = examined; ++ Converged = converged; ++ Failed = failed; ++ Deferred = deferred; ++ FirewallUnavailable = firewallUnavailable; ++ FailedPolicyIds = failedPolicyIds; ++ DeferredPolicyIds = deferredPolicyIds; ++ } ++ ++ public int Examined { get; } ++ public int Converged { get; } ++ public int Failed { get; } ++ public int Deferred { get; } ++ public bool FirewallUnavailable { get; } ++ public IReadOnlyList FailedPolicyIds { get; } ++ public IReadOnlyList DeferredPolicyIds { get; } ++} +diff --git a/src/ServerMonitorManager.Control/Program.cs b/src/ServerMonitorManager.Control/Program.cs +index 9ee3a22..86d62db 100644 +--- a/src/ServerMonitorManager.Control/Program.cs ++++ b/src/ServerMonitorManager.Control/Program.cs +@@ -44,6 +44,7 @@ builder.Services.AddOptions() + && options.MetricRetentionHours is >= 24 and <= 8760 + && options.IdempotencyRetentionHours is >= 1 and <= 720 + && options.AuditRetentionDays is >= 1 and <= 3650 ++ && options.LinkRetentionDays is >= 1 and <= 3650 + && options.MaintenanceIntervalMinutes is >= 1 and <= 1440 + && options.LinkExpirationPollSeconds is >= 1 and <= 300 + && options.LinkReconciliationSeconds is >= 30 and <= 3600 +diff --git a/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj b/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj +index 0c9b790..40b6087 100644 +--- a/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj ++++ b/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj +@@ -4,6 +4,7 @@ + enable + enable + true ++ true + 0.1.0 + ochenstarik-smm-control + +diff --git a/src/ServerMonitorManager.Control/appsettings.json b/src/ServerMonitorManager.Control/appsettings.json +index d395405..83afb4d 100644 +--- a/src/ServerMonitorManager.Control/appsettings.json ++++ b/src/ServerMonitorManager.Control/appsettings.json +@@ -8,6 +8,7 @@ + "MetricRetentionHours": 168, + "IdempotencyRetentionHours": 24, + "AuditRetentionDays": 90, ++ "LinkRetentionDays": 90, + "MaintenanceIntervalMinutes": 15, + "LinkExpirationPollSeconds": 15, + "LinkReconciliationSeconds": 300, +diff --git a/src/ServerMonitorManager.Desktop/MainPage.xaml.cs b/src/ServerMonitorManager.Desktop/MainPage.xaml.cs +index 8b953ce..9d9bb7c 100644 +--- a/src/ServerMonitorManager.Desktop/MainPage.xaml.cs ++++ b/src/ServerMonitorManager.Desktop/MainPage.xaml.cs +@@ -1059,6 +1059,7 @@ public sealed partial class MainPage : Page + .GroupBy(link => new { link.SourceNodeId, link.TargetNodeId, link.Protocol, link.Port }) + .Select(group => group.MaxBy(link => link.Version)!) + .Any(link => link.LastError == MeshLinkViewModel.FirewallUnavailableErrorCode)); ++ _linksPage?.RefreshFilter(); + + var activeLinks = MeshLinks.Count(link => link.ActualState == "Active"); + ActiveLinksValueText.Text = activeLinks.ToString(CultureInfo.InvariantCulture); +@@ -1265,10 +1266,14 @@ public sealed partial class MainPage : Page + await RefreshMeshAsync(showSuccess: false); + ShowInfo( + enable ? "Control Link создан" : "Control Link отключён", +- $"{source.Name} → {target.Name} · {protocol.ToUpperInvariant()}/{port} · {link.ActualState} v{link.Version}", +- link.ActualState is "Failed" or "Partial" +- ? InfoBarSeverity.Warning +- : InfoBarSeverity.Success); ++ link.LastError == MeshLinkViewModel.NodeNotActivatedErrorCode ++ ? $"{source.Name} → {target.Name} · {protocol.ToUpperInvariant()}/{port} · ожидает активации Node в Mesh" ++ : $"{source.Name} → {target.Name} · {protocol.ToUpperInvariant()}/{port} · {link.ActualState} v{link.Version}", ++ link.LastError == MeshLinkViewModel.NodeNotActivatedErrorCode ++ ? InfoBarSeverity.Informational ++ : link.ActualState is "Failed" or "Partial" ++ ? InfoBarSeverity.Warning ++ : InfoBarSeverity.Success); + return; + } + +diff --git a/src/ServerMonitorManager.Desktop/MeshModels.cs b/src/ServerMonitorManager.Desktop/MeshModels.cs +index 79446d2..dcf0dd5 100644 +--- a/src/ServerMonitorManager.Desktop/MeshModels.cs ++++ b/src/ServerMonitorManager.Desktop/MeshModels.cs +@@ -20,6 +20,7 @@ public sealed class MeshNodeViewModel + public sealed class MeshLinkViewModel + { + public const string FirewallUnavailableErrorCode = "mesh.firewall-unavailable"; ++ public const string NodeNotActivatedErrorCode = "mesh.node-not-activated"; + + public MeshLinkViewModel( + string source, +@@ -63,9 +64,13 @@ public sealed class MeshLinkViewModel + public string? LastError { get; set; } + public bool HasDrift => !string.Equals(DesiredState, ActualState, StringComparison.Ordinal); + public string DesiredStatusText => $"Желаемое состояние: {DesiredState}"; +- public string ActualStatusText => $"Фактическое состояние: {ActualState}"; +- public string DriftText => HasDrift ? "Расхождение: требуется сверка политики" : "Расхождение: нет"; +- public string ErrorText => LastError == FirewallUnavailableErrorCode ? string.Empty ++ public string ActualStatusText => LastError == NodeNotActivatedErrorCode ++ ? "Фактическое состояние: ожидает активации Node в Mesh" ++ : $"Фактическое состояние: {ActualState}"; ++ public string DriftText => LastError == NodeNotActivatedErrorCode ++ ? "Ожидание: активируйте Node в Mesh — это не ошибка политики" ++ : HasDrift ? "Расхождение: требуется сверка политики" : "Расхождение: нет"; ++ public string ErrorText => LastError is FirewallUnavailableErrorCode or NodeNotActivatedErrorCode ? string.Empty + : string.IsNullOrWhiteSpace(LastError) ? "Ошибка: нет" : $"Ошибка: {LastError}"; + public string VersionText => $"Версия политики: {Version}"; + public string ExpirationText => ExpiresUnix == 0 +diff --git a/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml b/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml +index f7a3415..4370c18 100644 +--- a/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml ++++ b/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml +@@ -77,8 +77,15 @@ + + + +- +- ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +diff --git a/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml.cs b/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml.cs +index 4eb545f..d2e26a2 100644 +--- a/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml.cs ++++ b/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml.cs +@@ -12,11 +12,34 @@ public sealed partial class LinksPage : Page + { + _host = host; + InitializeComponent(); ++ RefreshFilter(); + } + + public ObservableCollection Nodes => _host.MeshNodes; + +- public ObservableCollection Links => _host.MeshLinks; ++ public ObservableCollection DisplayedLinks { get; } = []; ++ ++ internal void RefreshFilter() ++ { ++ var selectedId = (LinksList.SelectedItem as MeshLinkViewModel)?.Id; ++ var effective = _host.MeshLinks ++ .GroupBy(link => new { link.Source, link.Target, link.Protocol, link.Port }) ++ .Select(group => group.MaxBy(link => link.Version)!) ++ .ToArray(); ++ var source = ShowHistoryToggle.IsOn ++ ? _host.MeshLinks ++ : effective.Where(link => link.DesiredState == "Active" || link.HasDrift); ++ DisplayedLinks.Clear(); ++ foreach (var link in source) ++ { ++ DisplayedLinks.Add(link); ++ } ++ LinksCountText.Text = $"Показано политик: {DisplayedLinks.Count} · фактически Active: {DisplayedLinks.Count(link => link.ActualState == "Active")} · с расхождением: {DisplayedLinks.Count(link => link.HasDrift)}"; ++ if (selectedId is not null) ++ { ++ LinksList.SelectedItem = DisplayedLinks.FirstOrDefault(link => link.Id == selectedId); ++ } ++ } + + internal void SetFirewallUnavailable(bool unavailable) + => FirewallUnavailableInfo.IsOpen = unavailable; +@@ -24,6 +47,9 @@ public sealed partial class LinksPage : Page + private async void RefreshButton_Click(object sender, RoutedEventArgs e) + => await _host.RefreshLinksFromPageAsync(); + ++ private void ShowHistoryToggle_Toggled(object sender, RoutedEventArgs e) ++ => RefreshFilter(); ++ + private async void ConnectButton_Click(object sender, RoutedEventArgs e) + => await ChangeLinkAsync(enable: true); + +diff --git a/tests/ServerMonitorManager.Control.Tests/ControlMaintenanceTests.cs b/tests/ServerMonitorManager.Control.Tests/ControlMaintenanceTests.cs +index aa5b423..beeb446 100644 +--- a/tests/ServerMonitorManager.Control.Tests/ControlMaintenanceTests.cs ++++ b/tests/ServerMonitorManager.Control.Tests/ControlMaintenanceTests.cs +@@ -109,6 +109,62 @@ public sealed class ControlMaintenanceTests : IAsyncDisposable + Assert.Equal(8L, (long)(await version.ExecuteScalarAsync(cancellationToken))!); + } + ++ [Fact] ++ public async Task MaintenanceRetainsActiveAndDriftButPrunesCompletedHistoryWithoutResurrection() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var (store, options) = CreateServices(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "E111", cancellationToken); ++ await EnrollAgentAsync(store, "completed", "E222", cancellationToken); ++ await EnrollAgentAsync(store, "active", "E333", cancellationToken); ++ await EnrollAgentAsync(store, "drift", "E444", cancellationToken); ++ var applier = new RecordingPolicyApplier(); ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ var completed = await service.CreateAsync( ++ new LinkPolicyCreateRequest("source", "completed", "tcp", 22, 0, "done", Guid.NewGuid().ToString()), ++ "operator", cancellationToken); ++ await service.DisableAsync( ++ completed.Id, new LinkPolicyDisableRequest(Guid.NewGuid().ToString()), "operator", cancellationToken); ++ var active = await service.CreateAsync( ++ new LinkPolicyCreateRequest("source", "active", "tcp", 22, 0, "active", Guid.NewGuid().ToString()), ++ "operator", cancellationToken); ++ var drift = await service.CreateAsync( ++ new LinkPolicyCreateRequest("source", "drift", "tcp", 22, 0, "drift", Guid.NewGuid().ToString()), ++ "operator", cancellationToken); ++ await store.SetLinkActualStateAsync(drift.Id, "Failed", "simulated", "test", cancellationToken); ++ var now = DateTimeOffset.UtcNow; ++ ++ await using (var connection = new SqliteConnection($"Data Source={options.DatabasePath}")) ++ { ++ await connection.OpenAsync(cancellationToken); ++ var command = connection.CreateCommand(); ++ command.CommandText = """ ++ INSERT INTO links( ++ id, source_node_id, target_node_id, protocol, port, ttl_minutes, reason, ++ desired_state, actual_state, version, created_at, expires_at, updated_at, last_error) ++ SELECT $history_id, source_node_id, target_node_id, protocol, port, ttl_minutes, reason, ++ 'Active', 'Active', version - 1, $old, NULL, $old, NULL ++ FROM links WHERE id = $completed_id; ++ UPDATE links SET updated_at = $old; ++ """; ++ command.Parameters.AddWithValue("$history_id", Guid.NewGuid().ToString()); ++ command.Parameters.AddWithValue("$completed_id", completed.Id); ++ command.Parameters.AddWithValue("$old", now.AddDays(-10).ToString("O")); ++ await command.ExecuteNonQueryAsync(cancellationToken); ++ } ++ ++ var result = await store.MaintainAsync(now, cancellationToken); ++ var remaining = await store.ListLinksAsync(cancellationToken); ++ ++ Assert.Equal(2, result.LinksDeleted); ++ Assert.Contains(remaining, link => link.Id == active.Id && link.ActualState == "Active"); ++ Assert.Contains(remaining, link => link.Id == drift.Id && link.ActualState == "Failed"); ++ Assert.DoesNotContain(remaining, link => link.TargetNodeId == "completed"); ++ Assert.DoesNotContain(await store.ListEffectiveLinksAsync(cancellationToken), ++ link => link.TargetNodeId == "completed"); ++ } ++ + [Fact] + public async Task ExpiredProvisioningJobsAreCancelledOrRequireReconciliationAndCanRetry() + { +@@ -201,7 +257,8 @@ public sealed class ControlMaintenanceTests : IAsyncDisposable + BackupDirectory = Path.Combine(_directory, "backups"), + MetricRetentionHours = 24, + IdempotencyRetentionHours = 1, +- AuditRetentionDays = 1 ++ AuditRetentionDays = 1, ++ LinkRetentionDays = 1 + }; + return (new ControlStore(Options.Create(options)), options); + } +@@ -224,12 +281,19 @@ public sealed class ControlMaintenanceTests : IAsyncDisposable + + private sealed class RecordingPolicyApplier : ILinkPolicyApplier + { ++ private LinkRule? _connectedRule; + public bool FailDisconnect { get; set; } + public int DisconnectCalls { get; private set; } + ++ public Task> ListRulesAsync(CancellationToken cancellationToken) ++ => Task.FromResult>(IsConnected && _connectedRule is not null ++ ? [_connectedRule] ++ : []); ++ + public Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken) + { + IsConnected = true; ++ _connectedRule = new LinkRule(link.SourceNodeId, link.TargetNodeId, link.Protocol, link.Port); + return Task.CompletedTask; + } + +@@ -244,6 +308,13 @@ public sealed class ControlMaintenanceTests : IAsyncDisposable + return Task.CompletedTask; + } + ++ public Task ApplyDisconnectAsync(LinkRule rule, CancellationToken cancellationToken) ++ { ++ DisconnectCalls++; ++ IsConnected = false; ++ return Task.CompletedTask; ++ } ++ + private bool IsConnected { get; set; } + + public Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) +diff --git a/tests/ServerMonitorManager.Control.Tests/ControlStoreTests.cs b/tests/ServerMonitorManager.Control.Tests/ControlStoreTests.cs +index d517b7b..2a494b9 100644 +--- a/tests/ServerMonitorManager.Control.Tests/ControlStoreTests.cs ++++ b/tests/ServerMonitorManager.Control.Tests/ControlStoreTests.cs +@@ -462,7 +462,8 @@ public sealed class ControlStoreTests : IAsyncDisposable + + applier.IsConnected = false; + var activeResult = await service.ReconcileLinksForNodeAsync("home", cancellationToken); +- Assert.Equal(new LinkReconciliationResult(1, 0), activeResult); ++ Assert.Equal((1, 1, 0, 0), ++ (activeResult.Examined, activeResult.Converged, activeResult.Failed, activeResult.Deferred)); + Assert.Equal(3, applier.ConnectCalls); + + var latest = (await store.ListEffectiveLinksForNodeAsync("home", cancellationToken)).Single(); +@@ -475,7 +476,8 @@ public sealed class ControlStoreTests : IAsyncDisposable + + var disabledResult = await service.ReconcileLinksForNodeAsync("home", cancellationToken); + +- Assert.Equal(new LinkReconciliationResult(1, 0), disabledResult); ++ Assert.Equal((1, 1, 0, 0), ++ (disabledResult.Examined, disabledResult.Converged, disabledResult.Failed, disabledResult.Deferred)); + Assert.Equal(beforeReconnect, applier.DisconnectCalls); + var persisted = (await store.ListEffectiveLinksForNodeAsync("home", cancellationToken)).Single(); + Assert.Equal("Disabled", persisted.DesiredState); +@@ -512,7 +514,8 @@ public sealed class ControlStoreTests : IAsyncDisposable + applier.FailDisconnect = true; + applier.IsConnected = true; + var failed = await service.ReconcileLinksForNodeAsync("home", cancellationToken); +- Assert.Equal(new LinkReconciliationResult(1, 1), failed); ++ Assert.Equal((1, 0, 1, 0), ++ (failed.Examined, failed.Converged, failed.Failed, failed.Deferred)); + var retry = await store.RecordHeartbeatAsync( + heartbeat with + { +@@ -525,7 +528,8 @@ public sealed class ControlStoreTests : IAsyncDisposable + + applier.FailDisconnect = false; + var succeeded = await service.ReconcileLinksForNodeAsync("home", cancellationToken); +- Assert.Equal(new LinkReconciliationResult(1, 0), succeeded); ++ Assert.Equal((1, 1, 0, 0), ++ (succeeded.Examined, succeeded.Converged, succeeded.Failed, succeeded.Deferred)); + await store.CompleteAgentReconciliationAsync("home", cancellationToken); + var completed = await store.RecordHeartbeatAsync( + heartbeat with +@@ -964,12 +968,17 @@ public sealed class ControlStoreTests : IAsyncDisposable + + private sealed class CheckingPolicyApplier(ControlStore store) : ILinkPolicyApplier + { ++ private LinkRule? _connectedRule; + public int ConnectCalls { get; private set; } + public int DisconnectCalls { get; private set; } + ++ public Task> ListRulesAsync(CancellationToken cancellationToken) ++ => Task.FromResult>(_connectedRule is null ? [] : [_connectedRule]); ++ + public async Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken) + { + ConnectCalls++; ++ _connectedRule = new LinkRule(link.SourceNodeId, link.TargetNodeId, link.Protocol, link.Port); + var persisted = Assert.Single(await store.ListLinksAsync(cancellationToken)); + Assert.Equal(link.Id, persisted.Id); + Assert.Equal("Active", persisted.DesiredState); +@@ -979,28 +988,45 @@ public sealed class ControlStoreTests : IAsyncDisposable + public async Task ApplyDisconnectAsync(LinkPolicy link, CancellationToken cancellationToken) + { + DisconnectCalls++; ++ _connectedRule = null; + var persisted = Assert.Single(await store.ListLinksAsync(cancellationToken)); + Assert.Equal(link.Id, persisted.Id); + Assert.Equal("Disabled", persisted.DesiredState); + Assert.Equal("Disconnecting", persisted.ActualState); + } + ++ public Task ApplyDisconnectAsync(LinkRule rule, CancellationToken cancellationToken) ++ { ++ DisconnectCalls++; ++ _connectedRule = null; ++ return Task.CompletedTask; ++ } ++ + public Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) +- => Task.FromResult(ConnectCalls > DisconnectCalls); ++ => Task.FromResult(_connectedRule is not null); + } + + private sealed class CountingPolicyApplier : ILinkPolicyApplier + { ++ private LinkRule? _lastRule; + public int ConnectCalls { get; private set; } + public int DisconnectCalls { get; private set; } + public bool FailDisconnect { get; set; } + public bool ConnectLeavesRuleAbsent { get; set; } + public bool IsConnected { get; set; } + ++ public Task> ListRulesAsync(CancellationToken cancellationToken) ++ => Task.FromResult>(IsConnected && _lastRule is not null ++ ? [_lastRule] ++ : []); ++ + public Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken) + { + ConnectCalls++; + IsConnected = !ConnectLeavesRuleAbsent; ++ _lastRule = IsConnected ++ ? new LinkRule(link.SourceNodeId, link.TargetNodeId, link.Protocol, link.Port) ++ : null; + return Task.CompletedTask; + } + +@@ -1015,6 +1041,13 @@ public sealed class ControlStoreTests : IAsyncDisposable + return Task.CompletedTask; + } + ++ public Task ApplyDisconnectAsync(LinkRule rule, CancellationToken cancellationToken) ++ { ++ DisconnectCalls++; ++ IsConnected = false; ++ return Task.CompletedTask; ++ } ++ + public Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) + => Task.FromResult(IsConnected); + } +@@ -1023,10 +1056,16 @@ public sealed class ControlStoreTests : IAsyncDisposable + { + private TaskCompletionSource _connectStarted = CompletedSource(); + private TaskCompletionSource _releaseConnect = CompletedSource(); ++ private LinkRule? _lastRule; + + public bool IsConnected { get; set; } + public Task ConnectStarted => _connectStarted.Task; + ++ public Task> ListRulesAsync(CancellationToken cancellationToken) ++ => Task.FromResult>(IsConnected && _lastRule is not null ++ ? [_lastRule] ++ : []); ++ + public void BlockNextConnect() + { + _connectStarted = NewSource(); +@@ -1040,6 +1079,7 @@ public sealed class ControlStoreTests : IAsyncDisposable + _connectStarted.TrySetResult(); + await _releaseConnect.Task.WaitAsync(cancellationToken); + IsConnected = true; ++ _lastRule = new LinkRule(link.SourceNodeId, link.TargetNodeId, link.Protocol, link.Port); + } + + public Task ApplyDisconnectAsync(LinkPolicy link, CancellationToken cancellationToken) +@@ -1048,6 +1088,12 @@ public sealed class ControlStoreTests : IAsyncDisposable + return Task.CompletedTask; + } + ++ public Task ApplyDisconnectAsync(LinkRule rule, CancellationToken cancellationToken) ++ { ++ IsConnected = false; ++ return Task.CompletedTask; ++ } ++ + public Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) + => Task.FromResult(IsConnected); + +diff --git a/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs b/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs +index 9e217ca..51dee5b 100644 +--- a/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs ++++ b/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs +@@ -28,6 +28,7 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + var failureMarkerPath = Path.Combine(_directory, "fail-disconnect"); + var firewallUnavailableMarkerPath = Path.Combine(_directory, "firewall-unavailable"); + var connectedMarkerPath = Path.Combine(_directory, "connected"); ++ var orphanMarkerPath = Path.Combine(_directory, "orphan-present"); + var invocationLogPath = Path.Combine(_directory, "helper.log"); + await WriteExecutableAsync( + sudoPath, +@@ -56,7 +57,23 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + exit 23 + fi + if [ "${1:-}" = "link-disconnect" ]; then +- rm -f '{{ShellQuote(connectedMarkerPath)}}' ++ if [ "${2:-}" = "orphan" ]; then ++ rm -f '{{ShellQuote(orphanMarkerPath)}}' ++ else ++ rm -f '{{ShellQuote(connectedMarkerPath)}}' ++ fi ++ fi ++ if [ "${1:-}" = "link-list" ]; then ++ if [ -f '{{ShellQuote(firewallUnavailableMarkerPath)}}' ]; then ++ echo "mesh.firewall-unavailable" >&2 ++ exit 79 ++ fi ++ if [ -f '{{ShellQuote(connectedMarkerPath)}}' ]; then ++ printf 'ai-agent\thome\ttcp\t22\n' ++ fi ++ if [ -f '{{ShellQuote(orphanMarkerPath)}}' ]; then ++ printf 'orphan\tmissing\ttcp\t23\n' ++ fi + fi + if [ "${1:-}" = "link-status" ]; then + if [ -f '{{ShellQuote(firewallUnavailableMarkerPath)}}' ]; then +@@ -91,19 +108,43 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + Assert.Equal("Active", (await store.GetLinkAsync(active.Id, cancellationToken))!.ActualState); + Assert.Equal( + [ +- "link-status ai-agent home tcp 22", ++ "link-list", + "link-connect ai-agent home tcp 22 60", +- "link-status ai-agent home tcp 22" ++ "link-list" + ], + await File.ReadAllLinesAsync(invocationLogPath, cancellationToken)); + ++ await File.WriteAllTextAsync(invocationLogPath, string.Empty, cancellationToken); ++ var noDrift = await service.ReconcileAllAsync(cancellationToken); ++ Assert.Equal((1, 1, 0), (noDrift.Examined, noDrift.Converged, noDrift.Failed)); ++ Assert.Equal(["link-list"], await File.ReadAllLinesAsync(invocationLogPath, cancellationToken)); ++ ++ await File.WriteAllTextAsync(invocationLogPath, string.Empty, cancellationToken); + await File.WriteAllTextAsync(firewallUnavailableMarkerPath, "fail", cancellationToken); + var unavailable = await service.ReconcileAllAsync(cancellationToken); + Assert.True(unavailable.FirewallUnavailable); ++ Assert.Equal(["link-list"], await File.ReadAllLinesAsync(invocationLogPath, cancellationToken)); + Assert.Equal(LinkService.FirewallUnavailableCode, + (await store.GetLinkAsync(active.Id, cancellationToken))!.LastError); + File.Delete(firewallUnavailableMarkerPath); + Assert.False((await service.ReconcileAllAsync(cancellationToken)).FirewallUnavailable); ++ File.Delete(connectedMarkerPath); ++ await File.WriteAllTextAsync(invocationLogPath, string.Empty, cancellationToken); ++ ++ var orphanStore = new ControlStore(Options.Create(new ControlOptions ++ { ++ DatabasePath = Path.Combine(_directory, "orphan-control.db"), ++ CertificateAuthorityPath = Path.Combine(_directory, "unused.pfx") ++ })); ++ await orphanStore.InitializeAsync(cancellationToken); ++ var orphanService = CreateLinkService(orphanStore, sudoPath, helperPath); ++ await File.WriteAllTextAsync(orphanMarkerPath, "present", cancellationToken); ++ var orphanResult = await orphanService.ReconcileAllAsync(cancellationToken); ++ Assert.Equal((1, 1, 0), (orphanResult.Examined, orphanResult.Converged, orphanResult.Failed)); ++ Assert.Equal( ++ ["link-list", "link-disconnect orphan missing tcp 23", "link-list"], ++ await File.ReadAllLinesAsync(invocationLogPath, cancellationToken)); ++ await File.WriteAllTextAsync(connectedMarkerPath, "connected", cancellationToken); + await File.WriteAllTextAsync(invocationLogPath, string.Empty, cancellationToken); + + await File.WriteAllTextAsync(failureMarkerPath, "fail", cancellationToken); +@@ -122,7 +163,9 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + var restartedService = CreateLinkService(restartedStore, sudoPath, helperPath); + var failedReconciliation = await restartedService.ReconcileLinksForNodeAsync( + "home", cancellationToken); +- Assert.Equal(new LinkReconciliationResult(1, 1), failedReconciliation); ++ Assert.Equal((1, 0, 1, 0), ++ (failedReconciliation.Examined, failedReconciliation.Converged, ++ failedReconciliation.Failed, failedReconciliation.Deferred)); + + File.Delete(failureMarkerPath); + var secondRestartStore = CreateStore(); +@@ -130,7 +173,9 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + var secondRestartService = CreateLinkService(secondRestartStore, sudoPath, helperPath); + var successfulReconciliation = await secondRestartService.ReconcileLinksForNodeAsync( + "home", cancellationToken); +- Assert.Equal(new LinkReconciliationResult(1, 0), successfulReconciliation); ++ Assert.Equal((1, 1, 0, 0), ++ (successfulReconciliation.Examined, successfulReconciliation.Converged, ++ successfulReconciliation.Failed, successfulReconciliation.Deferred)); + var persisted = Assert.Single(await secondRestartStore.ListEffectiveLinksForNodeAsync( + "home", cancellationToken)); + Assert.Equal("Disabled", persisted.DesiredState); +@@ -138,13 +183,13 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + + var invocations = await File.ReadAllLinesAsync(invocationLogPath, cancellationToken); + Assert.Equal(7, invocations.Length); +- Assert.Equal("link-status ai-agent home tcp 22", invocations[0]); ++ Assert.Equal("link-list", invocations[0]); + Assert.Equal("link-disconnect ai-agent home tcp 22", invocations[1]); +- Assert.Equal("link-status ai-agent home tcp 22", invocations[2]); ++ Assert.Equal("link-list", invocations[2]); + Assert.Equal("link-disconnect ai-agent home tcp 22", invocations[3]); +- Assert.Equal("link-status ai-agent home tcp 22", invocations[4]); ++ Assert.Equal("link-list", invocations[4]); + Assert.Equal("link-disconnect ai-agent home tcp 22", invocations[5]); +- Assert.Equal("link-status ai-agent home tcp 22", invocations[6]); ++ Assert.Equal("link-list", invocations[6]); + } + + public ValueTask DisposeAsync() +diff --git a/tests/ServerMonitorManager.Control.Tests/LinkReconciliationTests.cs b/tests/ServerMonitorManager.Control.Tests/LinkReconciliationTests.cs +index ceee620..7d40f37 100644 +--- a/tests/ServerMonitorManager.Control.Tests/LinkReconciliationTests.cs ++++ b/tests/ServerMonitorManager.Control.Tests/LinkReconciliationTests.cs +@@ -1,6 +1,8 @@ + using Microsoft.Data.Sqlite; ++using Microsoft.Extensions.Logging; + using Microsoft.Extensions.Logging.Abstractions; + using Microsoft.Extensions.Options; ++using System.Text.Json; + using ServerMonitorManager.Control; + using ServerMonitorManager.Core; + using Xunit; +@@ -12,6 +14,20 @@ public sealed class LinkReconciliationTests : IAsyncDisposable + private readonly string _directory = Path.Combine( + Path.GetTempPath(), $"smm-link-reconciliation-{Guid.NewGuid():N}"); + ++ [Fact] ++ public void ReconciliationResultsRejectNonExhaustiveClassificationsWithIds() ++ { ++ var full = Assert.Throws(() => ++ new LinkFullReconciliationResult(6, 2, 2, 1, false, ["failed"], ["deferred"])); ++ Assert.Contains("examined=6", full.Message, StringComparison.Ordinal); ++ Assert.Contains("failed IDs=[failed]", full.Message, StringComparison.Ordinal); ++ ++ var node = Assert.Throws(() => ++ new LinkReconciliationResult(3, 1, 0, 1, [], ["deferred"])); ++ Assert.Contains("examined=3", node.Message, StringComparison.Ordinal); ++ Assert.Contains("deferred IDs=[deferred]", node.Message, StringComparison.Ordinal); ++ } ++ + [Fact] + public async Task AllPolicyPassReappliesErasedActiveRulesWithoutHeartbeat() + { +@@ -54,10 +70,323 @@ public sealed class LinkReconciliationTests : IAsyncDisposable + await service.ReconcileAllAsync(cancellationToken); + var connects = applier.ConnectCalls; + var disconnects = applier.DisconnectCalls; ++ var privilegedBefore = applier.PrivilegedCalls; + await service.ReconcileAllAsync(cancellationToken); + + Assert.Equal(connects, applier.ConnectCalls); + Assert.Equal(disconnects, applier.DisconnectCalls); ++ Assert.Equal(1, applier.PrivilegedCalls - privilegedBefore); ++ } ++ ++ [Fact] ++ public async Task FullPassWithMultipleMutationsUsesOneInitialAndOneFinalList() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "A011", cancellationToken); ++ var applier = new RecordingPolicyApplier(); ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ for (var index = 1; index <= 4; index++) ++ { ++ var target = $"target-{index}"; ++ await EnrollAgentAsync(store, target, $"B0{index}2", cancellationToken); ++ await service.CreateAsync(CreateRequest(target), "operator", cancellationToken); ++ } ++ applier.EraseRules(); ++ var listsBefore = applier.ListCalls; ++ var connectsBefore = applier.ConnectCalls; ++ ++ var result = await service.ReconcileAllAsync(cancellationToken); ++ ++ Assert.Equal((4, 4, 0, 0), ++ (result.Examined, result.Converged, result.Failed, result.Deferred)); ++ Assert.Equal(2, applier.ListCalls - listsBefore); ++ Assert.Equal(4, applier.ConnectCalls - connectsBefore); ++ } ++ ++ [Fact] ++ public async Task BatchFinalizationDoesNotFinalizeOrPublishStalePolicyVersion() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "A021", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "B032", cancellationToken); ++ var broker = new ControlEventBroker(); ++ using var subscription = broker.Subscribe(); ++ var applier = new RecordingPolicyApplier(); ++ var service = new LinkService(store, applier, broker); ++ var link = await service.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ applier.EraseRules(); ++ while (subscription.Reader.TryRead(out _)) { } ++ var listsBefore = applier.ListCalls; ++ applier.PauseOnListCall = listsBefore + 2; ++ ++ var pass = service.ReconcileAllAsync(cancellationToken); ++ await applier.PausedListObserved.Task.WaitAsync(cancellationToken); ++ var disabled = await store.BeginDisableLinkMutationAsync( ++ link.Id, ++ new LinkPolicyDisableRequest(Guid.NewGuid().ToString()), ++ "operator", ++ cancellationToken); ++ Assert.NotNull(disabled); ++ Assert.True(disabled.Link.Version > link.Version); ++ applier.ReleasePausedList.TrySetResult(); ++ ++ var result = await pass; ++ ++ Assert.Equal((1, 0, 1, 0), ++ (result.Examined, result.Converged, result.Failed, result.Deferred)); ++ Assert.Equal(2, applier.ListCalls - listsBefore); ++ var persisted = Assert.IsType(await store.GetLinkAsync(link.Id, cancellationToken)); ++ Assert.Equal("Disabled", persisted.DesiredState); ++ Assert.Equal("Disconnecting", persisted.ActualState); ++ var eventTypes = new List(); ++ while (subscription.Reader.TryRead(out var controlEvent)) ++ { ++ eventTypes.Add(controlEvent.Type); ++ } ++ Assert.DoesNotContain("link.active", eventTypes); ++ Assert.DoesNotContain("link.reapplied", eventTypes); ++ } ++ ++ [Fact] ++ public async Task FactualOrphanWithoutDatabasePolicyIsRemovedAndAudited() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ var broker = new ControlEventBroker(); ++ using var subscription = broker.Subscribe(); ++ var applier = new RecordingPolicyApplier(); ++ var orphan = new LinkRule("source", "missing", "tcp", 22); ++ applier.InjectRule(orphan); ++ var service = new LinkService(store, applier, broker); ++ ++ var result = await service.ReconcileAllAsync(cancellationToken); ++ ++ Assert.Equal((1, 1, 0), (result.Examined, result.Converged, result.Failed)); ++ Assert.Equal(1, applier.DisconnectCalls); ++ Assert.DoesNotContain(orphan, await applier.ListRulesAsync(cancellationToken)); ++ var eventTypes = new List(); ++ while (subscription.Reader.TryRead(out var controlEvent)) ++ { ++ eventTypes.Add(controlEvent.Type); ++ } ++ Assert.Contains("link.orphan-removed", eventTypes); ++ ++ await using var connection = new SqliteConnection($"Data Source={Path.Combine(_directory, "control.db")}"); ++ await connection.OpenAsync(cancellationToken); ++ var command = connection.CreateCommand(); ++ command.CommandText = """ ++ SELECT details_json FROM audit ++ WHERE action = 'link.orphan-removed' ++ ORDER BY sequence DESC LIMIT 1; ++ """; ++ var payload = Assert.IsType(await command.ExecuteScalarAsync(cancellationToken)); ++ using var document = JsonDocument.Parse(payload); ++ Assert.Equal("source", document.RootElement.GetProperty("sourceNodeId").GetString()); ++ Assert.Equal("missing", document.RootElement.GetProperty("targetNodeId").GetString()); ++ Assert.Equal("tcp", document.RootElement.GetProperty("protocol").GetString()); ++ Assert.Equal(22, document.RootElement.GetProperty("port").GetInt32()); ++ } ++ ++ [Fact] ++ public async Task DatabaseLessOrphanIsFailedWhenDisconnectReportsSuccessButRuleRemains() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ var rule = new LinkRule("source", "missing", "tcp", 22); ++ var applier = new RecordingPolicyApplier { DisconnectLeavesRules = true }; ++ applier.InjectRule(rule); ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ ++ var result = await service.ReconcileAllAsync(cancellationToken); ++ ++ Assert.Equal((1, 0, 1), (result.Examined, result.Converged, result.Failed)); ++ Assert.Contains(rule, await applier.ListRulesAsync(cancellationToken)); ++ Assert.Contains(result.FailedPolicyIds, id => id.StartsWith("orphan:", StringComparison.Ordinal)); ++ } ++ ++ [Fact] ++ public async Task PersistedDisabledCleanupDoesNotProbeMissingNodeStatus() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "D311", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "D322", cancellationToken); ++ var applier = new RecordingPolicyApplier(); ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ var link = await service.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ await service.DisableAsync( ++ link.Id, new LinkPolicyDisableRequest(Guid.NewGuid().ToString()), "operator", cancellationToken); ++ applier.InjectRule(new LinkRule("source", "target-one", "tcp", 22)); ++ applier.ThrowNodeNotActivatedOnStatus = true; ++ ++ var result = await service.ReconcileAllAsync(cancellationToken); ++ ++ Assert.Equal((1, 1, 0), (result.Examined, result.Converged, result.Failed)); ++ Assert.Equal("Disabled", (await store.GetLinkAsync(link.Id, cancellationToken))!.ActualState); ++ } ++ ++ [Fact] ++ public async Task ExactPostMutationCountRejectsDuplicateActiveRule() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "D411", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "D422", cancellationToken); ++ var applier = new RecordingPolicyApplier { ConnectAddsDuplicate = true }; ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ ++ var link = await service.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ ++ Assert.Equal("Failed", link.ActualState); ++ Assert.Contains("exactly 1", link.LastError, StringComparison.Ordinal); ++ } ++ ++ [Fact] ++ public async Task MarkerIsRetainedWhenPostMutationFactCannotBeVerified() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ var rule = new LinkRule("source", "missing", "tcp", 22); ++ var applier = new RecordingPolicyApplier ++ { ++ DisconnectLeavesRules = true, ++ ReconciliationRequest = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa" ++ }; ++ applier.InjectRule(rule); ++ var links = new LinkService(store, applier, new ControlEventBroker()); ++ var background = CreateBackgroundService( ++ links, ++ applier, ++ new TestTimeProvider(DateTimeOffset.Parse("2026-08-03T12:00:00Z"))); ++ ++ var result = await background.RunOnceAsync(cancellationToken); ++ ++ Assert.NotNull(result); ++ Assert.Equal((1, 0, 1), (result.Examined, result.Converged, result.Failed)); ++ Assert.Equal(0, applier.CompleteReconciliationCalls); ++ Assert.NotNull(applier.ReconciliationRequest); ++ } ++ ++ [Fact] ++ public async Task MixedPassClassifiesEveryExaminedPolicyExactlyOnce() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "C011", cancellationToken); ++ var applier = new RecordingPolicyApplier(); ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ var links = new List(); ++ for (var index = 1; index <= 6; index++) ++ { ++ var target = $"mixed-{index}"; ++ await EnrollAgentAsync(store, target, $"C0{index}2", cancellationToken); ++ links.Add(await service.CreateAsync(CreateRequest(target), "operator", cancellationToken)); ++ } ++ applier.EraseRules(); ++ applier.InjectRule(ToRule(links[0])); ++ applier.InjectRule(ToRule(links[1])); ++ applier.FailedMutationRules.Add(ToRule(links[2])); ++ applier.FailedMutationRules.Add(ToRule(links[3])); ++ applier.DeferredConnectRules.Add(ToRule(links[4])); ++ applier.DeferredConnectRules.Add(ToRule(links[5])); ++ ++ var result = await service.ReconcileAllAsync(cancellationToken); ++ ++ Assert.Equal(6, result.Examined); ++ Assert.Equal((2, 2, 2), (result.Converged, result.Failed, result.Deferred)); ++ Assert.Equal(result.Examined, result.Converged + result.Failed + result.Deferred); ++ Assert.Equal(2, result.FailedPolicyIds.Count); ++ Assert.Equal(2, result.DeferredPolicyIds.Count); ++ Assert.Empty(result.FailedPolicyIds.Intersect(result.DeferredPolicyIds)); ++ } ++ ++ [Fact] ++ public async Task DeferredPoliciesConsumeMarkerAndDoNotCreatePromptHotLoop() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "D011", cancellationToken); ++ await EnrollAgentAsync(store, "reserved", "D022", cancellationToken); ++ var applier = new RecordingPolicyApplier ++ { ++ ReconciliationRequest = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa" ++ }; ++ var links = new LinkService(store, applier, new ControlEventBroker()); ++ var policy = await links.CreateAsync(CreateRequest("reserved"), "operator", cancellationToken); ++ applier.EraseRules(); ++ applier.DeferredConnectRules.Add(ToRule(policy)); ++ var time = new TestTimeProvider(DateTimeOffset.Parse("2026-08-04T12:00:00Z")); ++ var logger = new TestLogger(); ++ var background = CreateBackgroundService(links, applier, time, logger); ++ ++ for (var index = 0; index < 10; index++) ++ { ++ var result = await background.RunOnceAsync(cancellationToken); ++ Assert.NotNull(result); ++ Assert.Equal((1, 0, 0, 1), ++ (result.Examined, result.Converged, result.Failed, result.Deferred)); ++ Assert.Equal([policy.Id], result.DeferredPolicyIds); ++ if (index == 0) ++ { ++ Assert.Null(applier.ReconciliationRequest); ++ Assert.Equal(1, applier.CompleteReconciliationCalls); ++ Assert.Null(await background.RunOnceAsync(cancellationToken)); ++ } ++ time.Advance(TimeSpan.FromSeconds(30)); ++ } ++ ++ Assert.DoesNotContain(logger.Warnings, ++ warning => warning.Contains("prompt exhausted", StringComparison.Ordinal)); ++ } ++ ++ [Fact] ++ public async Task DuplicateManagedRulesCollapseForActiveAndAreRemovedForDisabled() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "D111", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "D222", cancellationToken); ++ var applier = new RecordingPolicyApplier(); ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ var link = await service.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ applier.InjectRule(new LinkRule("source", "target-one", "tcp", 22)); ++ ++ await service.ReconcileAllAsync(cancellationToken); ++ Assert.Equal(1, applier.RuleCount(link)); ++ ++ await service.DisableAsync( ++ link.Id, new LinkPolicyDisableRequest(Guid.NewGuid().ToString()), "operator", cancellationToken); ++ applier.InjectRule(new LinkRule("source", "target-one", "tcp", 22), 2); ++ await service.ReconcileAllAsync(cancellationToken); ++ Assert.Equal(0, applier.RuleCount(link)); ++ } ++ ++ [Fact] ++ public async Task ForeignFirewallRulesAreOutsideManagedListingAndRemainUntouched() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ var applier = new RecordingPolicyApplier { ForeignRuleCount = 1 }; ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ ++ var result = await service.ReconcileAllAsync(cancellationToken); ++ ++ Assert.Equal(0, result.Examined); ++ Assert.Equal(1, applier.ForeignRuleCount); ++ Assert.Equal(0, applier.DisconnectCalls); + } + + [Fact] +@@ -73,15 +402,17 @@ public sealed class LinkReconciliationTests : IAsyncDisposable + var applier = new RecordingPolicyApplier(); + var service = new LinkService(store, applier, broker); + var active = await service.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); +- await store.BeginDisableLinkMutationAsync( ++ await service.DisableAsync( + active.Id, + new LinkPolicyDisableRequest(Guid.NewGuid().ToString()), + "operator", + cancellationToken); ++ var disconnectsBefore = applier.DisconnectCalls; ++ applier.InjectRule(new LinkRule("source", "target-one", "tcp", 22)); + + await service.ReconcileAllAsync(cancellationToken); + +- Assert.Equal(1, applier.DisconnectCalls); ++ Assert.Equal(disconnectsBefore + 1, applier.DisconnectCalls); + Assert.Equal("Disabled", (await store.GetLinkAsync(active.Id, cancellationToken))!.ActualState); + var eventTypes = new List(); + while (subscription.Reader.TryRead(out var controlEvent)) +@@ -138,6 +469,74 @@ public sealed class LinkReconciliationTests : IAsyncDisposable + Assert.Single(eventTypes, eventType => eventType == LinkService.FirewallAvailableCode); + } + ++ [Fact] ++ public async Task FirewallUnavailableDuringFinalBatchListMarksWholePassAndPublishesOneSharedEvent() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "F111", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "F222", cancellationToken); ++ await EnrollAgentAsync(store, "target-two", "F333", cancellationToken); ++ var broker = new ControlEventBroker(); ++ using var subscription = broker.Subscribe(); ++ var applier = new RecordingPolicyApplier(); ++ var service = new LinkService(store, applier, broker); ++ var first = await service.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ var second = await service.CreateAsync(CreateRequest("target-two"), "operator", cancellationToken); ++ applier.EraseRules(); ++ applier.UnavailableOnNextPostMutationList = true; ++ while (subscription.Reader.TryRead(out _)) { } ++ ++ var result = await service.ReconcileAllAsync(cancellationToken); ++ ++ Assert.True(result.FirewallUnavailable); ++ Assert.Equal(1, applier.MutationCalls(first)); ++ Assert.Equal(1, applier.MutationCalls(second)); ++ Assert.All(await store.ListEffectiveLinksAsync(cancellationToken), link => ++ { ++ Assert.Equal("Partial", link.ActualState); ++ Assert.Equal(LinkService.FirewallUnavailableCode, link.LastError); ++ }); ++ var eventTypes = new List(); ++ while (subscription.Reader.TryRead(out var controlEvent)) ++ { ++ eventTypes.Add(controlEvent.Type); ++ } ++ Assert.Single(eventTypes, eventType => eventType == LinkService.FirewallUnavailableCode); ++ Assert.Equal(2, eventTypes.Count(eventType => eventType == "link.reconciling")); ++ Assert.DoesNotContain("link.reapplied", eventTypes); ++ Assert.DoesNotContain("link.orphan-removed", eventTypes); ++ } ++ ++ [Fact] ++ public async Task FactualOrphanAdoptedAsActiveUnderNodeLocksIsNotRemoved() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "F444", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "F555", cancellationToken); ++ var applier = new RecordingPolicyApplier(); ++ var rule = new LinkRule("source", "target-one", "tcp", 22); ++ applier.InjectRule(rule); ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ var nodeLease = await service.AcquireNodeLocksAsync( ++ [rule.SourceNodeId, rule.TargetNodeId], cancellationToken); ++ var pass = service.ReconcileAllAsync(cancellationToken); ++ await applier.ListObserved.Task.WaitAsync(cancellationToken); ++ var adopted = (await store.CreateLinkMutationAsync( ++ CreateRequest("target-one"), "operator", cancellationToken)).Link; ++ nodeLease.Dispose(); ++ ++ var result = await pass; ++ ++ Assert.Equal(0, result.Failed); ++ Assert.Equal("Active", (await store.GetLinkAsync(adopted.Id, cancellationToken))!.ActualState); ++ Assert.Equal(0, applier.DisconnectCalls); ++ Assert.Equal(1, applier.RuleCount(adopted)); ++ } ++ + [Fact] + public async Task MarkerCreatedAfterNormalPassTriggersPromptAdditionalPass() + { +@@ -193,6 +592,88 @@ public sealed class LinkReconciliationTests : IAsyncDisposable + Assert.Null(applier.ReconciliationRequest); + } + ++ [Fact] ++ public async Task FailingMarkerPassIsPromptedThreeTimesThenUsesRegularThrottle() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "A477", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "B588", cancellationToken); ++ var applier = new RecordingPolicyApplier ++ { ++ ReconciliationRequest = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa", ++ FailMutations = true ++ }; ++ var links = new LinkService(store, applier, new ControlEventBroker()); ++ var link = await links.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ applier.EraseRules(); ++ var time = new TestTimeProvider(DateTimeOffset.Parse("2026-08-03T12:00:00Z")); ++ var logger = new TestLogger(); ++ var background = CreateBackgroundService(links, applier, time, logger); ++ ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.Null(await background.RunOnceAsync(cancellationToken)); ++ Assert.NotNull(applier.ReconciliationRequest); ++ var warning = Assert.Single(logger.Warnings, message => message.Contains("prompt exhausted", StringComparison.Ordinal)); ++ Assert.Contains(link.Id, warning, StringComparison.Ordinal); ++ ++ time.Advance(TimeSpan.FromSeconds(30)); ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.Single(logger.Warnings, message => message.Contains("prompt exhausted", StringComparison.Ordinal)); ++ } ++ ++ [Fact] ++ public async Task MarkerCompletionFailuresAreAlsoThrottledAndMarkerIsRetained() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ var applier = new RecordingPolicyApplier ++ { ++ ReconciliationRequest = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa", ++ FailCompletion = true ++ }; ++ var links = new LinkService(store, applier, new ControlEventBroker()); ++ var time = new TestTimeProvider(DateTimeOffset.Parse("2026-08-03T12:00:00Z")); ++ var background = CreateBackgroundService(links, applier, time); ++ ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.Null(await background.RunOnceAsync(cancellationToken)); ++ Assert.NotNull(applier.ReconciliationRequest); ++ Assert.Equal(3, applier.CompleteReconciliationCalls); ++ } ++ ++ [Fact] ++ public async Task GenericMarkerPassFailuresArePromptedThreeTimesThenUseRegularThrottle() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ var applier = new RecordingPolicyApplier ++ { ++ ReconciliationRequest = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa", ++ FailList = true ++ }; ++ var links = new LinkService(store, applier, new ControlEventBroker()); ++ var time = new TestTimeProvider(DateTimeOffset.Parse("2026-08-03T12:00:00Z")); ++ var background = CreateBackgroundService(links, applier, time); ++ ++ await Assert.ThrowsAsync(() => background.RunOnceAsync(cancellationToken)); ++ await Assert.ThrowsAsync(() => background.RunOnceAsync(cancellationToken)); ++ await Assert.ThrowsAsync(() => background.RunOnceAsync(cancellationToken)); ++ Assert.Null(await background.RunOnceAsync(cancellationToken)); ++ Assert.NotNull(applier.ReconciliationRequest); ++ Assert.Equal(3, applier.ListCalls); ++ ++ time.Advance(TimeSpan.FromSeconds(30)); ++ await Assert.ThrowsAsync(() => background.RunOnceAsync(cancellationToken)); ++ } ++ + [Fact] + public async Task BackgroundPassRetainsMarkerWhenFirewallIsUnavailable() + { +@@ -250,13 +731,14 @@ public sealed class LinkReconciliationTests : IAsyncDisposable + private static LinkReconciliationBackgroundService CreateBackgroundService( + LinkService links, + ILinkPolicyApplier applier, +- TimeProvider timeProvider) ++ TimeProvider timeProvider, ++ ILogger? logger = null) + => new( + links, + applier, + Options.Create(new ControlOptions { LinkReconciliationSeconds = 30 }), + timeProvider, +- NullLogger.Instance); ++ logger ?? NullLogger.Instance); + + private static async Task EnrollAgentAsync( + ControlStore store, +@@ -273,39 +755,130 @@ public sealed class LinkReconciliationTests : IAsyncDisposable + + private sealed class RecordingPolicyApplier : ILinkPolicyApplier + { +- private readonly HashSet _connected = []; ++ private readonly List _rules = []; ++ private readonly Dictionary _mutationCalls = []; ++ public TaskCompletionSource ListObserved { get; } = new( ++ TaskCreationOptions.RunContinuationsAsynchronously); ++ public TaskCompletionSource PausedListObserved { get; } = new( ++ TaskCreationOptions.RunContinuationsAsynchronously); ++ public TaskCompletionSource ReleasePausedList { get; } = new( ++ TaskCreationOptions.RunContinuationsAsynchronously); ++ public int ListCalls { get; private set; } ++ public int? PauseOnListCall { get; set; } + public int ConnectCalls { get; private set; } + public int DisconnectCalls { get; private set; } ++ public int StatusCalls { get; private set; } ++ public int PrivilegedCalls => ListCalls + ConnectCalls + DisconnectCalls + StatusCalls; + public bool FirewallUnavailable { get; set; } ++ public bool FailMutations { get; set; } ++ public bool FailList { get; set; } ++ public bool UnavailableOnNextMutation { get; set; } ++ public bool UnavailableOnNextPostMutationList { get; set; } ++ public bool DisconnectLeavesRules { get; set; } ++ public bool ConnectAddsDuplicate { get; set; } ++ public bool ThrowNodeNotActivatedOnStatus { get; set; } ++ public HashSet FailedMutationRules { get; } = []; ++ public HashSet DeferredConnectRules { get; } = []; + public string? ReconciliationRequest { get; set; } + public string? ReplacementRequestOnNextProbe { get; set; } + public int ReconciliationStatusCalls { get; private set; } + public int CompleteReconciliationCalls { get; private set; } ++ public bool FailCompletion { get; set; } ++ public int ForeignRuleCount { get; set; } + public List CompletedGenerations { get; } = []; + +- public void EraseRules() => _connected.Clear(); +- public bool IsConnected(LinkPolicy link) => _connected.Contains(link.Id); ++ public void EraseRules() ++ { ++ _rules.Clear(); ++ _mutationCalls.Clear(); ++ } ++ public void InjectRule(LinkRule rule, int count = 1) ++ { ++ for (var index = 0; index < count; index++) ++ { ++ _rules.Add(rule); ++ } ++ } ++ public int RuleCount(LinkPolicy link) => _rules.Count(rule => rule == ToRule(link)); ++ public int MutationCalls(LinkPolicy link) ++ => _mutationCalls.GetValueOrDefault(ToRule(link)); ++ public bool IsConnected(LinkPolicy link) => RuleCount(link) > 0; ++ ++ public async Task> ListRulesAsync(CancellationToken cancellationToken) ++ { ++ ListCalls++; ++ ListObserved.TrySetResult(); ++ ReplaceRequestIfNeeded(); ++ if (UnavailableOnNextPostMutationList && _mutationCalls.Count > 0) ++ { ++ UnavailableOnNextPostMutationList = false; ++ throw new MeshFirewallUnavailableException(LinkService.FirewallUnavailableCode); ++ } ++ if (FailList) ++ { ++ throw new InvalidOperationException("simulated link-list failure"); ++ } ++ if (FirewallUnavailable) ++ { ++ throw new MeshFirewallUnavailableException(LinkService.FirewallUnavailableCode); ++ } ++ var result = _rules.ToArray(); ++ if (ListCalls == PauseOnListCall) ++ { ++ PausedListObserved.TrySetResult(); ++ await ReleasePausedList.Task.WaitAsync(cancellationToken); ++ } ++ return result; ++ } + + public Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken) + { + ConnectCalls++; +- _connected.Add(link.Id); ++ var rule = ToRule(link); ++ RecordMutation(rule); ++ ThrowIfMutationUnavailable(); ++ if (DeferredConnectRules.Contains(rule)) ++ { ++ throw new MeshNodeNotActivatedException(LinkService.NodeNotActivatedCode); ++ } ++ if (FailMutations || FailedMutationRules.Contains(rule)) ++ { ++ throw new InvalidOperationException("simulated policy failure"); ++ } ++ _rules.Add(rule); ++ if (ConnectAddsDuplicate) ++ { ++ _rules.Add(ToRule(link)); ++ } + return Task.CompletedTask; + } + + public Task ApplyDisconnectAsync(LinkPolicy link, CancellationToken cancellationToken) ++ => ApplyDisconnectAsync(ToRule(link), cancellationToken); ++ ++ public Task ApplyDisconnectAsync(LinkRule rule, CancellationToken cancellationToken) + { + DisconnectCalls++; +- _connected.Remove(link.Id); ++ RecordMutation(rule); ++ ThrowIfMutationUnavailable(); ++ if (FailMutations) ++ { ++ throw new InvalidOperationException("simulated policy failure"); ++ } ++ if (!DisconnectLeavesRules) ++ { ++ _rules.RemoveAll(candidate => candidate == rule); ++ } + return Task.CompletedTask; + } + + public Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) + { +- if (ReplacementRequestOnNextProbe is not null) ++ StatusCalls++; ++ ReplaceRequestIfNeeded(); ++ if (ThrowNodeNotActivatedOnStatus) + { +- ReconciliationRequest = ReplacementRequestOnNextProbe; +- ReplacementRequestOnNextProbe = null; ++ throw new MeshNodeNotActivatedException(LinkService.NodeNotActivatedCode); + } + return FirewallUnavailable + ? Task.FromException(new MeshFirewallUnavailableException(LinkService.FirewallUnavailableCode)) +@@ -321,6 +894,10 @@ public sealed class LinkReconciliationTests : IAsyncDisposable + public Task CompleteReconciliationAsync(string generation, CancellationToken cancellationToken) + { + CompleteReconciliationCalls++; ++ if (FailCompletion) ++ { ++ throw new InvalidOperationException("simulated marker completion failure"); ++ } + CompletedGenerations.Add(generation); + if (ReconciliationRequest == generation) + { +@@ -328,11 +905,60 @@ public sealed class LinkReconciliationTests : IAsyncDisposable + } + return Task.CompletedTask; + } ++ ++ private void ReplaceRequestIfNeeded() ++ { ++ if (ReplacementRequestOnNextProbe is null) ++ { ++ return; ++ } ++ ReconciliationRequest = ReplacementRequestOnNextProbe; ++ ReplacementRequestOnNextProbe = null; ++ } ++ ++ private void RecordMutation(LinkRule rule) ++ => _mutationCalls[rule] = _mutationCalls.GetValueOrDefault(rule) + 1; ++ ++ private void ThrowIfMutationUnavailable() ++ { ++ if (!UnavailableOnNextMutation) ++ { ++ return; ++ } ++ UnavailableOnNextMutation = false; ++ throw new MeshFirewallUnavailableException(LinkService.FirewallUnavailableCode); ++ } ++ ++ private static LinkRule ToRule(LinkPolicy link) ++ => new(link.SourceNodeId, link.TargetNodeId, link.Protocol, link.Port); + } + ++ private static LinkRule ToRule(LinkPolicy link) ++ => new(link.SourceNodeId, link.TargetNodeId, link.Protocol, link.Port); ++ + private sealed class TestTimeProvider(DateTimeOffset now) : TimeProvider + { + public override DateTimeOffset GetUtcNow() => now; + public void Advance(TimeSpan value) => now += value; + } ++ ++ private sealed class TestLogger : ILogger ++ { ++ public List Warnings { get; } = []; ++ ++ public IDisposable? BeginScope(TState state) where TState : notnull => null; ++ public bool IsEnabled(LogLevel logLevel) => true; ++ public void Log( ++ LogLevel logLevel, ++ EventId eventId, ++ TState state, ++ Exception? exception, ++ Func formatter) ++ { ++ if (logLevel == LogLevel.Warning) ++ { ++ Warnings.Add(formatter(state, exception)); ++ } ++ } ++ } + } +diff --git a/tests/acceptance/three-server-mesh.sh b/tests/acceptance/three-server-mesh.sh +index 5f45d6f..ad9a49b 100644 +--- a/tests/acceptance/three-server-mesh.sh ++++ b/tests/acceptance/three-server-mesh.sh +@@ -76,27 +76,27 @@ expect_blocked() { + } + + probe_factual_status() { +- local target="$1" +- local expected="$2" +- local command output ++ local target="$1" ++ local expected="$2" ++ local command output + printf -v command '%q ' sudo /usr/local/libexec/ochenstarik-smm-policy-apply \ + link-status "$SOURCE_NODE_ID" "$target" tcp "$TARGET_PORT" + output="$(hub_ssh "$command")" + [[ "$output" == "$expected" ]] +- } ++} + +- expect_factual_status() { ++expect_factual_status() { + local target="$1" + local expected="$2" + if ! probe_factual_status "$target" "$expected"; then +- local command output +- printf -v command '%q ' sudo /usr/local/libexec/ochenstarik-smm-policy-apply \ +- link-status "$SOURCE_NODE_ID" "$target" tcp "$TARGET_PORT" +- output="$(hub_ssh "$command")" +- echo "Unexpected factual Link status for $SOURCE_NODE_ID -> $target: $output (expected $expected)" >&2 +- exit 1 ++ local command output ++ printf -v command '%q ' sudo /usr/local/libexec/ochenstarik-smm-policy-apply \ ++ link-status "$SOURCE_NODE_ID" "$target" tcp "$TARGET_PORT" ++ output="$(hub_ssh "$command")" ++ echo "Unexpected factual Link status for $SOURCE_NODE_ID -> $target: $output (expected $expected)" >&2 ++ exit 1 + fi +- } ++} + + decode_base64url() { + local value="${1//-/+}" +@@ -237,6 +237,21 @@ if [[ "${SMM_ACCEPT_RESTORE:-0}" == '1' ]]; then + expect_factual_status "$SECOND_NODE_ID" disabled + expect_reachable "$HOME_WG_IP" + expect_blocked "$SECOND_WG_IP" ++ ++ echo '[8/12] Injecting an orphan accept rule for the disabled policy' ++ printf -v orphan_command '%q ' sudo /usr/local/libexec/ochenstarik-smm-policy-apply \ ++ link-connect "$SOURCE_NODE_ID" "$SECOND_NODE_ID" tcp "$TARGET_PORT" 0 ++ hub_ssh "$orphan_command" >/dev/null ++ expect_factual_status "$SECOND_NODE_ID" active ++ deadline=$((SECONDS + LINK_RECONCILIATION_SECONDS + 30)) ++ while ((SECONDS < deadline)); do ++ if probe_factual_status "$SECOND_NODE_ID" disabled && probe_blocked "$SECOND_WG_IP"; then ++ break ++ fi ++ sleep 5 ++ done ++ expect_factual_status "$SECOND_NODE_ID" disabled ++ expect_blocked "$SECOND_WG_IP" + else + echo '[8/12] Firewall restore reconciliation skipped; set SMM_ACCEPT_RESTORE=1 to enable it' + fi +diff --git a/tests/bootstrap/test-bootstrap-contract.sh b/tests/bootstrap/test-bootstrap-contract.sh +index 3316e60..6d0c8fc 100755 +--- a/tests/bootstrap/test-bootstrap-contract.sh ++++ b/tests/bootstrap/test-bootstrap-contract.sh +@@ -107,6 +107,99 @@ if SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$policy_state" \ + exit 1 + fi + ++policy_listing="$(mktemp -t smm-policy-listing.XXXXXXXX)" ++cat >"$policy_listing" <<'EOF' ++ip saddr 10.77.0.2 ip daddr 10.77.0.3 tcp dport 22 counter accept comment "smm:source:target:tcp:22" # handle 5 ++counter accept comment "foreign:keep-me" # handle 6 ++counter accept comment "smm:source:target:tcp:22" # handle 7 ++counter accept comment "smm:FORGED:target:tcp:22" # handle 8 ++EOF ++list_error="$(mktemp -t smm-policy-list-error.XXXXXXXX)" ++list_output="$(SMM_POLICY_TESTING=1 SMM_POLICY_LISTING_FILE="$policy_listing" \ ++ bash "$helper" link-list 2>"$list_error")" ++[[ "$list_output" == $'source\ttarget\ttcp\t22\nsource\ttarget\ttcp\t22' ]] ++if grep -Fq 'foreign:keep-me' <<<"$list_output"; then ++ printf '%s\n' "policy helper exposed a foreign nftables comment" >&2 ++ exit 1 ++fi ++grep -Fq 'forged managed comment ignored' "$list_error" ++empty_listing="$(mktemp -t smm-policy-empty-listing.XXXXXXXX)" ++empty_list_output="$(SMM_POLICY_TESTING=1 SMM_POLICY_LISTING_FILE="$empty_listing" \ ++ bash "$helper" link-list)" ++[[ -z "$empty_list_output" ]] ++if SMM_POLICY_TESTING=1 SMM_POLICY_FIREWALL_UNAVAILABLE=1 \ ++ bash "$helper" link-list >/dev/null 2>"$list_error"; then ++ printf '%s\n' "missing Link policy table unexpectedly produced a listing" >&2 ++ exit 1 ++else ++ [[ $? -eq 79 ]] ++fi ++[[ "$(<"$list_error")" == 'mesh.firewall-unavailable' ]] ++if SMM_POLICY_TESTING=1 bash "$helper" link-list unexpected >/dev/null 2>&1; then ++ printf '%s\n' "policy helper unexpectedly accepted extra link-list arguments" >&2 ++ exit 1 ++fi ++inactive_state="$(mktemp -t smm-policy-inactive-state.XXXXXXXX)" ++printf 'source\t10.77.0.2\tkey-source\tactive\n' >"$inactive_state" ++printf 'target\t10.77.0.3\t-\treserved\n' >>"$inactive_state" ++if SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$inactive_state" \ ++ bash "$helper" link-connect source target tcp 22 10 >/dev/null 2>"$list_error"; then ++ printf '%s\n' "policy helper unexpectedly activated a Link to a reserved Node" >&2 ++ exit 1 ++else ++ [[ $? -eq 80 ]] ++fi ++[[ "$(<"$list_error")" == 'mesh.node-not-activated' ]] ++printf 'source\t10.77.0.2\tkey-source\tactive\n' >"$inactive_state" ++if SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$inactive_state" \ ++ bash "$helper" link-connect source target tcp 22 10 >/dev/null 2>"$list_error"; then ++ printf '%s\n' "policy helper unexpectedly activated a Link to a missing Node" >&2 ++ exit 1 ++else ++ [[ $? -eq 80 ]] ++fi ++[[ "$(<"$list_error")" == 'mesh.node-not-activated' ]] ++printf 'source\t10.77.0.2\tkey-source\tactive\n' >"$inactive_state" ++printf 'target\t\tkey-target\tactive\n' >>"$inactive_state" ++if SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$inactive_state" \ ++ bash "$helper" link-connect source target tcp 22 10 >/dev/null 2>"$list_error"; then ++ printf '%s\n' "policy helper unexpectedly accepted a blank Node address" >&2 ++ exit 1 ++else ++ [[ $? -eq 78 ]] ++fi ++[[ "$(<"$list_error")" == 'policy helper: node has no valid mesh address: target' ]] ++printf 'source\t10.77.0.2\tkey-source\tactive\n' >"$inactive_state" ++printf 'target\tnot-an-ip\tkey-target\tactive\n' >>"$inactive_state" ++if SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$inactive_state" \ ++ bash "$helper" link-connect source target tcp 22 10 >/dev/null 2>"$list_error"; then ++ printf '%s\n' "policy helper unexpectedly accepted an invalid Node address" >&2 ++ exit 1 ++else ++ [[ $? -eq 78 ]] ++fi ++[[ "$(<"$list_error")" == 'policy helper: node has no valid mesh address: target' ]] ++printf 'source\t10.77.0.2\tkey-source\tactive\n' >"$inactive_state" ++printf 'target\t999.77.0.3\tkey-target\tactive\n' >>"$inactive_state" ++if SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$inactive_state" \ ++ bash "$helper" link-connect source target tcp 22 10 >/dev/null 2>"$list_error"; then ++ printf '%s\n' "policy helper unexpectedly accepted an out-of-range Node address" >&2 ++ exit 1 ++else ++ [[ $? -eq 78 ]] ++fi ++[[ "$(<"$list_error")" == 'policy helper: node has no valid mesh address: target' ]] ++printf 'source\t10.77.0.2\tkey-source\tactive\n' >"$inactive_state" ++printf 'target\t10.77.0.3\tkey-target\tgarbage!\n' >>"$inactive_state" ++if SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$inactive_state" \ ++ bash "$helper" link-connect source target tcp 22 10 >/dev/null 2>"$list_error"; then ++ printf '%s\n' "policy helper unexpectedly accepted a malformed Node status" >&2 ++ exit 1 ++else ++ [[ $? -eq 78 ]] ++fi ++[[ "$(<"$list_error")" == 'policy helper: invalid mesh node status: target' ]] ++ + generation_a='aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa' + generation_b='bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb' + reconcile_marker="$(mktemp -t smm-reconcile-marker.XXXXXXXX)" +@@ -122,6 +215,9 @@ SMM_POLICY_TESTING=1 SMM_POLICY_FLOCK=true SMM_POLICY_RECONCILE_MARKER="$reconci + [[ ! -e "$reconcile_marker" ]] + [[ "$(SMM_POLICY_TESTING=1 SMM_POLICY_FLOCK=true SMM_POLICY_RECONCILE_MARKER="$reconcile_marker" \ + bash "$helper" reconcile-status)" == 'complete' ]] ++missing_mesh="$reconcile_marker-missing/mesh/reconcile-requested" ++[[ "$(SMM_POLICY_TESTING=1 SMM_POLICY_FLOCK=true SMM_POLICY_RECONCILE_MARKER="$missing_mesh" \ ++ bash "$helper" reconcile-status)" == 'complete' ]] + if SMM_POLICY_TESTING=1 SMM_POLICY_FLOCK=true SMM_POLICY_RECONCILE_MARKER="$reconcile_marker" \ + bash "$helper" reconcile-complete unexpected extra >/dev/null 2>&1; then + printf '%s\n' "policy helper unexpectedly accepted extra reconcile-complete arguments" >&2 +@@ -151,8 +247,8 @@ if grep -Fq 'mesh.firewall-unavailable' "$firewall_error"; then + printf '%s\n' "unknown nft inspection error was misclassified as missing firewall" >&2 + exit 1 + fi +-rm -f -- "$firewall_error" "$reconcile_marker" +-rm -f -- "$policy_state" ++rm -f -- "$firewall_error" "$reconcile_marker" "$policy_state" \ ++ "$policy_listing" "$empty_listing" "$list_error" "$inactive_state" + + extract_shell_function() { + local name="$1" +diff --git a/tests/windows/Test-DesktopContracts.ps1 b/tests/windows/Test-DesktopContracts.ps1 +index f5ac6f9..97178d7 100644 +--- a/tests/windows/Test-DesktopContracts.ps1 ++++ b/tests/windows/Test-DesktopContracts.ps1 +@@ -62,9 +62,36 @@ if ($linksCode.IndexOf('SetFirewallUnavailable', [StringComparison]::Ordinal) -l + $mainCode.IndexOf('MeshLinkViewModel.FirewallUnavailableErrorCode', [StringComparison]::Ordinal) -lt 0) { + throw 'Desktop must project both event and persisted Mesh firewall unavailable state.' + } +-if ($meshModelsCode.IndexOf('LastError == FirewallUnavailableErrorCode ? string.Empty', ++if ($meshModelsCode.IndexOf( ++ 'LastError is FirewallUnavailableErrorCode or NodeNotActivatedErrorCode ? string.Empty', + [StringComparison]::Ordinal) -lt 0) { +- throw 'Shared Mesh firewall errors must be suppressed from individual Link rows.' ++ throw 'Shared Mesh firewall and expected Node activation states must be suppressed from individual Link errors.' ++} ++if ($linksXaml.IndexOf('x:Name="ShowHistoryToggle"', [StringComparison]::Ordinal) -lt 0 -or ++ $linksXaml.IndexOf('Toggled="ShowHistoryToggle_Toggled"', [StringComparison]::Ordinal) -lt 0 -or ++ $linksCode.IndexOf('ShowHistoryToggle.IsOn', [StringComparison]::Ordinal) -lt 0) { ++ throw 'Links page must expose an explicit history toggle.' ++} ++if ($linksCode.IndexOf( ++ 'effective.Where(link => link.DesiredState == "Active" || link.HasDrift)', ++ [StringComparison]::Ordinal) -lt 0) { ++ throw 'Links page default view must show only effective Active or drifted policies.' ++} ++if ($linksCode.IndexOf('LinksCountText.Text = $', [StringComparison]::Ordinal) -lt 0 -or ++ $linksCode.IndexOf('DisplayedLinks.Count(link => link.ActualState == "Active")', [StringComparison]::Ordinal) -lt 0 -or ++ $linksCode.IndexOf('DisplayedLinks.Count(link => link.HasDrift)', [StringComparison]::Ordinal) -lt 0) { ++ throw 'Links page counters must unambiguously distinguish shown, factual Active, and drifted policies.' ++} ++if ($meshModelsCode.IndexOf('public string DesiredStatusText', [StringComparison]::Ordinal) -lt 0 -or ++ $meshModelsCode.IndexOf('public string ActualStatusText', [StringComparison]::Ordinal) -lt 0 -or ++ $meshModelsCode.IndexOf('LastError == NodeNotActivatedErrorCode', [StringComparison]::Ordinal) -lt 0) { ++ throw 'Links page must use typed desired/factual/expected-activation wording.' ++} ++if ($mainCode.IndexOf( ++ 'link.LastError == MeshLinkViewModel.NodeNotActivatedErrorCode', ++ [StringComparison]::Ordinal) -lt 0 -or ++ $mainCode.IndexOf('? InfoBarSeverity.Informational', [StringComparison]::Ordinal) -lt 0) { ++ throw 'Expected Node activation state must use non-error informational severity.' + } + if ($mainCode.IndexOf('Servers.Count > 0 || _control.IsConfigured', [StringComparison]::Ordinal) -lt 0 -or + $mainCode.IndexOf('await RefreshControlMeshAsync(showSuccess: false);', [StringComparison]::Ordinal) -lt 0) { diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3_SPEC.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3_SPEC.md new file mode 100644 index 0000000..2125d11 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/B3_SPEC.md @@ -0,0 +1,163 @@ +# ТЗ: Block B-3 — реконсиляция от факта и техдолг Link-политик + +Репозиторий: `ochenstarik-ui/server-monitor-manager` +База: `main` @ `b11c277ac7f79a18670932eca4622982d9ff48e0` +Предшествующие блоки: B (PR #11), B-2 (PR #12) — оба merged, physical acceptance pending. + +Этот документ самодостаточен. Всё, что нужно исполнителю, здесь; предыдущие документы читать не обязательно. + +--- + +## 1. Контекст + +Control уже умеет приводить Link-политики к желаемому состоянию: есть `LinkReconciliationBackgroundService` (немедленный проход при старте + периодический по `Control__LinkReconciliationSeconds`), единый `ConvergeAsync`, типизированное состояние `mesh.firewall-unavailable` с backoff и generation-маркер внеочередной реконсиляции от `ochenstarik-smm-emergency`. + +Проход устроен **от базы к факту**: берётся список действующих политик, и для каждой вызывается helper — `link-status`, затем при расхождении `link-connect`/`link-disconnect`, затем повторный `link-status`. Отсюда два системных ограничения, которые и закрывает этот блок. + +--- + +## 2. Scope + +### B3-1 — `link-list` в policy-helper (высокий приоритет) + +Новое действие в `deploy/ochenstarik-smm-policy-apply`, возвращающее **все** правила управляемой цепочки одним вызовом. + +- Арность: ровно 1 аргумент (`link-list`), проверяется до всего остального, как у `reconcile-status`. +- Источник: та же цепочка `inet ochenstarik_smm links`, через существующий `inspect_firewall` — то есть недоступная таблица по-прежнему даёт exit 79 и точный маркер `mesh.firewall-unavailable` в stderr, а неизвестная ошибка `nft` остаётся fail-closed с exit 78. +- Разбирать только правила с комментарием вида `smm::::`; чужие правила в цепочке игнорировать и **никогда** не трогать. +- Формат вывода — стабильный, машиночитаемый, по одной записи в строке: `sourcetargetprotocolport`. Порядок не гарантируется, дубликаты допустимы (одинаковый comment может встретиться несколько раз — это тоже подлежит вычистке). +- Пустая цепочка — пустой вывод и exit 0. Это отличается от «таблицы нет» (exit 79). +- Значения из comment валидировать теми же паттернами, что и аргументы действий (`node_pattern`, `tcp|udp`, порт 1…65535). Строка, не прошедшая валидацию, не выводится, но фиксируется в stderr как диагностика — она означает, что кто-то подделал comment. +- Режим `SMM_POLICY_TESTING=1` поддержать по образцу существующих действий, чтобы контрактный тест работал без root и без nftables. + +`sudoers` менять не нужно — шаблон `$POLICY_HELPER *` уже покрывает новое действие. + +### B3-2 — развернуть проход реконсиляции на факт → база (высокий приоритет) + +`LinkService.ReconcileAllAsync` переписать так, чтобы источником истины о факте был один вызов `link-list`, а не `2N` вызовов `link-status`. + +Алгоритм прохода: + +1. Один `link-list` → множество фактических правил. +2. Один `ListEffectiveLinksAsync` → множество действующих политик. +3. Сверка множеств по ключу `(source, target, protocol, port)`: + - **правилу не соответствует ни одна политика с `DesiredState=Active`** (политики нет вовсе, либо она `Disabled`) → удалить правило, событие `link.orphan-removed`, запись в audit; если политика в БД есть — привести её `ActualState` к `Disabled`; + - **политика `DesiredState=Active`, правила нет** → применить, проверить фактом, событие `link.reapplied`; + - **совпало** → мутаций нет, `ActualState` при необходимости синхронизировать без вызова helper. +4. Дубликаты одного и того же правила схлопывать до одного при `Active` и удалять полностью при `Disabled`. + +Требования: + +- **Снять ограничение `IsEligibleForFullReconciliation`.** Сейчас политика в состоянии `Disabled/Disabled` из прохода исключена, поэтому accept-правило для полностью отключённой политики не обнаруживается никогда — а это инвариант kill switch. После разворота прохода фильтр по состоянию в БД больше не нужен: orphan находится по факту, независимо от того, что записано в базе. +- Порядок блокировок сохранить существующий: отсортированные node-локи → per-Link gate. Новых классов блокировок не вводить. +- Единый `ConvergeAsync` остаётся единственной реализацией сходимости; отдельной копии логики для нового прохода быть не должно. +- Поведение при `mesh.firewall-unavailable` не меняется: проход прерывается, публикуется одно агрегированное событие, работает bounded backoff, маркер не потребляется. +- Стоимость прохода без расхождений: **один** привилегированный вызов. Это проверяемое требование, см. тесты. + +### B3-3 — ограниченный backoff для marker-пути (высокий приоритет) + +В `LinkReconciliationBackgroundService` наличие маркера полностью снимает регулярный throttle (`_nextRegularAt`), а сам маркер потребляется только при `Failed == 0`. `_backoffUntil` взводится лишь для `FirewallUnavailable`. Следствие: одна стабильно падающая политика — например Node, выпавший из `nodes.tsv`, где `lookup_node_ip` даёт exit 78, — навсегда удерживает маркер, и полный проход начинает выполняться на каждом poll-тике (30 с) без ограничения. + +Сделать: + +- счётчик неуспешных prompt-проходов подряд; после 3 попыток маркер перестаёт снимать регулярный throttle и проходы возвращаются к обычному интервалу; +- одно предупреждение в журнал при переходе в это состояние, с идентификаторами упавших политик, без повторов на каждом тике; +- счётчик сбрасывается при первом проходе с `Failed == 0` (тогда же маркер потребляется штатно); +- маркер по-прежнему **не** потребляется, пока проход не завершился без отказов. + +### B3-4 — M2: семантика результата реконсиляции (средний) + +`LinkReconciliationResult.Reconciled` сейчас означает «рассмотрено», а не «приведено в порядок»: тест ожидает `(1, 0)` при нуле вызовов helper. Развести на три поля — `Examined`, `Converged`, `Failed` — и обновить всех потребителей, включая журнал фонового сервиса и `Program.cs`. `LinkFullReconciliationResult` привести к той же схеме. + +### B3-5 — M4: Links-страница и retention (средний) + +Фильтр на странице Links снят в Block B, retention для таблицы `links` нет (в `ControlMaintenance` чистятся только `metric_samples`, `idempotency`, `audit` и токены). Страница превращается в журнал всех политик за всё время. + +Сделать **оба**: + +- Desktop: фильтр по умолчанию «действующие + расхождения» с явным переключателем «показать историю»; счётчики в заголовке считать по отображаемому набору и подписывать однозначно. +- Control: retention для завершённых политик — `DesiredState=Disabled` и `ActualState=Disabled`, старше настраиваемого срока; новая настройка в `ControlOptions` с валидацией, значение в `appsettings.json` и в `control.env` bootstrap, по образцу `LinkReconciliationSeconds`. Действующие политики и политики с расхождением не удалять никогда. + +### B3-6 — M5: не активированный в mesh Node (средний) + +`lookup_node_ip` не различает «Node зарезервирован, но `peer-add` ещё не выполнен» и «helper сломан»: в обоих случаях exit 78, и политика уходит в `Failed` на каждом проходе. Ввести отдельный код возврата и типизированное состояние: политика к неактивированному Node не является отказом применения, это ожидаемое промежуточное состояние. В Desktop показывать его отдельной формулировкой, а не ошибкой. + +### B3-7 — мелочи (низкий) + +- Helper: `reconcile-status` возвращает `complete`, если каталог `/var/lib/ochenstarik-server-monitor-manager/mesh` отсутствует. Сейчас `exec 9>"$RECONCILE_LOCK"` в несуществующем каталоге падает под `set -e`, и на Hub, где `mesh-init` ещё не выполнялся, Control пишет предупреждение каждые 30 секунд. +- Helper: явная проверка `[[ -x /usr/sbin/nft ]]` с отдельным сообщением. Сейчас отсутствующий бинарь даёт ту же строку `No such file or directory`, что и отсутствующая таблица, и классифицируется как `mesh.firewall-unavailable`. +- `tests/acceptance/three-server-mesh.sh`: переформатировать блок `probe_factual_status` / `expect_factual_status` — перемешаны отступы 4 и 2 пробела, закрывающая скобка внесена внутрь тела. Поведение верное, `bash -n` проходит; вопрос читаемости. + +--- + +## 3. Тесты + +**Обязательные, без них блок не принимается:** + +1. Accept-правило существует, соответствующая политика в состоянии `Disabled/Disabled` → проход удаляет правило и публикует `link.orphan-removed`. Это тот случай, который сегодня не обнаруживается вовсе. +2. Accept-правило существует, политики в БД нет ни в каком виде → правило удалено. +3. Проход без расхождений выполняет **ровно один** привилегированный вызов (`link-list`) и ноль мутаций. Проверять по счётчику вызовов фейкового applier либо по журналу вызовов в интеграционном тесте. +4. Правило с чужим comment в той же цепочке не трогается ни при каких условиях. +5. Дубликат правила с одинаковым comment: при `Active` остаётся один, при `Disabled` не остаётся ни одного. +6. Политика, падающая всегда, при висящем маркере не вызывает более одного прохода за интервал после исчерпания попыток; маркер при этом не потребляется. +7. `link-list` при отсутствующей таблице → exit 79, проход прерван, одно агрегированное событие, ноль мутаций, маркер сохранён. +8. Retention удаляет завершённую Disabled-политику старше срока и **не** удаляет действующую и политику с расхождением. + +**Контрактные (`tests/bootstrap/test-bootstrap-contract.sh`):** арность `link-list`, формат вывода на фикстуре, игнорирование чужого comment, отказ на подделанном comment, `reconcile-status` при отсутствующем каталоге mesh. + +**Acceptance (`tests/acceptance/three-server-mesh.sh`):** новый шаг под `SMM_ACCEPT_RESTORE=1` — вручную добавить на Hub accept-правило для отключённой политики (`link-connect` через helper напрямую), дождаться прохода, убедиться, что правило снято и `expect_blocked` для соответствующего Node выполняется. Шаг ставить рядом с существующим шагом firewall-restore. + +--- + +## 4. Definition of Done + +- [ ] Проход реконсиляции обнаруживает и снимает accept-правило, которому не соответствует действующая политика `Active`, **включая случай `Disabled/Disabled`** +- [ ] `IsEligibleForFullReconciliation` удалён, а не расширен +- [ ] Проход без расхождений — один привилегированный вызов; подтверждено тестом +- [ ] Чужие правила в цепочке не затрагиваются; подтверждено тестом +- [ ] Стабильно падающая политика не вызывает более одного прохода за интервал +- [ ] `Examined` / `Converged` / `Failed` разведены, потребители обновлены +- [ ] Links-страница читаема при сотнях исторических политик; retention настраивается и не трогает действующие политики +- [ ] Неактивированный в mesh Node не отображается как ошибка применения политики +- [ ] Логика сходимости существует в одном экземпляре +- [ ] Порядок блокировок не изменён, новых классов не введено +- [ ] B3-7 закрыты +- [ ] `docs/roadmap.md` обновлён: B-3 отмечен, M2/M4/M5 сняты из отложенных +- [ ] CI зелёный на PR + +--- + +## 5. Вне scope + +- Блок C (подписанный manifest, совместимость версий, пиннинг Actions) — отдельная задача после B-3. +- Провиженинг, роль Monitor в bootstrap, MVVM-рефакторинг Desktop, локализация — задачи следующего уровня. +- Physical acceptance — внешний блокер, см. раздел 7. + +--- + +## 6. Формат сдачи + +Как в предыдущих блоках: + +- `REPORT.md` — статус, база, коммиты, PR, ссылки, что реализовано, что отложено и почему; +- `TEST_EVIDENCE.md` — фактические результаты прогонов и честный список невыполненного; +- патч и/или zip изменённых файлов; +- `CI_CHECKS.txt` — имена, длительности и URL всех проверок; +- `INDEPENDENT_REVIEW.md`; +- `SHA256SUMS` — считать **последним действием**, после всех правок отчётов, и включать все файлы пакета. + +Независимому review передавать **полный текст этого ТЗ**, а не только диф. На двух предыдущих блоках это дало находки того класса, который при diff-only ревью не ищется вовсе: пропущенные требования, а не ошибки в написанном коде. + +Статус блока по итогам merge формулировать как `merged / verified`, а не «выполнено», если хоть один критерий выражен через фактическую связность и не проверялся на реальной топологии. + +--- + +## 7. Внешний блокер + +Physical acceptance не выполнялся ни разу за три блока. Требуются `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE` и прогон + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh +``` + +Harness к этому готов и уже содержит сценарий `firewall-restore` без перезапуска Node. До прогона пункт «выполнить физический acceptance» Этапа 3 roadmap и критерий B6 остаются открытыми независимо от состояния CI. Исполнитель закрыть этот пункт не может. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/CI_CHECKS.txt b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/CI_CHECKS.txt new file mode 100644 index 0000000..cbddac6 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/CI_CHECKS.txt @@ -0,0 +1,20 @@ +PR #16 final GitHub checks before merge +TOTAL=14 +PASS=14 +SKIPPING=0 +NON_GREEN=0 + +pass Linux platform matrix Ubuntu 24.04 arm64 native VM SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126248 +pass Linux platform matrix Debian 12 arm64 systemd restart SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126264 +pass Linux platform matrix Debian 13 arm64 systemd restart SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126266 +pass Linux platform matrix Ubuntu 22.04 x64 native VM SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126244 +pass Linux platform matrix Debian 12 x64 systemd restart SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126254 +pass Linux platform matrix Ubuntu 22.04 arm64 native VM SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126256 +pass Linux platform matrix Debian 13 x64 systemd restart SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126267 +pass Linux platform matrix Ubuntu 24.04 x64 native VM SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126238 +pass Linux platform matrix Release archive (linux-arm64) SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +pass Linux control and agent build-and-test SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +pass Windows build build SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +pass Linux platform matrix Release archive (linux-x64) SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +pass Windows build build SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +pass Linux control and agent build-and-test SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/CI_CHECKS_WATCH.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/CI_CHECKS_WATCH.log new file mode 100644 index 0000000..38ce105 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/CI_CHECKS_WATCH.log @@ -0,0 +1,212 @@ +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126264 +Debian 12 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126254 +Debian 13 arm64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126266 +Debian 13 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126267 +Ubuntu 22.04 arm64 native VM pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126256 +Ubuntu 22.04 x64 native VM pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126244 +Ubuntu 24.04 arm64 native VM pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126248 +Ubuntu 24.04 x64 native VM pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126238 +Release archive (linux-arm64) pass 1m12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126264 +Debian 12 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126254 +Debian 13 arm64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126266 +Debian 13 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126267 +Ubuntu 22.04 x64 native VM pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126244 +Release archive (linux-arm64) pass 1m12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +Ubuntu 22.04 arm64 native VM pass 14s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126256 +Ubuntu 24.04 arm64 native VM pass 13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126248 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126238 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126254 +Debian 13 arm64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126266 +Debian 13 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126267 +Debian 12 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126264 +Release archive (linux-arm64) pass 1m12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +Ubuntu 22.04 arm64 native VM pass 14s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126256 +Ubuntu 22.04 x64 native VM pass 19s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126244 +Ubuntu 24.04 arm64 native VM pass 13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126248 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126238 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126264 +Debian 12 x64 systemd restart pass 32s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126254 +Debian 13 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126266 +Debian 13 x64 systemd restart pass 29s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126267 +Release archive (linux-arm64) pass 1m12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +Ubuntu 22.04 arm64 native VM pass 14s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126256 +Ubuntu 22.04 x64 native VM pass 19s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126244 +Ubuntu 24.04 arm64 native VM pass 13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126248 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126238 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126264 +Debian 12 x64 systemd restart pass 32s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126254 +Debian 13 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126266 +Debian 13 x64 systemd restart pass 29s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126267 +Release archive (linux-arm64) pass 1m12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +Ubuntu 22.04 arm64 native VM pass 14s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126256 +Ubuntu 22.04 x64 native VM pass 19s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126244 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126238 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Ubuntu 24.04 arm64 native VM pass 13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126248 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build pass 2m20s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126264 +Debian 12 x64 systemd restart pass 32s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126254 +Debian 13 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126266 +Debian 13 x64 systemd restart pass 29s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126267 +Release archive (linux-arm64) pass 1m12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +Ubuntu 22.04 arm64 native VM pass 14s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126256 +Ubuntu 22.04 x64 native VM pass 19s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126244 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126238 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Ubuntu 24.04 arm64 native VM pass 13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126248 +build pass 2m20s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build-and-test pass 2m28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126264 +Debian 12 x64 systemd restart pass 32s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126254 +Debian 13 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126266 +Debian 13 x64 systemd restart pass 29s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126267 +Release archive (linux-arm64) pass 1m12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +Ubuntu 22.04 arm64 native VM pass 14s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126256 +Ubuntu 22.04 x64 native VM pass 19s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126244 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126238 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Ubuntu 24.04 arm64 native VM pass 13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126248 +build pass 2m20s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build-and-test pass 2m28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126264 +Debian 12 x64 systemd restart pass 32s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126254 +Debian 13 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126266 +Debian 13 x64 systemd restart pass 29s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126267 +Release archive (linux-arm64) pass 1m12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +Ubuntu 22.04 arm64 native VM pass 14s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126256 +Ubuntu 22.04 x64 native VM pass 19s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126244 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126238 +build-and-test pass 2m27s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +Ubuntu 24.04 arm64 native VM pass 13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126248 +build pass 2m20s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build-and-test pass 2m28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +Debian 12 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126264 +Debian 12 x64 systemd restart pass 32s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126254 +Debian 13 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126266 +Debian 13 x64 systemd restart pass 29s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126267 +Release archive (linux-arm64) pass 1m12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +Ubuntu 22.04 arm64 native VM pass 14s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126256 +Ubuntu 22.04 x64 native VM pass 19s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126244 +Ubuntu 24.04 arm64 native VM pass 13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126248 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126238 +build pass 2m20s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build pass 2m33s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pass 2m28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +build-and-test pass 2m27s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 +Debian 12 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126264 +Debian 12 x64 systemd restart pass 32s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126254 +Debian 13 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126266 +Debian 13 x64 systemd restart pass 29s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126267 +Release archive (linux-arm64) pass 1m12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021217 +Release archive (linux-x64) pass 54s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205021196 +Ubuntu 22.04 arm64 native VM pass 14s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126256 +Ubuntu 22.04 x64 native VM pass 19s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126244 +Ubuntu 24.04 arm64 native VM pass 13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126248 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550751/job/93205126238 +build pass 2m20s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533697/job/93204978562 +build pass 2m33s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550779/job/93205021260 +build-and-test pass 2m28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297533702/job/93204978548 +build-and-test pass 2m27s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297550739/job/93205021097 diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_CI.txt b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_CI.txt new file mode 100644 index 0000000..c366be4 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_CI.txt @@ -0,0 +1,21 @@ +Delivery repair post-merge CI for d645812d29d077e9a4dee1596ef09a70dc138090 +RUNS=3 +JOBS=12 +SUCCESS=12 +NON_GREEN=0 + +RUN 31309549382 Windows build completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549382 +JOB build completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549382/job/93235108400 +RUN 31309549384 Linux control and agent completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549384 +JOB build-and-test completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549384/job/93235108242 +RUN 31309549383 Linux platform matrix completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549383 +JOB Release archive (linux-x64) completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549383/job/93235108369 +JOB Release archive (linux-arm64) completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549383/job/93235108413 +JOB Debian 13 x64 systemd restart completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549383/job/93235249867 +JOB Ubuntu 22.04 x64 native VM completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549383/job/93235249868 +JOB Ubuntu 24.04 arm64 native VM completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549383/job/93235249877 +JOB Debian 13 arm64 systemd restart completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549383/job/93235249882 +JOB Debian 12 arm64 systemd restart completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549383/job/93235249883 +JOB Ubuntu 24.04 x64 native VM completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549383/job/93235249887 +JOB Debian 12 x64 systemd restart completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549383/job/93235249898 +JOB Ubuntu 22.04 arm64 native VM completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309549383/job/93235249899 diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_LINUX.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_LINUX.log new file mode 100644 index 0000000..682f3ea --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_LINUX.log @@ -0,0 +1,656 @@ +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push less than a minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + * Verify formatting + * Verify three-server acceptance harness + * Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push less than a minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + * Verify formatting + * Verify three-server acceptance harness + * Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push less than a minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + * Verify formatting + * Verify three-server acceptance harness + * Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push less than a minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + * Verify formatting + * Verify three-server acceptance harness + * Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push less than a minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + * Verify formatting + * Verify three-server acceptance harness + * Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push less than a minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + * Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + ✓ Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + ✓ Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31309549384 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + ✓ Build systemd smoke release + ✓ Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +✓ main Linux control and agent · 31309549384 +Triggered via push about 2 minutes ago + +JOBS +✓ build-and-test in 2m23s (ID 93235108242) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + ✓ Build systemd smoke release + ✓ Verify repeated systemd installation + ✓ Clean up systemd smoke installation + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_MATRIX.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_MATRIX.log new file mode 100644 index 0000000..11cc6f1 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_MATRIX.log @@ -0,0 +1,996 @@ +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push less than a minute ago + +JOBS +* Release archive (linux-x64) (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-arm64) (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push less than a minute ago + +JOBS +* Release archive (linux-x64) (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-arm64) (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push less than a minute ago + +JOBS +* Release archive (linux-x64) (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-arm64) (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push less than a minute ago + +JOBS +* Release archive (linux-x64) (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-arm64) (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push less than a minute ago + +JOBS +* Release archive (linux-x64) (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-arm64) (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push less than a minute ago + +JOBS +* Release archive (linux-x64) (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-arm64) (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push about 1 minute ago + +JOBS +* Release archive (linux-x64) (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-arm64) (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push about 1 minute ago + +JOBS +* Release archive (linux-x64) (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-arm64) (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push about 1 minute ago + +JOBS +* Release archive (linux-x64) (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-arm64) (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push about 1 minute ago + +JOBS +* Release archive (linux-x64) (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-arm64) (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push about 1 minute ago + +JOBS +* Release archive (linux-x64) (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +✓ Release archive (linux-arm64) in 1m18s (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-x64) in 1m18s (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-arm64) in 1m18s (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +* Debian 13 x64 systemd restart (ID 93235249867) +* Ubuntu 22.04 x64 native VM (ID 93235249868) +* Ubuntu 24.04 arm64 native VM (ID 93235249877) +* Debian 13 arm64 systemd restart (ID 93235249882) +* Debian 12 arm64 systemd restart (ID 93235249883) +* Ubuntu 24.04 x64 native VM (ID 93235249887) +* Debian 12 x64 systemd restart (ID 93235249898) +* Ubuntu 22.04 arm64 native VM (ID 93235249899) + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-x64) in 1m18s (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-arm64) in 1m18s (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +* Debian 13 x64 systemd restart (ID 93235249867) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Ubuntu 22.04 x64 native VM (ID 93235249868) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart services + * Post Checkout +✓ Ubuntu 24.04 arm64 native VM in 12s (ID 93235249877) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 13 arm64 systemd restart (ID 93235249882) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 12 arm64 systemd restart (ID 93235249883) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 24.04 x64 native VM in 15s (ID 93235249887) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 12 x64 systemd restart (ID 93235249898) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 22.04 arm64 native VM in 13s (ID 93235249899) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-x64) in 1m18s (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-arm64) in 1m18s (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +* Debian 13 x64 systemd restart (ID 93235249867) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 22.04 x64 native VM in 17s (ID 93235249868) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 12s (ID 93235249877) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 13 arm64 systemd restart (ID 93235249882) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 12 arm64 systemd restart (ID 93235249883) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 24.04 x64 native VM in 15s (ID 93235249887) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 12 x64 systemd restart (ID 93235249898) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 22.04 arm64 native VM in 13s (ID 93235249899) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-x64) in 1m18s (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-arm64) in 1m18s (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +* Debian 13 x64 systemd restart (ID 93235249867) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 22.04 x64 native VM in 17s (ID 93235249868) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 12s (ID 93235249877) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 13 arm64 systemd restart in 24s (ID 93235249882) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Debian 12 arm64 systemd restart in 22s (ID 93235249883) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 x64 native VM in 15s (ID 93235249887) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 12 x64 systemd restart (ID 93235249898) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 22.04 arm64 native VM in 13s (ID 93235249899) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-x64) in 1m18s (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-arm64) in 1m18s (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +* Debian 13 x64 systemd restart (ID 93235249867) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 22.04 x64 native VM in 17s (ID 93235249868) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 12s (ID 93235249877) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 13 arm64 systemd restart in 24s (ID 93235249882) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Debian 12 arm64 systemd restart in 22s (ID 93235249883) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 x64 native VM in 15s (ID 93235249887) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 12 x64 systemd restart (ID 93235249898) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 22.04 arm64 native VM in 13s (ID 93235249899) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31309549383 +Triggered via push about 2 minutes ago + +JOBS +✓ Release archive (linux-x64) in 1m18s (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-arm64) in 1m18s (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Debian 13 x64 systemd restart in 31s (ID 93235249867) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 22.04 x64 native VM in 17s (ID 93235249868) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 12s (ID 93235249877) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 13 arm64 systemd restart in 24s (ID 93235249882) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Debian 12 arm64 systemd restart in 22s (ID 93235249883) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 x64 native VM in 15s (ID 93235249887) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 12 x64 systemd restart (ID 93235249898) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 22.04 arm64 native VM in 13s (ID 93235249899) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +✓ main Linux platform matrix · 31309549383 +Triggered via push about 2 minutes ago + +JOBS +✓ Release archive (linux-x64) in 1m18s (ID 93235108369) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-arm64) in 1m18s (ID 93235108413) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Debian 13 x64 systemd restart in 31s (ID 93235249867) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 22.04 x64 native VM in 17s (ID 93235249868) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 12s (ID 93235249877) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 13 arm64 systemd restart in 24s (ID 93235249882) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Debian 12 arm64 systemd restart in 22s (ID 93235249883) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 x64 native VM in 15s (ID 93235249887) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 12 x64 systemd restart in 34s (ID 93235249898) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 22.04 arm64 native VM in 13s (ID 93235249899) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_WINDOWS.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_WINDOWS.log new file mode 100644 index 0000000..d9b240c --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_POST_MERGE_WINDOWS.log @@ -0,0 +1,532 @@ +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push less than a minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push less than a minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push less than a minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push less than a minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push less than a minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push less than a minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + ✓ Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31309549382 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + ✓ Build test-signed MSIX installer + ✓ Upload test installer + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ main Windows build · 31309549382 +Triggered via push about 2 minutes ago + +JOBS +✓ build in 2m37s (ID 93235108400) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + ✓ Build test-signed MSIX installer + ✓ Upload test installer + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_PR17_CHECKS.txt b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_PR17_CHECKS.txt new file mode 100644 index 0000000..001ec53 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_PR17_CHECKS.txt @@ -0,0 +1,19 @@ +PR #17 final checks +TOTAL=14 +PASS=14 +NON_GREEN=0 + +pass Linux platform matrix Ubuntu 24.04 arm64 native VM SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +pass Linux platform matrix Debian 12 x64 systemd restart SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +pass Linux platform matrix Debian 13 arm64 systemd restart SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +pass Linux platform matrix Ubuntu 24.04 x64 native VM SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +pass Linux platform matrix Debian 13 x64 systemd restart SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +pass Linux platform matrix Ubuntu 22.04 x64 native VM SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +pass Linux platform matrix Ubuntu 22.04 arm64 native VM SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +pass Linux platform matrix Debian 12 arm64 systemd restart SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +pass Linux control and agent build-and-test SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +pass Windows build build SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +pass Linux platform matrix Release archive (linux-arm64) SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +pass Linux platform matrix Release archive (linux-x64) SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +pass Linux control and agent build-and-test SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +pass Windows build build SUCCESS https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_PR17_CI.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_PR17_CI.log new file mode 100644 index 0000000..c774100 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REPAIR_PR17_CI.log @@ -0,0 +1,244 @@ +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 12 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 arm64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +Debian 13 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +Ubuntu 22.04 arm64 native VM pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Ubuntu 22.04 x64 native VM pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 arm64 native VM pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Ubuntu 24.04 x64 native VM pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +Ubuntu 22.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Debian 13 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +Ubuntu 22.04 x64 native VM pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 x64 native VM pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +Ubuntu 24.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Debian 12 arm64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 12 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 arm64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 13 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +Ubuntu 22.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Ubuntu 22.04 x64 native VM pass 21s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +Debian 12 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 12 x64 systemd restart pass 28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +Ubuntu 22.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Ubuntu 22.04 x64 native VM pass 21s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +Debian 13 x64 systemd restart pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 12 x64 systemd restart pass 28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +Debian 13 x64 systemd restart pass 40s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +Ubuntu 22.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Ubuntu 22.04 x64 native VM pass 21s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build pass 2m42s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build-and-test pass 2m33s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pass 1m53s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 12 x64 systemd restart pass 28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +Debian 13 x64 systemd restart pass 40s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +Ubuntu 22.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Ubuntu 22.04 x64 native VM pass 21s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build pass 2m42s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build-and-test pass 2m33s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pass 1m53s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 12 x64 systemd restart pass 28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +Debian 13 x64 systemd restart pass 40s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +Ubuntu 22.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Ubuntu 22.04 x64 native VM pass 21s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build pass 2m42s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build-and-test pass 2m33s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pass 1m53s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 12 x64 systemd restart pass 28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +Debian 13 x64 systemd restart pass 40s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +Ubuntu 22.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Ubuntu 22.04 x64 native VM pass 21s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build pass 2m42s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build-and-test pass 2m33s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pass 1m53s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 12 x64 systemd restart pass 28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +Debian 13 x64 systemd restart pass 40s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +Ubuntu 22.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Ubuntu 22.04 x64 native VM pass 21s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build pass 2m42s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build-and-test pass 2m33s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pass 1m53s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Refreshing checks status every 10 seconds. Press Ctrl+C to quit. + +Debian 12 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 12 x64 systemd restart pass 28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +Debian 13 x64 systemd restart pass 40s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +Ubuntu 22.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Ubuntu 22.04 x64 native VM pass 21s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +build pending 0 https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build pass 2m42s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build-and-test pass 2m33s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pass 1m53s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Debian 12 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 12 x64 systemd restart pass 28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +Debian 13 x64 systemd restart pass 40s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +Ubuntu 22.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Ubuntu 22.04 x64 native VM pass 21s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +build pass 2m42s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pass 2m58s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pass 2m33s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pass 1m53s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 +Debian 12 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801436 +Debian 12 x64 systemd restart pass 28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801429 +Debian 13 arm64 systemd restart pass 23s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801426 +Debian 13 x64 systemd restart pass 40s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801440 +Release archive (linux-arm64) pass 1m10s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678882 +Release archive (linux-x64) pass 1m13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234678932 +Ubuntu 22.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801456 +Ubuntu 22.04 x64 native VM pass 21s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801425 +Ubuntu 24.04 arm64 native VM pass 12s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801430 +Ubuntu 24.04 x64 native VM pass 16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370823/job/93234801444 +build pass 2m42s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336626/job/93234598682 +build pass 2m58s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370812/job/93234678892 +build-and-test pass 2m33s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309336621/job/93234598681 +build-and-test pass 1m53s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31309370814/job/93234678936 diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REVIEW_FINDINGS_CLOSURE.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REVIEW_FINDINGS_CLOSURE.md new file mode 100644 index 0000000..0a7502a --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_REVIEW_FINDINGS_CLOSURE.md @@ -0,0 +1,44 @@ +# Delivery-review findings closure + +Authoritative review: `INDEPENDENT_REVIEW.md` + +Verdict: **APPROVE** + +The review read the complete original B-3 specification, authoritative B3R specification, separate 2026-08-06 task, and 2026-08-07 delivery note. It reported two non-blocking LOW findings. + +## LOW 1 — explicit missing-row helper regression + +Status: **CLOSED** + +Repair: + +- Added an explicit real-helper invocation where the `target` Node is entirely absent from the four-field state file. +- The contract requires `link-connect` to fail, exit exactly `80`, and emit exactly `mesh.node-not-activated`. +- No production code changed. + +Delivery: + +- repair commit: `83cbb3b6fb4ec21631953ba070f7d5d999bcde07`; +- PR: https://github.com/ochenstarik-ui/server-monitor-manager/pull/17; +- PR state: `MERGED`; +- final main merge SHA: `d645812d29d077e9a4dee1596ef09a70dc138090`; +- local helper contract: `BOOTSTRAP_CONTRACT=PASS`; +- PR #17 checks: `14/14 PASS`; +- post-merge workflows: `3/3`, `12/12 jobs PASS`. + +Evidence: + +- `DELIVERY_REPAIR_PR17_CHECKS.txt`; +- `DELIVERY_REPAIR_PR17_CI.log`; +- `DELIVERY_REPAIR_POST_MERGE_CI.txt`; +- `DELIVERY_REPAIR_POST_MERGE_*.log`. + +## LOW 2 — supplementary logs absent from integrity manifest + +Status: **CLOSED** + +`SHA256SUMS` was regenerated only after replacing the final review, adding all mandatory-test and repair evidence, updating final reports, and refreshing the complete patch. `sha256sum -c SHA256SUMS` passed for every listed artifact. + +## Residual + +Physical three-server acceptance remains pending because all seven topology/SSH inputs are `UNSET`. It is not replaced by helper contracts, unit/integration tests, native published execution, independent review, PR CI, or post-merge CI. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_SPEC_AUDIT.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_SPEC_AUDIT.md new file mode 100644 index 0000000..17306d6 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DELIVERY_SPEC_AUDIT.md @@ -0,0 +1,64 @@ +# B-3R delivery-spec audit + +## Scope + +Audit target: final merged `main` commit `d645812d29d077e9a4dee1596ef09a70dc138090`, base `b11c277ac7f79a18670932eca4622982d9ff48e0`, implementation PR #16 and test-only delivery-review repair PR #17. + +Documents read directly: + +1. `smm-task-B3-spec-2026-08-03.md`; +2. `smm-task-B3R-spec-2026-08-04.md`; +3. `smm-hermes-task-b3r-2026-08-06.md`; +4. `smm-hermes-task-b3r-deliver-2026-08-07.md`. + +## Privileged-call budget + +`ReconcileAllAsync` creates one `FullReconciliationBatch` and passes it to every full-pass `ConvergeAsync` call (`LinkService.cs:183,218-224,297-304`). The four direct `VerifyExactFactualCountAsync` call sites are all guarded by `if (batch is null)` (`LinkService.cs:484-514`). They therefore apply to direct Create/Disable/TTL/retry paths, not to the full reconciliation pass. + +For a full pass: + +- initial factual list: `LinkService.cs:167`; +- shared final factual list, only when a mutation was attempted: `LinkService.cs:342-348,584`; +- no-drift assertion: `SecondUnchangedPassDoesNotMutateFirewall` requires one privileged call; +- k-mutation assertion: `FullPassWithMultipleMutationsUsesOneInitialAndOneFinalList` requires four mutations and exactly two list calls. + +Result: no drift = exactly one `link-list`; one or more mutation attempts = exactly two `link-list` calls. + +## Seven mandatory scenarios + +| # | Contract | Executable coverage | Exact assertion/evidence | Parent audit | +|---|---|---|---|---| +| 1 | DB-less orphan raw disconnect reports success but rule remains → Failed | `DatabaseLessOrphanIsFailedWhenDisconnectReportsSuccessButRuleRemains` | `LinkReconciliationTests.cs:196-210`: `(Examined,Converged,Failed)=(1,0,1)`, rule remains, orphan ID in failed list | PASS | +| 2 | Persisted Disabled with missing Node row verifies removal through list and remains Disabled | `PersistedDisabledCleanupDoesNotProbeMissingNodeStatus` | `LinkReconciliationTests.cs:214-233`: status probe configured to throw, pass still converges and persisted actual state is `Disabled` | PASS | +| 3 | Failed retains marker; Converged+Deferred consumes it | `MarkerIsRetainedWhenPostMutationFactCannotBeVerified`; `DeferredPoliciesConsumeMarkerAndDoNotCreatePromptHotLoop` | `LinkReconciliationTests.cs:253-277`: zero completion calls and marker remains; `:314-347`: first deferred pass completes marker and clears request | PASS | +| 4 | Six-policy mixed invariant across all three buckets | `MixedPassClassifiesEveryExaminedPolicyExactlyOnce` plus constructor guard `ReconciliationResultsRejectNonExhaustiveClassificationsWithIds` | `LinkReconciliationTests.cs:280-310`: six examined, `(2,2,2)`, exact sum and disjoint IDs; `:17-29`: non-exhaustive result throws with IDs | PASS | +| 5 | k mutations use exactly two list calls | `FullPassWithMultipleMutationsUsesOneInitialAndOneFinalList` | `LinkReconciliationTests.cs:82-106`: four repairs, four connects, exactly two list calls | PASS | +| 6 | Production-shape four-field Node rows and status/IP outcomes | `tests/bootstrap/test-bootstrap-contract.sh` real-helper contract | `:88-93` active+valid success; `:142-152` reserved+valid → 80; `:153-161` absent target row → 80; `:162-191` active blank/invalid/out-of-range IP → 78; `:192-201` malformed status → 78 | PASS | +| 7 | Reserved Node over ten scheduled passes remains Deferred, consumes marker, no hot loop | `DeferredPoliciesConsumeMarkerAndDoNotCreatePromptHotLoop` | `LinkReconciliationTests.cs:333-350`: ten iterations, exact Deferred tuple every time, first marker completion, immediate extra run is null, 30-second advances, no prompt-exhausted warning | PASS | + +Focused execution on merged main: + +- six unique xUnit methods representing requirements 1-5 and 7: **6 passed, 0 failed, 0 skipped**; +- production-shape helper/bootstrap contract: `BOOTSTRAP_CONTRACT=PASS`; +- Linux-only fact-first integration under native WSL `/tmp` copy: **1 passed, 0 failed, 0 skipped**. + +Evidence: + +- `MANDATORY_SEVEN_TESTS.log`; +- `MANDATORY_LINUX_INTEGRATION.log`; +- full clean Linux suite and published runtime: `TRIMMED_NATIVE_POST_RACE_REPAIR.log`. + +## Delivery state + +- PR #16: merged; +- PR #17 test-only missing-row regression repair: merged; +- PR checks: 14/14 pass; +- final-main post-merge workflows: 3/3, 12/12 jobs pass; +- clean WSL Linux Control: 94/94 pass; +- published `linux-x64 PublishTrimmed` orphan path: pass with exact audit JSON and `list:2, disconnect:1`; +- reports separate local, CI, native, and not-run evidence; +- physical acceptance: not run because all seven topology/SSH inputs are unset. + +## Review formality + +The authoritative provider-separated reviewer read all four complete documents and the complete implementation diff, then returned **APPROVE**. Its two non-blocking LOW findings were closed: PR #17 added the explicit absent-target-row helper regression, and the package integrity manifest was regenerated after all supplemental evidence was added. See `INDEPENDENT_REVIEW.md` and `DELIVERY_REVIEW_FINDINGS_CLOSURE.md`. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DESKTOP_BUILD_POST_RACE_REPAIR.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DESKTOP_BUILD_POST_RACE_REPAIR.log new file mode 100644 index 0000000..3cf7bd7 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DESKTOP_BUILD_POST_RACE_REPAIR.log @@ -0,0 +1,8 @@ + ServerMonitorManager.Core -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Core\bin\x64\Release\net10.0\ServerMonitorManager.Core.dll + ServerMonitorManager.Desktop -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Desktop\bin\x64\Release\net10.0-windows10.0.26100.0\win-x64\ServerMonitorManager.Desktop.dll + +Сборка успешно завершена. + Предупреждений: 0 + Ошибок: 0 + +Прошло времени 00:00:34.60 diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DESKTOP_CONTRACTS_POST_RACE_REPAIR.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DESKTOP_CONTRACTS_POST_RACE_REPAIR.log new file mode 100644 index 0000000..5790bfc --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/DESKTOP_CONTRACTS_POST_RACE_REPAIR.log @@ -0,0 +1 @@ +Windows desktop contracts passed. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/FINAL_REPOSITORY_AUDIT.txt b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/FINAL_REPOSITORY_AUDIT.txt new file mode 100644 index 0000000..cfe165f --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/FINAL_REPOSITORY_AUDIT.txt @@ -0,0 +1,6 @@ +BRANCH=main +HEAD=d645812d29d077e9a4dee1596ef09a70dc138090 +ORIGIN_MAIN=d645812d29d077e9a4dee1596ef09a70dc138090 + 25 files changed, 1904 insertions(+), 161 deletions(-) +{"mergeCommit":{"oid":"00dadf27cebbb8f311337f21ebdeadd90c1a9f8c"},"number":16,"state":"MERGED","url":"https://github.com/ochenstarik-ui/server-monitor-manager/pull/16"} +{"mergeCommit":{"oid":"d645812d29d077e9a4dee1596ef09a70dc138090"},"number":17,"state":"MERGED","url":"https://github.com/ochenstarik-ui/server-monitor-manager/pull/17"} diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW.md new file mode 100644 index 0000000..2764fe0 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW.md @@ -0,0 +1,176 @@ +# INDEPENDENT REVIEW — merged Block B-3 + B-3R + +## Verdict: **APPROVE** + +Reviewed immutable `main` commit `00dadf27cebbb8f311337f21ebdeadd90c1a9f8c` against base `b11c277ac7f79a18670932eca4622982d9ff48e0`, covering the complete 25-file `base..merge` diff: 1,895 insertions and 161 deletions. + +The following four normative documents were read completely before assessing the implementation: + +1. `smm-task-B3-spec-2026-08-03.md` +2. `smm-task-B3R-spec-2026-08-04.md` +3. `smm-hermes-task-b3r-2026-08-06.md` +4. `smm-hermes-task-b3r-deliver-2026-08-07.md` + +The previous `INDEPENDENT_REVIEW.md` was treated only as historical context. + +## Findings + +### BLOCKING + +None. + +### HIGH + +None. + +### MEDIUM + +None. + +### LOW + +1. **The authoritative B-3R request to preserve an explicit missing-row helper regression test is only indirectly covered.** + + - The helper directly implements missing-row → exit 80 at `deploy/ochenstarik-smm-policy-apply:53-54`. + - The real-helper contract proves the same exit-80 function and exact `mesh.node-not-activated` marker through a production-shaped `reserved` row at `tests/bootstrap/test-bootstrap-contract.sh:142-152`. + - Active valid, blank/invalid/out-of-range IP, and malformed-status cases are covered at `tests/bootstrap/test-bootstrap-contract.sh:88-94,153-192`. + - There is no separate invocation where `target` is entirely absent from `nodes.tsv`, although authoritative B-3R requested that this pre-existing case be retained. + + **Acceptance effect:** non-blocking. The separate 2026-08-06 seven-test acceptance list does not require the absent-row case, the branch is a direct `[[ -n "$record" ]] || node_not_activated`, and the exact exit-80 marker path is exercised by the reserved-row case. Adding an explicit absent-row contract remains advisable to prevent future changes from conflating “missing” with corrupt registry state. + +2. **Two supplementary evidence logs are not integrity-covered by `SHA256SUMS`.** + + - `SHA256SUMS:1-49` validates all 49 entries it lists, but the manifest ends without entries for: + - `MANDATORY_LINUX_INTEGRATION.log` + - `MANDATORY_SEVEN_TESTS.log` + - Those files contain evidence at `MANDATORY_LINUX_INTEGRATION.log:1-11` and `MANDATORY_SEVEN_TESTS.log:1-14`. + + **Acceptance effect:** non-blocking for the immutable merged implementation. All 49 listed checksums independently matched, and the omitted results are corroborated by the full Linux/Windows/CI evidence. The delivery package should regenerate its manifest after replacing this review so every final package file is covered. + +## Seven-test acceptance table + +| # | Exact test/script | Assertions inspected | Assessment | +|---:|---|---|---| +| 1 | `LinkReconciliationTests.DatabaseLessOrphanIsFailedWhenDisconnectReportsSuccessButRuleRemains` | Configures `DisconnectLeavesRules=true`; after `ReconcileAllAsync`, asserts `(Examined, Converged, Failed) == (1,0,1)`, the rule remains in the final factual listing, and `FailedPolicyIds` contains the synthetic `orphan:` ID (`tests/ServerMonitorManager.Control.Tests/LinkReconciliationTests.cs:195-211`). | **PASS — direct coverage.** Proves helper success is insufficient without exact post-mutation cardinality. | +| 2 | `LinkReconciliationTests.PersistedDisabledCleanupDoesNotProbeMissingNodeStatus` | Starts from a persisted disabled policy, reinjects its rule, configures status probing to throw node-not-activated, then asserts `(1,1,0)` and persisted `ActualState == "Disabled"` (`LinkReconciliationTests.cs:213-233`). | **PASS — direct behavioral coverage.** The test would fail if cleanup depended on `link-status`; production uses the final `link-list`. | +| 3 | `LinkReconciliationTests.MarkerIsRetainedWhenPostMutationFactCannotBeVerified` **plus** `LinkReconciliationTests.DeferredPoliciesConsumeMarkerAndDoNotCreatePromptHotLoop` | Failed final factual verification asserts `(1,0,1)`, zero completion calls, and retained generation (`LinkReconciliationTests.cs:252-277`). Deferred-only completion asserts `(1,0,0,1)`, exact deferred ID, marker consumed once, and immediate repeat throttled (`LinkReconciliationTests.cs:313-347`). | **PASS.** Failed and Deferred sides are directly tested. A combined Converged+Deferred set is indirect, but non-blocking: production completion checks only `result.Failed > 0` at `LinkReconciliationBackgroundService.cs:69-85`; converged-only completion is separately covered by `MarkerCreatedAfterNormalPassTriggersPromptAdditionalPass` at `LinkReconciliationTests.cs:541-565`. | +| 4 | `LinkReconciliationTests.MixedPassClassifiesEveryExaminedPolicyExactlyOnce` | Builds six policies with two converged, two mutation failures, and two deferred connects; asserts `Examined == 6`, `(Converged, Failed, Deferred) == (2,2,2)`, sum equals examined, two IDs in each non-success bucket, and no overlap (`LinkReconciliationTests.cs:279-311`). | **PASS — direct six-policy invariant coverage.** Constructor-level rejection of non-exhaustive results is additionally tested at `LinkReconciliationTests.cs:17-29`. | +| 5 | `LinkReconciliationTests.FullPassWithMultipleMutationsUsesOneInitialAndOneFinalList` | Creates four policies, removes all factual rules, runs the full pass, then asserts `(4,4,0,0)`, exactly two additional `ListRulesAsync` calls, and exactly four connects (`LinkReconciliationTests.cs:81-106`). | **PASS — direct `k=4` batching-budget proof.** | +| 6 | `tests/bootstrap/test-bootstrap-contract.sh` | Active four-field source/target rows produce a valid connect command (`:88-94`); reserved+valid IP gives exit 80 and exact marker (`:142-152`); active+blank, invalid, and out-of-range IP each give exit 78 and exact diagnostic (`:153-182`); malformed status gives exit 78 and exact diagnostic (`:183-192`). Script completed with `BOOTSTRAP_CONTRACT=PASS`. | **PASS.** Production-shaped real-helper coverage. Completely absent target-row behavior is indirect as noted under LOW, but does not invalidate this mandatory seven-test item. | +| 7 | `LinkReconciliationTests.DeferredPoliciesConsumeMarkerAndDoNotCreatePromptHotLoop` | Executes ten scheduled iterations; every pass is `(1,0,0,1)` with the exact policy ID, first pass consumes the marker, immediate extra invocation returns null, subsequent passes occur only after 30-second advances, and no “prompt exhausted” warning appears (`LinkReconciliationTests.cs:313-351`). | **PASS.** Repeated Deferred scheduling is directly tested; real reserved-row → exit 80 is separately proven by the helper contract, so the end-to-end composition is indirect but adequate and non-blocking. | + +`MANDATORY_SEVEN_TESTS.log:2-14` records six focused xUnit tests passing with zero skipped plus the production-shaped helper contract passing. The apparent count of six xUnit methods is correct because `DeferredPoliciesConsumeMarkerAndDoNotCreatePromptHotLoop` satisfies both the Deferred half of criterion 3 and criterion 7. + +## Full-pass list budget versus direct paths + +The required full-pass budget is satisfied: + +- Initial factual snapshot: `LinkService.ReconcileAllAsync` calls `ListRulesAsync` once at `src/ServerMonitorManager.Control/LinkService.cs:164-181`. +- Both full-pass convergence calls receive the same non-null `FullReconciliationBatch`: + - persisted candidates: `LinkService.cs:218-224` + - factual orphans: `LinkService.cs:297-304` +- All four per-mutation `VerifyExactFactualCountAsync` calls are guarded by `if (batch is null)`: + - duplicate cleanup: `LinkService.cs:480-487` + - connect: `LinkService.cs:489-496` + - persisted disconnect: `LinkService.cs:498-505` + - DB-less raw disconnect: `LinkService.cs:507-514` +- Therefore they belong only to direct Create, Disable/certificate cleanup, reconnect, TTL, and retry paths, whose callers omit a batch at `LinkService.cs:44,89,100,131-135,422-423`. +- A full pass with any attempted mutation takes exactly one shared final snapshot in `FinalizeBatchAsync` at `LinkService.cs:342-348,565-584`. +- No-drift budget is asserted as one total privileged call and zero changed mutation counts by `SecondUnchangedPassDoesNotMutateFirewall` at `LinkReconciliationTests.cs:58-79`. +- Multi-mutation budget is asserted as two lists for four mutations at `LinkReconciliationTests.cs:81-106`. +- The native trimmed orphan run independently records `link-list`, raw disconnect, `link-list` and `HELPER_CALLS=list:2,disconnect:1` at `TRIMMED_NATIVE_POST_RACE_REPAIR.log:148-156`. + +Result: **no hidden `1+k` full-pass path remains**. + +## Race, locking, batching, and result accounting + +The prior stale-finalization race is adequately repaired: + +- Per-item mutation work retains sorted endpoint node locks before the selected Link gate at `LinkService.cs:192-205,268-279`. +- Batch finalization acquires all distinct endpoint locks in ordinal order at `LinkService.cs:569-573,770-787`. +- It reads the current effective policy by natural key before gate selection at `LinkService.cs:574-579`. +- Current Link gates are deduplicated and globally sorted at `LinkService.cs:580-583,808-825`. +- The single final factual snapshot occurs only after those locks and gates are held at `LinkService.cs:584`. +- The effective natural-key row is re-read after the snapshot at `LinkService.cs:585-590`. +- Identity, version, desired state, or newly appearing persisted orphan state makes staged work stale at `LinkService.cs:631-646`; stale work does not write state, audit, or success events. +- `BatchFinalizationDoesNotFinalizeOrPublishStalePolicyVersion` pauses after capture of the second list, changes desired version, then asserts one failure, no overwrite of the new state, and no stale `link.active`/`link.reapplied` event at `LinkReconciliationTests.cs:108-152,825-831`. +- A factual orphan adopted as an active policy while waiting for node locks is not removed, as asserted by `FactualOrphanAdoptedAsActiveUnderNodeLocksIsNotRemoved` at `LinkReconciliationTests.cs:512-538`. +- No new lock class was introduced; synchronization remains sorted node locks → per-Link gate. +- Full- and node-pass constructors enforce `Converged + Failed + Deferred == Examined` at `LinkService.cs:894-928` and `ControlStore.cs:1774-1806`. + +## Security and privileged-helper boundary + +No blocking boundary regression was found: + +- `link-list` requires exactly one argument at `deploy/ochenstarik-smm-policy-apply:239-244`. +- All helper execution remains argument-list based with `UseShellExecute=false`, non-interactive sudo, and no shell interpolation at `LinkPolicyApplier.cs:126-141`. +- Exit 79 is recognized only with the exact `mesh.firewall-unavailable` marker; exit 80 only with the exact node-not-activated marker at `LinkPolicyApplier.cs:148-163`. +- `LC_ALL=C` and root/test-mode boundaries remain explicit at `ochenstarik-smm-policy-apply:1-27`. +- Missing `/usr/sbin/nft` is fail-closed and separate from missing-table classification at `ochenstarik-smm-policy-apply:83-115`. +- `link-list` exposes only validated `smm::::` comments; foreign rules are skipped, malformed managed-looking comments are diagnosed, and duplicates are retained for reconciliation at `ochenstarik-smm-policy-apply:158-189`. +- Raw disconnect deletes every handle with the exact managed comment and no longer consults `nodes.tsv` at `ochenstarik-smm-policy-apply:140-155`. +- Marker observation/completion is generation-aware under the privileged lock at `ochenstarik-smm-policy-apply:205-237`. +- The factual interfaces are compile-time mandatory: `ListRulesAsync` and raw `ApplyDisconnectAsync(LinkRule, …)` have no default implementation at `LinkPolicyApplier.cs:7-13`; all production/test implementations implement both. + +## Audit, retention, Desktop, and scope boundaries + +- DB-less orphan success is finalized only after exact zero cardinality; orphan audit is persisted before `link.orphan-removed` publication at `LinkService.cs:648-675`. +- Audit details use named `LinkOrphanAuditDetails` and source-generated `ControlJsonContext` at `ControlJsonContext.cs:5-13` and `ControlStore.cs:1376-1398`. +- Retention removes the complete history only when the latest natural-key row is old `Disabled/Disabled`; Active and drifted latest policies are preserved at `ControlStore.cs:355-388`. The regression test asserts two completed rows deleted, Active and Failed rows retained, and no older version resurrected at `ControlMaintenanceTests.cs:112-166`. +- `LinkRetentionDays` has a default, startup validation, appsettings value, and bootstrap environment value at `ControlOptions.cs:28-36`, `Program.cs:34-54`, `appsettings.json:6-16`, and `deploy/ochenstarik-server-monitor-manager.sh:493-503`. +- Desktop defaults to latest effective Active or drifted policies, offers an explicit history toggle, and calculates counters over the displayed set at `LinksPage.xaml.cs:20-41` and `LinksPage.xaml:78-106`. +- Pending activation is presented as an informational expected state rather than an error at `MeshModels.cs:65-74` and `MainPage.xaml.cs:1265-1276`. +- `IsEligibleForFullReconciliation` is absent. +- Changes outside Link reconciliation are limited to the required configuration, documentation, tests, retention, helper, and Desktop presentation work. No Block C implementation or unrelated Desktop refactor appears in the complete diff. + +## Verification and evidence separation + +### Independently executed during this review + +- `git diff --check b11c277..00dadf2` — pass. +- `bash -n deploy/ochenstarik-smm-policy-apply` — pass. +- `bash -n tests/acceptance/three-server-mesh.sh` — pass. +- `bash tests/bootstrap/test-bootstrap-contract.sh` — `BOOTSTRAP_CONTRACT=PASS`. +- Live GitHub query confirmed PR #16 merged with: + - base `b11c277ac7f79a18670932eca4622982d9ff48e0` + - reviewed head `ee7d89c1d02cba7e0418637282ce274b60edde69` + - merge `00dadf27cebbb8f311337f21ebdeadd90c1a9f8c` +- Live GitHub checks confirmed all 14 PR checks passed. +- Live commit-run query confirmed all three post-merge workflows completed successfully. +- Final repository status remained clean at the expected immutable merge SHA. +- All 49 checksums listed in `SHA256SUMS` matched. + +### Supplied deterministic/native evidence inspected + +- Windows committed Control: 94 passed, zero failed/skipped at `WINDOWS_CONTROL_COMMITTED.log:1-9`. +- Clean WSL Linux Control: 94 passed, zero failed/skipped at `TRIMMED_NATIVE_POST_RACE_REPAIR.log:116-119`. +- Published self-contained `linux-x64 PublishTrimmed` completed at `TRIMMED_NATIVE_POST_RACE_REPAIR.log:120-147`. +- The published executable executed the orphan path and emitted the exact durable audit JSON at `TRIMMED_NATIVE_POST_RACE_REPAIR.log:148-150`. +- Native helper cardinality was exactly two lists and one disconnect at `TRIMMED_NATIVE_POST_RACE_REPAIR.log:151-156`. +- Desktop Release build completed with zero warnings/errors at `DESKTOP_BUILD_POST_RACE_REPAIR.log:1-8`; Desktop contracts passed at `DESKTOP_CONTRACTS_POST_RACE_REPAIR.log:1`. +- PR evidence reports 14/14 checks passed with zero skipped at `CI_CHECKS.txt:1-20`. +- Post-merge evidence reports three successful workflows and 12/12 successful jobs with zero skipped at `POST_MERGE_CI.txt:1-21`, including Linux Control, Windows build/security/MSIX, native Ubuntu matrices, release archives, and Debian systemd restart matrices. +- Existing `IL2026` trim warnings are confined to unchanged provisioning serialization paths (`TRIMMED_NATIVE_POST_RACE_REPAIR.log:124-145`); they do not affect the executed B-3 orphan-audit path. + +`REPORT.md:3-5,72-84` and `TEST_EVIDENCE.md:22-102` correctly separate Windows-local, Linux-native, PR CI, post-merge CI, and unexecuted physical acceptance. Contract/mock/native-artifact checks are not represented as physical topology acceptance. + +## Residual physical acceptance + +Physical three-server acceptance was **not run and is not claimed**. All required topology inputs remain `UNSET` at `PHYSICAL_INPUT_STATUS.txt:1-7`. + +The outstanding command remains: + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh +``` + +The harness contains factual connectivity, firewall restore, injected disabled-policy orphan cleanup, backup restore, and reboot checks at `tests/acceptance/three-server-mesh.sh:183-311`, but script existence and syntax do not establish physical behavior. + +Final delivery status remains: + +**merged / verified, physical acceptance pending** + +## Review side effects + +- Repository or evidence files created or modified: **none** +- Commits, pushes, PR actions, merges, or evidence rewrites: **none** \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW_INITIAL.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW_INITIAL.md new file mode 100644 index 0000000..bd76ab8 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW_INITIAL.md @@ -0,0 +1,316 @@ +# VERDICT: **REQUEST_CHANGES** + +**Количество замечаний:** **6** + +- **BLOCKING:** 2 +- **HIGH:** 2 +- **MEDIUM:** 1 +- **LOW:** 1 + +Прочитан полный authoritative B-3 spec — 163 строки. Проверен весь diff от `b11c277ac7f79a18670932eca4622982d9ff48e0`: **23 пути, +1043 / −125**, а также неизменённые пути создания/резервирования mesh Node, reconnect, TTL, reenrollment, helper/sudo и CI. + +--- + +## BLOCKING + +### B1. DB-less orphan не проверяется фактом; Disabled cleanup может удалить правило, но записать `PendingActivation` и потребить marker + +**Файлы:** + +- `src/ServerMonitorManager.Control/LinkService.cs:387-455` +- `src/ServerMonitorManager.Control/LinkService.cs:266-286` +- `deploy/ochenstarik-smm-policy-apply:122-138` +- `deploy/ochenstarik-smm-policy-apply:173-184` +- `src/ServerMonitorManager.Control/LinkReconciliationBackgroundService.cs:74-84` + +**Проблема:** + +1. Для DB-less orphan (`persisted:false`) выполняется raw `link-disconnect`, но блок factual verification намеренно пропускается: + + ```csharp + if (persisted) + { + await VerifyFactualStateAsync(...); + } + ``` + + После удаления код просто присваивает синтетическому объекту `ActualState=Disabled`. Нет второго `link-list` и нет доказательства, что все handles действительно исчезли. + +2. Для persisted `Disabled` правило удаляется raw helper-операцией, после чего `VerifyFactualStateAsync` вызывает `link-status`. Но `link-status` требует обе записи в `nodes.tsv`. Если Node отсутствует, helper возвращает exit 80 уже **после успешного удаления правила**. `ConvergeAsync` ловит это и записывает: + + ```text + ActualState=PendingActivation + LastError=mesh.node-not-activated + ``` + +3. `PendingActivation` не учитывается ни как `Failed`, ни как `Converged` в `ReconcileAllAsync`. Поэтому возможен результат: + + ```text + Examined=1, Converged=0, Failed=0 + ``` + + Фоновый сервис видит `Failed == 0` и потребляет marker. + +Это нарушает требования: + +- exact post-mutation factual verification; +- удаление всех Disabled/no-DB duplicates; +- корректную семантику `Examined/Converged/Failed`; +- marker не должен считаться успешно завершённым при неклассифицированном результате. + +**Исправление:** + +- После каждой mutation сверять факт повторным `link-list`, а не `link-status`. +- Для `Active` требовать **ровно одну** запись. +- Для `Disabled` и DB-less orphan требовать **ноль** записей. +- Не делать factual verification удаления зависимой от наличия Node в `nodes.tsv`. +- Добавить инвариант результата: каждый examined элемент должен попасть ровно в `Converged`, `Failed` либо явно типизированное ожидаемое состояние, которое фоновой сервис обрабатывает сознательно. +- Добавить тесты: + - DB-less disconnect сообщает успех, но оставляет правило; + - persisted Disabled с отсутствующим Node; + - marker не потребляется при не подтверждённом factual результате. + +--- + +### B2. B3-6 не работает для реального зарезервированного, но ещё не активированного Node + +**Файлы:** + +- `deploy/ochenstarik-smm-policy-apply:37-44` +- `deploy/ochenstarik-server-monitor-manager.sh:375-389` +- `deploy/ochenstarik-server-monitor-manager.sh:852-883` +- `tests/bootstrap/test-bootstrap-contract.sh` — новый inactive-node fixture + +**Проблема:** + +`reserve_node_address` записывает ещё не активированный Node так: + +```text +node-id10.77.0.x-reserved +``` + +`peer-add` позже меняет четвёртое поле на `active`. + +Новый `lookup_node_ip` проверяет только существование строки и валидность второго поля — IP. Поля public key/status не читаются. Поэтому реальная строка со статусом `reserved` принимается как активированная, и `link-connect` создаёт nft accept-rule вместо exit 80. + +Новый тест моделирует другой случай — полное отсутствие строки — и потому не покрывает фактическую топологию. + +Я воспроизвёл это напрямую с production-shaped fixture: + +```text +source 10.77.0.2 key-source active +target 10.77.0.3 - reserved +``` + +Фактический результат helper: + +```text +EXIT=0 +nft add rule inet ochenstarik_smm links ip saddr 10.77.0.2 ip daddr 10.77.0.3 tcp dport 22 counter accept comment smm:source:target:tcp:22 +``` + +Ожидался exit 80 / `mesh.node-not-activated`. + +**Исправление:** + +- `lookup_node_ip` должен разбирать как минимум address и status. +- `status != active` должен давать exit 80 с точным `mesh.node-not-activated`. +- Повреждённая строка `active` с пустым/невалидным IP должна оставаться exit 78. +- Тестировать настоящий формат: + - `reserved` + валидный IP → exit 80; + - `active` + валидный IP → success; + - `active` + невалидный IP → exit 78. + +--- + +## HIGH + +### H1. Reflection-style сериализация orphan audit не имеет доказанной безопасности в trimmed runtime + +**Файл:** `src/ServerMonitorManager.Control/ControlStore.cs:1376-1398` + +Используется: + +```csharp +JsonSerializer.Serialize(new +{ + rule.SourceNodeId, + rule.TargetNodeId, + rule.Protocol, + rule.Port +}) +``` + +Остальной Control последовательно передаёт source-generated `JsonTypeInfo`. Отсутствие trim warnings не доказывает, что этот путь успешно выполнится в опубликованном trimmed artifact. Сам orphan execution path в опубликованном бинарнике не запускался. + +Если reflection metadata/resolver недоступны, исключение возникнет **после firewall mutation**. К этому моменту `link.orphan-removed` уже опубликован, затем общий `catch` классифицирует операцию как `Partial` и публикует failure event. Получится противоречивая телеметрия: правило фактически могло быть удалено, orphan event уже отправлен, но pass считается failed. + +**Ответ на uncertainty №2:** текущего доказательства недостаточно; реализация не соответствует принятой source-generated convention и должна считаться небезопасной для trimmed delivery до runtime-проверки. + +**Исправление:** + +- Ввести именованный audit DTO. +- Добавить его в source-generated JSON context в Control assembly. +- Вызывать `JsonSerializer.Serialize(value, Context.Default.TypeInfo)`. +- Запустить именно опубликованный `linux-x64 PublishTrimmed` artifact через orphan-removal path и проверить содержимое audit. +- Лучше записывать audit до публикации финального success event либо явно определить атомарную последовательность failure handling. + +--- + +### H2. Linux helper integration test остался на старом `link-status`-first протоколе и должен падать в Linux CI + +**Файл:** `tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs:45-72,89-106,139-147` + +Fake helper не реализует `link-list`. Ожидаемый invocation log также начинается с: + +```text +link-status +link-connect +link-status +``` + +Но новый `ReconcileAllAsync` всегда сначала вызывает `link-list`. + +На Windows тест возвращается на `OperatingSystem.IsLinux()==false`, поэтому заявленные **85/85** не выявляют дефект. Workflow `.github/workflows/linux-control-agent.yml` выполняет Control tests на Ubuntu, где этот тест не будет пропущен. + +Следовательно, DoD «CI зелёный на PR» не подтверждён, а тест реального typed process boundary устарел. + +**Исправление:** + +- Реализовать `link-list` в fake helper. +- Обновить expected log на новый факт-первичный протокол. +- Проверять: + - no-drift: только один `link-list`; + - missing table классифицируется непосредственно на `link-list`, без промежуточной mutation; + - mutation сопровождается factual post-list verification; + - DB-less raw disconnect. +- Выполнить Linux Control suite, а не только Windows run. + +--- + +## MEDIUM + +### M1. Default `ILinkPolicyApplier.ListRulesAsync` fail-open возвращает пустую фактическую конфигурацию + +**Файл:** `src/ServerMonitorManager.Control/LinkPolicyApplier.cs:7-14` + +```csharp +Task> ListRulesAsync(...) + => Task.FromResult>([]); +``` + +Любая забытая реализация интерфейса молча сообщает «firewall пуст», а не падает. Для источника факта это небезопасный default и уже позволил старым fakes компилироваться без реализации нового обязательного протокола. + +**Исправление:** + +- Сделать `ListRulesAsync` и raw `ApplyDisconnectAsync(LinkRule, ...)` обязательными abstract interface members. +- Обновить все test doubles явно. +- Не использовать пустой набор как compatibility fallback. + +--- + +## LOW + +### L1. Новые вложенные lock scopes существенно ухудшили читаемость + +**Файл:** `src/ServerMonitorManager.Control/LinkService.cs:181-229,240-293` + +`try` bodies на строках примерно 192 и 249 визуально находятся на уровне внешнего scope. При двух проходах — persisted candidates и factual orphans — это затрудняет проверку порядка: + +```text +sorted node locks → selected current tuple → current per-Link gate +``` + +Семантической смены порядка блокировок я не обнаружил, новых lock-классов нет. В нормальном success path одинаковые события не дублируются. Противоречивые success/failure events возможны только через проблему H1. + +**Исправление:** переформатировать вложенные scopes либо вынести обработку одного tuple/orphan в небольшие приватные методы без копирования convergence logic. + +--- + +# Сопоставление со спецификацией + +| Раздел | Статус | Вывод | +|---|---|---| +| **B3-1** | В основном PASS | Строгая арность, managed-comment parser, foreign ignore, stable TSV, exit 78/79, explicit `/usr/sbin/nft`, testing mode реализованы. | +| **B3-2** | **FAIL** | Факт-первичный проход и newest tuple есть, no-drift стоит один вызов, duplicates обрабатываются; DB-less factual verification отсутствует, Disabled verification зависит от `nodes.tsv`. | +| **B3-3** | PASS | Три prompt attempt, single warning, regular throttle restore, marker retention, firewall backoff и generation completion сохранены. | +| **B3-4** | PASS с оговоркой B1 | `Examined/Converged/Failed` разведены и consumers обновлены, но `PendingActivation` после Disabled cleanup может не попасть ни в один итоговый класс. | +| **B3-5** | PASS | Default effective+drift filter, history toggle, displayed counters, configurable retention; newest Disabled tuple удаляется вместе с историей, старый Active не воскресает. | +| **B3-6** | **FAIL** | Реальный `reserved` row ошибочно считается активированным. | +| **B3-7** | PASS | Missing mesh directory, explicit nft executable check и acceptance formatting исправлены. | + +## Обязательные тесты / DoD + +Покрытие добавлено для Disabled/Disabled, no-DB orphan, one-list no-drift, foreign rule, duplicates, marker cap, firewall 79 и retention. Однако: + +- нет real-shape теста `status=reserved`; +- нет негативного post-mutation factual verification; +- Linux process integration test устарел; +- физический acceptance не выполнялся; +- CI green не подтверждён. + +--- + +# Security / trust boundary verdict + +**Условно PASS на injection/isolation, FAIL на protocol correctness.** + +Подтверждено: + +- helper actions имеют строгую арность; +- `link-list` проверяется до общего action parser; +- foreign comments игнорируются; +- удаления ограничены точным managed comment; +- forged `smm:` comments диагностируются и не выводятся; +- exit 78/79/80 распознаются только в сочетании с точным marker; +- используется фиксированный `/usr/sbin/nft`; +- `ProcessStartInfo.ArgumentList`, `UseShellExecute=false`, shell interpolation отсутствует; +- sudoers и существующие peer/SSH boundaries не расширялись; +- неизвестные helper/nft ошибки остаются fail-closed; +- порядок node locks → per-Link gate сохранён, новых lock-классов нет; +- create/orphan adoption защищены повторным чтением effective tuple под node locks; +- mid-pass firewall unavailable останавливает последующие candidates и агрегирует событие. + +Но exit 80 сейчас не соответствует реальному состоянию `reserved`, а raw orphan protocol не подтверждает factual result. Поэтому security-sensitive kill-switch convergence пока нельзя одобрить. + +--- + +# Фактические команды и evidence + +Успешно выполнено: + +- `git diff --check b11c277...` — PASS +- `bash -n deploy/ochenstarik-smm-policy-apply tests/bootstrap/test-bootstrap-contract.sh tests/acceptance/three-server-mesh.sh` — PASS +- `bash tests/bootstrap/test-bootstrap-contract.sh` — `BOOTSTRAP_CONTRACT=PASS` +- `powershell.exe ... tests/windows/Test-DesktopContracts.ps1` — `Windows desktop contracts passed` +- ad-hoc real-shaped `reserved` Node helper probe — **EXIT=0 и nft add rule**, подтвердил BLOCKING B2 +- финальный `git status --short` и diff numstat — те же 23 изменённых пути, **+1043/−125** + +Локально не удалось независимо повторить: + +- Control 85/85; +- Desktop Release build; +- trimmed Linux publish. + +Причина: `dotnet` отсутствует и в Bash PATH, и в Windows PowerShell PATH текущего review environment. Поэтому заявленные worker evidence не считаю независимо воспроизведёнными. Особенно важно повторить Linux suite после исправления H2. + +--- + +# Physical acceptance residual + +Physical topology inputs отсутствуют. Harness содержит restore injection и остаётся готов к запуску, но фактический: + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh +``` + +не выполнялся. Статус может быть только **verified candidate / physical acceptance pending**, не «выполнено». + +--- + +## Итог + +- **Что сделано:** полный read-only review spec, diff, unchanged call paths, security/concurrency boundaries и доступных deterministic checks. +- **Главные результаты:** найдены два блокирующих дефекта — отсутствие exact factual verification удаления и неработающая семантика реального `reserved` Node. +- **Файлы:** не создавал и не изменял. +- **Ограничение:** .NET toolchain недоступен в review environment; Linux/trimmed evidence требует повторного запуска после исправлений. \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW_PRE_DELIVERY_AUDIT.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW_PRE_DELIVERY_AUDIT.md new file mode 100644 index 0000000..98cb610 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW_PRE_DELIVERY_AUDIT.md @@ -0,0 +1,172 @@ +# INDEPENDENT REVIEW — Block B-3 + additive B-3R + +## VERDICT: **APPROVE** + +## Summary + +The post-repair implementation closes the prior B1/H1 finalization race and H2 evidence gap. I found no blocking, high, medium, or low defects in the reviewed uncommitted diff. + +The full B-3 and B-3R specifications and the pre-repair verdict were read before inspecting the diff. The review covered all 24 modified paths plus the untracked `ControlJsonContext.cs` on branch `hermes/task3-b3-fact-reconciliation`, base/HEAD `b11c277ac7f79a18670932eca4622982d9ff48e0`. + +## Findings + +### BLOCKING + +None. + +### HIGH + +None. + +### MEDIUM + +None. + +### LOW + +None. + +## B1/H1 concurrency closure + +The repaired finalization architecture is adequate: + +- Every staged endpoint is covered by one globally sorted node-lock acquisition: + - `src/ServerMonitorManager.Control/LinkService.cs:569-573` + - sorting and deduplication: `LinkService.cs:770-787` +- The current effective policy is read by natural key before selecting Link gates: + - `LinkService.cs:574-579` +- Gates are selected from the current effective Link identity, falling back to the staged identity only when no current policy exists: + - `LinkService.cs:580-583` +- Selected Link gates are deduplicated and globally sorted: + - `LinkService.cs:808-825` +- The single shared final factual snapshot is taken only after all endpoint node locks and selected Link gates are held: + - `LinkService.cs:584` +- The current effective policy is read again by natural key inside that boundary and after the factual snapshot: + - `LinkService.cs:585-590` +- Identity, version, and desired state are revalidated before any final write, audit, or success/failure publication: + - `LinkService.cs:597-602` + - `LinkService.cs:631-637` +- Stale work exits through a synthetic result and does not call either finalization path: + - `LinkService.cs:598-601` + - synthetic classification only: `LinkService.cs:639-646` +- Actual-state writes and final events occur only on the non-stale branch: + - success: `LinkService.cs:603-615`, `LinkService.cs:648-675` + - failure: `LinkService.cs:617-625`, `LinkService.cs:679-694` +- Orphan audit persistence precedes the final `link.orphan-removed` event: + - audit: `LinkService.cs:670-673` + - event: `LinkService.cs:674` +- A policy appearing during DB-less orphan cleanup is safe: + - node locks prevent production `CreateAsync`, which obtains the same endpoint locks at `LinkService.cs:23-25`; + - pre-gate and in-gate natural-key reads detect an already-present policy; + - any out-of-band store mutation after the final snapshot is rejected by the second identity/version/desired-state revalidation. + +No new lock class was introduced. Production mutation paths retain the required node-locks-before-Link-gate ordering where endpoint serialization is required. + +### Deterministic race-test decision + +`BatchFinalizationDoesNotFinalizeOrPublishStalePolicyVersion` is sufficient together with the synchronization architecture; more blocking tests are not required. + +The test deliberately pauses the second, final `ListRulesAsync` after its snapshot has been captured: + +- pause configured for the second list: + `tests/ServerMonitorManager.Control.Tests/LinkReconciliationTests.cs:123-127` +- policy version/desired state changed while finalization is suspended: + `LinkReconciliationTests.cs:128-135` +- stale pass classified without overwriting the newer state: + `LinkReconciliationTests.cs:137-145` +- stale success events explicitly rejected: + `LinkReconciliationTests.cs:146-152` +- fake snapshot is captured before the pause, so the test exercises the strongest prior window—factual snapshot already stale before DB/event finalization: + `LinkReconciliationTests.cs:825-831` + +The remaining previously requested Create/Disable/Reconnect interleavings are excluded architecturally by the full endpoint-node-lock plus selected-Link-gate boundary. Duplicating each impossible production interleaving as another blocking test would not materially increase acceptance confidence. The stale branch is also visibly side-effect-free in the implementation. + +## H2 and trimmed-runtime evidence + +`TRIMMED_NATIVE_POST_RACE_REPAIR.log` establishes the required Linux and published-runtime evidence: + +- Linux Control suite: 94 passed, 0 failed, 0 skipped: + - `TRIMMED_NATIVE_POST_RACE_REPAIR.log:116-119` +- `linux-x64` trimmed publication completed: + - publish analysis/build: `TRIMMED_NATIVE_POST_RACE_REPAIR.log:120-146` + - published executable checksum: `TRIMMED_NATIVE_POST_RACE_REPAIR.log:147` +- Published runtime orphan audit contains the expected named DTO JSON: + - `TRIMMED_NATIVE_POST_RACE_REPAIR.log:148-150` +- Exact helper cardinality is two lists and one disconnect: + - summary: `TRIMMED_NATIVE_POST_RACE_REPAIR.log:151` + - invocation sequence: `TRIMMED_NATIVE_POST_RACE_REPAIR.log:153-156` + +The IL2026 warnings at log lines 124-145 are confined to pre-existing provisioning serialization in `ProvisioningBaseInstallPlanStore.cs`, `ProvisioningFactsStore.cs`, and `ProvisioningStore.cs`. None of those files is in the B-3/B-3R diff. The B-3 orphan audit itself uses a named source-generated DTO: + +- DTO/context: `src/ServerMonitorManager.Control/ControlJsonContext.cs:5-13` +- serialization: `src/ServerMonitorManager.Control/ControlStore.cs:1376-1398` + +The warnings remain legitimate project technical debt, but they do not invalidate the explicitly executed trimmed orphan path or block this scope. + +## Other requirements verified + +- Exact batching: + - initial list: `LinkService.cs:164-181` + - one final shared list only after attempted mutations: `LinkService.cs:342-348`, `LinkService.cs:584` + - no-drift one-call test: `LinkReconciliationTests.cs:58-79` + - multi-mutation two-list test: `LinkReconciliationTests.cs:81-106` +- Exhaustive result invariant: + - full pass: `LinkService.cs:894-928` + - node pass: `ControlStore.cs:1774-1806` + - mixed six-policy test: `LinkReconciliationTests.cs:279-311` +- Deferred semantics and marker consumption: + - classification: `LinkService.cs:235-249`, `LinkService.cs:315-323` + - only failures block marker completion: `LinkReconciliationBackgroundService.cs:69-85` + - ten-pass Deferred scheduling test: `LinkReconciliationTests.cs:313-351` +- Three-attempt marker throttle and single warning: + - `LinkReconciliationBackgroundService.cs:40-45` + - `LinkReconciliationBackgroundService.cs:74-93` + - `LinkReconciliationBackgroundService.cs:102-112` +- Firewall fail-stop and aggregate event: + - `LinkService.cs:164-174` + - final-list failure: `LinkService.cs:342-352` + - aggregate completion: `LinkService.cs:709-759` +- Mandatory factual interfaces have no fail-open defaults: + - `LinkPolicyApplier.cs:7-13` + - all repository implementations explicitly implement both members. +- Reserved-node and malformed-registry handling: + - `deploy/ochenstarik-smm-policy-apply:50-63` + - production-shaped contract fixtures in `tests/bootstrap/test-bootstrap-contract.sh` +- Managed/foreign/malformed comment boundary: + - `deploy/ochenstarik-smm-policy-apply:158-189` +- Helper arity and exit classification: + - `deploy/ochenstarik-smm-policy-apply:83-115` + - `deploy/ochenstarik-smm-policy-apply:239-262` +- Generation-safe marker handling: + - `deploy/ochenstarik-smm-policy-apply:205-237` +- Retention only for old latest `Disabled/Disabled` natural keys: + - `ControlStore.cs:355-388` + - regression test: `ControlMaintenanceTests.cs:112-166` +- Desktop default effective Active/drift filter, explicit history toggle, and unambiguous displayed-set counters: + - `LinksPage.xaml.cs:20-41` + - `LinksPage.xaml:78-106` +- Pending activation is presented as a non-error: + - `MeshModels.cs:65-74` + - `MainPage.xaml.cs:1265-1275` +- `IsEligibleForFullReconciliation` is absent. +- No Block C implementation appears in the diff. + +## Executed review evidence + +Independently executed: + +- `bash tests/bootstrap/test-bootstrap-contract.sh` — `BOOTSTRAP_CONTRACT=PASS` +- `bash -n deploy/ochenstarik-smm-policy-apply` — PASS +- `bash -n tests/acceptance/three-server-mesh.sh` — PASS +- `powershell.exe ... tests/windows/Test-DesktopContracts.ps1` — `Windows desktop contracts passed.` +- tracked `git diff --check b11c277...` — PASS +- untracked `ControlJsonContext.cs` whitespace check — no errors +- final branch/HEAD/status rechecked; inspected state remained the same. + +Local `dotnet test` could not be independently rerun because `dotnet` is unavailable in this reviewer shell. The parent’s Windows 94/94, Desktop Release build, and other build claims were therefore treated as supplied evidence rather than independently reproduced. The separate native Linux log provides direct 94/94 and trimmed-runtime evidence. + +## Review side effects and residual scope + +- Files created or modified by reviewer: **none** +- Physical three-server acceptance remains the documented external blocker and is not represented as completed. +- The working tree remains intentionally uncommitted; no commit, push, PR, or merge action was performed. \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW_PRE_REPAIR.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW_PRE_REPAIR.md new file mode 100644 index 0000000..3095b60 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/INDEPENDENT_REVIEW_PRE_REPAIR.md @@ -0,0 +1,200 @@ +# INDEPENDENT REVIEW — Block B-3 + B-3R + +## VERDICT: **REQUEST_CHANGES** + +### Summary + +Most B-3/B-3R requirements are implemented correctly, including fact-first batching, exhaustive result buckets, helper validation, marker throttling, source-generated orphan audit serialization, retention/UI behavior, and Linux protocol-test shape. + +However, the suspected finalization race is real and blocking. `ReconcileAllAsync` releases the existing node and Link locks before obtaining the shared final factual snapshot and finalizing staged mutations. `FinalizeBatchAsync` then writes state and emits success/failure telemetry from stale `LinkPolicy` objects without reacquiring locks or re-reading the current effective policy by natural key. + +--- + +## BLOCKING + +### B1. Batched finalization escapes the required lock/natural-key boundary and can overwrite newer operations + +**Evidence** + +- The mutation phase holds sorted node locks and the per-Link gate only inside each loop iteration: + - `src/ServerMonitorManager.Control/LinkService.cs:195-205` + - `src/ServerMonitorManager.Control/LinkService.cs:255-260` + - orphan path: `src/ServerMonitorManager.Control/LinkService.cs:271-279` + - orphan locks released: `src/ServerMonitorManager.Control/LinkService.cs:329-334` +- Only after all those locks have been released does the pass take its final factual snapshot and finalize: + - `src/ServerMonitorManager.Control/LinkService.cs:342-354` +- Staged entries retain the earlier `LinkPolicy`, expected state, and persistence flag: + - `src/ServerMonitorManager.Control/LinkService.cs:798-818` +- `FinalizeBatchAsync` trusts that staged object and the shared snapshot; it neither reacquires locks nor calls `GetEffectiveLinkAsync`: + - `src/ServerMonitorManager.Control/LinkService.cs:566-600` +- Successful finalization writes by the staged row ID and publishes events: + - `src/ServerMonitorManager.Control/LinkService.cs:605-632` +- Failed finalization also writes by the staged row ID and publishes failure: + - `src/ServerMonitorManager.Control/LinkService.cs:636-650` +- The store update is unconditional by ID—there is no expected version, desired-state predicate, or natural-key/effectiveness guard: + - `src/ServerMonitorManager.Control/ControlStore.cs:1337-1373` +- A correct natural-key lookup exists but is not used during finalization: + - `src/ServerMonitorManager.Control/ControlStore.cs:1412-1433` + +**Concrete races** + +1. **Concurrent Disable** + - Reconciliation stages an `Active` policy after applying `link-connect`. + - It releases node/Link locks. + - `DisableAsync` acquires the locks, changes desired state to `Disabled`, removes the rule, verifies it, and reports success. + - The final reconciliation list now sees zero: + - reconciliation calls `FailConvergenceAsync` with the stale expectation `Active`; + - the same row becomes `ActualState=Failed` even though its current desired state is `Disabled` and factual state is correctly disabled; + - a stale `link.failed` event/audit is produced. + - In another interleaving, the final list sees one before Disable removes it, but Disable completes before `FinalizeBatchAsync`; reconciliation then writes `ActualState=Active` over the completed disable and emits `link.active`/`link.reapplied`. + +2. **Concurrent Create for the same natural key** + - Reconciliation stages removal of a rule corresponding to an older disabled policy. + - Locks are released. + - Create inserts a newer effective `Active` version and reconnects the rule. + - If the final list sees the new rule, reconciliation marks the old staged row `Partial` and classifies the pass as failed even though the current effective policy is factually converged. + - If the final list occurs before Create reconnects, but finalization occurs afterward, reconciliation can record `link.orphan-removed` audit and publish success against a natural key that is now intentionally active. + +3. **Concurrent reconnect/node reconciliation** + - `ReconcileLinksForNodeAsync` uses the same node locks and Link gate at `LinkService.cs:121-155`. + - Since batch finalization occurs outside them, its newer factual/state result can be overwritten or contradicted by stale full-pass finalization. + +**Impact** + +- Stale `ActualState` writes. +- Incorrect `link.active`, `link.reapplied`, `link.orphan-removed`, `link.failed`, or `link.partial` events. +- Incorrect orphan audit records. +- `Converged`/`Failed` classification against an obsolete desired version. +- Possible emergency-marker retention or consumption based on a stale classification. +- Direct violation of B-3’s “sorted node locks → per-Link gate” and current/effective natural-key contract. + +**Required correction** + +The final factual snapshot and all staged finalization must remain inside an existing synchronization boundary that excludes Create/Disable/Reconnect for every staged natural key. Before writing or publishing: + +1. reacquire the relevant sorted node locks and Link gates in the prescribed order; +2. re-read the current effective policy by natural key; +3. verify that identity/version/desired state still match the staged operation; +4. classify superseded work from the current effective desired state rather than updating the stale row; +5. keep the final factual snapshot valid through DB finalization and success telemetry. + +A global new lock class would conflict with the specification; this should be solved using the existing node/per-Link lock model and natural-key revalidation. + +--- + +## HIGH + +### H1. Required concurrency regression coverage is missing + +The only new concurrency-oriented test adopts an orphan while reconciliation is blocked around the **initial** listing: + +- `tests/ServerMonitorManager.Control.Tests/LinkReconciliationTests.cs:467-491` + +That test releases its held node locks before the reconciliation mutation/finalization path proceeds. It does not place a Create, Disable, or Reconnect operation in the window between: + +1. staged mutation, +2. lock release, +3. final `link-list`, +4. `FinalizeBatchAsync`. + +Missing deterministic tests: + +- Disable after an active repair is staged but before the final list. +- Disable after the final list but before DB/event finalization. +- Create a newer active policy for a staged disabled/orphan natural key before the final list. +- Create after the final list but before orphan audit/event finalization. +- Node reconnect during the same finalization window. +- Assertions that no stale actual-state write, success/failure event, audit, or result classification survives these interleavings. + +These tests are required to close B1 and prevent recurrence. + +### H2. B-3R’s published-trimmed orphan-path runtime verification is not established + +The orphan test validates audit JSON inside the ordinary test process: + +- `tests/ServerMonitorManager.Control.Tests/LinkReconciliationTests.cs:109-147` + +The implementation correctly uses a named DTO and source-generated context: + +- `src/ServerMonitorManager.Control/ControlJsonContext.cs:5-13` +- `src/ServerMonitorManager.Control/ControlStore.cs:1376-1398` + +Audit persistence also precedes the final success event: + +- `src/ServerMonitorManager.Control/LinkService.cs:625-631` + +Nevertheless, B-3R explicitly requires executing the orphan path in the published `linux-x64 PublishTrimmed` artifact and checking the resulting audit record. The supplied deterministic evidence establishes that a self-contained trimmed artifact **builds**, not that this runtime path was executed. This acceptance evidence remains missing or was not supplied to the reviewer. + +--- + +## MEDIUM + +None beyond the blocking/high findings above. + +--- + +## LOW + +None. + +--- + +## Requirements verified as correctly represented + +- **Exact B-3R batching:** no-drift path performs one initial `ListRulesAsync`; any attempted mutation causes one shared final list: + - `LinkService.cs:164-181` + - `LinkService.cs:342-354` + - test: `LinkReconciliationTests.cs:58-106` +- **Result buckets and invariant:** `Examined = Converged + Failed + Deferred` is enforced for both result types: + - `ControlStore.cs:1774-1806` + - `LinkService.cs:822-857` +- **Deferred semantics:** `PendingActivation` maps to `Deferred`; only `Failed` blocks marker completion: + - `LinkService.cs:235-249` + - `LinkReconciliationBackgroundService.cs:69-85` +- **Prompt throttle:** three failures restore regular throttling, marker is retained, warning is emitted once: + - `LinkReconciliationBackgroundService.cs:40-45` + - `LinkReconciliationBackgroundService.cs:74-93` + - `LinkReconciliationBackgroundService.cs:102-112` +- **Firewall-unavailable initial fail-stop:** initial `link-list` failure precedes mutation and produces the aggregate path: + - `LinkService.cs:164-174` +- **Final-list firewall-unavailable handling:** staged success events are not finalized when final inspection fails: + - `LinkService.cs:342-353` +- **Mandatory factual interfaces:** `ListRulesAsync` and raw `ApplyDisconnectAsync(LinkRule, …)` have no fail-open default bodies: + - `LinkPolicyApplier.cs:7-13` +- **Reserved/malformed nodes:** four-field record is required; non-active valid status returns 80; malformed status and invalid active IP return 78: + - `deploy/ochenstarik-smm-policy-apply:50-63` + - production-shaped tests: `tests/bootstrap/test-bootstrap-contract.sh:142-192` +- **Managed-rule parsing/security boundary:** foreign comments are ignored; malformed managed comments are diagnosed; source/target/protocol/port are validated: + - `deploy/ochenstarik-smm-policy-apply:158-189` +- **Helper exits:** missing firewall is 79 with exact marker; unknown inspection errors remain 78; missing mesh directory makes `reconcile-status` complete: + - `deploy/ochenstarik-smm-policy-apply:94-115` + - `deploy/ochenstarik-smm-policy-apply:205-220` +- **Generation-safe marker completion:** compare-and-remove occurs under the helper lock: + - `deploy/ochenstarik-smm-policy-apply:223-237` +- **Linux integration shape:** fake helper supports fact-first `link-list`, asserts one list for no drift and initial+mutation+final list for drift/orphan: + - `LinkPolicyApplierIntegrationTests.cs:16-23` + - `LinkPolicyApplierIntegrationTests.cs:66-77` + - `LinkPolicyApplierIntegrationTests.cs:104-146` +- **Retention:** configurable/validated, only current completed `Disabled/Disabled` natural keys older than cutoff are removed with their history: + - `ControlOptions.cs:30` + - `Program.cs:34-54` + - `ControlStore.cs:355-388` +- **Desktop filtering and Deferred presentation:** + - `LinksPage.xaml.cs:22-41` + - `MeshModels.cs:65-74` +- **No Block C:** no Block C implementation was found in the reviewed diff. + +--- + +## Executed review evidence + +- Read both authoritative specifications completely. +- Reviewed branch `hermes/task3-b3-fact-reconciliation` at base/HEAD `b11c277ac7f79a18670932eca4622982d9ff48e0`. +- Inspected all changed paths and the untracked `ControlJsonContext.cs`. +- `git diff --check b11c277...` — **PASS**. +- `bash tests/bootstrap/test-bootstrap-contract.sh` — **PASS** (`BOOTSTRAP_CONTRACT=PASS`). +- `bash -n tests/acceptance/three-server-mesh.sh` — **PASS**. +- `bash -n deploy/ochenstarik-smm-policy-apply` — **PASS**. +- `powershell ... tests/windows/Test-DesktopContracts.ps1` — **PASS**. +- Local `dotnet test` could not run because `dotnet` is unavailable in this reviewer environment. Parent-provided 93/93 Windows and clean-WSL results were treated as evidence, not independently reproduced. +- Final status was rechecked; the review created or modified **no files**. \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_CONTROL_GREEN.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_CONTROL_GREEN.log new file mode 100644 index 0000000..b280f3b --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_CONTROL_GREEN.log @@ -0,0 +1,120 @@ +LINUX_SNAPSHOT=/tmp/hermes-b3r-linux.Qx5SYwBt + Determining projects to restore... + Restored /tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Provisioning.Helper/ServerMonitorManager.Provisioning.Helper.csproj (in 2.29 sec). + Restored /tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 15 ms). + Restored /tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 5.75 sec). + Restored /tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Agent/ServerMonitorManager.Agent.csproj (in 5.86 sec). + Restored /tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj (in 7.58 sec). +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] + ServerMonitorManager.Core -> /tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll + ServerMonitorManager.Provisioning.Helper -> /tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Provisioning.Helper/bin/Release/net10.0/ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Agent -> /tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Agent/bin/Release/net10.0/ochenstarik-smm-agent.dll + ServerMonitorManager.Control -> /tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/bin/Release/net10.0/ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> /tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll +Test run for /tmp/hermes-b3r-linux.Qx5SYwBt/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +A total of 1 test files matched the specified pattern. + +Passed! - Failed: 0, Passed: 93, Skipped: 0, Total: 93, Duration: 4 s - ServerMonitorManager.Control.Tests.dll (net10.0) diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_RED_EVIDENCE.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_RED_EVIDENCE.md new file mode 100644 index 0000000..1e46ddf --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_RED_EVIDENCE.md @@ -0,0 +1,42 @@ +# B-3R Linux RED evidence + +Дата: 2026-08-04 + +Среда: + +- WSL2 Ubuntu 26.04 +- .NET SDK 10.0.302 +- Runtime 10.0.10 +- `DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1` +- Worktree: `/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3` + +Команды: + +```bash +dotnet restore tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj +dotnet test tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj -c Release --no-restore --verbosity minimal +``` + +Результат: + +```text +Failed: 1 +Passed: 88 +Skipped: 0 +Total: 89 +Duration: 34 s +``` + +Ожидаемый RED regression: + +```text +ServerMonitorManager.Control.Tests.LinkPolicyApplierIntegrationTests.LinuxHelperFailureKeepsKillSwitchPendingAcrossControlRestart +Assert.Equal() Failure +Expected: Tuple (1, 1, 0) +Actual: Tuple (2, 2, 0) +LinkPolicyApplierIntegrationTests.cs:142 +``` + +Вывод: Linux-only process-boundary integration protocol не соответствовал фактическому B-3/B-3R full-pass поведению. Это подтверждает H2/R5 и является RED evidence перед B-3R repair, а не финальным test result. + +Restore также вывел стороннее предупреждение `NETSDK1188` о locale `zh-hant` в `Microsoft.TestPlatform.TestHost 18.0.1`; оно не являлось причиной test failure. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_TRIMMED_PUBLISH.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_TRIMMED_PUBLISH.log new file mode 100644 index 0000000..adef1e6 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_TRIMMED_PUBLISH.log @@ -0,0 +1,26 @@ + Determining projects to restore... + All projects are up-to-date for restore. + ServerMonitorManager.Core -> /tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(99,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(196,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(72,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(171,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(81,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(157,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(389,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(263,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(471,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(550,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/bin/Release/net10.0/linux-x64/ochenstarik-smm-control.dll + Optimizing assemblies for size. This process might take a while. +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(155,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__55.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(79,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__53.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(194,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__47.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(97,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__45.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(70,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__48.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(261,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__58.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(387,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__60.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(169,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__50.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(469,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__61.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ProvisioningStore.cs(548,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__62.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/tmp/hermes-b3r-linux.Qx5SYwBt/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /tmp/hermes-b3r-linux.Qx5SYwBt/artifacts/publish/linux-x64-trimmed-self-contained/ diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_TRIMMED_PUBLISH_RERUN.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_TRIMMED_PUBLISH_RERUN.log new file mode 100644 index 0000000..c129f6e --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/LINUX_TRIMMED_PUBLISH_RERUN.log @@ -0,0 +1,27 @@ + Determining projects to restore... + Restored /mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 2.88 min). + Restored /mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 2.88 min). + ServerMonitorManager.Core -> /mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(196,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(99,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(72,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(171,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(81,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(157,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(263,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(389,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(471,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(550,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/bin/Release/net10.0/linux-x64/ochenstarik-smm-control.dll + Optimizing assemblies for size. This process might take a while. +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(155,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__55.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(79,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__53.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(194,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__47.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(97,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__45.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(70,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__48.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(261,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__58.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(387,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__60.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(169,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__50.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(469,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__61.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ProvisioningStore.cs(548,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__62.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /tmp/b3r-trimmed-rebuild/ diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/MANDATORY_LINUX_INTEGRATION.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/MANDATORY_LINUX_INTEGRATION.log new file mode 100644 index 0000000..8946370 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/MANDATORY_LINUX_INTEGRATION.log @@ -0,0 +1,121 @@ +LINUX_KERNEL=Linux 6.6.87.2-microsoft-standard-WSL2 + Determining projects to restore... + Restored /tmp/smm-b3r-mandatory.WiCiRY/repo/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 901 ms). + Restored /tmp/smm-b3r-mandatory.WiCiRY/repo/src/ServerMonitorManager.Provisioning.Helper/ServerMonitorManager.Provisioning.Helper.csproj (in 135 ms). + Restored /tmp/smm-b3r-mandatory.WiCiRY/repo/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 4.1 sec). + Restored /tmp/smm-b3r-mandatory.WiCiRY/repo/src/ServerMonitorManager.Agent/ServerMonitorManager.Agent.csproj (in 4.11 sec). + Restored /tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj (in 4.71 sec). +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] + ServerMonitorManager.Core -> /tmp/smm-b3r-mandatory.WiCiRY/repo/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll + ServerMonitorManager.Provisioning.Helper -> /tmp/smm-b3r-mandatory.WiCiRY/repo/src/ServerMonitorManager.Provisioning.Helper/bin/Release/net10.0/ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Agent -> /tmp/smm-b3r-mandatory.WiCiRY/repo/src/ServerMonitorManager.Agent/bin/Release/net10.0/ochenstarik-smm-agent.dll + ServerMonitorManager.Control -> /tmp/smm-b3r-mandatory.WiCiRY/repo/src/ServerMonitorManager.Control/bin/Release/net10.0/ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> /tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll +Test run for /tmp/smm-b3r-mandatory.WiCiRY/repo/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +A total of 1 test files matched the specified pattern. + +Passed! - Failed: 0, Passed: 1, Skipped: 0, Total: 1, Duration: 1 s - ServerMonitorManager.Control.Tests.dll (net10.0) +LINUX_INTEGRATION_TEST=PASS diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/MANDATORY_SEVEN_TESTS.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/MANDATORY_SEVEN_TESTS.log new file mode 100644 index 0000000..9cb5847 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/MANDATORY_SEVEN_TESTS.log @@ -0,0 +1,14 @@ +MERGE_SHA=00dadf27cebbb8f311337f21ebdeadd90c1a9f8c +FOCUSED_XUNIT_BEGIN + ServerMonitorManager.Core -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Core\bin\Release\net10.0\ServerMonitorManager.Core.dll + ServerMonitorManager.Provisioning.Helper -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Provisioning.Helper\bin\Release\net10.0\ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Agent -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Agent\bin\Release\net10.0\ochenstarik-smm-agent.dll + ServerMonitorManager.Control -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Control\bin\Release\net10.0\ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll +Тестовый запуск для C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +Общее количество тестовых файлов (1), соответствующих указанному шаблону. + +Пройден! : не пройдено 0, пройдено 6, пропущено 0, всего 6, длительность 1 s. - ServerMonitorManager.Control.Tests.dll (net10.0) +PRODUCTION_SHAPE_HELPER_CONTRACT_BEGIN +BOOTSTRAP_CONTRACT=PASS +MANDATORY_SEVEN_SCENARIOS=PASS diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/PHYSICAL_INPUT_STATUS.txt b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/PHYSICAL_INPUT_STATUS.txt new file mode 100644 index 0000000..5a46a68 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/PHYSICAL_INPUT_STATUS.txt @@ -0,0 +1,7 @@ +HUB_SSH_HOST=UNSET +HUB_SSH_USER=UNSET +SOURCE_SSH_HOST=UNSET +SOURCE_SSH_USER=UNSET +HOME_WG_IP=UNSET +SECOND_WG_IP=UNSET +SSH_IDENTITY_FILE=UNSET diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_CI.txt b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_CI.txt new file mode 100644 index 0000000..6614783 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_CI.txt @@ -0,0 +1,21 @@ +Post-merge CI for 00dadf27cebbb8f311337f21ebdeadd90c1a9f8c +RUNS=3 +JOBS=12 +SUCCESS=12 +SKIPPED=0 +NON_GREEN=0 +RUN 31297680521 Linux control and agent completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680521 +JOB build-and-test completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680521/job/93205328908 +RUN 31297680523 Windows build completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680523 +JOB build completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680523/job/93205328925 +RUN 31297680541 Linux platform matrix completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680541 +JOB Release archive (linux-arm64) completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680541/job/93205329085 +JOB Release archive (linux-x64) completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680541/job/93205329121 +JOB Ubuntu 24.04 arm64 native VM completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680541/job/93205441087 +JOB Ubuntu 24.04 x64 native VM completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680541/job/93205441088 +JOB Debian 12 arm64 systemd restart completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680541/job/93205441104 +JOB Ubuntu 22.04 x64 native VM completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680541/job/93205441105 +JOB Debian 13 arm64 systemd restart completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680541/job/93205441107 +JOB Debian 12 x64 systemd restart completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680541/job/93205441109 +JOB Debian 13 x64 systemd restart completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680541/job/93205441119 +JOB Ubuntu 22.04 arm64 native VM completed success https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31297680541/job/93205441130 diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_LINUX_CONTROL.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_LINUX_CONTROL.log new file mode 100644 index 0000000..3e057ba --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_LINUX_CONTROL.log @@ -0,0 +1,681 @@ +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push less than a minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + * Verify formatting + * Verify three-server acceptance harness + * Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push less than a minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + * Verify formatting + * Verify three-server acceptance harness + * Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push less than a minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + * Verify three-server acceptance harness + * Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + * Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + * Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + * Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + * Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 1 minute ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + * Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + ✓ Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + ✓ Build systemd smoke release + * Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux control and agent · 31297680521 +Triggered via push about 2 minutes ago + +JOBS +* build-and-test (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + ✓ Build systemd smoke release + ✓ Verify repeated systemd installation + * Clean up systemd smoke installation + * Post Set up .NET 10 + * Post Checkout +✓ main Linux control and agent · 31297680521 +Triggered via push about 2 minutes ago + +JOBS +✓ build-and-test in 2m30s (ID 93205328908) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build + ✓ Test + ✓ Verify formatting + ✓ Verify three-server acceptance harness + ✓ Verify standalone bootstrap + ✓ Publish agent amd64 + ✓ Publish agent arm64 + ✓ Publish provisioning helper amd64 + ✓ Publish provisioning helper arm64 + ✓ Build systemd smoke release + ✓ Verify repeated systemd installation + ✓ Clean up systemd smoke installation + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +build-and-test: src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_LINUX_MATRIX.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_LINUX_MATRIX.log new file mode 100644 index 0000000..5eca4d5 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_LINUX_MATRIX.log @@ -0,0 +1,1556 @@ +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push less than a minute ago + +JOBS +* Release archive (linux-arm64) (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-x64) (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push less than a minute ago + +JOBS +* Release archive (linux-arm64) (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-x64) (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +* Release archive (linux-arm64) (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-x64) (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +* Release archive (linux-arm64) (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-x64) (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +* Release archive (linux-arm64) (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +* Release archive (linux-x64) (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +* Release archive (linux-x64) (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + * Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +* Release archive (linux-x64) (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + * Upload release archive + * Post Set up .NET 10 + * Post Checkout + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-x64) in 1m18s (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +* Ubuntu 24.04 arm64 native VM (ID 93205441087) +* Ubuntu 24.04 x64 native VM (ID 93205441088) +* Debian 12 arm64 systemd restart (ID 93205441104) +* Ubuntu 22.04 x64 native VM (ID 93205441105) +* Debian 13 arm64 systemd restart (ID 93205441107) +* Debian 12 x64 systemd restart (ID 93205441109) +* Debian 13 x64 systemd restart (ID 93205441119) +* Ubuntu 22.04 arm64 native VM (ID 93205441130) + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-x64) in 1m18s (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +* Ubuntu 24.04 arm64 native VM (ID 93205441087) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart services + * Post Checkout +* Ubuntu 24.04 x64 native VM (ID 93205441088) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart services + * Post Checkout +* Debian 12 arm64 systemd restart (ID 93205441104) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Ubuntu 22.04 x64 native VM (ID 93205441105) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart services + * Post Checkout +* Debian 13 arm64 systemd restart (ID 93205441107) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 12 x64 systemd restart (ID 93205441109) + ✓ Set up job + ✓ Checkout + * Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 13 x64 systemd restart (ID 93205441119) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Ubuntu 22.04 arm64 native VM (ID 93205441130) + ✓ Set up job + ✓ Checkout + * Download release archive + * Install twice and restart services + * Post Checkout + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-x64) in 1m18s (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +* Ubuntu 24.04 arm64 native VM (ID 93205441087) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart services + * Post Checkout +* Ubuntu 24.04 x64 native VM (ID 93205441088) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart services + * Post Checkout +* Debian 12 arm64 systemd restart (ID 93205441104) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Ubuntu 22.04 x64 native VM (ID 93205441105) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart services + * Post Checkout +* Debian 13 arm64 systemd restart (ID 93205441107) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 12 x64 systemd restart (ID 93205441109) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 13 x64 systemd restart (ID 93205441119) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Ubuntu 22.04 arm64 native VM (ID 93205441130) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart services + * Post Checkout + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-x64) in 1m18s (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 11s (ID 93205441087) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Ubuntu 24.04 x64 native VM (ID 93205441088) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + * Post Checkout +* Debian 12 arm64 systemd restart (ID 93205441104) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Ubuntu 22.04 x64 native VM (ID 93205441105) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart services + * Post Checkout +* Debian 13 arm64 systemd restart (ID 93205441107) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 12 x64 systemd restart (ID 93205441109) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 13 x64 systemd restart (ID 93205441119) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Ubuntu 22.04 arm64 native VM (ID 93205441130) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart services + * Post Checkout + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-x64) in 1m18s (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 11s (ID 93205441087) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 x64 native VM in 16s (ID 93205441088) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 12 arm64 systemd restart (ID 93205441104) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 22.04 x64 native VM in 16s (ID 93205441105) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 13 arm64 systemd restart (ID 93205441107) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 12 x64 systemd restart (ID 93205441109) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 13 x64 systemd restart (ID 93205441119) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 22.04 arm64 native VM in 17s (ID 93205441130) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-x64) in 1m18s (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 11s (ID 93205441087) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 x64 native VM in 16s (ID 93205441088) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 12 arm64 systemd restart (ID 93205441104) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + * Complete job +✓ Ubuntu 22.04 x64 native VM in 16s (ID 93205441105) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 13 arm64 systemd restart (ID 93205441107) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 12 x64 systemd restart (ID 93205441109) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 13 x64 systemd restart (ID 93205441119) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 22.04 arm64 native VM in 17s (ID 93205441130) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-x64) in 1m18s (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 11s (ID 93205441087) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 x64 native VM in 16s (ID 93205441088) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 12 arm64 systemd restart in 23s (ID 93205441104) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 22.04 x64 native VM in 16s (ID 93205441105) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +* Debian 13 arm64 systemd restart (ID 93205441107) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 12 x64 systemd restart (ID 93205441109) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 13 x64 systemd restart (ID 93205441119) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +✓ Ubuntu 22.04 arm64 native VM in 17s (ID 93205441130) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-x64) in 1m18s (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 11s (ID 93205441087) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 x64 native VM in 16s (ID 93205441088) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 12 arm64 systemd restart in 23s (ID 93205441104) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 22.04 x64 native VM in 16s (ID 93205441105) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 13 arm64 systemd restart in 30s (ID 93205441107) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +* Debian 12 x64 systemd restart (ID 93205441109) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + * Install twice and restart systemd container + * Post Checkout +* Debian 13 x64 systemd restart (ID 93205441119) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 22.04 arm64 native VM in 17s (ID 93205441130) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Linux platform matrix · 31297680541 +Triggered via push about 1 minute ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-x64) in 1m18s (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 11s (ID 93205441087) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 x64 native VM in 16s (ID 93205441088) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 12 arm64 systemd restart in 23s (ID 93205441104) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 22.04 x64 native VM in 16s (ID 93205441105) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 13 arm64 systemd restart in 30s (ID 93205441107) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +* Debian 12 x64 systemd restart (ID 93205441109) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Debian 13 x64 systemd restart in 31s (ID 93205441119) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 22.04 arm64 native VM in 17s (ID 93205441130) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +✓ main Linux platform matrix · 31297680541 +Triggered via push about 2 minutes ago + +JOBS +✓ Release archive (linux-arm64) in 1m8s (ID 93205329085) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Release archive (linux-x64) in 1m18s (ID 93205329121) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Publish compatible release + ✓ Upload release archive + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 arm64 native VM in 11s (ID 93205441087) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 24.04 x64 native VM in 16s (ID 93205441088) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 12 arm64 systemd restart in 23s (ID 93205441104) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 22.04 x64 native VM in 16s (ID 93205441105) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job +✓ Debian 13 arm64 systemd restart in 30s (ID 93205441107) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Debian 12 x64 systemd restart in 35s (ID 93205441109) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Debian 13 x64 systemd restart in 31s (ID 93205441119) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart systemd container + ✓ Post Checkout + ✓ Complete job +✓ Ubuntu 22.04 arm64 native VM in 17s (ID 93205441130) + ✓ Set up job + ✓ Checkout + ✓ Download release archive + ✓ Install twice and restart services + ✓ Post Checkout + ✓ Complete job + +ANNOTATIONS +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-arm64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#389 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#550 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#471 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#263 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#157 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningStore.cs#81 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#171 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningFactsStore.cs#72 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#196 + +! Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. +Release archive (linux-x64): src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs#99 + diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_WINDOWS.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_WINDOWS.log new file mode 100644 index 0000000..0bf830e --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/POST_MERGE_WINDOWS.log @@ -0,0 +1,531 @@ +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push less than a minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push less than a minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push less than a minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + * Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 1 minute ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + * Verify formatting + * Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + * Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + * Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + ✓ Build test-signed MSIX installer + * Upload test installer + * Post Set up .NET 10 + * Post Checkout +Refreshing run status every 3 seconds. Press Ctrl+C to quit. + +* main Windows build · 31297680523 +Triggered via push about 2 minutes ago + +JOBS +* build (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + ✓ Build test-signed MSIX installer + ✓ Upload test installer + ✓ Post Set up .NET 10 + * Post Checkout +✓ main Windows build · 31297680523 +Triggered via push about 2 minutes ago + +JOBS +✓ build in 2m38s (ID 93205328925) + ✓ Set up job + ✓ Checkout + ✓ Set up .NET 10 + ✓ Restore + ✓ Build x64 Release + ✓ Verify formatting + ✓ Verify Windows desktop contracts + ✓ Test Desktop security + ✓ Build test-signed MSIX installer + ✓ Upload test installer + ✓ Post Set up .NET 10 + ✓ Post Checkout + ✓ Complete job diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/PR_BODY.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/PR_BODY.md new file mode 100644 index 0000000..50f3493 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/PR_BODY.md @@ -0,0 +1,44 @@ +## Summary + +Implements Block B-3 and mandatory additive B-3R for fact-first Link policy reconciliation. + +- adds strict helper `link-list` factual inspection with managed-comment parsing and fail-closed exits; +- reconciles active, disabled, duplicate, orphan, and DB-less orphan rules from one initial factual snapshot; +- preserves exact batching: one list on no drift, one initial plus one shared final list when mutations are attempted; +- verifies all touched natural keys by exact multiplicity before state, audit, and success events; +- separates Converged, Failed, and Deferred results with exhaustive invariants; +- preserves generation marker, bounded retry/throttle, and firewall-unavailable semantics; +- adds lock-safe batch finalization with natural-key/version revalidation; +- adds source-generated orphan audit JSON and completed-policy retention; +- updates Desktop effective/drift filtering and PendingActivation presentation; +- extends Linux/bootstrap/Desktop/acceptance contracts. + +Block C is not included. + +## Security boundaries + +- existing `deploy/ochenstarik-smm-policy-apply` remains the only privileged policy target; +- sudoers is unchanged; +- strict argv/arity and helper exit contracts are preserved; +- no shell interpolation or broadened privilege surface; +- Linux peer/enrollment/root-owned helper boundaries are unchanged. + +## Verification + +- Windows Control Release: **94/94 PASS** +- clean WSL/Linux Control: **94/94 PASS** +- bootstrap contracts: **PASS** +- helper and acceptance script syntax: **PASS** +- Windows Desktop contracts: **PASS** +- Desktop x64 Release: **0 warnings / 0 errors** +- self-contained `linux-x64 PublishTrimmed`: **PASS** +- native published orphan audit: **PASS** +- native helper cardinality: **2× link-list, 1× link-disconnect** +- clean-base patch apply: **25/25 paths PASS** +- independent full B-3+B-3R security/spec review: **APPROVE**, no findings + +## Physical acceptance + +The mandatory three-server physical acceptance was not executed because all topology/SSH inputs are unavailable. It remains explicitly pending and is not replaced by tests, CI, or the native verifier. + +Expected delivery status after green CI and merge: **merged / verified, physical acceptance pending**. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/RACE_REPAIR_EVIDENCE.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/RACE_REPAIR_EVIDENCE.md new file mode 100644 index 0000000..f2907ce --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/RACE_REPAIR_EVIDENCE.md @@ -0,0 +1,86 @@ +# B-3/B-3R batch-finalization race repair evidence + +## Finding + +Independent pre-repair review returned `REQUEST_CHANGES` because the mutation phase released endpoint/current-Link locks before the shared final factual list and `FinalizeBatchAsync`. A concurrent desired-version change could therefore cause stale actual-state writes and stale success/failure/audit telemetry. + +Source: `INDEPENDENT_REVIEW_PRE_REPAIR.md`. + +## RED → GREEN + +A deterministic regression test was added before the production repair: + +- `LinkReconciliationTests.BatchFinalizationDoesNotFinalizeOrPublishStalePolicyVersion` +- it pauses the shared final list after mutation staging; +- changes the effective policy version/desire during that exact window; +- asserts that the newer desired/actual state is not overwritten and stale `link.active`/`link.reapplied` events are not published. + +The worker transcript records: + +- pre-production-patch focused test: exit `1` (RED; assertion payload was compacted in the transcript and is not reconstructed here); +- post-patch focused test: `1/1 PASS`; +- all reconciliation tests: `24/24 PASS`; +- worker full Windows Control: `94/94 PASS`. + +Full transcript: `RACE_REPAIR_WORKER_TRANSCRIPT.log`. + +## Repair + +`src/ServerMonitorManager.Control/LinkService.cs` now performs batch finalization under the existing required synchronization hierarchy: + +1. all distinct endpoint node locks in ordinal order; +2. effective-policy natural-key read; +3. all selected current per-Link gates in ordinal order; +4. the one shared final `ListRulesAsync`; +5. a second effective-policy natural-key read inside the gates; +6. identity/version/desired-state validation before any DB write, event, or audit. + +Stale staged work is classified once as failed without mutating the current policy or publishing stale telemetry. A DB-less orphan becomes stale if a persisted effective policy appears before finalization, preventing a false orphan audit/event. + +B-3R batching remains unchanged: + +- no mutation attempts: one initial list; +- one or more mutation attempts: one initial list plus one shared final list; +- no per-item factual list during full-pass finalization. + +## Parent post-repair verification + +### Windows and contracts + +- Control Release: `94/94 PASS`. +- Bootstrap contract: `BOOTSTRAP_CONTRACT=PASS`. +- Helper syntax: PASS. +- Three-server acceptance script syntax: PASS. +- Desktop contracts: PASS. +- Desktop x64 Release: `0 warnings`, `0 errors`. +- `git diff --check`: PASS. + +Logs: + +- `WINDOWS_CONTROL_POST_RACE_REPAIR.log` +- `DESKTOP_CONTRACTS_POST_RACE_REPAIR.log` +- `DESKTOP_BUILD_POST_RACE_REPAIR.log` + +### Clean Linux + native trimmed artifact + +Correct WSL invocation of the native harness produced: + +- clean Linux Control: `94/94 PASS`; +- self-contained `linux-x64 PublishTrimmed`: completed; +- published Control SHA256: `0a8ff5af6bc62b7c4b0cb9c33ddf032fcbc15e8bafc0bee33c9fb281250520fa`; +- native orphan audit exact payload: PASS; +- `TRIMMED_NATIVE_ORPHAN_AUDIT=PASS`; +- `HELPER_CALLS=list:2,disconnect:1`. + +Log: `TRIMMED_NATIVE_POST_RACE_REPAIR.log`. + +The publish emits known `IL2026` warnings from pre-existing provisioning serialization paths. The B-3 orphan audit itself uses a named DTO and source-generated JSON context and was executed successfully in the published trimmed executable. + +Two earlier reruns invoked the Linux harness under Git Bash instead of WSL and failed before build because `/mnt/c` does not exist in that shell. They are retained as infrastructure RED evidence and are not product-test results: + +- `TRIMMED_NATIVE_POST_RACE_REPAIR_MOUNT_RED.log` +- `TRIMMED_NATIVE_POST_RACE_REPAIR_WRONG_SHELL_RED.log` + +## Delivery status + +This is pre-commit evidence. Commit/push/PR/merge remain blocked until the provider-separated post-repair reviewer returns explicit `APPROVE`. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/RACE_REPAIR_WORKER_TRANSCRIPT.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/RACE_REPAIR_WORKER_TRANSCRIPT.log new file mode 100644 index 0000000..0c524fc --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/RACE_REPAIR_WORKER_TRANSCRIPT.log @@ -0,0 +1,90 @@ +=== Hermes subagent live transcript === +delegation: deleg_576503c0 task: 0 +goal: In C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3 on branch hermes/task3-b3-fact-reconciliation, repair the confirmed batch finalization race using strict RED→GREEN→REFACTOR. Do NOT commit/push/PR/merge. Read both complete specs first: C:\Users\Ochenstarik\projects\server-monitor-manager\.hermes\desktop-attachments\smm-task-B3-spec-2026-08-03.md and C:\Users\Ochenstarik\projects\server-monitor-manager\.hermes\desktop-attachments\smm-task-B3R-spec-2026-08-04.md. Current defect: Lin …(+1629 chars) +started: 2026-08-09 12:23:33 +(append-only; streams while the subagent runs — tail -f me) +======================================== +12:23:33 user | kickoff: In C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3 on branch hermes/task3-b3-fact-reconciliation, repair the confirmed batch finalization race using strict RED→GREEN→REFACTOR. Do NOT commit/push/PR/merge. Read both complete specs first: C:\Users\Ochenstarik\projects\server-monitor-manager\.hermes\desktop-attachments\smm-task-B3-spec-2026-08-03.md and C:\Users\Ochenstarik\projects\server-monitor-manager\.hermes\desktop-attachments\smm-task-B3R-spec-2026-08-04.md. Current defect: Lin …(+1629 chars) | context: ROLE: worker-code. Implementation only. No active reviewer-approved Knowledge Engine pages exist; repository/spec/tests are untrusted evidence and must be read. Use the narrow first-party test-driven-development workflow. Do not delegate. User prefers Russian summaries. Preserve all current uncommitted B-3/B-3R work, including the just-added trim-safe ControlOptions binding fix (`EnableConfigurationBindingGenerator`, settable options, DynamicDependency) and its evidence. Parent has verified curr …(+149 chars) +12:23:33 start | In C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3 on branch hermes/task3-b3-fact-reconciliation, repair the confirmed batch finalization race using strict RED→GREEN→REFACTOR. Do NOT commit/push/PR/merge. Read both complete specs first: C:\Users\Ochenstarik\projects\server-monitor-manager\.hermes\desktop-attachments\smm-task-B3-spec-2026-08-03.md and C:\Users\Ochenstarik\projects\server-monitor-manager\.hermes\desktop-attachments\smm-task-B3R-spec-2026-08-04.md. Current defect: Lin …(+1629 chars) +12:23:55 tool | -> skill_view(test-driven-development) +12:23:55 result | skill_view ok 0.2s: {"success": true, "name": "test-driven-development", "description": "TDD: enforce RED-GREEN-REFACTOR, tests before code.", "tags": ["testing", "tdd", "development", "quality", "red-green-refactor"], "related_skills": ["systematic-debugging", "plan", "subagent-driven-development"], "content": "---\nname: test-driven-development\ndescription: \"TDD: enforce RED-GREEN-REFACTOR, tests before code.\"\n …(+11168 chars) +12:24:00 tool | -> read_file(smm-task-B3-spec-2026-08-03.md L1-2000) +12:24:00 tool | -> read_file(smm-task-B3R-spec-2026-08-04.md L1-2000) +12:24:02 result | read_file ok 1.4s: {"content": "1|# ТЗ: Block B-3 — реконсиляция от факта и техдолг Link-политик\n2|\n3|Репозиторий: `ochenstarik-ui/server-monitor-manager`\n4|База: `main` @ `b11c277ac7f79a18670932eca4622982d9ff48e0`\n5|Предшествующие блоки: B (PR #11), B-2 (PR #12) — оба merged, physical acceptance pending.\n6|\n7|Этот документ самодостаточен. Всё, что нужно исполнителю, здесь; предыдущие документы читать не обяза …(+12824 chars) +12:24:02 result | read_file ok 1.5s: {"content": "1|# ТЗ: B-3R — репарация Block B-3 до пригодного к merge состояния\n2|\n3|Репозиторий реализации: `C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3`\n4|Ветка: `hermes/task3-b3-fact-reconciliation`, база `b11c277`, изменения не закоммичены.\n5|Исходное ТЗ: `smm-task-B3-spec-2026-08-03.md` — остаётся в силе целиком, этот документ его не заменяет, а добавляет условия при …(+13912 chars) +12:24:08 tool | -> todo(planning 5 task(s)) +12:24:08 result | todo ok 0.0s: {"todos": [{"id": "inspect", "content": "Inspect branch, uncommitted state, LinkService race path, locks, test doubles/usages", "status": "in_progress"}, {"id": "red", "content": "Add deterministic concurrency regression test and capture expected RED failure", "status": "pending"}, {"id": "green", "content": "Implement minimal lock/reread-safe batch finalization preserving batching", "status": "pe …(+348 chars) +12:24:16 tool | -> terminal(git status --short --branch + 2 commands) +12:24:17 result | terminal ok 0.6s: {"output": "## hermes/task3-b3-fact-reconciliation\n M deploy/ochenstarik-server-monitor-manager.sh\n M deploy/ochenstarik-smm-policy-apply\n M docs/linux-bootstrap.md\n M docs/roadmap.md\n M src/ServerMonitorManager.Control/ControlMaintenance.cs\n M src/ServerMonitorManager.Control/ControlOptions.cs\n M src/ServerMonitorManager.Control/ControlStore.cs\n M src/ServerMonitorManager.Control/LinkPoli …(+24950 chars) +12:24:17 tool | -> search_files(FinalizeBatchAsync|ReconcileAllAsync|ConvergeAsync|Acquire.*Lock|nodeLocks|_linkGates|Natural|ListRulesAsync) +12:24:17 tool | -> search_files(ReconcileAllAsync|ListRulesAsync|link-list|orphan|Concurrent|race|FinalizeBatch) +12:24:17 tool | -> search_files(LinkService.cs) +12:24:18 result | search_files ERROR 1.1s: {"total_count": 0, "error": "Search failed: rg: /c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control: IO error for operation on /c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src/ServerMonitorManager.Control: Системе не удается найти указанный путь. (os error 3)"} +12:24:18 result | search_files ERROR 1.1s: {"total_count": 0, "error": "Search failed: rg: /c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/tests/ServerMonitorManager.Control.Tests: IO error for operation on /c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/tests/ServerMonitorManager.Control.Tests: Системе не удается найти указанный путь. (os error 3)"} +12:24:18 result | search_files ok 1.3s: {"total_count": 0} +12:24:29 tool | -> read_file(LinkService.cs L1-1200) +12:24:29 tool | -> search_files(ReconcileAllAsync|ListRulesAsync|link-list|orphan|Concurrent|race|SetLinkActualStateAsync|Event) +12:24:29 tool | -> search_files(GetEffectiveLinkAsync|SetLinkActualStateAsync|CreateLinkAsync|Disable|Reconnect|AcquireNodeLocksAsync|AcquireLinkGateAsync) +12:24:30 result | read_file ok 1.4s: {"content": "1|using System.Collections.Concurrent;\n2|using System.Text.Json;\n3|using ServerMonitorManager.Core;\n4|\n5|namespace ServerMonitorManager.Control;\n6|\n7|public sealed class LinkService(\n8| ControlStore store,\n9| ILinkPolicyApplier applier,\n10| ControlEventBroker events)\n11|{\n12| public const string FirewallUnavailableCode = \"mesh.firewall-unavailable\";\n13| public const stri …(+27264 chars) +12:24:30 result | search_files ERROR 1.1s: {"total_count": 0, "error": "Search failed: rg: /c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/tests: IO error for operation on /c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/tests: Системе не удается найти указанный путь. (os error 3)"} +12:24:30 result | search_files ERROR 1.1s: {"total_count": 0, "error": "Search failed: rg: /c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src: IO error for operation on /c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3/src: Системе не удается найти указанный путь. (os error 3)"} +12:24:39 tool | -> read_file(LinkReconciliationTests.cs L1-1600) +12:24:39 tool | -> read_file(ControlStore.cs L1200-1699) +12:24:39 tool | -> read_file(ControlStoreTests.cs L1-500) +12:24:39 tool | -> read_file(ControlEventBroker.cs L1-400) +12:24:42 result | read_file ok 2.2s: {"content": "1|using Microsoft.Data.Sqlite;\n2|using Microsoft.Extensions.Logging;\n3|using Microsoft.Extensions.Logging.Abstractions;\n4|using Microsoft.Extensions.Options;\n5|using System.Text.Json;\n6|using ServerMonitorManager.Control;\n7|using ServerMonitorManager.Core;\n8|using Xunit;\n9|\n10|namespace ServerMonitorManager.Control.Tests;\n11|\n12|public sealed class LinkReconciliationTests : …(+40431 chars) +12:24:42 result | read_file ok 2.3s: {"content": "1200| {\n1201| throw new InvalidOperationException(\"Source or target agent is not registered.\");\n1202| }\n1203|\n1204| var now = DateTimeOffset.UtcNow;\n1205| DateTimeOffset? expiresAt = request.TtlMinutes == 0\n1206| ? null\n1207| : now.AddMinutes(request.TtlMinutes);\n1208| var versionCommand = connection.CreateCommand();\n1209| versionCommand.Transaction = transaction;\n1210| ve …(+19983 chars) +12:24:42 result | read_file ok 2.4s: {"content": "1|using Microsoft.Extensions.Options;\n2|using Microsoft.Data.Sqlite;\n3|using System.Text.Json;\n4|using ServerMonitorManager.Control;\n5|using ServerMonitorManager.Core;\n6|using Xunit;\n7|\n8|namespace ServerMonitorManager.Control.Tests;\n9|\n10|public sealed class ControlStoreTests : IAsyncDisposable\n11|{\n12| private readonly string _directory = Path.Combine(Path.GetTempPath(), …(+24298 chars) +12:24:42 result | read_file ok 1.8s: {"content": "1|using System.Collections.Concurrent;\n2|using System.Threading.Channels;\n3|using ServerMonitorManager.Core;\n4|\n5|namespace ServerMonitorManager.Control;\n6|\n7|public sealed class ControlEventBroker\n8|{\n9| private readonly ConcurrentDictionary> _subscribers = new();\n10| private long _sequence;\n11|\n12| public ControlEvent Publish(string type, strin …(+1132 chars) +12:25:46 tool | -> patch({'mode': 'patch', 'patch': '*** Begin Patch\n*** Update File: C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\tests\\ServerMonitorManager.Control.Tests\\LinkReconciliationTests.cs\n@@\n public async Ta …(+3340 chars)) +12:25:51 result | patch ok 5.4s: {"success": true, "diff": "--- a/C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\tests\\ServerMonitorManager.Control.Tests\\LinkReconciliationTests.cs\n+++ b/C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\tests\\ServerMonitorManager.Control.Tests\\LinkReconciliationTests.cs\n@@ -102,8 +102,54 @@\n Assert.Equal((4, 4, 0, 0),\r\n (result.Examined, result.Conver …(+5071 chars) +12:26:04 tool | -> terminal(dotnet test tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj -c Release --filter "FullyQualifiedName~BatchFinalizationDoesNotFinalizeOrPublishStalePolicyVersion" --logger "console;verbos …(+11 chars)) +12:26:05 result | terminal ERROR 0.4s: {"output": "/usr/bin/bash: line 3: dotnet: command not found", "exit_code": 127, "error": null} +12:26:15 tool | -> terminal(for candidate in '/c/Program Files/dotnet/dotnet.exe' '/c/Program Files (x86)/dotnet/dotnet.exe' "$HOME/.dotnet/dotnet.exe" + 4 commands) +12:26:16 result | terminal ok 0.4s: {"output": "/c/Users/Ochenstarik/.dotnet/dotnet.exe", "exit_code": 0, "error": null} +12:26:21 tool | -> terminal("$HOME/.dotnet/dotnet.exe" test tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj -c Release --filter "FullyQualifiedName~BatchFinalizationDoesNotFinalizeOrPublishStalePolicyVersion" --lo …(+31 chars)) +12:26:42 result | terminal ERROR 21.1s: {"output": "Определение проектов для восстановления...\r\n Все проекты обновлены для восстановления.\r\n ServerMonitorManager.Core -> C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Core\\bin\\Release\\net10.0\\ServerMonitorManager.Core.dll\r\n ServerMonitorManager.Provisioning.Helper -> C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\ …(+2955 chars) +12:28:07 tool | -> todo(updating 3 task(s)) +12:28:07 result | todo ok 0.0s: {"todos": [{"id": "inspect", "content": "Inspect branch, uncommitted state, LinkService race path, locks, test doubles/usages", "status": "completed"}, {"id": "red", "content": "Add deterministic concurrency regression test and capture expected RED failure", "status": "completed"}, {"id": "green", "content": "Implement minimal lock/reread-safe batch finalization preserving batching", "status": "in …(+352 chars) +12:28:34 tool | -> patch({'mode': 'patch', 'patch': '*** Begin Patch\n*** Update File: C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Control\\LinkService.cs\n@@\n if (batch.MutationAttempted)\n {\n- …(+3903 chars)) +12:28:37 result | patch ok 3.7s: {"success": true, "diff": "--- a/C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Control\\LinkService.cs\n+++ b/C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Control\\LinkService.cs\n@@ -339,20 +339,19 @@\n }\r\n }\r\n \r\n- if (batch.MutationAttempted)\r\n- {\r\n- IReadOnlyList finalRules;\r\n- t …(+5965 chars) +12:29:02 tool | -> patch(C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Control\LinkService.cs) +12:29:04 result | patch ok 2.6s: {"success": true, "diff": "--- a/C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Control\\LinkService.cs\n+++ b/C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Control\\LinkService.cs\n@@ -581,15 +581,14 @@\n pendingItems.Select(pending =>\r\n selectedByPendingId[pending.Link.Id]?.Id ?? pending.Link.Id),\r\n …(+1045 chars) +12:29:09 tool | -> patch(C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Control\LinkService.cs) +12:29:12 result | patch ok 2.2s: {"success": true, "diff": "--- a/C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Control\\LinkService.cs\n+++ b/C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Control\\LinkService.cs\n@@ -588,7 +588,7 @@\n currentByPendingId[pending.Link.Id] = await store.GetEffectiveLinkAsync(\r\n ToRule(pending.Link), canc …(+633 chars) +12:29:22 tool | -> terminal("$HOME/.dotnet/dotnet.exe" test tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj -c Release --filter "FullyQualifiedName~BatchFinalizationDoesNotFinalizeOrPublishStalePolicyVersion" --lo …(+31 chars)) +12:29:37 result | terminal ok 15.0s: {"output": "Определение проектов для восстановления...\r\n Все проекты обновлены для восстановления.\r\n ServerMonitorManager.Core -> C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Core\\bin\\Release\\net10.0\\ServerMonitorManager.Core.dll\r\n ServerMonitorManager.Provisioning.Helper -> C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\ …(+1728 chars) +12:29:59 tool | -> terminal("$HOME/.dotnet/dotnet.exe" test tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj -c Release --filter "FullyQualifiedName~LinkReconciliationTests" --logger "console;verbosity=minimal") +12:30:12 result | terminal ok 12.5s: {"output": "Определение проектов для восстановления...\r\n Все проекты обновлены для восстановления.\r\n ServerMonitorManager.Core -> C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Core\\bin\\Release\\net10.0\\ServerMonitorManager.Core.dll\r\n ServerMonitorManager.Provisioning.Helper -> C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\ …(+1167 chars) +12:30:18 tool | -> todo(updating 2 task(s)) +12:30:18 result | todo ok 0.0s: {"todos": [{"id": "inspect", "content": "Inspect branch, uncommitted state, LinkService race path, locks, test doubles/usages", "status": "completed"}, {"id": "red", "content": "Add deterministic concurrency regression test and capture expected RED failure", "status": "completed"}, {"id": "green", "content": "Implement minimal lock/reread-safe batch finalization preserving batching", "status": "co …(+354 chars) +12:30:24 tool | -> terminal("$HOME/.dotnet/dotnet.exe" test tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj -c Release --logger "console;verbosity=minimal") +12:30:39 result | terminal ok 15.3s: {"output": "Определение проектов для восстановления...\r\n Все проекты обновлены для восстановления.\r\n ServerMonitorManager.Core -> C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Core\\bin\\Release\\net10.0\\ServerMonitorManager.Core.dll\r\n ServerMonitorManager.Provisioning.Helper -> C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\ …(+1167 chars) +12:30:39 tool | -> terminal(git diff --check) +12:30:41 result | terminal ok 0.4s: {"output": "", "exit_code": 0, "error": null} +12:30:58 tool | -> read_file(LinkService.cs L330-429) +12:30:58 tool | -> read_file(LinkService.cs L555-694) +12:30:58 tool | -> read_file(LinkService.cs L790-869) +12:30:58 tool | -> read_file(LinkReconciliationTests.cs L90-169) +12:30:58 tool | -> read_file(LinkReconciliationTests.cs L745-889) +12:31:02 result | read_file ok 3.0s: {"content": "330| finally\n331| {\n332| gate.Release();\n333| }\n334| }\n335| if (firewallUnavailable)\n336| {\n337| return await CompleteFirewallUnavailablePassAsync(\n338| candidates, examined, converged, cancellationToken);\n339| }\n340| }\n341|\n342| if (batch.MutationAttempted)\n343| {\n344| IReadOnlyDictionary finalized;\n345| try\n346| {\n347| finalized = await FinalizeB …(+2513 chars) +12:31:02 result | read_file ok 3.0s: {"content": "555| var error = CompactError(exception);\n556| current = persisted\n557| ? await store.SetLinkActualStateAsync(\n558| current.Id, failureState, error, actor, cancellationToken) ?? current\n559| : current with { ActualState = failureState, LastError = error };\n560| Publish(failureEvent, current);\n561| }\n562| return current;\n563| }\n564|\n565| private async Task= 0; index--)\n792| {\n793| gates[index].Release();\n794| }\n795| throw;\n796| }\n797| }\n798|\n799| private async Task AcquireLinkGateAsync(\n800| string id,\n801| CancellationToken cancellationToken)\n802| {\n803| var gate = _reconciliationLocks.GetOrAdd(id, static _ => new SemaphoreSlim(1, 1));\n804| await gate.WaitA …(+2091 chars) +12:31:02 result | read_file ok 2.9s: {"content": "90| for (var index = 1; index <= 4; index++)\n91| {\n92| var target = $\"target-{index}\";\n93| await EnrollAgentAsync(store, target, $\"B0{index}2\", cancellationToken);\n94| await service.CreateAsync(CreateRequest(target), \"operator\", cancellationToken);\n95| }\n96| applier.EraseRules();\n97| var listsBefore = applier.ListCalls;\n98| var connectsBefore = applier.ConnectCalls;\n99| …(+3342 chars) +12:31:02 result | read_file ok 3.0s: {"content": "745| string nodeId,\n746| string thumbprint,\n747| CancellationToken cancellationToken)\n748| {\n749| var token = await store.CreateEnrollmentTokenAsync(nodeId, TimeSpan.FromMinutes(10), cancellationToken);\n750| Assert.NotNull(await store.EnrollAsync(\n751| new EnrollmentRequest(nodeId, token, \"csr\", Guid.NewGuid().ToString()),\n752| () => new IssuedCertificate(\"certificate\", \"c …(+5496 chars) +12:31:02 tool | -> terminal(git status --short --branch + 1 command) +12:31:02 result | terminal ok 0.4s: {"output": "## hermes/task3-b3-fact-reconciliation\n M deploy/ochenstarik-server-monitor-manager.sh\n M deploy/ochenstarik-smm-policy-apply\n M docs/linux-bootstrap.md\n M docs/roadmap.md\n M src/ServerMonitorManager.Control/ControlMaintenance.cs\n M src/ServerMonitorManager.Control/ControlOptions.cs\n M src/ServerMonitorManager.Control/ControlStore.cs\n M src/ServerMonitorManager.Control/LinkPoli …(+1056 chars) +12:31:22 tool | -> todo(updating 2 task(s)) +12:31:22 result | todo ok 0.0s: {"todos": [{"id": "inspect", "content": "Inspect branch, uncommitted state, LinkService race path, locks, test doubles/usages", "status": "completed"}, {"id": "red", "content": "Add deterministic concurrency regression test and capture expected RED failure", "status": "completed"}, {"id": "green", "content": "Implement minimal lock/reread-safe batch finalization preserving batching", "status": "co …(+354 chars) +12:31:37 think | Гонка batch finalization исправлена на ветке `hermes/task3-b3-fact-reconciliatio +12:31:54 assistant| Гонка batch finalization исправлена на ветке `hermes/task3-b3-fact-reconciliation`. Коммиты, push, PR и merge не выполнялись. ### Что изменено - `src/ServerMonitorManager.Control/LinkService.cs` - **342–372** — общий финальный factual read перенесён внутрь защищённой batch-finalization. - **565–646** — `FinalizeBatchAsync` теперь: - захватывает все endpoint node-locks в сортированном порядке; - перечитывает effective policy по natural key перед Link-gates; - захватывает выбранные current per-Link gates в сортированном порядке; - выполняет ровно один общий финальный `ListRulesAsync`; - повторно …(+1523 chars) +12:31:54 tool | -> execute_code(import os, tempfile from hermes_tools import terminal temp_dir = r"C:\Users\Ochenstarik\AppData\Local\Temp" repo = r"C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3" script = '''#!/usr/bin/env bash set -euo …(+812 chars)) +12:32:07 result | execute_code ok 13.2s: {"status": "success", "output": "temporary_script=C:\\Users\\Ochenstarik\\AppData\\Local\\Temp\\hermes-verify-sqlm63gr.sh\r\nexit_code=0\r\nОпределение проектов для восстановления...\r\r\n Все проекты обновлены для восстановления.\r\r\n ServerMonitorManager.Core -> C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Core\\bin\\Release\\net10.0\\ServerMonito …(+1553 chars) +12:32:14 think | Выполнена дополнительная **ad-hoc verification** через временный скрипт: +12:32:26 assistant| Выполнена дополнительная **ad-hoc verification** через временный скрипт: - Скрипт: `C:\Users\Ochenstarik\AppData\Local\Temp\hermes-verify-sqlm63gr.sh` - Фокусный concurrency regression-тест: **1/1 passed**, skipped **0** - `git diff --check`: **exit 0** - Общий exit code скрипта: **0** - Временный скрипт после запуска удалён. Это дополнительная точечная проверка изменённого поведения, а не новый полный suite-прогон. Ранее выполненный полный Windows Control Release suite дал **94/94 passed**. +12:32:26 tool | -> execute_code(import os, tempfile from hermes_tools import terminal temp_dir = r"C:\Users\Ochenstarik\AppData\Local\Temp" repo = r"C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3" body = '''#!/usr/bin/env bash set -euo p …(+957 chars)) +12:32:40 result | execute_code ok 14.1s: {"status": "success", "output": "AD_HOC_SCRIPT=C:\\Users\\Ochenstarik\\AppData\\Local\\Temp\\hermes-verify-qp5g7fej.sh\r\nAD_HOC_EXIT_CODE=0\r\nОпределение проектов для восстановления...\r\r\n Все проекты обновлены для восстановления.\r\r\n ServerMonitorManager.Core -> C:\\Users\\Ochenstarik\\projects\\server-monitor-manager-task3-b3\\src\\ServerMonitorManager.Core\\bin\\Release\\net10.0\\ServerMo …(+1567 chars) +12:32:48 think | Свежая **ad-hoc verification** выполнена: +12:32:48 assistant| Свежая **ad-hoc verification** выполнена: - Временный скрипт: `C:\Users\Ochenstarik\AppData\Local\Temp\hermes-verify-qp5g7fej.sh` - Все `LinkReconciliationTests`: **24/24 passed**, failed **0**, skipped **0** - `git diff --check` для двух изменённых файлов: **exit 0** - Общий exit code: **0** - Временный скрипт удалён после проверки. Это точечная ad-hoc проверка изменённой reconciliation-логики, не заявление о новом полном suite-прогоне. +12:32:48 final | status=completed duration=554.39s summary: Свежая **ad-hoc verification** выполнена: - Временный скрипт: `C:\Users\Ochenstarik\AppData\Local\Temp\hermes-verify-qp5g7fej.sh` - Все `LinkReconciliationTests`: **24/24 passed**, failed **0**, skipped **0** - `git diff --check` для двух изменённых файлов: **exit 0** - Общий exit code: **0** - Временный скрипт удалён после проверки. Это точечная ad-hoc проверка изменённой reconciliation-логики, н …(+41 chars) +12:32:48 final | end status=completed exit_reason=completed diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/REPORT.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/REPORT.md new file mode 100644 index 0000000..5de744b --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/REPORT.md @@ -0,0 +1,95 @@ +# Block B-3 + B-3R delivery report + +## Final status + +**merged / verified, physical acceptance pending** + +- Repository: `https://github.com/ochenstarik-ui/server-monitor-manager` +- Implementation PR: https://github.com/ochenstarik-ui/server-monitor-manager/pull/16 +- Delivery-review repair PR: https://github.com/ochenstarik-ui/server-monitor-manager/pull/17 +- Reviewed implementation commit: `ee7d89c1d02cba7e0418637282ce274b60edde69` +- Test-only repair commit: `83cbb3b6fb4ec21631953ba070f7d5d999bcde07` +- Final squash merge commit on `main`: `d645812d29d077e9a4dee1596ef09a70dc138090` +- Base: `b11c277ac7f79a18670932eca4622982d9ff48e0` +- Complete-four-document independent verdict: **APPROVE**; two non-blocking LOW findings were subsequently closed +- Changed paths: **25** +- Diff: **1904 insertions, 161 deletions** + +## Delivered scope + +Block B-3 and additive mandatory B-3R were implemented together: + +- factual `link-list` helper contract with strict argv/arity validation; +- fail-closed firewall classification and exact exit codes; +- one initial factual snapshot per full pass; +- exactly one shared final factual snapshot when mutation attempts occur; +- exact natural-key/multiplicity verification for all touched rules; +- Active repair, duplicate collapse, Disabled cleanup, and DB-less orphan removal; +- separate `Converged`, `Failed`, and `Deferred` buckets with exhaustive invariants; +- `PendingActivation` classified as Deferred; +- generation-marker completion, retention, bounded prompt retries, and firewall backoff; +- lock-safe batch finalization using sorted endpoint node locks, selected current Link gates, and repeated natural-key/version/desired-state validation; +- side-effect-free stale staged classification; +- named orphan-audit DTO with source-generated JSON context and audit-before-event ordering; +- completed Disabled/Disabled policy retention; +- Desktop effective/drift filtering, history toggle, counters, and non-error PendingActivation presentation; +- expanded Control, helper, bootstrap, Desktop, and acceptance contracts. + +Block C was not included. + +## Security boundaries + +- Existing `deploy/ochenstarik-smm-policy-apply` remains the privileged policy target. +- Sudoers was not changed. +- No broad privilege target, shell interpolation, or `UseShellExecute` was added. +- Strict helper argv and arity checks remain fail-closed. +- Linux peer credential, enrollment, and root-owned helper boundaries were not weakened. +- Foreign nftables rules are ignored and not mutated. +- Malformed managed-looking comments are diagnosed but never accepted as factual rules. + +## Review history + +- Initial independent review: `REQUEST_CHANGES`. +- Pre-race-repair review: `REQUEST_CHANGES` for stale batch finalization and missing runtime evidence. +- Repair: strict RED→GREEN with deterministic final-list/finalization interleaving test. +- Final independent full B-3+B-3R review: **APPROVE**. +- Complete delivery review after reading all four normative documents: **APPROVE**, with two non-blocking LOW findings. +- LOW closure: explicit missing-row helper regression merged through PR #17; final package manifest regenerated after all evidence changes. + +See: + +- `INDEPENDENT_REVIEW_INITIAL.md` +- `INDEPENDENT_REVIEW_PRE_REPAIR.md` +- `INDEPENDENT_REVIEW.md` +- `INDEPENDENT_REVIEW_PRE_DELIVERY_AUDIT.md` +- `DELIVERY_REVIEW_FINDINGS_CLOSURE.md` +- `RACE_REPAIR_EVIDENCE.md` + +## Artifacts + +- `B3_B3R_COMPLETE.patch` — complete base-to-reviewed-commit patch; clean-applied to all 25 paths. +- `B3_SPEC.md` and `B3R_SPEC.md` — authoritative task contracts. +- `B3R_TASK_2026-08-06.md` and `B3R_DELIVERY_2026-08-07.md` — complete additive task and delivery contract. +- `DELIVERY_SPEC_AUDIT.md` — requirement-to-test map for all seven mandatory scenarios and the full-pass privileged-call budget. +- `MANDATORY_SEVEN_TESTS.log` — six unique focused xUnit methods plus the production-shape real-helper contract. +- `MANDATORY_LINUX_INTEGRATION.log` — Linux-only fact-first integration test executed under native WSL `/tmp`, not the Windows no-op path. +- `TEST_EVIDENCE.md` — deterministic, CI, and native runtime evidence. +- `CI_CHECKS.txt` — PR check set, 14/14 pass. +- `POST_MERGE_CI.txt` — main push workflows, 12/12 jobs pass. +- `DELIVERY_REPAIR_PR17_CHECKS.txt` and `DELIVERY_REPAIR_POST_MERGE_CI.txt` — PR #17 14/14 and final-main 12/12 repair evidence. +- `TRIMMED_NATIVE_POST_RACE_REPAIR.log` — clean Linux suite, PublishTrimmed, native audit and helper cardinality. +- `SHA256SUMS` — integrity manifest computed after all other package files. + +## Known residuals + +### Physical acceptance + +The mandatory command was not executed: + +`SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh` + +All required topology/SSH inputs are `UNSET`; see `PHYSICAL_INPUT_STATUS.txt`. Tests, native verification, independent approval, and CI do not replace this acceptance. + +### Existing trim warnings + +`PublishTrimmed` reports `IL2026` warnings in pre-existing provisioning serialization paths. They are outside the B-3/B-3R changed-file scope. The B-3 orphan audit uses its source-generated DTO/context and was executed successfully in the published native binary. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/SHA256SUMS b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/SHA256SUMS new file mode 100644 index 0000000..40ef81a --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/SHA256SUMS @@ -0,0 +1,63 @@ +0a746978d02747e720043ff06123fca9123acd190b6ee07c12fa57f002055c9e AD_HOC_CHANGED_BEHAVIOR_VERIFICATION.log +a2eb65467337da89fcf66fbe2d80183ac7f123781e662509ac6f0fc47244e2b4 B3R_CHANGE_DESIGN.md +6f20115d409f465c9935c531a698c5697e975e4bfc8391305f42862e4af4ebf9 B3R_DELIVERY_2026-08-07.md +344ace09fc3e00404f21a1ebe86aae2129fa617840f89738901ace8c93a2a61c B3R_SPEC.md +4d569cf47a2949f87f06fdc2af7b706547852cc284607a67db6a2b2cf1303f12 B3R_TASK_2026-08-06.md +990c5436303dbb2d2db4b91b723f347716dd656aed6892117d9db4a25bf77d14 B3R_VERIFICATION_SNAPSHOT.md +a014302a0c4e6da594861d5d40b7232ed1bcaa92ee6b5ef8fe7508f2129a125d B3_B3R_COMPLETE.patch +801b898e8442dd4a49240f801aed711be585c78cce299a60a5d3f32a667d7acc B3_SPEC.md +fa0029b2627a0407ea214567a867285020138409e8b14b0130ba531f879107a7 CI_CHECKS.txt +0d353856f71f3cf92dc111ffc13092a1ca0de8d8097511e673b506cd8516e0d8 CI_CHECKS_WATCH.log +e24dd7df3e244e23e2871b0800887be72d3696ca0308e34f55d4f372330853cd DELIVERY_REPAIR_POST_MERGE_CI.txt +8a3105493c5575a482bfd89253162e546b08b1723a6a3ddcfb890f4d753d1efb DELIVERY_REPAIR_POST_MERGE_LINUX.log +fd4aa9c8925765b9d50843bc63a173e170c4b3ef3f3f2cd04a65bc096e13fe95 DELIVERY_REPAIR_POST_MERGE_MATRIX.log +438bf0adf3cd4f9f81ffb460cdf8216783d75836a639183b7c38b9dcf10fe628 DELIVERY_REPAIR_POST_MERGE_WINDOWS.log +479c6cf948528e54ce1480c9739a60e769780841ba0204be65fa18cde687a426 DELIVERY_REPAIR_PR17_CHECKS.txt +86abc9ea82f92ed2c9f9c08769ec10c6216a8503b5dc208e7292db9ca9c6bec8 DELIVERY_REPAIR_PR17_CI.log +35f7ced0c3fd775f376d347593cf6805190e8c02ff161690f9b936e376f73651 DELIVERY_REVIEW_FINDINGS_CLOSURE.md +e8eff7c3f062dc1b1a3d1a6b0054f07d1d3f820cd2eefec841ef5831f677b20f DELIVERY_SPEC_AUDIT.md +d7e314824d6fdc67470df811b88784381170c0e1c81fbf53a0003c6b59633693 DESKTOP_BUILD_POST_RACE_REPAIR.log +2344c0c17890affae172aa827587e4d4b5de77e151d389f8a1e7310117427daf DESKTOP_CONTRACTS_POST_RACE_REPAIR.log +42647c9a26c36be427e94a0cd8e67601641257b0f2cd778678ee7f44efd77b79 FINAL_REPOSITORY_AUDIT.txt +fa30964c63530779781ee92438b53f17e45ba3da9af57a2a5185be7d34f159fe INDEPENDENT_REVIEW.md +385ae4e86bb041a2f1e0385d2c33037800911abb8ee75b1e40fc23e3673476ea INDEPENDENT_REVIEW_INITIAL.md +d54158d96eaf452124ad3cd5e96a26b1313da93e5953d536eb29198ddabe447c INDEPENDENT_REVIEW_PRE_DELIVERY_AUDIT.md +f9ba0625d274a0cfaf27418bef290163fc05bcb4ec83eca385183d6c8c17c0ed INDEPENDENT_REVIEW_PRE_REPAIR.md +c91cf454f7641729bbc8a67e08ab1fd14166896ae1de488211a8b35bdd6eddb6 LINUX_CONTROL_GREEN.log +36b05d0e9a13ef31c66211c305f84c780f65a367d960394517b80ef095840684 LINUX_RED_EVIDENCE.md +c44d865576217e1a6870fe44d9b8c130e1b9434a7258536c2ba62fbf07f7bb42 LINUX_TRIMMED_PUBLISH.log +753886a32c07a5ba10c02d77973f468781a30274538bd6d5893f709aa21f3226 LINUX_TRIMMED_PUBLISH_RERUN.log +74b4488fab0c9b78b74c8bf31afa092ca066563dadb25b94bf98a0ba9cc1188e MANDATORY_LINUX_INTEGRATION.log +0f78920adc35ee922c328a58b645c2c4f26866a52fb100b54d7c2f7e39e6cfc4 MANDATORY_SEVEN_TESTS.log +81b3a3eff7a785bf6c838efdcf6bfbf9667f1239b4b1b6d7b4a017e9312e0367 PHYSICAL_INPUT_STATUS.txt +4c2f60b16f7905e6e70070c71d4011701099be544f4d10af3773bc88243c15ad POST_MERGE_CI.txt +4d87d432e81d6b0d965904d27a0ed8b36bb806225136c25d916624bdab5c00db POST_MERGE_LINUX_CONTROL.log +9ee8b6c71f9876c205140b3b9c0dae881ee7192062c9e4c5448180a4362e9f0e POST_MERGE_LINUX_MATRIX.log +d64062df1308c53affe8c67e6f9ea10dc99e2a55bc52d826f95d142869e87f85 POST_MERGE_WINDOWS.log +248b7faa6afbf60af6b727e8597766564e04ee287c71af0ec0c15f8d37e4388b PR_BODY.md +742c1fc9db182d2504ae64598c08ada2b7aac492300f2217bbc9a3bf2c1be79e RACE_REPAIR_EVIDENCE.md +9ee5982fbc077262cc09dc1db3609ba93a374d3dcdd080fb5a14ac97ebca8e2e RACE_REPAIR_WORKER_TRANSCRIPT.log +b44373227043874a19e515bdb139af9114269cf4743d8fdb3250f7d6399bf4f6 REPORT.md +d87e0732546c780caafd843d28e11e3ba8f1ccbdc231373e729b3dd68f84e868 STATUS-FINAL.md +aff9ba6bceea64aff03fc7f7bff55c53829cb499feb1f2ea3cc0a9d176e620d9 STATUS_PRE_MERGE.md +15c92003bcc50c73ce631c9f2bd0679cedfe8c3d7904b1db0e6c961a6fe4eb47 TEST_EVIDENCE.md +10f4641c41c909b253b87fde420dbff1c170b078901060e2028224badd5ffe4e TRIMMED_NATIVE_HOST.log +695866aceb2194ba6fa07f7ed8213bb83f0d0f06ffc4073a936b6160d7e93f64 TRIMMED_NATIVE_ORPHAN_AUDIT.log +552bb0836849d01845adc064d2642701321bb83c1ea1549a2def43a8c0e2850a TRIMMED_NATIVE_ORPHAN_AUDIT_BINDING_RED.log +12d28081124525e30540e142f5e2c6b0796025169018f98b197fff5ed94cc775 TRIMMED_NATIVE_ORPHAN_AUDIT_INIT_ONLY_RED.log +47ec1676e1f3491b2e4bf1b9092e046e034f4260219e183161f47f5bd829953c TRIMMED_NATIVE_POST_RACE_REPAIR.log +8b131823ea1b1d56c73a9d4a78a4a92d6ceb07fd159315f7f3aa2363239fd13a TRIMMED_NATIVE_POST_RACE_REPAIR_MOUNT_RED.log +8b131823ea1b1d56c73a9d4a78a4a92d6ceb07fd159315f7f3aa2363239fd13a TRIMMED_NATIVE_POST_RACE_REPAIR_WRONG_SHELL_RED.log +a4662be04dad5aa8ed47b25b44d8a0737d7578f59a1799d1d33c9a687a376578 TRIMMED_ORPHAN_AUDIT_VERIFIER.log +09720f510e4fd48202c2c1b5f5b4be2a733df0f2de2191cf591a05bbb2fc91b5 TRIMMED_ORPHAN_AUDIT_VERIFIER_RED.log +f73f560add7354129bc8f840a32c87bde723c0263aab0376c2745f2112bed479 TRIMMED_VERIFICATION.md +e2f6257b2b51dc4ecd21548a288120d2252037296fed8ecc663e03abfd298c1a TRIMMED_VERIFICATION_PRE_RACE.md +c7a07773b2dcc7d838168b6ec49bfe8a487f85794459868412a02c6b9ffa7304 WINDOWS_CONTROL_AFTER_TRIM_FIX.log +e7f3b96487e38a19157abe36ef34267ee1e942fff6a64d552c8dfc71f0f1361c WINDOWS_CONTROL_COMMITTED.log +cf9c8df23212ebed8bc5e2dbb9c02fbc867b1ae9fb07b6549845844588cfbba1 WINDOWS_CONTROL_POST_RACE_REPAIR.log +8f977fe225a93cd49af1739025b3a6a1a458fb309588c85b77b3de0f557a40f3 WINDOWS_VERIFICATION.log +19de4eb2aa83b36d1f991bec96abd3f7f3b014d1bca4e05d15032ef352a75767 WSL_DOTNET_EVIDENCE.md +0c67bbf58aa9710dfaa0c24fc1364bdaff49a1309414e19de546aa5f27e85151 trimmed-native-harness/fake-sudo-helper.sh +4c2cf780715ccc6f48eb51d8e3b41d924b01bf7c0be37babfe0a6b130b11ee7d trimmed-native-harness/run.sh +ba63ff0fd6496d34e47f50de072d4d23156f8b78e5d7259156891bdc6299742d trimmed-orphan-verifier/Program.cs +94606870f697f4ae10a011a47745573b81f1e0683775bd3ddd44198bcad169bf trimmed-orphan-verifier/TrimmedOrphanVerifier.csproj diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/STATUS-FINAL.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/STATUS-FINAL.md new file mode 100644 index 0000000..ce7b4e3 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/STATUS-FINAL.md @@ -0,0 +1,15 @@ +# Final status + +**merged / verified, physical acceptance pending** + +- Implementation PR: https://github.com/ochenstarik-ui/server-monitor-manager/pull/16 — `MERGED` +- Delivery-review repair PR: https://github.com/ochenstarik-ui/server-monitor-manager/pull/17 — `MERGED` +- Reviewed commit: `ee7d89c1d02cba7e0418637282ce274b60edde69` +- Final main commit: `d645812d29d077e9a4dee1596ef09a70dc138090` +- Independent verdict: `APPROVE` +- PR CI: PR #16 `14/14 PASS`; PR #17 `14/14 PASS` +- Final post-merge CI: `3/3 workflows`, `12/12 jobs PASS` +- Review LOW findings: `2/2 CLOSED` +- Physical topology inputs: all `UNSET` + +No Block C implementation is included. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/STATUS_PRE_MERGE.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/STATUS_PRE_MERGE.md new file mode 100644 index 0000000..7ef684f --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/STATUS_PRE_MERGE.md @@ -0,0 +1,18 @@ +# Task 3 / B-3R — текущий статус + +Дата: 2026-08-04 + +- Репозиторий реализации: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` +- Ветка: `hermes/task3-b3-fact-reconciliation` +- База: `b11c277ac7f79a18670932eca4622982d9ff48e0` +- Исходный contract: B-3 остаётся в силе целиком. +- Добавочный authoritative contract: `B3R_SPEC.md`. +- Initial review: `INDEPENDENT_REVIEW_INITIAL.md` (`REQUEST_CHANGES`, 2 BLOCKING / 2 HIGH / 1 MEDIUM / 1 LOW). +- Состояние: repair worker был запущен до получения B-3R. Его diff будет принят только после сопоставления с R1–R7 и дополнительными тестами B-3R. +- B-3R требует пакетную финальную factual verification: один стартовый `link-list`, при наличии mutations ровно один финальный `link-list` для всех затронутых ключей. +- B-3R требует `Deferred` / `DeferredPolicyIds` и инвариант `Converged + Failed + Deferred == Examined`; `Deferred` не блокирует marker. +- Commit, push и PR ещё не выполнялись. +- Финальные `REPORT.md`, `TEST_EVIDENCE.md`, patch/ZIP, `CI_CHECKS.txt`, final review и `SHA256SUMS` будут сформированы после repair, Linux CI и merge. +- Physical acceptance: pending из-за отсутствующих topology/SSH inputs. + +Этот файл — промежуточный status manifest, а не финальный отчёт. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TEST_EVIDENCE.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TEST_EVIDENCE.md new file mode 100644 index 0000000..0fa1b7b --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TEST_EVIDENCE.md @@ -0,0 +1,138 @@ +# Block B-3 + B-3R test evidence + +## Final immutable snapshot + +- Reviewed commit: `ee7d89c1d02cba7e0418637282ce274b60edde69` +- Implementation merge commit: `00dadf27cebbb8f311337f21ebdeadd90c1a9f8c` +- Test-only delivery repair: `83cbb3b6fb4ec21631953ba070f7d5d999bcde07` +- Final main commit: `d645812d29d077e9a4dee1596ef09a70dc138090` +- PRs: https://github.com/ochenstarik-ui/server-monitor-manager/pull/16 and https://github.com/ochenstarik-ui/server-monitor-manager/pull/17 + +## TDD race repair + +Test added before production repair: + +`LinkReconciliationTests.BatchFinalizationDoesNotFinalizeOrPublishStalePolicyVersion` + +- focused pre-patch run: exit `1` — RED; +- focused post-patch run: **1/1 PASS**; +- all `LinkReconciliationTests`: **24/24 PASS**; +- full Windows Control after repair: **94/94 PASS**. + +The transcript compacted the RED assertion payload; no Expected/Actual text is reconstructed. The exit sequence and production-patch ordering are preserved in `RACE_REPAIR_WORKER_TRANSCRIPT.log`. + +## Parent deterministic verification + +| Gate | Result | Evidence | +|---|---:|---| +| Windows Control Release, post-repair | 94/94 PASS | `WINDOWS_CONTROL_POST_RACE_REPAIR.log` | +| Windows Control Release, committed tree | 94/94 PASS | `WINDOWS_CONTROL_COMMITTED.log` | +| Bootstrap contracts | PASS | `WINDOWS_CONTROL_POST_RACE_REPAIR.log` | +| Helper bash syntax | PASS | same command group, exit 0 | +| Three-server acceptance script syntax | PASS | same command group, exit 0 | +| Windows Desktop contracts | PASS | `DESKTOP_CONTRACTS_POST_RACE_REPAIR.log` | +| Desktop x64 Release | 0 warnings / 0 errors | `DESKTOP_BUILD_POST_RACE_REPAIR.log` | +| `git diff --check` | PASS | post-repair and committed checks | +| Clean-base patch apply | 25/25 paths PASS | delivery apply-check output | + +## Clean Linux and published native runtime + +Executed under WSL2 Ubuntu 26.04 with .NET SDK `10.0.302` and `DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1`: + +- clean Linux Control suite: **94 passed, 0 failed, 0 skipped**; +- self-contained `linux-x64 PublishTrimmed`: completed; +- published Control SHA256: `0a8ff5af6bc62b7c4b0cb9c33ddf032fcbc15e8bafc0bee33c9fb281250520fa`; +- published executable started successfully with generated configuration binding; +- exact durable audit payload: + `system:reconcile|link.orphan-removed|source:target:tcp:2222|{"sourceNodeId":"source","targetNodeId":"target","protocol":"tcp","port":2222}`; +- `TRIMMED_NATIVE_ORPHAN_AUDIT=PASS`; +- helper sequence: `link-list`, `link-disconnect source target tcp 2222`, `link-list`; +- cardinality: `list:2, disconnect:1`. + +Evidence: `TRIMMED_NATIVE_POST_RACE_REPAIR.log`. + +The two `*_WRONG_SHELL_RED.log` / `*_MOUNT_RED.log` files are infrastructure RED evidence from invoking the Linux harness under Git Bash rather than WSL. They failed before product build and are not counted as product-test results. + +## Independent review + +Final full-spec/provider-separated review: + +- verdict: **APPROVE**; +- BLOCKING: 0; +- HIGH: 0; +- MEDIUM: 0; +- LOW: 2, both non-blocking and subsequently closed. + +LOW closure consists of the explicit absent-target-row helper regression merged through PR #17 and regeneration of the final integrity manifest. Evidence: `INDEPENDENT_REVIEW.md` and `DELIVERY_REVIEW_FINDINGS_CLOSURE.md`. + +## Delivery-note mandatory scenarios + +The seven acceptance scenarios from the complete `smm-hermes-task-b3r-2026-08-06.md` were mapped to exact test methods and helper assertions in `DELIVERY_SPEC_AUDIT.md`. + +Focused execution on merged `main`: + +- six unique xUnit methods covering requirements 1-5 and 7: **6 passed, 0 failed, 0 skipped**; +- production-shape real-helper/bootstrap contract for requirement 6: **PASS**; +- Linux-only fact-first integration test under a native WSL `/tmp` source copy: **1 passed, 0 failed, 0 skipped**. + +The first direct `/mnt/c` filtered attempt only built and produced no test summary; it was not counted. The accepted Linux evidence is the native-filesystem run in `MANDATORY_LINUX_INTEGRATION.log` with an explicit `Passed: 1, Skipped: 0` summary. + +Evidence: + +- `MANDATORY_SEVEN_TESTS.log`; +- `MANDATORY_LINUX_INTEGRATION.log`; +- `DELIVERY_SPEC_AUDIT.md`. + +## Pull request CI + +PR #16 final check set: + +- total checks: **14**; +- pass: **14**; +- skipped: **0**; +- non-green: **0**. + +Evidence: `CI_CHECKS.txt` and `CI_CHECKS_WATCH.log`. + +PR #17 test-only delivery repair: + +- total checks: **14**; +- pass: **14**; +- skipped/non-green: **0**. + +Evidence: `DELIVERY_REPAIR_PR17_CHECKS.txt` and `DELIVERY_REPAIR_PR17_CI.log`. + +## Post-merge main CI + +Merge SHA push workflows: + +- workflows: **3/3 success**; +- jobs: **12/12 success**; +- skipped: **0**; +- non-green: **0**. + +Included Linux Control, Windows build/Desktop security/MSIX, linux-x64/arm64 release archives, Ubuntu 22.04/24.04 native VMs, and Debian 12/13 systemd restart matrices. + +Evidence: `POST_MERGE_CI.txt` and `POST_MERGE_*.log`. + +Final main SHA `d645812d29d077e9a4dee1596ef09a70dc138090` after PR #17: + +- workflows: **3/3 success**; +- jobs: **12/12 success**; +- non-green: **0**. + +Evidence: `DELIVERY_REPAIR_POST_MERGE_CI.txt` and `DELIVERY_REPAIR_POST_MERGE_*.log`. + +## Physical acceptance + +Not run. Inputs are absent: + +- `HUB_SSH_HOST=UNSET` +- `HUB_SSH_USER=UNSET` +- `SOURCE_SSH_HOST=UNSET` +- `SOURCE_SSH_USER=UNSET` +- `HOME_WG_IP=UNSET` +- `SECOND_WG_IP=UNSET` +- `SSH_IDENTITY_FILE=UNSET` + +This remains a factual external acceptance blocker; see `PHYSICAL_INPUT_STATUS.txt`. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_HOST.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_HOST.log new file mode 100644 index 0000000..27929b4 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_HOST.log @@ -0,0 +1 @@ +bash: line 1: /tmp/b3r-trimmed-rebuild/ochenstarik-smm-control: No such file or directory diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_ORPHAN_AUDIT.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_ORPHAN_AUDIT.log new file mode 100644 index 0000000..9398c1c --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_ORPHAN_AUDIT.log @@ -0,0 +1,156 @@ + Determining projects to restore... + Restored /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Provisioning.Helper/ServerMonitorManager.Provisioning.Helper.csproj (in 345 ms). + Restored /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 5 ms). + Restored /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 659 ms). + Restored /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Agent/ServerMonitorManager.Agent.csproj (in 671 ms). + Restored /home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj (in 1.05 sec). +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] + ServerMonitorManager.Core -> /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll + ServerMonitorManager.Provisioning.Helper -> /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Provisioning.Helper/bin/Release/net10.0/ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Agent -> /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Agent/bin/Release/net10.0/ochenstarik-smm-agent.dll + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/bin/Release/net10.0/ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> /home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll +Test run for /home/starik/hermes-b3r-native.z4QMkUHO/source/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +A total of 1 test files matched the specified pattern. + +Passed! - Failed: 0, Passed: 93, Skipped: 0, Total: 93, Duration: 4 s - ServerMonitorManager.Control.Tests.dll (net10.0) + Determining projects to restore... + Restored /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 954 ms). + Restored /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 960 ms). + ServerMonitorManager.Core -> /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(99,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(196,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(72,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(171,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(81,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(157,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(263,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(389,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(471,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(550,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/bin/Release/net10.0/linux-x64/ochenstarik-smm-control.dll + Optimizing assemblies for size. This process might take a while. +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(155,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__55.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(79,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__53.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(194,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__47.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(97,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__45.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(70,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__48.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(261,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__58.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(387,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__60.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(169,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__50.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(469,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__61.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(548,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__62.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.z4QMkUHO/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.z4QMkUHO/publish/ +PUBLISHED_CONTROL_SHA256=5d3c1df08ec91e129689745ec7fd18f2ed9ff8cb2e2e5e03b3b32b4107bc53b1 +CONFIG_DATABASE_PATH=/home/starik/hermes-b3r-native.z4QMkUHO/control.db +AUDIT=system:reconcile|link.orphan-removed|source:target:tcp:2222|{"sourceNodeId":"source","targetNodeId":"target","protocol":"tcp","port":2222} +TRIMMED_NATIVE_ORPHAN_AUDIT=PASS +HELPER_CALLS=list:2,disconnect:1 +RUNTIME_DIR=/home/starik/hermes-b3r-native.z4QMkUHO +reconcile-status +link-list +link-disconnect source target tcp 2222 +link-list diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_ORPHAN_AUDIT_BINDING_RED.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_ORPHAN_AUDIT_BINDING_RED.log new file mode 100644 index 0000000..4e7a760 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_ORPHAN_AUDIT_BINDING_RED.log @@ -0,0 +1,159 @@ + Determining projects to restore... + Restored /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 358 ms). + Restored /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Provisioning.Helper/ServerMonitorManager.Provisioning.Helper.csproj (in 458 ms). + Restored /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 1.88 sec). + Restored /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Agent/ServerMonitorManager.Agent.csproj (in 1.36 sec). + Restored /home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj (in 3.05 sec). +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] + ServerMonitorManager.Core -> /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll + ServerMonitorManager.Provisioning.Helper -> /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Provisioning.Helper/bin/Release/net10.0/ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Agent -> /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Agent/bin/Release/net10.0/ochenstarik-smm-agent.dll + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/bin/Release/net10.0/ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> /home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll +Test run for /home/starik/hermes-b3r-native.wybdhrl0/source/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +A total of 1 test files matched the specified pattern. + +Passed! - Failed: 0, Passed: 93, Skipped: 0, Total: 93, Duration: 10 s - ServerMonitorManager.Control.Tests.dll (net10.0) + Determining projects to restore... + Restored /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 1.5 sec). + Restored /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 1.5 sec). + ServerMonitorManager.Core -> /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(99,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(196,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(72,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(171,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(81,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(157,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(389,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(263,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(471,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(550,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/bin/Release/net10.0/linux-x64/ochenstarik-smm-control.dll + Optimizing assemblies for size. This process might take a while. +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(155,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__55.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(79,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__53.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(194,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__47.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(97,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__45.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(70,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__48.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(261,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__58.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(387,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__60.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(169,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__50.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(469,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__61.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(548,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__62.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.wybdhrl0/publish/ +PUBLISHED_CONTROL_SHA256=c14136d06b314987fb06d62097f15bad48073c766dd2095944aaab405f331ae8 +CONFIG_DATABASE_PATH=/home/starik/hermes-b3r-native.wybdhrl0/control.db +CONTROL_EXITED_EARLY +Unhandled exception. System.UnauthorizedAccessException: Access to the path '/var/lib/ochenstarik-server-monitor-manager' is denied. + ---> System.IO.IOException: Permission denied + --- End of inner exception stack trace --- + at System.IO.FileSystem.CreateDirectory(String fullPath, UnixFileMode unixCreateMode) + at System.IO.FileSystem.CreateDirectory(String fullPath) + at System.IO.Directory.CreateDirectory(String path) + at ServerMonitorManager.Control.ControlStore.InitializeAsync(CancellationToken cancellationToken) in /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/ControlStore.cs:line 25 + at Program.
$(String[] args) in /home/starik/hermes-b3r-native.wybdhrl0/source/src/ServerMonitorManager.Control/Program.cs:line 134 + at Program.
(String[] args) +/mnt/c/Users/Ochenstarik/Сюда/Panel control/Task3-B3-2026-08-04/trimmed-native-harness/run.sh: line 1: 1896 Aborted "$publish/ochenstarik-smm-control" --Control:DatabasePath "$runtime/control.db" --Control:BackupDirectory "$runtime/backups" --Control:CertificateAuthorityPath "$runtime/unused-control-ca.pfx" --Control:PrivilegeEscalationPath "$runtime/fake-sudo-helper.sh" --Control:HubHelperPath "$runtime/unused-policy-helper" --Control:LinkReconciliationSeconds 30 --urls 'http://127.0.0.1:0' > "$runtime/control.stdout.log" 2> "$runtime/control.stderr.log" diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_ORPHAN_AUDIT_INIT_ONLY_RED.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_ORPHAN_AUDIT_INIT_ONLY_RED.log new file mode 100644 index 0000000..910c30d --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_ORPHAN_AUDIT_INIT_ONLY_RED.log @@ -0,0 +1,248 @@ + Determining projects to restore... + Restored /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 473 ms). + Restored /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Provisioning.Helper/ServerMonitorManager.Provisioning.Helper.csproj (in 645 ms). + Restored /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 1.53 sec). + Restored /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Agent/ServerMonitorManager.Agent.csproj (in 705 ms). + Restored /home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj (in 1.99 sec). +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] + ServerMonitorManager.Core -> /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll + ServerMonitorManager.Provisioning.Helper -> /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Provisioning.Helper/bin/Release/net10.0/ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Agent -> /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Agent/bin/Release/net10.0/ochenstarik-smm-agent.dll + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/bin/Release/net10.0/ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> /home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll +Test run for /home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +A total of 1 test files matched the specified pattern. +[xUnit.net 00:00:03.62] ServerMonitorManager.Control.Tests.ControlApiTests.InvalidEnrollmentUsesProblemDetailsResponse [FAIL] +[xUnit.net 00:00:03.67] ServerMonitorManager.Control.Tests.ControlApiTests.HealthEndpointIsAnonymousAndControlEndpointsRequireOperator [FAIL] + Failed ServerMonitorManager.Control.Tests.ControlApiTests.InvalidEnrollmentUsesProblemDetailsResponse [947 ms] + Error Message: + System.UnauthorizedAccessException : Access to the path '/var/lib/ochenstarik-server-monitor-manager' is denied. +---- System.IO.IOException : Permission denied + Stack Trace: + at System.IO.FileSystem.CreateDirectory(String fullPath, UnixFileMode unixCreateMode) + at System.IO.Directory.CreateDirectory(String path) + at ServerMonitorManager.Control.ControlStore.InitializeAsync(CancellationToken cancellationToken) in /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/ControlStore.cs:line 25 + at Program.
$(String[] args) in /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/Program.cs:line 134 + at Program.
(String[] args) + at System.Reflection.MethodBaseInvoker.InterpretedInvoke_Method(Object obj, IntPtr* args) + at System.Reflection.MethodBaseInvoker.InvokeDirectByRefWithFewArgs(Object obj, Span`1 copyOfArgs, BindingFlags invokeAttr) +--- End of stack trace from previous location --- + at Microsoft.AspNetCore.Mvc.Testing.DeferredHostBuilder.DeferredHost.StartAsync(CancellationToken cancellationToken) + at Microsoft.Extensions.Hosting.HostingAbstractionsHostExtensions.Start(IHost host) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateHost(IHostBuilder builder) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.ConfigureHostBuilder(IHostBuilder hostBuilder) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.StartServer() + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateDefaultClient(DelegatingHandler[] handlers) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateDefaultClient(Uri baseAddress, DelegatingHandler[] handlers) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateClient(WebApplicationFactoryClientOptions options) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateClient() + at ServerMonitorManager.Control.Tests.ControlApiTests.InvalidEnrollmentUsesProblemDetailsResponse() in /home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ControlApiTests.cs:line 64 +--- End of stack trace from previous location --- +----- Inner Stack Trace ----- + + Failed ServerMonitorManager.Control.Tests.ControlApiTests.HealthEndpointIsAnonymousAndControlEndpointsRequireOperator [67 ms] + Error Message: + System.UnauthorizedAccessException : Access to the path '/var/lib/ochenstarik-server-monitor-manager' is denied. +---- System.IO.IOException : Permission denied + Stack Trace: + at System.IO.FileSystem.CreateDirectory(String fullPath, UnixFileMode unixCreateMode) + at System.IO.Directory.CreateDirectory(String path) + at ServerMonitorManager.Control.ControlStore.InitializeAsync(CancellationToken cancellationToken) in /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/ControlStore.cs:line 25 + at Program.
$(String[] args) in /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/Program.cs:line 134 + at Program.
(String[] args) + at InvokeStub_Program.
(Object, Span`1) + at System.Reflection.MethodBaseInvoker.InvokeWithOneArg(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) +--- End of stack trace from previous location --- + at Microsoft.AspNetCore.Mvc.Testing.DeferredHostBuilder.DeferredHost.StartAsync(CancellationToken cancellationToken) + at Microsoft.Extensions.Hosting.HostingAbstractionsHostExtensions.Start(IHost host) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateHost(IHostBuilder builder) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.ConfigureHostBuilder(IHostBuilder hostBuilder) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.StartServer() + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateDefaultClient(DelegatingHandler[] handlers) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateDefaultClient(Uri baseAddress, DelegatingHandler[] handlers) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateClient(WebApplicationFactoryClientOptions options) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateClient() + at ServerMonitorManager.Control.Tests.ControlApiTests.HealthEndpointIsAnonymousAndControlEndpointsRequireOperator() in /home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ControlApiTests.cs:line 31 +--- End of stack trace from previous location --- +----- Inner Stack Trace ----- + +[xUnit.net 00:00:03.72] ServerMonitorManager.Control.Tests.ControlApiTests.AutomationIdentityCannotUseOperatorSurface [FAIL] +[xUnit.net 00:00:03.77] ServerMonitorManager.Control.Tests.ControlApiTests.AgentReceivesOnlyItsOwnProvisioningJob [FAIL] +[xUnit.net 00:00:03.84] ServerMonitorManager.Control.Tests.ControlApiTests.OperatorCanCreateAndReadProvisioningJob [FAIL] + Failed ServerMonitorManager.Control.Tests.ControlApiTests.AutomationIdentityCannotUseOperatorSurface [35 ms] + Error Message: + System.UnauthorizedAccessException : Access to the path '/var/lib/ochenstarik-server-monitor-manager' is denied. +---- System.IO.IOException : Permission denied + Stack Trace: + at System.IO.FileSystem.CreateDirectory(String fullPath, UnixFileMode unixCreateMode) + at System.IO.Directory.CreateDirectory(String path) + at ServerMonitorManager.Control.ControlStore.InitializeAsync(CancellationToken cancellationToken) in /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/ControlStore.cs:line 25 + at Program.
$(String[] args) in /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/Program.cs:line 134 + at Program.
(String[] args) + at InvokeStub_Program.
(Object, Span`1) + at System.Reflection.MethodBaseInvoker.InvokeWithOneArg(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) +--- End of stack trace from previous location --- + at Microsoft.AspNetCore.Mvc.Testing.DeferredHostBuilder.DeferredHost.StartAsync(CancellationToken cancellationToken) + at Microsoft.Extensions.Hosting.HostingAbstractionsHostExtensions.Start(IHost host) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateHost(IHostBuilder builder) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.ConfigureHostBuilder(IHostBuilder hostBuilder) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.StartServer() + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateDefaultClient(DelegatingHandler[] handlers) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateDefaultClient(Uri baseAddress, DelegatingHandler[] handlers) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateClient(WebApplicationFactoryClientOptions options) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateClient() + at ServerMonitorManager.Control.Tests.ControlApiTests.AutomationIdentityCannotUseOperatorSurface() in /home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ControlApiTests.cs:line 49 +--- End of stack trace from previous location --- +----- Inner Stack Trace ----- + + Failed ServerMonitorManager.Control.Tests.ControlApiTests.AgentReceivesOnlyItsOwnProvisioningJob [49 ms] + Error Message: + System.UnauthorizedAccessException : Access to the path '/var/lib/ochenstarik-server-monitor-manager' is denied. +---- System.IO.IOException : Permission denied + Stack Trace: + at System.IO.FileSystem.CreateDirectory(String fullPath, UnixFileMode unixCreateMode) + at System.IO.Directory.CreateDirectory(String path) + at ServerMonitorManager.Control.ControlStore.InitializeAsync(CancellationToken cancellationToken) in /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/ControlStore.cs:line 25 + at Program.
$(String[] args) in /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/Program.cs:line 134 + at Program.
(String[] args) + at InvokeStub_Program.
(Object, Span`1) + at System.Reflection.MethodBaseInvoker.InvokeWithOneArg(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) +--- End of stack trace from previous location --- + at Microsoft.AspNetCore.Mvc.Testing.DeferredHostBuilder.DeferredHost.StartAsync(CancellationToken cancellationToken) + at Microsoft.Extensions.Hosting.HostingAbstractionsHostExtensions.Start(IHost host) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateHost(IHostBuilder builder) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.ConfigureHostBuilder(IHostBuilder hostBuilder) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.StartServer() + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.get_Services() + at ServerMonitorManager.Control.Tests.ControlApiTests.AgentReceivesOnlyItsOwnProvisioningJob() in /home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ControlApiTests.cs:line 257 +--- End of stack trace from previous location --- +----- Inner Stack Trace ----- + + Failed ServerMonitorManager.Control.Tests.ControlApiTests.OperatorCanCreateAndReadProvisioningJob [43 ms] + Error Message: + System.UnauthorizedAccessException : Access to the path '/var/lib/ochenstarik-server-monitor-manager' is denied. +---- System.IO.IOException : Permission denied + Stack Trace: + at System.IO.FileSystem.CreateDirectory(String fullPath, UnixFileMode unixCreateMode) + at System.IO.Directory.CreateDirectory(String path) + at ServerMonitorManager.Control.ControlStore.InitializeAsync(CancellationToken cancellationToken) in /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/ControlStore.cs:line 25 + at Program.
$(String[] args) in /home/starik/hermes-b3r-native.xBqgQAeT/source/src/ServerMonitorManager.Control/Program.cs:line 134 + at Program.
(String[] args) + at InvokeStub_Program.
(Object, Span`1) + at System.Reflection.MethodBaseInvoker.InvokeWithOneArg(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) +--- End of stack trace from previous location --- + at Microsoft.AspNetCore.Mvc.Testing.DeferredHostBuilder.DeferredHost.StartAsync(CancellationToken cancellationToken) + at Microsoft.Extensions.Hosting.HostingAbstractionsHostExtensions.Start(IHost host) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.CreateHost(IHostBuilder builder) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.ConfigureHostBuilder(IHostBuilder hostBuilder) + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.StartServer() + at Microsoft.AspNetCore.Mvc.Testing.WebApplicationFactory`1.get_Services() + at ServerMonitorManager.Control.Tests.ControlApiTests.OperatorCanCreateAndReadProvisioningJob() in /home/starik/hermes-b3r-native.xBqgQAeT/source/tests/ServerMonitorManager.Control.Tests/ControlApiTests.cs:line 82 +--- End of stack trace from previous location --- +----- Inner Stack Trace ----- + + +Failed! - Failed: 5, Passed: 88, Skipped: 0, Total: 93, Duration: 2 s - ServerMonitorManager.Control.Tests.dll (net10.0) diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_POST_RACE_REPAIR.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_POST_RACE_REPAIR.log new file mode 100644 index 0000000..705bd55 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_POST_RACE_REPAIR.log @@ -0,0 +1,156 @@ + Determining projects to restore... + Restored /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 274 ms). + Restored /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Provisioning.Helper/ServerMonitorManager.Provisioning.Helper.csproj (in 293 ms). + Restored /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 2.59 sec). + Restored /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Agent/ServerMonitorManager.Agent.csproj (in 2.98 sec). + Restored /home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj (in 3.27 sec). +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Extensions.Telemetry 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.Testing.Platform.MSBuild 1.9.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.ObjectModel 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'cs'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'de'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'es'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'fr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'it'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ja'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ko'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pl'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'pt-br'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'ru'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'tr'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hans'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] +/home/starik/.dotnet/sdk/10.0.302/Sdks/Microsoft.NET.Sdk/targets/Microsoft.PackageDependencyResolution.targets(266,5): warning NETSDK1188: Package Microsoft.TestPlatform.TestHost 18.0.1 has a resource with the locale 'zh-hant'. This locale is not recognized by .NET. Consider notifying the package author that it appears to be using an invalid locale. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj] + ServerMonitorManager.Core -> /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll + ServerMonitorManager.Provisioning.Helper -> /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Provisioning.Helper/bin/Release/net10.0/ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Agent -> /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Agent/bin/Release/net10.0/ochenstarik-smm-agent.dll + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/bin/Release/net10.0/ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> /home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll +Test run for /home/starik/hermes-b3r-native.ZGSfuz2U/source/tests/ServerMonitorManager.Control.Tests/bin/Release/net10.0/ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +A total of 1 test files matched the specified pattern. + +Passed! - Failed: 0, Passed: 94, Skipped: 0, Total: 94, Duration: 4 s - ServerMonitorManager.Control.Tests.dll (net10.0) + Determining projects to restore... + Restored /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Core/ServerMonitorManager.Core.csproj (in 819 ms). + Restored /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj (in 825 ms). + ServerMonitorManager.Core -> /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(196,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(99,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(72,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(171,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(81,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(157,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(263,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(389,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(550,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(471,13): warning IL2026: Using member 'System.Text.Json.JsonSerializer.Serialize(TValue, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/bin/Release/net10.0/linux-x64/ochenstarik-smm-control.dll + Optimizing assemblies for size. This process might take a while. +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(155,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__55.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(79,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__53.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(194,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__47.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningBaseInstallPlanStore.cs(97,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__45.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(70,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__48.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(261,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__58.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(387,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__60.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningFactsStore.cs(169,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__50.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(469,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__61.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] +/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ProvisioningStore.cs(548,9): Trim analysis warning IL2026: ServerMonitorManager.Control.ControlStore.d__62.MoveNext(): Using member 'System.Text.Json.JsonSerializer.Serialize(!!0, JsonSerializerOptions)' which has 'RequiresUnreferencedCodeAttribute' can break functionality when trimming application code. JSON serialization and deserialization might require types that cannot be statically analyzed. Use the overload that takes a JsonTypeInfo or JsonSerializerContext, or make sure all of the required types are preserved. [/home/starik/hermes-b3r-native.ZGSfuz2U/source/src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj] + ServerMonitorManager.Control -> /home/starik/hermes-b3r-native.ZGSfuz2U/publish/ +PUBLISHED_CONTROL_SHA256=0a8ff5af6bc62b7c4b0cb9c33ddf032fcbc15e8bafc0bee33c9fb281250520fa +CONFIG_DATABASE_PATH=/home/starik/hermes-b3r-native.ZGSfuz2U/control.db +AUDIT=system:reconcile|link.orphan-removed|source:target:tcp:2222|{"sourceNodeId":"source","targetNodeId":"target","protocol":"tcp","port":2222} +TRIMMED_NATIVE_ORPHAN_AUDIT=PASS +HELPER_CALLS=list:2,disconnect:1 +RUNTIME_DIR=/home/starik/hermes-b3r-native.ZGSfuz2U +reconcile-status +link-list +link-disconnect source target tcp 2222 +link-list diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_POST_RACE_REPAIR_MOUNT_RED.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_POST_RACE_REPAIR_MOUNT_RED.log new file mode 100644 index 0000000..3f14af4 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_POST_RACE_REPAIR_MOUNT_RED.log @@ -0,0 +1,4 @@ +tar: /mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3: Cannot open: No such file or directory +tar: Error is not recoverable: exiting now +tar: This does not look like a tar archive +tar: Exiting with failure status due to previous errors diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_POST_RACE_REPAIR_WRONG_SHELL_RED.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_POST_RACE_REPAIR_WRONG_SHELL_RED.log new file mode 100644 index 0000000..3f14af4 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_NATIVE_POST_RACE_REPAIR_WRONG_SHELL_RED.log @@ -0,0 +1,4 @@ +tar: /mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3: Cannot open: No such file or directory +tar: Error is not recoverable: exiting now +tar: This does not look like a tar archive +tar: Exiting with failure status due to previous errors diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_ORPHAN_AUDIT_VERIFIER.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_ORPHAN_AUDIT_VERIFIER.log new file mode 100644 index 0000000..48e835e --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_ORPHAN_AUDIT_VERIFIER.log @@ -0,0 +1,7 @@ +PUBLISH_CONTROL_SHA256=e829099870ac8713515600123007bd602abb6e9d290c00c7aafbfa34936a29f5 +EXECUTED_CONTROL_SHA256=e829099870ac8713515600123007bd602abb6e9d290c00c7aafbfa34936a29f5 +Unhandled exception. System.TypeLoadException: Method 'SetStateMachine' in type 'd__4' from assembly 'ochenstarik-smm-control, Version=0.1.0.0, Culture=neutral, PublicKeyToken=null' does not have an implementation. + at ServerMonitorManager.Control.ControlStore.InitializeAsync(CancellationToken cancellationToken) + at Program.
$(String[] args) in /tmp/hermes-b3r-linux.Qx5SYwBt/trimmed-orphan-verifier/Program.cs:line 21 + at Program.
(String[] args) +bash: line 1: 106451 Aborted dotnet "$output/TrimmedOrphanVerifier.dll" diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_ORPHAN_AUDIT_VERIFIER_RED.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_ORPHAN_AUDIT_VERIFIER_RED.log new file mode 100644 index 0000000..2131727 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_ORPHAN_AUDIT_VERIFIER_RED.log @@ -0,0 +1,8 @@ +PUBLISH_CONTROL_SHA256=6fb07792500363337842478701f040e4320046ceddc1bba86a3bc861f38cdb93 +EXECUTED_CONTROL_SHA256=6fb07792500363337842478701f040e4320046ceddc1bba86a3bc861f38cdb93 +Unhandled exception. System.MissingMethodException: Method not found: 'Void ServerMonitorManager.Control.ControlOptions.set_DatabasePath(System.String)'. + at Program.
$(String[] args) + at System.Runtime.CompilerServices.AsyncMethodBuilderCore.Start[TStateMachine](TStateMachine& stateMachine) + at Program.
$(String[] args) + at Program.
(String[] args) +bash: line 1: 103271 Aborted dotnet "$output/TrimmedOrphanVerifier.dll" diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_VERIFICATION.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_VERIFICATION.md new file mode 100644 index 0000000..ef319fe --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_VERIFICATION.md @@ -0,0 +1,27 @@ +# Final B-3R PublishTrimmed verification + +## Snapshot + +- Reviewed commit: `ee7d89c1d02cba7e0418637282ce274b60edde69` +- Merge commit: `00dadf27cebbb8f311337f21ebdeadd90c1a9f8c` +- WSL2 Ubuntu 26.04 +- .NET SDK `10.0.302` +- `DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1` + +## Results + +- Clean Linux Control: `94/94 PASS`. +- Self-contained `linux-x64 PublishTrimmed`: completed. +- Published Control SHA256: `0a8ff5af6bc62b7c4b0cb9c33ddf032fcbc15e8bafc0bee33c9fb281250520fa`. +- Published executable started with trim-safe generated configuration binding. +- DB-less orphan rule was removed. +- Durable orphan audit exact payload was found and parsed. +- Audit ordering remained factual verification → durable audit → `link.orphan-removed` event. +- Helper cardinality: exactly `2` `link-list` calls and `1` `link-disconnect` call. +- Final marker: `TRIMMED_NATIVE_ORPHAN_AUDIT=PASS`. + +Authoritative log: `TRIMMED_NATIVE_POST_RACE_REPAIR.log`. + +## Warnings + +The publish log includes known `IL2026` warnings from pre-existing provisioning serializers outside the B-3/B-3R changed paths. The B-3 orphan audit uses `ControlJsonContext` and its named DTO, and its published runtime path passed. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_VERIFICATION_PRE_RACE.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_VERIFICATION_PRE_RACE.md new file mode 100644 index 0000000..ee37f30 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/TRIMMED_VERIFICATION_PRE_RACE.md @@ -0,0 +1,66 @@ +# B-3R Linux PublishTrimmed and orphan-audit verification + +## Environment + +- WSL2 Ubuntu 26.04 +- .NET SDK `10.0.302` +- .NET runtime `10.0.10` +- `DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1` +- Clean source-only snapshot: `/home/starik/hermes-b3r-native.z4QMkUHO/source` +- Published artifact: `/home/starik/hermes-b3r-native.z4QMkUHO/publish` + +## Results + +| Gate | Result | +|---|---| +| Clean Linux Control Release suite | **93/93 PASS** | +| `linux-x64 --self-contained true -p:PublishTrimmed=true` | **PASS** | +| Native published executable startup | **PASS** | +| DB-less factual orphan removal | **PASS** | +| Factual call count | **2 `link-list`, 1 `link-disconnect`** | +| Durable orphan audit | **PASS** | + +Published `ochenstarik-smm-control.dll` SHA256: + +```text +5d3c1df08ec91e129689745ec7fd18f2ed9ff8cb2e2e5e03b3b32b4107bc53b1 +``` + +Exact audit row observed from the SQLite database created by the native trimmed executable: + +```text +system:reconcile|link.orphan-removed|source:target:tcp:2222|{"sourceNodeId":"source","targetNodeId":"target","protocol":"tcp","port":2222} +``` + +Exact helper sequence: + +```text +reconcile-status +link-list +link-disconnect source target tcp 2222 +link-list +``` + +## RED→GREEN defect found during verification + +Initial trimmed artifacts ignored configuration overrides because `ControlOptions` used init-only properties. The native process attempted the default `/var/lib/ochenstarik-server-monitor-manager` path and failed with `UnauthorizedAccessException`. + +Repair: + +- enabled `.NET` configuration binding source generation; +- changed `ControlOptions` from init-only properties to standard settable options properties; +- retained trim metadata preservation on the options type. + +Post-repair evidence: + +- focused API regressions: **2/2 PASS**; +- full Windows Control suite: **93/93 PASS**; +- clean Linux suite: **93/93 PASS**; +- native trimmed orphan path: **PASS**. + +## Known warnings outside B-3 + +The publish log contains `IL2026` warnings in provisioning serialization paths (`ProvisioningStore`, `ProvisioningBaseInstallPlanStore`, `ProvisioningFactsStore`). These warnings predate and are outside the B-3 Link/orphan scope. The B-3 orphan audit itself uses the named DTO and source-generated JSON context and was exercised successfully above. + +Primary raw log: `TRIMMED_NATIVE_ORPHAN_AUDIT.log`. +Historical RED logs are retained for reproducibility. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_CONTROL_AFTER_TRIM_FIX.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_CONTROL_AFTER_TRIM_FIX.log new file mode 100644 index 0000000..e89456e --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_CONTROL_AFTER_TRIM_FIX.log @@ -0,0 +1,9 @@ + ServerMonitorManager.Core -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Core\bin\Release\net10.0\ServerMonitorManager.Core.dll + ServerMonitorManager.Agent -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Agent\bin\Release\net10.0\ochenstarik-smm-agent.dll + ServerMonitorManager.Provisioning.Helper -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Provisioning.Helper\bin\Release\net10.0\ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Control -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Control\bin\Release\net10.0\ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll +Тестовый запуск для C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +Общее количество тестовых файлов (1), соответствующих указанному шаблону. + +Пройден! : не пройдено 0, пройдено 93, пропущено 0, всего 93, длительность 6 s. - ServerMonitorManager.Control.Tests.dll (net10.0) diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_CONTROL_COMMITTED.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_CONTROL_COMMITTED.log new file mode 100644 index 0000000..f4e04bc --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_CONTROL_COMMITTED.log @@ -0,0 +1,9 @@ + ServerMonitorManager.Core -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Core\bin\Release\net10.0\ServerMonitorManager.Core.dll + ServerMonitorManager.Provisioning.Helper -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Provisioning.Helper\bin\Release\net10.0\ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Agent -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Agent\bin\Release\net10.0\ochenstarik-smm-agent.dll + ServerMonitorManager.Control -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Control\bin\Release\net10.0\ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll +Тестовый запуск для C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +Общее количество тестовых файлов (1), соответствующих указанному шаблону. + +Пройден! : не пройдено 0, пройдено 94, пропущено 0, всего 94, длительность 5 s. - ServerMonitorManager.Control.Tests.dll (net10.0) diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_CONTROL_POST_RACE_REPAIR.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_CONTROL_POST_RACE_REPAIR.log new file mode 100644 index 0000000..385cbb0 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_CONTROL_POST_RACE_REPAIR.log @@ -0,0 +1,10 @@ + ServerMonitorManager.Core -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Core\bin\Release\net10.0\ServerMonitorManager.Core.dll + ServerMonitorManager.Agent -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Agent\bin\Release\net10.0\ochenstarik-smm-agent.dll + ServerMonitorManager.Provisioning.Helper -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Provisioning.Helper\bin\Release\net10.0\ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Control -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Control\bin\Release\net10.0\ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll +Тестовый запуск для C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +Общее количество тестовых файлов (1), соответствующих указанному шаблону. + +Пройден! : не пройдено 0, пройдено 94, пропущено 0, всего 94, длительность 6 s. - ServerMonitorManager.Control.Tests.dll (net10.0) +BOOTSTRAP_CONTRACT=PASS diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_VERIFICATION.log b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_VERIFICATION.log new file mode 100644 index 0000000..c14b21a --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WINDOWS_VERIFICATION.log @@ -0,0 +1,45 @@ +=== WINDOWS CONTROL RESTORE === + Определение проектов для восстановления... + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Provisioning.Helper\ServerMonitorManager.Provisioning.Helper.csproj (за 604 мс). + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Core\ServerMonitorManager.Core.csproj (за 37 мс). + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Agent\ServerMonitorManager.Agent.csproj (за 8,27 с). + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Control\ServerMonitorManager.Control.csproj (за 8,24 с). + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\ServerMonitorManager.Control.Tests.csproj (за 9,25 с). + +=== WINDOWS CONTROL TESTS === + ServerMonitorManager.Core -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Core\bin\Release\net10.0\ServerMonitorManager.Core.dll + ServerMonitorManager.Agent -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Agent\bin\Release\net10.0\ochenstarik-smm-agent.dll + ServerMonitorManager.Provisioning.Helper -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Provisioning.Helper\bin\Release\net10.0\ochenstarik-smm-provisioning-helper.dll + ServerMonitorManager.Control -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Control\bin\Release\net10.0\ochenstarik-smm-control.dll + ServerMonitorManager.Control.Tests -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll +Тестовый запуск для C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\tests\ServerMonitorManager.Control.Tests\bin\Release\net10.0\ServerMonitorManager.Control.Tests.dll (.NETCoreApp,Version=v10.0) +Общее количество тестовых файлов (1), соответствующих указанному шаблону. + +Пройден! : не пройдено 0, пройдено 93, пропущено 0, всего 93, длительность 9 s. - ServerMonitorManager.Control.Tests.dll (net10.0) + +=== BASH SYNTAX === +BASH_SYNTAX=PASS + +=== BOOTSTRAP CONTRACT === +BOOTSTRAP_CONTRACT=PASS + +=== DESKTOP RESTORE === + Определение проектов для восстановления... + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Core\ServerMonitorManager.Core.csproj (за 770 мс). + Восстановлен C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Desktop\ServerMonitorManager.Desktop.csproj (за 1,33 с). + +=== DESKTOP BUILD === + ServerMonitorManager.Core -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Core\bin\Release\net10.0\ServerMonitorManager.Core.dll + ServerMonitorManager.Desktop -> C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3\src\ServerMonitorManager.Desktop\bin\Release\net10.0-windows10.0.26100.0\win-x64\ServerMonitorManager.Desktop.dll + +Сборка успешно завершена. + Предупреждений: 0 + Ошибок: 0 + +Прошло времени 00:01:25.27 + +=== DESKTOP CONTRACTS === +Windows desktop contracts passed. + +=== DIFF CHECK === +DIFF_CHECK=PASS diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WSL_DOTNET_EVIDENCE.md b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WSL_DOTNET_EVIDENCE.md new file mode 100644 index 0000000..9d6c7f5 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/WSL_DOTNET_EVIDENCE.md @@ -0,0 +1,38 @@ +# WSL Linux toolchain evidence + +Дата: 2026-08-04 + +## Установка + +- Distribution: Ubuntu under WSL2. +- User-local install directory: `/home/starik/.dotnet`. +- Installer downloaded and installed SDK `10.0.302` successfully. +- Downloaded SDK archive size reported by installer: `235808828` bytes. +- No sudo/system package changes were made. + +## First-run dependency finding + +Initial `dotnet --info` exited `134` because the minimal Ubuntu image has no ICU package. This did not indicate an incomplete SDK install. + +Because the repository projects set `InvariantGlobalization=true`, the CLI was retried with: + +```text +DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1 +DOTNET_ROOT=/home/starik/.dotnet +PATH=/home/starik/.dotnet:$PATH +``` + +## Verified result + +```text +.NET SDK: 10.0.302 +MSBuild: 18.6.11+35b593beb +OS: ubuntu 26.04 +RID: linux-x64 +Host runtime: 10.0.10 +Microsoft.AspNetCore.App: 10.0.10 +Microsoft.NETCore.App: 10.0.10 +DOTNET_WSL_READY=PASS +``` + +This evidence confirms the Linux test prerequisite only. Actual B-3R Linux tests and trimmed orphan verification must be recorded separately after the repair diff is finalized. diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-native-harness/fake-sudo-helper.sh b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-native-harness/fake-sudo-helper.sh new file mode 100644 index 0000000..b80bf09 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-native-harness/fake-sudo-helper.sh @@ -0,0 +1,38 @@ +#!/usr/bin/env bash +set -Eeuo pipefail + +[[ "${1:-}" == "-n" ]] || { printf 'expected -n\n' >&2; exit 78; } +shift +[[ $# -ge 2 ]] || { printf 'missing helper/action\n' >&2; exit 78; } +helper_path="$1" +shift +action="$1" +shift +: "${SMM_FAKE_RULES_FILE:?}" +: "${SMM_FAKE_CALL_LOG:?}" +printf '%s\t%s\n' "$action" "$*" >>"$SMM_FAKE_CALL_LOG" + +case "$action" in + reconcile-status) + [[ $# -eq 0 ]] || exit 78 + printf 'complete\n' + ;; + link-list) + [[ $# -eq 0 ]] || exit 78 + cat -- "$SMM_FAKE_RULES_FILE" + ;; + link-disconnect) + [[ $# -eq 4 ]] || exit 78 + expected="$1"$'\t'"$2"$'\t'"$3"$'\t'"$4" + current="$(cat -- "$SMM_FAKE_RULES_FILE")" + [[ "$current" == "$expected" ]] || { + printf 'unexpected disconnect: %s (helper=%s)\n' "$expected" "$helper_path" >&2 + exit 78 + } + : >"$SMM_FAKE_RULES_FILE" + ;; + *) + printf 'unexpected action: %s\n' "$action" >&2 + exit 78 + ;; +esac diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-native-harness/run.sh b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-native-harness/run.sh new file mode 100644 index 0000000..43edbeb --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-native-harness/run.sh @@ -0,0 +1,126 @@ +#!/usr/bin/env bash +set -Eeuo pipefail + +export DOTNET_ROOT="$HOME/.dotnet" +export PATH="$DOTNET_ROOT:$PATH" +export DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1 + +source_root='/mnt/c/Users/Ochenstarik/projects/server-monitor-manager-task3-b3' +evidence_root='/mnt/c/Users/Ochenstarik/Сюда/Panel control/Task3-B3-2026-08-04' +runtime="$(mktemp -d "$HOME/hermes-b3r-native.XXXXXXXX")" +snapshot="$runtime/source" +publish="$runtime/publish" +mkdir -p "$snapshot" "$publish" "$runtime/backups" + +tar --exclude=.git --exclude=bin --exclude=obj -C "$source_root" -cf - . | tar -C "$snapshot" -xf - +cp "$evidence_root/trimmed-native-harness/fake-sudo-helper.sh" "$runtime/fake-sudo-helper.sh" +chmod 700 "$runtime/fake-sudo-helper.sh" +printf 'source\ttarget\ttcp\t2222\n' >"$runtime/rules.tsv" +: >"$runtime/helper-calls.tsv" + +cd "$snapshot" +dotnet restore tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj +dotnet test tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj \ + -c Release --no-restore --verbosity minimal + +dotnet publish src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj \ + -c Release -r linux-x64 --self-contained true -p:PublishTrimmed=true -o "$publish" + +test -x "$publish/ochenstarik-smm-control" +publish_hash="$(sha256sum "$publish/ochenstarik-smm-control.dll" | cut -d' ' -f1)" +printf 'PUBLISHED_CONTROL_SHA256=%s\n' "$publish_hash" + +export SMM_FAKE_RULES_FILE="$runtime/rules.tsv" +export SMM_FAKE_CALL_LOG="$runtime/helper-calls.tsv" +export Control__DatabasePath="$runtime/control.db" +export Control__BackupDirectory="$runtime/backups" +export Control__CertificateAuthorityPath="$runtime/unused-control-ca.pfx" +export Control__PrivilegeEscalationPath="$runtime/fake-sudo-helper.sh" +export Control__HubHelperPath="$runtime/unused-policy-helper" +export Control__LinkReconciliationSeconds=30 +export ASPNETCORE_URLS='http://127.0.0.1:0' + +printf 'CONFIG_DATABASE_PATH=%s\n' "$Control__DatabasePath" +"$publish/ochenstarik-smm-control" \ + --Control:DatabasePath "$runtime/control.db" \ + --Control:BackupDirectory "$runtime/backups" \ + --Control:CertificateAuthorityPath "$runtime/unused-control-ca.pfx" \ + --Control:PrivilegeEscalationPath "$runtime/fake-sudo-helper.sh" \ + --Control:HubHelperPath "$runtime/unused-policy-helper" \ + --Control:LinkReconciliationSeconds 30 \ + --urls 'http://127.0.0.1:0' \ + >"$runtime/control.stdout.log" 2>"$runtime/control.stderr.log" & +control_pid=$! + +cleanup_process() { + if kill -0 "$control_pid" 2>/dev/null; then + kill "$control_pid" 2>/dev/null || true + wait "$control_pid" 2>/dev/null || true + fi +} +trap cleanup_process EXIT + +verified=0 +for _ in $(seq 1 120); do + if ! kill -0 "$control_pid" 2>/dev/null; then + printf 'CONTROL_EXITED_EARLY\n' >&2 + cat "$runtime/control.stdout.log" >&2 || true + cat "$runtime/control.stderr.log" >&2 || true + exit 1 + fi + if [[ -f "$runtime/control.db" ]] && python3 - "$runtime/control.db" <<'PY' +import json, sqlite3, sys +path = sys.argv[1] +try: + connection = sqlite3.connect(path, timeout=1) + row = connection.execute( + "SELECT actor, action, subject, details_json FROM audit " + "WHERE action='link.orphan-removed' ORDER BY sequence DESC LIMIT 1" + ).fetchone() +finally: + try: + connection.close() + except Exception: + pass +if row is None: + raise SystemExit(1) +actor, action, subject, details_json = row +details = json.loads(details_json) +expected = { + "sourceNodeId": "source", + "targetNodeId": "target", + "protocol": "tcp", + "port": 2222, +} +if actor != "system:reconcile" or action != "link.orphan-removed": + raise SystemExit(2) +if subject != "source:target:tcp:2222" or details != expected: + raise SystemExit(3) +print(f"AUDIT={actor}|{action}|{subject}|{details_json}") +PY + then + verified=1 + break + fi + sleep 0.5 +done + +[[ "$verified" == 1 ]] || { + printf 'ORPHAN_AUDIT_TIMEOUT\n' >&2 + cat "$runtime/control.stdout.log" >&2 || true + cat "$runtime/control.stderr.log" >&2 || true + exit 1 +} + +[[ ! -s "$runtime/rules.tsv" ]] || { printf 'ORPHAN_RULE_REMAINS\n' >&2; exit 1; } +list_calls="$(awk -F '\t' '$1 == "link-list" { count++ } END { print count + 0 }' "$runtime/helper-calls.tsv")" +disconnect_calls="$(awk -F '\t' '$1 == "link-disconnect" { count++ } END { print count + 0 }' "$runtime/helper-calls.tsv")" +[[ "$list_calls" == 2 ]] || { printf 'LIST_CALLS=%s\n' "$list_calls" >&2; exit 1; } +[[ "$disconnect_calls" == 1 ]] || { printf 'DISCONNECT_CALLS=%s\n' "$disconnect_calls" >&2; exit 1; } + +printf 'TRIMMED_NATIVE_ORPHAN_AUDIT=PASS\n' +printf 'HELPER_CALLS=list:%s,disconnect:%s\n' "$list_calls" "$disconnect_calls" +printf 'RUNTIME_DIR=%s\n' "$runtime" +cat "$runtime/helper-calls.tsv" +cleanup_process +trap - EXIT diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-orphan-verifier/Program.cs b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-orphan-verifier/Program.cs new file mode 100644 index 0000000..ed3f5f7 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-orphan-verifier/Program.cs @@ -0,0 +1,118 @@ +using System.Text.Json; +using System.Security.Cryptography; +using Microsoft.Data.Sqlite; +using Microsoft.Extensions.Options; +using ServerMonitorManager.Control; +using ServerMonitorManager.Core; + +var root = Path.Combine(Path.GetTempPath(), $"smm-trimmed-orphan-{Guid.NewGuid():N}"); +Directory.CreateDirectory(root); +var databasePath = Path.Combine(root, "control.db"); +try +{ + var loadedControlAssembly = typeof(ControlStore).Assembly.Location; + var loadedControlSha256 = Convert.ToHexString( + SHA256.HashData(await File.ReadAllBytesAsync(loadedControlAssembly))).ToLowerInvariant(); + var store = new ControlStore(Options.Create(new ControlOptions + { + DatabasePath = databasePath, + CertificateAuthorityPath = Path.Combine(root, "unused.pfx") + })); + await store.InitializeAsync(); + + var orphan = new LinkRule("source", "target", "tcp", 2222); + var applier = new OrphanApplier(orphan); + var service = new LinkService(store, applier, new ControlEventBroker()); + var result = await service.ReconcileAllAsync(); + + Require(result.Examined == 1, $"Examined={result.Examined}"); + Require(result.Converged == 1, $"Converged={result.Converged}"); + Require(result.Failed == 0, $"Failed={result.Failed}"); + Require(result.Deferred == 0, $"Deferred={result.Deferred}"); + Require(applier.ListCalls == 2, $"ListCalls={applier.ListCalls}"); + Require(applier.RawDisconnectCalls == 1, $"RawDisconnectCalls={applier.RawDisconnectCalls}"); + + await using var connection = new SqliteConnection($"Data Source={databasePath}"); + await connection.OpenAsync(); + var command = connection.CreateCommand(); + command.CommandText = """ + SELECT actor, action, subject, details_json + FROM audit + WHERE action = 'link.orphan-removed' + ORDER BY sequence; + """; + await using var reader = await command.ExecuteReaderAsync(); + Require(await reader.ReadAsync(), "orphan audit row missing"); + var actor = reader.GetString(0); + var action = reader.GetString(1); + var subject = reader.GetString(2); + var detailsJson = reader.GetString(3); + Require(!await reader.ReadAsync(), "duplicate orphan audit rows"); + Require(actor == "system:reconcile", $"actor={actor}"); + Require(action == "link.orphan-removed", $"action={action}"); + Require(subject == "source:target:tcp:2222", $"subject={subject}"); + + using var details = JsonDocument.Parse(detailsJson); + var rootElement = details.RootElement; + Require(rootElement.GetProperty("sourceNodeId").GetString() == "source", detailsJson); + Require(rootElement.GetProperty("targetNodeId").GetString() == "target", detailsJson); + Require(rootElement.GetProperty("protocol").GetString() == "tcp", detailsJson); + Require(rootElement.GetProperty("port").GetInt32() == 2222, detailsJson); + Require(rootElement.EnumerateObject().Count() == 4, detailsJson); + + Console.WriteLine("TRIMMED_ORPHAN_AUDIT=PASS"); + Console.WriteLine($"LOADED_CONTROL_ASSEMBLY={loadedControlAssembly}"); + Console.WriteLine($"LOADED_CONTROL_SHA256={loadedControlSha256}"); + Console.WriteLine($"RESULT={result.Examined}/{result.Converged}/{result.Failed}/{result.Deferred}"); + Console.WriteLine($"HELPER_CALLS=list:{applier.ListCalls},raw-disconnect:{applier.RawDisconnectCalls}"); + Console.WriteLine($"AUDIT={actor}|{action}|{subject}|{detailsJson}"); +} +finally +{ + SqliteConnection.ClearAllPools(); + if (Directory.Exists(root)) + { + Directory.Delete(root, recursive: true); + } +} + +static void Require(bool condition, string message) +{ + if (!condition) + { + throw new InvalidOperationException(message); + } +} + +sealed class OrphanApplier(LinkRule orphan) : ILinkPolicyApplier +{ + private bool _connected = true; + public int ListCalls { get; private set; } + public int RawDisconnectCalls { get; private set; } + + public Task> ListRulesAsync(CancellationToken cancellationToken) + { + ListCalls++; + return Task.FromResult>(_connected ? [orphan] : []); + } + + public Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken) + => throw new InvalidOperationException("Unexpected connect."); + + public Task ApplyDisconnectAsync(LinkPolicy link, CancellationToken cancellationToken) + => throw new InvalidOperationException("Unexpected persisted disconnect."); + + public Task ApplyDisconnectAsync(LinkRule rule, CancellationToken cancellationToken) + { + if (rule != orphan) + { + throw new InvalidOperationException($"Unexpected raw rule: {rule}"); + } + RawDisconnectCalls++; + _connected = false; + return Task.CompletedTask; + } + + public Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) + => throw new InvalidOperationException("link-status must not be used."); +} diff --git a/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-orphan-verifier/TrimmedOrphanVerifier.csproj b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-orphan-verifier/TrimmedOrphanVerifier.csproj new file mode 100644 index 0000000..6b396a8 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/trimmed-orphan-verifier/TrimmedOrphanVerifier.csproj @@ -0,0 +1,22 @@ + + + Exe + net10.0 + enable + enable + true + + + + + + + ../src/ServerMonitorManager.Control/bin/Release/net10.0/ochenstarik-smm-control.dll + true + + + ../src/ServerMonitorManager.Core/bin/Release/net10.0/ServerMonitorManager.Core.dll + true + + + diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/RELEASE_METADATA.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/RELEASE_METADATA.json new file mode 100644 index 0000000..3f72cc2 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/RELEASE_METADATA.json @@ -0,0 +1 @@ +{"assets":[{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600256","contentType":"application/x-sh","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:77899bc545eadb591f0e311b4998b09cbf279eb17aa6d6073009ca4f3617f3a4","downloadCount":0,"id":"RA_kwDOTX_v0M4ejajA","label":"","name":"ochenstarik-server-monitor-manager.sh","size":66082,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/ochenstarik-server-monitor-manager.sh"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600252","contentType":"application/octet-stream","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:ca659baaf321cdfcaef749fe253a836f5a65700094469720cedcc325ef8bba8e","downloadCount":0,"id":"RA_kwDOTX_v0M4ejai8","label":"","name":"ochenstarik-server-monitor-manager.sh.sha256","size":104,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/ochenstarik-server-monitor-manager.sh.sha256"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600249","contentType":"application/json","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:9dbd6fe2f906f0ba794512d063603cb9d4f87516b04b181ee4aef9b25ad177ae","downloadCount":0,"id":"RA_kwDOTX_v0M4ejai5","label":"","name":"server-monitor-manager-linux-arm64-sbom.json","size":93523,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/server-monitor-manager-linux-arm64-sbom.json"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600260","contentType":"application/gzip","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:85470c5f6c29e0131eccc7b6d7f47adce268d0c738a16ac12e26cd83b6894790","downloadCount":0,"id":"RA_kwDOTX_v0M4ejajE","label":"","name":"server-monitor-manager-linux-arm64.tar.gz","size":24430285,"state":"uploaded","updatedAt":"2026-08-13T06:32:40Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/server-monitor-manager-linux-arm64.tar.gz"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600254","contentType":"application/octet-stream","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:8dde02c3040f27453508f121ddf8190b1a71bcb81cfd2c9d4fe636f0e0a8cbce","downloadCount":0,"id":"RA_kwDOTX_v0M4ejai-","label":"","name":"server-monitor-manager-linux-arm64.tar.gz.sha256","size":108,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/server-monitor-manager-linux-arm64.tar.gz.sha256"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600261","contentType":"application/json","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:665bc442d37080768b0bba21aefa98830a3114ed4d44e426cb6f32cff248e912","downloadCount":0,"id":"RA_kwDOTX_v0M4ejajF","label":"","name":"server-monitor-manager-linux-x64-sbom.json","size":93523,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/server-monitor-manager-linux-x64-sbom.json"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600258","contentType":"application/gzip","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:885be75480f14bceae27ee5538d99b34321b81a82c4931c9eb682305452da438","downloadCount":0,"id":"RA_kwDOTX_v0M4ejajC","label":"","name":"server-monitor-manager-linux-x64.tar.gz","size":25369175,"state":"uploaded","updatedAt":"2026-08-13T06:32:40Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/server-monitor-manager-linux-x64.tar.gz"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600248","contentType":"application/octet-stream","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:257abe9dacddfb43a0acb077cfee504e706ca3efa974c01d64d7643939d15594","downloadCount":0,"id":"RA_kwDOTX_v0M4ejai4","label":"","name":"server-monitor-manager-linux-x64.tar.gz.sha256","size":106,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/server-monitor-manager-linux-x64.tar.gz.sha256"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600259","contentType":"application/json","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:d20351e9cfbdf3b082f15f58a710b90723c645f5dd8f1ddc69b00b9c287031ef","downloadCount":0,"id":"RA_kwDOTX_v0M4ejajD","label":"","name":"server-monitor-manager-manifest.json","size":1185,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/server-monitor-manager-manifest.json"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600262","contentType":"application/pgp-signature","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:c02fbbd86a38a86fb78baaad3dc45917e5ed0fed574cb0eeb8f4da51234427f0","downloadCount":0,"id":"RA_kwDOTX_v0M4ejajG","label":"","name":"server-monitor-manager-manifest.sig","size":96,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/server-monitor-manager-manifest.sig"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600257","contentType":"application/json","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:8b9ddfbe7392b4f9589553d04dfeee80184b495dc83db80f68079e2324950cde","downloadCount":0,"id":"RA_kwDOTX_v0M4ejajB","label":"","name":"server-monitor-manager-win-x64-sbom.json","size":96337,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/server-monitor-manager-win-x64-sbom.json"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600253","contentType":"application/pkix-cert","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:92d5e7d42485ae507c0c4f56af31cedd2bc89e04e3d9c107779d31d0c97fbad6","downloadCount":0,"id":"RA_kwDOTX_v0M4ejai9","label":"","name":"ServerMonitorManager-test-signing.cer","size":1026,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/ServerMonitorManager-test-signing.cer"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600250","contentType":"application/msix","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:192a56a4d23fa66b454248b9f8686363a9cba5e9b732972c246d96fe0827b4ca","downloadCount":0,"id":"RA_kwDOTX_v0M4ejai6","label":"","name":"ServerMonitorManager-win-x64.msix","size":29610904,"state":"uploaded","updatedAt":"2026-08-13T06:32:40Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/ServerMonitorManager-win-x64.msix"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600255","contentType":"application/octet-stream","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:9636a97daccdb14b39fd172903ae9521b0e5a285a14cf59d715be0bd9aa85a33","downloadCount":0,"id":"RA_kwDOTX_v0M4ejai_","label":"","name":"SHA256SUMS","size":101,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/SHA256SUMS"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600247","contentType":"application/x-sh","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:58f225d5091e6e9e2502031ad6d226daf70483efa021a53f4c042966bde0248d","downloadCount":0,"id":"RA_kwDOTX_v0M4ejai3","label":"","name":"smm-setup.sh","size":2987,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/smm-setup.sh"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512600251","contentType":"application/octet-stream","createdAt":"2026-08-13T06:32:39Z","digest":"sha256:9a3b83fa192e0077c4b3d338d03ef7d4f26ea0ada6c6af418abbac653bd88307","downloadCount":0,"id":"RA_kwDOTX_v0M4ejai7","label":"","name":"smm-setup.sh.sha256","size":79,"state":"uploaded","updatedAt":"2026-08-13T06:32:39Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.12/smm-setup.sh.sha256"}],"isDraft":false,"isPrerelease":true,"publishedAt":"2026-08-13T06:32:38Z","tagName":"v0.1.0-alpha.12","targetCommitish":"main","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/tag/v0.1.0-alpha.12"} diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/SHA256SUMS b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/SHA256SUMS new file mode 100644 index 0000000..9b64fe4 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/SHA256SUMS @@ -0,0 +1 @@ +192a56a4d23fa66b454248b9f8686363a9cba5e9b732972c246d96fe0827b4ca *ServerMonitorManager-win-x64.msix diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/ServerMonitorManager-test-signing.cer b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/ServerMonitorManager-test-signing.cer new file mode 100644 index 0000000..36d457c Binary files /dev/null and b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/ServerMonitorManager-test-signing.cer differ diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/ochenstarik-server-monitor-manager.sh b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/ochenstarik-server-monitor-manager.sh new file mode 100644 index 0000000..5485426 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/ochenstarik-server-monitor-manager.sh @@ -0,0 +1,1516 @@ +#!/usr/bin/env bash +set -Eeuo pipefail +IFS=$'\n\t' + +readonly PROGRAM="ochenstarik-server-monitor-manager" +readonly PROGRAM_VERSION="0.2.0-dev" +readonly ETC_DIR="/etc/ochenstarik-server-monitor-manager" +readonly LIB_DIR="/usr/local/lib/ochenstarik-server-monitor-manager" +readonly STATE_DIR="/var/lib/ochenstarik-server-monitor-manager" +readonly ENROLLMENT_DIR="${STATE_DIR}-enrollment" +readonly BACKUP_DIR="${STATE_DIR}/bootstrap-backups" +readonly CONTROL_USER="ochenstarik-smm-control" +readonly AGENT_USER="ochenstarik-smm-agent" +readonly CONTROL_UNIT="ochenstarik-smm-control.service" +readonly AGENT_UNIT="ochenstarik-smm-agent.service" +readonly PROVISIONING_HELPER_UNIT="ochenstarik-smm-provisioning-helper.service" +readonly POLICY_HELPER="/usr/local/libexec/ochenstarik-smm-policy-apply" +readonly EMERGENCY_COMMAND="/usr/local/sbin/ochenstarik-smm-emergency" +readonly BOOTSTRAP_COMMAND="/usr/local/sbin/ochenstarik-server-monitor-manager.sh" +readonly SUDOERS_FILE="/etc/sudoers.d/ochenstarik-smm-control" +readonly MESH_DIR="${STATE_DIR}/mesh" +readonly WG_DIR="${ETC_DIR}/wireguard" +readonly FIREWALL_UNIT="ochenstarik-smm-firewall.service" +readonly MESH_NETWORK="10.77.0.0/24" +readonly HUB_MESH_ADDRESS="10.77.0.1/24" +# Trust anchors — see docs/release-policy.md for the full signing and identity contract. +readonly COSIGN_ISSUER="https://token.actions.githubusercontent.com" +readonly COSIGN_IDENTITY_REGEXP="^https://github.com/ochenstarik-ui/server-monitor-manager/\.github/workflows/linux-release\.yml@refs/tags/v.*$" + +TEMP_DIR="" +MESH_PEER_CODE="" +ENROLLMENT_TOKEN_FILE="" +ENROLLMENT_TOKEN_TEMP="" +CONTROL_UPDATE_BACKUP_ID="" +CONTROL_UPDATE_RECOVERY_REQUIRED=0 +CONTROL_UPDATE_LEGACY_ITEMS=() + +log() { printf '%s\n' "[$PROGRAM] $*"; } +fail() { printf '%s\n' "[$PROGRAM] ERROR: $*" >&2; exit 1; } + +cleanup() { + local status=$? + trap - EXIT + if [[ "$CONTROL_UPDATE_RECOVERY_REQUIRED" == "1" ]]; then + log "Control update failed; restoring the pre-update state." + if recover_control_update "$CONTROL_UPDATE_BACKUP_ID"; then + log "Control recovery completed." + else + printf '%s\n' "[$PROGRAM] ERROR: Automatic Control recovery failed; manual recovery is required." >&2 + status=1 + fi + fi + if [[ -n "$ENROLLMENT_TOKEN_FILE" ]]; then + rm -f -- "$ENROLLMENT_TOKEN_FILE" + fi + if [[ -n "$ENROLLMENT_TOKEN_TEMP" ]]; then + rm -f -- "$ENROLLMENT_TOKEN_TEMP" + fi + if [[ -n "$TEMP_DIR" && -d "$TEMP_DIR" ]]; then + rm -rf -- "$TEMP_DIR" + fi + exit "$status" +} +trap cleanup EXIT + +usage() { + cat <<'EOF' +Server Monitor Manager Linux bootstrap + +Usage: + ochenstarik-server-monitor-manager.sh preflight + ochenstarik-server-monitor-manager.sh verify-release ARCHIVE + ochenstarik-server-monitor-manager.sh install-control ARCHIVE PUBLIC_HOST [HTTPS_PORT] + ochenstarik-server-monitor-manager.sh install-agent ARCHIVE NODE_ID CONTROL_URL CA_CERT + ochenstarik-server-monitor-manager.sh install-node ARCHIVE + ochenstarik-server-monitor-manager.sh verify-manifest MANIFEST SIGNATURE + ochenstarik-server-monitor-manager.sh mesh-init PUBLIC_ENDPOINT [WG_PORT] + ochenstarik-server-monitor-manager.sh peer-add SMMPEER1_CODE + ochenstarik-server-monitor-manager.sh mesh-status + ochenstarik-server-monitor-manager.sh update-control ARCHIVE + ochenstarik-server-monitor-manager.sh update-agent ARCHIVE + ochenstarik-server-monitor-manager.sh rollback control|agent [BACKUP_ID] + ochenstarik-server-monitor-manager.sh node-code NODE_ID + ochenstarik-server-monitor-manager.sh control-device-code DEVICE_ID + ochenstarik-server-monitor-manager.sh node-token NODE_ID + ochenstarik-server-monitor-manager.sh control-ca-fingerprint + ochenstarik-server-monitor-manager.sh status + ochenstarik-server-monitor-manager.sh uninstall-agent [--purge] + ochenstarik-server-monitor-manager.sh uninstall-control --confirm-destroy-control + ochenstarik-server-monitor-manager.sh version + +ARCHIVE must have a matching ARCHIVE.sha256 file. Agent enrollment reads the +one-time token from SMM_ENROLL_TOKEN or from a hidden local prompt; it is never +written to agent.env. +EOF +} + +base64url_encode() { + base64 -w 0 | tr '+/' '-_' | tr -d '=' +} + +base64url_decode() { + local value="$1" remainder + [[ "$value" =~ ^[A-Za-z0-9_-]+$ ]] || fail "Enrollment code contains invalid base64url data." + remainder=$(( ${#value} % 4 )) + case "$remainder" in + 0) ;; + 2) value+="==" ;; + 3) value+="=" ;; + *) fail "Enrollment code contains invalid base64url length." ;; + esac + printf '%s' "$value" | tr '_-' '/+' | base64 -d +} + +require_root() { + [[ ${EUID:-$(id -u)} -eq 0 ]] || fail "This action must run as root (use sudo)." +} + +require_command() { + command -v "$1" >/dev/null 2>&1 || fail "Required command is missing: $1" +} + +validate_platform() { + [[ -r /etc/os-release ]] || fail "/etc/os-release is missing." + # shellcheck disable=SC1091 + . /etc/os-release + case "${ID:-}" in + ubuntu) + case "${VERSION_ID:-}" in 22.04|24.04) ;; *) fail "Unsupported Ubuntu version: ${VERSION_ID:-unknown}" ;; esac + ;; + debian) + case "${VERSION_ID:-}" in 12|13) ;; *) fail "Unsupported Debian version: ${VERSION_ID:-unknown}" ;; esac + ;; + *) fail "Unsupported distribution: ${ID:-unknown}" ;; + esac + case "$(uname -m)" in + x86_64|aarch64|arm64) ;; + *) fail "Unsupported architecture: $(uname -m)" ;; + esac + [[ "$(ps -p 1 -o comm=)" == "systemd" ]] || fail "systemd must be PID 1." +} + +# Release tags carry a leading "v" while some manifest fields and recorded values may not. +normalize_version() { + printf '%s' "${1#v}" +} + +# True when the first version orders strictly before the second. Lexicographic comparison is +# wrong here: "0.1.0-alpha.10" sorts before "0.1.0-alpha.9" as a string, which would reject +# every release after the ninth as a downgrade. +version_lt() { + local left right first + left="$(normalize_version "$1")" + right="$(normalize_version "$2")" + [[ "$left" != "$right" ]] || return 1 + first="$(printf '%s\n%s\n' "$left" "$right" | sort -V | head -n1)" + [[ "$first" == "$left" ]] +} + +installed_version_file() { + printf '%s' "$ETC_DIR/installed-version-$1" +} + +read_installed_version() { + local file + file="$(installed_version_file "$1")" + [[ -r "$file" ]] || return 0 + tr -d '\r\n' <"$file" +} + +record_installed_version() { + local role="$1" version="$2" file + [[ -n "$version" ]] || return 0 + file="$(installed_version_file "$role")" + install -d -m 0755 "$ETC_DIR" + printf '%s\n' "$version" >"$file" + chmod 0644 "$file" +} + +manifest_version_field() { + local manifest="$1" field="$2" + [[ -r "$manifest" ]] || return 0 + awk -F'"' -v key="$field" '$2 == key { print $4; exit }' "$manifest" || true +} + +# Version recorded for an archive being installed, empty when the release predates manifests. +archive_version() { + manifest_version_field "$(dirname "$1")/server-monitor-manager-manifest.json" version +} + +validate_node_id() { + [[ "$1" =~ ^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$ ]] \ + || fail "Node id must contain 1-63 lowercase letters, digits, or hyphens." +} + +validate_port() { + [[ "$1" =~ ^[0-9]{1,5}$ ]] && (( 10#$1 >= 1 && 10#$1 <= 65535 )) \ + || fail "Port must be in range 1-65535." +} + +validate_ipv4_literal() { + local address="$1" octet + local -a octets + IFS=. read -r -a octets <<<"$address" + (( ${#octets[@]} == 4 )) || fail "Control URL contains an invalid IPv4 host." + for octet in "${octets[@]}"; do + [[ "$octet" =~ ^[0-9]{1,3}$ ]] && (( 10#$octet <= 255 )) \ + || fail "Control URL contains an invalid IPv4 host." + done +} + +validate_control_url() { + local authority host port="" label left right compressed=0 ipv4_groups=0 group_count last_group_index + local -a groups labels right_groups + [[ "$1" == https://* ]] || fail "Control URL must be an https URL without a path or credentials." + authority="${1#https://}" + authority="${authority%/}" + [[ -n "$authority" && "$authority" != *['/?#@']* ]] \ + || fail "Control URL must be an https URL without a path or credentials." + + if [[ "$authority" == \[* ]]; then + [[ "$authority" =~ ^\[([0-9A-Fa-f:.]+)\](:([0-9]+))?$ ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + host="${BASH_REMATCH[1]}" + port="${BASH_REMATCH[3]:-}" + [[ "$host" == *:* ]] || fail "Control URL contains an invalid bracketed IPv6 authority." + [[ "$host" != *:::* ]] || fail "Control URL contains an invalid bracketed IPv6 authority." + [[ "$host" != :* || "$host" == ::* ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + [[ "$host" != *: || "$host" == *:: ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + groups=() + if [[ "$host" == *::* ]]; then + compressed=1 + [[ "${host/::/}" != *::* ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + left="${host%%::*}" + right="${host#*::}" + if [[ -n "$left" ]]; then + IFS=: read -r -a groups <<<"$left" + fi + if [[ -n "$right" ]]; then + IFS=: read -r -a right_groups <<<"$right" + groups+=("${right_groups[@]}") + fi + else + IFS=: read -r -a groups <<<"$host" + fi + if (( ${#groups[@]} > 0 )) && [[ "${groups[${#groups[@]}-1]}" == *.* ]]; then + last_group_index=$(( ${#groups[@]} - 1 )) + validate_ipv4_literal "${groups[$last_group_index]}" + unset "groups[$last_group_index]" + ipv4_groups=2 + fi + for label in "${groups[@]}"; do + [[ "$label" =~ ^[0-9A-Fa-f]{1,4}$ ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + done + group_count=$(( ${#groups[@]} + ipv4_groups )) + if (( compressed == 1 )); then + (( group_count < 8 )) || fail "Control URL contains an invalid bracketed IPv6 authority." + else + (( group_count == 8 )) || fail "Control URL contains an invalid bracketed IPv6 authority." + fi + else + [[ "$authority" != *:*:* ]] \ + || fail "Control URL IPv6 authorities must use balanced brackets." + if [[ "$authority" == *:* ]]; then + host="${authority%%:*}" + port="${authority#*:}" + [[ -n "$port" ]] || fail "Control URL contains an invalid port." + else + host="$authority" + fi + [[ "$host" =~ ^[A-Za-z0-9]([A-Za-z0-9.-]*[A-Za-z0-9])?$ ]] \ + || fail "Control URL contains an invalid DNS or IPv4 host." + [[ ${#host} -le 253 && "$host" != *..* ]] \ + || fail "Control URL contains an invalid DNS or IPv4 host." + IFS=. read -r -a labels <<<"$host" + for label in "${labels[@]}"; do + [[ ${#label} -le 63 && "$label" =~ ^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?$ ]] \ + || fail "Control URL contains an invalid DNS or IPv4 host." + done + if [[ "$host" =~ ^[0-9.]+$ ]]; then + validate_ipv4_literal "$host" + fi + fi + [[ -n "$host" ]] || fail "Control URL host is empty." + [[ -z "$port" ]] || validate_port "$port" +} + +verify_manifest() { + local manifest="$1" signature="$2" + if [[ "${SMM_ALLOW_UNSIGNED:-0}" == "1" ]]; then + log "WARNING: Signature verification skipped due to SMM_ALLOW_UNSIGNED=1." + return 0 + fi + require_command cosign + [[ -f "$manifest" ]] || fail "Manifest not found: $manifest" + [[ -f "$signature" ]] || fail "Signature not found: $signature" + log "Verifying manifest signature..." + local verify_args=(--certificate-oidc-issuer "$COSIGN_ISSUER" --certificate-identity-regexp "$COSIGN_IDENTITY_REGEXP") + if [[ -n "${SMM_TEST_PUBKEY:-}" ]]; then + verify_args=(--key "$SMM_TEST_PUBKEY" --insecure-ignore-tlog) + log "WARNING: Using test public key for verification. This must NOT happen in production." + fi + if ! cosign verify-blob "${verify_args[@]}" \ + --signature "$signature" "$manifest" >/dev/null 2>&1; then + fail "Manifest signature verification failed." + fi + log "Manifest signature is valid." +} + +verify_archive() { + local archive="$1" expected actual entry manifest signature + [[ -f "$archive" ]] || fail "Archive not found: $archive" + manifest="$(dirname "$archive")/server-monitor-manager-manifest.json" + signature="$(dirname "$archive")/server-monitor-manager-manifest.sig" + + if [[ -f "$manifest" && -f "$signature" ]]; then + verify_manifest "$manifest" "$signature" + local archive_basename + archive_basename="$(basename "$archive")" + expected="$(awk -F'"' -v name="$archive_basename" '$2 == name {print $4}' "$manifest" || true)" + if [[ -z "$expected" && "$archive_basename" == ochenstarik-* ]]; then + expected="$(awk -F'"' -v name="${archive_basename#ochenstarik-}" '$2 == name {print $4}' "$manifest" || true)" + fi + [[ -n "$expected" ]] || fail "Could not extract archive hash from manifest." + else + if [[ "${SMM_ALLOW_UNSIGNED:-0}" == "1" ]]; then + log "WARNING: Manifest and signature not found, falling back to .sha256 file due to SMM_ALLOW_UNSIGNED=1." + local checksum_file="${archive}.sha256" + [[ -f "$checksum_file" ]] || fail "Checksum file not found: $checksum_file" + expected="$(awk 'NR == 1 { print $1 }' "$checksum_file")" + [[ "$expected" =~ ^[0-9a-fA-F]{64}$ ]] || fail "Invalid checksum file: $checksum_file" + else + fail "Manifest and signature are required for archive verification. Set SMM_ALLOW_UNSIGNED=1 to bypass." + fi + fi + + actual="$(sha256sum "$archive" | awk '{ print $1 }')" + [[ "${actual,,}" == "${expected,,}" ]] || fail "Archive checksum mismatch." + + while IFS= read -r entry; do + [[ -n "$entry" ]] || continue + [[ "$entry" != /* && "$entry" != *".."* ]] || fail "Unsafe archive entry: $entry" + case "$entry" in + agent|agent/*|control|control/*|provisioning-helper|provisioning-helper/*|deploy|deploy/*|bootstrap|bootstrap/*) ;; + *) fail "Unexpected archive entry: $entry" ;; + esac + done < <(tar -tzf "$archive") +} + +extract_archive() { + local archive="$1" + verify_archive "$archive" + TEMP_DIR="$(mktemp -d -t smm-bootstrap.XXXXXXXX)" + chmod 700 "$TEMP_DIR" + tar -xzf "$archive" -C "$TEMP_DIR" --no-same-owner --no-same-permissions + [[ -f "$TEMP_DIR/deploy/$CONTROL_UNIT" ]] || fail "Control systemd unit is missing from archive." + [[ -f "$TEMP_DIR/deploy/$AGENT_UNIT" ]] || fail "Agent systemd unit is missing from archive." + [[ -f "$TEMP_DIR/deploy/$PROVISIONING_HELPER_UNIT" ]] || fail "Provisioning helper systemd unit is missing from archive." + [[ -f "$TEMP_DIR/deploy/$FIREWALL_UNIT" ]] || fail "Mesh firewall systemd unit is missing from archive." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-policy-apply" ]] || fail "Policy helper is missing from archive." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-emergency" ]] || fail "Emergency command is missing from archive." +} + +verify_release_payload() { + local archive="$1" + require_command sha256sum + require_command tar + extract_archive "$archive" + [[ -x "$TEMP_DIR/control/ochenstarik-smm-control" ]] || fail "Control binary is missing." + [[ -x "$TEMP_DIR/agent/ochenstarik-smm-agent" ]] || fail "Agent binary is missing." + [[ -x "$TEMP_DIR/provisioning-helper/ochenstarik-smm-provisioning-helper" ]] || fail "Provisioning helper binary is missing." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-policy-apply" ]] || fail "Policy helper is missing." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-emergency" ]] || fail "Emergency recovery command is missing." + [[ -f "$TEMP_DIR/deploy/$FIREWALL_UNIT" ]] || fail "Mesh firewall unit is missing." + [[ -x "$TEMP_DIR/bootstrap/ochenstarik-server-monitor-manager.sh" ]] || fail "Packaged bootstrap is missing." + log "Release archive and checksum are valid." +} + +ensure_system_user() { + local user="$1" + if ! getent group "$user" >/dev/null; then + groupadd --system "$user" + fi + if ! id "$user" >/dev/null 2>&1; then + useradd --system --gid "$user" --home-dir /nonexistent --no-create-home --shell /usr/sbin/nologin "$user" + fi +} + +ensure_mesh_packages() { + local missing=0 command_name + for command_name in wg wg-quick nft ip; do + command -v "$command_name" >/dev/null 2>&1 || missing=1 + done + (( missing == 0 )) && return + require_command apt-get + log "Installing WireGuard/nftables dependencies." + DEBIAN_FRONTEND=noninteractive apt-get update + DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \ + wireguard-tools nftables iproute2 +} + +install_tree_atomic() { + local source="$1" destination="$2" owner="$3" staging + [[ -d "$source" ]] || fail "Release payload is missing: $source" + staging="${destination}.new.$$" + rm -rf -- "$staging" + install -d -m 0755 "$staging" + cp -a -- "$source/." "$staging/" + chown -R "$owner" "$staging" + find "$staging" -type d -exec chmod 0755 {} + + find "$staging" -type f -exec chmod 0644 {} + + find "$staging" -type f -name 'ochenstarik-smm-*' -exec chmod 0755 {} + + rm -rf -- "$destination" + mv -- "$staging" "$destination" +} + +create_backup() { + local role="$1" backup_id archive list=() + backup_id="$(date -u +%Y%m%dT%H%M%SZ)-${role}-$RANDOM" + install -d -m 0700 "$BACKUP_DIR" + archive="$BACKUP_DIR/${backup_id}.tar.gz" + case "$role" in + control) + list=( + "usr/local/lib/ochenstarik-server-monitor-manager/control" + "etc/ochenstarik-server-monitor-manager/control.env" + "etc/ochenstarik-server-monitor-manager/control-ca.pfx" + "etc/ochenstarik-server-monitor-manager/control-server.pfx" + "etc/systemd/system/$CONTROL_UNIT" + "usr/local/libexec/ochenstarik-smm-policy-apply" + "etc/sudoers.d/ochenstarik-smm-control" + ) + ;; + agent) + list=( + "usr/local/lib/ochenstarik-server-monitor-manager/agent" + "usr/local/lib/ochenstarik-server-monitor-manager/provisioning-helper" + "etc/ochenstarik-server-monitor-manager/agent.env" + "etc/ochenstarik-server-monitor-manager/control-ca.crt" + "etc/systemd/system/$AGENT_UNIT" + "etc/systemd/system/$PROVISIONING_HELPER_UNIT" + ) + ;; + *) fail "Unknown backup role: $role" ;; + esac + local existing=() item + for item in "${list[@]}"; do + [[ -e "/$item" ]] && existing+=("$item") + done + if (( ${#existing[@]} == 0 )); then + printf '%s\n' "empty" >"$BACKUP_DIR/${backup_id}.empty" + else + tar -C / -czf "$archive" -- "${existing[@]}" + chmod 0600 "$archive" + fi + printf '%s\n' "$backup_id" +} + +install_unit() { + local source="$1" unit="$2" + install -m 0644 "$source" "/etc/systemd/system/$unit" + systemctl daemon-reload +} + +install_bootstrap_command() { + local source="$TEMP_DIR/bootstrap/ochenstarik-server-monitor-manager.sh" staging + [[ -x "$source" ]] || fail "Packaged bootstrap is missing." + install -d -m 0755 "$(dirname "$BOOTSTRAP_COMMAND")" + staging="$(mktemp "$(dirname "$BOOTSTRAP_COMMAND")/.ochenstarik-server-monitor-manager.XXXXXXXX")" + if ! install -m 0755 -o root -g root "$source" "$staging"; then + rm -f -- "$staging" + fail "Could not stage the system bootstrap command." + fi + if ! mv -fT -- "$staging" "$BOOTSTRAP_COMMAND"; then + rm -f -- "$staging" + fail "Could not publish the system bootstrap command." + fi +} + +validate_control_state_migration() { + local name + for name in control.db control.db-wal control.db-shm; do + [[ ! -e "$STATE_DIR/$name" || ! -e "$STATE_DIR/control/$name" ]] \ + || fail "Both legacy and role-isolated Control state exist: $name" + done + [[ ! -e "$STATE_DIR/backups" || ! -e "$STATE_DIR/control/backups" ]] \ + || fail "Both legacy and role-isolated Control backup directories exist." +} + +record_control_legacy_state() { + local name + CONTROL_UPDATE_LEGACY_ITEMS=() + for name in control.db control.db-wal control.db-shm; do + [[ ! -e "$STATE_DIR/$name" ]] || CONTROL_UPDATE_LEGACY_ITEMS+=("$name") + done + [[ ! -e "$STATE_DIR/backups" ]] || CONTROL_UPDATE_LEGACY_ITEMS+=(backups) +} + +prepare_control_state() { + local name + install -d -m 0700 -o "$CONTROL_USER" -g "$CONTROL_USER" "$STATE_DIR/control" + for name in control.db control.db-wal control.db-shm; do + if [[ -e "$STATE_DIR/$name" ]]; then + mv -- "$STATE_DIR/$name" "$STATE_DIR/control/$name" + fi + done + if [[ -e "$STATE_DIR/backups" ]]; then + mv -- "$STATE_DIR/backups" "$STATE_DIR/control/backups" + fi + install -d -m 0700 -o "$CONTROL_USER" -g "$CONTROL_USER" "$STATE_DIR/control/backups" + chown -R "$CONTROL_USER:$CONTROL_USER" "$STATE_DIR/control" + find "$STATE_DIR/control" -type d -exec chmod 0700 {} + + find "$STATE_DIR/control" -type f -exec chmod 0600 {} + +} + +reverse_control_state_migration() { + local name source destination + for name in "${CONTROL_UPDATE_LEGACY_ITEMS[@]}"; do + source="$STATE_DIR/control/$name" + destination="$STATE_DIR/$name" + if [[ -e "$destination" ]]; then + [[ ! -e "$source" ]] || return 1 + continue + fi + [[ ! -e "$source" ]] || mv -- "$source" "$destination" || return 1 + done + rmdir "$STATE_DIR/control/backups" 2>/dev/null || true + rmdir "$STATE_DIR/control" 2>/dev/null || true +} + +restore_control_update_backup() { + local archive="$1" restore_root="${2:-/}" + [[ -f "$archive" ]] || return 1 + tar -C "$restore_root" -xzf "$archive" +} + +restore_control_binary_from_archive() { + local archive="$1" restore_root="${2:-/}" + [[ -f "$archive" ]] || return 1 + tar -C "$restore_root" -xzf "$archive" \ + usr/local/lib/ochenstarik-server-monitor-manager/control +} + +recover_control_update() { + local backup_id="$1" restore_root="${2:-/}" + local archive="$BACKUP_DIR/${backup_id}.tar.gz" + systemctl stop "$CONTROL_UNIT" 2>/dev/null || true + reverse_control_state_migration || return 1 + restore_control_update_backup "$archive" "$restore_root" || return 1 + systemctl daemon-reload || return 1 + systemctl start "$CONTROL_UNIT" || return 1 + systemctl is-active --quiet "$CONTROL_UNIT" +} + +validate_control_environment_migration() { + local env_file="$ETC_DIR/control.env" database_count backup_count database_value backup_value + [[ -f "$env_file" && ! -L "$env_file" ]] \ + || fail "Control environment is missing or unsafe." + database_count="$(grep -c '^Control__DatabasePath=' "$env_file" || true)" + backup_count="$(grep -c '^Control__BackupDirectory=' "$env_file" || true)" + [[ "$database_count" == 1 && "$backup_count" == 1 ]] \ + || fail "Control environment contains missing or conflicting state paths." + database_value="$(grep '^Control__DatabasePath=' "$env_file")" + backup_value="$(grep '^Control__BackupDirectory=' "$env_file")" + case "$database_value" in + "Control__DatabasePath=$STATE_DIR/control.db"|"Control__DatabasePath=$STATE_DIR/control/control.db") ;; + *) fail "Control environment contains an unsupported database path." ;; + esac + case "$backup_value" in + "Control__BackupDirectory=$STATE_DIR/backups"|"Control__BackupDirectory=$STATE_DIR/control/backups") ;; + *) fail "Control environment contains an unsupported backup path." ;; + esac +} + +rewrite_control_environment() { + local env_file="$ETC_DIR/control.env" staging line + staging="$(mktemp "$ETC_DIR/.control.env.XXXXXXXX")" + if ! while IFS= read -r line || [[ -n "$line" ]]; do + case "$line" in + Control__DatabasePath=*) printf 'Control__DatabasePath=%s/control/control.db\n' "$STATE_DIR" ;; + Control__BackupDirectory=*) printf 'Control__BackupDirectory=%s/control/backups\n' "$STATE_DIR" ;; + *) printf '%s\n' "$line" ;; + esac + done <"$env_file" >"$staging"; then + rm -f -- "$staging" + fail "Could not rewrite the Control environment." + fi + chown root:"$CONTROL_USER" "$staging" + chmod 0640 "$staging" + if ! mv -fT -- "$staging" "$env_file"; then + rm -f -- "$staging" + fail "Could not publish the Control environment." + fi +} + +write_mesh_firewall() { + cat >"$ETC_DIR/mesh.nft" <<'EOF' +table inet ochenstarik_smm { + chain links { + ct state established,related accept + counter drop + } + + chain mesh_forward { + type filter hook forward priority filter; policy accept; + iifname "smm0" oifname "smm0" jump links + } + } +EOF + chmod 0644 "$ETC_DIR/mesh.nft" + if ! nft list table inet ochenstarik_smm >/dev/null 2>&1; then + nft --check -f "$ETC_DIR/mesh.nft" + fi +} + +read_mesh_value() { + local key="$1" + [[ -r "$ETC_DIR/mesh.env" ]] || fail "Mesh Hub is not initialized." + awk -F '=' -v key="$key" '$1 == key { print substr($0, index($0, "=") + 1); exit }' "$ETC_DIR/mesh.env" +} + +render_hub_wireguard_config() { + local private_key endpoint port node_id address public_key status + private_key="$(cat "$WG_DIR/hub.key")" + endpoint="$(read_mesh_value HUB_ENDPOINT)" + port="${endpoint##*:}" + cat >"/etc/wireguard/smm0.conf" <>"/etc/wireguard/smm0.conf" <"$WG_DIR/hub.key" + fi + hub_private="$(cat "$WG_DIR/hub.key")" + hub_public="$(printf '%s' "$hub_private" | wg pubkey)" + printf '%s\n' "$hub_public" >"$WG_DIR/hub.pub" + chmod 0600 "$WG_DIR/hub.key" + chmod 0644 "$WG_DIR/hub.pub" + cat >"$ETC_DIR/mesh.env" <"/etc/sysctl.d/90-ochenstarik-smm-mesh.conf" + sysctl --system >/dev/null + write_mesh_firewall + [[ -f "$LIB_DIR/control/ochenstarik-smm-control" ]] \ + || log "Warning: Control is not installed yet; mesh peer codes require Control enrollment." + if [[ -f "${TEMP_DIR:-}/deploy/$FIREWALL_UNIT" ]]; then + install_unit "$TEMP_DIR/deploy/$FIREWALL_UNIT" "$FIREWALL_UNIT" + elif [[ -f "$LIB_DIR/bootstrap/$FIREWALL_UNIT" ]]; then + install_unit "$LIB_DIR/bootstrap/$FIREWALL_UNIT" "$FIREWALL_UNIT" + else + fail "Mesh firewall systemd unit is unavailable; reinstall Control from the current release." + fi + systemctl enable "$FIREWALL_UNIT" + systemctl restart "$FIREWALL_UNIT" + render_hub_wireguard_config + systemctl enable wg-quick@smm0.service + systemctl restart wg-quick@smm0.service + log "Mesh Hub initialized at $public_endpoint:$port with $MESH_NETWORK." + log "WireGuard public key: $hub_public" +} + +reserve_node_address() { + local node_id="$1" existing host address + install -d -m 0700 "$MESH_DIR" + touch "$MESH_DIR/nodes.tsv" + chmod 0600 "$MESH_DIR/nodes.tsv" + existing="$(awk -F '\t' -v node="$node_id" '$1 == node { print $2; exit }' "$MESH_DIR/nodes.tsv")" + if [[ -n "$existing" ]]; then + printf '%s\n' "$existing" + return + fi + for host in $(seq 2 254); do + address="10.77.0.$host" + if ! awk -F '\t' -v address="$address" '$2 == address { found=1 } END { exit found ? 0 : 1 }' "$MESH_DIR/nodes.tsv"; then + printf '%s\t%s\t-\treserved\n' "$node_id" "$address" >>"$MESH_DIR/nodes.tsv" + printf '%s\n' "$address" + return + fi + done + fail "Mesh address pool is exhausted." +} + +configure_node_wireguard() { + local node_id="$1" node_address="$2" hub_endpoint="$3" hub_public_key="$4" node_private node_public + ensure_mesh_packages + install -d -m 0700 "$WG_DIR" /etc/wireguard + if [[ ! -f "$WG_DIR/node.key" ]]; then + umask 077 + wg genkey >"$WG_DIR/node.key" + fi + node_private="$(cat "$WG_DIR/node.key")" + node_public="$(printf '%s' "$node_private" | wg pubkey)" + printf '%s\n' "$node_public" >"$WG_DIR/node.pub" + cat >"/etc/wireguard/smm0.conf" <"$ext_file" + openssl x509 -req -sha256 -days 825 -in "$server_csr" -CA "$ca_cert" -CAkey "$ca_key" \ + -CAserial "$serial_file" -CAcreateserial -out "$TEMP_DIR/control-server.crt" -extfile "$ext_file" + openssl pkcs12 -export -out "$ETC_DIR/control-ca.pfx" -inkey "$ca_key" -in "$ca_cert" -passout pass: + openssl pkcs12 -export -out "$ETC_DIR/control-server.pfx" -inkey "$server_key" \ + -in "$TEMP_DIR/control-server.crt" -certfile "$ca_cert" -passout pass: + install -m 0644 "$ca_cert" "$ETC_DIR/control-ca.crt" + chown root:"$CONTROL_USER" "$ETC_DIR/control-ca.pfx" "$ETC_DIR/control-server.pfx" + chmod 0640 "$ETC_DIR/control-ca.pfx" "$ETC_DIR/control-server.pfx" +} + +install_control() { + local archive="$1" public_host="$2" port="${3:-7443}" backup_id + require_root + validate_platform + validate_port "$port" + require_command openssl + require_command sha256sum + require_command tar + require_command systemctl + require_command sudo + require_command visudo + extract_archive "$archive" + [[ -x "$TEMP_DIR/control/ochenstarik-smm-control" ]] || fail "Control binary is missing." + backup_id="$(create_backup control)" + ensure_system_user "$CONTROL_USER" + validate_control_state_migration + systemctl stop "$CONTROL_UNIT" 2>/dev/null || true + install -d -m 0711 -o root -g root "$ETC_DIR" "$STATE_DIR" + prepare_control_state + install_tree_atomic "$TEMP_DIR/control" "$LIB_DIR/control" "root:root" + install_bootstrap_command + if [[ ! -f "$ETC_DIR/control-ca.pfx" || ! -f "$ETC_DIR/control-server.pfx" ]]; then + create_control_certificates "$public_host" + fi + cat >"$ETC_DIR/control.env" <"$ETC_DIR/control-public-url" + chown root:"$CONTROL_USER" "$ETC_DIR/control.env" + chmod 0640 "$ETC_DIR/control.env" + chmod 0644 "$ETC_DIR/control-public-url" + install -d -m 0755 "$(dirname "$POLICY_HELPER")" + install -m 0755 "$TEMP_DIR/deploy/ochenstarik-smm-policy-apply" "$POLICY_HELPER" + install -d -m 0755 "$(dirname "$EMERGENCY_COMMAND")" + install -m 0755 "$TEMP_DIR/deploy/ochenstarik-smm-emergency" "$EMERGENCY_COMMAND" + install -d -m 0755 "$LIB_DIR/bootstrap" + install -m 0644 "$TEMP_DIR/deploy/$FIREWALL_UNIT" "$LIB_DIR/bootstrap/$FIREWALL_UNIT" + printf '%s\n' "$CONTROL_USER ALL=(root) NOPASSWD: $POLICY_HELPER *" >"$SUDOERS_FILE" + chmod 0440 "$SUDOERS_FILE" + visudo -cf "$SUDOERS_FILE" >/dev/null + install_unit "$TEMP_DIR/deploy/$CONTROL_UNIT" "$CONTROL_UNIT" + systemctl enable --now "$CONTROL_UNIT" + systemctl is-active --quiet "$CONTROL_UNIT" || { + systemctl status --no-pager "$CONTROL_UNIT" >&2 || true + fail "Control service failed; backup is $backup_id" + } + record_installed_version control "$(archive_version "$archive")" + log "Control installed. Backup: $backup_id" + log "CA fingerprint: $(openssl x509 -in "$ETC_DIR/control-ca.crt" -noout -fingerprint -sha256 | cut -d= -f2)" +} + +read_enrollment_token() { + if [[ -n "${SMM_ENROLL_TOKEN:-}" ]]; then + ENROLL_TOKEN="$SMM_ENROLL_TOKEN" + unset SMM_ENROLL_TOKEN + return + fi + [[ -t 0 ]] || fail "Set SMM_ENROLL_TOKEN or run from an interactive local terminal." + read -r -s -p "One-time enrollment token: " ENROLL_TOKEN + printf '\n' + [[ -n "$ENROLL_TOKEN" ]] || fail "Enrollment token is empty." +} + +install_agent() { + local archive="$1" node_id="$2" control_url="$3" ca_cert="$4" backup_id token_file token_temp + require_root + validate_platform + validate_node_id "$node_id" + validate_control_url "$control_url" + [[ -f "$ca_cert" ]] || fail "Control CA certificate not found: $ca_cert" + require_command sha256sum + require_command tar + require_command systemctl + require_command runuser + require_command openssl + openssl x509 -in "$ca_cert" -noout >/dev/null 2>&1 || fail "Invalid Control CA certificate." + extract_archive "$archive" + [[ -x "$TEMP_DIR/agent/ochenstarik-smm-agent" ]] || fail "Agent binary is missing." + [[ -x "$TEMP_DIR/provisioning-helper/ochenstarik-smm-provisioning-helper" ]] || fail "Provisioning helper binary is missing." + backup_id="$(create_backup agent)" + ensure_system_user "$AGENT_USER" + install -d -m 0711 -o root -g root "$ETC_DIR" "$STATE_DIR" + install -d -m 0700 -o "$AGENT_USER" -g "$AGENT_USER" "$STATE_DIR/agent" + install -d -m 0700 -o "$AGENT_USER" -g "$AGENT_USER" "$ENROLLMENT_DIR" + install -d -m 0700 -o root -g root "$STATE_DIR/provisioning/rollback" + install_tree_atomic "$TEMP_DIR/agent" "$LIB_DIR/agent" "root:root" + install_tree_atomic "$TEMP_DIR/provisioning-helper" "$LIB_DIR/provisioning-helper" "root:root" + install_bootstrap_command + install -d -m 0755 "$(dirname "$EMERGENCY_COMMAND")" + install -m 0755 "$TEMP_DIR/deploy/ochenstarik-smm-emergency" "$EMERGENCY_COMMAND" + if [[ "$(realpath "$ca_cert")" != "$(realpath -m "$ETC_DIR/control-ca.crt")" ]]; then + install -m 0600 -o "$AGENT_USER" -g "$AGENT_USER" "$ca_cert" "$ETC_DIR/control-ca.crt" + else + chown "$AGENT_USER:$AGENT_USER" "$ETC_DIR/control-ca.crt" + chmod 0600 "$ETC_DIR/control-ca.crt" + fi + cat >"$ETC_DIR/agent.env" <"$token_temp"; then + ENROLL_TOKEN="" + fail "Could not write the enrollment token file." + fi + chown "$AGENT_USER:$AGENT_USER" "$token_temp" + chmod 0400 "$token_temp" + ENROLLMENT_TOKEN_FILE="$token_file" + mv -fT -- "$token_temp" "$token_file" + ENROLLMENT_TOKEN_TEMP="" + ENROLL_TOKEN="" + if ! runuser -u "$AGENT_USER" -- env \ + "SMM_NodeId=$node_id" \ + "SMM_ControlUrl=${control_url%/}" \ + "SMM_StateDirectory=$STATE_DIR/agent" \ + "SMM_EnrollmentTokenDirectory=$ENROLLMENT_DIR" \ + "SMM_CertificateAuthorityPath=$ETC_DIR/control-ca.crt" \ + "SMM_EnrollTokenFile=$token_file" \ + "$LIB_DIR/agent/ochenstarik-smm-agent"; then + rm -f -- "$token_file" + fail "Agent enrollment failed." + fi + rm -f -- "$token_file" + ENROLLMENT_TOKEN_FILE="" + chown root:"$AGENT_USER" "$ETC_DIR/control-ca.crt" + chmod 0640 "$ETC_DIR/control-ca.crt" + install_unit "$TEMP_DIR/deploy/$AGENT_UNIT" "$AGENT_UNIT" + install_unit "$TEMP_DIR/deploy/$PROVISIONING_HELPER_UNIT" "$PROVISIONING_HELPER_UNIT" + systemctl enable --now "$PROVISIONING_HELPER_UNIT" + systemctl enable --now "$AGENT_UNIT" + systemctl is-active --quiet "$AGENT_UNIT" || { + systemctl status --no-pager "$AGENT_UNIT" >&2 || true + fail "Agent service failed; backup is $backup_id" + } + record_installed_version agent "$(archive_version "$archive")" + log "Agent $node_id installed and enrolled. Backup: $backup_id" +} + +read_enrollment_code() { + if [[ -n "${SMM_ENROLL_CODE:-}" ]]; then + ENROLL_CODE="$SMM_ENROLL_CODE" + unset SMM_ENROLL_CODE + return + fi + [[ -t 0 ]] || fail "Set SMM_ENROLL_CODE or run from an interactive local terminal." + read -r -s -p "SMMNODE enrollment code: " ENROLL_CODE + printf '\n' + [[ -n "$ENROLL_CODE" ]] || fail "Enrollment code is empty." +} + +confirm_ca_fingerprint() { + local ca_file="$1" answer + log "Control CA fingerprint: $(openssl x509 -in "$ca_file" -noout -fingerprint -sha256 | cut -d= -f2)" + if [[ "${SMM_ACCEPT_CA_FINGERPRINT:-}" == "1" ]]; then + return + fi + [[ -t 0 ]] || fail "Set SMM_ACCEPT_CA_FINGERPRINT=1 only after verifying the fingerprint out of band." + read -r -p "Type 'yes' after comparing this fingerprint with the Hub: " answer + [[ "$answer" == "yes" ]] || fail "Control CA fingerprint was not confirmed." +} + +install_node_from_code() { + local archive="$1" prefix control_part ca_part node_part token_part + local endpoint_part hub_key_part address_part network_part extra + local control_url node_id token ca_file hub_endpoint hub_public_key node_address mesh_network + require_root + require_command base64 + require_command openssl + read_enrollment_code + IFS='.' read -r prefix control_part ca_part node_part token_part endpoint_part \ + hub_key_part address_part network_part extra <<<"$ENROLL_CODE" + ENROLL_CODE="" + [[ "$prefix" == "SMMNODE1" || "$prefix" == "SMMNODE2" ]] \ + || fail "Unsupported SMMNODE enrollment code version." + [[ -n "$control_part" && -n "$ca_part" && -n "$node_part" && -n "$token_part" \ + && -z "${extra:-}" ]] || fail "Invalid SMMNODE enrollment code." + if [[ "$prefix" == "SMMNODE1" ]]; then + [[ -z "${endpoint_part:-}${hub_key_part:-}${address_part:-}${network_part:-}" ]] \ + || fail "Invalid SMMNODE1 enrollment code." + else + [[ -n "${endpoint_part:-}" && -n "${hub_key_part:-}" \ + && -n "${address_part:-}" && -n "${network_part:-}" ]] \ + || fail "Invalid SMMNODE2 mesh enrollment code." + fi + control_url="$(base64url_decode "$control_part")" + node_id="$(base64url_decode "$node_part")" + token="$(base64url_decode "$token_part")" + if [[ "$prefix" == "SMMNODE2" ]]; then + hub_endpoint="$(base64url_decode "$endpoint_part")" + hub_public_key="$(base64url_decode "$hub_key_part")" + node_address="$(base64url_decode "$address_part")" + mesh_network="$(base64url_decode "$network_part")" + [[ "$hub_endpoint" =~ ^[A-Za-z0-9.-]+:[0-9]{1,5}$ ]] || fail "Invalid Hub WireGuard endpoint." + validate_port "${hub_endpoint##*:}" + [[ "$hub_public_key" =~ ^[A-Za-z0-9+/]{43}=$ ]] || fail "Invalid Hub WireGuard public key." + [[ "$node_address" =~ ^10\.77\.0\.([2-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-4])$ ]] \ + || fail "Invalid reserved mesh address." + [[ "$mesh_network" == "$MESH_NETWORK" ]] || fail "Unsupported mesh network." + fi + ca_file="$(mktemp -t smm-control-ca.XXXXXXXX.crt)" + chmod 0600 "$ca_file" + base64url_decode "$ca_part" >"$ca_file" + confirm_ca_fingerprint "$ca_file" + SMM_ENROLL_TOKEN="$token" + token="" + install_agent "$archive" "$node_id" "$control_url" "$ca_file" + rm -f -- "$ca_file" + if [[ "$prefix" == "SMMNODE2" ]]; then + configure_node_wireguard "$node_id" "$node_address" "$hub_endpoint" "$hub_public_key" + log "Node mesh configured. Copy this public peer code back to the Hub:" + printf '%s\n' "$MESH_PEER_CODE" + MESH_PEER_CODE="" + fi +} + +refresh_agent_uid() { + local env_file="$ETC_DIR/agent.env" agent_uid temp line found=0 + [[ -f "$env_file" && ! -L "$env_file" ]] \ + || fail "Agent environment is missing or unsafe: $env_file" + agent_uid="$(id -u "$AGENT_USER")" + temp="$(mktemp "$ETC_DIR/.agent.env.XXXXXXXX")" + if ! while IFS= read -r line || [[ -n "$line" ]]; do + if [[ "$line" == SMM_AgentUid=* ]]; then + printf 'SMM_AgentUid=%s\n' "$agent_uid" + found=1 + else + printf '%s\n' "$line" + fi + done <"$env_file" >"$temp"; then + rm -f -- "$temp" + fail "Could not refresh SMM_AgentUid in agent.env." + fi + if [[ "$found" == "0" ]]; then + printf 'SMM_AgentUid=%s\n' "$agent_uid" >>"$temp" + fi + chown root:"$AGENT_USER" "$temp" + chmod 0640 "$temp" + mv -fT -- "$temp" "$env_file" +} + +update_role() { + local role="$1" archive="$2" binary unit user backup_id + require_root + validate_platform + extract_archive "$archive" + case "$role" in + control) binary="ochenstarik-smm-control"; unit="$CONTROL_UNIT"; user="root:root" ;; + agent) binary="ochenstarik-smm-agent"; unit="$AGENT_UNIT"; user="root:root" ;; + *) fail "Unknown role: $role" ;; + esac + [[ -x "$TEMP_DIR/$role/$binary" ]] || fail "$role binary is missing." + + local manifest new_version m_control m_agent installed peer_role peer_expected + manifest="$(dirname "$archive")/server-monitor-manager-manifest.json" + if [[ -f "$manifest" ]]; then + new_version="$(manifest_version_field "$manifest" version)" + m_control="$(manifest_version_field "$manifest" control)" + m_agent="$(manifest_version_field "$manifest" agent)" + if [[ -n "$new_version" ]]; then + # Compared against the version recorded when this role was installed, not against + # PROGRAM_VERSION: that constant describes the bootstrap source tree and never the + # deployed component, so it can neither detect a downgrade nor match a release tag. + installed="$(read_installed_version "$role")" + if [[ -n "$installed" ]] \ + && version_lt "$new_version" "$installed" \ + && [[ "${SMM_ALLOW_DOWNGRADE:-0}" != "1" ]]; then + fail "Downgrade of $role from $installed to $new_version is not allowed. Set SMM_ALLOW_DOWNGRADE=1 to bypass." + fi + + # Cross-role compatibility: the peer component already on this host must run the + # version this archive expects of it. An unknown peer version is reported but not + # treated as failure, because installations predating version recording have + # nothing to compare against. + case "$role" in + control) peer_role="agent"; peer_expected="$m_agent" ;; + agent) peer_role="control"; peer_expected="$m_control" ;; + *) peer_role="" ;; + esac + if [[ -n "$peer_role" ]] \ + && systemctl list-unit-files 2>/dev/null | grep -q "^ochenstarik-smm-${peer_role}.service"; then + local peer_actual + peer_actual="$(read_installed_version "$peer_role")" + if [[ -z "$peer_actual" ]]; then + log "Warning: installed $peer_role version is unknown; compatibility check skipped." + elif [[ -n "$peer_expected" ]] \ + && [[ "$(normalize_version "$peer_actual")" != "$(normalize_version "$peer_expected")" ]]; then + fail "Incompatible versions: installed $peer_role is $peer_actual, but this archive expects $peer_role $peer_expected. Update rejected." + fi + fi + + log "Updating $role to version $new_version" + fi + fi + if [[ "$role" == "control" ]]; then + validate_control_state_migration + validate_control_environment_migration + record_control_legacy_state + else + refresh_agent_uid + fi + backup_id="$(create_backup "$role")" + if [[ "$role" == "control" ]]; then + CONTROL_UPDATE_BACKUP_ID="$backup_id" + CONTROL_UPDATE_RECOVERY_REQUIRED=1 + fi + systemctl stop "$unit" + if [[ "$role" == "agent" ]]; then + systemctl stop "$PROVISIONING_HELPER_UNIT" 2>/dev/null || true + fi + if [[ "$role" == "control" ]]; then + install -d -m 0711 -o root -g root "$ETC_DIR" "$STATE_DIR" + prepare_control_state + rewrite_control_environment + install_bootstrap_command + install_unit "$TEMP_DIR/deploy/$CONTROL_UNIT" "$CONTROL_UNIT" + systemctl enable "$CONTROL_UNIT" + install_tree_atomic "$TEMP_DIR/control" "$LIB_DIR/control" "$user" + else + install_tree_atomic "$TEMP_DIR/$role" "$LIB_DIR/$role" "$user" + [[ -x "$TEMP_DIR/provisioning-helper/ochenstarik-smm-provisioning-helper" ]] \ + || fail "Provisioning helper binary is missing." + install_tree_atomic "$TEMP_DIR/provisioning-helper" "$LIB_DIR/provisioning-helper" "root:root" + install_unit "$TEMP_DIR/deploy/$AGENT_UNIT" "$AGENT_UNIT" + install_unit "$TEMP_DIR/deploy/$PROVISIONING_HELPER_UNIT" "$PROVISIONING_HELPER_UNIT" + systemctl enable --now "$PROVISIONING_HELPER_UNIT" + fi + systemctl restart "$unit" + if ! systemctl is-active --quiet "$unit"; then + if [[ "$role" == "agent" ]]; then + log "Update failed; restoring backup $backup_id" + restore_backup "$role" "$backup_id" + fi + fail "$role update was rolled back." + fi + if [[ "$role" == "control" ]]; then + CONTROL_UPDATE_RECOVERY_REQUIRED=0 + CONTROL_UPDATE_BACKUP_ID="" + CONTROL_UPDATE_LEGACY_ITEMS=() + fi + record_installed_version "$role" "$(archive_version "$archive")" + log "$role updated. Backup: $backup_id" +} + +latest_backup_id() { + local role="$1" path + path="$(find "$BACKUP_DIR" -maxdepth 1 -type f \( -name "*-${role}-*.tar.gz" -o -name "*-${role}-*.empty" \) -printf '%f\n' 2>/dev/null | sort | tail -n1)" + [[ -n "$path" ]] || fail "No backup found for $role." + printf '%s\n' "${path%.tar.gz}" | sed 's/\.empty$//' +} + +restore_backup() { + local role="$1" backup_id="$2" archive="$BACKUP_DIR/${backup_id}.tar.gz" unit + case "$role" in control) unit="$CONTROL_UNIT" ;; agent) unit="$AGENT_UNIT" ;; *) fail "Unknown role: $role" ;; esac + [[ -f "$archive" ]] || fail "Backup archive not found: $backup_id" + systemctl stop "$unit" || true + if [[ "$role" == "agent" ]]; then + systemctl stop "$PROVISIONING_HELPER_UNIT" || true + fi + if [[ "$role" == "control" ]]; then + restore_control_binary_from_archive "$archive" + else + tar -C / -xzf "$archive" + fi + systemctl daemon-reload + if [[ "$role" == "agent" ]]; then + systemctl start "$PROVISIONING_HELPER_UNIT" + fi + systemctl start "$unit" + systemctl is-active --quiet "$unit" || fail "Rollback restored files but service is not active." + log "$role restored from $backup_id" +} + +rollback_role() { + local role="$1" backup_id="${2:-}" + require_root + [[ -n "$backup_id" ]] || backup_id="$(latest_backup_id "$role")" + restore_backup "$role" "$backup_id" +} + +show_status() { + local unit + for unit in "$CONTROL_UNIT" "$AGENT_UNIT"; do + if systemctl list-unit-files "$unit" --no-legend 2>/dev/null | grep -q "^$unit"; then + printf '%s: %s\n' "$unit" "$(systemctl is-active "$unit" 2>/dev/null || true)" + else + printf '%s: not-installed\n' "$unit" + fi + done + if [[ -f "$ETC_DIR/control-ca.crt" ]] && command -v openssl >/dev/null; then + printf 'control-ca: %s\n' "$(openssl x509 -in "$ETC_DIR/control-ca.crt" -noout -fingerprint -sha256 | cut -d= -f2)" + fi +} + +run_control_cli() { + local command_name="$1" identifier="$2" + require_root + validate_node_id "$identifier" + [[ -x "$LIB_DIR/control/ochenstarik-smm-control" ]] || fail "Control is not installed." + [[ -f "$ETC_DIR/control.env" ]] || fail "Control environment is missing." + require_command systemd-run + systemd-run --wait --pipe --quiet --collect \ + --uid="$CONTROL_USER" \ + --gid="$CONTROL_USER" \ + -p "EnvironmentFile=$ETC_DIR/control.env" \ + "$LIB_DIR/control/ochenstarik-smm-control" "$command_name" "$identifier" +} + +create_node_code() { + local node_id="$1" token control_url ca_pem node_address hub_endpoint hub_public_key mesh_network + require_root + validate_node_id "$node_id" + [[ -r "$ETC_DIR/control-public-url" ]] || fail "Control public URL is missing; reinstall Control with PUBLIC_HOST." + [[ -r "$ETC_DIR/control-ca.crt" ]] || fail "Control CA certificate is missing." + require_command base64 + control_url="$(tr -d '\r\n' <"$ETC_DIR/control-public-url")" + validate_control_url "$control_url" + token="$(run_control_cli token-create "$node_id")" + [[ -n "$token" && "$token" != *$'\n'* ]] || fail "Control returned an invalid enrollment token." + ca_pem="$(cat "$ETC_DIR/control-ca.crt")" + if [[ -r "$ETC_DIR/mesh.env" && -r "$WG_DIR/hub.pub" ]]; then + node_address="$(reserve_node_address "$node_id")" + hub_endpoint="$(read_mesh_value HUB_ENDPOINT)" + hub_public_key="$(read_mesh_value HUB_PUBLIC_KEY)" + mesh_network="$(read_mesh_value MESH_NETWORK)" + printf 'SMMNODE2.%s.%s.%s.%s.%s.%s.%s.%s\n' \ + "$(printf '%s' "$control_url" | base64url_encode)" \ + "$(printf '%s' "$ca_pem" | base64url_encode)" \ + "$(printf '%s' "$node_id" | base64url_encode)" \ + "$(printf '%s' "$token" | base64url_encode)" \ + "$(printf '%s' "$hub_endpoint" | base64url_encode)" \ + "$(printf '%s' "$hub_public_key" | base64url_encode)" \ + "$(printf '%s' "$node_address" | base64url_encode)" \ + "$(printf '%s' "$mesh_network" | base64url_encode)" + else + printf 'SMMNODE1.%s.%s.%s.%s\n' \ + "$(printf '%s' "$control_url" | base64url_encode)" \ + "$(printf '%s' "$ca_pem" | base64url_encode)" \ + "$(printf '%s' "$node_id" | base64url_encode)" \ + "$(printf '%s' "$token" | base64url_encode)" + fi + token="" +} + +create_device_code() { + local device_id="$1" token control_url ca_der + require_root + validate_node_id "$device_id" + [[ -r "$ETC_DIR/control-public-url" ]] || fail "Control public URL is missing; reinstall Control with PUBLIC_HOST." + [[ -r "$ETC_DIR/control-ca.crt" ]] || fail "Control CA certificate is missing." + require_command base64 + require_command openssl + control_url="$(tr -d '\r\n' <"$ETC_DIR/control-public-url")" + validate_control_url "$control_url" + token="$(run_control_cli device-token-create "$device_id")" + [[ "$token" =~ ^[A-Za-z0-9_-]{43}$ ]] \ + || fail "Control returned an invalid device enrollment token." + ca_der="$(openssl x509 -in "$ETC_DIR/control-ca.crt" -outform DER | base64 -w 0)" + printf 'SMMDEV1-' + printf 'VERSION=1\nDEVICE=%s\nTOKEN=%s\nURL=%s\nCA=%s\n' \ + "$device_id" "$token" "$control_url" "$ca_der" | base64url_encode + printf '\n' + token="" +} + +add_mesh_peer() { + local code="$1" prefix node_part address_part key_part extra + local node_id address public_key current tmp + require_root + require_command base64 + require_command wg + [[ -r "$ETC_DIR/mesh.env" && -r "$MESH_DIR/nodes.tsv" ]] || fail "Mesh Hub is not initialized." + IFS='.' read -r prefix node_part address_part key_part extra <<<"$code" + [[ "$prefix" == "SMMPEER1" && -n "$node_part" && -n "$address_part" \ + && -n "$key_part" && -z "${extra:-}" ]] || fail "Invalid SMMPEER1 code." + node_id="$(base64url_decode "$node_part")" + address="$(base64url_decode "$address_part")" + public_key="$(base64url_decode "$key_part")" + validate_node_id "$node_id" + [[ "$address" =~ ^10\.77\.0\.([2-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-4])$ ]] \ + || fail "Invalid peer mesh address." + [[ "$public_key" =~ ^[A-Za-z0-9+/]{43}=$ ]] || fail "Invalid peer WireGuard public key." + current="$(awk -F '\t' -v node="$node_id" '$1 == node { print $2; exit }' "$MESH_DIR/nodes.tsv")" + [[ "$current" == "$address" ]] || fail "Peer address does not match the Hub reservation." + if awk -F '\t' -v address="$address" -v node="$node_id" '$2 == address && $1 != node { found=1 } END { exit found ? 0 : 1 }' "$MESH_DIR/nodes.tsv"; then + fail "Peer mesh address is already assigned." + fi + tmp="$(mktemp -p "$MESH_DIR" nodes.tsv.XXXXXXXX)" + awk -F '\t' -v OFS='\t' -v node="$node_id" -v address="$address" -v key="$public_key" \ + '$1 == node { print node, address, key, "active"; found=1; next } { print } END { if (!found) exit 1 }' \ + "$MESH_DIR/nodes.tsv" >"$tmp" || { rm -f -- "$tmp"; fail "Peer reservation is missing."; } + chmod 0600 "$tmp" + mv -- "$tmp" "$MESH_DIR/nodes.tsv" + render_hub_wireguard_config + systemctl restart wg-quick@smm0.service + systemctl is-active --quiet wg-quick@smm0.service || fail "WireGuard failed after peer registration." + log "Mesh peer $node_id activated at $address." +} + +show_mesh_status() { + require_root + [[ -r "$ETC_DIR/mesh.env" ]] || fail "Mesh Hub is not initialized." + printf 'endpoint: %s\n' "$(read_mesh_value HUB_ENDPOINT)" + printf 'network: %s\n' "$(read_mesh_value MESH_NETWORK)" + if [[ -r "$MESH_DIR/nodes.tsv" ]]; then + printf '%-24s %-15s %-10s %s\n' NODE ADDRESS STATUS HANDSHAKE + while IFS=$'\t' read -r node_id address public_key status; do + [[ -n "$node_id" ]] || continue + local handshake="-" + if [[ "$status" == "active" ]]; then + handshake="$(wg show smm0 latest-handshakes 2>/dev/null | awk -v key="$public_key" '$1 == key { print $2; exit }')" + [[ -n "$handshake" && "$handshake" != "0" ]] || handshake="never" + fi + printf '%-24s %-15s %-10s %s\n' "$node_id" "$address" "$status" "$handshake" + done <"$MESH_DIR/nodes.tsv" + fi +} + +show_ca_fingerprint() { + [[ -f "$ETC_DIR/control-ca.crt" ]] || fail "Control CA certificate is not installed." + require_command openssl + openssl x509 -in "$ETC_DIR/control-ca.crt" -noout -fingerprint -sha256 +} + +role_is_installed() { + case "$1" in + control) [[ -d "$LIB_DIR/control" || -f "$ETC_DIR/control.env" \ + || -f "/etc/systemd/system/${CONTROL_UNIT:-ochenstarik-smm-control.service}" ]] ;; + agent) [[ -d "$LIB_DIR/agent" || -f "$ETC_DIR/agent.env" \ + || -f "/etc/systemd/system/${AGENT_UNIT:-ochenstarik-smm-agent.service}" ]] ;; + *) return 1 ;; + esac +} + +remove_shared_ca_if_unused() { + if ! role_is_installed control && ! role_is_installed agent; then + rm -f -- "$ETC_DIR/control-ca.crt" + fi +} + +uninstall_agent() { + local purge="${1:-}" + require_root + systemctl disable --now "$AGENT_UNIT" 2>/dev/null || true + systemctl disable --now "$PROVISIONING_HELPER_UNIT" 2>/dev/null || true + rm -f -- "/etc/systemd/system/$AGENT_UNIT" "/etc/systemd/system/$PROVISIONING_HELPER_UNIT" "$ETC_DIR/agent.env" + rm -rf -- "$LIB_DIR/agent" "$LIB_DIR/provisioning-helper" + if [[ "$purge" == "--purge" ]]; then + rm -rf -- "$STATE_DIR/agent" "$ENROLLMENT_DIR" + remove_shared_ca_if_unused + fi + systemctl daemon-reload + log "Agent removed${purge:+ ($purge)}." +} + +install_monitor() { + local public_key="$1" + require_root + validate_platform + + local metrics_script="/usr/local/libexec/ochenstarik-smm-metrics" + local monitor_user="ochenstarik-monitor" + local monitor_home="/var/lib/ochenstarik-monitor" + + if ! id -u "$monitor_user" >/dev/null 2>&1; then + useradd -r -s /usr/sbin/nologin -d "$monitor_home" -M "$monitor_user" + fi + install -d -m 0755 -o "$monitor_user" -g "$monitor_user" "$monitor_home" + + install -d -m 0755 "/usr/local/libexec" + cat >"$metrics_script" <<'EOF' +#!/usr/bin/env bash +set -euo pipefail +# ochenstarik-smm-metrics + +echo "PROTOCOL=1" +echo "HOSTNAME=$(hostname)" +UPTIME=$(awk '{print int($1)}' /proc/uptime 2>/dev/null || echo "0") +echo "UPTIME_SECONDS=${UPTIME}" +LOAD1=$(awk '{print $1}' /proc/loadavg 2>/dev/null || echo "0.00") +echo "LOAD1=${LOAD1}" +CPU_COUNT=$(nproc 2>/dev/null || echo "1") +echo "CPU_COUNT=${CPU_COUNT}" +MEM_TOTAL=$(awk '/^MemTotal:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +echo "MEM_TOTAL_KB=${MEM_TOTAL}" +MEM_AVAIL=$(awk '/^MemAvailable:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +if [ "$MEM_AVAIL" = "0" ] || [ -z "$MEM_AVAIL" ]; then + MEM_FREE=$(awk '/^MemFree:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") + MEM_CACHED=$(awk '/^Cached:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") + MEM_AVAIL=$((MEM_FREE + MEM_CACHED)) +fi +echo "MEM_AVAILABLE_KB=${MEM_AVAIL}" +SWAP_TOTAL=$(awk '/^SwapTotal:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +echo "SWAP_TOTAL_KB=${SWAP_TOTAL}" +SWAP_FREE=$(awk '/^SwapFree:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +echo "SWAP_FREE_KB=${SWAP_FREE}" +DF_OUT=$(df -k / 2>/dev/null | awk 'NR==2 {print $2, $4}' || echo "0 0") +DISK_TOTAL=$(echo "$DF_OUT" | awk '{print $1}') +DISK_AVAIL=$(echo "$DF_OUT" | awk '{print $2}') +echo "DISK_TOTAL_KB=${DISK_TOTAL}" +echo "DISK_AVAILABLE_KB=${DISK_AVAIL}" +DF_INODES=$(df -i / 2>/dev/null | awk 'NR==2 {print $2, $4}' || echo "0 0") +INODES_TOTAL=$(echo "$DF_INODES" | awk '{print $1}') +INODES_FREE=$(echo "$DF_INODES" | awk '{print $2}') +echo "DISK_INODES_TOTAL=${INODES_TOTAL}" +echo "DISK_INODES_FREE=${INODES_FREE}" +NET_RX=$(awk 'NR>2 {rx+=$1} END {print rx}' /proc/net/dev 2>/dev/null || echo "0") +NET_TX=$(awk 'NR>2 {tx+=$9} END {print tx}' /proc/net/dev 2>/dev/null || echo "0") +echo "NETWORK_RX_BYTES=${NET_RX}" +echo "NETWORK_TX_BYTES=${NET_TX}" +KERNEL=$(uname -r 2>/dev/null || echo "unknown") +echo "KERNEL=${KERNEL}" +SYSTEMD_SSH=$(systemctl is-active ssh.service 2>/dev/null || true) +echo "SYSTEMD_SSH=${SYSTEMD_SSH:-unknown}" +SYSTEMD_WIREGUARD=$(systemctl is-active wg-quick@smm0.service 2>/dev/null || true) +echo "SYSTEMD_WIREGUARD=${SYSTEMD_WIREGUARD:-unknown}" +EOF + chown root:root "$metrics_script" + chmod 0755 "$metrics_script" + + install -d -m 0700 -o "$monitor_user" -g "$monitor_user" "$monitor_home/.ssh" + local auth_keys="$monitor_home/.ssh/authorized_keys" + + # We idempotently add the key + local key_entry="command=\"$metrics_script\",restrict,no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding $public_key" + if [[ -f "$auth_keys" ]] && grep -qF "$public_key" "$auth_keys"; then + log "Monitor key already installed." + else + echo "$key_entry" >> "$auth_keys" + chown "$monitor_user:$monitor_user" "$auth_keys" + chmod 0600 "$auth_keys" + log "Monitor key installed." + fi +} + +uninstall_monitor() { + require_root + local monitor_user="ochenstarik-monitor" + local monitor_home="/var/lib/ochenstarik-monitor" + local metrics_script="/usr/local/libexec/ochenstarik-smm-metrics" + + if id -u "$monitor_user" >/dev/null 2>&1; then + userdel -f "$monitor_user" || true + fi + rm -rf -- "$monitor_home" + rm -f -- "$metrics_script" + log "Monitor removed." +} + +uninstall_control() { + [[ "${1:-}" == "--confirm-destroy-control" ]] || fail "Control removal requires --confirm-destroy-control" + require_root + systemctl disable --now "$CONTROL_UNIT" 2>/dev/null || true + rm -f -- "/etc/systemd/system/$CONTROL_UNIT" "$ETC_DIR/control.env" \ + "$ETC_DIR/control-ca.pfx" "$ETC_DIR/control-server.pfx" \ + "$POLICY_HELPER" "$SUDOERS_FILE" + rm -rf -- "$LIB_DIR/control" "$STATE_DIR/control" \ + "$STATE_DIR/control.db" "$STATE_DIR/control.db-wal" \ + "$STATE_DIR/control.db-shm" "$STATE_DIR/backups" + remove_shared_ca_if_unused + systemctl daemon-reload + log "Control role and its state were removed." +} + +preflight() { + validate_platform + local command_name + for command_name in openssl sha256sum tar systemctl getent useradd groupadd; do + require_command "$command_name" + done + log "Supported platform: $(. /etc/os-release; printf '%s %s' "$ID" "$VERSION_ID"), $(uname -m)" +} + +main() { + local action="${1:-help}" + shift || true + case "$action" in + help|-h|--help) [[ $# -eq 0 ]] || fail "$action takes no arguments"; usage ;; + version|--version) [[ $# -eq 0 ]] || fail "$action takes no arguments"; printf '%s %s\n' "$PROGRAM" "$PROGRAM_VERSION" ;; + preflight) [[ $# -eq 0 ]] || fail "preflight takes no arguments"; preflight ;; + verify-release) [[ $# -eq 1 ]] || fail "verify-release requires ARCHIVE"; verify_release_payload "$1" ;; + install-control) [[ $# -ge 2 && $# -le 3 ]] || fail "install-control requires ARCHIVE PUBLIC_HOST [HTTPS_PORT]"; install_control "$@" ;; + install-agent) [[ $# -eq 4 ]] || fail "install-agent requires ARCHIVE NODE_ID CONTROL_URL CA_CERT"; install_agent "$@" ;; + install-node) [[ $# -eq 1 ]] || fail "install-node requires ARCHIVE"; install_node_from_code "$1" ;; + verify-manifest) [[ $# -eq 2 ]] || fail "verify-manifest requires MANIFEST SIGNATURE"; verify_manifest "$1" "$2" ;; + install-monitor) [[ $# -eq 1 ]] || fail "install-monitor requires PUBLIC_KEY"; install_monitor "$1" ;; + uninstall-monitor) [[ $# -eq 0 ]] || fail "uninstall-monitor takes no arguments"; uninstall_monitor ;; + mesh-init) [[ $# -ge 1 && $# -le 2 ]] || fail "mesh-init requires PUBLIC_ENDPOINT [WG_PORT]"; mesh_init "$@" ;; + peer-add) [[ $# -eq 1 ]] || fail "peer-add requires SMMPEER1_CODE"; add_mesh_peer "$1" ;; + mesh-status) [[ $# -eq 0 ]] || fail "mesh-status takes no arguments"; show_mesh_status ;; + update-control) [[ $# -eq 1 ]] || fail "update-control requires ARCHIVE"; update_role control "$1" ;; + update-agent) [[ $# -eq 1 ]] || fail "update-agent requires ARCHIVE"; update_role agent "$1" ;; + rollback) [[ $# -ge 1 && $# -le 2 ]] || fail "rollback requires control|agent [BACKUP_ID]"; rollback_role "$@" ;; + node-code) [[ $# -eq 1 ]] || fail "node-code requires NODE_ID"; create_node_code "$1" ;; + control-device-code) [[ $# -eq 1 ]] || fail "control-device-code requires DEVICE_ID"; create_device_code "$1" ;; + node-token) [[ $# -eq 1 ]] || fail "node-token requires NODE_ID"; run_control_cli token-create "$1" ;; + control-ca-fingerprint) [[ $# -eq 0 ]] || fail "control-ca-fingerprint takes no arguments"; show_ca_fingerprint ;; + status) [[ $# -eq 0 ]] || fail "status takes no arguments"; show_status ;; + uninstall-agent) [[ $# -eq 0 || ( $# -eq 1 && "$1" == "--purge" ) ]] || fail "uninstall-agent accepts only [--purge]"; uninstall_agent "${1:-}" ;; + uninstall-control) [[ $# -eq 1 ]] || fail "uninstall-control requires confirmation"; uninstall_control "$1" ;; + *) fail "Unknown action: $action (run with --help)" ;; + esac +} + +main "$@" diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/ochenstarik-server-monitor-manager.sh.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/ochenstarik-server-monitor-manager.sh.sha256 new file mode 100644 index 0000000..40006c7 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/ochenstarik-server-monitor-manager.sh.sha256 @@ -0,0 +1 @@ +77899bc545eadb591f0e311b4998b09cbf279eb17aa6d6073009ca4f3617f3a4 ochenstarik-server-monitor-manager.sh diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-arm64-sbom.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-arm64-sbom.json new file mode 100644 index 0000000..4d30c22 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-arm64-sbom.json @@ -0,0 +1,2815 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:7987f391-e546-4ae5-98d3-100481f2f556", + "version": 1, + "metadata": { + "timestamp": "2026-08-13T06:30:57Z", + "tools": { + "components": [ + { + "type": "application", + "authors": [ + { + "name": "CycloneDX" + } + ], + "name": "CycloneDX module for .NET", + "version": "6.2.0.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-dotnet", + "type": "website" + } + ] + } + ] + }, + "component": { + "type": "application", + "bom-ref": "ServerMonitorManager@0.0.0", + "name": "ServerMonitorManager", + "version": "0.0.0" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.ApplicationInsights", + "version": "2.23.0", + "description": "Application Insights Base API. This package provides core functionality for transmission of all Application Insights Telemetry Types and is a dependent package for all other Application Insights packages. Please install the platform specific package for the best experience. Privacy statement: https://go.microsoft.com/fwlink/?LinkId=512156", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DD497BFAD0C65E54A4F78D2A1644F3D0854D4CD01DD83BA506F8D5D53635E28152C7C13210DD5DD3985780AAB146A7620DE3EBAEAD8EF12C6F87088676C2157F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "externalReferences": [ + { + "url": "https://go.microsoft.com/fwlink/?LinkId=392727", + "type": "website" + }, + { + "url": "https://github.com/Microsoft/ApplicationInsights-dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Authentication.Certificate", + "version": "10.0.10", + "description": "ASP.NET Core middleware that enables an application to support certificate authentication.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "FD902F01F05EFDEF7EB362EF0187438EBA3512D40722A547BB3DE8B1A823DF68FB660DBD097764E848EAA5CDAFC20D1F121EF45667B06A4C0756ADE371B25455" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Mvc.Testing", + "version": "10.0.10", + "description": "Support for writing functional tests for MVC applications.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0604BE8DA0AEE0F088C0513EF58E1927C9097E376A7517887F85F4BD9C4469E4D0034C4B855D10DA30EE62966383578FDE509157CB5C56EAA892E2053C64DF74" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.TestHost", + "version": "10.0.10", + "description": "ASP.NET Core web server for writing and running tests.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "4D8702FC6CA49443CFAF7F565A1D6FFA2E6B8DC7A52BFBD505B65FA20ACDC8D5D69D760E7380C32C82B2C76062E83B817AA9DE3FE822E423F6D4D1628F9A3540" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Bcl.AsyncInterfaces", + "version": "6.0.0", + "description": "Provides the IAsyncEnumerable\u003CT\u003E and IAsyncDisposable interfaces and helper types for .NET Standard 2.0. This package is not required starting with .NET Standard 2.1 and .NET Core 3.0.\n\nCommonly Used Types:\nSystem.IAsyncDisposable\nSystem.Collections.Generic.IAsyncEnumerable\nSystem.Collections.Generic.IAsyncEnumerator", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "221A05A0C910F7A87B620D8F3831ED392B4EB95D112BEE274D35F27009AD2A26445DE9D7CD235FE6FB4A03F2550874BDA3BE3DDDD96EDAF9C0852A9C23D7B099" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.CodeCoverage", + "version": "18.8.1", + "description": "Microsoft.CodeCoverage package brings infra for collecting code coverage from vstest.console.exe and \u0022dotnet test\u0022.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F21F6B39BBBCE89302D28B8E77B99E3633E18EB4D840F132393E3686C841C5DC649EFA5F60B4734D8D7764185101FEEDA2197BC00A6AABF69A37A591C617708F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "9FD331CF8F4C4026F1B7B9C651FB33E80CE1D0E0D6F46DD00E41E71E598CFEFB8E318CCB8519064CA4FB9F82D4126D08F42041E5987E186676ADAA2595E229D4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite.Core", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite. This package does not include a copy of the native SQLite library.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "723A1B77BFE3966982CA0242256B2DC320ED878C4ED9480680D75D91B716AC27013FA5FE533800C50C7C6000E50046AC10AF5DBC48E3CA4EB885C6ED65BC2CB1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Abstractions", + "version": "10.0.10", + "description": "Caching abstractions for in-memory cache and distributed cache.\n\nCommonly Used Types:\nMicrosoft.Extensions.Caching.Distributed.IDistributedCache\nMicrosoft.Extensions.Caching.Memory.IMemoryCache", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "02858A6F1E814D2FCBA5506A1E5E1BC125186FE76E89235D073B0DCA84C62802E6680E6C13AD8AC07AC5B6358A0691CF473C80122C062A7AC8AE557D7A5A7A5B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Memory", + "version": "10.0.10", + "description": "In-memory cache implementation of Microsoft.Extensions.Caching.Memory.IMemoryCache.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DDBBEC0D9A6C493F5BEAE10A1446E24664A17F9A8E5B694C6CFD315EE8C3F19490AC51F5ABBB624BD51FD14CDA381D515BCFF7F1A4D3AAEF06F589EA8FA7EDF4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration", + "version": "10.0.10", + "description": "Implementation of key-value pair based configuration for Microsoft.Extensions.Configuration. Includes the memory configuration provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "943C09D6B759963DD401BD8F3C3D7F9744436AE1157EF93810A8CAC823E3ED096A51817327AFADDC5741E541912D493D053D566CD898E6F8628398C7264981B3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Abstractions", + "version": "10.0.10", + "description": "Provides abstractions of key-value pair based configuration. Interfaces defined in this package are implemented by classes in Microsoft.Extensions.Configuration and other configuration packages.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "7BF4CD6F25D7E030E366CC9CB593B79A890F347DF598062C0D2030CDB62D23F465F69CCDFC7E83D3E709FCBE12EDC4BD4AF68229C2D889216AA84EBD43A6B162" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Binder", + "version": "10.0.10", + "description": "Provides the functionality to bind an object to data in configuration providers for Microsoft.Extensions.Configuration. This package enables you to represent the configuration data as strongly-typed classes defined in the application code. To bind a configuration, use the Microsoft.Extensions.Configuration.ConfigurationBinder.Get extension method on the IConfiguration object. To use this package, you also need to install a package for the configuration provider, for example, Microsoft.Extensions.Configuration.Json for the JSON provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "23414BBDE074A3E494848748823D8CA24B242A3915BAA77D96C8F8251B73CE73C32981326E66738291EF303C0C2B5F4B2933C13741BF5CE5AE106EEBACAF06C0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.CommandLine", + "version": "10.0.10", + "description": "Command line configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from the command line arguments of your application. You can use CommandLineConfigurationExtensions.AddCommandLine extension method on IConfigurationBuilder to add the command line configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "4F3012F2AAE997570A379C5C352BD1548B24F61901CBF9FF5C05444E6FC8ECA998B8F6C58DC1251EBC0DA7F282D26BA9BD82167D5628C1E4DAE0FC3DB335036D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.EnvironmentVariables", + "version": "10.0.10", + "description": "Environment variables configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from environment variables. You can use EnvironmentVariablesExtensions.AddEnvironmentVariables extension method on IConfigurationBuilder to add the environment variables configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "A5A066D0AFEE703C7E69742C494AD82E75BF0B7A4B0BCCA9B07B8EA9D208BA7B6B1FE8A9937E58A729711FAF871AA12405CB04B7C940D0BFE26E40880EF73AC1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.FileExtensions", + "version": "10.0.10", + "description": "Provides a base class for file-based configuration providers used with Microsoft.Extensions.Configuration and extension methods for configuring them.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0EA7FB571C819E1CD371FD21F05323330C8350050A78B3905034FD7C53504EE8C437D02E109B64490E58CA406727A5DA8749898E969460755558CC0A4E04F3F4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Json", + "version": "10.0.10", + "description": "JSON configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read your application\u0027s settings from a JSON file. You can use JsonConfigurationExtensions.AddJsonFile extension method on IConfigurationBuilder to add the JSON configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1522329F5E7ACE8270D3B69D1973C5D9A32FDFEDE6F8050B304E349A16DFD8F0B08DFC1E6143139FC59A3CE4E0B72B2F454CC3D61C02C93E53B4012C9DA67879" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.UserSecrets", + "version": "10.0.10", + "description": "User secrets configuration provider implementation for Microsoft.Extensions.Configuration. User secrets mechanism enables you to override application configuration settings with values stored in the local secrets file. You can use UserSecretsConfigurationExtensions.AddUserSecrets extension method on IConfigurationBuilder to add user secrets provider to the configuration builder.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "044707479CFBA9BADC7958E44B5A3C139E11CCEA75FAE8D2A14BD59296B415C35A1F6FBDF372FF2D1A641A0E1FE99E815C4193103826DFA2167A947B0AC09BC7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection", + "version": "10.0.10", + "description": "Default implementation of dependency injection for Microsoft.Extensions.DependencyInjection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "8628EEC1C26F27A7956EECF3D0468FDD865039826770F267F9A4EEBE8D7949E37D1C298B85B8A73A873D9A04FDF5E50E5930E0289F3C4824137B0543FE0E7B0D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection.Abstractions", + "version": "10.0.10", + "description": "Abstractions for dependency injection.\n\nCommonly Used Types:\nMicrosoft.Extensions.DependencyInjection.IServiceCollection", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C40AF270352D0049FBDDB6403EB0B5206F0B6318760146E8093A9972B2AB965D7A5213A28E473742712E54F7ABB288EAB7A46659B41C7426D454ECEE4A931EAC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyModel", + "version": "10.0.10", + "description": "Provides abstractions for reading \u0060.deps\u0060 files. When a .NET application is compiled, the SDK generates a JSON manifest file (\u0060\u003CApplicationName\u003E.deps.json\u0060) that contains information about application dependencies. You can use \u0060Microsoft.Extensions.DependencyModel\u0060 to read information from this manifest at run time. This is useful when you want to dynamically compile code (for example, using Roslyn Emit API) referencing the same dependencies as your main application.\n\nBy default, the dependency manifest contains information about the application\u0027s target framework and runtime dependencies. Set the PreserveCompilationContext project property to \u0060true\u0060 to additionally include information about reference assemblies used during compilation.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "3887E253D85866E50B994DED19AF4988FC51E7551E86463CB96CC8B43E477D9CCCE9CD2AF9F5584B6905E21F247F32679A83FFFBFDC325D0DF40CEBD557D4EBB" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics", + "version": "10.0.10", + "description": "This package includes the default implementation of IMeterFactory and additional extension methods to easily register it with the Dependency Injection framework.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "EFA65F0DFC19BA6608050F87D9C9CC33A06B5C105B207D7C4259D280F3A36253F7A380FEFC6C9641AD9929FDCBFF5E00B4886F12399698CC716D65CE8131BE62" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics.Abstractions", + "version": "10.0.10", + "description": "Diagnostic abstractions for Microsoft.Extensions.Diagnostics.\n\nCommonly Used Types:\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsBuilder\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsListener\nMicrosoft.Extensions.Diagnostics.Metrics.InstrumentRule\nMicrosoft.Extensions.Diagnostics.Metrics.MeterScope\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsBuilderExtensions\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsOptions", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "B163E11DDD5E10CEB4D4091CFBE35A24A61CA70A29D48D988E9CA48F5E9A799B40E1C7752701F7F78D3A586B1787507581357E4A2813A8F561BE9CB80A3BB4AF" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Abstractions", + "version": "10.0.10", + "description": "Abstractions of files and directories.\n\nCommonly Used Types:\nMicrosoft.Extensions.FileProviders.IDirectoryContents\nMicrosoft.Extensions.FileProviders.IFileInfo\nMicrosoft.Extensions.FileProviders.IFileProvider", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "6F38363D1EEEC3034C1BCFF9058B295F19C4F26E9CEDAAEC671AF3FA22D212E671DB8CAB0688DDB01609C850A06D0C2C5B103176F862F7F7DCABA16481D51C51" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Physical", + "version": "10.0.10", + "description": "File provider for physical files for Microsoft.Extensions.FileProviders.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "F62D2D671CA52BEE6BF8E252853D84A9D575FB87D8A04E9DD98EA5BB25E86BA1C6F912D1042CA7A044AB64B879705D458A62F176DB1CA4224FAC06CD52102ABD" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileSystemGlobbing", + "version": "10.0.10", + "description": "File system globbing to find files matching a specified pattern.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1949E7C288D884B5FF6D2B4A54D468FFA42F0285FAB0786A5D58FA47A7F0F5DAAA3A491AAD092F31D07D190CA27CC25F632DBA0C8D25D2D44BDF32058EDD04D5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting", + "version": "10.0.10", + "description": "Hosting and startup infrastructures for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DEF44959988A0DFBC945DC865F25BB0AD3B3872A3E48AC96A71D642EB04A9F3C6CA8B3FD9B2129E2063FE67F5C98AA7FC3D2D049AFE1076F546E82578DF8A822" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting.Abstractions", + "version": "10.0.10", + "description": "Hosting and startup abstractions for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "029B3B822BE940A6994B3A7333046E64C75E471C7F3225C690C0CB3CEC6C19D20594AADAB5EFC28602C2FA37EE3BCD745ED26632B7F7A4580CD0294D3B966DC9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging", + "version": "10.0.10", + "description": "Logging infrastructure default implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "5261C9AAFF6B83BB3A806EFD91CFB37BED7FE8FB5FD990FE41F0BB6B772BF29AC8320C68371B50FB8AE7D8EC3394428EAB4722DC1EC6D72015BA166351956710" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Abstractions", + "version": "10.0.10", + "description": "Logging abstractions for Microsoft.Extensions.Logging.\n\nCommonly Used Types:\nMicrosoft.Extensions.Logging.ILogger\nMicrosoft.Extensions.Logging.ILoggerFactory\nMicrosoft.Extensions.Logging.ILogger\u003CTCategoryName\u003E\nMicrosoft.Extensions.Logging.LogLevel\nMicrosoft.Extensions.Logging.Logger\u003CT\u003E\nMicrosoft.Extensions.Logging.LoggerMessage\nMicrosoft.Extensions.Logging.Abstractions.NullLogger", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FCC5A6CD33BCCA73B47C0771BD1AD9CC044EAC53D3AF43C017CC684932F1F107981C7A0312922C14E6E2AA9B8DF1D3A70655DD0ACDCF9B97D3CE975FC21D588" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Configuration", + "version": "10.0.10", + "description": "Configuration support for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2F34EA98C7F9E1D4B61F3690F5C05A2D88552D672DB4BCE1B8A9EC50DB766530D61CA15FBD9D90B24C46E63B386F771DF8361ACBECF4ABFC7C0C942309AB2B3E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Console", + "version": "10.0.10", + "description": "Console logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6E3AFE1DB83957364483B116F176B0048D0AA0B277B7134F4F0FEAEB159DBBA7175A79916A46183D376346BA13D91F5D22D97E6CC6AAC65946FA562F821E974E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Debug", + "version": "10.0.10", + "description": "Debug output logger provider implementation for Microsoft.Extensions.Logging. This logger logs messages to a debugger monitor by writing messages with System.Diagnostics.Debug.WriteLine().", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB85BB3E6F032241404637C4642C14702C7337BB8AB3EB2BDE33AFF5000A055D60B6171AA86C7F6D42C55ECB8168D826C2A77A11423BEF2031781900E78E1925" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventLog", + "version": "10.0.10", + "description": "Windows Event Log logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "859BAF5F7B66880559D2B0F56881F61C4980C727BB927DE2BAF868829EC2779F809F7B5263E353E9F1868F676AD19816B824B42955E5792D3216B4E53DA05A4D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventSource", + "version": "10.0.10", + "description": "EventSource/EventListener logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "251D1821F49878B2F829F7A625A26B6F94CD9E2AD218B830859FB1137448EDFAE5CAEA267C459B02E23F09AD9E72A9A5EF491E5B25390FECFB958EB363534211" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options", + "version": "10.0.10", + "description": "Provides a strongly typed way of specifying and accessing settings using dependency injection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "538322A27FD9BB004C4C3FC21FC584EC08EDE88740B54DC95CBC241B553339633594D167A0EF0D02E42D6482CDA642B218414FF6DEC5BD06A48079CC0948D929" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options.ConfigurationExtensions", + "version": "10.0.10", + "description": "Provides additional configuration specific functionality related to Options.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "07F056E666E542729A25A06C672DF351373F9D5029BCA0D14AD3AD08DAE2CCA903E776B23E6DE3BBE5051DA68876CBC003F7AFD2EF4C08E7B32E60033465A45A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Primitives", + "version": "10.0.10", + "description": "Primitives shared by framework extensions. Commonly used types include:\n\nCommonly Used Types:\nMicrosoft.Extensions.Primitives.IChangeToken\nMicrosoft.Extensions.Primitives.StringValues\nMicrosoft.Extensions.Primitives.StringSegment", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "B3F778D24AFDF4711BEBA10DE673F9EB3ABAEC108B86862FDF1DE64F554B543A503FB3BBB0ABC38E0AF8B800EF39D3660FC660943235C734786FAEB11D4FAD64" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.ILLink.Tasks", + "version": "10.0.10", + "description": "MSBuild tasks for running the IL Linker", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "804F0EEC3AD1008DD08ABDF24B3BDD465EC3CD57FC5EB15F234BDB5179761878A6DDD30F755A25F43C70361FD3CEAF729A8935294FB6C2EDAAAC5E6358DBF5A5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.Test.Sdk", + "version": "18.8.1", + "description": "The MSbuild targets and properties for building .NET test projects.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "ED924163245F79A57884396548B55BEDDB4B5D06F84A96C0872FACF5273E754576CF00D44D326D3CB6138DA9D2E64AAA9BEDBCDCD371218E36EF5B946343EF8F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.Telemetry", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides telemetry for the platform.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C5E54A968FD412E4CE2DCC98EBC3C9154FE2D49E2E5C539CE1460CF01A9D8FD4197D90EA5ACE8A9574368DB629FFBD224B273BE242083050087A2BD60FB7D917" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.TrxReport.Abstractions", + "version": "1.9.1", + "description": "Package Description", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "665DC7C980F6089E8AD472201353A0BAC308BC55976603332BF8E568247FBD3C1FC644C9A904AE9F800E50968D2EF02D735ADA4616E8FC9C75CB18290A7540EC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides the core platform and the .NET implementation of the protocol.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "10C89A7E4A01422839D3EE8DDE9FD6B1E8C8504A082573A1209398434AD1436FB2774BB96C969CC1E6079B123483303224DE3273F8346F00ED151F2F4F361A4B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform.MSBuild", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides MSBuild integration of the platform, its extensions and configuration files.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "568901EC1C20B98D48692E6F182260177105A4C0BE28903805AC3F052D340D6D4B6C6A11F5931B23D10078FF0A70BB654FF606E8BB8C743DEEC1C1CDB8F36A1D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.ObjectModel", + "version": "18.8.1", + "description": "The Microsoft Test Platform Object Model.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "FA783FB4A40D48E96B1901D473BD83DDC83AD873D58B05D7042D05A1E10EEA6D6EE07E130A3213272E989B56C2F05A258F43004F4637DB7EA132D63AEF31A985" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.TestHost", + "version": "18.8.1", + "description": "Testplatform host executes the test using specified adapter.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "46D7AB005785910C271F30A658151CB71107FD87A78F7F7DE78811E49EC8657424E68901BFA943DD73AFD2E18645ED361294638436B01DA1945C7A4504A7C8DE" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Win32.Registry", + "version": "5.0.0", + "description": "Provides support for accessing and modifying the Windows Registry.\n\nCommonly Used Types:\nMicrosoft.Win32.RegistryKey\nMicrosoft.Win32.Registry\nMicrosoft.Win32.RegistryValueKind\nMicrosoft.Win32.RegistryHive\nMicrosoft.Win32.RegistryView\n \nWhen using NuGet 3.x this package requires at least version 3.4.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "471E66567CE59CC86475AECE7815D05261264CE114E0C1688BA2551DD51494901FA72DD7A8F74F8E8F0F3DBA74AF8595F177552F3C06ABB4BFCE76692197076E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/dotnet/runtime", + "type": "website" + }, + { + "url": "git://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLite@3.53.4", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLite", + "version": "3.53.4", + "description": "This package contains builds of the native SQLite code for various platforms. \n These builds have \u0022e_sqlite3\u0022 as the base name. The first three numbers in the version number of this package indicate the version of SQLite that was used to build it. The fourth number, if there is one, is incremented as needed for packaging-specific changes.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "81D145648BACFF3B4C8CD1794DF9956C47B229264467AA7001EA9A306E429CEB2855EC9296509541C82FC3C9BCFF04617AB3E86169932700BDAD5B0C03C482EF" + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLite@3.53.4", + "externalReferences": [ + { + "url": "https://sqlite.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.bundle_e_sqlite3", + "version": "3.0.5", + "description": "This \u0027batteries-included\u0027 bundle brings in SQLitePCLRaw.core and the necessary stuff for certain common use cases. Call SQLitePCL.Batteries.Init().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "12F980014C25F0C3E20C7B331418933FC84C7635B65597CEAB09C20EA00C055043C866BEF8614EA6BC38D7A484D8FF339D4387BBE760BC892F4E2702CD23AB2F" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.config.e_sqlite3", + "version": "3.0.5", + "description": "This package sets the configuration for using e_sqlite3 but does not bring in that native library itself. It\u0027s like bundle_e_sqlite3, except it\u0027s hollow.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A25E95EE323DDFEB8FC920D26551B4AFED854A3D9DDA833C3507331AB2043E0C9F16D62C2100560373AFC20E54D3F69F42ABDD6DA6E75EF7DCC0EA861B5AF12" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.core", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. This package does not provide an API which is friendly to app developers. Rather, it provides an API which handles platform and configuration issues, upon which a friendlier API can be built. In order to use this package, you will need to also add one of the SQLitePCLRaw.provider.* packages and call raw.SetProvider().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "24209D65527E0F82BB4E151B610195D39CB4732891CE1F0E2BA0965371DA381F1E636CD9256AE7DC5B76C604E36D33B7CA63AFDE09E6A8A40A9B2FCB5F01AA03" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.provider.e_sqlite3", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. Packages named \u0027SQLitePCLRaw.provider.*\u0027 (like this one) are \u0027plugins\u0027 that allow SQLitePCLRaw.core to access the native SQLite library. This provider does DllImport of \u0027e_sqlite3\u0027, the SQLite builds provided with SQLitePCLRaw.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "716EE95A124695CE5B2E2C834509E66991585B5AD1843B4CC6D135FE078DFE2D2E867A2E83978DEF09B8691833370803251F792537E59203455054AC24F82CC9" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "System.Diagnostics.EventLog", + "version": "10.0.10", + "description": "Provides the System.Diagnostics.EventLog class, which allows the applications to use the Windows event log service.\n\nCommonly Used Types:\nSystem.Diagnostics.EventLog", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F98A922C208C90F09A247CF2C251048B3EBADD8633787F967E5701427765C77C298F40E54A8D2BF5EBFEF729EFD3E8CFC5C17EFDD5F2CD80184532C24B5A481A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.analyzers@1.27.0", + "authors": [ + { + "name": "jnewkirk,bradwilson,marcind" + } + ], + "name": "xunit.analyzers", + "version": "1.27.0", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features.\n\nInstalling this package provides code analyzers to help developers find and fix frequent issues when writing tests and xUnit.net extensibility code.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2B920EDBD64D376C9D7B3DA38654D1B11DB4CA5A7F79032B320A289DF229BFD73DB1604DE8C5D120F196C6FBA8B688EE493DC7814F5EFD7EE5E3F56238B3C1BF" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.analyzers@1.27.0", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit.analyzers", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.runner.visualstudio", + "version": "3.1.5", + "description": "Visual Studio 2022\u002B Test Explorer runner for the xUnit.net framework. Capable of running xUnit.net v1, v2, and v3 tests. Supports .NET 4.7.2 or later, and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FFB6F37D917B54777C124986C2F3421CEB2FDD62561B352BDAB588AFEF58A8CCF857A8CE0468EB87BA3908261F396FEC18E9D81FDB993D10D4B2F2337A9A5BD" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "externalReferences": [ + { + "url": "https://github.com/xunit/visualstudio.xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.mtp-v1.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "9612F4811FCE910665551AC371386B7460BC118A39D78892C357093F92AAA9EA1A5DC21E2F939AE3FF0D599C9C62749A2F95871226E60AFA2A9807EB26BBF7D6" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.assert", + "version": "3.2.2", + "description": "Includes the assertion library from xUnit.net (xunit.v3.assert.dll). Supports .NET Standard 2.0 and .NET 8.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A1ABD3FA034E80012F33D59E5172B1E8D8C35DF57F3DAEA5982B8F9DDAC12FFF61B4B2C7585820077B1895B6C020AA71E80591FB51ABE1D99C08275C3573E7A" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.assert@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.common", + "version": "3.2.2", + "description": "Includes common code shared between xunit.v3.core and xunit.v3.runner.common (xunit.v3.common.dll). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A0FD19A2858C335F0EB5B6A246CDF1FD9B567484A3E60EDC736ACFB7CAFA04B90E874B485A22C4BF2377469B1AFF7658596C35282859F1D20137B913996AB0FC" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.core.mtp-v1", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for writing tests; extensibility authors should include xunit.v3.extensibility.core instead. Includes support for Microsoft.Testing.Platform v1. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "457A8F4EF036556D0181BB56D54A45950EFC6BBCB69EDDBEC341F0972AC086418CE6BB48655435BFA987DDC0CD5B97D97E26B0D57A589455C4248C54404B164B" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.extensibility.core", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for extensibility; test authors should include xunit.v3.core instead. Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DBD2BF9A1557CEBA2EE86994EAFC086F895691C97C03A125176DD2DC1CB497E10383022FF014FA8A30171D7446C794795B97DEED16EA70562768151A0A4DC3A2" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.mtp-v1", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.core.mtp-v1, xunit.v3.assert, and xunit.analyzers.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A1AF2350710CB1571CF31AF92BDFD2A835ADD5E90BCC132ADBB1E11ECA87CC1A3F0382D2A4AC6E8FA82E0E51F4D77FFAD71802A9A6F25DE936BF2280750104ED" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.common", + "version": "3.2.2", + "description": "Includes common code shared between in-process runners (like xunit.v3.runner.inproc.console) and xunit.v3.runner.utility (used by 1st and 3rd party external runners). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "226D0BA70448F5345532D159340CA70E0D4B08B766FFC9C97AEE33F86C7715AAF3A916A610322DB805AFEBA56FC1323480ADF7F125B8A960C51FBA4F266AEFB0" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.inproc.console", + "version": "3.2.2", + "description": "In-process console runner for xUnit.net framework, providing the entrypoint for self-executing unit tests. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB9F10495A9497A07232E3739FCAFE3ADB923F097314F2EF6BC1DA0E85EBA69353F8618136E0274A45EF9992FE4B2232A82F626D5DF8CA0124039C6CAE66C2FE" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/System.Diagnostics.EventLog@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLite@3.53.4", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLite@3.53.4", + "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.analyzers@1.27.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.analyzers@1.27.0", + "pkg:nuget/xunit.v3.assert@3.2.2", + "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.mtp-v1@3.2.2" + ] + }, + { + "ref": "ServerMonitorManager@0.0.0", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "pkg:nuget/xunit.v3@3.2.2" + ] + } + ] +} \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-arm64.tar.gz.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-arm64.tar.gz.sha256 new file mode 100644 index 0000000..94cd9fb --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-arm64.tar.gz.sha256 @@ -0,0 +1 @@ +85470c5f6c29e0131eccc7b6d7f47adce268d0c738a16ac12e26cd83b6894790 server-monitor-manager-linux-arm64.tar.gz diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-x64-sbom.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-x64-sbom.json new file mode 100644 index 0000000..e505f5c --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-x64-sbom.json @@ -0,0 +1,2815 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:098ef597-e19c-45ab-bbc3-1e37483f3788", + "version": 1, + "metadata": { + "timestamp": "2026-08-13T06:31:12Z", + "tools": { + "components": [ + { + "type": "application", + "authors": [ + { + "name": "CycloneDX" + } + ], + "name": "CycloneDX module for .NET", + "version": "6.2.0.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-dotnet", + "type": "website" + } + ] + } + ] + }, + "component": { + "type": "application", + "bom-ref": "ServerMonitorManager@0.0.0", + "name": "ServerMonitorManager", + "version": "0.0.0" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.ApplicationInsights", + "version": "2.23.0", + "description": "Application Insights Base API. This package provides core functionality for transmission of all Application Insights Telemetry Types and is a dependent package for all other Application Insights packages. Please install the platform specific package for the best experience. Privacy statement: https://go.microsoft.com/fwlink/?LinkId=512156", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DD497BFAD0C65E54A4F78D2A1644F3D0854D4CD01DD83BA506F8D5D53635E28152C7C13210DD5DD3985780AAB146A7620DE3EBAEAD8EF12C6F87088676C2157F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "externalReferences": [ + { + "url": "https://go.microsoft.com/fwlink/?LinkId=392727", + "type": "website" + }, + { + "url": "https://github.com/Microsoft/ApplicationInsights-dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Authentication.Certificate", + "version": "10.0.10", + "description": "ASP.NET Core middleware that enables an application to support certificate authentication.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "FD902F01F05EFDEF7EB362EF0187438EBA3512D40722A547BB3DE8B1A823DF68FB660DBD097764E848EAA5CDAFC20D1F121EF45667B06A4C0756ADE371B25455" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Mvc.Testing", + "version": "10.0.10", + "description": "Support for writing functional tests for MVC applications.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0604BE8DA0AEE0F088C0513EF58E1927C9097E376A7517887F85F4BD9C4469E4D0034C4B855D10DA30EE62966383578FDE509157CB5C56EAA892E2053C64DF74" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.TestHost", + "version": "10.0.10", + "description": "ASP.NET Core web server for writing and running tests.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "4D8702FC6CA49443CFAF7F565A1D6FFA2E6B8DC7A52BFBD505B65FA20ACDC8D5D69D760E7380C32C82B2C76062E83B817AA9DE3FE822E423F6D4D1628F9A3540" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Bcl.AsyncInterfaces", + "version": "6.0.0", + "description": "Provides the IAsyncEnumerable\u003CT\u003E and IAsyncDisposable interfaces and helper types for .NET Standard 2.0. This package is not required starting with .NET Standard 2.1 and .NET Core 3.0.\n\nCommonly Used Types:\nSystem.IAsyncDisposable\nSystem.Collections.Generic.IAsyncEnumerable\nSystem.Collections.Generic.IAsyncEnumerator", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "221A05A0C910F7A87B620D8F3831ED392B4EB95D112BEE274D35F27009AD2A26445DE9D7CD235FE6FB4A03F2550874BDA3BE3DDDD96EDAF9C0852A9C23D7B099" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.CodeCoverage", + "version": "18.8.1", + "description": "Microsoft.CodeCoverage package brings infra for collecting code coverage from vstest.console.exe and \u0022dotnet test\u0022.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F21F6B39BBBCE89302D28B8E77B99E3633E18EB4D840F132393E3686C841C5DC649EFA5F60B4734D8D7764185101FEEDA2197BC00A6AABF69A37A591C617708F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "9FD331CF8F4C4026F1B7B9C651FB33E80CE1D0E0D6F46DD00E41E71E598CFEFB8E318CCB8519064CA4FB9F82D4126D08F42041E5987E186676ADAA2595E229D4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite.Core", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite. This package does not include a copy of the native SQLite library.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "723A1B77BFE3966982CA0242256B2DC320ED878C4ED9480680D75D91B716AC27013FA5FE533800C50C7C6000E50046AC10AF5DBC48E3CA4EB885C6ED65BC2CB1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Abstractions", + "version": "10.0.10", + "description": "Caching abstractions for in-memory cache and distributed cache.\n\nCommonly Used Types:\nMicrosoft.Extensions.Caching.Distributed.IDistributedCache\nMicrosoft.Extensions.Caching.Memory.IMemoryCache", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "02858A6F1E814D2FCBA5506A1E5E1BC125186FE76E89235D073B0DCA84C62802E6680E6C13AD8AC07AC5B6358A0691CF473C80122C062A7AC8AE557D7A5A7A5B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Memory", + "version": "10.0.10", + "description": "In-memory cache implementation of Microsoft.Extensions.Caching.Memory.IMemoryCache.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DDBBEC0D9A6C493F5BEAE10A1446E24664A17F9A8E5B694C6CFD315EE8C3F19490AC51F5ABBB624BD51FD14CDA381D515BCFF7F1A4D3AAEF06F589EA8FA7EDF4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration", + "version": "10.0.10", + "description": "Implementation of key-value pair based configuration for Microsoft.Extensions.Configuration. Includes the memory configuration provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "943C09D6B759963DD401BD8F3C3D7F9744436AE1157EF93810A8CAC823E3ED096A51817327AFADDC5741E541912D493D053D566CD898E6F8628398C7264981B3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Abstractions", + "version": "10.0.10", + "description": "Provides abstractions of key-value pair based configuration. Interfaces defined in this package are implemented by classes in Microsoft.Extensions.Configuration and other configuration packages.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "7BF4CD6F25D7E030E366CC9CB593B79A890F347DF598062C0D2030CDB62D23F465F69CCDFC7E83D3E709FCBE12EDC4BD4AF68229C2D889216AA84EBD43A6B162" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Binder", + "version": "10.0.10", + "description": "Provides the functionality to bind an object to data in configuration providers for Microsoft.Extensions.Configuration. This package enables you to represent the configuration data as strongly-typed classes defined in the application code. To bind a configuration, use the Microsoft.Extensions.Configuration.ConfigurationBinder.Get extension method on the IConfiguration object. To use this package, you also need to install a package for the configuration provider, for example, Microsoft.Extensions.Configuration.Json for the JSON provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "23414BBDE074A3E494848748823D8CA24B242A3915BAA77D96C8F8251B73CE73C32981326E66738291EF303C0C2B5F4B2933C13741BF5CE5AE106EEBACAF06C0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.CommandLine", + "version": "10.0.10", + "description": "Command line configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from the command line arguments of your application. You can use CommandLineConfigurationExtensions.AddCommandLine extension method on IConfigurationBuilder to add the command line configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "4F3012F2AAE997570A379C5C352BD1548B24F61901CBF9FF5C05444E6FC8ECA998B8F6C58DC1251EBC0DA7F282D26BA9BD82167D5628C1E4DAE0FC3DB335036D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.EnvironmentVariables", + "version": "10.0.10", + "description": "Environment variables configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from environment variables. You can use EnvironmentVariablesExtensions.AddEnvironmentVariables extension method on IConfigurationBuilder to add the environment variables configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "A5A066D0AFEE703C7E69742C494AD82E75BF0B7A4B0BCCA9B07B8EA9D208BA7B6B1FE8A9937E58A729711FAF871AA12405CB04B7C940D0BFE26E40880EF73AC1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.FileExtensions", + "version": "10.0.10", + "description": "Provides a base class for file-based configuration providers used with Microsoft.Extensions.Configuration and extension methods for configuring them.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0EA7FB571C819E1CD371FD21F05323330C8350050A78B3905034FD7C53504EE8C437D02E109B64490E58CA406727A5DA8749898E969460755558CC0A4E04F3F4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Json", + "version": "10.0.10", + "description": "JSON configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read your application\u0027s settings from a JSON file. You can use JsonConfigurationExtensions.AddJsonFile extension method on IConfigurationBuilder to add the JSON configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1522329F5E7ACE8270D3B69D1973C5D9A32FDFEDE6F8050B304E349A16DFD8F0B08DFC1E6143139FC59A3CE4E0B72B2F454CC3D61C02C93E53B4012C9DA67879" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.UserSecrets", + "version": "10.0.10", + "description": "User secrets configuration provider implementation for Microsoft.Extensions.Configuration. User secrets mechanism enables you to override application configuration settings with values stored in the local secrets file. You can use UserSecretsConfigurationExtensions.AddUserSecrets extension method on IConfigurationBuilder to add user secrets provider to the configuration builder.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "044707479CFBA9BADC7958E44B5A3C139E11CCEA75FAE8D2A14BD59296B415C35A1F6FBDF372FF2D1A641A0E1FE99E815C4193103826DFA2167A947B0AC09BC7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection", + "version": "10.0.10", + "description": "Default implementation of dependency injection for Microsoft.Extensions.DependencyInjection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "8628EEC1C26F27A7956EECF3D0468FDD865039826770F267F9A4EEBE8D7949E37D1C298B85B8A73A873D9A04FDF5E50E5930E0289F3C4824137B0543FE0E7B0D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection.Abstractions", + "version": "10.0.10", + "description": "Abstractions for dependency injection.\n\nCommonly Used Types:\nMicrosoft.Extensions.DependencyInjection.IServiceCollection", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C40AF270352D0049FBDDB6403EB0B5206F0B6318760146E8093A9972B2AB965D7A5213A28E473742712E54F7ABB288EAB7A46659B41C7426D454ECEE4A931EAC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyModel", + "version": "10.0.10", + "description": "Provides abstractions for reading \u0060.deps\u0060 files. When a .NET application is compiled, the SDK generates a JSON manifest file (\u0060\u003CApplicationName\u003E.deps.json\u0060) that contains information about application dependencies. You can use \u0060Microsoft.Extensions.DependencyModel\u0060 to read information from this manifest at run time. This is useful when you want to dynamically compile code (for example, using Roslyn Emit API) referencing the same dependencies as your main application.\n\nBy default, the dependency manifest contains information about the application\u0027s target framework and runtime dependencies. Set the PreserveCompilationContext project property to \u0060true\u0060 to additionally include information about reference assemblies used during compilation.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "3887E253D85866E50B994DED19AF4988FC51E7551E86463CB96CC8B43E477D9CCCE9CD2AF9F5584B6905E21F247F32679A83FFFBFDC325D0DF40CEBD557D4EBB" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics", + "version": "10.0.10", + "description": "This package includes the default implementation of IMeterFactory and additional extension methods to easily register it with the Dependency Injection framework.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "EFA65F0DFC19BA6608050F87D9C9CC33A06B5C105B207D7C4259D280F3A36253F7A380FEFC6C9641AD9929FDCBFF5E00B4886F12399698CC716D65CE8131BE62" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics.Abstractions", + "version": "10.0.10", + "description": "Diagnostic abstractions for Microsoft.Extensions.Diagnostics.\n\nCommonly Used Types:\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsBuilder\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsListener\nMicrosoft.Extensions.Diagnostics.Metrics.InstrumentRule\nMicrosoft.Extensions.Diagnostics.Metrics.MeterScope\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsBuilderExtensions\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsOptions", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "B163E11DDD5E10CEB4D4091CFBE35A24A61CA70A29D48D988E9CA48F5E9A799B40E1C7752701F7F78D3A586B1787507581357E4A2813A8F561BE9CB80A3BB4AF" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Abstractions", + "version": "10.0.10", + "description": "Abstractions of files and directories.\n\nCommonly Used Types:\nMicrosoft.Extensions.FileProviders.IDirectoryContents\nMicrosoft.Extensions.FileProviders.IFileInfo\nMicrosoft.Extensions.FileProviders.IFileProvider", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "6F38363D1EEEC3034C1BCFF9058B295F19C4F26E9CEDAAEC671AF3FA22D212E671DB8CAB0688DDB01609C850A06D0C2C5B103176F862F7F7DCABA16481D51C51" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Physical", + "version": "10.0.10", + "description": "File provider for physical files for Microsoft.Extensions.FileProviders.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "F62D2D671CA52BEE6BF8E252853D84A9D575FB87D8A04E9DD98EA5BB25E86BA1C6F912D1042CA7A044AB64B879705D458A62F176DB1CA4224FAC06CD52102ABD" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileSystemGlobbing", + "version": "10.0.10", + "description": "File system globbing to find files matching a specified pattern.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1949E7C288D884B5FF6D2B4A54D468FFA42F0285FAB0786A5D58FA47A7F0F5DAAA3A491AAD092F31D07D190CA27CC25F632DBA0C8D25D2D44BDF32058EDD04D5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting", + "version": "10.0.10", + "description": "Hosting and startup infrastructures for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DEF44959988A0DFBC945DC865F25BB0AD3B3872A3E48AC96A71D642EB04A9F3C6CA8B3FD9B2129E2063FE67F5C98AA7FC3D2D049AFE1076F546E82578DF8A822" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting.Abstractions", + "version": "10.0.10", + "description": "Hosting and startup abstractions for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "029B3B822BE940A6994B3A7333046E64C75E471C7F3225C690C0CB3CEC6C19D20594AADAB5EFC28602C2FA37EE3BCD745ED26632B7F7A4580CD0294D3B966DC9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging", + "version": "10.0.10", + "description": "Logging infrastructure default implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "5261C9AAFF6B83BB3A806EFD91CFB37BED7FE8FB5FD990FE41F0BB6B772BF29AC8320C68371B50FB8AE7D8EC3394428EAB4722DC1EC6D72015BA166351956710" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Abstractions", + "version": "10.0.10", + "description": "Logging abstractions for Microsoft.Extensions.Logging.\n\nCommonly Used Types:\nMicrosoft.Extensions.Logging.ILogger\nMicrosoft.Extensions.Logging.ILoggerFactory\nMicrosoft.Extensions.Logging.ILogger\u003CTCategoryName\u003E\nMicrosoft.Extensions.Logging.LogLevel\nMicrosoft.Extensions.Logging.Logger\u003CT\u003E\nMicrosoft.Extensions.Logging.LoggerMessage\nMicrosoft.Extensions.Logging.Abstractions.NullLogger", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FCC5A6CD33BCCA73B47C0771BD1AD9CC044EAC53D3AF43C017CC684932F1F107981C7A0312922C14E6E2AA9B8DF1D3A70655DD0ACDCF9B97D3CE975FC21D588" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Configuration", + "version": "10.0.10", + "description": "Configuration support for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2F34EA98C7F9E1D4B61F3690F5C05A2D88552D672DB4BCE1B8A9EC50DB766530D61CA15FBD9D90B24C46E63B386F771DF8361ACBECF4ABFC7C0C942309AB2B3E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Console", + "version": "10.0.10", + "description": "Console logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6E3AFE1DB83957364483B116F176B0048D0AA0B277B7134F4F0FEAEB159DBBA7175A79916A46183D376346BA13D91F5D22D97E6CC6AAC65946FA562F821E974E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Debug", + "version": "10.0.10", + "description": "Debug output logger provider implementation for Microsoft.Extensions.Logging. This logger logs messages to a debugger monitor by writing messages with System.Diagnostics.Debug.WriteLine().", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB85BB3E6F032241404637C4642C14702C7337BB8AB3EB2BDE33AFF5000A055D60B6171AA86C7F6D42C55ECB8168D826C2A77A11423BEF2031781900E78E1925" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventLog", + "version": "10.0.10", + "description": "Windows Event Log logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "859BAF5F7B66880559D2B0F56881F61C4980C727BB927DE2BAF868829EC2779F809F7B5263E353E9F1868F676AD19816B824B42955E5792D3216B4E53DA05A4D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventSource", + "version": "10.0.10", + "description": "EventSource/EventListener logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "251D1821F49878B2F829F7A625A26B6F94CD9E2AD218B830859FB1137448EDFAE5CAEA267C459B02E23F09AD9E72A9A5EF491E5B25390FECFB958EB363534211" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options", + "version": "10.0.10", + "description": "Provides a strongly typed way of specifying and accessing settings using dependency injection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "538322A27FD9BB004C4C3FC21FC584EC08EDE88740B54DC95CBC241B553339633594D167A0EF0D02E42D6482CDA642B218414FF6DEC5BD06A48079CC0948D929" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options.ConfigurationExtensions", + "version": "10.0.10", + "description": "Provides additional configuration specific functionality related to Options.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "07F056E666E542729A25A06C672DF351373F9D5029BCA0D14AD3AD08DAE2CCA903E776B23E6DE3BBE5051DA68876CBC003F7AFD2EF4C08E7B32E60033465A45A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Primitives", + "version": "10.0.10", + "description": "Primitives shared by framework extensions. Commonly used types include:\n\nCommonly Used Types:\nMicrosoft.Extensions.Primitives.IChangeToken\nMicrosoft.Extensions.Primitives.StringValues\nMicrosoft.Extensions.Primitives.StringSegment", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "B3F778D24AFDF4711BEBA10DE673F9EB3ABAEC108B86862FDF1DE64F554B543A503FB3BBB0ABC38E0AF8B800EF39D3660FC660943235C734786FAEB11D4FAD64" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.ILLink.Tasks", + "version": "10.0.10", + "description": "MSBuild tasks for running the IL Linker", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "804F0EEC3AD1008DD08ABDF24B3BDD465EC3CD57FC5EB15F234BDB5179761878A6DDD30F755A25F43C70361FD3CEAF729A8935294FB6C2EDAAAC5E6358DBF5A5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.Test.Sdk", + "version": "18.8.1", + "description": "The MSbuild targets and properties for building .NET test projects.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "ED924163245F79A57884396548B55BEDDB4B5D06F84A96C0872FACF5273E754576CF00D44D326D3CB6138DA9D2E64AAA9BEDBCDCD371218E36EF5B946343EF8F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.Telemetry", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides telemetry for the platform.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C5E54A968FD412E4CE2DCC98EBC3C9154FE2D49E2E5C539CE1460CF01A9D8FD4197D90EA5ACE8A9574368DB629FFBD224B273BE242083050087A2BD60FB7D917" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.TrxReport.Abstractions", + "version": "1.9.1", + "description": "Package Description", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "665DC7C980F6089E8AD472201353A0BAC308BC55976603332BF8E568247FBD3C1FC644C9A904AE9F800E50968D2EF02D735ADA4616E8FC9C75CB18290A7540EC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides the core platform and the .NET implementation of the protocol.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "10C89A7E4A01422839D3EE8DDE9FD6B1E8C8504A082573A1209398434AD1436FB2774BB96C969CC1E6079B123483303224DE3273F8346F00ED151F2F4F361A4B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform.MSBuild", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides MSBuild integration of the platform, its extensions and configuration files.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "568901EC1C20B98D48692E6F182260177105A4C0BE28903805AC3F052D340D6D4B6C6A11F5931B23D10078FF0A70BB654FF606E8BB8C743DEEC1C1CDB8F36A1D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.ObjectModel", + "version": "18.8.1", + "description": "The Microsoft Test Platform Object Model.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "FA783FB4A40D48E96B1901D473BD83DDC83AD873D58B05D7042D05A1E10EEA6D6EE07E130A3213272E989B56C2F05A258F43004F4637DB7EA132D63AEF31A985" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.TestHost", + "version": "18.8.1", + "description": "Testplatform host executes the test using specified adapter.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "46D7AB005785910C271F30A658151CB71107FD87A78F7F7DE78811E49EC8657424E68901BFA943DD73AFD2E18645ED361294638436B01DA1945C7A4504A7C8DE" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Win32.Registry", + "version": "5.0.0", + "description": "Provides support for accessing and modifying the Windows Registry.\n\nCommonly Used Types:\nMicrosoft.Win32.RegistryKey\nMicrosoft.Win32.Registry\nMicrosoft.Win32.RegistryValueKind\nMicrosoft.Win32.RegistryHive\nMicrosoft.Win32.RegistryView\n \nWhen using NuGet 3.x this package requires at least version 3.4.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "471E66567CE59CC86475AECE7815D05261264CE114E0C1688BA2551DD51494901FA72DD7A8F74F8E8F0F3DBA74AF8595F177552F3C06ABB4BFCE76692197076E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/dotnet/runtime", + "type": "website" + }, + { + "url": "git://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLite@3.53.4", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLite", + "version": "3.53.4", + "description": "This package contains builds of the native SQLite code for various platforms. \n These builds have \u0022e_sqlite3\u0022 as the base name. The first three numbers in the version number of this package indicate the version of SQLite that was used to build it. The fourth number, if there is one, is incremented as needed for packaging-specific changes.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "81D145648BACFF3B4C8CD1794DF9956C47B229264467AA7001EA9A306E429CEB2855EC9296509541C82FC3C9BCFF04617AB3E86169932700BDAD5B0C03C482EF" + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLite@3.53.4", + "externalReferences": [ + { + "url": "https://sqlite.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.bundle_e_sqlite3", + "version": "3.0.5", + "description": "This \u0027batteries-included\u0027 bundle brings in SQLitePCLRaw.core and the necessary stuff for certain common use cases. Call SQLitePCL.Batteries.Init().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "12F980014C25F0C3E20C7B331418933FC84C7635B65597CEAB09C20EA00C055043C866BEF8614EA6BC38D7A484D8FF339D4387BBE760BC892F4E2702CD23AB2F" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.config.e_sqlite3", + "version": "3.0.5", + "description": "This package sets the configuration for using e_sqlite3 but does not bring in that native library itself. It\u0027s like bundle_e_sqlite3, except it\u0027s hollow.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A25E95EE323DDFEB8FC920D26551B4AFED854A3D9DDA833C3507331AB2043E0C9F16D62C2100560373AFC20E54D3F69F42ABDD6DA6E75EF7DCC0EA861B5AF12" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.core", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. This package does not provide an API which is friendly to app developers. Rather, it provides an API which handles platform and configuration issues, upon which a friendlier API can be built. In order to use this package, you will need to also add one of the SQLitePCLRaw.provider.* packages and call raw.SetProvider().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "24209D65527E0F82BB4E151B610195D39CB4732891CE1F0E2BA0965371DA381F1E636CD9256AE7DC5B76C604E36D33B7CA63AFDE09E6A8A40A9B2FCB5F01AA03" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.provider.e_sqlite3", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. Packages named \u0027SQLitePCLRaw.provider.*\u0027 (like this one) are \u0027plugins\u0027 that allow SQLitePCLRaw.core to access the native SQLite library. This provider does DllImport of \u0027e_sqlite3\u0027, the SQLite builds provided with SQLitePCLRaw.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "716EE95A124695CE5B2E2C834509E66991585B5AD1843B4CC6D135FE078DFE2D2E867A2E83978DEF09B8691833370803251F792537E59203455054AC24F82CC9" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "System.Diagnostics.EventLog", + "version": "10.0.10", + "description": "Provides the System.Diagnostics.EventLog class, which allows the applications to use the Windows event log service.\n\nCommonly Used Types:\nSystem.Diagnostics.EventLog", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F98A922C208C90F09A247CF2C251048B3EBADD8633787F967E5701427765C77C298F40E54A8D2BF5EBFEF729EFD3E8CFC5C17EFDD5F2CD80184532C24B5A481A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.analyzers@1.27.0", + "authors": [ + { + "name": "jnewkirk,bradwilson,marcind" + } + ], + "name": "xunit.analyzers", + "version": "1.27.0", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features.\n\nInstalling this package provides code analyzers to help developers find and fix frequent issues when writing tests and xUnit.net extensibility code.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2B920EDBD64D376C9D7B3DA38654D1B11DB4CA5A7F79032B320A289DF229BFD73DB1604DE8C5D120F196C6FBA8B688EE493DC7814F5EFD7EE5E3F56238B3C1BF" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.analyzers@1.27.0", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit.analyzers", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.runner.visualstudio", + "version": "3.1.5", + "description": "Visual Studio 2022\u002B Test Explorer runner for the xUnit.net framework. Capable of running xUnit.net v1, v2, and v3 tests. Supports .NET 4.7.2 or later, and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FFB6F37D917B54777C124986C2F3421CEB2FDD62561B352BDAB588AFEF58A8CCF857A8CE0468EB87BA3908261F396FEC18E9D81FDB993D10D4B2F2337A9A5BD" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "externalReferences": [ + { + "url": "https://github.com/xunit/visualstudio.xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.mtp-v1.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "9612F4811FCE910665551AC371386B7460BC118A39D78892C357093F92AAA9EA1A5DC21E2F939AE3FF0D599C9C62749A2F95871226E60AFA2A9807EB26BBF7D6" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.assert", + "version": "3.2.2", + "description": "Includes the assertion library from xUnit.net (xunit.v3.assert.dll). Supports .NET Standard 2.0 and .NET 8.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A1ABD3FA034E80012F33D59E5172B1E8D8C35DF57F3DAEA5982B8F9DDAC12FFF61B4B2C7585820077B1895B6C020AA71E80591FB51ABE1D99C08275C3573E7A" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.assert@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.common", + "version": "3.2.2", + "description": "Includes common code shared between xunit.v3.core and xunit.v3.runner.common (xunit.v3.common.dll). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A0FD19A2858C335F0EB5B6A246CDF1FD9B567484A3E60EDC736ACFB7CAFA04B90E874B485A22C4BF2377469B1AFF7658596C35282859F1D20137B913996AB0FC" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.core.mtp-v1", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for writing tests; extensibility authors should include xunit.v3.extensibility.core instead. Includes support for Microsoft.Testing.Platform v1. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "457A8F4EF036556D0181BB56D54A45950EFC6BBCB69EDDBEC341F0972AC086418CE6BB48655435BFA987DDC0CD5B97D97E26B0D57A589455C4248C54404B164B" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.extensibility.core", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for extensibility; test authors should include xunit.v3.core instead. Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DBD2BF9A1557CEBA2EE86994EAFC086F895691C97C03A125176DD2DC1CB497E10383022FF014FA8A30171D7446C794795B97DEED16EA70562768151A0A4DC3A2" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.mtp-v1", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.core.mtp-v1, xunit.v3.assert, and xunit.analyzers.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A1AF2350710CB1571CF31AF92BDFD2A835ADD5E90BCC132ADBB1E11ECA87CC1A3F0382D2A4AC6E8FA82E0E51F4D77FFAD71802A9A6F25DE936BF2280750104ED" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.common", + "version": "3.2.2", + "description": "Includes common code shared between in-process runners (like xunit.v3.runner.inproc.console) and xunit.v3.runner.utility (used by 1st and 3rd party external runners). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "226D0BA70448F5345532D159340CA70E0D4B08B766FFC9C97AEE33F86C7715AAF3A916A610322DB805AFEBA56FC1323480ADF7F125B8A960C51FBA4F266AEFB0" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.inproc.console", + "version": "3.2.2", + "description": "In-process console runner for xUnit.net framework, providing the entrypoint for self-executing unit tests. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB9F10495A9497A07232E3739FCAFE3ADB923F097314F2EF6BC1DA0E85EBA69353F8618136E0274A45EF9992FE4B2232A82F626D5DF8CA0124039C6CAE66C2FE" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/System.Diagnostics.EventLog@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLite@3.53.4", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLite@3.53.4", + "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.analyzers@1.27.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.analyzers@1.27.0", + "pkg:nuget/xunit.v3.assert@3.2.2", + "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.mtp-v1@3.2.2" + ] + }, + { + "ref": "ServerMonitorManager@0.0.0", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "pkg:nuget/xunit.v3@3.2.2" + ] + } + ] +} \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-x64.tar.gz.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-x64.tar.gz.sha256 new file mode 100644 index 0000000..218eac3 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-linux-x64.tar.gz.sha256 @@ -0,0 +1 @@ +885be75480f14bceae27ee5538d99b34321b81a82c4931c9eb682305452da438 server-monitor-manager-linux-x64.tar.gz diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-manifest.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-manifest.json new file mode 100644 index 0000000..b796f5b --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-manifest.json @@ -0,0 +1,23 @@ +{ + "schema": "smm-manifest/v2", + "version": "v0.1.0-alpha.12", + "components": { + "control": "v0.1.0-alpha.12", + "agent": "v0.1.0-alpha.12", + "helper": "v0.1.0-alpha.12", + "desktop": "v0.1.0-alpha.12" + }, + "protocols": { + "helper_protocol": "v1" + }, + "hashes": { + "ochenstarik-server-monitor-manager.sh": "77899bc545eadb591f0e311b4998b09cbf279eb17aa6d6073009ca4f3617f3a4", + "smm-setup.sh": "58f225d5091e6e9e2502031ad6d226daf70483efa021a53f4c042966bde0248d", + "server-monitor-manager-linux-x64.tar.gz": "885be75480f14bceae27ee5538d99b34321b81a82c4931c9eb682305452da438", + "server-monitor-manager-linux-arm64.tar.gz": "85470c5f6c29e0131eccc7b6d7f47adce268d0c738a16ac12e26cd83b6894790", + "ServerMonitorManager-win-x64.msix": "192a56a4d23fa66b454248b9f8686363a9cba5e9b732972c246d96fe0827b4ca", + "server-monitor-manager-linux-x64-sbom.json": "665bc442d37080768b0bba21aefa98830a3114ed4d44e426cb6f32cff248e912", + "server-monitor-manager-linux-arm64-sbom.json": "9dbd6fe2f906f0ba794512d063603cb9d4f87516b04b181ee4aef9b25ad177ae", + "server-monitor-manager-win-x64-sbom.json": "8b9ddfbe7392b4f9589553d04dfeee80184b495dc83db80f68079e2324950cde" + } +} diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-manifest.sig b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-manifest.sig new file mode 100644 index 0000000..a0d914a --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-manifest.sig @@ -0,0 +1 @@ +MEUCIQC+vlg8Ol/PaFzT/LxrHy3TlAhV5yJKF4WEdvnvKbvNeQIgVunvNHPAjZG6Onq47ElZQRKjFnOpySMsUe3gxvo/Sqw= \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-win-x64-sbom.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-win-x64-sbom.json new file mode 100644 index 0000000..dca4e05 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/server-monitor-manager-win-x64-sbom.json @@ -0,0 +1,2815 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:4599d65d-8a83-4046-8037-0cc47ed12f47", + "version": 1, + "metadata": { + "timestamp": "2026-08-13T06:32:11Z", + "tools": { + "components": [ + { + "type": "application", + "authors": [ + { + "name": "CycloneDX" + } + ], + "name": "CycloneDX module for .NET", + "version": "6.2.0.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-dotnet", + "type": "website" + } + ] + } + ] + }, + "component": { + "type": "application", + "bom-ref": "ServerMonitorManager@0.0.0", + "name": "ServerMonitorManager", + "version": "0.0.0" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.ApplicationInsights", + "version": "2.23.0", + "description": "Application Insights Base API. This package provides core functionality for transmission of all Application Insights Telemetry Types and is a dependent package for all other Application Insights packages. Please install the platform specific package for the best experience. Privacy statement: https://go.microsoft.com/fwlink/?LinkId=512156", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DD497BFAD0C65E54A4F78D2A1644F3D0854D4CD01DD83BA506F8D5D53635E28152C7C13210DD5DD3985780AAB146A7620DE3EBAEAD8EF12C6F87088676C2157F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "externalReferences": [ + { + "url": "https://go.microsoft.com/fwlink/?LinkId=392727", + "type": "website" + }, + { + "url": "https://github.com/Microsoft/ApplicationInsights-dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Authentication.Certificate", + "version": "10.0.10", + "description": "ASP.NET Core middleware that enables an application to support certificate authentication.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "FD902F01F05EFDEF7EB362EF0187438EBA3512D40722A547BB3DE8B1A823DF68FB660DBD097764E848EAA5CDAFC20D1F121EF45667B06A4C0756ADE371B25455" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Mvc.Testing", + "version": "10.0.10", + "description": "Support for writing functional tests for MVC applications.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0604BE8DA0AEE0F088C0513EF58E1927C9097E376A7517887F85F4BD9C4469E4D0034C4B855D10DA30EE62966383578FDE509157CB5C56EAA892E2053C64DF74" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.TestHost", + "version": "10.0.10", + "description": "ASP.NET Core web server for writing and running tests.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "4D8702FC6CA49443CFAF7F565A1D6FFA2E6B8DC7A52BFBD505B65FA20ACDC8D5D69D760E7380C32C82B2C76062E83B817AA9DE3FE822E423F6D4D1628F9A3540" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Bcl.AsyncInterfaces", + "version": "6.0.0", + "description": "Provides the IAsyncEnumerable\u003CT\u003E and IAsyncDisposable interfaces and helper types for .NET Standard 2.0. This package is not required starting with .NET Standard 2.1 and .NET Core 3.0.\n\nCommonly Used Types:\nSystem.IAsyncDisposable\nSystem.Collections.Generic.IAsyncEnumerable\nSystem.Collections.Generic.IAsyncEnumerator", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "221A05A0C910F7A87B620D8F3831ED392B4EB95D112BEE274D35F27009AD2A26445DE9D7CD235FE6FB4A03F2550874BDA3BE3DDDD96EDAF9C0852A9C23D7B099" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.CodeCoverage", + "version": "18.8.1", + "description": "Microsoft.CodeCoverage package brings infra for collecting code coverage from vstest.console.exe and \u0022dotnet test\u0022.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F21F6B39BBBCE89302D28B8E77B99E3633E18EB4D840F132393E3686C841C5DC649EFA5F60B4734D8D7764185101FEEDA2197BC00A6AABF69A37A591C617708F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "9FD331CF8F4C4026F1B7B9C651FB33E80CE1D0E0D6F46DD00E41E71E598CFEFB8E318CCB8519064CA4FB9F82D4126D08F42041E5987E186676ADAA2595E229D4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite.Core", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite. This package does not include a copy of the native SQLite library.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "723A1B77BFE3966982CA0242256B2DC320ED878C4ED9480680D75D91B716AC27013FA5FE533800C50C7C6000E50046AC10AF5DBC48E3CA4EB885C6ED65BC2CB1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Abstractions", + "version": "10.0.10", + "description": "Caching abstractions for in-memory cache and distributed cache.\n\nCommonly Used Types:\nMicrosoft.Extensions.Caching.Distributed.IDistributedCache\nMicrosoft.Extensions.Caching.Memory.IMemoryCache", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "02858A6F1E814D2FCBA5506A1E5E1BC125186FE76E89235D073B0DCA84C62802E6680E6C13AD8AC07AC5B6358A0691CF473C80122C062A7AC8AE557D7A5A7A5B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Memory", + "version": "10.0.10", + "description": "In-memory cache implementation of Microsoft.Extensions.Caching.Memory.IMemoryCache.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DDBBEC0D9A6C493F5BEAE10A1446E24664A17F9A8E5B694C6CFD315EE8C3F19490AC51F5ABBB624BD51FD14CDA381D515BCFF7F1A4D3AAEF06F589EA8FA7EDF4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration", + "version": "10.0.10", + "description": "Implementation of key-value pair based configuration for Microsoft.Extensions.Configuration. Includes the memory configuration provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "943C09D6B759963DD401BD8F3C3D7F9744436AE1157EF93810A8CAC823E3ED096A51817327AFADDC5741E541912D493D053D566CD898E6F8628398C7264981B3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Abstractions", + "version": "10.0.10", + "description": "Provides abstractions of key-value pair based configuration. Interfaces defined in this package are implemented by classes in Microsoft.Extensions.Configuration and other configuration packages.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "7BF4CD6F25D7E030E366CC9CB593B79A890F347DF598062C0D2030CDB62D23F465F69CCDFC7E83D3E709FCBE12EDC4BD4AF68229C2D889216AA84EBD43A6B162" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Binder", + "version": "10.0.10", + "description": "Provides the functionality to bind an object to data in configuration providers for Microsoft.Extensions.Configuration. This package enables you to represent the configuration data as strongly-typed classes defined in the application code. To bind a configuration, use the Microsoft.Extensions.Configuration.ConfigurationBinder.Get extension method on the IConfiguration object. To use this package, you also need to install a package for the configuration provider, for example, Microsoft.Extensions.Configuration.Json for the JSON provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "23414BBDE074A3E494848748823D8CA24B242A3915BAA77D96C8F8251B73CE73C32981326E66738291EF303C0C2B5F4B2933C13741BF5CE5AE106EEBACAF06C0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.CommandLine", + "version": "10.0.10", + "description": "Command line configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from the command line arguments of your application. You can use CommandLineConfigurationExtensions.AddCommandLine extension method on IConfigurationBuilder to add the command line configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "4F3012F2AAE997570A379C5C352BD1548B24F61901CBF9FF5C05444E6FC8ECA998B8F6C58DC1251EBC0DA7F282D26BA9BD82167D5628C1E4DAE0FC3DB335036D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.EnvironmentVariables", + "version": "10.0.10", + "description": "Environment variables configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from environment variables. You can use EnvironmentVariablesExtensions.AddEnvironmentVariables extension method on IConfigurationBuilder to add the environment variables configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "A5A066D0AFEE703C7E69742C494AD82E75BF0B7A4B0BCCA9B07B8EA9D208BA7B6B1FE8A9937E58A729711FAF871AA12405CB04B7C940D0BFE26E40880EF73AC1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.FileExtensions", + "version": "10.0.10", + "description": "Provides a base class for file-based configuration providers used with Microsoft.Extensions.Configuration and extension methods for configuring them.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0EA7FB571C819E1CD371FD21F05323330C8350050A78B3905034FD7C53504EE8C437D02E109B64490E58CA406727A5DA8749898E969460755558CC0A4E04F3F4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Json", + "version": "10.0.10", + "description": "JSON configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read your application\u0027s settings from a JSON file. You can use JsonConfigurationExtensions.AddJsonFile extension method on IConfigurationBuilder to add the JSON configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1522329F5E7ACE8270D3B69D1973C5D9A32FDFEDE6F8050B304E349A16DFD8F0B08DFC1E6143139FC59A3CE4E0B72B2F454CC3D61C02C93E53B4012C9DA67879" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.UserSecrets", + "version": "10.0.10", + "description": "User secrets configuration provider implementation for Microsoft.Extensions.Configuration. User secrets mechanism enables you to override application configuration settings with values stored in the local secrets file. You can use UserSecretsConfigurationExtensions.AddUserSecrets extension method on IConfigurationBuilder to add user secrets provider to the configuration builder.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "044707479CFBA9BADC7958E44B5A3C139E11CCEA75FAE8D2A14BD59296B415C35A1F6FBDF372FF2D1A641A0E1FE99E815C4193103826DFA2167A947B0AC09BC7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection", + "version": "10.0.10", + "description": "Default implementation of dependency injection for Microsoft.Extensions.DependencyInjection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "8628EEC1C26F27A7956EECF3D0468FDD865039826770F267F9A4EEBE8D7949E37D1C298B85B8A73A873D9A04FDF5E50E5930E0289F3C4824137B0543FE0E7B0D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection.Abstractions", + "version": "10.0.10", + "description": "Abstractions for dependency injection.\n\nCommonly Used Types:\nMicrosoft.Extensions.DependencyInjection.IServiceCollection", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C40AF270352D0049FBDDB6403EB0B5206F0B6318760146E8093A9972B2AB965D7A5213A28E473742712E54F7ABB288EAB7A46659B41C7426D454ECEE4A931EAC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyModel", + "version": "10.0.10", + "description": "Provides abstractions for reading \u0060.deps\u0060 files. When a .NET application is compiled, the SDK generates a JSON manifest file (\u0060\u003CApplicationName\u003E.deps.json\u0060) that contains information about application dependencies. You can use \u0060Microsoft.Extensions.DependencyModel\u0060 to read information from this manifest at run time. This is useful when you want to dynamically compile code (for example, using Roslyn Emit API) referencing the same dependencies as your main application.\n\nBy default, the dependency manifest contains information about the application\u0027s target framework and runtime dependencies. Set the PreserveCompilationContext project property to \u0060true\u0060 to additionally include information about reference assemblies used during compilation.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "3887E253D85866E50B994DED19AF4988FC51E7551E86463CB96CC8B43E477D9CCCE9CD2AF9F5584B6905E21F247F32679A83FFFBFDC325D0DF40CEBD557D4EBB" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics", + "version": "10.0.10", + "description": "This package includes the default implementation of IMeterFactory and additional extension methods to easily register it with the Dependency Injection framework.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "EFA65F0DFC19BA6608050F87D9C9CC33A06B5C105B207D7C4259D280F3A36253F7A380FEFC6C9641AD9929FDCBFF5E00B4886F12399698CC716D65CE8131BE62" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics.Abstractions", + "version": "10.0.10", + "description": "Diagnostic abstractions for Microsoft.Extensions.Diagnostics.\n\nCommonly Used Types:\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsBuilder\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsListener\nMicrosoft.Extensions.Diagnostics.Metrics.InstrumentRule\nMicrosoft.Extensions.Diagnostics.Metrics.MeterScope\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsBuilderExtensions\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsOptions", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "B163E11DDD5E10CEB4D4091CFBE35A24A61CA70A29D48D988E9CA48F5E9A799B40E1C7752701F7F78D3A586B1787507581357E4A2813A8F561BE9CB80A3BB4AF" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Abstractions", + "version": "10.0.10", + "description": "Abstractions of files and directories.\n\nCommonly Used Types:\nMicrosoft.Extensions.FileProviders.IDirectoryContents\nMicrosoft.Extensions.FileProviders.IFileInfo\nMicrosoft.Extensions.FileProviders.IFileProvider", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "6F38363D1EEEC3034C1BCFF9058B295F19C4F26E9CEDAAEC671AF3FA22D212E671DB8CAB0688DDB01609C850A06D0C2C5B103176F862F7F7DCABA16481D51C51" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Physical", + "version": "10.0.10", + "description": "File provider for physical files for Microsoft.Extensions.FileProviders.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "F62D2D671CA52BEE6BF8E252853D84A9D575FB87D8A04E9DD98EA5BB25E86BA1C6F912D1042CA7A044AB64B879705D458A62F176DB1CA4224FAC06CD52102ABD" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileSystemGlobbing", + "version": "10.0.10", + "description": "File system globbing to find files matching a specified pattern.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1949E7C288D884B5FF6D2B4A54D468FFA42F0285FAB0786A5D58FA47A7F0F5DAAA3A491AAD092F31D07D190CA27CC25F632DBA0C8D25D2D44BDF32058EDD04D5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting", + "version": "10.0.10", + "description": "Hosting and startup infrastructures for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DEF44959988A0DFBC945DC865F25BB0AD3B3872A3E48AC96A71D642EB04A9F3C6CA8B3FD9B2129E2063FE67F5C98AA7FC3D2D049AFE1076F546E82578DF8A822" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting.Abstractions", + "version": "10.0.10", + "description": "Hosting and startup abstractions for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "029B3B822BE940A6994B3A7333046E64C75E471C7F3225C690C0CB3CEC6C19D20594AADAB5EFC28602C2FA37EE3BCD745ED26632B7F7A4580CD0294D3B966DC9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging", + "version": "10.0.10", + "description": "Logging infrastructure default implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "5261C9AAFF6B83BB3A806EFD91CFB37BED7FE8FB5FD990FE41F0BB6B772BF29AC8320C68371B50FB8AE7D8EC3394428EAB4722DC1EC6D72015BA166351956710" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Abstractions", + "version": "10.0.10", + "description": "Logging abstractions for Microsoft.Extensions.Logging.\n\nCommonly Used Types:\nMicrosoft.Extensions.Logging.ILogger\nMicrosoft.Extensions.Logging.ILoggerFactory\nMicrosoft.Extensions.Logging.ILogger\u003CTCategoryName\u003E\nMicrosoft.Extensions.Logging.LogLevel\nMicrosoft.Extensions.Logging.Logger\u003CT\u003E\nMicrosoft.Extensions.Logging.LoggerMessage\nMicrosoft.Extensions.Logging.Abstractions.NullLogger", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FCC5A6CD33BCCA73B47C0771BD1AD9CC044EAC53D3AF43C017CC684932F1F107981C7A0312922C14E6E2AA9B8DF1D3A70655DD0ACDCF9B97D3CE975FC21D588" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Configuration", + "version": "10.0.10", + "description": "Configuration support for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2F34EA98C7F9E1D4B61F3690F5C05A2D88552D672DB4BCE1B8A9EC50DB766530D61CA15FBD9D90B24C46E63B386F771DF8361ACBECF4ABFC7C0C942309AB2B3E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Console", + "version": "10.0.10", + "description": "Console logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6E3AFE1DB83957364483B116F176B0048D0AA0B277B7134F4F0FEAEB159DBBA7175A79916A46183D376346BA13D91F5D22D97E6CC6AAC65946FA562F821E974E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Debug", + "version": "10.0.10", + "description": "Debug output logger provider implementation for Microsoft.Extensions.Logging. This logger logs messages to a debugger monitor by writing messages with System.Diagnostics.Debug.WriteLine().", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB85BB3E6F032241404637C4642C14702C7337BB8AB3EB2BDE33AFF5000A055D60B6171AA86C7F6D42C55ECB8168D826C2A77A11423BEF2031781900E78E1925" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventLog", + "version": "10.0.10", + "description": "Windows Event Log logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "859BAF5F7B66880559D2B0F56881F61C4980C727BB927DE2BAF868829EC2779F809F7B5263E353E9F1868F676AD19816B824B42955E5792D3216B4E53DA05A4D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventSource", + "version": "10.0.10", + "description": "EventSource/EventListener logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "251D1821F49878B2F829F7A625A26B6F94CD9E2AD218B830859FB1137448EDFAE5CAEA267C459B02E23F09AD9E72A9A5EF491E5B25390FECFB958EB363534211" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options", + "version": "10.0.10", + "description": "Provides a strongly typed way of specifying and accessing settings using dependency injection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "538322A27FD9BB004C4C3FC21FC584EC08EDE88740B54DC95CBC241B553339633594D167A0EF0D02E42D6482CDA642B218414FF6DEC5BD06A48079CC0948D929" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options.ConfigurationExtensions", + "version": "10.0.10", + "description": "Provides additional configuration specific functionality related to Options.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "07F056E666E542729A25A06C672DF351373F9D5029BCA0D14AD3AD08DAE2CCA903E776B23E6DE3BBE5051DA68876CBC003F7AFD2EF4C08E7B32E60033465A45A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Primitives", + "version": "10.0.10", + "description": "Primitives shared by framework extensions. Commonly used types include:\n\nCommonly Used Types:\nMicrosoft.Extensions.Primitives.IChangeToken\nMicrosoft.Extensions.Primitives.StringValues\nMicrosoft.Extensions.Primitives.StringSegment", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "B3F778D24AFDF4711BEBA10DE673F9EB3ABAEC108B86862FDF1DE64F554B543A503FB3BBB0ABC38E0AF8B800EF39D3660FC660943235C734786FAEB11D4FAD64" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.ILLink.Tasks", + "version": "10.0.10", + "description": "MSBuild tasks for running the IL Linker", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "804F0EEC3AD1008DD08ABDF24B3BDD465EC3CD57FC5EB15F234BDB5179761878A6DDD30F755A25F43C70361FD3CEAF729A8935294FB6C2EDAAAC5E6358DBF5A5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.Test.Sdk", + "version": "18.8.1", + "description": "The MSbuild targets and properties for building .NET test projects.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "ED924163245F79A57884396548B55BEDDB4B5D06F84A96C0872FACF5273E754576CF00D44D326D3CB6138DA9D2E64AAA9BEDBCDCD371218E36EF5B946343EF8F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.Telemetry", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides telemetry for the platform.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C5E54A968FD412E4CE2DCC98EBC3C9154FE2D49E2E5C539CE1460CF01A9D8FD4197D90EA5ACE8A9574368DB629FFBD224B273BE242083050087A2BD60FB7D917" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.TrxReport.Abstractions", + "version": "1.9.1", + "description": "Package Description", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "665DC7C980F6089E8AD472201353A0BAC308BC55976603332BF8E568247FBD3C1FC644C9A904AE9F800E50968D2EF02D735ADA4616E8FC9C75CB18290A7540EC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides the core platform and the .NET implementation of the protocol.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "10C89A7E4A01422839D3EE8DDE9FD6B1E8C8504A082573A1209398434AD1436FB2774BB96C969CC1E6079B123483303224DE3273F8346F00ED151F2F4F361A4B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform.MSBuild", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides MSBuild integration of the platform, its extensions and configuration files.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "568901EC1C20B98D48692E6F182260177105A4C0BE28903805AC3F052D340D6D4B6C6A11F5931B23D10078FF0A70BB654FF606E8BB8C743DEEC1C1CDB8F36A1D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.ObjectModel", + "version": "18.8.1", + "description": "The Microsoft Test Platform Object Model.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "FA783FB4A40D48E96B1901D473BD83DDC83AD873D58B05D7042D05A1E10EEA6D6EE07E130A3213272E989B56C2F05A258F43004F4637DB7EA132D63AEF31A985" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.TestHost", + "version": "18.8.1", + "description": "Testplatform host executes the test using specified adapter.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "46D7AB005785910C271F30A658151CB71107FD87A78F7F7DE78811E49EC8657424E68901BFA943DD73AFD2E18645ED361294638436B01DA1945C7A4504A7C8DE" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Win32.Registry", + "version": "5.0.0", + "description": "Provides support for accessing and modifying the Windows Registry.\n\nCommonly Used Types:\nMicrosoft.Win32.RegistryKey\nMicrosoft.Win32.Registry\nMicrosoft.Win32.RegistryValueKind\nMicrosoft.Win32.RegistryHive\nMicrosoft.Win32.RegistryView\n \nWhen using NuGet 3.x this package requires at least version 3.4.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "471E66567CE59CC86475AECE7815D05261264CE114E0C1688BA2551DD51494901FA72DD7A8F74F8E8F0F3DBA74AF8595F177552F3C06ABB4BFCE76692197076E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/dotnet/runtime", + "type": "website" + }, + { + "url": "git://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLite@3.53.4", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLite", + "version": "3.53.4", + "description": "This package contains builds of the native SQLite code for various platforms. \n These builds have \u0022e_sqlite3\u0022 as the base name. The first three numbers in the version number of this package indicate the version of SQLite that was used to build it. The fourth number, if there is one, is incremented as needed for packaging-specific changes.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "81D145648BACFF3B4C8CD1794DF9956C47B229264467AA7001EA9A306E429CEB2855EC9296509541C82FC3C9BCFF04617AB3E86169932700BDAD5B0C03C482EF" + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLite@3.53.4", + "externalReferences": [ + { + "url": "https://sqlite.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.bundle_e_sqlite3", + "version": "3.0.5", + "description": "This \u0027batteries-included\u0027 bundle brings in SQLitePCLRaw.core and the necessary stuff for certain common use cases. Call SQLitePCL.Batteries.Init().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "12F980014C25F0C3E20C7B331418933FC84C7635B65597CEAB09C20EA00C055043C866BEF8614EA6BC38D7A484D8FF339D4387BBE760BC892F4E2702CD23AB2F" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.config.e_sqlite3", + "version": "3.0.5", + "description": "This package sets the configuration for using e_sqlite3 but does not bring in that native library itself. It\u0027s like bundle_e_sqlite3, except it\u0027s hollow.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A25E95EE323DDFEB8FC920D26551B4AFED854A3D9DDA833C3507331AB2043E0C9F16D62C2100560373AFC20E54D3F69F42ABDD6DA6E75EF7DCC0EA861B5AF12" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.core", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. This package does not provide an API which is friendly to app developers. Rather, it provides an API which handles platform and configuration issues, upon which a friendlier API can be built. In order to use this package, you will need to also add one of the SQLitePCLRaw.provider.* packages and call raw.SetProvider().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "24209D65527E0F82BB4E151B610195D39CB4732891CE1F0E2BA0965371DA381F1E636CD9256AE7DC5B76C604E36D33B7CA63AFDE09E6A8A40A9B2FCB5F01AA03" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.provider.e_sqlite3", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. Packages named \u0027SQLitePCLRaw.provider.*\u0027 (like this one) are \u0027plugins\u0027 that allow SQLitePCLRaw.core to access the native SQLite library. This provider does DllImport of \u0027e_sqlite3\u0027, the SQLite builds provided with SQLitePCLRaw.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "716EE95A124695CE5B2E2C834509E66991585B5AD1843B4CC6D135FE078DFE2D2E867A2E83978DEF09B8691833370803251F792537E59203455054AC24F82CC9" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "System.Diagnostics.EventLog", + "version": "10.0.10", + "description": "Provides the System.Diagnostics.EventLog class, which allows the applications to use the Windows event log service.\n\nCommonly Used Types:\nSystem.Diagnostics.EventLog", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F98A922C208C90F09A247CF2C251048B3EBADD8633787F967E5701427765C77C298F40E54A8D2BF5EBFEF729EFD3E8CFC5C17EFDD5F2CD80184532C24B5A481A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.analyzers@1.27.0", + "authors": [ + { + "name": "jnewkirk,bradwilson,marcind" + } + ], + "name": "xunit.analyzers", + "version": "1.27.0", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features.\n\nInstalling this package provides code analyzers to help developers find and fix frequent issues when writing tests and xUnit.net extensibility code.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2B920EDBD64D376C9D7B3DA38654D1B11DB4CA5A7F79032B320A289DF229BFD73DB1604DE8C5D120F196C6FBA8B688EE493DC7814F5EFD7EE5E3F56238B3C1BF" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.analyzers@1.27.0", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit.analyzers", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.runner.visualstudio", + "version": "3.1.5", + "description": "Visual Studio 2022\u002B Test Explorer runner for the xUnit.net framework. Capable of running xUnit.net v1, v2, and v3 tests. Supports .NET 4.7.2 or later, and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FFB6F37D917B54777C124986C2F3421CEB2FDD62561B352BDAB588AFEF58A8CCF857A8CE0468EB87BA3908261F396FEC18E9D81FDB993D10D4B2F2337A9A5BD" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "externalReferences": [ + { + "url": "https://github.com/xunit/visualstudio.xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.mtp-v1.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "9612F4811FCE910665551AC371386B7460BC118A39D78892C357093F92AAA9EA1A5DC21E2F939AE3FF0D599C9C62749A2F95871226E60AFA2A9807EB26BBF7D6" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.assert", + "version": "3.2.2", + "description": "Includes the assertion library from xUnit.net (xunit.v3.assert.dll). Supports .NET Standard 2.0 and .NET 8.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A1ABD3FA034E80012F33D59E5172B1E8D8C35DF57F3DAEA5982B8F9DDAC12FFF61B4B2C7585820077B1895B6C020AA71E80591FB51ABE1D99C08275C3573E7A" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.assert@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.common", + "version": "3.2.2", + "description": "Includes common code shared between xunit.v3.core and xunit.v3.runner.common (xunit.v3.common.dll). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A0FD19A2858C335F0EB5B6A246CDF1FD9B567484A3E60EDC736ACFB7CAFA04B90E874B485A22C4BF2377469B1AFF7658596C35282859F1D20137B913996AB0FC" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.core.mtp-v1", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for writing tests; extensibility authors should include xunit.v3.extensibility.core instead. Includes support for Microsoft.Testing.Platform v1. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "457A8F4EF036556D0181BB56D54A45950EFC6BBCB69EDDBEC341F0972AC086418CE6BB48655435BFA987DDC0CD5B97D97E26B0D57A589455C4248C54404B164B" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.extensibility.core", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for extensibility; test authors should include xunit.v3.core instead. Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DBD2BF9A1557CEBA2EE86994EAFC086F895691C97C03A125176DD2DC1CB497E10383022FF014FA8A30171D7446C794795B97DEED16EA70562768151A0A4DC3A2" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.mtp-v1", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.core.mtp-v1, xunit.v3.assert, and xunit.analyzers.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A1AF2350710CB1571CF31AF92BDFD2A835ADD5E90BCC132ADBB1E11ECA87CC1A3F0382D2A4AC6E8FA82E0E51F4D77FFAD71802A9A6F25DE936BF2280750104ED" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.common", + "version": "3.2.2", + "description": "Includes common code shared between in-process runners (like xunit.v3.runner.inproc.console) and xunit.v3.runner.utility (used by 1st and 3rd party external runners). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "226D0BA70448F5345532D159340CA70E0D4B08B766FFC9C97AEE33F86C7715AAF3A916A610322DB805AFEBA56FC1323480ADF7F125B8A960C51FBA4F266AEFB0" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.inproc.console", + "version": "3.2.2", + "description": "In-process console runner for xUnit.net framework, providing the entrypoint for self-executing unit tests. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB9F10495A9497A07232E3739FCAFE3ADB923F097314F2EF6BC1DA0E85EBA69353F8618136E0274A45EF9992FE4B2232A82F626D5DF8CA0124039C6CAE66C2FE" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/System.Diagnostics.EventLog@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLite@3.53.4", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLite@3.53.4", + "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.analyzers@1.27.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.analyzers@1.27.0", + "pkg:nuget/xunit.v3.assert@3.2.2", + "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.mtp-v1@3.2.2" + ] + }, + { + "ref": "ServerMonitorManager@0.0.0", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "pkg:nuget/xunit.v3@3.2.2" + ] + } + ] +} \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/smm-setup.sh b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/smm-setup.sh new file mode 100644 index 0000000..d4ec066 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/smm-setup.sh @@ -0,0 +1,102 @@ +#!/usr/bin/env bash +set -Eeuo pipefail +IFS=$'\n\t' + +readonly PROGRAM_NAME="smm-setup" +readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.12" +readonly DEFAULT_REPOSITORY="ochenstarik-ui/server-monitor-manager" +readonly INNER_ASSET="ochenstarik-server-monitor-manager.sh" + +RELEASE_TAG="${SMM_TAG:-$DEFAULT_RELEASE_TAG}" +REPOSITORY="${SMM_REPOSITORY:-$DEFAULT_REPOSITORY}" +CACHE_DIR="${SMM_CACHE_DIR:-${XDG_CACHE_HOME:-$HOME/.cache}/server-monitor-manager}" + +usage() { + cat <<'USAGE' +Usage: + smm-setup.sh [--tag TAG] [--repository OWNER/REPO] COMMAND [ARG...] + +Commands are passed to the verified ochenstarik-server-monitor-manager.sh +asset from the selected immutable GitHub release. Common commands: + install-agent | install-control | uninstall-agent | uninstall-control + backup-create | backup-restore | version + +Environment overrides: + SMM_TAG Release tag (default: v0.1.0-alpha.12) + SMM_REPOSITORY GitHub repository (default: ochenstarik-ui/server-monitor-manager) + SMM_CACHE_DIR Verified-download cache directory +USAGE +} + +die() { + printf '%s: %s\n' "$PROGRAM_NAME" "$*" >&2 + exit 1 +} + +require_command() { + command -v "$1" >/dev/null 2>&1 || die "required command is unavailable: $1" +} + +while [[ $# -gt 0 ]]; do + case "$1" in + --tag) + [[ $# -ge 2 ]] || die '--tag requires a value' + RELEASE_TAG="$2" + shift 2 + ;; + --repository) + [[ $# -ge 2 ]] || die '--repository requires a value' + REPOSITORY="$2" + shift 2 + ;; + -h|--help) + usage + exit 0 + ;; + --) + shift + break + ;; + -*) + die "unknown option: $1" + ;; + *) + break + ;; + esac +done + +[[ $# -gt 0 ]] || { + usage >&2 + exit 2 +} +[[ "$RELEASE_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.-]+)?$ ]] \ + || die "invalid release tag: $RELEASE_TAG" +[[ "$REPOSITORY" =~ ^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$ ]] \ + || die "invalid repository: $REPOSITORY" + +require_command curl +require_command sha256sum +require_command mktemp + +release_base="https://github.com/$REPOSITORY/releases/download/$RELEASE_TAG" +cache_release="$CACHE_DIR/$REPOSITORY/$RELEASE_TAG" +cached_script="$cache_release/$INNER_ASSET" +cached_checksum="$cache_release/$INNER_ASSET.sha256" +mkdir -p "$cache_release" + +temporary_directory="$(mktemp -d -t smm-setup.XXXXXXXX)" +trap 'rm -rf -- "$temporary_directory"' EXIT + +curl -fsSL "$release_base/$INNER_ASSET" -o "$temporary_directory/$INNER_ASSET" +curl -fsSL "$release_base/$INNER_ASSET.sha256" -o "$temporary_directory/$INNER_ASSET.sha256" + +( + cd "$temporary_directory" + sha256sum -c "$INNER_ASSET.sha256" +) || die "checksum verification failed for $RELEASE_TAG/$INNER_ASSET" + +install -m 0755 "$temporary_directory/$INNER_ASSET" "$cached_script" +install -m 0644 "$temporary_directory/$INNER_ASSET.sha256" "$cached_checksum" + +exec "$cached_script" "$@" diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/smm-setup.sh.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/smm-setup.sh.sha256 new file mode 100644 index 0000000..aa161b3 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.12/assets/smm-setup.sh.sha256 @@ -0,0 +1 @@ +58f225d5091e6e9e2502031ad6d226daf70483efa021a53f4c042966bde0248d smm-setup.sh diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/ASSET_LIST.txt b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/ASSET_LIST.txt new file mode 100644 index 0000000..8c2d470 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/ASSET_LIST.txt @@ -0,0 +1,16 @@ +ochenstarik-server-monitor-manager.sh +ochenstarik-server-monitor-manager.sh.sha256 +server-monitor-manager-linux-arm64.tar.gz +server-monitor-manager-linux-arm64.tar.gz.sha256 +server-monitor-manager-linux-arm64-sbom.json +server-monitor-manager-linux-x64.tar.gz +server-monitor-manager-linux-x64.tar.gz.sha256 +server-monitor-manager-linux-x64-sbom.json +server-monitor-manager-manifest.json +server-monitor-manager-manifest.sig +ServerMonitorManager-test-signing.cer +ServerMonitorManager-win-x64.msix +server-monitor-manager-win-x64-sbom.json +SHA256SUMS +smm-setup.sh +smm-setup.sh.sha256 diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/ASSET_SHA256SUMS b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/ASSET_SHA256SUMS new file mode 100644 index 0000000..48ca4da --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/ASSET_SHA256SUMS @@ -0,0 +1,16 @@ +77899bc545eadb591f0e311b4998b09cbf279eb17aa6d6073009ca4f3617f3a4 *ochenstarik-server-monitor-manager.sh +ca659baaf321cdfcaef749fe253a836f5a65700094469720cedcc325ef8bba8e *ochenstarik-server-monitor-manager.sh.sha256 +1cf8fb84957d0b4290be677c6ad102b65f46895128f70680b62d2af36e211935 *server-monitor-manager-linux-arm64.tar.gz +8b60a7b173b26afe5567cfad349ecbb25efc59dfb827ce8c6554207f517cbca3 *server-monitor-manager-linux-arm64.tar.gz.sha256 +3f3a382927c5a59d9b52386972c825ae4f65fc67a22331dbf16f0d8f0ae12598 *server-monitor-manager-linux-arm64-sbom.json +bf2ce4404c13791bb19539d6cc259ec79a228c38b5aa02d0b723fc73a312a0a8 *server-monitor-manager-linux-x64.tar.gz +6cab270f005d263fa5ff4c2533d3d693501062ff913af7c3e1f84a9e1fe0d1b4 *server-monitor-manager-linux-x64.tar.gz.sha256 +08ac7aa6b7f543bf89cf0b2ad56bc73adac3b63cc44c5eb511d53dd15efc33a0 *server-monitor-manager-linux-x64-sbom.json +fbc9f67047afa05215cdc0f372e44dc2cd5e70f82b6f8b2c77d3b9806f5be222 *server-monitor-manager-manifest.json +c581456765e32c03edff5ad8c2b46005a10e5c77f4362672041f8e7f2ea7cf39 *server-monitor-manager-manifest.sig +039db7f84da170cde89695fa843e154147432f3036da16652a0d16d4dc016cc1 *ServerMonitorManager-test-signing.cer +d2a35c96f736111ac1a0e5f45bcd8b50226601bd5d2272965b0df19891caab74 *ServerMonitorManager-win-x64.msix +19fb43f551d4dca657e450b5cc8bf601b73a2241e1548ba8c8d4bc1274d2773b *server-monitor-manager-win-x64-sbom.json +dd9cef06dd328c8da5492e55d5ea6572b1b9b5fa57d6940d25cbf4d9fc6d79cc *SHA256SUMS +f387419eafe82e10104b2904585af12ea3e9420cc5658b8469699c1aba15aa41 *smm-setup.sh +2f7f0929b2f636a69cf5d4e23d8c2a4cc91d0e88831abb062504954a650bf3ae *smm-setup.sh.sha256 diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/COSIGN_VERIFICATION.txt b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/COSIGN_VERIFICATION.txt new file mode 100644 index 0000000..e69de29 diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/RELEASE_METADATA.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/RELEASE_METADATA.json new file mode 100644 index 0000000..de7b4c2 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/RELEASE_METADATA.json @@ -0,0 +1 @@ +{"assets":[{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629427","contentType":"application/x-sh","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:77899bc545eadb591f0e311b4998b09cbf279eb17aa6d6073009ca4f3617f3a4","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhqz","label":"","name":"ochenstarik-server-monitor-manager.sh","size":66082,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/ochenstarik-server-monitor-manager.sh"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629424","contentType":"application/octet-stream","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:ca659baaf321cdfcaef749fe253a836f5a65700094469720cedcc325ef8bba8e","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhqw","label":"","name":"ochenstarik-server-monitor-manager.sh.sha256","size":104,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/ochenstarik-server-monitor-manager.sh.sha256"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629430","contentType":"application/json","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:3f3a382927c5a59d9b52386972c825ae4f65fc67a22331dbf16f0d8f0ae12598","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhq2","label":"","name":"server-monitor-manager-linux-arm64-sbom.json","size":93523,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/server-monitor-manager-linux-arm64-sbom.json"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629429","contentType":"application/gzip","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:1cf8fb84957d0b4290be677c6ad102b65f46895128f70680b62d2af36e211935","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhq1","label":"","name":"server-monitor-manager-linux-arm64.tar.gz","size":24429187,"state":"uploaded","updatedAt":"2026-08-13T07:01:43Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/server-monitor-manager-linux-arm64.tar.gz"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629425","contentType":"application/octet-stream","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:8b60a7b173b26afe5567cfad349ecbb25efc59dfb827ce8c6554207f517cbca3","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhqx","label":"","name":"server-monitor-manager-linux-arm64.tar.gz.sha256","size":108,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/server-monitor-manager-linux-arm64.tar.gz.sha256"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629423","contentType":"application/json","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:08ac7aa6b7f543bf89cf0b2ad56bc73adac3b63cc44c5eb511d53dd15efc33a0","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhqv","label":"","name":"server-monitor-manager-linux-x64-sbom.json","size":93523,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/server-monitor-manager-linux-x64-sbom.json"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629434","contentType":"application/gzip","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:bf2ce4404c13791bb19539d6cc259ec79a228c38b5aa02d0b723fc73a312a0a8","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhq6","label":"","name":"server-monitor-manager-linux-x64.tar.gz","size":25369575,"state":"uploaded","updatedAt":"2026-08-13T07:01:43Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/server-monitor-manager-linux-x64.tar.gz"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629428","contentType":"application/octet-stream","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:6cab270f005d263fa5ff4c2533d3d693501062ff913af7c3e1f84a9e1fe0d1b4","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhq0","label":"","name":"server-monitor-manager-linux-x64.tar.gz.sha256","size":106,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/server-monitor-manager-linux-x64.tar.gz.sha256"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629433","contentType":"application/json","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:fbc9f67047afa05215cdc0f372e44dc2cd5e70f82b6f8b2c77d3b9806f5be222","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhq5","label":"","name":"server-monitor-manager-manifest.json","size":1185,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/server-monitor-manager-manifest.json"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629432","contentType":"application/pgp-signature","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:c581456765e32c03edff5ad8c2b46005a10e5c77f4362672041f8e7f2ea7cf39","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhq4","label":"","name":"server-monitor-manager-manifest.sig","size":96,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/server-monitor-manager-manifest.sig"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629421","contentType":"application/json","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:19fb43f551d4dca657e450b5cc8bf601b73a2241e1548ba8c8d4bc1274d2773b","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhqt","label":"","name":"server-monitor-manager-win-x64-sbom.json","size":96337,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/server-monitor-manager-win-x64-sbom.json"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629426","contentType":"application/pkix-cert","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:039db7f84da170cde89695fa843e154147432f3036da16652a0d16d4dc016cc1","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhqy","label":"","name":"ServerMonitorManager-test-signing.cer","size":1026,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/ServerMonitorManager-test-signing.cer"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629435","contentType":"application/msix","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:d2a35c96f736111ac1a0e5f45bcd8b50226601bd5d2272965b0df19891caab74","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhq7","label":"","name":"ServerMonitorManager-win-x64.msix","size":29610895,"state":"uploaded","updatedAt":"2026-08-13T07:01:43Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/ServerMonitorManager-win-x64.msix"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629431","contentType":"application/octet-stream","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:dd9cef06dd328c8da5492e55d5ea6572b1b9b5fa57d6940d25cbf4d9fc6d79cc","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhq3","label":"","name":"SHA256SUMS","size":100,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/SHA256SUMS"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629422","contentType":"application/x-sh","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:f387419eafe82e10104b2904585af12ea3e9420cc5658b8469699c1aba15aa41","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhqu","label":"","name":"smm-setup.sh","size":2987,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/smm-setup.sh"},{"apiUrl":"https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/512629420","contentType":"application/octet-stream","createdAt":"2026-08-13T07:01:42Z","digest":"sha256:2f7f0929b2f636a69cf5d4e23d8c2a4cc91d0e88831abb062504954a650bf3ae","downloadCount":0,"id":"RA_kwDOTX_v0M4ejhqs","label":"","name":"smm-setup.sh.sha256","size":79,"state":"uploaded","updatedAt":"2026-08-13T07:01:42Z","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.13/smm-setup.sh.sha256"}],"isDraft":false,"isPrerelease":true,"publishedAt":"2026-08-13T07:01:41Z","tagName":"v0.1.0-alpha.13","targetCommitish":"main","url":"https://github.com/ochenstarik-ui/server-monitor-manager/releases/tag/v0.1.0-alpha.13"} diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/SHA256SUMS b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/SHA256SUMS new file mode 100644 index 0000000..159ca65 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/SHA256SUMS @@ -0,0 +1 @@ +d2a35c96f736111ac1a0e5f45bcd8b50226601bd5d2272965b0df19891caab74 *ServerMonitorManager-win-x64.msix diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/ServerMonitorManager-test-signing.cer b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/ServerMonitorManager-test-signing.cer new file mode 100644 index 0000000..e15732f Binary files /dev/null and b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/ServerMonitorManager-test-signing.cer differ diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/ochenstarik-server-monitor-manager.sh b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/ochenstarik-server-monitor-manager.sh new file mode 100644 index 0000000..5485426 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/ochenstarik-server-monitor-manager.sh @@ -0,0 +1,1516 @@ +#!/usr/bin/env bash +set -Eeuo pipefail +IFS=$'\n\t' + +readonly PROGRAM="ochenstarik-server-monitor-manager" +readonly PROGRAM_VERSION="0.2.0-dev" +readonly ETC_DIR="/etc/ochenstarik-server-monitor-manager" +readonly LIB_DIR="/usr/local/lib/ochenstarik-server-monitor-manager" +readonly STATE_DIR="/var/lib/ochenstarik-server-monitor-manager" +readonly ENROLLMENT_DIR="${STATE_DIR}-enrollment" +readonly BACKUP_DIR="${STATE_DIR}/bootstrap-backups" +readonly CONTROL_USER="ochenstarik-smm-control" +readonly AGENT_USER="ochenstarik-smm-agent" +readonly CONTROL_UNIT="ochenstarik-smm-control.service" +readonly AGENT_UNIT="ochenstarik-smm-agent.service" +readonly PROVISIONING_HELPER_UNIT="ochenstarik-smm-provisioning-helper.service" +readonly POLICY_HELPER="/usr/local/libexec/ochenstarik-smm-policy-apply" +readonly EMERGENCY_COMMAND="/usr/local/sbin/ochenstarik-smm-emergency" +readonly BOOTSTRAP_COMMAND="/usr/local/sbin/ochenstarik-server-monitor-manager.sh" +readonly SUDOERS_FILE="/etc/sudoers.d/ochenstarik-smm-control" +readonly MESH_DIR="${STATE_DIR}/mesh" +readonly WG_DIR="${ETC_DIR}/wireguard" +readonly FIREWALL_UNIT="ochenstarik-smm-firewall.service" +readonly MESH_NETWORK="10.77.0.0/24" +readonly HUB_MESH_ADDRESS="10.77.0.1/24" +# Trust anchors — see docs/release-policy.md for the full signing and identity contract. +readonly COSIGN_ISSUER="https://token.actions.githubusercontent.com" +readonly COSIGN_IDENTITY_REGEXP="^https://github.com/ochenstarik-ui/server-monitor-manager/\.github/workflows/linux-release\.yml@refs/tags/v.*$" + +TEMP_DIR="" +MESH_PEER_CODE="" +ENROLLMENT_TOKEN_FILE="" +ENROLLMENT_TOKEN_TEMP="" +CONTROL_UPDATE_BACKUP_ID="" +CONTROL_UPDATE_RECOVERY_REQUIRED=0 +CONTROL_UPDATE_LEGACY_ITEMS=() + +log() { printf '%s\n' "[$PROGRAM] $*"; } +fail() { printf '%s\n' "[$PROGRAM] ERROR: $*" >&2; exit 1; } + +cleanup() { + local status=$? + trap - EXIT + if [[ "$CONTROL_UPDATE_RECOVERY_REQUIRED" == "1" ]]; then + log "Control update failed; restoring the pre-update state." + if recover_control_update "$CONTROL_UPDATE_BACKUP_ID"; then + log "Control recovery completed." + else + printf '%s\n' "[$PROGRAM] ERROR: Automatic Control recovery failed; manual recovery is required." >&2 + status=1 + fi + fi + if [[ -n "$ENROLLMENT_TOKEN_FILE" ]]; then + rm -f -- "$ENROLLMENT_TOKEN_FILE" + fi + if [[ -n "$ENROLLMENT_TOKEN_TEMP" ]]; then + rm -f -- "$ENROLLMENT_TOKEN_TEMP" + fi + if [[ -n "$TEMP_DIR" && -d "$TEMP_DIR" ]]; then + rm -rf -- "$TEMP_DIR" + fi + exit "$status" +} +trap cleanup EXIT + +usage() { + cat <<'EOF' +Server Monitor Manager Linux bootstrap + +Usage: + ochenstarik-server-monitor-manager.sh preflight + ochenstarik-server-monitor-manager.sh verify-release ARCHIVE + ochenstarik-server-monitor-manager.sh install-control ARCHIVE PUBLIC_HOST [HTTPS_PORT] + ochenstarik-server-monitor-manager.sh install-agent ARCHIVE NODE_ID CONTROL_URL CA_CERT + ochenstarik-server-monitor-manager.sh install-node ARCHIVE + ochenstarik-server-monitor-manager.sh verify-manifest MANIFEST SIGNATURE + ochenstarik-server-monitor-manager.sh mesh-init PUBLIC_ENDPOINT [WG_PORT] + ochenstarik-server-monitor-manager.sh peer-add SMMPEER1_CODE + ochenstarik-server-monitor-manager.sh mesh-status + ochenstarik-server-monitor-manager.sh update-control ARCHIVE + ochenstarik-server-monitor-manager.sh update-agent ARCHIVE + ochenstarik-server-monitor-manager.sh rollback control|agent [BACKUP_ID] + ochenstarik-server-monitor-manager.sh node-code NODE_ID + ochenstarik-server-monitor-manager.sh control-device-code DEVICE_ID + ochenstarik-server-monitor-manager.sh node-token NODE_ID + ochenstarik-server-monitor-manager.sh control-ca-fingerprint + ochenstarik-server-monitor-manager.sh status + ochenstarik-server-monitor-manager.sh uninstall-agent [--purge] + ochenstarik-server-monitor-manager.sh uninstall-control --confirm-destroy-control + ochenstarik-server-monitor-manager.sh version + +ARCHIVE must have a matching ARCHIVE.sha256 file. Agent enrollment reads the +one-time token from SMM_ENROLL_TOKEN or from a hidden local prompt; it is never +written to agent.env. +EOF +} + +base64url_encode() { + base64 -w 0 | tr '+/' '-_' | tr -d '=' +} + +base64url_decode() { + local value="$1" remainder + [[ "$value" =~ ^[A-Za-z0-9_-]+$ ]] || fail "Enrollment code contains invalid base64url data." + remainder=$(( ${#value} % 4 )) + case "$remainder" in + 0) ;; + 2) value+="==" ;; + 3) value+="=" ;; + *) fail "Enrollment code contains invalid base64url length." ;; + esac + printf '%s' "$value" | tr '_-' '/+' | base64 -d +} + +require_root() { + [[ ${EUID:-$(id -u)} -eq 0 ]] || fail "This action must run as root (use sudo)." +} + +require_command() { + command -v "$1" >/dev/null 2>&1 || fail "Required command is missing: $1" +} + +validate_platform() { + [[ -r /etc/os-release ]] || fail "/etc/os-release is missing." + # shellcheck disable=SC1091 + . /etc/os-release + case "${ID:-}" in + ubuntu) + case "${VERSION_ID:-}" in 22.04|24.04) ;; *) fail "Unsupported Ubuntu version: ${VERSION_ID:-unknown}" ;; esac + ;; + debian) + case "${VERSION_ID:-}" in 12|13) ;; *) fail "Unsupported Debian version: ${VERSION_ID:-unknown}" ;; esac + ;; + *) fail "Unsupported distribution: ${ID:-unknown}" ;; + esac + case "$(uname -m)" in + x86_64|aarch64|arm64) ;; + *) fail "Unsupported architecture: $(uname -m)" ;; + esac + [[ "$(ps -p 1 -o comm=)" == "systemd" ]] || fail "systemd must be PID 1." +} + +# Release tags carry a leading "v" while some manifest fields and recorded values may not. +normalize_version() { + printf '%s' "${1#v}" +} + +# True when the first version orders strictly before the second. Lexicographic comparison is +# wrong here: "0.1.0-alpha.10" sorts before "0.1.0-alpha.9" as a string, which would reject +# every release after the ninth as a downgrade. +version_lt() { + local left right first + left="$(normalize_version "$1")" + right="$(normalize_version "$2")" + [[ "$left" != "$right" ]] || return 1 + first="$(printf '%s\n%s\n' "$left" "$right" | sort -V | head -n1)" + [[ "$first" == "$left" ]] +} + +installed_version_file() { + printf '%s' "$ETC_DIR/installed-version-$1" +} + +read_installed_version() { + local file + file="$(installed_version_file "$1")" + [[ -r "$file" ]] || return 0 + tr -d '\r\n' <"$file" +} + +record_installed_version() { + local role="$1" version="$2" file + [[ -n "$version" ]] || return 0 + file="$(installed_version_file "$role")" + install -d -m 0755 "$ETC_DIR" + printf '%s\n' "$version" >"$file" + chmod 0644 "$file" +} + +manifest_version_field() { + local manifest="$1" field="$2" + [[ -r "$manifest" ]] || return 0 + awk -F'"' -v key="$field" '$2 == key { print $4; exit }' "$manifest" || true +} + +# Version recorded for an archive being installed, empty when the release predates manifests. +archive_version() { + manifest_version_field "$(dirname "$1")/server-monitor-manager-manifest.json" version +} + +validate_node_id() { + [[ "$1" =~ ^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$ ]] \ + || fail "Node id must contain 1-63 lowercase letters, digits, or hyphens." +} + +validate_port() { + [[ "$1" =~ ^[0-9]{1,5}$ ]] && (( 10#$1 >= 1 && 10#$1 <= 65535 )) \ + || fail "Port must be in range 1-65535." +} + +validate_ipv4_literal() { + local address="$1" octet + local -a octets + IFS=. read -r -a octets <<<"$address" + (( ${#octets[@]} == 4 )) || fail "Control URL contains an invalid IPv4 host." + for octet in "${octets[@]}"; do + [[ "$octet" =~ ^[0-9]{1,3}$ ]] && (( 10#$octet <= 255 )) \ + || fail "Control URL contains an invalid IPv4 host." + done +} + +validate_control_url() { + local authority host port="" label left right compressed=0 ipv4_groups=0 group_count last_group_index + local -a groups labels right_groups + [[ "$1" == https://* ]] || fail "Control URL must be an https URL without a path or credentials." + authority="${1#https://}" + authority="${authority%/}" + [[ -n "$authority" && "$authority" != *['/?#@']* ]] \ + || fail "Control URL must be an https URL without a path or credentials." + + if [[ "$authority" == \[* ]]; then + [[ "$authority" =~ ^\[([0-9A-Fa-f:.]+)\](:([0-9]+))?$ ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + host="${BASH_REMATCH[1]}" + port="${BASH_REMATCH[3]:-}" + [[ "$host" == *:* ]] || fail "Control URL contains an invalid bracketed IPv6 authority." + [[ "$host" != *:::* ]] || fail "Control URL contains an invalid bracketed IPv6 authority." + [[ "$host" != :* || "$host" == ::* ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + [[ "$host" != *: || "$host" == *:: ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + groups=() + if [[ "$host" == *::* ]]; then + compressed=1 + [[ "${host/::/}" != *::* ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + left="${host%%::*}" + right="${host#*::}" + if [[ -n "$left" ]]; then + IFS=: read -r -a groups <<<"$left" + fi + if [[ -n "$right" ]]; then + IFS=: read -r -a right_groups <<<"$right" + groups+=("${right_groups[@]}") + fi + else + IFS=: read -r -a groups <<<"$host" + fi + if (( ${#groups[@]} > 0 )) && [[ "${groups[${#groups[@]}-1]}" == *.* ]]; then + last_group_index=$(( ${#groups[@]} - 1 )) + validate_ipv4_literal "${groups[$last_group_index]}" + unset "groups[$last_group_index]" + ipv4_groups=2 + fi + for label in "${groups[@]}"; do + [[ "$label" =~ ^[0-9A-Fa-f]{1,4}$ ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + done + group_count=$(( ${#groups[@]} + ipv4_groups )) + if (( compressed == 1 )); then + (( group_count < 8 )) || fail "Control URL contains an invalid bracketed IPv6 authority." + else + (( group_count == 8 )) || fail "Control URL contains an invalid bracketed IPv6 authority." + fi + else + [[ "$authority" != *:*:* ]] \ + || fail "Control URL IPv6 authorities must use balanced brackets." + if [[ "$authority" == *:* ]]; then + host="${authority%%:*}" + port="${authority#*:}" + [[ -n "$port" ]] || fail "Control URL contains an invalid port." + else + host="$authority" + fi + [[ "$host" =~ ^[A-Za-z0-9]([A-Za-z0-9.-]*[A-Za-z0-9])?$ ]] \ + || fail "Control URL contains an invalid DNS or IPv4 host." + [[ ${#host} -le 253 && "$host" != *..* ]] \ + || fail "Control URL contains an invalid DNS or IPv4 host." + IFS=. read -r -a labels <<<"$host" + for label in "${labels[@]}"; do + [[ ${#label} -le 63 && "$label" =~ ^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?$ ]] \ + || fail "Control URL contains an invalid DNS or IPv4 host." + done + if [[ "$host" =~ ^[0-9.]+$ ]]; then + validate_ipv4_literal "$host" + fi + fi + [[ -n "$host" ]] || fail "Control URL host is empty." + [[ -z "$port" ]] || validate_port "$port" +} + +verify_manifest() { + local manifest="$1" signature="$2" + if [[ "${SMM_ALLOW_UNSIGNED:-0}" == "1" ]]; then + log "WARNING: Signature verification skipped due to SMM_ALLOW_UNSIGNED=1." + return 0 + fi + require_command cosign + [[ -f "$manifest" ]] || fail "Manifest not found: $manifest" + [[ -f "$signature" ]] || fail "Signature not found: $signature" + log "Verifying manifest signature..." + local verify_args=(--certificate-oidc-issuer "$COSIGN_ISSUER" --certificate-identity-regexp "$COSIGN_IDENTITY_REGEXP") + if [[ -n "${SMM_TEST_PUBKEY:-}" ]]; then + verify_args=(--key "$SMM_TEST_PUBKEY" --insecure-ignore-tlog) + log "WARNING: Using test public key for verification. This must NOT happen in production." + fi + if ! cosign verify-blob "${verify_args[@]}" \ + --signature "$signature" "$manifest" >/dev/null 2>&1; then + fail "Manifest signature verification failed." + fi + log "Manifest signature is valid." +} + +verify_archive() { + local archive="$1" expected actual entry manifest signature + [[ -f "$archive" ]] || fail "Archive not found: $archive" + manifest="$(dirname "$archive")/server-monitor-manager-manifest.json" + signature="$(dirname "$archive")/server-monitor-manager-manifest.sig" + + if [[ -f "$manifest" && -f "$signature" ]]; then + verify_manifest "$manifest" "$signature" + local archive_basename + archive_basename="$(basename "$archive")" + expected="$(awk -F'"' -v name="$archive_basename" '$2 == name {print $4}' "$manifest" || true)" + if [[ -z "$expected" && "$archive_basename" == ochenstarik-* ]]; then + expected="$(awk -F'"' -v name="${archive_basename#ochenstarik-}" '$2 == name {print $4}' "$manifest" || true)" + fi + [[ -n "$expected" ]] || fail "Could not extract archive hash from manifest." + else + if [[ "${SMM_ALLOW_UNSIGNED:-0}" == "1" ]]; then + log "WARNING: Manifest and signature not found, falling back to .sha256 file due to SMM_ALLOW_UNSIGNED=1." + local checksum_file="${archive}.sha256" + [[ -f "$checksum_file" ]] || fail "Checksum file not found: $checksum_file" + expected="$(awk 'NR == 1 { print $1 }' "$checksum_file")" + [[ "$expected" =~ ^[0-9a-fA-F]{64}$ ]] || fail "Invalid checksum file: $checksum_file" + else + fail "Manifest and signature are required for archive verification. Set SMM_ALLOW_UNSIGNED=1 to bypass." + fi + fi + + actual="$(sha256sum "$archive" | awk '{ print $1 }')" + [[ "${actual,,}" == "${expected,,}" ]] || fail "Archive checksum mismatch." + + while IFS= read -r entry; do + [[ -n "$entry" ]] || continue + [[ "$entry" != /* && "$entry" != *".."* ]] || fail "Unsafe archive entry: $entry" + case "$entry" in + agent|agent/*|control|control/*|provisioning-helper|provisioning-helper/*|deploy|deploy/*|bootstrap|bootstrap/*) ;; + *) fail "Unexpected archive entry: $entry" ;; + esac + done < <(tar -tzf "$archive") +} + +extract_archive() { + local archive="$1" + verify_archive "$archive" + TEMP_DIR="$(mktemp -d -t smm-bootstrap.XXXXXXXX)" + chmod 700 "$TEMP_DIR" + tar -xzf "$archive" -C "$TEMP_DIR" --no-same-owner --no-same-permissions + [[ -f "$TEMP_DIR/deploy/$CONTROL_UNIT" ]] || fail "Control systemd unit is missing from archive." + [[ -f "$TEMP_DIR/deploy/$AGENT_UNIT" ]] || fail "Agent systemd unit is missing from archive." + [[ -f "$TEMP_DIR/deploy/$PROVISIONING_HELPER_UNIT" ]] || fail "Provisioning helper systemd unit is missing from archive." + [[ -f "$TEMP_DIR/deploy/$FIREWALL_UNIT" ]] || fail "Mesh firewall systemd unit is missing from archive." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-policy-apply" ]] || fail "Policy helper is missing from archive." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-emergency" ]] || fail "Emergency command is missing from archive." +} + +verify_release_payload() { + local archive="$1" + require_command sha256sum + require_command tar + extract_archive "$archive" + [[ -x "$TEMP_DIR/control/ochenstarik-smm-control" ]] || fail "Control binary is missing." + [[ -x "$TEMP_DIR/agent/ochenstarik-smm-agent" ]] || fail "Agent binary is missing." + [[ -x "$TEMP_DIR/provisioning-helper/ochenstarik-smm-provisioning-helper" ]] || fail "Provisioning helper binary is missing." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-policy-apply" ]] || fail "Policy helper is missing." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-emergency" ]] || fail "Emergency recovery command is missing." + [[ -f "$TEMP_DIR/deploy/$FIREWALL_UNIT" ]] || fail "Mesh firewall unit is missing." + [[ -x "$TEMP_DIR/bootstrap/ochenstarik-server-monitor-manager.sh" ]] || fail "Packaged bootstrap is missing." + log "Release archive and checksum are valid." +} + +ensure_system_user() { + local user="$1" + if ! getent group "$user" >/dev/null; then + groupadd --system "$user" + fi + if ! id "$user" >/dev/null 2>&1; then + useradd --system --gid "$user" --home-dir /nonexistent --no-create-home --shell /usr/sbin/nologin "$user" + fi +} + +ensure_mesh_packages() { + local missing=0 command_name + for command_name in wg wg-quick nft ip; do + command -v "$command_name" >/dev/null 2>&1 || missing=1 + done + (( missing == 0 )) && return + require_command apt-get + log "Installing WireGuard/nftables dependencies." + DEBIAN_FRONTEND=noninteractive apt-get update + DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \ + wireguard-tools nftables iproute2 +} + +install_tree_atomic() { + local source="$1" destination="$2" owner="$3" staging + [[ -d "$source" ]] || fail "Release payload is missing: $source" + staging="${destination}.new.$$" + rm -rf -- "$staging" + install -d -m 0755 "$staging" + cp -a -- "$source/." "$staging/" + chown -R "$owner" "$staging" + find "$staging" -type d -exec chmod 0755 {} + + find "$staging" -type f -exec chmod 0644 {} + + find "$staging" -type f -name 'ochenstarik-smm-*' -exec chmod 0755 {} + + rm -rf -- "$destination" + mv -- "$staging" "$destination" +} + +create_backup() { + local role="$1" backup_id archive list=() + backup_id="$(date -u +%Y%m%dT%H%M%SZ)-${role}-$RANDOM" + install -d -m 0700 "$BACKUP_DIR" + archive="$BACKUP_DIR/${backup_id}.tar.gz" + case "$role" in + control) + list=( + "usr/local/lib/ochenstarik-server-monitor-manager/control" + "etc/ochenstarik-server-monitor-manager/control.env" + "etc/ochenstarik-server-monitor-manager/control-ca.pfx" + "etc/ochenstarik-server-monitor-manager/control-server.pfx" + "etc/systemd/system/$CONTROL_UNIT" + "usr/local/libexec/ochenstarik-smm-policy-apply" + "etc/sudoers.d/ochenstarik-smm-control" + ) + ;; + agent) + list=( + "usr/local/lib/ochenstarik-server-monitor-manager/agent" + "usr/local/lib/ochenstarik-server-monitor-manager/provisioning-helper" + "etc/ochenstarik-server-monitor-manager/agent.env" + "etc/ochenstarik-server-monitor-manager/control-ca.crt" + "etc/systemd/system/$AGENT_UNIT" + "etc/systemd/system/$PROVISIONING_HELPER_UNIT" + ) + ;; + *) fail "Unknown backup role: $role" ;; + esac + local existing=() item + for item in "${list[@]}"; do + [[ -e "/$item" ]] && existing+=("$item") + done + if (( ${#existing[@]} == 0 )); then + printf '%s\n' "empty" >"$BACKUP_DIR/${backup_id}.empty" + else + tar -C / -czf "$archive" -- "${existing[@]}" + chmod 0600 "$archive" + fi + printf '%s\n' "$backup_id" +} + +install_unit() { + local source="$1" unit="$2" + install -m 0644 "$source" "/etc/systemd/system/$unit" + systemctl daemon-reload +} + +install_bootstrap_command() { + local source="$TEMP_DIR/bootstrap/ochenstarik-server-monitor-manager.sh" staging + [[ -x "$source" ]] || fail "Packaged bootstrap is missing." + install -d -m 0755 "$(dirname "$BOOTSTRAP_COMMAND")" + staging="$(mktemp "$(dirname "$BOOTSTRAP_COMMAND")/.ochenstarik-server-monitor-manager.XXXXXXXX")" + if ! install -m 0755 -o root -g root "$source" "$staging"; then + rm -f -- "$staging" + fail "Could not stage the system bootstrap command." + fi + if ! mv -fT -- "$staging" "$BOOTSTRAP_COMMAND"; then + rm -f -- "$staging" + fail "Could not publish the system bootstrap command." + fi +} + +validate_control_state_migration() { + local name + for name in control.db control.db-wal control.db-shm; do + [[ ! -e "$STATE_DIR/$name" || ! -e "$STATE_DIR/control/$name" ]] \ + || fail "Both legacy and role-isolated Control state exist: $name" + done + [[ ! -e "$STATE_DIR/backups" || ! -e "$STATE_DIR/control/backups" ]] \ + || fail "Both legacy and role-isolated Control backup directories exist." +} + +record_control_legacy_state() { + local name + CONTROL_UPDATE_LEGACY_ITEMS=() + for name in control.db control.db-wal control.db-shm; do + [[ ! -e "$STATE_DIR/$name" ]] || CONTROL_UPDATE_LEGACY_ITEMS+=("$name") + done + [[ ! -e "$STATE_DIR/backups" ]] || CONTROL_UPDATE_LEGACY_ITEMS+=(backups) +} + +prepare_control_state() { + local name + install -d -m 0700 -o "$CONTROL_USER" -g "$CONTROL_USER" "$STATE_DIR/control" + for name in control.db control.db-wal control.db-shm; do + if [[ -e "$STATE_DIR/$name" ]]; then + mv -- "$STATE_DIR/$name" "$STATE_DIR/control/$name" + fi + done + if [[ -e "$STATE_DIR/backups" ]]; then + mv -- "$STATE_DIR/backups" "$STATE_DIR/control/backups" + fi + install -d -m 0700 -o "$CONTROL_USER" -g "$CONTROL_USER" "$STATE_DIR/control/backups" + chown -R "$CONTROL_USER:$CONTROL_USER" "$STATE_DIR/control" + find "$STATE_DIR/control" -type d -exec chmod 0700 {} + + find "$STATE_DIR/control" -type f -exec chmod 0600 {} + +} + +reverse_control_state_migration() { + local name source destination + for name in "${CONTROL_UPDATE_LEGACY_ITEMS[@]}"; do + source="$STATE_DIR/control/$name" + destination="$STATE_DIR/$name" + if [[ -e "$destination" ]]; then + [[ ! -e "$source" ]] || return 1 + continue + fi + [[ ! -e "$source" ]] || mv -- "$source" "$destination" || return 1 + done + rmdir "$STATE_DIR/control/backups" 2>/dev/null || true + rmdir "$STATE_DIR/control" 2>/dev/null || true +} + +restore_control_update_backup() { + local archive="$1" restore_root="${2:-/}" + [[ -f "$archive" ]] || return 1 + tar -C "$restore_root" -xzf "$archive" +} + +restore_control_binary_from_archive() { + local archive="$1" restore_root="${2:-/}" + [[ -f "$archive" ]] || return 1 + tar -C "$restore_root" -xzf "$archive" \ + usr/local/lib/ochenstarik-server-monitor-manager/control +} + +recover_control_update() { + local backup_id="$1" restore_root="${2:-/}" + local archive="$BACKUP_DIR/${backup_id}.tar.gz" + systemctl stop "$CONTROL_UNIT" 2>/dev/null || true + reverse_control_state_migration || return 1 + restore_control_update_backup "$archive" "$restore_root" || return 1 + systemctl daemon-reload || return 1 + systemctl start "$CONTROL_UNIT" || return 1 + systemctl is-active --quiet "$CONTROL_UNIT" +} + +validate_control_environment_migration() { + local env_file="$ETC_DIR/control.env" database_count backup_count database_value backup_value + [[ -f "$env_file" && ! -L "$env_file" ]] \ + || fail "Control environment is missing or unsafe." + database_count="$(grep -c '^Control__DatabasePath=' "$env_file" || true)" + backup_count="$(grep -c '^Control__BackupDirectory=' "$env_file" || true)" + [[ "$database_count" == 1 && "$backup_count" == 1 ]] \ + || fail "Control environment contains missing or conflicting state paths." + database_value="$(grep '^Control__DatabasePath=' "$env_file")" + backup_value="$(grep '^Control__BackupDirectory=' "$env_file")" + case "$database_value" in + "Control__DatabasePath=$STATE_DIR/control.db"|"Control__DatabasePath=$STATE_DIR/control/control.db") ;; + *) fail "Control environment contains an unsupported database path." ;; + esac + case "$backup_value" in + "Control__BackupDirectory=$STATE_DIR/backups"|"Control__BackupDirectory=$STATE_DIR/control/backups") ;; + *) fail "Control environment contains an unsupported backup path." ;; + esac +} + +rewrite_control_environment() { + local env_file="$ETC_DIR/control.env" staging line + staging="$(mktemp "$ETC_DIR/.control.env.XXXXXXXX")" + if ! while IFS= read -r line || [[ -n "$line" ]]; do + case "$line" in + Control__DatabasePath=*) printf 'Control__DatabasePath=%s/control/control.db\n' "$STATE_DIR" ;; + Control__BackupDirectory=*) printf 'Control__BackupDirectory=%s/control/backups\n' "$STATE_DIR" ;; + *) printf '%s\n' "$line" ;; + esac + done <"$env_file" >"$staging"; then + rm -f -- "$staging" + fail "Could not rewrite the Control environment." + fi + chown root:"$CONTROL_USER" "$staging" + chmod 0640 "$staging" + if ! mv -fT -- "$staging" "$env_file"; then + rm -f -- "$staging" + fail "Could not publish the Control environment." + fi +} + +write_mesh_firewall() { + cat >"$ETC_DIR/mesh.nft" <<'EOF' +table inet ochenstarik_smm { + chain links { + ct state established,related accept + counter drop + } + + chain mesh_forward { + type filter hook forward priority filter; policy accept; + iifname "smm0" oifname "smm0" jump links + } + } +EOF + chmod 0644 "$ETC_DIR/mesh.nft" + if ! nft list table inet ochenstarik_smm >/dev/null 2>&1; then + nft --check -f "$ETC_DIR/mesh.nft" + fi +} + +read_mesh_value() { + local key="$1" + [[ -r "$ETC_DIR/mesh.env" ]] || fail "Mesh Hub is not initialized." + awk -F '=' -v key="$key" '$1 == key { print substr($0, index($0, "=") + 1); exit }' "$ETC_DIR/mesh.env" +} + +render_hub_wireguard_config() { + local private_key endpoint port node_id address public_key status + private_key="$(cat "$WG_DIR/hub.key")" + endpoint="$(read_mesh_value HUB_ENDPOINT)" + port="${endpoint##*:}" + cat >"/etc/wireguard/smm0.conf" <>"/etc/wireguard/smm0.conf" <"$WG_DIR/hub.key" + fi + hub_private="$(cat "$WG_DIR/hub.key")" + hub_public="$(printf '%s' "$hub_private" | wg pubkey)" + printf '%s\n' "$hub_public" >"$WG_DIR/hub.pub" + chmod 0600 "$WG_DIR/hub.key" + chmod 0644 "$WG_DIR/hub.pub" + cat >"$ETC_DIR/mesh.env" <"/etc/sysctl.d/90-ochenstarik-smm-mesh.conf" + sysctl --system >/dev/null + write_mesh_firewall + [[ -f "$LIB_DIR/control/ochenstarik-smm-control" ]] \ + || log "Warning: Control is not installed yet; mesh peer codes require Control enrollment." + if [[ -f "${TEMP_DIR:-}/deploy/$FIREWALL_UNIT" ]]; then + install_unit "$TEMP_DIR/deploy/$FIREWALL_UNIT" "$FIREWALL_UNIT" + elif [[ -f "$LIB_DIR/bootstrap/$FIREWALL_UNIT" ]]; then + install_unit "$LIB_DIR/bootstrap/$FIREWALL_UNIT" "$FIREWALL_UNIT" + else + fail "Mesh firewall systemd unit is unavailable; reinstall Control from the current release." + fi + systemctl enable "$FIREWALL_UNIT" + systemctl restart "$FIREWALL_UNIT" + render_hub_wireguard_config + systemctl enable wg-quick@smm0.service + systemctl restart wg-quick@smm0.service + log "Mesh Hub initialized at $public_endpoint:$port with $MESH_NETWORK." + log "WireGuard public key: $hub_public" +} + +reserve_node_address() { + local node_id="$1" existing host address + install -d -m 0700 "$MESH_DIR" + touch "$MESH_DIR/nodes.tsv" + chmod 0600 "$MESH_DIR/nodes.tsv" + existing="$(awk -F '\t' -v node="$node_id" '$1 == node { print $2; exit }' "$MESH_DIR/nodes.tsv")" + if [[ -n "$existing" ]]; then + printf '%s\n' "$existing" + return + fi + for host in $(seq 2 254); do + address="10.77.0.$host" + if ! awk -F '\t' -v address="$address" '$2 == address { found=1 } END { exit found ? 0 : 1 }' "$MESH_DIR/nodes.tsv"; then + printf '%s\t%s\t-\treserved\n' "$node_id" "$address" >>"$MESH_DIR/nodes.tsv" + printf '%s\n' "$address" + return + fi + done + fail "Mesh address pool is exhausted." +} + +configure_node_wireguard() { + local node_id="$1" node_address="$2" hub_endpoint="$3" hub_public_key="$4" node_private node_public + ensure_mesh_packages + install -d -m 0700 "$WG_DIR" /etc/wireguard + if [[ ! -f "$WG_DIR/node.key" ]]; then + umask 077 + wg genkey >"$WG_DIR/node.key" + fi + node_private="$(cat "$WG_DIR/node.key")" + node_public="$(printf '%s' "$node_private" | wg pubkey)" + printf '%s\n' "$node_public" >"$WG_DIR/node.pub" + cat >"/etc/wireguard/smm0.conf" <"$ext_file" + openssl x509 -req -sha256 -days 825 -in "$server_csr" -CA "$ca_cert" -CAkey "$ca_key" \ + -CAserial "$serial_file" -CAcreateserial -out "$TEMP_DIR/control-server.crt" -extfile "$ext_file" + openssl pkcs12 -export -out "$ETC_DIR/control-ca.pfx" -inkey "$ca_key" -in "$ca_cert" -passout pass: + openssl pkcs12 -export -out "$ETC_DIR/control-server.pfx" -inkey "$server_key" \ + -in "$TEMP_DIR/control-server.crt" -certfile "$ca_cert" -passout pass: + install -m 0644 "$ca_cert" "$ETC_DIR/control-ca.crt" + chown root:"$CONTROL_USER" "$ETC_DIR/control-ca.pfx" "$ETC_DIR/control-server.pfx" + chmod 0640 "$ETC_DIR/control-ca.pfx" "$ETC_DIR/control-server.pfx" +} + +install_control() { + local archive="$1" public_host="$2" port="${3:-7443}" backup_id + require_root + validate_platform + validate_port "$port" + require_command openssl + require_command sha256sum + require_command tar + require_command systemctl + require_command sudo + require_command visudo + extract_archive "$archive" + [[ -x "$TEMP_DIR/control/ochenstarik-smm-control" ]] || fail "Control binary is missing." + backup_id="$(create_backup control)" + ensure_system_user "$CONTROL_USER" + validate_control_state_migration + systemctl stop "$CONTROL_UNIT" 2>/dev/null || true + install -d -m 0711 -o root -g root "$ETC_DIR" "$STATE_DIR" + prepare_control_state + install_tree_atomic "$TEMP_DIR/control" "$LIB_DIR/control" "root:root" + install_bootstrap_command + if [[ ! -f "$ETC_DIR/control-ca.pfx" || ! -f "$ETC_DIR/control-server.pfx" ]]; then + create_control_certificates "$public_host" + fi + cat >"$ETC_DIR/control.env" <"$ETC_DIR/control-public-url" + chown root:"$CONTROL_USER" "$ETC_DIR/control.env" + chmod 0640 "$ETC_DIR/control.env" + chmod 0644 "$ETC_DIR/control-public-url" + install -d -m 0755 "$(dirname "$POLICY_HELPER")" + install -m 0755 "$TEMP_DIR/deploy/ochenstarik-smm-policy-apply" "$POLICY_HELPER" + install -d -m 0755 "$(dirname "$EMERGENCY_COMMAND")" + install -m 0755 "$TEMP_DIR/deploy/ochenstarik-smm-emergency" "$EMERGENCY_COMMAND" + install -d -m 0755 "$LIB_DIR/bootstrap" + install -m 0644 "$TEMP_DIR/deploy/$FIREWALL_UNIT" "$LIB_DIR/bootstrap/$FIREWALL_UNIT" + printf '%s\n' "$CONTROL_USER ALL=(root) NOPASSWD: $POLICY_HELPER *" >"$SUDOERS_FILE" + chmod 0440 "$SUDOERS_FILE" + visudo -cf "$SUDOERS_FILE" >/dev/null + install_unit "$TEMP_DIR/deploy/$CONTROL_UNIT" "$CONTROL_UNIT" + systemctl enable --now "$CONTROL_UNIT" + systemctl is-active --quiet "$CONTROL_UNIT" || { + systemctl status --no-pager "$CONTROL_UNIT" >&2 || true + fail "Control service failed; backup is $backup_id" + } + record_installed_version control "$(archive_version "$archive")" + log "Control installed. Backup: $backup_id" + log "CA fingerprint: $(openssl x509 -in "$ETC_DIR/control-ca.crt" -noout -fingerprint -sha256 | cut -d= -f2)" +} + +read_enrollment_token() { + if [[ -n "${SMM_ENROLL_TOKEN:-}" ]]; then + ENROLL_TOKEN="$SMM_ENROLL_TOKEN" + unset SMM_ENROLL_TOKEN + return + fi + [[ -t 0 ]] || fail "Set SMM_ENROLL_TOKEN or run from an interactive local terminal." + read -r -s -p "One-time enrollment token: " ENROLL_TOKEN + printf '\n' + [[ -n "$ENROLL_TOKEN" ]] || fail "Enrollment token is empty." +} + +install_agent() { + local archive="$1" node_id="$2" control_url="$3" ca_cert="$4" backup_id token_file token_temp + require_root + validate_platform + validate_node_id "$node_id" + validate_control_url "$control_url" + [[ -f "$ca_cert" ]] || fail "Control CA certificate not found: $ca_cert" + require_command sha256sum + require_command tar + require_command systemctl + require_command runuser + require_command openssl + openssl x509 -in "$ca_cert" -noout >/dev/null 2>&1 || fail "Invalid Control CA certificate." + extract_archive "$archive" + [[ -x "$TEMP_DIR/agent/ochenstarik-smm-agent" ]] || fail "Agent binary is missing." + [[ -x "$TEMP_DIR/provisioning-helper/ochenstarik-smm-provisioning-helper" ]] || fail "Provisioning helper binary is missing." + backup_id="$(create_backup agent)" + ensure_system_user "$AGENT_USER" + install -d -m 0711 -o root -g root "$ETC_DIR" "$STATE_DIR" + install -d -m 0700 -o "$AGENT_USER" -g "$AGENT_USER" "$STATE_DIR/agent" + install -d -m 0700 -o "$AGENT_USER" -g "$AGENT_USER" "$ENROLLMENT_DIR" + install -d -m 0700 -o root -g root "$STATE_DIR/provisioning/rollback" + install_tree_atomic "$TEMP_DIR/agent" "$LIB_DIR/agent" "root:root" + install_tree_atomic "$TEMP_DIR/provisioning-helper" "$LIB_DIR/provisioning-helper" "root:root" + install_bootstrap_command + install -d -m 0755 "$(dirname "$EMERGENCY_COMMAND")" + install -m 0755 "$TEMP_DIR/deploy/ochenstarik-smm-emergency" "$EMERGENCY_COMMAND" + if [[ "$(realpath "$ca_cert")" != "$(realpath -m "$ETC_DIR/control-ca.crt")" ]]; then + install -m 0600 -o "$AGENT_USER" -g "$AGENT_USER" "$ca_cert" "$ETC_DIR/control-ca.crt" + else + chown "$AGENT_USER:$AGENT_USER" "$ETC_DIR/control-ca.crt" + chmod 0600 "$ETC_DIR/control-ca.crt" + fi + cat >"$ETC_DIR/agent.env" <"$token_temp"; then + ENROLL_TOKEN="" + fail "Could not write the enrollment token file." + fi + chown "$AGENT_USER:$AGENT_USER" "$token_temp" + chmod 0400 "$token_temp" + ENROLLMENT_TOKEN_FILE="$token_file" + mv -fT -- "$token_temp" "$token_file" + ENROLLMENT_TOKEN_TEMP="" + ENROLL_TOKEN="" + if ! runuser -u "$AGENT_USER" -- env \ + "SMM_NodeId=$node_id" \ + "SMM_ControlUrl=${control_url%/}" \ + "SMM_StateDirectory=$STATE_DIR/agent" \ + "SMM_EnrollmentTokenDirectory=$ENROLLMENT_DIR" \ + "SMM_CertificateAuthorityPath=$ETC_DIR/control-ca.crt" \ + "SMM_EnrollTokenFile=$token_file" \ + "$LIB_DIR/agent/ochenstarik-smm-agent"; then + rm -f -- "$token_file" + fail "Agent enrollment failed." + fi + rm -f -- "$token_file" + ENROLLMENT_TOKEN_FILE="" + chown root:"$AGENT_USER" "$ETC_DIR/control-ca.crt" + chmod 0640 "$ETC_DIR/control-ca.crt" + install_unit "$TEMP_DIR/deploy/$AGENT_UNIT" "$AGENT_UNIT" + install_unit "$TEMP_DIR/deploy/$PROVISIONING_HELPER_UNIT" "$PROVISIONING_HELPER_UNIT" + systemctl enable --now "$PROVISIONING_HELPER_UNIT" + systemctl enable --now "$AGENT_UNIT" + systemctl is-active --quiet "$AGENT_UNIT" || { + systemctl status --no-pager "$AGENT_UNIT" >&2 || true + fail "Agent service failed; backup is $backup_id" + } + record_installed_version agent "$(archive_version "$archive")" + log "Agent $node_id installed and enrolled. Backup: $backup_id" +} + +read_enrollment_code() { + if [[ -n "${SMM_ENROLL_CODE:-}" ]]; then + ENROLL_CODE="$SMM_ENROLL_CODE" + unset SMM_ENROLL_CODE + return + fi + [[ -t 0 ]] || fail "Set SMM_ENROLL_CODE or run from an interactive local terminal." + read -r -s -p "SMMNODE enrollment code: " ENROLL_CODE + printf '\n' + [[ -n "$ENROLL_CODE" ]] || fail "Enrollment code is empty." +} + +confirm_ca_fingerprint() { + local ca_file="$1" answer + log "Control CA fingerprint: $(openssl x509 -in "$ca_file" -noout -fingerprint -sha256 | cut -d= -f2)" + if [[ "${SMM_ACCEPT_CA_FINGERPRINT:-}" == "1" ]]; then + return + fi + [[ -t 0 ]] || fail "Set SMM_ACCEPT_CA_FINGERPRINT=1 only after verifying the fingerprint out of band." + read -r -p "Type 'yes' after comparing this fingerprint with the Hub: " answer + [[ "$answer" == "yes" ]] || fail "Control CA fingerprint was not confirmed." +} + +install_node_from_code() { + local archive="$1" prefix control_part ca_part node_part token_part + local endpoint_part hub_key_part address_part network_part extra + local control_url node_id token ca_file hub_endpoint hub_public_key node_address mesh_network + require_root + require_command base64 + require_command openssl + read_enrollment_code + IFS='.' read -r prefix control_part ca_part node_part token_part endpoint_part \ + hub_key_part address_part network_part extra <<<"$ENROLL_CODE" + ENROLL_CODE="" + [[ "$prefix" == "SMMNODE1" || "$prefix" == "SMMNODE2" ]] \ + || fail "Unsupported SMMNODE enrollment code version." + [[ -n "$control_part" && -n "$ca_part" && -n "$node_part" && -n "$token_part" \ + && -z "${extra:-}" ]] || fail "Invalid SMMNODE enrollment code." + if [[ "$prefix" == "SMMNODE1" ]]; then + [[ -z "${endpoint_part:-}${hub_key_part:-}${address_part:-}${network_part:-}" ]] \ + || fail "Invalid SMMNODE1 enrollment code." + else + [[ -n "${endpoint_part:-}" && -n "${hub_key_part:-}" \ + && -n "${address_part:-}" && -n "${network_part:-}" ]] \ + || fail "Invalid SMMNODE2 mesh enrollment code." + fi + control_url="$(base64url_decode "$control_part")" + node_id="$(base64url_decode "$node_part")" + token="$(base64url_decode "$token_part")" + if [[ "$prefix" == "SMMNODE2" ]]; then + hub_endpoint="$(base64url_decode "$endpoint_part")" + hub_public_key="$(base64url_decode "$hub_key_part")" + node_address="$(base64url_decode "$address_part")" + mesh_network="$(base64url_decode "$network_part")" + [[ "$hub_endpoint" =~ ^[A-Za-z0-9.-]+:[0-9]{1,5}$ ]] || fail "Invalid Hub WireGuard endpoint." + validate_port "${hub_endpoint##*:}" + [[ "$hub_public_key" =~ ^[A-Za-z0-9+/]{43}=$ ]] || fail "Invalid Hub WireGuard public key." + [[ "$node_address" =~ ^10\.77\.0\.([2-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-4])$ ]] \ + || fail "Invalid reserved mesh address." + [[ "$mesh_network" == "$MESH_NETWORK" ]] || fail "Unsupported mesh network." + fi + ca_file="$(mktemp -t smm-control-ca.XXXXXXXX.crt)" + chmod 0600 "$ca_file" + base64url_decode "$ca_part" >"$ca_file" + confirm_ca_fingerprint "$ca_file" + SMM_ENROLL_TOKEN="$token" + token="" + install_agent "$archive" "$node_id" "$control_url" "$ca_file" + rm -f -- "$ca_file" + if [[ "$prefix" == "SMMNODE2" ]]; then + configure_node_wireguard "$node_id" "$node_address" "$hub_endpoint" "$hub_public_key" + log "Node mesh configured. Copy this public peer code back to the Hub:" + printf '%s\n' "$MESH_PEER_CODE" + MESH_PEER_CODE="" + fi +} + +refresh_agent_uid() { + local env_file="$ETC_DIR/agent.env" agent_uid temp line found=0 + [[ -f "$env_file" && ! -L "$env_file" ]] \ + || fail "Agent environment is missing or unsafe: $env_file" + agent_uid="$(id -u "$AGENT_USER")" + temp="$(mktemp "$ETC_DIR/.agent.env.XXXXXXXX")" + if ! while IFS= read -r line || [[ -n "$line" ]]; do + if [[ "$line" == SMM_AgentUid=* ]]; then + printf 'SMM_AgentUid=%s\n' "$agent_uid" + found=1 + else + printf '%s\n' "$line" + fi + done <"$env_file" >"$temp"; then + rm -f -- "$temp" + fail "Could not refresh SMM_AgentUid in agent.env." + fi + if [[ "$found" == "0" ]]; then + printf 'SMM_AgentUid=%s\n' "$agent_uid" >>"$temp" + fi + chown root:"$AGENT_USER" "$temp" + chmod 0640 "$temp" + mv -fT -- "$temp" "$env_file" +} + +update_role() { + local role="$1" archive="$2" binary unit user backup_id + require_root + validate_platform + extract_archive "$archive" + case "$role" in + control) binary="ochenstarik-smm-control"; unit="$CONTROL_UNIT"; user="root:root" ;; + agent) binary="ochenstarik-smm-agent"; unit="$AGENT_UNIT"; user="root:root" ;; + *) fail "Unknown role: $role" ;; + esac + [[ -x "$TEMP_DIR/$role/$binary" ]] || fail "$role binary is missing." + + local manifest new_version m_control m_agent installed peer_role peer_expected + manifest="$(dirname "$archive")/server-monitor-manager-manifest.json" + if [[ -f "$manifest" ]]; then + new_version="$(manifest_version_field "$manifest" version)" + m_control="$(manifest_version_field "$manifest" control)" + m_agent="$(manifest_version_field "$manifest" agent)" + if [[ -n "$new_version" ]]; then + # Compared against the version recorded when this role was installed, not against + # PROGRAM_VERSION: that constant describes the bootstrap source tree and never the + # deployed component, so it can neither detect a downgrade nor match a release tag. + installed="$(read_installed_version "$role")" + if [[ -n "$installed" ]] \ + && version_lt "$new_version" "$installed" \ + && [[ "${SMM_ALLOW_DOWNGRADE:-0}" != "1" ]]; then + fail "Downgrade of $role from $installed to $new_version is not allowed. Set SMM_ALLOW_DOWNGRADE=1 to bypass." + fi + + # Cross-role compatibility: the peer component already on this host must run the + # version this archive expects of it. An unknown peer version is reported but not + # treated as failure, because installations predating version recording have + # nothing to compare against. + case "$role" in + control) peer_role="agent"; peer_expected="$m_agent" ;; + agent) peer_role="control"; peer_expected="$m_control" ;; + *) peer_role="" ;; + esac + if [[ -n "$peer_role" ]] \ + && systemctl list-unit-files 2>/dev/null | grep -q "^ochenstarik-smm-${peer_role}.service"; then + local peer_actual + peer_actual="$(read_installed_version "$peer_role")" + if [[ -z "$peer_actual" ]]; then + log "Warning: installed $peer_role version is unknown; compatibility check skipped." + elif [[ -n "$peer_expected" ]] \ + && [[ "$(normalize_version "$peer_actual")" != "$(normalize_version "$peer_expected")" ]]; then + fail "Incompatible versions: installed $peer_role is $peer_actual, but this archive expects $peer_role $peer_expected. Update rejected." + fi + fi + + log "Updating $role to version $new_version" + fi + fi + if [[ "$role" == "control" ]]; then + validate_control_state_migration + validate_control_environment_migration + record_control_legacy_state + else + refresh_agent_uid + fi + backup_id="$(create_backup "$role")" + if [[ "$role" == "control" ]]; then + CONTROL_UPDATE_BACKUP_ID="$backup_id" + CONTROL_UPDATE_RECOVERY_REQUIRED=1 + fi + systemctl stop "$unit" + if [[ "$role" == "agent" ]]; then + systemctl stop "$PROVISIONING_HELPER_UNIT" 2>/dev/null || true + fi + if [[ "$role" == "control" ]]; then + install -d -m 0711 -o root -g root "$ETC_DIR" "$STATE_DIR" + prepare_control_state + rewrite_control_environment + install_bootstrap_command + install_unit "$TEMP_DIR/deploy/$CONTROL_UNIT" "$CONTROL_UNIT" + systemctl enable "$CONTROL_UNIT" + install_tree_atomic "$TEMP_DIR/control" "$LIB_DIR/control" "$user" + else + install_tree_atomic "$TEMP_DIR/$role" "$LIB_DIR/$role" "$user" + [[ -x "$TEMP_DIR/provisioning-helper/ochenstarik-smm-provisioning-helper" ]] \ + || fail "Provisioning helper binary is missing." + install_tree_atomic "$TEMP_DIR/provisioning-helper" "$LIB_DIR/provisioning-helper" "root:root" + install_unit "$TEMP_DIR/deploy/$AGENT_UNIT" "$AGENT_UNIT" + install_unit "$TEMP_DIR/deploy/$PROVISIONING_HELPER_UNIT" "$PROVISIONING_HELPER_UNIT" + systemctl enable --now "$PROVISIONING_HELPER_UNIT" + fi + systemctl restart "$unit" + if ! systemctl is-active --quiet "$unit"; then + if [[ "$role" == "agent" ]]; then + log "Update failed; restoring backup $backup_id" + restore_backup "$role" "$backup_id" + fi + fail "$role update was rolled back." + fi + if [[ "$role" == "control" ]]; then + CONTROL_UPDATE_RECOVERY_REQUIRED=0 + CONTROL_UPDATE_BACKUP_ID="" + CONTROL_UPDATE_LEGACY_ITEMS=() + fi + record_installed_version "$role" "$(archive_version "$archive")" + log "$role updated. Backup: $backup_id" +} + +latest_backup_id() { + local role="$1" path + path="$(find "$BACKUP_DIR" -maxdepth 1 -type f \( -name "*-${role}-*.tar.gz" -o -name "*-${role}-*.empty" \) -printf '%f\n' 2>/dev/null | sort | tail -n1)" + [[ -n "$path" ]] || fail "No backup found for $role." + printf '%s\n' "${path%.tar.gz}" | sed 's/\.empty$//' +} + +restore_backup() { + local role="$1" backup_id="$2" archive="$BACKUP_DIR/${backup_id}.tar.gz" unit + case "$role" in control) unit="$CONTROL_UNIT" ;; agent) unit="$AGENT_UNIT" ;; *) fail "Unknown role: $role" ;; esac + [[ -f "$archive" ]] || fail "Backup archive not found: $backup_id" + systemctl stop "$unit" || true + if [[ "$role" == "agent" ]]; then + systemctl stop "$PROVISIONING_HELPER_UNIT" || true + fi + if [[ "$role" == "control" ]]; then + restore_control_binary_from_archive "$archive" + else + tar -C / -xzf "$archive" + fi + systemctl daemon-reload + if [[ "$role" == "agent" ]]; then + systemctl start "$PROVISIONING_HELPER_UNIT" + fi + systemctl start "$unit" + systemctl is-active --quiet "$unit" || fail "Rollback restored files but service is not active." + log "$role restored from $backup_id" +} + +rollback_role() { + local role="$1" backup_id="${2:-}" + require_root + [[ -n "$backup_id" ]] || backup_id="$(latest_backup_id "$role")" + restore_backup "$role" "$backup_id" +} + +show_status() { + local unit + for unit in "$CONTROL_UNIT" "$AGENT_UNIT"; do + if systemctl list-unit-files "$unit" --no-legend 2>/dev/null | grep -q "^$unit"; then + printf '%s: %s\n' "$unit" "$(systemctl is-active "$unit" 2>/dev/null || true)" + else + printf '%s: not-installed\n' "$unit" + fi + done + if [[ -f "$ETC_DIR/control-ca.crt" ]] && command -v openssl >/dev/null; then + printf 'control-ca: %s\n' "$(openssl x509 -in "$ETC_DIR/control-ca.crt" -noout -fingerprint -sha256 | cut -d= -f2)" + fi +} + +run_control_cli() { + local command_name="$1" identifier="$2" + require_root + validate_node_id "$identifier" + [[ -x "$LIB_DIR/control/ochenstarik-smm-control" ]] || fail "Control is not installed." + [[ -f "$ETC_DIR/control.env" ]] || fail "Control environment is missing." + require_command systemd-run + systemd-run --wait --pipe --quiet --collect \ + --uid="$CONTROL_USER" \ + --gid="$CONTROL_USER" \ + -p "EnvironmentFile=$ETC_DIR/control.env" \ + "$LIB_DIR/control/ochenstarik-smm-control" "$command_name" "$identifier" +} + +create_node_code() { + local node_id="$1" token control_url ca_pem node_address hub_endpoint hub_public_key mesh_network + require_root + validate_node_id "$node_id" + [[ -r "$ETC_DIR/control-public-url" ]] || fail "Control public URL is missing; reinstall Control with PUBLIC_HOST." + [[ -r "$ETC_DIR/control-ca.crt" ]] || fail "Control CA certificate is missing." + require_command base64 + control_url="$(tr -d '\r\n' <"$ETC_DIR/control-public-url")" + validate_control_url "$control_url" + token="$(run_control_cli token-create "$node_id")" + [[ -n "$token" && "$token" != *$'\n'* ]] || fail "Control returned an invalid enrollment token." + ca_pem="$(cat "$ETC_DIR/control-ca.crt")" + if [[ -r "$ETC_DIR/mesh.env" && -r "$WG_DIR/hub.pub" ]]; then + node_address="$(reserve_node_address "$node_id")" + hub_endpoint="$(read_mesh_value HUB_ENDPOINT)" + hub_public_key="$(read_mesh_value HUB_PUBLIC_KEY)" + mesh_network="$(read_mesh_value MESH_NETWORK)" + printf 'SMMNODE2.%s.%s.%s.%s.%s.%s.%s.%s\n' \ + "$(printf '%s' "$control_url" | base64url_encode)" \ + "$(printf '%s' "$ca_pem" | base64url_encode)" \ + "$(printf '%s' "$node_id" | base64url_encode)" \ + "$(printf '%s' "$token" | base64url_encode)" \ + "$(printf '%s' "$hub_endpoint" | base64url_encode)" \ + "$(printf '%s' "$hub_public_key" | base64url_encode)" \ + "$(printf '%s' "$node_address" | base64url_encode)" \ + "$(printf '%s' "$mesh_network" | base64url_encode)" + else + printf 'SMMNODE1.%s.%s.%s.%s\n' \ + "$(printf '%s' "$control_url" | base64url_encode)" \ + "$(printf '%s' "$ca_pem" | base64url_encode)" \ + "$(printf '%s' "$node_id" | base64url_encode)" \ + "$(printf '%s' "$token" | base64url_encode)" + fi + token="" +} + +create_device_code() { + local device_id="$1" token control_url ca_der + require_root + validate_node_id "$device_id" + [[ -r "$ETC_DIR/control-public-url" ]] || fail "Control public URL is missing; reinstall Control with PUBLIC_HOST." + [[ -r "$ETC_DIR/control-ca.crt" ]] || fail "Control CA certificate is missing." + require_command base64 + require_command openssl + control_url="$(tr -d '\r\n' <"$ETC_DIR/control-public-url")" + validate_control_url "$control_url" + token="$(run_control_cli device-token-create "$device_id")" + [[ "$token" =~ ^[A-Za-z0-9_-]{43}$ ]] \ + || fail "Control returned an invalid device enrollment token." + ca_der="$(openssl x509 -in "$ETC_DIR/control-ca.crt" -outform DER | base64 -w 0)" + printf 'SMMDEV1-' + printf 'VERSION=1\nDEVICE=%s\nTOKEN=%s\nURL=%s\nCA=%s\n' \ + "$device_id" "$token" "$control_url" "$ca_der" | base64url_encode + printf '\n' + token="" +} + +add_mesh_peer() { + local code="$1" prefix node_part address_part key_part extra + local node_id address public_key current tmp + require_root + require_command base64 + require_command wg + [[ -r "$ETC_DIR/mesh.env" && -r "$MESH_DIR/nodes.tsv" ]] || fail "Mesh Hub is not initialized." + IFS='.' read -r prefix node_part address_part key_part extra <<<"$code" + [[ "$prefix" == "SMMPEER1" && -n "$node_part" && -n "$address_part" \ + && -n "$key_part" && -z "${extra:-}" ]] || fail "Invalid SMMPEER1 code." + node_id="$(base64url_decode "$node_part")" + address="$(base64url_decode "$address_part")" + public_key="$(base64url_decode "$key_part")" + validate_node_id "$node_id" + [[ "$address" =~ ^10\.77\.0\.([2-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-4])$ ]] \ + || fail "Invalid peer mesh address." + [[ "$public_key" =~ ^[A-Za-z0-9+/]{43}=$ ]] || fail "Invalid peer WireGuard public key." + current="$(awk -F '\t' -v node="$node_id" '$1 == node { print $2; exit }' "$MESH_DIR/nodes.tsv")" + [[ "$current" == "$address" ]] || fail "Peer address does not match the Hub reservation." + if awk -F '\t' -v address="$address" -v node="$node_id" '$2 == address && $1 != node { found=1 } END { exit found ? 0 : 1 }' "$MESH_DIR/nodes.tsv"; then + fail "Peer mesh address is already assigned." + fi + tmp="$(mktemp -p "$MESH_DIR" nodes.tsv.XXXXXXXX)" + awk -F '\t' -v OFS='\t' -v node="$node_id" -v address="$address" -v key="$public_key" \ + '$1 == node { print node, address, key, "active"; found=1; next } { print } END { if (!found) exit 1 }' \ + "$MESH_DIR/nodes.tsv" >"$tmp" || { rm -f -- "$tmp"; fail "Peer reservation is missing."; } + chmod 0600 "$tmp" + mv -- "$tmp" "$MESH_DIR/nodes.tsv" + render_hub_wireguard_config + systemctl restart wg-quick@smm0.service + systemctl is-active --quiet wg-quick@smm0.service || fail "WireGuard failed after peer registration." + log "Mesh peer $node_id activated at $address." +} + +show_mesh_status() { + require_root + [[ -r "$ETC_DIR/mesh.env" ]] || fail "Mesh Hub is not initialized." + printf 'endpoint: %s\n' "$(read_mesh_value HUB_ENDPOINT)" + printf 'network: %s\n' "$(read_mesh_value MESH_NETWORK)" + if [[ -r "$MESH_DIR/nodes.tsv" ]]; then + printf '%-24s %-15s %-10s %s\n' NODE ADDRESS STATUS HANDSHAKE + while IFS=$'\t' read -r node_id address public_key status; do + [[ -n "$node_id" ]] || continue + local handshake="-" + if [[ "$status" == "active" ]]; then + handshake="$(wg show smm0 latest-handshakes 2>/dev/null | awk -v key="$public_key" '$1 == key { print $2; exit }')" + [[ -n "$handshake" && "$handshake" != "0" ]] || handshake="never" + fi + printf '%-24s %-15s %-10s %s\n' "$node_id" "$address" "$status" "$handshake" + done <"$MESH_DIR/nodes.tsv" + fi +} + +show_ca_fingerprint() { + [[ -f "$ETC_DIR/control-ca.crt" ]] || fail "Control CA certificate is not installed." + require_command openssl + openssl x509 -in "$ETC_DIR/control-ca.crt" -noout -fingerprint -sha256 +} + +role_is_installed() { + case "$1" in + control) [[ -d "$LIB_DIR/control" || -f "$ETC_DIR/control.env" \ + || -f "/etc/systemd/system/${CONTROL_UNIT:-ochenstarik-smm-control.service}" ]] ;; + agent) [[ -d "$LIB_DIR/agent" || -f "$ETC_DIR/agent.env" \ + || -f "/etc/systemd/system/${AGENT_UNIT:-ochenstarik-smm-agent.service}" ]] ;; + *) return 1 ;; + esac +} + +remove_shared_ca_if_unused() { + if ! role_is_installed control && ! role_is_installed agent; then + rm -f -- "$ETC_DIR/control-ca.crt" + fi +} + +uninstall_agent() { + local purge="${1:-}" + require_root + systemctl disable --now "$AGENT_UNIT" 2>/dev/null || true + systemctl disable --now "$PROVISIONING_HELPER_UNIT" 2>/dev/null || true + rm -f -- "/etc/systemd/system/$AGENT_UNIT" "/etc/systemd/system/$PROVISIONING_HELPER_UNIT" "$ETC_DIR/agent.env" + rm -rf -- "$LIB_DIR/agent" "$LIB_DIR/provisioning-helper" + if [[ "$purge" == "--purge" ]]; then + rm -rf -- "$STATE_DIR/agent" "$ENROLLMENT_DIR" + remove_shared_ca_if_unused + fi + systemctl daemon-reload + log "Agent removed${purge:+ ($purge)}." +} + +install_monitor() { + local public_key="$1" + require_root + validate_platform + + local metrics_script="/usr/local/libexec/ochenstarik-smm-metrics" + local monitor_user="ochenstarik-monitor" + local monitor_home="/var/lib/ochenstarik-monitor" + + if ! id -u "$monitor_user" >/dev/null 2>&1; then + useradd -r -s /usr/sbin/nologin -d "$monitor_home" -M "$monitor_user" + fi + install -d -m 0755 -o "$monitor_user" -g "$monitor_user" "$monitor_home" + + install -d -m 0755 "/usr/local/libexec" + cat >"$metrics_script" <<'EOF' +#!/usr/bin/env bash +set -euo pipefail +# ochenstarik-smm-metrics + +echo "PROTOCOL=1" +echo "HOSTNAME=$(hostname)" +UPTIME=$(awk '{print int($1)}' /proc/uptime 2>/dev/null || echo "0") +echo "UPTIME_SECONDS=${UPTIME}" +LOAD1=$(awk '{print $1}' /proc/loadavg 2>/dev/null || echo "0.00") +echo "LOAD1=${LOAD1}" +CPU_COUNT=$(nproc 2>/dev/null || echo "1") +echo "CPU_COUNT=${CPU_COUNT}" +MEM_TOTAL=$(awk '/^MemTotal:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +echo "MEM_TOTAL_KB=${MEM_TOTAL}" +MEM_AVAIL=$(awk '/^MemAvailable:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +if [ "$MEM_AVAIL" = "0" ] || [ -z "$MEM_AVAIL" ]; then + MEM_FREE=$(awk '/^MemFree:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") + MEM_CACHED=$(awk '/^Cached:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") + MEM_AVAIL=$((MEM_FREE + MEM_CACHED)) +fi +echo "MEM_AVAILABLE_KB=${MEM_AVAIL}" +SWAP_TOTAL=$(awk '/^SwapTotal:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +echo "SWAP_TOTAL_KB=${SWAP_TOTAL}" +SWAP_FREE=$(awk '/^SwapFree:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +echo "SWAP_FREE_KB=${SWAP_FREE}" +DF_OUT=$(df -k / 2>/dev/null | awk 'NR==2 {print $2, $4}' || echo "0 0") +DISK_TOTAL=$(echo "$DF_OUT" | awk '{print $1}') +DISK_AVAIL=$(echo "$DF_OUT" | awk '{print $2}') +echo "DISK_TOTAL_KB=${DISK_TOTAL}" +echo "DISK_AVAILABLE_KB=${DISK_AVAIL}" +DF_INODES=$(df -i / 2>/dev/null | awk 'NR==2 {print $2, $4}' || echo "0 0") +INODES_TOTAL=$(echo "$DF_INODES" | awk '{print $1}') +INODES_FREE=$(echo "$DF_INODES" | awk '{print $2}') +echo "DISK_INODES_TOTAL=${INODES_TOTAL}" +echo "DISK_INODES_FREE=${INODES_FREE}" +NET_RX=$(awk 'NR>2 {rx+=$1} END {print rx}' /proc/net/dev 2>/dev/null || echo "0") +NET_TX=$(awk 'NR>2 {tx+=$9} END {print tx}' /proc/net/dev 2>/dev/null || echo "0") +echo "NETWORK_RX_BYTES=${NET_RX}" +echo "NETWORK_TX_BYTES=${NET_TX}" +KERNEL=$(uname -r 2>/dev/null || echo "unknown") +echo "KERNEL=${KERNEL}" +SYSTEMD_SSH=$(systemctl is-active ssh.service 2>/dev/null || true) +echo "SYSTEMD_SSH=${SYSTEMD_SSH:-unknown}" +SYSTEMD_WIREGUARD=$(systemctl is-active wg-quick@smm0.service 2>/dev/null || true) +echo "SYSTEMD_WIREGUARD=${SYSTEMD_WIREGUARD:-unknown}" +EOF + chown root:root "$metrics_script" + chmod 0755 "$metrics_script" + + install -d -m 0700 -o "$monitor_user" -g "$monitor_user" "$monitor_home/.ssh" + local auth_keys="$monitor_home/.ssh/authorized_keys" + + # We idempotently add the key + local key_entry="command=\"$metrics_script\",restrict,no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding $public_key" + if [[ -f "$auth_keys" ]] && grep -qF "$public_key" "$auth_keys"; then + log "Monitor key already installed." + else + echo "$key_entry" >> "$auth_keys" + chown "$monitor_user:$monitor_user" "$auth_keys" + chmod 0600 "$auth_keys" + log "Monitor key installed." + fi +} + +uninstall_monitor() { + require_root + local monitor_user="ochenstarik-monitor" + local monitor_home="/var/lib/ochenstarik-monitor" + local metrics_script="/usr/local/libexec/ochenstarik-smm-metrics" + + if id -u "$monitor_user" >/dev/null 2>&1; then + userdel -f "$monitor_user" || true + fi + rm -rf -- "$monitor_home" + rm -f -- "$metrics_script" + log "Monitor removed." +} + +uninstall_control() { + [[ "${1:-}" == "--confirm-destroy-control" ]] || fail "Control removal requires --confirm-destroy-control" + require_root + systemctl disable --now "$CONTROL_UNIT" 2>/dev/null || true + rm -f -- "/etc/systemd/system/$CONTROL_UNIT" "$ETC_DIR/control.env" \ + "$ETC_DIR/control-ca.pfx" "$ETC_DIR/control-server.pfx" \ + "$POLICY_HELPER" "$SUDOERS_FILE" + rm -rf -- "$LIB_DIR/control" "$STATE_DIR/control" \ + "$STATE_DIR/control.db" "$STATE_DIR/control.db-wal" \ + "$STATE_DIR/control.db-shm" "$STATE_DIR/backups" + remove_shared_ca_if_unused + systemctl daemon-reload + log "Control role and its state were removed." +} + +preflight() { + validate_platform + local command_name + for command_name in openssl sha256sum tar systemctl getent useradd groupadd; do + require_command "$command_name" + done + log "Supported platform: $(. /etc/os-release; printf '%s %s' "$ID" "$VERSION_ID"), $(uname -m)" +} + +main() { + local action="${1:-help}" + shift || true + case "$action" in + help|-h|--help) [[ $# -eq 0 ]] || fail "$action takes no arguments"; usage ;; + version|--version) [[ $# -eq 0 ]] || fail "$action takes no arguments"; printf '%s %s\n' "$PROGRAM" "$PROGRAM_VERSION" ;; + preflight) [[ $# -eq 0 ]] || fail "preflight takes no arguments"; preflight ;; + verify-release) [[ $# -eq 1 ]] || fail "verify-release requires ARCHIVE"; verify_release_payload "$1" ;; + install-control) [[ $# -ge 2 && $# -le 3 ]] || fail "install-control requires ARCHIVE PUBLIC_HOST [HTTPS_PORT]"; install_control "$@" ;; + install-agent) [[ $# -eq 4 ]] || fail "install-agent requires ARCHIVE NODE_ID CONTROL_URL CA_CERT"; install_agent "$@" ;; + install-node) [[ $# -eq 1 ]] || fail "install-node requires ARCHIVE"; install_node_from_code "$1" ;; + verify-manifest) [[ $# -eq 2 ]] || fail "verify-manifest requires MANIFEST SIGNATURE"; verify_manifest "$1" "$2" ;; + install-monitor) [[ $# -eq 1 ]] || fail "install-monitor requires PUBLIC_KEY"; install_monitor "$1" ;; + uninstall-monitor) [[ $# -eq 0 ]] || fail "uninstall-monitor takes no arguments"; uninstall_monitor ;; + mesh-init) [[ $# -ge 1 && $# -le 2 ]] || fail "mesh-init requires PUBLIC_ENDPOINT [WG_PORT]"; mesh_init "$@" ;; + peer-add) [[ $# -eq 1 ]] || fail "peer-add requires SMMPEER1_CODE"; add_mesh_peer "$1" ;; + mesh-status) [[ $# -eq 0 ]] || fail "mesh-status takes no arguments"; show_mesh_status ;; + update-control) [[ $# -eq 1 ]] || fail "update-control requires ARCHIVE"; update_role control "$1" ;; + update-agent) [[ $# -eq 1 ]] || fail "update-agent requires ARCHIVE"; update_role agent "$1" ;; + rollback) [[ $# -ge 1 && $# -le 2 ]] || fail "rollback requires control|agent [BACKUP_ID]"; rollback_role "$@" ;; + node-code) [[ $# -eq 1 ]] || fail "node-code requires NODE_ID"; create_node_code "$1" ;; + control-device-code) [[ $# -eq 1 ]] || fail "control-device-code requires DEVICE_ID"; create_device_code "$1" ;; + node-token) [[ $# -eq 1 ]] || fail "node-token requires NODE_ID"; run_control_cli token-create "$1" ;; + control-ca-fingerprint) [[ $# -eq 0 ]] || fail "control-ca-fingerprint takes no arguments"; show_ca_fingerprint ;; + status) [[ $# -eq 0 ]] || fail "status takes no arguments"; show_status ;; + uninstall-agent) [[ $# -eq 0 || ( $# -eq 1 && "$1" == "--purge" ) ]] || fail "uninstall-agent accepts only [--purge]"; uninstall_agent "${1:-}" ;; + uninstall-control) [[ $# -eq 1 ]] || fail "uninstall-control requires confirmation"; uninstall_control "$1" ;; + *) fail "Unknown action: $action (run with --help)" ;; + esac +} + +main "$@" diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/ochenstarik-server-monitor-manager.sh.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/ochenstarik-server-monitor-manager.sh.sha256 new file mode 100644 index 0000000..40006c7 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/ochenstarik-server-monitor-manager.sh.sha256 @@ -0,0 +1 @@ +77899bc545eadb591f0e311b4998b09cbf279eb17aa6d6073009ca4f3617f3a4 ochenstarik-server-monitor-manager.sh diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-arm64-sbom.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-arm64-sbom.json new file mode 100644 index 0000000..dc3a69d --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-arm64-sbom.json @@ -0,0 +1,2815 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:c6dd42e9-b26b-4cb3-9659-a19ba34e520c", + "version": 1, + "metadata": { + "timestamp": "2026-08-13T07:00:43Z", + "tools": { + "components": [ + { + "type": "application", + "authors": [ + { + "name": "CycloneDX" + } + ], + "name": "CycloneDX module for .NET", + "version": "6.2.0.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-dotnet", + "type": "website" + } + ] + } + ] + }, + "component": { + "type": "application", + "bom-ref": "ServerMonitorManager@0.0.0", + "name": "ServerMonitorManager", + "version": "0.0.0" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.ApplicationInsights", + "version": "2.23.0", + "description": "Application Insights Base API. This package provides core functionality for transmission of all Application Insights Telemetry Types and is a dependent package for all other Application Insights packages. Please install the platform specific package for the best experience. Privacy statement: https://go.microsoft.com/fwlink/?LinkId=512156", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DD497BFAD0C65E54A4F78D2A1644F3D0854D4CD01DD83BA506F8D5D53635E28152C7C13210DD5DD3985780AAB146A7620DE3EBAEAD8EF12C6F87088676C2157F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "externalReferences": [ + { + "url": "https://go.microsoft.com/fwlink/?LinkId=392727", + "type": "website" + }, + { + "url": "https://github.com/Microsoft/ApplicationInsights-dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Authentication.Certificate", + "version": "10.0.10", + "description": "ASP.NET Core middleware that enables an application to support certificate authentication.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "FD902F01F05EFDEF7EB362EF0187438EBA3512D40722A547BB3DE8B1A823DF68FB660DBD097764E848EAA5CDAFC20D1F121EF45667B06A4C0756ADE371B25455" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Mvc.Testing", + "version": "10.0.10", + "description": "Support for writing functional tests for MVC applications.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0604BE8DA0AEE0F088C0513EF58E1927C9097E376A7517887F85F4BD9C4469E4D0034C4B855D10DA30EE62966383578FDE509157CB5C56EAA892E2053C64DF74" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.TestHost", + "version": "10.0.10", + "description": "ASP.NET Core web server for writing and running tests.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "4D8702FC6CA49443CFAF7F565A1D6FFA2E6B8DC7A52BFBD505B65FA20ACDC8D5D69D760E7380C32C82B2C76062E83B817AA9DE3FE822E423F6D4D1628F9A3540" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Bcl.AsyncInterfaces", + "version": "6.0.0", + "description": "Provides the IAsyncEnumerable\u003CT\u003E and IAsyncDisposable interfaces and helper types for .NET Standard 2.0. This package is not required starting with .NET Standard 2.1 and .NET Core 3.0.\n\nCommonly Used Types:\nSystem.IAsyncDisposable\nSystem.Collections.Generic.IAsyncEnumerable\nSystem.Collections.Generic.IAsyncEnumerator", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "221A05A0C910F7A87B620D8F3831ED392B4EB95D112BEE274D35F27009AD2A26445DE9D7CD235FE6FB4A03F2550874BDA3BE3DDDD96EDAF9C0852A9C23D7B099" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.CodeCoverage", + "version": "18.8.1", + "description": "Microsoft.CodeCoverage package brings infra for collecting code coverage from vstest.console.exe and \u0022dotnet test\u0022.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F21F6B39BBBCE89302D28B8E77B99E3633E18EB4D840F132393E3686C841C5DC649EFA5F60B4734D8D7764185101FEEDA2197BC00A6AABF69A37A591C617708F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "9FD331CF8F4C4026F1B7B9C651FB33E80CE1D0E0D6F46DD00E41E71E598CFEFB8E318CCB8519064CA4FB9F82D4126D08F42041E5987E186676ADAA2595E229D4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite.Core", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite. This package does not include a copy of the native SQLite library.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "723A1B77BFE3966982CA0242256B2DC320ED878C4ED9480680D75D91B716AC27013FA5FE533800C50C7C6000E50046AC10AF5DBC48E3CA4EB885C6ED65BC2CB1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Abstractions", + "version": "10.0.10", + "description": "Caching abstractions for in-memory cache and distributed cache.\n\nCommonly Used Types:\nMicrosoft.Extensions.Caching.Distributed.IDistributedCache\nMicrosoft.Extensions.Caching.Memory.IMemoryCache", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "02858A6F1E814D2FCBA5506A1E5E1BC125186FE76E89235D073B0DCA84C62802E6680E6C13AD8AC07AC5B6358A0691CF473C80122C062A7AC8AE557D7A5A7A5B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Memory", + "version": "10.0.10", + "description": "In-memory cache implementation of Microsoft.Extensions.Caching.Memory.IMemoryCache.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DDBBEC0D9A6C493F5BEAE10A1446E24664A17F9A8E5B694C6CFD315EE8C3F19490AC51F5ABBB624BD51FD14CDA381D515BCFF7F1A4D3AAEF06F589EA8FA7EDF4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration", + "version": "10.0.10", + "description": "Implementation of key-value pair based configuration for Microsoft.Extensions.Configuration. Includes the memory configuration provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "943C09D6B759963DD401BD8F3C3D7F9744436AE1157EF93810A8CAC823E3ED096A51817327AFADDC5741E541912D493D053D566CD898E6F8628398C7264981B3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Abstractions", + "version": "10.0.10", + "description": "Provides abstractions of key-value pair based configuration. Interfaces defined in this package are implemented by classes in Microsoft.Extensions.Configuration and other configuration packages.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "7BF4CD6F25D7E030E366CC9CB593B79A890F347DF598062C0D2030CDB62D23F465F69CCDFC7E83D3E709FCBE12EDC4BD4AF68229C2D889216AA84EBD43A6B162" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Binder", + "version": "10.0.10", + "description": "Provides the functionality to bind an object to data in configuration providers for Microsoft.Extensions.Configuration. This package enables you to represent the configuration data as strongly-typed classes defined in the application code. To bind a configuration, use the Microsoft.Extensions.Configuration.ConfigurationBinder.Get extension method on the IConfiguration object. To use this package, you also need to install a package for the configuration provider, for example, Microsoft.Extensions.Configuration.Json for the JSON provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "23414BBDE074A3E494848748823D8CA24B242A3915BAA77D96C8F8251B73CE73C32981326E66738291EF303C0C2B5F4B2933C13741BF5CE5AE106EEBACAF06C0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.CommandLine", + "version": "10.0.10", + "description": "Command line configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from the command line arguments of your application. You can use CommandLineConfigurationExtensions.AddCommandLine extension method on IConfigurationBuilder to add the command line configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "4F3012F2AAE997570A379C5C352BD1548B24F61901CBF9FF5C05444E6FC8ECA998B8F6C58DC1251EBC0DA7F282D26BA9BD82167D5628C1E4DAE0FC3DB335036D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.EnvironmentVariables", + "version": "10.0.10", + "description": "Environment variables configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from environment variables. You can use EnvironmentVariablesExtensions.AddEnvironmentVariables extension method on IConfigurationBuilder to add the environment variables configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "A5A066D0AFEE703C7E69742C494AD82E75BF0B7A4B0BCCA9B07B8EA9D208BA7B6B1FE8A9937E58A729711FAF871AA12405CB04B7C940D0BFE26E40880EF73AC1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.FileExtensions", + "version": "10.0.10", + "description": "Provides a base class for file-based configuration providers used with Microsoft.Extensions.Configuration and extension methods for configuring them.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0EA7FB571C819E1CD371FD21F05323330C8350050A78B3905034FD7C53504EE8C437D02E109B64490E58CA406727A5DA8749898E969460755558CC0A4E04F3F4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Json", + "version": "10.0.10", + "description": "JSON configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read your application\u0027s settings from a JSON file. You can use JsonConfigurationExtensions.AddJsonFile extension method on IConfigurationBuilder to add the JSON configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1522329F5E7ACE8270D3B69D1973C5D9A32FDFEDE6F8050B304E349A16DFD8F0B08DFC1E6143139FC59A3CE4E0B72B2F454CC3D61C02C93E53B4012C9DA67879" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.UserSecrets", + "version": "10.0.10", + "description": "User secrets configuration provider implementation for Microsoft.Extensions.Configuration. User secrets mechanism enables you to override application configuration settings with values stored in the local secrets file. You can use UserSecretsConfigurationExtensions.AddUserSecrets extension method on IConfigurationBuilder to add user secrets provider to the configuration builder.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "044707479CFBA9BADC7958E44B5A3C139E11CCEA75FAE8D2A14BD59296B415C35A1F6FBDF372FF2D1A641A0E1FE99E815C4193103826DFA2167A947B0AC09BC7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection", + "version": "10.0.10", + "description": "Default implementation of dependency injection for Microsoft.Extensions.DependencyInjection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "8628EEC1C26F27A7956EECF3D0468FDD865039826770F267F9A4EEBE8D7949E37D1C298B85B8A73A873D9A04FDF5E50E5930E0289F3C4824137B0543FE0E7B0D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection.Abstractions", + "version": "10.0.10", + "description": "Abstractions for dependency injection.\n\nCommonly Used Types:\nMicrosoft.Extensions.DependencyInjection.IServiceCollection", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C40AF270352D0049FBDDB6403EB0B5206F0B6318760146E8093A9972B2AB965D7A5213A28E473742712E54F7ABB288EAB7A46659B41C7426D454ECEE4A931EAC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyModel", + "version": "10.0.10", + "description": "Provides abstractions for reading \u0060.deps\u0060 files. When a .NET application is compiled, the SDK generates a JSON manifest file (\u0060\u003CApplicationName\u003E.deps.json\u0060) that contains information about application dependencies. You can use \u0060Microsoft.Extensions.DependencyModel\u0060 to read information from this manifest at run time. This is useful when you want to dynamically compile code (for example, using Roslyn Emit API) referencing the same dependencies as your main application.\n\nBy default, the dependency manifest contains information about the application\u0027s target framework and runtime dependencies. Set the PreserveCompilationContext project property to \u0060true\u0060 to additionally include information about reference assemblies used during compilation.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "3887E253D85866E50B994DED19AF4988FC51E7551E86463CB96CC8B43E477D9CCCE9CD2AF9F5584B6905E21F247F32679A83FFFBFDC325D0DF40CEBD557D4EBB" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics", + "version": "10.0.10", + "description": "This package includes the default implementation of IMeterFactory and additional extension methods to easily register it with the Dependency Injection framework.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "EFA65F0DFC19BA6608050F87D9C9CC33A06B5C105B207D7C4259D280F3A36253F7A380FEFC6C9641AD9929FDCBFF5E00B4886F12399698CC716D65CE8131BE62" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics.Abstractions", + "version": "10.0.10", + "description": "Diagnostic abstractions for Microsoft.Extensions.Diagnostics.\n\nCommonly Used Types:\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsBuilder\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsListener\nMicrosoft.Extensions.Diagnostics.Metrics.InstrumentRule\nMicrosoft.Extensions.Diagnostics.Metrics.MeterScope\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsBuilderExtensions\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsOptions", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "B163E11DDD5E10CEB4D4091CFBE35A24A61CA70A29D48D988E9CA48F5E9A799B40E1C7752701F7F78D3A586B1787507581357E4A2813A8F561BE9CB80A3BB4AF" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Abstractions", + "version": "10.0.10", + "description": "Abstractions of files and directories.\n\nCommonly Used Types:\nMicrosoft.Extensions.FileProviders.IDirectoryContents\nMicrosoft.Extensions.FileProviders.IFileInfo\nMicrosoft.Extensions.FileProviders.IFileProvider", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "6F38363D1EEEC3034C1BCFF9058B295F19C4F26E9CEDAAEC671AF3FA22D212E671DB8CAB0688DDB01609C850A06D0C2C5B103176F862F7F7DCABA16481D51C51" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Physical", + "version": "10.0.10", + "description": "File provider for physical files for Microsoft.Extensions.FileProviders.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "F62D2D671CA52BEE6BF8E252853D84A9D575FB87D8A04E9DD98EA5BB25E86BA1C6F912D1042CA7A044AB64B879705D458A62F176DB1CA4224FAC06CD52102ABD" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileSystemGlobbing", + "version": "10.0.10", + "description": "File system globbing to find files matching a specified pattern.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1949E7C288D884B5FF6D2B4A54D468FFA42F0285FAB0786A5D58FA47A7F0F5DAAA3A491AAD092F31D07D190CA27CC25F632DBA0C8D25D2D44BDF32058EDD04D5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting", + "version": "10.0.10", + "description": "Hosting and startup infrastructures for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DEF44959988A0DFBC945DC865F25BB0AD3B3872A3E48AC96A71D642EB04A9F3C6CA8B3FD9B2129E2063FE67F5C98AA7FC3D2D049AFE1076F546E82578DF8A822" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting.Abstractions", + "version": "10.0.10", + "description": "Hosting and startup abstractions for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "029B3B822BE940A6994B3A7333046E64C75E471C7F3225C690C0CB3CEC6C19D20594AADAB5EFC28602C2FA37EE3BCD745ED26632B7F7A4580CD0294D3B966DC9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging", + "version": "10.0.10", + "description": "Logging infrastructure default implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "5261C9AAFF6B83BB3A806EFD91CFB37BED7FE8FB5FD990FE41F0BB6B772BF29AC8320C68371B50FB8AE7D8EC3394428EAB4722DC1EC6D72015BA166351956710" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Abstractions", + "version": "10.0.10", + "description": "Logging abstractions for Microsoft.Extensions.Logging.\n\nCommonly Used Types:\nMicrosoft.Extensions.Logging.ILogger\nMicrosoft.Extensions.Logging.ILoggerFactory\nMicrosoft.Extensions.Logging.ILogger\u003CTCategoryName\u003E\nMicrosoft.Extensions.Logging.LogLevel\nMicrosoft.Extensions.Logging.Logger\u003CT\u003E\nMicrosoft.Extensions.Logging.LoggerMessage\nMicrosoft.Extensions.Logging.Abstractions.NullLogger", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FCC5A6CD33BCCA73B47C0771BD1AD9CC044EAC53D3AF43C017CC684932F1F107981C7A0312922C14E6E2AA9B8DF1D3A70655DD0ACDCF9B97D3CE975FC21D588" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Configuration", + "version": "10.0.10", + "description": "Configuration support for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2F34EA98C7F9E1D4B61F3690F5C05A2D88552D672DB4BCE1B8A9EC50DB766530D61CA15FBD9D90B24C46E63B386F771DF8361ACBECF4ABFC7C0C942309AB2B3E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Console", + "version": "10.0.10", + "description": "Console logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6E3AFE1DB83957364483B116F176B0048D0AA0B277B7134F4F0FEAEB159DBBA7175A79916A46183D376346BA13D91F5D22D97E6CC6AAC65946FA562F821E974E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Debug", + "version": "10.0.10", + "description": "Debug output logger provider implementation for Microsoft.Extensions.Logging. This logger logs messages to a debugger monitor by writing messages with System.Diagnostics.Debug.WriteLine().", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB85BB3E6F032241404637C4642C14702C7337BB8AB3EB2BDE33AFF5000A055D60B6171AA86C7F6D42C55ECB8168D826C2A77A11423BEF2031781900E78E1925" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventLog", + "version": "10.0.10", + "description": "Windows Event Log logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "859BAF5F7B66880559D2B0F56881F61C4980C727BB927DE2BAF868829EC2779F809F7B5263E353E9F1868F676AD19816B824B42955E5792D3216B4E53DA05A4D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventSource", + "version": "10.0.10", + "description": "EventSource/EventListener logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "251D1821F49878B2F829F7A625A26B6F94CD9E2AD218B830859FB1137448EDFAE5CAEA267C459B02E23F09AD9E72A9A5EF491E5B25390FECFB958EB363534211" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options", + "version": "10.0.10", + "description": "Provides a strongly typed way of specifying and accessing settings using dependency injection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "538322A27FD9BB004C4C3FC21FC584EC08EDE88740B54DC95CBC241B553339633594D167A0EF0D02E42D6482CDA642B218414FF6DEC5BD06A48079CC0948D929" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options.ConfigurationExtensions", + "version": "10.0.10", + "description": "Provides additional configuration specific functionality related to Options.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "07F056E666E542729A25A06C672DF351373F9D5029BCA0D14AD3AD08DAE2CCA903E776B23E6DE3BBE5051DA68876CBC003F7AFD2EF4C08E7B32E60033465A45A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Primitives", + "version": "10.0.10", + "description": "Primitives shared by framework extensions. Commonly used types include:\n\nCommonly Used Types:\nMicrosoft.Extensions.Primitives.IChangeToken\nMicrosoft.Extensions.Primitives.StringValues\nMicrosoft.Extensions.Primitives.StringSegment", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "B3F778D24AFDF4711BEBA10DE673F9EB3ABAEC108B86862FDF1DE64F554B543A503FB3BBB0ABC38E0AF8B800EF39D3660FC660943235C734786FAEB11D4FAD64" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.ILLink.Tasks", + "version": "10.0.10", + "description": "MSBuild tasks for running the IL Linker", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "804F0EEC3AD1008DD08ABDF24B3BDD465EC3CD57FC5EB15F234BDB5179761878A6DDD30F755A25F43C70361FD3CEAF729A8935294FB6C2EDAAAC5E6358DBF5A5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.Test.Sdk", + "version": "18.8.1", + "description": "The MSbuild targets and properties for building .NET test projects.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "ED924163245F79A57884396548B55BEDDB4B5D06F84A96C0872FACF5273E754576CF00D44D326D3CB6138DA9D2E64AAA9BEDBCDCD371218E36EF5B946343EF8F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.Telemetry", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides telemetry for the platform.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C5E54A968FD412E4CE2DCC98EBC3C9154FE2D49E2E5C539CE1460CF01A9D8FD4197D90EA5ACE8A9574368DB629FFBD224B273BE242083050087A2BD60FB7D917" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.TrxReport.Abstractions", + "version": "1.9.1", + "description": "Package Description", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "665DC7C980F6089E8AD472201353A0BAC308BC55976603332BF8E568247FBD3C1FC644C9A904AE9F800E50968D2EF02D735ADA4616E8FC9C75CB18290A7540EC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides the core platform and the .NET implementation of the protocol.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "10C89A7E4A01422839D3EE8DDE9FD6B1E8C8504A082573A1209398434AD1436FB2774BB96C969CC1E6079B123483303224DE3273F8346F00ED151F2F4F361A4B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform.MSBuild", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides MSBuild integration of the platform, its extensions and configuration files.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "568901EC1C20B98D48692E6F182260177105A4C0BE28903805AC3F052D340D6D4B6C6A11F5931B23D10078FF0A70BB654FF606E8BB8C743DEEC1C1CDB8F36A1D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.ObjectModel", + "version": "18.8.1", + "description": "The Microsoft Test Platform Object Model.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "FA783FB4A40D48E96B1901D473BD83DDC83AD873D58B05D7042D05A1E10EEA6D6EE07E130A3213272E989B56C2F05A258F43004F4637DB7EA132D63AEF31A985" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.TestHost", + "version": "18.8.1", + "description": "Testplatform host executes the test using specified adapter.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "46D7AB005785910C271F30A658151CB71107FD87A78F7F7DE78811E49EC8657424E68901BFA943DD73AFD2E18645ED361294638436B01DA1945C7A4504A7C8DE" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Win32.Registry", + "version": "5.0.0", + "description": "Provides support for accessing and modifying the Windows Registry.\n\nCommonly Used Types:\nMicrosoft.Win32.RegistryKey\nMicrosoft.Win32.Registry\nMicrosoft.Win32.RegistryValueKind\nMicrosoft.Win32.RegistryHive\nMicrosoft.Win32.RegistryView\n \nWhen using NuGet 3.x this package requires at least version 3.4.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "471E66567CE59CC86475AECE7815D05261264CE114E0C1688BA2551DD51494901FA72DD7A8F74F8E8F0F3DBA74AF8595F177552F3C06ABB4BFCE76692197076E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/dotnet/runtime", + "type": "website" + }, + { + "url": "git://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLite@3.53.4", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLite", + "version": "3.53.4", + "description": "This package contains builds of the native SQLite code for various platforms. \n These builds have \u0022e_sqlite3\u0022 as the base name. The first three numbers in the version number of this package indicate the version of SQLite that was used to build it. The fourth number, if there is one, is incremented as needed for packaging-specific changes.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "81D145648BACFF3B4C8CD1794DF9956C47B229264467AA7001EA9A306E429CEB2855EC9296509541C82FC3C9BCFF04617AB3E86169932700BDAD5B0C03C482EF" + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLite@3.53.4", + "externalReferences": [ + { + "url": "https://sqlite.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.bundle_e_sqlite3", + "version": "3.0.5", + "description": "This \u0027batteries-included\u0027 bundle brings in SQLitePCLRaw.core and the necessary stuff for certain common use cases. Call SQLitePCL.Batteries.Init().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "12F980014C25F0C3E20C7B331418933FC84C7635B65597CEAB09C20EA00C055043C866BEF8614EA6BC38D7A484D8FF339D4387BBE760BC892F4E2702CD23AB2F" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.config.e_sqlite3", + "version": "3.0.5", + "description": "This package sets the configuration for using e_sqlite3 but does not bring in that native library itself. It\u0027s like bundle_e_sqlite3, except it\u0027s hollow.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A25E95EE323DDFEB8FC920D26551B4AFED854A3D9DDA833C3507331AB2043E0C9F16D62C2100560373AFC20E54D3F69F42ABDD6DA6E75EF7DCC0EA861B5AF12" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.core", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. This package does not provide an API which is friendly to app developers. Rather, it provides an API which handles platform and configuration issues, upon which a friendlier API can be built. In order to use this package, you will need to also add one of the SQLitePCLRaw.provider.* packages and call raw.SetProvider().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "24209D65527E0F82BB4E151B610195D39CB4732891CE1F0E2BA0965371DA381F1E636CD9256AE7DC5B76C604E36D33B7CA63AFDE09E6A8A40A9B2FCB5F01AA03" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.provider.e_sqlite3", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. Packages named \u0027SQLitePCLRaw.provider.*\u0027 (like this one) are \u0027plugins\u0027 that allow SQLitePCLRaw.core to access the native SQLite library. This provider does DllImport of \u0027e_sqlite3\u0027, the SQLite builds provided with SQLitePCLRaw.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "716EE95A124695CE5B2E2C834509E66991585B5AD1843B4CC6D135FE078DFE2D2E867A2E83978DEF09B8691833370803251F792537E59203455054AC24F82CC9" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "System.Diagnostics.EventLog", + "version": "10.0.10", + "description": "Provides the System.Diagnostics.EventLog class, which allows the applications to use the Windows event log service.\n\nCommonly Used Types:\nSystem.Diagnostics.EventLog", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F98A922C208C90F09A247CF2C251048B3EBADD8633787F967E5701427765C77C298F40E54A8D2BF5EBFEF729EFD3E8CFC5C17EFDD5F2CD80184532C24B5A481A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.analyzers@1.27.0", + "authors": [ + { + "name": "jnewkirk,bradwilson,marcind" + } + ], + "name": "xunit.analyzers", + "version": "1.27.0", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features.\n\nInstalling this package provides code analyzers to help developers find and fix frequent issues when writing tests and xUnit.net extensibility code.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2B920EDBD64D376C9D7B3DA38654D1B11DB4CA5A7F79032B320A289DF229BFD73DB1604DE8C5D120F196C6FBA8B688EE493DC7814F5EFD7EE5E3F56238B3C1BF" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.analyzers@1.27.0", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit.analyzers", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.runner.visualstudio", + "version": "3.1.5", + "description": "Visual Studio 2022\u002B Test Explorer runner for the xUnit.net framework. Capable of running xUnit.net v1, v2, and v3 tests. Supports .NET 4.7.2 or later, and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FFB6F37D917B54777C124986C2F3421CEB2FDD62561B352BDAB588AFEF58A8CCF857A8CE0468EB87BA3908261F396FEC18E9D81FDB993D10D4B2F2337A9A5BD" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "externalReferences": [ + { + "url": "https://github.com/xunit/visualstudio.xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.mtp-v1.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "9612F4811FCE910665551AC371386B7460BC118A39D78892C357093F92AAA9EA1A5DC21E2F939AE3FF0D599C9C62749A2F95871226E60AFA2A9807EB26BBF7D6" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.assert", + "version": "3.2.2", + "description": "Includes the assertion library from xUnit.net (xunit.v3.assert.dll). Supports .NET Standard 2.0 and .NET 8.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A1ABD3FA034E80012F33D59E5172B1E8D8C35DF57F3DAEA5982B8F9DDAC12FFF61B4B2C7585820077B1895B6C020AA71E80591FB51ABE1D99C08275C3573E7A" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.assert@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.common", + "version": "3.2.2", + "description": "Includes common code shared between xunit.v3.core and xunit.v3.runner.common (xunit.v3.common.dll). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A0FD19A2858C335F0EB5B6A246CDF1FD9B567484A3E60EDC736ACFB7CAFA04B90E874B485A22C4BF2377469B1AFF7658596C35282859F1D20137B913996AB0FC" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.core.mtp-v1", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for writing tests; extensibility authors should include xunit.v3.extensibility.core instead. Includes support for Microsoft.Testing.Platform v1. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "457A8F4EF036556D0181BB56D54A45950EFC6BBCB69EDDBEC341F0972AC086418CE6BB48655435BFA987DDC0CD5B97D97E26B0D57A589455C4248C54404B164B" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.extensibility.core", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for extensibility; test authors should include xunit.v3.core instead. Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DBD2BF9A1557CEBA2EE86994EAFC086F895691C97C03A125176DD2DC1CB497E10383022FF014FA8A30171D7446C794795B97DEED16EA70562768151A0A4DC3A2" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.mtp-v1", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.core.mtp-v1, xunit.v3.assert, and xunit.analyzers.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A1AF2350710CB1571CF31AF92BDFD2A835ADD5E90BCC132ADBB1E11ECA87CC1A3F0382D2A4AC6E8FA82E0E51F4D77FFAD71802A9A6F25DE936BF2280750104ED" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.common", + "version": "3.2.2", + "description": "Includes common code shared between in-process runners (like xunit.v3.runner.inproc.console) and xunit.v3.runner.utility (used by 1st and 3rd party external runners). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "226D0BA70448F5345532D159340CA70E0D4B08B766FFC9C97AEE33F86C7715AAF3A916A610322DB805AFEBA56FC1323480ADF7F125B8A960C51FBA4F266AEFB0" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.inproc.console", + "version": "3.2.2", + "description": "In-process console runner for xUnit.net framework, providing the entrypoint for self-executing unit tests. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB9F10495A9497A07232E3739FCAFE3ADB923F097314F2EF6BC1DA0E85EBA69353F8618136E0274A45EF9992FE4B2232A82F626D5DF8CA0124039C6CAE66C2FE" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/System.Diagnostics.EventLog@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLite@3.53.4", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLite@3.53.4", + "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.analyzers@1.27.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.analyzers@1.27.0", + "pkg:nuget/xunit.v3.assert@3.2.2", + "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.mtp-v1@3.2.2" + ] + }, + { + "ref": "ServerMonitorManager@0.0.0", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "pkg:nuget/xunit.v3@3.2.2" + ] + } + ] +} \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-arm64.tar.gz.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-arm64.tar.gz.sha256 new file mode 100644 index 0000000..6e363dc --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-arm64.tar.gz.sha256 @@ -0,0 +1 @@ +1cf8fb84957d0b4290be677c6ad102b65f46895128f70680b62d2af36e211935 server-monitor-manager-linux-arm64.tar.gz diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-x64-sbom.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-x64-sbom.json new file mode 100644 index 0000000..6d8a8fb --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-x64-sbom.json @@ -0,0 +1,2815 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:016236d9-4fc9-45de-b60d-bdd7d6b3083b", + "version": 1, + "metadata": { + "timestamp": "2026-08-13T07:00:34Z", + "tools": { + "components": [ + { + "type": "application", + "authors": [ + { + "name": "CycloneDX" + } + ], + "name": "CycloneDX module for .NET", + "version": "6.2.0.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-dotnet", + "type": "website" + } + ] + } + ] + }, + "component": { + "type": "application", + "bom-ref": "ServerMonitorManager@0.0.0", + "name": "ServerMonitorManager", + "version": "0.0.0" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.ApplicationInsights", + "version": "2.23.0", + "description": "Application Insights Base API. This package provides core functionality for transmission of all Application Insights Telemetry Types and is a dependent package for all other Application Insights packages. Please install the platform specific package for the best experience. Privacy statement: https://go.microsoft.com/fwlink/?LinkId=512156", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DD497BFAD0C65E54A4F78D2A1644F3D0854D4CD01DD83BA506F8D5D53635E28152C7C13210DD5DD3985780AAB146A7620DE3EBAEAD8EF12C6F87088676C2157F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "externalReferences": [ + { + "url": "https://go.microsoft.com/fwlink/?LinkId=392727", + "type": "website" + }, + { + "url": "https://github.com/Microsoft/ApplicationInsights-dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Authentication.Certificate", + "version": "10.0.10", + "description": "ASP.NET Core middleware that enables an application to support certificate authentication.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "FD902F01F05EFDEF7EB362EF0187438EBA3512D40722A547BB3DE8B1A823DF68FB660DBD097764E848EAA5CDAFC20D1F121EF45667B06A4C0756ADE371B25455" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Mvc.Testing", + "version": "10.0.10", + "description": "Support for writing functional tests for MVC applications.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0604BE8DA0AEE0F088C0513EF58E1927C9097E376A7517887F85F4BD9C4469E4D0034C4B855D10DA30EE62966383578FDE509157CB5C56EAA892E2053C64DF74" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.TestHost", + "version": "10.0.10", + "description": "ASP.NET Core web server for writing and running tests.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "4D8702FC6CA49443CFAF7F565A1D6FFA2E6B8DC7A52BFBD505B65FA20ACDC8D5D69D760E7380C32C82B2C76062E83B817AA9DE3FE822E423F6D4D1628F9A3540" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Bcl.AsyncInterfaces", + "version": "6.0.0", + "description": "Provides the IAsyncEnumerable\u003CT\u003E and IAsyncDisposable interfaces and helper types for .NET Standard 2.0. This package is not required starting with .NET Standard 2.1 and .NET Core 3.0.\n\nCommonly Used Types:\nSystem.IAsyncDisposable\nSystem.Collections.Generic.IAsyncEnumerable\nSystem.Collections.Generic.IAsyncEnumerator", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "221A05A0C910F7A87B620D8F3831ED392B4EB95D112BEE274D35F27009AD2A26445DE9D7CD235FE6FB4A03F2550874BDA3BE3DDDD96EDAF9C0852A9C23D7B099" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.CodeCoverage", + "version": "18.8.1", + "description": "Microsoft.CodeCoverage package brings infra for collecting code coverage from vstest.console.exe and \u0022dotnet test\u0022.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F21F6B39BBBCE89302D28B8E77B99E3633E18EB4D840F132393E3686C841C5DC649EFA5F60B4734D8D7764185101FEEDA2197BC00A6AABF69A37A591C617708F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "9FD331CF8F4C4026F1B7B9C651FB33E80CE1D0E0D6F46DD00E41E71E598CFEFB8E318CCB8519064CA4FB9F82D4126D08F42041E5987E186676ADAA2595E229D4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite.Core", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite. This package does not include a copy of the native SQLite library.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "723A1B77BFE3966982CA0242256B2DC320ED878C4ED9480680D75D91B716AC27013FA5FE533800C50C7C6000E50046AC10AF5DBC48E3CA4EB885C6ED65BC2CB1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Abstractions", + "version": "10.0.10", + "description": "Caching abstractions for in-memory cache and distributed cache.\n\nCommonly Used Types:\nMicrosoft.Extensions.Caching.Distributed.IDistributedCache\nMicrosoft.Extensions.Caching.Memory.IMemoryCache", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "02858A6F1E814D2FCBA5506A1E5E1BC125186FE76E89235D073B0DCA84C62802E6680E6C13AD8AC07AC5B6358A0691CF473C80122C062A7AC8AE557D7A5A7A5B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Memory", + "version": "10.0.10", + "description": "In-memory cache implementation of Microsoft.Extensions.Caching.Memory.IMemoryCache.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DDBBEC0D9A6C493F5BEAE10A1446E24664A17F9A8E5B694C6CFD315EE8C3F19490AC51F5ABBB624BD51FD14CDA381D515BCFF7F1A4D3AAEF06F589EA8FA7EDF4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration", + "version": "10.0.10", + "description": "Implementation of key-value pair based configuration for Microsoft.Extensions.Configuration. Includes the memory configuration provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "943C09D6B759963DD401BD8F3C3D7F9744436AE1157EF93810A8CAC823E3ED096A51817327AFADDC5741E541912D493D053D566CD898E6F8628398C7264981B3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Abstractions", + "version": "10.0.10", + "description": "Provides abstractions of key-value pair based configuration. Interfaces defined in this package are implemented by classes in Microsoft.Extensions.Configuration and other configuration packages.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "7BF4CD6F25D7E030E366CC9CB593B79A890F347DF598062C0D2030CDB62D23F465F69CCDFC7E83D3E709FCBE12EDC4BD4AF68229C2D889216AA84EBD43A6B162" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Binder", + "version": "10.0.10", + "description": "Provides the functionality to bind an object to data in configuration providers for Microsoft.Extensions.Configuration. This package enables you to represent the configuration data as strongly-typed classes defined in the application code. To bind a configuration, use the Microsoft.Extensions.Configuration.ConfigurationBinder.Get extension method on the IConfiguration object. To use this package, you also need to install a package for the configuration provider, for example, Microsoft.Extensions.Configuration.Json for the JSON provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "23414BBDE074A3E494848748823D8CA24B242A3915BAA77D96C8F8251B73CE73C32981326E66738291EF303C0C2B5F4B2933C13741BF5CE5AE106EEBACAF06C0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.CommandLine", + "version": "10.0.10", + "description": "Command line configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from the command line arguments of your application. You can use CommandLineConfigurationExtensions.AddCommandLine extension method on IConfigurationBuilder to add the command line configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "4F3012F2AAE997570A379C5C352BD1548B24F61901CBF9FF5C05444E6FC8ECA998B8F6C58DC1251EBC0DA7F282D26BA9BD82167D5628C1E4DAE0FC3DB335036D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.EnvironmentVariables", + "version": "10.0.10", + "description": "Environment variables configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from environment variables. You can use EnvironmentVariablesExtensions.AddEnvironmentVariables extension method on IConfigurationBuilder to add the environment variables configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "A5A066D0AFEE703C7E69742C494AD82E75BF0B7A4B0BCCA9B07B8EA9D208BA7B6B1FE8A9937E58A729711FAF871AA12405CB04B7C940D0BFE26E40880EF73AC1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.FileExtensions", + "version": "10.0.10", + "description": "Provides a base class for file-based configuration providers used with Microsoft.Extensions.Configuration and extension methods for configuring them.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0EA7FB571C819E1CD371FD21F05323330C8350050A78B3905034FD7C53504EE8C437D02E109B64490E58CA406727A5DA8749898E969460755558CC0A4E04F3F4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Json", + "version": "10.0.10", + "description": "JSON configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read your application\u0027s settings from a JSON file. You can use JsonConfigurationExtensions.AddJsonFile extension method on IConfigurationBuilder to add the JSON configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1522329F5E7ACE8270D3B69D1973C5D9A32FDFEDE6F8050B304E349A16DFD8F0B08DFC1E6143139FC59A3CE4E0B72B2F454CC3D61C02C93E53B4012C9DA67879" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.UserSecrets", + "version": "10.0.10", + "description": "User secrets configuration provider implementation for Microsoft.Extensions.Configuration. User secrets mechanism enables you to override application configuration settings with values stored in the local secrets file. You can use UserSecretsConfigurationExtensions.AddUserSecrets extension method on IConfigurationBuilder to add user secrets provider to the configuration builder.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "044707479CFBA9BADC7958E44B5A3C139E11CCEA75FAE8D2A14BD59296B415C35A1F6FBDF372FF2D1A641A0E1FE99E815C4193103826DFA2167A947B0AC09BC7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection", + "version": "10.0.10", + "description": "Default implementation of dependency injection for Microsoft.Extensions.DependencyInjection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "8628EEC1C26F27A7956EECF3D0468FDD865039826770F267F9A4EEBE8D7949E37D1C298B85B8A73A873D9A04FDF5E50E5930E0289F3C4824137B0543FE0E7B0D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection.Abstractions", + "version": "10.0.10", + "description": "Abstractions for dependency injection.\n\nCommonly Used Types:\nMicrosoft.Extensions.DependencyInjection.IServiceCollection", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C40AF270352D0049FBDDB6403EB0B5206F0B6318760146E8093A9972B2AB965D7A5213A28E473742712E54F7ABB288EAB7A46659B41C7426D454ECEE4A931EAC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyModel", + "version": "10.0.10", + "description": "Provides abstractions for reading \u0060.deps\u0060 files. When a .NET application is compiled, the SDK generates a JSON manifest file (\u0060\u003CApplicationName\u003E.deps.json\u0060) that contains information about application dependencies. You can use \u0060Microsoft.Extensions.DependencyModel\u0060 to read information from this manifest at run time. This is useful when you want to dynamically compile code (for example, using Roslyn Emit API) referencing the same dependencies as your main application.\n\nBy default, the dependency manifest contains information about the application\u0027s target framework and runtime dependencies. Set the PreserveCompilationContext project property to \u0060true\u0060 to additionally include information about reference assemblies used during compilation.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "3887E253D85866E50B994DED19AF4988FC51E7551E86463CB96CC8B43E477D9CCCE9CD2AF9F5584B6905E21F247F32679A83FFFBFDC325D0DF40CEBD557D4EBB" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics", + "version": "10.0.10", + "description": "This package includes the default implementation of IMeterFactory and additional extension methods to easily register it with the Dependency Injection framework.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "EFA65F0DFC19BA6608050F87D9C9CC33A06B5C105B207D7C4259D280F3A36253F7A380FEFC6C9641AD9929FDCBFF5E00B4886F12399698CC716D65CE8131BE62" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics.Abstractions", + "version": "10.0.10", + "description": "Diagnostic abstractions for Microsoft.Extensions.Diagnostics.\n\nCommonly Used Types:\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsBuilder\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsListener\nMicrosoft.Extensions.Diagnostics.Metrics.InstrumentRule\nMicrosoft.Extensions.Diagnostics.Metrics.MeterScope\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsBuilderExtensions\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsOptions", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "B163E11DDD5E10CEB4D4091CFBE35A24A61CA70A29D48D988E9CA48F5E9A799B40E1C7752701F7F78D3A586B1787507581357E4A2813A8F561BE9CB80A3BB4AF" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Abstractions", + "version": "10.0.10", + "description": "Abstractions of files and directories.\n\nCommonly Used Types:\nMicrosoft.Extensions.FileProviders.IDirectoryContents\nMicrosoft.Extensions.FileProviders.IFileInfo\nMicrosoft.Extensions.FileProviders.IFileProvider", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "6F38363D1EEEC3034C1BCFF9058B295F19C4F26E9CEDAAEC671AF3FA22D212E671DB8CAB0688DDB01609C850A06D0C2C5B103176F862F7F7DCABA16481D51C51" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Physical", + "version": "10.0.10", + "description": "File provider for physical files for Microsoft.Extensions.FileProviders.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "F62D2D671CA52BEE6BF8E252853D84A9D575FB87D8A04E9DD98EA5BB25E86BA1C6F912D1042CA7A044AB64B879705D458A62F176DB1CA4224FAC06CD52102ABD" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileSystemGlobbing", + "version": "10.0.10", + "description": "File system globbing to find files matching a specified pattern.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1949E7C288D884B5FF6D2B4A54D468FFA42F0285FAB0786A5D58FA47A7F0F5DAAA3A491AAD092F31D07D190CA27CC25F632DBA0C8D25D2D44BDF32058EDD04D5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting", + "version": "10.0.10", + "description": "Hosting and startup infrastructures for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DEF44959988A0DFBC945DC865F25BB0AD3B3872A3E48AC96A71D642EB04A9F3C6CA8B3FD9B2129E2063FE67F5C98AA7FC3D2D049AFE1076F546E82578DF8A822" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting.Abstractions", + "version": "10.0.10", + "description": "Hosting and startup abstractions for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "029B3B822BE940A6994B3A7333046E64C75E471C7F3225C690C0CB3CEC6C19D20594AADAB5EFC28602C2FA37EE3BCD745ED26632B7F7A4580CD0294D3B966DC9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging", + "version": "10.0.10", + "description": "Logging infrastructure default implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "5261C9AAFF6B83BB3A806EFD91CFB37BED7FE8FB5FD990FE41F0BB6B772BF29AC8320C68371B50FB8AE7D8EC3394428EAB4722DC1EC6D72015BA166351956710" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Abstractions", + "version": "10.0.10", + "description": "Logging abstractions for Microsoft.Extensions.Logging.\n\nCommonly Used Types:\nMicrosoft.Extensions.Logging.ILogger\nMicrosoft.Extensions.Logging.ILoggerFactory\nMicrosoft.Extensions.Logging.ILogger\u003CTCategoryName\u003E\nMicrosoft.Extensions.Logging.LogLevel\nMicrosoft.Extensions.Logging.Logger\u003CT\u003E\nMicrosoft.Extensions.Logging.LoggerMessage\nMicrosoft.Extensions.Logging.Abstractions.NullLogger", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FCC5A6CD33BCCA73B47C0771BD1AD9CC044EAC53D3AF43C017CC684932F1F107981C7A0312922C14E6E2AA9B8DF1D3A70655DD0ACDCF9B97D3CE975FC21D588" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Configuration", + "version": "10.0.10", + "description": "Configuration support for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2F34EA98C7F9E1D4B61F3690F5C05A2D88552D672DB4BCE1B8A9EC50DB766530D61CA15FBD9D90B24C46E63B386F771DF8361ACBECF4ABFC7C0C942309AB2B3E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Console", + "version": "10.0.10", + "description": "Console logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6E3AFE1DB83957364483B116F176B0048D0AA0B277B7134F4F0FEAEB159DBBA7175A79916A46183D376346BA13D91F5D22D97E6CC6AAC65946FA562F821E974E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Debug", + "version": "10.0.10", + "description": "Debug output logger provider implementation for Microsoft.Extensions.Logging. This logger logs messages to a debugger monitor by writing messages with System.Diagnostics.Debug.WriteLine().", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB85BB3E6F032241404637C4642C14702C7337BB8AB3EB2BDE33AFF5000A055D60B6171AA86C7F6D42C55ECB8168D826C2A77A11423BEF2031781900E78E1925" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventLog", + "version": "10.0.10", + "description": "Windows Event Log logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "859BAF5F7B66880559D2B0F56881F61C4980C727BB927DE2BAF868829EC2779F809F7B5263E353E9F1868F676AD19816B824B42955E5792D3216B4E53DA05A4D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventSource", + "version": "10.0.10", + "description": "EventSource/EventListener logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "251D1821F49878B2F829F7A625A26B6F94CD9E2AD218B830859FB1137448EDFAE5CAEA267C459B02E23F09AD9E72A9A5EF491E5B25390FECFB958EB363534211" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options", + "version": "10.0.10", + "description": "Provides a strongly typed way of specifying and accessing settings using dependency injection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "538322A27FD9BB004C4C3FC21FC584EC08EDE88740B54DC95CBC241B553339633594D167A0EF0D02E42D6482CDA642B218414FF6DEC5BD06A48079CC0948D929" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options.ConfigurationExtensions", + "version": "10.0.10", + "description": "Provides additional configuration specific functionality related to Options.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "07F056E666E542729A25A06C672DF351373F9D5029BCA0D14AD3AD08DAE2CCA903E776B23E6DE3BBE5051DA68876CBC003F7AFD2EF4C08E7B32E60033465A45A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Primitives", + "version": "10.0.10", + "description": "Primitives shared by framework extensions. Commonly used types include:\n\nCommonly Used Types:\nMicrosoft.Extensions.Primitives.IChangeToken\nMicrosoft.Extensions.Primitives.StringValues\nMicrosoft.Extensions.Primitives.StringSegment", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "B3F778D24AFDF4711BEBA10DE673F9EB3ABAEC108B86862FDF1DE64F554B543A503FB3BBB0ABC38E0AF8B800EF39D3660FC660943235C734786FAEB11D4FAD64" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.ILLink.Tasks", + "version": "10.0.10", + "description": "MSBuild tasks for running the IL Linker", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "804F0EEC3AD1008DD08ABDF24B3BDD465EC3CD57FC5EB15F234BDB5179761878A6DDD30F755A25F43C70361FD3CEAF729A8935294FB6C2EDAAAC5E6358DBF5A5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.Test.Sdk", + "version": "18.8.1", + "description": "The MSbuild targets and properties for building .NET test projects.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "ED924163245F79A57884396548B55BEDDB4B5D06F84A96C0872FACF5273E754576CF00D44D326D3CB6138DA9D2E64AAA9BEDBCDCD371218E36EF5B946343EF8F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.Telemetry", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides telemetry for the platform.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C5E54A968FD412E4CE2DCC98EBC3C9154FE2D49E2E5C539CE1460CF01A9D8FD4197D90EA5ACE8A9574368DB629FFBD224B273BE242083050087A2BD60FB7D917" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.TrxReport.Abstractions", + "version": "1.9.1", + "description": "Package Description", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "665DC7C980F6089E8AD472201353A0BAC308BC55976603332BF8E568247FBD3C1FC644C9A904AE9F800E50968D2EF02D735ADA4616E8FC9C75CB18290A7540EC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides the core platform and the .NET implementation of the protocol.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "10C89A7E4A01422839D3EE8DDE9FD6B1E8C8504A082573A1209398434AD1436FB2774BB96C969CC1E6079B123483303224DE3273F8346F00ED151F2F4F361A4B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform.MSBuild", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides MSBuild integration of the platform, its extensions and configuration files.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "568901EC1C20B98D48692E6F182260177105A4C0BE28903805AC3F052D340D6D4B6C6A11F5931B23D10078FF0A70BB654FF606E8BB8C743DEEC1C1CDB8F36A1D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.ObjectModel", + "version": "18.8.1", + "description": "The Microsoft Test Platform Object Model.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "FA783FB4A40D48E96B1901D473BD83DDC83AD873D58B05D7042D05A1E10EEA6D6EE07E130A3213272E989B56C2F05A258F43004F4637DB7EA132D63AEF31A985" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.TestHost", + "version": "18.8.1", + "description": "Testplatform host executes the test using specified adapter.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "46D7AB005785910C271F30A658151CB71107FD87A78F7F7DE78811E49EC8657424E68901BFA943DD73AFD2E18645ED361294638436B01DA1945C7A4504A7C8DE" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Win32.Registry", + "version": "5.0.0", + "description": "Provides support for accessing and modifying the Windows Registry.\n\nCommonly Used Types:\nMicrosoft.Win32.RegistryKey\nMicrosoft.Win32.Registry\nMicrosoft.Win32.RegistryValueKind\nMicrosoft.Win32.RegistryHive\nMicrosoft.Win32.RegistryView\n \nWhen using NuGet 3.x this package requires at least version 3.4.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "471E66567CE59CC86475AECE7815D05261264CE114E0C1688BA2551DD51494901FA72DD7A8F74F8E8F0F3DBA74AF8595F177552F3C06ABB4BFCE76692197076E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/dotnet/runtime", + "type": "website" + }, + { + "url": "git://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLite@3.53.4", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLite", + "version": "3.53.4", + "description": "This package contains builds of the native SQLite code for various platforms. \n These builds have \u0022e_sqlite3\u0022 as the base name. The first three numbers in the version number of this package indicate the version of SQLite that was used to build it. The fourth number, if there is one, is incremented as needed for packaging-specific changes.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "81D145648BACFF3B4C8CD1794DF9956C47B229264467AA7001EA9A306E429CEB2855EC9296509541C82FC3C9BCFF04617AB3E86169932700BDAD5B0C03C482EF" + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLite@3.53.4", + "externalReferences": [ + { + "url": "https://sqlite.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.bundle_e_sqlite3", + "version": "3.0.5", + "description": "This \u0027batteries-included\u0027 bundle brings in SQLitePCLRaw.core and the necessary stuff for certain common use cases. Call SQLitePCL.Batteries.Init().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "12F980014C25F0C3E20C7B331418933FC84C7635B65597CEAB09C20EA00C055043C866BEF8614EA6BC38D7A484D8FF339D4387BBE760BC892F4E2702CD23AB2F" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.config.e_sqlite3", + "version": "3.0.5", + "description": "This package sets the configuration for using e_sqlite3 but does not bring in that native library itself. It\u0027s like bundle_e_sqlite3, except it\u0027s hollow.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A25E95EE323DDFEB8FC920D26551B4AFED854A3D9DDA833C3507331AB2043E0C9F16D62C2100560373AFC20E54D3F69F42ABDD6DA6E75EF7DCC0EA861B5AF12" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.core", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. This package does not provide an API which is friendly to app developers. Rather, it provides an API which handles platform and configuration issues, upon which a friendlier API can be built. In order to use this package, you will need to also add one of the SQLitePCLRaw.provider.* packages and call raw.SetProvider().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "24209D65527E0F82BB4E151B610195D39CB4732891CE1F0E2BA0965371DA381F1E636CD9256AE7DC5B76C604E36D33B7CA63AFDE09E6A8A40A9B2FCB5F01AA03" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.provider.e_sqlite3", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. Packages named \u0027SQLitePCLRaw.provider.*\u0027 (like this one) are \u0027plugins\u0027 that allow SQLitePCLRaw.core to access the native SQLite library. This provider does DllImport of \u0027e_sqlite3\u0027, the SQLite builds provided with SQLitePCLRaw.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "716EE95A124695CE5B2E2C834509E66991585B5AD1843B4CC6D135FE078DFE2D2E867A2E83978DEF09B8691833370803251F792537E59203455054AC24F82CC9" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "System.Diagnostics.EventLog", + "version": "10.0.10", + "description": "Provides the System.Diagnostics.EventLog class, which allows the applications to use the Windows event log service.\n\nCommonly Used Types:\nSystem.Diagnostics.EventLog", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F98A922C208C90F09A247CF2C251048B3EBADD8633787F967E5701427765C77C298F40E54A8D2BF5EBFEF729EFD3E8CFC5C17EFDD5F2CD80184532C24B5A481A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.analyzers@1.27.0", + "authors": [ + { + "name": "jnewkirk,bradwilson,marcind" + } + ], + "name": "xunit.analyzers", + "version": "1.27.0", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features.\n\nInstalling this package provides code analyzers to help developers find and fix frequent issues when writing tests and xUnit.net extensibility code.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2B920EDBD64D376C9D7B3DA38654D1B11DB4CA5A7F79032B320A289DF229BFD73DB1604DE8C5D120F196C6FBA8B688EE493DC7814F5EFD7EE5E3F56238B3C1BF" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.analyzers@1.27.0", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit.analyzers", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.runner.visualstudio", + "version": "3.1.5", + "description": "Visual Studio 2022\u002B Test Explorer runner for the xUnit.net framework. Capable of running xUnit.net v1, v2, and v3 tests. Supports .NET 4.7.2 or later, and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FFB6F37D917B54777C124986C2F3421CEB2FDD62561B352BDAB588AFEF58A8CCF857A8CE0468EB87BA3908261F396FEC18E9D81FDB993D10D4B2F2337A9A5BD" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "externalReferences": [ + { + "url": "https://github.com/xunit/visualstudio.xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.mtp-v1.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "9612F4811FCE910665551AC371386B7460BC118A39D78892C357093F92AAA9EA1A5DC21E2F939AE3FF0D599C9C62749A2F95871226E60AFA2A9807EB26BBF7D6" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.assert", + "version": "3.2.2", + "description": "Includes the assertion library from xUnit.net (xunit.v3.assert.dll). Supports .NET Standard 2.0 and .NET 8.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A1ABD3FA034E80012F33D59E5172B1E8D8C35DF57F3DAEA5982B8F9DDAC12FFF61B4B2C7585820077B1895B6C020AA71E80591FB51ABE1D99C08275C3573E7A" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.assert@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.common", + "version": "3.2.2", + "description": "Includes common code shared between xunit.v3.core and xunit.v3.runner.common (xunit.v3.common.dll). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A0FD19A2858C335F0EB5B6A246CDF1FD9B567484A3E60EDC736ACFB7CAFA04B90E874B485A22C4BF2377469B1AFF7658596C35282859F1D20137B913996AB0FC" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.core.mtp-v1", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for writing tests; extensibility authors should include xunit.v3.extensibility.core instead. Includes support for Microsoft.Testing.Platform v1. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "457A8F4EF036556D0181BB56D54A45950EFC6BBCB69EDDBEC341F0972AC086418CE6BB48655435BFA987DDC0CD5B97D97E26B0D57A589455C4248C54404B164B" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.extensibility.core", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for extensibility; test authors should include xunit.v3.core instead. Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DBD2BF9A1557CEBA2EE86994EAFC086F895691C97C03A125176DD2DC1CB497E10383022FF014FA8A30171D7446C794795B97DEED16EA70562768151A0A4DC3A2" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.mtp-v1", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.core.mtp-v1, xunit.v3.assert, and xunit.analyzers.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A1AF2350710CB1571CF31AF92BDFD2A835ADD5E90BCC132ADBB1E11ECA87CC1A3F0382D2A4AC6E8FA82E0E51F4D77FFAD71802A9A6F25DE936BF2280750104ED" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.common", + "version": "3.2.2", + "description": "Includes common code shared between in-process runners (like xunit.v3.runner.inproc.console) and xunit.v3.runner.utility (used by 1st and 3rd party external runners). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "226D0BA70448F5345532D159340CA70E0D4B08B766FFC9C97AEE33F86C7715AAF3A916A610322DB805AFEBA56FC1323480ADF7F125B8A960C51FBA4F266AEFB0" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.inproc.console", + "version": "3.2.2", + "description": "In-process console runner for xUnit.net framework, providing the entrypoint for self-executing unit tests. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB9F10495A9497A07232E3739FCAFE3ADB923F097314F2EF6BC1DA0E85EBA69353F8618136E0274A45EF9992FE4B2232A82F626D5DF8CA0124039C6CAE66C2FE" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/System.Diagnostics.EventLog@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLite@3.53.4", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLite@3.53.4", + "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.analyzers@1.27.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.analyzers@1.27.0", + "pkg:nuget/xunit.v3.assert@3.2.2", + "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.mtp-v1@3.2.2" + ] + }, + { + "ref": "ServerMonitorManager@0.0.0", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "pkg:nuget/xunit.v3@3.2.2" + ] + } + ] +} \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-x64.tar.gz.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-x64.tar.gz.sha256 new file mode 100644 index 0000000..2248452 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-linux-x64.tar.gz.sha256 @@ -0,0 +1 @@ +bf2ce4404c13791bb19539d6cc259ec79a228c38b5aa02d0b723fc73a312a0a8 server-monitor-manager-linux-x64.tar.gz diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-manifest.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-manifest.json new file mode 100644 index 0000000..37079d0 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-manifest.json @@ -0,0 +1,23 @@ +{ + "schema": "smm-manifest/v2", + "version": "v0.1.0-alpha.13", + "components": { + "control": "v0.1.0-alpha.13", + "agent": "v0.1.0-alpha.13", + "helper": "v0.1.0-alpha.13", + "desktop": "v0.1.0-alpha.13" + }, + "protocols": { + "helper_protocol": "v1" + }, + "hashes": { + "ochenstarik-server-monitor-manager.sh": "77899bc545eadb591f0e311b4998b09cbf279eb17aa6d6073009ca4f3617f3a4", + "smm-setup.sh": "f387419eafe82e10104b2904585af12ea3e9420cc5658b8469699c1aba15aa41", + "server-monitor-manager-linux-x64.tar.gz": "bf2ce4404c13791bb19539d6cc259ec79a228c38b5aa02d0b723fc73a312a0a8", + "server-monitor-manager-linux-arm64.tar.gz": "1cf8fb84957d0b4290be677c6ad102b65f46895128f70680b62d2af36e211935", + "ServerMonitorManager-win-x64.msix": "d2a35c96f736111ac1a0e5f45bcd8b50226601bd5d2272965b0df19891caab74", + "server-monitor-manager-linux-x64-sbom.json": "08ac7aa6b7f543bf89cf0b2ad56bc73adac3b63cc44c5eb511d53dd15efc33a0", + "server-monitor-manager-linux-arm64-sbom.json": "3f3a382927c5a59d9b52386972c825ae4f65fc67a22331dbf16f0d8f0ae12598", + "server-monitor-manager-win-x64-sbom.json": "19fb43f551d4dca657e450b5cc8bf601b73a2241e1548ba8c8d4bc1274d2773b" + } +} diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-manifest.sig b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-manifest.sig new file mode 100644 index 0000000..da82987 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-manifest.sig @@ -0,0 +1 @@ +MEQCIFrMN48EVtKVc0c3hNGXAVK9eMxBe9pJWwu/kqMrARNSAiAetBLUuqjQqeyCaLP2eIuXEGJkLpgFKlx8rCUmEN6FAQ== \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-win-x64-sbom.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-win-x64-sbom.json new file mode 100644 index 0000000..ae9a5ef --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/server-monitor-manager-win-x64-sbom.json @@ -0,0 +1,2815 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:8f9e78f3-13ee-471f-ac48-cdec339085d9", + "version": 1, + "metadata": { + "timestamp": "2026-08-13T07:01:24Z", + "tools": { + "components": [ + { + "type": "application", + "authors": [ + { + "name": "CycloneDX" + } + ], + "name": "CycloneDX module for .NET", + "version": "6.2.0.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-dotnet", + "type": "website" + } + ] + } + ] + }, + "component": { + "type": "application", + "bom-ref": "ServerMonitorManager@0.0.0", + "name": "ServerMonitorManager", + "version": "0.0.0" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.ApplicationInsights", + "version": "2.23.0", + "description": "Application Insights Base API. This package provides core functionality for transmission of all Application Insights Telemetry Types and is a dependent package for all other Application Insights packages. Please install the platform specific package for the best experience. Privacy statement: https://go.microsoft.com/fwlink/?LinkId=512156", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DD497BFAD0C65E54A4F78D2A1644F3D0854D4CD01DD83BA506F8D5D53635E28152C7C13210DD5DD3985780AAB146A7620DE3EBAEAD8EF12C6F87088676C2157F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "externalReferences": [ + { + "url": "https://go.microsoft.com/fwlink/?LinkId=392727", + "type": "website" + }, + { + "url": "https://github.com/Microsoft/ApplicationInsights-dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Authentication.Certificate", + "version": "10.0.10", + "description": "ASP.NET Core middleware that enables an application to support certificate authentication.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "FD902F01F05EFDEF7EB362EF0187438EBA3512D40722A547BB3DE8B1A823DF68FB660DBD097764E848EAA5CDAFC20D1F121EF45667B06A4C0756ADE371B25455" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Mvc.Testing", + "version": "10.0.10", + "description": "Support for writing functional tests for MVC applications.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0604BE8DA0AEE0F088C0513EF58E1927C9097E376A7517887F85F4BD9C4469E4D0034C4B855D10DA30EE62966383578FDE509157CB5C56EAA892E2053C64DF74" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.TestHost", + "version": "10.0.10", + "description": "ASP.NET Core web server for writing and running tests.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "4D8702FC6CA49443CFAF7F565A1D6FFA2E6B8DC7A52BFBD505B65FA20ACDC8D5D69D760E7380C32C82B2C76062E83B817AA9DE3FE822E423F6D4D1628F9A3540" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Bcl.AsyncInterfaces", + "version": "6.0.0", + "description": "Provides the IAsyncEnumerable\u003CT\u003E and IAsyncDisposable interfaces and helper types for .NET Standard 2.0. This package is not required starting with .NET Standard 2.1 and .NET Core 3.0.\n\nCommonly Used Types:\nSystem.IAsyncDisposable\nSystem.Collections.Generic.IAsyncEnumerable\nSystem.Collections.Generic.IAsyncEnumerator", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "221A05A0C910F7A87B620D8F3831ED392B4EB95D112BEE274D35F27009AD2A26445DE9D7CD235FE6FB4A03F2550874BDA3BE3DDDD96EDAF9C0852A9C23D7B099" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.CodeCoverage", + "version": "18.8.1", + "description": "Microsoft.CodeCoverage package brings infra for collecting code coverage from vstest.console.exe and \u0022dotnet test\u0022.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F21F6B39BBBCE89302D28B8E77B99E3633E18EB4D840F132393E3686C841C5DC649EFA5F60B4734D8D7764185101FEEDA2197BC00A6AABF69A37A591C617708F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "9FD331CF8F4C4026F1B7B9C651FB33E80CE1D0E0D6F46DD00E41E71E598CFEFB8E318CCB8519064CA4FB9F82D4126D08F42041E5987E186676ADAA2595E229D4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite.Core", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite. This package does not include a copy of the native SQLite library.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "723A1B77BFE3966982CA0242256B2DC320ED878C4ED9480680D75D91B716AC27013FA5FE533800C50C7C6000E50046AC10AF5DBC48E3CA4EB885C6ED65BC2CB1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Abstractions", + "version": "10.0.10", + "description": "Caching abstractions for in-memory cache and distributed cache.\n\nCommonly Used Types:\nMicrosoft.Extensions.Caching.Distributed.IDistributedCache\nMicrosoft.Extensions.Caching.Memory.IMemoryCache", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "02858A6F1E814D2FCBA5506A1E5E1BC125186FE76E89235D073B0DCA84C62802E6680E6C13AD8AC07AC5B6358A0691CF473C80122C062A7AC8AE557D7A5A7A5B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Memory", + "version": "10.0.10", + "description": "In-memory cache implementation of Microsoft.Extensions.Caching.Memory.IMemoryCache.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DDBBEC0D9A6C493F5BEAE10A1446E24664A17F9A8E5B694C6CFD315EE8C3F19490AC51F5ABBB624BD51FD14CDA381D515BCFF7F1A4D3AAEF06F589EA8FA7EDF4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration", + "version": "10.0.10", + "description": "Implementation of key-value pair based configuration for Microsoft.Extensions.Configuration. Includes the memory configuration provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "943C09D6B759963DD401BD8F3C3D7F9744436AE1157EF93810A8CAC823E3ED096A51817327AFADDC5741E541912D493D053D566CD898E6F8628398C7264981B3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Abstractions", + "version": "10.0.10", + "description": "Provides abstractions of key-value pair based configuration. Interfaces defined in this package are implemented by classes in Microsoft.Extensions.Configuration and other configuration packages.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "7BF4CD6F25D7E030E366CC9CB593B79A890F347DF598062C0D2030CDB62D23F465F69CCDFC7E83D3E709FCBE12EDC4BD4AF68229C2D889216AA84EBD43A6B162" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Binder", + "version": "10.0.10", + "description": "Provides the functionality to bind an object to data in configuration providers for Microsoft.Extensions.Configuration. This package enables you to represent the configuration data as strongly-typed classes defined in the application code. To bind a configuration, use the Microsoft.Extensions.Configuration.ConfigurationBinder.Get extension method on the IConfiguration object. To use this package, you also need to install a package for the configuration provider, for example, Microsoft.Extensions.Configuration.Json for the JSON provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "23414BBDE074A3E494848748823D8CA24B242A3915BAA77D96C8F8251B73CE73C32981326E66738291EF303C0C2B5F4B2933C13741BF5CE5AE106EEBACAF06C0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.CommandLine", + "version": "10.0.10", + "description": "Command line configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from the command line arguments of your application. You can use CommandLineConfigurationExtensions.AddCommandLine extension method on IConfigurationBuilder to add the command line configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "4F3012F2AAE997570A379C5C352BD1548B24F61901CBF9FF5C05444E6FC8ECA998B8F6C58DC1251EBC0DA7F282D26BA9BD82167D5628C1E4DAE0FC3DB335036D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.EnvironmentVariables", + "version": "10.0.10", + "description": "Environment variables configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from environment variables. You can use EnvironmentVariablesExtensions.AddEnvironmentVariables extension method on IConfigurationBuilder to add the environment variables configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "A5A066D0AFEE703C7E69742C494AD82E75BF0B7A4B0BCCA9B07B8EA9D208BA7B6B1FE8A9937E58A729711FAF871AA12405CB04B7C940D0BFE26E40880EF73AC1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.FileExtensions", + "version": "10.0.10", + "description": "Provides a base class for file-based configuration providers used with Microsoft.Extensions.Configuration and extension methods for configuring them.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0EA7FB571C819E1CD371FD21F05323330C8350050A78B3905034FD7C53504EE8C437D02E109B64490E58CA406727A5DA8749898E969460755558CC0A4E04F3F4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Json", + "version": "10.0.10", + "description": "JSON configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read your application\u0027s settings from a JSON file. You can use JsonConfigurationExtensions.AddJsonFile extension method on IConfigurationBuilder to add the JSON configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1522329F5E7ACE8270D3B69D1973C5D9A32FDFEDE6F8050B304E349A16DFD8F0B08DFC1E6143139FC59A3CE4E0B72B2F454CC3D61C02C93E53B4012C9DA67879" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.UserSecrets", + "version": "10.0.10", + "description": "User secrets configuration provider implementation for Microsoft.Extensions.Configuration. User secrets mechanism enables you to override application configuration settings with values stored in the local secrets file. You can use UserSecretsConfigurationExtensions.AddUserSecrets extension method on IConfigurationBuilder to add user secrets provider to the configuration builder.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "044707479CFBA9BADC7958E44B5A3C139E11CCEA75FAE8D2A14BD59296B415C35A1F6FBDF372FF2D1A641A0E1FE99E815C4193103826DFA2167A947B0AC09BC7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection", + "version": "10.0.10", + "description": "Default implementation of dependency injection for Microsoft.Extensions.DependencyInjection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "8628EEC1C26F27A7956EECF3D0468FDD865039826770F267F9A4EEBE8D7949E37D1C298B85B8A73A873D9A04FDF5E50E5930E0289F3C4824137B0543FE0E7B0D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection.Abstractions", + "version": "10.0.10", + "description": "Abstractions for dependency injection.\n\nCommonly Used Types:\nMicrosoft.Extensions.DependencyInjection.IServiceCollection", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C40AF270352D0049FBDDB6403EB0B5206F0B6318760146E8093A9972B2AB965D7A5213A28E473742712E54F7ABB288EAB7A46659B41C7426D454ECEE4A931EAC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyModel", + "version": "10.0.10", + "description": "Provides abstractions for reading \u0060.deps\u0060 files. When a .NET application is compiled, the SDK generates a JSON manifest file (\u0060\u003CApplicationName\u003E.deps.json\u0060) that contains information about application dependencies. You can use \u0060Microsoft.Extensions.DependencyModel\u0060 to read information from this manifest at run time. This is useful when you want to dynamically compile code (for example, using Roslyn Emit API) referencing the same dependencies as your main application.\n\nBy default, the dependency manifest contains information about the application\u0027s target framework and runtime dependencies. Set the PreserveCompilationContext project property to \u0060true\u0060 to additionally include information about reference assemblies used during compilation.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "3887E253D85866E50B994DED19AF4988FC51E7551E86463CB96CC8B43E477D9CCCE9CD2AF9F5584B6905E21F247F32679A83FFFBFDC325D0DF40CEBD557D4EBB" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics", + "version": "10.0.10", + "description": "This package includes the default implementation of IMeterFactory and additional extension methods to easily register it with the Dependency Injection framework.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "EFA65F0DFC19BA6608050F87D9C9CC33A06B5C105B207D7C4259D280F3A36253F7A380FEFC6C9641AD9929FDCBFF5E00B4886F12399698CC716D65CE8131BE62" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics.Abstractions", + "version": "10.0.10", + "description": "Diagnostic abstractions for Microsoft.Extensions.Diagnostics.\n\nCommonly Used Types:\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsBuilder\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsListener\nMicrosoft.Extensions.Diagnostics.Metrics.InstrumentRule\nMicrosoft.Extensions.Diagnostics.Metrics.MeterScope\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsBuilderExtensions\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsOptions", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "B163E11DDD5E10CEB4D4091CFBE35A24A61CA70A29D48D988E9CA48F5E9A799B40E1C7752701F7F78D3A586B1787507581357E4A2813A8F561BE9CB80A3BB4AF" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Abstractions", + "version": "10.0.10", + "description": "Abstractions of files and directories.\n\nCommonly Used Types:\nMicrosoft.Extensions.FileProviders.IDirectoryContents\nMicrosoft.Extensions.FileProviders.IFileInfo\nMicrosoft.Extensions.FileProviders.IFileProvider", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "6F38363D1EEEC3034C1BCFF9058B295F19C4F26E9CEDAAEC671AF3FA22D212E671DB8CAB0688DDB01609C850A06D0C2C5B103176F862F7F7DCABA16481D51C51" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Physical", + "version": "10.0.10", + "description": "File provider for physical files for Microsoft.Extensions.FileProviders.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "F62D2D671CA52BEE6BF8E252853D84A9D575FB87D8A04E9DD98EA5BB25E86BA1C6F912D1042CA7A044AB64B879705D458A62F176DB1CA4224FAC06CD52102ABD" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileSystemGlobbing", + "version": "10.0.10", + "description": "File system globbing to find files matching a specified pattern.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1949E7C288D884B5FF6D2B4A54D468FFA42F0285FAB0786A5D58FA47A7F0F5DAAA3A491AAD092F31D07D190CA27CC25F632DBA0C8D25D2D44BDF32058EDD04D5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting", + "version": "10.0.10", + "description": "Hosting and startup infrastructures for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DEF44959988A0DFBC945DC865F25BB0AD3B3872A3E48AC96A71D642EB04A9F3C6CA8B3FD9B2129E2063FE67F5C98AA7FC3D2D049AFE1076F546E82578DF8A822" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting.Abstractions", + "version": "10.0.10", + "description": "Hosting and startup abstractions for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "029B3B822BE940A6994B3A7333046E64C75E471C7F3225C690C0CB3CEC6C19D20594AADAB5EFC28602C2FA37EE3BCD745ED26632B7F7A4580CD0294D3B966DC9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging", + "version": "10.0.10", + "description": "Logging infrastructure default implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "5261C9AAFF6B83BB3A806EFD91CFB37BED7FE8FB5FD990FE41F0BB6B772BF29AC8320C68371B50FB8AE7D8EC3394428EAB4722DC1EC6D72015BA166351956710" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Abstractions", + "version": "10.0.10", + "description": "Logging abstractions for Microsoft.Extensions.Logging.\n\nCommonly Used Types:\nMicrosoft.Extensions.Logging.ILogger\nMicrosoft.Extensions.Logging.ILoggerFactory\nMicrosoft.Extensions.Logging.ILogger\u003CTCategoryName\u003E\nMicrosoft.Extensions.Logging.LogLevel\nMicrosoft.Extensions.Logging.Logger\u003CT\u003E\nMicrosoft.Extensions.Logging.LoggerMessage\nMicrosoft.Extensions.Logging.Abstractions.NullLogger", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FCC5A6CD33BCCA73B47C0771BD1AD9CC044EAC53D3AF43C017CC684932F1F107981C7A0312922C14E6E2AA9B8DF1D3A70655DD0ACDCF9B97D3CE975FC21D588" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Configuration", + "version": "10.0.10", + "description": "Configuration support for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2F34EA98C7F9E1D4B61F3690F5C05A2D88552D672DB4BCE1B8A9EC50DB766530D61CA15FBD9D90B24C46E63B386F771DF8361ACBECF4ABFC7C0C942309AB2B3E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Console", + "version": "10.0.10", + "description": "Console logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6E3AFE1DB83957364483B116F176B0048D0AA0B277B7134F4F0FEAEB159DBBA7175A79916A46183D376346BA13D91F5D22D97E6CC6AAC65946FA562F821E974E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Debug", + "version": "10.0.10", + "description": "Debug output logger provider implementation for Microsoft.Extensions.Logging. This logger logs messages to a debugger monitor by writing messages with System.Diagnostics.Debug.WriteLine().", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB85BB3E6F032241404637C4642C14702C7337BB8AB3EB2BDE33AFF5000A055D60B6171AA86C7F6D42C55ECB8168D826C2A77A11423BEF2031781900E78E1925" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventLog", + "version": "10.0.10", + "description": "Windows Event Log logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "859BAF5F7B66880559D2B0F56881F61C4980C727BB927DE2BAF868829EC2779F809F7B5263E353E9F1868F676AD19816B824B42955E5792D3216B4E53DA05A4D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventSource", + "version": "10.0.10", + "description": "EventSource/EventListener logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "251D1821F49878B2F829F7A625A26B6F94CD9E2AD218B830859FB1137448EDFAE5CAEA267C459B02E23F09AD9E72A9A5EF491E5B25390FECFB958EB363534211" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options", + "version": "10.0.10", + "description": "Provides a strongly typed way of specifying and accessing settings using dependency injection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "538322A27FD9BB004C4C3FC21FC584EC08EDE88740B54DC95CBC241B553339633594D167A0EF0D02E42D6482CDA642B218414FF6DEC5BD06A48079CC0948D929" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options.ConfigurationExtensions", + "version": "10.0.10", + "description": "Provides additional configuration specific functionality related to Options.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "07F056E666E542729A25A06C672DF351373F9D5029BCA0D14AD3AD08DAE2CCA903E776B23E6DE3BBE5051DA68876CBC003F7AFD2EF4C08E7B32E60033465A45A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Primitives", + "version": "10.0.10", + "description": "Primitives shared by framework extensions. Commonly used types include:\n\nCommonly Used Types:\nMicrosoft.Extensions.Primitives.IChangeToken\nMicrosoft.Extensions.Primitives.StringValues\nMicrosoft.Extensions.Primitives.StringSegment", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "B3F778D24AFDF4711BEBA10DE673F9EB3ABAEC108B86862FDF1DE64F554B543A503FB3BBB0ABC38E0AF8B800EF39D3660FC660943235C734786FAEB11D4FAD64" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.ILLink.Tasks", + "version": "10.0.10", + "description": "MSBuild tasks for running the IL Linker", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "804F0EEC3AD1008DD08ABDF24B3BDD465EC3CD57FC5EB15F234BDB5179761878A6DDD30F755A25F43C70361FD3CEAF729A8935294FB6C2EDAAAC5E6358DBF5A5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.Test.Sdk", + "version": "18.8.1", + "description": "The MSbuild targets and properties for building .NET test projects.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "ED924163245F79A57884396548B55BEDDB4B5D06F84A96C0872FACF5273E754576CF00D44D326D3CB6138DA9D2E64AAA9BEDBCDCD371218E36EF5B946343EF8F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.Telemetry", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides telemetry for the platform.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C5E54A968FD412E4CE2DCC98EBC3C9154FE2D49E2E5C539CE1460CF01A9D8FD4197D90EA5ACE8A9574368DB629FFBD224B273BE242083050087A2BD60FB7D917" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.TrxReport.Abstractions", + "version": "1.9.1", + "description": "Package Description", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "665DC7C980F6089E8AD472201353A0BAC308BC55976603332BF8E568247FBD3C1FC644C9A904AE9F800E50968D2EF02D735ADA4616E8FC9C75CB18290A7540EC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides the core platform and the .NET implementation of the protocol.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "10C89A7E4A01422839D3EE8DDE9FD6B1E8C8504A082573A1209398434AD1436FB2774BB96C969CC1E6079B123483303224DE3273F8346F00ED151F2F4F361A4B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform.MSBuild", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides MSBuild integration of the platform, its extensions and configuration files.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "568901EC1C20B98D48692E6F182260177105A4C0BE28903805AC3F052D340D6D4B6C6A11F5931B23D10078FF0A70BB654FF606E8BB8C743DEEC1C1CDB8F36A1D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.ObjectModel", + "version": "18.8.1", + "description": "The Microsoft Test Platform Object Model.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "FA783FB4A40D48E96B1901D473BD83DDC83AD873D58B05D7042D05A1E10EEA6D6EE07E130A3213272E989B56C2F05A258F43004F4637DB7EA132D63AEF31A985" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.TestHost", + "version": "18.8.1", + "description": "Testplatform host executes the test using specified adapter.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "46D7AB005785910C271F30A658151CB71107FD87A78F7F7DE78811E49EC8657424E68901BFA943DD73AFD2E18645ED361294638436B01DA1945C7A4504A7C8DE" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Win32.Registry", + "version": "5.0.0", + "description": "Provides support for accessing and modifying the Windows Registry.\n\nCommonly Used Types:\nMicrosoft.Win32.RegistryKey\nMicrosoft.Win32.Registry\nMicrosoft.Win32.RegistryValueKind\nMicrosoft.Win32.RegistryHive\nMicrosoft.Win32.RegistryView\n \nWhen using NuGet 3.x this package requires at least version 3.4.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "471E66567CE59CC86475AECE7815D05261264CE114E0C1688BA2551DD51494901FA72DD7A8F74F8E8F0F3DBA74AF8595F177552F3C06ABB4BFCE76692197076E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/dotnet/runtime", + "type": "website" + }, + { + "url": "git://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLite@3.53.4", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLite", + "version": "3.53.4", + "description": "This package contains builds of the native SQLite code for various platforms. \n These builds have \u0022e_sqlite3\u0022 as the base name. The first three numbers in the version number of this package indicate the version of SQLite that was used to build it. The fourth number, if there is one, is incremented as needed for packaging-specific changes.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "81D145648BACFF3B4C8CD1794DF9956C47B229264467AA7001EA9A306E429CEB2855EC9296509541C82FC3C9BCFF04617AB3E86169932700BDAD5B0C03C482EF" + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLite@3.53.4", + "externalReferences": [ + { + "url": "https://sqlite.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.bundle_e_sqlite3", + "version": "3.0.5", + "description": "This \u0027batteries-included\u0027 bundle brings in SQLitePCLRaw.core and the necessary stuff for certain common use cases. Call SQLitePCL.Batteries.Init().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "12F980014C25F0C3E20C7B331418933FC84C7635B65597CEAB09C20EA00C055043C866BEF8614EA6BC38D7A484D8FF339D4387BBE760BC892F4E2702CD23AB2F" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.config.e_sqlite3", + "version": "3.0.5", + "description": "This package sets the configuration for using e_sqlite3 but does not bring in that native library itself. It\u0027s like bundle_e_sqlite3, except it\u0027s hollow.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A25E95EE323DDFEB8FC920D26551B4AFED854A3D9DDA833C3507331AB2043E0C9F16D62C2100560373AFC20E54D3F69F42ABDD6DA6E75EF7DCC0EA861B5AF12" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.core", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. This package does not provide an API which is friendly to app developers. Rather, it provides an API which handles platform and configuration issues, upon which a friendlier API can be built. In order to use this package, you will need to also add one of the SQLitePCLRaw.provider.* packages and call raw.SetProvider().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "24209D65527E0F82BB4E151B610195D39CB4732891CE1F0E2BA0965371DA381F1E636CD9256AE7DC5B76C604E36D33B7CA63AFDE09E6A8A40A9B2FCB5F01AA03" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.provider.e_sqlite3", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. Packages named \u0027SQLitePCLRaw.provider.*\u0027 (like this one) are \u0027plugins\u0027 that allow SQLitePCLRaw.core to access the native SQLite library. This provider does DllImport of \u0027e_sqlite3\u0027, the SQLite builds provided with SQLitePCLRaw.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "716EE95A124695CE5B2E2C834509E66991585B5AD1843B4CC6D135FE078DFE2D2E867A2E83978DEF09B8691833370803251F792537E59203455054AC24F82CC9" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "System.Diagnostics.EventLog", + "version": "10.0.10", + "description": "Provides the System.Diagnostics.EventLog class, which allows the applications to use the Windows event log service.\n\nCommonly Used Types:\nSystem.Diagnostics.EventLog", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F98A922C208C90F09A247CF2C251048B3EBADD8633787F967E5701427765C77C298F40E54A8D2BF5EBFEF729EFD3E8CFC5C17EFDD5F2CD80184532C24B5A481A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.analyzers@1.27.0", + "authors": [ + { + "name": "jnewkirk,bradwilson,marcind" + } + ], + "name": "xunit.analyzers", + "version": "1.27.0", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features.\n\nInstalling this package provides code analyzers to help developers find and fix frequent issues when writing tests and xUnit.net extensibility code.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2B920EDBD64D376C9D7B3DA38654D1B11DB4CA5A7F79032B320A289DF229BFD73DB1604DE8C5D120F196C6FBA8B688EE493DC7814F5EFD7EE5E3F56238B3C1BF" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.analyzers@1.27.0", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit.analyzers", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.runner.visualstudio", + "version": "3.1.5", + "description": "Visual Studio 2022\u002B Test Explorer runner for the xUnit.net framework. Capable of running xUnit.net v1, v2, and v3 tests. Supports .NET 4.7.2 or later, and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FFB6F37D917B54777C124986C2F3421CEB2FDD62561B352BDAB588AFEF58A8CCF857A8CE0468EB87BA3908261F396FEC18E9D81FDB993D10D4B2F2337A9A5BD" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "externalReferences": [ + { + "url": "https://github.com/xunit/visualstudio.xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.mtp-v1.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "9612F4811FCE910665551AC371386B7460BC118A39D78892C357093F92AAA9EA1A5DC21E2F939AE3FF0D599C9C62749A2F95871226E60AFA2A9807EB26BBF7D6" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.assert", + "version": "3.2.2", + "description": "Includes the assertion library from xUnit.net (xunit.v3.assert.dll). Supports .NET Standard 2.0 and .NET 8.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A1ABD3FA034E80012F33D59E5172B1E8D8C35DF57F3DAEA5982B8F9DDAC12FFF61B4B2C7585820077B1895B6C020AA71E80591FB51ABE1D99C08275C3573E7A" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.assert@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.common", + "version": "3.2.2", + "description": "Includes common code shared between xunit.v3.core and xunit.v3.runner.common (xunit.v3.common.dll). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A0FD19A2858C335F0EB5B6A246CDF1FD9B567484A3E60EDC736ACFB7CAFA04B90E874B485A22C4BF2377469B1AFF7658596C35282859F1D20137B913996AB0FC" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.core.mtp-v1", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for writing tests; extensibility authors should include xunit.v3.extensibility.core instead. Includes support for Microsoft.Testing.Platform v1. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "457A8F4EF036556D0181BB56D54A45950EFC6BBCB69EDDBEC341F0972AC086418CE6BB48655435BFA987DDC0CD5B97D97E26B0D57A589455C4248C54404B164B" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.extensibility.core", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for extensibility; test authors should include xunit.v3.core instead. Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DBD2BF9A1557CEBA2EE86994EAFC086F895691C97C03A125176DD2DC1CB497E10383022FF014FA8A30171D7446C794795B97DEED16EA70562768151A0A4DC3A2" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.mtp-v1", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.core.mtp-v1, xunit.v3.assert, and xunit.analyzers.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A1AF2350710CB1571CF31AF92BDFD2A835ADD5E90BCC132ADBB1E11ECA87CC1A3F0382D2A4AC6E8FA82E0E51F4D77FFAD71802A9A6F25DE936BF2280750104ED" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.common", + "version": "3.2.2", + "description": "Includes common code shared between in-process runners (like xunit.v3.runner.inproc.console) and xunit.v3.runner.utility (used by 1st and 3rd party external runners). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "226D0BA70448F5345532D159340CA70E0D4B08B766FFC9C97AEE33F86C7715AAF3A916A610322DB805AFEBA56FC1323480ADF7F125B8A960C51FBA4F266AEFB0" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.inproc.console", + "version": "3.2.2", + "description": "In-process console runner for xUnit.net framework, providing the entrypoint for self-executing unit tests. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB9F10495A9497A07232E3739FCAFE3ADB923F097314F2EF6BC1DA0E85EBA69353F8618136E0274A45EF9992FE4B2232A82F626D5DF8CA0124039C6CAE66C2FE" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/System.Diagnostics.EventLog@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLite@3.53.4", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLite@3.53.4", + "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.analyzers@1.27.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.analyzers@1.27.0", + "pkg:nuget/xunit.v3.assert@3.2.2", + "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.mtp-v1@3.2.2" + ] + }, + { + "ref": "ServerMonitorManager@0.0.0", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "pkg:nuget/xunit.v3@3.2.2" + ] + } + ] +} \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/smm-setup.sh b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/smm-setup.sh new file mode 100644 index 0000000..6c046cb --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/smm-setup.sh @@ -0,0 +1,102 @@ +#!/usr/bin/env bash +set -Eeuo pipefail +IFS=$'\n\t' + +readonly PROGRAM_NAME="smm-setup" +readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.13" +readonly DEFAULT_REPOSITORY="ochenstarik-ui/server-monitor-manager" +readonly INNER_ASSET="ochenstarik-server-monitor-manager.sh" + +RELEASE_TAG="${SMM_TAG:-$DEFAULT_RELEASE_TAG}" +REPOSITORY="${SMM_REPOSITORY:-$DEFAULT_REPOSITORY}" +CACHE_DIR="${SMM_CACHE_DIR:-${XDG_CACHE_HOME:-$HOME/.cache}/server-monitor-manager}" + +usage() { + cat <<'USAGE' +Usage: + smm-setup.sh [--tag TAG] [--repository OWNER/REPO] COMMAND [ARG...] + +Commands are passed to the verified ochenstarik-server-monitor-manager.sh +asset from the selected immutable GitHub release. Common commands: + install-agent | install-control | uninstall-agent | uninstall-control + backup-create | backup-restore | version + +Environment overrides: + SMM_TAG Release tag (default: v0.1.0-alpha.13) + SMM_REPOSITORY GitHub repository (default: ochenstarik-ui/server-monitor-manager) + SMM_CACHE_DIR Verified-download cache directory +USAGE +} + +die() { + printf '%s: %s\n' "$PROGRAM_NAME" "$*" >&2 + exit 1 +} + +require_command() { + command -v "$1" >/dev/null 2>&1 || die "required command is unavailable: $1" +} + +while [[ $# -gt 0 ]]; do + case "$1" in + --tag) + [[ $# -ge 2 ]] || die '--tag requires a value' + RELEASE_TAG="$2" + shift 2 + ;; + --repository) + [[ $# -ge 2 ]] || die '--repository requires a value' + REPOSITORY="$2" + shift 2 + ;; + -h|--help) + usage + exit 0 + ;; + --) + shift + break + ;; + -*) + die "unknown option: $1" + ;; + *) + break + ;; + esac +done + +[[ $# -gt 0 ]] || { + usage >&2 + exit 2 +} +[[ "$RELEASE_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.-]+)?$ ]] \ + || die "invalid release tag: $RELEASE_TAG" +[[ "$REPOSITORY" =~ ^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$ ]] \ + || die "invalid repository: $REPOSITORY" + +require_command curl +require_command sha256sum +require_command mktemp + +release_base="https://github.com/$REPOSITORY/releases/download/$RELEASE_TAG" +cache_release="$CACHE_DIR/$REPOSITORY/$RELEASE_TAG" +cached_script="$cache_release/$INNER_ASSET" +cached_checksum="$cache_release/$INNER_ASSET.sha256" +mkdir -p "$cache_release" + +temporary_directory="$(mktemp -d -t smm-setup.XXXXXXXX)" +trap 'rm -rf -- "$temporary_directory"' EXIT + +curl -fsSL "$release_base/$INNER_ASSET" -o "$temporary_directory/$INNER_ASSET" +curl -fsSL "$release_base/$INNER_ASSET.sha256" -o "$temporary_directory/$INNER_ASSET.sha256" + +( + cd "$temporary_directory" + sha256sum -c "$INNER_ASSET.sha256" +) || die "checksum verification failed for $RELEASE_TAG/$INNER_ASSET" + +install -m 0755 "$temporary_directory/$INNER_ASSET" "$cached_script" +install -m 0644 "$temporary_directory/$INNER_ASSET.sha256" "$cached_checksum" + +exec "$cached_script" "$@" diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/smm-setup.sh.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/smm-setup.sh.sha256 new file mode 100644 index 0000000..c907366 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.13/assets/smm-setup.sh.sha256 @@ -0,0 +1 @@ +f387419eafe82e10104b2904585af12ea3e9420cc5658b8469699c1aba15aa41 smm-setup.sh diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/RELEASE_METADATA.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/RELEASE_METADATA.json new file mode 100644 index 0000000..5c093e3 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/RELEASE_METADATA.json @@ -0,0 +1,234 @@ +{ + "assets": [ + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646523", + "contentType": "application/x-sh", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:f1720e00f4b0e116a6e3462b238078343b613dd4ff03536925b1df84c7581d79", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVR7", + "label": "", + "name": "ochenstarik-server-monitor-manager.sh", + "size": 59307, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/ochenstarik-server-monitor-manager.sh" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646511", + "contentType": "application/octet-stream", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:3595ae3be19eceebd320c76dec1099b9cc14924eac5713e91e19d1f7a0cd3429", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVRv", + "label": "", + "name": "ochenstarik-server-monitor-manager.sh.sha256", + "size": 104, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/ochenstarik-server-monitor-manager.sh.sha256" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646518", + "contentType": "application/json", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:9412296ddf45827d71fda1872429bdec26a426e9d373d4f748a155d14c1e032c", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVR2", + "label": "", + "name": "server-monitor-manager-linux-arm64-sbom.json", + "size": 93523, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/server-monitor-manager-linux-arm64-sbom.json" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646509", + "contentType": "application/gzip", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:b292eef9c23282796e5ab7240c33d7497e76aa7235580e5ed19091ca368dbae6", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVRt", + "label": "", + "name": "server-monitor-manager-linux-arm64.tar.gz", + "size": 24426986, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:23Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/server-monitor-manager-linux-arm64.tar.gz" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646513", + "contentType": "application/octet-stream", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:ce8b6c75adc5f0008333f0b680d049289aba0ddfe14cce93b0ed734141ec2c8b", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVRx", + "label": "", + "name": "server-monitor-manager-linux-arm64.tar.gz.sha256", + "size": 108, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/server-monitor-manager-linux-arm64.tar.gz.sha256" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646512", + "contentType": "application/json", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:b4d6e5442fa972f658dda895a6b4c5d6e7d0093c2a4c04c483747c722d465223", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVRw", + "label": "", + "name": "server-monitor-manager-linux-x64-sbom.json", + "size": 93523, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/server-monitor-manager-linux-x64-sbom.json" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646522", + "contentType": "application/gzip", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:2a49214cce9ae81dd93b0e2a34cc7440326fa700a63e641c054adf8e3c93686d", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVR6", + "label": "", + "name": "server-monitor-manager-linux-x64.tar.gz", + "size": 25364130, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:23Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/server-monitor-manager-linux-x64.tar.gz" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646510", + "contentType": "application/octet-stream", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:a2139cb146cbfbeb06846725c556a995deddda68c243db244e32c59241f87c00", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVRu", + "label": "", + "name": "server-monitor-manager-linux-x64.tar.gz.sha256", + "size": 106, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/server-monitor-manager-linux-x64.tar.gz.sha256" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646521", + "contentType": "application/json", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:65959fe57b64be5ca227fc3ba9c774ca3ed1fc4609ca873c7ba16f3823fcad05", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVR5", + "label": "", + "name": "server-monitor-manager-manifest.json", + "size": 1180, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/server-monitor-manager-manifest.json" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646517", + "contentType": "application/pgp-signature", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:1f2e2b130147b9caa32fc1b7680398047710a9d0220b440be25fed407eaf0a3b", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVR1", + "label": "", + "name": "server-monitor-manager-manifest.sig", + "size": 96, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/server-monitor-manager-manifest.sig" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646519", + "contentType": "application/json", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:f97f15ec9f454d7ce23f99edd39012a35a469bb5d150ace3359858bc15e0c973", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVR3", + "label": "", + "name": "server-monitor-manager-win-x64-sbom.json", + "size": 96337, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/server-monitor-manager-win-x64-sbom.json" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646514", + "contentType": "application/pkix-cert", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:701ab197288e32ef0571343df73e32c92dd2972b66d10eada67be7b24a00bf73", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVRy", + "label": "", + "name": "ServerMonitorManager-test-signing.cer", + "size": 1026, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/ServerMonitorManager-test-signing.cer" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646520", + "contentType": "application/msix", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:8a089c75af0f1bd514460f60330035e01aa71b5c8c0bd38d97b302309a901ba8", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVR4", + "label": "", + "name": "ServerMonitorManager-win-x64.msix", + "size": 29603115, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:24Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/ServerMonitorManager-win-x64.msix" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646515", + "contentType": "application/octet-stream", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:4c2941f2f859099a509598e082e1f6a1b36c65440ede1de73b647405c215b75d", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVRz", + "label": "", + "name": "SHA256SUMS", + "size": 101, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/SHA256SUMS" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646508", + "contentType": "application/x-sh", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:00417243c63b91d895fb4b80c4a72ddd4a0012ae59057b38eee07042f901e1f6", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVRs", + "label": "", + "name": "smm-setup.sh", + "size": 2985, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/smm-setup.sh" + }, + { + "apiUrl": "https://api.github.com/repos/ochenstarik-ui/server-monitor-manager/releases/assets/508646516", + "contentType": "application/octet-stream", + "createdAt": "2026-08-10T10:58:22Z", + "digest": "sha256:f7217cb4869de2f80d599d9ffae7776f75f97f43dc090b67e396fa49a5c4e6b4", + "downloadCount": 0, + "id": "RA_kwDOTX_v0M4eUVR0", + "label": "", + "name": "smm-setup.sh.sha256", + "size": 79, + "state": "uploaded", + "updatedAt": "2026-08-10T10:58:22Z", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.9/smm-setup.sh.sha256" + } + ], + "isDraft": false, + "isPrerelease": true, + "publishedAt": "2026-08-10T10:58:21Z", + "tagName": "v0.1.0-alpha.9", + "targetCommitish": "main", + "url": "https://github.com/ochenstarik-ui/server-monitor-manager/releases/tag/v0.1.0-alpha.9" +} diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/REPORT.md b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/REPORT.md new file mode 100644 index 0000000..5fb7d59 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/REPORT.md @@ -0,0 +1,62 @@ +# REPORT — Server Monitor Manager v0.1.0-alpha.9 + +Дата выпуска: 2026-08-10 +Релиз: https://github.com/ochenstarik-ui/server-monitor-manager/releases/tag/v0.1.0-alpha.9 +Неизменяемый tag target: `2ca059f0b31e2dcc7ce7173f9a487dfd2c5023ad` +Статус: **выпущен и проверен**. + +## Выполненные изменения + +- Monitor snapshot приведён к единому контракту из 18 `KEY=value` полей. +- Добавлены `SYSTEMD_SSH` и `SYSTEMD_WIREGUARD`; удалён внеконтрактный `MESH STATUS`. +- Shell producer и Desktop consumer проверяются одним `tests/contracts/monitor-snapshot-v1.txt`. +- Production `SshMonitorService.cs` в итоговой реализации не менялся. +- Добавлен постоянный fixture БД alpha.7, созданный на SQLitePCLRaw `2.1.12`; текущая версия использует `3.0.5`. +- Проверены agents, identities, links, provisioning, audit, `backup-create` и `backup-restore` без повторного применения миграций и потери данных. +- Добавлена runtime-проверка self-contained trimmed single-file Control для `linux-arm64`. +- `deploy/smm-setup.sh` стал отслеживаемым source-of-truth; workaround `validate_control_url` отсутствует. +- Закреплена неизменяемость опубликованных тегов и ассетов. +- Устранены два конкурирующих release publisher: `.github/workflows/linux-release.yml` является единственным издателем GitHub Release; Windows workflow оставлен только для ручной упаковки. + +## Интеграция + +- Основной PR: https://github.com/ochenstarik-ui/server-monitor-manager/pull/32 — merged как `d0a46f511b2dc9037dc13fdf543eca77fc0758b9`. +- Single-writer PR: https://github.com/ochenstarik-ui/server-monitor-manager/pull/33 — merged как `2ca059f0b31e2dcc7ce7173f9a487dfd2c5023ad`. +- PR #31 ранее закрыт без merge; его требуемое функциональное изменение уже присутствовало в `main`. +- Оба независимых read-only review завершились `VERDICT=PASS`. + +## Intentional-red evidence + +В отдельном proof commit `28916b01fa3dd1859f3879c43f2b33639a6c7c0a` Desktop-ключ временно переименован `MEM_TOTAL_KB → MEM_TOTAL`. + +Красный CI: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31379098394 + +Результат: ожидается `MEM_TOTAL_KB`, получен `MEM_TOTAL`; 119 тестов прошли, 1 упал. Proof commit не входит в итоговый tag. + +## Релиз + +Release pipeline: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31381270348 + +Успешные jobs: + +- Windows package; +- Linux x64 publish; +- Linux arm64 publish; +- bootstrap; +- manifest/sign/publish. + +После публикации скачаны все 16 assets. Проверены: + +- SHA-256 каждого файла против GitHub asset digest; +- все 8 digest из `server-monitor-manager-manifest.json`; +- standalone sidecars и Windows `SHA256SUMS`; +- manifest version `v0.1.0-alpha.9`; +- tag target совпадает с финальным `main`; +- Cosign-подпись manifest: `Verified OK`; +- сертификат и signature сопоставлены с Rekor entry `108e9186e8c5677aebee891d192fd0a9dedbbcdaf949f9cb74a4b342af33925561ca275e32c114c8`; +- certificate identity: `https://github.com/ochenstarik-ui/server-monitor-manager/.github/workflows/linux-release.yml@refs/tags/v0.1.0-alpha.9`; +- OIDC issuer: `https://token.actions.githubusercontent.com`. + +## Ограничения + +Локальный компьютер — Windows/x64, поэтому локальный native ARM64 runtime не запускался. ARM64 runtime подтверждён в CI через self-contained/QEMU acceptance и native ARM64 Ubuntu jobs. Это отдельно от локальных проверок отражено в `TEST_EVIDENCE.md`. diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/SHA256SUMS b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/SHA256SUMS new file mode 100644 index 0000000..d92ff36 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/SHA256SUMS @@ -0,0 +1,22 @@ +f1720e00f4b0e116a6e3462b238078343b613dd4ff03536925b1df84c7581d79 assets/ochenstarik-server-monitor-manager.sh +3595ae3be19eceebd320c76dec1099b9cc14924eac5713e91e19d1f7a0cd3429 assets/ochenstarik-server-monitor-manager.sh.sha256 +9412296ddf45827d71fda1872429bdec26a426e9d373d4f748a155d14c1e032c assets/server-monitor-manager-linux-arm64-sbom.json +b292eef9c23282796e5ab7240c33d7497e76aa7235580e5ed19091ca368dbae6 assets/server-monitor-manager-linux-arm64.tar.gz +ce8b6c75adc5f0008333f0b680d049289aba0ddfe14cce93b0ed734141ec2c8b assets/server-monitor-manager-linux-arm64.tar.gz.sha256 +b4d6e5442fa972f658dda895a6b4c5d6e7d0093c2a4c04c483747c722d465223 assets/server-monitor-manager-linux-x64-sbom.json +2a49214cce9ae81dd93b0e2a34cc7440326fa700a63e641c054adf8e3c93686d assets/server-monitor-manager-linux-x64.tar.gz +a2139cb146cbfbeb06846725c556a995deddda68c243db244e32c59241f87c00 assets/server-monitor-manager-linux-x64.tar.gz.sha256 +65959fe57b64be5ca227fc3ba9c774ca3ed1fc4609ca873c7ba16f3823fcad05 assets/server-monitor-manager-manifest.json +1f2e2b130147b9caa32fc1b7680398047710a9d0220b440be25fed407eaf0a3b assets/server-monitor-manager-manifest.sig +f97f15ec9f454d7ce23f99edd39012a35a469bb5d150ace3359858bc15e0c973 assets/server-monitor-manager-win-x64-sbom.json +701ab197288e32ef0571343df73e32c92dd2972b66d10eada67be7b24a00bf73 assets/ServerMonitorManager-test-signing.cer +8a089c75af0f1bd514460f60330035e01aa71b5c8c0bd38d97b302309a901ba8 assets/ServerMonitorManager-win-x64.msix +00417243c63b91d895fb4b80c4a72ddd4a0012ae59057b38eee07042f901e1f6 assets/smm-setup.sh +f7217cb4869de2f80d599d9ffae7776f75f97f43dc090b67e396fa49a5c4e6b4 assets/smm-setup.sh.sha256 +82f95fc9745b00232de5d8b887958f9a0d21f52e9051919ca3818e939bbd5e55 RELEASE_METADATA.json +b36235dfa10a250c269c242427fe30fe3a97615994485f7b09e209b1114f8fe5 REPORT.md +323f6ac4be661dbd61ba6e312766e379110d827de14e44d14ef85eb64d89c01d TEST_EVIDENCE.md +9e9b71bd3fa2a6abfa903b5f784d9ca0fbc29c563d2b084c1a82c593c2bab001 tools/cosign-windows-amd64.exe +424be5226757fb5046d83c724c1e88ceb066896f55e9902c26d79e40d1d60b3e tools/cosign_checksums.txt +2f0a429d9ea90e316e54213b79a05f537f1a48a9719f4bfe4b475fb021bcac34 verification/manifest-signing-certificate.pem +563f8e440b88b1752e9459ce3e46c0a48520196b8ed42fa94e066711a7703f47 verification/rekor-entry.json diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/TEST_EVIDENCE.md b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/TEST_EVIDENCE.md new file mode 100644 index 0000000..2087d63 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/TEST_EVIDENCE.md @@ -0,0 +1,79 @@ +# TEST_EVIDENCE — v0.1.0-alpha.9 + +## Локальные проверки + +| Проверка | Результат | +|---|---| +| Monitor producer contract | PASS | +| Shared Desktop field-name contract | PASS | +| Previous-schema CLI contract | PASS | +| Release contract | PASS | +| Bootstrap contract | PASS | +| Control test suite | 120/120 PASS | +| `dotnet format whitespace` | PASS | +| `dotnet format style` | PASS | +| `git diff --check` | PASS | +| Static security scan | PASS | +| SQLite fixture integrity | `PRAGMA integrity_check = ok` | +| Fixture SHA-256 | `15bf788dd5789a55bd54a4a548d339b4e29e54e1c75311b21eec079e0ef2faa2` | +| Fixture schema version | `PRAGMA user_version = 8` | +| Independent implementation review | PASS | +| Independent single-writer review | PASS | + +Полная сборка завершилась без ошибок. В неизменённых файлах присутствовали 40 существующих analyzer warnings; текущий diff не добавлял эти предупреждения. + +## Intentional-red + +- Commit: `28916b01fa3dd1859f3879c43f2b33639a6c7c0a` +- Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31379098394 +- Expected failure: `MEM_TOTAL_KB` против `MEM_TOTAL`. +- Результат: 119 passed / 1 failed. +- В финальном tag намеренная поломка отсутствует. + +## CI основного PR #32 + +- Linux control and agent: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31378990081 — SUCCESS +- Linux platform matrix: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31378989933 — SUCCESS +- Windows build: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31378989978 — SUCCESS + +## CI single-writer PR #33 + +- Linux control and agent: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31380368303 — SUCCESS +- Linux platform matrix: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31380368307 — SUCCESS +- Windows build: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31380368308 — SUCCESS + +## Финальный `main` + +Commit: `2ca059f0b31e2dcc7ce7173f9a487dfd2c5023ad` + +- Linux control and agent: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31380793033 — SUCCESS +- Linux platform matrix: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31380792955 — SUCCESS +- Windows build: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31380793000 — SUCCESS + +Linux matrix включает успешные Ubuntu 22.04/24.04 x64 и ARM64, а также Debian 12/13 x64 и ARM64 systemd restart tests. + +## Release CI + +- Pipeline: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31381270348 — SUCCESS +- `package-windows`: SUCCESS +- `publish-linux (linux-x64)`: SUCCESS +- `publish-linux (linux-arm64)`: SUCCESS +- `bootstrap`: SUCCESS +- `manifest`: SUCCESS + +## Проверка опубликованных assets + +| Проверка | Результат | +|---|---| +| Скачано assets | 16/16 | +| GitHub asset SHA-256 digests | PASS | +| Manifest hashes | 8/8 PASS | +| Sidecar checksums | PASS | +| Tag target = final main | PASS | +| Cosign manifest signature | `Verified OK` | +| Rekor signature correspondence | PASS | + +## Не запущено локально + +- Native `linux-arm64` executable не запускался непосредственно на локальном Windows/x64 host: подходящего native ARM64 host нет. +- Вместо этого runtime выполнен в Linux CI, включая self-contained/QEMU acceptance и native ARM64 VM jobs; это не подменено одним успешным publish. diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/SHA256SUMS b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/SHA256SUMS new file mode 100644 index 0000000..0ade58f --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/SHA256SUMS @@ -0,0 +1 @@ +8a089c75af0f1bd514460f60330035e01aa71b5c8c0bd38d97b302309a901ba8 *ServerMonitorManager-win-x64.msix diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/ServerMonitorManager-test-signing.cer b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/ServerMonitorManager-test-signing.cer new file mode 100644 index 0000000..413f1a8 Binary files /dev/null and b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/ServerMonitorManager-test-signing.cer differ diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/ochenstarik-server-monitor-manager.sh b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/ochenstarik-server-monitor-manager.sh new file mode 100644 index 0000000..f5652ed --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/ochenstarik-server-monitor-manager.sh @@ -0,0 +1,1376 @@ +#!/usr/bin/env bash +set -Eeuo pipefail +IFS=$'\n\t' + +readonly PROGRAM="ochenstarik-server-monitor-manager" +readonly PROGRAM_VERSION="0.2.0-dev" +readonly ETC_DIR="/etc/ochenstarik-server-monitor-manager" +readonly LIB_DIR="/usr/local/lib/ochenstarik-server-monitor-manager" +readonly STATE_DIR="/var/lib/ochenstarik-server-monitor-manager" +readonly ENROLLMENT_DIR="${STATE_DIR}-enrollment" +readonly BACKUP_DIR="${STATE_DIR}/bootstrap-backups" +readonly CONTROL_USER="ochenstarik-smm-control" +readonly AGENT_USER="ochenstarik-smm-agent" +readonly CONTROL_UNIT="ochenstarik-smm-control.service" +readonly AGENT_UNIT="ochenstarik-smm-agent.service" +readonly PROVISIONING_HELPER_UNIT="ochenstarik-smm-provisioning-helper.service" +readonly POLICY_HELPER="/usr/local/libexec/ochenstarik-smm-policy-apply" +readonly EMERGENCY_COMMAND="/usr/local/sbin/ochenstarik-smm-emergency" +readonly BOOTSTRAP_COMMAND="/usr/local/sbin/ochenstarik-server-monitor-manager.sh" +readonly SUDOERS_FILE="/etc/sudoers.d/ochenstarik-smm-control" +readonly MESH_DIR="${STATE_DIR}/mesh" +readonly WG_DIR="${ETC_DIR}/wireguard" +readonly FIREWALL_UNIT="ochenstarik-smm-firewall.service" +readonly MESH_NETWORK="10.77.0.0/24" +readonly HUB_MESH_ADDRESS="10.77.0.1/24" + +TEMP_DIR="" +MESH_PEER_CODE="" +ENROLLMENT_TOKEN_FILE="" +ENROLLMENT_TOKEN_TEMP="" +CONTROL_UPDATE_BACKUP_ID="" +CONTROL_UPDATE_RECOVERY_REQUIRED=0 +CONTROL_UPDATE_LEGACY_ITEMS=() + +log() { printf '%s\n' "[$PROGRAM] $*"; } +fail() { printf '%s\n' "[$PROGRAM] ERROR: $*" >&2; exit 1; } + +cleanup() { + local status=$? + trap - EXIT + if [[ "$CONTROL_UPDATE_RECOVERY_REQUIRED" == "1" ]]; then + log "Control update failed; restoring the pre-update state." + if recover_control_update "$CONTROL_UPDATE_BACKUP_ID"; then + log "Control recovery completed." + else + printf '%s\n' "[$PROGRAM] ERROR: Automatic Control recovery failed; manual recovery is required." >&2 + status=1 + fi + fi + if [[ -n "$ENROLLMENT_TOKEN_FILE" ]]; then + rm -f -- "$ENROLLMENT_TOKEN_FILE" + fi + if [[ -n "$ENROLLMENT_TOKEN_TEMP" ]]; then + rm -f -- "$ENROLLMENT_TOKEN_TEMP" + fi + if [[ -n "$TEMP_DIR" && -d "$TEMP_DIR" ]]; then + rm -rf -- "$TEMP_DIR" + fi + exit "$status" +} +trap cleanup EXIT + +usage() { + cat <<'EOF' +Server Monitor Manager Linux bootstrap + +Usage: + ochenstarik-server-monitor-manager.sh preflight + ochenstarik-server-monitor-manager.sh verify-release ARCHIVE + ochenstarik-server-monitor-manager.sh install-control ARCHIVE PUBLIC_HOST [HTTPS_PORT] + ochenstarik-server-monitor-manager.sh install-agent ARCHIVE NODE_ID CONTROL_URL CA_CERT + ochenstarik-server-monitor-manager.sh install-node ARCHIVE + ochenstarik-server-monitor-manager.sh mesh-init PUBLIC_ENDPOINT [WG_PORT] + ochenstarik-server-monitor-manager.sh peer-add SMMPEER1_CODE + ochenstarik-server-monitor-manager.sh mesh-status + ochenstarik-server-monitor-manager.sh update-control ARCHIVE + ochenstarik-server-monitor-manager.sh update-agent ARCHIVE + ochenstarik-server-monitor-manager.sh rollback control|agent [BACKUP_ID] + ochenstarik-server-monitor-manager.sh node-code NODE_ID + ochenstarik-server-monitor-manager.sh control-device-code DEVICE_ID + ochenstarik-server-monitor-manager.sh node-token NODE_ID + ochenstarik-server-monitor-manager.sh control-ca-fingerprint + ochenstarik-server-monitor-manager.sh status + ochenstarik-server-monitor-manager.sh uninstall-agent [--purge] + ochenstarik-server-monitor-manager.sh uninstall-control --confirm-destroy-control + ochenstarik-server-monitor-manager.sh version + +ARCHIVE must have a matching ARCHIVE.sha256 file. Agent enrollment reads the +one-time token from SMM_ENROLL_TOKEN or from a hidden local prompt; it is never +written to agent.env. +EOF +} + +base64url_encode() { + base64 -w 0 | tr '+/' '-_' | tr -d '=' +} + +base64url_decode() { + local value="$1" remainder + [[ "$value" =~ ^[A-Za-z0-9_-]+$ ]] || fail "Enrollment code contains invalid base64url data." + remainder=$(( ${#value} % 4 )) + case "$remainder" in + 0) ;; + 2) value+="==" ;; + 3) value+="=" ;; + *) fail "Enrollment code contains invalid base64url length." ;; + esac + printf '%s' "$value" | tr '_-' '/+' | base64 -d +} + +require_root() { + [[ ${EUID:-$(id -u)} -eq 0 ]] || fail "This action must run as root (use sudo)." +} + +require_command() { + command -v "$1" >/dev/null 2>&1 || fail "Required command is missing: $1" +} + +validate_platform() { + [[ -r /etc/os-release ]] || fail "/etc/os-release is missing." + # shellcheck disable=SC1091 + . /etc/os-release + case "${ID:-}" in + ubuntu) + case "${VERSION_ID:-}" in 22.04|24.04) ;; *) fail "Unsupported Ubuntu version: ${VERSION_ID:-unknown}" ;; esac + ;; + debian) + case "${VERSION_ID:-}" in 12|13) ;; *) fail "Unsupported Debian version: ${VERSION_ID:-unknown}" ;; esac + ;; + *) fail "Unsupported distribution: ${ID:-unknown}" ;; + esac + case "$(uname -m)" in + x86_64|aarch64|arm64) ;; + *) fail "Unsupported architecture: $(uname -m)" ;; + esac + [[ "$(ps -p 1 -o comm=)" == "systemd" ]] || fail "systemd must be PID 1." +} + +validate_node_id() { + [[ "$1" =~ ^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$ ]] \ + || fail "Node id must contain 1-63 lowercase letters, digits, or hyphens." +} + +validate_port() { + [[ "$1" =~ ^[0-9]{1,5}$ ]] && (( 10#$1 >= 1 && 10#$1 <= 65535 )) \ + || fail "Port must be in range 1-65535." +} + +validate_ipv4_literal() { + local address="$1" octet + local -a octets + IFS=. read -r -a octets <<<"$address" + (( ${#octets[@]} == 4 )) || fail "Control URL contains an invalid IPv4 host." + for octet in "${octets[@]}"; do + [[ "$octet" =~ ^[0-9]{1,3}$ ]] && (( 10#$octet <= 255 )) \ + || fail "Control URL contains an invalid IPv4 host." + done +} + +validate_control_url() { + local authority host port="" label left right compressed=0 ipv4_groups=0 group_count last_group_index + local -a groups labels right_groups + [[ "$1" == https://* ]] || fail "Control URL must be an https URL without a path or credentials." + authority="${1#https://}" + authority="${authority%/}" + [[ -n "$authority" && "$authority" != *['/?#@']* ]] \ + || fail "Control URL must be an https URL without a path or credentials." + + if [[ "$authority" == \[* ]]; then + [[ "$authority" =~ ^\[([0-9A-Fa-f:.]+)\](:([0-9]+))?$ ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + host="${BASH_REMATCH[1]}" + port="${BASH_REMATCH[3]:-}" + [[ "$host" == *:* ]] || fail "Control URL contains an invalid bracketed IPv6 authority." + [[ "$host" != *:::* ]] || fail "Control URL contains an invalid bracketed IPv6 authority." + [[ "$host" != :* || "$host" == ::* ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + [[ "$host" != *: || "$host" == *:: ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + groups=() + if [[ "$host" == *::* ]]; then + compressed=1 + [[ "${host/::/}" != *::* ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + left="${host%%::*}" + right="${host#*::}" + if [[ -n "$left" ]]; then + IFS=: read -r -a groups <<<"$left" + fi + if [[ -n "$right" ]]; then + IFS=: read -r -a right_groups <<<"$right" + groups+=("${right_groups[@]}") + fi + else + IFS=: read -r -a groups <<<"$host" + fi + if (( ${#groups[@]} > 0 )) && [[ "${groups[${#groups[@]}-1]}" == *.* ]]; then + last_group_index=$(( ${#groups[@]} - 1 )) + validate_ipv4_literal "${groups[$last_group_index]}" + unset "groups[$last_group_index]" + ipv4_groups=2 + fi + for label in "${groups[@]}"; do + [[ "$label" =~ ^[0-9A-Fa-f]{1,4}$ ]] \ + || fail "Control URL contains an invalid bracketed IPv6 authority." + done + group_count=$(( ${#groups[@]} + ipv4_groups )) + if (( compressed == 1 )); then + (( group_count < 8 )) || fail "Control URL contains an invalid bracketed IPv6 authority." + else + (( group_count == 8 )) || fail "Control URL contains an invalid bracketed IPv6 authority." + fi + else + [[ "$authority" != *:*:* ]] \ + || fail "Control URL IPv6 authorities must use balanced brackets." + if [[ "$authority" == *:* ]]; then + host="${authority%%:*}" + port="${authority#*:}" + [[ -n "$port" ]] || fail "Control URL contains an invalid port." + else + host="$authority" + fi + [[ "$host" =~ ^[A-Za-z0-9]([A-Za-z0-9.-]*[A-Za-z0-9])?$ ]] \ + || fail "Control URL contains an invalid DNS or IPv4 host." + [[ ${#host} -le 253 && "$host" != *..* ]] \ + || fail "Control URL contains an invalid DNS or IPv4 host." + IFS=. read -r -a labels <<<"$host" + for label in "${labels[@]}"; do + [[ ${#label} -le 63 && "$label" =~ ^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?$ ]] \ + || fail "Control URL contains an invalid DNS or IPv4 host." + done + if [[ "$host" =~ ^[0-9.]+$ ]]; then + validate_ipv4_literal "$host" + fi + fi + [[ -n "$host" ]] || fail "Control URL host is empty." + [[ -z "$port" ]] || validate_port "$port" +} + +verify_archive() { + local archive="$1" checksum_file expected actual entry + [[ -f "$archive" ]] || fail "Archive not found: $archive" + checksum_file="${archive}.sha256" + [[ -f "$checksum_file" ]] || fail "Checksum file not found: $checksum_file" + expected="$(awk 'NR == 1 { print $1 }' "$checksum_file")" + [[ "$expected" =~ ^[0-9a-fA-F]{64}$ ]] || fail "Invalid checksum file: $checksum_file" + actual="$(sha256sum "$archive" | awk '{ print $1 }')" + [[ "${actual,,}" == "${expected,,}" ]] || fail "Archive checksum mismatch." + + while IFS= read -r entry; do + [[ -n "$entry" ]] || continue + [[ "$entry" != /* && "$entry" != *".."* ]] || fail "Unsafe archive entry: $entry" + case "$entry" in + agent|agent/*|control|control/*|provisioning-helper|provisioning-helper/*|deploy|deploy/*|bootstrap|bootstrap/*) ;; + *) fail "Unexpected archive entry: $entry" ;; + esac + done < <(tar -tzf "$archive") +} + +extract_archive() { + local archive="$1" + verify_archive "$archive" + TEMP_DIR="$(mktemp -d -t smm-bootstrap.XXXXXXXX)" + chmod 700 "$TEMP_DIR" + tar -xzf "$archive" -C "$TEMP_DIR" --no-same-owner --no-same-permissions + [[ -f "$TEMP_DIR/deploy/$CONTROL_UNIT" ]] || fail "Control systemd unit is missing from archive." + [[ -f "$TEMP_DIR/deploy/$AGENT_UNIT" ]] || fail "Agent systemd unit is missing from archive." + [[ -f "$TEMP_DIR/deploy/$PROVISIONING_HELPER_UNIT" ]] || fail "Provisioning helper systemd unit is missing from archive." + [[ -f "$TEMP_DIR/deploy/$FIREWALL_UNIT" ]] || fail "Mesh firewall systemd unit is missing from archive." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-policy-apply" ]] || fail "Policy helper is missing from archive." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-emergency" ]] || fail "Emergency command is missing from archive." +} + +verify_release_payload() { + local archive="$1" + require_command sha256sum + require_command tar + extract_archive "$archive" + [[ -x "$TEMP_DIR/control/ochenstarik-smm-control" ]] || fail "Control binary is missing." + [[ -x "$TEMP_DIR/agent/ochenstarik-smm-agent" ]] || fail "Agent binary is missing." + [[ -x "$TEMP_DIR/provisioning-helper/ochenstarik-smm-provisioning-helper" ]] || fail "Provisioning helper binary is missing." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-policy-apply" ]] || fail "Policy helper is missing." + [[ -x "$TEMP_DIR/deploy/ochenstarik-smm-emergency" ]] || fail "Emergency recovery command is missing." + [[ -f "$TEMP_DIR/deploy/$FIREWALL_UNIT" ]] || fail "Mesh firewall unit is missing." + [[ -x "$TEMP_DIR/bootstrap/ochenstarik-server-monitor-manager.sh" ]] || fail "Packaged bootstrap is missing." + log "Release archive and checksum are valid." +} + +ensure_system_user() { + local user="$1" + if ! getent group "$user" >/dev/null; then + groupadd --system "$user" + fi + if ! id "$user" >/dev/null 2>&1; then + useradd --system --gid "$user" --home-dir /nonexistent --no-create-home --shell /usr/sbin/nologin "$user" + fi +} + +ensure_mesh_packages() { + local missing=0 command_name + for command_name in wg wg-quick nft ip; do + command -v "$command_name" >/dev/null 2>&1 || missing=1 + done + (( missing == 0 )) && return + require_command apt-get + log "Installing WireGuard/nftables dependencies." + DEBIAN_FRONTEND=noninteractive apt-get update + DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \ + wireguard-tools nftables iproute2 +} + +install_tree_atomic() { + local source="$1" destination="$2" owner="$3" staging + [[ -d "$source" ]] || fail "Release payload is missing: $source" + staging="${destination}.new.$$" + rm -rf -- "$staging" + install -d -m 0755 "$staging" + cp -a -- "$source/." "$staging/" + chown -R "$owner" "$staging" + find "$staging" -type d -exec chmod 0755 {} + + find "$staging" -type f -exec chmod 0644 {} + + find "$staging" -type f -name 'ochenstarik-smm-*' -exec chmod 0755 {} + + rm -rf -- "$destination" + mv -- "$staging" "$destination" +} + +create_backup() { + local role="$1" backup_id archive list=() + backup_id="$(date -u +%Y%m%dT%H%M%SZ)-${role}-$RANDOM" + install -d -m 0700 "$BACKUP_DIR" + archive="$BACKUP_DIR/${backup_id}.tar.gz" + case "$role" in + control) + list=( + "usr/local/lib/ochenstarik-server-monitor-manager/control" + "etc/ochenstarik-server-monitor-manager/control.env" + "etc/ochenstarik-server-monitor-manager/control-ca.pfx" + "etc/ochenstarik-server-monitor-manager/control-server.pfx" + "etc/systemd/system/$CONTROL_UNIT" + "usr/local/libexec/ochenstarik-smm-policy-apply" + "etc/sudoers.d/ochenstarik-smm-control" + ) + ;; + agent) + list=( + "usr/local/lib/ochenstarik-server-monitor-manager/agent" + "usr/local/lib/ochenstarik-server-monitor-manager/provisioning-helper" + "etc/ochenstarik-server-monitor-manager/agent.env" + "etc/ochenstarik-server-monitor-manager/control-ca.crt" + "etc/systemd/system/$AGENT_UNIT" + "etc/systemd/system/$PROVISIONING_HELPER_UNIT" + ) + ;; + *) fail "Unknown backup role: $role" ;; + esac + local existing=() item + for item in "${list[@]}"; do + [[ -e "/$item" ]] && existing+=("$item") + done + if (( ${#existing[@]} == 0 )); then + printf '%s\n' "empty" >"$BACKUP_DIR/${backup_id}.empty" + else + tar -C / -czf "$archive" -- "${existing[@]}" + chmod 0600 "$archive" + fi + printf '%s\n' "$backup_id" +} + +install_unit() { + local source="$1" unit="$2" + install -m 0644 "$source" "/etc/systemd/system/$unit" + systemctl daemon-reload +} + +install_bootstrap_command() { + local source="$TEMP_DIR/bootstrap/ochenstarik-server-monitor-manager.sh" staging + [[ -x "$source" ]] || fail "Packaged bootstrap is missing." + install -d -m 0755 "$(dirname "$BOOTSTRAP_COMMAND")" + staging="$(mktemp "$(dirname "$BOOTSTRAP_COMMAND")/.ochenstarik-server-monitor-manager.XXXXXXXX")" + if ! install -m 0755 -o root -g root "$source" "$staging"; then + rm -f -- "$staging" + fail "Could not stage the system bootstrap command." + fi + if ! mv -fT -- "$staging" "$BOOTSTRAP_COMMAND"; then + rm -f -- "$staging" + fail "Could not publish the system bootstrap command." + fi +} + +validate_control_state_migration() { + local name + for name in control.db control.db-wal control.db-shm; do + [[ ! -e "$STATE_DIR/$name" || ! -e "$STATE_DIR/control/$name" ]] \ + || fail "Both legacy and role-isolated Control state exist: $name" + done + [[ ! -e "$STATE_DIR/backups" || ! -e "$STATE_DIR/control/backups" ]] \ + || fail "Both legacy and role-isolated Control backup directories exist." +} + +record_control_legacy_state() { + local name + CONTROL_UPDATE_LEGACY_ITEMS=() + for name in control.db control.db-wal control.db-shm; do + [[ ! -e "$STATE_DIR/$name" ]] || CONTROL_UPDATE_LEGACY_ITEMS+=("$name") + done + [[ ! -e "$STATE_DIR/backups" ]] || CONTROL_UPDATE_LEGACY_ITEMS+=(backups) +} + +prepare_control_state() { + local name + install -d -m 0700 -o "$CONTROL_USER" -g "$CONTROL_USER" "$STATE_DIR/control" + for name in control.db control.db-wal control.db-shm; do + if [[ -e "$STATE_DIR/$name" ]]; then + mv -- "$STATE_DIR/$name" "$STATE_DIR/control/$name" + fi + done + if [[ -e "$STATE_DIR/backups" ]]; then + mv -- "$STATE_DIR/backups" "$STATE_DIR/control/backups" + fi + install -d -m 0700 -o "$CONTROL_USER" -g "$CONTROL_USER" "$STATE_DIR/control/backups" + chown -R "$CONTROL_USER:$CONTROL_USER" "$STATE_DIR/control" + find "$STATE_DIR/control" -type d -exec chmod 0700 {} + + find "$STATE_DIR/control" -type f -exec chmod 0600 {} + +} + +reverse_control_state_migration() { + local name source destination + for name in "${CONTROL_UPDATE_LEGACY_ITEMS[@]}"; do + source="$STATE_DIR/control/$name" + destination="$STATE_DIR/$name" + if [[ -e "$destination" ]]; then + [[ ! -e "$source" ]] || return 1 + continue + fi + [[ ! -e "$source" ]] || mv -- "$source" "$destination" || return 1 + done + rmdir "$STATE_DIR/control/backups" 2>/dev/null || true + rmdir "$STATE_DIR/control" 2>/dev/null || true +} + +restore_control_update_backup() { + local archive="$1" restore_root="${2:-/}" + [[ -f "$archive" ]] || return 1 + tar -C "$restore_root" -xzf "$archive" +} + +restore_control_binary_from_archive() { + local archive="$1" restore_root="${2:-/}" + [[ -f "$archive" ]] || return 1 + tar -C "$restore_root" -xzf "$archive" \ + usr/local/lib/ochenstarik-server-monitor-manager/control +} + +recover_control_update() { + local backup_id="$1" restore_root="${2:-/}" + local archive="$BACKUP_DIR/${backup_id}.tar.gz" + systemctl stop "$CONTROL_UNIT" 2>/dev/null || true + reverse_control_state_migration || return 1 + restore_control_update_backup "$archive" "$restore_root" || return 1 + systemctl daemon-reload || return 1 + systemctl start "$CONTROL_UNIT" || return 1 + systemctl is-active --quiet "$CONTROL_UNIT" +} + +validate_control_environment_migration() { + local env_file="$ETC_DIR/control.env" database_count backup_count database_value backup_value + [[ -f "$env_file" && ! -L "$env_file" ]] \ + || fail "Control environment is missing or unsafe." + database_count="$(grep -c '^Control__DatabasePath=' "$env_file" || true)" + backup_count="$(grep -c '^Control__BackupDirectory=' "$env_file" || true)" + [[ "$database_count" == 1 && "$backup_count" == 1 ]] \ + || fail "Control environment contains missing or conflicting state paths." + database_value="$(grep '^Control__DatabasePath=' "$env_file")" + backup_value="$(grep '^Control__BackupDirectory=' "$env_file")" + case "$database_value" in + "Control__DatabasePath=$STATE_DIR/control.db"|"Control__DatabasePath=$STATE_DIR/control/control.db") ;; + *) fail "Control environment contains an unsupported database path." ;; + esac + case "$backup_value" in + "Control__BackupDirectory=$STATE_DIR/backups"|"Control__BackupDirectory=$STATE_DIR/control/backups") ;; + *) fail "Control environment contains an unsupported backup path." ;; + esac +} + +rewrite_control_environment() { + local env_file="$ETC_DIR/control.env" staging line + staging="$(mktemp "$ETC_DIR/.control.env.XXXXXXXX")" + if ! while IFS= read -r line || [[ -n "$line" ]]; do + case "$line" in + Control__DatabasePath=*) printf 'Control__DatabasePath=%s/control/control.db\n' "$STATE_DIR" ;; + Control__BackupDirectory=*) printf 'Control__BackupDirectory=%s/control/backups\n' "$STATE_DIR" ;; + *) printf '%s\n' "$line" ;; + esac + done <"$env_file" >"$staging"; then + rm -f -- "$staging" + fail "Could not rewrite the Control environment." + fi + chown root:"$CONTROL_USER" "$staging" + chmod 0640 "$staging" + if ! mv -fT -- "$staging" "$env_file"; then + rm -f -- "$staging" + fail "Could not publish the Control environment." + fi +} + +write_mesh_firewall() { + cat >"$ETC_DIR/mesh.nft" <<'EOF' +table inet ochenstarik_smm { + chain links { + ct state established,related accept + counter drop + } + + chain mesh_forward { + type filter hook forward priority filter; policy accept; + iifname "smm0" oifname "smm0" jump links + } + } +EOF + chmod 0644 "$ETC_DIR/mesh.nft" + if ! nft list table inet ochenstarik_smm >/dev/null 2>&1; then + nft --check -f "$ETC_DIR/mesh.nft" + fi +} + +read_mesh_value() { + local key="$1" + [[ -r "$ETC_DIR/mesh.env" ]] || fail "Mesh Hub is not initialized." + awk -F '=' -v key="$key" '$1 == key { print substr($0, index($0, "=") + 1); exit }' "$ETC_DIR/mesh.env" +} + +render_hub_wireguard_config() { + local private_key endpoint port node_id address public_key status + private_key="$(cat "$WG_DIR/hub.key")" + endpoint="$(read_mesh_value HUB_ENDPOINT)" + port="${endpoint##*:}" + cat >"/etc/wireguard/smm0.conf" <>"/etc/wireguard/smm0.conf" <"$WG_DIR/hub.key" + fi + hub_private="$(cat "$WG_DIR/hub.key")" + hub_public="$(printf '%s' "$hub_private" | wg pubkey)" + printf '%s\n' "$hub_public" >"$WG_DIR/hub.pub" + chmod 0600 "$WG_DIR/hub.key" + chmod 0644 "$WG_DIR/hub.pub" + cat >"$ETC_DIR/mesh.env" <"/etc/sysctl.d/90-ochenstarik-smm-mesh.conf" + sysctl --system >/dev/null + write_mesh_firewall + [[ -f "$LIB_DIR/control/ochenstarik-smm-control" ]] \ + || log "Warning: Control is not installed yet; mesh peer codes require Control enrollment." + if [[ -f "${TEMP_DIR:-}/deploy/$FIREWALL_UNIT" ]]; then + install_unit "$TEMP_DIR/deploy/$FIREWALL_UNIT" "$FIREWALL_UNIT" + elif [[ -f "$LIB_DIR/bootstrap/$FIREWALL_UNIT" ]]; then + install_unit "$LIB_DIR/bootstrap/$FIREWALL_UNIT" "$FIREWALL_UNIT" + else + fail "Mesh firewall systemd unit is unavailable; reinstall Control from the current release." + fi + systemctl enable "$FIREWALL_UNIT" + systemctl restart "$FIREWALL_UNIT" + render_hub_wireguard_config + systemctl enable wg-quick@smm0.service + systemctl restart wg-quick@smm0.service + log "Mesh Hub initialized at $public_endpoint:$port with $MESH_NETWORK." + log "WireGuard public key: $hub_public" +} + +reserve_node_address() { + local node_id="$1" existing host address + install -d -m 0700 "$MESH_DIR" + touch "$MESH_DIR/nodes.tsv" + chmod 0600 "$MESH_DIR/nodes.tsv" + existing="$(awk -F '\t' -v node="$node_id" '$1 == node { print $2; exit }' "$MESH_DIR/nodes.tsv")" + if [[ -n "$existing" ]]; then + printf '%s\n' "$existing" + return + fi + for host in $(seq 2 254); do + address="10.77.0.$host" + if ! awk -F '\t' -v address="$address" '$2 == address { found=1 } END { exit found ? 0 : 1 }' "$MESH_DIR/nodes.tsv"; then + printf '%s\t%s\t-\treserved\n' "$node_id" "$address" >>"$MESH_DIR/nodes.tsv" + printf '%s\n' "$address" + return + fi + done + fail "Mesh address pool is exhausted." +} + +configure_node_wireguard() { + local node_id="$1" node_address="$2" hub_endpoint="$3" hub_public_key="$4" node_private node_public + ensure_mesh_packages + install -d -m 0700 "$WG_DIR" /etc/wireguard + if [[ ! -f "$WG_DIR/node.key" ]]; then + umask 077 + wg genkey >"$WG_DIR/node.key" + fi + node_private="$(cat "$WG_DIR/node.key")" + node_public="$(printf '%s' "$node_private" | wg pubkey)" + printf '%s\n' "$node_public" >"$WG_DIR/node.pub" + cat >"/etc/wireguard/smm0.conf" <"$ext_file" + openssl x509 -req -sha256 -days 825 -in "$server_csr" -CA "$ca_cert" -CAkey "$ca_key" \ + -CAserial "$serial_file" -CAcreateserial -out "$TEMP_DIR/control-server.crt" -extfile "$ext_file" + openssl pkcs12 -export -out "$ETC_DIR/control-ca.pfx" -inkey "$ca_key" -in "$ca_cert" -passout pass: + openssl pkcs12 -export -out "$ETC_DIR/control-server.pfx" -inkey "$server_key" \ + -in "$TEMP_DIR/control-server.crt" -certfile "$ca_cert" -passout pass: + install -m 0644 "$ca_cert" "$ETC_DIR/control-ca.crt" + chown root:"$CONTROL_USER" "$ETC_DIR/control-ca.pfx" "$ETC_DIR/control-server.pfx" + chmod 0640 "$ETC_DIR/control-ca.pfx" "$ETC_DIR/control-server.pfx" +} + +install_control() { + local archive="$1" public_host="$2" port="${3:-7443}" backup_id + require_root + validate_platform + validate_port "$port" + require_command openssl + require_command sha256sum + require_command tar + require_command systemctl + require_command sudo + require_command visudo + extract_archive "$archive" + [[ -x "$TEMP_DIR/control/ochenstarik-smm-control" ]] || fail "Control binary is missing." + backup_id="$(create_backup control)" + ensure_system_user "$CONTROL_USER" + validate_control_state_migration + systemctl stop "$CONTROL_UNIT" 2>/dev/null || true + install -d -m 0711 -o root -g root "$ETC_DIR" "$STATE_DIR" + prepare_control_state + install_tree_atomic "$TEMP_DIR/control" "$LIB_DIR/control" "root:root" + install_bootstrap_command + if [[ ! -f "$ETC_DIR/control-ca.pfx" || ! -f "$ETC_DIR/control-server.pfx" ]]; then + create_control_certificates "$public_host" + fi + cat >"$ETC_DIR/control.env" <"$ETC_DIR/control-public-url" + chown root:"$CONTROL_USER" "$ETC_DIR/control.env" + chmod 0640 "$ETC_DIR/control.env" + chmod 0644 "$ETC_DIR/control-public-url" + install -d -m 0755 "$(dirname "$POLICY_HELPER")" + install -m 0755 "$TEMP_DIR/deploy/ochenstarik-smm-policy-apply" "$POLICY_HELPER" + install -d -m 0755 "$(dirname "$EMERGENCY_COMMAND")" + install -m 0755 "$TEMP_DIR/deploy/ochenstarik-smm-emergency" "$EMERGENCY_COMMAND" + install -d -m 0755 "$LIB_DIR/bootstrap" + install -m 0644 "$TEMP_DIR/deploy/$FIREWALL_UNIT" "$LIB_DIR/bootstrap/$FIREWALL_UNIT" + printf '%s\n' "$CONTROL_USER ALL=(root) NOPASSWD: $POLICY_HELPER *" >"$SUDOERS_FILE" + chmod 0440 "$SUDOERS_FILE" + visudo -cf "$SUDOERS_FILE" >/dev/null + install_unit "$TEMP_DIR/deploy/$CONTROL_UNIT" "$CONTROL_UNIT" + systemctl enable --now "$CONTROL_UNIT" + systemctl is-active --quiet "$CONTROL_UNIT" || { + systemctl status --no-pager "$CONTROL_UNIT" >&2 || true + fail "Control service failed; backup is $backup_id" + } + log "Control installed. Backup: $backup_id" + log "CA fingerprint: $(openssl x509 -in "$ETC_DIR/control-ca.crt" -noout -fingerprint -sha256 | cut -d= -f2)" +} + +read_enrollment_token() { + if [[ -n "${SMM_ENROLL_TOKEN:-}" ]]; then + ENROLL_TOKEN="$SMM_ENROLL_TOKEN" + unset SMM_ENROLL_TOKEN + return + fi + [[ -t 0 ]] || fail "Set SMM_ENROLL_TOKEN or run from an interactive local terminal." + read -r -s -p "One-time enrollment token: " ENROLL_TOKEN + printf '\n' + [[ -n "$ENROLL_TOKEN" ]] || fail "Enrollment token is empty." +} + +install_agent() { + local archive="$1" node_id="$2" control_url="$3" ca_cert="$4" backup_id token_file token_temp + require_root + validate_platform + validate_node_id "$node_id" + validate_control_url "$control_url" + [[ -f "$ca_cert" ]] || fail "Control CA certificate not found: $ca_cert" + require_command sha256sum + require_command tar + require_command systemctl + require_command runuser + require_command openssl + openssl x509 -in "$ca_cert" -noout >/dev/null 2>&1 || fail "Invalid Control CA certificate." + extract_archive "$archive" + [[ -x "$TEMP_DIR/agent/ochenstarik-smm-agent" ]] || fail "Agent binary is missing." + [[ -x "$TEMP_DIR/provisioning-helper/ochenstarik-smm-provisioning-helper" ]] || fail "Provisioning helper binary is missing." + backup_id="$(create_backup agent)" + ensure_system_user "$AGENT_USER" + install -d -m 0711 -o root -g root "$ETC_DIR" "$STATE_DIR" + install -d -m 0700 -o "$AGENT_USER" -g "$AGENT_USER" "$STATE_DIR/agent" + install -d -m 0700 -o "$AGENT_USER" -g "$AGENT_USER" "$ENROLLMENT_DIR" + install -d -m 0700 -o root -g root "$STATE_DIR/provisioning/rollback" + install_tree_atomic "$TEMP_DIR/agent" "$LIB_DIR/agent" "root:root" + install_tree_atomic "$TEMP_DIR/provisioning-helper" "$LIB_DIR/provisioning-helper" "root:root" + install_bootstrap_command + install -d -m 0755 "$(dirname "$EMERGENCY_COMMAND")" + install -m 0755 "$TEMP_DIR/deploy/ochenstarik-smm-emergency" "$EMERGENCY_COMMAND" + if [[ "$(realpath "$ca_cert")" != "$(realpath -m "$ETC_DIR/control-ca.crt")" ]]; then + install -m 0600 -o "$AGENT_USER" -g "$AGENT_USER" "$ca_cert" "$ETC_DIR/control-ca.crt" + else + chown "$AGENT_USER:$AGENT_USER" "$ETC_DIR/control-ca.crt" + chmod 0600 "$ETC_DIR/control-ca.crt" + fi + cat >"$ETC_DIR/agent.env" <"$token_temp"; then + ENROLL_TOKEN="" + fail "Could not write the enrollment token file." + fi + chown "$AGENT_USER:$AGENT_USER" "$token_temp" + chmod 0400 "$token_temp" + ENROLLMENT_TOKEN_FILE="$token_file" + mv -fT -- "$token_temp" "$token_file" + ENROLLMENT_TOKEN_TEMP="" + ENROLL_TOKEN="" + if ! runuser -u "$AGENT_USER" -- env \ + "SMM_NodeId=$node_id" \ + "SMM_ControlUrl=${control_url%/}" \ + "SMM_StateDirectory=$STATE_DIR/agent" \ + "SMM_EnrollmentTokenDirectory=$ENROLLMENT_DIR" \ + "SMM_CertificateAuthorityPath=$ETC_DIR/control-ca.crt" \ + "SMM_EnrollTokenFile=$token_file" \ + "$LIB_DIR/agent/ochenstarik-smm-agent"; then + rm -f -- "$token_file" + fail "Agent enrollment failed." + fi + rm -f -- "$token_file" + ENROLLMENT_TOKEN_FILE="" + chown root:"$AGENT_USER" "$ETC_DIR/control-ca.crt" + chmod 0640 "$ETC_DIR/control-ca.crt" + install_unit "$TEMP_DIR/deploy/$AGENT_UNIT" "$AGENT_UNIT" + install_unit "$TEMP_DIR/deploy/$PROVISIONING_HELPER_UNIT" "$PROVISIONING_HELPER_UNIT" + systemctl enable --now "$PROVISIONING_HELPER_UNIT" + systemctl enable --now "$AGENT_UNIT" + systemctl is-active --quiet "$AGENT_UNIT" || { + systemctl status --no-pager "$AGENT_UNIT" >&2 || true + fail "Agent service failed; backup is $backup_id" + } + log "Agent $node_id installed and enrolled. Backup: $backup_id" +} + +read_enrollment_code() { + if [[ -n "${SMM_ENROLL_CODE:-}" ]]; then + ENROLL_CODE="$SMM_ENROLL_CODE" + unset SMM_ENROLL_CODE + return + fi + [[ -t 0 ]] || fail "Set SMM_ENROLL_CODE or run from an interactive local terminal." + read -r -s -p "SMMNODE enrollment code: " ENROLL_CODE + printf '\n' + [[ -n "$ENROLL_CODE" ]] || fail "Enrollment code is empty." +} + +confirm_ca_fingerprint() { + local ca_file="$1" answer + log "Control CA fingerprint: $(openssl x509 -in "$ca_file" -noout -fingerprint -sha256 | cut -d= -f2)" + if [[ "${SMM_ACCEPT_CA_FINGERPRINT:-}" == "1" ]]; then + return + fi + [[ -t 0 ]] || fail "Set SMM_ACCEPT_CA_FINGERPRINT=1 only after verifying the fingerprint out of band." + read -r -p "Type 'yes' after comparing this fingerprint with the Hub: " answer + [[ "$answer" == "yes" ]] || fail "Control CA fingerprint was not confirmed." +} + +install_node_from_code() { + local archive="$1" prefix control_part ca_part node_part token_part + local endpoint_part hub_key_part address_part network_part extra + local control_url node_id token ca_file hub_endpoint hub_public_key node_address mesh_network + require_root + require_command base64 + require_command openssl + read_enrollment_code + IFS='.' read -r prefix control_part ca_part node_part token_part endpoint_part \ + hub_key_part address_part network_part extra <<<"$ENROLL_CODE" + ENROLL_CODE="" + [[ "$prefix" == "SMMNODE1" || "$prefix" == "SMMNODE2" ]] \ + || fail "Unsupported SMMNODE enrollment code version." + [[ -n "$control_part" && -n "$ca_part" && -n "$node_part" && -n "$token_part" \ + && -z "${extra:-}" ]] || fail "Invalid SMMNODE enrollment code." + if [[ "$prefix" == "SMMNODE1" ]]; then + [[ -z "${endpoint_part:-}${hub_key_part:-}${address_part:-}${network_part:-}" ]] \ + || fail "Invalid SMMNODE1 enrollment code." + else + [[ -n "${endpoint_part:-}" && -n "${hub_key_part:-}" \ + && -n "${address_part:-}" && -n "${network_part:-}" ]] \ + || fail "Invalid SMMNODE2 mesh enrollment code." + fi + control_url="$(base64url_decode "$control_part")" + node_id="$(base64url_decode "$node_part")" + token="$(base64url_decode "$token_part")" + if [[ "$prefix" == "SMMNODE2" ]]; then + hub_endpoint="$(base64url_decode "$endpoint_part")" + hub_public_key="$(base64url_decode "$hub_key_part")" + node_address="$(base64url_decode "$address_part")" + mesh_network="$(base64url_decode "$network_part")" + [[ "$hub_endpoint" =~ ^[A-Za-z0-9.-]+:[0-9]{1,5}$ ]] || fail "Invalid Hub WireGuard endpoint." + validate_port "${hub_endpoint##*:}" + [[ "$hub_public_key" =~ ^[A-Za-z0-9+/]{43}=$ ]] || fail "Invalid Hub WireGuard public key." + [[ "$node_address" =~ ^10\.77\.0\.([2-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-4])$ ]] \ + || fail "Invalid reserved mesh address." + [[ "$mesh_network" == "$MESH_NETWORK" ]] || fail "Unsupported mesh network." + fi + ca_file="$(mktemp -t smm-control-ca.XXXXXXXX.crt)" + chmod 0600 "$ca_file" + base64url_decode "$ca_part" >"$ca_file" + confirm_ca_fingerprint "$ca_file" + SMM_ENROLL_TOKEN="$token" + token="" + install_agent "$archive" "$node_id" "$control_url" "$ca_file" + rm -f -- "$ca_file" + if [[ "$prefix" == "SMMNODE2" ]]; then + configure_node_wireguard "$node_id" "$node_address" "$hub_endpoint" "$hub_public_key" + log "Node mesh configured. Copy this public peer code back to the Hub:" + printf '%s\n' "$MESH_PEER_CODE" + MESH_PEER_CODE="" + fi +} + +refresh_agent_uid() { + local env_file="$ETC_DIR/agent.env" agent_uid temp line found=0 + [[ -f "$env_file" && ! -L "$env_file" ]] \ + || fail "Agent environment is missing or unsafe: $env_file" + agent_uid="$(id -u "$AGENT_USER")" + temp="$(mktemp "$ETC_DIR/.agent.env.XXXXXXXX")" + if ! while IFS= read -r line || [[ -n "$line" ]]; do + if [[ "$line" == SMM_AgentUid=* ]]; then + printf 'SMM_AgentUid=%s\n' "$agent_uid" + found=1 + else + printf '%s\n' "$line" + fi + done <"$env_file" >"$temp"; then + rm -f -- "$temp" + fail "Could not refresh SMM_AgentUid in agent.env." + fi + if [[ "$found" == "0" ]]; then + printf 'SMM_AgentUid=%s\n' "$agent_uid" >>"$temp" + fi + chown root:"$AGENT_USER" "$temp" + chmod 0640 "$temp" + mv -fT -- "$temp" "$env_file" +} + +update_role() { + local role="$1" archive="$2" binary unit user backup_id + require_root + validate_platform + extract_archive "$archive" + case "$role" in + control) binary="ochenstarik-smm-control"; unit="$CONTROL_UNIT"; user="root:root" ;; + agent) binary="ochenstarik-smm-agent"; unit="$AGENT_UNIT"; user="root:root" ;; + *) fail "Unknown role: $role" ;; + esac + [[ -x "$TEMP_DIR/$role/$binary" ]] || fail "$role binary is missing." + if [[ "$role" == "control" ]]; then + validate_control_state_migration + validate_control_environment_migration + record_control_legacy_state + else + refresh_agent_uid + fi + backup_id="$(create_backup "$role")" + if [[ "$role" == "control" ]]; then + CONTROL_UPDATE_BACKUP_ID="$backup_id" + CONTROL_UPDATE_RECOVERY_REQUIRED=1 + fi + systemctl stop "$unit" + if [[ "$role" == "agent" ]]; then + systemctl stop "$PROVISIONING_HELPER_UNIT" 2>/dev/null || true + fi + if [[ "$role" == "control" ]]; then + install -d -m 0711 -o root -g root "$ETC_DIR" "$STATE_DIR" + prepare_control_state + rewrite_control_environment + install_bootstrap_command + install_unit "$TEMP_DIR/deploy/$CONTROL_UNIT" "$CONTROL_UNIT" + systemctl enable "$CONTROL_UNIT" + install_tree_atomic "$TEMP_DIR/control" "$LIB_DIR/control" "$user" + else + install_tree_atomic "$TEMP_DIR/$role" "$LIB_DIR/$role" "$user" + [[ -x "$TEMP_DIR/provisioning-helper/ochenstarik-smm-provisioning-helper" ]] \ + || fail "Provisioning helper binary is missing." + install_tree_atomic "$TEMP_DIR/provisioning-helper" "$LIB_DIR/provisioning-helper" "root:root" + install_unit "$TEMP_DIR/deploy/$AGENT_UNIT" "$AGENT_UNIT" + install_unit "$TEMP_DIR/deploy/$PROVISIONING_HELPER_UNIT" "$PROVISIONING_HELPER_UNIT" + systemctl enable --now "$PROVISIONING_HELPER_UNIT" + fi + systemctl restart "$unit" + if ! systemctl is-active --quiet "$unit"; then + if [[ "$role" == "agent" ]]; then + log "Update failed; restoring backup $backup_id" + restore_backup "$role" "$backup_id" + fi + fail "$role update was rolled back." + fi + if [[ "$role" == "control" ]]; then + CONTROL_UPDATE_RECOVERY_REQUIRED=0 + CONTROL_UPDATE_BACKUP_ID="" + CONTROL_UPDATE_LEGACY_ITEMS=() + fi + log "$role updated. Backup: $backup_id" +} + +latest_backup_id() { + local role="$1" path + path="$(find "$BACKUP_DIR" -maxdepth 1 -type f \( -name "*-${role}-*.tar.gz" -o -name "*-${role}-*.empty" \) -printf '%f\n' 2>/dev/null | sort | tail -n1)" + [[ -n "$path" ]] || fail "No backup found for $role." + printf '%s\n' "${path%.tar.gz}" | sed 's/\.empty$//' +} + +restore_backup() { + local role="$1" backup_id="$2" archive="$BACKUP_DIR/${backup_id}.tar.gz" unit + case "$role" in control) unit="$CONTROL_UNIT" ;; agent) unit="$AGENT_UNIT" ;; *) fail "Unknown role: $role" ;; esac + [[ -f "$archive" ]] || fail "Backup archive not found: $backup_id" + systemctl stop "$unit" || true + if [[ "$role" == "agent" ]]; then + systemctl stop "$PROVISIONING_HELPER_UNIT" || true + fi + if [[ "$role" == "control" ]]; then + restore_control_binary_from_archive "$archive" + else + tar -C / -xzf "$archive" + fi + systemctl daemon-reload + if [[ "$role" == "agent" ]]; then + systemctl start "$PROVISIONING_HELPER_UNIT" + fi + systemctl start "$unit" + systemctl is-active --quiet "$unit" || fail "Rollback restored files but service is not active." + log "$role restored from $backup_id" +} + +rollback_role() { + local role="$1" backup_id="${2:-}" + require_root + [[ -n "$backup_id" ]] || backup_id="$(latest_backup_id "$role")" + restore_backup "$role" "$backup_id" +} + +show_status() { + local unit + for unit in "$CONTROL_UNIT" "$AGENT_UNIT"; do + if systemctl list-unit-files "$unit" --no-legend 2>/dev/null | grep -q "^$unit"; then + printf '%s: %s\n' "$unit" "$(systemctl is-active "$unit" 2>/dev/null || true)" + else + printf '%s: not-installed\n' "$unit" + fi + done + if [[ -f "$ETC_DIR/control-ca.crt" ]] && command -v openssl >/dev/null; then + printf 'control-ca: %s\n' "$(openssl x509 -in "$ETC_DIR/control-ca.crt" -noout -fingerprint -sha256 | cut -d= -f2)" + fi +} + +run_control_cli() { + local command_name="$1" identifier="$2" + require_root + validate_node_id "$identifier" + [[ -x "$LIB_DIR/control/ochenstarik-smm-control" ]] || fail "Control is not installed." + [[ -f "$ETC_DIR/control.env" ]] || fail "Control environment is missing." + require_command systemd-run + systemd-run --wait --pipe --quiet --collect \ + --uid="$CONTROL_USER" \ + --gid="$CONTROL_USER" \ + -p "EnvironmentFile=$ETC_DIR/control.env" \ + "$LIB_DIR/control/ochenstarik-smm-control" "$command_name" "$identifier" +} + +create_node_code() { + local node_id="$1" token control_url ca_pem node_address hub_endpoint hub_public_key mesh_network + require_root + validate_node_id "$node_id" + [[ -r "$ETC_DIR/control-public-url" ]] || fail "Control public URL is missing; reinstall Control with PUBLIC_HOST." + [[ -r "$ETC_DIR/control-ca.crt" ]] || fail "Control CA certificate is missing." + require_command base64 + control_url="$(tr -d '\r\n' <"$ETC_DIR/control-public-url")" + validate_control_url "$control_url" + token="$(run_control_cli token-create "$node_id")" + [[ -n "$token" && "$token" != *$'\n'* ]] || fail "Control returned an invalid enrollment token." + ca_pem="$(cat "$ETC_DIR/control-ca.crt")" + if [[ -r "$ETC_DIR/mesh.env" && -r "$WG_DIR/hub.pub" ]]; then + node_address="$(reserve_node_address "$node_id")" + hub_endpoint="$(read_mesh_value HUB_ENDPOINT)" + hub_public_key="$(read_mesh_value HUB_PUBLIC_KEY)" + mesh_network="$(read_mesh_value MESH_NETWORK)" + printf 'SMMNODE2.%s.%s.%s.%s.%s.%s.%s.%s\n' \ + "$(printf '%s' "$control_url" | base64url_encode)" \ + "$(printf '%s' "$ca_pem" | base64url_encode)" \ + "$(printf '%s' "$node_id" | base64url_encode)" \ + "$(printf '%s' "$token" | base64url_encode)" \ + "$(printf '%s' "$hub_endpoint" | base64url_encode)" \ + "$(printf '%s' "$hub_public_key" | base64url_encode)" \ + "$(printf '%s' "$node_address" | base64url_encode)" \ + "$(printf '%s' "$mesh_network" | base64url_encode)" + else + printf 'SMMNODE1.%s.%s.%s.%s\n' \ + "$(printf '%s' "$control_url" | base64url_encode)" \ + "$(printf '%s' "$ca_pem" | base64url_encode)" \ + "$(printf '%s' "$node_id" | base64url_encode)" \ + "$(printf '%s' "$token" | base64url_encode)" + fi + token="" +} + +create_device_code() { + local device_id="$1" token control_url ca_der + require_root + validate_node_id "$device_id" + [[ -r "$ETC_DIR/control-public-url" ]] || fail "Control public URL is missing; reinstall Control with PUBLIC_HOST." + [[ -r "$ETC_DIR/control-ca.crt" ]] || fail "Control CA certificate is missing." + require_command base64 + require_command openssl + control_url="$(tr -d '\r\n' <"$ETC_DIR/control-public-url")" + validate_control_url "$control_url" + token="$(run_control_cli device-token-create "$device_id")" + [[ "$token" =~ ^[A-Za-z0-9_-]{43}$ ]] \ + || fail "Control returned an invalid device enrollment token." + ca_der="$(openssl x509 -in "$ETC_DIR/control-ca.crt" -outform DER | base64 -w 0)" + printf 'SMMDEV1-' + printf 'VERSION=1\nDEVICE=%s\nTOKEN=%s\nURL=%s\nCA=%s\n' \ + "$device_id" "$token" "$control_url" "$ca_der" | base64url_encode + printf '\n' + token="" +} + +add_mesh_peer() { + local code="$1" prefix node_part address_part key_part extra + local node_id address public_key current tmp + require_root + require_command base64 + require_command wg + [[ -r "$ETC_DIR/mesh.env" && -r "$MESH_DIR/nodes.tsv" ]] || fail "Mesh Hub is not initialized." + IFS='.' read -r prefix node_part address_part key_part extra <<<"$code" + [[ "$prefix" == "SMMPEER1" && -n "$node_part" && -n "$address_part" \ + && -n "$key_part" && -z "${extra:-}" ]] || fail "Invalid SMMPEER1 code." + node_id="$(base64url_decode "$node_part")" + address="$(base64url_decode "$address_part")" + public_key="$(base64url_decode "$key_part")" + validate_node_id "$node_id" + [[ "$address" =~ ^10\.77\.0\.([2-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-4])$ ]] \ + || fail "Invalid peer mesh address." + [[ "$public_key" =~ ^[A-Za-z0-9+/]{43}=$ ]] || fail "Invalid peer WireGuard public key." + current="$(awk -F '\t' -v node="$node_id" '$1 == node { print $2; exit }' "$MESH_DIR/nodes.tsv")" + [[ "$current" == "$address" ]] || fail "Peer address does not match the Hub reservation." + if awk -F '\t' -v address="$address" -v node="$node_id" '$2 == address && $1 != node { found=1 } END { exit found ? 0 : 1 }' "$MESH_DIR/nodes.tsv"; then + fail "Peer mesh address is already assigned." + fi + tmp="$(mktemp -p "$MESH_DIR" nodes.tsv.XXXXXXXX)" + awk -F '\t' -v OFS='\t' -v node="$node_id" -v address="$address" -v key="$public_key" \ + '$1 == node { print node, address, key, "active"; found=1; next } { print } END { if (!found) exit 1 }' \ + "$MESH_DIR/nodes.tsv" >"$tmp" || { rm -f -- "$tmp"; fail "Peer reservation is missing."; } + chmod 0600 "$tmp" + mv -- "$tmp" "$MESH_DIR/nodes.tsv" + render_hub_wireguard_config + systemctl restart wg-quick@smm0.service + systemctl is-active --quiet wg-quick@smm0.service || fail "WireGuard failed after peer registration." + log "Mesh peer $node_id activated at $address." +} + +show_mesh_status() { + require_root + [[ -r "$ETC_DIR/mesh.env" ]] || fail "Mesh Hub is not initialized." + printf 'endpoint: %s\n' "$(read_mesh_value HUB_ENDPOINT)" + printf 'network: %s\n' "$(read_mesh_value MESH_NETWORK)" + if [[ -r "$MESH_DIR/nodes.tsv" ]]; then + printf '%-24s %-15s %-10s %s\n' NODE ADDRESS STATUS HANDSHAKE + while IFS=$'\t' read -r node_id address public_key status; do + [[ -n "$node_id" ]] || continue + local handshake="-" + if [[ "$status" == "active" ]]; then + handshake="$(wg show smm0 latest-handshakes 2>/dev/null | awk -v key="$public_key" '$1 == key { print $2; exit }')" + [[ -n "$handshake" && "$handshake" != "0" ]] || handshake="never" + fi + printf '%-24s %-15s %-10s %s\n' "$node_id" "$address" "$status" "$handshake" + done <"$MESH_DIR/nodes.tsv" + fi +} + +show_ca_fingerprint() { + [[ -f "$ETC_DIR/control-ca.crt" ]] || fail "Control CA certificate is not installed." + require_command openssl + openssl x509 -in "$ETC_DIR/control-ca.crt" -noout -fingerprint -sha256 +} + +role_is_installed() { + case "$1" in + control) [[ -d "$LIB_DIR/control" || -f "$ETC_DIR/control.env" \ + || -f "/etc/systemd/system/${CONTROL_UNIT:-ochenstarik-smm-control.service}" ]] ;; + agent) [[ -d "$LIB_DIR/agent" || -f "$ETC_DIR/agent.env" \ + || -f "/etc/systemd/system/${AGENT_UNIT:-ochenstarik-smm-agent.service}" ]] ;; + *) return 1 ;; + esac +} + +remove_shared_ca_if_unused() { + if ! role_is_installed control && ! role_is_installed agent; then + rm -f -- "$ETC_DIR/control-ca.crt" + fi +} + +uninstall_agent() { + local purge="${1:-}" + require_root + systemctl disable --now "$AGENT_UNIT" 2>/dev/null || true + systemctl disable --now "$PROVISIONING_HELPER_UNIT" 2>/dev/null || true + rm -f -- "/etc/systemd/system/$AGENT_UNIT" "/etc/systemd/system/$PROVISIONING_HELPER_UNIT" "$ETC_DIR/agent.env" + rm -rf -- "$LIB_DIR/agent" "$LIB_DIR/provisioning-helper" + if [[ "$purge" == "--purge" ]]; then + rm -rf -- "$STATE_DIR/agent" "$ENROLLMENT_DIR" + remove_shared_ca_if_unused + fi + systemctl daemon-reload + log "Agent removed${purge:+ ($purge)}." +} + +install_monitor() { + local public_key="$1" + require_root + validate_platform + + local metrics_script="/usr/local/libexec/ochenstarik-smm-metrics" + local monitor_user="ochenstarik-monitor" + local monitor_home="/var/lib/ochenstarik-monitor" + + if ! id -u "$monitor_user" >/dev/null 2>&1; then + useradd -r -s /usr/sbin/nologin -d "$monitor_home" -M "$monitor_user" + fi + install -d -m 0755 -o "$monitor_user" -g "$monitor_user" "$monitor_home" + + install -d -m 0755 "/usr/local/libexec" + cat >"$metrics_script" <<'EOF' +#!/usr/bin/env bash +set -euo pipefail +# ochenstarik-smm-metrics + +echo "PROTOCOL=1" +echo "HOSTNAME=$(hostname)" +UPTIME=$(awk '{print int($1)}' /proc/uptime 2>/dev/null || echo "0") +echo "UPTIME_SECONDS=${UPTIME}" +LOAD1=$(awk '{print $1}' /proc/loadavg 2>/dev/null || echo "0.00") +echo "LOAD1=${LOAD1}" +CPU_COUNT=$(nproc 2>/dev/null || echo "1") +echo "CPU_COUNT=${CPU_COUNT}" +MEM_TOTAL=$(awk '/^MemTotal:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +echo "MEM_TOTAL_KB=${MEM_TOTAL}" +MEM_AVAIL=$(awk '/^MemAvailable:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +if [ "$MEM_AVAIL" = "0" ] || [ -z "$MEM_AVAIL" ]; then + MEM_FREE=$(awk '/^MemFree:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") + MEM_CACHED=$(awk '/^Cached:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") + MEM_AVAIL=$((MEM_FREE + MEM_CACHED)) +fi +echo "MEM_AVAILABLE_KB=${MEM_AVAIL}" +SWAP_TOTAL=$(awk '/^SwapTotal:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +echo "SWAP_TOTAL_KB=${SWAP_TOTAL}" +SWAP_FREE=$(awk '/^SwapFree:/ {print $2}' /proc/meminfo 2>/dev/null || echo "0") +echo "SWAP_FREE_KB=${SWAP_FREE}" +DF_OUT=$(df -k / 2>/dev/null | awk 'NR==2 {print $2, $4}' || echo "0 0") +DISK_TOTAL=$(echo "$DF_OUT" | awk '{print $1}') +DISK_AVAIL=$(echo "$DF_OUT" | awk '{print $2}') +echo "DISK_TOTAL_KB=${DISK_TOTAL}" +echo "DISK_AVAILABLE_KB=${DISK_AVAIL}" +DF_INODES=$(df -i / 2>/dev/null | awk 'NR==2 {print $2, $4}' || echo "0 0") +INODES_TOTAL=$(echo "$DF_INODES" | awk '{print $1}') +INODES_FREE=$(echo "$DF_INODES" | awk '{print $2}') +echo "DISK_INODES_TOTAL=${INODES_TOTAL}" +echo "DISK_INODES_FREE=${INODES_FREE}" +NET_RX=$(awk 'NR>2 {rx+=$1} END {print rx}' /proc/net/dev 2>/dev/null || echo "0") +NET_TX=$(awk 'NR>2 {tx+=$9} END {print tx}' /proc/net/dev 2>/dev/null || echo "0") +echo "NETWORK_RX_BYTES=${NET_RX}" +echo "NETWORK_TX_BYTES=${NET_TX}" +KERNEL=$(uname -r 2>/dev/null || echo "unknown") +echo "KERNEL=${KERNEL}" +SYSTEMD_SSH=$(systemctl is-active ssh.service 2>/dev/null || true) +echo "SYSTEMD_SSH=${SYSTEMD_SSH:-unknown}" +SYSTEMD_WIREGUARD=$(systemctl is-active wg-quick@smm0.service 2>/dev/null || true) +echo "SYSTEMD_WIREGUARD=${SYSTEMD_WIREGUARD:-unknown}" +EOF + chown root:root "$metrics_script" + chmod 0755 "$metrics_script" + + install -d -m 0700 -o "$monitor_user" -g "$monitor_user" "$monitor_home/.ssh" + local auth_keys="$monitor_home/.ssh/authorized_keys" + + # We idempotently add the key + local key_entry="command=\"$metrics_script\",restrict,no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding $public_key" + if [[ -f "$auth_keys" ]] && grep -qF "$public_key" "$auth_keys"; then + log "Monitor key already installed." + else + echo "$key_entry" >> "$auth_keys" + chown "$monitor_user:$monitor_user" "$auth_keys" + chmod 0600 "$auth_keys" + log "Monitor key installed." + fi +} + +uninstall_monitor() { + require_root + local monitor_user="ochenstarik-monitor" + local monitor_home="/var/lib/ochenstarik-monitor" + local metrics_script="/usr/local/libexec/ochenstarik-smm-metrics" + + if id -u "$monitor_user" >/dev/null 2>&1; then + userdel -f "$monitor_user" || true + fi + rm -rf -- "$monitor_home" + rm -f -- "$metrics_script" + log "Monitor removed." +} + +uninstall_control() { + [[ "${1:-}" == "--confirm-destroy-control" ]] || fail "Control removal requires --confirm-destroy-control" + require_root + systemctl disable --now "$CONTROL_UNIT" 2>/dev/null || true + rm -f -- "/etc/systemd/system/$CONTROL_UNIT" "$ETC_DIR/control.env" \ + "$ETC_DIR/control-ca.pfx" "$ETC_DIR/control-server.pfx" \ + "$POLICY_HELPER" "$SUDOERS_FILE" + rm -rf -- "$LIB_DIR/control" "$STATE_DIR/control" \ + "$STATE_DIR/control.db" "$STATE_DIR/control.db-wal" \ + "$STATE_DIR/control.db-shm" "$STATE_DIR/backups" + remove_shared_ca_if_unused + systemctl daemon-reload + log "Control role and its state were removed." +} + +preflight() { + validate_platform + local command_name + for command_name in openssl sha256sum tar systemctl getent useradd groupadd; do + require_command "$command_name" + done + log "Supported platform: $(. /etc/os-release; printf '%s %s' "$ID" "$VERSION_ID"), $(uname -m)" +} + +main() { + local action="${1:-help}" + shift || true + case "$action" in + help|-h|--help) [[ $# -eq 0 ]] || fail "$action takes no arguments"; usage ;; + version|--version) [[ $# -eq 0 ]] || fail "$action takes no arguments"; printf '%s %s\n' "$PROGRAM" "$PROGRAM_VERSION" ;; + preflight) [[ $# -eq 0 ]] || fail "preflight takes no arguments"; preflight ;; + verify-release) [[ $# -eq 1 ]] || fail "verify-release requires ARCHIVE"; verify_release_payload "$1" ;; + install-control) [[ $# -ge 2 && $# -le 3 ]] || fail "install-control requires ARCHIVE PUBLIC_HOST [HTTPS_PORT]"; install_control "$@" ;; + install-agent) [[ $# -eq 4 ]] || fail "install-agent requires ARCHIVE NODE_ID CONTROL_URL CA_CERT"; install_agent "$@" ;; + install-node) [[ $# -eq 1 ]] || fail "install-node requires ARCHIVE"; install_node_from_code "$1" ;; + install-monitor) [[ $# -eq 1 ]] || fail "install-monitor requires PUBLIC_KEY"; install_monitor "$1" ;; + uninstall-monitor) [[ $# -eq 0 ]] || fail "uninstall-monitor takes no arguments"; uninstall_monitor ;; + mesh-init) [[ $# -ge 1 && $# -le 2 ]] || fail "mesh-init requires PUBLIC_ENDPOINT [WG_PORT]"; mesh_init "$@" ;; + peer-add) [[ $# -eq 1 ]] || fail "peer-add requires SMMPEER1_CODE"; add_mesh_peer "$1" ;; + mesh-status) [[ $# -eq 0 ]] || fail "mesh-status takes no arguments"; show_mesh_status ;; + update-control) [[ $# -eq 1 ]] || fail "update-control requires ARCHIVE"; update_role control "$1" ;; + update-agent) [[ $# -eq 1 ]] || fail "update-agent requires ARCHIVE"; update_role agent "$1" ;; + rollback) [[ $# -ge 1 && $# -le 2 ]] || fail "rollback requires control|agent [BACKUP_ID]"; rollback_role "$@" ;; + node-code) [[ $# -eq 1 ]] || fail "node-code requires NODE_ID"; create_node_code "$1" ;; + control-device-code) [[ $# -eq 1 ]] || fail "control-device-code requires DEVICE_ID"; create_device_code "$1" ;; + node-token) [[ $# -eq 1 ]] || fail "node-token requires NODE_ID"; run_control_cli token-create "$1" ;; + control-ca-fingerprint) [[ $# -eq 0 ]] || fail "control-ca-fingerprint takes no arguments"; show_ca_fingerprint ;; + status) [[ $# -eq 0 ]] || fail "status takes no arguments"; show_status ;; + uninstall-agent) [[ $# -eq 0 || ( $# -eq 1 && "$1" == "--purge" ) ]] || fail "uninstall-agent accepts only [--purge]"; uninstall_agent "${1:-}" ;; + uninstall-control) [[ $# -eq 1 ]] || fail "uninstall-control requires confirmation"; uninstall_control "$1" ;; + *) fail "Unknown action: $action (run with --help)" ;; + esac +} + +main "$@" diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/ochenstarik-server-monitor-manager.sh.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/ochenstarik-server-monitor-manager.sh.sha256 new file mode 100644 index 0000000..e500431 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/ochenstarik-server-monitor-manager.sh.sha256 @@ -0,0 +1 @@ +f1720e00f4b0e116a6e3462b238078343b613dd4ff03536925b1df84c7581d79 ochenstarik-server-monitor-manager.sh diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-arm64-sbom.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-arm64-sbom.json new file mode 100644 index 0000000..caf2f06 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-arm64-sbom.json @@ -0,0 +1,2815 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:f34bcbd3-8a27-4244-9354-24e8e3f29b07", + "version": 1, + "metadata": { + "timestamp": "2026-08-10T10:57:07Z", + "tools": { + "components": [ + { + "type": "application", + "authors": [ + { + "name": "CycloneDX" + } + ], + "name": "CycloneDX module for .NET", + "version": "6.2.0.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-dotnet", + "type": "website" + } + ] + } + ] + }, + "component": { + "type": "application", + "bom-ref": "ServerMonitorManager@0.0.0", + "name": "ServerMonitorManager", + "version": "0.0.0" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.ApplicationInsights", + "version": "2.23.0", + "description": "Application Insights Base API. This package provides core functionality for transmission of all Application Insights Telemetry Types and is a dependent package for all other Application Insights packages. Please install the platform specific package for the best experience. Privacy statement: https://go.microsoft.com/fwlink/?LinkId=512156", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DD497BFAD0C65E54A4F78D2A1644F3D0854D4CD01DD83BA506F8D5D53635E28152C7C13210DD5DD3985780AAB146A7620DE3EBAEAD8EF12C6F87088676C2157F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "externalReferences": [ + { + "url": "https://go.microsoft.com/fwlink/?LinkId=392727", + "type": "website" + }, + { + "url": "https://github.com/Microsoft/ApplicationInsights-dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Authentication.Certificate", + "version": "10.0.10", + "description": "ASP.NET Core middleware that enables an application to support certificate authentication.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "FD902F01F05EFDEF7EB362EF0187438EBA3512D40722A547BB3DE8B1A823DF68FB660DBD097764E848EAA5CDAFC20D1F121EF45667B06A4C0756ADE371B25455" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Mvc.Testing", + "version": "10.0.10", + "description": "Support for writing functional tests for MVC applications.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0604BE8DA0AEE0F088C0513EF58E1927C9097E376A7517887F85F4BD9C4469E4D0034C4B855D10DA30EE62966383578FDE509157CB5C56EAA892E2053C64DF74" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.TestHost", + "version": "10.0.10", + "description": "ASP.NET Core web server for writing and running tests.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "4D8702FC6CA49443CFAF7F565A1D6FFA2E6B8DC7A52BFBD505B65FA20ACDC8D5D69D760E7380C32C82B2C76062E83B817AA9DE3FE822E423F6D4D1628F9A3540" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Bcl.AsyncInterfaces", + "version": "6.0.0", + "description": "Provides the IAsyncEnumerable\u003CT\u003E and IAsyncDisposable interfaces and helper types for .NET Standard 2.0. This package is not required starting with .NET Standard 2.1 and .NET Core 3.0.\n\nCommonly Used Types:\nSystem.IAsyncDisposable\nSystem.Collections.Generic.IAsyncEnumerable\nSystem.Collections.Generic.IAsyncEnumerator", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "221A05A0C910F7A87B620D8F3831ED392B4EB95D112BEE274D35F27009AD2A26445DE9D7CD235FE6FB4A03F2550874BDA3BE3DDDD96EDAF9C0852A9C23D7B099" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.CodeCoverage", + "version": "18.8.1", + "description": "Microsoft.CodeCoverage package brings infra for collecting code coverage from vstest.console.exe and \u0022dotnet test\u0022.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F21F6B39BBBCE89302D28B8E77B99E3633E18EB4D840F132393E3686C841C5DC649EFA5F60B4734D8D7764185101FEEDA2197BC00A6AABF69A37A591C617708F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "9FD331CF8F4C4026F1B7B9C651FB33E80CE1D0E0D6F46DD00E41E71E598CFEFB8E318CCB8519064CA4FB9F82D4126D08F42041E5987E186676ADAA2595E229D4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite.Core", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite. This package does not include a copy of the native SQLite library.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "723A1B77BFE3966982CA0242256B2DC320ED878C4ED9480680D75D91B716AC27013FA5FE533800C50C7C6000E50046AC10AF5DBC48E3CA4EB885C6ED65BC2CB1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Abstractions", + "version": "10.0.10", + "description": "Caching abstractions for in-memory cache and distributed cache.\n\nCommonly Used Types:\nMicrosoft.Extensions.Caching.Distributed.IDistributedCache\nMicrosoft.Extensions.Caching.Memory.IMemoryCache", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "02858A6F1E814D2FCBA5506A1E5E1BC125186FE76E89235D073B0DCA84C62802E6680E6C13AD8AC07AC5B6358A0691CF473C80122C062A7AC8AE557D7A5A7A5B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Memory", + "version": "10.0.10", + "description": "In-memory cache implementation of Microsoft.Extensions.Caching.Memory.IMemoryCache.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DDBBEC0D9A6C493F5BEAE10A1446E24664A17F9A8E5B694C6CFD315EE8C3F19490AC51F5ABBB624BD51FD14CDA381D515BCFF7F1A4D3AAEF06F589EA8FA7EDF4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration", + "version": "10.0.10", + "description": "Implementation of key-value pair based configuration for Microsoft.Extensions.Configuration. Includes the memory configuration provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "943C09D6B759963DD401BD8F3C3D7F9744436AE1157EF93810A8CAC823E3ED096A51817327AFADDC5741E541912D493D053D566CD898E6F8628398C7264981B3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Abstractions", + "version": "10.0.10", + "description": "Provides abstractions of key-value pair based configuration. Interfaces defined in this package are implemented by classes in Microsoft.Extensions.Configuration and other configuration packages.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "7BF4CD6F25D7E030E366CC9CB593B79A890F347DF598062C0D2030CDB62D23F465F69CCDFC7E83D3E709FCBE12EDC4BD4AF68229C2D889216AA84EBD43A6B162" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Binder", + "version": "10.0.10", + "description": "Provides the functionality to bind an object to data in configuration providers for Microsoft.Extensions.Configuration. This package enables you to represent the configuration data as strongly-typed classes defined in the application code. To bind a configuration, use the Microsoft.Extensions.Configuration.ConfigurationBinder.Get extension method on the IConfiguration object. To use this package, you also need to install a package for the configuration provider, for example, Microsoft.Extensions.Configuration.Json for the JSON provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "23414BBDE074A3E494848748823D8CA24B242A3915BAA77D96C8F8251B73CE73C32981326E66738291EF303C0C2B5F4B2933C13741BF5CE5AE106EEBACAF06C0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.CommandLine", + "version": "10.0.10", + "description": "Command line configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from the command line arguments of your application. You can use CommandLineConfigurationExtensions.AddCommandLine extension method on IConfigurationBuilder to add the command line configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "4F3012F2AAE997570A379C5C352BD1548B24F61901CBF9FF5C05444E6FC8ECA998B8F6C58DC1251EBC0DA7F282D26BA9BD82167D5628C1E4DAE0FC3DB335036D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.EnvironmentVariables", + "version": "10.0.10", + "description": "Environment variables configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from environment variables. You can use EnvironmentVariablesExtensions.AddEnvironmentVariables extension method on IConfigurationBuilder to add the environment variables configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "A5A066D0AFEE703C7E69742C494AD82E75BF0B7A4B0BCCA9B07B8EA9D208BA7B6B1FE8A9937E58A729711FAF871AA12405CB04B7C940D0BFE26E40880EF73AC1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.FileExtensions", + "version": "10.0.10", + "description": "Provides a base class for file-based configuration providers used with Microsoft.Extensions.Configuration and extension methods for configuring them.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0EA7FB571C819E1CD371FD21F05323330C8350050A78B3905034FD7C53504EE8C437D02E109B64490E58CA406727A5DA8749898E969460755558CC0A4E04F3F4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Json", + "version": "10.0.10", + "description": "JSON configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read your application\u0027s settings from a JSON file. You can use JsonConfigurationExtensions.AddJsonFile extension method on IConfigurationBuilder to add the JSON configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1522329F5E7ACE8270D3B69D1973C5D9A32FDFEDE6F8050B304E349A16DFD8F0B08DFC1E6143139FC59A3CE4E0B72B2F454CC3D61C02C93E53B4012C9DA67879" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.UserSecrets", + "version": "10.0.10", + "description": "User secrets configuration provider implementation for Microsoft.Extensions.Configuration. User secrets mechanism enables you to override application configuration settings with values stored in the local secrets file. You can use UserSecretsConfigurationExtensions.AddUserSecrets extension method on IConfigurationBuilder to add user secrets provider to the configuration builder.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "044707479CFBA9BADC7958E44B5A3C139E11CCEA75FAE8D2A14BD59296B415C35A1F6FBDF372FF2D1A641A0E1FE99E815C4193103826DFA2167A947B0AC09BC7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection", + "version": "10.0.10", + "description": "Default implementation of dependency injection for Microsoft.Extensions.DependencyInjection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "8628EEC1C26F27A7956EECF3D0468FDD865039826770F267F9A4EEBE8D7949E37D1C298B85B8A73A873D9A04FDF5E50E5930E0289F3C4824137B0543FE0E7B0D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection.Abstractions", + "version": "10.0.10", + "description": "Abstractions for dependency injection.\n\nCommonly Used Types:\nMicrosoft.Extensions.DependencyInjection.IServiceCollection", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C40AF270352D0049FBDDB6403EB0B5206F0B6318760146E8093A9972B2AB965D7A5213A28E473742712E54F7ABB288EAB7A46659B41C7426D454ECEE4A931EAC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyModel", + "version": "10.0.10", + "description": "Provides abstractions for reading \u0060.deps\u0060 files. When a .NET application is compiled, the SDK generates a JSON manifest file (\u0060\u003CApplicationName\u003E.deps.json\u0060) that contains information about application dependencies. You can use \u0060Microsoft.Extensions.DependencyModel\u0060 to read information from this manifest at run time. This is useful when you want to dynamically compile code (for example, using Roslyn Emit API) referencing the same dependencies as your main application.\n\nBy default, the dependency manifest contains information about the application\u0027s target framework and runtime dependencies. Set the PreserveCompilationContext project property to \u0060true\u0060 to additionally include information about reference assemblies used during compilation.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "3887E253D85866E50B994DED19AF4988FC51E7551E86463CB96CC8B43E477D9CCCE9CD2AF9F5584B6905E21F247F32679A83FFFBFDC325D0DF40CEBD557D4EBB" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics", + "version": "10.0.10", + "description": "This package includes the default implementation of IMeterFactory and additional extension methods to easily register it with the Dependency Injection framework.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "EFA65F0DFC19BA6608050F87D9C9CC33A06B5C105B207D7C4259D280F3A36253F7A380FEFC6C9641AD9929FDCBFF5E00B4886F12399698CC716D65CE8131BE62" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics.Abstractions", + "version": "10.0.10", + "description": "Diagnostic abstractions for Microsoft.Extensions.Diagnostics.\n\nCommonly Used Types:\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsBuilder\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsListener\nMicrosoft.Extensions.Diagnostics.Metrics.InstrumentRule\nMicrosoft.Extensions.Diagnostics.Metrics.MeterScope\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsBuilderExtensions\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsOptions", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "B163E11DDD5E10CEB4D4091CFBE35A24A61CA70A29D48D988E9CA48F5E9A799B40E1C7752701F7F78D3A586B1787507581357E4A2813A8F561BE9CB80A3BB4AF" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Abstractions", + "version": "10.0.10", + "description": "Abstractions of files and directories.\n\nCommonly Used Types:\nMicrosoft.Extensions.FileProviders.IDirectoryContents\nMicrosoft.Extensions.FileProviders.IFileInfo\nMicrosoft.Extensions.FileProviders.IFileProvider", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "6F38363D1EEEC3034C1BCFF9058B295F19C4F26E9CEDAAEC671AF3FA22D212E671DB8CAB0688DDB01609C850A06D0C2C5B103176F862F7F7DCABA16481D51C51" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Physical", + "version": "10.0.10", + "description": "File provider for physical files for Microsoft.Extensions.FileProviders.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "F62D2D671CA52BEE6BF8E252853D84A9D575FB87D8A04E9DD98EA5BB25E86BA1C6F912D1042CA7A044AB64B879705D458A62F176DB1CA4224FAC06CD52102ABD" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileSystemGlobbing", + "version": "10.0.10", + "description": "File system globbing to find files matching a specified pattern.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1949E7C288D884B5FF6D2B4A54D468FFA42F0285FAB0786A5D58FA47A7F0F5DAAA3A491AAD092F31D07D190CA27CC25F632DBA0C8D25D2D44BDF32058EDD04D5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting", + "version": "10.0.10", + "description": "Hosting and startup infrastructures for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DEF44959988A0DFBC945DC865F25BB0AD3B3872A3E48AC96A71D642EB04A9F3C6CA8B3FD9B2129E2063FE67F5C98AA7FC3D2D049AFE1076F546E82578DF8A822" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting.Abstractions", + "version": "10.0.10", + "description": "Hosting and startup abstractions for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "029B3B822BE940A6994B3A7333046E64C75E471C7F3225C690C0CB3CEC6C19D20594AADAB5EFC28602C2FA37EE3BCD745ED26632B7F7A4580CD0294D3B966DC9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging", + "version": "10.0.10", + "description": "Logging infrastructure default implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "5261C9AAFF6B83BB3A806EFD91CFB37BED7FE8FB5FD990FE41F0BB6B772BF29AC8320C68371B50FB8AE7D8EC3394428EAB4722DC1EC6D72015BA166351956710" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Abstractions", + "version": "10.0.10", + "description": "Logging abstractions for Microsoft.Extensions.Logging.\n\nCommonly Used Types:\nMicrosoft.Extensions.Logging.ILogger\nMicrosoft.Extensions.Logging.ILoggerFactory\nMicrosoft.Extensions.Logging.ILogger\u003CTCategoryName\u003E\nMicrosoft.Extensions.Logging.LogLevel\nMicrosoft.Extensions.Logging.Logger\u003CT\u003E\nMicrosoft.Extensions.Logging.LoggerMessage\nMicrosoft.Extensions.Logging.Abstractions.NullLogger", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FCC5A6CD33BCCA73B47C0771BD1AD9CC044EAC53D3AF43C017CC684932F1F107981C7A0312922C14E6E2AA9B8DF1D3A70655DD0ACDCF9B97D3CE975FC21D588" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Configuration", + "version": "10.0.10", + "description": "Configuration support for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2F34EA98C7F9E1D4B61F3690F5C05A2D88552D672DB4BCE1B8A9EC50DB766530D61CA15FBD9D90B24C46E63B386F771DF8361ACBECF4ABFC7C0C942309AB2B3E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Console", + "version": "10.0.10", + "description": "Console logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6E3AFE1DB83957364483B116F176B0048D0AA0B277B7134F4F0FEAEB159DBBA7175A79916A46183D376346BA13D91F5D22D97E6CC6AAC65946FA562F821E974E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Debug", + "version": "10.0.10", + "description": "Debug output logger provider implementation for Microsoft.Extensions.Logging. This logger logs messages to a debugger monitor by writing messages with System.Diagnostics.Debug.WriteLine().", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB85BB3E6F032241404637C4642C14702C7337BB8AB3EB2BDE33AFF5000A055D60B6171AA86C7F6D42C55ECB8168D826C2A77A11423BEF2031781900E78E1925" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventLog", + "version": "10.0.10", + "description": "Windows Event Log logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "859BAF5F7B66880559D2B0F56881F61C4980C727BB927DE2BAF868829EC2779F809F7B5263E353E9F1868F676AD19816B824B42955E5792D3216B4E53DA05A4D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventSource", + "version": "10.0.10", + "description": "EventSource/EventListener logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "251D1821F49878B2F829F7A625A26B6F94CD9E2AD218B830859FB1137448EDFAE5CAEA267C459B02E23F09AD9E72A9A5EF491E5B25390FECFB958EB363534211" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options", + "version": "10.0.10", + "description": "Provides a strongly typed way of specifying and accessing settings using dependency injection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "538322A27FD9BB004C4C3FC21FC584EC08EDE88740B54DC95CBC241B553339633594D167A0EF0D02E42D6482CDA642B218414FF6DEC5BD06A48079CC0948D929" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options.ConfigurationExtensions", + "version": "10.0.10", + "description": "Provides additional configuration specific functionality related to Options.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "07F056E666E542729A25A06C672DF351373F9D5029BCA0D14AD3AD08DAE2CCA903E776B23E6DE3BBE5051DA68876CBC003F7AFD2EF4C08E7B32E60033465A45A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Primitives", + "version": "10.0.10", + "description": "Primitives shared by framework extensions. Commonly used types include:\n\nCommonly Used Types:\nMicrosoft.Extensions.Primitives.IChangeToken\nMicrosoft.Extensions.Primitives.StringValues\nMicrosoft.Extensions.Primitives.StringSegment", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "B3F778D24AFDF4711BEBA10DE673F9EB3ABAEC108B86862FDF1DE64F554B543A503FB3BBB0ABC38E0AF8B800EF39D3660FC660943235C734786FAEB11D4FAD64" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.ILLink.Tasks", + "version": "10.0.10", + "description": "MSBuild tasks for running the IL Linker", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "804F0EEC3AD1008DD08ABDF24B3BDD465EC3CD57FC5EB15F234BDB5179761878A6DDD30F755A25F43C70361FD3CEAF729A8935294FB6C2EDAAAC5E6358DBF5A5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.Test.Sdk", + "version": "18.8.1", + "description": "The MSbuild targets and properties for building .NET test projects.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "ED924163245F79A57884396548B55BEDDB4B5D06F84A96C0872FACF5273E754576CF00D44D326D3CB6138DA9D2E64AAA9BEDBCDCD371218E36EF5B946343EF8F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.Telemetry", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides telemetry for the platform.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C5E54A968FD412E4CE2DCC98EBC3C9154FE2D49E2E5C539CE1460CF01A9D8FD4197D90EA5ACE8A9574368DB629FFBD224B273BE242083050087A2BD60FB7D917" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.TrxReport.Abstractions", + "version": "1.9.1", + "description": "Package Description", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "665DC7C980F6089E8AD472201353A0BAC308BC55976603332BF8E568247FBD3C1FC644C9A904AE9F800E50968D2EF02D735ADA4616E8FC9C75CB18290A7540EC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides the core platform and the .NET implementation of the protocol.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "10C89A7E4A01422839D3EE8DDE9FD6B1E8C8504A082573A1209398434AD1436FB2774BB96C969CC1E6079B123483303224DE3273F8346F00ED151F2F4F361A4B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform.MSBuild", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides MSBuild integration of the platform, its extensions and configuration files.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "568901EC1C20B98D48692E6F182260177105A4C0BE28903805AC3F052D340D6D4B6C6A11F5931B23D10078FF0A70BB654FF606E8BB8C743DEEC1C1CDB8F36A1D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.ObjectModel", + "version": "18.8.1", + "description": "The Microsoft Test Platform Object Model.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "FA783FB4A40D48E96B1901D473BD83DDC83AD873D58B05D7042D05A1E10EEA6D6EE07E130A3213272E989B56C2F05A258F43004F4637DB7EA132D63AEF31A985" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.TestHost", + "version": "18.8.1", + "description": "Testplatform host executes the test using specified adapter.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "46D7AB005785910C271F30A658151CB71107FD87A78F7F7DE78811E49EC8657424E68901BFA943DD73AFD2E18645ED361294638436B01DA1945C7A4504A7C8DE" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Win32.Registry", + "version": "5.0.0", + "description": "Provides support for accessing and modifying the Windows Registry.\n\nCommonly Used Types:\nMicrosoft.Win32.RegistryKey\nMicrosoft.Win32.Registry\nMicrosoft.Win32.RegistryValueKind\nMicrosoft.Win32.RegistryHive\nMicrosoft.Win32.RegistryView\n \nWhen using NuGet 3.x this package requires at least version 3.4.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "471E66567CE59CC86475AECE7815D05261264CE114E0C1688BA2551DD51494901FA72DD7A8F74F8E8F0F3DBA74AF8595F177552F3C06ABB4BFCE76692197076E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/dotnet/runtime", + "type": "website" + }, + { + "url": "git://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLite@3.53.4", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLite", + "version": "3.53.4", + "description": "This package contains builds of the native SQLite code for various platforms. \n These builds have \u0022e_sqlite3\u0022 as the base name. The first three numbers in the version number of this package indicate the version of SQLite that was used to build it. The fourth number, if there is one, is incremented as needed for packaging-specific changes.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "81D145648BACFF3B4C8CD1794DF9956C47B229264467AA7001EA9A306E429CEB2855EC9296509541C82FC3C9BCFF04617AB3E86169932700BDAD5B0C03C482EF" + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLite@3.53.4", + "externalReferences": [ + { + "url": "https://sqlite.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.bundle_e_sqlite3", + "version": "3.0.5", + "description": "This \u0027batteries-included\u0027 bundle brings in SQLitePCLRaw.core and the necessary stuff for certain common use cases. Call SQLitePCL.Batteries.Init().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "12F980014C25F0C3E20C7B331418933FC84C7635B65597CEAB09C20EA00C055043C866BEF8614EA6BC38D7A484D8FF339D4387BBE760BC892F4E2702CD23AB2F" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.config.e_sqlite3", + "version": "3.0.5", + "description": "This package sets the configuration for using e_sqlite3 but does not bring in that native library itself. It\u0027s like bundle_e_sqlite3, except it\u0027s hollow.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A25E95EE323DDFEB8FC920D26551B4AFED854A3D9DDA833C3507331AB2043E0C9F16D62C2100560373AFC20E54D3F69F42ABDD6DA6E75EF7DCC0EA861B5AF12" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.core", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. This package does not provide an API which is friendly to app developers. Rather, it provides an API which handles platform and configuration issues, upon which a friendlier API can be built. In order to use this package, you will need to also add one of the SQLitePCLRaw.provider.* packages and call raw.SetProvider().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "24209D65527E0F82BB4E151B610195D39CB4732891CE1F0E2BA0965371DA381F1E636CD9256AE7DC5B76C604E36D33B7CA63AFDE09E6A8A40A9B2FCB5F01AA03" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.provider.e_sqlite3", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. Packages named \u0027SQLitePCLRaw.provider.*\u0027 (like this one) are \u0027plugins\u0027 that allow SQLitePCLRaw.core to access the native SQLite library. This provider does DllImport of \u0027e_sqlite3\u0027, the SQLite builds provided with SQLitePCLRaw.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "716EE95A124695CE5B2E2C834509E66991585B5AD1843B4CC6D135FE078DFE2D2E867A2E83978DEF09B8691833370803251F792537E59203455054AC24F82CC9" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "System.Diagnostics.EventLog", + "version": "10.0.10", + "description": "Provides the System.Diagnostics.EventLog class, which allows the applications to use the Windows event log service.\n\nCommonly Used Types:\nSystem.Diagnostics.EventLog", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F98A922C208C90F09A247CF2C251048B3EBADD8633787F967E5701427765C77C298F40E54A8D2BF5EBFEF729EFD3E8CFC5C17EFDD5F2CD80184532C24B5A481A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.analyzers@1.27.0", + "authors": [ + { + "name": "jnewkirk,bradwilson,marcind" + } + ], + "name": "xunit.analyzers", + "version": "1.27.0", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features.\n\nInstalling this package provides code analyzers to help developers find and fix frequent issues when writing tests and xUnit.net extensibility code.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2B920EDBD64D376C9D7B3DA38654D1B11DB4CA5A7F79032B320A289DF229BFD73DB1604DE8C5D120F196C6FBA8B688EE493DC7814F5EFD7EE5E3F56238B3C1BF" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.analyzers@1.27.0", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit.analyzers", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.runner.visualstudio", + "version": "3.1.5", + "description": "Visual Studio 2022\u002B Test Explorer runner for the xUnit.net framework. Capable of running xUnit.net v1, v2, and v3 tests. Supports .NET 4.7.2 or later, and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FFB6F37D917B54777C124986C2F3421CEB2FDD62561B352BDAB588AFEF58A8CCF857A8CE0468EB87BA3908261F396FEC18E9D81FDB993D10D4B2F2337A9A5BD" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "externalReferences": [ + { + "url": "https://github.com/xunit/visualstudio.xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.mtp-v1.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "9612F4811FCE910665551AC371386B7460BC118A39D78892C357093F92AAA9EA1A5DC21E2F939AE3FF0D599C9C62749A2F95871226E60AFA2A9807EB26BBF7D6" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.assert", + "version": "3.2.2", + "description": "Includes the assertion library from xUnit.net (xunit.v3.assert.dll). Supports .NET Standard 2.0 and .NET 8.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A1ABD3FA034E80012F33D59E5172B1E8D8C35DF57F3DAEA5982B8F9DDAC12FFF61B4B2C7585820077B1895B6C020AA71E80591FB51ABE1D99C08275C3573E7A" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.assert@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.common", + "version": "3.2.2", + "description": "Includes common code shared between xunit.v3.core and xunit.v3.runner.common (xunit.v3.common.dll). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A0FD19A2858C335F0EB5B6A246CDF1FD9B567484A3E60EDC736ACFB7CAFA04B90E874B485A22C4BF2377469B1AFF7658596C35282859F1D20137B913996AB0FC" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.core.mtp-v1", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for writing tests; extensibility authors should include xunit.v3.extensibility.core instead. Includes support for Microsoft.Testing.Platform v1. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "457A8F4EF036556D0181BB56D54A45950EFC6BBCB69EDDBEC341F0972AC086418CE6BB48655435BFA987DDC0CD5B97D97E26B0D57A589455C4248C54404B164B" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.extensibility.core", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for extensibility; test authors should include xunit.v3.core instead. Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DBD2BF9A1557CEBA2EE86994EAFC086F895691C97C03A125176DD2DC1CB497E10383022FF014FA8A30171D7446C794795B97DEED16EA70562768151A0A4DC3A2" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.mtp-v1", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.core.mtp-v1, xunit.v3.assert, and xunit.analyzers.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A1AF2350710CB1571CF31AF92BDFD2A835ADD5E90BCC132ADBB1E11ECA87CC1A3F0382D2A4AC6E8FA82E0E51F4D77FFAD71802A9A6F25DE936BF2280750104ED" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.common", + "version": "3.2.2", + "description": "Includes common code shared between in-process runners (like xunit.v3.runner.inproc.console) and xunit.v3.runner.utility (used by 1st and 3rd party external runners). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "226D0BA70448F5345532D159340CA70E0D4B08B766FFC9C97AEE33F86C7715AAF3A916A610322DB805AFEBA56FC1323480ADF7F125B8A960C51FBA4F266AEFB0" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.inproc.console", + "version": "3.2.2", + "description": "In-process console runner for xUnit.net framework, providing the entrypoint for self-executing unit tests. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB9F10495A9497A07232E3739FCAFE3ADB923F097314F2EF6BC1DA0E85EBA69353F8618136E0274A45EF9992FE4B2232A82F626D5DF8CA0124039C6CAE66C2FE" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/System.Diagnostics.EventLog@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLite@3.53.4", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLite@3.53.4", + "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.analyzers@1.27.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.analyzers@1.27.0", + "pkg:nuget/xunit.v3.assert@3.2.2", + "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.mtp-v1@3.2.2" + ] + }, + { + "ref": "ServerMonitorManager@0.0.0", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "pkg:nuget/xunit.v3@3.2.2" + ] + } + ] +} \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-arm64.tar.gz.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-arm64.tar.gz.sha256 new file mode 100644 index 0000000..9d9f992 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-arm64.tar.gz.sha256 @@ -0,0 +1 @@ +b292eef9c23282796e5ab7240c33d7497e76aa7235580e5ed19091ca368dbae6 server-monitor-manager-linux-arm64.tar.gz diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-x64-sbom.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-x64-sbom.json new file mode 100644 index 0000000..2c31a30 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-x64-sbom.json @@ -0,0 +1,2815 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:24eb6290-edfc-4ca9-b0a5-17fb8e4509fa", + "version": 1, + "metadata": { + "timestamp": "2026-08-10T10:57:15Z", + "tools": { + "components": [ + { + "type": "application", + "authors": [ + { + "name": "CycloneDX" + } + ], + "name": "CycloneDX module for .NET", + "version": "6.2.0.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-dotnet", + "type": "website" + } + ] + } + ] + }, + "component": { + "type": "application", + "bom-ref": "ServerMonitorManager@0.0.0", + "name": "ServerMonitorManager", + "version": "0.0.0" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.ApplicationInsights", + "version": "2.23.0", + "description": "Application Insights Base API. This package provides core functionality for transmission of all Application Insights Telemetry Types and is a dependent package for all other Application Insights packages. Please install the platform specific package for the best experience. Privacy statement: https://go.microsoft.com/fwlink/?LinkId=512156", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DD497BFAD0C65E54A4F78D2A1644F3D0854D4CD01DD83BA506F8D5D53635E28152C7C13210DD5DD3985780AAB146A7620DE3EBAEAD8EF12C6F87088676C2157F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "externalReferences": [ + { + "url": "https://go.microsoft.com/fwlink/?LinkId=392727", + "type": "website" + }, + { + "url": "https://github.com/Microsoft/ApplicationInsights-dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Authentication.Certificate", + "version": "10.0.10", + "description": "ASP.NET Core middleware that enables an application to support certificate authentication.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "FD902F01F05EFDEF7EB362EF0187438EBA3512D40722A547BB3DE8B1A823DF68FB660DBD097764E848EAA5CDAFC20D1F121EF45667B06A4C0756ADE371B25455" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Mvc.Testing", + "version": "10.0.10", + "description": "Support for writing functional tests for MVC applications.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0604BE8DA0AEE0F088C0513EF58E1927C9097E376A7517887F85F4BD9C4469E4D0034C4B855D10DA30EE62966383578FDE509157CB5C56EAA892E2053C64DF74" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.TestHost", + "version": "10.0.10", + "description": "ASP.NET Core web server for writing and running tests.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "4D8702FC6CA49443CFAF7F565A1D6FFA2E6B8DC7A52BFBD505B65FA20ACDC8D5D69D760E7380C32C82B2C76062E83B817AA9DE3FE822E423F6D4D1628F9A3540" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Bcl.AsyncInterfaces", + "version": "6.0.0", + "description": "Provides the IAsyncEnumerable\u003CT\u003E and IAsyncDisposable interfaces and helper types for .NET Standard 2.0. This package is not required starting with .NET Standard 2.1 and .NET Core 3.0.\n\nCommonly Used Types:\nSystem.IAsyncDisposable\nSystem.Collections.Generic.IAsyncEnumerable\nSystem.Collections.Generic.IAsyncEnumerator", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "221A05A0C910F7A87B620D8F3831ED392B4EB95D112BEE274D35F27009AD2A26445DE9D7CD235FE6FB4A03F2550874BDA3BE3DDDD96EDAF9C0852A9C23D7B099" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.CodeCoverage", + "version": "18.8.1", + "description": "Microsoft.CodeCoverage package brings infra for collecting code coverage from vstest.console.exe and \u0022dotnet test\u0022.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F21F6B39BBBCE89302D28B8E77B99E3633E18EB4D840F132393E3686C841C5DC649EFA5F60B4734D8D7764185101FEEDA2197BC00A6AABF69A37A591C617708F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "9FD331CF8F4C4026F1B7B9C651FB33E80CE1D0E0D6F46DD00E41E71E598CFEFB8E318CCB8519064CA4FB9F82D4126D08F42041E5987E186676ADAA2595E229D4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite.Core", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite. This package does not include a copy of the native SQLite library.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "723A1B77BFE3966982CA0242256B2DC320ED878C4ED9480680D75D91B716AC27013FA5FE533800C50C7C6000E50046AC10AF5DBC48E3CA4EB885C6ED65BC2CB1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Abstractions", + "version": "10.0.10", + "description": "Caching abstractions for in-memory cache and distributed cache.\n\nCommonly Used Types:\nMicrosoft.Extensions.Caching.Distributed.IDistributedCache\nMicrosoft.Extensions.Caching.Memory.IMemoryCache", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "02858A6F1E814D2FCBA5506A1E5E1BC125186FE76E89235D073B0DCA84C62802E6680E6C13AD8AC07AC5B6358A0691CF473C80122C062A7AC8AE557D7A5A7A5B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Memory", + "version": "10.0.10", + "description": "In-memory cache implementation of Microsoft.Extensions.Caching.Memory.IMemoryCache.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DDBBEC0D9A6C493F5BEAE10A1446E24664A17F9A8E5B694C6CFD315EE8C3F19490AC51F5ABBB624BD51FD14CDA381D515BCFF7F1A4D3AAEF06F589EA8FA7EDF4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration", + "version": "10.0.10", + "description": "Implementation of key-value pair based configuration for Microsoft.Extensions.Configuration. Includes the memory configuration provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "943C09D6B759963DD401BD8F3C3D7F9744436AE1157EF93810A8CAC823E3ED096A51817327AFADDC5741E541912D493D053D566CD898E6F8628398C7264981B3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Abstractions", + "version": "10.0.10", + "description": "Provides abstractions of key-value pair based configuration. Interfaces defined in this package are implemented by classes in Microsoft.Extensions.Configuration and other configuration packages.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "7BF4CD6F25D7E030E366CC9CB593B79A890F347DF598062C0D2030CDB62D23F465F69CCDFC7E83D3E709FCBE12EDC4BD4AF68229C2D889216AA84EBD43A6B162" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Binder", + "version": "10.0.10", + "description": "Provides the functionality to bind an object to data in configuration providers for Microsoft.Extensions.Configuration. This package enables you to represent the configuration data as strongly-typed classes defined in the application code. To bind a configuration, use the Microsoft.Extensions.Configuration.ConfigurationBinder.Get extension method on the IConfiguration object. To use this package, you also need to install a package for the configuration provider, for example, Microsoft.Extensions.Configuration.Json for the JSON provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "23414BBDE074A3E494848748823D8CA24B242A3915BAA77D96C8F8251B73CE73C32981326E66738291EF303C0C2B5F4B2933C13741BF5CE5AE106EEBACAF06C0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.CommandLine", + "version": "10.0.10", + "description": "Command line configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from the command line arguments of your application. You can use CommandLineConfigurationExtensions.AddCommandLine extension method on IConfigurationBuilder to add the command line configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "4F3012F2AAE997570A379C5C352BD1548B24F61901CBF9FF5C05444E6FC8ECA998B8F6C58DC1251EBC0DA7F282D26BA9BD82167D5628C1E4DAE0FC3DB335036D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.EnvironmentVariables", + "version": "10.0.10", + "description": "Environment variables configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from environment variables. You can use EnvironmentVariablesExtensions.AddEnvironmentVariables extension method on IConfigurationBuilder to add the environment variables configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "A5A066D0AFEE703C7E69742C494AD82E75BF0B7A4B0BCCA9B07B8EA9D208BA7B6B1FE8A9937E58A729711FAF871AA12405CB04B7C940D0BFE26E40880EF73AC1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.FileExtensions", + "version": "10.0.10", + "description": "Provides a base class for file-based configuration providers used with Microsoft.Extensions.Configuration and extension methods for configuring them.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0EA7FB571C819E1CD371FD21F05323330C8350050A78B3905034FD7C53504EE8C437D02E109B64490E58CA406727A5DA8749898E969460755558CC0A4E04F3F4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Json", + "version": "10.0.10", + "description": "JSON configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read your application\u0027s settings from a JSON file. You can use JsonConfigurationExtensions.AddJsonFile extension method on IConfigurationBuilder to add the JSON configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1522329F5E7ACE8270D3B69D1973C5D9A32FDFEDE6F8050B304E349A16DFD8F0B08DFC1E6143139FC59A3CE4E0B72B2F454CC3D61C02C93E53B4012C9DA67879" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.UserSecrets", + "version": "10.0.10", + "description": "User secrets configuration provider implementation for Microsoft.Extensions.Configuration. User secrets mechanism enables you to override application configuration settings with values stored in the local secrets file. You can use UserSecretsConfigurationExtensions.AddUserSecrets extension method on IConfigurationBuilder to add user secrets provider to the configuration builder.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "044707479CFBA9BADC7958E44B5A3C139E11CCEA75FAE8D2A14BD59296B415C35A1F6FBDF372FF2D1A641A0E1FE99E815C4193103826DFA2167A947B0AC09BC7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection", + "version": "10.0.10", + "description": "Default implementation of dependency injection for Microsoft.Extensions.DependencyInjection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "8628EEC1C26F27A7956EECF3D0468FDD865039826770F267F9A4EEBE8D7949E37D1C298B85B8A73A873D9A04FDF5E50E5930E0289F3C4824137B0543FE0E7B0D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection.Abstractions", + "version": "10.0.10", + "description": "Abstractions for dependency injection.\n\nCommonly Used Types:\nMicrosoft.Extensions.DependencyInjection.IServiceCollection", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C40AF270352D0049FBDDB6403EB0B5206F0B6318760146E8093A9972B2AB965D7A5213A28E473742712E54F7ABB288EAB7A46659B41C7426D454ECEE4A931EAC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyModel", + "version": "10.0.10", + "description": "Provides abstractions for reading \u0060.deps\u0060 files. When a .NET application is compiled, the SDK generates a JSON manifest file (\u0060\u003CApplicationName\u003E.deps.json\u0060) that contains information about application dependencies. You can use \u0060Microsoft.Extensions.DependencyModel\u0060 to read information from this manifest at run time. This is useful when you want to dynamically compile code (for example, using Roslyn Emit API) referencing the same dependencies as your main application.\n\nBy default, the dependency manifest contains information about the application\u0027s target framework and runtime dependencies. Set the PreserveCompilationContext project property to \u0060true\u0060 to additionally include information about reference assemblies used during compilation.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "3887E253D85866E50B994DED19AF4988FC51E7551E86463CB96CC8B43E477D9CCCE9CD2AF9F5584B6905E21F247F32679A83FFFBFDC325D0DF40CEBD557D4EBB" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics", + "version": "10.0.10", + "description": "This package includes the default implementation of IMeterFactory and additional extension methods to easily register it with the Dependency Injection framework.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "EFA65F0DFC19BA6608050F87D9C9CC33A06B5C105B207D7C4259D280F3A36253F7A380FEFC6C9641AD9929FDCBFF5E00B4886F12399698CC716D65CE8131BE62" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics.Abstractions", + "version": "10.0.10", + "description": "Diagnostic abstractions for Microsoft.Extensions.Diagnostics.\n\nCommonly Used Types:\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsBuilder\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsListener\nMicrosoft.Extensions.Diagnostics.Metrics.InstrumentRule\nMicrosoft.Extensions.Diagnostics.Metrics.MeterScope\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsBuilderExtensions\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsOptions", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "B163E11DDD5E10CEB4D4091CFBE35A24A61CA70A29D48D988E9CA48F5E9A799B40E1C7752701F7F78D3A586B1787507581357E4A2813A8F561BE9CB80A3BB4AF" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Abstractions", + "version": "10.0.10", + "description": "Abstractions of files and directories.\n\nCommonly Used Types:\nMicrosoft.Extensions.FileProviders.IDirectoryContents\nMicrosoft.Extensions.FileProviders.IFileInfo\nMicrosoft.Extensions.FileProviders.IFileProvider", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "6F38363D1EEEC3034C1BCFF9058B295F19C4F26E9CEDAAEC671AF3FA22D212E671DB8CAB0688DDB01609C850A06D0C2C5B103176F862F7F7DCABA16481D51C51" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Physical", + "version": "10.0.10", + "description": "File provider for physical files for Microsoft.Extensions.FileProviders.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "F62D2D671CA52BEE6BF8E252853D84A9D575FB87D8A04E9DD98EA5BB25E86BA1C6F912D1042CA7A044AB64B879705D458A62F176DB1CA4224FAC06CD52102ABD" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileSystemGlobbing", + "version": "10.0.10", + "description": "File system globbing to find files matching a specified pattern.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1949E7C288D884B5FF6D2B4A54D468FFA42F0285FAB0786A5D58FA47A7F0F5DAAA3A491AAD092F31D07D190CA27CC25F632DBA0C8D25D2D44BDF32058EDD04D5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting", + "version": "10.0.10", + "description": "Hosting and startup infrastructures for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DEF44959988A0DFBC945DC865F25BB0AD3B3872A3E48AC96A71D642EB04A9F3C6CA8B3FD9B2129E2063FE67F5C98AA7FC3D2D049AFE1076F546E82578DF8A822" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting.Abstractions", + "version": "10.0.10", + "description": "Hosting and startup abstractions for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "029B3B822BE940A6994B3A7333046E64C75E471C7F3225C690C0CB3CEC6C19D20594AADAB5EFC28602C2FA37EE3BCD745ED26632B7F7A4580CD0294D3B966DC9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging", + "version": "10.0.10", + "description": "Logging infrastructure default implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "5261C9AAFF6B83BB3A806EFD91CFB37BED7FE8FB5FD990FE41F0BB6B772BF29AC8320C68371B50FB8AE7D8EC3394428EAB4722DC1EC6D72015BA166351956710" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Abstractions", + "version": "10.0.10", + "description": "Logging abstractions for Microsoft.Extensions.Logging.\n\nCommonly Used Types:\nMicrosoft.Extensions.Logging.ILogger\nMicrosoft.Extensions.Logging.ILoggerFactory\nMicrosoft.Extensions.Logging.ILogger\u003CTCategoryName\u003E\nMicrosoft.Extensions.Logging.LogLevel\nMicrosoft.Extensions.Logging.Logger\u003CT\u003E\nMicrosoft.Extensions.Logging.LoggerMessage\nMicrosoft.Extensions.Logging.Abstractions.NullLogger", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FCC5A6CD33BCCA73B47C0771BD1AD9CC044EAC53D3AF43C017CC684932F1F107981C7A0312922C14E6E2AA9B8DF1D3A70655DD0ACDCF9B97D3CE975FC21D588" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Configuration", + "version": "10.0.10", + "description": "Configuration support for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2F34EA98C7F9E1D4B61F3690F5C05A2D88552D672DB4BCE1B8A9EC50DB766530D61CA15FBD9D90B24C46E63B386F771DF8361ACBECF4ABFC7C0C942309AB2B3E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Console", + "version": "10.0.10", + "description": "Console logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6E3AFE1DB83957364483B116F176B0048D0AA0B277B7134F4F0FEAEB159DBBA7175A79916A46183D376346BA13D91F5D22D97E6CC6AAC65946FA562F821E974E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Debug", + "version": "10.0.10", + "description": "Debug output logger provider implementation for Microsoft.Extensions.Logging. This logger logs messages to a debugger monitor by writing messages with System.Diagnostics.Debug.WriteLine().", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB85BB3E6F032241404637C4642C14702C7337BB8AB3EB2BDE33AFF5000A055D60B6171AA86C7F6D42C55ECB8168D826C2A77A11423BEF2031781900E78E1925" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventLog", + "version": "10.0.10", + "description": "Windows Event Log logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "859BAF5F7B66880559D2B0F56881F61C4980C727BB927DE2BAF868829EC2779F809F7B5263E353E9F1868F676AD19816B824B42955E5792D3216B4E53DA05A4D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventSource", + "version": "10.0.10", + "description": "EventSource/EventListener logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "251D1821F49878B2F829F7A625A26B6F94CD9E2AD218B830859FB1137448EDFAE5CAEA267C459B02E23F09AD9E72A9A5EF491E5B25390FECFB958EB363534211" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options", + "version": "10.0.10", + "description": "Provides a strongly typed way of specifying and accessing settings using dependency injection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "538322A27FD9BB004C4C3FC21FC584EC08EDE88740B54DC95CBC241B553339633594D167A0EF0D02E42D6482CDA642B218414FF6DEC5BD06A48079CC0948D929" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options.ConfigurationExtensions", + "version": "10.0.10", + "description": "Provides additional configuration specific functionality related to Options.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "07F056E666E542729A25A06C672DF351373F9D5029BCA0D14AD3AD08DAE2CCA903E776B23E6DE3BBE5051DA68876CBC003F7AFD2EF4C08E7B32E60033465A45A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Primitives", + "version": "10.0.10", + "description": "Primitives shared by framework extensions. Commonly used types include:\n\nCommonly Used Types:\nMicrosoft.Extensions.Primitives.IChangeToken\nMicrosoft.Extensions.Primitives.StringValues\nMicrosoft.Extensions.Primitives.StringSegment", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "B3F778D24AFDF4711BEBA10DE673F9EB3ABAEC108B86862FDF1DE64F554B543A503FB3BBB0ABC38E0AF8B800EF39D3660FC660943235C734786FAEB11D4FAD64" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.ILLink.Tasks", + "version": "10.0.10", + "description": "MSBuild tasks for running the IL Linker", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "804F0EEC3AD1008DD08ABDF24B3BDD465EC3CD57FC5EB15F234BDB5179761878A6DDD30F755A25F43C70361FD3CEAF729A8935294FB6C2EDAAAC5E6358DBF5A5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.Test.Sdk", + "version": "18.8.1", + "description": "The MSbuild targets and properties for building .NET test projects.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "ED924163245F79A57884396548B55BEDDB4B5D06F84A96C0872FACF5273E754576CF00D44D326D3CB6138DA9D2E64AAA9BEDBCDCD371218E36EF5B946343EF8F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.Telemetry", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides telemetry for the platform.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C5E54A968FD412E4CE2DCC98EBC3C9154FE2D49E2E5C539CE1460CF01A9D8FD4197D90EA5ACE8A9574368DB629FFBD224B273BE242083050087A2BD60FB7D917" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.TrxReport.Abstractions", + "version": "1.9.1", + "description": "Package Description", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "665DC7C980F6089E8AD472201353A0BAC308BC55976603332BF8E568247FBD3C1FC644C9A904AE9F800E50968D2EF02D735ADA4616E8FC9C75CB18290A7540EC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides the core platform and the .NET implementation of the protocol.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "10C89A7E4A01422839D3EE8DDE9FD6B1E8C8504A082573A1209398434AD1436FB2774BB96C969CC1E6079B123483303224DE3273F8346F00ED151F2F4F361A4B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform.MSBuild", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides MSBuild integration of the platform, its extensions and configuration files.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "568901EC1C20B98D48692E6F182260177105A4C0BE28903805AC3F052D340D6D4B6C6A11F5931B23D10078FF0A70BB654FF606E8BB8C743DEEC1C1CDB8F36A1D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.ObjectModel", + "version": "18.8.1", + "description": "The Microsoft Test Platform Object Model.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "FA783FB4A40D48E96B1901D473BD83DDC83AD873D58B05D7042D05A1E10EEA6D6EE07E130A3213272E989B56C2F05A258F43004F4637DB7EA132D63AEF31A985" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.TestHost", + "version": "18.8.1", + "description": "Testplatform host executes the test using specified adapter.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "46D7AB005785910C271F30A658151CB71107FD87A78F7F7DE78811E49EC8657424E68901BFA943DD73AFD2E18645ED361294638436B01DA1945C7A4504A7C8DE" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Win32.Registry", + "version": "5.0.0", + "description": "Provides support for accessing and modifying the Windows Registry.\n\nCommonly Used Types:\nMicrosoft.Win32.RegistryKey\nMicrosoft.Win32.Registry\nMicrosoft.Win32.RegistryValueKind\nMicrosoft.Win32.RegistryHive\nMicrosoft.Win32.RegistryView\n \nWhen using NuGet 3.x this package requires at least version 3.4.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "471E66567CE59CC86475AECE7815D05261264CE114E0C1688BA2551DD51494901FA72DD7A8F74F8E8F0F3DBA74AF8595F177552F3C06ABB4BFCE76692197076E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/dotnet/runtime", + "type": "website" + }, + { + "url": "git://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLite@3.53.4", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLite", + "version": "3.53.4", + "description": "This package contains builds of the native SQLite code for various platforms. \n These builds have \u0022e_sqlite3\u0022 as the base name. The first three numbers in the version number of this package indicate the version of SQLite that was used to build it. The fourth number, if there is one, is incremented as needed for packaging-specific changes.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "81D145648BACFF3B4C8CD1794DF9956C47B229264467AA7001EA9A306E429CEB2855EC9296509541C82FC3C9BCFF04617AB3E86169932700BDAD5B0C03C482EF" + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLite@3.53.4", + "externalReferences": [ + { + "url": "https://sqlite.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.bundle_e_sqlite3", + "version": "3.0.5", + "description": "This \u0027batteries-included\u0027 bundle brings in SQLitePCLRaw.core and the necessary stuff for certain common use cases. Call SQLitePCL.Batteries.Init().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "12F980014C25F0C3E20C7B331418933FC84C7635B65597CEAB09C20EA00C055043C866BEF8614EA6BC38D7A484D8FF339D4387BBE760BC892F4E2702CD23AB2F" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.config.e_sqlite3", + "version": "3.0.5", + "description": "This package sets the configuration for using e_sqlite3 but does not bring in that native library itself. It\u0027s like bundle_e_sqlite3, except it\u0027s hollow.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A25E95EE323DDFEB8FC920D26551B4AFED854A3D9DDA833C3507331AB2043E0C9F16D62C2100560373AFC20E54D3F69F42ABDD6DA6E75EF7DCC0EA861B5AF12" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.core", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. This package does not provide an API which is friendly to app developers. Rather, it provides an API which handles platform and configuration issues, upon which a friendlier API can be built. In order to use this package, you will need to also add one of the SQLitePCLRaw.provider.* packages and call raw.SetProvider().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "24209D65527E0F82BB4E151B610195D39CB4732891CE1F0E2BA0965371DA381F1E636CD9256AE7DC5B76C604E36D33B7CA63AFDE09E6A8A40A9B2FCB5F01AA03" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.provider.e_sqlite3", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. Packages named \u0027SQLitePCLRaw.provider.*\u0027 (like this one) are \u0027plugins\u0027 that allow SQLitePCLRaw.core to access the native SQLite library. This provider does DllImport of \u0027e_sqlite3\u0027, the SQLite builds provided with SQLitePCLRaw.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "716EE95A124695CE5B2E2C834509E66991585B5AD1843B4CC6D135FE078DFE2D2E867A2E83978DEF09B8691833370803251F792537E59203455054AC24F82CC9" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "System.Diagnostics.EventLog", + "version": "10.0.10", + "description": "Provides the System.Diagnostics.EventLog class, which allows the applications to use the Windows event log service.\n\nCommonly Used Types:\nSystem.Diagnostics.EventLog", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F98A922C208C90F09A247CF2C251048B3EBADD8633787F967E5701427765C77C298F40E54A8D2BF5EBFEF729EFD3E8CFC5C17EFDD5F2CD80184532C24B5A481A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.analyzers@1.27.0", + "authors": [ + { + "name": "jnewkirk,bradwilson,marcind" + } + ], + "name": "xunit.analyzers", + "version": "1.27.0", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features.\n\nInstalling this package provides code analyzers to help developers find and fix frequent issues when writing tests and xUnit.net extensibility code.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2B920EDBD64D376C9D7B3DA38654D1B11DB4CA5A7F79032B320A289DF229BFD73DB1604DE8C5D120F196C6FBA8B688EE493DC7814F5EFD7EE5E3F56238B3C1BF" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.analyzers@1.27.0", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit.analyzers", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.runner.visualstudio", + "version": "3.1.5", + "description": "Visual Studio 2022\u002B Test Explorer runner for the xUnit.net framework. Capable of running xUnit.net v1, v2, and v3 tests. Supports .NET 4.7.2 or later, and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FFB6F37D917B54777C124986C2F3421CEB2FDD62561B352BDAB588AFEF58A8CCF857A8CE0468EB87BA3908261F396FEC18E9D81FDB993D10D4B2F2337A9A5BD" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "externalReferences": [ + { + "url": "https://github.com/xunit/visualstudio.xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.mtp-v1.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "9612F4811FCE910665551AC371386B7460BC118A39D78892C357093F92AAA9EA1A5DC21E2F939AE3FF0D599C9C62749A2F95871226E60AFA2A9807EB26BBF7D6" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.assert", + "version": "3.2.2", + "description": "Includes the assertion library from xUnit.net (xunit.v3.assert.dll). Supports .NET Standard 2.0 and .NET 8.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A1ABD3FA034E80012F33D59E5172B1E8D8C35DF57F3DAEA5982B8F9DDAC12FFF61B4B2C7585820077B1895B6C020AA71E80591FB51ABE1D99C08275C3573E7A" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.assert@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.common", + "version": "3.2.2", + "description": "Includes common code shared between xunit.v3.core and xunit.v3.runner.common (xunit.v3.common.dll). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A0FD19A2858C335F0EB5B6A246CDF1FD9B567484A3E60EDC736ACFB7CAFA04B90E874B485A22C4BF2377469B1AFF7658596C35282859F1D20137B913996AB0FC" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.core.mtp-v1", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for writing tests; extensibility authors should include xunit.v3.extensibility.core instead. Includes support for Microsoft.Testing.Platform v1. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "457A8F4EF036556D0181BB56D54A45950EFC6BBCB69EDDBEC341F0972AC086418CE6BB48655435BFA987DDC0CD5B97D97E26B0D57A589455C4248C54404B164B" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.extensibility.core", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for extensibility; test authors should include xunit.v3.core instead. Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DBD2BF9A1557CEBA2EE86994EAFC086F895691C97C03A125176DD2DC1CB497E10383022FF014FA8A30171D7446C794795B97DEED16EA70562768151A0A4DC3A2" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.mtp-v1", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.core.mtp-v1, xunit.v3.assert, and xunit.analyzers.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A1AF2350710CB1571CF31AF92BDFD2A835ADD5E90BCC132ADBB1E11ECA87CC1A3F0382D2A4AC6E8FA82E0E51F4D77FFAD71802A9A6F25DE936BF2280750104ED" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.common", + "version": "3.2.2", + "description": "Includes common code shared between in-process runners (like xunit.v3.runner.inproc.console) and xunit.v3.runner.utility (used by 1st and 3rd party external runners). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "226D0BA70448F5345532D159340CA70E0D4B08B766FFC9C97AEE33F86C7715AAF3A916A610322DB805AFEBA56FC1323480ADF7F125B8A960C51FBA4F266AEFB0" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.inproc.console", + "version": "3.2.2", + "description": "In-process console runner for xUnit.net framework, providing the entrypoint for self-executing unit tests. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB9F10495A9497A07232E3739FCAFE3ADB923F097314F2EF6BC1DA0E85EBA69353F8618136E0274A45EF9992FE4B2232A82F626D5DF8CA0124039C6CAE66C2FE" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/System.Diagnostics.EventLog@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLite@3.53.4", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLite@3.53.4", + "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.analyzers@1.27.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.analyzers@1.27.0", + "pkg:nuget/xunit.v3.assert@3.2.2", + "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.mtp-v1@3.2.2" + ] + }, + { + "ref": "ServerMonitorManager@0.0.0", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "pkg:nuget/xunit.v3@3.2.2" + ] + } + ] +} \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-x64.tar.gz.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-x64.tar.gz.sha256 new file mode 100644 index 0000000..454f3ea --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-linux-x64.tar.gz.sha256 @@ -0,0 +1 @@ +2a49214cce9ae81dd93b0e2a34cc7440326fa700a63e641c054adf8e3c93686d server-monitor-manager-linux-x64.tar.gz diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-manifest.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-manifest.json new file mode 100644 index 0000000..eb725eb --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-manifest.json @@ -0,0 +1,23 @@ +{ + "schema": "smm-manifest/v2", + "version": "v0.1.0-alpha.9", + "components": { + "control": "v0.1.0-alpha.9", + "agent": "v0.1.0-alpha.9", + "helper": "v0.1.0-alpha.9", + "desktop": "v0.1.0-alpha.9" + }, + "protocols": { + "helper_protocol": "v1" + }, + "hashes": { + "ochenstarik-server-monitor-manager.sh": "f1720e00f4b0e116a6e3462b238078343b613dd4ff03536925b1df84c7581d79", + "smm-setup.sh": "00417243c63b91d895fb4b80c4a72ddd4a0012ae59057b38eee07042f901e1f6", + "server-monitor-manager-linux-x64.tar.gz": "2a49214cce9ae81dd93b0e2a34cc7440326fa700a63e641c054adf8e3c93686d", + "server-monitor-manager-linux-arm64.tar.gz": "b292eef9c23282796e5ab7240c33d7497e76aa7235580e5ed19091ca368dbae6", + "ServerMonitorManager-win-x64.msix": "8a089c75af0f1bd514460f60330035e01aa71b5c8c0bd38d97b302309a901ba8", + "server-monitor-manager-linux-x64-sbom.json": "b4d6e5442fa972f658dda895a6b4c5d6e7d0093c2a4c04c483747c722d465223", + "server-monitor-manager-linux-arm64-sbom.json": "9412296ddf45827d71fda1872429bdec26a426e9d373d4f748a155d14c1e032c", + "server-monitor-manager-win-x64-sbom.json": "f97f15ec9f454d7ce23f99edd39012a35a469bb5d150ace3359858bc15e0c973" + } +} diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-manifest.sig b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-manifest.sig new file mode 100644 index 0000000..4037379 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-manifest.sig @@ -0,0 +1 @@ +MEYCIQCoEuFLhhaXg5xkke7nNVSnD9MMeZLvGUhFotymSUm22AIhAJ+XAH+wf7lEiDaufyEWE5KuP3wx19hSN0VjJnhr0Pl6 \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-win-x64-sbom.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-win-x64-sbom.json new file mode 100644 index 0000000..1dd89bf --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/server-monitor-manager-win-x64-sbom.json @@ -0,0 +1,2815 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:ff9fbc55-f03e-4f90-b547-89fb3fb4b5df", + "version": 1, + "metadata": { + "timestamp": "2026-08-10T10:58:00Z", + "tools": { + "components": [ + { + "type": "application", + "authors": [ + { + "name": "CycloneDX" + } + ], + "name": "CycloneDX module for .NET", + "version": "6.2.0.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-dotnet", + "type": "website" + } + ] + } + ] + }, + "component": { + "type": "application", + "bom-ref": "ServerMonitorManager@0.0.0", + "name": "ServerMonitorManager", + "version": "0.0.0" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.ApplicationInsights", + "version": "2.23.0", + "description": "Application Insights Base API. This package provides core functionality for transmission of all Application Insights Telemetry Types and is a dependent package for all other Application Insights packages. Please install the platform specific package for the best experience. Privacy statement: https://go.microsoft.com/fwlink/?LinkId=512156", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DD497BFAD0C65E54A4F78D2A1644F3D0854D4CD01DD83BA506F8D5D53635E28152C7C13210DD5DD3985780AAB146A7620DE3EBAEAD8EF12C6F87088676C2157F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "externalReferences": [ + { + "url": "https://go.microsoft.com/fwlink/?LinkId=392727", + "type": "website" + }, + { + "url": "https://github.com/Microsoft/ApplicationInsights-dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Authentication.Certificate", + "version": "10.0.10", + "description": "ASP.NET Core middleware that enables an application to support certificate authentication.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "FD902F01F05EFDEF7EB362EF0187438EBA3512D40722A547BB3DE8B1A823DF68FB660DBD097764E848EAA5CDAFC20D1F121EF45667B06A4C0756ADE371B25455" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.Mvc.Testing", + "version": "10.0.10", + "description": "Support for writing functional tests for MVC applications.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0604BE8DA0AEE0F088C0513EF58E1927C9097E376A7517887F85F4BD9C4469E4D0034C4B855D10DA30EE62966383578FDE509157CB5C56EAA892E2053C64DF74" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.AspNetCore.TestHost", + "version": "10.0.10", + "description": "ASP.NET Core web server for writing and running tests.\n\nThis package was built from the source code at https://github.com/dotnet/dotnet/tree/f7d90799ce4ef09a0bb257852a57248d2a8fb8dd", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "4D8702FC6CA49443CFAF7F565A1D6FFA2E6B8DC7A52BFBD505B65FA20ACDC8D5D69D760E7380C32C82B2C76062E83B817AA9DE3FE822E423F6D4D1628F9A3540" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "externalReferences": [ + { + "url": "https://asp.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Bcl.AsyncInterfaces", + "version": "6.0.0", + "description": "Provides the IAsyncEnumerable\u003CT\u003E and IAsyncDisposable interfaces and helper types for .NET Standard 2.0. This package is not required starting with .NET Standard 2.1 and .NET Core 3.0.\n\nCommonly Used Types:\nSystem.IAsyncDisposable\nSystem.Collections.Generic.IAsyncEnumerable\nSystem.Collections.Generic.IAsyncEnumerator", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "221A05A0C910F7A87B620D8F3831ED392B4EB95D112BEE274D35F27009AD2A26445DE9D7CD235FE6FB4A03F2550874BDA3BE3DDDD96EDAF9C0852A9C23D7B099" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.CodeCoverage", + "version": "18.8.1", + "description": "Microsoft.CodeCoverage package brings infra for collecting code coverage from vstest.console.exe and \u0022dotnet test\u0022.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F21F6B39BBBCE89302D28B8E77B99E3633E18EB4D840F132393E3686C841C5DC649EFA5F60B4734D8D7764185101FEEDA2197BC00A6AABF69A37A591C617708F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "9FD331CF8F4C4026F1B7B9C651FB33E80CE1D0E0D6F46DD00E41E71E598CFEFB8E318CCB8519064CA4FB9F82D4126D08F42041E5987E186676ADAA2595E229D4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Data.Sqlite.Core", + "version": "10.0.10", + "description": "Microsoft.Data.Sqlite is a lightweight ADO.NET provider for SQLite. This package does not include a copy of the native SQLite library.\n\nCommonly Used Types:\nMicrosoft.Data.Sqlite.SqliteCommand\nMicrosoft.Data.Sqlite.SqliteConnection\nMicrosoft.Data.Sqlite.SqliteConnectionStringBuilder\nMicrosoft.Data.Sqlite.SqliteDataReader\nMicrosoft.Data.Sqlite.SqliteException\nMicrosoft.Data.Sqlite.SqliteFactory\nMicrosoft.Data.Sqlite.SqliteParameter\nMicrosoft.Data.Sqlite.SqliteTransaction", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "723A1B77BFE3966982CA0242256B2DC320ED878C4ED9480680D75D91B716AC27013FA5FE533800C50C7C6000E50046AC10AF5DBC48E3CA4EB885C6ED65BC2CB1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "externalReferences": [ + { + "url": "https://docs.microsoft.com/dotnet/standard/data/sqlite/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Abstractions", + "version": "10.0.10", + "description": "Caching abstractions for in-memory cache and distributed cache.\n\nCommonly Used Types:\nMicrosoft.Extensions.Caching.Distributed.IDistributedCache\nMicrosoft.Extensions.Caching.Memory.IMemoryCache", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "02858A6F1E814D2FCBA5506A1E5E1BC125186FE76E89235D073B0DCA84C62802E6680E6C13AD8AC07AC5B6358A0691CF473C80122C062A7AC8AE557D7A5A7A5B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Caching.Memory", + "version": "10.0.10", + "description": "In-memory cache implementation of Microsoft.Extensions.Caching.Memory.IMemoryCache.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DDBBEC0D9A6C493F5BEAE10A1446E24664A17F9A8E5B694C6CFD315EE8C3F19490AC51F5ABBB624BD51FD14CDA381D515BCFF7F1A4D3AAEF06F589EA8FA7EDF4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration", + "version": "10.0.10", + "description": "Implementation of key-value pair based configuration for Microsoft.Extensions.Configuration. Includes the memory configuration provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "943C09D6B759963DD401BD8F3C3D7F9744436AE1157EF93810A8CAC823E3ED096A51817327AFADDC5741E541912D493D053D566CD898E6F8628398C7264981B3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Abstractions", + "version": "10.0.10", + "description": "Provides abstractions of key-value pair based configuration. Interfaces defined in this package are implemented by classes in Microsoft.Extensions.Configuration and other configuration packages.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "7BF4CD6F25D7E030E366CC9CB593B79A890F347DF598062C0D2030CDB62D23F465F69CCDFC7E83D3E709FCBE12EDC4BD4AF68229C2D889216AA84EBD43A6B162" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Binder", + "version": "10.0.10", + "description": "Provides the functionality to bind an object to data in configuration providers for Microsoft.Extensions.Configuration. This package enables you to represent the configuration data as strongly-typed classes defined in the application code. To bind a configuration, use the Microsoft.Extensions.Configuration.ConfigurationBinder.Get extension method on the IConfiguration object. To use this package, you also need to install a package for the configuration provider, for example, Microsoft.Extensions.Configuration.Json for the JSON provider.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "23414BBDE074A3E494848748823D8CA24B242A3915BAA77D96C8F8251B73CE73C32981326E66738291EF303C0C2B5F4B2933C13741BF5CE5AE106EEBACAF06C0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.CommandLine", + "version": "10.0.10", + "description": "Command line configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from the command line arguments of your application. You can use CommandLineConfigurationExtensions.AddCommandLine extension method on IConfigurationBuilder to add the command line configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "4F3012F2AAE997570A379C5C352BD1548B24F61901CBF9FF5C05444E6FC8ECA998B8F6C58DC1251EBC0DA7F282D26BA9BD82167D5628C1E4DAE0FC3DB335036D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.EnvironmentVariables", + "version": "10.0.10", + "description": "Environment variables configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read configuration parameters from environment variables. You can use EnvironmentVariablesExtensions.AddEnvironmentVariables extension method on IConfigurationBuilder to add the environment variables configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "A5A066D0AFEE703C7E69742C494AD82E75BF0B7A4B0BCCA9B07B8EA9D208BA7B6B1FE8A9937E58A729711FAF871AA12405CB04B7C940D0BFE26E40880EF73AC1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.FileExtensions", + "version": "10.0.10", + "description": "Provides a base class for file-based configuration providers used with Microsoft.Extensions.Configuration and extension methods for configuring them.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0EA7FB571C819E1CD371FD21F05323330C8350050A78B3905034FD7C53504EE8C437D02E109B64490E58CA406727A5DA8749898E969460755558CC0A4E04F3F4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.Json", + "version": "10.0.10", + "description": "JSON configuration provider implementation for Microsoft.Extensions.Configuration. This package enables you to read your application\u0027s settings from a JSON file. You can use JsonConfigurationExtensions.AddJsonFile extension method on IConfigurationBuilder to add the JSON configuration provider to the configuration builder.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1522329F5E7ACE8270D3B69D1973C5D9A32FDFEDE6F8050B304E349A16DFD8F0B08DFC1E6143139FC59A3CE4E0B72B2F454CC3D61C02C93E53B4012C9DA67879" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Configuration.UserSecrets", + "version": "10.0.10", + "description": "User secrets configuration provider implementation for Microsoft.Extensions.Configuration. User secrets mechanism enables you to override application configuration settings with values stored in the local secrets file. You can use UserSecretsConfigurationExtensions.AddUserSecrets extension method on IConfigurationBuilder to add user secrets provider to the configuration builder.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "044707479CFBA9BADC7958E44B5A3C139E11CCEA75FAE8D2A14BD59296B415C35A1F6FBDF372FF2D1A641A0E1FE99E815C4193103826DFA2167A947B0AC09BC7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection", + "version": "10.0.10", + "description": "Default implementation of dependency injection for Microsoft.Extensions.DependencyInjection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "8628EEC1C26F27A7956EECF3D0468FDD865039826770F267F9A4EEBE8D7949E37D1C298B85B8A73A873D9A04FDF5E50E5930E0289F3C4824137B0543FE0E7B0D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyInjection.Abstractions", + "version": "10.0.10", + "description": "Abstractions for dependency injection.\n\nCommonly Used Types:\nMicrosoft.Extensions.DependencyInjection.IServiceCollection", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C40AF270352D0049FBDDB6403EB0B5206F0B6318760146E8093A9972B2AB965D7A5213A28E473742712E54F7ABB288EAB7A46659B41C7426D454ECEE4A931EAC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.DependencyModel", + "version": "10.0.10", + "description": "Provides abstractions for reading \u0060.deps\u0060 files. When a .NET application is compiled, the SDK generates a JSON manifest file (\u0060\u003CApplicationName\u003E.deps.json\u0060) that contains information about application dependencies. You can use \u0060Microsoft.Extensions.DependencyModel\u0060 to read information from this manifest at run time. This is useful when you want to dynamically compile code (for example, using Roslyn Emit API) referencing the same dependencies as your main application.\n\nBy default, the dependency manifest contains information about the application\u0027s target framework and runtime dependencies. Set the PreserveCompilationContext project property to \u0060true\u0060 to additionally include information about reference assemblies used during compilation.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "3887E253D85866E50B994DED19AF4988FC51E7551E86463CB96CC8B43E477D9CCCE9CD2AF9F5584B6905E21F247F32679A83FFFBFDC325D0DF40CEBD557D4EBB" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics", + "version": "10.0.10", + "description": "This package includes the default implementation of IMeterFactory and additional extension methods to easily register it with the Dependency Injection framework.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "EFA65F0DFC19BA6608050F87D9C9CC33A06B5C105B207D7C4259D280F3A36253F7A380FEFC6C9641AD9929FDCBFF5E00B4886F12399698CC716D65CE8131BE62" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Diagnostics.Abstractions", + "version": "10.0.10", + "description": "Diagnostic abstractions for Microsoft.Extensions.Diagnostics.\n\nCommonly Used Types:\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsBuilder\nMicrosoft.Extensions.Diagnostics.Metrics.IMetricsListener\nMicrosoft.Extensions.Diagnostics.Metrics.InstrumentRule\nMicrosoft.Extensions.Diagnostics.Metrics.MeterScope\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsBuilderExtensions\nMicrosoft.Extensions.Diagnostics.Metrics.MetricsOptions", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "B163E11DDD5E10CEB4D4091CFBE35A24A61CA70A29D48D988E9CA48F5E9A799B40E1C7752701F7F78D3A586B1787507581357E4A2813A8F561BE9CB80A3BB4AF" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Abstractions", + "version": "10.0.10", + "description": "Abstractions of files and directories.\n\nCommonly Used Types:\nMicrosoft.Extensions.FileProviders.IDirectoryContents\nMicrosoft.Extensions.FileProviders.IFileInfo\nMicrosoft.Extensions.FileProviders.IFileProvider", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "6F38363D1EEEC3034C1BCFF9058B295F19C4F26E9CEDAAEC671AF3FA22D212E671DB8CAB0688DDB01609C850A06D0C2C5B103176F862F7F7DCABA16481D51C51" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileProviders.Physical", + "version": "10.0.10", + "description": "File provider for physical files for Microsoft.Extensions.FileProviders.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "F62D2D671CA52BEE6BF8E252853D84A9D575FB87D8A04E9DD98EA5BB25E86BA1C6F912D1042CA7A044AB64B879705D458A62F176DB1CA4224FAC06CD52102ABD" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.FileSystemGlobbing", + "version": "10.0.10", + "description": "File system globbing to find files matching a specified pattern.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "1949E7C288D884B5FF6D2B4A54D468FFA42F0285FAB0786A5D58FA47A7F0F5DAAA3A491AAD092F31D07D190CA27CC25F632DBA0C8D25D2D44BDF32058EDD04D5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting", + "version": "10.0.10", + "description": "Hosting and startup infrastructures for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DEF44959988A0DFBC945DC865F25BB0AD3B3872A3E48AC96A71D642EB04A9F3C6CA8B3FD9B2129E2063FE67F5C98AA7FC3D2D049AFE1076F546E82578DF8A822" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Hosting.Abstractions", + "version": "10.0.10", + "description": "Hosting and startup abstractions for applications.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "029B3B822BE940A6994B3A7333046E64C75E471C7F3225C690C0CB3CEC6C19D20594AADAB5EFC28602C2FA37EE3BCD745ED26632B7F7A4580CD0294D3B966DC9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging", + "version": "10.0.10", + "description": "Logging infrastructure default implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "5261C9AAFF6B83BB3A806EFD91CFB37BED7FE8FB5FD990FE41F0BB6B772BF29AC8320C68371B50FB8AE7D8EC3394428EAB4722DC1EC6D72015BA166351956710" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Abstractions", + "version": "10.0.10", + "description": "Logging abstractions for Microsoft.Extensions.Logging.\n\nCommonly Used Types:\nMicrosoft.Extensions.Logging.ILogger\nMicrosoft.Extensions.Logging.ILoggerFactory\nMicrosoft.Extensions.Logging.ILogger\u003CTCategoryName\u003E\nMicrosoft.Extensions.Logging.LogLevel\nMicrosoft.Extensions.Logging.Logger\u003CT\u003E\nMicrosoft.Extensions.Logging.LoggerMessage\nMicrosoft.Extensions.Logging.Abstractions.NullLogger", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FCC5A6CD33BCCA73B47C0771BD1AD9CC044EAC53D3AF43C017CC684932F1F107981C7A0312922C14E6E2AA9B8DF1D3A70655DD0ACDCF9B97D3CE975FC21D588" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Configuration", + "version": "10.0.10", + "description": "Configuration support for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2F34EA98C7F9E1D4B61F3690F5C05A2D88552D672DB4BCE1B8A9EC50DB766530D61CA15FBD9D90B24C46E63B386F771DF8361ACBECF4ABFC7C0C942309AB2B3E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Console", + "version": "10.0.10", + "description": "Console logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6E3AFE1DB83957364483B116F176B0048D0AA0B277B7134F4F0FEAEB159DBBA7175A79916A46183D376346BA13D91F5D22D97E6CC6AAC65946FA562F821E974E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.Debug", + "version": "10.0.10", + "description": "Debug output logger provider implementation for Microsoft.Extensions.Logging. This logger logs messages to a debugger monitor by writing messages with System.Diagnostics.Debug.WriteLine().", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB85BB3E6F032241404637C4642C14702C7337BB8AB3EB2BDE33AFF5000A055D60B6171AA86C7F6D42C55ECB8168D826C2A77A11423BEF2031781900E78E1925" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventLog", + "version": "10.0.10", + "description": "Windows Event Log logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "859BAF5F7B66880559D2B0F56881F61C4980C727BB927DE2BAF868829EC2779F809F7B5263E353E9F1868F676AD19816B824B42955E5792D3216B4E53DA05A4D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Logging.EventSource", + "version": "10.0.10", + "description": "EventSource/EventListener logger provider implementation for Microsoft.Extensions.Logging.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "251D1821F49878B2F829F7A625A26B6F94CD9E2AD218B830859FB1137448EDFAE5CAEA267C459B02E23F09AD9E72A9A5EF491E5B25390FECFB958EB363534211" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options", + "version": "10.0.10", + "description": "Provides a strongly typed way of specifying and accessing settings using dependency injection.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "538322A27FD9BB004C4C3FC21FC584EC08EDE88740B54DC95CBC241B553339633594D167A0EF0D02E42D6482CDA642B218414FF6DEC5BD06A48079CC0948D929" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Options.ConfigurationExtensions", + "version": "10.0.10", + "description": "Provides additional configuration specific functionality related to Options.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "07F056E666E542729A25A06C672DF351373F9D5029BCA0D14AD3AD08DAE2CCA903E776B23E6DE3BBE5051DA68876CBC003F7AFD2EF4C08E7B32E60033465A45A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Extensions.Primitives", + "version": "10.0.10", + "description": "Primitives shared by framework extensions. Commonly used types include:\n\nCommonly Used Types:\nMicrosoft.Extensions.Primitives.IChangeToken\nMicrosoft.Extensions.Primitives.StringValues\nMicrosoft.Extensions.Primitives.StringSegment", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "B3F778D24AFDF4711BEBA10DE673F9EB3ABAEC108B86862FDF1DE64F554B543A503FB3BBB0ABC38E0AF8B800EF39D3660FC660943235C734786FAEB11D4FAD64" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.ILLink.Tasks", + "version": "10.0.10", + "description": "MSBuild tasks for running the IL Linker", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "804F0EEC3AD1008DD08ABDF24B3BDD465EC3CD57FC5EB15F234BDB5179761878A6DDD30F755A25F43C70361FD3CEAF729A8935294FB6C2EDAAAC5E6358DBF5A5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.NET.Test.Sdk", + "version": "18.8.1", + "description": "The MSbuild targets and properties for building .NET test projects.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "ED924163245F79A57884396548B55BEDDB4B5D06F84A96C0872FACF5273E754576CF00D44D326D3CB6138DA9D2E64AAA9BEDBCDCD371218E36EF5B946343EF8F" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.Telemetry", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides telemetry for the platform.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "C5E54A968FD412E4CE2DCC98EBC3C9154FE2D49E2E5C539CE1460CF01A9D8FD4197D90EA5ACE8A9574368DB629FFBD224B273BE242083050087A2BD60FB7D917" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Extensions.TrxReport.Abstractions", + "version": "1.9.1", + "description": "Package Description", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "665DC7C980F6089E8AD472201353A0BAC308BC55976603332BF8E568247FBD3C1FC644C9A904AE9F800E50968D2EF02D735ADA4616E8FC9C75CB18290A7540EC" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides the core platform and the .NET implementation of the protocol.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "10C89A7E4A01422839D3EE8DDE9FD6B1E8C8504A082573A1209398434AD1436FB2774BB96C969CC1E6079B123483303224DE3273F8346F00ED151F2F4F361A4B" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Testing.Platform.MSBuild", + "version": "1.9.1", + "description": "Microsoft Testing is a set of platform, framework and protocol intended to make it possible to run any test on any target or device.\n\nThis package provides MSBuild integration of the platform, its extensions and configuration files.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "568901EC1C20B98D48692E6F182260177105A4C0BE28903805AC3F052D340D6D4B6C6A11F5931B23D10078FF0A70BB654FF606E8BB8C743DEEC1C1CDB8F36A1D" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/testfx", + "type": "website" + }, + { + "url": "https://github.com/microsoft/testfx", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.ObjectModel", + "version": "18.8.1", + "description": "The Microsoft Test Platform Object Model.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "FA783FB4A40D48E96B1901D473BD83DDC83AD873D58B05D7042D05A1E10EEA6D6EE07E130A3213272E989B56C2F05A258F43004F4637DB7EA132D63AEF31A985" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.TestPlatform.TestHost", + "version": "18.8.1", + "description": "Testplatform host executes the test using specified adapter.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "46D7AB005785910C271F30A658151CB71107FD87A78F7F7DE78811E49EC8657424E68901BFA943DD73AFD2E18645ED361294638436B01DA1945C7A4504A7C8DE" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "externalReferences": [ + { + "url": "https://github.com/microsoft/vstest", + "type": "website" + }, + { + "url": "https://github.com/microsoft/vstest", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "Microsoft.Win32.Registry", + "version": "5.0.0", + "description": "Provides support for accessing and modifying the Windows Registry.\n\nCommonly Used Types:\nMicrosoft.Win32.RegistryKey\nMicrosoft.Win32.Registry\nMicrosoft.Win32.RegistryValueKind\nMicrosoft.Win32.RegistryHive\nMicrosoft.Win32.RegistryView\n \nWhen using NuGet 3.x this package requires at least version 3.4.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "471E66567CE59CC86475AECE7815D05261264CE114E0C1688BA2551DD51494901FA72DD7A8F74F8E8F0F3DBA74AF8595F177552F3C06ABB4BFCE76692197076E" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/dotnet/runtime", + "type": "website" + }, + { + "url": "git://github.com/dotnet/runtime", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLite@3.53.4", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLite", + "version": "3.53.4", + "description": "This package contains builds of the native SQLite code for various platforms. \n These builds have \u0022e_sqlite3\u0022 as the base name. The first three numbers in the version number of this package indicate the version of SQLite that was used to build it. The fourth number, if there is one, is incremented as needed for packaging-specific changes.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "81D145648BACFF3B4C8CD1794DF9956C47B229264467AA7001EA9A306E429CEB2855EC9296509541C82FC3C9BCFF04617AB3E86169932700BDAD5B0C03C482EF" + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLite@3.53.4", + "externalReferences": [ + { + "url": "https://sqlite.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.bundle_e_sqlite3", + "version": "3.0.5", + "description": "This \u0027batteries-included\u0027 bundle brings in SQLitePCLRaw.core and the necessary stuff for certain common use cases. Call SQLitePCL.Batteries.Init().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "12F980014C25F0C3E20C7B331418933FC84C7635B65597CEAB09C20EA00C055043C866BEF8614EA6BC38D7A484D8FF339D4387BBE760BC892F4E2702CD23AB2F" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.config.e_sqlite3", + "version": "3.0.5", + "description": "This package sets the configuration for using e_sqlite3 but does not bring in that native library itself. It\u0027s like bundle_e_sqlite3, except it\u0027s hollow.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A25E95EE323DDFEB8FC920D26551B4AFED854A3D9DDA833C3507331AB2043E0C9F16D62C2100560373AFC20E54D3F69F42ABDD6DA6E75EF7DCC0EA861B5AF12" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2026 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.core", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. This package does not provide an API which is friendly to app developers. Rather, it provides an API which handles platform and configuration issues, upon which a friendlier API can be built. In order to use this package, you will need to also add one of the SQLitePCLRaw.provider.* packages and call raw.SetProvider().", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "24209D65527E0F82BB4E151B610195D39CB4732891CE1F0E2BA0965371DA381F1E636CD9256AE7DC5B76C604E36D33B7CA63AFDE09E6A8A40A9B2FCB5F01AA03" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "authors": [ + { + "name": "Eric Sink" + } + ], + "name": "SQLitePCLRaw.provider.e_sqlite3", + "version": "3.0.5", + "description": "SQLitePCLRaw is a Portable Class Library (PCL) for low-level (raw) access to SQLite. Packages named \u0027SQLitePCLRaw.provider.*\u0027 (like this one) are \u0027plugins\u0027 that allow SQLitePCLRaw.core to access the native SQLite library. This provider does DllImport of \u0027e_sqlite3\u0027, the SQLite builds provided with SQLitePCLRaw.", + "scope": "required", + "hashes": [ + { + "alg": "SHA-512", + "content": "716EE95A124695CE5B2E2C834509E66991585B5AD1843B4CC6D135FE078DFE2D2E867A2E83978DEF09B8691833370803251F792537E59203455054AC24F82CC9" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright 2014-2025 SourceGear, LLC", + "purl": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/ericsink/SQLitePCL.raw", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "authors": [ + { + "name": "Microsoft" + } + ], + "name": "System.Diagnostics.EventLog", + "version": "10.0.10", + "description": "Provides the System.Diagnostics.EventLog class, which allows the applications to use the Windows event log service.\n\nCommonly Used Types:\nSystem.Diagnostics.EventLog", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "F98A922C208C90F09A247CF2C251048B3EBADD8633787F967E5701427765C77C298F40E54A8D2BF5EBFEF729EFD3E8CFC5C17EFDD5F2CD80184532C24B5A481A" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "copyright": "\u00A9 Microsoft Corporation. All rights reserved.", + "purl": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "externalReferences": [ + { + "url": "https://dot.net/", + "type": "website" + }, + { + "url": "https://github.com/dotnet/dotnet", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.analyzers@1.27.0", + "authors": [ + { + "name": "jnewkirk,bradwilson,marcind" + } + ], + "name": "xunit.analyzers", + "version": "1.27.0", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features.\n\nInstalling this package provides code analyzers to help developers find and fix frequent issues when writing tests and xUnit.net extensibility code.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "2B920EDBD64D376C9D7B3DA38654D1B11DB4CA5A7F79032B320A289DF229BFD73DB1604DE8C5D120F196C6FBA8B688EE493DC7814F5EFD7EE5E3F56238B3C1BF" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.analyzers@1.27.0", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit.analyzers", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.runner.visualstudio", + "version": "3.1.5", + "description": "Visual Studio 2022\u002B Test Explorer runner for the xUnit.net framework. Capable of running xUnit.net v1, v2, and v3 tests. Supports .NET 4.7.2 or later, and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "6FFB6F37D917B54777C124986C2F3421CEB2FDD62561B352BDAB588AFEF58A8CCF857A8CE0468EB87BA3908261F396FEC18E9D81FDB993D10D4B2F2337A9A5BD" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "externalReferences": [ + { + "url": "https://github.com/xunit/visualstudio.xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.mtp-v1.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "9612F4811FCE910665551AC371386B7460BC118A39D78892C357093F92AAA9EA1A5DC21E2F939AE3FF0D599C9C62749A2F95871226E60AFA2A9807EB26BBF7D6" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.assert", + "version": "3.2.2", + "description": "Includes the assertion library from xUnit.net (xunit.v3.assert.dll). Supports .NET Standard 2.0 and .NET 8.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "0A1ABD3FA034E80012F33D59E5172B1E8D8C35DF57F3DAEA5982B8F9DDAC12FFF61B4B2C7585820077B1895B6C020AA71E80591FB51ABE1D99C08275C3573E7A" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.assert@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.common", + "version": "3.2.2", + "description": "Includes common code shared between xunit.v3.core and xunit.v3.runner.common (xunit.v3.common.dll). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A0FD19A2858C335F0EB5B6A246CDF1FD9B567484A3E60EDC736ACFB7CAFA04B90E874B485A22C4BF2377469B1AFF7658596C35282859F1D20137B913996AB0FC" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.core.mtp-v1", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for writing tests; extensibility authors should include xunit.v3.extensibility.core instead. Includes support for Microsoft.Testing.Platform v1. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "457A8F4EF036556D0181BB56D54A45950EFC6BBCB69EDDBEC341F0972AC086418CE6BB48655435BFA987DDC0CD5B97D97E26B0D57A589455C4248C54404B164B" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.extensibility.core", + "version": "3.2.2", + "description": "Includes the core library (xunit.v3.core.dll), to be used for extensibility; test authors should include xunit.v3.core instead. Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DBD2BF9A1557CEBA2EE86994EAFC086F895691C97C03A125176DD2DC1CB497E10383022FF014FA8A30171D7446C794795B97DEED16EA70562768151A0A4DC3A2" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.mtp-v1", + "version": "3.2.2", + "description": "xUnit.net is a developer testing framework, built to support Test Driven Development, with a design goal of extreme simplicity and alignment with framework features. Supports .NET Framework 4.7.2 or later and .NET 8 or later.\n\nInstalling this package installs xunit.v3.core.mtp-v1, xunit.v3.assert, and xunit.analyzers.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "A1AF2350710CB1571CF31AF92BDFD2A835ADD5E90BCC132ADBB1E11ECA87CC1A3F0382D2A4AC6E8FA82E0E51F4D77FFAD71802A9A6F25DE936BF2280750104ED" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.common", + "version": "3.2.2", + "description": "Includes common code shared between in-process runners (like xunit.v3.runner.inproc.console) and xunit.v3.runner.utility (used by 1st and 3rd party external runners). Supports .NET Standard 2.0.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "226D0BA70448F5345532D159340CA70E0D4B08B766FFC9C97AEE33F86C7715AAF3A916A610322DB805AFEBA56FC1323480ADF7F125B8A960C51FBA4F266AEFB0" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "authors": [ + { + "name": "jnewkirk,bradwilson" + } + ], + "name": "xunit.v3.runner.inproc.console", + "version": "3.2.2", + "description": "In-process console runner for xUnit.net framework, providing the entrypoint for self-executing unit tests. Supports .NET Framework 4.7.2 or later and .NET 8 or later.", + "scope": "excluded", + "hashes": [ + { + "alg": "SHA-512", + "content": "DB9F10495A9497A07232E3739FCAFE3ADB923F097314F2EF6BC1DA0E85EBA69353F8618136E0274A45EF9992FE4B2232A82F626D5DF8CA0124039C6CAE66C2FE" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "copyright": "Copyright (C) .NET Foundation", + "purl": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/xunit/xunit", + "type": "vcs" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.AspNetCore.TestHost@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Data.Sqlite.Core@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Caching.Memory@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Caching.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.DependencyModel@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.FileSystemGlobbing@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.FileExtensions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.UserSecrets@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Diagnostics@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.FileProviders.Physical@10.0.10", + "pkg:nuget/Microsoft.Extensions.Hosting.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Console@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Configuration@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.Debug@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventLog@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/System.Diagnostics.EventLog@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging.EventSource@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Logging@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection@10.0.10", + "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options.ConfigurationExtensions@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Options@10.0.10", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@10.0.10", + "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Extensions.Primitives@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.CodeCoverage@18.8.1", + "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.ApplicationInsights@2.23.0", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Platform@1.9.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/Microsoft.TestPlatform.TestHost@18.8.1", + "dependsOn": [ + "pkg:nuget/Microsoft.TestPlatform.ObjectModel@18.8.1" + ] + }, + { + "ref": "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLite@3.53.4", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLite@3.53.4", + "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.config.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5" + ] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.core@3.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/SQLitePCLRaw.provider.e_sqlite3@3.0.5", + "dependsOn": [ + "pkg:nuget/SQLitePCLRaw.core@3.0.5" + ] + }, + { + "ref": "pkg:nuget/System.Diagnostics.EventLog@10.0.10", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.analyzers@1.27.0", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.assert@3.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:nuget/xunit.v3.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Bcl.AsyncInterfaces@6.0.0" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Testing.Extensions.Telemetry@1.9.1", + "pkg:nuget/Microsoft.Testing.Extensions.TrxReport.Abstractions@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform@1.9.1", + "pkg:nuget/Microsoft.Testing.Platform.MSBuild@1.9.1", + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.mtp-v1@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.analyzers@1.27.0", + "pkg:nuget/xunit.v3.assert@3.2.2", + "pkg:nuget/xunit.v3.core.mtp-v1@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.common@3.2.2", + "dependsOn": [ + "pkg:nuget/Microsoft.Win32.Registry@5.0.0", + "pkg:nuget/xunit.v3.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3.runner.inproc.console@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.extensibility.core@3.2.2", + "pkg:nuget/xunit.v3.runner.common@3.2.2" + ] + }, + { + "ref": "pkg:nuget/xunit.v3@3.2.2", + "dependsOn": [ + "pkg:nuget/xunit.v3.mtp-v1@3.2.2" + ] + }, + { + "ref": "ServerMonitorManager@0.0.0", + "dependsOn": [ + "pkg:nuget/Microsoft.Extensions.Configuration.Binder@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.CommandLine@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@10.0.10", + "pkg:nuget/Microsoft.Extensions.Configuration.Json@10.0.10", + "pkg:nuget/Microsoft.NET.ILLink.Tasks@10.0.10", + "pkg:nuget/Microsoft.AspNetCore.Authentication.Certificate@10.0.10", + "pkg:nuget/Microsoft.Data.Sqlite@10.0.10", + "pkg:nuget/SQLitePCLRaw.bundle_e_sqlite3@3.0.5", + "pkg:nuget/Microsoft.AspNetCore.Mvc.Testing@10.0.10", + "pkg:nuget/Microsoft.NET.Test.Sdk@18.8.1", + "pkg:nuget/xunit.runner.visualstudio@3.1.5", + "pkg:nuget/xunit.v3@3.2.2" + ] + } + ] +} \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/smm-setup.sh b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/smm-setup.sh new file mode 100644 index 0000000..5ef182e --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/smm-setup.sh @@ -0,0 +1,102 @@ +#!/usr/bin/env bash +set -Eeuo pipefail +IFS=$'\n\t' + +readonly PROGRAM_NAME="smm-setup" +readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.9" +readonly DEFAULT_REPOSITORY="ochenstarik-ui/server-monitor-manager" +readonly INNER_ASSET="ochenstarik-server-monitor-manager.sh" + +RELEASE_TAG="${SMM_TAG:-$DEFAULT_RELEASE_TAG}" +REPOSITORY="${SMM_REPOSITORY:-$DEFAULT_REPOSITORY}" +CACHE_DIR="${SMM_CACHE_DIR:-${XDG_CACHE_HOME:-$HOME/.cache}/server-monitor-manager}" + +usage() { + cat <<'USAGE' +Usage: + smm-setup.sh [--tag TAG] [--repository OWNER/REPO] COMMAND [ARG...] + +Commands are passed to the verified ochenstarik-server-monitor-manager.sh +asset from the selected immutable GitHub release. Common commands: + install-agent | install-control | uninstall-agent | uninstall-control + backup-create | backup-restore | version + +Environment overrides: + SMM_TAG Release tag (default: v0.1.0-alpha.9) + SMM_REPOSITORY GitHub repository (default: ochenstarik-ui/server-monitor-manager) + SMM_CACHE_DIR Verified-download cache directory +USAGE +} + +die() { + printf '%s: %s\n' "$PROGRAM_NAME" "$*" >&2 + exit 1 +} + +require_command() { + command -v "$1" >/dev/null 2>&1 || die "required command is unavailable: $1" +} + +while [[ $# -gt 0 ]]; do + case "$1" in + --tag) + [[ $# -ge 2 ]] || die '--tag requires a value' + RELEASE_TAG="$2" + shift 2 + ;; + --repository) + [[ $# -ge 2 ]] || die '--repository requires a value' + REPOSITORY="$2" + shift 2 + ;; + -h|--help) + usage + exit 0 + ;; + --) + shift + break + ;; + -*) + die "unknown option: $1" + ;; + *) + break + ;; + esac +done + +[[ $# -gt 0 ]] || { + usage >&2 + exit 2 +} +[[ "$RELEASE_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.-]+)?$ ]] \ + || die "invalid release tag: $RELEASE_TAG" +[[ "$REPOSITORY" =~ ^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$ ]] \ + || die "invalid repository: $REPOSITORY" + +require_command curl +require_command sha256sum +require_command mktemp + +release_base="https://github.com/$REPOSITORY/releases/download/$RELEASE_TAG" +cache_release="$CACHE_DIR/$REPOSITORY/$RELEASE_TAG" +cached_script="$cache_release/$INNER_ASSET" +cached_checksum="$cache_release/$INNER_ASSET.sha256" +mkdir -p "$cache_release" + +temporary_directory="$(mktemp -d -t smm-setup.XXXXXXXX)" +trap 'rm -rf -- "$temporary_directory"' EXIT + +curl -fsSL "$release_base/$INNER_ASSET" -o "$temporary_directory/$INNER_ASSET" +curl -fsSL "$release_base/$INNER_ASSET.sha256" -o "$temporary_directory/$INNER_ASSET.sha256" + +( + cd "$temporary_directory" + sha256sum -c "$INNER_ASSET.sha256" +) || die "checksum verification failed for $RELEASE_TAG/$INNER_ASSET" + +install -m 0755 "$temporary_directory/$INNER_ASSET" "$cached_script" +install -m 0644 "$temporary_directory/$INNER_ASSET.sha256" "$cached_checksum" + +exec "$cached_script" "$@" diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/smm-setup.sh.sha256 b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/smm-setup.sh.sha256 new file mode 100644 index 0000000..9085e8c --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/assets/smm-setup.sh.sha256 @@ -0,0 +1 @@ +00417243c63b91d895fb4b80c4a72ddd4a0012ae59057b38eee07042f901e1f6 smm-setup.sh diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/tools/cosign_checksums.txt b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/tools/cosign_checksums.txt new file mode 100644 index 0000000..ca7dd41 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/tools/cosign_checksums.txt @@ -0,0 +1,40 @@ +009e31a2ddd0ee3f67c2a65040e5499e646e3164489d1b6b5d1795a4f82b5a3d cosign-2.2.4-1.aarch64.rpm +ec7001b1567e26c5d76eebd7760079a72782e2a1bd33800a023cfe82bc10f7b6 cosign-2.2.4-1.armv7hl.rpm +e1d1bfcf2002348bd3af8523b35a9c41788e434f5996b09513664f7cc1651dde cosign-2.2.4-1.ppc64le.rpm +6eb0b7794f623767bbfe0c719b07b79c3b22a22130f2ca13c21dc3f47c9505c2 cosign-2.2.4-1.riscv64.rpm +915b76a841f129716348de9e9e88238a0e158b907d9bdfc844e8f34451377d24 cosign-2.2.4-1.s390x.rpm +a0020831e596de53ebabbd54a32c9a65f185a6d383c439476b528dd2ccfc0dad cosign-2.2.4-1.x86_64.rpm +0e5a77a86115e4c00ba4243db01abceacb13cc06981c45e53ee71f2e1db8ce25 cosign-darwin-amd64 +4607ecc84f93fa688f9eda47a997823743ab74c365b0391cc45cf10dc0601211 cosign-darwin-amd64_2.2.4_darwin_amd64.sbom +fcd310e64ecddc1eaa13fe814ac1c9fc02f6f9eacd9a58480ab8160eb8ca381e cosign-darwin-arm64 +8ea5074f4322585f686d9f5e22fa4d9287e70415d09853814ee006e3af985285 cosign-darwin-arm64_2.2.4_darwin_arm64.sbom +97a6a1e15668a75fc4ff7a4dc4cb2f098f929cbea2f12faa9de31db6b42b17d7 cosign-linux-amd64 +14a9c0987593c054857980249fc3dec11eb1bfc62062f40f042ba362db2f8a45 cosign-linux-amd64_2.2.4_linux_amd64.sbom +ad0338117c8c97a555e48ee194f400aad56803aaa1f39f537a3ede9261bc9aa7 cosign-linux-arm +658087351e1d4f9c396b5f59ee5437461c06128f4ce80ba899ccaa1c0b6a8a62 cosign-linux-arm64 +c7b38d52889aa42a06b5052103c2b5ac918e965fbd1eebc2a17ee21f9e43f8b9 cosign-linux-arm64_2.2.4_linux_arm64.sbom +63db5ffa40b311550bf9ec5bbe77ba239eb3f788438d940414ce843a42ad482d cosign-linux-arm_2.2.4_linux_arm.sbom +1ca016088d83991a51db256c64bff1c208b8f2a3999257e428295244d574ed98 cosign-linux-pivkey-pkcs11key-amd64 +36626fda9cbbcafa85af54e2fdbdca714016ec47aa8e306939cd1fbc773cdaf1 cosign-linux-pivkey-pkcs11key-amd64_2.2.4_linux_amd64.sbom +907d5968bef7ccfb777c428954e361bdc0cb5b80716754c6439e8ea4dc9d56eb cosign-linux-pivkey-pkcs11key-arm64 +8d0824c65db0451c7cf3c68595aad791873205927657511877a0de2ebc4bee52 cosign-linux-pivkey-pkcs11key-arm64_2.2.4_linux_arm64.sbom +2dd58c589b4244df6525153b0d9e6077853e2a8f210eef6ac195a571ccd41615 cosign-linux-ppc64le +5f9721d9a0d93b2fc85d74e0615ca4a72aed725b150e6b820eefcb8da2dd28f3 cosign-linux-ppc64le_2.2.4_linux_ppc64le.sbom +9b02a104cb4e165ecb31ce0ce5a61bea053cf88990b62a398df612f731023d03 cosign-linux-riscv64 +83355f264997991e47fcf20918631af5fead9ba3f7b59c3276c70e71a8ace0c1 cosign-linux-riscv64_2.2.4_linux_riscv64.sbom +f1695b522e2af1b022a340a139c59dcf2bd4a732b2363576b72e5b5d10637275 cosign-linux-s390x +75d9fbec896e4fdca47e4d96fb01c9b7a47b79bbbe3920303c6cf42b329b1fff cosign-linux-s390x_2.2.4_linux_s390x.sbom +9e9b71bd3fa2a6abfa903b5f784d9ca0fbc29c563d2b084c1a82c593c2bab001 cosign-windows-amd64.exe +16d2c9345bc46c84aad4d877292facd213eefc752a8042089c705caa3e4d4d40 cosign-windows-amd64.exe_2.2.4_windows_amd64.sbom +67e08326f9b16ffab969f292d6457f2e97938fb8f1558955ed433daa1a13cf1e cosign_2.2.4_aarch64.apk +ec894d33df08ce93631ee09b1773df18c916c1074626dc48bf9cf52297cbb70a cosign_2.2.4_amd64.deb +4afdfa7a5fe72c0fd60588596476c596d55ca7299322f478ac22a88dcc0552de cosign_2.2.4_arm64.deb +2601c2484bab2002fb19c7a42851e338c7b2af7e7bef408f8b6f94edaf6e3cd4 cosign_2.2.4_armhf.deb +023a89f8bc866289838842f7f0e12aac9e165d0a72f3ae023edd7660afcbba16 cosign_2.2.4_armv7.apk +72844111cfc83eb276cf3adb32e5023d09eeb37139170fa08dc484ac5313c5f3 cosign_2.2.4_ppc64el.deb +12e7d118a6a8a4dbd03766d590f9a6630b2d0dc236281f1db47dd7b21920928c cosign_2.2.4_ppc64le.apk +c658705c701de04d9a54cc3b1348f2009106139d14b0a25bbc57f0389e1bc0ce cosign_2.2.4_riscv64.apk +e083fe2a8efea9f5893a3e9e98dbce0cf1a6ee8068794d5fdd147c33fea42295 cosign_2.2.4_riscv64.deb +c9bfd34a6fb1ca1f13fb45b4abdfe05ed435f07f8897d7be6fb161b97e9f22a6 cosign_2.2.4_s390x.apk +d29ff45e98da088eb32914e6b26fd6437366fe36f7beedbcb2b4700824489c2e cosign_2.2.4_s390x.deb +8ce67b1110600baa519ff66cca3b8f883527e0f532a262ea20cc553d1642265f cosign_2.2.4_x86_64.apk diff --git a/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/verification/rekor-entry.json b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/verification/rekor-entry.json new file mode 100644 index 0000000..43bfff6 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/v0.1.0-alpha.9/verification/rekor-entry.json @@ -0,0 +1,43 @@ +{ + "108e9186e8c5677aebee891d192fd0a9dedbbcdaf949f9cb74a4b342af33925561ca275e32c114c8": { + "body": "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", + "integratedTime": 1786359497, + "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d", + "logIndex": 2406747417, + "verification": { + "inclusionProof": { + "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n2284895413\n1uu1nde8w04m/JGj/6PppP/ElmvKyyCDzfdOE2gKr54=\n\n\u2014 rekor.sigstore.dev wNI9ajBGAiEA57nUQRMzQQXcYu6pRK1ujwB9oQR0CzdMBrAPSph0w7gCIQCylAABTcwjNlvSf4cen7XXFTNWZSWQYe3m6PjKhRzCCA==\n", + "hashes": [ + "2cc18c7eff0720601516f5a774090663d2faeed471e6c58b51b5919c4c29dc5c", + "62aae990a49fda8bda40578eb1a408ece2758b0834473d6193e5ca6baa5a4c45", + "99838108d55dbe1bbc46e11072ae7650db4aed4afe58b7f8e5b4a12465ffcb5a", + "5fb5e7783c848d297cfe568e8682e6f2e83ad6cb8f6ec3b591a594c63b8d37cb", + "7329eacc392ec09895dffc9bdc04263c6ad523e3f3c41e9cbab79a2cd03eaae2", + "0cc31b3de7a3297c90edaac08ed49c97bd02df302d35baaf85a24f34d813d694", + "05b50fdf39294723a5a69f20b6f82b2a2ddcf8171d8bc618d286f6f8391ed7ca", + "feb7bb455b11e925e61744d9a3b1abb8de21cbb728471fbdc2a2b8b6bbc0a8a5", + "7af4e9d8f896c9b26d5c523bd86c05af91532847c30415b8190c7d2ac59566e1", + "8e731c03de05f4795b12abc5d5311ae37381146082a8f21079f7785a2f108c24", + "0874d5c797b2add468bc7fd21742cca9ff6ea74a901b7d65057e30c301933149", + "53c2980a0a791d4e174fa5148593def9f1d044fb911adae0f9cd703e18970595", + "765bde0f8ee37136da3e151cd289626af2579e6354e75646938e79e48f9b3ffa", + "500f9f1408bfe74632272215e0379354267711bd0400c9b0aa8ab7411271474c", + "818eb294c4226e0527319ed39f84ca36dd478a01a1d60494910f3131af5bcff3", + "0290bbfa7c13c41a91ae5603362fe5243d2a0a7d2f9b3a819e3a605b4ffef339", + "3a0745bc125daca7541c6f801e875bedb76d7e9a24c7d3fac68178e1f2a848bb", + "96af5b9b25f26b51e4f3dccadc1ab18bb9cb3e4246498ff56884c049910a70c3", + "8e000907ca754381c03c11c98f24f1651b0fbfc658e97b4b00a22ab8161f285c", + "280557576aaaeefeae39619cfdd61ffa982f46983e8d9bf7c86f12dbea83db8d", + "3817878c5ade47e27a7a0e2792e67676976ddbcb5dcefabd2a908204b92c85ff", + "1793c15564026c8868005f573d1444431d1227d29313eb11476f26b583ee96f0", + "ca04c6d3cbc1d841262503d746f1791f4e9395a73bd8090e0c434aecf8423e4c", + "c47fc30ac78b1ebf5e2a8613f2ab0e4592bbcd5744198587b95b6c56b0fde706" + ], + "logIndex": 2284843155, + "rootHash": "d6ebb59dd7bcc34e26fc91a3ffa3e9a4ffc4966bcacb2083cdf74e13680aaf9e", + "treeSize": 2284895413 + }, + "signedEntryTimestamp": "MEUCIQCEZat306NUJBW1kwOBmJNhMejBToDF7lj6xcrdvjRd8gIgUoLLNjxlq9RIKcAOPYvRNEN+gf/MGMU0eN2ERlTIxXg=" + } + } +} diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03.zip.sha256 b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03.zip.sha256 new file mode 100644 index 0000000..a8e592a --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03.zip.sha256 @@ -0,0 +1 @@ +bfc1f215c7ca30c0ccd69000dd14c8f4ad4dea524bc3d064a8a1acf29066888e Task2-Block-B-2026-08-03.zip diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/CI_CHECKS.txt b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/CI_CHECKS.txt new file mode 100644 index 0000000..0ad05ba --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/CI_CHECKS.txt @@ -0,0 +1,14 @@ +Debian 12 arm64 systemd restart pass 30s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706746/job/91590507302 +Debian 12 x64 systemd restart pass 28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706746/job/91590507297 +Debian 13 arm64 systemd restart pass 32s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706746/job/91590507307 +Debian 13 x64 systemd restart pass 31s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706746/job/91590507303 +Release archive (linux-arm64) pass 1m4s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706746/job/91590367321 +Release archive (linux-x64) pass 1m14s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706746/job/91590367368 +Ubuntu 22.04 arm64 native VM pass 13s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706746/job/91590507299 +Ubuntu 22.04 x64 native VM pass 19s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706746/job/91590507294 +Ubuntu 24.04 arm64 native VM pass 17s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706746/job/91590507290 +Ubuntu 24.04 x64 native VM pass 20s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706746/job/91590507288 +build pass 2m47s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782705019/job/91590362106 +build pass 2m51s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706727/job/91590366890 +build-and-test pass 2m28s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782705024/job/91590362002 +build-and-test pass 2m27s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30782706719/job/91590366916 diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/INDEPENDENT_REPAIR_REVIEW_APPROVE.txt b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/INDEPENDENT_REPAIR_REVIEW_APPROVE.txt new file mode 100644 index 0000000..a737d87 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/INDEPENDENT_REPAIR_REVIEW_APPROVE.txt @@ -0,0 +1,31 @@ +## VERDICT: APPROVE + +### Findings +- No blocking, HIGH, or MEDIUM defects found. +- No deadlock, stale-policy disconnect regression, or fail-open state-persistence path identified in the reviewed repair diff. + +### Verification map +- **Prior HIGH #1 — CLOSED** + - Create holds both endpoint node locks before mutation/application: `LinkService.cs:20-21`. + - Reconciliation holds sorted endpoint locks before the per-Link lock and refreshes the effective policy under lock: `LinkService.cs:131-138`. + - Reenrollment holds the revoked node lock through mutation and kill-switch convergence: `CertificateLifecycleService.cs:19-38`. + - Node locks are globally sorted, partially acquired locks are released on cancellation/failure, and successful leases release in reverse order: `LinkService.cs:263-290`, `342-350`. + - All paths acquiring both lock classes use node → Link ordering; Link-only paths do not subsequently request node locks. No lock-order cycle found. + +- **Prior HIGH #2 — CLOSED** + - Disable replay returns early only for completed `ActualState == "Disabled"`; interrupted states resume convergence: `LinkService.cs:88-102`. + - Common convergence reloads current desired state, probes factual state, disconnects when active, verifies, persists `Disabled`, and records `Partial` on failure: `LinkService.cs:292-323`. + - Reenrollment replay enumerates current effective desired-Disabled links and reconverges each: `CertificateLifecycleService.cs:31-38`. + - Create replay resumes when still `Connecting`: `LinkService.cs:24-28`. + - Added tests directly cover interrupted Disable replay, reenrollment replay, and reconnect/reenrollment serialization. + +### Checks +- `bash -n` for helper, acceptance, and bootstrap scripts: **PASS** +- Bootstrap contract: `BOOTSTRAP_CONTRACT=PASS` +- `git diff --check`: **PASS** +- Independent .NET rerun was unavailable because `dotnet` is not installed/on this review shell’s PATH. The supplied fresh verifier evidence reports Control **69/69 PASS** and Desktop security **12/12 PASS**. +- Physical acceptance remains externally blocked by unset SSH/topology inputs, as documented. + +### Workspace +- Files created or modified by reviewer: **none** +- Review was read-only; existing worktree modifications were left untouched. \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/INDEPENDENT_REVIEW_CHANGES_REQUESTED.txt b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/INDEPENDENT_REVIEW_CHANGES_REQUESTED.txt new file mode 100644 index 0000000..a61d75e --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/INDEPENDENT_REVIEW_CHANGES_REQUESTED.txt @@ -0,0 +1,52 @@ +## VERDICT: **CHANGES_REQUESTED** + +Not safe to commit or open a PR yet. + +### BLOCKING +None. + +### HIGH + +1. **Certificate reenrollment is outside the per-Link serialization boundary, allowing a revoked node’s Link to be reactivated.** + - `src/ServerMonitorManager.Control/CertificateLifecycleService.cs:32-59` + - `src/ServerMonitorManager.Control/LinkService.cs:122-160` + - `ControlStore.SetLinkActualStateAsync` also updates actual state without checking the current desired state. + - Concrete interleaving: + 1. Reconciliation reads `DesiredState=Active`. + 2. Reenrollment persists `DesiredState=Disabled` and disconnects/verifies the rule absent. + 3. Reconciliation observes the absent rule, reconnects it based on its stale expectation, and persists `ActualState=Active`. + 4. Final state can be `DesiredState=Disabled`, `ActualState=Active`, with the nftables rule active. + - The in-memory semaphore protects Create/Disable/Reconcile/TTL, but `CertificateLifecycleService` neither acquires it nor uses a conditional/versioned persistence operation. + +2. **Idempotency replays do not resume incomplete privileged operations, so an interrupted kill switch can remain active indefinitely.** + - `src/ServerMonitorManager.Control/LinkService.cs:85-100`, especially replay return at `91-94` + - `src/ServerMonitorManager.Control/CertificateLifecycleService.cs:19-28` + - Disable and reenrollment commit desired-state changes before invoking the helper. If Control is cancelled or terminates after the database commit but before successful factual verification, retrying the same idempotency key immediately returns the cached/current record without probing or retrying the firewall operation. + - For manual links (`TTL=0`), no TTL worker will recover this. A normal heartbeat also does not necessarily request reconciliation when the agent remained online. The persisted state can therefore remain `Disconnecting` while the allow rule remains active. + - Existing tests cover successful sequential replay, but not interruption after mutation commit followed by replay. + +### MEDIUM +None. + +### LOW +None. + +## Verification map + +| Area | Result | +|---|---| +| Create/Disable/Reconcile/TTL serialization | Correct among `LinkService` operations; reenrollment is not serialized and creates a HIGH race | +| Helper fail-closed behavior | Reviewed: nftables listing failure exits nonzero; status output is strict `active`/`disabled` | +| Helper argv safety | Reviewed: `.ArgumentList` and quoted Bash variables avoid shell interpolation | +| Factual vs desired persistence/events | Normal sequential paths verify factual state, but reenrollment races and replay short-circuiting undermine correctness | +| Desktop bindings/semantics | Desired, actual, drift, error, and version bindings are coherent | +| Acceptance script | New factual status assertions are honest and argv-safe; physical acceptance remains unexecuted | +| Test adequacy | Missing concurrent reenrollment/reconciliation test and interrupted disable/reenrollment replay-recovery tests | +| `bash -n` | PASS for all changed shell scripts | +| Bootstrap contract | PASS: `BOOTSTRAP_CONTRACT=PASS` | +| `git diff --check ba14d29` | PASS | +| Control tests | Could not independently rerun: `dotnet` is unavailable in this reviewer environment. Parent-provided evidence reports 66/66 PASS | +| Physical acceptance | Not run; required environment inputs are unset | + +- **Files created or modified:** None; review was read-only. +- **Issue encountered:** Local `dotnet` executable was unavailable. \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/REPORT.md b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/REPORT.md new file mode 100644 index 0000000..9eca8ce --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/REPORT.md @@ -0,0 +1,61 @@ +# Server Monitor Manager — Task 2 / Block B + +Дата снимка: 2026-08-03 10:37:11 +07:00 + +## Состояние + +Пакет содержит merged результат Block B и локальное/CI/review evidence. Physical acceptance остаётся отдельным внешним evidence. + +- Merge commit: `89ef2fd9d3e596777fba47e4a17e181e7e788993` +- База: `ba14d2921142652971a0dc78970c2213921069da` +- Изменено: 14 tracked-файлов, 551 additions / 108 deletions +- Feature commits: `172df91`, `1580ec7` +- PR: https://github.com/ochenstarik-ui/server-monitor-manager/pull/11 +- PR: **MERGED** +- CI: **14/14 SUCCESS** на head `1580ec7` +- Финальный repair-review: **APPROVE**, без BLOCKING/HIGH/MEDIUM +- Physical acceptance: не выполнен — отсутствуют SSH/topology inputs + +## Реализовано + +- Строгий helper action `link-status` для factual nftables state. +- Различение отсутствующей nftables table и существующей table без matching rule. +- Connect/disconnect больше не считают exit code доказательством применения политики. +- После mutation выполняется factual probe; `ActualState` отражает обнаруженное состояние. +- Reconnect reconciliation приводит Links к desired state. +- Desktop показывает desired state, actual state, drift, last error и version. +- Three-server acceptance усилен factual checks после connect, disable, TTL и optional restart. +- Node/per-Link serialization закрывает reconnect ↔ certificate reenrollment race. +- Interrupted disable и reenrollment replays возобновляют kill-switch convergence. +- Completed stale Link replay не отключает более новый Link с тем же policy tuple. + +## Независимый review + +Первый review вернул `CHANGES_REQUESTED` с двумя HIGH: + +1. Reenrollment находился вне общей serialization boundary. +2. Idempotency replay не возобновлял незавершённую privileged operation. + +Оба findings исправлены. Добавлены regression tests. Полный исходный review сохранён в `INDEPENDENT_REVIEW_CHANGES_REQUESTED.txt`. Финальный repair-review сохранён в `INDEPENDENT_REPAIR_REVIEW_APPROVE.txt`; verdict: **APPROVE**, без BLOCKING/HIGH/MEDIUM. + +## Содержимое пакета + +- `block-b-current.diff` — полный binary-capable Git patch `ba14d29..89ef2fd`. +- `block-b-modified-files.zip` — snapshot 14 изменённых файлов с сохранением repo paths. +- `REPORT.md` — этот отчёт. +- `TEST_EVIDENCE.md` — выполненные проверки и ограничения. +- `INDEPENDENT_REVIEW_CHANGES_REQUESTED.txt` — полный первый независимый review. +- `INDEPENDENT_REPAIR_REVIEW_APPROVE.txt` — финальный независимый repair-review. +- `CI_CHECKS.txt` — итоговые PR #11 checks. +- `SHA256SUMS` — контрольные суммы артефактов. + +## Ограничение physical acceptance + +Не были предоставлены: + +- `HUB_SSH_HOST`, `HUB_SSH_USER` +- `SOURCE_SSH_HOST`, `SOURCE_SSH_USER` +- `HOME_WG_IP`, `SECOND_WG_IP` +- `SSH_IDENTITY_FILE` + +Contract/mock tests не выдаются за physical acceptance. diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/SHA256SUMS b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/SHA256SUMS new file mode 100644 index 0000000..7372753 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/SHA256SUMS @@ -0,0 +1,7 @@ +29668ee392c0bf3cbc1be024dfe6b43d6cba3638e9f4b8dbaff6627b2a95ae18 *REPORT.md +801733648e4211aba026499baf510300cb40064298ccf946565a5f2ba94babcb *TEST_EVIDENCE.md +a6e593a7b3a62a436a1aa844c16de2ea9c456ee4149ee371f89472f796bbc108 *INDEPENDENT_REVIEW_CHANGES_REQUESTED.txt +3ba1fdbd5701272957fce1349aa8e5734e05fd2e11d57b5a49bce733a533368e *INDEPENDENT_REPAIR_REVIEW_APPROVE.txt +536baeaad1377cbbf205acf0d556833596d8af11bbfbb5b4a9d3f00ed88bbe5f *CI_CHECKS.txt +73eff08367b67827a87b98edabd19bffcc9294f4449f36c8086ea0e1d4e3e342 *block-b-current.diff +15f6403673830658b2ac29b07673c810d2131c9214e1baf310129ad92151be57 *block-b-modified-files.zip diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/TEST_EVIDENCE.md b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/TEST_EVIDENCE.md new file mode 100644 index 0000000..5d4a86e --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/TEST_EVIDENCE.md @@ -0,0 +1,48 @@ +# Test Evidence — Task 2 / Block B + +Дата: 2026-08-03 +Рабочая копия: `C:\Users\Ochenstarik\projects\server-monitor-manager-task2-b` + +## После HIGH repair + +| Проверка | Результат | +|---|---:| +| Control test suite | **69/69 PASS** | +| HIGH-focused regression tests | **3/3 PASS** | +| Desktop security tests | **12/12 PASS** | +| Desktop Release x64 build | **PASS — 0 warnings, 0 errors** | +| Changed shell scripts, `bash -n` | **PASS** | +| Bootstrap contract | **BOOTSTRAP_CONTRACT=PASS** | +| `git diff --check` | **PASS** | + +## Добавленные HIGH-focused tests + +- `DisableReplayResumesInterruptedFactualConvergence` +- `ReenrollmentReplayResumesInterruptedKillSwitch` +- `ReenrollmentWaitsForReconnectAndFinishesFactuallyDisabled` + +Focused ad-hoc marker: + +`HERMES_AD_HOC_BLOCK_B_HIGH_REPAIR=PASS` + +Последний verifier был создан OS-safe через Python `tempfile`: + +`C:\Users\Ochenstarik\AppData\Local\Temp\hermes-verify-t0w3drk4.sh` + +Verifier удалён после review checkpoint. Это **ad-hoc verification**, не canonical suite declaration. + +## Windows contract + +`tests/windows/Test-DesktopContracts.ps1` прошёл до backend-only HIGH repair: + +`Windows desktop contracts passed.` + +Повторный запуск был заблокирован approval timeout, а не test assertion. Запрет не обходился. + +## Не выполнено + +- Physical three-server connectivity acceptance — нет SSH/topology inputs. +- PR #11 CI — **14/14 SUCCESS** на head `1580ec7`; Linux-only helper sequence подтверждён runner-ом. +- Финальный repair-review — **APPROVE**, без BLOCKING/HIGH/MEDIUM. + +Пакет прошёл независимый review, полный CI и merged в `main` как `89ef2fd`. Physical acceptance отдельно заблокирован отсутствующими topology inputs. diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/block-b-current.diff b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/block-b-current.diff new file mode 100644 index 0000000..301b5b3 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task2-Block-B-2026-08-03/block-b-current.diff @@ -0,0 +1,1140 @@ +diff --git a/deploy/ochenstarik-smm-policy-apply b/deploy/ochenstarik-smm-policy-apply +index 040993e7cdcc5c290dfdfac59f8497af1d2b2e01..557e01e754450567df5ec6cddf285a110b59d753 100755 +--- a/deploy/ochenstarik-smm-policy-apply ++++ b/deploy/ochenstarik-smm-policy-apply +@@ -36,6 +36,7 @@ validate_rule() { + case "$action" in + link-connect) [[ $# -eq 6 ]] || fail "invalid link-connect argument count" ;; + link-disconnect) [[ $# -eq 5 ]] || fail "invalid link-disconnect argument count" ;; ++ link-status) [[ $# -eq 5 ]] || fail "invalid link-status argument count" ;; + *) fail "unsupported action" ;; + esac + validate_node_id "$2" +@@ -59,12 +60,14 @@ run_nft() { + } + + rule_exists() { +- local comment="$1" ++ local comment="$1" listing + if [[ "$testing" == "1" ]]; then + return 1 + fi +- /usr/sbin/nft -a list chain "$TABLE_FAMILY" "$TABLE_NAME" "$CHAIN_NAME" \ +- | grep -Fq "comment \"$comment\"" ++ if ! listing="$(/usr/sbin/nft -a list chain "$TABLE_FAMILY" "$TABLE_NAME" "$CHAIN_NAME")"; then ++ fail "could not inspect nftables Link policy" ++ fi ++ grep -Fq "comment \"$comment\"" <<<"$listing" + } + + connect_rule() { +@@ -99,9 +102,23 @@ disconnect_rule() { + ) + } + ++status_rule() { ++ local source_id="$1" target_id="$2" protocol="$3" port="$4" comment ++ # A status is meaningful only for identities currently known to the mesh. ++ lookup_node_ip "$source_id" >/dev/null ++ lookup_node_ip "$target_id" >/dev/null ++ comment="smm:${source_id}:${target_id}:${protocol}:${port}" ++ if rule_exists "$comment"; then ++ printf '%s\n' active ++ else ++ printf '%s\n' disabled ++ fi ++} ++ + action="${1:-}" + validate_rule "$@" + case "$action" in + link-connect) connect_rule "$2" "$3" "$4" "$5" ;; + link-disconnect) disconnect_rule "$2" "$3" "$4" "$5" ;; ++ link-status) status_rule "$2" "$3" "$4" "$5" ;; + esac +diff --git a/src/ServerMonitorManager.Control/CertificateLifecycleService.cs b/src/ServerMonitorManager.Control/CertificateLifecycleService.cs +index 770f37bf1bad765bcf839d761327771d832f0e86..b98c7addd3c7342fd99d6ba1d2b8115c4ff5d6e1 100644 +--- a/src/ServerMonitorManager.Control/CertificateLifecycleService.cs ++++ b/src/ServerMonitorManager.Control/CertificateLifecycleService.cs +@@ -5,7 +5,7 @@ namespace ServerMonitorManager.Control; + + public sealed class CertificateLifecycleService( + ControlStore store, +- ILinkPolicyApplier applier, ++ LinkService links, + ControlEventBroker events) + { + private static readonly TimeSpan TicketLifetime = TimeSpan.FromMinutes(10); +@@ -16,6 +16,7 @@ public sealed class CertificateLifecycleService( + string actor, + CancellationToken cancellationToken) + { ++ using var nodeLease = await links.AcquireNodeLocksAsync([nodeId], cancellationToken); + var mutation = await store.BeginAgentReenrollmentAsync( + nodeId, request, actor, TicketLifetime, cancellationToken); + if (mutation is null) +@@ -23,35 +24,17 @@ public sealed class CertificateLifecycleService( + return null; + } + +- if (mutation.IsReplay) ++ if (!mutation.IsReplay) + { +- return mutation.Ticket; ++ PublishCertificate("agent.revoked", mutation.Ticket); + } +- +- PublishCertificate("agent.revoked", mutation.Ticket); +- foreach (var pendingLink in mutation.Links) ++ var pendingLinks = mutation.IsReplay ++ ? (await store.ListEffectiveLinksForNodeAsync(nodeId, cancellationToken)) ++ .Where(link => link.DesiredState == "Disabled") ++ : mutation.Links; ++ foreach (var pendingLink in pendingLinks) + { +- PublishLink("link.disconnecting", pendingLink); +- LinkPolicy actual; +- try +- { +- await applier.ApplyDisconnectAsync(pendingLink, cancellationToken); +- actual = await store.SetLinkActualStateAsync( +- pendingLink.Id, "Disabled", null, actor, cancellationToken) +- ?? pendingLink; +- PublishLink("link.disabled", actual); +- } +- catch (Exception exception) when (exception is not OperationCanceledException) +- { +- actual = await store.SetLinkActualStateAsync( +- pendingLink.Id, +- "Partial", +- CompactError(exception), +- actor, +- cancellationToken) +- ?? pendingLink; +- PublishLink("link.partial", actual); +- } ++ await links.ConvergeDisabledAsync(pendingLink, actor, cancellationToken); + } + + return mutation.Ticket; +@@ -85,13 +68,4 @@ public sealed class CertificateLifecycleService( + ticket.DisabledLinks), + SmmJsonContext.Default.CertificateStatusEvent)); + +- private void PublishLink(string type, LinkPolicy link) +- => events.Publish( +- type, +- link.Id, +- JsonSerializer.Serialize(link, SmmJsonContext.Default.LinkPolicy)); +- +- private static string CompactError(Exception exception) +- => exception.Message.Split(['\r', '\n'], StringSplitOptions.RemoveEmptyEntries) +- .FirstOrDefault() ?? "Policy application failed."; + } +diff --git a/src/ServerMonitorManager.Control/LinkPolicyApplier.cs b/src/ServerMonitorManager.Control/LinkPolicyApplier.cs +index 5f1fdf899f226299cfbfe45e2b147c2a3e9fd7a9..184f636d468d81d5675efecd38457f4496b4ca93 100644 +--- a/src/ServerMonitorManager.Control/LinkPolicyApplier.cs ++++ b/src/ServerMonitorManager.Control/LinkPolicyApplier.cs +@@ -8,6 +8,7 @@ public interface ILinkPolicyApplier + { + Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken); + Task ApplyDisconnectAsync(LinkPolicy link, CancellationToken cancellationToken); ++ Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken); + } + + public sealed class LinkPolicyApplier(IOptions options) : ILinkPolicyApplier +@@ -35,7 +36,26 @@ public sealed class LinkPolicyApplier(IOptions options) : ILinkP + ], + cancellationToken); + +- private async Task RunAsync(IReadOnlyList arguments, CancellationToken cancellationToken) ++ public async Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) ++ { ++ var output = await RunAsync( ++ [ ++ "link-status", ++ link.SourceNodeId, ++ link.TargetNodeId, ++ link.Protocol, ++ link.Port.ToString(System.Globalization.CultureInfo.InvariantCulture) ++ ], ++ cancellationToken); ++ return output switch ++ { ++ "active" => true, ++ "disabled" => false, ++ _ => throw new InvalidOperationException("Hub policy helper returned an invalid link status.") ++ }; ++ } ++ ++ private async Task RunAsync(IReadOnlyList arguments, CancellationToken cancellationToken) + { + var startInfo = new ProcessStartInfo + { +@@ -64,6 +84,6 @@ public sealed class LinkPolicyApplier(IOptions options) : ILinkP + ? $"Hub policy helper exited with code {process.ExitCode}." + : message); + } +- _ = await output; ++ return (await output).Trim(); + } + } +diff --git a/src/ServerMonitorManager.Control/LinkService.cs b/src/ServerMonitorManager.Control/LinkService.cs +index 1bc963ddacafb530667bb9547a7b57b018db1528..d9b59803131442ed397aabb1bfc5b9c132477fb5 100644 +--- a/src/ServerMonitorManager.Control/LinkService.cs ++++ b/src/ServerMonitorManager.Control/LinkService.cs +@@ -10,34 +10,55 @@ public sealed class LinkService( + ControlEventBroker events) + { + private readonly ConcurrentDictionary _reconciliationLocks = new(); ++ private readonly ConcurrentDictionary _nodeLocks = new(); + + public async Task CreateAsync( + LinkPolicyCreateRequest request, + string actor, + CancellationToken cancellationToken) + { ++ using var nodeLease = await AcquireNodeLocksAsync( ++ [request.SourceNodeId, request.TargetNodeId], cancellationToken); + var mutation = await store.CreateLinkMutationAsync(request, actor, cancellationToken); + var link = mutation.Link; +- if (mutation.IsReplay) ++ if (mutation.IsReplay && link.ActualState != "Connecting") + { + return link; + } +- Publish("link.connecting", link); ++ var gate = _reconciliationLocks.GetOrAdd(link.Id, static _ => new SemaphoreSlim(1, 1)); ++ await gate.WaitAsync(cancellationToken); + try + { +- await applier.ApplyConnectAsync(link, cancellationToken); +- link = await store.SetLinkActualStateAsync(link.Id, "Active", null, actor, cancellationToken) ++ var current = (await store.ListLinksAsync(cancellationToken)) ++ .SingleOrDefault(candidate => candidate.Id == link.Id) + ?? throw new InvalidOperationException("The persisted Link disappeared."); +- Publish("link.active", link); ++ if (current.DesiredState != "Active") ++ { ++ return current; ++ } ++ link = current; ++ Publish("link.connecting", link); ++ try ++ { ++ await applier.ApplyConnectAsync(link, cancellationToken); ++ await VerifyFactualStateAsync(link, expectedConnected: true, cancellationToken); ++ link = await store.SetLinkActualStateAsync(link.Id, "Active", null, actor, cancellationToken) ++ ?? throw new InvalidOperationException("The persisted Link disappeared."); ++ Publish("link.active", link); ++ } ++ catch (Exception exception) when (exception is not OperationCanceledException) ++ { ++ link = await store.SetLinkActualStateAsync( ++ link.Id, "Failed", CompactError(exception), actor, cancellationToken) ++ ?? link; ++ Publish("link.failed", link); ++ } ++ return link; + } +- catch (Exception exception) when (exception is not OperationCanceledException) ++ finally + { +- link = await store.SetLinkActualStateAsync( +- link.Id, "Failed", CompactError(exception), actor, cancellationToken) +- ?? link; +- Publish("link.failed", link); ++ gate.Release(); + } +- return link; + } + + public async Task DisableAsync( +@@ -45,6 +66,24 @@ public sealed class LinkService( + LinkPolicyDisableRequest request, + string actor, + CancellationToken cancellationToken) ++ { ++ var gate = _reconciliationLocks.GetOrAdd(id, static _ => new SemaphoreSlim(1, 1)); ++ await gate.WaitAsync(cancellationToken); ++ try ++ { ++ return await DisableCoreAsync(id, request, actor, cancellationToken); ++ } ++ finally ++ { ++ gate.Release(); ++ } ++ } ++ ++ private async Task DisableCoreAsync( ++ string id, ++ LinkPolicyDisableRequest request, ++ string actor, ++ CancellationToken cancellationToken) + { + var mutation = await store.BeginDisableLinkMutationAsync(id, request, actor, cancellationToken); + if (mutation is null) +@@ -52,63 +91,90 @@ public sealed class LinkService( + return null; + } + var link = mutation.Link; +- if (mutation.IsReplay) ++ if (mutation.IsReplay && link.ActualState == "Disabled") + { + return link; + } +- Publish("link.disconnecting", link); ++ if (!mutation.IsReplay) ++ { ++ Publish("link.disconnecting", link); ++ } ++ return await ConvergeDisabledCoreAsync(link, actor, cancellationToken); ++ } ++ ++ internal async Task ConvergeDisabledAsync( ++ LinkPolicy link, ++ string actor, ++ CancellationToken cancellationToken) ++ { ++ var gate = _reconciliationLocks.GetOrAdd(link.Id, static _ => new SemaphoreSlim(1, 1)); ++ await gate.WaitAsync(cancellationToken); + try + { +- await applier.ApplyDisconnectAsync(link, cancellationToken); +- link = await store.SetLinkActualStateAsync(id, "Disabled", null, actor, cancellationToken) ?? link; +- Publish("link.disabled", link); ++ return await ConvergeDisabledCoreAsync(link, actor, cancellationToken); + } +- catch (Exception exception) when (exception is not OperationCanceledException) ++ finally + { +- link = await store.SetLinkActualStateAsync( +- id, "Partial", CompactError(exception), actor, cancellationToken) +- ?? link; +- Publish("link.partial", link); ++ gate.Release(); + } +- return link; + } + +- public async Task ReconcileDisabledLinksForNodeAsync( ++ public async Task ReconcileLinksForNodeAsync( + string nodeId, + CancellationToken cancellationToken) + { + var reconciled = 0; + var failed = 0; + var links = await store.ListEffectiveLinksForNodeAsync(nodeId, cancellationToken); +- foreach (var candidate in links.Where(link => link.DesiredState == "Disabled")) ++ foreach (var candidate in links) + { ++ using var nodeLease = await AcquireNodeLocksAsync( ++ [candidate.SourceNodeId, candidate.TargetNodeId], cancellationToken); + var gate = _reconciliationLocks.GetOrAdd(candidate.Id, static _ => new SemaphoreSlim(1, 1)); + await gate.WaitAsync(cancellationToken); + try + { + var current = (await store.ListEffectiveLinksForNodeAsync(nodeId, cancellationToken)) +- .SingleOrDefault(link => link.Id == candidate.Id && link.DesiredState == "Disabled"); ++ .SingleOrDefault(link => link.Id == candidate.Id); + if (current is null) + { + continue; + } + + var actor = $"system:reconnect:{nodeId}"; ++ var expectedConnected = current.DesiredState == "Active"; ++ var pendingState = expectedConnected ? "Connecting" : "Disconnecting"; ++ var completedState = expectedConnected ? "Active" : "Disabled"; ++ var completedEvent = expectedConnected ? "link.active" : "link.disabled"; ++ var failureState = expectedConnected ? "Failed" : "Partial"; ++ var failureEvent = expectedConnected ? "link.failed" : "link.partial"; + var link = await store.SetLinkActualStateAsync( +- current.Id, "Disconnecting", null, actor, cancellationToken) ?? current; ++ current.Id, pendingState, null, actor, cancellationToken) ?? current; + Publish("link.reconciling", link); + try + { +- await applier.ApplyDisconnectAsync(link, cancellationToken); ++ var isConnected = await applier.IsConnectedAsync(link, cancellationToken); ++ if (isConnected != expectedConnected) ++ { ++ if (expectedConnected) ++ { ++ await applier.ApplyConnectAsync(link, cancellationToken); ++ } ++ else ++ { ++ await applier.ApplyDisconnectAsync(link, cancellationToken); ++ } ++ await VerifyFactualStateAsync(link, expectedConnected, cancellationToken); ++ } + link = await store.SetLinkActualStateAsync( +- link.Id, "Disabled", null, actor, cancellationToken) ?? link; +- Publish("link.disabled", link); ++ link.Id, completedState, null, actor, cancellationToken) ?? link; ++ Publish(completedEvent, link); + } + catch (Exception exception) when (exception is not OperationCanceledException) + { + link = await store.SetLinkActualStateAsync( +- link.Id, "Partial", CompactError(exception), actor, cancellationToken) ?? link; +- Publish("link.partial", link); ++ link.Id, failureState, CompactError(exception), actor, cancellationToken) ?? link; ++ Publish(failureEvent, link); + failed++; + } + reconciled++; +@@ -143,7 +209,7 @@ public sealed class LinkService( + + if (current.DesiredState == "Active") + { +- var result = await DisableAsync( ++ var result = await DisableCoreAsync( + current.Id, + new LinkPolicyDisableRequest(Guid.NewGuid().ToString()), + "system:ttl", +@@ -165,6 +231,7 @@ public sealed class LinkService( + try + { + await applier.ApplyDisconnectAsync(retrying, cancellationToken); ++ await VerifyFactualStateAsync(retrying, expectedConnected: false, cancellationToken); + var completed = await store.SetLinkActualStateAsync( + retrying.Id, "Disabled", null, "system:ttl-retry", cancellationToken) ?? retrying; + Publish("link.disabled", completed); +@@ -193,9 +260,95 @@ public sealed class LinkService( + link.Id, + JsonSerializer.Serialize(link, SmmJsonContext.Default.LinkPolicy)); + ++ internal async Task AcquireNodeLocksAsync( ++ IEnumerable nodeIds, ++ CancellationToken cancellationToken) ++ { ++ var gates = nodeIds ++ .Distinct(StringComparer.Ordinal) ++ .Order(StringComparer.Ordinal) ++ .Select(nodeId => _nodeLocks.GetOrAdd(nodeId, static _ => new SemaphoreSlim(1, 1))) ++ .ToArray(); ++ var acquired = 0; ++ try ++ { ++ foreach (var gate in gates) ++ { ++ await gate.WaitAsync(cancellationToken); ++ acquired++; ++ } ++ return new LockLease(gates); ++ } ++ catch ++ { ++ for (var index = acquired - 1; index >= 0; index--) ++ { ++ gates[index].Release(); ++ } ++ throw; ++ } ++ } ++ ++ private async Task ConvergeDisabledCoreAsync( ++ LinkPolicy link, ++ string actor, ++ CancellationToken cancellationToken) ++ { ++ var current = (await store.ListLinksAsync(cancellationToken)) ++ .SingleOrDefault(candidate => candidate.Id == link.Id) ?? link; ++ if (current.DesiredState != "Disabled") ++ { ++ return current; ++ } ++ try ++ { ++ if (await applier.IsConnectedAsync(current, cancellationToken)) ++ { ++ await applier.ApplyDisconnectAsync(current, cancellationToken); ++ await VerifyFactualStateAsync(current, expectedConnected: false, cancellationToken); ++ } ++ if (current.ActualState != "Disabled" || current.LastError is not null) ++ { ++ current = await store.SetLinkActualStateAsync( ++ current.Id, "Disabled", null, actor, cancellationToken) ?? current; ++ Publish("link.disabled", current); ++ } ++ } ++ catch (Exception exception) when (exception is not OperationCanceledException) ++ { ++ current = await store.SetLinkActualStateAsync( ++ current.Id, "Partial", CompactError(exception), actor, cancellationToken) ?? current; ++ Publish("link.partial", current); ++ } ++ return current; ++ } ++ ++ private async Task VerifyFactualStateAsync( ++ LinkPolicy link, ++ bool expectedConnected, ++ CancellationToken cancellationToken) ++ { ++ if (await applier.IsConnectedAsync(link, cancellationToken) != expectedConnected) ++ { ++ throw new InvalidOperationException( ++ $"Factual Link policy is {(expectedConnected ? "disabled" : "active")} after application."); ++ } ++ } ++ + private static string CompactError(Exception exception) +- => exception.Message.Split(['\r', '\n'], StringSplitOptions.RemoveEmptyEntries) ++ => exception.Message.Split([(char)13, '\n'], StringSplitOptions.RemoveEmptyEntries) + .FirstOrDefault() ?? "Policy application failed."; ++ ++ private sealed class LockLease(SemaphoreSlim[] gates) : IDisposable ++ { ++ public void Dispose() ++ { ++ for (var index = gates.Length - 1; index >= 0; index--) ++ { ++ gates[index].Release(); ++ } ++ } ++ } + } + + public sealed record LinkExpirationResult(int Disabled, int Failed); +diff --git a/src/ServerMonitorManager.Control/Program.cs b/src/ServerMonitorManager.Control/Program.cs +index 12a320696487819fae0062d412051a81b5f55b29..a898afb9681c45fb4732f95cba62b0dd67086335 100644 +--- a/src/ServerMonitorManager.Control/Program.cs ++++ b/src/ServerMonitorManager.Control/Program.cs +@@ -353,7 +353,7 @@ agents.MapPost("/heartbeat", async ( + cancellationToken); + if (mutation.RequiresReconciliation) + { +- var reconciliation = await linkService.ReconcileDisabledLinksForNodeAsync( ++ var reconciliation = await linkService.ReconcileLinksForNodeAsync( + heartbeat.NodeId, cancellationToken); + if (reconciliation.Failed == 0) + { +diff --git a/src/ServerMonitorManager.Desktop/MainPage.xaml.cs b/src/ServerMonitorManager.Desktop/MainPage.xaml.cs +index d64ab3969c002e4f841d94bdd0df9c623b194a42..4716803c1d821e45ef18cd166f3d5f6ce937e267 100644 +--- a/src/ServerMonitorManager.Desktop/MainPage.xaml.cs ++++ b/src/ServerMonitorManager.Desktop/MainPage.xaml.cs +@@ -1014,8 +1014,7 @@ public sealed partial class MainPage : Page + } + + MeshLinks.Clear(); +- foreach (var link in links.Where(link => +- link.DesiredState != "Disabled" || link.ActualState == "Partial")) ++ foreach (var link in links) + { + MeshLinks.Add(new MeshLinkViewModel( + link.SourceNodeId, +@@ -1026,11 +1025,15 @@ public sealed partial class MainPage : Page + link.ExpiresAt?.ToUnixTimeSeconds() ?? 0, + link.ActualState, + link.Version, +- link.Id)); ++ link.Id, ++ link.DesiredState, ++ link.ActualState, ++ link.LastError)); + } + +- ActiveLinksValueText.Text = MeshLinks.Count.ToString(CultureInfo.InvariantCulture); +- MeshStatusText.Text = $"Control · {MeshNodes.Count} узлов · {MeshLinks.Count} активных связей"; ++ var activeLinks = MeshLinks.Count(link => link.ActualState == "Active"); ++ ActiveLinksValueText.Text = activeLinks.ToString(CultureInfo.InvariantCulture); ++ MeshStatusText.Text = $"Control · {MeshNodes.Count} узлов · {activeLinks} активных · {MeshLinks.Count} политик"; + if (showSuccess) + { + ShowInfo("Control Hub обновлён", MeshStatusText.Text, InfoBarSeverity.Success); +diff --git a/src/ServerMonitorManager.Desktop/MeshModels.cs b/src/ServerMonitorManager.Desktop/MeshModels.cs +index 31792e8c495acb64edda61535d5fd06ec0a39a2f..c899d62da25cf17401b44ed951ae027c4c0fe1dc 100644 +--- a/src/ServerMonitorManager.Desktop/MeshModels.cs ++++ b/src/ServerMonitorManager.Desktop/MeshModels.cs +@@ -28,7 +28,10 @@ public sealed class MeshLinkViewModel + long expiresUnix, + string state, + long version, +- string? id = null) ++ string? id = null, ++ string? desiredState = null, ++ string? actualState = null, ++ string? lastError = null) + { + Source = source; + Target = target; +@@ -39,6 +42,9 @@ public sealed class MeshLinkViewModel + State = state; + Version = version; + Id = id; ++ DesiredState = desiredState ?? state; ++ ActualState = actualState ?? state; ++ LastError = lastError; + } + + public string Source { get; set; } +@@ -50,8 +56,17 @@ public sealed class MeshLinkViewModel + public string State { get; set; } + public long Version { get; set; } + public string? Id { get; set; } ++ public string DesiredState { get; set; } ++ public string ActualState { get; set; } ++ public string? LastError { get; set; } ++ public bool HasDrift => !string.Equals(DesiredState, ActualState, StringComparison.Ordinal); ++ public string DesiredStatusText => $"Желаемое состояние: {DesiredState}"; ++ public string ActualStatusText => $"Фактическое состояние: {ActualState}"; ++ public string DriftText => HasDrift ? "Расхождение: требуется сверка политики" : "Расхождение: нет"; ++ public string ErrorText => string.IsNullOrWhiteSpace(LastError) ? "Ошибка: нет" : $"Ошибка: {LastError}"; ++ public string VersionText => $"Версия политики: {Version}"; + public string ExpirationText => ExpiresUnix == 0 + ? "вручную" + : $"до {DateTimeOffset.FromUnixTimeSeconds(ExpiresUnix).ToLocalTime():dd.MM HH:mm}"; +- public string Label => $"{Source} → {Target} · {Protocol.ToUpperInvariant()}/{Port} · {Cidr} · {ExpirationText} · {State} v{Version}"; ++ public string Label => $"{Source} → {Target} · {Protocol.ToUpperInvariant()}/{Port} · {Cidr} · {ExpirationText}"; + } +diff --git a/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml b/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml +index aec83f5f4ac778f10ec8adff54bf047eac433f8c..32af5f391c7b27023d4c8a57474b87b69155dfbb 100644 +--- a/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml ++++ b/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml +@@ -68,7 +68,7 @@ + + + +- ++ + + + +@@ -76,7 +76,11 @@ + + + +- ++ ++ ++ ++ ++ + + + +diff --git a/tests/ServerMonitorManager.Control.Tests/ControlMaintenanceTests.cs b/tests/ServerMonitorManager.Control.Tests/ControlMaintenanceTests.cs +index 45eba97302221bae6998a5b71503021ce13dcc88..aa5b423e8fed4e12c3161e115eae2b3fc8af6084 100644 +--- a/tests/ServerMonitorManager.Control.Tests/ControlMaintenanceTests.cs ++++ b/tests/ServerMonitorManager.Control.Tests/ControlMaintenanceTests.cs +@@ -228,14 +228,25 @@ public sealed class ControlMaintenanceTests : IAsyncDisposable + public int DisconnectCalls { get; private set; } + + public Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken) +- => Task.CompletedTask; ++ { ++ IsConnected = true; ++ return Task.CompletedTask; ++ } + + public Task ApplyDisconnectAsync(LinkPolicy link, CancellationToken cancellationToken) + { + DisconnectCalls++; +- return FailDisconnect +- ? Task.FromException(new InvalidOperationException("simulated firewall failure")) +- : Task.CompletedTask; ++ if (FailDisconnect) ++ { ++ return Task.FromException(new InvalidOperationException("simulated firewall failure")); ++ } ++ IsConnected = false; ++ return Task.CompletedTask; + } ++ ++ private bool IsConnected { get; set; } ++ ++ public Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) ++ => Task.FromResult(IsConnected); + } + } +diff --git a/tests/ServerMonitorManager.Control.Tests/ControlStoreTests.cs b/tests/ServerMonitorManager.Control.Tests/ControlStoreTests.cs +index aa78a888fd6e007903873381a316d4e7d8e8008f..d517b7b2f8b93348616c681a493d91ea682e7fd2 100644 +--- a/tests/ServerMonitorManager.Control.Tests/ControlStoreTests.cs ++++ b/tests/ServerMonitorManager.Control.Tests/ControlStoreTests.cs +@@ -424,7 +424,7 @@ public sealed class ControlStoreTests : IAsyncDisposable + } + + [Fact] +- public async Task ReconnectReappliesOnlyLatestDisabledPolicy() ++ public async Task ReconnectReconcilesLatestPolicyToItsDesiredFactualState() + { + var cancellationToken = TestContext.Current.CancellationToken; + var store = CreateStore(); +@@ -460,8 +460,10 @@ public sealed class ControlStoreTests : IAsyncDisposable + Assert.Equal("Disabled", stale?.DesiredState); + Assert.Equal(disconnectsBeforeStaleRequest, applier.DisconnectCalls); + +- var activeResult = await service.ReconcileDisabledLinksForNodeAsync("home", cancellationToken); +- Assert.Equal(new LinkReconciliationResult(0, 0), activeResult); ++ applier.IsConnected = false; ++ var activeResult = await service.ReconcileLinksForNodeAsync("home", cancellationToken); ++ Assert.Equal(new LinkReconciliationResult(1, 0), activeResult); ++ Assert.Equal(3, applier.ConnectCalls); + + var latest = (await store.ListEffectiveLinksForNodeAsync("home", cancellationToken)).Single(); + await service.DisableAsync( +@@ -471,10 +473,10 @@ public sealed class ControlStoreTests : IAsyncDisposable + cancellationToken); + var beforeReconnect = applier.DisconnectCalls; + +- var disabledResult = await service.ReconcileDisabledLinksForNodeAsync("home", cancellationToken); ++ var disabledResult = await service.ReconcileLinksForNodeAsync("home", cancellationToken); + + Assert.Equal(new LinkReconciliationResult(1, 0), disabledResult); +- Assert.Equal(beforeReconnect + 1, applier.DisconnectCalls); ++ Assert.Equal(beforeReconnect, applier.DisconnectCalls); + var persisted = (await store.ListEffectiveLinksForNodeAsync("home", cancellationToken)).Single(); + Assert.Equal("Disabled", persisted.DesiredState); + Assert.Equal("Disabled", persisted.ActualState); +@@ -508,7 +510,8 @@ public sealed class ControlStoreTests : IAsyncDisposable + Assert.True(first.RequiresReconciliation); + + applier.FailDisconnect = true; +- var failed = await service.ReconcileDisabledLinksForNodeAsync("home", cancellationToken); ++ applier.IsConnected = true; ++ var failed = await service.ReconcileLinksForNodeAsync("home", cancellationToken); + Assert.Equal(new LinkReconciliationResult(1, 1), failed); + var retry = await store.RecordHeartbeatAsync( + heartbeat with +@@ -521,7 +524,7 @@ public sealed class ControlStoreTests : IAsyncDisposable + Assert.True(retry.RequiresReconciliation); + + applier.FailDisconnect = false; +- var succeeded = await service.ReconcileDisabledLinksForNodeAsync("home", cancellationToken); ++ var succeeded = await service.ReconcileLinksForNodeAsync("home", cancellationToken); + Assert.Equal(new LinkReconciliationResult(1, 0), succeeded); + await store.CompleteAgentReconciliationAsync("home", cancellationToken); + var completed = await store.RecordHeartbeatAsync( +@@ -702,6 +705,129 @@ public sealed class ControlStoreTests : IAsyncDisposable + eventTypes); + } + ++ [Fact] ++ public async Task LinkServiceDoesNotPersistCommandSuccessAsFactualSuccess() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "ai-agent", "FA11", cancellationToken); ++ await EnrollAgentAsync(store, "home", "FA22", cancellationToken); ++ var applier = new CountingPolicyApplier { ConnectLeavesRuleAbsent = true }; ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ ++ var failed = await service.CreateAsync( ++ new LinkPolicyCreateRequest( ++ "ai-agent", "home", "tcp", 22, 30, "probe-test", Guid.NewGuid().ToString()), ++ "windows-pc", ++ cancellationToken); ++ ++ Assert.Equal("Active", failed.DesiredState); ++ Assert.Equal("Failed", failed.ActualState); ++ Assert.Contains("factual", failed.LastError, StringComparison.OrdinalIgnoreCase); ++ } ++ ++ [Fact] ++ public async Task DisableReplayResumesInterruptedFactualConvergence() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "ai-agent", "FB11", cancellationToken); ++ await EnrollAgentAsync(store, "home", "FB22", cancellationToken); ++ var applier = new CountingPolicyApplier(); ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ var active = await service.CreateAsync( ++ new LinkPolicyCreateRequest( ++ "ai-agent", "home", "tcp", 22, 0, "replay", Guid.NewGuid().ToString()), ++ "windows-pc", ++ cancellationToken); ++ var request = new LinkPolicyDisableRequest(Guid.NewGuid().ToString()); ++ ++ var interrupted = await store.BeginDisableLinkMutationAsync( ++ active.Id, request, "windows-pc", cancellationToken); ++ Assert.Equal("Disconnecting", interrupted!.Link.ActualState); ++ var resumed = await service.DisableAsync( ++ active.Id, request, "windows-pc", cancellationToken); ++ ++ Assert.Equal("Disabled", resumed!.DesiredState); ++ Assert.Equal("Disabled", resumed.ActualState); ++ Assert.False(applier.IsConnected); ++ Assert.Equal(1, applier.DisconnectCalls); ++ } ++ ++ [Fact] ++ public async Task ReenrollmentReplayResumesInterruptedKillSwitch() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "ai-agent", "FC11", cancellationToken); ++ await EnrollAgentAsync(store, "home", "FC22", cancellationToken); ++ var broker = new ControlEventBroker(); ++ var applier = new CountingPolicyApplier(); ++ var links = new LinkService(store, applier, broker); ++ await links.CreateAsync( ++ new LinkPolicyCreateRequest( ++ "ai-agent", "home", "tcp", 22, 0, "replay", Guid.NewGuid().ToString()), ++ "windows-pc", ++ cancellationToken); ++ var request = new CertificateReenrollmentRequest( ++ "resume interrupted kill switch", Guid.NewGuid().ToString()); ++ var interrupted = await store.BeginAgentReenrollmentAsync( ++ "ai-agent", request, "windows-pc", TimeSpan.FromMinutes(10), cancellationToken); ++ Assert.Equal("Disconnecting", Assert.Single(interrupted!.Links).ActualState); ++ var lifecycle = new CertificateLifecycleService(store, links, broker); ++ ++ var ticket = await lifecycle.ReenrollAgentAsync( ++ "ai-agent", request, "windows-pc", cancellationToken); ++ var persisted = Assert.Single(await store.ListLinksAsync(cancellationToken)); ++ ++ Assert.NotNull(ticket); ++ Assert.Equal("Disabled", persisted.DesiredState); ++ Assert.Equal("Disabled", persisted.ActualState); ++ Assert.False(applier.IsConnected); ++ Assert.Equal(1, applier.DisconnectCalls); ++ } ++ ++ [Fact] ++ public async Task ReenrollmentWaitsForReconnectAndFinishesFactuallyDisabled() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "ai-agent", "FD11", cancellationToken); ++ await EnrollAgentAsync(store, "home", "FD22", cancellationToken); ++ var broker = new ControlEventBroker(); ++ var applier = new BlockingPolicyApplier(); ++ var links = new LinkService(store, applier, broker); ++ await links.CreateAsync( ++ new LinkPolicyCreateRequest( ++ "ai-agent", "home", "tcp", 22, 0, "race", Guid.NewGuid().ToString()), ++ "windows-pc", ++ cancellationToken); ++ applier.BlockNextConnect(); ++ applier.IsConnected = false; ++ var reconciliation = links.ReconcileLinksForNodeAsync("home", cancellationToken); ++ await applier.ConnectStarted.WaitAsync(cancellationToken); ++ var lifecycle = new CertificateLifecycleService(store, links, broker); ++ var reenrollment = lifecycle.ReenrollAgentAsync( ++ "ai-agent", ++ new CertificateReenrollmentRequest("race", Guid.NewGuid().ToString()), ++ "windows-pc", ++ cancellationToken); ++ ++ Assert.False(reenrollment.IsCompleted); ++ applier.ReleaseConnect(); ++ await reconciliation; ++ Assert.NotNull(await reenrollment); ++ var persisted = Assert.Single(await store.ListLinksAsync(cancellationToken)); ++ ++ Assert.Equal("Disabled", persisted.DesiredState); ++ Assert.Equal("Disabled", persisted.ActualState); ++ Assert.False(applier.IsConnected); ++ } ++ + [Fact] + public async Task AgentReenrollmentRevokesCertificateAndDisablesLinksBeforeIssuingToken() + { +@@ -718,7 +844,7 @@ public sealed class ControlStoreTests : IAsyncDisposable + "ai-agent", "home", "tcp", 22, 60, "development", Guid.NewGuid().ToString()), + "windows-pc", + cancellationToken); +- var lifecycle = new CertificateLifecycleService(store, applier, broker); ++ var lifecycle = new CertificateLifecycleService(store, links, broker); + var request = new CertificateReenrollmentRequest("rotate compromised key", Guid.NewGuid().ToString()); + + var ticket = await lifecycle.ReenrollAgentAsync( +@@ -858,6 +984,9 @@ public sealed class ControlStoreTests : IAsyncDisposable + Assert.Equal("Disabled", persisted.DesiredState); + Assert.Equal("Disconnecting", persisted.ActualState); + } ++ ++ public Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) ++ => Task.FromResult(ConnectCalls > DisconnectCalls); + } + + private sealed class CountingPolicyApplier : ILinkPolicyApplier +@@ -865,10 +994,13 @@ public sealed class ControlStoreTests : IAsyncDisposable + public int ConnectCalls { get; private set; } + public int DisconnectCalls { get; private set; } + public bool FailDisconnect { get; set; } ++ public bool ConnectLeavesRuleAbsent { get; set; } ++ public bool IsConnected { get; set; } + + public Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken) + { + ConnectCalls++; ++ IsConnected = !ConnectLeavesRuleAbsent; + return Task.CompletedTask; + } + +@@ -879,7 +1011,54 @@ public sealed class ControlStoreTests : IAsyncDisposable + { + throw new InvalidOperationException("simulated firewall failure"); + } ++ IsConnected = false; + return Task.CompletedTask; + } ++ ++ public Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) ++ => Task.FromResult(IsConnected); ++ } ++ ++ private sealed class BlockingPolicyApplier : ILinkPolicyApplier ++ { ++ private TaskCompletionSource _connectStarted = CompletedSource(); ++ private TaskCompletionSource _releaseConnect = CompletedSource(); ++ ++ public bool IsConnected { get; set; } ++ public Task ConnectStarted => _connectStarted.Task; ++ ++ public void BlockNextConnect() ++ { ++ _connectStarted = NewSource(); ++ _releaseConnect = NewSource(); ++ } ++ ++ public void ReleaseConnect() => _releaseConnect.TrySetResult(); ++ ++ public async Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken) ++ { ++ _connectStarted.TrySetResult(); ++ await _releaseConnect.Task.WaitAsync(cancellationToken); ++ IsConnected = true; ++ } ++ ++ public Task ApplyDisconnectAsync(LinkPolicy link, CancellationToken cancellationToken) ++ { ++ IsConnected = false; ++ return Task.CompletedTask; ++ } ++ ++ public Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) ++ => Task.FromResult(IsConnected); ++ ++ private static TaskCompletionSource NewSource() ++ => new(TaskCreationOptions.RunContinuationsAsynchronously); ++ ++ private static TaskCompletionSource CompletedSource() ++ { ++ var source = NewSource(); ++ source.SetResult(); ++ return source; ++ } + } + } +diff --git a/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs b/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs +index 8f6f2d4e9d26fd54edb545a9d5eedfc17ba2355a..37006638915bb227aa04528000b82d17ef99b6d9 100644 +--- a/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs ++++ b/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs +@@ -26,6 +26,7 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + var sudoPath = Path.Combine(_directory, "sudo"); + var helperPath = Path.Combine(_directory, "policy-helper"); + var failureMarkerPath = Path.Combine(_directory, "fail-disconnect"); ++ var connectedMarkerPath = Path.Combine(_directory, "connected"); + var invocationLogPath = Path.Combine(_directory, "helper.log"); + await WriteExecutableAsync( + sudoPath, +@@ -46,10 +47,23 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + #!/bin/sh + set -eu + printf '%s\n' "$*" >> '{{ShellQuote(invocationLogPath)}}' ++ if [ "${1:-}" = "link-connect" ]; then ++ touch '{{ShellQuote(connectedMarkerPath)}}' ++ fi + if [ "${1:-}" = "link-disconnect" ] && [ -f '{{ShellQuote(failureMarkerPath)}}' ]; then + echo "nftables validation failed" >&2 + exit 23 + fi ++ if [ "${1:-}" = "link-disconnect" ]; then ++ rm -f '{{ShellQuote(connectedMarkerPath)}}' ++ fi ++ if [ "${1:-}" = "link-status" ]; then ++ if [ -f '{{ShellQuote(connectedMarkerPath)}}' ]; then ++ printf '%s\n' active ++ else ++ printf '%s\n' disabled ++ fi ++ fi + """, + cancellationToken); + +@@ -79,7 +93,7 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + var restartedStore = CreateStore(); + await restartedStore.InitializeAsync(cancellationToken); + var restartedService = CreateLinkService(restartedStore, sudoPath, helperPath); +- var failedReconciliation = await restartedService.ReconcileDisabledLinksForNodeAsync( ++ var failedReconciliation = await restartedService.ReconcileLinksForNodeAsync( + "home", cancellationToken); + Assert.Equal(new LinkReconciliationResult(1, 1), failedReconciliation); + +@@ -87,7 +101,7 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + var secondRestartStore = CreateStore(); + await secondRestartStore.InitializeAsync(cancellationToken); + var secondRestartService = CreateLinkService(secondRestartStore, sudoPath, helperPath); +- var successfulReconciliation = await secondRestartService.ReconcileDisabledLinksForNodeAsync( ++ var successfulReconciliation = await secondRestartService.ReconcileLinksForNodeAsync( + "home", cancellationToken); + Assert.Equal(new LinkReconciliationResult(1, 0), successfulReconciliation); + var persisted = Assert.Single(await secondRestartStore.ListEffectiveLinksForNodeAsync( +@@ -96,10 +110,16 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + Assert.Equal("Disabled", persisted.ActualState); + + var invocations = await File.ReadAllLinesAsync(invocationLogPath, cancellationToken); +- Assert.Equal(4, invocations.Length); ++ Assert.Equal(9, invocations.Length); + Assert.Equal("link-connect ai-agent home tcp 22 60", invocations[0]); +- Assert.All(invocations.Skip(1), invocation => +- Assert.Equal("link-disconnect ai-agent home tcp 22", invocation)); ++ Assert.Equal("link-status ai-agent home tcp 22", invocations[1]); ++ Assert.Equal("link-status ai-agent home tcp 22", invocations[2]); ++ Assert.Equal("link-disconnect ai-agent home tcp 22", invocations[3]); ++ Assert.Equal("link-status ai-agent home tcp 22", invocations[4]); ++ Assert.Equal("link-disconnect ai-agent home tcp 22", invocations[5]); ++ Assert.Equal("link-status ai-agent home tcp 22", invocations[6]); ++ Assert.Equal("link-disconnect ai-agent home tcp 22", invocations[7]); ++ Assert.Equal("link-status ai-agent home tcp 22", invocations[8]); + } + + public ValueTask DisposeAsync() +diff --git a/tests/acceptance/three-server-mesh.sh b/tests/acceptance/three-server-mesh.sh +index 423dbbcf9907f309c6b24eddf605c5e81e71e97c..761ba2f145ad3b2dc9f26746336f6d9fd8afd3e2 100644 +--- a/tests/acceptance/three-server-mesh.sh ++++ b/tests/acceptance/three-server-mesh.sh +@@ -61,6 +61,19 @@ expect_blocked() { + fi + } + ++expect_factual_status() { ++ local target="$1" ++ local expected="$2" ++ local command output ++ printf -v command '%q ' sudo /usr/local/libexec/ochenstarik-smm-policy-apply \ ++ link-status "$SOURCE_NODE_ID" "$target" tcp "$TARGET_PORT" ++ output="$(hub_ssh "$command")" ++ [[ "$output" == "$expected" ]] || { ++ echo "Unexpected factual Link status for $SOURCE_NODE_ID -> $target: $output (expected $expected)" >&2 ++ exit 1 ++ } ++} ++ + decode_base64url() { + local value="${1//-/+}" + value="${value//_/\/}" +@@ -148,15 +161,19 @@ home_link="$(create_link "$HOME_NODE_ID" 0)" + second_link="$(create_link "$SECOND_NODE_ID" 0)" + LINK_HOME_ID="$(jq -r '.id' <<<"$home_link")" + LINK_SECOND_ID="$(jq -r '.id' <<<"$second_link")" +-jq -e '.actualState == "Active"' <<<"$home_link" >/dev/null +-jq -e '.actualState == "Active"' <<<"$second_link" >/dev/null ++jq -e '.desiredState == "Active" and .actualState == "Active" and .lastError == null' <<<"$home_link" >/dev/null ++jq -e '.desiredState == "Active" and .actualState == "Active" and .lastError == null' <<<"$second_link" >/dev/null ++expect_factual_status "$HOME_NODE_ID" active ++expect_factual_status "$SECOND_NODE_ID" active + + echo '[5/11] Verifying routed access through both Links' + expect_reachable "$HOME_WG_IP" + expect_reachable "$SECOND_WG_IP" + + echo '[6/11] Disabling only the second Link' +-disable_link "$LINK_SECOND_ID" | jq -e '.actualState == "Disabled"' >/dev/null ++disable_link "$LINK_SECOND_ID" | jq -e \ ++ '.desiredState == "Disabled" and .actualState == "Disabled" and .lastError == null' >/dev/null ++expect_factual_status "$SECOND_NODE_ID" disabled + expect_reachable "$HOME_WG_IP" + expect_blocked "$SECOND_WG_IP" + +@@ -166,11 +183,16 @@ ttl_id="$(jq -r '.id' <<<"$ttl_link")" + expect_reachable "$SECOND_WG_IP" + deadline=$((SECONDS + 120)) + while ((SECONDS < deadline)); do +- state="$(api_get '/api/v1/control/links' | jq -r --arg id "$ttl_id" '.[] | select(.id == $id) | .actualState')" +- [[ "$state" == 'Disabled' ]] && break ++ state="$(api_get '/api/v1/control/links' | jq -r --arg id "$ttl_id" \ ++ '.[] | select(.id == $id) | [.desiredState, .actualState, (.lastError // "")] | @tsv')" ++ [[ "$state" == $'Disabled\tDisabled\t' ]] && break + sleep 5 + done +-[[ "${state:-}" == 'Disabled' ]] || { echo 'TTL Link did not become Disabled' >&2; exit 1; } ++[[ "${state:-}" == $'Disabled\tDisabled\t' ]] || { ++ echo "TTL Link did not factually converge to Disabled: ${state:-missing}" >&2 ++ exit 1 ++} ++expect_factual_status "$SECOND_NODE_ID" disabled + expect_blocked "$SECOND_WG_IP" + expect_reachable "$HOME_WG_IP" + +@@ -191,6 +213,8 @@ if [[ "${SMM_ACCEPT_RESTORE:-0}" == '1' ]]; then + api_get '/healthz' >/dev/null + expect_reachable "$HOME_WG_IP" + expect_blocked "$SECOND_WG_IP" ++ expect_factual_status "$HOME_NODE_ID" active ++ expect_factual_status "$SECOND_NODE_ID" disabled + else + echo '[9/11] Restore check skipped; set SMM_ACCEPT_RESTORE=1 to enable it' + fi +@@ -208,6 +232,8 @@ if [[ "${SMM_ACCEPT_REBOOT:-0}" == '1' ]]; then + done + expect_reachable "$HOME_WG_IP" + expect_blocked "$SECOND_WG_IP" ++ expect_factual_status "$HOME_NODE_ID" active ++ expect_factual_status "$SECOND_NODE_ID" disabled + else + echo '[10/11] Reboot check skipped; set SMM_ACCEPT_REBOOT=1 to enable it' + fi +diff --git a/tests/bootstrap/test-bootstrap-contract.sh b/tests/bootstrap/test-bootstrap-contract.sh +index f5aace6aef7c0cfc33b6c10678693c183622186c..a28687fe578f13929bf6965de608d7c68815a140 100755 +--- a/tests/bootstrap/test-bootstrap-contract.sh ++++ b/tests/bootstrap/test-bootstrap-contract.sh +@@ -6,6 +6,11 @@ root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" + bootstrap="$root/deploy/ochenstarik-server-monitor-manager.sh" + helper="$root/deploy/ochenstarik-smm-policy-apply" + emergency="$root/deploy/ochenstarik-smm-emergency" ++ ++grep -Fq 'if ! listing="$(/usr/sbin/nft -a list chain' "$helper" || { ++ printf '%s\n' "policy status probe must fail closed when nftables cannot be inspected" >&2 ++ exit 1 ++} + provisioning_helper_unit="$root/deploy/ochenstarik-smm-provisioning-helper.service" + + grep -Fq 'EnvironmentFile=/etc/ochenstarik-server-monitor-manager/agent.env' "$provisioning_helper_unit" +@@ -81,6 +86,17 @@ grep -Fq 'smm:source:target:tcp:22' <<<"$connect_output" + disconnect_output="$(SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$policy_state" \ + bash "$helper" link-disconnect source target tcp 22)" + grep -Fq 'smm:source:target:tcp:22' <<<"$disconnect_output" ++status_output="$(SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$policy_state" \ ++ bash "$helper" link-status source target tcp 22)" ++[[ "$status_output" == 'disabled' ]] || { ++ printf '%s\n' "policy helper returned an invalid factual status" >&2 ++ exit 1 ++} ++if SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$policy_state" \ ++ bash "$helper" link-status source target tcp 22 unexpected >/dev/null 2>&1; then ++ printf '%s\n' "policy helper unexpectedly accepted extra link-status arguments" >&2 ++ exit 1 ++fi + rm -f -- "$policy_state" + + fixture="$(mktemp -d -t smm-bootstrap-test.XXXXXXXX)" +diff --git a/tests/windows/Test-DesktopContracts.ps1 b/tests/windows/Test-DesktopContracts.ps1 +index f7fd4b1c518250bd0bfacbc8f17cbec48edb65c0..73a8028028872ccc6262e9703c85ce8a3f46e6d9 100644 +--- a/tests/windows/Test-DesktopContracts.ps1 ++++ b/tests/windows/Test-DesktopContracts.ps1 +@@ -36,7 +36,12 @@ $requiredXamlContracts = @( + 'x:Name="LinksList"', + 'AutomationProperties.Name=', + 'Click="ConnectButton_Click"', +- 'Click="DisconnectButton_Click"' ++ 'Click="DisconnectButton_Click"', ++ 'Text="{x:Bind DesiredStatusText}"', ++ 'Text="{x:Bind ActualStatusText}"', ++ 'Text="{x:Bind DriftText}"', ++ 'Text="{x:Bind ErrorText}"', ++ 'Text="{x:Bind VersionText}"' + ) + foreach ($contract in $requiredXamlContracts) { + if ($linksXaml.IndexOf($contract, [StringComparison]::Ordinal) -lt 0) { diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03.zip.sha256 b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03.zip.sha256 new file mode 100644 index 0000000..6848158 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03.zip.sha256 @@ -0,0 +1 @@ +38f02b8b8cd91b36de69e066e4debaa9345cf7f4a8ad4c09b6af265f91eef50c Task3-B2-2026-08-03.zip diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/CI_CHECKS.txt b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/CI_CHECKS.txt new file mode 100644 index 0000000..09dde04 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/CI_CHECKS.txt @@ -0,0 +1,14 @@ +Debian 12 arm64 systemd restart pass 26s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574112/job/91616266685 +Debian 12 x64 systemd restart pass 31s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574112/job/91616266677 +Debian 13 arm64 systemd restart pass 29s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574112/job/91616266707 +Debian 13 x64 systemd restart pass 36s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574112/job/91616266764 +Release archive (linux-arm64) pass 1m2s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574112/job/91616037239 +Release archive (linux-x64) pass 1m16s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574112/job/91616037167 +Ubuntu 22.04 arm64 native VM pass 15s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574112/job/91616266729 +Ubuntu 22.04 x64 native VM pass 19s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574112/job/91616266723 +Ubuntu 24.04 arm64 native VM pass 18s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574112/job/91616266681 +Ubuntu 24.04 x64 native VM pass 20s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574112/job/91616266719 +build pass 2m33s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791571112/job/91616028411 +build pass 3m17s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574137/job/91616037130 +build-and-test pass 1m57s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791571142/job/91616028152 +build-and-test pass 1m52s https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/30791574147/job/91616037352 diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/INDEPENDENT_REVIEW.md b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/INDEPENDENT_REVIEW.md new file mode 100644 index 0000000..2528805 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/INDEPENDENT_REVIEW.md @@ -0,0 +1,84 @@ +## APPROVE + +Independent read-only repair review completed against base `89ef2fd9d3e596777fba47e4a17e181e7e788993`, the full authoritative Task 3 contract, all current tracked changes, and both untracked files. + +### Findings + +- **BLOCKING:** none +- **HIGH:** none +- **MEDIUM:** none +- **LOW:** none + +No remediation is required in the reviewed diff. + +### Prior findings + +All findings from `deleg_18fa1344` are closed: + +1. **Marker ignored regular throttle — CLOSED** + - `LinkReconciliationBackgroundService.cs:33-39` maintains separate regular and backoff deadlines. + - A valid marker generation bypasses only `_nextRegularAt`; it does not bypass `_backoffUntil`. + - `LinkReconciliationTests.cs:142-166` verifies a marker created immediately after a normal pass triggers another prompt pass. + +2. **Blind completion could remove a newer generation — CLOSED** + - Emergency publication creates a UUID generation atomically under the shared root-owned flock. + - `ochenstarik-smm-policy-apply:148-176` reads and completes generations under the same lock and unlinks only an exact generation match. + - `LinkPolicyApplier.cs` strictly parses and passes the UUID. + - Both the A→B unit regression and shell contract demonstrate that completing A preserves B. + +3. **Acceptance retry exited on first mismatch — CLOSED** + - `three-server-mesh.sh:52-99` separates nonfatal `probe_*` functions from fatal final `expect_*` assertions. + - The restore loop retries factual status and actual reachable/blocked connectivity. + - The bootstrap shell test proves an initial factual mismatch can later succeed. + +4. **Configured Control with zero SSH profiles did not reconstruct banner — CLOSED** + - `MainPage.xaml.cs:164-167` refreshes when either profiles exist or Control is configured. + - `MainPage.xaml.cs:744-750` independently refreshes persisted Control state with zero SSH profiles. + - Newest natural-key policy state reconstructs and clears the banner; the shared error is suppressed from individual rows. + +5. **Localized nft stderr classification — CLOSED** + - `ochenstarik-smm-policy-apply:4` forces `LC_ALL=C`. + - Exit `79` plus exact stderr `mesh.firewall-unavailable` is required for the typed exception. + - Unknown diagnostics remain generic fail-closed errors. + +### Task 3 / B-2 DoD map + +- Immediate startup and periodic all-effective-policy reconciliation: **implemented** +- Active rule restoration without heartbeat: **implemented and unit-covered** +- Disabled orphan removal plus `link.orphan-removed`: **implemented and covered** +- One aggregate unavailable event/state, zero later mutations: **implemented and covered** +- Emergency marker publication and prompt scheduling: **implemented and covered** +- Marker retention on unavailable, failure, cancellation, and cleanup failure: **implemented** +- Generation-safe marker completion: **implemented and covered** +- One factual convergence implementation for create, disable, reconnect, full pass, TTL, and retry: **confirmed** +- M1 `GetLinkAsync` and L1 readable CR/LF split: **fixed** +- Desktop durable banner reconstruction/recovery and row-error suppression: **implemented** +- Documentation at `docs/linux-bootstrap.md`: **aligned with implementation** +- Acceptance harness restore step: **implemented**, including factual and functional checks +- Physical acceptance: **PENDING** +- Linux real-process integration: **CI-required; not locally established in this Windows review** + +### Boundaries and concurrency + +- **Sudo/argv boundary:** strict. Control uses `ProcessStartInfo.ArgumentList`, `sudo -n`, and the fixed helper path; no shell interpolation was introduced. Helper actions enforce exact arity, UUID format, node IDs, protocol, port, and TTL. +- **Locking:** paths requiring both lock classes acquire sorted ordinal node locks before the per-Link gate. Bulk unavailable marking releases the current locks before reacquiring the established hierarchy. No inverted/new lock class was introduced. +- **Scheduling:** one pass gate prevents overlap; ordinary passes are interval-throttled; marker generations bypass only the regular deadline; shared failure uses bounded backoff. +- **Cancellation:** `OperationCanceledException` is preserved, and marker completion occurs only after a successful, failure-free pass. + +### Scope decisions + +- **M2, M4, M5:** explicitly deferred in `docs/roadmap.md` with bounded rationale. This satisfies the decision requirement but does not mark those debts complete. +- **Block C:** untouched; no Block C implementation is included in this diff. +- **Overall status:** candidate implementation is approved, but Block B/Task 3 must remain **merged/verified, physical acceptance pending**, not closed. Required topology inputs and the real `SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1` run are still absent. + +### Verification + +- `bash -n` for changed shell scripts: **PASS** +- `tests/bootstrap/test-bootstrap-contract.sh`: **PASS** (`BOOTSTRAP_CONTRACT=PASS`) +- `git diff --check`: **PASS** +- Final worktree status matched the initial reviewed modifications/untracked files. +- Local .NET rerun was unavailable because `dotnet` is not installed or discoverable on this worker. I therefore did not independently reproduce the supplied fresh 76/76 Control result; the orchestrator’s stated Control/Desktop/build evidence remains the source for those checks. + +### Files + +- **Created or modified by this review:** none. \ No newline at end of file diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/PATCH_VERIFICATION.txt b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/PATCH_VERIFICATION.txt new file mode 100644 index 0000000..820bc16 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/PATCH_VERIFICATION.txt @@ -0,0 +1,9 @@ +PATCH_NONZERO=PASS +PATCH_BYTES=90796 +PATCH_NUMSTAT_PATHS=21 +CLEAN_BASE=89ef2fd9d3e596777fba47e4a17e181e7e788993 +CLEAN_BASE_APPLY_CHECK=PASS +APPLIED_CHANGED_PATHS=21 +APPLIED_DIFF_CHECK=PASS +TEMP_ASCII_COPY_USED_FOR_GIT_BASH=YES +TEMP_ASCII_COPY_CLEANED=YES diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/REPORT.md b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/REPORT.md new file mode 100644 index 0000000..4a011dd --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/REPORT.md @@ -0,0 +1,49 @@ +# Server Monitor Manager — Task 3 / B-2 + +## Статус + +**Verified and merged; physical acceptance pending.** + +- PR: https://github.com/ochenstarik-ui/server-monitor-manager/pull/12 +- Base: `89ef2fd9d3e596777fba47e4a17e181e7e788993` +- Reviewed implementation commit: `c757920791673dbc34c4a1e826caf16f6ba07da1` +- Squash merge commit: `b11c277ac7f79a18670932eca4622982d9ff48e0` +- Merged at: `2026-08-03T06:55:49Z` +- Scope: 21 files, 1113 insertions, 172 deletions + +## Выполнено + +- Добавлена немедленная и периодическая реконсиляция всех effective Link-политик независимо от heartbeat/reconnect. +- Все create/disable/reconnect/background/retry paths используют один factual convergence path с порядком locks `sorted endpoint node locks → per-Link gate`. +- Добавлен интервал `Control__LinkReconciliationSeconds`: default 300, диапазон 30–3600. +- Реализован typed global state `mesh.firewall-unavailable` с прекращением дальнейших firewall mutations в текущем pass и bounded backoff. +- Добавлен generation-aware root marker для `firewall-restore`/`mesh-enable`: atomic publish, `root:root 0600`, общий root-owned flock, exact-generation consume. +- Сохранён strict privileged-helper argv boundary; неизвестные nft errors остаются fail-closed; диагностика стабилизирована через `LC_ALL=C`. +- Desktop показывает единый глобальный firewall banner, восстанавливает его из persisted Link state и event stream, включая конфигурацию Control без SSH profiles. +- Исправлены M1 (CR/LF compaction) и L1 (direct Link lookup вместо repeated O(N) list scan). +- Acceptance harness расширен сценариями firewall restore и короткого Hub restart/reboot с factual и connectivity probes. + +## Review + +Независимый full-contract repair review: **APPROVE**. + +- BLOCKING: 0 +- HIGH: 0 +- MEDIUM: 0 +- LOW: 0 + +Полный verdict сохранён в `INDEPENDENT_REVIEW.md`. + +## Отложенный scope + +M2, M4 и M5 явно перенесены в отдельный B-3 PR. Block C не включён. + +## Physical acceptance + +Не выполнена: `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE` отсутствуют. + +CI, unit/integration/contract tests и mocks не заменяют physical acceptance. Для окончательного принятия требуется реальная topology и команда: + +`SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh` + +До её успешного выполнения Block B/B6 не обозначается как accepted. diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/SHA256SUMS b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/SHA256SUMS new file mode 100644 index 0000000..8abeb08 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/SHA256SUMS @@ -0,0 +1,7 @@ +a5414fd13faad0fa114141d3336300d5088801719edff34ceb054db59a89e3b6 CI_CHECKS.txt +675ace8165b462d0b4ced2493d8d1e05618c30d88137bdc9266f4f412b8d08a0 INDEPENDENT_REVIEW.md +eb34d1894baee9d9a7b759dfabb42e2e037d45cba4cc0e0e281c5c12ecffbb43 PATCH_VERIFICATION.txt +133053329be5fa747e5f501c809f226e458bf732c458fc84a70fe729a33fe0ca REPORT.md +ae6d5405abb82c59d5fc3d16dcb622ff1e361a4f41ca3b7e05cc46244f364cac SOURCE_STATE.txt +d0419db7666fa079e851f762644d9c211ec232d2bc97d49dacde236da45e1f7e Task3-B2.patch +1e870f70c59f86dd34a2dce2fecf55f486d980ec1f6c94f38a50f5fd6a39d42b TEST_EVIDENCE.md diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/SOURCE_STATE.txt b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/SOURCE_STATE.txt new file mode 100644 index 0000000..748a874 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/SOURCE_STATE.txt @@ -0,0 +1,6 @@ +PR_URL=https://github.com/ochenstarik-ui/server-monitor-manager/pull/12 +BASE_SHA=89ef2fd9d3e596777fba47e4a17e181e7e788993 +IMPLEMENTATION_SHA=c757920791673dbc34c4a1e826caf16f6ba07da1 +MERGE_SHA=b11c277ac7f79a18670932eca4622982d9ff48e0 +MERGED_AT=2026-08-03T06:55:49Z +DELIVERY_STATUS=verified_and_merged_physical_acceptance_pending diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/TEST_EVIDENCE.md b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/TEST_EVIDENCE.md new file mode 100644 index 0000000..a1851d2 --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/TEST_EVIDENCE.md @@ -0,0 +1,60 @@ +# Test evidence — Task 3 / B-2 + +Evidence date: `2026-08-03`. + +## Local pre-merge + +- Control Release suite: **76/76 passed**, 0 failed, 0 skipped. +- Desktop Security Release suite: **12/12 passed**, 0 failed, 0 skipped. +- Desktop Release x64 build: **0 warnings, 0 errors**. +- `bash -n` for helper, emergency, bootstrap contract and acceptance harness: **PASS**. +- Bootstrap/helper contract: `BOOTSTRAP_CONTRACT=PASS`. +- Windows Desktop contract: `Windows desktop contracts passed.` +- `git diff --check`: **PASS**. +- Fresh OS-safe ad-hoc verification: `HERMES_AD_HOC_TASK3_CHECKPOINT=PASS`. + +Focused reconciliation evidence additionally covered: + +- marker created immediately after a normal pass triggers a prompt pass; +- completion of observed generation A cannot consume replacement generation B; +- marker does not bypass typed firewall-unavailable backoff; +- unchanged second pass performs no connect/disconnect mutation; +- unavailable firewall produces one aggregate event and no later mutations; +- acceptance factual mismatch can retry and later converge without terminating the shell. + +## Independent review + +Full authoritative Task 3 contract and all 21 changed/new files were reviewed against base `89ef2fd9d3e596777fba47e4a17e181e7e788993`. + +Verdict: **APPROVE**, with 0 BLOCKING, 0 HIGH, 0 MEDIUM and 0 LOW findings. + +## GitHub CI — PR #12 + +All **14/14** reported checks passed: + +- Linux control and agent: 2 × `build-and-test`; +- Windows build: 2 × `build`; +- release archives: linux-x64 and linux-arm64; +- Debian 12/13 x64/arm64 systemd restart; +- Ubuntu 22.04/24.04 x64/arm64 native VM. + +Exact check names, durations and URLs are saved in `CI_CHECKS.txt`. + +## Post-merge main + +Verified at `b11c277ac7f79a18670932eca4622982d9ff48e0`: + +- Control Release: **76/76 passed**. +- Desktop Release x64: **0 warnings, 0 errors**. +- Desktop Security command: exit **0**; pre-merge counted run was 12/12 on the identical reviewed tree. +- Bootstrap/helper contract: **PASS**. +- Windows Desktop contract: **PASS**. +- shell syntax and `git diff --check`: **PASS**. + +## Patch verification + +`Task3-B2.patch` represents exact base `89ef2fd…` → merge `b11c277…` content and is apply-tested against a clean detached base worktree. Result is recorded in `PATCH_VERIFICATION.txt`. + +## Not performed + +Physical three-server acceptance was **not run** because all required SSH/topology inputs were unset. Status remains **verified and merged; physical acceptance pending**. diff --git a/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/Task3-B2.patch b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/Task3-B2.patch new file mode 100644 index 0000000..eae528b --- /dev/null +++ b/agents/_salvage-2026-08-18/panel-control/Старые задачи/Task3-B2-2026-08-03/Task3-B2.patch @@ -0,0 +1,1922 @@ +diff --git a/deploy/ochenstarik-server-monitor-manager.sh b/deploy/ochenstarik-server-monitor-manager.sh +index d6957af..d043fbc 100755 +--- a/deploy/ochenstarik-server-monitor-manager.sh ++++ b/deploy/ochenstarik-server-monitor-manager.sh +@@ -494,6 +494,7 @@ Control__CertificateAuthorityPath=$ETC_DIR/control-ca.pfx + Control__BackupDirectory=$STATE_DIR/backups + Control__HubHelperPath=$POLICY_HELPER + Control__PrivilegeEscalationPath=/usr/bin/sudo ++Control__LinkReconciliationSeconds=300 + EOF + printf '%s\n' "https://$public_host:$port" >"$ETC_DIR/control-public-url" + chown root:"$CONTROL_USER" "$ETC_DIR/control.env" +diff --git a/deploy/ochenstarik-smm-emergency b/deploy/ochenstarik-smm-emergency +index 51cbad9..40c0415 100755 +--- a/deploy/ochenstarik-smm-emergency ++++ b/deploy/ochenstarik-smm-emergency +@@ -1,11 +1,14 @@ + #!/usr/bin/env bash + set -Eeuo pipefail + IFS=$'\n\t' ++umask 077 + + readonly PROGRAM="ochenstarik-smm-emergency" + readonly STATE_DIR="/var/lib/ochenstarik-server-monitor-manager" + readonly ETC_DIR="/etc/ochenstarik-server-monitor-manager" + readonly MARKER="$STATE_DIR/mesh/emergency-disabled" ++readonly RECONCILE_MARKER="$STATE_DIR/mesh/reconcile-requested" ++readonly RECONCILE_LOCK="$STATE_DIR/mesh/reconcile-requested.lock" + readonly CONTROL_UNIT="ochenstarik-smm-control.service" + readonly AGENT_UNIT="ochenstarik-smm-agent.service" + readonly FIREWALL_UNIT="ochenstarik-smm-firewall.service" +@@ -71,6 +74,25 @@ delete_project_firewall() { + fi + } + ++request_reconciliation() { ++ local marker_directory temporary_marker generation ++ marker_directory="$(dirname "$RECONCILE_MARKER")" ++ install -d -o root -g root -m 0700 "$marker_directory" ++ exec 9>"$RECONCILE_LOCK" ++ chown root:root "$RECONCILE_LOCK" ++ chmod 0600 "$RECONCILE_LOCK" ++ /usr/bin/flock -x 9 ++ generation="$("$temporary_marker" \ ++ || ! chown root:root "$temporary_marker" \ ++ || ! chmod 0600 "$temporary_marker" \ ++ || ! mv -f -- "$temporary_marker" "$RECONCILE_MARKER"; then ++ rm -f -- "$temporary_marker" ++ fail "could not create the Link reconciliation request" ++ fi ++} ++ + mesh_disable() { + require_root + systemctl disable --now "$WIREGUARD_UNIT" 2>/dev/null || true +@@ -97,6 +119,7 @@ restore_project_firewall() { + if systemctl list-unit-files "$FIREWALL_UNIT" --no-legend 2>/dev/null | grep -q "^$FIREWALL_UNIT"; then + systemctl enable "$FIREWALL_UNIT" >/dev/null + fi ++ request_reconciliation + log "Base deny-by-default Mesh firewall restored; Control must reconcile active Links." + } + +@@ -108,6 +131,7 @@ mesh_enable() { + fi + systemctl enable "$WIREGUARD_UNIT" >/dev/null + systemctl restart "$WIREGUARD_UNIT" ++ request_reconciliation + rm -f -- "$MARKER" + log "Mesh enabled locally." + } +diff --git a/deploy/ochenstarik-smm-policy-apply b/deploy/ochenstarik-smm-policy-apply +index 557e01e..87b3392 100755 +--- a/deploy/ochenstarik-smm-policy-apply ++++ b/deploy/ochenstarik-smm-policy-apply +@@ -1,23 +1,33 @@ + #!/usr/bin/env bash + set -Eeuo pipefail + IFS=$'\n\t' ++export LC_ALL=C ++umask 077 + + readonly TABLE_FAMILY="inet" + readonly TABLE_NAME="ochenstarik_smm" + readonly CHAIN_NAME="links" + + fail() { printf '%s\n' "policy helper: $*" >&2; exit 78; } ++firewall_unavailable() { printf '%s\n' "mesh.firewall-unavailable" >&2; exit 79; } + + testing="${SMM_POLICY_TESTING:-0}" + if [[ "$testing" != "1" ]]; then + [[ ${EUID:-$(id -u)} -eq 0 ]] || fail "root is required" + readonly STATE_FILE="/var/lib/ochenstarik-server-monitor-manager/mesh/nodes.tsv" ++ readonly RECONCILE_MARKER="/var/lib/ochenstarik-server-monitor-manager/mesh/reconcile-requested" ++ readonly RECONCILE_LOCK="/var/lib/ochenstarik-server-monitor-manager/mesh/reconcile-requested.lock" ++ readonly FLOCK_COMMAND="/usr/bin/flock" + else +- readonly STATE_FILE="${SMM_POLICY_STATE_FILE:?SMM_POLICY_STATE_FILE is required in testing mode}" ++ readonly STATE_FILE="${SMM_POLICY_STATE_FILE:-/dev/null}" ++ readonly RECONCILE_MARKER="${SMM_POLICY_RECONCILE_MARKER:-${TMPDIR:-/tmp}/smm-policy-reconcile-requested}" ++ readonly RECONCILE_LOCK="${SMM_POLICY_RECONCILE_LOCK:-${RECONCILE_MARKER}.lock}" ++ readonly FLOCK_COMMAND="${SMM_POLICY_FLOCK:-/usr/bin/flock}" + fi + + node_pattern='^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$' + ipv4_pattern='^([0-9]{1,3}\.){3}[0-9]{1,3}$' ++generation_pattern='^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$' + + validate_node_id() { + [[ "$1" =~ $node_pattern ]] || fail "invalid node id" +@@ -59,20 +69,38 @@ run_nft() { + fi + } + +-rule_exists() { +- local comment="$1" listing ++inspect_firewall() { ++ local listing + if [[ "$testing" == "1" ]]; then +- return 1 ++ [[ "${SMM_POLICY_FIREWALL_UNAVAILABLE:-0}" != "1" ]] || firewall_unavailable ++ [[ -z "${SMM_POLICY_FIREWALL_ERROR:-}" ]] \ ++ || fail "could not inspect nftables Link policy: $SMM_POLICY_FIREWALL_ERROR" ++ return 0 ++ fi ++ if listing="$(/usr/sbin/nft -a list chain "$TABLE_FAMILY" "$TABLE_NAME" "$CHAIN_NAME" 2>&1)"; then ++ printf '%s\n' "$listing" ++ return 0 + fi +- if ! listing="$(/usr/sbin/nft -a list chain "$TABLE_FAMILY" "$TABLE_NAME" "$CHAIN_NAME")"; then +- fail "could not inspect nftables Link policy" ++ if grep -Eiq 'No such file or directory|does not exist' <<<"$listing"; then ++ firewall_unavailable + fi ++ fail "could not inspect nftables Link policy: ${listing%%$'\n'*}" ++} ++ ++ensure_firewall_available() { ++ inspect_firewall >/dev/null ++} ++ ++rule_exists() { ++ local comment="$1" listing ++ listing="$(inspect_firewall)" + grep -Fq "comment \"$comment\"" <<<"$listing" + } + + connect_rule() { + local source_id="$1" target_id="$2" protocol="$3" port="$4" + local source_ip target_ip comment ++ ensure_firewall_available + source_ip="$(lookup_node_ip "$source_id")" + target_ip="$(lookup_node_ip "$target_id")" + comment="smm:${source_id}:${target_id}:${protocol}:${port}" +@@ -84,6 +112,7 @@ connect_rule() { + + disconnect_rule() { + local source_id="$1" target_id="$2" protocol="$3" port="$4" comment handle ++ ensure_firewall_available + # Resolve both identities before touching firewall state. + lookup_node_ip "$source_id" >/dev/null + lookup_node_ip "$target_id" >/dev/null +@@ -104,6 +133,7 @@ disconnect_rule() { + + status_rule() { + local source_id="$1" target_id="$2" protocol="$3" port="$4" comment ++ ensure_firewall_available + # A status is meaningful only for identities currently known to the mesh. + lookup_node_ip "$source_id" >/dev/null + lookup_node_ip "$target_id" >/dev/null +@@ -115,7 +145,49 @@ status_rule() { + fi + } + ++reconcile_status() { ++ local generation ++ exec 9>"$RECONCILE_LOCK" ++ chmod 0600 "$RECONCILE_LOCK" ++ "$FLOCK_COMMAND" -x 9 ++ if [[ ! -f "$RECONCILE_MARKER" ]]; then ++ printf '%s\n' complete ++ return ++ fi ++ IFS= read -r generation <"$RECONCILE_MARKER" || fail "invalid reconciliation marker" ++ [[ "$generation" =~ $generation_pattern ]] || fail "invalid reconciliation marker" ++ printf 'requested:%s\n' "$generation" ++} ++ ++reconcile_complete() { ++ local expected_generation="$1" current_generation='' ++ [[ "$expected_generation" =~ $generation_pattern ]] || fail "invalid reconciliation generation" ++ exec 9>"$RECONCILE_LOCK" ++ chmod 0600 "$RECONCILE_LOCK" ++ "$FLOCK_COMMAND" -x 9 ++ if [[ -f "$RECONCILE_MARKER" ]]; then ++ IFS= read -r current_generation <"$RECONCILE_MARKER" || fail "invalid reconciliation marker" ++ [[ "$current_generation" =~ $generation_pattern ]] || fail "invalid reconciliation marker" ++ if [[ "$current_generation" == "$expected_generation" ]]; then ++ rm -f -- "$RECONCILE_MARKER" ++ fi ++ fi ++ printf '%s\n' complete ++} ++ + action="${1:-}" ++case "$action" in ++ reconcile-status) ++ [[ $# -eq 1 ]] || fail "invalid reconcile-status argument count" ++ reconcile_status ++ exit 0 ++ ;; ++ reconcile-complete) ++ [[ $# -eq 2 ]] || fail "invalid reconcile-complete argument count" ++ reconcile_complete "$2" ++ exit 0 ++ ;; ++esac + validate_rule "$@" + case "$action" in + link-connect) connect_rule "$2" "$3" "$4" "$5" ;; +diff --git a/docs/linux-bootstrap.md b/docs/linux-bootstrap.md +index 13e73c3..47566f8 100644 +--- a/docs/linux-bootstrap.md ++++ b/docs/linux-bootstrap.md +@@ -108,4 +108,4 @@ sudo ochenstarik-smm-emergency firewall-restore + sudo ochenstarik-smm-emergency mesh-enable + ``` + +-`mesh-disable` останавливает WireGuard, удаляет только таблицу `inet ochenstarik_smm` и ставит локальный emergency marker, не останавливая Control, Agent или SSH. `firewall-restore` восстанавливает базовую политику deny-by-default; разрешающие Link-правила после этого должен повторно применить Control. Если firewall не удаётся восстановить, команда отключает Mesh для fail-closed результата. `mesh-enable` запускайте только после проверки конфигурации и доступности Hub. ++`mesh-disable` останавливает WireGuard, удаляет только таблицу `inet ochenstarik_smm` и ставит локальный emergency marker, не останавливая Control, Agent или SSH. `firewall-restore` восстанавливает базовую политику deny-by-default и атомарно создаёт root-only запрос реконсиляции с уникальным generation. Control немедленно выполняет первый фоновый проход после старта, затем сверяет все действующие Link-политики не реже настроенного интервала `Control__LinkReconciliationSeconds` (по умолчанию 300 секунд). Новый marker запускает внеочередной проход на следующем poll tick, но не обходит backoff недоступного firewall. Helper удаляет только тот generation, который был прочитан перед успешно завершившимся проходом; более новый запрос сохраняется. При недоступной таблице запрос остаётся для retry с backoff, а Desktop показывает единый баннер «Mesh firewall не загружен». Если firewall не удаётся восстановить, команда отключает Mesh для fail-closed результата. `mesh-enable` также создаёт запрос реконсиляции; запускайте его только после проверки конфигурации и доступности Hub. +diff --git a/docs/roadmap.md b/docs/roadmap.md +index b6bf159..da161fc 100644 +--- a/docs/roadmap.md ++++ b/docs/roadmap.md +@@ -57,6 +57,8 @@ + - [x] обязательное восстановление disabled policy после reconnect; + - [x] append-only audit операций Link; + - [x] интеграционные тесты kill switch, process restart и helper failure; ++- [x] B-2: независимая фоновая и emergency-triggered реконсиляция, агрегированное состояние недоступного Mesh firewall и Desktop banner; ++- [ ] B-3: развести результат реконсиляции на `Examined` / `Converged` / `Failed` (M2), выбрать фильтр или retention завершённых Disabled-политик (M4) и типизировать ещё не активированный Mesh Node (M5). Эти изменения вынесены отдельно, потому что меняют API/UI semantics и helper classification, тогда как B-2 ограничен восстановлением фактических правил и общим firewall failure; + - [ ] выполнить физический acceptance Hub + source Node + два destination Node с WireGuard/nftables/reboot. + + ## Этап 4 — мониторинг и терминал +diff --git a/src/ServerMonitorManager.Control/ControlOptions.cs b/src/ServerMonitorManager.Control/ControlOptions.cs +index 090369c..3db0896 100644 +--- a/src/ServerMonitorManager.Control/ControlOptions.cs ++++ b/src/ServerMonitorManager.Control/ControlOptions.cs +@@ -24,6 +24,8 @@ public sealed class ControlOptions + + public int LinkExpirationPollSeconds { get; init; } = 15; + ++ public int LinkReconciliationSeconds { get; init; } = 300; ++ + public string BackupDirectory { get; init; } = "/var/lib/ochenstarik-server-monitor-manager/backups"; + + public int BackupIntervalHours { get; init; } = 24; +diff --git a/src/ServerMonitorManager.Control/ControlStore.cs b/src/ServerMonitorManager.Control/ControlStore.cs +index 469294a..f970fe9 100644 +--- a/src/ServerMonitorManager.Control/ControlStore.cs ++++ b/src/ServerMonitorManager.Control/ControlStore.cs +@@ -1353,6 +1353,17 @@ public sealed partial class ControlStore(IOptions options) + return link; + } + ++ public async Task GetLinkAsync( ++ string id, ++ CancellationToken cancellationToken = default) ++ { ++ await using var connection = await OpenAsync(cancellationToken); ++ await using var transaction = (SqliteTransaction)await connection.BeginTransactionAsync(cancellationToken); ++ var link = await ReadLinkAsync(connection, transaction, id, cancellationToken); ++ await transaction.CommitAsync(cancellationToken); ++ return link; ++ } ++ + public async Task> ListLinksAsync(CancellationToken cancellationToken = default) + { + var result = new List(); +@@ -1367,6 +1378,57 @@ public sealed partial class ControlStore(IOptions options) + return result; + } + ++ public async Task> ListEffectiveLinksAsync( ++ CancellationToken cancellationToken = default) ++ { ++ var result = new List(); ++ await using var connection = await OpenAsync(cancellationToken); ++ var command = connection.CreateCommand(); ++ command.CommandText = """ ++ SELECT current.* ++ FROM links AS current ++ WHERE (current.desired_state = 'Active' ++ OR (current.desired_state = 'Disabled' AND current.actual_state != 'Disabled')) ++ AND NOT EXISTS ( ++ SELECT 1 FROM links AS newer ++ WHERE newer.source_node_id = current.source_node_id ++ AND newer.target_node_id = current.target_node_id ++ AND newer.protocol = current.protocol ++ AND newer.port = current.port ++ AND newer.version > current.version) ++ ORDER BY current.version; ++ """; ++ await using var reader = await command.ExecuteReaderAsync(cancellationToken); ++ while (await reader.ReadAsync(cancellationToken)) ++ { ++ result.Add(ReadLink(reader)); ++ } ++ return result; ++ } ++ ++ public async Task IsEffectiveLinkAsync( ++ LinkPolicy link, ++ CancellationToken cancellationToken = default) ++ { ++ await using var connection = await OpenAsync(cancellationToken); ++ var command = connection.CreateCommand(); ++ command.CommandText = """ ++ SELECT NOT EXISTS( ++ SELECT 1 FROM links ++ WHERE source_node_id = $source ++ AND target_node_id = $target ++ AND protocol = $protocol ++ AND port = $port ++ AND version > $version); ++ """; ++ command.Parameters.AddWithValue("$source", link.SourceNodeId); ++ command.Parameters.AddWithValue("$target", link.TargetNodeId); ++ command.Parameters.AddWithValue("$protocol", link.Protocol); ++ command.Parameters.AddWithValue("$port", link.Port); ++ command.Parameters.AddWithValue("$version", link.Version); ++ return Convert.ToInt32(await command.ExecuteScalarAsync(cancellationToken)) == 1; ++ } ++ + public async Task> ListExpiredLinksAsync( + DateTimeOffset now, + CancellationToken cancellationToken = default) +diff --git a/src/ServerMonitorManager.Control/LinkPolicyApplier.cs b/src/ServerMonitorManager.Control/LinkPolicyApplier.cs +index 184f636..106a948 100644 +--- a/src/ServerMonitorManager.Control/LinkPolicyApplier.cs ++++ b/src/ServerMonitorManager.Control/LinkPolicyApplier.cs +@@ -9,6 +9,17 @@ public interface ILinkPolicyApplier + Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken); + Task ApplyDisconnectAsync(LinkPolicy link, CancellationToken cancellationToken); + Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken); ++ Task GetReconciliationRequestAsync(CancellationToken cancellationToken) ++ => Task.FromResult(null); ++ Task CompleteReconciliationAsync(string generation, CancellationToken cancellationToken) ++ => Task.CompletedTask; ++} ++ ++public sealed class MeshFirewallUnavailableException : InvalidOperationException ++{ ++ public MeshFirewallUnavailableException(string message) : base(message) ++ { ++ } + } + + public sealed class LinkPolicyApplier(IOptions options) : ILinkPolicyApplier +@@ -55,6 +66,24 @@ public sealed class LinkPolicyApplier(IOptions options) : ILinkP + }; + } + ++ public async Task GetReconciliationRequestAsync(CancellationToken cancellationToken) ++ => await RunAsync(["reconcile-status"], cancellationToken) switch ++ { ++ "complete" => null, ++ var status when status.StartsWith("requested:", StringComparison.Ordinal) ++ && Guid.TryParseExact(status[10..], "D", out _) => status[10..], ++ _ => throw new InvalidOperationException("Hub policy helper returned an invalid reconciliation marker status.") ++ }; ++ ++ public async Task CompleteReconciliationAsync(string generation, CancellationToken cancellationToken) ++ { ++ if (!Guid.TryParseExact(generation, "D", out _)) ++ { ++ throw new ArgumentException("Invalid reconciliation generation.", nameof(generation)); ++ } ++ _ = await RunAsync(["reconcile-complete", generation], cancellationToken); ++ } ++ + private async Task RunAsync(IReadOnlyList arguments, CancellationToken cancellationToken) + { + var startInfo = new ProcessStartInfo +@@ -80,6 +109,11 @@ public sealed class LinkPolicyApplier(IOptions options) : ILinkP + if (process.ExitCode != 0) + { + var message = (await error).Trim(); ++ if (process.ExitCode == 79 ++ && string.Equals(message, LinkService.FirewallUnavailableCode, StringComparison.Ordinal)) ++ { ++ throw new MeshFirewallUnavailableException(LinkService.FirewallUnavailableCode); ++ } + throw new InvalidOperationException(string.IsNullOrWhiteSpace(message) + ? $"Hub policy helper exited with code {process.ExitCode}." + : message); +diff --git a/src/ServerMonitorManager.Control/LinkReconciliationBackgroundService.cs b/src/ServerMonitorManager.Control/LinkReconciliationBackgroundService.cs +new file mode 100644 +index 0000000..ac7abe5 +--- /dev/null ++++ b/src/ServerMonitorManager.Control/LinkReconciliationBackgroundService.cs +@@ -0,0 +1,96 @@ ++using Microsoft.Extensions.Options; ++ ++namespace ServerMonitorManager.Control; ++ ++public sealed class LinkReconciliationBackgroundService( ++ LinkService links, ++ ILinkPolicyApplier applier, ++ IOptions options, ++ TimeProvider timeProvider, ++ ILogger logger) : BackgroundService ++{ ++ private readonly SemaphoreSlim _passGate = new(1, 1); ++ private DateTimeOffset? _nextRegularAt; ++ private DateTimeOffset? _backoffUntil; ++ private int _unavailableAttempts; ++ ++ internal async Task RunOnceAsync( ++ CancellationToken cancellationToken = default) ++ { ++ await _passGate.WaitAsync(cancellationToken); ++ try ++ { ++ var now = timeProvider.GetUtcNow(); ++ string? requestGeneration = null; ++ try ++ { ++ requestGeneration = await applier.GetReconciliationRequestAsync(cancellationToken); ++ } ++ catch (Exception exception) when (exception is not OperationCanceledException) ++ { ++ logger.LogWarning(exception, "Could not inspect the Link reconciliation marker."); ++ } ++ if (_backoffUntil is not null && now < _backoffUntil) ++ { ++ return null; ++ } ++ if (requestGeneration is null && _nextRegularAt is not null && now < _nextRegularAt) ++ { ++ return null; ++ } ++ ++ var result = await links.ReconcileAllAsync(cancellationToken); ++ var interval = TimeSpan.FromSeconds(options.Value.LinkReconciliationSeconds); ++ if (result.FirewallUnavailable) ++ { ++ _unavailableAttempts = Math.Min(_unavailableAttempts + 1, 4); ++ _backoffUntil = now + TimeSpan.FromTicks(interval.Ticks * _unavailableAttempts); ++ } ++ else ++ { ++ _unavailableAttempts = 0; ++ _backoffUntil = null; ++ _nextRegularAt = now + interval; ++ if (requestGeneration is not null && result.Failed == 0) ++ { ++ await applier.CompleteReconciliationAsync(requestGeneration, cancellationToken); ++ } ++ } ++ return result; ++ } ++ finally ++ { ++ _passGate.Release(); ++ } ++ } ++ ++ protected override async Task ExecuteAsync(CancellationToken stoppingToken) ++ { ++ var pollSeconds = Math.Min(options.Value.LinkReconciliationSeconds, 30); ++ using var timer = new PeriodicTimer(TimeSpan.FromSeconds(pollSeconds), timeProvider); ++ do ++ { ++ try ++ { ++ var result = await RunOnceAsync(stoppingToken); ++ if (result is not null) ++ { ++ logger.LogInformation( ++ "Link reconciliation completed: {Examined} examined, {Failed} failed, firewall unavailable: {Unavailable}.", ++ result.Examined, ++ result.Failed, ++ result.FirewallUnavailable); ++ } ++ } ++ catch (OperationCanceledException) when (stoppingToken.IsCancellationRequested) ++ { ++ break; ++ } ++ catch (Exception exception) ++ { ++ logger.LogError(exception, "Link reconciliation failed."); ++ } ++ } ++ while (await timer.WaitForNextTickAsync(stoppingToken)); ++ } ++} +diff --git a/src/ServerMonitorManager.Control/LinkService.cs b/src/ServerMonitorManager.Control/LinkService.cs +index d9b5980..e76176a 100644 +--- a/src/ServerMonitorManager.Control/LinkService.cs ++++ b/src/ServerMonitorManager.Control/LinkService.cs +@@ -9,6 +9,8 @@ public sealed class LinkService( + ILinkPolicyApplier applier, + ControlEventBroker events) + { ++ public const string FirewallUnavailableCode = "mesh.firewall-unavailable"; ++ public const string FirewallAvailableCode = "mesh.firewall-available"; + private readonly ConcurrentDictionary _reconciliationLocks = new(); + private readonly ConcurrentDictionary _nodeLocks = new(); + +@@ -25,35 +27,20 @@ public sealed class LinkService( + { + return link; + } +- var gate = _reconciliationLocks.GetOrAdd(link.Id, static _ => new SemaphoreSlim(1, 1)); +- await gate.WaitAsync(cancellationToken); ++ var gate = await AcquireLinkGateAsync(link.Id, cancellationToken); + try + { +- var current = (await store.ListLinksAsync(cancellationToken)) +- .SingleOrDefault(candidate => candidate.Id == link.Id) ++ var current = await store.GetLinkAsync(link.Id, cancellationToken) + ?? throw new InvalidOperationException("The persisted Link disappeared."); +- if (current.DesiredState != "Active") ++ if (current.DesiredState != "Active" || !await store.IsEffectiveLinkAsync(current, cancellationToken)) + { + return current; + } +- link = current; +- Publish("link.connecting", link); +- try ++ if (!mutation.IsReplay) + { +- await applier.ApplyConnectAsync(link, cancellationToken); +- await VerifyFactualStateAsync(link, expectedConnected: true, cancellationToken); +- link = await store.SetLinkActualStateAsync(link.Id, "Active", null, actor, cancellationToken) +- ?? throw new InvalidOperationException("The persisted Link disappeared."); +- Publish("link.active", link); ++ Publish("link.connecting", current); + } +- catch (Exception exception) when (exception is not OperationCanceledException) +- { +- link = await store.SetLinkActualStateAsync( +- link.Id, "Failed", CompactError(exception), actor, cancellationToken) +- ?? link; +- Publish("link.failed", link); +- } +- return link; ++ return await ConvergeAsync(current, expectedConnected: true, actor, cancellationToken); + } + finally + { +@@ -67,8 +54,7 @@ public sealed class LinkService( + string actor, + CancellationToken cancellationToken) + { +- var gate = _reconciliationLocks.GetOrAdd(id, static _ => new SemaphoreSlim(1, 1)); +- await gate.WaitAsync(cancellationToken); ++ var gate = await AcquireLinkGateAsync(id, cancellationToken); + try + { + return await DisableCoreAsync(id, request, actor, cancellationToken); +@@ -99,7 +85,7 @@ public sealed class LinkService( + { + Publish("link.disconnecting", link); + } +- return await ConvergeDisabledCoreAsync(link, actor, cancellationToken); ++ return await ConvergeAsync(link, expectedConnected: false, actor, cancellationToken); + } + + internal async Task ConvergeDisabledAsync( +@@ -107,11 +93,10 @@ public sealed class LinkService( + string actor, + CancellationToken cancellationToken) + { +- var gate = _reconciliationLocks.GetOrAdd(link.Id, static _ => new SemaphoreSlim(1, 1)); +- await gate.WaitAsync(cancellationToken); ++ var gate = await AcquireLinkGateAsync(link.Id, cancellationToken); + try + { +- return await ConvergeDisabledCoreAsync(link, actor, cancellationToken); ++ return await ConvergeAsync(link, expectedConnected: false, actor, cancellationToken); + } + finally + { +@@ -130,61 +115,94 @@ public sealed class LinkService( + { + using var nodeLease = await AcquireNodeLocksAsync( + [candidate.SourceNodeId, candidate.TargetNodeId], cancellationToken); +- var gate = _reconciliationLocks.GetOrAdd(candidate.Id, static _ => new SemaphoreSlim(1, 1)); +- await gate.WaitAsync(cancellationToken); ++ var gate = await AcquireLinkGateAsync(candidate.Id, cancellationToken); + try + { +- var current = (await store.ListEffectiveLinksForNodeAsync(nodeId, cancellationToken)) +- .SingleOrDefault(link => link.Id == candidate.Id); +- if (current is null) ++ var current = await GetCurrentEffectiveAsync(candidate.Id, cancellationToken); ++ if (current is null || (current.SourceNodeId != nodeId && current.TargetNodeId != nodeId)) + { + continue; + } ++ var result = await ConvergeAsync( ++ current, ++ current.DesiredState == "Active", ++ $"system:reconnect:{nodeId}", ++ cancellationToken); ++ reconciled++; ++ if (result.ActualState is "Failed" or "Partial") ++ { ++ failed++; ++ } ++ } ++ finally ++ { ++ gate.Release(); ++ } ++ } ++ return new LinkReconciliationResult(reconciled, failed); ++ } + +- var actor = $"system:reconnect:{nodeId}"; +- var expectedConnected = current.DesiredState == "Active"; +- var pendingState = expectedConnected ? "Connecting" : "Disconnecting"; +- var completedState = expectedConnected ? "Active" : "Disabled"; +- var completedEvent = expectedConnected ? "link.active" : "link.disabled"; +- var failureState = expectedConnected ? "Failed" : "Partial"; +- var failureEvent = expectedConnected ? "link.failed" : "link.partial"; +- var link = await store.SetLinkActualStateAsync( +- current.Id, pendingState, null, actor, cancellationToken) ?? current; +- Publish("link.reconciling", link); +- try ++ public async Task ReconcileAllAsync( ++ CancellationToken cancellationToken = default) ++ { ++ var candidates = await store.ListEffectiveLinksAsync(cancellationToken); ++ var recoveringFirewall = candidates.Any(candidate => ++ string.Equals(candidate.LastError, FirewallUnavailableCode, StringComparison.Ordinal)); ++ var examined = 0; ++ var failed = 0; ++ var firewallUnavailable = false; ++ foreach (var candidate in candidates) ++ { ++ using var nodeLease = await AcquireNodeLocksAsync( ++ [candidate.SourceNodeId, candidate.TargetNodeId], cancellationToken); ++ var gate = await AcquireLinkGateAsync(candidate.Id, cancellationToken); ++ try ++ { ++ var current = await GetCurrentEffectiveAsync(candidate.Id, cancellationToken); ++ if (current is null || !IsEligibleForFullReconciliation(current)) ++ { ++ continue; ++ } ++ var result = await ConvergeAsync( ++ current, current.DesiredState == "Active", "system:reconcile", cancellationToken); ++ examined++; ++ if (result.LastError == FirewallUnavailableCode) + { +- var isConnected = await applier.IsConnectedAsync(link, cancellationToken); +- if (isConnected != expectedConnected) +- { +- if (expectedConnected) +- { +- await applier.ApplyConnectAsync(link, cancellationToken); +- } +- else +- { +- await applier.ApplyDisconnectAsync(link, cancellationToken); +- } +- await VerifyFactualStateAsync(link, expectedConnected, cancellationToken); +- } +- link = await store.SetLinkActualStateAsync( +- link.Id, completedState, null, actor, cancellationToken) ?? link; +- Publish(completedEvent, link); ++ firewallUnavailable = true; + } +- catch (Exception exception) when (exception is not OperationCanceledException) ++ else if (result.ActualState is "Failed" or "Partial") + { +- link = await store.SetLinkActualStateAsync( +- link.Id, failureState, CompactError(exception), actor, cancellationToken) ?? link; +- Publish(failureEvent, link); + failed++; + } +- reconciled++; + } + finally + { + gate.Release(); + } ++ if (firewallUnavailable) ++ { ++ break; ++ } + } +- return new LinkReconciliationResult(reconciled, failed); ++ if (firewallUnavailable) ++ { ++ await MarkFirewallUnavailableAsync(candidates, cancellationToken); ++ events.Publish( ++ FirewallUnavailableCode, ++ "mesh", ++ JsonSerializer.Serialize( ++ new ControlError(FirewallUnavailableCode), SmmJsonContext.Default.ControlError)); ++ return new LinkFullReconciliationResult(examined, candidates.Count, true); ++ } ++ if (recoveringFirewall) ++ { ++ events.Publish( ++ FirewallAvailableCode, ++ "mesh", ++ JsonSerializer.Serialize( ++ new ControlError(FirewallAvailableCode), SmmJsonContext.Default.ControlError)); ++ } ++ return new LinkFullReconciliationResult(examined, failed, false); + } + + public async Task ExpireDueLinksAsync( +@@ -196,53 +214,36 @@ public sealed class LinkService( + var links = await store.ListExpiredLinksAsync(now, cancellationToken); + foreach (var candidate in links) + { +- var gate = _reconciliationLocks.GetOrAdd(candidate.Id, static _ => new SemaphoreSlim(1, 1)); +- await gate.WaitAsync(cancellationToken); ++ var gate = await AcquireLinkGateAsync(candidate.Id, cancellationToken); + try + { +- var current = (await store.ListExpiredLinksAsync(now, cancellationToken)) +- .SingleOrDefault(link => link.Id == candidate.Id); +- if (current is null) ++ var current = await store.GetLinkAsync(candidate.Id, cancellationToken); ++ if (current is null || current.ExpiresAt is null || current.ExpiresAt > now ++ || !await store.IsEffectiveLinkAsync(current, cancellationToken)) + { + continue; + } +- ++ LinkPolicy? result; + if (current.DesiredState == "Active") + { +- var result = await DisableCoreAsync( ++ result = await DisableCoreAsync( + current.Id, + new LinkPolicyDisableRequest(Guid.NewGuid().ToString()), + "system:ttl", + cancellationToken); +- if (result?.ActualState == "Disabled") +- { +- disabled++; +- } +- else +- { +- failed++; +- } +- continue; + } +- +- var retrying = await store.SetLinkActualStateAsync( +- current.Id, "Disconnecting", null, "system:ttl-retry", cancellationToken) ?? current; +- Publish("link.disconnecting", retrying); +- try ++ else ++ { ++ Publish("link.disconnecting", current); ++ result = await ConvergeAsync( ++ current, expectedConnected: false, "system:ttl-retry", cancellationToken); ++ } ++ if (result?.ActualState == "Disabled") + { +- await applier.ApplyDisconnectAsync(retrying, cancellationToken); +- await VerifyFactualStateAsync(retrying, expectedConnected: false, cancellationToken); +- var completed = await store.SetLinkActualStateAsync( +- retrying.Id, "Disabled", null, "system:ttl-retry", cancellationToken) ?? retrying; +- Publish("link.disabled", completed); + disabled++; + } +- catch (Exception exception) when (exception is not OperationCanceledException) ++ else + { +- var partial = await store.SetLinkActualStateAsync( +- retrying.Id, "Partial", CompactError(exception), "system:ttl-retry", cancellationToken) +- ?? retrying; +- Publish("link.partial", partial); + failed++; + } + } +@@ -254,6 +255,119 @@ public sealed class LinkService( + return new LinkExpirationResult(disabled, failed); + } + ++ private async Task ConvergeAsync( ++ LinkPolicy link, ++ bool expectedConnected, ++ string actor, ++ CancellationToken cancellationToken) ++ { ++ var current = await store.GetLinkAsync(link.Id, cancellationToken) ?? link; ++ if ((current.DesiredState == "Active") != expectedConnected ++ || !await store.IsEffectiveLinkAsync(current, cancellationToken)) ++ { ++ return current; ++ } ++ ++ var completedState = expectedConnected ? "Active" : "Disabled"; ++ var failureState = expectedConnected ? "Failed" : "Partial"; ++ var completedEvent = expectedConnected ? "link.active" : "link.disabled"; ++ var failureEvent = expectedConnected ? "link.failed" : "link.partial"; ++ try ++ { ++ var isConnected = await applier.IsConnectedAsync(current, cancellationToken); ++ var changedFact = isConnected != expectedConnected; ++ if (changedFact) ++ { ++ var pendingState = expectedConnected ? "Connecting" : "Disconnecting"; ++ if (current.ActualState != pendingState || current.LastError is not null) ++ { ++ current = await store.SetLinkActualStateAsync( ++ current.Id, pendingState, null, actor, cancellationToken) ?? current; ++ } ++ if (actor.StartsWith("system:", StringComparison.Ordinal)) ++ { ++ Publish("link.reconciling", current); ++ } ++ if (expectedConnected) ++ { ++ await applier.ApplyConnectAsync(current, cancellationToken); ++ } ++ else ++ { ++ await applier.ApplyDisconnectAsync(current, cancellationToken); ++ } ++ await VerifyFactualStateAsync(current, expectedConnected, cancellationToken); ++ } ++ if (current.ActualState != completedState || current.LastError is not null) ++ { ++ current = await store.SetLinkActualStateAsync( ++ current.Id, completedState, null, actor, cancellationToken) ?? current; ++ Publish(completedEvent, current); ++ } ++ if (changedFact && actor == "system:reconcile") ++ { ++ Publish(expectedConnected ? "link.reapplied" : "link.orphan-removed", current); ++ } ++ } ++ catch (MeshFirewallUnavailableException) ++ { ++ current = await store.SetLinkActualStateAsync( ++ current.Id, failureState, FirewallUnavailableCode, actor, cancellationToken) ?? current; ++ if (actor != "system:reconcile") ++ { ++ Publish(failureEvent, current); ++ } ++ } ++ catch (Exception exception) when (exception is not OperationCanceledException) ++ { ++ current = await store.SetLinkActualStateAsync( ++ current.Id, failureState, CompactError(exception), actor, cancellationToken) ?? current; ++ Publish(failureEvent, current); ++ } ++ return current; ++ } ++ ++ private async Task GetCurrentEffectiveAsync( ++ string id, ++ CancellationToken cancellationToken) ++ { ++ var current = await store.GetLinkAsync(id, cancellationToken); ++ if (current is null || !await store.IsEffectiveLinkAsync(current, cancellationToken)) ++ { ++ return null; ++ } ++ return current; ++ } ++ ++ private async Task MarkFirewallUnavailableAsync( ++ IReadOnlyList candidates, ++ CancellationToken cancellationToken) ++ { ++ foreach (var candidate in candidates) ++ { ++ using var nodeLease = await AcquireNodeLocksAsync( ++ [candidate.SourceNodeId, candidate.TargetNodeId], cancellationToken); ++ var gate = await AcquireLinkGateAsync(candidate.Id, cancellationToken); ++ try ++ { ++ var current = await GetCurrentEffectiveAsync(candidate.Id, cancellationToken); ++ if (current is not null && IsEligibleForFullReconciliation(current)) ++ { ++ await store.SetLinkActualStateAsync( ++ current.Id, "Partial", FirewallUnavailableCode, "system:reconcile", cancellationToken); ++ } ++ } ++ finally ++ { ++ gate.Release(); ++ } ++ } ++ } ++ ++ private static bool IsEligibleForFullReconciliation(LinkPolicy link) ++ => link.DesiredState == "Active" ++ || (link.DesiredState == "Disabled" && link.ActualState != "Disabled"); ++ + private void Publish(string type, LinkPolicy link) + => events.Publish( + type, +@@ -289,38 +403,13 @@ public sealed class LinkService( + } + } + +- private async Task ConvergeDisabledCoreAsync( +- LinkPolicy link, +- string actor, ++ private async Task AcquireLinkGateAsync( ++ string id, + CancellationToken cancellationToken) + { +- var current = (await store.ListLinksAsync(cancellationToken)) +- .SingleOrDefault(candidate => candidate.Id == link.Id) ?? link; +- if (current.DesiredState != "Disabled") +- { +- return current; +- } +- try +- { +- if (await applier.IsConnectedAsync(current, cancellationToken)) +- { +- await applier.ApplyDisconnectAsync(current, cancellationToken); +- await VerifyFactualStateAsync(current, expectedConnected: false, cancellationToken); +- } +- if (current.ActualState != "Disabled" || current.LastError is not null) +- { +- current = await store.SetLinkActualStateAsync( +- current.Id, "Disabled", null, actor, cancellationToken) ?? current; +- Publish("link.disabled", current); +- } +- } +- catch (Exception exception) when (exception is not OperationCanceledException) +- { +- current = await store.SetLinkActualStateAsync( +- current.Id, "Partial", CompactError(exception), actor, cancellationToken) ?? current; +- Publish("link.partial", current); +- } +- return current; ++ var gate = _reconciliationLocks.GetOrAdd(id, static _ => new SemaphoreSlim(1, 1)); ++ await gate.WaitAsync(cancellationToken); ++ return gate; + } + + private async Task VerifyFactualStateAsync( +@@ -336,7 +425,7 @@ public sealed class LinkService( + } + + private static string CompactError(Exception exception) +- => exception.Message.Split([(char)13, '\n'], StringSplitOptions.RemoveEmptyEntries) ++ => exception.Message.Split(['\r', '\n'], StringSplitOptions.RemoveEmptyEntries) + .FirstOrDefault() ?? "Policy application failed."; + + private sealed class LockLease(SemaphoreSlim[] gates) : IDisposable +@@ -352,3 +441,4 @@ public sealed class LinkService( + } + + public sealed record LinkExpirationResult(int Disabled, int Failed); ++public sealed record LinkFullReconciliationResult(int Examined, int Failed, bool FirewallUnavailable); +diff --git a/src/ServerMonitorManager.Control/Program.cs b/src/ServerMonitorManager.Control/Program.cs +index a898afb..9ee3a22 100644 +--- a/src/ServerMonitorManager.Control/Program.cs ++++ b/src/ServerMonitorManager.Control/Program.cs +@@ -46,9 +46,10 @@ builder.Services.AddOptions() + && options.AuditRetentionDays is >= 1 and <= 3650 + && options.MaintenanceIntervalMinutes is >= 1 and <= 1440 + && options.LinkExpirationPollSeconds is >= 1 and <= 300 ++ && options.LinkReconciliationSeconds is >= 30 and <= 3600 + && options.BackupIntervalHours is >= 1 and <= 720 + && options.BackupRetentionCount is >= 1 and <= 100, +- "Invalid Control paths, heartbeat, retention, maintenance, expiration, or backup settings.") ++ "Invalid Control paths, heartbeat, retention, maintenance, expiration, reconciliation, or backup settings.") + .ValidateOnStart(); + builder.Services.AddSingleton(TimeProvider.System); + builder.Services.AddSingleton(); +@@ -59,6 +60,7 @@ builder.Services.AddSingleton(); + builder.Services.AddSingleton(); + builder.Services.AddSingleton(); + builder.Services.AddHostedService(); ++builder.Services.AddHostedService(); + builder.Services.AddHostedService(); + builder.Services.AddAuthentication(CertificateAuthenticationDefaults.AuthenticationScheme) + .AddCertificate(options => +diff --git a/src/ServerMonitorManager.Control/appsettings.json b/src/ServerMonitorManager.Control/appsettings.json +index 86942c0..d395405 100644 +--- a/src/ServerMonitorManager.Control/appsettings.json ++++ b/src/ServerMonitorManager.Control/appsettings.json +@@ -10,6 +10,7 @@ + "AuditRetentionDays": 90, + "MaintenanceIntervalMinutes": 15, + "LinkExpirationPollSeconds": 15, ++ "LinkReconciliationSeconds": 300, + "BackupDirectory": "/var/lib/ochenstarik-server-monitor-manager/backups", + "BackupIntervalHours": 24, + "BackupRetentionCount": 7, +diff --git a/src/ServerMonitorManager.Desktop/MainPage.xaml.cs b/src/ServerMonitorManager.Desktop/MainPage.xaml.cs +index 4716803..8b953ce 100644 +--- a/src/ServerMonitorManager.Desktop/MainPage.xaml.cs ++++ b/src/ServerMonitorManager.Desktop/MainPage.xaml.cs +@@ -28,6 +28,7 @@ public sealed partial class MainPage : Page + private SettingsPage? _settingsPage; + private bool _loaded; + private bool _controlListening; ++ private bool _meshFirewallUnavailable; + + public MainPage() + { +@@ -160,7 +161,7 @@ public sealed partial class MainPage : Page + InfoBarSeverity.Warning); + } + +- if (Servers.Count > 0) ++ if (Servers.Count > 0 || _control.IsConfigured) + { + await RefreshAllAsync(); + } +@@ -449,6 +450,18 @@ public sealed partial class MainPage : Page + { + DispatcherQueue.TryEnqueue(() => + { ++ if (controlEvent.Type == MeshLinkViewModel.FirewallUnavailableErrorCode) ++ { ++ SetMeshFirewallUnavailable(true); ++ _ = RefreshMeshAsync(showSuccess: false); ++ return; ++ } ++ if (controlEvent.Type == "mesh.firewall-available") ++ { ++ SetMeshFirewallUnavailable(false); ++ _ = RefreshMeshAsync(showSuccess: false); ++ return; ++ } + if (controlEvent.Type.StartsWith("link.", StringComparison.Ordinal)) + { + ShowInfo( +@@ -730,6 +743,11 @@ public sealed partial class MainPage : Page + { + if (Servers.Count == 0) + { ++ if (_control.IsConfigured) ++ { ++ await RefreshControlMeshAsync(showSuccess: false); ++ return; ++ } + ShowInfo("Серверы не добавлены", "Сначала создайте SSH-ключ и установите его на сервере.", InfoBarSeverity.Informational); + return; + } +@@ -916,6 +934,12 @@ public sealed partial class MainPage : Page + LinkActionInfo.IsOpen = true; + } + ++ private void SetMeshFirewallUnavailable(bool unavailable) ++ { ++ _meshFirewallUnavailable = unavailable; ++ _linksPage?.SetFirewallUnavailable(unavailable); ++ } ++ + private ServerViewModel? FindHub() + => Servers.FirstOrDefault(server => server.IsHub); + +@@ -1031,6 +1055,11 @@ public sealed partial class MainPage : Page + link.LastError)); + } + ++ SetMeshFirewallUnavailable(links ++ .GroupBy(link => new { link.SourceNodeId, link.TargetNodeId, link.Protocol, link.Port }) ++ .Select(group => group.MaxBy(link => link.Version)!) ++ .Any(link => link.LastError == MeshLinkViewModel.FirewallUnavailableErrorCode)); ++ + var activeLinks = MeshLinks.Count(link => link.ActualState == "Active"); + ActiveLinksValueText.Text = activeLinks.ToString(CultureInfo.InvariantCulture); + MeshStatusText.Text = $"Control · {MeshNodes.Count} узлов · {activeLinks} активных · {MeshLinks.Count} политик"; +@@ -1289,6 +1318,7 @@ public sealed partial class MainPage : Page + break; + case "links": + _linksPage ??= new LinksPage(this); ++ _linksPage.SetFirewallUnavailable(_meshFirewallUnavailable); + ShowNavigationPage(_linksPage); + break; + case "sessions": +diff --git a/src/ServerMonitorManager.Desktop/MeshModels.cs b/src/ServerMonitorManager.Desktop/MeshModels.cs +index c899d62..79446d2 100644 +--- a/src/ServerMonitorManager.Desktop/MeshModels.cs ++++ b/src/ServerMonitorManager.Desktop/MeshModels.cs +@@ -19,6 +19,8 @@ public sealed class MeshNodeViewModel + + public sealed class MeshLinkViewModel + { ++ public const string FirewallUnavailableErrorCode = "mesh.firewall-unavailable"; ++ + public MeshLinkViewModel( + string source, + string target, +@@ -63,7 +65,8 @@ public sealed class MeshLinkViewModel + public string DesiredStatusText => $"Желаемое состояние: {DesiredState}"; + public string ActualStatusText => $"Фактическое состояние: {ActualState}"; + public string DriftText => HasDrift ? "Расхождение: требуется сверка политики" : "Расхождение: нет"; +- public string ErrorText => string.IsNullOrWhiteSpace(LastError) ? "Ошибка: нет" : $"Ошибка: {LastError}"; ++ public string ErrorText => LastError == FirewallUnavailableErrorCode ? string.Empty ++ : string.IsNullOrWhiteSpace(LastError) ? "Ошибка: нет" : $"Ошибка: {LastError}"; + public string VersionText => $"Версия политики: {Version}"; + public string ExpirationText => ExpiresUnix == 0 + ? "вручную" +diff --git a/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml b/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml +index 32af5f3..f7a3415 100644 +--- a/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml ++++ b/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml +@@ -7,6 +7,7 @@ + + + ++ + + + +@@ -27,7 +28,15 @@ + + + +- ++ ++ ++ + + + +diff --git a/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml.cs b/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml.cs +index 2669c49..4eb545f 100644 +--- a/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml.cs ++++ b/src/ServerMonitorManager.Desktop/Pages/LinksPage.xaml.cs +@@ -18,6 +18,9 @@ public sealed partial class LinksPage : Page + + public ObservableCollection Links => _host.MeshLinks; + ++ internal void SetFirewallUnavailable(bool unavailable) ++ => FirewallUnavailableInfo.IsOpen = unavailable; ++ + private async void RefreshButton_Click(object sender, RoutedEventArgs e) + => await _host.RefreshLinksFromPageAsync(); + +diff --git a/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs b/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs +index 3700663..9e217ca 100644 +--- a/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs ++++ b/tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs +@@ -26,6 +26,7 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + var sudoPath = Path.Combine(_directory, "sudo"); + var helperPath = Path.Combine(_directory, "policy-helper"); + var failureMarkerPath = Path.Combine(_directory, "fail-disconnect"); ++ var firewallUnavailableMarkerPath = Path.Combine(_directory, "firewall-unavailable"); + var connectedMarkerPath = Path.Combine(_directory, "connected"); + var invocationLogPath = Path.Combine(_directory, "helper.log"); + await WriteExecutableAsync( +@@ -58,6 +59,10 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + rm -f '{{ShellQuote(connectedMarkerPath)}}' + fi + if [ "${1:-}" = "link-status" ]; then ++ if [ -f '{{ShellQuote(firewallUnavailableMarkerPath)}}' ]; then ++ echo "mesh.firewall-unavailable" >&2 ++ exit 79 ++ fi + if [ -f '{{ShellQuote(connectedMarkerPath)}}' ]; then + printf '%s\n' active + else +@@ -79,6 +84,28 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + cancellationToken); + Assert.Equal("Active", active.ActualState); + ++ File.Delete(connectedMarkerPath); ++ await File.WriteAllTextAsync(invocationLogPath, string.Empty, cancellationToken); ++ var restored = await service.ReconcileAllAsync(cancellationToken); ++ Assert.False(restored.FirewallUnavailable); ++ Assert.Equal("Active", (await store.GetLinkAsync(active.Id, cancellationToken))!.ActualState); ++ Assert.Equal( ++ [ ++ "link-status ai-agent home tcp 22", ++ "link-connect ai-agent home tcp 22 60", ++ "link-status ai-agent home tcp 22" ++ ], ++ await File.ReadAllLinesAsync(invocationLogPath, cancellationToken)); ++ ++ await File.WriteAllTextAsync(firewallUnavailableMarkerPath, "fail", cancellationToken); ++ var unavailable = await service.ReconcileAllAsync(cancellationToken); ++ Assert.True(unavailable.FirewallUnavailable); ++ Assert.Equal(LinkService.FirewallUnavailableCode, ++ (await store.GetLinkAsync(active.Id, cancellationToken))!.LastError); ++ File.Delete(firewallUnavailableMarkerPath); ++ Assert.False((await service.ReconcileAllAsync(cancellationToken)).FirewallUnavailable); ++ await File.WriteAllTextAsync(invocationLogPath, string.Empty, cancellationToken); ++ + await File.WriteAllTextAsync(failureMarkerPath, "fail", cancellationToken); + var partial = await service.DisableAsync( + active.Id, +@@ -110,16 +137,14 @@ public sealed class LinkPolicyApplierIntegrationTests : IAsyncDisposable + Assert.Equal("Disabled", persisted.ActualState); + + var invocations = await File.ReadAllLinesAsync(invocationLogPath, cancellationToken); +- Assert.Equal(9, invocations.Length); +- Assert.Equal("link-connect ai-agent home tcp 22 60", invocations[0]); +- Assert.Equal("link-status ai-agent home tcp 22", invocations[1]); ++ Assert.Equal(7, invocations.Length); ++ Assert.Equal("link-status ai-agent home tcp 22", invocations[0]); ++ Assert.Equal("link-disconnect ai-agent home tcp 22", invocations[1]); + Assert.Equal("link-status ai-agent home tcp 22", invocations[2]); + Assert.Equal("link-disconnect ai-agent home tcp 22", invocations[3]); + Assert.Equal("link-status ai-agent home tcp 22", invocations[4]); + Assert.Equal("link-disconnect ai-agent home tcp 22", invocations[5]); + Assert.Equal("link-status ai-agent home tcp 22", invocations[6]); +- Assert.Equal("link-disconnect ai-agent home tcp 22", invocations[7]); +- Assert.Equal("link-status ai-agent home tcp 22", invocations[8]); + } + + public ValueTask DisposeAsync() +diff --git a/tests/ServerMonitorManager.Control.Tests/LinkReconciliationTests.cs b/tests/ServerMonitorManager.Control.Tests/LinkReconciliationTests.cs +new file mode 100644 +index 0000000..ceee620 +--- /dev/null ++++ b/tests/ServerMonitorManager.Control.Tests/LinkReconciliationTests.cs +@@ -0,0 +1,338 @@ ++using Microsoft.Data.Sqlite; ++using Microsoft.Extensions.Logging.Abstractions; ++using Microsoft.Extensions.Options; ++using ServerMonitorManager.Control; ++using ServerMonitorManager.Core; ++using Xunit; ++ ++namespace ServerMonitorManager.Control.Tests; ++ ++public sealed class LinkReconciliationTests : IAsyncDisposable ++{ ++ private readonly string _directory = Path.Combine( ++ Path.GetTempPath(), $"smm-link-reconciliation-{Guid.NewGuid():N}"); ++ ++ [Fact] ++ public async Task AllPolicyPassReappliesErasedActiveRulesWithoutHeartbeat() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "AA11", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "BB22", cancellationToken); ++ await EnrollAgentAsync(store, "target-two", "CC33", cancellationToken); ++ var applier = new RecordingPolicyApplier(); ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ var first = await service.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ var second = await service.CreateAsync(CreateRequest("target-two"), "operator", cancellationToken); ++ applier.EraseRules(); ++ var mutationsBefore = applier.ConnectCalls; ++ ++ var result = await service.ReconcileAllAsync(cancellationToken); ++ ++ Assert.Equal(2, result.Examined); ++ Assert.Equal(0, result.Failed); ++ Assert.Equal(mutationsBefore + 2, applier.ConnectCalls); ++ Assert.All(await store.ListEffectiveLinksAsync(cancellationToken), ++ link => Assert.Equal("Active", link.ActualState)); ++ Assert.True(applier.IsConnected(first)); ++ Assert.True(applier.IsConnected(second)); ++ } ++ ++ [Fact] ++ public async Task SecondUnchangedPassDoesNotMutateFirewall() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "A111", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "B222", cancellationToken); ++ var applier = new RecordingPolicyApplier(); ++ var service = new LinkService(store, applier, new ControlEventBroker()); ++ await service.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ ++ await service.ReconcileAllAsync(cancellationToken); ++ var connects = applier.ConnectCalls; ++ var disconnects = applier.DisconnectCalls; ++ await service.ReconcileAllAsync(cancellationToken); ++ ++ Assert.Equal(connects, applier.ConnectCalls); ++ Assert.Equal(disconnects, applier.DisconnectCalls); ++ } ++ ++ [Fact] ++ public async Task AllPolicyPassRemovesOrphanRuleForDesiredDisabledLink() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "DD44", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "EE55", cancellationToken); ++ var broker = new ControlEventBroker(); ++ using var subscription = broker.Subscribe(); ++ var applier = new RecordingPolicyApplier(); ++ var service = new LinkService(store, applier, broker); ++ var active = await service.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ await store.BeginDisableLinkMutationAsync( ++ active.Id, ++ new LinkPolicyDisableRequest(Guid.NewGuid().ToString()), ++ "operator", ++ cancellationToken); ++ ++ await service.ReconcileAllAsync(cancellationToken); ++ ++ Assert.Equal(1, applier.DisconnectCalls); ++ Assert.Equal("Disabled", (await store.GetLinkAsync(active.Id, cancellationToken))!.ActualState); ++ var eventTypes = new List(); ++ while (subscription.Reader.TryRead(out var controlEvent)) ++ { ++ eventTypes.Add(controlEvent.Type); ++ } ++ Assert.Contains("link.orphan-removed", eventTypes); ++ } ++ ++ [Fact] ++ public async Task FirewallUnavailableAbortsWithoutMutationsAndPublishesOneSharedEvent() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "FF66", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "0011", cancellationToken); ++ await EnrollAgentAsync(store, "target-two", "0022", cancellationToken); ++ var broker = new ControlEventBroker(); ++ using var subscription = broker.Subscribe(); ++ var applier = new RecordingPolicyApplier(); ++ var service = new LinkService(store, applier, broker); ++ await service.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ await service.CreateAsync(CreateRequest("target-two"), "operator", cancellationToken); ++ while (subscription.Reader.TryRead(out _)) { } ++ var connectBefore = applier.ConnectCalls; ++ var disconnectBefore = applier.DisconnectCalls; ++ applier.FirewallUnavailable = true; ++ ++ var result = await service.ReconcileAllAsync(cancellationToken); ++ ++ Assert.True(result.FirewallUnavailable); ++ Assert.Equal(connectBefore, applier.ConnectCalls); ++ Assert.Equal(disconnectBefore, applier.DisconnectCalls); ++ Assert.All(await store.ListEffectiveLinksAsync(cancellationToken), link => ++ { ++ Assert.Equal("Partial", link.ActualState); ++ Assert.Equal(LinkService.FirewallUnavailableCode, link.LastError); ++ }); ++ var eventTypes = new List(); ++ while (subscription.Reader.TryRead(out var controlEvent)) ++ { ++ eventTypes.Add(controlEvent.Type); ++ } ++ Assert.Equal([LinkService.FirewallUnavailableCode], eventTypes); ++ ++ applier.FirewallUnavailable = false; ++ Assert.False((await service.ReconcileAllAsync(cancellationToken)).FirewallUnavailable); ++ eventTypes.Clear(); ++ while (subscription.Reader.TryRead(out var controlEvent)) ++ { ++ eventTypes.Add(controlEvent.Type); ++ } ++ Assert.Single(eventTypes, eventType => eventType == LinkService.FirewallAvailableCode); ++ } ++ ++ [Fact] ++ public async Task MarkerCreatedAfterNormalPassTriggersPromptAdditionalPass() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "A333", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "B444", cancellationToken); ++ var applier = new RecordingPolicyApplier(); ++ var links = new LinkService(store, applier, new ControlEventBroker()); ++ await links.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ var background = CreateBackgroundService( ++ links, ++ applier, ++ new TestTimeProvider(DateTimeOffset.Parse("2026-08-03T12:00:00Z"))); ++ ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.Equal(0, applier.CompleteReconciliationCalls); ++ applier.ReconciliationRequest = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"; ++ ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.Equal(2, applier.ReconciliationStatusCalls); ++ Assert.Equal(1, applier.CompleteReconciliationCalls); ++ Assert.Null(applier.ReconciliationRequest); ++ Assert.Null(await background.RunOnceAsync(cancellationToken)); ++ } ++ ++ [Fact] ++ public async Task CompletingObservedGenerationDoesNotConsumeNewerRequest() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "A355", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "B466", cancellationToken); ++ var generationA = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"; ++ var generationB = "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb"; ++ var applier = new RecordingPolicyApplier { ReconciliationRequest = generationA }; ++ var links = new LinkService(store, applier, new ControlEventBroker()); ++ await links.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ applier.ReplacementRequestOnNextProbe = generationB; ++ var background = CreateBackgroundService( ++ links, ++ applier, ++ new TestTimeProvider(DateTimeOffset.Parse("2026-08-03T12:00:00Z"))); ++ ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.Equal([generationA], applier.CompletedGenerations); ++ Assert.Equal(generationB, applier.ReconciliationRequest); ++ ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.Equal([generationA, generationB], applier.CompletedGenerations); ++ Assert.Null(applier.ReconciliationRequest); ++ } ++ ++ [Fact] ++ public async Task BackgroundPassRetainsMarkerWhenFirewallIsUnavailable() ++ { ++ var cancellationToken = TestContext.Current.CancellationToken; ++ var store = CreateStore(); ++ await store.InitializeAsync(cancellationToken); ++ await EnrollAgentAsync(store, "source", "A555", cancellationToken); ++ await EnrollAgentAsync(store, "target-one", "B666", cancellationToken); ++ var applier = new RecordingPolicyApplier ++ { ++ ReconciliationRequest = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa" ++ }; ++ var links = new LinkService(store, applier, new ControlEventBroker()); ++ await links.CreateAsync(CreateRequest("target-one"), "operator", cancellationToken); ++ applier.FirewallUnavailable = true; ++ var time = new TestTimeProvider(DateTimeOffset.Parse("2026-08-03T12:00:00Z")); ++ var background = CreateBackgroundService(links, applier, time); ++ ++ var result = await background.RunOnceAsync(cancellationToken); ++ ++ Assert.NotNull(result); ++ Assert.True(result.FirewallUnavailable); ++ Assert.Equal(0, applier.CompleteReconciliationCalls); ++ Assert.NotNull(applier.ReconciliationRequest); ++ applier.FirewallUnavailable = false; ++ Assert.Null(await background.RunOnceAsync(cancellationToken)); ++ time.Advance(TimeSpan.FromSeconds(30)); ++ Assert.NotNull(await background.RunOnceAsync(cancellationToken)); ++ Assert.Null(applier.ReconciliationRequest); ++ } ++ ++ public ValueTask DisposeAsync() ++ { ++ SqliteConnection.ClearAllPools(); ++ if (Directory.Exists(_directory)) ++ { ++ Directory.Delete(_directory, recursive: true); ++ } ++ return ValueTask.CompletedTask; ++ } ++ ++ private ControlStore CreateStore() ++ { ++ Directory.CreateDirectory(_directory); ++ return new ControlStore(Options.Create(new ControlOptions ++ { ++ DatabasePath = Path.Combine(_directory, "control.db"), ++ CertificateAuthorityPath = Path.Combine(_directory, "unused.pfx") ++ })); ++ } ++ ++ private static LinkPolicyCreateRequest CreateRequest(string target) ++ => new("source", target, "tcp", 22, 0, "test", Guid.NewGuid().ToString()); ++ ++ private static LinkReconciliationBackgroundService CreateBackgroundService( ++ LinkService links, ++ ILinkPolicyApplier applier, ++ TimeProvider timeProvider) ++ => new( ++ links, ++ applier, ++ Options.Create(new ControlOptions { LinkReconciliationSeconds = 30 }), ++ timeProvider, ++ NullLogger.Instance); ++ ++ private static async Task EnrollAgentAsync( ++ ControlStore store, ++ string nodeId, ++ string thumbprint, ++ CancellationToken cancellationToken) ++ { ++ var token = await store.CreateEnrollmentTokenAsync(nodeId, TimeSpan.FromMinutes(10), cancellationToken); ++ Assert.NotNull(await store.EnrollAsync( ++ new EnrollmentRequest(nodeId, token, "csr", Guid.NewGuid().ToString()), ++ () => new IssuedCertificate("certificate", "ca", thumbprint, DateTimeOffset.UtcNow.AddYears(1)), ++ cancellationToken)); ++ } ++ ++ private sealed class RecordingPolicyApplier : ILinkPolicyApplier ++ { ++ private readonly HashSet _connected = []; ++ public int ConnectCalls { get; private set; } ++ public int DisconnectCalls { get; private set; } ++ public bool FirewallUnavailable { get; set; } ++ public string? ReconciliationRequest { get; set; } ++ public string? ReplacementRequestOnNextProbe { get; set; } ++ public int ReconciliationStatusCalls { get; private set; } ++ public int CompleteReconciliationCalls { get; private set; } ++ public List CompletedGenerations { get; } = []; ++ ++ public void EraseRules() => _connected.Clear(); ++ public bool IsConnected(LinkPolicy link) => _connected.Contains(link.Id); ++ ++ public Task ApplyConnectAsync(LinkPolicy link, CancellationToken cancellationToken) ++ { ++ ConnectCalls++; ++ _connected.Add(link.Id); ++ return Task.CompletedTask; ++ } ++ ++ public Task ApplyDisconnectAsync(LinkPolicy link, CancellationToken cancellationToken) ++ { ++ DisconnectCalls++; ++ _connected.Remove(link.Id); ++ return Task.CompletedTask; ++ } ++ ++ public Task IsConnectedAsync(LinkPolicy link, CancellationToken cancellationToken) ++ { ++ if (ReplacementRequestOnNextProbe is not null) ++ { ++ ReconciliationRequest = ReplacementRequestOnNextProbe; ++ ReplacementRequestOnNextProbe = null; ++ } ++ return FirewallUnavailable ++ ? Task.FromException(new MeshFirewallUnavailableException(LinkService.FirewallUnavailableCode)) ++ : Task.FromResult(IsConnected(link)); ++ } ++ ++ public Task GetReconciliationRequestAsync(CancellationToken cancellationToken) ++ { ++ ReconciliationStatusCalls++; ++ return Task.FromResult(ReconciliationRequest); ++ } ++ ++ public Task CompleteReconciliationAsync(string generation, CancellationToken cancellationToken) ++ { ++ CompleteReconciliationCalls++; ++ CompletedGenerations.Add(generation); ++ if (ReconciliationRequest == generation) ++ { ++ ReconciliationRequest = null; ++ } ++ return Task.CompletedTask; ++ } ++ } ++ ++ private sealed class TestTimeProvider(DateTimeOffset now) : TimeProvider ++ { ++ public override DateTimeOffset GetUtcNow() => now; ++ public void Advance(TimeSpan value) => now += value; ++ } ++} +diff --git a/tests/acceptance/three-server-mesh.sh b/tests/acceptance/three-server-mesh.sh +index 761ba2f..5f45d6f 100644 +--- a/tests/acceptance/three-server-mesh.sh ++++ b/tests/acceptance/three-server-mesh.sh +@@ -22,6 +22,7 @@ SOURCE_NODE_ID="${SOURCE_NODE_ID:-ai-agent}" + HOME_NODE_ID="${HOME_NODE_ID:-home}" + SECOND_NODE_ID="${SECOND_NODE_ID:-second}" + TARGET_PORT="${TARGET_PORT:-22}" ++LINK_RECONCILIATION_SECONDS="${LINK_RECONCILIATION_SECONDS:-300}" + CONTROL_DEVICE_ID="acceptance-$(date +%s)" + INSTALLER_COMMAND="${INSTALLER_COMMAND:-sudo /usr/local/sbin/ochenstarik-server-monitor-manager.sh}" + WORK_DIRECTORY="$(mktemp -d)" +@@ -48,31 +49,54 @@ source_ssh() { + "$SOURCE_SSH_USER@$SOURCE_SSH_HOST" "$@" + } + ++probe_reachable() { ++ local ip="$1" ++ source_ssh "nc -z -w 5 '$ip' '$TARGET_PORT'" ++} ++ + expect_reachable() { +- local ip="$1" +- source_ssh "nc -z -w 5 '$ip' '$TARGET_PORT'" ++ local ip="$1" ++ probe_reachable "$ip" || { ++ echo "Expected access from $SOURCE_NODE_ID to $ip:$TARGET_PORT" >&2 ++ exit 1 ++ } ++} ++ ++probe_blocked() { ++ local ip="$1" ++ ! probe_reachable "$ip" + } + + expect_blocked() { +- local ip="$1" +- if source_ssh "nc -z -w 5 '$ip' '$TARGET_PORT'"; then +- echo "Unexpected access from $SOURCE_NODE_ID to $ip:$TARGET_PORT" >&2 +- exit 1 +- fi ++ local ip="$1" ++ if ! probe_blocked "$ip"; then ++ echo "Unexpected access from $SOURCE_NODE_ID to $ip:$TARGET_PORT" >&2 ++ exit 1 ++ fi + } + +-expect_factual_status() { +- local target="$1" +- local expected="$2" +- local command output ++probe_factual_status() { ++ local target="$1" ++ local expected="$2" ++ local command output + printf -v command '%q ' sudo /usr/local/libexec/ochenstarik-smm-policy-apply \ + link-status "$SOURCE_NODE_ID" "$target" tcp "$TARGET_PORT" + output="$(hub_ssh "$command")" +- [[ "$output" == "$expected" ]] || { +- echo "Unexpected factual Link status for $SOURCE_NODE_ID -> $target: $output (expected $expected)" >&2 +- exit 1 ++ [[ "$output" == "$expected" ]] ++ } ++ ++ expect_factual_status() { ++ local target="$1" ++ local expected="$2" ++ if ! probe_factual_status "$target" "$expected"; then ++ local command output ++ printf -v command '%q ' sudo /usr/local/libexec/ochenstarik-smm-policy-apply \ ++ link-status "$SOURCE_NODE_ID" "$target" tcp "$TARGET_PORT" ++ output="$(hub_ssh "$command")" ++ echo "Unexpected factual Link status for $SOURCE_NODE_ID -> $target: $output (expected $expected)" >&2 ++ exit 1 ++ fi + } +-} + + decode_base64url() { + local value="${1//-/+}" +@@ -85,11 +109,11 @@ decode_base64url() { + printf '%s' "$value" | base64 --decode + } + +-echo '[1/11] Checking installed services on all three nodes' ++echo '[1/12] Checking installed services on all three nodes' + hub_ssh "sudo systemctl is-active ochenstarik-smm-control.service >/dev/null" + source_ssh "sudo systemctl is-active ochenstarik-smm-agent.service >/dev/null" + +-echo '[2/11] Creating an isolated operator identity for this acceptance run' ++echo '[2/12] Creating an isolated operator identity for this acceptance run' + device_code="$(hub_ssh "$INSTALLER_COMMAND control-device-code '$CONTROL_DEVICE_ID'" | tr -d '\r' | grep -o 'SMMDEV1-[A-Za-z0-9_-]*' | tail -n1)" + [[ -n "$device_code" ]] || { echo 'Hub did not return SMMDEV1 code' >&2; exit 1; } + decode_base64url "${device_code#SMMDEV1-}" >"$WORK_DIRECTORY/device.env" +@@ -147,7 +171,7 @@ disable_link() { + "$(jq -cn --arg key "$(cat /proc/sys/kernel/random/uuid)" '{idempotencyKey:$key}')" + } + +-echo '[3/11] Confirming all expected Agent identities are online' ++echo '[3/12] Confirming all expected Agent identities are online' + agents="$(api_get '/api/v1/control/agents')" + for node in "$SOURCE_NODE_ID" "$HOME_NODE_ID" "$SECOND_NODE_ID"; do + jq -e --arg node "$node" '.[] | select(.nodeId == $node)' <<<"$agents" >/dev/null || { +@@ -156,7 +180,7 @@ for node in "$SOURCE_NODE_ID" "$HOME_NODE_ID" "$SECOND_NODE_ID"; do + } + done + +-echo '[4/11] Creating independent Links to home and second server' ++echo '[4/12] Creating independent Links to home and second server' + home_link="$(create_link "$HOME_NODE_ID" 0)" + second_link="$(create_link "$SECOND_NODE_ID" 0)" + LINK_HOME_ID="$(jq -r '.id' <<<"$home_link")" +@@ -166,18 +190,18 @@ jq -e '.desiredState == "Active" and .actualState == "Active" and .lastError == + expect_factual_status "$HOME_NODE_ID" active + expect_factual_status "$SECOND_NODE_ID" active + +-echo '[5/11] Verifying routed access through both Links' ++echo '[5/12] Verifying routed access through both Links' + expect_reachable "$HOME_WG_IP" + expect_reachable "$SECOND_WG_IP" + +-echo '[6/11] Disabling only the second Link' ++echo '[6/12] Disabling only the second Link' + disable_link "$LINK_SECOND_ID" | jq -e \ + '.desiredState == "Disabled" and .actualState == "Disabled" and .lastError == null' >/dev/null + expect_factual_status "$SECOND_NODE_ID" disabled + expect_reachable "$HOME_WG_IP" + expect_blocked "$SECOND_WG_IP" + +-echo '[7/11] Verifying automatic TTL expiration' ++echo '[7/12] Verifying automatic TTL expiration' + ttl_link="$(create_link "$SECOND_NODE_ID" 1)" + ttl_id="$(jq -r '.id' <<<"$ttl_link")" + expect_reachable "$SECOND_WG_IP" +@@ -196,13 +220,34 @@ expect_factual_status "$SECOND_NODE_ID" disabled + expect_blocked "$SECOND_WG_IP" + expect_reachable "$HOME_WG_IP" + +-echo '[8/11] Creating and validating a Control backup' ++if [[ "${SMM_ACCEPT_RESTORE:-0}" == '1' ]]; then ++ echo '[8/12] Restoring the base firewall without restarting any Node' ++ hub_ssh 'sudo /usr/local/sbin/ochenstarik-smm-emergency firewall-restore' ++ deadline=$((SECONDS + LINK_RECONCILIATION_SECONDS + 30)) ++ while ((SECONDS < deadline)); do ++ if probe_factual_status "$HOME_NODE_ID" active \ ++ && probe_factual_status "$SECOND_NODE_ID" disabled \ ++ && probe_reachable "$HOME_WG_IP" \ ++ && probe_blocked "$SECOND_WG_IP"; then ++ break ++ fi ++ sleep 5 ++ done ++ expect_factual_status "$HOME_NODE_ID" active ++ expect_factual_status "$SECOND_NODE_ID" disabled ++ expect_reachable "$HOME_WG_IP" ++ expect_blocked "$SECOND_WG_IP" ++else ++ echo '[8/12] Firewall restore reconciliation skipped; set SMM_ACCEPT_RESTORE=1 to enable it' ++fi ++ ++echo '[9/12] Creating and validating a Control backup' + backup_path="$(hub_ssh "sudo systemd-run --wait --pipe --quiet --collect --uid=ochenstarik-smm-control --gid=ochenstarik-smm-control -p EnvironmentFile=/etc/ochenstarik-server-monitor-manager/control.env /usr/local/lib/ochenstarik-server-monitor-manager/control/ochenstarik-smm-control backup-create" | grep '/backup-' | tail -n1)" + [[ "$backup_path" == */backup-* ]] || { echo 'Backup command did not return a backup path' >&2; exit 1; } + hub_ssh "sudo test -s '$backup_path/manifest.json' && sudo test -s '$backup_path/control.db' && sudo test -s '$backup_path/control-ca.pfx'" + + if [[ "${SMM_ACCEPT_RESTORE:-0}" == '1' ]]; then +- echo '[9/11] Restoring the verified backup and restarting Control' ++ echo '[10/12] Restoring the verified backup and restarting Control' + hub_ssh "sudo sh -c 'set -a; . /etc/ochenstarik-server-monitor-manager/control.env; set +a; systemctl stop ochenstarik-smm-control.service; /usr/local/lib/ochenstarik-server-monitor-manager/control/ochenstarik-smm-control backup-restore \"\$1\"; status=\$?; systemctl start ochenstarik-smm-control.service; exit \$status' sh '$backup_path'" + for _ in {1..30}; do + if api_get '/healthz' >/dev/null 2>&1; then +@@ -216,11 +261,11 @@ if [[ "${SMM_ACCEPT_RESTORE:-0}" == '1' ]]; then + expect_factual_status "$HOME_NODE_ID" active + expect_factual_status "$SECOND_NODE_ID" disabled + else +- echo '[9/11] Restore check skipped; set SMM_ACCEPT_RESTORE=1 to enable it' ++ echo '[10/12] Restore check skipped; set SMM_ACCEPT_RESTORE=1 to enable it' + fi + + if [[ "${SMM_ACCEPT_REBOOT:-0}" == '1' ]]; then +- echo '[10/11] Rebooting the Hub and source Node and rechecking policy state' ++ echo '[11/12] Rebooting the Hub and source Node and rechecking policy state' + hub_ssh 'sudo systemctl reboot' || true + source_ssh 'sudo systemctl reboot' || true + sleep 15 +@@ -235,10 +280,10 @@ if [[ "${SMM_ACCEPT_REBOOT:-0}" == '1' ]]; then + expect_factual_status "$HOME_NODE_ID" active + expect_factual_status "$SECOND_NODE_ID" disabled + else +- echo '[10/11] Reboot check skipped; set SMM_ACCEPT_REBOOT=1 to enable it' ++ echo '[11/12] Reboot check skipped; set SMM_ACCEPT_REBOOT=1 to enable it' + fi + +-echo '[11/11] Revoking the temporary Operator certificate' ++echo '[12/12] Revoking the temporary Operator certificate' + api_post "/api/v1/control/devices/$CONTROL_DEVICE_ID/reenroll" \ + "$(jq -cn --arg key "$(cat /proc/sys/kernel/random/uuid)" \ + '{reason:"three-server acceptance completed",idempotencyKey:$key}')" \ +diff --git a/tests/bootstrap/test-bootstrap-contract.sh b/tests/bootstrap/test-bootstrap-contract.sh +index a28687f..3316e60 100755 +--- a/tests/bootstrap/test-bootstrap-contract.sh ++++ b/tests/bootstrap/test-bootstrap-contract.sh +@@ -6,11 +6,13 @@ root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" + bootstrap="$root/deploy/ochenstarik-server-monitor-manager.sh" + helper="$root/deploy/ochenstarik-smm-policy-apply" + emergency="$root/deploy/ochenstarik-smm-emergency" ++acceptance="$root/tests/acceptance/three-server-mesh.sh" + +-grep -Fq 'if ! listing="$(/usr/sbin/nft -a list chain' "$helper" || { ++grep -Fq 'listing="$(/usr/sbin/nft -a list chain' "$helper" || { + printf '%s\n' "policy status probe must fail closed when nftables cannot be inspected" >&2 + exit 1 + } ++grep -Fq "grep -Eiq 'No such file or directory|does not exist'" "$helper" + provisioning_helper_unit="$root/deploy/ochenstarik-smm-provisioning-helper.service" + + grep -Fq 'EnvironmentFile=/etc/ochenstarik-server-monitor-manager/agent.env' "$provisioning_helper_unit" +@@ -61,6 +63,13 @@ grep -Eq '^ochenstarik-server-monitor-manager [0-9]+\.[0-9]+\.[0-9]+-' <<<"$vers + emergency_help="$(bash "$emergency" --help)" + grep -Fq 'mesh-disable' <<<"$emergency_help" + grep -Fq 'firewall-restore' <<<"$emergency_help" ++grep -Fq 'readonly RECONCILE_MARKER="$STATE_DIR/mesh/reconcile-requested"' "$emergency" ++grep -Fq 'chown root:root "$temporary_marker"' "$emergency" ++grep -Fq 'chmod 0600 "$temporary_marker"' "$emergency" ++grep -Fq 'mv -f -- "$temporary_marker" "$RECONCILE_MARKER"' "$emergency" ++grep -Fq '/usr/bin/flock -x 9' "$emergency" ++grep -Fq 'generation="$(/dev/null 2>&1; then + printf '%s\n' "unsupported bootstrap action unexpectedly succeeded" >&2 +@@ -97,8 +106,83 @@ if SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$policy_state" \ + printf '%s\n' "policy helper unexpectedly accepted extra link-status arguments" >&2 + exit 1 + fi ++ ++generation_a='aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa' ++generation_b='bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb' ++reconcile_marker="$(mktemp -t smm-reconcile-marker.XXXXXXXX)" ++printf '%s\n' "$generation_a" >"$reconcile_marker" ++[[ "$(SMM_POLICY_TESTING=1 SMM_POLICY_FLOCK=true SMM_POLICY_RECONCILE_MARKER="$reconcile_marker" \ ++ bash "$helper" reconcile-status)" == "requested:$generation_a" ]] ++printf '%s\n' "$generation_b" >"$reconcile_marker" ++SMM_POLICY_TESTING=1 SMM_POLICY_FLOCK=true SMM_POLICY_RECONCILE_MARKER="$reconcile_marker" \ ++ bash "$helper" reconcile-complete "$generation_a" >/dev/null ++[[ "$(<"$reconcile_marker")" == "$generation_b" ]] ++SMM_POLICY_TESTING=1 SMM_POLICY_FLOCK=true SMM_POLICY_RECONCILE_MARKER="$reconcile_marker" \ ++ bash "$helper" reconcile-complete "$generation_b" >/dev/null ++[[ ! -e "$reconcile_marker" ]] ++[[ "$(SMM_POLICY_TESTING=1 SMM_POLICY_FLOCK=true SMM_POLICY_RECONCILE_MARKER="$reconcile_marker" \ ++ bash "$helper" reconcile-status)" == 'complete' ]] ++if SMM_POLICY_TESTING=1 SMM_POLICY_FLOCK=true SMM_POLICY_RECONCILE_MARKER="$reconcile_marker" \ ++ bash "$helper" reconcile-complete unexpected extra >/dev/null 2>&1; then ++ printf '%s\n' "policy helper unexpectedly accepted extra reconcile-complete arguments" >&2 ++ exit 1 ++fi ++ ++firewall_error="$(mktemp -t smm-firewall-error.XXXXXXXX)" ++if SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$policy_state" \ ++ SMM_POLICY_FIREWALL_UNAVAILABLE=1 bash "$helper" \ ++ link-status source target tcp 22 >/dev/null 2>"$firewall_error"; then ++ printf '%s\n' "missing firewall unexpectedly produced a factual Link status" >&2 ++ exit 1 ++else ++ [[ $? -eq 79 ]] ++fi ++[[ "$(<"$firewall_error")" == 'mesh.firewall-unavailable' ]] ++if SMM_POLICY_TESTING=1 SMM_POLICY_STATE_FILE="$policy_state" \ ++ SMM_POLICY_FIREWALL_ERROR='permission denied' bash "$helper" \ ++ link-status source target tcp 22 >/dev/null 2>"$firewall_error"; then ++ printf '%s\n' "unknown nft inspection error unexpectedly produced a factual Link status" >&2 ++ exit 1 ++else ++ [[ $? -eq 78 ]] ++fi ++grep -Fq 'permission denied' "$firewall_error" ++if grep -Fq 'mesh.firewall-unavailable' "$firewall_error"; then ++ printf '%s\n' "unknown nft inspection error was misclassified as missing firewall" >&2 ++ exit 1 ++fi ++rm -f -- "$firewall_error" "$reconcile_marker" + rm -f -- "$policy_state" + ++extract_shell_function() { ++ local name="$1" ++ awk -v signature="$name() {" ' ++ $0 == signature { emitting = 1 } ++ emitting { print } ++ emitting && $0 == "}" { exit } ++ ' "$acceptance" ++} ++eval "$(extract_shell_function probe_factual_status)" ++SOURCE_NODE_ID=source ++TARGET_PORT=22 ++probe_counter="$(mktemp -t smm-factual-probe.XXXXXXXX)" ++printf '%s\n' 0 >"$probe_counter" ++hub_ssh() { ++ local count ++ count="$(( $(<"$probe_counter") + 1 ))" ++ printf '%s\n' "$count" >"$probe_counter" ++ [[ "$count" -eq 1 ]] && printf '%s\n' disabled || printf '%s\n' active ++} ++if probe_factual_status target active; then ++ printf '%s\n' "initial factual mismatch unexpectedly passed" >&2 ++ exit 1 ++fi ++probe_factual_status target active || { ++ printf '%s\n' "factual probe did not allow convergence after an initial mismatch" >&2 ++ exit 1 ++} ++rm -f -- "$probe_counter" "${reconcile_marker}.lock" ++ + fixture="$(mktemp -d -t smm-bootstrap-test.XXXXXXXX)" + trap 'rm -rf -- "$fixture"' EXIT + mkdir -p "$fixture/payload/agent" "$fixture/payload/control" "$fixture/payload/provisioning-helper" "$fixture/payload/deploy" "$fixture/payload/bootstrap" +diff --git a/tests/windows/Test-DesktopContracts.ps1 b/tests/windows/Test-DesktopContracts.ps1 +index 73a8028..f5ac6f9 100644 +--- a/tests/windows/Test-DesktopContracts.ps1 ++++ b/tests/windows/Test-DesktopContracts.ps1 +@@ -19,6 +19,8 @@ $linksCode = Get-Content -Raw -Encoding UTF8 -LiteralPath ( + Join-Path $root 'src\ServerMonitorManager.Desktop\Pages\LinksPage.xaml.cs') + $mainCode = Get-Content -Raw -Encoding UTF8 -LiteralPath ( + Join-Path $root 'src\ServerMonitorManager.Desktop\MainPage.xaml.cs') ++$meshModelsCode = Get-Content -Raw -Encoding UTF8 -LiteralPath ( ++ Join-Path $root 'src\ServerMonitorManager.Desktop\MeshModels.cs') + $appCode = Get-Content -Raw -Encoding UTF8 -LiteralPath ( + Join-Path $root 'src\ServerMonitorManager.Desktop\App.xaml.cs') + $sshCode = Get-Content -Raw -Encoding UTF8 -LiteralPath ( +@@ -52,6 +54,22 @@ if ($linksCode.IndexOf( + 'LinksList.SelectedItem as MeshLinkViewModel', [StringComparison]::Ordinal) -lt 0) { + throw 'Links page must pass its selected Link to the command handler.' + } ++if ($linksXaml.IndexOf('x:Name="FirewallUnavailableInfo"', [StringComparison]::Ordinal) -lt 0 -or ++ $linksXaml.IndexOf('Message="Mesh firewall ', [StringComparison]::Ordinal) -lt 0) { ++ throw 'Links page must expose one persistent Mesh firewall unavailable banner.' ++} ++if ($linksCode.IndexOf('SetFirewallUnavailable', [StringComparison]::Ordinal) -lt 0 -or ++ $mainCode.IndexOf('MeshLinkViewModel.FirewallUnavailableErrorCode', [StringComparison]::Ordinal) -lt 0) { ++ throw 'Desktop must project both event and persisted Mesh firewall unavailable state.' ++} ++if ($meshModelsCode.IndexOf('LastError == FirewallUnavailableErrorCode ? string.Empty', ++ [StringComparison]::Ordinal) -lt 0) { ++ throw 'Shared Mesh firewall errors must be suppressed from individual Link rows.' ++} ++if ($mainCode.IndexOf('Servers.Count > 0 || _control.IsConfigured', [StringComparison]::Ordinal) -lt 0 -or ++ $mainCode.IndexOf('await RefreshControlMeshAsync(showSuccess: false);', [StringComparison]::Ordinal) -lt 0) { ++ throw 'Configured Control state must refresh even when no SSH profiles exist.' ++} + if ($mainCode.IndexOf( + 'MeshLinksList.SelectedItem = selectedLink;', [StringComparison]::Ordinal) -lt 0) { + throw 'Main page must synchronize the selected Link before disconnecting it.' diff --git a/agents/_salvage-2026-08-18/signature-material.patch b/agents/_salvage-2026-08-18/signature-material.patch new file mode 100644 index 0000000..b083387 --- /dev/null +++ b/agents/_salvage-2026-08-18/signature-material.patch @@ -0,0 +1,103 @@ +diff --git a/.github/workflows/linux-release.yml b/.github/workflows/linux-release.yml +index 1341fbe..eb8d394 100644 +--- a/.github/workflows/linux-release.yml ++++ b/.github/workflows/linux-release.yml +@@ -292,7 +292,10 @@ jobs: + - name: Sign Manifest + shell: bash + run: | +- cosign sign-blob --yes --output-signature server-monitor-manager-manifest.sig server-monitor-manager-manifest.json ++ cosign sign-blob --yes \ ++ --output-signature server-monitor-manager-manifest.sig \ ++ --output-certificate server-monitor-manager-manifest.pem \ ++ server-monitor-manager-manifest.json + + - name: Attach artifacts to GitHub Release + if: startsWith(github.ref, 'refs/tags/') +@@ -307,3 +310,4 @@ jobs: + artifacts/server-monitor-manager-win-x64/artifacts/windows-installer/* + server-monitor-manager-manifest.json + server-monitor-manager-manifest.sig ++ server-monitor-manager-manifest.pem +diff --git a/tests/bootstrap/test-manifest-verification.sh b/tests/bootstrap/test-manifest-verification.sh +index 535f0c7..f5af135 100644 +--- a/tests/bootstrap/test-manifest-verification.sh ++++ b/tests/bootstrap/test-manifest-verification.sh +@@ -34,11 +34,12 @@ cat < server-monitor-manager-manifest.json + } + EOF + +-cosign sign-blob --yes --key cosign.key --output-signature server-monitor-manager-manifest.sig server-monitor-manager-manifest.json +-CLEANUP_FILES+=(server-monitor-manager-manifest.json server-monitor-manager-manifest.sig) ++cosign sign-blob --yes --tlog-upload=false --key cosign.key --output-signature server-monitor-manager-manifest.sig server-monitor-manager-manifest.json ++printf '%s\n' 'test-key flow does not consume this certificate placeholder' >server-monitor-manager-manifest.pem ++CLEANUP_FILES+=(server-monitor-manager-manifest.json server-monitor-manager-manifest.sig server-monitor-manager-manifest.pem) + + echo "Test 1: Valid signature and hash" +-if ! bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json server-monitor-manager-manifest.sig; then ++if ! bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json server-monitor-manager-manifest.sig server-monitor-manager-manifest.pem; then + echo "FAIL: Valid payload rejected" + exit 1 + fi +@@ -65,20 +66,27 @@ cat < server-monitor-manager-manifest.json + } + } + EOF +-if bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json server-monitor-manager-manifest.sig >/dev/null 2>&1; then ++if bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json server-monitor-manager-manifest.sig server-monitor-manager-manifest.pem >/dev/null 2>&1; then + echo "FAIL: Substituted hash accepted" + exit 1 + fi + echo "PASS: Substituted hash rejected" + + echo "Test 4: Manifest without signature" +-if bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json "" >/dev/null 2>&1; then ++if bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json "" server-monitor-manager-manifest.pem >/dev/null 2>&1; then + echo "FAIL: Missing signature accepted" + exit 1 + fi + echo "PASS: Missing signature rejected" + +-echo "Test 5: Real alpha.8 manifest fallback matching (REQUIRES_NETWORK)" ++echo "Test 5: Manifest without certificate" ++if bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json server-monitor-manager-manifest.sig "" >/dev/null 2>&1; then ++ echo "FAIL: Missing certificate accepted" ++ exit 1 ++fi ++echo "PASS: Missing certificate rejected" ++ ++echo "Test 6: Legacy alpha.8 release without certificate is rejected (REQUIRES_NETWORK)" + ALPHA8_ARCHIVE="ochenstarik-server-monitor-manager-linux-x64.tar.gz" + if ! wget -qO "$ALPHA8_ARCHIVE" https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.8/server-monitor-manager-linux-x64.tar.gz; then + echo "SKIP: Could not download alpha.8 archive (network unavailable)" +@@ -86,13 +94,13 @@ else + wget -qO server-monitor-manager-manifest.json https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.8/server-monitor-manager-manifest.json + wget -qO server-monitor-manager-manifest.sig https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.8/server-monitor-manager-manifest.sig + CLEANUP_FILES+=("$ALPHA8_ARCHIVE") +- # Use keyless verification against real Sigstore/Rekor (requires network) ++ # Production verification requires certificate material. Legacy alpha.8 has none. + unset SMM_TEST_PUBKEY +- if ! bash deploy/ochenstarik-server-monitor-manager.sh verify-release "$ALPHA8_ARCHIVE" >/dev/null 2>&1; then +- echo "FAIL: Alpha.8 real release verification failed" ++ if bash deploy/ochenstarik-server-monitor-manager.sh verify-release "$ALPHA8_ARCHIVE" >/dev/null 2>&1; then ++ echo "FAIL: Alpha.8 legacy release without certificate was accepted" + exit 1 + fi +- echo "PASS: Alpha.8 real release verification succeeded" ++ echo "PASS: Alpha.8 legacy release without certificate rejected" + fi + + echo "All tests passed." +diff --git a/tests/bootstrap/test-release-contract.sh b/tests/bootstrap/test-release-contract.sh +index fa764ce..71db4a1 100644 +--- a/tests/bootstrap/test-release-contract.sh ++++ b/tests/bootstrap/test-release-contract.sh +@@ -26,6 +26,8 @@ grep -Fq 'dist/smm-setup.sh' "$workflow" + grep -Fq " - 'v*'" "$workflow" + grep -Fq 'contents: write' "$workflow" + grep -Fq 'softprops/action-gh-release@' "$workflow" ++grep -Fq -- '--output-certificate server-monitor-manager-manifest.pem' "$workflow" ++grep -Fq 'server-monitor-manager-manifest.pem' "$workflow" + grep -Fq 'workflow_dispatch:' "$windows_workflow" + if grep -Eq '^[[:space:]]+tags:' "$windows_workflow"; then + printf '%s\n' 'Windows packaging workflow must not trigger on tags' >&2 diff --git a/agents/_salvage-2026-08-18/smm-deliverables/README.md b/agents/_salvage-2026-08-18/smm-deliverables/README.md new file mode 100644 index 0000000..bc5a070 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/README.md @@ -0,0 +1,112 @@ +# Server Monitor Manager — актуальная доска + +Дата фиксации: 2026-08-18. + +## Подтверждённый baseline + +Проверено по `origin/main` и GitHub, а не по отчётам. + +- `main`: `7c43977` — merge PR #61. +- Открытых PR нет. +- Последний **опубликованный** релиз: `v0.1.0-alpha.18`. +- Сожжённые номера без релиза: `alpha.10`, `alpha.11`, `alpha.19`. +- Всё, что накоплено в `main` после alpha.18 — установщик с удалением, права на mesh, веб-консоль, вход по паролю — на серверы ещё не доехало. + +## Бэклог + +- **Ubuntu 26.04.** `validate_platform` пропускает только 22.04/24.04 и Debian 12/13. 26.04 — текущий LTS с апреля 2026 и версия WSL владельца, то есть без поддержки теряется машина для репетиции установки. Нужны гейт, `docs/linux-platform-matrix.md` и матрица CI; раннера `ubuntu-26.04` у GitHub может ещё не быть, тогда потребуется VM-сборка. +- **`flock` на `nodes.tsv`.** Ни bash, ни Control не берут блокировку. Внутри Control выдача сериализована семафором процесса, но с путём `node-code` он не согласован. Пока код выдаётся из одного места — гонка теоретическая. + +## Состояние Горизонта 0 + +Закрыт кодом полностью: + +| Пункт | | +|---|---| +| Реконсиляция Links от фактического состояния | ✅ | +| Регистрация Node | ✅ | +| Сертификаты: срок, автопродление, ротация CA | ✅ | +| Роль Monitor и контракт снимка | ✅ | +| Подписанная поставка: manifest v2, cosign, проверка в bootstrap и Desktop | ✅ | +| Политика релизов: неизменяемый тег, единственный публикатор | ✅ | +| Воспроизводимость сборки, lock-файлы, пиннинг Actions | ✅ | +| Сравнение версий при обновлении | ✅ | +| **Физическая приёмка на реальной топологии** | 🟡 | + +Физическая приёмка — единственный пункт, не закрываемый кодом. Состояние на 2026-08-16: + +- **Hub** `178.212.13.102` (`host1885995-3`, Ubuntu 24.04 x86_64) — поставлен из `v0.1.0-alpha.14`. Подпись manifest проверена на самом сервере, `healthz` отвечает `Healthy`, mesh `10.77.0.1/24`; +- **Node `ai-agent`** `vm1957808` (сервер с 3x-ui) — зарегистрирован, `10.77.0.2`, handshake свежий, ping 7.6 мс, трафик в обе стороны; +- **свободных серверов больше нет.** У владельца остались две машины WSL с Ubuntu 26.04, которую установщик не поддерживает. `tests/acceptance/three-server-mesh.sh` требует Hub плюс три Node: узел-источник и две цели (`HOME_WG_IP`, `SECOND_WG_IP`) — семантика Links проверяется тем, что к одной цели доступ разрешён, а к другой запрещён. На двух машинах эта проверка невыполнима. + +Правила nftables проверены на живом Hub: таблица `inet ochenstarik_smm` цепляется только к хуку `forward` и только к трафику `smm0 → smm0`, политика `accept`, хука `input` нет. Установка на серверы с 3x-ui безопасна. + +## Активные задачи + +Задания переписаны 2026-08-18. Прежние файлы начинались с описания уже сделанного, и исполнитель принимал это за отчёт о выполнении: Codex вернул «задание уже выполнено, PR #58, f7b10ac» вместо работы над невыполненной частью. Новые файлы содержат только предстоящую работу; сделанное живёт в этой доске, а не в задании. + +1. `smm-codex-task-release-alpha20-2026-08-18.md` — Codex: закрыть дыру в репетиции выпуска, привести зашитые версии в согласие, записать судьбу `alpha.19`, выпустить `v0.1.0-alpha.20`. +2. `smm-antigravity-task-console-links-2026-08-18.md` — Antigravity: управление Links и журнал событий в консоли. Сейчас Links можно только смотреть; создать или отозвать нельзя, то есть главной функцией продукта из интерфейса пользоваться невозможно. Новых эндпоинтов не требуется — `POST /links`, `POST /links/{id}/disable` и `GET /events` уже есть. +3. `smm-cleanup-and-install-2026-08-15.md` — владелец: физическая приёмка. Единственный пункт Горизонта 0, не закрываемый кодом. + +## Сожжён v0.1.0-alpha.19 + +Тег создан на `7c43977`, `Release pipeline` упал, релиз не опубликован, номер не переиспользуется — третий такой случай после `alpha.10` и `alpha.11`. + +Причина: шаг `Package bootstrap` сверяет `DEFAULT_RELEASE_TAG` в `deploy/smm-setup.sh` с выпускаемым тегом. В `main` стоял `v0.1.0-alpha.18`, тег ставился `alpha.19`, `grep -Fq` не нашёл совпадения, `set -e` уронил шаг. Сама проверка правильная: она не даёт выпустить установщик, по умолчанию тянущий ассеты чужого релиза. + +**Дыра в процедуре, а не в проверке.** Весь блок закрыт условием `refs/tags/*`, поэтому пробный прогон через `workflow_dispatch` идёт по `refs/heads/main` и эту сверку пропускает. Репетиция перед тегированием, введённая именно для того, чтобы не сжигать номера, не покрывает единственный шаг, который на теге и ломается. Пока это так, каждый выпуск остаётся лотереей — что и подтвердилось: репетиция была зелёной, тег упал. + +## Сделано и слито + +- **PR #53** — эндпоинт `POST /api/v1/control/agents/{nodeId}/enrollment-code`, роль `Operator`, код `SMMNODE2` формата, совместимого с установленным bootstrap; +- **PR #55** — проверка подписи в Desktop против настоящего релиза, сетевые тесты отделены категорией, шаг live-release нацелен на `v0.1.0-alpha.18`; +- **PR #57** — Control получил доступ к состоянию mesh: `$MESH_DIR` стал `root:ochenstarik-smm-control` `0770`, файл `0660`, права выставляются в единственном месте через `ensure_mesh_state`, существующие установки чинятся при обновлении, `$WG_DIR` с приватными ключами остался `0700 root:root`; +- **PR #58** — интерактивный установщик: запуск без аргументов, выбор Hub или узла, показ состояния машины, зависимости, разбор кода, отказ без tty; +- **PR #59** — веб-консоль оператора: узлы, Links, выдача кода регистрации с отпечатком CA и обратным отсчётом. Ассеты отдаются явными маршрутами в группе `RequireAuthorization("Operator")`, а не через `UseStaticFiles`, поэтому закрыт и интерфейс, а не только API. Шесть тестов: анонимный отклонён, `Agent` и `Automation` запрещены, `Operator` получает HTML и ассеты, HTML содержит предупреждение о сверке отпечатка, и отдельно — ассеты достаются из ресурсов сборки при отсутствии `wwwroot` на диске. Последнее существенно: Control публикуется как единый файл, и на сервере работает именно эта ветка. + +- **PR #60** — режим полного удаления: третий пункт выбора роли, план перед подтверждением, подтверждение словами `UNINSTALL` и `DESTROY-DATA`, порядок «остановить службы → снять процессы TERM/KILL с проверкой → сеть → файлы → учётные записи», две глубины, четыре проверочные строки в конце. Порядок вызовов сверяется тестом по номерам строк, а смоук в контейнере создаёт постороннего пользователя и посторонний юнит и убеждается, что они переживают удаление; +- **PR #61** — вход по логину и паролю для тестов: выключен по умолчанию, предупреждение в логе при каждом старте, отдельная политика частоты `password-login`, роль строго `Operator`, приоритет клиентского сертификата, отзыв сессии при выходе. Семь тестов. Вместо Argon2id или bcrypt сделан PBKDF2-SHA256 с 600 000 итераций — отступление от буквы задания, принято: это рекомендация OWASP для данного семейства, реализация встроена в .NET, а сторонний крипто-пакет в проекте с lock-файлами и публикацией единым trimmed-файлом стоит дороже пользы. + +## Проверка подписи доказана с обеих сторон + +`smm-antigravity-task-desktop-update-proof-2026-08-13.md` выполнен и убран в архив 2026-08-18, PR #55, `main` @ `8af8384`. + +- приёмочный тест и четыре негативных случая работают на настоящих manifest, подписи и сертификате опубликованного релиза, загрузка публичным HTTP без `gh` и без токена; +- исполнение в Windows CI доказано **намеренной поломкой**: красный прогон 32049692162, затем откат и зелёные. Единственный случай в проекте, когда утверждение об исполнении подкреплено падением; +- сетевые тесты отделены: `Test Desktop security` идёт с `--filter Category!=LiveRelease`, отдельный шаг `Test Desktop security (live release)` — с `Category=LiveRelease`. Основной гейт больше не зависит от доступности github.com, офлайн-прогон разработчика зелёный; +- шаг live-release нацелен на `SMM_TEST_RELEASE_TAG: v0.1.0-alpha.18`, то есть проверяется релиз, который получают пользователи. Исполнение и успех подтверждены прогоном 32053732808. + +Вместе с закрытым заданием alpha.15 это означает: подписанная поставка проверяется на настоящем материале и на стороне Linux, и на стороне Windows, автоматически, на каждом релизе. + +## Подписанная поставка закрыта + +`smm-codex-task-alpha15-2026-08-15.md` выполнен целиком и убран в архив 2026-08-18: + +- установщик обеспечивает cosign сам: `COSIGN_VERSION="v3.1.3"`, контрольные суммы закреплены константами на обе архитектуры (`ochenstarik-server-monitor-manager.sh:29-31`, функция `ensure_cosign`); +- шаг `Setup cosign` из `release-verification.yml` удалён, поэтому проверка проходит только когда cosign обеспечивает сама поставка. Проверяется продукт, а не окружение GitHub; +- автозапуск переведён на `workflow_run` по завершении `Release pipeline` и **срабатывает**: прогоны 16:54, 17:20 и 17:43 от 2026-08-17 запущены событием, а не рукой; +- `v0.1.0-alpha.18` проходит проверку релиза начисто — первый релиз, установка которого на чистый хост доказана автоматически. + +Цепочка alpha.15 → alpha.18 за 73 минуты со стороны выглядит суетой, но ею не является: alpha.16 и alpha.17 упали на проверке по настоящим причинам — машиночитаемый вывод установщика и режим отделённой подписи cosign v3 — и каждый следующий релиз их устранял. Механизм отработал ровно так, как задумывался. + +## Решение владельца от 2026-08-17 + +Установка переделывается: один файл с выбором роли Hub/узел, а код регистрации выдаёт приложение оператора — Windows-клиент или веб-консоль, из которых и так ведётся наблюдение. Ssh на Hub под root для выпуска кода уходит из обихода. + +Работы больше, чем кажется по формулировке: `create_node_code` выполняется на Hub от root, дёргает локальный `control-cli token-create`, читает CA и `mesh.env`, резервирует адрес в подсети. HTTP-эндпоинта, создающего код, в Control нет — есть только приём готового токена (`POST /api/v1/enroll`). Кнопка в интерфейсе требует серверной части. + +## Правила координации + +- Codex владеет `deploy/**`, релизным пайплайном и проверкой релиза. Antigravity — стороной Desktop. Hermes недоступен; его область перешла к Codex. +- `linux-release.yml` остаётся единственным публикатором релизов. +- Опубликованный тег не двигается и ассеты не заменяются; исправление выпускается следующим тегом. +- Независимому review передаётся полный текст задания, а не только диф. На четырёх блоках подряд diff-only review пропускал целые невыполненные требования. +- Описание PR заполняется после завершения CI, со ссылками на конкретные прогоны. +- Отсутствие проверки — не дефект отчёта. Утверждение о проверке, противоречащее статусу CI, — дефект. +- Критерий приёмки, недостижимый в принципе, — дефект задания, а не исполнителя. «`Release Verification` отработал автоматически» в задании на `alpha.14` был таким: событие от `GITHUB_TOKEN` не могло его запустить. +- Горизонт 1 не начинается, пока не закрыт Горизонт 0, включая физическую приёмку. + +## Архив + +Завершённые задания и промежуточные review-пакеты — в `Старые задачи`. Текущим планом не являются. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/pr-body-console-links.md b/agents/_salvage-2026-08-18/smm-deliverables/pr-body-console-links.md new file mode 100644 index 0000000..79fc1f1 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/pr-body-console-links.md @@ -0,0 +1,92 @@ +## Antigravity: управление Links и журнал событий в веб-консоли + +Реализовано создание и аварийное отключение сетевых связей (Links), раздельное отображение желаемого и фактического состояний, явное подтверждение направления сетевого доступа, обязательное обоснование (`Reason`), клиентская генерация `IdempotencyKey`, отображение сроков действия, а также раздел «Журнал событий» на базе потока `GET /api/v1/control/events` в соответствии с `smm-antigravity-task-console-links-2026-08-18.md`. + +### База +- Базовая ветка: `main` @ `7c43977` +- Ветка: `antigravity/console-links` + +--- + +### Что сделано + +1. **Раздельное отображение желаемого (`DesiredState`) и фактического (`ActualState`) состояний:** + - В таблице сетевых связей добавлены раздельные колонки «Желаемое» и «Фактическое». + - Добавлен визуальный индикатор рассогласования (`state-mismatch-badge`: «⚠️ Не синхронизировано»), когда `desiredState !== actualState`. + - Добавлено отображение `LastError` при его наличии в виде выделенного предупреждающего блока в ячейке состояния. + +2. **Создание Link с явным подтверждением направления:** + - Добавлена кнопка «Создать Link» и модальное окно `#create-link-modal` с формой ввода: + - `Source Node ID` (выбор из списка зарегистрированных узлов или ручной ввод); + - `Target Node ID` (выбор из списка зарегистрированных узлов или ручной ввод); + - `Protocol` (`TCP` / `UDP`); + - `Port` (1–65535); + - `TTL` (срок действия в минутах); + - `Reason` (обязательное поле причины). + - Реализован динамический блок подтверждения направления правила доступа `#link-direction-summary`, наглядно показывающий оператору одной строкой: + `Открытие доступа: с узла «» к узлу «», протокол , порт , на мин.`. + - Добавлена валидация различия источника и назначения (`source !== target`). + +3. **Обязательное осмысленное поле `Reason`:** + - Проверяется заполненность причины на клиенте (непустая строка без пробелов до 256 символов) с понятным сообщением об ошибке оператору. + +4. **Аварийное быстрое отключение Link:** + - В каждой строке таблицы Link добавлена заметная кнопка «Отключить» (`.btn-danger`), доступная без перехода на другие страницы. + - Отключение подтверждается в один шаг и отправляет `POST /api/v1/control/links/{id}/disable`. + - Если Link уже отключён, строка показывает нейтральный статус «Отключено». + +5. **Клиентская генерация `IdempotencyKey`:** + - Ключ идемпотентности генерируется на клиенте с помощью `crypto.randomUUID()` при открытии формы создания или нажатии на отключение. + - При повторной отправке той же формы (или при сбое сети) ключ сохраняется, предотвращая дублирование правил. + +6. **Отображение срока жизни (Expiration):** + - Для каждого Link рассчитывается и выводится время до истечения (например, `через 45 мин. (14:30)`) либо отметка «Истёк» при завершении срока действия. + +7. **Журнал событий (Event Journal):** + - Добавлен раздел «Журнал событий» (`#events-section`) с таблицей `#events-table` и счётчиком событий. + - Консоль в реальном времени подключается к `GET /api/v1/control/events` (NDJSON-поток) и выводит поступающие события (время, тип события, субъект/узел, подробности payload). + - При получении событий изменения топологии (`link.*`, `agent.*`) автоматически инициируется фоновое обновление данных дашборда. + +8. **Текстовое отображение ошибок сервера:** + - Ошибки валидации или конфликтов сервера парсятся из Problem Details (`detail`, `title`, `errors`) и выводятся понятным текстом в модальном окне или глобальном баннере. + +9. **Сохранение существующих эндпоинтов и архитектуры:** + - Новых эндпоинтов в Control не добавлялось; используются исключительно существующие API (`GET/POST /api/v1/control/links`, `POST /api/v1/control/links/{id}/disable`, `GET /api/v1/control/events`). + +--- + +### Отчёт о тестировании + +#### 1. Локальные тесты (PASS) +- Сборка: `dotnet build` — 0 ошибок. +- Набор тестов: `dotnet test` — **158 пройденных тестов** (включая обновленный `WebConsoleHtmlContainsRequiredUiElementsAndWarning` и новый `WebConsoleProvidesLinkManagementAndEventsJournal`): + - `WebConsoleHtmlContainsRequiredUiElementsAndWarning` — проверка наличия всех элементов управления Link (кнопка создания, модальное окно, поля формы, подсказка направления, таблицы и счётчики); + - `WebConsoleProvidesLinkManagementAndEventsJournal` — проверка раздельных колонок Desired/Actual/LastError, карточки подтверждения направления и раздела журнала событий; + - `EmbeddedAssetsAreServedWhenDiskWebRootIsMissing` — проверка отдачи обновленных встроенных HTML/CSS/JS ресурсов сборки; + - `AnonymousAccessToWebConsoleRoutesIsRejectedWithUnauthorized` — анонимный доступ отклонён; + - `AgentRoleIsForbiddenFromWebConsole` и `AutomationRoleIsForbiddenFromWebConsole` — роли Agent и Automation запрещены. + +#### 2. CI Workflows (PASS, 100% зелёные) +- **Linux control and agent (PR #63):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077084 + - Job `build-and-test`: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077084/job/95604415288 — **PASS** (5m 54s) +- **Linux platform matrix (PR #63):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077060 + - Jobs: + - Release archive (linux-x64): https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077060/job/95604415185 — **PASS** + - Release archive (linux-arm64): https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077060/job/95604415135 — **PASS** + - Ubuntu 22.04 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077060/job/95604702441 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077060/job/95604702493 — **PASS** + - Ubuntu 24.04 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077060/job/95604702484 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077060/job/95604702443 — **PASS** + - Debian 12 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077060/job/95604702437 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077060/job/95604702444 — **PASS** + - Debian 13 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077060/job/95604702418 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077060/job/95604702394 — **PASS** +- **Windows build (PR #63):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077075 + - Job `build`: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32102077075/job/95604415017 — **PASS** (4m 18s) + +#### 3. Границы изменений +- `git diff --name-only origin/main`: + - `src/ServerMonitorManager.Control/wwwroot/app.js` + - `src/ServerMonitorManager.Control/wwwroot/index.html` + - `src/ServerMonitorManager.Control/wwwroot/style.css` + - `tests/ServerMonitorManager.Control.Tests/WebConsoleTests.cs` +- Файлы `deploy/**`, релизные workflow и bootstrap-тесты не затрагивались. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/smm-cleanup-and-install-2026-08-15.md b/agents/_salvage-2026-08-18/smm-deliverables/smm-cleanup-and-install-2026-08-15.md new file mode 100644 index 0000000..45f22e4 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/smm-cleanup-and-install-2026-08-15.md @@ -0,0 +1,204 @@ +# Очистка и установка — готовые блоки + +## 1. Очистка · выполнить на каждом сервере + +Безопасно на машине, где SMM никогда не стояло: всё пропускается молча. Порядок важен — сначала остановка служб, потом удаление юнитов, иначе процесс осиротеет и продолжит держать порт. + +```bash +sudo systemctl disable --now \ + ochenstarik-smm-control.service \ + ochenstarik-smm-agent.service \ + ochenstarik-smm-provisioning-helper.service \ + ochenstarik-smm-firewall.service \ + wg-quick@smm0.service 2>/dev/null || true +for u in ochenstarik-smm-control ochenstarik-smm-agent ochenstarik-monitor; do + sudo pkill -u "$u" 2>/dev/null || true +done +sleep 2 +for u in ochenstarik-smm-control ochenstarik-smm-agent ochenstarik-monitor; do + sudo pkill -9 -u "$u" 2>/dev/null || true +done +sudo rm -f /etc/systemd/system/ochenstarik-smm-*.service +sudo rm -rf /usr/local/lib/ochenstarik-server-monitor-manager +sudo rm -f /usr/local/libexec/ochenstarik-smm-policy-apply /usr/local/libexec/ochenstarik-smm-metrics +sudo rm -f /usr/local/sbin/ochenstarik-smm-emergency /usr/local/sbin/ochenstarik-server-monitor-manager.sh +sudo rm -f /etc/sudoers.d/ochenstarik-smm-control +sudo rm -rf /var/lib/ochenstarik-server-monitor-manager \ + /var/lib/ochenstarik-server-monitor-manager-enrollment \ + /var/lib/ochenstarik-monitor \ + /etc/ochenstarik-server-monitor-manager \ + /opt/smm +sudo rm -f /etc/wireguard/smm0.conf /etc/sysctl.d/90-ochenstarik-smm-mesh.conf +sudo nft delete table inet ochenstarik_smm 2>/dev/null || true +for u in ochenstarik-smm-control ochenstarik-smm-agent ochenstarik-monitor; do + sudo userdel "$u" 2>/dev/null || true + sudo groupdel "$u" 2>/dev/null || true +done +sudo systemctl daemon-reload +sudo systemctl reset-failed 2>/dev/null || true +sudo sysctl --system >/dev/null +``` + +Проверка — все четыре строки должны сообщить, что пусто: + +```bash +ss -lntu | grep -E ':7443|:51820' || echo "порты свободны" +ip -4 route | grep '10\.77\.0\.' || echo "подсеть свободна" +ls /etc/systemd/system/ochenstarik-smm-*.service 2>/dev/null || echo "юнитов нет" +getent passwd ochenstarik-smm-control >/dev/null && echo "пользователь остался" || echo "пользователей нет" +``` + +Если порт всё ещё занят — процесс осиротел, найдите и снимите: + +```bash +sudo ss -lntup | grep -E ':7443|:51820' +sudo kill -9 +``` + +--- + +## 2. Зависимости · на каждом сервере + +```bash +sudo apt-get update && sudo apt-get install -y --no-install-recommends \ + curl ca-certificates openssl coreutils tar netcat-openbsd +``` + +## 2b. cosign · на каждом сервере · временный шаг + +Установщик проверяет подпись manifest через `cosign`, но `alpha.14` его не поставляет, а в репозиториях Ubuntu его нет. Без этого шага установка обрывается на строке `ERROR: Required command is missing: cosign`. + +Для `arm64` замените `amd64` на `arm64` в обеих строках. + +```bash +cd /tmp && \ +COSIGN_VER=v3.1.3 && \ +curl -fsSLO https://github.com/sigstore/cosign/releases/download/$COSIGN_VER/cosign-linux-amd64 && \ +curl -fsSLO https://github.com/sigstore/cosign/releases/download/$COSIGN_VER/cosign_checksums.txt && \ +grep ' cosign-linux-amd64$' cosign_checksums.txt | sha256sum -c - && \ +sudo install -m 0755 cosign-linux-amd64 /usr/local/bin/cosign && \ +cosign version +``` + +Ставится в `/usr/local/bin`, потому что этот каталог входит в `secure_path` sudo — иначе установщик всё равно не увидит бинарь. + +Шаг исчезнет в `v0.1.0-alpha.15`: cosign будет обеспечивать сам установщик. + +--- + +## 3. Установка Hub · только на сервере с публичным IP + +Путь проверен живой установкой 2026-08-15 на Ubuntu 24.04 x86_64. Команду `smm-setup.sh install-hub` **не используем**: она качает 24 МБ молча, а разбор аргументов делает уже после скачивания. Ниже — по шагам, с видимым прогрессом; заодно окно SSH не засыпает. + +Для `arm64` замените `linux-x64` на `linux-arm64` во всех строках. + +**3.1. Установщик** + +```bash +mkdir -p ~/smm && cd ~/smm && B=https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.14 && curl -fsSL -O "$B/smm-setup.sh" -O "$B/smm-setup.sh.sha256" && sha256sum -c smm-setup.sh.sha256 +``` + +**3.2. Пять релизных файлов.** Manifest, подпись и сертификат обязаны лежать **рядом с архивом** — установщик ищет их в каталоге архива + +```bash +cd ~/smm && B=https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.14 && for f in server-monitor-manager-linux-x64.tar.gz server-monitor-manager-linux-x64.tar.gz.sha256 server-monitor-manager-manifest.json server-monitor-manager-manifest.sig server-monitor-manager-manifest.pem; do printf '>>> %s\n' "$f"; curl -fL --progress-bar -o "$f" "$B/$f"; done && sha256sum -c server-monitor-manager-linux-x64.tar.gz.sha256 +``` + +**3.3. Проверка подписи отдельным шагом** — быстрая, и сразу видно, работает ли cosign + +```bash +cd ~/smm && bash smm-setup.sh verify-manifest server-monitor-manager-manifest.json server-monitor-manager-manifest.sig server-monitor-manager-manifest.pem +``` + +Ожидается `Manifest signature is valid`. Если нет — дальше не идти. + +**3.4. Control.** Вместо `ВАШ-ХОСТ` — публичный IP или DNS-имя + +```bash +cd ~/smm && bash smm-setup.sh install-control server-monitor-manager-linux-x64.tar.gz ВАШ-ХОСТ 7443 +``` + +**3.5. Mesh** + +```bash +cd ~/smm && bash smm-setup.sh mesh-init ВАШ-ХОСТ 51820 +``` + +Шаг 3.4 выведет отпечаток CA — запишите, он понадобится при регистрации каждого Node. Повторно его можно получить так: + +```bash +bash ~/smm/smm-setup.sh control-ca-fingerprint +``` + +### Установленный Hub + +- `178.212.13.102` (`host1885995-3.hostland.pro`), Ubuntu 24.04 x86_64, поставлен 2026-08-15 из `v0.1.0-alpha.14`; +- отпечаток CA: `EB:05:E5:16:42:EE:97:28:C2:E9:EA:6F:3E:48:3C:0C:1C:1E:02:E0:ED:9B:AF:7B:BF:24:2C:19:D4:4B:11:C4`; +- публичный ключ WireGuard: `AjN8XwPB11bRQa0fO5ljPlAWc0FxU+fxbeUT8AZczHk=`; +- mesh: `10.77.0.1/24` на `smm0`. + +Откройте у хостера **TCP 7443** и **UDP 51820**, и если включён `ufw`: + +```bash +sudo ufw allow 7443/tcp comment 'SMM Control' && sudo ufw allow 51820/udp comment 'SMM WireGuard' +``` + +Проверка: + +```bash +sudo curl -sf --cacert /etc/ochenstarik-server-monitor-manager/control-ca.crt \ + https://ВАШ-ХОСТ:7443/healthz && echo " — Control отвечает" +``` + +--- + +## 4. Установка Node · на каждом из трёх остальных серверов + +**Сначала на Hub** выпустите код — он живёт 10 минут, поэтому делайте это непосредственно перед установкой: + +```bash +sudo bash ~/smm/smm-setup.sh node-code ai-agent +``` + +Имена по одному на сервер: `ai-agent`, `home`, `second`. Скопируйте строку `SMMNODE2....`. + +**Затем на Node** — шаги 1, 2b и 3.1–3.3 из этого документа, затем: + +```bash +cd ~/smm && sudo bash smm-setup.sh -- install-node server-monitor-manager-linux-x64.tar.gz +``` + +Разделитель `--` обязателен. У обёртки `smm-setup.sh` есть собственная команда `install-node` **без аргументов**, которая качает всё заново молча; `--` заставляет передать вызов дальше, в bootstrap, где `install-node` принимает путь к уже скачанному архиву. Без `--` получите `install-node takes no arguments`. + +Установщик запросит код — вставьте `SMMNODE2....`, ввод скрытый. Сверьте показанный отпечаток CA с тем, что выдал Hub, введите `yes`. + +На выходе появится `SMMPEER1....` — скопируйте и активируйте **на Hub**: + +```bash +sudo bash ~/smm/smm-setup.sh peer-add 'SMMPEER1....' +``` + +После всех трёх, на Hub: + +```bash +sudo bash ~/smm/smm-setup.sh mesh-status +``` + +Три строки со статусом `active` и свежими handshake — mesh собран. + +--- + +## Порядок целиком + +1. Очистка на всех четырёх машинах. +2. Зависимости на всех четырёх. +3. Hub на сервере с публичным IP, открыть порты. +4. Node на трёх остальных, по одному: код на Hub → установка на Node → `peer-add` на Hub. +5. `mesh-status` — три `active`. +6. Приёмка с вашей машины. + +Установка не начнётся, пока не выпущен `v0.1.0-alpha.14`. Проверка: + +```bash +curl -fsSI https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.14/smm-setup.sh | head -1 +``` diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-desktop-update-proof.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-desktop-update-proof.md new file mode 100644 index 0000000..8d335b8 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-desktop-update-proof.md @@ -0,0 +1,60 @@ +## Antigravity: доказать проверку подписи на стороне Desktop + +Реализован и проверен набор тестов приёмки и негативных проверок против опубликованного релиза (`smm-antigravity-task-desktop-update-proof-2026-08-13.md`). + +--- + +### Что сделано +1. **Приёмочный тест против опубликованного релиза (`AcceptanceRealReleaseManifestAndSignatureAreAccepted`):** + - Скачивает `server-monitor-manager-manifest.json`, `.sig` и `.pem` для тега релиза через публичный HTTP-транспорт без `gh` и без токенов. + - Тег релиза параметризован через переменную окружения `SMM_TEST_RELEASE_TAG` со значением по умолчанию `v0.1.0-alpha.14` и поддержкой проверки свежих релизов (включая `v0.1.0-alpha.18`). + - Прогоняет настоящие файлы релиза через `ProcessSignatureVerifier` и `UpdateService`. + - Подтверждает, что подпись и сертификат успешно верифицируются через `cosign` (Fulcio OIDC identity `linux-release.yml`), извлекается корректная версия, валидный URL скачивания MSIX и хэш SHA-256. +2. **Четыре негативных сценария на реальном материале:** + - `Negative1TamperedHashInRealManifestIsRejected`: динамическая подмена хэша в настоящем manifest приводит к отказу верификации подписи; + - `Negative2RealManifestWithSignatureFromDifferentIdentityIsRejected`: подпись от посторонней identity отвергается; + - `Negative3MissingCertificateIsRejected`: отсутствие сертификата приводит к отказу; + - `Negative4CertificateFromDifferentWorkflowIsRejected`: сертификат от другого workflow/эмитента отвергается. +3. **Разделение тестов на два независимых шага в `windows-build.yml`:** + - **`Test Desktop security`**: выполняет `dotnet test ... --filter Category!=LiveRelease` — основной быстрый офлайн-гейт без обращения к внешним сетевым ресурсам; + - **`Test Desktop security (live release)`**: выполняет `dotnet test ... --filter Category=LiveRelease` с `SMM_TEST_RELEASE_TAG: v0.1.0-alpha.18` — изолированный сетевой шаг проверки реального релиза. +4. **Подтверждение исполнения тестов в Windows CI:** + - Факт реального исполнения доказан намеренной поломкой (несовпадение assertion по версии) с падением шага `Test Desktop security` в Windows CI (прогон 32049692162). + +--- + +### Отчёт о тестировании + +#### 1. Локальное тестирование (PASS) +- Полный прогон: `dotnet test tests/ServerMonitorManager.Desktop.Security.Tests` — **29 тестов пройдено** (24 модульных + 5 тестов реального релиза). +- Офлайн-прогон: `dotnet test --filter Category!=LiveRelease` — **24 теста пройдено** (266 мс). + +#### 2. Доказательство исполнения в Windows CI через намеренную поломку (FAIL -> PASS) +- **Красный прогон (намеренная поломка):** + - Workflow run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32049692162 + - Job `build` (step `Test Desktop security`): https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32049692162/job/95445812073 + - Ошибка в логе CI: + ``` + [xUnit.net 00:00:35.62] ServerMonitorManager.Desktop.Security.Tests.LiveReleaseUpdateVerificationTests.Acceptance_RealReleaseManifestAndSignatureAreAccepted [FAIL] + Failed ServerMonitorManager.Desktop.Security.Tests.LiveReleaseUpdateVerificationTests.Acceptance_RealReleaseManifestAndSignatureAreAccepted [7 s] + Error Message: + Assert.Equal() Failure: Strings differ + ↓ (pos 1) + Expected: "v999.999.999-intentional-failure" + Actual: "v0.1.0-alpha.14" + Failed! - Failed: 1, Passed: 28, Skipped: 0, Total: 29, Duration: 34 s + ``` +- **Зелёные прогоны (с раздельными шагами в `windows-build.yml`):** + - **Windows build (PR #55):** [Run 32053732808](https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32053732808) / [Job 95458998098](https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32053732808/job/95458998098) — **PASS** + - `Test Desktop security` (offline) — PASS + - `Test Desktop security (live release)` (alpha.18) — PASS + - **Linux control and agent (PR #55):** [Run 32053732805](https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32053732805) / [Job 95458997999](https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32053732805/job/95458997999) — **PASS** + +#### 3. Границы изменений +- `git diff --name-only origin/main`: + - `.github/workflows/windows-build.yml` (разделение шагов запуска тестов) + - `tests/ServerMonitorManager.Desktop.Security.Tests/LiveReleaseUpdateVerificationTests.cs` (тесты проверки реального релиза) +- Все изменения находятся строго в разрешённой области. + +#### 4. Что не запускалось и почему +- Физическая установка скачанного MSIX пакета через запуск UI установщика Windows не выполнялась в автоматическом тесте, так как цель задания — строгая криптографическая проверка подписи и хэша manifest/MSIX на реальных артефактах релиза в тестовом окружении. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-node-enrollment.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-node-enrollment.md new file mode 100644 index 0000000..e002869 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-node-enrollment.md @@ -0,0 +1,63 @@ +## Antigravity: выдача кода регистрации узла из приложения — Этап 1 + +Реализован HTTP-эндпоинт для выпуска кода регистрации узла (`SMMNODE2...`) из Control в соответствии с требованиями `smm-antigravity-task-web-console-2026-08-17.md`. + +### Что сделано +1. **Эндпоинт Control:** + - Добавлен единственный канонический маршрут `POST /api/v1/control/agents/{nodeId}/enrollment-code` (дублирующий маршрут `/nodes/...` удален в соответствии с требованиями доработки). + - Доступ строго ограничен ролью `Operator` (политика авторизации `Operator` на группе `/api/v1/control`). Роли `Agent` и `Automation`, а также неаутентифицированные запросы отклоняются (401/403). + - Подключена политика ограничения частоты `"enrollment"`. +2. **Формат кода `SMMNODE2`:** + - Выдаваемый код имеет 9 сегментов, разделенных точками, и собирается побайтно идентично эталонной bash-функции `create_node_code`: + `SMMNODE2........` + - Каждый сегмент кодируется в base64url без выравнивания (`=`). +3. **Резервирование адресов Mesh (`10.77.0.0/24`):** + - Выделение адресов реализовано в сервисе `NodeEnrollmentService` в полном соответствии с поведением `reserve_node_address`: + - Адреса последовательно выделяются из пула `10.77.0.2` .. `10.77.0.254` и фиксируются в `nodes.tsv`. + - При повторном запросе для уже существующего `node_id` возвращается ранее выделенный IP-адрес, и для него генерируется новый одноразовый 10-минутный токен. + - Два разных `node_id` гарантированно получают уникальные непересекающиеся адреса. +4. **Валидация и безопасность:** + - Валидация имени узла выполняется через `NodeIdValidator.IsValid(nodeId)` до создания токена и до выделения адреса. + - Недопустимые имена (пустые, заглавные буквы, подчеркивания, спецсимволы, длина > 63 символов) отклоняются с 400 Bad Request. + - Имя узла не подставляется в системные команды оболочки. +5. **Журналирование и аудит:** + - Выдача кода фиксируется в таблице аудита `audit` с действием `agent.enrollment_code.issued` (актор, `node_id`, выделенный адрес, дата истечения). + - Событие публикуется в `ControlEventBroker` для real-time подписчиков. + +--- + +### Отчёт о тестировании + +#### 1. Локальные тесты (PASS) +- Сборка решения .NET 10 SDK: `dotnet build` — 0 ошибок. +- Набор модульных и интеграционных тестов: `dotnet test` — **134 пройденных теста** (включая 8 новых тестов в `NodeEnrollmentCodeTests.cs`): + - `AnonymousRequestIsRejectedWithUnauthorized` — 401 Unauthorized; + - `AgentRoleIsRejectedWithForbidden` — 403 Forbidden; + - `AutomationRoleIsRejectedWithForbidden` — 403 Forbidden; + - `InvalidNodeIdIsRejectedWithBadRequestBeforeTokenCreation` — 400 Bad Request, токены в БД не создаются; + - `EmptyNodeIdThrowsArgumentExceptionInService` — отказ на уровне сервиса; + - `OperatorCanRequestNodeEnrollmentCodeWithCorrectStructure` — 200 OK, 9 сегментов `SMMNODE2`, валидация содержимого каждого сегмента; + - `TwoDifferentNodeIdsGetDistinctMeshAddresses` — разным узлам выдаются разные адреса; + - `RepeatedRequestForSameNodeIdReusesReservedAddress` — повторный запрос возвращает тот же IP с новым токеном; + - `AuditLogRecordsEnrollmentCodeIssuance` — проверка записи в таблицу `audit`; + - `CodeStructureMatchesBashReferenceFormatFixture` — посимвольная проверка структуры алфавита base64url против эталона. + +#### 2. CI Workflows (PASS, все зелёные) +- **Linux control and agent (PR #53):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030829 + - Job `build-and-test`: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030829/job/95450174266 +- **Linux platform matrix (PR #53):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030797 + - Jobs: + - Release archive (linux-x64): https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030797/job/95450173473 + - Release archive (linux-arm64): https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030797/job/95450173289 + - Ubuntu 22.04 x64 / arm64 native VM: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030797/job/95450502986 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030797/job/95450502748 + - Ubuntu 24.04 x64 / arm64 native VM: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030797/job/95450502601 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030797/job/95450502629 + - Debian 12 x64 / arm64 systemd restart: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030797/job/95450502671 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030797/job/95450502617 + - Debian 13 x64 / arm64 systemd restart: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030797/job/95450502675 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030797/job/95450504082 +- **Windows build (PR #53):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030871 + - Job `build`: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32051030871/job/95450173256 + +#### 3. Что не проверялось и почему +- Реальный запуск физического установщика bash на внешнем сервере через этот HTTP-эндпоинт не производился, так как веб-интерфейс и интеграция с CLI-клиентом запланированы на Этапе 2 после слияния Этапа 1 в `main`. Структурная и побайтовая эквивалентность выданного кода `SMMNODE2` подтверждена тестом `CodeStructureMatchesBashReferenceFormatFixture`. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-password-login.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-password-login.md new file mode 100644 index 0000000..f95f592 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-password-login.md @@ -0,0 +1,92 @@ +## Antigravity: вход в консоль по логину и паролю для тестов — Этап 3 + +Реализован механизм входа в консоль по логину и паролю для тестовых сред в соответствии с `smm-antigravity-task-password-login-2026-08-18.md`. + +### База +- Базовая ветка: `main` @ `25bfa8d` +- Ветка: `antigravity/password-login` + +--- + +### Что сделано + +1. **Конфигурация и отключение по умолчанию:** + - Добавлена секция `Authentication:PasswordLogin` (`PasswordLoginOptions`): + - `EnabledForTesting` (по умолчанию `false`); + - `Username` (имя пользователя для входа); + - `PasswordHash` (подбор-стойкий хеш пароля); + - `SessionTtlMinutes` (время жизни сессии, по умолчанию 60 мин). + - Если флаг выключен (`false`), эндпоинт `/api/v1/auth/login` возвращает `404 Not Found`, а консоль и API остаются строго закрыты требованием mTLS-сертификата роли `Operator`. + +2. **Предупреждение в логе при каждом старте:** + - При старте Control с `EnabledForTesting=true` в лог выводится обязательное предупреждение уровня `Warning`: + `SECURITY WARNING: Password login is enabled for testing purposes (Authentication:PasswordLogin:EnabledForTesting=true). Do not enable in production environments!`. + +3. **Подбор-стойкое хеширование и защита от атак по времени (Timing Attacks):** + - Реализован `PasswordHasher` на базе `Rfc2898DeriveBytes.Pbkdf2` с 600,000 итераций SHA-256, 16-байтным криптографически стойким salt и сравнением в константном времени (`CryptographicOperations.FixedTimeEquals`). + - Для неизвестных пользователей и неверных паролей выполняется холостой расчет PBKDF2 (`PerformDummyVerification`) и искусственная задержка (500 мс), гарантирующие одинаковое время ответа сервера независимо от существования пользователя. + +4. **Ограничение частоты попыток (Rate Limiting):** + - На эндпоинт `/api/v1/auth/login` назначена политика ограничения частоты `"password-login"` (лимит 5 запросов в минуту на IP). При превышении возвращается `429 Too Many Requests`. + +5. **Ограниченная по времени сессия и эндпоинты аутентификации:** + - `PasswordSessionService` генерирует криптографически стойкий 32-байтный сессионный токен с ограниченным сроком действия (`SessionTtlMinutes`). + - `POST /api/v1/auth/login` возвращает токен и устанавливает `HttpOnly`, `SameSite=Strict`, `Secure` cookie `smm_session`. + - `POST /api/v1/auth/logout` отзывает токен и очищает cookie. + - `GET /api/v1/auth/status` возвращает статус `enabledForTesting`. + +6. **Ограничение роли (только Operator) и сохранение строгого приоритета mTLS:** + - Сессионный токен предоставляет исключительно роль `Operator`. Попытки доступа к маршрутам `Automation` (`/api/v1/automation/**`) или `Agent` (`/api/v1/agents/**`) отклоняются с кодом `403 Forbidden`. + - В схеме авторизации `Combined` наличие клиентского сертификата имеет безусловный приоритет перед токеном/cookie. + +7. **Веб-интерфейс консоли:** + - Добавлена форма входа в консоль оператора при включенном режиме тестирования. + - Добавлен предупреждающий баннер «⚠️ Режим тестирования: включен вход по логину и паролю». + - Добавлена кнопка «Выйти» для завершения сессии и отзыва токена. + +--- + +### Отчёт о тестировании + +#### 1. Локальные тесты (PASS) +- Сборка решения: `dotnet build` — 0 ошибок. +- Набор тестов: `dotnet test` — **157 пройденных тестов** (включая 7 новых интеграционных проверок в `PasswordLoginTests.cs`): + - `WhenPasswordLoginIsDisabledEndpointsReturnDisabledStatusAndRejectLogin` — при `EnabledForTesting=false` эндпоинт входа отвечает 404, а доступ к Control без сертификата отклонён (401); + - `WhenPasswordLoginIsEnabledSuccessfulLoginGrantsOperatorRoleOnly` — успешный вход выпускает токен и cookie, открывает доступ к `GET /api/v1/control/agents`, `GET /api/v1/control/links` и `POST /api/v1/control/agents/{id}/enrollment-code`; + - `PasswordSessionTokenCannotAccessAutomationRoutes` — токен оператора отклоняется с `403 Forbidden` на маршрутах `/api/v1/automation/links` и `/api/v1/agents/provisioning/jobs/next`; + - `WrongPasswordAndUnknownUserBothFailWithUnauthorizedAndUniformExecution` — неверный пароль и неизвестный пользователь одинаково возвращают 401; + - `ExceedingRateLimitRejectsWithTooManyRequests` — превышение 5 попыток входа в минуту возвращает `429 Too Many Requests`; + - `ClientCertificateAuthenticationHasPriorityAndWorksUnderBothModes` — аутентификация по клиентскому сертификату mTLS работает и имеет приоритет как при включенном, так и при выключенном флаге парольного входа; + - `LogoutRevokesSessionToken` — вызов `/api/v1/auth/logout` немедленно отзывает сессионный токен, повторные запросы отклоняются с 401. + +#### 2. CI Workflows (PASS, все зелёные) +- **Linux control and agent (PR #61):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357096 + - Job `build-and-test`: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357096/job/95489511205 — **PASS** (6m 46s) +- **Linux platform matrix (PR #61):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357022 + - Jobs: + - Release archive (linux-x64): https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357022/job/95489511310 — **PASS** + - Release archive (linux-arm64): https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357022/job/95489511207 — **PASS** + - Ubuntu 22.04 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357022/job/95489904683 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357022/job/95489904802 — **PASS** + - Ubuntu 24.04 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357022/job/95489904730 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357022/job/95489904701 — **PASS** + - Debian 12 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357022/job/95489904745 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357022/job/95489904821 — **PASS** + - Debian 13 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357022/job/95489904733 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357022/job/95489904746 — **PASS** +- **Windows build (PR #61):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357105 + - Job `build`: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32063357105/job/95489510886 — **PASS** (3m 43s) + +#### 3. Границы изменений +- `git diff --name-only origin/main`: + - `src/ServerMonitorManager.Control/PasswordHasher.cs` + - `src/ServerMonitorManager.Control/PasswordLoginOptions.cs` + - `src/ServerMonitorManager.Control/PasswordSessionAuthenticationHandler.cs` + - `src/ServerMonitorManager.Control/PasswordSessionService.cs` + - `src/ServerMonitorManager.Control/Program.cs` + - `src/ServerMonitorManager.Control/wwwroot/app.js` + - `src/ServerMonitorManager.Control/wwwroot/index.html` + - `src/ServerMonitorManager.Control/wwwroot/style.css` + - `src/ServerMonitorManager.Core/PasswordLoginModels.cs` + - `src/ServerMonitorManager.Core/SmmJsonContext.cs` + - `tests/ServerMonitorManager.Control.Tests/PasswordLoginTests.cs` +- Файлы `deploy/**`, релизные workflow и защищённые каталоги не затрагивались. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-web-console.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-web-console.md new file mode 100644 index 0000000..5e50176 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/pr-body-web-console.md @@ -0,0 +1,72 @@ +## Antigravity: веб-консоль оператора — Этап 2 + +Реализована веб-консоль оператора для управления узлами, сетевыми связями (Links) и выдачи кодов регистрации (`smm-antigravity-task-web-console-2026-08-17.md`). + +### База +- Базовая ветка: `main` @ `f7b10ac` +- Ветка: `antigravity/web-console` + +--- + +### Что сделано +1. **Веб-интерфейс консоли оператора (SPA):** + - **Список узлов:** загрузка реальных данных из `GET /api/v1/control/agents` (имя узла, статус, версия агента, последний heartbeat, состояние сертификата). + - **Список сетевых связей (Links):** загрузка реальных данных из `GET /api/v1/control/links` (ID связи, источник, назначение, протокол/порт, требуемое и фактическое состояние, срок действия). + - **Кнопка «Добавить узел» и модальное окно:** + - Валидация имени узла (`1-63` символа, строчные буквы, цифры, дефисы). + - Вызов эндпоинта `POST /api/v1/control/agents/{nodeId}/enrollment-code`. + - Крупное отображение выданного кода `SMMNODE2...` и отпечатка CA (SHA-256) с копированием в буфер обмена в один клик. + - **Обязательное заметное предупреждение:** «При выполнении установщика на сервере обязательно сверьте отпечаток CA, выведенный скриптом, с отпечатком ниже. Подтверждение без сверки обесценивает криптографическую проверку подписи!». + - 10-минутный обратный отсчет срока действия кода. +2. **Интеграция в Control backend и поддержка встроенных ресурсов (Single-File Publish):** + - Веб-ресурсы размещены в `src/ServerMonitorManager.Control/wwwroot/` (`index.html`, `style.css`, `app.js`) и встроены как `EmbeddedResource` в сборку Control, сохраняя единую разворачиваемую единицу (`ochenstarik-smm-control`) при `PublishSingleFile=true`. + - Маршруты консоли (`/`, `/index.html`, `/style.css`, `/app.js`, `/console`) защищены авторизацией роли `Operator` (`.RequireAuthorization("Operator")`). + - Механизм `GetWebConsoleAsset` проверяет наличие файлов на диске и автоматически переключается на извлечение из `EmbeddedResource` при отсутствии каталога `wwwroot` на диске. +3. **Безопасность доступа (mTLS):** + - Доступ к статическим ресурсам и API консоли строго ограничен ролью `Operator`. + - Неаутентифицированные запросы отклоняются с `401 Unauthorized`. + - Роли `Agent` и `Automation` получают отказ с `403 Forbidden`. + +--- + +### Отчёт о тестировании + +#### 1. Локальные тесты (PASS) +- Сборка решения: `dotnet build` — 0 ошибок. +- Набор тестов: `dotnet test` — **150 пройденных тестов** (включая 16 интеграционных проверок в `WebConsoleTests.cs`): + - `AnonymousAccessToWebConsoleRoutesIsRejectedWithUnauthorized` — 401 Unauthorized на маршрутах `/`, `/index.html`, `/style.css`, `/app.js`, `/console`; + - `AgentRoleIsForbiddenFromWebConsole` — 403 Forbidden для роли `Agent`; + - `AutomationRoleIsForbiddenFromWebConsole` — 403 Forbidden для роли `Automation`; + - `OperatorCanAccessWebConsoleHtmlAndAssets` — 200 OK с корректными MIME-типами (`text/html`, `text/css`, `application/javascript`); + - `WebConsoleHtmlContainsRequiredUiElementsAndWarning` — проверка наличия элементов интерфейса (таблицы, форма добавления узла, поля вывода кода, отпечатка CA, кнопки копирования и текста предупреждения о сверке отпечатка); + - `EmbeddedAssetsAreServedWhenDiskWebRootIsMissing` — **тест ветки встроенных ресурсов**: поднятие тестового хоста с пустым/отсутствующим `WebRootPath` подтверждает, что маршруты `/`, `/index.html`, `/style.css`, `/app.js` и `/console` успешно возвращают 200 OK, ожидаемые MIME-типы и непустое содержимое из ресурсов сборки `EmbeddedResource`. + +#### 2. CI Workflows (PASS, все зелёные) +- **Linux control and agent (PR #59):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203480 + - Job `build-and-test`: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203480/job/95482658110 — **PASS** (4m 34s) +- **Linux platform matrix (PR #59):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203491 + - Jobs: + - Release archive (linux-x64): https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203491/job/95482658550 — **PASS** + - Release archive (linux-arm64): https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203491/job/95482658482 — **PASS** + - Ubuntu 22.04 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203491/job/95483027945 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203491/job/95483027753 — **PASS** + - Ubuntu 24.04 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203491/job/95483027806 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203491/job/95483027824 — **PASS** + - Debian 12 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203491/job/95483027885 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203491/job/95483027803 — **PASS** + - Debian 13 x64 / arm64: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203491/job/95483027739 / https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203491/job/95483027857 — **PASS** +- **Windows build (PR #59):** + - Run: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203452 + - Job `build`: https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/32061203452/job/95482657920 — **PASS** (3m 21s) + +#### 3. Границы изменений +- `git diff --name-only origin/main`: + - `src/ServerMonitorManager.Control/Program.cs` + - `src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj` + - `src/ServerMonitorManager.Control/wwwroot/app.js` + - `src/ServerMonitorManager.Control/wwwroot/index.html` + - `src/ServerMonitorManager.Control/wwwroot/style.css` + - `tests/ServerMonitorManager.Control.Tests/WebConsoleTests.cs` +- Файлы `deploy/**`, релизные workflow и защищённые каталоги не затрагивались. + +#### 4. Что не проверялось и почему +- Вход по логину и паролю без mTLS не реализовывался, так как является предметом изолированного Этапа 3 и должен разрабатываться после слияния Этапа 2 в `main`. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-acceptance-runbook-2026-08-07.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-acceptance-runbook-2026-08-07.md new file mode 100644 index 0000000..d512016 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-acceptance-runbook-2026-08-07.md @@ -0,0 +1,143 @@ +# Установка SMM на три сервера с 3x-ui: предпроверка, установка, откат + +Цель — закрыть физическую приёмку `tests/acceptance/three-server-mesh.sh`, не сломав работающий 3x-ui/Xray. + +## 1. Распределение ролей + +Скрипту нужны Hub и три Node-идентичности. На трёх серверах это собирается так — Hub совмещается с одним из Node: + +| Сервер | Роль | Node ID | Требования | +|---|---|---|---| +| A — с публичным IP | Control Hub **+** Node | `home` | свободны TCP 7443 и UDP 51820 | +| B | Node, источник | `ai-agent` | исходящий доступ к A | +| C | Node, назначение | `second` | исходящий доступ к A | + +Node B и C могут быть за NAT — входящие порты им не нужны. + +Скрипт запускается с вашей рабочей машины (нужны `curl`, `jq`, `openssl`, `ssh`, `nc`, `base64`) и ходит по SSH только на A и B. + +## 2. Что SMM создаёт на сервере + +Всё именовано с префиксом проекта, чужого не трогает. + +**Пользователи:** `ochenstarik-smm-control`, `ochenstarik-smm-agent` — системные, `nologin`, без пароля. + +**Каталоги:** `/etc/ochenstarik-server-monitor-manager`, `/usr/local/lib/ochenstarik-server-monitor-manager`, `/var/lib/ochenstarik-server-monitor-manager`. + +**systemd units:** `ochenstarik-smm-control.service`, `ochenstarik-smm-agent.service`, `ochenstarik-smm-provisioning-helper.service`, `ochenstarik-smm-firewall.service`, `wg-quick@smm0.service`. + +**Файлы:** `/usr/local/libexec/ochenstarik-smm-policy-apply`, `/usr/local/sbin/ochenstarik-smm-emergency`, `/etc/sudoers.d/ochenstarik-smm-control` (разрешает control-пользователю запускать **только** policy-helper), `/etc/wireguard/smm0.conf`, `/etc/sysctl.d/90-ochenstarik-smm-mesh.conf`. + +**nftables:** одна собственная таблица `inet ochenstarik_smm`. Все операции — только над ней. + +**Пакеты:** `wireguard-tools`, `nftables`, `iproute2` — ставятся только если отсутствуют. + +## 3. Чего SMM не трогает + +- существующие таблицы nftables и правила iptables; +- конфигурацию и базу 3x-ui, конфиг Xray, его inbounds и сертификаты; +- `sshd_config` и текущий SSH-порт; +- существующих пользователей, их ключи и sudo; +- другие интерфейсы WireGuard — создаётся только `smm0`; +- маршруты по умолчанию. + +Единственное системное изменение вне своего пространства имён — `net.ipv4.ip_forward=1`. Оно аддитивное: Xray работает в userspace и от этого не зависит, а если форвардинг уже включён, ничего не меняется. + +## 4. Предпроверка — выполнить на каждом сервере до установки + +```bash +echo "=== ОС и systemd ==="; . /etc/os-release; echo "$ID $VERSION_ID $(uname -m)"; ps -p 1 -o comm= +echo "=== занятые порты 7443 / 51820 ==="; ss -lntup | grep -E ':7443|:51820' || echo "свободны" +echo "=== существующие таблицы nftables ==="; nft list tables 2>/dev/null || echo "nft не установлен" +echo "=== iptables-legacy правила ==="; iptables-legacy -S 2>/dev/null | head -5 || echo "нет" +echo "=== интерфейсы WireGuard ==="; wg show interfaces 2>/dev/null || echo "нет" +echo "=== занята ли подсеть 10.77.0.0/24 ==="; ip -4 route | grep '10\.77\.' || echo "свободна" +echo "=== ip_forward ==="; sysctl -n net.ipv4.ip_forward +echo "=== порт 3x-ui и Xray ==="; ss -lntup | grep -Ei 'x-ui|xray' || echo "не найдено по имени" +echo "=== свободное место ==="; df -h / | tail -1 +``` + +Поддерживаются Ubuntu 22.04/24.04 и Debian 12/13, `amd64`/`arm64`, обязателен systemd как PID 1. + +**Останавливаться и не ставить, если:** + +- 7443 или 51820 заняты — задать другие: HTTPS-порт передаётся третьим аргументом `install-control`, порт WireGuard — вторым аргументом `mesh-init`; +- подсеть `10.77.0.0/24` уже используется — она захардкожена в bootstrap, пересечение придётся разруливать до установки; +- ОС не из списка — `preflight` откажет сам. + +## 5. Порядок установки + +Сначала снимите снапшот каждого сервера у провайдера. Это дешевле любой отладки и делает весь раздел «откат» ненужным. + +Держите открытой вторую SSH-сессию к каждому серверу на всём протяжении работ. + +**Сервер A:** + +```bash +sha256sum -c ochenstarik-server-monitor-manager.sh.sha256 +chmod 700 ochenstarik-server-monitor-manager.sh +sudo ./ochenstarik-server-monitor-manager.sh preflight +sudo ./ochenstarik-server-monitor-manager.sh verify-release ./server-monitor-manager-linux-x64.tar.gz +sudo ./ochenstarik-server-monitor-manager.sh install-control ./server-monitor-manager-linux-x64.tar.gz <публичный-хост-A> 7443 +sudo ./ochenstarik-server-monitor-manager.sh mesh-init <публичный-хост-A> 51820 +``` + +Откройте во внешнем firewall провайдера TCP 7443 и UDP 51820. **Проверьте, что 3x-ui и Xray продолжают работать**, прежде чем идти дальше. + +Дальше на A выпускается код для каждого Node, код вводится на соответствующем сервере, обратный код `SMMPEER1` возвращается на A через `peer-add`. Последовательность подробно описана в `docs/linux-bootstrap.md`, разделы 2–4. Сам A тоже регистрируется как Node `home`. + +После каждого сервера — проверка, что 3x-ui жив. + +## 6. Приёмка + +```bash +export HUB_SSH_HOST= HUB_SSH_USER=<пользователь> +export SOURCE_SSH_HOST= SOURCE_SSH_USER=<пользователь> +export SSH_IDENTITY_FILE="$HOME/.ssh/id_ed25519" +export SOURCE_NODE_ID=ai-agent HOME_NODE_ID=home SECOND_NODE_ID=second +export HOME_WG_IP=10.77.0.2 SECOND_WG_IP=10.77.0.3 +export TARGET_PORT=22 +bash tests/acceptance/three-server-mesh.sh +``` + +Точные адреса `HOME_WG_IP` и `SECOND_WG_IP` возьмите из `mesh-status` на A. + +Прогон в таком виде **не перезагружает серверы** и не восстанавливает бэкапы — он проверяет создание Links, отключение, истечение TTL и фактическую связность. Начните с него. + +Полная приёмка добавляет два флага: + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 bash tests/acceptance/three-server-mesh.sh +``` + +`SMM_ACCEPT_REBOOT=1` **перезагружает A и B**. Для живого VPN это минуты недоступности — планируйте на низкий трафик. `SMM_ACCEPT_RESTORE=1` восстанавливает бэкап Control и перезапускает его; на 3x-ui не влияет. + +Успех — строка `THREE_SERVER_ACCEPTANCE=PASS`. + +## 7. Откат + +```bash +sudo ochenstarik-server-monitor-manager.sh uninstall-agent --purge +sudo ochenstarik-server-monitor-manager.sh uninstall-control --confirm-destroy-control +sudo systemctl disable --now wg-quick@smm0 +sudo rm -f /etc/wireguard/smm0.conf /etc/sysctl.d/90-ochenstarik-smm-mesh.conf +sudo nft delete table inet ochenstarik_smm 2>/dev/null || true +sudo sysctl --system +``` + +Аварийная команда, работающая без Control Hub, — на случай если mesh начнёт мешать: + +```bash +sudo ochenstarik-smm-emergency status +sudo ochenstarik-smm-emergency mesh-disable +``` + +`mesh-disable` останавливает WireGuard и удаляет только таблицу проекта, не трогая Control, Agent, SSH и 3x-ui. + +## 8. Честное предупреждение + +Проект в альфе, и физическая приёмка ни разу не выполнялась — именно поэтому она и нужна. Ожидаемо, что что-то всплывёт: это её цель, а не побочный эффект. + +Риск для 3x-ui я оцениваю как низкий: пересечений по портам, таблицам nftables, юнитам и конфигам нет, всё именовано префиксом проекта. Но «низкий» не значит «нулевой», и снапшот перед началом снимает вопрос полностью. + +Если эти три сервера обслуживают что-то, чей простой недопустим, дешевле поднять три временных VPS на день. Приёмке всё равно, какие это машины. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-gemini-plan-2026-08-04.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-gemini-plan-2026-08-04.md new file mode 100644 index 0000000..73c6b63 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-gemini-plan-2026-08-04.md @@ -0,0 +1,180 @@ +# План доделывания Server Monitor Manager — для облачного исполнителя (Gemini) + +Составлен 2026-08-04. Заменяет собой полосовое разделение: Codex приостановлен, Gemini ведёт весь объём. + +Базовая ревизия на GitHub: `main` @ `b11c277`. + +--- + +## 0. Передача работ — сделать до постановки первой задачи + +### 0.1. B-3R существует только локально + +Незавершённая работа по блоку B-3R — **24 изменённых файла, около 1276 добавленных строк** — лежит незакоммиченной в `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3`. На GitHub этой ветки нет: последняя ветка серии на remote — `hermes/task2-b-link-reconciliation` (`1580ec7`), это ещё блок B-2. + +Облачный исполнитель этого не видит. Возможные решения: + +| Вариант | Последствия | +|---|---| +| **Закоммитить и запушить** ветку `hermes/task3-b3-fact-reconciliation` как есть, с честной пометкой «незавершено, см. B3R_SPEC» | Работа сохранена, Gemini продолжает с неё. Рекомендуемый вариант | +| Выгрузить патчем и передать файлом | Работает, но патч быстро протухнет и его придётся накатывать вручную | +| Отбросить и переделать с `b11c277` | Потеря корректной работы: R3 закрыт полностью, R1 закрыт на уровне отдельной мутации — я это проверял по коду | + +Пока решение не принято, ставить задачу по B-3R облачному исполнителю нельзя: он либо не найдёт контекст, либо начнёт вторую параллельную реализацию. + +### 0.2. Нормативные документы тоже локальны + +Коммит `4de849e` (`docs/product-horizons.md`, `docs/approval-policies.md`, `docs/integration-kagent.md`, правки `roadmap.md` и `security-model.md`) находится на локальной ветке `docs/product-horizons-and-integration` и не запушен. Пока он не в репозитории, план ниже ссылается на документы, которых исполнитель не увидит. + +Запушить до выдачи первой задачи. + +--- + +## 1. Что облачный исполнитель проверить не может + +Это самый важный раздел. Дисциплина честной отчётности была сильной стороной предыдущих пакетов — её надо сохранить, а список ограничений изменился. + +| Проверка | Доступно в облаке | Что делать | +|---|---|---| +| Control test suite на Linux | **Да** | Запускать обязательно. Именно Linux-прогон в блоке B-3 выявил, что integration-тест остался на старом протоколе: на Windows он молча пропускался по `OperatingSystem.IsLinux()` | +| Тесты helper, nftables, bash-контракты | **Да** | Запускать; это естественная среда для них | +| Сборка Desktop (WinUI 3) | **Нет** | Требует Windows и Windows App SDK. Полагаться на `windows-build.yml` в CI. **Никогда не заявлять локальную сборку Desktop** | +| `Test-DesktopContracts.ps1` | Частично | Это сопоставление строк в XAML, идёт под `pwsh` на Linux. Указывать, что запущено под pwsh, а не на Windows | +| Физический acceptance | **Нет ни у кого** | Требует `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE`. Не выдавать mock- и contract-тесты за него | +| Trimmed linux-x64 publish | **Да** | Полезно: проверка source-generated сериализации на реальном опубликованном артефакте | + +**Правило.** В `TEST_EVIDENCE.md` раздельно перечисляются: что запущено локально, что запущено в CI, что не запускалось и почему. Отсутствие проверки — не дефект отчёта; выдача непроверенного за проверенное — дефект. + +--- + +## 2. Формат сдачи для облака + +Прежние пакеты складывались в локальную папку. Для облачного исполнителя: + +- **Основной артефакт — Pull Request.** Якорь целостности — SHA коммита, а не `SHA256SUMS`. В отчёте указывать точный SHA, который ревьюился, и SHA, который смержен, если они различаются. +- `REPORT.md` и `TEST_EVIDENCE.md` — в описании PR либо отдельным коммитом в PR; содержание прежнее. +- `CI_CHECKS.txt` заменяется ссылкой на прогон checks в PR. +- `INDEPENDENT_REVIEW.md` — обязателен по-прежнему, и **ревьюеру передаётся полный текст задачи**, а не только диф. Три блока из четырёх дали находки класса «пропущенное требование», которые при diff-only ревью не ищутся вовсе. +- Один PR — одна тема. Смешанные PR не принимаются. +- Статус после merge — `merged / verified`, а не «выполнено», если критерий сформулирован через фактическое поведение и не измерялся на реальной топологии. + +--- + +## 3. Первая задача — калибровочная + +Дешёвая, быстрая, с нулевым риском для существующего кода, и результат проверяется объективно. Даёт понять, справляется ли исполнитель, до того как ему доверят control plane. + +### Задача A — гигиена репозитория и цепочки поставки · до одного дня + +Только новые файлы и `.github/**`. Ни одного файла, который трогает ветка B-3R. + +1. Запинить все GitHub Actions по commit SHA. Сейчас плавающие `@v6`, `@v5`, `@v2` — содержимое шага может измениться без нашего ведома. +2. `.github/dependabot.yml` для `github-actions` и `nuget`. +3. Сузить `permissions: contents: write` в `linux-release.yml` и `windows-release.yml` до job'а публикации. +4. `SECURITY.md` — куда сообщать об уязвимости, ожидаемое время ответа, что считается уязвимостью. Для инструмента безопасности его отсутствие — само по себе дефект. +5. `CHANGELOG.md` в формате Keep a Changelog, заполнить по существующим тегам `v0.1.0-alpha.1…5`. +6. `CONTRIBUTING.md`, `CODEOWNERS`, шаблоны issue и PR. +7. SBOM (`dotnet CycloneDX`) как артефакт релиза. +8. Удалить слитые ветки `agent/remove-lightweight-server-references` и `codex/ttl-backup-acceptance`. + +**Как я буду проверять результат:** ни одна ссылка на action не содержит плавающего тега; `permissions` сужены именно в job'ах публикации, а не глобально; `SECURITY.md` содержит адрес и процедуру, а не заглушку; CHANGELOG соответствует реальным тегам, а не выдуман; CI зелёный; в `TEST_EVIDENCE.md` честно разделено локальное и CI; ревью получило текст задачи. + +Если задача выполнена аккуратно и отчёт не приукрашен — переходим к содержательным задачам. Если в отчёте появятся непроверенные утверждения, это будет видно сразу и дёшево. + +--- + +## 4. Дальнейшая очередь — Горизонт 0 + +Порядок обязательный. Горизонт закрывается целиком, Горизонт 1 не начинается до этого. + +### Задача B — завершить B-3R · зависит от решения по п. 0.1 + +Контракт: `B3R_SPEC.md` (выдан ранее, принят исполнителем как authoritative). + +По состоянию на 04.08 закрыто: R3 полностью (`lookup_node_ip` читает статус, `reserved` → exit 80, `active` с битым IP → 78) и R1 на уровне отдельной мутации (`VerifyExactFactualCountAsync` считает записи через `link-list`, условие `if (persisted)` вокруг верификации снято). + +Осталось: + +- пакетная финальная верификация: сейчас `1 + k` вызовов `link-list`, требуется ровно два — стартовый и один финальный на все затронутые ключи; +- класс `Deferred` и инвариант `Converged + Failed + Deferred == Examined`; `PendingActivation` — это `Deferred`, а не `Failed`, и он **не** блокирует потребление marker, иначе один зарезервированный Node вернёт бесконечный цикл проходов; +- R4: именованный DTO в source-generated контексте вместо анонимного типа для orphan audit, с проверкой на опубликованном trimmed-артефакте; +- R5: Linux integration test на fact-first протокол, с обязательным прогоном **на Linux**; +- R6: убрать fail-open default у `ILinkPolicyApplier.ListRulesAsync`; +- R7: форматирование вложенных lock-scope; +- дополнительно: мусор в поле статуса `nodes.tsv` должен давать 78, а не 80 — повреждённое состояние не то же самое, что ожидаемое. + +**Готово, когда:** PR создан, Linux CI зелёный впервые для этой ветки, merge выполнен. + +### Задача C — жизненный цикл сертификатов + +`CertificateAuthority.cs:55` выдаёт клиентские сертификаты на год, автопродления нет. Через год после развёртывания парк отваливается одновременно, и восстановление потребует ручной перерегистрации каждого Node. + +- срок клиентского сертификата 30–90 дней, значение в конфигурации с валидацией; +- автопродление Agent за треть срока до истечения через существующий mTLS-канал: новый CSR, выдача, атомарная замена `agent.pfx`, откат при неудаче; +- продление Operator-сертификата Desktop с уведомлением пользователя; +- событие `certificate.expiring` в поток событий; +- документированная процедура ротации Control CA и повторной регистрации парка — сейчас её нет; +- тесты: продление до истечения, недоступный Hub в момент продления, отказ при отозванном сертификате. + +Файлы `CertificateAuthority.cs`, `CertificateLifecycleService.cs`, `AgentClient.cs` веткой B-3R не затронуты — задачу можно вести параллельно задаче B. + +### Задача D — роль Monitor в bootstrap + +SSH-мониторинг — функция, ради которой существует Desktop, — не имеет серверной части. В bootstrap нет `install-monitor`, forced-command скрипт не поставляется, а парсер `SshMonitorService.QueryAsync` ожидает ключи `PROTOCOL`, `CPU_COUNT`, `MEM_AVAILABLE_KB`, `DISK_INODES_TOTAL`, которых в репозитории никто не производит. + +- действия `install-monitor PUBLIC_KEY` и `uninstall-monitor`; +- пользователь `ochenstarik-monitor`: nologin, без пароля, без sudo; +- `/usr/local/libexec/ochenstarik-smm-metrics`, root-owned `0755`, выдающий ровно снимок из `docs/installer-contract.md` §7 и read-only `mesh status`; +- `authorized_keys` с `command="…",restrict,no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding`; +- идемпотентность повторного запуска и корректное удаление; +- контрактный тест формата снимка, общий для скрипта и парсера Desktop. + +Bootstrap-скрипт затронут веткой B-3R — делать после merge задачи B. + +### Задача E — подписанная поставка + +Bootstrap сверяет `ARCHIVE.sha256`, лежащий рядом с архивом в том же релизе, а manifest не подписан и содержит только хэш самого bootstrap. Кто может опубликовать релиз — ставит произвольный root-код на весь парк через `update-agent`. + +- manifest v2: хэши всех артефактов, версии Control/Agent/helper/Desktop, минимальные совместимые версии, `helper_protocol`; +- подпись `cosign sign-blob` keyless либо `minisign`; публичный ключ или issuer **вшит константой** в bootstrap и Desktop, а не скачивается вместе с релизом; +- действие `verify-manifest`; `verify_archive` сверяет хэш с manifest, а не с соседним файлом; старый путь только под `SMM_ALLOW_UNSIGNED=1`; +- отказ `update-control` и `update-agent` при несовместимых версиях — требование `docs/installer-contract.md` §6, не выполненное до сих пор; +- `PROGRAM_VERSION` из тега вместо `0.2.0-dev`; +- отсутствие инструмента проверки подписи — отказ, не предупреждение; +- негативные тесты в CI: изменённый байт архива, подменённый хэш в manifest, manifest без подписи. + +### Задача F — инженерная оснастка + +- `Directory.Build.props`: `Nullable`, `TreatWarningsAsErrors`, `EnableNETAnalyzers`, `AnalysisLevel latest-recommended`, детерминированная сборка; +- `Directory.Packages.props` и `RestorePackagesWithLockFile` с коммитом lock-файлов — сейчас сборки невоспроизводимы, что противоречит требованию закреплённой поставки; +- разделить тесты на `Core.Tests`, `Control.Tests`, `Agent.Tests`, `Helper.Tests`: сегодня `LinuxMetricsTests`, `MetricBufferTests` и `ProvisioningHelperTests` лежат в проекте Control; +- тесты round-trip сериализации контрактов: при `PublishTrimmed=true` молчаливая потеря поля не ловится ничем. + +`TreatWarningsAsErrors` включать после merge задачи B, иначе сломает незавершённую ветку. + +### Гейт Горизонта 0 + +Чистый сервер ставится из подписанного релиза одной командой, регистрируется одноразовым кодом, попадает под мониторинг без ручной правки `authorized_keys`, и после перезагрузки Hub и Node фактическое состояние Links совпадает с желаемым — измеренное связностью на реальной топологии. + +Последнее не может закрыть ни один исполнитель. Это единственное, что зависит только от выдачи доступов, и оно дешевле любой задачи в этом плане. + +--- + +## 5. Горизонт 1 и далее + +Не выдавать до закрытия гейта Горизонта 0. Состав и порядок — по `docs/product-horizons.md` и разделу «Горизонт 1» документа `smm-codex-plan-2026-08-04.md`: каркас `IProvisioningModule` первым, затем модули по одному, политики подтверждения, миграция SSH, alert engine, Telegram только на чтение, наблюдение Docker и systemd, Backup Manager. + +Ключевое правило переноса: **не добавлять второй provisioning-модуль копированием timezone-исполнителя.** Сначала каркас, иначе шесть копий логики backup → mutate → verify → rollback. + +--- + +## 6. Как оценивать исполнителя + +По задаче A смотреть на четыре вещи, в порядке важности: + +1. **Честность отчёта.** Разделены ли локальные проверки, CI и то, что не запускалось. Появление в отчёте непроверенных утверждений — худший признак из возможных, потому что обесценивает все последующие отчёты. +2. **Соответствие постановке, а не её пересказ.** Выполнены ли все восемь пунктов, а не пять удобных. +3. **Отсутствие расползания.** Не тронуты ли файлы вне области задачи. +4. **Качество ревью.** Получил ли независимый ревьюер полный текст задачи и нашёл ли что-нибудь, кроме опечаток. + +Если задача A пройдена — давать задачу C (сертификаты): она содержательная, файлы свободны, и результат тоже проверяется объективно. Задачу B (завершение B-3R) давать только после того, как решён вопрос 0.1 и подтверждено, что исполнитель понимает контракт: это самая тонкая часть системы, там уже дважды находили блокирующие дефекты. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-improvement-plan-2026-07-30.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-improvement-plan-2026-07-30.md new file mode 100644 index 0000000..71135a5 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-improvement-plan-2026-07-30.md @@ -0,0 +1,335 @@ +# Server Monitor Manager — полная инструкция по доработке + +Ревизия: `main` @ `2d28b8d` («Execute confirmed timezone provisioning safely», 30.07.2026). +Публичный релиз: `v0.1.0-alpha.5` (17.07.2026) — отстаёт от `main` на 3 коммита (bootstrap + provisioning execution ещё не выпущены). +Открытых issue и PR нет, вся работа идёт напрямую в `main` через merged PR. + +--- + +## 0. Как читать документ + +| Приоритет | Значение | +|---|---| +| **P0** | Блокирует alpha-тест на реальных серверах: утечка секрета, потеря доступа, ложное состояние безопасности. Чинить до следующего тега. | +| **P1** | Блокирует beta: расхождение с собственным ТЗ, DoS, невоспроизводимая поставка. | +| **P2** | Долг качества: архитектура, тесты, DX, локализация. | + +Каждый пункт: *что не так → где → что сделать → как проверить*. + +--- + +## 1. Что фактически готово + +Проект существенно более зрелый, чем типичный alpha: mTLS control plane с разделением ролей, идемпотентность, аудит, versioned SQLite (user_version до 8), bounded offline-буфер агента, подписанные ECDSA execution grants, restricted root helper через Unix-сокет, CI на Ubuntu VM + Debian systemd-контейнерах, 100-node нагрузочный тест. + +**Реально работает:** +- Control API: enroll (node/device/automation), heartbeat, links CRUD + TTL, event stream (NDJSON), provisioning jobs, preflight facts / desired / drift, backup-create/restore CLI. +- Bootstrap: install/update/rollback/uninstall Control и Agent, mesh-init, node-code (`SMMNODE1/2`), peer-add (`SMMPEER1`), emergency-команда. +- Provisioning: `preflight` (read-only) и `system.base-install` — но **исполняется только смена timezone**. +- Desktop: 4 страницы, SSH-мониторинг, история метрик, графики, redacted diagnostics. + +**Заявлено, но не реализовано (расхождение README/docs ↔ код):** + +| Заявление | Реальность | +|---|---| +| `docs/installer-contract.md` §2 «роль Monitor»: пользователь `ochenstarik-monitor`, root-owned forced command | В `deploy/ochenstarik-server-monitor-manager.sh` **нет действия `install-monitor`**, нет самого forced-command скрипта. SSH-мониторинг из Desktop настраивается вручную и нигде не описан. | +| `docs/linux-bootstrap.md:82` «После перезапуска firewall разрешающие правила должны быть повторно применены Control» | В Control **нет кода переприменения** Active-Link'ов. | +| ТЗ §14: endpoints `/api/v1/nodes/{id}/capabilities`, `/configuration`, `/users`, `/vpn-profiles` | Отсутствуют. | +| ТЗ §7.1 «подписанный version manifest» | Manifest не подписан, содержит только hash bootstrap-скрипта, без версий Control/Agent/helper. | +| README: «`system.base-install`… factual verification» | Verification только для timezone; `IsTimezoneOnly()` отвергает всё остальное. | + +--- + +## 2. P0 — критические + +### P0-1. Enrollment-токен утекает через argv в `/proc/*/cmdline` + +**Где:** `deploy/ochenstarik-server-monitor-manager.sh:564-570` + +```bash +runuser -u "$AGENT_USER" -- env \ + ... \ + "SMM_EnrollToken=$ENROLL_TOKEN" \ + "$LIB_DIR/agent/ochenstarik-smm-agent" +``` + +Аргументы `env` — это командная строка процесса. `/proc//cmdline` читается **любым локальным пользователем** (в отличие от `environ`, который защищён). Токен живёт 10 минут и даёт право получить сертификат Agent для этого Node. + +**Что сделать:** +1. Ввести в `AgentOptions` поддержку `SMM_EnrollTokenFile` (путь к файлу, режим `0600`, владелец — agent). +2. В bootstrap: `install -m 0600 -o "$AGENT_USER" -g "$AGENT_USER" /dev/null "$token_file"`, записать токен через `printf`, передать путь, `shred -u` после enrollment. +3. Альтернатива без нового API: `runuser -u agent -- env SMM_EnrollTokenFile=/proc/self/fd/3 ... 3< <(printf '%s' "$ENROLL_TOKEN")`. +4. `AgentClient.EnrollAsync` — читать файл, `CryptographicOperations.ZeroMemory` после использования, `File.Delete`. + +**Проверка:** тест в `tests/bootstrap/` — во время enrollment фоновый цикл читает `/proc/*/cmdline` и грепает подстроку токена; тест падает при совпадении. + +--- + +### P0-2. После перезагрузки Hub все активные Links молча перестают работать + +**Где:** `deploy/ochenstarik-smm-firewall.service:9-10`, `deploy/ochenstarik-server-monitor-manager.sh:263-281` (`write_mesh_firewall`), `src/ServerMonitorManager.Control/Program.cs` (нет startup-реконсиляции). + +Юнит firewall при каждом старте делает `nft delete table inet ochenstarik_smm`, затем загружает `mesh.nft` с пустой цепочкой `links`. Все accept-правила, добавленные `link-connect`, исчезают. Control при старте **не переприменяет** Active-политики — реконсиляция (`LinkService.ReconcileDisabledLinksForNodeAsync`) переприменяет только **disabled**. + +Итог: в БД и в Desktop Link показан `Active`, фактически трафик заблокирован. Это прямое нарушение критерия приёмки №12 собственного ТЗ («после reboot factual state соответствует desired»). Направление отказа безопасное (fail-closed), но состояние в UI ложное — а ложное «зелёное» состояние в security-инструменте хуже, чем красное. + +**Что сделать:** +1. Добавить в policy-helper действие `link-list`, возвращающее фактические правила (парсинг `nft -j list chain`) как строки `source:target:proto:port`. +2. Новый `LinkStartupReconciliationService : IHostedService` в Control: + - при старте и далее раз в `LinkExpirationPollSeconds × N` получать факт-список, + - для каждой Link с `DesiredState=Active`, отсутствующей в факте → `ApplyConnectAsync`, событие `link.reapplied`, + - для каждого факт-правила без записи в БД → `ApplyDisconnectAsync`, событие `link.orphan-removed` + audit, + - публиковать `ActualState=Partial` до успешного восстановления. +3. Добавить `ActualState` колонку в UI Links и явный бейдж «desired ≠ factual». +4. `ochenstarik-smm-emergency firewall-restore` — после восстановления deny-by-default дёргать `systemctl reload ochenstarik-smm-control` либо сбрасывать маркер, чтобы Control переприменил. + +**Проверка:** интеграционный тест с фейковым `ILinkPolicyApplier` (стартовое факт-состояние пустое → ожидаем N вызовов connect); + в `tests/acceptance/three-server-mesh.sh` при `SMM_ACCEPT_REBOOT=1` после reboot Hub проверять `nc -z` через Link, а не только состояние в API. + +--- + +### P0-3. Приватный SSH-ключ пишется на диск в открытом виде каждые 30 секунд + +**Где:** `src/ServerMonitorManager.Desktop/SshMonitorService.cs:187-210` (`MaterializePrivateKeyAsync`), вызывается из `RunRestrictedCommandAsync:122` на каждый опрос метрик. + +Ключ хранится под DPAPI, но для запуска `ssh.exe` расшифровывается и пишется в `ApplicationData.TemporaryFolder` без ACL-ограничения, удаляется в `finally`. При падении процесса, kill'е или гонке файл остаётся. Частота: каждые 30 с × число серверов. + +**Что сделать (в порядке предпочтения):** +1. **Лучшее:** отказаться от внешнего `ssh.exe` для мониторинга — перейти на in-process SSH-клиент (`SSH.NET`), ключ живёт только в памяти. Интерактивный терминал оставить на `ssh.exe`/`wt.exe`. +2. **Минимум, если п.1 откладывается:** + - создавать файл один раз за сессию приложения, а не на каждый запрос; + - `FileOptions.DeleteOnClose` + удержание `FileStream` на время жизни сессии; + - явный DACL только для текущего пользователя (`FileSecurity`, `SetAccessControl`); + - при старте приложения — чистка orphan-файлов `server-monitor-manager-ed25519-*` в TemporaryFolder; + - `ProcessExit`/`AppDomain.UnhandledException` хук на удаление. + +**Проверка:** unit-тест на чистку orphan-файлов; ручной тест — kill процесса в момент опроса, перезапуск, проверка что TemporaryFolder пуст. + +--- + +### P0-4. `StrictHostKeyChecking=accept-new` без подтверждения fingerprint + +**Где:** `src/ServerMonitorManager.Desktop/SshMonitorService.cs:132` + +Первое подключение к любому серверу принимает любой host key без показа пользователю. Это ровно тот MITM-вектор, который остальная часть проекта тщательно закрывает (Control CA fingerprint подтверждается вручную, mTLS с CustomRootTrust). ТЗ §10 п.2 и §13 требуют фиксации host key. + +**Что сделать:** +1. В `ServerProfileData` добавить `HostKeyFingerprint` (SHA-256) и `HostKeyAlgorithm`. +2. Первое подключение: `ssh-keyscan` → показать fingerprint в диалоге → после подтверждения записать в профиль и в `known_hosts`. +3. Далее всегда `StrictHostKeyChecking=yes`. +4. При смене ключа — блокирующее предупреждение с явным действием «принять новый ключ» + запись в аудит Desktop. +5. Интерактивный терминал (`OpenInteractiveTerminal:159-163`) сейчас вообще не передаёт `UserKnownHostsFile`/`StrictHostKeyChecking` — использует системный `known_hosts`. Привести к тому же контракту. + +--- + +### P0-5. Root helper вешается насмерть от одного молчащего клиента + +**Где:** `src/ServerMonitorManager.Provisioning.Helper/ProvisioningHelperServer.cs:37-53` и `185-203` + +```csharp +var connection = await listener.AcceptAsync(cancellationToken); +try { await HandleAsync(connection, cancellationToken); } // последовательно! +``` + +`HandleAsync` обрабатывается **синхронно в цикле accept**, а `ReadRequestAsync` читает по одному байту **без таймаута**. Любой процесс с доступом к сокету (группа `ochenstarik-smm-agent`) открывает соединение, ничего не пишет — и root-helper перестаёт обслуживать кого-либо навсегда. Провиженинг встаёт, `Requires=` в юните Agent не помогает (процесс жив). + +**Что сделать:** +1. Обрабатывать соединение в отдельной задаче с ограничением параллелизма (`SemaphoreSlim(4)`). +2. Таймаут на всё соединение: `CancellationTokenSource.CreateLinkedTokenSource(ct)` + `CancelAfter(TimeSpan.FromSeconds(30))`. +3. Читать буфером (`ArrayPool`), а не по байту — сейчас 16 КБ = 16384 syscall'а. +4. **Проверять SO_PEERCRED**: `socket.GetRawSocketOption(SOL_SOCKET, SO_PEERCRED, …)`, сверять `uid` с ожидаемым uid пользователя Agent (передавать через env юнита). Сейчас достаточно членства в группе. +5. Rate limit: не более N запросов в минуту с одного uid, лог отклонений. + +**Проверка:** тест `ProvisioningHelperTests` — открыть 2 соединения, первое молчит, второе шлёт валидный `preflight` и должно получить ответ за < 2 с. + +--- + +### P0-6. Поставка не подписана: компрометация GitHub-аккаунта = RCE на всех Node + +**Где:** `.github/workflows/linux-release.yml:33-65`, `deploy/ochenstarik-server-monitor-manager.sh:128-146` (`verify_archive`) + +Bootstrap проверяет `ARCHIVE.sha256`, лежащий **рядом с архивом в том же релизе**. Manifest (`server-monitor-manager-bootstrap-manifest.json`) не подписан и не содержит хэшей архивов Control/Agent/helper — только хэш самого bootstrap. Кто может залить релиз, может залить и hash. `update-agent`/`update-control` принимают любой такой архив. + +Собственный контракт (`installer-contract.md` §1, ТЗ §7.1) требует signed compatibility manifest — не выполнено (в roadmap отмечено как открытое, но это P0 для любой публичной поставки). + +**Что сделать:** +1. Подписывать manifest — `cosign sign-blob` (keyless/OIDC) либо `minisign`. Публичный ключ **вшить в bootstrap-скрипт константой** и в Desktop. +2. Manifest должен содержать: версию тега, sha256 каждого артефакта (bootstrap, оба tar.gz, MSIX), версии Control/Agent/helper/Desktop, поддерживаемые runtime, минимальную совместимую версию Control. +3. `verify_archive` → `verify_manifest_signature` → сверка хэша архива **с manifest**, а не с соседним файлом. +4. Отказ обновления при несовместимой паре версий Control↔Agent↔helper (`installer-contract.md` §6 это уже требует). +5. Запиннить все GitHub Actions по commit SHA (`actions/checkout@`), включить `dependabot` для actions. + +--- + +## 3. P1 — важные + +### P1-1. Роль Monitor не реализована в bootstrap +Флагманская функция (SSH-мониторинг из Desktop) не имеет серверной части в поставке: нет `install-monitor`, нет forced-command скрипта, нет создания `ochenstarik-monitor`, нет установки публичного ключа из Desktop. + +**Сделать:** добавить в bootstrap действие `install-monitor PUBLIC_KEY`: +- создать `ochenstarik-monitor` (nologin, без пароля, без sudo); +- `/usr/local/libexec/ochenstarik-smm-metrics` — root-owned `0755`, выдающий ровно снимок из `installer-contract.md` §7 (`PROTOCOL=1`, `HOSTNAME=…`) и read-only `mesh status`; +- `authorized_keys` c `command="/usr/local/libexec/ochenstarik-smm-metrics",no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding,restrict`; +- идемпотентность при повторном запуске, отдельный `uninstall-monitor`. +- Формат снимка вынести в общий тест-фикстуру, чтобы `SshMonitorService` и скрипт не разъезжались (сейчас парсер в `SshMonitorService.QueryAsync:72-106` знает ключи, которых никакой скрипт в репозитории не производит). + +### P1-2. Приватный ключ Control CA доступен процессу Control +`create_control_certificates` (`:451`) экспортирует CA в PKCS#12 **с пустым паролем**, `0640 root:ochenstarik-smm-control`. Любой RCE в Control = выпуск произвольных Agent/Operator/Automation сертификатов + подпись execution grant для любого Node. + +**Сделать:** +- разделить ключи: CA-ключ для выпуска сертификатов и **отдельный** ключ подписи execution grant (helper пиннит второй); +- защитить PFX паролем, подавать через `systemd LoadCredential=` (`ControlOptions.CertificateAuthorityPassword` уже есть — использовать); +- задокументировать процедуру ротации CA и re-enrollment всего флота; +- сократить срок сертификатов клиентов с 1 года (`CertificateAuthority.cs:55`) до 30–90 дней + автопродление Agent'ом за 1/3 срока до истечения. + +### P1-3. Event stream без keepalive, без resume, без лимита подписчиков +`Program.cs:922-937` + `ControlEventBroker.cs`. Канал `DropOldest(256)` — при медленном клиенте события теряются молча. Реконнект Desktop (`ControlClientService.ListenAsync:181-184`, фиксированные 5 с без backoff и джиттера) начинает с текущего момента: всё, что произошло во время разрыва, потеряно, а полного refresh на реконнекте нет. + +**Сделать:** таблица `control_events` с retention; `GET /api/v1/control/events?since=`; heartbeat-кадр раз в 15 с (`{"type":"ping"}`) для детекта мёртвого TCP; лимит подписок на identity; экспоненциальный backoff с джиттером на клиенте; после реконнекта — принудительный refresh inventory и links. + +### P1-4. Rate limiting только на enrollment +`Program.cs:19-31` — политика `"enrollment"`. Heartbeat, links, provisioning, events — без лимитов. Скомпрометированный Agent-сертификат = неограниченная запись метрик и рост БД (retention сработает поздно). + +**Сделать:** политики на группу `agents` (по `NameIdentifier`), на `control` (мутации), и лимит одновременных event-подписок. Плюс `Kestrel.Limits.MaxConcurrentConnections`. + +### P1-5. Провиженинг реализован на ~5% от ТЗ +`system.base-install` исполняет только timezone; `IsTimezoneOnly` (`TimezoneProvisioningExecutor.cs:229-238`) жёстко требует `VmSwappiness == 60`, пустые пакеты, `RebootPolicy == "never"`. Этапы 9–12 ТЗ (базовая настройка, пользователи, firewall/SSH-миграция, Xray) — нули. + +**Сделать: вынести общий каркас исполнителя,** прежде чем писать второй модуль. Сейчас timezone-логика (проверка grant → consumption record → backup → mutate → verify → rollback) вшита в один класс на 320 строк; второй модуль скопирует её целиком. + +``` +IProvisioningModule + string ActionType { get; } + string ModuleHash { get; } + ValidationResult Validate(JsonElement parameters); + Plan BuildPlan(parameters); // без мутаций + ExecutionResult Execute(plan, grant); // backup → mutate → verify → rollback + FactualState Observe(); +``` + +Порядок модулей (по риску, от низкого к высокому): `system.timezone` (готов) → `system.locale` → `system.packages` (versioned allowlist уже есть) → `system.swap` → `users.*` → `firewall.*` → `ssh.migrate` (двухфазный) → `xray.*`. + +### P1-6. Grant consumption-записи копятся без ограничения +`TimezoneProvisioningExecutor.cs:79-95` пишет `grant-.consumed.json` в rollback-каталог навсегда. За год активного провиженинга — десятки тысяч файлов в одном каталоге, замедление `CreateNew`. + +**Сделать:** чистка записей старше 24 ч (grant живёт 2 мин) при каждом старте helper'а; тест на идемпотентность повторного grant после чистки (должен по-прежнему отклоняться в пределах TTL — хранить не файл, а компактный журнал nonce с TTL). + +### P1-7. HttpClient создаётся на каждый запрос +`ControlClientService.cs:254-281` и `AgentClient.CreateHttpClient:390-416` — новый `HttpClientHandler` + TLS handshake на каждый вызов, исчерпание сокетов в TIME_WAIT при 30-секундном опросе. + +**Сделать:** один `SocketsHttpHandler` на сессию (`PooledConnectionLifetime = 5 min`), переиспользование `HttpClient`. Сертификат сессии держать в `X509Certificate2` с явным `Dispose` при смене identity. + +### P1-8. Атомарность установки нарушена +`install_tree_atomic:200-213`: `rm -rf destination; mv staging destination`. Между этими командами каталога с бинарями не существует — падение/kill/OOM оставляет систему без Control. + +**Сделать:** `mv dest dest.old.$$` → `mv staging dest` → `rm -rf dest.old.$$`; при неудаче второго шага — вернуть `.old`. + +### P1-9. `restore_backup` распаковывает tar в `/` без валидации +`:711` `tar -C / -xzf "$archive"` — в отличие от `verify_archive`, без проверки путей и без sha256. Каталог `0700 root`, риск ограничен, но rollback — именно тот путь, который выполняется в аварийной ситуации. + +**Сделать:** записывать `.sha256` рядом с каждым backup'ом, проверять перед распаковкой; прогонять тот же allowlist путей. + +### P1-10. Нет фильтрации входящего mesh-трафика на Node +Node получает `AllowedIPs = 10.77.0.0/24` (`:407`) и **не имеет никакой nftables-политики**. Вся изоляция держится на forward-цепочке Hub. Hub (или тот, кто его скомпрометировал) имеет неограниченный доступ ко всем портам всех Node поверх `smm0`. + +**Сделать:** ставить на Node input-цепочку `iifname "smm0"` с deny-by-default и разрешением только на порты, фигурирующие в Link'ах, где этот Node — target. Разрешающие правила Node применяет сам Agent по данным `/api/v1/automation/links`-подобного эндпоинта (нужен `/api/v1/agents/links/inbound`). Это же закрывает единственную точку отказа изоляции. + +### P1-11. IPv6 в mesh не определён +`mesh.nft` — `table inet`, но политика описана только для IPv4 (`ip saddr/daddr` в policy-helper). Если на Node включён IPv6 внутри `smm0` (не включён, но AllowedIPs не запрещает), правил нет. Явно задать: mesh — IPv4-only, IPv6 в `smm0` запрещён отдельным правилом drop. + +--- + +## 4. P2 — качество, архитектура, процесс + +### Код + +1. **`ControlStore.cs` — 1576 строк, «божественный объект»**: схема + миграции + токены + enrollment + heartbeat + links + audit + idempotency + provisioning-делегаты. Разделить по агрегатам: `ControlSchema` (миграции), `IdentityStore`, `MetricStore`, `LinkStore`, `AuditStore`, `IdempotencyStore`; provisioning уже частично вынесен. Тесты уже намекают на границы (`ControlStoreTests` 809 строк). +2. **`MainPage.xaml.cs` — 1124 строки code-behind без MVVM и DI.** Вынести в `ViewModel` c `INotifyPropertyChanged`, сервисы — через `IServiceProvider` в `App.xaml.cs`. Сейчас логика Desktop покрыта одним PowerShell-скриптом на 39 строк (`tests/windows/Test-DesktopContracts.ps1`) — фактически не покрыта. +3. **Хардкод русских строк в бизнес-логике**: `SshMonitorService.cs:117,155,216,220,226`, `ControlClientService.cs:42,51,60,73,83,89,119,297,318`. При 12 переводах README само приложение не локализовано. Ввести `.resw` + `x:Uid`, коды ошибок вместо текста в исключениях (текст — на уровне UI). +4. **Валидаторы живут в `Program.cs`** (`NodeIdValidator`, `LinkPolicyValidator`, `ProvisioningJobValidator`, …, строки 1005-1136) и дублируются в bash (`validate_node_id`, `validate_port`) и в helper. Три независимые реализации одних правил. Вынести в `Core`, а для bash — генерировать regexp из одного источника либо покрыть контрактным тестом (`test-bootstrap-contract.sh` уже есть — расширить: каждый валидатор проверяется одинаковым набором кейсов на обеих сторонах). +5. **Нет `Directory.Build.props`**: не заданы `Nullable`, `TreatWarningsAsErrors`, `EnableNETAnalyzers`, `AnalysisLevel`, `InvariantGlobalization`, детерминированная сборка. Добавить. +6. **Нет `Directory.Packages.props`** (Central Package Management) и нет lock-файлов (`RestorePackagesWithLockFile`) — сборки невоспроизводимы, что противоречит требованию pinned-поставки. +7. `LinkPolicyApplier` вызывает `sudo` per-operation (`:48`); при массовом переприменении (P0-2) это N процессов. Добавить batch-режим helper'а: `link-apply -` со списком правил на stdin, одна транзакция `nft -f`. +8. `ProvisioningProcessRunner.Run` (`:329-343`) — `Task.WaitAll` на потоке; при чтении больших выводов возможен deadlock-паттерн. Переписать на async, добавить лимит размера stdout/stderr (сейчас без ограничения — `timedatectl` безопасен, следующие модули нет). + +### Тесты + +9. Всё в одном проекте `ServerMonitorManager.Control.Tests` — включая `LinuxMetricsTests` (Agent), `MetricBufferTests` (Agent), `ProvisioningHelperTests` (Helper). Разделить: `Core.Tests`, `Control.Tests`, `Agent.Tests`, `Helper.Tests`, `Desktop.Tests`. +10. Нет тестов на: сериализацию контрактов (source-generated JSON + trimming — риск молчаливой потери полей при `PublishTrimmed=true`), отзыв сертификата → отказ в доступе, миграции SQLite v1→v8 на реальном старом файле, поведение при повреждённой БД. +11. Нет измеримых performance budget'ов (в roadmap отмечено). Задать: p95 heartbeat < 50 мс при 100 Node, старт Control < 2 с, память Agent < 60 МБ, размер БД на Node/сутки. +12. `HubLoadTests` (126 строк) гоняет 100 Node в одном процессе — добавить soak на 24 ч в nightly workflow с проверкой отсутствия роста памяти и размера БД. + +### Процесс и репозиторий + +13. Отсутствуют: `CHANGELOG.md`, `SECURITY.md` (куда слать уязвимости — обязательно для security-инструмента), `CONTRIBUTING.md`, `CODEOWNERS`, шаблоны issue/PR, `.github/dependabot.yml`. +14. Actions не запиннены по SHA; в `linux-release.yml` `permissions: contents: write` на весь workflow — сузить до job'а публикации. +15. Нет SBOM (`dotnet CycloneDX`) и нет сканирования зависимостей — для проекта, который ставит бинарь с root-правами, это ожидаемый минимум. +16. 12 переводов README рассинхронизированы с релиз-статусом (пункт открыт в roadmap Этап 6). Сделать один источник — секцию статуса генерировать скриптом из тега, переводы проверять CI на наличие актуального номера версии. +17. Ветки `agent/remove-lightweight-server-references` и `codex/ttl-backup-acceptance` слиты, но не удалены — почистить. + +--- + +## 5. План работ по спринтам + +### Спринт 1 — «Безопасно тестировать на живых серверах» (P0) +- [ ] P0-1 токен через файл/fd + тест на `/proc/*/cmdline` +- [ ] P0-5 helper: параллелизм, таймауты, буферное чтение, SO_PEERCRED +- [ ] P0-3 SSH-ключ: чистка orphan, DACL, одноразовая материализация за сессию +- [ ] P0-4 host key fingerprint в профиле + `StrictHostKeyChecking=yes` +- **Критерий выхода:** `v0.1.0-alpha.6`, ни один секрет не наблюдаем локальным непривилегированным пользователем; helper выдерживает молчащего клиента. + +### Спринт 2 — «Состояние в UI = состояние в системе» (P0-2, P1-3, P1-10) +- [ ] `link-list` в policy-helper, `LinkStartupReconciliationService` +- [ ] `ActualState`/drift-бейдж в Desktop +- [ ] durable event log + `?since=` + keepalive + backoff +- [ ] input-политика на Node +- **Критерий выхода:** сценарий из `three-server-acceptance.md` с `SMM_ACCEPT_REBOOT=1` проходит **с фактической проверкой связности** (`nc -z`) после reboot Hub и Node. + +### Спринт 3 — «Поставка, которой можно доверять» (P0-6, P1-2, P1-8, P1-9) +- [ ] подписанный compatibility manifest + вшитый публичный ключ +- [ ] проверка совместимости версий при update +- [ ] разделение CA-ключа и grant-ключа, пароль через `LoadCredential` +- [ ] атомарная замена дерева, checksum для backup'ов +- [ ] пиннинг actions, dependabot, SBOM, `SECURITY.md` +- **Критерий выхода:** `v0.2.0-beta.1`; подмена архива в релизе отвергается bootstrap'ом; тест на это в CI. + +### Спринт 4 — «Каркас провиженинга» (P1-5, P2-1, P2-4) +- [ ] `IProvisioningModule` + перенос timezone на него без изменения поведения +- [ ] versioned JSON schema per action, единый источник валидаторов в `Core` +- [ ] модули `system.locale`, `system.packages`, `system.swap` с backup/verify/rollback +- [ ] распил `ControlStore` +- **Критерий выхода:** Этап 9 roadmap закрыт наполовину; добавление нового модуля = один файл + схема + тест. + +### Спринт 5 — «Роль Monitor и Desktop» (P1-1, P2-2, P2-3) +- [ ] `install-monitor` + forced-command скрипт + контрактный тест формата снимка +- [ ] MVVM + DI + unit-тесты Desktop +- [ ] локализация `.resw`, коды ошибок вместо текста +- **Критерий выхода:** чистый сервер настраивается под мониторинг одной командой; README-инструкция соответствует коду. + +### Спринт 6 — «SSH-миграция и firewall» (Этап 10 ТЗ) +Двухфазная миграция порта — самая опасная операция во всём проекте (потеря доступа). Делать только после спринтов 1–4, обязательно с VM-матрицей и тестом «новый порт не поднялся → 22 остался открыт». + +--- + +## 6. Чек-лист готовности к публичной beta + +- [ ] Ни один секрет (токен, ключ, subscription URL) не наблюдаем в `argv`, логах, diagnostics, SQLite — покрыто автотестом +- [ ] Все артефакты релиза подписаны, bootstrap проверяет подпись +- [ ] Совместимость Control↔Agent↔helper↔Desktop проверяется перед update и перед выполнением job +- [ ] После reboot Hub и любого Node factual state == desired state (проверено связностью, не только API) +- [ ] Отзыв сертификата немедленно закрывает доступ — тест +- [ ] Каждая мутирующая операция: idempotency + audit + verification + rollback — тест на каждую +- [ ] Физическая приёмка `three-server-acceptance.md` с `SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1` +- [ ] Debian VM с настоящим reboot (сейчас только systemd-контейнеры) +- [ ] Доверенная подпись Windows MSIX +- [ ] Performance budget зафиксированы и проверяются в nightly +- [ ] `SECURITY.md`, `CHANGELOG.md`, SBOM +- [ ] Переводы README синхронизированы с релиз-статусом + +--- + +## 7. Чего делать не стоит + +- **Не начинать Xray (Этапы 11–12) до закрытия P0/P1.** Xray добавляет системный kill switch и policy routing — при текущем разрыве desired/factual (P0-2) это гарантированная потеря доступа к серверу. +- **Не расширять `system.base-install` копированием `TimezoneProvisioningExecutor`.** Сначала каркас (P1-5), иначе шесть копий логики backup/verify/rollback. +- **Не добавлять macOS/Linux/мобильные клиенты** (Этап 13) до стабилизации контрактов `Core` — сейчас они меняются каждым PR. +- **Не отключать `PublishTrimmed`** ради удобства, но и не доверять ему без тестов сериализации (P2-10): source-generated JSON контекст есть, но контрактных тестов на round-trip нет. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-install-commands-2026-08-07.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-install-commands-2026-08-07.md new file mode 100644 index 0000000..7dff458 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-install-commands-2026-08-07.md @@ -0,0 +1,266 @@ +# Команды установки — копировать и выполнять + +## Машины + +| Роль | Что ставим | Требования | +|---|---|---| +| **A** — публичный IP | Control Hub | свободны TCP 7443, UDP 51820 | +| **B** | Node `ai-agent` | только исходящий доступ к A | +| **C** | Node `home` | только исходящий доступ к A | +| **D** | Node `second` | только исходящий доступ к A | + +D может быть виртуалкой дома за NAT — входящие порты Node не нужны. Если четвёртой машины нет, приёмка пройдёт частично: два независимых назначения нужны, чтобы проверить, что отключение одного Link не рвёт второй. + +Ниже всё для `x86_64`. Для `arm64` замените `linux-x64` на `linux-arm64` во всех командах. + +--- + +## Шаг 0. На вашей Windows-машине: собрать артефакты + +Опубликованный релиз `v0.1.0-alpha.6` устарел — в нём нет реконсиляции Links, и приёмка на нём проверит не то. Собираем из текущего `main`. + +```powershell +gh workflow run "Linux release artifacts" --repo ochenstarik-ui/server-monitor-manager --ref main +``` + +Подождать ~3 минуты, затем: + +```powershell +gh run list --repo ochenstarik-ui/server-monitor-manager --workflow "Linux release artifacts" --limit 1 +``` + +Взять ID из вывода и скачать: + +```powershell +gh run download --repo ochenstarik-ui/server-monitor-manager -D C:\Users\Ochenstarik\smm-artifacts +``` + +Получится три папки. Нужные файлы: + +``` +C:\Users\Ochenstarik\smm-artifacts\server-monitor-manager-bootstrap\ochenstarik-server-monitor-manager.sh +C:\Users\Ochenstarik\smm-artifacts\server-monitor-manager-bootstrap\ochenstarik-server-monitor-manager.sh.sha256 +C:\Users\Ochenstarik\smm-artifacts\server-monitor-manager-linux-x64\server-monitor-manager-linux-x64.tar.gz +C:\Users\Ochenstarik\smm-artifacts\server-monitor-manager-linux-x64\server-monitor-manager-linux-x64.tar.gz.sha256 +``` + +Скопировать на каждый из четырёх серверов: + +```powershell +$files = @( + "C:\Users\Ochenstarik\smm-artifacts\server-monitor-manager-bootstrap\ochenstarik-server-monitor-manager.sh", + "C:\Users\Ochenstarik\smm-artifacts\server-monitor-manager-bootstrap\ochenstarik-server-monitor-manager.sh.sha256", + "C:\Users\Ochenstarik\smm-artifacts\server-monitor-manager-linux-x64\server-monitor-manager-linux-x64.tar.gz", + "C:\Users\Ochenstarik\smm-artifacts\server-monitor-manager-linux-x64\server-monitor-manager-linux-x64.tar.gz.sha256" +) +foreach ($host_ in @("","","","")) { + ssh <пользователь>@$host_ "mkdir -p ~/smm" + scp $files <пользователь>@${host_}:~/smm/ +} +``` + +--- + +## Шаг 1. Зависимости и предпроверка — на каждом из четырёх серверов + +Поддерживаются **Ubuntu 22.04 и 24.04**, Debian 12 и 13. На другой системе `preflight` откажет. + +Установить зависимости: + +```bash +sudo apt-get update +sudo apt-get install -y --no-install-recommends \ + openssl coreutils tar sudo util-linux ca-certificates +``` + +**Дополнительно на сервере B** (Node `ai-agent`, источник) — без него приёмка упадёт на последнем шаге: + +```bash +sudo apt-get install -y --no-install-recommends netcat-openbsd +``` + +Проверка связности в приёмке выполняется командой `nc` **на самом источнике**, а скрипт этого не проверяет — он проверяет наличие `nc` только на вашей машине. + +`wireguard-tools`, `nftables` и `iproute2` ставит сам bootstrap на шаге `mesh-init`, отдельно их устанавливать не нужно. + +Предпроверка: + +```bash +cd ~/smm +. /etc/os-release; echo "ОС: $ID $VERSION_ID $(uname -m)"; ps -p 1 -o comm= +echo "--- порты 7443 / 51820 ---"; ss -lntup | grep -E ':7443|:51820' || echo "свободны" +echo "--- таблицы nftables ---"; nft list tables 2>/dev/null || echo "nft не установлен" +echo "--- интерфейсы WireGuard ---"; wg show interfaces 2>/dev/null || echo "нет" +echo "--- подсеть 10.77.0.0/24 ---"; ip -4 route | grep '10\.77\.' || echo "свободна" +echo "--- 3x-ui / xray ---"; ss -lntup | grep -Ei 'x-ui|xray' || echo "не найдено" +``` + +Продолжать, только если ОС — Ubuntu 22.04/24.04 или Debian 12/13, PID 1 это `systemd`, порты свободны и подсеть не занята. + +**Снимите снапшоты у провайдера перед следующим шагом.** + +--- + +## Шаг 2. Сервер A — Control Hub + +```bash +cd ~/smm +sha256sum -c ochenstarik-server-monitor-manager.sh.sha256 +chmod 700 ochenstarik-server-monitor-manager.sh +sudo ./ochenstarik-server-monitor-manager.sh preflight +sudo ./ochenstarik-server-monitor-manager.sh verify-release ./server-monitor-manager-linux-x64.tar.gz +``` + +Замените `` на публичный IP или DNS-имя сервера A: + +```bash +sudo ./ochenstarik-server-monitor-manager.sh install-control ./server-monitor-manager-linux-x64.tar.gz 7443 +sudo ./ochenstarik-server-monitor-manager.sh mesh-init 51820 +sudo ./ochenstarik-server-monitor-manager.sh status +``` + +Откройте во внешнем firewall провайдера **TCP 7443** и **UDP 51820**. + +Проверьте, что 3x-ui работает, прежде чем идти дальше. + +--- + +## Шаг 3. Регистрация Node — по одному + +Для каждого Node цикл одинаковый: код выпускается на A, вводится на Node, обратный код возвращается на A. + +### 3.1. На A — выпустить код для `ai-agent` + +```bash +sudo ./ochenstarik-server-monitor-manager.sh node-code ai-agent +sudo ./ochenstarik-server-monitor-manager.sh control-ca-fingerprint +``` + +Скопируйте строку `SMMNODE2....` и отпечаток CA. + +### 3.2. На B — установить Node + +```bash +cd ~/smm +sha256sum -c ochenstarik-server-monitor-manager.sh.sha256 +chmod 700 ochenstarik-server-monitor-manager.sh +sudo ./ochenstarik-server-monitor-manager.sh preflight +sudo ./ochenstarik-server-monitor-manager.sh install-node ./server-monitor-manager-linux-x64.tar.gz +``` + +Вставьте `SMMNODE2....` в скрытый запрос. Сверьте показанный отпечаток CA с тем, что выдал A, и введите `yes`. + +На выходе будет строка `SMMPEER1....` — скопируйте её. + +### 3.3. На A — активировать peer + +```bash +sudo ./ochenstarik-server-monitor-manager.sh peer-add 'SMMPEER1....' +sudo ./ochenstarik-server-monitor-manager.sh mesh-status +``` + +### 3.4. Повторить 3.1–3.3 для C и D + +Для C — `node-code home`, для D — `node-code second`. + +После всех трёх на A: + +```bash +sudo ./ochenstarik-server-monitor-manager.sh mesh-status +``` + +Должны быть три строки со статусом `active` и свежими handshake. Запишите адреса `home` и `second` — они понадобятся дальше. + +--- + +## Шаг 4. Проверка перед приёмкой + +На A: + +```bash +sudo systemctl is-active ochenstarik-smm-control.service +sudo curl --fail --silent --cacert /etc/ochenstarik-server-monitor-manager/control-ca.crt https://127.0.0.1:7443/healthz && echo " Control OK" +``` + +На B, C, D: + +```bash +sudo systemctl is-active ochenstarik-smm-agent.service +sudo systemctl is-active ochenstarik-smm-provisioning-helper.service +sudo wg show smm0 +``` + +На каждом — убедитесь, что 3x-ui и Xray живы: + +```bash +sudo systemctl is-active x-ui 2>/dev/null || sudo systemctl list-units --type=service | grep -i 'x-ui\|xray' +``` + +--- + +## Шаг 5. Приёмка — с вашей машины + +Запускать из WSL (Ubuntu) или Git Bash. В WSL поставить зависимости: + +```bash +sudo apt-get update +sudo apt-get install -y --no-install-recommends curl jq openssl openssh-client netcat-openbsd coreutils +``` + +```bash +cd /путь/к/клону/server-monitor-manager + +export HUB_SSH_HOST= +export HUB_SSH_USER=<пользователь> +export SOURCE_SSH_HOST= +export SOURCE_SSH_USER=<пользователь> +export SSH_IDENTITY_FILE="$HOME/.ssh/id_ed25519" +export SOURCE_NODE_ID=ai-agent +export HOME_NODE_ID=home +export SECOND_NODE_ID=second +export HOME_WG_IP=10.77.0.<из mesh-status> +export SECOND_WG_IP=10.77.0.<из mesh-status> +export TARGET_PORT=22 + +bash tests/acceptance/three-server-mesh.sh +``` + +Этот прогон **ничего не перезагружает**. Успех — строка `THREE_SERVER_ACCEPTANCE=PASS`. + +Полная приёмка добавляет перезагрузку A и B — делать в низкий трафик: + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 bash tests/acceptance/three-server-mesh.sh +``` + +--- + +## Откат, если что-то пошло не так + +На Node: + +```bash +sudo ochenstarik-server-monitor-manager.sh uninstall-agent --purge +``` + +На Hub: + +```bash +sudo ochenstarik-server-monitor-manager.sh uninstall-control --confirm-destroy-control +``` + +На любом сервере — полная зачистка следов mesh: + +```bash +sudo systemctl disable --now wg-quick@smm0 2>/dev/null || true +sudo rm -f /etc/wireguard/smm0.conf /etc/sysctl.d/90-ochenstarik-smm-mesh.conf +sudo nft delete table inet ochenstarik_smm 2>/dev/null || true +sudo sysctl --system +``` + +Аварийно отключить mesh, не трогая Control, Agent, SSH и 3x-ui: + +```bash +sudo ochenstarik-smm-emergency status +sudo ochenstarik-smm-emergency mesh-disable +``` diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-install-oneliner-2026-08-13.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-install-oneliner-2026-08-13.md new file mode 100644 index 0000000..706bd37 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-install-oneliner-2026-08-13.md @@ -0,0 +1,141 @@ +# Установка на серверы — одной командой + +Работает **после выпуска `v0.1.0-alpha.14`**. Сейчас опубликован `alpha.13`, а в нём подпись без сертификата, поэтому проверка на нём откажет. Выпуск alpha.14 — задание Hermes. + +Проверить, что релиз вышел: + +```bash +curl -fsSI https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.14/smm-setup.sh | head -1 +``` + +Ответ `HTTP/2 200` — можно ставить. `404` — релиз ещё не опубликован. + +--- + +## Роли + +Нужны четыре машины: Hub плюс три Node. Hub и Node нельзя совмещать — оба пишут `/etc/wireguard/smm0.conf`. + +| Машина | Роль | Требования | +|---|---|---| +| A, публичный IP | Control Hub | свободны TCP 7443, UDP 51820 | +| B | Node `ai-agent` | только исходящий доступ | +| C | Node `home` | только исходящий доступ | +| D | Node `second` | только исходящий доступ, годится домашняя ВМ | + +Ниже всё для `x86_64`. Для `arm64` замените `linux-x64` на `linux-arm64`. + +Снимите снапшоты у провайдера до начала. + +--- + +## Hub — одна команда + +Подставьте публичное имя сервера A вместо `ВАШ-ХОСТ`: + +```bash +TAG=v0.1.0-alpha.14 ARCH=linux-x64 HOST=ВАШ-ХОСТ; \ +B=https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/$TAG; \ +sudo apt-get update -qq && sudo apt-get install -y -qq --no-install-recommends curl ca-certificates openssl coreutils tar netcat-openbsd && \ +mkdir -p ~/smm && cd ~/smm && \ +for f in smm-setup.sh smm-setup.sh.sha256 server-monitor-manager-$ARCH.tar.gz server-monitor-manager-$ARCH.tar.gz.sha256 server-monitor-manager-manifest.json server-monitor-manager-manifest.sig server-monitor-manager-manifest.pem; do curl -fsSL -O "$B/$f"; done && \ +sha256sum -c smm-setup.sh.sha256 && sha256sum -c server-monitor-manager-$ARCH.tar.gz.sha256 && \ +sudo bash smm-setup.sh install-control server-monitor-manager-$ARCH.tar.gz "$HOST" 7443 && \ +sudo bash smm-setup.sh mesh-init "$HOST" 51820 +``` + +Команда скачивает установщик, архив и все три файла подписи, сверяет контрольные суммы, ставит Control и поднимает mesh. Проверка подписи manifest выполняется внутри `install-control` — если она не сойдётся, установка прервётся. + +Затем откройте в панели хостера **TCP 7443** и **UDP 51820** и, если включён `ufw`: + +```bash +sudo ufw allow 7443/tcp comment 'SMM Control' && sudo ufw allow 51820/udp comment 'SMM WireGuard' +``` + +Проверка: + +```bash +sudo curl -sf --cacert /etc/ochenstarik-server-monitor-manager/control-ca.crt https://ВАШ-ХОСТ:7443/healthz && echo " — Control отвечает" +``` + +--- + +## Node — одна команда + +На каждом из B, C, D. Сначала на Hub выпустите код **непосредственно перед установкой** — он живёт 10 минут: + +```bash +sudo bash ~/smm/smm-setup.sh node-code ai-agent +``` + +Для C — `home`, для D — `second`. Скопируйте строку `SMMNODE2....`. + +Затем на Node: + +```bash +TAG=v0.1.0-alpha.14 ARCH=linux-x64; \ +B=https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/$TAG; \ +sudo apt-get update -qq && sudo apt-get install -y -qq --no-install-recommends curl ca-certificates openssl coreutils tar netcat-openbsd && \ +mkdir -p ~/smm && cd ~/smm && \ +for f in smm-setup.sh smm-setup.sh.sha256 server-monitor-manager-$ARCH.tar.gz server-monitor-manager-$ARCH.tar.gz.sha256 server-monitor-manager-manifest.json server-monitor-manager-manifest.sig server-monitor-manager-manifest.pem; do curl -fsSL -O "$B/$f"; done && \ +sha256sum -c smm-setup.sh.sha256 && sha256sum -c server-monitor-manager-$ARCH.tar.gz.sha256 && \ +sudo bash smm-setup.sh install-node server-monitor-manager-$ARCH.tar.gz +``` + +Установщик спросит код — вставьте `SMMNODE2....`, ввод скрытый. Сверьте показанный отпечаток CA с тем, что выдаёт Hub по команде `sudo bash ~/smm/smm-setup.sh control-ca-fingerprint`, и введите `yes`. + +На выходе появится `SMMPEER1....` — скопируйте и активируйте на Hub: + +```bash +sudo bash ~/smm/smm-setup.sh peer-add 'SMMPEER1....' +``` + +После всех трёх на Hub: + +```bash +sudo bash ~/smm/smm-setup.sh mesh-status +``` + +Должны быть три строки `active` со свежими handshake. + +--- + +## Приёмка + +С вашей машины, из WSL или Git Bash, в клоне репозитория: + +```bash +export HUB_SSH_HOST=A HUB_SSH_USER=пользователь +export SOURCE_SSH_HOST=B SOURCE_SSH_USER=пользователь +export SSH_IDENTITY_FILE="$HOME/.ssh/id_ed25519" +export SOURCE_NODE_ID=ai-agent HOME_NODE_ID=home SECOND_NODE_ID=second +export HOME_WG_IP=10.77.0.x SECOND_WG_IP=10.77.0.y +export TARGET_PORT=22 +bash tests/acceptance/three-server-mesh.sh +``` + +Адреса возьмите из `mesh-status`. Этот прогон ничего не перезагружает. Успех — `THREE_SERVER_ACCEPTANCE=PASS`. + +Полная приёмка добавляет перезагрузку Hub и источника — делать в низкий трафик: + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 bash tests/acceptance/three-server-mesh.sh +``` + +--- + +## Откат + +```bash +sudo bash ~/smm/smm-setup.sh uninstall-agent --purge +sudo bash ~/smm/smm-setup.sh uninstall-control --confirm-destroy-control +sudo systemctl disable --now wg-quick@smm0 2>/dev/null || true +sudo rm -f /etc/wireguard/smm0.conf /etc/sysctl.d/90-ochenstarik-smm-mesh.conf +sudo nft delete table inet ochenstarik_smm 2>/dev/null || true +``` + +Аварийно отключить mesh, не трогая Control, Agent, SSH и 3x-ui: + +```bash +sudo ochenstarik-smm-emergency mesh-disable +``` diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-review-bundle-monitor-alpha9-2026-08-10.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-review-bundle-monitor-alpha9-2026-08-10.md new file mode 100644 index 0000000..174747b --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-review-bundle-monitor-alpha9-2026-08-10.md @@ -0,0 +1,1082 @@ +# Independent review bundle +## Full authoritative task + +1|# Hermes: формат снимка Monitor, совместимость БД, дисциплина релизов +2| +3|## Состояние +4| +5|- `main` @ `f9205c3`, роль Monitor слита (#29), подписанная поставка Queue A слита (#26); +6|- `v0.1.0-alpha.8` пересобран, все Linux-артефакты и `server-monitor-manager-manifest.sig` на месте; +7|- открыт PR #31 с починкой путей Windows-артефактов. +8| +9|Ветка: `hermes/monitor-snapshot-contract`. +10| +11|--- +12| +13|## Часть 1 — снимок Monitor не читается Desktop · блокирующий +14| +15|Роль Monitor установлена, но мониторинг работать не будет. Скрипт `/usr/local/libexec/ochenstarik-smm-metrics` выдаёт имена полей, которых не понимает ни парсер Desktop, ни собственный контракт проекта. +16| +17|**Ждёт `SshMonitorService.QueryAsync`:** +18| +19|``` +20|PROTOCOL HOSTNAME UPTIME_SECONDS LOAD1 CPU_COUNT +21|MEM_TOTAL_KB MEM_AVAILABLE_KB SWAP_TOTAL_KB SWAP_FREE_KB +22|DISK_TOTAL_KB DISK_AVAILABLE_KB DISK_INODES_TOTAL DISK_INODES_FREE +23|NETWORK_RX_BYTES NETWORK_TX_BYTES SYSTEMD_SSH SYSTEMD_WIREGUARD +24|``` +25| +26|**Выдаёт скрипт:** +27| +28|``` +29|CPU_COUNT LOAD1 MEM_TOTAL MEM_AVAIL SWAP_TOTAL SWAP_FREE +30|DISK_TOTAL DISK_AVAIL INODES_TOTAL INODES_FREE +31|NET_RX NET_TX UPTIME KERNEL DF_OUT DF_INODES MESH_STATUS +32|``` +33| +34|Совпадают **два поля из шестнадцати** — `CPU_COUNT` и `LOAD1`. Остальные не совпадают по имени, а `PROTOCOL`, `HOSTNAME`, `SYSTEMD_SSH`, `SYSTEMD_WIREGUARD` отсутствуют вовсе. +35| +36|Практический результат: в Desktop имя сервера подставится из профиля, память, диск, swap, inode и сеть покажут нули, состояния SSH и WireGuard — `unknown`. Формально роль установлена, фактически функция, ради которой существует Desktop, не работает. +37| +38|Формат уже зафиксирован в `docs/installer-contract.md` §7 — его и надо соблюсти дословно, а не изобретать заново. +39| +40|### Что сделать +41| +42|1. Привести вывод скрипта к `docs/installer-contract.md` §7: `PROTOCOL=1`, `HOSTNAME`, `UPTIME_SECONDS`, `LOAD1`, `CPU_COUNT`, `MEM_TOTAL_KB`, `MEM_AVAILABLE_KB`, `SWAP_TOTAL_KB`, `SWAP_FREE_KB`, `DISK_TOTAL_KB`, `DISK_AVAILABLE_KB`, `DISK_INODES_TOTAL`, `DISK_INODES_FREE`, `NETWORK_RX_BYTES`, `NETWORK_TX_BYTES`, `KERNEL`. +43|2. Добавить `SYSTEMD_SSH` и `SYSTEMD_WIREGUARD` — их читает Desktop, но в §7 их нет. Дописать в §7, чтобы контракт снова был единственным источником. +44|3. Внутренние переменные вроде `DF_OUT` и `DF_INODES` из вывода убрать: снимок не должен содержать ничего, кроме полей контракта. +45| +46|### Контрактный тест — переделать +47| +48|`tests/acceptance/test_monitor_snapshot.sh` проверяет скрипт против списка полей, который живёт в самом тесте. Именно поэтому расхождение с Desktop не поймалось. +49| +50|Список ожидаемых полей должен существовать **в одном месте** и использоваться обеими сторонами: +51| +52|- тестом shell-скрипта — что все поля присутствуют и лишних нет; +53|- тестом парсера Desktop — что он читает ровно эти поля. +54| +55|Как реализовать — на ваше усмотрение: общий файл-фикстура с эталонным снимком, из которого обе стороны берут набор ключей, либо генерация списка из `installer-contract.md`. Требование одно: **изменение имени поля с одной стороны обязано ронять тест другой стороны.** +56| +57|`SshMonitorService.cs` при этом не менять — правится скрипт, а не парсер. Если парсер тоже потребует правки, описать в `REPORT.md`. +58| +59|--- +60| +61|## Часть 2 — совместимость существующей БД с SQLitePCLRaw 3.0.5 +62| +63|Пункт из прошлого задания, оставшийся невыполненным. Сейчас он не горит только по счастливой случайности: `alpha.8` собран из коммита, где ещё `2.1.12`. Но в `main` уже `3.0.5`, и следующий релиз его унесёт. +64| +65|На живом Hub пользователя база создана версией `2.1.12`. Если совместимости нет, это проявится в момент `update-control`. +66| +67|Проверить: открытие существующей `control.db` сборкой из текущего `main`, `PRAGMA user_version` без повторного применения миграций, чтение агентов, identities, links, provisioning и аудита, `backup-create` и `backup-restore` на этой же базе, и то же самое на `linux-arm64` self-contained trimmed single-file. +68| +69|**Добавить постоянный тест** на открытие базы предыдущей схемы — эталонная `control.db` в репозитории либо скрипт её воспроизведения. Без него следующее обновление SQLite повторит эту историю. +70| +71|Если хоть одна проверка не проходит — откатить `#23` отдельным PR и написать об этом прямо. +72| +73|--- +74| +75|## Часть 3 — дисциплина релизов +76| +77|Тег `v0.1.0-alpha.8` был сдвинут: сначала указывал на `80b4797`, теперь на `ad180e9`. Так делать нельзя, и теперь особенно: релиз содержит `server-monitor-manager-manifest.json` и подпись `manifest.sig`, которые описывают конкретное содержимое. Если тег двигается, подпись перестаёт что-либо доказывать, а у того, кто сверялся с прежним тегом, проверка не сойдётся. +78| +79|1. Зафиксировать правило в `docs/installer-contract.md`: **опубликованный тег неизменяем**; ошибка в сборке исправляется выпуском следующей версии, а не переписыванием тега. +80|2. Следующий релиз выпускать как `v0.1.0-alpha.9` после частей 1 и 2. +81|3. Убрать из `smm-setup.sh` (ассет релиза) временный обход бага `validate_control_url` — дефект исправлен в #24, обход помечен комментарием в коде. +82|4. Довести или закрыть PR #31. +83| +84|--- +85| +86|## Критерий приёмки +87| +88|- снимок Monitor совпадает с `installer-contract.md` §7 плюс два поля systemd; лишних полей нет; +89|- переименование любого поля роняет тест противоположной стороны — продемонстрировать намеренной поломкой во временном коммите со ссылкой на красный прогон; +90|- существующая база открывается новой сборкой, есть постоянный тест на предыдущую схему; +91|- правило неизменяемости тега записано в контракте; +92|- обход `validate_control_url` из `smm-setup.sh` удалён; +93|- Control suite прогнан на Linux, CI зелёный. +94| +95|## Отчёт +96| +97|Раздельно: локально, в CI со ссылками, не запускалось и почему. +98| + +## Tracked diff + +```diff +diff --git a/.github/workflows/linux-control-agent.yml b/.github/workflows/linux-control-agent.yml +index fb27dc6..94c19cc 100644 +--- a/.github/workflows/linux-control-agent.yml ++++ b/.github/workflows/linux-control-agent.yml +@@ -26,9 +26,6 @@ jobs: + - name: Build + run: dotnet build ServerMonitorManager.slnx --configuration Release --no-restore + +- - name: Generate reference alpha.7 control database +- run: bash tests/acceptance/generate_alpha7_db.sh tests/acceptance/alpha7.db +- + - name: Test + run: dotnet test tests/ServerMonitorManager.Control.Tests/ServerMonitorManager.Control.Tests.csproj --configuration Release --no-build + +@@ -42,6 +39,17 @@ jobs: + bash -n tests/acceptance/three-server-mesh.sh + shellcheck --severity=error tests/acceptance/three-server-mesh.sh + ++ - name: Verify Monitor snapshot contract ++ run: | ++ bash -n tests/acceptance/test_monitor_snapshot.sh ++ bash -n tests/acceptance/test_previous_schema_contract.sh ++ bash -n tests/acceptance/test_previous_schema_arm64.sh ++ shellcheck --severity=error tests/acceptance/test_monitor_snapshot.sh ++ shellcheck --severity=error tests/acceptance/test_previous_schema_contract.sh ++ shellcheck --severity=error tests/acceptance/test_previous_schema_arm64.sh ++ bash tests/acceptance/test_monitor_snapshot.sh ++ bash tests/acceptance/test_previous_schema_contract.sh ++ + - name: Verify standalone bootstrap + run: | + bash -n deploy/ochenstarik-server-monitor-manager.sh +@@ -50,14 +58,17 @@ jobs: + bash -n tests/bootstrap/run-native-systemd-smoke.sh + bash -n tests/bootstrap/run-systemd-container-smoke.sh + bash -n tests/bootstrap/test-enrollment-token-argv.sh ++ bash -n tests/bootstrap/test-release-contract.sh + shellcheck --severity=error deploy/ochenstarik-server-monitor-manager.sh + shellcheck --severity=error deploy/ochenstarik-smm-policy-apply + shellcheck --severity=error deploy/ochenstarik-smm-emergency + shellcheck --severity=error tests/bootstrap/run-native-systemd-smoke.sh + shellcheck --severity=error tests/bootstrap/run-systemd-container-smoke.sh + shellcheck --severity=error tests/bootstrap/test-enrollment-token-argv.sh ++ shellcheck --severity=error tests/bootstrap/test-release-contract.sh + bash tests/bootstrap/test-bootstrap-contract.sh + bash tests/bootstrap/test-enrollment-token-argv.sh ++ bash tests/bootstrap/test-release-contract.sh + + - name: Publish agent amd64 + run: dotnet publish src/ServerMonitorManager.Agent/ServerMonitorManager.Agent.csproj --configuration Release --runtime linux-x64 --self-contained true -p:PublishSingleFile=true -p:PublishTrimmed=true -p:RestoreLockedMode=true +@@ -65,6 +76,22 @@ jobs: + - name: Publish agent arm64 + run: dotnet publish src/ServerMonitorManager.Agent/ServerMonitorManager.Agent.csproj --configuration Release --runtime linux-arm64 --self-contained true -p:PublishSingleFile=true -p:PublishTrimmed=true -p:RestoreLockedMode=true + ++ - name: Publish control arm64 compatibility binary ++ run: dotnet publish src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj --configuration Release --runtime linux-arm64 --self-contained true -p:PublishSingleFile=true -p:PublishTrimmed=true -p:RestoreLockedMode=true -o compatibility/control-linux-arm64 ++ ++ - name: Set up arm64 emulation ++ uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3 ++ with: ++ platforms: arm64 ++ ++ - name: Verify previous schema with arm64 published Control ++ run: | ++ docker run --rm --platform linux/arm64 \ ++ --volume "$PWD:/workspace" --workdir /workspace \ ++ ubuntu:24.04 \ ++ bash tests/acceptance/test_previous_schema_arm64.sh \ ++ compatibility/control-linux-arm64/ochenstarik-smm-control ++ + - name: Publish provisioning helper amd64 + run: dotnet publish src/ServerMonitorManager.Provisioning.Helper/ServerMonitorManager.Provisioning.Helper.csproj --configuration Release --runtime linux-x64 --self-contained true -p:PublishSingleFile=true -p:PublishTrimmed=true -p:RestoreLockedMode=true + +diff --git a/.github/workflows/linux-release.yml b/.github/workflows/linux-release.yml +index 957e50d..1341fbe 100644 +--- a/.github/workflows/linux-release.yml ++++ b/.github/workflows/linux-release.yml +@@ -23,38 +23,51 @@ jobs: + - name: Validate bootstrap + run: | + bash -n deploy/ochenstarik-server-monitor-manager.sh ++ bash -n deploy/smm-setup.sh + bash -n deploy/ochenstarik-smm-policy-apply + bash -n deploy/ochenstarik-smm-emergency + bash -n tests/bootstrap/run-native-systemd-smoke.sh + bash -n tests/bootstrap/run-systemd-container-smoke.sh + shellcheck --severity=error deploy/ochenstarik-server-monitor-manager.sh ++ shellcheck --severity=error deploy/smm-setup.sh + shellcheck --severity=error deploy/ochenstarik-smm-policy-apply + shellcheck --severity=error deploy/ochenstarik-smm-emergency + shellcheck --severity=error tests/bootstrap/run-native-systemd-smoke.sh + shellcheck --severity=error tests/bootstrap/run-systemd-container-smoke.sh + bash tests/bootstrap/test-bootstrap-contract.sh + bash tests/bootstrap/test-manifest-verification.sh ++ bash tests/bootstrap/test-release-contract.sh + + - name: Package bootstrap + shell: bash + run: | + set -Eeuo pipefail +- install -m 0755 deploy/ochenstarik-server-monitor-manager.sh ochenstarik-server-monitor-manager.sh ++ DIST_DIR=dist ++ install -d "$DIST_DIR" ++ install -m 0755 deploy/ochenstarik-server-monitor-manager.sh "$DIST_DIR/ochenstarik-server-monitor-manager.sh" ++ install -m 0755 deploy/smm-setup.sh "$DIST_DIR/smm-setup.sh" + + # Substitute PROGRAM_VERSION from tag + if [[ "${GITHUB_REF}" == refs/tags/* ]]; then +- sed -i "s/^PROGRAM_VERSION=.*$/PROGRAM_VERSION=\"${GITHUB_REF_NAME}\"/" ochenstarik-server-monitor-manager.sh ++ sed -i "s/^PROGRAM_VERSION=.*$/PROGRAM_VERSION=\"${GITHUB_REF_NAME}\"/" "$DIST_DIR/ochenstarik-server-monitor-manager.sh" ++ grep -Fq "readonly DEFAULT_RELEASE_TAG=\"${GITHUB_REF_NAME}\"" "$DIST_DIR/smm-setup.sh" + fi + +- sha256sum ochenstarik-server-monitor-manager.sh > ochenstarik-server-monitor-manager.sh.sha256 ++ ( ++ cd "$DIST_DIR" ++ sha256sum ochenstarik-server-monitor-manager.sh > ochenstarik-server-monitor-manager.sh.sha256 ++ sha256sum smm-setup.sh > smm-setup.sh.sha256 ++ ) + + - name: Upload bootstrap artifact + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + with: + name: server-monitor-manager-bootstrap + path: | +- ochenstarik-server-monitor-manager.sh +- ochenstarik-server-monitor-manager.sh.sha256 ++ dist/ochenstarik-server-monitor-manager.sh ++ dist/ochenstarik-server-monitor-manager.sh.sha256 ++ dist/smm-setup.sh ++ dist/smm-setup.sh.sha256 + + publish-linux: + runs-on: ubuntu-latest +@@ -233,6 +246,7 @@ jobs: + + # Calculate hashes + BOOTSTRAP_SHA=$(sha256sum artifacts/server-monitor-manager-bootstrap/ochenstarik-server-monitor-manager.sh | awk '{print $1}') ++ SETUP_SHA=$(sha256sum artifacts/server-monitor-manager-bootstrap/smm-setup.sh | awk '{print $1}') + LINUX_X64_SHA=$(sha256sum artifacts/server-monitor-manager-linux-x64/server-monitor-manager-linux-x64.tar.gz | awk '{print $1}') + LINUX_ARM64_SHA=$(sha256sum artifacts/server-monitor-manager-linux-arm64/server-monitor-manager-linux-arm64.tar.gz | awk '{print $1}') + MSIX_SHA=$(sha256sum artifacts/server-monitor-manager-win-x64/artifacts/windows-installer/ServerMonitorManager-win-x64.msix | awk '{print $1}') +@@ -244,6 +258,7 @@ jobs: + --arg schema "smm-manifest/v2" \ + --arg version "$VERSION" \ + --arg bootstrap_sha256 "$BOOTSTRAP_SHA" \ ++ --arg setup_sha256 "$SETUP_SHA" \ + --arg linux_x64_sha256 "$LINUX_X64_SHA" \ + --arg linux_arm64_sha256 "$LINUX_ARM64_SHA" \ + --arg msix_sha256 "$MSIX_SHA" \ +@@ -264,6 +279,7 @@ jobs: + }, + hashes: { + "ochenstarik-server-monitor-manager.sh": $bootstrap_sha256, ++ "smm-setup.sh": $setup_sha256, + "server-monitor-manager-linux-x64.tar.gz": $linux_x64_sha256, + "server-monitor-manager-linux-arm64.tar.gz": $linux_arm64_sha256, + "ServerMonitorManager-win-x64.msix": $msix_sha256, +diff --git a/README.md b/README.md +index 9e3aeb8..39ce4d5 100644 +--- a/README.md ++++ b/README.md +@@ -40,7 +40,7 @@ The control plane and data plane are separated: + - **Desktop:** packaged WinUI 3 client with DPAPI-protected operator certificate and SSH identity. + - **Agent:** self-contained Linux binary for `amd64` and `arm64`; it only creates outbound mTLS sessions. + +-See [architecture](docs/architecture.md), [security model](docs/security-model.md), [roadmap](docs/roadmap.md), [Linux bootstrap contract](docs/installer-contract.md), and the [Provisioning and Xray specification](docs/provisioning-vpn-requirements.md). ++See [architecture](docs/architecture.md), [security model](docs/security-model.md), [roadmap](docs/roadmap.md), [Linux bootstrap contract](docs/installer-contract.md), [release policy](docs/release-policy.md), and the [Provisioning and Xray specification](docs/provisioning-vpn-requirements.md). + + Work order is governed by [product horizons](docs/product-horizons.md): the roadmap records what is done, the horizons record what may be started. Planned subsystems are specified separately in [approval policies](docs/approval-policies.md) and the [KAgent integration](docs/integration-kagent.md). Both describe target behaviour and are not descriptions of the current alpha; nothing in them is implemented. + +diff --git a/deploy/ochenstarik-server-monitor-manager.sh b/deploy/ochenstarik-server-monitor-manager.sh +index 0dc6203..f5652ed 100755 +--- a/deploy/ochenstarik-server-monitor-manager.sh ++++ b/deploy/ochenstarik-server-monitor-manager.sh +@@ -1245,11 +1245,6 @@ install_monitor() { + set -euo pipefail + # ochenstarik-smm-metrics + +-MESH_STATUS="" +-if [[ -x /usr/bin/wg && -f /etc/wireguard/smm0.conf ]]; then +- MESH_STATUS=$(wg show smm0 2>/dev/null || true) +-fi +- + echo "PROTOCOL=1" + echo "HOSTNAME=$(hostname)" + UPTIME=$(awk '{print int($1)}' /proc/uptime 2>/dev/null || echo "0") +@@ -1287,10 +1282,10 @@ echo "NETWORK_RX_BYTES=${NET_RX}" + echo "NETWORK_TX_BYTES=${NET_TX}" + KERNEL=$(uname -r 2>/dev/null || echo "unknown") + echo "KERNEL=${KERNEL}" +-if [ -n "$MESH_STATUS" ]; then +- echo "--- MESH STATUS ---" +- echo "$MESH_STATUS" +-fi ++SYSTEMD_SSH=$(systemctl is-active ssh.service 2>/dev/null || true) ++echo "SYSTEMD_SSH=${SYSTEMD_SSH:-unknown}" ++SYSTEMD_WIREGUARD=$(systemctl is-active wg-quick@smm0.service 2>/dev/null || true) ++echo "SYSTEMD_WIREGUARD=${SYSTEMD_WIREGUARD:-unknown}" + EOF + chown root:root "$metrics_script" + chmod 0755 "$metrics_script" +diff --git a/docs/installer-contract.md b/docs/installer-contract.md +index 88981a5..9a3526e 100644 +--- a/docs/installer-contract.md ++++ b/docs/installer-contract.md +@@ -6,6 +6,8 @@ Bootstrap, helper, systemd units, JSON schemas и manifests являются к + + Bootstrap не скачивает и не запускает исходники других проектов. Production-установка использует закреплённый release/tag, проверяет signed compatibility manifest и SHA-256 каждого artifact. Mutable `main` не является источником production-установки. + ++Published release tags and their assets are immutable. A published tag must never be moved, reused, deleted and recreated, or supplied with replacement assets under the same names; corrections must preserve the existing release and publish a new, higher version tag. ++ + Пока bootstrap не опубликован в release, документация не должна предлагать несуществующую команду его скачивания. + + ## 2. Поддерживаемые роли +@@ -104,7 +106,7 @@ CLI является non-interactive, кроме локального ввода + + ## 7. Forced command monitoring + +-Monitoring key допускает только versioned metrics snapshot и read-only mesh status. Полный SSH-терминал использует отдельную пользовательскую identity. ++Monitoring key permits only the exact versioned metrics snapshot listed below; no additional mesh status or other output is allowed. Полный SSH-терминал использует отдельную пользовательскую identity. + + Минимальный snapshot: + +@@ -125,6 +127,8 @@ DISK_INODES_FREE=... + NETWORK_RX_BYTES=... + NETWORK_TX_BYTES=... + KERNEL=... ++SYSTEMD_SSH=active|inactive|failed|unknown ++SYSTEMD_WIREGUARD=active|inactive|failed|unknown + ``` + + ## 8. Обязательные проверки +diff --git a/tests/ServerMonitorManager.Control.Tests/SchemaCompatibilityTests.cs b/tests/ServerMonitorManager.Control.Tests/SchemaCompatibilityTests.cs +index 272aae0..e7ddeda 100644 +--- a/tests/ServerMonitorManager.Control.Tests/SchemaCompatibilityTests.cs ++++ b/tests/ServerMonitorManager.Control.Tests/SchemaCompatibilityTests.cs +@@ -1,43 +1,137 @@ +-using System; +-using System.IO; +-using System.Threading; +-using System.Threading.Tasks; + using Microsoft.Data.Sqlite; ++using Microsoft.Extensions.Logging.Abstractions; + using Microsoft.Extensions.Options; + using Xunit; + + namespace ServerMonitorManager.Control.Tests; + +-public sealed class SchemaCompatibilityTests ++public sealed class SchemaCompatibilityTests : IAsyncDisposable + { ++ private readonly string _directory = Path.Combine( ++ Path.GetTempPath(), $"smm-schema-compatibility-{Guid.NewGuid():N}"); ++ + [Fact] +- public async Task CanOpenAlpha7DatabaseWithoutReapplyingMigrations() ++ public async Task PublishedAlpha7DatabaseRemainsReadableAndRestorable() + { +- // Try to find the alpha7.db file which should be generated by CI +- var dbPath = Path.GetFullPath(Path.Combine(System.AppContext.BaseDirectory, "..", "..", "..", "..", "..", "tests", "acceptance", "alpha7.db")); ++ var cancellationToken = TestContext.Current.CancellationToken; ++ Directory.CreateDirectory(_directory); ++ var fixturePath = Path.Combine( ++ FindRepositoryRoot(), "tests", "fixtures", "control-v0.1.0-alpha.7.db"); ++ Assert.True(File.Exists(fixturePath), $"Published database fixture is missing: {fixturePath}"); ++ ++ var options = new ControlOptions ++ { ++ DatabasePath = Path.Combine(_directory, "control.db"), ++ CertificateAuthorityPath = Path.Combine(_directory, "control-ca.pfx"), ++ BackupDirectory = Path.Combine(_directory, "backups") ++ }; ++ File.Copy(fixturePath, options.DatabasePath); ++ await File.WriteAllBytesAsync( ++ options.CertificateAuthorityPath, [1, 2, 3, 4], cancellationToken); ++ ++ var schemaVersionBefore = await ReadUserVersionAsync(options.DatabasePath, cancellationToken); ++ Assert.Equal(8L, schemaVersionBefore); ++ ++ var store = new ControlStore(Options.Create(options)); ++ await store.InitializeAsync(cancellationToken); ++ ++ var schemaVersionAfter = await ReadUserVersionAsync(options.DatabasePath, cancellationToken); ++ Assert.Equal(schemaVersionBefore, schemaVersionAfter); ++ ++ var agents = await store.ListAgentsAsync(cancellationToken); ++ Assert.Equal(["source-node", "target-node"], agents.Select(agent => agent.NodeId)); ++ Assert.Equal("0.1.0-alpha.7", agents[0].AgentVersion); + +- if (!File.Exists(dbPath)) ++ Assert.Equal( ++ new ControlIdentity("source-node", "Agent"), ++ await store.ResolveIdentityAsync("AGENT-THUMBPRINT", cancellationToken)); ++ Assert.Equal( ++ new ControlIdentity("operator-device", "Operator"), ++ await store.ResolveIdentityAsync("DEVICE-THUMBPRINT", cancellationToken)); ++ Assert.Equal( ++ new ControlIdentity("automation-one", "Automation", "source-node"), ++ await store.ResolveIdentityAsync("AUTOMATION-THUMBPRINT", cancellationToken)); ++ ++ var link = Assert.Single(await store.ListLinksAsync(cancellationToken)); ++ Assert.Equal("source-node", link.SourceNodeId); ++ Assert.Equal("target-node", link.TargetNodeId); ++ Assert.Equal("Active", link.ActualState); ++ ++ var job = await store.GetProvisioningJobAsync( ++ "22222222222222222222222222222222", cancellationToken); ++ Assert.NotNull(job); ++ Assert.Equal("source-node", job.NodeId); ++ Assert.Equal("Completed", job.State); ++ var provisioningEvent = Assert.Single((await store.ListProvisioningEventsAsync( ++ job.Id, 100, cancellationToken))!); ++ Assert.Equal("job.completed", provisioningEvent.EventType); ++ ++ await using (var connection = new SqliteConnection($"Data Source={options.DatabasePath};Pooling=False")) + { +- // Skip the test locally if the file hasn't been generated +- return; ++ await connection.OpenAsync(cancellationToken); ++ var audit = connection.CreateCommand(); ++ audit.CommandText = "SELECT actor, action, subject, details_json FROM audit;"; ++ await using var reader = await audit.ExecuteReaderAsync(cancellationToken); ++ Assert.True(await reader.ReadAsync(cancellationToken)); ++ Assert.Equal("operator-device", reader.GetString(0)); ++ Assert.Equal("fixture.created", reader.GetString(1)); ++ Assert.Equal("source-node", reader.GetString(2)); ++ Assert.Contains("v0.1.0-alpha.7", reader.GetString(3), StringComparison.Ordinal); ++ Assert.False(await reader.ReadAsync(cancellationToken)); + } + +- // 1. Verify PRAGMA user_version is readable and hasn't changed abruptly +- await using var connection = new SqliteConnection($"Data Source={dbPath}"); +- await connection.OpenAsync(); +- var command = connection.CreateCommand(); +- command.CommandText = "PRAGMA user_version;"; +- var userVersion = Convert.ToInt64(await command.ExecuteScalarAsync()); ++ var backups = new ControlBackupService( ++ store, Options.Create(options), NullLogger.Instance); ++ var backupPath = await backups.CreateAsync(DateTimeOffset.UtcNow, cancellationToken); ++ await using (var connection = new SqliteConnection($"Data Source={options.DatabasePath};Pooling=False")) ++ { ++ await connection.OpenAsync(cancellationToken); ++ var mutate = connection.CreateCommand(); ++ mutate.CommandText = "UPDATE agents SET name = 'mutated';"; ++ await mutate.ExecuteNonQueryAsync(cancellationToken); ++ } ++ await File.WriteAllBytesAsync(options.CertificateAuthorityPath, [9, 9], cancellationToken); + +- Assert.True(userVersion > 0, "Database user_version should be greater than 0"); ++ SqliteConnection.ClearAllPools(); ++ await backups.RestoreAsync(backupPath, cancellationToken); + +- // 2. Open it with the current ControlStore to see if data reads correctly and it doesn't crash +- var store = new ControlStore(Options.Create(new ControlOptions { DatabasePath = dbPath })); +- await store.InitializeAsync(CancellationToken.None); ++ var restoredStore = new ControlStore(Options.Create(options)); ++ await restoredStore.InitializeAsync(cancellationToken); ++ Assert.Equal(schemaVersionBefore, await ReadUserVersionAsync(options.DatabasePath, cancellationToken)); ++ Assert.Equal("Source Node", (await restoredStore.ListAgentsAsync(cancellationToken))[0].Name); ++ Assert.Equal([1, 2, 3, 4], await File.ReadAllBytesAsync( ++ options.CertificateAuthorityPath, cancellationToken)); ++ } + +- // 3. Test that we can read from it +- var links = await store.ListEffectiveLinksForNodeAsync("nonexistent", CancellationToken.None); +- Assert.Empty(links); ++ public ValueTask DisposeAsync() ++ { ++ SqliteConnection.ClearAllPools(); ++ if (Directory.Exists(_directory)) ++ { ++ Directory.Delete(_directory, recursive: true); ++ } ++ return ValueTask.CompletedTask; ++ } + ++ private static async Task ReadUserVersionAsync( ++ string databasePath, ++ CancellationToken cancellationToken) ++ { ++ await using var connection = new SqliteConnection($"Data Source={databasePath};Mode=ReadOnly;Pooling=False"); ++ await connection.OpenAsync(cancellationToken); ++ var command = connection.CreateCommand(); ++ command.CommandText = "PRAGMA user_version;"; ++ return (long)(await command.ExecuteScalarAsync(cancellationToken))!; ++ } ++ ++ private static string FindRepositoryRoot() ++ { ++ var directory = new DirectoryInfo(AppContext.BaseDirectory); ++ while (directory is not null && !File.Exists(Path.Combine(directory.FullName, "ServerMonitorManager.slnx"))) ++ { ++ directory = directory.Parent; ++ } ++ return directory?.FullName ++ ?? throw new DirectoryNotFoundException("Repository root was not found."); + } + } +diff --git a/tests/acceptance/generate_alpha7_db.sh b/tests/acceptance/generate_alpha7_db.sh +deleted file mode 100644 +index 3aef7c3..0000000 +--- a/tests/acceptance/generate_alpha7_db.sh ++++ /dev/null +@@ -1,41 +0,0 @@ +-#!/bin/bash +-set -euo pipefail +- +-OUTPUT_DB=$(realpath "${1:-alpha7.db}") +- +-if [ -f "$OUTPUT_DB" ]; then +- echo "Database $OUTPUT_DB already exists." +- exit 0 +-fi +- +-echo "Generating reference database from v0.1.0-alpha.7 to $OUTPUT_DB" +-WORK_DIR=$(mktemp -d) +-trap 'rm -rf "$WORK_DIR"' EXIT +- +-git clone --depth 1 -b v0.1.0-alpha.7 https://github.com/ochenstarik-ui/server-monitor-manager.git "$WORK_DIR/repo" +- +-cat << 'EOF' > "$WORK_DIR/repo/tests/ServerMonitorManager.Control.Tests/GenerateDbTest.cs" +-using System.IO; +-using System.Threading; +-using System.Threading.Tasks; +-using Xunit; +-using ServerMonitorManager.Control; +-using Microsoft.Extensions.Options; +- +-namespace ServerMonitorManager.Control.Tests; +- +-public class GenerateDbTest +-{ +- [Fact] +- public async Task GenerateReferenceDatabase() +- { +- var dbPath = System.Environment.GetEnvironmentVariable("OUTPUT_DB_PATH"); +- var store = new ControlStore(Options.Create(new ControlOptions { DatabasePath = dbPath })); +- await store.InitializeAsync(CancellationToken.None); +- } +-} +-EOF +- +-export OUTPUT_DB_PATH="$OUTPUT_DB" +-cd "$WORK_DIR/repo" +-dotnet test tests/ServerMonitorManager.Control.Tests --filter "GenerateReferenceDatabase" +diff --git a/tests/acceptance/test_monitor_snapshot.sh b/tests/acceptance/test_monitor_snapshot.sh +index 79855ce..4901c5f 100644 +--- a/tests/acceptance/test_monitor_snapshot.sh ++++ b/tests/acceptance/test_monitor_snapshot.sh +@@ -1,58 +1,54 @@ + #!/usr/bin/env bash +-set -euo pipefail ++set -Eeuo pipefail ++IFS=$'\n\t' + +-# test_monitor_snapshot.sh +-# Acceptance test for Monitor role installation and metrics format ++root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" ++bootstrap="$root/deploy/ochenstarik-server-monitor-manager.sh" ++contract="$root/tests/contracts/monitor-snapshot-v1.txt" ++installer_contract="$root/docs/installer-contract.md" + +-cd "$(dirname "$0")/../.." +-BOOTSTRAP="./deploy/ochenstarik-server-monitor-manager.sh" +-DUMMY_KEY="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDummyTestKeyForAcceptanceTest dummy@test" +- +-echo "=== Testing install-monitor ===" +-sudo "$BOOTSTRAP" install-monitor "$DUMMY_KEY" +- +-# 1. Verify user exists and has nologin +-getent passwd ochenstarik-monitor | grep -q "/usr/sbin/nologin" || { +- echo "ERROR: User ochenstarik-monitor does not exist or does not have nologin" +- exit 1 +-} +- +-# 2. Verify authorized_keys +-AUTH_KEYS="/var/lib/ochenstarik-monitor/.ssh/authorized_keys" +-if ! sudo test -f "$AUTH_KEYS"; then +- echo "ERROR: authorized_keys not found" ++grep -Fq 'Monitoring key permits only the exact versioned metrics snapshot listed below; no additional mesh status or other output is allowed.' "$installer_contract" ++if grep -Fq 'read-only mesh status' "$installer_contract"; then ++ printf '%s\n' 'installer contract still permits mesh status outside the closed snapshot' >&2 + exit 1 + fi + +-sudo grep -q "command=\"/usr/local/libexec/ochenstarik-smm-metrics\",restrict" "$AUTH_KEYS" || { +- echo "ERROR: Forced command not found in authorized_keys" +- exit 1 ++extract_metrics_script() { ++ awk ' ++ /cat >"\$metrics_script" <<'"'"'EOF'"'"'/ { emitting = 1; next } ++ emitting && $0 == "EOF" { exit } ++ emitting { print } ++ ' "$bootstrap" + } + +-# 3. Verify metrics script output format +-echo "=== Testing metrics output ===" +-METRICS_OUT=$(sudo /usr/local/libexec/ochenstarik-smm-metrics) +-echo "$METRICS_OUT" ++fixture="$(mktemp -d -t smm-monitor-snapshot.XXXXXXXX)" ++trap 'rm -rf -- "$fixture"' EXIT ++metrics_script="$fixture/ochenstarik-smm-metrics" ++extract_metrics_script >"$metrics_script" ++chmod 0755 "$metrics_script" + +-for FIELD in PROTOCOL HOSTNAME UPTIME_SECONDS LOAD1 CPU_COUNT MEM_TOTAL_KB MEM_AVAILABLE_KB SWAP_TOTAL_KB SWAP_FREE_KB DISK_TOTAL_KB DISK_AVAILABLE_KB DISK_INODES_TOTAL DISK_INODES_FREE NETWORK_RX_BYTES NETWORK_TX_BYTES KERNEL; do +- if ! echo "$METRICS_OUT" | grep -q "^${FIELD}="; then +- echo "ERROR: Missing field ${FIELD} in metrics output" +- exit 1 +- fi +-done ++[[ -s "$metrics_script" ]] || { ++ printf '%s\n' 'monitor metrics script was not found in bootstrap' >&2 ++ exit 1 ++} + +-# 4. Verify uninstall +-echo "=== Testing uninstall-monitor ===" +-sudo "$BOOTSTRAP" uninstall-monitor ++metrics_out="$(bash "$metrics_script")" ++printf '%s\n' "$metrics_out" + +-if getent passwd ochenstarik-monitor >/dev/null 2>&1; then +- echo "ERROR: User ochenstarik-monitor was not removed" ++if grep -Ev '^[A-Z][A-Z0-9_]*=.*$' <<<"$metrics_out"; then ++ printf '%s\n' 'monitor snapshot contains non-contract output' >&2 + exit 1 + fi + +-if sudo test -f "$AUTH_KEYS" || sudo test -f "/usr/local/libexec/ochenstarik-smm-metrics"; then +- echo "ERROR: Leftover files found after uninstall" ++expected_keys="$(cut -d= -f1 "$contract" | LC_ALL=C sort)" ++actual_keys="$(cut -d= -f1 <<<"$metrics_out" | LC_ALL=C sort)" ++if [[ "$actual_keys" != "$expected_keys" ]]; then ++ printf '%s\n' 'monitor snapshot field closure differs from canonical contract' >&2 ++ diff -u <(printf '%s\n' "$expected_keys") <(printf '%s\n' "$actual_keys") >&2 || true + exit 1 + fi + +-echo "=== PASS: Monitor role acceptance test ===" ++[[ "$(grep -c '^PROTOCOL=1$' <<<"$metrics_out")" -eq 1 ]] ++[[ "$(wc -l <"$contract")" -eq "$(wc -l <<<"$metrics_out")" ]] ++ ++printf '%s\n' 'MONITOR_SNAPSHOT_CONTRACT=PASS' +``` + +## Untracked file: `deploy/smm-setup.sh` + +``` +#!/usr/bin/env bash +set -Eeuo pipefail +IFS=$'\n\t' + +readonly PROGRAM_NAME="smm-setup" +readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.9" +readonly DEFAULT_REPOSITORY="ochenstarik-ui/server-monitor-manager" +readonly INNER_ASSET="ochenstarik-server-monitor-manager.sh" + +RELEASE_TAG="${SMM_TAG:-$DEFAULT_RELEASE_TAG}" +REPOSITORY="${SMM_REPOSITORY:-$DEFAULT_REPOSITORY}" +CACHE_DIR="${SMM_CACHE_DIR:-${XDG_CACHE_HOME:-$HOME/.cache}/server-monitor-manager}" + +usage() { + cat <<'USAGE' +Usage: + smm-setup.sh [--tag TAG] [--repository OWNER/REPO] COMMAND [ARG...] + +Commands are passed to the verified ochenstarik-server-monitor-manager.sh +asset from the selected immutable GitHub release. Common commands: + install-agent | install-control | uninstall-agent | uninstall-control + backup-create | backup-restore | version + +Environment overrides: + SMM_TAG Release tag (default: v0.1.0-alpha.9) + SMM_REPOSITORY GitHub repository (default: ochenstarik-ui/server-monitor-manager) + SMM_CACHE_DIR Verified-download cache directory +USAGE +} + +die() { + printf '%s: %s\n' "$PROGRAM_NAME" "$*" >&2 + exit 1 +} + +require_command() { + command -v "$1" >/dev/null 2>&1 || die "required command is unavailable: $1" +} + +while [[ $# -gt 0 ]]; do + case "$1" in + --tag) + [[ $# -ge 2 ]] || die '--tag requires a value' + RELEASE_TAG="$2" + shift 2 + ;; + --repository) + [[ $# -ge 2 ]] || die '--repository requires a value' + REPOSITORY="$2" + shift 2 + ;; + -h|--help) + usage + exit 0 + ;; + --) + shift + break + ;; + -*) + die "unknown option: $1" + ;; + *) + break + ;; + esac +done + +[[ $# -gt 0 ]] || { + usage >&2 + exit 2 +} +[[ "$RELEASE_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.-]+)?$ ]] \ + || die "invalid release tag: $RELEASE_TAG" +[[ "$REPOSITORY" =~ ^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$ ]] \ + || die "invalid repository: $REPOSITORY" + +require_command curl +require_command sha256sum +require_command mktemp + +release_base="https://github.com/$REPOSITORY/releases/download/$RELEASE_TAG" +cache_release="$CACHE_DIR/$REPOSITORY/$RELEASE_TAG" +cached_script="$cache_release/$INNER_ASSET" +cached_checksum="$cache_release/$INNER_ASSET.sha256" +mkdir -p "$cache_release" + +temporary_directory="$(mktemp -d -t smm-setup.XXXXXXXX)" +trap 'rm -rf -- "$temporary_directory"' EXIT + +curl -fsSL "$release_base/$INNER_ASSET" -o "$temporary_directory/$INNER_ASSET" +curl -fsSL "$release_base/$INNER_ASSET.sha256" -o "$temporary_directory/$INNER_ASSET.sha256" + +( + cd "$temporary_directory" + sha256sum -c "$INNER_ASSET.sha256" +) || die "checksum verification failed for $RELEASE_TAG/$INNER_ASSET" + +install -m 0755 "$temporary_directory/$INNER_ASSET" "$cached_script" +install -m 0644 "$temporary_directory/$INNER_ASSET.sha256" "$cached_checksum" + +exec "$cached_script" "$@" + +``` + +## Untracked file: `docs/release-policy.md` + +``` +# Release policy + +Published tags and release assets are immutable. + +A tag that has been published must never be moved, reused, deleted and recreated, or supplied with replacement assets under the same names. If a published build or installer is wrong, preserve the existing release and publish a new, higher version tag containing the correction. + +Release artifacts are built from the commit named by the tag through the repository release workflows, including `.github/workflows/linux-release.yml` and `.github/workflows/windows-release.yml`. The tracked production source for the convenience installer is `deploy/smm-setup.sh`; the Linux release workflow copies that exact file to the release artifact set, records its SHA-256 in the signed manifest, and publishes its standalone checksum. The default release in that source must match the tag being produced. + +For `v0.1.0-alpha.9`, this makes `smm-setup.sh`, `smm-setup.sh.sha256`, the bootstrap script, platform archives, SBOMs, and the signed manifest reproducible from the tagged tree. The installer fetches only same-tag assets and verifies the bootstrap checksum before execution. Corrections after publication require another tag; the `v0.1.0-alpha.9` tag and assets remain unchanged. + +``` + +## Untracked file: `tests/ServerMonitorManager.Control.Tests/DesktopMonitorSnapshotContractTests.cs` + +``` +using System.Text.RegularExpressions; +using Xunit; + +namespace ServerMonitorManager.Control.Tests; + +public sealed class DesktopMonitorSnapshotContractTests +{ + [Fact] + public void QueryParserFieldNamesMatchCanonicalSnapshot() + { + var root = FindRepositoryRoot(); + var canonicalKeys = ReadKeys(Path.Combine(root, "tests", "contracts", "monitor-snapshot-v1.txt")); + var source = File.ReadAllText(Path.Combine( + root, "src", "ServerMonitorManager.Desktop", "SshMonitorService.cs")); + var queryStart = source.IndexOf("public async Task QueryAsync(", StringComparison.Ordinal); + var queryEnd = source.IndexOf( + "public async Task RunRestrictedCommandAsync(", queryStart, StringComparison.Ordinal); + Assert.True(queryStart >= 0 && queryEnd > queryStart, "Desktop QueryAsync source was not found."); + + var querySource = source[queryStart..queryEnd]; + var parserKeys = Regex.Matches(querySource, "\"([A-Z][A-Z0-9_]*)\"") + .Select(match => match.Groups[1].Value) + .ToHashSet(StringComparer.Ordinal); + + // PROTOCOL gates the wire format and KERNEL is diagnostic metadata; the current + // ServerMetrics model intentionally does not project either value. + var unprojectedKeys = new HashSet(["PROTOCOL", "KERNEL"], StringComparer.Ordinal); + Assert.Subset(canonicalKeys, unprojectedKeys); + Assert.Equal( + canonicalKeys.Except(unprojectedKeys).Order(StringComparer.Ordinal), + parserKeys.Order(StringComparer.Ordinal)); + } + + [Fact] + public void InstallerDocumentationListsCanonicalSnapshotFields() + { + var root = FindRepositoryRoot(); + var canonicalKeys = ReadKeys(Path.Combine(root, "tests", "contracts", "monitor-snapshot-v1.txt")); + var documentation = File.ReadAllText(Path.Combine(root, "docs", "installer-contract.md")); + var sectionStart = documentation.IndexOf("## 7. Forced command monitoring", StringComparison.Ordinal); + var sectionEnd = documentation.IndexOf("## 8.", sectionStart, StringComparison.Ordinal); + Assert.True(sectionStart >= 0 && sectionEnd > sectionStart, "Installer contract section 7 was not found."); + + var documentedKeys = Regex.Matches( + documentation[sectionStart..sectionEnd], + "^([A-Z][A-Z0-9_]*)=", + RegexOptions.Multiline) + .Select(match => match.Groups[1].Value) + .ToHashSet(StringComparer.Ordinal); + + Assert.Equal( + canonicalKeys.Order(StringComparer.Ordinal), + documentedKeys.Order(StringComparer.Ordinal)); + } + + private static HashSet ReadKeys(string path) + => File.ReadAllLines(path) + .Select(line => line.Split('=', 2)[0]) + .ToHashSet(StringComparer.Ordinal); + + private static string FindRepositoryRoot() + { + var directory = new DirectoryInfo(AppContext.BaseDirectory); + while (directory is not null && !File.Exists(Path.Combine(directory.FullName, "ServerMonitorManager.slnx"))) + { + directory = directory.Parent; + } + return directory?.FullName + ?? throw new DirectoryNotFoundException("Repository root was not found."); + } +} + +``` + +## Untracked file: `tests/acceptance/test_previous_schema_arm64.sh` + +``` +#!/usr/bin/env bash +set -Eeuo pipefail +IFS=$'\n\t' + +[[ $# -eq 1 ]] || { + printf 'usage: %s CONTROL_BINARY\n' "$0" >&2 + exit 2 +} + +root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" +binary="$(realpath "$1")" +fixture="$root/tests/fixtures/control-v0.1.0-alpha.7.db" +work="$(mktemp -d -t smm-arm64-schema-compatibility.XXXXXXXX)" +trap 'rm -rf -- "$work"' EXIT + +[[ -x "$binary" ]] || { + printf 'published Control binary is not executable: %s\n' "$binary" >&2 + exit 1 +} +cp "$fixture" "$work/control.db" +printf '%s' 'fixture-ca' >"$work/control-ca.pfx" +mkdir -p "$work/backups" "$work/bundle" + +export Control__DatabasePath="$work/control.db" +export Control__CertificateAuthorityPath="$work/control-ca.pfx" +export Control__BackupDirectory="$work/backups" +export Control__HubHelperPath=/bin/true +export Control__PrivilegeEscalationPath=/usr/bin/true +export DOTNET_BUNDLE_EXTRACT_BASE_DIR="$work/bundle" +export DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1 + +"$binary" backup-create +backup_paths=("$work"/backups/backup-*) +[[ ${#backup_paths[@]} -eq 1 && -d "${backup_paths[0]}" ]] || { + printf '%s\n' 'arm64 published Control did not create exactly one backup' >&2 + exit 1 +} + +rm -f -- "$work/control.db" "$work/control.db-wal" "$work/control.db-shm" "$work/control-ca.pfx" +"$binary" backup-restore "${backup_paths[0]}" +[[ -s "$work/control.db" && -s "$work/control-ca.pfx" ]] +"$binary" backup-create + +printf '%s\n' 'PREVIOUS_SCHEMA_ARM64=PASS' + +``` + +## Untracked file: `tests/acceptance/test_previous_schema_contract.sh` + +``` +#!/usr/bin/env bash +set -Eeuo pipefail +IFS=$'\n\t' + +root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" +test_source="$root/tests/ServerMonitorManager.Control.Tests/SchemaCompatibilityTests.cs" +workflow="$root/.github/workflows/linux-control-agent.yml" +arm64_test="$root/tests/acceptance/test_previous_schema_arm64.sh" +fixture="$root/tests/fixtures/control-v0.1.0-alpha.7.db" + +require_contains() { + local text="$1" file="$2" + grep -Fq "$text" "$file" || { + printf 'required compatibility evidence is missing from %s: %s\n' "$file" "$text" >&2 + exit 1 + } +} + +[[ -s "$fixture" ]] || { + printf '%s\n' 'published previous-schema database fixture is missing' >&2 + exit 1 +} +require_contains 'PublishedAlpha7DatabaseRemainsReadableAndRestorable' "$test_source" +require_contains 'Assert.Equal(schemaVersionBefore, schemaVersionAfter);' "$test_source" +require_contains 'ListAgentsAsync' "$test_source" +require_contains 'ResolveIdentityAsync' "$test_source" +require_contains 'ListLinksAsync' "$test_source" +require_contains 'GetProvisioningJobAsync' "$test_source" +require_contains 'FROM audit' "$test_source" +require_contains 'CreateAsync' "$test_source" +require_contains 'RestoreAsync' "$test_source" + +if grep -Fq 'if (!File.Exists' "$test_source" || grep -Fq 'Generate reference alpha.7' "$workflow"; then + printf '%s\n' 'previous-schema coverage is still skip- or generation-prone' >&2 + exit 1 +fi + +require_contains 'Publish control arm64 compatibility binary' "$workflow" +require_contains 'Verify previous schema with arm64 published Control' "$workflow" +require_contains 'export DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1' "$arm64_test" + +printf '%s\n' 'PREVIOUS_SCHEMA_CONTRACT=PASS' + +``` + +## Untracked file: `tests/bootstrap/test-release-contract.sh` + +``` +#!/usr/bin/env bash +set -Eeuo pipefail +IFS=$'\n\t' + +root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" +setup="$root/deploy/smm-setup.sh" +workflow="$root/.github/workflows/linux-release.yml" +policy="$root/docs/release-policy.md" +installer_contract="$root/docs/installer-contract.md" + +[[ -s "$setup" ]] || { + printf '%s\n' 'tracked production smm-setup.sh source is missing' >&2 + exit 1 +} +bash -n "$setup" +grep -Fq 'readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.9"' "$setup" +if grep -Fq 'validate_control_url' "$setup" || grep -Fq '${CONTROL_URL%/}/control' "$setup"; then + printf '%s\n' 'temporary control URL workaround must not be present in smm-setup.sh' >&2 + exit 1 +fi + +grep -Fq 'install -m 0755 deploy/smm-setup.sh "$DIST_DIR/smm-setup.sh"' "$workflow" +grep -Fq 'smm-setup.sh.sha256' "$workflow" +grep -Fq 'dist/smm-setup.sh' "$workflow" +grep -Fq 'Published tags and release assets are immutable.' "$policy" +grep -Fq 'publish a new, higher version tag' "$policy" +grep -Fq 'Published release tags and their assets are immutable.' "$installer_contract" +grep -Fq 'publish a new, higher version tag' "$installer_contract" + +work="$(mktemp -d -t smm-setup-contract.XXXXXXXX)" +trap 'rm -rf -- "$work"' EXIT +mkdir -p "$work/bin" "$work/home" +cat >"$work/inner.sh" <<'INNER' +#!/usr/bin/env bash +printf 'INNER_COMMAND=%s\n' "$1" +INNER +chmod +x "$work/inner.sh" +inner_hash="$(sha256sum "$work/inner.sh" | cut -d' ' -f1)" +cat >"$work/bin/curl" <>'$work/urls' +case "\$url" in + */ochenstarik-server-monitor-manager.sh) + cp '$work/inner.sh' "\$out" + ;; + */ochenstarik-server-monitor-manager.sh.sha256) + printf '%s %s\n' '$inner_hash' 'ochenstarik-server-monitor-manager.sh' >"\$out" + ;; + *) + printf 'unexpected URL: %s\n' "\$url" >&2 + exit 1 + ;; +esac +EOF_CURL +chmod +x "$work/bin/curl" + +HOME="$work/home" PATH="$work/bin:$PATH" bash "$setup" version >"$work/output" +grep -Fq 'INNER_COMMAND=version' "$work/output" +grep -Fq '/releases/download/v0.1.0-alpha.9/ochenstarik-server-monitor-manager.sh' "$work/urls" +grep -Fq '/releases/download/v0.1.0-alpha.9/ochenstarik-server-monitor-manager.sh.sha256' "$work/urls" + +printf '%s\n' 'RELEASE_CONTRACT=PASS' + +``` + +## Untracked file: `tests/contracts/monitor-snapshot-v1.txt` + +``` +PROTOCOL=1 +HOSTNAME=contract-host +UPTIME_SECONDS=12345 +LOAD1=0.42 +CPU_COUNT=4 +MEM_TOTAL_KB=8192 +MEM_AVAILABLE_KB=4096 +SWAP_TOTAL_KB=2048 +SWAP_FREE_KB=1024 +DISK_TOTAL_KB=1048576 +DISK_AVAILABLE_KB=524288 +DISK_INODES_TOTAL=65536 +DISK_INODES_FREE=32768 +NETWORK_RX_BYTES=123456 +NETWORK_TX_BYTES=654321 +KERNEL=6.8.0-contract +SYSTEMD_SSH=active +SYSTEMD_WIREGUARD=inactive + +``` + +## Untracked file: `tests/fixtures/README.md` + +``` +# Published Control database fixture + +`control-v0.1.0-alpha.7.db` was created by the ControlStore from the immutable source tag `v0.1.0-alpha.7` (`d645812d29d077e9a4dee1596ef09a70dc138090`). That project pins `SQLitePCLRaw.bundle_e_sqlite3` 2.1.12. The fixture contains stable rows for agents, Agent/Operator/Automation identities, a Link, a provisioning job and event, and audit data. + +Fixture properties: + +- `PRAGMA user_version`: 8 +- `PRAGMA integrity_check`: `ok` +- SHA-256: `15bf788dd5789a55bd54a4a548d339b4e29e54e1c75311b21eec079e0ef2faa2` + +The compatibility test always copies this file before opening it, so the committed previous-release database is never migrated or mutated in place. + +``` + +## Untracked file: `tests/fixtures/control-v0.1.0-alpha.7.db-wal` + +``` + +``` + +## Binary fixture evidence + +- tests/fixtures/control-v0.1.0-alpha.7.db +- SHA-256: 15bf788dd5789a55bd54a4a548d339b4e29e54e1c75311b21eec079e0ef2faa2 +- PRAGMA user_version: 8 +- PRAGMA integrity_check: ok diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-setup.sh b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-setup.sh new file mode 100644 index 0000000..62d0e8a --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-setup.sh @@ -0,0 +1,235 @@ +#!/usr/bin/env bash +# Установщик Server Monitor Manager для одного сервера. +# +# sudo ./smm-setup.sh hub <публичный-хост> [https-порт] [wg-порт] +# sudo ./smm-setup.sh node +# sudo ./smm-setup.sh check +# +# Скачивает bootstrap и release-архив из GitHub Release, проверяет контрольные +# суммы и выполняет установку выбранной роли. Ничего не удаляет. + +set -Eeuo pipefail +IFS=$'\n\t' + +REPO="${SMM_REPO:-ochenstarik-ui/server-monitor-manager}" +TAG="${SMM_TAG:-v0.1.0-alpha.8}" +WORK_DIR="${SMM_WORK_DIR:-/opt/smm}" +HTTPS_PORT_DEFAULT=7443 +WG_PORT_DEFAULT=51820 + +say() { printf '\n[smm-setup] %s\n' "$*"; } +ok() { printf '[smm-setup] ok: %s\n' "$*"; } +fail() { printf '\n[smm-setup] ОШИБКА: %s\n' "$*" >&2; exit 1; } + +require_root() { + [[ ${EUID:-$(id -u)} -eq 0 ]] || fail "запускать через sudo" +} + +check_platform() { + say "Проверка платформы" + [[ -r /etc/os-release ]] || fail "/etc/os-release отсутствует" + # shellcheck disable=SC1091 + . /etc/os-release + case "${ID:-}" in + ubuntu) case "${VERSION_ID:-}" in 22.04|24.04) ;; *) fail "Ubuntu ${VERSION_ID:-?} не поддерживается, нужна 22.04 или 24.04" ;; esac ;; + debian) case "${VERSION_ID:-}" in 12|13) ;; *) fail "Debian ${VERSION_ID:-?} не поддерживается, нужна 12 или 13" ;; esac ;; + *) fail "дистрибутив ${ID:-?} не поддерживается: нужны Ubuntu или Debian" ;; + esac + [[ "$(ps -p 1 -o comm=)" == "systemd" ]] || fail "PID 1 не systemd" + case "$(uname -m)" in + x86_64) RUNTIME="linux-x64" ;; + aarch64|arm64) RUNTIME="linux-arm64" ;; + *) fail "архитектура $(uname -m) не поддерживается" ;; + esac + ok "${ID} ${VERSION_ID}, $(uname -m) -> ${RUNTIME}" +} + +# Возвращает 1, если что-то занято. Решение принимает вызывающий. +check_ports() { + local role="$1" busy=0 + say "Проверка портов" + if [[ "$role" == "hub" ]]; then + if ss -lntu 2>/dev/null | grep -qE ":${HTTPS_PORT}\b"; then + printf '[smm-setup] ЗАНЯТ tcp/%s:\n' "$HTTPS_PORT" + ss -lntup 2>/dev/null | grep -E ":${HTTPS_PORT}\b" || true + busy=1 + else ok "tcp/${HTTPS_PORT} свободен"; fi + if ss -lnu 2>/dev/null | grep -qE ":${WG_PORT}\b"; then + printf '[smm-setup] ЗАНЯТ udp/%s:\n' "$WG_PORT" + ss -lnup 2>/dev/null | grep -E ":${WG_PORT}\b" || true + busy=1 + else ok "udp/${WG_PORT} свободен"; fi + fi + if ip -4 route 2>/dev/null | grep -q '10\.77\.0\.'; then + printf '[smm-setup] ЗАНЯТА подсеть 10.77.0.0/24:\n' + ip -4 route 2>/dev/null | grep '10\.77\.0\.' || true + busy=1 + else ok "подсеть 10.77.0.0/24 свободна"; fi + return "$busy" +} + +show_state() { + # Все проверки здесь диагностические: ненулевой код — это нормальный ответ, + # а не отказ. Поэтому каждая обёрнута так, чтобы не уронить set -e. + say "Текущее состояние" + local units xui + units="$(systemctl is-active \ + ochenstarik-smm-control.service \ + ochenstarik-smm-agent.service \ + ochenstarik-smm-provisioning-helper.service \ + wg-quick@smm0.service 2>&1 | paste -sd' ' || true)" + printf '[smm-setup] юниты: %s\n' "${units:-неизвестно}" + if [[ -e /etc/wireguard/smm0.conf ]]; then ok "smm0 настроен"; else ok "smm0 не настроен"; fi + if nft list table inet ochenstarik_smm >/dev/null 2>&1; then ok "таблица nftables есть"; else ok "таблицы nftables нет"; fi + xui="$(systemctl is-active x-ui 2>/dev/null || true)" + printf '[smm-setup] x-ui: %s\n' "${xui:-не установлен}" +} + +install_dependencies() { + say "Установка зависимостей" + export DEBIAN_FRONTEND=noninteractive + apt-get update -qq + apt-get install -y -qq --no-install-recommends \ + curl ca-certificates openssl coreutils tar sudo util-linux netcat-openbsd + ok "зависимости установлены" +} + +download_and_verify() { + local base="https://github.com/${REPO}/releases/download/${TAG}" + local archive="server-monitor-manager-${RUNTIME}.tar.gz" + say "Загрузка релиза ${TAG}" + install -d -m 0755 "$WORK_DIR" + cd "$WORK_DIR" + printf '[smm-setup] архив ~24 МБ, это может занять минуту\n' + local file + for file in \ + "ochenstarik-server-monitor-manager.sh" \ + "ochenstarik-server-monitor-manager.sh.sha256" \ + "$archive" \ + "${archive}.sha256" + do + printf '[smm-setup] качаю %s\n' "$file" + curl -fL --retry 3 --connect-timeout 20 --progress-bar -o "$file" "${base}/${file}" \ + || fail "не удалось скачать ${file} из релиза ${TAG}. Тег опубликован? Артефакты собраны?" + ok "получен $file ($(du -h "$file" | cut -f1))" + done + + say "Проверка контрольных сумм" + sha256sum -c ochenstarik-server-monitor-manager.sh.sha256 || fail "контрольная сумма bootstrap не совпала" + sha256sum -c "${archive}.sha256" || fail "контрольная сумма архива не совпала" + ok "суммы совпали" + + chmod 700 ochenstarik-server-monitor-manager.sh + + + + ARCHIVE_PATH="${WORK_DIR}/${archive}" + BOOTSTRAP="${WORK_DIR}/ochenstarik-server-monitor-manager.sh" +} + +run_preflight() { + say "Preflight" + "$BOOTSTRAP" preflight + "$BOOTSTRAP" verify-release "$ARCHIVE_PATH" + ok "релиз пригоден" +} + +install_hub() { + say "Установка Control Hub" + "$BOOTSTRAP" install-control "$ARCHIVE_PATH" "$PUBLIC_HOST" "$HTTPS_PORT" + say "Инициализация mesh" + "$BOOTSTRAP" mesh-init "$PUBLIC_HOST" "$WG_PORT" + say "Состояние" + "$BOOTSTRAP" status + "$BOOTSTRAP" control-ca-fingerprint + + cat < + +Имена для приёмки: ai-agent, home, second. +Полученный SMMNODE2-код введите на Node командой: + sudo ./smm-setup.sh node + +Возвращённый Node код SMMPEER1 активируйте здесь: + sudo ${BOOTSTRAP} peer-add 'SMMPEER1....' + sudo ${BOOTSTRAP} mesh-status +EOF +} + +install_node() { + say "Установка Node" + cat <<'EOF' +[smm-setup] Сейчас будет запрошен одноразовый код SMMNODE2, выданный на Hub +[smm-setup] командой node-code. После него сверьте отпечаток Control CA +[smm-setup] с тем, что показал Hub, и введите yes. +EOF + "$BOOTSTRAP" install-node "$ARCHIVE_PATH" + + cat < [https-порт] [wg-порт] + sudo ./smm-setup.sh node + sudo ./smm-setup.sh check + +Переменные окружения: + SMM_TAG тег релиза (сейчас ${TAG}) + SMM_REPO репозиторий (сейчас ${REPO}) + SMM_WORK_DIR рабочий каталог (сейчас ${WORK_DIR}) +EOF +} + +main() { + local role="${1:-help}" + case "$role" in + hub) + [[ $# -ge 2 ]] || fail "укажите публичный хост: sudo ./smm-setup.sh hub <хост> [порт] [wg-порт]" + PUBLIC_HOST="$2" + HTTPS_PORT="${3:-$HTTPS_PORT_DEFAULT}" + WG_PORT="${4:-$WG_PORT_DEFAULT}" + [[ "$PUBLIC_HOST" =~ ^[A-Za-z0-9]([A-Za-z0-9.-]{0,251}[A-Za-z0-9])?$ ]] \ + || fail "некорректный публичный хост: $PUBLIC_HOST" + require_root; check_platform; show_state + check_ports hub || fail "освободите занятое либо задайте другие порты аргументами" + install_dependencies; download_and_verify; run_preflight; install_hub + ;; + node) + HTTPS_PORT="$HTTPS_PORT_DEFAULT"; WG_PORT="$WG_PORT_DEFAULT" + require_root; check_platform; show_state + check_ports node || fail "освободите подсеть 10.77.0.0/24" + install_dependencies; download_and_verify; run_preflight; install_node + ;; + check) + HTTPS_PORT="${2:-$HTTPS_PORT_DEFAULT}"; WG_PORT="${3:-$WG_PORT_DEFAULT}" + require_root; check_platform; show_state + check_ports hub || true + say "Диагностика завершена, изменений не вносилось" + ;; + help|-h|--help) usage ;; + *) usage; fail "неизвестная роль: $role" ;; + esac +} + +main "$@" diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-2-2026-07-31.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-2-2026-07-31.md new file mode 100644 index 0000000..9e6b556 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-2-2026-07-31.md @@ -0,0 +1,214 @@ +# Задача 2 — целостность состояния и доверенная поставка + +Базовая ревизия: `main` @ `c320b7d` (после PR #7, #8, #9). +Предыдущий документ: `smm-improvement-plan-2026-07-30.md` (ревизия `2d28b8d`). + +--- + +## 0. Приёмка задачи 1 + +| Пункт | Статус | Комментарий | +|---|---|---| +| **P0-1** токен в `argv` | ✅ **принято** | Токен передаётся файлом `0400 agent:agent` в `/var/lib/...-enrollment` (`0710 root:agent`), путь — не значение — уходит в `argv`. Inline-токен теперь явно отвергается (`Program.cs`, exit 2). Есть валидация режима файла, размера, base64url-алфавита, `ZeroMemory`, удаление на всех путях. Тесты: `test-enrollment-token-argv.sh`, `EnrollmentTokenTests.cs`, 13 grep-проверок в `test-bootstrap-contract.sh`. Каталог вынесен из `STATE_DIR` — Control до него не дотянется. Сделано аккуратно. | +| **P0-5** DoS root-helper | ✅ **принято** | `SO_PEERCRED` со сверкой uid, обработка в `Task.Run` с `SemaphoreSlim(4)`, таймаут соединения 30 с, буферное чтение через `ArrayPool`, троттлинг запросов и неавторизованных попыток (per-uid + глобальный), анти-флуд логирования. Плюс сквозная отмена в `TimezoneProvisioningExecutor.ExecuteAsync` с `RecoverAfterCancellationAsync`. Сверх запрошенного — хорошо. | +| **P0-3** SSH-ключ на диске | ✅ **принято** | `SshPrivateKeySession`: явный DACL только для текущего SID, `FileMode.CreateNew`, один файл на сессию команды, `IAsyncDisposable`, чистка orphan'ов при старте `App`. | +| **P0-4** host key pinning | 🟡 **принято частично** | Мониторинг закрыт полностью: `StrictHostKeyChecking=yes`, `-F none`, `IdentityAgent=none`, `GlobalKnownHostsFile=none`, `KnownHostsCommand=none`, `UpdateHostKeys=no`, отдельный pin-файл на endpoint, диалог подтверждения с предупреждением «сверьте через доверенную консоль». **Интерактивный терминал не закрыт** — см. A1. | +| **P0-2** Links после reboot | ⛔ **не начато** | Раздел 2 этой задачи. | +| **P0-6** подпись поставки | ⛔ **не начато** | Раздел 3 этой задачи. | + +Качество исполнения задачи 1 высокое: каждое исправление сопровождено тестом, добавлены два новых тест-проекта (`Desktop.Security.Tests`, `test-enrollment-token-argv.sh`) и они подключены в CI. Замечания ниже — это доводка, а не переделка. + +--- + +## 1. Долги по принятой работе (блок A, ~1–2 дня) + +### A1. Интерактивный терминал игнорирует подтверждённый fingerprint — P0 + +**Где:** `src/ServerMonitorManager.Desktop/SshMonitorService.cs:194-229` + +```csharp +var sshArguments = new[] { "-p", port, $"{terminalUser}@{profile.Host}" }; +``` + +Ни `-F none`, ни `UserKnownHostsFile`, ни `StrictHostKeyChecking`. Терминал использует системный `~/.ssh/known_hosts` и поведение по умолчанию (`ask`). Пользователь подтвердил fingerprint в приложении — а терминал открывается мимо этого доверия и может принять другой ключ по обычному консольному промпту. Половина P0-4 остаётся открытой, и именно на том канале, где даётся полноценная shell-сессия. + +**Что сделать:** +1. Передавать в терминал тот же набор опций, что и в `RunRestrictedCommandAsync`: `-F none`, `-o StrictHostKeyChecking=yes`, `-o UserKnownHostsFile=`, `GlobalKnownHostsFile=none`, `KnownHostsCommand=none`, `UpdateHostKeys=no`, `CheckHostIP=no`. +2. Перед запуском проверять `SshHostKeyTrust.IsTrusted(...)` и отказывать с тем же сообщением, что и мониторинг. +3. Учесть, что `UseShellExecute = true` + `wt.exe new-tab` — аргументы уходят через оболочку Windows Terminal: проверить экранирование пути pin-файла (пробелы в `ApplicationData` пути реальны), либо перейти на `wt.exe new-tab --title ... -- ssh ...` с явным разделителем `--`. +4. Тест в `Desktop.Security.Tests`: построение аргументной строки терминала содержит `StrictHostKeyChecking=yes` и путь pin-файла; профиль без `HostKeyFingerprint` терминал не открывает. + +### A2. Существующие профили после обновления перестают работать без внятного объяснения + +`ServerProfileData.HostKeyFingerprint` — новое опциональное поле; `ServerStorage` использует reflection-сериализатор, поэтому старый `servers.json` загрузится с `null`. Дальше `RunRestrictedCommandAsync` бросает `"SSH host key is not explicitly confirmed for this server profile."` — **на английском**, в остальном русскоязычном интерфейсе, и без подсказки, что чинится это через «Изменить сервер». + +**Что сделать:** +1. Отдельный статус профиля `HostKeyPendingConfirmation` вместо исключения при опросе. +2. В карточке сервера — кнопка «Подтвердить host key», вызывающая `ConfirmHostKeyAsync` напрямую, без диалога редактирования. +3. Сообщение — на языке интерфейса; в тексте назвать конкретное действие. +4. Разовая миграция при старте: если профилей без fingerprint > 0 — один `InfoBar` со списком имён. + +### A3. Переименование сервера требует нового keyscan и подтверждения + +`MainPage.xaml.cs` — `ConfirmHostKeyAsync` вызывается в обработчике редактирования безусловно. Смена только `Name` (или `User`) приводит к сетевому `ssh-keyscan` и модальному диалогу. При недоступном сервере переименование вообще невозможно. + +**Что сделать:** пропускать диалог, если `Host`/`Port` не изменились и `IsTrusted(...)` для сохранённого fingerprint возвращает `true`; в этом случае переносить fingerprint в новый профиль. + +### A4. Диспетчеризация в helper по строке кода ошибки + +**Где:** `ProvisioningHelperServer.ExecuteRequestAsync` + +```csharp +var response = Execute(request, timezoneExecutor: null); +if (response.Code != "execution.unavailable" || _timezoneExecutor is null) return response; +``` + +Ветка исполнения выбирается по тому, что синхронный путь вернул конкретную строку. Любой будущий модуль, вернувший `execution.unavailable` по своей причине, будет отправлен в timezone-исполнитель. Заменить явным решением: `request.Execution is not null && request.ActionType == "system.base-install"` → async-путь, иначе — синхронный. + +### A5. `SMM_AgentUid` не обновляется при `update-agent` + +`agent.env` с `SMM_AgentUid` пишется только в `install_agent`. `update_role agent` перезаписывает бинарники и юниты, но не `agent.env`. Если uid системного пользователя изменился (переустановка, восстановление из backup другой машины, ручное вмешательство) — helper отвергнет **все** запросы Agent'а по `SO_PEERCRED`, и провиженинг встанет молча. + +**Что сделать:** +1. В `update_role agent` пересчитывать и переписывать `SMM_AgentUid` (идемпотентно, `sed -i` по ключу или полная перегенерация файла с сохранением остальных значений). +2. В helper при старте: если `SMM_AgentUid` не соответствует существующему пользователю — писать явную ошибку в journal, а не молча отклонять соединения. +3. Проверка в `test-bootstrap-contract.sh`. + +### A6. Синхронная обёртка `Execute` над `ExecuteAsync` + +`TimezoneProvisioningExecutor.Execute(...) => ExecuteAsync(...).GetAwaiter().GetResult()` — классический источник дедлоков и мёртвый код в production-пути. Оставить только если её реально используют тесты; иначе удалить, тесты перевести на async. + +--- + +## 2. Блок B — состояние в UI = состояние в системе (P0-2) + +Главная задача этого спринта. Полное описание проблемы — в `smm-improvement-plan-2026-07-30.md`, раздел P0-2. Кратко: `ochenstarik-smm-firewall.service` при каждом старте делает `nft delete table inet ochenstarik_smm` и загружает пустую цепочку `links`; Control при старте переприменяет только **disabled**-политики. После перезагрузки Hub все `Active`-Links показаны рабочими, но трафик заблокирован. Это нарушение критерия приёмки №12 собственного ТЗ и прямое расхождение с `docs/linux-bootstrap.md:82`, где такое переприменение описано как существующее поведение. + +### B1. Helper: чтение фактического состояния + +`deploy/ochenstarik-smm-policy-apply` — новое действие `link-list`: + +- вывод `nft -j list chain inet ochenstarik_smm links`, парсинг только правил с комментарием `smm::::`; +- формат вывода — по одной записи в строке, стабильный и машиночитаемый: `sourcetargetprotoport`; +- ненулевой exit code, если таблицы/цепочки нет (это отдельное состояние «firewall не поднят», а не «правил ноль»); +- в testing-режиме (`SMM_POLICY_TESTING=1`) — чтение из фикстуры, как сделано для остальных действий; +- запись в `sudoers` не меняется (шаблон `$POLICY_HELPER *` уже покрывает). + +Добавить действие `link-apply-batch` (правила списком на stdin, применение одной транзакцией `nft -f`) — при переприменении 50 Link'ов текущая схема породит 50 процессов `sudo`. + +### B2. Control: сервис реконсиляции + +Новый `LinkStartupReconciliationService : BackgroundService` (или расширение существующего `LinkExpirationBackgroundService`): + +1. **При старте Control** и далее периодически (интервал — новая настройка `Control__LinkReconciliationSeconds`, диапазон 30–3600, по умолчанию 300): + - получить факт через `link-list`; + - `desired=Active`, факта нет → `ApplyConnectAsync`, событие `link.reapplied`, запись в audit; + - факт есть, записи в БД нет либо `desired=Disabled` → `ApplyDisconnectAsync`, событие `link.orphan-removed`, audit; + - до успешного восстановления держать `ActualState = Partial`. +2. **Если `link-list` вернул «таблицы нет»** — не считать это «правил ноль»: перевести все Active-Links в `Partial`, поднять событие `mesh.firewall-missing`, повторять попытку с backoff. Ошибочная трактовка здесь приведёт к массовому «переприменению» в несуществующую таблицу. +3. Реконсиляция должна быть идемпотентной и не конфликтовать с `LinkService._reconciliationLocks` — переиспользовать те же семафоры по `link.Id`. +4. Ограничение частоты: не чаще одного полного прохода в `LinkReconciliationSeconds`, независимо от числа событий. + +### B3. Desktop + +- В `LinksPage` показывать `ActualState` отдельно от `DesiredState` и явный бейдж расхождения («Политика не применена»). +- Обработка событий `link.reapplied`, `link.orphan-removed`, `mesh.firewall-missing` в потоке событий. + +### B4. Emergency-команда + +`ochenstarik-smm-emergency firewall-restore` восстанавливает deny-by-default и, по документации, «разрешающие Link-правила после этого должен повторно применить Control». Сейчас Control об этом не узнаёт. Добавить: команда ставит маркер-файл, сервис реконсиляции при обнаружении маркера выполняет внеочередной проход и снимает маркер после успеха. + +### B5. Тесты + +- **Unit:** фейковый `ILinkPolicyApplier` + фейковый источник факт-состояния; сценарии: пустой факт при трёх Active → три connect; лишнее правило → один disconnect; отсутствие таблицы → все в `Partial`, ни одного connect; повторный проход без изменений → ноль вызовов. +- **Bash:** `link-list` на фикстуре вывода `nft -j` (включая правила с чужими комментариями, которые трогать нельзя). +- **Acceptance:** в `tests/acceptance/three-server-mesh.sh` при `SMM_ACCEPT_REBOOT=1` после reboot Hub проверять **фактическую связность** (`nc -z` через Link), а не только состояние в API. Сейчас тест проверяет только API — именно поэтому дефект и не был пойман. + +### B6. Критерий приёмки блока B + +После `reboot` Hub и каждого Node: для всех Link с `DesiredState=Active` связность восстанавливается автоматически не позднее одного интервала реконсиляции; для `Disabled` — остаётся заблокированной; ни одно правило без соответствующей записи в БД в цепочке не остаётся; расхождение отображается в Desktop до момента устранения. + +--- + +## 3. Блок C — доверенная поставка (P0-6) + +Сейчас bootstrap сверяет `ARCHIVE.sha256`, лежащий рядом с архивом в том же релизе, а manifest не подписан и содержит только хэш самого bootstrap-скрипта. Кто может опубликовать релиз — может опубликовать и хэш. `update-control` / `update-agent` примут такой архив и заменят бинарники, работающие с root-правами. + +### C1. Формат manifest v2 + +```json +{ + "schema": "smm-release-manifest/v2", + "version": "v0.2.0-beta.1", + "released_at": "2026-08-.....", + "components": { + "bootstrap": { "file": "...sh", "sha256": "..." }, + "linux-x64": { "file": "...linux-x64.tar.gz", "sha256": "..." }, + "linux-arm64": { "file": "...linux-arm64.tar.gz", "sha256": "..." }, + "windows-msix":{ "file": "...win-x64.msix", "sha256": "..." } + }, + "versions": { "control": "...", "agent": "...", "helper": "...", "desktop": "..." }, + "compatibility": { "minimum_control": "...", "minimum_agent": "...", "helper_protocol": "1" } +} +``` + +### C2. Подпись + +- `cosign sign-blob` (keyless/OIDC, без хранения приватного ключа) либо `minisign` с ключом в GitHub Secrets. +- Публичный ключ / идентификатор issuer'а **вшивается константой в bootstrap-скрипт и в Desktop** — не скачивается вместе с релизом, иначе подпись бессмысленна. +- Проверять `.sig` до любого разбора manifest; при отсутствии инструмента проверки — отказ, а не предупреждение. + +### C3. Изменения в bootstrap + +1. Новое действие `verify-manifest MANIFEST SIGNATURE`. +2. `verify_archive` → сверка хэша архива **с manifest**, а не с соседним `.sha256`; старый путь оставить только под явным `SMM_ALLOW_UNSIGNED=1` с громким предупреждением (для локальной разработки). +3. Отказ `update-*` при несовместимой паре версий Control ↔ Agent ↔ helper (`installer-contract.md` §6 это уже требует). +4. `PROGRAM_VERSION` перестаёт быть `0.2.0-dev` — подставлять тег при упаковке в release workflow. + +### C4. CI + +- Запинить все GitHub Actions по commit SHA (сейчас `@v6`, `@v5`, `@v2` — плавающие теги). +- `.github/dependabot.yml` для `github-actions` и `nuget`. +- Сузить `permissions: contents: write` до job'а публикации. +- Негативный тест: подменить байт в архиве → bootstrap обязан отказать; подменить хэш в manifest без переподписи → обязан отказать. +- SBOM (`dotnet CycloneDX`) как артефакт релиза. + +### C5. Критерий приёмки блока C + +Модифицированный архив, модифицированный manifest и manifest без подписи отвергаются bootstrap'ом; каждый случай покрыт тестом в CI. Установка и обновление возможны только из подписанного релиза (кроме явного dev-режима). + +--- + +## 4. Порядок и объём + +| Блок | Содержание | Оценка | +|---|---|---| +| **A** | Долги по задаче 1 (A1 — обязательно, остальное желательно в том же PR) | 1–2 дня | +| **B** | Реконсиляция Links + фактическая проверка в acceptance | 3–5 дней | +| **C** | Подписанный manifest и проверка совместимости версий | 2–4 дня | + +Делать в порядке A → B → C. Блок A мал и закрывает открытую половину P0-4 — не откладывать его в отдельный спринт. Блок B выше по приоритету, чем C: ложное «зелёное» состояние в инструменте безопасности опаснее, чем неподписанный релиз на этапе alpha, где артефакты пока ставит только автор. + +**PR-разбиение:** три отдельных PR (`fix(desktop): pin terminal host key`, `feat(control): reconcile link policies`, `feat(release): signed compatibility manifest`) — как и в задаче 1, по одной теме на PR. + +--- + +## 5. Definition of Done задачи 2 + +- [ ] Терминал использует тот же pinned host key, что и мониторинг; профиль без подтверждённого fingerprint терминал не открывает +- [ ] Профили из предыдущей версии подтверждаются одним действием, без пересоздания сервера +- [ ] `SMM_AgentUid` корректен после `update-agent`; несоответствие видно в journal +- [ ] После reboot Hub и Node factual state == desired state, проверено связностью в acceptance-скрипте +- [ ] Расхождение desired/factual видно в Desktop +- [ ] Отсутствие nftables-таблицы отличается от «правил ноль» и не приводит к ложным connect +- [ ] Manifest подписан, публичный ключ вшит в bootstrap, подмена архива/manifest отвергается — с тестами +- [ ] Несовместимые версии Control/Agent/helper блокируют обновление +- [ ] Actions запиннены по SHA, dependabot включён +- [ ] Roadmap обновлён: закрыты пункты Этапа 3 (физический acceptance — частично), Этапа 7 (подпись manifest) +- [ ] `docs/linux-bootstrap.md:82` приведён в соответствие с реализацией + +--- + +## 6. Не входит в задачу 2 + +Xray (Этапы 11–12), каркас `IProvisioningModule` и остальные модули провиженинга, роль Monitor в bootstrap, MVVM-рефакторинг Desktop, локализация — это задача 3 и далее. Обоснование очерёдности — в `smm-improvement-plan-2026-07-30.md`, разделы 5 и 7. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-3-2026-08-03.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-3-2026-08-03.md new file mode 100644 index 0000000..8f2dcf6 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-3-2026-08-03.md @@ -0,0 +1,148 @@ +# Задача 3 — закрыть P0-2 по существу и перейти к доверенной поставке + +Базовая ревизия: `main` @ `89ef2fd` (PR #11, Block B merged). +Предшествующие документы: `smm-improvement-plan-2026-07-30.md`, `smm-task-2-2026-07-31.md`, `smm-task2-blockB-review-2026-08-03.md`. + +--- + +## 0. Результат перепроверки пакета Block B + +**Процессная часть — принято.** `SHA256SUMS` сходится по всем семи файлам, репорт репрезентативен, CI 14/14 SUCCESS на `1580ec7` (включая Debian 12/13 x64+arm64 systemd restart и Ubuntu 22.04/24.04 native VM), PR #11 смержен как `89ef2fd`, временный verifier удалён. Замечание по контрольным суммам из прошлого ревью закрыто. + +**Содержательная часть — не принято.** Проверял по `origin/main`, а не по отчёту. Диф совпадает с тем, что я ревьюил (551 против 550 additions), и главное замечание в него не вошло: + +| Проверка в `main` @ `89ef2fd` | Результат | +|---|---| +| Хостед-сервисы в `Program.cs:61-62` | только `LinkExpirationBackgroundService` и `ControlMaintenanceBackgroundService` | +| Вызовы `ReconcileLinksForNodeAsync` | ровно один — `Program.cs:356`, обработчик heartbeat | +| `Control__LinkReconciliationSeconds` | отсутствует | +| `mesh.firewall-missing` / маркер от `firewall-restore` | отсутствуют | +| `(char)13` в `CompactError` | `LinkService.cs:339`, на месте | +| `ListLinksAsync().SingleOrDefault(...)` | `LinkService.cs:32`, `LinkService.cs:297` | + +Условие запуска реконсиляции не изменилось: + +```csharp +var reconnectThreshold = TimeSpan.FromSeconds(Math.Max(60, nextHeartbeatSeconds * 3)); // 90 с +var requiresReconciliation = previousStatus != "Online" + || previousLastSeenAt is null + || now - previousLastSeenAt >= reconnectThreshold; +``` + +Следовательно, в `main` по-прежнему открыты сценарии, ради которых Block B и делался: + +1. `ochenstarik-smm-emergency firewall-restore` — правила стёрты, **ни один Node не уходил в offline**, реконсиляция не запускается. В Desktop: «Расхождение: нет». Фактически трафик заблокирован. `docs/linux-bootstrap.md:111` продолжает обещать переприменение, которого нет. +2. Ручной `systemctl restart ochenstarik-smm-firewall`. +3. Перезапуск Hub с простоем < 90 с (перезапуск сервиса, быстрый reboot VM, `update-control`). +4. Link, оба участника которого не переподключались. + +**Критерий выхода B6 не выполнен. Block B остаётся открытым**, несмотря на merge. Раздел 1 этой задачи — его остаток, а не новая функциональность. + +Отдельно: physical acceptance не выполнялся ни разу за две задачи, потому что не выданы `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE`. Это внешний блокер, который снимается только вашим решением. Пока он не снят, ни один критерий, формулируемый через фактическую связность, закрыть нельзя — CI это не заменяет. + +--- + +## 1. Блок B-2 — остаток Block B (обязательный) + +### B2-1. Фоновая реконсиляция, не привязанная к переподключению Node + +Новый `LinkReconciliationBackgroundService : BackgroundService`, регистрируется третьим в `Program.cs`. + +- Настройка `Control__LinkReconciliationSeconds` в `ControlOptions`, валидация в цепочке `.Validate(...)` наравне с прочими (диапазон 30…3600, по умолчанию 300), значение в `appsettings.json`. +- Один проход при старте — после `store.InitializeAsync()`, до начала обслуживания запросов не обязателен, но первый тик должен быть немедленным, а не через интервал. +- Проход идёт по **всем действующим политикам** (`DesiredState = Active`, либо `DesiredState = Disabled` при `ActualState != "Disabled"`), а не по Link конкретного Node. +- Порядок блокировок сохранить существующий: node-локи (отсортированные) → per-Link gate. Никаких новых классов блокировок. +- Актор — `system:reconcile`. +- События: при фактическом восстановлении публиковать `link.reapplied`, при удалении правила без записи в БД — `link.orphan-removed`. Существующие `link.reconciling` / `link.active` / `link.disabled` / `link.failed` / `link.partial` сохранить. +- Не чаще одного полного прохода за интервал независимо от внешних триггеров. + +**Обязательный сопутствующий рефакторинг.** Логика «прочитать текущее состояние → сравнить факт с desired → применить → проверить → сохранить» сейчас существует в трёх экземплярах: `CreateAsync`, `ReconcileLinksForNodeAsync`, `ConvergeDisabledCoreAsync`. Четвёртая копия в фоновом сервисе недопустима. Свести к одному методу вида + +```csharp +private async Task ConvergeAsync( + LinkPolicy link, bool expectedConnected, string actor, CancellationToken ct) +``` + +и вызывать его из всех четырёх мест. + +### B2-2. «Таблицы нет» ≠ «правил ноль» + +Сейчас при отсутствии таблицы `link-status` завершается кодом 78, исключение ловится поштучно, и каждая политика по очереди получает `Failed`/`Partial` с текстом ошибки helper'а. Оператор видит N разных ошибок вместо одной причины. + +1. `deploy/ochenstarik-smm-policy-apply`: отличать «таблица/цепочка недоступна» от «правило не найдено» — отдельный exit code (например 79) и стабильный маркер в stderr. Сохранить fail-closed поведение: неизвестная ошибка `nft` по-прежнему не должна читаться как «правил нет». +2. `LinkPolicyApplier`: типизированное `MeshFirewallUnavailableException` по этому коду. +3. Сервис реконсиляции: при таком исключении — **прервать проход**, один раз опубликовать `mesh.firewall-unavailable`, перевести затронутые политики в `Partial` с единым кодом ошибки, повторить с backoff. Никаких массовых попыток применения в несуществующую таблицу. +4. Desktop: один баннер «Mesh firewall не загружен» вместо N строк с ошибками. + +### B2-3. Маркер внеочередной реконсиляции + +1. `ochenstarik-smm-emergency firewall-restore` и `mesh-enable` создают `/var/lib/ochenstarik-server-monitor-manager/mesh/reconcile-requested` (root, `0600`). +2. Фоновый сервис на каждом тике проверяет маркер, при наличии выполняет внеочередной проход и удаляет маркер **только после успешного завершения**. +3. Контрактная проверка в `tests/bootstrap/test-bootstrap-contract.sh` — как для остальных инвариантов emergency-команды. + +### B2-4. Тесты + +- **Unit:** все правила стёрты (fake applier: `IsConnected == false` для всех), **ни одного heartbeat** → фоновый проход выполняет N connect и приводит `ActualState` к `Active`. Это тот самый тест, который ловит текущий пробел; без него блок не принимается. +- **Unit:** правило существует, `DesiredState = Disabled` → disconnect + `link.orphan-removed`. +- **Unit:** firewall unavailable → ноль мутаций, событие опубликовано один раз, затронутые в `Partial`. +- **Unit:** два прохода подряд без изменений → ноль вызовов helper во втором. +- **Integration** в стиле `LinkPolicyApplierIntegrationTests`: удалить маркер `connected`, выполнить проход, сверить точную последовательность вызовов helper. +- **Acceptance** (`tests/acceptance/three-server-mesh.sh`): новый шаг — на Hub выполнить `emergency firewall-restore` (или `nft delete table` + `systemctl start ochenstarik-smm-firewall`) **без перезапуска Node**, выждать интервал реконсиляции, затем `expect_reachable "$HOME_WG_IP"`, `expect_blocked "$SECOND_WG_IP"` и `expect_factual_status` для обоих. + +### B2-5. Критерий приёмки блока + +Правила nftables стёрты при полностью живых Node → связность по всем `DesiredState=Active` восстанавливается автоматически не позднее одного интервала реконсиляции; `Disabled` остаются заблокированными; правил без записи в БД не остаётся; расхождение видно в Desktop до момента устранения. Подтверждается unit-тестом **и** прогоном acceptance-скрипта на реальной тройке. + +--- + +## 2. Блок B-3 — техдолг из ревью (в том же PR или следующем, до закрытия Block B) + +| ID | Что | Где | +|---|---|---| +| M1 | Опубликовать `GetLinkAsync(string id, CancellationToken)` — приватный `ReadLinkAsync(id)` уже есть — и заменить им поиск по id полным перечислением. Сейчас O(N) чтений и десериализаций **под захваченной блокировкой**, что ударит по нагрузочному тесту Этапа 5. | `ControlStore.cs:1460`; `LinkService.cs:32`, `297`; цикл в `ReconcileLinksForNodeAsync` | +| M2 | `LinkReconciliationResult.Reconciled` теперь означает «рассмотрено», а не «приведено в порядок» (тест ожидает `(1, 0)` при нуле вызовов helper). Развести на `Examined` / `Converged` / `Failed`. | `LinkService.cs` | +| M4 | Фильтр на Links-странице снят, retention для таблицы `links` нет (чистятся только `metric_samples`, `idempotency`, `audit`, токены) — страница превращается в журнал. Нужен фильтр по умолчанию «действующие + расхождения» с переключателем либо retention для завершённых Disabled-политик. | `MainPage.xaml.cs`, `ControlMaintenance.cs` | +| M5 | Проба статуса для зарезервированного, но не активированного в mesh Node падает через `lookup_node_ip` и перебрасывает Link в `Failed` на каждом проходе. Отличать «Node ещё не активирован» от «helper сломан». | `ochenstarik-smm-policy-apply`, `LinkService` | +| L1 | `Split([(char)13, '\n'], …)` вернуть к `Split(['\r', '\n'], …)` — это то же самое, но нечитаемо; похоже на артефакт инструмента. | `LinkService.cs:339` | + +M1 и L1 — дешёвые, делать сразу. M4 влияет на пригодность UI и требует решения о retention — вынести отдельным PR можно, но до объявления Block B закрытым. + +--- + +## 3. Блок C — доверенная поставка (после закрытия B-2) + +Полное описание — `smm-task-2-2026-07-31.md`, раздел 3. Кратко: + +- **C1.** Manifest v2: хэши всех артефактов (bootstrap, оба `tar.gz`, MSIX), версии Control/Agent/helper/Desktop, минимальные совместимые версии, `helper_protocol`. +- **C2.** Подпись (`cosign sign-blob` keyless либо `minisign`); публичный ключ/issuer **вшит константой** в bootstrap и Desktop, не скачивается вместе с релизом. Отсутствие инструмента проверки — отказ, не предупреждение. +- **C3.** `verify_archive` сверяет хэш с manifest, а не с соседним `.sha256`; старый путь только под явным `SMM_ALLOW_UNSIGNED=1`. Новое действие `verify-manifest`. Отказ `update-*` при несовместимой паре версий. `PROGRAM_VERSION` подставляется из тега при упаковке вместо `0.2.0-dev`. +- **C4.** Пиннинг GitHub Actions по commit SHA (сейчас плавающие `@v6`, `@v5`, `@v2`), `dependabot.yml` для `github-actions` и `nuget`, сужение `permissions: contents: write` до job'а публикации, SBOM в артефакты релиза. +- **C5.** Негативные тесты в CI: изменённый байт в архиве, подменённый хэш в manifest без переподписи, manifest без подписи — все три отвергаются. + +--- + +## 4. Порядок и Definition of Done + +**Порядок:** B2-1 → B2-2 → B2-3 → B2-4 (в одном PR, это единая функция) → B-3 (M1, L1 в том же PR; M2, M4, M5 — отдельным) → physical acceptance → Блок C. + +**DoD задачи 3:** + +- [ ] Фоновая реконсиляция работает при старте и по интервалу, не завися от переподключения Node +- [ ] Unit-тест «правила стёрты, heartbeat не приходил → связность восстановлена» проходит +- [ ] Недоступный mesh firewall даёт одно событие и одно понятное состояние, а не N ошибок +- [ ] `emergency firewall-restore` приводит к внеочередной реконсиляции +- [ ] Логика сходимости существует в одном экземпляре, а не в четырёх +- [ ] `docs/linux-bootstrap.md:111` соответствует реализации +- [ ] M1, L1 исправлены; по M2, M4, M5 принято решение (сделать либо явно перенести с обоснованием) +- [ ] **Physical acceptance `three-server-mesh.sh` c `SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1` выполнен** — иначе B6 остаётся открытым +- [ ] Далее: Блок C по разделу 3 + +--- + +## 5. Процесс + +Две вещи, которые стоит изменить в способе работы, — обе подтвердились на Block B. + +**Независимому review отдавать текст задачи, а не только диф.** Оба review Block B были корректны по существу написанного кода и оба пропустили, что половина требований блока не реализована. Первый проверял «безопасно ли коммитить этот диф», второй — «закрыты ли две HIGH». Полноту относительно постановки не проверял никто, и блок ушёл в `main` с открытым основным критерием. + +**Критерий выхода блока не равен merge.** Block B помечен выполненным на основании зелёного CI и APPROVE, тогда как его собственный критерий B6 сформулирован через фактическую связность и не проверялся. Пока physical acceptance заблокирован отсутствием topology inputs, блоки, чьи критерии формулируются через факт, следует помечать как `merged, acceptance pending`, а не как закрытые. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-4-2026-08-03.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-4-2026-08-03.md new file mode 100644 index 0000000..3688378 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-4-2026-08-03.md @@ -0,0 +1,163 @@ +# Приёмка Task 3 / B-2 и Задача 4 + +Базовая ревизия: `main` @ `b11c277` (PR #12, squash merge, 21 файл, 1113/172). +Предшествующие документы: `smm-improvement-plan-2026-07-30.md`, `smm-task-2-2026-07-31.md`, `smm-task2-blockB-review-2026-08-03.md`, `smm-task-3-2026-08-03.md`. + +--- + +## 0. Приёмка B-2: **принято** + +Проверял по `origin/main`, а не по отчёту. Все семь контрольных сумм сходятся, CI 14/14 на PR #12, `PATCH_VERIFICATION.txt` подтверждает применимость патча к чистой базе. + +| Требование задачи 3 | Проверка в `main` @ `b11c277` | +|---|---| +| B2-1 фоновый сервис, старт + интервал | `Program.cs:63` — `AddHostedService`; `do { RunOnceAsync } while (timer.WaitForNextTickAsync)` — первый проход немедленный ✅ | +| `Control__LinkReconciliationSeconds` | `ControlOptions.cs:27` (=300), валидация `Program.cs:49` (30…3600), `appsettings.json:13`, `control.env` в bootstrap ✅ | +| Проход по всем действующим политикам | `ReconcileAllAsync` через `ListEffectiveLinksAsync`, не по одному Node ✅ | +| Порядок блокировок сохранён | sorted node locks → per-Link gate, новых классов не введено ✅ | +| `link.reapplied` / `link.orphan-removed` | `LinkService.cs:309` ✅ | +| Единая логика сходимости | `ConvergeAsync` — используется create/disable/reconnect/full/TTL/retry. Три копии сведены к одной ✅ | +| B2-2 «таблицы нет» ≠ «правил ноль» | helper: exit 79 + точный маркер `mesh.firewall-unavailable` в stderr, `LC_ALL=C`; типизированное исключение; проход прерывается; агрегированное событие; bounded backoff; событие восстановления `mesh.firewall-available` ✅ | +| B2-3 маркер внеочередной реконсиляции | `firewall-restore` и `mesh-enable` публикуют маркер атомарно под общим root-flock с UUID-поколением; helper потребляет **только точное поколение** ✅ | +| B2-4 тесты | `LinkReconciliationTests.cs` (338 строк), контрактные проверки в bootstrap-тесте, интеграционный тест последовательности вызовов helper ✅ | +| Acceptance: firewall-restore без перезапуска Node | новый шаг `[8/12]` с retry-циклом по фактическому статусу **и** реальной связности ✅ | +| M1 `GetLinkAsync`, L1 CR/LF | оба исправлены ✅ (в `REPORT.md` метки M1 и L1 перепутаны местами — сами правки на месте) | +| M2, M4, M5 | явно перенесены в B-3 с обоснованием в `docs/roadmap.md` — это и требовалось по DoD ✅ | +| `docs/linux-bootstrap.md` | приведён в соответствие с реализацией ✅ | + +Отдельно отмечу два места, где сделано **лучше**, чем было в задании: + +- Я просил просто маркер. Реализовано поколение-UUID под общим `flock` с потреблением ровно прочитанного поколения — то есть закрыта гонка «пока шёл проход, пришёл новый запрос», о которой в задании не было ни слова. +- Маркер обходит только регулярный интервал, но **не** обходит backoff недоступного firewall. Это правильное разделение, и оно покрыто тестом. + +Независимый review в этот раз проводился против полного текста задачи, а не только дифа — рекомендация из прошлого документа принята и сработала: его находки (маркер против throttle, слепое удаление чужого поколения, выход acceptance по первому несовпадению, баннер при нуле SSH-профилей, локализованный stderr `nft`) — это ровно тот класс дефектов, который в прошлый раз никто не искал. + +**Статус блока:** `merged / verified, physical acceptance pending`. Формулировка в отчёте корректна, B6 не объявлен закрытым. Это правильно и так и должно остаться до прогона на реальной тройке. + +--- + +## 1. Находки по B-2 (не блокирующие merge, в работу) + +### N1 — MEDIUM. Незавершаемый маркер даёт полный проход каждые 30 секунд бесконечно + +`LinkReconciliationBackgroundService.RunOnceAsync`: + +```csharp +if (requestGeneration is null && _nextRegularAt is not null && now < _nextRegularAt) return null; +... +else { _nextRegularAt = now + interval; + if (requestGeneration is not null && result.Failed == 0) + await applier.CompleteReconciliationAsync(requestGeneration, ct); } +``` + +Маркер потребляется только при `Failed == 0`, а наличие маркера полностью снимает регулярный throttle. `_backoffUntil` взводится **только** для `FirewallUnavailable`, обычные отказы под него не попадают. + +Следствие: одна политика, которая падает стабильно и не связана с firewall — например Node удалён из `nodes.tsv`, и `lookup_node_ip` возвращает 78, — навсегда удерживает маркер. Полный проход начинает выполняться на каждом poll-тике (`min(interval, 30)` = 30 с) без ограничения, каждый проход — до двух `sudo`+`nft` на каждую подходящую политику. При полусотне Link это сотня привилегированных вызовов каждые полминуты на неопределённый срок. + +**Сделать:** применить ограниченный backoff и к marker-пути. Например: счётчик неуспешных prompt-проходов, после 3–4 попыток маркер перестаёт снимать регулярный throttle, в журнал пишется одно предупреждение с идентификаторами упавших политик. Тест: политика, падающая всегда, при висящем маркере не должна вызывать более N проходов за интервал. + +### N2 — MEDIUM. Orphan-правило для полностью сошедшейся Disabled-политики не обнаруживается + +```csharp +private static bool IsEligibleForFullReconciliation(LinkPolicy link) + => link.DesiredState == "Active" + || (link.DesiredState == "Disabled" && link.ActualState != "Disabled"); +``` + +Политика в состоянии `Disabled/Disabled` из полного прохода исключена — то есть если accept-правило с её комментарием окажется в цепочке, никто этого не заметит. А это ровно инвариант kill switch. + +**Это моя недоработка в постановке, а не отклонение исполнителя** — фильтр в задаче 3 сформулирован мной дословно так же. Отмечаю, чтобы не потерялось. + +Реалистичные пути появления такого правила: восстановление сохранённого ruleset `nft -f` поверх, частично применённый backup, обрыв между успешным `link-connect` и записью в БД, отказ на середине `link.orphan-removed`. + +**Правильное решение — развернуть направление прохода.** Сейчас идём БД → факт, по одной политике, двумя вызовами helper на каждую. Нужно наоборот: один вызов `link-list`, возвращающий **все** правила цепочки с комментарием `smm:*`, и сверка множеств: + +- правило есть, политики в БД нет либо `DesiredState=Disabled` → удалить, `link.orphan-removed`; +- политика `DesiredState=Active`, правила нет → применить, `link.reapplied`; +- совпало → ничего. + +Это одновременно закрывает N2, снимает зависимость от `IsEligibleForFullReconciliation`, и превращает стоимость прохода из `2N` привилегированных вызовов в один. `link-list` был в исходной постановке Block B (пункт B1) и до сих пор не реализован — сейчас есть только пер-линковый `link-status`. + +Связано с M4: пока нет retention для завершённых Disabled-политик, обход БД→факт растёт неограниченно. Обход факт→БД от этого не зависит. + +### N3 — LOW. На Hub без `mesh-init` предупреждение каждые 30 секунд + +`install_control` создаёт `$STATE_DIR` и `$STATE_DIR/backups`, но не `$STATE_DIR/mesh`; каталог появляется только в `mesh_init` / `reserve_node_address`. Helper в `reconcile_status` делает `exec 9>"$RECONCILE_LOCK"` в несуществующем каталоге — под `set -e` это отказ. В `RunOnceAsync` он ловится и пишется `LogWarning`, то есть в journal попадает предупреждение каждые 30 секунд до первого `mesh-init`. + +**Сделать:** helper возвращает `complete`, если каталог mesh отсутствует (Mesh ещё не инициализирован — запросов быть не может), либо создаёт каталог при первом обращении. + +### N4 — LOW. Отсутствующий бинарь `nft` неотличим от отсутствующей таблицы + +`inspect_firewall` берёт объединённый вывод `2>&1` и классифицирует по подстроке `No such file or directory`. Если `/usr/sbin/nft` не установлен, эту же строку выдаёт сам bash — и ситуация классифицируется как `mesh.firewall-unavailable` (79). Поведение fail-closed и мутаций не будет, так что дефект не опасный, но оператор увидит «Mesh firewall не загружен» вместо «nftables не установлен». + +**Сделать:** явная проверка `[[ -x /usr/sbin/nft ]]` с отдельным сообщением до вызова. + +### N5 — LOW. Форматирование в `three-server-mesh.sh` + +В блоке `probe_factual_status` / `expect_factual_status` перемешаны отступы 4 и 2 пробела, закрывающая `}` вынесена внутрь тела, определение `expect_factual_status() {` смещено на два пробела. `bash -n` проходит, поведение верное, но остальной файл написан с отступом в 2 пробела. Похоже на тот же артефакт инструмента, что в прошлый раз дал `(char)13`. Переформатировать. + +### N6 — nit. `REPORT.md` меняет местами метки M1 и L1 + +Написано «M1 (CR/LF compaction) и L1 (direct Link lookup)»; в задаче M1 — это `GetLinkAsync`, L1 — CR/LF. Обе правки сделаны, перепутаны только подписи. + +--- + +## 2. Задача 4 + +### Блок B-3 (первым) + +Переносится из roadmap плюс находки выше. + +| ID | Что | Приоритет | +|---|---|---| +| N2 + B1 | `link-list` в policy-helper и разворот прохода реконсиляции на факт → БД; удаление orphan-правил независимо от состояния в БД; один привилегированный вызов на проход вместо `2N` | высокий | +| N1 | Ограниченный backoff для marker-пути; тест на политику, падающую всегда | высокий | +| M2 | Развести `LinkReconciliationResult` на `Examined` / `Converged` / `Failed`; сейчас «1 реконсилирован» при нуле мутаций | средний | +| M4 | Фильтр по умолчанию на Links-странице («действующие + расхождения», с переключателем) и/или retention завершённых Disabled-политик в `ControlMaintenance` | средний | +| M5 | Типизировать «Node зарезервирован, но не активирован в mesh» — сейчас `lookup_node_ip` даёт отказ применения и Link уходит в `Failed` на каждом проходе | средний | +| N3 | Helper возвращает `complete` при отсутствующем каталоге mesh | низкий | +| N4 | Явная проверка наличия `nft` с отдельным сообщением | низкий | +| N5 | Переформатировать `three-server-mesh.sh` | низкий | + +**Критерий выхода B-3:** проход реконсиляции обнаруживает и снимает accept-правило, которому не соответствует ни одна действующая политика, **включая случай `Disabled/Disabled`**; стабильно падающая политика не вызывает более одного прохода за интервал; Links-страница остаётся читаемой при сотнях исторических политик. + +### Блок C — доверенная поставка + +Без изменений относительно `smm-task-2-2026-07-31.md`, раздел 3, и `smm-task-3-2026-08-03.md`, раздел 3: + +- **C1** manifest v2: хэши всех артефактов, версии Control/Agent/helper/Desktop, минимальные совместимые версии, `helper_protocol`. +- **C2** подпись (`cosign sign-blob` keyless либо `minisign`); публичный ключ/issuer вшит константой в bootstrap и Desktop, не скачивается вместе с релизом; отсутствие инструмента проверки — отказ, не предупреждение. +- **C3** `verify_archive` сверяет хэш с manifest, а не с соседним `.sha256`; действие `verify-manifest`; отказ `update-*` при несовместимых версиях; `PROGRAM_VERSION` из тега вместо `0.2.0-dev`. +- **C4** пиннинг Actions по commit SHA, `dependabot.yml` (github-actions + nuget), сужение `permissions: contents: write` до job'а публикации, SBOM в артефакты. +- **C5** негативные тесты в CI: изменённый байт архива, подменённый хэш в manifest, manifest без подписи — все три отвергаются. + +### Physical acceptance — внешний блокер + +Не выполнялся ни разу за три задачи. Требуется: + +``` +HUB_SSH_HOST, HUB_SSH_USER, SOURCE_SSH_HOST, SOURCE_SSH_USER, +HOME_WG_IP, SECOND_WG_IP, SSH_IDENTITY_FILE +``` + +и прогон + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh +``` + +Пока он не выполнен, B6 и вся Этап 3 roadmap остаются открытыми, независимо от того, сколько раз CI будет зелёным. Сейчас harness готов и включает шаг `firewall-restore` без перезапуска Node — то есть сценарий, ради которого делались Block B и B-2, впервые проверяем по-настоящему. Это единственный пункт списка, который не может закрыть исполнитель. + +--- + +## 3. Порядок + +1. **B-3**, приоритет по таблице: N2+B1 и N1 в одном PR (они оба про сервис реконсиляции), M2/M4/M5 вторым, N3/N4/N5 попутно. +2. **Physical acceptance** — как только выданы topology inputs. По результату закрыть B6 и соответствующие пункты Этапа 3 и 5 roadmap. +3. **Блок C**. + +## 4. Процесс — работает, оставить + +Практика «независимый review получает полный текст задачи, а не только диф» подтвердилась: пять находок этого цикла относятся к классу, который в прошлый раз не искали вовсе. Сохранить и для B-3, и для Блока C — для Блока C особенно, там корректность дифа и корректность модели угроз расходятся ещё сильнее. + +Формулировка статуса `merged / verified, physical acceptance pending` вместо «выполнено» — тоже оставить. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-B3-spec-2026-08-03.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-B3-spec-2026-08-03.md new file mode 100644 index 0000000..2125d11 --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-B3-spec-2026-08-03.md @@ -0,0 +1,163 @@ +# ТЗ: Block B-3 — реконсиляция от факта и техдолг Link-политик + +Репозиторий: `ochenstarik-ui/server-monitor-manager` +База: `main` @ `b11c277ac7f79a18670932eca4622982d9ff48e0` +Предшествующие блоки: B (PR #11), B-2 (PR #12) — оба merged, physical acceptance pending. + +Этот документ самодостаточен. Всё, что нужно исполнителю, здесь; предыдущие документы читать не обязательно. + +--- + +## 1. Контекст + +Control уже умеет приводить Link-политики к желаемому состоянию: есть `LinkReconciliationBackgroundService` (немедленный проход при старте + периодический по `Control__LinkReconciliationSeconds`), единый `ConvergeAsync`, типизированное состояние `mesh.firewall-unavailable` с backoff и generation-маркер внеочередной реконсиляции от `ochenstarik-smm-emergency`. + +Проход устроен **от базы к факту**: берётся список действующих политик, и для каждой вызывается helper — `link-status`, затем при расхождении `link-connect`/`link-disconnect`, затем повторный `link-status`. Отсюда два системных ограничения, которые и закрывает этот блок. + +--- + +## 2. Scope + +### B3-1 — `link-list` в policy-helper (высокий приоритет) + +Новое действие в `deploy/ochenstarik-smm-policy-apply`, возвращающее **все** правила управляемой цепочки одним вызовом. + +- Арность: ровно 1 аргумент (`link-list`), проверяется до всего остального, как у `reconcile-status`. +- Источник: та же цепочка `inet ochenstarik_smm links`, через существующий `inspect_firewall` — то есть недоступная таблица по-прежнему даёт exit 79 и точный маркер `mesh.firewall-unavailable` в stderr, а неизвестная ошибка `nft` остаётся fail-closed с exit 78. +- Разбирать только правила с комментарием вида `smm::::`; чужие правила в цепочке игнорировать и **никогда** не трогать. +- Формат вывода — стабильный, машиночитаемый, по одной записи в строке: `sourcetargetprotocolport`. Порядок не гарантируется, дубликаты допустимы (одинаковый comment может встретиться несколько раз — это тоже подлежит вычистке). +- Пустая цепочка — пустой вывод и exit 0. Это отличается от «таблицы нет» (exit 79). +- Значения из comment валидировать теми же паттернами, что и аргументы действий (`node_pattern`, `tcp|udp`, порт 1…65535). Строка, не прошедшая валидацию, не выводится, но фиксируется в stderr как диагностика — она означает, что кто-то подделал comment. +- Режим `SMM_POLICY_TESTING=1` поддержать по образцу существующих действий, чтобы контрактный тест работал без root и без nftables. + +`sudoers` менять не нужно — шаблон `$POLICY_HELPER *` уже покрывает новое действие. + +### B3-2 — развернуть проход реконсиляции на факт → база (высокий приоритет) + +`LinkService.ReconcileAllAsync` переписать так, чтобы источником истины о факте был один вызов `link-list`, а не `2N` вызовов `link-status`. + +Алгоритм прохода: + +1. Один `link-list` → множество фактических правил. +2. Один `ListEffectiveLinksAsync` → множество действующих политик. +3. Сверка множеств по ключу `(source, target, protocol, port)`: + - **правилу не соответствует ни одна политика с `DesiredState=Active`** (политики нет вовсе, либо она `Disabled`) → удалить правило, событие `link.orphan-removed`, запись в audit; если политика в БД есть — привести её `ActualState` к `Disabled`; + - **политика `DesiredState=Active`, правила нет** → применить, проверить фактом, событие `link.reapplied`; + - **совпало** → мутаций нет, `ActualState` при необходимости синхронизировать без вызова helper. +4. Дубликаты одного и того же правила схлопывать до одного при `Active` и удалять полностью при `Disabled`. + +Требования: + +- **Снять ограничение `IsEligibleForFullReconciliation`.** Сейчас политика в состоянии `Disabled/Disabled` из прохода исключена, поэтому accept-правило для полностью отключённой политики не обнаруживается никогда — а это инвариант kill switch. После разворота прохода фильтр по состоянию в БД больше не нужен: orphan находится по факту, независимо от того, что записано в базе. +- Порядок блокировок сохранить существующий: отсортированные node-локи → per-Link gate. Новых классов блокировок не вводить. +- Единый `ConvergeAsync` остаётся единственной реализацией сходимости; отдельной копии логики для нового прохода быть не должно. +- Поведение при `mesh.firewall-unavailable` не меняется: проход прерывается, публикуется одно агрегированное событие, работает bounded backoff, маркер не потребляется. +- Стоимость прохода без расхождений: **один** привилегированный вызов. Это проверяемое требование, см. тесты. + +### B3-3 — ограниченный backoff для marker-пути (высокий приоритет) + +В `LinkReconciliationBackgroundService` наличие маркера полностью снимает регулярный throttle (`_nextRegularAt`), а сам маркер потребляется только при `Failed == 0`. `_backoffUntil` взводится лишь для `FirewallUnavailable`. Следствие: одна стабильно падающая политика — например Node, выпавший из `nodes.tsv`, где `lookup_node_ip` даёт exit 78, — навсегда удерживает маркер, и полный проход начинает выполняться на каждом poll-тике (30 с) без ограничения. + +Сделать: + +- счётчик неуспешных prompt-проходов подряд; после 3 попыток маркер перестаёт снимать регулярный throttle и проходы возвращаются к обычному интервалу; +- одно предупреждение в журнал при переходе в это состояние, с идентификаторами упавших политик, без повторов на каждом тике; +- счётчик сбрасывается при первом проходе с `Failed == 0` (тогда же маркер потребляется штатно); +- маркер по-прежнему **не** потребляется, пока проход не завершился без отказов. + +### B3-4 — M2: семантика результата реконсиляции (средний) + +`LinkReconciliationResult.Reconciled` сейчас означает «рассмотрено», а не «приведено в порядок»: тест ожидает `(1, 0)` при нуле вызовов helper. Развести на три поля — `Examined`, `Converged`, `Failed` — и обновить всех потребителей, включая журнал фонового сервиса и `Program.cs`. `LinkFullReconciliationResult` привести к той же схеме. + +### B3-5 — M4: Links-страница и retention (средний) + +Фильтр на странице Links снят в Block B, retention для таблицы `links` нет (в `ControlMaintenance` чистятся только `metric_samples`, `idempotency`, `audit` и токены). Страница превращается в журнал всех политик за всё время. + +Сделать **оба**: + +- Desktop: фильтр по умолчанию «действующие + расхождения» с явным переключателем «показать историю»; счётчики в заголовке считать по отображаемому набору и подписывать однозначно. +- Control: retention для завершённых политик — `DesiredState=Disabled` и `ActualState=Disabled`, старше настраиваемого срока; новая настройка в `ControlOptions` с валидацией, значение в `appsettings.json` и в `control.env` bootstrap, по образцу `LinkReconciliationSeconds`. Действующие политики и политики с расхождением не удалять никогда. + +### B3-6 — M5: не активированный в mesh Node (средний) + +`lookup_node_ip` не различает «Node зарезервирован, но `peer-add` ещё не выполнен» и «helper сломан»: в обоих случаях exit 78, и политика уходит в `Failed` на каждом проходе. Ввести отдельный код возврата и типизированное состояние: политика к неактивированному Node не является отказом применения, это ожидаемое промежуточное состояние. В Desktop показывать его отдельной формулировкой, а не ошибкой. + +### B3-7 — мелочи (низкий) + +- Helper: `reconcile-status` возвращает `complete`, если каталог `/var/lib/ochenstarik-server-monitor-manager/mesh` отсутствует. Сейчас `exec 9>"$RECONCILE_LOCK"` в несуществующем каталоге падает под `set -e`, и на Hub, где `mesh-init` ещё не выполнялся, Control пишет предупреждение каждые 30 секунд. +- Helper: явная проверка `[[ -x /usr/sbin/nft ]]` с отдельным сообщением. Сейчас отсутствующий бинарь даёт ту же строку `No such file or directory`, что и отсутствующая таблица, и классифицируется как `mesh.firewall-unavailable`. +- `tests/acceptance/three-server-mesh.sh`: переформатировать блок `probe_factual_status` / `expect_factual_status` — перемешаны отступы 4 и 2 пробела, закрывающая скобка внесена внутрь тела. Поведение верное, `bash -n` проходит; вопрос читаемости. + +--- + +## 3. Тесты + +**Обязательные, без них блок не принимается:** + +1. Accept-правило существует, соответствующая политика в состоянии `Disabled/Disabled` → проход удаляет правило и публикует `link.orphan-removed`. Это тот случай, который сегодня не обнаруживается вовсе. +2. Accept-правило существует, политики в БД нет ни в каком виде → правило удалено. +3. Проход без расхождений выполняет **ровно один** привилегированный вызов (`link-list`) и ноль мутаций. Проверять по счётчику вызовов фейкового applier либо по журналу вызовов в интеграционном тесте. +4. Правило с чужим comment в той же цепочке не трогается ни при каких условиях. +5. Дубликат правила с одинаковым comment: при `Active` остаётся один, при `Disabled` не остаётся ни одного. +6. Политика, падающая всегда, при висящем маркере не вызывает более одного прохода за интервал после исчерпания попыток; маркер при этом не потребляется. +7. `link-list` при отсутствующей таблице → exit 79, проход прерван, одно агрегированное событие, ноль мутаций, маркер сохранён. +8. Retention удаляет завершённую Disabled-политику старше срока и **не** удаляет действующую и политику с расхождением. + +**Контрактные (`tests/bootstrap/test-bootstrap-contract.sh`):** арность `link-list`, формат вывода на фикстуре, игнорирование чужого comment, отказ на подделанном comment, `reconcile-status` при отсутствующем каталоге mesh. + +**Acceptance (`tests/acceptance/three-server-mesh.sh`):** новый шаг под `SMM_ACCEPT_RESTORE=1` — вручную добавить на Hub accept-правило для отключённой политики (`link-connect` через helper напрямую), дождаться прохода, убедиться, что правило снято и `expect_blocked` для соответствующего Node выполняется. Шаг ставить рядом с существующим шагом firewall-restore. + +--- + +## 4. Definition of Done + +- [ ] Проход реконсиляции обнаруживает и снимает accept-правило, которому не соответствует действующая политика `Active`, **включая случай `Disabled/Disabled`** +- [ ] `IsEligibleForFullReconciliation` удалён, а не расширен +- [ ] Проход без расхождений — один привилегированный вызов; подтверждено тестом +- [ ] Чужие правила в цепочке не затрагиваются; подтверждено тестом +- [ ] Стабильно падающая политика не вызывает более одного прохода за интервал +- [ ] `Examined` / `Converged` / `Failed` разведены, потребители обновлены +- [ ] Links-страница читаема при сотнях исторических политик; retention настраивается и не трогает действующие политики +- [ ] Неактивированный в mesh Node не отображается как ошибка применения политики +- [ ] Логика сходимости существует в одном экземпляре +- [ ] Порядок блокировок не изменён, новых классов не введено +- [ ] B3-7 закрыты +- [ ] `docs/roadmap.md` обновлён: B-3 отмечен, M2/M4/M5 сняты из отложенных +- [ ] CI зелёный на PR + +--- + +## 5. Вне scope + +- Блок C (подписанный manifest, совместимость версий, пиннинг Actions) — отдельная задача после B-3. +- Провиженинг, роль Monitor в bootstrap, MVVM-рефакторинг Desktop, локализация — задачи следующего уровня. +- Physical acceptance — внешний блокер, см. раздел 7. + +--- + +## 6. Формат сдачи + +Как в предыдущих блоках: + +- `REPORT.md` — статус, база, коммиты, PR, ссылки, что реализовано, что отложено и почему; +- `TEST_EVIDENCE.md` — фактические результаты прогонов и честный список невыполненного; +- патч и/или zip изменённых файлов; +- `CI_CHECKS.txt` — имена, длительности и URL всех проверок; +- `INDEPENDENT_REVIEW.md`; +- `SHA256SUMS` — считать **последним действием**, после всех правок отчётов, и включать все файлы пакета. + +Независимому review передавать **полный текст этого ТЗ**, а не только диф. На двух предыдущих блоках это дало находки того класса, который при diff-only ревью не ищется вовсе: пропущенные требования, а не ошибки в написанном коде. + +Статус блока по итогам merge формулировать как `merged / verified`, а не «выполнено», если хоть один критерий выражен через фактическую связность и не проверялся на реальной топологии. + +--- + +## 7. Внешний блокер + +Physical acceptance не выполнялся ни разу за три блока. Требуются `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE` и прогон + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh +``` + +Harness к этому готов и уже содержит сценарий `firewall-restore` без перезапуска Node. До прогона пункт «выполнить физический acceptance» Этапа 3 roadmap и критерий B6 остаются открытыми независимо от состояния CI. Исполнитель закрыть этот пункт не может. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-B3R-spec-2026-08-04.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-B3R-spec-2026-08-04.md new file mode 100644 index 0000000..58f2a9e --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task-B3R-spec-2026-08-04.md @@ -0,0 +1,204 @@ +# ТЗ: B-3R — репарация Block B-3 до пригодного к merge состояния + +Репозиторий реализации: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` +Ветка: `hermes/task3-b3-fact-reconciliation`, база `b11c277`, изменения не закоммичены. +Исходное ТЗ: `smm-task-B3-spec-2026-08-03.md` — остаётся в силе целиком, этот документ его не заменяет, а добавляет условия приёмки. + +Пакет `Task3-B3-2026-08-04` — промежуточный (`STATUS-WIP.md` + первичный review), кода в нём нет. Проверку проводил по рабочей копии напрямую. + +--- + +## 1. Что подтверждено независимо + +Обе блокирующие находки первичного review — **реальны и в текущем состоянии рабочей копии не закрыты**. Проверял по коду, а не по отчёту. + +### B1 подтверждён + +`src/ServerMonitorManager.Control/LinkService.cs`: + +```csharp +:416 if (persisted) +:418 await VerifyFactualStateAsync(current, expectedConnected, cancellationToken); + +:431 else if (!persisted) +:433 current = current with { ActualState = completedState, LastError = null }; +``` + +DB-less orphan удаляется сырым `link-disconnect`, после чего успех **присваивается синтетическому объекту без единой проверки факта**. Доказательства, что все handles с этим comment исчезли, нет. + +Для persisted-политики проверка есть, но идёт через `link-status`, а `status_rule` по-прежнему вызывает `lookup_node_ip` для обоих узлов. Если Node отсутствует или не активирован, helper возвращает 80 **уже после успешного удаления правила**, и `ConvergeAsync:444-455` записывает `PendingActivation` / `mesh.node-not-activated`. + +Дальше в `ReconcileAllAsync:274-284` классификация такова, что `PendingActivation` не попадает ни в `Converged`, ни в `Failed`. Возможен результат `Examined=1, Converged=0, Failed=0`, при котором фоновый сервис видит `Failed == 0` и **потребляет marker**, хотя фактический результат не подтверждён. + +### B2 подтверждён + +`deploy/ochenstarik-smm-policy-apply:37-44`: + +```bash +lookup_node_ip() { + record="$(awk -F '\t' -v node="$node_id" '$1 == node { print; exit }' "$STATE_FILE")" + [[ -n "$record" ]] || node_not_activated + ip="$(awk -F '\t' '{ print $2 }' <<<"$record")" + [[ "$ip" =~ $ipv4_pattern ]] || fail "node has no valid mesh address: $node_id" +``` + +Читается только второе поле. Четвёртое — статус — не читается никогда. `reserve_node_address` пишет строку `node10.77.0.x-reserved`, `peer-add` меняет статус на `active`. Значит зарезервированный, но не активированный Node проходит проверку, и `link-connect` создаёт accept-правило. Exit 80 возникает только при полном отсутствии строки — случай, которого в реальной топологии не бывает, потому что строку создаёт сам `node-code`. + +Новый тест моделирует именно отсутствующую строку и поэтому дефект не ловит. Воспроизведение ревьюера на production-shaped фикстуре считаю корректным. + +### Что уже сделано правильно и ломать не надо + +- `disconnect_rule` больше не вызывает `lookup_node_ip` — удаление правила перестало зависеть от `nodes.tsv`. Это верное направление, сохранить. +- `list_rules` разбирает только managed-comment, проверяет арность 5 полей, node-паттерны, протокол и диапазон порта, отбрасывает подделки в stderr, чужие правила не выводит. +- `reconcile-status` возвращает `complete` при отсутствующем каталоге mesh; добавлена явная проверка `-x /usr/sbin/nft`; режим `SMM_POLICY_LISTING_FILE` для контрактных тестов. +- `Examined` / `Converged` / `Failed` разведены, `FailedPolicyIds` пробрасывается. + +--- + +## 2. Обязательные исправления + +### R1 — верификация факта только через `link-list` (закрывает B1) + +Корень дефекта: проход стал fact-first, а верификация осталась per-link через `link-status`. Отсюда и пропуск проверки для DB-less, и зависимость от `nodes.tsv`, и лишние привилегированные вызовы. + +Сделать: + +1. `VerifyFactualStateAsync` переписать на `link-list`: считать число записей с ключом `(source, target, protocol, port)`. + - ожидается `Active` → **ровно 1**; + - ожидается `Disabled` или DB-less orphan → **ровно 0**; + - любое иное число — отказ применения с явным кодом. +2. Убрать условие `if (persisted)` вокруг верификации. DB-less orphan проверяется теми же правилами, что и persisted. +3. Убрать присваивание `current with { ActualState = completedState }` без предшествующей проверки. Синтетический объект имеет право получить `Disabled` только после подтверждённого нуля записей. +4. Верификация удаления **не должна** зависеть от наличия узла в `nodes.tsv`. `link-list` этого не требует — после перехода зависимость исчезает сама. +5. Оптимизация, которую даёт этот же переход: в проходе выполнять **один** финальный `link-list` после всех мутаций и сверять по нему все затронутые ключи разом, вместо вызова на каждую мутацию. Требование «проход без расхождений — один привилегированный вызов» из B3-2 сохраняется; для прохода с `k` мутациями допускается ровно два вызова (стартовый и верифицирующий). + +### R2 — исчерпывающая классификация результата (закрывает вторую половину B1) + +Ввести явный третий класс — `Deferred` — и инвариант: + +``` +Converged + Failed + Deferred == Examined +``` + +Инвариант проверять в коде (нарушение — исключение либо `LogError` с идентификаторами) и отдельным тестом. Ни одно состояние не должно молча выпадать из классификации. + +**Решение, которое нужно принять явно, потому что иначе оно будет принято неправильно:** + +- `PendingActivation` — это `Deferred`, а не `Failed`. Это ожидаемое устойчивое состояние: Node зарезервирован, `peer-add` ещё не выполнен, и так может продолжаться сутками. +- `Deferred` **не блокирует** потребление marker. Иначе один зарезервированный Node навсегда удержит маркер и вернёт ровно тот бесконечный цикл проходов каждые 30 секунд, который был закрыт в B-2 и B3-3. +- Marker блокирует только `Failed`, и на него уже действует ограничение в три попытки. +- `Deferred` обязан быть видимым: отдельное событие (`link.pending-node-activation` уже есть), отдельная подпись в Desktop, отражение в журнале прохода. Ошибкой не называется. + +`LinkFullReconciliationResult` и `LinkReconciliationResult` дополнить полем `Deferred` и списком `DeferredPolicyIds` по образцу `FailedPolicyIds`. + +### R3 — читать статус узла в `lookup_node_ip` (закрывает B2) + +Разбирать минимум два поля — адрес и статус — и различать три исхода: + +| Строка в `nodes.tsv` | Результат | +|---|---| +| статус `active`, валидный IPv4 | успех | +| статус `reserved` (или любой не-`active`) | exit **80**, точный маркер `mesh.node-not-activated` | +| статус `active`, IP пустой или невалидный | exit **78** — повреждённое состояние, fail-closed | +| строки нет вовсе | exit **80** | + +Неизвестное значение статуса трактовать как не-`active` только если оно проходит валидацию формата; мусор в поле — это exit 78, а не 80. Fail-closed при сомнении. + +Тесты обязаны использовать **production-shape** фикстуру из четырёх полей, разделённых табуляцией: + +``` +source 10.77.0.2 key-source active +target 10.77.0.3 - reserved +``` + +Три случая: `reserved` + валидный IP → 80; `active` + валидный IP → успех; `active` + невалидный IP → 78. Тест на полностью отсутствующую строку сохранить, но он не заменяет перечисленные. + +### R4 — source-generated сериализация orphan audit (H1) + +Заменить анонимный тип в `ControlStore.cs:1376-1398` именованным DTO, добавить его в source-generated JSON-контекст Control и сериализовать через `Context.Default.`. Мотив не в предупреждениях компилятора, а в том, что отказ произойдёт **после** мутации firewall и **после** публикации `link.orphan-removed`, дав противоречивую телеметрию. + +Дополнительно к тому, что предложил review: проверить не локально, а прогоном опубликованного `linux-x64 PublishTrimmed` артефакта по orphan-пути и сверкой содержимого audit-записи. Разово, руками, с приложением вывода в `TEST_EVIDENCE.md`. + +Порядок операций зафиксировать явно: запись audit — до публикации финального события успеха. + +### R5 — Linux integration test на новый протокол (H2) + +`tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs` остался на протоколе `link-status`-first: fake helper не реализует `link-list`, ожидаемый журнал вызовов начинается с `link-status`. На Windows тест выходит по `OperatingSystem.IsLinux() == false`, поэтому заявленные локальные 85/85 дефект не показывают, а `linux-control-agent.yml` гоняет Control-тесты на Ubuntu, где пропуска не будет. + +Сделать: + +- реализовать `link-list` в fake helper; +- переписать ожидаемый журнал на fact-first протокол; +- проверить: no-drift → ровно один `link-list`; отсутствующая таблица классифицируется прямо на `link-list` без промежуточной мутации; мутация сопровождается финальной верификацией через `link-list`; DB-less raw disconnect проходит верификацию; +- прогнать Control suite **на Linux**, а не только на Windows. + +Пока это не сделано, утверждение «CI зелёный» не имеет оснований: PR не создан, Linux-прогон не выполнялся. + +### R6 — убрать fail-open default в интерфейсе (M1) + +`ILinkPolicyApplier.ListRulesAsync` с телом по умолчанию, возвращающим пустой список, означает, что забытая реализация молча сообщает «firewall пуст» — для источника истины о факте это худший из возможных дефолтов, и он уже позволил старым test doubles скомпилироваться без нового протокола. Сделать `ListRulesAsync` и raw `ApplyDisconnectAsync(LinkRule, …)` обязательными членами интерфейса, все test doubles обновить явно. + +### R7 — читаемость вложенных scope (L1) + +Переформатировать `LinkService.cs:181-229` и `240-293` либо вынести обработку одного tuple и одного orphan в приватные методы без дублирования логики сходимости. Порядок блокировок `sorted node locks → per-Link gate` должен быть виден глазами, а не восстанавливаться разбором отступов. + +--- + +## 3. Дополнительные тесты к обязательным из исходного ТЗ + +1. DB-less orphan: helper сообщает успех удаления, но правило осталось → проход обязан классифицировать это как `Failed`, а не как успех. +2. Persisted `Disabled`, узел отсутствует в `nodes.tsv` → удаление подтверждается через `link-list`, состояние становится `Disabled`, а не `PendingActivation`. +3. Marker не потребляется, если хоть один элемент попал в `Failed`; потребляется, если остались только `Converged` и `Deferred`. +4. Инвариант `Converged + Failed + Deferred == Examined` на смешанном наборе из шести политик. +5. Проход с `k` мутациями выполняет ровно два привилегированных вызова `link-list`. +6. Production-shape `reserved` → exit 80 (см. R3). +7. Зарезервированный Node в течение десяти последовательных проходов: `Deferred` каждый раз, marker потребляется, число проходов не превышает расписание. + +--- + +## 4. Definition of Done B-3R + +- [ ] Верификация факта выполняется только через `link-list`, счётом записей, одинаково для persisted и DB-less +- [ ] Синтетический успех без проверки факта отсутствует в коде +- [ ] Верификация удаления не зависит от `nodes.tsv` +- [ ] `Converged + Failed + Deferred == Examined` выполняется и проверяется тестом +- [ ] `PendingActivation` классифицирован как `Deferred`, marker им не блокируется, состояние видно в UI и журнале +- [ ] `lookup_node_ip` читает статус; `reserved` → 80, `active` + битый IP → 78; тесты на production-shape фикстуре +- [ ] orphan audit сериализуется через source-generated контекст; проверено на опубликованном trimmed артефакте +- [ ] Linux integration test переведён на fact-first протокол и **прогнан на Linux** +- [ ] `ListRulesAsync` и raw disconnect — обязательные члены интерфейса +- [ ] Все пункты DoD исходного ТЗ B-3 по-прежнему выполняются +- [ ] PR создан, CI зелёный — впервые для этой ветки +- [ ] Финальный независимый review получает **полный текст исходного ТЗ B-3 и этот документ**, а не только диф + +--- + +## 5. Формат сдачи + +Как в предыдущих блоках: `REPORT.md`, `TEST_EVIDENCE.md`, патч и/или ZIP, `CI_CHECKS.txt`, финальный `INDEPENDENT_REVIEW.md`, `SHA256SUMS` — считать последним действием, после всех правок отчётов, включая все файлы пакета. + +Промежуточный пакет из двух файлов, как сейчас, — нормальная практика для отчёта о ходе работ, если он так и назван. Финальный обязан быть полным. + +Статус по итогам merge формулировать как `merged / verified, physical acceptance pending`. + +--- + +## 6. Оценка первичного review + +Обе блокирующие находки верны, воспроизведение B2 корректно, разбор границ безопасности содержательный. Ревьюер честно указал, что `dotnet` в его окружении отсутствует и заявленные 85/85 он не воспроизводил — и именно из этого сделал правильный вывод про H2, что Linux-прогон обязателен. Это ровно тот способ работы, который нужен. + +Практика передачи ревьюеру полного текста ТЗ продолжает окупаться: B2 и H2 — пропущенные требования, а не ошибки в написанном коде, при diff-only ревью они не находятся. + +--- + +## 7. Внешний блокер, без изменений + +Physical acceptance не выполнялся ни разу за четыре блока. Нужны `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE` и прогон + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh +``` + +Harness готов и содержит и firewall-restore, и инъекцию orphan-правила. Критерий B6 и пункт «выполнить физический acceptance» Этапа 3 roadmap до этого прогона остаются открытыми при любом состоянии CI. Исполнитель закрыть их не может. + +Следующий блок после B-3R — **Блок C**, доверенная поставка, по разделу 3 документа `smm-task-4-2026-08-03.md`. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task2-blockB-review-2026-08-03.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task2-blockB-review-2026-08-03.md new file mode 100644 index 0000000..9bd591c --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-task2-blockB-review-2026-08-03.md @@ -0,0 +1,125 @@ +# Ревью пакета Task 2 / Block B (2026-08-03) + +Пакет: `C:\Users\Ochenstarik\Сюда\Panel control\Task2-Block-B-2026-08-03\` +База: `ba14d29` (PR #10 — Block A, уже в `main`) +Ветка: `hermes/task2-b-link-reconciliation`, 14 файлов, 550/108 + +## Вердикт: **доработать до commit** + +Код, который написан, написан хорошо и оба независимых review по нему корректны. Но **центральное требование Block B не выполнено**, и оба review этого не увидели, потому что проверяли диф на внутреннюю непротиворечивость, а не на соответствие постановке задачи. Ниже — доказательство. + +--- + +## 1. Целостность пакета + +`SHA256SUMS` не сходится: + +| Файл | Статус | +|---|---| +| `block-b-current.diff` | ✅ совпадает | +| `block-b-modified-files.zip` | ✅ совпадает | +| `INDEPENDENT_REVIEW_CHANGES_REQUESTED.txt` | ✅ совпадает | +| `REPORT.md` | ❌ `effa0b90…` в списке против `a3b74e5b…` фактически | +| `TEST_EVIDENCE.md` | ❌ `52c154de…` против `3c7d01c6…` | +| `INDEPENDENT_REPAIR_REVIEW_APPROVE.txt` | ❌ отсутствует в `SHA256SUMS` | + +Полезная нагрузка (диф и zip) верифицируется — содержательно пакет целый. Расхождение объясняется тем, что суммы посчитали до финального обновления отчётов. Но: следующий блок задачи 2 (Block C) целиком про то, что контрольные суммы и manifest должны быть достоверны. Пересчитывать `SHA256SUMS` последним действием, после всех правок отчётов, и включать в него все файлы пакета. + +--- + +## 2. Что сделано хорошо + +- `link-status` — строгий вывод `active`/`disabled`, `lookup_node_ip` перед статусом, отказ при неизвестном действии и при лишних аргументах (есть тест). +- `rule_exists` теперь **fail-closed**: `nft list chain` с ненулевым кодом приводит к `fail`, а не к «правил нет». Раньше `grep -Fq` на пустом выводе молча означал бы «правила нет» → ложный disconnect. Это правильное и важное изменение, покрытое контрактной проверкой в `test-bootstrap-contract.sh`. +- Exit code больше не считается доказательством применения политики: после каждой мутации идёт `VerifyFactualStateAsync`, состояние в БД отражает пробу, а не факт запуска процесса. Тест `LinkServiceDoesNotPersistCommandSuccessAsFactualSuccess` бьёт ровно в это. +- Реконсиляция перестала быть «только для Disabled» — `ReconcileLinksForNodeAsync` приводит Link к его desired-состоянию в обе стороны. +- Node-локи с глобальной сортировкой, освобождением частично захваченных при отмене и порядком node → link. Цикла блокировок нет — проверил все четыре пути (`CreateAsync`, `DisableAsync`, `ReconcileLinksForNodeAsync`, `ReenrollAgentAsync`): ни один не берёт link-gate раньше node-lock. Вывод repair-review здесь верен. +- Idempotency-replay больше не «съедает» прерванную привилегированную операцию: ранний возврат только для завершённых состояний. +- Acceptance-скрипт получил `expect_factual_status` и проверяет desired+actual+lastError, а не только `actualState`. Проверки добавлены и в ветки `SMM_ACCEPT_RESTORE` и `SMM_ACCEPT_REBOOT`. +- Desktop показывает desired/actual/drift/error/version, контракт закреплён в `Test-DesktopContracts.ps1`. + +Обе HIGH-находки первого review закрыты по существу, а не косметически, и на каждую есть регрессионный тест. + +--- + +## 3. Главное: P0-2 закрыт только наполовину + +**Реконсиляция по-прежнему запускается ровно из одного места** — обработчика heartbeat: + +``` +Program.cs:353 if (mutation.RequiresReconciliation) + await linkService.ReconcileLinksForNodeAsync(heartbeat.NodeId, ct); +``` + +Условие взведения флага (`ControlStore.RecordHeartbeatAsync`): + +```csharp +var reconnectThreshold = TimeSpan.FromSeconds(Math.Max(60, nextHeartbeatSeconds * 3)); // 90 с +var requiresReconciliation = previousStatus != "Online" + || previousLastSeenAt is null + || now - previousLastSeenAt >= reconnectThreshold; +``` + +То есть реконсиляция происходит **только если Node пропадал из виду ≥ 90 секунд**. Ни `IHostedService` со стартовым проходом, ни периодического прохода в дифе нет; `ExpireDueLinksAsync` работает исключительно по выборке `ListExpiredLinksAsync` (TTL), здоровый `Active`-Link с `TtlMinutes = 0` не пересматривается никогда. + +**Незакрытые сценарии — те самые, ради которых блок и затевался:** + +1. **`ochenstarik-smm-emergency firewall-restore`.** Команда удаляет и пересоздаёт `inet ochenstarik_smm`, все accept-правила исчезают, **ни один Node не уходит в offline**. Флаг не взводится, реконсиляция не запускается. В БД и в новом красивом UI — `Desired=Active`, `Actual=Active`, «Расхождение: нет». Фактически трафик заблокирован. `docs/linux-bootstrap.md:111` прямо обещает, что Control переприменит правила — обещание по-прежнему не выполняется. +2. **`systemctl restart ochenstarik-smm-firewall`** — то же самое, руками или из будущего update-сценария. +3. **Быстрый перезапуск Hub.** Если простой Control меньше 90 секунд (перезапуск сервиса, быстрый reboot VM, `update-control`), `previousStatus` остаётся `Online`, разрыв меньше порога — реконсиляции не будет. Правила при этом уже стёрты юнитом firewall при загрузке. +4. **Link между двумя Node, ни один из которых не переподключался** — например, Hub перезагрузился, Node A отчитался и был реконсилирован, Node B продолжал слать heartbeat без разрывов. Links, где B — единственный участник, останутся неприменёнными. + +Сформулировано в задаче это было пунктами **B2.1** («при старте Control **и далее периодически**, интервал `Control__LinkReconciliationSeconds`») и **B4** (маркер от emergency-команды). Ни то, ни другое не реализовано, и в `REPORT.md` это не отмечено как сознательный перенос. + +Почему это пропустили оба review: первый смотрел «безопасно ли коммитить этот диф», второй — «закрыты ли две HIGH». Полноту относительно постановки не проверял никто. На будущее — в промпт независимого review стоит класть текст задачи, а не только диф. + +**Что доделать (это и есть остаток Block B):** + +- `LinkReconciliationBackgroundService : BackgroundService` — проход при старте Control и далее раз в `Control__LinkReconciliationSeconds` (валидация 30…3600, по умолчанию 300), по всем Link, а не по одному Node. +- Отдельная трактовка «таблицы нет» ≠ «правил ноль». Сейчас при отсутствии таблицы `link-status` падает с кодом 78, исключение ловится и каждый Link по очереди получает `Failed`/`Partial` с текстом ошибки от helper'а. Оператор видит N разных ошибок вместо одного внятного «mesh firewall не загружен». Нужен код возврата helper'а, отличающий отсутствие таблицы, и событие `mesh.firewall-missing` + перевод всех затронутых Link в `Partial` без попытки массового переприменения. +- Маркер от `ochenstarik-smm-emergency firewall-restore`, по которому фоновый сервис делает внеочередной проход и снимает маркер после успеха. +- Тест: правила стёрты, **ни один Node не переподключался** → в пределах одного интервала связность восстановлена. Именно этот тест и ловит текущий пробел. +- В acceptance-скрипт: сценарий `firewall-restore` (или `nft delete table`) без reboot Node, затем `expect_reachable` после интервала реконсиляции. + +--- + +## 4. Замечания среднего уровня + +**M1. Поиск Link по id через полное перечисление.** `CreateAsync` и `ConvergeDisabledCoreAsync` делают `(await store.ListLinksAsync(ct)).SingleOrDefault(c => c.Id == link.Id)`, `ReconcileLinksForNodeAsync` внутри цикла заново вызывает `ListEffectiveLinksForNodeAsync(nodeId)` для каждого кандидата. Это O(N) чтений и десериализаций на операцию, **под захваченной блокировкой**. При этом в `ControlStore.cs:1460` уже есть приватный `ReadLinkAsync(id)` — достаточно опубликовать `GetLinkAsync(string id, CancellationToken)` и заменить все три места. Иначе 100-node нагрузочный тест из Этапа 5 начнёт деградировать по мере роста числа политик. + +**M2. Семантика `LinkReconciliationResult.Reconciled` изменилась молча.** Раньше счётчик означал «привёл в порядок», теперь — «рассмотрел», включая Link, уже находящиеся в нужном состоянии. Это видно в изменённом тесте: `Assert.Equal(new LinkReconciliationResult(1, 0), disabledResult)` при `Assert.Equal(beforeReconnect, applier.DisconnectCalls)` — то есть «1 реконсилирован» при нуле мутаций. Если счётчик где-то попадёт в метрики или события, смысл будет ложным. Развести на `Examined` / `Converged` / `Failed`. + +**M3. Каждая проба статуса — отдельный `sudo`-процесс.** Реконсиляция N Link'ов теперь порождает до 3N процессов (`link-status`, мутация, повторный `link-status`). Для периодического прохода из п.3 это станет заметно. `link-apply-batch` (правила списком на stdin, одна транзакция `nft -f`) и пакетный `link-status` были в задаче — перенести в остаток блока. + +**M4. Links-страница стала журналом.** Фильтр `link.DesiredState != "Disabled" || link.ActualState == "Partial"` убран, теперь выводятся все строки таблицы `links` навсегда. Retention для `links` в `ControlMaintenance` нет (чистятся только `metric_samples`, `idempotency`, `audit`, токены). Через несколько месяцев список станет нечитаемым. Нужен либо фильтр по умолчанию «только действующие + расхождения» с переключателем, либо retention для завершённых Disabled-политик. + +**M5. Проба статуса для зарезервированного, но не активированного Node.** `status_rule` вызывает `lookup_node_ip` и падает, если Node есть в `nodes.tsv` со статусом `reserved` без адреса или отсутствует. Теперь это происходит не только при мутации, но и при каждой пробе — Link к такому Node будет регулярно перебрасываться в `Failed`. Стоит отличать «Node ещё не активирован в mesh» от «helper сломан» и не считать первое ошибкой применения политики. + +--- + +## 5. Мелочи + +**L1.** `CompactError`: `Split(['\r', '\n'], …)` заменено на `Split([(char)13, '\n'], …)`. `(char)13` — это и есть `'\r'`. Изменение ничего не делает и ухудшает читаемость; похоже на артефакт инструмента, спотыкающегося о `\r` в патче. Вернуть как было. + +**L2.** `TEST_EVIDENCE.md` упоминает временный verifier `C:\Users\...\Temp\hermes-verify-t0w3drk4.sh`, «временно оставлен до commit checkpoint». Удалить до коммита; в отчёт такие файлы попадать не должны. + +**L3.** `Test-DesktopContracts.ps1` не был перезапущен после backend-правок («заблокирован approval timeout»). Формально backend-правки XAML не трогают, но перед PR прогнать. + +**L4.** Physical acceptance не выполнялся — это честно указано и не выдаётся за пройденное. Это правильно. Но критерий выхода Block B (`B6`) без него не закрывается, поэтому блок нельзя объявлять завершённым по факту merge — только по факту прогона `three-server-mesh.sh` с `SMM_ACCEPT_REBOOT=1` на реальной тройке. + +--- + +## 6. Порядок действий + +1. Убрать L1, L2. Пересчитать `SHA256SUMS` по всем файлам пакета последним шагом. +2. Доделать раздел 3 — фоновый реконсилятор, различение «таблицы нет», маркер emergency, тест «правила стёрты без переподключения Node». +3. M1 (`GetLinkAsync`) — дёшево и снимает риск деградации; M2 — переименование полей. +4. M3, M4, M5 — можно отдельным PR, но до объявления блока закрытым. +5. Прогнать `Test-DesktopContracts.ps1`, коммит, PR, CI. +6. Physical acceptance на тройке — выдать SSH/topology inputs, без этого критерий B6 остаётся открытым. + +Пункт 2 — обязательный для закрытия P0-2. Всё остальное из этого списка блокирующим не является. + +## 7. Вне scope + +Block C (подписанный manifest, совместимость версий, пиннинг Actions) — по `smm-task-2-2026-07-31.md`, раздел 3. Начинать после закрытия пункта 2. diff --git a/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-vision-review-2026-08-04.md b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-vision-review-2026-08-04.md new file mode 100644 index 0000000..548e51f --- /dev/null +++ b/agents/_salvage-2026-08-18/smm-deliverables/Старые задачи/smm-vision-review-2026-08-04.md @@ -0,0 +1,151 @@ +# Оценка документа «Полные доработки и интеграция с KAgent» + +Оценивается против фактического состояния `main` @ `b11c277` (+ незакоммиченный B-3R). + +--- + +## 1. Общий вердикт + +Документ качественный по содержанию и неверный по калибровке. + +**Что в нём хорошо.** Он написан на языке, который проект уже установил: desired/factual state, typed provisioning, immutable plan, execution grant, deny-by-default, `NeedsReconciliation`, emergency recovery, capability model. Это не наивный список желаний — автор понимает модель безопасности SMM и почти нигде её не нарушает. Пункт 42 ставит физический acceptance первым приоритетом, что ровно соответствует тому, что блокирует проект четвёртый блок подряд. + +**В чём проблема.** Это не «доработки». Это спецификация другого продукта, примерно в 5–10 раз больше существующего, поданная как список улучшений — без разделения на «следующий релиз» и «когда-нибудь», без единого упоминания того, что уже начато и не закончено, и без признания одного факта: **provisioning-движок сегодня выполняет ровно одно мутирующее действие — смену таймзоны**, и то с жёстким гейтом `IsTimezoneOnly`, который отвергает всё остальное. + +Для сопоставления масштабов: в документе 21 provisioning-действие, 6 VPN-модулей, полноценный Web UI с паролями, TOTP, WebAuthn и RBAC, централизованные логи, Secret Vault, Backup Manager с четырьмя типами хранилищ, multi-Hub с защитой от split-brain и весь слой KAgent с протоколом, capability-моделью и жизненным циклом Worker'ов. Существующая кодовая база — около 5 тысяч строк C# — потребовала двенадцати PR, чтобы дойти до двух provisioning-действий, из которых одно read-only. + +Отдельно: в существующем ТЗ `docs/provisioning-vpn-requirements.md` этапы 9–13 не начаты вообще. Новый документ не отменяет их и не ссылается на них — он кладётся сверху. + +--- + +## 2. Что пропущено, хотя уже в работе + +Это самое серьёзное замечание к документу: он не упоминает ни один из открытых пунктов, от которых зависит всё остальное. + +| Пропущено | Почему это блокирует документ | +|---|---| +| **Подписанная поставка (Блок C)** | Каждый Node обновляется из release-архива, а bootstrap сверяет хэш с файлом, лежащим рядом в том же релизе. Кто может опубликовать релиз, тот ставит произвольный root-код на весь парк. Документ добавляет установку KAgent Worker'ов и шесть VPN-модулей — то есть увеличивает поверхность поставки, не закрыв её. | +| **Роль Monitor в bootstrap** | SSH-мониторинг — флагманская функция Desktop — не имеет серверной части: нет `install-monitor`, нет forced-command скрипта, нет создания пользователя. Документ строит поверх мониторинга alert engine, Docker, systemd и security posture. | +| **Физический acceptance** | Не выполнялся ни разу за четыре блока. Пункт 42 его называет, но не как гейт, а как первый пункт списка. | +| **Ротация сертификатов** | Клиентские сертификаты живут год, автопродления нет. Документ добавляет ещё одну identity (`KAgentIntegration`) с собственным сроком и revocation state. | +| **Доверенная подпись Windows MSIX** | До сих пор test-signed. | + +Любой из этих пунктов дешевле любого раздела нового документа и является для него предусловием. + +--- + +## 3. Конкретные архитектурные возражения + +### 3.1. Web UI ломает текущую модель угроз, и это не отмечено (§3, §17) + +Вся конструкция SMM держится на трёх утверждениях: у Node нет публичного API, Control доступен только по mTLS, порт Control не должен быть открыт без ограничений firewall. README говорит это прямым текстом. + +Раздел 3 вводит браузерный HTTPS-интерфейс с email + паролем на том же Hub. Это ровно тот публичный аутентифицируемый surface, от которого проект отказался. Плюс появляется вторая система идентичности: mTLS-сертификаты устройств (поток `SMMDEV1`) и веб-сессии должны как-то согласовываться в RBAC — в документе об этом ни слова. + +Если Web UI нужен, требуется явно решить: отдельный listener и порт, отдельная цепочка сертификатов, обязательный reverse proxy, rate limiting, CSRF, привязка сессии к устройству, и правило, что операции класса «firewall / CA / удаление Node» доступны **только** по mTLS-идентичности, а не по веб-сессии. Иначе компрометация пароля даёт то, чего не давал даже Operator-сертификат. + +### 3.2. Централизованные логи не лягут на текущее хранилище (§8) + +Модель хранения сегодня — SQLite с retention по `metric_samples`. Логи journald + Docker + nftables + SSH + reverse proxy со всех узлов — это другой порядок объёма. «Search, filters, retention, correlation» поверх SQLite на Hub с одним диском не работает; заодно раздувается Control DB, а с ней и все резервные копии, которые документ же требует шифровать и проверять восстановлением. + +Нужно принять решение явно: либо отдельное хранилище, либо выгрузка вовне, либо только tail на узле без центрального retention. Сейчас раздел написан так, будто это ещё одна таблица. + +### 3.3. KAgent Worker — самая опасная функция документа, и её инвариант не сформулирован (§30–32, §36) + +Суть: внешняя AI-система просит SMM установить на сервер runtime исполнения кода и открыть к нему сетевой путь. `allowed_capabilities: git.clone, code.build, code.test` означает **произвольное исполнение кода по построению** — сборка репозитория запускает его build-скрипты. + +Документ делает многое правильно: Operator approval в жизненном цикле (§31), лимиты ресурсов (§36), emergency controls (§35), карантин. Но нигде не сказано главное: + +> Worker недоверенный. Он изолируется не от внешнего мира, а от control plane. + +Отсюда конкретные требования, которых в документе нет: Worker не имеет доступа к сокету provisioning-helper, к сертификатам Agent, к `nodes.tsv` и к Control API; работает в отдельном network namespace; временные Links (§32) **никогда** не могут иметь destination = Hub или другой Worker; лимиты систем­ные (`CPUQuota`, `MemoryMax`) не заменяют seccomp/AppArmor/read-only rootfs, а дополняют их. + +Это не придирка: сейчас provisioning-helper слушает Unix-сокет с правами `0660 root:ochenstarik-smm-agent`, и в B-2 пришлось добавлять `SO_PEERCRED`, потому что членства в группе оказалось недостаточно. Worker на той же машине — новый локальный субъект рядом с этим сокетом. + +### 3.4. «Denied by default» для части возможностей должно быть «never grantable» (§28) + +Список `firewall.apply, users.modify, ca.rotate, node.delete, secrets.read, root.execute` назван «denied by default» — формулировка подразумевает, что их можно включить. Для `ca.rotate`, `root.execute` и `secrets.read` это должно быть архитектурным запретом, а не настройкой: соответствующий код просто не должен существовать в пути KAgent-идентичности. + +Прецедент в проекте уже есть и он правильный: Automation-сертификат физически не может мутировать Links — не «по умолчанию», а вообще. Ту же строгость нужно перенести сюда. + +### 3.5. Discovery-сокет повторяет решённую проблему (§26) + +`/run/server-monitor-manager/integration.sock` с правами `0640 root:smm-integrations` — та же схема, что у provisioning-helper. И тот же дефект, если не оговорить: членства в группе недостаточно, нужна проверка `SO_PEERCRED` с фиксацией ожидаемого uid, таймаут соединения, ограничение параллелизма и rate limit. Всё это уже написано в `ProvisioningHelperServer` — переиспользовать, а не изобретать заново. + +### 3.6. Шесть VPN-модулей вместо одного доведённого (§16) + +WireGuard, AmneziaWG, Xray Reality, Hysteria2, TUIC, Shadowsocks — каждый со своим preflight, install, update, disable, verify, rollback, kill switch, routing exclusions, reboot-тестом и ротацией секретов. В существующем ТЗ был один Xray, и он не начат. + +Шесть наполовину сделанных VPN-модулей хуже, чем ноль: каждый — это правила маршрутизации и kill switch, то есть потенциальная потеря доступа к серверу. Довести один до физической приёмки, и только потом обсуждать второй. + +### 3.7. Multi-Hub: фаза 1 разумна, фазы 2–3 преждевременны (§15) + +«Backup DB/CA, encrypted storage, restore verification, manual failover» — по сути уже почти есть (`backup-create` / `backup-restore` и проверенные архивы). Реплика­ция, split-brain protection и кворум для двух Hub'ов с общим CA — это отдельный сложный проект, который не имеет смысла до физической приёмки одного Hub'а. + +### 3.8. AI diagnostics и remediation должны идти через тот же конвейер (§22, §25) + +Раздел 22 корректен как read-only совет. Но §25 говорит, что SMM принимает от KAgent запросы на `remediation` — и вот здесь нужно явно: любой такой запрос порождает обычный typed provisioning job с immutable plan, execution grant, подтверждением Operator'а и factual verification. Никакого отдельного «быстрого пути для AI». Формально это следует из §10, но написано недостаточно жёстко для функции, которая будет соблазнять сделать исключение. + +### 3.9. Версии в примерах не соответствуют реальности (§29, §40) + +`"version": "1.4.0"` при фактическом `v0.1.0-alpha.5`. Мелочь, но она задаёт неверную рамку: документ читается как описание существующей системы, хотя описывает желаемую. В протоколе интеграции версии — это контракт, и путать их нельзя. + +--- + +## 4. Что в документе просто хорошо + +- **Пункт 42** — приоритеты расставлены здраво, и физический acceptance стоит первым. Это правильно и совпадает с тем, что я пишу четвёртый блок подряд. +- **§10 provisioning catalog и §11 desired/factual** — прямое и корректное продолжение существующей модели, без изобретения новых механизмов. +- **§18 approval policies** — режимы `none / operator / re-auth / owner / two-person / time-window / emergency-only` это то, чего сейчас не хватает: сегодня подтверждение бинарное. Хорошая и недорогая идея. +- **§35 emergency controls** и **§39 поведение при недоступном KAgent** — правильный fail-safe: SMM продолжает работать без AI-слоя, неопределённый результат уходит в `NeedsReconciliation`. Это ровно та дисциплина, которую проект уже соблюдает. +- **§28 capability model** структурно верна: разделение `.read` и `.request` означает, что KAgent не исполняет, а просит. Это единственно правильная форма интеграции с AI-системой. +- **§5 формат alert rule** и **§18 формат политик** — компактные, версионируемые, пригодны как есть. + +--- + +## 5. Рекомендация по структуре работ + +Разбить на горизонты с жёсткими гейтами. Переход к следующему горизонту запрещён до закрытия предыдущего. + +### Горизонт 0 — закрыть начатое (ничто новое не стартует) + +- B-3R до merge, Linux CI, зелёный PR; +- **физический acceptance** на реальной тройке — снимает блокер, висящий четыре блока; +- Блок C: подписанный manifest, проверка совместимости версий, пиннинг Actions; +- роль Monitor в bootstrap — иначе флагманская функция не устанавливается; +- ротация и срок жизни сертификатов. + +### Горизонт 1 — сделать продукт пригодным для одного владельца + +- provisioning: `locale`, `packages`, `swap`, `user.create/disable`, `ssh.key.add/remove` — по одному модулю через уже готовый каркас; +- firewall editor и двухфазная миграция SSH (этап 10 существующего ТЗ, самая опасная и самая ценная часть); +- alert engine + Telegram **только на чтение** (`/status`, `/servers`, `/alerts`); +- Docker и systemd — сначала read-only наблюдение, действия позже; +- Backup Manager: local + S3, расписания, проверка восстановлением. + +### Горизонт 2 — платформа + +- Web UI и вся аутентификация, с явным решением по §3.1; +- Secret Vault (он же предусловие для Telegram-токена, S3-ключей и VPN-подписок); +- централизованные логи с принятым решением по хранилищу; +- security posture; +- multi-Hub фаза 1; +- **один** VPN-модуль до физической приёмки. + +### Горизонт 3 — KAgent + +Только после Горизонта 1, и вот почему: безопасность всего слоя KAgent держится не на коде KAgent, а на том, что typed provisioning, approval, audit, execution grant и factual verification **реально работают**. Сегодня они работают для одной таймзоны. Строить поверх них установку удалённых исполнителей кода — значит проверять эту машинерию сразу на самом опасном сценарии. + +Внутри горизонта порядок из §42 (пункты 8 → 9) правильный: сначала discovery, identity, чтение Nodes и метрик, и только потом Worker lifecycle. + +Отдельно: §25 обещает KAgent'у доступ к Docker, services, backups, drift, capacity и security posture — ничего из этого не существует. API для KAgent нельзя проектировать против несуществующих данных; спроектировать нужно против того, что есть (nodes, metrics, links, jobs), и расширять по мере появления. + +--- + +## 6. Итог + +Документ стоит сохранить как **целевое видение продукта**, но нельзя использовать как план работ: в нём нет ни одного гейта, он не упоминает незакрытое и уравнивает по важности физическую приёмку WireGuard и мониторинг GPU. + +Практический вывод: взять из него §18 (approval policies), §28 (capability model), §35 (emergency controls) и §42 (приоритеты) — это готовые к применению вещи. Остальное разложить по горизонтам выше и вернуться к разделу KAgent после того, как хотя бы пять provisioning-модулей и миграция SSH пройдут физическую приёмку. + +И до всего этого — выдать topology inputs и прогнать `SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh`. Это по-прежнему единственное, что не может сделать исполнитель, и оно дешевле любого раздела этого документа. diff --git a/agents/antigravity/done/.gitkeep b/agents/antigravity/done/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/antigravity/inbox/.gitkeep b/agents/antigravity/inbox/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/antigravity/inbox/from-smm-deliverables/smm-antigravity-task-console-links-2026-08-18.md b/agents/antigravity/inbox/from-smm-deliverables/smm-antigravity-task-console-links-2026-08-18.md new file mode 100644 index 0000000..5da0ca1 --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/smm-antigravity-task-console-links-2026-08-18.md @@ -0,0 +1,78 @@ +# Antigravity: управление Links и журнал событий в веб-консоли + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- База: `main` @ `7c43977` +- Ветка: `antigravity/console-links` +- `main` защищён: PR обязателен, обязательны статусы `build-and-test` и `build`, force-push запрещён +- один PR — одна тема; описание PR заполняется **после** завершения CI +- отчёт — раздел в описании PR; отдельным файлом отчёт не является + +## Задача + +Консоль сейчас показывает узлы и Links и выдаёт коды регистрации. Создать Link или отключить его из неё нельзя. + +Links — это главная функция продукта: направленный доступ от одного узла к другому по протоколу и порту, с ограниченным сроком жизни и возможностью мгновенно отозвать. Пока их нельзя ни выдать, ни отозвать из интерфейса, продуктом в его основном назначении пользоваться невозможно — только руками через API с клиентским сертификатом. + +**Новых эндпоинтов не требуется, все нужные уже есть.** Работа целиком в консоли. + +## Что использовать + +| Действие | Эндпоинт | +|---|---| +| Список | `GET /api/v1/control/links` | +| Создать | `POST /api/v1/control/links` | +| Отключить | `POST /api/v1/control/links/{id}/disable` | +| Журнал | `GET /api/v1/control/events` | + +Тело создания — `LinkPolicyCreateRequest`: `SourceNodeId`, `TargetNodeId`, `Protocol`, `Port`, `TtlMinutes`, `Reason`, `IdempotencyKey`. Отключение — `LinkPolicyDisableRequest` с `IdempotencyKey`. + +## Требования + +**1. Показывать желаемое и фактическое раздельно.** `LinkPolicy` содержит `DesiredState`, `ActualState` и `LastError`. Расхождение между желаемым и фактическим — не деталь реализации, а суть системы: правило может быть заказано, но ещё не применено на узле, или примениться с ошибкой. Схлопывать оба поля в один значок «активно» нельзя. Расхождение должно быть заметно само, без вчитывания, и `LastError` показывается, когда он есть. + +**2. Создание — с явным подтверждением направления.** Link открывает сетевой доступ. Перед отправкой показать человеку одной строкой, что именно произойдёт: «с узла A к узлу B, протокол, порт, на N минут». Направленность — свойство модели, и перепутанные местами источник и цель дают работающее правило, открывающее доступ не туда. + +**3. `Reason` обязателен и осмысленный.** Он идёт в журнал и остаётся единственным следом того, зачем доступ открывали. Пустое поле или пробел не принимать. + +**4. Отключение — быстрое и заметное.** Это аварийный рычаг: когда он нужен, его ищут в спешке. Действие доступно из строки списка, без перехода на другую страницу, и подтверждается одним шагом. + +**5. `IdempotencyKey` генерируется на клиенте** и не повторяется между разными операциями. При повторной отправке той же формы, например по второму нажатию кнопки или после потери связи, ключ остаётся прежним, чтобы не создать два правила вместо одного. + +**6. Срок жизни виден.** Для каждого Link показать, когда он истекает, а не только `TtlMinutes`, заданный при создании. + +**7. Журнал событий.** Отдельный раздел со списком из `GET /events`: что произошло, с каким узлом, когда. Достаточно чтения, фильтры не требуются. + +**8. Ошибки сервера показывать текстом.** Если создание отклонено проверкой, оператор должен увидеть причину, а не молчаливое ничего. + +## Чего не делать + +- не добавлять эндпоинты в Control: всё нужное существует; +- не трогать выдачу кодов регистрации и вход по паролю — они уже работают; +- не добавлять операций, которых нет в списке выше: удаление узлов, перезапуск служб, правка сертификатов в консоль пока не входят. + +## Границы + +Codex ведёт `deploy/**`, релизный пайплайн и проверку релиза. **Не трогать:** `deploy/**`, `.github/workflows/**`, `tests/bootstrap/**`, `tests/release-verification/**`. + +Ваша область: `src/ServerMonitorManager.Control/wwwroot/**`, `tests/ServerMonitorManager.Control.Tests/**`. Правки в `src/ServerMonitorManager.Control/Program.cs` допустимы, только если без них не обойтись, — опишите зачем. + +## Тесты + +Существующие проверки консоли должны продолжать проходить: анонимный доступ отклонён, роли `Agent` и `Automation` запрещены, ассеты отдаются из ресурсов сборки при отсутствии `wwwroot` на диске. + +Добавить проверку, что разметка консоли содержит элементы управления Links и раздел журнала, — по образцу существующего `WebConsoleHtmlContainsRequiredUiElementsAndWarning`. + +## Критерий приёмки + +- из консоли можно создать Link и отключить его; +- желаемое и фактическое состояние показаны раздельно, `LastError` виден при наличии; +- перед созданием показано направление, порт и срок одной понятной строкой; +- `Reason` обязателен, пустой не принимается; +- `IdempotencyKey` генерируется клиентом и устойчив к повторной отправке; +- виден момент истечения каждого Link; +- есть раздел журнала событий; +- ошибки сервера показываются текстом; +- новых эндпоинтов в Control не появилось; +- PR, CI зелёный, PR не смержен до зелёного. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-addendum-queue-b-2026-08-10.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-addendum-queue-b-2026-08-10.md new file mode 100644 index 0000000..08603c0 --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-addendum-queue-b-2026-08-10.md @@ -0,0 +1,42 @@ +# Дополнение к заданию «подписанная поставка, очередь B» + +Основное задание — `smm-antigravity-task-queue-b-2026-08-10.md`, оно в силе. Здесь только то, что изменилось, пока вы работали. + +## Что сделано правильно + +- `UpdateService.cs` и `UpdateServiceTests.cs` — часть 1 на месте; +- `verify_manifest` в bootstrap через `cosign verify-blob` в keyless-режиме, issuer и identity-regexp вынесены константами, `SMM_ALLOW_UNSIGNED` как аварийный выход — ровно как требовалось; +- пин identity на `linux-release.yml` совпал с новой политикой релизов, см. ниже. + +## Обязательно перед коммитом + +### 1. Ребейз на текущий `main` + +Ветка стоит на `ad180e9` и отстаёт на четыре коммита. За это время Hermes слил два PR: + +- **#32** — правит `deploy/ochenstarik-server-monitor-manager.sh`, тот же файл, где вы добавляете `verify_manifest`; +- **#33** — вводит политику релизов и переносит `smm-setup.sh` в репозиторий. + +Ребейзиться до коммита, а не после: конфликт в одном файле разбирать проще, пока изменения не зафиксированы. + +### 2. Убрать мусор из корня + +`ci_log.txt` и `ci_log2.txt` лежат неотслеживаемыми в корне репозитория. Удалить либо занести в `.git/info/exclude`. В коммит они попасть не должны. + +## Что учесть после ребейза + +`docs/release-policy.md`, появившийся в #33, меняет часть условий вашей задачи: + +- **`linux-release.yml` — единственный публикатор релизов.** `windows-release.yml` переведён в manual-only и ассеты больше не публикует. Ваш `COSIGN_IDENTITY_REGEXP` пинит именно `linux-release.yml`, так что он верен — но теперь это не совпадение, а зафиксированное правило, и в комментарии рядом с константой стоит сослаться на `docs/release-policy.md`. +- **Опубликованный тег неизменяем.** Исправления после публикации требуют нового тега. Ваша проверка в Desktop и в bootstrap должна исходить из этого: несовпадение хэша или подписи — это повод отказаться, а не перекачать «на всякий случай». +- **`smm-setup.sh` теперь отслеживается как `deploy/smm-setup.sh`**, его SHA-256 записывается в подписанный manifest, а release-workflow копирует в релиз именно этот файл. Установщик обязан брать ассеты **только того же тега** и проверять контрольную сумму bootstrap до запуска. Если ваши изменения в `deploy/smm-setup.sh` понадобятся — это теперь обычный файл репозитория, правится как код, но с оглядкой на то, что его хэш попадает в manifest. +- Временный обход бага `validate_control_url` из `smm-setup.sh` уже удалён Hermes'ом — возвращать его не нужно. + +## Уточнение к критерию приёмки + +К списку из основного задания добавляется: + +- ветка ребейзнута на `main`, содержащий #32 и #33; +- `ci_log*.txt` отсутствуют в коммитах и в рабочем дереве; +- константа `COSIGN_IDENTITY_REGEXP` сопровождена ссылкой на `docs/release-policy.md`; +- проверка в Desktop и в bootstrap отказывает, а не пытается обойти, при любом несовпадении подписи или хэша. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-cert-lifecycle-2026-08-09.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-cert-lifecycle-2026-08-09.md new file mode 100644 index 0000000..03f33a0 --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-cert-lifecycle-2026-08-09.md @@ -0,0 +1,86 @@ +# Antigravity: жизненный цикл клиентских сертификатов + +## Сначала — слить открытые PR + +Три PR зелёные и ждут merge. Слить **до** начала новой работы, иначе всё придётся ребейзить дважды: `main` уехал на `d645812` (B-3R), а PR #14 и #15 сделаны от `b11c277`. + +Порядок: + +1. **#13** — `docs/product-horizons-and-integration`, только документация, конфликтов нет; +2. **#14** — `antigravity/repo-hygiene`; +3. **#15** — `antigravity/reproducible-builds`. + +#14 и #15 трогают одни и те же два workflow, но в разных местах: #14 меняет строки `uses:`, #15 — строки `run:` с восстановлением. Автослияние должно пройти; если нет — ребейз #15 поверх #14, а не наоборот. + +После merge проверить, что `main` зелёный: обе ветки сделаны от старой базы, а B-3R с тех пор добавил файлы. + +## Приёмка PR #15 — принято + +Все три дефекта закрыты правильно: + +- разделение `dotnet format whitespace` и `dotnet format style` вместо общего вызова, аналайзеры сохранены, подавлений в `.editorconfig` нет — это был предпочтительный из трёх вариантов; +- RID в lock-файлах; +- `-p:RestoreLockedMode=true` на всех семи шагах `publish`, включая release-workflow. + +--- + +## Новая задача + +### Репозиторий и ветка + +- База: `main` после merge трёх PR выше +- Ветка: `antigravity/cert-lifecycle` +- Рабочая папка: `C:\Users\Ochenstarik\projects\smm-antigravity` + +Полная постановка — в `smm-hermes-task-cert-lifecycle-2026-08-06.md`, она остаётся в силе целиком. Ниже только то, что изменилось с 6 августа. + +### Зачем это сейчас + +Пункт Горизонта 0, который не начинал никто. Hermes занят блокирующим дефектом регистрации Node, а без сертификатов гейт не закрывается всё равно. + +`CertificateAuthority.cs` выдаёт клиентские сертификаты сроком на год, автопродления нет ни у Agent, ни у Operator. Через год после развёртывания весь парк одновременно перестаёт проходить mTLS, и восстановление потребует ручной перерегистрации каждого Node одноразовым кодом. Процедуры ротации Control CA в проекте нет вообще. + +### Объём + +По документу от 6 августа: срок в конфигурации с валидацией, автопродление Agent за треть срока через действующий mTLS-канал, продление Operator-сертификата Desktop, событие `certificate.expiring`, документ `docs/certificate-rotation.md`, семь тестов. + +### Разграничение с Hermes — изменилось + +Hermes ведёт ветку `hermes/node-enrollment-fix` и трогает: + +``` +src/ServerMonitorManager.Agent/AgentOptions.cs +src/ServerMonitorManager.Agent/Program.cs +src/ServerMonitorManager.Agent/ServerMonitorManager.Agent.csproj +src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj +deploy/ochenstarik-server-monitor-manager.sh +tests/acceptance/three-server-mesh.sh +tests/bootstrap/test-bootstrap-contract.sh +.github/workflows/* (расширение smoke-теста) +``` + +**Не трогать ничего из этого списка.** В частности: правки в `Agent/Program.cs` для продления сертификата вносить нельзя — если понадобится, описать нужное изменение в `REPORT.md`, Hermes внесёт у себя. + +Ваша область: `CertificateAuthority.cs`, `CertificateLifecycleService.cs`, `AgentClient.cs`, `ControlOptions.cs`, `Control/Program.cs`, `appsettings.json`, Desktop, новый `docs/certificate-rotation.md`, тесты сертификатов. + +Пересечение по `.csproj` возможно: Hermes добавляет `EnableConfigurationBindingGenerator` в Agent и Control. Вам `.csproj` менять не нужно — если понадобится, согласовать. + +### Дополнительное требование, которого не было 6 августа + +Сегодня выяснилось, что `AgentOptions` теряет конфигурацию при `PublishTrimmed=true`, потому что в нём нет `[DynamicDependency]`, который есть в `ControlOptions`. Дефект прожил недели и был найден только запуском на живом сервере. + +Поэтому: **всё, что вы добавите в конфигурацию, обязано проверяться на опубликованном trimmed-артефакте, а не только в тестах.** Новая настройка срока сертификата — не исключение. В `TEST_EVIDENCE.md` показать, что значение из `control.env` действительно доходит до кода в собранном релизном бинарнике, а не подменяется умолчанием. + +Простейшая проверка: задать заведомо невалидное значение и убедиться, что сервис отказывается стартовать с внятной ошибкой валидации. Если стартует — конфигурация не читается. + +### Критерий приёмки + +Как в документе от 6 августа, плюс: + +- новая настройка срока подтверждена на опубликованном `linux-x64 PublishTrimmed` артефакте; +- `git diff --name-only main` не содержит ни одного файла из списка Hermes; +- CI зелёный, PR не смержен. + +### Отчёт + +Раздельно: локально, в CI со ссылками, не проверялось и почему. Описание PR обновлять **после** завершения CI. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-cert-pr-and-deps-2026-08-10.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-cert-pr-and-deps-2026-08-10.md new file mode 100644 index 0000000..13633d3 --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-cert-pr-and-deps-2026-08-10.md @@ -0,0 +1,115 @@ +# Antigravity: довести сертификаты до PR и разобрать dependabot + +## Состояние + +- `main` @ `80b4797` — содержит `fix(enrollment): repair node enrollment path (#24)` от Hermes; +- ветка `antigravity/cert-lifecycle` @ `9d2fe1c` — CI зелёный, с `main` сливается без конфликтов, PR не открыт; +- открыто шесть PR от dependabot: #18–#23. + +--- + +## Часть 1 — доделать `antigravity/cert-lifecycle` + +Работа принята по существу: `ClientCertificateDays` в `ControlOptions` с умолчанием 30 и сохранённым `[DynamicDependency]`, `AddYears(1)` заменён на `AddDays(...)`, автопродление Agent при остатке меньше трети с сохранением работы при недоступном Hub, событие `certificate.expiring`, `docs/certificate-rotation.md`, все семь обязательных тестов, 101 тест зелёный. Границы соблюдены — ни одного файла из области Hermes. + +Осталось пять пунктов. + +### 1.1. Ребейз на текущий `main` + +Ветка сделана до merge #24. Конфликтов нет, но база должна быть актуальной: #24 менял привязку конфигурации Agent, а ваша работа трогает `AgentClient.cs`. + +### 1.2. Убрать `TEST_EVIDENCE.md` из репозитория + +Файл закоммичен в корень. Отчёт — артефакт PR, а не содержимое репозитория. Перенести содержимое в описание PR, файл удалить из ветки. + +### 1.3. Проверка на trimmed-артефакте по production-пути + +Сделано было так: + +``` +dotnet publish ... -r win-x64 --self-contained -p:PublishTrimmed=true +.\ochenstarik-smm-control.exe --Control:ClientCertificateDays 999 +``` + +Это командная строка на `win-x64`. В проде конфигурация приходит **переменными окружения** из `control.env` через `EnvironmentFile=` в systemd-юните, на **linux-x64**. Сломанным под триммингом был именно env-путь — в `AgentOptions` не оказалось `[DynamicDependency]`, и Agent молча брал умолчания. + +Повторить проверку так, как оно работает в бою: + +```bash +dotnet publish src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj \ + -c Release -r linux-x64 --self-contained -p:PublishTrimmed=true -p:PublishSingleFile=true -o /tmp/ctl +Control__ClientCertificateDays=999 /tmp/ctl/ochenstarik-smm-control +``` + +Ожидается отказ старта с ошибкой валидации. Если сервис стартует — значение не дошло, и настройка в проде работать не будет. + +Дополнительно проверить обратное: валидное значение из переменной окружения действительно применяется к выпускаемому сертификату, а не подменяется умолчанием 30. Например `Control__ClientCertificateDays=45`, выпустить сертификат, посмотреть `notAfter`. + +Вывод обеих проверок приложить к PR. + +### 1.4. Убрать дублирующий эндпоинт продления + +В `Control/Program.cs` появились два пути продления: + +- `agents.MapPost("/certificate/renew")` — в группе с `RequireAuthorization("Agent")`, всё правильно; +- `app.MapPost("/api/v1/certificates/renew")` — без `RequireAuthorization`, отсекает чужих случайной проверкой на пустой `entityId` и разветвляется по claim роли внутри. + +Второй ведёт себя fail-closed, но держится не на конвейере авторизации, а на том, что у неаутентифицированного запроса не окажется claims. Это не соглашение проекта: рядом в том же файле все защищённые эндпоинты объявлены через группы с политикой. + +Выбрать одно: + +- **предпочтительно** — удалить `app.MapPost("/api/v1/certificates/renew")`, оставив продление Agent в группе `agents`, а продление Operator добавить в группу `control` с `RequireAuthorization("Operator")`; +- либо оставить один общий эндпоинт, но объявить его через группу с политикой, требующей аутентифицированную identity, и разветвление по роли выполнять уже внутри. + +Добавить тест: запрос на продление **без клиентского сертификата** отклоняется, и отклоняется конвейером, а не обработчиком. + +### 1.5. Открыть PR + +После пунктов 1.1–1.4. Описание PR заполнять **после** завершения CI, со ссылками на конкретные прогоны. + +--- + +## Часть 2 — dependabot, отдельным PR каждый + +Шесть открытых PR. Сливать пачкой нельзя: три из них меняют то, от чего зависит воспроизводимость и цепочка поставки. + +### 2.1. Безопасные — слить после зелёного CI + +- **#22** `Microsoft.NET.Test.Sdk` 18.0.1 → 18.8.1; +- **#19** `actions/setup-dotnet` 5.4.0 → 6.0.0; +- **#18** `softprops/action-gh-release` 2.6.2 → 3.0.2. + +Для двух последних убедиться, что dependabot заменил SHA, а не вернул плавающий тег: инвариант «ни одного плавающего тега в `uses:`» из PR #14 должен сохраниться. Проверять на каждом PR: + +```bash +grep -rn 'uses:.*@v[0-9]' .github/workflows/ && echo "НАЙДЕН ПЛАВАЮЩИЙ ТЕГ" || echo "все запинены" +``` + +`action-gh-release` 3.0.x — мажорный скачок, посмотреть changelog на предмет изменения имён входных параметров: он используется в release-workflow, а те **не запускаются на pull request**, поэтому CI поломку не покажет. Это ровно тот класс дефектов, что вы уже ловили в PR #14 с `permissions`. Проверять `actionlint`, а не полагаться на зелёный PR. + +### 2.2. Требуют внимания + +- **#21** `actions/checkout` 6.1.0 → 7.0.1 и **#20** `actions/upload-artifact` 6.0.0 → 7.0.1 — мажорные. `upload-artifact` v7 может менять поведение при отсутствии файлов и формат имён артефактов; в `linux-release.yml` и `windows-release.yml` от имён артефактов зависит сборка релиза. Проверить, что после обновления релизные ассеты собираются с теми же именами: их знает установщик `smm-setup.sh` и bootstrap. + +### 2.3. Не сливать без отдельной проверки + +- **#23** `SQLitePCLRaw.bundle_e_sqlite3` 2.1.12 → **3.0.5**. + +Это мажорное обновление нативной библиотеки под SQLite, на которой держится вся база Control: enrollment, identities, links, provisioning, audit. Требуется: + +- прогон полного Control suite на Linux, не только на Windows; +- проверка миграций на **существующей** базе: взять `control.db`, созданную текущей версией, открыть новой сборкой, убедиться, что `PRAGMA user_version` и данные читаются; +- проверка `backup-create` и `backup-restore` на этой же базе; +- проверка, что self-contained trimmed-публикация под `linux-arm64` не ломается — нативные библиотеки в trimmed single-file собираются иначе, чем под x64. + +Если хоть одна проверка не выполнена, PR не сливать и написать это прямо. Обновление некритично и подождёт. + +--- + +## Порядок + +Часть 1 → 2.1 → 2.2 → 2.3. Сертификаты первыми: это пункт Горизонта 0, а обновления зависимостей подождут. + +## Отчёт + +Раздельно: что проверено локально, что в CI со ссылками, что не проверялось и почему. По части 2 — по каждому PR отдельной строкой с вердиктом «слит / отложен / отклонён» и причиной. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-console-embedded-assets-2026-08-18.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-console-embedded-assets-2026-08-18.md new file mode 100644 index 0000000..9466adc --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-console-embedded-assets-2026-08-18.md @@ -0,0 +1,47 @@ +# Antigravity: покрыть тестом отдачу консоли из ресурсов сборки + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- Ветка: `antigravity/web-console`, открытый PR **#59** +- Работа делается **в этом же PR**, новый не открывать +- `main` защищён: PR обязателен, обязательны статусы `build-and-test` и `build` + +## Задача + +Одна проверка. Ничего в поведении консоли менять не нужно. + +`GetWebConsoleAsset` в `src/ServerMonitorManager.Control/Program.cs` берёт файл из двух источников по очереди: + +1. с диска, по пути `IWebHostEnvironment.WebRootPath`; +2. если файла там нет — из ресурсов сборки, через `GetManifestResourceNames()` и поиск по `EndsWith(fileName)`. + +Тесты поднимают хост в процессе, где `WebRootPath` существует и файлы лежат на диске. Значит проверяется **первая** ветка. + +Control публикуется с `PublishSingleFile=true`, каталога `wwwroot` рядом с исполняемым файлом на сервере нет. Значит на настоящей машине работает **вторая** ветка — та, которую не проверяет ничто. + +## Что сделать + +Добавить в `tests/ServerMonitorManager.Control.Tests/WebConsoleTests.cs` тест, который поднимает хост с несуществующим или пустым `WebRootPath` и убеждается, что при обращении с сертификатом роли `Operator`: + +- `/`, `/index.html`, `/style.css` и `/app.js` отвечают кодом 200; +- `Content-Type` соответствует типу файла; +- тело ответа непустое и содержит опознаваемый фрагмент: для HTML — предупреждение о сверке отпечатка, для JS — обращение к `/api/v1/control/agents`. + +Побочная польза, ради которой это и стоит делать: тест зафиксирует соглашение об именах ресурсов. Поиск идёт через `EndsWith(fileName)`, поэтому переименование каталога `wwwroot` или смена схемы имён сломает отдачу консоли молча, без ошибки сборки. + +## Границы + +**Не трогать:** `deploy/**`, `.github/workflows/linux-*.yml`, `.github/workflows/release-verification.yml`, `tests/release-verification/**`, `tests/bootstrap/**`. + +Ваша область: `tests/ServerMonitorManager.Control.Tests/**`. Если для подмены `WebRootPath` потребуется правка в `src/ServerMonitorManager.Control/**` — допустимо, но опишите зачем. + +## Критерий приёмки + +- тест поднимает хост без каталога `wwwroot` на диске и получает все четыре ресурса; +- существующие проверки ролей продолжают проходить; +- CI зелёный, PR не смержен до зелёного. + +## Отчёт + +В описании PR. Отдельным файлом отчёт не является. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-desktop-update-proof-2026-08-13.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-desktop-update-proof-2026-08-13.md new file mode 100644 index 0000000..7bafbdd --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-desktop-update-proof-2026-08-13.md @@ -0,0 +1,80 @@ +# Antigravity: доказать проверку подписи на стороне Desktop + +## Состояние + +`main` @ `b0ad40c`, открытых PR нет, одна ветка, CI зелёный. Ваша работа по очереди B и проверке релиза вошла в `main` в составе PR #41. + +Ветка: `antigravity/desktop-update-proof`. + +--- + +## Зачем + +`UpdateService` умеет проверять подпись manifest перед обновлением: identity подписи вшита константой, при несовпадении хэша или подписи обновление отклоняется. Тесты к нему есть — но все они работают на **синтетических** данных, которые тот же код и порождает. + +Ни один тест не подаёт `UpdateService` **настоящий** manifest, настоящую подпись и настоящий сертификат из опубликованного релиза. То есть проверено, что код отвергает то, что мы сами испортили, и не проверено, что он принимает то, что реально выпускается. + +Ровно этот разрыв уже дважды дорого стоил. Проверка релиза на стороне Linux падала не из-за логики, а из-за имени ассета и отсутствующего сертификата — вещей, которые синтетические данные не воспроизводят. На стороне Windows такой проверки нет вовсе. + +## Что сделать + +Тест, который берёт материал из настоящего релиза и прогоняет через `UpdateService`. + +1. **Приёмочный тест против опубликованного релиза.** Скачать `server-monitor-manager-manifest.json`, `.sig` и `.pem` тега `v0.1.0-alpha.14` публичным `curl` — без `gh` и без токена, как это делает Desktop у пользователя, — и убедиться, что `UpdateService` принимает их и извлекает ожидаемую версию и хэши. + + Тег задать параметром с умолчанием, чтобы прогон не привязывался к одному релизу навсегда. + +2. **Негативные случаи на том же материале**, а не на сгенерированном: подменённый хэш в настоящем manifest; настоящий manifest с подписью от другой identity; отсутствующий сертификат; сертификат от другого workflow. Все четыре — отказ. + +3. **Сетевой тест не должен ронять обычный прогон.** Пометить его категорией и включать отдельно — в `windows-build.yml` шагом, который явно её запускает. Разработчик без сети должен получать зелёный основной набор. + +4. **Проверить, что Windows CI действительно исполняет эти тесты.** Сейчас `Test Desktop security` запускает проект целиком; убедиться, что новая категория в него попадает, а не отфильтровывается молча. Продемонстрировать намеренной поломкой: испортить ожидаемую identity, показать красный прогон, откатить. + +## Границы + +Hermes выпускает `v0.1.0-alpha.14` и добавляет в `deploy/smm-setup.sh` команды `install-hub` и `install-node`. Он же правит `docs/linux-bootstrap.md` и `docs/release-policy.md`. + +**Не трогать:** `deploy/**`, `.github/workflows/linux-*.yml`, `.github/workflows/release-verification.yml`, `tests/release-verification/**`, `docs/**`. + +Ваша область: `src/ServerMonitorManager.Desktop/UpdateService.cs`, `tests/ServerMonitorManager.Desktop.Security.Tests/**`, и при необходимости шаг запуска тестов в `.github/workflows/windows-build.yml` — этот файл Hermes сейчас не трогает, но изменение согласовать в отчёте. + +Задача зависит от выпуска alpha.14. До его публикации можно писать тесты против `v0.1.0-alpha.9`, но окончательный прогон — против alpha.14: это первый релиз, где сертификат публикуется и подпись проверяема целиком. + +## Критерий приёмки + +- тест принимает настоящий manifest, подпись и сертификат опубликованного релиза; +- четыре негативных случая на настоящем материале отвергаются; +- сетевые тесты отделены категорией и не ломают офлайн-прогон; +- Windows CI их исполняет — подтверждено намеренной поломкой со ссылкой на красный прогон; +- загрузка идёт публичным `curl`, без `gh` и без токена; +- `git diff --name-only main` не выходит за границы; +- CI зелёный, PR не смержен. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. Если тест против настоящего релиза обнаружит расхождение — вынести отдельным разделом, это результат, а не помеха. + +--- + +## Доработка PR #55 — отделить сетевые тесты в workflow + +Проверено 2026-08-18. Выполнено почти всё, и выполнено хорошо: + +- приёмочный тест берёт настоящие manifest, подпись и сертификат опубликованного релиза публичным HTTP, без `gh` и без токена; +- четыре негативных случая на настоящем материале отвергаются; +- исполнение в Windows CI **доказано намеренной поломкой** со ссылкой на красный прогон 32049692162 и на зелёные после отката. Это ровно то, что требовалось пунктом 4, и это первый в проекте отчёт, где утверждение об исполнении подкреплено падением; +- границы соблюдены: один файл. + +**Не выполнен пункт 3.** Требовалось: пометить сетевые тесты категорией **и включать их отдельным шагом в `windows-build.yml`**, чтобы разработчик без сети получал зелёный основной набор. Категория `[Trait("Category", "LiveRelease")]` проставлена, но `.github/` в PR не изменён вовсе. Следствия: + +- шаг `Test Desktop security` по-прежнему запускает проект целиком, поэтому **каждый** прогон Windows CI теперь зависит от доступности github.com. При проверке этого PR GitHub отдавал `HTTP 503` — то есть отказ внешней службы покрасит основной гейт на изменениях, не имеющих к релизам никакого отношения; +- разработчик без сети получает красный набор, если не вспомнит про флаг `--filter Category!=LiveRelease`. Требование было противоположным: зелёный по умолчанию. + +Сделать в `windows-build.yml` два шага вместо одного: + +1. `Test Desktop security` — `dotnet test ... --filter Category!=LiveRelease`. Основной гейт, без сети; +2. `Test Desktop security (live release)` — `dotnet test ... --filter Category=LiveRelease`. Сетевой, обязательный, но отделённый: по его падению сразу видно, что дело в релизе или в сети, а не в логике. + +`windows-build.yml` в запрещённый список не входит — пункт 3 прямо предписывал его изменить. + +**Отдельно, на ваше решение.** Тег зафиксирован как `v0.1.0-alpha.14` с переопределением через `SMM_TEST_RELEASE_TAG`. С тех пор вышли alpha.15–18, и проверка релиза в CI зелёная против alpha.18. Тест доказывает, что проверяется релиз четырёхдневной давности, а не тот, который получают пользователи. Разумно передавать в шаге live-release текущий тег, оставив значение по умолчанию как есть. Если считаете, что фиксация на заведомо годном релизе важнее, — напишите это обоснованием в отчёте, но тогда нужен способ узнать, что новый релиз перестал проходить desktop-проверку. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-locked-restore-fix-2026-08-07.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-locked-restore-fix-2026-08-07.md new file mode 100644 index 0000000..b2725fb --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-locked-restore-fix-2026-08-07.md @@ -0,0 +1,109 @@ +# Починить PR #15: аналайзеры против `dotnet format` и RID-чувствительность lock-файлов + +## Ветка + +- Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +- Ветка: `antigravity/reproducible-builds`, PR #15, HEAD `5ca4832` +- Рабочая папка: `C:\Users\Ochenstarik\projects\smm-antigravity` + +Новую ветку не создавать — доделывается существующая. + +## Состояние + +PR #15 открыт с красным CI: `build` падает дважды, `build-and-test` падает дважды. В описании PR при этом стоит «Verified locally» и «covered by windows-build CI» — ровно тот job, который и падает. + +Дефекты вызваны самим PR, оба воспроизводимы, оба имеют неочевидную причину. Разбор ниже. + +--- + +## Дефект 1 — включение аналайзеров ломает проверку форматирования + +`build-and-test`, шаг `Verify formatting`, exit code 2: + +``` +warning CA1848: For improved performance, use the LoggerMessage delegates … + LinkReconciliationBackgroundService.cs(31,17), (78,21), (91,17) + ControlMaintenance.cs(34,21), (46,17), (74,21), (92,17), (140,13), (212,9) +warning CA1865: Use 'string.StartsWith(char)' instead of 'string.StartsWith(string)' + TimezoneProvisioningExecutor.cs(76,42) +##[error]Process completed with exit code 2 +``` + +Причина: `Directory.Build.props` включил `EnableNETAnalyzers` и `AnalysisLevel=latest-recommended`. `dotnet format --verify-no-changes` проверяет не только форматирование, но и диагностики аналайзеров, и завершается ненулевым кодом при любом их наличии. + +`TreatWarningsAsErrors` был намеренно исключён из задания, чтобы не ломать сборку — но этого оказалось недостаточно: гейт форматирования падает и от обычных warning'ов. + +### Что решить + +Аналайзеры и форматирование — разные проверки, и смешаны они в одном шаге. Выбрать один подход и обосновать выбор в отчёте: + +**Предпочтительно.** Разделить проверки: `dotnet format whitespace --verify-no-changes` и `dotnet format style --verify-no-changes` в CI, а диагностики аналайзеров оставить в сборке как warning'и. Тогда гейт проверяет то, ради чего заведён, а аналайзеры дают сигнал, не блокируя. + +**Допустимо.** Оставить `dotnet format` как есть, но явно подавить конкретные правила в `.editorconfig` с указанием причины для каждого. Тогда список подавленных правил приводится в отчёте с обоснованием по каждому — CA1848 про `LoggerMessage`-делегаты в некритичном по производительности пути это одно, а произвольное глушение всего семейства CA — другое. + +**Недопустимо.** Отключить `EnableNETAnalyzers` или понизить `AnalysisLevel`, чтобы CI позеленел: это отменяет смысл изменения. + +--- + +## Дефект 2 — lock-файлы не учитывают runtime identifier + +`build` (Windows), шаг `Restore`: + +``` +error NU1004: The project's runtime identifiers have changed from. +Project's runtime identifiers: win-x64, lock file's runtime identifiers . +The packages lock file is inconsistent with the project dependencies +so restore can't be run in locked mode. + ServerMonitorManager.Core.csproj [via ServerMonitorManager.Desktop.csproj] +``` + +Причина: `packages.lock.json` фиксирует не только версии, но и набор runtime identifier'ов. Файлы сгенерированы обычным `dotnet restore` без `-r`, поэтому список RID в них пуст. `windows-build.yml` восстанавливает с `-r win-x64`, и `--locked-mode` справедливо отвергает несоответствие. + +Локальная проверка это не поймала: без `-r` восстановление проходит, что и отражено в описании PR как «5 projects restored». + +### Что решить + +Проект публикуется под три RID: `win-x64`, `linux-x64`, `linux-arm64`. Варианты: + +**Предпочтительно.** Объявить `` в проектах, которые публикуются под конкретный RID — `Control`, `Agent`, `Provisioning.Helper`, `Desktop` и транзитивно `Core`, — и перегенерировать lock-файлы так, чтобы они содержали все три RID. После этого `--locked-mode` работает во всех сценариях восстановления. + +**Допустимо.** Отдельные lock-файлы под RID, если предыдущий вариант даёт неприемлемый рост файлов. + +**Недопустимо.** `--force-evaluate`, снятие `--locked-mode` там, где он падает, или удаление `RestorePackagesWithLockFile`: это возвращает исходную невоспроизводимость, ради устранения которой задача и заведена. + +--- + +## Дефект 3 — гарантия не покрывает то, что реально выпускается + +`--locked-mode` добавлен только в `linux-control-agent.yml` и `windows-build.yml` — то есть ровно в те два workflow, которые видны на pull request. Артефакты, которые уходят пользователям, собираются в `linux-release.yml`, `windows-release.yml` и `linux-platform-matrix.yml`, и там восстановление по-прежнему свободное. + +Это тот же структурный промах, что и в PR #14 с `permissions`: проверенным оказалось то, что видно на PR, а непроверенным — путь выпуска. + +Добавить `--locked-mode` во все шаги восстановления и публикации во всех пяти workflow. Именно там воспроизводимость и имеет смысл: подпись артефакта без неё ничего не гарантирует. + +Заметьте, что `linux-platform-matrix.yml` и release-workflow публикуют с `--runtime linux-x64` и `linux-arm64` — то есть дефект 2 обязан быть закрыт до этого шага, иначе упадут и они. + +--- + +## Критерий приёмки + +- `build` и `build-and-test` зелёные на PR #15; +- `--locked-mode` присутствует во всех шагах восстановления и публикации всех пяти workflow; +- продемонстрирована работа гарантии: намеренная правка одного lock-файла во временном коммите даёт красный прогон **на RID-специфичном** восстановлении, затем коммит откатывается — со ссылкой на красный прогон; +- версии пакетов не изменились относительно `main` — показать сравнение; +- выбранный подход по дефекту 1 обоснован; если правила подавлены, каждое перечислено с причиной; +- `git diff --name-only main` не содержит файлов из списка границ прошлого задания: `LinkService.cs`, `LinkPolicyApplier.cs`, `LinkReconciliationBackgroundService.cs`, `ControlStore.cs`, `ControlMaintenance.cs`, `ControlOptions.cs`, `appsettings.json`, `src/ServerMonitorManager.Provisioning.Helper/**`, `deploy/**`, `CertificateAuthority.cs`, `CertificateLifecycleService.cs`, `AgentClient.cs`, содержимое файлов в `tests/**` кроме `.csproj`; +- `TreatWarningsAsErrors` по-прежнему не включён; +- PR не смержен. + +## Отдельное требование к отчёту + +Причина обоих дефектов — вывод сделан до того, как CI отработал. Формулировки «Verified locally» и «covered by windows-build CI» стояли в описании PR в тот момент, когда этот самый job был красным. + +Поэтому: **описание PR обновляется после завершения CI, а не до.** В разделе «Verified in CI» приводятся ссылки на конкретные завершённые прогоны с их статусом. Если прогон красный — это указывается прямо, и PR помечается как черновик. + +Отсутствие проверки — не дефект отчёта. Утверждение о проверке, противоречащее видимому статусу CI, — дефект, и он дороже самой ошибки в коде, потому что обесценивает все последующие отчёты. + +## Порядок + +Дефект 2 → дефект 3 → дефект 1. Первые два связаны: расширение `--locked-mode` на release-workflow невозможно, пока lock-файлы не знают о RID. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-password-login-2026-08-18.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-password-login-2026-08-18.md new file mode 100644 index 0000000..7fd5771 --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-password-login-2026-08-18.md @@ -0,0 +1,58 @@ +# Antigravity: вход в консоль по логину и паролю — только для тестов + +## Когда начинать + +**После слияния PR #59** с веб-консолью. До этого задание не берут: входить будет некуда. + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- База: актуальный `main` после слияния #59; зафиксируйте хеш в отчёте +- Ветка: `antigravity/password-login` +- `main` защищён: PR обязателен, обязательны статусы `build-and-test` и `build` +- один PR — одна тема; описание PR заполняется **после** завершения CI + +## Задача + +Владелец просит вход в консоль по логину и паролю, чтобы не возиться с клиентскими сертификатами во время тестирования. + +Просьба законная, но это второй, заведомо более слабый путь аутентификации рядом с mTLS, на котором держится вся модель доступа. Он не должен незаметно стать основным — так происходит всегда, если не помешать этому сразу. + +## Обязательные условия + +1. **Выключен по умолчанию.** Включается явным параметром конфигурации, имя которого само говорит о назначении, например `Authentication:PasswordLogin:EnabledForTesting`. +2. **При включённом флаге Control пишет предупреждение в лог при каждом старте**, а не один раз при первой настройке. +3. **Пароль хранится подбор-стойким хешем** — Argon2id или bcrypt. Не в конфигурации открытым текстом, не быстрым хешем. +4. **Ограничение частоты попыток и задержка после неудач.** В проекте уже есть политика `"enrollment"` в `Program.cs` — посмотрите, как это сделано, и не изобретайте своё. +5. **Сессия ограничена по времени.** +6. **Роль — `Operator` и не выше.** Доступ к операциям `Automation` и `KAgentIntegration` через пароль не открывается ни при каком значении конфигурации. +7. **Проверка mTLS не ослабляется ни в одной ветке кода.** Если включены оба механизма, сертификат имеет приоритет. + +## Тесты + +- при выключенном флаге вход по паролю недоступен, соответствующие маршруты отвечают отказом; +- при включённом флаге успешный вход даёт роль `Operator` и только её; +- пароль от `Operator` не открывает маршруты `Automation`; +- неверный пароль неотличим по времени ответа от неизвестного пользователя; +- превышение числа попыток приводит к отказу; +- клиентский сертификат продолжает работать при обоих значениях флага. + +## Границы + +Codex ведёт `deploy/**`, релизный пайплайн и проверку релиза. **Не трогать:** `deploy/**`, `.github/workflows/linux-*.yml`, `.github/workflows/release-verification.yml`, `tests/release-verification/**`, `tests/bootstrap/**`. + +Ваша область: `src/ServerMonitorManager.Control/**`, консоль, `tests/ServerMonitorManager.Control.Tests/**`. + +## Критерий приёмки + +- выключено по умолчанию, включается явным флагом; +- предупреждение в логе при каждом старте с включённым флагом; +- пароль хранится подбор-стойким хешем; +- роль ограничена `Operator`; +- mTLS не ослаблен; +- перечисленные тесты присутствуют и проходят; +- PR, CI зелёный, PR не смержен до зелёного. + +## Отчёт + +В описании PR, раздельно: что проверено локально, что в CI со ссылками на прогоны, что не проверялось и почему. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-pr15-continue-2026-08-07.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-pr15-continue-2026-08-07.md new file mode 100644 index 0000000..1c530f9 --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-pr15-continue-2026-08-07.md @@ -0,0 +1,67 @@ +# PR #15: доделать, не отключая аналайзеры + +## Состояние + +Рабочая папка `C:\Users\Ochenstarik\projects\smm-antigravity`, ветка `antigravity/reproducible-builds`, PR #15, последний запушенный коммит `5ca4832` (CI красный). В рабочей копии есть незакоммиченные правки: `Directory.Build.props` и четыре `packages.lock.json`. + +Разбор трёх дефектов — в задании `smm-antigravity-task-locked-restore-fix-2026-08-07.md`, оно остаётся в силе. + +## Дефект 2 — закрыт правильно + +`packages.lock.json` теперь содержат все три RID: + +```json +"net10.0": {}, +"net10.0/linux-arm64": {}, +"net10.0/linux-x64": {}, +"net10.0/win-x64": {} +``` + +Это предпочтительный вариант из задания. Сохранить. + +## Дефект 1 — решается запрещённым способом + +Незакоммиченная правка `Directory.Build.props`: + +```diff +- true +- latest-recommended +``` + +В задании этот вариант назван недопустимым дословно: «Отключить `EnableNETAnalyzers` или понизить `AnalysisLevel`, чтобы CI позеленел: это отменяет смысл изменения». Аналайзеры — половина ценности `Directory.Build.props`; удалив их, PR перестаёт отличаться от простого переноса версий. + +Вернуть обе строки и решить дефект 1 одним из разрешённых способов: + +**Предпочтительно.** Разделить проверки в CI: `dotnet format whitespace --verify-no-changes` и `dotnet format style --verify-no-changes` вместо общего `dotnet format`. Тогда гейт проверяет форматирование, а диагностики аналайзеров остаются warning'ами в сборке и не блокируют. + +**Допустимо.** Оставить общий `dotnet format`, но подавить конкретные правила в `.editorconfig`, перечислив каждое с причиной в отчёте. Сейчас мешают `CA1848` (LoggerMessage-делегаты, десять вхождений в `ControlMaintenance.cs` и `LinkReconciliationBackgroundService.cs`) и `CA1865` (`TimezoneProvisioningExecutor.cs:76`). Подавлять семейство целиком нельзя — только поимённо. + +## Дефект 3 — не сделан + +`--locked-mode` стоит только в двух явных шагах `dotnet restore`. Все `dotnet publish` восстанавливают неявно и без него: + +- `linux-control-agent.yml` — строки 58, 61, 64, 67, 71, 74, 77; +- `linux-platform-matrix.yml` — строки 49, 52, 55; +- `linux-release.yml` — строки 82, 85, 88. + +Это ровно те шаги, которые собирают артефакты, уходящие пользователям. Воспроизводимость, не покрывающая путь выпуска, не решает исходную задачу. + +Добавить `--locked-mode` (либо `-p:RestoreLockedMode=true`) во все перечисленные шаги. Дефект 2 закрыт, поэтому RID-специфичная публикация больше не должна падать по NU1004 — но это надо подтвердить прогоном, а не рассуждением. + +## Критерий приёмки + +- `EnableNETAnalyzers` и `AnalysisLevel=latest-recommended` присутствуют в `Directory.Build.props`; +- `build` и `build-and-test` зелёные; +- `--locked-mode` действует во всех шагах восстановления и публикации всех пяти workflow; +- продемонстрирована работа гарантии: правка одного lock-файла во временном коммите даёт красный прогон **на RID-специфичной публикации**, затем коммит откатывается — со ссылкой на красный прогон; +- версии пакетов не изменились относительно `main`; +- если правила подавлены — каждое перечислено поимённо с причиной; +- `TreatWarningsAsErrors` по-прежнему не включён; +- границы прошлого задания соблюдены: `git diff --name-only main` не содержит `LinkService.cs`, `LinkPolicyApplier.cs`, `LinkReconciliationBackgroundService.cs`, `ControlStore.cs`, `ControlMaintenance.cs`, `ControlOptions.cs`, `appsettings.json`, `src/ServerMonitorManager.Provisioning.Helper/**`, `deploy/**`, `CertificateAuthority.cs`, `CertificateLifecycleService.cs`, `AgentClient.cs`, содержимого файлов в `tests/**` кроме `.csproj`; +- PR не смержен. + +## Отчёт + +Описание PR обновляется **после** завершения CI. Ссылки на конкретные завершённые прогоны с их статусом. Если прогон красный — сказать прямо и держать PR черновиком. + +Отдельно объяснить выбор по дефекту 1: почему выбран именно этот из двух разрешённых вариантов. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-pr37-narrow-2026-08-11.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-pr37-narrow-2026-08-11.md new file mode 100644 index 0000000..17948fb --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-pr37-narrow-2026-08-11.md @@ -0,0 +1,73 @@ +# Antigravity: сузить PR #37 до своей области и довести до зелёного + +## Что получилось + +Главное требование выполнено: **`Release Verification` зелёный против `v0.1.0-alpha.9`**. Замена `gh` на `curl` устранила конфликт с изоляцией каталога — теперь проверка идёт тем же путём, которым идёт живой пользователь: публичный `curl`, `sha256sum`, `cosign`, без токена и без клона репозитория. + +Коммит `19bface` сделан ровно в границах: + +``` +.github/workflows/release-verification.yml +tests/release-verification/run-negative-tests.sh +tests/release-verification/run-positive-installation.sh +``` + +Это тот случай, ради которого workflow и создавался, и он отвечает на главный вопрос: поставка проверку проходит. + +Ветка: продолжать `antigravity/release-verification-fix`. + +--- + +## 1. Убрать коммит `45b1ad3` из PR целиком + +Второй коммит выходит за границы задания полностью — ни один его файл не относится к вашей области: + +``` +README.md +docs/i18n/*.md (12 переводов) +deploy/smm-setup.sh +tests/bootstrap/test-manifest-verification.sh (−17 строк) +tests/bootstrap/test-release-contract.sh +``` + +`deploy/**`, переводы и `tests/bootstrap/**` принадлежат Hermes; он же владеет версией релиза. Сейчас версию бампят двое одновременно — в `main` его `Bump version to v0.1.0-alpha.11`, в вашем коммите бамп до alpha.12. Два сожжённых тега подряд получились в том числе из-за этого. + +Удаление `tests/bootstrap/test-manifest-verification.sh` разберу отдельно, потому что вывод неочевидный. + +## 2. Про удалённый тест — направление верное, обоснование нет + +Тест «Real alpha.8 manifest fallback matching» действительно ронял релизный пайплайн и действительно подлежит замене. Но не по той причине, по которой он удалён. + +Я проверил напрямую: в релизе `v0.1.0-alpha.8` **файла `server-monitor-manager-manifest.json` не существует**, есть только осиротевший `.sig` на 96 байт. Manifest v2 впервые появился в alpha.9. Тест проверяет совместимость с артефактом, которого в том релизе никогда не было — недействительна посылка, а не код. + +Разница существенная. Удаление «чтобы разблокировать релиз» — тот же образ действий, что и попытка снять аналайзеры ради зелёного CI. Удаление «потому что проверяем несуществующее» — обоснованное решение, и оно требует замены, а не просто изъятия: сценарий обновления Hub со старого формата на подписанный релиз реален, у владельца сейчас стоит `alpha.7`. + +Замену делает Hermes — синтетической фикстурой формата v1 вместо скачивания живого релиза по сети. Вам этот файл не трогать. + +## 3. Разобраться с красным `build-and-test` + +PR #37 красный: падает `ControlStoreTests.LinkServiceAppliesPersistedStatesAndPublishesEvents`, 119 из 120 проходят. Исключение возникает в `ControlStore.CreateLinkMutationAsync` через `LinkService.CreateAsync`. + +На `main` при том же коммите `5349533` этот тест проходит. Значит либо ветка что-то задела, либо тест нестабилен. + +Определить, что именно: + +- если после удаления `45b1ad3` тест зеленеет — причина была в нём, зафиксировать в отчёте, что именно ломало; +- если падает и без него — тест нестабилен, и это отдельная находка. Прогнать несколько раз, определить условие, описать в `REPORT.md`. Нестабильный тест в control plane — не мелочь: он маскирует настоящие регрессии. + +Не «перезапустить до зелёного» и не пометить `Skip`. + +--- + +## Критерий приёмки + +- в PR остаётся один коммит `19bface`; `git diff --name-only main` содержит ровно три файла области; +- `build-and-test` зелёный, причина прежнего падения названа в отчёте; +- `Release Verification` по-прежнему зелёный против `v0.1.0-alpha.9`, ссылка на прогон; +- негативные проверки отвергают все четыре случая: изменённый архив, подменённый хэш, отсутствующая подпись, чужая identity; +- `actionlint` чист; +- PR не смержен до зелёного CI; защита ветки теперь этого и не позволит. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. Отдельным разделом — вывод по нестабильности теста, если она подтвердится. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-queue-b-2026-08-10.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-queue-b-2026-08-10.md new file mode 100644 index 0000000..079b876 --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-queue-b-2026-08-10.md @@ -0,0 +1,63 @@ +# Antigravity: подписанная поставка, очередь B + +## Приёмка очереди A + +Queue A принята. В релизе `v0.1.0-alpha.8` присутствуют `server-monitor-manager-manifest.json` и `server-monitor-manager-manifest.sig`, Linux-артефакты и SBOM собираются, пайплайн после трёх починок отрабатывает целиком. Manifest v2 с подписью — это ровно то, чего не хватало для закрытия Горизонта 0 по поставке. + +Ветка: `antigravity/signed-delivery-queue-b`. + +--- + +## Часть 1 — проверка подписи на стороне Desktop · начинать сразу + +Desktop свободен, ни Hermes, ни вы его сейчас не трогаете. + +Сегодня Desktop скачивает и ставит обновления, не проверяя, что артефакт подписан тем, кем должен. Manifest и подпись уже публикуются — осталось их использовать. + +1. Вшить в Desktop **константой** ожидаемую identity подписи: при keyless-режиме cosign это issuer и subject (репозиторий и workflow), при `minisign` — публичный ключ. Не скачивать её вместе с релизом: подпись, проверяемая ключом из того же релиза, ничего не доказывает. +2. Перед предложением обновления: скачать manifest и `.sig`, проверить подпись, сверить хэш артефакта с manifest, и только потом показывать пользователю кнопку обновления. +3. Несовпадение подписи или хэша — отказ с внятным текстом и записью в диагностику. Не предупреждение, не «продолжить всё равно». +4. Отсутствие manifest или подписи в релизе — тоже отказ; путь «старый релиз без подписи» допускается только под явным флагом разработчика, как `SMM_ALLOW_UNSIGNED` в bootstrap. + +Тесты: валидная подпись принимается; подписанный чужой identity manifest отклоняется; manifest с подменённым хэшем отклоняется; отсутствующая подпись отклоняется. + +--- + +## Часть 2 — проверка в bootstrap · после merge задания Hermes + +Hermes сейчас правит `deploy/ochenstarik-server-monitor-manager.sh` — исправляет формат снимка Monitor. **Не заходить в этот файл, пока его PR не смержен.** Момент согласовать. + +После merge: + +1. `verify_archive` сверяет хэш архива **с manifest**, а не с соседним `.sha256`. Старый путь остаётся только под явным `SMM_ALLOW_UNSIGNED=1` с громким предупреждением. +2. Новое действие `verify-manifest MANIFEST SIGNATURE`. +3. Публичный ключ или OIDC-identity вшиты константой в bootstrap. +4. Отсутствие инструмента проверки подписи — отказ, а не предупреждение. +5. Отказ `update-control` и `update-agent` при несовместимой паре версий Control ↔ Agent ↔ helper. Требование `docs/installer-contract.md` §6, невыполненное с самого начала; manifest v2 уже содержит нужные версии. + +--- + +## Чего опасаться + +Release-workflow **не запускаются на pull request** — они триггерятся тегом и `workflow_dispatch`. Зелёный PR про них ничего не доказывает. Вы уже дважды на этом обожглись: `permissions` в #14 всплыли только при первом настоящем релизе, `locked-mode` в #15 — тоже. + +Поэтому обязательно: `actionlint` на всех workflow с выводом в отчёт, и прогон через `workflow_dispatch` на своей ветке. + +Отдельно: если для части 2 понадобится правка workflow — **не вносить самостоятельно**, описать в `REPORT.md`. Release-пайплайн сейчас ведёт Hermes, и три починки подряд за один день были ровно из-за того, что в него правили с двух сторон. + +--- + +## Критерий приёмки + +- Desktop отказывается ставить обновление с неверной, чужой или отсутствующей подписью; четыре теста зелёные; +- identity подписи вшита в Desktop, а не берётся из релиза; +- `verify_archive` работает от manifest, `verify-manifest` существует; +- несовместимые версии блокируют `update-*`; +- `deploy/ochenstarik-server-monitor-manager.sh` не тронут до merge PR Hermes — проверяется историей коммитов; +- `.github/workflows/**` не изменены; +- `actionlint` чист, вывод приложен; +- CI зелёный, PR не смержены. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. Описание PR заполнять после завершения CI. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-release-verification-2026-08-10.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-release-verification-2026-08-10.md new file mode 100644 index 0000000..50e2ecb --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-release-verification-2026-08-10.md @@ -0,0 +1,109 @@ +# Antigravity: проверка опубликованного релиза установкой + +## Состояние + +`main` @ `61471f0`. Открытых PR нет. Очередь B подписанной поставки слита (#35), все замечания по ней закрыты. + +Задание относится к завершению Горизонта 0 — это проверка того, что уже сделано, а не новая функциональность. Гейт горизонта не нарушается. + +Ветка: `antigravity/release-verification`. + +--- + +## Часть 1 — установка из опубликованного релиза как проверка в CI + +### Зачем + +Вся цепочка поставки собрана: manifest v2, подпись cosign, проверка в bootstrap и в Desktop, воспроизводимые сборки. Но **ни один автоматический тест не устанавливает систему из фактически опубликованного релиза.** + +Цена этого пробела уже известна. При первой живой установке нашлись подряд: + +- `alpha.8` был опубликован вообще без Linux-архивов — единственной поддерживаемой серверной платформы; +- `verify_archive` искал в manifest ключ `ServerMonitorManager-linux-x64.tar.gz`, тогда как ассет называется `server-monitor-manager-linux-x64.tar.gz`, и захардкоженную архитектуру — то есть проверка подписи ломала штатную установку; +- release-workflow трижды падали на CycloneDX и путях артефактов. + +Ни одно из этого не ловилось зелёным CI, потому что CI проверяет **сборку из дерева**, а не **релиз как продукт**. Тесты работают с локально собранным архивом; настоящие имена ассетов, настоящий manifest и настоящая подпись в них не участвуют. + +### Что сделать + +Новый workflow, запускаемый после публикации релиза и вручную через `workflow_dispatch` с параметром тега. + +На чистом runner'е, без доступа к дереву исходников кроме самого скрипта установки: + +1. Скачать `smm-setup.sh` из релиза по тегу и проверить его контрольную сумму по опубликованному `.sha256`. +2. Запустить `smm-setup.sh hub <локальный-хост>` — то есть пройти ровно тот путь, которым пользуется владелец: загрузка bootstrap и архива из релиза, проверка контрольных сумм, проверка подписи manifest, `preflight`, `verify-release`, установка Control, `mesh-init`. +3. Проверить, что Control активен и `/healthz` отвечает. +4. Выпустить код Node через `node-code`, установить Node на той же машине, дождаться активного `ochenstarik-smm-agent.service` и выданного сертификата. +5. Проверить `install-monitor`: пользователь создан, forced command выдаёт снимок, поля совпадают с `tests/contracts/monitor-snapshot-v1.txt`. +6. Снять всё через `uninstall-*` и убедиться, что следов не осталось. + +Требования: + +- скрипт установки берётся **из релиза**, а не из рабочего дерева — иначе проверяется не то, что получит пользователь; +- проверка подписи не обходится: `SMM_ALLOW_UNSIGNED` в этом прогоне не используется; +- прогон падает, если в релизе отсутствует любой ожидаемый ассет. + +### Негативные проверки + +Отдельными шагами, каждый обязан завершиться отказом установки: + +- архив с изменённым байтом; +- manifest с подменённым хэшем без переподписи; +- manifest без файла подписи; +- подпись, сделанная другой identity. + +Первые три уже покрыты юнит-тестами против синтетических данных; здесь они проверяются на настоящем релизе и настоящем cosign. + +--- + +## Часть 2 — проверка того, что релиз полон + +Отдельный шаг того же workflow: сверить набор ассетов релиза с ожидаемым списком и упасть при расхождении. + +``` +ochenstarik-server-monitor-manager.sh(+.sha256) +server-monitor-manager-linux-x64.tar.gz(+.sha256) +server-monitor-manager-linux-arm64.tar.gz(+.sha256) +server-monitor-manager-linux-x64-sbom.json +server-monitor-manager-linux-arm64-sbom.json +server-monitor-manager-win-x64-sbom.json +ServerMonitorManager-win-x64.msix +ServerMonitorManager-test-signing.cer +SHA256SUMS +smm-setup.sh(+.sha256) +server-monitor-manager-manifest.json +server-monitor-manager-manifest.sig +``` + +Ровно этой проверки не хватало, когда `alpha.8` вышел без Linux-архивов и это заметил человек, а не CI. + +--- + +## Границы + +Hermes параллельно выпускает `v0.1.0-alpha.10`, правит `deploy/smm-setup.sh` (значение `DEFAULT_RELEASE_TAG`), roadmap, переводы README и удаляет слитые ветки. Может также добавить Debian VM в матрицу. + +**Не трогать:** `deploy/**`, `docs/roadmap.md`, `docs/i18n/**`, `docs/linux-platform-matrix.md`. + +Ваша область — новый workflow и вспомогательные скрипты проверки под `tests/`. Если для задачи потребуется изменить существующий workflow, согласовать: релизный пайплайн ведёт Hermes, и три починки подряд за день случились именно из-за правок с двух сторон. + +## Чего опасаться + +Новый workflow по определению не запускается на pull request — он привязан к публикации релиза. Зелёный PR про него ничего не докажет, ровно как было с `permissions` и `locked-mode`. + +Поэтому обязательно: `actionlint` на новом файле с выводом в отчёт и прогон через `workflow_dispatch` на своей ветке против уже существующего тега `v0.1.0-alpha.9`. Это заодно ответит на главный вопрос — прошла бы проверка на реальном релизе или нет. + +## Критерий приёмки + +- новый workflow выполняет полный цикл установки из опубликованного релиза и снимает её; +- четыре негативные проверки отвергают установку; +- отсутствие любого ожидаемого ассета роняет прогон; +- `SMM_ALLOW_UNSIGNED` в основном прогоне не используется; +- `actionlint` чист, вывод приложен; +- выполнен `workflow_dispatch`-прогон против `v0.1.0-alpha.9`, ссылка в отчёте; +- `git diff --name-only main` не содержит файлов из списка границ; +- PR не смержен. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. Описание PR заполнять после завершения CI. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-release-verification-fix-2026-08-11.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-release-verification-fix-2026-08-11.md new file mode 100644 index 0000000..678f790 --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-release-verification-fix-2026-08-11.md @@ -0,0 +1,80 @@ +# Antigravity: довести проверку релиза до зелёного прогона + +## Состояние + +`release-verification.yml` находится в `main`. Структура задания выполнена: триггеры `release: published` и `workflow_dispatch` с входным тегом, шаги проверки набора ассетов, изоляции рабочего каталога, положительной установки и негативных проверок, три отдельных скрипта под `tests/release-verification/`, `permissions: contents: read`. + +Но **оба выполненных прогона `workflow_dispatch` против `v0.1.0-alpha.9` завершились отказом**, и workflow при этом оказался в `main`. + +Ветка: `antigravity/release-verification-fix`, от текущего `main`. + +--- + +## 1. Почему падает + +Прогон `31419452912`, шаг `Run Positive Installation`: + +``` +rm -rf * .git +... +Running positive installation test for v0.1.0-alpha.9... +failed to run git: fatal: not a git repository (or any of the parent directories): .git +##[error]Process completed with exit code 1. +``` + +Замысел верен: рабочий каталог стирается вместе с `.git`, чтобы установка шла из релиза, а не из дерева исходников. Именно это и требовалось. + +Ошибка в средстве. `run-positive-installation.sh` вызывает `gh release download`, а `gh` без явного `--repo` определяет репозиторий по git-контексту, который только что удалён. Инструмент конфликтует с изоляцией, ради которой всё и делается. + +## 2. Как чинить — и почему именно так + +Формально хватило бы передать `--repo ochenstarik-ui/server-monitor-manager` во все вызовы `gh`. Но правильнее убрать `gh` из проверки совсем. + +Реальный пользователь на чистом сервере не имеет ни `gh`, ни `GH_TOKEN`, ни клона репозитория. Он выполняет ровно то, что описано в `docs/linux-bootstrap.md`: `curl` по публичному адресу релиза, `sha256sum`, затем `cosign` для подписи. Проверка, использующая `gh` с токеном, тестирует путь, которым никто не пользуется, и не заметит поломки публичной загрузки. + +Требование: **в положительном сценарии использовать только те средства, которые есть у пользователя** — `curl`, `sha256sum`, `cosign`. Токен не использовать. Если какой-то ассет недоступен анонимным `curl`, это дефект релиза, и проверка обязана его показать. + +Шаг `Verify Assets List` может продолжать пользоваться `gh` — он выполняется до изоляции и решает другую задачу. + +## 3. Что вернуть в изолированный каталог + +Сейчас после очистки копируется `tests/contracts/monitor-snapshot-v1.txt`. Это правильно: контракт задаёт ожидаемые значения, а не участвует в установке. + +Зафиксировать это явным правилом в комментарии скрипта: из репозитория возвращаются **только ожидания** — контракты, списки, эталонные значения. Ничто исполняемое: ни установщик, ни bootstrap, ни архивы. Иначе изоляция перестаёт что-либо доказывать, а понять это по диффу будет уже нельзя. + +## 4. Обязательное доказательство + +Задание считается выполненным только при **зелёном прогоне `workflow_dispatch` против `v0.1.0-alpha.9`**, ссылка на прогон в отчёте. + +Это тот самый случай, ради которого workflow и создавался: прогон против настоящего опубликованного релиза отвечает на вопрос, прошла бы поставка проверку или нет. Прогон против alpha.9 ценен ещё и тем, что этот релиз собран до всех недавних правок пайплайна. + +Если прогон покажет дефект **релиза**, а не проверки — это успех задачи, а не провал. Зафиксировать находку отдельно и не «чинить» её ослаблением проверки. + +## 5. Процесс + +Изменения провести **через pull request**, не прямым коммитом в `main`. + +Красный workflow попал в `main` потому, что за последние сутки шесть коммитов легли туда напрямую, минуя PR и гейт CI. Hermes параллельно включает защиту ветки: обязательный PR, обязательные статусы, запрет force-push. После этого прямой путь просто закроется. + +Ветку сделать от текущего `main` — она сейчас отстаёт, в `main` вошли синхронизация переводов и правки release contract. + +## Границы + +Hermes ведёт `deploy/**`, `linux-release.yml`, `docs/release-policy.md`, roadmap и переводы; он же выпускает `v0.1.0-alpha.11` и чинит job `bootstrap` в релизном пайплайне. + +Ваша область: `.github/workflows/release-verification.yml` и `tests/release-verification/**`. Остального не касаться; если потребуется — описать в `REPORT.md`. + +## Критерий приёмки + +- положительный сценарий использует только `curl`, `sha256sum` и `cosign`, без `gh` и без токена; +- в изолированный каталог возвращаются только файлы ожиданий, правило записано в скрипте; +- **зелёный прогон `workflow_dispatch` против `v0.1.0-alpha.9`**, ссылка в отчёте; +- негативные проверки по-прежнему отвергают: изменённый архив, подменённый хэш в manifest, отсутствующую подпись, подпись другой identity; +- отсутствие любого ожидаемого ассета роняет прогон; +- `actionlint` чист, вывод приложен; +- изменения внесены через PR, не прямым коммитом; +- `git diff --name-only main` не выходит за границы. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. Описание PR заполнять после завершения CI. Если прогон против alpha.9 обнаружит дефект релиза — вынести отдельным разделом. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-repo-hygiene-2026-08-06.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-repo-hygiene-2026-08-06.md new file mode 100644 index 0000000..78fa93b --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-repo-hygiene-2026-08-06.md @@ -0,0 +1,137 @@ +# Гигиена репозитория и цепочки поставки + +## Репозиторий и ветка + +- Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +- База: `main` @ `b11c277ac7f79a18670932eca4622982d9ff48e0` +- Ветка: `antigravity/repo-hygiene` +- Работать в **отдельном клоне или worktree**. Клон `C:\Users\Ochenstarik\projects\server-monitor-manager` и рабочая копия `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` заняты другими исполнителями; вторая содержит 24 незакоммиченных файла, которые нельзя потерять. + +Задание самодостаточно: истории переписки у исполнителя нет, всё нужное — ниже. + +## Зачем + +Server Monitor Manager устанавливает на серверы бинарники, работающие с правами root, и управляет firewall. При этом: + +- все GitHub Actions подключены по плавающим тегам, то есть содержимое шага сборки может измениться без нашего ведома и без изменения кода репозитория; +- у проекта нет `SECURITY.md` — для инструмента безопасности отсутствие канала сообщений об уязвимостях само по себе дефект; +- нет истории изменений, хотя опубликовано пять предрелизов; +- нет автоматического отслеживания уязвимых зависимостей. + +Задача закрывает это. Она не касается кода, тестов и логики — только цепочки поставки и оформления репозитория. + +## Работы + +### 1. Запинить GitHub Actions по commit SHA + +Полная инвентаризация на базе `b11c277` — 23 подключения, 5 различных действий, 5 файлов в `.github/workflows/`: + +| Действие | Текущий тег | Вхождений | +|---|---|---| +| `actions/checkout` | `@v6` | 8 | +| `actions/setup-dotnet` | `@v5` | 5 | +| `actions/upload-artifact` | `@v6` | 5 | +| `actions/download-artifact` | `@v8` | 2 | +| `softprops/action-gh-release` | `@v2` | 3 | + +Файлы: `linux-control-agent.yml`, `linux-platform-matrix.yml`, `linux-release.yml`, `windows-build.yml`, `windows-release.yml`. + +Формат замены — полный 40-символьный SHA коммита, тег сохраняется комментарием: + +```yaml +uses: actions/checkout@<40-символьный-sha> # v6.x.x +``` + +**Требование, нарушение которого само по себе проваливает задание: SHA нельзя придумывать.** Каждый SHA обязан быть получен из upstream-репозитория действия и соответствовать указанному тегу. В отчёте привести способ получения — например вывод `gh api repos/actions/checkout/git/ref/tags/v6` или `git ls-remote --tags https://github.com/actions/checkout` — для каждого из пяти действий. Если тег указывает на аннотированный объект, разыменовать до commit SHA. + +### 2. Автоматическое отслеживание зависимостей + +`.github/dependabot.yml` с двумя экосистемами: + +- `github-actions`, каталог `/`, еженедельно — чтобы запиненные SHA не превратились в вечно устаревшие; +- `nuget`, каталог `/`, еженедельно. + +Ограничить число одновременно открытых PR разумным значением, чтобы бот не завалил доску. + +### 3. Сузить права workflow + +`linux-release.yml` и `windows-release.yml` объявляют `permissions: contents: write` на уровне всего workflow. Право записи нужно только шагу публикации релиза. + +Перенести `permissions` на уровень job'а публикации; на уровне workflow оставить `contents: read`. Проверить остальные три workflow: если права шире необходимого — сузить, если уже минимальны — оставить и отметить это в отчёте. + +### 4. `SECURITY.md` в корне + +Содержательный документ, не заглушка: + +- канал сообщения об уязвимости — приватный, не публичные issue; +- ожидаемое время первичного ответа; +- какие версии поддерживаются: сейчас alpha, поддерживается последний предрелиз; +- что считается уязвимостью в этом проекте, с опорой на его модель угроз (`docs/security-model.md`): обход разделения ролей, получение root вне typed provisioning, утечка приватных ключей или enrollment-токенов, обход kill switch, подмена артефактов поставки; +- что уязвимостью не считается: известные и задокументированные ограничения alpha — в частности отсутствие подписи release manifest и отсутствие доверенной подписи Windows MSIX, оба пункта открыты в `docs/roadmap.md`. + +### 5. `CHANGELOG.md` + +Формат Keep a Changelog, версии по существующим тегам. Содержание восстанавливать **из git-истории и текстов релизов**, не сочинять. + +Опубликованные предрелизы: `v0.1.0-alpha.1`, `.2`, `.3`, `.4` (все 16.07.2026), `.5` (17.07.2026). + +После `v0.1.0-alpha.5` в `main` вошли PR #6–#12 — они попадают в раздел `Unreleased`. + +### 6. Оформление вклада + +- `CONTRIBUTING.md`: как собрать, как прогнать тесты, требование прогонять Control suite **на Linux** (часть тестов помечена `OperatingSystem.IsLinux()` и на Windows молча пропускается), один PR — одна тема; +- `CODEOWNERS`; +- шаблоны issue (баг, задача) и pull request. В шаблоне PR — обязательный раздел с раздельным перечислением: что проверено локально, что в CI, что не проверялось и почему. + +### 7. SBOM + +Генерация SBOM (`dotnet CycloneDX`) и приложение его к артефактам релиза в `linux-release.yml` и `windows-release.yml`. + +### 8. Удалить слитые ветки + +На origin остались слитые ветки: `agent/remove-lightweight-server-references`, `codex/ttl-backup-acceptance`. Удалить. + +**Не трогать** `hermes/release-alpha.6`, `hermes/sprint1-desktop-security`, `hermes/sprint1-server-security`, `hermes/task2-b-link-reconciliation` — их статус не проверен. `docs/product-horizons-and-integration` — открытый PR #13, не трогать. + +## Границы + +Задание не касается кода. Категорически не изменять: + +- `src/ServerMonitorManager.Control/LinkService.cs`, `LinkPolicyApplier.cs`, `LinkReconciliationBackgroundService.cs`, `ControlStore.cs`, `ControlMaintenance.cs`, `ControlOptions.cs`, `appsettings.json`; +- `src/ServerMonitorManager.Provisioning.Helper/**`, `deploy/ochenstarik-smm-policy-apply`, `deploy/ochenstarik-server-monitor-manager.sh`; +- `src/ServerMonitorManager.Control/CertificateAuthority.cs`, `CertificateLifecycleService.cs`, `src/ServerMonitorManager.Agent/AgentClient.cs`; +- `src/ServerMonitorManager.Desktop/**`, `tests/**`. + +Первые две группы заняты заданием B-3R, третья — заданием по жизненному циклу сертификатов, обе ведутся параллельно. + +Также не входит в задание: + +- `Directory.Build.props`, `Directory.Packages.props`, lock-файлы и `TreatWarningsAsErrors` — отдельная задача; включение сейчас сломает незавершённую ветку; +- изменение логики workflow: шаги, матрицы, условия остаются как есть, меняются только версии действий, права и добавление SBOM; +- merge собственного PR. + +## Критерий приёмки + +- ни одно подключение действия в пяти workflow не ссылается на плавающий тег; все 23 вхождения используют 40-символьный SHA с комментарием-тегом; +- в отчёте для каждого из пяти действий показано, откуда взят SHA; +- `dependabot.yml` покрывает `github-actions` и `nuget`; +- `contents: write` присутствует только на job'ах публикации релиза; +- `SECURITY.md` содержит канал, сроки, поддерживаемые версии и перечень того, что уязвимостью не считается, со ссылкой на открытые пункты roadmap; +- `CHANGELOG.md` соответствует реальным тегам и реальной истории; выдуманных записей нет; +- шаблон PR требует раздельного перечисления локальных проверок, CI и непроверенного; +- слитые ветки удалены, чужие не тронуты; +- ни один файл из списка границ не изменён — проверяется `git diff --name-only main`; +- CI зелёный на PR; +- PR создан, но не смержен. + +## Отчётность + +В описании PR раздельно перечислить: + +- что запущено локально и с каким результатом; +- что запущено в CI, со ссылками на прогоны; +- что не запускалось и почему. + +Физический acceptance (`SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh`) выполнить нельзя — не выданы SSH- и topology-параметры. Contract- и mock-тесты за него не выдавать. + +Отсутствие проверки — не дефект отчёта. Выдача непроверенного за проверенное — дефект, и он обесценивает весь отчёт. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-reproducible-builds-2026-08-07.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-reproducible-builds-2026-08-07.md new file mode 100644 index 0000000..913a590 --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-reproducible-builds-2026-08-07.md @@ -0,0 +1,125 @@ +# Воспроизводимость сборки: централизованные версии пакетов и lock-файлы + +## Часть 1 — сначала исправить PR #14 + +Не начинать новую ветку, пока не закрыты два дефекта в уже открытом PR #14 (`antigravity/repo-hygiene`). Оба находятся в release-workflow, которые **не запускаются на pull request** — они триггерятся только по тегу и `workflow_dispatch`, поэтому зелёный CI на PR их не покрывает. + +### 1.1. `permissions` стоит на уровне шага — это недопустимый ключ + +Три места: `linux-release.yml:63`, `linux-release.yml:127`, `windows-release.yml:86`. + +```yaml + - name: Attach bootstrap to GitHub Release + uses: softprops/action-gh-release@3bb1273… + permissions: # ← уровень шага + contents: write + with: +``` + +В схеме GitHub Actions `permissions` существует только на уровне workflow и на уровне job. У шага такого ключа нет. При срабатывании по тегу workflow либо не загрузится с ошибкой `Unexpected value 'permissions'`, либо шаг выполнится с унаследованным `contents: read` и публикация релиза упадёт с 403. + +Исправление: перенести `permissions: contents: write` на уровень job. В `linux-release.yml` это оба job — `bootstrap` и `publish`; в `windows-release.yml` — `package`. Workflow-уровень оставить `contents: read`. + +Job-уровень — самая мелкая гранулярность, которую даёт GitHub; более узко не бывает. + +### 1.2. SBOM генерируется и выбрасывается + +Три места: `linux-release.yml:57`, `linux-release.yml:111`, `windows-release.yml:67`. + +Файл SBOM не попадает ни в `path:` шага `upload-artifact`, ни в `files:` шага `action-gh-release`. То есть он создаётся и остаётся в рабочем каталоге runner'а. Требование задания «приложить к артефактам релиза» не выполнено. + +Сопутствующее: + +- `|| true` гасит любую ошибку генерации: сломанный шаг выглядит зелёным, а SBOM молча отсутствует. Для артефакта цепочки поставки это обесценивает саму затею — убрать; +- в job `bootstrap` файла `linux-release.yml` нет шага `setup-dotnet`, а SBOM пишется в подкаталог `sbom/`, тогда как остальные пути в этом job — корневые; +- SBOM в job `bootstrap` и в job `publish` строится из одного и того же `ServerMonitorManager.slnx`, то есть дублируется. + +Исправление: генерировать SBOM один раз, до шага загрузки, в job, где уже настроен .NET; добавить файл и в `upload-artifact`, и в `files:` релиза; `|| true` убрать. Дублирующую генерацию в job `bootstrap` удалить. + +### 1.3. Как проверить себя + +Release-workflow нельзя прогнать через PR. Проверять так: + +- `actionlint` на все пять файлов `.github/workflows/` — он ловит и недопустимые ключи, и опечатки в схеме; +- либо `gh workflow run` вручную по `workflow_dispatch` на своей ветке, если это не приведёт к публикации релиза (шаги релиза защищены `if: startsWith(github.ref, 'refs/tags/')`, поэтому на ветке они пропускаются, а разбор файла всё равно произойдёт). + +В отчёте показать вывод проверки. Утверждение «исправлено» без демонстрации разбора файла не принимается — именно отсутствие такой проверки и привело к дефекту. + +--- + +## Часть 2 — новая задача + +### Репозиторий и ветка + +- Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +- База: `main` (после merge PR #13 и #14) +- Ветка: `antigravity/reproducible-builds` +- Рабочая папка: `C:\Users\Ochenstarik\projects\smm-antigravity` + +### Зачем + +`docs/installer-contract.md` §1 требует, чтобы production-установка использовала закреплённый релиз, а `docs/product-horizons.md`, Горизонт 0, требует подписанной поставки с хэшами всех артефактов. Обе гарантии опираются на предположение, что из одного коммита получается один и тот же бинарник. + +Сейчас это неверно: версии NuGet-пакетов заданы в каждом `.csproj` по отдельности, lock-файлов нет, восстановление зависимостей идёт по диапазонам. Сборка одного и того же тега завтра может дать другой набор зависимостей, и никакая подпись артефакта этого не покажет. + +Задача закрывает предпосылку, без которой подписанная поставка не имеет смысла. + +### Работы + +**1. `Directory.Packages.props` в корне.** + +Централизованное управление версиями: `ManagePackageVersionsCentrally` включено, все `PackageVersion` собраны в одном файле, из `.csproj` версии убраны, остаются только `PackageReference` без атрибута `Version`. + +Затрагиваются все проекты решения: `Core`, `Control`, `Agent`, `Desktop`, `Provisioning.Helper`, тестовый проект. + +**2. Lock-файлы.** + +`RestorePackagesWithLockFile` включён, `packages.lock.json` каждого проекта закоммичен. В CI восстановление выполняется с `--locked-mode`, чтобы расхождение lock-файла с проектом ломало сборку, а не молча подтягивало другую версию. + +**3. `Directory.Build.props` в корне.** + +- `Nullable`, `EnableNETAnalyzers`, `AnalysisLevel latest-recommended`; +- `InvariantGlobalization` там, где это уместно для серверных проектов; +- детерминированная сборка: `Deterministic`, `ContinuousIntegrationBuild` под условием `$(CI)`; +- `TreatWarningsAsErrors` **не включать** — см. границы. + +**4. CI.** + +В `linux-control-agent.yml` и `windows-build.yml` добавить восстановление в locked-режиме. Прогон должен падать, если lock-файл не соответствует проектам. + +### Границы + +Не изменять: + +- `src/ServerMonitorManager.Control/LinkService.cs`, `LinkPolicyApplier.cs`, `LinkReconciliationBackgroundService.cs`, `ControlStore.cs`, `ControlMaintenance.cs`, `ControlOptions.cs`, `appsettings.json`; +- `src/ServerMonitorManager.Provisioning.Helper/**`, `deploy/**`; +- `CertificateAuthority.cs`, `CertificateLifecycleService.cs`, `src/ServerMonitorManager.Agent/AgentClient.cs`; +- содержимое файлов в `tests/**` — правки допускаются только в `.csproj` тестового проекта. + +Первые две группы заняты заданием B-3R, третья — заданием по жизненному циклу сертификатов. + +Не входит в задание: + +- **`TreatWarningsAsErrors`.** Включение сейчас сломает незавершённую ветку `hermes/task3-b3-fact-reconciliation` при её ребейзе на main. Отдельная задача после её merge; +- разделение тестов на `Core.Tests` / `Control.Tests` / `Agent.Tests` / `Helper.Tests` — тестовые файлы заняты; +- обновление версий пакетов: задача переносит существующие версии как есть, а не апгрейдит их. Любое изменение номера версии должно быть отдельно обосновано в отчёте; +- merge собственного PR. + +### Критерий приёмки + +- ни один `.csproj` не содержит `Version=` в `PackageReference`; +- `packages.lock.json` закоммичены для всех проектов; +- CI восстанавливает зависимости в `--locked-mode` и падает при рассинхроне — продемонстрировать намеренной поломкой lock-файла в отдельном временном коммите, показать красный прогон, затем откатить; +- номера версий пакетов не изменились относительно `main` — показать сравнение; +- `git diff --name-only main` не содержит ни одного файла из списка границ; +- Control suite прогнан на Linux; +- Desktop собирается — в CI, локально WinUI 3 собрать нельзя, если нет Windows App SDK; +- CI зелёный, PR создан и не смержен. + +### Отчётность + +Раздельно: что проверено локально, что в CI со ссылками на прогоны, что не проверялось и почему. + +Отдельно показать: вывод `actionlint` по части 1 и сравнение версий пакетов до и после по части 2. + +Физический acceptance (`SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh`) выполнить нельзя — не выданы SSH- и topology-параметры. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-signed-delivery-2026-08-10.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-signed-delivery-2026-08-10.md new file mode 100644 index 0000000..2f78424 --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-signed-delivery-2026-08-10.md @@ -0,0 +1,71 @@ +# Antigravity: закрыть PR #25 и сделать подписанную поставку + +## Часть 1 — довести PR #25 до merge + +Ветка `antigravity/cert-lifecycle`, PR #25, CI 14/14. + +Четыре из пяти пунктов прошлого задания закрыты правильно. Отдельно отмечу проверку на trimmed-артефакте: сделана именно так, как требовалось — `Control__ClientCertificateDays=999` переменной окружения на linux single-file, с подтверждённым отказом старта. Плюс обратный тест `CertificateDays45_IssuesCertificateWith45DaysValidity`. Дублирующий эндпоинт удалён, `TEST_EVIDENCE.md` из репозитория убран. + +Осталось одно: + +**Ребейз на текущий `main` (`df4dfd1`).** Ветка стоит на `80b4797` — до шести merge от dependabot. Сама она workflow и lock-файлы не трогает, поэтому откатить ничего не откатит, но её зелёный CI прогонялся на **старом наборе зависимостей**. Связка «изменения сертификатов + SQLitePCLRaw 3.0.5» вместе не проверялась. + +После ребейза дождаться зелёного CI и слить. + +⚠️ Hermes параллельно проверяет совместимость существующей базы с SQLitePCLRaw 3.0.5. Если он найдёт несовместимость и откатит #23 — ребейзить придётся заново. Согласуйте момент. + +--- + +## Часть 2 — подписанная поставка + +Пункт Горизонта 0. Ваша область по факту предыдущих задач: CI, workflow, цепочка поставки. + +### Зачем + +Сейчас bootstrap сверяет `ARCHIVE.sha256`, лежащий рядом с архивом **в том же релизе**, а manifest не подписан и содержит только хэш самого bootstrap. Кто может опубликовать релиз — ставит произвольный код с правами root на весь парк через `update-agent`. Воспроизводимость сборки вы уже закрыли; без подписи она остаётся половиной решения. + +### Разграничение с Hermes — важно + +Hermes ведёт роль Monitor и правит **`deploy/ochenstarik-server-monitor-manager.sh`**. Это же файл, где живёт `verify_archive`. + +Поэтому задача делится на две очереди: + +**Очередь A — начинать сразу, bootstrap не трогает:** + +1. **Manifest v2** в release-workflow: хэши всех артефактов (bootstrap, оба `tar.gz`, MSIX, SBOM), версии Control/Agent/helper/Desktop, минимальные совместимые версии, `helper_protocol`. Сейчас manifest содержит только хэш bootstrap. +2. **Подпись manifest.** `cosign sign-blob` в keyless-режиме через OIDC GitHub Actions — предпочтительно, приватный ключ хранить не нужно. Альтернатива `minisign` с ключом в secrets. Подпись выкладывать ассетом релиза. +3. **Негативные тесты в CI**: изменённый байт в архиве, подменённый хэш в manifest без переподписи, manifest без подписи — все три должны отвергаться. Тесты писать против отдельного скрипта-верификатора, не против bootstrap. +4. `PROGRAM_VERSION` подставлять из тега при упаковке вместо `0.2.0-dev`. + +**Очередь B — после merge роли Monitor:** + +5. `verify_archive` в bootstrap сверяет хэш **с manifest**, а не с соседним `.sha256`; старый путь только под явным `SMM_ALLOW_UNSIGNED=1` с громким предупреждением. +6. Новое действие `verify-manifest MANIFEST SIGNATURE`. +7. Публичный ключ или OIDC-identity **вшить константой** в bootstrap и Desktop — не скачивать вместе с релизом, иначе подпись бессмысленна. +8. Отказ `update-control` и `update-agent` при несовместимой паре версий — требование `docs/installer-contract.md` §6, невыполненное до сих пор. +9. Отсутствие инструмента проверки подписи — отказ, а не предупреждение. + +Очередь A — отдельный PR, очередь B — отдельный. Не смешивать. + +### Чего опасаться + +Release-workflow **не запускаются на pull request**: они триггерятся тегом и `workflow_dispatch`. Ваш зелёный PR ничего не докажет про них — вы уже дважды на этом обжигались, с `permissions` в PR #14 и с `locked-mode` в PR #15. + +Поэтому обязательно: + +- `actionlint` на все пять workflow, вывод в отчёт; +- прогон через `workflow_dispatch` на своей ветке. Шаги публикации защищены `if: startsWith(github.ref, 'refs/tags/')` и на ветке пропускаются, но разбор файла и генерация manifest выполнятся — этого достаточно, чтобы поймать ошибки схемы и логики. + +### Критерий приёмки + +- manifest содержит хэши всех артефактов и версии компонентов; +- manifest подписан, подпись выложена ассетом; +- три негативных теста зелёные; +- `actionlint` чист на всех пяти workflow, вывод приложен; +- `workflow_dispatch`-прогон на ветке выполнен, ссылка в отчёте; +- `deploy/ochenstarik-server-monitor-manager.sh` в очереди A не изменён — проверяется `git diff --name-only main`; +- PR не смержены. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. Описание PR заполнять после завершения CI. diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-signed-delivery-queue-b-final-2026-08-10.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-signed-delivery-queue-b-final-2026-08-10.md new file mode 100644 index 0000000..71da10e --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-signed-delivery-queue-b-final-2026-08-10.md @@ -0,0 +1,98 @@ +# Antigravity: завершить подписанную поставку, Queue B + +## Исходное состояние + +- Репозиторий: `ochenstarik-ui/server-monitor-manager`. +- Ветка: `antigravity/signed-delivery-queue-b`. +- Актуальная база на момент задания: `main` / `v0.1.0-alpha.9` @ `2ca059f`. +- Коммит `ef137bc` уже добавляет bootstrap-проверку manifest и совместимости компонентов. +- Незакоммичены `MainPage.xaml`, `MainPage.xaml.cs` и `tests/bootstrap/test-manifest-verification.sh`. +- PR и CI для Queue B отсутствуют. +- PR #34 с repo hygiene открыт отдельно. Не включать его изменения вручную. Перед публикацией ветки снова получить актуальный `main` и перебазироваться, если #34 или другой PR был смержен. + +## Цель + +Довести проверку подписанных обновлений Desktop и bootstrap до fail-closed реализации, покрытой изолированными тестами, и открыть готовый к независимой приёмке PR. Релиз и тег не создавать — это отдельный gate Hermes. + +## Обязательная работа + +### 1. Сохранить и довести bootstrap + +- `verify_archive` получает ожидаемый SHA-256 из проверенного manifest, а не из соседнего `.sha256`. +- `verify-manifest MANIFEST SIGNATURE` проверяет подпись production keyless identity. +- Issuer и identity-regexp зафиксированы в коде; рядом с identity должна быть ссылка на `docs/release-policy.md`. +- Отсутствующий `cosign`, manifest или signature, чужая identity, неверная подпись и неверный hash завершаются отказом. +- `SMM_ALLOW_UNSIGNED=1` остаётся только явным аварийным developer bypass с громким предупреждением; default — fail closed. +- `update-control` и `update-agent` блокируют несовместимую пару Control ↔ Agent ↔ helper по manifest v2. +- Проверить CLI-контракт: тесты должны передавать ровно те аргументы, которые принимает команда. Текущий bootstrap-тест ошибочно передаёт `verify-manifest` три аргумента при контракте из двух. + +### 2. Переделать Desktop updater для тестируемости + +- Не использовать закрыто созданный внутри класса `HttpClient` и реальный GitHub в unit tests. Внедрить HTTP transport, signature verifier, файловое хранилище и launcher либо эквивалентные тестовые границы. +- Поддержать alpha/pre-release update channel явно. `releases/latest` нельзя считать источником текущего alpha-релиза без отдельного контракта и теста. +- Manifest, signature и MSIX должны принадлежать одному release/tag; нельзя смешивать URL или ассеты разных тегов. +- Проверить manifest keyless-подпись pinned issuer/identity до показа кнопки обновления. +- После загрузки MSIX сверить его SHA-256 с уже проверенным manifest и только затем разрешить запуск. +- Отсутствующая, чужая или неверная подпись и несовпадающий hash — безусловный отказ. В production нет кнопки «продолжить всё равно». +- Отказ записывается в штатную диагностику приложения; одного `Debug.WriteLine` недостаточно. +- Developer bypass, если он сохраняется для Desktop, должен быть явным, выключенным по умолчанию и покрытым тестом; он не должен попадать в обычный пользовательский путь. +- Не скачивать доверенный ключ/identity из проверяемого релиза. +- Не запускать установщик автоматически. Пользователь видит действие только после успешной проверки metadata. + +### 3. Исправить тесты + +Обязательны полностью offline и детерминированные проверки: + +1. корректная production-equivalent подпись и hash принимаются; +2. manifest, подписанный другой identity, отклоняется; +3. подписанный manifest с hash, не совпадающим с MSIX/архивом, отклоняется; +4. отсутствующая signature отклоняется; +5. повреждённая signature отклоняется; +6. отсутствующий verifier отклоняется; +7. несовместимые версии Control/Agent/helper блокируют оба `update-*`; +8. Desktop не показывает update action до завершения всех проверок; +9. prerelease-channel корректно находит `alpha.9/alpha.10`, а не полагается на stable-only endpoint; +10. URL/asset из другого тега отклоняется. + +`UpdateServiceTests.cs` должен реально компилировать production-код. Сейчас тестовый `.csproj` не подключает `UpdateService.cs`, а существующие четыре теста проверяют только создание объекта, cancellation, `NullReferenceException` и свойства record — это не критерии Queue B. + +Bootstrap-тест не должен объявлять успех, если production implementation игнорирует его тестовый ключ. Тестовый seam допустим только если он недоступен в обычном production path и не ослабляет pinned identity. + +### 4. Проверить фактический alpha.9 + +- Скачать manifest и signature именно из неизменяемого `v0.1.0-alpha.9`. +- Подтвердить, что выбранная команда `cosign verify-blob` действительно проверяет опубликованный формат `.sig` и pinned identity. +- Проверить hash хотя бы одного Linux archive и MSIX против manifest. +- Если опубликованной `.sig` недостаточно для offline/keyless verification и требуется certificate/bundle, не ослаблять проверку и не менять workflow самостоятельно. Зафиксировать точный producer-side gap в отчёте для Hermes. + +### 5. Git и CI + +- Не включать `ci_log*.txt`, ключи, временные manifest/signature, скачанные binaries и тестовые архивы. +- Не менять `.github/workflows/**`. Если producer-side изменение действительно необходимо, описать его для Hermes. +- Сначала синхронизировать ветку с текущим `main`, затем оформить логические коммиты. +- Прогнать `actionlint` на существующих workflow, shellcheck/bash syntax для изменённых shell-файлов, Desktop tests, Control tests и релевантные acceptance/bootstrap tests. +- Открыть PR, дождаться Linux и Windows CI. Не merge. +- Не запускать публикацию на существующем теге и не создавать `alpha.10`. + +## Критерий приёмки + +- Реальные четыре security-сценария Desktop и расширенный negative suite зелёные. +- Bootstrap и Desktop используют один зафиксированный trust policy и отказывают при любой неоднозначности. +- Проверка опубликованных ассетов `alpha.9` воспроизводима и приложена к отчёту. +- Версионная несовместимость блокируется до изменения установленной системы. +- Рабочее дерево чистое, ветка основана на текущем `main`, лишних файлов нет. +- PR открыт, все обязательные CI зелёные, workflow не изменены, PR не смержен. + +## Отчёт + +Раздельно перечислить: + +- коммиты и изменённые файлы; +- локальные команды и результаты; +- GitHub CI со ссылками; +- проверку фактических `alpha.9` assets; +- negative tests; +- не запускавшиеся проверки и причину; +- producer-side требования для Hermes, если обнаружены; +- ссылку на PR. + diff --git a/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-web-console-2026-08-17.md b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-web-console-2026-08-17.md new file mode 100644 index 0000000..dfb6025 --- /dev/null +++ b/agents/antigravity/inbox/from-smm-deliverables/Старые задачи/smm-antigravity-task-web-console-2026-08-17.md @@ -0,0 +1,184 @@ +# Antigravity: выдача кода регистрации узла из приложения — этап 1 + +Задание переписано 2026-08-17 после первой попытки. Тогда результатом стал файл с отчётом: ни ветки, ни PR, ни строчки кода в репозитории не появилось. Поэтому здесь сужен объём и указаны точные места в коде. + +## Что считается выполнением + +**Ссылка на PR в `ochenstarik-ui/server-monitor-manager` и ссылки на зелёные прогоны CI.** + +Документ с описанием проделанной работы результатом не является ни при каких обстоятельствах. Отчёт — это раздел в описании PR, а не отдельный файл. Если PR нет, задание не выполнено, независимо от того, что написано в отчёте. + +Если задание невыполнимо или в нём ошибка — так и напишите, с указанием, что именно мешает. Это нормальный исход. Отчёт о несделанной работе как о сделанной — нет. + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- База: `main` @ `5dc4c39` +- Ветка: `antigravity/node-enrollment-endpoint` +- `main` защищён: PR обязателен, обязательны статусы `build-and-test` и `build`, force-push запрещён +- один PR — одна тема; описание PR заполняется **после** завершения CI + +--- + +## Задача этапа 1 + +Один HTTP-эндпоинт: оператор просит код регистрации нового узла, Control возвращает готовую строку `SMMNODE2...`, которую оператор вставляет в установщик на сервере. + +Сегодня этот код можно получить только зайдя по ssh на Hub под root и выполнив `ochenstarik-server-monitor-manager.sh node-code <имя>`. Владелец хочет получать его из приложения, из которого и так ведётся наблюдение за парком. + +Веб-интерфейс и вход по паролю — этапы 2 и 3, они описаны в конце и **не начинаются**, пока этап 1 не в `main`. + +## Что уже есть в коде + +Большая часть механики существует, писать с нуля нужно немного. + +В `src/ServerMonitorManager.Control/Program.cs`: + +- строка 575: `var control = app.MapGroup("/api/v1/control").RequireAuthorization("Operator");` — группа эндпоинтов оператора. Новый эндпоинт добавляется сюда, роль тем самым обеспечена; +- строка 144, ветка CLI `token-create`: выпуск токена уже реализован на C# — `store.CreateEnrollmentTokenAsync(nodeId, TimeSpan.FromMinutes(10))`; +- там же `NodeIdValidator.IsValid(nodeId)` — проверка имени узла на C# уже есть, изобретать не нужно; +- строка 22: политика ограничения частоты `"enrollment"` уже определена и применяется к эндпоинтам регистрации. + +В `deploy/ochenstarik-server-monitor-manager.sh`, функция `create_node_code` (строка 1224) — эталон формата. Строка собирается так: + +``` +SMMNODE2........ +``` + +каждый сегмент — base64url без выравнивания. Источники сегментов: + +| Сегмент | Откуда берётся | +|---|---| +| `control_url` | файл `control-public-url` в каталоге конфигурации | +| `ca_pem` | файл `control-ca.crt` | +| `node_id` | из запроса | +| `token` | `CreateEnrollmentTokenAsync`, срок 10 минут | +| `hub_endpoint`, `hub_public_key`, `mesh_network` | `mesh.env` и `wg/hub.pub` | +| `node_address` | `reserve_node_address` — резервирование адреса в `10.77.0.0/24` | + +Таким образом дописать нужно: чтение файлов, резервирование адреса и сборку строки. Токен, валидация имени, авторизация по роли и ограничение частоты уже готовы. + +## Требования + +1. **Формат совпадает побайтно.** Код, выданный эндпоинтом, обязан приниматься установленным на сервере bootstrap без единого изменения в bash. Опубликованные релизы неизменяемы, менять формат нельзя. +2. **Адреса не выдаются дважды.** Два запроса на разные `node_id` получают разные адреса. Как ведёт себя повторный запрос на существующий `node_id` — посмотрите в `reserve_node_address` и повторите это поведение; в отчёте напишите, какое оно. +3. **Срок жизни кода — 10 минут.** Не увеличивать. +4. **Выдача попадает в журнал событий:** кто выдал, какому `node_id`, когда. +5. **`node_id` не может привести к выполнению постороннего кода на Hub.** Если решите вызывать bash-функцию через sudoers — аргументы фиксированные, подстановки произвольных строк нет. Если перенесёте резервирование адреса в C# — bash-версия и версия Control обязаны давать одинаковый результат на одинаковом входе. +6. Роль `Operator` обязательна. Ни `Agent`, ни `Automation` доступа к выдаче не получают. + +## Тесты + +В `tests/ServerMonitorManager.Control.Tests`: + +- запрос без сертификата Operator отклоняется; +- сертификат роли `Agent` и роли `Automation` отклоняются; +- корректный запрос возвращает строку, начинающуюся с `SMMNODE2.`, с девятью сегментами; +- сегменты декодируются из base64url и содержат ожидаемые значения: `node_id` совпадает с запрошенным, `ca_pem` — это сертификат, `node_address` лежит в `10.77.0.0/24`; +- два запроса на разные имена дают разные адреса; +- недопустимое имя узла (пустое, с заглавными, длиннее 63 символов, с подчёркиванием) отклоняется до выпуска токена. + +Тест на совпадение с bash-версией: сравнить структуру выданного кода с эталоном из `create_node_code`. Если полноценно вызвать bash в тестах невозможно — зафиксируйте эталонную строку как фикстуру и сверяйтесь с ней, а в отчёте напишите, что сравнение идёт с фикстурой, а не с живым скриптом. + +## Границы + +Codex ведёт `deploy/**`, релизный пайплайн и проверку релиза; сейчас у него открыт PR #52. **Не трогать:** `deploy/**`, `.github/workflows/linux-release.yml`, `.github/workflows/release-verification.yml`, `tests/release-verification/**`, `tests/bootstrap/**`. + +Ваша область: `src/ServerMonitorManager.Control/**`, `src/ServerMonitorManager.Core/**` при необходимости, `tests/ServerMonitorManager.Control.Tests/**`, документация по новому эндпоинту. + +## Критерий приёмки + +- PR открыт, CI зелёный, PR не смержен до зелёного; +- эндпоинт доступен только роли `Operator`; +- выданный код имеет формат `SMMNODE2` с девятью сегментами и корректным содержимым; +- два узла не получают один адрес; +- срок жизни 10 минут, выдача записана в журнал; +- имя узла проверяется до выпуска токена и не может привести к выполнению постороннего кода; +- перечисленные тесты присутствуют и проходят. + +## Отчёт — в описании PR + +Раздельно: что проверено локально, что в CI со ссылками на прогоны, что не проверялось и почему. + +--- + +## Доработка PR #53 — убрать дублирующий маршрут + +Этап 1 выполнен, PR #53 открыт, CI зелёный, границы соблюдены. Одна правка до слияния. + +Зарегистрированы **два** маршрута с одинаковым поведением: + +- `control.MapPost("/agents/{nodeId}/enrollment-code", ...)` — `Program.cs:606` +- `control.MapPost("/nodes/{nodeId}/enrollment-code", ...)` — `Program.cs:632` + +Обработчик скопирован целиком, второй раз. Просили один маршрут. + +**Удалить `/nodes/{nodeId}/enrollment-code`**, оставить `/agents/{nodeId}/enrollment-code`. Основания: + +- все десять обращений в `NodeEnrollmentCodeTests.cs` идут на `/agents/...`; маршрут `/nodes/...` не покрыт ни одной проверкой — это непроверяемая публичная поверхность; +- в группе `/api/v1/control` двадцать два маршрута, и `/nodes/` среди них единственный. Соседи по смыслу — `POST /agents/{nodeId}/reenroll` и `PUT /agents/{nodeId}/desired/preflight` — уже используют `/agents/{nodeId}/`. + +Если считаете, что `/nodes/` семантически вернее, потому что узла как агента ещё не существует в момент выпуска кода, — доводы принимаются, но тогда переносите на него тесты и убирайте `/agents/...`. Два маршрута не остаются в любом случае. + +Заодно, раз обработчик станет один: проверьте, что общий код не продублирован и в других местах PR. + +--- + +## Этап 2 — веб-консоль · активен с 2026-08-18 + +Этап 1 слит: `main` @ `7583b13`, PR #53. Этап 2 начинается. + +Ветка: `antigravity/web-console`. База — актуальный `main`; он движется быстро, Codex ведёт параллельно PR #57 и #58, поэтому зафиксируйте хеш базы в отчёте и обновляйте ветку перед слиянием. + +### Что уже доступно + +`POST /api/v1/control/agents/{nodeId}/enrollment-code`, роль `Operator`, возвращает `NodeEnrollmentCodeResponse`: сам код `SMMNODE2...`, отпечаток CA и время истечения. Это ваш собственный эндпоинт из этапа 1 — читайте его контракт по коду, а не по этому заданию. + +**Важно про живой Hub.** Эндпоинт в `main`, но на настоящем сервере он сейчас вернёт отказ доступа: Control работает под `ochenstarik-smm-control`, а каталог состояния mesh создаётся `0700` от root. Это чинит Codex в PR #57. На разработку консоли не влияет — тесты и локальный запуск подставляют свой путь, — но если будете проверять на Hub владельца и получите отказ, причина эта, а не ваш код. + +### Что сделать + +Минимальная, но настоящая консоль оператора: + +- **список узлов** — данные отдаёт `GET /api/v1/control/agents`. Показать имя, состояние, время последнего heartbeat; +- **список Links** — `GET /api/v1/control/links`; +- **кнопка «Добавить узел»** — спрашивает имя, вызывает `POST /api/v1/control/agents/{nodeId}/enrollment-code` из этапа 1, показывает крупно код `SMMNODE2...` и отпечаток CA, с копированием в один клик; +- рядом с кодом — срок его жизни и требование сверить отпечаток с тем, что покажет установщик на сервере. Оператор, который щёлкнет «да» не глядя, обесценивает всю проверку подписи, поэтому текст должен быть заметным, а не сноской. + +### Размещение + +Отдельный проект, обслуживаемый Control, чтобы разворачиваемая единица оставалась одна. Если выберете иначе — обоснуйте в отчёте. + +Учтите: до этапа 3 вход возможен только по клиентскому сертификату роли Operator. Значит консоль на этом этапе открывается браузером, которому сертификат подсунут вручную, и это нормально — так и задумано. Не пытайтесь обойти это ради удобства демонстрации; удобство — предмет этапа 3, и там оно ограничено условиями. + +### Чего не делать + +- не добавлять эндпоинты, которых не требует интерфейс; +- не выносить в консоль операции, меняющие состояние парка, кроме выдачи кода: удаление узлов, правка Links, перезапуск служб — не сейчас; +- не трогать `deploy/**` и релизные workflow. + +### Доработка PR #59 — покрыть тестом ветку встроенных ресурсов + +Проверено 2026-08-18. Выполнено всё, и выполнено аккуратно: ассеты отдаются явными маршрутами в группе с `RequireAuthorization("Operator")`, а не через `UseStaticFiles`, поэтому закрыт и интерфейс, а не только API. Пять тестов на роли, настоящие эндпоинты, `encodeURIComponent` на имени узла, обратный отсчёт срока жизни, предупреждение о сверке отпечатка написано заметно и по делу. + +Отдельно стоит отметить ``: Control публикуется с `PublishSingleFile=true`, каталога `wwwroot` рядом с бинарём на сервере не будет, и вы это учли сами, без указания в задании. Именно на таких местах проект терял по релизу за раз. + +Одна вещь осталась непроверенной, и это как раз та ветка, которая будет исполняться в бою. + +`GetWebConsoleAsset` пробует два источника: файл по `env.WebRootPath`, затем ресурс сборки. В тестах хост поднимается в процессе, `WebRootPath` существует, поэтому срабатывает **файловая** ветка. На сервере из единого файла сработает **встроенная**, и её сейчас не проверяет ничто. + +Добавить тест: поднять хост с несуществующим или пустым `WebRootPath` и убедиться, что `/`, `/index.html`, `/style.css` и `/app.js` отдаются с кодом 200, верным `Content-Type` и непустым содержимым — то есть достаются из ресурсов сборки. Заодно это зафиксирует соглашение об именах ресурсов: поиск идёт через `EndsWith(fileName)`, и переименование каталога его молча сломает. + +После этого PR вливается. + +### Критерий приёмки + +- консоль показывает узлы и Links из настоящих эндпоинтов Control, а не из заглушек; +- ассеты отдаются из ресурсов сборки, когда каталога `wwwroot` на диске нет, — покрыто тестом; +- кнопка выдаёт код, код копируется, отпечаток и срок жизни видны; +- сборка консоли входит в CI и не ломает существующие прогоны; +- есть проверка, что консоль недоступна без сертификата Operator; +- PR, CI зелёный, PR не смержен до зелёного; +- отчёт — в описании PR, отдельным файлом отчёт не является. + +**Этап 3. Вход по логину и паролю — только для тестов.** Владелец просит его, чтобы не возиться с сертификатами при тестировании. Это второй, более слабый путь рядом с mTLS, и он не должен незаметно стать основным. Условия: выключен по умолчанию, включается явным параметром вида `Authentication:PasswordLogin:EnabledForTesting`; при включении предупреждение в логе **при каждом старте**; пароль хранится подбор-стойким хешем (Argon2id или bcrypt); ограничение частоты и задержка после неудач; ограниченная по времени сессия; роль — `Operator` и не выше; существующая проверка mTLS не ослабляется ни в одной ветке кода, при обоих включённых механизмах сертификат имеет приоритет. diff --git a/agents/antigravity/notes/.gitkeep b/agents/antigravity/notes/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/antigravity/notes/salvage-2026-08-18/agent-rules/rules/orchestrator-smm.md b/agents/antigravity/notes/salvage-2026-08-18/agent-rules/rules/orchestrator-smm.md new file mode 100644 index 0000000..9e505c5 --- /dev/null +++ b/agents/antigravity/notes/salvage-2026-08-18/agent-rules/rules/orchestrator-smm.md @@ -0,0 +1,31 @@ +--- +trigger: always_on +--- + +# ServerMonitorManager: проектные правила + +Это правило дополняет документацию workspace: `SECURITY.md`, `CONTRIBUTING.md`, `README.md` и текущий `TASK.md`. Файлов `AGENTS.md` и `GEMINI.md` в этом репозитории нет — не ссылаться на них и не выдумывать их содержимое. При конфликте применять более строгое ограничение. + +## Контекст + +- Стек: C# / .NET, решение `ServerMonitorManager.slnx`. +- Структура: `src/`, `tests/`, `build/`, `deploy/`, `docs/`. +- Стиль: `Directory.Build.props`; версии пакетов: `Directory.Packages.props`. + +## Контракт изменений + +- Добавлять код и тесты в соответствующие проекты `src/` и `tests/`. +- Не менять центрально управляемые версии пакетов в отдельных `.csproj`. +- Изменения `deploy/`, auth, secrets, remote execution, service control и привилегий считать complex/security-sensitive. +- Для новой логики добавлять тесты; не ослаблять существующие. + +## Проверки + +Выбрать точные команды из документации репозитория. Если особых команд нет, минимум: + +```powershell +dotnet build ServerMonitorManager.slnx --no-restore +dotnet test ServerMonitorManager.slnx --no-build +``` + +Не утверждать, что они прошли, если restore или другая предпосылка не были выполнены. В таком случае статус — `BLOCKED` или `NOT_RUN` с причиной. diff --git a/agents/antigravity/notes/salvage-2026-08-18/agent-rules/rules/orchestrator-smm.md.old b/agents/antigravity/notes/salvage-2026-08-18/agent-rules/rules/orchestrator-smm.md.old new file mode 100644 index 0000000..05b847a --- /dev/null +++ b/agents/antigravity/notes/salvage-2026-08-18/agent-rules/rules/orchestrator-smm.md.old @@ -0,0 +1,27 @@ +# ServerMonitorManager: проектные правила + +Это правило дополняет `AGENTS.md`, `GEMINI.md` и `SECURITY.md` workspace. При конфликте применять более строгое ограничение. + +## Контекст + +- Стек: C# / .NET, решение `ServerMonitorManager.slnx`. +- Структура: `src/`, `tests/`, `build/`, `deploy/`, `docs/`. +- Стиль: `Directory.Build.props`; версии пакетов: `Directory.Packages.props`. + +## Контракт изменений + +- Добавлять код и тесты в соответствующие проекты `src/` и `tests/`. +- Не менять центрально управляемые версии пакетов в отдельных `.csproj`. +- Изменения `deploy/`, auth, secrets, remote execution, service control и привилегий считать complex/security-sensitive. +- Для новой логики добавлять тесты; не ослаблять существующие. + +## Проверки + +Выбрать точные команды из документации репозитория. Если особых команд нет, минимум: + +```powershell +dotnet build ServerMonitorManager.slnx --no-restore +dotnet test ServerMonitorManager.slnx --no-build +``` + +Не утверждать, что они прошли, если restore или другая предпосылка не были выполнены. В таком случае статус — `BLOCKED` или `NOT_RUN` с причиной. diff --git a/agents/antigravity/notes/salvage-2026-08-18/agent-rules/rules/project-smm.md b/agents/antigravity/notes/salvage-2026-08-18/agent-rules/rules/project-smm.md new file mode 100644 index 0000000..9e505c5 --- /dev/null +++ b/agents/antigravity/notes/salvage-2026-08-18/agent-rules/rules/project-smm.md @@ -0,0 +1,31 @@ +--- +trigger: always_on +--- + +# ServerMonitorManager: проектные правила + +Это правило дополняет документацию workspace: `SECURITY.md`, `CONTRIBUTING.md`, `README.md` и текущий `TASK.md`. Файлов `AGENTS.md` и `GEMINI.md` в этом репозитории нет — не ссылаться на них и не выдумывать их содержимое. При конфликте применять более строгое ограничение. + +## Контекст + +- Стек: C# / .NET, решение `ServerMonitorManager.slnx`. +- Структура: `src/`, `tests/`, `build/`, `deploy/`, `docs/`. +- Стиль: `Directory.Build.props`; версии пакетов: `Directory.Packages.props`. + +## Контракт изменений + +- Добавлять код и тесты в соответствующие проекты `src/` и `tests/`. +- Не менять центрально управляемые версии пакетов в отдельных `.csproj`. +- Изменения `deploy/`, auth, secrets, remote execution, service control и привилегий считать complex/security-sensitive. +- Для новой логики добавлять тесты; не ослаблять существующие. + +## Проверки + +Выбрать точные команды из документации репозитория. Если особых команд нет, минимум: + +```powershell +dotnet build ServerMonitorManager.slnx --no-restore +dotnet test ServerMonitorManager.slnx --no-build +``` + +Не утверждать, что они прошли, если restore или другая предпосылка не были выполнены. В таком случае статус — `BLOCKED` или `NOT_RUN` с причиной. diff --git a/agents/antigravity/notes/salvage-2026-08-18/agent-rules/workflows/orchestrate.md b/agents/antigravity/notes/salvage-2026-08-18/agent-rules/workflows/orchestrate.md new file mode 100644 index 0000000..1f92441 --- /dev/null +++ b/agents/antigravity/notes/salvage-2026-08-18/agent-rules/workflows/orchestrate.md @@ -0,0 +1,12 @@ +--- +description: Запустить ограниченный SDLC-цикл с fail-closed review и доказательствами проверок +--- + +При `/orchestrate <задача>`: + +1. Применить контракты ролей из правила `agents-contracts`, остальные применимые rules и skill `orchestration-workflow`. +2. Сформировать контракт задачи: scope, acceptance criteria, запреты, проверки и бюджет. +3. Выполнить `research? → implementation → deterministic-checks → review → testing`. +4. Для review обязательно применить skill `code-reviewer`. Не использовать `APPROVE`, если diff не прочитан целиком. +5. Не более одного ремонтного цикла обычно и двух для complex-задачи. +6. Завершить отчётом `DONE`, `PARTIAL` или `BLOCKED`, разделив PASS, FAIL, NOT_RUN и BLOCKED. diff --git a/agents/antigravity/notes/salvage-2026-08-18/orchestrator.py b/agents/antigravity/notes/salvage-2026-08-18/orchestrator.py new file mode 100644 index 0000000..8f36ac3 --- /dev/null +++ b/agents/antigravity/notes/salvage-2026-08-18/orchestrator.py @@ -0,0 +1,79 @@ +import asyncio +import os +import sys +from google.antigravity import Agent, LocalAgentConfig, types + +# A system prompt that tells the agent about the current project context +SYSTEM_INSTRUCTION = """ +You are the principal architect and orchestrator for the `server-monitor-manager` project. +This repository consists of: +1. A C# Windows Desktop client (in `src/ServerMonitorManager.Desktop`). +2. A bash-based Linux agent/control server component (in `deploy/` and `src/agent/`). +3. Various CI and test scripts (in `tests/` and `.github/workflows/`). + +Your role is to autonomously execute tasks requested by the user on this repository. +You are equipped with the Google Antigravity SDK. +Always evaluate if a task is complex enough to be delegated to subagents. +If so, use your ability to invoke specialized subagents to tackle individual components (e.g., C# refactoring, bash scripting, CI debugging). +Always prioritize security, robust design, and keeping tests green. +""" + +async def run_orchestrator(task: str): + # Enable subagents so this orchestrator can delegate work + capabilities = types.CapabilitiesConfig( + enable_subagents=True, + enable_bash_tools=True, + enable_file_tools=True + ) + + # Configure the agent + config = LocalAgentConfig( + capabilities=capabilities, + system_instructions=SYSTEM_INSTRUCTION, + ) + + print(f"[*] Starting Orchestrator Agent for task: '{task}'") + + # Run the agent interaction + async with Agent(config) as agent: + response = await agent.chat(task) + print("\n[Orchestrator Output]:\n") + async for token in response: + print(token, end="", flush=True) + print("\n") + +async def main(): + if len(sys.argv) > 1: + task = " ".join(sys.argv[1:]) + await run_orchestrator(task) + else: + # Fallback to interactive mode if no task was passed + print("No task provided. Starting interactive loop...") + from google.antigravity.utils.interactive import run_interactive_loop + + config = LocalAgentConfig( + capabilities=types.CapabilitiesConfig( + enable_subagents=True, + enable_bash_tools=True, + enable_file_tools=True + ), + system_instructions=SYSTEM_INSTRUCTION, + ) + await run_interactive_loop(config) + +if __name__ == "__main__": + # Ensure GEMINI_API_KEY is loaded from .env if present + try: + from dotenv import load_dotenv + load_dotenv() + except ImportError: + pass + + if not os.environ.get("GEMINI_API_KEY"): + print("[!] Warning: GEMINI_API_KEY environment variable is not set.") + print("[!] You may need to set it or run `pip install python-dotenv` and add it to a .env file.") + + try: + asyncio.run(main()) + except KeyboardInterrupt: + print("\n[*] Exiting orchestrator.") diff --git a/agents/antigravity/notes/salvage-2026-08-18/repo-hygiene-untracked/pr_body.md b/agents/antigravity/notes/salvage-2026-08-18/repo-hygiene-untracked/pr_body.md new file mode 100644 index 0000000..3f93668 --- /dev/null +++ b/agents/antigravity/notes/salvage-2026-08-18/repo-hygiene-untracked/pr_body.md @@ -0,0 +1,30 @@ +## Description + +This PR implements repository hygiene and security improvements according to TASK.md. + +Fixes Task B-3R + +### Actions SHAs +The following commands were used to retrieve the exact SHAs for the pinned actions (dereferencing annotated tags to commit SHAs where needed): + +1. `actions/checkout@v6`: `gh api repos/actions/checkout/git/ref/tags/v6` -> dereferenced to commit `d23441a48e516b6c34aea4fa41551a30e30af803` +2. `actions/setup-dotnet@v5`: `gh api repos/actions/setup-dotnet/git/ref/tags/v5` -> dereferenced to commit `26b0ec14cb23fa6904739307f278c14f94c95bf1` +3. `actions/upload-artifact@v6`: `gh api repos/actions/upload-artifact/git/ref/tags/v6` -> dereferenced to commit `b7c566a772e6b6bfb58ed0dc250532a479d7789f` +4. `actions/download-artifact@v8`: `gh api repos/actions/download-artifact/git/ref/tags/v8` -> dereferenced to commit `74a6210ce7665476a66b96e5fa3ebf68e98ec72d` +5. `softprops/action-gh-release@v2`: `gh api repos/softprops/action-gh-release/git/ref/tags/v2` -> dereferenced to commit `3bb12739c298aeb8a4eeaf626c5b8d85266b0e65` + +## Type of change + +- [x] Security and Repository Hygiene (non-breaking changes) + +## Testing Checklist + +### Verified Locally +- [x] Git diff on `main` boundary files: Verified no restricted files from the `TASK.md` bounds were modified (`git diff --name-only main`). +- [x] Workflow Syntax: Verified workflow yaml syntax. + +### Verified in CI +- [x] CI tests and builds run on PR. (Awaiting GitHub Actions run after PR creation). + +### Not Verified +- [x] Physical acceptance testing (`SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh`) was **NOT verified** because SSH- and topology parameters were not provided as per `TASK.md` instructions. Contract/mock tests were not used as a substitute for this. diff --git a/agents/claude/done/.gitkeep b/agents/claude/done/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/claude/inbox/.gitkeep b/agents/claude/inbox/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/claude/notes/.gitkeep b/agents/claude/notes/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/codex/done/.gitkeep b/agents/codex/done/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/codex/inbox/.gitkeep b/agents/codex/inbox/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/codex/inbox/from-smm-deliverables/smm-codex-task-release-alpha20-2026-08-18.md b/agents/codex/inbox/from-smm-deliverables/smm-codex-task-release-alpha20-2026-08-18.md new file mode 100644 index 0000000..1fe54de --- /dev/null +++ b/agents/codex/inbox/from-smm-deliverables/smm-codex-task-release-alpha20-2026-08-18.md @@ -0,0 +1,79 @@ +# Codex: выпустить v0.1.0-alpha.20 и закрыть дыру в проверке выпуска + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- База: `main` @ `7c43977` +- Ветка: `codex/release-alpha20` +- `main` защищён: PR обязателен, обязательны статусы `build-and-test` и `build`, force-push запрещён +- один PR — одна тема; описание PR заполняется **после** завершения CI + +## Что произошло + +Тег `v0.1.0-alpha.19` создан на `7c43977`, `Release pipeline` упал, релиз не опубликован. Номер сожжён и не переиспользуется — так же, как `alpha.10` и `alpha.11`. + +Причина в шаге `Package bootstrap` workflow `linux-release.yml`: + +```bash +if [[ "${GITHUB_REF}" == refs/tags/* ]]; then + sed -i "s/^PROGRAM_VERSION=.*$/PROGRAM_VERSION=\"${GITHUB_REF_NAME}\"/" "$DIST_DIR/ochenstarik-server-monitor-manager.sh" + grep -Fq "readonly DEFAULT_RELEASE_TAG=\"${GITHUB_REF_NAME}\"" "$DIST_DIR/smm-setup.sh" +fi +``` + +Проверка требует, чтобы `DEFAULT_RELEASE_TAG` в `deploy/smm-setup.sh` совпадал с выпускаемым тегом. В `main` там `v0.1.0-alpha.18`. Проверка сама по себе правильная: она не даёт выпустить установщик, который по умолчанию тянет ассеты чужого релиза. + +**Дыра в другом.** Весь блок закрыт условием `refs/tags/*`, поэтому пробный прогон через `workflow_dispatch` идёт по `refs/heads/main` и эту проверку пропускает. Репетиция перед тегированием, введённая как раз для того, чтобы не сжигать номера, не покрывает единственный шаг, который на теге и ломается. Пока это так, каждый выпуск остаётся лотереей. + +--- + +## Часть 1 — сделать репетицию честной + +Дать `linux-release.yml` вход `workflow_dispatch` с необязательным параметром `tag` и выполнять при пробном прогоне те же проверки согласованности версий, что и на настоящем теге: подстановку `PROGRAM_VERSION` и сверку `DEFAULT_RELEASE_TAG`. Публикация при этом по-прежнему не выполняется — она остаётся привязанной к `refs/tags/*`. + +Смысл: прогон `workflow_dispatch` с `tag=v0.1.0-alpha.20` должен падать ровно там же, где упал бы настоящий тег, и по той же причине. + +Если сочтёте, что вход-параметр — плохое решение, допустима альтернатива: вынести сверку согласованности версий в обычный тест, исполняемый на каждом PR, который сравнивает `DEFAULT_RELEASE_TAG` с последним тегом в `docs/release-policy.md`. Обоснуйте выбор в отчёте. + +## Часть 2 — привести версии в согласие + +Обновить до `v0.1.0-alpha.20` все места, где номер зашит. На момент написания их пять: + +- `deploy/smm-setup.sh:6` — `readonly DEFAULT_RELEASE_TAG`; +- `deploy/smm-setup.sh:37` — текст справки `SMM_TAG Release tag (default: ...)`; +- `docs/linux-bootstrap.md:9,12,13` — команды скачивания; +- `.github/workflows/windows-build.yml:43` — `SMM_TEST_RELEASE_TAG` для шага live-release. + +Перечень проверьте сами: `git grep -n 'alpha\.18'` по `deploy/`, `docs/`, `.github/`. Если после обновления где-то останется старый номер, это дефект. + +Заведите проверку, которая не даёт им разъехаться впредь: все зашитые упоминания версии релиза должны сверяться автоматически, а не глазами при следующем выпуске. + +## Часть 3 — записать судьбу alpha.19 + +В `docs/release-policy.md`: `v0.1.0-alpha.19` — тег создан, `Release pipeline` упал на сверке `DEFAULT_RELEASE_TAG`, релиз не опубликован, номер не переиспользуется. + +## Часть 4 — выпустить + +1. Прогнать `Release pipeline` через `workflow_dispatch` с `tag=v0.1.0-alpha.20` на своей ветке и получить зелёный — теперь это осмысленная репетиция, а не формальность. +2. Создать и запушить тег обычным `git push`. +3. Убедиться, что релиз опубликован и что `Release Verification` запустился сам по `workflow_run` и зелёный. +4. Тег не двигать ни при каких обстоятельствах. + +## Границы + +Antigravity ведёт Control и веб-консоль. **Не трогать:** `src/**`. + +Ваша область: `deploy/**`, `.github/workflows/linux-release.yml`, `.github/workflows/windows-build.yml` в части `SMM_TEST_RELEASE_TAG`, `tests/bootstrap/**`, `docs/linux-bootstrap.md`, `docs/release-policy.md`. + +## Критерий приёмки + +- пробный прогон с параметром `tag` выполняет сверку версий и падает на несогласованности; +- все зашитые упоминания версии обновлены до `v0.1.0-alpha.20`, расхождение ловится автоматически; +- судьба `alpha.19` записана в `docs/release-policy.md`; +- `v0.1.0-alpha.20` опубликован, набор ассетов совпадает с `tests/release-verification/verify-assets.sh`; +- `Release Verification` отработал по событию и зелёный, ссылка на прогон в отчёте; +- всё через PR, CI зелёный, PR не смержен до зелёного. + +## Отчёт + +В описании PR, раздельно: что проверено локально, что в CI со ссылками на прогоны, что не проверялось и почему. diff --git a/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-plan-2026-08-04.md b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-plan-2026-08-04.md new file mode 100644 index 0000000..7191db9 --- /dev/null +++ b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-plan-2026-08-04.md @@ -0,0 +1,283 @@ +# План доделывания Server Monitor Manager + +Для исполнителя (Codex). Составлен 2026-08-04 против `main` @ `b11c277` плюс незакоммиченная ветка `hermes/task3-b3-fact-reconciliation`. + +Нормативные документы в репозитории после коммита `4de849e`: [`docs/product-horizons.md`](../server-monitor-manager/docs/product-horizons.md), [`docs/approval-policies.md`](../server-monitor-manager/docs/approval-policies.md), [`docs/integration-kagent.md`](../server-monitor-manager/docs/integration-kagent.md), обновлённые `docs/roadmap.md` и `docs/security-model.md`. + +--- + +## 0. Правила работы + +Проверены на четырёх блоках, менять не нужно. + +1. **Один PR — одна тема.** Смешанные PR не проходят review. +2. **Независимому review передаётся полный текст задачи**, а не только диф. Три из четырёх блоков дали находки класса «пропущенное требование», которые при diff-only ревью не ищутся вовсе. +3. **`SHA256SUMS` считается последним действием**, после всех правок отчётов, и включает все файлы пакета. +4. **Статус после merge — `merged / verified`**, а не «выполнено», если хотя бы один критерий сформулирован через фактическое поведение и не измерялся на реальной топологии. +5. **Гейты горизонтов обязательны.** Задача следующего горизонта не начинается, пока не закрыт предыдущий, даже если она кажется мелкой. +6. Формат пакета сдачи: `REPORT.md`, `TEST_EVIDENCE.md`, патч и/или ZIP, `CI_CHECKS.txt`, `INDEPENDENT_REVIEW.md`, `SHA256SUMS`. + +Размеры: **S** — до дня, **M** — 2–4 дня, **L** — неделя и больше. + +--- + +## Горизонт 0 — закрыть начатое + +Ничто из горизонтов 1–3 не начинается до полного закрытия этого раздела. + +### T0.1 — завершить B-3R · M · в работе + +Ветка `hermes/task3-b3-fact-reconciliation`. Контракт: `B3R_SPEC.md`, уже принятый исполнителем. + +Осталось по состоянию на 04.08: пакетная финальная верификация (`1 + k` вызовов `link-list` вместо двух), класс `Deferred` с инвариантом `Converged + Failed + Deferred == Examined`, R4 (source-generated DTO для orphan audit), R5 (Linux integration test на fact-first протокол), R6 (убрать fail-open default в `ILinkPolicyApplier`), R7 (форматирование вложенных scope). + +Дополнительно, найдено при проверке: любое не-`active` значение статуса в `nodes.tsv` сейчас даёт exit 80 и уходит в `Deferred` навсегда. Мусор в поле статуса должен давать 78 — это повреждённое состояние, а не ожидаемое. + +**Готово, когда:** PR создан, Linux CI зелёный впервые для этой ветки, merge выполнен. + +### T0.2 — физический acceptance · S · внешний блокер + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh +``` + +Требуются `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE`. Harness готов и содержит шаги firewall-restore без перезапуска Node и инъекции orphan-правила. + +Исполнитель закрыть не может — нужна выдача доступов. Висит четвёртый блок подряд и блокирует критерий B6, Этап 3 и Этап 5 roadmap. + +**Готово, когда:** прогон завершился `THREE_SERVER_ACCEPTANCE=PASS`, вывод приложен к пакету. + +### T0.3 — роль Monitor в bootstrap · M + +Сегодня SSH-мониторинг — функция, ради которой существует Desktop, — не имеет серверной части. В `deploy/ochenstarik-server-monitor-manager.sh` нет действия `install-monitor`, forced-command скрипт не поставляется, а парсер `SshMonitorService.QueryAsync` ожидает ключи (`PROTOCOL`, `CPU_COUNT`, `MEM_AVAILABLE_KB`, `DISK_INODES_TOTAL`…), которые в репозитории никто не производит. + +Объём: + +- `install-monitor PUBLIC_KEY` и `uninstall-monitor`; +- системный пользователь `ochenstarik-monitor`: nologin, без пароля, без sudo; +- `/usr/local/libexec/ochenstarik-smm-metrics`, root-owned `0755`, выдающий ровно снимок из `docs/installer-contract.md` §7 и read-only `mesh status`; +- `authorized_keys` с `command="…",restrict,no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding`; +- идемпотентность повторного запуска; +- контрактный тест формата снимка, общий для скрипта и парсера Desktop, чтобы они не разъезжались. + +**Готово, когда:** чистый сервер попадает под мониторинг одной командой, README-инструкция соответствует коду, тест формата в CI. + +### T0.4 — подписанная поставка · M + +Сейчас bootstrap сверяет `ARCHIVE.sha256`, лежащий рядом в том же релизе, а manifest не подписан и содержит только хэш самого bootstrap. Кто может опубликовать релиз — ставит произвольный root-код на весь парк через `update-agent`. + +Объём: + +- manifest v2: хэши всех артефактов, версии Control/Agent/helper/Desktop, минимальные совместимые версии, `helper_protocol`; +- подпись `cosign sign-blob` keyless либо `minisign`; публичный ключ или issuer **вшит константой** в bootstrap и Desktop, не скачивается вместе с релизом; +- `verify-manifest` как отдельное действие; `verify_archive` сверяет хэш с manifest, а не с соседним файлом; старый путь только под явным `SMM_ALLOW_UNSIGNED=1` с предупреждением; +- отказ `update-control`/`update-agent` при несовместимой паре версий; +- `PROGRAM_VERSION` подставляется из тега при упаковке вместо `0.2.0-dev`; +- негативные тесты в CI: изменённый байт архива, подменённый хэш в manifest, manifest без подписи — все три отвергаются. + +**Готово, когда:** установка и обновление возможны только из подписанного релиза, три негативных теста зелёные. + +### T0.5 — жизненный цикл сертификатов · S + +`CertificateAuthority.cs:55` выдаёт клиентские сертификаты на год, автопродления нет. Через год весь парк отваливается одновременно. + +- сократить срок до 30–90 дней; +- автопродление Agent за треть срока до истечения, через существующий mTLS-канал; +- событие `certificate.expiring` в поток событий; +- документированная процедура ротации Control CA и повторной регистрации парка. + +### T0.6 — гигиена репозитория и цепочки поставки · S + +- пиннинг всех GitHub Actions по commit SHA (сейчас плавающие `@v6`, `@v5`, `@v2`); +- `.github/dependabot.yml` для `github-actions` и `nuget`; +- сужение `permissions: contents: write` до job'а публикации; +- `SECURITY.md` — обязателен для инструмента безопасности; `CHANGELOG.md`, `CONTRIBUTING.md`, `CODEOWNERS`, шаблоны issue/PR; +- SBOM (`dotnet CycloneDX`) в артефакты релиза; +- удалить слитые ветки `agent/remove-lightweight-server-references`, `codex/ttl-backup-acceptance`. + +### T0.7 — базовая инженерная оснастка · S + +Делается один раз и удешевляет всё последующее. + +- `Directory.Build.props`: `Nullable`, `TreatWarningsAsErrors`, `EnableNETAnalyzers`, `AnalysisLevel latest-recommended`, детерминированная сборка; +- `Directory.Packages.props` (central package management) и `RestorePackagesWithLockFile` — сейчас сборки невоспроизводимы, что противоречит требованию закреплённой поставки; +- разделить тесты: `Core.Tests`, `Control.Tests`, `Agent.Tests`, `Helper.Tests`. Сейчас `LinuxMetricsTests`, `MetricBufferTests` и `ProvisioningHelperTests` лежат в проекте Control; +- тесты round-trip сериализации контрактов — при `PublishTrimmed=true` молчаливая потеря поля ничем не ловится. + +**Гейт Горизонта 0.** Чистый сервер ставится из подписанного релиза одной командой, регистрируется одноразовым кодом, попадает под мониторинг без ручной правки `authorized_keys`, и после перезагрузки Hub и Node фактическое состояние Links совпадает с желаемым — измерено связностью на реальной топологии. + +--- + +## Горизонт 1 — продукт для одного владельца + +### T1.1 — каркас provisioning-модулей · M · делать первым + +Сейчас вся логика мутации живёт в `TimezoneProvisioningExecutor` одним классом на 320+ строк, а `IsTimezoneOnly` жёстко фиксирует `VmSwappiness == 60`, пустые пакеты и `RebootPolicy = never`. Второй модуль скопирует backup/verify/rollback целиком. + +```csharp +IProvisioningModule + string ActionType { get; } + string ModuleHash { get; } + ValidationResult Validate(JsonElement parameters); + Plan BuildPlan(JsonElement parameters); // без мутаций + ExecutionResult Execute(Plan plan, Grant grant); // backup → mutate → verify → rollback + FactualState Observe(); +``` + +Перенести timezone на каркас без изменения поведения, покрыть тем же набором тестов. Добавление модуля после этого — один файл, одна схема, один тест. + +**Готово, когда:** timezone работает через каркас, существующие тесты зелёные без правок логики. + +### T1.2 — provisioning-модули по одному · L + +Порядок по возрастанию риска: `system.locale` → `system.packages` (versioned allowlist уже есть) → `system.swap` → `user.create` → `user.disable` → `ssh.key.add` → `ssh.key.remove`. + +Каждый модуль: versioned JSON schema, immutable plan, подтверждение по политике, factual verification, rollback, audit, тесты, прогон на VM-матрице. Новый пользователь по умолчанию без sudo. Приватные ключи на Hub не попадают. + +### T1.3 — политики подтверждения · M + +По `docs/approval-policies.md`. Девять режимов вместо бинарного подтверждения. Решение принимает Control, не клиент. Понижение режима для конкретного задания невозможно, изменение политики — аудируемое событие. + +Зависимость: T1.1, потому что режим выбирается по `ActionType`. + +### T1.4 — firewall и двухфазная миграция SSH · L · самая опасная задача проекта + +По `docs/provisioning-vpn-requirements.md` §10. Порядок шагов там уже выписан и его надо соблюсти буквально. + +Критическое требование: порт 22 невозможно закрыть до успешной второй SSH-сессии на новом порту. Отдельное подтверждение на закрытие старого порта. При любой ошибке — откат drop-in и правила firewall с сохранением активной сессии. + +Обязательный тест: новый порт не поднялся → 22 остался открыт и доступен. + +Делать только после T1.1–T1.3 и полного Горизонта 0. + +### T1.5 — alert engine · M + +Пороги, warning/critical, duration, cooldown, дедупликация, режим обслуживания, подтверждение, эскалация, история инцидентов, автозакрытие, тихие часы. Формат правила уже согласован: + +```yaml +name: Disk almost full +metric: disk.used_percent +condition: "> 90" +duration: 10m +severity: critical +channels: [telegram, email] +cooldown: 30m +``` + +### T1.6 — Telegram, только чтение · S + +`/status`, `/servers`, `/alerts`, `/links`, `/jobs`. Никаких мутаций, приватных ключей, управления CA и произвольных команд. Токен — секрет; до появления Vault хранить как остальные секреты Control, с маскированием в диагностике и аудите. + +### T1.7 — наблюдение Docker и systemd · M + +Сначала только чтение: контейнеры, образы, healthcheck, счётчики рестартов, отсутствующие лимиты, failed units, journald. Действия — отдельной задачей, только по allowlist, с подтверждением и аудитом, без произвольных аргументов. + +### T1.8 — Backup Manager · M + +Источники: каталоги, конфигурации, Docker volumes, Control DB и CA. Хранилища local и S3. Расписания, шифрование, retention, контрольные суммы, проверка архива, тестовое восстановление, оповещения об ошибке и об устаревшей копии. + +### T1.9 — технический долг Control и Desktop · M · фоном + +- `ControlStore.cs` 1576 строк: разделить на `ControlSchema`, `IdentityStore`, `MetricStore`, `LinkStore`, `AuditStore`, `IdempotencyStore`; +- `MainPage.xaml.cs` 1124 строки без MVVM и DI: вынести ViewModel, добавить unit-тесты Desktop; +- локализация: русские строки захардкожены в бизнес-логике (`SshMonitorService`, `ControlClientService`); ввести `.resw`, в исключениях — коды, текст на уровне UI; +- `HttpClient` создаётся на каждый запрос в `ControlClientService` и `AgentClient`: один `SocketsHttpHandler` с `PooledConnectionLifetime`; +- поток событий: durable log, `GET /events?since=`, keepalive раз в 15 с, лимит подписок, экспоненциальный backoff с джиттером на клиенте; +- rate limiting не только на enrollment: политики на группы `agents` и `control`, `MaxConcurrentConnections`; +- единый источник валидаторов: `NodeIdValidator` и прочие живут в `Program.cs` и продублированы в bash и helper — три реализации одних правил. + +**Гейт Горизонта 1.** Каждый мутирующий модуль имеет схему, immutable plan, подтверждение, factual verification, rollback и audit и прошёл физическую приёмку на VM-матрице. + +--- + +## Горизонт 2 — платформа + +### T2.1 — решение по публичному интерфейсу · S · до всякого кода + +Заполнить раздел «Публичный интерфейс» в `docs/security-model.md`: отдельный listener и порт, отношение веб-сессий к mTLS-идентичностям, перечень операций, недоступных веб-сессии в принципе, привязка сессии к устройству, CSRF, rate limiting, повторная аутентификация. + +Без этого решения Web UI не начинается. + +### T2.2 — Secret Vault · M + +Envelope encryption, версии, ротация, маскированный показ, scoped delivery, TTL, отзыв, redaction. Предусловие для Telegram-токена, ключей S3 и VPN-подписок. + +### T2.3 — Web UI и аутентификация · L + +Разделы: Dashboard, Servers, Metrics, Links, Provisioning, Alerts, Audit, Users, Automation identities, Backups, Settings. Аутентификация: пароль, TOTP, коды восстановления, WebAuthn, passkeys, доверенные устройства, сессии, RBAC, повторная аутентификация. + +Операции класса firewall / CA / удаление Node / экспорт секретов — только по mTLS-идентичности, не по веб-сессии. + +### T2.4 — решение по хранилищу логов · S · до кода + +Логи journald + Docker + nftables + SSH со всех узлов не лягут на Control SQLite и раздуют резервные копии. Выбрать: отдельное хранилище, выгрузка вовне, либо только tail на узле без центрального retention. + +### T2.5 — централизованные логи · L + +После T2.4. Поиск, фильтры, уровни, retention, redaction, таймлайн инцидента, экспорт диагностики, корреляция. + +### T2.6 — security posture · M + +Оценка, объяснения, план исправления, безопасное применение, история, исключения, принятые риски, отчёты. + +### T2.7 — multi-Hub, фаза 1 · M + +Резервные копии БД и CA, шифрованное хранилище, проверка восстановления, ручное переключение. Репликация, active/passive и кворум — вне плана. + +### T2.8 — один VPN-модуль · L + +Xray VLESS Reality, полный жизненный цикл: preflight, установка, обновление, отключение, verification, rollback timer, routing exclusions, kill switch с management exceptions, аварийное отключение без Control, reboot-тест, reconciliation, ротация секретов. + +Второй VPN-модуль не начинается, пока первый не прошёл физическую приёмку. Шесть наполовину сделанных VPN — это шесть способов потерять доступ к серверу. + +--- + +## Горизонт 3 — интеграция с KAgent + +По `docs/integration-kagent.md`. Строго в порядке: T3.1 → T3.4. + +### T3.1 — обнаружение и идентичность · M + +Unix-сокет `/run/server-monitor-manager/integration.sock`, `root:smm-integrations`, `0640`, каталог `0750`. Обязательно переиспользовать меры из `ProvisioningHelperServer`: `SO_PEERCRED` со сверкой uid, обработка вне цикла accept, ограничение параллелизма, таймаут соединения, буферное чтение, лимиты частоты. Роль `KAgentIntegration` с одноразовым token, сроком, областью Nodes и отзывом. + +### T3.2 — чтение · M + +Nodes, метрики, здоровье, события. Согласование версии протокола и фактически выданных возможностей. Невыдаваемые возможности отсутствуют как код, а не выключены настройкой. + +### T3.3 — планы и запросы · L + +`*.plan` и `*.request` порождают обычный typed provisioning job с immutable plan, режимом подтверждения, execution grant, factual verification и audit. Отдельного пути для AI нет. `*.request` возвращает идентификатор задания, а не результат. + +### T3.4 — жизненный цикл Worker · L · наивысший риск в проекте + +Инвариант недоверенного исполнителя из `docs/security-model.md` — главное требование, всё остальное вторично. Отдельный пользователь без sudo, контейнер с read-only rootfs, seccomp, AppArmor, сброшенными capabilities; нет доступа к сокету helper, к `agent.pfx`, `control-ca.crt`, `nodes.tsv`, каталогу rollback; нет сетевого доступа к Control API; порт наружу не публикуется. + +Задачные Links: обязательный TTL, запрет destination = Hub или другой Worker, снятие по завершении, отказу, таймауту, offline, истечению аренды и аварийной остановке, с фактической проверкой снятия. + +Аварийные средства: отзыв сертификата, остановка всех Worker, отключение задачных Links, блокировка новых запросов, режим только чтения, карантин, отключение сети, сохранение журналов. + +--- + +## Что не делать + +- Не начинать VPN-модули до закрытия Горизонта 1. Kill switch при незакрытом расхождении desired/factual — гарантированная потеря доступа к серверу. +- Не добавлять второй provisioning-модуль копированием timezone-исполнителя. Сначала T1.1. +- Не проектировать API KAgent против сущностей, которых нет: `containers`, `services`, `logs`, `backups` появляются вместе с самими подсистемами. +- Не начинать macOS/Linux Desktop и мобильные клиенты до стабилизации контрактов `Core` — они меняются почти каждым PR. +- Не делать репликацию и кворум multi-Hub. +- Не расширять расширенный мониторинг (SMART, RAID, GPU, UPS) — каждый пункт требует привилегированного сборщика и отдельной модели угроз. + +--- + +## Критический путь + +``` +T0.1 ─┐ +T0.3 ─┼─► T0.2 (внешний блокер) ─► гейт Г0 ─► T1.1 ─► T1.2 ─► T1.3 ─► T1.4 ─► гейт Г1 ─► Горизонт 2 ─► Горизонт 3 +T0.4 ─┤ +T0.5 ─┘ +``` + +T0.6 и T0.7 идут параллельно и ничего не блокируют. T1.5–T1.9 параллельны T1.2–T1.4. + +Единственное, что нельзя обойти работой исполнителя, — **T0.2**. Он дешевле любой другой задачи в этом плане и блокирует всё. diff --git a/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-alpha14-2026-08-15.md b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-alpha14-2026-08-15.md new file mode 100644 index 0000000..2351778 --- /dev/null +++ b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-alpha14-2026-08-15.md @@ -0,0 +1,106 @@ +# Codex: выпустить v0.1.0-alpha.14 и дать установку одной командой + +Задание самодостаточно: истории работы по этому репозиторию у вас нет, всё нужное ниже. + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- Локальный клон для этой работы: `C:\Users\Ochenstarik\projects\smm-codex` +- База: `main` @ `b0ad40c` +- Ветка: `codex/release-alpha14` + +Server Monitor Manager — Windows-клиент, ASP.NET Core Control Hub, Linux-агент и WireGuard-mesh с политиками nftables. Устанавливается на серверы bash-скриптом `deploy/ochenstarik-server-monitor-manager.sh` (bootstrap), который поставляется в GitHub Release вместе с самораспаковывающимися архивами компонентов. + +## Правила репозитория + +- `main` защищён: PR обязателен, обязательны статусы `build-and-test` и `build`, force-push запрещён. Прямые коммиты в `main` невозможны; +- один PR — одна тема; +- описание PR заполняется **после** завершения CI, со ссылками на конкретные прогоны; +- отсутствие проверки не является дефектом отчёта; утверждение о проверке, противоречащее статусу CI, — является; +- `docs/release-policy.md` запрещает двигать опубликованные теги и заменять ассеты: исправление выпускается следующей версией; +- `.github/workflows/linux-release.yml` — единственный публикатор релизов. + +## Состояние и зачем это нужно + +Владелец проекта не может установить систему на свои серверы. Причина точная: + +`deploy/smm-setup.sh` по умолчанию указывает на `v0.1.0-alpha.14`, которого не существует. Опубликован `v0.1.0-alpha.13`. Установка упирается в 404 на всех семи файлах релиза. + +Предыстория, чтобы не повторить: + +- `v0.1.0-alpha.10` и `v0.1.0-alpha.11` — теги созданы, но `Release pipeline` упал, релизы не опубликованы. Номера сожжены, переиспользовать нельзя. Оба раза причина одна: пайплайн не прогоняли перед тегированием; +- `v0.1.0-alpha.12` и `v0.1.0-alpha.13` опубликованы, но содержат `server-monitor-manager-manifest.sig` **без** `server-monitor-manager-manifest.pem`. Подпись cosign делается keyless-режимом, проверяется эфемерным сертификатом, а не постоянным ключом — без `.pem` проверить подпись невозможно. Эти релизы непроверяемы и останутся такими: политика запрещает дополнять опубликованный релиз; +- в `main` сертификат уже публикуется, `verify_archive` требует manifest, подпись и сертификат вместе. `v0.1.0-alpha.14` — первый релиз, где подпись работает целиком. + +--- + +## Часть 1 — выпустить `v0.1.0-alpha.14` + +1. **Сначала прогнать `Release pipeline` через `workflow_dispatch` на своей ветке.** Шаги публикации защищены `if: startsWith(github.ref, 'refs/tags/')` и на ветке пропускаются, но сборка, подпись и проверки выполнятся. Именно пропуск этого шага сжёг два тега подряд. +2. Создать и запушить тег `v0.1.0-alpha.14` обычным `git push` — не через `gh release create`: релиз создаёт сам workflow по событию `push: tags: v*`. +3. Сверить набор ассетов со списком в `tests/release-verification/verify-assets.sh` — он является контрактом. Обязательно должен присутствовать `server-monitor-manager-manifest.pem`. +4. Убедиться, что workflow `Release Verification` отработал **автоматически** по событию `release: published` и зелёный. Это главный результат: впервые проверка пройдёт против настоящего подписанного релиза, а не против ветки. + +Если `Release Verification` найдёт дефект релиза — это успех задачи, а не провал. Зафиксировать находку отдельным разделом отчёта и не «чинить» её ослаблением проверки или флагом `SMM_ALLOW_UNSIGNED`. + +**Тег не двигать ни при каких обстоятельствах.** Ошибка исправляется следующим номером. + +## Часть 2 — установка одной командой + +Сейчас оператор вручную скачивает семь файлов: установщик и его контрольную сумму, архив и его контрольную сумму, manifest, подпись и сертификат. Пропуск любого из трёх файлов подписи означает отказ `verify-release`. Это лишний источник ошибок в самой ответственной операции, и владелец просит одну команду. + +Добавить в `deploy/smm-setup.sh`: + +``` +smm-setup.sh install-hub PUBLIC_HOST [HTTPS_PORT] [WG_PORT] +smm-setup.sh install-node +``` + +Поведение: + +- определить архитектуру (`x86_64` → `linux-x64`, `aarch64`/`arm64` → `linux-arm64`) и выбрать соответствующий архив; +- скачать в рабочий каталог архив, его `.sha256`, manifest, подпись и сертификат публичным `curl` — без `gh` и без токена: у оператора их нет; +- сверить контрольную сумму архива; +- выполнить `install-control` и `mesh-init` для роли hub, либо `install-node` для роли node; +- при отсутствии любого из трёх файлов подписи — отказ с внятным сообщением, а не тихий переход на `.sha256`. + +Существующий сквозной режим (`smm-setup.sh <любая-команда-bootstrap>`) сохранить: он используется в тестах и в скрипте приёмки `tests/acceptance/three-server-mesh.sh`. + +Обновить `docs/linux-bootstrap.md`: короткий путь показать основным, ручной оставить ниже. + +Добавить проверку в `tests/bootstrap/test-release-contract.sh`: обе новые команды существуют, отвергают лишние и недостающие аргументы, и не проходят без файлов подписи. + +## Часть 3 — зафиксировать судьбу непроверяемых релизов + +В `docs/release-policy.md` записать: + +- `v0.1.0-alpha.10` и `v0.1.0-alpha.11` — теги без опубликованного релиза, номера не переиспользуются; +- `v0.1.0-alpha.12` и `v0.1.0-alpha.13` — опубликованы с подписью, но без сертификата, поэтому проверке подписи не поддаются; +- `v0.1.0-alpha.14` — первый полностью проверяемый релиз. + +Это нужно, чтобы через полгода никто не выяснял заново, почему подпись двух релизов не сходится. + +--- + +## Границы + +Antigravity параллельно ведёт проверку подписи на стороне Desktop. **Не трогать:** `src/ServerMonitorManager.Desktop/**`, `tests/ServerMonitorManager.Desktop.Security.Tests/**`, `.github/workflows/windows-build.yml`. + +Ваша область: `deploy/**`, `.github/workflows/linux-release.yml`, `tests/bootstrap/**`, `docs/linux-bootstrap.md`, `docs/release-policy.md`. + +## Критерий приёмки + +- `workflow_dispatch`-прогон `Release pipeline` выполнен **до** тегирования, ссылка в отчёте; +- `v0.1.0-alpha.14` опубликован, набор ассетов совпадает с `verify-assets.sh`; +- `Release Verification` отработал по событию публикации и зелёный, ссылка в отчёте; +- `install-hub` и `install-node` ставят систему без ручного скачивания файлов подписи; +- отсутствие manifest, подписи или сертификата даёт отказ, а не переход на `.sha256`; +- новые команды покрыты контрактным тестом; +- судьба alpha.10–alpha.13 записана в `docs/release-policy.md`; +- всё через PR, CI зелёный, PR не смержен до зелёного. + +## Отчёт + +Раздельно: что проверено локально, что в CI со ссылками на прогоны, что не проверялось и почему. + +Физическая приёмка на реальных серверах в задание не входит — её выполняет владелец после выпуска релиза. diff --git a/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-alpha15-2026-08-15.md b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-alpha15-2026-08-15.md new file mode 100644 index 0000000..b6f3af5 --- /dev/null +++ b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-alpha15-2026-08-15.md @@ -0,0 +1,151 @@ +# Codex: cosign в поставке и работающий автозапуск проверки релиза → `v0.1.0-alpha.15` + +Задание самодостаточно: истории работы по этому репозиторию у вас нет, всё нужное ниже. + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- База: `main` @ `0405b0b` (merge PR #42) +- Ветка: `codex/cosign-provisioning` + +Server Monitor Manager — Windows-клиент, ASP.NET Core Control Hub, Linux-агент и WireGuard-mesh с политиками nftables. На серверы ставится bash-скриптом `deploy/ochenstarik-server-monitor-manager.sh` (bootstrap); `deploy/smm-setup.sh` — обёртка, скачивающая релизные ассеты и дающая команды `install-hub` и `install-node`. + +## Правила репозитория + +- `main` защищён: PR обязателен, обязательны статусы `build-and-test` и `build`, force-push запрещён; +- один PR — одна тема; +- описание PR заполняется **после** завершения CI, со ссылками на конкретные прогоны; +- отсутствие проверки не является дефектом отчёта; утверждение о проверке, противоречащее статусу CI, — является; +- `docs/release-policy.md` запрещает двигать опубликованные теги и заменять ассеты: исправление выпускается следующей версией; +- `.github/workflows/linux-release.yml` — единственный публикатор релизов. + +--- + +## Что произошло + +`v0.1.0-alpha.14` выпущен и содержит полный набор из 17 ассетов, включая `server-monitor-manager-manifest.pem`. Это первый релиз, подпись которого проверяема. + +`Release Verification` против него **упал**, и это ровно тот результат, ради которого workflow писался. Он нашёл два независимых дефекта. + +### Дефект 1 — cosign не поставляется, установка на чистый сервер невозможна + +Прогон [31894428693](https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31894428693), шаг `Run Positive Installation`: + +``` +ochenstarik-server-monitor-manager.sh: OK +[ochenstarik-server-monitor-manager] Supported platform: ubuntu 24.04, x86_64 +[ochenstarik-server-monitor-manager] ERROR: Required command is missing: cosign +``` + +`verify_manifest` в bootstrap (`deploy/ochenstarik-server-monitor-manager.sh:298`) вызывает `require_command cosign`. При этом: + +- `cosign` не входит в стандартные репозитории Ubuntu; +- `install_dependencies` ставит только `wireguard-tools nftables iproute2`; +- `smm-setup.sh` не упоминает cosign вообще; +- `docs/linux-bootstrap.md` объясняет, **зачем** нужен сертификат, но нигде не говорит, **откуда взять** cosign. + +Следствие: `install-hub` на чистой Ubuntu скачивает все файлы, доходит до проверки подписи и умирает. Владелец проекта не может поставить систему на свои серверы — при том, что установка «одной командой» и была смыслом PR #42. + +Дополнительно, в CI отказ произошёл по смежной причине, которую тоже надо устранить: шаг `Setup cosign` (`sigstore/cosign-installer`) кладёт бинарь в каталог, который добавляется в `PATH` через `GITHUB_PATH`, а тест вызывает bootstrap через `sudo`, и `secure_path` в `/etc/sudoers` эту запись отбрасывает. То есть даже установленный на runner'е cosign невидим для проверяемого кода. + +### Дефект 2 — `Release Verification` никогда не запускается сам + +`.github/workflows/release-verification.yml` объявлен с `on: release: types: [published]`. Релиз создаёт `linux-release.yml` под `GITHUB_TOKEN`, а события, порождённые этим токеном, по правилам GitHub не запускают другие workflow — защита от рекурсии. Прогон по `alpha.14` пришлось запускать вручную через `workflow_dispatch`. + +Механизм выглядит настроенным и не может сработать ни разу. Пункт «`Release Verification` отработал автоматически» в приёмке предыдущего задания был недостижим в принципе — это дефект задания, не исполнителя. + +--- + +## Часть 1 — обеспечить cosign + +Требование: **оператор на чистой Ubuntu выполняет одну команду и получает установленную систему с проверенной подписью.** Ни ручной установки cosign, ни `SMM_ALLOW_UNSIGNED`. + +Реализовать провижининг cosign в поставке: + +- закреплённая версия и закреплённая контрольная сумма **на каждую архитектуру**, обе константами в скрипте, а не вычисляемые на лету; +- скачивание бинаря публичным `curl` с `https://github.com/sigstore/cosign/releases/download//cosign-linux-`; +- сверка sha256 с закреплённой константой **до** запуска бинаря; несовпадение — отказ; +- установка в `/usr/local/bin/cosign` режимом `0755` (каталог входит в `secure_path`, поэтому cosign станет виден и под `sudo`); +- если пригодный `cosign` уже в `PATH` — не трогать существующий, но проверить, что он запускается; +- версия и её контрольные суммы записываются в `docs/linux-bootstrap.md`, чтобы обновление было осознанным действием, а не молчаливым дрейфом. + +Где размещать вызов — ваше решение, но оно должно закрывать оба пути: короткий (`install-hub` / `install-node` в `smm-setup.sh`) и сквозной (`preflight` / `verify-release` в bootstrap). Второй используется в `tests/acceptance/three-server-mesh.sh`. + +Отдельно предусмотреть отказ с внятным текстом, если скачать cosign невозможно (нет сети, недоступен github). Сообщение должно называть версию, ожидаемую сумму и путь установки — оператору должно хватить его, чтобы поставить cosign вручную. + +## Часть 2 — сделать проверку честной + +Удалить шаг `Setup cosign` из `.github/workflows/release-verification.yml`. + +Пока cosign даёт runner, тест проверяет окружение GitHub, а не поставку. После удаления шага `Run Positive Installation` проходит только если cosign обеспечивает сам установщик — то есть ровно в том случае, когда пройдёт и установка у оператора. + +Убедиться, что негативные проверки подписи (`run-negative-tests.sh`) остаются работоспособны и продолжают отвергать подделанные manifest, подпись и сертификат. + +## Часть 3 — починить автозапуск + +Добиться того, чтобы публикация тега давала результат проверки **без действий человека**. Два пригодных пути: + +- перевести `release-verification.yml` на `on: workflow_run` по завершении `Release pipeline` с фильтром по успешному завершению и по тегу — `workflow_run` срабатывает на завершение другого workflow и ограничением `GITHUB_TOKEN` не блокируется; +- либо вынести проверку в отдельный job внутри `linux-release.yml`, зависящий от публикации. + +Первый путь сохраняет разделение и оставляет `workflow_dispatch` для ручного перепрогона; второй проще, но смешивает выпуск и проверку в одном workflow. Выберите один и обоснуйте выбор в отчёте. + +`workflow_dispatch` с параметром `tag` сохранить в любом случае — им перепроверяют старые релизы. + +## Часть 4 — выпустить `v0.1.0-alpha.15` + +1. **До тегирования** прогнать `Release pipeline` через `workflow_dispatch` на своей ветке. Шаги публикации защищены `if: startsWith(github.ref, 'refs/tags/')` и пропустятся, но сборка и подпись выполнятся. Пропуск этого шага уже сжёг два номера (`alpha.10`, `alpha.11`). +2. Создать и запушить тег обычным `git push` — не через `gh release create`: релиз создаёт сам workflow по событию `push: tags: v*`. +3. Убедиться, что `Release Verification` запустился **сам** и зелёный. Это главный результат задания. +4. Тег не двигать ни при каких обстоятельствах. + +## Часть 5 — эргономика `install-hub` и `install-node` + +Найдено живой установкой на Ubuntu 24.04, обе вещи стоили оператору прерванных попыток. + +**Аргументы проверяются после скачивания.** Вызов `install-hub ВАШ-ХОСТ 178.212.13.102` — плейсхолдер вместо адреса, IP на месте порта — прошёл проверку арности, после чего скрипт скачал 24 МБ и только потом дошёл бы до разбора значений. Валидация `PUBLIC_HOST`, `HTTPS_PORT` и `WG_PORT` должна выполняться **до первого сетевого запроса**. Отдельно отвергать очевидный плейсхолдер: значение, не являющееся ни IPv4-литералом, ни синтаксически годным DNS-именем. + +**Скачивание идёт молча.** `curl -fsSL` на 24 МБ не печатает ничего, и оператор дважды принимал это за зависание и жал Ctrl+C. Показывать индикатор и имя файла: `curl -fL --progress-bar -o <имя>`. То же относится к любому крупному файлу, который скрипт тянет сам. + +**Имя `install-node` перекрыто.** У обёртки есть своя команда `install-node` без аргументов, а у bootstrap — одноимённая, принимающая путь к архиву. Оператор, скачавший файлы заранее, получает `install-node takes no arguments` и не имеет способа догадаться, что нужен разделитель `--`. Либо принимать необязательный путь к архиву и, если он задан, пропускать скачивание, либо в тексте отказа прямо называть обходной путь: `smm-setup.sh -- install-node ARCHIVE`. Первое лучше: скачивание заново — это ещё 24 МБ поверх уже имеющихся. + +**Проверка подписи виснет молча и без таймаута.** `verify_manifest` вызывает `cosign verify-blob ... >/dev/null 2>&1`. При медленной или частично недоступной сети cosign уходит к службам sigstore и не возвращается, а оператор видит только строку `Verifying manifest signature...` и не имеет ни малейшего указания, что происходит. Наблюдалось на живой машине. Требуется: не глушить вывод cosign (или сохранять его в лог и печатать при отказе), обернуть вызов в `timeout` с внятным сообщением по истечении, и в тексте отказа прямо называть службы, к которым нужен доступ. Отдельно задокументировать в `docs/linux-bootstrap.md`, что проверка подписи требует исходящего доступа к sigstore — сейчас об этом не сказано нигде, и оператор в закрытом контуре узнает это зависанием. + +**`mesh-status` печатает сырой Unix-time.** Колонка `HANDSHAKE` показывает `1786843345`. Оператор смотрит в неё ровно затем, чтобы понять, свежий ли handshake, и обязан считать это в уме. Выводить относительное время (`12s ago`, `3m ago`) либо `never`, если рукопожатия не было. + +Покрыть контрактным тестом: неверный порт и плейсхолдер в `PUBLIC_HOST` отвергаются без обращения в сеть; `install-node` с путём к архиву не приводит к сообщению об аргументах. + +## Часть 6 — записать судьбу alpha.14 + +В `docs/release-policy.md`: + +- `v0.1.0-alpha.14` — первый релиз с полным набором подписи, но установка из него на чистый хост невозможна: cosign не поставляется. Проверяем, не устанавливаем; +- `v0.1.0-alpha.15` — первый релиз, устанавливаемый на чистый хост. + +--- + +## Границы + +Antigravity ведёт проверку подписи на стороне Desktop. **Не трогать:** `src/ServerMonitorManager.Desktop/**`, `tests/ServerMonitorManager.Desktop.Security.Tests/**`, `.github/workflows/windows-build.yml`. + +Ваша область: `deploy/**`, `.github/workflows/linux-release.yml`, `.github/workflows/release-verification.yml`, `tests/release-verification/**`, `tests/bootstrap/**`, `docs/linux-bootstrap.md`, `docs/release-policy.md`. + +## Критерий приёмки + +- cosign обеспечивается поставкой; закреплены версия и контрольные суммы обеих архитектур; +- подделанная контрольная сумма cosign даёт отказ — покрыто тестом; +- шаг `Setup cosign` из `release-verification.yml` удалён; +- `Release Verification` по `v0.1.0-alpha.15` запустился **по событию, без `workflow_dispatch`**, и зелёный; ссылка на прогон в отчёте; +- `workflow_dispatch` с параметром `tag` продолжает работать; ссылка на прогон по произвольному тегу; +- `install-hub` и `install-node` доводят установку до конца на хосте без cosign; +- неверные аргументы отвергаются до первого сетевого запроса; крупные загрузки показывают индикатор; +- `SMM_ALLOW_UNSIGNED` не используется ни в одном новом пути и остаётся тем, чем был — аварийным флагом; +- `workflow_dispatch`-прогон `Release pipeline` выполнен до тегирования, ссылка в отчёте; +- судьба `alpha.14` записана в `docs/release-policy.md`; +- всё через PR, CI зелёный, PR не смержен до зелёного. + +## Отчёт + +Раздельно: что проверено локально, что в CI со ссылками на прогоны, что не проверялось и почему. + +Физическая приёмка на реальных серверах в задание не входит — её выполняет владелец после выпуска релиза. diff --git a/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-mesh-state-permissions-2026-08-18.md b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-mesh-state-permissions-2026-08-18.md new file mode 100644 index 0000000..6f3bd17 --- /dev/null +++ b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-mesh-state-permissions-2026-08-18.md @@ -0,0 +1,60 @@ +# Codex: дать Control доступ к состоянию mesh + +Небольшое задание, но блокирующее: без него эндпоинт выдачи кодов регистрации, сделанный Antigravity в PR #53, на настоящем Hub не работает. + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- База: `main` @ `5fd9def` или новее +- Ветка: `codex/mesh-state-permissions` +- `main` защищён: PR обязателен, обязательны статусы `build-and-test` и `build`, force-push запрещён +- один PR — одна тема; описание PR заполняется **после** завершения CI + +## Дефект + +`NodeEnrollmentService` в Control читает и дописывает `/var/lib/ochenstarik-server-monitor-manager/mesh/nodes.tsv` — тот же файл и тот же формат из четырёх колонок, что использует `reserve_node_address` в `deploy/ochenstarik-server-monitor-manager.sh`. Разделяемое состояние выбрано верно: два источника истины были бы хуже. + +Но доступа к этому файлу у Control нет: + +- `deploy/ochenstarik-server-monitor-manager.sh:723` и `:764` — `install -d -m 0700 "$MESH_DIR"`, каталог создаётся от root и остаётся root-овым; +- `:740` и `:766` — `chmod 0600 "$MESH_DIR/nodes.tsv"`; +- `:574` — `chown -R "$CONTROL_USER:$CONTROL_USER" "$STATE_DIR/control"`. Права выдаются только подкаталогу `control`. Подкаталог `mesh` не упомянут нигде; +- `deploy/ochenstarik-smm-control.service:8` — `User=ochenstarik-smm-control`. + +Итог: на настоящем Hub запрос кода упрётся в отказ доступа. В CI это не проявляется — тесты подставляют `Control:MeshNodesPath` во временный каталог, поэтому проверяется логика, но не права. + +## Что сделать + +Дать пользователю Control право читать и изменять состояние mesh, не отдавая ему лишнего: + +- каталог `$MESH_DIR` — `root:$CONTROL_USER`, режим `0770`; +- `$MESH_DIR/nodes.tsv` — `root:$CONTROL_USER`, режим `0660`; +- применить это во всех местах, где каталог и файл создаются, а не в одном: сейчас это `mesh_init` и `reserve_node_address`; +- существующие установки чинятся при обновлении: если каталог уже есть с прежними правами, они приводятся к новым. + +Приватные ключи WireGuard в `$WG_DIR` остаются недоступными Control. Проверьте, что `$WG_DIR` и `$MESH_DIR` — разные каталоги, и что расширение прав не задевает ключи. + +## Что проверить тестами + +- после `mesh-init` каталог и файл имеют ожидаемых владельца, группу и режим; +- пользователь Control может прочитать и дописать `nodes.tsv`; +- пользователь Control **не** может прочитать приватный ключ Hub; +- обновление поверх установки со старыми правами приводит их к новым. + +## Замечание про гонку + +Ни bash, ни Control не берут блокировку на `nodes.tsv`. Внутри Control выдача сериализована семафором процесса, но с bash-путём `node-code` он не согласован, а Control ещё и перезаписывает файл целиком, а не дописывает: одновременная запись из bash будет потеряна. + +Пока код выдаётся из одного места, это теоретическая гонка. Но два пути к одному файлу уже существуют. Разумно ввести общую блокировку `flock` на `nodes.tsv` и использовать её с обеих сторон. Bash-сторона — ваша; если сделаете, отметьте в отчёте, чтобы Antigravity подхватил то же соглашение в Control. + +## Критерий приёмки + +- Control читает и дописывает `nodes.tsv` под своим пользователем; +- приватные ключи WireGuard Control недоступны; +- права выставляются во всех местах создания и чинятся при обновлении; +- перечисленные проверки присутствуют и проходят; +- PR, CI зелёный, PR не смержен до зелёного. + +## Отчёт + +Раздельно: что проверено локально, что в CI со ссылками на прогоны, что не проверялось и почему. diff --git a/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-unified-installer-2026-08-17.md b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-unified-installer-2026-08-17.md new file mode 100644 index 0000000..33e0df6 --- /dev/null +++ b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-unified-installer-2026-08-17.md @@ -0,0 +1,114 @@ +# Codex: единый установщик с выбором роли + +## Порядок + +Это задание выполняется **после** `smm-codex-task-alpha15-2026-08-15.md`. Пока не поставляется cosign, установка на чистый сервер невозможна, и переделывать интерфейс установщика поверх неработающей установки бессмысленно. + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- База: `main` после слияния alpha.15 +- Ветка: `codex/unified-installer` + +## Правила репозитория + +- `main` защищён: PR обязателен, обязательны статусы `build-and-test` и `build`, force-push запрещён; +- один PR — одна тема; +- описание PR заполняется **после** завершения CI, со ссылками на конкретные прогоны; +- `docs/release-policy.md` запрещает двигать опубликованные теги и заменять ассеты; +- `.github/workflows/linux-release.yml` — единственный публикатор релизов. + +--- + +## Зачем + +Живая установка на четырёх машинах показала, что оператор ошибается не в сложных местах, а в простых: путает роль, путает машину, оставляет плейсхолдер в аргументе, прерывает молчаливую загрузку. Владелец просит один файл, который спрашивает роль и делает остальное сам. + +Второе изменение: код регистрации узла больше не выпускается на Hub через ssh. Его выдаёт приложение оператора — Windows-клиент или веб-консоль. Соответствующий эндпоинт делает Antigravity заданием `smm-antigravity-task-web-console-2026-08-17.md`. Установщику от этого нужно одно: принимать готовый код `SMMNODE2...`, как он делает и сейчас. + +## Что сделать + +Единый интерактивный режим `smm-setup.sh` без аргументов: + +1. показать, что за машина: дистрибутив, версия, архитектура, публичный адрес, наличие уже установленных компонентов; +2. спросить роль — Hub или узел; +3. для Hub: спросить публичный адрес, предложив определённый автоматически как значение по умолчанию; порты предложить `7443` и `51820`; +4. для узла: попросить код `SMMNODE2...`, показать разобранный из кода адрес Hub и отпечаток CA, потребовать подтверждения; +5. проверить и доустановить зависимости, включая cosign; +6. скачать и проверить релизные файлы с видимым индикатором; +7. выполнить установку; +8. по завершении Hub напечатать **то, что нужно вставить в приложение оператора**: код регистрации устройства и отпечаток CA. Иначе получается замкнутый круг — приложение не может выдать код узла, пока само не подключено к Hub; +9. по завершении узла напечатать `SMMPEER1...` и прямо сказать, куда его вставить. + +Требования к поведению: + +- существующие неинтерактивные команды сохраняются полностью: они используются в `tests/acceptance/three-server-mesh.sh` и в проверке релиза. Интерактивный режим — это режим по умолчанию при запуске без аргументов, а не замена; +- при отсутствии терминала (запуск из скрипта, `stdin` не tty) интерактивный режим не включается, а выдаётся подсказка с неинтерактивными командами; +- ни один ввод не приводит к выполнению постороннего кода: код регистрации, адрес и порты проверяются до использования; +- повторный запуск на уже установленной машине распознаёт это и предлагает осмысленный выбор, а не падает и не ставит поверх. + +## Состояние на 2026-08-18 + +**Установочная часть выполнена и слита** — PR #58, `main` @ `f7b10ac`: интерактивный режим без аргументов, выбор роли Hub/Node, показ состояния машины, доустановка зависимостей, разбор кода `SMMNODE2`, отказ без tty, тесты в `tests/bootstrap/test-unified-installer.sh`, обновлённая документация. + +**Удаление не сделано.** В меню по-прежнему два пункта: `Choose role: 1) Hub 2) Node`, и `die "choose Hub (1) or Node (2)"` на всё остальное. Требование ниже появилось в задании 2026-08-18 и, судя по всему, до исполнителя не дошло. Оно остаётся в силе и выполняется **отдельным PR** поверх слитого. + +Релиз с единым установщиком **не выпускать до готовности удаления**: смысл в том, чтобы владелец получил одну программу, умеющую и поставить, и снять. Выпуск половины означает второй релиз следом, а проект уже сжигал теги на такой спешке. + +--- + +## Дополнение от владельца 2026-08-18 — полное удаление в том же файле + +PR #58 закрывает установку, но не удаление. Владелец требует, чтобы единый файл умел и снимать систему целиком: третий пункт меню рядом с Hub и Node. + +Сегодня `uninstall-agent` и `uninstall-control` снимают не всё. После них остаются системные пользователи и группы, конфигурация WireGuard и юнит `wg-quick@smm0`, таблица nftables `inet ochenstarik_smm`, каталоги состояния, запись в `sudoers.d`, файл в `sysctl.d`. Владелец проходил это вручную; точный список — в `smm-cleanup-and-install-2026-08-15.md`, раздел 1, проверен на живых серверах. + +### Что сделать + +Третий выбор роли: **удалить всё**. Поведение: + +1. **Сначала показать, что будет удалено**, и только потом спрашивать подтверждение. Список строится по фактическому состоянию машины, а не печатается шаблоном: какие юниты найдены, какие пользователи существуют, есть ли таблица nftables, есть ли `smm0`, какие каталоги непусты. +2. **Подтверждение — набранным словом, не `y/N`.** Прецедент есть: `uninstall-control` требует `--confirm-destroy-control`. Случайное нажатие не должно сносить Hub вместе с его CA. +3. **Порядок: сначала остановить службы, потом удалять юниты.** Это не педантизм. Владелец однажды удалил юниты при работающем процессе, тот осиротел, продолжил держать порт 7443, и `userdel` отказал, потому что у пользователя оставался живой процесс. Правильно так: `systemctl disable --now`, затем `pkill -u` по каждому пользователю, пауза, `pkill -9 -u`, и только потом удаление файлов и учётных записей. +4. **Идемпотентность.** На машине, где ничего не стояло, режим отрабатывает молча и с нулевым кодом возврата. +5. **Ничего чужого.** На серверах владельца работает 3x-ui. Удаляются только объекты с собственными именами: юниты `ochenstarik-smm-*`, пользователи `ochenstarik-smm-control`, `ochenstarik-smm-agent`, `ochenstarik-monitor`, таблица `inet ochenstarik_smm`, интерфейс `smm0`, каталоги под своими путями. Никаких `rm -rf` по маскам, способным задеть соседа. +6. **Сохранение данных — отдельный вопрос.** Два варианта: снять программу, оставив резервные копии и базу Control, либо снести всё вместе с ними. Второй — с отдельным подтверждением: вместе с базой уходит CA, а с ним все выданные сертификаты и вся регистрация узлов. +7. **В конце — проверка**: напечатать те же четыре строки, которыми владелец проверяет чистоту вручную: свободны ли порты `7443` и `51820`, нет ли маршрутов `10.77.0.`, остались ли юниты, остались ли пользователи. + +Сквозной неинтерактивный вариант тоже нужен — для скриптов и повторной приёмки: команда с обязательным флагом подтверждения, без вопросов. + +### Тесты удаления + +- на машине без установленной системы режим отрабатывает без ошибок и ничего не меняет; +- после полной установки и последующего удаления не остаётся ни юнитов, ни пользователей, ни таблицы nftables, ни интерфейса, ни каталогов состояния; +- посторонний юнит и посторонний пользователь, созданные до удаления, остаются нетронутыми; +- без флага подтверждения неинтерактивный вариант отказывается работать; +- удаление при работающих службах не оставляет процессов, удерживающих порты. + +## Что проверить тестами + +- интерактивный сценарий Hub и узла целиком, на подставном вводе; +- отказ интерактивного режима без tty; +- отклонение испорченного кода `SMMNODE2` — обрезанного, с лишним сегментом, с подменённым отпечатком; +- сохранность неинтерактивных команд: существующие тесты `tests/bootstrap/**` и проверка релиза продолжают проходить без изменений в вызовах. + +## Границы + +Antigravity ведёт Control и веб-консоль. **Не трогать:** `src/**`, `.github/workflows/windows-build.yml`. + +Ваша область: `deploy/**`, `tests/bootstrap/**`, `docs/linux-bootstrap.md`. + +Формат `SMMNODE2` и `SMMPEER1` не менять: его разбирает установленный на серверах bootstrap, а опубликованные релизы неизменяемы. + +## Критерий приёмки + +- `smm-setup.sh` без аргументов проводит установку Hub и узла целиком, включая cosign и зависимости; +- Hub по завершении печатает то, что вставляется в приложение оператора; +- неинтерактивные команды не изменены, приёмочный скрипт и проверка релиза проходят; +- без tty интерактивный режим не запускается; +- испорченный код отвергается; +- всё через PR, CI зелёный, PR не смержен до зелёного. + +## Отчёт + +Раздельно: что проверено локально, что в CI со ссылками на прогоны, что не проверялось и почему. diff --git a/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-uninstall-mode-2026-08-18.md b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-uninstall-mode-2026-08-18.md new file mode 100644 index 0000000..2a7ae0c --- /dev/null +++ b/agents/codex/inbox/from-smm-deliverables/Старые задачи/smm-codex-task-uninstall-mode-2026-08-18.md @@ -0,0 +1,88 @@ +# Codex: режим полного удаления в установщике + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- База: `main` @ `f7b10ac` +- Ветка: `codex/uninstall-mode` +- `main` защищён: PR обязателен, обязательны статусы `build-and-test` и `build`, force-push запрещён +- один PR — одна тема; описание PR заполняется **после** завершения CI +- теги в этом задании не создаются, релиз не выпускается + +## Задача + +В `deploy/smm-setup.sh` есть интерактивный режим: запуск без аргументов спрашивает роль и ставит Hub или узел. Строка выбора сейчас такая: + +``` +Choose role: 1) Hub 2) Node +``` + +Нужен **третий пункт: удалить систему с этой машины полностью.** + +Это единственный предмет задания. Установочная часть не переделывается. + +## Почему существующих команд недостаточно + +`uninstall-agent`, `uninstall-control` и `uninstall-monitor` в `deploy/ochenstarik-server-monitor-manager.sh` снимают свои компоненты, но после них на машине остаётся: + +- системные пользователи и группы `ochenstarik-smm-control`, `ochenstarik-smm-agent`, `ochenstarik-monitor`; +- конфигурация `/etc/wireguard/smm0.conf` и включённый юнит `wg-quick@smm0`; +- таблица nftables `inet ochenstarik_smm` и интерфейс `smm0`; +- каталоги состояния под `/var/lib/ochenstarik-server-monitor-manager*` и `/etc/ochenstarik-server-monitor-manager`; +- запись в `/etc/sudoers.d/ochenstarik-smm-control`; +- файл `/etc/sysctl.d/90-ochenstarik-smm-mesh.conf`; +- вспомогательные файлы в `/usr/local/libexec` и `/usr/local/sbin`. + +Владелец проходил эту уборку вручную и знает список поимённо. Задача — сделать так, чтобы этого больше не требовалось. + +## Требования к поведению + +1. **Сначала показать, что будет удалено, потом спрашивать.** Список строится по фактическому состоянию машины: какие юниты найдены, какие пользователи существуют, есть ли таблица nftables, есть ли интерфейс `smm0`, какие каталоги непусты. Не печатать шаблон, в котором половина строк не относится к делу. + +2. **Подтверждение — набранным словом, а не `y/N`.** Прецедент в проекте есть: `uninstall-control` требует `--confirm-destroy-control`. Случайное нажатие не должно сносить Hub вместе с его удостоверяющим центром. + +3. **Порядок: сначала остановить службы, потом удалять юниты.** Это не педантизм, а известный случай. Юниты удалили при работающем процессе, процесс осиротел, продолжил держать порт 7443, и `userdel` отказал, потому что у пользователя оставался живой процесс. Правильная последовательность: `systemctl disable --now`, затем `pkill -u` по каждому пользователю, пауза, `pkill -9 -u`, и только после этого удаление файлов и учётных записей. + +4. **Идемпотентность.** На машине, где ничего не устанавливалось, режим отрабатывает без ошибок, ничего не меняет и возвращает нулевой код. + +5. **Ничего чужого.** На серверах владельца работает 3x-ui. Удаляются только объекты с собственными именами: юниты `ochenstarik-smm-*`, три перечисленных пользователя, таблица `inet ochenstarik_smm`, интерфейс `smm0`, каталоги под своими путями. Никаких `rm -rf` по маскам, способным задеть соседа по машине. + +6. **Две глубины удаления.** Снять программу, сохранив резервные копии и базу Control, либо снести всё вместе с ними. Второе — отдельным подтверждением: вместе с базой уходит удостоверяющий центр, а с ним все выданные сертификаты и вся регистрация узлов. Отменить это будет нечем. + +7. **В конце — проверка.** Напечатать состояние после уборки: свободны ли порты `7443` и `51820`, остались ли маршруты `10.77.0.`, остались ли юниты `ochenstarik-smm-*`, остались ли пользователи. Владелец проверяет чистоту именно этими четырьмя вопросами. + +8. **Неинтерактивный вариант.** Команда с обязательным флагом подтверждения, без вопросов — для скриптов и повторной приёмки. Без флага команда отказывается работать. + +## Тесты + +В `tests/bootstrap/`: + +- на машине без установленной системы режим отрабатывает без ошибок и ничего не меняет; +- после полной установки и последующего удаления не остаётся ни юнитов, ни пользователей, ни таблицы nftables, ни интерфейса, ни каталогов состояния; +- посторонний юнит и посторонний пользователь, созданные до удаления, остаются нетронутыми; +- неинтерактивный вариант без флага подтверждения отказывается работать; +- удаление при работающих службах не оставляет процессов, удерживающих порты. + +## Границы + +Antigravity ведёт Control и веб-консоль. **Не трогать:** `src/**`, `.github/workflows/windows-build.yml`. + +Ваша область: `deploy/**`, `tests/bootstrap/**`, `docs/linux-bootstrap.md`. + +## Критерий приёмки + +- третий пункт выбора роли удаляет систему целиком; +- перед удалением показан список того, что найдено на машине; +- подтверждение требует набранного слова; +- службы останавливаются до удаления юнитов; +- посторонние объекты не затрагиваются; +- две глубины удаления, вторая с отдельным подтверждением; +- в конце напечатано состояние машины; +- неинтерактивный вариант работает только с флагом подтверждения; +- перечисленные тесты присутствуют и проходят; +- PR открыт, CI зелёный, PR не смержен до зелёного; +- тег не создаётся. + +## Отчёт + +В описании PR, раздельно: что проверено локально, что в CI со ссылками на прогоны, что не проверялось и почему. diff --git a/agents/codex/notes/.gitkeep b/agents/codex/notes/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/grok/done/.gitkeep b/agents/grok/done/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/grok/inbox/.gitkeep b/agents/grok/inbox/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/grok/notes/.gitkeep b/agents/grok/notes/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/hermes/done/.gitkeep b/agents/hermes/done/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/hermes/inbox/.gitkeep b/agents/hermes/inbox/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-board-2026-08-06.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-board-2026-08-06.md new file mode 100644 index 0000000..1178caa --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-board-2026-08-06.md @@ -0,0 +1,56 @@ +# Server Monitor Manager — доска заданий Hermes + +Тексты заданий для доски Hermes (проект `server-monitor-manager`). +Папка вне репозитория: задания не попадают в git и не засоряют PR. + +Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +Локальный клон: `C:\Users\Ochenstarik\projects\server-monitor-manager` +Рабочая копия незавершённого блока: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` + +Устроено так же, как `C:\Users\Ochenstarik\kagent-tasks`, но задания хранятся здесь, в `server-monitor-manager-deliverables`. + +## Соглашения + +- один файл — одно задание, имя `smm-hermes-task-<слаг>-<дата>.md`; +- тело файла самодостаточно: воркер стартует без истории чата, поэтому внутри всегда есть репозиторий, ветка, состояние, «зачем», список работ и критерий приёмки; +- ссылки на нормативные документы даются как «`docs/<файл>.md`, раздел N», без пересказа; +- независимому review передаётся **полный текст задания**, а не только диф. На четырёх блоках подряд diff-only review пропускал целые невыполненные требования. + +## Как поставить задание + +```bash +hermes kanban create "<заголовок>" --body "$(cat <файл>.md)" --project server-monitor-manager --assignee worker-code --workspace worktree --branch hermes/<слаг> --priority --idempotency-key <уникальный-ключ> --created-by claude +``` + +Зависимость: `--parent ` при создании либо `hermes kanban link ` позднее. + +## Текущая очередь + +| Файл | Задание | Приоритет | Зависимость | +|---|---|---|---| +| `smm-hermes-task-b3r-2026-08-06.md` | Завершить B-3R: пакетная верификация факта, класс `Deferred`, Linux-прогон | 100 | — | +| `smm-hermes-task-cert-lifecycle-2026-08-06.md` | Жизненный цикл сертификатов: срок, автопродление, ротация CA | 90 | нет, файлы свободны — можно параллельно | + +Эти два задания не пересекаются по файлам и идут в разных worktree одновременно. + +## Очередь после B-3R + +Тексты будут написаны, когда B-3R смержен — раньше они протухнут. + +1. **Роль Monitor в bootstrap.** `install-monitor`, forced-command скрипт, контрактный тест формата снимка. Сейчас SSH-мониторинг не имеет серверной части вообще. +2. **Подписанная поставка.** Manifest v2, подпись cosign/minisign, публичный ключ вшит в bootstrap, отказ при несовместимых версиях, негативные тесты. +3. **Инженерная оснастка.** `Directory.Build.props`, central package management, lock-файлы, разделение тест-проектов. +4. **Гигиена репозитория.** Пиннинг Actions по SHA, dependabot, `SECURITY.md`, CHANGELOG. + +Полный план и обоснование очерёдности: `smm-codex-plan-2026-08-04.md` в этой же папке; разбивка по горизонтам — `docs/product-horizons.md` в репозитории. + +## Гейт + +Горизонт 1 (provisioning-модули, firewall, alerts, Telegram, Docker, backups) не начинается, пока не закрыт Горизонт 0 целиком, включая физический acceptance на реальной тройке серверов. Последнее не может закрыть ни один исполнитель — нужны `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE`. + +## Статус + +```bash +hermes kanban list +hermes kanban diag +``` diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha10-and-docs-2026-08-10.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha10-and-docs-2026-08-10.md new file mode 100644 index 0000000..0142427 --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha10-and-docs-2026-08-10.md @@ -0,0 +1,83 @@ +# Hermes: выпуск alpha.10, синхронизация документации, уборка веток + +## Состояние + +`main` @ `61471f0`. Открытых PR нет. Все известные дефекты закрыты, включая семантическое сравнение версий (#36). + +Горизонт 0 закрыт кодом полностью. Единственный незакрытый пункт — физическая приёмка на реальной топологии, её выполняет владелец. Задание ниже относится к завершению Горизонта 0, а не к Горизонту 1; новых функций не добавляется. + +Ветка: `hermes/release-alpha10`. + +--- + +## Часть 1 — выпустить `v0.1.0-alpha.10` + +Причина выпускать именно сейчас: в `main` появилась запись установленной версии и семантическое сравнение (#36). Пока Hub владельца стоит на alpha.7, где записи версии нет, защита от отката и проверка совместимости работать не могут — им не с чем сравнивать. Обновление на alpha.10 создаёт эту запись и включает обе проверки с чистого листа. + +1. Тег `v0.1.0-alpha.10` на текущий `main`, push через `git push`. +2. Дождаться `Release pipeline` и убедиться, что в релизе присутствуют: bootstrap и его `.sha256`, оба `tar.gz` и их `.sha256`, три SBOM, MSIX, `smm-setup.sh` и `smm-setup.sh.sha256`, `server-monitor-manager-manifest.json` и `server-monitor-manager-manifest.sig`. +3. Проверить, что `DEFAULT_RELEASE_TAG` в `deploy/smm-setup.sh` соответствует выпускаемому тегу — этого требует `docs/release-policy.md`. Сейчас там `v0.1.0-alpha.9`. +4. Тег **не двигать** ни при каких обстоятельствах. Ошибка в сборке исправляется следующим тегом — правило записано в `docs/release-policy.md`. + +## Часть 2 — привести документацию в соответствие с кодом + +В roadmap несколько пунктов отмечены открытыми, хотя реализованы. Проект держится на правиле «документация не описывает несуществующее»; обратная ошибка не менее вредна, потому что скрывает готовность. + +Проверить и, где подтвердится, отметить выполненными: + +- Этап 7, «добавить криптографическую подпись compatibility manifest для production release» — в `linux-release.yml` cosign используется, manifest подписывается, `.sig` публикуется; +- Этап 3, физический acceptance — **оставить открытым**, он действительно не выполнялся; +- пройти по остальным пунктам Этапов 2–8 и сверить с фактическим состоянием; отмечать только то, что подтверждается кодом или тестом, а не намерением. + +Отдельным пунктом: **синхронизировать переводы README** (Этап 6). Одиннадцать переводов содержат устаревший релиз-статус. Достаточно привести раздел статуса и номер версии; переводить новые разделы целиком не требуется, но расхождение по версии недопустимо. + +## Часть 3 — убрать слитые ветки с remote + +Полностью слиты в `main` и подлежат удалению: + +``` +antigravity/cert-lifecycle +antigravity/repo-hygiene +antigravity/reproducible-builds +docs/product-horizons-and-integration +feat/monitor-role +hermes/monitor-snapshot-contract +hermes/release-single-writer +``` + +**Не трогать** — не слиты, требуют отдельного решения: + +``` +antigravity/repo-hygiene-updates закрытый PR #34, оставить как след +antigravity/signed-delivery-queue-a проверить, вошло ли всё в main +hermes/monitor-contract-red-proof проверить назначение +hermes/release-alpha.6 историческая +hermes/release-artifact-path-fix проверить, вошло ли в main +hermes/sprint1-desktop-security историческая +hermes/sprint1-server-security историческая +hermes/task2-b-link-reconciliation историческая +``` + +По четырём «проверить» — либо убедиться, что содержимое в `main`, и удалить, либо объяснить в отчёте, почему ветка нужна. + +## Часть 4 — полный reboot настоящих Debian VM + +Открытый пункт Этапа 7. Сейчас Debian проверяется в privileged systemd-контейнерах: они перезапускаются, но собственного ядра не имеют, поэтому reboot как таковой не проверен. `docs/linux-platform-matrix.md` честно называет это незакрытым критерием. + +Добавить в матрицу настоящую Debian VM с полным reboot и проверкой, что после загрузки поднимаются Control, WireGuard, firewall-таблица и Agent. Если на GitHub-hosted runner это недостижимо, зафиксировать в `docs/linux-platform-matrix.md` конкретную причину и то, чем это компенсируется, — вместо бессрочно открытого пункта. + +--- + +## Критерий приёмки + +- `v0.1.0-alpha.10` выпущен с полным набором ассетов, тег не двигался; +- `DEFAULT_RELEASE_TAG` совпадает с тегом; +- roadmap отражает фактическое состояние, физический acceptance остаётся открытым; +- переводы README не противоречат текущей версии; +- слитые ветки удалены, по неслитым дано решение; +- по Debian VM либо появилась проверка, либо в документации записана причина и компенсация; +- CI зелёный. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha11-and-branch-protection-2026-08-11.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha11-and-branch-protection-2026-08-11.md new file mode 100644 index 0000000..78628ae --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha11-and-branch-protection-2026-08-11.md @@ -0,0 +1,95 @@ +# Hermes: выпустить alpha.11, починить bootstrap-job релиза, включить защиту ветки + +## Состояние + +- `main` @ `5349533` «Bump version to v0.1.0-alpha.11»; +- открытых PR нет; +- последний **опубликованный** релиз — `v0.1.0-alpha.9`; +- тег `v0.1.0-alpha.10` создан на `e8f771b`, но **релиз не опубликован**: `Release pipeline` упал в job `bootstrap`; +- Antigravity параллельно доделывает свою часть. + +Ветка: `hermes/release-alpha11`. + +--- + +## Часть 1 — починить job `bootstrap` в `Release pipeline` · блокирующее + +Прогон по тегу `v0.1.0-alpha.10` (`31420461877`): + +``` +bootstrap: failure +publish-linux (linux-x64): success +publish-linux (linux-arm64): success +package-windows: success +manifest: skipped +``` + +В логе видно `PASS: Missing signature rejected`, затем `Process completed with exit code 1`. То есть негативные проверки подписи отработали частично, после чего шаг упал без внятного сообщения. + +Следствие: `manifest` пропущен, релиз не создан, тег остался пустым. + +Сделать: + +1. Найти и исправить причину падения. Молчаливый `exit 1` без диагностики — сам по себе дефект: каждая проверка обязана печатать, что именно не сошлось. +2. Прогнать `Release pipeline` через `workflow_dispatch` на своей ветке до тегирования, чтобы убедиться, что job `bootstrap` проходит. + +## Часть 2 — выпустить `v0.1.0-alpha.11` + +Тег `v0.1.0-alpha.10` использовать повторно нельзя: `docs/release-policy.md` запрещает переиспользование и пересоздание опубликованных тегов, а тег создан и виден. Версия в исходниках уже поднята до alpha.11 — это правильный выход. + +1. После части 1 создать `v0.1.0-alpha.11` и запушить тегом. +2. Убедиться, что в релизе присутствует полный набор: bootstrap и `.sha256`, оба `tar.gz` и `.sha256`, три SBOM, MSIX, `smm-setup.sh` и `.sha256`, `server-monitor-manager-manifest.json` и `.sig`. +3. В `docs/release-policy.md` добавить строку о судьбе `v0.1.0-alpha.10`: тег существует, релиз по нему не публиковался, номер не переиспользуется. Пустой тег без объяснения — источник будущей путаницы. + +## Часть 3 — включить защиту ветки `main` · системная причина + +`main` не защищён: `GET /branches/main/protection` возвращает 404. + +С 10 августа шесть коммитов легли в `main` **напрямую, минуя PR**: + +``` +5349533 Bump version to v0.1.0-alpha.11 +48d096a fix(ci): update release contract, remove backward compat test +e04037a docs: add Debian VM reboot constraint section +bb672a2 docs: sync translations and roadmap +e8f771b Merge branch 'hermes/release-alpha10' +7b322a6 Add release-verification workflow to main +``` + +До этого всё шло через PR — #32, #33, #35, #36. Результат отхода от правила: два коммита оставили `main` красным на сутки (падал `tests/bootstrap/test-release-contract.sh`), и это заметил не CI-гейт, а внешняя проверка. + +Включить на `main`: + +- обязательный pull request перед слиянием; +- обязательные проверки статуса: `build-and-test` (Linux) и `build` (Windows) как минимум; +- запрет force-push и удаления ветки; +- обязательная актуальность ветки относительно `main` перед слиянием. + +Правило «один PR — одна тема, слияние после зелёного CI» существует с самого начала, но держалось на дисциплине. Оно должно держаться на настройке. + +Записать это в `docs/release-policy.md` рядом с правилом неизменяемости тега. + +## Часть 4 — проверка предыдущих частей задания + +Из прошлого задания подтвердить в отчёте: + +- roadmap: подпись manifest отмечена выполненной, физический acceptance остаётся открытым — **проверено, сделано**; +- Debian VM reboot: ограничение записано в документации — **проверено, сделано**; +- слитые ветки удалены — **проверено, осталось 7 из 15, все неслитые**; +- переводы README: в чём именно выражена синхронизация, какие файлы изменены. + +--- + +## Критерий приёмки + +- job `bootstrap` в `Release pipeline` проходит; каждая проверка при отказе печатает причину; +- `v0.1.0-alpha.11` опубликован с полным набором ассетов; +- судьба `v0.1.0-alpha.10` зафиксирована в `docs/release-policy.md`; +- `main` защищён: PR обязателен, статусы обязательны, force-push запрещён; +- правило записано в документации; +- `main` зелёный; +- всё, кроме настройки защиты ветки, проходит через PR. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. Для части 3 приложить вывод `gh api repos/.../branches/main/protection` после включения. diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha14-and-oneshot-2026-08-13.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha14-and-oneshot-2026-08-13.md new file mode 100644 index 0000000..518bed0 --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha14-and-oneshot-2026-08-13.md @@ -0,0 +1,67 @@ +# Hermes: выпустить alpha.14 и дать установку одной командой + +## Состояние + +- `main` @ `b0ad40c`, открытых PR нет, на remote одна ветка, CI зелёный; +- `deploy/smm-setup.sh` по умолчанию указывает на `v0.1.0-alpha.14`, **которого не существует** — опубликован `alpha.13`. Установка по документации сейчас упирается в 404; +- `alpha.12` и `alpha.13` содержат подпись без сертификата и потому непроверяемы; по политике неизменяемости дополнить их нельзя. + +Ветка: `hermes/release-alpha14-publish`. + +--- + +## Часть 1 — выпустить `v0.1.0-alpha.14` · блокирует владельца + +Это первый релиз, где подпись проверяема целиком: `manifest.json`, `manifest.sig` и `manifest.pem` публикуются вместе, `verify_archive` требует все три. + +1. **Сначала `workflow_dispatch`-прогон `Release pipeline` на своей ветке**, до тегирования. Два сожжённых тега подряд, alpha.10 и alpha.11, получились ровно потому, что этот шаг пропускали. +2. Создать и запушить тег `v0.1.0-alpha.14`. +3. Проверить набор ассетов — семнадцать позиций, включая `server-monitor-manager-manifest.pem`. Список зафиксирован в `tests/release-verification/verify-assets.sh`, сверяться с ним. +4. Убедиться, что `Release Verification` отработал автоматически по событию `release: published` и **зелёный**. Это главный результат: впервые проверка пройдёт против настоящего подписанного релиза, а не против ветки. + +Если `Release Verification` покажет дефект релиза — это успех задачи. Зафиксировать находку и не «чинить» её ослаблением проверки или флагом `SMM_ALLOW_UNSIGNED`. + +## Часть 2 — установка одной командой + +Сейчас оператор вручную скачивает семь файлов: установщик и его контрольную сумму, архив и его контрольную сумму, manifest, подпись и сертификат. Пропустить любой из трёх файлов подписи — значит получить отказ `verify-release`. Это лишний источник ошибок в самой ответственной операции. + +Добавить в `deploy/smm-setup.sh` команду, которая делает это сама: + +``` +smm-setup.sh install-hub PUBLIC_HOST [HTTPS_PORT] [WG_PORT] +smm-setup.sh install-node +``` + +Поведение: + +- определить архитектуру и выбрать соответствующий `tar.gz`; +- скачать в рабочий каталог архив, его `.sha256`, manifest, подпись и сертификат; +- сверить контрольную сумму архива; +- выполнить `install-control` и `mesh-init` либо `install-node`; +- при отсутствии любого из трёх файлов подписи — отказ с внятным сообщением, а не тихий переход на `.sha256`. + +Существующий сквозной режим (`smm-setup.sh <любая-команда-bootstrap>`) сохранить: он используется в тестах и в приёмке. + +После этого обновить `docs/linux-bootstrap.md`: показать короткий путь как основной, длинный оставить как ручной. + +## Часть 3 — зафиксировать судьбу непроверяемых релизов + +В `docs/release-policy.md` записать: `v0.1.0-alpha.10` и `v0.1.0-alpha.11` — теги без опубликованного релиза, номера не переиспользуются; `v0.1.0-alpha.12` и `v0.1.0-alpha.13` опубликованы с подписью, но без сертификата и потому проверке не поддаются; первым полностью проверяемым релизом является `v0.1.0-alpha.14`. + +Это нужно не для порядка, а чтобы через полгода никто не пытался объяснить, почему подпись двух релизов не сходится. + +--- + +## Критерий приёмки + +- `workflow_dispatch`-прогон выполнен до тегирования, ссылка в отчёте; +- `v0.1.0-alpha.14` опубликован, набор ассетов совпадает с `verify-assets.sh`; +- `Release Verification` отработал по событию публикации и зелёный, ссылка в отчёте; +- `install-hub` и `install-node` ставят систему без ручного скачивания файлов подписи; +- отсутствие manifest, подписи или сертификата даёт отказ, а не переход на `.sha256`; +- судьба alpha.10–alpha.13 записана в release-policy; +- всё через PR, CI зелёный. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha8-compat-and-alpha12-2026-08-11.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha8-compat-and-alpha12-2026-08-11.md new file mode 100644 index 0000000..291d72a --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-alpha8-compat-and-alpha12-2026-08-11.md @@ -0,0 +1,78 @@ +# Hermes: починить тест совместимости, выпустить alpha.12, закрепить владение релизом + +## Состояние + +- `main` @ `5349533`; защита ветки включена — обязательный PR, обязательные статусы `build-and-test` и `build`, force-push запрещён. Это сделано, дальше всё идёт через PR; +- опубликован по-прежнему только `v0.1.0-alpha.9`; +- теги `v0.1.0-alpha.10` и `v0.1.0-alpha.11` созданы, но релизы по ним **не опубликованы** — `Release pipeline` оба раза упал в job `bootstrap`. + +Ветка: `hermes/alpha8-compat-fixture`. + +--- + +## Часть 1 — тест совместимости с alpha.8 · блокирует все релизы + +### Диагноз готов, повторять не нужно + +`Release pipeline` на теге `v0.1.0-alpha.11`, job `bootstrap`, шаг `Validate bootstrap`: + +``` +Test 1..4: PASS +Test 5: Real alpha.8 manifest fallback matching (REQUIRES_NETWORK) +FAIL: Alpha.8 real release verification failed +``` + +Я скачал ассеты `v0.1.0-alpha.8` напрямую. **Файла `server-monitor-manager-manifest.json` в этом релизе нет.** Присутствует только `server-monitor-manager-manifest.sig` размером 96 байт — подпись без подписываемого файла. В alpha.8 лежал `server-monitor-manager-bootstrap-manifest.json`, то есть формат v1; manifest v2 впервые появился в alpha.9. + +Значит тест проверяет обратную совместимость с артефактом, которого в том релизе никогда не существовало. **Дефекта в коде нет — недействительна посылка теста.** + +### Что сделать + +1. Убрать сетевую зависимость из релизного пайплайна. Тест, скачивающий чужой релиз по сети, роняет выпуск версии при любом сетевом сбое или изменении набора ассетов в прошлом. Релизный job не должен зависеть от внешнего состояния. + +2. Заменить его **синтетической фикстурой формата v1**: локально сгенерированный набор в том виде, в каком его выпускали до alpha.9 — `server-monitor-manager-bootstrap-manifest.json`, `.sha256` рядом с архивом, без manifest v2 и без подписи. Проверять на ней, что установка проходит по пути `SMM_ALLOW_UNSIGNED=1` и отвергается без него. + + Сценарий реальный и его нельзя терять: Hub владельца стоит на `alpha.7`, и обновляться он будет именно со старого формата на подписанный. + +3. Фикстуру положить рядом с `tests/fixtures/control-v0.1.0-alpha.7.db` — там уже принят такой подход для схемы БД. + +**Не удалять проверку целиком.** Antigravity в PR #37 уже сделал коммит с её удалением; я потребовал этот коммит из PR убрать. Владение `tests/bootstrap/**` и релизным пайплайном остаётся за вами. + +### Заметка, менять ничего не нужно + +В релизе alpha.8 лежит осиротевший `manifest.sig` без `manifest.json`. По `docs/release-policy.md` ассеты опубликованного релиза неизменяемы, поэтому трогать нельзя. Стоит одной строкой упомянуть это в release-policy как известную аномалию, чтобы следующий человек не искал причину. + +--- + +## Часть 2 — выпустить `v0.1.0-alpha.12` + +`alpha.10` и `alpha.11` сожжены: теги существуют, релизов по ним нет, переиспользовать по собственной политике нельзя. + +1. После части 1 прогнать `Release pipeline` через `workflow_dispatch` на своей ветке — убедиться, что job `bootstrap` проходит **до** тегирования. Два сожжённых тега подряд получились именно потому, что этого шага не делали. +2. Создать `v0.1.0-alpha.12`, запушить тегом. +3. Проверить полноту набора: bootstrap и `.sha256`, оба `tar.gz` и `.sha256`, три SBOM, MSIX, `smm-setup.sh` и `.sha256`, `server-monitor-manager-manifest.json` и `.sig`. +4. В `docs/release-policy.md` зафиксировать судьбу `alpha.10` и `alpha.11`: теги существуют, релизы не публиковались, номера не переиспользуются. Пустые теги без объяснения — источник будущей путаницы. + +--- + +## Часть 3 — единоличное владение версией и релизными файлами + +Сейчас версию бампят двое. `main` содержит ваш `Bump version to v0.1.0-alpha.11`, а в PR #37 Antigravity бампит до alpha.12 и правит `deploy/smm-setup.sh`, README и все 12 переводов. Два сожжённых тега — прямое следствие. + +Закрепить в `docs/release-policy.md`: версию в исходниках, `deploy/**`, релизные workflow и переводы README меняет только владелец релиза. Остальным — через запрос в отчёте. + +--- + +## Критерий приёмки + +- job `bootstrap` проходит; сетевых зависимостей в релизном пайплайне нет; +- совместимость со старым форматом покрыта синтетической фикстурой, сценарий `SMM_ALLOW_UNSIGNED` проверяется в обе стороны; +- `workflow_dispatch`-прогон выполнен **до** тегирования, ссылка в отчёте; +- `v0.1.0-alpha.12` опубликован с полным набором ассетов; +- судьба alpha.10, alpha.11 и аномалия alpha.8 записаны в release-policy; +- владение релизными файлами закреплено документально; +- всё через PR. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-b3r-2026-08-06.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-b3r-2026-08-06.md new file mode 100644 index 0000000..bc89bde --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-b3r-2026-08-06.md @@ -0,0 +1,122 @@ +# B-3R: завершить реконсиляцию от фактического состояния + +## Репозиторий и ветка + +- Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +- Рабочая копия: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` +- Ветка: `hermes/task3-b3-fact-reconciliation`, **изменения не закоммичены** — 24 файла, около +1276/−141 +- База: `b11c277ac7f79a18670932eca4622982d9ff48e0` +- Ветки на GitHub нет; коммит и push ещё не выполнялись + +Нормативные документы задания: `B3R_SPEC.md` и исходное ТЗ B-3 — оба в `C:\Users\Ochenstarik\Сюда\Panel control\Task3-B3-2026-08-04\`. Они остаются в силе целиком; ниже — только то, что осталось не сделано. + +## Зачем + +Проход реконсиляции стал fact-first: сначала один `link-list`, потом сверка с базой. Но верификация результата мутации осталась пер-линковой, а классификация результата неполна. Из-за этого два дефекта, оба на пути kill switch: + +- удаление правила может быть засчитано без доказательства, что правило исчезло; +- результат, не попавший ни в `Converged`, ни в `Failed`, позволяет фоновому сервису потребить marker внеочередной реконсиляции при неподтверждённом исходе. + +## Что уже закрыто — проверено по коду, переделывать не нужно + +- **R3 полностью.** `lookup_node_ip` читает четвёртое поле `nodes.tsv` и требует `active`; проверка статуса стоит раньше проверки IP, поэтому `reserved` + валидный адрес даёт exit 80, а `active` + битый адрес даёт 78. +- **R1 на уровне отдельной мутации.** Появился `VerifyExactFactualCountAsync`, считающий записи через `ListRulesAsync`, то есть через `link-list`, а не `link-status`. Условие `if (persisted)` вокруг верификации снято — DB-less orphan теперь тоже проверяется. Синтетическое присваивание `ActualState` выполняется после доказанного нуля записей, а не вместо доказательства. +- `list_rules` разбирает только managed-comment, проверяет арность, node-паттерны, протокол и диапазон порта, подделки отбрасывает в stderr, чужие правила не выводит. +- `disconnect_rule` больше не вызывает `lookup_node_ip` — удаление правила не зависит от `nodes.tsv`. Это верно, сохранить. + +## Работы + +### 1. Пакетная финальная верификация + +Сейчас `VerifyExactFactualCountAsync` вызывается на каждую мутацию: проход с `k` мутациями делает `1 + k` вызовов `link-list`. + +Требуется: один стартовый `link-list` и, при наличии мутаций, **ровно один финальный** `link-list`, по которому сверяются все затронутые ключи разом. Проход без расхождений — один привилегированный вызов, проход с мутациями — ровно два. + +Проверяется счётчиком вызовов фейкового applier и журналом вызовов в интеграционном тесте. + +### 2. Класс `Deferred` и инвариант классификации + +Ввести третий класс результата и инвариант: + +``` +Converged + Failed + Deferred == Examined +``` + +Инвариант проверять в коде — нарушение это `LogError` с идентификаторами политик — и отдельным тестом на смешанном наборе. + +Решение, которое нужно реализовать именно так: + +- `PendingActivation` — это `Deferred`, а не `Failed`. Node зарезервирован, `peer-add` не выполнен, состояние может держаться сутками и ошибкой не является. +- `Deferred` **не блокирует** потребление marker. Иначе один зарезервированный Node навсегда удержит marker и вернёт бесконечный полный проход каждые 30 секунд — ровно то, что закрывали в B-2 и B3-3. +- Marker блокирует только `Failed`, и на него уже действует ограничение в три попытки. +- `Deferred` обязан быть видимым: событие `link.pending-node-activation`, отдельная подпись в Desktop, отражение в журнале прохода. Ошибкой не называется. + +`LinkFullReconciliationResult` и `LinkReconciliationResult` дополнить полем `Deferred` и списком `DeferredPolicyIds` по образцу `FailedPolicyIds`. + +### 3. Source-generated сериализация orphan audit (R4) + +В `ControlStore.cs` запись audit для orphan-правила сериализуется анонимным типом через reflection, тогда как остальной Control последовательно использует source-generated `JsonTypeInfo`. + +Отказ произойдёт **после** мутации firewall и **после** публикации `link.orphan-removed`, дав противоречивую телеметрию: правило удалено, событие отправлено, проход помечен неуспешным. + +- ввести именованный DTO, добавить его в source-generated контекст Control, сериализовать через `Context.Default.`; +- зафиксировать порядок: запись audit до публикации финального события успеха; +- проверить на **опубликованном** `linux-x64 PublishTrimmed` артефакте, прогнав orphan-путь и сверив содержимое audit-записи. Приложить вывод к отчёту. + +### 4. Linux integration test на fact-first протокол (R5) + +`tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs` остался на протоколе `link-status`-first: fake helper не реализует `link-list`, ожидаемый журнал вызовов начинается с `link-status`. + +На Windows тест выходит по `OperatingSystem.IsLinux() == false`, поэтому локальные прогоны его не показывают. `linux-control-agent.yml` гоняет Control-тесты на Ubuntu, где пропуска не будет. + +- реализовать `link-list` в fake helper; +- переписать ожидаемый журнал на fact-first протокол; +- проверить: no-drift → ровно один `link-list`; отсутствующая таблица классифицируется прямо на `link-list` без промежуточной мутации; мутация сопровождается одной финальной верификацией; DB-less raw disconnect проходит верификацию; +- **прогнать Control suite на Linux.** Windows-прогон этот тест не выполняет и заявленные локальные результаты дефект не выявляют. + +### 5. Убрать fail-open default в интерфейсе (R6) + +`ILinkPolicyApplier.ListRulesAsync` имеет тело по умолчанию, возвращающее пустой список. Забытая реализация молча сообщает «firewall пуст» — худший возможный дефолт для источника истины о факте, и он уже позволил старым test doubles скомпилироваться без нового протокола. + +Сделать `ListRulesAsync` и raw `ApplyDisconnectAsync(LinkRule, …)` обязательными членами интерфейса, все test doubles обновить явно. + +### 6. Читаемость вложенных scope (R7) + +`LinkService.cs`, участки обработки persisted-кандидатов и factual-orphans: тела `try` визуально на уровне внешнего scope, порядок блокировок `sorted node locks → per-Link gate` восстанавливается только разбором отступов. Переформатировать либо вынести обработку одного tuple и одного orphan в приватные методы без дублирования логики сходимости. + +### 7. Мусор в поле статуса `nodes.tsv` + +Сейчас любое не-`active` значение даёт exit 80 и уходит в `Deferred` навсегда. Разграничить: известные значения (`reserved` и подобные) → 80; значение, не проходящее валидацию формата, → 78. Повреждённое состояние — это отказ, который должен всплыть, а не ожидаемое состояние, которое можно откладывать бесконечно. + +## Тесты, без которых задание не принимается + +1. DB-less orphan: helper сообщает успех удаления, но правило осталось → классифицируется как `Failed`, не как успех. +2. Persisted `Disabled`, узел отсутствует в `nodes.tsv` → удаление подтверждается через `link-list`, состояние `Disabled`, не `PendingActivation`. +3. Marker не потребляется при наличии `Failed`; потребляется, если остались только `Converged` и `Deferred`. +4. Инвариант `Converged + Failed + Deferred == Examined` на наборе из шести политик со всеми тремя исходами. +5. Проход с `k` мутациями выполняет ровно два вызова `link-list`. +6. Production-shape фикстура `nodes.tsv` из четырёх полей: `reserved` + валидный IP → 80; `active` + валидный IP → успех; `active` + невалидный IP → 78; мусор в статусе → 78. +7. Зарезервированный Node на десяти последовательных проходах: каждый раз `Deferred`, marker потребляется, число проходов не превышает расписание. + +## Критерий приёмки + +- все семь пунктов работ закрыты; +- семь тестов выше зелёные; +- Control suite прогнан **на Linux**, а не только на Windows; +- orphan audit проверен на опубликованном trimmed-артефакте; +- все критерии исходного ТЗ B-3 по-прежнему выполняются; +- PR создан, CI зелёный — впервые для этой ветки; +- независимый review получил полный текст этого задания, `B3R_SPEC.md` и исходное ТЗ B-3. + +## Границы + +- не трогать файлы вне области реконсиляции Links; изменения в Desktop ограничены отображением `Deferred`; +- не менять порядок блокировок и не вводить новых классов блокировок; +- не ослаблять fail-closed поведение: неизвестная ошибка `nft` остаётся отказом, а не «правил нет»; +- `TreatWarningsAsErrors` в этой задаче не включать. + +## Отчётность + +Отдельно перечислить: что запущено локально, что в CI, что не запускалось и почему. Физический acceptance (`SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh`) выполнить нельзя — не выданы topology inputs; contract- и mock-тесты за него не выдавать. + +Статус после merge — `merged / verified, physical acceptance pending`, а не «выполнено». diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-b3r-deliver-2026-08-07.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-b3r-deliver-2026-08-07.md new file mode 100644 index 0000000..b5b02ef --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-b3r-deliver-2026-08-07.md @@ -0,0 +1,49 @@ +# B-3R: довести до PR и зелёного Linux CI + +## Состояние + +Рабочая копия `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3`, ветка `hermes/task3-b3-fact-reconciliation`, база `b11c277`. Изменения **не закоммичены**: 23 отслеживаемых файла, +1735/−145, плюс новый файл `src/ServerMonitorManager.Control/ControlJsonContext.cs`. + +Ветки на GitHub нет, PR нет, CI не запускался ни разу. + +## Что проверено как сделанное + +Сверял по коду рабочей копии, а не по отчёту: + +| Пункт | Состояние | +|---|---| +| R1, пакетная верификация | `FinalizeBatchAsync` и единственный `finalRules = await applier.ListRulesAsync(…)` — реализовано | +| R2, класс `Deferred` | присутствует, инвариант классификации с диагностикой в `LinkService.cs:836` | +| R4, source-generated audit | `LinkOrphanAuditDetails` + `ControlJsonContext.Default.LinkOrphanAuditDetails`, новый `ControlJsonContext.cs` | +| R5, integration test | `link-list` в fake helper, 10 вхождений | +| R6, fail-open default | `ListRulesAsync` — обычный член интерфейса, тела по умолчанию нет | +| Мусор в статусе `nodes.tsv` | `node_status_pattern`: невалидный формат → 78, валидный не-`active` → 80 | + +Содержательная часть закрыта. Осталась доставка. + +## Что доделать + +**1. Проверить бюджет привилегированных вызовов.** В `ConvergeAsync` остались вызовы `VerifyExactFactualCountAsync` на строках 487, 496, 505, 514 — помимо пакетной верификации через `FinalizeBatchAsync`. Убедиться, что проход без расхождений выполняет ровно один `link-list`, а проход с `k` мутациями — ровно два. Если пер-мутационные вызовы остались в пути полного прохода, бюджет нарушен и требование R1 не выполнено. Если они относятся к другим путям (`CreateAsync`, `DisableAsync`, TTL) — это допустимо, но должно быть явно сказано в отчёте. + +**2. Прогнать Control suite на Linux.** Это отдельное требование, а не формальность: integration-тест помечен `OperatingSystem.IsLinux()` и на Windows молча пропускается. Именно так дефект H2 и дожил до ревью в прошлый раз. + +**3. Прогнать orphan-путь на опубликованном `linux-x64 PublishTrimmed` артефакте** и приложить содержимое audit-записи. Reflection-сериализация заменена на source-generated, но проверка на trimmed-сборке — единственное доказательство, что путь исполняется. + +**4. Семь обязательных тестов** из задания `smm-hermes-task-b3r-2026-08-06.md`, раздел «Тесты, без которых задание не принимается». Проверить наличие каждого поимённо. + +**5. Коммит, push, PR.** Ветка `hermes/task3-b3-fact-reconciliation`. Дождаться завершения CI **до** того, как писать в описании PR о проверках. + +## Критерий приёмки + +- PR создан, CI зелёный — впервые для этой ветки; +- Control suite прогнан на Linux, результат приложен; +- бюджет вызовов `link-list` подтверждён числом, а не утверждением; +- семь обязательных тестов присутствуют и проходят; +- отчёт раздельно перечисляет: что локально, что в CI со ссылками, что не запускалось; +- независимый review получил полный текст `smm-hermes-task-b3r-2026-08-06.md` и `B3R_SPEC.md`. + +## Отдельно + +Физическая приёмка на трёх серверах готовится параллельно — runbook `smm-acceptance-runbook-2026-08-07.md`. Она не входит в это задание, но именно merge B-3R делает её осмысленной: до него реконсиляция от фактического состояния не в `main`. + +Статус после merge — `merged / verified, physical acceptance pending`. diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-cert-lifecycle-2026-08-06.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-cert-lifecycle-2026-08-06.md new file mode 100644 index 0000000..61c2ec6 --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-cert-lifecycle-2026-08-06.md @@ -0,0 +1,94 @@ +# Жизненный цикл клиентских сертификатов + +## Репозиторий и ветка + +- Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +- Локальный клон: `C:\Users\Ochenstarik\projects\server-monitor-manager` +- База: `main` @ `b11c277` +- Ветка: `hermes/cert-lifecycle` + +Задание не пересекается по файлам с `b3r-fact-reconciliation` и выполняется параллельно в отдельном worktree. Затрагиваемые файлы (`CertificateAuthority.cs`, `CertificateLifecycleService.cs`, `AgentClient.cs`) веткой B-3R не изменяются. + +## Зачем + +`CertificateAuthority.cs`, выдача клиентского сертификата: + +```csharp +var requestedNotAfter = DateTimeOffset.UtcNow.AddYears(1); +``` + +Срок — один год, автопродления нет ни у Agent, ни у Operator. Через год после развёртывания весь парк перестаёт проходить mTLS одновременно, и восстановление требует ручной перерегистрации каждого Node через одноразовый enrollment token. Процедуры ротации Control CA в проекте нет вообще. + +Отзыв работает через таблицу identity в Control (`ResolveIdentityAsync`), CRL не используется — это осознанное решение и менять его не нужно. + +## Работы + +### 1. Срок жизни + +- сократить срок клиентского сертификата до 30–90 дней; +- вынести значение в `ControlOptions` с валидацией в общей цепочке `.Validate(...)` в `Program.cs`, по образцу `LinkReconciliationSeconds`; +- значение по умолчанию в `appsettings.json` и в `control.env`, который пишет bootstrap; +- срок сертификата не может превышать остаточный срок Control CA — существующая логика ограничения сохраняется. + +### 2. Автопродление Agent + +- Agent проверяет остаточный срок собственного сертификата при старте и далее периодически; +- при остатке меньше трети срока формирует новый CSR и запрашивает выдачу **по действующему mTLS-каналу**, без enrollment token; +- новый эндпоинт выдачи требует действующий сертификат того же `node_id`, idempotency key и запись в audit; +- замена `agent.pfx` атомарная: запись во временный файл с правами `0600`, затем rename; при любой ошибке остаётся действующий сертификат; +- отозванный сертификат продлению не подлежит — запрос отклоняется, Node требует повторной регистрации. + +### 3. Продление Operator-сертификата Desktop + +- Desktop проверяет остаточный срок при подключении к Control; +- продление по тому же принципу, с явным уведомлением пользователя в интерфейсе; +- защищённое хранение DPAPI сохраняется, приватный ключ не покидает устройство. + +### 4. Уведомление об истечении + +- событие `certificate.expiring` в поток событий Control при остатке меньше трети срока; +- поле остаточного срока в ответе `/api/v1/control/agents`; +- отображение в Desktop на странице Servers. + +### 5. Ротация Control CA + +Документ `docs/certificate-rotation.md`: + +- когда ротация требуется: компрометация, истечение, смена алгоритма; +- порядок: выпуск нового CA, период двойного доверия, перевыпуск клиентских сертификатов, вывод старого CA; +- что делает оператор руками и что делает bootstrap; +- как проверить, что ни один Node не остался на старом CA; +- почему ротация CA требует режима подтверждения `two_person` — см. `docs/approval-policies.md`. + +Реализация автоматической ротации в эту задачу не входит — только процедура и то, что нужно для её ручного выполнения. + +## Тесты + +1. Сертификат с остатком меньше трети срока продлевается; `agent.pfx` заменён, старый сертификат больше не используется. +2. Сертификат с достаточным остатком не продлевается — лишних запросов нет. +3. Hub недоступен в момент продления: Agent продолжает работать на действующем сертификате, повторяет попытку позже, метрики не теряются. +4. Отозванный сертификат продлить нельзя — запрос отклонён. +5. Запрос продления сертификатом другого `node_id` отклонён. +6. Замена `agent.pfx` прервана на середине: остаётся действующий сертификат, Agent поднимается. +7. Срок вне диапазона в конфигурации: Control не стартует, ошибка валидации внятная. + +## Критерий приёмки + +- Node, проработавший дольше срока сертификата, продолжает работать без вмешательства оператора; +- отзыв по-прежнему немедленно закрывает доступ; +- существующие тесты `CertificateAuthorityTests` и сценарии перерегистрации зелёные без правок логики; +- `docs/certificate-rotation.md` описывает выполнимую процедуру, а не намерение; +- Control suite прогнан на Linux; +- PR создан, CI зелёный; +- независимый review получил полный текст этого задания. + +## Границы + +- не трогать `LinkService.cs`, `LinkPolicyApplier.cs`, `LinkReconciliationBackgroundService.cs`, `ControlStore.cs` в части Links, `Provisioning.Helper/*` и `deploy/ochenstarik-smm-policy-apply` — они заняты заданием B-3R; +- CRL не вводить; +- автоматическую ротацию CA не реализовывать; +- приватный ключ Control CA остаётся на Hub и в enrollment-коды не попадает. + +## Отчётность + +Раздельно перечислить: что запущено локально, что в CI, что не запускалось и почему. Статус после merge — `merged / verified`. diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-monitor-format-and-release-2026-08-10.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-monitor-format-and-release-2026-08-10.md new file mode 100644 index 0000000..d9b036b --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-monitor-format-and-release-2026-08-10.md @@ -0,0 +1,97 @@ +# Hermes: формат снимка Monitor, совместимость БД, дисциплина релизов + +## Состояние + +- `main` @ `f9205c3`, роль Monitor слита (#29), подписанная поставка Queue A слита (#26); +- `v0.1.0-alpha.8` пересобран, все Linux-артефакты и `server-monitor-manager-manifest.sig` на месте; +- открыт PR #31 с починкой путей Windows-артефактов. + +Ветка: `hermes/monitor-snapshot-contract`. + +--- + +## Часть 1 — снимок Monitor не читается Desktop · блокирующий + +Роль Monitor установлена, но мониторинг работать не будет. Скрипт `/usr/local/libexec/ochenstarik-smm-metrics` выдаёт имена полей, которых не понимает ни парсер Desktop, ни собственный контракт проекта. + +**Ждёт `SshMonitorService.QueryAsync`:** + +``` +PROTOCOL HOSTNAME UPTIME_SECONDS LOAD1 CPU_COUNT +MEM_TOTAL_KB MEM_AVAILABLE_KB SWAP_TOTAL_KB SWAP_FREE_KB +DISK_TOTAL_KB DISK_AVAILABLE_KB DISK_INODES_TOTAL DISK_INODES_FREE +NETWORK_RX_BYTES NETWORK_TX_BYTES SYSTEMD_SSH SYSTEMD_WIREGUARD +``` + +**Выдаёт скрипт:** + +``` +CPU_COUNT LOAD1 MEM_TOTAL MEM_AVAIL SWAP_TOTAL SWAP_FREE +DISK_TOTAL DISK_AVAIL INODES_TOTAL INODES_FREE +NET_RX NET_TX UPTIME KERNEL DF_OUT DF_INODES MESH_STATUS +``` + +Совпадают **два поля из шестнадцати** — `CPU_COUNT` и `LOAD1`. Остальные не совпадают по имени, а `PROTOCOL`, `HOSTNAME`, `SYSTEMD_SSH`, `SYSTEMD_WIREGUARD` отсутствуют вовсе. + +Практический результат: в Desktop имя сервера подставится из профиля, память, диск, swap, inode и сеть покажут нули, состояния SSH и WireGuard — `unknown`. Формально роль установлена, фактически функция, ради которой существует Desktop, не работает. + +Формат уже зафиксирован в `docs/installer-contract.md` §7 — его и надо соблюсти дословно, а не изобретать заново. + +### Что сделать + +1. Привести вывод скрипта к `docs/installer-contract.md` §7: `PROTOCOL=1`, `HOSTNAME`, `UPTIME_SECONDS`, `LOAD1`, `CPU_COUNT`, `MEM_TOTAL_KB`, `MEM_AVAILABLE_KB`, `SWAP_TOTAL_KB`, `SWAP_FREE_KB`, `DISK_TOTAL_KB`, `DISK_AVAILABLE_KB`, `DISK_INODES_TOTAL`, `DISK_INODES_FREE`, `NETWORK_RX_BYTES`, `NETWORK_TX_BYTES`, `KERNEL`. +2. Добавить `SYSTEMD_SSH` и `SYSTEMD_WIREGUARD` — их читает Desktop, но в §7 их нет. Дописать в §7, чтобы контракт снова был единственным источником. +3. Внутренние переменные вроде `DF_OUT` и `DF_INODES` из вывода убрать: снимок не должен содержать ничего, кроме полей контракта. + +### Контрактный тест — переделать + +`tests/acceptance/test_monitor_snapshot.sh` проверяет скрипт против списка полей, который живёт в самом тесте. Именно поэтому расхождение с Desktop не поймалось. + +Список ожидаемых полей должен существовать **в одном месте** и использоваться обеими сторонами: + +- тестом shell-скрипта — что все поля присутствуют и лишних нет; +- тестом парсера Desktop — что он читает ровно эти поля. + +Как реализовать — на ваше усмотрение: общий файл-фикстура с эталонным снимком, из которого обе стороны берут набор ключей, либо генерация списка из `installer-contract.md`. Требование одно: **изменение имени поля с одной стороны обязано ронять тест другой стороны.** + +`SshMonitorService.cs` при этом не менять — правится скрипт, а не парсер. Если парсер тоже потребует правки, описать в `REPORT.md`. + +--- + +## Часть 2 — совместимость существующей БД с SQLitePCLRaw 3.0.5 + +Пункт из прошлого задания, оставшийся невыполненным. Сейчас он не горит только по счастливой случайности: `alpha.8` собран из коммита, где ещё `2.1.12`. Но в `main` уже `3.0.5`, и следующий релиз его унесёт. + +На живом Hub пользователя база создана версией `2.1.12`. Если совместимости нет, это проявится в момент `update-control`. + +Проверить: открытие существующей `control.db` сборкой из текущего `main`, `PRAGMA user_version` без повторного применения миграций, чтение агентов, identities, links, provisioning и аудита, `backup-create` и `backup-restore` на этой же базе, и то же самое на `linux-arm64` self-contained trimmed single-file. + +**Добавить постоянный тест** на открытие базы предыдущей схемы — эталонная `control.db` в репозитории либо скрипт её воспроизведения. Без него следующее обновление SQLite повторит эту историю. + +Если хоть одна проверка не проходит — откатить `#23` отдельным PR и написать об этом прямо. + +--- + +## Часть 3 — дисциплина релизов + +Тег `v0.1.0-alpha.8` был сдвинут: сначала указывал на `80b4797`, теперь на `ad180e9`. Так делать нельзя, и теперь особенно: релиз содержит `server-monitor-manager-manifest.json` и подпись `manifest.sig`, которые описывают конкретное содержимое. Если тег двигается, подпись перестаёт что-либо доказывать, а у того, кто сверялся с прежним тегом, проверка не сойдётся. + +1. Зафиксировать правило в `docs/installer-contract.md`: **опубликованный тег неизменяем**; ошибка в сборке исправляется выпуском следующей версии, а не переписыванием тега. +2. Следующий релиз выпускать как `v0.1.0-alpha.9` после частей 1 и 2. +3. Убрать из `smm-setup.sh` (ассет релиза) временный обход бага `validate_control_url` — дефект исправлен в #24, обход помечен комментарием в коде. +4. Довести или закрыть PR #31. + +--- + +## Критерий приёмки + +- снимок Monitor совпадает с `installer-contract.md` §7 плюс два поля systemd; лишних полей нет; +- переименование любого поля роняет тест противоположной стороны — продемонстрировать намеренной поломкой во временном коммите со ссылкой на красный прогон; +- существующая база открывается новой сборкой, есть постоянный тест на предыдущую схему; +- правило неизменяемости тега записано в контракте; +- обход `validate_control_url` из `smm-setup.sh` удалён; +- Control suite прогнан на Linux, CI зелёный. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-node-enrollment-broken-2026-08-09.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-node-enrollment-broken-2026-08-09.md new file mode 100644 index 0000000..c761b6a --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-node-enrollment-broken-2026-08-09.md @@ -0,0 +1,164 @@ +# Путь регистрации Node не работает от начала до конца + +Приоритет: **блокирующий**. Найдено при первой в истории проекта установке на живые серверы 2026-08-09. Все четыре дефекта лежат на пути, который CI не проходит ни разу. + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- База: `main` @ `d645812` (= тег `v0.1.0-alpha.7`, из которого собран проверявшийся релиз) +- Ветка: `hermes/node-enrollment-fix` + +## Контекст + +Hub ставится и работает: Control активен, `/healthz` отвечает `Healthy`, WireGuard `smm0` поднят, таблица `inet ochenstarik_smm` создана. Дальше не проходит ничего. + +--- + +## Дефект 1 — конфигурация Agent не читается в опубликованном бинарнике (BLOCKER) + +### Наблюдение + +``` +$ sudo -u ochenstarik-smm-agent env SMM_NodeId='INVALID_UPPER' \ + /usr/local/lib/ochenstarik-server-monitor-manager/agent/ochenstarik-smm-agent +Unhandled exception. System.IO.FileNotFoundException: + Could not find file '/var/lib/ochenstarik-server-monitor-manager/agent/agent.pfx' +``` + +Заведомо невалидный `SMM_NodeId` **не вызвал** ошибку валидации из `Program.cs`. Значит `configuration.Get()` вернул объект с умолчаниями, а все переменные окружения проигнорированы. + +Дефект не виден снаружи, потому что умолчания валидны: `NodeId` по умолчанию — имя машины, числовые настройки в допустимых диапазонах. Единственное свойство без валидного умолчания — `EnrollTokenFile` (`null`), поэтому `Program.cs` не заходит в ветку регистрации, падает в `RunAsync` и ищет несуществующий `agent.pfx`. + +### Причина + +Публикация идёт с `-p:PublishTrimmed=true`. Рефлексивная привязка конфигурации теряет метаданные свойств, вырезанные линкером. + +Правильное решение в проекте **уже применено к Control**: + +```csharp +// ControlOptions.cs +[DynamicDependency(DynamicallyAccessedMemberTypes.PublicProperties, typeof(ControlOptions))] +public ControlOptions() { } +``` + +В `AgentOptions` такого атрибута нет. Поэтому Control конфигурацию читает, а Agent — нет. + +### Что сделать + +Не ограничиваться копированием атрибута. Предпочтительно — включить source-generated биндер, он trim-safe по построению и снимает целый класс таких отказов: + +```xml +true +``` + +в `ServerMonitorManager.Agent.csproj` и `ServerMonitorManager.Control.csproj`. Атрибут `DynamicDependency` в `ControlOptions` после этого можно оставить как страховку, но он перестаёт быть единственной защитой. + +Отдельно: **при неудачной привязке Agent обязан отказываться стартовать, а не тихо использовать умолчания.** Добавить явную проверку — если `SMM_ControlUrl` или `SMM_NodeId` присутствуют в окружении, но не попали в `options`, это фатальная ошибка конфигурации с внятным сообщением. Молчаливый откат на умолчания в компоненте, который держит mTLS-идентичность, недопустим. + +--- + +## Дефект 2 — `validate_control_url` не пропускает ни один адрес (BLOCKER) + +### Наблюдение + +``` +$ sudo ochenstarik-server-monitor-manager.sh node-code ai-agent +ERROR: Control URL must be an https URL without a path or credentials. +``` + +`/etc/ochenstarik-server-monitor-manager/control-public-url` содержал корректный `https://host1885995-3.hostland.pro:7443`. + +### Причина + +```bash +[[ "$1" =~ ^https://[A-Za-z0-9._:\[\]-]+(:[0-9]{1,5})?/?$ ]] +``` + +Внутри скобочного выражения POSIX обратный слэш не экранирует. Класс закрывается на первом `]`, а хвост `-]` становится обязательным литералом после хоста. Проверено: не совпадает даже `https://example.com`. + +### Что сделать + +```bash +[[ "$1" =~ ^https://[]A-Za-z0-9._:[-]+(:[0-9]{1,5})?/?$ ]] +``` + +`]` первым символом класса, `[` и `-` — последними. Проверено: принимает `https://host:7443`, `https://example.com`, `https://10.0.0.1:7443`; отклоняет `https://a.b/path` и `http://x.y`. + +Функция вызывается в `create_node_code` и в `install_agent` — то есть дефект блокирует оба пути регистрации. + +**Обязательно**: юнит-тест на `validate_control_url` в `tests/bootstrap/test-bootstrap-contract.sh` с набором принимаемых и отклоняемых адресов. Аналогично проверить остальные regexp с классами символов в bootstrap и helper — эта ошибка воспроизводится копипастом. + +--- + +## Дефект 3 — `control-device-code` не существует + +`tests/acceptance/three-server-mesh.sh:117` вызывает: + +```bash +device_code="$(hub_ssh "$INSTALLER_COMMAND control-device-code '$CONTROL_DEVICE_ID'" …)" +``` + +В bootstrap девятнадцать действий, `control-device-code` среди них нет. В `docs/installer-contract.md` §5 оно значится как целевое, в Control есть CLI `device-token-create` — связки между ними никто не написал. + +Приёмка падает на шаге 2 из 12, до всего остального. + +**Что сделать:** добавить действие `control-device-code DEVICE_ID`, выдающее код `SMMDEV1-...` по образцу `node-code`, через существующий `run_control_cli device-token-create`. + +--- + +## Дефект 4 — `INSTALLER_COMMAND` указывает в пустоту + +```bash +INSTALLER_COMMAND="${INSTALLER_COMMAND:-sudo /usr/local/sbin/ochenstarik-server-monitor-manager.sh}" +``` + +Bootstrap кладёт в `/usr/local/sbin/` только `ochenstarik-smm-emergency`, себя — нет. + +**Что сделать:** устанавливать bootstrap в `/usr/local/sbin/ochenstarik-server-monitor-manager.sh` при `install-control` и `install-agent` — это же соответствует `docs/installer-contract.md` §5, где CLI описан как системная команда. Либо изменить умолчание в скрипте приёмки. Первое лучше: документация уже обещает системную команду. + +--- + +## Дефект 5 — CI не проверяет путь регистрации + +Первые два дефекта — блокирующие, лежали в репозитории неделями и пережили сотню зелёных прогонов. Причина одна: **CI ни разу не запускает Agent из опубликованного релизного бинарника.** + +`linux-control-agent.yml` ставит только Control и дёргает `/healthz`. `linux-platform-matrix.yml` — то же самое. Публикация Agent выполняется, но получившийся бинарник только складывается в артефакт и никогда не исполняется. + +**Что сделать:** расширить systemd-smoke до полного цикла на одной машине: + +1. `install-control`; +2. `node-code` — проверяет дефект 2; +3. `install-agent` с полученным кодом — проверяет дефект 1, запускает **опубликованный trimmed бинарник**; +4. проверить, что сертификат Agent выпущен и `ochenstarik-smm-agent.service` активен; +5. `control-device-code` — проверяет дефект 3. + +Hub и Node на одной машине для этого допустимы: WireGuard не нужен, mesh не поднимается, проверяется только регистрация. Полноценный mesh по-прежнему требует физической приёмки. + +Без этого шага любой из четырёх дефектов вернётся незамеченным. + +--- + +## Критерий приёмки + +- `SMM_NodeId='INVALID_UPPER'` на опубликованном trimmed бинарнике даёт ошибку валидации, а не падение на `agent.pfx`; +- `install-node` по коду `SMMNODE2` доводит Node до активного `ochenstarik-smm-agent.service` и выданного сертификата; +- `validate_control_url` принимает и отклоняет адреса по тесту в контрактном скрипте; +- `control-device-code` существует и выдаёт `SMMDEV1-...`; +- bootstrap доступен как `/usr/local/sbin/ochenstarik-server-monitor-manager.sh`; +- CI выполняет полный цикл регистрации на опубликованных бинарниках; +- Control suite прогнан на Linux; +- PR создан, CI зелёный. + +## После merge + +Выпустить `v0.1.0-alpha.8` и повторить установку на живых серверах. Hub переустанавливать не нужно — он работает; достаточно `update-control` и заново пройти регистрацию Node. + +## Временный обход, применённый вручную + +На Hub и в установщике `smm-setup.sh` дефект 2 обойдён заплаткой: + +```bash +perl -pi -e 's/\Q[A-Za-z0-9._:\[\]-]\E/[]A-Za-z0-9._:[-]/' +``` + +После merge обход из `smm-setup.sh` убрать — он помечен комментарием в коде. diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-release-alpha8-and-monitor-2026-08-10.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-release-alpha8-and-monitor-2026-08-10.md new file mode 100644 index 0000000..64bf3e8 --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-release-alpha8-and-monitor-2026-08-10.md @@ -0,0 +1,81 @@ +# Hermes: совместимость БД, выпуск alpha.8, роль Monitor + +## Состояние + +- `main` @ `df4dfd1`; +- PR #24 `fix(enrollment): repair node enrollment path` слит — блокирующий дефект регистрации Node закрыт; +- слиты шесть обновлений dependabot, включая **SQLitePCLRaw 2.1.12 → 3.0.5**; +- последний релиз — `v0.1.0-alpha.7`, в нём фикса регистрации **нет**; +- на живом Hub пользователя развёрнут alpha.7 с работающей `control.db`, созданной версией 2.1.12. + +Ветка: `hermes/release-alpha8-and-monitor` (части 1–2) и `hermes/monitor-role` (часть 3) — либо одна ветка на часть, по вашему усмотрению, но части 1–2 и часть 3 разными PR. + +--- + +## Часть 1 — совместимость существующей базы с SQLitePCLRaw 3.0.5 · сделать первым + +`SQLitePCLRaw` — нативная библиотека под SQLite, на которой держится вся база Control: enrollment, identities, links, provisioning, audit. Мажорное обновление слито без проверки на **существующей** базе; CI создаёт базу с нуля и потому совместимость не проверяет в принципе. + +Если совместимости нет, это проявится в момент `update-control` на живом Hub — то есть в самый неудобный момент и без пути назад. + +Проверить: + +1. Взять `control.db`, созданную сборкой на 2.1.12 (подойдёт база с реального Hub либо созданная из тега `v0.1.0-alpha.7`). +2. Открыть её сборкой из текущего `main`: `PRAGMA user_version` читается, значение прежнее, миграции не пытаются примениться повторно. +3. Данные читаются: агенты, identities, links, provisioning-задания, аудит. +4. `backup-create` на этой базе и `backup-restore` из полученного бэкапа проходят и дают рабочий Control. +5. Повторить на `linux-arm64` self-contained trimmed single-file: нативные библиотеки в такой сборке линкуются иначе, чем под x64. + +Если хоть один пункт не проходит — **не выпускать релиз**, откатить #23 отдельным PR и написать об этом прямо. + +**Обязательно добавить тест**, которого сейчас нет: открытие базы предыдущей схемы. Зафиксировать в репозитории эталонную `control.db` (или скрипт её воспроизведения) и проверять открытие при каждом прогоне. Без него следующее обновление SQLite повторит ту же историю. + +--- + +## Часть 2 — выпустить `v0.1.0-alpha.8` + +Пользовательские серверы стоят: Hub развёрнут и работает, Node зарегистрировать нельзя, потому что фикс лежит только в `main`. + +После части 1: + +1. Тег `v0.1.0-alpha.8` на текущий `main`, push тегом через `git push` — release-workflow триггерится на `push: tags: v*`. +2. Убедиться, что оба release-workflow отработали и в релиз попали: bootstrap + `.sha256`, оба `tar.gz` + `.sha256`, manifest, MSIX, SBOM. +3. Проверить, что `permissions` на job-уровне из PR #14 действительно сработали — release-workflow **не запускаются на pull request**, и это первый настоящий их прогон после той правки. Если публикация упадёт по 403, чинить здесь же. +4. К релизу приложить `smm-setup.sh` из `server-monitor-manager-deliverables` — файл берётся как ассет релиза и должен обновиться на новый тег. В нём есть временный обход бага `validate_control_url`; **убрать его**, раз дефект исправлен в #24. Обход помечен комментарием в коде. + +После выпуска сообщить: пользователь повторит регистрацию Node на своих серверах через `update-control` и новый `node-code`. + +--- + +## Часть 3 — роль Monitor в bootstrap + +Пункт Горизонта 0, который никто не начинал. Сегодня SSH-мониторинг — функция, ради которой существует Desktop, — не имеет серверной части: в bootstrap нет действия установки, forced-command скрипт не поставляется, а парсер `SshMonitorService.QueryAsync` ожидает ключи `PROTOCOL`, `CPU_COUNT`, `MEM_AVAILABLE_KB`, `DISK_INODES_TOTAL` и другие, которых в репозитории не производит никто. + +Объём: + +- действия `install-monitor PUBLIC_KEY` и `uninstall-monitor`; +- системный пользователь `ochenstarik-monitor`: `nologin`, без пароля, без sudo; +- `/usr/local/libexec/ochenstarik-smm-metrics`, root-owned `0755`, выдающий ровно снимок из `docs/installer-contract.md` §7 и read-only `mesh status`; +- `authorized_keys` с `command="…",restrict,no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding`; +- идемпотентность повторного запуска и корректное удаление; +- **контрактный тест формата снимка, общий для скрипта и парсера Desktop** — иначе они разъедутся снова. + +Формат снимка не выдумывать: он уже зафиксирован в `docs/installer-contract.md` §7. + +`SshMonitorService.cs` не менять — если парсер потребует правки, описать нужное в `REPORT.md`. + +--- + +## Критерий приёмки + +- существующая база открывается новой сборкой, backup/restore работают, есть тест на предыдущую схему; +- `v0.1.0-alpha.8` выпущен со всеми ассетами, публикация не упала по правам; +- обход `validate_control_url` из `smm-setup.sh` убран; +- чистый сервер попадает под мониторинг одной командой, README соответствует коду; +- контрактный тест формата снимка в CI; +- Control suite прогнан на Linux; +- PR созданы, CI зелёный. + +## Отчёт + +Раздельно: локально, в CI со ссылками, не запускалось и почему. Физическая приёмка на трёх серверах выполняется пользователем и в это задание не входит. diff --git a/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-review-merge-release-alpha10-2026-08-10.md b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-review-merge-release-alpha10-2026-08-10.md new file mode 100644 index 0000000..28ae8c8 --- /dev/null +++ b/agents/hermes/inbox/from-smm-deliverables/Старые задачи/smm-hermes-task-review-merge-release-alpha10-2026-08-10.md @@ -0,0 +1,105 @@ +# Hermes: независимая приёмка Queue B, merge и релиз alpha.10 + +## Когда начинать + +Начать review после того, как Antigravity откроет PR из `antigravity/signed-delivery-queue-b` и сообщит о зелёном CI. До этого не редактировать его рабочую ветку и не выпускать новый релиз. + +Baseline на момент постановки: + +- `main` и `v0.1.0-alpha.9`: `2ca059f`; +- PR #32 и #33 смержены; +- Release pipeline `alpha.9` зелёный; +- PR #34 repo hygiene открыт отдельно; +- Queue B PR пока отсутствует. + +## Часть 1 — независимый review Queue B + +### Проверить Git и scope + +- Получить свежие refs и убедиться, что ветка основана на актуальном `main`. Если до review смержен PR #34 или другой PR, потребовать rebase до приёмки. +- Убедиться, что `.github/workflows/**` не изменены Antigravity, нет `ci_log*.txt`, test keys, скачанных binaries и временных release-файлов. +- Проверить историю: bootstrap-файл менялся только после merge PR #32/#33; правила single-writer и immutable release сохранены. + +### Проверить Desktop + +- Trust identity/issuer вшиты в production-код и соответствуют `linux-release.yml` и `docs/release-policy.md`. +- Manifest и signature проверяются до показа update action. +- MSIX hash проверяется после загрузки и до запуска. +- Все assets связаны с одним tag/release. +- Alpha/pre-release channel работает явно и тестируемо; stable-only `releases/latest` не используется как недоказанное решение. +- Отказ fail closed и попадает в штатную диагностику. +- Нет пользовательского обхода подписи. +- Unit tests не выполняют скрытых сетевых вызовов и действительно компилируют production updater. + +### Проверить bootstrap + +- `verify-manifest` и тесты имеют одинаковую сигнатуру CLI. +- Production keyless verification соответствует формату signature, реально опубликованному в `alpha.9`. +- Положительный тест использует эквивалентный production trust flow; тестовый ключ не подменяет production identity незаметно. +- Manifest hash, missing signature/tool, foreign identity, tampering и version mismatch покрыты отрицательными тестами. +- `SMM_ALLOW_UNSIGNED=1` остаётся явным developer-only bypass; default path fail closed. + +### Независимые проверки + +- Повторить проверку manifest/signature и hashes на неизменяемых assets `v0.1.0-alpha.9`. +- Сделать mutation proof: временно поменять expected identity или один manifest hash и показать падение точного теста; временную правку не коммитить. +- Прогнать actionlint, shellcheck/bash syntax, Desktop suite, Control suite и релевантные acceptance/bootstrap suites. +- Сверить результаты GitHub CI. Зелёный CI без security-сценариев не считать достаточным. + +Если найден блокер — не чинить молча в ветке Antigravity. Остановить merge, дать точное замечание с воспроизведением и дождаться исправления. + +## Часть 2 — merge + +Merge разрешён только если: + +- все критерии Antigravity-задачи фактически выполнены; +- branch актуальна относительно `main`; +- локальные и GitHub gates зелёные; +- producer/consumer формат cosign доказан на реальном `alpha.9`; +- нет незаявленного workflow или release scope. + +После merge повторить обязательные suites на merge commit. Не использовать старый CI head как единственное доказательство. + +## Часть 3 — immutable release `v0.1.0-alpha.10` + +- Использовать `linux-release.yml` как единственного публикатора. +- Если Queue B выявила producer-side gap (certificate/bundle/manifest metadata), исправить его отдельным reviewable PR до тега, с actionlint и тестом producer/consumer contract. +- Обновить tracked `deploy/smm-setup.sh` и прочие version sources на `v0.1.0-alpha.10` до создания тега. +- Создать новый tag только на принятом `main`. Не двигать `alpha.8` или `alpha.9`, не заменять их assets. +- Дождаться полного release pipeline. +- Проверить наличие и согласованность: + - Linux x64/arm64 archives и checksums; + - Windows MSIX и checksum; + - SBOM для всех платформ; + - manifest v2; + - signature и необходимые verification materials; + - bootstrap и checksum; + - `smm-setup.sh` и checksum. +- Проверить, что manifest содержит hashes именно опубликованных assets и версии Control/Agent/helper. +- Проверить подпись с pinned issuer/identity внешней командой, затем пройти consumer verification Desktop/bootstrap. +- Выполнить smoke update с предыдущего релиза без реального production-развёртывания: корректный пакет принимается, tampered/foreign/missing signature и несовместимые версии отклоняются до установки. + +## Критерий завершения + +- Queue B смержена только после независимой приёмки. +- Merge commit имеет зелёные Linux/Windows и security/acceptance gates. +- `v0.1.0-alpha.10` указывает на подтверждённый commit и больше не изменяется. +- Release pipeline зелёный, полный набор assets опубликован. +- Desktop и bootstrap проверяют реальные `alpha.10` manifest/signature/hash. +- Отрицательные сценарии доказаны. +- Старые теги и assets не изменялись. + +## Итоговый отчёт + +Указать: + +- PR Queue B и merge commit; +- все review findings и как они закрыты; +- локальные и CI-команды с результатами и ссылками; +- release workflow run; +- tag/commit `alpha.10`; +- список assets, hashes и результат cosign verification; +- smoke/negative checks; +- что не запускалось и почему; +- известные ограничения и следующий незавершённый этап. + diff --git a/agents/hermes/notes/.gitkeep b/agents/hermes/notes/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.0-green-trunk.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.0-green-trunk.md new file mode 100644 index 0000000..c633253 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.0-green-trunk.md @@ -0,0 +1,56 @@ +Предусловие ко всему этапу 0.9. Пока сборка основной ветки красная, ни одно +последующее изменение не проверяемо. + +Репозиторий: https://github.com/ochenstarik-ui/kagent (локально C:\Users\Ochenstarik\kagent) +Контекст решений: PR #2 — ADR-0004..0016 и разделы ТЗ 35-41. + +## Что сломано сейчас + +1. Node-job CI падает на шаге setup-node: в репозитории нет pnpm-lock.yaml. + Следствие: pnpm typecheck / test / build никогда не выполнялись. +2. services/gateway/src/main.rs:184 — get_request_id() вызывает .or_else() на + String. У String такого метода нет, это ошибка компиляции E0599. + CI до неё не доходит: раньше падает cargo fmt --check. +3. Там же: структура RateLimiter объявлена (строки ~37-75), но нигде не + создаётся, и в обработчике live() не используется параметр State(state). + При clippy -D warnings это dead_code и unused_variables. +4. services/control-plane/src/main.ts:9 — logger.transport.target "pino-pretty", + пакета нет в зависимостях, сервис падает при старте. +5. services/control-plane/src/auth.ts:65 — внутри ESM-модуля вызывается + require("node:crypto"). В ESM require не определён, регистрация и логин + падают в рантайме. +6. services/control-plane объявляет "test": "vitest run", но тестовых файлов + там нет, vitest выходит с кодом 1. +7. Пять Python-сервисов (~1700 строк) не покрыты CI вообще: Python-job в + .github/workflows/ci.yml отсутствует. +8. scripts/validate_repository.py существует, но не вызывается из CI. +9. В индексе лежит бинарник + services/reasoning-engine/src/__pycache__/engine.cpython-311.pyc. + +## Что сделать + +- закоммитить pnpm-lock.yaml; +- починить get_request_id, привести код к cargo fmt, подключить RateLimiter к + роутеру как middleware либо удалить его вместе с упоминанием в CHANGELOG; +- добавить pino-pretty в зависимости control-plane либо убрать transport; +- заменить require на статический импорт pbkdf2 из node:crypto; +- добавить unit-тесты control-plane (минимум: переходы статусов задачи, + hashPassword/verifyPassword round-trip, 401 без токена) — vitest должен + находить тесты; +- добавить в CI job python: ruff + pytest, и шаг запуска + scripts/validate_repository.py; +- git rm --cached удалить .pyc из индекса. + +## Критерий приёмки + +- зелёный CI на ветке и на main: node, rust, python; +- cargo clippy --all-targets -- -D warnings проходит без правок warning-уровня; +- docker compose up -d поднимается, control-plane отвечает 200 на /health/live, + POST /v1/auth/register и POST /v1/auth/login работают против PostgreSQL; +- в PR перечислено, что именно было сломано и чем это подтверждено. + +## Ограничения + +- не отмечать пункты roadmap выполненными без доказательства (ADR-0016); +- существующие тесты не изменять без явного согласования (ADR-0005); +- секреты в трекаемые файлы не помещать. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.1-measurability.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.1-measurability.md new file mode 100644 index 0000000..a04e0c1 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.1-measurability.md @@ -0,0 +1,60 @@ +Реализация ADR-0008 и ADR-0016. Разделы ТЗ 41.1-41.6. + +Репозиторий: https://github.com/ochenstarik-ui/kagent +Зависит от задачи 0.9.0 (зелёный trunk). + +## Зачем + +Статус поставки сейчас пишется исполнителем и никем не проверяется: этапы до 0.8 +отмечены выполненными, при этом CI красный с версии 0.6, PostgreSQL не подключён +к CRUD, часть модулей (services/nats, services/auth/src/totp.py) не импортируется +ни одним файлом. Для платформы, которая разрабатывает себя сама, самоотчёт — +главный дефект: он отключает обратную связь, на которую опираются все остальные +механизмы. + +## Что сделать + +### Реестр возможностей и вычисляемый статус + +- машиночитаемый файл: этап -> возможности -> доказательства (eval-случаи, + сквозной сценарий, обязательные проверки, артефакты); +- генератор статуса roadmap из последнего прогона CI; +- проверка, отклоняющая ручную правку сгенерированных блоков статуса. + +### Spec drift check в CI + +Сборка падает при: +- заявленной возможности без проходящего доказательства; +- модуле в дереве, недостижимом ни из одной точки входа (сейчас это + services/nats/src/events.py, services/auth/src/totp.py, + services/control-plane/src/db.ts, packages/contracts/src/reasoning.ts); +- задокументированном endpoint, отсутствующем в таблице маршрутов; +- задокументированной переменной окружения, которая нигде не читается; +- пользовательском изменении без записи в CHANGELOG.md; +- архитектурном изменении без ADR. + +### Eval-suite платформы + +- набор сквозных задач на закреплённых снимках репозиториев с известным + критерием приёмки, стратификация: feature, bugfix, refactor, dependency + upgrade, security fix; +- каждый случай фиксирует базовый коммит, контракт задачи, критерии приёмки; +- детерминированность: без сети вне записанных фикстур, без зависимости от + календарного времени; +- метрики: autonomy rate, вмешательства на задачу, repair-циклы, rework rate, + escape defects, стоимость интегрированного изменения, время до первого + артефакта, попытки нарушения политик; +- гейт релиза по регрессу autonomy rate и escape defects. + +### Правило честности + +Агент, работающий над самим KAgent, не может добавлять, изменять или отключать +eval-случаи в рамках продуктовой задачи. Это отдельное изменение с одобрением +человека. Механизм: eval-каталог в forbidden_paths для продуктовых задач. + +## Критерий приёмки + +- roadmap.md генерируется, ручные галочки отклоняются проверкой; +- drift-check находит все четыре перечисленных недостижимых модуля на текущем + дереве и роняет сборку; +- eval-suite запускается в CI в режиме replay и выдаёт отчёт с метриками. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.2-reproducibility.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.2-reproducibility.md new file mode 100644 index 0000000..c00b301 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.2-reproducibility.md @@ -0,0 +1,60 @@ +Реализация ADR-0004, ADR-0007, ADR-0012. Разделы ТЗ 35 и 39. + +Репозиторий: https://github.com/ochenstarik-ui/kagent +Зависит от задачи 0.9.0 (зелёный trunk). + +## Зачем + +Поведение агентов сейчас невоспроизводимо: ответы моделей не сохраняются, +промпты не версионируются, контекст собирается недетерминированно. Следствие: +регрессионных тестов агентов не существует, инцидент нельзя расследовать, +сравнение моделей нечестное — каждый прогон расходится после первого токена. + +## Что сделать + +### Кассеты (ADR-0004, ТЗ 35.2-35.3) + +- запись каждого модельного вызова: run_id, step_id, agent_role, attempt, + prompt_hash, полный запрос и ответ, model_id, версия профиля модели, версия + промпта, sampling и seed, токены, стоимость, латентность, checksum + контекстного пакета; +- хранение в object storage как неизменяемые объекты, ссылка из Run Timeline и + audit log, наследование privacy class проекта; +- маскирование секретов теми же правилами, что для логов; +- режимы live / record / replay, переключение конфигурацией; +- ключ разрешения (run_id, step_id, attempt) для точного реплея и + (agent_role, prompt_hash) для фикстур; +- отсутствие кассеты в replay — жёсткая ошибка, тихий переход к живому вызову + запрещён; +- политика хранения и удаление вместе с проектом. + +### Реестр промптов (ADR-0007, ТЗ 35.4) + +- промпт как трекаемый файл с манифестом: prompt_id, версия, content_hash, + ожидаемые входы, выходной контракт роли, совместимые capabilities, changelog; +- runtime резолвит промпты только через реестр, инлайн-литералы запрещены + проверкой; +- каждый шаг запуска фиксирует prompt_id и версию; +- прошлые версии остаются разрешимыми, иначе записанные запуски перестают быть + воспроизводимыми. + +### Жизненный цикл контекста (ADR-0012, ТЗ 39) + +- бюджет контекста в токенах на роль, компактификация вместо молчаливого + усечения; +- якоря, которые не суммаризируются и переутверждаются после каждой + компактификации: контракт задачи, allowed/forbidden paths, Definition of Done, + действующие approvals, политика безопасности; +- сохранение состояния до компактификации как checkpoint-артефакт; +- класс происхождения у каждого элемента контекста; недоверенное содержимое + отделяется и помечается как данные; инструкции внутри данных не выполняются, а + фиксируются как событие безопасности; +- детерминированность сборки и компактификации при одинаковых входах. + +## Критерий приёмки + +- прогон пайплайна в режиме record, затем повторный прогон в replay даёт + идентичную последовательность шагов и нулевую стоимость; +- реплей доступен из Run Timeline одним действием; +- проверка в CI: ни одного инлайн-промпта вне реестра; +- тест: сборка контекста дважды на одних входах даёт одинаковый checksum. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.3-verification-integrity.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.3-verification-integrity.md new file mode 100644 index 0000000..a5c3a6e --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.3-verification-integrity.md @@ -0,0 +1,57 @@ +Реализация ADR-0005 и ADR-0009. Раздел ТЗ 36. + +Репозиторий: https://github.com/ochenstarik-ui/kagent +Зависит от задачи 0.9.0 (зелёный trunk). + +## Зачем + +Definition of Done требует test_failures: 0. Это условие выполняется двумя +способами: сделать код корректным или согласовать тесты с текущим поведением +кода. Автономный агент оптимизирует измеримую цель, поэтому второй путь +ожидаем, а не гипотетичен. Сейчас удаление падающего теста удовлетворяет DoD. + +Параллельно: параллельные workstream создают ветки, а порядок их интеграции +нигде не определён, поэтому ветка может пройти верификацию на устаревшей базе и +сломать trunk, при том что отчёт задачи заявит успех. + +## Что сделать + +### Целостность оракула (ADR-0005, ТЗ 36.2-36.6) + +- тесты формируются на этапах спецификации и планирования, а не по реализации; +- роли Test Agent и Code Reviewer не обслуживаются той же конфигурацией модели, + что Developer Agent в рамках одной задачи; +- утверждённый набор тестов read-only для Developer Agent на всё время + реализации и repair, тестовые пути в forbidden_paths контракта задачи; +- изменение существующих тестов — действие класса approval_required; +- разделение change set на code diff и test diff, раздельное представление + reviewer; +- проверка запрещённых конструкций в test diff: маркеры skip и ожидаемого + падения, пустые обработчики исключений, отключённые и ослабленные ассерты, + снижение порогов покрытия, флаги обхода проверок и hooks; совпадение + блокирует завершение и не снимается реализующим агентом; +- мутационная проверка: ограниченный набор синтетических дефектов в изменённый + код, новые тесты обязаны их обнаружить, mutation_score в DoD; +- учёт escape defects с атрибуцией запуску и конфигурации reviewer. + +### Ветвление и merge queue (ADR-0009, ТЗ 36.7) + +- сериализация интеграции: rebase на текущий trunk, повторный прогон + обязательных проверок на интегрированном результате, затем merge; +- одна задача — одна ветка — один change set; +- запрет прямого push в базовую ветку, force push и переписывания истории для + всех агентских идентичностей, включая административные; +- конфликт внутри allowed_paths разрешает агент с полной повторной + верификацией; конфликт вне allowed_paths или затрагивающий замороженные тесты + эскалируется как человеческое решение и не расходует repair-циклы; +- коммиты атомарны, в trailers идентификаторы задачи, запуска и версий + промптов. + +## Критерий приёмки + +- негативный тест: агент, пытающийся пометить падающий тест как skipped, + получает блокировку завершения; +- негативный тест: тест, не обнаруживающий ни одного синтетического дефекта, не + засчитывается, задача не закрывается; +- две ветки с конфликтом проходят через очередь без поломки trunk; +- попытка force push от агентской идентичности отклоняется. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.4-economics.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.4-economics.md new file mode 100644 index 0000000..e29a7ec --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.4-economics.md @@ -0,0 +1,63 @@ +Реализация ADR-0006, ADR-0010, ADR-0013. Раздел ТЗ 37. + +Репозиторий: https://github.com/ochenstarik-ui/kagent +Зависит от задачи 0.9.0 (зелёный trunk). + +## Зачем + +Лимит max_model_cost на задачу не ограничивает суммарные расходы: сорок +параллельных задач укладываются каждая в свой лимит и вместе выносят месячный +бюджет. Счётчик, увеличиваемый после вызова, некорректен при параллелизме — +воркеры читают устаревшую сумму и все проходят проверку. + +Идемпотентность заявлена как требование в трёх разделах ТЗ, но без механизма: +при истечении lease повтор создаст второй pull request и второй деплой, и агент +об этом не узнает. + +## Что сделать + +### Бюджетный ledger (ADR-0006, ТЗ 37.1-37.2) + +- двухфазный учёт в PostgreSQL: атомарный резерв оценки перед шагом, списание + факта после вызова, возврат остатка; +- резерв связан с lease шага, осиротевший резерв освобождается supervisor; +- иерархия бюджетов: организация -> проект -> задача -> шаг, резерв обязан + пройти на всех уровнях; +- append-only, атрибуция запуску, шагу и конфигурации модели; +- автостоп по burn rate: превышение порога переводит платформу в режим + ограниченного приёма, текущие задачи доводятся до checkpoint и паркуются, + порождается инцидент, снятие — явным действием оператора; +- глобальная пауза как отдельный переключатель, независимый от аварийной + остановки задачи и от security read-only. + +### Ledger внешних эффектов (ADR-0010, ТЗ 37.4) + +- ключ идемпотентности из run_id, step_id, типа эффекта и канонического + дайджеста payload, вычисляется до попытки выполнения; +- состояния intended / in_flight / succeeded / failed / unknown, внешний + идентификатор от целевой системы; +- при повторе succeeded возвращает сохранённый результат без повторного + выполнения; unknown блокирует шаг и порождает инцидент сверки; +- outbox: эффекты, порождённые изменением состояния, публикуются в одной + транзакции с ним; +- connector с операциями записи обязан принимать ключ идемпотентности или + предоставлять естественный ключ для сверки, иначе допускается только к + чтению; +- процедура сверки для каждого write-connector. + +### Кэш модельных вызовов (ADR-0013, ТЗ 37.3) + +- prefix-stable сборка контекста: неизменяемые элементы первыми; +- кэш точных ответов по ключу (model_id, model_version, + prompt_registry_version, request_digest, sampling); +- схлопывание одновременных идентичных запросов; +- отключение там, где разнообразие является целью: consensus, shadow mode; +- изоляция по проектам и privacy zones; +- попадание в кэш видно в Run Timeline, запуск не выглядит дешевле, чем есть. + +## Критерий приёмки + +- нагрузочный тест: N параллельных задач не пробивают общий бюджет ни разу; +- тест: убитый воркер и повтор шага не создают второй pull request; +- тест: истёкший резерв освобождается и не блокирует бюджет навсегда; +- отчёт стоимости успешной задачи считается из ledger, а не из логов. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.5-boundaries.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.5-boundaries.md new file mode 100644 index 0000000..fcfb671 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/0.9.5-boundaries.md @@ -0,0 +1,69 @@ +Реализация ADR-0011, ADR-0014, ADR-0015. Разделы ТЗ 38 и 40. + +Репозиторий: https://github.com/ochenstarik-ui/kagent +Зависит от задачи 0.9.0 (зелёный trunk). + +## Зачем + +Ожидание человека — нормальное состояние автономной системы, но сейчас оно не +спроектировано: неизвестно, держит ли задача worker и lease, сколько ждёт, что +происходит с контекстом через сутки и что будет при молчании. + +Слой уроков существует как хранилище без механизма влияния на поведение. + +Личные данные и проектные разделены только классификацией на выходе, то есть +одна ошибка классификации отправляет личную переписку в облачную модель через +разработческого агента. + +## Что сделать + +### Контракт человеческого решения (ADR-0011, ТЗ 38) + +- типизированный объект вопроса: question_id, run_id, task_id, kind + (approval / choice / clarification / conflict), urgency, statement, options, + default, ttl, on_timeout (park / abort / assume_default), evidence, channels; +- постановка вопроса освобождает worker и lease после checkpoint, ожидающая + задача не потребляет ёмкость и не держит бюджетный резерв; +- контекст возобновления в checkpoint, а не в памяти процесса; +- assume_default допустим только при объявленном default и обратимом действии; +- единая очередь решений по всем проектам, доставка по настроенным каналам; +- blocking-вопрос с истёкшим TTL порождает инцидент; +- ответ в audit log с идентичностью ответившего, воспроизводимый как вход + запуска. + +### Исполняемые уроки (ADR-0014, ТЗ 40.1) + +- урок переходит в active только если объявляет форму влияния: исполняемая + проверка (правило линта, политики, запрещённый шаблон, eval-случай), + изменение контракта, либо правило контекста с триггером и стоимостью в + токенах; +- урок без формы остаётся candidate и не попадает ни в один контекст; +- проверка на противоречие с действующими уроками, разрешение через supersedes; +- дата пересмотра, переход в stale, прекращение применения; +- счётчики срабатываний и предотвращённых дефектов, вывод бесполезных + guardrails из обращения. + +### Изоляция личного контура (ADR-0015, ТЗ 40.2) + +- отдельное хранилище, отдельный поисковый индекс, отдельный bucket; +- отдельные ключи шифрования в vault: проектные credentials не расшифровывают + личный материал; +- Context Builder не имеет личный контур в списке адресуемых источников для + ролей разработки, независимо от конфигурации политик; +- к личному контуру обращается только Personal Assistant Agent, без + инструментов записи в репозиторий; +- перенос в проект — явное аудируемое действие пользователя, не результат + поиска; +- маршрутизация по умолчанию на локальные модели, облако требует явного + согласия по категории данных; +- удаление личных данных независимо от удаления проектов, распространяется на + кассеты, кэш и checkpoints. + +## Критерий приёмки + +- тест: задача, задавшая вопрос, освобождает воркер и корректно возобновляется + после ответа через сутки; +- тест: blocking-вопрос с истёкшим TTL создаёт инцидент; +- негативный тест: разработческая роль не может получить элемент личного + контура ни при какой конфигурации политик; +- урок без объявленной формы влияния не попадает в контекст. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/README-2.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/README-2.md new file mode 100644 index 0000000..6898418 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/README-2.md @@ -0,0 +1,84 @@ +# KAgent — задания + +Тексты заданий для доски Hermes (проект `kagent`, доска `default`). +Папка вне репозитория: задания не попадают в git и не засоряют PR. + +Репозиторий: https://github.com/ochenstarik-ui/kagent +Локальный клон Hermes-проекта: `C:\Users\Ochenstarik\kagent` + +## Соглашения + +- один файл — одно задание, имя `<этап>-<короткий-слаг>.md`; +- тело файла самодостаточно: воркер стартует без истории чата, поэтому внутри + всегда есть репозиторий, зависимости, «зачем», список работ и критерий приёмки; +- ссылки на решения даются в виде «ADR-00NN, ТЗ раздел N», без пересказа. + +## Как поставить задание в Hermes + +```bash +hermes kanban create "<заголовок>" --body "$(cat <файл>.md)" --project kagent --assignee worker-code --workspace worktree --branch wt/<слаг> --priority --idempotency-key <уникальный-ключ> --created-by claude +``` + +`--idempotency-key` защищает от дублей при повторном запуске: если задание с +таким ключом уже есть и не архивировано, вернётся его id. + +Зависимость между заданиями: `--parent ` при создании либо +`hermes kanban link ` позднее. + +## Брифинги для внешних исполнителей + +| Файл | Кому | Назначение | +|---|---|---| +| `hermes-work-protocol.md` | воркер Hermes на этой машине | правила работы в репозитории: ветки, инструменты, размер задачи, запреты, формат отчёта. Ссылается из каждой карточки | +| `gemini-onboarding.md` | облачная модель без доступа к диску | самодостаточный брифинг: правила, состояние репозитория, пакет A, формат сдачи | + +Облачному исполнителю недоступны локальные клоны, запуск сборки и доска Hermes, поэтому +брифинг не ссылается на локальные пути и требует явно помечать непроверенное. +Файлы репозитория прикладываются к запросу по требованию исполнителя. + +## Текущие задания + +### Пакет A — зелёная сборка + +Исходная карточка 0.9.0 дважды исчерпала бюджет итераций (60/60): объём не помещался в один +прогон. Разбита на шесть узких задач. Правило нарезки — раздел «Размер задачи» в +`hermes-work-protocol.md`: один-два файла, одна проверочная команда, один прогон. + +| Файл | Задание Hermes | ID | Зависит от | +|---|---|---|---| +| `a1-gateway-compile.md` | get_request_id, fmt, clippy | `t_a79f253f` | — | +| `a2-gateway-rate-limiter.md` | ограничитель частоты и вытеснение | `t_2fdf7693` | A1 | +| `a3-control-plane-runtime.md` | логгер, require в ESM, verifyPassword | `t_c0247bd1` | — | +| `a4-control-plane-tests.md` | модульные тесты | `t_833fd64e` | A3 | +| `a5-ci-python.md` | python job, ruff, .pyc | `t_e6a4b099` | — | +| `a6-lockfile-green-build.md` | лок-файл и зелёная сборка | `t_12688086` | A2, A4, A5 | + +A1, A3 и A5 независимы и идут параллельно. + +### Этапы + +| Файл | Задание Hermes | ID | Приоритет | +|---|---|---|---| +| `0.9.0-green-trunk.md` | Зонтичная карточка этапа, закрывается после A6 | `t_02a18136` | 100 | +| `0.9.1-measurability.md` | Вычисляемый статус, spec drift check, eval-suite | `t_e15a6516` | 90 | +| `0.9.2-reproducibility.md` | Кассеты, реестр промптов, жизненный цикл контекста | `t_4a957da4` | 85 | +| `0.9.3-verification-integrity.md` | Заморозка тестов, мутационная проверка, merge queue | `t_41b79fe7` | 80 | +| `0.9.4-economics.md` | Бюджетный ledger, автостоп, ledger эффектов, кэш | `t_9c52a43b` | 75 | +| `0.9.5-boundaries.md` | Контракт решения, уроки, личный контур | `t_9dfc2ce8` | 70 | + +Задания 0.9.1–0.9.5 зависят от 0.9.0: пока сборка основной ветки красная, +их результат не проверяем. + +## Статус + +Проверить доску: + +```bash +hermes kanban list +``` + +Разобрать диагностику упавших задач: + +```bash +hermes kanban diag +``` diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/README-3.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/README-3.md new file mode 100644 index 0000000..6898418 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/README-3.md @@ -0,0 +1,84 @@ +# KAgent — задания + +Тексты заданий для доски Hermes (проект `kagent`, доска `default`). +Папка вне репозитория: задания не попадают в git и не засоряют PR. + +Репозиторий: https://github.com/ochenstarik-ui/kagent +Локальный клон Hermes-проекта: `C:\Users\Ochenstarik\kagent` + +## Соглашения + +- один файл — одно задание, имя `<этап>-<короткий-слаг>.md`; +- тело файла самодостаточно: воркер стартует без истории чата, поэтому внутри + всегда есть репозиторий, зависимости, «зачем», список работ и критерий приёмки; +- ссылки на решения даются в виде «ADR-00NN, ТЗ раздел N», без пересказа. + +## Как поставить задание в Hermes + +```bash +hermes kanban create "<заголовок>" --body "$(cat <файл>.md)" --project kagent --assignee worker-code --workspace worktree --branch wt/<слаг> --priority --idempotency-key <уникальный-ключ> --created-by claude +``` + +`--idempotency-key` защищает от дублей при повторном запуске: если задание с +таким ключом уже есть и не архивировано, вернётся его id. + +Зависимость между заданиями: `--parent ` при создании либо +`hermes kanban link ` позднее. + +## Брифинги для внешних исполнителей + +| Файл | Кому | Назначение | +|---|---|---| +| `hermes-work-protocol.md` | воркер Hermes на этой машине | правила работы в репозитории: ветки, инструменты, размер задачи, запреты, формат отчёта. Ссылается из каждой карточки | +| `gemini-onboarding.md` | облачная модель без доступа к диску | самодостаточный брифинг: правила, состояние репозитория, пакет A, формат сдачи | + +Облачному исполнителю недоступны локальные клоны, запуск сборки и доска Hermes, поэтому +брифинг не ссылается на локальные пути и требует явно помечать непроверенное. +Файлы репозитория прикладываются к запросу по требованию исполнителя. + +## Текущие задания + +### Пакет A — зелёная сборка + +Исходная карточка 0.9.0 дважды исчерпала бюджет итераций (60/60): объём не помещался в один +прогон. Разбита на шесть узких задач. Правило нарезки — раздел «Размер задачи» в +`hermes-work-protocol.md`: один-два файла, одна проверочная команда, один прогон. + +| Файл | Задание Hermes | ID | Зависит от | +|---|---|---|---| +| `a1-gateway-compile.md` | get_request_id, fmt, clippy | `t_a79f253f` | — | +| `a2-gateway-rate-limiter.md` | ограничитель частоты и вытеснение | `t_2fdf7693` | A1 | +| `a3-control-plane-runtime.md` | логгер, require в ESM, verifyPassword | `t_c0247bd1` | — | +| `a4-control-plane-tests.md` | модульные тесты | `t_833fd64e` | A3 | +| `a5-ci-python.md` | python job, ruff, .pyc | `t_e6a4b099` | — | +| `a6-lockfile-green-build.md` | лок-файл и зелёная сборка | `t_12688086` | A2, A4, A5 | + +A1, A3 и A5 независимы и идут параллельно. + +### Этапы + +| Файл | Задание Hermes | ID | Приоритет | +|---|---|---|---| +| `0.9.0-green-trunk.md` | Зонтичная карточка этапа, закрывается после A6 | `t_02a18136` | 100 | +| `0.9.1-measurability.md` | Вычисляемый статус, spec drift check, eval-suite | `t_e15a6516` | 90 | +| `0.9.2-reproducibility.md` | Кассеты, реестр промптов, жизненный цикл контекста | `t_4a957da4` | 85 | +| `0.9.3-verification-integrity.md` | Заморозка тестов, мутационная проверка, merge queue | `t_41b79fe7` | 80 | +| `0.9.4-economics.md` | Бюджетный ledger, автостоп, ledger эффектов, кэш | `t_9c52a43b` | 75 | +| `0.9.5-boundaries.md` | Контракт решения, уроки, личный контур | `t_9dfc2ce8` | 70 | + +Задания 0.9.1–0.9.5 зависят от 0.9.0: пока сборка основной ветки красная, +их результат не проверяем. + +## Статус + +Проверить доску: + +```bash +hermes kanban list +``` + +Разобрать диагностику упавших задач: + +```bash +hermes kanban diag +``` diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/README.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/README.md new file mode 100644 index 0000000..8ef1b5c --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/README.md @@ -0,0 +1,54 @@ +# KAgent — задания + +Тексты заданий для доски Hermes (проект `kagent`, доска `default`). +Папка вне репозитория: задания не попадают в git и не засоряют PR. + +Репозиторий: https://github.com/ochenstarik-ui/kagent +Локальный клон Hermes-проекта: `C:\Users\Ochenstarik\kagent` + +## Соглашения + +- один файл — одно задание, имя `<этап>-<короткий-слаг>.md`; +- тело файла самодостаточно: воркер стартует без истории чата, поэтому внутри + всегда есть репозиторий, зависимости, «зачем», список работ и критерий приёмки; +- ссылки на решения даются в виде «ADR-00NN, ТЗ раздел N», без пересказа. + +## Как поставить задание в Hermes + +```bash +hermes kanban create "<заголовок>" --body "$(cat <файл>.md)" --project kagent --assignee worker-code --workspace worktree --branch wt/<слаг> --priority --idempotency-key <уникальный-ключ> --created-by claude +``` + +`--idempotency-key` защищает от дублей при повторном запуске: если задание с +таким ключом уже есть и не архивировано, вернётся его id. + +Зависимость между заданиями: `--parent ` при создании либо +`hermes kanban link ` позднее. + +## Текущие задания + +| Файл | Задание Hermes | ID | Приоритет | +|---|---|---|---| +| `0.9.0-green-trunk.md` | Зелёный trunk: CI, gateway, control-plane | `t_02a18136` | 100 | +| `0.9.1-measurability.md` | Вычисляемый статус, spec drift check, eval-suite | `t_e15a6516` | 90 | +| `0.9.2-reproducibility.md` | Кассеты, реестр промптов, жизненный цикл контекста | `t_4a957da4` | 85 | +| `0.9.3-verification-integrity.md` | Заморозка тестов, мутационная проверка, merge queue | `t_41b79fe7` | 80 | +| `0.9.4-economics.md` | Бюджетный ledger, автостоп, ledger эффектов, кэш | `t_9c52a43b` | 75 | +| `0.9.5-boundaries.md` | Контракт решения, уроки, личный контур | `t_9dfc2ce8` | 70 | + +Задания 0.9.1–0.9.5 зависят от 0.9.0: пока сборка основной ветки красная, +их результат не проверяем. + +## Статус + +Проверить доску: + +```bash +hermes kanban list +``` + +Разобрать диагностику упавших задач: + +```bash +hermes kanban diag +``` diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a1-gateway-compile-2.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a1-gateway-compile-2.md new file mode 100644 index 0000000..8f8024b --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a1-gateway-compile-2.md @@ -0,0 +1,45 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Файл: `services/gateway/src/main.rs`. Только он. + +## Дефект + +Функция `get_request_id` вызывает `.or_else()` у значения типа `String`: + +```rust +headers + .get("x-request-id") + .and_then(|v| v.to_str().ok()) + .unwrap_or("") + .to_string() + .or_else(|| { ... }) +``` + +У `String` такого метода нет — ошибка компиляции E0599. Крейт не собирается. + +Требуемое поведение: вернуть значение заголовка `x-request-id`, если он присутствует и +непустой; иначе сгенерировать UUID v4. + +## Что сделать + +- переписать `get_request_id` корректно; +- обработчик `live` принимает `State`, но не использует его: либо использовать, либо убрать + из сигнатуры; +- привести файл к формату rustfmt. + +`RateLimiter` в этой задаче **не трогать** — он не используется и вызовет предупреждение +`dead_code`. Чтобы clippy прошёл, добавь ему временно `#[allow(dead_code)]` с комментарием +`// подключается в задаче A2` и ничего больше в нём не меняй. + +## Критерий приёмки + +Все три команды проходят, вывод приложить к отчёту: + +```bash +cargo fmt --manifest-path services/gateway/Cargo.toml --check +cargo clippy --manifest-path services/gateway/Cargo.toml --all-targets -- -D warnings +cargo test --manifest-path services/gateway/Cargo.toml +``` + +Существующие тесты `parses_valid_port` и `rejects_zero_and_invalid_ports` должны проходить +без изменений. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a1-gateway-compile.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a1-gateway-compile.md new file mode 100644 index 0000000..8f8024b --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a1-gateway-compile.md @@ -0,0 +1,45 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Файл: `services/gateway/src/main.rs`. Только он. + +## Дефект + +Функция `get_request_id` вызывает `.or_else()` у значения типа `String`: + +```rust +headers + .get("x-request-id") + .and_then(|v| v.to_str().ok()) + .unwrap_or("") + .to_string() + .or_else(|| { ... }) +``` + +У `String` такого метода нет — ошибка компиляции E0599. Крейт не собирается. + +Требуемое поведение: вернуть значение заголовка `x-request-id`, если он присутствует и +непустой; иначе сгенерировать UUID v4. + +## Что сделать + +- переписать `get_request_id` корректно; +- обработчик `live` принимает `State`, но не использует его: либо использовать, либо убрать + из сигнатуры; +- привести файл к формату rustfmt. + +`RateLimiter` в этой задаче **не трогать** — он не используется и вызовет предупреждение +`dead_code`. Чтобы clippy прошёл, добавь ему временно `#[allow(dead_code)]` с комментарием +`// подключается в задаче A2` и ничего больше в нём не меняй. + +## Критерий приёмки + +Все три команды проходят, вывод приложить к отчёту: + +```bash +cargo fmt --manifest-path services/gateway/Cargo.toml --check +cargo clippy --manifest-path services/gateway/Cargo.toml --all-targets -- -D warnings +cargo test --manifest-path services/gateway/Cargo.toml +``` + +Существующие тесты `parses_valid_port` и `rejects_zero_and_invalid_ports` должны проходить +без изменений. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a2-gateway-rate-limiter-2.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a2-gateway-rate-limiter-2.md new file mode 100644 index 0000000..4016128 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a2-gateway-rate-limiter-2.md @@ -0,0 +1,38 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Файл: `services/gateway/src/main.rs`. Только он. Выполняется после задачи A1. + +## Дефект + +Структура `RateLimiter` объявлена, но нигде не создаётся. В changelog версия 0.8 заявлена +как «TOTP 2FA + rate limiter», при этом ограничение частоты запросов не подключено ни к +одному маршруту. В `docs/ARCHITECTURE.md` раздел 2 называет rate limiting обязанностью +Gateway. + +Вторая проблема: `HashMap` клиентов растёт неограниченно. Каждый новый адрес добавляет +запись, которая никогда не удаляется. + +## Что сделать + +- подключить лимитер как middleware ко всем маршрутам; +- ключ клиента: значение заголовка `x-forwarded-for`, при отсутствии — адрес пира; +- при превышении лимита возвращать `429` с заголовком `Retry-After`; +- параметры из окружения: `GATEWAY_RATE_LIMIT_WINDOW_SECONDS` (по умолчанию 60) и + `GATEWAY_RATE_LIMIT_MAX_REQUESTS` (по умолчанию 120); +- добавить вытеснение записей, у которых окно истекло, чтобы карта не росла бесконечно; +- снять `#[allow(dead_code)]`, добавленный в задаче A1; +- добавить тесты: запрос в пределах лимита проходит, запрос сверх лимита получает `429`, + после истечения окна счётчик сбрасывается, запись устаревшего клиента вытесняется. + +Значения по умолчанию вынеси в константы рядом с объявлением структуры. + +## Критерий приёмки + +```bash +cargo fmt --manifest-path services/gateway/Cargo.toml --check +cargo clippy --manifest-path services/gateway/Cargo.toml --all-targets -- -D warnings +cargo test --manifest-path services/gateway/Cargo.toml +``` + +Вывод приложить к отчёту. В `CHANGELOG.md` добавить строку о подключении ограничителя +частоты в раздел `[Unreleased] / Added`. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a2-gateway-rate-limiter.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a2-gateway-rate-limiter.md new file mode 100644 index 0000000..4016128 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a2-gateway-rate-limiter.md @@ -0,0 +1,38 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Файл: `services/gateway/src/main.rs`. Только он. Выполняется после задачи A1. + +## Дефект + +Структура `RateLimiter` объявлена, но нигде не создаётся. В changelog версия 0.8 заявлена +как «TOTP 2FA + rate limiter», при этом ограничение частоты запросов не подключено ни к +одному маршруту. В `docs/ARCHITECTURE.md` раздел 2 называет rate limiting обязанностью +Gateway. + +Вторая проблема: `HashMap` клиентов растёт неограниченно. Каждый новый адрес добавляет +запись, которая никогда не удаляется. + +## Что сделать + +- подключить лимитер как middleware ко всем маршрутам; +- ключ клиента: значение заголовка `x-forwarded-for`, при отсутствии — адрес пира; +- при превышении лимита возвращать `429` с заголовком `Retry-After`; +- параметры из окружения: `GATEWAY_RATE_LIMIT_WINDOW_SECONDS` (по умолчанию 60) и + `GATEWAY_RATE_LIMIT_MAX_REQUESTS` (по умолчанию 120); +- добавить вытеснение записей, у которых окно истекло, чтобы карта не росла бесконечно; +- снять `#[allow(dead_code)]`, добавленный в задаче A1; +- добавить тесты: запрос в пределах лимита проходит, запрос сверх лимита получает `429`, + после истечения окна счётчик сбрасывается, запись устаревшего клиента вытесняется. + +Значения по умолчанию вынеси в константы рядом с объявлением структуры. + +## Критерий приёмки + +```bash +cargo fmt --manifest-path services/gateway/Cargo.toml --check +cargo clippy --manifest-path services/gateway/Cargo.toml --all-targets -- -D warnings +cargo test --manifest-path services/gateway/Cargo.toml +``` + +Вывод приложить к отчёту. В `CHANGELOG.md` добавить строку о подключении ограничителя +частоты в раздел `[Unreleased] / Added`. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a3-control-plane-runtime-2.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a3-control-plane-runtime-2.md new file mode 100644 index 0000000..f21410c --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a3-control-plane-runtime-2.md @@ -0,0 +1,50 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Файлы: `services/control-plane/src/main.ts`, `services/control-plane/src/auth.ts`, +при необходимости `services/control-plane/package.json`. Тесты в этой задаче не пишутся — +они в задаче A4. + +## Дефект 1: сервис не стартует + +В `main.ts` логгер сконфигурирован с `transport.target: "pino-pretty"`, а пакета +`pino-pretty` нет в зависимостях. Fastify падает при инициализации. + +Предпочтительное решение: убрать `transport` и оставить структурный JSON-вывод. В +контейнере человекочитаемый вывод не нужен, а зависимость попадёт в образ. Если выберешь +добавить `pino-pretty` в `devDependencies` и включать транспорт только вне продакшена — +обоснуй в отчёте. + +## Дефект 2: регистрация и вход не работают + +В `auth.ts` функция `pbkdf2` получает модуль через `require("node:crypto")`. Пакет объявлен +как `"type": "module"`, поэтому `require` не определён и вызов бросает `ReferenceError` при +каждом хешировании пароля. То есть `POST /v1/auth/register` и `POST /v1/auth/login` не +работают вообще. + +В первой строке файла уже есть статический импорт +`import { randomBytes, createHash, timingSafeEqual } from "node:crypto"`. Добавь в него +`pbkdf2` и убери динамическое получение модуля. + +## Дефект 3: испорченный хеш даёт 500 вместо 401 + +`verifyPassword` разбирает хранимую строку через `split(":")` и передаёт результат в +`timingSafeEqual`, который бросает исключение при разной длине буферов. Испорченное или +устаревшее значение в базе превращается в 500. + +Разбор должен проверять формат и возвращать `false`, а не бросать исключение. Сравнение +остаётся постоянного времени. + +## Критерий приёмки + +```bash +pnpm --filter @kagent/control-plane typecheck +``` + +Проходит без ошибок при включённых `strict`, `noUncheckedIndexedAccess`, +`exactOptionalPropertyTypes`. Тип `any` не использовать. + +Сервис запускается: `pnpm --filter @kagent/control-plane dev` поднимается и отвечает на +`GET /health/live`. Если PostgreSQL недоступен — это ожидаемо на данном этапе, важно, что +процесс не падает при старте. Вывод приложить к отчёту. + +Изменения зависимостей перечислить отдельно с указанием лицензии. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a3-control-plane-runtime.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a3-control-plane-runtime.md new file mode 100644 index 0000000..f21410c --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a3-control-plane-runtime.md @@ -0,0 +1,50 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Файлы: `services/control-plane/src/main.ts`, `services/control-plane/src/auth.ts`, +при необходимости `services/control-plane/package.json`. Тесты в этой задаче не пишутся — +они в задаче A4. + +## Дефект 1: сервис не стартует + +В `main.ts` логгер сконфигурирован с `transport.target: "pino-pretty"`, а пакета +`pino-pretty` нет в зависимостях. Fastify падает при инициализации. + +Предпочтительное решение: убрать `transport` и оставить структурный JSON-вывод. В +контейнере человекочитаемый вывод не нужен, а зависимость попадёт в образ. Если выберешь +добавить `pino-pretty` в `devDependencies` и включать транспорт только вне продакшена — +обоснуй в отчёте. + +## Дефект 2: регистрация и вход не работают + +В `auth.ts` функция `pbkdf2` получает модуль через `require("node:crypto")`. Пакет объявлен +как `"type": "module"`, поэтому `require` не определён и вызов бросает `ReferenceError` при +каждом хешировании пароля. То есть `POST /v1/auth/register` и `POST /v1/auth/login` не +работают вообще. + +В первой строке файла уже есть статический импорт +`import { randomBytes, createHash, timingSafeEqual } from "node:crypto"`. Добавь в него +`pbkdf2` и убери динамическое получение модуля. + +## Дефект 3: испорченный хеш даёт 500 вместо 401 + +`verifyPassword` разбирает хранимую строку через `split(":")` и передаёт результат в +`timingSafeEqual`, который бросает исключение при разной длине буферов. Испорченное или +устаревшее значение в базе превращается в 500. + +Разбор должен проверять формат и возвращать `false`, а не бросать исключение. Сравнение +остаётся постоянного времени. + +## Критерий приёмки + +```bash +pnpm --filter @kagent/control-plane typecheck +``` + +Проходит без ошибок при включённых `strict`, `noUncheckedIndexedAccess`, +`exactOptionalPropertyTypes`. Тип `any` не использовать. + +Сервис запускается: `pnpm --filter @kagent/control-plane dev` поднимается и отвечает на +`GET /health/live`. Если PostgreSQL недоступен — это ожидаемо на данном этапе, важно, что +процесс не падает при старте. Вывод приложить к отчёту. + +Изменения зависимостей перечислить отдельно с указанием лицензии. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a4-control-plane-tests-2.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a4-control-plane-tests-2.md new file mode 100644 index 0000000..30efbbc --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a4-control-plane-tests-2.md @@ -0,0 +1,48 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Каталог: `services/control-plane/src/`. Выполняется после задачи A3. + +## Дефект + +В `package.json` объявлено `"test": "vitest run"`, но тестовых файлов в пакете нет. Vitest +завершается с кодом 1, из-за чего падает `pnpm test` для всего монорепозитория. + +## Что сделать + +Добавить файлы `*.test.ts` рядом с исходниками. Минимальный набор: + +**`domain.test.ts`** — таблица переходов `TASK_TRANSITIONS`: + +- разрешённый переход принимается; +- запрещённый переход отклоняется; +- терминальные статусы `done` и `cancelled` не имеют исходящих переходов; +- каждый статус присутствует в таблице. + +**`auth.test.ts`**: + +- `hashPassword` и `verifyPassword`: корректный пароль проходит, неверный не проходит; +- испорченный хеш возвращает `false`, а не бросает исключение; +- два хеша одного пароля различаются (соль случайна); +- `validateAccessToken`: валидный токен разбирается, подделанная подпись отклоняется, + истёкший токен отклоняется; +- `authMiddleware`: без заголовка `401`, с чужой схемой `401`, с валидным токеном + принципал попадает в запрос. + +Тесты не обращаются к сети, к PostgreSQL и к внешним сервисам. Для истёкшего токена +используй подмену времени средствами vitest, а не ожидание. + +## Ограничение + +Тесты пишутся **по описанному поведению**, а не подгоняются под текущий код. Если тест +обнаруживает дефект — не правь тест. Зафиксируй тест как падающий, опиши дефект +комментарием к карточке и предложи отдельную карточку. Причина — +`docs/adr/0005-test-oracle-integrity.md`. + +## Критерий приёмки + +```bash +pnpm --filter @kagent/control-plane test +pnpm --filter @kagent/control-plane typecheck +``` + +Обе команды проходят, вывод приложить к отчёту. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a4-control-plane-tests.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a4-control-plane-tests.md new file mode 100644 index 0000000..30efbbc --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a4-control-plane-tests.md @@ -0,0 +1,48 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Каталог: `services/control-plane/src/`. Выполняется после задачи A3. + +## Дефект + +В `package.json` объявлено `"test": "vitest run"`, но тестовых файлов в пакете нет. Vitest +завершается с кодом 1, из-за чего падает `pnpm test` для всего монорепозитория. + +## Что сделать + +Добавить файлы `*.test.ts` рядом с исходниками. Минимальный набор: + +**`domain.test.ts`** — таблица переходов `TASK_TRANSITIONS`: + +- разрешённый переход принимается; +- запрещённый переход отклоняется; +- терминальные статусы `done` и `cancelled` не имеют исходящих переходов; +- каждый статус присутствует в таблице. + +**`auth.test.ts`**: + +- `hashPassword` и `verifyPassword`: корректный пароль проходит, неверный не проходит; +- испорченный хеш возвращает `false`, а не бросает исключение; +- два хеша одного пароля различаются (соль случайна); +- `validateAccessToken`: валидный токен разбирается, подделанная подпись отклоняется, + истёкший токен отклоняется; +- `authMiddleware`: без заголовка `401`, с чужой схемой `401`, с валидным токеном + принципал попадает в запрос. + +Тесты не обращаются к сети, к PostgreSQL и к внешним сервисам. Для истёкшего токена +используй подмену времени средствами vitest, а не ожидание. + +## Ограничение + +Тесты пишутся **по описанному поведению**, а не подгоняются под текущий код. Если тест +обнаруживает дефект — не правь тест. Зафиксируй тест как падающий, опиши дефект +комментарием к карточке и предложи отдельную карточку. Причина — +`docs/adr/0005-test-oracle-integrity.md`. + +## Критерий приёмки + +```bash +pnpm --filter @kagent/control-plane test +pnpm --filter @kagent/control-plane typecheck +``` + +Обе команды проходят, вывод приложить к отчёту. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a5-ci-python-2.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a5-ci-python-2.md new file mode 100644 index 0000000..a1497fd --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a5-ci-python-2.md @@ -0,0 +1,56 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Файлы: `.github/workflows/ci.yml`, новый `pyproject.toml` в корне, удаление одного +отслеживаемого бинарника. + +## Дефект + +В CI есть только jobs `node` и `rust`. Пять Python-сервисов — reasoning-engine, +agent-runtime, pipeline, observability, orchestrator, около 1700 строк — не проверяются +ничем. Скрипт `scripts/validate_repository.py` существует, но не вызывается. + +Отдельно: файл `services/reasoning-engine/src/__pycache__/engine.cpython-311.pyc` +отслеживается git, хотя `.gitignore` содержит `__pycache__/` — правило добавили позже +файла. + +## Что сделать + +Добавить в `.github/workflows/ci.yml` job `python`: + +- `ubuntu-latest`, Python 3.12, кеш pip; +- установка зависимостей всех сервисов из их `requirements.txt`; +- `ruff check services scripts`; +- `pytest` по каталогу `tests/` **с исключением интеграционных тестов**, требующих + PostgreSQL: `tests/integration/test_pg.py` сейчас требует живую базу и в этой задаче не + запускается; +- `python scripts/validate_repository.py`. + +Создать корневой `pyproject.toml` с конфигурацией ruff: `target-version = "py312"`, +`line-length = 120`, правила `E`, `F`, `W`, `I`, `UP`, `B`. + +Удалить `.pyc` из индекса: `git rm --cached <путь>`. + +Jobs `node` и `rust` не менять. + +## Ожидаемое препятствие + +Ruff почти наверняка найдёт замечания в существующем коде — неиспользуемые импорты +(`asyncio`, `hashlib`, `signal`, `sys` в нескольких сервисах), порядок импортов, устаревшие +конструкции. + +Правь только то, что ruff считает ошибкой, и только механически: удаление неиспользуемого +импорта, сортировка импортов, замена устаревшей конструкции. **Логику не менять.** Если +замечание требует изменения поведения — добавь точечное исключение с комментарием и опиши +в отчёте отдельной строкой. + +## Критерий приёмки + +Локально проходят: + +```bash +ruff check services scripts +python scripts/validate_repository.py +``` + +Вывод приложить к отчёту. Файл workflow должен быть синтаксически корректным YAML — +проверь разбором, а не на глаз. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a5-ci-python.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a5-ci-python.md new file mode 100644 index 0000000..a1497fd --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a5-ci-python.md @@ -0,0 +1,56 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Файлы: `.github/workflows/ci.yml`, новый `pyproject.toml` в корне, удаление одного +отслеживаемого бинарника. + +## Дефект + +В CI есть только jobs `node` и `rust`. Пять Python-сервисов — reasoning-engine, +agent-runtime, pipeline, observability, orchestrator, около 1700 строк — не проверяются +ничем. Скрипт `scripts/validate_repository.py` существует, но не вызывается. + +Отдельно: файл `services/reasoning-engine/src/__pycache__/engine.cpython-311.pyc` +отслеживается git, хотя `.gitignore` содержит `__pycache__/` — правило добавили позже +файла. + +## Что сделать + +Добавить в `.github/workflows/ci.yml` job `python`: + +- `ubuntu-latest`, Python 3.12, кеш pip; +- установка зависимостей всех сервисов из их `requirements.txt`; +- `ruff check services scripts`; +- `pytest` по каталогу `tests/` **с исключением интеграционных тестов**, требующих + PostgreSQL: `tests/integration/test_pg.py` сейчас требует живую базу и в этой задаче не + запускается; +- `python scripts/validate_repository.py`. + +Создать корневой `pyproject.toml` с конфигурацией ruff: `target-version = "py312"`, +`line-length = 120`, правила `E`, `F`, `W`, `I`, `UP`, `B`. + +Удалить `.pyc` из индекса: `git rm --cached <путь>`. + +Jobs `node` и `rust` не менять. + +## Ожидаемое препятствие + +Ruff почти наверняка найдёт замечания в существующем коде — неиспользуемые импорты +(`asyncio`, `hashlib`, `signal`, `sys` в нескольких сервисах), порядок импортов, устаревшие +конструкции. + +Правь только то, что ruff считает ошибкой, и только механически: удаление неиспользуемого +импорта, сортировка импортов, замена устаревшей конструкции. **Логику не менять.** Если +замечание требует изменения поведения — добавь точечное исключение с комментарием и опиши +в отчёте отдельной строкой. + +## Критерий приёмки + +Локально проходят: + +```bash +ruff check services scripts +python scripts/validate_repository.py +``` + +Вывод приложить к отчёту. Файл workflow должен быть синтаксически корректным YAML — +проверь разбором, а не на глаз. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a6-lockfile-green-build-2.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a6-lockfile-green-build-2.md new file mode 100644 index 0000000..436b160 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a6-lockfile-green-build-2.md @@ -0,0 +1,55 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Завершающая задача пакета A. Выполняется после A2, A4 и A5. + +## Дефект + +В репозитории нет `pnpm-lock.yaml`. Job `node` падает на шаге `setup-node` с `cache: pnpm` +ещё до установки зависимостей: + +``` +##[error]Dependencies lock file is not found in /home/runner/work/kagent/kagent. +Supported file patterns: pnpm-lock.yaml +``` + +Из-за этого `pnpm typecheck`, `pnpm test` и `pnpm build` не выполнялись в CI ни разу. +Отсутствие лок-файла нарушает и `docs/THREAT_MODEL.md`, где lockfiles указаны как контроль +против компрометации цепочки поставок. + +## Что сделать + +1. Слить ветки задач A2, A4 и A5 в свою ветку либо взять их изменения как базу — уточни у + владельца, если ветки ещё не в `main`. +2. Сгенерировать лок-файл: + +```bash +pnpm install --lockfile-only +``` + +3. Закоммитить `pnpm-lock.yaml`. +4. Прогнать полный набор проверок монорепозитория и добиться зелёного результата. + +## Критерий приёмки + +Все команды проходят, вывод каждой приложить к отчёту: + +```bash +pnpm install --frozen-lockfile +pnpm typecheck +pnpm test +pnpm build +cargo fmt --manifest-path services/gateway/Cargo.toml --check +cargo clippy --manifest-path services/gateway/Cargo.toml --all-targets -- -D warnings +cargo test --manifest-path services/gateway/Cargo.toml +ruff check services scripts +python scripts/validate_repository.py +``` + +## Отдельно + +Если `pnpm build` вскроет дефекты, не входящие в задачи A1–A5, — не чини их здесь. Заведи +карточку на каждый и сообщи. Задача считается выполненной, когда либо всё зелёное, либо +явно перечислено, что осталось красным и почему. + +После вливания в `main` пункт roadmap **не отмечать**: статус этапа будет вычисляться из +артефактов CI, см. `docs/adr/0016-computed-stage-status.md`. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a6-lockfile-green-build.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a6-lockfile-green-build.md new file mode 100644 index 0000000..436b160 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a6-lockfile-green-build.md @@ -0,0 +1,55 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Завершающая задача пакета A. Выполняется после A2, A4 и A5. + +## Дефект + +В репозитории нет `pnpm-lock.yaml`. Job `node` падает на шаге `setup-node` с `cache: pnpm` +ещё до установки зависимостей: + +``` +##[error]Dependencies lock file is not found in /home/runner/work/kagent/kagent. +Supported file patterns: pnpm-lock.yaml +``` + +Из-за этого `pnpm typecheck`, `pnpm test` и `pnpm build` не выполнялись в CI ни разу. +Отсутствие лок-файла нарушает и `docs/THREAT_MODEL.md`, где lockfiles указаны как контроль +против компрометации цепочки поставок. + +## Что сделать + +1. Слить ветки задач A2, A4 и A5 в свою ветку либо взять их изменения как базу — уточни у + владельца, если ветки ещё не в `main`. +2. Сгенерировать лок-файл: + +```bash +pnpm install --lockfile-only +``` + +3. Закоммитить `pnpm-lock.yaml`. +4. Прогнать полный набор проверок монорепозитория и добиться зелёного результата. + +## Критерий приёмки + +Все команды проходят, вывод каждой приложить к отчёту: + +```bash +pnpm install --frozen-lockfile +pnpm typecheck +pnpm test +pnpm build +cargo fmt --manifest-path services/gateway/Cargo.toml --check +cargo clippy --manifest-path services/gateway/Cargo.toml --all-targets -- -D warnings +cargo test --manifest-path services/gateway/Cargo.toml +ruff check services scripts +python scripts/validate_repository.py +``` + +## Отдельно + +Если `pnpm build` вскроет дефекты, не входящие в задачи A1–A5, — не чини их здесь. Заведи +карточку на каждый и сообщи. Задача считается выполненной, когда либо всё зелёное, либо +явно перечислено, что осталось красным и почему. + +После вливания в `main` пункт roadmap **не отмечать**: статус этапа будет вычисляться из +артефактов CI, см. `docs/adr/0016-computed-stage-status.md`. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a7-fix-node-build.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a7-fix-node-build.md new file mode 100644 index 0000000..5ec3c15 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/a7-fix-node-build.md @@ -0,0 +1,69 @@ +Правила работы: прочитай `C:\Users\Ochenstarik\kagent-tasks\hermes-work-protocol.md`. + +Ветка: `wt/kagent-090-green-trunk`, PR #3. Файлы: `services/control-plane/package.json`, +`services/control-plane/tsconfig.json`, `services/control-plane/src/auth.test.ts`, +новый `services/control-plane/tsconfig.build.json`. + +## Факт + +PR #3 **не смержен**, `main` стоит на `3db581d`, сборка ветки красная: +`https://github.com/ochenstarik-ui/kagent/actions/runs/31101831510` + +Jobs `rust` и `python` зелёные. Job `node` падает на шаге `pnpm build` с пятью ошибками +TS2352 в `services/control-plane/src/auth.test.ts` — небезопасные приведения типов: + +``` +src/auth.test.ts(30,46): Conversion of type '{ status: ... }' to type 'FastifyReply<...>' + may be a mistake because neither type sufficiently overlaps with the other. +src/auth.test.ts(31,13): Conversion of type 'undefined' to type '{ code: number; }' ... +``` + +Строки 30, 31, 37, 38, 72. + +## Почему это не поймали раньше + +В `services/control-plane/package.json` **нет скрипта `typecheck`**. Корневой +`pnpm typecheck` выполняет `pnpm -r --if-present typecheck` и молча пропускает пакет. +В отчёте предыдущего исполнителя это прямо видно: «Scope: 3 of 4 workspace projects» — +пропущен ровно тот пакет, который правили. + +Ошибки вскрылись только на `pnpm build`, потому что `build: "tsc"` компилирует и тестовые +файлы: в `tsconfig.json` нет исключения. + +## Что сделать + +1. Добавить в `services/control-plane/package.json` скрипт + `"typecheck": "tsc --noEmit"`. Это закрывает дыру, из-за которой пакет выпадал из + проверки. +2. Создать `services/control-plane/tsconfig.build.json`, наследующий `tsconfig.json` и + исключающий `**/*.test.ts`; изменить `build` на `tsc -p tsconfig.build.json`. + Тесты продолжают проверяться типами через `typecheck`, но не попадают в `dist`. +3. Переписать `auth.test.ts` без приведений через `as`: + - заглушка ответа должна записывать статус и тело, а проверка — читать записанное, а не + приводить возвращаемое значение middleware к `{ code: number }`; + - для аргументов middleware использовать минимальные типизированные заглушки, а не + `as Parameters[N]`. + + Смысл проверок не менять: без заголовка 401, чужая схема 401, валидный токен + прикрепляет принципала. + +## Критерий приёмки + +```bash +pnpm --filter @kagent/control-plane typecheck +pnpm --filter @kagent/control-plane test +pnpm typecheck +pnpm test +pnpm build +``` + +Все пять проходят, вывод приложить к отчёту. Проверить, что `pnpm typecheck` теперь +захватывает четыре пакета из четырёх, а не три. + +После пуша дождаться прогона CI на PR #3 и приложить ссылку на **зелёный** прогон. Отчёт со +словами «должно пройти» не принимается: сборка проверяется прогоном, а не рассуждением. + +## Границы + +Ничего, кроме перечисленных четырёх файлов. Замену HTTP-клиента в gateway, зависимости и +что-либо ещё в этой карточке не трогать. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b2-measurability-sanitize.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b2-measurability-sanitize.md new file mode 100644 index 0000000..e424a74 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b2-measurability-sanitize.md @@ -0,0 +1,112 @@ +Правила работы — `AGENTS.md` в корне репозитория, копия в +`C:\Users\Ochenstarik\kagent-tasks\AGENTS.md`. + +Рабочий каталог: `C:\Users\Ochenstarik\kagent\.worktrees\t_e15a6516` +Ветка: `wt/kagent-091-measurability` + +## На чём остановились + +Работа по этапу 0.9.1 сделана наполовину и **не закоммичена**. В рабочем каталоге: + +``` +?? scripts/roadmap_status.py вычисление статуса roadmap из capabilities.json +?? scripts/drift_check.py проверка расхождения заявленного и наблюдаемого +?? scripts/eval_suite.py запуск набора сквозных случаев +?? docs/capabilities.json реестр возможностей и доказательств +?? eval/ пять случаев, baseline.json +?? docs/adr/0008-measurability-and-computed-status.md +?? docs/adr/0016-spec-drift-and-eval-integrity.md +?? tests/unit/, pyproject.toml, uv.lock, services/gateway/Cargo.lock + M .env.example +``` + +Пока это не закоммичено, любая чистка каталога уничтожает работу. + +Задача — привести сделанное в пригодный вид. Подключение к непрерывной интеграции и +наполнение случаев вынесено в следующую задачу. + +## 1. Зафиксировать без потерь + +Закоммитить три скрипта, `docs/capabilities.json`, каталог `eval/` и `tests/unit/` как есть, +одним коммитом с пометкой, что содержимое дорабатывается в этой же задаче. Дальше правки +идут поверх, чтобы работа не пропала при первой же ошибке. + +`services/gateway/Cargo.lock`, `uv.lock` и правки `.env.example` в этой задаче не нужны: +gateway ведётся в другой ветке, изменения окружения к измеримости не относятся. Не +коммитить. + +## 2. Номера ADR заняты + +Созданы `docs/adr/0008-measurability-and-computed-status.md` и +`docs/adr/0016-spec-drift-and-eval-integrity.md`. Номера **0008 и 0016 уже заняты** другими +решениями в открытом PR #2: + +- `0008-platform-evaluation-suite.md` — набор оценки платформы и метрики автономности; +- `0016-computed-stage-status.md` — вычисляемый статус этапа и обнаружение расхождения. + +Два файла с одним номером нарушают правило именования из `docs/adr/README.md` и при слиянии +дадут коллизию. + +Оба существующих решения описывают ровно то, что реализуют новые файлы. Поэтому: + +- удалить оба новых файла ADR; +- если в их текстах есть решения, которых нет в 0008 и 0016 — вынести только эти отличия в + один новый ADR с номером `0021` и перечислить их в отчёте; +- реализация уже принятого решения нового ADR не требует. + +## 3. Статус accepted проставлен исполнителем + +Оба новых файла имеют `Status: accepted`. Решения принимает владелец проекта, а не +исполнитель. Если ADR-0021 всё же появится — статус `proposed`. + +## 4. Реестр возможностей закрепляет непроверенные статусы + +В `docs/capabilities.json` этапы 0.1–0.8 записаны как `complete`. Это те самые галочки, +против которых написано решение: они проставлены вручную и ничем не подтверждены. Известно, +что как минимум персистентность проектов и задач не работает, а часть модулей не +импортируется ниоткуда. + +Реестр, зафиксировавший ложные статусы, отменяет смысл всей задачи. + +Что сделать: + +- убрать поле статуса из объявления этапов. Реестр объявляет **что должно быть доказано**, + а не **что уже готово**; +- статус вычисляется `roadmap_status.py` из наличия доказательств; при отсутствии + доказательства — `unverified`; +- для каждой возможности в реестре доказательство должно быть проверяемым: имя job + непрерывной интеграции, случай из набора оценки, конкретный файл артефакта. Список + существующих файлов доказательством не является; +- прогнать `roadmap_status.py` и приложить полученный вывод к отчёту. Ожидаемо, что + большинство возможностей окажется `unverified` — это правильный результат, а не ошибка. + +## 5. Случаи оценки пустые + +`eval/cases/*/base.tar.gz` весят по 64 байта — это пустые архивы. Пять случаев объявлены, +снимков репозиториев в них нет, то есть набор не может быть выполнен. + +Выбрать одно и сделать честно: + +- либо наполнить один случай настоящим снимком и оставить его единственным рабочим, а + остальные удалить до наполнения; +- либо оставить каталоги как объявление структуры, но пометить случаи как `draft` в + `contract.json` и исключить из подсчёта, чтобы пустой набор не выглядел готовым. + +Второй вариант дешевле и допустим при условии, что `eval_suite.py` не засчитывает `draft`. + +## Критерий приёмки + +- работа закоммичена, ничего не потеряно; +- в `docs/adr/` нет двух файлов с одинаковым номером; +- ни один ADR не имеет статуса `accepted`, проставленного исполнителем; +- `python scripts/roadmap_status.py` выполняется и печатает статусы, выведенные из + доказательств, а не из объявленного поля; +- `python scripts/drift_check.py` выполняется и печатает список расхождений; +- ни один случай оценки не выглядит рабочим, не будучи таковым. + +Вывод обеих команд приложить к отчёту. + +## Границы + +Только перечисленные файлы. Ветку не ребейзить, в CI ничего не подключать — это следующая +задача. Ничего в gateway и control-plane не трогать. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b3-measurability-wire-ci.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b3-measurability-wire-ci.md new file mode 100644 index 0000000..81eb9ba --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b3-measurability-wire-ci.md @@ -0,0 +1,90 @@ +Правила работы — `AGENTS.md` в корне репозитория, копия в +`C:\Users\Ochenstarik\kagent-tasks\AGENTS.md`. + +Рабочий каталог: `C:\Users\Ochenstarik\kagent\.worktrees\t_e15a6516` +Ветка: `wt/kagent-091-measurability` +Выполняется после задачи `b2-measurability-sanitize.md`. + +## Предусловие + +Ветка отпочкована от старого `main`, в ней нет работы этапа 0.9.0: нет `pnpm-lock.yaml`, нет +job `python`, нет исправлений gateway и control-plane. Пока PR #3 не влит в `main`, сборка +этой ветки будет красной по чужим причинам. + +**Начинать только после того, как PR #3 смержен.** Первым действием — `git fetch origin` и +rebase ветки на `origin/main`. Верификация на устаревшей базе не даёт права на слияние. + +Если PR #3 ещё не влит — останови работу и сообщи. Не обходить, не копировать чужие правки +в свою ветку. + +## Проблема + +Три скрипта — `roadmap_status.py`, `drift_check.py`, `eval_suite.py` — написаны, но не +вызываются ниоткуда. Это ровно тот дефект, который `drift_check.py` создан обнаруживать: +код присутствует в дереве и недостижим ни из одной точки входа. + +Пока они не в непрерывной интеграции, вычисляемый статус остаётся декларацией. + +## 1. Подключить к непрерывной интеграции + +Добавить в `.github/workflows/ci.yml`: + +- шаг `python scripts/drift_check.py` в существующий job `python`. Сборка падает при + обнаружении расхождения. Список проверок — из спецификации, раздел 41.5: заявленная + возможность без проходящего доказательства; модуль в дереве, недостижимый ни из одной + точки входа; задокументированный endpoint, отсутствующий в таблице маршрутов; + задокументированная переменная окружения, которая нигде не читается; пользовательское + изменение без записи в `CHANGELOG.md`; архитектурное изменение без ADR; +- отдельный job `measurability`: выполняет `roadmap_status.py`, публикует полученный + `ROADMAP.md` как артефакт сборки и падает, если сгенерированный файл отличается от + закоммиченного. Это и есть механизм, запрещающий ручную правку статусов; +- `eval_suite.py` запускать в режиме, не требующем поставщика моделей. Пока набор состоит из + черновых случаев, job проверяет только разбор контрактов и целостность набора, а не + прохождение случаев. + +## 2. Первый прогон будет красным + +Ожидаемо и правильно: `drift_check.py` на текущем дереве обязан найти как минимум четыре +недостижимых модуля — + +``` +services/nats/src/events.py +services/auth/src/totp.py +services/control-plane/src/db.ts +packages/contracts/src/reasoning.ts +``` + +Ни один из них не импортируется ниоткуда. + +**Не чинить эти модули в этой задаче и не ослаблять проверку, чтобы сборка позеленела.** +Правильное действие: убедиться, что проверка их находит, зафиксировать список в отчёте и +завести отдельную задачу на решение по каждому — подключить или удалить. + +Чтобы ветку можно было влить, добавь в `drift_check.py` файл известных расхождений +(`docs/known-drift.json`) с ограниченным сроком: запись содержит путь, причину, дату и +задачу, в которой расхождение снимается. Запись без задачи или с истёкшим сроком роняет +сборку. Список должен только сокращаться. + +## 3. Что не входит + +- наполнение случаев оценки настоящими снимками репозиториев; +- метрики автономности и гейт релиза по ним; +- исправление найденных расхождений. + +## Критерий приёмки + +- ветка перебазирована на `main`, содержащий работу 0.9.0; +- `drift_check.py` вызывается из CI и находит все четыре недостижимых модуля — список + привести в отчёте; +- `roadmap_status.py` вызывается из CI, расхождение сгенерированного и закоммиченного + `ROADMAP.md` роняет сборку; +- проверено, что ручная правка статуса в `ROADMAP.md` действительно роняет сборку: сделать + правку, показать красный прогон, откатить; +- прогон непрерывной интеграции зелёный при пустом списке известных расхождений сверх + четырёх зафиксированных; +- ссылка на прогон приложена. + +## Границы + +`.github/workflows/ci.yml`, `scripts/*`, `docs/capabilities.json`, `docs/known-drift.json`, +`ROADMAP.md`. Ничего в сервисах не трогать. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b4-drift-check-quality.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b4-drift-check-quality.md new file mode 100644 index 0000000..29bf134 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b4-drift-check-quality.md @@ -0,0 +1,95 @@ +Правила работы — `AGENTS.md` в корне репозитория, копия в +`C:\Users\Ochenstarik\kagent-tasks\AGENTS.md`. + +Репозиторий: `https://github.com/ochenstarik-ui/kagent`, база — `main` на `00c56fa` +Ветка: создать новую от свежего `main`, `wt/b4-drift-check-quality` +Файл: `scripts/drift_check.py`. Выполняется **до** задачи `b3-measurability-wire-ci.md`. + +Работа этапа 0.9.1 уже влита в `main`: скрипты, реестр возможностей, каркас eval и +модульные тесты на месте. Старые worktree отпочкованы от прежнего `main` и непригодны — +начни с `git fetch origin` и новой ветки от `origin/main`. + +## Зачем + +`b3` подключает `drift_check.py` к непрерывной интеграции как блокирующую проверку. В +текущем виде подключать нельзя: точность проверки такова, что она заблокирует любой пуш по +ложным поводам и при этом пропустит настоящие дефекты. + +Фактический прогон на текущем дереве даёт 21 находку недостижимых модулей. Разбор: + +**Настоящая находка одна** — `packages/contracts/src/reasoning.ts`: файл не экспортируется +из `index.ts` и не импортируется ниоткуда. + +**Ложные срабатывания:** + +- `.venv/Lib/site-packages/_virtualenv.py`, `.venv/Scripts/activate_this.py` — проверка + сканирует виртуальное окружение; +- `packages/contracts/src/index.ts` — это точка входа пакета, она достижима по определению; +- `artifact.ts`, `event.ts`, `ids.ts`, `task.ts` — экспортируются через `index.ts`; +- `artifact.test.ts`, `task.test.ts`, `tests/unit/test_*.py` — тестовые файлы являются + точками входа для запускающего их инструмента; +- `services/reasoning-engine/src/server.py` — точка входа uvicorn, объявлена в Dockerfile + как `src.server:app`; +- `services/reasoning-engine/src/engine.py` — импортируется из `server.py`; +- `services/control-plane/src/domain.ts` — импортируется из `store.ts` и `routes.ts`. + +**Пропущенные настоящие дефекты.** Проверка не находит ни один из трёх модулей, которые +действительно не подключены ни к одной точке входа: + +``` +services/nats/src/events.py +services/auth/src/totp.py +services/control-plane/src/db.ts +``` + +Первые два перестали считаться недостижимыми после того, как в этой же ветке для них +появились модульные тесты. Это лазейка: модуль, который используют только его собственные +тесты, продуктом не используется. Достижимость из теста не является достижимостью. + +**Самоблокировка.** Скрипт записывает `eval/reports/latest.json` и тут же сообщает: «product +task must not modify eval or measurability artifacts: M eval/reports/latest.json». Второй +запуск подряд падает из-за первого. + +**Необъявленный вид доказательства.** `[web.dashboard] unknown evidence: build` — реестр +возможностей ссылается на вид доказательства, которого проверка не знает. + +## Что сделать + +1. **Исключить из обхода** каталоги окружений и сборки: `.venv`, `node_modules`, `target`, + `dist`, `.next`, `__pycache__`, `.worktrees`, `.git`. +2. **Объявить точки входа явно**, а не выводить их эвристикой. Список в конфигурации: + бинарные цели Rust, `main.ts` и `main.py` сервисов, `app`-объекты, объявленные в + Dockerfile, экспорты пакетов из `package.json`, страницы Next.js. Файл, достижимый + транзитивно от точки входа, недостижимым не считается. +3. **Тесты исключить из графа достижимости продукта.** Тестовый файл сам по себе точкой + входа продукта не является, и покрытие модуля тестом не делает модуль подключённым. + Проверка обязана находить `services/nats/src/events.py`, `services/auth/src/totp.py` и + `services/control-plane/src/db.ts` при наличии тестов на них. +4. **Разделить обнаружение и отчёт.** Запись отчёта не должна влиять на результат проверки: + писать во временный каталог либо добавить путь отчёта в исключения правила о + неприкосновенности артефактов измеримости. +5. **Согласовать словарь доказательств** между `docs/capabilities.json` и проверкой: + допустимые виды перечислены в одном месте, неизвестный вид — ошибка реестра с указанием, + какие виды допустимы. + +## Критерий приёмки + +Прогон `python scripts/drift_check.py` на текущем дереве: + +- находит `packages/contracts/src/reasoning.ts`, `services/nats/src/events.py`, + `services/auth/src/totp.py`, `services/control-plane/src/db.ts` — все четыре; +- не находит ничего из перечисленного выше списка ложных срабатываний; +- два запуска подряд дают одинаковый результат; +- сообщений `unknown evidence` нет. + +Добавить модульные тесты самой проверки: файл, достижимый от точки входа, не помечается; +файл, достижимый только из теста, помечается; файлы в исключённых каталогах не +рассматриваются. + +Полный вывод обоих прогонов приложить к отчёту. + +## Границы + +`scripts/drift_check.py`, его конфигурация, `docs/capabilities.json` в части словаря +доказательств, тесты проверки. Найденные недостижимые модули **не чинить** — по каждому +заводится отдельное решение: подключить или удалить. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b5-wire-measurability-ci.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b5-wire-measurability-ci.md new file mode 100644 index 0000000..835f680 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/b5-wire-measurability-ci.md @@ -0,0 +1,93 @@ +Правила работы — `AGENTS.md` в корне репозитория. + +Репозиторий: `https://github.com/ochenstarik-ui/kagent`, база — `main` +Ветка: новая от свежего `main`, `wt/b5-measurability-ci` +Выполняется **после** задачи `b4-drift-check-quality.md`. + +## Предусловие + +Этапы 0.9.0 и 0.9.1 влиты в `main`, сборка зелёная. Скрипты `drift_check.py`, +`roadmap_status.py` и `eval_suite.py` лежат в `main`, но ни один из них не вызывается из +непрерывной интеграции. То есть вычисляемый статус пока остаётся декларацией, а сами +скрипты — недостижимым кодом, ровно тем дефектом, который они созданы обнаруживать. + +**Начинать только после того, как задача b4 принята.** До неё `drift_check.py` даёт 21 +находку при одной настоящей и пропускает три реальных мёртвых модуля. Подключение такой +проверки как блокирующей остановит любой пуш по ложным поводам и пропустит настоящие. + +Если b4 не выполнена — останови работу и сообщи. Ослаблять проверку, чтобы подключить её +раньше срока, запрещено. + +## 1. Подключить к непрерывной интеграции + +В `.github/workflows/ci.yml`: + +- шаг `python scripts/drift_check.py` в существующий job `python`. Сборка падает при + обнаружении расхождения. Набор проверок — из спецификации, раздел 41.5: заявленная + возможность без проходящего доказательства; модуль в дереве, недостижимый ни из одной + точки входа; задокументированный endpoint, отсутствующий в таблице маршрутов; + задокументированная переменная окружения, которая нигде не читается; пользовательское + изменение без записи в `CHANGELOG.md`; архитектурное изменение без ADR; +- отдельный job `measurability`: выполняет `roadmap_status.py`, публикует полученный + `ROADMAP.md` как артефакт сборки и падает, если сгенерированный файл отличается от + закоммиченного. Это и есть механизм, запрещающий ручную правку статусов; +- `eval_suite.py` запускать в режиме, не требующем поставщика моделей. Пока набор состоит + из черновых случаев, job проверяет только разбор контрактов и целостность набора, а не + прохождение случаев. + +## 2. Первый прогон будет красным + +Ожидаемо и правильно. `drift_check.py` после b4 обязан находить четыре модуля, не +подключённых ни к одной точке входа: + +``` +services/nats/src/events.py +services/auth/src/totp.py +services/control-plane/src/db.ts +packages/contracts/src/reasoning.ts +``` + +Если к моменту выполнения задача c1 уже принята, `db.ts` из списка уйдёт — он будет +подключён к маршрутам. Остальные три останутся. + +**Не чинить эти модули здесь и не ослаблять проверку ради зелёного.** Правильное действие: +убедиться, что проверка их находит, зафиксировать список в отчёте, завести отдельную задачу +на решение по каждому — подключить или удалить. + +Чтобы ветку можно было влить, добавь файл известных расхождений `docs/known-drift.json`. +Запись содержит путь, причину, дату и задачу, в которой расхождение снимается. Запись без +задачи или с истёкшим сроком роняет сборку. Список может только сокращаться — добавление +записи в него требует отдельного обоснования в отчёте. + +## 3. Проверить, что механизм работает + +Недостаточно, чтобы job был зелёным. Нужно показать, что он ловит то, ради чего создан: + +- вручную изменить статус в `ROADMAP.md`, показать красный прогон, откатить; +- добавить в дерево модуль, не подключённый ни к одной точке входа, показать, что + `drift_check.py` его находит, удалить; +- внести пользовательское изменение без записи в `CHANGELOG.md`, показать, что проверка + это ловит, откатить. + +Все три демонстрации привести в отчёте со ссылками на прогоны. + +## Чего не делать + +- наполнение случаев оценки настоящими снимками репозиториев; +- метрики автономности и гейт релиза по ним; +- исправление найденных расхождений. + +## Критерий приёмки + +- `drift_check.py` и `roadmap_status.py` вызываются из CI; +- расхождение сгенерированного и закоммиченного `ROADMAP.md` роняет сборку — показано + прогоном; +- три демонстрации из пункта 3 выполнены; +- прогон зелёный при списке известных расхождений, содержащем только зафиксированные + модули, у каждого — причина и задача; +- ссылки на прогоны приложены. + +## Границы + +`.github/workflows/ci.yml`, `scripts/*`, `docs/capabilities.json`, `docs/known-drift.json`, +`ROADMAP.md`. Ничего в сервисах не трогать. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/c3-export-reasoning-contract.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/c3-export-reasoning-contract.md new file mode 100644 index 0000000..dc8f433 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/c3-export-reasoning-contract.md @@ -0,0 +1,76 @@ +Правила работы — `AGENTS.md` в корне репозитория. + +Репозиторий: `https://github.com/ochenstarik-ui/kagent`, база — свежий `main` +Ветка: новая от `origin/main`, `wt/c3-reasoning-contract` +Файлы: `packages/contracts/src/index.ts`, новый тест, `docs/known-drift.json` + +**Зависимостей нет.** Задача не пересекается с c1, c4 и c5 и может выполняться параллельно. + +## Проблема + +`packages/contracts/src/reasoning.ts` — типы контракта Reasoning Engine: capability, +класс приватности, режим исполнения, категория задачи, запрос и решение о маршрутизации. +Файл не экспортируется из `index.ts` и не импортируется ниоткуда, поэтому попал в +`docs/known-drift.json` как недостижимый. + +При этом Python-сервис `services/reasoning-engine` объявляет те же понятия заново в +`src/engine.py` и `src/server.py`. Два независимых определения одного контракта — то, что +ADR-0002 прямо запрещает. + +## Что сделать + +### 1. Экспортировать контракт + +Добавить `export * from "./reasoning.js";` в `packages/contracts/src/index.ts`. + +Это аддитивное расширение публичной поверхности пакета: существующие импорты не ломаются. +По правилам репозитория такое изменение допускается без поднятия мажорной версии, но должно +быть явно описано — добавь строку в `CHANGELOG.md` и отметь в `AGENT_CHANGELOG.md`, что +контракт Reasoning Engine стал частью публичной поверхности `@kagent/contracts`. + +### 2. Тест соответствия контракта и сервиса + +Просто экспортировать файл недостаточно: он станет достижимым, но по-прежнему ничем не +связан с реальным сервисом. Добавь проверку, что TypeScript-контракт и Python-реализация не +разошлись. + +Минимальный вариант: тест, который читает список полей `DecideRequest` и допустимых значений +`Capability`, `PrivacyClass`, `ExecutionMode`, `TaskCategory` из +`services/reasoning-engine/src/server.py` и `src/engine.py`, и сверяет с типами из +`reasoning.ts`. Расхождение — падение теста с указанием, какое значение есть только на одной +стороне. + +Разбор Python допустимо делать по объявлениям enum: они записаны как простые классы со +строковыми константами. Хрупкий разбор с регулярными выражениями по всему файлу не нужен — +достаточно секции enum. + +Если окажется, что стороны уже разошлись, **не подгоняй ни одну из них молча**: зафиксируй +расхождение в отчёте, приведи в соответствие ту сторону, которая противоречит ТЗ, и объясни +выбор. + +### 3. Снять запись из known-drift + +После того как `python scripts/drift_check.py` перестанет находить `reasoning.ts`, удалить +соответствующую запись из `docs/known-drift.json`. Список должен только сокращаться. + +## Критерий приёмки + +```bash +pnpm --filter @kagent/contracts typecheck +pnpm --filter @kagent/contracts test +pnpm typecheck +pnpm build +python scripts/drift_check.py +``` + +- `drift_check.py` больше не сообщает про `packages/contracts/src/reasoning.ts`; +- в `docs/known-drift.json` осталось три записи; +- тест соответствия проходит и падает, если в один из enum добавить лишнее значение — + проверь это вручную и приведи вывод в отчёте; +- ссылка на зелёный прогон приложена. + +## Границы + +`packages/contracts`, новый тест, `docs/known-drift.json`, `CHANGELOG.md`, +`AGENT_CHANGELOG.md`. Python-сервис не переписывать, кроме случая доказанного расхождения с +ТЗ. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/c5-nats-events.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/c5-nats-events.md new file mode 100644 index 0000000..bcd5a15 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/c5-nats-events.md @@ -0,0 +1,95 @@ +Правила работы — `AGENTS.md` в корне репозитория. + +Репозиторий: `https://github.com/ochenstarik-ui/kagent`, база — свежий `main` +Ветка: новая от `origin/main`, `wt/c5-nats-events` + +**Зависимостей нет.** Задача трогает Python-сервисы и конфигурацию, с c1 и c4 по файлам не +пересекается и может идти параллельно. + +## Проблема + +`services/nats/src/events.py` — клиент JetStream: подключение, публикация доменного +события, подписка durable-консьюмером, запрос-ответ. Модуль не импортируется ни одним +сервисом и попал в `docs/known-drift.json`. + +Кроме того, он не заработал бы и при подключении: `subscribe()` вызывает `pull_subscribe` с +именем потока, который нигде не создаётся. Вызова `add_stream` в модуле нет. Первая же +подписка упадёт на отсутствующем потоке. + +Каталог `services/nats` при этом не является сервисом: в нём нет ни `requirements.txt`, ни +`Dockerfile`, ни записи в `docker-compose.yml`. Это библиотека, лежащая в каталоге сервисов. + +## Что сделать + +### 1. Починить клиент + +- создавать поток идемпотентно перед публикацией и подпиской: если поток отсутствует — + создать с предметами по префиксу, если существует — использовать существующий; +- имя потока и набор предметов вычислять по одному правилу, а не двумя разными местами в + коде; +- подтверждение и отрицательное подтверждение сообщения уже есть — сохранить; +- при недоступности брокера соединение повторяется с ограничением, а не бесконечно. + +### 2. Переместить как библиотеку + +`services/nats` — не сервис. Перенести модуль туда, где он является общей библиотекой +Python-сервисов, например `packages/py-events` либо `services/_shared`, и подключить как +зависимость к использующим сервисам. Выбранный вариант обосновать одной строкой в отчёте: +структура каталогов описана в ТЗ, раздел 7, и не должна расходиться с фактом. + +### 3. Подключить к одному сервису + +Достаточно одного настоящего потребителя, чтобы возможность считалась подключённой. +Выбрать `services/pipeline`: он уже выполняет шаги и знает об их результате. + +Публиковать доменные события жизненного цикла шага с именами из ТЗ, раздел 10: +`task.started`, `agent.started`, `agent.completed`, `artifact.created`, `task.failed`. +Событие содержит идентификатор, тип, версию схемы, время, идентификаторы проекта и задачи, +корреляционный идентификатор — как требует ADR-0002. + +- адрес брокера из `NATS_URL`, значение по умолчанию и запись в `.env.example`; +- `nats-py` добавить в `requirements.txt` сервиса; версия уже используется в + `services/orchestrator`, взять ту же; +- в `docker-compose.yml` добавить зависимость `pipeline` от `nats` по состоянию + работоспособности; +- **недоступность брокера не должна ронять пайплайн.** Публикация — побочный эффект, а не + условие выполнения шага. При недоступности брокера событие теряется с записью в лог, шаг + продолжается. Это осознанный выбор на текущем этапе: гарантированная доставка требует + outbox из ADR-0010, которого ещё нет. Отметить это в отчёте. + +### 4. Доказательство + +Модульные тесты на заглушке брокера: событие сериализуется с обязательными полями, имя +потока вычисляется одинаково для публикации и подписки, недоступность брокера не прерывает +работу. + +Интеграционный тест с настоящим брокером в непрерывной интеграции: сервисный контейнер +`nats:2.11-alpine` с включённым JetStream, публикация и получение события подписчиком, +повторное создание потока не ломает работу. + +Добавить возможность в `docs/capabilities.json` со ссылкой на имя нового job как на +доказательство и снять запись из `docs/known-drift.json`. + +## Чего не делать + +- публикация событий из Control Plane на TypeScript — отдельная задача, там понадобится + своя реализация клиента; +- outbox и гарантированная доставка — ADR-0010, отдельный этап; +- подключение оркестратора: он вообще отсутствует в `docker-compose.yml`, это отдельная + проблема. + +## Критерий приёмки + +```bash +ruff check services scripts +python -m pytest tests/unit -q +python scripts/drift_check.py +``` + +- модуль импортируется настоящим сервисом, а не только тестом; +- `drift_check.py` не сообщает про модуль событий; в `known-drift.json` осталось две записи + либо одна, если c3 уже принята; +- job с брокером в CI зелёный, интеграционный тест публикует и получает событие; +- `roadmap_status.py` показывает возможность событийного потока подтверждённой + доказательством — вывод до и после в отчёте; +- ссылка на зелёный прогон приложена. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/hermes-work-protocol-2.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/hermes-work-protocol-2.md new file mode 100644 index 0000000..a485717 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/hermes-work-protocol-2.md @@ -0,0 +1,95 @@ +# KAgent — протокол работы для воркера Hermes + +Этот текст вставляется в начало каждого задания по KAgent либо читается воркером как +часть карточки. Он описывает, как работать в этом репозитории. + +## Репозиторий и ветки + +- рабочая копия: `C:\Users\Ochenstarik\kagent`, проект Hermes `kagent`; +- удалённый: `https://github.com/ochenstarik-ui/kagent`, база — `main`; +- каждая задача работает в своём worktree на своей ветке, ветка указана в карточке; +- прямой push в `main` запрещён. Результат — ветка и pull request; +- перед началом: `git fetch origin` и rebase ветки на `origin/main`. + +## Инструменты на машине + +Доступны и работают: `node` 24, `pnpm`, `corepack`, `cargo`, `rustc`, `rustup`, +`python`, `ruff`, `git`. + +**Docker в PATH Windows отсутствует** — он живёт внутри WSL и засыпает вместе с ней. +Ничего, что требует `docker compose`, в задачи этого этапа не входит. Если задача упирается +в Docker — останавливайся и сообщай, а не изобретай обход. + +Python в PATH — 3.11 из venv Hermes, тогда как сервисы нацелены на 3.12. Для линта и +модульных тестов это неважно, для чего-то другого — уточняй. + +## Размер задачи + +У воркера ограниченный бюджет итераций. Задача в этом репозитории считается правильно +нарезанной, если она: + +- трогает один-два файла; +- проверяется одной командой; +- завершается за один прогон без ожидания внешних событий. + +Если по ходу выясняется, что задача больше — **не растягивай прогон**. Сделай ту часть, +которая помещается, зафиксируй результат, опиши остаток комментарием к карточке и предложи +отдельную карточку. Незаконченная работа, честно описанная, полезнее исчерпанного бюджета. + +## Что запрещено + +- **менять существующие тесты**, чтобы сборка стала зелёной. Мешает тест — объясни почему и + остановись. Причина — `docs/adr/0005-test-oracle-integrity.md`; +- **отмечать пункты roadmap выполненными.** Статусы будут вычисляться из артефактов CI, + см. `docs/adr/0016-computed-stage-status.md`. Ровно из-за ручных галочек этапы 0.2–0.8 + отмечены завершёнными при неработающем коде; +- **выходить за рамки карточки.** Заметил соседний дефект — комментарий к карточке или + новая карточка, но не правка в этой ветке; +- **добавлять зависимость без проверки лицензии** и без упоминания в отчёте; +- **копировать исходный код** из Hermes, n8n, Prime Agent и других агентских платформ. + Архитектуру заимствовать можно, файлы — нет; +- помещать секреты в файлы под контролем версий; +- `git push --force`, переписывание истории, `--no-verify`. + +## Порядок источников истины + +1. `docs/KAGENT_FULL_PRODUCT_SPEC.md` +2. `docs/THREAT_MODEL.md` +3. `docs/adr/` +4. контракты в `packages/contracts/` +5. текст карточки +6. существующий код + +Код последний осознанно: он местами противоречит ТЗ, и это известно. + +Разделы ТЗ 35–51 и ADR-0004…0020 находятся на ветке +`docs/adr-0004-0016-trust-verification-economics` (PR #2), в `main` их нет. + +## Проверка результата + +Запускай ровно то, что указано в карточке как критерий приёмки, и приводи вывод команды в +отчёте. Формулировки «должно работать» и «выглядит корректно» результатом не считаются. + +Полезные команды: + +```bash +cargo fmt --manifest-path services/gateway/Cargo.toml --check +cargo clippy --manifest-path services/gateway/Cargo.toml --all-targets -- -D warnings +cargo test --manifest-path services/gateway/Cargo.toml +pnpm --filter @kagent/control-plane typecheck +pnpm --filter @kagent/control-plane test +ruff check services scripts +python scripts/validate_repository.py +``` + +## Отчёт + +Комментарием к карточке, коротко: + +1. что изменено, файлами; +2. вывод проверочных команд; +3. что не сделано и почему; +4. что замечено рядом и стоит отдельной карточки. + +Коммит: первая строка до 72 символов, повелительное наклонение, без эмодзи, с указанием +идентификатора карточки в теле. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/hermes-work-protocol.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/hermes-work-protocol.md new file mode 100644 index 0000000..a485717 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/hermes-work-protocol.md @@ -0,0 +1,95 @@ +# KAgent — протокол работы для воркера Hermes + +Этот текст вставляется в начало каждого задания по KAgent либо читается воркером как +часть карточки. Он описывает, как работать в этом репозитории. + +## Репозиторий и ветки + +- рабочая копия: `C:\Users\Ochenstarik\kagent`, проект Hermes `kagent`; +- удалённый: `https://github.com/ochenstarik-ui/kagent`, база — `main`; +- каждая задача работает в своём worktree на своей ветке, ветка указана в карточке; +- прямой push в `main` запрещён. Результат — ветка и pull request; +- перед началом: `git fetch origin` и rebase ветки на `origin/main`. + +## Инструменты на машине + +Доступны и работают: `node` 24, `pnpm`, `corepack`, `cargo`, `rustc`, `rustup`, +`python`, `ruff`, `git`. + +**Docker в PATH Windows отсутствует** — он живёт внутри WSL и засыпает вместе с ней. +Ничего, что требует `docker compose`, в задачи этого этапа не входит. Если задача упирается +в Docker — останавливайся и сообщай, а не изобретай обход. + +Python в PATH — 3.11 из venv Hermes, тогда как сервисы нацелены на 3.12. Для линта и +модульных тестов это неважно, для чего-то другого — уточняй. + +## Размер задачи + +У воркера ограниченный бюджет итераций. Задача в этом репозитории считается правильно +нарезанной, если она: + +- трогает один-два файла; +- проверяется одной командой; +- завершается за один прогон без ожидания внешних событий. + +Если по ходу выясняется, что задача больше — **не растягивай прогон**. Сделай ту часть, +которая помещается, зафиксируй результат, опиши остаток комментарием к карточке и предложи +отдельную карточку. Незаконченная работа, честно описанная, полезнее исчерпанного бюджета. + +## Что запрещено + +- **менять существующие тесты**, чтобы сборка стала зелёной. Мешает тест — объясни почему и + остановись. Причина — `docs/adr/0005-test-oracle-integrity.md`; +- **отмечать пункты roadmap выполненными.** Статусы будут вычисляться из артефактов CI, + см. `docs/adr/0016-computed-stage-status.md`. Ровно из-за ручных галочек этапы 0.2–0.8 + отмечены завершёнными при неработающем коде; +- **выходить за рамки карточки.** Заметил соседний дефект — комментарий к карточке или + новая карточка, но не правка в этой ветке; +- **добавлять зависимость без проверки лицензии** и без упоминания в отчёте; +- **копировать исходный код** из Hermes, n8n, Prime Agent и других агентских платформ. + Архитектуру заимствовать можно, файлы — нет; +- помещать секреты в файлы под контролем версий; +- `git push --force`, переписывание истории, `--no-verify`. + +## Порядок источников истины + +1. `docs/KAGENT_FULL_PRODUCT_SPEC.md` +2. `docs/THREAT_MODEL.md` +3. `docs/adr/` +4. контракты в `packages/contracts/` +5. текст карточки +6. существующий код + +Код последний осознанно: он местами противоречит ТЗ, и это известно. + +Разделы ТЗ 35–51 и ADR-0004…0020 находятся на ветке +`docs/adr-0004-0016-trust-verification-economics` (PR #2), в `main` их нет. + +## Проверка результата + +Запускай ровно то, что указано в карточке как критерий приёмки, и приводи вывод команды в +отчёте. Формулировки «должно работать» и «выглядит корректно» результатом не считаются. + +Полезные команды: + +```bash +cargo fmt --manifest-path services/gateway/Cargo.toml --check +cargo clippy --manifest-path services/gateway/Cargo.toml --all-targets -- -D warnings +cargo test --manifest-path services/gateway/Cargo.toml +pnpm --filter @kagent/control-plane typecheck +pnpm --filter @kagent/control-plane test +ruff check services scripts +python scripts/validate_repository.py +``` + +## Отчёт + +Комментарием к карточке, коротко: + +1. что изменено, файлами; +2. вывод проверочных команд; +3. что не сделано и почему; +4. что замечено рядом и стоит отдельной карточки. + +Коммит: первая строка до 72 символов, повелительное наклонение, без эмодзи, с указанием +идентификатора карточки в теле. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-codex-plan-2026-08-04.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-codex-plan-2026-08-04.md new file mode 100644 index 0000000..7191db9 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-codex-plan-2026-08-04.md @@ -0,0 +1,283 @@ +# План доделывания Server Monitor Manager + +Для исполнителя (Codex). Составлен 2026-08-04 против `main` @ `b11c277` плюс незакоммиченная ветка `hermes/task3-b3-fact-reconciliation`. + +Нормативные документы в репозитории после коммита `4de849e`: [`docs/product-horizons.md`](../server-monitor-manager/docs/product-horizons.md), [`docs/approval-policies.md`](../server-monitor-manager/docs/approval-policies.md), [`docs/integration-kagent.md`](../server-monitor-manager/docs/integration-kagent.md), обновлённые `docs/roadmap.md` и `docs/security-model.md`. + +--- + +## 0. Правила работы + +Проверены на четырёх блоках, менять не нужно. + +1. **Один PR — одна тема.** Смешанные PR не проходят review. +2. **Независимому review передаётся полный текст задачи**, а не только диф. Три из четырёх блоков дали находки класса «пропущенное требование», которые при diff-only ревью не ищутся вовсе. +3. **`SHA256SUMS` считается последним действием**, после всех правок отчётов, и включает все файлы пакета. +4. **Статус после merge — `merged / verified`**, а не «выполнено», если хотя бы один критерий сформулирован через фактическое поведение и не измерялся на реальной топологии. +5. **Гейты горизонтов обязательны.** Задача следующего горизонта не начинается, пока не закрыт предыдущий, даже если она кажется мелкой. +6. Формат пакета сдачи: `REPORT.md`, `TEST_EVIDENCE.md`, патч и/или ZIP, `CI_CHECKS.txt`, `INDEPENDENT_REVIEW.md`, `SHA256SUMS`. + +Размеры: **S** — до дня, **M** — 2–4 дня, **L** — неделя и больше. + +--- + +## Горизонт 0 — закрыть начатое + +Ничто из горизонтов 1–3 не начинается до полного закрытия этого раздела. + +### T0.1 — завершить B-3R · M · в работе + +Ветка `hermes/task3-b3-fact-reconciliation`. Контракт: `B3R_SPEC.md`, уже принятый исполнителем. + +Осталось по состоянию на 04.08: пакетная финальная верификация (`1 + k` вызовов `link-list` вместо двух), класс `Deferred` с инвариантом `Converged + Failed + Deferred == Examined`, R4 (source-generated DTO для orphan audit), R5 (Linux integration test на fact-first протокол), R6 (убрать fail-open default в `ILinkPolicyApplier`), R7 (форматирование вложенных scope). + +Дополнительно, найдено при проверке: любое не-`active` значение статуса в `nodes.tsv` сейчас даёт exit 80 и уходит в `Deferred` навсегда. Мусор в поле статуса должен давать 78 — это повреждённое состояние, а не ожидаемое. + +**Готово, когда:** PR создан, Linux CI зелёный впервые для этой ветки, merge выполнен. + +### T0.2 — физический acceptance · S · внешний блокер + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh +``` + +Требуются `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE`. Harness готов и содержит шаги firewall-restore без перезапуска Node и инъекции orphan-правила. + +Исполнитель закрыть не может — нужна выдача доступов. Висит четвёртый блок подряд и блокирует критерий B6, Этап 3 и Этап 5 roadmap. + +**Готово, когда:** прогон завершился `THREE_SERVER_ACCEPTANCE=PASS`, вывод приложен к пакету. + +### T0.3 — роль Monitor в bootstrap · M + +Сегодня SSH-мониторинг — функция, ради которой существует Desktop, — не имеет серверной части. В `deploy/ochenstarik-server-monitor-manager.sh` нет действия `install-monitor`, forced-command скрипт не поставляется, а парсер `SshMonitorService.QueryAsync` ожидает ключи (`PROTOCOL`, `CPU_COUNT`, `MEM_AVAILABLE_KB`, `DISK_INODES_TOTAL`…), которые в репозитории никто не производит. + +Объём: + +- `install-monitor PUBLIC_KEY` и `uninstall-monitor`; +- системный пользователь `ochenstarik-monitor`: nologin, без пароля, без sudo; +- `/usr/local/libexec/ochenstarik-smm-metrics`, root-owned `0755`, выдающий ровно снимок из `docs/installer-contract.md` §7 и read-only `mesh status`; +- `authorized_keys` с `command="…",restrict,no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding`; +- идемпотентность повторного запуска; +- контрактный тест формата снимка, общий для скрипта и парсера Desktop, чтобы они не разъезжались. + +**Готово, когда:** чистый сервер попадает под мониторинг одной командой, README-инструкция соответствует коду, тест формата в CI. + +### T0.4 — подписанная поставка · M + +Сейчас bootstrap сверяет `ARCHIVE.sha256`, лежащий рядом в том же релизе, а manifest не подписан и содержит только хэш самого bootstrap. Кто может опубликовать релиз — ставит произвольный root-код на весь парк через `update-agent`. + +Объём: + +- manifest v2: хэши всех артефактов, версии Control/Agent/helper/Desktop, минимальные совместимые версии, `helper_protocol`; +- подпись `cosign sign-blob` keyless либо `minisign`; публичный ключ или issuer **вшит константой** в bootstrap и Desktop, не скачивается вместе с релизом; +- `verify-manifest` как отдельное действие; `verify_archive` сверяет хэш с manifest, а не с соседним файлом; старый путь только под явным `SMM_ALLOW_UNSIGNED=1` с предупреждением; +- отказ `update-control`/`update-agent` при несовместимой паре версий; +- `PROGRAM_VERSION` подставляется из тега при упаковке вместо `0.2.0-dev`; +- негативные тесты в CI: изменённый байт архива, подменённый хэш в manifest, manifest без подписи — все три отвергаются. + +**Готово, когда:** установка и обновление возможны только из подписанного релиза, три негативных теста зелёные. + +### T0.5 — жизненный цикл сертификатов · S + +`CertificateAuthority.cs:55` выдаёт клиентские сертификаты на год, автопродления нет. Через год весь парк отваливается одновременно. + +- сократить срок до 30–90 дней; +- автопродление Agent за треть срока до истечения, через существующий mTLS-канал; +- событие `certificate.expiring` в поток событий; +- документированная процедура ротации Control CA и повторной регистрации парка. + +### T0.6 — гигиена репозитория и цепочки поставки · S + +- пиннинг всех GitHub Actions по commit SHA (сейчас плавающие `@v6`, `@v5`, `@v2`); +- `.github/dependabot.yml` для `github-actions` и `nuget`; +- сужение `permissions: contents: write` до job'а публикации; +- `SECURITY.md` — обязателен для инструмента безопасности; `CHANGELOG.md`, `CONTRIBUTING.md`, `CODEOWNERS`, шаблоны issue/PR; +- SBOM (`dotnet CycloneDX`) в артефакты релиза; +- удалить слитые ветки `agent/remove-lightweight-server-references`, `codex/ttl-backup-acceptance`. + +### T0.7 — базовая инженерная оснастка · S + +Делается один раз и удешевляет всё последующее. + +- `Directory.Build.props`: `Nullable`, `TreatWarningsAsErrors`, `EnableNETAnalyzers`, `AnalysisLevel latest-recommended`, детерминированная сборка; +- `Directory.Packages.props` (central package management) и `RestorePackagesWithLockFile` — сейчас сборки невоспроизводимы, что противоречит требованию закреплённой поставки; +- разделить тесты: `Core.Tests`, `Control.Tests`, `Agent.Tests`, `Helper.Tests`. Сейчас `LinuxMetricsTests`, `MetricBufferTests` и `ProvisioningHelperTests` лежат в проекте Control; +- тесты round-trip сериализации контрактов — при `PublishTrimmed=true` молчаливая потеря поля ничем не ловится. + +**Гейт Горизонта 0.** Чистый сервер ставится из подписанного релиза одной командой, регистрируется одноразовым кодом, попадает под мониторинг без ручной правки `authorized_keys`, и после перезагрузки Hub и Node фактическое состояние Links совпадает с желаемым — измерено связностью на реальной топологии. + +--- + +## Горизонт 1 — продукт для одного владельца + +### T1.1 — каркас provisioning-модулей · M · делать первым + +Сейчас вся логика мутации живёт в `TimezoneProvisioningExecutor` одним классом на 320+ строк, а `IsTimezoneOnly` жёстко фиксирует `VmSwappiness == 60`, пустые пакеты и `RebootPolicy = never`. Второй модуль скопирует backup/verify/rollback целиком. + +```csharp +IProvisioningModule + string ActionType { get; } + string ModuleHash { get; } + ValidationResult Validate(JsonElement parameters); + Plan BuildPlan(JsonElement parameters); // без мутаций + ExecutionResult Execute(Plan plan, Grant grant); // backup → mutate → verify → rollback + FactualState Observe(); +``` + +Перенести timezone на каркас без изменения поведения, покрыть тем же набором тестов. Добавление модуля после этого — один файл, одна схема, один тест. + +**Готово, когда:** timezone работает через каркас, существующие тесты зелёные без правок логики. + +### T1.2 — provisioning-модули по одному · L + +Порядок по возрастанию риска: `system.locale` → `system.packages` (versioned allowlist уже есть) → `system.swap` → `user.create` → `user.disable` → `ssh.key.add` → `ssh.key.remove`. + +Каждый модуль: versioned JSON schema, immutable plan, подтверждение по политике, factual verification, rollback, audit, тесты, прогон на VM-матрице. Новый пользователь по умолчанию без sudo. Приватные ключи на Hub не попадают. + +### T1.3 — политики подтверждения · M + +По `docs/approval-policies.md`. Девять режимов вместо бинарного подтверждения. Решение принимает Control, не клиент. Понижение режима для конкретного задания невозможно, изменение политики — аудируемое событие. + +Зависимость: T1.1, потому что режим выбирается по `ActionType`. + +### T1.4 — firewall и двухфазная миграция SSH · L · самая опасная задача проекта + +По `docs/provisioning-vpn-requirements.md` §10. Порядок шагов там уже выписан и его надо соблюсти буквально. + +Критическое требование: порт 22 невозможно закрыть до успешной второй SSH-сессии на новом порту. Отдельное подтверждение на закрытие старого порта. При любой ошибке — откат drop-in и правила firewall с сохранением активной сессии. + +Обязательный тест: новый порт не поднялся → 22 остался открыт и доступен. + +Делать только после T1.1–T1.3 и полного Горизонта 0. + +### T1.5 — alert engine · M + +Пороги, warning/critical, duration, cooldown, дедупликация, режим обслуживания, подтверждение, эскалация, история инцидентов, автозакрытие, тихие часы. Формат правила уже согласован: + +```yaml +name: Disk almost full +metric: disk.used_percent +condition: "> 90" +duration: 10m +severity: critical +channels: [telegram, email] +cooldown: 30m +``` + +### T1.6 — Telegram, только чтение · S + +`/status`, `/servers`, `/alerts`, `/links`, `/jobs`. Никаких мутаций, приватных ключей, управления CA и произвольных команд. Токен — секрет; до появления Vault хранить как остальные секреты Control, с маскированием в диагностике и аудите. + +### T1.7 — наблюдение Docker и systemd · M + +Сначала только чтение: контейнеры, образы, healthcheck, счётчики рестартов, отсутствующие лимиты, failed units, journald. Действия — отдельной задачей, только по allowlist, с подтверждением и аудитом, без произвольных аргументов. + +### T1.8 — Backup Manager · M + +Источники: каталоги, конфигурации, Docker volumes, Control DB и CA. Хранилища local и S3. Расписания, шифрование, retention, контрольные суммы, проверка архива, тестовое восстановление, оповещения об ошибке и об устаревшей копии. + +### T1.9 — технический долг Control и Desktop · M · фоном + +- `ControlStore.cs` 1576 строк: разделить на `ControlSchema`, `IdentityStore`, `MetricStore`, `LinkStore`, `AuditStore`, `IdempotencyStore`; +- `MainPage.xaml.cs` 1124 строки без MVVM и DI: вынести ViewModel, добавить unit-тесты Desktop; +- локализация: русские строки захардкожены в бизнес-логике (`SshMonitorService`, `ControlClientService`); ввести `.resw`, в исключениях — коды, текст на уровне UI; +- `HttpClient` создаётся на каждый запрос в `ControlClientService` и `AgentClient`: один `SocketsHttpHandler` с `PooledConnectionLifetime`; +- поток событий: durable log, `GET /events?since=`, keepalive раз в 15 с, лимит подписок, экспоненциальный backoff с джиттером на клиенте; +- rate limiting не только на enrollment: политики на группы `agents` и `control`, `MaxConcurrentConnections`; +- единый источник валидаторов: `NodeIdValidator` и прочие живут в `Program.cs` и продублированы в bash и helper — три реализации одних правил. + +**Гейт Горизонта 1.** Каждый мутирующий модуль имеет схему, immutable plan, подтверждение, factual verification, rollback и audit и прошёл физическую приёмку на VM-матрице. + +--- + +## Горизонт 2 — платформа + +### T2.1 — решение по публичному интерфейсу · S · до всякого кода + +Заполнить раздел «Публичный интерфейс» в `docs/security-model.md`: отдельный listener и порт, отношение веб-сессий к mTLS-идентичностям, перечень операций, недоступных веб-сессии в принципе, привязка сессии к устройству, CSRF, rate limiting, повторная аутентификация. + +Без этого решения Web UI не начинается. + +### T2.2 — Secret Vault · M + +Envelope encryption, версии, ротация, маскированный показ, scoped delivery, TTL, отзыв, redaction. Предусловие для Telegram-токена, ключей S3 и VPN-подписок. + +### T2.3 — Web UI и аутентификация · L + +Разделы: Dashboard, Servers, Metrics, Links, Provisioning, Alerts, Audit, Users, Automation identities, Backups, Settings. Аутентификация: пароль, TOTP, коды восстановления, WebAuthn, passkeys, доверенные устройства, сессии, RBAC, повторная аутентификация. + +Операции класса firewall / CA / удаление Node / экспорт секретов — только по mTLS-идентичности, не по веб-сессии. + +### T2.4 — решение по хранилищу логов · S · до кода + +Логи journald + Docker + nftables + SSH со всех узлов не лягут на Control SQLite и раздуют резервные копии. Выбрать: отдельное хранилище, выгрузка вовне, либо только tail на узле без центрального retention. + +### T2.5 — централизованные логи · L + +После T2.4. Поиск, фильтры, уровни, retention, redaction, таймлайн инцидента, экспорт диагностики, корреляция. + +### T2.6 — security posture · M + +Оценка, объяснения, план исправления, безопасное применение, история, исключения, принятые риски, отчёты. + +### T2.7 — multi-Hub, фаза 1 · M + +Резервные копии БД и CA, шифрованное хранилище, проверка восстановления, ручное переключение. Репликация, active/passive и кворум — вне плана. + +### T2.8 — один VPN-модуль · L + +Xray VLESS Reality, полный жизненный цикл: preflight, установка, обновление, отключение, verification, rollback timer, routing exclusions, kill switch с management exceptions, аварийное отключение без Control, reboot-тест, reconciliation, ротация секретов. + +Второй VPN-модуль не начинается, пока первый не прошёл физическую приёмку. Шесть наполовину сделанных VPN — это шесть способов потерять доступ к серверу. + +--- + +## Горизонт 3 — интеграция с KAgent + +По `docs/integration-kagent.md`. Строго в порядке: T3.1 → T3.4. + +### T3.1 — обнаружение и идентичность · M + +Unix-сокет `/run/server-monitor-manager/integration.sock`, `root:smm-integrations`, `0640`, каталог `0750`. Обязательно переиспользовать меры из `ProvisioningHelperServer`: `SO_PEERCRED` со сверкой uid, обработка вне цикла accept, ограничение параллелизма, таймаут соединения, буферное чтение, лимиты частоты. Роль `KAgentIntegration` с одноразовым token, сроком, областью Nodes и отзывом. + +### T3.2 — чтение · M + +Nodes, метрики, здоровье, события. Согласование версии протокола и фактически выданных возможностей. Невыдаваемые возможности отсутствуют как код, а не выключены настройкой. + +### T3.3 — планы и запросы · L + +`*.plan` и `*.request` порождают обычный typed provisioning job с immutable plan, режимом подтверждения, execution grant, factual verification и audit. Отдельного пути для AI нет. `*.request` возвращает идентификатор задания, а не результат. + +### T3.4 — жизненный цикл Worker · L · наивысший риск в проекте + +Инвариант недоверенного исполнителя из `docs/security-model.md` — главное требование, всё остальное вторично. Отдельный пользователь без sudo, контейнер с read-only rootfs, seccomp, AppArmor, сброшенными capabilities; нет доступа к сокету helper, к `agent.pfx`, `control-ca.crt`, `nodes.tsv`, каталогу rollback; нет сетевого доступа к Control API; порт наружу не публикуется. + +Задачные Links: обязательный TTL, запрет destination = Hub или другой Worker, снятие по завершении, отказу, таймауту, offline, истечению аренды и аварийной остановке, с фактической проверкой снятия. + +Аварийные средства: отзыв сертификата, остановка всех Worker, отключение задачных Links, блокировка новых запросов, режим только чтения, карантин, отключение сети, сохранение журналов. + +--- + +## Что не делать + +- Не начинать VPN-модули до закрытия Горизонта 1. Kill switch при незакрытом расхождении desired/factual — гарантированная потеря доступа к серверу. +- Не добавлять второй provisioning-модуль копированием timezone-исполнителя. Сначала T1.1. +- Не проектировать API KAgent против сущностей, которых нет: `containers`, `services`, `logs`, `backups` появляются вместе с самими подсистемами. +- Не начинать macOS/Linux Desktop и мобильные клиенты до стабилизации контрактов `Core` — они меняются почти каждым PR. +- Не делать репликацию и кворум multi-Hub. +- Не расширять расширенный мониторинг (SMART, RAID, GPU, UPS) — каждый пункт требует привилегированного сборщика и отдельной модели угроз. + +--- + +## Критический путь + +``` +T0.1 ─┐ +T0.3 ─┼─► T0.2 (внешний блокер) ─► гейт Г0 ─► T1.1 ─► T1.2 ─► T1.3 ─► T1.4 ─► гейт Г1 ─► Горизонт 2 ─► Горизонт 3 +T0.4 ─┤ +T0.5 ─┘ +``` + +T0.6 и T0.7 идут параллельно и ничего не блокируют. T1.5–T1.9 параллельны T1.2–T1.4. + +Единственное, что нельзя обойти работой исполнителя, — **T0.2**. Он дешевле любой другой задачи в этом плане и блокирует всё. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-board-2026-08-06-2.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-board-2026-08-06-2.md new file mode 100644 index 0000000..1178caa --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-board-2026-08-06-2.md @@ -0,0 +1,56 @@ +# Server Monitor Manager — доска заданий Hermes + +Тексты заданий для доски Hermes (проект `server-monitor-manager`). +Папка вне репозитория: задания не попадают в git и не засоряют PR. + +Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +Локальный клон: `C:\Users\Ochenstarik\projects\server-monitor-manager` +Рабочая копия незавершённого блока: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` + +Устроено так же, как `C:\Users\Ochenstarik\kagent-tasks`, но задания хранятся здесь, в `server-monitor-manager-deliverables`. + +## Соглашения + +- один файл — одно задание, имя `smm-hermes-task-<слаг>-<дата>.md`; +- тело файла самодостаточно: воркер стартует без истории чата, поэтому внутри всегда есть репозиторий, ветка, состояние, «зачем», список работ и критерий приёмки; +- ссылки на нормативные документы даются как «`docs/<файл>.md`, раздел N», без пересказа; +- независимому review передаётся **полный текст задания**, а не только диф. На четырёх блоках подряд diff-only review пропускал целые невыполненные требования. + +## Как поставить задание + +```bash +hermes kanban create "<заголовок>" --body "$(cat <файл>.md)" --project server-monitor-manager --assignee worker-code --workspace worktree --branch hermes/<слаг> --priority --idempotency-key <уникальный-ключ> --created-by claude +``` + +Зависимость: `--parent ` при создании либо `hermes kanban link ` позднее. + +## Текущая очередь + +| Файл | Задание | Приоритет | Зависимость | +|---|---|---|---| +| `smm-hermes-task-b3r-2026-08-06.md` | Завершить B-3R: пакетная верификация факта, класс `Deferred`, Linux-прогон | 100 | — | +| `smm-hermes-task-cert-lifecycle-2026-08-06.md` | Жизненный цикл сертификатов: срок, автопродление, ротация CA | 90 | нет, файлы свободны — можно параллельно | + +Эти два задания не пересекаются по файлам и идут в разных worktree одновременно. + +## Очередь после B-3R + +Тексты будут написаны, когда B-3R смержен — раньше они протухнут. + +1. **Роль Monitor в bootstrap.** `install-monitor`, forced-command скрипт, контрактный тест формата снимка. Сейчас SSH-мониторинг не имеет серверной части вообще. +2. **Подписанная поставка.** Manifest v2, подпись cosign/minisign, публичный ключ вшит в bootstrap, отказ при несовместимых версиях, негативные тесты. +3. **Инженерная оснастка.** `Directory.Build.props`, central package management, lock-файлы, разделение тест-проектов. +4. **Гигиена репозитория.** Пиннинг Actions по SHA, dependabot, `SECURITY.md`, CHANGELOG. + +Полный план и обоснование очерёдности: `smm-codex-plan-2026-08-04.md` в этой же папке; разбивка по горизонтам — `docs/product-horizons.md` в репозитории. + +## Гейт + +Горизонт 1 (provisioning-модули, firewall, alerts, Telegram, Docker, backups) не начинается, пока не закрыт Горизонт 0 целиком, включая физический acceptance на реальной тройке серверов. Последнее не может закрыть ни один исполнитель — нужны `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE`. + +## Статус + +```bash +hermes kanban list +hermes kanban diag +``` diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-board-2026-08-06.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-board-2026-08-06.md new file mode 100644 index 0000000..1178caa --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-board-2026-08-06.md @@ -0,0 +1,56 @@ +# Server Monitor Manager — доска заданий Hermes + +Тексты заданий для доски Hermes (проект `server-monitor-manager`). +Папка вне репозитория: задания не попадают в git и не засоряют PR. + +Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +Локальный клон: `C:\Users\Ochenstarik\projects\server-monitor-manager` +Рабочая копия незавершённого блока: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` + +Устроено так же, как `C:\Users\Ochenstarik\kagent-tasks`, но задания хранятся здесь, в `server-monitor-manager-deliverables`. + +## Соглашения + +- один файл — одно задание, имя `smm-hermes-task-<слаг>-<дата>.md`; +- тело файла самодостаточно: воркер стартует без истории чата, поэтому внутри всегда есть репозиторий, ветка, состояние, «зачем», список работ и критерий приёмки; +- ссылки на нормативные документы даются как «`docs/<файл>.md`, раздел N», без пересказа; +- независимому review передаётся **полный текст задания**, а не только диф. На четырёх блоках подряд diff-only review пропускал целые невыполненные требования. + +## Как поставить задание + +```bash +hermes kanban create "<заголовок>" --body "$(cat <файл>.md)" --project server-monitor-manager --assignee worker-code --workspace worktree --branch hermes/<слаг> --priority --idempotency-key <уникальный-ключ> --created-by claude +``` + +Зависимость: `--parent ` при создании либо `hermes kanban link ` позднее. + +## Текущая очередь + +| Файл | Задание | Приоритет | Зависимость | +|---|---|---|---| +| `smm-hermes-task-b3r-2026-08-06.md` | Завершить B-3R: пакетная верификация факта, класс `Deferred`, Linux-прогон | 100 | — | +| `smm-hermes-task-cert-lifecycle-2026-08-06.md` | Жизненный цикл сертификатов: срок, автопродление, ротация CA | 90 | нет, файлы свободны — можно параллельно | + +Эти два задания не пересекаются по файлам и идут в разных worktree одновременно. + +## Очередь после B-3R + +Тексты будут написаны, когда B-3R смержен — раньше они протухнут. + +1. **Роль Monitor в bootstrap.** `install-monitor`, forced-command скрипт, контрактный тест формата снимка. Сейчас SSH-мониторинг не имеет серверной части вообще. +2. **Подписанная поставка.** Manifest v2, подпись cosign/minisign, публичный ключ вшит в bootstrap, отказ при несовместимых версиях, негативные тесты. +3. **Инженерная оснастка.** `Directory.Build.props`, central package management, lock-файлы, разделение тест-проектов. +4. **Гигиена репозитория.** Пиннинг Actions по SHA, dependabot, `SECURITY.md`, CHANGELOG. + +Полный план и обоснование очерёдности: `smm-codex-plan-2026-08-04.md` в этой же папке; разбивка по горизонтам — `docs/product-horizons.md` в репозитории. + +## Гейт + +Горизонт 1 (provisioning-модули, firewall, alerts, Telegram, Docker, backups) не начинается, пока не закрыт Горизонт 0 целиком, включая физический acceptance на реальной тройке серверов. Последнее не может закрыть ни один исполнитель — нужны `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE`. + +## Статус + +```bash +hermes kanban list +hermes kanban diag +``` diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-b3r-2026-08-06-2.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-b3r-2026-08-06-2.md new file mode 100644 index 0000000..bc89bde --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-b3r-2026-08-06-2.md @@ -0,0 +1,122 @@ +# B-3R: завершить реконсиляцию от фактического состояния + +## Репозиторий и ветка + +- Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +- Рабочая копия: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` +- Ветка: `hermes/task3-b3-fact-reconciliation`, **изменения не закоммичены** — 24 файла, около +1276/−141 +- База: `b11c277ac7f79a18670932eca4622982d9ff48e0` +- Ветки на GitHub нет; коммит и push ещё не выполнялись + +Нормативные документы задания: `B3R_SPEC.md` и исходное ТЗ B-3 — оба в `C:\Users\Ochenstarik\Сюда\Panel control\Task3-B3-2026-08-04\`. Они остаются в силе целиком; ниже — только то, что осталось не сделано. + +## Зачем + +Проход реконсиляции стал fact-first: сначала один `link-list`, потом сверка с базой. Но верификация результата мутации осталась пер-линковой, а классификация результата неполна. Из-за этого два дефекта, оба на пути kill switch: + +- удаление правила может быть засчитано без доказательства, что правило исчезло; +- результат, не попавший ни в `Converged`, ни в `Failed`, позволяет фоновому сервису потребить marker внеочередной реконсиляции при неподтверждённом исходе. + +## Что уже закрыто — проверено по коду, переделывать не нужно + +- **R3 полностью.** `lookup_node_ip` читает четвёртое поле `nodes.tsv` и требует `active`; проверка статуса стоит раньше проверки IP, поэтому `reserved` + валидный адрес даёт exit 80, а `active` + битый адрес даёт 78. +- **R1 на уровне отдельной мутации.** Появился `VerifyExactFactualCountAsync`, считающий записи через `ListRulesAsync`, то есть через `link-list`, а не `link-status`. Условие `if (persisted)` вокруг верификации снято — DB-less orphan теперь тоже проверяется. Синтетическое присваивание `ActualState` выполняется после доказанного нуля записей, а не вместо доказательства. +- `list_rules` разбирает только managed-comment, проверяет арность, node-паттерны, протокол и диапазон порта, подделки отбрасывает в stderr, чужие правила не выводит. +- `disconnect_rule` больше не вызывает `lookup_node_ip` — удаление правила не зависит от `nodes.tsv`. Это верно, сохранить. + +## Работы + +### 1. Пакетная финальная верификация + +Сейчас `VerifyExactFactualCountAsync` вызывается на каждую мутацию: проход с `k` мутациями делает `1 + k` вызовов `link-list`. + +Требуется: один стартовый `link-list` и, при наличии мутаций, **ровно один финальный** `link-list`, по которому сверяются все затронутые ключи разом. Проход без расхождений — один привилегированный вызов, проход с мутациями — ровно два. + +Проверяется счётчиком вызовов фейкового applier и журналом вызовов в интеграционном тесте. + +### 2. Класс `Deferred` и инвариант классификации + +Ввести третий класс результата и инвариант: + +``` +Converged + Failed + Deferred == Examined +``` + +Инвариант проверять в коде — нарушение это `LogError` с идентификаторами политик — и отдельным тестом на смешанном наборе. + +Решение, которое нужно реализовать именно так: + +- `PendingActivation` — это `Deferred`, а не `Failed`. Node зарезервирован, `peer-add` не выполнен, состояние может держаться сутками и ошибкой не является. +- `Deferred` **не блокирует** потребление marker. Иначе один зарезервированный Node навсегда удержит marker и вернёт бесконечный полный проход каждые 30 секунд — ровно то, что закрывали в B-2 и B3-3. +- Marker блокирует только `Failed`, и на него уже действует ограничение в три попытки. +- `Deferred` обязан быть видимым: событие `link.pending-node-activation`, отдельная подпись в Desktop, отражение в журнале прохода. Ошибкой не называется. + +`LinkFullReconciliationResult` и `LinkReconciliationResult` дополнить полем `Deferred` и списком `DeferredPolicyIds` по образцу `FailedPolicyIds`. + +### 3. Source-generated сериализация orphan audit (R4) + +В `ControlStore.cs` запись audit для orphan-правила сериализуется анонимным типом через reflection, тогда как остальной Control последовательно использует source-generated `JsonTypeInfo`. + +Отказ произойдёт **после** мутации firewall и **после** публикации `link.orphan-removed`, дав противоречивую телеметрию: правило удалено, событие отправлено, проход помечен неуспешным. + +- ввести именованный DTO, добавить его в source-generated контекст Control, сериализовать через `Context.Default.`; +- зафиксировать порядок: запись audit до публикации финального события успеха; +- проверить на **опубликованном** `linux-x64 PublishTrimmed` артефакте, прогнав orphan-путь и сверив содержимое audit-записи. Приложить вывод к отчёту. + +### 4. Linux integration test на fact-first протокол (R5) + +`tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs` остался на протоколе `link-status`-first: fake helper не реализует `link-list`, ожидаемый журнал вызовов начинается с `link-status`. + +На Windows тест выходит по `OperatingSystem.IsLinux() == false`, поэтому локальные прогоны его не показывают. `linux-control-agent.yml` гоняет Control-тесты на Ubuntu, где пропуска не будет. + +- реализовать `link-list` в fake helper; +- переписать ожидаемый журнал на fact-first протокол; +- проверить: no-drift → ровно один `link-list`; отсутствующая таблица классифицируется прямо на `link-list` без промежуточной мутации; мутация сопровождается одной финальной верификацией; DB-less raw disconnect проходит верификацию; +- **прогнать Control suite на Linux.** Windows-прогон этот тест не выполняет и заявленные локальные результаты дефект не выявляют. + +### 5. Убрать fail-open default в интерфейсе (R6) + +`ILinkPolicyApplier.ListRulesAsync` имеет тело по умолчанию, возвращающее пустой список. Забытая реализация молча сообщает «firewall пуст» — худший возможный дефолт для источника истины о факте, и он уже позволил старым test doubles скомпилироваться без нового протокола. + +Сделать `ListRulesAsync` и raw `ApplyDisconnectAsync(LinkRule, …)` обязательными членами интерфейса, все test doubles обновить явно. + +### 6. Читаемость вложенных scope (R7) + +`LinkService.cs`, участки обработки persisted-кандидатов и factual-orphans: тела `try` визуально на уровне внешнего scope, порядок блокировок `sorted node locks → per-Link gate` восстанавливается только разбором отступов. Переформатировать либо вынести обработку одного tuple и одного orphan в приватные методы без дублирования логики сходимости. + +### 7. Мусор в поле статуса `nodes.tsv` + +Сейчас любое не-`active` значение даёт exit 80 и уходит в `Deferred` навсегда. Разграничить: известные значения (`reserved` и подобные) → 80; значение, не проходящее валидацию формата, → 78. Повреждённое состояние — это отказ, который должен всплыть, а не ожидаемое состояние, которое можно откладывать бесконечно. + +## Тесты, без которых задание не принимается + +1. DB-less orphan: helper сообщает успех удаления, но правило осталось → классифицируется как `Failed`, не как успех. +2. Persisted `Disabled`, узел отсутствует в `nodes.tsv` → удаление подтверждается через `link-list`, состояние `Disabled`, не `PendingActivation`. +3. Marker не потребляется при наличии `Failed`; потребляется, если остались только `Converged` и `Deferred`. +4. Инвариант `Converged + Failed + Deferred == Examined` на наборе из шести политик со всеми тремя исходами. +5. Проход с `k` мутациями выполняет ровно два вызова `link-list`. +6. Production-shape фикстура `nodes.tsv` из четырёх полей: `reserved` + валидный IP → 80; `active` + валидный IP → успех; `active` + невалидный IP → 78; мусор в статусе → 78. +7. Зарезервированный Node на десяти последовательных проходах: каждый раз `Deferred`, marker потребляется, число проходов не превышает расписание. + +## Критерий приёмки + +- все семь пунктов работ закрыты; +- семь тестов выше зелёные; +- Control suite прогнан **на Linux**, а не только на Windows; +- orphan audit проверен на опубликованном trimmed-артефакте; +- все критерии исходного ТЗ B-3 по-прежнему выполняются; +- PR создан, CI зелёный — впервые для этой ветки; +- независимый review получил полный текст этого задания, `B3R_SPEC.md` и исходное ТЗ B-3. + +## Границы + +- не трогать файлы вне области реконсиляции Links; изменения в Desktop ограничены отображением `Deferred`; +- не менять порядок блокировок и не вводить новых классов блокировок; +- не ослаблять fail-closed поведение: неизвестная ошибка `nft` остаётся отказом, а не «правил нет»; +- `TreatWarningsAsErrors` в этой задаче не включать. + +## Отчётность + +Отдельно перечислить: что запущено локально, что в CI, что не запускалось и почему. Физический acceptance (`SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh`) выполнить нельзя — не выданы topology inputs; contract- и mock-тесты за него не выдавать. + +Статус после merge — `merged / verified, physical acceptance pending`, а не «выполнено». diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-b3r-2026-08-06.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-b3r-2026-08-06.md new file mode 100644 index 0000000..bc89bde --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-b3r-2026-08-06.md @@ -0,0 +1,122 @@ +# B-3R: завершить реконсиляцию от фактического состояния + +## Репозиторий и ветка + +- Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +- Рабочая копия: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` +- Ветка: `hermes/task3-b3-fact-reconciliation`, **изменения не закоммичены** — 24 файла, около +1276/−141 +- База: `b11c277ac7f79a18670932eca4622982d9ff48e0` +- Ветки на GitHub нет; коммит и push ещё не выполнялись + +Нормативные документы задания: `B3R_SPEC.md` и исходное ТЗ B-3 — оба в `C:\Users\Ochenstarik\Сюда\Panel control\Task3-B3-2026-08-04\`. Они остаются в силе целиком; ниже — только то, что осталось не сделано. + +## Зачем + +Проход реконсиляции стал fact-first: сначала один `link-list`, потом сверка с базой. Но верификация результата мутации осталась пер-линковой, а классификация результата неполна. Из-за этого два дефекта, оба на пути kill switch: + +- удаление правила может быть засчитано без доказательства, что правило исчезло; +- результат, не попавший ни в `Converged`, ни в `Failed`, позволяет фоновому сервису потребить marker внеочередной реконсиляции при неподтверждённом исходе. + +## Что уже закрыто — проверено по коду, переделывать не нужно + +- **R3 полностью.** `lookup_node_ip` читает четвёртое поле `nodes.tsv` и требует `active`; проверка статуса стоит раньше проверки IP, поэтому `reserved` + валидный адрес даёт exit 80, а `active` + битый адрес даёт 78. +- **R1 на уровне отдельной мутации.** Появился `VerifyExactFactualCountAsync`, считающий записи через `ListRulesAsync`, то есть через `link-list`, а не `link-status`. Условие `if (persisted)` вокруг верификации снято — DB-less orphan теперь тоже проверяется. Синтетическое присваивание `ActualState` выполняется после доказанного нуля записей, а не вместо доказательства. +- `list_rules` разбирает только managed-comment, проверяет арность, node-паттерны, протокол и диапазон порта, подделки отбрасывает в stderr, чужие правила не выводит. +- `disconnect_rule` больше не вызывает `lookup_node_ip` — удаление правила не зависит от `nodes.tsv`. Это верно, сохранить. + +## Работы + +### 1. Пакетная финальная верификация + +Сейчас `VerifyExactFactualCountAsync` вызывается на каждую мутацию: проход с `k` мутациями делает `1 + k` вызовов `link-list`. + +Требуется: один стартовый `link-list` и, при наличии мутаций, **ровно один финальный** `link-list`, по которому сверяются все затронутые ключи разом. Проход без расхождений — один привилегированный вызов, проход с мутациями — ровно два. + +Проверяется счётчиком вызовов фейкового applier и журналом вызовов в интеграционном тесте. + +### 2. Класс `Deferred` и инвариант классификации + +Ввести третий класс результата и инвариант: + +``` +Converged + Failed + Deferred == Examined +``` + +Инвариант проверять в коде — нарушение это `LogError` с идентификаторами политик — и отдельным тестом на смешанном наборе. + +Решение, которое нужно реализовать именно так: + +- `PendingActivation` — это `Deferred`, а не `Failed`. Node зарезервирован, `peer-add` не выполнен, состояние может держаться сутками и ошибкой не является. +- `Deferred` **не блокирует** потребление marker. Иначе один зарезервированный Node навсегда удержит marker и вернёт бесконечный полный проход каждые 30 секунд — ровно то, что закрывали в B-2 и B3-3. +- Marker блокирует только `Failed`, и на него уже действует ограничение в три попытки. +- `Deferred` обязан быть видимым: событие `link.pending-node-activation`, отдельная подпись в Desktop, отражение в журнале прохода. Ошибкой не называется. + +`LinkFullReconciliationResult` и `LinkReconciliationResult` дополнить полем `Deferred` и списком `DeferredPolicyIds` по образцу `FailedPolicyIds`. + +### 3. Source-generated сериализация orphan audit (R4) + +В `ControlStore.cs` запись audit для orphan-правила сериализуется анонимным типом через reflection, тогда как остальной Control последовательно использует source-generated `JsonTypeInfo`. + +Отказ произойдёт **после** мутации firewall и **после** публикации `link.orphan-removed`, дав противоречивую телеметрию: правило удалено, событие отправлено, проход помечен неуспешным. + +- ввести именованный DTO, добавить его в source-generated контекст Control, сериализовать через `Context.Default.`; +- зафиксировать порядок: запись audit до публикации финального события успеха; +- проверить на **опубликованном** `linux-x64 PublishTrimmed` артефакте, прогнав orphan-путь и сверив содержимое audit-записи. Приложить вывод к отчёту. + +### 4. Linux integration test на fact-first протокол (R5) + +`tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs` остался на протоколе `link-status`-first: fake helper не реализует `link-list`, ожидаемый журнал вызовов начинается с `link-status`. + +На Windows тест выходит по `OperatingSystem.IsLinux() == false`, поэтому локальные прогоны его не показывают. `linux-control-agent.yml` гоняет Control-тесты на Ubuntu, где пропуска не будет. + +- реализовать `link-list` в fake helper; +- переписать ожидаемый журнал на fact-first протокол; +- проверить: no-drift → ровно один `link-list`; отсутствующая таблица классифицируется прямо на `link-list` без промежуточной мутации; мутация сопровождается одной финальной верификацией; DB-less raw disconnect проходит верификацию; +- **прогнать Control suite на Linux.** Windows-прогон этот тест не выполняет и заявленные локальные результаты дефект не выявляют. + +### 5. Убрать fail-open default в интерфейсе (R6) + +`ILinkPolicyApplier.ListRulesAsync` имеет тело по умолчанию, возвращающее пустой список. Забытая реализация молча сообщает «firewall пуст» — худший возможный дефолт для источника истины о факте, и он уже позволил старым test doubles скомпилироваться без нового протокола. + +Сделать `ListRulesAsync` и raw `ApplyDisconnectAsync(LinkRule, …)` обязательными членами интерфейса, все test doubles обновить явно. + +### 6. Читаемость вложенных scope (R7) + +`LinkService.cs`, участки обработки persisted-кандидатов и factual-orphans: тела `try` визуально на уровне внешнего scope, порядок блокировок `sorted node locks → per-Link gate` восстанавливается только разбором отступов. Переформатировать либо вынести обработку одного tuple и одного orphan в приватные методы без дублирования логики сходимости. + +### 7. Мусор в поле статуса `nodes.tsv` + +Сейчас любое не-`active` значение даёт exit 80 и уходит в `Deferred` навсегда. Разграничить: известные значения (`reserved` и подобные) → 80; значение, не проходящее валидацию формата, → 78. Повреждённое состояние — это отказ, который должен всплыть, а не ожидаемое состояние, которое можно откладывать бесконечно. + +## Тесты, без которых задание не принимается + +1. DB-less orphan: helper сообщает успех удаления, но правило осталось → классифицируется как `Failed`, не как успех. +2. Persisted `Disabled`, узел отсутствует в `nodes.tsv` → удаление подтверждается через `link-list`, состояние `Disabled`, не `PendingActivation`. +3. Marker не потребляется при наличии `Failed`; потребляется, если остались только `Converged` и `Deferred`. +4. Инвариант `Converged + Failed + Deferred == Examined` на наборе из шести политик со всеми тремя исходами. +5. Проход с `k` мутациями выполняет ровно два вызова `link-list`. +6. Production-shape фикстура `nodes.tsv` из четырёх полей: `reserved` + валидный IP → 80; `active` + валидный IP → успех; `active` + невалидный IP → 78; мусор в статусе → 78. +7. Зарезервированный Node на десяти последовательных проходах: каждый раз `Deferred`, marker потребляется, число проходов не превышает расписание. + +## Критерий приёмки + +- все семь пунктов работ закрыты; +- семь тестов выше зелёные; +- Control suite прогнан **на Linux**, а не только на Windows; +- orphan audit проверен на опубликованном trimmed-артефакте; +- все критерии исходного ТЗ B-3 по-прежнему выполняются; +- PR создан, CI зелёный — впервые для этой ветки; +- независимый review получил полный текст этого задания, `B3R_SPEC.md` и исходное ТЗ B-3. + +## Границы + +- не трогать файлы вне области реконсиляции Links; изменения в Desktop ограничены отображением `Deferred`; +- не менять порядок блокировок и не вводить новых классов блокировок; +- не ослаблять fail-closed поведение: неизвестная ошибка `nft` остаётся отказом, а не «правил нет»; +- `TreatWarningsAsErrors` в этой задаче не включать. + +## Отчётность + +Отдельно перечислить: что запущено локально, что в CI, что не запускалось и почему. Физический acceptance (`SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh`) выполнить нельзя — не выданы topology inputs; contract- и mock-тесты за него не выдавать. + +Статус после merge — `merged / verified, physical acceptance pending`, а не «выполнено». diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-b3r-deliver-2026-08-07.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-b3r-deliver-2026-08-07.md new file mode 100644 index 0000000..b5b02ef --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-b3r-deliver-2026-08-07.md @@ -0,0 +1,49 @@ +# B-3R: довести до PR и зелёного Linux CI + +## Состояние + +Рабочая копия `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3`, ветка `hermes/task3-b3-fact-reconciliation`, база `b11c277`. Изменения **не закоммичены**: 23 отслеживаемых файла, +1735/−145, плюс новый файл `src/ServerMonitorManager.Control/ControlJsonContext.cs`. + +Ветки на GitHub нет, PR нет, CI не запускался ни разу. + +## Что проверено как сделанное + +Сверял по коду рабочей копии, а не по отчёту: + +| Пункт | Состояние | +|---|---| +| R1, пакетная верификация | `FinalizeBatchAsync` и единственный `finalRules = await applier.ListRulesAsync(…)` — реализовано | +| R2, класс `Deferred` | присутствует, инвариант классификации с диагностикой в `LinkService.cs:836` | +| R4, source-generated audit | `LinkOrphanAuditDetails` + `ControlJsonContext.Default.LinkOrphanAuditDetails`, новый `ControlJsonContext.cs` | +| R5, integration test | `link-list` в fake helper, 10 вхождений | +| R6, fail-open default | `ListRulesAsync` — обычный член интерфейса, тела по умолчанию нет | +| Мусор в статусе `nodes.tsv` | `node_status_pattern`: невалидный формат → 78, валидный не-`active` → 80 | + +Содержательная часть закрыта. Осталась доставка. + +## Что доделать + +**1. Проверить бюджет привилегированных вызовов.** В `ConvergeAsync` остались вызовы `VerifyExactFactualCountAsync` на строках 487, 496, 505, 514 — помимо пакетной верификации через `FinalizeBatchAsync`. Убедиться, что проход без расхождений выполняет ровно один `link-list`, а проход с `k` мутациями — ровно два. Если пер-мутационные вызовы остались в пути полного прохода, бюджет нарушен и требование R1 не выполнено. Если они относятся к другим путям (`CreateAsync`, `DisableAsync`, TTL) — это допустимо, но должно быть явно сказано в отчёте. + +**2. Прогнать Control suite на Linux.** Это отдельное требование, а не формальность: integration-тест помечен `OperatingSystem.IsLinux()` и на Windows молча пропускается. Именно так дефект H2 и дожил до ревью в прошлый раз. + +**3. Прогнать orphan-путь на опубликованном `linux-x64 PublishTrimmed` артефакте** и приложить содержимое audit-записи. Reflection-сериализация заменена на source-generated, но проверка на trimmed-сборке — единственное доказательство, что путь исполняется. + +**4. Семь обязательных тестов** из задания `smm-hermes-task-b3r-2026-08-06.md`, раздел «Тесты, без которых задание не принимается». Проверить наличие каждого поимённо. + +**5. Коммит, push, PR.** Ветка `hermes/task3-b3-fact-reconciliation`. Дождаться завершения CI **до** того, как писать в описании PR о проверках. + +## Критерий приёмки + +- PR создан, CI зелёный — впервые для этой ветки; +- Control suite прогнан на Linux, результат приложен; +- бюджет вызовов `link-list` подтверждён числом, а не утверждением; +- семь обязательных тестов присутствуют и проходят; +- отчёт раздельно перечисляет: что локально, что в CI со ссылками, что не запускалось; +- независимый review получил полный текст `smm-hermes-task-b3r-2026-08-06.md` и `B3R_SPEC.md`. + +## Отдельно + +Физическая приёмка на трёх серверах готовится параллельно — runbook `smm-acceptance-runbook-2026-08-07.md`. Она не входит в это задание, но именно merge B-3R делает её осмысленной: до него реконсиляция от фактического состояния не в `main`. + +Статус после merge — `merged / verified, physical acceptance pending`. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-cert-lifecycle-2026-08-06-2.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-cert-lifecycle-2026-08-06-2.md new file mode 100644 index 0000000..61c2ec6 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-cert-lifecycle-2026-08-06-2.md @@ -0,0 +1,94 @@ +# Жизненный цикл клиентских сертификатов + +## Репозиторий и ветка + +- Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +- Локальный клон: `C:\Users\Ochenstarik\projects\server-monitor-manager` +- База: `main` @ `b11c277` +- Ветка: `hermes/cert-lifecycle` + +Задание не пересекается по файлам с `b3r-fact-reconciliation` и выполняется параллельно в отдельном worktree. Затрагиваемые файлы (`CertificateAuthority.cs`, `CertificateLifecycleService.cs`, `AgentClient.cs`) веткой B-3R не изменяются. + +## Зачем + +`CertificateAuthority.cs`, выдача клиентского сертификата: + +```csharp +var requestedNotAfter = DateTimeOffset.UtcNow.AddYears(1); +``` + +Срок — один год, автопродления нет ни у Agent, ни у Operator. Через год после развёртывания весь парк перестаёт проходить mTLS одновременно, и восстановление требует ручной перерегистрации каждого Node через одноразовый enrollment token. Процедуры ротации Control CA в проекте нет вообще. + +Отзыв работает через таблицу identity в Control (`ResolveIdentityAsync`), CRL не используется — это осознанное решение и менять его не нужно. + +## Работы + +### 1. Срок жизни + +- сократить срок клиентского сертификата до 30–90 дней; +- вынести значение в `ControlOptions` с валидацией в общей цепочке `.Validate(...)` в `Program.cs`, по образцу `LinkReconciliationSeconds`; +- значение по умолчанию в `appsettings.json` и в `control.env`, который пишет bootstrap; +- срок сертификата не может превышать остаточный срок Control CA — существующая логика ограничения сохраняется. + +### 2. Автопродление Agent + +- Agent проверяет остаточный срок собственного сертификата при старте и далее периодически; +- при остатке меньше трети срока формирует новый CSR и запрашивает выдачу **по действующему mTLS-каналу**, без enrollment token; +- новый эндпоинт выдачи требует действующий сертификат того же `node_id`, idempotency key и запись в audit; +- замена `agent.pfx` атомарная: запись во временный файл с правами `0600`, затем rename; при любой ошибке остаётся действующий сертификат; +- отозванный сертификат продлению не подлежит — запрос отклоняется, Node требует повторной регистрации. + +### 3. Продление Operator-сертификата Desktop + +- Desktop проверяет остаточный срок при подключении к Control; +- продление по тому же принципу, с явным уведомлением пользователя в интерфейсе; +- защищённое хранение DPAPI сохраняется, приватный ключ не покидает устройство. + +### 4. Уведомление об истечении + +- событие `certificate.expiring` в поток событий Control при остатке меньше трети срока; +- поле остаточного срока в ответе `/api/v1/control/agents`; +- отображение в Desktop на странице Servers. + +### 5. Ротация Control CA + +Документ `docs/certificate-rotation.md`: + +- когда ротация требуется: компрометация, истечение, смена алгоритма; +- порядок: выпуск нового CA, период двойного доверия, перевыпуск клиентских сертификатов, вывод старого CA; +- что делает оператор руками и что делает bootstrap; +- как проверить, что ни один Node не остался на старом CA; +- почему ротация CA требует режима подтверждения `two_person` — см. `docs/approval-policies.md`. + +Реализация автоматической ротации в эту задачу не входит — только процедура и то, что нужно для её ручного выполнения. + +## Тесты + +1. Сертификат с остатком меньше трети срока продлевается; `agent.pfx` заменён, старый сертификат больше не используется. +2. Сертификат с достаточным остатком не продлевается — лишних запросов нет. +3. Hub недоступен в момент продления: Agent продолжает работать на действующем сертификате, повторяет попытку позже, метрики не теряются. +4. Отозванный сертификат продлить нельзя — запрос отклонён. +5. Запрос продления сертификатом другого `node_id` отклонён. +6. Замена `agent.pfx` прервана на середине: остаётся действующий сертификат, Agent поднимается. +7. Срок вне диапазона в конфигурации: Control не стартует, ошибка валидации внятная. + +## Критерий приёмки + +- Node, проработавший дольше срока сертификата, продолжает работать без вмешательства оператора; +- отзыв по-прежнему немедленно закрывает доступ; +- существующие тесты `CertificateAuthorityTests` и сценарии перерегистрации зелёные без правок логики; +- `docs/certificate-rotation.md` описывает выполнимую процедуру, а не намерение; +- Control suite прогнан на Linux; +- PR создан, CI зелёный; +- независимый review получил полный текст этого задания. + +## Границы + +- не трогать `LinkService.cs`, `LinkPolicyApplier.cs`, `LinkReconciliationBackgroundService.cs`, `ControlStore.cs` в части Links, `Provisioning.Helper/*` и `deploy/ochenstarik-smm-policy-apply` — они заняты заданием B-3R; +- CRL не вводить; +- автоматическую ротацию CA не реализовывать; +- приватный ключ Control CA остаётся на Hub и в enrollment-коды не попадает. + +## Отчётность + +Раздельно перечислить: что запущено локально, что в CI, что не запускалось и почему. Статус после merge — `merged / verified`. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-cert-lifecycle-2026-08-06.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-cert-lifecycle-2026-08-06.md new file mode 100644 index 0000000..61c2ec6 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-cert-lifecycle-2026-08-06.md @@ -0,0 +1,94 @@ +# Жизненный цикл клиентских сертификатов + +## Репозиторий и ветка + +- Репозиторий: https://github.com/ochenstarik-ui/server-monitor-manager +- Локальный клон: `C:\Users\Ochenstarik\projects\server-monitor-manager` +- База: `main` @ `b11c277` +- Ветка: `hermes/cert-lifecycle` + +Задание не пересекается по файлам с `b3r-fact-reconciliation` и выполняется параллельно в отдельном worktree. Затрагиваемые файлы (`CertificateAuthority.cs`, `CertificateLifecycleService.cs`, `AgentClient.cs`) веткой B-3R не изменяются. + +## Зачем + +`CertificateAuthority.cs`, выдача клиентского сертификата: + +```csharp +var requestedNotAfter = DateTimeOffset.UtcNow.AddYears(1); +``` + +Срок — один год, автопродления нет ни у Agent, ни у Operator. Через год после развёртывания весь парк перестаёт проходить mTLS одновременно, и восстановление требует ручной перерегистрации каждого Node через одноразовый enrollment token. Процедуры ротации Control CA в проекте нет вообще. + +Отзыв работает через таблицу identity в Control (`ResolveIdentityAsync`), CRL не используется — это осознанное решение и менять его не нужно. + +## Работы + +### 1. Срок жизни + +- сократить срок клиентского сертификата до 30–90 дней; +- вынести значение в `ControlOptions` с валидацией в общей цепочке `.Validate(...)` в `Program.cs`, по образцу `LinkReconciliationSeconds`; +- значение по умолчанию в `appsettings.json` и в `control.env`, который пишет bootstrap; +- срок сертификата не может превышать остаточный срок Control CA — существующая логика ограничения сохраняется. + +### 2. Автопродление Agent + +- Agent проверяет остаточный срок собственного сертификата при старте и далее периодически; +- при остатке меньше трети срока формирует новый CSR и запрашивает выдачу **по действующему mTLS-каналу**, без enrollment token; +- новый эндпоинт выдачи требует действующий сертификат того же `node_id`, idempotency key и запись в audit; +- замена `agent.pfx` атомарная: запись во временный файл с правами `0600`, затем rename; при любой ошибке остаётся действующий сертификат; +- отозванный сертификат продлению не подлежит — запрос отклоняется, Node требует повторной регистрации. + +### 3. Продление Operator-сертификата Desktop + +- Desktop проверяет остаточный срок при подключении к Control; +- продление по тому же принципу, с явным уведомлением пользователя в интерфейсе; +- защищённое хранение DPAPI сохраняется, приватный ключ не покидает устройство. + +### 4. Уведомление об истечении + +- событие `certificate.expiring` в поток событий Control при остатке меньше трети срока; +- поле остаточного срока в ответе `/api/v1/control/agents`; +- отображение в Desktop на странице Servers. + +### 5. Ротация Control CA + +Документ `docs/certificate-rotation.md`: + +- когда ротация требуется: компрометация, истечение, смена алгоритма; +- порядок: выпуск нового CA, период двойного доверия, перевыпуск клиентских сертификатов, вывод старого CA; +- что делает оператор руками и что делает bootstrap; +- как проверить, что ни один Node не остался на старом CA; +- почему ротация CA требует режима подтверждения `two_person` — см. `docs/approval-policies.md`. + +Реализация автоматической ротации в эту задачу не входит — только процедура и то, что нужно для её ручного выполнения. + +## Тесты + +1. Сертификат с остатком меньше трети срока продлевается; `agent.pfx` заменён, старый сертификат больше не используется. +2. Сертификат с достаточным остатком не продлевается — лишних запросов нет. +3. Hub недоступен в момент продления: Agent продолжает работать на действующем сертификате, повторяет попытку позже, метрики не теряются. +4. Отозванный сертификат продлить нельзя — запрос отклонён. +5. Запрос продления сертификатом другого `node_id` отклонён. +6. Замена `agent.pfx` прервана на середине: остаётся действующий сертификат, Agent поднимается. +7. Срок вне диапазона в конфигурации: Control не стартует, ошибка валидации внятная. + +## Критерий приёмки + +- Node, проработавший дольше срока сертификата, продолжает работать без вмешательства оператора; +- отзыв по-прежнему немедленно закрывает доступ; +- существующие тесты `CertificateAuthorityTests` и сценарии перерегистрации зелёные без правок логики; +- `docs/certificate-rotation.md` описывает выполнимую процедуру, а не намерение; +- Control suite прогнан на Linux; +- PR создан, CI зелёный; +- независимый review получил полный текст этого задания. + +## Границы + +- не трогать `LinkService.cs`, `LinkPolicyApplier.cs`, `LinkReconciliationBackgroundService.cs`, `ControlStore.cs` в части Links, `Provisioning.Helper/*` и `deploy/ochenstarik-smm-policy-apply` — они заняты заданием B-3R; +- CRL не вводить; +- автоматическую ротацию CA не реализовывать; +- приватный ключ Control CA остаётся на Hub и в enrollment-коды не попадает. + +## Отчётность + +Раздельно перечислить: что запущено локально, что в CI, что не запускалось и почему. Статус после merge — `merged / verified`. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-node-enrollment-broken-2026-08-09.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-node-enrollment-broken-2026-08-09.md new file mode 100644 index 0000000..c761b6a --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-hermes-task-node-enrollment-broken-2026-08-09.md @@ -0,0 +1,164 @@ +# Путь регистрации Node не работает от начала до конца + +Приоритет: **блокирующий**. Найдено при первой в истории проекта установке на живые серверы 2026-08-09. Все четыре дефекта лежат на пути, который CI не проходит ни разу. + +## Репозиторий + +- https://github.com/ochenstarik-ui/server-monitor-manager +- База: `main` @ `d645812` (= тег `v0.1.0-alpha.7`, из которого собран проверявшийся релиз) +- Ветка: `hermes/node-enrollment-fix` + +## Контекст + +Hub ставится и работает: Control активен, `/healthz` отвечает `Healthy`, WireGuard `smm0` поднят, таблица `inet ochenstarik_smm` создана. Дальше не проходит ничего. + +--- + +## Дефект 1 — конфигурация Agent не читается в опубликованном бинарнике (BLOCKER) + +### Наблюдение + +``` +$ sudo -u ochenstarik-smm-agent env SMM_NodeId='INVALID_UPPER' \ + /usr/local/lib/ochenstarik-server-monitor-manager/agent/ochenstarik-smm-agent +Unhandled exception. System.IO.FileNotFoundException: + Could not find file '/var/lib/ochenstarik-server-monitor-manager/agent/agent.pfx' +``` + +Заведомо невалидный `SMM_NodeId` **не вызвал** ошибку валидации из `Program.cs`. Значит `configuration.Get()` вернул объект с умолчаниями, а все переменные окружения проигнорированы. + +Дефект не виден снаружи, потому что умолчания валидны: `NodeId` по умолчанию — имя машины, числовые настройки в допустимых диапазонах. Единственное свойство без валидного умолчания — `EnrollTokenFile` (`null`), поэтому `Program.cs` не заходит в ветку регистрации, падает в `RunAsync` и ищет несуществующий `agent.pfx`. + +### Причина + +Публикация идёт с `-p:PublishTrimmed=true`. Рефлексивная привязка конфигурации теряет метаданные свойств, вырезанные линкером. + +Правильное решение в проекте **уже применено к Control**: + +```csharp +// ControlOptions.cs +[DynamicDependency(DynamicallyAccessedMemberTypes.PublicProperties, typeof(ControlOptions))] +public ControlOptions() { } +``` + +В `AgentOptions` такого атрибута нет. Поэтому Control конфигурацию читает, а Agent — нет. + +### Что сделать + +Не ограничиваться копированием атрибута. Предпочтительно — включить source-generated биндер, он trim-safe по построению и снимает целый класс таких отказов: + +```xml +true +``` + +в `ServerMonitorManager.Agent.csproj` и `ServerMonitorManager.Control.csproj`. Атрибут `DynamicDependency` в `ControlOptions` после этого можно оставить как страховку, но он перестаёт быть единственной защитой. + +Отдельно: **при неудачной привязке Agent обязан отказываться стартовать, а не тихо использовать умолчания.** Добавить явную проверку — если `SMM_ControlUrl` или `SMM_NodeId` присутствуют в окружении, но не попали в `options`, это фатальная ошибка конфигурации с внятным сообщением. Молчаливый откат на умолчания в компоненте, который держит mTLS-идентичность, недопустим. + +--- + +## Дефект 2 — `validate_control_url` не пропускает ни один адрес (BLOCKER) + +### Наблюдение + +``` +$ sudo ochenstarik-server-monitor-manager.sh node-code ai-agent +ERROR: Control URL must be an https URL without a path or credentials. +``` + +`/etc/ochenstarik-server-monitor-manager/control-public-url` содержал корректный `https://host1885995-3.hostland.pro:7443`. + +### Причина + +```bash +[[ "$1" =~ ^https://[A-Za-z0-9._:\[\]-]+(:[0-9]{1,5})?/?$ ]] +``` + +Внутри скобочного выражения POSIX обратный слэш не экранирует. Класс закрывается на первом `]`, а хвост `-]` становится обязательным литералом после хоста. Проверено: не совпадает даже `https://example.com`. + +### Что сделать + +```bash +[[ "$1" =~ ^https://[]A-Za-z0-9._:[-]+(:[0-9]{1,5})?/?$ ]] +``` + +`]` первым символом класса, `[` и `-` — последними. Проверено: принимает `https://host:7443`, `https://example.com`, `https://10.0.0.1:7443`; отклоняет `https://a.b/path` и `http://x.y`. + +Функция вызывается в `create_node_code` и в `install_agent` — то есть дефект блокирует оба пути регистрации. + +**Обязательно**: юнит-тест на `validate_control_url` в `tests/bootstrap/test-bootstrap-contract.sh` с набором принимаемых и отклоняемых адресов. Аналогично проверить остальные regexp с классами символов в bootstrap и helper — эта ошибка воспроизводится копипастом. + +--- + +## Дефект 3 — `control-device-code` не существует + +`tests/acceptance/three-server-mesh.sh:117` вызывает: + +```bash +device_code="$(hub_ssh "$INSTALLER_COMMAND control-device-code '$CONTROL_DEVICE_ID'" …)" +``` + +В bootstrap девятнадцать действий, `control-device-code` среди них нет. В `docs/installer-contract.md` §5 оно значится как целевое, в Control есть CLI `device-token-create` — связки между ними никто не написал. + +Приёмка падает на шаге 2 из 12, до всего остального. + +**Что сделать:** добавить действие `control-device-code DEVICE_ID`, выдающее код `SMMDEV1-...` по образцу `node-code`, через существующий `run_control_cli device-token-create`. + +--- + +## Дефект 4 — `INSTALLER_COMMAND` указывает в пустоту + +```bash +INSTALLER_COMMAND="${INSTALLER_COMMAND:-sudo /usr/local/sbin/ochenstarik-server-monitor-manager.sh}" +``` + +Bootstrap кладёт в `/usr/local/sbin/` только `ochenstarik-smm-emergency`, себя — нет. + +**Что сделать:** устанавливать bootstrap в `/usr/local/sbin/ochenstarik-server-monitor-manager.sh` при `install-control` и `install-agent` — это же соответствует `docs/installer-contract.md` §5, где CLI описан как системная команда. Либо изменить умолчание в скрипте приёмки. Первое лучше: документация уже обещает системную команду. + +--- + +## Дефект 5 — CI не проверяет путь регистрации + +Первые два дефекта — блокирующие, лежали в репозитории неделями и пережили сотню зелёных прогонов. Причина одна: **CI ни разу не запускает Agent из опубликованного релизного бинарника.** + +`linux-control-agent.yml` ставит только Control и дёргает `/healthz`. `linux-platform-matrix.yml` — то же самое. Публикация Agent выполняется, но получившийся бинарник только складывается в артефакт и никогда не исполняется. + +**Что сделать:** расширить systemd-smoke до полного цикла на одной машине: + +1. `install-control`; +2. `node-code` — проверяет дефект 2; +3. `install-agent` с полученным кодом — проверяет дефект 1, запускает **опубликованный trimmed бинарник**; +4. проверить, что сертификат Agent выпущен и `ochenstarik-smm-agent.service` активен; +5. `control-device-code` — проверяет дефект 3. + +Hub и Node на одной машине для этого допустимы: WireGuard не нужен, mesh не поднимается, проверяется только регистрация. Полноценный mesh по-прежнему требует физической приёмки. + +Без этого шага любой из четырёх дефектов вернётся незамеченным. + +--- + +## Критерий приёмки + +- `SMM_NodeId='INVALID_UPPER'` на опубликованном trimmed бинарнике даёт ошибку валидации, а не падение на `agent.pfx`; +- `install-node` по коду `SMMNODE2` доводит Node до активного `ochenstarik-smm-agent.service` и выданного сертификата; +- `validate_control_url` принимает и отклоняет адреса по тесту в контрактном скрипте; +- `control-device-code` существует и выдаёт `SMMDEV1-...`; +- bootstrap доступен как `/usr/local/sbin/ochenstarik-server-monitor-manager.sh`; +- CI выполняет полный цикл регистрации на опубликованных бинарниках; +- Control suite прогнан на Linux; +- PR создан, CI зелёный. + +## После merge + +Выпустить `v0.1.0-alpha.8` и повторить установку на живых серверах. Hub переустанавливать не нужно — он работает; достаточно `update-control` и заново пройти регистрацию Node. + +## Временный обход, применённый вручную + +На Hub и в установщике `smm-setup.sh` дефект 2 обойдён заплаткой: + +```bash +perl -pi -e 's/\Q[A-Za-z0-9._:\[\]-]\E/[]A-Za-z0-9._:[-]/' +``` + +После merge обход из `smm-setup.sh` убрать — он помечен комментарием в коде. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-improvement-plan-2026-07-30.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-improvement-plan-2026-07-30.md new file mode 100644 index 0000000..71135a5 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-improvement-plan-2026-07-30.md @@ -0,0 +1,335 @@ +# Server Monitor Manager — полная инструкция по доработке + +Ревизия: `main` @ `2d28b8d` («Execute confirmed timezone provisioning safely», 30.07.2026). +Публичный релиз: `v0.1.0-alpha.5` (17.07.2026) — отстаёт от `main` на 3 коммита (bootstrap + provisioning execution ещё не выпущены). +Открытых issue и PR нет, вся работа идёт напрямую в `main` через merged PR. + +--- + +## 0. Как читать документ + +| Приоритет | Значение | +|---|---| +| **P0** | Блокирует alpha-тест на реальных серверах: утечка секрета, потеря доступа, ложное состояние безопасности. Чинить до следующего тега. | +| **P1** | Блокирует beta: расхождение с собственным ТЗ, DoS, невоспроизводимая поставка. | +| **P2** | Долг качества: архитектура, тесты, DX, локализация. | + +Каждый пункт: *что не так → где → что сделать → как проверить*. + +--- + +## 1. Что фактически готово + +Проект существенно более зрелый, чем типичный alpha: mTLS control plane с разделением ролей, идемпотентность, аудит, versioned SQLite (user_version до 8), bounded offline-буфер агента, подписанные ECDSA execution grants, restricted root helper через Unix-сокет, CI на Ubuntu VM + Debian systemd-контейнерах, 100-node нагрузочный тест. + +**Реально работает:** +- Control API: enroll (node/device/automation), heartbeat, links CRUD + TTL, event stream (NDJSON), provisioning jobs, preflight facts / desired / drift, backup-create/restore CLI. +- Bootstrap: install/update/rollback/uninstall Control и Agent, mesh-init, node-code (`SMMNODE1/2`), peer-add (`SMMPEER1`), emergency-команда. +- Provisioning: `preflight` (read-only) и `system.base-install` — но **исполняется только смена timezone**. +- Desktop: 4 страницы, SSH-мониторинг, история метрик, графики, redacted diagnostics. + +**Заявлено, но не реализовано (расхождение README/docs ↔ код):** + +| Заявление | Реальность | +|---|---| +| `docs/installer-contract.md` §2 «роль Monitor»: пользователь `ochenstarik-monitor`, root-owned forced command | В `deploy/ochenstarik-server-monitor-manager.sh` **нет действия `install-monitor`**, нет самого forced-command скрипта. SSH-мониторинг из Desktop настраивается вручную и нигде не описан. | +| `docs/linux-bootstrap.md:82` «После перезапуска firewall разрешающие правила должны быть повторно применены Control» | В Control **нет кода переприменения** Active-Link'ов. | +| ТЗ §14: endpoints `/api/v1/nodes/{id}/capabilities`, `/configuration`, `/users`, `/vpn-profiles` | Отсутствуют. | +| ТЗ §7.1 «подписанный version manifest» | Manifest не подписан, содержит только hash bootstrap-скрипта, без версий Control/Agent/helper. | +| README: «`system.base-install`… factual verification» | Verification только для timezone; `IsTimezoneOnly()` отвергает всё остальное. | + +--- + +## 2. P0 — критические + +### P0-1. Enrollment-токен утекает через argv в `/proc/*/cmdline` + +**Где:** `deploy/ochenstarik-server-monitor-manager.sh:564-570` + +```bash +runuser -u "$AGENT_USER" -- env \ + ... \ + "SMM_EnrollToken=$ENROLL_TOKEN" \ + "$LIB_DIR/agent/ochenstarik-smm-agent" +``` + +Аргументы `env` — это командная строка процесса. `/proc//cmdline` читается **любым локальным пользователем** (в отличие от `environ`, который защищён). Токен живёт 10 минут и даёт право получить сертификат Agent для этого Node. + +**Что сделать:** +1. Ввести в `AgentOptions` поддержку `SMM_EnrollTokenFile` (путь к файлу, режим `0600`, владелец — agent). +2. В bootstrap: `install -m 0600 -o "$AGENT_USER" -g "$AGENT_USER" /dev/null "$token_file"`, записать токен через `printf`, передать путь, `shred -u` после enrollment. +3. Альтернатива без нового API: `runuser -u agent -- env SMM_EnrollTokenFile=/proc/self/fd/3 ... 3< <(printf '%s' "$ENROLL_TOKEN")`. +4. `AgentClient.EnrollAsync` — читать файл, `CryptographicOperations.ZeroMemory` после использования, `File.Delete`. + +**Проверка:** тест в `tests/bootstrap/` — во время enrollment фоновый цикл читает `/proc/*/cmdline` и грепает подстроку токена; тест падает при совпадении. + +--- + +### P0-2. После перезагрузки Hub все активные Links молча перестают работать + +**Где:** `deploy/ochenstarik-smm-firewall.service:9-10`, `deploy/ochenstarik-server-monitor-manager.sh:263-281` (`write_mesh_firewall`), `src/ServerMonitorManager.Control/Program.cs` (нет startup-реконсиляции). + +Юнит firewall при каждом старте делает `nft delete table inet ochenstarik_smm`, затем загружает `mesh.nft` с пустой цепочкой `links`. Все accept-правила, добавленные `link-connect`, исчезают. Control при старте **не переприменяет** Active-политики — реконсиляция (`LinkService.ReconcileDisabledLinksForNodeAsync`) переприменяет только **disabled**. + +Итог: в БД и в Desktop Link показан `Active`, фактически трафик заблокирован. Это прямое нарушение критерия приёмки №12 собственного ТЗ («после reboot factual state соответствует desired»). Направление отказа безопасное (fail-closed), но состояние в UI ложное — а ложное «зелёное» состояние в security-инструменте хуже, чем красное. + +**Что сделать:** +1. Добавить в policy-helper действие `link-list`, возвращающее фактические правила (парсинг `nft -j list chain`) как строки `source:target:proto:port`. +2. Новый `LinkStartupReconciliationService : IHostedService` в Control: + - при старте и далее раз в `LinkExpirationPollSeconds × N` получать факт-список, + - для каждой Link с `DesiredState=Active`, отсутствующей в факте → `ApplyConnectAsync`, событие `link.reapplied`, + - для каждого факт-правила без записи в БД → `ApplyDisconnectAsync`, событие `link.orphan-removed` + audit, + - публиковать `ActualState=Partial` до успешного восстановления. +3. Добавить `ActualState` колонку в UI Links и явный бейдж «desired ≠ factual». +4. `ochenstarik-smm-emergency firewall-restore` — после восстановления deny-by-default дёргать `systemctl reload ochenstarik-smm-control` либо сбрасывать маркер, чтобы Control переприменил. + +**Проверка:** интеграционный тест с фейковым `ILinkPolicyApplier` (стартовое факт-состояние пустое → ожидаем N вызовов connect); + в `tests/acceptance/three-server-mesh.sh` при `SMM_ACCEPT_REBOOT=1` после reboot Hub проверять `nc -z` через Link, а не только состояние в API. + +--- + +### P0-3. Приватный SSH-ключ пишется на диск в открытом виде каждые 30 секунд + +**Где:** `src/ServerMonitorManager.Desktop/SshMonitorService.cs:187-210` (`MaterializePrivateKeyAsync`), вызывается из `RunRestrictedCommandAsync:122` на каждый опрос метрик. + +Ключ хранится под DPAPI, но для запуска `ssh.exe` расшифровывается и пишется в `ApplicationData.TemporaryFolder` без ACL-ограничения, удаляется в `finally`. При падении процесса, kill'е или гонке файл остаётся. Частота: каждые 30 с × число серверов. + +**Что сделать (в порядке предпочтения):** +1. **Лучшее:** отказаться от внешнего `ssh.exe` для мониторинга — перейти на in-process SSH-клиент (`SSH.NET`), ключ живёт только в памяти. Интерактивный терминал оставить на `ssh.exe`/`wt.exe`. +2. **Минимум, если п.1 откладывается:** + - создавать файл один раз за сессию приложения, а не на каждый запрос; + - `FileOptions.DeleteOnClose` + удержание `FileStream` на время жизни сессии; + - явный DACL только для текущего пользователя (`FileSecurity`, `SetAccessControl`); + - при старте приложения — чистка orphan-файлов `server-monitor-manager-ed25519-*` в TemporaryFolder; + - `ProcessExit`/`AppDomain.UnhandledException` хук на удаление. + +**Проверка:** unit-тест на чистку orphan-файлов; ручной тест — kill процесса в момент опроса, перезапуск, проверка что TemporaryFolder пуст. + +--- + +### P0-4. `StrictHostKeyChecking=accept-new` без подтверждения fingerprint + +**Где:** `src/ServerMonitorManager.Desktop/SshMonitorService.cs:132` + +Первое подключение к любому серверу принимает любой host key без показа пользователю. Это ровно тот MITM-вектор, который остальная часть проекта тщательно закрывает (Control CA fingerprint подтверждается вручную, mTLS с CustomRootTrust). ТЗ §10 п.2 и §13 требуют фиксации host key. + +**Что сделать:** +1. В `ServerProfileData` добавить `HostKeyFingerprint` (SHA-256) и `HostKeyAlgorithm`. +2. Первое подключение: `ssh-keyscan` → показать fingerprint в диалоге → после подтверждения записать в профиль и в `known_hosts`. +3. Далее всегда `StrictHostKeyChecking=yes`. +4. При смене ключа — блокирующее предупреждение с явным действием «принять новый ключ» + запись в аудит Desktop. +5. Интерактивный терминал (`OpenInteractiveTerminal:159-163`) сейчас вообще не передаёт `UserKnownHostsFile`/`StrictHostKeyChecking` — использует системный `known_hosts`. Привести к тому же контракту. + +--- + +### P0-5. Root helper вешается насмерть от одного молчащего клиента + +**Где:** `src/ServerMonitorManager.Provisioning.Helper/ProvisioningHelperServer.cs:37-53` и `185-203` + +```csharp +var connection = await listener.AcceptAsync(cancellationToken); +try { await HandleAsync(connection, cancellationToken); } // последовательно! +``` + +`HandleAsync` обрабатывается **синхронно в цикле accept**, а `ReadRequestAsync` читает по одному байту **без таймаута**. Любой процесс с доступом к сокету (группа `ochenstarik-smm-agent`) открывает соединение, ничего не пишет — и root-helper перестаёт обслуживать кого-либо навсегда. Провиженинг встаёт, `Requires=` в юните Agent не помогает (процесс жив). + +**Что сделать:** +1. Обрабатывать соединение в отдельной задаче с ограничением параллелизма (`SemaphoreSlim(4)`). +2. Таймаут на всё соединение: `CancellationTokenSource.CreateLinkedTokenSource(ct)` + `CancelAfter(TimeSpan.FromSeconds(30))`. +3. Читать буфером (`ArrayPool`), а не по байту — сейчас 16 КБ = 16384 syscall'а. +4. **Проверять SO_PEERCRED**: `socket.GetRawSocketOption(SOL_SOCKET, SO_PEERCRED, …)`, сверять `uid` с ожидаемым uid пользователя Agent (передавать через env юнита). Сейчас достаточно членства в группе. +5. Rate limit: не более N запросов в минуту с одного uid, лог отклонений. + +**Проверка:** тест `ProvisioningHelperTests` — открыть 2 соединения, первое молчит, второе шлёт валидный `preflight` и должно получить ответ за < 2 с. + +--- + +### P0-6. Поставка не подписана: компрометация GitHub-аккаунта = RCE на всех Node + +**Где:** `.github/workflows/linux-release.yml:33-65`, `deploy/ochenstarik-server-monitor-manager.sh:128-146` (`verify_archive`) + +Bootstrap проверяет `ARCHIVE.sha256`, лежащий **рядом с архивом в том же релизе**. Manifest (`server-monitor-manager-bootstrap-manifest.json`) не подписан и не содержит хэшей архивов Control/Agent/helper — только хэш самого bootstrap. Кто может залить релиз, может залить и hash. `update-agent`/`update-control` принимают любой такой архив. + +Собственный контракт (`installer-contract.md` §1, ТЗ §7.1) требует signed compatibility manifest — не выполнено (в roadmap отмечено как открытое, но это P0 для любой публичной поставки). + +**Что сделать:** +1. Подписывать manifest — `cosign sign-blob` (keyless/OIDC) либо `minisign`. Публичный ключ **вшить в bootstrap-скрипт константой** и в Desktop. +2. Manifest должен содержать: версию тега, sha256 каждого артефакта (bootstrap, оба tar.gz, MSIX), версии Control/Agent/helper/Desktop, поддерживаемые runtime, минимальную совместимую версию Control. +3. `verify_archive` → `verify_manifest_signature` → сверка хэша архива **с manifest**, а не с соседним файлом. +4. Отказ обновления при несовместимой паре версий Control↔Agent↔helper (`installer-contract.md` §6 это уже требует). +5. Запиннить все GitHub Actions по commit SHA (`actions/checkout@`), включить `dependabot` для actions. + +--- + +## 3. P1 — важные + +### P1-1. Роль Monitor не реализована в bootstrap +Флагманская функция (SSH-мониторинг из Desktop) не имеет серверной части в поставке: нет `install-monitor`, нет forced-command скрипта, нет создания `ochenstarik-monitor`, нет установки публичного ключа из Desktop. + +**Сделать:** добавить в bootstrap действие `install-monitor PUBLIC_KEY`: +- создать `ochenstarik-monitor` (nologin, без пароля, без sudo); +- `/usr/local/libexec/ochenstarik-smm-metrics` — root-owned `0755`, выдающий ровно снимок из `installer-contract.md` §7 (`PROTOCOL=1`, `HOSTNAME=…`) и read-only `mesh status`; +- `authorized_keys` c `command="/usr/local/libexec/ochenstarik-smm-metrics",no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding,restrict`; +- идемпотентность при повторном запуске, отдельный `uninstall-monitor`. +- Формат снимка вынести в общий тест-фикстуру, чтобы `SshMonitorService` и скрипт не разъезжались (сейчас парсер в `SshMonitorService.QueryAsync:72-106` знает ключи, которых никакой скрипт в репозитории не производит). + +### P1-2. Приватный ключ Control CA доступен процессу Control +`create_control_certificates` (`:451`) экспортирует CA в PKCS#12 **с пустым паролем**, `0640 root:ochenstarik-smm-control`. Любой RCE в Control = выпуск произвольных Agent/Operator/Automation сертификатов + подпись execution grant для любого Node. + +**Сделать:** +- разделить ключи: CA-ключ для выпуска сертификатов и **отдельный** ключ подписи execution grant (helper пиннит второй); +- защитить PFX паролем, подавать через `systemd LoadCredential=` (`ControlOptions.CertificateAuthorityPassword` уже есть — использовать); +- задокументировать процедуру ротации CA и re-enrollment всего флота; +- сократить срок сертификатов клиентов с 1 года (`CertificateAuthority.cs:55`) до 30–90 дней + автопродление Agent'ом за 1/3 срока до истечения. + +### P1-3. Event stream без keepalive, без resume, без лимита подписчиков +`Program.cs:922-937` + `ControlEventBroker.cs`. Канал `DropOldest(256)` — при медленном клиенте события теряются молча. Реконнект Desktop (`ControlClientService.ListenAsync:181-184`, фиксированные 5 с без backoff и джиттера) начинает с текущего момента: всё, что произошло во время разрыва, потеряно, а полного refresh на реконнекте нет. + +**Сделать:** таблица `control_events` с retention; `GET /api/v1/control/events?since=`; heartbeat-кадр раз в 15 с (`{"type":"ping"}`) для детекта мёртвого TCP; лимит подписок на identity; экспоненциальный backoff с джиттером на клиенте; после реконнекта — принудительный refresh inventory и links. + +### P1-4. Rate limiting только на enrollment +`Program.cs:19-31` — политика `"enrollment"`. Heartbeat, links, provisioning, events — без лимитов. Скомпрометированный Agent-сертификат = неограниченная запись метрик и рост БД (retention сработает поздно). + +**Сделать:** политики на группу `agents` (по `NameIdentifier`), на `control` (мутации), и лимит одновременных event-подписок. Плюс `Kestrel.Limits.MaxConcurrentConnections`. + +### P1-5. Провиженинг реализован на ~5% от ТЗ +`system.base-install` исполняет только timezone; `IsTimezoneOnly` (`TimezoneProvisioningExecutor.cs:229-238`) жёстко требует `VmSwappiness == 60`, пустые пакеты, `RebootPolicy == "never"`. Этапы 9–12 ТЗ (базовая настройка, пользователи, firewall/SSH-миграция, Xray) — нули. + +**Сделать: вынести общий каркас исполнителя,** прежде чем писать второй модуль. Сейчас timezone-логика (проверка grant → consumption record → backup → mutate → verify → rollback) вшита в один класс на 320 строк; второй модуль скопирует её целиком. + +``` +IProvisioningModule + string ActionType { get; } + string ModuleHash { get; } + ValidationResult Validate(JsonElement parameters); + Plan BuildPlan(parameters); // без мутаций + ExecutionResult Execute(plan, grant); // backup → mutate → verify → rollback + FactualState Observe(); +``` + +Порядок модулей (по риску, от низкого к высокому): `system.timezone` (готов) → `system.locale` → `system.packages` (versioned allowlist уже есть) → `system.swap` → `users.*` → `firewall.*` → `ssh.migrate` (двухфазный) → `xray.*`. + +### P1-6. Grant consumption-записи копятся без ограничения +`TimezoneProvisioningExecutor.cs:79-95` пишет `grant-.consumed.json` в rollback-каталог навсегда. За год активного провиженинга — десятки тысяч файлов в одном каталоге, замедление `CreateNew`. + +**Сделать:** чистка записей старше 24 ч (grant живёт 2 мин) при каждом старте helper'а; тест на идемпотентность повторного grant после чистки (должен по-прежнему отклоняться в пределах TTL — хранить не файл, а компактный журнал nonce с TTL). + +### P1-7. HttpClient создаётся на каждый запрос +`ControlClientService.cs:254-281` и `AgentClient.CreateHttpClient:390-416` — новый `HttpClientHandler` + TLS handshake на каждый вызов, исчерпание сокетов в TIME_WAIT при 30-секундном опросе. + +**Сделать:** один `SocketsHttpHandler` на сессию (`PooledConnectionLifetime = 5 min`), переиспользование `HttpClient`. Сертификат сессии держать в `X509Certificate2` с явным `Dispose` при смене identity. + +### P1-8. Атомарность установки нарушена +`install_tree_atomic:200-213`: `rm -rf destination; mv staging destination`. Между этими командами каталога с бинарями не существует — падение/kill/OOM оставляет систему без Control. + +**Сделать:** `mv dest dest.old.$$` → `mv staging dest` → `rm -rf dest.old.$$`; при неудаче второго шага — вернуть `.old`. + +### P1-9. `restore_backup` распаковывает tar в `/` без валидации +`:711` `tar -C / -xzf "$archive"` — в отличие от `verify_archive`, без проверки путей и без sha256. Каталог `0700 root`, риск ограничен, но rollback — именно тот путь, который выполняется в аварийной ситуации. + +**Сделать:** записывать `.sha256` рядом с каждым backup'ом, проверять перед распаковкой; прогонять тот же allowlist путей. + +### P1-10. Нет фильтрации входящего mesh-трафика на Node +Node получает `AllowedIPs = 10.77.0.0/24` (`:407`) и **не имеет никакой nftables-политики**. Вся изоляция держится на forward-цепочке Hub. Hub (или тот, кто его скомпрометировал) имеет неограниченный доступ ко всем портам всех Node поверх `smm0`. + +**Сделать:** ставить на Node input-цепочку `iifname "smm0"` с deny-by-default и разрешением только на порты, фигурирующие в Link'ах, где этот Node — target. Разрешающие правила Node применяет сам Agent по данным `/api/v1/automation/links`-подобного эндпоинта (нужен `/api/v1/agents/links/inbound`). Это же закрывает единственную точку отказа изоляции. + +### P1-11. IPv6 в mesh не определён +`mesh.nft` — `table inet`, но политика описана только для IPv4 (`ip saddr/daddr` в policy-helper). Если на Node включён IPv6 внутри `smm0` (не включён, но AllowedIPs не запрещает), правил нет. Явно задать: mesh — IPv4-only, IPv6 в `smm0` запрещён отдельным правилом drop. + +--- + +## 4. P2 — качество, архитектура, процесс + +### Код + +1. **`ControlStore.cs` — 1576 строк, «божественный объект»**: схема + миграции + токены + enrollment + heartbeat + links + audit + idempotency + provisioning-делегаты. Разделить по агрегатам: `ControlSchema` (миграции), `IdentityStore`, `MetricStore`, `LinkStore`, `AuditStore`, `IdempotencyStore`; provisioning уже частично вынесен. Тесты уже намекают на границы (`ControlStoreTests` 809 строк). +2. **`MainPage.xaml.cs` — 1124 строки code-behind без MVVM и DI.** Вынести в `ViewModel` c `INotifyPropertyChanged`, сервисы — через `IServiceProvider` в `App.xaml.cs`. Сейчас логика Desktop покрыта одним PowerShell-скриптом на 39 строк (`tests/windows/Test-DesktopContracts.ps1`) — фактически не покрыта. +3. **Хардкод русских строк в бизнес-логике**: `SshMonitorService.cs:117,155,216,220,226`, `ControlClientService.cs:42,51,60,73,83,89,119,297,318`. При 12 переводах README само приложение не локализовано. Ввести `.resw` + `x:Uid`, коды ошибок вместо текста в исключениях (текст — на уровне UI). +4. **Валидаторы живут в `Program.cs`** (`NodeIdValidator`, `LinkPolicyValidator`, `ProvisioningJobValidator`, …, строки 1005-1136) и дублируются в bash (`validate_node_id`, `validate_port`) и в helper. Три независимые реализации одних правил. Вынести в `Core`, а для bash — генерировать regexp из одного источника либо покрыть контрактным тестом (`test-bootstrap-contract.sh` уже есть — расширить: каждый валидатор проверяется одинаковым набором кейсов на обеих сторонах). +5. **Нет `Directory.Build.props`**: не заданы `Nullable`, `TreatWarningsAsErrors`, `EnableNETAnalyzers`, `AnalysisLevel`, `InvariantGlobalization`, детерминированная сборка. Добавить. +6. **Нет `Directory.Packages.props`** (Central Package Management) и нет lock-файлов (`RestorePackagesWithLockFile`) — сборки невоспроизводимы, что противоречит требованию pinned-поставки. +7. `LinkPolicyApplier` вызывает `sudo` per-operation (`:48`); при массовом переприменении (P0-2) это N процессов. Добавить batch-режим helper'а: `link-apply -` со списком правил на stdin, одна транзакция `nft -f`. +8. `ProvisioningProcessRunner.Run` (`:329-343`) — `Task.WaitAll` на потоке; при чтении больших выводов возможен deadlock-паттерн. Переписать на async, добавить лимит размера stdout/stderr (сейчас без ограничения — `timedatectl` безопасен, следующие модули нет). + +### Тесты + +9. Всё в одном проекте `ServerMonitorManager.Control.Tests` — включая `LinuxMetricsTests` (Agent), `MetricBufferTests` (Agent), `ProvisioningHelperTests` (Helper). Разделить: `Core.Tests`, `Control.Tests`, `Agent.Tests`, `Helper.Tests`, `Desktop.Tests`. +10. Нет тестов на: сериализацию контрактов (source-generated JSON + trimming — риск молчаливой потери полей при `PublishTrimmed=true`), отзыв сертификата → отказ в доступе, миграции SQLite v1→v8 на реальном старом файле, поведение при повреждённой БД. +11. Нет измеримых performance budget'ов (в roadmap отмечено). Задать: p95 heartbeat < 50 мс при 100 Node, старт Control < 2 с, память Agent < 60 МБ, размер БД на Node/сутки. +12. `HubLoadTests` (126 строк) гоняет 100 Node в одном процессе — добавить soak на 24 ч в nightly workflow с проверкой отсутствия роста памяти и размера БД. + +### Процесс и репозиторий + +13. Отсутствуют: `CHANGELOG.md`, `SECURITY.md` (куда слать уязвимости — обязательно для security-инструмента), `CONTRIBUTING.md`, `CODEOWNERS`, шаблоны issue/PR, `.github/dependabot.yml`. +14. Actions не запиннены по SHA; в `linux-release.yml` `permissions: contents: write` на весь workflow — сузить до job'а публикации. +15. Нет SBOM (`dotnet CycloneDX`) и нет сканирования зависимостей — для проекта, который ставит бинарь с root-правами, это ожидаемый минимум. +16. 12 переводов README рассинхронизированы с релиз-статусом (пункт открыт в roadmap Этап 6). Сделать один источник — секцию статуса генерировать скриптом из тега, переводы проверять CI на наличие актуального номера версии. +17. Ветки `agent/remove-lightweight-server-references` и `codex/ttl-backup-acceptance` слиты, но не удалены — почистить. + +--- + +## 5. План работ по спринтам + +### Спринт 1 — «Безопасно тестировать на живых серверах» (P0) +- [ ] P0-1 токен через файл/fd + тест на `/proc/*/cmdline` +- [ ] P0-5 helper: параллелизм, таймауты, буферное чтение, SO_PEERCRED +- [ ] P0-3 SSH-ключ: чистка orphan, DACL, одноразовая материализация за сессию +- [ ] P0-4 host key fingerprint в профиле + `StrictHostKeyChecking=yes` +- **Критерий выхода:** `v0.1.0-alpha.6`, ни один секрет не наблюдаем локальным непривилегированным пользователем; helper выдерживает молчащего клиента. + +### Спринт 2 — «Состояние в UI = состояние в системе» (P0-2, P1-3, P1-10) +- [ ] `link-list` в policy-helper, `LinkStartupReconciliationService` +- [ ] `ActualState`/drift-бейдж в Desktop +- [ ] durable event log + `?since=` + keepalive + backoff +- [ ] input-политика на Node +- **Критерий выхода:** сценарий из `three-server-acceptance.md` с `SMM_ACCEPT_REBOOT=1` проходит **с фактической проверкой связности** (`nc -z`) после reboot Hub и Node. + +### Спринт 3 — «Поставка, которой можно доверять» (P0-6, P1-2, P1-8, P1-9) +- [ ] подписанный compatibility manifest + вшитый публичный ключ +- [ ] проверка совместимости версий при update +- [ ] разделение CA-ключа и grant-ключа, пароль через `LoadCredential` +- [ ] атомарная замена дерева, checksum для backup'ов +- [ ] пиннинг actions, dependabot, SBOM, `SECURITY.md` +- **Критерий выхода:** `v0.2.0-beta.1`; подмена архива в релизе отвергается bootstrap'ом; тест на это в CI. + +### Спринт 4 — «Каркас провиженинга» (P1-5, P2-1, P2-4) +- [ ] `IProvisioningModule` + перенос timezone на него без изменения поведения +- [ ] versioned JSON schema per action, единый источник валидаторов в `Core` +- [ ] модули `system.locale`, `system.packages`, `system.swap` с backup/verify/rollback +- [ ] распил `ControlStore` +- **Критерий выхода:** Этап 9 roadmap закрыт наполовину; добавление нового модуля = один файл + схема + тест. + +### Спринт 5 — «Роль Monitor и Desktop» (P1-1, P2-2, P2-3) +- [ ] `install-monitor` + forced-command скрипт + контрактный тест формата снимка +- [ ] MVVM + DI + unit-тесты Desktop +- [ ] локализация `.resw`, коды ошибок вместо текста +- **Критерий выхода:** чистый сервер настраивается под мониторинг одной командой; README-инструкция соответствует коду. + +### Спринт 6 — «SSH-миграция и firewall» (Этап 10 ТЗ) +Двухфазная миграция порта — самая опасная операция во всём проекте (потеря доступа). Делать только после спринтов 1–4, обязательно с VM-матрицей и тестом «новый порт не поднялся → 22 остался открыт». + +--- + +## 6. Чек-лист готовности к публичной beta + +- [ ] Ни один секрет (токен, ключ, subscription URL) не наблюдаем в `argv`, логах, diagnostics, SQLite — покрыто автотестом +- [ ] Все артефакты релиза подписаны, bootstrap проверяет подпись +- [ ] Совместимость Control↔Agent↔helper↔Desktop проверяется перед update и перед выполнением job +- [ ] После reboot Hub и любого Node factual state == desired state (проверено связностью, не только API) +- [ ] Отзыв сертификата немедленно закрывает доступ — тест +- [ ] Каждая мутирующая операция: idempotency + audit + verification + rollback — тест на каждую +- [ ] Физическая приёмка `three-server-acceptance.md` с `SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1` +- [ ] Debian VM с настоящим reboot (сейчас только systemd-контейнеры) +- [ ] Доверенная подпись Windows MSIX +- [ ] Performance budget зафиксированы и проверяются в nightly +- [ ] `SECURITY.md`, `CHANGELOG.md`, SBOM +- [ ] Переводы README синхронизированы с релиз-статусом + +--- + +## 7. Чего делать не стоит + +- **Не начинать Xray (Этапы 11–12) до закрытия P0/P1.** Xray добавляет системный kill switch и policy routing — при текущем разрыве desired/factual (P0-2) это гарантированная потеря доступа к серверу. +- **Не расширять `system.base-install` копированием `TimezoneProvisioningExecutor`.** Сначала каркас (P1-5), иначе шесть копий логики backup/verify/rollback. +- **Не добавлять macOS/Linux/мобильные клиенты** (Этап 13) до стабилизации контрактов `Core` — сейчас они меняются каждым PR. +- **Не отключать `PublishTrimmed`** ради удобства, но и не доверять ему без тестов сериализации (P2-10): source-generated JSON контекст есть, но контрактных тестов на round-trip нет. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-2-2026-07-31.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-2-2026-07-31.md new file mode 100644 index 0000000..9e6b556 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-2-2026-07-31.md @@ -0,0 +1,214 @@ +# Задача 2 — целостность состояния и доверенная поставка + +Базовая ревизия: `main` @ `c320b7d` (после PR #7, #8, #9). +Предыдущий документ: `smm-improvement-plan-2026-07-30.md` (ревизия `2d28b8d`). + +--- + +## 0. Приёмка задачи 1 + +| Пункт | Статус | Комментарий | +|---|---|---| +| **P0-1** токен в `argv` | ✅ **принято** | Токен передаётся файлом `0400 agent:agent` в `/var/lib/...-enrollment` (`0710 root:agent`), путь — не значение — уходит в `argv`. Inline-токен теперь явно отвергается (`Program.cs`, exit 2). Есть валидация режима файла, размера, base64url-алфавита, `ZeroMemory`, удаление на всех путях. Тесты: `test-enrollment-token-argv.sh`, `EnrollmentTokenTests.cs`, 13 grep-проверок в `test-bootstrap-contract.sh`. Каталог вынесен из `STATE_DIR` — Control до него не дотянется. Сделано аккуратно. | +| **P0-5** DoS root-helper | ✅ **принято** | `SO_PEERCRED` со сверкой uid, обработка в `Task.Run` с `SemaphoreSlim(4)`, таймаут соединения 30 с, буферное чтение через `ArrayPool`, троттлинг запросов и неавторизованных попыток (per-uid + глобальный), анти-флуд логирования. Плюс сквозная отмена в `TimezoneProvisioningExecutor.ExecuteAsync` с `RecoverAfterCancellationAsync`. Сверх запрошенного — хорошо. | +| **P0-3** SSH-ключ на диске | ✅ **принято** | `SshPrivateKeySession`: явный DACL только для текущего SID, `FileMode.CreateNew`, один файл на сессию команды, `IAsyncDisposable`, чистка orphan'ов при старте `App`. | +| **P0-4** host key pinning | 🟡 **принято частично** | Мониторинг закрыт полностью: `StrictHostKeyChecking=yes`, `-F none`, `IdentityAgent=none`, `GlobalKnownHostsFile=none`, `KnownHostsCommand=none`, `UpdateHostKeys=no`, отдельный pin-файл на endpoint, диалог подтверждения с предупреждением «сверьте через доверенную консоль». **Интерактивный терминал не закрыт** — см. A1. | +| **P0-2** Links после reboot | ⛔ **не начато** | Раздел 2 этой задачи. | +| **P0-6** подпись поставки | ⛔ **не начато** | Раздел 3 этой задачи. | + +Качество исполнения задачи 1 высокое: каждое исправление сопровождено тестом, добавлены два новых тест-проекта (`Desktop.Security.Tests`, `test-enrollment-token-argv.sh`) и они подключены в CI. Замечания ниже — это доводка, а не переделка. + +--- + +## 1. Долги по принятой работе (блок A, ~1–2 дня) + +### A1. Интерактивный терминал игнорирует подтверждённый fingerprint — P0 + +**Где:** `src/ServerMonitorManager.Desktop/SshMonitorService.cs:194-229` + +```csharp +var sshArguments = new[] { "-p", port, $"{terminalUser}@{profile.Host}" }; +``` + +Ни `-F none`, ни `UserKnownHostsFile`, ни `StrictHostKeyChecking`. Терминал использует системный `~/.ssh/known_hosts` и поведение по умолчанию (`ask`). Пользователь подтвердил fingerprint в приложении — а терминал открывается мимо этого доверия и может принять другой ключ по обычному консольному промпту. Половина P0-4 остаётся открытой, и именно на том канале, где даётся полноценная shell-сессия. + +**Что сделать:** +1. Передавать в терминал тот же набор опций, что и в `RunRestrictedCommandAsync`: `-F none`, `-o StrictHostKeyChecking=yes`, `-o UserKnownHostsFile=`, `GlobalKnownHostsFile=none`, `KnownHostsCommand=none`, `UpdateHostKeys=no`, `CheckHostIP=no`. +2. Перед запуском проверять `SshHostKeyTrust.IsTrusted(...)` и отказывать с тем же сообщением, что и мониторинг. +3. Учесть, что `UseShellExecute = true` + `wt.exe new-tab` — аргументы уходят через оболочку Windows Terminal: проверить экранирование пути pin-файла (пробелы в `ApplicationData` пути реальны), либо перейти на `wt.exe new-tab --title ... -- ssh ...` с явным разделителем `--`. +4. Тест в `Desktop.Security.Tests`: построение аргументной строки терминала содержит `StrictHostKeyChecking=yes` и путь pin-файла; профиль без `HostKeyFingerprint` терминал не открывает. + +### A2. Существующие профили после обновления перестают работать без внятного объяснения + +`ServerProfileData.HostKeyFingerprint` — новое опциональное поле; `ServerStorage` использует reflection-сериализатор, поэтому старый `servers.json` загрузится с `null`. Дальше `RunRestrictedCommandAsync` бросает `"SSH host key is not explicitly confirmed for this server profile."` — **на английском**, в остальном русскоязычном интерфейсе, и без подсказки, что чинится это через «Изменить сервер». + +**Что сделать:** +1. Отдельный статус профиля `HostKeyPendingConfirmation` вместо исключения при опросе. +2. В карточке сервера — кнопка «Подтвердить host key», вызывающая `ConfirmHostKeyAsync` напрямую, без диалога редактирования. +3. Сообщение — на языке интерфейса; в тексте назвать конкретное действие. +4. Разовая миграция при старте: если профилей без fingerprint > 0 — один `InfoBar` со списком имён. + +### A3. Переименование сервера требует нового keyscan и подтверждения + +`MainPage.xaml.cs` — `ConfirmHostKeyAsync` вызывается в обработчике редактирования безусловно. Смена только `Name` (или `User`) приводит к сетевому `ssh-keyscan` и модальному диалогу. При недоступном сервере переименование вообще невозможно. + +**Что сделать:** пропускать диалог, если `Host`/`Port` не изменились и `IsTrusted(...)` для сохранённого fingerprint возвращает `true`; в этом случае переносить fingerprint в новый профиль. + +### A4. Диспетчеризация в helper по строке кода ошибки + +**Где:** `ProvisioningHelperServer.ExecuteRequestAsync` + +```csharp +var response = Execute(request, timezoneExecutor: null); +if (response.Code != "execution.unavailable" || _timezoneExecutor is null) return response; +``` + +Ветка исполнения выбирается по тому, что синхронный путь вернул конкретную строку. Любой будущий модуль, вернувший `execution.unavailable` по своей причине, будет отправлен в timezone-исполнитель. Заменить явным решением: `request.Execution is not null && request.ActionType == "system.base-install"` → async-путь, иначе — синхронный. + +### A5. `SMM_AgentUid` не обновляется при `update-agent` + +`agent.env` с `SMM_AgentUid` пишется только в `install_agent`. `update_role agent` перезаписывает бинарники и юниты, но не `agent.env`. Если uid системного пользователя изменился (переустановка, восстановление из backup другой машины, ручное вмешательство) — helper отвергнет **все** запросы Agent'а по `SO_PEERCRED`, и провиженинг встанет молча. + +**Что сделать:** +1. В `update_role agent` пересчитывать и переписывать `SMM_AgentUid` (идемпотентно, `sed -i` по ключу или полная перегенерация файла с сохранением остальных значений). +2. В helper при старте: если `SMM_AgentUid` не соответствует существующему пользователю — писать явную ошибку в journal, а не молча отклонять соединения. +3. Проверка в `test-bootstrap-contract.sh`. + +### A6. Синхронная обёртка `Execute` над `ExecuteAsync` + +`TimezoneProvisioningExecutor.Execute(...) => ExecuteAsync(...).GetAwaiter().GetResult()` — классический источник дедлоков и мёртвый код в production-пути. Оставить только если её реально используют тесты; иначе удалить, тесты перевести на async. + +--- + +## 2. Блок B — состояние в UI = состояние в системе (P0-2) + +Главная задача этого спринта. Полное описание проблемы — в `smm-improvement-plan-2026-07-30.md`, раздел P0-2. Кратко: `ochenstarik-smm-firewall.service` при каждом старте делает `nft delete table inet ochenstarik_smm` и загружает пустую цепочку `links`; Control при старте переприменяет только **disabled**-политики. После перезагрузки Hub все `Active`-Links показаны рабочими, но трафик заблокирован. Это нарушение критерия приёмки №12 собственного ТЗ и прямое расхождение с `docs/linux-bootstrap.md:82`, где такое переприменение описано как существующее поведение. + +### B1. Helper: чтение фактического состояния + +`deploy/ochenstarik-smm-policy-apply` — новое действие `link-list`: + +- вывод `nft -j list chain inet ochenstarik_smm links`, парсинг только правил с комментарием `smm::::`; +- формат вывода — по одной записи в строке, стабильный и машиночитаемый: `sourcetargetprotoport`; +- ненулевой exit code, если таблицы/цепочки нет (это отдельное состояние «firewall не поднят», а не «правил ноль»); +- в testing-режиме (`SMM_POLICY_TESTING=1`) — чтение из фикстуры, как сделано для остальных действий; +- запись в `sudoers` не меняется (шаблон `$POLICY_HELPER *` уже покрывает). + +Добавить действие `link-apply-batch` (правила списком на stdin, применение одной транзакцией `nft -f`) — при переприменении 50 Link'ов текущая схема породит 50 процессов `sudo`. + +### B2. Control: сервис реконсиляции + +Новый `LinkStartupReconciliationService : BackgroundService` (или расширение существующего `LinkExpirationBackgroundService`): + +1. **При старте Control** и далее периодически (интервал — новая настройка `Control__LinkReconciliationSeconds`, диапазон 30–3600, по умолчанию 300): + - получить факт через `link-list`; + - `desired=Active`, факта нет → `ApplyConnectAsync`, событие `link.reapplied`, запись в audit; + - факт есть, записи в БД нет либо `desired=Disabled` → `ApplyDisconnectAsync`, событие `link.orphan-removed`, audit; + - до успешного восстановления держать `ActualState = Partial`. +2. **Если `link-list` вернул «таблицы нет»** — не считать это «правил ноль»: перевести все Active-Links в `Partial`, поднять событие `mesh.firewall-missing`, повторять попытку с backoff. Ошибочная трактовка здесь приведёт к массовому «переприменению» в несуществующую таблицу. +3. Реконсиляция должна быть идемпотентной и не конфликтовать с `LinkService._reconciliationLocks` — переиспользовать те же семафоры по `link.Id`. +4. Ограничение частоты: не чаще одного полного прохода в `LinkReconciliationSeconds`, независимо от числа событий. + +### B3. Desktop + +- В `LinksPage` показывать `ActualState` отдельно от `DesiredState` и явный бейдж расхождения («Политика не применена»). +- Обработка событий `link.reapplied`, `link.orphan-removed`, `mesh.firewall-missing` в потоке событий. + +### B4. Emergency-команда + +`ochenstarik-smm-emergency firewall-restore` восстанавливает deny-by-default и, по документации, «разрешающие Link-правила после этого должен повторно применить Control». Сейчас Control об этом не узнаёт. Добавить: команда ставит маркер-файл, сервис реконсиляции при обнаружении маркера выполняет внеочередной проход и снимает маркер после успеха. + +### B5. Тесты + +- **Unit:** фейковый `ILinkPolicyApplier` + фейковый источник факт-состояния; сценарии: пустой факт при трёх Active → три connect; лишнее правило → один disconnect; отсутствие таблицы → все в `Partial`, ни одного connect; повторный проход без изменений → ноль вызовов. +- **Bash:** `link-list` на фикстуре вывода `nft -j` (включая правила с чужими комментариями, которые трогать нельзя). +- **Acceptance:** в `tests/acceptance/three-server-mesh.sh` при `SMM_ACCEPT_REBOOT=1` после reboot Hub проверять **фактическую связность** (`nc -z` через Link), а не только состояние в API. Сейчас тест проверяет только API — именно поэтому дефект и не был пойман. + +### B6. Критерий приёмки блока B + +После `reboot` Hub и каждого Node: для всех Link с `DesiredState=Active` связность восстанавливается автоматически не позднее одного интервала реконсиляции; для `Disabled` — остаётся заблокированной; ни одно правило без соответствующей записи в БД в цепочке не остаётся; расхождение отображается в Desktop до момента устранения. + +--- + +## 3. Блок C — доверенная поставка (P0-6) + +Сейчас bootstrap сверяет `ARCHIVE.sha256`, лежащий рядом с архивом в том же релизе, а manifest не подписан и содержит только хэш самого bootstrap-скрипта. Кто может опубликовать релиз — может опубликовать и хэш. `update-control` / `update-agent` примут такой архив и заменят бинарники, работающие с root-правами. + +### C1. Формат manifest v2 + +```json +{ + "schema": "smm-release-manifest/v2", + "version": "v0.2.0-beta.1", + "released_at": "2026-08-.....", + "components": { + "bootstrap": { "file": "...sh", "sha256": "..." }, + "linux-x64": { "file": "...linux-x64.tar.gz", "sha256": "..." }, + "linux-arm64": { "file": "...linux-arm64.tar.gz", "sha256": "..." }, + "windows-msix":{ "file": "...win-x64.msix", "sha256": "..." } + }, + "versions": { "control": "...", "agent": "...", "helper": "...", "desktop": "..." }, + "compatibility": { "minimum_control": "...", "minimum_agent": "...", "helper_protocol": "1" } +} +``` + +### C2. Подпись + +- `cosign sign-blob` (keyless/OIDC, без хранения приватного ключа) либо `minisign` с ключом в GitHub Secrets. +- Публичный ключ / идентификатор issuer'а **вшивается константой в bootstrap-скрипт и в Desktop** — не скачивается вместе с релизом, иначе подпись бессмысленна. +- Проверять `.sig` до любого разбора manifest; при отсутствии инструмента проверки — отказ, а не предупреждение. + +### C3. Изменения в bootstrap + +1. Новое действие `verify-manifest MANIFEST SIGNATURE`. +2. `verify_archive` → сверка хэша архива **с manifest**, а не с соседним `.sha256`; старый путь оставить только под явным `SMM_ALLOW_UNSIGNED=1` с громким предупреждением (для локальной разработки). +3. Отказ `update-*` при несовместимой паре версий Control ↔ Agent ↔ helper (`installer-contract.md` §6 это уже требует). +4. `PROGRAM_VERSION` перестаёт быть `0.2.0-dev` — подставлять тег при упаковке в release workflow. + +### C4. CI + +- Запинить все GitHub Actions по commit SHA (сейчас `@v6`, `@v5`, `@v2` — плавающие теги). +- `.github/dependabot.yml` для `github-actions` и `nuget`. +- Сузить `permissions: contents: write` до job'а публикации. +- Негативный тест: подменить байт в архиве → bootstrap обязан отказать; подменить хэш в manifest без переподписи → обязан отказать. +- SBOM (`dotnet CycloneDX`) как артефакт релиза. + +### C5. Критерий приёмки блока C + +Модифицированный архив, модифицированный manifest и manifest без подписи отвергаются bootstrap'ом; каждый случай покрыт тестом в CI. Установка и обновление возможны только из подписанного релиза (кроме явного dev-режима). + +--- + +## 4. Порядок и объём + +| Блок | Содержание | Оценка | +|---|---|---| +| **A** | Долги по задаче 1 (A1 — обязательно, остальное желательно в том же PR) | 1–2 дня | +| **B** | Реконсиляция Links + фактическая проверка в acceptance | 3–5 дней | +| **C** | Подписанный manifest и проверка совместимости версий | 2–4 дня | + +Делать в порядке A → B → C. Блок A мал и закрывает открытую половину P0-4 — не откладывать его в отдельный спринт. Блок B выше по приоритету, чем C: ложное «зелёное» состояние в инструменте безопасности опаснее, чем неподписанный релиз на этапе alpha, где артефакты пока ставит только автор. + +**PR-разбиение:** три отдельных PR (`fix(desktop): pin terminal host key`, `feat(control): reconcile link policies`, `feat(release): signed compatibility manifest`) — как и в задаче 1, по одной теме на PR. + +--- + +## 5. Definition of Done задачи 2 + +- [ ] Терминал использует тот же pinned host key, что и мониторинг; профиль без подтверждённого fingerprint терминал не открывает +- [ ] Профили из предыдущей версии подтверждаются одним действием, без пересоздания сервера +- [ ] `SMM_AgentUid` корректен после `update-agent`; несоответствие видно в journal +- [ ] После reboot Hub и Node factual state == desired state, проверено связностью в acceptance-скрипте +- [ ] Расхождение desired/factual видно в Desktop +- [ ] Отсутствие nftables-таблицы отличается от «правил ноль» и не приводит к ложным connect +- [ ] Manifest подписан, публичный ключ вшит в bootstrap, подмена архива/manifest отвергается — с тестами +- [ ] Несовместимые версии Control/Agent/helper блокируют обновление +- [ ] Actions запиннены по SHA, dependabot включён +- [ ] Roadmap обновлён: закрыты пункты Этапа 3 (физический acceptance — частично), Этапа 7 (подпись manifest) +- [ ] `docs/linux-bootstrap.md:82` приведён в соответствие с реализацией + +--- + +## 6. Не входит в задачу 2 + +Xray (Этапы 11–12), каркас `IProvisioningModule` и остальные модули провиженинга, роль Monitor в bootstrap, MVVM-рефакторинг Desktop, локализация — это задача 3 и далее. Обоснование очерёдности — в `smm-improvement-plan-2026-07-30.md`, разделы 5 и 7. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-3-2026-08-03.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-3-2026-08-03.md new file mode 100644 index 0000000..8f2dcf6 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-3-2026-08-03.md @@ -0,0 +1,148 @@ +# Задача 3 — закрыть P0-2 по существу и перейти к доверенной поставке + +Базовая ревизия: `main` @ `89ef2fd` (PR #11, Block B merged). +Предшествующие документы: `smm-improvement-plan-2026-07-30.md`, `smm-task-2-2026-07-31.md`, `smm-task2-blockB-review-2026-08-03.md`. + +--- + +## 0. Результат перепроверки пакета Block B + +**Процессная часть — принято.** `SHA256SUMS` сходится по всем семи файлам, репорт репрезентативен, CI 14/14 SUCCESS на `1580ec7` (включая Debian 12/13 x64+arm64 systemd restart и Ubuntu 22.04/24.04 native VM), PR #11 смержен как `89ef2fd`, временный verifier удалён. Замечание по контрольным суммам из прошлого ревью закрыто. + +**Содержательная часть — не принято.** Проверял по `origin/main`, а не по отчёту. Диф совпадает с тем, что я ревьюил (551 против 550 additions), и главное замечание в него не вошло: + +| Проверка в `main` @ `89ef2fd` | Результат | +|---|---| +| Хостед-сервисы в `Program.cs:61-62` | только `LinkExpirationBackgroundService` и `ControlMaintenanceBackgroundService` | +| Вызовы `ReconcileLinksForNodeAsync` | ровно один — `Program.cs:356`, обработчик heartbeat | +| `Control__LinkReconciliationSeconds` | отсутствует | +| `mesh.firewall-missing` / маркер от `firewall-restore` | отсутствуют | +| `(char)13` в `CompactError` | `LinkService.cs:339`, на месте | +| `ListLinksAsync().SingleOrDefault(...)` | `LinkService.cs:32`, `LinkService.cs:297` | + +Условие запуска реконсиляции не изменилось: + +```csharp +var reconnectThreshold = TimeSpan.FromSeconds(Math.Max(60, nextHeartbeatSeconds * 3)); // 90 с +var requiresReconciliation = previousStatus != "Online" + || previousLastSeenAt is null + || now - previousLastSeenAt >= reconnectThreshold; +``` + +Следовательно, в `main` по-прежнему открыты сценарии, ради которых Block B и делался: + +1. `ochenstarik-smm-emergency firewall-restore` — правила стёрты, **ни один Node не уходил в offline**, реконсиляция не запускается. В Desktop: «Расхождение: нет». Фактически трафик заблокирован. `docs/linux-bootstrap.md:111` продолжает обещать переприменение, которого нет. +2. Ручной `systemctl restart ochenstarik-smm-firewall`. +3. Перезапуск Hub с простоем < 90 с (перезапуск сервиса, быстрый reboot VM, `update-control`). +4. Link, оба участника которого не переподключались. + +**Критерий выхода B6 не выполнен. Block B остаётся открытым**, несмотря на merge. Раздел 1 этой задачи — его остаток, а не новая функциональность. + +Отдельно: physical acceptance не выполнялся ни разу за две задачи, потому что не выданы `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE`. Это внешний блокер, который снимается только вашим решением. Пока он не снят, ни один критерий, формулируемый через фактическую связность, закрыть нельзя — CI это не заменяет. + +--- + +## 1. Блок B-2 — остаток Block B (обязательный) + +### B2-1. Фоновая реконсиляция, не привязанная к переподключению Node + +Новый `LinkReconciliationBackgroundService : BackgroundService`, регистрируется третьим в `Program.cs`. + +- Настройка `Control__LinkReconciliationSeconds` в `ControlOptions`, валидация в цепочке `.Validate(...)` наравне с прочими (диапазон 30…3600, по умолчанию 300), значение в `appsettings.json`. +- Один проход при старте — после `store.InitializeAsync()`, до начала обслуживания запросов не обязателен, но первый тик должен быть немедленным, а не через интервал. +- Проход идёт по **всем действующим политикам** (`DesiredState = Active`, либо `DesiredState = Disabled` при `ActualState != "Disabled"`), а не по Link конкретного Node. +- Порядок блокировок сохранить существующий: node-локи (отсортированные) → per-Link gate. Никаких новых классов блокировок. +- Актор — `system:reconcile`. +- События: при фактическом восстановлении публиковать `link.reapplied`, при удалении правила без записи в БД — `link.orphan-removed`. Существующие `link.reconciling` / `link.active` / `link.disabled` / `link.failed` / `link.partial` сохранить. +- Не чаще одного полного прохода за интервал независимо от внешних триггеров. + +**Обязательный сопутствующий рефакторинг.** Логика «прочитать текущее состояние → сравнить факт с desired → применить → проверить → сохранить» сейчас существует в трёх экземплярах: `CreateAsync`, `ReconcileLinksForNodeAsync`, `ConvergeDisabledCoreAsync`. Четвёртая копия в фоновом сервисе недопустима. Свести к одному методу вида + +```csharp +private async Task ConvergeAsync( + LinkPolicy link, bool expectedConnected, string actor, CancellationToken ct) +``` + +и вызывать его из всех четырёх мест. + +### B2-2. «Таблицы нет» ≠ «правил ноль» + +Сейчас при отсутствии таблицы `link-status` завершается кодом 78, исключение ловится поштучно, и каждая политика по очереди получает `Failed`/`Partial` с текстом ошибки helper'а. Оператор видит N разных ошибок вместо одной причины. + +1. `deploy/ochenstarik-smm-policy-apply`: отличать «таблица/цепочка недоступна» от «правило не найдено» — отдельный exit code (например 79) и стабильный маркер в stderr. Сохранить fail-closed поведение: неизвестная ошибка `nft` по-прежнему не должна читаться как «правил нет». +2. `LinkPolicyApplier`: типизированное `MeshFirewallUnavailableException` по этому коду. +3. Сервис реконсиляции: при таком исключении — **прервать проход**, один раз опубликовать `mesh.firewall-unavailable`, перевести затронутые политики в `Partial` с единым кодом ошибки, повторить с backoff. Никаких массовых попыток применения в несуществующую таблицу. +4. Desktop: один баннер «Mesh firewall не загружен» вместо N строк с ошибками. + +### B2-3. Маркер внеочередной реконсиляции + +1. `ochenstarik-smm-emergency firewall-restore` и `mesh-enable` создают `/var/lib/ochenstarik-server-monitor-manager/mesh/reconcile-requested` (root, `0600`). +2. Фоновый сервис на каждом тике проверяет маркер, при наличии выполняет внеочередной проход и удаляет маркер **только после успешного завершения**. +3. Контрактная проверка в `tests/bootstrap/test-bootstrap-contract.sh` — как для остальных инвариантов emergency-команды. + +### B2-4. Тесты + +- **Unit:** все правила стёрты (fake applier: `IsConnected == false` для всех), **ни одного heartbeat** → фоновый проход выполняет N connect и приводит `ActualState` к `Active`. Это тот самый тест, который ловит текущий пробел; без него блок не принимается. +- **Unit:** правило существует, `DesiredState = Disabled` → disconnect + `link.orphan-removed`. +- **Unit:** firewall unavailable → ноль мутаций, событие опубликовано один раз, затронутые в `Partial`. +- **Unit:** два прохода подряд без изменений → ноль вызовов helper во втором. +- **Integration** в стиле `LinkPolicyApplierIntegrationTests`: удалить маркер `connected`, выполнить проход, сверить точную последовательность вызовов helper. +- **Acceptance** (`tests/acceptance/three-server-mesh.sh`): новый шаг — на Hub выполнить `emergency firewall-restore` (или `nft delete table` + `systemctl start ochenstarik-smm-firewall`) **без перезапуска Node**, выждать интервал реконсиляции, затем `expect_reachable "$HOME_WG_IP"`, `expect_blocked "$SECOND_WG_IP"` и `expect_factual_status` для обоих. + +### B2-5. Критерий приёмки блока + +Правила nftables стёрты при полностью живых Node → связность по всем `DesiredState=Active` восстанавливается автоматически не позднее одного интервала реконсиляции; `Disabled` остаются заблокированными; правил без записи в БД не остаётся; расхождение видно в Desktop до момента устранения. Подтверждается unit-тестом **и** прогоном acceptance-скрипта на реальной тройке. + +--- + +## 2. Блок B-3 — техдолг из ревью (в том же PR или следующем, до закрытия Block B) + +| ID | Что | Где | +|---|---|---| +| M1 | Опубликовать `GetLinkAsync(string id, CancellationToken)` — приватный `ReadLinkAsync(id)` уже есть — и заменить им поиск по id полным перечислением. Сейчас O(N) чтений и десериализаций **под захваченной блокировкой**, что ударит по нагрузочному тесту Этапа 5. | `ControlStore.cs:1460`; `LinkService.cs:32`, `297`; цикл в `ReconcileLinksForNodeAsync` | +| M2 | `LinkReconciliationResult.Reconciled` теперь означает «рассмотрено», а не «приведено в порядок» (тест ожидает `(1, 0)` при нуле вызовов helper). Развести на `Examined` / `Converged` / `Failed`. | `LinkService.cs` | +| M4 | Фильтр на Links-странице снят, retention для таблицы `links` нет (чистятся только `metric_samples`, `idempotency`, `audit`, токены) — страница превращается в журнал. Нужен фильтр по умолчанию «действующие + расхождения» с переключателем либо retention для завершённых Disabled-политик. | `MainPage.xaml.cs`, `ControlMaintenance.cs` | +| M5 | Проба статуса для зарезервированного, но не активированного в mesh Node падает через `lookup_node_ip` и перебрасывает Link в `Failed` на каждом проходе. Отличать «Node ещё не активирован» от «helper сломан». | `ochenstarik-smm-policy-apply`, `LinkService` | +| L1 | `Split([(char)13, '\n'], …)` вернуть к `Split(['\r', '\n'], …)` — это то же самое, но нечитаемо; похоже на артефакт инструмента. | `LinkService.cs:339` | + +M1 и L1 — дешёвые, делать сразу. M4 влияет на пригодность UI и требует решения о retention — вынести отдельным PR можно, но до объявления Block B закрытым. + +--- + +## 3. Блок C — доверенная поставка (после закрытия B-2) + +Полное описание — `smm-task-2-2026-07-31.md`, раздел 3. Кратко: + +- **C1.** Manifest v2: хэши всех артефактов (bootstrap, оба `tar.gz`, MSIX), версии Control/Agent/helper/Desktop, минимальные совместимые версии, `helper_protocol`. +- **C2.** Подпись (`cosign sign-blob` keyless либо `minisign`); публичный ключ/issuer **вшит константой** в bootstrap и Desktop, не скачивается вместе с релизом. Отсутствие инструмента проверки — отказ, не предупреждение. +- **C3.** `verify_archive` сверяет хэш с manifest, а не с соседним `.sha256`; старый путь только под явным `SMM_ALLOW_UNSIGNED=1`. Новое действие `verify-manifest`. Отказ `update-*` при несовместимой паре версий. `PROGRAM_VERSION` подставляется из тега при упаковке вместо `0.2.0-dev`. +- **C4.** Пиннинг GitHub Actions по commit SHA (сейчас плавающие `@v6`, `@v5`, `@v2`), `dependabot.yml` для `github-actions` и `nuget`, сужение `permissions: contents: write` до job'а публикации, SBOM в артефакты релиза. +- **C5.** Негативные тесты в CI: изменённый байт в архиве, подменённый хэш в manifest без переподписи, manifest без подписи — все три отвергаются. + +--- + +## 4. Порядок и Definition of Done + +**Порядок:** B2-1 → B2-2 → B2-3 → B2-4 (в одном PR, это единая функция) → B-3 (M1, L1 в том же PR; M2, M4, M5 — отдельным) → physical acceptance → Блок C. + +**DoD задачи 3:** + +- [ ] Фоновая реконсиляция работает при старте и по интервалу, не завися от переподключения Node +- [ ] Unit-тест «правила стёрты, heartbeat не приходил → связность восстановлена» проходит +- [ ] Недоступный mesh firewall даёт одно событие и одно понятное состояние, а не N ошибок +- [ ] `emergency firewall-restore` приводит к внеочередной реконсиляции +- [ ] Логика сходимости существует в одном экземпляре, а не в четырёх +- [ ] `docs/linux-bootstrap.md:111` соответствует реализации +- [ ] M1, L1 исправлены; по M2, M4, M5 принято решение (сделать либо явно перенести с обоснованием) +- [ ] **Physical acceptance `three-server-mesh.sh` c `SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1` выполнен** — иначе B6 остаётся открытым +- [ ] Далее: Блок C по разделу 3 + +--- + +## 5. Процесс + +Две вещи, которые стоит изменить в способе работы, — обе подтвердились на Block B. + +**Независимому review отдавать текст задачи, а не только диф.** Оба review Block B были корректны по существу написанного кода и оба пропустили, что половина требований блока не реализована. Первый проверял «безопасно ли коммитить этот диф», второй — «закрыты ли две HIGH». Полноту относительно постановки не проверял никто, и блок ушёл в `main` с открытым основным критерием. + +**Критерий выхода блока не равен merge.** Block B помечен выполненным на основании зелёного CI и APPROVE, тогда как его собственный критерий B6 сформулирован через фактическую связность и не проверялся. Пока physical acceptance заблокирован отсутствием topology inputs, блоки, чьи критерии формулируются через факт, следует помечать как `merged, acceptance pending`, а не как закрытые. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-B3-spec-2026-08-03.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-B3-spec-2026-08-03.md new file mode 100644 index 0000000..2125d11 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-B3-spec-2026-08-03.md @@ -0,0 +1,163 @@ +# ТЗ: Block B-3 — реконсиляция от факта и техдолг Link-политик + +Репозиторий: `ochenstarik-ui/server-monitor-manager` +База: `main` @ `b11c277ac7f79a18670932eca4622982d9ff48e0` +Предшествующие блоки: B (PR #11), B-2 (PR #12) — оба merged, physical acceptance pending. + +Этот документ самодостаточен. Всё, что нужно исполнителю, здесь; предыдущие документы читать не обязательно. + +--- + +## 1. Контекст + +Control уже умеет приводить Link-политики к желаемому состоянию: есть `LinkReconciliationBackgroundService` (немедленный проход при старте + периодический по `Control__LinkReconciliationSeconds`), единый `ConvergeAsync`, типизированное состояние `mesh.firewall-unavailable` с backoff и generation-маркер внеочередной реконсиляции от `ochenstarik-smm-emergency`. + +Проход устроен **от базы к факту**: берётся список действующих политик, и для каждой вызывается helper — `link-status`, затем при расхождении `link-connect`/`link-disconnect`, затем повторный `link-status`. Отсюда два системных ограничения, которые и закрывает этот блок. + +--- + +## 2. Scope + +### B3-1 — `link-list` в policy-helper (высокий приоритет) + +Новое действие в `deploy/ochenstarik-smm-policy-apply`, возвращающее **все** правила управляемой цепочки одним вызовом. + +- Арность: ровно 1 аргумент (`link-list`), проверяется до всего остального, как у `reconcile-status`. +- Источник: та же цепочка `inet ochenstarik_smm links`, через существующий `inspect_firewall` — то есть недоступная таблица по-прежнему даёт exit 79 и точный маркер `mesh.firewall-unavailable` в stderr, а неизвестная ошибка `nft` остаётся fail-closed с exit 78. +- Разбирать только правила с комментарием вида `smm::::`; чужие правила в цепочке игнорировать и **никогда** не трогать. +- Формат вывода — стабильный, машиночитаемый, по одной записи в строке: `sourcetargetprotocolport`. Порядок не гарантируется, дубликаты допустимы (одинаковый comment может встретиться несколько раз — это тоже подлежит вычистке). +- Пустая цепочка — пустой вывод и exit 0. Это отличается от «таблицы нет» (exit 79). +- Значения из comment валидировать теми же паттернами, что и аргументы действий (`node_pattern`, `tcp|udp`, порт 1…65535). Строка, не прошедшая валидацию, не выводится, но фиксируется в stderr как диагностика — она означает, что кто-то подделал comment. +- Режим `SMM_POLICY_TESTING=1` поддержать по образцу существующих действий, чтобы контрактный тест работал без root и без nftables. + +`sudoers` менять не нужно — шаблон `$POLICY_HELPER *` уже покрывает новое действие. + +### B3-2 — развернуть проход реконсиляции на факт → база (высокий приоритет) + +`LinkService.ReconcileAllAsync` переписать так, чтобы источником истины о факте был один вызов `link-list`, а не `2N` вызовов `link-status`. + +Алгоритм прохода: + +1. Один `link-list` → множество фактических правил. +2. Один `ListEffectiveLinksAsync` → множество действующих политик. +3. Сверка множеств по ключу `(source, target, protocol, port)`: + - **правилу не соответствует ни одна политика с `DesiredState=Active`** (политики нет вовсе, либо она `Disabled`) → удалить правило, событие `link.orphan-removed`, запись в audit; если политика в БД есть — привести её `ActualState` к `Disabled`; + - **политика `DesiredState=Active`, правила нет** → применить, проверить фактом, событие `link.reapplied`; + - **совпало** → мутаций нет, `ActualState` при необходимости синхронизировать без вызова helper. +4. Дубликаты одного и того же правила схлопывать до одного при `Active` и удалять полностью при `Disabled`. + +Требования: + +- **Снять ограничение `IsEligibleForFullReconciliation`.** Сейчас политика в состоянии `Disabled/Disabled` из прохода исключена, поэтому accept-правило для полностью отключённой политики не обнаруживается никогда — а это инвариант kill switch. После разворота прохода фильтр по состоянию в БД больше не нужен: orphan находится по факту, независимо от того, что записано в базе. +- Порядок блокировок сохранить существующий: отсортированные node-локи → per-Link gate. Новых классов блокировок не вводить. +- Единый `ConvergeAsync` остаётся единственной реализацией сходимости; отдельной копии логики для нового прохода быть не должно. +- Поведение при `mesh.firewall-unavailable` не меняется: проход прерывается, публикуется одно агрегированное событие, работает bounded backoff, маркер не потребляется. +- Стоимость прохода без расхождений: **один** привилегированный вызов. Это проверяемое требование, см. тесты. + +### B3-3 — ограниченный backoff для marker-пути (высокий приоритет) + +В `LinkReconciliationBackgroundService` наличие маркера полностью снимает регулярный throttle (`_nextRegularAt`), а сам маркер потребляется только при `Failed == 0`. `_backoffUntil` взводится лишь для `FirewallUnavailable`. Следствие: одна стабильно падающая политика — например Node, выпавший из `nodes.tsv`, где `lookup_node_ip` даёт exit 78, — навсегда удерживает маркер, и полный проход начинает выполняться на каждом poll-тике (30 с) без ограничения. + +Сделать: + +- счётчик неуспешных prompt-проходов подряд; после 3 попыток маркер перестаёт снимать регулярный throttle и проходы возвращаются к обычному интервалу; +- одно предупреждение в журнал при переходе в это состояние, с идентификаторами упавших политик, без повторов на каждом тике; +- счётчик сбрасывается при первом проходе с `Failed == 0` (тогда же маркер потребляется штатно); +- маркер по-прежнему **не** потребляется, пока проход не завершился без отказов. + +### B3-4 — M2: семантика результата реконсиляции (средний) + +`LinkReconciliationResult.Reconciled` сейчас означает «рассмотрено», а не «приведено в порядок»: тест ожидает `(1, 0)` при нуле вызовов helper. Развести на три поля — `Examined`, `Converged`, `Failed` — и обновить всех потребителей, включая журнал фонового сервиса и `Program.cs`. `LinkFullReconciliationResult` привести к той же схеме. + +### B3-5 — M4: Links-страница и retention (средний) + +Фильтр на странице Links снят в Block B, retention для таблицы `links` нет (в `ControlMaintenance` чистятся только `metric_samples`, `idempotency`, `audit` и токены). Страница превращается в журнал всех политик за всё время. + +Сделать **оба**: + +- Desktop: фильтр по умолчанию «действующие + расхождения» с явным переключателем «показать историю»; счётчики в заголовке считать по отображаемому набору и подписывать однозначно. +- Control: retention для завершённых политик — `DesiredState=Disabled` и `ActualState=Disabled`, старше настраиваемого срока; новая настройка в `ControlOptions` с валидацией, значение в `appsettings.json` и в `control.env` bootstrap, по образцу `LinkReconciliationSeconds`. Действующие политики и политики с расхождением не удалять никогда. + +### B3-6 — M5: не активированный в mesh Node (средний) + +`lookup_node_ip` не различает «Node зарезервирован, но `peer-add` ещё не выполнен» и «helper сломан»: в обоих случаях exit 78, и политика уходит в `Failed` на каждом проходе. Ввести отдельный код возврата и типизированное состояние: политика к неактивированному Node не является отказом применения, это ожидаемое промежуточное состояние. В Desktop показывать его отдельной формулировкой, а не ошибкой. + +### B3-7 — мелочи (низкий) + +- Helper: `reconcile-status` возвращает `complete`, если каталог `/var/lib/ochenstarik-server-monitor-manager/mesh` отсутствует. Сейчас `exec 9>"$RECONCILE_LOCK"` в несуществующем каталоге падает под `set -e`, и на Hub, где `mesh-init` ещё не выполнялся, Control пишет предупреждение каждые 30 секунд. +- Helper: явная проверка `[[ -x /usr/sbin/nft ]]` с отдельным сообщением. Сейчас отсутствующий бинарь даёт ту же строку `No such file or directory`, что и отсутствующая таблица, и классифицируется как `mesh.firewall-unavailable`. +- `tests/acceptance/three-server-mesh.sh`: переформатировать блок `probe_factual_status` / `expect_factual_status` — перемешаны отступы 4 и 2 пробела, закрывающая скобка внесена внутрь тела. Поведение верное, `bash -n` проходит; вопрос читаемости. + +--- + +## 3. Тесты + +**Обязательные, без них блок не принимается:** + +1. Accept-правило существует, соответствующая политика в состоянии `Disabled/Disabled` → проход удаляет правило и публикует `link.orphan-removed`. Это тот случай, который сегодня не обнаруживается вовсе. +2. Accept-правило существует, политики в БД нет ни в каком виде → правило удалено. +3. Проход без расхождений выполняет **ровно один** привилегированный вызов (`link-list`) и ноль мутаций. Проверять по счётчику вызовов фейкового applier либо по журналу вызовов в интеграционном тесте. +4. Правило с чужим comment в той же цепочке не трогается ни при каких условиях. +5. Дубликат правила с одинаковым comment: при `Active` остаётся один, при `Disabled` не остаётся ни одного. +6. Политика, падающая всегда, при висящем маркере не вызывает более одного прохода за интервал после исчерпания попыток; маркер при этом не потребляется. +7. `link-list` при отсутствующей таблице → exit 79, проход прерван, одно агрегированное событие, ноль мутаций, маркер сохранён. +8. Retention удаляет завершённую Disabled-политику старше срока и **не** удаляет действующую и политику с расхождением. + +**Контрактные (`tests/bootstrap/test-bootstrap-contract.sh`):** арность `link-list`, формат вывода на фикстуре, игнорирование чужого comment, отказ на подделанном comment, `reconcile-status` при отсутствующем каталоге mesh. + +**Acceptance (`tests/acceptance/three-server-mesh.sh`):** новый шаг под `SMM_ACCEPT_RESTORE=1` — вручную добавить на Hub accept-правило для отключённой политики (`link-connect` через helper напрямую), дождаться прохода, убедиться, что правило снято и `expect_blocked` для соответствующего Node выполняется. Шаг ставить рядом с существующим шагом firewall-restore. + +--- + +## 4. Definition of Done + +- [ ] Проход реконсиляции обнаруживает и снимает accept-правило, которому не соответствует действующая политика `Active`, **включая случай `Disabled/Disabled`** +- [ ] `IsEligibleForFullReconciliation` удалён, а не расширен +- [ ] Проход без расхождений — один привилегированный вызов; подтверждено тестом +- [ ] Чужие правила в цепочке не затрагиваются; подтверждено тестом +- [ ] Стабильно падающая политика не вызывает более одного прохода за интервал +- [ ] `Examined` / `Converged` / `Failed` разведены, потребители обновлены +- [ ] Links-страница читаема при сотнях исторических политик; retention настраивается и не трогает действующие политики +- [ ] Неактивированный в mesh Node не отображается как ошибка применения политики +- [ ] Логика сходимости существует в одном экземпляре +- [ ] Порядок блокировок не изменён, новых классов не введено +- [ ] B3-7 закрыты +- [ ] `docs/roadmap.md` обновлён: B-3 отмечен, M2/M4/M5 сняты из отложенных +- [ ] CI зелёный на PR + +--- + +## 5. Вне scope + +- Блок C (подписанный manifest, совместимость версий, пиннинг Actions) — отдельная задача после B-3. +- Провиженинг, роль Monitor в bootstrap, MVVM-рефакторинг Desktop, локализация — задачи следующего уровня. +- Physical acceptance — внешний блокер, см. раздел 7. + +--- + +## 6. Формат сдачи + +Как в предыдущих блоках: + +- `REPORT.md` — статус, база, коммиты, PR, ссылки, что реализовано, что отложено и почему; +- `TEST_EVIDENCE.md` — фактические результаты прогонов и честный список невыполненного; +- патч и/или zip изменённых файлов; +- `CI_CHECKS.txt` — имена, длительности и URL всех проверок; +- `INDEPENDENT_REVIEW.md`; +- `SHA256SUMS` — считать **последним действием**, после всех правок отчётов, и включать все файлы пакета. + +Независимому review передавать **полный текст этого ТЗ**, а не только диф. На двух предыдущих блоках это дало находки того класса, который при diff-only ревью не ищется вовсе: пропущенные требования, а не ошибки в написанном коде. + +Статус блока по итогам merge формулировать как `merged / verified`, а не «выполнено», если хоть один критерий выражен через фактическую связность и не проверялся на реальной топологии. + +--- + +## 7. Внешний блокер + +Physical acceptance не выполнялся ни разу за три блока. Требуются `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE` и прогон + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh +``` + +Harness к этому готов и уже содержит сценарий `firewall-restore` без перезапуска Node. До прогона пункт «выполнить физический acceptance» Этапа 3 roadmap и критерий B6 остаются открытыми независимо от состояния CI. Исполнитель закрыть этот пункт не может. diff --git a/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-B3R-spec-2026-08-04.md b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-B3R-spec-2026-08-04.md new file mode 100644 index 0000000..58f2a9e --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/hermes-desktop-attachments/desktop-attachments/smm-task-B3R-spec-2026-08-04.md @@ -0,0 +1,204 @@ +# ТЗ: B-3R — репарация Block B-3 до пригодного к merge состояния + +Репозиторий реализации: `C:\Users\Ochenstarik\projects\server-monitor-manager-task3-b3` +Ветка: `hermes/task3-b3-fact-reconciliation`, база `b11c277`, изменения не закоммичены. +Исходное ТЗ: `smm-task-B3-spec-2026-08-03.md` — остаётся в силе целиком, этот документ его не заменяет, а добавляет условия приёмки. + +Пакет `Task3-B3-2026-08-04` — промежуточный (`STATUS-WIP.md` + первичный review), кода в нём нет. Проверку проводил по рабочей копии напрямую. + +--- + +## 1. Что подтверждено независимо + +Обе блокирующие находки первичного review — **реальны и в текущем состоянии рабочей копии не закрыты**. Проверял по коду, а не по отчёту. + +### B1 подтверждён + +`src/ServerMonitorManager.Control/LinkService.cs`: + +```csharp +:416 if (persisted) +:418 await VerifyFactualStateAsync(current, expectedConnected, cancellationToken); + +:431 else if (!persisted) +:433 current = current with { ActualState = completedState, LastError = null }; +``` + +DB-less orphan удаляется сырым `link-disconnect`, после чего успех **присваивается синтетическому объекту без единой проверки факта**. Доказательства, что все handles с этим comment исчезли, нет. + +Для persisted-политики проверка есть, но идёт через `link-status`, а `status_rule` по-прежнему вызывает `lookup_node_ip` для обоих узлов. Если Node отсутствует или не активирован, helper возвращает 80 **уже после успешного удаления правила**, и `ConvergeAsync:444-455` записывает `PendingActivation` / `mesh.node-not-activated`. + +Дальше в `ReconcileAllAsync:274-284` классификация такова, что `PendingActivation` не попадает ни в `Converged`, ни в `Failed`. Возможен результат `Examined=1, Converged=0, Failed=0`, при котором фоновый сервис видит `Failed == 0` и **потребляет marker**, хотя фактический результат не подтверждён. + +### B2 подтверждён + +`deploy/ochenstarik-smm-policy-apply:37-44`: + +```bash +lookup_node_ip() { + record="$(awk -F '\t' -v node="$node_id" '$1 == node { print; exit }' "$STATE_FILE")" + [[ -n "$record" ]] || node_not_activated + ip="$(awk -F '\t' '{ print $2 }' <<<"$record")" + [[ "$ip" =~ $ipv4_pattern ]] || fail "node has no valid mesh address: $node_id" +``` + +Читается только второе поле. Четвёртое — статус — не читается никогда. `reserve_node_address` пишет строку `node10.77.0.x-reserved`, `peer-add` меняет статус на `active`. Значит зарезервированный, но не активированный Node проходит проверку, и `link-connect` создаёт accept-правило. Exit 80 возникает только при полном отсутствии строки — случай, которого в реальной топологии не бывает, потому что строку создаёт сам `node-code`. + +Новый тест моделирует именно отсутствующую строку и поэтому дефект не ловит. Воспроизведение ревьюера на production-shaped фикстуре считаю корректным. + +### Что уже сделано правильно и ломать не надо + +- `disconnect_rule` больше не вызывает `lookup_node_ip` — удаление правила перестало зависеть от `nodes.tsv`. Это верное направление, сохранить. +- `list_rules` разбирает только managed-comment, проверяет арность 5 полей, node-паттерны, протокол и диапазон порта, отбрасывает подделки в stderr, чужие правила не выводит. +- `reconcile-status` возвращает `complete` при отсутствующем каталоге mesh; добавлена явная проверка `-x /usr/sbin/nft`; режим `SMM_POLICY_LISTING_FILE` для контрактных тестов. +- `Examined` / `Converged` / `Failed` разведены, `FailedPolicyIds` пробрасывается. + +--- + +## 2. Обязательные исправления + +### R1 — верификация факта только через `link-list` (закрывает B1) + +Корень дефекта: проход стал fact-first, а верификация осталась per-link через `link-status`. Отсюда и пропуск проверки для DB-less, и зависимость от `nodes.tsv`, и лишние привилегированные вызовы. + +Сделать: + +1. `VerifyFactualStateAsync` переписать на `link-list`: считать число записей с ключом `(source, target, protocol, port)`. + - ожидается `Active` → **ровно 1**; + - ожидается `Disabled` или DB-less orphan → **ровно 0**; + - любое иное число — отказ применения с явным кодом. +2. Убрать условие `if (persisted)` вокруг верификации. DB-less orphan проверяется теми же правилами, что и persisted. +3. Убрать присваивание `current with { ActualState = completedState }` без предшествующей проверки. Синтетический объект имеет право получить `Disabled` только после подтверждённого нуля записей. +4. Верификация удаления **не должна** зависеть от наличия узла в `nodes.tsv`. `link-list` этого не требует — после перехода зависимость исчезает сама. +5. Оптимизация, которую даёт этот же переход: в проходе выполнять **один** финальный `link-list` после всех мутаций и сверять по нему все затронутые ключи разом, вместо вызова на каждую мутацию. Требование «проход без расхождений — один привилегированный вызов» из B3-2 сохраняется; для прохода с `k` мутациями допускается ровно два вызова (стартовый и верифицирующий). + +### R2 — исчерпывающая классификация результата (закрывает вторую половину B1) + +Ввести явный третий класс — `Deferred` — и инвариант: + +``` +Converged + Failed + Deferred == Examined +``` + +Инвариант проверять в коде (нарушение — исключение либо `LogError` с идентификаторами) и отдельным тестом. Ни одно состояние не должно молча выпадать из классификации. + +**Решение, которое нужно принять явно, потому что иначе оно будет принято неправильно:** + +- `PendingActivation` — это `Deferred`, а не `Failed`. Это ожидаемое устойчивое состояние: Node зарезервирован, `peer-add` ещё не выполнен, и так может продолжаться сутками. +- `Deferred` **не блокирует** потребление marker. Иначе один зарезервированный Node навсегда удержит маркер и вернёт ровно тот бесконечный цикл проходов каждые 30 секунд, который был закрыт в B-2 и B3-3. +- Marker блокирует только `Failed`, и на него уже действует ограничение в три попытки. +- `Deferred` обязан быть видимым: отдельное событие (`link.pending-node-activation` уже есть), отдельная подпись в Desktop, отражение в журнале прохода. Ошибкой не называется. + +`LinkFullReconciliationResult` и `LinkReconciliationResult` дополнить полем `Deferred` и списком `DeferredPolicyIds` по образцу `FailedPolicyIds`. + +### R3 — читать статус узла в `lookup_node_ip` (закрывает B2) + +Разбирать минимум два поля — адрес и статус — и различать три исхода: + +| Строка в `nodes.tsv` | Результат | +|---|---| +| статус `active`, валидный IPv4 | успех | +| статус `reserved` (или любой не-`active`) | exit **80**, точный маркер `mesh.node-not-activated` | +| статус `active`, IP пустой или невалидный | exit **78** — повреждённое состояние, fail-closed | +| строки нет вовсе | exit **80** | + +Неизвестное значение статуса трактовать как не-`active` только если оно проходит валидацию формата; мусор в поле — это exit 78, а не 80. Fail-closed при сомнении. + +Тесты обязаны использовать **production-shape** фикстуру из четырёх полей, разделённых табуляцией: + +``` +source 10.77.0.2 key-source active +target 10.77.0.3 - reserved +``` + +Три случая: `reserved` + валидный IP → 80; `active` + валидный IP → успех; `active` + невалидный IP → 78. Тест на полностью отсутствующую строку сохранить, но он не заменяет перечисленные. + +### R4 — source-generated сериализация orphan audit (H1) + +Заменить анонимный тип в `ControlStore.cs:1376-1398` именованным DTO, добавить его в source-generated JSON-контекст Control и сериализовать через `Context.Default.`. Мотив не в предупреждениях компилятора, а в том, что отказ произойдёт **после** мутации firewall и **после** публикации `link.orphan-removed`, дав противоречивую телеметрию. + +Дополнительно к тому, что предложил review: проверить не локально, а прогоном опубликованного `linux-x64 PublishTrimmed` артефакта по orphan-пути и сверкой содержимого audit-записи. Разово, руками, с приложением вывода в `TEST_EVIDENCE.md`. + +Порядок операций зафиксировать явно: запись audit — до публикации финального события успеха. + +### R5 — Linux integration test на новый протокол (H2) + +`tests/ServerMonitorManager.Control.Tests/LinkPolicyApplierIntegrationTests.cs` остался на протоколе `link-status`-first: fake helper не реализует `link-list`, ожидаемый журнал вызовов начинается с `link-status`. На Windows тест выходит по `OperatingSystem.IsLinux() == false`, поэтому заявленные локальные 85/85 дефект не показывают, а `linux-control-agent.yml` гоняет Control-тесты на Ubuntu, где пропуска не будет. + +Сделать: + +- реализовать `link-list` в fake helper; +- переписать ожидаемый журнал на fact-first протокол; +- проверить: no-drift → ровно один `link-list`; отсутствующая таблица классифицируется прямо на `link-list` без промежуточной мутации; мутация сопровождается финальной верификацией через `link-list`; DB-less raw disconnect проходит верификацию; +- прогнать Control suite **на Linux**, а не только на Windows. + +Пока это не сделано, утверждение «CI зелёный» не имеет оснований: PR не создан, Linux-прогон не выполнялся. + +### R6 — убрать fail-open default в интерфейсе (M1) + +`ILinkPolicyApplier.ListRulesAsync` с телом по умолчанию, возвращающим пустой список, означает, что забытая реализация молча сообщает «firewall пуст» — для источника истины о факте это худший из возможных дефолтов, и он уже позволил старым test doubles скомпилироваться без нового протокола. Сделать `ListRulesAsync` и raw `ApplyDisconnectAsync(LinkRule, …)` обязательными членами интерфейса, все test doubles обновить явно. + +### R7 — читаемость вложенных scope (L1) + +Переформатировать `LinkService.cs:181-229` и `240-293` либо вынести обработку одного tuple и одного orphan в приватные методы без дублирования логики сходимости. Порядок блокировок `sorted node locks → per-Link gate` должен быть виден глазами, а не восстанавливаться разбором отступов. + +--- + +## 3. Дополнительные тесты к обязательным из исходного ТЗ + +1. DB-less orphan: helper сообщает успех удаления, но правило осталось → проход обязан классифицировать это как `Failed`, а не как успех. +2. Persisted `Disabled`, узел отсутствует в `nodes.tsv` → удаление подтверждается через `link-list`, состояние становится `Disabled`, а не `PendingActivation`. +3. Marker не потребляется, если хоть один элемент попал в `Failed`; потребляется, если остались только `Converged` и `Deferred`. +4. Инвариант `Converged + Failed + Deferred == Examined` на смешанном наборе из шести политик. +5. Проход с `k` мутациями выполняет ровно два привилегированных вызова `link-list`. +6. Production-shape `reserved` → exit 80 (см. R3). +7. Зарезервированный Node в течение десяти последовательных проходов: `Deferred` каждый раз, marker потребляется, число проходов не превышает расписание. + +--- + +## 4. Definition of Done B-3R + +- [ ] Верификация факта выполняется только через `link-list`, счётом записей, одинаково для persisted и DB-less +- [ ] Синтетический успех без проверки факта отсутствует в коде +- [ ] Верификация удаления не зависит от `nodes.tsv` +- [ ] `Converged + Failed + Deferred == Examined` выполняется и проверяется тестом +- [ ] `PendingActivation` классифицирован как `Deferred`, marker им не блокируется, состояние видно в UI и журнале +- [ ] `lookup_node_ip` читает статус; `reserved` → 80, `active` + битый IP → 78; тесты на production-shape фикстуре +- [ ] orphan audit сериализуется через source-generated контекст; проверено на опубликованном trimmed артефакте +- [ ] Linux integration test переведён на fact-first протокол и **прогнан на Linux** +- [ ] `ListRulesAsync` и raw disconnect — обязательные члены интерфейса +- [ ] Все пункты DoD исходного ТЗ B-3 по-прежнему выполняются +- [ ] PR создан, CI зелёный — впервые для этой ветки +- [ ] Финальный независимый review получает **полный текст исходного ТЗ B-3 и этот документ**, а не только диф + +--- + +## 5. Формат сдачи + +Как в предыдущих блоках: `REPORT.md`, `TEST_EVIDENCE.md`, патч и/или ZIP, `CI_CHECKS.txt`, финальный `INDEPENDENT_REVIEW.md`, `SHA256SUMS` — считать последним действием, после всех правок отчётов, включая все файлы пакета. + +Промежуточный пакет из двух файлов, как сейчас, — нормальная практика для отчёта о ходе работ, если он так и назван. Финальный обязан быть полным. + +Статус по итогам merge формулировать как `merged / verified, physical acceptance pending`. + +--- + +## 6. Оценка первичного review + +Обе блокирующие находки верны, воспроизведение B2 корректно, разбор границ безопасности содержательный. Ревьюер честно указал, что `dotnet` в его окружении отсутствует и заявленные 85/85 он не воспроизводил — и именно из этого сделал правильный вывод про H2, что Linux-прогон обязателен. Это ровно тот способ работы, который нужен. + +Практика передачи ревьюеру полного текста ТЗ продолжает окупаться: B2 и H2 — пропущенные требования, а не ошибки в написанном коде, при diff-only ревью они не находятся. + +--- + +## 7. Внешний блокер, без изменений + +Physical acceptance не выполнялся ни разу за четыре блока. Нужны `HUB_SSH_HOST`, `HUB_SSH_USER`, `SOURCE_SSH_HOST`, `SOURCE_SSH_USER`, `HOME_WG_IP`, `SECOND_WG_IP`, `SSH_IDENTITY_FILE` и прогон + +```bash +SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh +``` + +Harness готов и содержит и firewall-restore, и инъекцию orphan-правила. Критерий B6 и пункт «выполнить физический acceptance» Этапа 3 roadmap до этого прогона остаются открытыми при любом состоянии CI. Исполнитель закрыть их не может. + +Следующий блок после B-3R — **Блок C**, доверенная поставка, по разделу 3 документа `smm-task-4-2026-08-03.md`. diff --git a/agents/hermes/notes/salvage-2026-08-18/release-alpha10.patch b/agents/hermes/notes/salvage-2026-08-18/release-alpha10.patch new file mode 100644 index 0000000..f529d65 --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/release-alpha10.patch @@ -0,0 +1,260 @@ +diff --git a/README.md b/README.md +index 39ce4d5..7c29b76 100644 +--- a/README.md ++++ b/README.md +@@ -57,9 +57,9 @@ tests/ Control-plane tests + docs/ Architecture, security, roadmap, translations + ``` + +-Self-contained Control and Agent binaries are published with [Server Monitor Manager releases](https://github.com/ochenstarik-ui/server-monitor-manager/releases). The project-owned Linux bootstrap is specified but is not yet included in the current alpha release. Until it is implemented, checksummed, and tested, the project does not publish a one-command Hub/Node installation instruction. ++Self-contained Control and Agent binaries are published with [Server Monitor Manager releases](https://github.com/ochenstarik-ui/server-monitor-manager/releases). The tracked convenience installer, `deploy/smm-setup.sh`, and the project-owned bootstrap are released with standalone SHA-256 checksums; the installer downloads only same-tag bootstrap assets and verifies the bootstrap checksum before execution. The release workflow also publishes the signed compatibility manifest and checksummed platform artifacts. + +-The planned bootstrap, helper, schemas, and compatibility manifest will be maintained and released only from this repository. See the [Linux bootstrap contract](docs/installer-contract.md). Do not use an installer from another project as a Server Monitor Manager component. ++The bootstrap, helper, schemas, and compatibility manifest are maintained and released only from this repository. See the [Linux bootstrap contract](docs/installer-contract.md). Do not use an installer from another project as a Server Monitor Manager component. + + The `SMMDEV1` flow enrolls the Windows application: the app creates its operator key locally, confirms the Hub CA fingerprint, obtains a separate certificate, and protects it with Windows DPAPI. + +@@ -98,11 +98,11 @@ In the application, generate or copy the monitoring SSH key, add the Hub profile + + ## Current status + +-`v0.1.0-alpha.5` is an early testing release, not a production security appliance. Windows and Linux builds, control-plane tests, a test-signed x64 MSIX, self-contained `linux-x64`/`linux-arm64` artifacts, and SHA-256 checksums are automated in GitHub Actions. ++`v0.1.0-alpha.10` is the current testing prerelease, not a production security appliance. Windows and Linux builds, control-plane tests, a test-signed x64 MSIX, self-contained `linux-x64`/`linux-arm64` artifacts, the tracked checksum-verifying bootstrap, SHA-256 checksums, and the signed compatibility manifest are automated in GitHub Actions. + + The current development branch implements dedicated Windows pages for Servers, Links, Sessions, and Settings; SSH monitoring; directional Links; one-time enrollment; separate mTLS Agent, Operator, and source-scoped Automation identities; certificate revocation/re-enrollment; SQLite control state; audit; authenticated event streaming; Windows Control API integration; and a bounded durable Agent buffer with downsampling. + +-Reconnect reconciliation is implemented with a durable SQLite marker: after a Node returns, the Hub reapplies the latest effective disabled policies and clears the marker only after the firewall confirms success. Control also expires TTL Links through the firewall helper, prunes bounded operational data, versions its SQLite schema, and creates verified backups of SQLite state and the Control CA. The Provisioning control plane persists versioned jobs, enforces TTL/audit/idempotency and one active job per Node, and supports confirmation, progress, reconciliation, retry, and rollback states. A restricted root helper accepts only versioned, module-hashed allowlisted requests through a local Unix socket. It executes read-only Linux `preflight` and builds a deterministic, non-mutating `system.base-install` plan from catalog-backed parameters. Control independently validates and stores that immutable plan before the job enters `AwaitingConfirmation`. After confirmation, Control can issue an idempotent, audited, two-minute ECDSA execution grant bound to the exact job, Node, plan hash, and Control CA; confirmed base-install jobs remain safely queued until the helper consumes this grant and factual verification is implemented. Typed desired and factual states are persisted, versioned, idempotent, and compared through fixed drift codes exposed to Operators. CI exercises process boundaries, authorization, Agent parsing, Desktop contracts, and concurrent heartbeat/replay. Still required are mutating Provisioning actions with factual-state verification, physical WireGuard/nftables/reboot acceptance, trusted public code signing, Xray, and clients for additional platforms. ++Reconnect reconciliation is implemented with a durable SQLite marker: after a Node returns, the Hub reapplies the latest effective disabled policies and clears the marker only after the firewall confirms success. Control also expires TTL Links through the firewall helper, prunes bounded operational data, versions its SQLite schema, and creates verified backups of SQLite state and the Control CA. The Provisioning control plane persists versioned jobs, enforces TTL/audit/idempotency and one active job per Node, and supports confirmation, progress, reconciliation, retry, and rollback states. A restricted root helper accepts only versioned, module-hashed allowlisted requests through a local Unix socket. It executes read-only Linux `preflight` and builds a deterministic, non-mutating `system.base-install` plan from catalog-backed parameters. Control independently validates and stores that immutable plan before the job enters `AwaitingConfirmation`. After confirmation, Control can issue an idempotent, audited, two-minute ECDSA execution grant bound to the exact job, Node, plan hash, and Control CA; confirmed base-install jobs remain safely queued until the helper consumes this grant and factual verification is implemented. Typed desired and factual states are persisted, versioned, idempotent, and compared through fixed drift codes exposed to Operators. CI exercises process boundaries, authorization, Agent parsing, Desktop contracts, and concurrent heartbeat/replay. Still required are mutating Provisioning actions with factual-state verification, owner-run physical WireGuard/nftables/reboot acceptance, trusted Windows code signing, Xray, and clients for additional platforms. + + ## License and project policy + +diff --git a/deploy/smm-setup.sh b/deploy/smm-setup.sh +index 5ef182e..c2ecdcc 100644 +--- a/deploy/smm-setup.sh ++++ b/deploy/smm-setup.sh +@@ -3,7 +3,7 @@ set -Eeuo pipefail + IFS=$'\n\t' + + readonly PROGRAM_NAME="smm-setup" +-readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.9" ++readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.10" + readonly DEFAULT_REPOSITORY="ochenstarik-ui/server-monitor-manager" + readonly INNER_ASSET="ochenstarik-server-monitor-manager.sh" + +@@ -22,7 +22,7 @@ asset from the selected immutable GitHub release. Common commands: + backup-create | backup-restore | version + + Environment overrides: +- SMM_TAG Release tag (default: v0.1.0-alpha.9) ++ SMM_TAG Release tag (default: v0.1.0-alpha.10) + SMM_REPOSITORY GitHub repository (default: ochenstarik-ui/server-monitor-manager) + SMM_CACHE_DIR Verified-download cache directory + USAGE +diff --git a/docs/i18n/README.ar.md b/docs/i18n/README.ar.md +index 09c1f7f..1172dad 100644 +--- a/docs/i18n/README.ar.md ++++ b/docs/i18n/README.ar.md +@@ -32,7 +32,7 @@ sudo ./ochenstarik-server-monitor-manager.sh hub + + لا توجد كلمة مرور root مشتركة ولا يغادر مفتاح WireGuard الخاص عقدته. هويات monitoring وterminal وAgent وOperator وأتمتة AI منفصلة. يستخدم SSH أمراً إجبارياً بلا shell أو PTY أو forwarding؛ يقيّد mTLS الصلاحيات؛ تسمح nftables بالروابط الصريحة فقط؛ ويحفظ SQLite الحالة المطلوبة والتدقيق قبل تعديل الجدار الناري. + +-الإصدار `v0.1.0-alpha.4` للاختبار. يتضمن فرع التطوير الحالي عميل Windows ومثبت Hub/Node وLinks وmTLS وإلغاء الشهادات وإعادة التسجيل وSQLite والتدقيق والأحداث ومخزناً محدوداً دون اتصال مع downsampling. المتبقي: مصالحة إعادة الاتصال، اختبار 50–100 Node ومثبت Windows موقّع. ++الإصدار `v0.1.0-alpha.10` هو الإصدار التجريبي الحالي للاختبار. يتضمن المستودع bootstrap متتبّعاً مع checksum بتنسيق SHA-256 وcompatibility manifest موقّعاً. تبقى المصادقة الفعلية على أجهزة حقيقية وتوقيع Windows الموثوق قيد التنفيذ. + + ## الترخيص + +diff --git a/docs/i18n/README.de.md b/docs/i18n/README.de.md +index 5fe473d..a197edb 100644 +--- a/docs/i18n/README.de.md ++++ b/docs/i18n/README.de.md +@@ -32,7 +32,7 @@ sudo ./ochenstarik-server-monitor-manager.sh hub + + Es gibt kein gemeinsames Root-Passwort; der private WireGuard-Schlüssel bleibt auf dem Node. Monitoring-, Terminal-, Agent-, Operator- und KI-Automationsidentitäten sind getrennt. SSH nutzt einen forced-command ohne Shell/PTY/Forwarding; mTLS begrenzt Rollen; nftables erlaubt nur explizite Links; SQLite speichert Sollzustand und Audit vor der Firewalländerung. + +-`v0.1.0-alpha.4` ist eine Testversion. Der aktuelle Entwicklungszweig enthält Windows-Client, Hub/Node-Installer, Links, mTLS, Zertifikatswiderruf und erneute Registrierung, SQLite, Audit, Events, einen begrenzten Offline-Puffer mit Downsampling und dauerhaften Reconnect-Abgleich. Offen sind der Lasttest mit 50–100 Nodes und ein signierter Windows-Installer. ++`v0.1.0-alpha.10` ist die aktuelle Vorabversion für Tests. Ein versionierter Bootstrap mit SHA-256-Prüfsumme und signiertem Kompatibilitätsmanifest ist vorhanden. Die physische Abnahme auf echter Hardware und eine vertrauenswürdige Windows-Codesignatur bleiben offen. + + ## Lizenz + +diff --git a/docs/i18n/README.es.md b/docs/i18n/README.es.md +index 951e66e..1a53508 100644 +--- a/docs/i18n/README.es.md ++++ b/docs/i18n/README.es.md +@@ -34,7 +34,7 @@ Abra UDP `51820` y TCP `7443` en el Hub, cree códigos para los Nodes e instále + + No hay contraseña root compartida ni claves WireGuard privadas de Nodes en el Hub. Las identidades de monitorización, terminal, Agent, Operator y automatización IA están separadas. SSH usa un forced-command sin shell, PTY ni forwarding; mTLS limita cada rol; nftables permite únicamente Links explícitos; SQLite conserva estado y auditoría antes de aplicar cambios. + +-`v0.1.0-alpha.4` es una versión de prueba. La rama actual incluye cliente Windows, instalador Hub/Node, Links, mTLS, revocación y reinscripción de certificados, SQLite, auditoría, eventos y un búfer offline limitado con downsampling. Faltan la reconciliación tras reconexión, prueba de 50–100 Nodes e instalador Windows firmado. ++`v0.1.0-alpha.10` es la versión preliminar actual para pruebas. El repositorio incluye un bootstrap versionado con checksum SHA-256 y un manifiesto de compatibilidad firmado. Siguen pendientes la aceptación física en hardware real y la firma de confianza para Windows. + + ## Licencia + +diff --git a/docs/i18n/README.fr.md b/docs/i18n/README.fr.md +index 2724333..c253fcb 100644 +--- a/docs/i18n/README.fr.md ++++ b/docs/i18n/README.fr.md +@@ -32,7 +32,7 @@ Ouvrez UDP `51820` et TCP `7443` sur le Hub, créez les codes et installez les a + + Aucun mot de passe root n'est partagé et la clé WireGuard privée reste sur le Node. Les identités monitoring, terminal, Agent, Operator et automatisation IA sont séparées. SSH emploie une forced-command sans shell/PTY/forwarding ; mTLS limite les rôles ; nftables n'autorise que les Links explicites ; SQLite enregistre état et audit avant le changement de pare-feu. + +-`v0.1.0-alpha.4` est destiné aux tests. La branche actuelle contient le client Windows, l'installateur Hub/Node, les Links, mTLS, la révocation et le ré-enrôlement des certificats, SQLite, l'audit, les événements et un tampon hors ligne limité avec downsampling. Restent la réconciliation, le test de 50–100 Nodes et l'installateur Windows signé. ++`v0.1.0-alpha.10` est la préversion actuelle destinée aux tests. Le dépôt contient un bootstrap suivi avec sa somme SHA-256 et un manifeste de compatibilité signé. La recette physique sur du matériel réel et la signature Windows de confiance restent ouvertes. + + ## Licence + +diff --git a/docs/i18n/README.hi.md b/docs/i18n/README.hi.md +index 44d734e..ea259c7 100644 +--- a/docs/i18n/README.hi.md ++++ b/docs/i18n/README.hi.md +@@ -32,7 +32,7 @@ Hub पर UDP `51820` और TCP `7443` खोलें, Node codes बना + + Shared root password नहीं है और Node की WireGuard private key Node से बाहर नहीं जाती। Monitoring, terminal, Agent, Operator और AI automation identities अलग हैं। SSH forced-command shell/PTY/forwarding नहीं देता; mTLS roles सीमित करता है; nftables केवल explicit Links स्वीकारता है; SQLite पहले desired state और audit सहेजता है। + +-`v0.1.0-alpha.4` testing release है। Current development branch में Windows client, Hub/Node installer, Links, mTLS, certificate revocation और re-enrollment, SQLite, audit, event stream, downsampling वाला सीमित offline buffer और durable reconnect reconciliation तैयार हैं। 50–100 Node load test और signed Windows installer अभी बाकी हैं। ++`v0.1.0-alpha.10` वर्तमान testing prerelease है। Repository में tracked bootstrap, उसका SHA-256 checksum और signed compatibility manifest मौजूद हैं। वास्तविक hardware पर physical acceptance और trusted Windows signing अभी बाकी हैं। + + ## लाइसेंस + +diff --git a/docs/i18n/README.ja.md b/docs/i18n/README.ja.md +index 3a47873..171df8b 100644 +--- a/docs/i18n/README.ja.md ++++ b/docs/i18n/README.ja.md +@@ -32,7 +32,7 @@ Hub で UDP `51820` と TCP `7443` を開き、Node コードを作成して他 + + 共有 root パスワードはなく、Node の WireGuard 秘密鍵は Node 外に出ません。monitoring、terminal、Agent、Operator、AI automation の ID は分離されています。SSH は shell/PTY/forwarding のない forced-command、mTLS はロール制限、nftables は明示 Link のみを許可し、SQLite は firewall 変更前に状態と監査を保存します。 + +-`v0.1.0-alpha.4` はテスト版です。現在の開発ブランチには Windows client、Hub/Node installer、Links、mTLS、証明書失効と再登録、SQLite、監査、イベント、downsampling 付きの制限オフラインバッファが実装済みです。再接続調整、50–100 Node 負荷試験、署名付き Windows installer は今後の課題です。 ++`v0.1.0-alpha.10` は現在のテスト用 prerelease です。リポジトリには追跡対象の bootstrap、SHA-256 checksum、署名済み compatibility manifest があります。実機での physical acceptance と信頼された Windows 署名は未完了です。 + + ## ライセンス + +diff --git a/docs/i18n/README.ko.md b/docs/i18n/README.ko.md +index 74a68ab..cd454f1 100644 +--- a/docs/i18n/README.ko.md ++++ b/docs/i18n/README.ko.md +@@ -32,7 +32,7 @@ Hub에서 UDP `51820`과 TCP `7443`을 열고 Node 코드를 생성한 뒤 다 + + 공유 root 암호가 없고 Node WireGuard 개인 키는 Node를 떠나지 않습니다. monitoring, terminal, Agent, Operator, AI automation identity는 분리됩니다. SSH는 shell/PTY/forwarding 없는 forced-command를 사용하고, mTLS는 역할을 제한하며, nftables는 명시된 Link만 허용합니다. SQLite는 방화벽 변경 전에 상태와 감사를 저장합니다. + +-`v0.1.0-alpha.4`는 테스트 릴리스입니다. 현재 개발 branch에는 Windows client, Hub/Node installer, Links, mTLS, 인증서 폐기와 재등록, SQLite, 감사, event stream과 downsampling이 적용된 제한 offline buffer가 구현되었습니다. 재연결 조정, 50–100 Node 부하 시험과 서명된 Windows installer가 남아 있습니다. ++`v0.1.0-alpha.10`은 현재 테스트용 prerelease입니다. 저장소에는 추적되는 bootstrap, SHA-256 checksum 및 서명된 compatibility manifest가 있습니다. 실제 하드웨어의 physical acceptance와 신뢰할 수 있는 Windows 서명은 아직 완료되지 않았습니다. + + ## 라이선스 + +diff --git a/docs/i18n/README.pt-BR.md b/docs/i18n/README.pt-BR.md +index a803004..2057b50 100644 +--- a/docs/i18n/README.pt-BR.md ++++ b/docs/i18n/README.pt-BR.md +@@ -32,7 +32,7 @@ Abra UDP `51820` e TCP `7443` no Hub, gere códigos e instale os demais servidor + + Não há senha root compartilhada e a chave WireGuard privada nunca sai do Node. As identidades de monitoramento, terminal, Agent, Operator e automação de IA são separadas. SSH usa forced-command sem shell/PTY/forwarding; mTLS restringe funções; nftables permite apenas Links explícitos; SQLite registra estado e auditoria antes da mudança no firewall. + +-`v0.1.0-alpha.4` é uma versão de teste. A branch atual contém cliente Windows, instalador Hub/Node, Links, mTLS, revogação e novo registro de certificados, SQLite, auditoria, eventos e buffer offline limitado com downsampling. Restam reconciliação, teste com 50–100 Nodes e instalador Windows assinado. ++`v0.1.0-alpha.10` é a pré-versão atual para testes. O repositório contém um bootstrap rastreado com checksum SHA-256 e um manifesto de compatibilidade assinado. A aceitação física em hardware real e a assinatura confiável do Windows continuam pendentes. + + ## Licença + +diff --git a/docs/i18n/README.ru.md b/docs/i18n/README.ru.md +index 4d0e608..e58288c 100644 +--- a/docs/i18n/README.ru.md ++++ b/docs/i18n/README.ru.md +@@ -38,7 +38,7 @@ sudo ./ochenstarik-server-monitor-manager.sh hub + + Нет общих root-паролей; приватный WireGuard-ключ Node не покидает Node. Идентичности monitoring, terminal, Agent, Operator и AI-автоматизации разделены. Monitoring SSH использует forced-command без shell/PTY/forwarding. Agent может отправлять heartbeat только своего узла, Operator управляет inventory и Links. Отключение Link сначала сохраняется в SQLite, затем удаляет разрешение nftables; повтор запроса не повторяет побочный эффект. + +-`v0.1.0-alpha.4` предназначен для тестирования. В текущей ветке разработки уже готовы Windows SSH-monitoring, Hub/Node installer, Links, mTLS, отзыв и повторная регистрация сертификатов, SQLite, аудит, поток событий, ограниченный offline-буфер Agent с downsampling и долговечный reconnect reconciliation. Остались нагрузочный тест 50–100 Node и подписанный Windows installer. До стабильного релиза используйте тестовые или резервируемые серверы. ++`v0.1.0-alpha.10` — текущий prerelease для тестирования. В репозитории есть отслеживаемый bootstrap с SHA-256 checksum и подписанный compatibility manifest. Физическая приёмка на реальном оборудовании и доверенная подпись Windows остаются открытыми. До стабильного релиза используйте тестовые или резервируемые серверы. + + ## Лицензия + +diff --git a/docs/i18n/README.tr.md b/docs/i18n/README.tr.md +index 0c69247..0f96f36 100644 +--- a/docs/i18n/README.tr.md ++++ b/docs/i18n/README.tr.md +@@ -32,7 +32,7 @@ Hub üzerinde UDP `51820` ve TCP `7443` açın, Node kodlarını üretin ve diğ + + Ortak root parolası yoktur ve Node'un WireGuard özel anahtarı Node'dan çıkmaz. Monitoring, terminal, Agent, Operator ve AI automation kimlikleri ayrıdır. SSH shell/PTY/forwarding vermeyen forced-command kullanır; mTLS rolleri sınırlar; nftables yalnızca açık Links'e izin verir; SQLite güvenlik duvarı değişmeden önce durum ve audit kaydeder. + +-`v0.1.0-alpha.4` test sürümüdür. Güncel geliştirme dalında Windows client, Hub/Node installer, Links, mTLS, sertifika iptali ve yeniden kayıt, SQLite, audit, event stream ve downsampling kullanan sınırlı offline buffer hazırdır. Yeniden bağlantı uzlaştırması, 50–100 Node yük testi ve imzalı Windows installer sıradadır. ++`v0.1.0-alpha.10` güncel test ön sürümüdür. Depoda izlenen bootstrap, SHA-256 checksum'u ve imzalı compatibility manifest bulunur. Gerçek donanımda fiziksel kabul ve güvenilir Windows imzası açık kalmaktadır. + + ## Lisans + +diff --git a/docs/i18n/README.zh-CN.md b/docs/i18n/README.zh-CN.md +index 147dfd9..d347300 100644 +--- a/docs/i18n/README.zh-CN.md ++++ b/docs/i18n/README.zh-CN.md +@@ -34,7 +34,7 @@ sudo ./ochenstarik-server-monitor-manager.sh hub + + 系统不共享 root 密码，Node 的 WireGuard 私钥不会离开本机。监控、终端、Agent、Operator 和 AI 自动化身份相互隔离。SSH 使用无 shell、PTY、转发权限的 forced-command；mTLS 限制角色；nftables 仅允许明确 Link；SQLite 在执行防火墙变更前保存目标状态和审计。 + +-`v0.1.0-alpha.4` 是测试版。当前开发分支已包含 Windows 客户端、Hub/Node 安装器、Links、mTLS、证书撤销与重新注册、SQLite、审计、事件流以及带降采样的有限离线缓冲。待完成：重连协调、50–100 Node 压测和签名 Windows 安装器。 ++`v0.1.0-alpha.10` 是当前测试预发布版。仓库包含受版本控制的 bootstrap、SHA-256 checksum 和已签名的 compatibility manifest。真实硬件上的 physical acceptance 与可信 Windows 签名仍未完成。 + + ## 许可证 + +diff --git a/docs/linux-platform-matrix.md b/docs/linux-platform-matrix.md +index 9f1db6d..fc934a2 100644 +--- a/docs/linux-platform-matrix.md ++++ b/docs/linux-platform-matrix.md +@@ -17,4 +17,6 @@ Workflow `linux-platform-matrix.yml` собирает те же self-contained r + + Debian 12/13 проверяются для x64 и arm64 в privileged systemd-контейнерах на соответствующей архитектуре runner. Тест выполняет чистую и повторную установку, затем полностью перезапускает контейнер и проверяет автоматический запуск Control и HTTPS healthcheck после нового systemd boot. + +-Systemd-контейнер проверяет дистрибутив, users, permissions, units, certificates, SQLite state и service lifecycle, но не считается полноценной Debian VM. Отдельным незакрытым критерием остаётся reboot настоящих Debian VM с собственным kernel. Физическая проверка WireGuard/nftables также выполняется по `three-server-acceptance.md`, поскольку GitHub runners не моделируют внешний NAT и cloud firewall. ++Systemd-контейнер проверяет дистрибутив, users, permissions, units, certificates, SQLite state и service lifecycle, но не считается полноценной Debian VM. GitHub-hosted Linux runners сами являются временными Ubuntu VM и не предоставляют управляемую Debian guest VM с отдельным kernel и гарантированным nested virtualization; перезапуск privileged Debian-контейнера разделяет kernel хоста и поэтому не доказывает полный Debian reboot. ++ ++Отдельным незакрытым критерием остаётся reboot настоящих Debian VM с собственным kernel. До owner-run проверки риск компенсируется матрицей Debian 12/13 x64/arm64 с повторной установкой и systemd-container restart, нативными Ubuntu 22.04/24.04 x64/arm64 VM и физической проверкой Control, WireGuard, firewall-таблицы и Agent по `three-server-acceptance.md`. GitHub runners не моделируют внешний NAT, cloud firewall и полный reboot владельческой Debian-топологии, поэтому эта физическая приёмка не заменяется зелёным CI. +diff --git a/docs/release-policy.md b/docs/release-policy.md +index 08d40c2..deeca61 100644 +--- a/docs/release-policy.md ++++ b/docs/release-policy.md +@@ -6,4 +6,4 @@ A tag that has been published must never be moved, reused, deleted and recreated + + `.github/workflows/linux-release.yml` is the sole GitHub Release publisher. On a version tag, it builds the Linux and Windows packages from the tagged commit, generates the signed manifest, and publishes the complete release asset set. `.github/workflows/windows-release.yml` is manual-only and may package and verify a Windows installer as a workflow artifact, but it never publishes or replaces GitHub Release assets. The tracked production source for the convenience installer is `deploy/smm-setup.sh`; the Linux release workflow copies that exact file to the release artifact set, records its SHA-256 in the signed manifest, and publishes its standalone checksum. The default release in that source must match the tag being produced. + +-For `v0.1.0-alpha.9`, this makes `smm-setup.sh`, `smm-setup.sh.sha256`, the bootstrap script, platform archives, SBOMs, and the signed manifest reproducible from the tagged tree. The installer fetches only same-tag assets and verifies the bootstrap checksum before execution. Corrections after publication require another tag; the `v0.1.0-alpha.9` tag and assets remain unchanged. ++The current testing prerelease is `v0.1.0-alpha.10`. For this release, `smm-setup.sh`, `smm-setup.sh.sha256`, the bootstrap script, platform archives, SBOMs, and the signed manifest are reproducible from the tagged tree. The installer fetches only same-tag assets and verifies the bootstrap checksum before execution. The published `v0.1.0-alpha.9` tag and assets remain unchanged and immutable. Corrections after publication require another, higher tag. +diff --git a/docs/roadmap.md b/docs/roadmap.md +index 4c960ea..d6f1f24 100644 +--- a/docs/roadmap.md ++++ b/docs/roadmap.md +@@ -92,13 +92,13 @@ + - [x] SHA-256 для Windows package и Linux binaries; + - [x] self-contained Control/Agent release artifacts; + - [ ] настроить постоянную доверенную Windows code-signing identity; +-- [ ] синхронизировать все переводы README с текущим release status. ++- [x] синхронизировать все переводы README с текущим release status. + + ## Этап 7 — собственный bootstrap Server Monitor Manager + + - [x] добавить bootstrap source в этот репозиторий; + - [x] упаковывать bootstrap, checksum и compatibility manifest в release workflow; +-- [ ] добавить криптографическую подпись compatibility manifest для production release; ++- [x] добавить криптографическую подпись compatibility manifest для production release; + - [x] проверять Ubuntu 22.04/24.04 и Debian 12/13, `amd64`/`arm64`; + - [x] добавить non-interactive install/update/rollback/uninstall; + - [x] устанавливать Control/Agent, restricted helper и systemd units; +diff --git a/tests/bootstrap/test-release-contract.sh b/tests/bootstrap/test-release-contract.sh +index fa764ce..73ec81a 100644 +--- a/tests/bootstrap/test-release-contract.sh ++++ b/tests/bootstrap/test-release-contract.sh +@@ -14,7 +14,7 @@ installer_contract="$root/docs/installer-contract.md" + exit 1 + } + bash -n "$setup" +-grep -Fq 'readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.9"' "$setup" ++grep -Fq 'readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.10"' "$setup" + if grep -Fq 'validate_control_url' "$setup" || grep -Fq '${CONTROL_URL%/}/control' "$setup"; then + printf '%s\n' 'temporary control URL workaround must not be present in smm-setup.sh' >&2 + exit 1 +@@ -83,7 +83,7 @@ chmod +x "$work/bin/curl" + + HOME="$work/home" PATH="$work/bin:$PATH" bash "$setup" version >"$work/output" + grep -Fq 'INNER_COMMAND=version' "$work/output" +-grep -Fq '/releases/download/v0.1.0-alpha.9/ochenstarik-server-monitor-manager.sh' "$work/urls" +-grep -Fq '/releases/download/v0.1.0-alpha.9/ochenstarik-server-monitor-manager.sh.sha256' "$work/urls" ++grep -Fq '/releases/download/v0.1.0-alpha.10/ochenstarik-server-monitor-manager.sh' "$work/urls" ++grep -Fq '/releases/download/v0.1.0-alpha.10/ochenstarik-server-monitor-manager.sh.sha256' "$work/urls" + + printf '%s\n' 'RELEASE_CONTRACT=PASS' diff --git a/agents/hermes/notes/salvage-2026-08-18/release-alpha11.patch b/agents/hermes/notes/salvage-2026-08-18/release-alpha11.patch new file mode 100644 index 0000000..bf4edcb --- /dev/null +++ b/agents/hermes/notes/salvage-2026-08-18/release-alpha11.patch @@ -0,0 +1,546 @@ +diff --git a/.github/workflows/linux-release.yml b/.github/workflows/linux-release.yml +index 1341fbe..2f76b46 100644 +--- a/.github/workflows/linux-release.yml ++++ b/.github/workflows/linux-release.yml +@@ -22,21 +22,34 @@ jobs: + + - name: Validate bootstrap + run: | +- bash -n deploy/ochenstarik-server-monitor-manager.sh +- bash -n deploy/smm-setup.sh +- bash -n deploy/ochenstarik-smm-policy-apply +- bash -n deploy/ochenstarik-smm-emergency +- bash -n tests/bootstrap/run-native-systemd-smoke.sh +- bash -n tests/bootstrap/run-systemd-container-smoke.sh +- shellcheck --severity=error deploy/ochenstarik-server-monitor-manager.sh +- shellcheck --severity=error deploy/smm-setup.sh +- shellcheck --severity=error deploy/ochenstarik-smm-policy-apply +- shellcheck --severity=error deploy/ochenstarik-smm-emergency +- shellcheck --severity=error tests/bootstrap/run-native-systemd-smoke.sh +- shellcheck --severity=error tests/bootstrap/run-systemd-container-smoke.sh +- bash tests/bootstrap/test-bootstrap-contract.sh +- bash tests/bootstrap/test-manifest-verification.sh +- bash tests/bootstrap/test-release-contract.sh ++ run_check() { ++ local description="$1" ++ shift ++ printf 'CHECK: %s\n' "$description" ++ if "$@"; then ++ printf 'PASS: %s\n' "$description" ++ else ++ local status=$? ++ printf 'FAIL: %s (exit %s)\n' "$description" "$status" >&2 ++ return "$status" ++ fi ++ } ++ ++ run_check "bootstrap syntax" bash -n deploy/ochenstarik-server-monitor-manager.sh ++ run_check "setup syntax" bash -n deploy/smm-setup.sh ++ run_check "policy helper syntax" bash -n deploy/ochenstarik-smm-policy-apply ++ run_check "emergency helper syntax" bash -n deploy/ochenstarik-smm-emergency ++ run_check "native smoke syntax" bash -n tests/bootstrap/run-native-systemd-smoke.sh ++ run_check "container smoke syntax" bash -n tests/bootstrap/run-systemd-container-smoke.sh ++ run_check "bootstrap shellcheck" shellcheck --severity=error deploy/ochenstarik-server-monitor-manager.sh ++ run_check "setup shellcheck" shellcheck --severity=error deploy/smm-setup.sh ++ run_check "policy helper shellcheck" shellcheck --severity=error deploy/ochenstarik-smm-policy-apply ++ run_check "emergency helper shellcheck" shellcheck --severity=error deploy/ochenstarik-smm-emergency ++ run_check "native smoke shellcheck" shellcheck --severity=error tests/bootstrap/run-native-systemd-smoke.sh ++ run_check "container smoke shellcheck" shellcheck --severity=error tests/bootstrap/run-systemd-container-smoke.sh ++ run_check "bootstrap contract" bash tests/bootstrap/test-bootstrap-contract.sh ++ run_check "manifest verification contract" bash tests/bootstrap/test-manifest-verification.sh ++ run_check "release contract" bash tests/bootstrap/test-release-contract.sh + + - name: Package bootstrap + shell: bash +@@ -292,7 +305,10 @@ jobs: + - name: Sign Manifest + shell: bash + run: | +- cosign sign-blob --yes --output-signature server-monitor-manager-manifest.sig server-monitor-manager-manifest.json ++ cosign sign-blob --yes \ ++ --output-signature server-monitor-manager-manifest.sig \ ++ --output-certificate server-monitor-manager-manifest.pem \ ++ server-monitor-manager-manifest.json + + - name: Attach artifacts to GitHub Release + if: startsWith(github.ref, 'refs/tags/') +@@ -307,3 +323,4 @@ jobs: + artifacts/server-monitor-manager-win-x64/artifacts/windows-installer/* + server-monitor-manager-manifest.json + server-monitor-manager-manifest.sig ++ server-monitor-manager-manifest.pem +diff --git a/README.md b/README.md +index 3bea0c3..33e7183 100644 +--- a/README.md ++++ b/README.md +@@ -98,7 +98,7 @@ In the application, generate or copy the monitoring SSH key, add the Hub profile + + ## Current status + +-`v0.1.0-alpha.11` is an early testing release, not a production security appliance. Windows and Linux builds, control-plane tests, a test-signed x64 MSIX, self-contained `linux-x64`/`linux-arm64` artifacts, and SHA-256 checksums are automated in GitHub Actions. ++`v0.1.0-alpha.12` is an early testing release, not a production security appliance. Windows and Linux builds, control-plane tests, a test-signed x64 MSIX, self-contained `linux-x64`/`linux-arm64` artifacts, and SHA-256 checksums are automated in GitHub Actions. + + The current development branch implements dedicated Windows pages for Servers, Links, Sessions, and Settings; SSH monitoring; directional Links; one-time enrollment; separate mTLS Agent, Operator, and source-scoped Automation identities; certificate revocation/re-enrollment; SQLite control state; audit; authenticated event streaming; Windows Control API integration; and a bounded durable Agent buffer with downsampling. + +diff --git a/deploy/ochenstarik-server-monitor-manager.sh b/deploy/ochenstarik-server-monitor-manager.sh +index 10f46ca..8413e63 100755 +--- a/deploy/ochenstarik-server-monitor-manager.sh ++++ b/deploy/ochenstarik-server-monitor-manager.sh +@@ -290,7 +290,7 @@ validate_control_url() { + } + + verify_manifest() { +- local manifest="$1" signature="$2" ++ local manifest="$1" signature="$2" certificate="$3" + if [[ "${SMM_ALLOW_UNSIGNED:-0}" == "1" ]]; then + log "WARNING: Signature verification skipped due to SMM_ALLOW_UNSIGNED=1." + return 0 +@@ -299,10 +299,13 @@ verify_manifest() { + [[ -f "$manifest" ]] || fail "Manifest not found: $manifest" + [[ -f "$signature" ]] || fail "Signature not found: $signature" + log "Verifying manifest signature..." +- local verify_args=(--certificate-oidc-issuer "$COSIGN_ISSUER" --certificate-identity-regexp "$COSIGN_IDENTITY_REGEXP") ++ local verify_args + if [[ -n "${SMM_TEST_PUBKEY:-}" ]]; then +- verify_args=(--key "$SMM_TEST_PUBKEY") ++ verify_args=(--key "$SMM_TEST_PUBKEY" --insecure-ignore-tlog) + log "WARNING: Using test public key for verification. This must NOT happen in production." ++ else ++ [[ -f "$certificate" ]] || fail "Certificate not found: $certificate" ++ verify_args=(--certificate "$certificate" --certificate-oidc-issuer "$COSIGN_ISSUER" --certificate-identity-regexp "$COSIGN_IDENTITY_REGEXP") + fi + if ! cosign verify-blob "${verify_args[@]}" \ + --signature "$signature" "$manifest" >/dev/null 2>&1; then +@@ -312,13 +315,14 @@ verify_manifest() { + } + + verify_archive() { +- local archive="$1" expected actual entry manifest signature ++ local archive="$1" expected actual entry manifest signature certificate + [[ -f "$archive" ]] || fail "Archive not found: $archive" + manifest="$(dirname "$archive")/server-monitor-manager-manifest.json" + signature="$(dirname "$archive")/server-monitor-manager-manifest.sig" ++ certificate="$(dirname "$archive")/server-monitor-manager-manifest.pem" + +- if [[ -f "$manifest" && -f "$signature" ]]; then +- verify_manifest "$manifest" "$signature" ++ if [[ -f "$manifest" && -f "$signature" && -f "$certificate" ]]; then ++ verify_manifest "$manifest" "$signature" "$certificate" + local archive_basename + archive_basename="$(basename "$archive")" + expected="$(awk -F'"' -v name="$archive_basename" '$2 == name {print $4}' "$manifest" || true)" +@@ -328,13 +332,13 @@ verify_archive() { + [[ -n "$expected" ]] || fail "Could not extract archive hash from manifest." + else + if [[ "${SMM_ALLOW_UNSIGNED:-0}" == "1" ]]; then +- log "WARNING: Manifest and signature not found, falling back to .sha256 file due to SMM_ALLOW_UNSIGNED=1." ++ log "WARNING: Manifest, signature, or certificate not found; falling back to .sha256 file due to SMM_ALLOW_UNSIGNED=1." + local checksum_file="${archive}.sha256" + [[ -f "$checksum_file" ]] || fail "Checksum file not found: $checksum_file" + expected="$(awk 'NR == 1 { print $1 }' "$checksum_file")" + [[ "$expected" =~ ^[0-9a-fA-F]{64}$ ]] || fail "Invalid checksum file: $checksum_file" + else +- fail "Manifest and signature are required for archive verification. Set SMM_ALLOW_UNSIGNED=1 to bypass." ++ fail "Manifest, signature, and certificate are required for archive verification. Set SMM_ALLOW_UNSIGNED=1 to bypass." + fi + fi + +@@ -1493,7 +1497,7 @@ main() { + install-control) [[ $# -ge 2 && $# -le 3 ]] || fail "install-control requires ARCHIVE PUBLIC_HOST [HTTPS_PORT]"; install_control "$@" ;; + install-agent) [[ $# -eq 4 ]] || fail "install-agent requires ARCHIVE NODE_ID CONTROL_URL CA_CERT"; install_agent "$@" ;; + install-node) [[ $# -eq 1 ]] || fail "install-node requires ARCHIVE"; install_node_from_code "$1" ;; +- verify-manifest) [[ $# -eq 2 ]] || fail "verify-manifest requires MANIFEST SIGNATURE"; verify_manifest "$1" "$2" ;; ++ verify-manifest) [[ $# -eq 3 ]] || fail "verify-manifest requires MANIFEST SIGNATURE CERTIFICATE"; verify_manifest "$1" "$2" "$3" ;; + install-monitor) [[ $# -eq 1 ]] || fail "install-monitor requires PUBLIC_KEY"; install_monitor "$1" ;; + uninstall-monitor) [[ $# -eq 0 ]] || fail "uninstall-monitor takes no arguments"; uninstall_monitor ;; + mesh-init) [[ $# -ge 1 && $# -le 2 ]] || fail "mesh-init requires PUBLIC_ENDPOINT [WG_PORT]"; mesh_init "$@" ;; +diff --git a/deploy/smm-setup.sh b/deploy/smm-setup.sh +index 35e467d..d4ec066 100644 +--- a/deploy/smm-setup.sh ++++ b/deploy/smm-setup.sh +@@ -3,7 +3,7 @@ set -Eeuo pipefail + IFS=$'\n\t' + + readonly PROGRAM_NAME="smm-setup" +-readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.11" ++readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.12" + readonly DEFAULT_REPOSITORY="ochenstarik-ui/server-monitor-manager" + readonly INNER_ASSET="ochenstarik-server-monitor-manager.sh" + +@@ -22,7 +22,7 @@ asset from the selected immutable GitHub release. Common commands: + backup-create | backup-restore | version + + Environment overrides: +- SMM_TAG Release tag (default: v0.1.0-alpha.11) ++ SMM_TAG Release tag (default: v0.1.0-alpha.12) + SMM_REPOSITORY GitHub repository (default: ochenstarik-ui/server-monitor-manager) + SMM_CACHE_DIR Verified-download cache directory + USAGE +diff --git a/docs/release-policy.md b/docs/release-policy.md +index 08d40c2..6e89da2 100644 +--- a/docs/release-policy.md ++++ b/docs/release-policy.md +@@ -7,3 +7,7 @@ A tag that has been published must never be moved, reused, deleted and recreated + `.github/workflows/linux-release.yml` is the sole GitHub Release publisher. On a version tag, it builds the Linux and Windows packages from the tagged commit, generates the signed manifest, and publishes the complete release asset set. `.github/workflows/windows-release.yml` is manual-only and may package and verify a Windows installer as a workflow artifact, but it never publishes or replaces GitHub Release assets. The tracked production source for the convenience installer is `deploy/smm-setup.sh`; the Linux release workflow copies that exact file to the release artifact set, records its SHA-256 in the signed manifest, and publishes its standalone checksum. The default release in that source must match the tag being produced. + + For `v0.1.0-alpha.9`, this makes `smm-setup.sh`, `smm-setup.sh.sha256`, the bootstrap script, platform archives, SBOMs, and the signed manifest reproducible from the tagged tree. The installer fetches only same-tag assets and verifies the bootstrap checksum before execution. Corrections after publication require another tag; the `v0.1.0-alpha.9` tag and assets remain unchanged. ++ ++`v0.1.0-alpha.10` and `v0.1.0-alpha.11` exist as tags, but their release pipelines failed before publication. No GitHub Release or release assets were published for either tag. Both version numbers remain reserved and must not be moved, deleted, recreated, or reused; the next corrected release is `v0.1.0-alpha.12`. ++ ++All changes to `main` require a pull request. A branch must be current with `main`, and the required `build-and-test` and `build` status checks must pass before merge. Force-push and deletion of `main` are prohibited. One pull request must cover one topic and may merge only after its CI is green. +diff --git a/src/ServerMonitorManager.Desktop/UpdateService.cs b/src/ServerMonitorManager.Desktop/UpdateService.cs +index bd9bdd9..f2d7560 100644 +--- a/src/ServerMonitorManager.Desktop/UpdateService.cs ++++ b/src/ServerMonitorManager.Desktop/UpdateService.cs +@@ -22,7 +22,7 @@ public interface IHttpTransport + + public interface ISignatureVerifier + { +- Task VerifySignatureAsync(string signaturePath, string manifestPath, CancellationToken cancellationToken = default); ++ Task VerifySignatureAsync(string signaturePath, string manifestPath, string certificatePath, CancellationToken cancellationToken = default); + } + + public interface IFileStorage +@@ -88,7 +88,12 @@ public class ProcessSignatureVerifier : ISignatureVerifier + _httpTransport = httpTransport; + } + +- public async Task VerifySignatureAsync(string signaturePath, string manifestPath, CancellationToken cancellationToken = default) ++ internal static string BuildVerificationArguments(string signaturePath, string manifestPath, string certificatePath) ++ { ++ return $"verify-blob --certificate \"{certificatePath}\" --certificate-oidc-issuer \"{OidcIssuer}\" --certificate-identity-regexp \"{OidcIdentityRegexp}\" --signature \"{signaturePath}\" \"{manifestPath}\""; ++ } ++ ++ public async Task VerifySignatureAsync(string signaturePath, string manifestPath, string certificatePath, CancellationToken cancellationToken = default) + { + var cosignPath = Path.Combine(_fileStorage.GetTempFolder(), "cosign.exe"); + if (!_fileStorage.FileExists(cosignPath) || !VerifyFileHash(cosignPath, CosignHash)) +@@ -107,7 +112,7 @@ public class ProcessSignatureVerifier : ISignatureVerifier + StartInfo = new ProcessStartInfo + { + FileName = cosignPath, +- Arguments = $"verify-blob --certificate-oidc-issuer \"{OidcIssuer}\" --certificate-identity-regexp \"{OidcIdentityRegexp}\" --signature \"{signaturePath}\" \"{manifestPath}\"", ++ Arguments = BuildVerificationArguments(signaturePath, manifestPath, certificatePath), + UseShellExecute = false, + RedirectStandardError = true, + RedirectStandardOutput = true, +@@ -217,20 +222,24 @@ public class UpdateService + + var manifestUrl = assets.FirstOrDefault(a => a?["name"]?.GetValue() == "server-monitor-manager-manifest.json")?["browser_download_url"]?.GetValue(); + var sigUrl = assets.FirstOrDefault(a => a?["name"]?.GetValue() == "server-monitor-manager-manifest.sig")?["browser_download_url"]?.GetValue(); ++ var certificateUrl = assets.FirstOrDefault(a => a?["name"]?.GetValue() == "server-monitor-manager-manifest.pem")?["browser_download_url"]?.GetValue(); + +- if (manifestUrl is null || sigUrl is null) ++ if (manifestUrl is null || sigUrl is null || certificateUrl is null) + { +- throw new InvalidOperationException("Manifest or signature not found in the release. Update rejected."); ++ throw new InvalidOperationException("Manifest, signature, or certificate not found in the release. Update rejected."); + } + + // Validate URLs belong to the same tag! +- if (!manifestUrl.Contains($"/releases/download/{releaseTagName}/") || !sigUrl.Contains($"/releases/download/{releaseTagName}/")) ++ if (!manifestUrl.Contains($"/releases/download/{releaseTagName}/") || ++ !sigUrl.Contains($"/releases/download/{releaseTagName}/") || ++ !certificateUrl.Contains($"/releases/download/{releaseTagName}/")) + { +- throw new InvalidOperationException("Manifest or signature URL does not match the release tag. Update rejected."); ++ throw new InvalidOperationException("Manifest, signature, or certificate URL does not match the release tag. Update rejected."); + } + + var manifestJson = await _http.GetStringAsync(manifestUrl, cancellationToken); + var manifestSig = await _http.GetStringAsync(sigUrl, cancellationToken); ++ var manifestCertificate = await _http.GetStringAsync(certificateUrl, cancellationToken); + + var manifestNode = JsonNode.Parse(manifestJson); + if (manifestNode is null) +@@ -257,11 +266,13 @@ public class UpdateService + var tempFolder = _fileStorage.GetTempFolder(); + var manifestPath = Path.Combine(tempFolder, "server-monitor-manager-manifest.json"); + var sigPath = Path.Combine(tempFolder, "server-monitor-manager-manifest.sig"); ++ var certificatePath = Path.Combine(tempFolder, "server-monitor-manager-manifest.pem"); + await _fileStorage.WriteAllTextAsync(manifestPath, manifestJson, cancellationToken); + await _fileStorage.WriteAllTextAsync(sigPath, manifestSig, cancellationToken); ++ await _fileStorage.WriteAllTextAsync(certificatePath, manifestCertificate, cancellationToken); + + Log.TraceEvent(TraceEventType.Information, 0, "Verifying manifest signature..."); +- await _signatureVerifier.VerifySignatureAsync(sigPath, manifestPath, cancellationToken); ++ await _signatureVerifier.VerifySignatureAsync(sigPath, manifestPath, certificatePath, cancellationToken); + Log.TraceEvent(TraceEventType.Information, 0, "Manifest signature verified successfully."); + + var msixUrl = assets.FirstOrDefault(a => a?["name"]?.GetValue() == "ServerMonitorManager-win-x64.msix")?["browser_download_url"]?.GetValue(); +diff --git a/tests/ServerMonitorManager.Desktop.Security.Tests/UpdateServiceTests.cs b/tests/ServerMonitorManager.Desktop.Security.Tests/UpdateServiceTests.cs +index 3825d75..7df31b6 100644 +--- a/tests/ServerMonitorManager.Desktop.Security.Tests/UpdateServiceTests.cs ++++ b/tests/ServerMonitorManager.Desktop.Security.Tests/UpdateServiceTests.cs +@@ -21,8 +21,8 @@ namespace ServerMonitorManager.Desktop.Security.Tests + + public class MockSignatureVerifier : ISignatureVerifier + { +- public Func VerifySignatureAsyncFunc { get; set; } = (_, _) => Task.CompletedTask; +- public Task VerifySignatureAsync(string signaturePath, string manifestPath, CancellationToken cancellationToken = default) => VerifySignatureAsyncFunc(signaturePath, manifestPath); ++ public Func VerifySignatureAsyncFunc { get; set; } = (_, _, _) => Task.CompletedTask; ++ public Task VerifySignatureAsync(string signaturePath, string manifestPath, string certificatePath, CancellationToken cancellationToken = default) => VerifySignatureAsyncFunc(signaturePath, manifestPath, certificatePath); + } + + public class MockFileStorage : IFileStorage +@@ -45,6 +45,7 @@ namespace ServerMonitorManager.Desktop.Security.Tests + ""assets"": [ + { ""name"": ""server-monitor-manager-manifest.json"", ""browser_download_url"": ""https://example.com/releases/download/v0.1.0-alpha.9/server-monitor-manager-manifest.json"" }, + { ""name"": ""server-monitor-manager-manifest.sig"", ""browser_download_url"": ""https://example.com/releases/download/v0.1.0-alpha.9/server-monitor-manager-manifest.sig"" }, ++ { ""name"": ""server-monitor-manager-manifest.pem"", ""browser_download_url"": ""https://example.com/releases/download/v0.1.0-alpha.9/server-monitor-manager-manifest.pem"" }, + { ""name"": ""ServerMonitorManager-win-x64.msix"", ""browser_download_url"": ""https://example.com/releases/download/v0.1.0-alpha.9/ServerMonitorManager-win-x64.msix"" } + ] + }"; +@@ -59,6 +60,16 @@ namespace ServerMonitorManager.Desktop.Security.Tests + ] + }"; + ++ private const string NoCertificateReleaseJson = @" ++ { ++ ""tag_name"": ""v0.1.0-alpha.9"", ++ ""assets"": [ ++ { ""name"": ""server-monitor-manager-manifest.json"", ""browser_download_url"": ""https://example.com/releases/download/v0.1.0-alpha.9/server-monitor-manager-manifest.json"" }, ++ { ""name"": ""server-monitor-manager-manifest.sig"", ""browser_download_url"": ""https://example.com/releases/download/v0.1.0-alpha.9/server-monitor-manager-manifest.sig"" }, ++ { ""name"": ""ServerMonitorManager-win-x64.msix"", ""browser_download_url"": ""https://example.com/releases/download/v0.1.0-alpha.9/ServerMonitorManager-win-x64.msix"" } ++ ] ++ }"; ++ + private const string ValidManifestJson = @" + { + ""version"": ""v0.1.0-alpha.9"", +@@ -101,7 +112,7 @@ namespace ServerMonitorManager.Desktop.Security.Tests + var http = new MockHttpTransport { GetStringAsyncFunc = url => Task.FromResult(url.EndsWith("releases/latest") ? ValidReleaseJson : ValidManifestJson) }; + var verifier = new MockSignatureVerifier + { +- VerifySignatureAsyncFunc = (_, _) => throw new InvalidOperationException("Signature verification failed: identity mismatch") ++ VerifySignatureAsyncFunc = (_, _, _) => throw new InvalidOperationException("Signature verification failed: identity mismatch") + }; + var storage = new MockFileStorage(); + +@@ -144,7 +155,7 @@ namespace ServerMonitorManager.Desktop.Security.Tests + var service = new UpdateService(http, new MockSignatureVerifier(), new MockFileStorage()); + + var ex = await Assert.ThrowsAsync(() => service.CheckForUpdatesAsync()); +- Assert.Contains("Manifest or signature not found", ex.Message); ++ Assert.Contains("signature", ex.Message, StringComparison.OrdinalIgnoreCase); + } + + [Fact] +@@ -153,7 +164,7 @@ namespace ServerMonitorManager.Desktop.Security.Tests + var http = new MockHttpTransport { GetStringAsyncFunc = url => Task.FromResult(url.EndsWith("releases/latest") ? ValidReleaseJson : ValidManifestJson) }; + var verifier = new MockSignatureVerifier + { +- VerifySignatureAsyncFunc = (_, _) => throw new InvalidOperationException("Signature verification failed: invalid signature format") ++ VerifySignatureAsyncFunc = (_, _, _) => throw new InvalidOperationException("Signature verification failed: invalid signature format") + }; + var storage = new MockFileStorage(); + +@@ -169,7 +180,7 @@ namespace ServerMonitorManager.Desktop.Security.Tests + bool signatureVerified = false; + var verifier = new MockSignatureVerifier + { +- VerifySignatureAsyncFunc = (_, _) => { signatureVerified = true; return Task.CompletedTask; } ++ VerifySignatureAsyncFunc = (_, _, _) => { signatureVerified = true; return Task.CompletedTask; } + }; + var storage = new MockFileStorage(); + +@@ -246,7 +257,8 @@ namespace ServerMonitorManager.Desktop.Security.Tests + ""tag_name"": ""v0.1.0-alpha.9"", + ""assets"": [ + { ""name"": ""server-monitor-manager-manifest.json"", ""browser_download_url"": ""https://example.com/releases/download/v0.1.0-alpha.9/server-monitor-manager-manifest.json"" }, +- { ""name"": ""server-monitor-manager-manifest.sig"", ""browser_download_url"": ""https://example.com/releases/download/v0.1.0-alpha.9/server-monitor-manager-manifest.sig"" } ++ { ""name"": ""server-monitor-manager-manifest.sig"", ""browser_download_url"": ""https://example.com/releases/download/v0.1.0-alpha.9/server-monitor-manager-manifest.sig"" }, ++ { ""name"": ""server-monitor-manager-manifest.pem"", ""browser_download_url"": ""https://example.com/releases/download/v0.1.0-alpha.9/server-monitor-manager-manifest.pem"" } + ] + }"; + var http = new MockHttpTransport +@@ -264,5 +276,25 @@ namespace ServerMonitorManager.Desktop.Security.Tests + var ex = await Assert.ThrowsAsync(() => service.CheckForUpdatesAsync()); + Assert.Contains("MSIX", ex.Message, StringComparison.OrdinalIgnoreCase); + } ++ ++ [Fact] ++ public async Task MissingCertificateAsset_IsRejected() ++ { ++ var http = new MockHttpTransport { GetStringAsyncFunc = _ => Task.FromResult(NoCertificateReleaseJson) }; ++ var service = new UpdateService(http, new MockSignatureVerifier(), new MockFileStorage()); ++ ++ var ex = await Assert.ThrowsAsync(() => service.CheckForUpdatesAsync()); ++ Assert.Contains("certificate", ex.Message, StringComparison.OrdinalIgnoreCase); ++ } ++ ++ [Fact] ++ public void ProductionVerifierArguments_PinCertificateIssuerAndReleaseWorkflow() ++ { ++ var arguments = ProcessSignatureVerifier.BuildVerificationArguments("manifest.sig", "manifest.json", "manifest.pem"); ++ ++ Assert.Contains("--certificate \"manifest.pem\"", arguments, StringComparison.Ordinal); ++ Assert.Contains("--certificate-oidc-issuer \"https://token.actions.githubusercontent.com\"", arguments, StringComparison.Ordinal); ++ Assert.Contains("linux-release\\.yml@refs/tags/v.*$", arguments, StringComparison.Ordinal); ++ } + } + } +diff --git a/tests/bootstrap/test-manifest-verification.sh b/tests/bootstrap/test-manifest-verification.sh +index 535f0c7..74c8fff 100644 +--- a/tests/bootstrap/test-manifest-verification.sh ++++ b/tests/bootstrap/test-manifest-verification.sh +@@ -34,11 +34,12 @@ cat < server-monitor-manager-manifest.json + } + EOF + +-cosign sign-blob --yes --key cosign.key --output-signature server-monitor-manager-manifest.sig server-monitor-manager-manifest.json +-CLEANUP_FILES+=(server-monitor-manager-manifest.json server-monitor-manager-manifest.sig) ++cosign sign-blob --yes --tlog-upload=false --key cosign.key --output-signature server-monitor-manager-manifest.sig server-monitor-manager-manifest.json ++printf '%s\n' 'test-key certificate placeholder' >server-monitor-manager-manifest.pem ++CLEANUP_FILES+=(server-monitor-manager-manifest.json server-monitor-manager-manifest.sig server-monitor-manager-manifest.pem) + + echo "Test 1: Valid signature and hash" +-if ! bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json server-monitor-manager-manifest.sig; then ++if ! bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json server-monitor-manager-manifest.sig server-monitor-manager-manifest.pem; then + echo "FAIL: Valid payload rejected" + exit 1 + fi +@@ -65,34 +66,30 @@ cat < server-monitor-manager-manifest.json + } + } + EOF +-if bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json server-monitor-manager-manifest.sig >/dev/null 2>&1; then ++if bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json server-monitor-manager-manifest.sig server-monitor-manager-manifest.pem >/dev/null 2>&1; then + echo "FAIL: Substituted hash accepted" + exit 1 + fi + echo "PASS: Substituted hash rejected" + + echo "Test 4: Manifest without signature" +-if bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json "" >/dev/null 2>&1; then ++if bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json "" server-monitor-manager-manifest.pem >/dev/null 2>&1; then + echo "FAIL: Missing signature accepted" + exit 1 + fi + echo "PASS: Missing signature rejected" + +-echo "Test 5: Real alpha.8 manifest fallback matching (REQUIRES_NETWORK)" +-ALPHA8_ARCHIVE="ochenstarik-server-monitor-manager-linux-x64.tar.gz" +-if ! wget -qO "$ALPHA8_ARCHIVE" https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.8/server-monitor-manager-linux-x64.tar.gz; then +- echo "SKIP: Could not download alpha.8 archive (network unavailable)" +-else +- wget -qO server-monitor-manager-manifest.json https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.8/server-monitor-manager-manifest.json +- wget -qO server-monitor-manager-manifest.sig https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.8/server-monitor-manager-manifest.sig +- CLEANUP_FILES+=("$ALPHA8_ARCHIVE") +- # Use keyless verification against real Sigstore/Rekor (requires network) +- unset SMM_TEST_PUBKEY +- if ! bash deploy/ochenstarik-server-monitor-manager.sh verify-release "$ALPHA8_ARCHIVE" >/dev/null 2>&1; then +- echo "FAIL: Alpha.8 real release verification failed" +- exit 1 +- fi +- echo "PASS: Alpha.8 real release verification succeeded" ++echo "Test 5: Manifest without certificate" ++unset SMM_TEST_PUBKEY ++if output="$(bash deploy/ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json server-monitor-manager-manifest.sig "" 2>&1)"; then ++ echo "FAIL: Missing certificate accepted" ++ exit 1 ++fi ++if [[ "$output" != *"Certificate not found"* ]]; then ++ printf 'FAIL: Missing certificate rejection lacked diagnostic. Output: %s\n' "$output" >&2 ++ exit 1 + fi ++export SMM_TEST_PUBKEY="cosign.pub" ++echo "PASS: Missing certificate rejected with diagnostic" + + echo "All tests passed." +diff --git a/tests/bootstrap/test-release-contract.sh b/tests/bootstrap/test-release-contract.sh +index e5f230b..77f0022 100644 +--- a/tests/bootstrap/test-release-contract.sh ++++ b/tests/bootstrap/test-release-contract.sh +@@ -8,13 +8,15 @@ workflow="$root/.github/workflows/linux-release.yml" + windows_workflow="$root/.github/workflows/windows-release.yml" + policy="$root/docs/release-policy.md" + installer_contract="$root/docs/installer-contract.md" ++manifest_test="$root/tests/bootstrap/test-manifest-verification.sh" ++release_negative_test="$root/tests/release-verification/run-negative-tests.sh" + + [[ -s "$setup" ]] || { + printf '%s\n' 'tracked production smm-setup.sh source is missing' >&2 + exit 1 + } + bash -n "$setup" +-grep -Fq 'readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.11"' "$setup" ++grep -Fq 'readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.12"' "$setup" + if grep -Fq 'validate_control_url' "$setup" || grep -Fq '${CONTROL_URL%/}/control' "$setup"; then + printf '%s\n' 'temporary control URL workaround must not be present in smm-setup.sh' >&2 + exit 1 +@@ -26,6 +28,15 @@ grep -Fq 'dist/smm-setup.sh' "$workflow" + grep -Fq " - 'v*'" "$workflow" + grep -Fq 'contents: write' "$workflow" + grep -Fq 'softprops/action-gh-release@' "$workflow" ++grep -Fq -- '--output-certificate server-monitor-manager-manifest.pem' "$workflow" ++grep -Fq 'server-monitor-manager-manifest.pem' "$workflow" ++grep -Fq 'gh release download "$TAG" -p "server-monitor-manager-manifest.pem"' "$release_negative_test" ++grep -Fq 'server-monitor-manager-manifest.pem' "$release_negative_test" ++grep -Fq 'run_check "manifest verification contract" bash tests/bootstrap/test-manifest-verification.sh' "$workflow" ++if grep -Fq 'v0.1.0-alpha.8' "$manifest_test" || grep -Eq 'wget|curl|gh release download' "$manifest_test"; then ++ printf '%s\n' 'bootstrap manifest contract must be deterministic and must not depend on a legacy published release' >&2 ++ exit 1 ++fi + grep -Fq 'workflow_dispatch:' "$windows_workflow" + if grep -Eq '^[[:space:]]+tags:' "$windows_workflow"; then + printf '%s\n' 'Windows packaging workflow must not trigger on tags' >&2 +@@ -43,6 +54,9 @@ grep -Fq 'Published tags and release assets are immutable.' "$policy" + grep -Fq 'publish a new, higher version tag' "$policy" + grep -Fq 'Published release tags and their assets are immutable.' "$installer_contract" + grep -Fq 'publish a new, higher version tag' "$installer_contract" ++grep -Fq '`v0.1.0-alpha.10` and `v0.1.0-alpha.11` exist as tags, but their release pipelines failed before publication.' "$policy" ++grep -Fq 'All changes to `main` require a pull request' "$policy" ++grep -Fq '`build-and-test` and `build`' "$policy" + + work="$(mktemp -d -t smm-setup-contract.XXXXXXXX)" + trap 'rm -rf -- "$work"' EXIT +@@ -83,7 +97,7 @@ chmod +x "$work/bin/curl" + + HOME="$work/home" PATH="$work/bin:$PATH" bash "$setup" version >"$work/output" + grep -Fq 'INNER_COMMAND=version' "$work/output" +-grep -Fq '/releases/download/v0.1.0-alpha.11/ochenstarik-server-monitor-manager.sh' "$work/urls" +-grep -Fq '/releases/download/v0.1.0-alpha.11/ochenstarik-server-monitor-manager.sh.sha256' "$work/urls" ++grep -Fq '/releases/download/v0.1.0-alpha.12/ochenstarik-server-monitor-manager.sh' "$work/urls" ++grep -Fq '/releases/download/v0.1.0-alpha.12/ochenstarik-server-monitor-manager.sh.sha256' "$work/urls" + + printf '%s\n' 'RELEASE_CONTRACT=PASS' +diff --git a/tests/release-verification/run-negative-tests.sh b/tests/release-verification/run-negative-tests.sh +index 64128f3..a44dde5 100644 +--- a/tests/release-verification/run-negative-tests.sh ++++ b/tests/release-verification/run-negative-tests.sh +@@ -19,6 +19,7 @@ ARCHIVE="server-monitor-manager-linux-$(uname -m | sed -e 's/x86_64/x64/' -e 's/ + gh release download "$TAG" -p "$ARCHIVE" + gh release download "$TAG" -p "server-monitor-manager-manifest.json" + gh release download "$TAG" -p "server-monitor-manager-manifest.sig" ++gh release download "$TAG" -p "server-monitor-manager-manifest.pem" + + echo "Test 1: Altered byte in archive" + cp "$ARCHIVE" "corrupted-$ARCHIVE" +@@ -35,7 +36,7 @@ cp server-monitor-manager-manifest.json corrupted-manifest.json + # Replace all hashes with zeros + sed -i 's/"[a-f0-9]\{64\}"/"0000000000000000000000000000000000000000000000000000000000000000"/g' corrupted-manifest.json + # Test verify-manifest directly +-if ./ochenstarik-server-monitor-manager.sh verify-manifest corrupted-manifest.json server-monitor-manager-manifest.sig >/dev/null 2>&1; then ++if ./ochenstarik-server-monitor-manager.sh verify-manifest corrupted-manifest.json server-monitor-manager-manifest.sig server-monitor-manager-manifest.pem >/dev/null 2>&1; then + echo "FAIL: Manifest with substituted hash accepted!" + exit 1 + fi +@@ -44,7 +45,7 @@ rm corrupted-manifest.json + + echo "Test 3: Manifest without signature" + # We just pass an empty string for the signature file argument +-if ./ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json "" >/dev/null 2>&1; then ++if ./ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json "" server-monitor-manager-manifest.pem >/dev/null 2>&1; then + echo "FAIL: Manifest without signature accepted!" + exit 1 + fi +@@ -56,7 +57,7 @@ export COSIGN_PASSWORD="" + cosign generate-key-pair + cosign sign-blob --yes --key cosign.key --output-signature fake.sig server-monitor-manager-manifest.json + # Verification must fail because ochenstarik-server-monitor-manager.sh enforces keyless OIDC identity! +-if ./ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json fake.sig >/dev/null 2>&1; then ++if ./ochenstarik-server-monitor-manager.sh verify-manifest server-monitor-manager-manifest.json fake.sig server-monitor-manager-manifest.pem >/dev/null 2>&1; then + echo "FAIL: Signature from wrong identity accepted!" + exit 1 + fi diff --git a/agents/opencode/done/.gitkeep b/agents/opencode/done/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/opencode/inbox/.gitkeep b/agents/opencode/inbox/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/agents/opencode/notes/.gitkeep b/agents/opencode/notes/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/deploy/smm-setup.sh b/deploy/smm-setup.sh index 66a1042..6cd3077 100644 --- a/deploy/smm-setup.sh +++ b/deploy/smm-setup.sh @@ -3,7 +3,7 @@ set -Eeuo pipefail IFS=$'\n\t' readonly PROGRAM_NAME="smm-setup" -readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.18" +readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.20" readonly DEFAULT_REPOSITORY="ochenstarik-ui/server-monitor-manager" readonly INNER_ASSET="ochenstarik-server-monitor-manager.sh" @@ -34,7 +34,7 @@ asset. Use -- before a command to force pass-through. Common commands: backup-create | backup-restore | version Environment overrides: - SMM_TAG Release tag (default: v0.1.0-alpha.18) + SMM_TAG Release tag (default: v0.1.0-alpha.20) SMM_REPOSITORY GitHub repository (default: ochenstarik-ui/server-monitor-manager) SMM_CACHE_DIR Verified-download cache directory USAGE diff --git a/docs/linux-bootstrap.md b/docs/linux-bootstrap.md index 4c640d7..69b256e 100644 --- a/docs/linux-bootstrap.md +++ b/docs/linux-bootstrap.md @@ -6,11 +6,11 @@ Server Monitor Manager устанавливает Control (Hub) и Agent (Node) ## Быстрая установка -Скачайте и проверьте convenience installer из `v0.1.0-alpha.18`: +Скачайте и проверьте convenience installer из `v0.1.0-alpha.20`: ```bash -curl -fsSLO https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.18/smm-setup.sh -curl -fsSLO https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.18/smm-setup.sh.sha256 +curl -fsSLO https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.20/smm-setup.sh +curl -fsSLO https://github.com/ochenstarik-ui/server-monitor-manager/releases/download/v0.1.0-alpha.20/smm-setup.sh.sha256 sha256sum -c smm-setup.sh.sha256 chmod 700 smm-setup.sh ``` diff --git a/docs/release-policy.md b/docs/release-policy.md index 8dd3ae6..1e21713 100644 --- a/docs/release-policy.md +++ b/docs/release-policy.md @@ -20,5 +20,6 @@ Known release history: - `v0.1.0-alpha.16` clears the acceptance shell's command hash after removing its test-provisioned cosign. Its automatic verification proved clean-host Hub installation, but the convenience installer wrote the bootstrap checksum success line to stdout before the machine-readable `SMMNODE2` enrollment code. Node installation therefore rejected the contaminated value. The immutable release and failed verification remain as evidence; stdout isolation is corrected in the next version. - `v0.1.0-alpha.17` keeps checksum verification fail-closed while suppressing its success line, so pass-through commands such as `node-code` return only their machine-readable bootstrap output. Its automatic verification completed the clean-host Hub and Node installation, then the negative-test harness stopped while creating a wrong-identity signature because cosign v3 requires an explicit bundle or legacy detached-output mode. The immutable release and failed harness run remain as evidence; the negative test is corrected in the next version. - `v0.1.0-alpha.18` makes the wrong-identity negative test select cosign v3's explicit detached-output mode, matching the production consumer's detached signature and certificate contract. It is the first release required to complete both automatic `workflow_run` verification and manual `workflow_dispatch` re-verification. +- `v0.1.0-alpha.19` exists as a tag, but its Release pipeline failed when the packaged convenience installer's `DEFAULT_RELEASE_TAG` did not match the immutable tag. No GitHub Release was published. The version number is burned and must not be moved, deleted, recreated, or reused. Every release candidate must pass a branch `workflow_dispatch` run of the Release pipeline before its immutable version tag is created. The release owner has sole write ownership of version sources, `deploy/**`, `tests/bootstrap/**`, release workflows, the root README release status, and translated README release statuses. Other contributors request changes to those paths in their report; they do not edit or bump them directly. One pull request covers one release topic and may merge only after required CI is green. diff --git a/tests/bootstrap/test-release-contract.sh b/tests/bootstrap/test-release-contract.sh index e2d1752..062392a 100644 --- a/tests/bootstrap/test-release-contract.sh +++ b/tests/bootstrap/test-release-contract.sh @@ -11,6 +11,7 @@ windows_workflow="$root/.github/workflows/windows-release.yml" policy="$root/docs/release-policy.md" installer_contract="$root/docs/installer-contract.md" manifest_test="$root/tests/bootstrap/test-manifest-verification.sh" +version_consistency_test="$root/tests/bootstrap/test-release-version-consistency.sh" v1_fixture="$root/tests/fixtures/alpha8-v1-release" [[ -s "$setup" ]] || { @@ -18,7 +19,12 @@ v1_fixture="$root/tests/fixtures/alpha8-v1-release" exit 1 } bash -n "$setup" -grep -Fq 'readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.18"' "$setup" +grep -Fq 'readonly DEFAULT_RELEASE_TAG="v0.1.0-alpha.20"' "$setup" +bash -n "$version_consistency_test" +if command -v shellcheck >/dev/null 2>&1; then + shellcheck --severity=error "$version_consistency_test" +fi +bash "$version_consistency_test" grep -Fq 'install-hub PUBLIC_HOST [HTTPS_PORT] [WG_PORT]' "$setup" grep -Fxq ' install-node' "$setup" if grep -Fq 'validate_control_url' "$setup" || grep -Fq '${CONTROL_URL%/}/control' "$setup"; then @@ -63,6 +69,7 @@ grep -Fq 'v0.1.0-alpha.15' "$policy" grep -Fq 'v0.1.0-alpha.16' "$policy" grep -Fq 'v0.1.0-alpha.17' "$policy" grep -Fq 'v0.1.0-alpha.18' "$policy" +grep -Fq 'v0.1.0-alpha.19' "$policy" grep -Fq 'hash -r' "$root/tests/release-verification/run-positive-installation.sh" grep -Fq -- '--use-signing-config=false --new-bundle-format=false' \ "$root/tests/release-verification/run-negative-tests.sh" @@ -193,8 +200,8 @@ chmod +x "$work/bin/uname" HOME="$work/home" PATH="$work/bin:$PATH" bash "$setup" version >"$work/output" grep -Fq 'INNER_ARGS=version ' "$work/output" -grep -Fq '/releases/download/v0.1.0-alpha.18/ochenstarik-server-monitor-manager.sh' "$work/urls" -grep -Fq '/releases/download/v0.1.0-alpha.18/ochenstarik-server-monitor-manager.sh.sha256' "$work/urls" +grep -Fq '/releases/download/v0.1.0-alpha.20/ochenstarik-server-monitor-manager.sh' "$work/urls" +grep -Fq '/releases/download/v0.1.0-alpha.20/ochenstarik-server-monitor-manager.sh.sha256' "$work/urls" node_code="$(HOME="$work/home" PATH="$work/bin:$PATH" bash "$setup" node-code fixture-node)" [[ "$node_code" == 'SMMNODE1.fixture' ]] || { diff --git a/tests/bootstrap/test-release-version-consistency.sh b/tests/bootstrap/test-release-version-consistency.sh new file mode 100644 index 0000000..8db46d5 --- /dev/null +++ b/tests/bootstrap/test-release-version-consistency.sh @@ -0,0 +1,50 @@ +#!/usr/bin/env bash +set -Eeuo pipefail +IFS=$'\n\t' + +root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" +setup="$root/deploy/smm-setup.sh" +linux_docs="$root/docs/linux-bootstrap.md" +windows_workflow="$root/.github/workflows/windows-build.yml" +release_workflow="$root/.github/workflows/linux-release.yml" + +default_tag="$(sed -n 's/^readonly DEFAULT_RELEASE_TAG="\([^"]*\)"$/\1/p' "$setup")" +[[ "$default_tag" =~ ^v[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.-]+)?$ ]] || { + printf 'invalid or missing DEFAULT_RELEASE_TAG: %s\n' "$default_tag" >&2 + exit 1 +} + +grep -Fq "SMM_TAG Release tag (default: $default_tag)" "$setup" || { + printf '%s\n' 'smm-setup help default does not match DEFAULT_RELEASE_TAG' >&2 + exit 1 +} + +windows_tag="$( + grep -E '^[[:space:]]*SMM_TEST_RELEASE_TAG:' "$windows_workflow" \ + | grep -Eo 'v[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.-]+)?' \ + | sort -u +)" +[[ "$windows_tag" == "$default_tag" ]] || { + printf 'Windows live-release tag %s does not match %s\n' "$windows_tag" "$default_tag" >&2 + exit 1 +} + +mapfile -t documented_tags < <( + grep -Eo 'v0\.1\.0-alpha\.[0-9]+' "$linux_docs" | sort -u +) +[[ ${#documented_tags[@]} -gt 0 ]] || { + printf '%s\n' 'Linux bootstrap documentation has no release download tag' >&2 + exit 1 +} +for documented_tag in "${documented_tags[@]}"; do + [[ "$documented_tag" == "$default_tag" ]] || { + printf 'Documented release tag %s does not match %s\n' "$documented_tag" "$default_tag" >&2 + exit 1 + } +done + +grep -Fq 'REHEARSAL_TAG: ${{ inputs.tag }}' "$release_workflow" +[[ "$(grep -Fc 'REHEARSAL_TAG: ${{ inputs.tag }}' "$release_workflow")" -eq 4 ]] +grep -Fq 'grep -Fq "readonly DEFAULT_RELEASE_TAG=\"${RELEASE_TAG}\""' "$release_workflow" + +printf 'RELEASE_VERSION_CONSISTENCY=PASS tag=%s\n' "$default_tag"