market network: vmuserns4  slot: 2  dir: /home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4
guest work root: /var/tmp/swc-vmuserns4  bidders: bidder-1
memory: 37351 MiB available, market network budget 5632 MiB

== runner image ==
runner: localhost/socialweb-firecracker-runner:sha-958bfd24dd4d (sha256:958bfd24dd4d21c973f8d0ea0592dbcfd34b932413106eb38f0a80a6a3addcf6)

== kcp ==
kcp ready
kcp port: 44427
kine endpoint: http://127.0.0.1:46793
kubeconfig: /home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4/kcp/admin.kubeconfig

== provider workspace and schemas ==
workspace.tenancy.kcp.io/deno-provider created
apiresourceschema.apis.kcp.io/v1alpha1-4.policyworkflowruns.deno.computer created
apiexport.apis.kcp.io/policyworkflowruns created
apiresourceschema.apis.kcp.io/v1alpha1-4.denopods.deno.computer created
apiresourceschema.apis.kcp.io/v1alpha1-2.denoruns.deno.computer created
apiresourceschema.apis.kcp.io/v1alpha1-4.denojobs.deno.computer created
apiresourceschema.apis.kcp.io/v1alpha1-3.runtriggers.deno.computer created
apiresourceschema.apis.kcp.io/v1alpha1-2.policyengines.deno.computer created
apiresourceschema.apis.kcp.io/v1alpha1-5.policyworkflowpods.deno.computer created
apiresourceschema.apis.kcp.io/v1alpha1-1.openbaos.deno.computer created
apiexport.apis.kcp.io/denoruntime created
workspacetype.tenancy.kcp.io/workflow created
workspacetype.tenancy.kcp.io/denoruntime created
provider workspace: root:deno-provider
provider server:    https://127.0.0.1:44427/clusters/root:deno-provider
NAME
v1alpha1-1.openbaos.deno.computer
v1alpha1-2.denoruns.deno.computer
v1alpha1-2.policyengines.deno.computer
v1alpha1-3.runtriggers.deno.computer
v1alpha1-4.denojobs.deno.computer
v1alpha1-4.denopods.deno.computer
v1alpha1-4.policyworkflowruns.deno.computer
v1alpha1-5.policyworkflowpods.deno.computer
NAME                 IDENTITYHASH
denoruntime          ebc0c3ca8b3aa52f8026cd5898318ebb493959f588f397a38a1c30973c37506f
policyworkflowruns   aa2859c66100442fdc41005892ed3fd31ec7dffdd27d3a64b827cb9018d63a86

== provider build ==
provider: /home/johnandersen777/.local/state/swc-tasks/vm-userns/build/deno-kcp-provider-940cba2672c7-4351b774fc54-bf33d26fd9e4

== openbao ==
started /usr/local/bin/bao (pid 686537), log /home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4/openbao/bao.log
openbao is up at http://127.0.0.1:34933

start the provider against it with:
  --openbao-addr http://127.0.0.1:34933 --openbao-token root

== export endpoints ==
workspace.tenancy.kcp.io/global created
workspace.tenancy.kcp.io/relay created
workspace.tenancy.kcp.io/alice created
workspace.tenancy.kcp.io/bob created
endpoints: https://127.0.0.1:44427/services/apiexport/293lrqkjmdxmf5rr/denoruntime https://127.0.0.1:44427/services/apiexport/293lrqkjmdxmf5rr/policyworkflowruns

== provider ==

== apply ==
apply attempt 1 of 3
org root:    /home/johnandersen777/src/publicdomainrelay-kcp-tasks/vm-userns
root server: https://127.0.0.1:44427/clusters/root
market network:         vmuserns4 (/home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4) bidders: bidder-1 
generated the guest TLS CA and the relay.localhost leaf in /home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4/guest-tls
workspace.tenancy.kcp.io/global unchanged
workspace.tenancy.kcp.io/relay unchanged
workspace.tenancy.kcp.io/alice unchanged
workspace.tenancy.kcp.io/bob unchanged
workspace root:global Ready
workspace root:relay Ready
workspace root:alice Ready
workspace root:bob Ready
generated a PDS signing key at /home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4/keys/alice-pds.hex
generated a bob PDS signing key at /home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4/keys/bob-pds.hex
the OpenBao namespace for root:global never became ready within 60s
apiVersion: deno.computer/v1alpha1
kind: OpenBao
metadata:
  annotations:
    kcp.io/cluster: 2aga3d04ifbopfnk
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"deno.computer/v1alpha1","kind":"OpenBao","metadata":{"annotations":{},"finalizers":["openbao.deno.computer/namespace"],"name":"openbao","namespace":"default"},"spec":{"namespace":"global.default"}}
  creationTimestamp: "2026-10-12T05:30:37Z"
  finalizers:
  - openbao.deno.computer/namespace
  generation: 1
  name: openbao
  namespace: default
  resourceVersion: "1010"
  uid: 76299f15-d28a-456e-924a-4c0a156a3cf3
spec:
  namespace: global.default
no workload exists and nothing reconciled within 30s; restarting the provider and applying again
apply attempt 2 of 3
org root:    /home/johnandersen777/src/publicdomainrelay-kcp-tasks/vm-userns
root server: https://127.0.0.1:44427/clusters/root
market network:         vmuserns4 (/home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4) bidders: bidder-1 
workspace.tenancy.kcp.io/global unchanged
workspace.tenancy.kcp.io/relay unchanged
workspace.tenancy.kcp.io/alice unchanged
workspace.tenancy.kcp.io/bob unchanged
workspace root:global Ready
workspace root:relay Ready
workspace root:alice Ready
workspace root:bob Ready
root:global OpenBao authority ready
root:relay OpenBao authority ready
root:alice OpenBao authority ready
root:bob OpenBao authority ready
denopod.deno.computer/plc created
denopod.deno.computer/dispatcher created
denopod.deno.computer/dispatcher-tls created
dispatcher: relay.localhost:40647  guest TLS front: 127.0.0.1:36797
denopod.deno.computer/pds created
denopod.deno.computer/pds created
denopod.deno.computer/relay created
generated a bidder-1 signing key at /home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4/keys/bidder-1.hex
denopod.deno.computer/bidder-1 created
denopod.deno.computer/verifier created
root:global  plc             phase=Running ready=true address=127.0.0.1:43765
root:relay   relay           phase=Running ready=true address=127.0.0.1:39477
root:relay   dispatcher      phase=Running ready=true address=relay.localhost:40647
root:relay   dispatcher-tls  phase=Running ready=true address=127.0.0.1:36797
root:alice   pds             phase=Running ready=true address=127.0.0.1:36145
root:bob     pds             phase=Running ready=true address=127.0.0.1:46769
root:bob     bidder-1        phase=Running ready=true address=127.0.0.1:43561

waiting for the verifier, which creates an account on the PDS, reads it back
from the PLC directory and watches the relay for one of its commits:
verifier phase=Succeeded
{"accessJwt":"eyJ0eXAiOiJhdCtqd3QiLCJhbGciOiJFUzI1NksiLCJraWQiOiJkaWQ6a2V5OnpRM3NoZlRwTVR0MUgxcTZZZ3Ryc1pYZkFpWGR2cVE5a3BOQ1FWRWFQVGFmYXpxNVgjYXRwcm90byJ9.eyJpc3MiOiJkaWQ6a2V5OnpRM3NoZlRwTVR0MUgxcTZZZ3Ryc1pYZkFpWGR2cVE5a3BOQ1FWRWFQVGFmYXpxNVgiLCJzdWIiOiJkaWQ6cGxjOmE3cHp1ZjVzNnVtN3d5eml0bXA0d251aiIsImhhbmRsZSI6ImFsaWNlLW12NHRmNXF6IiwiYXVkIjoiZGlkOmtleTp6UTNzaGZUcE1UdDFIMXE2WWd0cnNaWGZBaVhkdnFROWtwTkNRVkVhUFRhZmF6cTVYIiwiaWF0IjoxNzkxNzgzMTQzLCJleHAiOjE3OTE3ODQwNDMsImp0aSI6IkhUVWFFNGN6R1VYa256VWstM0JsalEifQ.jvIDxonP5OMn2RhQOe4C8DKofrE28mEek9eQB_S5PNYEftieOAyD8aDjdIn4rmEXkW0yxBwp5tl3OdlBHDIxaw"
"createAccountStatus":"200"
"did":"did:plc:a7pzuf5s6um7wyzitmp4wnuj"
"firstWriteStatus":"200"
"gotAccessJwt":"yes"
"handle":"alice-mv4tf5qz"
"plcAlsoKnownAs":"[\"at://alice-mv4tf5qz\"]"
"plcService":"[{\"id\":\"#atproto_pds\"
\"type\":\"AtprotoPersonalDataServer\"
\"serviceEndpoint\":\"https://pds.default.alice.svc.kcp.local\"}]"
"plcStatus":"200"
"relayFrames":"1"
"relaySawCommit":"yes"
"secondWriteStatus":"200"
"verdict":"pass"}

authorities:
  root:global global.default serial=3E:36:36:58:21:19:ED:AE:68:C0:E3:D5:10:F1:42:66:2E:AF:87:58
  root:relay relay.default serial=49:7A:11:67:91:3E:76:37:FA:24:EB:25:AE:AE:24:32:58:A5:26:9B
  root:alice alice.default serial=6F:A7:B4:FE:31:91:30:7D:45:77:7A:F2:C2:FC:5E:B9:06:13:AC:B4
  root:bob bob.default serial=09:41:A3:7B:F6:96:0C:A0:BA:05:23:09:CE:33:F5:CE:76:DC:28:74

addresses (also in /home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4/addresses.env):
  PLC_ADDRESS=127.0.0.1:43765
  RELAY_ADDRESS=127.0.0.1:39477
  DISPATCHER_ADDRESS=relay.localhost:40647
  DISPATCHER_TLS_ADDRESS=127.0.0.1:36797
  ALICE_PDS_ADDRESS=127.0.0.1:36145
  BOB_PDS_ADDRESS=127.0.0.1:46769
  BIDDERS="bidder-1 "
  BIDDER_ADDRESS_bidder_1=127.0.0.1:43561

health: every service pod sets SERVICE_TLS true except the bidders, so their
listeners are https except the bidders'. The service names do not resolve on
the host, so a check resolves the name to the loopback address its listener
holds and verifies the leaf against the market CA, read out of OpenBao first:

  curl -sS -H 'X-Vault-Token: root' http://127.0.0.1:34933/v1/pki/ca/pem > ca.pem
  curl --cacert ca.pem --resolve pds.default.alice.svc.kcp.local:36145:127.0.0.1 https://pds.default.alice.svc.kcp.local:36145/xrpc/_health

== record ==
plc=43765 dispatcher=40647 guest-tls=36797 bob-pds=46769 bidders=did:plc:wo5z7phlf6trp67a3i4w7gpq

== checks ==
waiting 10s, then reading the long-running pods again

== market contract ==
bidders: did:plc:wo5z7phlf6trp67a3i4w7gpq  guests reach the dispatcher at: 192.168.0.20
requester exit=0 after 18s, log /home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4/market-requester.log

results:
  check                                result evidence
  apply.sh                             PASS exit=0 attempts=1 0
  denopod root:global/plc              PASS phase=Running ready=true address=127.0.0.1:43765
  denopod root:relay/relay             PASS phase=Running ready=true address=127.0.0.1:39477
  denopod root:relay/dispatcher        PASS phase=Running ready=true address=relay.localhost:40647
  denopod root:relay/dispatcher-tls    PASS phase=Running ready=true address=127.0.0.1:36797
  denopod root:alice/pds               PASS phase=Running ready=true address=127.0.0.1:36145
  denopod root:bob/pds                 PASS phase=Running ready=true address=127.0.0.1:46769
  denopod root:bob/bidder-1            PASS phase=Running ready=true address=127.0.0.1:43561
  denopod root:alice/verifier          PASS phase=Succeeded
  market network record                           PASS every service reported its own port (7 services)
  bob pds on its name                  PASS ready=true probe=kcpdns pds.default.bob.svc.kcp.local /xrpc/_health
  bob pds on the host                  PASS GET https://pds.default.bob.svc.kcp.local:46769/xrpc/_health -> 200
  bidder-1 on its name                 PASS ready=true probe=kcpdns bidder-1.default.bob.svc.kcp.local /oauth-client-metadata.json
  bidder-1 on the host                 PASS GET http://127.0.0.1:43561/oauth-client-metadata.json -> 200
  still up root:global/plc             PASS phase=Running ready=true after 10s
  still up root:relay/relay            PASS phase=Running ready=true after 10s
  still up root:relay/dispatcher       PASS phase=Running ready=true after 10s
  still up root:relay/dispatcher-tls   PASS phase=Running ready=true after 10s
  still up root:alice/pds              PASS phase=Running ready=true after 10s
  still up root:bob/pds                PASS phase=Running ready=true after 10s
  still up root:bob/bidder-1           PASS phase=Running ready=true after 10s
  market guest onNetwork               PASS after 16345ms: iroh://endpointacxvlxdvtojvvbhugupbzleq3tdmyyx32fzowbbqzgqo5 winner=did:plc:wo5z7phlf6trp67a3i4w7gpq bids=1
  market contract released             PASS vm.delete status=200 total=16457ms
  market guest gone                    PASS fc-4bff2e6ff04b-08c79884: no running container labelled swc.market-network=vmuserns4 and no work dir 2s after release

market network record: /home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4/market-network.json
accept: pass
teardown: LEFT processes=[671945 766929 766968 766970 ] containers=[] ports=[] workroot=
kept /home/johnandersen777/.local/state/swc-tasks/vm-userns/market-networks/vmuserns4
