@openclaw/mxc-sandbox 2026.9.3 → 2026.9.5

package/node_modules/zod/v4/mini/schemas.d.ts

@@ -1,4 +1,5 @@
 import * as core from "../core/index.js";
+import type { $ZodBigIntFormats } from "../core/index.js";
 import * as util from "../core/util.js";
 type SomeType = core.SomeType;
 export interface ZodMiniType<out Output = unknown, out Input = unknown, out Internals extends core.$ZodTypeInternals<Output, Input> = core.$ZodTypeInternals<Output, Input>> extends core.$ZodType<Output, Input, Internals> {
@@ -15,7 +16,7 @@ export interface ZodMiniType<out Output = unknown, out Input = unknown, out Inte
     safeParse(data: unknown, params?: core.ParseContext<core.$ZodIssue>): util.SafeParseResult<core.output<this>>;
     parseAsync(data: unknown, params?: core.ParseContext<core.$ZodIssue>): Promise<core.output<this>>;
     safeParseAsync(data: unknown, params?: core.ParseContext<core.$ZodIssue>): Promise<util.SafeParseResult<core.output<this>>>;
-    apply<T>(fn: (schema: this) => T): T;
+    apply<T, TArgs extends unknown[] = []>(fn: (schema: this, ...args: TArgs) => T, ...args: TArgs): T;
 }
 interface _ZodMiniType<out Internals extends core.$ZodTypeInternals = core.$ZodTypeInternals> extends ZodMiniType<any, any, Internals> {
 }
@@ -127,6 +128,10 @@ export interface ZodMiniE164 extends _ZodMiniString<core.$ZodE164Internals> {
 }
 export declare const ZodMiniE164: core.$constructor<ZodMiniE164>;
 export declare function e164(params?: string | core.$ZodE164Params): ZodMiniE164;
+export interface ZodMiniCreditCard extends _ZodMiniString<core.$ZodCreditCardInternals> {
+}
+export declare const ZodMiniCreditCard: core.$constructor<ZodMiniCreditCard>;
+export declare function creditCard(params?: string | core.$ZodCreditCardParams): ZodMiniCreditCard;
 export interface ZodMiniJWT extends _ZodMiniString<core.$ZodJWTInternals> {
 }
 export declare const ZodMiniJWT: core.$constructor<ZodMiniJWT>;
@@ -148,14 +153,24 @@ export interface ZodMiniNumber<Input = unknown> extends _ZodMiniNumber<core.$Zod
 }
 export declare const ZodMiniNumber: core.$constructor<ZodMiniNumber>;
 export declare function number(params?: string | core.$ZodNumberParams): ZodMiniNumber<number>;
-export interface ZodMiniNumberFormat extends _ZodMiniNumber<core.$ZodNumberFormatInternals>, core.$ZodNumberFormat {
+export interface ZodMiniNumberFormat<Format extends core.$ZodNumberFormats = core.$ZodNumberFormats> extends _ZodMiniNumber<core.$ZodNumberFormatInternals<Format>>, core.$ZodNumberFormat<Format> {
 }
 export declare const ZodMiniNumberFormat: core.$constructor<ZodMiniNumberFormat>;
-export declare function int(params?: string | core.$ZodCheckNumberFormatParams): ZodMiniNumberFormat;
-export declare function float32(params?: string | core.$ZodCheckNumberFormatParams): ZodMiniNumberFormat;
-export declare function float64(params?: string | core.$ZodCheckNumberFormatParams): ZodMiniNumberFormat;
-export declare function int32(params?: string | core.$ZodCheckNumberFormatParams): ZodMiniNumberFormat;
-export declare function uint32(params?: string | core.$ZodCheckNumberFormatParams): ZodMiniNumberFormat;
+export interface ZodMiniInt extends ZodMiniNumberFormat<"safeint"> {
+}
+export declare function int(params?: string | core.$ZodCheckNumberFormatParams): ZodMiniInt;
+export interface ZodMiniFloat32 extends ZodMiniNumberFormat<"float32"> {
+}
+export declare function float32(params?: string | core.$ZodCheckNumberFormatParams): ZodMiniFloat32;
+export interface ZodMiniFloat64 extends ZodMiniNumberFormat<"float64"> {
+}
+export declare function float64(params?: string | core.$ZodCheckNumberFormatParams): ZodMiniFloat64;
+export interface ZodMiniInt32 extends ZodMiniNumberFormat<"int32"> {
+}
+export declare function int32(params?: string | core.$ZodCheckNumberFormatParams): ZodMiniInt32;
+export interface ZodMiniUInt32 extends ZodMiniNumberFormat<"uint32"> {
+}
+export declare function uint32(params?: string | core.$ZodCheckNumberFormatParams): ZodMiniUInt32;
 export interface ZodMiniBoolean<T = unknown> extends _ZodMiniType<core.$ZodBooleanInternals<T>> {
 }
 export declare const ZodMiniBoolean: core.$constructor<ZodMiniBoolean>;
@@ -164,11 +179,15 @@ export interface ZodMiniBigInt<T = unknown> extends _ZodMiniType<core.$ZodBigInt
 }
 export declare const ZodMiniBigInt: core.$constructor<ZodMiniBigInt>;
 export declare function bigint(params?: string | core.$ZodBigIntParams): ZodMiniBigInt<bigint>;
-export interface ZodMiniBigIntFormat extends _ZodMiniType<core.$ZodBigIntFormatInternals> {
+export interface ZodMiniBigIntFormat<Format extends $ZodBigIntFormats = $ZodBigIntFormats> extends _ZodMiniType<core.$ZodBigIntFormatInternals<Format>> {
 }
 export declare const ZodMiniBigIntFormat: core.$constructor<ZodMiniBigIntFormat>;
-export declare function int64(params?: string | core.$ZodBigIntFormatParams): ZodMiniBigIntFormat;
-export declare function uint64(params?: string | core.$ZodBigIntFormatParams): ZodMiniBigIntFormat;
+export interface ZodMiniInt64 extends ZodMiniBigIntFormat<"int64"> {
+}
+export declare function int64(params?: string | core.$ZodBigIntFormatParams): ZodMiniInt64;
+export interface ZodMiniUInt64 extends ZodMiniBigIntFormat<"uint64"> {
+}
+export declare function uint64(params?: string | core.$ZodBigIntFormatParams): ZodMiniUInt64;
 export interface ZodMiniSymbol extends _ZodMiniType<core.$ZodSymbolInternals> {
 }
 export declare const ZodMiniSymbol: core.$constructor<ZodMiniSymbol>;
@@ -223,8 +242,10 @@ export type SafeExtendShape<Base extends core.$ZodShape, Ext extends core.$ZodLo
     [K in keyof Ext]: K extends keyof Base ? core.output<Ext[K]> extends core.output<Base[K]> ? core.input<Ext[K]> extends core.input<Base[K]> ? Ext[K] : never : never : Ext[K];
 };
 export declare function safeExtend<T extends ZodMiniObject, U extends core.$ZodLooseShape>(schema: T, shape: SafeExtendShape<T["shape"], U>): ZodMiniObject<util.Extend<T["shape"], util.Writeable<U>>, T["_zod"]["config"]>;
-/** @deprecated Identical to `z.extend(A, B)` */
-export declare function merge<T extends ZodMiniObject, U extends ZodMiniObject>(a: T, b: U): ZodMiniObject<util.Extend<T["shape"], U["shape"]>, T["_zod"]["config"]>;
+/**
+ * @deprecated Use [`z.extend(A, B.shape)`](https://zod.dev/api?id=extend) instead.
+ */
+export declare function merge<T extends ZodMiniObject, U extends ZodMiniObject>(a: T, b: U): ZodMiniObject<util.Extend<T["shape"], U["shape"]>, U["_zod"]["config"]>;
 export declare function pick<T extends ZodMiniObject, M extends util.Mask<keyof T["shape"]>>(schema: T, mask: M & Record<Exclude<keyof M, keyof T["shape"]>, never>): ZodMiniObject<util.Flatten<Pick<T["shape"], keyof T["shape"] & keyof M>>, T["_zod"]["config"]>;
 export declare function omit<T extends ZodMiniObject, M extends util.Mask<keyof T["shape"]>>(schema: T, mask: M & Record<Exclude<keyof M, keyof T["shape"]>, never>): ZodMiniObject<util.Flatten<Omit<T["shape"], keyof M>>, T["_zod"]["config"]>;
 export declare function partial<T extends ZodMiniObject>(schema: T): ZodMiniObject<{
@@ -233,6 +254,15 @@ export declare function partial<T extends ZodMiniObject>(schema: T): ZodMiniObje
 export declare function partial<T extends ZodMiniObject, M extends util.Mask<keyof T["shape"]>>(schema: T, mask: M & Record<Exclude<keyof M, keyof T["shape"]>, never>): ZodMiniObject<{
     -readonly [k in keyof T["shape"]]: k extends keyof M ? ZodMiniOptional<T["shape"][k]> : T["shape"][k];
 }, T["_zod"]["config"]>;
+export declare function partial<T extends util.TupleItems, Rest extends SomeType | null>(schema: ZodMiniTuple<T, Rest>): ZodMiniTuple<{
+    -readonly [k in keyof T]: ZodMiniOptional<T[k]>;
+}, Rest>;
+export declare function exactPartial<T extends ZodMiniObject>(schema: T): ZodMiniObject<{
+    -readonly [k in keyof T["shape"]]: ZodMiniExactOptional<T["shape"][k]>;
+}, T["_zod"]["config"]>;
+export declare function exactPartial<T extends ZodMiniObject, M extends util.Mask<keyof T["shape"]>>(schema: T, mask: M & Record<Exclude<keyof M, keyof T["shape"]>, never>): ZodMiniObject<{
+    -readonly [k in keyof T["shape"]]: k extends keyof M ? ZodMiniExactOptional<T["shape"][k]> : T["shape"][k];
+}, T["_zod"]["config"]>;
 export type RequiredInterfaceShape<Shape extends core.$ZodLooseShape, Keys extends PropertyKey = keyof Shape> = util.Identity<{
     [k in keyof Shape as k extends Keys ? k : never]: ZodMiniNonOptional<Shape[k]>;
 } & {
@@ -260,7 +290,7 @@ export interface ZodMiniDiscriminatedUnion<Options extends readonly SomeType[] =
     _zod: core.$ZodDiscriminatedUnionInternals<Options, Disc>;
 }
 export declare const ZodMiniDiscriminatedUnion: core.$constructor<ZodMiniDiscriminatedUnion>;
-export declare function discriminatedUnion<Types extends readonly [core.$ZodTypeDiscriminable<Disc>, ...core.$ZodTypeDiscriminable<Disc>[]], Disc extends string>(discriminator: Disc, options: Types, params?: string | core.$ZodDiscriminatedUnionParams): ZodMiniDiscriminatedUnion<Types, Disc>;
+export declare function discriminatedUnion<Types extends readonly [core.$ZodTypeDiscriminable, ...core.$ZodTypeDiscriminable[]], Disc extends string>(discriminator: Disc, options: Types, params?: string | core.$ZodDiscriminatedUnionParams): ZodMiniDiscriminatedUnion<Types, Disc>;
 export interface ZodMiniIntersection<A extends SomeType = core.$ZodType, B extends SomeType = core.$ZodType> extends _ZodMiniType<core.$ZodIntersectionInternals<A, B>> {
 }
 export declare const ZodMiniIntersection: core.$constructor<ZodMiniIntersection>;

package/node_modules/zod/v4/mini/schemas.js

@@ -7,31 +7,49 @@ export const ZodMiniType = /*@__PURE__*/ core.$constructor("ZodMiniType", (inst,
     core.$ZodType.init(inst, def);
     inst.def = def;
     inst.type = def.type;
-    inst.parse = (data, params) => parse.parse(inst, data, params, { callee: inst.parse });
-    inst.safeParse = (data, params) => parse.safeParse(inst, data, params);
-    inst.parseAsync = async (data, params) => parse.parseAsync(inst, data, params, { callee: inst.parseAsync });
-    inst.safeParseAsync = async (data, params) => parse.safeParseAsync(inst, data, params);
-    inst.check = (...checks) => {
-        return inst.clone({
+}, {
+    // `with` is an alias for `check`: the same function object, not a wrapper.
+    get with() {
+        return this.check;
+    },
+    set with(value) {
+        util.own(this, "with", value);
+    },
+    parse(data, params) {
+        return parse.parse(this, data, params, { callee: this.parse });
+    },
+    parseAsync(data, params) {
+        return parse.parseAsync(this, data, params, { callee: this.parseAsync });
+    },
+    safeParse(data, params) {
+        return parse.safeParse(this, data, params);
+    },
+    safeParseAsync(data, params) {
+        return parse.safeParseAsync(this, data, params);
+    },
+    check(...checks) {
+        const def = this.def;
+        return this.clone({
             ...def,
             checks: [
                 ...(def.checks ?? []),
-                ...checks.map((ch) => typeof ch === "function"
-                    ? {
-                        _zod: { check: ch, def: { check: "custom" }, onattach: [] },
-                    }
-                    : ch),
+                ...checks.map((ch) => typeof ch === "function" ? { _zod: { check: ch, def: { check: "custom" }, onattach: [] } } : ch),
             ],
         }, { parent: true });
-    };
-    inst.with = inst.check;
-    inst.clone = (_def, params) => core.clone(inst, _def, params);
-    inst.brand = () => inst;
-    inst.register = ((reg, meta) => {
-        reg.add(inst, meta);
-        return inst;
-    });
-    inst.apply = (fn) => fn(inst);
+    },
+    clone(_def, params) {
+        return core.clone(this, _def, params);
+    },
+    brand() {
+        return this;
+    },
+    register(reg, meta) {
+        reg.add(this, meta);
+        return this;
+    },
+    apply(fn, ...args) {
+        return args.length === 0 ? fn(this) : fn(this, ...args);
+    },
 });
 export const ZodMiniString = /*@__PURE__*/ core.$constructor("ZodMiniString", (inst, def) => {
     core.$ZodString.init(inst, def);
@@ -231,6 +249,14 @@ export const ZodMiniE164 = /*@__PURE__*/ core.$constructor("ZodMiniE164", (inst,
 export function e164(params) {
     return core._e164(ZodMiniE164, params);
 }
+export const ZodMiniCreditCard = /*@__PURE__*/ core.$constructor("ZodMiniCreditCard", (inst, def) => {
+    core.$ZodCreditCard.init(inst, def);
+    ZodMiniStringFormat.init(inst, def);
+});
+// @__NO_SIDE_EFFECTS__
+export function creditCard(params) {
+    return core._creditCard(ZodMiniCreditCard, params);
+}
 export const ZodMiniJWT = /*@__PURE__*/ core.$constructor("ZodMiniJWT", (inst, def) => {
     core.$ZodJWT.init(inst, def);
     ZodMiniStringFormat.init(inst, def);
@@ -277,28 +303,18 @@ export const ZodMiniNumberFormat = /*@__PURE__*/ core.$constructor("ZodMiniNumbe
     core.$ZodNumberFormat.init(inst, def);
     ZodMiniNumber.init(inst, def);
 });
-// int
-// @__NO_SIDE_EFFECTS__
 export function int(params) {
     return core._int(ZodMiniNumberFormat, params);
 }
-// float32
-// @__NO_SIDE_EFFECTS__
 export function float32(params) {
     return core._float32(ZodMiniNumberFormat, params);
 }
-// float64
-// @__NO_SIDE_EFFECTS__
 export function float64(params) {
     return core._float64(ZodMiniNumberFormat, params);
 }
-// int32
-// @__NO_SIDE_EFFECTS__
 export function int32(params) {
     return core._int32(ZodMiniNumberFormat, params);
 }
-// uint32
-// @__NO_SIDE_EFFECTS__
 export function uint32(params) {
     return core._uint32(ZodMiniNumberFormat, params);
 }
@@ -322,13 +338,9 @@ export const ZodMiniBigIntFormat = /*@__PURE__*/ core.$constructor("ZodMiniBigIn
     core.$ZodBigIntFormat.init(inst, def);
     ZodMiniBigInt.init(inst, def);
 });
-// int64
-// @__NO_SIDE_EFFECTS__
 export function int64(params) {
     return core._int64(ZodMiniBigIntFormat, params);
 }
-// uint64
-// @__NO_SIDE_EFFECTS__
 export function uint64(params) {
     return core._uint64(ZodMiniBigIntFormat, params);
 }
@@ -420,7 +432,7 @@ export function keyof(schema) {
 export const ZodMiniObject = /*@__PURE__*/ core.$constructor("ZodMiniObject", (inst, def) => {
     core.$ZodObject.init(inst, def);
     ZodMiniType.init(inst, def);
-    util.defineLazy(inst, "shape", () => def.shape);
+    util.installLazyProp(inst, "shape", (self) => self._zod.def.shape, false);
 });
 // @__NO_SIDE_EFFECTS__
 export function object(shape, params) {
@@ -460,9 +472,12 @@ export function extend(schema, shape) {
 export function safeExtend(schema, shape) {
     return util.safeExtend(schema, shape);
 }
+/**
+ * @deprecated Use [`z.extend(A, B.shape)`](https://zod.dev/api?id=extend) instead.
+ */
 // @__NO_SIDE_EFFECTS__
-export function merge(schema, shape) {
-    return util.extend(schema, shape);
+export function merge(a, b) {
+    return util.merge(a, b);
 }
 // @__NO_SIDE_EFFECTS__
 export function pick(schema, mask) {
@@ -475,7 +490,20 @@ export function omit(schema, mask) {
 }
 // @__NO_SIDE_EFFECTS__
 export function partial(schema, mask) {
-    return util.partial(ZodMiniOptional, schema, mask);
+    const def = schema._zod.def;
+    if (def.type !== "tuple")
+        return util.partial(ZodMiniOptional, schema, mask);
+    // a refinement was authored against the full arity; partialing would run it on a shorter array
+    if (def.checks?.length)
+        throw new Error(".partial() cannot be used on tuple schemas containing refinements");
+    return util.clone(schema, {
+        ...def,
+        items: def.items.map((item) => new ZodMiniOptional({ type: "optional", innerType: item })),
+    });
+}
+// @__NO_SIDE_EFFECTS__
+export function exactPartial(schema, mask) {
+    return util.partial(ZodMiniExactOptional, schema, mask, "exactPartial");
 }
 // @__NO_SIDE_EFFECTS__
 export function required(schema, mask) {
@@ -520,7 +548,7 @@ export const ZodMiniDiscriminatedUnion = /*@__PURE__*/ core.$constructor("ZodMin
 export function discriminatedUnion(discriminator, options, params) {
     return new ZodMiniDiscriminatedUnion({
         type: "union",
-        options,
+        options: options,
         discriminator,
         ...util.normalizeParams(params),
     });
@@ -577,13 +605,12 @@ export function record(keyType, valueType, params) {
 }
 // @__NO_SIDE_EFFECTS__
 export function partialRecord(keyType, valueType, params) {
-    const k = core.clone(keyType);
-    k._zod.values = undefined;
     return new ZodMiniRecord({
         type: "record",
-        keyType: k,
+        keyType,
         valueType: valueType,
         ...util.normalizeParams(params),
+        partial: true,
     });
 }
 export function looseRecord(keyType, valueType, params) {
@@ -779,7 +806,7 @@ function _catch(innerType, catchValue) {
     return new ZodMiniCatch({
         type: "catch",
         innerType: innerType,
-        catchValue: (typeof catchValue === "function" ? catchValue : () => catchValue),
+        catchValue: (typeof catchValue === "function" ? catchValue : core.util.constantCatch(catchValue)),
     });
 }
 export { _catch as catch };
@@ -891,8 +918,7 @@ export function check(fn, params) {
     ch._zod.check = fn;
     return ch;
 }
-// ZodCustom
-// custom schema
+// ZodCustom custom schema
 // @__NO_SIDE_EFFECTS__
 export function custom(fn, _params) {
     return core._custom(ZodMiniCustom, fn ?? (() => true), _params);

package/openclaw.plugin.json

@@ -1,11 +1,32 @@
 {
   "id": "mxc",
+  "categories": ["security"],
   "name": "MXC Sandbox Execution",
   "description": "OS-level sandboxed tool execution via MXC: runs commands in a Windows ProcessContainer with configured MXC policy files.",
   "activation": {
     "onStartup": false,
     "onConfigPaths": ["plugins.entries.mxc"]
   },
+  "configGroups": [
+    {
+      "id": "sandbox-execution",
+      "title": "Sandbox execution",
+      "order": 10,
+      "properties": ["mxcBinaryPath", "containment", "timeoutSeconds"]
+    },
+    {
+      "id": "sandbox-policy",
+      "title": "Sandbox policy",
+      "order": 20,
+      "properties": ["network", "mxcPolicyPaths"]
+    },
+    {
+      "id": "diagnostics",
+      "title": "Diagnostics",
+      "order": 30,
+      "properties": ["debug"]
+    }
+  ],
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/mxc-sandbox",
-  "version": "2026.9.3",
+  "version": "2026.9.5",
   "description": "OpenClaw MXC sandbox execution plugin for MXC-capable hosts",
   "repository": {
     "type": "git",
@@ -8,23 +8,24 @@
   },
   "type": "module",
   "dependencies": {
-    "@microsoft/mxc-sdk": "0.7.0",
-    "zod": "4.4.3"
+    "@microsoft/mxc-sdk": "0.8.0",
+    "zod": "4.5.4"
   },
   "openclaw": {
     "extensions": [
       "./index.ts"
     ],
     "install": {
+      "clawhubSpec": "clawhub:@openclaw/mxc-sandbox",
       "npmSpec": "@openclaw/mxc-sandbox",
       "defaultChoice": "npm",
       "minHostVersion": ">=2026.6.11"
     },
     "compat": {
-      "pluginApi": ">=2026.9.3"
+      "pluginApi": ">=2026.9.5"
     },
     "build": {
-      "openclawVersion": "2026.9.3",
+      "openclawVersion": "2026.9.5",
       "bundledDist": false,
       "staticAssets": [
         {
@@ -44,10 +45,12 @@
   "files": [
     "dist/**",
     "openclaw.plugin.json",
-    "README.md"
+    "README.md",
+    "assets/icon.png",
+    "assets/activity.svg"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.9.3"
+    "openclaw": ">=2026.9.5"
   },
   "peerDependenciesMeta": {
     "openclaw": {

package/node_modules/@microsoft/mxc-sdk/bin/arm64/_manifest/spdx_2.2/ESRPClientLogs0613045248271.json

@@ -1 +0,0 @@
-{"StdOut":"******************************************************************************\r\nMachine Information\r\nMachine Name: at-blueTKKEU7\r\nMachine Ip: 10.0.0.57\r\nOperating System: Microsoft Windows NT 10.0.26100.0\r\nUser Name: at-blueTKKEU7$\r\nProcessor Count: 64\r\nProcess Name: EsrpClient\r\nProcess Id: 4948\r\nCaller Program: EsrpClient.exe\r\nIdentity: NT AUTHORITY\\NETWORK SERVICE\r\nProcess Version: 1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\r\nProcess Bitness: 64 bit\r\n******************************************************************************\r\nCommandline received: Sign | -a | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp14704_397633.json | -p | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp14704_495459.json | -c | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp14704_266437.json | -i | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp12796_783902.json | -o | c:\\Temp\\AzureTemp\\TFSTemp\\v3867B0.tmp | -l | Verbose ESRP session Id is: b0ab86c9-0109-4b0e-9c88-8da9e050348b\r\n2026-06-13T04:52:40.0580214Z:Command you are trying to use is: Sign\r\n2026-06-13T04:52:40.0646387Z:Correlation Vector for this run is: 4c2a1dbc-c96b-4fa6-8a09-65447b674e75\r\n2026-06-13T04:52:40.0646387Z:Groupid for this run is empty\r\n2026-06-13T04:52:40.1943701Z:request signing cert being used is this thumbprint: 88052E651561B29C26E3DCCC68EE30EF1AE88FD3  in store LocalMachine\\My\r\n2026-06-13T04:52:40.1943701Z:Both certificates validation passed.\r\n2026-06-13T04:52:40.1962089Z:The auth cert we choose to use, subject name is: CN=0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f.microsoft.com, thumbprint is: 943507930F1390CF64FC5E9DB45F03091556EEBE\r\n2026-06-13T04:52:40.2575298Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z] ConfidentialClientApplication 37368736 created\r\n2026-06-13T04:52:40.2578601Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-06-13T04:52:40.2631047Z:There is no memory mapped file accociated with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-06-13T04:52:40.2654795Z:AAD auth caching is in use with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-06-13T04:52:40.2755058Z:Validate and Renew Token if necessary finished: 00:00:00.0084251\r\n2026-06-13T04:52:40.3861203Z:Session request is: {\r\n  \"expiresAfter\": \"3.00:00:00\",\r\n  \"partitionCount\": 0,\r\n  \"isProvisionStorage\": true,\r\n  \"isLegacyCopsModel\": false,\r\n  \"commandName\": \"Sign\",\r\n  \"intent\": \"digestsign\",\r\n  \"contentType\": \"Bin\",\r\n  \"contentOrigin\": \"3rd Party\",\r\n  \"productState\": null,\r\n  \"audience\": \"External Broad\"\r\n}\r\n2026-06-13T04:52:40.4260693Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z] ConfidentialClientApplication 29578451 created\r\n2026-06-13T04:52:40.4260693Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-06-13T04:52:40.4365148Z:Gateway Client: a new client and client id is created:  27c99217-cc96-4895-912d-5d36799d1a52\r\n2026-06-13T04:52:40.4805182Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] MSAL MSAL.Desktop with assembly version '4.70.0.0'. CorrelationId(a569509e-d1b4-4def-97f3-b56d05075cb0)\r\n2026-06-13T04:52:40.4949609Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] === AcquireTokenForClientParameters ===\r\nSendX5C: True\r\nForceRefresh: False\r\nAccessTokenHashToRefresh: False\r\n\r\n2026-06-13T04:52:40.5073389Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] \r\n=== Request Data ===\r\nAuthority Provided? - True\r\nScopes - https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\nExtra Query Params Keys (space separated) - \r\nApiId - AcquireTokenForClient\r\nIsConfidentialClient - True\r\nSendX5C - True\r\nLoginHint ? False\r\nIsBrokerConfigured - False\r\nHomeAccountId - False\r\nCorrelationId - a569509e-d1b4-4def-97f3-b56d05075cb0\r\nUserAssertion set: False\r\nLongRunningOboCacheKey set: False\r\nRegion configured: \r\n\r\n2026-06-13T04:52:40.5089918Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] === Token Acquisition (ClientCredentialRequest) started:\r\n\t Scopes: https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\n\tAuthority Host: login.microsoftonline.com\r\n2026-06-13T04:52:40.5263184Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [Internal cache] Total number of cache partitions found while getting access tokens: 0\r\n2026-06-13T04:52:40.5263184Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [FindAccessTokenAsync] Discovered 0 access tokens in cache using partition key: 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d_AppTokenCache\r\n2026-06-13T04:52:40.5263184Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [FindAccessTokenAsync] No access tokens found in the cache. Skipping filtering. \r\n2026-06-13T04:52:40.5366006Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [Instance Discovery] Instance discovery is enabled and will be performed\r\n2026-06-13T04:52:40.5406166Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [Region discovery] WithAzureRegion not configured. \r\n2026-06-13T04:52:40.5406166Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [Region discovery] Not using a regional authority. \r\n2026-06-13T04:52:40.5461551Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [Instance Discovery] Tried to use network cache provider for login.microsoftonline.com. Success? False. \r\n2026-06-13T04:52:40.5566686Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Fetching instance discovery from the network from host login.microsoftonline.com. \r\n2026-06-13T04:52:40.5755753Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Starting [Oauth2Client] Sending GET request \r\n2026-06-13T04:52:40.5794689Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Starting [HttpManager] ExecuteAsync\r\n2026-06-13T04:52:40.5859921Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:40Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [HttpManager] Sending request. Method: GET. Host: https://login.microsoftonline.com. Binding Certificate: False \r\n2026-06-13T04:52:41.2319324Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [HttpManager] Received response. Status code: OK. \r\n2026-06-13T04:52:41.2455708Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Finished [HttpManager] ExecuteAsync in 666 ms\r\n2026-06-13T04:52:41.2455708Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Finished [Oauth2Client] Sending GET request  in 670 ms\r\n2026-06-13T04:52:41.2558584Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Starting [OAuth2Client] Deserializing response\r\n2026-06-13T04:52:41.3802732Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Finished [OAuth2Client] Deserializing response in 124 ms\r\n2026-06-13T04:52:41.3817076Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [Instance Discovery] Tried to use network cache provider for login.microsoftonline.com. Success? True. \r\n2026-06-13T04:52:41.3821925Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [Instance Discovery] After hitting the discovery endpoint, the network provider found an entry for login.microsoftonline.com ? True. \r\n2026-06-13T04:52:41.3866459Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Authority validation enabled? True. \r\n2026-06-13T04:52:41.3866459Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Authority validation - is known env? True. \r\n2026-06-13T04:52:41.4044652Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Starting TokenClient:SendTokenRequestAsync\r\n2026-06-13T04:52:41.4082745Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [TokenClient] Before adding the client assertion / secret\r\n2026-06-13T04:52:41.4094723Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Building assertion from certificate with clientId: 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f at endpoint: https://login.microsoftonline.com/33e01921-4d64-4f8c-a055-5bdaffd5e33d/oauth2/v2.0/token\r\n2026-06-13T04:52:41.4094723Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Proceeding with JWT token creation and adding client assertion.\r\n2026-06-13T04:52:41.4419028Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [TokenClient] After adding the client assertion / secret\r\n2026-06-13T04:52:41.4519095Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [Token Client] Fetching MsalTokenResponse .... \r\n2026-06-13T04:52:41.4519095Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Starting [Oauth2Client] Sending POST request \r\n2026-06-13T04:52:41.4584236Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Starting [HttpManager] ExecuteAsync\r\n2026-06-13T04:52:41.4588025Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [HttpManager] Sending request. Method: POST. Host: https://login.microsoftonline.com. Binding Certificate: False \r\n2026-06-13T04:52:41.6904701Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [HttpManager] Received response. Status code: OK. \r\n2026-06-13T04:52:41.6904701Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Finished [HttpManager] ExecuteAsync in 232 ms\r\n2026-06-13T04:52:41.6904701Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Finished [Oauth2Client] Sending POST request  in 238 ms\r\n2026-06-13T04:52:41.6904701Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Starting [OAuth2Client] Deserializing response\r\n2026-06-13T04:52:41.7054613Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Finished [OAuth2Client] Deserializing response in 14 ms\r\n2026-06-13T04:52:41.7054613Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] ScopeSet was missing from the token response, so using developer provided scopes in the result. \r\n2026-06-13T04:52:41.7054613Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Finished TokenClient:SendTokenRequestAsync in 301 ms\r\n2026-06-13T04:52:41.7071784Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Checking client info returned from the server..\r\n2026-06-13T04:52:41.7071784Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Saving token response to cache..\r\n2026-06-13T04:52:41.7176128Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] \r\n[MsalTokenResponse]\r\nError: \r\nErrorDescription: \r\nScopes: https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\nExpiresIn: 86399\r\nRefreshIn: 43199\r\nAccessToken returned: True\r\nAccessToken Type: Bearer\r\nRefreshToken returned: False\r\nIdToken returned: False\r\nClientInfo returned: False\r\nFamilyId: \r\nWamAccountId exists: False\r\n2026-06-13T04:52:41.7176128Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [SaveTokenResponseAsync] ID Token not present in response. \r\n2026-06-13T04:52:41.7196191Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Cannot determine home account ID - or id token or no client info and no subject \r\n2026-06-13T04:52:41.7254387Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [SaveTokenResponseAsync] Entering token cache semaphore. Count Real semaphore: True. Count: 1.\r\n2026-06-13T04:52:41.7258328Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [SaveTokenResponseAsync] Entered token cache semaphore. \r\n2026-06-13T04:52:41.7258328Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [SaveTokenResponseAsync] Saving AT in cache and removing overlapping ATs...\r\n2026-06-13T04:52:41.7274669Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Looking for scopes for the authority in the cache which intersect with https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\n2026-06-13T04:52:41.7274669Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z] [Internal cache] Total number of cache partitions found while getting access tokens: 0\r\n2026-06-13T04:52:41.7274669Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Intersecting scope entries count - 0\r\n2026-06-13T04:52:41.7296906Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Not saving to ADAL legacy cache. \r\n2026-06-13T04:52:41.7296906Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] [SaveTokenResponseAsync] Released token cache semaphore. \r\n2026-06-13T04:52:41.7336998Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] \r\n\t=== Token Acquisition finished successfully:\r\n2026-06-13T04:52:41.7346373Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0]  AT expiration time: 6/14/2026 4:52:40 AM +00:00, scopes: https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default. source: IdentityProvider\r\n2026-06-13T04:52:41.7346373Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] Fetched access token from host login.microsoftonline.com. \r\n2026-06-13T04:52:41.7366772Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] \r\n[LogMetricsFromAuthResult] Cache Refresh Reason: NoCachedAccessToken\r\n[LogMetricsFromAuthResult] DurationInCacheInMs: 0\r\n[LogMetricsFromAuthResult] DurationTotalInMs: 1234\r\n[LogMetricsFromAuthResult] DurationInHttpInMs: 877\r\n2026-06-13T04:52:41.7366772Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:41Z - a569509e-d1b4-4def-97f3-b56d05075cb0] TokenEndpoint: ****\r\n2026-06-13T04:52:41.7511876Z:Use AAD token. CERT\r\n2026-06-13T04:52:41.7624816Z:New Token Acquisition Time: 00:00:01.3155650\r\n2026-06-13T04:52:41.7900399Z:Gateway Client: the client id that is sending a request is:  27c99217-cc96-4895-912d-5d36799d1a52\r\n2026-06-13T04:52:42.4667744Z:Gateway Client: response send time from cloud gateway:  2026-06-13T04:52:42.4133893+00:00\r\n2026-06-13T04:52:42.4667744Z:Gateway Client: response receive time from client SendAsync:  2026-06-13T04:52:42.4667744+00:00\r\n2026-06-13T04:52:42.4667744Z:Gateway Client: response duration time between cloud gateway and client SendAsync:  00:00:00.0533851\r\n2026-06-13T04:52:42.5648562Z:Session request requestid: 967659a0-1843-42ff-bf85-2f4e43ac9ba4, and submission status is: Pass\r\n2026-06-13T04:52:42.6200720Z:Provision storage complete. Total shards: 100\r\n2026-06-13T04:52:42.6230304Z:Loading DigestSignErrorMappingCache mapping info\r\n2026-06-13T04:52:42.6324271Z:DigestSignErrorMappingCache from server, # of DigestSignOperationErrorPatterns object we get is :: \r\n2026-06-13T04:52:42.6586716Z:Consolidate DigestSignErrorMappingCache, # of DigestSignOperationErrorPatterns object we get is  :: 34\r\n2026-06-13T04:52:42.6586716Z:Successfully retrieved policy: policy is  {\"policy\":{\"id\":\"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f-0\",\"workflowExecutionType\":3}}\r\n2026-06-13T04:52:42.6696076Z:Successfully get telemetry connection string: Endpo......\r\n2026-06-13T04:52:42.6712591Z:Warning: \r\n2026-06-13T04:52:42.6733986Z:IAuthInfo constructed: {\r\n  \"authenticationType\": \"AAD_CERT\",\r\n  \"clientId\": \"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n  \"tenantId\": \"33e01921-4d64-4f8c-a055-5bdaffd5e33d\",\r\n  \"aadAuthorityBaseUri\": \"https://login.microsoftonline.com/\",\r\n  \"authCert\": {\r\n    \"storeLocation\": \"LocalMachine\",\r\n    \"storeName\": \"My\",\r\n    \"subjectName\": \"CN=0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f.microsoft.com\",\r\n    \"sendX5c\": true,\r\n    \"withAzureRegion\": false,\r\n    \"getCertFromKeyVault\": false,\r\n    \"keyVaultName\": null,\r\n    \"keyVaultCertName\": null\r\n  },\r\n  \"requestSigningCert\": {\r\n    \"storeLocation\": \"LocalMachine\",\r\n    \"storeName\": \"My\",\r\n    \"subjectName\": \"CN=0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n    \"sendX5c\": false,\r\n    \"withAzureRegion\": false,\r\n    \"getCertFromKeyVault\": false,\r\n    \"keyVaultName\": null,\r\n    \"keyVaultCertName\": null\r\n  },\r\n  \"oAuthToken\": null,\r\n  \"version\": \"1.0.0\",\r\n  \"esrpClientId\": \"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n  \"federatedTokenData\": null,\r\n  \"federatedTokenPath\": null\r\n}\r\n2026-06-13T04:52:42.6754597Z:IPolicyInfo constructed: {\r\n  \"intent\": \"digestsign\",\r\n  \"contentType\": \"Bin\",\r\n  \"contentOrigin\": \"3rd Party\",\r\n  \"productState\": null,\r\n  \"audience\": \"External Broad\",\r\n  \"version\": \"1.0.0\"\r\n}\r\n2026-06-13T04:52:42.6791684Z:IConfigInfo constructed: {\r\n  \"esrpApiBaseUri\": \"https://api.esrp.microsoft.com/api/v2/\",\r\n  \"esrpSessionTimeoutInSec\": 60,\r\n  \"minThreadPoolThreads\": 256,\r\n  \"maxDegreeOfParallelism\": 256,\r\n  \"exponentialFirstFastRetry\": true,\r\n  \"exponentialRetryCount\": 2,\r\n  \"exponentialRetryDeltaBackOff\": \"00:00:05\",\r\n  \"exponentialRetryMaxBackOff\": \"00:01:00\",\r\n  \"exponentialRetryMinBackOff\": \"00:00:03\",\r\n  \"appDataFolder\": \"C:\\\\Windows\\\\ServiceProfiles\\\\NetworkService\\\\AppData\\\\Local\",\r\n  \"certificateCacheFolder\": null,\r\n  \"version\": \"1.0.0\",\r\n  \"exitOnFlaggedFile\": false,\r\n  \"flaggedFileClientWaitTimeout\": \"1.00:00:00\",\r\n  \"servicePointManagerDefaultConnectionLimit\": 256,\r\n  \"isOnPremGateway\": false,\r\n  \"diagnosticListeners\": null,\r\n  \"securityProtocolType\": \"Tls12\",\r\n  \"parallelOperationsInFileUploadDownload\": 300,\r\n  \"maxTelemetryBuffer\": 200000,\r\n  \"telemetryTimeoutInSec\": 0,\r\n  \"resourceUri\": \"https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com\",\r\n  \"cacheRootFolder\": null,\r\n  \"cachedFileTTLInMin\": 7200\r\n}\r\n2026-06-13T04:52:42.9270865Z:Client Telemetry: Xpert agent is not running on the machine. Using events hub for processing client telemetry.\r\n2026-06-13T04:52:43.1220867Z:Key: TotalSignOperationDataCount, Value: 1\r\n2026-06-13T04:52:43.1377636Z:Start Time:6/13/2026 4:52:43 AM, Starting the sign workflow...\r\n2026-06-13T04:52:43.1498267Z:some input info: {\r\n  \"contextData\": {\r\n    \"build_buildnumber\": \"AzureDevOps_M274_20260602.10\",\r\n    \"esrpClientVersion\": \"1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\",\r\n    \"userIpAddress\": \"10.0.0.57\",\r\n    \"userAgent\": \"at-blueTKKEU7\"\r\n  },\r\n  \"sourceDirectory\": null,\r\n  \"sourceLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\2cacwjpp.1g3\\\\manifest.cat\",\r\n  \"destinationDirectory\": null,\r\n  \"destinationLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\2cacwjpp.1g3\\\\manifest.cat\",\r\n  \"sizeInBytes\": 0,\r\n  \"name\": \"manifest.cat\",\r\n  \"isSuccess\": null,\r\n  \"operationStartedAt\": \"0001-01-01T00:00:00+00:00\",\r\n  \"operationEndedAt\": \"0001-01-01T00:00:00+00:00\",\r\n  \"operationDurationMS\": 0,\r\n  \"processName\": \"EsrpClient\",\r\n  \"processId\": 4948,\r\n  \"processVersion\": \"1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\",\r\n  \"customerCorrelationId\": null,\r\n  \"esrpClientSessionGuid\": \"b0ab86c9-0109-4b0e-9c88-8da9e050348b\",\r\n  \"callerProgram\": \"EsrpClient\",\r\n  \"indentity\": \"NT AUTHORITY\\\\NETWORK SERVICE\",\r\n  \"clientId\": \"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n  \"exceptionData\": null,\r\n  \"apiBaseUrl\": \"https://api.esrp.microsoft.com/api/v2/\",\r\n  \"handlerWorkflow\": \"Sign\",\r\n  \"submissionRequest\": {\r\n    \"contextData\": {\r\n      \"build_buildnumber\": \"AzureDevOps_M274_20260602.10\",\r\n      \"esrpClientVersion\": \"1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\",\r\n      \"userIpAddress\": \"10.0.0.57\",\r\n      \"userAgent\": \"at-blueTKKEU7\"\r\n    },\r\n    \"groupId\": null,\r\n    \"correlationVector\": \"4c2a1dbc-c96b-4fa6-8a09-65447b674e75\",\r\n    \"driEmail\": null,\r\n    \"version\": \"1.0.0\"\r\n  },\r\n  \"policyInfo\": {\r\n    \"intent\": \"digestsign\",\r\n    \"contentType\": \"Bin\",\r\n    \"contentOrigin\": \"3rd Party\",\r\n    \"productState\": null,\r\n    \"audience\": \"External Broad\",\r\n    \"version\": \"1.0.0\"\r\n  },\r\n  \"osVersion\": \"Microsoft Windows NT 10.0.26100.0\",\r\n  \"executingMachineIPAddress\": \"10.0.0.57\"\r\n}\r\n2026-06-13T04:52:43.1934729Z:Executing SignWorkflowType is DigestSignStaticAzure\r\n2026-06-13T04:52:43.2092633Z:Source file \"c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\" hashed in 3 ms\r\n2026-06-13T04:52:43.2525304Z:Thread: 1 - Certificate file mutex \"q0tZ/j2OpRXlCOnHczlr53346B39/Lzf3ddi15JuNXE=_CP-464321\" acquired (waited 0 ms).\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:43Z] ConfidentialClientApplication 44123454 created\r\n2026-06-13T04:52:43.2655098Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-06-13T04:52:43.2663775Z:Cached token found with name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-06-13T04:52:43.2670365Z:AAD auth caching is in use with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-06-13T04:52:43.3643345Z:Global cached token is valid from 6/13/2026 4:47:41 AM to 6/14/2026 4:52:41 AM (UTC). Total validity from current time is 86397.6356655 seconds\r\n2026-06-13T04:52:43.3643345Z:Validate and Renew Token if necessary finished: 00:00:00.0978285\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:43Z] ConfidentialClientApplication 20852350 created\r\n2026-06-13T04:52:43.3643345Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-06-13T04:52:43.3643345Z:Gateway Client: a new client and client id is created:  bfb56378-6eae-45b8-b6bb-553791fd85dc\r\n2026-06-13T04:52:43.3643345Z:6/13/2026 4:52:43 AM +00:00:Digest Signing Factory Client type loaded is - [AzureGatewaySubmitter].\r\n2026-06-13T04:52:43.3825700Z:Existing Token Acquisition Time: 00:00:00.0008795\r\n2026-06-13T04:52:43.4660498Z:Gateway Client: the client id that is sending a request is:  bfb56378-6eae-45b8-b6bb-553791fd85dc\r\n2026-06-13T04:52:43.5693511Z:Gateway Client: response send time from cloud gateway:  2026-06-13T04:52:43.5455253+00:00\r\n2026-06-13T04:52:43.5693511Z:Gateway Client: response receive time from client SendAsync:  2026-06-13T04:52:43.5693511+00:00\r\n2026-06-13T04:52:43.5693511Z:Gateway Client: response duration time between cloud gateway and client SendAsync:  00:00:00.0238258\r\n2026-06-13T04:52:43.5808001Z:Gateway Client: response time after converting from http response to object:  2026-06-13T04:52:43.5808001+00:00\r\n2026-06-13T04:52:43.9937081Z:Client Telemetry: Events published in this batch: 4\r\n2026-06-13T04:52:43.9937081Z:Client Telemetry: Events received so far in this session: 4\r\n2026-06-13T04:52:43.9937081Z:Client Telemetry: Events published so far in this session: 4\r\n2026-06-13T04:52:44.0968654Z:Existing Token Acquisition Time: 00:00:00.0005332\r\n2026-06-13T04:52:44.1008357Z:Gateway Client: the client id that is sending a request is:  bfb56378-6eae-45b8-b6bb-553791fd85dc\r\n2026-06-13T04:52:44.2521510Z:Gateway Client: response send time from cloud gateway:  2026-06-13T04:52:44.2176068+00:00\r\n2026-06-13T04:52:44.2521510Z:Gateway Client: response receive time from client SendAsync:  2026-06-13T04:52:44.2521510+00:00\r\n2026-06-13T04:52:44.2521510Z:Gateway Client: response duration time between cloud gateway and client SendAsync:  00:00:00.0345442\r\n2026-06-13T04:52:44.2555035Z:Gateway Client: response time after converting from http response to object:  2026-06-13T04:52:44.2555035+00:00\r\n2026-06-13T04:52:44.2567846Z:6/13/2026 4:52:44 AM +00:00: Status Request - Non-successful status returned: Inprogress, operation id is: ca82c3bb-d8a5-4381-8ae1-c3f15540cc47 - Attempt 1 (Delaying 00:00:00.5000000)...\r\n2026-06-13T04:52:44.2572630Z:Existing Token Acquisition Time: 00:00:00.0004732\r\n2026-06-13T04:52:44.2576505Z:Gateway Client: the client id that is sending a request is:  bfb56378-6eae-45b8-b6bb-553791fd85dc\r\n2026-06-13T04:52:44.3473729Z:Gateway Client: response send time from cloud gateway:  2026-06-13T04:52:44.3079449+00:00\r\n2026-06-13T04:52:44.3473729Z:Gateway Client: response receive time from client SendAsync:  2026-06-13T04:52:44.3473729+00:00\r\n2026-06-13T04:52:44.3473729Z:Gateway Client: response duration time between cloud gateway and client SendAsync:  00:00:00.0394280\r\n2026-06-13T04:52:44.3519195Z:Gateway Client: response time after converting from http response to object:  2026-06-13T04:52:44.3519195+00:00\r\n2026-06-13T04:52:44.3565467Z:Reading thumbprint from \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_b0ab86c901094b0e9c888da9e050348b\\Certificates\\CP-464321.p7b\" (9692 bytes)...\r\n2026-06-13T04:52:44.3863689Z:Thread: 1 - Wrote new certificate file to \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_b0ab86c901094b0e9c888da9e050348b\\Certificates\\CP-464321.p7b\".\r\n2026-06-13T04:52:44.3863689Z:Thread: 1 - Certificate file mutex \"q0tZ/j2OpRXlCOnHczlr53346B39/Lzf3ddi15JuNXE=_CP-464321\" released (held for 1133 ms).\r\n2026-06-13T04:52:44.3871066Z:digest sign request expire time is: 6/13/2026 4:53:42 AM\r\n2026-06-13T04:52:47.0899213Z:Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe sign    /NPH  /fd \"SHA256\" /f \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_b0ab86c901094b0e9c888da9e050348b\\Certificates\\CP-464321.p7b\" /sha1 \"464FA2A9D4A43EA5C3E53CE4562B501CB6EFA47F\" /du \"https://www.1eswiki.com/wiki/ADO_Manifest_Generator\" /d \"Packaging SSSC Codesign - DigestSign\" /tr \"http://aztss.trafficmanager.net/TSS/HttpTspServer\" /td sha256 /dlib \"c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\EsrpClient.Sign.DigestSignLib.dll\" /dmdf \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_b0ab86c901094b0e9c888da9e050348b\\B6D411B1B83D40E8A5E433A7C93CC132.json\" \"c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\" completed in 2701 ms\r\nExit Code: 0\r\nStdOut:\r\nDone Adding Additional Store\r\n\r\nESRP Digest Signing\r\n\r\n2026-06-13T04:52:45.3278041Z:Digest Signer : SecurityProtocolType used from the metadata info is : Tls12\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:45Z] ConfidentialClientApplication 654897 created\r\n2026-06-13T04:52:45.4754623Z:Cached token found with name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-06-13T04:52:45.4774660Z:AAD auth caching is in use with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-06-13T04:52:45.5908274Z:Global cached token is valid from 6/13/2026 4:47:41 AM to 6/14/2026 4:52:41 AM (UTC). Total validity from current time is 86395.4095913 seconds\r\n2026-06-13T04:52:45.5908274Z:Validate and Renew Token if necessary finished: 00:00:00.1127806\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-06-13 04:52:45Z] ConfidentialClientApplication 49044892 created\r\n2026-06-13T04:52:45.6627669Z:Existing Token Acquisition Time: 00:00:00.0029747\r\n2026-06-13T04:52:46.1660904Z:Gateway Submission Request Signing Time: 00:00:00.1113715\r\n2026-06-13T04:52:46.1660904Z:Gateway Submission Request Send Time: 00:00:00.3707163\r\n2026-06-13T04:52:46.1660904Z:Gateway Submission Overall Submission Time: 00:00:00.5002585\r\n2026-06-13T04:52:46.1660904Z:Operation ID: 4ea6899c-a51f-401f-8234-f91f4e70bd97\r\n2026-06-13T04:52:46.6702901Z:Gateway Status Delay Time: 00:00:00.5047782\r\n2026-06-13T04:52:46.6816488Z:Existing Token Acquisition Time: 00:00:00.0006124\r\n2026-06-13T04:52:46.8073127Z:Gateway Status Request Send Time: 00:00:00.1211726\r\n2026-06-13T04:52:46.8073127Z:Gateway Status Overall Time: 00:00:00.1236893\r\n2026-06-13T04:52:46.8142560Z:Gateway Submission Duration: 836\r\n2026-06-13T04:52:46.8142560Z:Gateway Submission Attempts: 1\r\n2026-06-13T04:52:46.8142560Z:Gateway GetStatus Duration: 136\r\n2026-06-13T04:52:46.8142560Z:Gateway GetStatus Attempts: 1\r\n2026-06-13T04:52:46.8142560Z:$$5a9f5111cf8f42a0a0edc419862b95dc##_ThrottleCount: 0\r\n2026-06-13T04:52:46.8142560Z:$$65265a48891640eb86e148d3c9a627fa##_ThrottledTimeInSec: 0\r\n2026-06-13T04:52:46.8142560Z:Service Call: 1624.6588 ms\r\nSuccessfully signed: c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\r\n\r\n\r\n\r\nStdErr:\r\n\r\n\r\n\r\n\r\n2026-06-13T04:52:47.2710973Z:Warning: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n2026-06-13T04:52:47.2718206Z:Warning: Warning: Operation Error (1) - Operation: signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\" - Retrying in 500 ms...\r\n2026-06-13T04:52:47.4027082Z:Warning: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n2026-06-13T04:52:47.4027082Z:Warning: Warning: Operation Error (2) - Operation: signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\" - Retrying in 500 ms...\r\n2026-06-13T04:52:47.5584385Z:Client Telemetry: Events published in this batch: 3\r\n2026-06-13T04:52:47.5584385Z:Client Telemetry: Events received so far in this session: 7\r\n2026-06-13T04:52:47.5584385Z:Client Telemetry: Events published so far in this session: 7\r\n2026-06-13T04:52:48.0136449Z:Warning: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n2026-06-13T04:52:48.0445944Z:\r\n2026-06-13T04:52:48.0457729Z:Error: System.AggregateException: One or more errors occurred. ---> MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)\r\n   --- End of inner exception stack trace ---\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<DigestSignAsync>d__23.MoveNext()\r\n---> (Inner Exception #0) MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)<---\r\n\r\n2026-06-13T04:52:48.0773673Z:Constructing EsrpClientResponse\r\n2026-06-13T04:52:48.0780031Z:EsrpClientResponse is constructed\r\n2026-06-13T04:52:48.0985023Z:Client Telemetry: Events published in this batch: 2\r\n2026-06-13T04:52:48.0985023Z:Client Telemetry: Events received so far in this session: 9\r\n2026-06-13T04:52:48.0985023Z:Client Telemetry: Events published so far in this session: 9\r\n2026-06-13T04:52:48.1068482Z:OperationDurationMs: 4893\r\n2026-06-13T04:52:48.1068482Z:DynamicCertGenerationTimeMs: 0\r\n2026-06-13T04:52:48.1068482Z:TimeToGetStorageShradsMs: 0\r\n2026-06-13T04:52:48.1068482Z:TotalScanSubmissionTimeMs: 0\r\n2026-06-13T04:52:48.1068482Z:ThrottleCount: 0\r\n2026-06-13T04:52:48.1068482Z:ThrottledTimeInSec: 0\r\n2026-06-13T04:52:48.1068482Z:\r\n2026-06-13T04:52:48.1068482Z:0/1 files signed in 00:00:04.893 (0 files/s, total number of certs refreshed: 0)\r\n2026-06-13T04:52:48.1108587Z:result json is: {\r\n  \"submissionResponses\": [\r\n    {\r\n      \"fileStatusDetail\": [\r\n        {\r\n          \"sourceHash\": \"JUM208eGUnWAUPHIrZQm6p8E901RpjDObbPBJZECPVQ=\",\r\n          \"hashType\": \"sha256\",\r\n          \"destinationHash\": null,\r\n          \"certificateThumbprint\": null,\r\n          \"destinationLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\2cacwjpp.1g3\\\\manifest.cat\",\r\n          \"destinationFileSizeInBytes\": 0,\r\n          \"sourceLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\2cacwjpp.1g3\\\\manifest.cat\"\r\n        }\r\n      ],\r\n      \"operationId\": \"4ea6899c-a51f-401f-8234-f91f4e70bd97\",\r\n      \"customerCorrelationId\": \"4c2a1dbc-c96b-4fa6-8a09-65447b674e75\",\r\n      \"statusCode\": \"failCanRetry\",\r\n      \"errorInfo\": {\r\n        \"code\": \"3138\",\r\n        \"details\": {\r\n          \"operation\": \"c:\\\\AT\\\\sitesroot\\\\0\\\\bin\\\\Plugins\\\\ESRPClient\\\\Win10.x86\\\\signtool.exe verify  /pa /tw \\\"c:\\\\Temp\\\\AzureTemp\\\\2cacwjpp.1g3\\\\manifest.cat\\\"\",\r\n          \"exitCode\": \"1\",\r\n          \"stdOut\": \"File: c:\\\\Temp\\\\AzureTemp\\\\2cacwjpp.1g3\\\\manifest.cat\\r\\nIndex  Algorithm  Timestamp    \\r\\n========================================\\r\\n\\r\\nNumber of errors: 1\\r\\n\\r\\n\\r\\n\",\r\n          \"stdErr\": \"SignTool Error: A certificate chain processed, but terminated in a root\\r\\n\\tcertificate which is not trusted by the trust provider.\\r\\n\\r\\n\"\r\n        },\r\n        \"innerError\": null\r\n      }\r\n    }\r\n  ],\r\n  \"esrpClientSessionGuid\": \"b0ab86c9-0109-4b0e-9c88-8da9e050348b\",\r\n  \"version\": \"1.0.0\"\r\n}\r\n2026-06-13T04:52:48.1483729Z:Warning: \r\n\r\n2026-06-13T04:52:48.1483729Z:esrp-client-finalTime: 9004.2805\r\n2026-06-13T04:52:48.1483729Z:Final return code is: 1\r\n2026-06-13T04:52:48.1483729Z:ClientTelemetryDispose started, this is not affecting Exe reliability, only lost telemetry if error happens ***********************\r\n2026-06-13T04:52:48.1534826Z:Client Telemetry: Flushing telemetry buffer with timeout 0 ms\r\n2026-06-13T04:52:48.1555162Z:Client Telemetry: Flushing telemetry buffer completed within timeout (true/false): False\r\n2026-06-13T04:52:48.1555162Z:Client Telemetry: Disposing telemetry buffer and event hub client\r\n2026-06-13T04:52:48.1608792Z:Client Telemetry: Events published in this batch: 2\r\n2026-06-13T04:52:48.1608792Z:Client Telemetry: Events received so far in this session: 11\r\n2026-06-13T04:52:48.1608792Z:Client Telemetry: Events published so far in this session: 11\r\n2026-06-13T04:52:48.2173800Z:event lost number: 0\r\n2026-06-13T04:52:48.2173800Z:total event processed number: 11\r\n2026-06-13T04:52:48.2173800Z:total event received number: 11\r\n2026-06-13T04:52:48.2173800Z:##EsrpClientTelemetry.TotalEventsProcessed##: 11\r\n2026-06-13T04:52:48.2173800Z:##EsrpClientTelemetry.TotalEventsReceived##: 11\r\n2026-06-13T04:52:48.2173800Z:##EsrpClientTelemetry.DisposeTimeMilliseconds##: 68\r\n2026-06-13T04:52:48.2173800Z:ClientTelemetryDispose ended ***********************\r\n","StdErr":"2026-06-13T04:52:48.0457729Z:Error: System.AggregateException: One or more errors occurred. ---> MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)\r\n   --- End of inner exception stack trace ---\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<DigestSignAsync>d__23.MoveNext()\r\n---> (Inner Exception #0) MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\2cacwjpp.1g3\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)<---\r\n\r\n","ExitCode":1,"RunningTime":"00:00:09.9363213"}