carlos / platform Public

Merge remote-tracking branch 'origin/main' into design-edge-request-protection

# Conflicts:
#	internal/provision/plan9_b8_census_test.go

claude 5 hours ago be9a3119cb94141fa063bd27c697e8fb6f4883db parent 7fdb1a8parent f1f8633

112 files changed, +13871 −263

.amadan/test-gate.sh +14 −3
.amadan/test-weights.sh +45 −15
.amadan/test-weights.tsv +159 −10
README.md +16 −0
apimode.go +21 −13
auth.go +10 −0
cmd/console/mailbackends_test.go +113 −0
cmd/console/main.go +114 −5
docs/site/cli.md +72 −2
docs/superpowers/notes/census-proposal-edge-asset-cache-2.md +99 −0
docs/superpowers/notes/census-proposal-pro-6214-service-runs.md +138 −0
docs/superpowers/notes/census-proposal-sec-mail-user-boundary.md +13 −0
docs/superpowers/notes/census-proposal-wake-latency-3.md +13 −0
docs/superpowers/plans/2026-10-24-edge-asset-cache-plan-1-declare-publish.md +341 −0
docs/superpowers/plans/2026-10-24-edge-asset-cache-plan-2-disk-store.md +166 −0
docs/superpowers/plans/2026-10-24-edge-asset-cache-plan-3-serve.md +292 −0
docs/superpowers/plans/2026-10-24-service-runs.md +489 −0
docs/superpowers/specs/2026-10-08-carlos-run-design.md +2 −0
docs/superpowers/specs/2026-10-24-edge-asset-cache-design.md +871 −0
docs/superpowers/specs/2026-10-24-service-runs-design.md +318 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-BUILDER.md +23 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R2.md +32 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R3.md +25 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R4.md +17 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R5.md +11 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R6.md +5 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R7.md +7 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R8.md +7 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS.md +33 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R1.md +43 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R2.md +54 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R3.md +57 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R4.md +11 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R5.md +7 −0
docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R6.md +5 −0
docs/superpowers/specs/CODEX-REVIEW-BRIEF-ASSET-CACHE-PLANS.md +36 −0
docs/superpowers/specs/CODEX-REVIEW-BRIEF-ASSET-CACHE.md +41 −0
internal/activator/activator_test.go +4 −0
internal/appconfig/environments.go +23 −3
internal/appconfig/instances.go +17 −2
internal/appconfig/loadconcurrent_test.go +83 −0
internal/assetcache/entry_test.go +772 −0
internal/assetcache/evict.go +97 −0
internal/assetcache/evict_test.go +452 −0
internal/assetcache/fill.go +690 −0
internal/assetcache/fill_test.go +480 −0
internal/assetcache/fs.go +32 −0
internal/assetcache/fs_linux_test.go +35 −0
internal/assetcache/fs_test.go +22 −0
internal/assetcache/key.go +31 −0
internal/assetcache/meta.go +73 −0
internal/assetcache/statfs_linux.go +20 −0
internal/assetcache/statfs_other.go +12 −0
internal/assetcache/store.go +521 −0
internal/assetcache/store_test.go +530 −0
internal/console/apiruns.go +446 −44
internal/console/apiruns_key_test.go +819 −0
internal/console/apiruns_service_test.go +873 −0
internal/console/apirunsfollow.go +52 −35
internal/console/apiservices.go +86 −13
internal/console/authcli.go +17 −5
internal/console/authstore.go +115 −6
internal/console/claim_invariant_fixtures_test.go +6 −0
internal/console/deploycred_test.go +5 −5
internal/console/deploydoors_test.go +1 −1
internal/console/deploymixed_test.go +1 −1
internal/console/deployscope_test.go +1 −1
internal/console/deploysign_test.go +2 −2
internal/console/server.go +7 −0
internal/console/svcpage.go +41 −5
internal/console/svcprincipal.go +126 −18
internal/console/svcprincipal_run_test.go +572 −0
internal/console/svcroutes_test.go +51 −9
internal/console/templates/account_settings.html +5 −2
internal/console/testdata/claim-authority-sites.txt +1 −0
internal/console/testdata/claim-routes.txt +1 −0
internal/host/buildstate.go +87 −9
internal/host/buildstate_cas_test.go +126 −0
internal/host/buildstate_test.go +5 −2
internal/host/runevents.go +6 −1
internal/host/runevents_service_test.go +32 −0
internal/lease/createlease.go +78 −0
internal/lease/endpoint_test.go +5 −2
internal/lease/fastacquire_test.go +174 −0
internal/lease/lease.go +4 −1
internal/mail/aws.go +129 −6
internal/mail/aws_iam_test.go +434 −0
internal/mail/boundarysweep.go +92 −0
internal/provision/edge_request_records_census_test.go +1 −1
internal/provision/provision.go +9 −0
internal/provision/run.go +102 −3
internal/provision/run_keys_test.go +409 −0
internal/provision/service_runs_census_test.go +56 −0
internal/provision/testdata/plan14-root-reads-chain.tsv +5 −0
internal/provision/testdata/plan14-root-reads-edge-asset-cache-2.tsv +38 −0
internal/provision/testdata/plan14-root-reads-pro-6214-service-runs-decisions.tsv +20 −0
internal/provision/testdata/plan14-root-reads-pro-6214-service-runs.tsv +38 −0
internal/provision/testdata/plan14-root-reads-sec-mail-user-boundary.tsv +6 −0
internal/provision/testdata/plan14-root-reads-wake-latency-3.tsv +6 −0
internal/provision/wake_latency_3_census_test.go +28 −0
internal/runs/commands.go +134 −0
internal/runs/commands_test.go +156 −0
internal/runs/keys.go +111 −0
internal/runs/keys_test.go +123 −0
internal/runs/runs.go +56 −4
internal/runs/runs_test.go +5 −5
internal/svcrole/svcrole.go +39 −4
internal/svcrole/svcrole_test.go +104 −0
run.go +77 −7
run_test.go +197 −0
services.go +39 −10
services_cli_test.go +98 −8

.amadan/test-gate.sh

Loading diff…

.amadan/test-weights.sh

Loading diff…

.amadan/test-weights.tsv

Loading diff…

README.md

Loading diff…

apimode.go

Loading diff…

auth.go

Loading diff…

cmd/console/mailbackends_test.go

Loading diff…

cmd/console/main.go

Loading diff…

docs/site/cli.md

Loading diff…

docs/superpowers/notes/census-proposal-edge-asset-cache-2.md

Loading diff…

docs/superpowers/notes/census-proposal-pro-6214-service-runs.md

Loading diff…

docs/superpowers/notes/census-proposal-sec-mail-user-boundary.md

Loading diff…

docs/superpowers/notes/census-proposal-wake-latency-3.md

Loading diff…

docs/superpowers/plans/2026-10-24-edge-asset-cache-plan-1-declare-publish.md

Loading diff…

docs/superpowers/plans/2026-10-24-edge-asset-cache-plan-2-disk-store.md

Loading diff…

docs/superpowers/plans/2026-10-24-edge-asset-cache-plan-3-serve.md

Loading diff…

docs/superpowers/plans/2026-10-24-service-runs.md

Loading diff…

docs/superpowers/specs/2026-10-08-carlos-run-design.md

Loading diff…

docs/superpowers/specs/2026-10-24-edge-asset-cache-design.md

Loading diff…

docs/superpowers/specs/2026-10-24-service-runs-design.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-BUILDER.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R2.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R3.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R4.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R5.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R6.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R7.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS-R8.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-PLANS.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R1.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R2.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R3.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R4.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R5.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-ASSET-CACHE-R6.md

Loading diff…

docs/superpowers/specs/CODEX-REVIEW-BRIEF-ASSET-CACHE-PLANS.md

Loading diff…

docs/superpowers/specs/CODEX-REVIEW-BRIEF-ASSET-CACHE.md

Loading diff…

internal/activator/activator_test.go

Loading diff…

internal/appconfig/environments.go

Loading diff…

internal/appconfig/instances.go

Loading diff…

internal/appconfig/loadconcurrent_test.go

Loading diff…

internal/assetcache/entry_test.go

Loading diff…

internal/assetcache/evict.go

Loading diff…

internal/assetcache/evict_test.go

Loading diff…

internal/assetcache/fill.go

Loading diff…

internal/assetcache/fill_test.go

Loading diff…

internal/assetcache/fs.go

Loading diff…

internal/assetcache/fs_linux_test.go

Loading diff…

internal/assetcache/fs_test.go

Loading diff…

internal/assetcache/key.go

Loading diff…

internal/assetcache/meta.go

Loading diff…

internal/assetcache/statfs_linux.go

Loading diff…

internal/assetcache/statfs_other.go

Loading diff…

internal/assetcache/store.go

Loading diff…

internal/assetcache/store_test.go

Loading diff…

internal/console/apiruns.go

Loading diff…

internal/console/apiruns_key_test.go

Loading diff…

internal/console/apiruns_service_test.go

Loading diff…

internal/console/apirunsfollow.go

Loading diff…

internal/console/apiservices.go

Loading diff…

internal/console/authcli.go

Loading diff…

internal/console/authstore.go

Loading diff…

internal/console/claim_invariant_fixtures_test.go

Loading diff…

internal/console/deploycred_test.go

Loading diff…

internal/console/deploydoors_test.go

Loading diff…

internal/console/deploymixed_test.go

Loading diff…

internal/console/deployscope_test.go

Loading diff…

internal/console/deploysign_test.go

Loading diff…

internal/console/server.go

Loading diff…

internal/console/svcpage.go

Loading diff…

internal/console/svcprincipal.go

Loading diff…

internal/console/svcprincipal_run_test.go

Loading diff…

internal/console/svcroutes_test.go

Loading diff…

internal/console/templates/account_settings.html

Loading diff…

internal/console/testdata/claim-authority-sites.txt

Loading diff…

internal/console/testdata/claim-routes.txt

Loading diff…

internal/host/buildstate.go

Loading diff…

internal/host/buildstate_cas_test.go

Loading diff…

internal/host/buildstate_test.go

Loading diff…

internal/host/runevents.go

Loading diff…

internal/host/runevents_service_test.go

Loading diff…

internal/lease/createlease.go

Loading diff…

internal/lease/endpoint_test.go

Loading diff…

internal/lease/fastacquire_test.go

Loading diff…

internal/lease/lease.go

Loading diff…

internal/mail/aws.go

Loading diff…

internal/mail/aws_iam_test.go

Loading diff…

internal/mail/boundarysweep.go

Loading diff…

internal/provision/edge_request_records_census_test.go

Loading diff…

internal/provision/provision.go

Loading diff…

internal/provision/run.go

Loading diff…

internal/provision/run_keys_test.go

Loading diff…

internal/provision/service_runs_census_test.go

Loading diff…

internal/provision/testdata/plan14-root-reads-chain.tsv

Loading diff…

internal/provision/testdata/plan14-root-reads-edge-asset-cache-2.tsv

Loading diff…

internal/provision/testdata/plan14-root-reads-pro-6214-service-runs-decisions.tsv

Loading diff…

internal/provision/testdata/plan14-root-reads-pro-6214-service-runs.tsv

Loading diff…

internal/provision/testdata/plan14-root-reads-sec-mail-user-boundary.tsv

Loading diff…

internal/provision/testdata/plan14-root-reads-wake-latency-3.tsv

Loading diff…

internal/provision/wake_latency_3_census_test.go

Loading diff…

internal/runs/commands.go

Loading diff…

internal/runs/commands_test.go

Loading diff…

internal/runs/keys.go

Loading diff…

internal/runs/keys_test.go

Loading diff…

internal/runs/runs.go

Loading diff…

internal/runs/runs_test.go

Loading diff…

internal/svcrole/svcrole.go

Loading diff…

internal/svcrole/svcrole_test.go

Loading diff…

run.go

Loading diff…

run_test.go

Loading diff…

services.go

Loading diff…

services_cli_test.go

Loading diff…