| 1 | # Census overlay pro-6214-service-runs, written by census-propose (#369). census-ruling-pro-6214-service-runs, approved by the census owner before the merge; the approval card is docs/superpowers/notes/census-proposal-pro-6214-service-runs.md. |
| 2 | # 13 body, 1 sites, 8 envelope: each changed unit re-frozen at its existing disposition with its claim appended. |
| 3 | @legacy ba6719128b56db80ef6db7d4a703ffdff8a6f43a7f35d46dca470b8a087b82f5 cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console service wires the optional callback signer and starts the claim-guarded queue worker. The same three data path literals move; it does not add a privileged reader.;rev3=PROPOSED-email-signin;identity=the console (cmd/console serve under console.service, user carlos-console);basis=passes CARLOS_CONSOLE_NAME to NewServer as Config.ConsoleName, the name the console's emails use; the same three /data literals at the same offsets; no read added;rev3=PROPOSED-s3-change-index;identity=the console (cmd/console serve under console.service, user carlos-console);basis=arms the record view when CARLOS_CHANGE_INDEX=read (armChangeIndex) for the run and seed sweeps and starts its backstop loop; the same three /data literals at the same offsets; no read added;rev3=census-ruling-db-region-forward-2;identity=the console (cmd/console serve under console.service, user carlos-console);basis=parses CARLOS_DB_FORWARD (dbForward) into Config.DBForward and builds its http.Server with console.NewHTTPServer, the same two timeouts; the same three /data literals at the same offsets; no read added;rev3=census-ruling-sec-sidecar-create-gate;basis=serve now parses CARLOS_SIDECAR_ACCOUNTS (sidecarAccounts, a pure env parse with log.Fatalf on a bad or empty-list value) before opening anything and passes it into console.Config.SidecarAccounts. No read was added: the same 3 root read sites.;rev3=census-ruling-sec-mail-user-boundary;basis=reads CARLOS_MAIL_USER_BOUNDARY and passes it to mail.NewAWSProvisioner; runs the one-shot boundary sweep behind CARLOS_MAIL_BOUNDARY_SWEEP=1, refused under CARLOS_HOST_CLAIM;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): reads CARLOS_RUN_KEYS, an environment variable, into Config.RunKeysEnabled; keyed run creates are refused 503 keys_not_ready unless it is on; the same three /data literals; no read added data-literal@4601,data-literal@5702,data-literal@5939 ce4b9b3834f65a15cd063e69487ba148bf433bbda7e88e6bb1bc83bf448ed359 |
| 4 | @legacy ce411ba77d0198cddfe75a1c29be5218251d90232e0d268f74b7dfdfb2897412 internal/console/apiruns.go Server.handleAPIRunCreate legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the console (cmd/console serve under console.service, user carlos-console): the run create door; it reads the record from the bucket and refuses an open run; no root decision;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (the run doors): also admits a run service (runCaller: role run with a credential id, after the unchanged shared gate and the route's svcrole.Exactly(Run), which Admin does not join); a service's argv must start word for word with one of its granted prefixes (runs.CommandGranted), else 403 command_not_granted before any object is written; on_behalf_of only from a service, one bare email of at most 254 bytes, never checked against membership, granting nothing; a keyed create (Idempotency-Key, only with CARLOS_RUN_KEYS=on) answers a key the record's run_keys holds for this caller before the record refusals and without reading a file (same digest: 202 replayed; another: 409); keyed files must declare and match their sha256; records by_service, by_credential, on_behalf_of and the scoped key hash; an open-run refusal is redacted for another caller's run; refusal codes; its one site is still rec.ActiveRun.Open(), a method, not a file; no read added (the record and request.json from the deployment bucket, as before) file:Open@2106 1b6af835b3b709a20c046837c0415d60b6c15f7d7dcc50c12bdcd0d25a0c68a6 |
| 5 | @legacy 14d651ad63a4077c3bd0b53890295672478dbcb96efc1678a257d922e5f4b694 internal/console/apirunsfollow.go Server.handleAPIRunAck legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the console (cmd/console serve under console.service, user carlos-console): the ack door; clears a finished run from the record by CAS;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (the run doors, via runGate): a run service acks only its own runs; refusal codes; RunClear unchanged and leaves run_keys as they are; its one site, run.Open(), a method, moves; no read added file:Open@1316 2680a0bb0550b3c4811487dfffb8ec56ec9c381085d67ef4b6af0e3b17035587 |
| 6 | @legacy fe5c95db4a613a52b32fcf1aed1b2f50b9974fe9d38e32fc0c1dd281e4b789a9 internal/console/apirunsfollow.go Server.handleAPIRunGet legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the console (cmd/console serve under console.service, user carlos-console): the follow door; pages a run's chunks and result from the bucket;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (the run doors, via runGate): a run service reaches it only for a run whose request.json records its credential id, any other answering 404 as an unknown id; refusal codes; the same r.URL.Query() site; no read added file:Query@169 e426b56dc75dca7ea970785df9ad6de0fcea95bdb49dd034b511aa9c75a03384 |
| 7 | @legacy 1def3790bd1cb1eca81b161aaf4fe2c3b56cf559ea3c32a5084ff8fac96b4af4 internal/console/apirunsfollow.go Server.runTransitionRefused legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the console (cmd/console serve under console.service, user carlos-console): words a refused cancel, expire or ack from the record's run state;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): refusal codes only (run_started, run_ended and the shared codes); its one site, run.Open() on the record's run state, a method, moves; no read added file:Open@615 63e0baeadb156f6d99a674592c2e7a180f294ad71c2578e5f26383af3e1921a5 |
| 8 | @legacy 0b758ac7c67e2a7b5999f8cf4f6847b30bb2d9fc84f083e3d75f69e691b963a2 internal/console/authstore.go Store.CLITokens legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): its Query also selects cli_tokens.commands; the same Query site; no read added file:Query@78 30216364db3a080dc80c83d5dd1fd5f34923b8da9358497e06779fa737fe23db |
| 9 | @legacy e9ab4c437fe58eb580e9134d0e37b7e2f1bc0d98df237b3321bec468c5f04993 internal/console/authstore.go Store.claimRawNewAppToken legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): the legacy app token's INSERT also writes a fresh credential_id (newCredentialID); the same Exec site; no read added file:Exec@264 15c4236fbbe2724dd114e67f029ee7b2c7666e348b63e68a0fa3845d4b6d17d9 |
| 10 | @legacy 89f3fd21d90025cb16b2f05e0d55ff3131b808cdde7b2d885878d3f9d333e41e internal/console/svcprincipal.go Store.CLIPrincipal legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (the credential read): its cli_tokens QueryRow also selects credential_id and commands; a run row resolves only with an app, a credential_id and a command list that parses, passes runs.CheckCommandPrefixes and is byte-identical to the canonical JSON this console writes, else it does not resolve (fail closed, the deploy rungs rule's twin); any other role carrying commands does not resolve; the same QueryRow and last_used Exec sites; no read added file:Exec@3861,file:QueryRow@286 c3244624910adb4b6b4416719957527d383aea4a48348cef3b7fdb17cc11bea7 |
| 11 | @legacy ef2a99bd7255f7f1554623df55ef8b11a84654f373fa405d7389766bc2e7448c internal/console/svcprincipal.go Store.ServicePrincipals legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): its Query also selects cli_tokens.commands for the account's service listing; the same Query site; no read added file:Query@87 29b33d2785551e03b51b1d21bd04a48eced9ef0e3b6793e440a64bd7976ff4eb |
| 12 | @legacy 0031cc73ee797c398d150c567afab280db9eca7baadc559ce58fad144906d12e internal/console/svcprincipal.go Store.claimRawNewServicePrincipalScoped legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (the mint): the only writer of a run credential, from the two owner-gated mint doors (POST /api/cli/services/{account}, registered svcrole.Set{} so no service credential reaches it, and the settings page behind serviceOwner); a run credential must name an app and 1 to 32 valid command prefixes, takes no rungs, and other roles may not name commands; stores the list as canonical JSON in cli_tokens.commands and a fresh credential_id on every mint, including a reused revoked name; the same QueryRow and INSERT Exec sites; no read added file:Exec@2371,file:QueryRow@2046 78b86668f2baf879be5705310942e346966a722834734a670b780b89590ed5df |
| 13 | @legacy 85c97ae24776b41fc10ea021be014cc015abf9e7769f0f5b2b04ad1d0f09bd43 internal/console/templates/account_settings.html external legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): embedded UI: a Commands column, the minted line names a run credential's commands, and a commands input on the mint form; markup only; no read added file:external@0 d8b4c78309e718c4094bcf3cfbd75ab420e46fd1b1cb79a55cf454c41a1a78ad |
| 14 | @legacy 028271fef8a422cfaff3179ca658e7da948ce7cface1fec720e0636d21e4cd61 internal/provision/run.go RunAdmit legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the console (cmd/console serve under console.service, user carlos-console): the record transition the console's run create door runs;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (RunAdmit): still applied only by the create door's admitRun through SetRecordRun's unchanged read-CAS-write; prunes run_keys older than 24h on every admission; a keyed admission checks its key before every refusal (same digest: *RunKeyReplay; another: ErrRunKeyReused; neither changes the record); a keyed admission that succeeds appends {key, run_id, digest, caller, at} and keeps each caller's newest 32, in the same write that queues the run; refusals and the queued RunState unchanged; within internal/provision only RunAdmit assigns RunKeys (TestOnlyRunAdmitWritesRunKeys); its one site is still rec.ActiveRun.Open(), a method; no read added file:Open@636 aa473b2f605cac7841bc91ce5b52594af5fc0da9e281dca411c5ea3aa9de2b12 |
| 15 | @legacy 3d700d09f5a46c375d4ef551edc5ecd65abeaa604814a517ff631050f076234d run.go runMetaFor legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the carlos CLI on a person's machine, as that person (no box unit): builds the run request's file list;rev3=census-ruling-pro-6214-service-runs;basis=the carlos CLI on the caller's own machine, as that caller: with --idempotency-key it also declares each --file's sha256 (runFileSum, a new unit); the same Stat of the path the caller named; no read added here file:Stat@162 4bd18823c8af404a7ddc33b69834e6617a7494bce7c44d1d600d522a3d1b9e96 |
| 16 | @legacy 5d1a143aac277712ed0ed9afd403ffefbe557d66251e5bc667c4471eb6a9692c internal/console/authstore.go Store.migrateCLIAuth legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): one more Exec of the kind it already makes: SQLite DDL on its own database, the partial unique index cli_tokens_credential_id; the ALTER loop adds credential_id and commands (TEXT NOT NULL DEFAULT ''); then calls backfillCredentialIDs; additive; no new kind of read file:Exec@1447,file:Exec@3087,file:Exec@3565,file:Exec@4057,file:Exec@4899 8b0dd2d959642a38990fda9645308b7182b70e0d6b7af05084b55167ecadebca |
| 17 | cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console service wires the optional callback signer and starts the claim-guarded queue worker. The same three data path literals move; it does not add a privileged reader.;rev3=PROPOSED-email-signin;identity=the console (cmd/console serve under console.service, user carlos-console);basis=passes CARLOS_CONSOLE_NAME to NewServer as Config.ConsoleName, the name the console's emails use; the same three /data literals at the same offsets; no read added;rev3=PROPOSED-s3-change-index;identity=the console (cmd/console serve under console.service, user carlos-console);basis=arms the record view when CARLOS_CHANGE_INDEX=read (armChangeIndex) for the run and seed sweeps and starts its backstop loop; the same three /data literals at the same offsets; no read added;rev3=census-ruling-db-region-forward-2;identity=the console (cmd/console serve under console.service, user carlos-console);basis=parses CARLOS_DB_FORWARD (dbForward) into Config.DBForward and builds its http.Server with console.NewHTTPServer, the same two timeouts; the same three /data literals at the same offsets; no read added;rev3=census-ruling-sec-sidecar-create-gate;basis=serve now parses CARLOS_SIDECAR_ACCOUNTS (sidecarAccounts, a pure env parse with log.Fatalf on a bad or empty-list value) before opening anything and passes it into console.Config.SidecarAccounts. No read was added: the same 3 root read sites.;rev3=census-ruling-sec-mail-user-boundary;basis=reads CARLOS_MAIL_USER_BOUNDARY and passes it to mail.NewAWSProvisioner; runs the one-shot boundary sweep behind CARLOS_MAIL_BOUNDARY_SWEEP=1, refused under CARLOS_HOST_CLAIM;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): reads CARLOS_RUN_KEYS, an environment variable, into Config.RunKeysEnabled; keyed run creates are refused 503 keys_not_ready unless it is on; the same three /data literals; no read added data-literal@4601,data-literal@5702,data-literal@5939 ce4b9b3834f65a15cd063e69487ba148bf433bbda7e88e6bb1bc83bf448ed359 |
| 18 | internal/console/apiruns.go Server.handleAPIRunCreate legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the console (cmd/console serve under console.service, user carlos-console): the run create door; it reads the record from the bucket and refuses an open run; no root decision;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (the run doors): also admits a run service (runCaller: role run with a credential id, after the unchanged shared gate and the route's svcrole.Exactly(Run), which Admin does not join); a service's argv must start word for word with one of its granted prefixes (runs.CommandGranted), else 403 command_not_granted before any object is written; on_behalf_of only from a service, one bare email of at most 254 bytes, never checked against membership, granting nothing; a keyed create (Idempotency-Key, only with CARLOS_RUN_KEYS=on) answers a key the record's run_keys holds for this caller before the record refusals and without reading a file (same digest: 202 replayed; another: 409); keyed files must declare and match their sha256; records by_service, by_credential, on_behalf_of and the scoped key hash; an open-run refusal is redacted for another caller's run; refusal codes; its one site is still rec.ActiveRun.Open(), a method, not a file; no read added (the record and request.json from the deployment bucket, as before) file:Open@2106 1b6af835b3b709a20c046837c0415d60b6c15f7d7dcc50c12bdcd0d25a0c68a6 |
| 19 | internal/console/apirunsfollow.go Server.handleAPIRunAck legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the console (cmd/console serve under console.service, user carlos-console): the ack door; clears a finished run from the record by CAS;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (the run doors, via runGate): a run service acks only its own runs; refusal codes; RunClear unchanged and leaves run_keys as they are; its one site, run.Open(), a method, moves; no read added file:Open@1316 2680a0bb0550b3c4811487dfffb8ec56ec9c381085d67ef4b6af0e3b17035587 |
| 20 | internal/console/apirunsfollow.go Server.handleAPIRunGet legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the console (cmd/console serve under console.service, user carlos-console): the follow door; pages a run's chunks and result from the bucket;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (the run doors, via runGate): a run service reaches it only for a run whose request.json records its credential id, any other answering 404 as an unknown id; refusal codes; the same r.URL.Query() site; no read added file:Query@169 e426b56dc75dca7ea970785df9ad6de0fcea95bdb49dd034b511aa9c75a03384 |
| 21 | internal/console/apirunsfollow.go Server.runTransitionRefused legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the console (cmd/console serve under console.service, user carlos-console): words a refused cancel, expire or ack from the record's run state;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): refusal codes only (run_started, run_ended and the shared codes); its one site, run.Open() on the record's run state, a method, moves; no read added file:Open@615 63e0baeadb156f6d99a674592c2e7a180f294ad71c2578e5f26383af3e1921a5 |
| 22 | internal/console/authstore.go Store.CLITokens legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): its Query also selects cli_tokens.commands; the same Query site; no read added file:Query@78 30216364db3a080dc80c83d5dd1fd5f34923b8da9358497e06779fa737fe23db |
| 23 | internal/console/authstore.go Store.claimRawNewAppToken legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): the legacy app token's INSERT also writes a fresh credential_id (newCredentialID); the same Exec site; no read added file:Exec@264 15c4236fbbe2724dd114e67f029ee7b2c7666e348b63e68a0fa3845d4b6d17d9 |
| 24 | internal/console/svcprincipal.go Store.CLIPrincipal legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (the credential read): its cli_tokens QueryRow also selects credential_id and commands; a run row resolves only with an app, a credential_id and a command list that parses, passes runs.CheckCommandPrefixes and is byte-identical to the canonical JSON this console writes, else it does not resolve (fail closed, the deploy rungs rule's twin); any other role carrying commands does not resolve; the same QueryRow and last_used Exec sites; no read added file:Exec@3861,file:QueryRow@286 c3244624910adb4b6b4416719957527d383aea4a48348cef3b7fdb17cc11bea7 |
| 25 | internal/console/svcprincipal.go Store.ServicePrincipals legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): its Query also selects cli_tokens.commands for the account's service listing; the same Query site; no read added file:Query@87 29b33d2785551e03b51b1d21bd04a48eced9ef0e3b6793e440a64bd7976ff4eb |
| 26 | internal/console/svcprincipal.go Store.claimRawNewServicePrincipalScoped legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (the mint): the only writer of a run credential, from the two owner-gated mint doors (POST /api/cli/services/{account}, registered svcrole.Set{} so no service credential reaches it, and the settings page behind serviceOwner); a run credential must name an app and 1 to 32 valid command prefixes, takes no rungs, and other roles may not name commands; stores the list as canonical JSON in cli_tokens.commands and a fresh credential_id on every mint, including a reused revoked name; the same QueryRow and INSERT Exec sites; no read added file:Exec@2371,file:QueryRow@2046 78b86668f2baf879be5705310942e346966a722834734a670b780b89590ed5df |
| 27 | internal/console/templates/account_settings.html external legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): embedded UI: a Commands column, the minted line names a run credential's commands, and a commands input on the mint form; markup only; no read added file:external@0 d8b4c78309e718c4094bcf3cfbd75ab420e46fd1b1cb79a55cf454c41a1a78ad |
| 28 | internal/provision/run.go RunAdmit legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the console (cmd/console serve under console.service, user carlos-console): the record transition the console's run create door runs;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): AUTHORITY (RunAdmit): still applied only by the create door's admitRun through SetRecordRun's unchanged read-CAS-write; prunes run_keys older than 24h on every admission; a keyed admission checks its key before every refusal (same digest: *RunKeyReplay; another: ErrRunKeyReused; neither changes the record); a keyed admission that succeeds appends {key, run_id, digest, caller, at} and keeps each caller's newest 32, in the same write that queues the run; refusals and the queued RunState unchanged; within internal/provision only RunAdmit assigns RunKeys (TestOnlyRunAdmitWritesRunKeys); its one site is still rec.ActiveRun.Open(), a method; no read added file:Open@636 aa473b2f605cac7841bc91ce5b52594af5fc0da9e281dca411c5ea3aa9de2b12 |
| 29 | run.go runMetaFor legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the carlos CLI on a person's machine, as that person (no box unit): builds the run request's file list;rev3=census-ruling-pro-6214-service-runs;basis=the carlos CLI on the caller's own machine, as that caller: with --idempotency-key it also declares each --file's sha256 (runFileSum, a new unit); the same Stat of the path the caller named; no read added here file:Stat@162 4bd18823c8af404a7ddc33b69834e6617a7494bce7c44d1d600d522a3d1b9e96 |
| 30 | internal/console/authstore.go Store.migrateCLIAuth legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-pro-6214-service-runs;basis=the console (cmd/console serve, user carlos-console): one more Exec of the kind it already makes: SQLite DDL on its own database, the partial unique index cli_tokens_credential_id; the ALTER loop adds credential_id and commands (TEXT NOT NULL DEFAULT ''); then calls backfillCredentialIDs; additive; no new kind of read file:Exec@1447,file:Exec@3087,file:Exec@3565,file:Exec@4057,file:Exec@4899 8b0dd2d959642a38990fda9645308b7182b70e0d6b7af05084b55167ecadebca |
| 31 | @coverage . 4195c2c71e4c49ced38ec1e8d2baee58583e7642c8f28c75d27182b26c169074 |
| 32 | @coverage cmd/console 91b498aa4d0109e6936b313c9d823485c8a750d525553c1a798299a145a7901e |
| 33 | @coverage internal/console be92cd6ad03af20eb108428ce8dc0960e13f295aeb1551bc469f0f4f9bede109 |
| 34 | @coverage internal/console/templates ae956ec35057e84094421e66ff216aeec7571bb8ab1ff6a4c499953d3754d88e |
| 35 | @coverage internal/host b1ce9e67f06d3fe4ebe5a6c506387746c56026331f9d614af370b343093417dd |
| 36 | @coverage internal/provision af98e837618adfad3574d90202590b944575f2ab7d53eb97c0113a2185d41ab1 |
| 37 | @coverage internal/runs 941ec9583b85e0d68cd483df9c447abe7f9d5bdb6577f0c15c8cf3676e23dc72 |
| 38 | @coverage internal/svcrole 53527cfffc108ef6e017874c15a0bb42e99a1984d97947301055890670e19f32 |
| 39 | |
amadan