SMQ-2739 - Prevent removing of all users from Built in admin role #2835

JeffMboya · 2025-04-22T16:59:50Z

What type of PR is this?

This is a feature

What does this do?

This PR introduces a safeguard that prevents all members from being removed from the built-in admin role on any domain. When an attempt is made to remove the last user from the admin role, the system now rejects the request with:

{
    "error": "",
    "message": "failed to remove entity"
}

This ensures that at least one user always retains admin privileges, preventing domains from becoming orphaned.

Example behavior:

If a domain has 2 admin users, removing one is allowed.
Attempting to remove both in the same request is rejected.
If only one admin remains, any attempt to remove them is blocked.

Which issue(s) does this PR fix/relate to?

Have you included tests for your changes?

Yes. Manual testing was performed by removing members via the /domains/{domainID}/roles/{roleID}/members/delete endpoint and verifying behavior with various admin user counts. Unit tests will follow up in a separate test refactor PR.

Did you document any new/modified feature?

Yes. Documented at absmach/supermq-docs#223

Notes

JeffMboya · 2025-04-23T08:33:28Z

JeffMboya · 2025-04-23T11:29:32Z

codecov · 2025-04-23T12:38:09Z

Codecov Report

Attention: Patch coverage is 0% with 24 lines in your changes missing coverage. Please review.

Project coverage is 25.98%. Comparing base (798ed3a) to head (de78195).
Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
domains/service.go	0.00%	24 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2835      +/-   ##
==========================================
- Coverage   27.81%   25.98%   -1.84%     
==========================================
  Files         354       46     -308     
  Lines       56028    11447   -44581     
==========================================
- Hits        15585     2974   -12611     
+ Misses      39669     8286   -31383     
+ Partials      774      187     -587

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

dborovcanin · 2025-04-25T08:28:35Z

@arvindh123 Please review.

arvindh123 · 2025-06-03T10:45:38Z

pkg/roles/provisionmanage.go


+	if _, ok := r.builtInRoles[BuiltInRoleName(ro.Name)]; ok {
+		page, err := r.repo.RoleListMembers(ctx, ro.ID, 0, 0)
+		if err != nil {
+			return errors.Wrap(svcerr.ErrViewEntity, err)
+		}
+		if page.Total <= uint64(len(members)) {
+			return errors.Wrap(svcerr.ErrRemoveEntity, fmt.Errorf("built-in role '%s' must retain at least one member", ro.Name))
+		}
+	}


This should be applicable only for domains
We can move this logic to domain service func (svc *service) RoleRemoveAllMembers(ctx context.Context, session authn.Session, entityID, roleID string) error

arvindh123 · 2025-06-05T13:37:59Z

domains/service.go

+	currentMembersPage, listErr := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)
+	if listErr != nil {
+		return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to list members of role '%s' for invitation cleanup: %w", ro.Name, listErr))
+	}
+
+	if len(currentMembersPage.Members) > 0 {
+		for _, member := range currentMembersPage.Members {
+			memberID := string(member)
+			if err := svc.repo.DeleteInvitation(ctx, memberID, entityID); err != nil && err != repoerr.ErrNotFound {
+				return errors.Wrap(svcerr.ErrRemoveEntity, fmt.Errorf("failed to delete invitation for member '%s' in domain '%s' from role '%s': %w", memberID, entityID, ro.Name, err))
+			}
+		}
+	}


This logic is taken care by RoleRemoveAllMembers
Please remove this logic

arvindh123 · 2025-06-05T13:39:29Z

domains/service.go

+	if _, ok := svc.ProvisionManageService.BuiltInRoles[roles.BuiltInRoleName(ro.Name)]; ok {
+		isBuiltInRole = true
+	}
+


We can simply have like below

Suggested change

if _, ok := svc.ProvisionManageService.BuiltInRoles[roles.BuiltInRoleName(ro.Name)]; ok {

isBuiltInRole = true

}

if _, ok := svc.ProvisionManageService.BuiltInRoles[roles.BuiltInRoleName(ro.Name)]; ok {

return errors.Wrap(svcerr.ErrRemoveEntity, fmt.Errorf("built-in role '%s' must retain at least one member and cannot have all members removed", ro.Name))

}

arvindh123 · 2025-06-05T13:40:46Z

domains/service.go

+	if _, ok := svc.ProvisionManageService.BuiltInRoles[roles.BuiltInRoleName(ro.Name)]; ok {
+		isBuiltInRole = true
+	}
+
+	if isBuiltInRole {
+		membersPage, listErr := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)
+		if listErr != nil {
+			return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to list members for built-in role '%s' to check count: %w", ro.Name, listErr))
+		}
+
+		if membersPage.Total <= uint64(len(members)) {
+			return errors.Wrap(svcerr.ErrRemoveEntity, fmt.Errorf("built-in role '%s' must retain at least one member. Attempting to remove %d member(s) from %d would leave too few.", ro.Name, len(members), membersPage.Total))
 		}
 	}


Suggested change

if _, ok := svc.ProvisionManageService.BuiltInRoles[roles.BuiltInRoleName(ro.Name)]; ok {

isBuiltInRole = true

}

if isBuiltInRole {

membersPage, listErr := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)

if listErr != nil {

return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to list members for built-in role '%s' to check count: %w", ro.Name, listErr))

}

if membersPage.Total <= uint64(len(members)) {

return errors.Wrap(svcerr.ErrRemoveEntity, fmt.Errorf("built-in role '%s' must retain at least one member. Attempting to remove %d member(s) from %d would leave too few.", ro.Name, len(members), membersPage.Total))

}

}

if _, ok := svc.ProvisionManageService.BuiltInRoles[roles.BuiltInRoleName(ro.Name)]; ok {

membersPage, listErr := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)

if listErr != nil {

return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to list members for built-in role '%s' to check count: %w", ro.Name, listErr))

}

if membersPage.Total <= uint64(len(members)) {

return errors.Wrap(svcerr.ErrRemoveEntity, fmt.Errorf("built-in role '%s' must retain at least one member. Attempting to remove %d member(s) from %d would leave too few.", ro.Name, len(members), membersPage.Total))

}

}

arvindh123 · 2025-06-05T13:43:19Z

domains/service.go

 	}
+
+	for _, memberID := range members {
+		if err := svc.repo.DeleteInvitation(ctx, memberID, entityID); err != nil && err != repoerr.ErrNotFound {


We can have repo call where we can delete All the Invitation at once something like

svc.repo.DeleteUsersInvitation(ctx,entityID, memberIDs...)

This requires new function invitations repo like DeleteUsersInvitation(ctx,entityID, memberIDs...)

Create ticket for this #2924
We can solve this later in different PR

arvindh123 · 2025-06-05T15:23:59Z

domains/service.go

+	ro, err := svc.repo.RetrieveEntityRole(ctx, entityID, roleID)
+	if err != nil {
+		return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to retrieve role '%s' for entity '%s': %w", roleID, entityID, err))
+	}


Suggested change

}

return errors.Wrap(svcerr.ErrViewEntity, err)

arvindh123 · 2025-06-05T15:24:52Z

domains/service.go

+		membersPage, listErr := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)
+		if listErr != nil {
+			return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to list members for built-in role '%s' to check count: %w", ro.Name, listErr))
+		}


Suggested change

}

return errors.Wrap(svcerr.ErrViewEntity, err)

arvindh123 · 2025-06-05T15:25:12Z

domains/service.go

+		membersPage, listErr := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)
+		if listErr != nil {
+			return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to list members for built-in role '%s' to check count: %w", ro.Name, listErr))
+		}


Suggested change

}

membersPage, err := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)

if err != nil {

arvindh123 · 2025-06-05T15:27:19Z

domains/service.go

+		}
+		if membersPage.Total <= uint64(len(members)) {
+			return errors.Wrap(svcerr.ErrRemoveEntity, fmt.Errorf("built-in role '%s' must retain at least one member. Attempting to remove %d member(s) from %d would leave too few.", ro.Name, len(members), membersPage.Total))
+		}


Suggested change

}

errAtLeastOneMemberRetain = errors.New("at least one member should be in inbuild role")

return errors.Wrap(svcerr.ErrRemoveEntity, errAtLeastOneMemberRetain)

No need for details , like how many members request and role name

arvindh123 · 2025-06-05T15:27:41Z

domains/service.go

+	ro, err := svc.repo.RetrieveEntityRole(ctx, entityID, roleID)
+	if err != nil {
+		return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to retrieve role '%s' for entity '%s': %w", roleID, entityID, err))
+	}


Suggested change

}

return errors.Wrap(svcerr.ErrViewEntity, err)

arvindh123 · 2025-06-05T15:28:03Z

domains/service.go

+	if _, ok := svc.ProvisionManageService.BuiltInRoles[roles.BuiltInRoleName(ro.Name)]; ok {
+		membersPage, listErr := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)
+		if listErr != nil {
+			return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to list members for built-in role '%s' to check count: %w", ro.Name, listErr))


Suggested change

return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to list members for built-in role '%s' to check count: %w", ro.Name, listErr))

membersPage, err := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)

if err != nil {

arvindh123 · 2025-06-05T15:28:24Z

domains/service.go

+		membersPage, listErr := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)
+		if listErr != nil {
+			return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to list members for built-in role '%s' to check count: %w", ro.Name, listErr))
+		}


Suggested change

}

return errors.Wrap(svcerr.ErrViewEntity, err)

arvindh123 · 2025-06-05T15:29:07Z

domains/service.go

+			return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to list members for built-in role '%s' to check count: %w", ro.Name, listErr))
+		}
+		if membersPage.Total > 0 {
+			return errors.Wrap(svcerr.ErrRemoveEntity, fmt.Errorf("built-in role '%s' must retain at least one member and cannot have all members removed", ro.Name))


No need of details
Just follow the approach mentioned here #2835 (comment)

arvindh123 · 2025-06-05T15:55:53Z

domains/service.go

 	return dom, nil
 }

-// Only SuperAdmin can freeze the domain.


Why this comment is removed ?

arvindh123 · 2025-06-05T15:57:39Z

domains/service.go


 	d.CreatedAt = time.Now().UTC()

-	// Domain is created in repo first, because Roles table have foreign key relation with Domain ID


Why this comment is removed ?

arvindh123 · 2025-06-05T15:57:52Z

domains/service.go

 	return nil
 }

-// Add addition removal of user from invitations.


Why this comment is removed ?

arvindh123 · 2025-06-05T16:23:34Z

domains/service.go

+		if membersPage.Total <= uint64(len(members)) {
+			return errors.Wrap(svcerr.ErrRemoveEntity, errAtLeastOneMemberRetain)


@JeffMboya

I’ve described the general approach in this comment, but it shouldn’t be taken as a literal implementation.

Also, as per our established coding conventions, all error constants must be defined at the top of the file. Please make sure to move it there.

arvindh123 · 2025-06-05T16:23:58Z

domains/service.go

+			return errors.Wrap(svcerr.ErrViewEntity, err)
+		}
+		if membersPage.Total > 0 {
+			return errors.Wrap(svcerr.ErrRemoveEntity, errAtLeastOneMemberRetain)


@JeffMboya

I’ve described the general approach in this comment, but it shouldn’t be taken as a literal implementation.

Also, as per our established coding conventions, all error constants must be defined at the top of the file. Please make sure to move it there.

Please try to reuse the same variable

@arvindh123 yes, it is already implemented in the last commit

domains/service.go

arvindh123 · 2025-06-05T17:01:29Z

pkg/roles/provisionmanage.go

 	policy       policies.Service
 	actions      []Action
-	builtInRoles map[BuiltInRoleName][]Action
+	BuiltInRoles map[BuiltInRoleName][]Action


Instead of exporting the field builtInRoles , please add function like func (pms ProvisionManageService) BuiltInRoleActions(name BuiltInRoleName)([]Action, error)
and in domains/service.go, we can have something like below

if _, err := svc.ProvisionManageService.BuiltInRoleActions; err == nil { membersPage, err := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0) if err != nil { return errors.Wrap(svcerr.ErrViewEntity, err) } if membersPage.Total <= uint64(len(members)) { return errors.Wrap(svcerr.ErrRemoveEntity, errAtLeastOneMemberRetain) } }

arvindh123 · 2025-06-09T12:11:52Z

domains/service.go

+			return errors.Wrap(svcerr.ErrViewEntity, err)
+		}
+		if membersPage.Total <= uint64(len(members)) {
+			return errors.Wrap(svcerr.ErrRemoveEntity, errAtLeastOneMemberRetain)


@JeffMboya

API response code is 400 and In response we have no details for failure

{ "error": "", "message": "view entity failed" }

So please move the error errAtLeastOneMemberRetain to pkg/errors/service/types.go
and use that like svcerr.ErrAtLeastOneMemberRetain

Please add this svcerr.ErrAtLeastOneMemberRetain to EncodeError function at api/http/common.go
for switch case http.StatusBadRequest

supermq/api/http/common.go

Line 238 in b79fdb1

w.WriteHeader(http.StatusBadRequest)

Updated:

{ "error": "", "message": "must retain at least one member" }

arvindh123

@jeff

arvindh123 · 2025-06-09T14:21:53Z

domains/service.go

+			return errors.Wrap(svcerr.ErrViewEntity, err)
+		}
+		if membersPage.Total <= uint64(len(members)) {
+			return errors.Wrap(svcerr.ErrRetainOneMember, err)


@JeffMboya
Do you think here we need to wrap with err?

@JeffMboya Do you think here we need to wrap with err?

Not really. Let me update

arvindh123 · 2025-06-09T14:44:55Z

domains/service.go

+	if len(members) == 0 {
+		return svcerr.ErrMalformedEntity
+	}
+


@JeffMboya
Validation is done in API layer, So we can remove validation here

arvindh123 · 2025-06-09T14:56:58Z

domains/service.go

+		membersPage, err := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)
+		if err != nil {
+			return errors.Wrap(svcerr.ErrViewEntity, err)
+		}
+		if membersPage.Total > 0 {
+			return svcerr.ErrRetainOneMember
+		}


Here simply we can return svcerr.ErrRetainOneMember if the role is BuiltInRole
No need for checking the members total.
Because this function itself going to remove everyone.

arvindh123 · 2025-06-09T15:31:08Z

domains/service.go

+
+	for _, memberID := range members {
+		if err := svc.repo.DeleteInvitation(ctx, memberID, entityID); err != nil && err != repoerr.ErrNotFound {
+			return svcerr.ErrRetainOneMember


Please revert this error, Here we should send the error returned by svc.repo.DeleteInvitation

Signed-off-by: JeffMboya <jangina.mboya@gmail.com> feat(roles): prevent RoleRemoveAllMembers from acting on admin role Signed-off-by: JeffMboya <jangina.mboya@gmail.com> feat(roles): update implementation Signed-off-by: JeffMboya <jangina.mboya@gmail.com> feat(roles): fix 404 on RoleRemoveAllMembers Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Fix CI Signed-off-by: JeffMboya <jangina.mboya@gmail.com> replace hardcoded admin checks with builtInRoles map lookup Signed-off-by: JeffMboya <jangina.mboya@gmail.com>

Signed-off-by: JeffMboya <jangina.mboya@gmail.com>

Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Address comments Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Address comments Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Address comments Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Address comments Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Refactor error Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Fix CI Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Update domains/service.go Co-authored-by: Arvindh <30824765+arvindh123@users.noreply.github.com> Fix CI Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Refactor Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Update error Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Update error Signed-off-by: JeffMboya <jangina.mboya@gmail.com> UFix CI Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Refactor Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Refactor Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Refactor Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Fix CI Signed-off-by: JeffMboya <jangina.mboya@gmail.com> Refactor Signed-off-by: JeffMboya <jangina.mboya@gmail.com>

Signed-off-by: JeffMboya <jangina.mboya@gmail.com>

JeffMboya force-pushed the SMQ-2739 branch from 3dd24cd to f2dea8a Compare April 23, 2025 06:41

JeffMboya added this to SuperMQ Apr 23, 2025

JeffMboya moved this to 🚧 In Progress in SuperMQ Apr 23, 2025

JeffMboya self-assigned this Apr 23, 2025

JeffMboya marked this pull request as ready for review April 23, 2025 15:42

JeffMboya requested a review from a team as a code owner April 23, 2025 15:42

JeffMboya moved this from 🚧 In Progress to 🩺 Review and testing in SuperMQ Apr 23, 2025

dborovcanin previously approved these changes Apr 25, 2025

View reviewed changes

dborovcanin force-pushed the SMQ-2739 branch from 276363b to e53f623 Compare April 25, 2025 12:10

JeffMboya force-pushed the SMQ-2739 branch from e53f623 to b1f84f9 Compare April 30, 2025 07:34

JeffMboya removed this from SuperMQ May 6, 2025

dborovcanin force-pushed the SMQ-2739 branch from b1f84f9 to 5ae79d6 Compare May 9, 2025 07:28

JeffMboya force-pushed the SMQ-2739 branch from 5ae79d6 to 08c8b7b Compare May 27, 2025 15:01

JeffMboya dismissed dborovcanin’s stale review via ba03dd7 May 27, 2025 16:49

dborovcanin force-pushed the SMQ-2739 branch from ba03dd7 to 94b8c31 Compare June 3, 2025 08:12

arvindh123 requested changes Jun 3, 2025

View reviewed changes

JeffMboya force-pushed the SMQ-2739 branch 2 times, most recently from 89e77af to 08ff1d1 Compare June 5, 2025 13:00

arvindh123 requested changes Jun 5, 2025

View reviewed changes

arvindh123 mentioned this pull request Jun 5, 2025

Add DeleteUsersInvitation function to invitations repo to bulk delete invitations #2924

Closed

arvindh123 requested changes Jun 5, 2025

View reviewed changes

JeffMboya force-pushed the SMQ-2739 branch from 2223edb to 5781f33 Compare June 5, 2025 16:13

arvindh123 requested changes Jun 5, 2025

View reviewed changes

domains/service.go Outdated Show resolved Hide resolved

JeffMboya force-pushed the SMQ-2739 branch from d731212 to 4979514 Compare June 5, 2025 17:01

arvindh123 requested changes Jun 5, 2025

View reviewed changes

arvindh123 requested changes Jun 9, 2025

View reviewed changes

JeffMboya force-pushed the SMQ-2739 branch from 465a26a to 1db5435 Compare June 9, 2025 12:20

arvindh123 requested changes Jun 9, 2025

View reviewed changes

JeffMboya force-pushed the SMQ-2739 branch from 40d3ccd to 6dff5a3 Compare June 9, 2025 15:38

arvindh123 approved these changes Jun 10, 2025

View reviewed changes

JeffMboya added 4 commits June 10, 2025 09:52

Refactor: Move role guard to domain

9c06a89

Signed-off-by: JeffMboya <jangina.mboya@gmail.com>

Refactor

de78195

Signed-off-by: JeffMboya <jangina.mboya@gmail.com>

dborovcanin force-pushed the SMQ-2739 branch from 29ebb77 to de78195 Compare June 10, 2025 07:52

dborovcanin approved these changes Jun 10, 2025

View reviewed changes

dborovcanin merged commit d8b7af4 into absmach:main Jun 10, 2025
5 of 6 checks passed

	}
	membersPage, err := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)
	if err != nil {

	}
	errAtLeastOneMemberRetain = errors.New("at least one member should be in inbuild role")
	return errors.Wrap(svcerr.ErrRemoveEntity, errAtLeastOneMemberRetain)

	return errors.Wrap(svcerr.ErrViewEntity, fmt.Errorf("failed to list members for built-in role '%s' to check count: %w", ro.Name, listErr))
	membersPage, err := svc.repo.RoleListMembers(ctx, ro.ID, 0, 0)
	if err != nil {


		d.CreatedAt = time.Now().UTC()

		// Domain is created in repo first, because Roles table have foreign key relation with Domain ID

		if membersPage.Total <= uint64(len(members)) {
		return errors.Wrap(svcerr.ErrRemoveEntity, errAtLeastOneMemberRetain)

SMQ-2739 - Prevent removing of all users from Built in admin role #2835

SMQ-2739 - Prevent removing of all users from Built in admin role #2835

Conversation

JeffMboya commented Apr 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What type of PR is this?

What does this do?

Which issue(s) does this PR fix/relate to?

Have you included tests for your changes?

Did you document any new/modified feature?

Notes

Uh oh!

JeffMboya commented Apr 23, 2025

Uh oh!

JeffMboya commented Apr 23, 2025

Uh oh!

codecov bot commented Apr 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

dborovcanin commented Apr 25, 2025

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

arvindh123 Jun 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

JeffMboya Jun 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

arvindh123 left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

JeffMboya commented Apr 22, 2025 •

edited

Loading

codecov bot commented Apr 23, 2025 •

edited

Loading

arvindh123 Jun 5, 2025 •

edited

Loading

JeffMboya Jun 9, 2025 •

edited

Loading