End-to-end (git, PRs, Actions)
took 3m 7s Raw logs
Matrix: name: git, PRs, Actions, shard: core
Failed at Run the shard's tests
Process completed with exit code 1. --- duration_ms: 15126.274322 type: 'test' ... # Subtest: scheduled workflows: the schedule fires without a cron trigger ok 22 - scheduled workflows: the schedule fires without a cron trigger --- duration_ms: 162.016744 type: 'test' ... 1..22 # tests 22 # suites 0 # pass 21 # fail 1 # cancelled 0 # skipped 0 # todo 0 # duration_ms 156614.930878
Set up job
Diffinery runner: job e2e (End-to-end (git, PRs, Actions)) for codician/diffinery@64fcdfd18f9eRunner: image diffinery-runner:2a3052eff7a82a483a7fde51, in mad01, WEUR, container fff9b431d3321facec3400345a60dc63a576e4f5a886a37c27867a134c4b156aWorkspace: /workspace/diffineryJob completed with conclusion: failure
Run actions/checkout@v41s
##[group]Run actions/checkout@v4##[endgroup]Syncing repository: codician/diffineryFetching the repository (depth 1)remote: Enumerating objects: 602, done. Receiving objects: 0% (1/602) Receiving objects: 1% (7/602) Receiving objects: 2% (13/602) Receiving objects: 3% (19/602) Receiving objects: 4% (25/602) Receiving objects: 5% (31/602) Receiving objects: 6% (37/602) Receiving objects: 7% (43/602) Receiving objects: 8% (49/602) Receiving objects: 9% (55/602) Receiving objects: 10% (61/602) Receiving objects: 11% (67/602) Receiving objects: 12% (73/602) Receiving objects: 13% (79/602) Receiving objects: 14% (85/602) Receiving objects: 15% (91/602) Receiving objects: 16% (97/602) Receiving objects: 17% (103/602) Receiving objects: 18% (109/602) Receiving objects: 19% (115/602) Receiving objects: 20% (121/602) Receiving objects: 21% (127/602) Receiving objects: 22% (133/602) Receiving objects: 23% (139/602) Receiving objects: 24% (145/602) Receiving objects: 25% (151/602) Receiving objects: 26% (157/602) Receiving objects: 27% (163/602) Receiving objects: 28% (169/602) Receiving objects: 29% (175/602) Receiving objects: 30% (181/602) Receiving objects: 31% (187/602) Receiving objects: 32% (193/602) Receiving objects: 33% (199/602) Receiving objects: 34% (205/602) Receiving objects: 35% (211/602) Receiving objects: 36% (217/602) Receiving objects: 37% (223/602) Receiving objects: 38% (229/602) Receiving objects: 39% (235/602) Receiving objects: 40% (241/602) Receiving objects: 41% (247/602) Receiving objects: 42% (253/602) Receiving objects: 43% (259/602) Receiving objects: 44% (265/602) Receiving objects: 45% (271/602) Receiving objects: 46% (277/602) Receiving objects: 47% (283/602) Receiving objects: 48% (289/602) Receiving objects: 49% (295/602) Receiving objects: 50% (301/602) Receiving objects: 51% (308/602) Receiving objects: 52% (314/602) Receiving objects: 53% (320/602) Receiving objects: 54% (326/602) Receiving objects: 55% (332/602) Receiving objects: 56% (338/602) Receiving objects: 57% (344/602) Receiving objects: 58% (350/602) Receiving objects: 59% (356/602) Receiving objects: 60% (362/602) Receiving objects: 61% (368/602) Receiving objects: 62% (374/602) Receiving objects: 63% (380/602) Receiving objects: 64% (386/602) Receiving objects: 65% (392/602) Receiving objects: 66% (398/602) Receiving objects: 67% (404/602) Receiving objects: 68% (410/602) Receiving objects: 69% (416/602) Receiving objects: 70% (422/602) Receiving objects: 71% (428/602) Receiving objects: 72% (434/602) Receiving objects: 73% (440/602) Receiving objects: 74% (446/602) Receiving objects: 75% (452/602) Receiving objects: 76% (458/602) Receiving objects: 77% (464/602) Receiving objects: 78% (470/602) Receiving objects: 79% (476/602) Receiving objects: 80% (482/602) Receiving objects: 81% (488/602) Receiving objects: 82% (494/602) Receiving objects: 83% (500/602) Receiving objects: 84% (506/602) Receiving objects: 85% (512/602) Receiving objects: 86% (518/602) Receiving objects: 87% (524/602) Receiving objects: 88% (530/602) Receiving objects: 89% (536/602) Receiving objects: 90% (542/602) Receiving objects: 91% (548/602) Receiving objects: 92% (554/602) Receiving objects: 93% (560/602) Receiving objects: 94% (566/602) Receiving objects: 95% (572/602) Receiving objects: 96% (578/602) remote: Total 602 (delta 0), reused 602 (delta 0) Receiving objects: 97% (584/602) Receiving objects: 98% (590/602) Receiving objects: 99% (596/602) Receiving objects: 100% (602/602) Receiving objects: 100% (602/602), 2.44 MiB | 9.83 MiB/s, done.From https://diffinery.com/codician/diffinery * [new ref] 64fcdfd18f9ec43c5e3f33eff550c1cdf10c44c8 -> origin/mainSwitched to a new branch 'main'HEAD is now at 64fcdfd18f9ec43c5e3f33eff550c1cdf10c44c8
Run pnpm/action-setup@v43s
Download action repository 'pnpm/action-setup@v4'##[group]Run pnpm/action-setup@v4with: dest: ~/setup-pnpm run_install: null cache: false cache_dependency_path: pnpm-lock.yaml package_json_file: package.json standalone: false##[endgroup]##[group]Running self-installer...Progress: resolved 1, reused 0, downloaded 0, added 0Packages: +1+Progress: resolved 1, reused 0, downloaded 1, added 1, donedependencies:+ pnpm 10.28.0 (12.14.0 is available)Done in 1s##[endgroup]Installation Completed!
Run actions/setup-node@v49s
##[group]Run actions/setup-node@v4with: node-version: 22 cache: pnpm##[endgroup]Found in cache @ 22.22.0 (pre-installed node satisfies '22')Cache Size: ~215 MB (225870423 B)Cache restored from key: node-cache-Linux-x64-pnpm-4b94436b86798d88b931ea24b5b847697aebf45520d6ef384cb382ce6c1f1e08
Run pnpm install --frozen-lockfile13s
##[group]Run pnpm install --frozen-lockfile##[endgroup]Scope: all 7 workspace projectsLockfile is up to date, resolution step is skippedProgress: resolved 1, reused 0, downloaded 0, added 0Packages: +248++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Progress: resolved 248, reused 242, downloaded 0, added 247Progress: resolved 248, reused 242, downloaded 0, added 248, donedevDependencies:+ turbo 2.11.7+ typescript 5.9.3Done in 12.3s using pnpm v10.28.0
Run pnpm -r --if-present build2s
##[group]Run pnpm -r --if-present build##[endgroup]Scope: 6 of 7 workspace projectsapps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env nodeimport { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjscontainers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"containers/runner build: dist/agent.mjs 657.3kbcontainers/runner build: ⚡ Done in 69mscontainers/runner build: Doneapps/cli build: dist/diffinery.mjs 439.5kbapps/cli build: ⚡ Done in 87msapps/cli build: Doneapps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KBapps/diffinery build: docs: 62 pages (+2 generated at runtime), CLI 0.1.0 (230 KiB)apps/diffinery build: Done
Run pnpm --filter @diffinery/app exec playwright install --with-deps chromium
Run as_root() { if [ "$(id -u)" = 0 ]; then "$@"; else sudo "$@"; fi; }
Run the shard's tests2m 38s
##[group]Run # Shards of similar length; a new test file runs in "rest" unless it's added to another.core='/e2e\.test\.mjs$'agents='/(agentic|review|tasks)\.test\.mjs$'security='/(security|status)\.test\.mjs$'# The core file's real histories and large pushes take minutes each (jquery's alone 2 to 3 on# Diffinery's runners): two shards of their own, so no part of the file runs into node's# per-file timeout, which is the --test-timeout here.histories='^real histories:'large='^(large files|large pushes):'opts=(--test-timeout=600000)case "core" in core) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-skip-pattern="$histories" --test-skip-pattern="$large") ;; histories) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts=(--test-timeout=900000 --test-name-pattern="$histories") ;; large) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-name-pattern="$large") ;; agents) files=$(ls test/e2e/*.test.mjs | grep -E "$agents") ;; security) files=$(ls test/e2e/*.test.mjs | grep -E "$security") ;; *) files=$(ls test/e2e/*.test.mjs | grep -vE "$core|$agents|$security") ;;esacecho "$files"node --test --test-concurrency=1 "${opts[@]}" $files##[endgroup]test/e2e/e2e.test.mjsTAP version 13# Subtest: scheduled workflows: a push to the default branch registers the scheduleok 1 - scheduled workflows: a push to the default branch registers the schedule --- duration_ms: 18013.286059 type: 'test' ...# 1 file checked: no errors, 0 warnings# Subtest: git hosting, Actions, protected PR flow and MCPok 2 - git hosting, Actions, protected PR flow and MCP --- duration_ms: 4086.282887 type: 'test' ...# Subtest: reusable workflows: inputs, secrets, outputs, nesting and skipped callsok 3 - reusable workflows: inputs, secrets, outputs, nesting and skipped calls --- duration_ms: 1084.773085 type: 'test' ...# Subtest: job graph: needs-only scheduling, skip cascades, per-leg runs-on, continue-on-error, job concurrency and public payloadsok 4 - job graph: needs-only scheduling, skip cascades, per-leg runs-on, continue-on-error, job concurrency and public payloads --- duration_ms: 3289.906842 type: 'test' ...# Subtest: re-runs: failed jobs only keep what passed, and one job re-runs with what depends on itok 5 - re-runs: failed jobs only keep what passed, and one job re-runs with what depends on it --- duration_ms: 2283.572809 type: 'test' ...# Subtest: workflow_run: a workflow follows another one on the default branchok 6 - workflow_run: a workflow follows another one on the default branch --- duration_ms: 1663.67089 type: 'test' ...# Subtest: triggers from workflows: a job's repository_dispatch starts runs, a follower of agent code stays an agent'sok 7 - triggers from workflows: a job's repository_dispatch starts runs, a follower of agent code stays an agent's --- duration_ms: 3687.319481 type: 'test' ...# Subtest: pull requests: test merge commits, pull_request_target and the merge queueok 8 - pull requests: test merge commits, pull_request_target and the merge queue --- duration_ms: 5422.623973 type: 'test' ...# Subtest: workflow tokens: read-only default, no approvals or workflow edits, agent code stays an agentok 9 - workflow tokens: read-only default, no approvals or workflow edits, agent code stays an agent --- duration_ms: 3577.03663 type: 'test' ...# Subtest: caches are scoped to branches and pull requests; artifacts keep their retention-daysok 10 - caches are scoped to branches and pull requests; artifacts keep their retention-days --- duration_ms: 9466.056247 type: 'test' ...# Subtest: an older runner's cache API is scoped the same wayok 11 - an older runner's cache API is scoped the same way --- duration_ms: 634.557418 type: 'test' ...# Subtest: an older runner's artifact API needs the job's own tokenok 12 - an older runner's artifact API needs the job's own token --- duration_ms: 404.587494 type: 'test' ...# Subtest: an older runner's artifacts are listed, downloaded and deleted through the REST APIok 13 - an older runner's artifacts are listed, downloaded and deleted through the REST API --- duration_ms: 626.270244 type: 'test' ...# Subtest: containers: a job container and service containers on a self-hosted runnernot ok 14 - containers: a job container and service containers on a self-hosted runner --- duration_ms: 8396.739201 type: 'test' location: '/workspace/diffinery/apps/diffinery/test/e2e/e2e.test.mjs:1506:1' failureType: 'testCodeFailure' error: |- runner agent exited 1: [diffinery-runner] job finished: failure --- job --- { "id": "78ec1b3d1cf7484cb79aca8816ea3896", "runId": "8b25cd93123149a88e6f10df880f6107", "key": "boxed", "name": "boxed", "status": "completed", "conclusion": "failure", "matrix": {}, "startedAt": "2026-10-16T13:01:27.504Z", "completedAt": "2026-10-16T13:01:35.548Z", "outputs": {}, "steps": [], "failure": { "message": "Could not pull mirror.gcr.io/library/redis:7-alpine (docker pull exited with 1)." }, "summary": null, "runnerName": "e2e-runner-17", "runner": { "location": "mad01, WEUR", "instance": "fff9b431d3321facec3400345a60dc63a576e4f5a886a37c27867a134c4b156a" }, "carriedFrom": null, "placementTries": 0, "restarts": 0, "run_id": "8b25cd93123149a88e6f10df880f6107", "run_url": "http://127.0.0.1:40209/api/v3/repos/dev/boxes/actions/runs/8b25cd93123149a88e6f10df880f6107", "run_attempt": 1, "node_id": "Sm9iOjc4ZWMxYjNkMWNmNzQ4NGNiNzlhY2E4ODE2ZWEzODk2", "head_sha": "c0fbf1f669b96a6d181886431b35664404d7e4af", "head_branch": "main", "url": "http://127.0.0.1:40209/api/v3/repos/dev/boxes/actions/jobs/78ec1b3d1cf7484cb79aca8816ea3896", "html_url": "http://127.0.0.1:40209/dev/boxes/actions/runs/8b25cd93123149a88e6f10df880f6107/job/78ec1b3d1cf7484cb79aca8816ea3896", "started_at": "2026-10-16T13:01:27Z", "completed_at": "2026-10-16T13:01:35Z", "workflow_name": ".github/workflows/ci.yml", "check_run_url": "http://127.0.0.1:40209/api/v3/repos/dev/boxes/check-runs/78ec1b3d1cf7484cb79aca8816ea3896", "labels": [], "runner_name": "e2e-runner-17" } --- job log --- 2026-10-16T13:01:27.521Z Diffinery runner: job boxed (boxed) for dev/boxes@c0fbf1f669b9 2026-10-16T13:01:27.521Z Runner: in mad01, WEUR, container fff9b431d3321facec3400345a60dc63a576e4f5a886a37c27867a134c4b156a 2026-10-16T13:01:27.521Z Workspace: /tmp/diffinery-e2e-y2eSZ3/job-78ec1b3d1cf7484cb79aca8816ea3896/boxes 2026-10-16T13:01:27.523Z ##[group]Initialize containers 2026-10-16T13:01:27.560Z Docker 29.9.0 2026-10-16T13:01:27.613Z 4cdbe3779d364e8ecf28d322af26748cc12e0e57064d2ecb9c436797cae68aa7 2026-10-16T13:01:27.617Z ##[command]docker pull mirror.gcr.io/library/redis:7-alpine 2026-10-16T13:01:29.595Z 7-alpine: Pulling from library/redis 2026-10-16T13:01:30.636Z 4eb14bae0e1d: Pulling fs layer 2026-10-16T13:01:30.636Z 9928009b15c8: Pulling fs layer 2026-10-16T13:01:30.636Z 1522f9c6f453: Pulling fs layer 2026-10-16T13:01:30.636Z 4f4fb700ef54: Pulling fs layer 2026-10-16T13:01:30.636Z 7eb50503c2b0: Pulling fs layer 2026-10-16T13:01:30.636Z 16333ee0c00f: Pulling fs layer 2026-10-16T13:01:30.636Z 83234986c742: Pulling fs layer 2026-10-16T13:01:31.148Z 4f4fb700ef54: Download complete 2026-10-16T13:01:35.282Z failed to copy: httpReadSeeker: failed open: could not fetch content descriptor sha256:54779914f171bfa38f26af5e1917062c78d4f03656ae17bc1320b357838f151c (application/vnd.in-toto+json) from remote: not found 2026-10-16T13:01:35.286Z ##[endgroup] 2026-10-16T13:01:35.286Z ##[error]Could not pull mirror.gcr.io/library/redis:7-alpine (docker pull exited with 1). 2026-10-16T13:01:35.529Z Job completed with conclusion: failure --- wrangler log tail --- cy-rest/actions/runners/claim 200 OK (7ms) [wrangler:info] GET /runner/jobs/ad22e8e10294497caaf29a3df0aa0c75 200 OK (5ms) [wrangler:info] PUT /runner/jobs/ad22e8e10294497caaf29a3df0aa0c75/artifacts/one 200 OK (9ms) [wrangler:info] PUT /runner/jobs/ad22e8e10294497caaf29a3df0aa0c75/artifacts/two 200 OK (12ms) [wrangler:info] PUT /runner/jobs/ad22e8e10294497caaf29a3df0aa0c75/artifacts/three 200 OK (9ms) [wrangler:info] GET /api/v3/repos/dev/legacy-rest/actions/artifacts 200 OK (7ms) [wrangler:info] GET /api/v3/repos/dev/legacy-rest/actions/runs/1/artifacts 200 OK (8ms) [wrangler:info] GET /api/v3/repos/dev/legacy-rest/actions/runs/1/artifacts 200 OK (8ms) [wrangler:info] GET /api/v3/repos/dev/legacy-rest/actions/artifacts/2 200 OK (6ms) [wrangler:info] GET /api/v3/repos/dev/legacy-rest/actions/artifacts/2/zip 302 Found (6ms) [wrangler:info] GET /_runtime/blob/6f130111ac5e45ac8742ed424ffb72d3/artifact/2/two.tar.gz 200 OK (6ms) [wrangler:info] DELETE /api/v3/repos/dev/legacy-rest/actions/artifacts/2 204 No Content (12ms) [wrangler:info] GET /api/v3/repos/dev/legacy-rest/actions/artifacts/2 404 Not Found (7ms) [wrangler:info] GET /runner/jobs/ad22e8e10294497caaf29a3df0aa0c75/artifacts/two 404 Not Found (6ms) [wrangler:info] GET /runner/jobs/ad22e8e10294497caaf29a3df0aa0c75/artifacts/one 200 OK (6ms) [wrangler:info] GET /api/v3/repos/dev/legacy-rest/actions/artifacts 200 OK (6ms) [wrangler:info] POST /runner/jobs/ad22e8e10294497caaf29a3df0aa0c75/complete 200 OK (18ms) [wrangler:info] GET /api/v3/user 200 OK (12ms) [wrangler:info] POST /api/v3/user/repos 201 Created (39ms) [wrangler:info] GET /dev/boxes.git/info/refs 200 OK (8ms) [wrangler:info] POST /dev/boxes.git/git-receive-pack 200 OK (36ms) [wrangler:info] GET /api/v3/repos/dev/boxes/actions/runs 200 OK (26ms) [wrangler:info] POST /api/v3/repos/dev/boxes/actions/runners/registration-token 201 Created (17ms) [wrangler:info] POST /api/v3/repos/dev/boxes/actions/runners/register 201 Created (8ms) [wrangler:info] POST /api/v3/repos/dev/boxes/actions/runners/claim 200 OK (6ms) [wrangler:info] GET /runner/jobs/78ec1b3d1cf7484cb79aca8816ea3896 200 OK (6ms) [wrangler:info] QUEUE diffinery-events-dev 5/5 (24ms) [wrangler:info] POST /runner/jobs/78ec1b3d1cf7484cb79aca8816ea3896/logs 200 OK (6ms) [wrangler:info] POST /runner/jobs/78ec1b3d1cf7484cb79aca8816ea3896/logs 200 OK (10ms) [wrangler:info] POST /runner/jobs/78ec1b3d1cf7484cb79aca8816ea3896/logs 200 OK (6ms) [wrangler:info] POST /runner/jobs/78ec1b3d1cf7484cb79aca8816ea3896/logs 200 OK (5ms) [wrangler:info] POST /runner/jobs/78ec1b3d1cf7484cb79aca8816ea3896/logs 200 OK (7ms) [wrangler:info] POST /runner/jobs/78ec1b3d1cf7484cb79aca8816ea3896/logs 200 OK (4ms) [wrangler:info] POST /runner/jobs/78ec1b3d1cf7484cb79aca8816ea3896/complete 200 OK (19ms) [wrangler:info] GET /api/v3/repos/dev/boxes/actions/jobs/78ec1b3d1cf7484cb79aca8816ea3896/logs 200 OK (9ms) [wrangler:info] GET /api/v3/repos/dev/boxes/actions/jobs/78ec1b3d1cf7484cb79aca8816ea3896 200 OK (9ms) code: 'ERR_ASSERTION' name: 'AssertionError' operator: 'fail' stack: |- runOneJob (file:///workspace/diffinery/apps/diffinery/test/e2e/e2e.test.mjs:171:12) process.processTicksAndRejections (node:internal/process/task_queues:105:5) async TestContext.<anonymous> (file:///workspace/diffinery/apps/diffinery/test/e2e/e2e.test.mjs:1540:17) async Test.run (node:internal/test_runner/test:1054:7) async Test.processPendingSubtests (node:internal/test_runner/test:744:7) ...# Subtest: official actions: checkout, cache, artifacts, github-script and setup-* run unmodifiedok 15 - official actions: checkout, cache, artifacts, github-script and setup-* run unmodified --- duration_ms: 38944.263196 type: 'test' ...# Subtest: official actions: the second run hits every cache and reads the first run's artifactsok 16 - official actions: the second run hits every cache and reads the first run's artifacts --- duration_ms: 25162.660578 type: 'test' ...# Subtest: D1 sessions: bookmarks for token clients and browsersok 17 - D1 sessions: bookmarks for token clients and browsers --- duration_ms: 261.330959 type: 'test' ...# GET /repos/dev/compat/contents/missing.txt - 404 with id UNKNOWN in 18ms# PUT /repos/dev/compat/contents/README.md - 409 with id UNKNOWN in 16ms# POST /repos/dev/compat/git/refs - 422 with id UNKNOWN in 17ms# POST /repos/dev/compat/statuses/7313449389940171452e7009bcc4fafe269af4ca - 422 with id UNKNOWN in 14ms# POST http://127.0.0.1:40209/api/uploads/repos/dev/compat/releases/1/assets?name=hello.txt& - 422 with id UNKNOWN in 19ms# GET /repos/dev/compat/releases/2 - 404 with id UNKNOWN in 18ms# POST /repos/dev/compat/releases - 403 with id UNKNOWN in 14ms# GET /repos/dev/compat/releases/tags/v2.0.0-rc.1 - 404 with id UNKNOWN in 25ms# POST /repos/dev/compat/labels - 422 with id UNKNOWN in 17ms# GET /repos/dev/compat/issues/comments/3 - 404 with id UNKNOWN in 13ms# Subtest: GitHub REST compatibility: Octokit against releases, statuses, git data, issues, deployments and searchok 18 - GitHub REST compatibility: Octokit against releases, statuses, git data, issues, deployments and search --- duration_ms: 3473.659961 type: 'test' ...# Subtest: people and profiles: visibility, repository invitations, blank names and usernamesok 19 - people and profiles: visibility, repository invitations, blank names and usernames --- duration_ms: 947.300328 type: 'test' ...# Subtest: profile pictures: upload, resize, serve, cache headers and removalok 20 - profile pictures: upload, resize, serve, cache headers and removal --- duration_ms: 823.164179 type: 'test' ...# Subtest: import from GitHub: git data, issues and pull requests with their numbers, no side effectsok 21 - import from GitHub: git data, issues and pull requests with their numbers, no side effects --- duration_ms: 15126.274322 type: 'test' ...# Subtest: scheduled workflows: the schedule fires without a cron triggerok 22 - scheduled workflows: the schedule fires without a cron trigger --- duration_ms: 162.016744 type: 'test' ...1..22# tests 22# suites 0# pass 21# fail 1# cancelled 0# skipped 0# todo 0# duration_ms 156614.930878##[error]Process completed with exit code 1.
Post Run pnpm/action-setup@v40s
Pruning is unnecessary.Post Run actions/checkout@v40s
Removing persisted credentials