docs: 0.7 release notes

- compile release notes since 0.6.1 - move 'Next Release' from 'Changelog' to a new section
docs: refactor: shorter expansion of :commit:
2026-02-15 14:09:05 +01:00 · 2026-02-15 14:09:05 +01:00 · 2026-02-13 22:47:25 +01:00 · 2026-02-13 22:39:07 +01:00 · 2026-02-10 20:54:43 +01:00 · 2026-02-10 19:13:03 +01:00
490 changed files with 28722 additions and 12438 deletions
@@ -1,139 +1,386 @@
-version: 2.0
+version: 2.1
-workflows:
+orbs:
-  version: 2
+  # NB: this is not the Go version, but the Orb version
-  build:
+  # https://circleci.com/developer/orbs/orb/circleci/go#usage-go-modules-cache
-    jobs:
+  go: circleci/go@1.11.0
      - build-1.11
      - build-1.12
      - build-1.13
      - build-latest
      - test-build-in-docker
 jobs:
-  # build-latest serves as the template
+commands:
-  # we use YAML anchors & aliases to exchange the docker image (and hence Go version used for the build)
+  setup-home-local-bin:
  build-latest: &build-latest
    description: Builds zrepl
    parameters:
      image:
        description: "the docker image that the job should use"
        type: string
    docker:
      - image: circleci/golang:latest
    environment:
      # required by lazy.sh
      TERM: xterm
    working_directory: /go/src/github.com/zrepl/zrepl
    steps:
      - run:
-          name: Setup environment variables
+          shell: /bin/bash -euo pipefail
          command: |
-            # used by pip (for docs)
+            mkdir -p "$HOME/.local/bin"
-            echo 'export PATH="$HOME/.local/bin:$PATH"' >> $BASH_ENV
+            line='export PATH="$HOME/.local/bin:$PATH"'
-            # we use modules
+            if grep "$line" $BASH_ENV >/dev/null; then
-            echo 'export GO111MODULE=on' >> $BASH_ENV
+              echo "$line" >> $BASH_ENV
-
+            fi
      - restore_cache:
          keys:
            - source
            - protobuf
      - checkout
      - save_cache:
          key: source
          paths:
            - ".git"
      # install deps
      - run: wget https://github.com/protocolbuffers/protobuf/releases/download/v3.6.1/protoc-3.6.1-linux-x86_64.zip
      - run: echo "6003de742ea3fcf703cfec1cd4a3380fd143081a2eb0e559065563496af27807  protoc-3.6.1-linux-x86_64.zip" | sha256sum -c
      - run: sudo unzip -d /usr protoc-3.6.1-linux-x86_64.zip
      - save_cache:
          key: protobuf
          paths:
            - "/usr/include/google/protobuf"
      - run: sudo apt update && sudo apt install python3 python3-pip libgirepository1.0-dev gawk
      - run: ./lazy.sh devsetup
      - run: make zrepl-bin
      - run: make vet
      - run: make test
      - run: make lint
      - run: make release
      - store_artifacts:
          path: ./artifacts/release
          when: always
  # NOTE: UV version is defined in .uv-version file at repository root
  install-docdep:
    steps:
      - run:
-          shell: /bin/bash -eo pipefail
+          name: Read UV version from .uv-version
          when: always
          command: |
-            if [ -n "$CIRCLE_PR_NUMBER" ]; then # CIRCLE_PR_NUMBER is guaranteed to be only present in forked PRs (external)
+            UV_VERSION=$(cat .uv-version)
-              echo "Forked PR detected. Sry, can't trust you with credentials to external artifact store, use CircleCI's instead."
+            echo "export UV_VERSION=$UV_VERSION" >> $BASH_ENV
      # Python is managed by uv - it will automatically download the version
      # specified in docs/.python-version when needed
      - run:
          name: Install uv
          command: curl -LsSf https://astral.sh/uv/${UV_VERSION}/install.sh | sh
      - run:
          name: Add uv to PATH and set cache dir
          command: |
            echo 'export PATH="$HOME/.local/bin:$PATH"' >> $BASH_ENV
            echo 'export UV_CACHE_DIR="$HOME/.cache/uv"' >> $BASH_ENV
      - restore_cache:
          name: Restore uv cache
          keys:
            - uv-cache-v1-${UV_VERSION}-{{ checksum "docs/uv.lock" }}
            - uv-cache-v1-${UV_VERSION}-
  save-uv-cache:
    steps:
      - run:
          name: Prune uv cache for CI
          command: uv cache prune --ci
      - save_cache:
          name: Save uv cache
          key: uv-cache-v1-${UV_VERSION}-{{ checksum "docs/uv.lock" }}
          paths:
            - ~/.cache/uv
  install-zfs-from-source:
    parameters:
      zfs_release:
        type: string
    steps:
      - run:
          name: Record kernel version for cache key
          command: uname -r > /tmp/kernel-version
      - restore_cache:
          name: Restore ZFS native debs cache
          keys:
            - zfs-debs-v2-<<parameters.zfs_release>>-{{ checksum "/tmp/kernel-version" }}
      - run:
          # https://openzfs.github.io/openzfs-docs/Developer%20Resources/Building%20ZFS.html
          name: Build ZFS <<parameters.zfs_release>> native debs (if not cached)
          no_output_timeout: 20m
          command: |
            # CircleCI machine images have pyenv Python 3.13 shadowing the system
            # Python 3.12. The apt python3-* packages (setuptools, cffi, etc.) only
            # install for the system Python, and ZFS's dpkg-buildpackage needs them
            # for --enable-pyzfs. Use the system Python so apt packages are visible.
            export PYENV_VERSION=system
            if [ -d /tmp/zfs-debs ]; then
              echo "ZFS debs cache hit, skipping build"
              exit 0
            fi
-            set -u # from now on
+            sudo apt-get update
            sudo apt-get install -y \
              alien autoconf automake build-essential debhelper-compat dh-autoreconf \
              dh-dkms dh-python dkms fakeroot gawk git libaio-dev libattr1-dev \
              libblkid-dev libcurl4-openssl-dev libelf-dev libffi-dev libpam0g-dev \
              libssl-dev libtirpc-dev libtool libudev-dev linux-headers-$(uname -r) lsb-release \
              parallel po-debconf python3 python3-all-dev python3-cffi python3-dev \
              python3-packaging python3-setuptools python3-sphinx uuid-dev zlib1g-dev
            mkdir -p /tmp/zfs-build
            cd /tmp/zfs-build
            git clone --depth 1 --branch <<parameters.zfs_release>> https://github.com/openzfs/zfs.git zfs-src
            cd zfs-src
            sh autogen.sh
            ./configure
            make native-deb
            mkdir -p /tmp/zfs-debs
            find /tmp/zfs-build -name '*.deb' -exec mv -t /tmp/zfs-debs/ {} +
      - save_cache:
          name: Save ZFS native debs cache
          key: zfs-debs-v2-<<parameters.zfs_release>>-{{ checksum "/tmp/kernel-version" }}
          paths:
            - /tmp/zfs-debs
      - run:
          name: Install ZFS <<parameters.zfs_release>>
          command: |
            ls /tmp/zfs-debs/
            # Only install the debs we need. Exclude dracut (conflicts with
            # initramfs-tools), dkms (we have prebuilt modules), and packages
            # we don't need (pyzfs, test, doc).
            sudo apt-get install -y $(find /tmp/zfs-debs -name '*.deb' \
              ! -name '*dracut*' \
              ! -name '*dkms*' \
              ! -name '*initramfs*' \
              ! -name '*pyzfs*' \
              ! -name '*doc*' \
              ! -name '*test*' \
              -print)
            sudo modprobe zfs
      - run:
          name: Verify ZFS version
          command: |
            sudo zfs version
            sudo zpool version
-            # Download and install minio
+  docs-publish-sh:
-            curl -sSL https://dl.minio.io/client/mc/release/linux-amd64/mc -o ${GOPATH}/bin/mc
+    parameters:
-            chmod +x ${GOPATH}/bin/mc
+      push:
-            mc config host add --api s3v4 zrepl-minio https://minio.cschwarz.com ${MINIO_ACCESS_KEY} ${MINIO_SECRET_KEY}
+        type: boolean
            # Upload artifacts
            echo "$CIRCLE_BUILD_URL" > ./artifacts/release/cirlceci_build_url
            mc cp -r artifacts/release "zrepl-minio/zrepl-ci-artifacts/${CIRCLE_SHA1}/${CIRCLE_JOB}/"
            # Push Artifact Link to GitHub
            REPO="zrepl/zrepl"
            COMMIT="${CIRCLE_SHA1}"
            JOB_NAME="${CIRCLE_JOB}"
            curl "https://api.github.com/repos/$REPO/statuses/$COMMIT?access_token=$GITHUB_COMMIT_STATUS_TOKEN" \
              -H "Content-Type: application/json" \
              -X POST \
              -d '{"context":"zrepl/publish-ci-artifacts", "state": "success", "description":"CI Build Artifacts for '"$JOB_NAME"'", "target_url":"https://minio.cschwarz.com/minio/zrepl-ci-artifacts/'"$COMMIT"'/"}'
  build-1.11:
    <<: *build-latest
    docker:
    - image: circleci/golang:1.11
  build-1.12:
    <<: *build-latest
    docker:
    - image: circleci/golang:1.12
  build-1.13:
    <<: *build-latest
    docker:
    - image: circleci/golang:1.13
  # this job tries to mimic the build-in-docker instructions
  # given in docs/installation.rst
  #
  # However, CircleCI doesn't support volume mounts, so we have to copy
  # the source into the build-container by modifying the Dockerfile
  test-build-in-docker:
    description: Check that build-in-docker works
    docker:
      - image: circleci/golang:latest
    environment:
    working_directory: /go/src/github.com/zrepl/zrepl
    steps:
      - checkout
    - setup_remote_docker
      - run:
-        name: (hacky) circleci doesn't allow volume mounts, so copy src to container
+          command: |
-        command: echo "ADD . /src" >> build.Dockerfile
+            git config --global user.email "zreplbot@cschwarz.com"
            git config --global user.name "zrepl-github-io-ci"
      # Configure git to use the GitHub token for HTTPS authentication.
      # The token is stored in the 'zrepl-github-io-deploy' context.
      - when:
          condition: << parameters.push >>
          steps:
            - run:
-        name: (hacky) commit modified Dockerfile to avoid failing git clean check in Makefile
+                name: Configure git to use GitHub token for push
-        command: git -c user.name='circleci' -c user.email='circleci@localhost' commit -m 'CIRCLECI modified Dockerfile with zrepl src' --author 'autoauthor <circleci@localhost>' -- build.Dockerfile
+                # GITHUB_PAGES_TOKEN is from the 'zrepl-github-io-deploy' context.
-    - run:
+                # CircleCI's secret masking automatically redacts context variables in logs.
-        name: build the build image (build deps)
+                command: |
-        command: docker build -t zrepl_build -f build.Dockerfile .
+                  # Unset CircleCI's SSH URL rewriting that checkout step configured
-    - run:
+                  git config --global --unset-all url."ssh://git@github.com".insteadOf || true
-        name: try compiling
+                  # Set up credential helper with GitHub token
-        command: docker run -it zrepl_build make release
+                  git config --global credential.helper store
                  echo "https://x-access-token:${GITHUB_PAGES_TOKEN}@github.com" > ~/.git-credentials
                  chmod 600 ~/.git-credentials
      # caller must install-docdep
      - when:
          condition: << parameters.push >>
          steps:
            - run: bash -x docs/publish.sh -c -a -P
      - when:
          condition:
            not: << parameters.push >>
          steps:
            - run: bash -x docs/publish.sh -c -a
 parameters:
  do_ci:
    type: boolean
    default: true
  do_release:
    type: boolean
    default: false
 workflows:
  version: 2
  ci:
    when: << pipeline.parameters.do_ci >>
    jobs:
      - run-docs-publish-sh:
          name: quickcheck-docs
          push: false
      - quickcheck-go:
          name: quickcheck-go-amd64-linux-1.25.7
          goversion: &latest-go-release "1.25.7"
          goos: linux
          goarch: amd64
      - test-go:
          goversion: *latest-go-release
      - quickcheck-go:
          requires:
            - quickcheck-go-amd64-linux-1.25.7 #quickcheck-go-smoketest.name
          matrix:
            alias: quickcheck-go-matrix
            parameters:
              goversion: [*latest-go-release, "1.24.13"]
              goos: ["linux", "freebsd"]
              goarch: ["amd64", "arm64"]
            exclude:
              # don't re-do quickcheck-go-smoketest
              - goversion: *latest-go-release
                goos: linux
                goarch: amd64
      - platformtest:
          matrix:
            parameters:
              goversion: [*latest-go-release]
              goos: ["linux"]
              goarch: ["amd64"]
              zfs_release: ["zfs-2.2.9", "zfs-2.3.5", "zfs-2.4.0"]
          requires:
            - test-go
            - quickcheck-go-<< matrix.goarch >>-<< matrix.goos >>-<< matrix.goversion >>
  release:
    when: << pipeline.parameters.do_release >>
    jobs:
      - release-build
      - release-deb:
          requires:
            - release-build
      - release-rpm:
          requires:
            - release-build
      - release-upload:
          requires:
            - release-build
            - release-deb
            - release-rpm
  publish-zrepl.github.io:
    jobs:
      - run-docs-publish-sh:
          name: publish-zrepl.github.io
          push: true
          context:
            - zrepl-github-io-deploy
          filters:
            branches:
              only:
                - master
 jobs:
  run-docs-publish-sh:
    parameters:
      push:
        type: boolean
    docker:
      - image: cimg/base:current
    steps:
      - checkout
      - install-docdep
      - docs-publish-sh:
          push: << parameters.push >>
      - save-uv-cache
  quickcheck-go:
    parameters:
      goversion:
        type: string
      goos:
        type: string
      goarch:
        type: string
    docker:
      - image: &cimg_with_modern_go cimg/go:1.25
    environment:
      GOOS: <<parameters.goos>>
      GOARCH: <<parameters.goarch>>
      GOTOOLCHAIN: "go<<parameters.goversion>>"
    steps:
      - checkout
      - go/load-cache:
          key: quickcheck-<<parameters.goversion>>
      - run: make build/install
      - run: go mod download
      - run: cd build && go mod download
      - go/save-cache:
          key: quickcheck-<<parameters.goversion>>
      # ensure all code has been generated
      - run: make generate
      - run: |
          if output=$(git status --porcelain) && [ -z "$output" ]; then
            echo "Working directory clean"
          else
            echo "Uncommitted changes"
            echo ""
            echo "$output"
            exit 1
          fi
      # other checks
      - run: make zrepl-bin test-platform-bin
      - run: make vet
      - run: make lint
      - store_artifacts:
          path: artifacts
      - persist_to_workspace:
          root: .
          paths: [.]
  platformtest:
    parameters:
      goversion:
        type: string
      goos:
        type: string
      goarch:
        type: string
      zfs_release:
        type: string
    machine:
      # pinned (not :current) to keep ZFS build cache valid across runs
      image: ubuntu-2404:2025.09.1
    resource_class: medium
    environment:
      GOOS: <<parameters.goos>>
      GOARCH: <<parameters.goarch>>
    steps:
      - attach_workspace:
          at: .
      - install-zfs-from-source:
          zfs_release: <<parameters.zfs_release>>
      - run: sudo make test-platform GOOS="$GOOS" GOARCH="$GOARCH"
  test-go:
    parameters:
      goversion:
        type: string
    docker:
      - image: *cimg_with_modern_go
    environment:
      GOTOOLCHAIN: "go<<parameters.goversion>>"
    steps:
      - checkout
      - go/load-cache:
          key: make-test-go
      - run: make test-go
      - go/save-cache:
          key: make-test-go
  release-build:
    machine:
      image: &release-vm-image "ubuntu-2404:current"
    resource_class: large
    steps:
      - checkout
      - run: make release-docker
      - persist_to_workspace:
          root: .
          paths: [.]
  release-deb:
    machine:
      image: *release-vm-image
    steps:
      - attach_workspace:
          at: .
      - run: make debs-docker
      - persist_to_workspace:
          root: .
          paths:
            - "artifacts/*.deb"
  release-rpm:
    machine:
      image: *release-vm-image
    steps:
      - attach_workspace:
          at: .
      - run: make rpms-docker
      - persist_to_workspace:
          root: .
          paths:
            - "artifacts/*.rpm"
  release-upload:
    docker:
      - image: cimg/base:2024.09
    steps:
      - attach_workspace:
          at: .
      - run: make wrapup-and-checksum
      - store_artifacts:
          path: artifacts/release
@@ -0,0 +1,84 @@
 import argparse
 from pathlib import Path
 import re
 import requests
 import time
 import os
 import argparse
 from pathlib import Path
 circle_token = os.environ.get('CIRCLE_TOKEN')
 if not circle_token:
    raise ValueError('CIRCLE_TOKEN environment variable not set')
 parser = argparse.ArgumentParser(description='Download artifacts from CircleCI')
 parser.add_argument('build_num', type=str, help='Build number')
 parser.add_argument('dst', type=Path, help='Destination directory')
 parser.add_argument('--prefix', type=str, default='', help='Filter for prefix')
 parser.add_argument('--match', type=str, default='.*', help='Only include paths matching the given regex')
 args = parser.parse_args()
 res = requests.get(
    f"https://circleci.com/api/v1.1/project/github/zrepl/zrepl/{args.build_num}/artifacts",
    headers={
        "Circle-Token": circle_token,
    },
 )
 res.raise_for_status()
 # https://circleci.com/docs/api/v1/index.html#artifacts-of-a-job
 # [ {
 #   "path" : "raw-test-output/go-test-report.xml",
 #   "pretty_path" : "raw-test-output/go-test-report.xml",
 #   "node_index" : 0,
 #   "url" : "https://24-88881093-gh.circle-artifacts.com/0/raw-test-output/go-test-report.xml"
 # }, {
 #   "path" : "raw-test-output/go-test.out",
 #   "pretty_path" : "raw-test-output/go-test.out",
 #   "node_index" : 0,
 #   "url" : "https://24-88881093-gh.circle-artifacts.com/0/raw-test-output/go-test.out"
 # } ]
 res = res.json()
 for artifact in res:
    if not artifact["pretty_path"].startswith(args.prefix):
        continue
    if not re.match(args.match, artifact["pretty_path"]):
        continue
    stripped = artifact["pretty_path"][len(args.prefix):]
    print(f"Downloading {artifact['pretty_path']} to {args.dst / stripped}")
    artifact_rel = Path(stripped)
    artifact_dst = args.dst / artifact_rel
    artifact_dst.parent.mkdir(parents=True, exist_ok=True)
    res = requests.get(
        artifact["url"],
        headers={
            "Circle-Token": circle_token,
        },
        stream=True,
    )
    res.raise_for_status()
    total_size = int(res.headers.get("Content-Length", 0))
    block_size = 128 * 1024
    with open(artifact_dst, "wb") as f:
        progress = 0
        start_time = time.time()
        for chunk in res.iter_content(chunk_size=block_size):
            f.write(chunk)
            progress += len(chunk)
            percent = progress / total_size * 100
            elapsed_time = time.time() - start_time
            if elapsed_time >= 5:
                print(f"Downloaded {progress}/{total_size} bytes ({percent:.2f}%)", end="\r")
                start_time = time.time()
        print(f"Downloaded {progress}/{total_size} bytes ({percent:.2f}%)")
    print("Download complete!")
 print("All files downloaded")
@@ -1,3 +1,4 @@
 github: problame
 patreon: zrepl
 liberapay: zrepl
 custom: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=R5QSXJVYHGX96
@@ -0,0 +1,9 @@
 version: 2
 updates:
  # Docs use Python only for static site generation.
  - package-ecosystem: "pip"
    directory: /docs
    schedule:
      interval: "weekly"
    ignore:
      - dependency-name: "*"
@@ -1,5 +1,6 @@
 # Build
 artifacts/
 build/install.tmp
 # Golang
 vendor/
@@ -1,10 +1,42 @@
 version: "2"
 linters:
  enable:
-  - goimports
+    - revive
-
+  settings:
-issues:
+    revive:
-  exclude-rules:
+      rules:
-    - path: _test\.go
+        - name: time-equal
-      linters:
+  exclusions:
    generated: lax
    presets:
      - comments
      - common-false-positives
      - legacy
      - std-error-handling
    rules:
      - linters:
          - errcheck
-
+        path: _test\.go
      - linters:
          - staticcheck
        text: 'SA9003:'
      - linters:
          - staticcheck
        text: '(QF1001|QF1011|ST1012|QF1008|ST1005|ST1023|QF1003|ST1006|ST1001|QF1004):'
    paths:
      - third_party$
      - builtin$
      - examples$
 formatters:
  enable:
    - goimports
  settings:
    goimports:
      local-prefixes:
        - github.com/zrepl/zrepl
  exclusions:
    generated: lax
    paths:
      - third_party$
      - builtin$
      - examples$
@@ -1,70 +0,0 @@
 dist: xenial
 services:
 - docker
 env: # for allow_failures: https://docs.travis-ci.com/user/customizing-the-build/
 matrix:
  include:
  - language: go
    name: "Build in Docker (docs/installation.rst)"
    script:
    - sudo docker build -t zrepl_build -f build.Dockerfile .
    - |
      sudo docker run -it --rm \
        -v "${PWD}:/go/src/github.com/zrepl/zrepl" \
        --user "$(id -u):$(id -g)" \
        zrepl_build make vendordeps release
  - &zrepl_build_template
    language: go
    go_import_path: github.com/zrepl/zrepl
    before_install:
        - wget https://github.com/protocolbuffers/protobuf/releases/download/v3.6.1/protoc-3.6.1-linux-x86_64.zip
        - echo "6003de742ea3fcf703cfec1cd4a3380fd143081a2eb0e559065563496af27807  protoc-3.6.1-linux-x86_64.zip" | sha256sum -c
        - sudo unzip -d /usr protoc-3.6.1-linux-x86_64.zip
        - ./lazy.sh godep
        - make vendordeps
    script:
      - make
      - make vet
      - make test
      - make lint
      - make artifacts/zrepl-freebsd-amd64
      - make artifacts/zrepl-linux-amd64
      - make artifacts/zrepl-darwin-amd64
    go:
    - "1.11"
  - <<: *zrepl_build_template
    go:
    - "1.12"
  - <<: *zrepl_build_template
    go:
    - "master"
  - &zrepl_docs_template 
    language: python
    python:
    - "3.4"
    install:
    - sudo apt-get install libgirepository1.0-dev
    - pip install -r docs/requirements.txt
    script:
    - make docs
  - <<: *zrepl_docs_template
    python:
    - "3.5"
  - <<: *zrepl_docs_template
    python:
    - "3.6"
  - <<: *zrepl_docs_template
    python:
    - "3.7"
  allow_failures:
  - <<: *zrepl_build_template
    go:
    - "master"
@@ -0,0 +1 @@
 0.9.30
@@ -1,5 +1,5 @@
 .PHONY: generate build test vet cover release docs docs-clean clean format lint platformtest
-.PHONY: release bins-all release-noarch
+.PHONY: release release-noarch
 .DEFAULT_GOAL := zrepl-bin
 ARTIFACTDIR := artifacts
@@ -14,63 +14,182 @@ ifndef _ZREPL_VERSION
    endif
 endif
 ZREPL_PACKAGE_RELEASE := 1
 GO := go
 GOOS ?= $(shell bash -c 'source <($(GO) env) && echo "$$GOOS"')
 GOARCH ?= $(shell bash -c 'source <($(GO) env) && echo "$$GOARCH"')
 GOARM ?= $(shell bash -c 'source <($(GO) env) && echo "$$GOARM"')
 GOHOSTOS ?= $(shell bash -c 'source <($(GO) env) && echo "$$GOHOSTOS"')
 GOHOSTARCH ?= $(shell bash -c 'source <($(GO) env) && echo "$$GOHOSTARCH"')
-GO_ENV_VARS := GO111MODULE=on
+GO_ENV_VARS := CGO_ENABLED=0
-GO_LDFLAGS := "-X github.com/zrepl/zrepl/version.zreplVersion=$(_ZREPL_VERSION)"
+GO_LDFLAGS := "-X github.com/zrepl/zrepl/internal/version.zreplVersion=$(_ZREPL_VERSION)"
 GO_MOD_READONLY := -mod=readonly
-GO_BUILDFLAGS := $(GO_MOD_READONLY)
+GO_EXTRA_BUILDFLAGS :=
 GO_BUILDFLAGS := $(GO_MOD_READONLY) $(GO_EXTRA_BUILDFLAGS)
 GO_BUILD := $(GO_ENV_VARS) $(GO) build $(GO_BUILDFLAGS) -ldflags $(GO_LDFLAGS)
-GOLANGCI_LINT := golangci-lint
+GOCOVMERGE := gocovmerge
 RELEASE_GOVERSION ?= go1.25.7
 STRIPPED_GOVERSION := $(subst go,,$(RELEASE_GOVERSION))
 RELEASE_DOCKER_BASEIMAGE ?= golang:$(STRIPPED_GOVERSION)
 RELEASE_DOCKER_CACHEMOUNT :=
 ifneq ($(GOARM),)
 	ZREPL_TARGET_TUPLE := $(GOOS)-$(GOARCH)v$(GOARM)
 else
 	ZREPL_TARGET_TUPLE := $(GOOS)-$(GOARCH)
 endif
 .PHONY: printvars
 printvars:
 	@echo GOOS=$(GOOS)
 	@echo GOARCH=$(GOARCH)
 	@echo GOARM=$(GOARM)
 ifneq ($(RELEASE_DOCKER_CACHEMOUNT),)
 	_RELEASE_DOCKER_CACHEMOUNT := -v $(RELEASE_DOCKER_CACHEMOUNT)/mod:/go/pkg/mod -v $(RELEASE_DOCKER_CACHEMOUNT)/xdg-cache:/.cache/go-build
 .PHONY: release-docker-mkcachemount
 release-docker-mkcachemount:
 	mkdir -p $(RELEASE_DOCKER_CACHEMOUNT)
 	mkdir -p $(RELEASE_DOCKER_CACHEMOUNT)/mod
 	mkdir -p $(RELEASE_DOCKER_CACHEMOUNT)/xdg-cache
 else
 	_RELEASE_DOCKER_CACHEMOUNT :=
 .PHONY: release-docker-mkcachemount
 release-docker-mkcachemount:
 	# nothing to do
 endif
 ##################### PRODUCING A RELEASE #############
-.PHONY: release wrapup-and-checksum check-git-clean sign clean
+.PHONY: release wrapup-and-checksum check-git-clean sign clean ensure-release-toolchain
-release: clean
+ensure-release-toolchain:
-	# no cross-platform support for target test
+	# ensure the toolchain is actually the one we expect
-	$(MAKE) test
+	test $(RELEASE_GOVERSION) = "$$($(GO_ENV_VARS) $(GO) env GOVERSION)"
-	$(MAKE) bins-all
+
 release: ensure-release-toolchain
 	$(MAKE) _run_make_foreach_target_tuple RUN_MAKE_FOREACH_TARGET_TUPLE_ARG="vet"
 	$(MAKE) _run_make_foreach_target_tuple RUN_MAKE_FOREACH_TARGET_TUPLE_ARG="lint"
 	$(MAKE) _run_make_foreach_target_tuple RUN_MAKE_FOREACH_TARGET_TUPLE_ARG="zrepl-bin"
 	$(MAKE) _run_make_foreach_target_tuple RUN_MAKE_FOREACH_TARGET_TUPLE_ARG="test-platform-bin"
 	$(MAKE) noarch
 	$(MAKE) wrapup-and-checksum
 	$(MAKE) check-git-clean
 ifeq (SIGN, 1)
 	$(make) sign
 endif
 	@echo "ZREPL RELEASE ARTIFACTS AVAILABLE IN artifacts/release"
-# expects `release` target to have run before
+release-docker: $(ARTIFACTDIR) release-docker-mkcachemount
 	sed 's/FROM.*!SUBSTITUTED_BY_MAKEFILE/FROM $(RELEASE_DOCKER_BASEIMAGE)/' build/build.Dockerfile > $(ARTIFACTDIR)/build.Dockerfile
 	docker build -t zrepl_release --pull \
 		--build-arg BUILD_UID=$$(id -u) \
 		--build-arg BUILD_GID=$$(id -g) \
 		-f $(ARTIFACTDIR)/build.Dockerfile .
 	docker run --rm -i$$(test -t 0 && echo t) \
 		$(_RELEASE_DOCKER_CACHEMOUNT) \
 		-v $(CURDIR):/src \
 		zrepl_release \
 		make release \
 			GOOS=$(GOOS) GOARCH=$(GOARCH) GOARM=$(GOARM) \
 			ZREPL_VERSION=$(ZREPL_VERSION) ZREPL_PACKAGE_RELEASE=$(ZREPL_PACKAGE_RELEASE) \
 			RELEASE_GOVERSION=$(RELEASE_GOVERSION)
 debs-docker:
 	$(MAKE) _debs_or_rpms_docker _DEB_OR_RPM=deb
 rpms-docker:
 	$(MAKE) _debs_or_rpms_docker _DEB_OR_RPM=rpm
 _debs_or_rpms_docker: # artifacts/_zrepl.zsh_completion artifacts/bash_completion docs zrepl-bin
 	$(MAKE) $(_DEB_OR_RPM)-docker GOOS=linux GOARCH=amd64
 	$(MAKE) $(_DEB_OR_RPM)-docker GOOS=linux GOARCH=arm64
 	$(MAKE) $(_DEB_OR_RPM)-docker GOOS=linux GOARCH=arm GOARM=7
 	$(MAKE) $(_DEB_OR_RPM)-docker GOOS=linux GOARCH=386
 rpm: $(ARTIFACTDIR) # artifacts/_zrepl.zsh_completion artifacts/bash_completion docs zrepl-bin
 	$(eval _ZREPL_RPM_VERSION := $(subst -,.,$(_ZREPL_VERSION)))
 	$(eval _ZREPL_RPM_TOPDIR_ABS := $(CURDIR)/$(ARTIFACTDIR)/rpmbuild)
 	rm -rf "$(_ZREPL_RPM_TOPDIR_ABS)"
 	mkdir "$(_ZREPL_RPM_TOPDIR_ABS)"
 	for d in BUILD BUILDROOT RPMS SOURCES SPECS SRPMS; do \
 		mkdir -p "$(_ZREPL_RPM_TOPDIR_ABS)/$$d"; \
 	done
 	sed \
 		-e "s/^Version:.*/Version:          $(_ZREPL_RPM_VERSION)/g" \
 		-e "s/^Release:.*/Release:          $(ZREPL_PACKAGE_RELEASE)/g" \
 	    packaging/rpm/zrepl.spec \
 		>  $(_ZREPL_RPM_TOPDIR_ABS)/SPECS/zrepl.spec
 	# see /usr/lib/rpm/platform
 ifeq ($(GOARCH),amd64)
 	$(eval _ZREPL_RPMBUILD_TARGET := x86_64)
 else ifeq ($(GOARCH), 386)
 	$(eval _ZREPL_RPMBUILD_TARGET := i386)
 else ifeq ($(GOARCH), arm64)
 	$(eval _ZREPL_RPMBUILD_TARGET := aarch64)
 else ifeq ($(GOARCH), arm)
 	$(eval _ZREPL_RPMBUILD_TARGET := armv7hl)
 else
 	$(eval _ZREPL_RPMBUILD_TARGET := $(GOARCH))
 endif
 	rpmbuild \
 		--build-in-place \
 		--define "_sourcedir $(CURDIR)" \
 		--define "_topdir $(_ZREPL_RPM_TOPDIR_ABS)" \
 		--define "_zrepl_binary_filename zrepl-$(ZREPL_TARGET_TUPLE)" \
 		--target $(_ZREPL_RPMBUILD_TARGET) \
 		-bb "$(_ZREPL_RPM_TOPDIR_ABS)"/SPECS/zrepl.spec
 	cp "$(_ZREPL_RPM_TOPDIR_ABS)"/RPMS/$(_ZREPL_RPMBUILD_TARGET)/zrepl-$(_ZREPL_RPM_VERSION)*.rpm $(ARTIFACTDIR)/
 rpm-docker:
 	docker build -t zrepl_rpm_pkg --pull -f packaging/rpm/Dockerfile .
 	docker run --rm -i -v $(CURDIR):/build/src -u $$(id -u):$$(id -g) \
 		zrepl_rpm_pkg \
 		make rpm \
 			GOOS=$(GOOS) GOARCH=$(GOARCH) GOARM=$(GOARM) \
 			ZREPL_VERSION=$(ZREPL_VERSION) ZREPL_PACKAGE_RELEASE=$(ZREPL_PACKAGE_RELEASE)
 deb: $(ARTIFACTDIR) # artifacts/_zrepl.zsh_completion artifacts/bash_completion docs zrepl-bin
 	cp packaging/deb/debian/changelog.template packaging/deb/debian/changelog
 	sed -i 's/DATE_DASH_R_OUTPUT/$(shell date -R)/' packaging/deb/debian/changelog
 	VERSION="$(subst -,.,$(_ZREPL_VERSION))-$(ZREPL_PACKAGE_RELEASE)"; \
 		export VERSION="$${VERSION#v}"; \
 		sed -i 's/VERSION/'"$$VERSION"'/' packaging/deb/debian/changelog
 ifeq ($(GOARCH), arm)
 	$(eval  DEB_HOST_ARCH := armhf)
 else ifeq ($(GOARCH), 386)
 	$(eval DEB_HOST_ARCH := i386)
 else
 	$(eval DEB_HOST_ARCH := $(GOARCH))
 endif
 	export ZREPL_DPKG_ZREPL_BINARY_FILENAME=zrepl-$(ZREPL_TARGET_TUPLE); \
 		dpkg-buildpackage -b --no-sign --host-arch $(DEB_HOST_ARCH)
 	cp ../*.deb artifacts/
 deb-docker:
 	docker build -t zrepl_debian_pkg --pull -f packaging/deb/Dockerfile .
 	# Use a small open file limit to make fakeroot work. If we don't
 	# specify it, docker daemon will use its file limit. I don't know
 	# what changed (Docker, its systemd service, its Go version). But I
 	# observed fakeroot iterating close(i) up to i > 1000000, which costs
 	# a good amount of CPU time and makes the build slow.
 	docker run --rm -i -v $(CURDIR):/build/src -u $$(id -u):$$(id -g) \
 		--ulimit nofile=1024:1024 \
 		zrepl_debian_pkg \
 		make deb \
 			GOOS=$(GOOS) GOARCH=$(GOARCH) GOARM=$(GOARM) \
 			ZREPL_VERSION=$(ZREPL_VERSION) ZREPL_PACKAGE_RELEASE=$(ZREPL_PACKAGE_RELEASE)
 # expects `release`, `deb` & `rpm` targets to have run before
 NOARCH_TARBALL := $(ARTIFACTDIR)/zrepl-noarch.tar
 wrapup-and-checksum:
 	rm -f $(NOARCH_TARBALL)
 	tar --mtime='1970-01-01' --sort=name \
 		--transform 's/$(ARTIFACTDIR)/zrepl-$(_ZREPL_VERSION)-noarch/' \
 		--transform 's#dist#zrepl-$(_ZREPL_VERSION)-noarch/dist#' \
-		--transform 's#config/samples#zrepl-$(_ZREPL_VERSION)-noarch/config#' \
+		--transform 's#internal/config/samples#zrepl-$(_ZREPL_VERSION)-noarch/config#' \
 		-acf $(NOARCH_TARBALL) \
 		$(ARTIFACTDIR)/docs/html \
 		$(ARTIFACTDIR)/bash_completion \
 		$(ARTIFACTDIR)/_zrepl.zsh_completion \
 		$(ARTIFACTDIR)/go_env.txt \
 		dist \
-		config/samples
+		internal/config/samples
 	rm -rf "$(ARTIFACTDIR)/release"
 	mkdir -p "$(ARTIFACTDIR)/release"
-	cp -l $(ARTIFACTDIR)/zrepl-* \
+	cp -l $(ARTIFACTDIR)/zrepl* \
 		$(ARTIFACTDIR)/platformtest-* \
 		"$(ARTIFACTDIR)/release"
 	cd "$(ARTIFACTDIR)/release" && sha512sum $$(ls | sort) > sha512sum.txt
@@ -88,59 +207,87 @@ check-git-clean:
 		fi; \
 	fi;
 tag-release:
 	test -n "$(ZREPL_TAG_VERSION)" || exit 1
 	git tag -u '328A6627FA98061D!' -m "$(ZREPL_TAG_VERSION)" "$(ZREPL_TAG_VERSION)"
 sign:
-	gpg -u "89BC 5D89 C845 568B F578  B306 CDBD 8EC8 E27C A5FC" \
+	gpg -u '328A6627FA98061D!' \
 		--armor \
 		--detach-sign $(ARTIFACTDIR)/release/sha512sum.txt
 clean: docs-clean
 	rm -rf "$(ARTIFACTDIR)"
-##################### BINARIES #####################
+download-circleci-release:
-.PHONY: bins-all lint test vet zrepl-bin platformtest-bin
+	rm -rf "$(ARTIFACTDIR)"
 	mkdir -p "$(ARTIFACTDIR)/release"
 	python3 .circleci/download_artifacts.py --prefix 'artifacts/release/' "$(BUILD_NUM)" "$(ARTIFACTDIR)/release"
-BINS_ALL_TARGETS := zrepl-bin platformtest-bin vet lint
+##################### MULTI-ARCH HELPERS #####################
-GO_SUPPORTS_ILLUMOS := $(shell $(GO) version | gawk -F '.' '/^go version /{split($$0, comps, " "); split(comps[3], v, "."); if (v[1] == "go1" && v[2] >= 13) { print "illumos"; } else { print "noillumos"; }}')
+
-bins-all:
+_run_make_foreach_target_tuple:
-	$(MAKE) $(BINS_ALL_TARGETS) GOOS=freebsd   GOARCH=amd64
+	if [ "$(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG)" = "" ]; then \
-	$(MAKE) $(BINS_ALL_TARGETS) GOOS=freebsd   GOARCH=386
+		echo "RUN_MAKE_FOREACH_TARGET_TUPLE_ARG must be set"; \
-	$(MAKE) $(BINS_ALL_TARGETS) GOOS=linux     GOARCH=amd64
+		exit 1; \
-	$(MAKE) $(BINS_ALL_TARGETS) GOOS=linux     GOARCH=arm64
+	fi
-	$(MAKE) $(BINS_ALL_TARGETS) GOOS=linux     GOARCH=arm     GOARM=7
+	$(MAKE) $(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG) GOOS=freebsd   GOARCH=amd64
-	$(MAKE) $(BINS_ALL_TARGETS) GOOS=linux     GOARCH=386
+	$(MAKE) $(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG) GOOS=freebsd   GOARCH=386
-	$(MAKE) $(BINS_ALL_TARGETS) GOOS=darwin    GOARCH=amd64
+	$(MAKE) $(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG) GOOS=freebsd   GOARCH=arm	  GOARM=7
-	$(MAKE) $(BINS_ALL_TARGETS) GOOS=solaris   GOARCH=amd64
+	$(MAKE) $(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG) GOOS=freebsd   GOARCH=arm64
-ifeq ($(GO_SUPPORTS_ILLUMOS), illumos)
+	$(MAKE) $(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG) GOOS=linux     GOARCH=amd64
-	$(MAKE) $(BINS_ALL_TARGETS) GOOS=illumos   GOARCH=amd64
+	$(MAKE) $(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG) GOOS=linux     GOARCH=arm64
-else ifeq ($(GO_SUPPORTS_ILLUMOS), noillumos)
+	$(MAKE) $(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG) GOOS=linux     GOARCH=arm     GOARM=7
-	@echo "SKIPPING ILLUMOS BUILD BECAUSE GO VERSION DOESN'T SUPPORT IT"
+	$(MAKE) $(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG) GOOS=linux     GOARCH=386
-else
+	$(MAKE) $(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG) GOOS=darwin    GOARCH=amd64
-	@echo "CANNOT DETERMINE WHETHER GO VERSION SUPPORTS GOOS=illumos"; exit 1
+	$(MAKE) $(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG) GOOS=solaris   GOARCH=amd64
-endif
+	$(MAKE) $(RUN_MAKE_FOREACH_TARGET_TUPLE_ARG) GOOS=illumos   GOARCH=amd64
 ##################### REGULAR TARGETS #####################
 .PHONY: lint test-go test-platform cover-merge cover-html vet zrepl-bin test-platform-bin
 lint: build/install
 	$(GO_ENV_VARS) build/install/golangci_lint/golangci-lint run ./...
 lint:
 	$(GO_ENV_VARS) $(GOLANGCI_LINT) run ./...
 test:
 	$(GO_ENV_VARS) $(GO) test $(GO_BUILDFLAGS) ./...
 vet:
 	$(GO_ENV_VARS) $(GO) vet $(GO_BUILDFLAGS) ./...
 test-go: $(ARTIFACTDIR)
 	rm -f "$(ARTIFACTDIR)/gotest.cover"
 ifeq ($(COVER),1)
 	$(GO_ENV_VARS) $(GO) test $(GO_BUILDFLAGS) \
 		-coverpkg github.com/zrepl/zrepl/... \
 		-covermode atomic \
 		-coverprofile "$(ARTIFACTDIR)/gotest.cover" \
 		./...
 else
 	$(GO_ENV_VARS) $(GO) test $(GO_BUILDFLAGS) \
 		./...
 endif
 zrepl-bin:
 	$(GO_BUILD) -o "$(ARTIFACTDIR)/zrepl-$(ZREPL_TARGET_TUPLE)"
-platformtest-bin:
+COVER_PLATFORM_BIN_PATH := $(ARTIFACTDIR)/platformtest-cover-$(ZREPL_TARGET_TUPLE)
-	$(GO_BUILD) -o "$(ARTIFACTDIR)/platformtest-$(ZREPL_TARGET_TUPLE)" ./platformtest/harness
+cover-platform-bin:
 	$(GO_ENV_VARS) $(GO) test $(GO_BUILDFLAGS) \
 		-c -o "$(COVER_PLATFORM_BIN_PATH)" \
 		-covermode=atomic -cover -coverpkg github.com/zrepl/zrepl/... \
 		./platformtest/harness
 cover-platform:
 	# do not track dependency on cover-platform-bin to allow build of binary outside of test VM
 	export _TEST_PLATFORM_CMD="$(COVER_PLATFORM_BIN_PATH) \
 		-test.coverprofile \"$(ARTIFACTDIR)/platformtest.cover\" \
 		-test.v \
 		__DEVEL--i-heard-you-like-tests"; \
 		$(MAKE) _test-or-cover-platform-impl
-##################### DEV TARGETS #####################
+TEST_PLATFORM_BIN_PATH := $(ARTIFACTDIR)/platformtest-$(ZREPL_TARGET_TUPLE)
-# not part of the build, must do that manually
+test-platform-bin:
-.PHONY: generate format platformtest
+	$(GO_BUILD) -o "$(TEST_PLATFORM_BIN_PATH)" ./internal/platformtest/harness
-
+test-platform:
-generate:
+	export _TEST_PLATFORM_CMD="\"$(TEST_PLATFORM_BIN_PATH)\""; \
-	protoc -I=replication/logic/pdu --go_out=plugins=grpc:replication/logic/pdu replication/logic/pdu/pdu.proto
+		$(MAKE) _test-or-cover-platform-impl
 	$(GO_ENV_VARS) $(GO) generate $(GO_BUILDFLAGS) -x ./...
 format:
 	goimports -srcdir . -local 'github.com/zrepl/zrepl' -w $(shell find . -type f -name '*.go' -not -path "./vendor/*" -not -name '*.pb.go' -not -name '*_enumer.go')
 ZREPL_PLATFORMTEST_POOLNAME := zreplplatformtest
 ZREPL_PLATFORMTEST_IMAGEPATH := /tmp/zreplplatformtest.pool.img
@@ -148,18 +295,70 @@ ZREPL_PLATFORMTEST_MOUNTPOINT := /tmp/zreplplatformtest.pool
 ZREPL_PLATFORMTEST_ZFS_LOG := /tmp/zreplplatformtest.zfs.log
 # ZREPL_PLATFORMTEST_STOP_AND_KEEP := -failure.stop-and-keep-pool
 ZREPL_PLATFORMTEST_ARGS :=
-platformtest: # do not track dependency on platformtest-bin to allow build of platformtest outside of test VM
+_test-or-cover-platform-impl: $(ARTIFACTDIR)
 ifndef _TEST_PLATFORM_CMD
 	$(error _TEST_PLATFORM_CMD is undefined, caller 'cover-platform' or 'test-platform' should have defined it)
 endif
 	rm -f "$(ZREPL_PLATFORMTEST_ZFS_LOG)"
-	platformtest/logmockzfs/logzfsenv "$(ZREPL_PLATFORMTEST_ZFS_LOG)" `which zfs` \
+	rm -f "$(ARTIFACTDIR)/platformtest.cover"
-	"$(ARTIFACTDIR)/platformtest-$(ZREPL_TARGET_TUPLE)" \
+	internal/platformtest/logmockzfs/logzfsenv "$(ZREPL_PLATFORMTEST_ZFS_LOG)" `which zfs` \
 		$(_TEST_PLATFORM_CMD) \
 		-poolname "$(ZREPL_PLATFORMTEST_POOLNAME)" \
 		-imagepath "$(ZREPL_PLATFORMTEST_IMAGEPATH)" \
 		-mountpoint "$(ZREPL_PLATFORMTEST_MOUNTPOINT)" \
 		$(ZREPL_PLATFORMTEST_STOP_AND_KEEP) \
 		$(ZREPL_PLATFORMTEST_ARGS)
 cover-merge: $(ARTIFACTDIR)
 	$(GOCOVMERGE) $(ARTIFACTDIR)/platformtest.cover $(ARTIFACTDIR)/gotest.cover > $(ARTIFACTDIR)/merged.cover
 cover-html: cover-merge
 	$(GO) tool cover -html "$(ARTIFACTDIR)/merged.cover" -o "$(ARTIFACTDIR)/merged.cover.html"
 cover-full:
 	test "$$(id -u)" = "0" || echo "MUST RUN AS ROOT" 1>&2
 	$(MAKE) test-go COVER=1
 	$(MAKE) cover-platform-bin
 	$(MAKE) cover-platform
 	$(MAKE) cover-html
 ##################### DEV TARGETS #####################
 # not part of the build, must do that manually
 .PHONY: generate format
 build/install:
 	rm -rf build/install.tmp
 	mkdir build/install.tmp
 	-echo "installing protoc"
 	mkdir build/install.tmp/protoc
 	bash -x build/get_protoc.bash build/install.tmp/protoc
 	-echo "installing golangci-lint"
 	mkdir -p build/install.tmp/golangci_lint
 	GOHOSTARCH=$(GOHOSTARCH) \
 		build/get_golangci_lint.bash build/install.tmp/golangci_lint
 	-echo "installing go tools"
 	build/go_install_tools.bash build/install.tmp/gobin
 	mv build/install.tmp build/install
 generate: build/install
 	# TODO: would be nice to run with a pure path here
 	PATH="$(CURDIR)/build/install/gobin:$(CURDIR)/build/install/protoc/bin:$$PATH" && \
 		build/install/protoc/bin/protoc -I=internal/replication/logic/pdu --go_out=internal/replication/logic/pdu --go-grpc_out=internal/replication/logic/pdu internal/replication/logic/pdu/pdu.proto && \
 		build/install/protoc/bin/protoc -I=internal/rpc/grpcclientidentity/example --go_out=internal/rpc/grpcclientidentity/example/pdu --go-grpc_out=internal/rpc/grpcclientidentity/example/pdu internal/rpc/grpcclientidentity/example/grpcauth.proto && \
 		$(GO) generate $(GO_BUILDFLAGS) -x ./... && \
 		true
 GOIMPORTS := goimports -srcdir . -local 'github.com/zrepl/zrepl'
 format: build/install
 	@ build/install/gobin/goimports -w -local 'github.com/zrepl/zrepl' $$(find . -type f -name '*.go' -not -path "./vendor/*" -not -name '*.pb.go' -not -name '*_enumer.go')
 ##################### NOARCH #####################
-.PHONY: noarch $(ARTIFACTDIR)/bash_completion $(ARTIFACTDIR)/go_env.txt docs docs-clean
+.PHONY: noarch $(ARTIFACTDIR)/bash_completion $(ARTIFACTDIR)/_zrepl.zsh_completion $(ARTIFACTDIR)/go_env.txt docs docs-clean
 $(ARTIFACTDIR):
@@ -167,22 +366,26 @@ $(ARTIFACTDIR):
 $(ARTIFACTDIR)/docs: $(ARTIFACTDIR)
 	mkdir -p "$@"
-noarch: $(ARTIFACTDIR)/bash_completion $(ARTIFACTDIR)/go_env.txt docs
+noarch: $(ARTIFACTDIR)/bash_completion $(ARTIFACTDIR)/_zrepl.zsh_completion $(ARTIFACTDIR)/go_env.txt docs
 	# pass
 $(ARTIFACTDIR)/bash_completion:
 	$(MAKE) zrepl-bin GOOS=$(GOHOSTOS) GOARCH=$(GOHOSTARCH)
-	artifacts/zrepl-$(GOHOSTOS)-$(GOHOSTARCH) bashcomp "$@"
+	artifacts/zrepl-$(GOHOSTOS)-$(GOHOSTARCH) gencompletion bash "$@"
 $(ARTIFACTDIR)/_zrepl.zsh_completion:
 	$(MAKE) zrepl-bin GOOS=$(GOHOSTOS) GOARCH=$(GOHOSTARCH)
 	artifacts/zrepl-$(GOHOSTOS)-$(GOHOSTARCH) gencompletion zsh "$@"
 $(ARTIFACTDIR)/go_env.txt:
 	$(GO_ENV_VARS) $(GO) env > $@
 	$(GO) version >> $@
 docs: $(ARTIFACTDIR)/docs
-	make -C docs \
+	# https://www.sphinx-doc.org/en/master/man/sphinx-build.html
-		html \
+	cd docs && uv sync --frozen
-		BUILDDIR=../artifacts/docs \
+	cd docs && uv run sphinx-build -W --keep-going -n . ../artifacts/docs/html
 docs-clean:
-	make -C docs \
+	rm -rf artifacts/docs
-		clean \
+	rm -rf docs/.venv
 		BUILDDIR=../artifacts/docs
@@ -1,9 +1,12 @@
 [![GitHub license](https://img.shields.io/github/license/zrepl/zrepl.svg)](https://github.com/zrepl/zrepl/blob/master/LICENSE)
-[![Language: Go](https://img.shields.io/badge/language-Go-6ad7e5.svg)](https://golang.org/)
+[![Language: Go](https://img.shields.io/badge/lang-Go-6ad7e5.svg)](https://golang.org/)
 [![User Docs](https://img.shields.io/badge/docs-web-blue.svg)](https://zrepl.github.io)
 [![Support me on Patreon](https://img.shields.io/badge/dynamic/json?color=yellow&label=Patreon&query=data.attributes.patron_count&url=https%3A%2F%2Fwww.patreon.com%2Fapi%2Fcampaigns%2F3095079)](https://patreon.com/zrepl)
 [![Donate via GitHub Sponsors](https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub&style=flat&color=yellow)](https://github.com/sponsors/problame)
 [![Donate via Liberapay](https://img.shields.io/liberapay/patrons/zrepl.svg?logo=liberapay)](https://liberapay.com/zrepl/donate)
 [![Donate via PayPal](https://img.shields.io/badge/donate-paypal-yellow.svg)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=R5QSXJVYHGX96)
 [![Donate via Liberapay](https://img.shields.io/liberapay/receives/zrepl.svg?logo=liberapay)](https://liberapay.com/zrepl/donate)
 [![Twitter](https://img.shields.io/twitter/url/https/github.com/zrepl/zrepl.svg?style=social)](https://twitter.com/intent/tweet?text=Wow:&url=https%3A%2F%2Fgithub.com%2Fzrepl%2Fzrepl)
 [![Chat](https://img.shields.io/badge/chat-matrix-blue.svg)](https://matrix.to/#/#zrepl:matrix.org)
 # zrepl
 zrepl is a one-stop ZFS backup & replication solution.
@@ -19,118 +22,182 @@ zrepl is a one-stop ZFS backup & replication solution.
 ## Feature Requests
-1. Does you feature request require default values / some kind of configuration?
+1. Does your feature request require default values / some kind of configuration?
   If so, think of an expressive configuration example.
 2. Think of at least one use case that generalizes from your concrete application.
 3. Open an issue on GitHub with example conf & use case attached.
 4. **Optional**: [Contact Christian Schwarz](https://cschwarz.com) for contract work.
 The above does not apply if you already implemented everything.
 Check out the *Coding Workflow* section below for details.
-## Package Maintainer Information
+## Development
 * Follow the steps in `docs/installation.rst -> Compiling from Source` and read the Makefile / shell scripts used in this process.
 * Make sure your distro is compatible with the paths in `docs/installation.rst`.
 * Ship a default config that adheres to your distro's `hier` and logging system.
 * Ship a service manager file and _please_ try to upstream it to this repository.
  * `dist/systemd` contains a Systemd unit template.
 * Ship other material provided in `./dist`, e.g. in `/usr/share/zrepl/`.
 * Use `make release ZREPL_VERSION='mydistro-1.2.3_1'`
    * Your distro's name and any versioning supplemental to zrepl's (e.g. package revision) should be in this string
 * Use `make platformtest` **on a test system** to validate that zrepl's abstractions on top of ZFS work with the system ZFS.
 * Make sure you are informed about new zrepl versions, e.g. by subscribing to GitHub's release RSS feed.
 ## Developer Documentation
 zrepl is written in [Go](https://golang.org) and uses [Go modules](https://github.com/golang/go/wiki/Modules) to manage dependencies.
 The documentation is written in [ReStructured Text](http://docutils.sourceforge.net/rst.html) using the [Sphinx](https://www.sphinx-doc.org) framework.
-To get started, run `./lazy.sh devsetup` to easily install build dependencies and read `docs/installation.rst -> Compiling from Source`.
+### Building
-### Overall Architecture
+#### Go Code
-The application architecture is documented as part of the user docs in the *Implementation* section (`docs/content/impl`).
+Dependencies:
 Make sure to develop an understanding how zrepl is typically used by studying the user docs first.
-### Project Structure
+* Go
 * GNU Make
 * Git
 * wget (`make generate`)
 * unzip (`make generate`)
 Some Go code is **generated**, and generated code is committed to the source tree.
 Therefore, building does not require having code generation tools set up.
 When making changes that require code to be (re-)generated, run `make generate`.
 I downloads and installs pinned versions of the code generation tools into `./build/install`.
 There is a CI check that ensures Git state is clean, i.e., code generation has been done by a PR and is deterministic.
 #### Docs
 Install [uv](https://docs.astral.sh/uv/getting-started/installation/), then run `make docs`.
 uv automatically manages Python and dependencies.
 ### Testing
 The **test suite** is split into pure **Go tests** (`make test-go`) and **platform tests** that interact with ZFS and thus generally **require root privileges** (`sudo make test-platform`).
 Platform tests run on their own pool with the name `zreplplatformtest`, which is created using the file vdev in `/tmp`.
 For a full **code coverage** profile, run `make test-go COVER=1 && sudo make test-platform && make cover-merge`.
 An HTML report can be generated using `make cover-html`.
 ### Circle CI
 We use CircleCI for automated build & test pre- and post-merge.
 There are two workflows:
 * `ci` runs for every commit / branch / tag pushed to GitHub.
  It is supposed to run very fast (<5min and provides quick feedback to developers).
  It runs formatting checks, lints and tests on the most important OSes / architectures.
 * `release` runs
  * on manual triggers through the CircleCI API (in order to produce a release)
  * periodically on `master`
 Artifacts are stored in CircleCI.
 ### Releasing
 All zrepl releases are git-tagged and then published as a GitHub Release.
 There is a git tag for each zrepl release, usually `vMAJOR.MINOR.0`.
 We don't move git tags once the release has been published.
 The procedure to issue a release is as follows:
 * Prepare the release (as a PR to `master`):
  * Finalize `docs/changelog.rst` for the release.
  * Merge the PR. Docs are auto-published to zrepl.github.io on merge.
 * Tag the release:
  * Git tag the release on the `master` branch (e.g., `vMAJOR.MINOR.0`).
  * Push the tag.
 * Build and publish:
  * Run the `release` pipeline (trigger via CircleCI UI).
  * Download artifacts: `make download-circleci-release BUILD_NUM=<circleci-build-number>`
  * Create GitHub release and upload artifacts:
    ```bash
    gh release create vX.Y.Z --title "vX.Y.Z" --notes "See changelog" --draft
    gh release upload vX.Y.Z artifacts/release/*
    ```
-├── artifacts               # build artifcats generate by make
+  * Review the draft release, edit the changelog, then publish.
-├── cli                     # wrapper around CLI package cobra
+  * Add the .rpm and .deb files to the official zrepl repos.
-├── client                  # all subcommands that are not `daemon`
+    * Code for management of these repos: https://github.com/zrepl/package-repo-ops (private repo at this time)
-├── config                  # config data types (=> package yaml-config)
+* Update docs version list:
-│   └── samples
+  * Update `docs/_templates/versions.html` with the new release.
-├── daemon                  # the implementation of `zrepl daemon` subcommand
+  * Verify the link to `zrepl-noarch.tar` in the GitHub release works.
-│   ├── filters
+  * Merge to `master` (docs auto-publish).
-│   ├── job                 # job implementations
+
-│   ├── logging             # logging outlets + formatters
+#### Patch releases, Go toolchain updates, APT/RPM Package rebuilds
-│   ├── nethelpers
+
-│   ├── prometheus
+`vMAJOR.MINOR.0` is typically a tagged commit on `master`, because development velocity isn't high
-│   ├── pruner              # pruner implementation
+and thus release branches for stabilization aren't necessary.
-│   ├── snapper             # snapshotter implementation
+
-├── docs                    # sphinx-based documentation
+Occasionally though there is a need for patch changes to a release, e.g.
-├── dist                    # supplemental material for users & package maintainers
+- security issue in a dependency
-│   ├── **/*.rst            # documentation in reStructuredText
+- Go toolchain update (e.g. security issue in standard library)
-│   ├── sphinxconf
+
-│   │   └── conf.py         # sphinx config (see commit 445a280 why its not in docs/)
+The procedure for this is the following
-│   ├── requirements.txt    # pip3 requirements to build documentation
+- create a branch off the release tag we need to patch, named `releases/MAJOR.MINOR.X`
-│   ├── publish.sh          # shell script for automated rendering & deploy to zrepl.github.io repo
+- that branch will never be merged into `master`, it'll be a dead-end for this specific patch
-│   └── public_git          # checkout of zrepl.github.io managed by above shell script
+- make changes in that branch
-├── endpoint                # implementation of replication endpoints (=> package replication)
+- make the final commit that bumps version numbers
-├── logger                  # our own logger package
+- create the git tag
-├── pruning                 # pruning rules (the logic, not the actual execution)
+- follow general procedure for publishing the release (previous sectino
-│   └── retentiongrid
+
-├── replication
+For Go toolchain updates and package rebuilds with no source code changes, leverage the APT/RPM package revision field.
-│   ├── driver              # the driver of the replication logic (status reporting, error handling)
+Control via the `ZREPL_PACKAGE_RELEASE` Makefile variable, see `origin/releases/0.6.1-2` for an example.
-│   ├── logic               # planning & executing replication steps via rpc
+
-|   |   └── pdu             # the generated gRPC & protobuf code used in replication (and endpoints)
+
-│   └── report              # the JSON-serializable report datastructures exposed to the client
+### Updating Dependencies
-├── rpc                     # the hybrid gRPC + ./dataconn RPC client: connects to a remote replication.Endpoint
+
-│   ├── dataconn            # Bulk data-transfer RPC protocol
+- Update the `go` directive and `toolchain` directive in `go.mod`
-│   ├── grpcclientidentity  # adaptor to inject package transport's 'client identity' concept into gRPC contexts
+  - `go` is the minimum supported version
-│   ├── netadaptor          # adaptor to convert a package transport's Connecter and Listener into net.* primitives
+  - `toolchain` is the preferred toolchain version if `GOTOOLCHAIN` is not specified
-│   ├── transportmux        # TCP connecter and listener used to split control & data traffic
+
-│   └── versionhandshake    # replication protocol version handshake perfomed on newly established connections
+Run `go mod tidy` to ensure consistency.
-├── tlsconf                 # abstraction for Go TLS server + client config
+
-├── transport               # transports implementation
+Update Go module dependencies:
-│   ├── fromconfig
+
-│   ├── local
+```bash
-│   ├── ssh
+# Update all other dependencies
-│   ├── tcp
+go get -u -t ./...
-│   └── tls
+go mod tidy
-├── util
+
-├── vendor                  # managed by dep
+# Above might fail if there are version selection conflicts.
-├── version                 # abstraction for versions (filled during build by Makefile)
+# Figure out what's going on by updating packages from error messages first.
-└── zfs                     # zfs(8) wrappers
+# Example:
 go get -u google.golang.org/genproto google.golang.org/grpc google.golang.org/protobuf
 ```
-### Coding Workflow
+Update codegen & lint tools
 - `protoc` =>  `build/get_protoc.bash`
  - GH releases publish sha256 sums
 - `golangci-lint` => `build/get_golangci_lint.bash`
 - bump versions in `build/tools.go`
  - we use the tools.go trick:
  - `go get -tags tools -u example.com/tool ; go mod tidy`
  - review whether we're ready to switch to `go tool`: https://github.com/zrepl/zrepl/pull/909
-* Open an issue when starting to hack on a new feature
+Now run `make generate`.
 * Commits should reference the issue they are related to
 * Docs improvements not documenting new features do not require an issue.
-### Breaking Changes
+Run `make lint` and `make vet`.
-Backward-incompatible changes must be documented in the git commit message and are listed in `docs/changelog.rst`.
+Update the CI configuration `.circleci/config.yml`:
 - Update Go version references (we reference the minimum and max supported version)
 - Set `Makefile` `RELEASE_GOVERSION` to the new Go version
 - Update the pinned ZFS release tags in the `platformtest` matrix (`zfs_release` parameter) to the latest patch releases of each OpenZFS branch (currently 2.2, 2.3, 2.4)
 - Update the pinned Ubuntu machine image for `platformtest` (e.g. `ubuntu-2404:2025.09.1`) — this is pinned rather than `current` so the ZFS build cache stays valid across runs
-* Config-breaking changes must contain a line `BREAK CONFIG` in the commit message
+Update docs build tooling:
-* Other breaking changes must contain a line `BREAK` in the commit message
+- Update `uv` version in `.circleci/config.yml` (search for `astral.sh/uv/` and cache keys containing the version)
 - Check if there's now a CircleCI orb for uv that we could use
 - Update Python version in `docs/.python-version`
-### Glossary & Naming Inconsistencies
+Update docs dependencies (Sphinx, sphinx-rtd-theme):
 - Check current versions in `docs/pyproject.toml`
 - Review upstream changelogs for breaking changes
 - Update version constraints in `pyproject.toml` and the `uv` lockfile (see [uv docs on dependencies](https://docs.astral.sh/uv/concepts/projects/dependencies/)):
 - Test locally with `make docs`
-In ZFS, *dataset* refers to the objects *filesystem*, *ZVOL* and *snapshot*. <br />
+Kick a full CI pipeline run (`do_ci=true` and `do_release=true`).
 However, we need a word for *filesystem* & *ZVOL* but not a snapshot, bookmark, etc.
-Toward the user, the following terminology is used:
+Merge PR with merge commit.
-* **filesystem**: a ZFS filesystem or a ZVOL
+## Notes to Distro Package Maintainers
 * **filesystem version**: a ZFS snapshot or a bookmark
 Sadly, the zrepl implementation is inconsistent in its use of these words:
 variables and types are often named *dataset* when they in fact refer to a *filesystem*.
 There will not be a big refactoring (an attempt was made, but it's destroying too much history without much gain).
 However, new contributions & patches should fix naming without further notice in the commit message.
 * The `Makefile` in this project is not suitable for builds in distros.
 * Run the platform tests (Docs -> Usage -> Platform Tests) **on a test system** to validate that zrepl's abstractions on top of ZFS work with the system ZFS.
 * Ship a default config that adheres to your distro's `hier` and logging system.
 * Ship a service manager file and _please_ try to upstream it to this repository.
  * `dist/systemd` contains a Systemd unit template.
 * Ship other material provided in `./dist`, e.g. in `/usr/share/zrepl/`.
 * Have a look at the `Makefile`'s `ZREPL_VERSION` variable and how it passed to Go's `ldFlags`.
  This is how `zrepl version` knows what version number to show.
  Your build system should set the `ldFlags` flags appropriately and add a prefix or suffix that indicates that the given zrepl binary is a distro build, not an official one.
 * Make sure you are informed about new zrepl versions, e.g. by subscribing to GitHub's release RSS feed.
@@ -1,30 +0,0 @@
 FROM golang:latest
 RUN apt-get update && apt-get install -y \
    python3-pip \
    unzip \
    gawk
 ADD build.installprotoc.bash ./
 RUN bash build.installprotoc.bash
 ADD lazy.sh /tmp/lazy.sh
 ADD docs/requirements.txt /tmp/requirements.txt
 ENV ZREPL_LAZY_DOCS_REQPATH=/tmp/requirements.txt
 RUN /tmp/lazy.sh docdep
 # prepare volume mount of git checkout to /zrepl
 RUN mkdir -p /src/github.com/zrepl/zrepl
 RUN mkdir -p /.cache && chmod -R 0777 /.cache
 # $GOPATH is /go
 # Go 1.12 doesn't use modules within GOPATH, but 1.13 and later do
 # => store source outside of GOPATH
 WORKDIR /src
 # Install build tools (e.g. protobuf generator, stringer) into $GOPATH/bin
 ADD build/ /tmp/build
 RUN /tmp/lazy.sh godep
 RUN chmod -R 0777 /go
@@ -1,25 +0,0 @@
 #!/usr/bin/env bash
 set -euo pipefail
 set -x
 MACH=$(uname -m)
 MACH="${MACH/aarch64/aarch_64}"
 VERSION=3.6.1
 FILENAME=protoc-"$VERSION"-linux-"$MACH".zip
 if [ -e "$FILENAME" ]; then
    echo "$FILENAME" already exists 1>&2
    exit 1
 fi
 wget https://github.com/protocolbuffers/protobuf/releases/download/v"$VERSION"/"$FILENAME"
 stat "$FILENAME"
 sha256sum -c --ignore-missing <<EOF
 6003de742ea3fcf703cfec1cd4a3380fd143081a2eb0e559065563496af27807  protoc-3.6.1-linux-x86_64.zip
 af8e5aaaf39ddec62ec8dd2be1b8d9602c6da66564883a16393ade5f71170922  protoc-3.6.1-linux-aarch_64.zip
 EOF
 unzip -d /usr "$FILENAME"
@@ -0,0 +1 @@
 install/
@@ -0,0 +1,30 @@
 FROM !SUBSTITUTED_BY_MAKEFILE
 ARG BUILD_UID=1000
 ARG BUILD_GID=1000
 RUN apt-get update && apt-get install -y \
    python3 \
    unzip \
    gawk \
    curl
 # Create build user with the host's UID/GID before installing uv
 RUN groupadd -g ${BUILD_GID} zrepl_build && \
    useradd -u ${BUILD_UID} -g ${BUILD_GID} -m zrepl_build
 # Go toolchain uses xdg-cache
 RUN mkdir -p /.cache && chmod -R 0777 /.cache
 # Install uv as the build user - version from .uv-version file
 ADD .uv-version /tmp/.uv-version
 USER zrepl_build
 RUN UV_VERSION=$(cat /tmp/.uv-version) && \
    curl -LsSf https://astral.sh/uv/${UV_VERSION}/install.sh | sh
 # Go devtools are managed by Makefile
 WORKDIR /src
 ENV PATH="/home/zrepl_build/.local/bin:$PATH" \
    GOCACHE="/.cache/go-build"
@@ -0,0 +1,33 @@
 #!/usr/bin/env bash
 set -euo pipefail
 set -x
 # golangci-lint recommends against using `go get` and friends to install it
 cd "$1"
 VERSION=2.8.0
 FILENAME=golangci-lint-"$VERSION"-linux-"$GOHOSTARCH".tar.gz
 if [ -e "$FILENAME" ]; then
    echo "$FILENAME" already exists 1>&2
    exit 1
 fi
 wget --continue https://github.com/golangci/golangci-lint/releases/download/v"$VERSION"/"$FILENAME"
 stat "$FILENAME"
 # Select the correct checksum for the downloaded architecture
 case "$GOHOSTARCH" in
    arm64) EXPECTED_SHA256="2a58388db8af5ab9330791cea0ebdd4100723cd05ad7185d92febaaee272ec9a" ;;
    amd64) EXPECTED_SHA256="7048bc6b25c9515ed092c83f9fa8709ca97937ead52d9ff317a143299ee97a50" ;;
    *)     echo "Unknown architecture: $GOHOSTARCH" >&2; exit 1 ;;
 esac
 # Verify checksum explicitly - fails if hash doesn't match
 echo "$EXPECTED_SHA256  $FILENAME" | sha256sum -c -
 tar -x  --strip-components=1 -f "$FILENAME"
 stat ./golangci-lint
@@ -0,0 +1,32 @@
 #!/usr/bin/env bash
 set -euo pipefail
 set -x
 cd "$1"
 MACH=$(uname -m)
 MACH="${MACH/aarch64/aarch_64}"
 VERSION=33.5
 FILENAME=protoc-"$VERSION"-linux-"$MACH".zip
 if [ -e "$FILENAME" ]; then
    echo "$FILENAME" already exists 1>&2
    exit 1
 fi
 wget --continue https://github.com/protocolbuffers/protobuf/releases/download/v"$VERSION"/"$FILENAME"
 stat "$FILENAME"
 # Select the correct checksum for the downloaded architecture
 case "$MACH" in
    aarch_64) EXPECTED_SHA256="2b0fcf9b2c32cbadccc0eb7a88b841fffecd4a06fc80acdba2b5be45e815c38a" ;;
    x86_64)   EXPECTED_SHA256="24e58fb231d50306ee28491f33a170301e99540f7e29ca461e0e80fd1239f8d1" ;;
    *)        echo "Unknown architecture: $MACH" >&2; exit 1 ;;
 esac
 # Verify checksum explicitly - fails if hash doesn't match
 echo "$EXPECTED_SHA256  $FILENAME" | sha256sum -c -
 unzip -d . "$FILENAME"
@@ -1,51 +1,24 @@
 module github.com/zrepl/zrepl/build
-go 1.12
+go 1.24.13
 toolchain go1.25.7
 require (
-	github.com/OpenPeeDeeP/depguard v0.0.0-20181229194401-1f388ab2d810 // indirect
+	github.com/alvaroloes/enumer v1.1.2
-	github.com/alvaroloes/enumer v1.1.1
+	github.com/wadey/gocovmerge v0.0.0-20160331181800-b5bfa59ec0ad
-	github.com/fatih/color v1.7.0 // indirect
+	golang.org/x/tools v0.41.0
-	github.com/go-critic/go-critic v0.3.4 // indirect
+	google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1
-	github.com/gogo/protobuf v1.2.1 // indirect
+	google.golang.org/protobuf v1.36.11
 	github.com/golang/mock v1.2.0 // indirect
 	github.com/golang/protobuf v1.2.0
 	github.com/golangci/errcheck v0.0.0-20181223084120-ef45e06d44b6 // indirect
 	github.com/golangci/go-tools v0.0.0-20190124090046-35a9f45a5db0 // indirect
 	github.com/golangci/gocyclo v0.0.0-20180528144436-0a533e8fa43d // indirect
 	github.com/golangci/gofmt v0.0.0-20181222123516-0b8337e80d98 // indirect
 	github.com/golangci/golangci-lint v1.17.1
 	github.com/golangci/gosec v0.0.0-20180901114220-8afd9cbb6cfb // indirect
 	github.com/golangci/lint-1 v0.0.0-20181222135242-d2cdd8c08219 // indirect
 	github.com/golangci/misspell v0.3.4 // indirect
 	github.com/golangci/revgrep v0.0.0-20180812185044-276a5c0a1039 // indirect
 	github.com/google/go-cmp v0.3.0 // indirect
 	github.com/konsorten/go-windows-terminal-sequences v1.0.2 // indirect
 	github.com/mitchellh/go-homedir v1.1.0 // indirect
 	github.com/pkg/errors v0.8.1 // indirect
 	github.com/sirupsen/logrus v1.4.2 // indirect
 	github.com/spf13/afero v1.2.2 // indirect
 	github.com/spf13/jwalterweatherman v1.1.0 // indirect
 	github.com/spf13/viper v1.3.2 // indirect
 	github.com/stretchr/testify v1.4.0 // indirect
 	golang.org/x/net v0.0.0-20190613194153-d28f0bde5980 // indirect
 	golang.org/x/sys v0.0.0-20191010194322-b09406accb47 // indirect
 	golang.org/x/tools v0.0.0-20190524210228-3d17549cdc6b
 	mvdan.cc/unparam v0.0.0-20190310220240-1b9ccfa71afe // indirect
 	sourcegraph.com/sqs/pbtypes v1.0.0 // indirect
 )
-// invalid dates in transitive dependencies (first validated in Go 1.13, didn't fail in earlier Go versions)
+require (
-replace (
+	github.com/pascaldekloe/name v1.0.1 // indirect
-	github.com/go-critic/go-critic v0.0.0-20181204210945-1df300866540 => github.com/go-critic/go-critic v0.3.5-0.20190526074819-1df300866540
+	golang.org/x/mod v0.32.0 // indirect
-	github.com/go-critic/go-critic v0.0.0-20181204210945-ee9bf5809ead => github.com/go-critic/go-critic v0.3.5-0.20190210220443-ee9bf5809ead
+	golang.org/x/sync v0.19.0 // indirect
-	github.com/golangci/errcheck v0.0.0-20181003203344-ef45e06d44b6 => github.com/golangci/errcheck v0.0.0-20181223084120-ef45e06d44b6
+	golang.org/x/sys v0.41.0 // indirect
-	github.com/golangci/go-tools v0.0.0-20180109140146-35a9f45a5db0 => github.com/golangci/go-tools v0.0.0-20190124090046-35a9f45a5db0
+	golang.org/x/telemetry v0.0.0-20260205145544-86a5c4bf3c8d // indirect
-	github.com/golangci/go-tools v0.0.0-20180109140146-af6baa5dc196 => github.com/golangci/go-tools v0.0.0-20190318060251-af6baa5dc196
+	golang.org/x/text v0.31.0 // indirect
-	github.com/golangci/gofmt v0.0.0-20181105071733-0b8337e80d98 => github.com/golangci/gofmt v0.0.0-20181222123516-0b8337e80d98
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20250818200422-3122310a409c // indirect
-	github.com/golangci/gosec v0.0.0-20180901114220-66fb7fc33547 => github.com/golangci/gosec v0.0.0-20190211064107-66fb7fc33547
+	google.golang.org/grpc v1.75.0 // indirect
 	github.com/golangci/ineffassign v0.0.0-20180808204949-42439a7714cc => github.com/golangci/ineffassign v0.0.0-20190609212857-42439a7714cc
 	github.com/golangci/lint-1 v0.0.0-20180610141402-ee948d087217 => github.com/golangci/lint-1 v0.0.0-20190420132249-ee948d087217
 	golang.org/x/tools v0.0.0-20190125232054-379209517ffe => golang.org/x/tools v0.0.0-20190205201329-379209517ffe
 	mvdan.cc/unparam v0.0.0-20190124213536-fbb59629db34 => mvdan.cc/unparam v0.0.0-20190209190245-fbb59629db34
 )
@@ -1,280 +1,37 @@
-github.com/BurntSushi/toml v0.3.1 h1:WXkYYl6Yr3qBf1K79EBnL4mak0OimBfB0XUf9Vl28OQ=
+github.com/alvaroloes/enumer v1.1.2 h1:5khqHB33TZy1GWCO/lZwcroBFh7u+0j40T83VUbfAMY=
-github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
+github.com/alvaroloes/enumer v1.1.2/go.mod h1:FxrjvuXoDAx9isTJrv4c+T410zFi0DtXIT0m65DJ+Wo=
-github.com/OpenPeeDeeP/depguard v0.0.0-20180806142446-a69c782687b2/go.mod h1:7/4sitnI9YlQgTLLk734QlzXT8DuHVnAyztLplQjk+o=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
-github.com/OpenPeeDeeP/depguard v0.0.0-20181229194401-1f388ab2d810 h1:pFks+oaqVWDFq0KsLQZFB2pQGB5Us0HfMSBENtieXOs=
+github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/OpenPeeDeeP/depguard v0.0.0-20181229194401-1f388ab2d810/go.mod h1:7/4sitnI9YlQgTLLk734QlzXT8DuHVnAyztLplQjk+o=
 github.com/StackExchange/wmi v0.0.0-20180116203802-5d049714c4a6/go.mod h1:3eOhrUMpNV+6aFIbp5/iudMxNCF27Vw2OZgy4xEx0Fg=
 github.com/alvaroloes/enumer v1.1.1 h1:v+1scNqEhSFAPb9tLwblQegeTXJhnw8hf9O0amTbOvQ=
 github.com/alvaroloes/enumer v1.1.1/go.mod h1:FxrjvuXoDAx9isTJrv4c+T410zFi0DtXIT0m65DJ+Wo=
 github.com/armon/consul-api v0.0.0-20180202201655-eb2c6b5be1b6/go.mod h1:grANhF5doyWs3UAsr3K4I6qtAmlQcZDesFNEHPZAzj8=
 github.com/coreos/etcd v3.3.10+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
 github.com/coreos/go-etcd v2.0.0+incompatible/go.mod h1:Jez6KQU2B/sWsbdaef3ED8NzMklzPG4d5KIOhIy30Tk=
 github.com/coreos/go-semver v0.2.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/fatih/color v1.6.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=
 github.com/fatih/color v1.7.0 h1:DkWD4oS2D8LGGgTQ6IvwJJXSL5Vp2ffcQg58nFV38Ys=
 github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=
 github.com/fsnotify/fsnotify v1.4.7 h1:IXs+QLmnXW2CcXuY+8Mzv/fWEsPGWxqefPtCP5CnV9I=
 github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
 github.com/go-critic/go-critic v0.3.4 h1:FYaiaLjX0Nqei80KPhm4CyFQUBbmJwSrHxQ73taaGBc=
 github.com/go-critic/go-critic v0.3.4/go.mod h1:AHR42Lk/E/aOznsrYdMYeIQS5RH10HZHSqP+rD6AJrc=
 github.com/go-critic/go-critic v0.3.5-0.20190526074819-1df300866540/go.mod h1:+sE8vrLDS2M0pZkBk0wy6+nLdKexVDrl/jBqQOTDThA=
 github.com/go-lintpack/lintpack v0.5.1/go.mod h1:NwZuYi2nUHho8XEIZ6SIxihrnPoqBTDqfpXvXAN0sXM=
 github.com/go-lintpack/lintpack v0.5.2 h1:DI5mA3+eKdWeJ40nU4d6Wc26qmdG8RCi/btYq0TuRN0=
 github.com/go-lintpack/lintpack v0.5.2/go.mod h1:NwZuYi2nUHho8XEIZ6SIxihrnPoqBTDqfpXvXAN0sXM=
 github.com/go-ole/go-ole v1.2.1/go.mod h1:7FAglXiTm7HKlQRDeOQ6ZNUHidzCWXuZWq/1dTyBNF8=
 github.com/go-toolsmith/astcast v0.0.0-20181028201508-b7a89ed70af1/go.mod h1:TEo3Ghaj7PsZawQHxT/oBvo4HK/sl1RcuUHDKTTju+o=
 github.com/go-toolsmith/astcast v1.0.0 h1:JojxlmI6STnFVG9yOImLeGREv8W2ocNUM+iOhR6jE7g=
 github.com/go-toolsmith/astcast v1.0.0/go.mod h1:mt2OdQTeAQcY4DQgPSArJjHCcOwlX+Wl/kwN+LbLGQ4=
 github.com/go-toolsmith/astcopy v0.0.0-20180903214859-79b422d080c4/go.mod h1:c9CPdq2AzM8oPomdlPniEfPAC6g1s7NqZzODt8y6ib8=
 github.com/go-toolsmith/astcopy v1.0.0 h1:OMgl1b1MEpjFQ1m5ztEO06rz5CUd3oBv9RF7+DyvdG8=
 github.com/go-toolsmith/astcopy v1.0.0/go.mod h1:vrgyG+5Bxrnz4MZWPF+pI4R8h3qKRjjyvV/DSez4WVQ=
 github.com/go-toolsmith/astequal v0.0.0-20180903214952-dcb477bfacd6/go.mod h1:H+xSiq0+LtiDC11+h1G32h7Of5O3CYFJ99GVbS5lDKY=
 github.com/go-toolsmith/astequal v1.0.0 h1:4zxD8j3JRFNyLN46lodQuqz3xdKSrur7U/sr0SDS/gQ=
 github.com/go-toolsmith/astequal v1.0.0/go.mod h1:H+xSiq0+LtiDC11+h1G32h7Of5O3CYFJ99GVbS5lDKY=
 github.com/go-toolsmith/astfmt v0.0.0-20180903215011-8f8ee99c3086/go.mod h1:mP93XdblcopXwlyN4X4uodxXQhldPGZbcEJIimQHrkg=
 github.com/go-toolsmith/astfmt v1.0.0 h1:A0vDDXt+vsvLEdbMFJAUBI/uTbRw1ffOPnxsILnFL6k=
 github.com/go-toolsmith/astfmt v1.0.0/go.mod h1:cnWmsOAuq4jJY6Ct5YWlVLmcmLMn1JUPuQIHCY7CJDw=
 github.com/go-toolsmith/astinfo v0.0.0-20180906194353-9809ff7efb21/go.mod h1:dDStQCHtmZpYOmjRP/8gHHnCCch3Zz3oEgCdZVdtweU=
 github.com/go-toolsmith/astp v0.0.0-20180903215135-0af7e3c24f30/go.mod h1:SV2ur98SGypH1UjcPpCatrV5hPazG6+IfNHbkDXBRrk=
 github.com/go-toolsmith/astp v1.0.0 h1:alXE75TXgcmupDsMK1fRAy0YUzLzqPVvBKoyWV+KPXg=
 github.com/go-toolsmith/astp v1.0.0/go.mod h1:RSyrtpVlfTFGDYRbrjyWP1pYu//tSFcvdYrA8meBmLI=
 github.com/go-toolsmith/pkgload v0.0.0-20181119091011-e9e65178eee8 h1:vVouagbdmqTVlCIAxpyYsNNTbkKZ3V66VpKOLU/s6W4=
 github.com/go-toolsmith/pkgload v0.0.0-20181119091011-e9e65178eee8/go.mod h1:WoMrjiy4zvdS+Bg6z9jZH82QXwkcgCBX6nOfnmdaHks=
 github.com/go-toolsmith/pkgload v1.0.0 h1:4DFWWMXVfbcN5So1sBNW9+yeiMqLFGl1wFLTL5R0Tgg=
 github.com/go-toolsmith/pkgload v1.0.0/go.mod h1:5eFArkbO80v7Z0kdngIxsRXRMTaX4Ilcwuh3clNrQJc=
 github.com/go-toolsmith/strparse v0.0.0-20180903215201-830b6daa1241/go.mod h1:YI2nUKP9YGZnL/L1/DLFBfixrcjslWct4wyljWhSRy8=
 github.com/go-toolsmith/strparse v1.0.0 h1:Vcw78DnpCAKlM20kSbAyO4mPfJn/lyYA4BJUDxe2Jb4=
 github.com/go-toolsmith/strparse v1.0.0/go.mod h1:YI2nUKP9YGZnL/L1/DLFBfixrcjslWct4wyljWhSRy8=
 github.com/go-toolsmith/typep v0.0.0-20181030061450-d63dc7650676/go.mod h1:JSQCQMUPdRlMZFswiq3TGpNp1GMktqkR2Ns5AIQkATU=
 github.com/go-toolsmith/typep v1.0.0 h1:zKymWyA1TRYvqYrYDrfEMZULyrhcnGY3x7LDKU2XQaA=
 github.com/go-toolsmith/typep v1.0.0/go.mod h1:JSQCQMUPdRlMZFswiq3TGpNp1GMktqkR2Ns5AIQkATU=
 github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y=
 github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8=
 github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/gogo/protobuf v1.2.1 h1:/s5zKNz0uPFCZ5hddgPdo2TK2TVrUNMn0OOX8/aZMTE=
 github.com/gogo/protobuf v1.2.1/go.mod h1:hp+jE20tsWTFYpLwKvXlhS1hjn+gTNwPg2I6zVXpSg4=
 github.com/golang/mock v1.0.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
 github.com/golang/mock v1.2.0 h1:28o5sBqPkBsMGnC6b4MvE2TzSr5/AT4c/1fLqVGIwlk=
 github.com/golang/mock v1.2.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
 github.com/golang/protobuf v1.2.0 h1:P3YflyNX/ehuJFLhxviNdFxQPkGK5cDcApsge1SqnvM=
 github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golangci/check v0.0.0-20180506172741-cfe4005ccda2 h1:23T5iq8rbUYlhpt5DB4XJkc6BU31uODLD1o1gKvZmD0=
 github.com/golangci/check v0.0.0-20180506172741-cfe4005ccda2/go.mod h1:k9Qvh+8juN+UKMCS/3jFtGICgW8O96FVaZsaxdzDkR4=
 github.com/golangci/dupl v0.0.0-20180902072040-3e9179ac440a h1:w8hkcTqaFpzKqonE9uMCefW1WDie15eSP/4MssdenaM=
 github.com/golangci/dupl v0.0.0-20180902072040-3e9179ac440a/go.mod h1:ryS0uhF+x9jgbj/N71xsEqODy9BN81/GonCZiOzirOk=
 github.com/golangci/errcheck v0.0.0-20181223084120-ef45e06d44b6 h1:YYWNAGTKWhKpcLLt7aSj/odlKrSrelQwlovBpDuf19w=
 github.com/golangci/errcheck v0.0.0-20181223084120-ef45e06d44b6/go.mod h1:DbHgvLiFKX1Sh2T1w8Q/h4NAI8MHIpzCdnBUDTXU3I0=
 github.com/golangci/go-misc v0.0.0-20180628070357-927a3d87b613 h1:9kfjN3AdxcbsZBf8NjltjWihK2QfBBBZuv91cMFfDHw=
 github.com/golangci/go-misc v0.0.0-20180628070357-927a3d87b613/go.mod h1:SyvUF2NxV+sN8upjjeVYr5W7tyxaT1JVtvhKhOn2ii8=
 github.com/golangci/go-tools v0.0.0-20190124090046-35a9f45a5db0 h1:MRhC9XbUjE6XDOInSJ8pwHuPagqsyO89QDU9IdVhe3o=
 github.com/golangci/go-tools v0.0.0-20190124090046-35a9f45a5db0/go.mod h1:unzUULGw35sjyOYjUt0jMTXqHlZPpPc6e+xfO4cd6mM=
 github.com/golangci/go-tools v0.0.0-20190318060251-af6baa5dc196/go.mod h1:unzUULGw35sjyOYjUt0jMTXqHlZPpPc6e+xfO4cd6mM=
 github.com/golangci/goconst v0.0.0-20180610141641-041c5f2b40f3 h1:pe9JHs3cHHDQgOFXJJdYkK6fLz2PWyYtP4hthoCMvs8=
 github.com/golangci/goconst v0.0.0-20180610141641-041c5f2b40f3/go.mod h1:JXrF4TWy4tXYn62/9x8Wm/K/dm06p8tCKwFRDPZG/1o=
 github.com/golangci/gocyclo v0.0.0-20180528134321-2becd97e67ee/go.mod h1:ozx7R9SIwqmqf5pRP90DhR2Oay2UIjGuKheCBCNwAYU=
 github.com/golangci/gocyclo v0.0.0-20180528144436-0a533e8fa43d h1:pXTK/gkVNs7Zyy7WKgLXmpQ5bHTrq5GDsp8R9Qs67g0=
 github.com/golangci/gocyclo v0.0.0-20180528144436-0a533e8fa43d/go.mod h1:ozx7R9SIwqmqf5pRP90DhR2Oay2UIjGuKheCBCNwAYU=
 github.com/golangci/gofmt v0.0.0-20181222123516-0b8337e80d98 h1:0OkFarm1Zy2CjCiDKfK9XHgmc2wbDlRMD2hD8anAJHU=
 github.com/golangci/gofmt v0.0.0-20181222123516-0b8337e80d98/go.mod h1:9qCChq59u/eW8im404Q2WWTrnBUQKjpNYKMbU4M7EFU=
 github.com/golangci/golangci-lint v1.17.1 h1:lc8Hf9GPCjIr0hg3S/xhvFT1+Hydass8F1xchr8jkME=
 github.com/golangci/golangci-lint v1.17.1/go.mod h1:+5sJSl2h3aly+fpmL2meSP8CaSKua2E4Twi9LPy7b1g=
 github.com/golangci/gosec v0.0.0-20180901114220-8afd9cbb6cfb h1:Bi7BYmZVg4C+mKGi8LeohcP2GGUl2XJD4xCkJoZSaYc=
 github.com/golangci/gosec v0.0.0-20180901114220-8afd9cbb6cfb/go.mod h1:ON/c2UR0VAAv6ZEAFKhjCLplESSmRFfZcDLASbI1GWo=
 github.com/golangci/gosec v0.0.0-20190211064107-66fb7fc33547/go.mod h1:0qUabqiIQgfmlAmulqxyiGkkyF6/tOGSnY2cnPVwrzU=
 github.com/golangci/ineffassign v0.0.0-20190609212857-42439a7714cc h1:gLLhTLMk2/SutryVJ6D4VZCU3CUqr8YloG7FPIBWFpI=
 github.com/golangci/ineffassign v0.0.0-20190609212857-42439a7714cc/go.mod h1:e5tpTHCfVze+7EpLEozzMB3eafxo2KT5veNg1k6byQU=
 github.com/golangci/lint-1 v0.0.0-20181222135242-d2cdd8c08219 h1:utua3L2IbQJmauC5IXdEA547bcoU5dozgQAfc8Onsg4=
 github.com/golangci/lint-1 v0.0.0-20181222135242-d2cdd8c08219/go.mod h1:/X8TswGSh1pIozq4ZwCfxS0WA5JGXguxk94ar/4c87Y=
 github.com/golangci/lint-1 v0.0.0-20190420132249-ee948d087217/go.mod h1:66R6K6P6VWk9I95jvqGxkqJxVWGFy9XlDwLwVz1RCFg=
 github.com/golangci/maligned v0.0.0-20180506175553-b1d89398deca h1:kNY3/svz5T29MYHubXix4aDDuE3RWHkPvopM/EDv/MA=
 github.com/golangci/maligned v0.0.0-20180506175553-b1d89398deca/go.mod h1:tvlJhZqDe4LMs4ZHD0oMUlt9G2LWuDGoisJTBzLMV9o=
 github.com/golangci/misspell v0.0.0-20180809174111-950f5d19e770/go.mod h1:dEbvlSfYbMQDtrpRMQU675gSDLDNa8sCPPChZ7PhiVA=
 github.com/golangci/misspell v0.3.4 h1:kAD5J0611Zo2VirUn9KFP15RjEqkmfEfnFxyIVxZCYg=
 github.com/golangci/misspell v0.3.4/go.mod h1:dEbvlSfYbMQDtrpRMQU675gSDLDNa8sCPPChZ7PhiVA=
 github.com/golangci/prealloc v0.0.0-20180630174525-215b22d4de21 h1:leSNB7iYzLYSSx3J/s5sVf4Drkc68W2wm4Ixh/mr0us=
 github.com/golangci/prealloc v0.0.0-20180630174525-215b22d4de21/go.mod h1:tf5+bzsHdTM0bsB7+8mt0GUMvjCgwLpTapNZHU8AajI=
 github.com/golangci/revgrep v0.0.0-20180526074752-d9c87f5ffaf0/go.mod h1:qOQCunEYvmd/TLamH+7LlVccLvUH5kZNhbCgTHoBbp4=
 github.com/golangci/revgrep v0.0.0-20180812185044-276a5c0a1039 h1:XQKc8IYQOeRwVs36tDrEmTgDgP88d5iEURwpmtiAlOM=
 github.com/golangci/revgrep v0.0.0-20180812185044-276a5c0a1039/go.mod h1:qOQCunEYvmd/TLamH+7LlVccLvUH5kZNhbCgTHoBbp4=
 github.com/golangci/unconvert v0.0.0-20180507085042-28b1c447d1f4 h1:zwtduBRr5SSWhqsYNgcuWO2kFlpdOZbP0+yRjmvPGys=
 github.com/golangci/unconvert v0.0.0-20180507085042-28b1c447d1f4/go.mod h1:Izgrg8RkN3rCIMLGE9CyYmU9pY2Jer6DgANEnZ/L/cQ=
 github.com/google/go-cmp v0.2.0 h1:+dTQ8DZQJz0Mb/HjFlkptS1FeQ4cWSnN941F8aEG4SQ=
 github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
 github.com/google/go-cmp v0.3.0 h1:crn/baboCvb5fXaQ0IJ1SGTsTVrWpDsCWC8EGETZijY=
 github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/gostaticanalysis/analysisutil v0.0.0-20190318220348-4088753ea4d3 h1:JVnpOZS+qxli+rgVl98ILOXVNbW+kb5wcxeGx8ShUIw=
 github.com/gostaticanalysis/analysisutil v0.0.0-20190318220348-4088753ea4d3/go.mod h1:eEOZF4jCKGi+aprrirO9e7WKB3beBRtWgqGunKl6pKE=
 github.com/hashicorp/hcl v0.0.0-20180404174102-ef8a98b0bbce/go.mod h1:oZtUIOe8dh44I2q6ScRibXws4Ajl+d+nod3AaR9vL5w=
 github.com/hashicorp/hcl v1.0.0 h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4=
 github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ=
 github.com/hpcloud/tail v1.0.0 h1:nfCOvKYfkgYP8hkirhJocXT2+zOD8yUNjXaWfTlyFKI=
 github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
 github.com/inconshreveable/mousetrap v1.0.0 h1:Z8tu5sraLXCXIcARxBp/8cbvlwVa7Z1NHg9XEKhtSvM=
 github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8=
 github.com/kisielk/errcheck v1.1.0/go.mod h1:EZBBE59ingxPouuu3KfxchcWSUPOHkagtvWXihfKN4Q=
 github.com/kisielk/gotool v0.0.0-20161130080628-0de1eaf82fa3/go.mod h1:jxZFDH7ILpTPQTk+E2s+z4CUas9lVNjIuKR4c5/zKgM=
 github.com/kisielk/gotool v1.0.0 h1:AV2c/EiW3KqPNT9ZKl07ehoAGi4C5/01Cfbblndcapg=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.4.0/go.mod h1:RyIbtBH6LamlWaDj8nUwkbUhJ87Yi3uG0guNDohfE1A=
 github.com/klauspost/compress v1.4.1/go.mod h1:RyIbtBH6LamlWaDj8nUwkbUhJ87Yi3uG0guNDohfE1A=
 github.com/klauspost/cpuid v0.0.0-20180405133222-e7e905edc00e/go.mod h1:Pj4uuM528wm8OyEC2QMXAi2YiTZ96dNQPGgoMS4s3ek=
 github.com/klauspost/cpuid v1.2.0/go.mod h1:Pj4uuM528wm8OyEC2QMXAi2YiTZ96dNQPGgoMS4s3ek=
 github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/konsorten/go-windows-terminal-sequences v1.0.2 h1:DB17ag19krx9CFsz4o3enTrPXyIXCl+2iCXH/aMAp9s=
 github.com/konsorten/go-windows-terminal-sequences v1.0.2/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI=
 github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/logrusorgru/aurora v0.0.0-20181002194514-a7b3b318ed4e/go.mod h1:7rIyQOR62GCctdiQpZ/zOJlFyk6y+94wXzv6RNZgaR4=
 github.com/magiconair/properties v1.7.6/go.mod h1:PppfXfuXeibc/6YijjN8zIbojt8czPbwD3XqdrwzmxQ=
 github.com/magiconair/properties v1.8.0 h1:LLgXmsheXeRoUOBOjtwPQCWIYqM/LU1ayDtDePerRcY=
 github.com/magiconair/properties v1.8.0/go.mod h1:PppfXfuXeibc/6YijjN8zIbojt8czPbwD3XqdrwzmxQ=
 github.com/mattn/go-colorable v0.0.9 h1:UVL0vNpWh04HeJXV0KLcaT7r06gOH2l4OW6ddYRUIY4=
 github.com/mattn/go-colorable v0.0.9/go.mod h1:9vuHe8Xs5qXnSaW/c/ABM9alt+Vo+STaOChaDxuIBZU=
 github.com/mattn/go-isatty v0.0.3 h1:ns/ykhmWi7G9O+8a448SecJU3nSMBXJfqQkl0upE1jI=
 github.com/mattn/go-isatty v0.0.3/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNxMWT7Zi4=
 github.com/mattn/goveralls v0.0.2/go.mod h1:8d1ZMHsd7fW6IRPKQh46F2WRpyib5/X4FOpevwGNQEw=
 github.com/mitchellh/go-homedir v1.0.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
 github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/go-ps v0.0.0-20170309133038-4fdf99ab2936/go.mod h1:r1VsdOzOPt1ZSrGZWFoNhsAedKnEd6r9Np1+5blZCWk=
 github.com/mitchellh/mapstructure v0.0.0-20180220230111-00c29f56e238/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
 github.com/mitchellh/mapstructure v1.1.2 h1:fmNYVwqnSfB9mZU6OS2O6GsXM+wcskZDuKQzvN1EDeE=
 github.com/mitchellh/mapstructure v1.1.2/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
 github.com/mozilla/tls-observatory v0.0.0-20180409132520-8791a200eb40/go.mod h1:SrKMQvPiws7F7iqYp8/TX+IhxCYhzr6N/1yb8cwHsGk=
 github.com/nbutton23/zxcvbn-go v0.0.0-20160627004424-a22cb81b2ecd/go.mod h1:o96djdrsSGy3AWPyBgZMAGfxZNfgntdJG+11KU4QvbU=
 github.com/nbutton23/zxcvbn-go v0.0.0-20171102151520-eafdab6b0663 h1:Ri1EhipkbhWsffPJ3IPlrb4SkTOPa2PfRXp3jchBczw=
 github.com/nbutton23/zxcvbn-go v0.0.0-20171102151520-eafdab6b0663/go.mod h1:o96djdrsSGy3AWPyBgZMAGfxZNfgntdJG+11KU4QvbU=
 github.com/onsi/ginkgo v0.0.0-20170829012221-11459a886d9c/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo v1.6.0 h1:Ix8l273rp3QzYgXSR+c8d1fTG7UPgYkOSELPhiY/YGw=
 github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/gomega v0.0.0-20170829124025-dcabb60a477c/go.mod h1:C1qb7wdrVGGVU+Z6iS04AVkA3Q65CEZX59MT0QO5uiA=
 github.com/onsi/gomega v1.4.2 h1:3mYCb7aPxS/RU7TI1y4rkEn1oKmPRjNJLNEXgw7MH2I=
 github.com/onsi/gomega v1.4.2/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
 github.com/pascaldekloe/name v0.0.0-20180628100202-0fd16699aae1 h1:/I3lTljEEDNYLho3/FUB7iD/oc2cEFgVmbHzV+O0PtU=
 github.com/pascaldekloe/name v0.0.0-20180628100202-0fd16699aae1/go.mod h1:eD5JxqMiuNYyFNmyY9rkJ/slN8y59oEu4Ei7F8OoKWQ=
-github.com/pelletier/go-toml v1.1.0/go.mod h1:5z9KED0ma1S8pY6P1sdut58dfprrGBbd/94hg7ilaic=
+github.com/pascaldekloe/name v1.0.1 h1:9lnXOHeqeHHnWLbKfH6X98+4+ETVqFqxN09UXSjcMb0=
-github.com/pelletier/go-toml v1.2.0 h1:T5zMGML61Wp+FlcbWjRDT7yAxhJNAiPPLOFECq181zc=
+github.com/pascaldekloe/name v1.0.1/go.mod h1:Z//MfYJnH4jVpQ9wkclwu2I2MkHmXTlT9wR5UZScttM=
-github.com/pelletier/go-toml v1.2.0/go.mod h1:5z9KED0ma1S8pY6P1sdut58dfprrGBbd/94hg7ilaic=
+github.com/wadey/gocovmerge v0.0.0-20160331181800-b5bfa59ec0ad h1:W0LEBv82YCGEtcmPA3uNZBI33/qF//HAAs3MawDjRa0=
-github.com/pkg/errors v0.8.0 h1:WdK/asTD0HN+q6hsWO3/vpuAkAr+tw6aNJNDFFf0+qw=
+github.com/wadey/gocovmerge v0.0.0-20160331181800-b5bfa59ec0ad/go.mod h1:Hy8o65+MXnS6EwGElrSRjUzQDLXreJlzYLlWiHtt8hM=
 github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.8.1 h1:iURUrRGxPUNPdy5/HRSm+Yj6okJ6UtLINN0Q9M4+h3I=
 github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/quasilyte/go-consistent v0.0.0-20190521200055-c6f3937de18c/go.mod h1:5STLWrekHfjyYwxBRVRXNOSewLJ3PWfDJd1VyTS21fI=
 github.com/rogpeppe/go-internal v1.1.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/rogpeppe/go-internal v1.2.1/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/ryanuber/go-glob v0.0.0-20170128012129-256dc444b735/go.mod h1:807d1WSdnB0XRJzKNil9Om6lcp/3a0v4qIHxIXzX/Yc=
 github.com/shirou/gopsutil v0.0.0-20180427012116-c95755e4bcd7/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA=
 github.com/shirou/w32 v0.0.0-20160930032740-bb4de0191aa4/go.mod h1:qsXQc7+bwAM3Q1u/4XEfrquwF8Lw7D7y5cD8CuHnfIc=
 github.com/shurcooL/go v0.0.0-20180423040247-9e1955d9fb6e h1:MZM7FHLqUHYI0Y/mQAt3d2aYa0SiNms/hFqC9qJYolM=
 github.com/shurcooL/go v0.0.0-20180423040247-9e1955d9fb6e/go.mod h1:TDJrrUr11Vxrven61rcy3hJMUqaf/CLWYhHNPmT14Lk=
 github.com/shurcooL/go-goon v0.0.0-20170922171312-37c2f522c041 h1:llrF3Fs4018ePo4+G/HV/uQUqEI1HMDjCeOf2V6puPc=
 github.com/shurcooL/go-goon v0.0.0-20170922171312-37c2f522c041/go.mod h1:N5mDOmsrJOB+vfqUK+7DmDyjhSLIIBnXo9lvZJj3MWQ=
 github.com/sirupsen/logrus v1.0.5/go.mod h1:pMByvHTf9Beacp5x1UXfOR9xyW/9antXMhjMPG0dEzc=
 github.com/sirupsen/logrus v1.4.2 h1:SPIRibHv4MatM3XXNO2BJeFLZwZ2LvZgfQ5+UNI2im4=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/sourcegraph/go-diff v0.5.1 h1:gO6i5zugwzo1RVTvgvfwCOSVegNuvnNi6bAD1QCmkHs=
 github.com/sourcegraph/go-diff v0.5.1/go.mod h1:j2dHj3m8aZgQO8lMTcTnBcXkRRRqi34cd2MNlA9u1mE=
 github.com/spf13/afero v1.1.0/go.mod h1:j4pytiNVoe2o6bmDsKpLACNPDBIoEAkihy7loJ1B0CQ=
 github.com/spf13/afero v1.1.2/go.mod h1:j4pytiNVoe2o6bmDsKpLACNPDBIoEAkihy7loJ1B0CQ=
 github.com/spf13/afero v1.2.2 h1:5jhuqJyZCZf2JRofRvN/nIFgIWNzPa3/Vz8mYylgbWc=
 github.com/spf13/afero v1.2.2/go.mod h1:9ZxEEn6pIJ8Rxe320qSDBk6AsU0r9pR7Q4OcevTdifk=
 github.com/spf13/cast v1.2.0/go.mod h1:r2rcYCSwa1IExKTDiTfzaxqT2FNHs8hODu4LnUfgKEg=
 github.com/spf13/cast v1.3.0 h1:oget//CVOEoFewqQxwr0Ej5yjygnqGkvggSE/gB35Q8=
 github.com/spf13/cast v1.3.0/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
 github.com/spf13/cobra v0.0.2 h1:NfkwRbgViGoyjBKsLI0QMDcuMnhM+SBg3T0cGfpvKDE=
 github.com/spf13/cobra v0.0.2/go.mod h1:1l0Ry5zgKvJasoi3XT1TypsSe7PqH0Sj9dhYf7v3XqQ=
 github.com/spf13/jwalterweatherman v0.0.0-20180109140146-7c0cea34c8ec/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
 github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
 github.com/spf13/jwalterweatherman v1.1.0 h1:ue6voC5bR5F8YxI5S67j9i582FU4Qvo2bmqnqMYADFk=
 github.com/spf13/jwalterweatherman v1.1.0/go.mod h1:aNWZUN0dPAAO/Ljvb5BEdw96iTZ0EXowPYD95IqWIGo=
 github.com/spf13/pflag v1.0.1/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
 github.com/spf13/pflag v1.0.3 h1:zPAT6CGy6wXeQ7NtTnaTerfKOsV6V6F8agHXFiazDkg=
 github.com/spf13/pflag v1.0.3/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
 github.com/spf13/viper v1.0.2/go.mod h1:A8kyI5cUJhb8N+3pkfONlcEcZbueH6nhAm0Fq7SrnBM=
 github.com/spf13/viper v1.3.2 h1:VUFqw5KcqRf7i70GOzW7N+Q7+gxVBkSSqiXB12+JQ4M=
 github.com/spf13/viper v1.3.2/go.mod h1:ZiWeW+zYFKm7srdB9IoDzzZXaJaI5eL9QjNiN/DMA2s=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/testify v1.2.2 h1:bSDNvY7ZPG5RlJ8otE/7V6gMiyenm9RtJ7IUVIAoJ1w=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.4.0 h1:2E4SXV/wtOkTonXsotYi4li6zVWxYlZuYNCXe9XRJyk=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
 github.com/timakin/bodyclose v0.0.0-20190407043127-4a873e97b2bb h1:lI9ufgFfvuqRctP9Ny8lDDLbSWCMxBPletcSqrnyFYM=
 github.com/timakin/bodyclose v0.0.0-20190407043127-4a873e97b2bb/go.mod h1:Qimiffbc6q9tBWlVV6x0P9sat/ao1xEkREYPPj9hphk=
 github.com/ugorji/go/codec v0.0.0-20181204163529-d75b2dcb6bc8/go.mod h1:VFNgLljTbGfSG7qAOspJ7OScBnGdDN/yBr0sguwnwf0=
 github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc=
 github.com/valyala/fasthttp v1.2.0/go.mod h1:4vX61m6KN+xDduDNwXrhIAVZaZaZiQ1luJk8LWSxF3s=
 github.com/valyala/quicktemplate v1.1.1/go.mod h1:EH+4AkTd43SvgIbQHYu59/cJyxDoOVRUAfrukLPuGJ4=
 github.com/valyala/tcplisten v0.0.0-20161114210144-ceec8f93295a/go.mod h1:v3UYOV9WzVtRmSR+PDvWpU/qWl4Wa5LApYYX4ZtKbio=
 github.com/xordataexchange/crypt v0.0.3-0.20170626215501-b2862e3d0a77/go.mod h1:aYKd//L2LvnjZzWKhF00oedf4jCCReLcmhLdhm1A27Q=
 golang.org/x/crypto v0.0.0-20181203042331-505ab145d0a9/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
-golang.org/x/crypto v0.0.0-20190313024323-a1f597ede03a/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/mod v0.32.0 h1:9F4d3PHLljb6x//jOyokMv3eX+YDeepZSEo3mFJy93c=
-golang.org/x/net v0.0.0-20170915142106-8351a756f30f/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/mod v0.32.0/go.mod h1:SgipZ/3h2Ci89DlEtEXWUk/HteuRin+HHhN+WbNhguU=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180911220305-26e67e76b6c3/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
-golang.org/x/net v0.0.0-20190313220215-9f648a60d977 h1:actzWV6iWn3GLqN8dZjzsB+CLt+gaV2+wsxroxiQI8I=
+golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o=
-golang.org/x/net v0.0.0-20190313220215-9f648a60d977/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8=
 golang.org/x/net v0.0.0-20190613194153-d28f0bde5980 h1:dfGZHvZk057jK2MCeWus/TowKpJ8y4AmooUzdBSR9GU=
 golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58 h1:8gQV6CLnAEikrhgkHFbMAEhagSSnXWGV915qUMm9mrU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sys v0.0.0-20171026204733-164713f0dfce/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
-golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20181205085412-a5c9d58dba9a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k=
-golang.org/x/sys v0.0.0-20190422165155-953cdadca894/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/sys v0.0.0-20191010194322-b09406accb47 h1:/XfQ9z7ib8eEJX2hdgFTZJ/ntt0swNk5oYBziWeTCvY=
+golang.org/x/telemetry v0.0.0-20260205145544-86a5c4bf3c8d h1:xjbyaj6khjO0ocYYa7k9sQLbdi4R1KwHnsS1QGijbsM=
-golang.org/x/sys v0.0.0-20191010194322-b09406accb47/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/telemetry v0.0.0-20260205145544-86a5c4bf3c8d/go.mod h1:b7fPSJ0pKZ3ccUh8gnTONJxhn3c/PS6tyzQvyqw4iA8=
 golang.org/x/text v0.0.0-20170915090833-1cbadb444a80/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0 h1:g61tztE5qeGQ89tm6NTjjM9VPIm088od1l6aSorWRWg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
-golang.org/x/tools v0.0.0-20170915040203-e531a2a1c15f/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/tools v0.0.0-20180221164845-07fd8470d635/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.0.0-20181117154741-2ddaf7f79a09/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20181205014116-22934f0fdb62/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20190110163146-51295c7ec13a/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20190121143147-24cd39ecf745/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20190213192042-740235f6c0d8 h1:b0PLhFjEMqrIqsD4rS5sp0YxBYgdqKzX0KkkGGKLV8I=
 golang.org/x/tools v0.0.0-20190213192042-740235f6c0d8/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
 golang.org/x/tools v0.0.0-20190311215038-5c2858a9cfe5/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
 golang.org/x/tools v0.0.0-20190322203728-c1a832b0ad89/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
 golang.org/x/tools v0.0.0-20190521203540-521d6ed310dd/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
 golang.org/x/tools v0.0.0-20190524210228-3d17549cdc6b h1:iEAPfYPbYbxG/2lNN4cMOHkmgKNsCuUwkxlDCK46UlU=
 golang.org/x/tools v0.0.0-20190524210228-3d17549cdc6b/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
-gopkg.in/airbrake/gobrake.v2 v2.0.9/go.mod h1:/h5ZAUhDkGaJfjzjKLSjv6zCL6O0LLBxU4K+aSYdM/U=
+golang.org/x/tools v0.41.0 h1:a9b8iMweWG+S0OBnlU36rzLp20z1Rp10w+IY2czHTQc=
-gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+golang.org/x/tools v0.41.0/go.mod h1:XSY6eDqxVNiYgezAVqqCeihT4j1U2CCsqvH3WhQpnlg=
-gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20250818200422-3122310a409c h1:qXWI/sQtv5UKboZ/zUk7h+mrf/lXORyI+n9DKDAusdg=
-gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20250818200422-3122310a409c/go.mod h1:gw1tLEfykwDz2ET4a12jcXt4couGAm7IwsVaTy0Sflo=
-gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
+google.golang.org/grpc v1.75.0 h1:+TW+dqTd2Biwe6KKfhE5JpiYIBWq865PhKGSXiivqt4=
-gopkg.in/fsnotify.v1 v1.4.7 h1:xOHLXZwVvI9hhs+cLKq5+I5onOuwQLhQwiu63xxlHs4=
+google.golang.org/grpc v1.75.0/go.mod h1:JtPAzKiq4v1xcAB2hydNlWI2RnF85XXcV0mhKXr2ecQ=
-gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
+google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1 h1:/WILD1UcXj/ujCxgoL/DvRgt2CP3txG8+FwkUbb9110=
-gopkg.in/gemnasium/logrus-airbrake-hook.v2 v2.1.2/go.mod h1:Xk6kEKp8OKb+X14hQBKWaSkCsqBpgog8nAV2xsGOxlo=
+google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1/go.mod h1:YNKnb2OAApgYn2oYY47Rn7alMr1zWjb2U8Q0aoGWiNc=
-gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ=
+google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
-gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
+google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/yaml.v2 v2.0.0-20170812160011-eb3733d160e7/go.mod h1:JAlM8MvJe8wmxCU4Bli9HhUf9+ttbYbLASfIpnQbh74=
 gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.2 h1:ZCJp+EgiOT7lHqUV2J862kp8Qj64Jo6az82+3Td9dZw=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 mvdan.cc/interfacer v0.0.0-20180901003855-c20040233aed h1:WX1yoOaKQfddO/mLzdV4wptyWgoH/6hwLs7QHTixo0I=
 mvdan.cc/interfacer v0.0.0-20180901003855-c20040233aed/go.mod h1:Xkxe497xwlCKkIaQYRfC7CSLworTXY9RMqwhhCm+8Nc=
 mvdan.cc/lint v0.0.0-20170908181259-adc824a0674b h1:DxJ5nJdkhDlLok9K6qO+5290kphDJbHOQO1DFFFTeBo=
 mvdan.cc/lint v0.0.0-20170908181259-adc824a0674b/go.mod h1:2odslEg/xrtNQqCYg2/jCoyKnw3vv5biOc3JnIcYfL4=
 mvdan.cc/unparam v0.0.0-20190209190245-fbb59629db34/go.mod h1:H6SUd1XjIs+qQCyskXg5OFSrilMRUkD8ePJpHKDPaeY=
 mvdan.cc/unparam v0.0.0-20190310220240-1b9ccfa71afe h1:Ekmnp+NcP2joadI9pbK4Bva87QKZSeY7le//oiMrc9g=
 mvdan.cc/unparam v0.0.0-20190310220240-1b9ccfa71afe/go.mod h1:BnhuWBAqxH3+J5bDybdxgw5ZfS+DsVd4iylsKQePN8o=
 sourcegraph.com/sqs/pbtypes v0.0.0-20180604144634-d3ebe8f20ae4/go.mod h1:ketZ/q3QxT9HOBeFhu6RdvsftgpsbFHBF5Cas6cDKZ0=
 sourcegraph.com/sqs/pbtypes v1.0.0 h1:f7lAwqviDEGvON4kRv0o5V7FT/IQK+tbkF664XMbP3o=
 sourcegraph.com/sqs/pbtypes v1.0.0/go.mod h1:3AciMUv4qUuRHRHhOG4TZOB+72GdPVz5k+c648qsFS4=
@@ -0,0 +1,6 @@
 export GO111MODULE=on # otherwise, a checkout of this repo in GOPATH will disable modules on Go 1.12 and earlier
 source <(go env)
 # build tools for the host platform
 export GOOS="$GOHOSTOS"
 export GOARCH="$GOHOSTARCH"
 # TODO GOARM=$GOHOSTARM?
@@ -0,0 +1,19 @@
 #!/usr/bin/env bash
 set -euo pipefail
 set -x
 OUTDIR="$(readlink -f "$1")"
 if [ -e "$OUTDIR" ]; then
    echo "$OUTDIR" already exists 1>&2
    exit 1
 fi
 # go install command below will install tools to $GOBIN
 export GOBIN="$OUTDIR"
 cd "$(dirname "$0")"
 source ./go_install_host_tool.source
 cat tools.go | grep _ | awk -F'"' '{print $2}' | tee | xargs -tI '{}' go install '{}'
@@ -1,11 +1,14 @@
 //go:build tools
 // +build tools
 package main
 // the lines are parsed by lazy.sh, do not edit
 import (
 	_ "github.com/alvaroloes/enumer"
-	_ "github.com/golang/protobuf/protoc-gen-go"
+	_ "github.com/wadey/gocovmerge"
 	_ "github.com/golangci/golangci-lint/cmd/golangci-lint"
 	_ "golang.org/x/tools/cmd/goimports"
 	_ "golang.org/x/tools/cmd/stringer"
 	_ "google.golang.org/grpc/cmd/protoc-gen-go-grpc"
 	_ "google.golang.org/protobuf/cmd/protoc-gen-go"
 )
@@ -1,87 +0,0 @@
 package client
 import (
 	"context"
 	"encoding/json"
 	"fmt"
 	"os"
 	"strings"
 	"github.com/pkg/errors"
 	"github.com/zrepl/zrepl/cli"
 	"github.com/zrepl/zrepl/daemon/filters"
 	"github.com/zrepl/zrepl/endpoint"
 	"github.com/zrepl/zrepl/zfs"
 )
 var (
 	HoldsCmd = &cli.Subcommand{
 		Use:   "holds",
 		Short: "manage holds & step bookmarks",
 		SetupSubcommands: func() []*cli.Subcommand {
 			return holdsList
 		},
 	}
 )
 var holdsList = []*cli.Subcommand{
 	&cli.Subcommand{
 		Use:             "list [FSFILTER]",
 		Run:             doHoldsList,
 		NoRequireConfig: true,
 		Short: `
 FSFILTER SYNTAX:
 representation of a 'filesystems' filter statement on the command line
 		`,
 	},
 }
 func fsfilterFromCliArg(arg string) (zfs.DatasetFilter, error) {
 	mappings := strings.Split(arg, ",")
 	f := filters.NewDatasetMapFilter(len(mappings), true)
 	for _, m := range mappings {
 		thisMappingErr := fmt.Errorf("expecting comma-separated list of <dataset-pattern>:<ok|!> pairs, got %q", m)
 		lhsrhs := strings.SplitN(m, ":", 2)
 		if len(lhsrhs) != 2 {
 			return nil, thisMappingErr
 		}
 		err := f.Add(lhsrhs[0], lhsrhs[1])
 		if err != nil {
 			return nil, fmt.Errorf("%s: %s", thisMappingErr, err)
 		}
 	}
 	return f.AsFilter(), nil
 }
 func doHoldsList(sc *cli.Subcommand, args []string) error {
 	var err error
 	ctx := context.Background()
 	if len(args) > 1 {
 		return errors.New("this subcommand takes at most one argument")
 	}
 	var filter zfs.DatasetFilter
 	if len(args) == 0 {
 		filter = zfs.NoFilter()
 	} else {
 		filter, err = fsfilterFromCliArg(args[0])
 		if err != nil {
 			return errors.Wrap(err, "cannot parse filesystem filter args")
 		}
 	}
 	listing, err := endpoint.ListZFSHoldsAndBookmarks(ctx, filter)
 	if err != nil {
 		return err // context clear by invocation of command
 	}
 	enc := json.NewEncoder(os.Stdout)
 	enc.SetIndent("  ", "  ")
 	if err := enc.Encode(listing); err != nil {
 		panic(err)
 	}
 	return nil
 }
@@ -1,810 +0,0 @@
 package client
 import (
 	"fmt"
 	"io"
 	"math"
 	"net/http"
 	"os"
 	"sort"
 	"strings"
 	"sync"
 	"time"
 	// tcell is the termbox-compatbile library for abstracting away escape sequences, etc.
 	// as of tcell#252, the number of default distributed terminals is relatively limited
 	// additional terminal definitions can be included via side-effect import
 	// See https://github.com/gdamore/tcell/blob/master/terminfo/base/base.go
 	// See https://github.com/gdamore/tcell/issues/252#issuecomment-533836078
 	"github.com/gdamore/tcell/termbox"
 	_ "github.com/gdamore/tcell/terminfo/s/screen" // tmux on FreeBSD 11 & 12 without ncurses
 	"github.com/pkg/errors"
 	"github.com/spf13/pflag"
 	"github.com/zrepl/yaml-config"
 	"github.com/zrepl/zrepl/cli"
 	"github.com/zrepl/zrepl/daemon"
 	"github.com/zrepl/zrepl/daemon/job"
 	"github.com/zrepl/zrepl/daemon/pruner"
 	"github.com/zrepl/zrepl/daemon/snapper"
 	"github.com/zrepl/zrepl/replication/report"
 )
 type byteProgressMeasurement struct {
 	time time.Time
 	val  int64
 }
 type bytesProgressHistory struct {
 	last        *byteProgressMeasurement // pointer as poor man's optional
 	changeCount int
 	lastChange  time.Time
 	bpsAvg      float64
 }
 func (p *bytesProgressHistory) Update(currentVal int64) (bytesPerSecondAvg int64, changeCount int) {
 	if p.last == nil {
 		p.last = &byteProgressMeasurement{
 			time: time.Now(),
 			val:  currentVal,
 		}
 		return 0, 0
 	}
 	if p.last.val != currentVal {
 		p.changeCount++
 		p.lastChange = time.Now()
 	}
 	if time.Since(p.lastChange) > 3*time.Second {
 		p.last = nil
 		return 0, 0
 	}
 	deltaV := currentVal - p.last.val
 	deltaT := time.Since(p.last.time)
 	rate := float64(deltaV) / deltaT.Seconds()
 	factor := 0.3
 	p.bpsAvg = (1-factor)*p.bpsAvg + factor*rate
 	p.last.time = time.Now()
 	p.last.val = currentVal
 	return int64(p.bpsAvg), p.changeCount
 }
 type tui struct {
 	x, y   int
 	indent int
 	lock   sync.Mutex //For report and error
 	report map[string]job.Status
 	err    error
 	jobFilter string
 	replicationProgress map[string]*bytesProgressHistory // by job name
 }
 func newTui() tui {
 	return tui{
 		replicationProgress: make(map[string]*bytesProgressHistory),
 	}
 }
 const INDENT_MULTIPLIER = 4
 func (t *tui) moveLine(dl int, col int) {
 	t.y += dl
 	t.x = t.indent*INDENT_MULTIPLIER + col
 }
 func (t *tui) write(text string) {
 	for _, c := range text {
 		if c == '\n' {
 			t.newline()
 			continue
 		}
 		termbox.SetCell(t.x, t.y, c, termbox.ColorDefault, termbox.ColorDefault)
 		t.x += 1
 	}
 }
 func (t *tui) printf(text string, a ...interface{}) {
 	t.write(fmt.Sprintf(text, a...))
 }
 func wrap(s string, width int) string {
 	var b strings.Builder
 	for len(s) > 0 {
 		rem := width
 		if rem > len(s) {
 			rem = len(s)
 		}
 		if idx := strings.IndexAny(s, "\n\r"); idx != -1 && idx < rem {
 			rem = idx + 1
 		}
 		untilNewline := strings.TrimRight(s[:rem], "\n\r")
 		s = s[rem:]
 		if len(untilNewline) == 0 {
 			continue
 		}
 		b.WriteString(untilNewline)
 		b.WriteString("\n")
 	}
 	return strings.TrimRight(b.String(), "\n\r")
 }
 func (t *tui) printfDrawIndentedAndWrappedIfMultiline(format string, a ...interface{}) {
 	whole := fmt.Sprintf(format, a...)
 	width, _ := termbox.Size()
 	if !strings.ContainsAny(whole, "\n\r") && t.x+len(whole) <= width {
 		t.printf(format, a...)
 	} else {
 		t.addIndent(1)
 		t.newline()
 		t.write(wrap(whole, width-INDENT_MULTIPLIER*t.indent))
 		t.addIndent(-1)
 	}
 }
 func (t *tui) newline() {
 	t.moveLine(1, 0)
 }
 func (t *tui) setIndent(indent int) {
 	t.indent = indent
 	t.moveLine(0, 0)
 }
 func (t *tui) addIndent(indent int) {
 	t.indent += indent
 	t.moveLine(0, 0)
 }
 var statusFlags struct {
 	Raw bool
 	Job string
 }
 var StatusCmd = &cli.Subcommand{
 	Use:   "status",
 	Short: "show job activity or dump as JSON for monitoring",
 	SetupFlags: func(f *pflag.FlagSet) {
 		f.BoolVar(&statusFlags.Raw, "raw", false, "dump raw status description from zrepl daemon")
 		f.StringVar(&statusFlags.Job, "job", "", "only dump specified job")
 	},
 	Run: runStatus,
 }
 func runStatus(s *cli.Subcommand, args []string) error {
 	httpc, err := controlHttpClient(s.Config().Global.Control.SockPath)
 	if err != nil {
 		return err
 	}
 	if statusFlags.Raw {
 		resp, err := httpc.Get("http://unix" + daemon.ControlJobEndpointStatus)
 		if err != nil {
 			return err
 		}
 		defer resp.Body.Close()
 		if resp.StatusCode != http.StatusOK {
 			fmt.Fprintf(os.Stderr, "Received error response:\n")
 			_, err := io.CopyN(os.Stderr, resp.Body, 4096)
 			if err != nil {
 				return err
 			}
 			return errors.Errorf("exit")
 		}
 		if _, err := io.Copy(os.Stdout, resp.Body); err != nil {
 			return err
 		}
 		return nil
 	}
 	t := newTui()
 	t.lock.Lock()
 	t.err = errors.New("Got no report yet")
 	t.lock.Unlock()
 	t.jobFilter = statusFlags.Job
 	err = termbox.Init()
 	if err != nil {
 		return err
 	}
 	defer termbox.Close()
 	update := func() {
 		m := make(map[string]job.Status)
 		err2 := jsonRequestResponse(httpc, daemon.ControlJobEndpointStatus,
 			struct{}{},
 			&m,
 		)
 		t.lock.Lock()
 		t.err = err2
 		t.report = m
 		t.lock.Unlock()
 		t.draw()
 	}
 	update()
 	ticker := time.NewTicker(500 * time.Millisecond)
 	defer ticker.Stop()
 	go func() {
 		for range ticker.C {
 			update()
 		}
 	}()
 	termbox.HideCursor()
 	termbox.Clear(termbox.ColorDefault, termbox.ColorDefault)
 loop:
 	for {
 		switch ev := termbox.PollEvent(); ev.Type {
 		case termbox.EventKey:
 			switch ev.Key {
 			case termbox.KeyEsc:
 				break loop
 			case termbox.KeyCtrlC:
 				break loop
 			}
 		case termbox.EventResize:
 			t.draw()
 		}
 	}
 	return nil
 }
 func (t *tui) getReplicationProgresHistory(jobName string) *bytesProgressHistory {
 	p, ok := t.replicationProgress[jobName]
 	if !ok {
 		p = &bytesProgressHistory{}
 		t.replicationProgress[jobName] = p
 	}
 	return p
 }
 func (t *tui) draw() {
 	t.lock.Lock()
 	defer t.lock.Unlock()
 	termbox.Clear(termbox.ColorDefault, termbox.ColorDefault)
 	t.x = 0
 	t.y = 0
 	t.indent = 0
 	if t.err != nil {
 		t.write(t.err.Error())
 	} else {
 		//Iterate over map in alphabetical order
 		keys := make([]string, 0, len(t.report))
 		for k := range t.report {
 			if len(k) == 0 || daemon.IsInternalJobName(k) { //Internal job
 				continue
 			}
 			if t.jobFilter != "" && k != t.jobFilter {
 				continue
 			}
 			keys = append(keys, k)
 		}
 		sort.Strings(keys)
 		if len(keys) == 0 {
 			t.setIndent(0)
 			t.printf("no jobs to display")
 			t.newline()
 			termbox.Flush()
 			return
 		}
 		for _, k := range keys {
 			v := t.report[k]
 			t.setIndent(0)
 			t.printf("Job: %s", k)
 			t.setIndent(1)
 			t.newline()
 			t.printf("Type: %s", v.Type)
 			t.setIndent(1)
 			t.newline()
 			if v.Type == job.TypePush || v.Type == job.TypePull {
 				activeStatus, ok := v.JobSpecific.(*job.ActiveSideStatus)
 				if !ok || activeStatus == nil {
 					t.printf("ActiveSideStatus is null")
 					t.newline()
 					continue
 				}
 				t.printf("Replication:")
 				t.newline()
 				t.addIndent(1)
 				t.renderReplicationReport(activeStatus.Replication, t.getReplicationProgresHistory(k))
 				t.addIndent(-1)
 				t.printf("Pruning Sender:")
 				t.newline()
 				t.addIndent(1)
 				t.renderPrunerReport(activeStatus.PruningSender)
 				t.addIndent(-1)
 				t.printf("Pruning Receiver:")
 				t.newline()
 				t.addIndent(1)
 				t.renderPrunerReport(activeStatus.PruningReceiver)
 				t.addIndent(-1)
 				if v.Type == job.TypePush {
 					t.printf("Snapshotting:")
 					t.newline()
 					t.addIndent(1)
 					t.renderSnapperReport(activeStatus.Snapshotting)
 					t.addIndent(-1)
 				}
 			} else if v.Type == job.TypeSnap {
 				snapStatus, ok := v.JobSpecific.(*job.SnapJobStatus)
 				if !ok || snapStatus == nil {
 					t.printf("SnapJobStatus is null")
 					t.newline()
 					continue
 				}
 				t.printf("Pruning snapshots:")
 				t.newline()
 				t.addIndent(1)
 				t.renderPrunerReport(snapStatus.Pruning)
 				t.addIndent(-1)
 				t.printf("Snapshotting:")
 				t.newline()
 				t.addIndent(1)
 				t.renderSnapperReport(snapStatus.Snapshotting)
 				t.addIndent(-1)
 			} else if v.Type == job.TypeSource {
 				st := v.JobSpecific.(*job.PassiveStatus)
 				t.printf("Snapshotting:\n")
 				t.addIndent(1)
 				t.renderSnapperReport(st.Snapper)
 				t.addIndent(-1)
 			} else {
 				t.printf("No status representation for job type '%s', dumping as YAML", v.Type)
 				t.newline()
 				asYaml, err := yaml.Marshal(v.JobSpecific)
 				if err != nil {
 					t.printf("Error marshaling status to YAML: %s", err)
 					t.newline()
 					continue
 				}
 				t.write(string(asYaml))
 				t.newline()
 				continue
 			}
 		}
 	}
 	termbox.Flush()
 }
 func (t *tui) renderReplicationReport(rep *report.Report, history *bytesProgressHistory) {
 	if rep == nil {
 		t.printf("...\n")
 		return
 	}
 	if rep.WaitReconnectError != nil {
 		t.printfDrawIndentedAndWrappedIfMultiline("Connectivity: %s", rep.WaitReconnectError)
 		t.newline()
 	}
 	if !rep.WaitReconnectSince.IsZero() {
 		delta := time.Until(rep.WaitReconnectUntil).Round(time.Second)
 		if rep.WaitReconnectUntil.IsZero() || delta > 0 {
 			var until string
 			if rep.WaitReconnectUntil.IsZero() {
 				until = "waiting indefinitely"
 			} else {
 				until = fmt.Sprintf("hard fail in %s @ %s", delta, rep.WaitReconnectUntil)
 			}
 			t.printfDrawIndentedAndWrappedIfMultiline("Connectivity: reconnecting with exponential backoff (since %s) (%s)",
 				rep.WaitReconnectSince, until)
 		} else {
 			t.printfDrawIndentedAndWrappedIfMultiline("Connectivity: reconnects reached hard-fail timeout @ %s", rep.WaitReconnectUntil)
 		}
 		t.newline()
 	}
 	// TODO visualize more than the latest attempt by folding all attempts into one
 	if len(rep.Attempts) == 0 {
 		t.printf("no attempts made yet")
 		return
 	} else {
 		t.printf("Attempt #%d", len(rep.Attempts))
 		if len(rep.Attempts) > 1 {
 			t.printf(". Previous attempts failed with the following statuses:")
 			t.newline()
 			t.addIndent(1)
 			for i, a := range rep.Attempts[:len(rep.Attempts)-1] {
 				t.printfDrawIndentedAndWrappedIfMultiline("#%d: %s (failed at %s) (ran %s)", i+1, a.State, a.FinishAt, a.FinishAt.Sub(a.StartAt))
 				t.newline()
 			}
 			t.addIndent(-1)
 		} else {
 			t.newline()
 		}
 	}
 	latest := rep.Attempts[len(rep.Attempts)-1]
 	sort.Slice(latest.Filesystems, func(i, j int) bool {
 		return latest.Filesystems[i].Info.Name < latest.Filesystems[j].Info.Name
 	})
 	t.printf("Status: %s", latest.State)
 	t.newline()
 	if latest.State == report.AttemptPlanningError {
 		t.printf("Problem: ")
 		t.printfDrawIndentedAndWrappedIfMultiline("%s", latest.PlanError)
 		t.newline()
 	} else if latest.State == report.AttemptFanOutError {
 		t.printf("Problem: one or more of the filesystems encountered errors")
 		t.newline()
 	}
 	if latest.State != report.AttemptPlanning && latest.State != report.AttemptPlanningError {
 		// Draw global progress bar
 		// Progress: [---------------]
 		expected, replicated, containsInvalidSizeEstimates := latest.BytesSum()
 		rate, changeCount := history.Update(replicated)
 		eta := time.Duration(0)
 		if rate > 0 {
 			eta = time.Duration((expected-replicated)/rate) * time.Second
 		}
 		t.write("Progress: ")
 		t.drawBar(50, replicated, expected, changeCount)
 		t.write(fmt.Sprintf(" %s / %s @ %s/s", ByteCountBinary(replicated), ByteCountBinary(expected), ByteCountBinary(rate)))
 		if eta != 0 {
 			t.write(fmt.Sprintf(" (%s remaining)", humanizeDuration(eta)))
 		}
 		t.newline()
 		if containsInvalidSizeEstimates {
 			t.write("NOTE: not all steps could be size-estimated, total estimate is likely imprecise!")
 			t.newline()
 		}
 		var maxFSLen int
 		for _, fs := range latest.Filesystems {
 			if len(fs.Info.Name) > maxFSLen {
 				maxFSLen = len(fs.Info.Name)
 			}
 		}
 		for _, fs := range latest.Filesystems {
 			t.printFilesystemStatus(fs, false, maxFSLen) // FIXME bring 'active' flag back
 		}
 	}
 }
 func (t *tui) renderPrunerReport(r *pruner.Report) {
 	if r == nil {
 		t.printf("...\n")
 		return
 	}
 	state, err := pruner.StateString(r.State)
 	if err != nil {
 		t.printf("Status: %q (parse error: %q)\n", r.State, err)
 		return
 	}
 	t.printf("Status: %s", state)
 	t.newline()
 	if r.Error != "" {
 		t.printf("Error: %s\n", r.Error)
 	}
 	type commonFS struct {
 		*pruner.FSReport
 		completed bool
 	}
 	all := make([]commonFS, 0, len(r.Pending)+len(r.Completed))
 	for i := range r.Pending {
 		all = append(all, commonFS{&r.Pending[i], false})
 	}
 	for i := range r.Completed {
 		all = append(all, commonFS{&r.Completed[i], true})
 	}
 	switch state {
 	case pruner.Plan:
 		fallthrough
 	case pruner.PlanErr:
 		return
 	}
 	if len(all) == 0 {
 		t.printf("nothing to do\n")
 		return
 	}
 	var totalDestroyCount, completedDestroyCount int
 	var maxFSname int
 	for _, fs := range all {
 		totalDestroyCount += len(fs.DestroyList)
 		if fs.completed {
 			completedDestroyCount += len(fs.DestroyList)
 		}
 		if maxFSname < len(fs.Filesystem) {
 			maxFSname = len(fs.Filesystem)
 		}
 	}
 	// global progress bar
 	progress := int(math.Round(80 * float64(completedDestroyCount) / float64(totalDestroyCount)))
 	t.write("Progress: ")
 	t.write("[")
 	t.write(times("=", progress))
 	t.write(">")
 	t.write(times("-", 80-progress))
 	t.write("]")
 	t.printf(" %d/%d snapshots", completedDestroyCount, totalDestroyCount)
 	t.newline()
 	sort.SliceStable(all, func(i, j int) bool {
 		return strings.Compare(all[i].Filesystem, all[j].Filesystem) == -1
 	})
 	// Draw a table-like representation of 'all'
 	for _, fs := range all {
 		t.write(rightPad(fs.Filesystem, maxFSname, " "))
 		t.write(" ")
 		if !fs.SkipReason.NotSkipped() {
 			t.printf("skipped: %s\n", fs.SkipReason)
 			continue
 		}
 		if fs.LastError != "" {
 			if strings.ContainsAny(fs.LastError, "\r\n") {
 				t.printf("ERROR:")
 				t.printfDrawIndentedAndWrappedIfMultiline("%s\n", fs.LastError)
 			} else {
 				t.printfDrawIndentedAndWrappedIfMultiline("ERROR: %s\n", fs.LastError)
 			}
 			t.newline()
 			continue
 		}
 		pruneRuleActionStr := fmt.Sprintf("(destroy %d of %d snapshots)",
 			len(fs.DestroyList), len(fs.SnapshotList))
 		if fs.completed {
 			t.printf("Completed  %s\n", pruneRuleActionStr)
 			continue
 		}
 		t.write("Pending    ") // whitespace is padding 10
 		if len(fs.DestroyList) == 1 {
 			t.write(fs.DestroyList[0].Name)
 		} else {
 			t.write(pruneRuleActionStr)
 		}
 		t.newline()
 	}
 }
 func (t *tui) renderSnapperReport(r *snapper.Report) {
 	if r == nil {
 		t.printf("<snapshot type does not have a report>\n")
 		return
 	}
 	t.printf("Status: %s", r.State)
 	t.newline()
 	if r.Error != "" {
 		t.printf("Error: %s\n", r.Error)
 	}
 	if !r.SleepUntil.IsZero() {
 		t.printf("Sleep until: %s\n", r.SleepUntil)
 	}
 	sort.Slice(r.Progress, func(i, j int) bool {
 		return strings.Compare(r.Progress[i].Path, r.Progress[j].Path) == -1
 	})
 	t.addIndent(1)
 	defer t.addIndent(-1)
 	dur := func(d time.Duration) string {
 		return d.Round(100 * time.Millisecond).String()
 	}
 	type row struct {
 		path, state, duration, remainder, hookReport string
 	}
 	var widths struct {
 		path, state, duration int
 	}
 	rows := make([]*row, len(r.Progress))
 	for i, fs := range r.Progress {
 		r := &row{
 			path:  fs.Path,
 			state: fs.State.String(),
 		}
 		if fs.HooksHadError {
 			r.hookReport = fs.Hooks // FIXME render here, not in daemon
 		}
 		switch fs.State {
 		case snapper.SnapPending:
 			r.duration = "..."
 			r.remainder = ""
 		case snapper.SnapStarted:
 			r.duration = dur(time.Since(fs.StartAt))
 			r.remainder = fmt.Sprintf("snap name: %q", fs.SnapName)
 		case snapper.SnapDone:
 			fallthrough
 		case snapper.SnapError:
 			r.duration = dur(fs.DoneAt.Sub(fs.StartAt))
 			r.remainder = fmt.Sprintf("snap name: %q", fs.SnapName)
 		}
 		rows[i] = r
 		if len(r.path) > widths.path {
 			widths.path = len(r.path)
 		}
 		if len(r.state) > widths.state {
 			widths.state = len(r.state)
 		}
 		if len(r.duration) > widths.duration {
 			widths.duration = len(r.duration)
 		}
 	}
 	for _, r := range rows {
 		path := rightPad(r.path, widths.path, " ")
 		state := rightPad(r.state, widths.state, " ")
 		duration := rightPad(r.duration, widths.duration, " ")
 		t.printf("%s %s %s", path, state, duration)
 		t.printfDrawIndentedAndWrappedIfMultiline(" %s", r.remainder)
 		if r.hookReport != "" {
 			t.printfDrawIndentedAndWrappedIfMultiline("%s", r.hookReport)
 		}
 		t.newline()
 	}
 }
 func times(str string, n int) (out string) {
 	for i := 0; i < n; i++ {
 		out += str
 	}
 	return
 }
 func rightPad(str string, length int, pad string) string {
 	if len(str) > length {
 		return str[:length]
 	}
 	return str + strings.Repeat(pad, length-len(str))
 }
 var arrowPositions = `>\|/`
 // changeCount = 0 indicates stall / no progresss
 func (t *tui) drawBar(length int, bytes, totalBytes int64, changeCount int) {
 	var completedLength int
 	if totalBytes > 0 {
 		completedLength = int(int64(length) * bytes / totalBytes)
 		if completedLength > length {
 			completedLength = length
 		}
 	} else if totalBytes == bytes {
 		completedLength = length
 	}
 	t.write("[")
 	t.write(times("=", completedLength))
 	t.write(string(arrowPositions[changeCount%len(arrowPositions)]))
 	t.write(times("-", length-completedLength))
 	t.write("]")
 }
 func (t *tui) printFilesystemStatus(rep *report.FilesystemReport, active bool, maxFS int) {
 	expected, replicated, containsInvalidSizeEstimates := rep.BytesSum()
 	sizeEstimationImpreciseNotice := ""
 	if containsInvalidSizeEstimates {
 		sizeEstimationImpreciseNotice = " (some steps lack size estimation)"
 	}
 	if rep.CurrentStep < len(rep.Steps) && rep.Steps[rep.CurrentStep].Info.BytesExpected == 0 {
 		sizeEstimationImpreciseNotice = " (step lacks size estimation)"
 	}
 	status := fmt.Sprintf("%s (step %d/%d, %s/%s)%s",
 		strings.ToUpper(string(rep.State)),
 		rep.CurrentStep, len(rep.Steps),
 		ByteCountBinary(replicated), ByteCountBinary(expected),
 		sizeEstimationImpreciseNotice,
 	)
 	activeIndicator := " "
 	if active {
 		activeIndicator = "*"
 	}
 	t.printf("%s %s %s ",
 		activeIndicator,
 		rightPad(rep.Info.Name, maxFS, " "),
 		status)
 	next := ""
 	if err := rep.Error(); err != nil {
 		next = err.Err
 	} else if rep.State != report.FilesystemDone {
 		if nextStep := rep.NextStep(); nextStep != nil {
 			if nextStep.IsIncremental() {
 				next = fmt.Sprintf("next: %s => %s", nextStep.Info.From, nextStep.Info.To)
 			} else {
 				next = fmt.Sprintf("next: full send %s", nextStep.Info.To)
 			}
 			attribs := []string{}
 			if nextStep.Info.Resumed {
 				attribs = append(attribs, "resumed")
 			}
 			attribs = append(attribs, fmt.Sprintf("encrypted=%s", nextStep.Info.Encrypted))
 			next += fmt.Sprintf(" (%s)", strings.Join(attribs, ", "))
 		} else {
 			next = "" // individual FSes may still be in planning state
 		}
 	}
 	t.printfDrawIndentedAndWrappedIfMultiline("%s", next)
 	t.newline()
 }
 func ByteCountBinary(b int64) string {
 	const unit = 1024
 	if b < unit {
 		return fmt.Sprintf("%d B", b)
 	}
 	div, exp := int64(unit), 0
 	for n := b / unit; n >= unit; n /= unit {
 		div *= unit
 		exp++
 	}
 	return fmt.Sprintf("%.1f %ciB", float64(b)/float64(div), "KMGTPE"[exp])
 }
 func humanizeDuration(duration time.Duration) string {
 	days := int64(duration.Hours() / 24)
 	hours := int64(math.Mod(duration.Hours(), 24))
 	minutes := int64(math.Mod(duration.Minutes(), 60))
 	seconds := int64(math.Mod(duration.Seconds(), 60))
 	var parts []string
 	force := false
 	chunks := []int64{days, hours, minutes, seconds}
 	for i, chunk := range chunks {
 		if force || chunk > 0 {
 			padding := 0
 			if force {
 				padding = 2
 			}
 			parts = append(parts, fmt.Sprintf("%*d%c", padding, chunk, "dhms"[i]))
 			force = true
 		}
 	}
 	return strings.Join(parts, " ")
 }
@@ -1,74 +0,0 @@
 package config
 import (
 	"fmt"
 	"testing"
 	"github.com/stretchr/testify/assert"
 )
 func TestSendOptions(t *testing.T) {
 	tmpl := `
 jobs:
 - name: foo
  type: push
  connect:
    type: local
    listener_name: foo
    client_identity: bar
  filesystems: {"<": true}
  %s
  snapshotting:
    type: manual
  pruning:
    keep_sender:
    - type: last_n
      count: 10
    keep_receiver:
    - type: last_n
      count: 10
 `
 	encrypted_false := `
  send:
    encrypted: false
 `
 	encrypted_true := `
  send:
    encrypted: true
 `
 	encrypted_unspecified := `
  send: {}
 `
 	send_not_specified := `
 `
 	fill := func(s string) string { return fmt.Sprintf(tmpl, s) }
 	var c *Config
 	t.Run("encrypted_false", func(t *testing.T) {
 		c = testValidConfig(t, fill(encrypted_false))
 		encrypted := c.Jobs[0].Ret.(*PushJob).Send.Encrypted
 		assert.Equal(t, false, encrypted)
 	})
 	t.Run("encrypted_true", func(t *testing.T) {
 		c = testValidConfig(t, fill(encrypted_true))
 		encrypted := c.Jobs[0].Ret.(*PushJob).Send.Encrypted
 		assert.Equal(t, true, encrypted)
 	})
 	t.Run("encrypted_unspecified", func(t *testing.T) {
 		c, err := testConfig(t, fill(encrypted_unspecified))
 		assert.Error(t, err)
 		assert.Nil(t, c)
 	})
 	t.Run("send_not_specified", func(t *testing.T) {
 		c, err := testConfig(t, fill(send_not_specified))
 		assert.NoError(t, err)
 		assert.NotNil(t, c)
 	})
 }
@@ -1,90 +0,0 @@
 package config
 import (
 	"fmt"
 	"testing"
 	"time"
 	"github.com/stretchr/testify/assert"
 )
 func TestSnapshotting(t *testing.T) {
 	tmpl := `
 jobs:
 - name: foo
  type: push
  connect:
    type: local
    listener_name: foo
    client_identity: bar
  filesystems: {"<": true}
  %s
  pruning:
    keep_sender:
    - type: last_n
      count: 10
    keep_receiver:
    - type: last_n
      count: 10
 `
 	manual := `
  snapshotting:
    type: manual
 `
 	periodic := `
  snapshotting:
    type: periodic
    prefix: zrepl_
    interval: 10m
 `
 	hooks := `
  snapshotting:
    type: periodic
    prefix: zrepl_
    interval: 10m
    hooks:
    - type: command
      path: /tmp/path/to/command
    - type: command
      path: /tmp/path/to/command
      filesystems: { "zroot<": true, "<": false }
    - type: postgres-checkpoint
      dsn: "host=localhost port=5432 user=postgres sslmode=disable"
      filesystems: {
          "tank/postgres/data11": true
      }
    - type: mysql-lock-tables
      dsn: "root@tcp(localhost)/"
      filesystems: {
        "tank/mysql": true
      }
 `
 	fillSnapshotting := func(s string) string { return fmt.Sprintf(tmpl, s) }
 	var c *Config
 	t.Run("manual", func(t *testing.T) {
 		c = testValidConfig(t, fillSnapshotting(manual))
 		snm := c.Jobs[0].Ret.(*PushJob).Snapshotting.Ret.(*SnapshottingManual)
 		assert.Equal(t, "manual", snm.Type)
 	})
 	t.Run("periodic", func(t *testing.T) {
 		c = testValidConfig(t, fillSnapshotting(periodic))
 		snp := c.Jobs[0].Ret.(*PushJob).Snapshotting.Ret.(*SnapshottingPeriodic)
 		assert.Equal(t, "periodic", snp.Type)
 		assert.Equal(t, 10*time.Minute, snp.Interval)
 		assert.Equal(t, "zrepl_", snp.Prefix)
 	})
 	t.Run("hooks", func(t *testing.T) {
 		c = testValidConfig(t, fillSnapshotting(hooks))
 		hs := c.Jobs[0].Ret.(*PushJob).Snapshotting.Ret.(*SnapshottingPeriodic).Hooks
 		assert.Equal(t, hs[0].Ret.(*HookCommand).Filesystems["<"], true)
 		assert.Equal(t, hs[1].Ret.(*HookCommand).Filesystems["zroot<"], true)
 		assert.Equal(t, hs[2].Ret.(*HookPostgresCheckpoint).Filesystems["tank/postgres/data11"], true)
 		assert.Equal(t, hs[3].Ret.(*HookMySQLLockTables).Filesystems["tank/mysql"], true)
 	})
 }
@@ -1,88 +0,0 @@
 package config
 import (
 	"bufio"
 	"bytes"
 	"fmt"
 	"path"
 	"path/filepath"
 	"strings"
 	"testing"
 	"text/template"
 	"github.com/kr/pretty"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
 func TestSampleConfigsAreParsedWithoutErrors(t *testing.T) {
 	paths, err := filepath.Glob("./samples/*")
 	if err != nil {
 		t.Errorf("glob failed: %+v", err)
 	}
 	for _, p := range paths {
 		if path.Ext(p) != ".yml" {
 			t.Logf("skipping file %s", p)
 			continue
 		}
 		t.Run(p, func(t *testing.T) {
 			c, err := ParseConfig(p)
 			if err != nil {
 				t.Errorf("error parsing %s:\n%+v", p, err)
 			}
 			t.Logf("file: %s", p)
 			t.Log(pretty.Sprint(c))
 		})
 	}
 }
 // template must be a template/text template with a single '{{ . }}' as placehodler for val
 //nolint[:deadcode,unused]
 func testValidConfigTemplate(t *testing.T, tmpl string, val string) *Config {
 	tmp, err := template.New("master").Parse(tmpl)
 	if err != nil {
 		panic(err)
 	}
 	var buf bytes.Buffer
 	err = tmp.Execute(&buf, val)
 	if err != nil {
 		panic(err)
 	}
 	return testValidConfig(t, buf.String())
 }
 func testValidConfig(t *testing.T, input string) *Config {
 	t.Helper()
 	conf, err := testConfig(t, input)
 	require.NoError(t, err)
 	require.NotNil(t, conf)
 	return conf
 }
 func testConfig(t *testing.T, input string) (*Config, error) {
 	t.Helper()
 	return ParseConfigBytes([]byte(input))
 }
 func trimSpaceEachLineAndPad(s, pad string) string {
 	var out strings.Builder
 	scan := bufio.NewScanner(strings.NewReader(s))
 	for scan.Scan() {
 		fmt.Fprintf(&out, "%s%s\n", pad, bytes.TrimSpace(scan.Bytes()))
 	}
 	return out.String()
 }
 func TestTrimSpaceEachLineAndPad(t *testing.T) {
 	foo := `
 	foo
 	bar baz 
 	`
 	assert.Equal(t, "  \n  foo\n  bar baz\n  \n", trimSpaceEachLineAndPad(foo, "  "))
 }
@@ -1,41 +0,0 @@
 package filters
 import (
 	"strings"
 	"github.com/zrepl/zrepl/zfs"
 )
 type AnyFSVFilter struct{}
 func NewAnyFSVFilter() AnyFSVFilter {
 	return AnyFSVFilter{}
 }
 var _ zfs.FilesystemVersionFilter = AnyFSVFilter{}
 func (AnyFSVFilter) Filter(t zfs.VersionType, name string) (accept bool, err error) {
 	return true, nil
 }
 type PrefixFilter struct {
 	prefix    string
 	fstype    zfs.VersionType
 	fstypeSet bool // optionals anyone?
 }
 var _ zfs.FilesystemVersionFilter = &PrefixFilter{}
 func NewPrefixFilter(prefix string) *PrefixFilter {
 	return &PrefixFilter{prefix: prefix}
 }
 func NewTypedPrefixFilter(prefix string, versionType zfs.VersionType) *PrefixFilter {
 	return &PrefixFilter{prefix, versionType, true}
 }
 func (f *PrefixFilter) Filter(t zfs.VersionType, name string) (accept bool, err error) {
 	fstypeMatches := (!f.fstypeSet || t == f.fstype)
 	prefixMatches := strings.HasPrefix(name, f.prefix)
 	return fstypeMatches && prefixMatches, nil
 }
@@ -1,110 +0,0 @@
 package job
 import (
 	"fmt"
 	"testing"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 	"github.com/zrepl/zrepl/config"
 )
 func TestValidateReceivingSidesDoNotOverlap(t *testing.T) {
 	type testCase struct {
 		err   bool
 		input []string
 	}
 	tcs := []testCase{
 		{false, nil},
 		{false, []string{}},
 		{false, []string{""}}, // not our job to determine valid paths
 		{false, []string{"a"}},
 		{false, []string{"some/path"}},
 		{false, []string{"zroot/sink1", "zroot/sink2", "zroot/sink3"}},
 		{false, []string{"zroot/foo", "zroot/foobar"}},
 		{true, []string{"zroot/b", "zroot/b"}},
 		{true, []string{"zroot/foo", "zroot/foo/bar", "zroot/baz"}},
 		{false, []string{"a/x", "b/x"}},
 		{false, []string{"a", "b"}},
 		{true, []string{"a", "a"}},
 		{true, []string{"a/x/y", "a/x"}},
 		{true, []string{"a/x", "a/x/y"}},
 		{true, []string{"a/x", "b/x", "a/x/y"}},
 		{true, []string{"a", "a/b", "a/c", "a/b"}},
 		{true, []string{"a/b", "a/c", "a/b", "a/d", "a/c"}},
 	}
 	for _, tc := range tcs {
 		t.Logf("input: %v", tc.input)
 		err := validateReceivingSidesDoNotOverlap(tc.input)
 		if tc.err {
 			assert.Error(t, err)
 		} else {
 			assert.NoError(t, err)
 		}
 	}
 }
 func TestJobIDErrorHandling(t *testing.T) {
 	tmpl := `
 jobs:
 - name: %s
  type: push
  connect:
    type: local
    listener_name: foo
    client_identity: bar
  filesystems: {"<": true}
  snapshotting:
    type: manual
  pruning:
    keep_sender:
    - type: last_n
      count: 10
    keep_receiver:
    - type: last_n
      count: 10
 `
 	fill := func(s string) string { return fmt.Sprintf(tmpl, s) }
 	type Case struct {
 		jobName string
 		valid   bool
 	}
 	cases := []Case{
 		{"validjobname", true},
 		{"valid with spaces", true},
 		{"invalid\twith\ttabs", false},
 		{"invalid#withdelimiter", false},
 		{"invalid@withdelimiter", false},
 		{"withnewline\\nmiddle", false},
 		{"withnewline\\n", false},
 		{"withslash/", false},
 		{"withslash/inthemiddle", false},
 		{"/", false},
 	}
 	for i := range cases {
 		t.Run(cases[i].jobName, func(t *testing.T) {
 			c := cases[i]
 			conf, err := config.ParseConfigBytes([]byte(fill(c.jobName)))
 			require.NoError(t, err, "not expecting yaml-config to know about job ids")
 			require.NotNil(t, conf)
 			jobs, err := JobsFromConfig(conf)
 			if c.valid {
 				assert.NoError(t, err)
 				require.Len(t, jobs, 1)
 				assert.Equal(t, c.jobName, jobs[0].Name())
 			} else {
 				t.Logf("error: %s", err)
 				assert.Error(t, err)
 				assert.Nil(t, jobs)
 			}
 		})
 	}
 }
@@ -1,16 +0,0 @@
 package daemon
 import (
 	"github.com/zrepl/zrepl/cli"
 	"github.com/zrepl/zrepl/logger"
 )
 type Logger = logger.Logger
 var DaemonCmd = &cli.Subcommand{
 	Use:   "daemon",
 	Short: "run the zrepl daemon",
 	Run: func(subcommand *cli.Subcommand, args []string) error {
 		return Run(subcommand.Config())
 	},
 }
@@ -1,510 +0,0 @@
 package snapper
 import (
 	"context"
 	"fmt"
 	"sort"
 	"sync"
 	"time"
 	"github.com/pkg/errors"
 	"github.com/zrepl/zrepl/config"
 	"github.com/zrepl/zrepl/daemon/filters"
 	"github.com/zrepl/zrepl/daemon/hooks"
 	"github.com/zrepl/zrepl/logger"
 	"github.com/zrepl/zrepl/util/envconst"
 	"github.com/zrepl/zrepl/zfs"
 )
 //go:generate stringer -type=SnapState
 type SnapState uint
 const (
 	SnapPending SnapState = 1 << iota
 	SnapStarted
 	SnapDone
 	SnapError
 )
 // All fields protected by Snapper.mtx
 type snapProgress struct {
 	state SnapState
 	// SnapStarted, SnapDone, SnapError
 	name     string
 	startAt  time.Time
 	hookPlan *hooks.Plan
 	// SnapDone
 	doneAt time.Time
 	// SnapErr TODO disambiguate state
 	runResults hooks.PlanReport
 }
 type args struct {
 	ctx            context.Context
 	log            Logger
 	prefix         string
 	interval       time.Duration
 	fsf            *filters.DatasetMapFilter
 	snapshotsTaken chan<- struct{}
 	hooks          *hooks.List
 	dryRun         bool
 }
 type Snapper struct {
 	args args
 	mtx   sync.Mutex
 	state State
 	// set in state Plan, used in Waiting
 	lastInvocation time.Time
 	// valid for state Snapshotting
 	plan map[*zfs.DatasetPath]*snapProgress
 	// valid for state SyncUp and Waiting
 	sleepUntil time.Time
 	// valid for state Err
 	err error
 }
 //go:generate stringer -type=State
 type State uint
 const (
 	SyncUp State = 1 << iota
 	SyncUpErrWait
 	Planning
 	Snapshotting
 	Waiting
 	ErrorWait
 	Stopped
 )
 func (s State) sf() state {
 	m := map[State]state{
 		SyncUp:        syncUp,
 		SyncUpErrWait: wait,
 		Planning:      plan,
 		Snapshotting:  snapshot,
 		Waiting:       wait,
 		ErrorWait:     wait,
 		Stopped:       nil,
 	}
 	return m[s]
 }
 type updater func(u func(*Snapper)) State
 type state func(a args, u updater) state
 type contextKey int
 const (
 	contextKeyLog contextKey = 0
 )
 type Logger = logger.Logger
 func WithLogger(ctx context.Context, log Logger) context.Context {
 	return context.WithValue(ctx, contextKeyLog, log)
 }
 func getLogger(ctx context.Context) Logger {
 	if log, ok := ctx.Value(contextKeyLog).(Logger); ok {
 		return log
 	}
 	return logger.NewNullLogger()
 }
 func PeriodicFromConfig(g *config.Global, fsf *filters.DatasetMapFilter, in *config.SnapshottingPeriodic) (*Snapper, error) {
 	if in.Prefix == "" {
 		return nil, errors.New("prefix must not be empty")
 	}
 	if in.Interval <= 0 {
 		return nil, errors.New("interval must be positive")
 	}
 	hookList, err := hooks.ListFromConfig(&in.Hooks)
 	if err != nil {
 		return nil, errors.Wrap(err, "hook config error")
 	}
 	args := args{
 		prefix:   in.Prefix,
 		interval: in.Interval,
 		fsf:      fsf,
 		hooks:    hookList,
 		// ctx and log is set in Run()
 	}
 	return &Snapper{state: SyncUp, args: args}, nil
 }
 func (s *Snapper) Run(ctx context.Context, snapshotsTaken chan<- struct{}) {
 	getLogger(ctx).Debug("start")
 	defer getLogger(ctx).Debug("stop")
 	s.args.snapshotsTaken = snapshotsTaken
 	s.args.ctx = ctx
 	s.args.log = getLogger(ctx)
 	s.args.dryRun = false // for future expansion
 	u := func(u func(*Snapper)) State {
 		s.mtx.Lock()
 		defer s.mtx.Unlock()
 		if u != nil {
 			u(s)
 		}
 		return s.state
 	}
 	var st state = syncUp
 	for st != nil {
 		pre := u(nil)
 		st = st(s.args, u)
 		post := u(nil)
 		getLogger(ctx).
 			WithField("transition", fmt.Sprintf("%s=>%s", pre, post)).
 			Debug("state transition")
 	}
 }
 func onErr(err error, u updater) state {
 	return u(func(s *Snapper) {
 		s.err = err
 		preState := s.state
 		switch s.state {
 		case SyncUp:
 			s.state = SyncUpErrWait
 		case Planning:
 			fallthrough
 		case Snapshotting:
 			s.state = ErrorWait
 		}
 		s.args.log.WithError(err).WithField("pre_state", preState).WithField("post_state", s.state).Error("snapshotting error")
 	}).sf()
 }
 func onMainCtxDone(ctx context.Context, u updater) state {
 	return u(func(s *Snapper) {
 		s.err = ctx.Err()
 		s.state = Stopped
 	}).sf()
 }
 func syncUp(a args, u updater) state {
 	u(func(snapper *Snapper) {
 		snapper.lastInvocation = time.Now()
 	})
 	fss, err := listFSes(a.ctx, a.fsf)
 	if err != nil {
 		return onErr(err, u)
 	}
 	syncPoint, err := findSyncPoint(a.log, fss, a.prefix, a.interval)
 	if err != nil {
 		return onErr(err, u)
 	}
 	u(func(s *Snapper) {
 		s.sleepUntil = syncPoint
 	})
 	t := time.NewTimer(time.Until(syncPoint))
 	defer t.Stop()
 	select {
 	case <-t.C:
 		return u(func(s *Snapper) {
 			s.state = Planning
 		}).sf()
 	case <-a.ctx.Done():
 		return onMainCtxDone(a.ctx, u)
 	}
 }
 func plan(a args, u updater) state {
 	u(func(snapper *Snapper) {
 		snapper.lastInvocation = time.Now()
 	})
 	fss, err := listFSes(a.ctx, a.fsf)
 	if err != nil {
 		return onErr(err, u)
 	}
 	plan := make(map[*zfs.DatasetPath]*snapProgress, len(fss))
 	for _, fs := range fss {
 		plan[fs] = &snapProgress{state: SnapPending}
 	}
 	return u(func(s *Snapper) {
 		s.state = Snapshotting
 		s.plan = plan
 		s.err = nil
 	}).sf()
 }
 func snapshot(a args, u updater) state {
 	var plan map[*zfs.DatasetPath]*snapProgress
 	u(func(snapper *Snapper) {
 		plan = snapper.plan
 	})
 	hookMatchCount := make(map[hooks.Hook]int, len(*a.hooks))
 	for _, h := range *a.hooks {
 		hookMatchCount[h] = 0
 	}
 	anyFsHadErr := false
 	// TODO channel programs -> allow a little jitter?
 	for fs, progress := range plan {
 		suffix := time.Now().In(time.UTC).Format("20060102_150405_000")
 		snapname := fmt.Sprintf("%s%s", a.prefix, suffix)
 		l := a.log.
 			WithField("fs", fs.ToString()).
 			WithField("snap", snapname)
 		hookEnvExtra := hooks.Env{
 			hooks.EnvFS:       fs.ToString(),
 			hooks.EnvSnapshot: snapname,
 		}
 		jobCallback := hooks.NewCallbackHookForFilesystem("snapshot", fs, func(_ context.Context) (err error) {
 			l.Debug("create snapshot")
 			err = zfs.ZFSSnapshot(fs, snapname, false) // TODO propagagte context to ZFSSnapshot
 			if err != nil {
 				l.WithError(err).Error("cannot create snapshot")
 			}
 			return
 		})
 		fsHadErr := false
 		var planReport hooks.PlanReport
 		var plan *hooks.Plan
 		{
 			filteredHooks, err := a.hooks.CopyFilteredForFilesystem(fs)
 			if err != nil {
 				l.WithError(err).Error("unexpected filter error")
 				fsHadErr = true
 				goto updateFSState
 			}
 			// account for running hooks
 			for _, h := range filteredHooks {
 				hookMatchCount[h] = hookMatchCount[h] + 1
 			}
 			var planErr error
 			plan, planErr = hooks.NewPlan(&filteredHooks, hooks.PhaseSnapshot, jobCallback, hookEnvExtra)
 			if planErr != nil {
 				fsHadErr = true
 				l.WithError(planErr).Error("cannot create job hook plan")
 				goto updateFSState
 			}
 		}
 		u(func(snapper *Snapper) {
 			progress.name = snapname
 			progress.startAt = time.Now()
 			progress.hookPlan = plan
 			progress.state = SnapStarted
 		})
 		{
 			l := hooks.GetLogger(a.ctx).WithField("fs", fs.ToString()).WithField("snap", snapname)
 			l.WithField("report", plan.Report().String()).Debug("begin run job plan")
 			plan.Run(hooks.WithLogger(a.ctx, l), a.dryRun)
 			planReport = plan.Report()
 			fsHadErr = planReport.HadError() // not just fatal errors
 			if fsHadErr {
 				l.WithField("report", planReport.String()).Error("end run job plan with error")
 			} else {
 				l.WithField("report", planReport.String()).Info("end run job plan successful")
 			}
 		}
 	updateFSState:
 		anyFsHadErr = anyFsHadErr || fsHadErr
 		u(func(snapper *Snapper) {
 			progress.doneAt = time.Now()
 			progress.state = SnapDone
 			if fsHadErr {
 				progress.state = SnapError
 			}
 			progress.runResults = planReport
 		})
 	}
 	select {
 	case a.snapshotsTaken <- struct{}{}:
 	default:
 		if a.snapshotsTaken != nil {
 			a.log.Warn("callback channel is full, discarding snapshot update event")
 		}
 	}
 	for h, mc := range hookMatchCount {
 		if mc == 0 {
 			hookIdx := -1
 			for idx, ah := range *a.hooks {
 				if ah == h {
 					hookIdx = idx
 					break
 				}
 			}
 			a.log.WithField("hook", h.String()).WithField("hook_number", hookIdx+1).Warn("hook did not match any snapshotted filesystems")
 		}
 	}
 	return u(func(snapper *Snapper) {
 		if anyFsHadErr {
 			snapper.state = ErrorWait
 			snapper.err = errors.New("one or more snapshots could not be created, check logs for details")
 		} else {
 			snapper.state = Waiting
 			snapper.err = nil
 		}
 	}).sf()
 }
 func wait(a args, u updater) state {
 	var sleepUntil time.Time
 	u(func(snapper *Snapper) {
 		lastTick := snapper.lastInvocation
 		snapper.sleepUntil = lastTick.Add(a.interval)
 		sleepUntil = snapper.sleepUntil
 		log := a.log.WithField("sleep_until", sleepUntil).WithField("duration", a.interval)
 		logFunc := log.Debug
 		if snapper.state == ErrorWait || snapper.state == SyncUpErrWait {
 			logFunc = log.Error
 		}
 		logFunc("enter wait-state after error")
 	})
 	t := time.NewTimer(time.Until(sleepUntil))
 	defer t.Stop()
 	select {
 	case <-t.C:
 		return u(func(snapper *Snapper) {
 			snapper.state = Planning
 		}).sf()
 	case <-a.ctx.Done():
 		return onMainCtxDone(a.ctx, u)
 	}
 }
 func listFSes(ctx context.Context, mf *filters.DatasetMapFilter) (fss []*zfs.DatasetPath, err error) {
 	return zfs.ZFSListMapping(ctx, mf)
 }
 var syncUpWarnNoSnapshotUntilSyncupMinDuration = envconst.Duration("ZREPL_SNAPPER_SYNCUP_WARN_MIN_DURATION", 1*time.Second)
 // see docs/snapshotting.rst
 func findSyncPoint(log Logger, fss []*zfs.DatasetPath, prefix string, interval time.Duration) (syncPoint time.Time, err error) {
 	const (
 		prioHasVersions int = iota
 		prioNoVersions
 	)
 	type snapTime struct {
 		ds   *zfs.DatasetPath
 		prio int // lower is higher
 		time time.Time
 	}
 	if len(fss) == 0 {
 		return time.Now(), nil
 	}
 	snaptimes := make([]snapTime, 0, len(fss))
 	hardErrs := 0
 	now := time.Now()
 	log.Debug("examine filesystem state to find sync point")
 	for _, d := range fss {
 		l := log.WithField("fs", d.ToString())
 		syncPoint, err := findSyncPointFSNextOptimalSnapshotTime(l, now, interval, prefix, d)
 		if err == findSyncPointFSNoFilesystemVersionsErr {
 			snaptimes = append(snaptimes, snapTime{
 				ds:   d,
 				prio: prioNoVersions,
 				time: now,
 			})
 		} else if err != nil {
 			hardErrs++
 			l.WithError(err).Error("cannot determine optimal sync point for this filesystem")
 		} else {
 			l.WithField("syncPoint", syncPoint).Debug("found optimal sync point for this filesystem")
 			snaptimes = append(snaptimes, snapTime{
 				ds:   d,
 				prio: prioHasVersions,
 				time: syncPoint,
 			})
 		}
 	}
 	if hardErrs == len(fss) {
 		return time.Time{}, fmt.Errorf("hard errors in determining sync point for every matching filesystem")
 	}
 	if len(snaptimes) == 0 {
 		panic("implementation error: loop must either inc hardErrs or add result to snaptimes")
 	}
 	// sort ascending by (prio,time)
 	// => those filesystems with versions win over those without any
 	sort.Slice(snaptimes, func(i, j int) bool {
 		if snaptimes[i].prio == snaptimes[j].prio {
 			return snaptimes[i].time.Before(snaptimes[j].time)
 		}
 		return snaptimes[i].prio < snaptimes[j].prio
 	})
 	winnerSyncPoint := snaptimes[0].time
 	l := log.WithField("syncPoint", winnerSyncPoint.String())
 	l.Info("determined sync point")
 	if winnerSyncPoint.Sub(now) > syncUpWarnNoSnapshotUntilSyncupMinDuration {
 		for _, st := range snaptimes {
 			if st.prio == prioNoVersions {
 				l.WithField("fs", st.ds.ToString()).Warn("filesystem will not be snapshotted until sync point")
 			}
 		}
 	}
 	return snaptimes[0].time, nil
 }
 var findSyncPointFSNoFilesystemVersionsErr = fmt.Errorf("no filesystem versions")
 func findSyncPointFSNextOptimalSnapshotTime(l Logger, now time.Time, interval time.Duration, prefix string, d *zfs.DatasetPath) (time.Time, error) {
 	fsvs, err := zfs.ZFSListFilesystemVersions(d, filters.NewTypedPrefixFilter(prefix, zfs.Snapshot))
 	if err != nil {
 		return time.Time{}, errors.Wrap(err, "list filesystem versions")
 	}
 	if len(fsvs) <= 0 {
 		return time.Time{}, findSyncPointFSNoFilesystemVersionsErr
 	}
 	// Sort versions by creation
 	sort.SliceStable(fsvs, func(i, j int) bool {
 		return fsvs[i].CreateTXG < fsvs[j].CreateTXG
 	})
 	latest := fsvs[len(fsvs)-1]
 	l.WithField("creation", latest.Creation).Debug("found latest snapshot")
 	since := now.Sub(latest.Creation)
 	if since < 0 {
 		return time.Time{}, fmt.Errorf("snapshot %q is from the future: creation=%q now=%q", latest.ToAbsPath(d), latest.Creation, now)
 	}
 	return latest.Creation.Add(interval), nil
 }
@@ -1,48 +0,0 @@
 package snapper
 import (
 	"context"
 	"fmt"
 	"github.com/zrepl/zrepl/config"
 	"github.com/zrepl/zrepl/daemon/filters"
 )
 // FIXME: properly abstract snapshotting:
 //   - split up things that trigger snapshotting from the mechanism
 //     - timer-based trigger (periodic)
 //     - call from control socket (manual)
 //     - mixed modes?
 //   - support a `zrepl snapshot JOBNAME` subcommand for config.SnapshottingManual
 type PeriodicOrManual struct {
 	s *Snapper
 }
 func (s *PeriodicOrManual) Run(ctx context.Context, wakeUpCommon chan<- struct{}) {
 	if s.s != nil {
 		s.s.Run(ctx, wakeUpCommon)
 	}
 }
 // Returns nil if manual
 func (s *PeriodicOrManual) Report() *Report {
 	if s.s != nil {
 		return s.s.Report()
 	}
 	return nil
 }
 func FromConfig(g *config.Global, fsf *filters.DatasetMapFilter, in config.SnapshottingEnum) (*PeriodicOrManual, error) {
 	switch v := in.Ret.(type) {
 	case *config.SnapshottingPeriodic:
 		snapper, err := PeriodicFromConfig(g, fsf, v)
 		if err != nil {
 			return nil, err
 		}
 		return &PeriodicOrManual{snapper}, nil
 	case *config.SnapshottingManual:
 		return &PeriodicOrManual{}, nil
 	default:
 		return nil, fmt.Errorf("unknown snapshotting type %T", v)
 	}
 }
@@ -1,118 +0,0 @@
 package snapper
 import (
 	"fmt"
 	"sort"
 	"strings"
 	"time"
 	"github.com/zrepl/zrepl/daemon/hooks"
 )
 type Report struct {
 	State State
 	// valid in state SyncUp and Waiting
 	SleepUntil time.Time
 	// valid in state Err
 	Error string
 	// valid in state Snapshotting
 	Progress []*ReportFilesystem
 }
 type ReportFilesystem struct {
 	Path  string
 	State SnapState
 	// Valid in SnapStarted and later
 	SnapName      string
 	StartAt       time.Time
 	Hooks         string
 	HooksHadError bool
 	// Valid in SnapDone | SnapError
 	DoneAt time.Time
 }
 func errOrEmptyString(e error) string {
 	if e != nil {
 		return e.Error()
 	}
 	return ""
 }
 func (s *Snapper) Report() *Report {
 	s.mtx.Lock()
 	defer s.mtx.Unlock()
 	pReps := make([]*ReportFilesystem, 0, len(s.plan))
 	for fs, p := range s.plan {
 		var hooksStr string
 		var hooksHadError bool
 		if p.hookPlan != nil {
 			hr := p.hookPlan.Report()
 			// FIXME: technically this belongs into client
 			// but we can't serialize hooks.Step ATM
 			rightPad := func(str string, length int, pad string) string {
 				if len(str) > length {
 					return str[:length]
 				}
 				return str + strings.Repeat(pad, length-len(str))
 			}
 			hooksHadError = hr.HadError()
 			rows := make([][]string, len(hr))
 			const numCols = 4
 			lens := make([]int, numCols)
 			for i, e := range hr {
 				rows[i] = make([]string, numCols)
 				rows[i][0] = fmt.Sprintf("%d", i+1)
 				rows[i][1] = e.Status.String()
 				runTime := "..."
 				if e.Status != hooks.StepPending {
 					runTime = e.End.Sub(e.Begin).Round(time.Millisecond).String()
 				}
 				rows[i][2] = runTime
 				rows[i][3] = ""
 				if e.Report != nil {
 					rows[i][3] = e.Report.String()
 				}
 				for j, col := range lens {
 					if len(rows[i][j]) > col {
 						lens[j] = len(rows[i][j])
 					}
 				}
 			}
 			rowsFlat := make([]string, len(hr))
 			for i, r := range rows {
 				colsPadded := make([]string, len(r))
 				for j, c := range r[:len(r)-1] {
 					colsPadded[j] = rightPad(c, lens[j], " ")
 				}
 				colsPadded[len(r)-1] = r[len(r)-1]
 				rowsFlat[i] = strings.Join(colsPadded, " ")
 			}
 			hooksStr = strings.Join(rowsFlat, "\n")
 		}
 		pReps = append(pReps, &ReportFilesystem{
 			Path:          fs.ToString(),
 			State:         p.state,
 			SnapName:      p.name,
 			StartAt:       p.startAt,
 			DoneAt:        p.doneAt,
 			Hooks:         hooksStr,
 			HooksHadError: hooksHadError,
 		})
 	}
 	sort.Slice(pReps, func(i, j int) bool {
 		return strings.Compare(pReps[i].Path, pReps[j].Path) == -1
 	})
 	r := &Report{
 		State:      s.state,
 		SleepUntil: s.sleepUntil,
 		Error:      errOrEmptyString(s.err),
 		Progress:   pReps,
 	}
 	return r
 }
@@ -0,0 +1 @@
 packaging/deb/debian
@@ -1,595 +0,0 @@
 {
  "annotations": {
    "list": [
      {
        "$$hashKey": "object:3351",
        "builtIn": 1,
        "datasource": "-- Grafana --",
        "enable": true,
        "hide": true,
        "iconColor": "rgba(0, 211, 255, 1)",
        "name": "Annotations & Alerts",
        "type": "dashboard"
      }
    ]
  },
  "editable": true,
  "gnetId": null,
  "graphTooltip": 1,
  "id": 7,
  "iteration": 1552746418826,
  "links": [],
  "panels": [
    {
      "content": "# zrepl Prometheus Metrics\n\nzrepl exposes Prometheus metrics and ships with this Grafana dashboard.\nThe exported metrics are suitable for health checks:\n\n* The log should generally be warning & error-free\n  * The `Log Messages that require attention` graph visualizes log message counts indicating problems.\n* The number of goroutines should not grow unboundedly over time.\n  * During replication, the number of goroutines can be way higher than during idle time.\n  * If the goroutine count grows with each replication, there is clearly a goroutine leak. Please open a bug report.\n* The sys memory consumption should not grow unboundedly over time.\n  * Note that the Go runtime pre-allocates some of its heap from the OS.\n  * zrepl actually uses much less memory than allocated from the OS.\n  * Since Go 1.11, Go pre-allocates more aggressively.\n* Monitor that some data is replicated, although that metric does not guarantee that replication was successful.\n\n**In general, note that the exported metrics are not stable unless declared otherwise.**",
      "gridPos": {
        "h": 9,
        "w": 24,
        "x": 0,
        "y": 0
      },
      "id": 35,
      "mode": "markdown",
      "title": "Panel Title",
      "type": "text"
    },
    {
      "aliasColors": {},
      "bars": false,
      "dashLength": 10,
      "dashes": false,
      "datasource": null,
      "fill": 1,
      "gridPos": {
        "h": 9,
        "w": 12,
        "x": 0,
        "y": 9
      },
      "id": 15,
      "legend": {
        "avg": false,
        "current": false,
        "max": false,
        "min": false,
        "show": true,
        "total": false,
        "values": false
      },
      "lines": true,
      "linewidth": 1,
      "links": [],
      "nullPointMode": "null",
      "percentage": false,
      "pointradius": 5,
      "points": false,
      "renderer": "flot",
      "seriesOverrides": [],
      "spaceLength": 10,
      "stack": true,
      "steppedLine": false,
      "targets": [
        {
          "$$hashKey": "object:3436",
          "expr": "up{job='$prom_job_name'}",
          "format": "time_series",
          "intervalFactor": 1,
          "refId": "A"
        }
      ],
      "thresholds": [],
      "timeFrom": null,
      "timeShift": null,
      "title": "zrepl Instances Up",
      "tooltip": {
        "shared": true,
        "sort": 0,
        "value_type": "individual"
      },
      "type": "graph",
      "xaxis": {
        "buckets": null,
        "mode": "time",
        "name": null,
        "show": true,
        "values": []
      },
      "yaxes": [
        {
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": "5",
          "min": "0",
          "show": true
        },
        {
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": null,
          "show": true
        }
      ]
    },
    {
      "aliasColors": {},
      "bars": false,
      "dashLength": 10,
      "dashes": false,
      "datasource": null,
      "fill": 1,
      "gridPos": {
        "h": 9,
        "w": 12,
        "x": 12,
        "y": 9
      },
      "id": 22,
      "legend": {
        "avg": false,
        "current": false,
        "max": false,
        "min": false,
        "show": true,
        "total": false,
        "values": false
      },
      "lines": true,
      "linewidth": 1,
      "links": [],
      "nullPointMode": "null",
      "percentage": false,
      "pointradius": 5,
      "points": false,
      "renderer": "flot",
      "seriesOverrides": [],
      "spaceLength": 10,
      "stack": false,
      "steppedLine": false,
      "targets": [
        {
          "expr": "increase(zrepl_daemon_log_entries{job='$prom_job_name',level=~'warn|error'}[$__interval])",
          "format": "time_series",
          "intervalFactor": 1,
          "refId": "A"
        }
      ],
      "thresholds": [],
      "timeFrom": null,
      "timeShift": null,
      "title": "Log Messages that require attention",
      "tooltip": {
        "shared": true,
        "sort": 0,
        "value_type": "individual"
      },
      "type": "graph",
      "xaxis": {
        "buckets": null,
        "mode": "time",
        "name": null,
        "show": true,
        "values": []
      },
      "yaxes": [
        {
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": "0",
          "show": true
        },
        {
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": null,
          "show": true
        }
      ]
    },
    {
      "aliasColors": {},
      "bars": false,
      "dashLength": 10,
      "dashes": false,
      "datasource": null,
      "fill": 1,
      "gridPos": {
        "h": 9,
        "w": 12,
        "x": 0,
        "y": 18
      },
      "id": 33,
      "legend": {
        "avg": false,
        "current": false,
        "max": false,
        "min": false,
        "show": true,
        "total": false,
        "values": false
      },
      "lines": true,
      "linewidth": 1,
      "links": [],
      "nullPointMode": "null",
      "percentage": false,
      "pointradius": 5,
      "points": false,
      "renderer": "flot",
      "seriesOverrides": [
        {
          "alias": "/replicated bytes in last.*/",
          "yaxis": 2
        }
      ],
      "spaceLength": 10,
      "stack": false,
      "steppedLine": false,
      "targets": [
        {
          "expr": "sum(rate(zrepl_replication_bytes_replicated{job='$prom_job_name'}[$__interval])) by (zrepl_job)",
          "format": "time_series",
          "hide": false,
          "interval": "",
          "intervalFactor": 1,
          "legendFormat": "replication data rate zrepl_job={{zrepl_job}}",
          "refId": "A"
        },
        {
          "expr": "sum(increase(zrepl_replication_bytes_replicated{job='$prom_job_name'}[10m])) by (zrepl_job)",
          "format": "time_series",
          "hide": false,
          "interval": "",
          "intervalFactor": 1,
          "legendFormat": "replicated bytes in last 10min zrepl_job={{zrepl_job}}",
          "refId": "B"
        }
      ],
      "thresholds": [],
      "timeFrom": null,
      "timeShift": null,
      "title": "Replication Data Rate and Volume(integrates last 10min)",
      "tooltip": {
        "shared": true,
        "sort": 0,
        "value_type": "individual"
      },
      "type": "graph",
      "xaxis": {
        "buckets": null,
        "mode": "time",
        "name": null,
        "show": true,
        "values": []
      },
      "yaxes": [
        {
          "format": "Bps",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": null,
          "show": true
        },
        {
          "format": "bytes",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": null,
          "show": true
        }
      ]
    },
    {
      "aliasColors": {},
      "bars": false,
      "dashLength": 10,
      "dashes": false,
      "datasource": null,
      "fill": 1,
      "gridPos": {
        "h": 9,
        "w": 12,
        "x": 12,
        "y": 18
      },
      "id": 23,
      "legend": {
        "avg": false,
        "current": false,
        "max": false,
        "min": false,
        "show": true,
        "total": false,
        "values": false
      },
      "lines": true,
      "linewidth": 1,
      "links": [],
      "nullPointMode": "null",
      "percentage": false,
      "pointradius": 5,
      "points": false,
      "renderer": "flot",
      "seriesOverrides": [],
      "spaceLength": 10,
      "stack": false,
      "steppedLine": false,
      "targets": [
        {
          "expr": "sum(increase(zrepl_daemon_log_entries{job='$prom_job_name',zrepl_job=~\"^[^_].*\"}[$__interval])) by (instance,zrepl_job)",
          "format": "time_series",
          "intervalFactor": 1,
          "refId": "A"
        }
      ],
      "thresholds": [],
      "timeFrom": null,
      "timeShift": null,
      "title": "Log Activity (without internal jobs)",
      "tooltip": {
        "shared": true,
        "sort": 0,
        "value_type": "individual"
      },
      "type": "graph",
      "xaxis": {
        "buckets": null,
        "mode": "time",
        "name": null,
        "show": true,
        "values": []
      },
      "yaxes": [
        {
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": "0",
          "show": true
        },
        {
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": null,
          "show": true
        }
      ]
    },
    {
      "aliasColors": {},
      "bars": false,
      "dashLength": 10,
      "dashes": false,
      "datasource": null,
      "fill": 1,
      "gridPos": {
        "h": 9,
        "w": 12,
        "x": 0,
        "y": 27
      },
      "id": 17,
      "legend": {
        "avg": false,
        "current": false,
        "max": false,
        "min": false,
        "show": true,
        "total": false,
        "values": false
      },
      "lines": true,
      "linewidth": 1,
      "links": [],
      "nullPointMode": "null",
      "percentage": false,
      "pointradius": 5,
      "points": false,
      "renderer": "flot",
      "seriesOverrides": [],
      "spaceLength": 10,
      "stack": false,
      "steppedLine": false,
      "targets": [
        {
          "$$hashKey": "object:3535",
          "expr": "go_memstats_sys_bytes{job='$prom_job_name'}",
          "format": "time_series",
          "hide": false,
          "intervalFactor": 1,
          "refId": "A"
        }
      ],
      "thresholds": [],
      "timeFrom": null,
      "timeShift": null,
      "title": "Memory Allocated by the Go runtime from the OS (should not grow unboundedly)",
      "tooltip": {
        "shared": true,
        "sort": 0,
        "value_type": "individual"
      },
      "type": "graph",
      "xaxis": {
        "buckets": null,
        "mode": "time",
        "name": null,
        "show": true,
        "values": []
      },
      "yaxes": [
        {
          "format": "bytes",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": "0",
          "show": true
        },
        {
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": null,
          "show": true
        }
      ]
    },
    {
      "aliasColors": {},
      "bars": false,
      "dashLength": 10,
      "dashes": false,
      "datasource": null,
      "fill": 1,
      "gridPos": {
        "h": 9,
        "w": 12,
        "x": 12,
        "y": 27
      },
      "id": 19,
      "legend": {
        "avg": false,
        "current": false,
        "max": false,
        "min": false,
        "show": true,
        "total": false,
        "values": false
      },
      "lines": true,
      "linewidth": 1,
      "links": [],
      "nullPointMode": "null",
      "percentage": false,
      "pointradius": 5,
      "points": false,
      "renderer": "flot",
      "seriesOverrides": [],
      "spaceLength": 10,
      "stack": false,
      "steppedLine": false,
      "targets": [
        {
          "expr": "go_goroutines{job='$prom_job_name'}",
          "format": "time_series",
          "intervalFactor": 1,
          "refId": "A"
        }
      ],
      "thresholds": [],
      "timeFrom": null,
      "timeShift": null,
      "title": "number of goroutines (should not grow unboundedly)",
      "tooltip": {
        "shared": true,
        "sort": 0,
        "value_type": "individual"
      },
      "type": "graph",
      "xaxis": {
        "buckets": null,
        "mode": "time",
        "name": null,
        "show": true,
        "values": []
      },
      "yaxes": [
        {
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": "0",
          "show": true
        },
        {
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": null,
          "show": true
        }
      ]
    }
  ],
  "refresh": "1m",
  "schemaVersion": 16,
  "style": "dark",
  "tags": [],
  "templating": {
    "list": [
      {
        "allValue": null,
        "current": {
          "text": "zrepl",
          "value": "zrepl"
        },
        "datasource": "prometheus",
        "hide": 0,
        "includeAll": false,
        "label": "Prometheus Job Name",
        "multi": false,
        "name": "prom_job_name",
        "options": [],
        "query": "label_values(up, job)",
        "refresh": 1,
        "regex": "",
        "sort": 1,
        "tagValuesQuery": "",
        "tags": [],
        "tagsQuery": "",
        "type": "query",
        "useTags": false
      }
    ]
  },
  "time": {
    "from": "now-2d",
    "to": "now"
  },
  "timepicker": {
    "refresh_intervals": [
      "5s",
      "10s",
      "30s",
      "1m",
      "5m",
      "15m",
      "30m",
      "1h",
      "2h",
      "1d"
    ],
    "time_options": [
      "5m",
      "15m",
      "1h",
      "6h",
      "12h",
      "24h",
      "2d",
      "7d",
      "30d"
    ]
  },
  "timezone": "",
  "title": "zrepl 0.1",
  "uid": "xTljn4qmk",
  "version": 6
 }
@@ -0,0 +1,23 @@
 #!/sbin/openrc-run
 command='/usr/local/bin/zrepl'
 command_args='daemon'
 command_background='true'
 pidfile="/run/${RC_SVCNAME}.pid"
 output_log="/var/log/${RC_SVCNAME}.log"
 error_log="/var/log/${RC_SVCNAME}.log"
 zrepl_runtime_dir='/var/run/zrepl'
 start() {
 	mkdir -p "$zrepl_runtime_dir/stdinserver"
 	chmod -R 0700 "$zrepl_runtime_dir"
 	default_start
 }
 stop() {
 	rm -rf "$zrepl_runtime_dir"
 	default_stop
 }
 # vi: noet sw=8 sts=0
@@ -9,25 +9,8 @@ ExecStart=/usr/local/bin/zrepl --config /etc/zrepl/zrepl.yml daemon
 RuntimeDirectory=zrepl zrepl/stdinserver
 RuntimeDirectoryMode=0700
-ProtectSystem=strict
+# Make Go produce coredumps
-#PrivateDevices=yes # TODO ZFS needs access to /dev/zfs, could we limit this?
+Environment=GOTRACEBACK='crash'
 ProtectKernelTunables=yes
 ProtectControlGroups=yes
 PrivateTmp=yes
 #PrivateUsers=yes # TODO Does not work, why?
 ProtectKernelModules=true
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
 RestrictNamespaces=true
 RestrictRealtime=yes
 SystemCallArchitectures=native
 ProtectHome=read-only
 # ProtectHome=tmpfs totally possible, not by default though because of Debian stretch
 # SystemCallFilter
 #   ~@privileged doesn't work with Ubuntu 18.04 ssh
 SystemCallFilter=~ @mount @cpu-emulation @keyring @module @obsolete @raw-io @debug @clock @resources
 [Install]
 WantedBy=multi-user.target
@@ -0,0 +1 @@
 3.14
@@ -10,11 +10,11 @@ BUILDDIR      = _build
 # Put it first so that "make" without argument is like "make help".
 help:
-	@$(SPHINXBUILD) -M help "$(SOURCEDIR)" "$(BUILDDIR)" -c sphinxconf $(SPHINXOPTS) $(O)
+	@$(SPHINXBUILD) -M help "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O)
 .PHONY: help Makefile
 # Catch-all target: route all unknown targets to Sphinx using the new
 # "make mode" option.  $(O) is meant as a shortcut for $(SPHINXOPTS).
 %: Makefile
-	@$(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" -c sphinxconf $(SPHINXOPTS) $(O)
+	@$(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O)
@@ -0,0 +1,43 @@
 /* https://github.com/sphinx-contrib/sphinxcontrib-versioning/blob/0b56210959c6b21bbb730072e81876491b4e1371/sphinxcontrib/versioning/_static/banner.css */
 .scv-banner {
    padding: 3px;
    border-radius: 2px;
    font-size: 80%;
    text-align: center;
    color: white;
    background: #d40 linear-gradient(-45deg,
        rgba(255, 255, 255, 0.2) 0%,
        rgba(255, 255, 255, 0.2) 25%,
        transparent 25%,
        transparent 50%,
        rgba(255, 255, 255, 0.2) 50%,
        rgba(255, 255, 255, 0.2) 75%,
        transparent 75%,
        transparent
    );
    background-size: 28px 28px;
 }
 .scv-banner > a {
    color: white;
 }
 .scv-sphinx_rtd_theme {
    background-color: #2980B9;
 }
 .scv-bizstyle {
    background-color: #336699;
 }
 .scv-classic {
    text-align: center !important;
 }
 .scv-traditional {
    text-align: center !important;
 }
@@ -0,0 +1 @@
 {% extends "!page.html" %}
@@ -0,0 +1,24 @@
 <div class="rst-versions" data-toggle="rst-versions" role="note" aria-label="versions">
  <span class="rst-current-version" data-toggle="rst-current-version">
    <span class="fa fa-book"> Other Versions</span>
    v: latest
    <span class="fa fa-caret-down"></span>
  </span>
  <div class="rst-other-versions">
    <dl>
      <dt>Releases</dt>
      <dd><a href="https://github.com/zrepl/zrepl/releases/tag/v0.6.1">v0.6.1</a></dd>
      <dd><a href="https://github.com/zrepl/zrepl/releases/tag/v0.5.0">v0.5.0</a></dd>
      <dd><a href="https://github.com/zrepl/zrepl/releases/tag/v0.4.0">v0.4.0</a></dd>
      <dd><a href="https://github.com/zrepl/zrepl/releases">All releases...</a></dd>
    </dl>
    <dl>
      <dt>Note</dt>
      <dd style="white-space: normal;">
        Release-specific docs are in the
        <span style="font-family: monospace;">zrepl-noarch.tar</span>
        asset on each GitHub release.
      </dd>
    </dl>
  </div>
 </div>
@@ -6,26 +6,172 @@
 .. |docs| replace:: [DOCS]
 .. |feature| replace:: [FEATURE]
 .. |mig| replace:: **[MIGRATION]**
 .. |maint| replace:: [MAINT]
 .. _changelog:
 Changelog
 =========
-The changelog summarizes bugfixes that are deemed relevant for users and package maintainers.
+0.7.0
-Developers should consult the git commit log or GitHub issue tracker.
+-----
-We use the following annotations for classifying changes:
+* |feature| Config file inclusion using ``include`` directive.
  This allows distributing zrepl job definitions across multiple YAML files in a ``conf.d`` style directory.
  (:commit:`4d6583e`, thanks, `@ZeyadTamimi <https://github.com/zeyadtamimi>`_).
 * |feature| Add configurable timezone for snapshot name timestamps. The default remains UTC. (:commit:`b9b9ad1`, thanks, `@mjasnik <https://github.com/mjasnik>`_).
 * |feature| Improve Grafana dashboard with additional panels and refinements (:commit:`3f75127`, thanks, `@deajan <https://github.com/deajan>`_).
 * |bugfix| Fix replication of placeholder filesystems (:commit:`5615f49`).
 * |bugfix| Avoid using the word "error" in info-level log lines about ZFS command execution (:commit:`d3b2295`, thanks, `@bakhtiyarneyman <https://github.com/bakhtiyarneyman>`_).
 * |bugfix| Detect duplicate and internal job names at config parse time.
  zrepl will now refuse to load a config with duplicate or internally reserved job names, instead of failing later at daemon startup.
  (:commit:`860a9be`).
 * |docs| Add installation instructions for openSUSE (:commit:`40c4827`, thanks, `@findesgh <https://github.com/findesgh>`_).
 * |docs| Improve documentation on ``send_properties`` configuration and NFS/SMB considerations (:commit:`b5d8538`, thanks, `@Malvineous <https://github.com/Malvineous>`_).
 * |docs| Warn more prominently about the risks of the ``not_replicated`` keep rule (:commit:`affe00a`, thanks, `@wxiaoguang <https://github.com/wxiaoguang>`_).
 * |docs| Improve TLS/EasyRSA setup instructions (:commit:`e524b60`, thanks, `@alorimer <https://github.com/alorimer>`_).
 * |docs| ``zrepl.github.io``: auto-publish from ``master`` branch, retire ``stable`` branch (:commit:`4f950bb`).
 * |maint| ``zrepl status``: switch from the unmaintained ``cview`` fork back to the actively maintained ``tview`` library (:commit:`d7ede3f`).
 * |maint| Update to Go 1.25 toolchain with Go 1.24 language level & Go dependencies
 * |maint| Debian packages: proper bash completion placement (:commit:`2923009`)
 * |maint| RPM packages: AlmaLinux 8 for RPM builds (:commit:`27f4ad1`).
 * |maint| Improve build system & CI setup
-* |break_config| Change that breaks the config.
+.. NOTE::
-  As a package maintainer, make sure to warn your users about config breakage somehow.
+  |  zrepl is a spare-time project primarily developed by `Christian Schwarz <https://cschwarz.com>`_.
-* |break| Change that breaks interoperability or persistent state representation with previous releases.
+  |  You can support maintenance and feature development through one of the following services:
-  As a package maintainer, make sure to warn your users about config breakage somehow.
+  |  |Donate via Patreon| |Donate via GitHub Sponsors| |Donate via Liberapay| |Donate via PayPal|
-  Note that even updating the package on both sides might not be sufficient, e.g. if persistent state needs to be migrated to a new format.
+  |  Note that PayPal processing fees are relatively high for small donations.
-* |mig| Migration that must be run by the user.
+  |  For SEPA wire transfer and **commercial support**, please `contact Christian directly <https://cschwarz.com>`_.
-* |feature| Change that introduces new functionality.
+
-* |bugfix| Change that fixes a bug, no regressions or incompatibilities expected.
+0.6.1
-* |docs| Change to the documentation.
+-----
 * |feature| add metric to detect filesystems rules that don't match any local dataset (thanks, `@gmekicaxcient <https://github.com/gmekicaxcient>`_).
 * |bugfix| ``zrepl status``: hide progress bar once all filesystems reach terminal state (thanks, `@0x3333 <https://github.com/0x3333>`_).
 * |bugfix| handling of tenative cursor presence if protection strategy doesn't use it (:issue:`714`).
 * |docs| address setup with two or more external disks (thanks, `@se-jaeger <https://github.com/se-jaeger>`_).
 * |docs| document ``replication`` and ``conflict_resolution`` options (thanks, `@InsanePrawn <https://github.com/InsanePrawn>`_).
 * |docs| docs: talks: add note on keep_bookmarks option (thanks, `@skirmess <https://github.com/skirmess>`_).
 * |maint| dist: add openrc service file (thanks, `@gramosg <https://github.com/gramosg>`_).
 * |maint| grafana: update dashboard to Grafana 9.3.6.
 * |maint| run platform tests as part of CI.
 * |maint| build: upgrade to Go 1.21 and update golangci-lint; minimum Go version for builds is now 1.20
 0.6
 ---
 * |feature| :ref:`Schedule-based snapshotting<job-snapshotting--cron>` using ``cron`` syntax instead of an interval.
 * |feature| Configurable initial replication policy.
  When a filesystem is first replicated to a receiver, this control whether just the newest
  snapshot will be replicated vs. all existing snapshots. Learn more :ref:`in the docs <conflict_resolution-initial_replication>`.
 * |feature| Configurable timestamp format for snapshot names via :ref:`timestamp_format<job-snapshotting-timestamp_format>`
  (Thanks, `@ydylla <https://github.com/ydylla>`_).
 * |feature| Add ``ZREPL_DESTROY_MAX_BATCH_SIZE`` env var (default 0=unlimited)
  (Thanks, `@3nprob <https://github.com/3nprob>`_).
 * |feature| Add ``zrepl configcheck --skip-cert-check`` flag (Thanks, `@cole-h <https://github.com/cole-h>`_).
 * |bugfix| Fix resuming from interrupted replications that use ``send.raw`` on unencrypted datasets.
  * The send options introduced in zrepl 0.4 allow users to specify additional zfs send flags for zrepl to use.
    Before this fix, when setting ``send.raw=true`` on a job that replicates unencrypted datasets,
    zrepl would not allow an interrupted replication to resume.
    The reason were overly cautious checks to support the ``send.encrypted`` option.
  * This bugfix removes these checks from the replication planner.
    This makes ``send.encrypted`` a sender-side-only concern, much like all other ``send.*`` flags.
  * However, this means that the ``zrepl status`` UI no longer indicates whether a replication step uses encrypted sends or not.
    The setting is still effective though.
 * |break| convert Prometheus metric ``zrepl_version_daemon`` to ``zrepl_start_time`` metric
  * The metric still reports the zrepl version in a label.
    But the metric *value* is now the Unix timestamp at the time the daemon was started.
    The Grafana dashboard in :repomasterlink:`dist/grafana` has been updated.
 * |bugfix| transient zrepl status error: ``Post "http://unix/status": EOF``
 * |bugfix| don't treat receive-side bookmarks as a replication conflict.
  This facilitates chaining of replication jobs. See :issue:`490`.
 * |bugfix| workaround for Go/gRPC problem on Illumos where zrepl would
  crash when using the ``local`` transport type (:issue:`598`).
 * |bugfix| fix active child tasks panic that cold occur during replication plannig (:issue:`193abbe`)
 * |bugfix| ``zrepl status`` off-by-one error in display of completed step count (:commit:`ce6701f`)
 * |bugfix| Allow using day & week units for ``snapshotting.interval`` (:commit:`ffb1d89`)
 * |docs| ``docs/overview`` improvements (Thanks, `@jtagcat <https://github.com/jtagcat>`_).
 * |maint| Update to Go 1.19.
 0.5
 ---
 * |feature| :ref:`Bandwidth limiting <job-send-recv-options--bandwidth-limit>` (Thanks, Prominic.NET, Inc.)
 * |feature| zrepl status: use a ``*`` to indicate which filesystem is currently replicating
 * |feature| include daemon environment variables in zrepl status (currently only in ``--raw``)
 * |bugfix| **fix encrypt-on-receive + placeholders use case** (:issue:`504`)
  * Before this fix, **plain sends** to a receiver with an encrypted ``root_fs`` **could be received unencrypted** if zrepl needed to create placeholders on the receiver.
  * Existing zrepl users should :ref:`read the docs <job-recv-options--placeholder>` and check ``zfs get -r encryption,zrepl:placeholder PATH_TO_ROOTFS`` on the receiver.
  * Thanks to `@mologie <https://github.com/mologie>`_ and `@razielgn <https://github.com/razielgn>`_ for reporting and testing!
 * |bugfix| Rename mis-spelled :ref:`send option <job-send-options>` ``embbeded_data`` to ``embedded_data``.
 * |bugfix| zrepl status: replication step numbers should start at 1
 * |bugfix| incorrect bandwidth averaging in ``zrepl status``.
 * |bugfix| FreeBSD with OpenZFS 2.0: zrepl would wait indefinitely for zfs send to exit on timeouts.
 * |bugfix| fix ``strconv.ParseInt: value out of range`` bug (and use the control RPCs).
 * |docs| improve description of multiple pruning rules.
 * |docs| document :ref:`platform tests <usage-platform-tests>`.
 * |docs| quickstart: make users aware that prune rules apply to all snapshots.
 * |maint| some platformtests were broken.
 * |maint| FreeBSD: release armv7 and arm64 binaries.
 * |maint| apt repo: update instructions due to ``apt-key`` deprecation.
 Note to all users: please read up on the following OpenZFS bugs, as you might be affected:
 * `ZFS send/recv with ashift 9->12 leads to data corruption <https://github.com/openzfs/zfs/issues/12762>`_.
 * Various bugs with encrypted send/recv (`Leadership meeting notes <https://openzfs.topicbox.com/groups/developer/T24bdaa2886c6cbf5-Mc039a11c3f1507ea0664817b/december-openzfs-leadership-meeting>`_)
 Finally, I'd like to point you to the `GitHub discussion <https://github.com/zrepl/zrepl/discussions/547>`_ about which bugfixes and features should be prioritized in zrepl 0.6 and beyond!
 0.4.0
 -----
 * |feature| support setting zfs send / recv flags in the config (send: ``-wLcepbS`` , recv: ``-ox`` ).
  Config docs :ref:`here <job-send-options>` and :ref:`here <job-recv-options>` .
 * |feature| parallel replication is now configurable (disabled by default, :ref:`config docs here <replication-option-concurrency>` ).
 * |feature| New ``zrepl status`` UI:
  * Interactive job selection.
  * Interactively ``zrepl signal`` jobs.
  * Filter filesystems in the job view by name.
  * An approximation of the old UI is still included as `--mode legacy` but will be removed in a future release of zrepl.
 * |bugfix| Actually use concurrency when listing zrepl abstractions & doing size estimation.
  These operations were accidentally made sequential in zrepl 0.3.
 * |bugfix| Job hang-up during second replication attempt.
 * |bugfix| Data races conditions in the dataconn rpc stack.
 * |maint| Update to protobuf v1.25 and grpc 1.35.
 For users who skipped the 0.3.1 update: please make sure your pruning grid config is correct.
 The following bugfix in 0.3.1 :issue:`caused problems for some users <400>`:
 * |bugfix| pruning: ``grid``:  add all snapshots that do not match the regex to the rule's destroy list.
 0.3.1
 -----
 Mostly a bugfix release for :ref:`zrepl 0.3 <release-0.3>`.
 * |feature| pruning: add optional ``regex`` field to ``last_n`` rule
 * |docs| pruning: ``grid`` : improve documentation and add an example
 * |bugfix| pruning: ``grid``:  add all snapshots that do not match the regex to the rule's destroy list.
  This brings the implementation in line with the docs.
 * |bugfix| ``easyrsa`` script in docs
 * |bugfix| platformtest: fix skipping encryption-only tests on systems that don't support encryption
 * |bugfix| replication: report AttemptDone if no filesystems are replicated
 * |feature| status + replication: warning if replication succeeeded without any filesystem being replicated
 * |docs| update multi-job & multi-host setup section
 * RPM Packaging
 * CI infrastructure rework
 * Continuous deployment of that new `stable` branch to zrepl.github.io.
 .. _release-0.3:
 0.3
 ---
@@ -34,35 +180,60 @@ This is a big one! Headlining features:
 * **Resumable Send & Recv Support**
  No knobs required, automatically used where supported.
-* **Hold-Protected Send & Recv**
+* **Encrypted Send & Recv Support** for OpenZFS native encryption,
-  Automatic ZFS holds to ensure that we can always resume a replication step.
+  :ref:`configurable <job-send-options>` at the job level, i.e., for all filesystems a job is responsible for.
-* **Encrypted Send & Recv Support** for OpenZFS native encryption.
+* **Replication Guarantees**
-  :ref:`Configurable <job-send-options>` at the job level, i.e., for all filesystems a job is responsible for.
+  Automatic use of ZFS holds and bookmarks to protect a replicated filesystem from losing synchronization between sender and receiver.
-* **Receive-side hold on last received dataset**
+  By default, zrepl guarantees that incremental replication will always be possible and interrupted steps will always be resumable.
  The counterpart to the replication cursor bookmark on the send-side.
  Ensures that incremental replication will always be possible between a sender and receiver.
-Actual changelog:
+.. TIP::
-* |break_config| **more restrictive job names than in prior zrepl versions**
+   We highly recommend studying the updated :ref:`overview section of the configuration chapter <overview-how-replication-works>` to understand how replication works.
  Starting with this version, job names are going to be embedded into ZFS holds and bookmark names.
 .. TIP::
   Go 1.15 changed the default TLS validation policy to **require Subject Alternative Names (SAN) in certificates**.
   The openssl commands we provided in the quick-start guides up to and including the zrepl 0.3 docs seem not to work properly.
   If you encounter certificate validation errors regarding SAN and wish to continue to use your old certificates, start the zrepl daemon with env var ``GODEBUG=x509ignoreCN=0``.
   Alternatively, generate new certificates with SANs (see :ref:`both options int the TLS transport docs <transport-tcp+tlsclientauth-certgen>` ).
 Quick-start guides:
 * We have added :ref:`another quick-start guide for a typical workstation use case for zrepl <quickstart-backup-to-external-disk>`.
  Check it out to learn how you can use zrepl to back up your workstation's OpenZFS natively-encrypted root filesystem to an external disk.
 Additional changelog:
 * |break| Go 1.15 TLS changes mentioned above.
 * |break| |break_config| **more restrictive job names than in prior zrepl versions**
  Starting with this version, job names are going to be embedded into ZFS holds and bookmark names (see :ref:`this section for details <zrepl-zfs-abstractions>`).
  Therefore you might need to adjust your job names.
  **Note that jobs** cannot be renamed easily **once you start using zrepl 0.3.**
 * |break| |mig| replication cursor representation changed
-  * zrepl now manages the :ref:`replication cursor bookmark <replication-cursor-and-last-received-hold>` per job-filesystem tuple instead of a single replication cursor per filesystem.
+  * zrepl now manages the :ref:`replication cursor bookmark <zrepl-zfs-abstractions>` per job-filesystem tuple instead of a single replication cursor per filesystem.
    In the future, this will permit multiple sending jobs to send from the same filesystems.
  * ZFS does not allow bookmark renaming, thus we cannot migrate the old replication cursors.
  * zrepl 0.3 will automatically create cursors in the new format for new replications, and warn if it still finds ones in the old format.
  * Run ``zrepl migrate replication-cursor:v1-v2`` to safely destroy old-format cursors.
    The migration will ensure that only those old-format cursors are destroyed that have been superseeded by new-format cursors.
 * |feature| New option ``listen_freebind`` (tcp, tls, prometheus listener)
 * |feature| :issue:`341` Prometheus metric for failing replications + corresponding Grafana panel
 * |feature| :issue:`265` transport/tcp: support for CIDR masks in client IP whitelist
 * |feature| documented subcommand to generate ``bash`` and ``zsh`` completions
 * |feature| :issue:`307` ``chrome://trace`` -compatible activity tracing of zrepl daemon activity
 * |feature| logging: trace IDs for better log entry correlation with concurrent replication jobs
 * |feature| experimental environment variable for parallel replication (see :issue:`306` )
 * |bugfix| missing logger context vars in control connection handlers
 * |bugfix| improved error messages on ``zfs send`` errors
 * |feature| New option ``listen_freebind`` (tcp, tls, prometheus listener)
 * |bugfix| |docs| snapshotting: clarify sync-up behavior and warn about filesystems
 * |bugfix| transport/ssh: do not leak zombie ssh process on connection failures
  that will not be snapshotted until the sync-up phase is over
 * |docs| Installation: :ref:`FreeBSD jail with iocage <installation-freebsd-jail-with-iocage>`
 * |docs| Document new replication features in the :ref:`config overview <overview-how-replication-works>` and :repomasterlink:`replication/design.md`.
 * **[MAINTAINER NOTICE]** New platform tests in this version, please make sure you run them for your distro!
 * **[MAINTAINER NOTICE]** Please add the shell completions to the zrepl packages.
 0.2.1
 -----
@@ -73,7 +244,7 @@ Actual changelog:
 * |bugfix| systemd + ``ssh+stdinserver``: automatically create ``/var/run/zrepl/stdinserver``
 * |bugfix| crash if Prometheus listening socket cannot be opened
-* [MAINTAINER NOTICE] ``Makefile`` refactoring, see :commit:`080f2c0`
+* [MAINTAINER NOTICE] ``Makefile`` refactoring, see commit :commit:`080f2c0`
 0.2
 ---
@@ -100,18 +271,10 @@ Actual changelog:
  The pool name ``zreplplatformtest`` is reserved for this use case.
  Only run ``make platformtest`` on test systems, e.g. a FreeBSD VM image.
 .. NOTE::
   |  zrepl is a spare-time project primarily developed by `Christian Schwarz <https://cschwarz.com>`_.
   |  You can support maintenance and feature development through one of the following services:
   |  |Donate via Patreon| |Donate via Liberapay| |Donate via PayPal|
   |  Note that PayPal processing fees are relatively high for small donations.
   |  For SEPA wire transfer and **commerical support**, please `contact Christian directly <https://cschwarz.com>`_.
 0.1.1
 -----
-* |bugfix| :issue:`162` :commit:`d6304f4` : fix I/O timeout errors on variable receive rate
+* |bugfix| :issue:`162` commit :commit:`d6304f4` : fix I/O timeout errors on variable receive rate
  * A significant reduction or sudden stall of the receive rate (e.g. recv pool has other I/O to do)
    would cause a ``writev I/O timeout`` error after approximately ten seconds.
@@ -1 +0,0 @@
 sphinxconf/conf.py
@@ -0,0 +1,187 @@
 #!/usr/bin/env python3
 # -*- coding: utf-8 -*-
 #
 # zrepl documentation build configuration file, created by
 # sphinx-quickstart on Wed Nov  8 22:28:10 2017.
 #
 # This file is execfile()d with the current directory set to its
 # containing dir.
 #
 # Note that not all possible configuration values are present in this
 # autogenerated file.
 #
 # All configuration values have a default; values that are commented out
 # serve to show the default.
 # If extensions (or modules to document with autodoc) are in another directory,
 # add these directories to sys.path here. If the directory is relative to the
 # documentation root, use os.path.abspath to make it absolute, like shown here.
 #
 # import os
 # import sys
 # sys.path.insert(0, os.path.abspath('.'))
 # -- General configuration ------------------------------------------------
 # If your documentation needs a minimal Sphinx version, state it here.
 #
 # needs_sphinx = '1.0'
 # Add any Sphinx extension module names here, as strings. They can be
 # extensions coming with Sphinx (named 'sphinx.ext.*') or your custom
 # ones.
 extensions = [
    'sphinx.ext.todo',
    'sphinx.ext.githubpages',
    'sphinx.ext.extlinks',
 ]
 # suppress_warnings = ['image.nonlocal_uri']
 # Add any paths that contain templates here, relative to this directory.
 templates_path = ['./_templates']
 # The suffix(es) of source filenames.
 # You can specify multiple suffix as a list of string:
 #
 # source_suffix = ['.rst', '.md']
 source_suffix = '.rst'
 # The master toctree document.
 master_doc = 'index'
 # General information about the project.
 project = 'zrepl'
 copyright = '2017-2026, Christian Schwarz'
 author = 'Christian Schwarz'
 # The version info for the project you're documenting, acts as replacement for
 # |version| and |release|, also used in various other places throughout the
 # built documents.
 #
 # The short X.Y version.
 version = 'latest'
 # The full version, including alpha/beta/rc tags.
 release = 'latest'
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
 #
 # This is also used if you do content translation via gettext catalogs.
 # Usually you set "language" from the command line for these cases.
 language = 'en'
 # List of patterns, relative to source directory, that match files and
 # directories to ignore when looking for source files.
 # This patterns also effect to html_static_path and html_extra_path
 exclude_patterns = ['_build', 'Thumbs.db', '.DS_Store', '.venv']
 # The name of the Pygments (syntax highlighting) style to use.
 pygments_style = 'sphinx'
 # If true, `todo` and `todoList` produce output, else they produce nothing.
 todo_include_todos = True
 # -- Options for HTML output ----------------------------------------------
 # The theme to use for HTML and HTML Help pages.  See the documentation for
 # a list of builtin themes.
 #
 html_theme = 'sphinx_rtd_theme'
 # Theme options are theme-specific and customize the look and feel of a theme
 # further.  For a list of options available for each theme, see the
 # documentation.
 #
 # html_theme_options = {}
 # Add any paths that contain custom static files (such as style sheets) here,
 # relative to this directory. They are copied after the builtin static files,
 # so a file named "default.css" will overwrite the builtin "default.css".
 html_static_path = ['_static']
 html_css_files = [
    'banner.css',
 ]
 html_logo = '_static/zrepl.svg'
 html_context = {
  # https://github.com/rtfd/sphinx_rtd_theme/issues/205
  # Add 'Edit on Github' link instead of 'View page source'
  "display_github": True,
  "github_user": "zrepl",
  "github_repo": "zrepl",
  "github_version": "master",
  "conf_py_path": "/docs/",
  "source_suffix": source_suffix,
 }
 # -- Options for HTMLHelp output ------------------------------------------
 # Output file base name for HTML help builder.
 htmlhelp_basename = 'zrepldoc'
 # -- Options for LaTeX output ---------------------------------------------
 latex_elements = {
    # The paper size ('letterpaper' or 'a4paper').
    #
    # 'papersize': 'letterpaper',
    # The font size ('10pt', '11pt' or '12pt').
    #
    # 'pointsize': '10pt',
    # Additional stuff for the LaTeX preamble.
    #
    # 'preamble': '',
    # Latex figure (float) alignment
    #
    # 'figure_align': 'htbp',
 }
 # Grouping the document tree into LaTeX files. List of tuples
 # (source start file, target name, title,
 #  author, documentclass [howto, manual, or own class]).
 latex_documents = [
    (master_doc, 'zrepl.tex', 'zrepl Documentation',
     'Christian Schwarz', 'manual'),
 ]
 # -- Options for manual page output ---------------------------------------
 # One entry per manual page. List of tuples
 # (source start file, name, description, authors, manual section).
 man_pages = [
    (master_doc, 'zrepl', 'zrepl Documentation',
     [author], 1)
 ]
 # -- Options for Texinfo output -------------------------------------------
 # Grouping the document tree into Texinfo files. List of tuples
 # (source start file, target name, title, author,
 #  dir menu entry, description, category)
 texinfo_documents = [
    (master_doc, 'zrepl', 'zrepl Documentation',
     author, 'zrepl', 'One line description of project.',
     'Miscellaneous'),
 ]
 # -- Options for the extlinks extension -----------------------------------
 # http://www.sphinx-doc.org/en/stable/ext/extlinks.html
 extlinks = {
    'issue':('https://github.com/zrepl/zrepl/issues/%s', 'issue #%s'),
    'repomasterlink':('https://github.com/zrepl/zrepl/blob/master/%s', '%s'),
    'sampleconf':('https://github.com/zrepl/zrepl/blob/master/internal/config/samples%s', 'internal/config/samples%s'),
    'commit':('https://github.com/zrepl/zrepl/commit/%s', '%s'),
        }
@@ -12,6 +12,8 @@ Configuration
    configuration/transports
    configuration/filter_syntax
    configuration/sendrecvoptions
    configuration/replication
    configuration/conflict_resolution
    configuration/snapshotting
    configuration/prune
    configuration/logging
@@ -0,0 +1,37 @@
 .. include:: ../global.rst.inc
 .. _conflict_resolution-options:
 Conflict Resolution Options
 ===========================
 ::
   jobs:
   - type: push
     filesystems: ...
     conflict_resolution:
       initial_replication: most_recent | all | fail # default: most_recent
     ...
 .. _conflict_resolution-initial_replication:
 ``initial_replication`` option
 ------------------------------
 The ``initial_replication`` option determines how many snapshots zrepl replicates if the filesystem has not been replicated before.
 If ``most_recent`` (the default), the initial replication will only transfer the most recent snapshot, while ignoring previous snapshots.
 If all snapshots should be replicated, specify ``all``.
 Use ``fail`` to make replication of the filesystem fail in case there is no corresponding fileystem on the receiver.
 For example, suppose there are snapshosts ``tank@1``, ``tank@2``, ``tank@3`` on a sender.
 Then ``most_recent`` will replicate just ``@3``, but ``all`` will replicate ``@1``, ``@2``, and ``@3``.
 If initial replication is interrupted, and there is at least one (maybe partial) snapshot on the receiver, zrepl will always resume in **incremental mode**.
 And that is regardless of where the initial replication was interrupted.
 For example, if ``initial_replication: all`` and the transfer of ``@1`` is interrupted, zrepl would retry/resume at ``@1``.
 And even if the user changes the config to ``initial_replication: most_recent`` before resuming, **incremental mode** will still resume at ``@1``.
@@ -19,7 +19,7 @@ Job Type ``push``
    * - ``type``
      - = ``push``
    * - ``name``
-      - unique name of the job
+      - unique name of the job :issue:`(must not change)<327>`
    * - ``connect``
      - |connect-transport|
    * - ``filesystems``
@@ -30,6 +30,10 @@ Job Type ``push``
      - |snapshotting-spec|
    * - ``pruning``
      - |pruning-spec|
    * - ``replication``
      - |replication-options|
    * - ``conflict_resolution``
      - |conflict-resolution-options|
 Example config: :sampleconf:`/push.yml`
@@ -47,7 +51,7 @@ Job Type ``sink``
    * - ``type``
      - = ``sink``
    * - ``name``
-      - unique name of the job
+      - unique name of the job :issue:`(must not change)<327>`
    * - ``serve``
      - |serve-transport|
    * - ``root_fs``
@@ -70,7 +74,7 @@ Job Type ``pull``
    * - ``type``
      - = ``pull``
    * - ``name``
-      - unique name of the job
+      - unique name of the job :issue:`(must not change)<327>`
    * - ``connect``
      - |connect-transport|
    * - ``root_fs``
@@ -81,6 +85,10 @@ Job Type ``pull``
        | ``manual`` disables periodic pulling, replication then only happens on :ref:`wakeup <cli-signal-wakeup>`.
    * - ``pruning``
      - |pruning-spec|
    * - ``replication``
      - |replication-options|
    * - ``conflict_resolution``
      - |conflict-resolution-options|
 Example config: :sampleconf:`/pull.yml`
@@ -98,7 +106,7 @@ Job Type ``source``
    * - ``type``
      - = ``source``
    * - ``name``
-      - unique name of the job
+      - unique name of the job :issue:`(must not change)<327>`
    * - ``serve``
      - |serve-transport|
    * - ``filesystems``
@@ -137,7 +145,7 @@ Job type that only takes snapshots and performs pruning on the local machine.
    * - ``type``
      - = ``snap``
    * - ``name``
-      - unique name of the job
+      - unique name of the job :issue:`(must not change)<327>`
    * - ``filesystems``
      - |filter-spec| for filesystems to be snapshotted
    * - ``snapshotting``
@@ -202,7 +202,7 @@ The latter is particularly useful in combination with log aggregation services.
 .. WARNING::
    zrepl drops log messages to the TCP outlet if the underlying connection is not fast enough.
-    Note that TCP buffering in the kernel must first run full becfore messages are dropped.
+    Note that TCP buffering in the kernel must first run full before messages are dropped.
    Make sure to always configure a ``stdout`` outlet as the special error outlet to be informed about problems
    with the TCP outlet (see :ref:`above <logging-error-outlet>` ).
@@ -1,3 +1,5 @@
 .. _miscellaneous:
 Miscellaneous
 =============
@@ -42,27 +44,3 @@ Interval & duration fields in job definitions, pruning configurations, etc. must
    var durationStringRegex *regexp.Regexp = regexp.MustCompile(`^\s*(\d+)\s*(s|m|h|d|w)\s*$`)
    // s = second, m = minute, h = hour, d = day, w = week (7 days)
 Super-Verbose Job Debugging
 ---------------------------
 You have probably landed here because you opened an issue on GitHub and some developer told you to do this...
 So just read the annotated comments ;)
 ::
    job:
    - name: ...
      ...
     # JOB DEBUGGING OPTIONS
      # should be equal for all job types, but each job implements the debugging itself
      debug:
        conn: # debug the io.ReadWriteCloser connection
          read_dump: /tmp/connlog_read   # dump results of Read() invocations to this file
          write_dump: /tmp/connlog_write # dump results of Write() invocations to this file
        rpc: # debug the RPC protocol implementation
          log: true # log output from rpc layer to the job log
 .. ATTENTION::
    Connection dumps will almost certainly contain your or other's private data. Do not share it in a bug report.
@@ -13,9 +13,9 @@ Prometheus & Grafana
 --------------------
 zrepl can expose `Prometheus metrics <https://prometheus.io/docs/instrumenting/exposition_formats/>`_ via HTTP.
-The ``listen`` attribute is a `net.Listen <https://golang.org/pkg/net/#Listen>`_  string for tcp, e.g. ``:9091`` or ``127.0.0.1:9091``.
+The ``listen`` attribute is a `net.Listen <https://golang.org/pkg/net/#Listen>`_  string for tcp, e.g. ``:9811`` or ``127.0.0.1:9811`` (port 9811 was reserved to zrepl `on the official list <https://github.com/prometheus/prometheus/wiki/Default-port-allocations/_compare/43e495dd251ee328ac0d08b58084665b5c0f7a7e...459195059b55b414193ebeb80c5ba463d2606951>`_).
 The ``listen_freebind`` attribute is :ref:`explained here <listen-freebind-explanation>`.
-The Prometheues monitoring job appears in the ``zrepl control`` job list and may be specified **at most once**.
+The Prometheus monitoring job appears in the ``zrepl control`` job list and may be specified **at most once**.
 zrepl also ships with an importable `Grafana <https://grafana.com>`_ dashboard that consumes the Prometheus metrics:
 see :repomasterlink:`dist/grafana`.
@@ -30,7 +30,7 @@ The dashboard also contains some advice on which metrics are important to monito
    global:
      monitoring:
        - type: prometheus
-          listen: ':9091'
+          listen: ':9811'
          listen_freebind: true # optional, default false
@@ -3,16 +3,17 @@ Overview & Terminology
 ======================
 All work zrepl does is performed by the zrepl daemon which is configured in a single YAML configuration file loaded on startup.
-The following paths are considered:
+The following paths are searched, in this order:
-* If set, the location specified via the global ``--config`` flag
+1. The path specified via the global ``--config`` flag
-* ``/etc/zrepl/zrepl.yml``
+2. ``/etc/zrepl/zrepl.yml``
-* ``/usr/local/etc/zrepl/zrepl.yml``
+3. ``/usr/local/etc/zrepl/zrepl.yml``
-The ``zrepl configcheck`` subcommand can be used to validate the configuration.
+``zrepl configcheck`` can be used to validate the configuration.
-The command will output nothing and exit with zero status code if the configuration is valid.
+If the configuration is valid, it will output nothing and exit with code ``0``.
 The error messages vary in quality and usefulness: please report confusing config errors to the tracking :issue:`155`.
-Full example configs such as in the :ref:`tutorial` or the :sampleconf:`/` directory might also be helpful.
+
 Full example configs are available at :ref:`quick-start guides <quickstart-toc>` and :sampleconf:`/`.
 However, copy-pasting examples is no substitute for reading documentation!
 Config File Structure
@@ -26,9 +27,47 @@ Config File Structure
     type: push
   - ...
-zrepl is confgured using a single YAML configuration file with two main sections: ``global`` and ``jobs``.
+A zrepl configuration file is divided in to two main sections: ``global`` and ``jobs``.
-The ``global`` section is filled with sensible defaults and is covered later in this chapter.
+``global`` has sensible defaults. It is covered in :ref:`logging <logging>`, :ref:`monitoring <monitoring>` \& :ref:`miscellaneous <miscellaneous>`.
-The ``jobs`` section is a list of jobs which we are goind to explain now.
+
 ``conf.d``: including config files
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 It is possible to distribute zrepl configurations over multiple YAML configuration
 files. This is achieved by using the `include` key which can only exist in the main
 configuration file.
 The list of included paths must point to either individual YAML files or directories.
 If the path points to a directory then all YAML files with a `.yml` extention in the
 directory will be included.
 .. code-block:: yaml
    # /etc/zrepl/zrep.yml
    global: ...
    include:
      - ./jobs.d/
      - /opt/some_job.yml
    # /etc/zrepl/jobs.d/backup.yml
    jobs:
    - name: backup
      type: push
    - ...
    # /opt/some_job.yml
    jobs:
    - name: another_job
      ...
    - ...
 The paths are treated as absolute when starting with `/`, otherwise
 as a relative path to the main config file's parent directory.
 Job names must be unique across all included configuration files.
 .. _job-overview:
@@ -39,9 +78,12 @@ A *job* is the unit of activity tracked by the zrepl daemon.
 The ``type`` of a job determines its role in a replication setup and in snapshot management.
 Jobs are identified by their ``name``, both in log files and the ``zrepl status`` command.
-Replication always happens between a pair of jobs: one is the **active side**, and one the **passive side**.
+.. NOTE::
   The job name is persisted in several places on disk and thus :issue:`cannot be changed easily<327>`.
 Replication always happens between a pair of jobs: one **active side** and one **passive side**.
 The active side connects to the passive side using a :ref:`transport <transport>` and starts executing the replication logic.
-The passive side responds to requests from the active side after checking its persmissions.
+The passive side responds to requests from the active side after checking its permissions.
 The following table shows how different job types can be combined to achieve **both push and pull mode setups**.
 Note that snapshot-creation denoted by "(snap)" is orthogonal to whether a job is active or passive.
@@ -55,8 +97,8 @@ Note that snapshot-creation denoted by "(snap)" is orthogonal to whether a job i
 | Pull mode             | ``pull``     | ``source``                       | * Central backup-server for many nodes                                             |
 |                       |              | (snap)                           | * Remote server to NAS behind NAT                                                  |
 +-----------------------+--------------+----------------------------------+------------------------------------------------------------------------------------+
-| Local replication     | | ``push`` + ``sink`` in one config             | * Backup FreeBSD boot pool                                                         |
+| Local replication     | | ``push`` + ``sink`` in one config             | * Backup to :ref:`locally attached disk <quickstart-backup-to-external-disk>`      |
-|                       | | with :ref:`local transport <transport-local>` |                                                                                    |
+|                       | | with :ref:`local transport <transport-local>` | * Backup FreeBSD boot pool                                                         |
 +-----------------------+--------------+----------------------------------+------------------------------------------------------------------------------------+
 | Snap & prune-only     | ``snap``     | N/A                              | * | Snapshots & pruning but no replication                                         |
 |                       | (snap)       |                                  |   | required                                                                       |
@@ -68,27 +110,29 @@ How the Active Side Works
 The active side (:ref:`push <job-push>` and :ref:`pull <job-pull>` job) executes the replication and pruning logic:
-* Wakeup because of finished snapshotting (``push`` job) or pull interval ticker (``pull`` job).
+1. Wakeup after snapshotting (``push`` job) or pull interval ticker (``pull`` job).
-* Connect to the corresponding passive side using a :ref:`transport <transport>` and instantiate an RPC client.
+2. Connect to the passive side and instantiate an RPC client.
-* Replicate data from the sending to the receiving side (see below).
+3. Replicate data from the sender to the receiver.
-* Prune on sender & receiver.
+4. Prune on sender & receiver.
 .. TIP::
-  The progress of the active side can be watched live using the ``zrepl status`` subcommand.
+  The progress of the active side can be watched live using ``zrepl status``.
 .. _overview-passive-side--client-identity:
 How the Passive Side Works
 --------------------------
-The passive side (:ref:`sink <job-sink>` and :ref:`source <job-source>`) waits for connections from the corresponding active side,
+The passive side (:ref:`sink <job-sink>` and :ref:`source <job-source>`) waits for connections from the active side,
-using the transport listener type specified in the ``serve`` field of the job configuration.
+on the :ref:`transport <transport>` specified with ``serve`` in the job configuration.
-Each transport listener provides a client's identity to the passive side job.
+The respective transport then perfoms authentication & authorization, resulting in a stable *client identity*.
-It uses the client identity for access control:
+The passive side job uses this *client identity* as follows:
-* The ``sink`` job maps requests from different client identities to their respective sub-filesystem tree ``root_fs/${client_identity}``.
+   * In ``sink`` jobs, to map requests from different *client identities* to their respective sub-filesystem tree ``root_fs/${client_identity}``.
-* The ``source`` job has a whitelist of client identities that are allowed pull access.
+   * *In the future, ``source`` might embed the client identity in :ref:`zrepl's ZFS abstraction names <zrepl-zfs-abstractions>`, to support multi-host replication.*
 .. TIP::
-   The implementation of the ``sink`` job requires that the connecting client identities be a valid ZFS filesystem name components.
+   The use of the client identity in the ``sink`` job implies that it must be usable as a ZFS ZFS filesystem name component.
 .. _overview-how-replication-works:
@@ -99,7 +143,7 @@ One of the major design goals of the replication module is to avoid any duplicat
 As such, the code works on abstract senders and receiver **endpoints**, where typically one will be implemented by a local program object and the other is an RPC client instance.
 Regardless of push- or pull-style setup, the logic executes on the active side, i.e. in the ``push`` or ``pull`` job.
-The following steps take place during replication and can be monitored using the ``zrepl status`` subcommand:
+The following high-level steps take place during replication and can be monitored using ``zrepl status``:
 * Plan the replication:
@@ -107,9 +151,9 @@ The following steps take place during replication and can be monitored using the
  * Build the **replication plan**
    * Per filesystem, compute a diff between sender and receiver snapshots
-    * Build a list of replication steps
+    * Build a list of **replication steps**
-      * If possible, use incremental and resumable sends (``zfs send -i``)
+      * If possible, use incremental and resumable sends
      * Otherwise, use full send of most recent snapshot on sender
  * Retry on errors that are likely temporary (i.e. network failures).
@@ -120,7 +164,7 @@ The following steps take place during replication and can be monitored using the
  * Perform replication steps in the following order:
    Among all filesystems with pending replication steps, pick the filesystem whose next replication step's snapshot is the oldest.
  * Create placeholder filesystems on the receiving side to mirror the dataset paths on the sender to ``root_fs/${client_identity}``.
-  * Aquire send-side step-holds on the step's `from` and `to` snapshots.
+  * Acquire send-side *step-holds* on the step's `from` and `to` snapshots.
  * Perform the replication step.
  * Move the **replication cursor** bookmark on the sending side (see below).
  * Move the **last-received-hold** on the receiving side (see below).
@@ -128,75 +172,193 @@ The following steps take place during replication and can be monitored using the
 The idea behind the execution order of replication steps is that if the sender snapshots all filesystems simultaneously at fixed intervals, the receiver will have all filesystems snapshotted at time ``T1`` before the first snapshot at ``T2 = T1 + $interval`` is replicated.
-.. _replication-cursor-and-last-received-hold:
+ZFS Background Knowledge
 ^^^^^^^^^^^^^^^^^^^^^^^^
 This section gives some background knowledge about ZFS features that zrepl uses to provide guarantees for a replication filesystem.
 Specifically, zrepl guarantees by default that **incremental replication is always possible and that started replication steps can always be resumed if they are interrupted.**
-**Replication cursor** bookmark and **last-received-hold** are managed by zrepl to ensure that future replications can always be done incrementally:
+**ZFS Send Modes & Bookmarks**
-the replication cursor is a send-side bookmark of the most recent successfully replicated snapshot,
+ZFS supports full sends (``zfs send fs@to``) and incremental sends (``zfs send -i @from fs@to``).
-and the last-received-hold is a hold of that snapshot on the receiving side.
+Full sends are used to create a new filesystem on the receiver with the send-side state of ``fs@to``.
-The replication cursor has the format ``#zrepl_CUSOR_G_<GUID>_J_<JOBNAME>``.
+Incremental sends only transfer the delta between ``@from`` and ``@to``.
-The last-received-hold tag has the format ``#zrepl_last_received_J_<JOBNAME>``.
+Incremental sends require that ``@from`` be present on the receiving side when receiving the incremental stream.
-Encoding the job name in the names ensures that multiple sending jobs can replicate the same filesystem to different receivers without interference.
+Incremental sends can also use a ZFS bookmark as *from* on the sending side (``zfs send -i #bm_from fs@to``), where ``#bm_from`` was created using ``zfs bookmark fs@from fs#bm_from``.
-The ``zrepl holds list`` provides a listing of all bookmarks and holds managed by zrepl.
+The receiving side must always have the actual snapshot ``@from``, regardless of whether the sending side uses ``@from`` or a bookmark of it.
 .. _zfs-background-knowledge-plain-vs-raw-sends:
 **Plain and raw sends**
 By default, ``zfs send`` sends the most generic, backwards-compatible data stream format (so-called 'plain send').
 If the sent uses newer features, e.g. compression or encryption, ``zfs send`` has to un-do these operations on the fly to produce the plain send stream.
 If the receiver uses newer features (e.g. compression or encryption inherited from the parent FS), it applies the necessary transformations again on the fly during ``zfs recv``.
 Flags such as ``-e``, ``-c`` and ``-L``  tell ZFS to produce a send stream that is closer to how the data is stored on disk.
 Sending with those flags removes computational overhead from sender and receiver.
 However, the receiver will not apply certain transformations, e.g., it will not compress with the receive-side ``compression`` algorithm.
 The ``-w`` (``--raw``) flag produces a send stream that is as *raw* as possible.
 For unencrypted datasets, its current effect is the same as ``-Lce``.
 Encrypted datasets can only be sent plain (unencrypted) or raw (encrypted) using the ``-w`` flag.
 **Resumable Send & Recv**
 The ``-s`` flag for ``zfs recv`` tells zfs to save the partially received send stream in case it is interrupted.
 To resume the replication, the receiving side filesystem's ``receive_resume_token`` must be passed to a new ``zfs send -t <value> | zfs recv`` command.
 A full send can only be resumed if ``@to`` still exists.
 An incremental send can only be resumed if ``@to`` still exists *and* either ``@from`` still exists *or* a bookmark ``#fbm`` of ``@from`` still exists.
 **ZFS Holds**
 ZFS holds prevent a snapshot from being deleted through ``zfs destroy``, letting the destroy fail with a ``datset is busy`` error.
 Holds are created and referred to by a *tag*. They can be thought of as a named, persistent lock on the snapshot.
 .. _zrepl-zfs-abstractions:
 ZFS Abstractions Managed By zrepl
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 With the background knowledge from the previous paragraph, we now summarize the different on-disk ZFS objects that zrepl manages to provide its functionality.
 .. _replication-placeholder-property:
-**Placeholder filesystems** on the receiving side are regular ZFS filesystems with the placeholder property ``zrepl:placeholder=on``.
+**Placeholder filesystems** on the receiving side are regular ZFS filesystems with the ZFS property ``zrepl:placeholder=on``.
-Placeholders allow the receiving side to mirror the sender's ZFS dataset hierachy without replicating every filesystem at every intermediary dataset path component.
+Placeholders allow the receiving side to mirror the sender's ZFS dataset hierarchy without replicating every filesystem at every intermediary dataset path component.
 Consider the following example: ``S/H/J`` shall be replicated to ``R/sink/job/S/H/J``, but neither ``S/H`` nor ``S`` shall be replicated.
 ZFS requires the existence of ``R/sink/job/S`` and ``R/sink/job/S/H`` in order to receive into ``R/sink/job/S/H/J``.
 Thus, zrepl creates the parent filesystems as placeholders on the receiving side.
 If at some point ``S/H`` and ``S`` shall be replicated, the receiving side invalidates the placeholder flag automatically.
 The ``zrepl test placeholder`` command can be used to check whether a filesystem is a placeholder.
-.. ATTENTION::
+.. _replication-cursor-and-last-received-hold:
-    Currently, zrepl does not replicate filesystem properties.
+The **replication cursor** bookmark and **last-received-hold** are managed by zrepl to ensure that future replications can always be done incrementally.
-    When receiving a filesystem, it is never mounted (`-u` flag)  and `mountpoint=none` is set.
+The replication cursor is a send-side bookmark of the most recent successfully replicated snapshot,
-    This is temporary and being worked on :issue:`24`.
+and the last-received-hold is a hold of that snapshot on the receiving side.
 Both are moved atomically after the receiving side has confirmed that a replication step is complete.
 The replication cursor has the format ``#zrepl_CUSOR_G_<GUID>_J_<JOBNAME>``.
 The last-received-hold tag has the format ``zrepl_last_received_J_<JOBNAME>``.
 Encoding the job name in the names ensures that multiple sending jobs can replicate the same filesystem to different receivers without interference.
 .. _tentative-replication-cursor-bookmarks:
 **Tentative replication cursor bookmarks** are short-lived bookmarks that protect the atomic moving-forward of the replication cursor and last-received-hold (see :issue:`this issue <340>`).
 They are only necessary if step holds are not used as per the :ref:`replication.protection <replication-option-protection>` setting.
 The tentative replication cursor has the format ``#zrepl_CUSORTENTATIVE_G_<GUID>_J_<JOBNAME>``.
 The ``zrepl zfs-abstraction list`` command provides a listing of all bookmarks and holds managed by zrepl.
 .. _step-holds:
 **Step holds** are zfs holds managed by zrepl to ensure that a replication step can always be resumed if it is interrupted, e.g., due to network outage.
 zrepl creates step holds before it attempts a replication step and releases them after the receiver confirms that the replication step is complete.
 For an initial replication ``full @initial_snap``, zrepl puts a zfs hold on ``@initial_snap``.
 For an incremental send ``@from -> @to``, zrepl puts a zfs hold on both ``@from`` and ``@to``.
 Note that ``@from`` is not strictly necessary for resumability -- a bookmark on the sending side would be sufficient --, but size-estimation in currently used OpenZFS versions only works if ``@from`` is a snapshot.
 The hold tag has the format ``zrepl_STEP_J_<JOBNAME>``.
 A job only ever has one active send per filesystem.
 Thus, there are never more than two step holds for a given pair of ``(job,filesystem)``.
 **Step bookmarks** are zrepl's equivalent for holds on bookmarks (ZFS does not support putting holds on bookmarks).
 They are intended for a situation where a replication step uses a bookmark ``#bm`` as incremental ``from`` where ``#bm`` is not managed by zrepl.
 To ensure resumability, zrepl copies ``#bm`` to step bookmark ``#zrepl_STEP_G_<GUID>_J_<JOBNAME>``.
 If the replication is interrupted and ``#bm`` is deleted by the user, the step bookmark remains as an incremental source for the resumable send.
 Note that zrepl does not yet support creating step bookmarks because the `corresponding ZFS feature for copying bookmarks <https://github.com/openzfs/zfs/pull/9571>`_ is not yet widely available .
 Subscribe to zrepl :issue:`326` for details.
 The ``zrepl zfs-abstraction list`` command provides a listing of all bookmarks and holds managed by zrepl.
 .. NOTE::
    More details can be found in the design document :repomasterlink:`replication/design.md`.
-.. _jobs-multiple-jobs:
+Caveats With Complex Setups (More Than 2 Jobs or Machines)
 ----------------------------------------------------------
-Multiple Jobs & More than 2 Machines
+Most users are served well with a single sender and a single receiver job.
------------------------------------
+This section documents considerations for more complex setups.
 .. ATTENTION::
-  When using multiple jobs across single or multiple machines, the following rules are critical to avoid race conditions & data loss:
+   Before you continue, make sure you have a working understanding of :ref:`how zrepl works <overview-how-replication-works>`
   and :ref:`what zrepl does to ensure <zrepl-zfs-abstractions>` that replication between sender and receiver is always
   possible without conflicts.
   This will help you understand why certain kinds of multi-machine setups do not (yet) work.
-  1. The sets of ZFS filesystems matched by the ``filesystems`` filter fields must be disjoint across all jobs configured on a machine.
+.. NOTE::
  2. The ZFS filesystem subtrees of jobs with ``root_fs`` must be disjoint.
  3. Across all zrepl instances on all machines in the replication domain, there must be a 1:1 correspondence between active and passive jobs.
-  Explanations & exceptions to above rules are detailed below.
+   If you can't find your desired configuration, have questions or would like to see improvements to multi-job setups, please `open an issue on GitHub <https://github.com/zrepl/zrepl/issues/new>`_.
-If you would like to see improvements to multi-job setups, please `open an issue on GitHub <https://github.com/zrepl/zrepl/issues/new>`_.
+Multiple Jobs on One Machine
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 As a general rule, multiple jobs configured on one machine **must operate on disjoint sets of filesystems**.
 Otherwise, concurrently running jobs might interfere when operating on the same filesystem.
-No Overlapping
+On your setup, ensure that
 ~~~~~~~~~~~~~~
-Jobs run independently of each other.
+* all ``filesystems`` filter specifications are disjoint
-If two jobs match the same filesystem with their ``filesystems`` filter, they will operate on that filesystem independently and potentially in parallel.
+* no ``root_fs`` is a prefix or equal to another ``root_fs``
 For example, if job A prunes snapshots that job B is planning to replicate, the replication will fail because B asssumed the snapshot to still be present.
 However, the next replication attempt will re-examine the situation from scratch and should work.
-N push jobs to 1 sink
+  * For ``sink`` jobs, consider all possible ``root_fs/${client_identity}``.
 ~~~~~~~~~~~~~~~~~~~~~
-The :ref:`sink job <job-sink>` namespaces by client identity.
+* no ``filesystems`` filter matches any ``root_fs``
 It is thus safe to push to one sink job with different client identities.
 If the push jobs have the same client identity, the filesystems matched by the push jobs must be disjoint to avoid races.
-N pull jobs from 1 source
+**Exceptions to the rule**:
 ~~~~~~~~~~~~~~~~~~~~~~~~~
-Multiple pull jobs pulling from the same source have potential for race conditions during pruning:
+* A ``snap`` and ``push`` job on the same machine can match the same ``filesystems``.
-each pull job prunes the source side independently, causing replication-prune and prune-prune races.
+  To avoid interference, only one of the jobs should be pruning snapshots on the sender, the other one should keep all snapshots.
  Since the jobs won't coordinate, errors in the log are to be expected, but :ref:`zrepl's ZFS abstractions <zrepl-zfs-abstractions>` ensure that ``push`` and ``sink`` can always replicate incrementally.
  This scenario is detailed in one of the :ref:`quick-start guides <quickstart-backup-to-external-disk>`.
-There is currently no way for a pull job to filter which snapshots it should attempt to replicate.
+
-Thus, it is not possibe to just manually assert that the prune rules of all pull jobs are disjoint to avoid replication-prune and prune-prune races.
+Two Or More Machines
 ^^^^^^^^^^^^^^^^^^^^
 This section might be relevant to users who wish to *fan-in* (N machines replicate to 1) or *fan-out* (replicate 1 machine to N machines).
 **Working setups**:
 * **Fan-in: N servers replicated to one receiver, disjoint dataset trees.**
  * This is the common use case of a centralized backup server.
  * Implementation:
    * N ``push`` jobs (one per sender server), 1 ``sink`` (as long as the different push jobs have a different :ref:`client identity <overview-passive-side--client-identity>`)
    * N ``source`` jobs (one per sender server), N ``pull`` on the receiver server (unique names, disjoint  ``root_fs``)
  * The ``sink`` job automatically constrains each client to a disjoint sub-tree of the sink-side dataset hierarchy ``${root_fs}/${client_identity}``.
    Therefore, the different clients cannot interfere.
  * The ``pull`` job only pulls from one host, so it's up to the zrepl user to ensure that the different ``pull`` jobs don't interfere.
 .. _fan-out-replication:
 * **Fan-out: 1 server replicated to N receivers**
  * Can be implemented either in a pull or push fashion.
    * **pull setup**: 1 ``pull`` job on each receiver server, each with a corresponding **unique** ``source`` job on the sender server.
    * **push setup**: 1 ``sink`` job on each receiver server, each with a corresponding **unique** ``push`` job on the sender server.
  * It is critical that we have one sending-side job (``source``, ``push``) per receiver.
    The reason is that :ref:`zrepl's ZFS abstractions <zrepl-zfs-abstractions>` (``zrepl zfs-abstraction list``) include the name of the ``source``/``push`` job, but not the receive-side job name or client identity (see :issue:`380`).
    As a counter-example, suppose we used multiple ``pull`` jobs with only one ``source`` job.
    All ``pull`` jobs would share the same :ref:`replication cursor bookmark <replication-cursor-and-last-received-hold>` and trip over each other, breaking incremental replication guarantees quickly.
    The anlogous problem exists for 1 ``push`` to N ``sink`` jobs.
  * The ``filesystems`` matched by the sending side jobs (``source``, ``push``) need not necessarily be disjoint.
    For this to work, we need to avoid interference between snapshotting and pruning of the different sending jobs.
    The solution is to centralize sender-side snapshot management in a separate ``snap`` job.
    Snapshotting in the ``source``/``push`` job should then be disabled (``type: manual``).
    And sender-side pruning (``keep_sender``) needs to be disabled in the active side (``pull`` / ``push``), since that'll be done by the ``snap job``.
  * **Restore limitations**: when restoring from one of the ``pull`` targets (e.g., using ``zfs send -R``), the replication cursor bookmarks don't exist on the restored system.
    This can break incremental replication to all other receive-sides after restore.
  * See :ref:`the fan-out replication quick-start guide <quickstart-fan-out-replication>` for an example of this setup.
 **Setups that do not work**:
 * N ``pull`` identities, 1 ``source`` job. Tracking :issue:`380`.
@@ -46,8 +46,11 @@ Example Configuration:
             grid: 1x1h(keep=all) | 24x1h | 35x1d | 6x30d
             regex: "^zrepl_.*"
           # manually created snapshots will be kept forever on receiver
           - type: regex
             regex: "^manual_.*"
 .. DANGER::
    You might have **existing snapshots** of filesystems affected by pruning which you want to keep, i.e. not be destroyed by zrepl.
    Make sure to actually add the necessary ``regex`` keep rules on both sides, like with ``manual`` in the example above.
@@ -65,8 +68,17 @@ Policy ``not_replicated``
     ...
 ``not_replicated`` keeps all snapshots that have not been replicated to the receiving side.
-It only makes sense to specify this rule on a sender (source or push job).
+It only makes sense to specify this rule for the ``keep_sender``.
-The state required to evaluate this rule is stored in the :ref:`replication cursor bookmark <replication-cursor-and-last-received-hold>` on the sending side.
+The reason is that, by definition, all snapshots on the receiver have already been replicated to there from the sender.
 To determine whether a sender-side snapshot has already been replicated, zrepl uses the :ref:`replication cursor bookmark <replication-cursor-and-last-received-hold>` which corresponds to the most recent successfully replicated snapshot.
 .. ATTENTION::
    If you use ``not_replicated`` in your pruning rules, make sure to :ref:`monitor <monitoring>` replication.
    If your replication gets stuck then ``not_replicated`` causes snapshots to pile uip on the sender.
    ZFS and especially the ``zfs`` management command are known to degrade in performance with a lot of snapshots.
    Such degradation impacts zrepl, any other scripts, and human ability to manage your zpool.
 .. _prune-keep-retention-grid:
@@ -82,35 +94,91 @@ Policy ``grid``
        - type: grid
          regex: "^zrepl_.*"
          grid: 1x1h(keep=all) | 24x1h | 35x1d | 6x30d
                │                │               │
                └─ 1 repetition of a one-hour interval with keep=all
                                 │               │
-                └─ one hour interval
+                                 └─ 24 repetitions of a one-hour interval with keep=1
                                                 │
-                                 └─ 24 adjacent one-hour intervals
+                                                 └─ 6 repetitions of a 30-day interval with keep=1
      ...
-The retention grid can be thought of as a time-based sieve:
+The retention grid can be thought of as a time-based sieve that thins out snapshots as they get older.
 The ``grid`` field specifies a list of adjacent time intervals:
 the left edge of the leftmost (first) interval is the ``creation`` date of the youngest snapshot.
 All intervals to its right describe time intervals further in the past.
 Each interval carries a maximum number of snapshots to keep.
 It is specified via ``(keep=N)``, where ``N`` is either ``all`` (all snapshots are kept) or a positive integer.
 The default value is **keep=1**.
 The ``grid`` field specifies a list of adjacent time intervals.
 Each interval is a bucket with a maximum capacity of ``keep`` snapshots.
 The following procedure happens during pruning:
 #. The list of snapshots is filtered by the regular expression in ``regex``.
-   Only snapshots names that match the regex are considered for this rule, all others are not affected.
+   Only snapshots names that match the regex are considered for this rule, all others will be pruned unless another rule keeps them.
-#. The filtered list of snapshots is sorted by ``creation``
+#. The snapshots that match ``regex`` are placed onto a time axis according to their ``creation`` date.
-#. The left edge of the first interval is aligned to the ``creation`` date of the youngest snapshot
+   The youngest snapshot is on the left, the oldest on the right.
-#. A list of buckets is created, one for each interval
+#. The first buckets are placed "under" that axis so that the ``grid`` spec's first bucket's left edge aligns with youngest snapshot.
-#. The list of snapshots is split up into the buckets.
+#. All subsequent buckets are placed adjacent to their predecessor bucket.
-#. For each bucket
+#. Now each snapshot on the axis either falls into one bucket or it is older than our rightmost bucket.
   Buckets are left-inclusive and right-exclusive which means that a snapshot on the edge of bucket will always 'fall into the right one'.
 #. Snapshots older than the rightmost bucket are **not kept** by the grid specification.
 #. For each bucket, we only keep the ``keep`` oldest snapshots.
-   #. the contained snapshot list is sorted by creation.
+The syntax to describe the bucket list is as follows:
   #. snapshots from the list, oldest first, are destroyed until the specified ``keep`` count is reached.
   #. all remaining snapshots on the list are kept.
 ::
     Repeat x Duration (keep=all)
 * The **duration** specifies the length of the interval.
 * The **keep** count specifies the number of snapshots that fit into the bucket.
  It can be either a positive integer or ``all`` (all snapshots are kept).
 * The **repeat** count repeats the bucket definition for the specified number of times.
 **Example**:
 ::
   Assume the following grid specification:
      grid: 1x1h(keep=all) | 2x2h | 1x3h
   This grid specification produces the following constellation of buckets:
   0h        1h        2h        3h        4h        5h        6h        7h        8h        9h
   |         |         |         |         |         |         |         |         |         |
   |-Bucket1-|-----Bucket2-------|------Bucket3------|-----------Bucket4-----------|
   | keep=all|      keep=1       |       keep=1      |            keep=1           |
   Now assume that we have a set of snapshots @a, @b, ..., @D.
   Snapshot @a is the most recent snapshot.
   Snapshot @D is the oldest snapshot, it is almost 9 hours older than snapshot @a.
   We place the snapshots on the same timeline as the buckets:
   0h        1h        2h        3h        4h        5h        6h        7h        8h        9h
   |         |         |         |         |         |         |         |         |         |
   |-Bucket1-|-----Bucket2-------|------Bucket3------|-----------Bucket4-----------|
   | keep=all|      keep=1       |       keep=1      |            keep=1           |
   |         |                   |                   |                             |
   | a  b  c | d  e  f  g  h  i  j  k  l  m  n  o  p |q  r  s  t  u  v  w  x  y  z |A  B  C  D
   We obtain the following mapping of snapshots to buckets:
   Bucket1:   a,b,c
   Bucket2:   d,e,f,g,h,i
   Bucket3:   j,k,l,m,n,o,p
   Bucket4:   q,r,s,t,u,v,w,x,y,z
   No bucket: A,B,C,D
   For each bucket, we now prune snapshots until it only contains `keep` snapshots.
   Newer snapshots are destroyed first.
   Snapshots that do not fall into a bucket are always destroyed.
   Result after pruning:
   0h        1h        2h        3h        4h        5h        6h        7h        8h        9h
   |         |         |         |         |         |         |         |         |         |
   |-Bucket1-|-----Bucket2-------|------Bucket3------|-----------Bucket4-----------|
   |         |                   |                   |                             |
   | a  b  c |                i  |                 p |                           z |
 .. _prune-keep-last-n:
@@ -125,9 +193,11 @@ Policy ``last_n``
         keep_receiver:
         - type: last_n
           count: 10
           regex: ^zrepl_.*$ # optional
     ...
-``last_n`` keeps the last ``count`` snapshots (last = youngest = most recent creation date).
+``last_n`` filters the snapshot list by ``regex``, then keeps the last ``count`` snapshots in that list (last = youngest = most recent creation date)
 All snapshots that don't match ``regex`` or exceed ``count`` in the filtered list are destroyed unless matched by other rules.
 .. _prune-keep-regex:
@@ -0,0 +1,75 @@
 .. include:: ../global.rst.inc
 .. _replication-options:
 Replication Options
 ===================
 ::
   jobs:
   - type: push
     filesystems: ...
     replication:
       protection:
         initial:     guarantee_resumability # guarantee_{resumability,incremental,nothing}
         incremental: guarantee_resumability # guarantee_{resumability,incremental,nothing}
       concurrency:
         size_estimates: 4
         steps: 1
     ...
 .. _replication-option-protection:
 ``protection`` option
 --------------------------
 The ``protection`` variable controls the degree to which a replicated filesystem is protected from getting out of sync through a zrepl pruner or external tools that destroy snapshots.
 zrepl can guarantee :ref:`resumability <step-holds>` or just :ref:`incremental replication <replication-cursor-and-last-received-hold>`.
 ``guarantee_resumability`` is the **default** value and guarantees that a replication step is always resumable and that incremental replication will always be possible.
 The implementation uses replication cursors, last-received-hold and step holds.
 ``guarantee_incremental`` only guarantees that incremental replication will always be possible.
 If a step ``from -> to`` is interrupted and its `to` snapshot is destroyed, zrepl will remove the half-received ``to``'s resume state and start a new step ``from -> to2``.
 The implementation uses replication cursors, tentative replication cursors and last-received-hold.
 ``guarantee_nothing`` does not make any guarantees with regards to keeping sending and receiving side in sync.
 No bookmarks or holds are created to protect sender and receiver from diverging.
 **Tradeoffs**
 Using ``guarantee_incremental`` instead of ``guarantee_resumability`` obviously removes the resumability guarantee.
 This means that replication progress is no longer monotonic which might lead to a replication setup that never makes progress if mid-step interruptions are too frequent (e.g. frequent network outages).
 However, the advantage and :issue:`reason for existence <288>` of the ``incremental`` mode is that it allows the pruner to delete snapshots of interrupted replication steps
 which is useful if replication happens so rarely (or fails so frequently) that the amount of disk space exclusively referenced by the step's snapshots becomes intolerable.
 .. NOTE::
   When changing this flag, obsoleted zrepl-managed bookmarks and holds will be destroyed on the next replication step that is attempted for each filesystem.
 .. _replication-option-concurrency:
 ``concurrency`` option
 ----------------------
 The ``concurrency`` options control the maximum amount of concurrency during replication.
 The default values allow some concurrency during size estimation but no parallelism for the actual replication.
 * ``concurrency.steps`` (default = 1) controls the maximum number of concurrently executed :ref:`replication steps <overview-how-replication-works>`.
  The planning step for each file system is counted as a single step.
 * ``concurrency.size_estimates`` (default = 4) controls the maximum number of concurrent step size estimations done by the job.
 Note that initial replication cannot start replicating child filesystems before the parent filesystem's initial replication step has completed.
 Some notes on tuning these values:
 * Disk: Size estimation is less I/O intensive than step execution because it does not need to access the data blocks.
 * CPU: Size estimation is usually a dense CPU burst whereas step execution CPU utilization is stretched out over time because of disk IO.
  Faster disks, sending a compressed dataset in :ref:`plain mode <zfs-background-knowledge-plain-vs-raw-sends>` and the zrepl transport mode all contribute to higher CPU requirements.
 * Network bandwidth: Size estimation does not consume meaningful amounts of bandwidth, step execution does.
 * :ref:`zrepl ZFS abstractions <zrepl-zfs-abstractions>`: for each replication step zrepl needs to update its ZFS abstractions through the ``zfs`` command which often waits multiple seconds for the zpool to sync.
  Thus, if the actual send & recv time of a step is small compared to the time spent on zrepl ZFS abstractions then increasing step execution concurrency will result in a lower overall turnaround time.
@@ -9,22 +9,65 @@ Send & Recv Options
 Send Options
 ~~~~~~~~~~~~
 :ref:`Source<job-source>` and :ref:`push<job-push>` jobs have an optional ``send`` configuration section.
 ::
   jobs:
   - type: push
     filesystems: ...
     send:
-       encrypted: true
+       # flags from the table below go here
     ...
-:ref:`Source<job-source>` and :ref:`push<job-push>` jobs have an optional ``send`` configuration section.
+The following table specifies the list of (boolean) options.
 Flags with an entry in the ``zfs send`` column map directly to the zfs send CLI flags.
 zrepl does not perform feature checks for these flags.
 If you enable a flag that is not supported by the installed version of ZFS, the zfs error will show up at runtime in the logs and zrepl status.
 See the `upstream man page <https://openzfs.github.io/openzfs-docs/man/8/zfs-send.8.html>`_ (``man zfs-send``) for their semantics.
-``encryption`` option
+.. list-table::
---------------------
+    :widths: 20 10 70
    :header-rows: 1
-The ``encryption`` variable controls whether the matched filesystems are sent as `OpenZFS native encryption <http://open-zfs.org/wiki/ZFS-Native_Encryption>`_ raw sends.
+    * - ``send.``
-More specificially, if ``encryption=true``, zrepl
+      - ``zfs send``
      - Comment
    * - ``encrypted``
      -
      - Specific to zrepl, :ref:`see below <job-send-options-encrypted>`.
    * - ``bandwidth_limit``
      -
      - Specific to zrepl, :ref:`see below <job-send-recv-options--bandwidth-limit>`.
    * - ``raw``
      - ``-w``
      - Use ``encrypted`` to only allow encrypted sends. Mixed sends are not supported.
    * - ``send_properties``
      - ``-p``
      - **Be careful**, read the :ref:`note on property replication below <job-note-property-replication>`.
    * - ``backup_properties``
      - ``-b``
      - **Be careful**, read the :ref:`note on property replication below <job-note-property-replication>`.
    * - ``large_blocks``
      - ``-L``
      - **Potential data loss on OpenZFS < 2.0**, see :ref:`warning below <job-send-options-large-blocks>`.
    * - ``compressed``
      - ``-c``
      -
    * - ``embedded_data``
      - ``-e``
      -
    * - ``saved``
      - ``-S``
      -
 .. _job-send-options-encrypted:
 ``encrypted``
 -------------
 The ``encrypted`` option controls whether the matched filesystems are sent as `OpenZFS native encryption <http://open-zfs.org/wiki/ZFS-Native_Encryption>`_ raw sends.
 More specifically, if ``encrypted=true``, zrepl
 * checks for any of the filesystems matched by ``filesystems`` whether the ZFS ``encryption`` property indicates that the filesystem is actually encrypted with ZFS native encryption and
 * invokes the ``zfs send`` subcommand with the ``-w`` option (raw sends) and
@@ -32,14 +75,213 @@ More specificially, if ``encryption=true``, zrepl
 Filesystems matched by ``filesystems`` that are not encrypted are not sent and will cause error log messages.
-If ``encryption=false``, zrepl expects that filesystems matching ``filesystems`` are not encrypted or have loaded encryption keys.
+If ``encrypted=false``, zrepl expects that filesystems matching ``filesystems`` are not encrypted or have loaded encryption keys.
 .. NOTE::
   Use ``encrypted`` instead of ``raw`` to make your intent clear that zrepl must only replicate filesystems that are actually encrypted by OpenZFS native encryption.
   It is meant as a safeguard to prevent unintended sends of unencrypted filesystems in raw mode.
 .. _job-send-options-properties:
 ``send_properties``
 -------------------
 Sends the dataset properties along with snapshots.
 Please be careful with this option and read the :ref:`note on property replication below <job-note-property-replication>`.
 .. _job-send-options-backup-properties:
 ``backup_properties``
 ---------------------
 When properties are modified on a filesystem that was received from a send stream with ``send.properties=true``, ZFS archives the original received value internally.
 This also applies to :ref:`inheriting or overriding properties during zfs receive <job-recv-options--inherit-and-override>`.
 When sending those received filesystems another hop, the ``backup_properties`` flag instructs ZFS to send the original property values rather than the current locally set values.
 This is useful for replicating properties across multiple levels of backup machines.
 **Example:**
 Suppose we want to flow snapshots from Machine A to B, then from B to C.
 A will enable the :ref:`properties send option <job-send-options-properties>`.
 B will want to override :ref:`critical properties such as mountpoint or canmount <job-note-property-replication>`.
 But the job that replicates from B to C should be sending the original property values received from A.
 Thus, B sets the ``backup_properties`` option.
 Please be careful with this option and read the :ref:`note on property replication below <job-note-property-replication>`.
 .. _job-send-options-large-blocks:
 ``large_blocks``
 ----------------
 This flag should not be changed after initial replication.
 Prior to `OpenZFS commit 7bcb7f08 <https://github.com/openzfs/zfs/pull/10383/files#diff-4c1e47568f46fb63546e984943b09a3e6b051e2242649523f7835bbdfe2a9110R337-R342>`_
 it was possible to change this setting which resulted in **data loss on the receiver**.
 The commit in question is included in OpenZFS 2.0 and works around the problem by prohibiting receives of incremental streams with a flipped setting.
 .. WARNING::
   This bug has **not been fixed in the OpenZFS 0.8 releases** which means that changing this flag after initial replication might cause **data loss** on the receiver.
 .. _job-recv-options:
 Recv Options
 ~~~~~~~~~~~~
-:ref:`Sink<job-sink>` and :ref:`pull<job-pull>` jobs have an optional ``recv`` configuration section.
+:ref:`Sink<job-sink>` and :ref:`pull<job-pull>` jobs have an optional ``recv`` configuration section:
-However, there are currently no variables to configure there.
+
 ::
   jobs:
   - type: pull
     recv:
       properties:
         inherit:
           - "mountpoint"
         override: {
           "org.openzfs.systemd:ignore": "on"
         }
       bandwidth_limit: ...
       placeholder:
         encryption: unspecified | off | inherit
     ...
 Jump to
 :ref:`properties <job-recv-options--inherit-and-override>` ,
 :ref:`bandwidth_limit <job-send-recv-options--bandwidth-limit>` , and
 :ref:`placeholder <job-recv-options--placeholder>`.
 .. _job-recv-options--inherit-and-override:
 ``properties``
 --------------
 ``override`` maps directly to the `zfs recv -o flag <https://openzfs.github.io/openzfs-docs/man/8/zfs-recv.8.html>`_.
 Property name-value pairs specified in this map will apply to all received filesystems, regardless of whether the send stream contains properties or not.
 ``inherit`` maps directly to the `zfs recv -x flag <https://openzfs.github.io/openzfs-docs/man/8/zfs-recv.8.html>`_.
 Property names specified in this list will be inherited from the receiving side's parent filesystem (e.g. ``root_fs``).
 With both options, the sending side's property value is still stored on the receiver, but the local override or inherit is the one that takes effect.
 You can send the original properties from the first receiver to another receiver using :ref:`send.backup_properties<job-send-options-backup-properties>`.
 .. _job-note-property-replication:
 A Note on Property Replication
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 If a send stream contains properties, as per ``send.send_properties`` or ``send.backup_properties``,
 the default ZFS behavior is to use those properties on the receiving side, verbatim.
 In many use cases for zrepl, this can have devastating consequences.
 For example, when backing up a filesystem that has ``mountpoint=/`` to a storage server,
 that storage server's root filesystem will be shadowed by the received file system on some platforms.
 Also, many scripts and tools use ZFS user properties for configuration and do not check the property source (``local`` vs. ``received``).
 If they are installed on the receiving side as well as the sending side, property replication could have unintended effects.
 **zrepl currently does not provide any automatic safe-guards for property replication:**
 * Make sure to read the entire man page on zfs recv (`man zfs recv <https://openzfs.github.io/openzfs-docs/man/8/zfs-recv.8.html>`_) before enabling this feature.
 * Use ``recv.properties.override`` whenever possible, e.g. for ``mountpoint=none`` or ``canmount=off``.
 * Use ``recv.properties.inherit`` if that makes more sense to you.
 Below is an **non-exhaustive list of problematic properties**.
 Please open a pull request if you find a property that is missing from this list.
 (Both with regards to core ZFS tools and other software in the broader ecosystem.)
 Mount behaviour
 ---------------
 * ``mountpoint``
 * ``canmount``
 * ``overlay``
 Note: Before `OpenZFS 2.0.5 <https://github.com/openzfs/zfs/issues/11416>`_, inheriting or overriding the ``mountpoint`` property on ZVOLs fails in ``zfs recv``.
 If you are on such an older version, consider creating separate zrepl jobs for your ZVOL and filesystem datasets.
 Systemd
 -------
 With systemd, you should also consider the properties processed by the `zfs-mount-generator <https://manpages.debian.org/buster-backports/zfsutils-linux/zfs-mount-generator.8.en.html>`_ .
 Most notably:
 * ``org.openzfs.systemd:ignore``
 * ``org.openzfs.systemd:wanted-by``
 * ``org.openzfs.systemd:required-by``
 Encryption
 ----------
 If the sender filesystems are encrypted but the sender does :ref:`plain sends <zfs-background-knowledge-plain-vs-raw-sends>`
 and property replication is enabled, the receiver must :ref:`inherit the following properties<job-recv-options--inherit-and-override>`:
 * ``keylocation``
 * ``keyformat``
 * ``encryption``
 Sharing
 -------
 You may not want the replicated filesystem shared in the same way as the source is.
 * ``sharenfs``
 * ``sharesmb``
 .. _job-recv-options--placeholder:
 Placeholders
 ~~~~~~~~~~~~
 ::
   placeholder:
     encryption: unspecified | off | inherit
 During replication, zrepl :ref:`creates placeholder datasets <replication-placeholder-property>` on the receiving side if the sending side's ``filesystems`` filter creates gaps in the dataset hierarchy.
 This is generally fully transparent to the user.
 However, with OpenZFS Native Encryption, placeholders require zrepl user attention.
 Specifically, the problem is that, when zrepl attempts to create the placeholder dataset on the receiver, and that placeholder's parent dataset is encrypted, ZFS wants to inherit encryption to the placeholder.
 This is relevant to two use cases that zrepl supports:
 1. **encrypted-send-to-untrusted-receiver** In this use case, the sender sends an :ref:`encrypted send stream <job-send-options-encrypted>` and the receiver doesn't have the key loaded.
 2. **send-plain-encrypt-on-receive** The receive-side ``root_fs`` dataset is encrypted, and the senders are unencrypted.
   The key of ``root_fs`` is loaded, and the goal is that the plain sends (e.g., from production) are encrypted on-the-fly during receive, with ``root_fs``'s key.
 For **encrypted-send-to-untrusted-receiver**, the placeholder datasets need to be created with ``-o encryption=off``.
 Without it, creation would fail with an error, indicating that the placeholder's parent dataset's key needs to be loaded.
 But we don't trust the receiver, so we can't expect that to ever happen.
 However, for **send-plain-encrypt-on-receive**, we cannot set ``-o encryption=off``.
 The reason is that if we did, any of the (non-placeholder) child datasets below the placeholder would inherit ``encryption=off``, thereby silently breaking our encrypt-on-receive use case.
 So, to cover this use case, we need to create placeholders without specifying ``-o encryption``.
 This will make ``zfs create`` inherit the encryption mode from the parent dataset, and thereby transitively from ``root_fs``.
 The zrepl config provides the `recv.placeholder.encryption` knob to control this behavior.
 In ``undefined`` mode (default), placeholder creation bails out and asks the user to configure a behavior.
 In ``off`` mode, the placeholder is created with ``encryption=off``, i.e., **encrypted-send-to-untrusted-rceiver** use case.
 In ``inherit`` mode, the placeholder is created without specifying ``-o encryption`` at all, i.e., the **send-plain-encrypt-on-receive** use case.
 Common Options
 ~~~~~~~~~~~~~~
 .. _job-send-recv-options--bandwidth-limit:
 Bandwidth Limit (send & recv)
 -----------------------------
 ::
   bandwidth_limit:
     max: 23.5 MiB # -1 is the default and disabled rate limiting
     bucket_capacity: # token bucket capacity in bytes; defaults to 128KiB
 Both ``send`` and ``recv`` can be limited to a maximum bandwidth through ``bandwidth_limit``.
 For most users, it should be sufficient to just set ``bandwidth_limit.max``.
 The ``bandwidth_limit.bucket_capacity`` refers to the `token bucket size <https://github.com/juju/ratelimit>`_.
 The bandwidth limit only applies to the payload data, i.e., the ZFS send stream.
 It does not account for transport protocol overheads.
 The scope is the job level, i.e., all :ref:`concurrent <replication-option-concurrency>` sends or incoming receives of a job share the bandwidth limit.
@@ -5,53 +5,158 @@
 Taking Snaphots
 ===============
-The ``push``, ``source`` and ``snap`` jobs can automatically take periodic snapshots of the filesystems matched by the ``filesystems`` filter field.
+You can configure zrepl to take snapshots of the filesystems in the ``filesystems`` field specified in ``push``, ``source`` and ``snap`` jobs.
 The snapshot names are composed of a user-defined prefix followed by a UTC date formatted like ``20060102_150405_000``.
 We use UTC because it will avoid name conflicts when switching time zones or between summer and winter time.
-When a job is started, the snapshotter attempts to get the snapshotting rhythms of the matched ``filesystems`` in sync because snapshotting all filesystems at the same time results in a more consistent backup.
+The following snapshotting types are supported:
 To find that sync point, the most recent snapshot, made by the snapshotter, in any of the matched ``filesystems`` is used.
 A filesystem that does not have snapshots by the snapshotter has lower priority than filesystem that do, and thus might not be snapshotted (and replicated) until it is snapshotted at the next sync point.
 For ``push`` jobs, replication is automatically triggered after all filesystems have been snapshotted.
-Note that the ``zrepl signal wakeup JOB`` subcommand does not trigger snapshotting.
+.. list-table::
    :widths: 20 70
    :header-rows: 1
    * - ``snapshotting.type``
      - Comment
    * - ``periodic``
      - Ensure that snapshots are taken at a particular interval.
    * - ``cron``
      - Use cron spec to take snapshots at particular points in time.
    * - ``manual``
      - zrepl does not take any snapshots by itself.
 The ``periodic`` and ``cron`` snapshotting types share some common options and behavior:
 * **Naming:** The snapshot names are composed of a user-defined ``prefix`` followed by a UTC date formatted like ``20060102_150405_000`` by default.
  We either use UTC or timestamp with timezone information because it will avoid name conflicts when switching time zones or between summer and winter time.
  Note that if timestamp with time zone information is used, the "+" of the timezone (i.e. +02:00) is replaced by "_" (i.e. _02:00) to conform to allowed characters in ZFS snapshots.
 * **Hooks:** You can configure hooks to run before or after zrepl takes the snapshots. See :ref:`below <job-snapshotting-hooks>` for details.
 * **Push replication:** After creating all snapshots, the snapshotter will wake up the replication part of the job, if it's a ``push`` job.
  Note that snapshotting is decoupled from replication, i.e., if it is down or takes too long, snapshots will still be taken.
  Note further that other jobs are not woken up by snapshotting.
 .. NOTE::
   There is **no concept of ownership** of the snapshots that are created by ``periodic`` or ``cron``.
   Thus, there is no distinction between zrepl-created snapshots and user-created snapshots during replication or pruning.
   In particular, pruning will take all snapshots into consideration by default.
   To constrain pruning to just zrepl-created snapshots:
     1. Assign a unique `prefix` to the snapshotter and
     2. Use the ``regex`` functionality of the various pruning ``keep`` rules to just consider snapshots with that prefix.
  There is currently no way to constrain replication to just zrepl-created snapshots.
  Follow and comment at :issue:`403` if you need this functionality.
 .. NOTE::
  The ``zrepl signal wakeup JOB`` subcommand does not trigger snapshotting.
 ``periodic`` Snapshotting
 -------------------------
 ::
   jobs:
-    - type: push
+   - ...
-      filesystems: {
+     filesystems: { ... }
        "<": true,
        "tmp": false
      }
     snapshotting:
       type: periodic
       prefix: zrepl_
       interval: 10m
       # Timestamp format that is used as snapshot suffix.
       # Can be any of "dense" (default), "human", "iso-8601", "unix-seconds" or a custom Go time format (see https://go.dev/src/time/format.go)
       timestamp_format: dense
       # Specifies in which time zone the snapshot suffix is generated, optional, defaults to UTC, used only if time zone information is part of timestamp_format.
       # Can be "UTC" (default), "Local" (time zone information from the OS) or any of the IANA Time Zone names (see https://nodatime.org/TimeZones)
       timestamp_location: UTC
       hooks: ...
-      ...
+    pruning: ...
-There is also a ``manual`` snapshotting type, which covers the following use cases:
+The ``periodic`` snapshotter ensures that snapshots are taken in the specified ``interval``.
 If you use zrepl for backup, this translates into your recovery point objective (RPO).
 To meet your RPO, you still need to monitor that replication, which happens asynchronously to snapshotting, actually works.
-* Existing infrastructure for automatic snapshots: you only want to use this zrepl job for replication.
+It is desirable to get all ``filesystems`` snapshotted simultaneously because it results in a more consistent backup.
-* Handling snapshotting through a separate ``snap`` job.
+To accomplish this while still maintaining the ``interval``, the ``periodic`` snapshotter attempts to get the snapshotting rhythms in sync.
 To find that sync point, the most recent snapshot, created by the snapshotter, in any of the matched ``filesystems`` is used.
 A filesystem that does not have snapshots by the snapshotter has lower priority than filesystem that do, and thus might not be snapshotted (and replicated) until it is snapshotted at the next sync point.
 The snapshotter uses the ``prefix`` to identify which snapshots it created.
-Note that you will have to trigger replication manually using the ``zrepl signal wakeup JOB`` subcommand in that case.
+.. _job-snapshotting--cron:
 ``cron`` Snapshotting
 ---------------------
 ::
   jobs:
   - type: snap
     filesystems: { ... }
     snapshotting:
       type: cron
       prefix: zrepl_
       # (second, optional) minute hour day-of-month month day-of-week
       # This example takes snapshots daily at 3:00.
       cron: "0 3 * * *"
       # Timestamp format that is used as snapshot suffix.
       # Can be any of "dense" (default), "human", "iso-8601", "unix-seconds" or a custom Go time format (see https://go.dev/src/time/format.go)
       timestamp_format: dense
       # Specifies in which time zone the snapshot suffix is generated, optional, defaults to UTC, used only if time zone information is part of timestamp_format.
       # Can be "UTC" (default), "Local" (time zone information from the OS) or any of the IANA Time Zone names (see https://nodatime.org/TimeZones)
       timestamp_location: UTC
     pruning: ...
 In ``cron`` mode, the snapshotter takes snaphots at fixed points in time.
 See https://en.wikipedia.org/wiki/Cron for details on the syntax.
 zrepl uses the ``the github.com/robfig/cron/v3`` Go package for parsing.
 An optional field for "seconds" is supported to take snapshots at sub-minute frequencies.
 ``manual`` Snapshotting
 -----------------------
 ::
   jobs:
   - type: push
     filesystems: {
       "<": true,
       "tmp": false
     }
     snapshotting:
       type: manual
     ...
 In ``manual`` mode, zrepl does not take snapshots by itself.
 Manual snapshotting is most useful if you have existing infrastructure for snapshot management.
 Or, if you want to decouple snapshot management from replication using a zrepl ``snap`` job.
 See :ref:`this quickstart guide <quickstart-backup-to-external-disk>` for an example.
 To trigger replication after taking snapshots, use the ``zrepl signal wakeup JOB`` command.
 .. _job-snapshotting-timestamp_format:
 Timestamp Format
 ----------------
 The ``cron`` and ``periodic`` snapshotter support configuring a custom timestamp format that is used as suffix for the snapshot name.
 By default, the current time is converted to UTC and then formatted using the ``dense`` format.
 Both time zone and format can be customized by setting ``timestamp_format`` and/or ``timestamp_location``.
 ``timestamp_location`` is fed verbatim into `time.LoadLocation <https://pkg.go.dev/time#LoadLocation>`_.
 ``timestamp_format`` supports the following values (case-insensitive).
 * ``dense`` => Go format string ``20060102_150405_000``
 * ``human`` => Go format string ``2006-01-02_15:04:05``
 * ``iso-8601`` => Go format string ``2006-01-02T15:04:05.000Z07:00``
 * ``unix-seconds`` => Unix seconds since the epoch, formatted as a decimal string (`time.Time.Unix <https://pkg.go.dev/time#Time.Unix>`_)
 * Any custom Go time format accepted by `time.Time#Format <https://go.dev/src/time/format.go>`_.
 The ``dense``, ``human``, and ``unix-seconds`` formats require the ``timestamp_location`` to be ``UTC`` because they do not contain timezone information.
 The ``+`` character is `not allowed in ZFS snapshot names <https://github.com/openzfs/zfs/blob/1d3ba0bf01020f5459b1c28db3979129088924c0/module/zcommon/zfs_namecheck.c#L334-L351>`_.
 Format strings are disallowed to contain the ``+`` character (it's not a character that is interpreted by ``time.Time.Format``, so there's no reason to use it).
 If a format _produces_ a ``+``, that ``+`` is replaced by an `_`` character.
 .. _job-snapshotting-hooks:
 Pre- and Post-Snapshot Hooks
@@ -131,7 +236,7 @@ The following environment variables are set:
 * ``ZREPL_SNAPNAME``: the zrepl-generated snapshot name (e.g. ``zrepl_20380119_031407_000``)
 * ``ZREPL_DRYRUN``: set to ``"true"`` if a dry run is in progress so scripts can print, but not run, their commands
-An empty template hook can be found in :sampleconf:`hooks/template.sh`.
+An empty template hook can be found in :sampleconf:`/hooks/template.sh`.
 .. _job-hook-type-postgres-checkpoint:
@@ -52,8 +52,15 @@ Serve
        listen: ":8888"
        listen_freebind: true # optional, default false
        clients: {
-          "192.168.122.123" : "mysql01"
+          "192.168.122.123" :               "mysql01",
-          "192.168.122.123" : "mx01"
+          "192.168.122.42" :                "mx01",
          "2001:0db8:85a3::8a2e:0370:7334": "gateway",
          # CIDR masks require a '*' in the client identity string
          # that is expanded to the client's IP address
          "10.23.42.0/24":       "cluster-*"
          "fde4:8dba:82e1::/64": "san-*"
        }
      ...
@@ -84,7 +91,8 @@ The ``tls`` transport uses TCP + TLS with client authentication using client cer
 The client identity is the common name (CN) presented in the client certificate.
 It is recommended to set up a dedicated CA infrastructure for this transport, e.g. using OpenVPN's `EasyRSA <https://github.com/OpenVPN/easy-rsa>`_.
-For a simple 2-machine setup, see the :ref:`instructions below<transport-tcp+tlsclientauth-2machineopenssl>`.
+For a simple 2-machine setup, mutual TLS might also be sufficient.
 We provide :ref:`copy-pastable instructions to generate the certificates below <transport-tcp+tlsclientauth-certgen>`.
 The implementation uses `Go's TLS library <https://golang.org/pkg/crypto/tls/>`_.
 Since Go binaries are statically linked, you or your distribution need to recompile zrepl when vulnerabilities in that library are disclosed.
@@ -96,6 +104,16 @@ If intermediate CAs are used, the **full chain** must be present in either in th
 Regardless, the client's certificate must be first in the ``cert`` file, with each following certificate directly certifying the one preceding it (see `TLS's specification <https://tools.ietf.org/html/rfc5246#section-7.4.2>`_).
 This is the common default when using a CA management tool.
 .. NOTE::
   As of Go 1.15 (zrepl 0.3.0 and newer), the Go TLS / x509 library **requrires Subject Alternative Names**
   be present in certificates. You might need to re-generate your certificates using one of the :ref:`two alternatives
   provided below<transport-tcp+tlsclientauth-certgen>`.
   Note further that zrepl continues to use the CommonName field to assign client identities.
   Hence, we recommend to keep the Subject Alternative Name and the CommonName in sync.
 Serve
 ~~~~~
@@ -140,45 +158,25 @@ The ``server_cn`` specifies the expected common name (CN) of the server's certif
 It overrides the hostname specified in ``address``.
 The connection fails if either do not match.
 .. _transport-tcp+tlsclientauth-certgen:
 .. _transport-tcp+tlsclientauth-2machineopenssl:
-Self-Signed Certificates
+Mutual-TLS between Two Machines
-~~~~~~~~~~~~~~~~~~~~~~~~
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-Tools like `EasyRSA <https://github.com/OpenVPN/easy-rsa>`_ make it easy to manage CA infrastructure for multiple clients, e.g. a central zrepl backup server (in sink mode).
+For a two-machine setup, self-signed certificates distributed using an out-of-band mechanism will also work just fine:
 However, for a two-machine setup, self-signed certificates distributed using an out-of-band mechanism will also work just fine:
 Suppose you have a push-mode setup, with `backups.example.com` running the :ref:`sink job <job-sink>`, and `prod.example.com` running the :ref:`push job <job-push>`.
 Run the following OpenSSL commands on each host, substituting HOSTNAME in both filenames and the interactive input prompt by OpenSSL:
 .. code-block:: bash
   :emphasize-lines: 1-5,24
-   openssl req -x509 -sha256 -nodes \
+   (name=HOSTNAME; openssl req -x509 -sha256 -nodes \
    -newkey rsa:4096 \
    -days 365 \
-      -keyout HOSTNAME.key \
+    -keyout $name.key \
-      -out HOSTNAME.crt
+    -out $name.crt -addext "subjectAltName = DNS:$name" -subj "/CN=$name")
   #Generating a 4096 bit RSA private key
   #................++++
   #.++++
   #writing new private key to 'backups.key'
   #-----
   #You are about to be asked to enter information that will be incorporated
   #into your certificate request.
   #What you are about to enter is what is called a Distinguished Name or a DN.
   #There are quite a few fields but you can leave some blank
   #For some fields there will be a default value,
   #If you enter '.', the field will be left blank.
   #-----
   #Country Name (2 letter code) [XX]:
   #State or Province Name (full name) []:
   #Locality Name (eg, city) [Default City]:
   #Organization Name (eg, company) [Default Company Ltd]:
   #Organizational Unit Name (eg, section) []:
   #Common Name (eg, your name or your server's hostname) []:HOSTNAME
   #Email Address []:
 Now copy each machine's ``HOSTNAME.crt`` to the other machine's ``/etc/zrepl/HOSTNAME.crt``, for example using `scp`.
 The serve & connect configuration will thus look like the following:
@@ -209,6 +207,36 @@ The serve & connect configuration will thus look like the following:
     ...
 Certificate Authority using EasyRSA
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 For more than two machines, it might make sense to set up a CA infrastructure.
 Tools like `EasyRSA <https://github.com/OpenVPN/easy-rsa>`_ make this very easy:
 ::
     #!/usr/bin/env bash
     set -euo pipefail
     HOSTS=(backupserver prod1 prod2 prod3 10.23.42.1)
     curl -L https://github.com/OpenVPN/easy-rsa/releases/download/v3.2.5/EasyRSA-3.2.5.tgz > EasyRSA-3.2.5.tgz
     echo "662ee3b453155aeb1dff7096ec052cd83176c460cfa82ac130ef8568ec4df490  EasyRSA-3.2.5.tgz" | sha256sum -c
     rm -rf EasyRSA-3.2.5
     tar -xf EasyRSA-3.2.5.tgz
     cd EasyRSA-3.2.5
     ./easyrsa --batch
     ./easyrsa --batch init-pki
     ./easyrsa --batch build-ca nopass
     for host in "${HOSTS[@]}"; do
         ./easyrsa --batch --auto-san build-serverClient-full $host nopass
         echo cert for host $host available at pki/issued/$host.crt
         echo key for host $host available at pki/private/$host.key
     done
     echo ca cert available at pki/ca.crt
 .. _transport-ssh+stdinserver:
 ``ssh+stdinserver`` Transport
@@ -0,0 +1,33 @@
 .. include:: global.rst.inc
 .. _future:
 Future
 ======
 This page contains some notes about future plans for zrepl.
 Then again, Christian only has very limited time available for zrepl maintenance these days.
 So, don't count on any of this happening in the near future.
 One big development that has happened in recent years is this fork of zrepl: https://github.com/dsh2dsh/zrepl
 We should figure out whether we can pull in features from there.
 The next major step in terms of new feature development for zrepl would be to revise snapshot management:
 - Make it easy to decouple snapshot management (snapshotting, pruning) from replication.
 - Ability to include/exclude snapshots from replication.
  This is useful for aforementioned decoupling, e.g., separate snapshot prefixes for local & remote replication.
  Also, it makes explicit that by default, zrepl replicates all snapshots, and that
  replication has no concept of "zrepl-created snapshots", which is a common misconception.
 - Use of ``zfs snapshot`` comma syntax or channel programs to take snapshots of multiple
  datasets atomically.
 - Provide an alternative to the ``grid`` pruning policy.
  Most likely something based on hourly/daily/weekly/monthly "trains" plus a count.
 - Ability to prune at the granularity of the **group** of snapshots created at a given
  time, as opposed to the individual snapshots within a dataset.
  Maybe this will be addressed by the alternative to the ``grid`` pruning policy,
  as it will likely be more predictable.
 Those changes will likely come with some breakage in the config.
 However, I want to avoid breaking **use cases** that are satisfied by the current design.
 There will be beta/RC releases to give users a chance to evaluate.
@@ -5,24 +5,33 @@
 .. |GitHub license| image:: https://img.shields.io/github/license/zrepl/zrepl.svg
   :target: https://github.com/zrepl/zrepl/blob/master/LICENSE
-.. |Language: Go| image:: https://img.shields.io/badge/language-Go-6ad7e5.svg
+.. |Language: Go| image:: https://img.shields.io/badge/lang-Go-6ad7e5.svg
   :target: https://golang.org/
 .. |User Docs| image:: https://img.shields.io/badge/docs-web-blue.svg
   :target: https://zrepl.github.io
 .. |Donate via PayPal| image:: https://img.shields.io/badge/donate-paypal-yellow.svg
   :target: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=R5QSXJVYHGX96
-.. |Donate via Liberapay| image:: https://img.shields.io/liberapay/receives/zrepl.svg?logo=liberapay
+.. |Donate via Liberapay| image:: https://img.shields.io/liberapay/patrons/zrepl.svg?logo=liberapay
   :target: https://liberapay.com/zrepl/donate
-.. |Donate via Patreon| image:: https://img.shields.io/endpoint.svg?url=https%3A%2F%2Fshieldsio-patreon.herokuapp.com%2Fzrepl%2Fpledges&style=flat&color=yellow
+.. |Donate via Patreon| image:: https://img.shields.io/badge/dynamic/json?color=yellow&label=Patreon&query=data.attributes.patron_count&url=https%3A%2F%2Fwww.patreon.com%2Fapi%2Fcampaigns%2F3095079
   :target: https://www.patreon.com/zrepl
 .. |Donate via GitHub Sponsors| image:: https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub&style=flat&color=yellow
   :target: https://github.com/sponsors/problame
 .. |Twitter| image:: https://img.shields.io/twitter/url/https/github.com/zrepl/zrepl.svg?style=social
   :target: https://twitter.com/intent/tweet?text=Wow:&url=https%3A%2F%2Fgithub.com%2Fzrepl%2Fzrepl
-
+.. |Matrix| image:: https://img.shields.io/badge/chat-matrix-blue.svg
   :target: https://matrix.to/#/#zrepl:matrix.org
 .. |serve-transport| replace:: :ref:`serve specification<transport>`
 .. |connect-transport| replace:: :ref:`connect specification<transport>`
 .. |send-options| replace:: :ref:`send options<job-send-options>`, e.g. for encrypted sends
 .. |recv-options| replace:: :ref:`recv options<job-recv-options>`
 .. |replication-options| replace:: :ref:`replication options<replication-options>`
 .. |conflict-resolution-options| replace:: :ref:`conflict resolution options<conflict_resolution-options>`
 .. |snapshotting-spec| replace:: :ref:`snapshotting specification <job-snapshotting-spec>`
 .. |pruning-spec| replace:: :ref:`pruning specification <prune>`
 .. |filter-spec| replace:: :ref:`filter specification<pattern-filter>`
 .. |br| raw:: html
   <br/>
@@ -5,7 +5,7 @@
 .. include:: global.rst.inc
-|GitHub license| |Language: Go| |Twitter| |Donate via Patreon| |Donate via Liberapay| |Donate via PayPal| 
+|GitHub license| |Language: Go| |Twitter| |Donate via Patreon| |Donate via GitHub Sponsors| |Donate via Liberapay| |Donate via PayPal| |Matrix|
 zrepl - ZFS replication
@@ -25,10 +25,10 @@ zrepl - ZFS replication
         Progress: [=========================\----] 246.7 MiB / 264.7 MiB @ 11.5 MiB/s
           zroot              STEPPING (step 1/2, 624 B/1.2 KiB) next: @a => @b
           zroot/ROOT         DONE (step 2/2, 1.2 KiB/1.2 KiB)
-           zroot/ROOT/default STEPPING (step 1/2, 123.4 MiB/129.3 MiB) next: @a => @b
+         * zroot/ROOT/default STEPPING (step 1/2, 123.4 MiB/129.3 MiB) next: @a => @b
           zroot/tmp          STEPPING (step 1/2, 29.9 KiB/44.2 KiB) next: @a => @b
           zroot/usr          STEPPING (step 1/2, 624 B/1.2 KiB) next: @a => @b
-           zroot/usr/home     STEPPING (step 1/2, 123.3 MiB/135.3 MiB) next: @a => @b
+         * zroot/usr/home     STEPPING (step 1/2, 123.3 MiB/135.3 MiB) next: @a => @b
           zroot/var          STEPPING (step 1/2, 624 B/1.2 KiB) next: @a => @b
           zroot/var/audit    DONE (step 2/2, 1.2 KiB/1.2 KiB)
           zroot/var/crash    DONE (step 2/2, 1.2 KiB/1.2 KiB)
@@ -44,7 +44,7 @@ zrepl - ZFS replication
 Getting started
 ~~~~~~~~~~~~~~~
-The :ref:`10 minutes tutorial setup <tutorial>` gives you a first impression.
+The :ref:`10 minute quick-start guides <quickstart-toc>` give you a first impression.
 Main Features
 ~~~~~~~~~~~~~
@@ -61,7 +61,12 @@ Main Features
    * [x] Automatic ZFS holds during send & receive
    * [x] Automatic bookmark \& hold management for guaranteed incremental send & recv 
    * [x] Encrypted raw send & receive to untrusted receivers (OpenZFS native encryption)
-    * [ ] Compressed send & receive
+    * [x] Properties send & receive
    * [x] Compressed send & receive
    * [x] Large blocks send & receive
    * [x] Embedded data send & receive
    * [x] Resume state send & receive
    * [x] Bandwidth limiting
 * **Automatic snapshot management**
@@ -125,12 +130,14 @@ Table of Contents
   :maxdepth: 2
   :caption: Contents:
-   tutorial
+   quickstart
   installation
   configuration
   usage
   pr
   changelog
   future
   GitHub Repository & Issue Tracker <https://github.com/zrepl/zrepl>
   Chat: Matrix <https://matrix.to/#/#zrepl:matrix.org>
   supporters
@@ -1,138 +1,19 @@
 .. _binary releases: https://github.com/zrepl/zrepl/releases
-.. _installation:
+.. _installation_toc:
 ************
 Installation
-============
+************
 .. TIP::
-    Note: check out the :ref:`tutorial` if you want a first impression of zrepl.
+    Note: check out the :ref:`quick-start guides <quickstart-toc>` if you want a first impression of zrepl.
-User Privileges
+.. toctree::
 ---------------
-It is possible to run zrepl as an unprivileged user in combination with
+    installation/packages
-`ZFS delegation <https://www.freebsd.org/doc/handbook/zfs-zfs-allow.html>`_.
+    installation/apt-repos
-Also, there is the possibility to run it in a jail on FreeBSD by delegating a dataset to the jail.
+    installation/rpm-repos
-However, until we get around documenting those setups, you will have to run zrepl as root or experiment yourself :)
+    installation/user-privileges
-
+    installation/freebsd-jail-with-iocage
-Packages
+    installation/what-next
 --------
 zrepl source releases are signed & tagged by the author in the git repository.
 Your OS vendor may provide binary packages of zrepl through the package manager.
 Additionally, `binary releases`_ are provided on GitHub.
 The following list may be incomplete, feel free to submit a PR with an update:
 .. list-table::
    :header-rows: 1
    * - OS / Distro
      - Install Command
      - Link
    * - FreeBSD
      - ``pkg install zrepl``
      - `<https://www.freshports.org/sysutils/zrepl/>`_
    * - MacOS
      - ``brew install zrepl``
      - Available on `homebrew <https://brew.sh>`_
    * - Arch Linux
      - ``yay install zrepl``
      - Available on `AUR <https://aur.archlinux.org/packages/zrepl>`_
    * - Fedora
      - ``dnf install zrepl``
      - Available on `COPR <https://copr.fedorainfracloud.org/coprs/poettlerric/zrepl/>`_
    * - CentOS/RHEL
      - ``yum install zrepl``
      - Available on `COPR <https://copr.fedorainfracloud.org/coprs/poettlerric/zrepl/>`_
    * - Debian + Ubuntu
      - ``apt install zrepl``
      - APT repository config :ref:`see below <installation-apt-repos>`
    * - OmniOS
      - ``pkg install zrepl``
      - Available since `r151030 <https://pkg.omniosce.org/r151030/extra/en/search.shtml?token=zrepl&action=Search>`_
    * - Void Linux
      - ``xbps-install zrepl``
      - Available since `a88a2a4 <https://github.com/void-linux/void-packages/commit/a88a2a4d7bf56072dadf61ab56b8424e39155890>`_
    * - Others
      -
      - Use `binary releases`_ or build from source.
 .. _installation-apt-repos:
 Debian / Ubuntu APT repositories
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 We maintain APT repositories for Debian, Ubuntu and derivatives.
 The fingerprint of the signing key is ``E101 418F D3D6 FBCB 9D65  A62D 7086 99FC 5F2E BF16``.
 It is available at `<https://zrepl.cschwarz.com/apt/apt-key.asc>`_ .
 Please open an issue `in the packaging repository <https://github.com/zrepl/debian-binary-packaging>`_ if you encounter any issues with the repository.
 The following snippet configure the repository for your Debian or Ubuntu release:
 ::
    apt update && apt install curl gnupg lsb-release; \
    ARCH="$(dpkg --print-architecture)"; \
    CODENAME="$(lsb_release -i -s | tr '[:upper:]' '[:lower:]') $(lsb_release -c -s | tr '[:upper:]' '[:lower:]')"; \
    echo "Using Distro and Codename: $CODENAME"; \
    (curl https://zrepl.cschwarz.com/apt/apt-key.asc | apt-key add -) && \
    (echo "deb [arch=$ARCH] https://zrepl.cschwarz.com/apt/$CODENAME main" > /etc/apt/sources.list.d/zrepl.list) && \
    apt update
 .. NOTE::
   Until zrepl reaches 1.0, all APT repositories will be updated to the latest zrepl release immediately.
   This includes breaking changes between zrepl versions.
   Use ``apt-mark hold zrepl`` to prevent upgrades of zrepl.
 Compile From Source
 ~~~~~~~~~~~~~~~~~~~
 Producing a release requires **Go 1.11** or newer and **Python 3** + **pip3** + ``docs/requirements.txt`` for the Sphinx documentation.
 A tutorial to install Go is available over at `golang.org <https://golang.org/doc/install>`_.
 Python and pip3 should probably be installed via your distro's package manager.
 Alternatively, you can use the Docker build process:
 it is used to produce the official zrepl `binary releases`_
 and serves as a reference for build dependencies and procedure:
 ::
    git clone https://github.com/zrepl/zrepl.git
    cd zrepl
    sudo docker build -t zrepl_build -f build.Dockerfile .
    sudo docker run -it --rm \
        -v "${PWD}:/src" \
        --user "$(id -u):$(id -g)" \
        zrepl_build make release
 Alternatively, you can install build dependencies on your local system and then build in your ``$GOPATH``:
 ::
    mkdir -p "${GOPATH}/src/github.com/zrepl/zrepl"
    git clone https://github.com/zrepl/zrepl.git "${GOPATH}/src/github.com/zrepl/zrepl"
    cd "${GOPATH}/src/github.com/zrepl/zrepl"
    python3 -m venv3
    source venv3/bin/activate
    ./lazy.sh devsetup
    make release
 The Python venv is used for the documentation build dependencies.
 If you just want to build the zrepl binary, leave it out and use `./lazy.sh godep` instead.
 Either way, all build results are located in the ``artifacts/`` directory.
 .. NOTE::
    It is your job to install the apropriate binary in the zrepl users's ``$PATH``, e.g. ``/usr/local/bin/zrepl``.
    Otherwise, the examples in the :ref:`tutorial` may need to be adjusted.
 What next?
 ----------
 Read the :ref:`configuration chapter<configuration_toc>` and then continue with the :ref:`usage chapter<usage>`.
 **Reminder**: If you want a quick introduction, please read the :ref:`tutorial`.
@@ -0,0 +1,40 @@
 .. _installation-apt-repos:
 Debian / Ubuntu APT repositories
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 We maintain APT repositories for Debian, Ubuntu and derivatives.
 The fingerprint of the signing key is ``E101 418F D3D6 FBCB 9D65  A62D 7086 99FC 5F2E BF16``.
 It is available at `<https://zrepl.cschwarz.com/apt/apt-key.asc>`_ .
 Please open an issue in on GitHub if you encounter any issues with the repository.
 ::
    (
    set -ex
    zrepl_apt_key_url=https://zrepl.cschwarz.com/apt/apt-key.asc
    zrepl_apt_key_dst=/usr/share/keyrings/zrepl.gpg
    zrepl_apt_repo_file=/etc/apt/sources.list.d/zrepl.list
    # Install dependencies for subsequent commands
    sudo apt update && sudo apt install curl gnupg lsb-release
    # Deploy the zrepl apt key.
    curl -fsSL "$zrepl_apt_key_url" | tee | gpg --dearmor | sudo tee "$zrepl_apt_key_dst" > /dev/null
    # Add the zrepl apt repo.
    ARCH="$(dpkg --print-architecture)"
    CODENAME="$(lsb_release -i -s | tr '[:upper:]' '[:lower:]') $(lsb_release -c -s | tr '[:upper:]' '[:lower:]')"
    echo "Using Distro and Codename: $CODENAME"
    echo "deb [arch=$ARCH signed-by=$zrepl_apt_key_dst] https://zrepl.cschwarz.com/apt/$CODENAME main" | sudo tee "$zrepl_apt_repo_file" > /dev/null
    # Update apt repos.
    sudo apt update
    )
 .. NOTE::
   Until zrepl reaches 1.0, the repositories will be updated to the latest zrepl release immediately.
   This includes breaking changes between zrepl versions.
   Use ``apt-mark hold zrepl`` to prevent upgrades of zrepl.
@@ -0,0 +1,152 @@
 .. include:: ../global.rst.inc
 .. _installation-freebsd-jail-with-iocage:
 FreeBSD Jail With iocage
 ========================
 This tutorial shows how zrepl can be installed on FreeBSD, or FreeNAS in a jail using iocage.
 While this tutorial focuses on using iocage, much of the setup would be similar
 using a different jail manager.
 .. NOTE::
   From a security perspective, just keep in mind that ``zfs send``/``recv`` was never designed with
   jails in mind, an attacker could probably crash the receive-side kernel or worse induce stateful
   damage to the receive-side pool if they were able to get access to the jail.
   The jail doesn't provide security benefits, but only management ones.
 Requirements
 ------------
 A dataset that will be delegated to the jail needs to be created if one does not already exist.
 For the tutorial ``tank/zrepl`` will be used.
 .. code-block:: bash
   zfs create -o mountpoint=none tank/zrepl
 The only software requirements on the host system are ``iocage``, which can be installed
 from ports or packages.
 .. code-block:: bash
   pkg install py37-iocage
 .. NOTE::
   By default ``iocage`` will "activate" on first use which will set up some defaults such as
   which pool will be used. To activate ``iocage`` manually the ``iocage activate`` command can be used.
 Jail Creation
 -------------
 There are two options for jail creation using FreeBSD.
 1. Manually set up the jail from scratch
 2. Create the jail using the ``zrepl`` plugin. On FreeNAS this is possible from the user interface using the community index.
 Manual Jail
 ###########
 Create a jail, using the same release as the host, called ``zrepl`` that will be automatically started at boot.
 The jail will have ``tank/zrepl`` delegated into it.
 .. code-block:: bash
   iocage create --release "$(freebsd-version -k | cut -d '-' -f '1,2')" --name zrepl \
          boot=on nat=1 \
          jail_zfs=on \
          jail_zfs_dataset=zrepl \
          jail_zfs_mountpoint='none'
 Enter the jail:
 .. code-block:: bash
   iocage console zrepl
 Install ``zrepl``
 .. code-block:: bash
   pkg update && pkg upgrade
   pkg install zrepl
 Create the log file ``/var/log/zrepl.log``
 .. code-block:: bash
   touch /var/log/zrepl.log && service newsyslog restart
 Tell syslogd to redirect facility local0 to the ``zrepl.log`` file:
 .. code-block:: bash
   service syslogd reload
 Enable the zrepl daemon to start automatically at boot:
 .. code-block:: bash
   sysrc zrepl_enable="YES"
 Now jump to :ref:`the summary <installation-freebsd-jail-summary>` below.
 Plugin
 ######
 When using the plugin, ``zrepl`` will be installed for you in a jail using the following ``iocage`` properties.
 * ``nat=1``
 * ``jail_zfs=on``
 * ``jail_zfs_mountpoint=none``
 Additionally the delegated dataset should be specified upon creation, and optionally start on boot can be set.
 This can also be done from the FreeNAS webui.
 .. code-block:: bash
   fetch https://raw.githubusercontent.com/ix-plugin-hub/iocage-plugin-index/master/zrepl.json -o /tmp/zrepl.json
   iocage fetch -P /tmp/zrepl.json --name zrepl jail_zfs_dataset=zrepl boot=on
 Configuration
 -------------
 Now ``zrepl`` can be configured.
 Enter the jail.
 .. code-block:: bash
   iocage console zrepl
 Modify the ``/usr/local/etc/zrepl/zrepl.yml`` configuration file.
 .. TIP::
    Note: check out the :ref:`quick-start guides <quickstart-toc>` for examples of a ``sink`` job.
 Now ``zrepl`` can be started.
 .. code-block:: bash
   service zrepl start
 Now jump to :ref:`the summary <installation-freebsd-jail-summary>` below.
 .. _installation-freebsd-jail-summary:
 Summary
 -------
 Congratulations, you have a working jail!
 .. NOTE::
   With FreeBSD 13's transition to OpenZFS 2.0, please ensure that your jail's FreeBSD version matches the one in the kernel module.
   If you are getting cryptic errors such as
   ``cannot receive new filesystem stream: invalid backup stream``
   the instructions posted `here <https://github.com/zrepl/zrepl/issues/500#issuecomment-966215205>`_ might help.
@@ -0,0 +1,50 @@
 .. _installation-packages:
 .. _binary releases: https://github.com/zrepl/zrepl/releases
 Packages
 --------
 zrepl source releases are signed & tagged by the author in the git repository.
 Your OS vendor may provide binary packages of zrepl through the package manager.
 Additionally, `binary releases`_ are provided on GitHub.
 The following list may be incomplete, feel free to submit a PR with an update:
 .. list-table::
    :header-rows: 1
    * - OS / Distro
      - Install Command
      - Link
    * - any
      - Statically linked binaries.
      - `Official GitHub releases <binary releases_>`_
    * - FreeBSD
      - ``pkg install zrepl``
      - `<https://www.freshports.org/sysutils/zrepl/>`_
        :ref:`installation-freebsd-jail-with-iocage`
    * - FreeNAS
      -
      - :ref:`installation-freebsd-jail-with-iocage`
    * - MacOS
      - ``brew install zrepl``
      - Available on `homebrew <https://brew.sh>`_
    * - Arch Linux
      - ``yay install zrepl``
      - Available on `AUR <https://aur.archlinux.org/packages/zrepl>`_
    * - Fedora / RHEL / OpenSUSE
      - ``dnf install zrepl``
      - :ref:`RPM repository config <installation-rpm-repos>`
    * - Debian + Ubuntu
      - ``apt install zrepl``
      - :ref:`APT repository config <installation-apt-repos>`
    * - OmniOS
      - ``pkg install zrepl``
      - Available since `r151030 <https://pkg.omniosce.org/r151030/extra/en/search.shtml?token=zrepl&action=Search>`_
    * - Void Linux
      - ``xbps-install zrepl``
      - Available since `a88a2a4 <https://github.com/void-linux/void-packages/commit/a88a2a4d7bf56072dadf61ab56b8424e39155890>`_
    * - any
      - Build from source
      - :repomasterlink:`README.md`.
@@ -0,0 +1,55 @@
 .. _installation-rpm-repos:
 RPM repositories
 ~~~~~~~~~~~~~~~~
 We provide a single RPM repository for all RPM-based Linux distros.
 The zrepl binary in the repo is the same as the one published to GitHub.
 Since Go binaries are statically linked, the RPM should work about everywhere.
 Please open an issue on GitHub if you encounter any issues with the repository.
 The fingerprint of the repo & package signing key is:
 ``F6F6 E8EA 6F2F 1462 2878 B5DE 50E3 4417 826E 2CE6``.
 It is available at `<https://zrepl.cschwarz.com/rpm/rpm-key.asc>`_ .
 .. NOTE::
   Until zrepl reaches 1.0, the repository will be updated to the latest zrepl release immediately.
   This includes breaking changes between zrepl versions.
   If that bothers you, use the `dnf versionlock plugin <https://dnf-plugins-core.readthedocs.io/en/latest/versionlock.html>`_ or ``zypper addlock zrepl`` to pin the version of zrepl on your system.
 Fedora / AlmaLinux / Rocky Linux / RHEL
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 For ``dnf``/``yum``-based distributions, copy-paste the following snippet:
 .. code-block:: bash
    rpmkeys --import 'https://zrepl.cschwarz.com/rpm/rpm-key.asc'
    cat > /etc/yum.repos.d/zrepl.repo <<EOF
    [zrepl]
    name = zrepl
    baseurl = https://zrepl.cschwarz.com/rpm/repo
    gpgkey = https://zrepl.cschwarz.com/rpm/rpm-key.asc
    repo_gpgcheck = 1
    EOF
    dnf install zrepl
    # Or if you're on an older system:
    # yum install zrepl
 You will be asked by dnf to verify repository metadata (``repo_gpgcheck``).
 There is no way to automate that prompt.
 openSUSE
 ^^^^^^^^
 For SUSE-based distributions that use ``zypper``, copy-paste the following snippet:
 .. code-block:: bash
    rpmkeys --import 'https://zrepl.cschwarz.com/rpm/rpm-key.asc'
    zypper ar --check --gpgcheck-strict --refresh https://zrepl.cschwarz.com/rpm/repo zrepl
    zypper install zrepl
@@ -0,0 +1,12 @@
 .. _installation-user-privileges:
 User Privileges
 ---------------
 It is possible to run zrepl as an unprivileged user in combination with
 `ZFS delegation <https://www.freebsd.org/doc/handbook/zfs-zfs-allow.html>`_.
 Also, there is the possibility to run it in a jail on FreeBSD by delegating a dataset to the jail.
 .. TIP::
    Note: check out the :ref:`installation-freebsd-jail-with-iocage` for FreeBSD jail setup instructions.
@@ -0,0 +1,8 @@
 .. _installation-what-next:
 What next?
 ----------
 Read the :ref:`configuration chapter<configuration_toc>` and then continue with the :ref:`usage chapter<usage>`.
 **Reminder**: If you want a quick introduction, please read the :ref:`quick-start guides <quickstart-toc>`.
@@ -15,3 +15,5 @@ Talks & Presentations
  `Event <https://wiki.freebsd.org/DevSummit/201709>`__
  )
  * Note: The remarks on ``keep_bookmarks`` are irrelevant as of zrepl 0.1 which introduced the zrepl-managed replication cursor bookmark.
    Read the `Overview <overview-how-replication-works>`_ section to learn more.
@@ -1,78 +1,94 @@
 #!/bin/bash
-set -eo pipefail
+set -euo pipefail
-GHPAGESREPO="git@github.com:zrepl/zrepl.github.io.git"
+GHPAGESREPO="https://github.com/zrepl/zrepl.github.io.git"
 SCRIPTDIR=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
 PUBLICDIR="${SCRIPTDIR}/public_git"
 ROOTDIR="${SCRIPTDIR}/.."
-checkout_repo_msg() {
+PUSH=false
-    echo "clone ${GHPAGESREPO} to ${PUBLICDIR}:"
+DO_CLONE=false
-    echo "	git clone ${GHPAGESREPO} ${PUBLICDIR}"
+NON_INTERACTIVE=false
    git clone "${GHPAGESREPO}" "${PUBLICDIR}"
 }
-exit_msg() {
+while getopts "caPh" arg; do
-    echo "error, exiting..."
+    case "$arg" in
-}
+        "a") NON_INTERACTIVE=true ;;
-trap exit_msg EXIT
+        "c") DO_CLONE=true ;;
-
+        "P") PUSH=true ;;
-if ! type sphinx-versioning >/dev/null; then
+        "h") echo "Usage: $0 [-c clone] [-a auto/non-interactive] [-P push]"; exit 0 ;;
-    echo "install sphinx-versioning and come back"
+        *) echo "invalid option"; exit 1 ;;
-    exit 1
+    esac
-fi
+done
 cd "$SCRIPTDIR"
 # Clone or verify repo
 if [ ! -d "$PUBLICDIR" ]; then
-    checkout_repo_msg
+    if $DO_CLONE; then
        git clone "${GHPAGESREPO}" "${PUBLICDIR}"
    else
        echo "Run with -c to clone ${GHPAGESREPO}"
        exit 1
    fi
 fi
 if ! $NON_INTERACTIVE; then
    echo -n "PRESS ENTER to confirm you committed and pushed docs changes to the zrepl repo"
    read -r
 fi
 # Verify we're in the right repo
 cd "$PUBLICDIR"
 REMOTE_URL=$(git remote get-url origin)
 if [[ "$REMOTE_URL" != *"zrepl.github.io"* ]]; then
    echo "ERROR: ${PUBLICDIR} remote is '${REMOTE_URL}', expected zrepl.github.io repo"
    exit 1
 fi
-echo -n "PRESS ENTER to confirm you commited and pushed docs changes and tags to the zrepl repo"
+# Reset public repo to latest
-read
+echo "Resetting GitHub pages repo to latest commit..."
 pushd "$PUBLICDIR" 
 echo "verify we're in the GitHub pages repo..."
 git remote get-url origin | grep -E "^${GHPAGESREPO}\$"
 if [ "$?" -ne "0" ] ;then 
    checkout_repo_msg
    echo "finished checkout, please run again"
    exit 1
 fi
 echo "resetting GitHub pages repo to latest commit"
 git fetch origin
 git reset --hard origin/master
-echo "cleaning GitHub pages repo"
+# Clean everything
-git rm -rf .
+echo "Cleaning GitHub pages repo..."
 git rm -rf . || true
-popd
+# GitHub Pages https://github.blog/news-insights/the-library/bypassing-jekyll-on-github-pages/
 touch .nojekyll
-echo "building site"
+# Build docs
-set -e
+echo "Building docs..."
-sphinx-versioning build \
+cd "$ROOTDIR"
-   --show-banner \
+make docs
   --whitelist-branches '^master$' \
   --whitelist-tags '(v)?\d+\.[1-9][0-9]*.\d+$' \
   docs ./public_git \
   -- -c sphinxconf # older conf.py throw errors because they used
                    # version = subprocess.show_output(["git", "describe"])
                    # which fails when building with sphinxcontrib-versioning
 set +e
-CURRENT_COMMIT=$(git rev-parse HEAD)
+# Copy built docs to public repo
-git status --porcelain
+echo "Copying built docs..."
-if [[ "$(git status --porcelain)" != "" ]]; then
+cp -r artifacts/docs/html/* "$PUBLICDIR/"
 # Commit
 cd "$PUBLICDIR"
 cat > .gitignore <<EOF
 **/.doctrees
 EOF
 git add .gitignore
 git add -A
 CURRENT_COMMIT=$(git -C "$ROOTDIR" rev-parse HEAD)
 if [ "$(git -C "$ROOTDIR" status --porcelain)" != "" ]; then
    CURRENT_COMMIT="${CURRENT_COMMIT}(dirty)"
 fi
-COMMIT_MSG="sphinx-versioning render from publish.sh - `date -u` - ${CURRENT_COMMIT}"
+COMMIT_MSG="docs: $(date -u) - ${CURRENT_COMMIT}"
-pushd "$PUBLICDIR"
+if [ "$(git status --porcelain)" != "" ]; then
 echo "adding and commiting all changes in GitHub pages repo"
 git add -A
    git commit -m "$COMMIT_MSG"
-git push origin master
+else
    echo "Nothing to commit"
 fi
 if $PUSH; then
    echo "Pushing to GitHub pages repo..."
    git push origin master
 else
    echo "Not pushing. Use -P to push."
 fi
@@ -0,0 +1,9 @@
 [project]
 name = "zrepl-docs"
 version = "0.0.0"
 description = "zrepl documentation build dependencies"
 requires-python = ">=3.14"
 dependencies = [
    "Sphinx>=7.2,<8",
    "sphinx-rtd-theme>=1.3,<2",
 ]
@@ -0,0 +1,101 @@
 .. include:: global.rst.inc
 .. _quickstart-toc:
 ***********************
 Quick Start by Use Case
 ***********************
 The goal of this quick-start guide is to give you an impression of how zrepl can accomodate your use case.
 Install zrepl
 =============
 Follow the :ref:`OS-specific installation instructions <installation_toc>` and come back here.
 Overview Of How zrepl Works
 ============================
 Check out the :ref:`overview section <job-overview>` to get a rough idea of what you are going to configure in the next step, then come back here.
 Configuration Examples
 ======================
 zrepl is configured through a YAML configuration file in ``/etc/zrepl/zrepl.yml``.
 We have prepared example use cases that show-case typical deployments and different functionality of zrepl.
 We encourage you to read through all of the examples to get an idea of what zrepl has to offer, and how you can mix-and-match configurations for your use case.
 Keep the :ref:`full config documentation <configuration_toc>` handy if a config snippet is unclear.
 **Example Use Cases**
 .. toctree::
   :titlesonly:
   quickstart/continuous_server_backup
   quickstart/backup_to_external_disk
   quickstart/fan_out_replication
 Use ``zrepl configcheck`` to validate your configuration.
 No output indicates that everything is fine.
 .. NOTE::
   Please open an issue on GitHub if your use case for zrepl is significantly different from those listed above.
   Or even better, write it up in the same style as above and open a PR!
 .. _quickstart-apply-config:
 Apply Configuration Changes
 ===========================
 We hope that you have found a configuration that fits your use case.
 Use ``zrepl configcheck`` once again to make sure the config is correct (output indicates that everything is fine).
 Then restart the zrepl daemon on all systems involved in the replication, likely using ``service zrepl restart`` or ``systemctl restart zrepl``.
 .. WARNING::
   Please :ref:`read up carefully <prune>` on the pruning rules before applying the config.
   In particular, note that most example configs apply to all snapshots, not just zrepl-created snapshots.
   Use the following keep rule on sender and receiver to prevent this:
   ::
      - type: regex
        negate: true
        regex: "^zrepl_.*" # <- the 'prefix' specified in snapshotting.prefix
 Watch it Work
 =============
 Run ``zrepl status`` on the active side of the replication setup to monitor snaphotting, replication and pruning activity.
 To re-trigger replication (snapshots are separate!), use ``zrepl signal wakeup JOBNAME``.
 (refer to the example use case document if you are uncertain which job you want to wake up).
 You can also use basic UNIX tools to inspect see what's going on.
 If you like tmux, here is a handy script that works on FreeBSD: ::
    pkg install gnu-watch tmux
    tmux new -s zrepl -d
    tmux split-window -t zrepl "tail -f /var/log/messages"
    tmux split-window -t zrepl "gnu-watch 'zfs list -t snapshot -o name,creation -s creation'"
    tmux split-window -t zrepl "zrepl status"
    tmux select-layout -t zrepl tiled
    tmux attach -t zrepl
 The Linux equivalent might look like this: ::
    # make sure tmux is installed & let's assume you use systemd + journald
    tmux new -s zrepl -d
    tmux split-window -t zrepl  "journalctl -f -u zrepl.service"
    tmux split-window -t zrepl "watch 'zfs list -t snapshot -o name,creation -s creation'"
    tmux split-window -t zrepl "zrepl status"
    tmux select-layout -t zrepl tiled
    tmux attach -t zrepl
 What Next?
 ==========
 * Read more about :ref:`configuration format, options & job types <configuration_toc>`
 * Configure :ref:`logging <logging>` \& :ref:`monitoring <monitoring>`.
@@ -0,0 +1,49 @@
 .. include:: ../global.rst.inc
 .. _quickstart-backup-to-external-disk:
 Local Snapshots + Offline Backup to an External Disk
 ====================================================
 This config example shows how we can use zrepl to make periodic snapshots of our local workstation and back it up to a zpool on an external disk which we occassionally connect.
 The local snapshots should be taken every 15 minutes for pain-free recovery from CLI disasters (``rm -rf /`` and the like).
 However, we do not want to keep the snapshots around for very long because our workstation is a little tight on disk space.
 Thus, we only keep one hour worth of high-resolution snapshots, then fade them out to one per hour for a day (24 hours), then one per day for 14 days.
 At the end of each work day, we connect our external disk that serves as our workstation's local offline backup.
 We want zrepl to inspect the filesystems and snapshots on the external pool, figure out which snapshots were created since the last time we connected the external disk, and use incremental replication to efficiently mirror our workstation to our backup disk.
 Afterwards, we want to clean up old snapshots on the backup pool: we want to keep all snapshots younger than one hour, 24 for each hour of the first day, then 360 daily backups.
 A few additional requirements:
 * Snapshot creation and pruning on our workstation should happen in the background, without interaction from our side.
 * However, we want to explicitly trigger replication via the command line.
 * We want to use OpenZFS native encryption to protect our data on the external disk.
  It is absolutely critical that only encrypted data leaves our workstation.
  **zrepl should provide an easy config knob for this and prevent replication of unencrypted datasets to the external disk.**
 * We want to be able to put off the backups for more than three weeks, i.e., longer than the lifetime of the automatically created snapshots on our workstation.
  **zrepl should use bookmarks and holds to achieve this goal**.
 * When we yank out the drive during replication and go on a long vacation, we do *not* want the partially replicated snapshot to stick around as it would hold on to too much disk space over time.
  Therefore, we want zrepl to deviate from its :ref:`default behavior <replication-option-protection>` and sacrifice resumability, but nonetheless retain the ability to do incremental replication once we return from our vacation.
  **zrepl should provide an easy config knob to disable step holds for incremental replication**.
 The following config snippet implements the setup described above.
 You will likely want to customize some aspects mentioned in the top comment in the file.
 .. literalinclude:: ../../internal/config/samples/quickstart_backup_to_external_disk.yml
 Offline Backups with two (or more) External Disks
 -------------------------------------------------
 It can be desirable to have multiple disk-based backups of the same machine.
 To accomplish this,
 * create one zpool per external HDD, each with a unique name, and
 * define a pair of ``push`` and ``sink`` job **for each** of these zpools, each with a unique ``name``, ``listener_name``, and ``root_fs``.
 The unique names ensure that the jobs don't step on each others' toes when managing :ref:`zrepl's ZFS abstractions <zrepl-zfs-abstractions>` .
 :ref:`Click here <quickstart-apply-config>` to go back to the quickstart guide.
@@ -0,0 +1,94 @@
 .. include:: ../global.rst.inc
 .. _quickstart-continuous-replication:
 Continuous Backup of a Server
 =============================
 This config example shows how we can backup our ZFS-based server to another machine using a zrepl push job.
 * Production server ``prod`` with filesystems to back up:
  * The entire pool ``zroot``
  * except ``zroot/var/tmp`` and all child datasets of it
  * and except ``zroot/usr/home/paranoid`` which belongs to a user doing backups themselves.
 * Backup server ``backups`` with a dataset sub-tree for use by zrepl:
  * In our example, that will be ``storage/zrepl/sink/prod``.
 Our backup solution should fulfill the following requirements:
 * Periodically snapshot the filesystems on ``prod`` *every 10 minutes*
 * Incrementally replicate these snapshots to ``storage/zrepl/sink/prod/*`` on ``backups``
 * Keep only very few snapshots on ``prod`` to save disk space
 * Keep a fading history (24 hourly, 30 daily, 6 monthly) of snapshots on ``backups``
 * The network is untrusted - zrepl should use TLS to protect its communication and our data.
 Analysis
 --------
 We can model this situation as two jobs:
 * A **push job** on ``prod``
  * Creates the snapshots
  * Keeps a short history of local snapshots to enable incremental replication to ``backups``
  * Connects to the ``zrepl daemon`` process on ``backups``
  * Pushes snapshots ``backups``
  * Prunes snapshots on ``backups`` after replication is complete
 * A **sink job** on ``backups``
  * Accepts connections & responds to requests from ``prod``
  * Limits client ``prod`` access to filesystem sub-tree ``storage/zrepl/sink/prod``
 Generate TLS Certificates
 -------------------------
 We use the :ref:`TLS client authentication transport <transport-tcp+tlsclientauth>` to protect our data on the wire.
 To get things going quickly, we skip setting up a CA and generate two self-signed certificates as described :ref:`here <transport-tcp+tlsclientauth-2machineopenssl>`.
 For convenience, we generate the key pairs on our local machine and distribute them using ssh:
 .. code-block:: bash
   (name=backups; openssl req -x509 -sha256 -nodes \
    -newkey rsa:4096 \
    -days 365 \
    -keyout $name.key \
    -out $name.crt -addext "subjectAltName = DNS:$name" -subj "/CN=$name")
   (name=prod; openssl req -x509 -sha256 -nodes \
    -newkey rsa:4096 \
    -days 365 \
    -keyout $name.key \
    -out $name.crt -addext "subjectAltName = DNS:$name" -subj "/CN=$name")
   ssh root@backups "mkdir /etc/zrepl"
   scp  backups.key backups.crt prod.crt root@backups:/etc/zrepl
   ssh root@prod "mkdir /etc/zrepl"
   scp  prod.key prod.crt backups.crt root@prod:/etc/zrepl
 Note that alternative transports exist, e.g. via :ref:`TCP without TLS <transport-tcp>` or :ref:`ssh <transport-ssh+stdinserver>`.
 Configure server ``prod``
 -------------------------
 We define a **push job** named ``prod_to_backups`` in ``/etc/zrepl/zrepl.yml`` on host ``prod`` :
 .. literalinclude:: ../../internal/config/samples/quickstart_continuous_server_backup_sender.yml
 .. _tutorial-configure-prod:
 Configure server ``backups``
 ----------------------------
 We define a corresponding **sink job** named ``sink`` in ``/etc/zrepl/zrepl.yml`` on host ``backups`` :
 .. literalinclude:: ../../internal/config/samples/quickstart_continuous_server_backup_receiver.yml
 Go Back To Quickstart Guide
 ---------------------------
 :ref:`Click here <quickstart-apply-config>` to go back to the quickstart guide.
@@ -0,0 +1,93 @@
 .. include:: ../global.rst.inc
 .. _quickstart-fan-out-replication:
 Fan-out replication
 ===================
 This quick-start example demonstrates how to implement a fan-out replication setup where datasets on a server (A) are replicated to multiple targets (B, C, etc.).
 This example uses multiple ``source`` jobs on server A and ``pull`` jobs on the target servers.
 .. WARNING::
   Before implementing this setup, please see the caveats listed in the :ref:`fan-out replication configuration overview <fan-out-replication>`.
 Overview
 --------
 On the source server (A), there should be:
 * A ``snap`` job
  * Creates the snapshots
  * Handles the pruning of snapshots
 * A ``source`` job for target B
  * Accepts connections from server B and B only
 * Further ``source`` jobs for each additional target (C, D, etc.)
  * Listens on a unique port
  * Only accepts connections from the specific target
 On each target server, there should be:
 * A ``pull`` job that connects to the corresponding ``source`` job on A
  * ``prune_sender`` should keep all snapshots since A's ``snap`` job handles the pruning
  * ``prune_receiver`` can be configured as appropriate on each target server
 Generate TLS Certificates
 -------------------------
 Mutual TLS via the :ref:`TLS client authentication transport <transport-tcp+tlsclientauth>` can be used to secure the connections between the servers. In this example, a self-signed certificate is created for each server without setting up a CA.
 .. code-block:: bash
    source=a.example.com
    targets=(
        b.example.com
        c.example.com
        # ...
    )
    for server in "${source}" "${targets[@]}"; do
        openssl req -x509 -sha256 -nodes \
            -newkey rsa:4096 \
            -days 365 \
            -keyout "${server}.key" \
            -out "${server}.crt" \
            -addext "subjectAltName = DNS:${server}" \
            -subj "/CN=${server}"
    done
    # Distribute each host's keypair
    for server in "${source}" "${targets[@]}"; do
        ssh root@"${server}" mkdir /etc/zrepl
        scp "${server}".{crt,key} root@"${server}":/etc/zrepl/
    done
    # Distribute target certificates to the source
    scp "${targets[@]/%/.crt}" root@"${source}":/etc/zrepl/
    # Distribute source certificate to the targets
    for server in "${targets[@]}"; do
        scp "${source}.crt" root@"${server}":/etc/zrepl/
    done
 Configure source server A
 -------------------------
 .. literalinclude:: ../../internal/config/samples/quickstart_fan_out_replication_source.yml
 Configure each target server
 ----------------------------
 .. literalinclude:: ../../internal/config/samples/quickstart_fan_out_replication_target.yml
 Go Back To Quickstart Guide
 ---------------------------
 :ref:`Click here <quickstart-apply-config>` to go back to the quickstart guide.
@@ -1,30 +0,0 @@
 alabaster==0.7.12
 attrs==19.1.0
 Babel==2.7.0
 certifi==2019.6.16
 chardet==3.0.4
 Click==7.0
 colorclass==2.2.0
 docutils==0.15.2
 idna==2.8
 imagesize==1.1.0
 Jinja2==2.10.1
 MarkupSafe==1.1.1
 packaging==19.1
 Pygments==2.4.2
 pyparsing==2.4.2
 pytz==2019.2
 requests==2.22.0
 six==1.12.0
 snowballstemmer==1.9.1
 Sphinx==1.8.5
 sphinx-rtd-theme==0.4.3
 sphinxcontrib-applehelp==1.0.1
 sphinxcontrib-devhelp==1.0.1
 sphinxcontrib-htmlhelp==1.0.2
 sphinxcontrib-jsmath==1.0.1
 sphinxcontrib-qthelp==1.0.2
 sphinxcontrib-serializinghtml==1.1.3
 -e git://github.com/rwblair/sphinxcontrib-versioning.git@7e3885a389a809e17ea55261316b7b0e98dbf98f#egg=sphinxcontrib-versioning
 sphinxcontrib-websupport==1.1.2
 urllib3==1.25.3
@@ -1,182 +0,0 @@
 #!/usr/bin/env python3
 # -*- coding: utf-8 -*-
 #
 # zrepl documentation build configuration file, created by
 # sphinx-quickstart on Wed Nov  8 22:28:10 2017.
 #
 # This file is execfile()d with the current directory set to its
 # containing dir.
 #
 # Note that not all possible configuration values are present in this
 # autogenerated file.
 #
 # All configuration values have a default; values that are commented out
 # serve to show the default.
 # If extensions (or modules to document with autodoc) are in another directory,
 # add these directories to sys.path here. If the directory is relative to the
 # documentation root, use os.path.abspath to make it absolute, like shown here.
 #
 # import os
 # import sys
 # sys.path.insert(0, os.path.abspath('.'))
 # -- General configuration ------------------------------------------------
 # If your documentation needs a minimal Sphinx version, state it here.
 #
 # needs_sphinx = '1.0'
 # Add any Sphinx extension module names here, as strings. They can be
 # extensions coming with Sphinx (named 'sphinx.ext.*') or your custom
 # ones.
 extensions = ['sphinx.ext.todo',
    'sphinx.ext.githubpages',
    'sphinx.ext.extlinks']
 suppress_warnings = ['image.nonlocal_uri']
 # Add any paths that contain templates here, relative to this directory.
 templates_path = ['../_templates']
 # The suffix(es) of source filenames.
 # You can specify multiple suffix as a list of string:
 #
 # source_suffix = ['.rst', '.md']
 source_suffix = '.rst'
 # The master toctree document.
 master_doc = 'index'
 # General information about the project.
 project = 'zrepl'
 copyright = '2017-2019, Christian Schwarz'
 author = 'Christian Schwarz'
 # The version info for the project you're documenting, acts as replacement for
 # |version| and |release|, also used in various other places throughout the
 # built documents.
 #
 # The short X.Y version.
 #version = set by sphinxcontrib-versioning
 # The full version, including alpha/beta/rc tags.
 #release = version
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
 #
 # This is also used if you do content translation via gettext catalogs.
 # Usually you set "language" from the command line for these cases.
 language = None
 # List of patterns, relative to source directory, that match files and
 # directories to ignore when looking for source files.
 # This patterns also effect to html_static_path and html_extra_path
 exclude_patterns = ['_build', 'Thumbs.db', '.DS_Store']
 # The name of the Pygments (syntax highlighting) style to use.
 pygments_style = 'sphinx'
 # If true, `todo` and `todoList` produce output, else they produce nothing.
 todo_include_todos = True
 # -- Options for HTML output ----------------------------------------------
 # The theme to use for HTML and HTML Help pages.  See the documentation for
 # a list of builtin themes.
 #
 html_theme = 'sphinx_rtd_theme'
 # Theme options are theme-specific and customize the look and feel of a theme
 # further.  For a list of options available for each theme, see the
 # documentation.
 #
 # html_theme_options = {}
 # Add any paths that contain custom static files (such as style sheets) here,
 # relative to this directory. They are copied after the builtin static files,
 # so a file named "default.css" will overwrite the builtin "default.css".
 html_static_path = ['../_static']
 html_logo = '../_static/zrepl.svg'
 html_context = {
  # https://github.com/rtfd/sphinx_rtd_theme/issues/205
  # Add 'Edit on Github' link instead of 'View page source'
  "display_github": True, 
  "github_user": "zrepl",
  "github_repo": "zrepl",
  "github_version": "master",
  "conf_py_path": "/docs/",
  "source_suffix": source_suffix,
 }
 # -- Options for HTMLHelp output ------------------------------------------
 # Output file base name for HTML help builder.
 htmlhelp_basename = 'zrepldoc'
 # -- Options for LaTeX output ---------------------------------------------
 latex_elements = {
    # The paper size ('letterpaper' or 'a4paper').
    #
    # 'papersize': 'letterpaper',
    # The font size ('10pt', '11pt' or '12pt').
    #
    # 'pointsize': '10pt',
    # Additional stuff for the LaTeX preamble.
    #
    # 'preamble': '',
    # Latex figure (float) alignment
    #
    # 'figure_align': 'htbp',
 }
 # Grouping the document tree into LaTeX files. List of tuples
 # (source start file, target name, title,
 #  author, documentclass [howto, manual, or own class]).
 latex_documents = [
    (master_doc, 'zrepl.tex', 'zrepl Documentation',
     'Christian Schwarz', 'manual'),
 ]
 # -- Options for manual page output ---------------------------------------
 # One entry per manual page. List of tuples
 # (source start file, name, description, authors, manual section).
 man_pages = [
    (master_doc, 'zrepl', 'zrepl Documentation',
     [author], 1)
 ]
 # -- Options for Texinfo output -------------------------------------------
 # Grouping the document tree into Texinfo files. List of tuples
 # (source start file, target name, title, author,
 #  dir menu entry, description, category)
 texinfo_documents = [
    (master_doc, 'zrepl', 'zrepl Documentation',
     author, 'zrepl', 'One line description of project.',
     'Miscellaneous'),
 ]
 # -- Options for the extlinks extension -----------------------------------
 # http://www.sphinx-doc.org/en/stable/ext/extlinks.html
 extlinks = {
    'issue':('https://github.com/zrepl/zrepl/issues/%s', 'issue #'),
    'repomasterlink':('https://github.com/zrepl/zrepl/blob/master/%s', ''),
    'sampleconf':('https://github.com/zrepl/zrepl/blob/master/config/samples%s', 'config/samples'),
    'commit':('https://github.com/zrepl/zrepl/commit/%s', 'commit '),
        }
@@ -2,11 +2,11 @@
 .. _supporters:
-|Donate via Patreon| |Donate via Liberapay| |Donate via PayPal|
+|Donate via Patreon| |Donate via GitHub Sponsors| |Donate via Liberapay| |Donate via PayPal|
 zrepl is a spare-time project primarily developed by `Christian Schwarz <https://cschwarz.com>`_.
 You can support maintenance and feature development through one of the services listed above.
-For SEPA wire transfer and **commerical support**, please `contact Christian directly <https://cschwarz.com>`_.
+For SEPA wire transfer and **commercial support**, please `contact Christian directly <https://cschwarz.com>`_.
 **Thanks for your support!**
@@ -32,6 +32,18 @@ We would like to thank the following people and organizations for supporting zre
   <div class="fa fa-code" style="width: 1em;"></div>
 * |supporter-gold| `Hostsharing eG – die Hosting-Genossenschaft <https://www.hostsharing.net/>`_
 * |supporter-std| `Max Christian Pohle <https://coderonline.de>`_
 * |supporter-gold| Prominic.NET, Inc.
 * |supporter-std| Torsten Blum
 * |supporter-gold| Cyberiada GmbH
 * |supporter-std| `Gordon Schulz <https://github.com/azmodude>`_
 * |supporter-std| `@jwittlincohen <https://github.com/jwittlincohen>`_
 * |supporter-std| `Michael D. Schmitt <https://waterbendingscroll.dancingdragons.org>`_
 * |supporter-std| `Hans Schulz <https://github.com/schulzh>`_
 * |supporter-std| Henning Kessler
 * |supporter-std| `John Ramsden <https://github.com/johnramsden>`_
 * |supporter-std| `DrLuke <https://github.com/drluke>`_
 * |supporter-gold| `Mateusz Kwiatkowski (runhyve.app) <https://runhyve.app>`_
 * |supporter-std| `Gaelan D'costa <https://www.robot-disco.net>`_
 * |supporter-std| `Tenzin Lhakhang <https://confluence.tenzin.io>`_
@@ -40,7 +52,7 @@ We would like to thank the following people and organizations for supporting zre
 * |supporter-gold| `MNX.io <https://mnx.io>`_
 * |supporter-std| `Marshall Clyburn <https://github.com/mdclyburn>`_
 * |supporter-code| `Ross Williams <https://github.com/overhacked>`_
-* |supporter-std| Mike T.
+* |supporter-gold| Mike T.
 * |supporter-code| `Justin Scholz <https://github.com/JMoVS>`_
 * |supporter-code| `InsanePrawn <https://github.com/InsanePrawn>`_
 * |supporter-code| `Ben Woods <https://www.freshports.org/sysutils/zrepl/>`_
@@ -1,177 +0,0 @@
 .. include:: global.rst.inc
 .. _tutorial:
 Tutorial
 ========
 This tutorial shows how zrepl can be used to implement a ZFS-based push backup.
 We assume the following scenario:
 * Production server ``prod`` with filesystems to back up:
  * ``zroot/var/db``
  * ``zroot/usr/home`` and all its child filesystems
  * **except** ``zroot/usr/home/paranoid`` belonging to a user doing backups themselves
 * Backup server ``backups`` with
  * Filesystem ``storage/zrepl/sink/prod`` + children dedicated to backups of ``prod``
 Our backup solution should fulfill the following requirements:
 * Periodically snapshot the filesystems on ``prod`` *every 10 minutes*
 * Incrementally replicate these snapshots to ``storage/zrepl/sink/prod/*`` on ``backups``
 * Keep only very few snapshots on ``prod`` to save disk space
 * Keep a fading history (24 hourly, 30 daily, 6 monthly) of snapshots on ``backups``
 Analysis
 --------
 We can model this situation as two jobs:
 * A **push job** on ``prod``
  * Creates the snapshots
  * Keeps a short history of local snapshots to enable incremental replication to ``backups``
  * Connects to the ``zrepl daemon`` process on ``backups``
  * Pushes snapshots ``backups``
  * Prunes snapshots on ``backups`` after replication is complete
 * A **sink job** on ``backups``
  * Accepts connections & responds to requests from ``prod``
  * Limits client ``prod`` access to filesystem sub-tree ``storage/zrepl/sink/prod``
 Install zrepl
 -------------
 Follow the :ref:`OS-specific installation instructions <installation>` and come back here.
 Generate TLS Certificates
 -------------------------
 We use the :ref:`TLS client authentication transport <transport-tcp+tlsclientauth>` to protect our data on the wire.
 To get things going quickly, we skip setting up a CA and generate two self-signed certificates as described :ref:`here <transport-tcp+tlsclientauth-2machineopenssl>`.
 For convenience, we generate the key pairs on our local machine and distribute them using ssh:
 .. code-block:: bash
   :emphasize-lines: 6,13
   openssl req -x509 -sha256 -nodes \
      -newkey rsa:4096 \
      -days 365 \
      -keyout backups.key \
      -out backups.crt
   # ... and use "backups" as Common Name (CN)
   openssl req -x509 -sha256 -nodes \
      -newkey rsa:4096 \
      -days 365 \
      -keyout prod.key \
      -out prod.crt
   # ... and use "prod" as Common Name (CN)
   ssh root@backups "mkdir /etc/zrepl"
   scp  backups.key backups.crt prod.crt root@backups:/etc/zrepl
   ssh root@prod "mkdir /etc/zrepl"
   scp  prod.key prod.crt backups.crt root@prod:/etc/zrepl
 Configure server ``prod``
 -------------------------
 We define a **push job** named ``prod_to_backups`` in ``/etc/zrepl/zrepl.yml`` on host ``prod`` : ::
    jobs:
    - name: prod_to_backups
      type: push 
      connect:
        type: tls
        address: "backups.example.com:8888"
        ca: /etc/zrepl/backups.crt
        cert: /etc/zrepl/prod.crt
        key:  /etc/zrepl/prod.key
        server_cn: "backups"
      filesystems: {
        "zroot/var/db": true,
        "zroot/usr/home<": true,
        "zroot/usr/home/paranoid": false
      }
      snapshotting:
        type: periodic
        prefix: zrepl_
        interval: 10m
      pruning:
        keep_sender:
        - type: not_replicated
        - type: last_n
          count: 10
        keep_receiver:
        - type: grid
          grid: 1x1h(keep=all) | 24x1h | 30x1d | 6x30d
          regex: "^zrepl_"
 .. _tutorial-configure-prod:
 Configure server ``backups``
 ----------------------------
 We define a corresponding **sink job** named ``sink`` in ``/etc/zrepl/zrepl.yml`` on host ``backups`` : ::
    jobs:
    - name: sink
      type: sink 
      serve:
         type: tls
         listen: ":8888"
         ca: "/etc/zrepl/prod.crt"
         cert: "/etc/zrepl/backups.crt"
         key: "/etc/zrepl/backups.key"
         client_cns:
           - "prod"
      root_fs: "storage/zrepl/sink"
 Apply Configuration Changes
 ---------------------------
 We use ``zrepl configcheck`` to catch any configuration errors: no output indicates that everything is fine.
 If that is the case, restart the zrepl daemon on **both** ``prod`` and ``backups`` using ``service zrepl restart`` or ``systemctl restart zrepl``.
 Watch it Work
 -------------
 Run ``zrepl status`` on ``prod`` to monitor the replication and pruning activity.
 To re-trigger replication (snapshots are separate!), use ``zrepl signal wakeup prod_to_backups`` on ``prod``.
 If you like tmux, here is a handy script that works on FreeBSD: ::
    pkg install gnu-watch tmux
    tmux new -s zrepl -d
    tmux split-window -t zrepl "tail -f /var/log/messages"
    tmux split-window -t zrepl "gnu-watch 'zfs list -t snapshot -o name,creation -s creation | grep zrepl_'"
    tmux split-window -t zrepl "zrepl status"
    tmux select-layout -t zrepl tiled
    tmux attach -t zrepl
 The Linux equivalent might look like this: ::
    # make sure tmux is installed & let's assume you use systemd + journald
    tmux new -s zrepl -d
    tmux split-window -t zrepl  "journalctl -f -u zrepl.service"
    tmux split-window -t zrepl "watch 'zfs list -t snapshot -o name,creation -s creation | grep zrepl_'"
    tmux split-window -t zrepl "zrepl status"
    tmux select-layout -t zrepl tiled
    tmux attach -t zrepl
 Summary
 -------
 Congratulations, you have a working push backup. Where to go next?
 * Read more about :ref:`configuration format, options & job types <configuration_toc>`
 * Configure :ref:`logging <logging>` \& :ref:`monitoring <monitoring>`.
@@ -26,7 +26,7 @@ CLI Overview
    * - ``zrepl daemon``
      - run the daemon, required for all zrepl functionality
    * - ``zrepl status``
-      - show job activity, or with ``--raw`` for JSON output
+      - show job activity, or with ``--mode raw`` for JSON output
    * - ``zrepl stdinserver``
      - see :ref:`transport-ssh+stdinserver`
    * - ``zrepl signal wakeup JOB``
@@ -38,6 +38,8 @@ CLI Overview
    * - ``zrepl migrate``
      - | perform on-disk state / ZFS property migrations
        | (see :ref:`changelog <changelog>` for details)
    * - ``zrepl zfs-abstraction``
      - list and remove zrepl's abstractions on top of ZFS, e.g. holds and step bookmarks (see :ref:`overview <replication-cursor-and-last-received-hold>` )
 .. _usage-zrepl-daemon:
@@ -48,7 +50,7 @@ zrepl daemon
 All actual work zrepl does is performed by a daemon process.
 The daemon supports structured :ref:`logging <logging>` and provides :ref:`monitoring endpoints <monitoring>`.
-When installating from a package, the package maintainer should have provided an init script / systemd.service file.
+When installing from a package, the package maintainer should have provided an init script / systemd.service file.
 You should thus be able to start zrepl daemon using your init system.
 Alternatively, or for running zrepl in the foreground, simply execute ``zrepl daemon``.
@@ -73,6 +75,76 @@ The daemon exits as soon as all jobs have reported shut down.
 Systemd Unit File
 ~~~~~~~~~~~~~~~~~
-A systemd service defintion template is available in :repomasterlink:`dist/systemd`.
+A systemd service definition template is available in :repomasterlink:`dist/systemd`.
 Note that some of the options only work on recent versions of systemd.
 Any help & improvements are very welcome, see :issue:`145`.
 ============
 Ops Runbooks
 ============
 .. toctree::
   usage/runbooks/migrating_sending_side_to_new_zpool.rst
 .. _usage-platform-tests:
 ==============
 Platform Tests
 ==============
 Along with the main ``zrepl`` binary, we release the ``platformtest`` binaries.
 The zrepl platform tests are an integration test suite that is complementary to the pure Go unit tests.
 Any test that needs to interact with ZFS is a platform test.
 The platform need to run as root.
 For each test, we create a fresh dummy zpool backed by a file-based vdev.
 The file path, and a root mountpoint for the dummy zpool, must be specified on the command line:
 ::
   mkdir -p /tmp/zreplplatformtest
   ./platformtest \
       -poolname 'zreplplatformtest' \  # <- name must contain zreplplatformtest
       -imagepath /tmp/zreplplatformtest.img \ # <- zrepl will create the file
       -mountpoint /tmp/zreplplatformtest # <- must exist
 .. WARNING::
   ``platformtest`` will unconditionally overwrite the file at `imagepath`
   and unconditionally ``zpool destroy $poolname``.
   So, don't use a production poolname, and consider running the test in a VM.
   It'll be a lot faster as well because the underlying operations, ``zfs list`` in particular, will be faster.
 While the platformtests are running, there will be a log of log output.
 After all tests have run, it prints a summary with a list of tests, grouped by result type (success, failure, skipped):
 ::
   PASSING TESTS:
     github.com/zrepl/zrepl/platformtest/tests.BatchDestroy
     github.com/zrepl/zrepl/platformtest/tests.CreateReplicationCursor
     github.com/zrepl/zrepl/platformtest/tests.GetNonexistent
     github.com/zrepl/zrepl/platformtest/tests.HoldsWork
     ...
     github.com/zrepl/zrepl/platformtest/tests.SendStreamNonEOFReadErrorHandling
     github.com/zrepl/zrepl/platformtest/tests.UndestroyableSnapshotParsing
   SKIPPED TESTS:
     github.com/zrepl/zrepl/platformtest/tests.SendArgsValidationEncryptedSendOfUnencryptedDatasetForbidden__EncryptionSupported_false
   FAILED TESTS: []
 If there is a failure, or a skipped test that you believe should be passing, re-run the test suite, capture stderr & stdout to a text file, and create an issue on GitHub.
 To run a specific test case, or a subset of tests matched by regex, use the ``-run REGEX`` command line flag.
 To stop test execution at the first failing test, and prevent cleanup of the dummy zpool, use the ``-failure.stop-and-keep-pool`` flag.
 To build the platformtests yourself, use ``make test-platform-bin``.
 There's also the ``make test-platform`` target to run the platform tests with a default command line.
@@ -0,0 +1,36 @@
 Migrating Sending Side
 ~~~~~~~~~~~~~~~~~~~~~~
 **Objective**:
 Move sending-side zpool to new hardware.
 Make the move fully transparent to the sending-side jobs.
 After the move is done, all sending-side zrepl jobs should continue to work as if the move had not happened.
 In particular, incremental replication should be able to pick up where it left before the move.
 Suppose we want to migrate all data from one zpool ``oldpool`` to another zpool ``newpool``.
 A possible reason might be that we want to change RAID levels, ``ashift``, or just migrate over to next-gen hardware.
 If the pool names are different, zrepl's matching between sender and receiver dataset will break becase the receive-side dataset names contain ``oldpool``.
 To avoid this, we will need the name of the new pool to match that of the old pool.
 The following steps will accomplish this:
 1. Stop zrepl.
 2. Create the new pool: ``zpool create newpool ...``
 3. Take a snapshot of the old pool so that you have something that you can ``zfs send``.
   For example, run ``zfs snapshot -r oldpool@migration_oldpool_newpool``.
 4. Send all of the oldpool's datasets to the new pool:
   ``zfs send -R oldpool@migration_oldpool_newpool | zfs recv -F newpool``
 5. Export the old pool: ``zpool export oldpool``
 6. Export the new pool: ``zpool export newpool``
 7. (Optional) Change the name of the old pool to something that does not conflict with the new pool.
   We are going to use the name ``oldoldpool`` in this example.
   Use ``zpool import`` with no arguments to see the pool id.
   Then ``zpool import <id> oldoldpool && zpool export oldoldpool``.
 8. Import the new pool, while changing the name to match the old pool: ``zpool import newpool oldpool``
 9. Start zrepl again and wake up the relevant jobs.
 10. Use ``zrepl status`` or you monitoring to ensure that replication works.
    The best test is an end-to-end test where you write some junk data on a sender dataset and wait until a snapshot with that data appears on the receiving side.
 11. Once you are confident that replication is working, you may dispose of the old pool.
 Note that, depending on pruning rules, it will not be possible to switch back to the old pool seamlessly, i.e., without a full re-replication.
@@ -0,0 +1,306 @@
 version = 1
 revision = 3
 requires-python = ">=3.14"
 [[package]]
 name = "alabaster"
 version = "0.7.16"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/c9/3e/13dd8e5ed9094e734ac430b5d0eb4f2bb001708a8b7856cbf8e084e001ba/alabaster-0.7.16.tar.gz", hash = "sha256:75a8b99c28a5dad50dd7f8ccdd447a121ddb3892da9e53d1ca5cca3106d58d65", size = 23776, upload-time = "2024-01-10T00:56:10.189Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/32/34/d4e1c02d3bee589efb5dfa17f88ea08bdb3e3eac12bc475462aec52ed223/alabaster-0.7.16-py3-none-any.whl", hash = "sha256:b46733c07dce03ae4e150330b975c75737fa60f0a7c591b6c8bf4928a28e2c92", size = 13511, upload-time = "2024-01-10T00:56:08.388Z" },
 ]
 [[package]]
 name = "babel"
 version = "2.18.0"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/7d/b2/51899539b6ceeeb420d40ed3cd4b7a40519404f9baf3d4ac99dc413a834b/babel-2.18.0.tar.gz", hash = "sha256:b80b99a14bd085fcacfa15c9165f651fbb3406e66cc603abf11c5750937c992d", size = 9959554, upload-time = "2026-02-01T12:30:56.078Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/77/f5/21d2de20e8b8b0408f0681956ca2c69f1320a3848ac50e6e7f39c6159675/babel-2.18.0-py3-none-any.whl", hash = "sha256:e2b422b277c2b9a9630c1d7903c2a00d0830c409c59ac8cae9081c92f1aeba35", size = 10196845, upload-time = "2026-02-01T12:30:53.445Z" },
 ]
 [[package]]
 name = "certifi"
 version = "2026.1.4"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/e0/2d/a891ca51311197f6ad14a7ef42e2399f36cf2f9bd44752b3dc4eab60fdc5/certifi-2026.1.4.tar.gz", hash = "sha256:ac726dd470482006e014ad384921ed6438c457018f4b3d204aea4281258b2120", size = 154268, upload-time = "2026-01-04T02:42:41.825Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/e6/ad/3cc14f097111b4de0040c83a525973216457bbeeb63739ef1ed275c1c021/certifi-2026.1.4-py3-none-any.whl", hash = "sha256:9943707519e4add1115f44c2bc244f782c0249876bf51b6599fee1ffbedd685c", size = 152900, upload-time = "2026-01-04T02:42:40.15Z" },
 ]
 [[package]]
 name = "charset-normalizer"
 version = "3.4.4"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/13/69/33ddede1939fdd074bce5434295f38fae7136463422fe4fd3e0e89b98062/charset_normalizer-3.4.4.tar.gz", hash = "sha256:94537985111c35f28720e43603b8e7b43a6ecfb2ce1d3058bbe955b73404e21a", size = 129418, upload-time = "2025-10-14T04:42:32.879Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/2a/35/7051599bd493e62411d6ede36fd5af83a38f37c4767b92884df7301db25d/charset_normalizer-3.4.4-cp314-cp314-macosx_10_13_universal2.whl", hash = "sha256:da3326d9e65ef63a817ecbcc0df6e94463713b754fe293eaa03da99befb9a5bd", size = 207746, upload-time = "2025-10-14T04:41:33.773Z" },
    { url = "https://files.pythonhosted.org/packages/10/9a/97c8d48ef10d6cd4fcead2415523221624bf58bcf68a802721a6bc807c8f/charset_normalizer-3.4.4-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:8af65f14dc14a79b924524b1e7fffe304517b2bff5a58bf64f30b98bbc5079eb", size = 147889, upload-time = "2025-10-14T04:41:34.897Z" },
    { url = "https://files.pythonhosted.org/packages/10/bf/979224a919a1b606c82bd2c5fa49b5c6d5727aa47b4312bb27b1734f53cd/charset_normalizer-3.4.4-cp314-cp314-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:74664978bb272435107de04e36db5a9735e78232b85b77d45cfb38f758efd33e", size = 143641, upload-time = "2025-10-14T04:41:36.116Z" },
    { url = "https://files.pythonhosted.org/packages/ba/33/0ad65587441fc730dc7bd90e9716b30b4702dc7b617e6ba4997dc8651495/charset_normalizer-3.4.4-cp314-cp314-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:752944c7ffbfdd10c074dc58ec2d5a8a4cd9493b314d367c14d24c17684ddd14", size = 160779, upload-time = "2025-10-14T04:41:37.229Z" },
    { url = "https://files.pythonhosted.org/packages/67/ed/331d6b249259ee71ddea93f6f2f0a56cfebd46938bde6fcc6f7b9a3d0e09/charset_normalizer-3.4.4-cp314-cp314-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:d1f13550535ad8cff21b8d757a3257963e951d96e20ec82ab44bc64aeb62a191", size = 159035, upload-time = "2025-10-14T04:41:38.368Z" },
    { url = "https://files.pythonhosted.org/packages/67/ff/f6b948ca32e4f2a4576aa129d8bed61f2e0543bf9f5f2b7fc3758ed005c9/charset_normalizer-3.4.4-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:ecaae4149d99b1c9e7b88bb03e3221956f68fd6d50be2ef061b2381b61d20838", size = 152542, upload-time = "2025-10-14T04:41:39.862Z" },
    { url = "https://files.pythonhosted.org/packages/16/85/276033dcbcc369eb176594de22728541a925b2632f9716428c851b149e83/charset_normalizer-3.4.4-cp314-cp314-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:cb6254dc36b47a990e59e1068afacdcd02958bdcce30bb50cc1700a8b9d624a6", size = 149524, upload-time = "2025-10-14T04:41:41.319Z" },
    { url = "https://files.pythonhosted.org/packages/9e/f2/6a2a1f722b6aba37050e626530a46a68f74e63683947a8acff92569f979a/charset_normalizer-3.4.4-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:c8ae8a0f02f57a6e61203a31428fa1d677cbe50c93622b4149d5c0f319c1d19e", size = 150395, upload-time = "2025-10-14T04:41:42.539Z" },
    { url = "https://files.pythonhosted.org/packages/60/bb/2186cb2f2bbaea6338cad15ce23a67f9b0672929744381e28b0592676824/charset_normalizer-3.4.4-cp314-cp314-musllinux_1_2_armv7l.whl", hash = "sha256:47cc91b2f4dd2833fddaedd2893006b0106129d4b94fdb6af1f4ce5a9965577c", size = 143680, upload-time = "2025-10-14T04:41:43.661Z" },
    { url = "https://files.pythonhosted.org/packages/7d/a5/bf6f13b772fbb2a90360eb620d52ed8f796f3c5caee8398c3b2eb7b1c60d/charset_normalizer-3.4.4-cp314-cp314-musllinux_1_2_ppc64le.whl", hash = "sha256:82004af6c302b5d3ab2cfc4cc5f29db16123b1a8417f2e25f9066f91d4411090", size = 162045, upload-time = "2025-10-14T04:41:44.821Z" },
    { url = "https://files.pythonhosted.org/packages/df/c5/d1be898bf0dc3ef9030c3825e5d3b83f2c528d207d246cbabe245966808d/charset_normalizer-3.4.4-cp314-cp314-musllinux_1_2_riscv64.whl", hash = "sha256:2b7d8f6c26245217bd2ad053761201e9f9680f8ce52f0fcd8d0755aeae5b2152", size = 149687, upload-time = "2025-10-14T04:41:46.442Z" },
    { url = "https://files.pythonhosted.org/packages/a5/42/90c1f7b9341eef50c8a1cb3f098ac43b0508413f33affd762855f67a410e/charset_normalizer-3.4.4-cp314-cp314-musllinux_1_2_s390x.whl", hash = "sha256:799a7a5e4fb2d5898c60b640fd4981d6a25f1c11790935a44ce38c54e985f828", size = 160014, upload-time = "2025-10-14T04:41:47.631Z" },
    { url = "https://files.pythonhosted.org/packages/76/be/4d3ee471e8145d12795ab655ece37baed0929462a86e72372fd25859047c/charset_normalizer-3.4.4-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:99ae2cffebb06e6c22bdc25801d7b30f503cc87dbd283479e7b606f70aff57ec", size = 154044, upload-time = "2025-10-14T04:41:48.81Z" },
    { url = "https://files.pythonhosted.org/packages/b0/6f/8f7af07237c34a1defe7defc565a9bc1807762f672c0fde711a4b22bf9c0/charset_normalizer-3.4.4-cp314-cp314-win32.whl", hash = "sha256:f9d332f8c2a2fcbffe1378594431458ddbef721c1769d78e2cbc06280d8155f9", size = 99940, upload-time = "2025-10-14T04:41:49.946Z" },
    { url = "https://files.pythonhosted.org/packages/4b/51/8ade005e5ca5b0d80fb4aff72a3775b325bdc3d27408c8113811a7cbe640/charset_normalizer-3.4.4-cp314-cp314-win_amd64.whl", hash = "sha256:8a6562c3700cce886c5be75ade4a5db4214fda19fede41d9792d100288d8f94c", size = 107104, upload-time = "2025-10-14T04:41:51.051Z" },
    { url = "https://files.pythonhosted.org/packages/da/5f/6b8f83a55bb8278772c5ae54a577f3099025f9ade59d0136ac24a0df4bde/charset_normalizer-3.4.4-cp314-cp314-win_arm64.whl", hash = "sha256:de00632ca48df9daf77a2c65a484531649261ec9f25489917f09e455cb09ddb2", size = 100743, upload-time = "2025-10-14T04:41:52.122Z" },
    { url = "https://files.pythonhosted.org/packages/0a/4c/925909008ed5a988ccbb72dcc897407e5d6d3bd72410d69e051fc0c14647/charset_normalizer-3.4.4-py3-none-any.whl", hash = "sha256:7a32c560861a02ff789ad905a2fe94e3f840803362c84fecf1851cb4cf3dc37f", size = 53402, upload-time = "2025-10-14T04:42:31.76Z" },
 ]
 [[package]]
 name = "colorama"
 version = "0.4.6"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/d8/53/6f443c9a4a8358a93a6792e2acffb9d9d5cb0a5cfd8802644b7b1c9a02e4/colorama-0.4.6.tar.gz", hash = "sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44", size = 27697, upload-time = "2022-10-25T02:36:22.414Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/d1/d6/3965ed04c63042e047cb6a3e6ed1a63a35087b6a609aa3a15ed8ac56c221/colorama-0.4.6-py2.py3-none-any.whl", hash = "sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6", size = 25335, upload-time = "2022-10-25T02:36:20.889Z" },
 ]
 [[package]]
 name = "docutils"
 version = "0.18.1"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/57/b1/b880503681ea1b64df05106fc7e3c4e3801736cf63deffc6fa7fc5404cf5/docutils-0.18.1.tar.gz", hash = "sha256:679987caf361a7539d76e584cbeddc311e3aee937877c87346f31debc63e9d06", size = 2043249, upload-time = "2021-11-23T17:49:42.043Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/8d/14/69b4bad34e3f250afe29a854da03acb6747711f3df06c359fa053fae4e76/docutils-0.18.1-py2.py3-none-any.whl", hash = "sha256:23010f129180089fbcd3bc08cfefccb3b890b0050e1ca00c867036e9d161b98c", size = 570050, upload-time = "2021-11-23T17:49:38.556Z" },
 ]
 [[package]]
 name = "idna"
 version = "3.11"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/6f/6d/0703ccc57f3a7233505399edb88de3cbd678da106337b9fcde432b65ed60/idna-3.11.tar.gz", hash = "sha256:795dafcc9c04ed0c1fb032c2aa73654d8e8c5023a7df64a53f39190ada629902", size = 194582, upload-time = "2025-10-12T14:55:20.501Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/0e/61/66938bbb5fc52dbdf84594873d5b51fb1f7c7794e9c0f5bd885f30bc507b/idna-3.11-py3-none-any.whl", hash = "sha256:771a87f49d9defaf64091e6e6fe9c18d4833f140bd19464795bc32d966ca37ea", size = 71008, upload-time = "2025-10-12T14:55:18.883Z" },
 ]
 [[package]]
 name = "imagesize"
 version = "1.4.1"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/a7/84/62473fb57d61e31fef6e36d64a179c8781605429fd927b5dd608c997be31/imagesize-1.4.1.tar.gz", hash = "sha256:69150444affb9cb0d5cc5a92b3676f0b2fb7cd9ae39e947a5e11a36b4497cd4a", size = 1280026, upload-time = "2022-07-01T12:21:05.687Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/ff/62/85c4c919272577931d407be5ba5d71c20f0b616d31a0befe0ae45bb79abd/imagesize-1.4.1-py2.py3-none-any.whl", hash = "sha256:0d8d18d08f840c19d0ee7ca1fd82490fdc3729b7ac93f49870406ddde8ef8d8b", size = 8769, upload-time = "2022-07-01T12:21:02.467Z" },
 ]
 [[package]]
 name = "jinja2"
 version = "3.1.6"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
    { name = "markupsafe" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/df/bf/f7da0350254c0ed7c72f3e33cef02e048281fec7ecec5f032d4aac52226b/jinja2-3.1.6.tar.gz", hash = "sha256:0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d", size = 245115, upload-time = "2025-03-05T20:05:02.478Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/62/a1/3d680cbfd5f4b8f15abc1d571870c5fc3e594bb582bc3b64ea099db13e56/jinja2-3.1.6-py3-none-any.whl", hash = "sha256:85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67", size = 134899, upload-time = "2025-03-05T20:05:00.369Z" },
 ]
 [[package]]
 name = "markupsafe"
 version = "3.0.3"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/7e/99/7690b6d4034fffd95959cbe0c02de8deb3098cc577c67bb6a24fe5d7caa7/markupsafe-3.0.3.tar.gz", hash = "sha256:722695808f4b6457b320fdc131280796bdceb04ab50fe1795cd540799ebe1698", size = 80313, upload-time = "2025-09-27T18:37:40.426Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/33/8a/8e42d4838cd89b7dde187011e97fe6c3af66d8c044997d2183fbd6d31352/markupsafe-3.0.3-cp314-cp314-macosx_10_13_x86_64.whl", hash = "sha256:eaa9599de571d72e2daf60164784109f19978b327a3910d3e9de8c97b5b70cfe", size = 11619, upload-time = "2025-09-27T18:37:06.342Z" },
    { url = "https://files.pythonhosted.org/packages/b5/64/7660f8a4a8e53c924d0fa05dc3a55c9cee10bbd82b11c5afb27d44b096ce/markupsafe-3.0.3-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:c47a551199eb8eb2121d4f0f15ae0f923d31350ab9280078d1e5f12b249e0026", size = 12029, upload-time = "2025-09-27T18:37:07.213Z" },
    { url = "https://files.pythonhosted.org/packages/da/ef/e648bfd021127bef5fa12e1720ffed0c6cbb8310c8d9bea7266337ff06de/markupsafe-3.0.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:f34c41761022dd093b4b6896d4810782ffbabe30f2d443ff5f083e0cbbb8c737", size = 24408, upload-time = "2025-09-27T18:37:09.572Z" },
    { url = "https://files.pythonhosted.org/packages/41/3c/a36c2450754618e62008bf7435ccb0f88053e07592e6028a34776213d877/markupsafe-3.0.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:457a69a9577064c05a97c41f4e65148652db078a3a509039e64d3467b9e7ef97", size = 23005, upload-time = "2025-09-27T18:37:10.58Z" },
    { url = "https://files.pythonhosted.org/packages/bc/20/b7fdf89a8456b099837cd1dc21974632a02a999ec9bf7ca3e490aacd98e7/markupsafe-3.0.3-cp314-cp314-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:e8afc3f2ccfa24215f8cb28dcf43f0113ac3c37c2f0f0806d8c70e4228c5cf4d", size = 22048, upload-time = "2025-09-27T18:37:11.547Z" },
    { url = "https://files.pythonhosted.org/packages/9a/a7/591f592afdc734f47db08a75793a55d7fbcc6902a723ae4cfbab61010cc5/markupsafe-3.0.3-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:ec15a59cf5af7be74194f7ab02d0f59a62bdcf1a537677ce67a2537c9b87fcda", size = 23821, upload-time = "2025-09-27T18:37:12.48Z" },
    { url = "https://files.pythonhosted.org/packages/7d/33/45b24e4f44195b26521bc6f1a82197118f74df348556594bd2262bda1038/markupsafe-3.0.3-cp314-cp314-musllinux_1_2_riscv64.whl", hash = "sha256:0eb9ff8191e8498cca014656ae6b8d61f39da5f95b488805da4bb029cccbfbaf", size = 21606, upload-time = "2025-09-27T18:37:13.485Z" },
    { url = "https://files.pythonhosted.org/packages/ff/0e/53dfaca23a69fbfbbf17a4b64072090e70717344c52eaaaa9c5ddff1e5f0/markupsafe-3.0.3-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:2713baf880df847f2bece4230d4d094280f4e67b1e813eec43b4c0e144a34ffe", size = 23043, upload-time = "2025-09-27T18:37:14.408Z" },
    { url = "https://files.pythonhosted.org/packages/46/11/f333a06fc16236d5238bfe74daccbca41459dcd8d1fa952e8fbd5dccfb70/markupsafe-3.0.3-cp314-cp314-win32.whl", hash = "sha256:729586769a26dbceff69f7a7dbbf59ab6572b99d94576a5592625d5b411576b9", size = 14747, upload-time = "2025-09-27T18:37:15.36Z" },
    { url = "https://files.pythonhosted.org/packages/28/52/182836104b33b444e400b14f797212f720cbc9ed6ba34c800639d154e821/markupsafe-3.0.3-cp314-cp314-win_amd64.whl", hash = "sha256:bdc919ead48f234740ad807933cdf545180bfbe9342c2bb451556db2ed958581", size = 15341, upload-time = "2025-09-27T18:37:16.496Z" },
    { url = "https://files.pythonhosted.org/packages/6f/18/acf23e91bd94fd7b3031558b1f013adfa21a8e407a3fdb32745538730382/markupsafe-3.0.3-cp314-cp314-win_arm64.whl", hash = "sha256:5a7d5dc5140555cf21a6fefbdbf8723f06fcd2f63ef108f2854de715e4422cb4", size = 14073, upload-time = "2025-09-27T18:37:17.476Z" },
    { url = "https://files.pythonhosted.org/packages/3c/f0/57689aa4076e1b43b15fdfa646b04653969d50cf30c32a102762be2485da/markupsafe-3.0.3-cp314-cp314t-macosx_10_13_x86_64.whl", hash = "sha256:1353ef0c1b138e1907ae78e2f6c63ff67501122006b0f9abad68fda5f4ffc6ab", size = 11661, upload-time = "2025-09-27T18:37:18.453Z" },
    { url = "https://files.pythonhosted.org/packages/89/c3/2e67a7ca217c6912985ec766c6393b636fb0c2344443ff9d91404dc4c79f/markupsafe-3.0.3-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:1085e7fbddd3be5f89cc898938f42c0b3c711fdcb37d75221de2666af647c175", size = 12069, upload-time = "2025-09-27T18:37:19.332Z" },
    { url = "https://files.pythonhosted.org/packages/f0/00/be561dce4e6ca66b15276e184ce4b8aec61fe83662cce2f7d72bd3249d28/markupsafe-3.0.3-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:1b52b4fb9df4eb9ae465f8d0c228a00624de2334f216f178a995ccdcf82c4634", size = 25670, upload-time = "2025-09-27T18:37:20.245Z" },
    { url = "https://files.pythonhosted.org/packages/50/09/c419f6f5a92e5fadde27efd190eca90f05e1261b10dbd8cbcb39cd8ea1dc/markupsafe-3.0.3-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:fed51ac40f757d41b7c48425901843666a6677e3e8eb0abcff09e4ba6e664f50", size = 23598, upload-time = "2025-09-27T18:37:21.177Z" },
    { url = "https://files.pythonhosted.org/packages/22/44/a0681611106e0b2921b3033fc19bc53323e0b50bc70cffdd19f7d679bb66/markupsafe-3.0.3-cp314-cp314t-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:f190daf01f13c72eac4efd5c430a8de82489d9cff23c364c3ea822545032993e", size = 23261, upload-time = "2025-09-27T18:37:22.167Z" },
    { url = "https://files.pythonhosted.org/packages/5f/57/1b0b3f100259dc9fffe780cfb60d4be71375510e435efec3d116b6436d43/markupsafe-3.0.3-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:e56b7d45a839a697b5eb268c82a71bd8c7f6c94d6fd50c3d577fa39a9f1409f5", size = 24835, upload-time = "2025-09-27T18:37:23.296Z" },
    { url = "https://files.pythonhosted.org/packages/26/6a/4bf6d0c97c4920f1597cc14dd720705eca0bf7c787aebc6bb4d1bead5388/markupsafe-3.0.3-cp314-cp314t-musllinux_1_2_riscv64.whl", hash = "sha256:f3e98bb3798ead92273dc0e5fd0f31ade220f59a266ffd8a4f6065e0a3ce0523", size = 22733, upload-time = "2025-09-27T18:37:24.237Z" },
    { url = "https://files.pythonhosted.org/packages/14/c7/ca723101509b518797fedc2fdf79ba57f886b4aca8a7d31857ba3ee8281f/markupsafe-3.0.3-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:5678211cb9333a6468fb8d8be0305520aa073f50d17f089b5b4b477ea6e67fdc", size = 23672, upload-time = "2025-09-27T18:37:25.271Z" },
    { url = "https://files.pythonhosted.org/packages/fb/df/5bd7a48c256faecd1d36edc13133e51397e41b73bb77e1a69deab746ebac/markupsafe-3.0.3-cp314-cp314t-win32.whl", hash = "sha256:915c04ba3851909ce68ccc2b8e2cd691618c4dc4c4232fb7982bca3f41fd8c3d", size = 14819, upload-time = "2025-09-27T18:37:26.285Z" },
    { url = "https://files.pythonhosted.org/packages/1a/8a/0402ba61a2f16038b48b39bccca271134be00c5c9f0f623208399333c448/markupsafe-3.0.3-cp314-cp314t-win_amd64.whl", hash = "sha256:4faffd047e07c38848ce017e8725090413cd80cbc23d86e55c587bf979e579c9", size = 15426, upload-time = "2025-09-27T18:37:27.316Z" },
    { url = "https://files.pythonhosted.org/packages/70/bc/6f1c2f612465f5fa89b95bead1f44dcb607670fd42891d8fdcd5d039f4f4/markupsafe-3.0.3-cp314-cp314t-win_arm64.whl", hash = "sha256:32001d6a8fc98c8cb5c947787c5d08b0a50663d139f1305bac5885d98d9b40fa", size = 14146, upload-time = "2025-09-27T18:37:28.327Z" },
 ]
 [[package]]
 name = "packaging"
 version = "26.0"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/65/ee/299d360cdc32edc7d2cf530f3accf79c4fca01e96ffc950d8a52213bd8e4/packaging-26.0.tar.gz", hash = "sha256:00243ae351a257117b6a241061796684b084ed1c516a08c48a3f7e147a9d80b4", size = 143416, upload-time = "2026-01-21T20:50:39.064Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/b7/b9/c538f279a4e237a006a2c98387d081e9eb060d203d8ed34467cc0f0b9b53/packaging-26.0-py3-none-any.whl", hash = "sha256:b36f1fef9334a5588b4166f8bcd26a14e521f2b55e6b9de3aaa80d3ff7a37529", size = 74366, upload-time = "2026-01-21T20:50:37.788Z" },
 ]
 [[package]]
 name = "pygments"
 version = "2.19.2"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/b0/77/a5b8c569bf593b0140bde72ea885a803b82086995367bf2037de0159d924/pygments-2.19.2.tar.gz", hash = "sha256:636cb2477cec7f8952536970bc533bc43743542f70392ae026374600add5b887", size = 4968631, upload-time = "2025-06-21T13:39:12.283Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/c7/21/705964c7812476f378728bdf590ca4b771ec72385c533964653c68e86bdc/pygments-2.19.2-py3-none-any.whl", hash = "sha256:86540386c03d588bb81d44bc3928634ff26449851e99741617ecb9037ee5ec0b", size = 1225217, upload-time = "2025-06-21T13:39:07.939Z" },
 ]
 [[package]]
 name = "requests"
 version = "2.32.5"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
    { name = "certifi" },
    { name = "charset-normalizer" },
    { name = "idna" },
    { name = "urllib3" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/c9/74/b3ff8e6c8446842c3f5c837e9c3dfcfe2018ea6ecef224c710c85ef728f4/requests-2.32.5.tar.gz", hash = "sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf", size = 134517, upload-time = "2025-08-18T20:46:02.573Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/1e/db/4254e3eabe8020b458f1a747140d32277ec7a271daf1d235b70dc0b4e6e3/requests-2.32.5-py3-none-any.whl", hash = "sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6", size = 64738, upload-time = "2025-08-18T20:46:00.542Z" },
 ]
 [[package]]
 name = "snowballstemmer"
 version = "3.0.1"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/75/a7/9810d872919697c9d01295633f5d574fb416d47e535f258272ca1f01f447/snowballstemmer-3.0.1.tar.gz", hash = "sha256:6d5eeeec8e9f84d4d56b847692bacf79bc2c8e90c7f80ca4444ff8b6f2e52895", size = 105575, upload-time = "2025-05-09T16:34:51.843Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/c8/78/3565d011c61f5a43488987ee32b6f3f656e7f107ac2782dd57bdd7d91d9a/snowballstemmer-3.0.1-py3-none-any.whl", hash = "sha256:6cd7b3897da8d6c9ffb968a6781fa6532dce9c3618a4b127d920dab764a19064", size = 103274, upload-time = "2025-05-09T16:34:50.371Z" },
 ]
 [[package]]
 name = "sphinx"
 version = "7.3.7"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
    { name = "alabaster" },
    { name = "babel" },
    { name = "colorama", marker = "sys_platform == 'win32'" },
    { name = "docutils" },
    { name = "imagesize" },
    { name = "jinja2" },
    { name = "packaging" },
    { name = "pygments" },
    { name = "requests" },
    { name = "snowballstemmer" },
    { name = "sphinxcontrib-applehelp" },
    { name = "sphinxcontrib-devhelp" },
    { name = "sphinxcontrib-htmlhelp" },
    { name = "sphinxcontrib-jsmath" },
    { name = "sphinxcontrib-qthelp" },
    { name = "sphinxcontrib-serializinghtml" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/b7/0a/b88033900b1582f5ed8f880263363daef968d1cd064175e32abfd9714410/sphinx-7.3.7.tar.gz", hash = "sha256:a4a7db75ed37531c05002d56ed6948d4c42f473a36f46e1382b0bd76ca9627bc", size = 7094808, upload-time = "2024-04-19T04:44:48.297Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/b4/fa/130c32ed94cf270e3d0b9ded16fb7b2c8fea86fa7263c29a696a30c1dde7/sphinx-7.3.7-py3-none-any.whl", hash = "sha256:413f75440be4cacf328f580b4274ada4565fb2187d696a84970c23f77b64d8c3", size = 3335650, upload-time = "2024-04-19T04:44:43.839Z" },
 ]
 [[package]]
 name = "sphinx-rtd-theme"
 version = "1.3.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
    { name = "docutils" },
    { name = "sphinx" },
    { name = "sphinxcontrib-jquery" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/db/3e/477c5b3ed78b6818d673f63512db12ace8c89e83eb9eecc913f9e2cc8416/sphinx_rtd_theme-1.3.0.tar.gz", hash = "sha256:590b030c7abb9cf038ec053b95e5380b5c70d61591eb0b552063fbe7c41f0931", size = 2785069, upload-time = "2023-08-21T18:28:35.63Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/18/01/76f40a18e9209bb098c1c1313c823dbbd001b23a2db71e7fd4eb5a48559c/sphinx_rtd_theme-1.3.0-py2.py3-none-any.whl", hash = "sha256:46ddef89cc2416a81ecfbeaceab1881948c014b1b6e4450b815311a89fb977b0", size = 2824803, upload-time = "2023-08-21T18:28:32.926Z" },
 ]
 [[package]]
 name = "sphinxcontrib-applehelp"
 version = "2.0.0"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/ba/6e/b837e84a1a704953c62ef8776d45c3e8d759876b4a84fe14eba2859106fe/sphinxcontrib_applehelp-2.0.0.tar.gz", hash = "sha256:2f29ef331735ce958efa4734873f084941970894c6090408b079c61b2e1c06d1", size = 20053, upload-time = "2024-07-29T01:09:00.465Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/5d/85/9ebeae2f76e9e77b952f4b274c27238156eae7979c5421fba91a28f4970d/sphinxcontrib_applehelp-2.0.0-py3-none-any.whl", hash = "sha256:4cd3f0ec4ac5dd9c17ec65e9ab272c9b867ea77425228e68ecf08d6b28ddbdb5", size = 119300, upload-time = "2024-07-29T01:08:58.99Z" },
 ]
 [[package]]
 name = "sphinxcontrib-devhelp"
 version = "2.0.0"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/f6/d2/5beee64d3e4e747f316bae86b55943f51e82bb86ecd325883ef65741e7da/sphinxcontrib_devhelp-2.0.0.tar.gz", hash = "sha256:411f5d96d445d1d73bb5d52133377b4248ec79db5c793ce7dbe59e074b4dd1ad", size = 12967, upload-time = "2024-07-29T01:09:23.417Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/35/7a/987e583882f985fe4d7323774889ec58049171828b58c2217e7f79cdf44e/sphinxcontrib_devhelp-2.0.0-py3-none-any.whl", hash = "sha256:aefb8b83854e4b0998877524d1029fd3e6879210422ee3780459e28a1f03a8a2", size = 82530, upload-time = "2024-07-29T01:09:21.945Z" },
 ]
 [[package]]
 name = "sphinxcontrib-htmlhelp"
 version = "2.1.0"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/43/93/983afd9aa001e5201eab16b5a444ed5b9b0a7a010541e0ddfbbfd0b2470c/sphinxcontrib_htmlhelp-2.1.0.tar.gz", hash = "sha256:c9e2916ace8aad64cc13a0d233ee22317f2b9025b9cf3295249fa985cc7082e9", size = 22617, upload-time = "2024-07-29T01:09:37.889Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/0a/7b/18a8c0bcec9182c05a0b3ec2a776bba4ead82750a55ff798e8d406dae604/sphinxcontrib_htmlhelp-2.1.0-py3-none-any.whl", hash = "sha256:166759820b47002d22914d64a075ce08f4c46818e17cfc9470a9786b759b19f8", size = 98705, upload-time = "2024-07-29T01:09:36.407Z" },
 ]
 [[package]]
 name = "sphinxcontrib-jquery"
 version = "4.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
    { name = "sphinx" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/de/f3/aa67467e051df70a6330fe7770894b3e4f09436dea6881ae0b4f3d87cad8/sphinxcontrib-jquery-4.1.tar.gz", hash = "sha256:1620739f04e36a2c779f1a131a2dfd49b2fd07351bf1968ced074365933abc7a", size = 122331, upload-time = "2023-03-14T15:01:01.944Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/76/85/749bd22d1a68db7291c89e2ebca53f4306c3f205853cf31e9de279034c3c/sphinxcontrib_jquery-4.1-py2.py3-none-any.whl", hash = "sha256:f936030d7d0147dd026a4f2b5a57343d233f1fc7b363f68b3d4f1cb0993878ae", size = 121104, upload-time = "2023-03-14T15:01:00.356Z" },
 ]
 [[package]]
 name = "sphinxcontrib-jsmath"
 version = "1.0.1"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/b2/e8/9ed3830aeed71f17c026a07a5097edcf44b692850ef215b161b8ad875729/sphinxcontrib-jsmath-1.0.1.tar.gz", hash = "sha256:a9925e4a4587247ed2191a22df5f6970656cb8ca2bd6284309578f2153e0c4b8", size = 5787, upload-time = "2019-01-21T16:10:16.347Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/c2/42/4c8646762ee83602e3fb3fbe774c2fac12f317deb0b5dbeeedd2d3ba4b77/sphinxcontrib_jsmath-1.0.1-py2.py3-none-any.whl", hash = "sha256:2ec2eaebfb78f3f2078e73666b1415417a116cc848b72e5172e596c871103178", size = 5071, upload-time = "2019-01-21T16:10:14.333Z" },
 ]
 [[package]]
 name = "sphinxcontrib-qthelp"
 version = "2.0.0"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/68/bc/9104308fc285eb3e0b31b67688235db556cd5b0ef31d96f30e45f2e51cae/sphinxcontrib_qthelp-2.0.0.tar.gz", hash = "sha256:4fe7d0ac8fc171045be623aba3e2a8f613f8682731f9153bb2e40ece16b9bbab", size = 17165, upload-time = "2024-07-29T01:09:56.435Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/27/83/859ecdd180cacc13b1f7e857abf8582a64552ea7a061057a6c716e790fce/sphinxcontrib_qthelp-2.0.0-py3-none-any.whl", hash = "sha256:b18a828cdba941ccd6ee8445dbe72ffa3ef8cbe7505d8cd1fa0d42d3f2d5f3eb", size = 88743, upload-time = "2024-07-29T01:09:54.885Z" },
 ]
 [[package]]
 name = "sphinxcontrib-serializinghtml"
 version = "2.0.0"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/3b/44/6716b257b0aa6bfd51a1b31665d1c205fb12cb5ad56de752dfa15657de2f/sphinxcontrib_serializinghtml-2.0.0.tar.gz", hash = "sha256:e9d912827f872c029017a53f0ef2180b327c3f7fd23c87229f7a8e8b70031d4d", size = 16080, upload-time = "2024-07-29T01:10:09.332Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/52/a7/d2782e4e3f77c8450f727ba74a8f12756d5ba823d81b941f1b04da9d033a/sphinxcontrib_serializinghtml-2.0.0-py3-none-any.whl", hash = "sha256:6e2cb0eef194e10c27ec0023bfeb25badbbb5868244cf5bc5bdc04e4464bf331", size = 92072, upload-time = "2024-07-29T01:10:08.203Z" },
 ]
 [[package]]
 name = "urllib3"
 version = "2.6.3"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/c7/24/5f1b3bdffd70275f6661c76461e25f024d5a38a46f04aaca912426a2b1d3/urllib3-2.6.3.tar.gz", hash = "sha256:1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed", size = 435556, upload-time = "2026-01-07T16:24:43.925Z" }
 wheels = [
    { url = "https://files.pythonhosted.org/packages/39/08/aaaad47bc4e9dc8c725e68f9d04865dbcb2052843ff09c97b08904852d84/urllib3-2.6.3-py3-none-any.whl", hash = "sha256:bf272323e553dfb2e87d9bfd225ca7b0f467b919d7bbd355436d3fd37cb0acd4", size = 131584, upload-time = "2026-01-07T16:24:42.685Z" },
 ]
 [[package]]
 name = "zrepl-docs"
 version = "0.0.0"
 source = { virtual = "." }
 dependencies = [
    { name = "sphinx" },
    { name = "sphinx-rtd-theme" },
 ]
 [package.metadata]
 requires-dist = [
    { name = "sphinx", specifier = ">=7.2,<8" },
    { name = "sphinx-rtd-theme", specifier = ">=1.3,<2" },
 ]
@@ -1,27 +0,0 @@
 package endpoint
 import (
 	"context"
 	"github.com/zrepl/zrepl/logger"
 )
 type contextKey int
 const (
 	contextKeyLogger contextKey = iota
 	ClientIdentityKey
 )
 type Logger = logger.Logger
 func WithLogger(ctx context.Context, log Logger) context.Context {
 	return context.WithValue(ctx, contextKeyLogger, log)
 }
 func getLogger(ctx context.Context) Logger {
 	if l, ok := ctx.Value(contextKeyLogger).(Logger); ok {
 		return l
 	}
 	return logger.NewNullLogger()
 }
@@ -1,798 +0,0 @@
 // Package endpoint implements replication endpoints for use with package replication.
 package endpoint
 import (
 	"context"
 	"fmt"
 	"path"
 	"sync"
 	"github.com/pkg/errors"
 	"github.com/zrepl/zrepl/replication/logic/pdu"
 	"github.com/zrepl/zrepl/util/chainlock"
 	"github.com/zrepl/zrepl/util/envconst"
 	"github.com/zrepl/zrepl/util/semaphore"
 	"github.com/zrepl/zrepl/zfs"
 )
 type SenderConfig struct {
 	FSF     zfs.DatasetFilter
 	Encrypt *zfs.NilBool
 	JobID   JobID
 }
 func (c *SenderConfig) Validate() error {
 	c.JobID.MustValidate()
 	if err := c.Encrypt.Validate(); err != nil {
 		return errors.Wrap(err, "`Encrypt` field invalid")
 	}
 	if _, err := StepHoldTag(c.JobID); err != nil {
 		return fmt.Errorf("JobID cannot be used for hold tag: %s", err)
 	}
 	return nil
 }
 // Sender implements replication.ReplicationEndpoint for a sending side
 type Sender struct {
 	FSFilter zfs.DatasetFilter
 	encrypt  *zfs.NilBool
 	jobId    JobID
 }
 func NewSender(conf SenderConfig) *Sender {
 	if err := conf.Validate(); err != nil {
 		panic("invalid config" + err.Error())
 	}
 	return &Sender{
 		FSFilter: conf.FSF,
 		encrypt:  conf.Encrypt,
 		jobId:    conf.JobID,
 	}
 }
 func (s *Sender) filterCheckFS(fs string) (*zfs.DatasetPath, error) {
 	dp, err := zfs.NewDatasetPath(fs)
 	if err != nil {
 		return nil, err
 	}
 	if dp.Length() == 0 {
 		return nil, errors.New("empty filesystem not allowed")
 	}
 	pass, err := s.FSFilter.Filter(dp)
 	if err != nil {
 		return nil, err
 	}
 	if !pass {
 		return nil, fmt.Errorf("endpoint does not allow access to filesystem %s", fs)
 	}
 	return dp, nil
 }
 func (s *Sender) ListFilesystems(ctx context.Context, r *pdu.ListFilesystemReq) (*pdu.ListFilesystemRes, error) {
 	fss, err := zfs.ZFSListMapping(ctx, s.FSFilter)
 	if err != nil {
 		return nil, err
 	}
 	rfss := make([]*pdu.Filesystem, len(fss))
 	for i := range fss {
 		encEnabled, err := zfs.ZFSGetEncryptionEnabled(ctx, fss[i].ToString())
 		if err != nil {
 			return nil, errors.Wrap(err, "cannot get filesystem encryption status")
 		}
 		rfss[i] = &pdu.Filesystem{
 			Path: fss[i].ToString(),
 			// ResumeToken does not make sense from Sender
 			IsPlaceholder: false, // sender FSs are never placeholders
 			IsEncrypted:   encEnabled,
 		}
 	}
 	res := &pdu.ListFilesystemRes{Filesystems: rfss}
 	return res, nil
 }
 func (s *Sender) ListFilesystemVersions(ctx context.Context, r *pdu.ListFilesystemVersionsReq) (*pdu.ListFilesystemVersionsRes, error) {
 	lp, err := s.filterCheckFS(r.GetFilesystem())
 	if err != nil {
 		return nil, err
 	}
 	fsvs, err := zfs.ZFSListFilesystemVersions(lp, nil)
 	if err != nil {
 		return nil, err
 	}
 	rfsvs := make([]*pdu.FilesystemVersion, len(fsvs))
 	for i := range fsvs {
 		rfsvs[i] = pdu.FilesystemVersionFromZFS(&fsvs[i])
 	}
 	res := &pdu.ListFilesystemVersionsRes{Versions: rfsvs}
 	return res, nil
 }
 func (p *Sender) HintMostRecentCommonAncestor(ctx context.Context, r *pdu.HintMostRecentCommonAncestorReq) (*pdu.HintMostRecentCommonAncestorRes, error) {
 	var err error
 	fs := r.GetFilesystem()
 	mostRecent, err := sendArgsFromPDUAndValidateExists(ctx, fs, r.GetSenderVersion())
 	if err != nil {
 		msg := "HintMostRecentCommonAncestor rpc with nonexistent most recent version"
 		getLogger(ctx).WithField("fs", fs).WithField("hinted_most_recent", fmt.Sprintf("%#v", mostRecent)).
 			Warn(msg)
 		return nil, errors.Wrap(err, msg)
 	}
 	// move replication cursor to this position
 	_, err = MoveReplicationCursor(ctx, fs, mostRecent, p.jobId)
 	if err == zfs.ErrBookmarkCloningNotSupported {
 		getLogger(ctx).Debug("not creating replication cursor from bookmark because ZFS does not support it")
 		// fallthrough
 	} else if err != nil {
 		return nil, errors.Wrap(err, "cannot set replication cursor to hinted version")
 	}
 	// cleanup previous steps
 	if err := ReleaseStepAll(ctx, fs, mostRecent, p.jobId); err != nil {
 		return nil, errors.Wrap(err, "cannot cleanup prior invocation's step holds and bookmarks")
 	}
 	return &pdu.HintMostRecentCommonAncestorRes{}, nil
 }
 var maxConcurrentZFSSendSemaphore = semaphore.New(envconst.Int64("ZREPL_ENDPOINT_MAX_CONCURRENT_SEND", 10))
 func uncheckedSendArgsFromPDU(fsv *pdu.FilesystemVersion) *zfs.ZFSSendArgVersion {
 	if fsv == nil {
 		return nil
 	}
 	return &zfs.ZFSSendArgVersion{RelName: fsv.GetRelName(), GUID: fsv.Guid}
 }
 func sendArgsFromPDUAndValidateExists(ctx context.Context, fs string, fsv *pdu.FilesystemVersion) (*zfs.ZFSSendArgVersion, error) {
 	v := uncheckedSendArgsFromPDU(fsv)
 	if v == nil {
 		return nil, errors.New("must not be nil")
 	}
 	if err := v.ValidateExists(ctx, fs); err != nil {
 		return nil, err
 	}
 	return v, nil
 }
 func (s *Sender) Send(ctx context.Context, r *pdu.SendReq) (*pdu.SendRes, zfs.StreamCopier, error) {
 	_, err := s.filterCheckFS(r.Filesystem)
 	if err != nil {
 		return nil, nil, err
 	}
 	switch r.Encrypted {
 	case pdu.Tri_DontCare:
 		// use s.encrypt setting
 		// ok, fallthrough outer
 	case pdu.Tri_False:
 		if s.encrypt.B {
 			return nil, nil, errors.New("only encrytped sends allowed (send -w + encryption!= off), but unencrytped send requested")
 		}
 		// fallthrough outer
 	case pdu.Tri_True:
 		if !s.encrypt.B {
 			return nil, nil, errors.New("only unencrypted sends allowed, but encrypted send requested")
 		}
 		// fallthrough outer
 	default:
 		return nil, nil, fmt.Errorf("unknown pdu.Tri variant %q", r.Encrypted)
 	}
 	sendArgs := zfs.ZFSSendArgs{
 		FS:          r.Filesystem,
 		From:        uncheckedSendArgsFromPDU(r.GetFrom()), // validated by zfs.ZFSSendDry / zfs.ZFSSend
 		To:          uncheckedSendArgsFromPDU(r.GetTo()),   // validated by zfs.ZFSSendDry / zfs.ZFSSend
 		Encrypted:   s.encrypt,
 		ResumeToken: r.ResumeToken, // nil or not nil, depending on decoding success
 	}
 	getLogger(ctx).Debug("acquire concurrent send semaphore")
 	// TODO use try-acquire and fail with resource-exhaustion rpc status
 	// => would require handling on the client-side
 	// => this is a dataconn endpoint, doesn't have the status code semantics of gRPC
 	guard, err := maxConcurrentZFSSendSemaphore.Acquire(ctx)
 	if err != nil {
 		return nil, nil, err
 	}
 	defer guard.Release()
 	si, err := zfs.ZFSSendDry(ctx, sendArgs)
 	if err != nil {
 		return nil, nil, errors.Wrap(err, "zfs send dry failed")
 	}
 	// From now on, assume that sendArgs has been validated by ZFSSendDry
 	// (because validation invovles shelling out, it's actually a little expensive)
 	var expSize int64 = 0      // protocol says 0 means no estimate
 	if si.SizeEstimate != -1 { // but si returns -1 for no size estimate
 		expSize = si.SizeEstimate
 	}
 	res := &pdu.SendRes{
 		ExpectedSize:    expSize,
 		UsedResumeToken: r.ResumeToken != "",
 	}
 	if r.DryRun {
 		return res, nil, nil
 	}
 	// update replication cursor
 	if sendArgs.From != nil {
 		// For all but the first replication, this should always be a no-op because SendCompleted already moved the cursor
 		_, err = MoveReplicationCursor(ctx, sendArgs.FS, sendArgs.From, s.jobId)
 		if err == zfs.ErrBookmarkCloningNotSupported {
 			getLogger(ctx).Debug("not creating replication cursor from bookmark because ZFS does not support it")
 			// fallthrough
 		} else if err != nil {
 			return nil, nil, errors.Wrap(err, "cannot set replication cursor to `from` version before starting send")
 		}
 	}
 	// make sure `From` doesn't go away in order to make this step resumable
 	if sendArgs.From != nil {
 		err := HoldStep(ctx, sendArgs.FS, sendArgs.From, s.jobId)
 		if err == zfs.ErrBookmarkCloningNotSupported {
 			getLogger(ctx).Debug("not creating step bookmark because ZFS does not support it")
 			// fallthrough
 		} else if err != nil {
 			return nil, nil, errors.Wrap(err, "cannot create step bookmark")
 		}
 	}
 	// make sure `To` doesn't go away in order to make this step resumable
 	err = HoldStep(ctx, sendArgs.FS, sendArgs.To, s.jobId)
 	if err != nil {
 		return nil, nil, errors.Wrapf(err, "cannot hold `to` version %q before starting send", sendArgs.To.RelName)
 	}
 	// step holds & replication cursor released / moved forward in s.SendCompleted => s.moveCursorAndReleaseSendHolds
 	streamCopier, err := zfs.ZFSSend(ctx, sendArgs)
 	if err != nil {
 		return nil, nil, errors.Wrap(err, "zfs send failed")
 	}
 	return res, streamCopier, nil
 }
 func (p *Sender) SendCompleted(ctx context.Context, r *pdu.SendCompletedReq) (*pdu.SendCompletedRes, error) {
 	orig := r.GetOriginalReq() // may be nil, always use proto getters
 	fs := orig.GetFilesystem()
 	var err error
 	var from *zfs.ZFSSendArgVersion
 	if orig.GetFrom() != nil {
 		from, err = sendArgsFromPDUAndValidateExists(ctx, fs, orig.GetFrom()) // no shadow
 		if err != nil {
 			return nil, errors.Wrap(err, "validate `from` exists")
 		}
 	}
 	to, err := sendArgsFromPDUAndValidateExists(ctx, fs, orig.GetTo())
 	if err != nil {
 		return nil, errors.Wrap(err, "validate `to` exists")
 	}
 	log := getLogger(ctx).WithField("to_guid", to.GUID).
 		WithField("fs", fs).
 		WithField("to", to.RelName)
 	if from != nil {
 		log = log.WithField("from", from.RelName).WithField("from_guid", from.GUID)
 	}
 	log.Debug("move replication cursor to most recent common version")
 	destroyedCursors, err := MoveReplicationCursor(ctx, fs, to, p.jobId)
 	if err != nil {
 		if err == zfs.ErrBookmarkCloningNotSupported {
 			log.Debug("not setting replication cursor, bookmark cloning not supported")
 		} else {
 			msg := "cannot move replication cursor, keeping hold on `to` until successful"
 			log.WithError(err).Error(msg)
 			err = errors.Wrap(err, msg)
 			// it is correct to not release the hold if we can't move the cursor!
 			return &pdu.SendCompletedRes{}, err
 		}
 	} else {
 		log.Info("successfully moved replication cursor")
 	}
 	// kick off releasing of step holds / bookmarks
 	// if we fail to release them, don't bother the caller:
 	// they are merely an implementation detail on the sender for better resumability
 	var wg sync.WaitGroup
 	wg.Add(2)
 	go func() {
 		defer wg.Done()
 		log.Debug("release step-hold of or step-bookmark on `to`")
 		err = ReleaseStep(ctx, fs, to, p.jobId)
 		if err != nil {
 			log.WithError(err).Error("cannot release step-holds on or destroy step-bookmark of `to`")
 		} else {
 			log.Info("successfully released step-holds on or destroyed step-bookmark of `to`")
 		}
 	}()
 	go func() {
 		defer wg.Done()
 		if from == nil {
 			return
 		}
 		log.Debug("release step-hold of or step-bookmark on `from`")
 		err := ReleaseStep(ctx, fs, from, p.jobId)
 		if err != nil {
 			if dne, ok := err.(*zfs.DatasetDoesNotExist); ok {
 				// If bookmark cloning is not supported, `from` might be the old replication cursor
 				// and thus have already been destroyed by MoveReplicationCursor above
 				// In that case, nonexistence of `from` is not an error, otherwise it is.
 				fsp, err := zfs.NewDatasetPath(fs)
 				if err != nil {
 					panic(err) // fs has been validated multiple times above
 				}
 				for _, fsv := range destroyedCursors {
 					if fsv.ToAbsPath(fsp) == dne.Path {
 						log.Info("`from` was a replication cursor and has already been destroyed")
 						return
 					}
 				}
 				// fallthrough
 			}
 			log.WithError(err).Error("cannot release step-holds on or destroy step-bookmark of `from`")
 		} else {
 			log.Info("successfully released step-holds on or destroyed step-bookmark of `from`")
 		}
 	}()
 	wg.Wait()
 	return &pdu.SendCompletedRes{}, nil
 }
 func (p *Sender) DestroySnapshots(ctx context.Context, req *pdu.DestroySnapshotsReq) (*pdu.DestroySnapshotsRes, error) {
 	dp, err := p.filterCheckFS(req.Filesystem)
 	if err != nil {
 		return nil, err
 	}
 	return doDestroySnapshots(ctx, dp, req.Snapshots)
 }
 func (p *Sender) Ping(ctx context.Context, req *pdu.PingReq) (*pdu.PingRes, error) {
 	res := pdu.PingRes{
 		Echo: req.GetMessage(),
 	}
 	return &res, nil
 }
 func (p *Sender) PingDataconn(ctx context.Context, req *pdu.PingReq) (*pdu.PingRes, error) {
 	return p.Ping(ctx, req)
 }
 func (p *Sender) WaitForConnectivity(ctx context.Context) error {
 	return nil
 }
 func (p *Sender) ReplicationCursor(ctx context.Context, req *pdu.ReplicationCursorReq) (*pdu.ReplicationCursorRes, error) {
 	dp, err := p.filterCheckFS(req.Filesystem)
 	if err != nil {
 		return nil, err
 	}
 	cursor, err := GetMostRecentReplicationCursorOfJob(ctx, dp.ToString(), p.jobId)
 	if err != nil {
 		return nil, err
 	}
 	if cursor == nil {
 		return &pdu.ReplicationCursorRes{Result: &pdu.ReplicationCursorRes_Notexist{Notexist: true}}, nil
 	}
 	return &pdu.ReplicationCursorRes{Result: &pdu.ReplicationCursorRes_Guid{Guid: cursor.Guid}}, nil
 }
 func (p *Sender) Receive(ctx context.Context, r *pdu.ReceiveReq, receive zfs.StreamCopier) (*pdu.ReceiveRes, error) {
 	return nil, fmt.Errorf("sender does not implement Receive()")
 }
 type FSFilter interface { // FIXME unused
 	Filter(path *zfs.DatasetPath) (pass bool, err error)
 }
 // FIXME: can we get away without error types here?
 type FSMap interface { // FIXME unused
 	FSFilter
 	Map(path *zfs.DatasetPath) (*zfs.DatasetPath, error)
 	Invert() (FSMap, error)
 	AsFilter() FSFilter
 }
 type ReceiverConfig struct {
 	JobID JobID
 	RootWithoutClientComponent *zfs.DatasetPath // TODO use
 	AppendClientIdentity       bool
 	UpdateLastReceivedHold bool
 }
 func (c *ReceiverConfig) copyIn() {
 	c.RootWithoutClientComponent = c.RootWithoutClientComponent.Copy()
 }
 func (c *ReceiverConfig) Validate() error {
 	c.JobID.MustValidate()
 	if c.RootWithoutClientComponent.Length() <= 0 {
 		return errors.New("RootWithoutClientComponent must not be an empty dataset path")
 	}
 	return nil
 }
 // Receiver implements replication.ReplicationEndpoint for a receiving side
 type Receiver struct {
 	conf ReceiverConfig // validated
 	recvParentCreationMtx *chainlock.L
 }
 func NewReceiver(config ReceiverConfig) *Receiver {
 	config.copyIn()
 	if err := config.Validate(); err != nil {
 		panic(err)
 	}
 	return &Receiver{
 		conf:                  config,
 		recvParentCreationMtx: chainlock.New(),
 	}
 }
 func TestClientIdentity(rootFS *zfs.DatasetPath, clientIdentity string) error {
 	_, err := clientRoot(rootFS, clientIdentity)
 	return err
 }
 func clientRoot(rootFS *zfs.DatasetPath, clientIdentity string) (*zfs.DatasetPath, error) {
 	rootFSLen := rootFS.Length()
 	clientRootStr := path.Join(rootFS.ToString(), clientIdentity)
 	clientRoot, err := zfs.NewDatasetPath(clientRootStr)
 	if err != nil {
 		return nil, err
 	}
 	if rootFSLen+1 != clientRoot.Length() {
 		return nil, fmt.Errorf("client identity must be a single ZFS filesystem path component")
 	}
 	return clientRoot, nil
 }
 func (s *Receiver) clientRootFromCtx(ctx context.Context) *zfs.DatasetPath {
 	if !s.conf.AppendClientIdentity {
 		return s.conf.RootWithoutClientComponent.Copy()
 	}
 	clientIdentity, ok := ctx.Value(ClientIdentityKey).(string)
 	if !ok {
 		panic(fmt.Sprintf("ClientIdentityKey context value must be set"))
 	}
 	clientRoot, err := clientRoot(s.conf.RootWithoutClientComponent, clientIdentity)
 	if err != nil {
 		panic(fmt.Sprintf("ClientIdentityContextKey must have been validated before invoking Receiver: %s", err))
 	}
 	return clientRoot
 }
 type subroot struct {
 	localRoot *zfs.DatasetPath
 }
 var _ zfs.DatasetFilter = subroot{}
 // Filters local p
 func (f subroot) Filter(p *zfs.DatasetPath) (pass bool, err error) {
 	return p.HasPrefix(f.localRoot) && !p.Equal(f.localRoot), nil
 }
 func (f subroot) MapToLocal(fs string) (*zfs.DatasetPath, error) {
 	p, err := zfs.NewDatasetPath(fs)
 	if err != nil {
 		return nil, err
 	}
 	if p.Length() == 0 {
 		return nil, errors.Errorf("cannot map empty filesystem")
 	}
 	c := f.localRoot.Copy()
 	c.Extend(p)
 	return c, nil
 }
 func (s *Receiver) ListFilesystems(ctx context.Context, req *pdu.ListFilesystemReq) (*pdu.ListFilesystemRes, error) {
 	root := s.clientRootFromCtx(ctx)
 	filtered, err := zfs.ZFSListMapping(ctx, subroot{root})
 	if err != nil {
 		return nil, err
 	}
 	// present filesystem without the root_fs prefix
 	fss := make([]*pdu.Filesystem, 0, len(filtered))
 	for _, a := range filtered {
 		l := getLogger(ctx).WithField("fs", a)
 		ph, err := zfs.ZFSGetFilesystemPlaceholderState(a)
 		if err != nil {
 			l.WithError(err).Error("error getting placeholder state")
 			return nil, errors.Wrapf(err, "cannot get placeholder state for fs %q", a)
 		}
 		l.WithField("placeholder_state", fmt.Sprintf("%#v", ph)).Debug("placeholder state")
 		if !ph.FSExists {
 			l.Error("inconsistent placeholder state: filesystem must exists")
 			err := errors.Errorf("inconsistent placeholder state: filesystem %q must exist in this context", a.ToString())
 			return nil, err
 		}
 		token, err := zfs.ZFSGetReceiveResumeTokenOrEmptyStringIfNotSupported(ctx, a)
 		if err != nil {
 			l.WithError(err).Error("cannot get receive resume token")
 			return nil, err
 		}
 		encEnabled, err := zfs.ZFSGetEncryptionEnabled(ctx, a.ToString())
 		if err != nil {
 			l.WithError(err).Error("cannot get encryption enabled status")
 			return nil, err
 		}
 		l.WithField("receive_resume_token", token).Debug("receive resume token")
 		a.TrimPrefix(root)
 		fs := &pdu.Filesystem{
 			Path:          a.ToString(),
 			IsPlaceholder: ph.IsPlaceholder,
 			ResumeToken:   token,
 			IsEncrypted:   encEnabled,
 		}
 		fss = append(fss, fs)
 	}
 	if len(fss) == 0 {
 		getLogger(ctx).Debug("no filesystems found")
 		return &pdu.ListFilesystemRes{}, nil
 	}
 	return &pdu.ListFilesystemRes{Filesystems: fss}, nil
 }
 func (s *Receiver) ListFilesystemVersions(ctx context.Context, req *pdu.ListFilesystemVersionsReq) (*pdu.ListFilesystemVersionsRes, error) {
 	root := s.clientRootFromCtx(ctx)
 	lp, err := subroot{root}.MapToLocal(req.GetFilesystem())
 	if err != nil {
 		return nil, err
 	}
 	fsvs, err := zfs.ZFSListFilesystemVersions(lp, nil)
 	if err != nil {
 		return nil, err
 	}
 	rfsvs := make([]*pdu.FilesystemVersion, len(fsvs))
 	for i := range fsvs {
 		rfsvs[i] = pdu.FilesystemVersionFromZFS(&fsvs[i])
 	}
 	return &pdu.ListFilesystemVersionsRes{Versions: rfsvs}, nil
 }
 func (s *Receiver) Ping(ctx context.Context, req *pdu.PingReq) (*pdu.PingRes, error) {
 	res := pdu.PingRes{
 		Echo: req.GetMessage(),
 	}
 	return &res, nil
 }
 func (s *Receiver) PingDataconn(ctx context.Context, req *pdu.PingReq) (*pdu.PingRes, error) {
 	return s.Ping(ctx, req)
 }
 func (s *Receiver) WaitForConnectivity(ctx context.Context) error {
 	return nil
 }
 func (s *Receiver) ReplicationCursor(context.Context, *pdu.ReplicationCursorReq) (*pdu.ReplicationCursorRes, error) {
 	return nil, fmt.Errorf("ReplicationCursor not implemented for Receiver")
 }
 func (s *Receiver) Send(ctx context.Context, req *pdu.SendReq) (*pdu.SendRes, zfs.StreamCopier, error) {
 	return nil, nil, fmt.Errorf("receiver does not implement Send()")
 }
 var maxConcurrentZFSRecvSemaphore = semaphore.New(envconst.Int64("ZREPL_ENDPOINT_MAX_CONCURRENT_RECV", 10))
 func (s *Receiver) Receive(ctx context.Context, req *pdu.ReceiveReq, receive zfs.StreamCopier) (*pdu.ReceiveRes, error) {
 	getLogger(ctx).Debug("incoming Receive")
 	defer receive.Close()
 	root := s.clientRootFromCtx(ctx)
 	lp, err := subroot{root}.MapToLocal(req.Filesystem)
 	if err != nil {
 		return nil, errors.Wrap(err, "`Filesystem` invalid")
 	}
 	to := uncheckedSendArgsFromPDU(req.GetTo())
 	if to == nil {
 		return nil, errors.New("`To` must not be nil")
 	}
 	if err := to.ValidateInMemory(lp.ToString()); err != nil {
 		return nil, errors.Wrap(err, "`To` invalid")
 	}
 	if !to.IsSnapshot() {
 		return nil, errors.New("`To` must be a snapshot")
 	}
 	// create placeholder parent filesystems as appropriate
 	//
 	// Manipulating the ZFS dataset hierarchy must happen exclusively.
 	// TODO: Use fine-grained locking to allow separate clients / requests to pass
 	// 		 through the following section concurrently when operating on disjoint
 	//       ZFS dataset hierarchy subtrees.
 	var visitErr error
 	func() {
 		getLogger(ctx).Debug("begin aquire recvParentCreationMtx")
 		defer s.recvParentCreationMtx.Lock().Unlock()
 		getLogger(ctx).Debug("end aquire recvParentCreationMtx")
 		defer getLogger(ctx).Debug("release recvParentCreationMtx")
 		f := zfs.NewDatasetPathForest()
 		f.Add(lp)
 		getLogger(ctx).Debug("begin tree-walk")
 		f.WalkTopDown(func(v zfs.DatasetPathVisit) (visitChildTree bool) {
 			if v.Path.Equal(lp) {
 				return false
 			}
 			ph, err := zfs.ZFSGetFilesystemPlaceholderState(v.Path)
 			getLogger(ctx).
 				WithField("fs", v.Path.ToString()).
 				WithField("placeholder_state", fmt.Sprintf("%#v", ph)).
 				WithField("err", fmt.Sprintf("%s", err)).
 				WithField("errType", fmt.Sprintf("%T", err)).
 				Debug("placeholder state for filesystem")
 			if err != nil {
 				visitErr = err
 				return false
 			}
 			if !ph.FSExists {
 				if s.conf.RootWithoutClientComponent.HasPrefix(v.Path) {
 					if v.Path.Length() == 1 {
 						visitErr = fmt.Errorf("pool %q not imported", v.Path.ToString())
 					} else {
 						visitErr = fmt.Errorf("root_fs %q does not exist", s.conf.RootWithoutClientComponent.ToString())
 					}
 					getLogger(ctx).WithError(visitErr).Error("placeholders are only created automatically below root_fs")
 					return false
 				}
 				l := getLogger(ctx).WithField("placeholder_fs", v.Path)
 				l.Debug("create placeholder filesystem")
 				err := zfs.ZFSCreatePlaceholderFilesystem(v.Path)
 				if err != nil {
 					l.WithError(err).Error("cannot create placeholder filesystem")
 					visitErr = err
 					return false
 				}
 				return true
 			}
 			getLogger(ctx).WithField("filesystem", v.Path.ToString()).Debug("exists")
 			return true // leave this fs as is
 		})
 	}()
 	getLogger(ctx).WithField("visitErr", visitErr).Debug("complete tree-walk")
 	if visitErr != nil {
 		return nil, visitErr
 	}
 	// determine whether we need to rollback the filesystem / change its placeholder state
 	var clearPlaceholderProperty bool
 	var recvOpts zfs.RecvOptions
 	ph, err := zfs.ZFSGetFilesystemPlaceholderState(lp)
 	if err == nil && ph.FSExists && ph.IsPlaceholder {
 		recvOpts.RollbackAndForceRecv = true
 		clearPlaceholderProperty = true
 	}
 	if clearPlaceholderProperty {
 		if err := zfs.ZFSSetPlaceholder(lp, false); err != nil {
 			return nil, fmt.Errorf("cannot clear placeholder property for forced receive: %s", err)
 		}
 	}
 	if req.ClearResumeToken && ph.FSExists {
 		if err := zfs.ZFSRecvClearResumeToken(lp.ToString()); err != nil {
 			return nil, errors.Wrap(err, "cannot clear resume token")
 		}
 	}
 	recvOpts.SavePartialRecvState, err = zfs.ResumeRecvSupported(ctx, lp)
 	if err != nil {
 		return nil, errors.Wrap(err, "cannot determine whether we can use resumable send & recv")
 	}
 	getLogger(ctx).Debug("acquire concurrent recv semaphore")
 	// TODO use try-acquire and fail with resource-exhaustion rpc status
 	// => would require handling on the client-side
 	// => this is a dataconn endpoint, doesn't have the status code semantics of gRPC
 	guard, err := maxConcurrentZFSRecvSemaphore.Acquire(ctx)
 	if err != nil {
 		return nil, err
 	}
 	defer guard.Release()
 	getLogger(ctx).WithField("opts", fmt.Sprintf("%#v", recvOpts)).Debug("start receive command")
 	snapFullPath := to.FullPath(lp.ToString())
 	if err := zfs.ZFSRecv(ctx, lp.ToString(), to, receive, recvOpts); err != nil {
 		getLogger(ctx).
 			WithError(err).
 			WithField("opts", recvOpts).
 			Error("zfs receive failed")
 		return nil, err
 	}
 	// validate that we actually received what the sender claimed
 	if err := to.ValidateExists(ctx, lp.ToString()); err != nil {
 		msg := "receive request's `To` version does not match what we received in the stream"
 		getLogger(ctx).WithError(err).WithField("snap", snapFullPath).Error(msg)
 		getLogger(ctx).Error("aborting recv request, but keeping received snapshot for inspection")
 		return nil, errors.Wrap(err, msg)
 	}
 	if s.conf.UpdateLastReceivedHold {
 		getLogger(ctx).Debug("move last-received-hold")
 		if err := MoveLastReceivedHold(ctx, lp.ToString(), *to, s.conf.JobID); err != nil {
 			return nil, errors.Wrap(err, "cannot move last-received-hold")
 		}
 	}
 	return &pdu.ReceiveRes{}, nil
 }
 func (s *Receiver) DestroySnapshots(ctx context.Context, req *pdu.DestroySnapshotsReq) (*pdu.DestroySnapshotsRes, error) {
 	root := s.clientRootFromCtx(ctx)
 	lp, err := subroot{root}.MapToLocal(req.Filesystem)
 	if err != nil {
 		return nil, err
 	}
 	return doDestroySnapshots(ctx, lp, req.Snapshots)
 }
 func (p *Receiver) HintMostRecentCommonAncestor(ctx context.Context, r *pdu.HintMostRecentCommonAncestorReq) (*pdu.HintMostRecentCommonAncestorRes, error) {
 	// we don't move last-received-hold as part of this hint
 	// because that wouldn't give us any benefit wrt resumability.
 	//
 	// Other reason: the replication logic that issues this RPC would require refactoring
 	// to include the receiver's FilesystemVersion in the request)
 	return &pdu.HintMostRecentCommonAncestorRes{}, nil
 }
 func (p *Receiver) SendCompleted(context.Context, *pdu.SendCompletedReq) (*pdu.SendCompletedRes, error) {
 	return &pdu.SendCompletedRes{}, nil
 }
 func doDestroySnapshots(ctx context.Context, lp *zfs.DatasetPath, snaps []*pdu.FilesystemVersion) (*pdu.DestroySnapshotsRes, error) {
 	reqs := make([]*zfs.DestroySnapOp, len(snaps))
 	ress := make([]*pdu.DestroySnapshotRes, len(snaps))
 	errs := make([]error, len(snaps))
 	for i, fsv := range snaps {
 		if fsv.Type != pdu.FilesystemVersion_Snapshot {
 			return nil, fmt.Errorf("version %q is not a snapshot", fsv.Name)
 		}
 		ress[i] = &pdu.DestroySnapshotRes{
 			Snapshot: fsv,
 			// Error set after batch operation
 		}
 		reqs[i] = &zfs.DestroySnapOp{
 			Filesystem: lp.ToString(),
 			Name:       fsv.Name,
 			ErrOut:     &errs[i],
 		}
 	}
 	zfs.ZFSDestroyFilesystemVersions(reqs)
 	for i := range reqs {
 		if errs[i] != nil {
 			if de, ok := errs[i].(*zfs.DestroySnapshotsError); ok && len(de.Reason) == 1 {
 				ress[i].Error = de.Reason[0]
 			} else {
 				ress[i].Error = errs[i].Error()
 			}
 		}
 	}
 	return &pdu.DestroySnapshotsRes{
 		Results: ress,
 	}, nil
 }
@@ -1,503 +0,0 @@
 package endpoint
 import (
 	"context"
 	"fmt"
 	"regexp"
 	"sort"
 	"github.com/kr/pretty"
 	"github.com/pkg/errors"
 	"github.com/zrepl/zrepl/zfs"
 )
 var stepHoldTagRE = regexp.MustCompile("^zrepl_STEP_J_(.+)")
 func StepHoldTag(jobid JobID) (string, error) {
 	return stepHoldTagImpl(jobid.String())
 }
 func stepHoldTagImpl(jobid string) (string, error) {
 	t := fmt.Sprintf("zrepl_STEP_J_%s", jobid)
 	if err := zfs.ValidHoldTag(t); err != nil {
 		return "", err
 	}
 	return t, nil
 }
 // err != nil always means that the bookmark is not a step bookmark
 func ParseStepHoldTag(tag string) (JobID, error) {
 	match := stepHoldTagRE.FindStringSubmatch(tag)
 	if match == nil {
 		return JobID{}, fmt.Errorf("parse hold tag: match regex %q", stepHoldTagRE)
 	}
 	jobID, err := MakeJobID(match[1])
 	if err != nil {
 		return JobID{}, errors.Wrap(err, "parse hold tag: invalid job id field")
 	}
 	return jobID, nil
 }
 const stepBookmarkNamePrefix = "zrepl_STEP"
 // v must be validated by caller
 func StepBookmarkName(fs string, guid uint64, id JobID) (string, error) {
 	return stepBookmarkNameImpl(fs, guid, id.String())
 }
 func stepBookmarkNameImpl(fs string, guid uint64, jobid string) (string, error) {
 	return makeJobAndGuidBookmarkName(stepBookmarkNamePrefix, fs, guid, jobid)
 }
 // name is the full bookmark name, including dataset path
 //
 // err != nil always means that the bookmark is not a step bookmark
 func ParseStepBookmarkName(fullname string) (guid uint64, jobID JobID, err error) {
 	guid, jobID, err = parseJobAndGuidBookmarkName(fullname, stepBookmarkNamePrefix)
 	if err != nil {
 		err = errors.Wrap(err, "parse step bookmark name") // no shadow!
 	}
 	return guid, jobID, err
 }
 const replicationCursorBookmarkNamePrefix = "zrepl_CURSOR"
 func ReplicationCursorBookmarkName(fs string, guid uint64, id JobID) (string, error) {
 	return replicationCursorBookmarkNameImpl(fs, guid, id.String())
 }
 func replicationCursorBookmarkNameImpl(fs string, guid uint64, jobid string) (string, error) {
 	return makeJobAndGuidBookmarkName(replicationCursorBookmarkNamePrefix, fs, guid, jobid)
 }
 var ErrV1ReplicationCursor = fmt.Errorf("bookmark name is a v1-replication cursor")
 //err != nil always means that the bookmark is not a valid replication bookmark
 //
 // Returns ErrV1ReplicationCursor as error if the bookmark is a v1 replication cursor
 func ParseReplicationCursorBookmarkName(fullname string) (uint64, JobID, error) {
 	// check for legacy cursors
 	{
 		if err := zfs.EntityNamecheck(fullname, zfs.EntityTypeBookmark); err != nil {
 			return 0, JobID{}, errors.Wrap(err, "parse replication cursor bookmark name")
 		}
 		_, _, name, err := zfs.DecomposeVersionString(fullname)
 		if err != nil {
 			return 0, JobID{}, errors.Wrap(err, "parse replication cursor bookmark name: decompose version string")
 		}
 		const V1ReplicationCursorBookmarkName = "zrepl_replication_cursor"
 		if name == V1ReplicationCursorBookmarkName {
 			return 0, JobID{}, ErrV1ReplicationCursor
 		}
 	}
 	guid, jobID, err := parseJobAndGuidBookmarkName(fullname, replicationCursorBookmarkNamePrefix)
 	if err != nil {
 		err = errors.Wrap(err, "parse replication cursor bookmark name") // no shadow
 	}
 	return guid, jobID, err
 }
 // may return nil for both values, indicating there is no cursor
 func GetMostRecentReplicationCursorOfJob(ctx context.Context, fs string, jobID JobID) (*zfs.FilesystemVersion, error) {
 	fsp, err := zfs.NewDatasetPath(fs)
 	if err != nil {
 		return nil, err
 	}
 	candidates, err := GetReplicationCursors(ctx, fsp, jobID)
 	if err != nil || len(candidates) == 0 {
 		return nil, err
 	}
 	sort.Slice(candidates, func(i, j int) bool {
 		return candidates[i].CreateTXG < candidates[j].CreateTXG
 	})
 	mostRecent := candidates[len(candidates)-1]
 	return &mostRecent, nil
 }
 func GetReplicationCursors(ctx context.Context, fs *zfs.DatasetPath, jobID JobID) ([]zfs.FilesystemVersion, error) {
 	listOut := &ListHoldsAndBookmarksOutput{}
 	if err := listZFSHoldsAndBookmarksImplFS(ctx, listOut, fs); err != nil {
 		return nil, errors.Wrap(err, "get replication cursor: list bookmarks and holds")
 	}
 	if len(listOut.V1ReplicationCursors) > 0 {
 		getLogger(ctx).WithField("bookmark", pretty.Sprint(listOut.V1ReplicationCursors)).
 			Warn("found v1-replication cursor bookmarks, consider running migration 'replication-cursor:v1-v2' after successful replication with this zrepl version")
 	}
 	candidates := make([]zfs.FilesystemVersion, 0)
 	for _, v := range listOut.ReplicationCursorBookmarks {
 		zv := zfs.ZFSSendArgVersion{
 			RelName: "#" + v.Name,
 			GUID:    v.Guid,
 		}
 		if err := zv.ValidateExists(ctx, v.FS); err != nil {
 			getLogger(ctx).WithError(err).WithField("bookmark", zv.FullPath(v.FS)).
 				Error("found invalid replication cursor bookmark")
 			continue
 		}
 		candidates = append(candidates, v.v)
 	}
 	return candidates, nil
 }
 // `target` is validated before replication cursor is set. if validation fails, the cursor is not moved.
 //
 // returns ErrBookmarkCloningNotSupported if version is a bookmark and bookmarking bookmarks is not supported by ZFS
 func MoveReplicationCursor(ctx context.Context, fs string, target *zfs.ZFSSendArgVersion, jobID JobID) (destroyedCursors []zfs.FilesystemVersion, err error) {
 	if !target.IsSnapshot() {
 		return nil, zfs.ErrBookmarkCloningNotSupported
 	}
 	snapProps, err := target.ValidateExistsAndGetCheckedProps(ctx, fs)
 	if err != nil {
 		return nil, errors.Wrapf(err, "invalid replication cursor target %q (guid=%v)", target.RelName, target.GUID)
 	}
 	bookmarkname, err := ReplicationCursorBookmarkName(fs, snapProps.Guid, jobID)
 	if err != nil {
 		return nil, errors.Wrap(err, "determine replication cursor name")
 	}
 	// idempotently create bookmark (guid is encoded in it, hence we'll most likely add a new one
 	// cleanup the old one afterwards
 	err = zfs.ZFSBookmark(fs, *target, bookmarkname)
 	if err != nil {
 		if err == zfs.ErrBookmarkCloningNotSupported {
 			return nil, err // TODO go1.13 use wrapping
 		}
 		return nil, errors.Wrapf(err, "cannot create bookmark")
 	}
 	destroyedCursors, err = DestroyObsoleteReplicationCursors(ctx, fs, target, jobID)
 	if err != nil {
 		return nil, errors.Wrap(err, "destroy obsolete replication cursors")
 	}
 	return destroyedCursors, nil
 }
 func DestroyObsoleteReplicationCursors(ctx context.Context, fs string, target *zfs.ZFSSendArgVersion, jobID JobID) (destroyed []zfs.FilesystemVersion, err error) {
 	return destroyBookmarksOlderThan(ctx, fs, target, jobID, func(shortname string) (accept bool) {
 		_, parsedID, err := ParseReplicationCursorBookmarkName(fs + "#" + shortname)
 		return err == nil && parsedID == jobID
 	})
 }
 // idempotently hold / step-bookmark `version`
 //
 // returns ErrBookmarkCloningNotSupported if version is a bookmark and bookmarking bookmarks is not supported by ZFS
 func HoldStep(ctx context.Context, fs string, v *zfs.ZFSSendArgVersion, jobID JobID) error {
 	if err := v.ValidateExists(ctx, fs); err != nil {
 		return err
 	}
 	if v.IsSnapshot() {
 		tag, err := StepHoldTag(jobID)
 		if err != nil {
 			return errors.Wrap(err, "step hold tag")
 		}
 		if err := zfs.ZFSHold(ctx, fs, *v, tag); err != nil {
 			return errors.Wrap(err, "step hold: zfs")
 		}
 		return nil
 	}
 	v.MustBeBookmark()
 	bmname, err := StepBookmarkName(fs, v.GUID, jobID)
 	if err != nil {
 		return errors.Wrap(err, "create step bookmark: determine bookmark name")
 	}
 	// idempotently create bookmark
 	err = zfs.ZFSBookmark(fs, *v, bmname)
 	if err != nil {
 		if err == zfs.ErrBookmarkCloningNotSupported {
 			// TODO we could actually try to find a local snapshot that has the requested GUID
 			// 		however, the replication algorithm prefers snapshots anyways, so this quest
 			// 		is most likely not going to be successful. Also, there's the possibility that
 			//      the caller might want to filter what snapshots are eligibile, and this would
 			//      complicate things even further.
 			return err // TODO go1.13 use wrapping
 		}
 		return errors.Wrap(err, "create step bookmark: zfs")
 	}
 	return nil
 }
 // idempotently release the step-hold on v if v is a snapshot
 // or idempotently destroy the step-bookmark  of v if v is a bookmark
 //
 // note that this operation leaves v itself untouched, unless v is the step-bookmark itself, in which case v is destroyed
 //
 // returns an instance of *zfs.DatasetDoesNotExist if `v` does not exist
 func ReleaseStep(ctx context.Context, fs string, v *zfs.ZFSSendArgVersion, jobID JobID) error {
 	if err := v.ValidateExists(ctx, fs); err != nil {
 		return err
 	}
 	if v.IsSnapshot() {
 		tag, err := StepHoldTag(jobID)
 		if err != nil {
 			return errors.Wrap(err, "step release tag")
 		}
 		if err := zfs.ZFSRelease(ctx, tag, v.FullPath(fs)); err != nil {
 			return errors.Wrap(err, "step release: zfs")
 		}
 		return nil
 	}
 	v.MustBeBookmark()
 	bmname, err := StepBookmarkName(fs, v.GUID, jobID)
 	if err != nil {
 		return errors.Wrap(err, "step release: determine bookmark name")
 	}
 	// idempotently destroy bookmark
 	if err := zfs.ZFSDestroyIdempotent(bmname); err != nil {
 		return errors.Wrap(err, "step release: bookmark destroy: zfs")
 	}
 	return nil
 }
 // release {step holds, step bookmarks} earlier and including `mostRecent`
 func ReleaseStepAll(ctx context.Context, fs string, mostRecent *zfs.ZFSSendArgVersion, jobID JobID) error {
 	if err := mostRecent.ValidateInMemory(fs); err != nil {
 		return err
 	}
 	tag, err := StepHoldTag(jobID)
 	if err != nil {
 		return errors.Wrap(err, "step release all: tag")
 	}
 	err = zfs.ZFSReleaseAllOlderAndIncludingGUID(ctx, fs, mostRecent.GUID, tag)
 	if err != nil {
 		return errors.Wrapf(err, "step release all: release holds older and including %q", mostRecent.FullPath(fs))
 	}
 	_, err = destroyBookmarksOlderThan(ctx, fs, mostRecent, jobID, func(shortname string) bool {
 		_, parsedId, parseErr := ParseStepBookmarkName(fs + "#" + shortname)
 		return parseErr == nil && parsedId == jobID
 	})
 	if err != nil {
 		return errors.Wrapf(err, "step release all: destroy bookmarks older than %q", mostRecent.FullPath(fs))
 	}
 	return nil
 }
 var lastReceivedHoldTagRE = regexp.MustCompile("^zrepl_last_received_J_(.+)$")
 // err != nil always means that the bookmark is not a step bookmark
 func ParseLastReceivedHoldTag(tag string) (JobID, error) {
 	match := lastReceivedHoldTagRE.FindStringSubmatch(tag)
 	if match == nil {
 		return JobID{}, errors.Errorf("parse last-received-hold tag: does not match regex %s", lastReceivedHoldTagRE.String())
 	}
 	jobId, err := MakeJobID(match[1])
 	if err != nil {
 		return JobID{}, errors.Wrap(err, "parse last-received-hold tag: invalid job id field")
 	}
 	return jobId, nil
 }
 func LastReceivedHoldTag(jobID JobID) (string, error) {
 	return lastReceivedHoldImpl(jobID.String())
 }
 func lastReceivedHoldImpl(jobid string) (string, error) {
 	tag := fmt.Sprintf("zrepl_last_received_J_%s", jobid)
 	if err := zfs.ValidHoldTag(tag); err != nil {
 		return "", err
 	}
 	return tag, nil
 }
 func MoveLastReceivedHold(ctx context.Context, fs string, to zfs.ZFSSendArgVersion, jobID JobID) error {
 	if err := to.ValidateExists(ctx, fs); err != nil {
 		return err
 	}
 	if err := zfs.EntityNamecheck(to.FullPath(fs), zfs.EntityTypeSnapshot); err != nil {
 		return err
 	}
 	tag, err := LastReceivedHoldTag(jobID)
 	if err != nil {
 		return errors.Wrap(err, "last-received-hold: hold tag")
 	}
 	// we never want to be without a hold
 	// => hold new one before releasing old hold
 	err = zfs.ZFSHold(ctx, fs, to, tag)
 	if err != nil {
 		return errors.Wrap(err, "last-received-hold: hold newly received")
 	}
 	err = zfs.ZFSReleaseAllOlderThanGUID(ctx, fs, to.GUID, tag)
 	if err != nil {
 		return errors.Wrap(err, "last-received-hold: release older holds")
 	}
 	return nil
 }
 type ListHoldsAndBookmarksOutputBookmarkV1ReplicationCursor struct {
 	FS   string
 	Name string
 }
 type ListHoldsAndBookmarksOutput struct {
 	StepBookmarks []*ListHoldsAndBookmarksOutputBookmark
 	StepHolds     []*ListHoldsAndBookmarksOutputHold
 	ReplicationCursorBookmarks []*ListHoldsAndBookmarksOutputBookmark
 	V1ReplicationCursors       []*ListHoldsAndBookmarksOutputBookmarkV1ReplicationCursor
 	LastReceivedHolds          []*ListHoldsAndBookmarksOutputHold
 }
 type ListHoldsAndBookmarksOutputBookmark struct {
 	FS, Name string
 	Guid     uint64
 	JobID    JobID
 	v        zfs.FilesystemVersion
 }
 type ListHoldsAndBookmarksOutputHold struct {
 	FS            string
 	Snap          string
 	SnapGuid      uint64
 	SnapCreateTXG uint64
 	Tag           string
 	JobID         JobID
 }
 // List all holds and bookmarks managed by endpoint
 func ListZFSHoldsAndBookmarks(ctx context.Context, fsfilter zfs.DatasetFilter) (*ListHoldsAndBookmarksOutput, error) {
 	// initialize all fields so that JSON serializion of output looks pretty (see client/holds.go)
 	// however, listZFSHoldsAndBookmarksImplFS shouldn't rely on it
 	out := &ListHoldsAndBookmarksOutput{
 		StepBookmarks:              make([]*ListHoldsAndBookmarksOutputBookmark, 0),
 		StepHolds:                  make([]*ListHoldsAndBookmarksOutputHold, 0),
 		ReplicationCursorBookmarks: make([]*ListHoldsAndBookmarksOutputBookmark, 0),
 		V1ReplicationCursors:       make([]*ListHoldsAndBookmarksOutputBookmarkV1ReplicationCursor, 0),
 		LastReceivedHolds:          make([]*ListHoldsAndBookmarksOutputHold, 0),
 	}
 	fss, err := zfs.ZFSListMapping(ctx, fsfilter)
 	if err != nil {
 		return nil, errors.Wrap(err, "list filesystems")
 	}
 	for _, fs := range fss {
 		err := listZFSHoldsAndBookmarksImplFS(ctx, out, fs)
 		if err != nil {
 			return nil, errors.Wrapf(err, "list holds and bookmarks on %q", fs.ToString())
 		}
 	}
 	return out, nil
 }
 func listZFSHoldsAndBookmarksImplFS(ctx context.Context, out *ListHoldsAndBookmarksOutput, fs *zfs.DatasetPath) error {
 	fsvs, err := zfs.ZFSListFilesystemVersions(fs, nil)
 	if err != nil {
 		return errors.Wrapf(err, "list filesystem versions of %q", fs)
 	}
 	for _, v := range fsvs {
 		switch v.Type {
 		case zfs.Bookmark:
 			listZFSHoldsAndBookmarksImplTryParseBookmark(ctx, out, fs, v)
 		case zfs.Snapshot:
 			holds, err := zfs.ZFSHolds(ctx, fs.ToString(), v.Name)
 			if err != nil {
 				return errors.Wrapf(err, "get holds of %q", v.ToAbsPath(fs))
 			}
 			for _, tag := range holds {
 				listZFSHoldsAndBookmarksImplSnapshotTryParseHold(ctx, out, fs, v, tag)
 			}
 		default:
 			continue
 		}
 	}
 	return nil
 }
 // pure function, err != nil always indicates parsing error
 func listZFSHoldsAndBookmarksImplTryParseBookmark(ctx context.Context, out *ListHoldsAndBookmarksOutput, fs *zfs.DatasetPath, v zfs.FilesystemVersion) {
 	var err error
 	if v.Type != zfs.Bookmark {
 		panic("impl error")
 	}
 	fullname := v.ToAbsPath(fs)
 	bm := &ListHoldsAndBookmarksOutputBookmark{
 		FS: fs.ToString(), Name: v.Name, v: v,
 	}
 	bm.Guid, bm.JobID, err = ParseStepBookmarkName(fullname)
 	if err == nil {
 		out.StepBookmarks = append(out.StepBookmarks, bm)
 		return
 	}
 	bm.Guid, bm.JobID, err = ParseReplicationCursorBookmarkName(fullname)
 	if err == nil {
 		out.ReplicationCursorBookmarks = append(out.ReplicationCursorBookmarks, bm)
 		return
 	} else if err == ErrV1ReplicationCursor {
 		v1rc := &ListHoldsAndBookmarksOutputBookmarkV1ReplicationCursor{
 			FS: fs.ToString(), Name: v.Name,
 		}
 		out.V1ReplicationCursors = append(out.V1ReplicationCursors, v1rc)
 		return
 	}
 }
 // pure function, err != nil always indicates parsing error
 func listZFSHoldsAndBookmarksImplSnapshotTryParseHold(ctx context.Context, out *ListHoldsAndBookmarksOutput, fs *zfs.DatasetPath, v zfs.FilesystemVersion, holdTag string) {
 	var err error
 	if v.Type != zfs.Snapshot {
 		panic("impl error")
 	}
 	hold := &ListHoldsAndBookmarksOutputHold{
 		FS:            fs.ToString(),
 		Snap:          v.Name,
 		SnapGuid:      v.Guid,
 		SnapCreateTXG: v.CreateTXG,
 		Tag:           holdTag,
 	}
 	hold.JobID, err = ParseStepHoldTag(holdTag)
 	if err == nil {
 		out.StepHolds = append(out.StepHolds, hold)
 		return
 	}
 	hold.JobID, err = ParseLastReceivedHoldTag(holdTag)
 	if err == nil {
 		out.LastReceivedHolds = append(out.LastReceivedHolds, hold)
 		return
 	}
 }
@@ -1,37 +1,87 @@
 module github.com/zrepl/zrepl
-go 1.12
+go 1.24.13
 toolchain go1.25.7
 require (
-	github.com/fatih/color v1.7.0
+	github.com/bits-and-blooms/bitset v1.24.4
-	github.com/gdamore/tcell v1.2.0
+	github.com/fatih/color v1.18.0
-	github.com/go-logfmt/logfmt v0.4.0
+	github.com/gdamore/tcell/v2 v2.13.8
-	github.com/go-sql-driver/mysql v1.4.1-0.20190907122137-b2c03bcae3d4
+	github.com/gitchander/permutation v0.0.0-20181107151852-9e56b92e9909
-	github.com/golang/protobuf v1.3.2
+	github.com/go-logfmt/logfmt v0.6.1
-	github.com/google/uuid v1.1.1
+	github.com/go-playground/validator v9.31.0+incompatible
-	github.com/jinzhu/copier v0.0.0-20170922082739-db4671f3a9b8
+	github.com/go-playground/validator/v10 v10.30.1
-	github.com/kr/pretty v0.1.0
+	github.com/go-sql-driver/mysql v1.9.3
-	github.com/lib/pq v1.2.0
+	github.com/google/uuid v1.6.0
-	github.com/mattn/go-colorable v0.1.4 // indirect
+	github.com/jinzhu/copier v0.4.0
-	github.com/mattn/go-isatty v0.0.8
+	github.com/juju/ratelimit v1.0.2
-	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // // go1.12 mod tidy adds this dependency as 'indirect', but go1.13 mod tidy removes it if the trailing comment is 'indirect' => add this comment to make the build work without changing go.mod on both go1.12 and go1.13
+	github.com/kr/pretty v0.3.1
-	github.com/modern-go/reflect2 v1.0.1 // go1.12 mod tidy adds this dependency as 'indirect', but go1.13 mod tidy removes it if the trailing comment is 'indirect' => add this comment to make the build work without changing go.mod on both go1.12 and go1.13
+	github.com/lib/pq v1.11.1
-	github.com/montanaflynn/stats v0.5.0
+	github.com/mattn/go-isatty v0.0.20
-	github.com/onsi/ginkgo v1.10.2 // indirect
+	github.com/montanaflynn/stats v0.7.1
-	github.com/onsi/gomega v1.7.0 // indirect
+	github.com/pkg/errors v0.9.1
-	github.com/pkg/errors v0.8.1
+	github.com/pkg/profile v1.7.0
-	github.com/pkg/profile v1.2.1
+	github.com/problame/go-netssh v0.0.0-20201229122201-330ad6c9cc6f
-	github.com/problame/go-netssh v0.0.0-20191209123953-18d8aa6923c7
+	github.com/prometheus/client_golang v1.23.2
-	github.com/prometheus/client_golang v1.2.1
+	github.com/robfig/cron/v3 v3.0.1
-	github.com/sergi/go-diff v1.0.1-0.20180205163309-da645544ed44 // go1.12 thinks it needs this
+	github.com/spf13/cobra v1.10.2
-	github.com/spf13/cobra v0.0.2
+	github.com/spf13/pflag v1.0.10
-	github.com/spf13/pflag v1.0.5
+	github.com/stretchr/testify v1.11.1
-	github.com/stretchr/testify v1.4.0
+	github.com/yudai/gojsondiff v1.0.0
 	github.com/yudai/gojsondiff v0.0.0-20170107030110-7b1b7adf999d
 	github.com/yudai/golcs v0.0.0-20170316035057-ecda9a501e82 // go1.12 thinks it needs this
 	github.com/zrepl/yaml-config v0.0.0-20191220194647-cbb6b0cf4bdd
-	golang.org/x/net v0.0.0-20190613194153-d28f0bde5980
+	golang.org/x/net v0.49.0
-	golang.org/x/sync v0.0.0-20190423024810-112230192c58
+	golang.org/x/sync v0.19.0
-	golang.org/x/sys v0.0.0-20191026070338-33540a1f6037
+	golang.org/x/sys v0.41.0
-	google.golang.org/grpc v1.17.0
+	golang.org/x/tools v0.41.0
 	google.golang.org/grpc v1.78.0
 	google.golang.org/protobuf v1.36.11
 )
 require (
 	filippo.io/edwards25519 v1.1.0 // indirect
 	github.com/felixge/fgprof v0.9.5 // indirect
 	github.com/gabriel-vasile/mimetype v1.4.13 // indirect
 	github.com/google/pprof v0.0.0-20260202012954-cb029daf43ef // indirect
 	github.com/hpcloud/tail v1.0.0 // indirect
 	github.com/klauspost/compress v1.18.3 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/onsi/gomega v1.34.2 // indirect
 	github.com/prometheus/common v0.67.5 // indirect
 	github.com/rogpeppe/go-internal v1.14.1 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	golang.org/x/mod v0.32.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20 // indirect
 	gopkg.in/fsnotify.v1 v1.4.7 // indirect
 	gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
 )
 require (
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/ftrvxmtrx/fd v0.0.0-20150925145434-c6d800382fff // indirect
 	github.com/gdamore/encoding v1.0.1 // indirect
 	github.com/go-playground/locales v0.14.1 // indirect
 	github.com/go-playground/universal-translator v0.18.1 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/kr/text v0.2.0 // indirect
 	github.com/leodido/go-urn v1.4.0 // indirect
 	github.com/lucasb-eyer/go-colorful v1.3.0 // indirect
 	github.com/mattn/go-colorable v0.1.14 // indirect
 	github.com/onsi/ginkgo v1.10.2 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
 	github.com/prometheus/procfs v0.19.2 // indirect
 	github.com/rivo/tview v0.42.0
 	github.com/rivo/uniseg v0.4.7 // indirect
 	github.com/sergi/go-diff v1.4.0 // indirect; go1.12 thinks it needs this
 	github.com/theckman/goconstraint v1.11.0 // indirect
 	github.com/yudai/golcs v0.0.0-20170316035057-ecda9a501e82 // indirect; go1.12 thinks it needs this
 	github.com/yudai/pp v2.0.1+incompatible // indirect
 	golang.org/x/crypto v0.47.0 // indirect
 	golang.org/x/term v0.39.0 // indirect
 	golang.org/x/text v0.33.0 // indirect
 	gopkg.in/go-playground/assert.v1 v1.2.1 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
@@ -1,372 +1,256 @@
-cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
+filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA=
-github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
+filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4=
 github.com/DATA-DOG/go-sqlmock v1.3.3 h1:CWUqKXe0s8A2z6qCgkP4Kru7wC11YoAnoupUKFDnH08=
 github.com/DATA-DOG/go-sqlmock v1.3.3/go.mod h1:f/Ixk793poVmq4qj/V1dPUg2JEAKC73Q5eFN3EC/SaM=
 github.com/OpenPeeDeeP/depguard v0.0.0-20180806142446-a69c782687b2/go.mod h1:7/4sitnI9YlQgTLLk734QlzXT8DuHVnAyztLplQjk+o=
 github.com/OpenPeeDeeP/depguard v0.0.0-20181229194401-1f388ab2d810/go.mod h1:7/4sitnI9YlQgTLLk734QlzXT8DuHVnAyztLplQjk+o=
 github.com/StackExchange/wmi v0.0.0-20180116203802-5d049714c4a6/go.mod h1:3eOhrUMpNV+6aFIbp5/iudMxNCF27Vw2OZgy4xEx0Fg=
 github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
 github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
 github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0=
 github.com/alecthomas/units v0.0.0-20190717042225-c3de453c63f4/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0=
 github.com/alvaroloes/enumer v1.1.1/go.mod h1:FxrjvuXoDAx9isTJrv4c+T410zFi0DtXIT0m65DJ+Wo=
 github.com/armon/consul-api v0.0.0-20180202201655-eb2c6b5be1b6/go.mod h1:grANhF5doyWs3UAsr3K4I6qtAmlQcZDesFNEHPZAzj8=
 github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973 h1:xJ4a3vCFaGF/jqvzLMYoU8P317H5OQ+Via4RmuPwCS0=
 github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
 github.com/beorn7/perks v1.0.0/go.mod h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
 github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
-github.com/cespare/xxhash/v2 v2.1.0 h1:yTUvW7Vhb89inJ+8irsUqiWjh8iT6sQPZiQzI6ReGkA=
+github.com/bits-and-blooms/bitset v1.24.4 h1:95H15Og1clikBrKr/DuzMXkQzECs1M6hhoGXLwLQOZE=
-github.com/cespare/xxhash/v2 v2.1.0/go.mod h1:dgIUBU3pDso/gPgZ1osOZ0iQf77oPR28Tjxl5dIMyVM=
+github.com/bits-and-blooms/bitset v1.24.4/go.mod h1:7hO7Gc7Pp1vODcmWvKMRA9BNmbv6a/7QIWpPxHddWR8=
-github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
+github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
-github.com/coreos/etcd v3.3.10+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
+github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
-github.com/coreos/go-etcd v2.0.0+incompatible/go.mod h1:Jez6KQU2B/sWsbdaef3ED8NzMklzPG4d5KIOhIy30Tk=
+github.com/chromedp/cdproto v0.0.0-20230802225258-3cf4e6d46a89/go.mod h1:GKljq0VrfU4D5yc+2qA6OVr8pmO/MBbPEWqWQ/oqGEs=
-github.com/coreos/go-semver v0.2.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk=
+github.com/chromedp/chromedp v0.9.2/go.mod h1:LkSXJKONWTCHAfQasKFUZI+mxqS4tZqhmtGzzhLsnLs=
 github.com/chromedp/sysutil v1.0.0/go.mod h1:kgWmDdq8fTzXYcKIBqIYvRRTnYb9aNS9moAV0xufSww=
 github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI=
 github.com/chzyer/logex v1.2.1/go.mod h1:JLbx6lG2kDbNRFnfkgvh4eRJRPX1QCoOIWomwysCBrQ=
 github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI=
 github.com/chzyer/readline v1.5.1/go.mod h1:Eh+b79XXUwfKfcPLepksvw2tcLE/Ct21YObkaSkeBlk=
 github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
 github.com/chzyer/test v1.0.0/go.mod h1:2JlltgoNkt4TW/z9V/IzDdFaMTM2JPIi26O1pF38GC8=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/fatih/color v1.6.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=
+github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
-github.com/fatih/color v1.7.0 h1:DkWD4oS2D8LGGgTQ6IvwJJXSL5Vp2ffcQg58nFV38Ys=
+github.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=
-github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=
+github.com/felixge/fgprof v0.9.3/go.mod h1:RdbpDgzqYVh/T9fPELJyV7EYJuHB55UTEULNun8eiPw=
-github.com/fsnotify/fsnotify v1.4.7 h1:IXs+QLmnXW2CcXuY+8Mzv/fWEsPGWxqefPtCP5CnV9I=
+github.com/felixge/fgprof v0.9.5 h1:8+vR6yu2vvSKn08urWyEuxx75NWPEvybbkBirEpsbVY=
-github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
+github.com/felixge/fgprof v0.9.5/go.mod h1:yKl+ERSa++RYOs32d8K6WEXCB4uXdLls4ZaZPpayhMM=
 github.com/ftrvxmtrx/fd v0.0.0-20150925145434-c6d800382fff h1:zk1wwii7uXmI0znwU+lqg+wFL9G5+vm5I+9rv2let60=
 github.com/ftrvxmtrx/fd v0.0.0-20150925145434-c6d800382fff/go.mod h1:yUhRXHewUVJ1k89wHKP68xfzk7kwXUx/DV1nx4EBMbw=
-github.com/gdamore/encoding v1.0.0 h1:+7OoQ1Bc6eTm5niUzBa0Ctsh6JbMW6Ra+YNuAtDBdko=
+github.com/gabriel-vasile/mimetype v1.4.13 h1:46nXokslUBsAJE/wMsp5gtO500a4F3Nkz9Ufpk2AcUM=
-github.com/gdamore/encoding v1.0.0/go.mod h1:alR0ol34c49FCSBLjhosxzcPHQbf2trDkoo5dl+VrEg=
+github.com/gabriel-vasile/mimetype v1.4.13/go.mod h1:d+9Oxyo1wTzWdyVUPMmXFvp4F9tea18J8ufA774AB3s=
-github.com/gdamore/tcell v1.2.0 h1:ikixzsxc8K8o3V2/CEmyoEW8mJZaNYQQ3NP3VIQdUe4=
+github.com/gdamore/encoding v1.0.1 h1:YzKZckdBL6jVt2Gc+5p82qhrGiqMdG/eNs6Wy0u3Uhw=
-github.com/gdamore/tcell v1.2.0/go.mod h1:Hjvr+Ofd+gLglo7RYKxxnzCBmev3BzsS67MebKS4zMM=
+github.com/gdamore/encoding v1.0.1/go.mod h1:0Z0cMFinngz9kS1QfMjCP8TY7em3bZYeeklsSDPivEo=
-github.com/go-critic/go-critic v0.3.4/go.mod h1:AHR42Lk/E/aOznsrYdMYeIQS5RH10HZHSqP+rD6AJrc=
+github.com/gdamore/tcell/v2 v2.13.8 h1:Mys/Kl5wfC/GcC5Cx4C2BIQH9dbnhnkPgS9/wF3RlfU=
-github.com/go-critic/go-critic v0.3.5-0.20190526074819-1df300866540/go.mod h1:+sE8vrLDS2M0pZkBk0wy6+nLdKexVDrl/jBqQOTDThA=
+github.com/gdamore/tcell/v2 v2.13.8/go.mod h1:+Wfe208WDdB7INEtCsNrAN6O2m+wsTPk1RAovjaILlo=
-github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
+github.com/gitchander/permutation v0.0.0-20181107151852-9e56b92e9909 h1:9NC8seTx6/zRmMTAdsHj/uOMi0EGHGQtjyLafBjk77Q=
-github.com/go-kit/kit v0.9.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
+github.com/gitchander/permutation v0.0.0-20181107151852-9e56b92e9909/go.mod h1:lP+DW8LR6Rw3ru9Vo2/y/3iiLaLWmofYql/va+7zJOk=
-github.com/go-lintpack/lintpack v0.5.1/go.mod h1:NwZuYi2nUHho8XEIZ6SIxihrnPoqBTDqfpXvXAN0sXM=
+github.com/go-logfmt/logfmt v0.6.1 h1:4hvbpePJKnIzH1B+8OR/JPbTx37NktoI9LE2QZBBkvE=
-github.com/go-lintpack/lintpack v0.5.2/go.mod h1:NwZuYi2nUHho8XEIZ6SIxihrnPoqBTDqfpXvXAN0sXM=
+github.com/go-logfmt/logfmt v0.6.1/go.mod h1:EV2pOAQoZaT1ZXZbqDl5hrymndi4SY9ED9/z6CO0XAk=
-github.com/go-logfmt/logfmt v0.3.0 h1:8HUsc87TaSWLKwrnumgC8/YconD2fJQsRJAsWaPg2ic=
+github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
-github.com/go-logfmt/logfmt v0.3.0/go.mod h1:Qt1PoO58o5twSAckw1HlFXLmHsOX5/0LbT9GBnD5lWE=
+github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
-github.com/go-logfmt/logfmt v0.4.0 h1:MP4Eh7ZCb31lleYCFuwm0oe4/YGak+5l1vA2NOE80nA=
+github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
-github.com/go-logfmt/logfmt v0.4.0/go.mod h1:3RMwSq7FuexP4Kalkev3ejPJsZTpXXBr9+V4qmtdjCk=
+github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
-github.com/go-ole/go-ole v1.2.1/go.mod h1:7FAglXiTm7HKlQRDeOQ6ZNUHidzCWXuZWq/1dTyBNF8=
+github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s=
-github.com/go-sql-driver/mysql v1.4.1-0.20190907122137-b2c03bcae3d4 h1:0suja/iKSDbEIYLbrS/8C7iArJiWpgCNcR+zwAHu7Ig=
+github.com/go-playground/assert/v2 v2.2.0/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4=
-github.com/go-sql-driver/mysql v1.4.1-0.20190907122137-b2c03bcae3d4/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
+github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA=
-github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
+github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY=
-github.com/go-toolsmith/astcast v0.0.0-20181028201508-b7a89ed70af1/go.mod h1:TEo3Ghaj7PsZawQHxT/oBvo4HK/sl1RcuUHDKTTju+o=
+github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY=
-github.com/go-toolsmith/astcast v1.0.0/go.mod h1:mt2OdQTeAQcY4DQgPSArJjHCcOwlX+Wl/kwN+LbLGQ4=
+github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
-github.com/go-toolsmith/astcopy v0.0.0-20180903214859-79b422d080c4/go.mod h1:c9CPdq2AzM8oPomdlPniEfPAC6g1s7NqZzODt8y6ib8=
+github.com/go-playground/validator v9.31.0+incompatible h1:UA72EPEogEnq76ehGdEDp4Mit+3FDh548oRqwVgNsHA=
-github.com/go-toolsmith/astcopy v1.0.0/go.mod h1:vrgyG+5Bxrnz4MZWPF+pI4R8h3qKRjjyvV/DSez4WVQ=
+github.com/go-playground/validator v9.31.0+incompatible/go.mod h1:yrEkQXlcI+PugkyDjY2bRrL/UBU4f3rvrgkN3V8JEig=
-github.com/go-toolsmith/astequal v0.0.0-20180903214952-dcb477bfacd6/go.mod h1:H+xSiq0+LtiDC11+h1G32h7Of5O3CYFJ99GVbS5lDKY=
+github.com/go-playground/validator/v10 v10.30.1 h1:f3zDSN/zOma+w6+1Wswgd9fLkdwy06ntQJp0BBvFG0w=
-github.com/go-toolsmith/astequal v1.0.0/go.mod h1:H+xSiq0+LtiDC11+h1G32h7Of5O3CYFJ99GVbS5lDKY=
+github.com/go-playground/validator/v10 v10.30.1/go.mod h1:oSuBIQzuJxL//3MelwSLD5hc2Tu889bF0Idm9Dg26cM=
-github.com/go-toolsmith/astfmt v0.0.0-20180903215011-8f8ee99c3086/go.mod h1:mP93XdblcopXwlyN4X4uodxXQhldPGZbcEJIimQHrkg=
+github.com/go-sql-driver/mysql v1.9.3 h1:U/N249h2WzJ3Ukj8SowVFjdtZKfu9vlLZxjPXV1aweo=
-github.com/go-toolsmith/astfmt v1.0.0/go.mod h1:cnWmsOAuq4jJY6Ct5YWlVLmcmLMn1JUPuQIHCY7CJDw=
+github.com/go-sql-driver/mysql v1.9.3/go.mod h1:qn46aNg1333BRMNU69Lq93t8du/dwxI64Gl8i5p1WMU=
-github.com/go-toolsmith/astinfo v0.0.0-20180906194353-9809ff7efb21/go.mod h1:dDStQCHtmZpYOmjRP/8gHHnCCch3Zz3oEgCdZVdtweU=
+github.com/gobwas/httphead v0.1.0/go.mod h1:O/RXo79gxV8G+RqlR/otEwx4Q36zl9rqC5u12GKvMCM=
-github.com/go-toolsmith/astp v0.0.0-20180903215135-0af7e3c24f30/go.mod h1:SV2ur98SGypH1UjcPpCatrV5hPazG6+IfNHbkDXBRrk=
+github.com/gobwas/pool v0.2.1/go.mod h1:q8bcK0KcYlCgd9e7WYLm9LpyS+YeLd8JVDW6WezmKEw=
-github.com/go-toolsmith/astp v1.0.0/go.mod h1:RSyrtpVlfTFGDYRbrjyWP1pYu//tSFcvdYrA8meBmLI=
+github.com/gobwas/ws v1.2.1/go.mod h1:hRKAFb8wOxFROYNsT1bqfWnhX+b5MFeJM9r2ZSwg/KY=
-github.com/go-toolsmith/pkgload v0.0.0-20181119091011-e9e65178eee8/go.mod h1:WoMrjiy4zvdS+Bg6z9jZH82QXwkcgCBX6nOfnmdaHks=
+github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=
-github.com/go-toolsmith/pkgload v1.0.0/go.mod h1:5eFArkbO80v7Z0kdngIxsRXRMTaX4Ilcwuh3clNrQJc=
+github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps=
-github.com/go-toolsmith/strparse v0.0.0-20180903215201-830b6daa1241/go.mod h1:YI2nUKP9YGZnL/L1/DLFBfixrcjslWct4wyljWhSRy8=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
-github.com/go-toolsmith/strparse v1.0.0/go.mod h1:YI2nUKP9YGZnL/L1/DLFBfixrcjslWct4wyljWhSRy8=
+github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
-github.com/go-toolsmith/typep v0.0.0-20181030061450-d63dc7650676/go.mod h1:JSQCQMUPdRlMZFswiq3TGpNp1GMktqkR2Ns5AIQkATU=
+github.com/google/pprof v0.0.0-20211214055906-6f57359322fd/go.mod h1:KgnwoLYCZ8IQu3XUZ8Nc/bM9CCZFOyjUNOSygVozoDg=
-github.com/go-toolsmith/typep v1.0.0/go.mod h1:JSQCQMUPdRlMZFswiq3TGpNp1GMktqkR2Ns5AIQkATU=
+github.com/google/pprof v0.0.0-20240227163752-401108e1b7e7/go.mod h1:czg5+yv1E0ZGTi6S6vVK1mke0fV+FaUhNGcd6VRS9Ik=
-github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8=
+github.com/google/pprof v0.0.0-20260202012954-cb029daf43ef h1:xpF9fUHpoIrrjX24DURVKiwHcFpw19ndIs+FwTSMbno=
-github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
+github.com/google/pprof v0.0.0-20260202012954-cb029daf43ef/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
-github.com/gogo/protobuf v1.2.1/go.mod h1:hp+jE20tsWTFYpLwKvXlhS1hjn+gTNwPg2I6zVXpSg4=
+github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
-github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b h1:VKtxabqXZkF25pY9ekfRL6a582T4P37/31XEstQ5p58=
+github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 github.com/golang/lint v0.0.0-20180702182130-06c8688daad7/go.mod h1:tluoj9z5200jBnyusfRPU2LqT6J+DAorxEvtC7LHB+E=
 github.com/golang/mock v1.0.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
 github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
 github.com/golang/mock v1.2.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
 github.com/golang/protobuf v1.2.0 h1:P3YflyNX/ehuJFLhxviNdFxQPkGK5cDcApsge1SqnvM=
 github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.2 h1:6nsPYzhq5kReh6QImI3k5qWzO4PEbvbIW2cwSfR/6xs=
 github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golangci/check v0.0.0-20180506172741-cfe4005ccda2/go.mod h1:k9Qvh+8juN+UKMCS/3jFtGICgW8O96FVaZsaxdzDkR4=
 github.com/golangci/dupl v0.0.0-20180902072040-3e9179ac440a/go.mod h1:ryS0uhF+x9jgbj/N71xsEqODy9BN81/GonCZiOzirOk=
 github.com/golangci/errcheck v0.0.0-20181223084120-ef45e06d44b6/go.mod h1:DbHgvLiFKX1Sh2T1w8Q/h4NAI8MHIpzCdnBUDTXU3I0=
 github.com/golangci/go-misc v0.0.0-20180628070357-927a3d87b613/go.mod h1:SyvUF2NxV+sN8upjjeVYr5W7tyxaT1JVtvhKhOn2ii8=
 github.com/golangci/go-tools v0.0.0-20190124090046-35a9f45a5db0/go.mod h1:unzUULGw35sjyOYjUt0jMTXqHlZPpPc6e+xfO4cd6mM=
 github.com/golangci/go-tools v0.0.0-20190318060251-af6baa5dc196/go.mod h1:unzUULGw35sjyOYjUt0jMTXqHlZPpPc6e+xfO4cd6mM=
 github.com/golangci/goconst v0.0.0-20180610141641-041c5f2b40f3/go.mod h1:JXrF4TWy4tXYn62/9x8Wm/K/dm06p8tCKwFRDPZG/1o=
 github.com/golangci/gocyclo v0.0.0-20180528134321-2becd97e67ee/go.mod h1:ozx7R9SIwqmqf5pRP90DhR2Oay2UIjGuKheCBCNwAYU=
 github.com/golangci/gocyclo v0.0.0-20180528144436-0a533e8fa43d/go.mod h1:ozx7R9SIwqmqf5pRP90DhR2Oay2UIjGuKheCBCNwAYU=
 github.com/golangci/gofmt v0.0.0-20181222123516-0b8337e80d98/go.mod h1:9qCChq59u/eW8im404Q2WWTrnBUQKjpNYKMbU4M7EFU=
 github.com/golangci/golangci-lint v1.17.1/go.mod h1:+5sJSl2h3aly+fpmL2meSP8CaSKua2E4Twi9LPy7b1g=
 github.com/golangci/gosec v0.0.0-20180901114220-8afd9cbb6cfb/go.mod h1:ON/c2UR0VAAv6ZEAFKhjCLplESSmRFfZcDLASbI1GWo=
 github.com/golangci/gosec v0.0.0-20190211064107-66fb7fc33547/go.mod h1:0qUabqiIQgfmlAmulqxyiGkkyF6/tOGSnY2cnPVwrzU=
 github.com/golangci/ineffassign v0.0.0-20190609212857-42439a7714cc/go.mod h1:e5tpTHCfVze+7EpLEozzMB3eafxo2KT5veNg1k6byQU=
 github.com/golangci/lint-1 v0.0.0-20181222135242-d2cdd8c08219/go.mod h1:/X8TswGSh1pIozq4ZwCfxS0WA5JGXguxk94ar/4c87Y=
 github.com/golangci/lint-1 v0.0.0-20190420132249-ee948d087217/go.mod h1:66R6K6P6VWk9I95jvqGxkqJxVWGFy9XlDwLwVz1RCFg=
 github.com/golangci/maligned v0.0.0-20180506175553-b1d89398deca/go.mod h1:tvlJhZqDe4LMs4ZHD0oMUlt9G2LWuDGoisJTBzLMV9o=
 github.com/golangci/misspell v0.0.0-20180809174111-950f5d19e770/go.mod h1:dEbvlSfYbMQDtrpRMQU675gSDLDNa8sCPPChZ7PhiVA=
 github.com/golangci/misspell v0.3.4/go.mod h1:dEbvlSfYbMQDtrpRMQU675gSDLDNa8sCPPChZ7PhiVA=
 github.com/golangci/prealloc v0.0.0-20180630174525-215b22d4de21/go.mod h1:tf5+bzsHdTM0bsB7+8mt0GUMvjCgwLpTapNZHU8AajI=
 github.com/golangci/revgrep v0.0.0-20180526074752-d9c87f5ffaf0/go.mod h1:qOQCunEYvmd/TLamH+7LlVccLvUH5kZNhbCgTHoBbp4=
 github.com/golangci/revgrep v0.0.0-20180812185044-276a5c0a1039/go.mod h1:qOQCunEYvmd/TLamH+7LlVccLvUH5kZNhbCgTHoBbp4=
 github.com/golangci/unconvert v0.0.0-20180507085042-28b1c447d1f4/go.mod h1:Izgrg8RkN3rCIMLGE9CyYmU9pY2Jer6DgANEnZ/L/cQ=
 github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
 github.com/google/go-cmp v0.3.0 h1:crn/baboCvb5fXaQ0IJ1SGTsTVrWpDsCWC8EGETZijY=
 github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/uuid v1.1.1 h1:Gkbcsh/GbpXz7lPftLA3P6TYMwjCLYm83jiFQZF/3gY=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/gostaticanalysis/analysisutil v0.0.0-20190318220348-4088753ea4d3/go.mod h1:eEOZF4jCKGi+aprrirO9e7WKB3beBRtWgqGunKl6pKE=
 github.com/hashicorp/hcl v0.0.0-20180404174102-ef8a98b0bbce/go.mod h1:oZtUIOe8dh44I2q6ScRibXws4Ajl+d+nod3AaR9vL5w=
 github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ=
 github.com/hpcloud/tail v1.0.0 h1:nfCOvKYfkgYP8hkirhJocXT2+zOD8yUNjXaWfTlyFKI=
 github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
-github.com/inconshreveable/mousetrap v1.0.0 h1:Z8tu5sraLXCXIcARxBp/8cbvlwVa7Z1NHg9XEKhtSvM=
+github.com/ianlancetaylor/demangle v0.0.0-20210905161508-09a460cdf81d/go.mod h1:aYm2/VgdVmcIU8iMfdMvDMsRAQjcfZSKFby6HOFvi/w=
 github.com/ianlancetaylor/demangle v0.0.0-20230524184225-eabc099b10ab/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
 github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8=
-github.com/jinzhu/copier v0.0.0-20170922082739-db4671f3a9b8 h1:+dKzeuiDYbD/Cfi/sEkkNrs6z4/WZ8ZIR8dAbUpjXbU=
+github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
-github.com/jinzhu/copier v0.0.0-20170922082739-db4671f3a9b8/go.mod h1:yL958EeXv8Ylng6IfnvG4oflryUi3vgA3xPs9hmII1s=
+github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
-github.com/json-iterator/go v1.1.6/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
+github.com/jinzhu/copier v0.4.0 h1:w3ciUoD19shMCRargcpm0cm91ytaBhDvuRpz1ODO/U8=
-github.com/json-iterator/go v1.1.7/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
+github.com/jinzhu/copier v0.4.0/go.mod h1:DfbEm0FYsaqBcKcFuvmOZb218JkPGtvSHsKg8S8hyyg=
-github.com/julienschmidt/httprouter v1.2.0/go.mod h1:SYymIcj16QtmaHHD7aYtjjsJG7VTCxuUUipMqKk8s4w=
+github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
-github.com/k0kubun/colorstring v0.0.0-20150214042306-9440f1994b88 h1:uC1QfSlInpQF+M0ao65imhwqKnz3Q2z/d8PWZRMQvDM=
+github.com/juju/ratelimit v1.0.2 h1:sRxmtRiajbvrcLQT7S+JbqU0ntsb9W2yhSdNN8tWfaI=
-github.com/k0kubun/colorstring v0.0.0-20150214042306-9440f1994b88/go.mod h1:3w7q1U84EfirKl04SVQ/s7nPm1ZPhiXd34z40TNz36k=
+github.com/juju/ratelimit v1.0.2/go.mod h1:qapgC/Gy+xNh9UxzV13HGGl/6UXNN+ct+vwSgWNm/qk=
-github.com/kisielk/errcheck v1.1.0/go.mod h1:EZBBE59ingxPouuu3KfxchcWSUPOHkagtvWXihfKN4Q=
+github.com/klauspost/compress v1.18.3 h1:9PJRvfbmTabkOX8moIpXPbMMbYN60bWImDDU7L+/6zw=
-github.com/kisielk/gotool v0.0.0-20161130080628-0de1eaf82fa3/go.mod h1:jxZFDH7ILpTPQTk+E2s+z4CUas9lVNjIuKR4c5/zKgM=
+github.com/klauspost/compress v1.18.3/go.mod h1:R0h/fSBs8DE4ENlcrlib3PsXS61voFxhIs2DeRhCvJ4=
 github.com/kisielk/gotool v1.0.0 h1:AV2c/EiW3KqPNT9ZKl07ehoAGi4C5/01Cfbblndcapg=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.4.0/go.mod h1:RyIbtBH6LamlWaDj8nUwkbUhJ87Yi3uG0guNDohfE1A=
 github.com/klauspost/compress v1.4.1/go.mod h1:RyIbtBH6LamlWaDj8nUwkbUhJ87Yi3uG0guNDohfE1A=
 github.com/klauspost/cpuid v0.0.0-20180405133222-e7e905edc00e/go.mod h1:Pj4uuM528wm8OyEC2QMXAi2YiTZ96dNQPGgoMS4s3ek=
 github.com/klauspost/cpuid v1.2.0/go.mod h1:Pj4uuM528wm8OyEC2QMXAi2YiTZ96dNQPGgoMS4s3ek=
 github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/konsorten/go-windows-terminal-sequences v1.0.2/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515 h1:T+h1c/A9Gawja4Y9mFVWj2vyii2bbUNDw3kt9VxK2EY=
 github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515/go.mod h1:+0opPa2QZZtGFBFZlji/RkVcI2GknAs/DXo4wKdlNEc=
 github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI=
 github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
-github.com/lib/pq v1.2.0 h1:LXpIM/LZ5xGFhOpXAQUIMM1HdyqzVYM13zNdjCEEcA0=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
-github.com/lib/pq v1.2.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
-github.com/logrusorgru/aurora v0.0.0-20181002194514-a7b3b318ed4e/go.mod h1:7rIyQOR62GCctdiQpZ/zOJlFyk6y+94wXzv6RNZgaR4=
+github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
-github.com/lucasb-eyer/go-colorful v1.0.2 h1:mCMFu6PgSozg9tDNMMK3g18oJBX7oYGrC09mS6CXfO4=
+github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
-github.com/lucasb-eyer/go-colorful v1.0.2/go.mod h1:0MS4r+7BZKSJ5mw4/S5MPN+qHFF1fYclkSPilDOKW0s=
+github.com/ledongthuc/pdf v0.0.0-20220302134840-0c2507a12d80/go.mod h1:imJHygn/1yfhB7XSJJKlFZKl/J+dCPAknuiaGOshXAs=
-github.com/magiconair/properties v1.7.6/go.mod h1:PppfXfuXeibc/6YijjN8zIbojt8czPbwD3XqdrwzmxQ=
+github.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ=
-github.com/magiconair/properties v1.8.0/go.mod h1:PppfXfuXeibc/6YijjN8zIbojt8czPbwD3XqdrwzmxQ=
+github.com/leodido/go-urn v1.4.0/go.mod h1:bvxc+MVxLKB4z00jd1z+Dvzr47oO32F/QSNjSBOlFxI=
-github.com/mattn/go-colorable v0.0.9 h1:UVL0vNpWh04HeJXV0KLcaT7r06gOH2l4OW6ddYRUIY4=
+github.com/lib/pq v1.11.1 h1:wuChtj2hfsGmmx3nf1m7xC2XpK6OtelS2shMY+bGMtI=
-github.com/mattn/go-colorable v0.0.9/go.mod h1:9vuHe8Xs5qXnSaW/c/ABM9alt+Vo+STaOChaDxuIBZU=
+github.com/lib/pq v1.11.1/go.mod h1:/p+8NSbOcwzAEI7wiMXFlgydTwcgTr3OSKMsD2BitpA=
-github.com/mattn/go-colorable v0.1.4 h1:snbPLB8fVfU9iwbbo30TPtbLRzwWu6aJS6Xh4eaaviA=
+github.com/lucasb-eyer/go-colorful v1.3.0 h1:2/yBRLdWBZKrf7gB40FoiKfAWYQ0lqNcbuQwVHXptag=
-github.com/mattn/go-colorable v0.1.4/go.mod h1:U0ppj6V5qS13XJ6of8GYAs25YV2eR4EVcfRqFIhoBtE=
+github.com/lucasb-eyer/go-colorful v1.3.0/go.mod h1:R4dSotOR9KMtayYi1e77YzuveK+i7ruzyGqttikkLy0=
-github.com/mattn/go-isatty v0.0.3 h1:ns/ykhmWi7G9O+8a448SecJU3nSMBXJfqQkl0upE1jI=
+github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
-github.com/mattn/go-isatty v0.0.3/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNxMWT7Zi4=
+github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=
-github.com/mattn/go-isatty v0.0.8 h1:HLtExJ+uU2HOZ+wI0Tt5DtUDrx8yhUqDcp7fYERX4CE=
+github.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
-github.com/mattn/go-isatty v0.0.8/go.mod h1:Iq45c/XA43vh69/j3iqttzPXn0bhXyGjM0Hdxcsrc5s=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
-github.com/mattn/go-runewidth v0.0.4 h1:2BvfKmzob6Bmd4YsL0zygOqfdFnK7GR4QL06Do4/p7Y=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
-github.com/mattn/go-runewidth v0.0.4/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU=
+github.com/montanaflynn/stats v0.7.1 h1:etflOAAHORrCC44V+aR6Ftzort912ZU+YLiSTuV8eaE=
-github.com/mattn/goveralls v0.0.2/go.mod h1:8d1ZMHsd7fW6IRPKQh46F2WRpyib5/X4FOpevwGNQEw=
+github.com/montanaflynn/stats v0.7.1/go.mod h1:etXPPgVO6n31NxCd9KQUMvCM+ve0ruNzt6R8Bnaayow=
-github.com/matttproud/golang_protobuf_extensions v1.0.0/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
+github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
-github.com/matttproud/golang_protobuf_extensions v1.0.1 h1:4hp9jkHxhMHkqkrB3Ix0jegS5sx/RkqARlsWZ6pIwiU=
+github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
 github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
 github.com/mitchellh/go-homedir v1.0.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/go-ps v0.0.0-20170309133038-4fdf99ab2936/go.mod h1:r1VsdOzOPt1ZSrGZWFoNhsAedKnEd6r9Np1+5blZCWk=
 github.com/mitchellh/mapstructure v0.0.0-20180220230111-00c29f56e238/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
 github.com/mitchellh/mapstructure v1.1.2/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
 github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/reflect2 v0.0.0-20180701023420-4b7aa43c6742/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
 github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
 github.com/montanaflynn/stats v0.5.0 h1:2EkzeTSqBB4V4bJwWrt5gIIrZmpJBcoIRGS2kWLgzmk=
 github.com/montanaflynn/stats v0.5.0/go.mod h1:wL8QJuTMNUDYhXwkmfOly8iTdp5TEcJFWZD2D7SIkUc=
 github.com/mozilla/tls-observatory v0.0.0-20180409132520-8791a200eb40/go.mod h1:SrKMQvPiws7F7iqYp8/TX+IhxCYhzr6N/1yb8cwHsGk=
 github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/nbutton23/zxcvbn-go v0.0.0-20160627004424-a22cb81b2ecd/go.mod h1:o96djdrsSGy3AWPyBgZMAGfxZNfgntdJG+11KU4QvbU=
 github.com/nbutton23/zxcvbn-go v0.0.0-20171102151520-eafdab6b0663/go.mod h1:o96djdrsSGy3AWPyBgZMAGfxZNfgntdJG+11KU4QvbU=
 github.com/onsi/ginkgo v0.0.0-20170829012221-11459a886d9c/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo v1.6.0 h1:Ix8l273rp3QzYgXSR+c8d1fTG7UPgYkOSELPhiY/YGw=
 github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo v1.10.2 h1:uqH7bpe+ERSiDa34FDOF7RikN6RzXgduUF8yarlZp94=
 github.com/onsi/ginkgo v1.10.2/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
-github.com/onsi/gomega v0.0.0-20170829124025-dcabb60a477c/go.mod h1:C1qb7wdrVGGVU+Z6iS04AVkA3Q65CEZX59MT0QO5uiA=
+github.com/onsi/gomega v1.34.2 h1:pNCwDkzrsv7MS9kpaQvVb1aVLahQXyJ/Tv5oAZMI3i8=
-github.com/onsi/gomega v1.4.2 h1:3mYCb7aPxS/RU7TI1y4rkEn1oKmPRjNJLNEXgw7MH2I=
+github.com/onsi/gomega v1.34.2/go.mod h1:v1xfxRgk0KIsG+QOdm7p8UosrOzPYRo60fd3B/1Dukc=
-github.com/onsi/gomega v1.4.2/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
+github.com/orisano/pixelmatch v0.0.0-20220722002657-fb0b55479cde/go.mod h1:nZgzbfBr3hhjoZnS66nKrHmduYNpc34ny7RK4z5/HM0=
-github.com/onsi/gomega v1.7.0 h1:XPnZz8VVBHjVsy1vzJmRwIcSwiUO+JFfrv/xGiigmME=
+github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA=
-github.com/onsi/gomega v1.7.0/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
+github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
-github.com/pascaldekloe/name v0.0.0-20180628100202-0fd16699aae1/go.mod h1:eD5JxqMiuNYyFNmyY9rkJ/slN8y59oEu4Ei7F8OoKWQ=
+github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
-github.com/pelletier/go-toml v1.1.0/go.mod h1:5z9KED0ma1S8pY6P1sdut58dfprrGBbd/94hg7ilaic=
+github.com/pkg/profile v1.7.0 h1:hnbDkaNWPCLMO9wGLdBFTIZvzDrDfBM2072E1S9gJkA=
-github.com/pelletier/go-toml v1.2.0/go.mod h1:5z9KED0ma1S8pY6P1sdut58dfprrGBbd/94hg7ilaic=
+github.com/pkg/profile v1.7.0/go.mod h1:8Uer0jas47ZQMJ7VD+OHknK4YDY07LPUC6dEvqDjvNo=
 github.com/pkg/errors v0.8.0 h1:WdK/asTD0HN+q6hsWO3/vpuAkAr+tw6aNJNDFFf0+qw=
 github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.8.1 h1:iURUrRGxPUNPdy5/HRSm+Yj6okJ6UtLINN0Q9M4+h3I=
 github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/profile v1.2.1 h1:F++O52m40owAmADcojzM+9gyjmMOY/T4oYJkgFDH8RE=
 github.com/pkg/profile v1.2.1/go.mod h1:hJw3o1OdXxsrSjjVksARp5W95eeEaEfptyVZyv6JUPA=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/problame/go-netssh v0.0.0-20190110232351-09d6bc45d284 h1:GX8YFBfSL6GlKymQZOsQllPbxVamfEYpis7oaJLXYZA=
+github.com/problame/go-netssh v0.0.0-20201229122201-330ad6c9cc6f h1:XlHuwwn1UROeb9RDS8Bjaa8xm0yIN2xtPXKxDwpKo2Y=
-github.com/problame/go-netssh v0.0.0-20190110232351-09d6bc45d284/go.mod h1:XMR9fjP5/wMyFK0Ifk9ZHDFem4Rukm+ChvoYr2nxrgw=
+github.com/problame/go-netssh v0.0.0-20201229122201-330ad6c9cc6f/go.mod h1:Ba6RaFpK1+IHWs1wLZ6sCBuXkt4iAVLeOG5GinXHusM=
-github.com/problame/go-netssh v0.0.0-20191026123024-f34099f4f6b1 h1:HH8yzlaZq/A8xdJaSj/eu32yFFySWAJMTmOQPAGwfYg=
+github.com/prometheus/client_golang v1.23.2 h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o=
-github.com/problame/go-netssh v0.0.0-20191026123024-f34099f4f6b1/go.mod h1:JRs3nyBjvOv/9YHC+Vlw9z1Jfzl5s5t0BNnTzmclj1c=
+github.com/prometheus/client_golang v1.23.2/go.mod h1:Tb1a6LWHB3/SPIzCoaDXI4I8UHKeFTEQ1YCr+0Gyqmg=
-github.com/problame/go-netssh v0.0.0-20191209123953-18d8aa6923c7 h1:Oik8tLrLhoMq4fduDRuNNOAQ+q0M0dXkjAYLUf4+mAc=
+github.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk=
-github.com/problame/go-netssh v0.0.0-20191209123953-18d8aa6923c7/go.mod h1:Ba6RaFpK1+IHWs1wLZ6sCBuXkt4iAVLeOG5GinXHusM=
+github.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE=
-github.com/prometheus/client_golang v0.0.0-20180410130117-e11c6ff8170b/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
+github.com/prometheus/common v0.67.5 h1:pIgK94WWlQt1WLwAC5j2ynLaBRDiinoAb86HZHTUGI4=
-github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
+github.com/prometheus/common v0.67.5/go.mod h1:SjE/0MzDEEAyrdr5Gqc6G+sXI67maCxzaT3A2+HqjUw=
-github.com/prometheus/client_golang v1.0.0/go.mod h1:db9x61etRT2tGnBNRi70OPL5FsnadC4Ky3P0J6CfImo=
+github.com/prometheus/procfs v0.19.2 h1:zUMhqEW66Ex7OXIiDkll3tl9a1ZdilUOd/F6ZXw4Vws=
-github.com/prometheus/client_golang v1.2.1 h1:JnMpQc6ppsNgw9QPAGF6Dod479itz7lvlsMzzNayLOI=
+github.com/prometheus/procfs v0.19.2/go.mod h1:M0aotyiemPhBCM0z5w87kL22CxfcH05ZpYlu+b4J7mw=
-github.com/prometheus/client_golang v1.2.1/go.mod h1:XMU6Z2MjaRKVu/dC1qupJI9SiNkDYzz3xecMgSW/F+U=
+github.com/rivo/tview v0.42.0 h1:b/ftp+RxtDsHSaynXTbJb+/n/BxDEi+W3UfF5jILK6c=
-github.com/prometheus/client_model v0.0.0-20171117100541-99fa1f4be8e5/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
+github.com/rivo/tview v0.42.0/go.mod h1:cSfIYfhpSGCjp3r/ECJb+GKS7cGJnqV8vfjQPwoXyfY=
-github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
+github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ=
-github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
+github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
-github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4 h1:gQz4mCbXsO+nc9n1hCxHcGA3Zx3Eo+UHZoInFGUIXNM=
+github.com/robfig/cron/v3 v3.0.1 h1:WdRxkvbJztn8LMz/QEvLN5sBU+xKpSqwwUO1Pjr4qDs=
-github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
+github.com/robfig/cron/v3 v3.0.1/go.mod h1:eQICP3HwyT7UooqI/z+Ov+PtYAWygg1TEWWzGIFLtro=
-github.com/prometheus/common v0.0.0-20180413074202-d0f7cd64bda4/go.mod h1:daVV7qP5qjZbuso7PdcryaAu0sAZbrN9i7WWcTMWvro=
+github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs=
-github.com/prometheus/common v0.4.1/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
+github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
-github.com/prometheus/common v0.7.0 h1:L+1lyG48J1zAQXA3RBX/nG/B3gjlHq0zTt2tlbJLyCY=
+github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
-github.com/prometheus/common v0.7.0/go.mod h1:DjGbpBbp5NYNiECxcL/VnbXCCaQpKd3tt26CguLLsqA=
+github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
-github.com/prometheus/procfs v0.0.0-20180408092902-8b1c2da0d56d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
+github.com/sergi/go-diff v1.4.0 h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw=
-github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
+github.com/sergi/go-diff v1.4.0/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
 github.com/prometheus/procfs v0.0.2/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA=
 github.com/prometheus/procfs v0.0.5 h1:3+auTFlqw+ZaQYJARz6ArODtkaIwtvBTx3N2NehQlL8=
 github.com/prometheus/procfs v0.0.5/go.mod h1:4A/X28fw3Fc593LaREMrKMqOKvUAntwMDaekg4FpcdQ=
 github.com/quasilyte/go-consistent v0.0.0-20190521200055-c6f3937de18c/go.mod h1:5STLWrekHfjyYwxBRVRXNOSewLJ3PWfDJd1VyTS21fI=
 github.com/rogpeppe/go-internal v1.1.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/rogpeppe/go-internal v1.2.1/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/ryanuber/go-glob v0.0.0-20170128012129-256dc444b735/go.mod h1:807d1WSdnB0XRJzKNil9Om6lcp/3a0v4qIHxIXzX/Yc=
 github.com/sergi/go-diff v1.0.0 h1:Kpca3qRNrduNnOQeazBd0ysaKrUJiIuISHxogkT9RPQ=
 github.com/sergi/go-diff v1.0.0/go.mod h1:0CfEIISq7TuYL3j771MWULgwwjU+GofnZX9QAmXWZgo=
 github.com/sergi/go-diff v1.0.1-0.20180205163309-da645544ed44 h1:tB9NOR21++IjLyVx3/PCPhWMwqGNCMQEH96A6dMZ/gc=
 github.com/sergi/go-diff v1.0.1-0.20180205163309-da645544ed44/go.mod h1:0CfEIISq7TuYL3j771MWULgwwjU+GofnZX9QAmXWZgo=
 github.com/shirou/gopsutil v0.0.0-20180427012116-c95755e4bcd7/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA=
 github.com/shirou/w32 v0.0.0-20160930032740-bb4de0191aa4/go.mod h1:qsXQc7+bwAM3Q1u/4XEfrquwF8Lw7D7y5cD8CuHnfIc=
 github.com/shurcooL/go v0.0.0-20180423040247-9e1955d9fb6e/go.mod h1:TDJrrUr11Vxrven61rcy3hJMUqaf/CLWYhHNPmT14Lk=
 github.com/shurcooL/go-goon v0.0.0-20170922171312-37c2f522c041/go.mod h1:N5mDOmsrJOB+vfqUK+7DmDyjhSLIIBnXo9lvZJj3MWQ=
 github.com/sirupsen/logrus v1.0.5/go.mod h1:pMByvHTf9Beacp5x1UXfOR9xyW/9antXMhjMPG0dEzc=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
 github.com/sirupsen/logrus v1.4.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/sourcegraph/go-diff v0.5.1/go.mod h1:j2dHj3m8aZgQO8lMTcTnBcXkRRRqi34cd2MNlA9u1mE=
 github.com/spf13/afero v1.1.0/go.mod h1:j4pytiNVoe2o6bmDsKpLACNPDBIoEAkihy7loJ1B0CQ=
 github.com/spf13/afero v1.1.2/go.mod h1:j4pytiNVoe2o6bmDsKpLACNPDBIoEAkihy7loJ1B0CQ=
 github.com/spf13/afero v1.2.2/go.mod h1:9ZxEEn6pIJ8Rxe320qSDBk6AsU0r9pR7Q4OcevTdifk=
 github.com/spf13/cast v1.2.0/go.mod h1:r2rcYCSwa1IExKTDiTfzaxqT2FNHs8hODu4LnUfgKEg=
 github.com/spf13/cast v1.3.0/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
 github.com/spf13/cobra v0.0.2 h1:NfkwRbgViGoyjBKsLI0QMDcuMnhM+SBg3T0cGfpvKDE=
 github.com/spf13/cobra v0.0.2/go.mod h1:1l0Ry5zgKvJasoi3XT1TypsSe7PqH0Sj9dhYf7v3XqQ=
-github.com/spf13/jwalterweatherman v0.0.0-20180109140146-7c0cea34c8ec/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
+github.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU=
-github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
+github.com/spf13/cobra v1.10.2/go.mod h1:7C1pvHqHw5A4vrJfjNwvOdzYu0Gml16OCs2GRiTUUS4=
 github.com/spf13/jwalterweatherman v1.1.0/go.mod h1:aNWZUN0dPAAO/Ljvb5BEdw96iTZ0EXowPYD95IqWIGo=
 github.com/spf13/pflag v1.0.1/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
 github.com/spf13/pflag v1.0.3 h1:zPAT6CGy6wXeQ7NtTnaTerfKOsV6V6F8agHXFiazDkg=
 github.com/spf13/pflag v1.0.3/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
 github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
 github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
-github.com/spf13/viper v1.0.2/go.mod h1:A8kyI5cUJhb8N+3pkfONlcEcZbueH6nhAm0Fq7SrnBM=
+github.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
-github.com/spf13/viper v1.3.2/go.mod h1:ZiWeW+zYFKm7srdB9IoDzzZXaJaI5eL9QjNiN/DMA2s=
+github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
 github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
 github.com/stretchr/testify v1.2.2 h1:bSDNvY7ZPG5RlJ8otE/7V6gMiyenm9RtJ7IUVIAoJ1w=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.4.0 h1:2E4SXV/wtOkTonXsotYi4li6zVWxYlZuYNCXe9XRJyk=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
 github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
 github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
 github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
 github.com/theckman/goconstraint v1.11.0 h1:oBUwN5wpE4dwyPhRGraEgJsFTr+JtLWiDnaJZJeeXI0=
 github.com/theckman/goconstraint v1.11.0/go.mod h1:zkCR/f2kOULTk/h1ujgyB9BlCNLaqlQ6GN2Zl4mg81g=
-github.com/timakin/bodyclose v0.0.0-20190407043127-4a873e97b2bb/go.mod h1:Qimiffbc6q9tBWlVV6x0P9sat/ao1xEkREYPPj9hphk=
+github.com/yudai/gojsondiff v1.0.0 h1:27cbfqXLVEJ1o8I6v3y9lg8Ydm53EKqHXAOMxEGlCOA=
-github.com/ugorji/go/codec v0.0.0-20181204163529-d75b2dcb6bc8/go.mod h1:VFNgLljTbGfSG7qAOspJ7OScBnGdDN/yBr0sguwnwf0=
+github.com/yudai/gojsondiff v1.0.0/go.mod h1:AY32+k2cwILAkW1fbgxQ5mUmMiZFgLIV+FBNExI05xg=
 github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc=
 github.com/valyala/fasthttp v1.2.0/go.mod h1:4vX61m6KN+xDduDNwXrhIAVZaZaZiQ1luJk8LWSxF3s=
 github.com/valyala/quicktemplate v1.1.1/go.mod h1:EH+4AkTd43SvgIbQHYu59/cJyxDoOVRUAfrukLPuGJ4=
 github.com/valyala/tcplisten v0.0.0-20161114210144-ceec8f93295a/go.mod h1:v3UYOV9WzVtRmSR+PDvWpU/qWl4Wa5LApYYX4ZtKbio=
 github.com/xordataexchange/crypt v0.0.3-0.20170626215501-b2862e3d0a77/go.mod h1:aYKd//L2LvnjZzWKhF00oedf4jCCReLcmhLdhm1A27Q=
 github.com/yudai/gojsondiff v0.0.0-20170107030110-7b1b7adf999d h1:yJIizrfO599ot2kQ6Af1enICnwBD3XoxgX3MrMwot2M=
 github.com/yudai/gojsondiff v0.0.0-20170107030110-7b1b7adf999d/go.mod h1:AY32+k2cwILAkW1fbgxQ5mUmMiZFgLIV+FBNExI05xg=
 github.com/yudai/golcs v0.0.0-20170316035057-ecda9a501e82 h1:BHyfKlQyqbsFN5p3IfnEUduWvb9is428/nNb5L3U01M=
 github.com/yudai/golcs v0.0.0-20170316035057-ecda9a501e82/go.mod h1:lgjkn3NuSvDfVJdfcVVdX+jpBxNmX4rDAzaS45IcYoM=
 github.com/yudai/pp v2.0.1+incompatible h1:Q4//iY4pNF6yPLZIigmvcl7k/bPgrcTPIFIcmawg5bI=
 github.com/yudai/pp v2.0.1+incompatible/go.mod h1:PuxR/8QJ7cyCkFp/aUDS+JY727OFEZkTdatxwunjIkc=
-github.com/zrepl/yaml-config v0.0.0-20190928121844-af7ca3f8448f h1:3MuiGfgMHCSwKUcsuI7ODbi50j+evTB7SsoOBMNC5Fk=
+github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 github.com/zrepl/yaml-config v0.0.0-20190928121844-af7ca3f8448f/go.mod h1:JmNwisZzOvW4GfpfLvhZ+gtyKLsIiA+WC+wNKJGJaFg=
 github.com/zrepl/yaml-config v0.0.0-20191220194647-cbb6b0cf4bdd h1:SSo67WLS+99QESvbW8Meibz7zCrxshP71U9dH5KOCXM=
 github.com/zrepl/yaml-config v0.0.0-20191220194647-cbb6b0cf4bdd/go.mod h1:JmNwisZzOvW4GfpfLvhZ+gtyKLsIiA+WC+wNKJGJaFg=
-github.com/zrepl/zrepl v0.2.0/go.mod h1:M3Zv2IGSO8iYpUjsZD6ayZ2LHy7zyMfzet9XatKOrZ8=
+go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
-golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
+go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
-golang.org/x/crypto v0.0.0-20181203042331-505ab145d0a9/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
+go.opentelemetry.io/otel v1.38.0 h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8=
 go.opentelemetry.io/otel v1.38.0/go.mod h1:zcmtmQ1+YmQM9wrNsTGV/q/uyusom3P8RxwExxkZhjM=
 go.opentelemetry.io/otel/metric v1.38.0 h1:Kl6lzIYGAh5M159u9NgiRkmoMKjvbsKtYRwgfrA6WpA=
 go.opentelemetry.io/otel/metric v1.38.0/go.mod h1:kB5n/QoRM8YwmUahxvI3bO34eVtQf2i4utNVLr9gEmI=
 go.opentelemetry.io/otel/sdk v1.38.0 h1:l48sr5YbNf2hpCUj/FoGhW9yDkl+Ma+LrVl8qaM5b+E=
 go.opentelemetry.io/otel/sdk v1.38.0/go.mod h1:ghmNdGlVemJI3+ZB5iDEuk4bWA3GkTpW+DOoZMYBVVg=
 go.opentelemetry.io/otel/sdk/metric v1.38.0 h1:aSH66iL0aZqo//xXzQLYozmWrXxyFkBJ6qT5wthqPoM=
 go.opentelemetry.io/otel/sdk/metric v1.38.0/go.mod h1:dg9PBnW9XdQ1Hd6ZnRz689CbtrUp0wMMs9iPcgT9EZA=
 go.opentelemetry.io/otel/trace v1.38.0 h1:Fxk5bKrDZJUH+AMyyIXGcFAPah0oRcT+LuNtJrmcNLE=
 go.opentelemetry.io/otel/trace v1.38.0/go.mod h1:j1P9ivuFsTceSWe1oY+EeW3sc+Pp42sO++GHkg4wwhs=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
 go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
 go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
-golang.org/x/crypto v0.0.0-20190313024323-a1f597ede03a/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.0.0-20190325154230-a5d413f7728c/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.47.0 h1:V6e3FRj+n4dbpw86FJ8Fv7XVOql7TEwpHapKoMJ/GO8=
-golang.org/x/lint v0.0.0-20180702182130-06c8688daad7/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
+golang.org/x/crypto v0.47.0/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
-golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
+golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
-golang.org/x/net v0.0.0-20170915142106-8351a756f30f/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/mod v0.32.0 h1:9F4d3PHLljb6x//jOyokMv3eX+YDeepZSEo3mFJy93c=
-golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/mod v0.32.0/go.mod h1:SgipZ/3h2Ci89DlEtEXWUk/HteuRin+HHhN+WbNhguU=
-golang.org/x/net v0.0.0-20180911220305-26e67e76b6c3/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20181106065722-10aee1819953/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
-golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
-golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.0.0-20190313220215-9f648a60d977/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o=
-golang.org/x/net v0.0.0-20190613194153-d28f0bde5980 h1:dfGZHvZk057jK2MCeWus/TowKpJ8y4AmooUzdBSR9GU=
+golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8=
 golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58 h1:8gQV6CLnAEikrhgkHFbMAEhagSSnXWGV915qUMm9mrU=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sys v0.0.0-20171026204733-164713f0dfce/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
-golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20181205085412-a5c9d58dba9a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190222072716-a9d3bda3a223/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190422165155-953cdadca894/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190626150813-e07cf5db2756 h1:9nuHUbU8dRnRRfj9KjWUVrJeoexdbeMjttk6Oh1rD10=
 golang.org/x/sys v0.0.0-20190626150813-e07cf5db2756/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191010194322-b09406accb47 h1:/XfQ9z7ib8eEJX2hdgFTZJ/ntt0swNk5oYBziWeTCvY=
 golang.org/x/sys v0.0.0-20191010194322-b09406accb47/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20191026070338-33540a1f6037 h1:YyJpGZS1sBuBCzLAR1VEpK193GlqGZbnPFnPV/5Rsb4=
+golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/text v0.0.0-20170915090833-1cbadb444a80/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/sys v0.0.0-20211007075335-d3039528d8ac/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/text v0.3.0 h1:g61tztE5qeGQ89tm6NTjjM9VPIm088od1l6aSorWRWg=
+golang.org/x/sys v0.0.0-20220310020820-b874c991c1a5/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k=
 golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.39.0 h1:RclSuaJf32jOqZz74CkPA9qFuVTX7vhLlpfj/IGWlqY=
 golang.org/x/term v0.39.0/go.mod h1:yxzUCTP/U+FzoxfdKmLaA0RV1WgE0VY7hXBwKtY/4ww=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
-golang.org/x/tools v0.0.0-20170915040203-e531a2a1c15f/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/tools v0.0.0-20180221164845-07fd8470d635/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
-golang.org/x/tools v0.0.0-20180828015842-6cd1fcedba52/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/tools v0.0.0-20181117154741-2ddaf7f79a09/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
-golang.org/x/tools v0.0.0-20181205014116-22934f0fdb62/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/text v0.33.0 h1:B3njUFyqtHDUI5jMn1YIr5B0IE2U0qck04r6d4KPAxE=
-golang.org/x/tools v0.0.0-20190110163146-51295c7ec13a/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/text v0.33.0/go.mod h1:LuMebE6+rBincTi9+xWTY8TztLzKHc/9C1uBCG27+q8=
-golang.org/x/tools v0.0.0-20190121143147-24cd39ecf745/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-golang.org/x/tools v0.0.0-20190213192042-740235f6c0d8/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
-golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
-golang.org/x/tools v0.0.0-20190311215038-5c2858a9cfe5/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
-golang.org/x/tools v0.0.0-20190322203728-c1a832b0ad89/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.41.0 h1:a9b8iMweWG+S0OBnlU36rzLp20z1Rp10w+IY2czHTQc=
-golang.org/x/tools v0.0.0-20190521203540-521d6ed310dd/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
+golang.org/x/tools v0.41.0/go.mod h1:XSY6eDqxVNiYgezAVqqCeihT4j1U2CCsqvH3WhQpnlg=
-golang.org/x/tools v0.0.0-20190524210228-3d17549cdc6b/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
+golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-google.golang.org/appengine v1.1.0 h1:igQkv0AAhEIvTEpD5LIpAfav2eeVO9HBTjvKHVJPRSs=
+gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=
-google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
+gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=
-google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8 h1:Nw54tB0rB7hY/N0NQvRW8DG4Yk3Q6T9cu9RcFQDu1tc=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20 h1:Jr5R2J6F6qWyzINc+4AM8t5pfUz6beZpHp678GNrMbE=
-google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20/go.mod h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ=
-google.golang.org/genproto v0.0.0-20181202183823-bd91e49a0898 h1:yvw+zsSmSM02Z5H3ZdEV7B7Ql7eFrjQTnmByJvK+3J8=
+google.golang.org/grpc v1.78.0 h1:K1XZG/yGDJnzMdd/uZHAkVqJE+xIDOcmdSFZkBUicNc=
-google.golang.org/genproto v0.0.0-20181202183823-bd91e49a0898/go.mod h1:7Ep/1NZk928CDR8SjdVbjWNpdIf6nzjE3BTgJDr2Atg=
+google.golang.org/grpc v1.78.0/go.mod h1:I47qjTo4OKbMkjA/aOOwxDIiPSBofUtQUI5EfpWvW7U=
-google.golang.org/grpc v1.16.0/go.mod h1:0JHn/cJsOMiMfNA9+DeHDlAU7KAAB5GDlYFpa9MZMio=
+google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
-google.golang.org/grpc v1.17.0 h1:TRJYBgMclJvGYn2rIMjj+h9KtMt5r1Ij7ODVRIZkwhk=
+google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 google.golang.org/grpc v1.17.0/go.mod h1:6QZJwpn2B+Zp71q/5VxRsJ6NXXVCE5NRUHRo+f3cWCs=
 gopkg.in/airbrake/gobrake.v2 v2.0.9/go.mod h1:/h5ZAUhDkGaJfjzjKLSjv6zCL6O0LLBxU4K+aSYdM/U=
 gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
-gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
 gopkg.in/fsnotify.v1 v1.4.7 h1:xOHLXZwVvI9hhs+cLKq5+I5onOuwQLhQwiu63xxlHs4=
 gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
-gopkg.in/gemnasium/logrus-airbrake-hook.v2 v2.1.2/go.mod h1:Xk6kEKp8OKb+X14hQBKWaSkCsqBpgog8nAV2xsGOxlo=
+gopkg.in/go-playground/assert.v1 v1.2.1 h1:xoYuJVE7KT85PYWrN730RguIQO0ePzVRfFMXadIrXTM=
 gopkg.in/go-playground/assert.v1 v1.2.1/go.mod h1:9RXL0bg/zibRAgZUYszZSwO/z8Y/a8bDuhia5mkpMnE=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
 gopkg.in/yaml.v2 v2.0.0-20170812160011-eb3733d160e7/go.mod h1:JAlM8MvJe8wmxCU4Bli9HhUf9+ttbYbLASfIpnQbh74=
 gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.2 h1:ZCJp+EgiOT7lHqUV2J862kp8Qj64Jo6az82+3Td9dZw=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
-honnef.co/go/tools v0.0.0-20180728063816-88497007e858/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
+gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
-mvdan.cc/interfacer v0.0.0-20180901003855-c20040233aed/go.mod h1:Xkxe497xwlCKkIaQYRfC7CSLworTXY9RMqwhhCm+8Nc=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-mvdan.cc/lint v0.0.0-20170908181259-adc824a0674b/go.mod h1:2odslEg/xrtNQqCYg2/jCoyKnw3vv5biOc3JnIcYfL4=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
-mvdan.cc/unparam v0.0.0-20190209190245-fbb59629db34/go.mod h1:H6SUd1XjIs+qQCyskXg5OFSrilMRUkD8ePJpHKDPaeY=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 mvdan.cc/unparam v0.0.0-20190310220240-1b9ccfa71afe/go.mod h1:BnhuWBAqxH3+J5bDybdxgw5ZfS+DsVd4iylsKQePN8o=
 sourcegraph.com/sqs/pbtypes v0.0.0-20180604144634-d3ebe8f20ae4/go.mod h1:ketZ/q3QxT9HOBeFhu6RdvsftgpsbFHBF5Cas6cDKZ0=
 sourcegraph.com/sqs/pbtypes v1.0.0/go.mod h1:3AciMUv4qUuRHRHhOG4TZOB+72GdPVz5k+c648qsFS4=
@@ -1,13 +1,16 @@
 package cli
 import (
 	"context"
 	"fmt"
 	"os"
 	"github.com/spf13/cobra"
 	"github.com/spf13/pflag"
-	"github.com/zrepl/zrepl/config"
+	"github.com/zrepl/zrepl/internal/daemon/logging/trace"
 	"github.com/zrepl/zrepl/internal/config"
 )
 var rootArgs struct {
@@ -19,9 +22,38 @@ var rootCmd = &cobra.Command{
 	Short: "One-stop ZFS replication solution",
 }
-var bashcompCmd = &cobra.Command{
+func init() {
-	Use:   "bashcomp path/to/out/file",
+	rootCmd.PersistentFlags().StringVar(&rootArgs.configPath, "config", "", "config file path")
-	Short: "generate bash completions",
+}
 var genCompletionCmd = &cobra.Command{
 	Use:   "gencompletion",
 	Short: "generate shell auto-completions",
 }
 type completionCmdInfo struct {
 	genFunc func(outpath string) error
 	help    string
 }
 var completionCmdMap = map[string]completionCmdInfo{
 	"zsh": {
 		rootCmd.GenZshCompletionFile,
 		"  save to file `_zrepl` in your zsh's $fpath",
 	},
 	"bash": {
 		rootCmd.GenBashCompletionFile,
 		"  save to a path and source that path in your .bashrc",
 	},
 }
 func init() {
 	for sh, info := range completionCmdMap {
 		sh, info := sh, info
 		genCompletionCmd.AddCommand(&cobra.Command{
 			Use:     fmt.Sprintf("%s path/to/out/file", sh),
 			Short:   fmt.Sprintf("generate %s completions", sh),
 			Example: info.help,
 			Run: func(cmd *cobra.Command, args []string) {
 				if len(args) != 1 {
 					fmt.Fprintf(os.Stderr, "specify exactly one positional agument\n")
@@ -31,17 +63,14 @@ var bashcompCmd = &cobra.Command{
 					}
 					os.Exit(1)
 				}
-		if err := rootCmd.GenBashCompletionFile(args[0]); err != nil {
+				if err := info.genFunc(args[0]); err != nil {
-			fmt.Fprintf(os.Stderr, "error generating bash completion: %s", err)
+					fmt.Fprintf(os.Stderr, "error generating %s completion: %s", sh, err)
 					os.Exit(1)
 				}
 			},
-	Hidden: true,
+		})
 	}
-
+	rootCmd.AddCommand(genCompletionCmd)
 func init() {
 	rootCmd.PersistentFlags().StringVar(&rootArgs.configPath, "config", "", "config file path")
 	rootCmd.AddCommand(bashcompCmd)
 }
 type Subcommand struct {
@@ -49,7 +78,7 @@ type Subcommand struct {
 	Short            string
 	Example          string
 	NoRequireConfig  bool
-	Run              func(subcommand *Subcommand, args []string) error
+	Run              func(ctx context.Context, subcommand *Subcommand, args []string) error
 	SetupFlags       func(f *pflag.FlagSet)
 	SetupSubcommands func() []*Subcommand
@@ -70,7 +99,11 @@ func (s *Subcommand) Config() *config.Config {
 func (s *Subcommand) run(cmd *cobra.Command, args []string) {
 	s.tryParseConfig()
-	err := s.Run(s, args)
+	ctx := context.Background()
 	endTask := trace.WithTaskFromStackUpdateCtx(&ctx)
 	defer endTask()
 	err := s.Run(ctx, s, args)
 	endTask()
 	if err != nil {
 		fmt.Fprintf(os.Stderr, "%s\n", err)
 		os.Exit(1)
@@ -1,6 +1,7 @@
 package client
 import (
 	"context"
 	"encoding/json"
 	"fmt"
 	"os"
@@ -10,16 +11,17 @@ import (
 	"github.com/spf13/pflag"
 	"github.com/zrepl/yaml-config"
-	"github.com/zrepl/zrepl/cli"
+	"github.com/zrepl/zrepl/internal/cli"
-	"github.com/zrepl/zrepl/config"
+	"github.com/zrepl/zrepl/internal/config"
-	"github.com/zrepl/zrepl/daemon/job"
+	"github.com/zrepl/zrepl/internal/daemon/job"
-	"github.com/zrepl/zrepl/daemon/logging"
+	"github.com/zrepl/zrepl/internal/daemon/logging"
-	"github.com/zrepl/zrepl/logger"
+	"github.com/zrepl/zrepl/internal/logger"
 )
 var configcheckArgs struct {
 	format        string
 	what          string
 	skipCertCheck bool
 }
 var ConfigcheckCmd = &cli.Subcommand{
@@ -28,8 +30,9 @@ var ConfigcheckCmd = &cli.Subcommand{
 	SetupFlags: func(f *pflag.FlagSet) {
 		f.StringVar(&configcheckArgs.format, "format", "", "dump parsed config object [pretty|yaml|json]")
 		f.StringVar(&configcheckArgs.what, "what", "all", "what to print [all|config|jobs|logging]")
 		f.BoolVar(&configcheckArgs.skipCertCheck, "skip-cert-check", false, "skip checking cert files")
 	},
-	Run: func(subcommand *cli.Subcommand, args []string) error {
+	Run: func(ctx context.Context, subcommand *cli.Subcommand, args []string) error {
 		formatMap := map[string]func(interface{}){
 			"": func(i interface{}) {},
 			"pretty": func(i interface{}) {
@@ -55,8 +58,16 @@ var ConfigcheckCmd = &cli.Subcommand{
 		}
 		var hadErr bool
 		parseFlags := config.ParseFlagsNone
 		if configcheckArgs.skipCertCheck {
 			parseFlags |= config.ParseFlagsNoCertCheck
 		}
 		// further: try to build jobs
-		confJobs, err := job.JobsFromConfig(subcommand.Config())
+		confJobs, err := job.JobsFromConfig(subcommand.Config(), parseFlags)
 		if err != nil {
 			err := errors.Wrap(err, "cannot build jobs from config")
 			if configcheckArgs.what == "jobs" {
@@ -9,12 +9,12 @@ import (
 	"github.com/pkg/errors"
 	"github.com/spf13/pflag"
-	"github.com/zrepl/zrepl/daemon/job"
+	"github.com/zrepl/zrepl/internal/daemon/job"
-	"github.com/zrepl/zrepl/endpoint"
+	"github.com/zrepl/zrepl/internal/endpoint"
-	"github.com/zrepl/zrepl/zfs"
+	"github.com/zrepl/zrepl/internal/zfs"
-	"github.com/zrepl/zrepl/cli"
+	"github.com/zrepl/zrepl/internal/cli"
-	"github.com/zrepl/zrepl/config"
+	"github.com/zrepl/zrepl/internal/config"
 )
 var (
@@ -48,14 +48,13 @@ var migratePlaceholder0_1Args struct {
 	dryRun bool
 }
-func doMigratePlaceholder0_1(sc *cli.Subcommand, args []string) error {
+func doMigratePlaceholder0_1(ctx context.Context, sc *cli.Subcommand, args []string) error {
 	if len(args) != 0 {
 		return fmt.Errorf("migration does not take arguments, got %v", args)
 	}
 	cfg := sc.Config()
 	ctx := context.Background()
 	allFSS, err := zfs.ZFSListMapping(ctx, zfs.NoFilter())
 	if err != nil {
 		return errors.Wrap(err, "cannot list filesystems")
@@ -99,7 +98,7 @@ func doMigratePlaceholder0_1(sc *cli.Subcommand, args []string) error {
 		}
 		for _, fs := range wi.fss {
 			fmt.Printf("\t%q ... ", fs.ToString())
-			r, err := zfs.ZFSMigrateHashBasedPlaceholderToCurrent(fs, migratePlaceholder0_1Args.dryRun)
+			r, err := zfs.ZFSMigrateHashBasedPlaceholderToCurrent(ctx, fs, migratePlaceholder0_1Args.dryRun)
 			if err != nil {
 				fmt.Printf("error: %s\n", err)
 			} else if !r.NeedsModification {
@@ -124,21 +123,19 @@ var fail = color.New(color.FgRed)
 var migrateReplicationCursorSkipSentinel = fmt.Errorf("skipping this filesystem")
-func doMigrateReplicationCursor(sc *cli.Subcommand, args []string) error {
+func doMigrateReplicationCursor(ctx context.Context, sc *cli.Subcommand, args []string) error {
 	if len(args) != 0 {
 		return fmt.Errorf("migration does not take arguments, got %v", args)
 	}
 	cfg := sc.Config()
-	jobs, err := job.JobsFromConfig(cfg)
+	jobs, err := job.JobsFromConfig(cfg, config.ParseFlagsNone)
 	if err != nil {
 		fmt.Printf("cannot parse config:\n%s\n\n", err)
 		fmt.Printf("NOTE: this migration was released together with a change in job name requirements.\n")
 		return fmt.Errorf("exiting migration after error")
 	}
 	ctx := context.Background()
 	v1cursorJobs := make([]job.Job, 0, len(cfg.Jobs))
 	for i, j := range cfg.Jobs {
 		if jobs[i].Name() != j.Name() {
@@ -165,7 +162,7 @@ func doMigrateReplicationCursor(sc *cli.Subcommand, args []string) error {
 	var hadError bool
 	for _, fs := range fss {
-		bold.Printf("INSPECT FILESYTEM %q\n", fs.ToString())
+		bold.Printf("INSPECT FILESYSTEM %q\n", fs.ToString())
 		err := doMigrateReplicationCursorFS(ctx, v1cursorJobs, fs)
 		if err == migrateReplicationCursorSkipSentinel {
@@ -211,17 +208,15 @@ func doMigrateReplicationCursorFS(ctx context.Context, v1CursorJobs []job.Job, f
 	}
 	fmt.Printf("identified owning job %q\n", owningJob.Name())
-	versions, err := zfs.ZFSListFilesystemVersions(fs, nil)
+	bookmarks, err := zfs.ZFSListFilesystemVersions(ctx, fs, zfs.ListFilesystemVersionsOptions{
 		Types: zfs.Bookmarks,
 	})
 	if err != nil {
 		return errors.Wrapf(err, "list filesystem versions of %q", fs.ToString())
 	}
 	var oldCursor *zfs.FilesystemVersion
-	for i, fsv := range versions {
+	for i, fsv := range bookmarks {
 		if fsv.Type != zfs.Bookmark {
 			continue
 		}
 		_, _, err := endpoint.ParseReplicationCursorBookmarkName(fsv.ToAbsPath(fs))
 		if err != endpoint.ErrV1ReplicationCursor {
 			continue
@@ -232,7 +227,7 @@ func doMigrateReplicationCursorFS(ctx context.Context, v1CursorJobs []job.Job, f
 			return errors.Wrap(err, "multiple filesystem versions identified as v1 replication cursors")
 		}
-		oldCursor = &versions[i]
+		oldCursor = &bookmarks[i]
 	}
@@ -264,7 +259,7 @@ func doMigrateReplicationCursorFS(ctx context.Context, v1CursorJobs []job.Job, f
 	if migrateReplicationCursorArgs.dryRun {
 		succ.Printf("DRY RUN\n")
 	} else {
-		if err := zfs.ZFSDestroyFilesystemVersion(fs, oldCursor); err != nil {
+		if err := zfs.ZFSDestroyFilesystemVersion(ctx, fs, oldCursor); err != nil {
 			return err
 		}
 	}
@@ -0,0 +1,10 @@
 package client
 import "github.com/zrepl/zrepl/internal/cli"
 var PprofCmd = &cli.Subcommand{
 	Use: "pprof",
 	SetupSubcommands: func() []*cli.Subcommand {
 		return []*cli.Subcommand{PprofListenCmd, pprofActivityTraceCmd}
 	},
 }
@@ -0,0 +1,44 @@
 package client
 import (
 	"context"
 	"io"
 	"log"
 	"os"
 	"golang.org/x/net/websocket"
 	"github.com/zrepl/zrepl/internal/cli"
 )
 var pprofActivityTraceCmd = &cli.Subcommand{
 	Use:   "activity-trace ZREPL_PPROF_HOST:ZREPL_PPROF_PORT",
 	Short: "attach to zrepl daemon with activated pprof listener and dump an activity-trace to stdout",
 	Run:   runPProfActivityTrace,
 }
 func runPProfActivityTrace(ctx context.Context, subcommand *cli.Subcommand, args []string) error {
 	log := log.New(os.Stderr, "", 0)
 	die := func() {
 		log.Printf("exiting after error")
 		os.Exit(1)
 	}
 	if len(args) != 1 {
 		log.Printf("exactly one positional argument is required")
 		die()
 	}
 	url := "ws://" + args[0] + "/debug/zrepl/activity-trace" // FIXME dont' repeat that
 	log.Printf("attaching to activity trace stream %s", url)
 	ws, err := websocket.Dial(url, "", url)
 	if err != nil {
 		log.Printf("error: %s", err)
 		die()
 	}
 	_, err = io.Copy(os.Stdout, ws)
 	return err
 }
@@ -1,38 +1,39 @@
 package client
 import (
 	"context"
 	"errors"
 	"log"
 	"os"
-	"github.com/zrepl/zrepl/cli"
+	"github.com/zrepl/zrepl/internal/cli"
-	"github.com/zrepl/zrepl/config"
+	"github.com/zrepl/zrepl/internal/config"
-	"github.com/zrepl/zrepl/daemon"
+	"github.com/zrepl/zrepl/internal/daemon"
 )
-var pprofArgs struct {
+var pprofListenCmd struct {
 	daemon.PprofServerControlMsg
 }
-var PprofCmd = &cli.Subcommand{
+var PprofListenCmd = &cli.Subcommand{
-	Use:   "pprof off | [on TCP_LISTEN_ADDRESS]",
+	Use:   "listen off | [on TCP_LISTEN_ADDRESS]",
 	Short: "start a http server exposing go-tool-compatible profiling endpoints at TCP_LISTEN_ADDRESS",
-	Run: func(subcommand *cli.Subcommand, args []string) error {
+	Run: func(ctx context.Context, subcommand *cli.Subcommand, args []string) error {
 		if len(args) < 1 {
 			goto enargs
 		}
 		switch args[0] {
 		case "on":
-			pprofArgs.Run = true
+			pprofListenCmd.Run = true
 			if len(args) != 2 {
 				return errors.New("must specify TCP_LISTEN_ADDRESS as second positional argument")
 			}
-			pprofArgs.HttpListenAddress = args[1]
+			pprofListenCmd.HttpListenAddress = args[1]
 		case "off":
 			if len(args) != 1 {
 				goto enargs
 			}
-			pprofArgs.Run = false
+			pprofListenCmd.Run = false
 		}
 		RunPProf(subcommand.Config())
@@ -58,7 +59,7 @@ func RunPProf(conf *config.Config) {
 		log.Printf("error creating http client: %s", err)
 		die()
 	}
-	err = jsonRequestResponse(httpc, daemon.ControlJobEndpointPProf, pprofArgs.PprofServerControlMsg, struct{}{})
+	err = jsonRequestResponse(httpc, daemon.ControlJobEndpointPProf, pprofListenCmd.PprofServerControlMsg, struct{}{})
 	if err != nil {
 		log.Printf("error sending control message: %s", err)
 		die()
@@ -1,17 +1,19 @@
 package client
 import (
 	"context"
 	"github.com/pkg/errors"
-	"github.com/zrepl/zrepl/cli"
+	"github.com/zrepl/zrepl/internal/cli"
-	"github.com/zrepl/zrepl/config"
+	"github.com/zrepl/zrepl/internal/config"
-	"github.com/zrepl/zrepl/daemon"
+	"github.com/zrepl/zrepl/internal/daemon"
 )
 var SignalCmd = &cli.Subcommand{
 	Use:   "signal [wakeup|reset] JOB",
 	Short: "wake up a job from wait state or abort its current invocation",
-	Run: func(subcommand *cli.Subcommand, args []string) error {
+	Run: func(ctx context.Context, subcommand *cli.Subcommand, args []string) error {
 		return runSignalCmd(subcommand.Config(), args)
 	},
 }
@@ -0,0 +1,111 @@
 package client
 import (
 	"bytes"
 	"context"
 	"encoding/json"
 	"io"
 	"net"
 	"net/http"
 	"github.com/pkg/errors"
 	"github.com/zrepl/zrepl/internal/daemon"
 )
 type Client struct {
 	h *http.Client
 }
 func New(network, addr string) (*Client, error) {
 	httpc, err := makeControlHttpClient(func(_ context.Context) (net.Conn, error) { return net.Dial(network, addr) })
 	if err != nil {
 		return nil, err
 	}
 	return &Client{httpc}, nil
 }
 func (c *Client) Status() (s daemon.Status, _ error) {
 	err := jsonRequestResponse(c.h, daemon.ControlJobEndpointStatus,
 		struct{}{},
 		&s,
 	)
 	return s, err
 }
 func (c *Client) StatusRaw() ([]byte, error) {
 	var r json.RawMessage
 	err := jsonRequestResponse(c.h, daemon.ControlJobEndpointStatus, struct{}{}, &r)
 	if err != nil {
 		return nil, err
 	}
 	return r, nil
 }
 func (c *Client) signal(job, sig string) error {
 	return jsonRequestResponse(c.h, daemon.ControlJobEndpointSignal,
 		struct {
 			Name string
 			Op   string
 		}{
 			Name: job,
 			Op:   sig,
 		},
 		struct{}{},
 	)
 }
 func (c *Client) SignalWakeup(job string) error {
 	return c.signal(job, "wakeup")
 }
 func (c *Client) SignalReset(job string) error {
 	return c.signal(job, "reset")
 }
 func makeControlHttpClient(dialfunc func(context.Context) (net.Conn, error)) (client *http.Client, err error) {
 	return &http.Client{
 		Transport: &http.Transport{
 			DialContext: func(ctx context.Context, _, _ string) (net.Conn, error) {
 				return dialfunc(ctx)
 			},
 		},
 	}, nil
 }
 func jsonRequestResponse(c *http.Client, endpoint string, req interface{}, res interface{}) error {
 	var buf bytes.Buffer
 	encodeErr := json.NewEncoder(&buf).Encode(req)
 	if encodeErr != nil {
 		return encodeErr
 	}
 	hreq, err := http.NewRequest("POST", "http://unix"+endpoint, &buf)
 	if err != nil {
 		return err
 	}
 	hreq.Header.Set("Content-Type", "application/json")
 	// Prevent EOF errors when client request frequency and server keepalive close are at the same time.
 	// Found this by watching http.Server.ConnState changes, then found
 	// https://stackoverflow.com/questions/17714494/golang-http-request-results-in-eof-errors-when-making-multiple-requests-successi
 	// Note: The issue seems even more prounounced with local TCP sockets than unix domain sockets. So, I used that for debugging.
 	hreq.Close = true
 	resp, err := c.Do(hreq)
 	if err != nil {
 		return err
 	}
 	defer resp.Body.Close()
 	if resp.StatusCode != http.StatusOK {
 		var msg bytes.Buffer
 		_, _ = io.CopyN(&msg, resp.Body, 4096) // ignore error, just display what we got
 		return errors.Errorf("%s", msg.String())
 	}
 	decodeError := json.NewDecoder(resp.Body).Decode(&res)
 	if decodeError != nil {
 		return decodeError
 	}
 	return nil
 }
@@ -0,0 +1,97 @@
 package status
 import (
 	"context"
 	"os"
 	"time"
 	"github.com/mattn/go-isatty"
 	"github.com/pkg/errors"
 	"github.com/spf13/pflag"
 	"github.com/zrepl/zrepl/internal/cli"
 	"github.com/zrepl/zrepl/internal/client/status/client"
 	"github.com/zrepl/zrepl/internal/config"
 	"github.com/zrepl/zrepl/internal/daemon"
 	"github.com/zrepl/zrepl/internal/util/choices"
 )
 type Client interface {
 	Status() (daemon.Status, error)
 	StatusRaw() ([]byte, error)
 	SignalWakeup(job string) error
 	SignalReset(job string) error
 }
 type statusFlags struct {
 	Mode  choices.Choices
 	Job   string
 	Delay time.Duration
 }
 var statusv2Flags statusFlags
 type statusv2Mode int
 const (
 	StatusV2ModeInteractive statusv2Mode = 1 + iota
 	StatusV2ModeDump
 	StatusV2ModeRaw
 	StatusV2ModeLegacy
 )
 var Subcommand = &cli.Subcommand{
 	Use:   "status",
 	Short: "retrieve & display daemon status information",
 	SetupFlags: func(f *pflag.FlagSet) {
 		statusv2Flags.Mode.Init(
 			"interactive", StatusV2ModeInteractive,
 			"dump", StatusV2ModeDump,
 			"raw", StatusV2ModeRaw,
 			"legacy", StatusV2ModeLegacy,
 		)
 		statusv2Flags.Mode.SetTypeString("mode")
 		statusv2Flags.Mode.SetDefaultValue(StatusV2ModeInteractive)
 		f.Var(&statusv2Flags.Mode, "mode", statusv2Flags.Mode.Usage())
 		f.StringVar(&statusv2Flags.Job, "job", "", "only show specified job (works in \"dump\" and \"interactive\" mode)")
 		f.DurationVarP(&statusv2Flags.Delay, "delay", "d", 1*time.Second, "use -d 3s for 3 seconds delay (minimum delay is 1s)")
 	},
 	Run: func(ctx context.Context, subcommand *cli.Subcommand, args []string) error {
 		return runStatusV2Command(ctx, subcommand.Config(), args)
 	},
 }
 func runStatusV2Command(ctx context.Context, config *config.Config, args []string) error {
 	c, err := client.New("unix", config.Global.Control.SockPath)
 	if err != nil {
 		return errors.Wrapf(err, "connect to daemon socket at %q", config.Global.Control.SockPath)
 	}
 	mode := statusv2Flags.Mode.Value().(statusv2Mode)
 	if !isatty.IsTerminal(os.Stdout.Fd()) && mode != StatusV2ModeDump && mode != StatusV2ModeRaw {
 		dumpmode, err := statusv2Flags.Mode.InputForChoice(StatusV2ModeDump)
 		if err != nil {
 			panic(err)
 		}
 		rawmode, err := statusv2Flags.Mode.InputForChoice(StatusV2ModeRaw)
 		if err != nil {
 			panic(err)
 		}
 		return errors.Errorf("error: stdout is not a tty, please use --mode %s or --mode %s", dumpmode, rawmode)
 	}
 	switch mode {
 	case StatusV2ModeInteractive:
 		return interactive(c, statusv2Flags)
 	case StatusV2ModeDump:
 		return dump(c, statusv2Flags.Job)
 	case StatusV2ModeRaw:
 		return raw(c)
 	case StatusV2ModeLegacy:
 		return legacy(c, statusv2Flags)
 	default:
 		panic("unreachable")
 	}
 }
@@ -0,0 +1,70 @@
 package status
 import (
 	"fmt"
 	"os"
 	"strings"
 	"github.com/gdamore/tcell/v2"
 	"github.com/mattn/go-isatty"
 	"github.com/pkg/errors"
 	"github.com/zrepl/zrepl/internal/client/status/viewmodel"
 )
 func dump(c Client, job string) error {
 	s, err := c.Status()
 	if err != nil {
 		return err
 	}
 	if job != "" {
 		if _, ok := s.Jobs[job]; !ok {
 			return errors.Errorf("job %q not found", job)
 		}
 	}
 	width := (1 << 31) - 1
 	wrap := false
 	hline := strings.Repeat("-", 80)
 	if isatty.IsTerminal(os.Stdout.Fd()) {
 		wrap = true
 		screen, err := tcell.NewScreen()
 		if err != nil {
 			return errors.Wrap(err, "get terminal dimensions")
 		}
 		if err := screen.Init(); err != nil {
 			return errors.Wrap(err, "init screen")
 		}
 		width, _ = screen.Size()
 		screen.Fini()
 		hline = strings.Repeat("-", width)
 	}
 	m := viewmodel.New()
 	params := viewmodel.Params{
 		Report:                  s.Jobs,
 		ReportFetchError:        nil,
 		SelectedJob:             nil,
 		FSFilter:                func(s string) bool { return true },
 		DetailViewWidth:         width,
 		DetailViewWrap:          wrap,
 		ShortKeybindingOverview: "",
 	}
 	m.Update(params)
 	for _, j := range m.Jobs() {
 		if job != "" && j.Name() != job {
 			continue
 		}
 		params.SelectedJob = j
 		m.Update(params)
 		fmt.Println(m.SelectedJob().FullDescription())
 		if job != "" {
 			return nil
 		} else {
 			fmt.Println(hline)
 		}
 	}
 	return nil
 }
@@ -0,0 +1,344 @@
 package status
 import (
 	"fmt"
 	"regexp"
 	"strings"
 	"sync"
 	"time"
 	"github.com/gdamore/tcell/v2"
 	"github.com/rivo/tview"
 	"github.com/zrepl/zrepl/internal/client/status/viewmodel"
 )
 func interactive(c Client, flag statusFlags) error {
 	// Set this so we don't overwrite the default terminal colors
 	// See https://github.com/rivo/tview/blob/master/styles.go
 	tview.Styles.PrimitiveBackgroundColor = tcell.ColorDefault
 	tview.Styles.ContrastBackgroundColor = tcell.ColorDefault
 	tview.Styles.PrimaryTextColor = tcell.ColorDefault
 	tview.Styles.BorderColor = tcell.ColorDefault
 	app := tview.NewApplication()
 	jobDetailSplit := tview.NewFlex()
 	jobMenu := tview.NewTreeView()
 	jobMenuRoot := tview.NewTreeNode("jobs")
 	jobMenuRoot.SetSelectable(true)
 	jobMenu.SetRoot(jobMenuRoot)
 	jobMenu.SetCurrentNode(jobMenuRoot)
 	jobTextDetail := tview.NewTextView()
 	jobTextDetail.SetWrap(false)
 	jobMenu.SetBorder(true)
 	jobTextDetail.SetBorder(true)
 	toolbarSplit := tview.NewFlex()
 	toolbarSplit.SetDirection(tview.FlexRow)
 	inputBarContainer := tview.NewFlex()
 	fsFilterInput := tview.NewInputField()
 	fsFilterInput.SetBorder(false)
 	fsFilterInput.SetFieldBackgroundColor(tcell.ColorDefault)
 	inputBarLabel := tview.NewTextView()
 	inputBarLabel.SetText("[::b]FILTER ")
 	inputBarLabel.SetDynamicColors(true)
 	inputBarContainer.AddItem(inputBarLabel, 7, 1, false)
 	inputBarContainer.AddItem(fsFilterInput, 0, 10, false)
 	toolbarSplit.AddItem(inputBarContainer, 1, 0, false)
 	toolbarSplit.AddItem(jobDetailSplit, 0, 10, false)
 	bottombar := tview.NewFlex()
 	bottombar.SetDirection(tview.FlexColumn)
 	bottombarDateView := tview.NewTextView()
 	bottombar.AddItem(bottombarDateView, len(time.Now().String()), 0, false)
 	bottomBarStatus := tview.NewTextView()
 	bottomBarStatus.SetDynamicColors(true)
 	bottomBarStatus.SetTextAlign(tview.AlignRight)
 	bottombar.AddItem(bottomBarStatus, 0, 10, false)
 	toolbarSplit.AddItem(bottombar, 1, 0, false)
 	tabbableWithJobMenu := []tview.Primitive{jobMenu, jobTextDetail, fsFilterInput}
 	tabbableWithoutJobMenu := []tview.Primitive{jobTextDetail, fsFilterInput}
 	var tabbable []tview.Primitive
 	tabbableActiveIndex := 0
 	tabbableRedraw := func() {
 		if len(tabbable) == 0 {
 			app.SetFocus(nil)
 			return
 		}
 		if tabbableActiveIndex >= len(tabbable) {
 			app.SetFocus(tabbable[0])
 			return
 		}
 		app.SetFocus(tabbable[tabbableActiveIndex])
 	}
 	tabbableCycle := func() {
 		if len(tabbable) == 0 {
 			return
 		}
 		tabbableActiveIndex = (tabbableActiveIndex + 1) % len(tabbable)
 		app.SetFocus(tabbable[tabbableActiveIndex])
 		tabbableRedraw()
 	}
 	jobMenuVisisble := false
 	reconfigureJobDetailSplit := func(setJobMenuVisible bool) {
 		if jobMenuVisisble == setJobMenuVisible {
 			return
 		}
 		jobMenuVisisble = setJobMenuVisible
 		if setJobMenuVisible {
 			jobDetailSplit.RemoveItem(jobTextDetail)
 			jobDetailSplit.AddItem(jobMenu, 0, 1, true)
 			jobDetailSplit.AddItem(jobTextDetail, 0, 5, false)
 			tabbable = tabbableWithJobMenu
 		} else {
 			jobDetailSplit.RemoveItem(jobMenu)
 			tabbable = tabbableWithoutJobMenu
 		}
 		tabbableRedraw()
 	}
 	showModal := func(m *tview.Modal, modalDoneFunc func(idx int, label string)) {
 		preModalFocus := app.GetFocus()
 		m.SetDoneFunc(func(idx int, label string) {
 			if modalDoneFunc != nil {
 				modalDoneFunc(idx, label)
 			}
 			app.SetRoot(toolbarSplit, true)
 			app.SetFocus(preModalFocus)
 		})
 		app.SetRoot(m, true)
 	}
 	app.SetRoot(toolbarSplit, true)
 	// initial focus
 	tabbableActiveIndex = len(tabbable)
 	tabbableCycle()
 	reconfigureJobDetailSplit(true)
 	m := viewmodel.New()
 	params := &viewmodel.Params{
 		Report:                  nil,
 		SelectedJob:             nil,
 		FSFilter:                func(_ string) bool { return true },
 		DetailViewWidth:         100,
 		DetailViewWrap:          false,
 		ShortKeybindingOverview: "[::b]Q[::-] quit  [::b]<TAB>[::-] switch panes [::b]W[::-] wrap lines  [::b]Shift+M[::-] toggle navbar  [::b]Shift+S[::-] signal job [::b]</>[::-] filter filesystems",
 	}
 	paramsMtx := &sync.Mutex{}
 	var redraw func()
 	viewmodelupdate := func(cb func(*viewmodel.Params)) {
 		paramsMtx.Lock()
 		defer paramsMtx.Unlock()
 		cb(params)
 		m.Update(*params)
 	}
 	redraw = func() {
 		jobs := m.Jobs()
 		if flag.Job != "" {
 			job_found := false
 			for _, job := range jobs {
 				if strings.Compare(flag.Job, job.Name()) == 0 {
 					jobs = []*viewmodel.Job{job}
 					job_found = true
 					break
 				}
 			}
 			if !job_found {
 				jobs = nil
 			}
 		}
 		redrawJobsList := false
 		var selectedJobN *tview.TreeNode
 		if len(jobMenuRoot.GetChildren()) == len(jobs) {
 			for i, jobN := range jobMenuRoot.GetChildren() {
 				if jobN.GetReference().(*viewmodel.Job) != jobs[i] {
 					redrawJobsList = true
 					break
 				}
 				if jobN.GetReference().(*viewmodel.Job) == m.SelectedJob() {
 					selectedJobN = jobN
 				}
 			}
 		} else {
 			redrawJobsList = true
 		}
 		if redrawJobsList {
 			selectedTextStyle := tcell.StyleDefault.Bold(true)
 			selectedJobN = nil
 			children := make([]*tview.TreeNode, len(jobs))
 			for i := range jobs {
 				jobN := tview.NewTreeNode(jobs[i].JobTreeTitle())
 				jobN.SetReference(jobs[i])
 				jobN.SetSelectable(true)
 				jobN.SetSelectedTextStyle(selectedTextStyle)
 				children[i] = jobN
 				jobN.SetSelectedFunc(func() {
 					viewmodelupdate(func(p *viewmodel.Params) {
 						p.SelectedJob = jobN.GetReference().(*viewmodel.Job)
 					})
 				})
 				if jobs[i] == m.SelectedJob() {
 					selectedJobN = jobN
 				}
 			}
 			jobMenuRoot.SetChildren(children)
 			jobMenuRoot.SetSelectedTextStyle(selectedTextStyle)
 		}
 		if selectedJobN != nil && jobMenu.GetCurrentNode() != selectedJobN {
 			jobMenu.SetCurrentNode(selectedJobN)
 		} else if selectedJobN == nil {
 			// select something, otherwise selection breaks (likely bug in tview)
 			jobMenu.SetCurrentNode(jobMenuRoot)
 		}
 		if selJ := m.SelectedJob(); selJ != nil {
 			jobTextDetail.SetText(selJ.FullDescription())
 		} else {
 			jobTextDetail.SetText("please select a job")
 		}
 		bottombardatestring := m.DateString()
 		bottombarDateView.SetText(bottombardatestring)
 		bottombar.ResizeItem(bottombarDateView, len(bottombardatestring), 0)
 		bottomBarStatus.SetText(m.BottomBarStatus())
 	}
 	go func() {
 		defer func() {
 			if err := recover(); err != nil {
 				app.Suspend(func() {
 					panic(err)
 				})
 			}
 		}()
 		for {
 			st, err := c.Status()
 			viewmodelupdate(func(p *viewmodel.Params) {
 				p.Report = st.Jobs
 				p.ReportFetchError = err
 			})
 			app.QueueUpdateDraw(redraw)
 			time.Sleep(flag.Delay)
 		}
 	}()
 	jobMenu.SetChangedFunc(func(jobN *tview.TreeNode) {
 		viewmodelupdate(func(p *viewmodel.Params) {
 			p.SelectedJob, _ = jobN.GetReference().(*viewmodel.Job)
 		})
 		redraw()
 		jobTextDetail.ScrollToBeginning()
 	})
 	jobMenu.SetSelectedFunc(func(jobN *tview.TreeNode) {
 		app.SetFocus(jobTextDetail)
 	})
 	app.SetBeforeDrawFunc(func(screen tcell.Screen) bool {
 		viewmodelupdate(func(p *viewmodel.Params) {
 			_, _, p.DetailViewWidth, _ = jobTextDetail.GetInnerRect()
 		})
 		return false
 	})
 	app.SetInputCapture(func(e *tcell.EventKey) *tcell.EventKey {
 		if e.Key() == tcell.KeyTab {
 			// TODO: only if there's no modal showing (long-time bug in zrepl status)
 			tabbableCycle()
 			return nil
 		}
 		if e.Key() == tcell.KeyRune && app.GetFocus() == fsFilterInput {
 			return e
 		}
 		if e.Key() == tcell.KeyRune && e.Rune() == '/' {
 			if app.GetFocus() != fsFilterInput {
 				app.SetFocus(fsFilterInput)
 			}
 			return e
 		}
 		if e.Key() == tcell.KeyRune && e.Rune() == 'M' {
 			reconfigureJobDetailSplit(!jobMenuVisisble)
 			return nil
 		}
 		if e.Key() == tcell.KeyRune && e.Rune() == 'q' {
 			app.Stop()
 		}
 		if e.Key() == tcell.KeyRune && e.Rune() == 'S' {
 			job, ok := jobMenu.GetCurrentNode().GetReference().(*viewmodel.Job)
 			if !ok {
 				return nil
 			}
 			signals := []string{"wakeup", "reset"}
 			clientFuncs := []func(job string) error{c.SignalWakeup, c.SignalReset}
 			sigMod := tview.NewModal()
 			sigMod.SetBorder(true)
 			sigMod.SetButtonActivatedStyle(tcell.StyleDefault.Bold(true).Reverse(true))
 			sigMod.AddButtons(signals)
 			sigMod.SetText(fmt.Sprintf("Send a signal to job %q", job.Name()))
 			showModal(sigMod, func(idx int, _ string) {
 				go func() {
 					if idx == -1 {
 						return
 					}
 					err := clientFuncs[idx](job.Name())
 					if err != nil {
 						app.QueueUpdate(func() {
 							me := tview.NewModal()
 							me.SetText(fmt.Sprintf("signal error: %s", err))
 							me.AddButtons([]string{"Close"})
 							showModal(me, nil)
 						})
 					}
 				}()
 			})
 		}
 		return e
 	})
 	fsFilterInput.SetChangedFunc(func(searchterm string) {
 		viewmodelupdate(func(p *viewmodel.Params) {
 			p.FSFilter = func(fs string) bool {
 				r, err := regexp.Compile(searchterm)
 				if err != nil {
 					return true
 				}
 				return r.MatchString(fs)
 			}
 		})
 		redraw()
 		jobTextDetail.ScrollToBeginning()
 	})
 	fsFilterInput.SetInputCapture(func(event *tcell.EventKey) *tcell.EventKey {
 		if event.Key() == tcell.KeyEnter {
 			app.SetFocus(jobTextDetail)
 			return nil
 		}
 		return event
 	})
 	jobTextDetail.SetInputCapture(func(event *tcell.EventKey) *tcell.EventKey {
 		if event.Key() == tcell.KeyRune && event.Rune() == 'w' {
 			// toggle wrapping
 			viewmodelupdate(func(p *viewmodel.Params) {
 				p.DetailViewWrap = !p.DetailViewWrap
 			})
 			redraw()
 			return nil
 		}
 		return event
 	})
 	return app.Run()
 }
@@ -0,0 +1,128 @@
 package status
 import (
 	"fmt"
 	"os"
 	"strings"
 	"sync"
 	"time"
 	"github.com/gdamore/tcell/v2"
 	"github.com/mattn/go-isatty"
 	"github.com/pkg/errors"
 	"github.com/rivo/tview"
 	"github.com/zrepl/zrepl/internal/client/status/viewmodel"
 )
 func legacy(c Client, flag statusFlags) error {
 	// Set this so we don't overwrite the default terminal colors
 	// See https://github.com/rivo/tview/blob/master/styles.go
 	tview.Styles.PrimitiveBackgroundColor = tcell.ColorDefault
 	tview.Styles.ContrastBackgroundColor = tcell.ColorDefault
 	tview.Styles.PrimaryTextColor = tcell.ColorDefault
 	tview.Styles.BorderColor = tcell.ColorDefault
 	app := tview.NewApplication()
 	textView := tview.NewTextView()
 	textView.SetWrap(true)
 	textView.SetScrollable(true) // so that it allows us to set scroll position
 	// textView.SetScrollBarVisibility(tview.ScrollBarNever)
 	app.SetRoot(textView, true)
 	width := (1 << 31) - 1
 	wrap := false
 	if isatty.IsTerminal(os.Stdout.Fd()) {
 		wrap = true
 		screen, err := tcell.NewScreen()
 		if err != nil {
 			return errors.Wrap(err, "get terminal dimensions")
 		}
 		if err := screen.Init(); err != nil {
 			return errors.Wrap(err, "init screen")
 		}
 		width, _ = screen.Size()
 		screen.Fini()
 	}
 	paramsMtx := &sync.Mutex{}
 	params := viewmodel.Params{
 		Report:                  nil,
 		ReportFetchError:        nil,
 		SelectedJob:             nil,
 		FSFilter:                func(s string) bool { return true },
 		DetailViewWidth:         width,
 		DetailViewWrap:          wrap,
 		ShortKeybindingOverview: "",
 	}
 	redraw := func() {
 		textView.Clear()
 		paramsMtx.Lock()
 		defer paramsMtx.Unlock()
 		if params.ReportFetchError != nil {
 			fmt.Fprintln(textView, params.ReportFetchError.Error())
 		} else if params.Report != nil {
 			m := viewmodel.New()
 			m.Update(params)
 			for _, j := range m.Jobs() {
 				if flag.Job != "" && j.Name() != flag.Job {
 					continue
 				}
 				params.SelectedJob = j
 				m.Update(params)
 				fmt.Fprintln(textView, m.SelectedJob().FullDescription())
 				if flag.Job != "" {
 					break
 				} else {
 					hline := strings.Repeat("-", params.DetailViewWidth)
 					fmt.Fprintln(textView, hline)
 				}
 			}
 		} else {
 			fmt.Fprintln(textView, "waiting for request results")
 		}
 		textView.ScrollToBeginning()
 	}
 	app.SetBeforeDrawFunc(func(screen tcell.Screen) bool {
 		// sync resizes to `params`
 		paramsMtx.Lock()
 		_, _, newWidth, _ := textView.GetInnerRect()
 		if newWidth != params.DetailViewWidth {
 			params.DetailViewWidth = newWidth
 			app.QueueUpdateDraw(redraw)
 		}
 		paramsMtx.Unlock()
 		textView.ScrollToBeginning() // has the effect of inhibiting user scrolls
 		return false
 	})
 	go func() {
 		defer func() {
 			if err := recover(); err != nil {
 				app.Suspend(func() {
 					panic(err)
 				})
 			}
 		}()
 		for {
 			st, err := c.Status()
 			paramsMtx.Lock()
 			params.Report = st.Jobs
 			params.ReportFetchError = err
 			paramsMtx.Unlock()
 			app.QueueUpdateDraw(redraw)
 			time.Sleep(flag.Delay)
 		}
 	}()
 	return app.Run()
 }
--- a/Show More
+++ b/Show More