kept second-drive copies (D25: R-1175, R-1181, R-1179); .fab import keeps the family gate (R-1191); stale restore temp (R-1188 c); the overcommit sentence made true (R-1192); escrow before the floor (R-1176); unreleased

2026-10-21 15:46:10 +02:00
parent 8f5bea0148
commit 5929b8e345
34 changed files with 2152 additions and 44 deletions
@@ -53,6 +53,9 @@ type ExportStackProvider interface {
 	// SaveEncryptedAppConfig saves app.yaml with re-encrypted sensitive fields.
 	// env is the plaintext env map from the bundle; encryption uses the current server key.
 	SaveEncryptedAppConfig(stackDir string, env map[string]string) error
+	// PrepareImportedApp gives the imported app its family gate and sign-up lock BEFORE it starts (R-1191): called
+	// after the config step (the compose file is in place) and before StartStack. An error means „do not start".
+	PrepareImportedApp(stackDir string, env map[string]string) error
 	// RefreshStacks rescans all stacks and refreshes container state.
 	RefreshStacks() error
 	// RemoveStackVolumes stops the stack and removes its named Docker volumes.