controller v0.271.0: automatic app updates — the update leg after the off-site copy, the backup gate waits, the switch (09 6.4 part 7; R-680, R-678, R-643)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-09-24 22:07:24 +02:00
parent 1495ca43fb
commit 9cf13a3add
33 changed files with 1672 additions and 14 deletions
@@ -181,6 +181,10 @@ func BuildReport(

 	// DR recipe app-half — customer identity + per-app {catalog_ref, enabled, storage_bindings}.
 	// Allowlist-only (the boundary): NO env/secret fields. The hub assembles it with the agent half.
+	if stackMgr != nil {
+		r.UpdateLeg = stackMgr.LastUpdateLegSummary()
+	}
+
 	r.DRRecipe = BuildDRRecipeAppHalf(cfg.Customer.ID, cfg.Customer.Name, cfg.Customer.Domain,
 		stackMgr.GetStacks(), readComposeFile)
 	// fork-4: attach the non-secret offsite restic repo coordinates so DR knows where to recover from.