admin 0b09a799cb v0.105.0: fork-4 offsite password custody — hand-off + atomicity gate + DR inject + coord ...

Pairs with agent v0.77.0. StageEscrowSecret pushes the repo password to the
agent (POST /escrow/stage-secret) at offsite-enable → EscrowState="pending".
Atomicity gate: RunOffboxBackup (scheduler + handler) refuses until
EscrowState="escrowed" (operator POST /backup/offbox/confirm-escrow after the
escrow ceremony) — no un-recoverable offsite ciphertext can exist. DR:
POST /backup/offbox/inject-password pre-places a recovered 64-hex password 0600
(honored by WriteOffboxSecrets' IsNotExist guard; refuses clobber without
force). DR recipe gains non-secret offsite_restic coords (DRResticCoord); SFTP
key regenerated at DR, not escrowed. New settings.OffboxTarget.EscrowState.
Tests + atomicity & inject companion red-proofs green; UI gates pass. NOT yet
live-validated (supervised ceremony).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

2026-07-09 15:13:59 +02:00

..

appbackup_bridge.go

M18: cache DB-dump validation; skip re-validate on unchanged dumps

2026-06-14 14:13:09 +02:00

backup.go

feat(backup): async restore family — no proxy-timeout error page on a succeeding restore (v0.102.0)

2026-07-06 20:23:49 +02:00

migration_exclusion_test.go

B1: data-migration engine (MigrateAll + MigrateApp) + backup mutual-exclusion

2026-06-14 19:42:57 +02:00

offbox_test.go

v0.105.0: fork-4 offsite password custody — hand-off + atomicity gate + DR inject + coord

2026-07-09 15:13:59 +02:00

offbox.go

v0.105.0: fork-4 offsite password custody — hand-off + atomicity gate + DR inject + coord

2026-07-09 15:13:59 +02:00

opstatus_test.go

feat(backup): async restore family — no proxy-timeout error page on a succeeding restore (v0.102.0)

2026-07-06 20:23:49 +02:00

opstatus.go

feat(backup): async restore family — no proxy-timeout error page on a succeeding restore (v0.102.0)

2026-07-06 20:23:49 +02:00

recovery_unit_test.go

test: Phase 2b restore orchestration coverage + nil-safe isDebug

2026-06-13 11:17:08 +02:00

recovery_unit.go

v0.55.0: Phase 3 — auto off-drive Tier 2 (rootfs-headroom guard)

2026-06-13 13:24:49 +02:00

restore_db_test.go

F17: per-app restore now replays the captured .sql DB dump (.sql wins)

2026-06-14 10:02:58 +02:00

restore_db.go

M19: deriveStackName cross-references deployed stacks (fix DB-container misattribution)

2026-06-14 14:08:56 +02:00

restore_points_test.go

fix(api): F1 — register GET /api/backup/snapshots so the restore panel can populate

2026-07-05 11:42:39 +02:00

restore_points.go

fix(api): F1 — register GET /api/backup/snapshots so the restore panel can populate

2026-07-05 11:42:39 +02:00

restore_secrets_gen_test.go

fix(backup): O4 — generate a replacement for unrecoverable resettable secrets on restore

2026-07-05 11:52:04 +02:00

restore_unit_test.go

test: Phase 2b restore orchestration coverage + nil-safe isDebug

2026-06-13 11:17:08 +02:00

restore_unit.go

fix(backup): O4 — generate a replacement for unrecoverable resettable secrets on restore

2026-07-05 11:52:04 +02:00

restore.go

F17: per-app restore now replays the captured .sql DB dump (.sql wins)

2026-06-14 10:02:58 +02:00

tier2_restore_test.go

feat(backup): C2 Part 1 — RestoreTier2Files: in-place, additive-only class-C file restore engine

2026-07-05 13:17:40 +02:00

tier2_restore.go

feat(backup): C2 Part 1 — RestoreTier2Files: in-place, additive-only class-C file restore engine

2026-07-05 13:17:40 +02:00

tier2_test.go

v0.57.0: stable host-storage list + per-app Tier-2 config panel

2026-06-13 14:23:34 +02:00

tier2.go

B1: data-migration engine (MigrateAll + MigrateApp) + backup mutual-exclusion

2026-06-14 19:42:57 +02:00

volume_dumps_test.go

fix(backup): F3 — wire named-volume dumps into the app-data backup run

2026-07-05 11:46:37 +02:00