Module migrate 

Upgrading stored stacks whose definitions held secret values.

Before secrets were references, a stack definition carried each value base64 under secrets. On start, the daemon moves every such value into the stack’s org store as <stack>_<key> (a local secret the stack owns) and rewrites the definition with SecretBindings. Running instances are relabelled with the new revision, since their secrets are the same values, so the upgrade rolls nothing. Running it again changes nothing: a definition without values is left alone, and a value already in the store keeps its version.

Structs

Migrated

What one stack’s migration did.

Functions

run

Migrate every stored stack. client relabels running instances; without one (tests), only state is rewritten. A stack that fails is reported and left as it was; the others carry on.