infra

Operate the `snapshot` per-service backup orchestrator — enable / list / take / restore / push / pull backups for file trees, postgres databases, wireguard configs, and (filed) filesystem-level snapshots. Trigger when the user wants to schedule backups, restore from a prior snapshot, sync backups across accounts, or learn the per-service plugin model.

Build a `.cpk/` container package, declare a host that runs it, and bind that host to a machine in the fleet inventory. Trigger when the user wants to package a service for deployment, set up a new host on a machine in the inventory, or learn the container / hosts / machines separation.

Bring up, move, recover, and tear down container packages running on a fleet of machines. Trigger when the user wants to deploy a host, migrate it between machines or providers, fail over to a replica, snapshot/restore data, walk the fleet dependency graph, or troubleshoot a running deployment.

Drive a fleet upgrade end-to-end: clone production to dev, apply the change, replay in staging against real data, run tests, get user sign-off, promote staging to production, with automatic disaster recovery on failure. Trigger when the user says "upgrade my nextcloud" / "bump postgres to 17" / "test this change against real data before deploying it" / any phrasing that maps to the dev → staging → production pipeline.