Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Register compose restart before extracting inner backup tar

If TarGzExtractPro(tmpPath+"/app.tar.gz", ...) fails (for example, incomplete or corrupted backup), this early return happens before the defer that runs compose.Up, so the app can remain stopped after recovery aborts. This is a regression because AppRecover has already executed compose.Down before calling handleAppRecover, and there is no other guaranteed restart path for this failure case.

Useful? React with 👍 / 👎.