From 7282dad5a916df933c1da98f20cb8a9b11492202 Mon Sep 17 00:00:00 2001
From: ogt <ogt@awoooi.local>
Date: Tue, 14 Jul 2026 10:35:32 +0800
Subject: [PATCH] fix(recovery): package Wazuh verifier snapshots

---
 .../reboot-recovery/install-reboot-auto-recovery-slo-110.sh   | 4 +++-
 .../tests/test_reboot_auto_recovery_slo_installer.py          | 4 ++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh b/scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh
index b3bc21421..345fbdb64 100644
--- a/scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh
+++ b/scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh
@@ -222,6 +222,8 @@ create_payload() {
     ops/maintenance \
     ops/monitoring \
     ops/reboot-recovery \
+    docs/security/wazuh-managed-host-coverage-gate.snapshot.json \
+    docs/security/wazuh-agent-visibility-runtime-gate.snapshot.json \
     docs/runbooks/PUBLIC-MAINTENANCE-FALLBACK-RUNBOOK.md
 }
 
@@ -232,7 +234,7 @@ case "$MODE" in
     cat <<DRYRUN
 DRY_RUN=1
 would_create_tarball_from=$ROOT_DIR/scripts/reboot-recovery,$ROOT_DIR/scripts/security
-would_include_source_gates=$ROOT_DIR/apps/api/migrations/awooop_conversation_event_hot_path_indexes_2026-07-01.sql,$ROOT_DIR/ops/nginx,$ROOT_DIR/ops/maintenance,$ROOT_DIR/ops/monitoring,$ROOT_DIR/ops/reboot-recovery,$ROOT_DIR/docs/runbooks/PUBLIC-MAINTENANCE-FALLBACK-RUNBOOK.md
+would_include_source_gates=$ROOT_DIR/apps/api/migrations/awooop_conversation_event_hot_path_indexes_2026-07-01.sql,$ROOT_DIR/ops/nginx,$ROOT_DIR/ops/maintenance,$ROOT_DIR/ops/monitoring,$ROOT_DIR/ops/reboot-recovery,$ROOT_DIR/docs/security/wazuh-managed-host-coverage-gate.snapshot.json,$ROOT_DIR/docs/security/wazuh-agent-visibility-runtime-gate.snapshot.json,$ROOT_DIR/docs/runbooks/PUBLIC-MAINTENANCE-FALLBACK-RUNBOOK.md
 would_copy_tarball_to=$HOST:$REMOTE_TARBALL
 would_enable_timer=${UNIT_NAME}.timer
 would_start_service_once=$RUN_ONCE
diff --git a/scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_installer.py b/scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_installer.py
index 96b6a7a84..10b833973 100644
--- a/scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_installer.py
+++ b/scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_installer.py
@@ -28,6 +28,8 @@ def test_installer_dry_run_exposes_apply_rollback_and_verify_contract() -> None:
     assert "awooop_conversation_event_hot_path_indexes_2026-07-01.sql" in result.stdout
     assert "ops/nginx" in result.stdout
     assert "ops/reboot-recovery" in result.stdout
+    assert "wazuh-managed-host-coverage-gate.snapshot.json" in result.stdout
+    assert "wazuh-agent-visibility-runtime-gate.snapshot.json" in result.stdout
     assert "would_enable_timer=awoooi-reboot-auto-recovery-slo.timer" in result.stdout
 
 
@@ -65,6 +67,8 @@ def test_installer_is_limited_to_verifier_timer_not_product_restarts() -> None:
     assert "ops/reboot-recovery" in text
     assert "ops/maintenance" in text
     assert "ops/monitoring" in text
+    assert "docs/security/wazuh-managed-host-coverage-gate.snapshot.json" in text
+    assert "docs/security/wazuh-agent-visibility-runtime-gate.snapshot.json" in text
     assert "PUBLIC-MAINTENANCE-FALLBACK-RUNBOOK.md" in text
     assert "ServerAliveInterval" in text
     assert "ServerAliveCountMax" in text