Builds on the deploy-time reconcile and last-checked timestamp to keep the
drift ledger current without an operator opening each Drift tab. A new
DriftScanService (singleton, base-tick timer, off by default) periodically
reconciles every stack on each local node, recording drift and surfacing
it in the activity feed. Local nodes only (a remote node runs its own
instance and scans itself); detection only, it never changes a running
stack to match its compose.
Configured under Settings, Automation, Drift detection
(drift_scan_enabled, drift_scan_interval_minutes 15-1440), wired through
the generic /settings API with matching Zod validation and a toggle plus
interval control. Tests cover the scanner gating and local-only filter,
reconcileNode (shared snapshot, unreachable skip, per-stack failure), and
the settings and section payload.
SaelixCode
1dc4635511