fix(daemon/remote): a failed or interrupted bundle extract no longer destroys the work tree

internal/daemon/remote/bridge.go

@@ -100,14 +100,24 @@ func NewBridge(opts BridgeOptions) (*Bridge, error) {
 	if maxBundleBytes <= 0 {
 		maxBundleBytes = defaultMaxBundleBytes
 	}
+	bundleDir := strings.TrimSpace(opts.BundleDir)
+	if bundleDir != "" {
+		// A previous run may have died mid-swap, leaving a link's only tree in a
+		// staging dir. Nothing serves yet, so repair before the first upload.
+		recoverBundleDir(bundleDir, func(format string, args ...any) {
+			if opts.Log != nil {
+				opts.Log(fmt.Sprintf(format, args...))
+			}
+		})
+	}
 	return &Bridge{
 		server:           opts.Server,
 		auth:             opts.Authenticator,
 		attest:           attest,
 		minVersion:       minVersion,
 		handshakeTimeout: handshakeTimeout,
 		authFailDelay:    authFailDelay,
-		bundleDir:        strings.TrimSpace(opts.BundleDir),
+		bundleDir:        bundleDir,
 		maxBundleBytes:   maxBundleBytes,
 		log:              opts.Log,
 		sem:              make(chan struct{}, maxConns),