// Rikkiti: auto-snapshot the SYSTEM (@) before + after every apt transaction, so a bad
// update is one click to undo. The single dpkg choke-point covers ALL apt paths (our
// updater, the store, unattended-upgrades, terminal apt). INERT on ext4 (the helper
// no-ops unless root is btrfs + snapper is present). docs/44.
// ONE snapshot BEFORE each apt run (a restore point). No Post-Invoke: snapper's pre/post
// pairs exist mainly for `snapper diff` (what an update changed), which we don't surface —
// and before-only means keep-N = N updates of history, not N/2 pairs. See docs/44.
DPkg::Pre-Invoke  { "/usr/local/lib/rikkiti/rikkiti-snapshot pre  || true"; };
