@seanyao/roll 4.707.1 → 4.708.2

package/docs/architecture.md

@@ -266,7 +266,7 @@ cycle 写 `loop:pending`，只做恢复探测，不启动 Builder、不把卡记
 Roll 的运行模式只有两个：`guided` 和 `autonomous`。它们不是两套 agent 配置，而是同一套 backlog、truth、route profile、execution profile、attest evidence、Evaluator 和 release gates 之上的两种触发方式。
 
 - `guided`：owner 通过 `roll supervisor status/next/why` 理解状态和下一步，再显式运行 `roll loop go --cards <id>` 等命令。guided 模式不会静默启动长时间 Story 执行。
-- `autonomous`：`roll loop on` 安装 scheduler；scheduler 可以在 pause、budget、route、evidence、Evaluator 和 release gates 内领取合格 Todo。`roll loop pause` / `roll loop off` 回到 guided；`roll loop resume` / `roll loop on` 显式切回 autonomous。
+- `autonomous`：`roll loop on` 安装 scheduler；scheduler 可以在 pause、budget、route、evidence、Evaluator 和 release gates 内领取合格 Todo。`roll loop pause` / `roll loop off` 回到 guided；`roll loop off --all` 是本机所有 `com.roll.*` LaunchAgent 的急停；`roll loop resume` / `roll loop on` 显式切回 autonomous。
 - 持久化来源只使用已有 loop/supervisor 状态：launchd plist、PAUSE/DORMANT marker、events/runs/backlog。不得新增独立 `mode.yaml` 之类的第二真相。
 
 ### BC9 · Supervisor 与执行剖面（v4）

package/guide/en/loop.md

@@ -206,6 +206,7 @@ roll loop on          # Install launchd scheduler (loop + pr + dream)
 roll loop off         # Remove launchd scheduler
 
 roll loop now         # Run one cycle immediately (same as launchd fires)
+roll loop now --cards US-1,FIX-2  # Run one immediate cycle scoped to selected cards
 roll loop test        # Quick smoke test: verify tmux/popup/stream chain works
 
 roll loop status      # Show scheduler state and current loop state
@@ -275,6 +276,8 @@ gates still decide eligibility.
 `roll loop go` is a manual goal session, not a launchd scheduler tick. While it
 runs, Roll holds `.roll/loop/go.lock`; scheduled ticks yield when they see that
 lock, record `goal:tick_skipped`, and do not start another `roll loop run-once`.
+`roll loop now --cards <ids>` uses the same card allow-list for its one-shot
+runner, so a manual tick cannot silently pick a different backlog card.
 
 Goal mode can run when the scheduler is off because it starts its own session
 and does not depend on launchd. For paused projects, run `roll loop resume`
@@ -298,6 +301,12 @@ dirty, the goal pauses with `bootstrap_artifacts_unconfirmed` and prints the
 files to confirm. Commit or clean them, then run `roll loop go` again. This
 preflight does not start a cycle and does not count as no-progress.
 
+For the Roll repository itself, `roll loop go`, `roll loop resume`, and
+`roll loop now` print the runner binary and version before starting autonomous
+work. They fail loud with `runner_stale_for_repo` if the repo-local
+`@seanyao/roll` package version is newer than the running runner; install or
+publish the local build before resuming autonomous work.
+
 `roll loop go` enforces safety only at cycle boundaries. `--budget <usd>` uses
 the effective run cost ledger and moves the goal to `budget_limited` when the
 budget is reached. An idle or aborted cycle that ran no agent counts as a known

package/guide/zh/loop.md

@@ -176,6 +176,7 @@ roll loop on          # 安装 launchd 调度器（loop + pr + dream 三个服
 roll loop off         # 卸载 launchd 调度器
 
 roll loop now         # 立即执行一次循环（与 launchd 触发的流程完全一致）
+roll loop now --cards US-1,FIX-2  # 立即执行一次循环，但只允许指定卡片
 roll loop test        # 快速冒烟测试：验证 tmux/弹窗/流式输出链路是否正常
 
 roll loop status      # 显示调度器状态和当前 loop 状态
@@ -244,6 +245,8 @@ Hold、Cut、未满足依赖、skip-list、open PR、已合并交付和 pending-
 `roll loop go` 是手动 goal session，不是 launchd 定时 tick。运行期间 Roll 会持有
 `.roll/loop/go.lock`；定时 tick 看到该锁就让路，记录 `goal:tick_skipped`，不会再启动
 另一个 `roll loop run-once`。
+`roll loop now --cards <ids>` 对它触发的单次 runner 使用同一份卡片 allow-list，
+所以手动 tick 不能静默改选其他 backlog 卡。
 
 goal mode 在 scheduler off 时也能运行，因为它自己启动会话，不依赖 launchd。loop 处于
 paused 状态时不建议直接启动：`PAUSE-<slug>` 标记仍会在 cycle 边界生效，所以应先执行
@@ -271,6 +274,11 @@ Roll-owned 文件提交并推送；如果历史版本或手工路径仍然只留
 `bootstrap_artifacts_unconfirmed` 暂停，并打印待确认文件。提交或清理后，再重新运行
 `roll loop go`。这个 preflight 不会启动 cycle，也不会累加 no-progress。
 
+在 Roll 仓自身里，`roll loop go`、`roll loop resume` 和 `roll loop now`
+开工前都会打印当前 runner 的 binary 与版本。repo-local `@seanyao/roll`
+包版本高于正在运行的 runner 时，它们会以 `runner_stale_for_repo`
+fail-loud；先安装或发布本地构建，再恢复自治施工。
+
 每次安全闸触发都会记录 `goal:gate_tripped`，`roll loop goal` 会显示最近一次安全闸读数。
 
 ### `roll loop goal` 字段含义

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seanyao/roll",
-  "version": "4.707.1",
+  "version": "4.708.2",
   "description": "Roll — Roll out features with AI agents",
   "packageManager": "pnpm@11.1.3",
   "scripts": {