switchroom 0.15.45 → 0.16.5

package/dist/host-control/main.js

@@ -9664,10 +9664,2044 @@ var init_secretlint_source = __esm(() => {
   init_suppressor();
 });
 
+// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/error.js
+var require_error = __commonJS((exports2) => {
+  class CommanderError extends Error {
+    constructor(exitCode, code, message) {
+      super(message);
+      Error.captureStackTrace(this, this.constructor);
+      this.name = this.constructor.name;
+      this.code = code;
+      this.exitCode = exitCode;
+      this.nestedError = undefined;
+    }
+  }
+
+  class InvalidArgumentError extends CommanderError {
+    constructor(message) {
+      super(1, "commander.invalidArgument", message);
+      Error.captureStackTrace(this, this.constructor);
+      this.name = this.constructor.name;
+    }
+  }
+  exports2.CommanderError = CommanderError;
+  exports2.InvalidArgumentError = InvalidArgumentError;
+});
+
+// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/argument.js
+var require_argument = __commonJS((exports2) => {
+  var { InvalidArgumentError } = require_error();
+
+  class Argument {
+    constructor(name, description) {
+      this.description = description || "";
+      this.variadic = false;
+      this.parseArg = undefined;
+      this.defaultValue = undefined;
+      this.defaultValueDescription = undefined;
+      this.argChoices = undefined;
+      switch (name[0]) {
+        case "<":
+          this.required = true;
+          this._name = name.slice(1, -1);
+          break;
+        case "[":
+          this.required = false;
+          this._name = name.slice(1, -1);
+          break;
+        default:
+          this.required = true;
+          this._name = name;
+          break;
+      }
+      if (this._name.length > 3 && this._name.slice(-3) === "...") {
+        this.variadic = true;
+        this._name = this._name.slice(0, -3);
+      }
+    }
+    name() {
+      return this._name;
+    }
+    _concatValue(value, previous) {
+      if (previous === this.defaultValue || !Array.isArray(previous)) {
+        return [value];
+      }
+      return previous.concat(value);
+    }
+    default(value, description) {
+      this.defaultValue = value;
+      this.defaultValueDescription = description;
+      return this;
+    }
+    argParser(fn) {
+      this.parseArg = fn;
+      return this;
+    }
+    choices(values) {
+      this.argChoices = values.slice();
+      this.parseArg = (arg, previous) => {
+        if (!this.argChoices.includes(arg)) {
+          throw new InvalidArgumentError(`Allowed choices are ${this.argChoices.join(", ")}.`);
+        }
+        if (this.variadic) {
+          return this._concatValue(arg, previous);
+        }
+        return arg;
+      };
+      return this;
+    }
+    argRequired() {
+      this.required = true;
+      return this;
+    }
+    argOptional() {
+      this.required = false;
+      return this;
+    }
+  }
+  function humanReadableArgName(arg) {
+    const nameOutput = arg.name() + (arg.variadic === true ? "..." : "");
+    return arg.required ? "<" + nameOutput + ">" : "[" + nameOutput + "]";
+  }
+  exports2.Argument = Argument;
+  exports2.humanReadableArgName = humanReadableArgName;
+});
+
+// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/help.js
+var require_help = __commonJS((exports2) => {
+  var { humanReadableArgName } = require_argument();
+
+  class Help {
+    constructor() {
+      this.helpWidth = undefined;
+      this.minWidthToWrap = 40;
+      this.sortSubcommands = false;
+      this.sortOptions = false;
+      this.showGlobalOptions = false;
+    }
+    prepareContext(contextOptions) {
+      this.helpWidth = this.helpWidth ?? contextOptions.helpWidth ?? 80;
+    }
+    visibleCommands(cmd) {
+      const visibleCommands = cmd.commands.filter((cmd2) => !cmd2._hidden);
+      const helpCommand = cmd._getHelpCommand();
+      if (helpCommand && !helpCommand._hidden) {
+        visibleCommands.push(helpCommand);
+      }
+      if (this.sortSubcommands) {
+        visibleCommands.sort((a, b) => {
+          return a.name().localeCompare(b.name());
+        });
+      }
+      return visibleCommands;
+    }
+    compareOptions(a, b) {
+      const getSortKey = (option) => {
+        return option.short ? option.short.replace(/^-/, "") : option.long.replace(/^--/, "");
+      };
+      return getSortKey(a).localeCompare(getSortKey(b));
+    }
+    visibleOptions(cmd) {
+      const visibleOptions = cmd.options.filter((option) => !option.hidden);
+      const helpOption = cmd._getHelpOption();
+      if (helpOption && !helpOption.hidden) {
+        const removeShort = helpOption.short && cmd._findOption(helpOption.short);
+        const removeLong = helpOption.long && cmd._findOption(helpOption.long);
+        if (!removeShort && !removeLong) {
+          visibleOptions.push(helpOption);
+        } else if (helpOption.long && !removeLong) {
+          visibleOptions.push(cmd.createOption(helpOption.long, helpOption.description));
+        } else if (helpOption.short && !removeShort) {
+          visibleOptions.push(cmd.createOption(helpOption.short, helpOption.description));
+        }
+      }
+      if (this.sortOptions) {
+        visibleOptions.sort(this.compareOptions);
+      }
+      return visibleOptions;
+    }
+    visibleGlobalOptions(cmd) {
+      if (!this.showGlobalOptions)
+        return [];
+      const globalOptions = [];
+      for (let ancestorCmd = cmd.parent;ancestorCmd; ancestorCmd = ancestorCmd.parent) {
+        const visibleOptions = ancestorCmd.options.filter((option) => !option.hidden);
+        globalOptions.push(...visibleOptions);
+      }
+      if (this.sortOptions) {
+        globalOptions.sort(this.compareOptions);
+      }
+      return globalOptions;
+    }
+    visibleArguments(cmd) {
+      if (cmd._argsDescription) {
+        cmd.registeredArguments.forEach((argument) => {
+          argument.description = argument.description || cmd._argsDescription[argument.name()] || "";
+        });
+      }
+      if (cmd.registeredArguments.find((argument) => argument.description)) {
+        return cmd.registeredArguments;
+      }
+      return [];
+    }
+    subcommandTerm(cmd) {
+      const args = cmd.registeredArguments.map((arg) => humanReadableArgName(arg)).join(" ");
+      return cmd._name + (cmd._aliases[0] ? "|" + cmd._aliases[0] : "") + (cmd.options.length ? " [options]" : "") + (args ? " " + args : "");
+    }
+    optionTerm(option) {
+      return option.flags;
+    }
+    argumentTerm(argument) {
+      return argument.name();
+    }
+    longestSubcommandTermLength(cmd, helper) {
+      return helper.visibleCommands(cmd).reduce((max, command) => {
+        return Math.max(max, this.displayWidth(helper.styleSubcommandTerm(helper.subcommandTerm(command))));
+      }, 0);
+    }
+    longestOptionTermLength(cmd, helper) {
+      return helper.visibleOptions(cmd).reduce((max, option) => {
+        return Math.max(max, this.displayWidth(helper.styleOptionTerm(helper.optionTerm(option))));
+      }, 0);
+    }
+    longestGlobalOptionTermLength(cmd, helper) {
+      return helper.visibleGlobalOptions(cmd).reduce((max, option) => {
+        return Math.max(max, this.displayWidth(helper.styleOptionTerm(helper.optionTerm(option))));
+      }, 0);
+    }
+    longestArgumentTermLength(cmd, helper) {
+      return helper.visibleArguments(cmd).reduce((max, argument) => {
+        return Math.max(max, this.displayWidth(helper.styleArgumentTerm(helper.argumentTerm(argument))));
+      }, 0);
+    }
+    commandUsage(cmd) {
+      let cmdName = cmd._name;
+      if (cmd._aliases[0]) {
+        cmdName = cmdName + "|" + cmd._aliases[0];
+      }
+      let ancestorCmdNames = "";
+      for (let ancestorCmd = cmd.parent;ancestorCmd; ancestorCmd = ancestorCmd.parent) {
+        ancestorCmdNames = ancestorCmd.name() + " " + ancestorCmdNames;
+      }
+      return ancestorCmdNames + cmdName + " " + cmd.usage();
+    }
+    commandDescription(cmd) {
+      return cmd.description();
+    }
+    subcommandDescription(cmd) {
+      return cmd.summary() || cmd.description();
+    }
+    optionDescription(option) {
+      const extraInfo = [];
+      if (option.argChoices) {
+        extraInfo.push(`choices: ${option.argChoices.map((choice) => JSON.stringify(choice)).join(", ")}`);
+      }
+      if (option.defaultValue !== undefined) {
+        const showDefault = option.required || option.optional || option.isBoolean() && typeof option.defaultValue === "boolean";
+        if (showDefault) {
+          extraInfo.push(`default: ${option.defaultValueDescription || JSON.stringify(option.defaultValue)}`);
+        }
+      }
+      if (option.presetArg !== undefined && option.optional) {
+        extraInfo.push(`preset: ${JSON.stringify(option.presetArg)}`);
+      }
+      if (option.envVar !== undefined) {
+        extraInfo.push(`env: ${option.envVar}`);
+      }
+      if (extraInfo.length > 0) {
+        return `${option.description} (${extraInfo.join(", ")})`;
+      }
+      return option.description;
+    }
+    argumentDescription(argument) {
+      const extraInfo = [];
+      if (argument.argChoices) {
+        extraInfo.push(`choices: ${argument.argChoices.map((choice) => JSON.stringify(choice)).join(", ")}`);
+      }
+      if (argument.defaultValue !== undefined) {
+        extraInfo.push(`default: ${argument.defaultValueDescription || JSON.stringify(argument.defaultValue)}`);
+      }
+      if (extraInfo.length > 0) {
+        const extraDescription = `(${extraInfo.join(", ")})`;
+        if (argument.description) {
+          return `${argument.description} ${extraDescription}`;
+        }
+        return extraDescription;
+      }
+      return argument.description;
+    }
+    formatHelp(cmd, helper) {
+      const termWidth = helper.padWidth(cmd, helper);
+      const helpWidth = helper.helpWidth ?? 80;
+      function callFormatItem(term, description) {
+        return helper.formatItem(term, termWidth, description, helper);
+      }
+      let output = [
+        `${helper.styleTitle("Usage:")} ${helper.styleUsage(helper.commandUsage(cmd))}`,
+        ""
+      ];
+      const commandDescription = helper.commandDescription(cmd);
+      if (commandDescription.length > 0) {
+        output = output.concat([
+          helper.boxWrap(helper.styleCommandDescription(commandDescription), helpWidth),
+          ""
+        ]);
+      }
+      const argumentList = helper.visibleArguments(cmd).map((argument) => {
+        return callFormatItem(helper.styleArgumentTerm(helper.argumentTerm(argument)), helper.styleArgumentDescription(helper.argumentDescription(argument)));
+      });
+      if (argumentList.length > 0) {
+        output = output.concat([
+          helper.styleTitle("Arguments:"),
+          ...argumentList,
+          ""
+        ]);
+      }
+      const optionList = helper.visibleOptions(cmd).map((option) => {
+        return callFormatItem(helper.styleOptionTerm(helper.optionTerm(option)), helper.styleOptionDescription(helper.optionDescription(option)));
+      });
+      if (optionList.length > 0) {
+        output = output.concat([
+          helper.styleTitle("Options:"),
+          ...optionList,
+          ""
+        ]);
+      }
+      if (helper.showGlobalOptions) {
+        const globalOptionList = helper.visibleGlobalOptions(cmd).map((option) => {
+          return callFormatItem(helper.styleOptionTerm(helper.optionTerm(option)), helper.styleOptionDescription(helper.optionDescription(option)));
+        });
+        if (globalOptionList.length > 0) {
+          output = output.concat([
+            helper.styleTitle("Global Options:"),
+            ...globalOptionList,
+            ""
+          ]);
+        }
+      }
+      const commandList = helper.visibleCommands(cmd).map((cmd2) => {
+        return callFormatItem(helper.styleSubcommandTerm(helper.subcommandTerm(cmd2)), helper.styleSubcommandDescription(helper.subcommandDescription(cmd2)));
+      });
+      if (commandList.length > 0) {
+        output = output.concat([
+          helper.styleTitle("Commands:"),
+          ...commandList,
+          ""
+        ]);
+      }
+      return output.join(`
+`);
+    }
+    displayWidth(str) {
+      return stripColor(str).length;
+    }
+    styleTitle(str) {
+      return str;
+    }
+    styleUsage(str) {
+      return str.split(" ").map((word) => {
+        if (word === "[options]")
+          return this.styleOptionText(word);
+        if (word === "[command]")
+          return this.styleSubcommandText(word);
+        if (word[0] === "[" || word[0] === "<")
+          return this.styleArgumentText(word);
+        return this.styleCommandText(word);
+      }).join(" ");
+    }
+    styleCommandDescription(str) {
+      return this.styleDescriptionText(str);
+    }
+    styleOptionDescription(str) {
+      return this.styleDescriptionText(str);
+    }
+    styleSubcommandDescription(str) {
+      return this.styleDescriptionText(str);
+    }
+    styleArgumentDescription(str) {
+      return this.styleDescriptionText(str);
+    }
+    styleDescriptionText(str) {
+      return str;
+    }
+    styleOptionTerm(str) {
+      return this.styleOptionText(str);
+    }
+    styleSubcommandTerm(str) {
+      return str.split(" ").map((word) => {
+        if (word === "[options]")
+          return this.styleOptionText(word);
+        if (word[0] === "[" || word[0] === "<")
+          return this.styleArgumentText(word);
+        return this.styleSubcommandText(word);
+      }).join(" ");
+    }
+    styleArgumentTerm(str) {
+      return this.styleArgumentText(str);
+    }
+    styleOptionText(str) {
+      return str;
+    }
+    styleArgumentText(str) {
+      return str;
+    }
+    styleSubcommandText(str) {
+      return str;
+    }
+    styleCommandText(str) {
+      return str;
+    }
+    padWidth(cmd, helper) {
+      return Math.max(helper.longestOptionTermLength(cmd, helper), helper.longestGlobalOptionTermLength(cmd, helper), helper.longestSubcommandTermLength(cmd, helper), helper.longestArgumentTermLength(cmd, helper));
+    }
+    preformatted(str) {
+      return /\n[^\S\r\n]/.test(str);
+    }
+    formatItem(term, termWidth, description, helper) {
+      const itemIndent = 2;
+      const itemIndentStr = " ".repeat(itemIndent);
+      if (!description)
+        return itemIndentStr + term;
+      const paddedTerm = term.padEnd(termWidth + term.length - helper.displayWidth(term));
+      const spacerWidth = 2;
+      const helpWidth = this.helpWidth ?? 80;
+      const remainingWidth = helpWidth - termWidth - spacerWidth - itemIndent;
+      let formattedDescription;
+      if (remainingWidth < this.minWidthToWrap || helper.preformatted(description)) {
+        formattedDescription = description;
+      } else {
+        const wrappedDescription = helper.boxWrap(description, remainingWidth);
+        formattedDescription = wrappedDescription.replace(/\n/g, `
+` + " ".repeat(termWidth + spacerWidth));
+      }
+      return itemIndentStr + paddedTerm + " ".repeat(spacerWidth) + formattedDescription.replace(/\n/g, `
+${itemIndentStr}`);
+    }
+    boxWrap(str, width) {
+      if (width < this.minWidthToWrap)
+        return str;
+      const rawLines = str.split(/\r\n|\n/);
+      const chunkPattern = /[\s]*[^\s]+/g;
+      const wrappedLines = [];
+      rawLines.forEach((line) => {
+        const chunks = line.match(chunkPattern);
+        if (chunks === null) {
+          wrappedLines.push("");
+          return;
+        }
+        let sumChunks = [chunks.shift()];
+        let sumWidth = this.displayWidth(sumChunks[0]);
+        chunks.forEach((chunk2) => {
+          const visibleWidth = this.displayWidth(chunk2);
+          if (sumWidth + visibleWidth <= width) {
+            sumChunks.push(chunk2);
+            sumWidth += visibleWidth;
+            return;
+          }
+          wrappedLines.push(sumChunks.join(""));
+          const nextChunk = chunk2.trimStart();
+          sumChunks = [nextChunk];
+          sumWidth = this.displayWidth(nextChunk);
+        });
+        wrappedLines.push(sumChunks.join(""));
+      });
+      return wrappedLines.join(`
+`);
+    }
+  }
+  function stripColor(str) {
+    const sgrPattern = /\x1b\[\d*(;\d*)*m/g;
+    return str.replace(sgrPattern, "");
+  }
+  exports2.Help = Help;
+  exports2.stripColor = stripColor;
+});
+
+// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/option.js
+var require_option = __commonJS((exports2) => {
+  var { InvalidArgumentError } = require_error();
+
+  class Option {
+    constructor(flags, description) {
+      this.flags = flags;
+      this.description = description || "";
+      this.required = flags.includes("<");
+      this.optional = flags.includes("[");
+      this.variadic = /\w\.\.\.[>\]]$/.test(flags);
+      this.mandatory = false;
+      const optionFlags = splitOptionFlags(flags);
+      this.short = optionFlags.shortFlag;
+      this.long = optionFlags.longFlag;
+      this.negate = false;
+      if (this.long) {
+        this.negate = this.long.startsWith("--no-");
+      }
+      this.defaultValue = undefined;
+      this.defaultValueDescription = undefined;
+      this.presetArg = undefined;
+      this.envVar = undefined;
+      this.parseArg = undefined;
+      this.hidden = false;
+      this.argChoices = undefined;
+      this.conflictsWith = [];
+      this.implied = undefined;
+    }
+    default(value, description) {
+      this.defaultValue = value;
+      this.defaultValueDescription = description;
+      return this;
+    }
+    preset(arg) {
+      this.presetArg = arg;
+      return this;
+    }
+    conflicts(names) {
+      this.conflictsWith = this.conflictsWith.concat(names);
+      return this;
+    }
+    implies(impliedOptionValues) {
+      let newImplied = impliedOptionValues;
+      if (typeof impliedOptionValues === "string") {
+        newImplied = { [impliedOptionValues]: true };
+      }
+      this.implied = Object.assign(this.implied || {}, newImplied);
+      return this;
+    }
+    env(name) {
+      this.envVar = name;
+      return this;
+    }
+    argParser(fn) {
+      this.parseArg = fn;
+      return this;
+    }
+    makeOptionMandatory(mandatory = true) {
+      this.mandatory = !!mandatory;
+      return this;
+    }
+    hideHelp(hide = true) {
+      this.hidden = !!hide;
+      return this;
+    }
+    _concatValue(value, previous) {
+      if (previous === this.defaultValue || !Array.isArray(previous)) {
+        return [value];
+      }
+      return previous.concat(value);
+    }
+    choices(values) {
+      this.argChoices = values.slice();
+      this.parseArg = (arg, previous) => {
+        if (!this.argChoices.includes(arg)) {
+          throw new InvalidArgumentError(`Allowed choices are ${this.argChoices.join(", ")}.`);
+        }
+        if (this.variadic) {
+          return this._concatValue(arg, previous);
+        }
+        return arg;
+      };
+      return this;
+    }
+    name() {
+      if (this.long) {
+        return this.long.replace(/^--/, "");
+      }
+      return this.short.replace(/^-/, "");
+    }
+    attributeName() {
+      if (this.negate) {
+        return camelcase(this.name().replace(/^no-/, ""));
+      }
+      return camelcase(this.name());
+    }
+    is(arg) {
+      return this.short === arg || this.long === arg;
+    }
+    isBoolean() {
+      return !this.required && !this.optional && !this.negate;
+    }
+  }
+
+  class DualOptions {
+    constructor(options) {
+      this.positiveOptions = new Map;
+      this.negativeOptions = new Map;
+      this.dualOptions = new Set;
+      options.forEach((option) => {
+        if (option.negate) {
+          this.negativeOptions.set(option.attributeName(), option);
+        } else {
+          this.positiveOptions.set(option.attributeName(), option);
+        }
+      });
+      this.negativeOptions.forEach((value, key) => {
+        if (this.positiveOptions.has(key)) {
+          this.dualOptions.add(key);
+        }
+      });
+    }
+    valueFromOption(value, option) {
+      const optionKey = option.attributeName();
+      if (!this.dualOptions.has(optionKey))
+        return true;
+      const preset = this.negativeOptions.get(optionKey).presetArg;
+      const negativeValue = preset !== undefined ? preset : false;
+      return option.negate === (negativeValue === value);
+    }
+  }
+  function camelcase(str) {
+    return str.split("-").reduce((str2, word) => {
+      return str2 + word[0].toUpperCase() + word.slice(1);
+    });
+  }
+  function splitOptionFlags(flags) {
+    let shortFlag;
+    let longFlag;
+    const shortFlagExp = /^-[^-]$/;
+    const longFlagExp = /^--[^-]/;
+    const flagParts = flags.split(/[ |,]+/).concat("guard");
+    if (shortFlagExp.test(flagParts[0]))
+      shortFlag = flagParts.shift();
+    if (longFlagExp.test(flagParts[0]))
+      longFlag = flagParts.shift();
+    if (!shortFlag && shortFlagExp.test(flagParts[0]))
+      shortFlag = flagParts.shift();
+    if (!shortFlag && longFlagExp.test(flagParts[0])) {
+      shortFlag = longFlag;
+      longFlag = flagParts.shift();
+    }
+    if (flagParts[0].startsWith("-")) {
+      const unsupportedFlag = flagParts[0];
+      const baseError = `option creation failed due to '${unsupportedFlag}' in option flags '${flags}'`;
+      if (/^-[^-][^-]/.test(unsupportedFlag))
+        throw new Error(`${baseError}
+- a short flag is a single dash and a single character
+  - either use a single dash and a single character (for a short flag)
+  - or use a double dash for a long option (and can have two, like '--ws, --workspace')`);
+      if (shortFlagExp.test(unsupportedFlag))
+        throw new Error(`${baseError}
+- too many short flags`);
+      if (longFlagExp.test(unsupportedFlag))
+        throw new Error(`${baseError}
+- too many long flags`);
+      throw new Error(`${baseError}
+- unrecognised flag format`);
+    }
+    if (shortFlag === undefined && longFlag === undefined)
+      throw new Error(`option creation failed due to no flags found in '${flags}'.`);
+    return { shortFlag, longFlag };
+  }
+  exports2.Option = Option;
+  exports2.DualOptions = DualOptions;
+});
+
+// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/suggestSimilar.js
+var require_suggestSimilar = __commonJS((exports2) => {
+  var maxDistance = 3;
+  function editDistance(a, b) {
+    if (Math.abs(a.length - b.length) > maxDistance)
+      return Math.max(a.length, b.length);
+    const d = [];
+    for (let i = 0;i <= a.length; i++) {
+      d[i] = [i];
+    }
+    for (let j = 0;j <= b.length; j++) {
+      d[0][j] = j;
+    }
+    for (let j = 1;j <= b.length; j++) {
+      for (let i = 1;i <= a.length; i++) {
+        let cost = 1;
+        if (a[i - 1] === b[j - 1]) {
+          cost = 0;
+        } else {
+          cost = 1;
+        }
+        d[i][j] = Math.min(d[i - 1][j] + 1, d[i][j - 1] + 1, d[i - 1][j - 1] + cost);
+        if (i > 1 && j > 1 && a[i - 1] === b[j - 2] && a[i - 2] === b[j - 1]) {
+          d[i][j] = Math.min(d[i][j], d[i - 2][j - 2] + 1);
+        }
+      }
+    }
+    return d[a.length][b.length];
+  }
+  function suggestSimilar(word, candidates) {
+    if (!candidates || candidates.length === 0)
+      return "";
+    candidates = Array.from(new Set(candidates));
+    const searchingOptions = word.startsWith("--");
+    if (searchingOptions) {
+      word = word.slice(2);
+      candidates = candidates.map((candidate) => candidate.slice(2));
+    }
+    let similar = [];
+    let bestDistance = maxDistance;
+    const minSimilarity = 0.4;
+    candidates.forEach((candidate) => {
+      if (candidate.length <= 1)
+        return;
+      const distance = editDistance(word, candidate);
+      const length = Math.max(word.length, candidate.length);
+      const similarity = (length - distance) / length;
+      if (similarity > minSimilarity) {
+        if (distance < bestDistance) {
+          bestDistance = distance;
+          similar = [candidate];
+        } else if (distance === bestDistance) {
+          similar.push(candidate);
+        }
+      }
+    });
+    similar.sort((a, b) => a.localeCompare(b));
+    if (searchingOptions) {
+      similar = similar.map((candidate) => `--${candidate}`);
+    }
+    if (similar.length > 1) {
+      return `
+(Did you mean one of ${similar.join(", ")}?)`;
+    }
+    if (similar.length === 1) {
+      return `
+(Did you mean ${similar[0]}?)`;
+    }
+    return "";
+  }
+  exports2.suggestSimilar = suggestSimilar;
+});
+
+// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/command.js
+var require_command = __commonJS((exports2) => {
+  var EventEmitter2 = __require("node:events").EventEmitter;
+  var childProcess = __require("node:child_process");
+  var path2 = __require("node:path");
+  var fs2 = __require("node:fs");
+  var process2 = __require("node:process");
+  var { Argument, humanReadableArgName } = require_argument();
+  var { CommanderError } = require_error();
+  var { Help, stripColor } = require_help();
+  var { Option, DualOptions } = require_option();
+  var { suggestSimilar } = require_suggestSimilar();
+
+  class Command extends EventEmitter2 {
+    constructor(name) {
+      super();
+      this.commands = [];
+      this.options = [];
+      this.parent = null;
+      this._allowUnknownOption = false;
+      this._allowExcessArguments = false;
+      this.registeredArguments = [];
+      this._args = this.registeredArguments;
+      this.args = [];
+      this.rawArgs = [];
+      this.processedArgs = [];
+      this._scriptPath = null;
+      this._name = name || "";
+      this._optionValues = {};
+      this._optionValueSources = {};
+      this._storeOptionsAsProperties = false;
+      this._actionHandler = null;
+      this._executableHandler = false;
+      this._executableFile = null;
+      this._executableDir = null;
+      this._defaultCommandName = null;
+      this._exitCallback = null;
+      this._aliases = [];
+      this._combineFlagAndOptionalValue = true;
+      this._description = "";
+      this._summary = "";
+      this._argsDescription = undefined;
+      this._enablePositionalOptions = false;
+      this._passThroughOptions = false;
+      this._lifeCycleHooks = {};
+      this._showHelpAfterError = false;
+      this._showSuggestionAfterError = true;
+      this._savedState = null;
+      this._outputConfiguration = {
+        writeOut: (str) => process2.stdout.write(str),
+        writeErr: (str) => process2.stderr.write(str),
+        outputError: (str, write) => write(str),
+        getOutHelpWidth: () => process2.stdout.isTTY ? process2.stdout.columns : undefined,
+        getErrHelpWidth: () => process2.stderr.isTTY ? process2.stderr.columns : undefined,
+        getOutHasColors: () => useColor() ?? (process2.stdout.isTTY && process2.stdout.hasColors?.()),
+        getErrHasColors: () => useColor() ?? (process2.stderr.isTTY && process2.stderr.hasColors?.()),
+        stripColor: (str) => stripColor(str)
+      };
+      this._hidden = false;
+      this._helpOption = undefined;
+      this._addImplicitHelpCommand = undefined;
+      this._helpCommand = undefined;
+      this._helpConfiguration = {};
+    }
+    copyInheritedSettings(sourceCommand) {
+      this._outputConfiguration = sourceCommand._outputConfiguration;
+      this._helpOption = sourceCommand._helpOption;
+      this._helpCommand = sourceCommand._helpCommand;
+      this._helpConfiguration = sourceCommand._helpConfiguration;
+      this._exitCallback = sourceCommand._exitCallback;
+      this._storeOptionsAsProperties = sourceCommand._storeOptionsAsProperties;
+      this._combineFlagAndOptionalValue = sourceCommand._combineFlagAndOptionalValue;
+      this._allowExcessArguments = sourceCommand._allowExcessArguments;
+      this._enablePositionalOptions = sourceCommand._enablePositionalOptions;
+      this._showHelpAfterError = sourceCommand._showHelpAfterError;
+      this._showSuggestionAfterError = sourceCommand._showSuggestionAfterError;
+      return this;
+    }
+    _getCommandAndAncestors() {
+      const result = [];
+      for (let command = this;command; command = command.parent) {
+        result.push(command);
+      }
+      return result;
+    }
+    command(nameAndArgs, actionOptsOrExecDesc, execOpts) {
+      let desc = actionOptsOrExecDesc;
+      let opts = execOpts;
+      if (typeof desc === "object" && desc !== null) {
+        opts = desc;
+        desc = null;
+      }
+      opts = opts || {};
+      const [, name, args] = nameAndArgs.match(/([^ ]+) *(.*)/);
+      const cmd = this.createCommand(name);
+      if (desc) {
+        cmd.description(desc);
+        cmd._executableHandler = true;
+      }
+      if (opts.isDefault)
+        this._defaultCommandName = cmd._name;
+      cmd._hidden = !!(opts.noHelp || opts.hidden);
+      cmd._executableFile = opts.executableFile || null;
+      if (args)
+        cmd.arguments(args);
+      this._registerCommand(cmd);
+      cmd.parent = this;
+      cmd.copyInheritedSettings(this);
+      if (desc)
+        return this;
+      return cmd;
+    }
+    createCommand(name) {
+      return new Command(name);
+    }
+    createHelp() {
+      return Object.assign(new Help, this.configureHelp());
+    }
+    configureHelp(configuration) {
+      if (configuration === undefined)
+        return this._helpConfiguration;
+      this._helpConfiguration = configuration;
+      return this;
+    }
+    configureOutput(configuration) {
+      if (configuration === undefined)
+        return this._outputConfiguration;
+      Object.assign(this._outputConfiguration, configuration);
+      return this;
+    }
+    showHelpAfterError(displayHelp = true) {
+      if (typeof displayHelp !== "string")
+        displayHelp = !!displayHelp;
+      this._showHelpAfterError = displayHelp;
+      return this;
+    }
+    showSuggestionAfterError(displaySuggestion = true) {
+      this._showSuggestionAfterError = !!displaySuggestion;
+      return this;
+    }
+    addCommand(cmd, opts) {
+      if (!cmd._name) {
+        throw new Error(`Command passed to .addCommand() must have a name
+- specify the name in Command constructor or using .name()`);
+      }
+      opts = opts || {};
+      if (opts.isDefault)
+        this._defaultCommandName = cmd._name;
+      if (opts.noHelp || opts.hidden)
+        cmd._hidden = true;
+      this._registerCommand(cmd);
+      cmd.parent = this;
+      cmd._checkForBrokenPassThrough();
+      return this;
+    }
+    createArgument(name, description) {
+      return new Argument(name, description);
+    }
+    argument(name, description, fn, defaultValue) {
+      const argument = this.createArgument(name, description);
+      if (typeof fn === "function") {
+        argument.default(defaultValue).argParser(fn);
+      } else {
+        argument.default(fn);
+      }
+      this.addArgument(argument);
+      return this;
+    }
+    arguments(names) {
+      names.trim().split(/ +/).forEach((detail) => {
+        this.argument(detail);
+      });
+      return this;
+    }
+    addArgument(argument) {
+      const previousArgument = this.registeredArguments.slice(-1)[0];
+      if (previousArgument && previousArgument.variadic) {
+        throw new Error(`only the last argument can be variadic '${previousArgument.name()}'`);
+      }
+      if (argument.required && argument.defaultValue !== undefined && argument.parseArg === undefined) {
+        throw new Error(`a default value for a required argument is never used: '${argument.name()}'`);
+      }
+      this.registeredArguments.push(argument);
+      return this;
+    }
+    helpCommand(enableOrNameAndArgs, description) {
+      if (typeof enableOrNameAndArgs === "boolean") {
+        this._addImplicitHelpCommand = enableOrNameAndArgs;
+        return this;
+      }
+      enableOrNameAndArgs = enableOrNameAndArgs ?? "help [command]";
+      const [, helpName, helpArgs] = enableOrNameAndArgs.match(/([^ ]+) *(.*)/);
+      const helpDescription = description ?? "display help for command";
+      const helpCommand = this.createCommand(helpName);
+      helpCommand.helpOption(false);
+      if (helpArgs)
+        helpCommand.arguments(helpArgs);
+      if (helpDescription)
+        helpCommand.description(helpDescription);
+      this._addImplicitHelpCommand = true;
+      this._helpCommand = helpCommand;
+      return this;
+    }
+    addHelpCommand(helpCommand, deprecatedDescription) {
+      if (typeof helpCommand !== "object") {
+        this.helpCommand(helpCommand, deprecatedDescription);
+        return this;
+      }
+      this._addImplicitHelpCommand = true;
+      this._helpCommand = helpCommand;
+      return this;
+    }
+    _getHelpCommand() {
+      const hasImplicitHelpCommand = this._addImplicitHelpCommand ?? (this.commands.length && !this._actionHandler && !this._findCommand("help"));
+      if (hasImplicitHelpCommand) {
+        if (this._helpCommand === undefined) {
+          this.helpCommand(undefined, undefined);
+        }
+        return this._helpCommand;
+      }
+      return null;
+    }
+    hook(event, listener) {
+      const allowedValues = ["preSubcommand", "preAction", "postAction"];
+      if (!allowedValues.includes(event)) {
+        throw new Error(`Unexpected value for event passed to hook : '${event}'.
+Expecting one of '${allowedValues.join("', '")}'`);
+      }
+      if (this._lifeCycleHooks[event]) {
+        this._lifeCycleHooks[event].push(listener);
+      } else {
+        this._lifeCycleHooks[event] = [listener];
+      }
+      return this;
+    }
+    exitOverride(fn) {
+      if (fn) {
+        this._exitCallback = fn;
+      } else {
+        this._exitCallback = (err2) => {
+          if (err2.code !== "commander.executeSubCommandAsync") {
+            throw err2;
+          } else {}
+        };
+      }
+      return this;
+    }
+    _exit(exitCode, code, message) {
+      if (this._exitCallback) {
+        this._exitCallback(new CommanderError(exitCode, code, message));
+      }
+      process2.exit(exitCode);
+    }
+    action(fn) {
+      const listener = (args) => {
+        const expectedArgsCount = this.registeredArguments.length;
+        const actionArgs = args.slice(0, expectedArgsCount);
+        if (this._storeOptionsAsProperties) {
+          actionArgs[expectedArgsCount] = this;
+        } else {
+          actionArgs[expectedArgsCount] = this.opts();
+        }
+        actionArgs.push(this);
+        return fn.apply(this, actionArgs);
+      };
+      this._actionHandler = listener;
+      return this;
+    }
+    createOption(flags, description) {
+      return new Option(flags, description);
+    }
+    _callParseArg(target, value, previous, invalidArgumentMessage) {
+      try {
+        return target.parseArg(value, previous);
+      } catch (err2) {
+        if (err2.code === "commander.invalidArgument") {
+          const message = `${invalidArgumentMessage} ${err2.message}`;
+          this.error(message, { exitCode: err2.exitCode, code: err2.code });
+        }
+        throw err2;
+      }
+    }
+    _registerOption(option) {
+      const matchingOption = option.short && this._findOption(option.short) || option.long && this._findOption(option.long);
+      if (matchingOption) {
+        const matchingFlag = option.long && this._findOption(option.long) ? option.long : option.short;
+        throw new Error(`Cannot add option '${option.flags}'${this._name && ` to command '${this._name}'`} due to conflicting flag '${matchingFlag}'
+-  already used by option '${matchingOption.flags}'`);
+      }
+      this.options.push(option);
+    }
+    _registerCommand(command) {
+      const knownBy = (cmd) => {
+        return [cmd.name()].concat(cmd.aliases());
+      };
+      const alreadyUsed = knownBy(command).find((name) => this._findCommand(name));
+      if (alreadyUsed) {
+        const existingCmd = knownBy(this._findCommand(alreadyUsed)).join("|");
+        const newCmd = knownBy(command).join("|");
+        throw new Error(`cannot add command '${newCmd}' as already have command '${existingCmd}'`);
+      }
+      this.commands.push(command);
+    }
+    addOption(option) {
+      this._registerOption(option);
+      const oname = option.name();
+      const name = option.attributeName();
+      if (option.negate) {
+        const positiveLongFlag = option.long.replace(/^--no-/, "--");
+        if (!this._findOption(positiveLongFlag)) {
+          this.setOptionValueWithSource(name, option.defaultValue === undefined ? true : option.defaultValue, "default");
+        }
+      } else if (option.defaultValue !== undefined) {
+        this.setOptionValueWithSource(name, option.defaultValue, "default");
+      }
+      const handleOptionValue = (val, invalidValueMessage, valueSource) => {
+        if (val == null && option.presetArg !== undefined) {
+          val = option.presetArg;
+        }
+        const oldValue = this.getOptionValue(name);
+        if (val !== null && option.parseArg) {
+          val = this._callParseArg(option, val, oldValue, invalidValueMessage);
+        } else if (val !== null && option.variadic) {
+          val = option._concatValue(val, oldValue);
+        }
+        if (val == null) {
+          if (option.negate) {
+            val = false;
+          } else if (option.isBoolean() || option.optional) {
+            val = true;
+          } else {
+            val = "";
+          }
+        }
+        this.setOptionValueWithSource(name, val, valueSource);
+      };
+      this.on("option:" + oname, (val) => {
+        const invalidValueMessage = `error: option '${option.flags}' argument '${val}' is invalid.`;
+        handleOptionValue(val, invalidValueMessage, "cli");
+      });
+      if (option.envVar) {
+        this.on("optionEnv:" + oname, (val) => {
+          const invalidValueMessage = `error: option '${option.flags}' value '${val}' from env '${option.envVar}' is invalid.`;
+          handleOptionValue(val, invalidValueMessage, "env");
+        });
+      }
+      return this;
+    }
+    _optionEx(config, flags, description, fn, defaultValue) {
+      if (typeof flags === "object" && flags instanceof Option) {
+        throw new Error("To add an Option object use addOption() instead of option() or requiredOption()");
+      }
+      const option = this.createOption(flags, description);
+      option.makeOptionMandatory(!!config.mandatory);
+      if (typeof fn === "function") {
+        option.default(defaultValue).argParser(fn);
+      } else if (fn instanceof RegExp) {
+        const regex = fn;
+        fn = (val, def) => {
+          const m = regex.exec(val);
+          return m ? m[0] : def;
+        };
+        option.default(defaultValue).argParser(fn);
+      } else {
+        option.default(fn);
+      }
+      return this.addOption(option);
+    }
+    option(flags, description, parseArg, defaultValue) {
+      return this._optionEx({}, flags, description, parseArg, defaultValue);
+    }
+    requiredOption(flags, description, parseArg, defaultValue) {
+      return this._optionEx({ mandatory: true }, flags, description, parseArg, defaultValue);
+    }
+    combineFlagAndOptionalValue(combine = true) {
+      this._combineFlagAndOptionalValue = !!combine;
+      return this;
+    }
+    allowUnknownOption(allowUnknown = true) {
+      this._allowUnknownOption = !!allowUnknown;
+      return this;
+    }
+    allowExcessArguments(allowExcess = true) {
+      this._allowExcessArguments = !!allowExcess;
+      return this;
+    }
+    enablePositionalOptions(positional = true) {
+      this._enablePositionalOptions = !!positional;
+      return this;
+    }
+    passThroughOptions(passThrough2 = true) {
+      this._passThroughOptions = !!passThrough2;
+      this._checkForBrokenPassThrough();
+      return this;
+    }
+    _checkForBrokenPassThrough() {
+      if (this.parent && this._passThroughOptions && !this.parent._enablePositionalOptions) {
+        throw new Error(`passThroughOptions cannot be used for '${this._name}' without turning on enablePositionalOptions for parent command(s)`);
+      }
+    }
+    storeOptionsAsProperties(storeAsProperties = true) {
+      if (this.options.length) {
+        throw new Error("call .storeOptionsAsProperties() before adding options");
+      }
+      if (Object.keys(this._optionValues).length) {
+        throw new Error("call .storeOptionsAsProperties() before setting option values");
+      }
+      this._storeOptionsAsProperties = !!storeAsProperties;
+      return this;
+    }
+    getOptionValue(key) {
+      if (this._storeOptionsAsProperties) {
+        return this[key];
+      }
+      return this._optionValues[key];
+    }
+    setOptionValue(key, value) {
+      return this.setOptionValueWithSource(key, value, undefined);
+    }
+    setOptionValueWithSource(key, value, source) {
+      if (this._storeOptionsAsProperties) {
+        this[key] = value;
+      } else {
+        this._optionValues[key] = value;
+      }
+      this._optionValueSources[key] = source;
+      return this;
+    }
+    getOptionValueSource(key) {
+      return this._optionValueSources[key];
+    }
+    getOptionValueSourceWithGlobals(key) {
+      let source;
+      this._getCommandAndAncestors().forEach((cmd) => {
+        if (cmd.getOptionValueSource(key) !== undefined) {
+          source = cmd.getOptionValueSource(key);
+        }
+      });
+      return source;
+    }
+    _prepareUserArgs(argv, parseOptions) {
+      if (argv !== undefined && !Array.isArray(argv)) {
+        throw new Error("first parameter to parse must be array or undefined");
+      }
+      parseOptions = parseOptions || {};
+      if (argv === undefined && parseOptions.from === undefined) {
+        if (process2.versions?.electron) {
+          parseOptions.from = "electron";
+        }
+        const execArgv = process2.execArgv ?? [];
+        if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
+          parseOptions.from = "eval";
+        }
+      }
+      if (argv === undefined) {
+        argv = process2.argv;
+      }
+      this.rawArgs = argv.slice();
+      let userArgs;
+      switch (parseOptions.from) {
+        case undefined:
+        case "node":
+          this._scriptPath = argv[1];
+          userArgs = argv.slice(2);
+          break;
+        case "electron":
+          if (process2.defaultApp) {
+            this._scriptPath = argv[1];
+            userArgs = argv.slice(2);
+          } else {
+            userArgs = argv.slice(1);
+          }
+          break;
+        case "user":
+          userArgs = argv.slice(0);
+          break;
+        case "eval":
+          userArgs = argv.slice(1);
+          break;
+        default:
+          throw new Error(`unexpected parse option { from: '${parseOptions.from}' }`);
+      }
+      if (!this._name && this._scriptPath)
+        this.nameFromFilename(this._scriptPath);
+      this._name = this._name || "program";
+      return userArgs;
+    }
+    parse(argv, parseOptions) {
+      this._prepareForParse();
+      const userArgs = this._prepareUserArgs(argv, parseOptions);
+      this._parseCommand([], userArgs);
+      return this;
+    }
+    async parseAsync(argv, parseOptions) {
+      this._prepareForParse();
+      const userArgs = this._prepareUserArgs(argv, parseOptions);
+      await this._parseCommand([], userArgs);
+      return this;
+    }
+    _prepareForParse() {
+      if (this._savedState === null) {
+        this.saveStateBeforeParse();
+      } else {
+        this.restoreStateBeforeParse();
+      }
+    }
+    saveStateBeforeParse() {
+      this._savedState = {
+        _name: this._name,
+        _optionValues: { ...this._optionValues },
+        _optionValueSources: { ...this._optionValueSources }
+      };
+    }
+    restoreStateBeforeParse() {
+      if (this._storeOptionsAsProperties)
+        throw new Error(`Can not call parse again when storeOptionsAsProperties is true.
+- either make a new Command for each call to parse, or stop storing options as properties`);
+      this._name = this._savedState._name;
+      this._scriptPath = null;
+      this.rawArgs = [];
+      this._optionValues = { ...this._savedState._optionValues };
+      this._optionValueSources = { ...this._savedState._optionValueSources };
+      this.args = [];
+      this.processedArgs = [];
+    }
+    _checkForMissingExecutable(executableFile, executableDir, subcommandName) {
+      if (fs2.existsSync(executableFile))
+        return;
+      const executableDirMessage = executableDir ? `searched for local subcommand relative to directory '${executableDir}'` : "no directory for search for local subcommand, use .executableDir() to supply a custom directory";
+      const executableMissing = `'${executableFile}' does not exist
+ - if '${subcommandName}' is not meant to be an executable command, remove description parameter from '.command()' and use '.description()' instead
+ - if the default executable name is not suitable, use the executableFile option to supply a custom name or path
+ - ${executableDirMessage}`;
+      throw new Error(executableMissing);
+    }
+    _executeSubCommand(subcommand, args) {
+      args = args.slice();
+      let launchWithNode = false;
+      const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
+      function findFile(baseDir, baseName) {
+        const localBin = path2.resolve(baseDir, baseName);
+        if (fs2.existsSync(localBin))
+          return localBin;
+        if (sourceExt.includes(path2.extname(baseName)))
+          return;
+        const foundExt = sourceExt.find((ext) => fs2.existsSync(`${localBin}${ext}`));
+        if (foundExt)
+          return `${localBin}${foundExt}`;
+        return;
+      }
+      this._checkForMissingMandatoryOptions();
+      this._checkForConflictingOptions();
+      let executableFile = subcommand._executableFile || `${this._name}-${subcommand._name}`;
+      let executableDir = this._executableDir || "";
+      if (this._scriptPath) {
+        let resolvedScriptPath;
+        try {
+          resolvedScriptPath = fs2.realpathSync(this._scriptPath);
+        } catch {
+          resolvedScriptPath = this._scriptPath;
+        }
+        executableDir = path2.resolve(path2.dirname(resolvedScriptPath), executableDir);
+      }
+      if (executableDir) {
+        let localFile = findFile(executableDir, executableFile);
+        if (!localFile && !subcommand._executableFile && this._scriptPath) {
+          const legacyName = path2.basename(this._scriptPath, path2.extname(this._scriptPath));
+          if (legacyName !== this._name) {
+            localFile = findFile(executableDir, `${legacyName}-${subcommand._name}`);
+          }
+        }
+        executableFile = localFile || executableFile;
+      }
+      launchWithNode = sourceExt.includes(path2.extname(executableFile));
+      let proc;
+      if (process2.platform !== "win32") {
+        if (launchWithNode) {
+          args.unshift(executableFile);
+          args = incrementNodeInspectorPort(process2.execArgv).concat(args);
+          proc = childProcess.spawn(process2.argv[0], args, { stdio: "inherit" });
+        } else {
+          proc = childProcess.spawn(executableFile, args, { stdio: "inherit" });
+        }
+      } else {
+        this._checkForMissingExecutable(executableFile, executableDir, subcommand._name);
+        args.unshift(executableFile);
+        args = incrementNodeInspectorPort(process2.execArgv).concat(args);
+        proc = childProcess.spawn(process2.execPath, args, { stdio: "inherit" });
+      }
+      if (!proc.killed) {
+        const signals = ["SIGUSR1", "SIGUSR2", "SIGTERM", "SIGINT", "SIGHUP"];
+        signals.forEach((signal) => {
+          process2.on(signal, () => {
+            if (proc.killed === false && proc.exitCode === null) {
+              proc.kill(signal);
+            }
+          });
+        });
+      }
+      const exitCallback = this._exitCallback;
+      proc.on("close", (code) => {
+        code = code ?? 1;
+        if (!exitCallback) {
+          process2.exit(code);
+        } else {
+          exitCallback(new CommanderError(code, "commander.executeSubCommandAsync", "(close)"));
+        }
+      });
+      proc.on("error", (err2) => {
+        if (err2.code === "ENOENT") {
+          this._checkForMissingExecutable(executableFile, executableDir, subcommand._name);
+        } else if (err2.code === "EACCES") {
+          throw new Error(`'${executableFile}' not executable`);
+        }
+        if (!exitCallback) {
+          process2.exit(1);
+        } else {
+          const wrappedError = new CommanderError(1, "commander.executeSubCommandAsync", "(error)");
+          wrappedError.nestedError = err2;
+          exitCallback(wrappedError);
+        }
+      });
+      this.runningCommand = proc;
+    }
+    _dispatchSubcommand(commandName, operands, unknown) {
+      const subCommand = this._findCommand(commandName);
+      if (!subCommand)
+        this.help({ error: true });
+      subCommand._prepareForParse();
+      let promiseChain;
+      promiseChain = this._chainOrCallSubCommandHook(promiseChain, subCommand, "preSubcommand");
+      promiseChain = this._chainOrCall(promiseChain, () => {
+        if (subCommand._executableHandler) {
+          this._executeSubCommand(subCommand, operands.concat(unknown));
+        } else {
+          return subCommand._parseCommand(operands, unknown);
+        }
+      });
+      return promiseChain;
+    }
+    _dispatchHelpCommand(subcommandName) {
+      if (!subcommandName) {
+        this.help();
+      }
+      const subCommand = this._findCommand(subcommandName);
+      if (subCommand && !subCommand._executableHandler) {
+        subCommand.help();
+      }
+      return this._dispatchSubcommand(subcommandName, [], [this._getHelpOption()?.long ?? this._getHelpOption()?.short ?? "--help"]);
+    }
+    _checkNumberOfArguments() {
+      this.registeredArguments.forEach((arg, i) => {
+        if (arg.required && this.args[i] == null) {
+          this.missingArgument(arg.name());
+        }
+      });
+      if (this.registeredArguments.length > 0 && this.registeredArguments[this.registeredArguments.length - 1].variadic) {
+        return;
+      }
+      if (this.args.length > this.registeredArguments.length) {
+        this._excessArguments(this.args);
+      }
+    }
+    _processArguments() {
+      const myParseArg = (argument, value, previous) => {
+        let parsedValue = value;
+        if (value !== null && argument.parseArg) {
+          const invalidValueMessage = `error: command-argument value '${value}' is invalid for argument '${argument.name()}'.`;
+          parsedValue = this._callParseArg(argument, value, previous, invalidValueMessage);
+        }
+        return parsedValue;
+      };
+      this._checkNumberOfArguments();
+      const processedArgs = [];
+      this.registeredArguments.forEach((declaredArg, index) => {
+        let value = declaredArg.defaultValue;
+        if (declaredArg.variadic) {
+          if (index < this.args.length) {
+            value = this.args.slice(index);
+            if (declaredArg.parseArg) {
+              value = value.reduce((processed, v) => {
+                return myParseArg(declaredArg, v, processed);
+              }, declaredArg.defaultValue);
+            }
+          } else if (value === undefined) {
+            value = [];
+          }
+        } else if (index < this.args.length) {
+          value = this.args[index];
+          if (declaredArg.parseArg) {
+            value = myParseArg(declaredArg, value, declaredArg.defaultValue);
+          }
+        }
+        processedArgs[index] = value;
+      });
+      this.processedArgs = processedArgs;
+    }
+    _chainOrCall(promise, fn) {
+      if (promise && promise.then && typeof promise.then === "function") {
+        return promise.then(() => fn());
+      }
+      return fn();
+    }
+    _chainOrCallHooks(promise, event) {
+      let result = promise;
+      const hooks = [];
+      this._getCommandAndAncestors().reverse().filter((cmd) => cmd._lifeCycleHooks[event] !== undefined).forEach((hookedCommand) => {
+        hookedCommand._lifeCycleHooks[event].forEach((callback) => {
+          hooks.push({ hookedCommand, callback });
+        });
+      });
+      if (event === "postAction") {
+        hooks.reverse();
+      }
+      hooks.forEach((hookDetail) => {
+        result = this._chainOrCall(result, () => {
+          return hookDetail.callback(hookDetail.hookedCommand, this);
+        });
+      });
+      return result;
+    }
+    _chainOrCallSubCommandHook(promise, subCommand, event) {
+      let result = promise;
+      if (this._lifeCycleHooks[event] !== undefined) {
+        this._lifeCycleHooks[event].forEach((hook) => {
+          result = this._chainOrCall(result, () => {
+            return hook(this, subCommand);
+          });
+        });
+      }
+      return result;
+    }
+    _parseCommand(operands, unknown) {
+      const parsed = this.parseOptions(unknown);
+      this._parseOptionsEnv();
+      this._parseOptionsImplied();
+      operands = operands.concat(parsed.operands);
+      unknown = parsed.unknown;
+      this.args = operands.concat(unknown);
+      if (operands && this._findCommand(operands[0])) {
+        return this._dispatchSubcommand(operands[0], operands.slice(1), unknown);
+      }
+      if (this._getHelpCommand() && operands[0] === this._getHelpCommand().name()) {
+        return this._dispatchHelpCommand(operands[1]);
+      }
+      if (this._defaultCommandName) {
+        this._outputHelpIfRequested(unknown);
+        return this._dispatchSubcommand(this._defaultCommandName, operands, unknown);
+      }
+      if (this.commands.length && this.args.length === 0 && !this._actionHandler && !this._defaultCommandName) {
+        this.help({ error: true });
+      }
+      this._outputHelpIfRequested(parsed.unknown);
+      this._checkForMissingMandatoryOptions();
+      this._checkForConflictingOptions();
+      const checkForUnknownOptions = () => {
+        if (parsed.unknown.length > 0) {
+          this.unknownOption(parsed.unknown[0]);
+        }
+      };
+      const commandEvent = `command:${this.name()}`;
+      if (this._actionHandler) {
+        checkForUnknownOptions();
+        this._processArguments();
+        let promiseChain;
+        promiseChain = this._chainOrCallHooks(promiseChain, "preAction");
+        promiseChain = this._chainOrCall(promiseChain, () => this._actionHandler(this.processedArgs));
+        if (this.parent) {
+          promiseChain = this._chainOrCall(promiseChain, () => {
+            this.parent.emit(commandEvent, operands, unknown);
+          });
+        }
+        promiseChain = this._chainOrCallHooks(promiseChain, "postAction");
+        return promiseChain;
+      }
+      if (this.parent && this.parent.listenerCount(commandEvent)) {
+        checkForUnknownOptions();
+        this._processArguments();
+        this.parent.emit(commandEvent, operands, unknown);
+      } else if (operands.length) {
+        if (this._findCommand("*")) {
+          return this._dispatchSubcommand("*", operands, unknown);
+        }
+        if (this.listenerCount("command:*")) {
+          this.emit("command:*", operands, unknown);
+        } else if (this.commands.length) {
+          this.unknownCommand();
+        } else {
+          checkForUnknownOptions();
+          this._processArguments();
+        }
+      } else if (this.commands.length) {
+        checkForUnknownOptions();
+        this.help({ error: true });
+      } else {
+        checkForUnknownOptions();
+        this._processArguments();
+      }
+    }
+    _findCommand(name) {
+      if (!name)
+        return;
+      return this.commands.find((cmd) => cmd._name === name || cmd._aliases.includes(name));
+    }
+    _findOption(arg) {
+      return this.options.find((option) => option.is(arg));
+    }
+    _checkForMissingMandatoryOptions() {
+      this._getCommandAndAncestors().forEach((cmd) => {
+        cmd.options.forEach((anOption) => {
+          if (anOption.mandatory && cmd.getOptionValue(anOption.attributeName()) === undefined) {
+            cmd.missingMandatoryOptionValue(anOption);
+          }
+        });
+      });
+    }
+    _checkForConflictingLocalOptions() {
+      const definedNonDefaultOptions = this.options.filter((option) => {
+        const optionKey = option.attributeName();
+        if (this.getOptionValue(optionKey) === undefined) {
+          return false;
+        }
+        return this.getOptionValueSource(optionKey) !== "default";
+      });
+      const optionsWithConflicting = definedNonDefaultOptions.filter((option) => option.conflictsWith.length > 0);
+      optionsWithConflicting.forEach((option) => {
+        const conflictingAndDefined = definedNonDefaultOptions.find((defined) => option.conflictsWith.includes(defined.attributeName()));
+        if (conflictingAndDefined) {
+          this._conflictingOption(option, conflictingAndDefined);
+        }
+      });
+    }
+    _checkForConflictingOptions() {
+      this._getCommandAndAncestors().forEach((cmd) => {
+        cmd._checkForConflictingLocalOptions();
+      });
+    }
+    parseOptions(argv) {
+      const operands = [];
+      const unknown = [];
+      let dest = operands;
+      const args = argv.slice();
+      function maybeOption(arg) {
+        return arg.length > 1 && arg[0] === "-";
+      }
+      let activeVariadicOption = null;
+      while (args.length) {
+        const arg = args.shift();
+        if (arg === "--") {
+          if (dest === unknown)
+            dest.push(arg);
+          dest.push(...args);
+          break;
+        }
+        if (activeVariadicOption && !maybeOption(arg)) {
+          this.emit(`option:${activeVariadicOption.name()}`, arg);
+          continue;
+        }
+        activeVariadicOption = null;
+        if (maybeOption(arg)) {
+          const option = this._findOption(arg);
+          if (option) {
+            if (option.required) {
+              const value = args.shift();
+              if (value === undefined)
+                this.optionMissingArgument(option);
+              this.emit(`option:${option.name()}`, value);
+            } else if (option.optional) {
+              let value = null;
+              if (args.length > 0 && !maybeOption(args[0])) {
+                value = args.shift();
+              }
+              this.emit(`option:${option.name()}`, value);
+            } else {
+              this.emit(`option:${option.name()}`);
+            }
+            activeVariadicOption = option.variadic ? option : null;
+            continue;
+          }
+        }
+        if (arg.length > 2 && arg[0] === "-" && arg[1] !== "-") {
+          const option = this._findOption(`-${arg[1]}`);
+          if (option) {
+            if (option.required || option.optional && this._combineFlagAndOptionalValue) {
+              this.emit(`option:${option.name()}`, arg.slice(2));
+            } else {
+              this.emit(`option:${option.name()}`);
+              args.unshift(`-${arg.slice(2)}`);
+            }
+            continue;
+          }
+        }
+        if (/^--[^=]+=/.test(arg)) {
+          const index = arg.indexOf("=");
+          const option = this._findOption(arg.slice(0, index));
+          if (option && (option.required || option.optional)) {
+            this.emit(`option:${option.name()}`, arg.slice(index + 1));
+            continue;
+          }
+        }
+        if (maybeOption(arg)) {
+          dest = unknown;
+        }
+        if ((this._enablePositionalOptions || this._passThroughOptions) && operands.length === 0 && unknown.length === 0) {
+          if (this._findCommand(arg)) {
+            operands.push(arg);
+            if (args.length > 0)
+              unknown.push(...args);
+            break;
+          } else if (this._getHelpCommand() && arg === this._getHelpCommand().name()) {
+            operands.push(arg);
+            if (args.length > 0)
+              operands.push(...args);
+            break;
+          } else if (this._defaultCommandName) {
+            unknown.push(arg);
+            if (args.length > 0)
+              unknown.push(...args);
+            break;
+          }
+        }
+        if (this._passThroughOptions) {
+          dest.push(arg);
+          if (args.length > 0)
+            dest.push(...args);
+          break;
+        }
+        dest.push(arg);
+      }
+      return { operands, unknown };
+    }
+    opts() {
+      if (this._storeOptionsAsProperties) {
+        const result = {};
+        const len = this.options.length;
+        for (let i = 0;i < len; i++) {
+          const key = this.options[i].attributeName();
+          result[key] = key === this._versionOptionName ? this._version : this[key];
+        }
+        return result;
+      }
+      return this._optionValues;
+    }
+    optsWithGlobals() {
+      return this._getCommandAndAncestors().reduce((combinedOptions, cmd) => Object.assign(combinedOptions, cmd.opts()), {});
+    }
+    error(message, errorOptions) {
+      this._outputConfiguration.outputError(`${message}
+`, this._outputConfiguration.writeErr);
+      if (typeof this._showHelpAfterError === "string") {
+        this._outputConfiguration.writeErr(`${this._showHelpAfterError}
+`);
+      } else if (this._showHelpAfterError) {
+        this._outputConfiguration.writeErr(`
+`);
+        this.outputHelp({ error: true });
+      }
+      const config = errorOptions || {};
+      const exitCode = config.exitCode || 1;
+      const code = config.code || "commander.error";
+      this._exit(exitCode, code, message);
+    }
+    _parseOptionsEnv() {
+      this.options.forEach((option) => {
+        if (option.envVar && option.envVar in process2.env) {
+          const optionKey = option.attributeName();
+          if (this.getOptionValue(optionKey) === undefined || ["default", "config", "env"].includes(this.getOptionValueSource(optionKey))) {
+            if (option.required || option.optional) {
+              this.emit(`optionEnv:${option.name()}`, process2.env[option.envVar]);
+            } else {
+              this.emit(`optionEnv:${option.name()}`);
+            }
+          }
+        }
+      });
+    }
+    _parseOptionsImplied() {
+      const dualHelper = new DualOptions(this.options);
+      const hasCustomOptionValue = (optionKey) => {
+        return this.getOptionValue(optionKey) !== undefined && !["default", "implied"].includes(this.getOptionValueSource(optionKey));
+      };
+      this.options.filter((option) => option.implied !== undefined && hasCustomOptionValue(option.attributeName()) && dualHelper.valueFromOption(this.getOptionValue(option.attributeName()), option)).forEach((option) => {
+        Object.keys(option.implied).filter((impliedKey) => !hasCustomOptionValue(impliedKey)).forEach((impliedKey) => {
+          this.setOptionValueWithSource(impliedKey, option.implied[impliedKey], "implied");
+        });
+      });
+    }
+    missingArgument(name) {
+      const message = `error: missing required argument '${name}'`;
+      this.error(message, { code: "commander.missingArgument" });
+    }
+    optionMissingArgument(option) {
+      const message = `error: option '${option.flags}' argument missing`;
+      this.error(message, { code: "commander.optionMissingArgument" });
+    }
+    missingMandatoryOptionValue(option) {
+      const message = `error: required option '${option.flags}' not specified`;
+      this.error(message, { code: "commander.missingMandatoryOptionValue" });
+    }
+    _conflictingOption(option, conflictingOption) {
+      const findBestOptionFromValue = (option2) => {
+        const optionKey = option2.attributeName();
+        const optionValue = this.getOptionValue(optionKey);
+        const negativeOption = this.options.find((target) => target.negate && optionKey === target.attributeName());
+        const positiveOption = this.options.find((target) => !target.negate && optionKey === target.attributeName());
+        if (negativeOption && (negativeOption.presetArg === undefined && optionValue === false || negativeOption.presetArg !== undefined && optionValue === negativeOption.presetArg)) {
+          return negativeOption;
+        }
+        return positiveOption || option2;
+      };
+      const getErrorMessage = (option2) => {
+        const bestOption = findBestOptionFromValue(option2);
+        const optionKey = bestOption.attributeName();
+        const source = this.getOptionValueSource(optionKey);
+        if (source === "env") {
+          return `environment variable '${bestOption.envVar}'`;
+        }
+        return `option '${bestOption.flags}'`;
+      };
+      const message = `error: ${getErrorMessage(option)} cannot be used with ${getErrorMessage(conflictingOption)}`;
+      this.error(message, { code: "commander.conflictingOption" });
+    }
+    unknownOption(flag) {
+      if (this._allowUnknownOption)
+        return;
+      let suggestion = "";
+      if (flag.startsWith("--") && this._showSuggestionAfterError) {
+        let candidateFlags = [];
+        let command = this;
+        do {
+          const moreFlags = command.createHelp().visibleOptions(command).filter((option) => option.long).map((option) => option.long);
+          candidateFlags = candidateFlags.concat(moreFlags);
+          command = command.parent;
+        } while (command && !command._enablePositionalOptions);
+        suggestion = suggestSimilar(flag, candidateFlags);
+      }
+      const message = `error: unknown option '${flag}'${suggestion}`;
+      this.error(message, { code: "commander.unknownOption" });
+    }
+    _excessArguments(receivedArgs) {
+      if (this._allowExcessArguments)
+        return;
+      const expected = this.registeredArguments.length;
+      const s = expected === 1 ? "" : "s";
+      const forSubcommand = this.parent ? ` for '${this.name()}'` : "";
+      const message = `error: too many arguments${forSubcommand}. Expected ${expected} argument${s} but got ${receivedArgs.length}.`;
+      this.error(message, { code: "commander.excessArguments" });
+    }
+    unknownCommand() {
+      const unknownName = this.args[0];
+      let suggestion = "";
+      if (this._showSuggestionAfterError) {
+        const candidateNames = [];
+        this.createHelp().visibleCommands(this).forEach((command) => {
+          candidateNames.push(command.name());
+          if (command.alias())
+            candidateNames.push(command.alias());
+        });
+        suggestion = suggestSimilar(unknownName, candidateNames);
+      }
+      const message = `error: unknown command '${unknownName}'${suggestion}`;
+      this.error(message, { code: "commander.unknownCommand" });
+    }
+    version(str, flags, description) {
+      if (str === undefined)
+        return this._version;
+      this._version = str;
+      flags = flags || "-V, --version";
+      description = description || "output the version number";
+      const versionOption = this.createOption(flags, description);
+      this._versionOptionName = versionOption.attributeName();
+      this._registerOption(versionOption);
+      this.on("option:" + versionOption.name(), () => {
+        this._outputConfiguration.writeOut(`${str}
+`);
+        this._exit(0, "commander.version", str);
+      });
+      return this;
+    }
+    description(str, argsDescription) {
+      if (str === undefined && argsDescription === undefined)
+        return this._description;
+      this._description = str;
+      if (argsDescription) {
+        this._argsDescription = argsDescription;
+      }
+      return this;
+    }
+    summary(str) {
+      if (str === undefined)
+        return this._summary;
+      this._summary = str;
+      return this;
+    }
+    alias(alias) {
+      if (alias === undefined)
+        return this._aliases[0];
+      let command = this;
+      if (this.commands.length !== 0 && this.commands[this.commands.length - 1]._executableHandler) {
+        command = this.commands[this.commands.length - 1];
+      }
+      if (alias === command._name)
+        throw new Error("Command alias can't be the same as its name");
+      const matchingCommand = this.parent?._findCommand(alias);
+      if (matchingCommand) {
+        const existingCmd = [matchingCommand.name()].concat(matchingCommand.aliases()).join("|");
+        throw new Error(`cannot add alias '${alias}' to command '${this.name()}' as already have command '${existingCmd}'`);
+      }
+      command._aliases.push(alias);
+      return this;
+    }
+    aliases(aliases) {
+      if (aliases === undefined)
+        return this._aliases;
+      aliases.forEach((alias) => this.alias(alias));
+      return this;
+    }
+    usage(str) {
+      if (str === undefined) {
+        if (this._usage)
+          return this._usage;
+        const args = this.registeredArguments.map((arg) => {
+          return humanReadableArgName(arg);
+        });
+        return [].concat(this.options.length || this._helpOption !== null ? "[options]" : [], this.commands.length ? "[command]" : [], this.registeredArguments.length ? args : []).join(" ");
+      }
+      this._usage = str;
+      return this;
+    }
+    name(str) {
+      if (str === undefined)
+        return this._name;
+      this._name = str;
+      return this;
+    }
+    nameFromFilename(filename) {
+      this._name = path2.basename(filename, path2.extname(filename));
+      return this;
+    }
+    executableDir(path3) {
+      if (path3 === undefined)
+        return this._executableDir;
+      this._executableDir = path3;
+      return this;
+    }
+    helpInformation(contextOptions) {
+      const helper = this.createHelp();
+      const context = this._getOutputContext(contextOptions);
+      helper.prepareContext({
+        error: context.error,
+        helpWidth: context.helpWidth,
+        outputHasColors: context.hasColors
+      });
+      const text = helper.formatHelp(this, helper);
+      if (context.hasColors)
+        return text;
+      return this._outputConfiguration.stripColor(text);
+    }
+    _getOutputContext(contextOptions) {
+      contextOptions = contextOptions || {};
+      const error = !!contextOptions.error;
+      let baseWrite;
+      let hasColors;
+      let helpWidth;
+      if (error) {
+        baseWrite = (str) => this._outputConfiguration.writeErr(str);
+        hasColors = this._outputConfiguration.getErrHasColors();
+        helpWidth = this._outputConfiguration.getErrHelpWidth();
+      } else {
+        baseWrite = (str) => this._outputConfiguration.writeOut(str);
+        hasColors = this._outputConfiguration.getOutHasColors();
+        helpWidth = this._outputConfiguration.getOutHelpWidth();
+      }
+      const write = (str) => {
+        if (!hasColors)
+          str = this._outputConfiguration.stripColor(str);
+        return baseWrite(str);
+      };
+      return { error, write, hasColors, helpWidth };
+    }
+    outputHelp(contextOptions) {
+      let deprecatedCallback;
+      if (typeof contextOptions === "function") {
+        deprecatedCallback = contextOptions;
+        contextOptions = undefined;
+      }
+      const outputContext = this._getOutputContext(contextOptions);
+      const eventContext = {
+        error: outputContext.error,
+        write: outputContext.write,
+        command: this
+      };
+      this._getCommandAndAncestors().reverse().forEach((command) => command.emit("beforeAllHelp", eventContext));
+      this.emit("beforeHelp", eventContext);
+      let helpInformation = this.helpInformation({ error: outputContext.error });
+      if (deprecatedCallback) {
+        helpInformation = deprecatedCallback(helpInformation);
+        if (typeof helpInformation !== "string" && !Buffer.isBuffer(helpInformation)) {
+          throw new Error("outputHelp callback must return a string or a Buffer");
+        }
+      }
+      outputContext.write(helpInformation);
+      if (this._getHelpOption()?.long) {
+        this.emit(this._getHelpOption().long);
+      }
+      this.emit("afterHelp", eventContext);
+      this._getCommandAndAncestors().forEach((command) => command.emit("afterAllHelp", eventContext));
+    }
+    helpOption(flags, description) {
+      if (typeof flags === "boolean") {
+        if (flags) {
+          this._helpOption = this._helpOption ?? undefined;
+        } else {
+          this._helpOption = null;
+        }
+        return this;
+      }
+      flags = flags ?? "-h, --help";
+      description = description ?? "display help for command";
+      this._helpOption = this.createOption(flags, description);
+      return this;
+    }
+    _getHelpOption() {
+      if (this._helpOption === undefined) {
+        this.helpOption(undefined, undefined);
+      }
+      return this._helpOption;
+    }
+    addHelpOption(option) {
+      this._helpOption = option;
+      return this;
+    }
+    help(contextOptions) {
+      this.outputHelp(contextOptions);
+      let exitCode = Number(process2.exitCode ?? 0);
+      if (exitCode === 0 && contextOptions && typeof contextOptions !== "function" && contextOptions.error) {
+        exitCode = 1;
+      }
+      this._exit(exitCode, "commander.help", "(outputHelp)");
+    }
+    addHelpText(position, text) {
+      const allowedValues = ["beforeAll", "before", "after", "afterAll"];
+      if (!allowedValues.includes(position)) {
+        throw new Error(`Unexpected value for position to addHelpText.
+Expecting one of '${allowedValues.join("', '")}'`);
+      }
+      const helpEvent = `${position}Help`;
+      this.on(helpEvent, (context) => {
+        let helpStr;
+        if (typeof text === "function") {
+          helpStr = text({ error: context.error, command: context.command });
+        } else {
+          helpStr = text;
+        }
+        if (helpStr) {
+          context.write(`${helpStr}
+`);
+        }
+      });
+      return this;
+    }
+    _outputHelpIfRequested(args) {
+      const helpOption = this._getHelpOption();
+      const helpRequested = helpOption && args.find((arg) => helpOption.is(arg));
+      if (helpRequested) {
+        this.outputHelp();
+        this._exit(0, "commander.helpDisplayed", "(outputHelp)");
+      }
+    }
+  }
+  function incrementNodeInspectorPort(args) {
+    return args.map((arg) => {
+      if (!arg.startsWith("--inspect")) {
+        return arg;
+      }
+      let debugOption;
+      let debugHost = "127.0.0.1";
+      let debugPort = "9229";
+      let match;
+      if ((match = arg.match(/^(--inspect(-brk)?)$/)) !== null) {
+        debugOption = match[1];
+      } else if ((match = arg.match(/^(--inspect(-brk|-port)?)=([^:]+)$/)) !== null) {
+        debugOption = match[1];
+        if (/^\d+$/.test(match[3])) {
+          debugPort = match[3];
+        } else {
+          debugHost = match[3];
+        }
+      } else if ((match = arg.match(/^(--inspect(-brk|-port)?)=([^:]+):(\d+)$/)) !== null) {
+        debugOption = match[1];
+        debugHost = match[3];
+        debugPort = match[4];
+      }
+      if (debugOption && debugPort !== "0") {
+        return `${debugOption}=${debugHost}:${parseInt(debugPort) + 1}`;
+      }
+      return arg;
+    });
+  }
+  function useColor() {
+    if (process2.env.NO_COLOR || process2.env.FORCE_COLOR === "0" || process2.env.FORCE_COLOR === "false")
+      return false;
+    if (process2.env.FORCE_COLOR || process2.env.CLICOLOR_FORCE !== undefined)
+      return true;
+    return;
+  }
+  exports2.Command = Command;
+  exports2.useColor = useColor;
+});
+
+// node_modules/.bun/commander@13.1.0/node_modules/commander/index.js
+var require_commander = __commonJS((exports2) => {
+  var { Argument } = require_argument();
+  var { Command } = require_command();
+  var { CommanderError, InvalidArgumentError } = require_error();
+  var { Help } = require_help();
+  var { Option } = require_option();
+  exports2.program = new Command;
+  exports2.createCommand = (name) => new Command(name);
+  exports2.createOption = (flags, description) => new Option(flags, description);
+  exports2.createArgument = (name, description) => new Argument(name, description);
+  exports2.Command = Command;
+  exports2.Option = Option;
+  exports2.Argument = Argument;
+  exports2.Help = Help;
+  exports2.CommanderError = CommanderError;
+  exports2.InvalidArgumentError = InvalidArgumentError;
+  exports2.InvalidOptionArgumentError = InvalidArgumentError;
+});
+
 // src/host-control/main.ts
-import { homedir as homedir3 } from "node:os";
-import { existsSync as existsSync8 } from "node:fs";
-import { join as join4, resolve as resolve6 } from "node:path";
+import { homedir as homedir4 } from "node:os";
+import { existsSync as existsSync9 } from "node:fs";
+import { join as join6, resolve as resolve7 } from "node:path";
 
 // src/config/loader.ts
 import { readFileSync as readFileSync2, existsSync as existsSync3 } from "node:fs";
@@ -13885,7 +15919,7 @@ var TelegramChannelSchema = exports_external.object({
   format: exports_external.enum(["html", "markdownv2", "text"]).optional().describe("Default reply format passed to the plugin"),
   rate_limit_ms: exports_external.number().optional().describe("Minimum delay between outgoing messages in ms"),
   stream_mode: exports_external.enum(["pty", "checklist"]).optional().describe("How live progress is streamed to Telegram during a turn. " + "'pty' (default) surfaces text snapshots of Claude Code's TUI — " + "compatible but can flicker as Ink re-renders. 'checklist' drives " + "a structured progress card from session-tail events — stable " + "order, per-tool status emojis, fires only on semantic transitions."),
-  stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive stream edits (or " + "sendMessageDraft tics) during a turn. Lower = more responsive " + "stream, higher = fewer API calls. Floored at 250 by draft-stream " + "itself. Default 300 for draft transport (DMs) and 1000 for " + "message transport (groups/forums). Override per-agent if a " + "particular agent needs snappier or quieter streaming."),
+  stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive in-place stream edits " + "during a turn. Lower = more responsive stream, higher = fewer API " + "calls. Floored at 250 by draft-stream itself. Default 400 ms for DMs " + "and 1000 ms for groups/forums (respects Telegram's ~1 edit/sec/message " + "practical ceiling). Override per-agent if a particular agent needs " + "snappier or quieter streaming."),
   clear_status_on_completion: exports_external.boolean().optional().describe("When true, the live activity/status feed (the in-place 'what it's " + "doing' message — Reading X, Searching the web for Y, …) is DELETED " + "when the turn's final answer lands, so only the reply remains. " + "Default false: the status message is left in the chat as a record " + "(its last step marked done) — no post-then-delete. Per-agent " + "override; cascades defaults → profile → agent (per-key)."),
   hotReloadStable: exports_external.boolean().optional().describe("If true, the stable workspace prefix (AGENTS.md, SOUL.md, USER.md, " + "IDENTITY.md, TOOLS.md) is re-injected on every turn via " + "the UserPromptSubmit hook instead of baked into --append-system-prompt " + "at session start. Lets workspace edits propagate without a restart. " + "Costs ~5-10% per-turn latency/spend since the stable prefix is no " + "longer prompt-cached."),
   inject_on_change: exports_external.boolean().optional().describe("Context-efficiency gate for per-turn hook injection (default true). " + "When true (the default), the turn-pacing directive and dynamic " + "workspace content are only re-emitted when their content changes or " + "the session_id changes — suppressing redundant injection that " + "otherwise triples compaction frequency. Set to false to revert to " + "the legacy always-emit behaviour (every turn injects the full " + "content regardless of whether it changed)."),
@@ -13973,6 +16007,14 @@ var GoogleWorkspaceConfigSchema = exports_external.object({
   approvers: exports_external.array(ApproverIdSchema).min(1).describe("Array of numeric Telegram user IDs authorized to approve drive onboarding. " + "At least one must be specified."),
   tier: GoogleWorkspaceTierSchema.optional().describe("RFC G Phase 1: which upstream MCP tier to expose. " + "core (default) = ~16 tools (Drive+Docs+Sheets+Calendar). " + "extended = ~40 tools (+Slides, Forms, Tasks, Chat). " + "complete = ~60+ tools (+Gmail; not recommended yet — see RFC G §5).")
 }).optional();
+var LiteLLMConfigSchema = exports_external.object({
+  enabled: exports_external.boolean().optional().describe("Opt-in toggle. When true, `switchroom apply` provisions a per-agent " + "LiteLLM virtual key and injects routing env into the container. " + "Default OFF."),
+  base_url: exports_external.string().optional().describe("LiteLLM proxy base URL the agent's claude CLI routes through, e.g. " + "'http://127.0.0.1:4010'. Agents use network_mode:host, so loopback " + "reaches a host-bound proxy. Exported as ANTHROPIC_BASE_URL."),
+  admin_key: exports_external.string().optional().describe("LiteLLM master/admin key used at apply time to provision the team + " + "virtual key. Supports a vault reference (e.g. " + "'vault:litellm/master-key') — resolution happens at apply time via " + "the vault-broker. Never injected into the agent container."),
+  team: exports_external.string().optional().describe("LiteLLM team alias the per-agent key is created under. Defaults to " + "'switchroom' (applied in code, not as a schema default)."),
+  small_fast_model: exports_external.string().optional().describe("Model id exported as ANTHROPIC_SMALL_FAST_MODEL for the claude CLI's " + "background/fast lane, e.g. 'claude-haiku-4-5-20251001'."),
+  tags: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Extra key/value metadata tags attached to the provisioned LiteLLM " + "virtual key. Merged per-key across cascade layers (agent wins).")
+}).optional().describe("LiteLLM routing config — opt-in per-agent virtual-key auto-provisioning " + "+ routing env. Default OFF. See LiteLLMConfigSchema doc for the full flow.");
 var MicrosoftWorkspaceConfigSchema = exports_external.object({
   microsoft_client_id: exports_external.string().min(1).optional().describe("Microsoft OAuth application (client) ID from Entra portal " + "(literal string or vault reference e.g. " + "'vault:microsoft-oauth-client-id'). OPTIONAL — omit it to use " + "switchroom's shipped default Microsoft app (zero-config). " + "Set it only to bring your own Entra app (BYO)."),
   microsoft_client_secret: exports_external.string().min(1).optional().describe("Microsoft OAuth client secret. Optional — public-client apps " + "(Mobile + Desktop platform with 'Allow public client flows' " + "enabled) work without a secret; confidential clients pass " + "one. Either literal or vault reference e.g. " + "'vault:microsoft-oauth-client-secret'."),
@@ -14069,6 +16111,7 @@ var profileFields = {
   mcp_servers: exports_external.record(exports_external.string(), exports_external.unknown()).optional(),
   hooks: AgentHooksSchema,
   env: exports_external.record(exports_external.string(), exports_external.string()).optional(),
+  litellm: LiteLLMConfigSchema,
   system_prompt_append: exports_external.string().optional(),
   skills: exports_external.array(exports_external.string()).optional(),
   bundled_skills: exports_external.record(exports_external.string(), exports_external.boolean()).optional().describe("Opt-out map for switchroom's bundled-default skills " + "(e.g. skill-creator, mcp-builder, webapp-testing, pdf, docx, " + "xlsx, pptx, switchroom-cli, switchroom-status, switchroom-health). " + "Set a key to `false` to suppress that default for this agent. " + "Cascades from defaults.bundled_skills."),
@@ -14141,6 +16184,7 @@ var AgentSchema = exports_external.object({
   mcp_servers: exports_external.record(exports_external.string(), exports_external.unknown()).optional().describe("Additional MCP server configurations"),
   hooks: AgentHooksSchema.describe("Claude Code lifecycle hooks (SessionStart, UserPromptSubmit, Stop, etc). " + "Written to settings.json.hooks in Claude Code's native shape."),
   env: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Environment variables exported in start.sh before claude runs"),
+  litellm: LiteLLMConfigSchema.describe("Per-agent LiteLLM routing override. Presence with `enabled: true` opts " + "this agent IN to per-agent virtual-key auto-provisioning + routing env " + "(falls back to the top-level `litellm:` block for base_url/admin_key/" + "team/small_fast_model). Deep-merges one level over defaults/profile; " + "`tags` merge per-key, agent wins. Default OFF."),
   system_prompt_append: exports_external.string().optional().describe("Text passed via claude's --append-system-prompt flag. " + "Appended to the default or CLAUDE.md-derived system prompt."),
   skills: exports_external.array(exports_external.string()).optional().describe("Names of skills from switchroom.skills_dir to symlink into this " + "agent's skills/ directory. Unioned with defaults.skills."),
   bundled_skills: exports_external.record(exports_external.string(), exports_external.boolean()).optional().describe("Per-agent override of switchroom's bundled-default skills " + "(skill-creator, mcp-builder, webapp-testing, pdf, docx, xlsx, " + "pptx, switchroom-cli/status/health). Set a key to `false` to " + "opt out for this agent. Per-agent value wins over defaults.bundled_skills."),
@@ -14266,7 +16310,7 @@ var WebServiceConfigSchema = exports_external.object({
 });
 var HostdConfigSchema = exports_external.object({
   config_edit_enabled: exports_external.boolean().default(false).describe("Opt-in toggle for the `config_propose_edit` hostd verb (RFC " + "admin-agent-config-edit §3). Default false — the verb returns " + "`E_CONFIG_EDIT_DISABLED` until the operator explicitly flips " + "this to true. When true, admin agents can propose unified-diff " + "patches against " + "`/state/config/switchroom.yaml`, gated by an operator approval " + "card in the primary chat. Same trust posture as `update_apply` " + "and `agent_restart`: the human-in-the-loop tap is the security " + "boundary, not the agent's judgement."),
-  config_edit_rate_per_hour: exports_external.number().int().min(1).max(20).default(3).describe("Per-requesting-agent rate cap for `config_propose_edit` cards " + "(RFC admin-agent-config-edit §5). Default 3 cards/hour; min 1, " + "max 20. Configurable now, but the rate limiter is not yet enforced " + "(no `E_RATE_LIMITED` is currently raised); the field is reserved so " + "operators can pin the cap ahead of the limiter going live.")
+  config_edit_rate_per_hour: exports_external.number().int().min(1).max(20).default(3).describe("Per-requesting-agent rate cap for `config_propose_edit` cards " + "(RFC admin-agent-config-edit §5). Default 3 cards/hour; min 1, " + "max 20. ENFORCED server-side: a caller exceeding this in a sliding " + "1-hour window is rejected with `E_RATE_LIMITED` (carrying a " + "`retry_after` fix) instead of posting another operator approval " + "card — so a looping agent is throttled rather than spamming the chat.")
 });
 var CronEgressSchema = exports_external.object({
   allowed_hosts: exports_external.array(exports_external.string().min(1)).default([]).describe("Hosts a poll may reach (exact, https-only). loopback/private/IP-literal are always rejected."),
@@ -14299,11 +16343,14 @@ var SwitchroomConfigSchema = exports_external.object({
         message: "Consumer name must be a path-safe slug (letters, digits, underscore, hyphen)"
       }).describe("Socket-path identity; binds at /run/switchroom/auth-broker/<name>/sock"),
       account: exports_external.string().min(1).describe("Pinned account label for this consumer. `get-credentials` returns " + "this account's credentials; `mark-exhausted` from this consumer " + "only affects this account."),
-      uid: exports_external.number().int().nonnegative().optional().describe("Optional UID to chown the consumer socket to (defaults to 0 = root, " + "suitable for sibling containers running as root).")
-    })).optional().describe("Non-agent peers that hold a broker socket (RFC H §4.8). Each gets " + "its own `/run/switchroom/auth-broker/<name>/sock` chowned to its UID. " + "Consumers cannot be admins; a consumer name that collides with an " + "agent (whether that agent has `admin: true` or not) is a config " + "error caught at schema validation.")
+      uid: exports_external.number().int().nonnegative().optional().describe("Optional UID to chown the consumer socket to (defaults to 0 = root, " + "suitable for sibling containers running as root)."),
+      mirror_dir: exports_external.string().optional().describe("Optional host-side directory path. When set, the broker actively " + "writes the consumer's effective-account `.credentials.json` mirror " + "here — in addition to serving creds on demand via `get-credentials`. " + "Use this to eliminate the pull-latency gap: without a mirror the " + "consumer only gets failover creds at its next scheduled re-fetch " + "(up to 30 min). With a mirror the broker pushes failover creds " + "immediately when it detects exhaustion (consumer-quota-sensor tick, " + "or a mark-exhausted RPC on the pinned account). The directory must " + "be accessible to the broker container (bind-mounted from the host) " + "and to the consumer container; the broker writes " + "`<mirror_dir>/.credentials.json` atomically. Chown is attempted to " + "`uid` (default 0) — swallowed when CAP_CHOWN is absent.")
+    })).optional().describe("Non-agent peers that hold a broker socket (RFC H §4.8). Each gets " + "its own `/run/switchroom/auth-broker/<name>/sock` chowned to its UID. " + "Consumers cannot be admins; a consumer name that collides with an " + "agent (whether that agent has `admin: true` or not) is a config " + "error caught at schema validation."),
+    allow_overage_accounts: exports_external.array(exports_external.string().min(1)).optional().describe("Opt-in list of account labels (bare strings matching `auth.active` / " + "`auth.fallback_order` entries) that may be served PAST the weekly " + "utilization wall when Anthropic overage billing is available for the " + "account (`overageStatus === 'allowed'`). Overage is REAL MONEY — " + "default is empty (no account gets this). An account in this list is " + "only kept eligible when its fresh quota snapshot reports " + "`overageStatus: 'allowed'` AND `overageDisabledReason` is NOT " + "'out_of_credits' (i.e. the overage credit has not been exhausted). " + "As soon as `overageDisabledReason` becomes 'out_of_credits', the " + "account is blocked immediately regardless of this flag. Overage lifts " + "ONLY the utilization wall — it cannot lift an active exhaustion mark " + "written by a real 429 (`mark-exhausted`).")
   }).optional().describe("Switchroom-auth-broker configuration (RFC H). Fleet-wide active account, " + "fallback order, admin-agent ACL, and ephemeral-consumer surface. " + "Required from the v0.8+ schema onwards; pre-v0.8 fleets are migrated " + "in-place by `switchroom apply` (see src/auth/migrate-schema.ts)."),
   drive: GoogleWorkspaceConfigSchema.describe("RFC D legacy key — use `google_workspace:` instead. Optional Google " + "Workspace onboarding configuration. When set, supplies Google OAuth " + "client credentials, the approver allowlist for `switchroom drive " + "connect`, and the optional tier knob. Env vars " + "(SWITCHROOM_GOOGLE_CLIENT_ID, SWITCHROOM_GOOGLE_CLIENT_SECRET, " + "SWITCHROOM_APPROVER_USER_ID) take precedence over this block when " + "set, preserving back-compat with the env-only flow shipped in #766."),
   google_workspace: GoogleWorkspaceConfigSchema.describe("RFC G canonical key. Top-level Google Workspace configuration — " + "OAuth client credentials, approver allowlist, and tier knob (`core` " + "| `extended` | `complete`, default `core`). Mutually exclusive with " + "`drive:` at the top level (loader fails fast if both are set)."),
+  litellm: LiteLLMConfigSchema.describe("Top-level LiteLLM routing infra — global base_url, admin_key (the " + "LiteLLM master key, supports a `vault:` ref), team alias, and " + "small_fast_model shared by every agent that opts in. Set `enabled: " + "true` here to default the whole fleet on (each agent can still set " + "`litellm.enabled: false` to opt out). Default OFF."),
   microsoft_workspace: MicrosoftWorkspaceConfigSchema.describe("RFC #1873 (Microsoft 365 integration). Top-level Microsoft Workspace " + "configuration — OAuth client credentials (Entra app), authority " + "endpoint (defaults to /common for personal MSA + work), and the " + "org_mode opt-in for Teams/SharePoint surfaces. Block is optional; " + "when omitted the broker does not register the Microsoft provider."),
   notion_workspace: NotionWorkspaceConfigSchema.describe("RFC reference/rfcs/notion-integration.md. Top-level Notion integration " + "config — vault key for the integration token, friendly-name → " + "database UUID map, optional MCP-package version pin, and optional " + "global rate-limit override (default 3 rps, Notion's documented " + "public-API limit). Block is optional; when omitted no agent gets a " + "Notion MCP entry regardless of per-agent config."),
   quota: QuotaConfigSchema.optional().describe("Optional weekly/monthly USD spend budgets rendered in the session " + "greeting. Usage is read from ccusage at runtime; no network calls."),
@@ -14733,6 +16780,24 @@ function mergeAgentConfig(defaultsIn, agentIn) {
       ...merged.env ?? {}
     };
   }
+  if (defaults.litellm || merged.litellm) {
+    const base = defaults.litellm ?? {};
+    const override = merged.litellm ?? {};
+    const combined = { ...base };
+    for (const [k, v] of Object.entries(override)) {
+      if (v === undefined)
+        continue;
+      if (k === "tags" && base.tags && typeof v === "object" && v !== null && !Array.isArray(v)) {
+        combined.tags = {
+          ...base.tags,
+          ...v
+        };
+      } else {
+        combined[k] = v;
+      }
+    }
+    merged.litellm = combined;
+  }
   if (defaults.subagents || merged.subagents) {
     const dSub = defaults.subagents ?? {};
     const mSub = merged.subagents ?? {};
@@ -15082,6 +17147,14 @@ function resolveAgentsDir(config) {
 // src/agents/compose.ts
 import { createHash } from "node:crypto";
 
+// src/config/timezone.ts
+var CONTAINER_DEFAULT_UTC_ZONES = new Set([
+  "UTC",
+  "Etc/UTC",
+  "Etc/Universal",
+  "Universal"
+]);
+
 // src/vault/broker/peercred.ts
 var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
 function isReservedAgentName(name) {
@@ -15114,18 +17187,18 @@ import { spawn as spawn2, spawnSync as spawnSync3 } from "node:child_process";
 import { mkdir, chmod, chown, unlink, appendFile } from "node:fs/promises";
 import {
   readdirSync as readdirSync2,
-  existsSync as existsSync7,
-  readFileSync as readFileSync5,
+  existsSync as existsSync8,
+  readFileSync as readFileSync6,
   writeFileSync as writeFileSync3,
-  renameSync,
+  renameSync as renameSync2,
   mkdirSync as mkdirSync2,
-  openSync as openSync2,
+  openSync as openSync3,
   ftruncateSync,
-  writeSync,
-  fsyncSync,
-  closeSync as closeSync2
+  writeSync as writeSync2,
+  fsyncSync as fsyncSync2,
+  closeSync as closeSync3
 } from "node:fs";
-import { join as join3, dirname as dirname4, resolve as resolve5 } from "node:path";
+import { join as join5, dirname as dirname6, resolve as resolve6 } from "node:path";
 import { createHash as createHash5, randomUUID as randomUUID2, randomBytes } from "node:crypto";
 
 // src/host-control/protocol.ts
@@ -15178,6 +17251,16 @@ var ApplyRequestSchema = exports_external.object({
   op: exports_external.literal("apply"),
   args: exports_external.object({}).optional()
 });
+var RolloutRequestSchema = exports_external.object({
+  ...RequestEnvelope,
+  op: exports_external.literal("rollout"),
+  args: exports_external.object({
+    pin: exports_external.string().regex(/^v\d+\.\d+\.\d+$/),
+    agents: exports_external.array(AgentNameSchema).min(1).optional(),
+    skip_web: exports_external.boolean().optional(),
+    allow_downgrade: exports_external.boolean().optional()
+  }).required({ pin: true })
+});
 var AgentStartRequestSchema = exports_external.object({
   ...RequestEnvelope,
   op: exports_external.literal("agent_start"),
@@ -15251,6 +17334,7 @@ var RequestSchema = exports_external.discriminatedUnion("op", [
   UpdateCheckRequestSchema,
   UpdateApplyRequestSchema,
   ApplyRequestSchema,
+  RolloutRequestSchema,
   AgentStartRequestSchema,
   AgentStopRequestSchema,
   AgentLogsRequestSchema,
@@ -20442,63 +22526,309 @@ function redactedMarker(ruleId) {
   if (!trimmed || trimmed === "key_value" || trimmed === "kv_entropy") {
     return REDACTED_MARKER;
   }
-  return `[REDACTED:${trimmed}]`;
-}
-// src/cli/install-detect.ts
-import * as fs from "node:fs";
-import * as path from "node:path";
-import * as os from "node:os";
-var BIN_PATH = "/usr/local/bin/switchroom";
-function sourceArtifactPath() {
-  return path.join(os.homedir(), "code", "switchroom", "dist", "cli", "switchroom.js");
-}
-function sourceDistPrefix() {
-  return path.join(os.homedir(), "code", "switchroom", "dist") + path.sep;
+  return `[REDACTED:${trimmed}]`;
+}
+// src/cli/install-detect.ts
+import * as fs from "node:fs";
+import * as path from "node:path";
+import * as os from "node:os";
+var BIN_PATH = "/usr/local/bin/switchroom";
+function sourceArtifactPath() {
+  return path.join(os.homedir(), "code", "switchroom", "dist", "cli", "switchroom.js");
+}
+function sourceDistPrefix() {
+  return path.join(os.homedir(), "code", "switchroom", "dist") + path.sep;
+}
+function detectInstallType() {
+  try {
+    const repoArtifact = sourceArtifactPath();
+    const distPrefix = sourceDistPrefix();
+    const binExists = fs.existsSync(BIN_PATH);
+    const repoExists = fs.existsSync(repoArtifact);
+    if (binExists) {
+      const lst = fs.lstatSync(BIN_PATH);
+      if (lst.isSymbolicLink()) {
+        const target = fs.readlinkSync(BIN_PATH);
+        const resolved = path.isAbsolute(target) ? target : path.resolve(path.dirname(BIN_PATH), target);
+        if (resolved.startsWith(distPrefix)) {
+          return {
+            install_type: "source",
+            source_paths: { bin: BIN_PATH, repo: repoExists ? repoArtifact : undefined }
+          };
+        }
+        return {
+          install_type: "binary",
+          source_paths: { bin: BIN_PATH }
+        };
+      }
+      return {
+        install_type: "binary",
+        source_paths: { bin: BIN_PATH }
+      };
+    }
+    if (repoExists) {
+      return {
+        install_type: "source-unlinked",
+        source_paths: { repo: repoArtifact }
+      };
+    }
+    return { install_type: "docker", source_paths: {} };
+  } catch {
+    return { install_type: "unknown", source_paths: {} };
+  }
+}
+
+// src/util/atomic.ts
+import { closeSync as closeSync2, constants, fsyncSync, openSync as openSync2, renameSync, rmSync, writeSync } from "node:fs";
+var TMP_OPEN_FLAGS = constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0);
+
+// src/cli/resolve-version.ts
+import { existsSync as existsSync6, readFileSync as readFileSync4 } from "node:fs";
+import { dirname as dirname4, join as join2 } from "node:path";
+
+// src/build-info.ts
+var VERSION = "0.16.5";
+
+// src/cli/resolve-version.ts
+function readPackageVersion() {
+  let dir = import.meta.dirname;
+  for (let i = 0;i < 12 && dir && dir !== "/"; i++) {
+    const p = join2(dir, "package.json");
+    if (existsSync6(p)) {
+      try {
+        const pkg = JSON.parse(readFileSync4(p, "utf-8"));
+        if (pkg?.name === "switchroom" && typeof pkg.version === "string") {
+          return pkg.version;
+        }
+      } catch {}
+    }
+    dir = dirname4(dir);
+  }
+  return null;
+}
+var SWITCHROOM_VERSION = (() => {
+  const pkgVersion = readPackageVersion();
+  if (pkgVersion !== null && pkgVersion === VERSION) {
+    return VERSION;
+  }
+  return VERSION ?? pkgVersion ?? "0.0.0";
+})();
+
+// src/host-control/audit-reader.ts
+function parseAuditLine(line) {
+  const trimmed = line.trim();
+  if (trimmed.length === 0)
+    return null;
+  let obj;
+  try {
+    obj = JSON.parse(trimmed);
+  } catch {
+    return null;
+  }
+  if (typeof obj !== "object" || obj === null)
+    return null;
+  const o = obj;
+  if (typeof o.ts !== "string" || typeof o.op !== "string")
+    return null;
+  if (typeof o.request_id !== "string" || typeof o.result !== "string")
+    return null;
+  if (typeof o.duration_ms !== "number")
+    return null;
+  const callerRaw = o.caller;
+  let caller;
+  if (callerRaw && callerRaw.kind === "agent" && typeof callerRaw.name === "string") {
+    caller = { kind: "agent", name: callerRaw.name };
+  } else if (callerRaw && callerRaw.kind === "operator") {
+    caller = { kind: "operator" };
+  } else {
+    return null;
+  }
+  const exit_code = o.exit_code === null || typeof o.exit_code === "number" ? o.exit_code : null;
+  const entry = {
+    ts: o.ts,
+    op: o.op,
+    caller,
+    request_id: o.request_id,
+    result: o.result,
+    exit_code,
+    duration_ms: o.duration_ms
+  };
+  if (typeof o.error === "string")
+    entry.error = o.error;
+  if (typeof o.phase === "string")
+    entry.phase = o.phase;
+  if (typeof o.stdout_tail === "string")
+    entry.stdout_tail = o.stdout_tail;
+  if (typeof o.stderr_tail === "string")
+    entry.stderr_tail = o.stderr_tail;
+  if (typeof o.channel === "string")
+    entry.channel = o.channel;
+  if (typeof o.pin === "string")
+    entry.pin = o.pin;
+  if (o.resolved_sha && typeof o.resolved_sha === "object" && !Array.isArray(o.resolved_sha)) {
+    const rs = {};
+    for (const [k, v] of Object.entries(o.resolved_sha)) {
+      if (typeof v === "string")
+        rs[k] = v;
+    }
+    if (Object.keys(rs).length > 0)
+      entry.resolved_sha = rs;
+  }
+  if (o.install_context && typeof o.install_context === "object" && !Array.isArray(o.install_context)) {
+    const ic = o.install_context;
+    if (typeof ic.install_type === "string" && typeof ic.detected_at === "string") {
+      entry.install_context = {
+        install_type: ic.install_type,
+        detected_at: ic.detected_at
+      };
+    }
+  }
+  if (Array.isArray(o.rolled) && o.rolled.every((x) => typeof x === "string")) {
+    entry.rolled = o.rolled;
+  }
+  if (typeof o.failed_step === "string")
+    entry.failed_step = o.failed_step;
+  if (typeof o.failed_agent === "string")
+    entry.failed_agent = o.failed_agent;
+  if (typeof o.prior_pin === "string")
+    entry.prior_pin = o.prior_pin;
+  return entry;
+}
+
+// src/cli/rollout.ts
+function isVersionAssertable(target) {
+  return /^v?\d+\.\d+\.\d+$/.test(target.trim());
+}
+var ROLLOUT_RESULT_SENTINEL = "SWITCHROOM_ROLLOUT_RESULT:";
+function parseRolloutResultLine(stdout) {
+  const lines = stdout.split(`
+`);
+  for (let i = lines.length - 1;i >= 0; i--) {
+    const line = lines[i].trim();
+    if (line.startsWith(ROLLOUT_RESULT_SENTINEL)) {
+      try {
+        return JSON.parse(line.slice(ROLLOUT_RESULT_SENTINEL.length));
+      } catch {
+        return null;
+      }
+    }
+  }
+  return null;
+}
+
+// node_modules/.bun/commander@13.1.0/node_modules/commander/esm.mjs
+var import__3 = __toESM(require_commander(), 1);
+
+// src/cli/update.ts
+import { join as join3, dirname as dirname5, resolve as resolve5 } from "node:path";
+import { homedir as homedir3 } from "node:os";
+
+// src/agents/lifecycle.ts
+import { execFileSync, spawn, spawnSync } from "node:child_process";
+
+// src/agents/tmux.ts
+var MAX_BYTES = 10 * 1024 * 1024;
+
+// src/agents/lifecycle.ts
+function containerName(name) {
+  return `switchroom-${name}`;
+}
+function getAllAgentStatuses(config) {
+  const agentNames = Object.keys(config.agents);
+  const statuses = {};
+  if (agentNames.length === 0)
+    return statuses;
+  const cnByAgent = new Map;
+  const agentByCn = new Map;
+  for (const a of agentNames) {
+    const cn = containerName(a);
+    cnByAgent.set(a, cn);
+    agentByCn.set(cn, a);
+    statuses[a] = { active: "inactive", uptime: null, memory: null, pid: null };
+  }
+  const insp = spawnSync("docker", [
+    "inspect",
+    "--format",
+    "{{.Name}}|{{.State.Status}}|{{.State.StartedAt}}|{{.State.Pid}}",
+    ...cnByAgent.values()
+  ], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 15000 });
+  for (const line of (insp.stdout ?? "").split(`
+`)) {
+    const t = line.trim();
+    if (!t)
+      continue;
+    const [rawName, status, startedAt, pidStr] = t.split("|");
+    const cn = (rawName ?? "").replace(/^\//, "");
+    const agent = agentByCn.get(cn);
+    if (!agent)
+      continue;
+    const pidNum = parseInt(pidStr ?? "", 10);
+    statuses[agent] = {
+      active: status === "running" ? "active" : status || "inactive",
+      uptime: startedAt && startedAt !== "0001-01-01T00:00:00Z" ? startedAt : null,
+      memory: null,
+      pid: Number.isFinite(pidNum) && pidNum > 0 ? pidNum : null
+    };
+  }
+  const stats = spawnSync("docker", ["stats", "--no-stream", "--format", "{{.Name}}|{{.MemUsage}}"], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 15000 });
+  if (stats.status === 0) {
+    for (const line of (stats.stdout ?? "").split(`
+`)) {
+      const t = line.trim();
+      if (!t)
+        continue;
+      const [cn, memUsage] = t.split("|");
+      const agent = cn ? agentByCn.get(cn) : undefined;
+      if (!agent || statuses[agent].active !== "active")
+        continue;
+      const first = (memUsage ?? "").split("/")[0]?.trim();
+      if (!first)
+        continue;
+      const m = first.match(/([\d.]+)\s*([KMG]i?B)/i);
+      if (m) {
+        const val = parseFloat(m[1]);
+        const unit = m[2].toUpperCase();
+        let mb = val;
+        if (unit.startsWith("K"))
+          mb = val / 1024;
+        else if (unit.startsWith("G"))
+          mb = val * 1024;
+        statuses[agent].memory = `${Math.round(mb)}MB`;
+      } else {
+        statuses[agent].memory = first;
+      }
+    }
+  }
+  return statuses;
 }
-function detectInstallType() {
+
+// src/cli/update.ts
+var DEFAULT_COMPOSE_PATH = join3(homedir3(), ".switchroom", "compose", "docker-compose.yml");
+var UPDATE_RESULT_SENTINEL = "SWITCHROOM_UPDATE_RESULT:";
+function parseUpdateResultLine(stdout) {
+  const idx = stdout.lastIndexOf(UPDATE_RESULT_SENTINEL);
+  if (idx === -1)
+    return null;
+  const raw = stdout.slice(idx + UPDATE_RESULT_SENTINEL.length).split(`
+`)[0];
+  if (!raw)
+    return null;
   try {
-    const repoArtifact = sourceArtifactPath();
-    const distPrefix = sourceDistPrefix();
-    const binExists = fs.existsSync(BIN_PATH);
-    const repoExists = fs.existsSync(repoArtifact);
-    if (binExists) {
-      const lst = fs.lstatSync(BIN_PATH);
-      if (lst.isSymbolicLink()) {
-        const target = fs.readlinkSync(BIN_PATH);
-        const resolved = path.isAbsolute(target) ? target : path.resolve(path.dirname(BIN_PATH), target);
-        if (resolved.startsWith(distPrefix)) {
-          return {
-            install_type: "source",
-            source_paths: { bin: BIN_PATH, repo: repoExists ? repoArtifact : undefined }
-          };
-        }
-        return {
-          install_type: "binary",
-          source_paths: { bin: BIN_PATH }
-        };
-      }
-      return {
-        install_type: "binary",
-        source_paths: { bin: BIN_PATH }
-      };
-    }
-    if (repoExists) {
-      return {
-        install_type: "source-unlinked",
-        source_paths: { repo: repoArtifact }
-      };
+    const parsed = JSON.parse(raw);
+    if (parsed !== null && typeof parsed === "object" && "ok" in parsed && "deferred" in parsed && typeof parsed.ok === "boolean" && Array.isArray(parsed.deferred)) {
+      return parsed;
     }
-    return { install_type: "docker", source_paths: {} };
+    return null;
   } catch {
-    return { install_type: "unknown", source_paths: {} };
+    return null;
   }
 }
 
 // src/host-control/config-edit-validator.ts
-import { mkdtempSync, writeFileSync as writeFileSync2, rmSync, existsSync as existsSync6, readFileSync as readFileSync4 } from "node:fs";
+import { mkdtempSync, writeFileSync as writeFileSync2, rmSync as rmSync2, existsSync as existsSync7, readFileSync as readFileSync5 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join2, isAbsolute as isAbsolute2, normalize } from "node:path";
-import { spawnSync } from "node:child_process";
+import { join as join4, isAbsolute as isAbsolute2, normalize } from "node:path";
+import { spawnSync as spawnSync2 } from "node:child_process";
 import { isDeepStrictEqual } from "node:util";
 var MAX_PATCH_BYTES = 1024 * 1024;
 var UNLOCK_CARD_YAML_ALLOWLIST = new Set([
@@ -20583,20 +22913,20 @@ function validateShape(unifiedDiff, targetPath) {
   return null;
 }
 function applyPatch(unifiedDiff, configPath, gitBin) {
-  if (!existsSync6(configPath)) {
+  if (!existsSync7(configPath)) {
     return {
       ok: false,
       code: "E_PATCH_APPLY_FAILED",
       detail: `target config not found at ${configPath}`
     };
   }
-  const liveContent = readFileSync4(configPath, "utf8");
-  const scratchDir = mkdtempSync(join2(tmpdir(), "config-propose-edit-"));
+  const liveContent = readFileSync5(configPath, "utf8");
+  const scratchDir = mkdtempSync(join4(tmpdir(), "config-propose-edit-"));
   try {
     const basename2 = configPath.split("/").pop() ?? "switchroom.yaml";
-    const scratchFile = join2(scratchDir, basename2);
+    const scratchFile = join4(scratchDir, basename2);
     writeFileSync2(scratchFile, liveContent);
-    const patchFile = join2(scratchDir, "proposal.patch");
+    const patchFile = join4(scratchDir, "proposal.patch");
     writeFileSync2(patchFile, unifiedDiff);
     const bin = gitBin ?? "git";
     const baseArgs = [
@@ -20605,10 +22935,10 @@ function applyPatch(unifiedDiff, configPath, gitBin) {
       "--recount",
       "--unidiff-zero"
     ];
-    const checkP1 = spawnSync(bin, [...baseArgs.slice(0, 1), "--check", ...baseArgs.slice(1), "-p1", patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
+    const checkP1 = spawnSync2(bin, [...baseArgs.slice(0, 1), "--check", ...baseArgs.slice(1), "-p1", patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
     let pStrip = "-p1";
     if (checkP1.status !== 0) {
-      const checkP0 = spawnSync(bin, [...baseArgs.slice(0, 1), "--check", ...baseArgs.slice(1), "-p0", patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
+      const checkP0 = spawnSync2(bin, [...baseArgs.slice(0, 1), "--check", ...baseArgs.slice(1), "-p0", patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
       if (checkP0.status !== 0) {
         const stderr = (checkP1.stderr || "") + (checkP0.stderr || "");
         return {
@@ -20619,7 +22949,7 @@ function applyPatch(unifiedDiff, configPath, gitBin) {
       }
       pStrip = "-p0";
     }
-    const real = spawnSync(bin, [...baseArgs, pStrip, patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
+    const real = spawnSync2(bin, [...baseArgs, pStrip, patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
     if (real.status !== 0) {
       return {
         ok: false,
@@ -20627,10 +22957,10 @@ function applyPatch(unifiedDiff, configPath, gitBin) {
         detail: `git apply failed: ${(real.stderr || "").trim().slice(0, 500)}`
       };
     }
-    const after = readFileSync4(scratchFile, "utf8");
+    const after = readFileSync5(scratchFile, "utf8");
     return { ok: true, after };
   } finally {
-    rmSync(scratchDir, { recursive: true, force: true });
+    rmSync2(scratchDir, { recursive: true, force: true });
   }
 }
 function failsafeParse(source) {
@@ -20825,7 +23155,7 @@ function validateConfigEdit(opts) {
     return schemaErr;
   let beforeData = {};
   try {
-    const beforeRaw = existsSync6(opts.configPath) ? readFileSync4(opts.configPath, "utf8") : "";
+    const beforeRaw = existsSync7(opts.configPath) ? readFileSync5(opts.configPath, "utf8") : "";
     const beforeDoc = $parseDocument(beforeRaw, { merge: false, strict: false });
     beforeData = beforeDoc.toJS();
   } catch {
@@ -20978,85 +23308,6 @@ function classifyBlastRadius(beforeYaml, afterYaml) {
   };
 }
 
-// src/agents/lifecycle.ts
-import { execFileSync, spawn, spawnSync as spawnSync2 } from "node:child_process";
-
-// src/agents/tmux.ts
-var MAX_BYTES = 10 * 1024 * 1024;
-
-// src/agents/lifecycle.ts
-function containerName(name) {
-  return `switchroom-${name}`;
-}
-function getAllAgentStatuses(config) {
-  const agentNames = Object.keys(config.agents);
-  const statuses = {};
-  if (agentNames.length === 0)
-    return statuses;
-  const cnByAgent = new Map;
-  const agentByCn = new Map;
-  for (const a of agentNames) {
-    const cn = containerName(a);
-    cnByAgent.set(a, cn);
-    agentByCn.set(cn, a);
-    statuses[a] = { active: "inactive", uptime: null, memory: null, pid: null };
-  }
-  const insp = spawnSync2("docker", [
-    "inspect",
-    "--format",
-    "{{.Name}}|{{.State.Status}}|{{.State.StartedAt}}|{{.State.Pid}}",
-    ...cnByAgent.values()
-  ], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 15000 });
-  for (const line of (insp.stdout ?? "").split(`
-`)) {
-    const t = line.trim();
-    if (!t)
-      continue;
-    const [rawName, status, startedAt, pidStr] = t.split("|");
-    const cn = (rawName ?? "").replace(/^\//, "");
-    const agent = agentByCn.get(cn);
-    if (!agent)
-      continue;
-    const pidNum = parseInt(pidStr ?? "", 10);
-    statuses[agent] = {
-      active: status === "running" ? "active" : status || "inactive",
-      uptime: startedAt && startedAt !== "0001-01-01T00:00:00Z" ? startedAt : null,
-      memory: null,
-      pid: Number.isFinite(pidNum) && pidNum > 0 ? pidNum : null
-    };
-  }
-  const stats = spawnSync2("docker", ["stats", "--no-stream", "--format", "{{.Name}}|{{.MemUsage}}"], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 15000 });
-  if (stats.status === 0) {
-    for (const line of (stats.stdout ?? "").split(`
-`)) {
-      const t = line.trim();
-      if (!t)
-        continue;
-      const [cn, memUsage] = t.split("|");
-      const agent = cn ? agentByCn.get(cn) : undefined;
-      if (!agent || statuses[agent].active !== "active")
-        continue;
-      const first = (memUsage ?? "").split("/")[0]?.trim();
-      if (!first)
-        continue;
-      const m = first.match(/([\d.]+)\s*([KMG]i?B)/i);
-      if (m) {
-        const val = parseFloat(m[1]);
-        const unit = m[2].toUpperCase();
-        let mb = val;
-        if (unit.startsWith("K"))
-          mb = val / 1024;
-        else if (unit.startsWith("G"))
-          mb = val * 1024;
-        statuses[agent].memory = `${Math.round(mb)}MB`;
-      } else {
-        statuses[agent].memory = first;
-      }
-    }
-  }
-  return statuses;
-}
-
 // src/scheduler/dispatch.ts
 import { createHash as createHash4 } from "node:crypto";
 function collectScheduleEntries(config) {
@@ -21139,11 +23390,11 @@ function resolveDigests(imageRefs) {
   return out;
 }
 function readCachedInstallType(bindRoot) {
-  const cacheDir = join3(bindRoot, ".switchroom");
-  const cachePath = join3(cacheDir, "install-type.json");
-  if (existsSync7(cachePath)) {
+  const cacheDir = join5(bindRoot, ".switchroom");
+  const cachePath = join5(cacheDir, "install-type.json");
+  if (existsSync8(cachePath)) {
     try {
-      const raw = readFileSync5(cachePath, "utf-8");
+      const raw = readFileSync6(cachePath, "utf-8");
       const parsed = JSON.parse(raw);
       if (parsed && typeof parsed.install_type === "string" && typeof parsed.detected_at === "string") {
         return parsed;
@@ -21163,7 +23414,7 @@ function readCachedInstallType(bindRoot) {
     mkdirSync2(cacheDir, { recursive: true });
     const tmp = `${cachePath}.tmp`;
     writeFileSync3(tmp, JSON.stringify(payload, null, 2), { mode: 420 });
-    renameSync(tmp, cachePath);
+    renameSync2(tmp, cachePath);
   } catch {}
   return payload;
 }
@@ -21181,18 +23432,18 @@ function formatConfigApprovalDenyError(approval, approvalId) {
 }
 function writeFileInPlacePreservingInode(targetPath, content) {
   const buf = Buffer.from(content, "utf-8");
-  const fd = openSync2(targetPath, "r+");
+  const fd = openSync3(targetPath, "r+");
   try {
     ftruncateSync(fd, 0);
     let off = 0;
     while (off < buf.length) {
-      off += writeSync(fd, buf, off, buf.length - off, off);
+      off += writeSync2(fd, buf, off, buf.length - off, off);
     }
-    fsyncSync(fd);
+    fsyncSync2(fd);
   } finally {
-    closeSync2(fd);
+    closeSync3(fd);
   }
-  const readBack = readFileSync5(targetPath);
+  const readBack = readFileSync6(targetPath);
   if (readBack.length !== buf.length) {
     throw new Error(`in-place write short: wrote ${buf.length} bytes but read back ${readBack.length}`);
   }
@@ -21200,6 +23451,7 @@ function writeFileInPlacePreservingInode(targetPath, content) {
 var STATUS_RETENTION_MS = 10 * 60 * 1000;
 var STATUS_MAX_ENTRIES = 256;
 var TAIL_BYTES = 4096;
+var ORPHAN_RECONCILE_AGE_MS = 15 * 60 * 1000;
 
 class HostdServer {
   opts;
@@ -21213,7 +23465,7 @@ class HostdServer {
     this.opts = opts;
   }
   async start() {
-    const hostdDir = join3(this.opts.homeDir, ".switchroom", "hostd");
+    const hostdDir = join5(this.opts.homeDir, ".switchroom", "hostd");
     await mkdir(hostdDir, { recursive: true });
     await chmod(hostdDir, 493).catch(() => {
       return;
@@ -21224,13 +23476,13 @@ class HostdServer {
     }
     try {
       for (const name of agentNames) {
-        const dir = join3(hostdDir, name);
-        const sockPath = join3(dir, "sock");
+        const dir = join5(hostdDir, name);
+        const sockPath = join5(dir, "sock");
         await mkdir(dir, { recursive: true });
         await chmod(dir, 493).catch(() => {
           return;
         });
-        if (existsSync7(sockPath))
+        if (existsSync8(sockPath))
           await unlink(sockPath).catch(() => {
             return;
           });
@@ -21239,8 +23491,8 @@ class HostdServer {
           process.stderr.write(`hostd: server error on ${sockPath}: ${err2.message}
 `);
         });
-        await new Promise((resolve6, reject) => {
-          server.listen(sockPath, () => resolve6());
+        await new Promise((resolve7, reject) => {
+          server.listen(sockPath, () => resolve7());
           server.once("error", reject);
         });
         await chmod(sockPath, 432).catch(() => {
@@ -21261,13 +23513,13 @@ class HostdServer {
           process.stderr.write(`hostd: SWITCHROOM_HOSTD_OPERATOR_UID='${opUidStr}' is not a positive integer; skipping operator listener
 `);
         } else {
-          const dir = join3(hostdDir, "operator");
-          const sockPath = join3(dir, "sock");
+          const dir = join5(hostdDir, "operator");
+          const sockPath = join5(dir, "sock");
           await mkdir(dir, { recursive: true });
           await chmod(dir, 493).catch(() => {
             return;
           });
-          if (existsSync7(sockPath))
+          if (existsSync8(sockPath))
             await unlink(sockPath).catch(() => {
               return;
             });
@@ -21276,8 +23528,8 @@ class HostdServer {
             process.stderr.write(`hostd: server error on ${sockPath}: ${err2.message}
 `);
           });
-          await new Promise((resolve6, reject) => {
-            server.listen(sockPath, () => resolve6());
+          await new Promise((resolve7, reject) => {
+            server.listen(sockPath, () => resolve7());
             server.once("error", reject);
           });
           await chmod(sockPath, 384).catch(() => {
@@ -21296,11 +23548,72 @@ class HostdServer {
       await this.stop();
       throw err2;
     }
+    await this.reconcileOrphanedFleetMutations().catch((e) => {
+      process.stderr.write(`hostd: orphan-reconcile sweep failed (non-fatal): ${e.message}
+`);
+    });
+  }
+  async reconcileOrphanedFleetMutations() {
+    const path2 = this.auditLogPath();
+    if (!existsSync8(path2))
+      return;
+    let raw;
+    try {
+      raw = readFileSync6(path2, "utf-8");
+    } catch {
+      return;
+    }
+    const FLEET_OPS = new Set(["update_apply", "apply", "rollout"]);
+    const startedRows = new Map;
+    for (const line of raw.split(`
+`)) {
+      const e = parseAuditLine(line);
+      if (!e)
+        continue;
+      if (e.phase === "orphan_reconciled") {
+        startedRows.delete(e.request_id);
+        continue;
+      }
+      if (!FLEET_OPS.has(e.op))
+        continue;
+      if (e.phase === "terminal") {
+        startedRows.delete(e.request_id);
+        continue;
+      }
+      if (e.result === "started" && e.phase === undefined) {
+        const tsMs = Date.parse(e.ts);
+        startedRows.set(e.request_id, {
+          op: e.op,
+          ts: Number.isFinite(tsMs) ? tsMs : Date.now(),
+          caller_name: e.caller.kind === "agent" ? e.caller.name : undefined
+        });
+      }
+    }
+    const now = Date.now();
+    for (const [request_id, info] of startedRows) {
+      if (now - info.ts < ORPHAN_RECONCILE_AGE_MS)
+        continue;
+      const synthOp = info.op === "rollout" ? "rollout_orphaned" : "update_failed";
+      process.stderr.write(`hostd: ORPHANED ${info.op} (request_id=${request_id}, ` + `started ${Math.floor((now - info.ts) / 60000)}m ago, no terminal ` + `row) — emitting ${synthOp}. The fleet may be half-rolled; verify ` + `host-side.
+`);
+      await this.appendAuditRow({
+        ts: new Date().toISOString(),
+        op: synthOp,
+        phase: "orphan_reconciled",
+        request_id,
+        original_op: info.op,
+        caller: info.caller_name ? { kind: "agent", name: info.caller_name } : { kind: "operator" },
+        result: "error",
+        exit_code: null,
+        duration_ms: now - info.ts,
+        error: `${info.op} left a perpetual 'started' status with no terminal row ` + `(hostd likely SIGKILLed mid-mutation — brick scenario #1). ` + `Reconciled to a failure on hostd boot. The fleet may be ` + `half-rolled; verify versions host-side and re-run if needed.`
+      });
+    }
   }
   async stop() {
     const paths = [...this.servers.keys()];
     for (const [, server] of this.servers) {
-      await new Promise((resolve6) => server.close(() => resolve6()));
+      await new Promise((resolve7) => server.close(() => resolve7()));
     }
     this.servers.clear();
     for (const s of paths) {
@@ -21406,6 +23719,9 @@ class HostdServer {
         case "apply":
           resp = this.handleApply(req, caller, started);
           break;
+        case "rollout":
+          resp = this.handleRollout(req, caller, started);
+          break;
         case "agent_start":
           resp = await this.handleAgentStart(req, started);
           break;
@@ -21468,6 +23784,7 @@ class HostdServer {
         return null;
       case "update_apply":
       case "apply":
+      case "rollout":
         return callerAdmin ? null : `${req.op} requires admin: true on caller "${caller.name}"`;
       case "agent_start":
       case "agent_stop":
@@ -21567,12 +23884,12 @@ class HostdServer {
     };
   }
   missingApplyAssets() {
-    const root = this.opts.applyAssetsRoot ?? resolve5(import.meta.dirname, "../..");
+    const root = this.opts.applyAssetsRoot ?? resolve6(import.meta.dirname, "../..");
     return [
-      join3(root, "profiles"),
-      join3(root, "profiles", "default"),
-      join3(root, "vendor", "hindsight-memory")
-    ].filter((p) => !existsSync7(p));
+      join5(root, "profiles"),
+      join5(root, "profiles", "default"),
+      join5(root, "vendor", "hindsight-memory")
+    ].filter((p) => !existsSync8(p));
   }
   applyAssetPreflight(request_id, started) {
     const missing = this.missingApplyAssets();
@@ -21629,7 +23946,7 @@ class HostdServer {
       request_id: req.request_id,
       started_at: started
     };
-    this.spawnFleetMutation(req.op, args, entry);
+    this.spawnFleetMutation(req.op, args, entry, { SWITCHROOM_HOSTD_CONTEXT: "1" });
     return {
       v: 1,
       request_id: req.request_id,
@@ -21672,6 +23989,62 @@ class HostdServer {
       duration_ms: Date.now() - started
     };
   }
+  handleRollout(req, caller, started) {
+    const denied = this.checkFleetMutationLock(req.op, req.request_id, started);
+    if (denied)
+      return denied;
+    const assetDenied = this.applyAssetPreflight(req.request_id, started);
+    if (assetDenied)
+      return assetDenied;
+    const args = ["rollout", "--pin", req.args.pin];
+    if (req.args.agents && req.args.agents.length > 0) {
+      args.push("--agents", req.args.agents.join(","));
+    }
+    if (req.args.skip_web)
+      args.push("--skip-web");
+    if (req.args.allow_downgrade)
+      args.push("--allow-downgrade");
+    const installCtx = readCachedInstallType(this.opts.bindRoot ?? this.opts.homeDir);
+    let priorPin;
+    try {
+      const cfg = loadConfig(this.opts.configPath);
+      const cfgPin = cfg.release?.pin;
+      if (cfgPin && isVersionAssertable(cfgPin)) {
+        priorPin = cfgPin.startsWith("v") ? cfgPin : `v${cfgPin}`;
+      }
+    } catch {}
+    const entry = {
+      request_id: req.request_id,
+      caller,
+      op: req.op,
+      result: "started",
+      exit_code: null,
+      started_at: started,
+      finished_at: null,
+      stdout_tail: "",
+      stderr_tail: "",
+      pin: req.args.pin,
+      install_context: {
+        install_type: installCtx.install_type,
+        detected_at: installCtx.detected_at
+      },
+      ...priorPin ? { prior_pin: priorPin } : {}
+    };
+    this.recordStatus(entry);
+    this.fleetMutationInFlight = {
+      op: "rollout",
+      request_id: req.request_id,
+      started_at: started
+    };
+    this.spawnRollout(args, entry);
+    return {
+      v: 1,
+      request_id: req.request_id,
+      result: "started",
+      exit_code: null,
+      duration_ms: Date.now() - started
+    };
+  }
   async handleAgentStart(req, started) {
     const res = await this.runSwitchroom(["agent", "start", req.args.name]);
     return {
@@ -21753,7 +24126,7 @@ class HostdServer {
     if (caller.kind === "agent" && this.opts.config.agents[caller.name]?.admin !== true) {
       let beforeContent;
       try {
-        beforeContent = readFileSync5(configPath, "utf-8");
+        beforeContent = readFileSync6(configPath, "utf-8");
       } catch {
         beforeContent = "";
       }
@@ -21775,6 +24148,34 @@ class HostdServer {
 `);
       return await pending;
     }
+    const rate = this.checkConfigEditRate(callerName, Date.now());
+    if (!rate.ok) {
+      const retryAtIso = new Date(rate.retryAtMs).toISOString();
+      process.stderr.write(`hostd: config_propose_edit — RATE-LIMITED ${callerName} ` + `(>${rate.limit}/hour); next slot ${retryAtIso}
+`);
+      this.appendAuditRow({
+        ts: new Date().toISOString(),
+        op: "config_propose_edit",
+        phase: "rate_limited",
+        request_id: req.request_id,
+        caller: caller.kind === "agent" ? { kind: "agent", name: caller.name } : { kind: "operator" },
+        result: "denied",
+        exit_code: null,
+        duration_ms: Date.now() - started,
+        error: `E_RATE_LIMITED: >${rate.limit} config_propose_edit cards/hour`
+      });
+      return err("E_RATE_LIMITED", `config_propose_edit rate limit exceeded (max ${rate.limit}/hour for this agent)`).why(`next slot opens at ${retryAtIso}`).fixRetryAfter(retryAtIso).op("config_propose_edit").caller(caller.kind === "agent" ? "agent" : "operator").agentName(caller.kind === "agent" ? caller.name : undefined).asDenied().build(req.request_id, Date.now() - started);
+    }
+    this.appendAuditRow({
+      ts: new Date().toISOString(),
+      op: "config_propose_edit",
+      phase: "requested",
+      request_id: req.request_id,
+      caller: caller.kind === "agent" ? { kind: "agent", name: caller.name } : { kind: "operator" },
+      result: "started",
+      exit_code: null,
+      duration_ms: Date.now() - started
+    });
     const run = this.runConfigProposeApprovalAndApply(req, caller, callerName, configPath, verdict.postApplyContent, started);
     this.inflightConfigProposals.set(dedupeKey, run);
     try {
@@ -21784,6 +24185,22 @@ class HostdServer {
     }
   }
   inflightConfigProposals = new Map;
+  configEditPostTimes = new Map;
+  static DEFAULT_CONFIG_EDIT_RATE_PER_HOUR = 3;
+  checkConfigEditRate(callerName, now) {
+    const limit = this.opts.config.hostd?.config_edit_rate_per_hour ?? HostdServer.DEFAULT_CONFIG_EDIT_RATE_PER_HOUR;
+    const windowMs = 60 * 60 * 1000;
+    const cutoff = now - windowMs;
+    const prior = (this.configEditPostTimes.get(callerName) ?? []).filter((t) => t > cutoff);
+    if (prior.length >= limit) {
+      const retryAtMs = prior[0] + windowMs;
+      this.configEditPostTimes.set(callerName, prior);
+      return { ok: false, limit, retryAtMs };
+    }
+    prior.push(now);
+    this.configEditPostTimes.set(callerName, prior);
+    return { ok: true };
+  }
   async runConfigProposeApprovalAndApply(req, caller, callerName, configPath, postApply, started) {
     const approvalId = (this.opts.generateApprovalId ?? defaultApprovalId)();
     const approval = await this.opts.approvalGateway.requestApproval({
@@ -21813,7 +24230,7 @@ class HostdServer {
     try {
       let snapshot;
       try {
-        snapshot = readFileSync5(configPath, "utf-8");
+        snapshot = readFileSync6(configPath, "utf-8");
       } catch (e) {
         await approval.finalize({
           outcome: "reconcile_failed_rolled_back",
@@ -22007,7 +24424,7 @@ class HostdServer {
       const agentsDir = resolveAgentsDir(cfg);
       const recentByAgent = {};
       for (const agent of new Set(entries.map((e) => e.agent))) {
-        const rows = readRecentFires(resolve5(agentsDir, agent, "scheduler.jsonl"));
+        const rows = readRecentFires(resolve6(agentsDir, agent, "scheduler.jsonl"));
         if (rows.length > 0)
           recentByAgent[agent] = rows;
       }
@@ -22032,7 +24449,7 @@ class HostdServer {
     }
   }
   runDocker(args) {
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       const bin = this.opts.dockerBin ?? "docker";
       const child = spawn2(bin, args, {
         stdio: ["ignore", "pipe", "pipe"],
@@ -22047,15 +24464,15 @@ class HostdServer {
         stderr += d.toString("utf8");
       });
       child.on("error", (err2) => reject(err2));
-      child.on("close", (code) => resolve6({ exit_code: code ?? -1, stdout, stderr }));
+      child.on("close", (code) => resolve7({ exit_code: code ?? -1, stdout, stderr }));
     });
   }
   imageRefsForDigestCapture() {
     if (this.opts.imageRefsForDigests)
       return this.opts.imageRefsForDigests();
     try {
-      const composePath = join3(this.opts.bindRoot ?? this.opts.homeDir, ".switchroom", "compose", "docker-compose.yml");
-      if (!existsSync7(composePath))
+      const composePath = join5(this.opts.bindRoot ?? this.opts.homeDir, ".switchroom", "compose", "docker-compose.yml");
+      if (!existsSync8(composePath))
         return [];
       const r = spawnSync3("docker", [
         "compose",
@@ -22081,18 +24498,59 @@ class HostdServer {
     const ageMs = Date.now() - inFlight.started_at;
     return deniedResponse(request_id, `${op}: fleet-mutation lock held by ${inFlight.op} ` + `(request_id "${inFlight.request_id}", running ${Math.floor(ageMs / 1000)}s). ` + `Wait for it to complete (poll get_status with target_request_id="${inFlight.request_id}") ` + `before issuing another fleet mutation.`, Date.now() - started);
   }
-  spawnFleetMutation(op, args, entry) {
-    this.runSwitchroom(args).then((res) => {
+  spawnFleetMutation(op, args, entry, extraEnv) {
+    this.runSwitchroom(args, extraEnv).then((res) => {
       entry.result = res.exit_code === 0 ? "completed" : "error";
       entry.exit_code = res.exit_code;
       entry.finished_at = Date.now();
       entry.stdout_tail = tail(res.stdout);
       entry.stderr_tail = tail(res.stderr);
+      if (op === "update_apply") {
+        const parsed = parseUpdateResultLine(res.stdout);
+        if (parsed && parsed.deferred.length > 0) {
+          entry.deferred = parsed.deferred;
+        }
+      }
+    }).catch((err2) => {
+      entry.result = "error";
+      entry.exit_code = null;
+      entry.finished_at = Date.now();
+      entry.error = err2.message;
+    }).finally(() => {
+      this.writeTerminalAudit(entry);
+      if (this.fleetMutationInFlight && this.fleetMutationInFlight.request_id === entry.request_id) {
+        this.fleetMutationInFlight = null;
+      }
+    });
+  }
+  spawnRollout(args, entry) {
+    this.runSwitchroom(args, { SWITCHROOM_HOSTD_CONTEXT: "1" }).then((res) => {
+      entry.exit_code = res.exit_code;
+      entry.finished_at = Date.now();
+      entry.stdout_tail = tail(res.stdout);
+      entry.stderr_tail = tail(res.stderr);
+      const parsed = parseRolloutResultLine(res.stdout);
+      if (parsed) {
+        entry.rolled = parsed.rolled;
+        if (parsed.failedStep)
+          entry.failed_step = parsed.failedStep;
+        if (parsed.failedAgent)
+          entry.failed_agent = parsed.failedAgent;
+        if (parsed.got !== undefined)
+          entry.got = parsed.got;
+        entry.result = parsed.ok ? "completed" : "error";
+      } else {
+        entry.result = res.exit_code === 0 ? "completed" : "error";
+      }
+      if (entry.result !== "completed") {
+        delete entry.prior_pin;
+      }
     }).catch((err2) => {
       entry.result = "error";
       entry.exit_code = null;
       entry.finished_at = Date.now();
       entry.error = err2.message;
+      delete entry.prior_pin;
     }).finally(() => {
       this.writeTerminalAudit(entry);
       if (this.fleetMutationInFlight && this.fleetMutationInFlight.request_id === entry.request_id) {
@@ -22110,6 +24568,19 @@ class HostdServer {
     return this.statusEntryToResponse(req.request_id, entry);
   }
   statusEntryToResponse(request_id, entry) {
+    const rolloutPayload = entry.op === "rollout" && (entry.rolled !== undefined || entry.failed_step !== undefined || entry.failed_agent !== undefined) ? JSON.stringify({
+      rolled: entry.rolled ?? [],
+      ...entry.failed_step ? { failedStep: entry.failed_step } : {},
+      ...entry.failed_agent ? { failedAgent: entry.failed_agent } : {},
+      ...entry.got !== undefined ? { got: entry.got } : {},
+      ...entry.pin ? { pin: entry.pin } : {}
+    }) : undefined;
+    const updatePayload = entry.op === "update_apply" && (entry.deferred !== undefined || entry.channel !== undefined || entry.pin !== undefined) ? {
+      ...entry.deferred !== undefined ? { deferred: entry.deferred } : {},
+      ...entry.pin !== undefined ? { pin: entry.pin } : {},
+      ...entry.channel !== undefined ? { channel: entry.channel } : {}
+    } : null;
+    const payload = rolloutPayload ?? (updatePayload ? JSON.stringify(updatePayload) : undefined);
     return {
       v: 1,
       request_id,
@@ -22118,6 +24589,7 @@ class HostdServer {
       duration_ms: (entry.finished_at ?? Date.now()) - entry.started_at,
       stdout_tail: entry.stdout_tail || undefined,
       stderr_tail: entry.stderr_tail || undefined,
+      ...payload ? { payload } : {},
       error: entry.error
     };
   }
@@ -22141,12 +24613,12 @@ class HostdServer {
     }
   }
   auditLogPath() {
-    return this.opts.auditLogPath ?? join3(this.opts.homeDir, ".switchroom", "host-control-audit.log");
+    return this.opts.auditLogPath ?? join5(this.opts.homeDir, ".switchroom", "host-control-audit.log");
   }
   appendAuditRow(row) {
     const path2 = this.auditLogPath();
     this.auditAppendChain = this.auditAppendChain.then(async () => {
-      await mkdir(dirname4(path2), { recursive: true }).catch(() => {
+      await mkdir(dirname6(path2), { recursive: true }).catch(() => {
         return;
       });
       if (this.auditChainState === undefined) {
@@ -22194,15 +24666,21 @@ class HostdServer {
       ...entry.channel ? { channel: entry.channel } : {},
       ...entry.pin ? { pin: entry.pin } : {},
       ...entry.resolved_sha ? { resolved_sha: entry.resolved_sha } : {},
-      ...entry.install_context ? { install_context: entry.install_context } : {}
+      ...entry.install_context ? { install_context: entry.install_context } : {},
+      ...entry.rolled ? { rolled: entry.rolled } : {},
+      ...entry.failed_step ? { failed_step: entry.failed_step } : {},
+      ...entry.failed_agent ? { failed_agent: entry.failed_agent } : {},
+      ...entry.got !== undefined ? { got: entry.got } : {},
+      ...entry.deferred ? { deferred: entry.deferred } : {},
+      ...entry.prior_pin ? { prior_pin: entry.prior_pin } : {}
     });
   }
-  runSwitchroom(args) {
-    return new Promise((resolve6, reject) => {
+  runSwitchroom(args, extraEnv) {
+    return new Promise((resolve7, reject) => {
       const bin = this.opts.switchroomBin ?? "switchroom";
       const child = spawn2(bin, args, {
         stdio: ["ignore", "pipe", "pipe"],
-        env: { ...process.env }
+        env: { ...process.env, ...extraEnv ?? {} }
       });
       let stdout = "";
       let stderr = "";
@@ -22213,7 +24691,7 @@ class HostdServer {
         stderr += d.toString("utf8");
       });
       child.on("error", (err2) => reject(err2));
-      child.on("close", (code) => resolve6({ exit_code: code ?? -1, stdout, stderr }));
+      child.on("close", (code) => resolve7({ exit_code: code ?? -1, stdout, stderr }));
     });
   }
 }
@@ -22341,7 +24819,7 @@ class SocketApprovalGateway {
         finalize: async () => {}
       };
     }
-    return await new Promise((resolve6) => {
+    return await new Promise((resolve7) => {
       const client2 = connect({ path: sockPath });
       let buffer = "";
       let resolved = false;
@@ -22380,7 +24858,7 @@ class SocketApprovalGateway {
             return;
           resolved = true;
           log(`request_config_approval write failed (requestId=${req.requestId}): ${err2.message}`);
-          resolve6({
+          resolve7({
             verdict: "deny",
             reason: `request_config_approval write failed: ${err2.message}`,
             denySource: "dispatch_failure",
@@ -22409,7 +24887,7 @@ class SocketApprovalGateway {
             const verdict = obj.verdict;
             const reasonField = typeof obj.reason === "string" ? obj.reason : undefined;
             const denySource = verdict === "deny" ? obj.denySource === "dispatch_failure" ? "dispatch_failure" : "operator" : undefined;
-            resolve6({
+            resolve7({
               verdict,
               ...reasonField !== undefined ? { reason: reasonField } : {},
               ...denySource !== undefined ? { denySource } : {},
@@ -22423,7 +24901,7 @@ class SocketApprovalGateway {
           return;
         resolved = true;
         log(`gateway socket error (requestId=${req.requestId}): ${err2.message}`);
-        resolve6({
+        resolve7({
           verdict: "deny",
           reason: `gateway socket error: ${err2.message}`,
           denySource: "dispatch_failure",
@@ -22434,7 +24912,7 @@ class SocketApprovalGateway {
         if (resolved)
           return;
         resolved = true;
-        resolve6({
+        resolve7({
           verdict: "deny",
           reason: "gateway socket closed before verdict",
           denySource: "dispatch_failure",
@@ -22709,17 +25187,17 @@ async function main() {
 `);
     process.exit(2);
   }
-  const agentsDir = process.env.SWITCHROOM_AGENTS_DIR ?? join4(homedir3(), ".switchroom", "agents");
+  const agentsDir = process.env.SWITCHROOM_AGENTS_DIR ?? join6(homedir4(), ".switchroom", "agents");
   const approvalGateway = new SocketApprovalGateway({
     resolveGatewaySocket: (agentName) => {
-      const sock = resolve6(agentsDir, agentName, "telegram", "gateway.sock");
-      return existsSync8(sock) ? sock : null;
+      const sock = resolve7(agentsDir, agentName, "telegram", "gateway.sock");
+      return existsSync9(sock) ? sock : null;
     },
     log: (m) => process.stderr.write(`hostd: approval-gateway — ${m}
 `)
   });
   const server = new HostdServer({
-    homeDir: homedir3(),
+    homeDir: homedir4(),
     agentUids,
     config: {
       agents: Object.fromEntries(Object.entries(config.agents).map(([n, a]) => [
@@ -22741,7 +25219,7 @@ async function main() {
   let releaseWatcher = null;
   const autoRel = config.host_control?.auto_release_check;
   if (autoRel?.enabled === true) {
-    const eventsLog = join4(homedir3(), ".switchroom", "release-watcher-events.jsonl");
+    const eventsLog = join6(homedir4(), ".switchroom", "release-watcher-events.jsonl");
     releaseWatcher = new ReleaseWatcher({
       intervalMs: autoRel.interval_minutes * 60000,
       checkFn: makeReleaseCheck({