switchroom 0.16.29 → 0.16.46

package/dist/host-control/main.js

@@ -46,7 +46,7 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/identity.js
+// node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS((exports) => {
   var ALIAS = Symbol.for("yaml.alias");
   var DOC = Symbol.for("yaml.document");
@@ -100,7 +100,7 @@ var require_identity = __commonJS((exports) => {
   exports.isSeq = isSeq;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/visit.js
+// node_modules/yaml/dist/visit.js
 var require_visit = __commonJS((exports) => {
   var identity = require_identity();
   var BREAK = Symbol("break visit");
@@ -255,7 +255,7 @@ var require_visit = __commonJS((exports) => {
   exports.visitAsync = visitAsync;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/doc/directives.js
+// node_modules/yaml/dist/doc/directives.js
 var require_directives = __commonJS((exports) => {
   var identity = require_identity();
   var visit = require_visit();
@@ -407,7 +407,7 @@ var require_directives = __commonJS((exports) => {
   exports.Directives = Directives;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/doc/anchors.js
+// node_modules/yaml/dist/doc/anchors.js
 var require_anchors = __commonJS((exports) => {
   var identity = require_identity();
   var visit = require_visit();
@@ -469,7 +469,7 @@ var require_anchors = __commonJS((exports) => {
   exports.findNewAnchor = findNewAnchor;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/doc/applyReviver.js
+// node_modules/yaml/dist/doc/applyReviver.js
 var require_applyReviver = __commonJS((exports) => {
   function applyReviver(reviver, obj, key, val) {
     if (val && typeof val === "object") {
@@ -516,7 +516,7 @@ var require_applyReviver = __commonJS((exports) => {
   exports.applyReviver = applyReviver;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/toJS.js
+// node_modules/yaml/dist/nodes/toJS.js
 var require_toJS = __commonJS((exports) => {
   var identity = require_identity();
   function toJS(value, arg, ctx) {
@@ -543,7 +543,7 @@ var require_toJS = __commonJS((exports) => {
   exports.toJS = toJS;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/Node.js
+// node_modules/yaml/dist/nodes/Node.js
 var require_Node = __commonJS((exports) => {
   var applyReviver = require_applyReviver();
   var identity = require_identity();
@@ -580,7 +580,7 @@ var require_Node = __commonJS((exports) => {
   exports.NodeBase = NodeBase;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/Alias.js
+// node_modules/yaml/dist/nodes/Alias.js
 var require_Alias = __commonJS((exports) => {
   var anchors = require_anchors();
   var visit = require_visit();
@@ -688,7 +688,7 @@ var require_Alias = __commonJS((exports) => {
   exports.Alias = Alias;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/Scalar.js
+// node_modules/yaml/dist/nodes/Scalar.js
 var require_Scalar = __commonJS((exports) => {
   var identity = require_identity();
   var Node = require_Node();
@@ -716,7 +716,7 @@ var require_Scalar = __commonJS((exports) => {
   exports.isScalarValue = isScalarValue;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/doc/createNode.js
+// node_modules/yaml/dist/doc/createNode.js
 var require_createNode = __commonJS((exports) => {
   var Alias = require_Alias();
   var identity = require_identity();
@@ -788,7 +788,7 @@ var require_createNode = __commonJS((exports) => {
   exports.createNode = createNode;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/Collection.js
+// node_modules/yaml/dist/nodes/Collection.js
 var require_Collection = __commonJS((exports) => {
   var createNode = require_createNode();
   var identity = require_identity();
@@ -903,7 +903,7 @@ var require_Collection = __commonJS((exports) => {
   exports.isEmptyPath = isEmptyPath;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/stringify/stringifyComment.js
+// node_modules/yaml/dist/stringify/stringifyComment.js
 var require_stringifyComment = __commonJS((exports) => {
   var stringifyComment = (str) => str.replace(/^(?!$)(?: $)?/gm, "#");
   function indentComment(comment, indent) {
@@ -920,7 +920,7 @@ var require_stringifyComment = __commonJS((exports) => {
   exports.stringifyComment = stringifyComment;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/stringify/foldFlowLines.js
+// node_modules/yaml/dist/stringify/foldFlowLines.js
 var require_foldFlowLines = __commonJS((exports) => {
   var FOLD_FLOW = "flow";
   var FOLD_BLOCK = "block";
@@ -1057,7 +1057,7 @@ ${indent}${text.slice(fold + 1, end2)}`;
   exports.foldFlowLines = foldFlowLines;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/stringify/stringifyString.js
+// node_modules/yaml/dist/stringify/stringifyString.js
 var require_stringifyString = __commonJS((exports) => {
   var Scalar = require_Scalar();
   var foldFlowLines = require_foldFlowLines();
@@ -1355,7 +1355,7 @@ ${indent}`);
   exports.stringifyString = stringifyString;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/stringify/stringify.js
+// node_modules/yaml/dist/stringify/stringify.js
 var require_stringify = __commonJS((exports) => {
   var anchors = require_anchors();
   var identity = require_identity();
@@ -1476,7 +1476,7 @@ ${ctx.indent}${str}`;
   exports.stringify = stringify;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/stringify/stringifyPair.js
+// node_modules/yaml/dist/stringify/stringifyPair.js
 var require_stringifyPair = __commonJS((exports) => {
   var identity = require_identity();
   var Scalar = require_Scalar();
@@ -1612,7 +1612,7 @@ ${ctx.indent}`;
   exports.stringifyPair = stringifyPair;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/log.js
+// node_modules/yaml/dist/log.js
 var require_log = __commonJS((exports) => {
   var node_process = __require("process");
   function debug(logLevel, ...messages) {
@@ -1631,7 +1631,7 @@ var require_log = __commonJS((exports) => {
   exports.warn = warn;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/yaml-1.1/merge.js
+// node_modules/yaml/dist/schema/yaml-1.1/merge.js
 var require_merge = __commonJS((exports) => {
   var identity = require_identity();
   var Scalar = require_Scalar();
@@ -1685,7 +1685,7 @@ var require_merge = __commonJS((exports) => {
   exports.merge = merge;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/addPairToJSMap.js
+// node_modules/yaml/dist/nodes/addPairToJSMap.js
 var require_addPairToJSMap = __commonJS((exports) => {
   var log = require_log();
   var merge = require_merge();
@@ -1746,7 +1746,7 @@ var require_addPairToJSMap = __commonJS((exports) => {
   exports.addPairToJSMap = addPairToJSMap;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/Pair.js
+// node_modules/yaml/dist/nodes/Pair.js
 var require_Pair = __commonJS((exports) => {
   var createNode = require_createNode();
   var stringifyPair = require_stringifyPair();
@@ -1784,7 +1784,7 @@ var require_Pair = __commonJS((exports) => {
   exports.createPair = createPair;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/stringify/stringifyCollection.js
+// node_modules/yaml/dist/stringify/stringifyCollection.js
 var require_stringifyCollection = __commonJS((exports) => {
   var identity = require_identity();
   var stringify = require_stringify();
@@ -1936,7 +1936,7 @@ ${indent}${end}`;
   exports.stringifyCollection = stringifyCollection;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/YAMLMap.js
+// node_modules/yaml/dist/nodes/YAMLMap.js
 var require_YAMLMap = __commonJS((exports) => {
   var stringifyCollection = require_stringifyCollection();
   var addPairToJSMap = require_addPairToJSMap();
@@ -2063,7 +2063,7 @@ var require_YAMLMap = __commonJS((exports) => {
   exports.findPair = findPair;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/common/map.js
+// node_modules/yaml/dist/schema/common/map.js
 var require_map = __commonJS((exports) => {
   var identity = require_identity();
   var YAMLMap = require_YAMLMap();
@@ -2082,7 +2082,7 @@ var require_map = __commonJS((exports) => {
   exports.map = map;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/YAMLSeq.js
+// node_modules/yaml/dist/nodes/YAMLSeq.js
 var require_YAMLSeq = __commonJS((exports) => {
   var createNode = require_createNode();
   var stringifyCollection = require_stringifyCollection();
@@ -2175,7 +2175,7 @@ var require_YAMLSeq = __commonJS((exports) => {
   exports.YAMLSeq = YAMLSeq;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/common/seq.js
+// node_modules/yaml/dist/schema/common/seq.js
 var require_seq = __commonJS((exports) => {
   var identity = require_identity();
   var YAMLSeq = require_YAMLSeq();
@@ -2194,7 +2194,7 @@ var require_seq = __commonJS((exports) => {
   exports.seq = seq;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/common/string.js
+// node_modules/yaml/dist/schema/common/string.js
 var require_string = __commonJS((exports) => {
   var stringifyString = require_stringifyString();
   var string = {
@@ -2210,7 +2210,7 @@ var require_string = __commonJS((exports) => {
   exports.string = string;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/common/null.js
+// node_modules/yaml/dist/schema/common/null.js
 var require_null = __commonJS((exports) => {
   var Scalar = require_Scalar();
   var nullTag = {
@@ -2225,7 +2225,7 @@ var require_null = __commonJS((exports) => {
   exports.nullTag = nullTag;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/core/bool.js
+// node_modules/yaml/dist/schema/core/bool.js
 var require_bool = __commonJS((exports) => {
   var Scalar = require_Scalar();
   var boolTag = {
@@ -2246,7 +2246,7 @@ var require_bool = __commonJS((exports) => {
   exports.boolTag = boolTag;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/stringify/stringifyNumber.js
+// node_modules/yaml/dist/stringify/stringifyNumber.js
 var require_stringifyNumber = __commonJS((exports) => {
   function stringifyNumber({ format, minFractionDigits, tag, value }) {
     if (typeof value === "bigint")
@@ -2270,7 +2270,7 @@ var require_stringifyNumber = __commonJS((exports) => {
   exports.stringifyNumber = stringifyNumber;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/core/float.js
+// node_modules/yaml/dist/schema/core/float.js
 var require_float = __commonJS((exports) => {
   var Scalar = require_Scalar();
   var stringifyNumber = require_stringifyNumber();
@@ -2313,7 +2313,7 @@ var require_float = __commonJS((exports) => {
   exports.floatNaN = floatNaN;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/core/int.js
+// node_modules/yaml/dist/schema/core/int.js
 var require_int = __commonJS((exports) => {
   var stringifyNumber = require_stringifyNumber();
   var intIdentify = (value) => typeof value === "bigint" || Number.isInteger(value);
@@ -2355,7 +2355,7 @@ var require_int = __commonJS((exports) => {
   exports.intOct = intOct;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/core/schema.js
+// node_modules/yaml/dist/schema/core/schema.js
 var require_schema = __commonJS((exports) => {
   var map = require_map();
   var _null = require_null();
@@ -2380,7 +2380,7 @@ var require_schema = __commonJS((exports) => {
   exports.schema = schema;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/json/schema.js
+// node_modules/yaml/dist/schema/json/schema.js
 var require_schema2 = __commonJS((exports) => {
   var Scalar = require_Scalar();
   var map = require_map();
@@ -2444,7 +2444,7 @@ var require_schema2 = __commonJS((exports) => {
   exports.schema = schema;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/yaml-1.1/binary.js
+// node_modules/yaml/dist/schema/yaml-1.1/binary.js
 var require_binary = __commonJS((exports) => {
   var node_buffer = __require("buffer");
   var Scalar = require_Scalar();
@@ -2499,7 +2499,7 @@ var require_binary = __commonJS((exports) => {
   exports.binary = binary;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/yaml-1.1/pairs.js
+// node_modules/yaml/dist/schema/yaml-1.1/pairs.js
 var require_pairs = __commonJS((exports) => {
   var identity = require_identity();
   var Pair = require_Pair();
@@ -2574,7 +2574,7 @@ ${cn.comment}` : item.comment;
   exports.resolvePairs = resolvePairs;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/yaml-1.1/omap.js
+// node_modules/yaml/dist/schema/yaml-1.1/omap.js
 var require_omap = __commonJS((exports) => {
   var identity = require_identity();
   var toJS = require_toJS();
@@ -2646,7 +2646,7 @@ var require_omap = __commonJS((exports) => {
   exports.omap = omap;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/yaml-1.1/bool.js
+// node_modules/yaml/dist/schema/yaml-1.1/bool.js
 var require_bool2 = __commonJS((exports) => {
   var Scalar = require_Scalar();
   function boolStringify({ value, source }, ctx) {
@@ -2675,7 +2675,7 @@ var require_bool2 = __commonJS((exports) => {
   exports.trueTag = trueTag;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/yaml-1.1/float.js
+// node_modules/yaml/dist/schema/yaml-1.1/float.js
 var require_float2 = __commonJS((exports) => {
   var Scalar = require_Scalar();
   var stringifyNumber = require_stringifyNumber();
@@ -2721,7 +2721,7 @@ var require_float2 = __commonJS((exports) => {
   exports.floatNaN = floatNaN;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/yaml-1.1/int.js
+// node_modules/yaml/dist/schema/yaml-1.1/int.js
 var require_int2 = __commonJS((exports) => {
   var stringifyNumber = require_stringifyNumber();
   var intIdentify = (value) => typeof value === "bigint" || Number.isInteger(value);
@@ -2797,7 +2797,7 @@ var require_int2 = __commonJS((exports) => {
   exports.intOct = intOct;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/yaml-1.1/set.js
+// node_modules/yaml/dist/schema/yaml-1.1/set.js
 var require_set = __commonJS((exports) => {
   var identity = require_identity();
   var Pair = require_Pair();
@@ -2880,7 +2880,7 @@ var require_set = __commonJS((exports) => {
   exports.set = set;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/yaml-1.1/timestamp.js
+// node_modules/yaml/dist/schema/yaml-1.1/timestamp.js
 var require_timestamp = __commonJS((exports) => {
   var stringifyNumber = require_stringifyNumber();
   function parseSexagesimal(str, asBigInt) {
@@ -2962,7 +2962,7 @@ var require_timestamp = __commonJS((exports) => {
   exports.timestamp = timestamp;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/yaml-1.1/schema.js
+// node_modules/yaml/dist/schema/yaml-1.1/schema.js
 var require_schema3 = __commonJS((exports) => {
   var map = require_map();
   var _null = require_null();
@@ -3003,7 +3003,7 @@ var require_schema3 = __commonJS((exports) => {
   exports.schema = schema;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/tags.js
+// node_modules/yaml/dist/schema/tags.js
 var require_tags = __commonJS((exports) => {
   var map = require_map();
   var _null = require_null();
@@ -3094,7 +3094,7 @@ var require_tags = __commonJS((exports) => {
   exports.getTags = getTags;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/schema/Schema.js
+// node_modules/yaml/dist/schema/Schema.js
 var require_Schema = __commonJS((exports) => {
   var identity = require_identity();
   var map = require_map();
@@ -3124,7 +3124,7 @@ var require_Schema = __commonJS((exports) => {
   exports.Schema = Schema;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/stringify/stringifyDocument.js
+// node_modules/yaml/dist/stringify/stringifyDocument.js
 var require_stringifyDocument = __commonJS((exports) => {
   var identity = require_identity();
   var stringify = require_stringify();
@@ -3204,7 +3204,7 @@ var require_stringifyDocument = __commonJS((exports) => {
   exports.stringifyDocument = stringifyDocument;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/doc/Document.js
+// node_modules/yaml/dist/doc/Document.js
 var require_Document = __commonJS((exports) => {
   var Alias = require_Alias();
   var Collection = require_Collection();
@@ -3439,7 +3439,7 @@ var require_Document = __commonJS((exports) => {
   exports.Document = Document;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/errors.js
+// node_modules/yaml/dist/errors.js
 var require_errors = __commonJS((exports) => {
   class YAMLError extends Error {
     constructor(name, pos, code, message) {
@@ -3504,7 +3504,7 @@ ${pointer}
   exports.prettifyError = prettifyError;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/resolve-props.js
+// node_modules/yaml/dist/compose/resolve-props.js
 var require_resolve_props = __commonJS((exports) => {
   function resolveProps(tokens, { flow, indicator, next, offset, onError, parentIndent, startOnNewline }) {
     let spaceBefore = false;
@@ -3634,7 +3634,7 @@ var require_resolve_props = __commonJS((exports) => {
   exports.resolveProps = resolveProps;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/util-contains-newline.js
+// node_modules/yaml/dist/compose/util-contains-newline.js
 var require_util_contains_newline = __commonJS((exports) => {
   function containsNewline(key) {
     if (!key)
@@ -3674,7 +3674,7 @@ var require_util_contains_newline = __commonJS((exports) => {
   exports.containsNewline = containsNewline;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/util-flow-indent-check.js
+// node_modules/yaml/dist/compose/util-flow-indent-check.js
 var require_util_flow_indent_check = __commonJS((exports) => {
   var utilContainsNewline = require_util_contains_newline();
   function flowIndentCheck(indent, fc, onError) {
@@ -3689,7 +3689,7 @@ var require_util_flow_indent_check = __commonJS((exports) => {
   exports.flowIndentCheck = flowIndentCheck;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/util-map-includes.js
+// node_modules/yaml/dist/compose/util-map-includes.js
 var require_util_map_includes = __commonJS((exports) => {
   var identity = require_identity();
   function mapIncludes(ctx, items, search) {
@@ -3702,7 +3702,7 @@ var require_util_map_includes = __commonJS((exports) => {
   exports.mapIncludes = mapIncludes;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/resolve-block-map.js
+// node_modules/yaml/dist/compose/resolve-block-map.js
 var require_resolve_block_map = __commonJS((exports) => {
   var Pair = require_Pair();
   var YAMLMap = require_YAMLMap();
@@ -3809,7 +3809,7 @@ var require_resolve_block_map = __commonJS((exports) => {
   exports.resolveBlockMap = resolveBlockMap;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/resolve-block-seq.js
+// node_modules/yaml/dist/compose/resolve-block-seq.js
 var require_resolve_block_seq = __commonJS((exports) => {
   var YAMLSeq = require_YAMLSeq();
   var resolveProps = require_resolve_props();
@@ -3857,7 +3857,7 @@ var require_resolve_block_seq = __commonJS((exports) => {
   exports.resolveBlockSeq = resolveBlockSeq;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/resolve-end.js
+// node_modules/yaml/dist/compose/resolve-end.js
 var require_resolve_end = __commonJS((exports) => {
   function resolveEnd(end, offset, reqSpace, onError) {
     let comment = "";
@@ -3897,7 +3897,7 @@ var require_resolve_end = __commonJS((exports) => {
   exports.resolveEnd = resolveEnd;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/resolve-flow-collection.js
+// node_modules/yaml/dist/compose/resolve-flow-collection.js
 var require_resolve_flow_collection = __commonJS((exports) => {
   var identity = require_identity();
   var Pair = require_Pair();
@@ -4088,7 +4088,7 @@ var require_resolve_flow_collection = __commonJS((exports) => {
   exports.resolveFlowCollection = resolveFlowCollection;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/compose-collection.js
+// node_modules/yaml/dist/compose/compose-collection.js
 var require_compose_collection = __commonJS((exports) => {
   var identity = require_identity();
   var Scalar = require_Scalar();
@@ -4150,7 +4150,7 @@ var require_compose_collection = __commonJS((exports) => {
   exports.composeCollection = composeCollection;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/resolve-block-scalar.js
+// node_modules/yaml/dist/compose/resolve-block-scalar.js
 var require_resolve_block_scalar = __commonJS((exports) => {
   var Scalar = require_Scalar();
   function resolveBlockScalar(ctx, scalar, onError) {
@@ -4343,7 +4343,7 @@ var require_resolve_block_scalar = __commonJS((exports) => {
   exports.resolveBlockScalar = resolveBlockScalar;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/resolve-flow-scalar.js
+// node_modules/yaml/dist/compose/resolve-flow-scalar.js
 var require_resolve_flow_scalar = __commonJS((exports) => {
   var Scalar = require_Scalar();
   var resolveEnd = require_resolve_end();
@@ -4559,7 +4559,7 @@ var require_resolve_flow_scalar = __commonJS((exports) => {
   exports.resolveFlowScalar = resolveFlowScalar;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/compose-scalar.js
+// node_modules/yaml/dist/compose/compose-scalar.js
 var require_compose_scalar = __commonJS((exports) => {
   var identity = require_identity();
   var Scalar = require_Scalar();
@@ -4637,7 +4637,7 @@ var require_compose_scalar = __commonJS((exports) => {
   exports.composeScalar = composeScalar;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/util-empty-scalar-position.js
+// node_modules/yaml/dist/compose/util-empty-scalar-position.js
 var require_util_empty_scalar_position = __commonJS((exports) => {
   function emptyScalarPosition(offset, before, pos) {
     if (before) {
@@ -4664,7 +4664,7 @@ var require_util_empty_scalar_position = __commonJS((exports) => {
   exports.emptyScalarPosition = emptyScalarPosition;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/compose-node.js
+// node_modules/yaml/dist/compose/compose-node.js
 var require_compose_node = __commonJS((exports) => {
   var Alias = require_Alias();
   var identity = require_identity();
@@ -4767,7 +4767,7 @@ var require_compose_node = __commonJS((exports) => {
   exports.composeNode = composeNode;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/compose-doc.js
+// node_modules/yaml/dist/compose/compose-doc.js
 var require_compose_doc = __commonJS((exports) => {
   var Document = require_Document();
   var composeNode = require_compose_node();
@@ -4807,7 +4807,7 @@ var require_compose_doc = __commonJS((exports) => {
   exports.composeDoc = composeDoc;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/compose/composer.js
+// node_modules/yaml/dist/compose/composer.js
 var require_composer = __commonJS((exports) => {
   var node_process = __require("process");
   var directives = require_directives();
@@ -4996,7 +4996,7 @@ ${end.comment}` : end.comment;
   exports.Composer = Composer;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/parse/cst-scalar.js
+// node_modules/yaml/dist/parse/cst-scalar.js
 var require_cst_scalar = __commonJS((exports) => {
   var resolveBlockScalar = require_resolve_block_scalar();
   var resolveFlowScalar = require_resolve_flow_scalar();
@@ -5186,7 +5186,7 @@ var require_cst_scalar = __commonJS((exports) => {
   exports.setScalarValue = setScalarValue;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/parse/cst-stringify.js
+// node_modules/yaml/dist/parse/cst-stringify.js
 var require_cst_stringify = __commonJS((exports) => {
   var stringify = (cst) => ("type" in cst) ? stringifyToken(cst) : stringifyItem(cst);
   function stringifyToken(token) {
@@ -5244,7 +5244,7 @@ var require_cst_stringify = __commonJS((exports) => {
   exports.stringify = stringify;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/parse/cst-visit.js
+// node_modules/yaml/dist/parse/cst-visit.js
 var require_cst_visit = __commonJS((exports) => {
   var BREAK = Symbol("break visit");
   var SKIP = Symbol("skip children");
@@ -5303,7 +5303,7 @@ var require_cst_visit = __commonJS((exports) => {
   exports.visit = visit;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/parse/cst.js
+// node_modules/yaml/dist/parse/cst.js
 var require_cst = __commonJS((exports) => {
   var cstScalar = require_cst_scalar();
   var cstStringify = require_cst_stringify();
@@ -5404,7 +5404,7 @@ var require_cst = __commonJS((exports) => {
   exports.tokenType = tokenType;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/parse/lexer.js
+// node_modules/yaml/dist/parse/lexer.js
 var require_lexer = __commonJS((exports) => {
   var cst = require_cst();
   function isEmpty(ch) {
@@ -5990,7 +5990,7 @@ var require_lexer = __commonJS((exports) => {
   exports.Lexer = Lexer;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/parse/line-counter.js
+// node_modules/yaml/dist/parse/line-counter.js
 var require_line_counter = __commonJS((exports) => {
   class LineCounter {
     constructor() {
@@ -6018,7 +6018,7 @@ var require_line_counter = __commonJS((exports) => {
   exports.LineCounter = LineCounter;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/parse/parser.js
+// node_modules/yaml/dist/parse/parser.js
 var require_parser = __commonJS((exports) => {
   var node_process = __require("process");
   var cst = require_cst();
@@ -6867,7 +6867,7 @@ var require_parser = __commonJS((exports) => {
   exports.Parser = Parser;
 });
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/public-api.js
+// node_modules/yaml/dist/public-api.js
 var require_public_api = __commonJS((exports) => {
   var composer = require_composer();
   var Document = require_Document();
@@ -6961,6 +6961,55 @@ var require_public_api = __commonJS((exports) => {
   exports.stringify = stringify;
 });
 
+// node_modules/yaml/dist/index.js
+var require_dist = __commonJS((exports) => {
+  var composer = require_composer();
+  var Document = require_Document();
+  var Schema = require_Schema();
+  var errors = require_errors();
+  var Alias = require_Alias();
+  var identity = require_identity();
+  var Pair = require_Pair();
+  var Scalar = require_Scalar();
+  var YAMLMap = require_YAMLMap();
+  var YAMLSeq = require_YAMLSeq();
+  var cst = require_cst();
+  var lexer = require_lexer();
+  var lineCounter = require_line_counter();
+  var parser = require_parser();
+  var publicApi = require_public_api();
+  var visit = require_visit();
+  exports.Composer = composer.Composer;
+  exports.Document = Document.Document;
+  exports.Schema = Schema.Schema;
+  exports.YAMLError = errors.YAMLError;
+  exports.YAMLParseError = errors.YAMLParseError;
+  exports.YAMLWarning = errors.YAMLWarning;
+  exports.Alias = Alias.Alias;
+  exports.isAlias = identity.isAlias;
+  exports.isCollection = identity.isCollection;
+  exports.isDocument = identity.isDocument;
+  exports.isMap = identity.isMap;
+  exports.isNode = identity.isNode;
+  exports.isPair = identity.isPair;
+  exports.isScalar = identity.isScalar;
+  exports.isSeq = identity.isSeq;
+  exports.Pair = Pair.Pair;
+  exports.Scalar = Scalar.Scalar;
+  exports.YAMLMap = YAMLMap.YAMLMap;
+  exports.YAMLSeq = YAMLSeq.YAMLSeq;
+  exports.CST = cst;
+  exports.Lexer = lexer.Lexer;
+  exports.LineCounter = lineCounter.LineCounter;
+  exports.Parser = parser.Parser;
+  exports.parse = publicApi.parse;
+  exports.parseAllDocuments = publicApi.parseAllDocuments;
+  exports.parseDocument = publicApi.parseDocument;
+  exports.stringify = publicApi.stringify;
+  exports.visit = visit.visit;
+  exports.visitAsync = visit.visitAsync;
+});
+
 // telegram-plugin/secret-detect/suppressor.ts
 function isSuppressed(text, start, end) {
   const left = Math.max(0, start - WINDOW);
@@ -7001,7 +7050,7 @@ function deriveSlug(inputs, existing) {
   return `${base}_${n}`;
 }
 
-// node_modules/.bun/boundary@2.0.0/node_modules/boundary/lib/index.js
+// node_modules/boundary/lib/index.js
 var require_lib = __commonJS((exports2) => {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.binarySearch = exports2.upperBound = exports2.lowerBound = exports2.compare = undefined;
@@ -7048,7 +7097,7 @@ var require_lib = __commonJS((exports2) => {
   exports2.binarySearch = binarySearch;
 });
 
-// node_modules/.bun/structured-source@4.0.0/node_modules/structured-source/lib/structured-source.js
+// node_modules/structured-source/lib/structured-source.js
 var require_structured_source = __commonJS((exports2) => {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.StructuredSource = undefined;
@@ -7103,13 +7152,13 @@ var require_structured_source = __commonJS((exports2) => {
   }
   exports2.StructuredSource = StructuredSource;
 });
-// node_modules/.bun/@secretlint+core@12.2.0/node_modules/@secretlint/core/module/SecretLintSourceCodeImpl.js
+// node_modules/@secretlint/core/module/SecretLintSourceCodeImpl.js
 var import_structured_source;
 var init_SecretLintSourceCodeImpl = __esm(() => {
   import_structured_source = __toESM(require_structured_source(), 1);
 });
 
-// node_modules/.bun/@secretlint+core@12.2.0/node_modules/@secretlint/core/module/helper/promise-event-emitter.js
+// node_modules/@secretlint/core/module/helper/promise-event-emitter.js
 class EventEmitter {
   #listeners = new Map;
   on(type, listener) {
@@ -7148,9 +7197,9 @@ class EventEmitter {
     return Array.from(this.#listeners.get(type) ?? []);
   }
 }
-// node_modules/.bun/@secretlint+core@12.2.0/node_modules/@secretlint/core/module/RuleContext.js
+// node_modules/@secretlint/core/module/RuleContext.js
 var init_RuleContext = () => {};
-// node_modules/.bun/@secretlint+profiler@12.2.0/node_modules/@secretlint/profiler/module/index.js
+// node_modules/@secretlint/profiler/module/index.js
 class SecretLintProfiler {
   perf;
   entries = [];
@@ -7207,7 +7256,7 @@ class SecretLintProfiler {
   }
 }
 
-// node_modules/.bun/@secretlint+profiler@12.2.0/node_modules/@secretlint/profiler/module/node.js
+// node_modules/@secretlint/profiler/module/node.js
 import perf_hooks from "node:perf_hooks";
 
 class NullPerformanceObserver {
@@ -7222,19 +7271,19 @@ var init_node = __esm(() => {
   });
 });
 
-// node_modules/.bun/@secretlint+core@12.2.0/node_modules/@secretlint/core/module/RunningEvents.js
+// node_modules/@secretlint/core/module/RunningEvents.js
 var init_RunningEvents = __esm(() => {
   init_node();
 });
 
-// node_modules/.bun/@secretlint+core@12.2.0/node_modules/@secretlint/core/module/RulePresetContext.js
+// node_modules/@secretlint/core/module/RulePresetContext.js
 var init_RulePresetContext = __esm(() => {
   init_RuleContext();
 });
-// node_modules/.bun/@secretlint+core@12.2.0/node_modules/@secretlint/core/module/messages/index.js
+// node_modules/@secretlint/core/module/messages/index.js
 var init_messages = () => {};
 
-// node_modules/.bun/ms@2.1.3/node_modules/ms/index.js
+// node_modules/ms/index.js
 var require_ms = __commonJS((exports2, module) => {
   var s = 1000;
   var m = s * 60;
@@ -7344,7 +7393,7 @@ var require_ms = __commonJS((exports2, module) => {
   }
 });
 
-// node_modules/.bun/debug@4.4.3/node_modules/debug/src/common.js
+// node_modules/debug/src/common.js
 var require_common = __commonJS((exports2, module) => {
   function setup(env) {
     createDebug.debug = createDebug;
@@ -7519,7 +7568,7 @@ var require_common = __commonJS((exports2, module) => {
   module.exports = setup;
 });
 
-// node_modules/.bun/debug@4.4.3/node_modules/debug/src/browser.js
+// node_modules/debug/src/browser.js
 var require_browser = __commonJS((exports2, module) => {
   exports2.formatArgs = formatArgs;
   exports2.save = save;
@@ -7679,7 +7728,7 @@ var require_browser = __commonJS((exports2, module) => {
   };
 });
 
-// node_modules/.bun/has-flag@4.0.0/node_modules/has-flag/index.js
+// node_modules/has-flag/index.js
 var require_has_flag = __commonJS((exports2, module) => {
   module.exports = (flag, argv = process.argv) => {
     const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
@@ -7689,7 +7738,7 @@ var require_has_flag = __commonJS((exports2, module) => {
   };
 });
 
-// node_modules/.bun/supports-color@7.2.0/node_modules/supports-color/index.js
+// node_modules/supports-color/index.js
 var require_supports_color = __commonJS((exports2, module) => {
   var os = __require("os");
   var tty = __require("tty");
@@ -7788,7 +7837,7 @@ var require_supports_color = __commonJS((exports2, module) => {
   };
 });
 
-// node_modules/.bun/debug@4.4.3/node_modules/debug/src/node.js
+// node_modules/debug/src/node.js
 var require_node = __commonJS((exports2, module) => {
   var tty = __require("tty");
   var util3 = __require("util");
@@ -7959,7 +8008,7 @@ var require_node = __commonJS((exports2, module) => {
   };
 });
 
-// node_modules/.bun/debug@4.4.3/node_modules/debug/src/index.js
+// node_modules/debug/src/index.js
 var require_src = __commonJS((exports2, module) => {
   if (typeof process === "undefined" || process.type === "renderer" || false || process.__nwjs) {
     module.exports = require_browser();
@@ -7968,7 +8017,7 @@ var require_src = __commonJS((exports2, module) => {
   }
 });
 
-// node_modules/.bun/@secretlint+core@12.2.0/node_modules/@secretlint/core/module/index.js
+// node_modules/@secretlint/core/module/index.js
 var import_debug, debug;
 var init_module = __esm(() => {
   init_SecretLintSourceCodeImpl();
@@ -7981,7 +8030,7 @@ var init_module = __esm(() => {
   debug = import_debug.default("@secretlint/core");
 });
 
-// node_modules/.bun/@secretlint+secretlint-rule-preset-recommend@12.2.0/node_modules/@secretlint/secretlint-rule-preset-recommend/module/index.js
+// node_modules/@secretlint/secretlint-rule-preset-recommend/module/index.js
 function requireLodash_uniq() {
   if (hasRequiredLodash_uniq)
     return lodash_uniq;
@@ -9037,7 +9086,7 @@ function requireLodash_sortby() {
         return value;
       }
       if (value == null) {
-        return identity2;
+        return identity;
       }
       if (typeof value == "object") {
         return isArray2(value) ? baseMatchesProperty(value[0], value[1]) : baseMatches(value);
@@ -9083,7 +9132,7 @@ function requireLodash_sortby() {
     }
     function baseOrderBy(collection, iteratees, orders) {
       var index = -1;
-      iteratees = arrayMap(iteratees.length ? iteratees : [identity2], baseUnary(baseIteratee));
+      iteratees = arrayMap(iteratees.length ? iteratees : [identity], baseUnary(baseIteratee));
       var result = baseMap(collection, function(value, key, collection2) {
         var criteria = arrayMap(iteratees, function(iteratee) {
           return iteratee(value);
@@ -9518,7 +9567,7 @@ function requireLodash_sortby() {
     function keys(object) {
       return isArrayLike(object) ? arrayLikeKeys(object) : baseKeys(object);
     }
-    function identity2(value) {
+    function identity(value) {
       return value;
     }
     function property(path) {
@@ -9664,7 +9713,14 @@ var init_secretlint_source = __esm(() => {
   init_suppressor();
 });
 
-// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/error.js
+// src/util/atomic.ts
+import { closeSync as closeSync2, constants, fsyncSync, openSync as openSync2, renameSync, rmSync, writeSync } from "node:fs";
+var TMP_OPEN_FLAGS;
+var init_atomic = __esm(() => {
+  TMP_OPEN_FLAGS = constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0);
+});
+
+// node_modules/commander/lib/error.js
 var require_error = __commonJS((exports2) => {
   class CommanderError extends Error {
     constructor(exitCode, code, message) {
@@ -9688,7 +9744,7 @@ var require_error = __commonJS((exports2) => {
   exports2.InvalidArgumentError = InvalidArgumentError;
 });
 
-// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/argument.js
+// node_modules/commander/lib/argument.js
 var require_argument = __commonJS((exports2) => {
   var { InvalidArgumentError } = require_error();
 
@@ -9767,7 +9823,7 @@ var require_argument = __commonJS((exports2) => {
   exports2.humanReadableArgName = humanReadableArgName;
 });
 
-// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/help.js
+// node_modules/commander/lib/help.js
 var require_help = __commonJS((exports2) => {
   var { humanReadableArgName } = require_argument();
 
@@ -10117,7 +10173,7 @@ ${itemIndentStr}`);
   exports2.stripColor = stripColor;
 });
 
-// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/option.js
+// node_modules/commander/lib/option.js
 var require_option = __commonJS((exports2) => {
   var { InvalidArgumentError } = require_error();
 
@@ -10295,7 +10351,7 @@ var require_option = __commonJS((exports2) => {
   exports2.DualOptions = DualOptions;
 });
 
-// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/suggestSimilar.js
+// node_modules/commander/lib/suggestSimilar.js
 var require_suggestSimilar = __commonJS((exports2) => {
   var maxDistance = 3;
   function editDistance(a, b) {
@@ -10368,7 +10424,7 @@ var require_suggestSimilar = __commonJS((exports2) => {
   exports2.suggestSimilar = suggestSimilar;
 });
 
-// node_modules/.bun/commander@13.1.0/node_modules/commander/lib/command.js
+// node_modules/commander/lib/command.js
 var require_command = __commonJS((exports2) => {
   var EventEmitter2 = __require("node:events").EventEmitter;
   var childProcess = __require("node:child_process");
@@ -11678,7 +11734,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
   exports2.useColor = useColor;
 });
 
-// node_modules/.bun/commander@13.1.0/node_modules/commander/index.js
+// node_modules/commander/index.js
 var require_commander = __commonJS((exports2) => {
   var { Argument } = require_argument();
   var { Command } = require_command();
@@ -11704,57 +11760,12 @@ import { existsSync as existsSync9 } from "node:fs";
 import { join as join6, resolve as resolve7 } from "node:path";
 
 // src/config/loader.ts
+var import_yaml2 = __toESM(require_dist(), 1);
 import { readFileSync as readFileSync2, existsSync as existsSync3 } from "node:fs";
 import { homedir } from "node:os";
 import { resolve as resolve3 } from "node:path";
 
-// node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/index.js
-var composer = require_composer();
-var Document = require_Document();
-var Schema = require_Schema();
-var errors = require_errors();
-var Alias = require_Alias();
-var identity = require_identity();
-var Pair = require_Pair();
-var Scalar = require_Scalar();
-var YAMLMap = require_YAMLMap();
-var YAMLSeq = require_YAMLSeq();
-var cst = require_cst();
-var lexer = require_lexer();
-var lineCounter = require_line_counter();
-var parser = require_parser();
-var publicApi = require_public_api();
-var visit = require_visit();
-var $Composer = composer.Composer;
-var $Document = Document.Document;
-var $Schema = Schema.Schema;
-var $YAMLError = errors.YAMLError;
-var $YAMLParseError = errors.YAMLParseError;
-var $YAMLWarning = errors.YAMLWarning;
-var $Alias = Alias.Alias;
-var $isAlias = identity.isAlias;
-var $isCollection = identity.isCollection;
-var $isDocument = identity.isDocument;
-var $isMap = identity.isMap;
-var $isNode = identity.isNode;
-var $isPair = identity.isPair;
-var $isScalar = identity.isScalar;
-var $isSeq = identity.isSeq;
-var $Pair = Pair.Pair;
-var $Scalar = Scalar.Scalar;
-var $YAMLMap = YAMLMap.YAMLMap;
-var $YAMLSeq = YAMLSeq.YAMLSeq;
-var $Lexer = lexer.Lexer;
-var $LineCounter = lineCounter.LineCounter;
-var $Parser = parser.Parser;
-var $parse = publicApi.parse;
-var $parseAllDocuments = publicApi.parseAllDocuments;
-var $parseDocument = publicApi.parseDocument;
-var $stringify = publicApi.stringify;
-var $visit = visit.visit;
-var $visitAsync = visit.visitAsync;
-
-// node_modules/.bun/zod@3.25.76/node_modules/zod/v3/external.js
+// node_modules/zod/v3/external.js
 var exports_external = {};
 __export(exports_external, {
   void: () => voidType,
@@ -11866,7 +11877,7 @@ __export(exports_external, {
   BRAND: () => BRAND
 });
 
-// node_modules/.bun/zod@3.25.76/node_modules/zod/v3/helpers/util.js
+// node_modules/zod/v3/helpers/util.js
 var util;
 (function(util2) {
   util2.assertEqual = (_) => {};
@@ -11997,7 +12008,7 @@ var getParsedType = (data) => {
   }
 };
 
-// node_modules/.bun/zod@3.25.76/node_modules/zod/v3/ZodError.js
+// node_modules/zod/v3/ZodError.js
 var ZodIssueCode = util.arrayToEnum([
   "invalid_type",
   "invalid_literal",
@@ -12116,7 +12127,7 @@ ZodError.create = (issues) => {
   return error;
 };
 
-// node_modules/.bun/zod@3.25.76/node_modules/zod/v3/locales/en.js
+// node_modules/zod/v3/locales/en.js
 var errorMap = (issue, _ctx) => {
   let message;
   switch (issue.code) {
@@ -12219,7 +12230,7 @@ var errorMap = (issue, _ctx) => {
 };
 var en_default = errorMap;
 
-// node_modules/.bun/zod@3.25.76/node_modules/zod/v3/errors.js
+// node_modules/zod/v3/errors.js
 var overrideErrorMap = en_default;
 function setErrorMap(map) {
   overrideErrorMap = map;
@@ -12227,7 +12238,7 @@ function setErrorMap(map) {
 function getErrorMap() {
   return overrideErrorMap;
 }
-// node_modules/.bun/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
+// node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
   const { data, path, errorMaps, issueData } = params;
   const fullPath = [...path, ...issueData.path || []];
@@ -12333,14 +12344,14 @@ var isAborted = (x) => x.status === "aborted";
 var isDirty = (x) => x.status === "dirty";
 var isValid = (x) => x.status === "valid";
 var isAsync = (x) => typeof Promise !== "undefined" && x instanceof Promise;
-// node_modules/.bun/zod@3.25.76/node_modules/zod/v3/helpers/errorUtil.js
+// node_modules/zod/v3/helpers/errorUtil.js
 var errorUtil;
 (function(errorUtil2) {
   errorUtil2.errToObj = (message) => typeof message === "string" ? { message } : message || {};
   errorUtil2.toString = (message) => typeof message === "string" ? message : message?.message;
 })(errorUtil || (errorUtil = {}));
 
-// node_modules/.bun/zod@3.25.76/node_modules/zod/v3/types.js
+// node_modules/zod/v3/types.js
 class ParseInputLazyPath {
   constructor(parent, value, path, key) {
     this._cachedPath = [];
@@ -15921,19 +15932,30 @@ var TelegramChannelSchema = exports_external.object({
   stream_mode: exports_external.enum(["pty", "checklist"]).optional().describe("How live progress is streamed to Telegram during a turn. " + "'pty' (default) surfaces text snapshots of Claude Code's TUI — " + "compatible but can flicker as Ink re-renders. 'checklist' drives " + "a structured progress card from session-tail events — stable " + "order, per-tool status emojis, fires only on semantic transitions."),
   stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive in-place stream edits " + "during a turn. Lower = more responsive stream, higher = fewer API " + "calls. Floored at 250 by draft-stream itself. Default 400 ms for DMs " + "and 1000 ms for groups/forums (respects Telegram's ~1 edit/sec/message " + "practical ceiling). Override per-agent if a particular agent needs " + "snappier or quieter streaming."),
   clear_status_on_completion: exports_external.boolean().optional().describe("When true, the live activity/status feed (the in-place 'what it's " + "doing' message — Reading X, Searching the web for Y, …) is DELETED " + "when the turn's final answer lands, so only the reply remains. " + "Default false: the status message is left in the chat as a record " + "(its last step marked done) — no post-then-delete. Per-agent " + "override; cascades defaults → profile → agent (per-key)."),
+  pin_status_while_working: exports_external.boolean().optional().describe("When true (default), the framework SILENTLY pins the already-" + "rendered status message while its work is in-flight and auto-unpins " + "it on completion — the per-turn activity/status message (foreground) " + "and the '\uD83D\uDEE0 Worker' background-worker message. Keeps in-flight work " + "in view when the conversation scrolls past it (fast turns, stacked " + "background workers, long turns). No new surface is rendered; it pins " + "a message the chat already owns. The pin never buzzes the device. " + "The ONE sanctioned pin under chat-is-the-single-source-of-truth. " + "Set false to disable. Per-agent override; cascades defaults → " + "profile → agent (per-key)."),
   hotReloadStable: exports_external.boolean().optional().describe("If true, the stable workspace prefix (AGENTS.md, SOUL.md, USER.md, " + "IDENTITY.md, TOOLS.md) is re-injected on every turn via " + "the UserPromptSubmit hook instead of baked into --append-system-prompt " + "at session start. Lets workspace edits propagate without a restart. " + "Costs ~5-10% per-turn latency/spend since the stable prefix is no " + "longer prompt-cached."),
   inject_on_change: exports_external.boolean().optional().describe("Context-efficiency gate for per-turn hook injection (default true). " + "When true (the default), the turn-pacing directive and dynamic " + "workspace content are only re-emitted when their content changes or " + "the session_id changes — suppressing redundant injection that " + "otherwise triples compaction frequency. Set to false to revert to " + "the legacy always-emit behaviour (every turn injects the full " + "content regardless of whether it changed)."),
   orphan_promotion_ms: exports_external.number().int().nonnegative().optional().describe("How long (ms) a parent turn waits for a sub-agent JSONL watcher " + "to deliver sub_agent_started before the heartbeat promotes the spawn " + "to a synthesised 'running' row. Default 5000. Set to 0 to disable " + "orphan promotion entirely."),
   cold_sub_agent_threshold_ms: exports_external.number().int().nonnegative().optional().describe("JSONL-cold threshold (ms). When a running sub-agent emits no events " + "for this long, the heartbeat synthesises a turn_end for it so the " + "deferred-completion path can proceed. Default 30000. Set to 0 to " + "disable the synthetic close."),
   deferred_completion_timeout_ms: exports_external.number().int().nonnegative().optional().describe("Force-close timeout (ms) for deferred sub-agent completion. After " + "the parent turn_end arrives while sub-agents are still running, the " + "card is force-closed after this many ms even if sub-agents never " + "finish. Watcher-disconnect safety net. Default 180000 (3 min)."),
+  approval_timeout_minutes: exports_external.number().int().nonnegative().optional().describe("Operator approval-card lifetime (minutes) for the tool-use 'Allow " + "once' card and the vault grant decision wait. After this long with " + "no operator tap, the card auto-denies (a TIMEOUT, not a denial — the " + "agent is told not to retry). Default 60. hostd-gated verbs " + "(mcp__hostd__*) keep their own longer window; the hostd " + "config-propose card is not governed by this key."),
   sub_agent_tick_interval_ms: exports_external.number().int().nonnegative().optional().describe("Heartbeat tick interval (ms) for sub-agent rendering. Forces a " + "re-render of the elapsed-time counter while sub-agents are running, " + "even during silent stretches between tool calls. Default 10000 (10 s). " + "Set to 0 to disable the elapsed-ticker path."),
   edit_budget_threshold: exports_external.number().int().nonnegative().optional().describe("Telegram API edit budget per minute before the progress-card driver " + "falls back to a slower coalesce window. When a chat accumulates more " + "than this many card edits in the trailing 60 s, the driver switches " + "to a wider coalesce interval until the rate drops back. Default 18. " + "Increase if your gateway frequently bumps the Telegram edit-rate ceiling " + "with many parallel sub-agents; decrease for a more conservative buffer."),
   stickers: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Sticker aliases for the `send_sticker` MCP tool (#576). Maps a " + "short alias name (e.g. 'happy', 'thinking') to a Telegram file_id. " + "Operator-curated — capture file_ids from inbound stickers the user " + "sends and add them here. The agent calls send_sticker(chat_id, " + "alias='happy') and the gateway resolves to the file_id at send " + "time. Aliases enable persona-flavored expressiveness without " + "exposing raw file_ids in the agent prompt. Personal-assistant / " + "health-coach personas benefit; coding agents typically don't " + "configure any."),
   voice_in: exports_external.object({
     enabled: exports_external.boolean().optional().describe("Master switch for voice-message transcription."),
     provider: exports_external.enum(["openai"]).optional().describe("Transcription provider. Only 'openai' (Whisper API) supported in the spike (#578); " + "Groq/Deepgram/local-whisper-cli are follow-up choices."),
-    language: exports_external.string().optional().describe("Optional ISO-639-1 language hint (e.g. 'en', 'fr'). Skips Whisper's auto-detection.")
-  }).optional().describe("Inbound voice-message transcription (#578). When enabled, voice/audio " + "messages from allowlisted users are downloaded, transcribed via the " + "configured provider, and surface to the agent as the user's text. " + "API key read from ~/.switchroom/openai-api-key (mode 0600). Off by " + "default — opt-in per agent. Cascades from defaults.channels.telegram.voice_in. " + "(Migrated from per-agent root in #596 — see consistency unification.)"),
+    language: exports_external.string().optional().describe("Optional ISO-639-1 language hint (e.g. 'en', 'fr'). Skips Whisper's auto-detection."),
+    api_key: exports_external.string().optional().describe("Transcription-provider API key, as a `vault:<key>` reference " + "(e.g. 'vault:openai/api-key' — the default if omitted). The " + "gateway resolves it through the vault broker at use-time and " + "never writes the resolved value to disk or the agent prompt. " + "`switchroom enable voice-in` vault-stores the key and writes " + "this reference for you. A literal key is accepted but " + "discouraged — keep secrets in the vault.")
+  }).optional().describe("Inbound voice-message transcription (#578). When enabled, voice/audio " + "messages from allowlisted users are downloaded, transcribed via the " + "configured provider, and surface to the agent as the user's text. " + "The provider API key is a `vault:` reference (`api_key`, default " + "`vault:openai/api-key`) resolved through the vault broker at " + "use-time — opt-in third-party key, honest-exception per the " + "subscription-honest outcome. Off by default — opt-in per agent. " + "Cascades from defaults.channels.telegram.voice_in. " + "(Migrated from per-agent root in #596 — see consistency unification.)"),
+  voice_out: exports_external.object({
+    enabled: exports_external.boolean().optional().describe("Master switch for spoken-reply (TTS) voice notes."),
+    engine: exports_external.enum(["kokoro", "openai"]).default("kokoro").describe("Synthesis engine. 'kokoro' = local voice sidecar (POST /tts, " + "subscription-honest, no third-party key); 'openai' = OpenAI TTS " + "cloud (honest-exception, requires an `api_key` vault ref). " + "'kokoro' is only active when the host voice verdict is local " + "(SWITCHROOM_VOICE_ENGINE === 'local'); otherwise voice-out is a " + "no-op and replies stay text-only."),
+    voice: exports_external.string().optional().describe("Engine-specific voice id (e.g. a Kokoro voice name or an OpenAI " + "voice like 'alloy'). Optional — the sidecar/engine has its own " + "default when omitted."),
+    reply_mode: exports_external.enum(["voice+text", "voice-only", "on-demand"]).default("voice+text").describe("How the spoken reply accompanies the text. 'voice+text' sends " + "both the normal text reply and a voice note; 'voice-only' sends " + "the voice note and suppresses the text body. 'on-demand' sends " + "the text reply with a single '\uD83D\uDD0A Listen' inline button and " + "synthesizes NO audio until the user taps it — zero GPU/sidecar " + "work unless requested, which keeps the voice pipeline " + "subscription-honest and visible (nothing is generated behind the " + "user's back). The Listen button is injected ONLY when the reply " + "carries no agent-authored buttons, to avoid colliding with the " + "single_use keyboard-strip that protects agent buttons from " + "double-fire. In every mode the text reply is ALWAYS still sent " + "when synthesis fails or the reply exceeds max_chars — the user's " + "answer is never dropped silently."),
+    max_chars: exports_external.number().int().positive().optional().describe("Per-voice-note chunk size (chars). Default 600; clamped to the " + "engine's hard cap (1200). A reply LONGER than this is NOT truncated " + "to text — it's split on sentence/paragraph boundaries and spoken " + "across several sequential voice notes, so the full answer is heard " + "even when the user can't read the screen (driving / cycling). Lower " + "it for snappier individual notes; raise it (up to 1200) for fewer, " + "longer notes."),
+    api_key: exports_external.string().optional().describe("OpenAI TTS API key as a `vault:<key>` reference (only used when " + "engine='openai'; default 'vault:openai/api-key'). Resolved through " + "the vault broker at use-time and never written to disk or the agent " + "prompt. Ignored for engine='kokoro' (the sidecar needs no key).")
+  }).optional().describe("Outbound spoken replies via TTS (PR-C2). When enabled, the gateway " + "synthesizes the agent's text reply into an OGG/Opus voice note and " + "sends it alongside (or instead of) the text, per reply_mode. The " + "'kokoro' engine uses the local voice sidecar (POST /tts) and is only " + "active when the host voice verdict is local; the 'openai' engine is " + "an honest-exception cloud path gated on an `api_key` vault ref. Voice " + "is best-effort and fully non-fatal — any TTS error falls back to the " + "text reply. Off by default — opt-in per agent. " + "Cascades from defaults.channels.telegram.voice_out."),
   telegraph: exports_external.object({
     enabled: exports_external.boolean().optional().describe("Master switch for Telegraph Instant View publishing."),
     threshold: exports_external.number().int().positive().optional().describe("Char count above which a reply is published to Telegraph instead of " + "HTML-chunked into multiple Telegram messages. Default 3000 (≈3 chunks)."),
@@ -16177,7 +16199,7 @@ var AgentSchema = exports_external.object({
   secrets: exports_external.array(exports_external.string().regex(/^[a-zA-Z0-9_\-/]+$/, "Secret key names must contain only alphanumeric characters, underscores, hyphens, and forward slashes")).optional(),
   reactions: ReactionsSchema,
   reaction_dispatch: ReactionDispatchSchema,
-  model: exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._\-/\[\]:]*$/, "Model name must be alphanumeric with ._-/[]: only (no spaces or shell specials)").optional().describe("Claude model override (e.g., 'claude-sonnet-4-6')"),
+  model: exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._\-/\[\]:]*$/, "Model name must be alphanumeric with ._-/[]: only (no spaces or shell specials)").optional().describe("Claude model override (e.g., 'claude-sonnet-5')"),
   thinking_effort: exports_external.enum(["low", "medium", "high", "xhigh", "max"]).optional().describe("Adaptive-thinking effort level passed as --effort to the claude CLI. " + "Per-agent override wins over defaults.thinking_effort. " + "lower = faster/cheaper, higher = more reasoning. Omit to use Claude's default."),
   permission_mode: exports_external.enum(["acceptEdits", "auto", "bypassPermissions", "default", "dontAsk", "plan"]).optional().describe("Permission mode passed as --permission-mode to the claude CLI. " + "Per-agent override wins over defaults.permission_mode. " + "Warning: bypassPermissions and dontAsk skip all safety checks — use only in trusted sandboxes."),
   fallback_model: exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._\-/\[\]:]*$/, "Fallback model name must be alphanumeric with ._-/[]: only").optional().describe("Fallback model passed as --fallback-model to the claude CLI. " + "Per-agent override wins over defaults.fallback_model. " + "Used when the primary model is overloaded. Note: only functional in --print (non-interactive) mode per Claude CLI docs; silently no-ops in interactive sessions."),
@@ -16308,6 +16330,11 @@ var HostControlConfigSchema = exports_external.object({
 var WebServiceConfigSchema = exports_external.object({
   managed: exports_external.boolean().default(false).describe("Whether `switchroom update` refreshes the web-service container " + "(dashboard + GitHub-webhook receiver) via `switchroom webd " + "install`. Default: false — existing installs run the web server " + "as the legacy `switchroom-web.service` systemd unit and must not " + "be surprised by a container takeover of host loopback 127.0.0.1:" + "8080 mid-update. Set true ONLY after cutting over to the " + "container (stop+disable the systemd unit, `switchroom webd " + "install`). The container runs in its own compose project " + "(`switchroom-web`), separate from the agent fleet, with " + "network_mode: host so it keeps owning loopback:8080 for the " + "cloudflared tunnel + tailscale serve consumers.")
 });
+var FleetHealthConfigSchema = exports_external.object({
+  owner_agent: exports_external.string().regex(/^[a-z0-9][a-z0-9_-]{0,50}$/, {
+    message: "owner_agent must match the standard agent-name pattern"
+  }).optional().describe("The admin agent that runs the Fleet Health sensor + deep-dive crons " + "(RFC fleet-health.md). Default unset → the feature is inert: no crons " + "are scheduled and the admin page renders its empty state. The named " + "agent must be admin: true. A dedicated owner (not any admin) keeps " + "the fleet-health work attributable, its memory scoped, and its token " + "spend accountable. The detection runs ONLY as operator-set schedules " + "on this agent — never a self-authored loop (on-leash, " + "no-self-escalation).")
+});
 var HostdConfigSchema = exports_external.object({
   config_edit_enabled: exports_external.boolean().default(false).describe("Opt-in toggle for the `config_propose_edit` hostd verb (RFC " + "admin-agent-config-edit §3). Default false — the verb returns " + "`E_CONFIG_EDIT_DISABLED` until the operator explicitly flips " + "this to true. When true, admin agents can propose unified-diff " + "patches against " + "`/state/config/switchroom.yaml`, gated by an operator approval " + "card in the primary chat. Same trust posture as `update_apply` " + "and `agent_restart`: the human-in-the-loop tap is the security " + "boundary, not the agent's judgement."),
   config_edit_rate_per_hour: exports_external.number().int().min(1).max(20).default(3).describe("Per-requesting-agent rate cap for `config_propose_edit` cards " + "(RFC admin-agent-config-edit §5). Default 3 cards/hour; min 1, " + "max 20. ENFORCED server-side: a caller exceeding this in a sliding " + "1-hour window is rejected with `E_RATE_LIMITED` (carrying a " + "`retry_after` fix) instead of posting another operator approval " + "card — so a looping agent is throttled rather than spamming the chat.")
@@ -16356,6 +16383,7 @@ var SwitchroomConfigSchema = exports_external.object({
   quota: QuotaConfigSchema.optional().describe("Optional weekly/monthly USD spend budgets rendered in the session " + "greeting. Usage is read from ccusage at runtime; no network calls."),
   host_control: HostControlConfigSchema.default({}).describe("Host-control daemon configuration. Defaults to enabled=true since " + "RFC C Phase 2 (reference/rfcs/host-control-daemon.md). Omit the block " + "to accept defaults; set `enabled: false` only on legacy systemd-" + "mode installs (removal tracked as RFC C Phase 3)."),
   hostd: HostdConfigSchema.default({}).describe("hostd verb-level knobs (RFC admin-agent-config-edit). Distinct " + "from `host_control:` which governs whether the daemon runs at " + "all. Scopes the opt-in flag and rate cap for the " + "`config_propose_edit` verb (disabled by default)."),
+  fleet_health: FleetHealthConfigSchema.default({}).describe("Fleet Health — job-spec-anchored, operator-facing issue tracker (RFC " + "fleet-health.md, serves fleet-stays-healthy). Assigns the owner agent " + "that runs the nightly model-free sensor + weekly deep-dive. Default " + "unset owner_agent → inert; the admin page renders an empty state."),
   web_service: WebServiceConfigSchema.default({}).describe("Web-service container (dashboard + GitHub-webhook receiver) config. " + "Defaults to managed=false so existing systemd-mode installs are " + "untouched. Set managed: true after cutting over to the " + "`switchroom-web` container — then `switchroom update` keeps it " + "refreshed. See `switchroom webd install`."),
   google_accounts: exports_external.record(exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
     message: "Account key must be a Google account email like 'alice@example.com' (colons not allowed)"
@@ -16447,6 +16475,7 @@ function resolveDualPath(pathStr) {
 }
 
 // src/config/overlay-loader.ts
+var import_yaml = __toESM(require_dist(), 1);
 import { existsSync as existsSync2, readFileSync, readdirSync, statSync } from "node:fs";
 import { basename, resolve as resolve2 } from "node:path";
 
@@ -16522,7 +16551,7 @@ function applyAgentOverlays(config) {
         for (const file of files) {
           try {
             const raw = readFileSync(file, "utf-8");
-            const parsed = $parse(raw);
+            const parsed = import_yaml.parse(raw);
             const doc = OverlayDocSchema.parse(parsed);
             const title = deriveOverlayTitle(raw, basename(file));
             for (const entry of doc.schedule ?? []) {
@@ -16563,7 +16592,7 @@ function applyAgentOverlays(config) {
         for (const file of skillFiles) {
           try {
             const raw = readFileSync(file, "utf-8");
-            const parsed = $parse(raw);
+            const parsed = import_yaml.parse(raw);
             const doc = OverlayDocSchema.parse(parsed);
             for (const skillName of doc.skills ?? []) {
               if (seen.has(skillName))
@@ -17080,7 +17109,7 @@ function loadConfig(configPath) {
   }
   let parsed;
   try {
-    parsed = $parse(raw);
+    parsed = import_yaml2.parse(raw);
   } catch (err) {
     throw new ConfigError(`Invalid YAML in ${filePath}`, [
       `  ${err.message}`
@@ -17445,7 +17474,7 @@ function deniedResponse(request_id, error, duration_ms = 0) {
 // src/analytics/error-friction.ts
 import { createHash as createHash2 } from "node:crypto";
 
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
+// node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
 import { dirname, posix, sep } from "path";
 function createModulerModifier() {
   const getModuleFromFileName = createGetModuleFromFilename();
@@ -17481,7 +17510,7 @@ function normalizeWindowsPath(path) {
   return path.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/featureFlagUtils.mjs
+// node_modules/@posthog/core/dist/featureFlagUtils.mjs
 var normalizeFlagsResponse = (flagsResponse) => {
   if ("flags" in flagsResponse) {
     const featureFlags = getFlagValuesFromFlags(flagsResponse.flags);
@@ -17552,7 +17581,7 @@ var parsePayload = (response) => {
   }
 };
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/gzip.mjs
+// node_modules/@posthog/core/dist/gzip.mjs
 function isGzipSupported() {
   return "CompressionStream" in globalThis;
 }
@@ -17572,7 +17601,7 @@ async function gzipCompress(input, isDebug = true) {
   }
 }
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/vendor/uuidv7.mjs
+// node_modules/@posthog/core/dist/vendor/uuidv7.mjs
 /*! For license information please see uuidv7.mjs.LICENSE.txt */
 var DIGITS = "0123456789abcdef";
 
@@ -17750,7 +17779,7 @@ var defaultGenerator;
 var uuidv7 = () => uuidv7obj().toString();
 var uuidv7obj = () => (defaultGenerator || (defaultGenerator = new V7Generator)).generate();
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/types.mjs
+// node_modules/@posthog/core/dist/types.mjs
 var types_PostHogPersistedProperty = /* @__PURE__ */ function(PostHogPersistedProperty) {
   PostHogPersistedProperty["AnonymousId"] = "anonymous_id";
   PostHogPersistedProperty["DistinctId"] = "distinct_id";
@@ -17783,7 +17812,7 @@ var types_PostHogPersistedProperty = /* @__PURE__ */ function(PostHogPersistedPr
   return PostHogPersistedProperty;
 }({});
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/utils/bot-detection.mjs
+// node_modules/@posthog/core/dist/utils/bot-detection.mjs
 var DEFAULT_BLOCKED_UA_STRS = [
   "amazonbot",
   "amazonproductbot",
@@ -17872,7 +17901,7 @@ var isBlockedUA = function(ua, customBlockedUserAgents = []) {
     return uaLower.indexOf(blockedUaLower) !== -1;
   });
 };
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/utils/type-utils.mjs
+// node_modules/@posthog/core/dist/utils/type-utils.mjs
 var nativeIsArray = Array.isArray;
 var ObjProto = Object.prototype;
 var type_utils_hasOwnProperty = ObjProto.hasOwnProperty;
@@ -17909,7 +17938,7 @@ function isInstanceOf(candidate, base) {
   }
 }
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/utils/number-utils.mjs
+// node_modules/@posthog/core/dist/utils/number-utils.mjs
 function clampToRange(value, min, max, logger, fallbackValue) {
   if (min > max) {
     logger.warn("min cannot be greater than max.");
@@ -17929,7 +17958,7 @@ function clampToRange(value, min, max, logger, fallbackValue) {
   return clampToRange(fallbackValue || max, min, max, logger);
 }
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/utils/bucketed-rate-limiter.mjs
+// node_modules/@posthog/core/dist/utils/bucketed-rate-limiter.mjs
 var ONE_DAY_IN_MS = 86400000;
 
 class BucketedRateLimiter {
@@ -17973,7 +18002,7 @@ class BucketedRateLimiter {
     this._buckets = {};
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/utils/promise-queue.mjs
+// node_modules/@posthog/core/dist/utils/promise-queue.mjs
 class PromiseQueue {
   add(promise) {
     const promiseUUID = uuidv7();
@@ -17999,7 +18028,7 @@ class PromiseQueue {
     this.promiseByIds = {};
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/utils/logger.mjs
+// node_modules/@posthog/core/dist/utils/logger.mjs
 function createConsole(consoleLike = console) {
   const lockedMethods = {
     log: consoleLike.log.bind(consoleLike),
@@ -18037,7 +18066,7 @@ var passThrough = (fn) => fn();
 function createLogger(prefix, maybeCall = passThrough) {
   return _createLogger(prefix, maybeCall, createConsole());
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/utils/user-agent-utils.mjs
+// node_modules/@posthog/core/dist/utils/user-agent-utils.mjs
 var MOBILE = "Mobile";
 var IOS = "iOS";
 var ANDROID = "Android";
@@ -18294,7 +18323,7 @@ var osMatchers = [
   ]
 ];
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/utils/index.mjs
+// node_modules/@posthog/core/dist/utils/index.mjs
 var STRING_FORMAT = "utf8";
 function assert(truthyValue, message) {
   if (!truthyValue || typeof truthyValue != "string" || isEmpty(truthyValue))
@@ -18342,7 +18371,7 @@ function allSettled(promises) {
     reason
   }))));
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/eventemitter.mjs
+// node_modules/@posthog/core/dist/eventemitter.mjs
 class SimpleEventEmitter {
   constructor() {
     this.events = {};
@@ -18364,7 +18393,7 @@ class SimpleEventEmitter {
   }
 }
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/posthog-core-stateless.mjs
+// node_modules/@posthog/core/dist/posthog-core-stateless.mjs
 class PostHogFetchHttpError extends Error {
   constructor(response, reqByteLength) {
     super("HTTP error while fetching PostHog: status=" + response.status + ", reqByteLength=" + reqByteLength), this.response = response, this.reqByteLength = reqByteLength, this.name = "PostHogFetchHttpError";
@@ -19079,7 +19108,7 @@ class PostHogCoreStateless {
     return this.shutdownPromise;
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/index.mjs
+// node_modules/@posthog/core/dist/error-tracking/index.mjs
 var exports_error_tracking = {};
 __export(exports_error_tracking, {
   winjsStackLineParser: () => winjsStackLineParser,
@@ -19103,7 +19132,7 @@ __export(exports_error_tracking, {
   DOMExceptionCoercer: () => DOMExceptionCoercer
 });
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/chunk-ids.mjs
+// node_modules/@posthog/core/dist/error-tracking/chunk-ids.mjs
 var parsedStackResults;
 var lastKeysCount;
 var cachedFilenameChunkIds;
@@ -19142,7 +19171,7 @@ function getFilenameToChunkIdMap(stackParser) {
   return cachedFilenameChunkIds;
 }
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/error-properties-builder.mjs
+// node_modules/@posthog/core/dist/error-tracking/error-properties-builder.mjs
 var MAX_CAUSE_RECURSION = 4;
 
 class ErrorPropertiesBuilder {
@@ -19264,7 +19293,7 @@ class ErrorPropertiesBuilder {
     return context;
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/parsers/base.mjs
+// node_modules/@posthog/core/dist/error-tracking/parsers/base.mjs
 var UNKNOWN_FUNCTION = "?";
 function createFrame(platform, filename, func, lineno, colno) {
   const frame = {
@@ -19280,7 +19309,7 @@ function createFrame(platform, filename, func, lineno, colno) {
   return frame;
 }
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/parsers/safari.mjs
+// node_modules/@posthog/core/dist/error-tracking/parsers/safari.mjs
 var extractSafariExtensionDetails = (func, filename) => {
   const isSafariExtension = func.indexOf("safari-extension") !== -1;
   const isSafariWebExtension = func.indexOf("safari-web-extension") !== -1;
@@ -19293,7 +19322,7 @@ var extractSafariExtensionDetails = (func, filename) => {
   ];
 };
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/parsers/chrome.mjs
+// node_modules/@posthog/core/dist/error-tracking/parsers/chrome.mjs
 var chromeRegexNoFnName = /^\s*at (\S+?)(?::(\d+))(?::(\d+))\s*$/i;
 var chromeRegex = /^\s*at (?:(.+?\)(?: \[.+\])?|.*?) ?\((?:address at )?)?(?:async )?((?:<anonymous>|[-a-z]+:|.*bundle|\/)?.*?)(?::(\d+))?(?::(\d+))?\)?\s*$/i;
 var chromeEvalRegex = /\((\S*)(?::(\d+))(?::(\d+))\)/;
@@ -19319,7 +19348,7 @@ var chromeStackLineParser = (line, platform) => {
   }
 };
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/parsers/gecko.mjs
+// node_modules/@posthog/core/dist/error-tracking/parsers/gecko.mjs
 var geckoREgex = /^\s*(.*?)(?:\((.*?)\))?(?:^|@)?((?:[-a-z]+)?:\/.*?|\[native code\]|[^@]*(?:bundle|\d+\.js)|\/[\w\-. /=]+)(?::(\d+))?(?::(\d+))?\s*$/i;
 var geckoEvalRegex = /(\S+) line (\d+)(?: > eval line \d+)* > eval/i;
 var geckoStackLineParser = (line, platform) => {
@@ -19342,14 +19371,14 @@ var geckoStackLineParser = (line, platform) => {
   }
 };
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/parsers/winjs.mjs
+// node_modules/@posthog/core/dist/error-tracking/parsers/winjs.mjs
 var winjsRegex = /^\s*at (?:((?:\[object object\])?.+) )?\(?((?:[-a-z]+):.*?):(\d+)(?::(\d+))?\)?\s*$/i;
 var winjsStackLineParser = (line, platform) => {
   const parts = winjsRegex.exec(line);
   return parts ? createFrame(platform, parts[2], parts[1] || UNKNOWN_FUNCTION, +parts[3], parts[4] ? +parts[4] : undefined) : undefined;
 };
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/parsers/opera.mjs
+// node_modules/@posthog/core/dist/error-tracking/parsers/opera.mjs
 var opera10Regex = / line (\d+).*script (?:in )?(\S+)(?:: in function (\S+))?$/i;
 var opera10StackLineParser = (line, platform) => {
   const parts = opera10Regex.exec(line);
@@ -19361,7 +19390,7 @@ var opera11StackLineParser = (line, platform) => {
   return parts ? createFrame(platform, parts[5], parts[3] || parts[4] || UNKNOWN_FUNCTION, +parts[1], +parts[2]) : undefined;
 };
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/parsers/node.mjs
+// node_modules/@posthog/core/dist/error-tracking/parsers/node.mjs
 var FILENAME_MATCH = /^\s*[-]{4,}$/;
 var FULL_MATCH = /at (?:async )?(?:(.+?)\s+\()?(?:(.+):(\d+):(\d+)?|([^)]+))\)?/;
 var nodeStackLineParser = (line, platform) => {
@@ -19430,7 +19459,7 @@ function _parseIntOrUndefined(input) {
   return parseInt(input || "", 10) || undefined;
 }
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/parsers/index.mjs
+// node_modules/@posthog/core/dist/error-tracking/parsers/index.mjs
 var WEBPACK_ERROR_REGEXP = /\(error: (.*)\)/;
 var STACKTRACE_FRAME_LIMIT = 50;
 function reverseAndStripFrames(stack) {
@@ -19461,8 +19490,8 @@ function createStackParser(platform, ...parsers) {
         continue;
       const cleanedLine = WEBPACK_ERROR_REGEXP.test(line) ? line.replace(WEBPACK_ERROR_REGEXP, "$1") : line;
       if (!cleanedLine.match(/\S*Error: /)) {
-        for (const parser2 of parsers) {
-          const frame = parser2(cleanedLine, platform);
+        for (const parser of parsers) {
+          const frame = parser(cleanedLine, platform);
           if (frame) {
             frames.push(frame);
             break;
@@ -19475,7 +19504,7 @@ function createStackParser(platform, ...parsers) {
     return reverseAndStripFrames(frames);
   };
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/coercers/dom-exception-coercer.mjs
+// node_modules/@posthog/core/dist/error-tracking/coercers/dom-exception-coercer.mjs
 class DOMExceptionCoercer {
   match(err) {
     return this.isDOMException(err) || this.isDOMError(err);
@@ -19505,7 +19534,7 @@ class DOMExceptionCoercer {
     return isBuiltin(err, "DOMError");
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/coercers/error-coercer.mjs
+// node_modules/@posthog/core/dist/error-tracking/coercers/error-coercer.mjs
 class ErrorCoercer {
   match(err) {
     return isPlainError(err);
@@ -19532,7 +19561,7 @@ class ErrorCoercer {
     return err.stacktrace || err.stack || undefined;
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/coercers/error-event-coercer.mjs
+// node_modules/@posthog/core/dist/error-tracking/coercers/error-event-coercer.mjs
 class ErrorEventCoercer {
   constructor() {}
   match(err) {
@@ -19550,7 +19579,7 @@ class ErrorEventCoercer {
     return exceptionLike;
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/coercers/string-coercer.mjs
+// node_modules/@posthog/core/dist/error-tracking/coercers/string-coercer.mjs
 var ERROR_TYPES_PATTERN = /^(?:[Uu]ncaught (?:exception: )?)?(?:((?:Eval|Internal|Range|Reference|Syntax|Type|URI|)Error): )?(.*)$/i;
 
 class StringCoercer {
@@ -19580,7 +19609,7 @@ class StringCoercer {
     ];
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/types.mjs
+// node_modules/@posthog/core/dist/error-tracking/types.mjs
 var severityLevels = [
   "fatal",
   "error",
@@ -19590,7 +19619,7 @@ var severityLevels = [
   "debug"
 ];
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/coercers/utils.mjs
+// node_modules/@posthog/core/dist/error-tracking/coercers/utils.mjs
 function extractExceptionKeysForMessage(err, maxLength = 40) {
   const keys = Object.keys(err);
   keys.sort();
@@ -19607,7 +19636,7 @@ function extractExceptionKeysForMessage(err, maxLength = 40) {
   return "";
 }
 
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/coercers/object-coercer.mjs
+// node_modules/@posthog/core/dist/error-tracking/coercers/object-coercer.mjs
 class ObjectCoercer {
   match(candidate) {
     return typeof candidate == "object" && candidate !== null;
@@ -19660,7 +19689,7 @@ class ObjectCoercer {
     }
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/coercers/event-coercer.mjs
+// node_modules/@posthog/core/dist/error-tracking/coercers/event-coercer.mjs
 class EventCoercer {
   match(err) {
     return isEvent(err);
@@ -19675,7 +19704,7 @@ class EventCoercer {
     };
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/coercers/primitive-coercer.mjs
+// node_modules/@posthog/core/dist/error-tracking/coercers/primitive-coercer.mjs
 class PrimitiveCoercer {
   match(candidate) {
     return isPrimitive(candidate);
@@ -19689,7 +19718,7 @@ class PrimitiveCoercer {
     };
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/coercers/promise-rejection-event.mjs
+// node_modules/@posthog/core/dist/error-tracking/coercers/promise-rejection-event.mjs
 class PromiseRejectionEventCoercer {
   match(err) {
     return isBuiltin(err, "PromiseRejectionEvent") || this.isCustomEventWrappingRejection(err);
@@ -19725,7 +19754,7 @@ class PromiseRejectionEventCoercer {
     return error;
   }
 }
-// node_modules/.bun/@posthog+core@1.25.2/node_modules/@posthog/core/dist/error-tracking/utils.mjs
+// node_modules/@posthog/core/dist/error-tracking/utils.mjs
 class ReduceableCache {
   constructor(_maxSize) {
     this._maxSize = _maxSize;
@@ -19750,7 +19779,7 @@ class ReduceableCache {
     }
   }
 }
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/error-tracking/modifiers/context-lines.node.mjs
+// node_modules/posthog-node/dist/extensions/error-tracking/modifiers/context-lines.node.mjs
 import { createReadStream } from "node:fs";
 import { createInterface } from "node:readline";
 var LRU_FILE_CONTENTS_CACHE = new exports_error_tracking.ReduceableCache(25);
@@ -19968,7 +19997,7 @@ function snipLine(line, colno) {
   return newLine;
 }
 
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/error-tracking/autocapture.mjs
+// node_modules/posthog-node/dist/extensions/error-tracking/autocapture.mjs
 function makeUncaughtExceptionHandler(captureFn, onFatalFn) {
   let calledFatalError = false;
   return Object.assign((error) => {
@@ -20000,7 +20029,7 @@ function addUnhandledRejectionListener(captureFn) {
   }));
 }
 
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/error-tracking/index.mjs
+// node_modules/posthog-node/dist/extensions/error-tracking/index.mjs
 var SHUTDOWN_TIMEOUT = 2000;
 
 class ErrorTracking {
@@ -20069,10 +20098,10 @@ class ErrorTracking {
   }
 }
 
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/version.mjs
+// node_modules/posthog-node/dist/version.mjs
 var version = "5.29.2";
 
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/types.mjs
+// node_modules/posthog-node/dist/types.mjs
 var FeatureFlagError2 = {
   ERRORS_WHILE_COMPUTING: "errors_while_computing_flags",
   FLAG_MISSING: "flag_missing",
@@ -20080,7 +20109,7 @@ var FeatureFlagError2 = {
   UNKNOWN_ERROR: "unknown_error"
 };
 
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/feature-flags/crypto.mjs
+// node_modules/posthog-node/dist/extensions/feature-flags/crypto.mjs
 async function hashSHA1(text) {
   const subtle = globalThis.crypto?.subtle;
   if (!subtle)
@@ -20090,7 +20119,7 @@ async function hashSHA1(text) {
   return hashArray.map((byte) => byte.toString(16).padStart(2, "0")).join("");
 }
 
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/feature-flags/feature-flags.mjs
+// node_modules/posthog-node/dist/extensions/feature-flags/feature-flags.mjs
 var SIXTY_SECONDS = 60000;
 var LONG_SCALE = 1152921504606847000;
 var NULL_VALUES_ALLOWED_OPERATORS = [
@@ -20964,7 +20993,7 @@ function relativeDateParseForFeatureFlagMatching(value) {
   }
 }
 
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/storage-memory.mjs
+// node_modules/posthog-node/dist/storage-memory.mjs
 class PostHogMemoryStorage {
   getProperty(key) {
     return this._memoryStorage[key];
@@ -20977,7 +21006,7 @@ class PostHogMemoryStorage {
   }
 }
 
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/client.mjs
+// node_modules/posthog-node/dist/client.mjs
 var MINIMUM_POLLING_INTERVAL = 100;
 var THIRTY_SECONDS = 30000;
 var MAX_CACHE_SIZE = 50000;
@@ -21271,14 +21300,14 @@ class PostHogBackendClient extends PostHogCoreStateless {
       else {
         requestId = flagsResponse.requestId;
         evaluatedAt = flagsResponse.evaluatedAt;
-        const errors3 = [];
+        const errors2 = [];
         if (flagsResponse.errorsWhileComputingFlags)
-          errors3.push(FeatureFlagError2.ERRORS_WHILE_COMPUTING);
+          errors2.push(FeatureFlagError2.ERRORS_WHILE_COMPUTING);
         if (flagsResponse.quotaLimited?.includes("feature_flags"))
-          errors3.push(FeatureFlagError2.QUOTA_LIMITED);
+          errors2.push(FeatureFlagError2.QUOTA_LIMITED);
         const flagDetail = flagsResponse.flags[key];
         if (flagDetail === undefined)
-          errors3.push(FeatureFlagError2.FLAG_MISSING);
+          errors2.push(FeatureFlagError2.FLAG_MISSING);
         else {
           flagId = flagDetail.metadata?.id;
           flagVersion = flagDetail.metadata?.version;
@@ -21297,8 +21326,8 @@ class PostHogBackendClient extends PostHogCoreStateless {
             payload: parsedPayload
           };
         }
-        if (errors3.length > 0)
-          featureFlagError = errors3.join(",");
+        if (errors2.length > 0)
+          featureFlagError = errors2.join(",");
       }
     }
     if (sendFeatureFlagEvents) {
@@ -21765,7 +21794,7 @@ class PostHogBackendClient extends PostHogCoreStateless {
   }
 }
 
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/context/context.mjs
+// node_modules/posthog-node/dist/extensions/context/context.mjs
 import { AsyncLocalStorage } from "node:async_hooks";
 
 class PostHogContext {
@@ -21796,7 +21825,7 @@ class PostHogContext {
   }
 }
 
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/sentry-integration.mjs
+// node_modules/posthog-node/dist/extensions/sentry-integration.mjs
 var NAME = "posthog-node";
 function createEventProcessor(_posthog, { organization, projectId, prefix, severityAllowList = [
   "error"
@@ -21864,7 +21893,7 @@ class PostHogSentryIntegration {
     };
   }
 }
-// node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/entrypoints/index.node.mjs
+// node_modules/posthog-node/dist/entrypoints/index.node.mjs
 ErrorTracking.errorPropertiesBuilder = new exports_error_tracking.ErrorPropertiesBuilder([
   new exports_error_tracking.EventCoercer,
   new exports_error_tracking.ErrorCoercer,
@@ -22584,16 +22613,18 @@ function detectInstallType() {
   }
 }
 
-// src/util/atomic.ts
-import { closeSync as closeSync2, constants, fsyncSync, openSync as openSync2, renameSync, rmSync, writeSync } from "node:fs";
-var TMP_OPEN_FLAGS = constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0);
+// src/cli/release-yaml.ts
+var import_yaml3 = __toESM(require_dist(), 1);
+
+// src/cli/rollout.ts
+init_atomic();
 
 // src/cli/resolve-version.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4 } from "node:fs";
 import { dirname as dirname4, join as join2 } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.16.29";
+var VERSION = "0.16.46";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -22696,15 +22727,85 @@ function parseAuditLine(line) {
     entry.failed_step = o.failed_step;
   if (typeof o.failed_agent === "string")
     entry.failed_agent = o.failed_agent;
+  if (typeof o.agent === "string")
+    entry.agent = o.agent;
+  if (typeof o.n === "number")
+    entry.n = o.n;
+  if (typeof o.m === "number")
+    entry.m = o.m;
   if (typeof o.prior_pin === "string")
     entry.prior_pin = o.prior_pin;
   return entry;
 }
+function latestRolloutRowForRequest(raw, requestId) {
+  const ROLLOUT_OPS = new Set(["rollout", "rollout_orphaned"]);
+  let latest = null;
+  for (const line of raw.split(`
+`)) {
+    const e = parseAuditLine(line);
+    if (e === null)
+      continue;
+    if (e.request_id !== requestId)
+      continue;
+    if (!ROLLOUT_OPS.has(e.op))
+      continue;
+    latest = e;
+  }
+  return latest;
+}
+
+// src/setup/hindsight.ts
+var HINDSIGHT_CONSUMER_NAME = "hindsight";
+var HINDSIGHT_IMAGE_REPO = "ghcr.io/switchroom/switchroom-hindsight";
+var HINDSIGHT_IMAGE = `${HINDSIGHT_IMAGE_REPO}:latest`;
+var HINDSIGHT_BROKER_SOCK_VOLUME = `auth-broker-${HINDSIGHT_CONSUMER_NAME}-sock`;
+var HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)';
+var HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
 
 // src/cli/rollout.ts
 function isVersionAssertable(target) {
   return /^v?\d+\.\d+\.\d+$/.test(target.trim());
 }
+var ROLLOUT_PHASE_SENTINEL = "SWITCHROOM_ROLLOUT_PHASE:";
+function parseRolloutPhaseLine(line) {
+  const trimmed = line.trim();
+  if (!trimmed.startsWith(ROLLOUT_PHASE_SENTINEL))
+    return null;
+  let obj;
+  try {
+    obj = JSON.parse(trimmed.slice(ROLLOUT_PHASE_SENTINEL.length));
+  } catch {
+    return null;
+  }
+  if (typeof obj !== "object" || obj === null)
+    return null;
+  const o = obj;
+  const PHASES = new Set([
+    "apply",
+    "canary-start",
+    "canary-pass",
+    "canary-fail",
+    "agent-start",
+    "agent-done",
+    "persist-pin",
+    "hostd-web-deferred"
+  ]);
+  if (typeof o.phase !== "string" || !PHASES.has(o.phase))
+    return null;
+  if (typeof o.target !== "string")
+    return null;
+  const out = {
+    phase: o.phase,
+    target: o.target
+  };
+  if (typeof o.agent === "string")
+    out.agent = o.agent;
+  if (typeof o.n === "number")
+    out.n = o.n;
+  if (typeof o.m === "number")
+    out.m = o.m;
+  return out;
+}
 var ROLLOUT_RESULT_SENTINEL = "SWITCHROOM_ROLLOUT_RESULT:";
 function parseRolloutResultLine(stdout) {
   const lines = stdout.split(`
@@ -22722,7 +22823,7 @@ function parseRolloutResultLine(stdout) {
   return null;
 }
 
-// node_modules/.bun/commander@13.1.0/node_modules/commander/esm.mjs
+// node_modules/commander/esm.mjs
 var import__3 = __toESM(require_commander(), 1);
 
 // src/cli/update.ts
@@ -22735,6 +22836,19 @@ import { execFileSync, spawn, spawnSync } from "node:child_process";
 // src/agents/tmux.ts
 var MAX_BYTES = 10 * 1024 * 1024;
 
+// src/agents/singleton-reconcile.ts
+var import_yaml4 = __toESM(require_dist(), 1);
+var CORE_SINGLETON_SERVICES = [
+  "vault-broker",
+  "approval-kernel",
+  "switchroom-auth-broker"
+];
+var VOICE_SIDECAR_SERVICE = "voice-sidecar";
+var SINGLETON_SERVICES = [
+  ...CORE_SINGLETON_SERVICES,
+  VOICE_SIDECAR_SERVICE
+];
+
 // src/agents/lifecycle.ts
 function containerName(name) {
   return `switchroom-${name}`;
@@ -22809,6 +22923,7 @@ function getAllAgentStatuses(config) {
 }
 
 // src/cli/update.ts
+init_atomic();
 var DEFAULT_COMPOSE_PATH = join3(homedir3(), ".switchroom", "compose", "docker-compose.yml");
 var UPDATE_RESULT_SENTINEL = "SWITCHROOM_UPDATE_RESULT:";
 function parseUpdateResultLine(stdout) {
@@ -22831,6 +22946,7 @@ function parseUpdateResultLine(stdout) {
 }
 
 // src/host-control/config-edit-validator.ts
+var import_yaml5 = __toESM(require_dist(), 1);
 import { mkdtempSync, writeFileSync as writeFileSync2, rmSync as rmSync2, existsSync as existsSync7, readFileSync as readFileSync5 } from "node:fs";
 import { tmpdir } from "node:os";
 import { join as join4, isAbsolute as isAbsolute2, normalize, basename as basename2 } from "node:path";
@@ -22855,6 +22971,33 @@ function isTargetPathHeader(headerPath, targetBasename) {
     return false;
   return norm === targetBasename || basename2(norm) === targetBasename;
 }
+function normalizeDiffHeadersToBasename(unifiedDiff, targetBasename) {
+  const rewriteHeaderLine = (line, marker) => {
+    const rest = line.slice(marker.length);
+    const tabIdx = rest.indexOf("\t");
+    const pathPart = (tabIdx === -1 ? rest : rest.slice(0, tabIdx)).trim();
+    const tail = tabIdx === -1 ? "" : rest.slice(tabIdx);
+    if (pathPart === "/dev/null")
+      return line;
+    let prefix = "";
+    let p = pathPart;
+    if (p.startsWith("a/") || p.startsWith("b/")) {
+      prefix = p.slice(0, 2);
+      p = p.slice(2);
+    }
+    const newPath = `${prefix}${targetBasename}`;
+    return `${marker}${newPath}${tail}`;
+  };
+  return unifiedDiff.split(`
+`).map((ln) => {
+    if (ln.startsWith("--- "))
+      return rewriteHeaderLine(ln, "--- ");
+    if (ln.startsWith("+++ "))
+      return rewriteHeaderLine(ln, "+++ ");
+    return ln;
+  }).join(`
+`);
+}
 function validateShape(unifiedDiff, targetPath) {
   const byteLen = Buffer.byteLength(unifiedDiff, "utf8");
   if (byteLen > MAX_PATCH_BYTES) {
@@ -22929,11 +23072,12 @@ function applyPatch(unifiedDiff, configPath, gitBin) {
   const liveContent = readFileSync5(configPath, "utf8");
   const scratchDir = mkdtempSync(join4(tmpdir(), "config-propose-edit-"));
   try {
-    const basename3 = configPath.split("/").pop() ?? "switchroom.yaml";
-    const scratchFile = join4(scratchDir, basename3);
+    const targetBasename = configPath.split("/").pop() ?? "switchroom.yaml";
+    const scratchFile = join4(scratchDir, targetBasename);
     writeFileSync2(scratchFile, liveContent);
+    const normalizedDiff = normalizeDiffHeadersToBasename(unifiedDiff, targetBasename);
     const patchFile = join4(scratchDir, "proposal.patch");
-    writeFileSync2(patchFile, unifiedDiff);
+    writeFileSync2(patchFile, normalizedDiff);
     const bin = gitBin ?? "git";
     const baseArgs = [
       "apply",
@@ -22972,7 +23116,7 @@ function applyPatch(unifiedDiff, configPath, gitBin) {
 function failsafeParse(source) {
   let doc;
   try {
-    doc = $parseDocument(source, { merge: false, strict: true });
+    doc = import_yaml5.parseDocument(source, { merge: false, strict: true });
   } catch (err2) {
     return {
       ok: false,
@@ -22988,25 +23132,25 @@ function failsafeParse(source) {
     };
   }
   let rejection = null;
-  $visit(doc, (_key, node, _path) => {
+  import_yaml5.visit(doc, (_key, node, _path) => {
     if (rejection)
-      return $visit.BREAK;
-    if ($isAlias(node)) {
+      return import_yaml5.visit.BREAK;
+    if (import_yaml5.isAlias(node)) {
       rejection = {
         ok: false,
         code: "E_YAML_UNSAFE_CONSTRUCT",
         detail: "YAML aliases (`*name`) are not allowed"
       };
-      return $visit.BREAK;
+      return import_yaml5.visit.BREAK;
     }
-    if ($isNode(node)) {
+    if (import_yaml5.isNode(node)) {
       if (node.anchor) {
         rejection = {
           ok: false,
           code: "E_YAML_UNSAFE_CONSTRUCT",
           detail: `YAML anchors (\`&${node.anchor}\`) are not allowed`
         };
-        return $visit.BREAK;
+        return import_yaml5.visit.BREAK;
       }
       const tag = node.tag;
       if (typeof tag === "string" && tag.startsWith("!")) {
@@ -23015,18 +23159,18 @@ function failsafeParse(source) {
           code: "E_YAML_UNSAFE_CONSTRUCT",
           detail: `YAML explicit tags (\`${tag}\`) are not allowed`
         };
-        return $visit.BREAK;
+        return import_yaml5.visit.BREAK;
       }
     }
-    if ($isPair(node)) {
+    if (import_yaml5.isPair(node)) {
       const k = node.key;
-      if ($isScalar(k) && k.value === "<<") {
+      if (import_yaml5.isScalar(k) && k.value === "<<") {
         rejection = {
           ok: false,
           code: "E_YAML_UNSAFE_CONSTRUCT",
           detail: "YAML merge keys (`<<:`) are not allowed"
         };
-        return $visit.BREAK;
+        return import_yaml5.visit.BREAK;
       }
     }
     return;
@@ -23162,7 +23306,7 @@ function validateConfigEdit(opts) {
   let beforeData = {};
   try {
     const beforeRaw = existsSync7(opts.configPath) ? readFileSync5(opts.configPath, "utf8") : "";
-    const beforeDoc = $parseDocument(beforeRaw, { merge: false, strict: false });
+    const beforeDoc = import_yaml5.parseDocument(beforeRaw, { merge: false, strict: false });
     beforeData = beforeDoc.toJS();
   } catch {
     beforeData = {};
@@ -23176,8 +23320,8 @@ function assertSelfScopedAllowEdit(beforeContent, afterContent, caller) {
   let before;
   let after;
   try {
-    before = toObject($parseDocument(beforeContent, { merge: false, strict: false }).toJS());
-    after = toObject($parseDocument(afterContent, { merge: false, strict: false }).toJS());
+    before = toObject(import_yaml5.parseDocument(beforeContent, { merge: false, strict: false }).toJS());
+    after = toObject(import_yaml5.parseDocument(afterContent, { merge: false, strict: false }).toJS());
   } catch (e) {
     return { ok: false, detail: `self-scope: config did not parse (${e.message})` };
   }
@@ -23236,6 +23380,7 @@ function stripCallerAllow(cfg, caller) {
 }
 
 // src/host-control/config-blast-radius.ts
+var import_yaml6 = __toESM(require_dist(), 1);
 function toObject2(v) {
   return v && typeof v === "object" && !Array.isArray(v) ? v : {};
 }
@@ -23284,8 +23429,8 @@ function classifyBlastRadius(beforeYaml, afterYaml) {
   let before;
   let after;
   try {
-    before = toObject2($parse(beforeYaml));
-    after = toObject2($parse(afterYaml));
+    before = toObject2(import_yaml6.parse(beforeYaml));
+    after = toObject2(import_yaml6.parse(afterYaml));
   } catch {
     return { agents: [], fleetWide: true, changedPaths: ["<unparseable>"] };
   }
@@ -23314,6 +23459,43 @@ function classifyBlastRadius(beforeYaml, afterYaml) {
   };
 }
 
+// src/host-control/render-rollout-status.ts
+function phaseLine(s) {
+  switch (s.phase) {
+    case "apply":
+      return "applying — regenerating compose";
+    case "canary-start":
+      return `canary — restarting ${s.agent ?? "canary agent"}`;
+    case "canary-pass":
+      return `canary passed (${s.agent ?? "canary"}) — rolling the rest`;
+    case "canary-fail":
+      return `canary failed (${s.agent ?? "canary"})`;
+    case "agent-start":
+      return `agent ${s.n ?? "?"}/${s.m ?? "?"} — restarting ${s.agent ?? ""}`.trim();
+    case "agent-done":
+      return `agent ${s.n ?? "?"}/${s.m ?? "?"} — ${s.agent ?? ""} done`.trim();
+    case "persist-pin":
+      return "persisting pin";
+    case "hostd-web-deferred":
+      return "hostd/web refresh deferred (run host-side)";
+    default:
+      return "starting";
+  }
+}
+function renderRolloutStatus(s) {
+  const head = `Rollout → ${s.target}`;
+  const rolledCount = s.rolled?.length ?? 0;
+  if (s.terminal === "completed") {
+    return `✅ ${head} — done. Rolled ${rolledCount} agent(s): ${(s.rolled ?? []).join(", ") || "none"}.`;
+  }
+  if (s.terminal === "error") {
+    const where = s.failedStep ? ` at ${s.failedStep}${s.failedAgent ? ` (${s.failedAgent} → ${s.got ?? "unreachable"})` : ""}` : "";
+    return `❌ ${head} — STOPPED${where}. ` + `Rolled before stop: ${(s.rolled ?? []).join(", ") || "none"}.`;
+  }
+  const progress = rolledCount > 0 ? ` · ${rolledCount} rolled` : "";
+  return `⏳ ${head} — ${phaseLine(s)}${progress}`;
+}
+
 // src/scheduler/dispatch.ts
 import { createHash as createHash4 } from "node:crypto";
 function collectScheduleEntries(config) {
@@ -23424,7 +23606,7 @@ function readCachedInstallType(bindRoot) {
   } catch {}
   return payload;
 }
-var CONFIG_APPROVAL_TIMEOUT_MS = 10 * 60 * 1000;
+var CONFIG_APPROVAL_TIMEOUT_MS = 60 * 60 * 1000;
 function defaultApprovalId() {
   return randomBytes(4).toString("hex");
 }
@@ -23467,6 +23649,9 @@ class HostdServer {
   auditChainState;
   idempotencyKeys = new Map;
   fleetMutationInFlight = null;
+  get rolloutNarrator() {
+    return this.opts.rolloutNarrator;
+  }
   constructor(opts) {
     this.opts = opts;
   }
@@ -23636,8 +23821,8 @@ class HostdServer {
     this.idempotencyKeys.clear();
   }
   onConnection(socket, bindPath) {
-    const identity2 = socketPathToIdentity(bindPath);
-    if (!identity2) {
+    const identity = socketPathToIdentity(bindPath);
+    if (!identity) {
       socket.end();
       return;
     }
@@ -23656,7 +23841,7 @@ class HostdServer {
         return;
       const line = buf.slice(0, nl);
       buf = buf.slice(nl + 1);
-      this.handleLine(line, identity2, socket).catch((err2) => {
+      this.handleLine(line, identity, socket).catch((err2) => {
         process.stderr.write(`hostd: handler error: ${err2.message}
 `);
         socket.end();
@@ -23779,6 +23964,9 @@ class HostdServer {
       case "get_status": {
         const entry = this.statusByRequestId.get(req.args.target_request_id);
         if (!entry) {
+          if (callerAdmin && this.rolloutRowExistsInLog(req.args.target_request_id)) {
+            return null;
+          }
           return `get_status: request_id not found or not visible to caller "${caller.name}"`;
         }
         const ownCall = entry.caller.kind === caller.kind && ("name" in entry.caller && "name" in caller ? entry.caller.name === caller.name : true);
@@ -24530,7 +24718,12 @@ class HostdServer {
     });
   }
   spawnRollout(args, entry) {
-    this.runSwitchroom(args, { SWITCHROOM_HOSTD_CONTEXT: "1" }).then((res) => {
+    const onLine = (line) => {
+      const phase = parseRolloutPhaseLine(line);
+      if (phase)
+        this.onRolloutPhase(entry, phase);
+    };
+    this.runSwitchroom(args, { SWITCHROOM_HOSTD_CONTEXT: "1" }, onLine).then((res) => {
       entry.exit_code = res.exit_code;
       entry.finished_at = Date.now();
       entry.stdout_tail = tail(res.stdout);
@@ -24559,27 +24752,111 @@ class HostdServer {
       delete entry.prior_pin;
     }).finally(() => {
       this.writeTerminalAudit(entry);
+      this.pushRolloutTerminal(entry);
+      try {
+        this.rolloutNarrator?.onTerminal(entry);
+      } catch (e) {
+        process.stderr.write(`hostd: rollout narrator onTerminal threw (non-fatal): ${e.message}
+`);
+      }
       if (this.fleetMutationInFlight && this.fleetMutationInFlight.request_id === entry.request_id) {
         this.fleetMutationInFlight = null;
       }
     });
   }
+  pushRolloutTerminal(entry) {
+    if (!this.opts.rolloutRelay)
+      return;
+    if (entry.caller.kind !== "agent")
+      return;
+    try {
+      const text = renderRolloutStatus({
+        target: entry.pin ?? "",
+        rolled: entry.rolled,
+        terminal: entry.result === "completed" ? "completed" : "error",
+        ...entry.failed_step ? { failedStep: entry.failed_step } : {},
+        ...entry.failed_agent ? { failedAgent: entry.failed_agent } : {},
+        ...entry.got !== undefined ? { got: entry.got } : {}
+      });
+      this.opts.rolloutRelay.postTerminal({
+        requestId: entry.request_id,
+        agentName: entry.caller.name,
+        text
+      });
+    } catch (e) {
+      process.stderr.write(`hostd: rollout terminal push failed (non-fatal): ${e.message}
+`);
+    }
+  }
   handleGetStatus(req, _caller, started) {
     const entry = this.statusByRequestId.get(req.args.target_request_id);
     if (!entry) {
+      const fromLog = this.rolloutStatusFromLog(req.request_id, req.args.target_request_id, started);
+      if (fromLog)
+        return fromLog;
       const legacy = `get_status: internal: entry missing despite gate accept`;
       const built = err("E_INTERNAL", "entry missing despite gate accept").op("get_status").build(req.request_id, Date.now() - started);
       return { ...built, error: legacy };
     }
     return this.statusEntryToResponse(req.request_id, entry);
   }
+  rolloutRowExistsInLog(targetRequestId) {
+    const path2 = this.auditLogPath();
+    if (!existsSync8(path2))
+      return false;
+    try {
+      const raw = readFileSync6(path2, "utf-8");
+      return latestRolloutRowForRequest(raw, targetRequestId) !== null;
+    } catch {
+      return false;
+    }
+  }
+  rolloutStatusFromLog(responseRequestId, targetRequestId, started) {
+    const path2 = this.auditLogPath();
+    if (!existsSync8(path2))
+      return null;
+    let raw;
+    try {
+      raw = readFileSync6(path2, "utf-8");
+    } catch {
+      return null;
+    }
+    const row = latestRolloutRowForRequest(raw, targetRequestId);
+    if (!row)
+      return null;
+    const isTerminal = row.phase === "terminal";
+    const payload = JSON.stringify({
+      rolled: row.rolled ?? [],
+      ...row.phase && !isTerminal ? { phase: row.phase } : {},
+      ...row.n !== undefined ? { n: row.n } : {},
+      ...row.m !== undefined ? { m: row.m } : {},
+      ...row.agent ? { agent: row.agent } : {},
+      ...row.failed_step ? { failedStep: row.failed_step } : {},
+      ...row.failed_agent ? { failedAgent: row.failed_agent } : {},
+      ...row.pin ? { pin: row.pin } : {},
+      ...row.prior_pin ? { prior_pin: row.prior_pin } : {}
+    });
+    return {
+      v: 1,
+      request_id: responseRequestId,
+      result: row.result,
+      exit_code: row.exit_code,
+      duration_ms: Date.now() - started,
+      payload
+    };
+  }
   statusEntryToResponse(request_id, entry) {
-    const rolloutPayload = entry.op === "rollout" && (entry.rolled !== undefined || entry.failed_step !== undefined || entry.failed_agent !== undefined) ? JSON.stringify({
+    const rolloutPayload = entry.op === "rollout" && (entry.rolled !== undefined || entry.failed_step !== undefined || entry.failed_agent !== undefined || entry.current_phase !== undefined) ? JSON.stringify({
       rolled: entry.rolled ?? [],
+      ...entry.current_phase ? { phase: entry.current_phase } : {},
+      ...entry.phase_n !== undefined ? { n: entry.phase_n } : {},
+      ...entry.phase_m !== undefined ? { m: entry.phase_m } : {},
+      ...entry.phase_agent ? { agent: entry.phase_agent } : {},
       ...entry.failed_step ? { failedStep: entry.failed_step } : {},
       ...entry.failed_agent ? { failedAgent: entry.failed_agent } : {},
       ...entry.got !== undefined ? { got: entry.got } : {},
-      ...entry.pin ? { pin: entry.pin } : {}
+      ...entry.pin ? { pin: entry.pin } : {},
+      ...entry.prior_pin ? { prior_pin: entry.prior_pin } : {}
     }) : undefined;
     const updatePayload = entry.op === "update_apply" && (entry.deferred !== undefined || entry.channel !== undefined || entry.pin !== undefined) ? {
       ...entry.deferred !== undefined ? { deferred: entry.deferred } : {},
@@ -24681,7 +24958,36 @@ class HostdServer {
       ...entry.prior_pin ? { prior_pin: entry.prior_pin } : {}
     });
   }
-  runSwitchroom(args, extraEnv) {
+  onRolloutPhase(entry, phase) {
+    entry.current_phase = phase.phase;
+    entry.phase_n = phase.n;
+    entry.phase_m = phase.m;
+    entry.phase_agent = phase.agent;
+    this.writePhaseAudit(entry, phase);
+    try {
+      this.rolloutNarrator?.onPhase(entry, phase);
+    } catch (e) {
+      process.stderr.write(`hostd: rollout narrator onPhase threw (non-fatal): ${e.message}
+`);
+    }
+  }
+  async writePhaseAudit(entry, phase) {
+    await this.appendAuditRow({
+      ts: new Date().toISOString(),
+      op: entry.op,
+      phase: phase.phase,
+      caller: entry.caller.kind === "agent" ? { kind: "agent", name: entry.caller.name } : { kind: "operator" },
+      request_id: entry.request_id,
+      result: "started",
+      exit_code: null,
+      duration_ms: Date.now() - entry.started_at,
+      ...entry.pin ? { pin: entry.pin } : {},
+      ...phase.agent !== undefined ? { agent: phase.agent } : {},
+      ...phase.n !== undefined ? { n: phase.n } : {},
+      ...phase.m !== undefined ? { m: phase.m } : {}
+    });
+  }
+  runSwitchroom(args, extraEnv, onStdoutLine) {
     return new Promise((resolve7, reject) => {
       const bin = this.opts.switchroomBin ?? "switchroom";
       const child = spawn2(bin, args, {
@@ -24690,14 +24996,49 @@ class HostdServer {
       });
       let stdout = "";
       let stderr = "";
+      let lineBuf = "";
+      const drainLines = (flush) => {
+        if (!onStdoutLine)
+          return;
+        let nl;
+        while ((nl = lineBuf.indexOf(`
+`)) !== -1) {
+          const line = lineBuf.slice(0, nl);
+          lineBuf = lineBuf.slice(nl + 1);
+          try {
+            onStdoutLine(line);
+          } catch (e) {
+            process.stderr.write(`hostd: rollout stdout-tap threw (non-fatal): ${e.message}
+`);
+          }
+        }
+        if (flush && lineBuf.length > 0) {
+          const line = lineBuf;
+          lineBuf = "";
+          try {
+            onStdoutLine(line);
+          } catch (e) {
+            process.stderr.write(`hostd: rollout stdout-tap threw (non-fatal): ${e.message}
+`);
+          }
+        }
+      };
       child.stdout.on("data", (d) => {
-        stdout += d.toString("utf8");
+        const s = d.toString("utf8");
+        stdout += s;
+        if (onStdoutLine) {
+          lineBuf += s;
+          drainLines(false);
+        }
       });
       child.stderr.on("data", (d) => {
         stderr += d.toString("utf8");
       });
       child.on("error", (err2) => reject(err2));
-      child.on("close", (code) => resolve7({ exit_code: code ?? -1, stdout, stderr }));
+      child.on("close", (code) => {
+        drainLines(true);
+        resolve7({ exit_code: code ?? -1, stdout, stderr });
+      });
     });
   }
 }
@@ -24929,6 +25270,395 @@ class SocketApprovalGateway {
   }
 }
 
+// src/host-control/rollout-relay.ts
+import { connect as connect2 } from "node:net";
+
+class SocketRolloutRelay {
+  opts;
+  constructor(opts) {
+    this.opts = opts;
+  }
+  postTerminal(notice) {
+    const log = this.opts.log ?? (() => {});
+    let sockPath;
+    try {
+      sockPath = this.opts.resolveGatewaySocket(notice.agentName);
+    } catch (e) {
+      log(`resolveGatewaySocket threw for ${notice.agentName}: ${e.message}`);
+      return;
+    }
+    if (sockPath === null) {
+      log(`no reachable gateway socket for ${notice.agentName}; dropping terminal ping`);
+      return;
+    }
+    try {
+      const client2 = connect2({ path: sockPath });
+      client2.setTimeout(5000);
+      const done = () => {
+        try {
+          client2.destroy();
+        } catch {}
+      };
+      client2.on("connect", () => {
+        try {
+          client2.write(JSON.stringify({
+            type: "rollout_status_post",
+            requestId: notice.requestId,
+            agentName: notice.agentName,
+            text: notice.text
+          }) + `
+`);
+          client2.end();
+        } catch (e) {
+          log(`rollout terminal write failed (requestId=${notice.requestId}): ${e.message}`);
+          done();
+        }
+      });
+      client2.on("timeout", () => {
+        log(`rollout terminal connect timed out (requestId=${notice.requestId})`);
+        done();
+      });
+      client2.on("error", (e) => {
+        log(`rollout terminal socket error (requestId=${notice.requestId}): ${e.message}`);
+        done();
+      });
+      client2.on("close", () => {});
+    } catch (e) {
+      log(`rollout terminal connect threw (requestId=${notice.requestId}): ${e.message}`);
+    }
+  }
+}
+
+// src/host-control/rollout-narration-relay.ts
+import { connect as connect3 } from "node:net";
+var DEFAULT_POST_REPLY_TIMEOUT_MS = 5000;
+
+class SocketRolloutNarrationRelay {
+  opts;
+  constructor(opts) {
+    this.opts = opts;
+  }
+  post(args) {
+    const log = this.opts.log ?? (() => {});
+    let sockPath;
+    try {
+      sockPath = this.opts.resolveGatewaySocket(args.agentName);
+    } catch (e) {
+      log(`narration resolveGatewaySocket threw: ${e.message}`);
+      return Promise.resolve(null);
+    }
+    if (sockPath === null) {
+      log(`narration post: no reachable gateway for ${args.agentName}`);
+      return Promise.resolve(null);
+    }
+    return new Promise((resolve7) => {
+      let settled = false;
+      const finish = (v) => {
+        if (settled)
+          return;
+        settled = true;
+        try {
+          client2.destroy();
+        } catch {}
+        resolve7(v);
+      };
+      let client2;
+      try {
+        client2 = connect3({ path: sockPath });
+      } catch (e) {
+        log(`narration post connect threw: ${e.message}`);
+        resolve7(null);
+        return;
+      }
+      client2.setTimeout(this.opts.postReplyTimeoutMs ?? DEFAULT_POST_REPLY_TIMEOUT_MS);
+      let buffer = "";
+      client2.on("connect", () => {
+        try {
+          client2.write(JSON.stringify({
+            type: "rollout_status_post",
+            requestId: args.requestId,
+            agentName: args.agentName,
+            text: args.text
+          }) + `
+`);
+        } catch (e) {
+          log(`narration post write failed: ${e.message}`);
+          finish(null);
+        }
+      });
+      client2.on("data", (chunk2) => {
+        buffer += chunk2.toString("utf8");
+        const lines = buffer.split(`
+`);
+        buffer = lines.pop() ?? "";
+        for (const line of lines) {
+          if (!line.trim())
+            continue;
+          let obj;
+          try {
+            obj = JSON.parse(line);
+          } catch {
+            continue;
+          }
+          if (obj.type === "rollout_status_posted" && obj.requestId === args.requestId) {
+            if (obj.ok === true && typeof obj.messageId === "number") {
+              finish(obj.messageId);
+            } else {
+              log(`narration post rejected by gateway (requestId=${args.requestId}): ${typeof obj.reason === "string" ? obj.reason : "no message_id"}`);
+              finish(null);
+            }
+            return;
+          }
+        }
+      });
+      client2.on("timeout", () => {
+        log(`narration post reply timed out (requestId=${args.requestId})`);
+        finish(null);
+      });
+      client2.on("error", (e) => {
+        log(`narration post socket error (requestId=${args.requestId}): ${e.message}`);
+        finish(null);
+      });
+      client2.on("close", () => finish(null));
+    });
+  }
+  edit(args) {
+    const log = this.opts.log ?? (() => {});
+    let sockPath;
+    try {
+      sockPath = this.opts.resolveGatewaySocket(args.agentName);
+    } catch (e) {
+      log(`narration edit resolveGatewaySocket threw: ${e.message}`);
+      return;
+    }
+    if (sockPath === null)
+      return;
+    try {
+      const client2 = connect3({ path: sockPath });
+      client2.setTimeout(5000);
+      const done = () => {
+        try {
+          client2.destroy();
+        } catch {}
+      };
+      client2.on("connect", () => {
+        try {
+          client2.write(JSON.stringify({
+            type: "rollout_status_edit",
+            requestId: args.requestId,
+            agentName: args.agentName,
+            messageId: args.messageId,
+            text: args.text
+          }) + `
+`);
+          client2.end();
+        } catch (e) {
+          log(`narration edit write failed: ${e.message}`);
+          done();
+        }
+      });
+      client2.on("timeout", done);
+      client2.on("error", (e) => {
+        log(`narration edit socket error: ${e.message}`);
+        done();
+      });
+      client2.on("close", () => {});
+    } catch (e) {
+      log(`narration edit connect threw: ${e.message}`);
+    }
+  }
+}
+
+// src/host-control/rollout-narrator.ts
+var DEFAULT_DEBOUNCE_MS = 1500;
+var MAX_POST_ATTEMPTS = 2;
+
+class LogTailRolloutNarrator {
+  relay;
+  opts;
+  states = new Map;
+  constructor(relay, opts = {}) {
+    this.relay = relay;
+    this.opts = opts;
+  }
+  static seqFor(phase) {
+    switch (phase.phase) {
+      case "apply":
+        return 0;
+      case "canary-start":
+        return 2 * 1 + 0;
+      case "canary-pass":
+      case "canary-fail":
+        return 2 * 1 + 1;
+      case "persist-pin":
+        return 2 * 1 + 1;
+      case "agent-start":
+        return 2 * (phase.n ?? 1) + 0;
+      case "agent-done":
+        return 2 * (phase.n ?? 1) + 1;
+      case "hostd-web-deferred":
+        return Number.MAX_SAFE_INTEGER - 1;
+      default:
+        return 0;
+    }
+  }
+  onPhase(entry, phase) {
+    try {
+      const st = this.ensureState(entry);
+      if (st.frozen)
+        return;
+      const seq = LogTailRolloutNarrator.seqFor(phase);
+      if (seq < st.lastAppliedSeq)
+        return;
+      st.lastAppliedSeq = seq;
+      st.render = {
+        ...st.render,
+        target: phase.target,
+        phase: phase.phase,
+        ...phase.n !== undefined ? { n: phase.n } : {},
+        ...phase.m !== undefined ? { m: phase.m } : {},
+        ...phase.agent !== undefined ? { agent: phase.agent } : {},
+        rolled: entry.rolled
+      };
+      this.scheduleRenderOrPost(entry.request_id);
+    } catch (e) {
+      this.opts.log?.(`onPhase threw (non-fatal): ${e.message}`);
+    }
+  }
+  onTerminal(entry) {
+    try {
+      const st = this.ensureState(entry);
+      st.render = {
+        target: entry.pin ?? st.render.target,
+        rolled: entry.rolled ?? st.render.rolled,
+        terminal: entry.result === "completed" ? "completed" : "error",
+        ...entry.failed_step ? { failedStep: entry.failed_step } : {},
+        ...entry.failed_agent ? { failedAgent: entry.failed_agent } : {},
+        ...entry.got !== undefined ? { got: entry.got } : {}
+      };
+      st.frozen = true;
+      if (st.timer) {
+        clearTimeout(st.timer);
+        st.timer = null;
+      }
+      this.flush(entry.request_id, true);
+      setTimeout(() => this.states.delete(entry.request_id), 1e4).unref?.();
+    } catch (e) {
+      this.opts.log?.(`onTerminal threw (non-fatal): ${e.message}`);
+    }
+  }
+  ensureState(entry) {
+    let st = this.states.get(entry.request_id);
+    if (!st) {
+      const agentName = entry.caller.kind === "agent" ? entry.caller.name : "";
+      st = {
+        agentName,
+        lastAppliedSeq: -1,
+        messageId: null,
+        posting: false,
+        postAttempts: 0,
+        postFailed: false,
+        render: { target: entry.pin ?? "" },
+        frozen: false,
+        timer: null,
+        pendingEditAfterPost: false
+      };
+      this.states.set(entry.request_id, st);
+    }
+    return st;
+  }
+  scheduleRenderOrPost(requestId) {
+    const st = this.states.get(requestId);
+    if (!st)
+      return;
+    if (st.agentName.length === 0)
+      return;
+    if (st.messageId !== null) {
+      this.scheduleDebouncedEdit(requestId);
+      return;
+    }
+    if (st.posting) {
+      st.pendingEditAfterPost = true;
+      return;
+    }
+    if (st.postFailed)
+      return;
+    this.tryPost(requestId, false);
+  }
+  tryPost(requestId, terminal) {
+    const st = this.states.get(requestId);
+    if (!st)
+      return false;
+    if (st.messageId !== null || st.posting)
+      return false;
+    if (st.postAttempts >= MAX_POST_ATTEMPTS)
+      return false;
+    if (st.postFailed && !terminal)
+      return false;
+    st.posting = true;
+    st.postAttempts += 1;
+    const text = renderRolloutStatus(st.render);
+    this.relay.post({ requestId, agentName: st.agentName, text }).then((mid) => {
+      st.posting = false;
+      if (mid === null) {
+        st.postFailed = true;
+        this.opts.log?.(`rollout narration post returned no message_id (requestId=${requestId}); backing off re-posts`);
+        return;
+      }
+      st.messageId = mid;
+      st.postFailed = false;
+      if (st.pendingEditAfterPost) {
+        st.pendingEditAfterPost = false;
+        this.flush(requestId, false);
+      }
+    }).catch((e) => {
+      st.posting = false;
+      st.postFailed = true;
+      this.opts.log?.(`rollout narration post failed (non-fatal): ${e.message}`);
+    });
+    return true;
+  }
+  scheduleDebouncedEdit(requestId) {
+    const st = this.states.get(requestId);
+    if (!st)
+      return;
+    if (st.timer)
+      return;
+    const ms = this.opts.debounceMs ?? DEFAULT_DEBOUNCE_MS;
+    st.timer = setTimeout(() => {
+      st.timer = null;
+      this.flush(requestId, true);
+    }, ms);
+    st.timer.unref?.();
+  }
+  flush(requestId, immediate) {
+    const st = this.states.get(requestId);
+    if (!st)
+      return;
+    if (st.agentName.length === 0)
+      return;
+    if (!immediate) {
+      this.scheduleDebouncedEdit(requestId);
+      return;
+    }
+    if (st.messageId === null) {
+      if (st.posting) {
+        st.pendingEditAfterPost = true;
+        return;
+      }
+      this.tryPost(requestId, true);
+      return;
+    }
+    const text = renderRolloutStatus(st.render);
+    this.relay.edit({
+      requestId,
+      agentName: st.agentName,
+      messageId: st.messageId,
+      text
+    });
+  }
+}
+
 // src/host-control/release-watcher.ts
 class ReleaseWatcher {
   opts;
@@ -25194,14 +25924,26 @@ async function main() {
     process.exit(2);
   }
   const agentsDir = process.env.SWITCHROOM_AGENTS_DIR ?? join6(homedir4(), ".switchroom", "agents");
+  const resolveGatewaySocket = (agentName) => {
+    const sock = resolve7(agentsDir, agentName, "telegram", "gateway.sock");
+    return existsSync9(sock) ? sock : null;
+  };
   const approvalGateway = new SocketApprovalGateway({
-    resolveGatewaySocket: (agentName) => {
-      const sock = resolve7(agentsDir, agentName, "telegram", "gateway.sock");
-      return existsSync9(sock) ? sock : null;
-    },
+    resolveGatewaySocket,
     log: (m) => process.stderr.write(`hostd: approval-gateway — ${m}
 `)
   });
+  const rolloutRelay = new SocketRolloutRelay({
+    resolveGatewaySocket,
+    log: (m) => process.stderr.write(`hostd: rollout-relay — ${m}
+`)
+  });
+  const rolloutNarrator = new LogTailRolloutNarrator(new SocketRolloutNarrationRelay({
+    resolveGatewaySocket,
+    log: (m) => process.stderr.write(`hostd: rollout-narration — ${m}
+`)
+  }), { log: (m) => process.stderr.write(`hostd: rollout-narration — ${m}
+`) });
   const server = new HostdServer({
     homeDir: homedir4(),
     agentUids,
@@ -25216,7 +25958,9 @@ async function main() {
         }
       } : {}
     },
-    approvalGateway
+    approvalGateway,
+    rolloutRelay,
+    rolloutNarrator
   });
   await server.start();
   const paths = server.getBoundPaths();