switchroom 0.18.9 → 0.18.11

package/dist/cli/switchroom.js

@@ -14232,6 +14232,7 @@ var init_schema = __esm(() => {
         uid: exports_external.number().int().nonnegative().optional().describe("Optional UID to chown the consumer socket to (defaults to 0 = root, " + "suitable for sibling containers running as root)."),
         mirror_dir: exports_external.string().optional().describe("Optional host-side directory path. When set, the broker actively " + "writes the consumer's effective-account `.credentials.json` mirror " + "here \u2014 in addition to serving creds on demand via `get-credentials`. " + "Use this to eliminate the pull-latency gap: without a mirror the " + "consumer only gets failover creds at its next scheduled re-fetch " + "(up to 30 min). With a mirror the broker pushes failover creds " + "immediately when it detects exhaustion (consumer-quota-sensor tick, " + "or a mark-exhausted RPC on the pinned account). The directory must " + "be accessible to the broker container (bind-mounted from the host) " + "and to the consumer container; the broker writes " + "`<mirror_dir>/.credentials.json` atomically. Chown is attempted to " + "`uid` (default 0) \u2014 swallowed when CAP_CHOWN is absent.")
       })).optional().describe("Non-agent peers that hold a broker socket (RFC H \u00a74.8). Each gets " + "its own `/run/switchroom/auth-broker/<name>/sock` chowned to its UID. " + "Consumers cannot be admins; a consumer name that collides with an " + "agent (whether that agent has `admin: true` or not) is a config " + "error caught at schema validation."),
+      proactive_failover_pct: exports_external.number().min(1).max(99).optional().describe("Soft-avoid threshold (percent) for proactive auth failover (#3031). " + "When set (e.g. 95), an account whose fresh 7-day utilization is at/" + "above this value \u2014 or whose 5h utilization is at/above min(pct+3, " + "98) \u2014 enters the SOFT-AVOID preference tier: the broker prefers a " + "fully-eligible fallback account on the serving path, without ever " + "blocking the account (the hard wall stays 99.5). Enter/exit uses " + "hysteresis (exit below pct-5 or on window reset) so the preference " + "does not flap between probe ticks. Accounts serving past the wall " + "via `allow_overage_accounts` are never soft-avoided. UNSET (the " + "default) disables the tier entirely \u2014 behavior is identical to a " + "fleet without this field."),
       allow_overage_accounts: exports_external.array(exports_external.string().min(1)).optional().describe("Opt-in list of account labels (bare strings matching `auth.active` / " + "`auth.fallback_order` entries) that may be served PAST the weekly " + "utilization wall when Anthropic overage billing is available for the " + "account (`overageStatus === 'allowed'`). Overage is REAL MONEY \u2014 " + "default is empty (no account gets this). An account in this list is " + "only kept eligible when its fresh quota snapshot reports " + "`overageStatus: 'allowed'` AND `overageDisabledReason` is NOT " + "'out_of_credits' (i.e. the overage credit has not been exhausted). " + "As soon as `overageDisabledReason` becomes 'out_of_credits', the " + "account is blocked immediately regardless of this flag. Overage lifts " + "ONLY the utilization wall \u2014 it cannot lift an active exhaustion mark " + "written by a real 429 (`mark-exhausted`).")
     }).optional().describe("Switchroom-auth-broker configuration (RFC H). Fleet-wide active account, " + "fallback order, admin-agent ACL, and ephemeral-consumer surface. " + "Required from the v0.8+ schema onwards; pre-v0.8 fleets are migrated " + "in-place by `switchroom apply` (see src/auth/migrate-schema.ts)."),
     drive: GoogleWorkspaceConfigSchema.describe("RFC D legacy key \u2014 use `google_workspace:` instead. Optional Google " + "Workspace onboarding configuration. When set, supplies Google OAuth " + "client credentials, the approver allowlist for `switchroom drive " + "connect`, and the optional tier knob. Env vars " + "(SWITCHROOM_GOOGLE_CLIENT_ID, SWITCHROOM_GOOGLE_CLIENT_SECRET, " + "SWITCHROOM_APPROVER_USER_ID) take precedence over this block when " + "set, preserving back-compat with the env-only flow shipped in #766."),
@@ -17427,6 +17428,40 @@ function registerAgentConfigCommands(program2) {
       process.exit(1);
     }
   }));
+  config.command("check").description("Validate a switchroom.yaml (YAML parse incl. duplicate keys, schema, cross-field checks) without starting anything").option("--file <path>", "YAML file to validate (defaults to the discovered switchroom.yaml)").action(async (opts) => {
+    let path;
+    try {
+      path = opts.file ?? findConfigFile();
+    } catch (err) {
+      if (!(err instanceof ConfigError))
+        throw err;
+      process.stderr.write(`INVALID: switchroom.yaml not found
+${err.message}
+`);
+      for (const d of err.details ?? []) {
+        process.stderr.write(`${d}
+`);
+      }
+      process.exit(1);
+    }
+    try {
+      loadConfig(path);
+    } catch (err) {
+      if (err instanceof ConfigError) {
+        process.stderr.write(`INVALID: ${path}
+${err.message}
+`);
+        for (const d of err.details ?? []) {
+          process.stderr.write(`${d}
+`);
+        }
+        process.exit(1);
+      }
+      throw err;
+    }
+    process.stdout.write(`OK: ${path} is a valid switchroom config
+`);
+  });
   config.command("whoami").description("Emit what this agent is allowed to do (tools, MCP, vault key-names, powers) as JSON \u2014 its own sandbox, computed from live enforcement").option("--agent <name>", "Target agent (defaults to $SWITCHROOM_AGENT_NAME)").action(withConfigError(async (opts) => {
     let agent;
     try {
@@ -17587,6 +17622,7 @@ function registerAgentConfigCommands(program2) {
 var AUDIT_ROOT;
 var init_agent_config = __esm(() => {
   init_helpers();
+  init_loader();
   init_merge();
   init_acl();
   init_cron_introspect();
@@ -23256,6 +23292,14 @@ function renderExecutionDisciplineFragment(context = {}, profilesRoot = PROFILES
   const template = import_handlebars.default.compile(source, { noEscape: true });
   return template(context).trimEnd();
 }
+function renderDevProtocolFragment(context = {}, profilesRoot = PROFILES_ROOT) {
+  const fragPath = join4(resolve4(profilesRoot, "_shared"), "dev-protocol.md.hbs");
+  if (!existsSync6(fragPath))
+    return "";
+  const source = readFileSync6(fragPath, "utf-8");
+  const template = import_handlebars.default.compile(source, { noEscape: true });
+  return template(context).trimEnd();
+}
 function renderReplyDisciplineFragment(context = {}, profilesRoot = PROFILES_ROOT) {
   const fragPath = join4(resolve4(profilesRoot, "_shared"), "reply-discipline.md.hbs");
   if (!existsSync6(fragPath))
@@ -23297,7 +23341,7 @@ var init_profiles = __esm(() => {
     return typeof value === "number" && Number.isFinite(value);
   });
   SHARED_FRAGMENTS_DIR = resolve4(PROFILES_ROOT, "_shared");
-  SHARED_FRAGMENTS = ["vault-protocol", "agent-self-service", "execution-discipline", "reply-discipline"];
+  SHARED_FRAGMENTS = ["vault-protocol", "agent-self-service", "execution-discipline", "reply-discipline", "dev-protocol"];
   for (const name of SHARED_FRAGMENTS) {
     const fragPath = join4(SHARED_FRAGMENTS_DIR, `${name}.md.hbs`);
     if (existsSync6(fragPath)) {
@@ -23383,7 +23427,8 @@ function getBuiltinDefaultSkillEntries() {
     "switchroom-status",
     "switchroom-health",
     "switchroom-runtime",
-    "mental-model-curator"
+    "mental-model-curator",
+    "dev-protocol"
   ];
   return [
     ...anthropic.map((key) => ({ key, optOutKey: key, source: "anthropic" })),
@@ -27277,6 +27322,13 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
             rendered = rendered.trimEnd() + `
 
 ` + executionDiscipline + `
+`;
+          }
+          const devProtocol = renderDevProtocolFragment(context);
+          if (devProtocol) {
+            rendered = rendered.trimEnd() + `
+
+` + devProtocol + `
 `;
           }
         }
@@ -28111,6 +28163,13 @@ ${baseAppend}` : TELEGRAM_FORMATTING_FLOOR_CARD;
         rendered = rendered.trimEnd() + `
 
 ` + executionDiscipline + `
+`;
+      }
+      const devProtocol = renderDevProtocolFragment(claudeContext);
+      if (devProtocol) {
+        rendered = rendered.trimEnd() + `
+
+` + devProtocol + `
 `;
       }
       let composed = composeWithSidecar(rendered, claudeCustomPath);
@@ -63375,9 +63434,9 @@ __export(exports_server, {
   dispatchTool: () => dispatchTool,
   TOOLS: () => TOOLS
 });
-import { spawnSync as spawnSync17 } from "node:child_process";
+import { spawnSync as spawnSync18 } from "node:child_process";
 function execCli(args, stdin) {
-  const r = spawnSync17(CLI_BIN, args, {
+  const r = spawnSync18(CLI_BIN, args, {
     encoding: "utf-8",
     env: process.env,
     timeout: 15000,
@@ -63881,6 +63940,7 @@ __export(exports_server2, {
   resolveAuditLogPath: () => resolveAuditLogPath,
   getLastUpdateApplyStatus: () => getLastUpdateApplyStatus,
   dispatchTool: () => dispatchTool2,
+  UPDATE_APPLY_SEMVER_PIN_ADVISORY: () => UPDATE_APPLY_SEMVER_PIN_ADVISORY,
   TOOLS: () => TOOLS2
 });
 import { randomBytes as randomBytes16 } from "node:crypto";
@@ -63895,7 +63955,7 @@ function wireTimeoutForOp(op) {
   return WIRE_TIMEOUT_MS_BY_OP[op] ?? DEFAULT_WIRE_TIMEOUT_MS;
 }
 async function dispatchTool2(name, args) {
-  if (name === "get_status") {
+  if (name === "get_status" && args.request_id === undefined) {
     return getLastUpdateApplyStatus();
   }
   if (!SELF_AGENT) {
@@ -63906,6 +63966,7 @@ async function dispatchTool2(name, args) {
     return errorText2(`hostd MCP: socket not bound at ${sockPath}. The host-control ` + `daemon is either not installed (run \`switchroom hostd install\`) ` + `or this agent isn't admin-flagged in switchroom.yaml. RFC C ` + `bind-mounts the per-agent socket only when host_control.enabled ` + `is true AND the agent has admin: true.`);
   }
   let req;
+  let advisory;
   switch (name) {
     case "agent_restart": {
       if (!args.name)
@@ -63998,6 +64059,9 @@ async function dispatchTool2(name, args) {
       if (args.pin && !/^(sha-[0-9a-f]{7,40}|v\d+\.\d+\.\d+)$/.test(args.pin)) {
         return errorText2(`update_apply: pin "${args.pin}" is invalid. Expected sha-<7-40 hex> or v<semver>.`);
       }
+      if (args.pin && ROLLOUT_SEMVER_PIN_RE.test(args.pin)) {
+        advisory = UPDATE_APPLY_SEMVER_PIN_ADVISORY;
+      }
       req = {
         v: 1,
         op: "update_apply",
@@ -64036,6 +64100,18 @@ async function dispatchTool2(name, args) {
       };
       break;
     }
+    case "get_status": {
+      if (typeof args.request_id !== "string" || !args.request_id) {
+        return errorText2("get_status: request_id must be a non-empty string");
+      }
+      req = {
+        v: 1,
+        op: "get_status",
+        request_id: makeRequestId("mcp-get-status"),
+        args: { target_request_id: args.request_id }
+      };
+      break;
+    }
     case "config_propose_edit": {
       if (!args.unified_diff || typeof args.unified_diff !== "string") {
         return errorText2("config_propose_edit: unified_diff is required (non-empty string).");
@@ -64071,7 +64147,11 @@ async function dispatchTool2(name, args) {
     return errorText2(`hostd wire error (request_id=${req.request_id}): ` + `${err2.message}`);
   }
   if (resp.result === "started" || resp.result === "completed") {
-    return jsonText2(resp);
+    const out = jsonText2(resp);
+    if (advisory) {
+      out.content.push({ type: "text", text: advisory });
+    }
+    return out;
   }
   const content = [
     { type: "text", text: JSON.stringify(resp) }
@@ -64143,7 +64223,7 @@ async function runHostdMcpServer() {
   const transport = new StdioServerTransport;
   await server.connect(transport);
 }
-var SELF_AGENT, DEFAULT_WIRE_TIMEOUT_MS = 1e4, WIRE_TIMEOUT_MS_BY_OP, ROLLOUT_SEMVER_PIN_RE, TOOLS2;
+var SELF_AGENT, DEFAULT_WIRE_TIMEOUT_MS = 1e4, WIRE_TIMEOUT_MS_BY_OP, ROLLOUT_SEMVER_PIN_RE, UPDATE_APPLY_SEMVER_PIN_ADVISORY, TOOLS2;
 var init_server4 = __esm(() => {
   init_server2();
   init_stdio2();
@@ -64155,6 +64235,7 @@ var init_server4 = __esm(() => {
     config_propose_edit: 61 * 60 * 1000
   };
   ROLLOUT_SEMVER_PIN_RE = /^v\d+\.\d+\.\d+$/;
+  UPDATE_APPLY_SEMVER_PIN_ADVISORY = "\u26a0\ufe0f advisory: update_apply with a semver pin is the BLUNT path \u2014 all " + "containers recreate at once, with no canary, no per-agent version " + "assert, and no stop-on-mismatch. For fleet version rolls prefer the " + "`rollout` tool (staggered, canary-gated, version-asserted; also " + "refreshes the web + hindsight singletons). This request was still " + "dispatched \u2014 this is a steer, not a refusal.";
   TOOLS2 = [
     {
       name: "agent_restart",
@@ -64278,7 +64359,7 @@ var init_server4 = __esm(() => {
     },
     {
       name: "update_apply",
-      description: "Execute a fleet-wide update: pull images, regenerate " + "scaffolds, recreate containers. Admin-only at the wire layer. " + "Returns `started` once dispatched \u2014 the actual work runs " + "async on the host and the caller's own agent container will " + "be recreated as part of the cycle. This is operator-gated \u2014 every " + "call surfaces a Telegram approval card. ALWAYS pass a one-line " + "`reason` explaining why you're applying this update; it renders on " + "the card's `why:` line so the operator can decide in context.",
+      description: "Execute a fleet-wide update: pull images, regenerate " + "scaffolds, recreate containers. This is the BLUNT all-at-once " + "path \u2014 no canary, no per-agent version assert, no stop-on-" + "mismatch. For rolling the fleet to a specific VERSION (a semver " + "pin), prefer the `rollout` tool instead: staggered, canary-gated, " + "version-asserted, and it also refreshes the web + hindsight " + "singletons. Calling update_apply with a semver pin still works " + "(the operator may want the blunt path deliberately) but the " + "result includes an advisory warning. Admin-only at the wire layer. " + "Returns `started` once dispatched \u2014 the actual work runs " + "async on the host and the caller's own agent container will " + "be recreated as part of the cycle. This is operator-gated \u2014 every " + "call surfaces a Telegram approval card. ALWAYS pass a one-line " + "`reason` explaining why you're applying this update; it renders on " + "the card's `why:` line so the operator can decide in context.",
       inputSchema: {
         type: "object",
         properties: {
@@ -64310,7 +64391,7 @@ var init_server4 = __esm(() => {
     },
     {
       name: "rollout",
-      description: "SAFELY roll the fleet to a pinned SEMVER version, staggered and " + "canary-gated (#2487). Unlike update_apply (a blunt all-at-once " + "recreate), this restarts agents one at a time canary-first, asserts " + "each agent's in-container `switchroom --version` matches the target, " + "and STOPS on the first mismatch \u2014 so a bad build fails on the canary " + "before touching the rest of the fleet. The durable release.pin is " + "persisted only AFTER the canary confirms (a failed canary never " + "strands a bad pin). `pin` MUST be a tagged semver (vX.Y.Z) \u2014 sha " + "pins are rejected because the version assert needs a semver to " + "compare against. When the target pin is NEWER than hostd's own CLI " + "(every freshly tagged release), hostd SELF-BUMPS first (#2645): its " + "container restarts on the target image (~30-60s blip on this MCP " + "socket), then the roll resumes AUTOMATICALLY under the SAME " + "request_id \u2014 do NOT re-issue the rollout during the blip; poll " + "get_status with the returned request_id once the socket is back. " + "The web refresh stays DEFERRED on this path; the terminal warnings " + "name exactly what is still on the prior version (web, host operator " + "CLI) and the host-side commands to finish. By default downgrade pins " + "are rejected \u2014 pass `allow_downgrade: true` for the operator-approved " + "rollback path to a known-good earlier tag; all other safety rails " + "(canary order, version-assert, stop-on-mismatch) apply unchanged. " + "Admin-only at the wire layer AND deliberately NOT pre-approved \u2014 every " + "call surfaces a Telegram approval card for the operator to tap. " + "ALWAYS pass a one-line `reason` explaining why you're rolling the " + "fleet to this pin; it renders on the card's `why:` line so the " + "operator can decide in context. " + "Returns `started`; poll get_status for the structured outcome " + "(which agents rolled / where it stopped).",
+      description: "SAFELY roll the fleet to a pinned SEMVER version, staggered and " + "canary-gated (#2487). Unlike update_apply (a blunt all-at-once " + "recreate), this restarts agents one at a time canary-first, asserts " + "each agent's in-container `switchroom --version` matches the target, " + "and STOPS on the first mismatch \u2014 so a bad build fails on the canary " + "before touching the rest of the fleet. The durable release.pin is " + "persisted only AFTER the canary confirms (a failed canary never " + "strands a bad pin). `pin` MUST be a tagged semver (vX.Y.Z) \u2014 sha " + "pins are rejected because the version assert needs a semver to " + "compare against. When the target pin is NEWER than hostd's own CLI " + "(every freshly tagged release), hostd SELF-BUMPS first (#2645): its " + "container restarts on the target image (~30-60s blip on this MCP " + "socket), then the roll resumes AUTOMATICALLY under the SAME " + "request_id \u2014 do NOT re-issue the rollout during the blip; poll " + "get_status (pass the returned request_id as its `request_id` " + "argument) once the socket is back. " + "The web + hindsight singletons are refreshed in-plan on this path " + "(only the hostd template regen + host operator CLI stay host-side; " + "the terminal warnings name exactly what is still on the prior " + "version and the commands to finish). By default downgrade pins " + "are rejected \u2014 pass `allow_downgrade: true` for the operator-approved " + "rollback path to a known-good earlier tag; all other safety rails " + "(canary order, version-assert, stop-on-mismatch) apply unchanged. " + "Admin-only at the wire layer AND deliberately NOT pre-approved \u2014 every " + "call surfaces a Telegram approval card for the operator to tap. " + "ALWAYS pass a one-line `reason` explaining why you're rolling the " + "fleet to this pin; it renders on the card's `why:` line so the " + "operator can decide in context. " + "Returns `started`; poll get_status with `request_id` for the " + "structured outcome (which agents rolled / where it stopped).",
       inputSchema: {
         type: "object",
         required: ["pin"],
@@ -64333,11 +64414,11 @@ var init_server4 = __esm(() => {
           },
           skip_web: {
             type: "boolean",
-            description: "Skip the web + hostd refresh step. NB: on this (hostd) path " + "the hostd/web refresh is deferred regardless; this flag is " + "forwarded for parity."
+            description: "Skip the web refresh step (leaves switchroom-web on the prior " + "version \u2014 the terminal warning names the host-side command to " + "finish). The hostd self-refresh is deferred on this path " + "regardless of this flag."
           },
           allow_downgrade: {
             type: "boolean",
-            description: "Operator-approved rollback to a known-good earlier tag (#2487 PR2). " + "When true, the downgrade guard is relaxed so `pin` may be older " + "than the current release.pin. All other safety rails (canary order, " + "version-assert, stop-on-mismatch, persist-after-canary, " + "hostd/web deferral) apply unchanged. Still gated by the operator " + "approval card \u2014 not pre-approved."
+            description: "Operator-approved rollback to a known-good earlier tag (#2487 PR2). " + "When true, the downgrade guard is relaxed so `pin` may be older " + "than the current release.pin. All other safety rails (canary order, " + "version-assert, stop-on-mismatch, persist-after-canary, " + "hostd deferral) apply unchanged. Still gated by the operator " + "approval card \u2014 not pre-approved."
           }
         }
       }
@@ -64370,10 +64451,17 @@ var init_server4 = __esm(() => {
     },
     {
       name: "get_status",
-      description: "Read the most recent terminal `update_apply` audit row " + "(channel, pin, resolved_sha, install_context, result, " + "exit_code, stderr_tail). Use this after issuing an " + "`update_apply` to confirm what actually rolled out, or to " + "report the last update on demand. Returns the parsed audit " + "entry as JSON.",
+      description: "Look up the status of a prior async fleet mutation. With " + "`request_id` (the id echoed by rollout / update_apply / " + "agent_restart etc.), asks the host-control daemon for that " + "specific request's live status \u2014 for an in-flight `rollout` " + "this is the ONLY way to see progress: the response payload " + "carries the current phase, n/m counters, rolled[] agents, " + "failedStep/failedAgent and pin, and it keeps working across a " + "hostd self-bump/restart via the durable audit-log fallback. " + "This is the tool the `rollout` description tells you to poll " + "with the returned request_id. Without `request_id`, falls back " + "to reading the most recent terminal `update_apply` audit row " + "(channel, pin, resolved_sha, install_context, result, " + "exit_code, stderr_tail) \u2014 use that no-arg form only to report " + "the last blunt update on demand; it CANNOT see rollouts or " + "in-flight work. Read-only; returns JSON.",
       inputSchema: {
         type: "object",
-        properties: {},
+        properties: {
+          request_id: {
+            type: "string",
+            minLength: 1,
+            maxLength: 128,
+            description: "The request_id returned by a prior mutating verb " + "(e.g. `mcp-rollout-\u2026`). When set, the daemon returns " + "that request's rich per-request status (phase, n/m, " + "rolled agents, outcome). Omit to read the last " + "terminal update_apply audit row instead."
+          }
+        },
         additionalProperties: false
       }
     }
@@ -64889,8 +64977,8 @@ import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.18.9";
-var COMMIT_SHA = "436289c9";
+var VERSION = "0.18.11";
+var COMMIT_SHA = "8fbd9574";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -85030,13 +85118,52 @@ function registerUpdateCommand(program3) {
 
 // src/cli/rollout.ts
 init_helpers();
-import { spawnSync as spawnSync13 } from "node:child_process";
+import { spawnSync as spawnSync14 } from "node:child_process";
 import { readFileSync as readFileSync58, chownSync as chownSync6, statSync as statSync30 } from "node:fs";
 import { homedir as homedir40 } from "node:os";
 init_operator_uid();
 init_atomic();
 init_audit_reader();
 init_hindsight();
+
+// src/cli/deploy-version-guard.ts
+import { spawnSync as spawnSync13 } from "node:child_process";
+var defaultRunner3 = (args) => {
+  const r = spawnSync13("docker", args, { encoding: "utf8" });
+  return { ok: r.status === 0, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
+};
+function deployedImageTag(container, run = defaultRunner3) {
+  const r = run(["inspect", "-f", "{{.Config.Image}}", container]);
+  if (!r.ok)
+    return null;
+  const ref = r.stdout.trim();
+  if (!ref)
+    return null;
+  const noDigest = ref.split("@")[0];
+  const colon = noDigest.lastIndexOf(":");
+  if (colon < 0)
+    return null;
+  const tag = noDigest.slice(colon + 1);
+  return tag && !tag.includes("/") ? tag : null;
+}
+function checkDowngrade(opts) {
+  const running = deployedImageTag(opts.container, opts.run);
+  if (opts.allowDowngrade)
+    return { skip: false, running };
+  const cmp = compareReleaseTags(opts.targetTag, running);
+  if (cmp !== null && cmp < 0) {
+    return {
+      skip: true,
+      running,
+      message: `Skipping ${opts.container} deploy \u2014 it is already on ${running}, newer than the ` + `requested ${opts.targetTag}.
+` + `     Refusing to downgrade: this guards against a concurrent rollout/update ` + `reverting a newer build.
+` + `     To force the downgrade, re-run with --allow-downgrade.`
+    };
+  }
+  return { skip: false, running };
+}
+
+// src/cli/rollout.ts
 function normalizeVersion(v) {
   return v.trim().replace(/^v/, "");
 }
@@ -85065,6 +85192,9 @@ function planRollout(agents, opts = {}) {
     } else if (opts.pinToPersist) {
       steps.push({ kind: "persist-pin", pin: opts.pinToPersist });
     }
+    if (!opts.skipWeb) {
+      steps.push({ kind: "refresh-web" });
+    }
     steps.push({ kind: "refresh-hindsight" });
     steps.push({ kind: "sweep" });
     return steps;
@@ -85216,15 +85346,24 @@ function executeRollout(steps, target, deps, execOpts = {}) {
         break;
       }
       case "refresh-web": {
-        deps.log(`ROLL_STEP refresh-web \u2014 webd install --tag ${target}`);
-        const r = deps.run(["webd", "install", "--tag", target]);
-        if (r.status !== 0)
-          warnings.push(`web refresh failed (non-fatal); agents already rolled`);
+        const downgradeArgs = execOpts.allowDowngrade ? ["--allow-downgrade"] : [];
+        deps.log(`ROLL_STEP refresh-web \u2014 webd install --tag ${target}` + (execOpts.allowDowngrade ? " --allow-downgrade" : ""));
+        emit({ phase: "web-refresh", target });
+        const r = deps.run(["webd", "install", "--tag", target, ...downgradeArgs]);
+        if (r.status !== 0) {
+          warnings.push(`web refresh FAILED (non-fatal \u2014 agents already rolled) so ` + `switchroom-web is still on the PRIOR version. Finish it ` + `host-side: \`switchroom webd install --tag ${target}\`.`);
+          break;
+        }
+        const webTag = deps.webImageTag?.();
+        if (webTag !== undefined && webTag !== null && isVersionAssertable(webTag) && normalizeVersion(webTag) !== targetNorm) {
+          warnings.push(`web refresh completed but switchroom-web is running ${webTag}, ` + `NOT the roll target ${target} (most likely its downgrade guard ` + `skipped the install). Finish it host-side: \`switchroom webd ` + `install --tag ${target} --allow-downgrade\`.`);
+        }
         break;
       }
       case "refresh-hostd": {
-        deps.log(`ROLL_STEP refresh-hostd \u2014 hostd install --tag ${target}`);
-        const r = deps.run(["hostd", "install", "--tag", target]);
+        const downgradeArgs = execOpts.allowDowngrade ? ["--allow-downgrade"] : [];
+        deps.log(`ROLL_STEP refresh-hostd \u2014 hostd install --tag ${target}` + (execOpts.allowDowngrade ? " --allow-downgrade" : ""));
+        const r = deps.run(["hostd", "install", "--tag", target, ...downgradeArgs]);
         if (r.status !== 0)
           warnings.push(`hostd refresh failed (non-fatal); agents already rolled`);
         break;
@@ -85279,7 +85418,7 @@ function resolveRollbackTarget(auditLogPath) {
 }
 function registerRolloutCommand(program3) {
   const hostdCtx = isHostdContext2();
-  program3.command("rollout").description("Deploy a pinned version to the fleet, safely (staggered restart + " + "per-agent version assert + web/hostd refresh)." + (hostdCtx ? "" : " Run with sudo.")).option("--pin <version>", "Version to roll (e.g. v0.15.18). Defaults to release.pin from config.").option("--agents <list>", "Comma-separated subset of agents to roll (default: all configured).").option("--skip-web", "Skip the web + hostd + hindsight refresh step.").option("--allow-downgrade", "Permit rolling to an older semver tag (operator-approved rollback path). " + "When set, the downgrade guard is relaxed so --pin may be older than the " + "current release.pin. All other safety rails apply unchanged.").option("--dry-run", "Print the plan and exit without changing anything.").action(async (opts) => {
+  program3.command("rollout").description("Deploy a pinned version to the fleet, safely (staggered restart + " + "per-agent version assert + web/hostd refresh)." + (hostdCtx ? "" : " Run with sudo.")).option("--pin <version>", "Version to roll (e.g. v0.15.18). Defaults to release.pin from config.").option("--agents <list>", "Comma-separated subset of agents to roll (default: all configured).").option("--skip-web", "Skip the web refresh (host-shell path: also the hostd + hindsight " + "refresh). On the hostd/agent path only the web refresh is skipped \u2014 " + "hindsight is still recreated and hostd stays deferred regardless.").option("--allow-downgrade", "Permit rolling to an older semver tag (operator-approved rollback path). " + "When set, the downgrade guard is relaxed so --pin may be older than the " + "current release.pin. All other safety rails apply unchanged.").option("--dry-run", "Print the plan and exit without changing anything.").action(async (opts) => {
     const config = getConfig(program3);
     let resolvedPin = opts.pin;
     if (opts.allowDowngrade && !resolvedPin) {
@@ -85363,11 +85502,11 @@ function registerRolloutCommand(program3) {
     const scriptPath = process.argv[1] ?? "switchroom";
     const deps = {
       run: (args) => {
-        const r = spawnSync13(process.execPath, [scriptPath, ...args], { stdio: "inherit" });
+        const r = spawnSync14(process.execPath, [scriptPath, ...args], { stdio: "inherit" });
         return { status: r.status ?? 1 };
       },
       probeVersion: (agent) => {
-        const r = spawnSync13("docker", ["exec", `switchroom-${agent}`, "sh", "-lc", "switchroom --version"], { encoding: "utf8" });
+        const r = spawnSync14("docker", ["exec", `switchroom-${agent}`, "sh", "-lc", "switchroom --version"], { encoding: "utf8" });
         if (r.status !== 0)
           return null;
         return (r.stdout ?? "").trim().split(`
@@ -85377,6 +85516,7 @@ function registerRolloutCommand(program3) {
 `),
       emitPhase: (phase) => process.stdout.write(encodeRolloutPhaseLine(phase) + `
 `),
+      webImageTag: () => deployedImageTag("switchroom-web"),
       persistPin: (pin) => {
         const before = readFileSync58(configPath, "utf8");
         const after = setReleasePinInConfig(before, pin);
@@ -85398,9 +85538,12 @@ function registerRolloutCommand(program3) {
     };
     process.stdout.write(`${opts.allowDowngrade ? "Rolling back" : "Rolling"} ${requested.length} agent(s) to ${target}\u2026
 `);
-    const result = executeRollout(steps, target, deps, { hostdContext: hostdCtx });
+    const result = executeRollout(steps, target, deps, {
+      hostdContext: hostdCtx,
+      allowDowngrade: opts.allowDowngrade
+    });
     if (hostdCtx) {
-      result.warnings.push(`still on the PRIOR version after this roll: switchroom-web ` + `(host-side: \`switchroom webd install --tag ${target}\`) and the ` + `host operator CLI (\`sudo npm i -g switchroom@${normalizeVersion(target)}\`). ` + `hostd's compose was tag-bumped by the self-bump when one ran; a ` + `full hostd template regen (only needed when a release changes ` + `hostd's mounts/env) is \`switchroom hostd install --tag ${target}\` ` + `host-side. An agent-invoked rollout cannot recreate its own hostd ` + `container mid-roll without killing itself.`);
+      result.warnings.push(`still on the PRIOR version after this roll: the host operator ` + `CLI (\`sudo npm i -g switchroom@${normalizeVersion(target)}\`). ` + `hostd's compose was tag-bumped by the self-bump when one ran; a ` + `full hostd template regen (only needed when a release changes ` + `hostd's mounts/env) is \`switchroom hostd install --tag ${target}\` ` + `host-side. An agent-invoked rollout cannot recreate its own hostd ` + `container mid-roll without killing itself.` + (opts.skipWeb ? ` --skip-web was set, so switchroom-web is ALSO still on the ` + `prior version (host-side: \`switchroom webd install --tag ${target}\`).` : ""));
       process.stdout.write(encodeRolloutPhaseLine({ phase: "hostd-web-deferred", target }) + `
 `);
     }
@@ -85426,7 +85569,7 @@ function registerRolloutCommand(program3) {
   });
 }
 function registerRollbackCommand(program3) {
-  program3.command("rollback").description("Roll the fleet back to the previous version (operator-approved downgrade). " + "Defaults to the version captured in the last completed rollout's prior_pin. " + "Equivalent to `rollout --allow-downgrade [--pin <version>]`.").option("--to <version>", "Explicit version to roll back to (e.g. v0.15.17). " + "Omit to use the last completed rollout's prior_pin.").option("--agents <list>", "Comma-separated subset of agents to roll back (default: all configured).").option("--skip-web", "Skip the web + hostd + hindsight refresh step.").option("--dry-run", "Print the plan and exit without changing anything.").action(async (opts) => {
+  program3.command("rollback").description("Roll the fleet back to the previous version (operator-approved downgrade). " + "Defaults to the version captured in the last completed rollout's prior_pin. " + "Equivalent to `rollout --allow-downgrade [--pin <version>]`.").option("--to <version>", "Explicit version to roll back to (e.g. v0.15.17). " + "Omit to use the last completed rollout's prior_pin.").option("--agents <list>", "Comma-separated subset of agents to roll back (default: all configured).").option("--skip-web", "Skip the web refresh (host-shell path: also the hostd + hindsight " + "refresh). On the hostd/agent path only the web refresh is skipped \u2014 " + "hindsight is still recreated and hostd stays deferred regardless.").option("--dry-run", "Print the plan and exit without changing anything.").action(async (opts) => {
     const rolloutArgs = ["--allow-downgrade"];
     if (opts.to)
       rolloutArgs.push("--pin", opts.to);
@@ -86989,7 +87132,7 @@ init_helpers();
 init_loader();
 import { existsSync as existsSync71 } from "node:fs";
 import { resolve as resolve43, sep as sep3 } from "node:path";
-import { spawnSync as spawnSync14 } from "node:child_process";
+import { spawnSync as spawnSync15 } from "node:child_process";
 
 // src/agents/workspace.ts
 import { readFile as readFile2, stat } from "node:fs/promises";
@@ -87702,7 +87845,7 @@ function registerWorkspaceCommand(program3) {
       process.exit(1);
     }
     const editor = process.env["EDITOR"] ?? process.env["VISUAL"] ?? "vi";
-    const child = spawnSync14(editor, [target], { stdio: "inherit" });
+    const child = spawnSync15(editor, [target], { stdio: "inherit" });
     if (child.status !== 0 && child.status !== null) {
       process.exit(child.status);
     }
@@ -87769,7 +87912,7 @@ function registerWorkspaceCommand(program3) {
 `);
       return;
     }
-    const statusResult = spawnSync14("git", ["status", "--short"], {
+    const statusResult = spawnSync15("git", ["status", "--short"], {
       cwd: dir,
       encoding: "utf-8"
     });
@@ -87784,7 +87927,7 @@ function registerWorkspaceCommand(program3) {
       return;
     }
     const message = opts.message || `checkpoint: ${new Date().toISOString()}`;
-    const addResult = spawnSync14("git", ["add", "-A"], {
+    const addResult = spawnSync15("git", ["add", "-A"], {
       cwd: dir,
       encoding: "utf-8"
     });
@@ -87793,7 +87936,7 @@ function registerWorkspaceCommand(program3) {
 `);
       process.exit(1);
     }
-    const commitResult = spawnSync14("git", ["commit", "-m", message], {
+    const commitResult = spawnSync15("git", ["commit", "-m", message], {
       cwd: dir,
       encoding: "utf-8"
     });
@@ -87802,7 +87945,7 @@ function registerWorkspaceCommand(program3) {
 `);
       process.exit(1);
     }
-    const shaResult = spawnSync14("git", ["rev-parse", "--short", "HEAD"], {
+    const shaResult = spawnSync15("git", ["rev-parse", "--short", "HEAD"], {
       cwd: dir,
       encoding: "utf-8"
     });
@@ -87823,7 +87966,7 @@ function registerWorkspaceCommand(program3) {
 `);
       return;
     }
-    const child = spawnSync14("git", ["status", "--short"], {
+    const child = spawnSync15("git", ["status", "--short"], {
       cwd: dir,
       stdio: "inherit"
     });
@@ -92200,7 +92343,7 @@ import {
 } from "node:fs";
 import { tmpdir as tmpdir5, homedir as homedir50 } from "node:os";
 import { dirname as dirname30, join as join86, relative as relative2, resolve as resolve52 } from "node:path";
-import { spawnSync as spawnSync15 } from "node:child_process";
+import { spawnSync as spawnSync16 } from "node:child_process";
 
 // src/cli/skill-common.ts
 var import_yaml24 = __toESM(require_dist(), 1);
@@ -92493,7 +92636,7 @@ function loadFromDir(dir) {
 function loadFromTarball(tarPath) {
   const isGz = tarPath.endsWith(".gz") || tarPath.endsWith(".tgz");
   const listFlags = isGz ? ["-tzf"] : ["-tf"];
-  const list2 = spawnSync15("tar", [...listFlags, tarPath], {
+  const list2 = spawnSync16("tar", [...listFlags, tarPath], {
     encoding: "utf-8",
     stdio: ["ignore", "pipe", "pipe"]
   });
@@ -92510,7 +92653,7 @@ function loadFromTarball(tarPath) {
   const staging = mkdtempSync5(join86(tmpdir5(), "skill-apply-extract-"));
   try {
     const flags = isGz ? ["-xzf"] : ["-xf"];
-    const r = spawnSync15("tar", [
+    const r = spawnSync16("tar", [
       ...flags,
       tarPath,
       "-C",
@@ -92585,7 +92728,7 @@ function validatePayload(name, files) {
   if (errors2.length === 0) {
     for (const [path8, content] of Object.entries(files)) {
       if (SH_SCRIPT_RE2.test(path8)) {
-        const r = spawnSync15("bash", ["-n"], {
+        const r = spawnSync16("bash", ["-n"], {
           input: content,
           encoding: "utf-8"
         });
@@ -92597,7 +92740,7 @@ function validatePayload(name, files) {
         const tmpPy = join86(tmp, "check.py");
         try {
           writeFileSync41(tmpPy, content);
-          const r = spawnSync15("python3", ["-m", "py_compile", tmpPy], {
+          const r = spawnSync16("python3", ["-m", "py_compile", tmpPy], {
             encoding: "utf-8"
           });
           if (r.status !== 0) {
@@ -92760,7 +92903,7 @@ function registerSkillCommand(program3) {
 \u2713 Wrote ${name} to ${currentDir}`));
     const applyBin = process.argv[1] ?? "switchroom";
     console.log(source_default.gray(`Running \`switchroom apply --non-interactive\`...`));
-    const r = spawnSync15(process.argv0, [applyBin, "apply", "--non-interactive"], { stdio: "inherit" });
+    const r = spawnSync16(process.argv0, [applyBin, "apply", "--non-interactive"], { stdio: "inherit" });
     if (r.status !== 0) {
       console.error(source_default.yellow(`(warning: \`switchroom apply\` exited ${r.status} \u2014 skill is ` + `in the pool but symlinks may not be refreshed. Re-run manually.)`));
     }
@@ -92793,7 +92936,7 @@ import {
 } from "node:fs";
 import { dirname as dirname31, join as join87, relative as relative3, resolve as resolve53 } from "node:path";
 import { homedir as homedir51, tmpdir as tmpdir6 } from "node:os";
-import { spawnSync as spawnSync16 } from "node:child_process";
+import { spawnSync as spawnSync17 } from "node:child_process";
 init_helpers();
 init_agent_config();
 init_source();
@@ -92994,7 +93137,7 @@ function behavioralValidate(files) {
   const errors2 = [];
   for (const [path8, content] of Object.entries(files)) {
     if (SH_SCRIPT_RE.test(path8)) {
-      const r = spawnSync16("bash", ["-n"], { input: content, encoding: "utf-8" });
+      const r = spawnSync17("bash", ["-n"], { input: content, encoding: "utf-8" });
       if (r.status !== 0) {
         errors2.push(`${path8} fails \`bash -n\`: ${(r.stderr ?? "").trim()}`);
       }
@@ -93003,7 +93146,7 @@ function behavioralValidate(files) {
       const tmpPy = join87(tmp, "check.py");
       try {
         writeFileSync42(tmpPy, content);
-        const r = spawnSync16("python3", ["-m", "py_compile", tmpPy], {
+        const r = spawnSync17("python3", ["-m", "py_compile", tmpPy], {
           encoding: "utf-8"
         });
         if (r.status !== 0) {
@@ -93799,43 +93942,6 @@ import { homedir as homedir54 } from "node:os";
 import { join as join90 } from "node:path";
 import { spawnSync as spawnSync20 } from "node:child_process";
 
-// src/cli/deploy-version-guard.ts
-import { spawnSync as spawnSync18 } from "node:child_process";
-var defaultRunner3 = (args) => {
-  const r = spawnSync18("docker", args, { encoding: "utf8" });
-  return { ok: r.status === 0, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
-};
-function deployedImageTag(container, run = defaultRunner3) {
-  const r = run(["inspect", "-f", "{{.Config.Image}}", container]);
-  if (!r.ok)
-    return null;
-  const ref = r.stdout.trim();
-  if (!ref)
-    return null;
-  const noDigest = ref.split("@")[0];
-  const colon = noDigest.lastIndexOf(":");
-  if (colon < 0)
-    return null;
-  const tag = noDigest.slice(colon + 1);
-  return tag && !tag.includes("/") ? tag : null;
-}
-function checkDowngrade(opts) {
-  const running = deployedImageTag(opts.container, opts.run);
-  if (opts.allowDowngrade)
-    return { skip: false, running };
-  const cmp = compareReleaseTags(opts.targetTag, running);
-  if (cmp !== null && cmp < 0) {
-    return {
-      skip: true,
-      running,
-      message: `Skipping ${opts.container} deploy \u2014 it is already on ${running}, newer than the ` + `requested ${opts.targetTag}.
-` + `     Refusing to downgrade: this guards against a concurrent rollout/update ` + `reverting a newer build.
-` + `     To force the downgrade, re-run with --allow-downgrade.`
-    };
-  }
-  return { skip: false, running };
-}
-
 // src/cli/singleton-stale-cleanup.ts
 import { spawnSync as spawnSync19 } from "node:child_process";
 function makeDockerRunner() {
@@ -94277,7 +94383,7 @@ The log is created when hostd handles its first privileged-verb request.`));
 init_source();
 init_helpers();
 init_operator_uid();
-import { existsSync as existsSync94, mkdirSync as mkdirSync53, writeFileSync as writeFileSync44, copyFileSync as copyFileSync14 } from "node:fs";
+import { chownSync as chownSync9, existsSync as existsSync94, mkdirSync as mkdirSync53, writeFileSync as writeFileSync44, copyFileSync as copyFileSync14 } from "node:fs";
 import { homedir as homedir55 } from "node:os";
 import { join as join91 } from "node:path";
 import { spawnSync as spawnSync21 } from "node:child_process";
@@ -94286,6 +94392,16 @@ function resolveWebImageTag(explicitTag, release) {
     return explicitTag;
   return resolveImageTag(resolveRelease({ root: release }));
 }
+function resolveWebHostHome(env2 = process.env, home2 = homedir55()) {
+  const fromEnv = env2.SWITCHROOM_HOST_HOME?.trim();
+  const resolved = fromEnv && fromEnv.length > 0 ? fromEnv : home2;
+  if (resolved === "/host-home" || resolved.startsWith("/host-home/")) {
+    throw new Error(`switchroom webd install: refusing to generate \u2014 the host home resolved to ` + `"${resolved}", the in-container mount point of the operator home (never a ` + `valid host bind source). Emitting it would make Docker create empty ` + `/host-home dirs on the host and break every webhook forward + secret read.
+
+` + `Recovery: run \`switchroom webd install\` from the HOST shell, or set ` + `SWITCHROOM_HOST_HOME to the real host home first.`);
+  }
+  return resolved;
+}
 var WEB_COMPOSE_PROJECT = "switchroom-web";
 function renderWebComposeFile(opts) {
   const { hostHome, imageTag, operatorUid } = opts;
@@ -94408,8 +94524,15 @@ async function doInstall2(opts, program3) {
     console.log(source_default.yellow(`  \u23ed  ${opts.dryRun ? "[dry-run] " : ""}${guard.message}`));
     return;
   }
+  let hostHome;
+  try {
+    hostHome = resolveWebHostHome();
+  } catch (err2) {
+    console.error(source_default.red(err2.message));
+    process.exit(1);
+  }
   const yaml = renderWebComposeFile({
-    hostHome: homedir55(),
+    hostHome,
     imageTag,
     operatorUid
   });
@@ -94423,6 +94546,14 @@ async function doInstall2(opts, program3) {
   if (bak)
     console.log(source_default.dim(`  Backed up existing compose to ${bak}`));
   writeFileSync44(composePath, yaml, "utf8");
+  try {
+    if (typeof process.geteuid === "function" && process.geteuid() === 0) {
+      chownSync9(dir, operatorUid, operatorUid);
+      chownSync9(composePath, operatorUid, operatorUid);
+      if (bak)
+        chownSync9(bak, operatorUid, operatorUid);
+    }
+  } catch {}
   console.log(source_default.green(`  \u2713 Wrote ${composePath}`));
   console.log(source_default.dim(`    running as uid ${operatorUid} (operator), network_mode: host`));
   console.log(source_default.dim(`    Pulling ghcr.io/switchroom/switchroom-web:${imageTag}\u2026`));