From 1feb385ca1c672c0e848399a6c12c8bc0b2beebf Mon Sep 17 00:00:00 2001
From: Vuong Hoang <vh@phasefinal.com>
Date: Mon, 19 Oct 2026 09:01:20 -0700
Subject: [PATCH] ops(svos): v0.0.26 (UI 0.0.30, the flows' cadence) staged on
 nh3-svos; publish gated on the tag

---
 .../nh3-svos-a83c223-v0.0.26-stage.yaml       | 26 +++++++++++++++++++
 .../nh3-svos-a83c223-v0.0.26.yaml             | 26 +++++++++++++++++++
 2 files changed, 52 insertions(+)
 create mode 100644 playbooks/svos-releases/nh3-svos-a83c223-v0.0.26-stage.yaml
 create mode 100644 playbooks/svos-releases/nh3-svos-a83c223-v0.0.26.yaml

diff --git a/playbooks/svos-releases/nh3-svos-a83c223-v0.0.26-stage.yaml b/playbooks/svos-releases/nh3-svos-a83c223-v0.0.26-stage.yaml
new file mode 100644
index 0000000..b60966e
--- /dev/null
+++ b/playbooks/svos-releases/nh3-svos-a83c223-v0.0.26-stage.yaml
@@ -0,0 +1,26 @@
+# nh3-svos: STAGE SVOS v0.0.26 (a83c223) beside the live release. Installs into /opt/svos/releases/a83c223 and runs the
+# new kernel's check-config against the live configuration. Does NOT switch current, stop or start anything.
+# svos-dev's request (thread 01M5AE9MKBP9180CXS2EW8Z8NW): UI 0.0.30 (U23 flows' cadence); kernel 0.0.26 is a
+# version bump; everything else carried from f40bf6d. Built from the LOCAL tag before the push; the publish
+# (nh3-svos-a83c223-v0.0.26.yaml) first needs origin's v0.0.26 to name the same commit.
+steps:
+  - name: Private staging dir
+    shell: install -d -m 0700 /tmp/svos-stage-a83c223
+  - {name: stage release, upload: {src: /tmp/claude-1000/-home-lkraven-development-eshpfi-management/e0be18fd-0734-4786-b933-904f0a74d2a2/scratchpad/svos-a83c223/svos-release-a83c223.tar.gz, dest: /tmp/svos-stage-a83c223/release.tar.gz, mode: "0644"}}
+  - {name: stage uv, upload: {src: /home/lkraven/bin/uv, dest: /tmp/svos-stage-a83c223/uv, mode: "0755"}}
+  - {name: stage installer, upload: {src: /tmp/claude-1000/-home-lkraven-development-eshpfi-management/e0be18fd-0734-4786-b933-904f0a74d2a2/scratchpad/svos-a83c223/install-release.py, dest: /tmp/svos-stage-a83c223/install-release.py, mode: "0644"}}
+  - name: Verify staged hashes
+    shell: cd /tmp/svos-stage-a83c223 && printf '%s  %s\n' 192b4a443369afcac31c9673c46257ceff1b7de8da65d3696bedcc297367705e release.tar.gz 83aa128da93e168283ed32cf75cd819fe17b135b3fc1f7ccb3c912eec198d9fb uv | sha256sum -c -
+    changed_when: "false"
+  - name: Install release a83c223 beside the live one (current NOT switched)
+    sudo: true
+    shell: python3 /tmp/svos-stage-a83c223/install-release.py
+    creates: /opt/svos/releases/a83c223/apps-env/pyvenv.cfg
+verify:
+  - name: New kernel 0.0.26 accepts the live configuration as it is
+    sudo: true
+    shell: runuser -u svc-svos -- /opt/svos/releases/a83c223/kernel-env/bin/svos-kernel check-config --data-root /var/lib/svos
+    changed_when: "false"
+  - name: current still points at the live release
+    shell: readlink /opt/svos/current
+    changed_when: "false"
diff --git a/playbooks/svos-releases/nh3-svos-a83c223-v0.0.26.yaml b/playbooks/svos-releases/nh3-svos-a83c223-v0.0.26.yaml
new file mode 100644
index 0000000..29bc312
--- /dev/null
+++ b/playbooks/svos-releases/nh3-svos-a83c223-v0.0.26.yaml
@@ -0,0 +1,26 @@
+# nh3-svos -> SVOS v0.0.26 (a83c223): UI-only publish. UI 0.0.30 (U23: the working flows' phase per seat and cadence, skin + graph model only).
+# Kernel = a version bump; no app change, no manifest revision, no card.
+# svos-dev's request, thread 01M5AE9MKBP9180CXS2EW8Z8NW. PRE-REQS: the stage playbook; origin's v0.0.26 == a83c2237c3be
+# (git ls-remote on nh3-dev before this runs). current must move because svos-front-inventory generates from
+# /opt/svos/current/static; NOTHING restarts: the kernel, knowledge and voice keep running 2f29d0d's code and the judge and
+# interface d14dc94's (all identical in code to a83c223), so keep both dirs until those processes restart.
+steps:
+  - name: Pre-reqs present
+    sudo: true
+    shell: test -f /opt/svos/releases/a83c223/static/index.html && readlink /opt/svos/current
+    changed_when: "false"
+  - name: Switch current to a83c223
+    sudo: true
+    shell: ln -sfn /opt/svos/releases/a83c223 /opt/svos/current.new && chgrp -h svc-svos /opt/svos/current.new && mv -T /opt/svos/current.new /opt/svos/current && readlink /opt/svos/current
+  - name: Front door inventory (UI 0.0.30 live; f40bf6d becomes previous)
+    sudo: true
+    shell: /usr/local/sbin/svos-front-inventory 2>&1 | grep -E 'GENERATED|updated|root \*|path /assets' | head -4
+verify:
+  - name: Front door inventory current; health unchanged
+    sudo: true
+    shell: /usr/local/sbin/svos-front-inventory --check && curl -s http://127.0.0.1:8400/health && echo
+    changed_when: "false"
+  - name: Which release dir each running service maps (nothing restarted)
+    sudo: true
+    shell: for u in svos-kernel svos-interface svos-knowledge svos-judge svos-voice; do pid=$(systemctl show $u -p MainPID --value); printf '%s %s\n' $u "$(grep -oE '/opt/svos/releases/[0-9a-f]+' /proc/$pid/maps | sort -u | tr '\n' ' ')"; done
+    changed_when: "false"