v1.14.25

Fixes

• Agents can switch a site to Agent Local. set_deployment_fields refused local_stack: agent-local because it checked against an old list of stacks, so an agent could not finish an Agent Local import without someone changing the stack in Settings. It now accepts every stack the app does. (#30)
• Read-only WP-CLI calls can no longer run code or write. The allowlist that lets agents run WP-CLI reads without asking accepted --exec=<php> (and bare --require or --path) on any read, and treated user meta, post meta, theme mod and cli alias as reads, so meta update and meta delete went through with no write opt-in. Those flags are refused now, and only the reading subcommands (meta get, meta list, mod get…) run freely.
• A misspelled tool argument is refused instead of ignored. run_deploy_functions with environment instead of env used to drop the unknown key and deploy to whatever environment the checked-out branch maps to. Every Muster Sites tool now rejects arguments it does not declare, lists the valid ones, and runs nothing.
• Agent Local certificates need one password prompt, not one per site. With Agent Local 0.36 and later, which signs site certificates with its own local certificate authority, Muster asks you to trust that authority once and every later site is trusted without a prompt. Older Agent Local versions behave as before.
• Agent Local branch previews resolve to the preview. A path inside a branch preview now reports the preview's own domain, folder and running state instead of the main site's.
• Clearer Agent Local errors. A daemon restart in the middle of a database import is named as such, a request the daemon rejects for its host is reported plainly, and a domain change that went through but could not update /etc/hosts or the certificate says what did not follow. Muster also reads Agent Local's new machine-readable error codes where they exist, falling back to the old messages.
• Agent Local source builds work fully. A daemon built from source reports its version as dev; Muster treated that as 0.0.0 and switched off the Agent Local import routes, and the extensions hub called it outdated. Both now treat it as current.
• One database save point per import. When Agent Local has just imported the database, the domain rewrite that follows no longer asks it for a second snapshot of the same data.