post_install() {
    cat <<'EOF'

Roundhouse is installed read-only. Nothing runs until you enable it.

  Start it (per user, read-only — senses the fleet, changes nothing):
    systemctl --user enable --now roundhouse.service
    loginctl enable-linger "$USER"      # only if it should return at boot
  Then: http://<host>:8090

  To allow rollouts / switches / boot-strategy toggles, edit
  ~/.config/systemd/user/roundhouse.service (copy it from
  /usr/lib/systemd/user/) and add --actuate to ExecStart. The first armed
  launch refuses until the unit directory is a git repository and prints the
  exact commands to make it one — it never runs `git init` for you. A bearer
  token is generated at ~/.config/roundhouse/token (mode 600).

  Agents: /usr/bin/roundhouse-mcp is an MCP server (stdio) over the same
  gated API. Registration example and the tool catalog:
    /usr/share/doc/roundhouse/docs/MCP.md
  Wiring a proxy to the generated routing config:
    /usr/share/doc/roundhouse/docs/ROUTING.md

EOF
}

post_upgrade() {
    cat <<'EOF'

Roundhouse upgraded. If it is running, restart it to pick up the new version:

    systemctl --user restart roundhouse.service

Units are parsed once at startup — a restart is also how a newly added
'# roundhouse: on-demand' marker becomes visible.

EOF
}
