Complete production roadmap: vault, peers, swarm, streams, ops

Ship remaining roadmap items: encrypted registry vault, peer invite/revoke,
Swarm/plugins behind flags, binary streams, engine create validation, deploy
rollback, schema validation, fleet/access UI, metrics, fuzz/load/soak tests,
systemd packaging, and release tooling. Mark ROADMAP fully complete.

server/handlers/stacks.js

@@ -18,10 +18,24 @@ export function registerStackHandlers(session) {
     }
     // Validate YAML early for clear errors
     composeManager.validateComposeFile(composeContent)
+    const profiles = Array.isArray(args.profiles)
+      ? args.profiles.map(String)
+      : typeof args.profiles === 'string'
+        ? args.profiles.split(',').map((s) => s.trim()).filter(Boolean)
+        : []
     const result = await composeManager.deployComposeStack(
       docker,
       composeContent,
-      sanitizedStackName
+      sanitizedStackName,
+      {
+        overrideContent: args.overrideContent || args.override || null,
+        envFileContent: args.envFileContent || args.envFile || null,
+        profiles,
+        env: args.env && typeof args.env === 'object' ? args.env : {},
+        build: Boolean(args.build),
+        // Default true: tear down containers created in a failed partial deploy
+        rollback: args.rollback !== false,
+      }
     )
     await broadcastContainers()
     return { success: true, ...result }