@devrouter/cli 0.0.38 → 0.0.39

package/README.md

@@ -70,6 +70,13 @@ devrouter ensure .
 devrouter exec . -- pnpm seed
 ```
 
+Managed repositories may define independent profiles for routed apps, optional
+Compose capabilities, and repository-owned processes. Use
+`devrouter ensure . --profile <name>` for a task-specific environment; native
+Dev Container clients still see the full source configuration. Check
+`devrouter status` or `devrouter doctor` when you need the desired, active, and
+drift state.
+
 Use devrouter lifecycle commands for managed environments. Raw `devpod up`,
 `stop`, or `delete` bypass ownership locks and exact checkout validation.
 

package/bin/devrouter-process

@@ -5,6 +5,8 @@ usage() {
   cat <<'EOF'
 Usage:
   devrouter-process ensure --name <name> --match <regex> [options] -- <command> [args...]
+  devrouter-process stop --name <name>
+  devrouter-process status --name <name>
 
 Options:
   --fingerprint <value>  Runtime identity. Defaults to command, workspace, adapter, and safe allowlisted environment identity.
@@ -25,11 +27,16 @@ require_value() {
   [ "$#" -ge 2 ] || die "$1 requires a value."
 }
 
-[ "${1:-}" = "ensure" ] || {
+action="${1:-}"
+case "$action" in
+  ensure|stop|status)
+    shift
+    ;;
+  *)
   usage >&2
   exit 1
-}
-shift
+  ;;
+esac
 
 name=""
 process_match=""
@@ -44,16 +51,19 @@ while [ "$#" -gt 0 ]; do
       shift 2
       ;;
     --match)
+      [ "$action" = "ensure" ] || die "--match is only valid for ensure."
       require_value "$@"
       process_match="$2"
       shift 2
       ;;
     --fingerprint)
+      [ "$action" = "ensure" ] || die "--fingerprint is only valid for ensure."
       require_value "$@"
       fingerprint="$2"
       shift 2
       ;;
     --log)
+      [ "$action" = "ensure" ] || die "--log is only valid for ensure."
       require_value "$@"
       log_file="$2"
       shift 2
@@ -73,17 +83,26 @@ while [ "$#" -gt 0 ]; do
 done
 
 [[ "$name" =~ ^[a-zA-Z0-9][a-zA-Z0-9._-]*$ ]] || die "--name must be a safe identifier."
-[ -n "$process_match" ] || die "--match is required."
-[ "$#" -gt 0 ] || die "A command is required after --."
 [ -r "/proc/$$/environ" ] || die "Linux /proc process metadata is required."
 
-for tool in awk flock grep pgrep ps setsid sha256sum sort tr; do
+if [ "$action" = "ensure" ]; then
+  [ -n "$process_match" ] || die "--match is required."
+  [ "$#" -gt 0 ] || die "A command is required after --."
+fi
+
+required_tools=(awk flock grep pgrep ps tr)
+if [ "$action" = "ensure" ]; then
+  required_tools+=(setsid sha256sum sort)
+fi
+for tool in "${required_tools[@]}"; do
   command -v "$tool" >/dev/null 2>&1 || die "Required command is unavailable: $tool"
 done
 
-match_status=0
-pgrep -f -- "$process_match" >/dev/null 2>&1 || match_status=$?
-[ "$match_status" -le 1 ] || die "--match is not a valid process regular expression."
+if [ "$action" = "ensure" ]; then
+  match_status=0
+  pgrep -f -- "$process_match" >/dev/null 2>&1 || match_status=$?
+  [ "$match_status" -le 1 ] || die "--match is not a valid process regular expression."
+fi
 
 fingerprint_env_names=()
 fingerprint_env_list="${DEVROUTER_PROCESS_FINGERPRINT_ENV:-}"
@@ -107,6 +126,10 @@ if [[ -v DEVROUTER_PROCESS_ADAPTER_SHA256 ]] &&
   die "DEVROUTER_PROCESS_ADAPTER_SHA256 must be a SHA-256 digest."
 fi
 
+if [ "$action" != "ensure" ] && [ "$#" -gt 0 ]; then
+  die "Unexpected arguments for $action."
+fi
+
 emit_environment_field() {
   local field="$1"
   local variable="$2"
@@ -232,6 +255,10 @@ unknown_process_exists() {
   marked_process_exists || matching_process_exists
 }
 
+report_status() {
+  printf '{"name":"%s","status":"%s"}\n' "$name" "$1"
+}
+
 stop_process_group() {
   local pid="$1"
   local pgid="$2"
@@ -263,6 +290,67 @@ mkdir -p "$state_dir" "$(dirname "$log_file")"
 exec 9>"$lock_file"
 flock -w "$lock_timeout" 9 || die "Timed out waiting for the '$name' process lock."
 
+if [ "$action" = "status" ]; then
+  if [ ! -f "$state_file" ]; then
+    if marked_process_exists; then
+      report_status foreign
+      exit 2
+    fi
+    report_status stopped
+    exit 0
+  fi
+
+  read -r pid pgid stored_fingerprint extra <"$state_file" || true
+  if [ -z "$stored_fingerprint" ] ||
+    ! [[ "$pid" =~ ^[1-9][0-9]*$ ]] ||
+    ! [[ "$pgid" =~ ^[1-9][0-9]*$ ]] ||
+    [ -n "$extra" ]; then
+    report_status drifted
+    exit 2
+  fi
+  if process_alive "$pid"; then
+    if process_owned "$pid" "$pgid" "$stored_fingerprint"; then
+      report_status running
+    else
+      report_status foreign
+      exit 2
+    fi
+    exit 0
+  fi
+  report_status drifted
+  exit 2
+fi
+
+if [ "$action" = "stop" ]; then
+  if [ ! -f "$state_file" ]; then
+    if marked_process_exists; then
+      die "Found an unowned '$name' process; refusing to stop it."
+    fi
+    echo "[devrouter-process] '$name' is already stopped."
+    exit 0
+  fi
+
+  read -r pid pgid stored_fingerprint extra <"$state_file" || true
+  if [ -z "$stored_fingerprint" ] ||
+    ! [[ "$pid" =~ ^[1-9][0-9]*$ ]] ||
+    ! [[ "$pgid" =~ ^[1-9][0-9]*$ ]] ||
+    [ -n "$extra" ]; then
+    die "Invalid state for '$name'; refusing to stop it."
+  fi
+  if process_alive "$pid"; then
+    process_owned "$pid" "$pgid" "$stored_fingerprint" ||
+      die "State points at an unowned '$name' process; refusing to stop it."
+    stop_process_group "$pid" "$pgid"
+  elif process_group_alive "$pgid"; then
+    die "State points at a live unowned '$name' process group; refusing to stop it."
+  elif marked_process_exists; then
+    die "Found an unowned '$name' process; refusing to stop it."
+  fi
+  rm -f "$state_file"
+  echo "[devrouter-process] '$name' is stopped."
+  exit 0
+fi
+
 pid=""
 pgid=""
 stored_fingerprint=""