@devrouter/cli 0.0.53 → 0.0.55

package/dist/devrouter.js

@@ -2693,7 +2693,7 @@ function loadRepoConfig(repoPath) {
   const config = parseConfig(parsed ?? {}, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.0.53" : "0.0.0-dev";
+    const cliVersion = true ? "0.0.55" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(
@@ -5746,25 +5746,40 @@ function assertManagedContainerConfigUnchanged(options) {
     const fileArgs = configFiles.flatMap((file) => ["-f", file]);
     const result = (() => {
       try {
-        return (0, import_node_child_process7.spawnSync)(
+        const composeArgs = [
+          "compose",
+          "--project-name",
+          composeProject,
+          "--project-directory",
+          workingDirectory
+        ];
+        const env = managedComposeEnvironment(options.workspace);
+        const rendered = (0, import_node_child_process7.spawnSync)(
           "docker",
-          [
-            "compose",
-            "--project-name",
-            composeProject,
-            "--project-directory",
-            workingDirectory,
-            ...fileArgs,
-            "config",
-            "--hash",
-            service
-          ],
+          [...composeArgs, ...fileArgs, "config", "--format", "json"],
           {
             cwd: workingDirectory,
             encoding: "utf-8",
-            env: managedComposeEnvironment(options.workspace),
+            env,
             stdio: ["ignore", "pipe", "ignore"],
-            timeout: COMPOSE_HASH_TIMEOUT_MS
+            timeout: COMPOSE_HASH_TIMEOUT_MS,
+            maxBuffer: 1024 * 1024
+          }
+        );
+        if (rendered.status !== 0 || rendered.error || !rendered.stdout?.trim()) {
+          throw new Error("Compose configuration rendering failed.");
+        }
+        return (0, import_node_child_process7.spawnSync)(
+          "docker",
+          [...composeArgs, "-f", "-", "config", "--no-interpolate", "--hash", service],
+          {
+            cwd: workingDirectory,
+            encoding: "utf-8",
+            env,
+            input: rendered.stdout,
+            stdio: ["pipe", "pipe", "ignore"],
+            timeout: COMPOSE_HASH_TIMEOUT_MS,
+            maxBuffer: 1024 * 1024
           }
         );
       } catch {
@@ -8337,7 +8352,12 @@ function sameSet(left, right) {
   return JSON.stringify([...left].sort()) === JSON.stringify([...right].sort());
 }
 function containerIdentity(container) {
-  return JSON.stringify({ id: container.id, labels: container.labels, mounts: container.mounts });
+  return JSON.stringify({
+    id: container.id,
+    labels: container.labels,
+    // Docker does not preserve mount-array order between inspections.
+    mounts: container.mounts.map((mount) => JSON.stringify(mount)).sort()
+  });
 }
 function stopRetainedManagedDevsyWorkspace(options) {
   const { repoPath, devsyId } = options;
@@ -9585,7 +9605,7 @@ async function buildDoctorReport(options = {}) {
       const config = runtimeConfig.config;
       loadedConfig = config;
       loadedWorkspace = runtimeConfig.workspace;
-      const cliVersion = true ? "0.0.53" : "0.0.0-dev";
+      const cliVersion = true ? "0.0.55" : "0.0.0-dev";
       const configVersion = config.devrouter?.version;
       if (configVersion && cliVersion !== "0.0.0-dev" && compareSemver(configVersion, cliVersion) > 0) {
         addCheck(checks, {
@@ -16858,7 +16878,7 @@ var init_version = __esm({
 
 // src/cli.ts
 var import_commander = require("commander");
-var CLI_VERSION = true ? "0.0.53" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.0.55" : "0.0.0-dev";
 var VERSION_FLAGS = /* @__PURE__ */ new Set(["-V", "--version"]);
 function withErrorHandling(action2) {
   return async (...args) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrouter/cli",
-  "version": "0.0.53",
+  "version": "0.0.55",
   "description": "Local dev routing CLI with shared Traefik reverse proxy",
   "author": "Roland Schlaefli",
   "homepage": "https://github.com/rschlaefli/devrouter#readme",

package/upgrade-prompts/0.0.54.md

@@ -0,0 +1,26 @@
+# Upgrade to devrouter 0.0.54
+
+Retained configuration verification now resolves service `env_file` values before
+computing Compose hashes. This corrects false drift with affected Compose
+versions without relaxing ownership, file membership or container checks.
+
+## Task
+
+Install the published `@devrouter/cli@0.0.54` package and update the consumer's
+`devrouter.version` pin when adopting this release. No schema migration or
+generated configuration rewrite is required.
+
+## Validation
+
+For an approved exact runtime recovery, preserve the original Compose
+interpolation settings and use canonical stop and guarded repair. Real
+configuration changes and missing retained resources still block recovery.
+Never persist or print a resolved Compose model: it may contain credentials.
+Require complete retained-container shutdown, zero exact routes and separate
+application readiness proof. Adapter side effects retain their own approval
+boundaries; this release does not authorize cache deletion or data changes.
+
+## Report
+
+Report installed/configured versions, exact checkout/profile, command outcome,
+container and route state, application proof and remaining blockers.

package/upgrade-prompts/0.0.55.md

@@ -0,0 +1,23 @@
+# Upgrade to devrouter 0.0.55
+
+Managed stop now compares retained mounts independently of the order returned
+by Docker. Exact mount fields and all other retained-runtime guards remain
+mandatory.
+
+## Task
+
+Install the published patch and update the consumer devrouter.version pin when
+adopting it. No schema migration or generated configuration rewrite is required.
+
+## Validation
+
+With authorization for an exact runtime, run canonical stop and verify all
+retained containers are stopped with zero exact routes. Preserve the original
+Compose interpolation settings. Use guarded repair only for an eligible
+retained degraded runtime and independently verify application readiness.
+Do not bypass missing state, changed configuration or adapter side-effect gates.
+
+## Report
+
+Report installed/configured versions, exact checkout/profile, producing command,
+container/route state, application proof and remaining blockers.