@devrouter/cli 0.0.56 → 0.0.58

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrouter/cli",
-  "version": "0.0.56",
+  "version": "0.0.58",
   "description": "Local dev routing CLI with shared Traefik reverse proxy",
   "author": "Roland Schlaefli",
   "homepage": "https://github.com/rschlaefli/devrouter#readme",

package/upgrade-prompts/0.0.57.md

@@ -0,0 +1,33 @@
+# Upgrade to devrouter 0.0.57
+
+This patch restores managed ensure with comma-separated profiles. Lifecycle events,
+current state and retained request history accept profile selections separately
+from workspace and operation identifiers. Repository resolution still validates
+configured profiles and combines their selected resources.
+
+## Task
+
+Install the published 0.0.57 patch and update `.devrouter.yml` devrouter.version to
+0.0.57 through the consumer repository workflow. No schema or database migration
+is required. Keep the intended profile selection; do not substitute full or delete
+runtime state to avoid the earlier validator failure.
+
+## Validation
+
+Use repository profile resolution to check the intended combined selection. Run
+managed ensure only on an authorized exact checkout, retaining its data and
+bindings. Report the resulting application and runtime outcomes separately from
+successful selection validation. Stop only runtimes owned by the validation task,
+then verify their provider status and zero exact routes.
+
+## Limits
+
+This patch fixes pre-dispatch profile validation. It does not introduce a host-side
+preparation hook, warm Compose drift reconciliation, capacity admission, a
+controller, autonomous agent recovery or complete OOM protection.
+
+## Report
+
+Report installed/configured versions, exact profile selection, validation result
+and any separately authorized runtime evidence. Identify retained runtime leases
+without ending another task's runtime.

package/upgrade-prompts/0.0.58.md

@@ -0,0 +1,41 @@
+# Upgrade to devrouter 0.0.58
+
+This patch permits recovery directly into a different requested profile after
+retained ownership proof. Failed processes excluded by that profile no longer
+have to start first. Failed transitions preserve degraded evidence and data.
+
+## Task
+
+Install the published patch and update `.devrouter.yml` devrouter.version to
+0.0.58 through the consumer repository workflow. No database migration is needed.
+Refresh generated agent guidance when the repository distributes it.
+
+Repositories that generate Compose inputs before inspection may configure
+`managedRuntime.devcontainer.prepareCommand` as a literal argv array. The command
+runs on the host in the checkout root, once per ensure, with a sixty-second bound.
+Keep it in the foreground, preserve `.devrouter.yml`, and leave diagnostics
+read-only. Output is suppressed; report failures through the command exit status.
+
+## Validation
+
+Resolve the intended profile and ensure only an authorized exact checkout. For
+degraded recovery, verify the requested resources start without replaying excluded
+processes. Verify host preparation before Compose inspection using a repository
+generator whose output can be checked without exposing values. Separate successful
+generation from applying changed mounts to an existing container.
+
+Check application readiness and tooling separately. Retain data and stop only
+task-owned runtimes, then verify stopped provider status and zero exact routes.
+
+## Limits
+
+This release does not implement warm mount reconciliation, capacity admission,
+controller observation, autonomous agent recovery or complete OOM protection.
+Ownership conflicts remain actionable errors; they never authorize destructive
+repair or changing another task's runtime.
+
+## Report
+
+Report installed/configured versions, exact checkout and profile, preparation
+result, requested-profile recovery evidence, application/tooling outcomes and
+final runtime status. Identify any remaining unverified consumer behavior.