@devrouter/cli 0.0.63 → 0.0.64

package/dist/devrouter-lifecycle-worker.js

@@ -240,7 +240,9 @@ function tryReclaimStaleLock(lockPath, staleLinkPath, livenessCache) {
 function acquireFileLock(lockPath, options) {
   const processBirth = processBirthIdentity(process.pid);
   if (!processBirth) {
-    throw new Error(`could not determine process identity for ${options.activity} lock`);
+    throw new Error(
+      `could not determine process identity for ${options.activity} lock: process inspection may be unavailable or sandbox-denied; run the canonical command in a permitted host context`
+    );
   }
   const ownerId = (0, import_node_crypto2.randomUUID)();
   const owner = `${process.pid}:${Buffer.from(processBirth).toString("base64url")}:${ownerId}`;
@@ -4705,7 +4707,7 @@ function loadRepoConfig(repoPath, read = (file) => import_node_fs14.default.read
   const config = parseConfig(parsed ?? {}, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.0.63" : "0.0.0-dev";
+    const cliVersion = true ? "0.0.64" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(
@@ -9442,7 +9444,7 @@ var cancelled = false;
 var lockHeld = false;
 var stopProjects = [];
 var stopBaselineState;
-var BUSY_EXEC_WAIT_MS = 30 * 60 * 1e3;
+var BUSY_LIFECYCLE_WAIT_MS = 30 * 60 * 1e3;
 function matchesFence(record4, fence) {
   return Object.entries(reliabilityFence(record4.state)).every(
     ([key, value]) => value === fence[key]

package/dist/devrouter.js

@@ -671,7 +671,9 @@ function tryReclaimStaleLock(lockPath, staleLinkPath, livenessCache) {
 function acquireFileLock(lockPath, options) {
   const processBirth = processBirthIdentity(process.pid);
   if (!processBirth) {
-    throw new Error(`could not determine process identity for ${options.activity} lock`);
+    throw new Error(
+      `could not determine process identity for ${options.activity} lock: process inspection may be unavailable or sandbox-denied; run the canonical command in a permitted host context`
+    );
   }
   const ownerId = (0, import_node_crypto2.randomUUID)();
   const owner = `${process.pid}:${Buffer.from(processBirth).toString("base64url")}:${ownerId}`;
@@ -2450,7 +2452,7 @@ function loadRepoConfig(repoPath, read = (file) => import_node_fs6.default.readF
   const config = parseConfig(parsed ?? {}, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.0.63" : "0.0.0-dev";
+    const cliVersion = true ? "0.0.64" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(
@@ -7169,7 +7171,7 @@ function buildOnboardingPrompt(options = {}) {
     "- TLS: namespaced hosts (`web.<ws>.localhost`) are not covered by the `*.localhost` wildcard; devrouter auto-extends the mkcert cert SANs for active hosts when TLS is enabled.",
     "- Lifecycle: after one-time setup, use `devrouter ensure .` for both primary and linked checkouts; never branch on checkout kind or use live verify as startup. Managed consumer images contain no devrouter package/helper: ensure delivers its matching helper at runtime and invokes an exact captured snapshot of the repository-owned post-start adapter. Keep `.devrouter.yml` as the only consumer-side version pin. Use `devrouter stop .` for a non-destructive pause, `devrouter stop . --delete` only for explicit exact-owner cleanup without removing the checkout, and `devrouter exec . -- <command...>` for container commands. Never substitute raw DevPod/Devsy mutations; they bypass the machine-global ownership lock, which serializes provider mutations in a fair arrival-order queue and lets contenders wait up to thirty minutes with throttled stderr progress before failing with the queue position or holder PID and true durations. `workspace up` creates linked worktrees; destructive worktree removal and GC remain ledger-scoped.",
     "- After a drained interrupted ensure, manual exec can use an exactly proven retained Devsy runtime with the plain local Docker command. Revalidate identity for each tooling command until later preparation reconciles startup; preserve configuration, data and interrupted history. This does not repair absent stop baselines or provide OOM protection.",
-    "- Busy exec waits up to thirty minutes for a positively identified active lifecycle worker on the same checkout, with stderr progress. Do not stop healthy work to make room. Commands stay serial; timeout or cancellation before admission leaves prior work untouched. A lifecycle fence change cancels admission, and uncertain execution is never replayed.",
+    "- Busy ensure and exec wait up to thirty minutes for a positively identified active lifecycle worker on the same checkout, with stderr progress. Do not stop healthy work to make room. Commands stay serial; timeout or cancellation before admission leaves prior work untouched. A lifecycle fence change cancels admission, and uncertain execution is never replayed.",
     "- Ensure reconciles interrupted or never-dispatched ensure after positive worker drainage. Unknown arbitrary exec never replays; use explicit stop to reconcile that uncertainty. Preserve journals and generated configuration if evidence is unavailable. This does not prevent OOM or activate capacity-managed recovery.",
     "- Devsy agent readiness: run `devrouter setup --yes --workspace-runtime devsy` once so Devrouter acquires and verifies the pinned agent in its own machine cache. `doctor` reports `ready`, `missing`, `stale`, or `invalid` without network access, and `ensure` fails before the provider queue when readiness is not `ready`. An explicit `DEVSY_AGENT_BINARY` remains authoritative and must match a pinned official asset.",
     "- A managed adapter plus `postCreateCommand` requires `waitFor` exactly `postCreateCommand` or `postStartCommand`; managed selective config preserves lifecycle fields and changes only `runServices`.",
@@ -12158,7 +12160,7 @@ async function buildDoctorReport(options = {}) {
       const config = runtimeConfig.config;
       loadedConfig = config;
       loadedWorkspace = runtimeConfig.workspace;
-      const cliVersion = true ? "0.0.63" : "0.0.0-dev";
+      const cliVersion = true ? "0.0.64" : "0.0.0-dev";
       const configVersion = config.devrouter?.version;
       if (configVersion && cliVersion !== "0.0.0-dev" && compareSemver(configVersion, cliVersion) > 0) {
         addCheck(checks, {
@@ -14050,9 +14052,9 @@ function reconcileDrained(record4) {
     record4.worker = null;
   }
 }
-function reportBusyExecWait(operationId, waitedMs) {
+function reportBusyLifecycleWait(kind, operationId, waitedMs) {
   process.stderr.write(
-    `Lifecycle exec ${operationId} is waiting for the existing worker (${Math.ceil(waitedMs / 1e3)}s).
+    `Lifecycle ${kind} ${operationId} is waiting for the existing worker (${Math.ceil(waitedMs / 1e3)}s).
 `
   );
 }
@@ -14091,16 +14093,16 @@ async function superviseLifecycle(kind, repoPath, options = {}, command) {
   }
   const initial = readReliabilityOperation(identity2) ?? updateReliabilityOperation(identity2, (record4) => record4);
   const expectedFence = reliabilityFence(initial.state);
-  const deadline = Date.now() + BUSY_EXEC_WAIT_MS;
+  const deadline = Date.now() + BUSY_LIFECYCLE_WAIT_MS;
   const cancellation = { requested: false };
   const removeSignals = installLifecycleWaitSignals(cancellation);
   let lastProgress = -Infinity;
   const assertWaiting = () => {
     if (cancellation.requested)
-      throw new Error(`Lifecycle exec ${ids.operationId} cancelled before dispatch.`);
+      throw new Error(`Lifecycle ${kind} ${ids.operationId} cancelled before dispatch.`);
     if (Date.now() >= deadline)
       throw new Error(
-        `Lifecycle exec ${ids.operationId} admission timed out; command was not launched.`
+        `Lifecycle ${kind} ${ids.operationId} admission timed out; command was not launched.`
       );
   };
   try {
@@ -14126,15 +14128,17 @@ async function superviseLifecycle(kind, repoPath, options = {}, command) {
             throw new Error(
               "Existing lifecycle worker identity or completion is uncertain; preserve its evidence."
             );
-          if (kind !== "exec")
-            throw new Error("A lifecycle worker is active; wait for its completion before ensure.");
           const now = Date.now();
-          if (now - lastProgress >= BUSY_EXEC_PROGRESS_MS) {
-            reportBusyExecWait(ids.operationId, now - (deadline - BUSY_EXEC_WAIT_MS));
+          if (now - lastProgress >= BUSY_LIFECYCLE_PROGRESS_MS) {
+            reportBusyLifecycleWait(
+              kind,
+              ids.operationId,
+              now - (deadline - BUSY_LIFECYCLE_WAIT_MS)
+            );
             lastProgress = now;
           }
           await new Promise(
-            (resolve) => setTimeout(resolve, Math.min(BUSY_EXEC_POLL_MS, deadline - now))
+            (resolve) => setTimeout(resolve, Math.min(BUSY_LIFECYCLE_POLL_MS, deadline - now))
           );
           continue;
         }
@@ -14176,16 +14180,16 @@ async function superviseLifecycle(kind, repoPath, options = {}, command) {
           assertWaiting
         );
       } catch (error) {
-        if (!(error instanceof LifecycleWorkerAdmissionBusyError) || kind !== "exec") throw error;
+        if (!(error instanceof LifecycleWorkerAdmissionBusyError)) throw error;
         assertWaiting();
-        await new Promise((resolve) => setTimeout(resolve, BUSY_EXEC_POLL_MS));
+        await new Promise((resolve) => setTimeout(resolve, BUSY_LIFECYCLE_POLL_MS));
       }
     }
   } finally {
     removeSignals();
   }
 }
-var import_node_path41, activeWorker, lockHeld, BUSY_EXEC_WAIT_MS, BUSY_EXEC_POLL_MS, BUSY_EXEC_PROGRESS_MS;
+var import_node_path41, activeWorker, lockHeld, BUSY_LIFECYCLE_WAIT_MS, BUSY_LIFECYCLE_POLL_MS, BUSY_LIFECYCLE_PROGRESS_MS;
 var init_reliability_lifecycle = __esm({
   "src/core/reliability-lifecycle.ts"() {
     "use strict";
@@ -14208,9 +14212,9 @@ var init_reliability_lifecycle = __esm({
     init_workspace_runtime();
     init_reliability_context();
     lockHeld = false;
-    BUSY_EXEC_WAIT_MS = 30 * 60 * 1e3;
-    BUSY_EXEC_POLL_MS = 250;
-    BUSY_EXEC_PROGRESS_MS = 1e4;
+    BUSY_LIFECYCLE_WAIT_MS = 30 * 60 * 1e3;
+    BUSY_LIFECYCLE_POLL_MS = 250;
+    BUSY_LIFECYCLE_PROGRESS_MS = 1e4;
   }
 });
 
@@ -18902,7 +18906,7 @@ var init_version = __esm({
 
 // src/cli.ts
 var import_commander = require("commander");
-var CLI_VERSION = true ? "0.0.63" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.0.64" : "0.0.0-dev";
 var VERSION_FLAGS = /* @__PURE__ */ new Set(["-V", "--version"]);
 function withErrorHandling(action2) {
   return async (...args) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrouter/cli",
-  "version": "0.0.63",
+  "version": "0.0.64",
   "description": "Local dev routing CLI with shared Traefik reverse proxy",
   "author": "Roland Schlaefli",
   "homepage": "https://github.com/rschlaefli/devrouter#readme",

package/upgrade-prompts/0.0.64.md

@@ -0,0 +1,34 @@
+# Upgrade to devrouter 0.0.64
+
+This patch lets canonical ensure wait for healthy lifecycle work on the same
+checkout and clarifies process-inspection permission failures.
+
+## Task
+
+Install the published patch and update `.devrouter.yml` devrouter.version to
+0.0.64. No schema migration or runtime restart is required. Refresh distributed
+agent guidance through the existing repository workflow.
+
+## Validation
+
+Confirm the installed version. On an authorized runtime, invoke ensure while a
+bounded tooling command is active. Verify waiting, preserved tooling exit status
+and successful ensure after completion when the lifecycle fence stays unchanged.
+Verify the exact runtime stops with zero routes and retained data when finished.
+A waiting exec refreshes runtime proof before admission; ensure establishes its
+runtime inside the worker. Stop or another fence change cancels the waiting
+invocation. Never replay an uncertain command.
+
+## Limits
+
+Waiting is bounded to thirty minutes, with no FIFO guarantee or persistent queue.
+Permission diagnostics direct agents to a permitted host context; they do not
+repair operating-system permissions or authorize lock removal. This patch does
+not solve network exhaustion, activate capacity admission, or claim complete OOM
+protection or autonomous agent recovery.
+
+## Report
+
+Report installed version, exact checkout/provider, command outcomes, retained
+runtime/data evidence and final runtime/route state. Separate published source,
+synthetic checks and live consumer acceptance.