@devrouter/cli 0.0.65 → 0.0.66

package/dist/devrouter-lifecycle-worker.js

@@ -3202,7 +3202,16 @@ function registration(state) {
       throw new Error("Stop workspace identity changed.");
     resolveGitCommonDir(state.repoPath);
   } else if (state.workspace !== void 0) throw new Error("Stop checkout identity changed.");
-  const value = owner.workspace;
+  return identityOf(owner.workspace);
+}
+function managedRunnerId(uid, providerId) {
+  if (uid === void 0) {
+    return providerId;
+  }
+  const bytes = Buffer.byteLength(uid);
+  return bytes === 16 || bytes === 40 ? uid : providerId;
+}
+function identityOf(value) {
   return {
     context: value.context ?? "",
     providerId: value.id,
@@ -3347,6 +3356,64 @@ function absentRegistrationIdentity(state) {
   }
   return { record: record5, gitCommonDir: resolveGitCommonDir(state.repoPath) };
 }
+function replacementObservation(state) {
+  resetWorkspaceRuntimeCaches();
+  if (resolveWorkspaceRuntimeOrDefault(state.repoPath) !== "devsy")
+    throw new Error("Stop provider changed.");
+  if (!state.workspace || !isLinkedWorktree(state.repoPath))
+    throw new Error("Replacement stop requires a linked workspace.");
+  const record5 = readWorkspaceOwnership(state.repoPath, state.workspace);
+  if (!record5 || record5.workspace !== state.workspace || record5.devpodId !== state.devpodId || !sameWorkspacePath(record5.worktreePath, state.repoPath) || resolveWorktreeWorkspace(state.repoPath) !== state.workspace || inspectWorkspaceOwnership(record5, listGitWorktrees(state.repoPath), void 0).ownerStatus !== "present")
+    throw new Error("Replacement stop workspace ownership changed.");
+  const owner = inspectDevsyWorkspaceOwnership(
+    listDevsyWorkspaces(),
+    state.devpodId,
+    state.repoPath
+  );
+  if (owner.status !== "owned")
+    throw new Error("Replacement stop requires one exact provider registration.");
+  if (listDevpodWorkspacesRaw({ allowMissingExecutable: true }).some(
+    (entry) => entry.id === state.devpodId || sameWorkspacePath(entry.source.localFolder, state.repoPath)
+  ))
+    throw new Error("Replacement stop requires no competing provider registration.");
+  proveLocalDockerSelection(owner.workspace);
+  return owner.workspace;
+}
+function proveReplacementStopAbsence(state, baseline, replacement) {
+  const observation = () => {
+    const workspace = replacementObservation(state);
+    if (workspace.uid !== replacement.uid)
+      throw new Error("Replacement stop registration changed during inspection.");
+    if (resolveManagedStopEndpoint() !== baseline.endpoint)
+      throw new Error("Stop endpoint changed.");
+    if (inspectManagedStopDaemon(baseline.endpoint) !== baseline.daemonId)
+      throw new Error("Stop daemon changed.");
+    return workspace;
+  };
+  const before = observation();
+  if (!(0, import_node_util2.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state))
+    throw new Error("Retained stop generation changed.");
+  assertManagedStopContainersAbsent(
+    baseline.endpoint,
+    baseline.containers.map((container) => container.id)
+  );
+  const oldRunner = managedRunnerId(baseline.uid, baseline.providerId);
+  const newRunner = managedRunnerId(before.uid, baseline.providerId);
+  const runners = oldRunner === newRunner ? [oldRunner] : [oldRunner, newRunner];
+  const assertEmptyPopulation = () => {
+    if (inspectManagedStopContainers(baseline.project, baseline.endpoint).length !== 0 || inspectManagedStopWorkspaceIds(baseline.endpoint, baseline.composeDirectory).length !== 0 || runners.some((id3) => inspectProviderRunnerContainers(baseline.endpoint, id3).length !== 0))
+      throw new Error("Replacement stop observed a remaining workspace population.");
+  };
+  assertEmptyPopulation();
+  const after = observation();
+  if (after.uid !== before.uid || !(0, import_node_util2.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state))
+    throw new Error("Replacement stop authority changed during inspection.");
+  assertManagedStopContainersAbsent(
+    baseline.endpoint,
+    baseline.containers.map((container) => container.id)
+  );
+  assertEmptyPopulation();
+}
 function proveManagedStop(state) {
   const baseline = validateManagedStopBaseline(state.stopBaseline, state);
   const owner = inspectDevsyWorkspaceOwnership(
@@ -3354,6 +3421,15 @@ function proveManagedStop(state) {
     state.devpodId,
     state.repoPath
   );
+  if (owner.status === "owned") {
+    const identityKeys = ["context", "providerId", "uid", "sourcePath", "sourceContainer"];
+    const current = identityOf(owner.workspace);
+    const changed = identityKeys.filter((key) => baseline[key] !== current[key]);
+    if (changed.length === 1 && changed[0] === "uid" && !baseline.sourceContainer && !current.sourceContainer && state.workspace !== void 0 && isLinkedWorktree(state.repoPath)) {
+      proveReplacementStopAbsence(state, baseline, { uid: current.uid || void 0 });
+      return { status: "proven-absent", containers: [] };
+    }
+  }
   if (owner.status !== "absent")
     return { status: "retained", containers: proveRetainedManagedStop(state) };
   if (baseline.sourceContainer) throw new Error("Absent stop cannot prove a source container.");
@@ -4787,7 +4863,7 @@ function loadRepoConfig(repoPath, read2 = (file) => import_node_fs14.default.rea
   const config = parseConfig(parsed ?? {}, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.0.65" : "0.0.0-dev";
+    const cliVersion = true ? "0.0.66" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(

package/dist/devrouter.js

@@ -2520,7 +2520,7 @@ function loadRepoConfig(repoPath, read2 = (file) => import_node_fs6.default.read
   const config = parseConfig(parsed ?? {}, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.0.65" : "0.0.0-dev";
+    const cliVersion = true ? "0.0.66" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(
@@ -12140,6 +12140,96 @@ var init_managed_compose_population = __esm({
   }
 });
 
+// src/core/devsy-exec-proof.ts
+function proveLocalDockerSelection(workspace) {
+  const name = workspace.providerName;
+  const context = workspace.context;
+  if (!name || !context || !/^[a-z0-9][a-z0-9-]{0,31}$/.test(name) || !/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(context))
+    throw new Error("Retained exec provider configuration identity is unavailable.");
+  const file = import_node_path33.default.join(
+    process.env.DEVSY_HOME || import_node_path33.default.join(import_node_os2.default.homedir(), ".devsy"),
+    "contexts",
+    context,
+    "providers",
+    name,
+    "provider.json"
+  );
+  try {
+    if (import_node_fs29.default.statSync(file).size > 1024 * 1024) throw new Error();
+    const config = JSON.parse(import_node_fs29.default.readFileSync(file, "utf8"));
+    const driver = config.agent?.driver ?? "docker";
+    const configuredPath = config.agent?.docker?.path ?? "";
+    if (typeof configuredPath !== "string") throw new Error();
+    const command = configuredPath === "${DOCKER_PATH}" || configuredPath === "$DOCKER_PATH" ? workspace.dockerPathOption || process.env.DOCKER_PATH || "docker" : configuredPath || "docker";
+    if (config.name !== name || driver !== "docker" || command !== "docker") throw new Error();
+  } catch {
+    throw new Error("Retained exec requires a provider configured for the local Docker command.");
+  }
+  return name;
+}
+function captureDevsyExecProof(repoPath) {
+  repoPath = comparableWorkspacePath(repoPath);
+  const registry = listDevsyWorkspaces();
+  const workspace = selectDevsyWorkspace(registry, repoPath);
+  if (!workspace?.uid || !workspace.context || workspace.source.container || inspectDevsyWorkspaceOwnership(registry, workspace.id, repoPath).status !== "owned" || inspectDevsyRuntimeStatus(workspace.id) !== "running")
+    throw new Error("Retained exec requires one exact running Devsy registration.");
+  const providerName = proveLocalDockerSelection(workspace);
+  const endpoint = resolveManagedStopEndpoint();
+  if (!supportsManagedStopBaseline(endpoint))
+    throw new Error("Retained exec requires an exact local Docker endpoint.");
+  const daemon = inspectManagedStopDaemon(endpoint);
+  const candidates = workspaceAppContainers(inspectWorkspaceContainers(), repoPath).filter(
+    (container) => container.state.Running
+  );
+  if (candidates.length !== 1)
+    throw new Error("Retained exec requires one exact running primary container.");
+  const candidate = candidates[0];
+  const project = candidate.labels["com.docker.compose.project"];
+  if (!project) throw new Error("Retained exec primary has no Compose identity.");
+  const pinned = workspaceAppContainers(
+    inspectManagedStopContainers(project, endpoint),
+    repoPath
+  ).filter((container) => container.state.Running);
+  if (pinned.length !== 1 || pinned[0].id !== candidate.id)
+    throw new Error("Retained exec primary changed during inspection.");
+  const mounts = pinned[0].mounts.filter(
+    (mount) => mount.Type === "bind" && sameWorkspacePath(mount.Source, repoPath)
+  );
+  if (mounts.length !== 1 || !mounts[0].Destination.startsWith("/"))
+    throw new Error("Retained exec requires one exact source mount.");
+  const uidBytes = Buffer.byteLength(workspace.uid);
+  const runner = uidBytes === 16 || uidBytes === 40 ? workspace.uid : workspace.id;
+  const runnerContainers = inspectProviderRunnerContainers(endpoint, runner);
+  if (runnerContainers.length !== 1 || runnerContainers[0] !== candidate.id)
+    throw new Error("Retained exec runner does not select the exact primary container.");
+  if (inspectManagedStopRunnerId(endpoint, candidate.id) !== runner || inspectManagedStopDaemon(endpoint) !== daemon)
+    throw new Error("Retained exec provider or Docker identity changed.");
+  return {
+    repoPath,
+    id: workspace.id,
+    uid: workspace.uid,
+    context: workspace.context,
+    providerName,
+    endpoint,
+    daemon,
+    containerId: candidate.id,
+    workspacePath: mounts[0].Destination
+  };
+}
+var import_node_fs29, import_node_os2, import_node_path33, import_node_util2;
+var init_devsy_exec_proof = __esm({
+  "src/core/devsy-exec-proof.ts"() {
+    "use strict";
+    import_node_fs29 = __toESM(require("fs"));
+    import_node_os2 = __toESM(require("os"));
+    import_node_path33 = __toESM(require("path"));
+    import_node_util2 = require("util");
+    init_devpod_environment();
+    init_devsy_workspaces();
+    init_workspace();
+  }
+});
+
 // src/core/reliability-context.ts
 function claimLifecycleEffect() {
   claim?.();
@@ -12168,7 +12258,7 @@ function resolveGitCommonDir(repoPath) {
   if (result.status !== 0 || !output2) {
     throw commandError("Could not resolve the Git common directory", repoPath, result.stderr);
   }
-  return comparableWorkspacePath(import_node_path33.default.isAbsolute(output2) ? output2 : import_node_path33.default.resolve(repoPath, output2));
+  return comparableWorkspacePath(import_node_path34.default.isAbsolute(output2) ? output2 : import_node_path34.default.resolve(repoPath, output2));
 }
 function resolveGitTopLevel(repoPath) {
   const result = (0, import_node_child_process20.spawnSync)("git", ["-C", repoPath, "rev-parse", "--show-toplevel"], {
@@ -12219,7 +12309,7 @@ function listGitWorktrees(repoPath) {
   return worktrees;
 }
 function ownershipDirectory(repoPath) {
-  return import_node_path33.default.join(resolveGitCommonDir(repoPath), OWNERSHIP_DIR);
+  return import_node_path34.default.join(resolveGitCommonDir(repoPath), OWNERSHIP_DIR);
 }
 function validateWorkspace(value, label) {
   if (typeof value !== "string" || wsFromBranch(value) !== value) {
@@ -12247,7 +12337,7 @@ function validateRecord(value, expectedWorkspace) {
       `workspace ownership file '${expectedWorkspace}' contains identity '${workspace}'`
     );
   }
-  if (typeof candidate.worktreePath !== "string" || !import_node_path33.default.isAbsolute(candidate.worktreePath)) {
+  if (typeof candidate.worktreePath !== "string" || !import_node_path34.default.isAbsolute(candidate.worktreePath)) {
     throw new Error("invalid workspace ownership worktreePath");
   }
   if (candidate.branch !== null && typeof candidate.branch !== "string") {
@@ -12265,7 +12355,7 @@ function validateRecord(value, expectedWorkspace) {
   };
 }
 function recordPath(repoPath, workspace) {
-  return import_node_path33.default.join(
+  return import_node_path34.default.join(
     ownershipDirectory(repoPath),
     `${validateWorkspace(workspace, "workspace")}.json`
   );
@@ -12273,7 +12363,7 @@ function recordPath(repoPath, workspace) {
 function readRecordFile(filePath, expectedWorkspace) {
   let parsed;
   try {
-    parsed = JSON.parse(import_node_fs29.default.readFileSync(filePath, "utf-8"));
+    parsed = JSON.parse(import_node_fs30.default.readFileSync(filePath, "utf-8"));
   } catch (error) {
     if (error instanceof SyntaxError) {
       throw new Error(`invalid workspace ownership JSON at '${filePath}'`);
@@ -12298,7 +12388,7 @@ function listWorkspaceOwnership(repoPath) {
 function listWorkspaceOwnershipInDirectory(directory) {
   let entries;
   try {
-    entries = import_node_fs29.default.readdirSync(directory, { withFileTypes: true });
+    entries = import_node_fs30.default.readdirSync(directory, { withFileTypes: true });
   } catch (error) {
     if (error.code === "ENOENT") return [];
     throw error;
@@ -12306,14 +12396,14 @@ function listWorkspaceOwnershipInDirectory(directory) {
   return entries.filter((entry) => entry.isFile() && entry.name.endsWith(".json")).sort((left, right) => left.name.localeCompare(right.name)).map((entry) => {
     const workspace = entry.name.slice(0, -".json".length);
     validateWorkspace(workspace, "filename");
-    return readRecordFile(import_node_path33.default.join(directory, entry.name), workspace);
+    return readRecordFile(import_node_path34.default.join(directory, entry.name), workspace);
   });
 }
 function writeWorkspaceOwnershipInDirectory(directory, input2) {
   const workspace = validateWorkspace(input2.workspace, "workspace");
   const devpodId = validateWorkspace(input2.devpodId, "devpodId");
   const worktreePath = comparableWorkspacePath(input2.worktreePath);
-  const filePath = import_node_path33.default.join(directory, `${workspace}.json`);
+  const filePath = import_node_path34.default.join(directory, `${workspace}.json`);
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const records = listWorkspaceOwnershipInDirectory(directory);
   const existing = records.find((record6) => record6.workspace === workspace);
@@ -12349,9 +12439,9 @@ function writeWorkspaceOwnershipInDirectory(directory, input2) {
   return record5;
 }
 function removeWorkspaceOwnershipInDirectory(directory, workspace) {
-  const filePath = import_node_path33.default.join(directory, `${validateWorkspace(workspace, "workspace")}.json`);
+  const filePath = import_node_path34.default.join(directory, `${validateWorkspace(workspace, "workspace")}.json`);
   try {
-    import_node_fs29.default.rmSync(filePath);
+    import_node_fs30.default.rmSync(filePath);
     return true;
   } catch (error) {
     if (error.code === "ENOENT") return false;
@@ -12362,7 +12452,7 @@ function sameOwnershipRecord(left, right) {
   return left.version === right.version && left.workspace === right.workspace && sameWorkspacePath(left.worktreePath, right.worktreePath) && left.branch === right.branch && left.devpodId === right.devpodId && left.createdAt === right.createdAt && left.updatedAt === right.updatedAt;
 }
 function removeWorkspaceOwnershipIfMatchesInDirectory(directory, expected) {
-  const filePath = import_node_path33.default.join(
+  const filePath = import_node_path34.default.join(
     directory,
     `${validateWorkspace(expected.workspace, "workspace")}.json`
   );
@@ -12374,14 +12464,14 @@ function removeWorkspaceOwnershipIfMatchesInDirectory(directory, expected) {
     throw error;
   }
   if (!sameOwnershipRecord(current, expected)) return "changed";
-  import_node_fs29.default.rmSync(filePath);
+  import_node_fs30.default.rmSync(filePath);
   return "removed";
 }
 function withWorkspaceOwnershipTransaction(repoPath, operation, options = {}) {
   const directory = ownershipDirectory(repoPath);
-  import_node_fs29.default.mkdirSync(directory, { recursive: true });
+  import_node_fs30.default.mkdirSync(directory, { recursive: true });
   return withFileLockSync(
-    import_node_path33.default.join(directory, ".lock"),
+    import_node_path34.default.join(directory, ".lock"),
     {
       activity: "workspace ownership transaction",
       target: `'${repoPath}'`,
@@ -12414,7 +12504,7 @@ function persistedWorkspaceOwners(repoPath, worktreePath) {
     try {
       workspace = readPersistedWorkspace(worktree.path);
     } catch (error) {
-      if (!import_node_fs29.default.existsSync(worktree.path)) continue;
+      if (!import_node_fs30.default.existsSync(worktree.path)) continue;
       throw error;
     }
     if (!workspace) continue;
@@ -12577,7 +12667,7 @@ function inspectWorkspaceOwnership(record5, worktrees, devpods) {
   if (worktree?.locked) {
     return { ownerStatus: "locked", devpodStatus, worktree };
   }
-  if ((!worktree || worktree.prunable) && import_node_fs29.default.existsSync(record5.worktreePath)) {
+  if ((!worktree || worktree.prunable) && import_node_fs30.default.existsSync(record5.worktreePath)) {
     return { ownerStatus: "conflict", devpodStatus, worktree };
   }
   if (!worktree || worktree.prunable) {
@@ -12601,20 +12691,20 @@ function listMissingWorkspaceOwnership(repoPath) {
     (record5) => inspectWorkspaceOwnership(record5, worktrees, void 0).ownerStatus === "missing"
   );
 }
-var import_node_child_process20, import_node_fs29, import_node_path33, READ_ONLY_GIT_ENV, OWNERSHIP_VERSION, OWNERSHIP_DIR;
+var import_node_child_process20, import_node_fs30, import_node_path34, READ_ONLY_GIT_ENV, OWNERSHIP_VERSION, OWNERSHIP_DIR;
 var init_workspace_ownership = __esm({
   "src/core/workspace-ownership.ts"() {
     "use strict";
     import_node_child_process20 = require("child_process");
-    import_node_fs29 = __toESM(require("fs"));
-    import_node_path33 = __toESM(require("path"));
+    import_node_fs30 = __toESM(require("fs"));
+    import_node_path34 = __toESM(require("path"));
     init_atomic_file();
     init_devpod_workspaces();
     init_file_lock();
     init_workspace();
     READ_ONLY_GIT_ENV = { ...process.env, GIT_OPTIONAL_LOCKS: "0" };
     OWNERSHIP_VERSION = 1;
-    OWNERSHIP_DIR = import_node_path33.default.join("devrouter", "workspaces");
+    OWNERSHIP_DIR = import_node_path34.default.join("devrouter", "workspaces");
   }
 });
 
@@ -12636,7 +12726,16 @@ function registration(state) {
       throw new Error("Stop workspace identity changed.");
     resolveGitCommonDir(state.repoPath);
   } else if (state.workspace !== void 0) throw new Error("Stop checkout identity changed.");
-  const value = owner.workspace;
+  return identityOf(owner.workspace);
+}
+function managedRunnerId(uid, providerId) {
+  if (uid === void 0) {
+    return providerId;
+  }
+  const bytes = Buffer.byteLength(uid);
+  return bytes === 16 || bytes === 40 ? uid : providerId;
+}
+function identityOf(value) {
   return {
     context: value.context ?? "",
     providerId: value.id,
@@ -12671,7 +12770,7 @@ function prove(state, baseline) {
   const containers2 = inspectManagedStopContainers(baseline.project, baseline.endpoint);
   const expected = baseline.containers.map((container) => ({ ...container, mounts: orderedMounts(container.mounts) })).sort((a, b) => compareText(a.id, b.id));
   const observed = containers2.map(identity).sort((a, b) => compareText(a.id, b.id));
-  if (!(0, import_node_util2.isDeepStrictEqual)(expected, observed) || containers2.some(
+  if (!(0, import_node_util3.isDeepStrictEqual)(expected, observed) || containers2.some(
     (container) => container.labels["com.docker.compose.project.working_dir"] !== baseline.composeDirectory
   )) {
     throw new Error("Retained container population or immutable identity changed.");
@@ -12680,7 +12779,7 @@ function prove(state, baseline) {
     baseline.endpoint,
     baseline.composeDirectory
   ).sort();
-  if (!(0, import_node_util2.isDeepStrictEqual)(workspaceIds, expected.map((container) => container.id).sort())) {
+  if (!(0, import_node_util3.isDeepStrictEqual)(workspaceIds, expected.map((container) => container.id).sort())) {
     throw new Error("Workspace contains an unrecorded container population.");
   }
   const primary = baseline.containers.find(
@@ -12692,18 +12791,18 @@ function prove(state, baseline) {
   if (!baseline.sourceContainer && inspectManagedStopRunnerId(baseline.endpoint, primary.id) !== runnerId) {
     throw new Error("Provider-to-container binding changed.");
   }
-  if (!(0, import_node_util2.isDeepStrictEqual)(registration(state), owner) || inspectManagedStopDaemon(baseline.endpoint) !== baseline.daemonId) {
+  if (!(0, import_node_util3.isDeepStrictEqual)(registration(state), owner) || inspectManagedStopDaemon(baseline.endpoint) !== baseline.daemonId) {
     throw new Error("Stop authority changed during inspection.");
   }
   return containers2;
 }
 function proveRetainedManagedStop(state) {
   const baseline = validateManagedStopBaseline(state.stopBaseline, state);
-  if (!(0, import_node_util2.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state)) {
+  if (!(0, import_node_util3.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state)) {
     throw new Error("Retained stop generation changed.");
   }
   const result = prove(state, baseline);
-  if (!(0, import_node_util2.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state)) {
+  if (!(0, import_node_util3.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state)) {
     throw new Error("Retained stop generation changed during inspection.");
   }
   return result;
@@ -12728,6 +12827,64 @@ function absentRegistrationIdentity(state) {
   }
   return { record: record5, gitCommonDir: resolveGitCommonDir(state.repoPath) };
 }
+function replacementObservation(state) {
+  resetWorkspaceRuntimeCaches();
+  if (resolveWorkspaceRuntimeOrDefault(state.repoPath) !== "devsy")
+    throw new Error("Stop provider changed.");
+  if (!state.workspace || !isLinkedWorktree(state.repoPath))
+    throw new Error("Replacement stop requires a linked workspace.");
+  const record5 = readWorkspaceOwnership(state.repoPath, state.workspace);
+  if (!record5 || record5.workspace !== state.workspace || record5.devpodId !== state.devpodId || !sameWorkspacePath(record5.worktreePath, state.repoPath) || resolveWorktreeWorkspace(state.repoPath) !== state.workspace || inspectWorkspaceOwnership(record5, listGitWorktrees(state.repoPath), void 0).ownerStatus !== "present")
+    throw new Error("Replacement stop workspace ownership changed.");
+  const owner = inspectDevsyWorkspaceOwnership(
+    listDevsyWorkspaces(),
+    state.devpodId,
+    state.repoPath
+  );
+  if (owner.status !== "owned")
+    throw new Error("Replacement stop requires one exact provider registration.");
+  if (listDevpodWorkspacesRaw({ allowMissingExecutable: true }).some(
+    (entry) => entry.id === state.devpodId || sameWorkspacePath(entry.source.localFolder, state.repoPath)
+  ))
+    throw new Error("Replacement stop requires no competing provider registration.");
+  proveLocalDockerSelection(owner.workspace);
+  return owner.workspace;
+}
+function proveReplacementStopAbsence(state, baseline, replacement) {
+  const observation = () => {
+    const workspace = replacementObservation(state);
+    if (workspace.uid !== replacement.uid)
+      throw new Error("Replacement stop registration changed during inspection.");
+    if (resolveManagedStopEndpoint() !== baseline.endpoint)
+      throw new Error("Stop endpoint changed.");
+    if (inspectManagedStopDaemon(baseline.endpoint) !== baseline.daemonId)
+      throw new Error("Stop daemon changed.");
+    return workspace;
+  };
+  const before = observation();
+  if (!(0, import_node_util3.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state))
+    throw new Error("Retained stop generation changed.");
+  assertManagedStopContainersAbsent(
+    baseline.endpoint,
+    baseline.containers.map((container) => container.id)
+  );
+  const oldRunner = managedRunnerId(baseline.uid, baseline.providerId);
+  const newRunner = managedRunnerId(before.uid, baseline.providerId);
+  const runners = oldRunner === newRunner ? [oldRunner] : [oldRunner, newRunner];
+  const assertEmptyPopulation = () => {
+    if (inspectManagedStopContainers(baseline.project, baseline.endpoint).length !== 0 || inspectManagedStopWorkspaceIds(baseline.endpoint, baseline.composeDirectory).length !== 0 || runners.some((id4) => inspectProviderRunnerContainers(baseline.endpoint, id4).length !== 0))
+      throw new Error("Replacement stop observed a remaining workspace population.");
+  };
+  assertEmptyPopulation();
+  const after = observation();
+  if (after.uid !== before.uid || !(0, import_node_util3.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state))
+    throw new Error("Replacement stop authority changed during inspection.");
+  assertManagedStopContainersAbsent(
+    baseline.endpoint,
+    baseline.containers.map((container) => container.id)
+  );
+  assertEmptyPopulation();
+}
 function proveManagedStop(state) {
   const baseline = validateManagedStopBaseline(state.stopBaseline, state);
   const owner = inspectDevsyWorkspaceOwnership(
@@ -12735,11 +12892,20 @@ function proveManagedStop(state) {
     state.devpodId,
     state.repoPath
   );
+  if (owner.status === "owned") {
+    const identityKeys = ["context", "providerId", "uid", "sourcePath", "sourceContainer"];
+    const current = identityOf(owner.workspace);
+    const changed = identityKeys.filter((key) => baseline[key] !== current[key]);
+    if (changed.length === 1 && changed[0] === "uid" && !baseline.sourceContainer && !current.sourceContainer && state.workspace !== void 0 && isLinkedWorktree(state.repoPath)) {
+      proveReplacementStopAbsence(state, baseline, { uid: current.uid || void 0 });
+      return { status: "proven-absent", containers: [] };
+    }
+  }
   if (owner.status !== "absent")
     return { status: "retained", containers: proveRetainedManagedStop(state) };
   if (baseline.sourceContainer) throw new Error("Absent stop cannot prove a source container.");
   const before = absentRegistrationIdentity(state);
-  if (!(0, import_node_util2.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state))
+  if (!(0, import_node_util3.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state))
     throw new Error("Retained stop generation changed.");
   if (inspectManagedStopDaemon(baseline.endpoint) !== baseline.daemonId)
     throw new Error("Stop daemon changed.");
@@ -12751,7 +12917,7 @@ function proveManagedStop(state) {
   const runnerId = uidBytes === 16 || uidBytes === 40 ? baseline.uid : baseline.providerId;
   if (inspectManagedStopContainers(baseline.project, baseline.endpoint).length !== 0 || inspectManagedStopWorkspaceIds(baseline.endpoint, baseline.composeDirectory).length !== 0 || inspectProviderRunnerContainers(baseline.endpoint, runnerId).length !== 0)
     throw new Error("Absent stop observed a remaining workspace population.");
-  if (inspectManagedStopDaemon(baseline.endpoint) !== baseline.daemonId || !(0, import_node_util2.isDeepStrictEqual)(absentRegistrationIdentity(state), before) || !(0, import_node_util2.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state))
+  if (inspectManagedStopDaemon(baseline.endpoint) !== baseline.daemonId || !(0, import_node_util3.isDeepStrictEqual)(absentRegistrationIdentity(state), before) || !(0, import_node_util3.isDeepStrictEqual)(readManagedRuntimeState(state.repoPath, state.workspace), state))
     throw new Error("Absent stop authority changed during inspection.");
   return { status: "proven-absent", containers: [] };
 }
@@ -12787,15 +12953,16 @@ function managedStopRouteReferences(state) {
     (name) => ["http", "tcp"].map((protocol) => ({ repoPath: state.repoPath, name, protocol }))
   );
 }
-var import_node_os2, import_node_path34, import_node_util2;
+var import_node_os3, import_node_path35, import_node_util3;
 var init_managed_stop_recovery = __esm({
   "src/core/managed-stop-recovery.ts"() {
     "use strict";
-    import_node_os2 = __toESM(require("os"));
-    import_node_path34 = __toESM(require("path"));
-    import_node_util2 = require("util");
+    import_node_os3 = __toESM(require("os"));
+    import_node_path35 = __toESM(require("path"));
+    import_node_util3 = require("util");
     init_devpod_environment();
     init_devpod_registry();
+    init_devsy_exec_proof();
     init_devsy_workspaces();
     init_managed_compose_population();
     init_managed_runtime_state();
@@ -12929,8 +13096,8 @@ function stopRetainedManagedDevsyWorkspace(options) {
   if (!context || !/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/.test(context) || !/^[a-zA-Z0-9][a-zA-Z0-9_.-]*$/.test(devsyId)) {
     throw new Error("Managed stop requires a valid exact Devsy context and workspace ID.");
   }
-  const devsyRoot = import_node_path35.default.resolve(process.env.DEVSY_HOME || import_node_path35.default.join(import_node_os3.default.homedir(), ".devsy"));
-  const featureDirectory = import_node_path35.default.join(
+  const devsyRoot = import_node_path36.default.resolve(process.env.DEVSY_HOME || import_node_path36.default.join(import_node_os4.default.homedir(), ".devsy"));
+  const featureDirectory = import_node_path36.default.join(
     devsyRoot,
     "contexts",
     context,
@@ -13034,12 +13201,12 @@ function stopRetainedManagedDevsyWorkspace(options) {
   if (providerFailed) throw providerError;
   return true;
 }
-var import_node_os3, import_node_path35;
+var import_node_os4, import_node_path36;
 var init_managed_devsy_stop = __esm({
   "src/core/managed-devsy-stop.ts"() {
     "use strict";
-    import_node_os3 = __toESM(require("os"));
-    import_node_path35 = __toESM(require("path"));
+    import_node_os4 = __toESM(require("os"));
+    import_node_path36 = __toESM(require("path"));
     init_devcontainer_profile();
     init_devpod_environment();
     init_devsy_workspaces();
@@ -13082,14 +13249,14 @@ var init_network_provider_binding = __esm({
 
 // src/core/network-claim-lookup.ts
 function networkOwnerKey(repoPath) {
-  if (!import_node_path36.default.isAbsolute(repoPath) || import_node_path36.default.resolve(repoPath) !== repoPath)
+  if (!import_node_path37.default.isAbsolute(repoPath) || import_node_path37.default.resolve(repoPath) !== repoPath)
     throw new Error("Invalid network owner path.");
   return (0, import_node_crypto18.createHash)("sha256").update(repoPath).digest("hex");
 }
 function findOwnedNetworkClaim(repoPath, root = NETWORK_CLAIMS_ROOT) {
   let names;
   try {
-    names = import_node_fs30.default.readdirSync(root);
+    names = import_node_fs31.default.readdirSync(root);
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     throw new Error("Network claims cannot be inspected; repair is required.");
@@ -13098,21 +13265,21 @@ function findOwnedNetworkClaim(repoPath, root = NETWORK_CLAIMS_ROOT) {
   if (files.length > 128) throw new Error("Network daemon inventory exceeds its bound.");
   let found;
   for (const file of files) {
-    const full = import_node_path36.default.join(root, file);
-    const stat = import_node_fs30.default.lstatSync(full);
+    const full = import_node_path37.default.join(root, file);
+    const stat = import_node_fs31.default.lstatSync(full);
     if (!stat.isFile() || stat.size > NETWORK_CLAIMS_MAX_FILE_BYTES)
       throw new Error("Invalid retained network claim file.");
     let value;
-    const descriptor = import_node_fs30.default.openSync(
+    const descriptor = import_node_fs31.default.openSync(
       full,
-      import_node_fs30.default.constants.O_RDONLY | import_node_fs30.default.constants.O_NONBLOCK | import_node_fs30.default.constants.O_NOFOLLOW
+      import_node_fs31.default.constants.O_RDONLY | import_node_fs31.default.constants.O_NONBLOCK | import_node_fs31.default.constants.O_NOFOLLOW
     );
     try {
-      if (!import_node_fs30.default.fstatSync(descriptor).isFile()) throw new Error();
+      if (!import_node_fs31.default.fstatSync(descriptor).isFile()) throw new Error();
       const bytes = Buffer.alloc(NETWORK_CLAIMS_MAX_FILE_BYTES + 1);
       let size = 0;
       while (size < bytes.length) {
-        const count = import_node_fs30.default.readSync(descriptor, bytes, size, bytes.length - size, null);
+        const count = import_node_fs31.default.readSync(descriptor, bytes, size, bytes.length - size, null);
         if (!count) break;
         size += count;
       }
@@ -13122,7 +13289,7 @@ function findOwnedNetworkClaim(repoPath, root = NETWORK_CLAIMS_ROOT) {
     } catch {
       throw new Error("Retained network claim could not be read safely.");
     } finally {
-      import_node_fs30.default.closeSync(descriptor);
+      import_node_fs31.default.closeSync(descriptor);
     }
     if (typeof value.daemonId !== "string" || `${(0, import_node_crypto18.createHash)("sha256").update(value.daemonId).digest("hex")}.json` !== file)
       throw new Error("Retained network daemon identity is invalid.");
@@ -13138,13 +13305,13 @@ function findOwnedNetworkClaim(repoPath, root = NETWORK_CLAIMS_ROOT) {
   }
   return found;
 }
-var import_node_crypto18, import_node_fs30, import_node_path36;
+var import_node_crypto18, import_node_fs31, import_node_path37;
 var init_network_claim_lookup = __esm({
   "src/core/network-claim-lookup.ts"() {
     "use strict";
     import_node_crypto18 = require("crypto");
-    import_node_fs30 = __toESM(require("fs"));
-    import_node_path36 = __toESM(require("path"));
+    import_node_fs31 = __toESM(require("fs"));
+    import_node_path37 = __toESM(require("path"));
     init_network_claims();
   }
 });
@@ -13182,7 +13349,7 @@ var init_network_provider_effect = __esm({
 
 // src/core/devsy-mutation.ts
 function withMutationLock(activity, target, operation) {
-  import_node_fs31.default.mkdirSync(DEVROUTER_HOME, { recursive: true });
+  import_node_fs32.default.mkdirSync(DEVROUTER_HOME, { recursive: true });
   return withFileLockSync(
     DEVSY_MUTATION_LOCK_FILE,
     {
@@ -13263,13 +13430,13 @@ function stopOwnedDevsyWorkspace(devsyId, worktreePath) {
 function deleteOwnedDevsyWorkspace(devsyId, worktreePath) {
   return mutateOwnedDevsyWorkspace("delete", devsyId, worktreePath);
 }
-var import_node_child_process21, import_node_fs31, import_node_path37, DEVSY_MUTATION_LOCK_FILE, DEVSY_MUTATION_WAIT_MS;
+var import_node_child_process21, import_node_fs32, import_node_path38, DEVSY_MUTATION_LOCK_FILE, DEVSY_MUTATION_WAIT_MS;
 var init_devsy_mutation = __esm({
   "src/core/devsy-mutation.ts"() {
     "use strict";
     import_node_child_process21 = require("child_process");
-    import_node_fs31 = __toESM(require("fs"));
-    import_node_path37 = __toESM(require("path"));
+    import_node_fs32 = __toESM(require("fs"));
+    import_node_path38 = __toESM(require("path"));
     init_devsy_agent();
     init_devsy_workspaces();
     init_file_lock();
@@ -13278,14 +13445,14 @@ var init_devsy_mutation = __esm({
     init_network_provider_effect();
     init_reliability_context();
     init_router();
-    DEVSY_MUTATION_LOCK_FILE = import_node_path37.default.join(DEVROUTER_HOME, "devsy-mutation.lock");
+    DEVSY_MUTATION_LOCK_FILE = import_node_path38.default.join(DEVROUTER_HOME, "devsy-mutation.lock");
     DEVSY_MUTATION_WAIT_MS = 18e5;
   }
 });
 
 // src/core/devpod-mutation.ts
 function withMutationLock2(activity, target, operation) {
-  import_node_fs32.default.mkdirSync(DEVROUTER_HOME, { recursive: true });
+  import_node_fs33.default.mkdirSync(DEVROUTER_HOME, { recursive: true });
   return withFileLockSync(
     DEVPOD_MUTATION_LOCK_FILE,
     {
@@ -13375,13 +13542,13 @@ function deleteOwnedDevpodWorkspace(devpodId, worktreePath) {
   resetWorkspaceRuntimeCaches();
   return result;
 }
-var import_node_child_process22, import_node_fs32, import_node_path38, DEVPOD_MUTATION_LOCK_FILE, DEVPOD_MUTATION_WAIT_MS;
+var import_node_child_process22, import_node_fs33, import_node_path39, DEVPOD_MUTATION_LOCK_FILE, DEVPOD_MUTATION_WAIT_MS;
 var init_devpod_mutation = __esm({
   "src/core/devpod-mutation.ts"() {
     "use strict";
     import_node_child_process22 = require("child_process");
-    import_node_fs32 = __toESM(require("fs"));
-    import_node_path38 = __toESM(require("path"));
+    import_node_fs33 = __toESM(require("fs"));
+    import_node_path39 = __toESM(require("path"));
     init_devpod_workspaces();
     init_devsy_mutation();
     init_file_lock();
@@ -13390,7 +13557,7 @@ var init_devpod_mutation = __esm({
     init_reliability_context();
     init_router();
     init_workspace_runtime();
-    DEVPOD_MUTATION_LOCK_FILE = import_node_path38.default.join(DEVROUTER_HOME, "devpod-mutation.lock");
+    DEVPOD_MUTATION_LOCK_FILE = import_node_path39.default.join(DEVROUTER_HOME, "devpod-mutation.lock");
     DEVPOD_MUTATION_WAIT_MS = 18e5;
   }
 });
@@ -13405,10 +13572,10 @@ function inRepositoryWorkspaceScope(repoPath, worktreePath, livePaths) {
   if (livePaths.some((candidate) => sameWorkspacePath(candidate, worktreePath))) return true;
   const comparableRepo = comparableWorkspacePath(repoPath);
   const comparableWorktree = comparableWorkspacePath(worktreePath);
-  const localRoot = import_node_path39.default.join(comparableRepo, "trees") + import_node_path39.default.sep;
+  const localRoot = import_node_path40.default.join(comparableRepo, "trees") + import_node_path40.default.sep;
   if (comparableWorktree.startsWith(localRoot)) return true;
-  const legacyPrefix = `${import_node_path39.default.basename(comparableRepo)}-`;
-  return import_node_path39.default.dirname(comparableWorktree) === import_node_path39.default.dirname(comparableRepo) && import_node_path39.default.basename(comparableWorktree).startsWith(legacyPrefix);
+  const legacyPrefix = `${import_node_path40.default.basename(comparableRepo)}-`;
+  return import_node_path40.default.dirname(comparableWorktree) === import_node_path40.default.dirname(comparableRepo) && import_node_path40.default.basename(comparableWorktree).startsWith(legacyPrefix);
 }
 function previewActions(devpodStatus, routeCount, includeRecord) {
   const actions = [
@@ -13660,11 +13827,11 @@ function applyWorkspaceGc(plan) {
     candidates
   };
 }
-var import_node_path39;
+var import_node_path40;
 var init_workspace_gc = __esm({
   "src/core/workspace-gc.ts"() {
     "use strict";
-    import_node_path39 = __toESM(require("path"));
+    import_node_path40 = __toESM(require("path"));
     init_devpod_mutation();
     init_devpod_workspaces();
     init_host_routes();
@@ -13734,11 +13901,11 @@ function inspectPostgresCredentials(repoPath, config) {
         parseErrors.push(`${app.name}: ${composeFile} (${message})`);
         continue;
       }
-      if (!import_node_fs33.default.existsSync(absolutePath)) {
+      if (!import_node_fs34.default.existsSync(absolutePath)) {
         continue;
       }
       try {
-        const raw = import_node_fs33.default.readFileSync(absolutePath, "utf-8");
+        const raw = import_node_fs34.default.readFileSync(absolutePath, "utf-8");
         const parsed = import_yaml5.default.parse(raw);
         const root = asRecord2(parsed);
         const services = asRecord2(root?.services);
@@ -14018,7 +14185,7 @@ async function buildDoctorReport(options = {}) {
       const config = runtimeConfig.config;
       loadedConfig = config;
       loadedWorkspace = runtimeConfig.workspace;
-      const cliVersion = true ? "0.0.65" : "0.0.0-dev";
+      const cliVersion = true ? "0.0.66" : "0.0.0-dev";
       const configVersion = config.devrouter?.version;
       if (configVersion && cliVersion !== "0.0.0-dev" && compareSemver(configVersion, cliVersion) > 0) {
         addCheck(checks, {
@@ -14048,9 +14215,9 @@ async function buildDoctorReport(options = {}) {
         (app) => app.docker.composeFiles.map((filePath) => ({
           app: app.name,
           filePath,
-          absolutePath: import_node_path40.default.resolve(repo.path, filePath)
+          absolutePath: import_node_path41.default.resolve(repo.path, filePath)
         }))
-      ).filter((entry) => !import_node_fs33.default.existsSync(entry.absolutePath));
+      ).filter((entry) => !import_node_fs34.default.existsSync(entry.absolutePath));
       addCheck(checks, {
         id: "repo.compose-files",
         level: missingComposeFiles.length === 0 ? "ok" : "error",
@@ -14093,8 +14260,8 @@ async function buildDoctorReport(options = {}) {
       const missingHostCwds = config.apps.filter((app) => app.runtime === "host").map((app) => ({
         app: app.name,
         cwd: app.hostRun.cwd,
-        absolutePath: import_node_path40.default.resolve(repo.path, app.hostRun.cwd)
-      })).filter((entry) => !import_node_fs33.default.existsSync(entry.absolutePath));
+        absolutePath: import_node_path41.default.resolve(repo.path, app.hostRun.cwd)
+      })).filter((entry) => !import_node_fs34.default.existsSync(entry.absolutePath));
       addCheck(checks, {
         id: "repo.host-cwd",
         level: missingHostCwds.length === 0 ? "ok" : "error",
@@ -14238,12 +14405,12 @@ async function buildDoctorReport(options = {}) {
     nextSteps
   };
 }
-var import_node_fs33, import_node_path40, import_yaml5, POSTGRES_DEFAULTS;
+var import_node_fs34, import_node_path41, import_yaml5, POSTGRES_DEFAULTS;
 var init_doctor = __esm({
   "src/core/doctor.ts"() {
     "use strict";
-    import_node_fs33 = __toESM(require("fs"));
-    import_node_path40 = __toESM(require("path"));
+    import_node_fs34 = __toESM(require("fs"));
+    import_node_path41 = __toESM(require("path"));
     import_yaml5 = __toESM(require("yaml"));
     init_docker();
     init_host_routes();
@@ -14652,96 +14819,6 @@ var init_up = __esm({
   }
 });
 
-// src/core/devsy-exec-proof.ts
-function proveLocalDockerSelection(workspace) {
-  const name = workspace.providerName;
-  const context = workspace.context;
-  if (!name || !context || !/^[a-z0-9][a-z0-9-]{0,31}$/.test(name) || !/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(context))
-    throw new Error("Retained exec provider configuration identity is unavailable.");
-  const file = import_node_path41.default.join(
-    process.env.DEVSY_HOME || import_node_path41.default.join(import_node_os4.default.homedir(), ".devsy"),
-    "contexts",
-    context,
-    "providers",
-    name,
-    "provider.json"
-  );
-  try {
-    if (import_node_fs34.default.statSync(file).size > 1024 * 1024) throw new Error();
-    const config = JSON.parse(import_node_fs34.default.readFileSync(file, "utf8"));
-    const driver = config.agent?.driver ?? "docker";
-    const configuredPath = config.agent?.docker?.path ?? "";
-    if (typeof configuredPath !== "string") throw new Error();
-    const command = configuredPath === "${DOCKER_PATH}" || configuredPath === "$DOCKER_PATH" ? workspace.dockerPathOption || process.env.DOCKER_PATH || "docker" : configuredPath || "docker";
-    if (config.name !== name || driver !== "docker" || command !== "docker") throw new Error();
-  } catch {
-    throw new Error("Retained exec requires a provider configured for the local Docker command.");
-  }
-  return name;
-}
-function captureDevsyExecProof(repoPath) {
-  repoPath = comparableWorkspacePath(repoPath);
-  const registry = listDevsyWorkspaces();
-  const workspace = selectDevsyWorkspace(registry, repoPath);
-  if (!workspace?.uid || !workspace.context || workspace.source.container || inspectDevsyWorkspaceOwnership(registry, workspace.id, repoPath).status !== "owned" || inspectDevsyRuntimeStatus(workspace.id) !== "running")
-    throw new Error("Retained exec requires one exact running Devsy registration.");
-  const providerName = proveLocalDockerSelection(workspace);
-  const endpoint = resolveManagedStopEndpoint();
-  if (!supportsManagedStopBaseline(endpoint))
-    throw new Error("Retained exec requires an exact local Docker endpoint.");
-  const daemon = inspectManagedStopDaemon(endpoint);
-  const candidates = workspaceAppContainers(inspectWorkspaceContainers(), repoPath).filter(
-    (container) => container.state.Running
-  );
-  if (candidates.length !== 1)
-    throw new Error("Retained exec requires one exact running primary container.");
-  const candidate = candidates[0];
-  const project = candidate.labels["com.docker.compose.project"];
-  if (!project) throw new Error("Retained exec primary has no Compose identity.");
-  const pinned = workspaceAppContainers(
-    inspectManagedStopContainers(project, endpoint),
-    repoPath
-  ).filter((container) => container.state.Running);
-  if (pinned.length !== 1 || pinned[0].id !== candidate.id)
-    throw new Error("Retained exec primary changed during inspection.");
-  const mounts = pinned[0].mounts.filter(
-    (mount) => mount.Type === "bind" && sameWorkspacePath(mount.Source, repoPath)
-  );
-  if (mounts.length !== 1 || !mounts[0].Destination.startsWith("/"))
-    throw new Error("Retained exec requires one exact source mount.");
-  const uidBytes = Buffer.byteLength(workspace.uid);
-  const runner = uidBytes === 16 || uidBytes === 40 ? workspace.uid : workspace.id;
-  const runnerContainers = inspectProviderRunnerContainers(endpoint, runner);
-  if (runnerContainers.length !== 1 || runnerContainers[0] !== candidate.id)
-    throw new Error("Retained exec runner does not select the exact primary container.");
-  if (inspectManagedStopRunnerId(endpoint, candidate.id) !== runner || inspectManagedStopDaemon(endpoint) !== daemon)
-    throw new Error("Retained exec provider or Docker identity changed.");
-  return {
-    repoPath,
-    id: workspace.id,
-    uid: workspace.uid,
-    context: workspace.context,
-    providerName,
-    endpoint,
-    daemon,
-    containerId: candidate.id,
-    workspacePath: mounts[0].Destination
-  };
-}
-var import_node_fs34, import_node_os4, import_node_path41, import_node_util3;
-var init_devsy_exec_proof = __esm({
-  "src/core/devsy-exec-proof.ts"() {
-    "use strict";
-    import_node_fs34 = __toESM(require("fs"));
-    import_node_os4 = __toESM(require("os"));
-    import_node_path41 = __toESM(require("path"));
-    import_node_util3 = require("util");
-    init_devpod_environment();
-    init_devsy_workspaces();
-    init_workspace();
-  }
-});
-
 // src/core/reliability-model.ts
 function record4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -20862,7 +20939,7 @@ var init_version = __esm({
 
 // src/cli.ts
 var import_commander = require("commander");
-var CLI_VERSION = true ? "0.0.65" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.0.66" : "0.0.0-dev";
 var VERSION_FLAGS = /* @__PURE__ */ new Set(["-V", "--version"]);
 function withErrorHandling(action2) {
   return async (...args) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrouter/cli",
-  "version": "0.0.65",
+  "version": "0.0.66",
   "description": "Local dev routing CLI with shared Traefik reverse proxy",
   "author": "Roland Schlaefli",
   "homepage": "https://github.com/rschlaefli/devrouter#readme",

package/upgrade-prompts/0.0.66.md

@@ -0,0 +1,31 @@
+# Upgrade to devrouter 0.0.66
+
+This patch release completes managed stop when Devsy replaces a workspace
+registration UID after the workload is positively absent, releasing lifecycle
+journals stuck in `stopping` so a later `ensure` is admitted again.
+
+## Task
+
+Install the published release and update `.devrouter.yml` devrouter.version to
+0.0.66. No schema migration or configuration change is required. Do not change
+the committed configuration, delete registrations, containers, or source files,
+and do not reset lifecycle state manually: the recovery runs inside the existing
+canonical stop command under its normal locks and proofs.
+
+## Validation
+
+On a workspace whose stop was previously rejected with a retained provider
+identity error after a registration replacement, run the canonical
+`devrouter stop <path>` and confirm it reports the workspace stopped with the
+absence proof, then run `devrouter ensure <path>` and confirm admission
+succeeds. Confirm `devrouter status --json` shows the expected ready state and
+that no containers, volumes, or source files were removed beyond the normal
+stop contract. For workspaces that never hit the replacement case, confirm
+existing stop, ensure, and `devrouter doctor` behavior is unchanged.
+
+## Report
+
+Report the tested CLI version, the exact workspace path or synthetic fixture,
+the stop command result, the ensure result, route state after the run, and any
+diagnostic failure output verbatim. State explicitly whether the replacement
+case was exercised or only the unchanged retained path.