@devrouter/cli 0.0.80 → 0.1.0

package/dist/devrouter-lifecycle-worker.js

@@ -5347,7 +5347,7 @@ function retain(session, previous) {
 
 // src/core/reliability-operation-store.ts
 function installedCliVersion() {
-  return true ? "0.0.80" : "0.0.0-dev";
+  return true ? "0.1.0" : "0.0.0-dev";
 }
 function compareCliVersions(left, right) {
   const parts = (value) => value.split(".").map((part) => Number.parseInt(part, 10) || 0);
@@ -7163,7 +7163,7 @@ function loadRepoConfig(repoPath, read2 = (file) => import_node_fs18.default.rea
   const config = parseConfig(parsed ?? {}, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.0.80" : "0.0.0-dev";
+    const cliVersion = true ? "0.1.0" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver2(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(

package/dist/devrouter.js

@@ -4275,7 +4275,7 @@ function loadRepoConfig(repoPath, read2 = (file) => import_node_fs7.default.read
   const config = parseConfig(parsed ?? {}, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.0.80" : "0.0.0-dev";
+    const cliVersion = true ? "0.1.0" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(
@@ -6259,7 +6259,7 @@ var init_reliability_contract = __esm({
 
 // src/core/reliability-operation-store.ts
 function installedCliVersion() {
-  return true ? "0.0.80" : "0.0.0-dev";
+  return true ? "0.1.0" : "0.0.0-dev";
 }
 function compareCliVersions(left, right) {
   const parts = (value) => value.split(".").map((part) => Number.parseInt(part, 10) || 0);
@@ -21117,7 +21117,7 @@ Run several worktrees of one repo in parallel without host/route collisions. A *
 
 A managed consumer can gate agent tool calls so a command never starts while the
 checkout's environment is mid-transition. Wire \`devrouter harness gate\` as a
-Claude Code \`PreToolUse\` hook:
+\`PreToolUse\` hook. Claude Code reads it from a settings file:
 
     {
       "hooks": {
@@ -21129,7 +21129,26 @@ Claude Code \`PreToolUse\` hook:
       }
     }
 
-The hook reads the harness payload on stdin, defers inside the hook process while
+The Codex CLI reads the same hook from \`$CODEX_HOME/hooks.json\`, where the shell
+tool is named \`exec_command\`:
+
+    {
+      "hooks": {
+        "PreToolUse": [
+          { "matcher": "exec_command|Bash|shell", "hooks": [
+            { "type": "command", "command": "devrouter harness gate", "timeout": 180 }
+          ] }
+        ]
+      }
+    }
+
+The gate identifies the requesting harness from its payload and answers in that
+harness's accepted shape: a refusal is a \`deny\` in both, while an allowed call is
+\`permissionDecision: allow\` for Claude Code and Codex receives a bare completion
+carrying the same guidance as \`additionalContext\`, because Codex rejects an
+\`allow\` decision as unsupported hook output.
+
+
 the checkout's durable phase is \`queued\`, \`starting\`, \`verifying\`, \`recovering\`
 or \`stopping\`, and prints the harness permission decision. The deferral consumes
 no model turns because the harness is blocked on the hook. \`--wait-budget-ms\`
@@ -21141,7 +21160,7 @@ the wait budget: an overrunning hook is not honored, and the tool proceeds under
 the harness's normal permission rules. Use \`--json\` for the devrouter decision
 envelope with wait metrics.
 
-+Gated calls are keyed by the harness \`tool_use_id\` and recorded durably. If the
+Gated calls are keyed by the harness \`tool_use_id\` and recorded durably. If the
 harness re-delivers a call it already granted or cancelled, the gate returns one
 refusal naming the earlier decision instead of waiting again, because that call
 may already have run; the agent should verify it and issue a new call. Entries
@@ -21354,7 +21373,7 @@ function buildOnboardingPrompt(options = {}) {
     `- When a workspace is active: hosts auto-namespace (\`web.localhost\` \u2192 \`web.<ws>.localhost\`), \`${WORKSPACE_PLACEHOLDER}\` in \`upstream\` is substituted with the token, and the docker \`router\` key is suffixed per workspace. Managed ensure rejects every HTTP/TCP upstream outside that exact alias namespace before mutation. The runtime config is computed in memory only \u2014 the committed \`.devrouter.yml\` is never rewritten.`,
     "- TLS: namespaced hosts (`web.<ws>.localhost`) are not covered by the `*.localhost` wildcard; devrouter auto-extends the mkcert cert SANs for active hosts when TLS is enabled.",
     "- Lifecycle: after one-time setup, use `devrouter ensure .` for both primary and linked checkouts; never branch on checkout kind or use live verify as startup. Managed consumer images contain no devrouter package/helper: ensure delivers its matching helper at runtime and invokes an exact captured snapshot of the repository-owned post-start adapter. Keep `.devrouter.yml` as the only consumer-side version pin. Use `devrouter stop .` for a non-destructive pause, `devrouter stop . --delete` only for explicit exact-owner cleanup without removing the checkout, and `devrouter exec . -- <command...>` for container commands. Never substitute raw DevPod/Devsy mutations; they bypass the machine-global ownership lock, which serializes provider mutations in a fair arrival-order queue and lets contenders wait up to thirty minutes with throttled stderr progress before failing with the queue position or holder PID and true durations. `workspace up` creates linked worktrees; destructive worktree removal and GC remain ledger-scoped.",
-    "- Managed agent harnesses can defer tool calls through `devrouter harness gate` wired as a Claude Code `PreToolUse` hook: it waits inside the hook process while the checkout's durable phase is queued, starting, verifying, recovering or stopping (no model turns), allows the tool once the phase settles, and refuses once with recovery guidance when `--wait-budget-ms` (default 30000) runs out. It also records the gated call by harness tool-use id, so a call re-delivered after a granted or cancelled wait returns one refusal instead of repeating a command that may already have run. Lifecycle commands pass through, unreadable journal evidence is allowed rather than blocking the agent, and the hook timeout must exceed the wait budget.",
+    "- Managed agent harnesses can defer tool calls through `devrouter harness gate` wired as a `PreToolUse` hook (Claude Code settings, or `$CODEX_HOME/hooks.json` for the Codex CLI with the `exec_command` shell tool): it waits inside the hook process while the checkout's durable phase is queued, starting, verifying, recovering or stopping (no model turns), allows the tool once the phase settles, and refuses once with recovery guidance when `--wait-budget-ms` (default 30000) runs out. It identifies the requesting harness from its payload and answers in that harness's accepted shape, because Codex rejects an `allow` decision. It also records the gated call by harness tool-use id, so a call re-delivered after a granted or cancelled wait returns one refusal instead of repeating a command that may already have run. Lifecycle commands pass through, unreadable journal evidence is allowed rather than blocking the agent, and the hook timeout must exceed the wait budget.",
     "- After a drained interrupted ensure, manual exec can use an exactly proven retained Devsy runtime with the plain local Docker command. Revalidate identity for each tooling command until later preparation reconciles startup; preserve configuration, data and interrupted history. This does not repair absent stop baselines or provide OOM protection.",
     "- Busy ensure and exec wait up to thirty minutes for a positively identified active lifecycle worker on the same checkout, with stderr progress. Do not stop healthy work to make room. Commands stay serial; timeout or cancellation before admission leaves prior work untouched. A lifecycle fence change cancels admission, and uncertain execution is never replayed.",
     "- Ensure reconciles interrupted or never-dispatched ensure after positive worker drainage. Unknown arbitrary exec never replays; use explicit stop to reconcile that uncertainty. Preserve journals and generated configuration if evidence is unavailable. This does not detect or prevent OOM; bounded automatic recovery runs only when the operator enables the capacity recovery policy.",
@@ -23174,7 +23193,7 @@ function probeInstalledCliVersion(executable) {
 }
 function buildCliPathCheck(options = {}) {
   const id5 = "global.cli-path";
-  const runningVersion = options.runningVersion ?? (true ? "0.0.80" : "0.0.0-dev");
+  const runningVersion = options.runningVersion ?? (true ? "0.1.0" : "0.0.0-dev");
   if (runningVersion === "0.0.0-dev") {
     return {
       id: id5,
@@ -24022,7 +24041,7 @@ async function buildDoctorReport(options = {}) {
           suggestion: `Remedy ${expansionNotice.remedy.code}: set a named default profile other than '${expansionNotice.profile}'${remedyCandidates}.`
         });
       }
-      const cliVersion = true ? "0.0.80" : "0.0.0-dev";
+      const cliVersion = true ? "0.1.0" : "0.0.0-dev";
       const configVersion = config.devrouter?.version;
       const installedKnown = cliVersion !== "0.0.0-dev";
       const versionComparison = installedKnown && configVersion ? compareSemver(configVersion, cliVersion) : void 0;
@@ -25128,8 +25147,13 @@ var init_harness_gate = __esm({
 // src/commands/harness.ts
 var harness_exports = {};
 __export(harness_exports, {
+  detectHarnessHook: () => detectHarnessHook,
   runHarnessCommand: () => runHarnessCommand
 });
+function detectHarnessHook(payload) {
+  const turnId = payload.turn_id;
+  return typeof turnId === "string" && turnId.length > 0 ? "codex" : "claude";
+}
 function readStdin() {
   if (process.stdin.isTTY) {
     return Promise.resolve("");
@@ -25181,11 +25205,28 @@ function permitReason(decision) {
       return "devrouter: environment settled.";
   }
 }
-function hookOutput(decision) {
+function hookOutput(decision, kind) {
+  if (decision.decision === "refuse") {
+    return JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: "PreToolUse",
+        permissionDecision: "deny",
+        permissionDecisionReason: permitReason(decision)
+      }
+    });
+  }
+  if (kind === "codex") {
+    return JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: "PreToolUse",
+        additionalContext: permitReason(decision)
+      }
+    });
+  }
   return JSON.stringify({
     hookSpecificOutput: {
       hookEventName: "PreToolUse",
-      permissionDecision: decision.decision === "refuse" ? "deny" : "allow",
+      permissionDecision: "allow",
       permissionDecisionReason: permitReason(decision)
     }
   });
@@ -25209,6 +25250,7 @@ async function runHarnessCommand(method, options, repoPath, dependencies = {}) {
 `));
   const observe = dependencies.observe ?? readHarnessGateObservation;
   const raw = await (dependencies.stdin ?? readStdin)();
+  let kind = "claude";
   let payload;
   try {
     const parsed = JSON.parse(raw);
@@ -25218,28 +25260,35 @@ async function runHarnessCommand(method, options, repoPath, dependencies = {}) {
   }
   if (!payload) {
     const decision2 = gateDecision("allow", "hook-payload-invalid");
-    process.stdout.write(json ? `${JSON.stringify(decision2)}
-` : `${hookOutput(decision2)}
-`);
+    process.stdout.write(
+      json ? `${JSON.stringify(decision2)}
+` : `${hookOutput(decision2, kind)}
+`
+    );
     return;
   }
+  kind = detectHarnessHook(payload);
   const toolName = typeof payload.tool_name === "string" ? payload.tool_name : "";
   const toolInput = isRecord7(payload.tool_input) ? payload.tool_input : {};
   const command = typeof toolInput.command === "string" ? toolInput.command : "";
   if (toolName === "Bash" && DEVROUTER_COMMAND_RE.test(command)) {
     const decision2 = gateDecision("allow", "devrouter-command");
-    process.stdout.write(json ? `${JSON.stringify(decision2)}
-` : `${hookOutput(decision2)}
-`);
+    process.stdout.write(
+      json ? `${JSON.stringify(decision2)}
+` : `${hookOutput(decision2, kind)}
+`
+    );
     return;
   }
   const sessionCwd = repoPath ?? (typeof payload.cwd === "string" && payload.cwd.length > 0 ? payload.cwd : void 0);
   const repoRoot = sessionCwd ? findHarnessGateRepoRoot(sessionCwd) : void 0;
   if (!repoRoot) {
     const decision2 = gateDecision("allow", "unmanaged-checkout");
-    process.stdout.write(json ? `${JSON.stringify(decision2)}
-` : `${hookOutput(decision2)}
-`);
+    process.stdout.write(
+      json ? `${JSON.stringify(decision2)}
+` : `${hookOutput(decision2, kind)}
+`
+    );
     return;
   }
   const budgetMs = parseHarnessGateBudget(options.waitBudgetMs);
@@ -25290,7 +25339,7 @@ async function runHarnessCommand(method, options, repoPath, dependencies = {}) {
       };
       process.stdout.write(
         json ? `${JSON.stringify({ ...decision2, checkout: repoRoot })}
-` : `${hookOutput(decision2)}
+` : `${hookOutput(decision2, kind)}
 `
       );
       return;
@@ -25348,7 +25397,7 @@ async function runHarnessCommand(method, options, repoPath, dependencies = {}) {
   }
   process.stdout.write(
     json ? `${JSON.stringify({ ...decision, checkout: repoRoot })}
-` : `${hookOutput(decision)}
+` : `${hookOutput(decision, kind)}
 `
   );
 }
@@ -29972,7 +30021,7 @@ var init_version = __esm({
 
 // src/cli.ts
 var import_commander = require("commander");
-var CLI_VERSION = true ? "0.0.80" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.1.0" : "0.0.0-dev";
 var VERSION_FLAGS = /* @__PURE__ */ new Set(["-V", "--version"]);
 function withErrorHandling(action2) {
   return async (...args) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrouter/cli",
-  "version": "0.0.80",
+  "version": "0.1.0",
   "description": "Local dev routing CLI with shared Traefik reverse proxy",
   "author": "Roland Schlaefli",
   "homepage": "https://github.com/rschlaefli/devrouter#readme",
@@ -52,6 +52,8 @@
     "qualify:controller": "node --import tsx scripts/qualify-controller.ts",
     "qualify:stop-drift": "node --import tsx scripts/qualify-config-drift-stop.ts",
     "qualify:harness-journey": "./scripts/qualify-harness-journey.sh",
+    "qualify:codex-journey": "DR_JOURNEY_HARNESS=codex ./scripts/qualify-harness-journey.sh",
+    "qualify:non-node": "./scripts/qualify-non-node-consumer.sh",
     "test:process": "bash scripts/test-devrouter-process.sh",
     "check": "biome check .",
     "check:fix": "biome check --write .",

package/upgrade-prompts/0.1.0.md

@@ -0,0 +1,69 @@
+# Upgrade to devrouter 0.1.0
+
+This release is the first stable cut of the reliability program. The managed
+lifecycle is now driven by durable intent instead of a live CLI process, capacity
+admission refuses instead of guessing when its evidence is incomplete, and the
+agent harness gate serves Claude Code and the Codex CLI in the shape each of them
+accepts.
+
+## What changed for a consumer
+
+- A managed `stop` whose physical cessation is proven against a positively
+  absent capacity ledger now completes instead of staying in `stopping`
+  forever. An intact ledger keeps today's settlement and revision fencing, and
+  every other ledger classification still refuses.
+- `devrouter capacity reconcile --yes [--json]` is the explicit forward
+  recovery for a provably absent ledger. It refuses without `--yes`, while any
+  journal binding remains, and when a declared runtime domain cannot be observed.
+- `devrouter doctor` reports `global.cli-path` when another `devrouter` on
+  PATH is newer than the running CLI or when the shell resolves a different
+  install. Keep one install authoritative before trusting lifecycle state.
+- `devrouter harness gate` defers one agent tool call while the checkout's
+  durable phase is `queued`, `starting`, `verifying`, `recovering` or
+  `stopping`, waits inside the hook process with no model turns, and refuses
+  once with recovery guidance when the budget runs out. It identifies the
+  requesting harness from its payload: Claude Code receives
+  `permissionDecision: allow`, the Codex CLI receives the same guidance as
+  `additionalContext` because it reports an `allow` decision as unsupported
+  hook output. A re-delivered call returns one refusal that names the earlier
+  decision instead of repeating a command that may already have run.
+- A fixed host-port conflict whose holder is the shared `devrouter-traefik`
+  router names the consumer's own published binding as the side to change instead
+  of telling the agent to stop the router.
+- Managed `ensure` accepts a devnet upstream served by any Compose project owned
+  by the exact worktree, while a container owned by a different worktree or by a
+  shared project outside the checkout is still refused.
+
+## Task
+
+Use the published 0.1.0 CLI. Update the repository `devrouter.version` metadata
+only when consumer source changes are authorized, and refresh generated agent
+guidance only with its owner's authority. No schema, command, flag, environment
+or journal migration is needed, and the upgrade rewrites no runtime state.
+
+Two operating notes matter for scripts and agents:
+
+- `ensure` and `stop` write bounded progress lines to stderr. Parse JSON from
+  stdout only; do not merge the streams before parsing.
+- Capacity admission, parking consent and automatic recovery stay inert unless an
+  operator enables them. Nothing in this release starts, stops or parks a
+  consumer environment on its own.
+
+## Validation
+
+Verify the resolved executable and installed version, then run `devrouter
+doctor` and confirm `global.cli-path` reports one authoritative install and no
+newer shadow copy. For an authorized managed checkout, run `devrouter status`
+and confirm the reported intent, phase, capacity state and attention reason agree
+with the runtime you observe. Require each lifecycle operation's own terminal
+evidence: a status block or a progress line is not stop or ensure success. When
+the gate is wired, prove it once in the harness you use by gating a harmless
+command against a settled checkout.
+
+## Report
+
+Report the release revision, the executable and installed version, the
+CLI-path diagnostics, the status block for any affected checkout, and the
+terminal result of any authorized lifecycle operation. Keep source and package
+validation separate from consumer readiness or recovery, and record unknown
+ownership or surviving resources as unresolved rather than as recovered.