@devrouter/cli 0.5.3 → 0.5.5

package/dist/devrouter-lifecycle-worker.js

@@ -2752,7 +2752,7 @@ function assertManagedContainerConfigUnchanged(options) {
             cwd: workingDirectory,
             encoding: "utf-8",
             env,
-            input: rendered.stdout,
+            input: rendered.stdout.replaceAll("$$", "$"),
             stdio: ["pipe", "pipe", "ignore"],
             timeout: COMPOSE_HASH_TIMEOUT_MS,
             maxBuffer: 1024 * 1024
@@ -2924,12 +2924,10 @@ function buildHostRoutesDocument(routes, tlsEnabled) {
       }
     };
   }
-  const document = {
-    http: {
-      routers,
-      services
-    }
-  };
+  const document = {};
+  if (Object.keys(routers).length > 0) {
+    document.http = { routers, services };
+  }
   if (Object.keys(tcpRouters).length > 0) {
     document.tcp = { routers: tcpRouters, services: tcpServices };
   }
@@ -3065,7 +3063,11 @@ function parseCanonicalState(raw) {
     throw new Error(`Canonical host-route document is invalid: ${error.message}`);
   }
   const expectedDocument = buildHostRoutesDocument(routes, metadata.tlsEnabled);
-  if (!(0, import_node_util2.isDeepStrictEqual)(document, expectedDocument)) {
+  const matchesLegacyEmptyHttp = expectedDocument.http === void 0 && (0, import_node_util2.isDeepStrictEqual)(document, {
+    ...expectedDocument,
+    http: { routers: {}, services: {} }
+  });
+  if (!(0, import_node_util2.isDeepStrictEqual)(document, expectedDocument) && !matchesLegacyEmptyHttp) {
     throw new Error("Canonical host-route document does not match its metadata.");
   }
   return { kind: "canonical", metadata };
@@ -5397,7 +5399,7 @@ function retain(session, previous) {
 
 // src/core/reliability-operation-store.ts
 function installedCliVersion() {
-  return true ? "0.5.3" : "0.0.0-dev";
+  return true ? "0.5.5" : "0.0.0-dev";
 }
 function compareCliVersions(left, right) {
   const parts = (value) => value.split(".").map((part) => Number.parseInt(part, 10) || 0);
@@ -7407,7 +7409,7 @@ function loadRepoConfig(repoPath, read2 = (file) => import_node_fs19.default.rea
   const config = parseConfig(parsed ?? {}, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.5.3" : "0.0.0-dev";
+    const cliVersion = true ? "0.5.5" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver2(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(

package/dist/devrouter.js

@@ -2651,12 +2651,10 @@ function buildHostRoutesDocument(routes, tlsEnabled) {
       }
     };
   }
-  const document = {
-    http: {
-      routers,
-      services
-    }
-  };
+  const document = {};
+  if (Object.keys(routers).length > 0) {
+    document.http = { routers, services };
+  }
   if (Object.keys(tcpRouters).length > 0) {
     document.tcp = { routers: tcpRouters, services: tcpServices };
   }
@@ -2790,7 +2788,11 @@ function parseCanonicalState(raw) {
     throw new Error(`Canonical host-route document is invalid: ${error.message}`);
   }
   const expectedDocument = buildHostRoutesDocument(routes, metadata.tlsEnabled);
-  if (!(0, import_node_util2.isDeepStrictEqual)(document, expectedDocument)) {
+  const matchesLegacyEmptyHttp = expectedDocument.http === void 0 && (0, import_node_util2.isDeepStrictEqual)(document, {
+    ...expectedDocument,
+    http: { routers: {}, services: {} }
+  });
+  if (!(0, import_node_util2.isDeepStrictEqual)(document, expectedDocument) && !matchesLegacyEmptyHttp) {
     throw new Error("Canonical host-route document does not match its metadata.");
   }
   return { kind: "canonical", metadata };
@@ -4788,7 +4790,7 @@ function loadRepoConfig(repoPath, read2 = (file) => import_node_fs8.default.read
   const config = parseConfig(parsed ?? {}, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.5.3" : "0.0.0-dev";
+    const cliVersion = true ? "0.5.5" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(
@@ -6787,7 +6789,7 @@ var init_reliability_contract = __esm({
 
 // src/core/reliability-operation-store.ts
 function installedCliVersion() {
-  return true ? "0.5.3" : "0.0.0-dev";
+  return true ? "0.5.5" : "0.0.0-dev";
 }
 function compareCliVersions(left, right) {
   const parts = (value) => value.split(".").map((part) => Number.parseInt(part, 10) || 0);
@@ -11399,7 +11401,7 @@ function assertManagedContainerConfigUnchanged(options) {
             cwd: workingDirectory,
             encoding: "utf-8",
             env,
-            input: rendered.stdout,
+            input: rendered.stdout.replaceAll("$$", "$"),
             stdio: ["pipe", "pipe", "ignore"],
             timeout: COMPOSE_HASH_TIMEOUT_MS,
             maxBuffer: 1024 * 1024
@@ -24523,7 +24525,7 @@ function probeInstalledCliVersion(executable) {
 }
 function buildCliPathCheck(options = {}) {
   const id5 = "global.cli-path";
-  const runningVersion = options.runningVersion ?? (true ? "0.5.3" : "0.0.0-dev");
+  const runningVersion = options.runningVersion ?? (true ? "0.5.5" : "0.0.0-dev");
   if (runningVersion === "0.0.0-dev") {
     return {
       id: id5,
@@ -25419,7 +25421,7 @@ async function buildDoctorReport(options = {}) {
           suggestion: `Remedy ${expansionNotice.remedy.code}: set a named default profile other than '${expansionNotice.profile}'${remedyCandidates}.`
         });
       }
-      const cliVersion = true ? "0.5.3" : "0.0.0-dev";
+      const cliVersion = true ? "0.5.5" : "0.0.0-dev";
       const configVersion = config.devrouter?.version;
       const installedKnown = cliVersion !== "0.0.0-dev";
       const versionComparison = installedKnown && configVersion ? compareSemver(configVersion, cliVersion) : void 0;
@@ -34082,7 +34084,7 @@ var init_version = __esm({
 
 // src/cli.ts
 var import_commander = require("commander");
-var CLI_VERSION = true ? "0.5.3" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.5.5" : "0.0.0-dev";
 var VERSION_FLAGS = /* @__PURE__ */ new Set(["-V", "--version"]);
 function withErrorHandling(action2) {
   return async (...args) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrouter/cli",
-  "version": "0.5.3",
+  "version": "0.5.5",
   "description": "Local dev routing CLI with shared Traefik reverse proxy",
   "author": "Roland Schlaefli",
   "homepage": "https://github.com/rschlaefli/devrouter#readme",
@@ -24,7 +24,7 @@
   },
   "dependencies": {
     "commander": "^12.1.0",
-    "dockerode": "^4.0.9",
+    "dockerode": "^5.0.1",
     "jsonc-parser": "3.3.1",
     "yaml": "^2.5.1"
   },

package/upgrade-prompts/0.5.4.md

@@ -0,0 +1,29 @@
+# Upgrade to devrouter 0.5.4
+
+This patch release fixes false Compose identity drift when provider-generated
+entrypoints or configuration values contain literal dollar signs. Devrouter
+undoes Compose serialization escaping before hashing the resolved configuration,
+without another interpolation pass. There is no configuration schema migration.
+
+## Task
+
+Install the published 0.5.4 CLI. Remove any temporary local patch for the Compose
+dollar-escaping fix in PR #146 by replacing it with the published package.
+Bump a consumer's `devrouter.version` only when consumer source changes are
+authorized. No generated configuration or agent artifacts require changes.
+Preserve existing runtime ownership, containers, databases and dependency volumes.
+
+## Validation
+
+1. Run `devrouter -V` from the consumer checkout and confirm 0.5.4.
+2. Run `devrouter doctor --json` and inspect runtime ownership and readiness.
+3. Run `devrouter ensure .` with the intended profile and verify that an existing
+   app container is retained without a false Compose drift failure.
+4. Run an existing application smoke test. If stop/resume is tested, confirm
+   the same container and volumes are retained. Do not replay destructive
+   bootstrap hooks or bypass lifecycle ownership checks to test an upgrade.
+
+## Report
+
+Report the installed version, selected runtime, tested profile, container
+retention and functional results, and any remaining limitations.

package/upgrade-prompts/0.5.5.md

@@ -0,0 +1,35 @@
+# Upgrade to devrouter 0.5.5
+
+This patch release fixes TCP-only and empty host-route generations. Devrouter
+omits empty HTTP router/service maps so Traefik can load the file provider.
+Existing v1 route metadata remains readable; the next route write or refresh
+emits the corrected document. Other metadata/YAML mismatches still fail closed.
+It also updates Dockerode to 5 to remove the UUID 10 dependency affected by
+CVE-2026-41907. The existing Node >=24 requirement remains unchanged. There is
+no configuration schema migration.
+
+## Task
+
+Install the published 0.5.5 CLI. Replace any temporary local patch for the
+TCP-only rendering fix in PR #148 with the published package. Bump a consumer's
+`devrouter.version` only when consumer source changes are authorized. No
+generated configuration or agent artifacts require changes. Preserve existing
+runtime ownership, containers, databases and dependency volumes.
+
+## Validation
+
+1. Run `devrouter -V` from the consumer checkout and confirm 0.5.5.
+2. Run `devrouter doctor --json` and inspect runtime ownership and readiness.
+   Verify a fresh installation resolves Dockerode 5 without UUID 10.
+3. If the repository defines a TCP-only profile, run `devrouter ensure .` with
+   that profile. Verify route publication succeeds and the expected TCP router
+   is loaded. Test a client connection with the required TLS/SNI settings; for
+   PostgreSQL direct TLS, retain ALPN `postgresql`.
+4. Restore the intended application profile and run an existing application
+   smoke test. Confirm the same app container and volumes are retained. Do not
+   replay destructive bootstrap hooks or bypass lifecycle ownership checks.
+
+## Report
+
+Report the installed version, selected runtime and profiles, TCP/client and
+application results, container/volume retention, and remaining limitations.