@devrouter/cli 0.5.5 → 0.5.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrouter/cli",
-  "version": "0.5.5",
+  "version": "0.5.6",
   "description": "Local dev routing CLI with shared Traefik reverse proxy",
   "author": "Roland Schlaefli",
   "homepage": "https://github.com/rschlaefli/devrouter#readme",
@@ -60,6 +60,7 @@
     "qualify:cohorts": "node --import tsx scripts/qualify-lifecycle-cohorts.ts",
     "qualify:preparation": "node --import tsx scripts/qualify-process-preparation.ts",
     "qualify:profiles": "node --import tsx scripts/qualify-profile-alternation.ts",
+    "qualify:runtime-inputs": "node --import tsx scripts/qualify-runtime-inputs.ts",
     "qualify:host-suspend": "node --import tsx scripts/qualify-host-suspend.ts",
     "test:process": "bash scripts/test-devrouter-process.sh",
     "test:skills": "bash tests/worktree-reclaim/run-corpus.sh && bash tests/worktree-reclaim/test-reclaim.sh && bash tests/worktree-reclaim/test-manifest.sh",

package/upgrade-prompts/0.5.6.md

@@ -0,0 +1,73 @@
+# Upgrade to devrouter 0.5.6
+
+This release extends managed startup with declared runtime variants and discovers
+Docker-published loopback ports for host tools. It also strengthens suspend
+qualification evidence and adds explicit stop recovery for externally replaced
+Devsy containers.
+
+- `managedRuntime.variants` declares additional startup selectors.
+  `devrouter ensure . --variant <name>` passes the selected name to the managed
+  adapter as `DEVROUTER_RUNTIME_VARIANT` and includes it in owned-process identity.
+  Profiles continue selecting resources. Omission selects `default`; `--repair`
+  retains the recorded variant. Non-default variants support manual lifecycles
+  and are refused before capacity admission effects.
+- `managedRuntime.devcontainer.hostPorts` maps safe names to registered service
+  names and TCP targets. Consumer Compose publishes each target with
+  `host_ip: 127.0.0.1` and no fixed published port. Docker allocates the number;
+  Devrouter proves the exact live owner before injecting
+  `DEVROUTER_HOST_PORT_<KEY>` and reporting the endpoint through `devrouter env`.
+  A selected unavailable binding blocks launch; an inactive adapter value is
+  empty. Container clients continue using service DNS and the target port.
+- Port mappings affect process reuse and may change after recreation. State
+  retains a declaration digest, never an allocated port lease. After declaration
+  drift, export remains unavailable until successful ensure. A failed transition
+  refuses prior-process relaunch and stays degraded; restore retained declarations
+  before repair.
+- `stop --repair` explicitly re-proves a replaced Devsy population before stopping
+  it. It preserves volumes, requires unchanged identity and configuration, and
+  cannot combine with `--delete`. Ordinary stop does not relax ownership checks.
+- Host-suspend qualification no longer treats scheduled wake requests as completed
+  wake evidence. Existing qualification receipts do not establish acceptance for
+  the corrected verifier; real suspend testing requires separate authorization.
+
+## Task
+
+Install the published 0.5.6 CLI. Existing configurations retain their default
+behavior; there is no mandatory schema migration. Bump a consumer's
+`devrouter.version` only when consumer source changes are authorized. If it carries
+a generated devrouter skill or AGENTS section, refresh that artifact through
+`devrouter repo agents` within the same authorized consumer change.
+
+Adopt variants or host-port declarations only when the consumer adaptation is
+requested. A variant replaces selector signaling; repositories still own commands,
+build plans and build-generation identity. Do not remove other marker artifacts
+merely because a selector exists. For port discovery, update Compose and the
+adapter together, and read current values after startup. Do not interpolate an
+allocated number into the Compose model that creates it.
+
+Preserve runtime ownership, containers, databases and dependency volumes. Do not
+recreate or delete a runtime to make this upgrade pass. Stop repair and real host
+suspend remain separately authorized actions.
+
+## Validation
+
+1. Run `devrouter -V` from the consumer checkout and confirm installed 0.5.6.
+   Inspect `devrouter upgrade 0.5.6` and existing static devcontainer verification.
+2. For an authorized variant adaptation, ensure the intended profile with default,
+   the declared variant, then default again. Verify the reported variant, owned
+   process replacement, repeat-ensure reuse and unchanged container identity.
+   Keep build-generation identity in the consumer's process fingerprint.
+3. For authorized host-port adoption, use two synthetic concurrent checkouts.
+   Confirm distinct current loopback endpoints with `devrouter env . --json`,
+   connect host clients, and verify adapter injection. Check the container client
+   separately using service DNS and target. An unavailable selected binding must
+   prevent adapter or host-command launch.
+4. Run the consumer's existing application smoke check. Stop every runtime touched
+   by these checks through its exact checkout path and verify provider stopped
+   plus zero exact routes, unless an explicit keep-running lease applies.
+
+## Report
+
+Report installed version and executable, consumer changes, selected profile and
+variant, endpoint and process-reuse results, retained container/volume identity,
+exact stop proof, and any skipped checks or unresolved recovery boundary.