@devrouter/cli 0.5.5 → 0.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrouter/cli",
-  "version": "0.5.5",
+  "version": "0.6.0",
   "description": "Local dev routing CLI with shared Traefik reverse proxy",
   "author": "Roland Schlaefli",
   "homepage": "https://github.com/rschlaefli/devrouter#readme",
@@ -12,12 +12,17 @@
   "files": [
     "bin",
     "dist",
-    "upgrade-prompts"
+    "upgrade-prompts",
+    "assets/preview"
   ],
   "type": "commonjs",
   "engines": {
     "node": ">=24"
   },
+  "exports": {
+    "./preview/gitlab-ingress": "./dist/devrouter-preview-gitlab-ingress.js",
+    "./*": "./*"
+  },
   "bin": {
     "devrouter": "dist/devrouter.js",
     "devrouter-process": "bin/devrouter-process"
@@ -47,6 +52,9 @@
     "dev": "tsx src/cli.ts",
     "test": "vitest run && pnpm test:process",
     "test:package": "./scripts/package-smoke.sh",
+    "qualify:preview-northflank": "node --import tsx scripts/qualify-preview-northflank.ts",
+    "qualify:preview-forge": "node --import tsx scripts/qualify-preview-forge.ts",
+    "qualify:preview-control": "node --import tsx scripts/qualify-preview-control.ts",
     "qualify:lifecycle": "node --import tsx scripts/qualify-lifecycle.ts",
     "qualify:capacity": "node --import tsx scripts/qualify-capacity.ts",
     "qualify:controller": "node --import tsx scripts/qualify-controller.ts",
@@ -60,6 +68,7 @@
     "qualify:cohorts": "node --import tsx scripts/qualify-lifecycle-cohorts.ts",
     "qualify:preparation": "node --import tsx scripts/qualify-process-preparation.ts",
     "qualify:profiles": "node --import tsx scripts/qualify-profile-alternation.ts",
+    "qualify:runtime-inputs": "node --import tsx scripts/qualify-runtime-inputs.ts",
     "qualify:host-suspend": "node --import tsx scripts/qualify-host-suspend.ts",
     "test:process": "bash scripts/test-devrouter-process.sh",
     "test:skills": "bash tests/worktree-reclaim/run-corpus.sh && bash tests/worktree-reclaim/test-reclaim.sh && bash tests/worktree-reclaim/test-manifest.sh",

package/upgrade-prompts/0.5.6.md

@@ -0,0 +1,73 @@
+# Upgrade to devrouter 0.5.6
+
+This release extends managed startup with declared runtime variants and discovers
+Docker-published loopback ports for host tools. It also strengthens suspend
+qualification evidence and adds explicit stop recovery for externally replaced
+Devsy containers.
+
+- `managedRuntime.variants` declares additional startup selectors.
+  `devrouter ensure . --variant <name>` passes the selected name to the managed
+  adapter as `DEVROUTER_RUNTIME_VARIANT` and includes it in owned-process identity.
+  Profiles continue selecting resources. Omission selects `default`; `--repair`
+  retains the recorded variant. Non-default variants support manual lifecycles
+  and are refused before capacity admission effects.
+- `managedRuntime.devcontainer.hostPorts` maps safe names to registered service
+  names and TCP targets. Consumer Compose publishes each target with
+  `host_ip: 127.0.0.1` and no fixed published port. Docker allocates the number;
+  Devrouter proves the exact live owner before injecting
+  `DEVROUTER_HOST_PORT_<KEY>` and reporting the endpoint through `devrouter env`.
+  A selected unavailable binding blocks launch; an inactive adapter value is
+  empty. Container clients continue using service DNS and the target port.
+- Port mappings affect process reuse and may change after recreation. State
+  retains a declaration digest, never an allocated port lease. After declaration
+  drift, export remains unavailable until successful ensure. A failed transition
+  refuses prior-process relaunch and stays degraded; restore retained declarations
+  before repair.
+- `stop --repair` explicitly re-proves a replaced Devsy population before stopping
+  it. It preserves volumes, requires unchanged identity and configuration, and
+  cannot combine with `--delete`. Ordinary stop does not relax ownership checks.
+- Host-suspend qualification no longer treats scheduled wake requests as completed
+  wake evidence. Existing qualification receipts do not establish acceptance for
+  the corrected verifier; real suspend testing requires separate authorization.
+
+## Task
+
+Install the published 0.5.6 CLI. Existing configurations retain their default
+behavior; there is no mandatory schema migration. Bump a consumer's
+`devrouter.version` only when consumer source changes are authorized. If it carries
+a generated devrouter skill or AGENTS section, refresh that artifact through
+`devrouter repo agents` within the same authorized consumer change.
+
+Adopt variants or host-port declarations only when the consumer adaptation is
+requested. A variant replaces selector signaling; repositories still own commands,
+build plans and build-generation identity. Do not remove other marker artifacts
+merely because a selector exists. For port discovery, update Compose and the
+adapter together, and read current values after startup. Do not interpolate an
+allocated number into the Compose model that creates it.
+
+Preserve runtime ownership, containers, databases and dependency volumes. Do not
+recreate or delete a runtime to make this upgrade pass. Stop repair and real host
+suspend remain separately authorized actions.
+
+## Validation
+
+1. Run `devrouter -V` from the consumer checkout and confirm installed 0.5.6.
+   Inspect `devrouter upgrade 0.5.6` and existing static devcontainer verification.
+2. For an authorized variant adaptation, ensure the intended profile with default,
+   the declared variant, then default again. Verify the reported variant, owned
+   process replacement, repeat-ensure reuse and unchanged container identity.
+   Keep build-generation identity in the consumer's process fingerprint.
+3. For authorized host-port adoption, use two synthetic concurrent checkouts.
+   Confirm distinct current loopback endpoints with `devrouter env . --json`,
+   connect host clients, and verify adapter injection. Check the container client
+   separately using service DNS and target. An unavailable selected binding must
+   prevent adapter or host-command launch.
+4. Run the consumer's existing application smoke check. Stop every runtime touched
+   by these checks through its exact checkout path and verify provider stopped
+   plus zero exact routes, unless an explicit keep-running lease applies.
+
+## Report
+
+Report installed version and executable, consumer changes, selected profile and
+variant, endpoint and process-reuse results, retained container/volume identity,
+exact stop proof, and any skipped checks or unresolved recovery boundary.

package/upgrade-prompts/0.6.0.md

@@ -0,0 +1,57 @@
+# Upgrade to devrouter 0.6.0
+
+This release adds experimental, opt-in remote preview planning and installed
+controller integrations for GitHub and GitLab, with Northflank as the first
+provider. It also invalidates controller authority across short host sleeps.
+Local routing and profile configuration retain their existing behavior.
+
+## Task
+
+Install the published 0.6.0 CLI and inspect `devrouter upgrade 0.6.0`.
+There is no mandatory consumer schema migration. Bump `devrouter.version` only
+within an authorized consumer adaptation, and refresh generated agent guidance
+with `devrouter repo agents` when that repository carries it.
+
+Remote preview adoption is separate from a CLI upgrade. `.devrouter.yml` retains
+local routing and profile membership; `.devrouter.preview.yml` declares remote
+resource bindings. Read `docs/PREVIEWS.md` in the release source before adopting
+previews. Use `preview init` without `--write` to inspect a scaffold, or
+`preview plan --list --json` and `preview plan --alias <name> --json` when a
+reviewed manifest already exists. Offline planning requires no cloud credentials
+or application runtime and does not authorize deployment.
+
+Installed integrations require reviewed private policy, durable state, scoped
+credentials and installation-specific qualification. GitHub integration generation
+requires full immutable commit SHAs for both controller and policy references;
+use the release commit SHA for the controller. GitLab callers pin the controller
+commit and a controller image digest containing the reviewed policy. Before
+creating or exposing a trigger, set the controller project's pipeline-variable
+minimum role to `no_one_allowed` and verify it with
+`preview doctor --live --installation <file>`. Installing this npm package alone
+does not install a PR-comment workflow or qualify native infrastructure.
+Keep admission disabled until each required native proof and acceptance check
+passes. Provider output commands must be bounded, read-only and idempotent;
+client timeout does not terminate the remote command.
+
+## Validation
+
+1. Run `devrouter -V` in the consumer checkout and confirm installed 0.6.0.
+   Inspect the adaptation prompt and run existing static configuration checks.
+2. If preview adoption is authorized and a reviewed manifest exists, run offline
+   alias listing and planning. Account for every selected profile member and
+   intentional omission; an incomplete or unbound plan cannot authorize effects.
+3. For separately authorized controller activation, verify forge-specific
+   controller and policy pins, scoped credentials, durable state and every native
+   admission proof before allocation. Source tests and a successful offline plan
+   establish neither cloud readiness nor viewer access.
+4. Use the consumer's focused checks for any actual source adaptation. This
+   metadata upgrade and offline planning do not require an application runtime.
+   If an authorized live check touches a runtime, stop its exact checkout and
+   verify provider stopped plus zero owned routes unless explicitly kept running.
+
+## Report
+
+Report installed version and executable, consumer changes, offline plan results,
+controller and policy pins when applicable, qualification still pending, and the
+outcome of any separately authorized live checks. Distinguish CLI publication,
+installation activation and working application acceptance.