@devrouter/cli 0.6.2 → 0.6.3

package/dist/devrouter-lifecycle-worker.js

@@ -5589,7 +5589,7 @@ function retain(session, previous) {
 
 // src/core/reliability-operation-store.ts
 function installedCliVersion() {
-  return true ? "0.6.2" : "0.0.0-dev";
+  return true ? "0.6.3" : "0.0.0-dev";
 }
 function compareCliVersions(left, right) {
   const parts = (value) => value.split(".").map((part) => Number.parseInt(part, 10) || 0);
@@ -7772,7 +7772,7 @@ function loadRepoConfig(repoPath, read2 = (file) => import_node_fs19.default.rea
   const config = parseRepoConfigSource(raw, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.6.2" : "0.0.0-dev";
+    const cliVersion = true ? "0.6.3" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver2(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(
@@ -11776,9 +11776,9 @@ function createFreshBootstrap(options) {
   return {
     prepare(providerId, network) {
       assertFreshBootstrapRequest(options.identity, { initializeNew: true });
-      if (requireReadyDevsyAgent().version !== "1.19.0")
+      if (!["1.19.0", "1.24.0"].includes(requireReadyDevsyAgent().version))
         throw new Error(
-          "Fresh bootstrap is qualified for Devsy 1.19.0; ordinary startup is unchanged."
+          "Fresh bootstrap is qualified for Devsy 1.19.0 or 1.24.0; ordinary startup is unchanged."
         );
       const declaration = loadRepoConfig(repoPath).managedRuntime?.devcontainer.freshBootstrap;
       if (!declaration) throw new Error("Fresh-bootstrap declaration disappeared.");
@@ -14105,7 +14105,11 @@ function reliabilityRecovery(reason2, repoPath, variant) {
   switch (reason2) {
     case "stop-incomplete":
     case "operation-unknown":
-      return [`Run: devrouter stop ${checkout}`, `Run: devrouter ensure ${checkout} --repair`];
+      return [
+        `Run: devrouter stop ${checkout}`,
+        "Verify the repository startup hooks preserve retained data and startup is authorized before continuing.",
+        `Run: devrouter ensure ${checkout}${variantOption}`
+      ];
     case "start-refused":
       return [
         `Run: devrouter doctor --repo ${checkout} to read the refused fixed host-port claim and its holder`,
@@ -16319,6 +16323,8 @@ function recoverUnattachedNetworkReservation(repoPath, managedRuntime) {
 var DEVCONTAINER_OVERLAY = "docker-compose.devrouter.yml";
 var DEFAULT_READINESS_TIMEOUT_MS = 12e4;
 var POLL_INTERVAL_MS = 1e3;
+var WorkspaceEnsureRefusalError = class extends Error {
+};
 function assertOverlay(container, repoPath) {
   const workingDir = container.labels["com.docker.compose.project.working_dir"];
   if (!workingDir || !sameWorkspacePath(workingDir, import_node_path42.default.join(repoPath, ".devcontainer"))) {
@@ -18016,6 +18022,17 @@ async function workspaceEnsure(requestedRepoPath, options = {}) {
   return withLifecycleOperationLock(repoPath, async () => {
     preflightRuntimeVariant(repoPath, options);
     const preparationConfig = loadRepoConfig(repoPath);
+    if (options.repair) {
+      const workspace2 = linked ? readPersistedWorkspace(repoPath) : void 0;
+      if (linked && !workspace2) throw new Error("Repair requires an existing workspace identity.");
+      const retained2 = readManagedRuntimeState(repoPath, workspace2);
+      if (retained2?.status !== "degraded") {
+        const checkout = `'${repoPath.replaceAll("'", "'\\''")}'`;
+        throw new WorkspaceEnsureRefusalError(
+          `Repair requires a persisted degraded managed runtime. Inspect this checkout with: devrouter doctor --repo ${checkout} --json. Ordinary ensure may run repository startup hooks; verify their preservation contract before startup.`
+        );
+      }
+    }
     if (!options.repair)
       recoverUnattachedNetworkReservation(repoPath, Boolean(preparationConfig.managedRuntime));
     assertRetainedNetworkConfiguration({
@@ -18432,6 +18449,19 @@ function recordLifecycleUnknown(result) {
     if (result !== void 0) record5.result = result;
   });
 }
+function recordLifecycleRefusal(result) {
+  const request = activeWorker;
+  if (request?.kind !== "ensure") return;
+  updateReliabilityOperation(request.identity, (record5) => {
+    if (!matchesFence(record5, request.fence) || record5.worker?.id !== request.workerId || record5.state.operation?.id !== request.operationId || record5.state.operation.status !== "RUNNING")
+      return;
+    stepRecord(
+      record5,
+      request.options.repair && !cancelled && process.connected ? { ...request.fence, type: "completion", operationId: request.operationId, exitCode: 1 } : { ...request.fence, type: "interrupted", operationId: request.operationId }
+    );
+    record5.result = result;
+  });
+}
 function proveLifecycleStopped() {
   const request = activeWorker;
   if (request?.kind !== "stop")
@@ -19092,6 +19122,7 @@ process.once("message", async (message) => {
         message: error instanceof Error ? error.message : String(error)
       };
       if (error instanceof ExecutionOutcomeError) recordLifecycleOutcome(error.outcome, failure);
+      else if (error instanceof WorkspaceEnsureRefusalError) recordLifecycleRefusal(failure);
       else recordLifecycleUnknown(failure);
     } catch {
     }

package/dist/devrouter.js

@@ -4898,7 +4898,7 @@ function loadRepoConfig(repoPath, read2 = (file) => import_node_fs8.default.read
   const config = parseRepoConfigSource(raw, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.6.2" : "0.0.0-dev";
+    const cliVersion = true ? "0.6.3" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(
@@ -7171,7 +7171,7 @@ var init_reliability_contract = __esm({
 
 // src/core/reliability-operation-store.ts
 function installedCliVersion() {
-  return true ? "0.6.2" : "0.0.0-dev";
+  return true ? "0.6.3" : "0.0.0-dev";
 }
 function compareCliVersions(left, right) {
   const parts = (value) => value.split(".").map((part) => Number.parseInt(part, 10) || 0);
@@ -17631,7 +17631,11 @@ function reliabilityRecovery(reason2, repoPath, variant) {
   switch (reason2) {
     case "stop-incomplete":
     case "operation-unknown":
-      return [`Run: devrouter stop ${checkout}`, `Run: devrouter ensure ${checkout} --repair`];
+      return [
+        `Run: devrouter stop ${checkout}`,
+        "Verify the repository startup hooks preserve retained data and startup is authorized before continuing.",
+        `Run: devrouter ensure ${checkout}${variantOption}`
+      ];
     case "start-refused":
       return [
         `Run: devrouter doctor --repo ${checkout} to read the refused fixed host-port claim and its holder`,
@@ -23495,7 +23499,7 @@ function buildOnboardingPrompt(options = {}) {
     "- Managed process reuse fingerprints command argv, workspace identity, and the exact adapter snapshot. Variant and current host-port identity always compose with an explicit --fingerprint. If a non-secret runtime value also affects reuse, set `DEVROUTER_PROCESS_FINGERPRINT_ENV` to its comma-separated environment names; secret-like names are rejected and raw values are never persisted.",
     "- Managed adapters may use devrouter-process ensure --prepare-command <command> for synchronous dependency preparation under the process lock before app launch. Unchanged owned processes skip preparation; it participates in default fingerprints and must not daemonize or detach.",
     "- Host-generated Compose inputs may use managedRuntime.devcontainer.prepareCommand as literal argv. Ensure runs it once from the checkout root before Compose inspection, with a 60-second bound and no implicit shell. Keep .devrouter.yml unchanged. Diagnostics never run it; changed warm mounts require separate verification.",
-    "- Explicit first initialization: managedRuntime.devcontainer.freshBootstrap declares literal command argv, dataVolumes and optional sharedCaches keys. ensure <new-checkout> --initialize-new requires qualified Devsy 1.19.0, new local data volumes and repository-owned database identity/emptiness checks. A durable attempt prevents replay after failure, unknown completion, cancellation, stop, replacement or settlement. Ordinary hooks must preserve data. Consult docs/DEVCONTAINER.md for context and mount prerequisites; never clear the attempt fence or infer reset authority.",
+    "- Explicit first initialization: managedRuntime.devcontainer.freshBootstrap declares literal command argv, dataVolumes and optional sharedCaches keys. ensure <new-checkout> --initialize-new requires qualified Devsy 1.19.0 or 1.24.0, new local data volumes and repository-owned database identity/emptiness checks. A durable attempt prevents replay after failure, unknown completion, cancellation, stop, replacement or settlement. Ordinary hooks must preserve data. Consult docs/DEVCONTAINER.md for context and mount prerequisites; never clear the attempt fence or infer reset authority.",
     "- Managed Devsy startup on supported local Unix Docker endpoints captures exact stop ownership before application readiness. With that baseline, canonical stop tolerates changed or missing repository configuration and preserves containers and volumes. Older records without a baseline retain configuration-dependent stop; installing a new CLI does not establish historical ownership. Invalid or changed ownership never falls back. Do not replay destructive bootstrap hooks to obtain a baseline.",
     "- Owner status is `present`, `missing`, `locked`, or `conflict`. Dirty or locked full down fails before side effects. `workspace gc` is a dry run; only `--yes` deletes exact eligible missing resources and records, never Git worktrees, branches, or prune state.",
     "- `devrouter workspace cleanup --repo . --inactive-for 30d --check-merged --json` is report-only and never mutates the workspace runtime, routes, ownership, Git, Docker, applications, worktrees, or branches. It reports ownership, workspace runtime registration, runtime state (`running|stopped|busy|not-found|absent|unknown`), checkout, advisory activity, route, and integration evidence. Local DevPod/Devsy list/status checks always run; `--check-merged` alone enables read-only origin and matching GitHub/GitLab checks. Treat `not-found` as stale runtime after Docker pruning; busy, unavailable, or conflicting evidence suppresses destructive suggestions. Explicit `gc`/`down` can remove exact stale registration only after expected-ID `NotFound` proof and ownership revalidation. Runtime `lastUsed` remains advisory.",
@@ -25652,7 +25656,7 @@ function probeInstalledCliVersion(executable) {
 }
 function buildCliPathCheck(options = {}) {
   const id5 = "global.cli-path";
-  const runningVersion = options.runningVersion ?? (true ? "0.6.2" : "0.0.0-dev");
+  const runningVersion = options.runningVersion ?? (true ? "0.6.3" : "0.0.0-dev");
   if (runningVersion === "0.0.0-dev") {
     return {
       id: id5,
@@ -26550,7 +26554,7 @@ async function buildDoctorReport(options = {}) {
           suggestion: `Remedy ${expansionNotice.remedy.code}: set a named default profile other than '${expansionNotice.profile}'${remedyCandidates}.`
         });
       }
-      const cliVersion = true ? "0.6.2" : "0.0.0-dev";
+      const cliVersion = true ? "0.6.3" : "0.0.0-dev";
       const configVersion = config.devrouter?.version;
       const installedKnown = cliVersion !== "0.0.0-dev";
       const versionComparison = installedKnown && configVersion ? compareSemver(configVersion, cliVersion) : void 0;
@@ -42227,7 +42231,7 @@ var init_version = __esm({
 
 // src/cli.ts
 var import_commander = require("commander");
-var CLI_VERSION = true ? "0.6.2" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.6.3" : "0.0.0-dev";
 var VERSION_FLAGS = /* @__PURE__ */ new Set(["-V", "--version"]);
 function withErrorHandling(action2) {
   return async (...args) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrouter/cli",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "description": "Local dev routing CLI with shared Traefik reverse proxy",
   "author": "Roland Schlaefli",
   "homepage": "https://github.com/rschlaefli/devrouter#readme",

package/upgrade-prompts/0.6.3.md

@@ -0,0 +1,51 @@
+# Upgrade to devrouter 0.6.3
+
+This patch qualifies explicit fresh managed initialization on Devsy 1.24.0 in
+addition to 1.19.0. The operation and its data, context and ownership guarantees
+are unchanged. Early ineligible repair now refuses before repository preparation
+and records a known failure; cancellation and uncertain completion stay distinct.
+Use ordinary ensure for startup and inspect exact-checkout diagnostics when an
+explicit recorded-profile repair is ineligible. Qualify preserving source hooks
+before starting a retained environment. Ordinary startup retains its existing provider support.
+
+## Task
+
+Within an authorized consumer adaptation, install the published CLI, verify its
+executable/version, bump `devrouter.version` in `.devrouter.yml`, and refresh
+existing guidance with `devrouter repo agents`. Explicitly managed controllers
+must use the matching initialization protocol. No configuration migration is
+required for ordinary startup.
+
+Before adopting a changed Devsy release, follow the explicit agent preparation
+in `docs/GETTING_STARTED.md`: `devrouter setup --yes --workspace-runtime devsy`.
+That machine setup needs its own authority. A host-governed readiness result
+without a verified matching agent does not prove replacement can acquire one.
+The 1.24.0 replacement qualification uses the matching verified Linux agent;
+ordinary lifecycle calls never substitute an unverified inherited binary.
+
+For a new disposable checkout, follow the current `docs/DEVCONTAINER.md`
+`freshBootstrap` contract and request `ensure <path> --initialize-new` only
+within existing consumer authority. Qualify the complete selected composition,
+new local data volumes, explicit shared caches and repository-owned database
+identity/emptiness checks. Unqualified provider versions and contexts refuse.
+
+The durable attempt is consumed before provider creation. Failure, cancellation,
+unknown completion, stop, replacement, registration loss and settlement never
+rearm it. Preserve partial data and use supported preserving recovery. Never
+clear the attempt or treat this operation as an existing-environment reset.
+
+## Validation
+
+1. Run the consumer's static configuration and bootstrap checks for actual edits.
+2. With runtime authority, initialize a new disposable fixture on the exact
+   qualified provider version; verify actual work, retained synthetic data
+   through preserving stop/resume, and refusal of a repeated initialization.
+3. Check failure/cancellation retention and replay refusal. End with canonical
+   `devrouter stop <path>` and verify stopped provider state and zero exact routes
+   unless the user explicitly retains the environment.
+
+## Report
+
+Report exact source/package/executable and provider identities, actual checks,
+retained-data evidence, remaining consumer prerequisites and final runtime state.
+A compatible release or installation alone does not prove consumer recovery.