@devrouter/cli 0.6.6 → 0.6.8

package/dist/devrouter-lifecycle-worker.js

@@ -5592,7 +5592,7 @@ function loadRepoConfig(repoPath, read2 = (file) => import_node_fs16.default.rea
   const config = parseRepoConfigSource(raw, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.6.6" : "0.0.0-dev";
+    const cliVersion = true ? "0.6.8" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver2(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(
@@ -7979,7 +7979,7 @@ function advanceAppReplacementAttempt(identity2, authority, stage, newPrimaryId)
   });
 }
 function installedCliVersion() {
-  return true ? "0.6.6" : "0.0.0-dev";
+  return true ? "0.6.8" : "0.0.0-dev";
 }
 function compareCliVersions(left, right) {
   const parts = (value) => value.split(".").map((part) => Number.parseInt(part, 10) || 0);
@@ -14468,7 +14468,9 @@ function reliabilityRecovery(reason2, repoPath, variant) {
         `Run: devrouter ensure ${checkout}${variantOption} (still queued until capacity frees up)`
       ];
     default:
-      return [];
+      return [
+        `Inspect: devrouter status --repo ${checkout} --json; wait for the current lifecycle owner to finish or cancel it before retrying.`
+      ];
   }
 }
 function refusedManagedStart(result) {
@@ -14493,7 +14495,10 @@ function readReliabilityStatus(options) {
       workspace: options.workspace ?? null,
       provider
     });
-  } catch {
+  } catch (error) {
+    options.drift.push(
+      error instanceof ReliabilityJournalError ? error.cause : "journal-unreadable"
+    );
     return void 0;
   }
   if (!record5) return void 0;
@@ -14913,6 +14918,12 @@ function collectManagedRuntimeStatus(options) {
   if (inspection.activeProcesses.some((process2) => !desiredProcesses.includes(process2))) {
     drift.push("one or more active processes are outside the selected profile");
   }
+  const reliability = readReliabilityStatus({
+    repoPath: options.repoPath,
+    variant: state?.variant,
+    drift,
+    ...options.workspace !== void 0 ? { workspace: options.workspace } : {}
+  });
   const positivelyStopped = !inspection.primaryActive && Object.values(inspection.baseStatuses).every(isStoppedOrMissingResourceStatus) && Object.values(inspection.serviceStatuses).every(isStoppedOrMissingResourceStatus) && activeApps.length === 0;
   const onlyDegradedIncident = state?.status === "degraded" && drift.length === 1;
   const requiredServicesReady = desiredServices.every(
@@ -14930,11 +14941,11 @@ function collectManagedRuntimeStatus(options) {
     services: inspection.activeServices,
     processes: inspection.activeProcesses
   };
-  const reliability = readReliabilityStatus({
-    repoPath: options.repoPath,
-    variant: state?.variant,
-    ...options.workspace !== void 0 ? { workspace: options.workspace } : {}
-  });
+  if (status === "failed-transition" && reliability?.attention) {
+    reliability.attention.recovery = [
+      `Inspect: devrouter status --repo ${recoveryPath(options.repoPath)}; resolve the reported drift before retrying ensure.`
+    ];
+  }
   return {
     mode: "managed",
     status,

package/dist/devrouter.js

@@ -4944,7 +4944,7 @@ function loadRepoConfig(repoPath, read2 = (file) => import_node_fs8.default.read
   const config = parseRepoConfigSource(raw, configPath);
   const requiredVersion = config.devrouter?.version;
   if (requiredVersion && !hasWarnedVersionMismatch) {
-    const cliVersion = true ? "0.6.6" : "0.0.0-dev";
+    const cliVersion = true ? "0.6.8" : "0.0.0-dev";
     if (cliVersion !== "0.0.0-dev" && compareSemver(requiredVersion, cliVersion) > 0) {
       hasWarnedVersionMismatch = true;
       process.stderr.write(
@@ -7266,7 +7266,7 @@ function validateAppReplacementAttempt(value, identity2) {
   return attempt;
 }
 function installedCliVersion() {
-  return true ? "0.6.6" : "0.0.0-dev";
+  return true ? "0.6.8" : "0.0.0-dev";
 }
 function compareCliVersions(left, right) {
   const parts = (value) => value.split(".").map((part) => Number.parseInt(part, 10) || 0);
@@ -17876,6 +17876,29 @@ function recoveryPath(repoPath) {
   if (/^[A-Za-z0-9_@%+=:,./-]+$/.test(repoPath)) return repoPath;
   return `'${repoPath.replaceAll("'", "'\\''")}'`;
 }
+function managedRuntimeRecovery(runtime, repoPath) {
+  const checkout = recoveryPath(repoPath);
+  const historyCause = runtime.drift.find((entry) => Object.hasOwn(HISTORY_CAUSES, entry));
+  if (historyCause) {
+    return [
+      historyCause === "journal-writer-newer" ? "Preserve lifecycle history and use a matching or newer devrouter CLI before retrying lifecycle commands." : "Preserve lifecycle history and inspect its unreadable or unsafe evidence before retrying lifecycle commands.",
+      `Inspect: devrouter status --repo ${checkout} --json`
+    ];
+  }
+  if (runtime.status === "failed-transition") {
+    return [
+      `Inspect: devrouter status --repo ${checkout}; resolve the reported drift before retrying ensure.`
+    ];
+  }
+  const attention = runtime.reliability?.attention;
+  if (attention?.recovery.length) return attention.recovery;
+  if (attention || runtime.reliability?.operation?.drained === false) {
+    return [
+      `Inspect: devrouter status --repo ${checkout} --json; wait for the current lifecycle owner to finish or cancel it before retrying.`
+    ];
+  }
+  return void 0;
+}
 function reliabilityRecovery(reason2, repoPath, variant) {
   const checkout = recoveryPath(repoPath);
   const variantOption = variant && variant !== "default" ? ` --variant ${variant}` : "";
@@ -17908,7 +17931,9 @@ function reliabilityRecovery(reason2, repoPath, variant) {
         `Run: devrouter ensure ${checkout}${variantOption} (still queued until capacity frees up)`
       ];
     default:
-      return [];
+      return [
+        `Inspect: devrouter status --repo ${checkout} --json; wait for the current lifecycle owner to finish or cancel it before retrying.`
+      ];
   }
 }
 function refusedManagedStart(result) {
@@ -17933,7 +17958,10 @@ function readReliabilityStatus(options) {
       workspace: options.workspace ?? null,
       provider
     });
-  } catch {
+  } catch (error) {
+    options.drift.push(
+      error instanceof ReliabilityJournalError ? error.cause : "journal-unreadable"
+    );
     return void 0;
   }
   if (!record6) return void 0;
@@ -18348,6 +18376,12 @@ function collectManagedRuntimeStatus(options) {
   if (inspection.activeProcesses.some((process2) => !desiredProcesses.includes(process2))) {
     drift.push("one or more active processes are outside the selected profile");
   }
+  const reliability = readReliabilityStatus({
+    repoPath: options.repoPath,
+    variant: state?.variant,
+    drift,
+    ...options.workspace !== void 0 ? { workspace: options.workspace } : {}
+  });
   const positivelyStopped = !inspection.primaryActive && Object.values(inspection.baseStatuses).every(isStoppedOrMissingResourceStatus) && Object.values(inspection.serviceStatuses).every(isStoppedOrMissingResourceStatus) && activeApps.length === 0;
   const onlyDegradedIncident = state?.status === "degraded" && drift.length === 1;
   const requiredServicesReady = desiredServices.every(
@@ -18365,11 +18399,11 @@ function collectManagedRuntimeStatus(options) {
     services: inspection.activeServices,
     processes: inspection.activeProcesses
   };
-  const reliability = readReliabilityStatus({
-    repoPath: options.repoPath,
-    variant: state?.variant,
-    ...options.workspace !== void 0 ? { workspace: options.workspace } : {}
-  });
+  if (status === "failed-transition" && reliability?.attention) {
+    reliability.attention.recovery = [
+      `Inspect: devrouter status --repo ${recoveryPath(options.repoPath)}; resolve the reported drift before retrying ensure.`
+    ];
+  }
   return {
     mode: "managed",
     status,
@@ -18397,7 +18431,7 @@ function collectManagedRuntimeStatus(options) {
     ...state?.transitionPhase ? { transitionPhase: state.transitionPhase } : {}
   };
 }
-var EMPTY_RESOURCES;
+var HISTORY_CAUSES, EMPTY_RESOURCES;
 var init_managed_runtime_status = __esm({
   "src/core/managed-runtime-status.ts"() {
     "use strict";
@@ -18413,6 +18447,20 @@ var init_managed_runtime_status = __esm({
     init_reliability_output();
     init_workspace();
     init_workspace_runtime();
+    HISTORY_CAUSES = {
+      "journal-directory-unreadable": true,
+      "journal-directory-unsafe": true,
+      "journal-entry-unsupported": true,
+      "journal-enumeration-limit": true,
+      "journal-enumeration-timeout": true,
+      "journal-unreadable": true,
+      "journal-entry-unsafe": true,
+      "journal-invalid": true,
+      "journal-writer-newer": true,
+      "journal-identity-mismatch": true,
+      "journal-unstable": true,
+      "journal-enumeration-failed": true
+    };
     EMPTY_RESOURCES = {
       apps: [],
       services: [],
@@ -25492,14 +25540,15 @@ async function collectRouterStatus(repoPath) {
     );
   } else if (repo?.valid) {
     const repoArgument = `'${repo.path.replaceAll("'", `'\\''`)}'`;
+    const recovery = repo.managedRuntime ? managedRuntimeRecovery(repo.managedRuntime, repo.path) : void 0;
     if (repo.managedRuntime?.mode === "managed") {
-      nextSteps.push(`Run: devrouter ensure ${repoArgument}`);
+      nextSteps.push(...recovery ?? [`Run: devrouter ensure ${repoArgument}`]);
     } else {
       nextSteps.push(`Run: dev app ls --repo ${repo.path}`);
       nextSteps.push("Run: dev app run <name> --repo <path> --yes");
     }
     nextSteps.push("Run: dev ls");
-    if (repo.managedRuntime?.mountNesting?.status === "unwound") {
+    if (!recovery && repo.managedRuntime?.mountNesting?.status === "unwound") {
       nextSteps.push(
         `Run: devrouter stop ${repoArgument} and then devrouter ensure ${repoArgument} to re-apply the unwound nested mount`
       );
@@ -25943,7 +25992,7 @@ function probeInstalledCliVersion(executable) {
 }
 function buildCliPathCheck(options = {}) {
   const id5 = "global.cli-path";
-  const runningVersion = options.runningVersion ?? (true ? "0.6.6" : "0.0.0-dev");
+  const runningVersion = options.runningVersion ?? (true ? "0.6.8" : "0.0.0-dev");
   if (runningVersion === "0.0.0-dev") {
     return {
       id: id5,
@@ -26765,6 +26814,7 @@ async function buildDoctorReport(options = {}) {
       });
       if (repo.managedRuntime) {
         const managedRuntime = repo.managedRuntime;
+        const recovery = managedRuntimeRecovery(managedRuntime, repo.path);
         const repoArgument = `'${repo.path.replaceAll("'", `'\\''`)}'`;
         const variantOption = managedRuntime.activeVariant && managedRuntime.activeVariant !== "default" ? ` --variant ${managedRuntime.activeVariant}` : "";
         const level = managedRuntime.mode === "legacy" || managedRuntime.status === "ready" ? "ok" : managedRuntime.status === "starting" || managedRuntime.status === "stopped" ? "warn" : "error";
@@ -26779,7 +26829,7 @@ async function buildDoctorReport(options = {}) {
           level,
           summary: summary2,
           ...details ? { details } : {},
-          suggestion: managedRuntime.mode === "legacy" ? void 0 : managedRuntime.status === "failed-transition" ? `Inspect: devrouter status --repo ${repoArgument}; resolve the reported drift before retrying ensure.` : managedRuntime.status === "ready" ? void 0 : `Run: devrouter ensure ${repoArgument}${variantOption}`
+          suggestion: managedRuntime.mode === "legacy" ? void 0 : recovery ? recovery.join(" ") : managedRuntime.status === "ready" ? void 0 : `Run: devrouter ensure ${repoArgument}${variantOption}`
         });
         const mountNesting = managedRuntime.mountNesting;
         if (mountNesting && mountNesting.status !== "not-applicable") {
@@ -26797,7 +26847,7 @@ async function buildDoctorReport(options = {}) {
                   (entry) => `unwound=${entry.destination} (source ${entry.source} inside ${entry.nestedWithin})`
                 )
               ].join("; "),
-              suggestion: `Run: devrouter stop ${repoArgument} and then devrouter ensure ${repoArgument}${variantOption} to restart the exact container, which re-applies the nested mount.`
+              suggestion: recovery ? void 0 : `Run: devrouter stop ${repoArgument} and then devrouter ensure ${repoArgument}${variantOption} to restart the exact container, which re-applies the nested mount.`
             });
           } else if (mountNesting.status === "unverified") {
             addCheck(checks, {
@@ -26808,7 +26858,7 @@ async function buildDoctorReport(options = {}) {
                 `container=${container}`,
                 `reason=${mountNesting.reason ?? "unknown"}`
               ].join("; "),
-              suggestion: `Run: devrouter exec ${repoArgument} -- cat /proc/self/mountinfo to read the container's own mount table.`
+              suggestion: recovery ? void 0 : `Run: devrouter exec ${repoArgument} -- cat /proc/self/mountinfo to read the container's own mount table.`
             });
           } else {
             addCheck(checks, {
@@ -26842,7 +26892,7 @@ async function buildDoctorReport(options = {}) {
           suggestion: `Remedy ${expansionNotice.remedy.code}: set a named default profile other than '${expansionNotice.profile}'${remedyCandidates}.`
         });
       }
-      const cliVersion = true ? "0.6.6" : "0.0.0-dev";
+      const cliVersion = true ? "0.6.8" : "0.0.0-dev";
       const configVersion = config.devrouter?.version;
       const installedKnown = cliVersion !== "0.0.0-dev";
       const versionComparison = installedKnown && configVersion ? compareSemver(configVersion, cliVersion) : void 0;
@@ -27078,6 +27128,7 @@ var init_doctor = __esm({
     init_capacity_store();
     init_docker();
     init_host_routes();
+    init_managed_runtime_status();
     init_reliability_operation_store();
     init_repo_config();
     init_devcontainer_diagnostics();
@@ -42521,7 +42572,7 @@ var init_version = __esm({
 
 // src/cli.ts
 var import_commander = require("commander");
-var CLI_VERSION = true ? "0.6.6" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.6.8" : "0.0.0-dev";
 var VERSION_FLAGS = /* @__PURE__ */ new Set(["-V", "--version"]);
 function withErrorHandling(action2) {
   return async (...args) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrouter/cli",
-  "version": "0.6.6",
+  "version": "0.6.8",
   "description": "Local dev routing CLI with shared Traefik reverse proxy",
   "author": "Roland Schlaefli",
   "homepage": "https://github.com/rschlaefli/devrouter#readme",

package/upgrade-prompts/0.6.7.md

@@ -0,0 +1,48 @@
+# Upgrade to devrouter 0.6.7
+
+Status and doctor keep failed-transition recovery advice consistent, including
+combined status insights and unwound-mount diagnostics. Inspect the exact checkout
+and resolve the reported transition before retrying ensure; the warning is not
+permission to stop/restart an unproved population. Existing readiness, startup,
+repair, ownership, levels and literal checkout argument rules remain.
+No configuration schema or lifecycle contract changes are introduced.
+
+## Task
+
+Within approved installation/adaptation scope, select the integrity-verified exact
+package, update `devrouter.version` in `.devrouter.yml` and refresh existing agent
+guidance through `devrouter repo agents`. Verify the actual selected executable,
+PATH copies and participating package/source/harness/controller pins. Ask each
+participating owner which executable can access this host's Devrouter state;
+PATH inventory alone does not prove coordinated adoption.
+
+Before the first 0.6.7 lifecycle write, active participating clients must use a
+compatible qualified reader/writer. Older 0.6.6 refuses its newer-writer journals
+through direct read, update and global enumeration even without a schema change.
+Inactive older pins stay unused until compatible adoption is verified. Unknown
+participation holds activation. Do not use an older reader as a downgrade recovery
+route after new writes. Preserve all journal bytes, writer stamps and durable
+initialization/replacement receipts; never erase state or loosen version/hash
+fences to bypass refusal or rearm a consumed attempt.
+
+Installation and release notices supply no consumer startup, repair, replacement,
+initialization, reset or extra-attempt authority. Each owner retains exact runtime,
+data and neighbour limits. Failed-transition inspection is a diagnostic action;
+it does not prove application readiness or prescribe an automatic retry.
+
+## Validation
+
+1. Verify registry integrity, selected package/member bytes, executable version
+   and the existing local guidance. Run native checks for actual consumer edits.
+2. Use `devrouter status --repo <checkout> --json` and existing diagnostic results
+   for authorized inspection. Compare the actual obstruction and next-action
+   preconditions before any separately authorized lifecycle command.
+3. Any separately authorized runtime work ends with canonical stop and exact
+   provider/container/route/worker proof unless the user keeps it running.
+
+## Report
+
+Report exact selected package/executable identities, participating-client adoption,
+remaining unknowns and relevant checks. Record any actual runtime terminal with
+its producing evidence. Package proof does not establish receiving-host adoption,
+consumer recovery, broader guidance parity or retained-maintenance acceptance.

package/upgrade-prompts/0.6.8.md

@@ -0,0 +1,53 @@
+# Upgrade to devrouter 0.6.8
+
+Managed status reports unreadable lifecycle history as drift. Newer-writer history
+requires a matching or newer reader while preserving the journal; other unreadable
+history requires inspection. Status and doctor prioritize that remedy, failed
+transition inspection, durable operation attention and live-owner guidance before
+ordinary startup or nested-mount restart advice. Ordinary readable-history drift
+retains normal ensure guidance. No configuration schema, command surface,
+dependency, ownership or admission guard changes are introduced.
+
+## Task
+
+Within approved installation/adaptation scope, select the integrity-verified exact
+package, update `devrouter.version` in `.devrouter.yml` and refresh existing agent
+guidance through `devrouter repo agents`. Verify selected/PATH executables and
+concrete package, source, harness and controller pins sharing the affected journal
+namespace or mixed caller chain. Owners confirm compatible adoption or explicit
+non-use; a PATH listing alone does not prove participation. Independent remote
+state is a separate adoption boundary. Unknown affected participation holds
+activation. Do not alter dormant harness checks or replay consumed attempts.
+
+A new reader accepts older supported history. Older 0.6.7 readers refuse actual
+0.6.8-written journals through direct read, update, enumeration and admission even
+without a schema change. Installing alone writes no lifecycle journal. Before
+any separately authorized new lifecycle write, coordinate affected clients; keep
+inactive older pins unused until compatibility is established. After newer writes,
+use a matching or newer CLI and preserve all journal bytes and durable
+initialization/replacement receipts. Never erase, downgrade or replay history to
+bypass refusal or rearm an attempt.
+
+Publication, installation and notices authorize no consumer startup, repair,
+replacement, initialization, reset or extra attempt. Inspection is read-only
+and does not establish application readiness. A live owner must finish or be
+explicitly cancelled within its own authority before another operation.
+
+## Validation
+
+1. Verify registry integrity, selected package/member bytes and executable
+   versions. Run native checks for actual consumer edits; preserve journals and
+   receipts when only selecting a CLI.
+2. Use `devrouter status --repo <checkout> --json` and existing diagnostic evidence
+   within authorized inspection scope. Check the reported reason and actual
+   next-command preconditions; do not infer permission from generic advice.
+3. Any separately authorized runtime work ends with canonical stop and exact
+   worker, provider, container and route proof unless the user keeps it running.
+
+## Report
+
+Report selected package/executable identities, affected-client adoption or holds,
+remaining unknowns and relevant checks. Any consumer recovery claim needs its
+actual useful-work, retained-data, neighbour and stopped-terminal evidence.
+Synthetic qualification and package identity alone do not prove receiving-host
+adoption, consumer recovery or retained-maintenance acceptance.