@insitue/claude-plugin 0.6.0 → 0.6.1

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "insitue",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Drive a Claude Code session from the InSitue browser overlay. Pick an element in your app, claude reads the file and proposes the edit.",
   "mcpServers": {
     "insitue": {

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # @insitue/claude-plugin
 
+## 0.6.1
+
+- **Fix: refuse to reuse a stale companion.** `ensureCompanion` now checks a reachable companion's version via the handshake and, if it is older than the cloud-feature floor (0.7.0), tears it down and spawns the current one — instead of silently attaching to a stale companion left on the port.
+
 ## 0.6.0
 
 - **Sign in from Claude.** New `/insitue:login` command + `authenticate` / `complete_authentication` MCP tools open a browser, you approve, and a token is stored automatically — no manual paste.

package/dist/mcp-server.js

@@ -291,30 +291,64 @@ var PickBuffer = class {
     this.waiters.length = 0;
   }
 };
+var MIN_COMPANION = "0.7.0";
+function semverGte(version, floor) {
+  function parse(v) {
+    const m = /^(\d+)\.(\d+)\.(\d+)/.exec(v);
+    if (!m) return [0, 0, 0];
+    return [parseInt(m[1], 10), parseInt(m[2], 10), parseInt(m[3], 10)];
+  }
+  const [vMaj, vMin, vPat] = parse(version);
+  const [fMaj, fMin, fPat] = parse(floor);
+  if (vMaj !== fMaj) return vMaj > fMaj;
+  if (vMin !== fMin) return vMin > fMin;
+  return vPat >= fPat;
+}
 async function probeCompanion(session2) {
   try {
     process.kill(session2.pid, 0);
   } catch {
-    return false;
+    return null;
   }
   return new Promise((resolve) => {
+    let rawBody = "";
     const req = httpRequest(
       {
         host: "127.0.0.1",
         port: session2.port,
         path: "/insitue/handshake",
         method: "GET",
+        // Include an Origin so the handshake endpoint returns 200 + JSON
+        // instead of 403 (which it returns when Origin is absent). We
+        // use the loopback Origin — the companion's allowLocalhost flag
+        // accepts any localhost:* Origin, or else this falls back to 403
+        // which we still treat as "reachable" (non-null return).
+        headers: { origin: "http://localhost:5747" },
         timeout: 1500
       },
       (res) => {
-        res.resume();
-        resolve(true);
+        res.setEncoding("utf8");
+        res.on("data", (chunk) => {
+          rawBody += chunk;
+        });
+        res.on("end", () => {
+          if (res.statusCode === 200) {
+            try {
+              const body = JSON.parse(rawBody);
+              resolve(body.companionVersion ?? "0.0.0");
+            } catch {
+              resolve("0.0.0");
+            }
+          } else {
+            resolve("0.0.0");
+          }
+        });
       }
     );
-    req.on("error", () => resolve(false));
+    req.on("error", () => resolve(null));
     req.on("timeout", () => {
       req.destroy();
-      resolve(false);
+      resolve(null);
     });
     req.end();
   });
@@ -322,12 +356,30 @@ async function probeCompanion(session2) {
 var ownedChild = null;
 async function ensureCompanion(projectDir2) {
   const existing = findSession(projectDir2);
-  if (existing && await probeCompanion(existing.session)) {
-    process.stderr.write(
-      `[insitue-mcp] reusing companion at :${existing.session.port} (pid ${existing.session.pid})
+  if (existing) {
+    const companionVersion = await probeCompanion(existing.session);
+    if (companionVersion !== null) {
+      if (semverGte(companionVersion, MIN_COMPANION)) {
+        process.stderr.write(
+          `[insitue-mcp] reusing companion at :${existing.session.port} (pid ${existing.session.pid}, v${companionVersion})
 `
-    );
-    return existing.session;
+        );
+        return existing.session;
+      }
+      process.stderr.write(
+        `[insitue-mcp] replacing stale companion (v${companionVersion} < ${MIN_COMPANION})
+`
+      );
+      try {
+        process.kill(existing.session.pid);
+      } catch {
+      }
+      const sessionPath = join3(projectDir2, ".insitue", "session.json");
+      try {
+        rmSync(sessionPath);
+      } catch {
+      }
+    }
   }
   process.stderr.write(
     `[insitue-mcp] starting companion via \`npx -y @insitue/companion@latest dev\` in ${projectDir2}\u2026

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insitue/claude-plugin",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Drive Claude (Code AND Desktop) from the InSitue browser overlay — pick an element in your app, claude reads the file and proposes the edit.",
   "keywords": [
     "insitue",