@nexus-cortex/cli 4.137.0 → 4.137.1

package/bin/cortex.js

@@ -29,6 +29,7 @@ import { existsSync, readFileSync, realpathSync, mkdirSync, openSync, writeFileS
 import { homedir } from 'os';
 import { createRequire } from 'module';
 import { Agent as UndiciAgent } from 'undici';
+import { isStaleServer, staleServerPolicy, wrongProject } from './stale-server.js';
 
 // 🔴 ENV BOOTSTRAP FIRST (operator directive: seed+load .env "no matter how
 // invoked"). This bin historically NEVER ran bootstrapEnv — it read only the raw
@@ -505,10 +506,48 @@ async function ensureKeysOrExit() {
   process.exit(1);
 }
 
+function cliVersion() {
+  try { return JSON.parse(readFileSync(join(__cortex_dirname, '..', 'package.json'), 'utf8')).version; } catch { return 'unknown'; }
+}
+
 async function ensureServer() {
   if (!(await isServerUp())) {
     await startServer();
+    return;
   }
+  // 2026-11-14 (m2 battery C5/C7): a server started BEFORE `cortex update` keeps serving the OLD harness — no USER.md slot, no new guards —
+  // and nothing said so. Compare versions; by default restart a stale server (CORTEX_STALE_SERVER=warn|fail to change that).
+  let sv, sp;
+  try { const h = (await (await fetch(`${BASE_URL}/health`, { signal: AbortSignal.timeout(3000) })).json())?.server; sv = h?.version; sp = h?.projectPath; } catch { /* treat as unknown */ }
+  const cv = cliVersion();
+  const stale = isStaleServer(sv, cv);
+  // a server bound to ANOTHER project would put this turn's memory, files and session there (m2 battery C4) — same policy as a stale one
+  const other = !stale && wrongProject(sp, process.env.PROJECT_PATH || process.cwd());
+  if (!stale && !other) return;
+  const policy = staleServerPolicy(process.env);
+  const msg = stale
+    ? `[cortex] the server on ${BASE_URL} runs ${sv && sv !== '4.0.0' ? sv : 'an older release'}, this CLI is ${cv}`
+    : `[cortex] the server on ${BASE_URL} is bound to ${sp}, but you are in ${process.cwd()}`;
+  if (policy === 'warn') { process.stderr.write(`${msg} — continuing on the OLD server (CORTEX_STALE_SERVER=warn)\n`); return; }
+  if (policy === 'fail') { process.stderr.write(`${msg} — refusing (CORTEX_STALE_SERVER=fail). Run: cortex --shutdown\n`); process.exit(2); }
+  process.stderr.write(`${msg} — restarting it ${stale ? 'so this turn runs the installed version' : 'in this directory'}\n`);
+  try { await fetch(`${BASE_URL}/shutdown`, { method: 'POST', signal: AbortSignal.timeout(5000) }); } catch { /* it may already be going */ }
+  // wait until the PORT is free, not just until /health stops answering: a server started while the old one still holds the socket hops to
+  // port+1 (EADDRINUSE fallback) and this CLI would then talk to nothing (e2e 2026-11-14: new server on 4520, CLI said ready on 4519)
+  const { createConnection } = await import('net');
+  const portOf = () => Number(new URL(BASE_URL).port || 80);
+  const portBusy = () => new Promise((res) => { const c = createConnection({ port: portOf(), host: new URL(BASE_URL).hostname }); c.once('connect', () => { c.destroy(); res(true); }); c.once('error', () => res(false)); });
+  let free = 0;
+  for (let i = 0; i < 80 && free < 3; i++) { free = (await portBusy()) ? 0 : free + 1; await new Promise((r) => setTimeout(r, 250)); }
+  if (free < 3) { process.stderr.write(`[cortex] the old server did not release port ${portOf()} — run: cortex --shutdown\n`); process.exit(2); }
+  await startServer();
+  // verify the server that answers is the one we wanted (version + project)
+  try {
+    const h = (await (await fetch(`${BASE_URL}/health`, { signal: AbortSignal.timeout(3000) })).json())?.server;
+    if (isStaleServer(h?.version, cv) || wrongProject(h?.projectPath, process.env.PROJECT_PATH || process.cwd())) {
+      process.stderr.write(`[cortex] after the restart ${BASE_URL} still answers as ${h?.version} in ${h?.projectPath} — stop it by hand: cortex --shutdown\n`); process.exit(2);
+    }
+  } catch { /* startServer already verified it is up */ }
 }
 
 async function fetchJSON(path, options = {}, timeoutMs = 30000) {

package/bin/stale-server.js

@@ -0,0 +1,28 @@
+import { realpathSync } from 'fs';
+// Stale-server detection (2026-11-14, m2 battery C5/C7): the CLI attached to a server started before `cortex update` and the turn ran
+// OLD code silently. Pure helpers so the policy is unit-tested (tests/unit/staleServer.test.ts); used by bin/cortex.js ensureServer().
+const parse = (v) => String(v ?? '').split('-')[0].split('.').map((n) => Number.parseInt(n, 10));
+
+/** True when the running server is older than this CLI (or reports no / the legacy hard-coded '4.0.0' version). */
+export function isStaleServer(serverVersion, cliVersion) {
+  const c = parse(cliVersion);
+  if (c.length < 3 || c.some(Number.isNaN)) return false;           // unknown CLI version: never force a restart
+  const s = parse(serverVersion);
+  if (s.length < 3 || s.some(Number.isNaN)) return true;
+  for (let i = 0; i < 3; i++) { if (s[i] !== c[i]) return s[i] < c[i]; }
+  return false;
+}
+
+/** CORTEX_STALE_SERVER = restart (default) | warn | fail. */
+export function staleServerPolicy(env = process.env) {
+  const v = String(env.CORTEX_STALE_SERVER ?? '').trim().toLowerCase();
+  return v === 'warn' || v === 'fail' ? v : 'restart';
+}
+
+/** True when the running server is bound to a DIFFERENT project directory than the caller's cwd (memory, files and sessions would land in
+ *  the server's project — m2 battery C4). Unknown server project → false (an old server is caught by the version check instead). */
+export function wrongProject(serverProject, cwd) {
+  if (!serverProject || !cwd) return false;
+  const norm = (p) => { let r = String(p); try { r = realpathSync(r); } catch { /* keep as given */ } return r.replace(/\/+$/, '') || '/'; };
+  return norm(serverProject) !== norm(cwd);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexus-cortex/cli",
-  "version": "4.137.0",
+  "version": "4.137.1",
   "description": "Nexus Cortex CLI - Terminal interface for multi-provider LLM orchestration",
   "main": "dist/index.js",
   "type": "module",
@@ -19,7 +19,7 @@
     "prepack": "node ../../scripts/copy-pkg-cortex-scaffold.mjs"
   },
   "dependencies": {
-    "@nexus-cortex/core": "4.137.0",
+    "@nexus-cortex/core": "4.137.1",
     "chalk": "^4.1.2",
     "cli-spinners": "^2.9.0",
     "commander": "^11.0.0",