commandmate 0.10.2 → 0.10.4

package/dist/cli/commands/quickstart.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quickstart.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/quickstart.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAyBH,MAAM,WAAW,iBAAiB;IAChC,gCAAgC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAOD;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtF"}
+{"version":3,"file":"quickstart.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/quickstart.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA0BH,MAAM,WAAW,iBAAiB;IAChC,gCAAgC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAOD;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtF"}

package/dist/cli/commands/quickstart.js

@@ -12,6 +12,7 @@ const fs_1 = require("fs");
 const types_1 = require("../types");
 const logger_1 = require("../utils/logger");
 const daemon_1 = require("../utils/daemon");
+const package_info_1 = require("../utils/package-info");
 const preflight_1 = require("../utils/preflight");
 const env_setup_1 = require("../utils/env-setup");
 const prompt_1 = require("../utils/prompt");
@@ -92,6 +93,10 @@ async function ensureServerRunning(daemonManager) {
         // start.ts reports an already-running server as START_FAILED, so it must not be called here
         const status = await daemonManager.getStatus();
         logger.info(`Server is already running (PID: ${status?.pid})`);
+        // Issue #1337: this branch returns the existing server's URL without restarting it, so
+        // running `npx commandmate@latest` over a still-running old daemon silently never delivers
+        // the newer code. Surface that mismatch so the user is not led to believe they are up to date.
+        warnOnVersionMismatch(status);
         // Issue #1266: getStatus() now gives .env precedence over exported variables, so the URL
         // it reports is the one the server is on; this no longer needs to be re-derived here
         return { url: status?.url };
@@ -103,6 +108,28 @@ async function ensureServerRunning(daemonManager) {
     await waitUntilReady(result.url);
     return { url: result.url };
 }
+/**
+ * Warn when the already-running daemon is a different version than this CLI.
+ *
+ * Issue #1337: `npx commandmate@latest` over a still-running old daemon returns the existing URL
+ * without restarting, so a published fix silently never reaches the user, while `--version`
+ * reports the freshly-fetched CLI and hides the discrepancy. #1354 recorded the daemon's version
+ * in its state file; getStatus() surfaces it here so the mismatch becomes visible. This only
+ * warns — restarting automatically would kill any in-flight sessions the running server holds.
+ */
+function warnOnVersionMismatch(status) {
+    const runningVersion = status?.version;
+    if (!runningVersion) {
+        // Legacy daemons (started before #1354) record no version; nothing to compare against.
+        return;
+    }
+    const cliVersion = (0, package_info_1.readPackageVersion)();
+    if (cliVersion && cliVersion !== runningVersion) {
+        logger.warn(`The running server is v${runningVersion} but this CLI is v${cliVersion}. ` +
+            'This command does not restart it, so the running server stays on the old version. ' +
+            'To update the running server, run "commandmate update".');
+    }
+}
 /**
  * Poll the server until it accepts connections; a timeout is not fatal
  */

package/dist/cli/commands/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/status.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAA6B,aAAa,EAAE,MAAM,UAAU,CAAC;AAoFpE;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoF9E"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/status.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAA2C,aAAa,EAAE,MAAM,UAAU,CAAC;AA4GlF;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsF9E"}

package/dist/cli/commands/status.js

@@ -13,8 +13,25 @@ const types_1 = require("../types");
 const logger_1 = require("../utils/logger");
 const daemon_1 = require("../utils/daemon");
 const env_setup_1 = require("../utils/env-setup");
+const package_info_1 = require("../utils/package-info");
 const input_validators_1 = require("../utils/input-validators");
 const logger = new logger_1.CLILogger();
+/**
+ * Print the running daemon's version and, when it differs from the installed CLI, a warning.
+ * Issue #1354: a new CLI over a still-running old daemon otherwise reports only "Running", so
+ * users cannot tell the server is not on the latest version.
+ */
+function printVersionInfo(status) {
+    if (!status.version) {
+        return;
+    }
+    console.log(`Version: ${status.version}`);
+    const cliVersion = (0, package_info_1.readPackageVersion)();
+    if (cliVersion && cliVersion !== status.version) {
+        logger.warn(`Installed CLI is v${cliVersion} but the running server is v${status.version}. ` +
+            'Restart the server ("commandmate stop && commandmate start") to run the current version.');
+    }
+}
 /**
  * Show status for a single server (main or issue-specific)
  */
@@ -45,6 +62,7 @@ async function showSingleStatus(issueNo) {
         return;
     }
     console.log(`Status:  Running (PID: ${status.pid})`);
+    printVersionInfo(status);
     if (status.port) {
         console.log(`Port:    ${status.port}`);
     }
@@ -130,6 +148,7 @@ async function statusCommand(options = {}) {
             return;
         }
         console.log(`Status:  Running (PID: ${status.pid})`);
+        printVersionInfo(status);
         if (status.port) {
             console.log(`Port:    ${status.port}`);
         }

package/dist/cli/types/index.d.ts

@@ -104,6 +104,12 @@ export interface DaemonStatus {
     uptime?: number;
     /** URL to access the server (if running) */
     url?: string;
+    /** Package version the running daemon was started with (Issue #1354) */
+    version?: string;
+    /** Protocol the running server speaks (Issue #1355) */
+    protocol?: 'http' | 'https';
+    /** Whether the running server has token authentication enabled (Issue #1355) */
+    auth?: boolean;
 }
 /**
  * System dependency definition

package/dist/cli/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/types/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,oBAAY,QAAQ;IAClB,OAAO,IAAI;IACX,gBAAgB,IAAI;IACpB,YAAY,IAAI;IAChB,YAAY,IAAI;IAChB,WAAW,IAAI;IACf,8FAA8F;IAC9F,aAAa,IAAI;IACjB,gBAAgB,KAAK;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,wBAAwB;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB;IACnB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,kBAAkB,CAAC;IAC9C,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE1E,sCAAsC;AACtC,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wFAAwF;IACxF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,wCAAwC;AACxC,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAC7C;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKtD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/types/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,oBAAY,QAAQ;IAClB,OAAO,IAAI;IACX,gBAAgB,IAAI;IACpB,YAAY,IAAI;IAChB,YAAY,IAAI;IAChB,WAAW,IAAI;IACf,8FAA8F;IAC9F,aAAa,IAAI;IACjB,gBAAgB,KAAK;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,wBAAwB;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,gFAAgF;IAChF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB;IACnB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,kBAAkB,CAAC;IAC9C,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE1E,sCAAsC;AACtC,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wFAAwF;IACxF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,wCAAwC;AACxC,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAC7C;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKtD"}

package/dist/cli/utils/agent-instances.d.ts

@@ -11,7 +11,7 @@
  * via tsconfig.cli.json set `"paths": {}`. Mirrors the existing pattern in
  * ../config/cli-tool-ids.ts.
  */
-import type { ApiClient } from './api-client';
+import { type ApiClient } from './api-client';
 import type { AgentInstance } from '../types/api-responses';
 import { MAX_AGENT_INSTANCES, MAX_AGENT_ALIAS_LENGTH } from '../../lib/cli-tools/types';
 import { MIN_AGENT_INSTANCES } from '../../lib/agent-instances-validator';

package/dist/cli/utils/agent-instances.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-instances.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/agent-instances.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAA0B,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAA2C,MAAM,2BAA2B,CAAC;AACjI,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,CAAC;AAE5E;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAGzG;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,aAAa,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,MAAM,CAM/F;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAKhE"}
+{"version":3,"file":"agent-instances.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/agent-instances.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAuB,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAA0B,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAA2C,MAAM,2BAA2B,CAAC;AACjI,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,CAAC;AAE5E;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAazG;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,aAAa,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,MAAM,CAM/F;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAKhE"}

package/dist/cli/utils/agent-instances.js

@@ -18,6 +18,7 @@ exports.fetchAgentInstances = fetchAgentInstances;
 exports.saveAgentInstances = saveAgentInstances;
 exports.nextInstanceId = nextInstanceId;
 exports.defaultAlias = defaultAlias;
+const api_client_1 = require("./api-client");
 const types_1 = require("../../lib/cli-tools/types");
 Object.defineProperty(exports, "MAX_AGENT_INSTANCES", { enumerable: true, get: function () { return types_1.MAX_AGENT_INSTANCES; } });
 Object.defineProperty(exports, "MAX_AGENT_ALIAS_LENGTH", { enumerable: true, get: function () { return types_1.MAX_AGENT_ALIAS_LENGTH; } });
@@ -28,7 +29,13 @@ Object.defineProperty(exports, "MIN_AGENT_INSTANCES", { enumerable: true, get: f
  */
 async function fetchAgentInstances(client, worktreeId) {
     const worktree = await client.get(`/api/worktrees/${worktreeId}`);
-    return worktree.agentInstances ?? [];
+    // Issue #1357: a current daemon always includes agentInstances (an empty array
+    // when the worktree has no instances). Its absence means the running daemon
+    // predates the roster API, so silently returning [] here would look to the user
+    // like "no instances" and mask the real cause. Validate the field's presence so
+    // a stale daemon surfaces as an actionable version-skew error instead.
+    const validated = (0, api_client_1.assertResponseShape)(worktree, ['agentInstances'], 'GET /api/worktrees/:id (agent-instance roster)');
+    return validated.agentInstances;
 }
 /**
  * Persist a full roster replacement. `order` is re-normalized to array

package/dist/cli/utils/api-client.d.ts

@@ -84,4 +84,40 @@ export declare class ApiError extends Error {
     readonly statusCode?: number | undefined;
     constructor(message: string, exitCode: number, statusCode?: number | undefined);
 }
+/**
+ * Assert that a parsed API response contains the given required top-level fields
+ * (Issue #1357).
+ *
+ * get<T>/post<T>/patch<T> cast the parsed body with `as T` and perform no runtime
+ * validation, so a response from a stale daemon that omits a field silently
+ * degrades to `undefined` downstream (e.g. a missing roster read as an empty
+ * roster). Route responses whose fields you depend on through this guard so a
+ * missing field surfaces as an actionable version-skew error instead of a silent
+ * wrong value.
+ *
+ * @param value - Parsed response body
+ * @param fields - Required top-level field names
+ * @param context - Short endpoint/response label included in the error message
+ * @returns value, typed as T, when it is an object and every required field is present
+ * @throws ApiError when value is not an object or a required field is absent
+ */
+export declare function assertResponseShape<T>(value: unknown, fields: ReadonlyArray<keyof T & string>, context: string): T;
+/**
+ * Read the version the running daemon reports via GET /api/app/update-check.
+ * Issue #1359 made that field a runtime package.json read, so it reflects the
+ * daemon's actual running code rather than a build-time constant.
+ *
+ * Returns undefined when the endpoint is unreachable or omits currentVersion (an
+ * older daemon predating the field) — callers treat that as "unknown", never as
+ * an error. Never throws.
+ */
+export declare function fetchDaemonVersion(client: ApiClient): Promise<string | undefined>;
+/**
+ * Compare this CLI's version against the running daemon's and print a stderr
+ * warning when they differ (Issue #1357). Advisory only: never throws, and stays
+ * silent when either version is unknown. Intended to run once per CLI invocation
+ * that connects to the server, so a stale daemon serving an older API is called
+ * out before its responses are misread.
+ */
+export declare function warnIfVersionSkew(client: ApiClient): Promise<void>;
 //# sourceMappingURL=api-client.d.ts.map

package/dist/cli/utils/api-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/api-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,4CAA4C;AAC5C,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAK3C;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAaD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CASjF;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,cAAc,CAmE9E;AAeD;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAAC,CAAS;gBAEX,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAa1D,OAAO,CAAC,UAAU;IAUlB;;;OAGG;IACG,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAoBtC;;;OAGG;IACG,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAwBvD;;;;OAIG;IACG,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;CAsBzD;AAED;;GAEG;AACH,qBAAa,QAAS,SAAQ,KAAK;aAGf,QAAQ,EAAE,MAAM;aAChB,UAAU,CAAC,EAAE,MAAM;gBAFnC,OAAO,EAAE,MAAM,EACC,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,YAAA;CAKtC"}
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/api-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,4CAA4C;AAC5C,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAK3C;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAaD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CASjF;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,cAAc,CAmE9E;AAeD;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAAC,CAAS;gBAEX,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAa1D,OAAO,CAAC,UAAU;IAUlB;;;OAGG;IACG,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAoBtC;;;OAGG;IACG,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAwBvD;;;;OAIG;IACG,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;CAsBzD;AAED;;GAEG;AACH,qBAAa,QAAS,SAAQ,KAAK;aAGf,QAAQ,EAAE,MAAM;aAChB,UAAU,CAAC,EAAE,MAAM;gBAFnC,OAAO,EAAE,MAAM,EACC,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,YAAA;CAKtC;AAkBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,EACvC,OAAO,EAAE,MAAM,GACd,CAAC,CAiBH;AAOD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CASvF;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CASxE"}

package/dist/cli/utils/api-client.js

@@ -14,7 +14,11 @@ exports.isValidWorktreeId = isValidWorktreeId;
 exports.isValidInstanceId = isValidInstanceId;
 exports.resolveAuthToken = resolveAuthToken;
 exports.handleApiError = handleApiError;
+exports.assertResponseShape = assertResponseShape;
+exports.fetchDaemonVersion = fetchDaemonVersion;
+exports.warnIfVersionSkew = warnIfVersionSkew;
 const types_1 = require("../types");
+const package_info_1 = require("./package-info");
 /** Maximum stop-pattern length [SEC4-06] */
 exports.MAX_STOP_PATTERN_LENGTH = 500;
 /** Worktree ID validation pattern [SEC4-04] */
@@ -266,3 +270,81 @@ class ApiError extends Error {
     }
 }
 exports.ApiError = ApiError;
+// =============================================================================
+// Response shape validation & version-skew detection (Issue #1357)
+// =============================================================================
+/**
+ * Build the message shown when a daemon response is malformed or the CLI/daemon
+ * versions disagree. Always names the most likely cause — a stale daemon still
+ * running an older build than the installed CLI — and the concrete recovery.
+ */
+function versionSkewMessage(detail) {
+    return (`${detail}. The running CommandMate server may be an older version than this CLI. ` +
+        `Restart it to pick up the current version: commandmate stop && commandmate start`);
+}
+/**
+ * Assert that a parsed API response contains the given required top-level fields
+ * (Issue #1357).
+ *
+ * get<T>/post<T>/patch<T> cast the parsed body with `as T` and perform no runtime
+ * validation, so a response from a stale daemon that omits a field silently
+ * degrades to `undefined` downstream (e.g. a missing roster read as an empty
+ * roster). Route responses whose fields you depend on through this guard so a
+ * missing field surfaces as an actionable version-skew error instead of a silent
+ * wrong value.
+ *
+ * @param value - Parsed response body
+ * @param fields - Required top-level field names
+ * @param context - Short endpoint/response label included in the error message
+ * @returns value, typed as T, when it is an object and every required field is present
+ * @throws ApiError when value is not an object or a required field is absent
+ */
+function assertResponseShape(value, fields, context) {
+    if (value === null || typeof value !== 'object') {
+        throw new ApiError(versionSkewMessage(`${context}: expected an object from the server`), types_1.ExitCode.UNEXPECTED_ERROR);
+    }
+    const record = value;
+    for (const field of fields) {
+        if (!(field in record)) {
+            throw new ApiError(versionSkewMessage(`${context}: the server response is missing the "${field}" field`), types_1.ExitCode.UNEXPECTED_ERROR);
+        }
+    }
+    return value;
+}
+/**
+ * Read the version the running daemon reports via GET /api/app/update-check.
+ * Issue #1359 made that field a runtime package.json read, so it reflects the
+ * daemon's actual running code rather than a build-time constant.
+ *
+ * Returns undefined when the endpoint is unreachable or omits currentVersion (an
+ * older daemon predating the field) — callers treat that as "unknown", never as
+ * an error. Never throws.
+ */
+async function fetchDaemonVersion(client) {
+    try {
+        const info = await client.get('/api/app/update-check');
+        return typeof info?.currentVersion === 'string' && info.currentVersion.length > 0
+            ? info.currentVersion
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Compare this CLI's version against the running daemon's and print a stderr
+ * warning when they differ (Issue #1357). Advisory only: never throws, and stays
+ * silent when either version is unknown. Intended to run once per CLI invocation
+ * that connects to the server, so a stale daemon serving an older API is called
+ * out before its responses are misread.
+ */
+async function warnIfVersionSkew(client) {
+    const cliVersion = (0, package_info_1.readPackageVersion)();
+    if (!cliVersion)
+        return;
+    const daemonVersion = await fetchDaemonVersion(client);
+    if (!daemonVersion || daemonVersion === cliVersion)
+        return;
+    console.error(`Warning: this CLI is version ${cliVersion} but the running CommandMate server is version ${daemonVersion}. ` +
+        `Restart the server to pick up the current version: commandmate stop && commandmate start`);
+}

package/dist/cli/utils/daemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/daemon.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAMtD,OAAO,EAA2C,SAAS,EAAE,MAAM,cAAc,CAAC;AAElF;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,YAAY,CAAC,CAAY;IAEjC;;;;OAIG;gBACS,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;IAMjD;;;;;;OAMG;IACH,eAAe,IAAI,SAAS;IAK5B;;;;;OAKG;IACG,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAgGnD;;;;OAIG;IACG,IAAI,CAAC,KAAK,GAAE,OAAe,GAAG,OAAO,CAAC,OAAO,CAAC;IA8BpD;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IA4B/C;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAInC;;OAEG;YACW,WAAW;CAiB1B"}
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/daemon.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAOtD,OAAO,EAA2C,SAAS,EAAE,MAAM,cAAc,CAAC;AAElF;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,YAAY,CAAC,CAAY;IAEjC;;;;OAIG;gBACS,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;IAMjD;;;;;;OAMG;IACH,eAAe,IAAI,SAAS;IAK5B;;;;;OAKG;IACG,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IA+GnD;;;;OAIG;IACG,IAAI,CAAC,KAAK,GAAE,OAAe,GAAG,OAAO,CAAC,OAAO,CAAC;IA8BpD;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAgD/C;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAInC;;OAEG;YACW,WAAW;CAiB1B"}

package/dist/cli/utils/daemon.js

@@ -12,6 +12,7 @@ const dotenv_1 = require("dotenv");
 const pid_manager_1 = require("./pid-manager");
 const paths_1 = require("./paths");
 const env_setup_1 = require("./env-setup");
+const package_info_1 = require("./package-info");
 const security_messages_1 = require("../config/security-messages");
 const logger_1 = require("./logger");
 const server_url_1 = require("./server-url");
@@ -116,9 +117,23 @@ class DaemonManager {
         // Unref to allow parent to exit
         child.unref();
         const pid = child.pid;
-        // Write PID file atomically
-        if (!this.pidManager.writePid(pid)) {
-            // Failed to write PID - another process may have started
+        // Issue #1354/#1355/#1358: persist the daemon's version, effective settings, and a
+        // process-identity signature so status/stop/start can report and verify the actual server,
+        // not re-derive it from a possibly-diverged .env. The port/protocol/auth recorded here are
+        // exactly what start() handed the child above.
+        const state = {
+            pid,
+            version: (0, package_info_1.readPackageVersion)(),
+            port: parseInt(port, 10),
+            bind: bindAddress,
+            protocol,
+            auth: !!env.CM_AUTH_TOKEN_HASH,
+            startedAt: new Date().toISOString(),
+            startTime: this.pidManager.getStartTime(pid) ?? undefined,
+        };
+        // Write state file atomically
+        if (!this.pidManager.writeState(state)) {
+            // Failed to write state - another process may have started
             try {
                 process.kill(pid, 'SIGTERM');
             }
@@ -162,24 +177,44 @@ class DaemonManager {
      * @returns Status object or null if no PID file
      */
     async getStatus() {
-        const pid = this.pidManager.readPid();
-        if (pid === null) {
+        const state = this.pidManager.readState();
+        if (state === null) {
             return null;
         }
         const running = this.pidManager.isProcessRunning();
         if (!running) {
             return { running: false };
         }
-        // Issue #1266: resolve with the same precedence start() hands the child. Reading
-        // process.env directly reported the shell's CM_PORT, not the port the server is on.
-        const { port, url } = (0, server_url_1.resolveServerEndpoint)(this.getEffectiveEnv());
+        let port;
+        let url;
+        if (state.port !== undefined) {
+            // Issue #1355: report the effective settings the server was started with, recorded in the
+            // state file, rather than re-deriving them from a .env that may have changed since.
+            port = state.port;
+            const protocol = state.protocol ?? 'http';
+            const bind = state.bind ?? '127.0.0.1';
+            const host = bind === '0.0.0.0' ? '127.0.0.1' : bind;
+            url = `${protocol}://${host}:${port}`;
+        }
+        else {
+            // Legacy state file (PID only, e.g. a daemon started before this change): fall back to
+            // Issue #1266's .env resolution, which gives .env precedence exactly as start() does.
+            const resolved = (0, server_url_1.resolveServerEndpoint)(this.getEffectiveEnv());
+            port = resolved.port;
+            url = resolved.url;
+        }
         // Note: Getting accurate uptime would require storing start time
         // For now, we don't track uptime
         return {
             running: true,
-            pid,
+            pid: state.pid,
             port,
             url,
+            // Issue #1354: surface the version the daemon actually runs, so status can flag a stale
+            // daemon of a different version than the installed CLI.
+            version: state.version,
+            protocol: state.protocol,
+            auth: state.auth,
         };
     }
     /**

package/dist/cli/utils/package-info.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Package Info
+ * Issue #1354: record and report the version the daemon was started with
+ *
+ * The daemon records this at launch (into the state file) and `status` reads the currently
+ * installed version to warn when a stale daemon of a different version is still running.
+ */
+/**
+ * Read the version from the installed package.json.
+ *
+ * Reads from disk rather than `require('../../package.json')` so a fresh `npm i -g` is observed
+ * without the module cache pinning the version that was current when this process started.
+ *
+ * @returns The version string, or undefined when package.json cannot be read or has no version
+ */
+export declare function readPackageVersion(): string | undefined;
+//# sourceMappingURL=package-info.d.ts.map

package/dist/cli/utils/package-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-info.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/package-info.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CASvD"}

package/dist/cli/utils/package-info.js

@@ -0,0 +1,31 @@
+"use strict";
+/**
+ * Package Info
+ * Issue #1354: record and report the version the daemon was started with
+ *
+ * The daemon records this at launch (into the state file) and `status` reads the currently
+ * installed version to warn when a stale daemon of a different version is still running.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readPackageVersion = readPackageVersion;
+const fs_1 = require("fs");
+const paths_1 = require("./paths");
+/**
+ * Read the version from the installed package.json.
+ *
+ * Reads from disk rather than `require('../../package.json')` so a fresh `npm i -g` is observed
+ * without the module cache pinning the version that was current when this process started.
+ *
+ * @returns The version string, or undefined when package.json cannot be read or has no version
+ */
+function readPackageVersion() {
+    try {
+        const parsed = JSON.parse((0, fs_1.readFileSync)((0, paths_1.getPackageJsonPath)(), 'utf-8'));
+        return typeof parsed.version === 'string' && parsed.version.length > 0
+            ? parsed.version
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/cli/utils/pid-manager.d.ts

@@ -1,42 +1,98 @@
 /**
- * PID File Manager
+ * PID / Daemon State File Manager
  * Issue #96: npm install CLI support
  * Issue #136: Phase 2 - Task 2.4 - Added factory functions for Issue number support
+ * Issue #1354/#1355/#1358: the file now records the daemon's version, effective settings, and
+ *   a process-identity signature, not just the PID. See DaemonState.
  * SF-1: SRP - Separated from daemon.ts for single responsibility
  * MF-SEC-2: TOCTOU protection with O_EXCL atomic writes
  */
+import { ProcessStartTimeReader } from './process-inspector';
+/**
+ * The daemon state persisted alongside the PID.
+ *
+ * Only `pid` is guaranteed: files written by older versions held just the PID as a bare integer,
+ * so every other field is optional and readState() tolerates their absence (backward compat).
+ */
+export interface DaemonState {
+    /** Process ID of the daemon */
+    pid: number;
+    /** Package version the daemon was started with (Issue #1354) */
+    version?: string;
+    /** Effective port the server listens on (Issue #1355) */
+    port?: number;
+    /** Effective bind address, as configured (Issue #1355) */
+    bind?: string;
+    /** Effective protocol the server speaks (Issue #1355) */
+    protocol?: 'http' | 'https';
+    /** Whether token authentication was enabled at startup (Issue #1355) */
+    auth?: boolean;
+    /** ISO timestamp of when this record was written */
+    startedAt?: string;
+    /** OS-reported process start time, used to detect PID reuse (Issue #1358) */
+    startTime?: string;
+}
 /**
  * PID file manager for daemon process tracking
  */
 export declare class PidManager {
     private readonly pidFilePath;
-    constructor(pidFilePath: string);
+    private readonly readStartTime;
     /**
-     * Check if PID file exists
+     * @param pidFilePath - Path to the state file for this server
+     * @param readStartTime - Injectable process-identity reader (Issue #1358); defaults to `ps`.
+     *   Overridden in tests to avoid spawning a real process.
+     */
+    constructor(pidFilePath: string, readStartTime?: ProcessStartTimeReader);
+    /**
+     * Check if the state file exists
      */
     exists(): boolean;
     /**
-     * Read PID from file
+     * Read the daemon state from file.
+     *
+     * Tolerates the legacy format (a bare integer PID) by returning `{ pid }`, so a state file
+     * written by an older running daemon is still understood after a CLI upgrade (Issue #1354).
+     *
+     * @returns The daemon state, or null when the file is missing or invalid
+     */
+    readState(): DaemonState | null;
+    /**
+     * Read PID from the state file
      * @returns PID number or null if file doesn't exist or is invalid
      */
     readPid(): number | null;
     /**
-     * Write PID to file atomically
+     * Write the daemon state to file atomically
      * MF-SEC-2: Uses O_EXCL to prevent TOCTOU race conditions
      *
      * @returns true if successful, false if file already exists
      * @throws Error for other filesystem errors
      */
-    writePid(pid: number): boolean;
+    writeState(state: DaemonState): boolean;
     /**
-     * Remove PID file
+     * Read a live process's start-time signature via the injected reader.
+     * Used by start() to record the daemon's identity at launch (Issue #1358).
+     *
+     * @param pid - Process ID to inspect
+     * @returns The start-time signature, or null when it cannot be read
+     */
+    getStartTime(pid: number): string | null;
+    /**
+     * Remove the state file
      */
     removePid(): void;
     /**
-     * Check if the process recorded in PID file is running
+     * Check if the process recorded in the state file is the daemon we started.
      * NTH-1: ISP - Lightweight process check API
      *
-     * @returns true if process is running, false otherwise
+     * Issue #1358: `process.kill(pid, 0)` alone only proves the PID is in use. When the state
+     * records a start-time signature, the live process's is compared to catch PID reuse; a
+     * mismatch is treated as not-running so stop() never kills, and start() never defers to, an
+     * unrelated process. EPERM (the PID was reused by a process we don't own) is likewise treated
+     * as stale rather than thrown, so a reused PID no longer crashes the command.
+     *
+     * @returns true if the daemon is running, false otherwise
      */
     isProcessRunning(): boolean;
 }

package/dist/cli/utils/pid-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pid-manager.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/pid-manager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH;;GAEG;AACH,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,MAAM;IAEhD;;OAEG;IACH,MAAM,IAAI,OAAO;IAIjB;;;OAGG;IACH,OAAO,IAAI,MAAM,GAAG,IAAI;IAmBxB;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAwB9B;;OAEG;IACH,SAAS,IAAI,IAAI;IAUjB;;;;;OAKG;IACH,gBAAgB,IAAI,OAAO;CAmB5B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,UAAU,CAI7D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAEjE"}
+{"version":3,"file":"pid-manager.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/pid-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAYH,OAAO,EAAuB,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAElF;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,+BAA+B;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,wEAAwE;IACxE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,UAAU;IAOnB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAPhC;;;;OAIG;gBAEgB,WAAW,EAAE,MAAM,EACnB,aAAa,GAAE,sBAA4C;IAG9E;;OAEG;IACH,MAAM,IAAI,OAAO;IAIjB;;;;;;;OAOG;IACH,SAAS,IAAI,WAAW,GAAG,IAAI;IA2B/B;;;OAGG;IACH,OAAO,IAAI,MAAM,GAAG,IAAI;IAIxB;;;;;;OAMG;IACH,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO;IAwBvC;;;;;;OAMG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIxC;;OAEG;IACH,SAAS,IAAI,IAAI;IAUjB;;;;;;;;;;;OAWG;IACH,gBAAgB,IAAI,OAAO;CAoC5B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,UAAU,CAI7D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAEjE"}