fullcourtdefense-cli 1.24.1 → 1.24.2

package/dist/commands/daemon.d.ts

@@ -32,6 +32,7 @@ export declare function discoverSweepCredentialEnv(credentials?: {
     shieldKey?: string;
     apiUrl?: string;
 }): Record<string, string>;
+export declare function cliVersion(): string | undefined;
 export type TaskLogonType = 'S4U' | 'InteractiveToken';
 /** Fully-qualified current user (DOMAIN\\user) for the task principal. */
 export declare function taskUserId(): string;

package/dist/commands/daemon.js

@@ -36,6 +36,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.daemonDiscoverSweepArgs = daemonDiscoverSweepArgs;
 exports.summarizeDiscoverStderr = summarizeDiscoverStderr;
 exports.discoverSweepCredentialEnv = discoverSweepCredentialEnv;
+exports.cliVersion = cliVersion;
 exports.taskUserId = taskUserId;
 exports.taskLocalTimestamp = taskLocalTimestamp;
 exports.buildTaskXml = buildTaskXml;
@@ -383,7 +384,15 @@ async function runDaemon(args, config) {
     // Crash forensics: was the previous daemon killed without a clean shutdown?
     const postmortem = (0, daemonForensics_1.recordDaemonStart)({ version: cliVersion(), isPidAlive });
     if (postmortem) {
-        log(`Previous daemon (v${postmortem.version || '?'}) died UNCLEANLY — last alive ${postmortem.lastAliveAt || 'unknown'}, no shutdown recorded. Likely killed externally (EDR/AV, OOM, or forced termination). Post-mortem recorded; reporting upstream.`);
+        const current = cliVersion();
+        if (postmortem.version && current && postmortem.version !== current) {
+            // The silent updater stops the old daemon forcefully — an unclean death
+            // of an OLDER version is the upgrade itself, not something to alarm on.
+            log(`Previous daemon (v${postmortem.version}) was replaced by this upgrade to v${current} — the updater's forced stop is expected, not a crash. Post-mortem recorded for the timeline.`);
+        }
+        else {
+            log(`Previous daemon (v${postmortem.version || '?'}) died UNCLEANLY — last alive ${postmortem.lastAliveAt || 'unknown'}, no shutdown recorded. Likely killed externally (EDR/AV, OOM, or forced termination). Post-mortem recorded; reporting upstream.`);
+        }
     }
     // A fresh daemon runs right after every successful MSI update: if a
     // previously-reported update loop has been resolved by this version, clear

package/dist/envDiagnostics.d.ts

@@ -37,6 +37,13 @@ export declare function collectEnvironmentDiagnostics(options?: {
 }): Promise<EnvironmentDiagnostics>;
 /** One-line human summary for the onboarding journal / MSI screen / daemon log. */
 export declare function summarizeEnvironmentDiagnostics(diag: EnvironmentDiagnostics): string;
+/**
+ * The silent updater stops the old daemon FORCEFULLY, so an upgrade always
+ * leaves an "unclean death" post-mortem — of the OLD version. When the dead
+ * daemon's version differs from the CLI running now, that death was the
+ * upgrade replacing it: routine, expected, and not a health problem.
+ */
+export declare function crashLooksLikeUpgradeRestart(crash: DaemonPostmortem): boolean;
 /**
  * Verdict for the onboarding journal: healthy unless something on this
  * machine is actively interfering (daemon killed, PowerShell blocked, or a

package/dist/envDiagnostics.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.collectEnvironmentDiagnostics = collectEnvironmentDiagnostics;
 exports.summarizeEnvironmentDiagnostics = summarizeEnvironmentDiagnostics;
+exports.crashLooksLikeUpgradeRestart = crashLooksLikeUpgradeRestart;
 exports.environmentLooksHealthy = environmentLooksHealthy;
 const config_1 = require("./config");
 const daemon_1 = require("./commands/daemon");
@@ -77,10 +78,23 @@ function summarizeEnvironmentDiagnostics(diag) {
         parts.push(diag.daemonAlive ? 'daemon alive' : 'daemon not running');
     }
     parts.push(diag.watchdogTaskInstalled ? 'watchdog installed' : 'watchdog task missing');
-    if (diag.lastCrash)
-        parts.push(`previous daemon died uncleanly at ${diag.lastCrash.lastAliveAt || 'unknown time'}`);
+    if (diag.lastCrash) {
+        parts.push(crashLooksLikeUpgradeRestart(diag.lastCrash)
+            ? `previous daemon (v${diag.lastCrash.version}) was replaced by a CLI upgrade — routine, not a crash`
+            : `previous daemon died uncleanly at ${diag.lastCrash.lastAliveAt || 'unknown time'}`);
+    }
     return parts.join('; ');
 }
+/**
+ * The silent updater stops the old daemon FORCEFULLY, so an upgrade always
+ * leaves an "unclean death" post-mortem — of the OLD version. When the dead
+ * daemon's version differs from the CLI running now, that death was the
+ * upgrade replacing it: routine, expected, and not a health problem.
+ */
+function crashLooksLikeUpgradeRestart(crash) {
+    const current = (0, daemon_1.cliVersion)();
+    return Boolean(crash.version && current && crash.version !== current);
+}
 /**
  * Verdict for the onboarding journal: healthy unless something on this
  * machine is actively interfering (daemon killed, PowerShell blocked, or a
@@ -92,7 +106,9 @@ function environmentLooksHealthy(diag) {
         return false;
     if (diag.powershellSpawnOk === false)
         return false;
-    if (diag.lastCrash)
+    // Upgrade restarts are not crashes — only a same-version unclean death
+    // (something actually killed the daemon) marks the environment unhealthy.
+    if (diag.lastCrash && !crashLooksLikeUpgradeRestart(diag.lastCrash))
         return false;
     return true;
 }

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.24.1"
+  "version": "1.24.2"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.24.1",
+  "version": "1.24.2",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {