poltertab 1.5.0-beta.1 → 1.5.0

package/bin/doctor.js

@@ -119,7 +119,7 @@ async function run(argv = []) {
     todo.push(
       `${c.red("The extension is older than the server.")} Browser commands can fail\n` +
         `    in ways that look like a missing element. Download and reload it:\n` +
-        `    ${c.cyan(updates.EXTENSION_URL)}`,
+        `    ${c.cyan(updates.extensionUrl(sk.server))}`,
     );
   } else if (sk && sk.kind === "server-behind") {
     todo.push(
@@ -131,7 +131,7 @@ async function run(argv = []) {
     todo.push(
       `PolterTab ${c.bold(check.latest)} is available:\n` +
         `    ${c.cyan("npm update -g poltertab")}\n` +
-        `    ${c.dim("then reload the extension from")} ${c.cyan(updates.EXTENSION_URL)}`,
+        `    ${c.dim("then reload the extension from")} ${c.cyan(updates.extensionUrl(check.latest))}`,
     );
   }
   if (!listening) {
@@ -150,7 +150,7 @@ async function run(argv = []) {
     console.log(
       `\n  ${c.yellow("Nothing wrong found, but the extension has never checked in.")}\n` +
         `  ${c.dim("Install it, open a page, and run doctor again to compare versions:")}\n` +
-        `  ${c.cyan(updates.EXTENSION_URL)}`,
+        `  ${c.cyan(updates.extensionUrl(own))}`,
     );
   } else {
     console.log(`\n  ${c.green("Nothing to do — both halves agree and are current.")}`);

package/bin/setup.js

@@ -24,7 +24,16 @@ const SNIPPET_SRC = path.join(PKG, "assets", "claude-md-snippet.md");
 
 // Bump to the Chrome Web Store listing once it clears review. The GitHub
 // release stays valid either way, so this is a one-line switch.
-const EXTENSION_URL = "https://github.com/abhinav162/poltertab/releases/latest";
+//
+// Pinned to the release for the version being installed, not "latest". Someone
+// who installed a prerelease (npm i -g poltertab@beta) and followed a /latest
+// link would get the previous stable extension, because GitHub's
+// /releases/latest skips prereleases — a fresh, correctly-followed setup that
+// lands in version skew.
+const updates = require("../mcp-server/update-check.js");
+const EXTENSION_URL = updates.extensionUrl(
+  require("../package.json").version,
+);
 
 // Identifies our section in a CLAUDE.md we do not own. Presence means
 // "already installed" — this is the whole idempotency check for step 2.

package/mcp-server/update-check.js

@@ -196,7 +196,29 @@ function skew(serverVersion, extensionVersion) {
 
 // --- the one-line notice ---------------------------------------------------
 
-const EXTENSION_URL = "https://github.com/abhinav162/poltertab/releases/latest";
+const RELEASES = "https://github.com/abhinav162/poltertab/releases";
+
+// Which extension build to send someone to.
+//
+// It must match the server that drives it: mismatched halves are the exact
+// failure the rest of this module exists to detect, so a link that manufactures
+// one is worse than no link. GitHub's /releases/latest deliberately skips
+// prereleases — so telling a 1.5.0-beta.1 install to "get the latest release"
+// hands it a 1.4.0 extension, and the skew warning then fires on a fresh
+// install that followed the instructions exactly. Worse, that was also the
+// remediation advice printed *for* skew, so the fix re-created the fault.
+//
+// Ask for the release matching the version in hand. Callers pass whichever
+// version is right for what they are saying: the running server for "your
+// halves disagree", the version being upgraded to for "an update is available".
+// /releases/latest survives only as the fallback for a build whose version we
+// cannot parse — a dev checkout — where a tag URL would 404.
+function extensionUrl(version) {
+  const v = String(version || "")
+    .trim()
+    .replace(/^v/, "");
+  return parse(v) ? `${RELEASES}/tag/v${v}` : `${RELEASES}/latest`;
+}
 
 // Surfaced once per server process on a tool response, because it is the only
 // channel the user reliably reads: doctor and the popup both require them to
@@ -207,7 +229,7 @@ function notice({ current, latest, updateAvailable, skew: sk }) {
     parts.push(
       `The Chrome extension (${sk.extension}) is older than this server (${sk.server}) — ` +
         `browser commands may fail in ways that look like missing elements. ` +
-        `Reload it from ${EXTENSION_URL}`,
+        `Reload it from ${extensionUrl(sk.server)}`,
     );
   } else if (sk && sk.kind === "server-behind") {
     parts.push(
@@ -218,7 +240,8 @@ function notice({ current, latest, updateAvailable, skew: sk }) {
   if (updateAvailable && latest) {
     parts.push(
       `PolterTab ${latest} is available (running ${current}). ` +
-        `Update with: npm update -g poltertab && poltertab setup`,
+        `Update with: npm update -g poltertab && poltertab setup, ` +
+        `then reload the extension from ${extensionUrl(latest)}`,
     );
   }
   if (!parts.length) return null;
@@ -236,7 +259,7 @@ module.exports = {
   skew,
   notice,
   disabled,
-  EXTENSION_URL,
+  extensionUrl,
   CACHE_FILE,
   STATE_FILE,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "poltertab",
-  "version": "1.5.0-beta.1",
+  "version": "1.5.0",
   "description": "Let any AI assistant drive and scrape your existing Chrome profile — no headless browser, no complex setup.",
   "bin": {
     "poltertab": "./bin/poltertab.js"