@indigoai-us/hq-cli 5.292.0 → 5.294.0

package/dist/utils/self-update.js

@@ -63,7 +63,7 @@ import * as path from "node:path";
 import semver from "semver";
 import chalk from "chalk";
 import { CLI_NAME, CLI_VERSION } from "../cli-version.js";
-import { buildBunInstallArgv, buildPnpmInstallArgv, buildPrefixedInstallArgv, buildSpawnPlan, checkUpdateConvergence, derivePnpmHome, isBunManagedPackageDir, isLocalDependencyInstall, isPnpmManagedPackageDir, isPrefixWritable, nonWritablePrefixNote, openInstallOutput, pnpmUpdateEnv, resolveRunningInstall, runUpdateCommand, runSupervisedUpdateCommand, } from "./version-gate.js";
+import { buildBunInstallArgv, buildPnpmInstallArgv, buildPrefixedInstallArgv, buildSpawnPlan, checkUpdateConvergence, derivePnpmHome, detachUpdateSupervisor, isBunManagedPackageDir, isLocalDependencyInstall, isPnpmManagedPackageDir, isPrefixWritable, nonWritablePrefixNote, openInstallOutput, pnpmUpdateEnv, resolveRunningInstall, runUpdateCommand, runSupervisedUpdateCommand, } from "./version-gate.js";
 import { canStageInstall, stagedNpmInstall } from "./staged-install.js";
 import { acquireUpdateLock as acquireSharedUpdateLock } from "./update-lock.js";
 import { markLatestIneffective } from "./version-check.js";
@@ -420,6 +420,9 @@ async function updateAndReexec(argv, flavor, known, deps) {
     if (!releaseLock)
         return { action: "skipped", latest };
     const renamePath = deps.renamePath ?? fs.renameSync;
+    // The in-place update moves the package aside, and the installer's
+    // supervisor ships inside it, so run the installer through a copy.
+    const supervisor = staged ? null : (deps.detachSupervisor ?? detachUpdateSupervisor)();
     // The staged install keeps the running package in place until the swap and
     // restores it itself, so it takes no snapshot.
     const installSnapshot = staged ? null : snapshotInstall(install, renamePath);
@@ -467,6 +470,7 @@ async function updateAndReexec(argv, flavor, known, deps) {
         throw error;
     }
     finally {
+        supervisor?.dispose();
         releaseLock();
     }
     if (!result.ok) {

package/dist/utils/version-gate.d.ts

@@ -284,6 +284,21 @@ export { buildSpawnPlan, quoteForWindowsShell };
  */
 export declare function inOwnProcessGroup<T extends object>(options: T): T;
 declare function updateTimeoutMs(env?: NodeJS.ProcessEnv): number;
+/** The supervisor script the next install runs under. */
+export declare function updateSupervisorPath(): string;
+export interface DetachedUpdateSupervisor {
+    path: string;
+    dispose(): void;
+}
+/**
+ * Copies the supervisor to a temp dir and runs installs through the copy until
+ * disposed. The in-place self-update moves the whole hq-cli package aside
+ * before it starts the installer, and the supervisor ships inside that package
+ * (5.290.0-5.292.0 failed every npm global self-update with MODULE_NOT_FOUND).
+ * The script needs only Node builtins, so the copy runs on its own. Returns
+ * null when the copy cannot be made; the caller then keeps the bundled path.
+ */
+export declare function detachUpdateSupervisor(): DetachedUpdateSupervisor | null;
 /**
  * Where an install's output goes — the other half of surviving a killed parent.
  *

package/dist/utils/version-gate.js

@@ -30,7 +30,7 @@
 import { spawnSync } from "node:child_process";
 import { installPathCompatibilityEnabled } from "../lib/install-path-compatibility-flag.js";
 import { buildSpawnPlan, quoteForWindowsShell } from "./windows-spawn.js";
-import { accessSync, closeSync, constants as fsConstants, existsSync, mkdtempSync, openSync, readdirSync, realpathSync, readFileSync, rmSync, } from "node:fs";
+import { accessSync, closeSync, constants as fsConstants, copyFileSync, existsSync, mkdtempSync, openSync, readdirSync, realpathSync, readFileSync, rmSync, } from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
@@ -674,6 +674,50 @@ function updateTimeoutMs(env = process.env) {
  * compiled module for production and is directly runnable from source tests.
  */
 const UPDATE_COMMAND_SUPERVISOR = fileURLToPath(new URL("./update-command-supervisor.cjs", import.meta.url));
+/** Set while a self-update runs the installer through a copy of the supervisor. */
+let detachedSupervisor = null;
+/** The supervisor script the next install runs under. */
+export function updateSupervisorPath() {
+    return detachedSupervisor ?? UPDATE_COMMAND_SUPERVISOR;
+}
+/**
+ * Copies the supervisor to a temp dir and runs installs through the copy until
+ * disposed. The in-place self-update moves the whole hq-cli package aside
+ * before it starts the installer, and the supervisor ships inside that package
+ * (5.290.0-5.292.0 failed every npm global self-update with MODULE_NOT_FOUND).
+ * The script needs only Node builtins, so the copy runs on its own. Returns
+ * null when the copy cannot be made; the caller then keeps the bundled path.
+ */
+export function detachUpdateSupervisor() {
+    if (detachedSupervisor)
+        return null;
+    let dir;
+    try {
+        dir = mkdtempSync(path.join(os.tmpdir(), "hq-cli-update-supervisor-"));
+        const copy = path.join(dir, "update-command-supervisor.cjs");
+        copyFileSync(UPDATE_COMMAND_SUPERVISOR, copy);
+        detachedSupervisor = copy;
+        const tempDir = dir;
+        return {
+            path: copy,
+            dispose: () => {
+                if (detachedSupervisor === copy)
+                    detachedSupervisor = null;
+                try {
+                    rmSync(tempDir, { recursive: true, force: true });
+                }
+                catch {
+                    // Best-effort cleanup of a temp dir.
+                }
+            },
+        };
+    }
+    catch {
+        if (dir)
+            rmSync(dir, { recursive: true, force: true });
+        return null;
+    }
+}
 function readSupervisorSpawnError(errorMarker) {
     try {
         const value = JSON.parse(readFileSync(errorMarker, "utf-8"));
@@ -754,7 +798,7 @@ export function runSupervisedUpdateCommand(cmd, args, output, env) {
         // waits briefly, sends KILL to survivors, and waits for its direct child so
         // the completed result leaves no zombie behind.
         const result = spawnSync(process.execPath, [
-            UPDATE_COMMAND_SUPERVISOR,
+            updateSupervisorPath(),
             JSON.stringify({
                 cmd: plan.cmd,
                 args: plan.args,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.292.0",
+  "version": "5.294.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {