maqcli 0.6.5 → 0.6.6

package/dist/core/launcher.js

@@ -353,7 +353,7 @@ async function connectMobile(rl) {
 async function launchUi(authKey) {
     // Reuse the daemon; open its landing page. Import lazily to avoid a cycle.
     const { createDaemon } = await import("../server/daemon.js");
-    const daemon = createDaemon({ token: authKey, version: "0.6.5" });
+    const daemon = createDaemon({ token: authKey, version: "0.6.6" });
     try {
         const { host, port } = await daemon.listen();
         const url = `http://${host}:${port}/`;

package/dist/core/update.d.ts

@@ -86,6 +86,8 @@ export declare function detachedInstallCommand(version: string, logPath: string,
     args: string[];
     scriptPath: string;
     scriptContent: string;
+    cleanupPath?: string;
+    cleanupContent?: string;
 };
 /**
  * Launch the update fully detached and return immediately — the caller

package/dist/core/update.js

@@ -117,8 +117,24 @@ export function detachedInstallCommand(version, logPath, platform = process.plat
     const pkg = `maqcli@${version}`;
     if (platform === "win32") {
         const scriptPath = join(tmpdir(), `maq-update-${Date.now()}.bat`);
-        const scriptContent = ["@echo off", `npm install -g ${pkg} > "${logPath}" 2>&1`, `start "" /min cmd.exe /c del "%~f0"`].join("\r\n");
-        return { cmd: "cmd.exe", args: ["/c", "start", "", "/min", scriptPath], scriptPath, scriptContent };
+        const cleanupPath = join(tmpdir(), `maq-update-cleanup-${Date.now()}.bat`);
+        // The install script does NOT try to delete itself — a .bat can't
+        // reliably remove the file cmd.exe is actively interpreting. Instead it
+        // launches this second, separate cleanup script (detached, its own
+        // process) once npm finishes; THAT script deletes both files after a
+        // short delay, by which point neither is open by anything.
+        const scriptContent = [
+            "@echo off",
+            `npm install -g ${pkg} > "${logPath}" 2>&1`,
+            `start "" /min "${cleanupPath}"`,
+        ].join("\r\n");
+        const cleanupContent = [
+            "@echo off",
+            "ping -n 2 127.0.0.1 >nul",
+            `del "${scriptPath}"`,
+            `del "%~f0"`,
+        ].join("\r\n");
+        return { cmd: "cmd.exe", args: ["/c", "start", "", "/min", scriptPath], scriptPath, scriptContent, cleanupPath, cleanupContent };
     }
     const scriptPath = join(tmpdir(), `maq-update-${Date.now()}.sh`);
     const scriptContent = ["#!/bin/sh", `npm install -g ${pkg} > '${logPath}' 2>&1`, `rm -f "$0"`].join("\n");
@@ -132,8 +148,10 @@ export function detachedInstallCommand(version, logPath, platform = process.plat
  * `writer` is injectable so tests don't touch the real filesystem either.
  */
 export function launchDetachedUpdate(version, logPath, spawner = spawn, writer = (path, content) => writeFileSync(path, content, "utf8")) {
-    const { cmd, args, scriptPath, scriptContent } = detachedInstallCommand(version, logPath);
+    const { cmd, args, scriptPath, scriptContent, cleanupPath, cleanupContent } = detachedInstallCommand(version, logPath);
     writer(scriptPath, scriptContent);
+    if (cleanupPath && cleanupContent)
+        writer(cleanupPath, cleanupContent);
     if (process.platform !== "win32") {
         try {
             chmodSync(scriptPath, 0o755);

package/dist/index.js

@@ -46,7 +46,7 @@ import { runOrchestration } from "./core/orchestrator.js";
 import { performUpdate, installedGlobalVersion } from "./core/update.js";
 import { checkProtectedPath, scanForInjection, securityLog, securityRules, } from "./core/security.js";
 import { readFileSync, statSync } from "node:fs";
-const VERSION = "0.6.5";
+const VERSION = "0.6.6";
 async function main(argv) {
     const [command, ...rest] = argv;
     switch (command) {

package/dist/server/daemon.js

@@ -52,7 +52,7 @@ export function createDaemon(opts = {}) {
     const host = opts.host ?? process.env.MAQ_HOST ?? "127.0.0.1";
     const port = opts.port ?? Number(process.env.MAQ_PORT ?? 7717);
     const token = opts.token ?? process.env.MAQ_TOKEN ?? generateToken();
-    const version = opts.version ?? "0.6.5";
+    const version = opts.version ?? "0.6.6";
     const corsOrigin = opts.corsOrigin ?? process.env.MAQ_CORS_ORIGIN;
     const registry = opts.registry ?? new SessionRegistry();
     const interactive = new InteractiveRegistry();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maqcli",
-  "version": "0.6.5",
+  "version": "0.6.6",
   "description": "MAQ master orchestrator — a token-efficient, agent-agnostic supervisor CLI that sits on top of any worker CLI (AI or not) via a Scout -> Plan -> Execute -> Verify pipeline.",
   "type": "module",
   "bin": {