maqcli 0.8.0 → 0.9.0

package/dist/core/launcher.js

@@ -353,7 +353,7 @@ async function connectMobile(rl) {
 async function launchUi(authKey) {
     // Reuse the daemon; open its landing page. Import lazily to avoid a cycle.
     const { createDaemon } = await import("../server/daemon.js");
-    const daemon = createDaemon({ token: authKey, version: "0.8.0" });
+    const daemon = createDaemon({ token: authKey, version: "0.9.0" });
     try {
         const { host, port } = await daemon.listen();
         const url = `http://${host}:${port}/`;

package/dist/index.js

@@ -46,7 +46,7 @@ import { runOrchestration } from "./core/orchestrator.js";
 import { performUpdate, installedGlobalVersion } from "./core/update.js";
 import { checkProtectedPath, scanForInjection, securityLog, securityRules, } from "./core/security.js";
 import { readFileSync, statSync } from "node:fs";
-const VERSION = "0.8.0";
+const VERSION = "0.9.0";
 async function main(argv) {
     const [command, ...rest] = argv;
     switch (command) {

package/dist/server/daemon.js

@@ -52,7 +52,7 @@ export function createDaemon(opts = {}) {
     const host = opts.host ?? process.env.MAQ_HOST ?? "127.0.0.1";
     const port = opts.port ?? Number(process.env.MAQ_PORT ?? 7717);
     const token = opts.token ?? process.env.MAQ_TOKEN ?? generateToken();
-    const version = opts.version ?? "0.8.0";
+    const version = opts.version ?? "0.9.0";
     const corsOrigin = opts.corsOrigin ?? process.env.MAQ_CORS_ORIGIN;
     const registry = opts.registry ?? new SessionRegistry();
     const interactive = new InteractiveRegistry();

package/dist/server/webui.d.ts

@@ -1,26 +1,28 @@
 /**
- * webui.ts — the self-contained control surface the daemon serves at `/app`
- * (and `/`). Zero build step, zero dependencies: one HTML document with
- * inline CSS + vanilla JS. It renders the SAME normalized event stream the
+ * webui.ts — the self-contained "Megalodon" control surface the daemon serves
+ * at `/app` (and `/`). Zero build step, zero dependencies: one HTML document
+ * with inline CSS + vanilla JS. It renders the SAME normalized event stream the
  * mobile app consumes, so there is no second source of truth.
  *
- * Design system: dark OLED canvas, two elevation surfaces, one signal accent
- * (teal — "alive/running", not the generic AI purple/blue gradient). Type:
- * Space Grotesk for the brand mark + section labels (used sparingly), Inter
- * for UI/body, JetBrains Mono for the console/data surfaces. Signature
- * element: a live depth-of-work TIMELINE — phases render as connected nodes
- * that fill in as work progresses, with orchestration rounds (parallel/loop/
- * safe) nesting as a sub-rail beneath the active phase — replacing static
- * chips with something that actually shows depth of work over time.
+ * This is a from-spec rebuild (maq_cli_ui_spec Phases 4-6). The recommended
+ * SPA stack (React + Monaco + Framer + react-resizable-panels) is deliberately
+ * NOT used: the daemon ships one static asset with no build pipeline, so the
+ * same UX is delivered dependency-free —
+ *   - real drag-resizable 3-panel shell (custom pointer-drag splitters)
+ *   - universal preview: JSON tree / code+line-numbers / markdown / sandboxed
+ *     HTML / images (replaces Monaco + react-markdown + react-json-view)
+ *   - send button with a toggle-up mode picker popover (Single/Parallel/Loop/
+ *     Safe), mode icon on the button face, selection persisted
+ *   - orchestration visualizations derived from the event stream (parallel
+ *     round dashboard / loop progress / safe split→merge→validate rail)
+ *   - custom animated cursor follower + micro-interactions (CSS, not Framer)
  *
- * Layout: a named-grid-area app shell. Sidebar collapses to a drawer under
- * 900px; the preview panel becomes a full-screen sheet under 1200px; the
- * composer sticks to the bottom on narrow viewports. Motion is 150/220ms
- * ease-out and fully disabled under prefers-reduced-motion.
+ * Theme (Megalodon): deep matte black base, controlled blue-white accents (not
+ * neon), sparse red for status/danger, white primary text, no gradients except
+ * intentional depth cues. Everything references CSS custom-property tokens.
  *
  * Auth: the daemon requires a Bearer token for /v1/*. The page reads it from
- * ?token=… or a prompt, keeps it in memory only, and streams SSE via fetch +
- * ReadableStream (so the token rides in the Authorization header, never the
- * URL).
+ * ?key= / ?token= or a prompt, keeps it in memory only, and streams SSE via
+ * fetch + ReadableStream (token in the Authorization header, never the URL).
  */
 export declare function webuiHtml(version: string): string;