squared 0.7.6 → 0.8.0

data/lib/squared/workspace/project/node.rb

@@ -6,15 +6,18 @@ module Squared
       class Node < Git
         OPT_NPM = {
           common: %w[dry-run=!? force=!? loglevel=b include-workspace-root=!? workspaces=!? w|workspace=v].freeze,
+          common_scripts: %w[dangerously-allow-all-scripts=!? strict-allow-scripts=!? allow-scripts=q].freeze,
           install: %w[package-lock-only=!? prefer-dedupe=!? E|save-exact=!? before=q cpu=b libc=b os=b].freeze,
           install_a: %w[audit=! bin-links=! foreground-scripts=!? fund=! ignore-scripts=!? install-links=!?
                         package-lock=! strict-peer-deps=!? include=b install-strategy=b omit=b].freeze,
           install_b: %w[no-save B|save-bundle D|save-dev O|save-optional save-peer P|save-prod g|global=!?
                         S|save=!?].freeze,
+          install_c: %w[allow-directory=b? allow-file=b? allow-git=b? allow-remote=b?].freeze,
           run: %w[foreground-scripts=!? if-present=!? ignore-scripts=!? script-shell=p].freeze,
           exec: %w[c|call=q package=b].freeze,
           pack: %w[ignore-scripts=!? json=!? pack-destination=p].freeze,
           rebuild: %w[bin-links=! foreground-scripts=!? global=!? ignore-scripts=!? install-links=!?].freeze,
+          'approve-scripts': %w[a|all allow-scripts-pending allow-scripts-pin=!? no-allow-scripts-pin json].freeze,
           no: {
             install: %w[audit bin-links fund package-lock].freeze
           }.freeze
@@ -26,15 +29,16 @@ module Squared
           common_filter: %w[fail-if-no-match changed-files-ignore-pattern=q filter=q filter-prod=q
                             test-pattern=q].freeze,
           install: %w[fix-lockfile force ignore-pnpmfile ignore-workspace lockfile-only merge-git-branch-lockfiles
-                      optimistic-repeat-install no-hoist no-lockfile no-optional prefer-frozen-lockfile resolution-only
-                      shamefully-hoist side-effects-cache side-effects-cache-readonly s|silent strict-peer-dependencies
-                      use-running-store-server use-store-server child-concurrency=i hoist-pattern=q lockfile-dir=p
-                      modules-dir=p network-concurrency=i package-import-method=b public-hoist-pattern=q
-                      reporter=b].freeze,
+                      optimistic-repeat-install no-hoist no-lockfile no-optional no-runtime prefer-frozen-lockfile
+                      resolution-only shamefully-hoist side-effects-cache side-effects-cache-readonly s|silent
+                      strict-peer-dependencies trust-lockfile use-running-store-server use-store-server
+                      child-concurrency=i hoist-pattern=q lockfile-dir=p modules-dir=p network-concurrency=i
+                      package-import-method=b public-hoist-pattern=q reporter=b trust-policy=b trust-policy-exclude=q
+                      trust-policy-ignore-after=i].freeze,
           install_a: %w[dangerously-allow-all-builds global-dir ignore-scripts offline prefer-offline store-dir=p
                         virtual-store-dir=p].freeze,
           install_b: %w[D|dev no-optional P|prod].freeze,
-          add: %w[allow-build config g|global save-catalog D|save-dev O|save-optional save-peer P|save-prod
+          add: %w[allow-build config g|global registry=q save-catalog D|save-dev O|save-optional save-peer P|save-prod
                   save-catalog-name=b].freeze,
           update: %w[g|global i|interactive L|latest depth=i].freeze,
           dedupe: %w[check].freeze,
@@ -153,15 +157,15 @@ module Squared
         end
 
         subtasks({
-          'package' => %i[install add update dedupe rebuild reinstall].freeze,
+          'package' => %i[install add update dedupe approve deny rebuild reinstall].freeze,
           'outdated' => %i[major minor patch].freeze,
-          'bump' => %i[version major minor patch].freeze,
-          'publish' => %i[latest tag verify].freeze,
+          'publish' => %i[latest tag stage verify].freeze,
           'tsc' => %i[project build].freeze,
           'add' => nil,
           'run' => nil,
           'exec' => nil,
           'nvm' => nil,
+          'bump' => nil,
           'pack' => nil
         })
 
@@ -198,7 +202,7 @@ module Squared
                 when 'add'
                   format_desc action, nil, 'save?=[=-]prod|dev|optional|peer|bundle,(-)name+'
                   task action, [:save] do |_, args|
-                    packages = if args.save =~ /\A([=-]*)?(prod|dev|optional|peer|bundle)\z/
+                    packages = if args.save =~ /^([=-]*)(prod|dev|optional|peer|bundle)$/
                                  save = [$2, $1.include?('='), $1.include?('-')]
                                  args.extras
                                else
@@ -221,7 +225,7 @@ module Squared
                         if (n, extra = indexitem(val))
                           if (item = list[n.pred])
                             run compose([item.first, extra].compact.join(' '), script: true)
-                          elsif exception
+                          elsif exception?
                             indexerror n, list
                           else
                             log.warn "run script #{n} of #{list.size}".subhint('out of range')
@@ -257,7 +261,7 @@ module Squared
                               list = pnpmopts :exec, :common_filter
                               session 'pnpm', pre.call('r'), pre.call('c'), 'exec'
                             else
-                              list = npmopts :exec
+                              list = npmopts :exec, :common_scripts
                               session 'npm', 'exec'
                             end
                       op = OptionPartition.new(args, list, cmd, project: self, strict: strict?)
@@ -293,6 +297,18 @@ module Squared
                     args.unshift(path.call('nvm-exec'))
                     run(args.join(' '), { 'NODE_VERSION' => version }, banner: false, from: :nvm)
                   end
+                when 'bump'
+                  format_desc action, nil, 'version|pre?{major,minor,patch}|prerelease'
+                  task action, [:version] do |_, args|
+                    version = param_guard(action, 'to', args: args, key: :version)
+                    if version.match?(/^((pre)?(major|minor|patch))|prerelease$/)
+                      flag = version.to_sym
+                      version = nil
+                    else
+                      flag = :version
+                    end
+                    bump flag, version
+                  end
                 when 'pack'
                   format_desc action, nil, 'opts*'
                   task action do |_, args|
@@ -317,21 +333,6 @@ module Squared
                       task flag do |_, args|
                         package flag, args.to_a
                       end
-                    when 'bump'
-                      break unless version
-
-                      if flag == :version
-                        format_desc action, flag, 'version'
-                        task flag, [:version] do |_, args|
-                          version = param_guard(action, flag, args: args, key: :version)
-                          bump flag, version
-                        end
-                      else
-                        format_desc action, flag
-                        task flag do
-                          bump flag
-                        end
-                      end
                     when 'publish'
                       if flag == :verify
                         format_desc action, flag, 'version?,ext*'
@@ -344,22 +345,70 @@ module Squared
                           publish(flag, version: version, ext: ext)
                         end
                       else
-                        format_desc(action, flag, 'otp?,p/ublic|r/estricted?,d/ry-run?',
-                                    before: ('tag' if flag == :tag))
+                        format_desc(action, flag,
+                                    "otp?,#{'registry?,' if flag == :stage}p/ublic|r/estricted?,d/ry-run?",
+                                    before: case flag
+                                            when :tag then 'tag'
+                                            when :stage then '{select=view,approve,reject,download}|publish=tag?'
+                                            end)
                         task flag do |_, args|
                           args = args.to_a
-                          access = if has_value!(args, 'r', 'restricted')
-                                     'restricted'
-                                   elsif has_value!(args, 'p', 'public')
-                                     'public'
-                                   end
-                          dryrun = has_value!(args, 'd', 'dry-run')
-                          if flag == :latest
+                          access = nil
+                          dryrun = nil
+                          stage = []
+                          parse = lambda do
+                            access = if has_value!(args, 'r', 'restricted')
+                                       'restricted'
+                                     elsif has_value!(args, 'p', 'public')
+                                       'public'
+                                     end
+                            dryrun = has_value!(args, 'd', 'dry-run')
+                          end
+                          case flag
+                          when :stage
+                            case args.first
+                            when 'view', 'approve', 'reject', 'download'
+                              out = pwd_set { `#{npm_output("stage list #{npmname} --json --loglevel=error")}` }
+                              pad0 = 0
+                              pad1 = 0
+                              data = Array(parse_json(out, kind: Array)).map do |item|
+                                ver = item['version']
+                                tag = item['tag']
+                                pad0 = [pad0, ver.size].max
+                                pad1 = [pad1, tag.size].max
+                                [ver, tag, item['id'], item['actor']]
+                              end
+                              if data.empty?
+                                print_error('no staged releases', loglevel: Logger::INFO, subject: npmname)
+                                exit 1
+                              end
+                              data.each do |item|
+                                item[0] = item[0].rjust(pad0)
+                                item[1] = item[1].rjust(pad1)
+                              end
+                              stage << args.shift
+                              stage << choice_index('Select a release', data.map { |item| item.join('    ') },
+                                                    column: /^(?:\S+\s+){2}(\S+)/)
+                              if %w[approve reject].include?(stage.first)
+                                otp = args.shift if args.first&.match?(/^\d+$/)
+                                registry = args.first
+                                option('otp', prefix: 'npm') { |val| otp = val }
+                                option('registry', prefix: 'npm') { |val| registry = val }
+                              end
+                            else
+                              stage << 'publish'
+                              parse.call
+                              tag, otp = args
+                            end
+                          when :latest
+                            parse.call
                             otp = args.first
                           else
+                            parse.call
                             tag, otp = param_guard(action, flag, args: args)
                           end
-                          publish(flag, otp: otp, tag: tag, access: access, dryrun: dryrun)
+                          publish(flag, otp: otp, tag: tag, access: access, stage: stage, registry: registry,
+                                        dryrun: dryrun)
                         end
                       end
                     when 'tsc'
@@ -416,7 +465,7 @@ module Squared
           return if items.empty?
 
           on :first, :copy
-          print_item unless @output[0] || silent? || task_invoked?(/^copy(?::#{Node.ref}|$)/)
+          print_item unless @output[0] || silent? || task_invoked?(/^copy(:#{Node.ref}|$)/)
           packed = false
           items.each do |dir|
             case dir
@@ -431,7 +480,7 @@ module Squared
                        @workspace.rev_clear(proj.name, sync: sync)
                        proj.path
                      else
-                       log.warn message("copy project :#{dir}", hint: 'missing')
+                       log.warn message('target not found', dir, hint: 'copy')
                        nil
                      end
             when Hash
@@ -451,7 +500,7 @@ module Squared
               dest = dir.path
               @workspace.rev_clear(dir.name, sync: sync)
             else
-              raise_error TypeError, "unknown: #{dir}", hint: 'copy'
+              raise TypeError, message('unknown', dir, hint: 'copy')
             end
             next unless from && dest&.directory?
 
@@ -513,7 +562,7 @@ module Squared
                 if sub
                   target << [entry, dest.join(into, sub)]
                 else
-                  log.debug message("#{dependname} in \"#{entry}\"", hint: 'missing')
+                  log.debug message("missing #{dependname} in \"#{entry}\"", hint: 'copy')
                 end
               end
             else
@@ -544,7 +593,6 @@ module Squared
             end
             save, exact, omit = save if save.is_a?(Array)
             ws = env('NODE_WORKSPACES', equals: '0')
-            ci = option('ci')
             om = lambda do |cmd|
               if omit
                 save = case save
@@ -563,7 +611,7 @@ module Squared
             rm = lambda do |target|
               return if remove.empty?
 
-              run(target.temp(*remove).sub!(/ (?:add|install) /, ' remove '), sync: sync, from: :remove)
+              run(target.temp(*remove).sub!(/ (add|install) /, ' remove '), sync: sync, from: :remove)
             end
             yarn = dependtype(:yarn)
             if yarn > 0
@@ -580,9 +628,9 @@ module Squared
                   cmd << '--mode=skip-build' if option('ignore-scripts')
                   cmd << '--check-cache' if !flag && option('force')
                 end
-                if nolockfile?('yarn')
+                if nolockfile?(prefix: 'yarn')
                   cmd << '--no-lockfile'
-                elsif ci
+                elsif option('ci')
                   if yarn == 1
                     cmd << '--frozen-lockfile'
                   elsif !flag
@@ -616,15 +664,29 @@ module Squared
               cmd << '--ignore-workspace' if ws
               cmd << if option('force')
                        '--force'
-                     elsif nolockfile?('pnpm')
+                     elsif nolockfile?(prefix: 'pnpm')
                        '--no-lockfile'
-                     elsif ci
+                     elsif option('ci')
                        '--frozen-lockfile'
                      end
               cmd << '--ignore-scripts' if option('ignore-scripts')
               cmd << '--dangerously-allow-all-builds' if option('approve-builds')
             else
-              cmd = session('npm', ci ? 'ci' : 'install')
+              cmd = session 'npm'
+              cmd << (ci = option('ci') ? 'ci' : 'install')
+              option('approve-scripts') do |val|
+                cmd = npm_output 'approve-scripts'
+                cmd << case val
+                       when '1'
+                         '--all --no-allow-scripts-pin'
+                       when 'true', 'all'
+                         '--all'
+                       else
+                         val.split(/\s+/).quote!.join(' ')
+                       end
+                print_run cmd, silent?
+                run(cmd, banner: false)
+              end
               cmd << '--workspaces=false' if ws
               cmd << '--force' if option('force')
               append_nocolor
@@ -644,7 +706,7 @@ module Squared
                   append_platform
                 end
               end
-              cmd << '--package-lock=false' << 'save=false' if nolockfile?('npm')
+              cmd << '--package-lock=false' << 'save=false' if nolockfile?(prefix: 'npm')
               cmd << '--ignore-scripts' if option('ignore-scripts')
             end
             if add
@@ -724,7 +786,7 @@ module Squared
               end
               next unless (current != want || file != want) && (want.match?(SEM_VER) || !file.match?(SEM_VER))
 
-              f = semscan file
+              f = semscan(file, fill: !option('save-exact').nil?)
               w = semscan want
               a = f[0]
               b = f[2]
@@ -734,11 +796,15 @@ module Squared
                         when :major
                           a == '0' ? c == '0' || c == '1' : true
                         when :minor
+                          next unless f[4]
+
                           ch == '^' && (a == '0' ? c == '0' && b == d : a == c)
                         when :patch
+                          next unless b && f[4]
+
                           a == c && b == d && f[4] != w[4]
                         end
-              if upgrade && !w[5]
+              if upgrade && !w[6]
                 next if file == want
 
                 found << [key, file, want, if a != c
@@ -747,7 +813,7 @@ module Squared
                                              a == '0' ? 1 : 3
                                            else
                                              5
-                                           end, major, f, w]
+                                           end, major, semscan(file), w]
               elsif !major
                 avail << [key, file, latest, latest != current]
               end
@@ -895,18 +961,14 @@ module Squared
         end
 
         def publish(flag = nil, *, sync: invoked_sync?('publish', flag), otp: nil, tag: nil, access: nil, dryrun: nil,
-                    version: nil, ext: [], workspace: false)
+                    version: nil, stage: [], registry: nil, ext: [], workspace: false)
           if read_package('private')
-            return if workspace
+            return if workspace || !stage.empty?
 
-            ws = children.select { |proj| proj.ref?(Node.ref) }
-            if ws.empty?
-              print_error('nothing to publish', subject: name, hint: 'private')
-            elsif confirm_basic("#{flag == :verify ? 'Verify' : 'Publish'} workspace?", ws.map(&:name).join(', '), 'N')
-              ws.each do |proj|
-                proj.publish(flag, sync: sync, otp: otp, tag: tag, access: access, dryrun: dryrun, version: version,
-                                   ext: ext, workspace: true)
-              end
+            from, accept = flag == :verify ? %w[verify Y] : %w[publish N]
+            each(accept: accept, ref: Node.ref, from: from) do |proj|
+              proj.publish(flag, sync: sync, otp: otp, tag: tag, access: access, dryrun: dryrun, version: version,
+                                 ext: ext, workspace: true)
             end
           elsif version ||= self.version
             if flag == :verify
@@ -977,24 +1039,35 @@ module Squared
                 end
               end
             else
-              cmd = session 'npm', 'publish'
-              cmd << basic_option('otp', otp) if otp ||= option('otp')
-              cmd << basic_option('tag', tag.tr(' ', '-')) if tag ||= option('tag')
-              case access || option('access')
-              when 'p', 'public'
-                cmd << '--access=public'
-              when 'r', 'restricted'
-                cmd << '--access=restricted'
+              args = ['npm']
+              if stage.empty?
+                args << 'publish'
+              else
+                args << 'stage' << stage.shift
+                args.concat(stage)
               end
-              dryrun ||= dryrun?('npm')
+              cmd = session(*args)
+              if stage.empty?
+                otp ||= option('otp')
+                cmd << basic_option('tag', tag.tr(' ', '-')) if tag ||= option('tag')
+                case access || option('access')
+                when 'p', 'public'
+                  cmd << '--access=public'
+                when 'r', 'restricted'
+                  cmd << '--access=restricted'
+                end
+                dryrun ||= dryrun?(prefix: 'npm')
+              end
+              cmd << basic_option('otp', otp) if otp
+              cmd << quote_option('registry', registry) if registry
               if dryrun
                 cmd << '--dry-run'
               else
-                from = :'npm:publish'
                 log.info cmd.to_s
+                from = symjoin args.take(3)
               end
               if sync
-                run(sync: sync, from: from, interactive: !dryrun && ['Publish', 'N', npmname])
+                run(sync: sync, from: from, interactive: !dryrun && stage.empty? && ['Publish', 'N', npmname])
               else
                 require 'open3'
                 on :first, from
@@ -1009,14 +1082,15 @@ module Squared
               end
             end
           elsif !workspace
-            print_error("version: #{dependname}", subject: name, hint: 'not found')
+            print_error('version not found', subject: name, hint: dependname)
           end
         end
 
         def package(flag, opts = [], packages: [], from: nil)
           workspace.rev_clear(name)
           yarn = dependtype(:yarn)
-          if yarn > 0 && !(yarn == 1 && ((flag == :update && !packages.empty?) || flag == :rebuild))
+          if yarn > 0 && !(yarn == 1 && ((flag == :update && !packages.empty?) || %i[approve deny
+                                                                                     rebuild].include?(flag)))
             cmd = session 'yarn', case flag
                                   when :update
                                     if yarn == 1
@@ -1027,7 +1101,7 @@ module Squared
                                     end
                                   when :reinstall
                                     if yarn == 1
-                                      remove_modules 'yarn' if opts.include?('force')
+                                      remove_modules(prefix: 'yarn') if opts.include?('force')
                                     elsif opts.delete('force')
                                       opts << 'check-cache'
                                     end
@@ -1048,70 +1122,81 @@ module Squared
                                                                          end
                                            end, cmd, project: self, strict: strict?)
             if yarn == 1 && flag != :reinstall
-              op << '--no-lockfile' if nolockfile?('yarn')
+              op << '--no-lockfile' if nolockfile?(prefix: 'yarn')
               op << '--ignore-engines' if option('ignore-engines')
             end
           else
+            flags = []
             args = if pnpm?
-                     case flag
-                     when :install, :update
-                       opts << 'no-lockfile' if nolockfile?('pnpm')
-                       spec = 0 if flag == :update
-                     when :add
-                       spec = 1
-                     when :reinstall
-                       opts << 'force'
-                       flag = :install
-                     end
-                     flags = [flag]
-                     flags << :install_a unless flag == :rebuild
-                     unless flag == :dedupe
-                       flags << :common_filter
-                       unless flag == :add
-                         flags << :install_b
-                         flags << :common_cpu unless flag == :update
+                     if flag == :approve || flag == :deny
+                       opts.map! { |val| val.start_with?('!') ? val : "!#{val}" } if flag == :deny
+                       flag = :'approve-builds'
+                       spec = true
+                     else
+                       case flag
+                       when :install, :update
+                         opts << 'no-lockfile' if nolockfile?(prefix: 'pnpm')
+                         spec = 0 if flag == :update
+                       when :add
+                         spec = 1
+                       when :reinstall
+                         opts << 'force'
+                         flag = :install
                        end
+                       flags << :install_a unless flag == :rebuild
+                       unless flag == :dedupe
+                         flags << :common_filter
+                         unless flag == :add
+                           flags << :install_b
+                           flags << :common_cpu unless flag == :update
+                         end
+                       end
+                       no = OPT_PNPM[:no][flag]
                      end
-                     no = OPT_PNPM[:no][flag]
                      [
                        opts,
-                       pnpmopts(*flags),
+                       pnpmopts(flag, *flags),
                        session('pnpm', flag)
                      ]
                    else
-                     case flag
-                     when :install, :update
-                       opts.unshift('package-lock=false', 'save=false') if nolockfile?('npm')
-                       spec = flag == :install ? 0 : 2
-                     when :add
-                       spec = 1
-                       flag = :install
-                     when :reinstall
-                       remove_modules 'npm' if opts.delete('force')
-                       opts.unshift('package-lock=false') if lockfile(true)
-                       flag = :install
-                     end
-                     flags = [flag]
-                     unless flag == :rebuild
-                       flags << :install_a
-                       unless flag == :dedupe
-                         %w[save ignore-scripts strict-peer-deps].each do |key|
-                           option(key, prefix: 'npm', ignore: false) do |val|
-                             opts << basic_option(key, case val
-                                                       when '0', 'false'
-                                                         false
-                                                       else
-                                                         true
-                                                       end)
+                     if flag == :approve || flag == :deny
+                       flag = :"#{flag}-scripts"
+                       spec = true
+                     else
+                       case flag
+                       when :install, :update
+                         opts.unshift('package-lock=false', 'save=false') if nolockfile?(prefix: 'npm')
+                         spec = flag == :install ? 0 : 2
+                       when :add
+                         spec = 1
+                         flag = :install
+                       when :reinstall
+                         remove_modules(prefix: 'npm') if opts.delete('force')
+                         opts.unshift('package-lock=false') if lockfile(true)
+                         flag = :install
+                       end
+                       unless flag == :rebuild
+                         flags << :install_a
+                         unless flag == :dedupe
+                           %w[save ignore-scripts strict-peer-deps].each do |key|
+                             option(key, prefix: 'npm', ignore: false) do |val|
+                               opts << basic_option(key, case val
+                                                         when '0', 'false'
+                                                           false
+                                                         else
+                                                           true
+                                                         end)
+                             end
                            end
+                           flags << :install_b << :common_scripts
                          end
-                         flags << :install_b
+                         flags << :install_c unless flag == :update
+                         no = OPT_NPM[:no][:install]
                        end
-                       no = OPT_NPM[:no][:install]
                      end
                      [
                        opts,
-                       npmopts(*flags),
+                       npmopts(flag, *flags),
                        session('npm', flag)
                      ]
                    end
@@ -1139,41 +1224,49 @@ module Squared
 
             op.append(quote: true)
               .clear(errors: true)
+          when true
+            op.append(quote: true)
           else
             op.clear
           end
           run(from: from || symjoin('package', flag))
         end
 
-        def bump(flag, val = nil)
-          return unless val ||= sembump(version, flag)
+        def bump(flag = :patch, val = nil, workspace: false)
+          if read_package('private')
+            return if workspace
 
-          doc = dependfile.read
-          if doc.sub!(/"version"\s*:\s*"#{version}"/, "\"version\": \"#{val}\"")
-            unless dryrun?
-              log.info "bump version #{version} to #{val.subhint(flag)}"
-              on :first, :bump
-              dependfile.write(doc)
-            end
-            if stdin?
-              puts val
-            elsif !silent?
-              major = flag == :major
-              emphasize("version: #{val}", title: name, border: borderstyle, sub: [
-                headerstyle,
-                opt_style(color(major ? :green : :yellow), /\A(version:)( )(\S+)(.*)\z/, 3),
-                opt_style(theme[major ? :major : :active], /\A(version:)(.*)\z/)
-              ])
-            end
-            unless dryrun?
-              commit(:add, [dependname], pass: true)
-              on :last, :bump
+            each(accept: 'N', ref: Node.ref, from: 'bump') { |proj| proj.bump(flag, val, workspace: true) }
+          elsif val ||= version && sembump(version, flag)
+            begin
+              doc = dependfile.read
+              unless doc.sub!(/"version"\s*:\s*"#{version}"/, "\"version\": \"#{val}\"")
+                raise message('version not found', hint: dependfile)
+              end
+
+              unless dryrun?
+                log.info "bump version #{version} to #{val.subhint(flag)}"
+                on :first, :bump
+                dependfile.write(doc)
+              end
+              if stdin?
+                puts val
+              elsif !silent?
+                major = flag == :major
+                emphasize("version: #{val}", title: name, border: borderstyle, sub: [
+                  headerstyle,
+                  opt_style(color(major ? :green : :yellow), /\A(version:)( )(\S+)(.*)\z/, 3),
+                  opt_style(theme[major ? :major : :active], /\A(version:)(.*)\z/)
+                ])
+              end
+              unless dryrun?
+                commit(:add, [dependname], pass: true)
+                on :last, :bump
+              end
+            rescue => e
+              on_error(e, dryrun: dryrun?)
             end
-          else
-            raise_error 'version not found', hint: dependfile
           end
-        rescue => e
-          on_error(e, dryrun: dryrun?)
         end
 
         def pack(opts = [])
@@ -1245,7 +1338,8 @@ module Squared
 
           if script
             ret = session dependbin, 'run'
-            raise_error "#{dependbin} run: #{target}", hint: from unless append_any(target, build: true)
+            raise message(dependbin, 'run', target, hint: from) unless append_any(target, build: true)
+
             append_any opts if opts
             append_loglevel
             append_any(args, delim: true) if args
@@ -1259,7 +1353,7 @@ module Squared
             when Enumerable
               target.to_a.join(' ')
             else
-              raise_error TypeError, "unknown: #{target}", hint: 'compose'
+              raise TypeError, message('unknown', target, hint: 'compose')
             end
           end
         end
@@ -1359,11 +1453,7 @@ module Squared
         end
 
         def dependbin
-          if yarn?
-            'yarn'
-          else
-            pnpm? ? 'pnpm' : 'npm'
-          end
+          yarn? ? 'yarn' : pnpm? ? 'pnpm' : 'npm'
         end
 
         def version
@@ -1380,6 +1470,10 @@ module Squared
 
         private
 
+        def npm_output(*cmd, **kwargs)
+          session_output('npm', *cmd, **kwargs)
+        end
+
         def read_package(key = 'packageManager', update: false)
           unless !update && @pm.key?(key)
             doc = JSON.parse(dependfile.read)
@@ -1469,7 +1563,7 @@ module Squared
           end
         end
 
-        def remove_modules(prefix = dependbin)
+        def remove_modules(prefix: dependbin)
           modules = basepath 'node_modules'
           return false unless modules.directory? && confirm_basic('Remove?', modules, prefix: prefix)
 
@@ -1534,7 +1628,7 @@ module Squared
         end
 
         def dependroot
-          dependname if parent&.has?('outdated', Node.ref)
+          dependname if parent&.has?('outdated', ref: Node.ref)
         end
 
         def npmname
@@ -1559,11 +1653,7 @@ module Squared
         end
 
         def lockfile(delete = false)
-          ret = basepath(if yarn?
-                           'yarn.lock'
-                         else
-                           pnpm? ? 'pnpm-lock.yaml' : 'package-lock.json'
-                         end)
+          ret = basepath(yarn? ? 'yarn.lock' : pnpm? ? 'pnpm-lock.yaml' : 'package-lock.json')
           if ret.exist?
             if delete
               ret.delete
@@ -1582,11 +1672,11 @@ module Squared
           @serve != false
         end
 
-        def nolockfile?(prefix = dependbin)
+        def nolockfile?(prefix: dependbin)
           option('package-lock', 'lockfile', prefix: prefix, equals: '0') || !option('no-lockfile', prefix: prefix).nil?
         end
 
-        def dryrun?(prefix = dependbin)
+        def dryrun?(prefix: dependbin)
           super(target: @session, prefix: prefix)
         end
       end