@gjermundgaraba/upup 0.3.0 → 0.4.0

package/README.md

@@ -8,7 +8,7 @@ Understand, audit and update system tools and project dependencies from one TUI.
 npm install -g @gjermundgaraba/upup
 ```
 
-Requires Node 26.12 or newer. The TUI is built on [OpenTUI](https://github.com/anomalyco/opentui), which runs through Node's FFI.
+Requires Node 26.13 or newer. The TUI is built on [OpenTUI](https://github.com/anomalyco/opentui), which runs through Node's FFI.
 
 ## Usage
 
@@ -18,19 +18,21 @@ upup system          # tools installed on this machine
 upup project [dir]   # dependencies of the project containing dir
 ```
 
-**System** lists operating-system updates from macOS Software Update and apt, macOS apps that update themselves, and tools from Homebrew (formulae and casks), npm, pnpm and Vite+ globals, Vite+ itself, `cargo install`, `go install` and `uv tool`. Only the package managers on your `PATH` are asked.
+**System** lists operating-system updates from macOS Software Update and apt, macOS apps that update themselves, and tools from Homebrew (formulae and casks), npm, pnpm and Vite+ globals, Vite+ itself and its environment defaults, `cargo install`, `go install` and `uv tool`. Only the package managers on your `PATH` are asked.
 
-**Project** lists the registry dependencies declared across the workspace that contains the directory: Go modules, Cargo workspaces, and npm or pnpm projects including pnpm catalogs. Path, Git and workspace references are not listed. Yarn and Bun projects are reported as unsupported.
+Vite+ environment rows show configured global defaults for Node.js, npm, pnpm, Yarn and Bun. Exact Node.js defaults update within their current major. Yarn Classic stays on Yarn 1, since modern Yarn is a different published package; migrating to it is left to you. Other package managers update to their latest stable release. Floating defaults such as `latest` and `lts` show their configured selector and stay under Vite+’s automatic version selection. Updating installs the selected version and changes that tool’s default, preserving project pins and cached versions. Each default is checked immediately before updating, checked again after downloading and before switching, and verified afterward.
 
-In a git repository it also lists every project below the directory that a `package.json`, `go.mod` or `Cargo.toml` git tracks or doesn't ignore belongs to, each once, its provider named with where it is (`npm clients/voice`). A `package.json` with a lockfile beside it is a project of its own, and so is a Go module its `go.work` doesn't use. Folders under `node_modules`, subtrees vendored in with `git subtree`, and Go modules in the folders the go command skips (`testdata`, and those starting with `_` or `.`) are left out. Node projects below the directory that have no lockfile yet, or use Yarn or Bun, are named together in one notice.
+**Project** lists the registry dependencies declared across the workspace that contains the directory: Go modules, Cargo workspaces, and npm or pnpm projects including pnpm catalogs, among them a catalog entry only an override uses when it names an exact version. A Cargo dependency is listed whatever features turn it on. Path, Git and workspace references are not listed, nor is one module of a `go.work` that another requires, or a module its `replace` covers. Yarn and Bun projects are reported as unsupported.
+
+In a git repository it also lists every project below the directory that a `package.json`, `go.mod` or `Cargo.toml` git tracks or doesn't ignore belongs to, each once, its provider named with where it is (`npm clients/voice`). A `package.json` with a lockfile beside it is a project of its own, and so is a Go module its `go.work` doesn't use. Folders under `node_modules`, subtrees vendored in with `git subtree`, and Go modules in the folders the go command skips (`testdata`, and those starting with `_` or `.`) are left out. Node projects below the directory that have no lockfile yet, or use Yarn or Bun, are named together in one notice; a workspace names the folders in it that its lockfile doesn't list. A Cargo workspace with no `Cargo.lock` yet is named in a notice too. A Go workspace whose member module paths cannot be read is reported as unavailable; unrelated projects remain listed. upup runs cargo with `RUSTUP_AUTO_INSTALL=0`, so rustup doesn't install the toolchain a Cargo workspace pins (releases of rustup too old to know the setting still do); a missing one fails with rustup's message.
 
 It also lists the GitHub Actions and reusable workflows that the repository's workflows (`.github/workflows`), its own `action.yml` and its composite actions (under `.github/actions`, and any local action a workflow uses) use, once per action and release however many files say it. Their tags are read with `git ls-remote`: first from the server the repository's `origin` is on, when that isn't github.com, since a GitHub Enterprise Server runs its own copy of an action before github.com's; then from github.com, a private repository's with your own git config. An update moves to the newest release tag written like the current one: as precise, and with or without the `v`. So `@v4` moves to `@v5` once the action tags `v5`, and `@v4.1.2` to the newest full release. A commit pin is read as the release tag that points at it (the one its comment names, such as `# v4.1.2`, else the most precise) and moves to the commit of the newest tag like that one, its comment's version moving with it; upup says when a comment names a tag that points elsewhere. Local (`./`) actions are read rather than listed, Docker actions are not listed, and branches such as `@main` are listed without an update. Removing an action is left to you.
 
 It also lists the Node.js versions pinned exactly, once per version however many files pin it: `node-version` in the `actions/setup-node` steps of every workflow and action upup reads for GitHub Actions, and the first line that isn't blank or a comment in the `.node-version` and `.nvmrc` files of the directory, the folders below it and those between it and the repository's top that git tracks or doesn't ignore. An update moves to the newest release on the same major line from nodejs.org, keeping each file's `v` or quotes, since moving to another major line is a migration rather than an update. `22` and `lts/*` already follow their line and aren't listed; matrix entries, expressions and Dockerfile `FROM node:` images aren't read yet. Like OS updates, these aren't audited.
 
-The package manager a Node project declares, in `packageManager` (`pnpm@12.5.1`) or `devEngines.packageManager`, is listed too, each field as a row of its own, and moves like a dependency to its newest stable release that the project's minimum release age lets through. Its current version is the one pnpm locked, or else the declared one; a range with no locked version isn't listed. Corepack's sha512 hash moves with the version, worked out from the registry's integrity for the release; a pin with another kind of hash is listed without an offer. Neither field can be removed from upup.
+The package manager a Node project declares, in `packageManager` (`pnpm@12.5.1`) or `devEngines.packageManager`, is listed too, each field as a row of its own, and moves like a dependency. Its current version is the one pnpm locked, or else the declared one; a range with no locked version isn't listed. Corepack's sha512 hash moves with the version, worked out from the registry's integrity for the release; a pin with another kind of hash is listed without an offer. Neither field can be removed from upup.
 
-Current versions come from the package manager or lockfile. An offered update is the newest stable release. Updating a declared range keeps its style (`^1.2.0` becomes `^1.4.0`), and the lockfile is reconciled and checked afterwards. Removing a project dependency edits the manifest and reconciles the same way.
+Current versions come from the package manager or lockfile. An offered update is the newest stable release; in a Node project, no newer than the one the registry tags `latest` and older than the project's minimum release age. When the registry can't be reached, the project's dependencies are listed without offers and one notice says why. Updating a declared range keeps its style (`^1.2.0` becomes `^1.4.0`), and the lockfile is reconciled and checked afterwards. Removing a project dependency edits the manifest and reconciles the same way.
 
 ## OS updates
 
@@ -113,7 +115,7 @@ Each update run is also logged to `updates/` in the user cache directory, one JS
 
 ## Development
 
-Requires Node 26.12 or newer and [Vite+](https://viteplus.dev).
+Requires Node 26.13 or newer and [Vite+](https://viteplus.dev).
 
 Run `mise install` once to get the Go toolchain `mise.toml` pins; a binary-audit test reads its build info and is skipped without Go.
 

package/dist/{Tui-BiTtZ1EF.mjs → Tui-DV_6wbrQ.mjs}

@@ -3,7 +3,7 @@ import { Deferred, Effect, FiberSet, Stream } from "effect";
 import { spawn } from "node:child_process";
 import { homedir } from "node:os";
 import semver from "semver";
-import { createComponent, createElement, createTextNode, effect, insert, insertNode, memo, render, setProp, use, useKeyboard, usePaste, useTerminalDimensions } from "@opentui/solid";
+import { createComponent, createElement, createTextNode, effect, insert, insertNode, memo, onAnimationTick, render, setProp, use, useKeyboard, usePaste, useTerminalDimensions } from "@opentui/solid";
 import { TextAttributes, createCliRenderer } from "@opentui/core";
 import { For, Match, Show, Switch, createEffect, createMemo, createRenderEffect, createSignal, on, onCleanup, untrack } from "solid-js/dist/solid.js";
 // src/tui/text.ts
@@ -614,11 +614,8 @@ const frames = [
 ];
 const Spinner = (props) => {
 	const [frame, setFrame] = createSignal(0);
-	const timer = setInterval(() => {
+	onAnimationTick(12.5, () => {
 		setFrame((at) => (at + 1) % frames.length);
-	}, 80);
-	onCleanup(() => {
-		clearInterval(timer);
 	});
 	return (() => {
 		var _el$ = createElement("text");
@@ -1281,6 +1278,7 @@ const providerLabels = /* @__PURE__ */ new Map([
 	["pnpm-global", "pnpm -g"],
 	["vp-global", "Vite+ global"],
 	["vp-self", "Vite+"],
+	["vp-env", "Vite+ environment"],
 	["cargo-install", "cargo install"],
 	["go-install", "go install"],
 	["uv-tool", "uv tool"],
@@ -1352,7 +1350,7 @@ const lines = (grouped) => {
 const reachable = (grouped) => grouped.flatMap(visibleRows);
 const unauditedLabels = {
 	app: "app update",
-	runtime: "runtime pin",
+	runtime: "Node.js runtime",
 	os: "OS update"
 };
 const parts = (version) => version.replace(/^v/u, "").split(/(?<separator>[._+-])/u);
@@ -1776,7 +1774,7 @@ const ConfirmPopup = (props) => {
 					get children() {
 						var _el$6 = createElement("text");
 						setProp(_el$6, "wrapMode", "word");
-						insert(_el$6, () => pending().rows.some((row) => unauditedKind(row.pkg) === "runtime") ? "upup does not audit the runtime versions a project pins: confirming moves them as offered." : "upup does not audit operating-system or app updates: confirming installs them as the vendor offers them, and upup asks for your password if sudo needs it.");
+						insert(_el$6, () => pending().rows.some((row) => unauditedKind(row.pkg) === "runtime") ? "upup does not audit Node.js runtimes: confirming updates the selected versions as offered." : "upup does not audit operating-system or app updates: confirming installs them as the vendor offers them, and upup asks for your password if sudo needs it.");
 						effect((_$p) => setProp(_el$6, "fg", theme.muted, _$p));
 						return _el$6;
 					}
@@ -4008,6 +4006,9 @@ const SettingsPopup = (props) => {
 	const [entry, setEntry] = createSignal("");
 	const [picked, setPicked] = createSignal(0);
 	props.run(props.session.loadCatalogue);
+	onCleanup(() => {
+		if (props.state.signIn.value === "Prompted") props.run(props.session.closeSignIn);
+	});
 	const catalogue = () => props.state.catalogue?._tag === "Ready" ? props.state.catalogue.value : [];
 	const setup = () => props.state.preferences.setup;
 	const current = createMemo(() => catalogue().find((choice) => choice.provider === setup()?.provider && choice.modelId === setup()?.modelId));
@@ -4038,7 +4039,8 @@ const SettingsPopup = (props) => {
 	};
 	createEffect(() => {
 		const now = mode();
-		if (now._tag !== "SigningIn" || props.state.signIn !== void 0) return;
+		const { signIn } = props.state;
+		if (now._tag !== "SigningIn" || signIn.value !== "SignedIn" || signIn.context.provider !== now.choice.provider) return;
 		const signedIn = catalogue().find((choice) => choice.provider === now.choice.provider && choice.modelId === now.choice.modelId);
 		if (signedIn?.signedIn === true) choose(signedIn);
 	});
@@ -4110,7 +4112,7 @@ const SettingsPopup = (props) => {
 				_tag: "SigningIn",
 				choice
 			});
-			props.run(props.session.signIn(choice.provider));
+			props.run(props.session.closeSignIn.pipe(Effect.andThen(props.session.signIn(choice.provider))));
 		}
 	};
 	const onEntry = (key, submit, cancel) => {
@@ -4127,11 +4129,11 @@ const SettingsPopup = (props) => {
 		setMode({ _tag: "Picker" });
 	};
 	const onSignIn = (key, signIn) => {
-		if (signIn?._tag !== "Working" || signIn.prompt === void 0) {
+		if (signIn.value !== "Prompted") {
 			if (key.name === "escape") cancel();
 			return;
 		}
-		const { prompt } = signIn;
+		const { prompt } = signIn.context;
 		if (prompt.type === "select") {
 			if (key.name === "escape") cancel();
 			else if (key.name === "down") setPicked((index) => Math.min(prompt.options.length - 1, index + 1));
@@ -4162,7 +4164,7 @@ const SettingsPopup = (props) => {
 			case "Key":
 				onEntry(key, (text) => {
 					if (text.trim() === "") return;
-					props.run(props.session.saveKey(now.choice.provider, text.trim()));
+					props.run(props.session.closeSignIn.pipe(Effect.andThen(props.session.saveKey(now.choice.provider, text.trim()))));
 					setEntry("");
 					setMode({
 						_tag: "SigningIn",
@@ -4236,9 +4238,12 @@ const SettingsPopup = (props) => {
 		const now = mode();
 		return now._tag === "SigningIn" ? now : void 0;
 	};
-	const working = () => props.state.signIn?._tag === "Working" ? props.state.signIn : void 0;
-	const failure = () => props.state.signIn?._tag === "Failed" ? props.state.signIn : void 0;
-	const prompt = createMemo(() => working()?.prompt);
+	const notices = () => props.state.signIn.context.notices ?? [];
+	const failure = () => {
+		const { signIn } = props.state;
+		return signIn.value === "Failed" ? signIn.context : void 0;
+	};
+	const prompt = createMemo(() => props.state.signIn.context.prompt);
 	const selecting = () => {
 		const asked = prompt();
 		return asked?.type === "select" ? asked : void 0;
@@ -4444,7 +4449,7 @@ const SettingsPopup = (props) => {
 									setProp(_el$10, "flexDirection", "column");
 									insert(_el$10, createComponent(Show, {
 										get when() {
-											return memo(() => (working()?.notices.length ?? 0) === 0)() && prompt() === void 0;
+											return memo(() => notices().length === 0)() && prompt() === void 0;
 										},
 										get children() {
 											var _el$11 = createElement("text");
@@ -4455,7 +4460,7 @@ const SettingsPopup = (props) => {
 									}), null);
 									insert(_el$10, createComponent(For, {
 										get each() {
-											return working()?.notices ?? [];
+											return notices();
 										},
 										children: (notice) => (() => {
 											var _el$13 = createElement("text");
@@ -4657,6 +4662,7 @@ const App = (props) => {
 	createEffect(() => {
 		if (anchor() !== void 0) anchorAt(cursor());
 	});
+	const operating = () => props.state.operation.value !== "Idle";
 	const question = () => questionOf(props.state);
 	const deciding = () => question() !== void 0;
 	const finding = () => overlay()._tag === "Find" && !deciding();
@@ -4670,7 +4676,7 @@ const App = (props) => {
 	const selectedRows = createMemo(() => everyRow().filter((row) => props.state.selected.includes(row.key)));
 	const notices = createMemo(() => {
 		const discovery = props.state.discoveryError;
-		return [
+		const found = [
 			...discovery === void 0 ? [] : [{
 				color: theme.danger,
 				message: `✗ ${describeError(discovery)}`
@@ -4683,7 +4689,12 @@ const App = (props) => {
 				color: theme.warn,
 				message: `! ${providerLabel(entry.name)}: ${notice.message}`
 			})))
-		].slice(0, noticeLimit);
+		];
+		if (found.length <= noticeLimit) return found;
+		return [...found.slice(0, 3), {
+			color: theme.muted,
+			message: `+${found.length - noticeLimit + 1} more notices`
+		}];
 	});
 	const natural = createMemo(() => naturalColumns(everyRow(), props.state));
 	const fullList = () => Math.max(tableWidth(natural()) + 4, listMin);
@@ -4786,16 +4797,12 @@ const App = (props) => {
 			readTo.clear();
 		} else if (before !== void 0 && scroller !== void 0) readTo.set(before[1], scroller.scrollTop);
 		if (now === "transcript" || scroller === void 0) return;
-		scroller.scrollTop = 0;
-		const saved = readTo.get(now);
-		if (saved !== void 0 && saved > 0) setTimeout(() => {
-			if (scroller !== void 0 && tab() === now) scroller.scrollTop = saved;
-		}, 30);
+		scroller.scrollTo(readTo.get(now) ?? 0);
 	}));
 	createEffect(on(transcript, (file) => {
 		if (file !== void 0) fire(props.session.readTranscript(file));
 	}));
-	createEffect(on(() => props.state.running, (now, before) => {
+	createEffect(on(operating, (now, before) => {
 		if (before !== true || now) return;
 		const last = untrack(run);
 		if (last === void 0) return;
@@ -4848,6 +4855,7 @@ const App = (props) => {
 	});
 	const scrollDetails = (direction) => scroller?.scrollBy(direction * Math.max(1, Math.floor(contentHeight() / 2)));
 	const confirm = (action) => {
+		if (action !== "audit" && operating()) return;
 		if (action === "audit" || action === "update" && props.state.preferences.auditFirst) fire(props.session.loadCatalogue);
 		const focusedRow = focused();
 		if (selectedRows().length === 0 && focusedRow !== void 0 && props.state.removed[focusedRow.key] !== void 0) {
@@ -4917,7 +4925,7 @@ const App = (props) => {
 		}
 	};
 	const quit = () => {
-		if (!props.state.running) {
+		if (!operating()) {
 			props.quit();
 			return;
 		}
@@ -4967,10 +4975,7 @@ const App = (props) => {
 		const count = changedFiles();
 		if (count === 0) return;
 		setFileAt((at) => (Math.min(at, count - 1) + by + count) % count);
-		setTimeout(() => {
-			const head = scroller?.content.findDescendantById(diffHead);
-			if (scroller !== void 0 && head !== void 0) scroller.scrollBy(head.y - scroller.viewport.y);
-		}, 30);
+		scroller?.scrollChildIntoView(diffHead, { align: "start" });
 	};
 	const browse = () => {
 		const row = focused();
@@ -5040,7 +5045,7 @@ const App = (props) => {
 		else if (matches(keys.browse, key)) browse();
 		else if (matches(keys.stop, key)) fire(props.session.stop);
 		else if (matches(keys.quit, key)) quit();
-		else if (matches(keys.switchMode, key) && !props.state.running) {
+		else if (matches(keys.switchMode, key) && !operating()) {
 			const mode = otherMode(props.state.mode);
 			places.set(props.state.mode, {
 				key: focused()?.key,
@@ -5102,8 +5107,8 @@ const App = (props) => {
 	const auditing = () => Object.values(props.state.audits).filter((audit) => audit._tag === "Running").length;
 	const summary = () => {
 		if (quitting()) return "Stopping; upup quits once the running update finishes";
-		if (props.state.stopping) return "Stopping after the targets already started";
-		if (props.state.running) return progress();
+		if (props.state.operation.context.stopping) return "Stopping after the targets already started";
+		if (operating()) return progress();
 		const all = rows();
 		const selected = selectedRows().length;
 		const hidden = selectedRows().filter((row) => !all.some((visible) => visible.key === row.key)).length;
@@ -5124,7 +5129,7 @@ const App = (props) => {
 	};
 	const hints = () => {
 		if (finding()) return [[keys.keepFilter, 0], [keys.clearFilter, 0]];
-		if (props.state.running) return [
+		if (operating()) return [
 			[keys.stop, 0],
 			[keys.up, 3],
 			[keys.quit, 2]
@@ -5192,7 +5197,7 @@ const App = (props) => {
 		const latest = toast();
 		return latest === void 0 ? summary() : `${summary()}   ${latest.text}`;
 	};
-	const busy = () => props.state.running || auditing() > 0;
+	const busy = () => operating() || auditing() > 0;
 	const footerRoom = () => dimensions().width - 2 - (busy() ? 2 : 0);
 	const fitted = () => overlay()._tag !== "None" && !finding() ? [] : fitFooterHints(hints(), footerRoom(), graphemes(`${footnote()}   `).length);
 	const statusRoom = () => footerRoom() - hintsWidth(fitted());
@@ -5435,7 +5440,7 @@ const App = (props) => {
 		setProp(_el$21, "paddingRight", 1);
 		insert(_el$21, createComponent(Show, {
 			get when() {
-				return props.state.running || auditing() > 0;
+				return busy();
 			},
 			get children() {
 				return [createComponent(Spinner, { get color() {
@@ -5725,7 +5730,7 @@ const App = (props) => {
 			})
 		}), null);
 		effect((_p$) => {
-			var _v$3 = theme.onAccent, _v$4 = theme.accent, _v$5 = TextAttributes.BOLD, _v$6 = theme.muted, _v$7 = props.state.running ? theme.text : theme.muted;
+			var _v$3 = theme.onAccent, _v$4 = theme.accent, _v$5 = TextAttributes.BOLD, _v$6 = theme.muted, _v$7 = operating() ? theme.text : theme.muted;
 			_v$3 !== _p$.e && (_p$.e = setProp(_el$3, "fg", _v$3, _p$.e));
 			_v$4 !== _p$.t && (_p$.t = setProp(_el$3, "bg", _v$4, _p$.t));
 			_v$5 !== _p$.a && (_p$.a = setProp(_el$3, "attributes", _v$5, _p$.a));