@penvhq/cli 0.16.0 → 0.16.2

package/dist/bin.cjs

@@ -51195,9 +51195,12 @@ function planInstall(root, version2 = engineVersion()) {
     name: TYPES_PACKAGE,
     version: version2,
     ...types === void 0 ? {} : { declared: types.version },
-    // Any declared version counts, for zod's reason: the augmentation binds on
-    // the module resolving, not on which release of it a project pinned.
-    satisfied: types !== void 0
+    // Held to the pin, exactly as a workspace member's copy is. The augmentation
+    // binds on the module resolving, but what it binds to is whatever release
+    // resolved: a core behind the pin checks `penv.config.ts` against a shape the
+    // engine no longer has, and the committed declarations augment interfaces
+    // that moved under them.
+    satisfied: types?.version === version2
   };
   const pending = packages.filter((entry) => !entry.satisfied);
   const steps = [
@@ -53467,8 +53470,21 @@ init_cjs_shims();
 // src/input.ts
 init_cjs_shims();
 var import_node_readline = require("readline");
+var import_node_stream = require("stream");
+function isTerminal(output) {
+  return output.isTTY === true;
+}
 function lineReader(input = process.stdin, output = process.stdout) {
-  const rl = (0, import_node_readline.createInterface)({ input, output });
+  let muted = false;
+  const sink = new import_node_stream.Writable({
+    write(chunk, _encoding, callback) {
+      if (!muted) {
+        output.write(chunk);
+      }
+      callback();
+    }
+  });
+  const rl = (0, import_node_readline.createInterface)({ input, output: sink, terminal: isTerminal(output) });
   const buffered = [];
   const waiting = [];
   let closed = false;
@@ -53487,7 +53503,7 @@ function lineReader(input = process.stdin, output = process.stdout) {
     }
   });
   return {
-    ask(question) {
+    ask(question, options) {
       const early = buffered.shift();
       if (early !== void 0) {
         return Promise.resolve(early);
@@ -53495,6 +53511,19 @@ function lineReader(input = process.stdin, output = process.stdout) {
       if (closed) {
         return Promise.resolve(void 0);
       }
+      if (options?.secret === true) {
+        output.write(question);
+        muted = true;
+        rl.setPrompt("");
+        rl.prompt();
+        return new Promise((resolve13) => {
+          waiting.push((line) => {
+            muted = false;
+            output.write("\n");
+            resolve13(line);
+          });
+        });
+      }
       rl.setPrompt(question);
       rl.prompt();
       return new Promise((resolve13) => {
@@ -54813,16 +54842,30 @@ async function runSet(options) {
   const ref = refFromKey(options.key, project.config);
   const scope = targetScope(project, options, options.key);
   const environment = policyEnvironment(project, options);
+  const value2 = options.value ?? await askForValue(project, ref, environment, options);
   const { encrypted, location } = await sealAwareWrite({
     project,
     provider: project.provider,
     ref,
     scope,
-    value: options.value,
+    value: value2,
     environment
   });
   return { parameter: options.key, location, encrypted };
 }
+async function askForValue(project, ref, environment, options) {
+  const parameter = parameterId(ref);
+  const remedy = `Pass it on the command line \u2014 \`penv set ${options.key} <value>\` \u2014 pipe it in, or answer the prompt.`;
+  if (options.ask === void 0) {
+    throw new PenvError("VALUE_MISSING", `No value was given for parameter ${parameter}`, remedy);
+  }
+  const secret = isSecret(await project.provider.readMeta(ref), environment);
+  const answer = await options.ask({ parameter, secret });
+  if (answer === void 0 || answer.length === 0) {
+    throw new PenvError("VALUE_MISSING", `No value was entered for parameter ${parameter}`, remedy);
+  }
+  return answer;
+}
 function renderSet(result2) {
   return formatRows([
     {
@@ -54860,18 +54903,29 @@ var setCommand = defineCommand({
   },
   run({ args }) {
     return guard(async () => {
-      const value2 = args.value ?? await readStdin();
-      write(
-        renderSet(
-          await runSet({
-            cwd: process.cwd(),
-            key: args.key,
-            value: value2,
-            ...args.env === void 0 ? {} : { environment: args.env },
-            ...args.local === void 0 ? {} : { local: args.local }
-          })
-        )
-      );
+      const base = {
+        cwd: process.cwd(),
+        key: args.key,
+        ...args.env === void 0 ? {} : { environment: args.env },
+        ...args.local === void 0 ? {} : { local: args.local }
+      };
+      if (args.value !== void 0) {
+        write(renderSet(await runSet({ ...base, value: args.value })));
+        return;
+      }
+      if (process.stdin.isTTY !== true) {
+        write(renderSet(await runSet({ ...base, value: await readStdin() })));
+        return;
+      }
+      const reader = lineReader();
+      try {
+        const ask = ({ parameter, secret }) => reader.ask(prompt(parameter, secret ? "secret, typing is hidden" : void 0), {
+          secret
+        });
+        write(renderSet(await runSet({ ...base, ask })));
+      } finally {
+        reader.close();
+      }
     });
   }
 });
@@ -55034,6 +55088,8 @@ ${detail}`,
       `Fix these \u2014 \`penv validate\` reports them \u2014 then run \`penv fill\`. If you have not written a schema yet, declare the required parameters in ${SCHEMA_SHAPE_FILE}.`
     );
   }
+  const project = openProject(options.cwd);
+  const secretFor = async (ref) => isSecret(await project.provider.readMeta(ref), environment);
   const written = [];
   const skipped2 = [];
   const kept = [];
@@ -55048,7 +55104,7 @@ ${detail}`,
     const value2 = await options.ask({
       parameter: key,
       environment,
-      secret: false,
+      secret: await secretFor(ref),
       optional: false
     });
     if (value2 === void 0 || value2 === "") {
@@ -55072,7 +55128,7 @@ ${detail}`,
     const value2 = await options.ask({
       parameter: key,
       environment,
-      secret: false,
+      secret: await secretFor(ref),
       optional: true,
       ...item.defaultValue === void 0 ? {} : { defaultValue: item.defaultValue }
     });
@@ -55142,7 +55198,7 @@ var fillCommand = defineCommand({
   run({ args }) {
     return guard(async () => {
       const reader = lineReader();
-      const ask = (prompt2) => reader.ask(prompt(prompt2.parameter, contextFor(prompt2)));
+      const ask = (prompt2) => reader.ask(prompt(prompt2.parameter, contextFor(prompt2)), { secret: prompt2.secret });
       try {
         write(
           renderFill(