@penvhq/launcher 0.10.0 → 0.12.0

package/dist/bin.cjs

@@ -53,6 +53,8 @@ var import_core2 = require("@penvhq/core");
 // src/errors.ts
 var import_core = require("@penvhq/core");
 var INSTALL_COMMAND = "penv install";
+var UPGRADE_COMMAND = "penv upgrade";
+var YES_FLAG = "--yes";
 var MIN_PACKAGE_AGE_DAYS = 7;
 var TRUST_YOUNG_FLAG = "--trust-young";
 function addCommand(name, version, extra) {
@@ -158,7 +160,7 @@ var AddFlagError = class extends import_core.PenvError {
     super(
       "PENV_ADD_FLAG",
       `\`penv add\` does not understand \`${flag}\``,
-      `Run \`penv add <package>\` with \`${TRUST_YOUNG_FLAG}\`, \`--registry <url>\`, or \`${LOCAL_FLAG}\` \u2014 those are the three it takes.`
+      `Run \`penv add <package>\` with \`${TRUST_YOUNG_FLAG}\`, \`--registry <url>\`, \`${LOCAL_FLAG}\`, or \`${YES_FLAG}\` \u2014 those are the four it takes.`
     );
   }
 };
@@ -235,11 +237,11 @@ var OfficialRegistryError = class extends import_core.PenvError {
 };
 var RegistryUnreadableError = class extends import_core.PenvError {
   name = "RegistryUnreadableError";
-  constructor(name, url, detail) {
+  constructor(name, url, detail, retry = addCommand(name)) {
     super(
       "PENV_REGISTRY_UNREADABLE",
       `Reading ${name} from ${url} failed: ${detail}`,
-      `Run \`${addCommand(name)}\` again when the registry is reachable.`
+      `Run \`${retry}\` again when the registry is reachable.`
     );
   }
 };
@@ -255,11 +257,11 @@ var PackageUnknownError = class extends import_core.PenvError {
 };
 var VersionUnknownError = class extends import_core.PenvError {
   name = "VersionUnknownError";
-  constructor(name, version, url) {
+  constructor(name, version, url, retry = addCommand(name)) {
     super(
       "PENV_VERSION_UNKNOWN",
       `${url} publishes no ${version} of ${name}`,
-      `Run \`${addCommand(name)}\` to take the version \`latest\` points at.`
+      `Run \`${retry}\` to take the version \`latest\` points at.`
     );
   }
 };
@@ -304,13 +306,13 @@ var AddNoDownloadError = class extends import_core.PenvError {
     );
   }
 };
-var AddNotInteractiveError = class extends import_core.PenvError {
-  name = "AddNotInteractiveError";
-  constructor(name) {
+var AddTrustUnattendedError = class extends import_core.PenvError {
+  name = "AddTrustUnattendedError";
+  constructor(name, ceremony) {
     super(
-      "PENV_ADD_NOT_INTERACTIVE",
-      `Adding ${name} rewrites ${import_core.MANIFEST_PATH}, and this run has nobody to decide that`,
-      `Run \`${addCommand(name)}\` from a terminal and commit what it writes. In CI, run \`${INSTALL_COMMAND}\` \u2014 it installs the versions the committed manifest already pins.`
+      "PENV_ADD_TRUST_UNATTENDED",
+      `Adding ${name} records ${ceremony}, and this run has nobody to write it`,
+      `Run \`${addCommand(name)}\` from a terminal, without \`${YES_FLAG}\` \u2014 the trust block is a line only a person can write. In CI, run \`${INSTALL_COMMAND}\`: it installs the versions the committed manifest already pins.`
     );
   }
 };
@@ -384,6 +386,66 @@ var EnginePinMismatchError = class extends import_core.PenvError {
     );
   }
 };
+var UpgradeSubjectError = class extends import_core.PenvError {
+  name = "UpgradeSubjectError";
+  constructor() {
+    super(
+      "PENV_UPGRADE_SUBJECT",
+      "`penv upgrade` takes one version, or none",
+      `Run \`${UPGRADE_COMMAND}\` to move to whatever \`latest\` points at, or \`${UPGRADE_COMMAND} 0.9.6\` to move to an exact release.`
+    );
+  }
+};
+var UpgradeFlagError = class extends import_core.PenvError {
+  name = "UpgradeFlagError";
+  constructor(flag) {
+    super(
+      "PENV_UPGRADE_FLAG",
+      `\`${UPGRADE_COMMAND}\` does not understand \`${flag}\``,
+      `Run \`${UPGRADE_COMMAND} [version]\` with \`${YES_FLAG}\` \u2014 that is the one flag it takes.`
+    );
+  }
+};
+var UpgradeNoDownloadError = class extends import_core.PenvError {
+  name = "UpgradeNoDownloadError";
+  constructor() {
+    super(
+      "PENV_UPGRADE_NO_DOWNLOAD",
+      `Upgrading means reading the registry for the version and integrity to pin, and \`--no-download\` says this run does not`,
+      `Run \`${UPGRADE_COMMAND}\` without \`--no-download\`. Nothing was fetched or written.`
+    );
+  }
+};
+var UpgradeUnattendedError = class extends import_core.PenvError {
+  name = "UpgradeUnattendedError";
+  constructor() {
+    super(
+      "PENV_UPGRADE_UNATTENDED",
+      `Upgrading rewrites ${import_core.MANIFEST_PATH} and package.json, and this run has nobody to decide that`,
+      `Run \`${UPGRADE_COMMAND} <version> ${YES_FLAG}\` \u2014 unattended, penv moves the pin only to a version you named. In CI, run \`${INSTALL_COMMAND}\`: it installs what the committed manifest already pins.`
+    );
+  }
+};
+var UpgradeDeclinedError = class extends import_core.PenvError {
+  name = "UpgradeDeclinedError";
+  constructor(version) {
+    super(
+      "PENV_UPGRADE_DECLINED",
+      `${import_core.ENGINE_PACKAGE} ${version} was not installed, so ${import_core.MANIFEST_PATH} and package.json are unchanged`,
+      `Run \`${UPGRADE_COMMAND} ${version}\` again when you want both of them to move.`
+    );
+  }
+};
+var UpgradeInstallFailedError = class extends import_core.PenvError {
+  name = "UpgradeInstallFailedError";
+  constructor(manager, version) {
+    super(
+      "PENV_UPGRADE_INSTALL_FAILED",
+      `${manager} did not finish moving this project to ${import_core.ENGINE_PACKAGE} ${version}, so ${import_core.MANIFEST_PATH} still pins the engine it pinned before`,
+      `Read what ${manager} printed above \u2014 it names what it refused. Fix that and run \`${UPGRADE_COMMAND} ${version}\` again; the pin and the dependency move together or not at all.`
+    );
+  }
+};
 var EngineEntryError = class extends import_core.PenvError {
   name = "EngineEntryError";
   constructor(name, version, dir) {
@@ -460,9 +522,9 @@ function httpFetcher() {
 }
 
 // src/launcher.ts
-var import_node_fs7 = require("fs");
+var import_node_fs8 = require("fs");
 var import_node_path7 = require("path");
-var import_core10 = require("@penvhq/core");
+var import_core11 = require("@penvhq/core");
 
 // src/add.ts
 var import_node_fs5 = require("fs");
@@ -926,7 +988,8 @@ async function fetchRelease(query) {
     throw new RegistryUnreadableError(
       query.name,
       url,
-      cause instanceof Error ? cause.message : String(cause)
+      cause instanceof Error ? cause.message : String(cause),
+      query.retry
     );
   }
   let parsed;
@@ -936,7 +999,8 @@ async function fetchRelease(query) {
     throw new RegistryUnreadableError(
       query.name,
       url,
-      cause instanceof Error ? cause.message : String(cause)
+      cause instanceof Error ? cause.message : String(cause),
+      query.retry
     );
   }
   const packument = record(parsed);
@@ -952,7 +1016,7 @@ async function fetchRelease(query) {
   const version = record(at(versions, asked)) === void 0 ? text3(at(tags, asked)) ?? asked : asked;
   const release = record(at(versions, version));
   if (release === void 0) {
-    throw new VersionUnknownError(query.name, asked, url);
+    throw new VersionUnknownError(query.name, asked, url, query.retry);
   }
   const dist = record(at(release, "dist"));
   const integrity = text3(at(dist, "integrity"));
@@ -1036,12 +1100,17 @@ function parseRequest(argv) {
   let registry;
   let trustYoung = false;
   let local = false;
+  let yes = false;
   for (let index = 0; index < argv.length; index += 1) {
     const token = argv[index] ?? "";
     if (token === LOCAL_FLAG) {
       local = true;
       continue;
     }
+    if (token === YES_FLAG) {
+      yes = true;
+      continue;
+    }
     if (token === TRUST_YOUNG_FLAG) {
       trustYoung = true;
       continue;
@@ -1081,7 +1150,10 @@ function parseRequest(argv) {
       throw new AddLocalFlagError(`\`${TRUST_YOUNG_FLAG}\``);
     }
   }
-  return { name, version, registry, trustYoung, local };
+  return { name, version, registry, trustYoung, local, yes };
+}
+function ceremonyFor(tier) {
+  return tier === "official" ? void 0 : "who publishes it and why you trust it";
 }
 function tierOf(request) {
   if (request.name.startsWith(import_core6.OFFICIAL_SCOPE)) {
@@ -1160,7 +1232,29 @@ function recordExtension(manifestFile, name, entry) {
   };
   return (0, import_core6.serializeManifest)(next);
 }
-async function offerConfigEdit(options, name) {
+var NONE = /* @__PURE__ */ new Set(["", "none", "no", "n"]);
+var ALL = /* @__PURE__ */ new Set(["all", "a", "yes", "y"]);
+function chooseEnvironments(answer, offered) {
+  const normalized = answer.trim().toLowerCase();
+  if (NONE.has(normalized)) {
+    return { chosen: [], unknown: [] };
+  }
+  if (ALL.has(normalized)) {
+    return { chosen: offered, unknown: [] };
+  }
+  const chosen = [];
+  const unknown = [];
+  for (const token of normalized.split(/[\s,]+/).filter((part) => part !== "")) {
+    const match = offered.find((environment) => environment.toLowerCase() === token);
+    if (match === void 0) {
+      unknown.push(token);
+    } else {
+      chosen.push(match);
+    }
+  }
+  return { chosen, unknown };
+}
+async function offerConfigEdit(options, name, ask) {
   const { io: io2, root } = options;
   const configFile = (0, import_core6.findConfigFile)(root);
   const line = `Add \`type: ${JSON.stringify(name)}\` to an environment in penv.config.ts.`;
@@ -1175,31 +1269,35 @@ async function offerConfigEdit(options, name) {
     io2.out(line);
     return;
   }
-  if (entries.every((entry) => entry.type === name)) {
+  const offered = entries.filter((entry) => entry.type !== name).map((entry) => entry.environment);
+  if (offered.length === 0) {
     return;
   }
-  if (!io2.interactive) {
+  if (!ask) {
     io2.out(line);
     return;
   }
-  for (const entry of entries) {
-    if (entry.type === name) {
-      continue;
-    }
-    if (!await io2.confirm(`Point \`${entry.environment}\` at ${name} in ${shown}?`)) {
-      continue;
-    }
-    const next = setProviderType(current, entry.environment, name);
+  const { chosen, unknown } = chooseEnvironments(
+    await io2.ask(`Point which of ${offered.join(", ")} at ${name} in ${shown}? all / none / names`),
+    offered
+  );
+  if (unknown.length > 0) {
+    io2.out(`${shown} declares no ${unknown.join(", ")}, so nothing was repointed.`);
+    io2.out(line);
+    return;
+  }
+  for (const environment of chosen) {
+    const next = setProviderType(current, environment, name);
     if (next === void 0) {
-      io2.out(`Add \`type: ${JSON.stringify(name)}\` to \`${entry.environment}\` in ${shown}.`);
+      io2.out(`Add \`type: ${JSON.stringify(name)}\` to \`${environment}\` in ${shown}.`);
       continue;
     }
     current = next;
     (0, import_node_fs5.writeFileSync)(configFile, current);
-    io2.out(`\u2713 ${shown} points \`${entry.environment}\` at ${name}`);
+    io2.out(`\u2713 ${shown} points \`${environment}\` at ${name}`);
   }
 }
-async function offerOnboarding(io2, name, onboard) {
+async function offerOnboarding(io2, name, onboard, ask) {
   if (onboard === void 0) {
     return void 0;
   }
@@ -1208,7 +1306,7 @@ async function offerOnboarding(io2, name, onboard) {
     return void 0;
   }
   const command = `penv ${args.join(" ")}`;
-  if (io2.interactive && await io2.confirm(`Run \`${command}\` now?`)) {
+  if (ask && await io2.confirm(`Run \`${command}\` now?`)) {
     return args;
   }
   io2.out(`Run \`${command}\` to finish setting ${name} up.`);
@@ -1289,8 +1387,9 @@ async function addLocal(options, request) {
   io2.out(`\u2713 ${request.name} resolves from this project and imports \u2014 nothing is pinned`);
   io2.out(`\u2713 ${import_core6.LOCAL_EXTENSIONS_PATH} records it`);
   io2.out(`\u2713 ${declaration} declares its config type`);
-  await offerConfigEdit(options, request.name);
-  return { onboard: await offerOnboarding(io2, request.name, installed.onboard) };
+  const ask = io2.interactive && !request.yes;
+  await offerConfigEdit(options, request.name, ask);
+  return { onboard: await offerOnboarding(io2, request.name, installed.onboard, ask) };
 }
 async function add(options) {
   const { io: io2, fetcher, home, root, manifestFile } = options;
@@ -1300,11 +1399,13 @@ async function add(options) {
   }
   const tier = tierOf(request);
   const now = (options.now ?? (() => /* @__PURE__ */ new Date()))();
+  const ask = io2.interactive && !request.yes;
   if (options.noDownload === true) {
     throw new AddNoDownloadError(request.name);
   }
-  if (options.ci === true || !io2.interactive) {
-    throw new AddNotInteractiveError(request.name);
+  const ceremony = ceremonyFor(tier);
+  if (ceremony !== void 0 && (options.ci === true || !ask)) {
+    throw new AddTrustUnattendedError(request.name, ceremony);
   }
   const release = await fetchRelease({
     name: request.name,
@@ -1346,11 +1447,12 @@ async function add(options) {
   io2.out(`\u2713 ${release.name} ${release.version} installed \u2014 ${provenance}`);
   io2.out(`\u2713 ${import_core6.MANIFEST_PATH} pins it`);
   io2.out(`\u2713 ${declaration} declares its config type`);
-  await offerConfigEdit(options, release.name);
-  return { onboard: await offerOnboarding(io2, release.name, installed.onboard) };
+  await offerConfigEdit(options, release.name, ask);
+  return { onboard: await offerOnboarding(io2, release.name, installed.onboard, ask) };
 }
 
 // src/help.ts
+var import_install = require("@penvhq/cli/install");
 var import_core7 = require("@penvhq/core");
 function printLauncherCommands(io2) {
   io2.out("");
@@ -1359,6 +1461,7 @@ function printLauncherCommands(io2) {
   io2.out(`  install                Installs everything ${import_core7.MANIFEST_PATH} pins`);
   io2.out("  add <package>          Pins a provider extension, and commits the decision");
   io2.out(`  add ${LOCAL_FLAG} <package>  Adds the one this repository builds \u2014 nothing is pinned`);
+  io2.out(`  upgrade [version]      Moves the engine pin and ${import_install.RUNTIME_PACKAGE} together`);
   io2.out("");
 }
 function printInstallHelp(io2) {
@@ -1376,10 +1479,26 @@ function printAddHelp(io2) {
   io2.out(
     `  ${TRUST_YOUNG_FLAG}      Add a release published less than ${MIN_PACKAGE_AGE_DAYS} days ago`
   );
+  io2.out(`  ${YES_FLAG}              Ask nothing \u2014 the config and onboarding offers print instead`);
   io2.out("");
   io2.out(`Pins the release in ${import_core7.MANIFEST_PATH} and writes its type declaration to`);
   io2.out(`${import_core7.EXTENSIONS_PATH}/. Both are committed, so \`${INSTALL_COMMAND}\` gives every machine`);
   io2.out(`the bytes you reviewed. \`${LOCAL_FLAG}\` pins nothing and touches no manifest.`);
+  io2.out("");
+  io2.out(`An \`${import_core7.OFFICIAL_SCOPE}*\` package asks nothing, so it adds unattended. Anything else`);
+  io2.out("records who publishes it and why you trust it, which needs a person at a terminal \u2014");
+  io2.out(`\`${YES_FLAG}\` cannot write that line for you.`);
+}
+function printUpgradeHelp(io2) {
+  io2.out("penv upgrade [version]");
+  io2.out("");
+  io2.out(`  ${YES_FLAG}              Skip the question \u2014 unattended runs need it and a version`);
+  io2.out("");
+  io2.out(`Moves the ${import_core7.ENGINE_PACKAGE} pin in ${import_core7.MANIFEST_PATH} and this project's`);
+  io2.out(`${import_install.RUNTIME_PACKAGE} dependency to the same exact version. No version takes whatever`);
+  io2.out("`latest` points at; the integrity is the one the registry states, never one penv");
+  io2.out("computed. Both files are shown before either moves, and they move together or not");
+  io2.out("at all. Extensions keep their own pins.");
 }
 
 // src/pins.ts
@@ -1388,8 +1507,8 @@ var DEV_PIN_INTEGRITY = "sha512-development-build-not-a-published-release";
 var DEV_PIN_VERSION = "0.0.0-dev";
 var BUNDLED_ENGINE_PIN = {
   package: import_core8.ENGINE_PACKAGE,
-  version: "0.10.0",
-  integrity: "sha512-b+U0c3xWbk1ILtMfPjJW8x5XBxSLAaw/IAOLMBmGvT2uuYv41JPED8PrenEj4s3ZJY5BxpWU9mQcJHEBouaw/Q=="
+  version: "0.12.0",
+  integrity: "sha512-9HUylEIbFq0BGTOW54Vxhkzv8AvuB7H3bImTFP5J+dfglkR7udP2KUsr8b0I2mf45YMTQO5xsYpI5+nhLERGtA=="
 };
 function assertReleasePin(pin) {
   if (pin.integrity === DEV_PIN_INTEGRITY || pin.version === DEV_PIN_VERSION) {
@@ -1430,9 +1549,112 @@ function findAdoptedRoot(cwd) {
   return findUp(cwd, (dir) => (0, import_node_fs6.existsSync)((0, import_core9.stateDir)(dir)));
 }
 
+// src/upgrade.ts
+var import_node_fs7 = require("fs");
+var import_install2 = require("@penvhq/cli/install");
+var import_core10 = require("@penvhq/core");
+function parseRequest2(argv) {
+  let version;
+  let yes = false;
+  for (const token of argv) {
+    if (token === YES_FLAG) {
+      yes = true;
+      continue;
+    }
+    if (token.startsWith("-")) {
+      throw new UpgradeFlagError(token);
+    }
+    if (version !== void 0 || token === "") {
+      throw new UpgradeSubjectError();
+    }
+    version = token;
+  }
+  return { version, yes };
+}
+function renderPinChange(engine, release) {
+  return [
+    import_core10.MANIFEST_PATH,
+    `  -   "integrity": "${engine.integrity}"`,
+    `  -   "version": "${engine.version}"`,
+    `  +   "integrity": "${release.integrity}"`,
+    `  +   "version": "${release.version}"`
+  ];
+}
+function pinnedElsewhere(manifest, version) {
+  return Object.entries(manifest.extensions).filter(([, entry]) => entry.version !== version).map(([name]) => name);
+}
+async function consent(options, release, plan, yes) {
+  const { io: io2, manifest } = options;
+  io2.out(`${import_core10.ENGINE_PACKAGE} ${manifest.engine.version} \u2192 ${release.version}`);
+  io2.out("");
+  for (const line of renderPinChange(manifest.engine, release)) {
+    io2.out(line);
+  }
+  for (const line of (0, import_install2.renderInstallPlan)(plan)) {
+    io2.out(line);
+  }
+  if (yes) {
+    return;
+  }
+  if (!await io2.confirm(`Move this project to ${release.version}?`)) {
+    throw new UpgradeDeclinedError(release.version);
+  }
+}
+async function upgrade(options) {
+  const { io: io2, fetcher, home, root, manifest, manifestFile } = options;
+  const request = parseRequest2(options.argv);
+  if (options.noDownload === true) {
+    throw new UpgradeNoDownloadError();
+  }
+  if ((options.ci === true || !io2.interactive) && !(request.yes && request.version !== void 0)) {
+    throw new UpgradeUnattendedError();
+  }
+  const release = await fetchRelease({
+    name: import_core10.ENGINE_PACKAGE,
+    ...request.version === void 0 ? {} : { version: request.version },
+    retry: UPGRADE_COMMAND,
+    fetcher
+  });
+  const plan = (0, import_install2.planInstall)(root, release.version);
+  if (manifest.engine.version === release.version && plan.satisfied) {
+    io2.out(`\u2713 Already on ${import_core10.ENGINE_PACKAGE} ${release.version} \u2014 nothing to move`);
+    return;
+  }
+  const manifestText = (0, import_core10.serializeManifest)({
+    ...manifest,
+    engine: { package: import_core10.ENGINE_PACKAGE, version: release.version, integrity: release.integrity }
+  });
+  await consent(options, release, plan, request.yes);
+  await installPin({
+    home,
+    kind: "engines",
+    pin: { name: import_core10.ENGINE_PACKAGE, version: release.version, integrity: release.integrity },
+    fetcher
+  });
+  io2.out(`\u2713 ${import_core10.ENGINE_PACKAGE} ${release.version} installed`);
+  if (!plan.satisfied) {
+    try {
+      await (options.install ?? import_install2.installWithPackageManager)(plan);
+    } catch {
+      throw new UpgradeInstallFailedError(plan.manager, release.version);
+    }
+    for (const step of plan.steps.filter((entry) => !entry.satisfied)) {
+      io2.out(`\u2713 ${step.manifest} depends on ${import_install2.RUNTIME_PACKAGE} ${release.version}`);
+    }
+  }
+  (0, import_node_fs7.writeFileSync)(manifestFile, manifestText);
+  io2.out(`\u2713 ${import_core10.MANIFEST_PATH} pins ${import_core10.ENGINE_PACKAGE} ${release.version}`);
+  const kept = pinnedElsewhere(manifest, release.version);
+  if (kept.length > 0) {
+    const subject = kept.length === 1 ? "keeps its own pin" : "keep their own pins";
+    io2.out(`\u2192 ${kept.join(", ")} ${subject} \u2014 \`penv add <package>@<version>\` moves one.`);
+  }
+}
+
 // src/launcher.ts
 var INSTALL = "install";
 var ADD = "add";
+var UPGRADE = "upgrade";
 var VERSION_FLAGS = /* @__PURE__ */ new Set(["--version", "-v"]);
 var HELP_FLAGS = /* @__PURE__ */ new Set(["--help", "-h"]);
 var NO_DOWNLOAD = "--no-download";
@@ -1476,27 +1698,27 @@ function pinsOf(manifest) {
   ];
 }
 function reportable(error, home, argv) {
-  return error instanceof import_core10.UnsupportedManifestFormatError ? error.withLauncherUpdate({
+  return error instanceof import_core11.UnsupportedManifestFormatError ? error.withLauncherUpdate({
     updateCommand: launcherUpdateCommand(home),
     invokedCommand: invokedCommand(argv)
   }) : error;
 }
 function readManifest(manifestFile, home, argv) {
   try {
-    return (0, import_core10.parseManifest)((0, import_node_fs7.readFileSync)(manifestFile, "utf8"));
+    return (0, import_core11.parseManifest)((0, import_node_fs8.readFileSync)(manifestFile, "utf8"));
   } catch (error) {
     throw reportable(error, home, argv);
   }
 }
 function readManifestToRepair(manifestFile, home, argv) {
   try {
-    return readManifestForRepair((0, import_node_fs7.readFileSync)(manifestFile, "utf8"));
+    return readManifestForRepair((0, import_node_fs8.readFileSync)(manifestFile, "utf8"));
   } catch (error) {
     throw reportable(error, home, argv);
   }
 }
 function report(error, io2) {
-  if (error instanceof import_core10.PenvError && error.remedy !== void 0) {
+  if (error instanceof import_core11.PenvError && error.remedy !== void 0) {
     const suffix = `
   ${error.remedy}`;
     const message = error.message.endsWith(suffix) ? error.message.slice(0, -suffix.length) : error.message;
@@ -1518,7 +1740,7 @@ async function launch(options) {
   const { argv, cwd, env, io: io2 } = options;
   const { noDownload, forwarded } = splitLauncherFlags(argv);
   const first = forwarded[0];
-  const home = (0, import_core10.penvHome)(env);
+  const home = (0, import_core11.penvHome)(env);
   if (first !== void 0 && forwarded.slice(1).some((token) => HELP_FLAGS.has(token))) {
     if (first === INSTALL) {
       printInstallHelp(io2);
@@ -1528,6 +1750,10 @@ async function launch(options) {
       printAddHelp(io2);
       return 0;
     }
+    if (first === UPGRADE) {
+      printUpgradeHelp(io2);
+      return 0;
+    }
   }
   const project = findProject(cwd);
   if (project === void 0) {
@@ -1555,6 +1781,20 @@ async function launch(options) {
     io2.out(`penv ${manifest.engine.version}`);
     return 0;
   }
+  if (first === UPGRADE) {
+    await upgrade({
+      argv: forwarded.slice(1),
+      root: project.root,
+      manifestFile: project.manifestFile,
+      manifest,
+      home,
+      io: io2,
+      fetcher: options.fetcher,
+      noDownload,
+      ci: isCi(env)
+    });
+    return 0;
+  }
   const enginePin = enginePinOf(manifest);
   const engineDir = await ensure(options, "engines", enginePin, home, noDownload);
   for (const pin of extensionPinsOf(manifest)) {
@@ -1573,16 +1813,16 @@ async function adopt(options, forwarded, home, cwd, noDownload) {
   if (root === void 0) {
     return 0;
   }
-  const manifestFile = (0, import_node_path7.join)(root, ...import_core10.MANIFEST_PATH.split("/"));
-  if ((0, import_node_fs7.existsSync)(manifestFile)) {
+  const manifestFile = (0, import_node_path7.join)(root, ...import_core11.MANIFEST_PATH.split("/"));
+  if ((0, import_node_fs8.existsSync)(manifestFile)) {
     return 0;
   }
   const pin = releaseEnginePin(options.bundledPin, engine.version);
-  (0, import_node_fs7.writeFileSync)(
+  (0, import_node_fs8.writeFileSync)(
     manifestFile,
-    (0, import_core10.serializeManifest)({ format: import_core10.MANIFEST_FORMAT, engine: pin, extensions: {} })
+    (0, import_core11.serializeManifest)({ format: import_core11.MANIFEST_FORMAT, engine: pin, extensions: {} })
   );
-  options.io.out(`\u2713 ${import_core10.MANIFEST_PATH} pins ${pin.package} ${pin.version}`);
+  options.io.out(`\u2713 ${import_core11.MANIFEST_PATH} pins ${pin.package} ${pin.version}`);
   await ensureAdoptedEngine(
     options,
     { name: pin.package, version: pin.version, integrity: pin.integrity },
@@ -1629,12 +1869,14 @@ async function install(options, pins, home, broken) {
     if (state === "corrupt") {
       throw new PackageCorruptError(pin.name, pin.version, dir);
     }
-    if (state === "installed") {
-      options.io.out(`\u2713 ${pin.name} ${pin.version} already installed`);
-      continue;
+    if (state === "absent") {
+      await installPin({ home, kind, pin, fetcher: options.fetcher });
+    }
+    if (kind === "extensions") {
+      await assertLoadable(pin.name, (0, import_core11.packageEntry)(dir), false);
     }
-    await installPin({ home, kind, pin, fetcher: options.fetcher });
-    options.io.out(`\u2713 ${pin.name} ${pin.version} installed`);
+    const verb = state === "absent" ? "installed" : "already installed";
+    options.io.out(`\u2713 ${pin.name} ${pin.version} ${verb}`);
   }
   if (broken.length > 0) {
     report(new ManifestEntriesUnreadableError(broken), options.io);
@@ -1670,7 +1912,7 @@ async function delegate(options, engine, forwarded, home, cwd) {
     command: process.execPath,
     args: [engine.entry, ...forwarded],
     cwd,
-    env: { ...options.env, [import_core10.PENV_HOME_VAR]: home }
+    env: { ...options.env, [import_core11.PENV_HOME_VAR]: home }
   });
   if (code === 0 && isRootHelp(forwarded)) {
     printLauncherCommands(options.io);