@penvhq/launcher 0.11.0 → 0.12.0

package/dist/bin.cjs

@@ -160,7 +160,7 @@ var AddFlagError = class extends import_core.PenvError {
     super(
       "PENV_ADD_FLAG",
       `\`penv add\` does not understand \`${flag}\``,
-      `Run \`penv add <package>\` with \`${TRUST_YOUNG_FLAG}\`, \`--registry <url>\`, or \`${LOCAL_FLAG}\` \u2014 those are the three it takes.`
+      `Run \`penv add <package>\` with \`${TRUST_YOUNG_FLAG}\`, \`--registry <url>\`, \`${LOCAL_FLAG}\`, or \`${YES_FLAG}\` \u2014 those are the four it takes.`
     );
   }
 };
@@ -306,13 +306,13 @@ var AddNoDownloadError = class extends import_core.PenvError {
     );
   }
 };
-var AddNotInteractiveError = class extends import_core.PenvError {
-  name = "AddNotInteractiveError";
-  constructor(name) {
+var AddTrustUnattendedError = class extends import_core.PenvError {
+  name = "AddTrustUnattendedError";
+  constructor(name, ceremony) {
     super(
-      "PENV_ADD_NOT_INTERACTIVE",
-      `Adding ${name} rewrites ${import_core.MANIFEST_PATH}, and this run has nobody to decide that`,
-      `Run \`${addCommand(name)}\` from a terminal and commit what it writes. In CI, run \`${INSTALL_COMMAND}\` \u2014 it installs the versions the committed manifest already pins.`
+      "PENV_ADD_TRUST_UNATTENDED",
+      `Adding ${name} records ${ceremony}, and this run has nobody to write it`,
+      `Run \`${addCommand(name)}\` from a terminal, without \`${YES_FLAG}\` \u2014 the trust block is a line only a person can write. In CI, run \`${INSTALL_COMMAND}\`: it installs the versions the committed manifest already pins.`
     );
   }
 };
@@ -438,11 +438,11 @@ var UpgradeDeclinedError = class extends import_core.PenvError {
 };
 var UpgradeInstallFailedError = class extends import_core.PenvError {
   name = "UpgradeInstallFailedError";
-  constructor(command) {
+  constructor(manager, version) {
     super(
       "PENV_UPGRADE_INSTALL_FAILED",
-      `${command} did not finish, so ${import_core.MANIFEST_PATH} still pins the engine it pinned before`,
-      `Run \`${command}\` yourself, then run \`${UPGRADE_COMMAND}\` again \u2014 the pin and the dependency move together or not at all.`
+      `${manager} did not finish moving this project to ${import_core.ENGINE_PACKAGE} ${version}, so ${import_core.MANIFEST_PATH} still pins the engine it pinned before`,
+      `Read what ${manager} printed above \u2014 it names what it refused. Fix that and run \`${UPGRADE_COMMAND} ${version}\` again; the pin and the dependency move together or not at all.`
     );
   }
 };
@@ -1100,12 +1100,17 @@ function parseRequest(argv) {
   let registry;
   let trustYoung = false;
   let local = false;
+  let yes = false;
   for (let index = 0; index < argv.length; index += 1) {
     const token = argv[index] ?? "";
     if (token === LOCAL_FLAG) {
       local = true;
       continue;
     }
+    if (token === YES_FLAG) {
+      yes = true;
+      continue;
+    }
     if (token === TRUST_YOUNG_FLAG) {
       trustYoung = true;
       continue;
@@ -1145,7 +1150,10 @@ function parseRequest(argv) {
       throw new AddLocalFlagError(`\`${TRUST_YOUNG_FLAG}\``);
     }
   }
-  return { name, version, registry, trustYoung, local };
+  return { name, version, registry, trustYoung, local, yes };
+}
+function ceremonyFor(tier) {
+  return tier === "official" ? void 0 : "who publishes it and why you trust it";
 }
 function tierOf(request) {
   if (request.name.startsWith(import_core6.OFFICIAL_SCOPE)) {
@@ -1224,7 +1232,29 @@ function recordExtension(manifestFile, name, entry) {
   };
   return (0, import_core6.serializeManifest)(next);
 }
-async function offerConfigEdit(options, name) {
+var NONE = /* @__PURE__ */ new Set(["", "none", "no", "n"]);
+var ALL = /* @__PURE__ */ new Set(["all", "a", "yes", "y"]);
+function chooseEnvironments(answer, offered) {
+  const normalized = answer.trim().toLowerCase();
+  if (NONE.has(normalized)) {
+    return { chosen: [], unknown: [] };
+  }
+  if (ALL.has(normalized)) {
+    return { chosen: offered, unknown: [] };
+  }
+  const chosen = [];
+  const unknown = [];
+  for (const token of normalized.split(/[\s,]+/).filter((part) => part !== "")) {
+    const match = offered.find((environment) => environment.toLowerCase() === token);
+    if (match === void 0) {
+      unknown.push(token);
+    } else {
+      chosen.push(match);
+    }
+  }
+  return { chosen, unknown };
+}
+async function offerConfigEdit(options, name, ask) {
   const { io: io2, root } = options;
   const configFile = (0, import_core6.findConfigFile)(root);
   const line = `Add \`type: ${JSON.stringify(name)}\` to an environment in penv.config.ts.`;
@@ -1239,31 +1269,35 @@ async function offerConfigEdit(options, name) {
     io2.out(line);
     return;
   }
-  if (entries.every((entry) => entry.type === name)) {
+  const offered = entries.filter((entry) => entry.type !== name).map((entry) => entry.environment);
+  if (offered.length === 0) {
     return;
   }
-  if (!io2.interactive) {
+  if (!ask) {
     io2.out(line);
     return;
   }
-  for (const entry of entries) {
-    if (entry.type === name) {
-      continue;
-    }
-    if (!await io2.confirm(`Point \`${entry.environment}\` at ${name} in ${shown}?`)) {
-      continue;
-    }
-    const next = setProviderType(current, entry.environment, name);
+  const { chosen, unknown } = chooseEnvironments(
+    await io2.ask(`Point which of ${offered.join(", ")} at ${name} in ${shown}? all / none / names`),
+    offered
+  );
+  if (unknown.length > 0) {
+    io2.out(`${shown} declares no ${unknown.join(", ")}, so nothing was repointed.`);
+    io2.out(line);
+    return;
+  }
+  for (const environment of chosen) {
+    const next = setProviderType(current, environment, name);
     if (next === void 0) {
-      io2.out(`Add \`type: ${JSON.stringify(name)}\` to \`${entry.environment}\` in ${shown}.`);
+      io2.out(`Add \`type: ${JSON.stringify(name)}\` to \`${environment}\` in ${shown}.`);
       continue;
     }
     current = next;
     (0, import_node_fs5.writeFileSync)(configFile, current);
-    io2.out(`\u2713 ${shown} points \`${entry.environment}\` at ${name}`);
+    io2.out(`\u2713 ${shown} points \`${environment}\` at ${name}`);
   }
 }
-async function offerOnboarding(io2, name, onboard) {
+async function offerOnboarding(io2, name, onboard, ask) {
   if (onboard === void 0) {
     return void 0;
   }
@@ -1272,7 +1306,7 @@ async function offerOnboarding(io2, name, onboard) {
     return void 0;
   }
   const command = `penv ${args.join(" ")}`;
-  if (io2.interactive && await io2.confirm(`Run \`${command}\` now?`)) {
+  if (ask && await io2.confirm(`Run \`${command}\` now?`)) {
     return args;
   }
   io2.out(`Run \`${command}\` to finish setting ${name} up.`);
@@ -1353,8 +1387,9 @@ async function addLocal(options, request) {
   io2.out(`\u2713 ${request.name} resolves from this project and imports \u2014 nothing is pinned`);
   io2.out(`\u2713 ${import_core6.LOCAL_EXTENSIONS_PATH} records it`);
   io2.out(`\u2713 ${declaration} declares its config type`);
-  await offerConfigEdit(options, request.name);
-  return { onboard: await offerOnboarding(io2, request.name, installed.onboard) };
+  const ask = io2.interactive && !request.yes;
+  await offerConfigEdit(options, request.name, ask);
+  return { onboard: await offerOnboarding(io2, request.name, installed.onboard, ask) };
 }
 async function add(options) {
   const { io: io2, fetcher, home, root, manifestFile } = options;
@@ -1364,11 +1399,13 @@ async function add(options) {
   }
   const tier = tierOf(request);
   const now = (options.now ?? (() => /* @__PURE__ */ new Date()))();
+  const ask = io2.interactive && !request.yes;
   if (options.noDownload === true) {
     throw new AddNoDownloadError(request.name);
   }
-  if (options.ci === true || !io2.interactive) {
-    throw new AddNotInteractiveError(request.name);
+  const ceremony = ceremonyFor(tier);
+  if (ceremony !== void 0 && (options.ci === true || !ask)) {
+    throw new AddTrustUnattendedError(request.name, ceremony);
   }
   const release = await fetchRelease({
     name: request.name,
@@ -1410,8 +1447,8 @@ async function add(options) {
   io2.out(`\u2713 ${release.name} ${release.version} installed \u2014 ${provenance}`);
   io2.out(`\u2713 ${import_core6.MANIFEST_PATH} pins it`);
   io2.out(`\u2713 ${declaration} declares its config type`);
-  await offerConfigEdit(options, release.name);
-  return { onboard: await offerOnboarding(io2, release.name, installed.onboard) };
+  await offerConfigEdit(options, release.name, ask);
+  return { onboard: await offerOnboarding(io2, release.name, installed.onboard, ask) };
 }
 
 // src/help.ts
@@ -1442,10 +1479,15 @@ function printAddHelp(io2) {
   io2.out(
     `  ${TRUST_YOUNG_FLAG}      Add a release published less than ${MIN_PACKAGE_AGE_DAYS} days ago`
   );
+  io2.out(`  ${YES_FLAG}              Ask nothing \u2014 the config and onboarding offers print instead`);
   io2.out("");
   io2.out(`Pins the release in ${import_core7.MANIFEST_PATH} and writes its type declaration to`);
   io2.out(`${import_core7.EXTENSIONS_PATH}/. Both are committed, so \`${INSTALL_COMMAND}\` gives every machine`);
   io2.out(`the bytes you reviewed. \`${LOCAL_FLAG}\` pins nothing and touches no manifest.`);
+  io2.out("");
+  io2.out(`An \`${import_core7.OFFICIAL_SCOPE}*\` package asks nothing, so it adds unattended. Anything else`);
+  io2.out("records who publishes it and why you trust it, which needs a person at a terminal \u2014");
+  io2.out(`\`${YES_FLAG}\` cannot write that line for you.`);
 }
 function printUpgradeHelp(io2) {
   io2.out("penv upgrade [version]");
@@ -1465,8 +1507,8 @@ var DEV_PIN_INTEGRITY = "sha512-development-build-not-a-published-release";
 var DEV_PIN_VERSION = "0.0.0-dev";
 var BUNDLED_ENGINE_PIN = {
   package: import_core8.ENGINE_PACKAGE,
-  version: "0.11.0",
-  integrity: "sha512-Y+WKyuPsX4U8/1j0e+VMUhj0LaGrp67YEoDAWyyinrgA+c8IM4H1blqje/YK4LsQwzQDQQDF9bhWIhfmDAWoxA=="
+  version: "0.12.0",
+  integrity: "sha512-9HUylEIbFq0BGTOW54Vxhkzv8AvuB7H3bImTFP5J+dfglkR7udP2KUsr8b0I2mf45YMTQO5xsYpI5+nhLERGtA=="
 };
 function assertReleasePin(pin) {
   if (pin.integrity === DEV_PIN_INTEGRITY || pin.version === DEV_PIN_VERSION) {
@@ -1594,9 +1636,11 @@ async function upgrade(options) {
     try {
       await (options.install ?? import_install2.installWithPackageManager)(plan);
     } catch {
-      throw new UpgradeInstallFailedError(plan.command.join(" "));
+      throw new UpgradeInstallFailedError(plan.manager, release.version);
+    }
+    for (const step of plan.steps.filter((entry) => !entry.satisfied)) {
+      io2.out(`\u2713 ${step.manifest} depends on ${import_install2.RUNTIME_PACKAGE} ${release.version}`);
     }
-    io2.out(`\u2713 package.json depends on ${import_install2.RUNTIME_PACKAGE} ${release.version}`);
   }
   (0, import_node_fs7.writeFileSync)(manifestFile, manifestText);
   io2.out(`\u2713 ${import_core10.MANIFEST_PATH} pins ${import_core10.ENGINE_PACKAGE} ${release.version}`);
@@ -1825,12 +1869,14 @@ async function install(options, pins, home, broken) {
     if (state === "corrupt") {
       throw new PackageCorruptError(pin.name, pin.version, dir);
     }
-    if (state === "installed") {
-      options.io.out(`\u2713 ${pin.name} ${pin.version} already installed`);
-      continue;
+    if (state === "absent") {
+      await installPin({ home, kind, pin, fetcher: options.fetcher });
+    }
+    if (kind === "extensions") {
+      await assertLoadable(pin.name, (0, import_core11.packageEntry)(dir), false);
     }
-    await installPin({ home, kind, pin, fetcher: options.fetcher });
-    options.io.out(`\u2713 ${pin.name} ${pin.version} installed`);
+    const verb = state === "absent" ? "installed" : "already installed";
+    options.io.out(`\u2713 ${pin.name} ${pin.version} ${verb}`);
   }
   if (broken.length > 0) {
     report(new ManifestEntriesUnreadableError(broken), options.io);