@penvhq/launcher 0.11.0 → 0.12.0

package/dist/index.cjs

@@ -24,10 +24,10 @@ __export(src_exports, {
   AddLocalFlagError: () => AddLocalFlagError,
   AddLocalInCiError: () => AddLocalInCiError,
   AddNoDownloadError: () => AddNoDownloadError,
-  AddNotInteractiveError: () => AddNotInteractiveError,
   AddPackageNameError: () => AddPackageNameError,
   AddRegistryError: () => AddRegistryError,
   AddSubjectError: () => AddSubjectError,
+  AddTrustUnattendedError: () => AddTrustUnattendedError,
   ArchiveError: () => ArchiveError,
   BUNDLED_ENGINE_PIN: () => BUNDLED_ENGINE_PIN,
   DEFAULT_REGISTRY: () => DEFAULT_REGISTRY,
@@ -384,7 +384,7 @@ var AddFlagError = class extends import_core.PenvError {
     super(
       "PENV_ADD_FLAG",
       `\`penv add\` does not understand \`${flag}\``,
-      `Run \`penv add <package>\` with \`${TRUST_YOUNG_FLAG}\`, \`--registry <url>\`, or \`${LOCAL_FLAG}\` \u2014 those are the three it takes.`
+      `Run \`penv add <package>\` with \`${TRUST_YOUNG_FLAG}\`, \`--registry <url>\`, \`${LOCAL_FLAG}\`, or \`${YES_FLAG}\` \u2014 those are the four it takes.`
     );
   }
 };
@@ -530,13 +530,13 @@ var AddNoDownloadError = class extends import_core.PenvError {
     );
   }
 };
-var AddNotInteractiveError = class extends import_core.PenvError {
-  name = "AddNotInteractiveError";
-  constructor(name) {
+var AddTrustUnattendedError = class extends import_core.PenvError {
+  name = "AddTrustUnattendedError";
+  constructor(name, ceremony) {
     super(
-      "PENV_ADD_NOT_INTERACTIVE",
-      `Adding ${name} rewrites ${import_core.MANIFEST_PATH}, and this run has nobody to decide that`,
-      `Run \`${addCommand(name)}\` from a terminal and commit what it writes. In CI, run \`${INSTALL_COMMAND}\` \u2014 it installs the versions the committed manifest already pins.`
+      "PENV_ADD_TRUST_UNATTENDED",
+      `Adding ${name} records ${ceremony}, and this run has nobody to write it`,
+      `Run \`${addCommand(name)}\` from a terminal, without \`${YES_FLAG}\` \u2014 the trust block is a line only a person can write. In CI, run \`${INSTALL_COMMAND}\`: it installs the versions the committed manifest already pins.`
     );
   }
 };
@@ -662,11 +662,11 @@ var UpgradeDeclinedError = class extends import_core.PenvError {
 };
 var UpgradeInstallFailedError = class extends import_core.PenvError {
   name = "UpgradeInstallFailedError";
-  constructor(command) {
+  constructor(manager, version) {
     super(
       "PENV_UPGRADE_INSTALL_FAILED",
-      `${command} did not finish, so ${import_core.MANIFEST_PATH} still pins the engine it pinned before`,
-      `Run \`${command}\` yourself, then run \`${UPGRADE_COMMAND}\` again \u2014 the pin and the dependency move together or not at all.`
+      `${manager} did not finish moving this project to ${import_core.ENGINE_PACKAGE} ${version}, so ${import_core.MANIFEST_PATH} still pins the engine it pinned before`,
+      `Read what ${manager} printed above \u2014 it names what it refused. Fix that and run \`${UPGRADE_COMMAND} ${version}\` again; the pin and the dependency move together or not at all.`
     );
   }
 };
@@ -1083,12 +1083,17 @@ function parseRequest(argv) {
   let registry;
   let trustYoung = false;
   let local = false;
+  let yes = false;
   for (let index = 0; index < argv.length; index += 1) {
     const token = argv[index] ?? "";
     if (token === LOCAL_FLAG) {
       local = true;
       continue;
     }
+    if (token === YES_FLAG) {
+      yes = true;
+      continue;
+    }
     if (token === TRUST_YOUNG_FLAG) {
       trustYoung = true;
       continue;
@@ -1128,7 +1133,10 @@ function parseRequest(argv) {
       throw new AddLocalFlagError(`\`${TRUST_YOUNG_FLAG}\``);
     }
   }
-  return { name, version, registry, trustYoung, local };
+  return { name, version, registry, trustYoung, local, yes };
+}
+function ceremonyFor(tier) {
+  return tier === "official" ? void 0 : "who publishes it and why you trust it";
 }
 function tierOf(request) {
   if (request.name.startsWith(import_core5.OFFICIAL_SCOPE)) {
@@ -1207,7 +1215,29 @@ function recordExtension(manifestFile, name, entry) {
   };
   return (0, import_core5.serializeManifest)(next);
 }
-async function offerConfigEdit(options, name) {
+var NONE = /* @__PURE__ */ new Set(["", "none", "no", "n"]);
+var ALL = /* @__PURE__ */ new Set(["all", "a", "yes", "y"]);
+function chooseEnvironments(answer, offered) {
+  const normalized = answer.trim().toLowerCase();
+  if (NONE.has(normalized)) {
+    return { chosen: [], unknown: [] };
+  }
+  if (ALL.has(normalized)) {
+    return { chosen: offered, unknown: [] };
+  }
+  const chosen = [];
+  const unknown = [];
+  for (const token of normalized.split(/[\s,]+/).filter((part) => part !== "")) {
+    const match = offered.find((environment) => environment.toLowerCase() === token);
+    if (match === void 0) {
+      unknown.push(token);
+    } else {
+      chosen.push(match);
+    }
+  }
+  return { chosen, unknown };
+}
+async function offerConfigEdit(options, name, ask) {
   const { io, root } = options;
   const configFile = (0, import_core5.findConfigFile)(root);
   const line = `Add \`type: ${JSON.stringify(name)}\` to an environment in penv.config.ts.`;
@@ -1222,31 +1252,35 @@ async function offerConfigEdit(options, name) {
     io.out(line);
     return;
   }
-  if (entries.every((entry) => entry.type === name)) {
+  const offered = entries.filter((entry) => entry.type !== name).map((entry) => entry.environment);
+  if (offered.length === 0) {
     return;
   }
-  if (!io.interactive) {
+  if (!ask) {
     io.out(line);
     return;
   }
-  for (const entry of entries) {
-    if (entry.type === name) {
-      continue;
-    }
-    if (!await io.confirm(`Point \`${entry.environment}\` at ${name} in ${shown}?`)) {
-      continue;
-    }
-    const next = setProviderType(current, entry.environment, name);
+  const { chosen, unknown } = chooseEnvironments(
+    await io.ask(`Point which of ${offered.join(", ")} at ${name} in ${shown}? all / none / names`),
+    offered
+  );
+  if (unknown.length > 0) {
+    io.out(`${shown} declares no ${unknown.join(", ")}, so nothing was repointed.`);
+    io.out(line);
+    return;
+  }
+  for (const environment of chosen) {
+    const next = setProviderType(current, environment, name);
     if (next === void 0) {
-      io.out(`Add \`type: ${JSON.stringify(name)}\` to \`${entry.environment}\` in ${shown}.`);
+      io.out(`Add \`type: ${JSON.stringify(name)}\` to \`${environment}\` in ${shown}.`);
       continue;
     }
     current = next;
     (0, import_node_fs4.writeFileSync)(configFile, current);
-    io.out(`\u2713 ${shown} points \`${entry.environment}\` at ${name}`);
+    io.out(`\u2713 ${shown} points \`${environment}\` at ${name}`);
   }
 }
-async function offerOnboarding(io, name, onboard) {
+async function offerOnboarding(io, name, onboard, ask) {
   if (onboard === void 0) {
     return void 0;
   }
@@ -1255,7 +1289,7 @@ async function offerOnboarding(io, name, onboard) {
     return void 0;
   }
   const command = `penv ${args.join(" ")}`;
-  if (io.interactive && await io.confirm(`Run \`${command}\` now?`)) {
+  if (ask && await io.confirm(`Run \`${command}\` now?`)) {
     return args;
   }
   io.out(`Run \`${command}\` to finish setting ${name} up.`);
@@ -1336,8 +1370,9 @@ async function addLocal(options, request) {
   io.out(`\u2713 ${request.name} resolves from this project and imports \u2014 nothing is pinned`);
   io.out(`\u2713 ${import_core5.LOCAL_EXTENSIONS_PATH} records it`);
   io.out(`\u2713 ${declaration} declares its config type`);
-  await offerConfigEdit(options, request.name);
-  return { onboard: await offerOnboarding(io, request.name, installed.onboard) };
+  const ask = io.interactive && !request.yes;
+  await offerConfigEdit(options, request.name, ask);
+  return { onboard: await offerOnboarding(io, request.name, installed.onboard, ask) };
 }
 async function add(options) {
   const { io, fetcher, home, root, manifestFile } = options;
@@ -1347,11 +1382,13 @@ async function add(options) {
   }
   const tier = tierOf(request);
   const now = (options.now ?? (() => /* @__PURE__ */ new Date()))();
+  const ask = io.interactive && !request.yes;
   if (options.noDownload === true) {
     throw new AddNoDownloadError(request.name);
   }
-  if (options.ci === true || !io.interactive) {
-    throw new AddNotInteractiveError(request.name);
+  const ceremony = ceremonyFor(tier);
+  if (ceremony !== void 0 && (options.ci === true || !ask)) {
+    throw new AddTrustUnattendedError(request.name, ceremony);
   }
   const release = await fetchRelease({
     name: request.name,
@@ -1393,8 +1430,8 @@ async function add(options) {
   io.out(`\u2713 ${release.name} ${release.version} installed \u2014 ${provenance}`);
   io.out(`\u2713 ${import_core5.MANIFEST_PATH} pins it`);
   io.out(`\u2713 ${declaration} declares its config type`);
-  await offerConfigEdit(options, release.name);
-  return { onboard: await offerOnboarding(io, release.name, installed.onboard) };
+  await offerConfigEdit(options, release.name, ask);
+  return { onboard: await offerOnboarding(io, release.name, installed.onboard, ask) };
 }
 
 // src/delegate.ts
@@ -1541,10 +1578,15 @@ function printAddHelp(io) {
   io.out(
     `  ${TRUST_YOUNG_FLAG}      Add a release published less than ${MIN_PACKAGE_AGE_DAYS} days ago`
   );
+  io.out(`  ${YES_FLAG}              Ask nothing \u2014 the config and onboarding offers print instead`);
   io.out("");
   io.out(`Pins the release in ${import_core7.MANIFEST_PATH} and writes its type declaration to`);
   io.out(`${import_core7.EXTENSIONS_PATH}/. Both are committed, so \`${INSTALL_COMMAND}\` gives every machine`);
   io.out(`the bytes you reviewed. \`${LOCAL_FLAG}\` pins nothing and touches no manifest.`);
+  io.out("");
+  io.out(`An \`${import_core7.OFFICIAL_SCOPE}*\` package asks nothing, so it adds unattended. Anything else`);
+  io.out("records who publishes it and why you trust it, which needs a person at a terminal \u2014");
+  io.out(`\`${YES_FLAG}\` cannot write that line for you.`);
 }
 function printUpgradeHelp(io) {
   io.out("penv upgrade [version]");
@@ -1564,8 +1606,8 @@ var DEV_PIN_INTEGRITY = "sha512-development-build-not-a-published-release";
 var DEV_PIN_VERSION = "0.0.0-dev";
 var BUNDLED_ENGINE_PIN = {
   package: import_core8.ENGINE_PACKAGE,
-  version: "0.11.0",
-  integrity: "sha512-Y+WKyuPsX4U8/1j0e+VMUhj0LaGrp67YEoDAWyyinrgA+c8IM4H1blqje/YK4LsQwzQDQQDF9bhWIhfmDAWoxA=="
+  version: "0.12.0",
+  integrity: "sha512-9HUylEIbFq0BGTOW54Vxhkzv8AvuB7H3bImTFP5J+dfglkR7udP2KUsr8b0I2mf45YMTQO5xsYpI5+nhLERGtA=="
 };
 function assertReleasePin(pin) {
   if (pin.integrity === DEV_PIN_INTEGRITY || pin.version === DEV_PIN_VERSION) {
@@ -1693,9 +1735,11 @@ async function upgrade(options) {
     try {
       await (options.install ?? import_install2.installWithPackageManager)(plan);
     } catch {
-      throw new UpgradeInstallFailedError(plan.command.join(" "));
+      throw new UpgradeInstallFailedError(plan.manager, release.version);
+    }
+    for (const step of plan.steps.filter((entry) => !entry.satisfied)) {
+      io.out(`\u2713 ${step.manifest} depends on ${import_install2.RUNTIME_PACKAGE} ${release.version}`);
     }
-    io.out(`\u2713 package.json depends on ${import_install2.RUNTIME_PACKAGE} ${release.version}`);
   }
   (0, import_node_fs7.writeFileSync)(manifestFile, manifestText);
   io.out(`\u2713 ${import_core10.MANIFEST_PATH} pins ${import_core10.ENGINE_PACKAGE} ${release.version}`);
@@ -1924,12 +1968,14 @@ async function install(options, pins, home, broken) {
     if (state === "corrupt") {
       throw new PackageCorruptError(pin.name, pin.version, dir);
     }
-    if (state === "installed") {
-      options.io.out(`\u2713 ${pin.name} ${pin.version} already installed`);
-      continue;
+    if (state === "absent") {
+      await installPin({ home, kind, pin, fetcher: options.fetcher });
+    }
+    if (kind === "extensions") {
+      await assertLoadable(pin.name, (0, import_core11.packageEntry)(dir), false);
     }
-    await installPin({ home, kind, pin, fetcher: options.fetcher });
-    options.io.out(`\u2713 ${pin.name} ${pin.version} installed`);
+    const verb = state === "absent" ? "installed" : "already installed";
+    options.io.out(`\u2713 ${pin.name} ${pin.version} ${verb}`);
   }
   if (broken.length > 0) {
     report(new ManifestEntriesUnreadableError(broken), options.io);
@@ -1978,10 +2024,10 @@ async function delegate(options, engine, forwarded, home, cwd) {
   AddLocalFlagError,
   AddLocalInCiError,
   AddNoDownloadError,
-  AddNotInteractiveError,
   AddPackageNameError,
   AddRegistryError,
   AddSubjectError,
+  AddTrustUnattendedError,
   ArchiveError,
   BUNDLED_ENGINE_PIN,
   DEFAULT_REGISTRY,