@penvhq/launcher 0.11.0 → 0.13.0

package/dist/index.d.cts

@@ -51,10 +51,13 @@ interface LauncherIo {
  * is two committed files with no runtime in them: the manifest entry, and a
  * type-only declaration.
  *
- * Because those two files are committed, `add` is a decision and needs a person:
- * `--no-download` and a run with nobody at it are both refused before the first
- * request, and CI gets `penv install`, which installs what the manifest already
- * pins rather than choosing what it should.
+ * `add` refuses a run with nobody at it only when it has something to ask. The
+ * questions are known from the package name before anything is fetched, and for
+ * `@penvhq/*` there are none — so the gate used to refuse a run that would have
+ * been silent. What cannot be answered unattended is the trust ceremony, whose
+ * one field is a sentence about why a stranger's code is trusted; `--yes` says
+ * nobody is here to be asked, so it cannot answer that either. `--no-download`
+ * is refused whatever the package, because there is nothing to pin without it.
  *
  * `--local` is the one path with no release behind it: a repository that writes
  * a provider adds the package it already builds. Nothing is fetched and nothing
@@ -365,17 +368,17 @@ declare class AddNoDownloadError extends PenvError {
     constructor(name: string);
 }
 /**
- * `penv add` on a machine with nobody at it.
+ * `penv add` with a question and nobody to answer it.
  *
- * It is refused everywhere, not only for the packages that pay the trust
- * ceremony: what `add` writes is two committed files, and a pipeline that
- * rewrites the manifest it was handed is a pipeline choosing which bytes the
- * project runs. `penv install` is the command CI has, and it installs exactly
- * what a person already decided.
+ * Only the trust ceremony reaches here. It used to refuse every unattended add,
+ * including an `@penvhq/*` one that asks nothing at all — a gate stopping a run
+ * that would have been silent. What no flag can supply is the ceremony's one
+ * field: a sentence about why a stranger's code is trusted, which is why
+ * `--yes` does not answer it either.
  */
-declare class AddNotInteractiveError extends PenvError {
-    readonly name = "AddNotInteractiveError";
-    constructor(name: string);
+declare class AddTrustUnattendedError extends PenvError {
+    readonly name = "AddTrustUnattendedError";
+    constructor(name: string, ceremony: string);
 }
 /** The trust ceremony was declined. Nothing was installed or recorded. */
 declare class TrustDeclinedError extends PenvError {
@@ -449,10 +452,12 @@ declare class UpgradeDeclinedError extends PenvError {
  *
  * The dependency moves before the manifest for exactly this reason: an upgrade
  * that cannot finish leaves a project pinning the engine it was already running.
+ * The remedy is never the command that just failed — that is the one instruction
+ * known not to work. The manager printed why; that line is where to look.
  */
 declare class UpgradeInstallFailedError extends PenvError {
     readonly name = "UpgradeInstallFailedError";
-    constructor(command: string);
+    constructor(manager: string, version: string);
 }
 /** An installed directory with nothing runnable in it. */
 declare class EngineEntryError extends PenvError {
@@ -688,11 +693,14 @@ declare function readTarball(gzipped: Uint8Array, subject: ArchiveSubject): TarE
  * whole purpose is that its bytes are verified, and a mistyped character came
  * back as a supply-chain check failing closed.
  *
- * Two committed files move: the manifest's engine pin and the project's
- * `@penvhq/penv` dependency, at the same exact version. They move together or
- * not at all — one consent covers both, and the dependency lands first, so a
- * package manager that refuses leaves a project still pinning the engine it was
- * already running.
+ * The manifest's engine pin and the project's `@penvhq/penv` dependency move
+ * together, at the same exact version. In a workspace that dependency is plural
+ * — a package declaring its own `@penvhq/penv` is a second bridge running under
+ * the pin, and one repository ran the 0.8 one under a 0.11 manifest for three
+ * releases because `upgrade` looked only at the root. Every `package.json` that
+ * declares it is in the one diff, and they move together or not at all: the
+ * dependencies land first, so a package manager that refuses leaves a project
+ * still pinning the engine it was already running.
  *
  * Extensions are not touched. Each carries its own pin and its own trust
  * decision, and re-pinning them because the engine moved would be penv choosing
@@ -723,4 +731,4 @@ interface UpgradeOptions {
 }
 declare function upgrade(options: UpgradeOptions): Promise<void>;
 
-export { AddFlagError, AddLocalFlagError, AddLocalInCiError, AddNoDownloadError, AddNotInteractiveError, type AddOptions, AddPackageNameError, AddRegistryError, type AddResult, AddSubjectError, ArchiveError, type ArchiveSubject, BUNDLED_ENGINE_PIN, DEFAULT_REGISTRY, DEV_PIN_INTEGRITY, DEV_PIN_VERSION, DeclarationMissingError, DeclarationNotSelfContainedError, type DeclarationSubject, type Delegation, DownloadFailedError, DownloadIntegrityError, ENGINE_BIN, type Engine, EngineEntryError, EnginePinMismatchError, EnginePinUnreleasedError, ExtensionNotImportableError, type ExtensionPackage, ExtensionUnloadableError, type Fetcher, HOME_META_FILE, INSTALL_COMMAND, INTEGRITY_FILE, InstallDeclinedError, type InstallOptions, type InstallState, type Installation, LOCAL_FLAG, type LauncherIo, type LauncherOptions, LocalExtensionUnresolvedError, MIN_PACKAGE_AGE_DAYS, NPM_UPDATE_COMMAND, NoProjectError, OfficialRegistryError, PackageCorruptError, PackageMissingError, PackageTooYoungError, PackageUnknownError, type Pin, type Project, type ProviderEntry, RegistryUnreadableError, type Release, ReleaseIncompleteError, type ReleaseQuery, type Spawner, TRUST_YOUNG_FLAG, type TarEntry, TrustDeclinedError, TrustPublisherMissingError, TrustReasonMissingError, UPGRADE_COMMAND, UpgradeDeclinedError, UpgradeFlagError, UpgradeInstallFailedError, UpgradeNoDownloadError, type UpgradeOptions, UpgradeSubjectError, UpgradeUnattendedError, VersionUnknownError, YES_FLAG, add, assertReleasePin, bundledEngine, declarationPath, engineAt, fetchRelease, findAdoptedRoot, findProject, httpFetcher, inspectInstall, installPin, integrityOf, launcherUpdateCommand, nodeSpawner, packumentUrl, readExtensionPackage, readProviderEntries, readTarball, releaseEnginePin, renderDeclaration, runLauncher, setProviderType, tarballUrl, upgrade, writeDeclaration };
+export { AddFlagError, AddLocalFlagError, AddLocalInCiError, AddNoDownloadError, type AddOptions, AddPackageNameError, AddRegistryError, type AddResult, AddSubjectError, AddTrustUnattendedError, ArchiveError, type ArchiveSubject, BUNDLED_ENGINE_PIN, DEFAULT_REGISTRY, DEV_PIN_INTEGRITY, DEV_PIN_VERSION, DeclarationMissingError, DeclarationNotSelfContainedError, type DeclarationSubject, type Delegation, DownloadFailedError, DownloadIntegrityError, ENGINE_BIN, type Engine, EngineEntryError, EnginePinMismatchError, EnginePinUnreleasedError, ExtensionNotImportableError, type ExtensionPackage, ExtensionUnloadableError, type Fetcher, HOME_META_FILE, INSTALL_COMMAND, INTEGRITY_FILE, InstallDeclinedError, type InstallOptions, type InstallState, type Installation, LOCAL_FLAG, type LauncherIo, type LauncherOptions, LocalExtensionUnresolvedError, MIN_PACKAGE_AGE_DAYS, NPM_UPDATE_COMMAND, NoProjectError, OfficialRegistryError, PackageCorruptError, PackageMissingError, PackageTooYoungError, PackageUnknownError, type Pin, type Project, type ProviderEntry, RegistryUnreadableError, type Release, ReleaseIncompleteError, type ReleaseQuery, type Spawner, TRUST_YOUNG_FLAG, type TarEntry, TrustDeclinedError, TrustPublisherMissingError, TrustReasonMissingError, UPGRADE_COMMAND, UpgradeDeclinedError, UpgradeFlagError, UpgradeInstallFailedError, UpgradeNoDownloadError, type UpgradeOptions, UpgradeSubjectError, UpgradeUnattendedError, VersionUnknownError, YES_FLAG, add, assertReleasePin, bundledEngine, declarationPath, engineAt, fetchRelease, findAdoptedRoot, findProject, httpFetcher, inspectInstall, installPin, integrityOf, launcherUpdateCommand, nodeSpawner, packumentUrl, readExtensionPackage, readProviderEntries, readTarball, releaseEnginePin, renderDeclaration, runLauncher, setProviderType, tarballUrl, upgrade, writeDeclaration };

package/dist/index.d.ts

@@ -51,10 +51,13 @@ interface LauncherIo {
  * is two committed files with no runtime in them: the manifest entry, and a
  * type-only declaration.
  *
- * Because those two files are committed, `add` is a decision and needs a person:
- * `--no-download` and a run with nobody at it are both refused before the first
- * request, and CI gets `penv install`, which installs what the manifest already
- * pins rather than choosing what it should.
+ * `add` refuses a run with nobody at it only when it has something to ask. The
+ * questions are known from the package name before anything is fetched, and for
+ * `@penvhq/*` there are none — so the gate used to refuse a run that would have
+ * been silent. What cannot be answered unattended is the trust ceremony, whose
+ * one field is a sentence about why a stranger's code is trusted; `--yes` says
+ * nobody is here to be asked, so it cannot answer that either. `--no-download`
+ * is refused whatever the package, because there is nothing to pin without it.
  *
  * `--local` is the one path with no release behind it: a repository that writes
  * a provider adds the package it already builds. Nothing is fetched and nothing
@@ -365,17 +368,17 @@ declare class AddNoDownloadError extends PenvError {
     constructor(name: string);
 }
 /**
- * `penv add` on a machine with nobody at it.
+ * `penv add` with a question and nobody to answer it.
  *
- * It is refused everywhere, not only for the packages that pay the trust
- * ceremony: what `add` writes is two committed files, and a pipeline that
- * rewrites the manifest it was handed is a pipeline choosing which bytes the
- * project runs. `penv install` is the command CI has, and it installs exactly
- * what a person already decided.
+ * Only the trust ceremony reaches here. It used to refuse every unattended add,
+ * including an `@penvhq/*` one that asks nothing at all — a gate stopping a run
+ * that would have been silent. What no flag can supply is the ceremony's one
+ * field: a sentence about why a stranger's code is trusted, which is why
+ * `--yes` does not answer it either.
  */
-declare class AddNotInteractiveError extends PenvError {
-    readonly name = "AddNotInteractiveError";
-    constructor(name: string);
+declare class AddTrustUnattendedError extends PenvError {
+    readonly name = "AddTrustUnattendedError";
+    constructor(name: string, ceremony: string);
 }
 /** The trust ceremony was declined. Nothing was installed or recorded. */
 declare class TrustDeclinedError extends PenvError {
@@ -449,10 +452,12 @@ declare class UpgradeDeclinedError extends PenvError {
  *
  * The dependency moves before the manifest for exactly this reason: an upgrade
  * that cannot finish leaves a project pinning the engine it was already running.
+ * The remedy is never the command that just failed — that is the one instruction
+ * known not to work. The manager printed why; that line is where to look.
  */
 declare class UpgradeInstallFailedError extends PenvError {
     readonly name = "UpgradeInstallFailedError";
-    constructor(command: string);
+    constructor(manager: string, version: string);
 }
 /** An installed directory with nothing runnable in it. */
 declare class EngineEntryError extends PenvError {
@@ -688,11 +693,14 @@ declare function readTarball(gzipped: Uint8Array, subject: ArchiveSubject): TarE
  * whole purpose is that its bytes are verified, and a mistyped character came
  * back as a supply-chain check failing closed.
  *
- * Two committed files move: the manifest's engine pin and the project's
- * `@penvhq/penv` dependency, at the same exact version. They move together or
- * not at all — one consent covers both, and the dependency lands first, so a
- * package manager that refuses leaves a project still pinning the engine it was
- * already running.
+ * The manifest's engine pin and the project's `@penvhq/penv` dependency move
+ * together, at the same exact version. In a workspace that dependency is plural
+ * — a package declaring its own `@penvhq/penv` is a second bridge running under
+ * the pin, and one repository ran the 0.8 one under a 0.11 manifest for three
+ * releases because `upgrade` looked only at the root. Every `package.json` that
+ * declares it is in the one diff, and they move together or not at all: the
+ * dependencies land first, so a package manager that refuses leaves a project
+ * still pinning the engine it was already running.
  *
  * Extensions are not touched. Each carries its own pin and its own trust
  * decision, and re-pinning them because the engine moved would be penv choosing
@@ -723,4 +731,4 @@ interface UpgradeOptions {
 }
 declare function upgrade(options: UpgradeOptions): Promise<void>;
 
-export { AddFlagError, AddLocalFlagError, AddLocalInCiError, AddNoDownloadError, AddNotInteractiveError, type AddOptions, AddPackageNameError, AddRegistryError, type AddResult, AddSubjectError, ArchiveError, type ArchiveSubject, BUNDLED_ENGINE_PIN, DEFAULT_REGISTRY, DEV_PIN_INTEGRITY, DEV_PIN_VERSION, DeclarationMissingError, DeclarationNotSelfContainedError, type DeclarationSubject, type Delegation, DownloadFailedError, DownloadIntegrityError, ENGINE_BIN, type Engine, EngineEntryError, EnginePinMismatchError, EnginePinUnreleasedError, ExtensionNotImportableError, type ExtensionPackage, ExtensionUnloadableError, type Fetcher, HOME_META_FILE, INSTALL_COMMAND, INTEGRITY_FILE, InstallDeclinedError, type InstallOptions, type InstallState, type Installation, LOCAL_FLAG, type LauncherIo, type LauncherOptions, LocalExtensionUnresolvedError, MIN_PACKAGE_AGE_DAYS, NPM_UPDATE_COMMAND, NoProjectError, OfficialRegistryError, PackageCorruptError, PackageMissingError, PackageTooYoungError, PackageUnknownError, type Pin, type Project, type ProviderEntry, RegistryUnreadableError, type Release, ReleaseIncompleteError, type ReleaseQuery, type Spawner, TRUST_YOUNG_FLAG, type TarEntry, TrustDeclinedError, TrustPublisherMissingError, TrustReasonMissingError, UPGRADE_COMMAND, UpgradeDeclinedError, UpgradeFlagError, UpgradeInstallFailedError, UpgradeNoDownloadError, type UpgradeOptions, UpgradeSubjectError, UpgradeUnattendedError, VersionUnknownError, YES_FLAG, add, assertReleasePin, bundledEngine, declarationPath, engineAt, fetchRelease, findAdoptedRoot, findProject, httpFetcher, inspectInstall, installPin, integrityOf, launcherUpdateCommand, nodeSpawner, packumentUrl, readExtensionPackage, readProviderEntries, readTarball, releaseEnginePin, renderDeclaration, runLauncher, setProviderType, tarballUrl, upgrade, writeDeclaration };
+export { AddFlagError, AddLocalFlagError, AddLocalInCiError, AddNoDownloadError, type AddOptions, AddPackageNameError, AddRegistryError, type AddResult, AddSubjectError, AddTrustUnattendedError, ArchiveError, type ArchiveSubject, BUNDLED_ENGINE_PIN, DEFAULT_REGISTRY, DEV_PIN_INTEGRITY, DEV_PIN_VERSION, DeclarationMissingError, DeclarationNotSelfContainedError, type DeclarationSubject, type Delegation, DownloadFailedError, DownloadIntegrityError, ENGINE_BIN, type Engine, EngineEntryError, EnginePinMismatchError, EnginePinUnreleasedError, ExtensionNotImportableError, type ExtensionPackage, ExtensionUnloadableError, type Fetcher, HOME_META_FILE, INSTALL_COMMAND, INTEGRITY_FILE, InstallDeclinedError, type InstallOptions, type InstallState, type Installation, LOCAL_FLAG, type LauncherIo, type LauncherOptions, LocalExtensionUnresolvedError, MIN_PACKAGE_AGE_DAYS, NPM_UPDATE_COMMAND, NoProjectError, OfficialRegistryError, PackageCorruptError, PackageMissingError, PackageTooYoungError, PackageUnknownError, type Pin, type Project, type ProviderEntry, RegistryUnreadableError, type Release, ReleaseIncompleteError, type ReleaseQuery, type Spawner, TRUST_YOUNG_FLAG, type TarEntry, TrustDeclinedError, TrustPublisherMissingError, TrustReasonMissingError, UPGRADE_COMMAND, UpgradeDeclinedError, UpgradeFlagError, UpgradeInstallFailedError, UpgradeNoDownloadError, type UpgradeOptions, UpgradeSubjectError, UpgradeUnattendedError, VersionUnknownError, YES_FLAG, add, assertReleasePin, bundledEngine, declarationPath, engineAt, fetchRelease, findAdoptedRoot, findProject, httpFetcher, inspectInstall, installPin, integrityOf, launcherUpdateCommand, nodeSpawner, packumentUrl, readExtensionPackage, readProviderEntries, readTarball, releaseEnginePin, renderDeclaration, runLauncher, setProviderType, tarballUrl, upgrade, writeDeclaration };

package/dist/index.js

@@ -3,10 +3,10 @@ import {
   AddLocalFlagError,
   AddLocalInCiError,
   AddNoDownloadError,
-  AddNotInteractiveError,
   AddPackageNameError,
   AddRegistryError,
   AddSubjectError,
+  AddTrustUnattendedError,
   ArchiveError,
   BUNDLED_ENGINE_PIN,
   DEFAULT_REGISTRY,
@@ -76,16 +76,16 @@ import {
   tarballUrl,
   upgrade,
   writeDeclaration
-} from "./chunk-USYQEKPW.js";
+} from "./chunk-QOQVOYJC.js";
 export {
   AddFlagError,
   AddLocalFlagError,
   AddLocalInCiError,
   AddNoDownloadError,
-  AddNotInteractiveError,
   AddPackageNameError,
   AddRegistryError,
   AddSubjectError,
+  AddTrustUnattendedError,
   ArchiveError,
   BUNDLED_ENGINE_PIN,
   DEFAULT_REGISTRY,

package/package.json

@@ -1,8 +1,14 @@
 {
   "name": "@penvhq/launcher",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "description": "The stable penv launcher: it verifies the engine your project pins and hands over the command.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Itzfeminisce/penvhq.git",
+    "directory": "packages/launcher"
+  },
+  "homepage": "https://github.com/Itzfeminisce/penvhq#readme",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -22,8 +28,8 @@
   ],
   "dependencies": {
     "zod": "4.4.3",
-    "@penvhq/cli": "0.11.0",
-    "@penvhq/core": "0.11.0"
+    "@penvhq/cli": "0.13.0",
+    "@penvhq/core": "0.13.0"
   },
   "scripts": {
     "build": "tsup"