@penvhq/launcher 0.9.5 → 0.11.0

package/dist/bin.js

@@ -5,7 +5,7 @@ import {
   httpFetcher,
   nodeSpawner,
   runLauncher
-} from "./chunk-4YZYBC5T.js";
+} from "./chunk-USYQEKPW.js";
 
 // src/bin.ts
 function readLine() {

package/dist/{chunk-4YZYBC5T.js → chunk-USYQEKPW.js}

@@ -170,12 +170,17 @@ import {
   PenvError
 } from "@penvhq/core";
 var INSTALL_COMMAND = "penv install";
+var UPGRADE_COMMAND = "penv upgrade";
+var YES_FLAG = "--yes";
 var MIN_PACKAGE_AGE_DAYS = 7;
 var TRUST_YOUNG_FLAG = "--trust-young";
 function addCommand(name, version, extra) {
   const spec = version === void 0 ? name : `${name}@${version}`;
   return `penv add ${spec}${extra === void 0 ? "" : ` ${extra}`}`;
 }
+function addCommandFor(name, local) {
+  return local ? `penv add ${LOCAL_FLAG} ${name}` : addCommand(name);
+}
 var NoProjectError = class extends PenvError {
   name = "NoProjectError";
   constructor(cwd) {
@@ -287,6 +292,26 @@ var AddLocalFlagError = class extends PenvError {
     );
   }
 };
+var ExtensionNotImportableError = class extends PenvError {
+  name = "ExtensionNotImportableError";
+  constructor(name, entry, local) {
+    super(
+      "PENV_EXTENSION_NOT_IMPORTABLE",
+      entry === void 0 ? `${name} declares no entry point penv can import` : `${name} resolves to ${entry}, which penv cannot import`,
+      `penv imports a provider with no transform, so its entry has to be built JavaScript. Point the package's \`exports\` at its build output \u2014 \`dist/index.js\` \u2014 then run \`${addCommandFor(name, local)}\` again.`
+    );
+  }
+};
+var ExtensionUnloadableError = class extends PenvError {
+  name = "ExtensionUnloadableError";
+  constructor(name, entry, detail, local) {
+    super(
+      "PENV_EXTENSION_UNLOADABLE",
+      `${name} threw while penv imported ${entry}: ${detail}`,
+      `Build the package and install its dependencies, then run \`${addCommandFor(name, local)}\` again. penv adds a provider it has loaded once, or none.`
+    );
+  }
+};
 var LocalExtensionUnresolvedError = class extends PenvError {
   name = "LocalExtensionUnresolvedError";
   constructor(name, root) {
@@ -329,11 +354,11 @@ var OfficialRegistryError = class extends PenvError {
 };
 var RegistryUnreadableError = class extends PenvError {
   name = "RegistryUnreadableError";
-  constructor(name, url, detail) {
+  constructor(name, url, detail, retry = addCommand(name)) {
     super(
       "PENV_REGISTRY_UNREADABLE",
       `Reading ${name} from ${url} failed: ${detail}`,
-      `Run \`${addCommand(name)}\` again when the registry is reachable.`
+      `Run \`${retry}\` again when the registry is reachable.`
     );
   }
 };
@@ -349,11 +374,11 @@ var PackageUnknownError = class extends PenvError {
 };
 var VersionUnknownError = class extends PenvError {
   name = "VersionUnknownError";
-  constructor(name, version, url) {
+  constructor(name, version, url, retry = addCommand(name)) {
     super(
       "PENV_VERSION_UNKNOWN",
       `${url} publishes no ${version} of ${name}`,
-      `Run \`${addCommand(name)}\` to take the version \`latest\` points at.`
+      `Run \`${retry}\` to take the version \`latest\` points at.`
     );
   }
 };
@@ -478,6 +503,66 @@ var EnginePinMismatchError = class extends PenvError {
     );
   }
 };
+var UpgradeSubjectError = class extends PenvError {
+  name = "UpgradeSubjectError";
+  constructor() {
+    super(
+      "PENV_UPGRADE_SUBJECT",
+      "`penv upgrade` takes one version, or none",
+      `Run \`${UPGRADE_COMMAND}\` to move to whatever \`latest\` points at, or \`${UPGRADE_COMMAND} 0.9.6\` to move to an exact release.`
+    );
+  }
+};
+var UpgradeFlagError = class extends PenvError {
+  name = "UpgradeFlagError";
+  constructor(flag) {
+    super(
+      "PENV_UPGRADE_FLAG",
+      `\`${UPGRADE_COMMAND}\` does not understand \`${flag}\``,
+      `Run \`${UPGRADE_COMMAND} [version]\` with \`${YES_FLAG}\` \u2014 that is the one flag it takes.`
+    );
+  }
+};
+var UpgradeNoDownloadError = class extends PenvError {
+  name = "UpgradeNoDownloadError";
+  constructor() {
+    super(
+      "PENV_UPGRADE_NO_DOWNLOAD",
+      `Upgrading means reading the registry for the version and integrity to pin, and \`--no-download\` says this run does not`,
+      `Run \`${UPGRADE_COMMAND}\` without \`--no-download\`. Nothing was fetched or written.`
+    );
+  }
+};
+var UpgradeUnattendedError = class extends PenvError {
+  name = "UpgradeUnattendedError";
+  constructor() {
+    super(
+      "PENV_UPGRADE_UNATTENDED",
+      `Upgrading rewrites ${MANIFEST_PATH} and package.json, and this run has nobody to decide that`,
+      `Run \`${UPGRADE_COMMAND} <version> ${YES_FLAG}\` \u2014 unattended, penv moves the pin only to a version you named. In CI, run \`${INSTALL_COMMAND}\`: it installs what the committed manifest already pins.`
+    );
+  }
+};
+var UpgradeDeclinedError = class extends PenvError {
+  name = "UpgradeDeclinedError";
+  constructor(version) {
+    super(
+      "PENV_UPGRADE_DECLINED",
+      `${ENGINE_PACKAGE} ${version} was not installed, so ${MANIFEST_PATH} and package.json are unchanged`,
+      `Run \`${UPGRADE_COMMAND} ${version}\` again when you want both of them to move.`
+    );
+  }
+};
+var UpgradeInstallFailedError = class extends PenvError {
+  name = "UpgradeInstallFailedError";
+  constructor(command) {
+    super(
+      "PENV_UPGRADE_INSTALL_FAILED",
+      `${command} did not finish, so ${MANIFEST_PATH} still pins the engine it pinned before`,
+      `Run \`${command}\` yourself, then run \`${UPGRADE_COMMAND}\` again \u2014 the pin and the dependency move together or not at all.`
+    );
+  }
+};
 var EngineEntryError = class extends PenvError {
   name = "EngineEntryError";
   constructor(name, version, dir) {
@@ -593,32 +678,10 @@ function writeDeclaration(options) {
 
 // src/home.ts
 import { readFileSync as readFileSync2 } from "fs";
-import { homedir } from "os";
-import { join as join2, resolve as resolve2, sep as sep2 } from "path";
-import { PenvError as PenvError2 } from "@penvhq/core";
-var PENV_HOME_VAR = "PENV_HOME";
+import { join as join2 } from "path";
 var HOME_META_FILE = "meta.json";
 var INTEGRITY_FILE = ".penv-integrity";
 var NPM_UPDATE_COMMAND = "npm install -g @penvhq/launcher";
-function penvHome(env) {
-  const declared = env[PENV_HOME_VAR];
-  if (declared !== void 0 && declared.trim() !== "") {
-    return resolve2(declared);
-  }
-  return join2(homedir(), ".penv");
-}
-function packageDir(home, kind, name, version) {
-  const bucket = resolve2(home, kind);
-  const dir = resolve2(bucket, ...name.split("/"), version);
-  if (!dir.startsWith(bucket + sep2)) {
-    throw new PenvError2(
-      "PENV_HOME_ESCAPE",
-      `\`${name}\` at \`${version}\` resolves to ${dir}, which is outside ${bucket}`,
-      "Name the package exactly as npm does, e.g. `@penvhq/provider-vault`."
-    );
-  }
-  return dir;
-}
 function launcherUpdateCommand(home) {
   let meta;
   try {
@@ -723,6 +786,7 @@ import {
   writeFileSync as writeFileSync2
 } from "fs";
 import { dirname as dirname2, join as join3 } from "path";
+import { packageDir } from "@penvhq/core";
 var DEFAULT_REGISTRY = "https://registry.npmjs.org";
 function tarballUrl(pin) {
   const registry = (pin.registry ?? DEFAULT_REGISTRY).replace(/\/+$/, "");
@@ -809,7 +873,8 @@ async function fetchRelease(query) {
     throw new RegistryUnreadableError(
       query.name,
       url,
-      cause instanceof Error ? cause.message : String(cause)
+      cause instanceof Error ? cause.message : String(cause),
+      query.retry
     );
   }
   let parsed;
@@ -819,7 +884,8 @@ async function fetchRelease(query) {
     throw new RegistryUnreadableError(
       query.name,
       url,
-      cause instanceof Error ? cause.message : String(cause)
+      cause instanceof Error ? cause.message : String(cause),
+      query.retry
     );
   }
   const packument = record(parsed);
@@ -835,7 +901,7 @@ async function fetchRelease(query) {
   const version = record(at(versions, asked)) === void 0 ? text3(at(tags, asked)) ?? asked : asked;
   const release = record(at(versions, version));
   if (release === void 0) {
-    throw new VersionUnknownError(query.name, asked, url);
+    throw new VersionUnknownError(query.name, asked, url, query.retry);
   }
   const dist = record(at(release, "dist"));
   const integrity = text3(at(dist, "integrity"));
@@ -859,13 +925,16 @@ async function fetchRelease(query) {
 // src/add.ts
 import { mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import { createRequire } from "module";
-import { dirname as dirname3, relative, resolve as resolve3, sep as sep3 } from "path";
+import { dirname as dirname3, relative, resolve as resolve2, sep as sep2 } from "path";
+import { pathToFileURL } from "url";
 import {
   findConfigFile,
+  isImportableEntry,
   LOCAL_EXTENSIONS_PATH as LOCAL_EXTENSIONS_PATH2,
   localExtensionsFile,
   MANIFEST_PATH as MANIFEST_PATH2,
   OFFICIAL_SCOPE as OFFICIAL_SCOPE2,
+  packageEntry,
   parseLocalExtensions,
   serializeLocalExtensions,
   serializeManifest
@@ -1066,7 +1135,7 @@ async function offerConfigEdit(options, name) {
     io.out(line);
     return;
   }
-  const shown = relative(root, configFile).split(sep3).join("/");
+  const shown = relative(root, configFile).split(sep2).join("/");
   let current = readFileSync4(configFile, "utf8");
   const entries = readProviderEntries(current);
   if (entries === void 0 || entries.length === 0) {
@@ -1113,7 +1182,7 @@ async function offerOnboarding(io, name, onboard) {
   return void 0;
 }
 function resolvePackageDir(name, root) {
-  const require2 = createRequire(resolve3(root, "noop.js"));
+  const require2 = createRequire(resolve2(root, "noop.js"));
   try {
     return dirname3(require2.resolve(`${name}/package.json`));
   } catch {
@@ -1132,6 +1201,26 @@ function resolvePackageDir(name, root) {
     return void 0;
   }
 }
+function resolveProjectEntry(name, root) {
+  let file;
+  try {
+    file = createRequire(resolve2(root, "noop.js")).resolve(name);
+  } catch {
+    return void 0;
+  }
+  return { file, importable: isImportableEntry(file) };
+}
+async function assertLoadable(name, entry, local) {
+  if (entry === void 0 || !entry.importable) {
+    throw new ExtensionNotImportableError(name, entry?.file, local);
+  }
+  try {
+    await import(pathToFileURL(entry.file).href);
+  } catch (cause) {
+    const detail = cause instanceof Error ? cause.message : String(cause);
+    throw new ExtensionUnloadableError(name, entry.file, detail, local);
+  }
+}
 function recordLocalExtension(root, name) {
   const file = localExtensionsFile(root);
   let current;
@@ -1152,6 +1241,7 @@ async function addLocal(options, request) {
   if (dir === void 0) {
     throw new LocalExtensionUnresolvedError(request.name, root);
   }
+  await assertLoadable(request.name, resolveProjectEntry(request.name, root), true);
   const installed = readExtensionPackage(dir);
   const declaration = writeDeclaration({
     root,
@@ -1163,7 +1253,7 @@ async function addLocal(options, request) {
     types: installed.types
   });
   recordLocalExtension(root, request.name);
-  io.out(`\u2713 ${request.name} resolves from this project \u2014 nothing is pinned`);
+  io.out(`\u2713 ${request.name} resolves from this project and imports \u2014 nothing is pinned`);
   io.out(`\u2713 ${LOCAL_EXTENSIONS_PATH2} records it`);
   io.out(`\u2713 ${declaration} declares its config type`);
   await offerConfigEdit(options, request.name);
@@ -1208,6 +1298,7 @@ async function add(options) {
     },
     fetcher
   });
+  await assertLoadable(release.name, packageEntry(dir), false);
   const installed = readExtensionPackage(dir);
   const declaration = writeDeclaration({
     root,
@@ -1272,8 +1363,8 @@ function nodeSpawner() {
 // src/engine.ts
 import { existsSync as existsSync2, readFileSync as readFileSync5 } from "fs";
 import { createRequire as createRequire2 } from "module";
-import { dirname as dirname4, join as join5, resolve as resolve4, sep as sep4 } from "path";
-import { ENGINE_PACKAGE as ENGINE_PACKAGE2, PenvError as PenvError3 } from "@penvhq/core";
+import { dirname as dirname4, join as join5, resolve as resolve3, sep as sep3 } from "path";
+import { ENGINE_PACKAGE as ENGINE_PACKAGE2, PenvError as PenvError2 } from "@penvhq/core";
 var ENGINE_BIN = "penv-engine";
 function readPackageManifest(dir) {
   try {
@@ -1299,9 +1390,9 @@ function binPath(bin) {
 function engineAt(dir, name, version) {
   const manifest = readPackageManifest(dir);
   const bin = manifest === void 0 ? void 0 : binPath(manifest.bin);
-  const root = resolve4(dir);
-  const entry = bin === void 0 ? void 0 : resolve4(root, bin);
-  if (entry === void 0 || !entry.startsWith(root + sep4) || !existsSync2(entry)) {
+  const root = resolve3(dir);
+  const entry = bin === void 0 ? void 0 : resolve3(root, bin);
+  if (entry === void 0 || !entry.startsWith(root + sep3) || !existsSync2(entry)) {
     throw new EngineEntryError(name, version, dir);
   }
   return { name, version, dir, entry };
@@ -1312,7 +1403,7 @@ function bundledEngine() {
   try {
     manifestFile = require2.resolve(`${ENGINE_PACKAGE2}/package.json`);
   } catch {
-    throw new PenvError3(
+    throw new PenvError2(
       "PENV_NO_BUNDLED_ENGINE",
       `This penv installation is missing ${ENGINE_PACKAGE2}, the engine it runs \`init\` with`,
       "Reinstall the launcher with `npm install -g @penvhq/launcher`."
@@ -1342,8 +1433,8 @@ var DEV_PIN_INTEGRITY = "sha512-development-build-not-a-published-release";
 var DEV_PIN_VERSION = "0.0.0-dev";
 var BUNDLED_ENGINE_PIN = {
   package: ENGINE_PACKAGE3,
-  version: "0.9.5",
-  integrity: "sha512-cacsvynscs6G0NThpGaK1BfKy3POQSoogI/vvQNZ5sTZaftzwg4mPtUpT+i2GSc3KbYAHQu4Kq9MpYLOvSvulA=="
+  version: "0.11.0",
+  integrity: "sha512-Y+WKyuPsX4U8/1j0e+VMUhj0LaGrp67YEoDAWyyinrgA+c8IM4H1blqje/YK4LsQwzQDQQDF9bhWIhfmDAWoxA=="
 };
 function assertReleasePin(pin) {
   if (pin.integrity === DEV_PIN_INTEGRITY || pin.version === DEV_PIN_VERSION) {
@@ -1360,11 +1451,11 @@ function releaseEnginePin(pin, ranVersion) {
 
 // src/project.ts
 import { existsSync as existsSync3 } from "fs";
-import { dirname as dirname5, join as join6, resolve as resolve5 } from "path";
+import { dirname as dirname5, join as join6, resolve as resolve4 } from "path";
 import { MANIFEST_PATH as MANIFEST_PATH3, stateDir } from "@penvhq/core";
 var MANIFEST_SEGMENTS = MANIFEST_PATH3.split("/");
 function findUp(cwd, matches) {
-  let dir = resolve5(cwd);
+  let dir = resolve4(cwd);
   for (; ; ) {
     if (matches(dir)) {
       return dir;
@@ -1384,19 +1475,174 @@ function findAdoptedRoot(cwd) {
   return findUp(cwd, (dir) => existsSync3(stateDir(dir)));
 }
 
+// src/upgrade.ts
+import { writeFileSync as writeFileSync4 } from "fs";
+import {
+  installWithPackageManager,
+  planInstall,
+  RUNTIME_PACKAGE,
+  renderInstallPlan
+} from "@penvhq/cli/install";
+import { ENGINE_PACKAGE as ENGINE_PACKAGE4, MANIFEST_PATH as MANIFEST_PATH4, serializeManifest as serializeManifest2 } from "@penvhq/core";
+function parseRequest2(argv) {
+  let version;
+  let yes = false;
+  for (const token of argv) {
+    if (token === YES_FLAG) {
+      yes = true;
+      continue;
+    }
+    if (token.startsWith("-")) {
+      throw new UpgradeFlagError(token);
+    }
+    if (version !== void 0 || token === "") {
+      throw new UpgradeSubjectError();
+    }
+    version = token;
+  }
+  return { version, yes };
+}
+function renderPinChange(engine, release) {
+  return [
+    MANIFEST_PATH4,
+    `  -   "integrity": "${engine.integrity}"`,
+    `  -   "version": "${engine.version}"`,
+    `  +   "integrity": "${release.integrity}"`,
+    `  +   "version": "${release.version}"`
+  ];
+}
+function pinnedElsewhere(manifest, version) {
+  return Object.entries(manifest.extensions).filter(([, entry]) => entry.version !== version).map(([name]) => name);
+}
+async function consent(options, release, plan, yes) {
+  const { io, manifest } = options;
+  io.out(`${ENGINE_PACKAGE4} ${manifest.engine.version} \u2192 ${release.version}`);
+  io.out("");
+  for (const line of renderPinChange(manifest.engine, release)) {
+    io.out(line);
+  }
+  for (const line of renderInstallPlan(plan)) {
+    io.out(line);
+  }
+  if (yes) {
+    return;
+  }
+  if (!await io.confirm(`Move this project to ${release.version}?`)) {
+    throw new UpgradeDeclinedError(release.version);
+  }
+}
+async function upgrade(options) {
+  const { io, fetcher, home, root, manifest, manifestFile } = options;
+  const request = parseRequest2(options.argv);
+  if (options.noDownload === true) {
+    throw new UpgradeNoDownloadError();
+  }
+  if ((options.ci === true || !io.interactive) && !(request.yes && request.version !== void 0)) {
+    throw new UpgradeUnattendedError();
+  }
+  const release = await fetchRelease({
+    name: ENGINE_PACKAGE4,
+    ...request.version === void 0 ? {} : { version: request.version },
+    retry: UPGRADE_COMMAND,
+    fetcher
+  });
+  const plan = planInstall(root, release.version);
+  if (manifest.engine.version === release.version && plan.satisfied) {
+    io.out(`\u2713 Already on ${ENGINE_PACKAGE4} ${release.version} \u2014 nothing to move`);
+    return;
+  }
+  const manifestText = serializeManifest2({
+    ...manifest,
+    engine: { package: ENGINE_PACKAGE4, version: release.version, integrity: release.integrity }
+  });
+  await consent(options, release, plan, request.yes);
+  await installPin({
+    home,
+    kind: "engines",
+    pin: { name: ENGINE_PACKAGE4, version: release.version, integrity: release.integrity },
+    fetcher
+  });
+  io.out(`\u2713 ${ENGINE_PACKAGE4} ${release.version} installed`);
+  if (!plan.satisfied) {
+    try {
+      await (options.install ?? installWithPackageManager)(plan);
+    } catch {
+      throw new UpgradeInstallFailedError(plan.command.join(" "));
+    }
+    io.out(`\u2713 package.json depends on ${RUNTIME_PACKAGE} ${release.version}`);
+  }
+  writeFileSync4(manifestFile, manifestText);
+  io.out(`\u2713 ${MANIFEST_PATH4} pins ${ENGINE_PACKAGE4} ${release.version}`);
+  const kept = pinnedElsewhere(manifest, release.version);
+  if (kept.length > 0) {
+    const subject = kept.length === 1 ? "keeps its own pin" : "keep their own pins";
+    io.out(`\u2192 ${kept.join(", ")} ${subject} \u2014 \`penv add <package>@<version>\` moves one.`);
+  }
+}
+
 // src/launcher.ts
-import { existsSync as existsSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "fs";
 import { join as join7 } from "path";
 import {
   MANIFEST_FORMAT,
-  MANIFEST_PATH as MANIFEST_PATH4,
-  PenvError as PenvError4,
+  MANIFEST_PATH as MANIFEST_PATH6,
+  PENV_HOME_VAR,
+  PenvError as PenvError3,
   parseManifest as parseManifest2,
-  serializeManifest as serializeManifest2,
+  penvHome,
+  serializeManifest as serializeManifest3,
   UnsupportedManifestFormatError
 } from "@penvhq/core";
+
+// src/help.ts
+import { RUNTIME_PACKAGE as RUNTIME_PACKAGE2 } from "@penvhq/cli/install";
+import { ENGINE_PACKAGE as ENGINE_PACKAGE5, EXTENSIONS_PATH as EXTENSIONS_PATH3, MANIFEST_PATH as MANIFEST_PATH5 } from "@penvhq/core";
+function printLauncherCommands(io) {
+  io.out("");
+  io.out("LAUNCHER COMMANDS (penv itself, whatever engine a project pins)");
+  io.out("");
+  io.out(`  install                Installs everything ${MANIFEST_PATH5} pins`);
+  io.out("  add <package>          Pins a provider extension, and commits the decision");
+  io.out(`  add ${LOCAL_FLAG} <package>  Adds the one this repository builds \u2014 nothing is pinned`);
+  io.out(`  upgrade [version]      Moves the engine pin and ${RUNTIME_PACKAGE2} together`);
+  io.out("");
+}
+function printInstallHelp(io) {
+  io.out(`${INSTALL_COMMAND}`);
+  io.out("");
+  io.out(`Downloads, verifies and installs every version ${MANIFEST_PATH5} pins \u2014 the engine and`);
+  io.out("every extension \u2014 into $PENV_HOME. The one penv command CI and production run that");
+  io.out("may reach the registry.");
+}
+function printAddHelp(io) {
+  io.out("penv add <package>[@<version>]");
+  io.out("");
+  io.out(`  ${LOCAL_FLAG}            Add the package this repository builds, resolved from it`);
+  io.out("  --registry <url>   Take the release from a private registry instead of npmjs");
+  io.out(
+    `  ${TRUST_YOUNG_FLAG}      Add a release published less than ${MIN_PACKAGE_AGE_DAYS} days ago`
+  );
+  io.out("");
+  io.out(`Pins the release in ${MANIFEST_PATH5} and writes its type declaration to`);
+  io.out(`${EXTENSIONS_PATH3}/. Both are committed, so \`${INSTALL_COMMAND}\` gives every machine`);
+  io.out(`the bytes you reviewed. \`${LOCAL_FLAG}\` pins nothing and touches no manifest.`);
+}
+function printUpgradeHelp(io) {
+  io.out("penv upgrade [version]");
+  io.out("");
+  io.out(`  ${YES_FLAG}              Skip the question \u2014 unattended runs need it and a version`);
+  io.out("");
+  io.out(`Moves the ${ENGINE_PACKAGE5} pin in ${MANIFEST_PATH5} and this project's`);
+  io.out(`${RUNTIME_PACKAGE2} dependency to the same exact version. No version takes whatever`);
+  io.out("`latest` points at; the integrity is the one the registry states, never one penv");
+  io.out("computed. Both files are shown before either moves, and they move together or not");
+  io.out("at all. Extensions keep their own pins.");
+}
+
+// src/launcher.ts
 var INSTALL = "install";
 var ADD = "add";
+var UPGRADE = "upgrade";
 var VERSION_FLAGS = /* @__PURE__ */ new Set(["--version", "-v"]);
 var HELP_FLAGS = /* @__PURE__ */ new Set(["--help", "-h"]);
 var NO_DOWNLOAD = "--no-download";
@@ -1460,7 +1706,7 @@ function readManifestToRepair(manifestFile, home, argv) {
   }
 }
 function report(error, io) {
-  if (error instanceof PenvError4 && error.remedy !== void 0) {
+  if (error instanceof PenvError3 && error.remedy !== void 0) {
     const suffix = `
   ${error.remedy}`;
     const message = error.message.endsWith(suffix) ? error.message.slice(0, -suffix.length) : error.message;
@@ -1483,6 +1729,20 @@ async function launch(options) {
   const { noDownload, forwarded } = splitLauncherFlags(argv);
   const first = forwarded[0];
   const home = penvHome(env);
+  if (first !== void 0 && forwarded.slice(1).some((token) => HELP_FLAGS.has(token))) {
+    if (first === INSTALL) {
+      printInstallHelp(io);
+      return 0;
+    }
+    if (first === ADD) {
+      printAddHelp(io);
+      return 0;
+    }
+    if (first === UPGRADE) {
+      printUpgradeHelp(io);
+      return 0;
+    }
+  }
   const project = findProject(cwd);
   if (project === void 0) {
     if (first !== void 0 && VERSION_FLAGS.has(first)) {
@@ -1509,6 +1769,20 @@ async function launch(options) {
     io.out(`penv ${manifest.engine.version}`);
     return 0;
   }
+  if (first === UPGRADE) {
+    await upgrade({
+      argv: forwarded.slice(1),
+      root: project.root,
+      manifestFile: project.manifestFile,
+      manifest,
+      home,
+      io,
+      fetcher: options.fetcher,
+      noDownload,
+      ci: isCi(env)
+    });
+    return 0;
+  }
   const enginePin = enginePinOf(manifest);
   const engineDir = await ensure(options, "engines", enginePin, home, noDownload);
   for (const pin of extensionPinsOf(manifest)) {
@@ -1527,16 +1801,16 @@ async function adopt(options, forwarded, home, cwd, noDownload) {
   if (root === void 0) {
     return 0;
   }
-  const manifestFile = join7(root, ...MANIFEST_PATH4.split("/"));
+  const manifestFile = join7(root, ...MANIFEST_PATH6.split("/"));
   if (existsSync4(manifestFile)) {
     return 0;
   }
   const pin = releaseEnginePin(options.bundledPin, engine.version);
-  writeFileSync4(
+  writeFileSync5(
     manifestFile,
-    serializeManifest2({ format: MANIFEST_FORMAT, engine: pin, extensions: {} })
+    serializeManifest3({ format: MANIFEST_FORMAT, engine: pin, extensions: {} })
   );
-  options.io.out(`\u2713 ${MANIFEST_PATH4} pins ${pin.package} ${pin.version}`);
+  options.io.out(`\u2713 ${MANIFEST_PATH6} pins ${pin.package} ${pin.version}`);
   await ensureAdoptedEngine(
     options,
     { name: pin.package, version: pin.version, integrity: pin.integrity },
@@ -1615,19 +1889,29 @@ async function addExtension(options, project, home, argv, noDownload) {
   const engine = engineAt(dir, enginePin.name, enginePin.version);
   return delegate(options, engine, onboard, home, options.cwd);
 }
-function delegate(options, engine, forwarded, home, cwd) {
-  return options.spawn({
+function isRootHelp(forwarded) {
+  const first = forwarded[0];
+  return first === void 0 || HELP_FLAGS.has(first);
+}
+async function delegate(options, engine, forwarded, home, cwd) {
+  const code = await options.spawn({
     command: process.execPath,
     args: [engine.entry, ...forwarded],
     cwd,
     env: { ...options.env, [PENV_HOME_VAR]: home }
   });
+  if (code === 0 && isRootHelp(forwarded)) {
+    printLauncherCommands(options.io);
+  }
+  return code;
 }
 
 export {
   readProviderEntries,
   setProviderType,
   INSTALL_COMMAND,
+  UPGRADE_COMMAND,
+  YES_FLAG,
   MIN_PACKAGE_AGE_DAYS,
   TRUST_YOUNG_FLAG,
   NoProjectError,
@@ -1642,6 +1926,8 @@ export {
   AddFlagError,
   LOCAL_FLAG,
   AddLocalFlagError,
+  ExtensionNotImportableError,
+  ExtensionUnloadableError,
   LocalExtensionUnresolvedError,
   AddLocalInCiError,
   AddRegistryError,
@@ -1660,17 +1946,20 @@ export {
   DeclarationNotSelfContainedError,
   EnginePinUnreleasedError,
   EnginePinMismatchError,
+  UpgradeSubjectError,
+  UpgradeFlagError,
+  UpgradeNoDownloadError,
+  UpgradeUnattendedError,
+  UpgradeDeclinedError,
+  UpgradeInstallFailedError,
   EngineEntryError,
   readExtensionPackage,
   renderDeclaration,
   declarationPath,
   writeDeclaration,
-  PENV_HOME_VAR,
   HOME_META_FILE,
   INTEGRITY_FILE,
   NPM_UPDATE_COMMAND,
-  penvHome,
-  packageDir,
   launcherUpdateCommand,
   integrityOf,
   readTarball,
@@ -1693,6 +1982,7 @@ export {
   releaseEnginePin,
   findProject,
   findAdoptedRoot,
+  upgrade,
   runLauncher
 };
-//# sourceMappingURL=chunk-4YZYBC5T.js.map
+//# sourceMappingURL=chunk-USYQEKPW.js.map