pmsec 0.5.0 → 0.5.2

package/README.md

@@ -38,7 +38,7 @@ Zero runtime dependencies, ESM, requires Node 22+.
 | `pmsec disable` | Remove every key the bundle set; other keys in the file are preserved. |
 | `pmsec --version` | Print the installed pmsec version. |
 
-Options: `--tool npm,pnpm,yarn,bun,cargo,mise,uv`, `--days N` (override the 3-day default), `--json`.
+Options: `--tool npm,pnpm,yarn,bun,cargo,mise,uv`, `--days N` (override the 3-day default), `--force` (overwrite stricter existing cooldowns; default is monotonic), `--json`.
 
 When the target file is owned by another user (typical: `~/.npmrc` left
 root-owned by an old `sudo npm config set`), the write fails with `EACCES`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmsec",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "publishConfig": {
     "access": "public"
   },

package/src/cli.mjs

@@ -31,6 +31,7 @@ Commands:
 Options:
   --tool TOOL[,TOOL]    Restrict to specific tools (npm,pnpm,yarn,bun,cargo,mise,uv)
   --days N              Override cooldown days (default 3)
+  --force               Overwrite stricter existing cooldowns (otherwise enable is monotonic)
   --json                Emit JSON output
   -V, --version         Show version
   -h, --help            Show this help
@@ -38,6 +39,7 @@ Options:
 Examples:
   npx pmsec enable
   npx pmsec enable --days 7
+  npx pmsec enable --days 1 --force
   npx pmsec check
   npx pmsec disable --tool npm
 `;
@@ -49,13 +51,14 @@ function parseDays(raw) {
 }
 
 function parse(argv) {
-  const opts = { command: null, json: false, only: null, days: BUNDLE_DAYS, help: false, version: false };
+  const opts = { command: null, json: false, only: null, days: BUNDLE_DAYS, force: false, help: false, version: false };
   const positional = [];
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i];
     if (a === "-h" || a === "--help") opts.help = true;
     else if (a === "-V" || a === "--version") opts.version = true;
     else if (a === "--json") opts.json = true;
+    else if (a === "--force") opts.force = true;
     else if (a === "--tool") opts.only = argv[++i].split(",");
     else if (a.startsWith("--tool=")) opts.only = a.slice(7).split(",");
     else if (a === "--days") opts.days = parseDays(argv[++i]);
@@ -134,7 +137,7 @@ function explainFsError(e, tool) {
   return `${tool}: ${e?.message ?? e}`;
 }
 
-async function runEnable(targets, json, days, env, home, platform, out, err) {
+async function runEnable(targets, json, days, force, env, home, platform, out, err) {
   const results = [];
   const failures = [];
   const warnings = [];
@@ -142,18 +145,28 @@ async function runEnable(targets, json, days, env, home, platform, out, err) {
     const warn = preflightWarn(t);
     if (warn) warnings.push({ tool: t.name, warn });
     try {
-      const r = await t.write(days, env, home, platform);
-      results.push({ tool: t.name, path: r.path, days, ok: true, warn });
+      let effective = days;
+      let kept = false;
+      if (!force) {
+        const current = await t.read(env, home, platform);
+        const currentDays = current.days ?? 0;
+        effective = Math.max(currentDays, days);
+        kept = currentDays >= days && currentDays > 0;
+      }
+      const r = await t.write(effective, env, home, platform);
+      results.push({ tool: t.name, path: r.path, days: effective, requested: days, kept, forced: force, ok: true, warn });
     } catch (e) {
       failures.push({ tool: t.name, error: explainFsError(e, t.name) });
-      results.push({ tool: t.name, path: e?.path ?? null, days, ok: false, error: explainFsError(e, t.name), warn });
+      results.push({ tool: t.name, path: e?.path ?? null, days, requested: days, kept: false, forced: force, ok: false, error: explainFsError(e, t.name), warn });
     }
   }
   if (json) out.write(JSON.stringify({ enabled: true, bundleDays: days, results, warnings, ok: failures.length === 0 }, null, 2) + "\n");
   else for (const r of results) {
     if (r.ok) {
+      const action = r.kept ? "keep   " : "enable ";
+      const note = r.kept ? `  (kept existing ${r.days}d ≥ ${r.requested}d)` : "";
       const tail = r.warn ? `\n     ⚠ ${r.warn}` : "";
-      out.write(`enable  ${r.tool.padEnd(4)} [${r.path}]${tail}\n`);
+      out.write(`${action} ${r.tool.padEnd(4)} [${r.path}]${note}${tail}\n`);
     } else {
       out.write(`FAIL    ${r.tool.padEnd(4)} ${r.error}\n`);
     }
@@ -201,7 +214,7 @@ export async function run(argv, {
   catch (e) { err.write(`pmsec: ${e.message}\n`); return 2; }
   try {
     if (opts.command === "check") return await runCheck(targets, opts, env, home, platform, out, err);
-    if (opts.command === "enable") return await runEnable(targets, opts.json, opts.days, env, home, platform, out, err);
+    if (opts.command === "enable") return await runEnable(targets, opts.json, opts.days, opts.force, env, home, platform, out, err);
     if (opts.command === "disable") return await runDisable(targets, opts.json, env, home, platform, out, err);
     err.write(`pmsec: unknown command "${opts.command}"\n`);
     return 2;