turbo 2.11.8 → 2.11.9-canary.1

package/bin/turbo

@@ -386,7 +386,9 @@ function shouldOwnWindowsCtrlC() {
     return false;
   }
 
-  if (usesTui(process.argv.slice(2))) {
+  const args = process.argv.slice(2);
+  // Exec's command reads the console directly, like the TUI does.
+  if (usesTui(args) || selectsExec(args)) {
     return false;
   }
 
@@ -410,6 +412,62 @@ function usesTui(args) {
   return false;
 }
 
+// Global flags that take the next word as their value. Keep in step with the
+// global options in crates/turborepo-cli/src/cli/args.rs.
+const GLOBAL_VALUE_FLAGS = new Set([
+  "--api",
+  "--cwd",
+  "--heap",
+  "--login",
+  "--remote-cache-timeout",
+  "--root-turbo-json",
+  "--team",
+  "--token",
+  "--trace",
+  "--ui",
+  "--verbosity",
+  "--experimental-otel-endpoint",
+  "--experimental-otel-header",
+  "--experimental-otel-interval-ms",
+  "--experimental-otel-protocol",
+  "--experimental-otel-resource",
+  "--experimental-otel-timeout-ms",
+]);
+
+// Global flags whose value is optional. Like turbo, take the next word as
+// the value unless it is a flag.
+const GLOBAL_OPTIONAL_VALUE_FLAGS = new Set([
+  "--experimental-otel-enabled",
+  "--experimental-otel-metrics-run-summary",
+  "--experimental-otel-metrics-task-details",
+  "--experimental-otel-use-remote-cache-token",
+]);
+
+// The command is the first word that is not a flag or a flag's value, so a
+// task or argument named `exec` does not select it.
+function selectsExec(args) {
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--") {
+      return false;
+    }
+    if (arg.startsWith("-")) {
+      const next = args[i + 1];
+      if (
+        GLOBAL_VALUE_FLAGS.has(arg) ||
+        (GLOBAL_OPTIONAL_VALUE_FLAGS.has(arg) &&
+          next !== undefined &&
+          !next.startsWith("-"))
+      ) {
+        i++;
+      }
+      continue;
+    }
+    return arg === "exec";
+  }
+  return false;
+}
+
 function runTurbo() {
   if (shouldOwnWindowsCtrlC()) {
     return runTurboChild(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "turbo",
-  "version": "2.11.8",
+  "version": "2.11.9-canary.1",
   "description": "Turborepo is the build system for coding agents.",
   "homepage": "https://turborepo.dev",
   "bugs": "https://github.com/vercel/turborepo/issues",
@@ -19,12 +19,12 @@
   ],
   "main": "./bin/turbo",
   "optionalDependencies": {
-    "@turbo/darwin-64": "2.11.8",
-    "@turbo/darwin-arm64": "2.11.8",
-    "@turbo/linux-64": "2.11.8",
-    "@turbo/linux-arm64": "2.11.8",
-    "@turbo/windows-64": "2.11.8",
-    "@turbo/windows-arm64": "2.11.8"
+    "@turbo/darwin-64": "2.11.9-canary.1",
+    "@turbo/darwin-arm64": "2.11.9-canary.1",
+    "@turbo/linux-64": "2.11.9-canary.1",
+    "@turbo/linux-arm64": "2.11.9-canary.1",
+    "@turbo/windows-64": "2.11.9-canary.1",
+    "@turbo/windows-arm64": "2.11.9-canary.1"
   },
   "scripts": {
     "postversion": "node bump-version.js"

package/schema.json

@@ -190,6 +190,17 @@
         }
       ]
     },
+    "setup": {
+      "description": "Repository policy for `turbo setup`. Only allowed in the root turbo.json and requires `futureFlags.experimentalSetup`.",
+      "anyOf": [
+        {
+          "$ref": "#/definitions/SetupPolicy"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
     "tags": {
       "description": "Arbitrary string labels for this package. In the root configuration, these labels apply to the root package.",
       "anyOf": [
@@ -223,12 +234,89 @@
   "allowComments": true,
   "allowTrailingCommas": true,
   "definitions": {
+    "AdditionalTool": {
+      "description": "A tool that `turbo setup` downloads, verifies, and installs from explicit artifacts. The full installation tree is kept; no tool-provided scripts run.",
+      "type": "object",
+      "required": ["artifacts", "version"],
+      "properties": {
+        "artifacts": {
+          "description": "Artifacts keyed by platform, such as `linux-x64-gnu` or `macos-arm64`. Platforms without an artifact are unsupported for this tool.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/Map_of_AdditionalToolArtifact"
+            }
+          ]
+        },
+        "version": {
+          "description": "The exact version of the tool. Ranges and channels are not allowed.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/String"
+            }
+          ]
+        }
+      }
+    },
+    "AdditionalToolArtifact": {
+      "description": "One platform's artifact for an additional tool.",
+      "type": "object",
+      "required": ["executables", "format", "sha256", "url"],
+      "properties": {
+        "executables": {
+          "description": "Executable names mapped to paths relative to `rootPrefix`, or to the archive's top level without one. A binary has exactly one entry, which names where the file is installed.",
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/definitions/String"
+          }
+        },
+        "format": {
+          "description": "`binary` for a single executable file, or the archive format.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/ArtifactFormat"
+            }
+          ]
+        },
+        "rootPrefix": {
+          "description": "The single top-level directory that contains every archive entry. Omit it for an archive whose entries sit at its top level. Not allowed for binaries.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/String"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "sha256": {
+          "description": "Lowercase hex SHA-256 digest of the downloaded bytes. A digest pins the expected bytes; it does not establish that the publisher is trustworthy.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/String"
+            }
+          ]
+        },
+        "url": {
+          "description": "HTTPS download URL without credentials, a query, or a fragment.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/String"
+            }
+          ]
+        }
+      }
+    },
     "Array_of_String": {
       "type": "array",
       "items": {
         "$ref": "#/definitions/String"
       }
     },
+    "ArtifactFormat": {
+      "description": "How an artifact is packaged. `binary` is a single executable file.",
+      "type": "string",
+      "enum": ["binary", "tar", "tar-gz", "zip"]
+    },
     "Boolean": {
       "type": "boolean"
     },
@@ -282,6 +370,11 @@
         }
       }
     },
+    "DependencyPolicy": {
+      "description": "How `turbo setup` prepares a toolchain's dependencies. `locked` installs them from the committed ecosystem lockfile without changing it. `skip` does not install them.",
+      "type": "string",
+      "enum": ["locked", "skip"]
+    },
     "EnvMode": {
       "description": "Turborepo's Environment Modes allow you to control which environment variables are available to a task at runtime.\n\n- `strict`: Filter environment variables to only those that are specified in the `env` and `globalEnv` keys in `turbo.json`. - `loose`: Allow all environment variables for the process to be available.\n\nDocumentation: https://turborepo.dev/docs/reference/configuration#envmode",
       "oneOf": [
@@ -510,6 +603,17 @@
         }
       }
     },
+    "LifecycleScripts": {
+      "description": "Whether dependency setup lets package managers run lifecycle scripts. `native` keeps each package manager's defaults and committed allowlists or trust settings. `skip` passes the package manager's own flag for skipping them, and fails where the package manager has none.",
+      "type": "string",
+      "enum": ["native", "skip"]
+    },
+    "Map_of_AdditionalToolArtifact": {
+      "type": "object",
+      "additionalProperties": {
+        "$ref": "#/definitions/AdditionalToolArtifact"
+      }
+    },
     "Map_of_TagRules": {
       "type": "object",
       "additionalProperties": {
@@ -804,6 +908,190 @@
         }
       }
     },
+    "SetupMirrors": {
+      "description": "Credential-free HTTPS mirrors for `turbo setup` downloads. Each value is a base URL that serves the same paths as the official source.",
+      "type": "object",
+      "properties": {
+        "bun": {
+          "description": "Replaces the `https://github.com` origin for Bun release checksums and archives, keeping their official paths.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/String"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "go": {
+          "description": "Replaces both the `https://go.dev` and `https://dl.google.com` origins for Go's release index and archives. The mirror serves both official paths, `/dl/?mode=json&include=all` and `/go/<archive>`, beneath its base.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/String"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "node": {
+          "description": "Replaces `https://nodejs.org/dist` for Node.js release metadata and archives.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/String"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "npmRegistry": {
+          "description": "Replaces `https://registry.npmjs.org` for npm, pnpm, and Yarn package metadata and tarballs.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/String"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "python": {
+          "description": "Replaces the `https://releases.astral.sh` origin for CPython build checksums and archives, keeping their official paths.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/String"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "rust": {
+          "description": "Replaces the `https://static.rust-lang.org` origin for rustup and Rust toolchain downloads, keeping their official paths, like `RUSTUP_DIST_SERVER`.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/String"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "uv": {
+          "description": "Replaces the `https://releases.astral.sh` origin for uv's version index and release archives, keeping their official paths.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/String"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      }
+    },
+    "SetupPolicy": {
+      "description": "Repository policy for `turbo setup`. Only allowed in the root turbo.json and requires `futureFlags.experimentalSetup`.\n\nOptional: without it, `turbo setup` infers what to prepare from native declaration files, and detected tools are managed. Root `tools` and `dependencies` apply to every toolchain. A toolchain key overrides them for that toolchain.",
+      "type": "object",
+      "properties": {
+        "additionalTools": {
+          "description": "Tools that no built-in adapter manages, keyed by tool ID. Each declares an exact version and explicit per-platform artifacts. `turbo setup` locks, verifies, and installs them without running tool-provided scripts.",
+          "type": ["object", "null"],
+          "additionalProperties": {
+            "$ref": "#/definitions/AdditionalTool"
+          }
+        },
+        "dependencies": {
+          "description": "How `turbo setup` prepares dependencies for every toolchain.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/DependencyPolicy"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "go": {
+          "description": "Setup policy for the Go toolchain. Requires `futureFlags.experimentalGoWorkspaces`.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ToolchainSetupPolicy"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "javascript": {
+          "description": "Setup policy for the JavaScript toolchain.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ToolchainSetupPolicy"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "lifecycleScripts": {
+          "description": "Whether dependency setup runs lifecycle scripts for every toolchain.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/LifecycleScripts"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "mirrors": {
+          "description": "Credential-free HTTPS mirrors for setup downloads. `turbo.lock` keeps the official URLs, and environment variables override these values.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SetupMirrors"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "python": {
+          "description": "Setup policy for the Python toolchain. Requires `futureFlags.experimentalPythonWorkspaces`.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ToolchainSetupPolicy"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "rust": {
+          "description": "Setup policy for the Rust toolchain. Requires `futureFlags.experimentalCargoWorkspaces`.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ToolchainSetupPolicy"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "tools": {
+          "description": "How `turbo setup` prepares tools for every toolchain.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ToolPolicy"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      }
+    },
     "String": {
       "type": "string"
     },
@@ -882,6 +1170,50 @@
         }
       ]
     },
+    "ToolPolicy": {
+      "description": "How `turbo setup` prepares a toolchain's tools. `managed` provisions the locked version for this repository. `verify-system` uses an installed tool after verifying that it matches the locked version. `skip` neither provisions nor verifies the tool, which also skips the toolchain's dependencies.",
+      "type": "string",
+      "enum": ["managed", "verify-system", "skip"]
+    },
+    "ToolchainSetupPolicy": {
+      "description": "Setup policy for one toolchain. Omitted values use the root `setup` values, then the inferred default.",
+      "type": "object",
+      "properties": {
+        "dependencies": {
+          "description": "How `turbo setup` prepares this toolchain's dependencies.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/DependencyPolicy"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "lifecycleScripts": {
+          "description": "Whether this toolchain's dependency setup runs lifecycle scripts.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/LifecycleScripts"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "tools": {
+          "description": "How `turbo setup` prepares this toolchain's tools.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ToolPolicy"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      }
+    },
     "UI": {
       "description": "Enable use of the UI for `turbo`.\n\nDocumentation: https://turborepo.dev/docs/reference/configuration#ui",
       "oneOf": [