zyrk 0.6.5 → 0.7.1

package/README.md

@@ -27,6 +27,14 @@ the shared store, exact dependency context, mutation rules, and cleanup contract
 central to its design. Storage savings, speed, and framework compatibility will
 be reported only after reproducible measurements and compatibility tests.
 
+### The name and the idea
+
+The project began as **snpm**, short for “space-efficient npm.” That name was
+already in use, so it became **nexu**; npm's package-name similarity policy
+then blocked publishing that name, and the project became **zyrk**. The names
+changed, while the goal stayed the same: make shared package storage practical,
+careful, and useful in everyday Node.js development.
+
 ## Try the current CLI
 
 Install from npm:
@@ -46,11 +54,17 @@ From a checkout:
 ```bash
 git clone https://github.com/kingjethro999/zyrk.git zyrk
 cd zyrk
-npm ci
-node bin/zyrk.js --help
-node bin/zyrk.js --version
+npm install --global zyrk@0.6.6
+zyrk install --frozen-lockfile
+zyrk --help
+zyrk --version
 ```
 
+The global npm install bootstraps the `zyrk` executable. Project dependencies
+are installed by zyrk itself. On a fresh checkout, use the published bootstrap
+version first because the source checkout's own development dependencies are
+needed to run its local CLI.
+
 ### One-line install (shell)
 
 Linux / macOS:
@@ -90,8 +104,12 @@ Offline installs use locked verified sources and fail if an input is missing.
 Manifest, lock, and projection changes are journaled for process-crash recovery;
 a failed resolution, verification, or build-policy check keeps the prior graph.
 
-Dependency install scripts and implicit `binding.gyp` builds require explicit
-approval. Review first, trust the selected sources, then install:
+Dependency `preinstall`, `install`, and `postinstall` scripts (plus implicit
+`binding.gyp` builds) are supported. In an interactive terminal, `zyrk install`
+shows the exact candidates and lets you select which scripts to run. Press Enter
+to skip all pending scripts and continue with an intentionally unbuilt install.
+Headless installs also skip unapproved scripts and report that readiness state.
+Review candidates separately with:
 
 ```bash
 zyrk approve-builds                # inspect exact sources and commands; executes no package code
@@ -101,8 +119,12 @@ zyrk rebuild --offline             # rebuild the complete approved locked graph
 ```
 
 Approvals are local to the exact graph, sources, patch contents, and script
-policy. Mandatory user denies override project approvals. Approved scripts run
-with your account's permissions; permission is not a sandbox. Packages that need
+policy. Interactive selections are written to the checked-in
+`zyrk-workspace.json` file with exact package source identities, so collaborators
+can reuse the review alongside the lockfile. Manual `zyrk approve-builds
+<package>` approvals are recorded there too. Mandatory user denies override
+project approvals. Approved scripts run with your account's permissions;
+permission is not a sandbox. Packages that need
 writes use a complete private dependency generation under `.zyrk-local/`, with
 independent writable files and dependency links confined to that generation.
 Build failure keeps the previous project graph active. `--ignore-scripts`
@@ -111,6 +133,24 @@ hooks never run automatically. A project can request runtime writable packages
 with `"zyrk": { "mutablePackages": ["package-name"] }`; this also uses a complete
 private graph.
 
+`zyrk-workspace.json` is portable review state, not a machine-specific store
+manifest. It records each approved package name, version, and exact source ID;
+the file can be committed with `package-lock.json` so collaborators do not have
+to repeat the same approval for the same verified source. User-level denials
+still take precedence.
+
+### Run project scripts
+
+Use `zyrk run <script>` or the package-manager shortcut `zyrk <script>`; both
+use the same project-script policy, installed-generation checks, and local
+binary path. Arguments after `--` are passed to the script:
+
+```bash
+zyrk dev
+zyrk test -- --watch
+zyrk run build
+```
+
 Default registry and authentication settings are loaded from user/project
 `.npmrc` for installation, dependency edits, `dlx`, and `create`. Environment
 token placeholders are supported. Credentials are restricted to their configured
@@ -122,7 +162,10 @@ registry; private names never fall back to a public endpoint. Disabled TLS
 verification is rejected before lookup. Git sources and non-workspace local sources remain unsupported;
 they fail explicitly. Optional dependencies incompatible with the selected platform
 are omitted; missing packages, integrity failures, and other optional failures
-remain errors. Locks retain exact platform-qualified optional variants; each machine
+remain errors. Platform-specific optional packages that do not match this machine
+are summarized once after installation; these are normal variants for packages
+supporting multiple operating systems and CPUs. Locks retain exact
+platform-qualified optional variants; each machine
 selects its compatible local closure without rewriting the lock or recording store
 paths. Older platform-pruned locks need an intentional non-frozen refresh; incomplete
 npm locks must be freshly resolved before portable adoption. macOS, Windows, and
@@ -194,9 +237,13 @@ limited to one newly created direct child directory. If generation exits without
 a valid manifest, zyrk reports failure and retains any generated files for review.
 
 For Next.js 16.4.2 with dependencies in the external shared store, use
-`zyrk run dev -- --webpack` and `zyrk run build -- --webpack`. Strict-root
-Turbopack rejects that layout. The [Next compatibility report](docs/next-compatibility.md)
-records the tested scaffold, native install, build and HTTP runtime.
+`zyrk run dev -- --webpack` and `zyrk run build -- --webpack`, or explicitly opt
+into Turbopack with `zyrk next --turbopack` before normal `zyrk run dev` / build.
+The [Turbopack guide](docs/next-turbopack.md) explains the experimental additional
+roots, preserved configuration, portable local-state lookup, and deployment
+boundary. The [Next compatibility report](docs/next-compatibility.md) records
+the tested scaffold, native install, build and HTTP runtime. These checks cover
+Linux x64; they do not establish universal framework or device support.
 
 Other initializers control their own dependency-install step and may invoke
 another package manager. Use their skip-install option, when available, then run
@@ -355,24 +402,34 @@ own options and configuration.
 ## Develop and contribute
 
 ```bash
-npm ci
-npm run setup:hooks
-npm run typecheck
-npm test
-npm run check
-npm run format:check
-npm run format
+npm install --global zyrk@0.6.6  # bootstrap the CLI, once per machine
+zyrk install --frozen-lockfile
+zyrk run setup:hooks
+zyrk run typecheck
+zyrk run test
+zyrk run check
+zyrk run format:check
+zyrk run format
 ```
 
+Linux and macOS development, CI, and release verification use zyrk to install
+the repository's dependencies. The Windows contract job continues to use npm
+while native Windows filesystem and link behavior is being validated. npm is
+also used to publish the package; that is a registry operation, not a project
+dependency install. Vercel deployments should set the install command to
+the commands in [web/vercel.json](web/vercel.json) and set the Vercel project
+root directory to `web/`. The included site uses zyrk for project dependencies
+after npm bootstraps the CLI.
+
 The commit hook runs the full check gate, increments the version in
 `package.json`, `package-lock.json`, and `VERSION`, and creates a matching version
 tag after the commit. Keep changes focused and never bypass the hooks.
 
-CI checks pushed commits and pull requests. The separate
-[npm publishing action](.github/workflows/npm-publish.yml) is triggered when a
-GitHub release is published. It verifies the release tag, formatting, typecheck,
-build, and tests, then publishes that exact commit. Ordinary commits do not
-publish packages. Dependabot and a scheduled advisory check supplement CI; an
+CI checks pushed commits and pull requests. The
+[npm publishing action](.github/workflows/npm-publish.yml) runs when the commit
+hook's version tag is pushed, verifies formatting, typecheck, build, tests, and
+the tag/version match, then publishes that exact commit. A manual workflow
+dispatch can publish a prior version tag for release backfills. Dependabot and a scheduled advisory check supplement CI; an
 unavailable advisory service fails separately from a clean result.
 
 The contributor guide is [AGENTS.md](AGENTS.md). Bug reports and reproducible
@@ -408,10 +465,29 @@ lists each unique package/version linked after the project transaction commits.
 Source counts differ from dependency contexts when peers split a package.
 `--json` disables progress.
 
-Install resolution has a five-minute deadline; each archive extraction has a
-two-minute deadline. Set `ZYRK_RESOLVE_TIMEOUT_MS` or `ZYRK_EXTRACT_TIMEOUT_MS`
-to an integer from `1` to `900000` milliseconds to adjust these timeouts.
-Graph, archive-entry, and byte limits still apply.
+Install resolution has a five-minute deadline, registry requests (including
+archive downloads) have a fifteen-minute deadline, a complete fetch operation
+has a fifteen-minute deadline, and each archive extraction has a two-minute
+deadline. On a slow or unreliable connection, increase the request and complete
+fetch deadlines together. For example, this gives a single request up to 30
+minutes and the entire fetch phase up to 45 minutes:
+
+```bash
+ZYRK_REQUEST_TIMEOUT_MS=1800000 ZYRK_FETCH_TIMEOUT_MS=2700000 zyrk install
+```
+
+To keep the settings for future commands in the current shell, use
+`export ZYRK_REQUEST_TIMEOUT_MS=1800000` and
+`export ZYRK_FETCH_TIMEOUT_MS=2700000`. Both values are milliseconds.
+Resolution and extraction timeouts accept `1` to `900000` (15 minutes); request
+and whole-fetch timeouts accept `1` to `3600000` (60 minutes). For a very slow
+connection, the largest supported combination is:
+
+```bash
+ZYRK_REQUEST_TIMEOUT_MS=3600000 ZYRK_FETCH_TIMEOUT_MS=3600000 zyrk install
+```
+
+These are finite deadlines; graph, archive-entry, and byte limits still apply.
 
 Platform gates run the complete check on Ubuntu and macOS/Node 24 and a
 Windows CLI/artifact contract suite, including paths with spaces and Unicode.

package/VERSION

@@ -1 +1 @@
-v0.6.5
+v0.7.1

package/bin/zyrk.js

@@ -12,6 +12,7 @@ const { runCli } = await import(
 process.exitCode = await runCli({
   argv: process.argv.slice(2),
   env: process.env,
+  stdin: process.stdin,
   stdout: process.stdout,
   stderr: process.stderr,
 });

package/dist/cli/main.d.ts

@@ -25,6 +25,7 @@ export type ToolEnvironment = {
 export type RunCliOptions = {
     argv: readonly string[];
     env: NodeJS.ProcessEnv;
+    stdin?: NodeJS.ReadStream;
     stdout: {
         write(chunk: string): unknown;
     };

package/dist/cli/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAe,SAAS,EAAe,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,CAAC;AACrB,OAAO,EAAoB,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAM3C,OAAO,EAAqC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAEhF,eAAO,MAAM,uBAAuB,IAAI,CAAC;AA2DzC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAyBhD;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AA6EF;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;CAAE,GACnD,SAAS,CAgDX;AAmBD,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,MAAM,EAAE;QAAE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC1C,MAAM,EAAE;QAAE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3D,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;CACxC,CAAC;AAEF,gFAAgF;AAChF,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAkapE"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAe,SAAS,EAAe,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,CAAC;AACrB,OAAO,EAAoB,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAM3C,OAAO,EAAqC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAEhF,eAAO,MAAM,uBAAuB,IAAI,CAAC;AA6DzC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA0BhD;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AA6EF;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;CAAE,GACnD,SAAS,CAgDX;AAmBD,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAC1B,MAAM,EAAE;QAAE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC1C,MAAM,EAAE;QAAE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3D,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;CACxC,CAAC;AAuDF,gFAAgF;AAChF,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CA2fpE"}

package/dist/cli/main.js

@@ -1,3 +1,4 @@
+import { runNextCommand } from "../commands/next.js";
 import { createInstallProgress } from "./progress.js";
 import { runMaintenanceCommand } from "../commands/maintenance.js";
 import { runDeployCommand } from "../commands/deploy.js";
@@ -11,6 +12,8 @@ import { sanitizeDiagnostic, redactSecrets } from "../log.js";
 import { installProject } from "../install/run.js";
 import { installRegistry } from "../install/registry.js";
 import { readFileSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { createInterface } from "node:readline/promises";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 import { runCreate, starterSpecFor } from "../dlx/create.js";
@@ -21,7 +24,7 @@ import { runStoreCommand } from "../commands/store.js";
 import { exitCodeFor, ZyrkError, toZyrkError } from "../errors.js";
 export { ZyrkError };
 import { DEFAULT_REGISTRY, RegistryClient } from "../fetch/registry.js";
-import { resolveStoreRoot } from "../config/paths.js";
+import { findProjectBoundary, resolveStoreRoot } from "../config/paths.js";
 import { Store } from "../store/layout.js";
 import { delegateToNpm, delegatedHelpLines, isDelegatedCommand, } from "./npm-delegate.js";
 import { isGlobalInstallRequest, parseArgs } from "./parse.js";
@@ -37,6 +40,7 @@ const NATIVE_COMMANDS = [
     ["exec", "Run an installed executable (never fetches)."],
     ["dlx", "Explicitly fetch and run a temporary tool environment."],
     ["create", "Scaffold from a create-* starter package."],
+    ["next", "Explicitly configure Next Turbopack: next --turbopack."],
     ["list, why", "Show the installed graph / why a dependency is selected."],
     ["doctor", "Diagnose filesystem, links, policy, install-state issues."],
     ["approve-builds, rebuild", "Review script permissions / rebuild."],
@@ -58,6 +62,7 @@ for (const [names] of NATIVE_COMMANDS) {
 const IMPLEMENTED_COMMANDS = new Set([
     "dlx",
     "create",
+    "next",
     "install",
     "i",
     "add",
@@ -86,6 +91,7 @@ export function helpText(version) {
         `zyrk v${version} — one verified store per user, shared across projects through links.`,
         "",
         "Usage: zyrk <command> [args] [--json]",
+        "       zyrk <script> [args]  (shortcut for zyrk run <script> [args])",
         "",
         "Dependency commands:",
     ];
@@ -97,7 +103,7 @@ export function helpText(version) {
     }
     lines.push("", "Registry publishing and account commands (via your npm):");
     lines.push(...delegatedHelpLines());
-    lines.push("", "Install timeouts: ZYRK_RESOLVE_TIMEOUT_MS and ZYRK_EXTRACT_TIMEOUT_MS (1..900000 ms).", "zyrk never installs packages globally and never runs npm to do it.", "Need a global package? Run npm directly: npm install --global <package-spec>");
+    lines.push("", "Install timeouts: ZYRK_RESOLVE_TIMEOUT_MS and ZYRK_EXTRACT_TIMEOUT_MS (1..900000 ms); ZYRK_REQUEST_TIMEOUT_MS (1..3600000 ms); ZYRK_FETCH_TIMEOUT_MS (1..3600000 ms).", "zyrk never installs packages globally and never runs npm to do it.", "Need a global package? Run npm directly: npm install --global <package-spec>");
     return `${lines.join("\n")}\n`;
 }
 function ok(stdout, parsed) {
@@ -209,6 +215,39 @@ function readCliVersion() {
         return "unknown";
     }
 }
+async function promptForBuildApproval(builds, input, output) {
+    output.write("\nDependency lifecycle scripts need approval. Review these exact package sources:\n");
+    builds.forEach((build, index) => {
+        const stages = build.stages
+            .map((stage) => `${stage.name}: ${redactSecrets(stage.command)
+            .replace(/[\x00-\x1f\x7f-\x9f]/g, "")
+            .slice(0, 180)}`)
+            .join("; ");
+        output.write(`  ${index + 1}. ${build.name}@${build.version} (${build.sourceId}) — ${stages}\n`);
+    });
+    output.write("Enter numbers separated by commas to approve selected sources, `all` to approve all listed sources, or press Enter to skip their scripts and continue unbuilt.\n");
+    const prompt = createInterface({
+        input,
+        output: output,
+        terminal: true,
+    });
+    try {
+        const answer = (await prompt.question("Approve builds> ")).trim();
+        if (!answer)
+            return [];
+        if (answer.toLowerCase() === "all")
+            return ["*"];
+        const numbers = answer.split(/[ ,]+/).map((value) => Number(value));
+        if (numbers.some((number) => !Number.isInteger(number) || number < 1 || number > builds.length))
+            throw new ZyrkError("ZYRK_USAGE", "Build selection contains an invalid candidate number.", {
+                remedy: `Select numbers from 1 to ${builds.length}, enter all, or press Enter to skip scripts.`,
+            });
+        return [...new Set(numbers)].map((number) => builds[number - 1].sourceId);
+    }
+    finally {
+        prompt.close();
+    }
+}
 /** Parse, dispatch, delegate, or run a tool, and emit. The only impure seam. */
 export async function runCli(options) {
     const parsed = parseArgs(options.argv);
@@ -375,6 +414,30 @@ export async function runCli(options) {
             return emit(fail(toZyrkError(error, `zyrk ${parsed.command} failed.`), parsed));
         }
     }
+    if (!parsed.help && !parsed.version && parsed.command === "next") {
+        try {
+            const result = await runNextCommand({
+                args: parsed.commandArgs,
+                cwd: options.cwd ?? process.cwd(),
+                env: options.env,
+            });
+            return emit({
+                exitCode: 0,
+                stdout: parsed.json
+                    ? JSON.stringify({
+                        schemaVersion: CLI_JSON_SCHEMA_VERSION,
+                        command: "next",
+                        status: "ok",
+                        ...result,
+                    }) + "\n"
+                    : `${result.changed ? "Configured" : "Already configured"} Next Turbopack with the project's strict root and the installed external shared realizations. Experimental additional roots require Next.js 16.4+. Backup: ${result.backup}.\n`,
+                stderr: "",
+            });
+        }
+        catch (error) {
+            return emit(fail(toZyrkError(error, "Next Turbopack configuration failed."), parsed));
+        }
+    }
     if (!parsed.help &&
         !parsed.version &&
         (parsed.command === "install" || parsed.command === "i")) {
@@ -437,6 +500,11 @@ export async function runCli(options) {
                 env: options.env,
                 specs,
                 projectDir: cwd,
+                ...(options.stdin?.isTTY && options.stderr.isTTY && !parsed.json
+                    ? {
+                        requestBuildApproval: (builds) => promptForBuildApproval(builds, options.stdin, options.stderr),
+                    }
+                    : {}),
                 ...tools,
             });
             progress.close();
@@ -493,6 +561,11 @@ export async function runCli(options) {
                 projectDir: options.cwd ?? process.cwd(),
                 store: tools.store,
                 registry: tools.registry,
+                ...(options.stdin?.isTTY && options.stderr.isTTY && !parsed.json
+                    ? {
+                        requestBuildApproval: (builds) => promptForBuildApproval(builds, options.stdin, options.stderr),
+                    }
+                    : {}),
             });
             progress.close();
             if (parsed.json) {
@@ -575,6 +648,48 @@ export async function runCli(options) {
             return emit(fail(toZyrkError(error, `zyrk ${parsed.command} failed.`), parsed));
         }
     }
+    // Package scripts are accepted as ergonomic aliases for `zyrk run <name>`.
+    // Route through the same project runner so policy, generation leases,
+    // local-bin PATH and lifecycle environment stay identical.
+    if (!parsed.help &&
+        !parsed.version &&
+        parsed.command !== undefined &&
+        !KNOWN_COMMANDS.has(parsed.command) &&
+        parsed.argsBeforeCommand.length === 0) {
+        const cwd = options.cwd ?? process.cwd();
+        const boundary = await findProjectBoundary(cwd);
+        if (boundary) {
+            let declared = false;
+            try {
+                const manifest = JSON.parse(await readFile(path.join(boundary, "package.json"), "utf8"));
+                if (manifest.scripts !== null &&
+                    typeof manifest.scripts === "object" &&
+                    !Array.isArray(manifest.scripts) &&
+                    typeof manifest.scripts[parsed.command] === "string")
+                    declared = true;
+            }
+            catch {
+                // Preserve the normal unknown-command diagnostic when no valid
+                // project script can be identified.
+            }
+            if (declared) {
+                try {
+                    return await runProjectCommand({
+                        command: "run",
+                        args: [parsed.command, ...parsed.commandArgs],
+                        cwd,
+                        env: options.env,
+                        stdout: options.stdout,
+                        stderr: options.stderr,
+                        json: parsed.json,
+                    });
+                }
+                catch (error) {
+                    return emit(fail(toZyrkError(error, `zyrk ${parsed.command} failed.`), parsed));
+                }
+            }
+        }
+    }
     return emit(dispatch(parsed, { version, env: options.env }));
 }
 async function defaultTools(env, version, cwd = process.cwd()) {

package/dist/commands/dependencies.d.ts

@@ -10,5 +10,6 @@ export declare function runDependencyCommand(options: {
     registry: RegistryClient;
     env?: NodeJS.ProcessEnv;
     onProgress?: InstallOptions["onProgress"];
+    requestBuildApproval?: InstallOptions["requestBuildApproval"];
 }): Promise<InstallResult>;
 //# sourceMappingURL=dependencies.d.ts.map

package/dist/commands/dependencies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../src/commands/dependencies.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAavE,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC;CAC3C,GAAG,OAAO,CAAC,aAAa,CAAC,CA4HzB"}
+{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../src/commands/dependencies.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAavE,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC;IAC1C,oBAAoB,CAAC,EAAE,cAAc,CAAC,sBAAsB,CAAC,CAAC;CAC/D,GAAG,OAAO,CAAC,aAAa,CAAC,CA+HzB"}

package/dist/commands/dependencies.js

@@ -16,6 +16,9 @@ export async function runDependencyCommand(options) {
         registry: options.registry,
         ...(options.env ? { env: options.env } : {}),
         ...(options.onProgress ? { onProgress: options.onProgress } : {}),
+        ...(options.requestBuildApproval
+            ? { requestBuildApproval: options.requestBuildApproval }
+            : {}),
     };
     const names = [];
     let from;

package/dist/commands/next.d.ts

@@ -0,0 +1,10 @@
+export declare function runNextCommand(options: {
+    args: readonly string[];
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+}): Promise<{
+    changed: boolean;
+    config: string;
+    backup: string;
+}>;
+//# sourceMappingURL=next.d.ts.map

package/dist/commands/next.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"next.d.ts","sourceRoot":"","sources":["../../src/commands/next.ts"],"names":[],"mappings":"AAqFA,wBAAsB,cAAc,CAAC,OAAO,EAAE;IAC5C,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0LhE"}