add interactive setup, completion, and self-update support

Author: AnimeshRy

CLAUDE.md

@@ -86,6 +86,14 @@ dependencies rather than 3. On a terminal, `pindrop scan` also offers to install
 what is missing rather than only explaining it; in CI nothing prompts and the
 behavior is byte-identical to before.
 
+The same `internal/tui` package now drives **interactive setup prompts** via
+`huh` (first-run questionnaire, install confirmation, JIT install offer during
+scan) and **`pindrop update` confirmation**. All of it renders to stderr; `--yes`
+still bypasses every prompt. **`pindrop completion`** exposes Cobra's shell
+completion scripts. **`pindrop update`** checks GitHub Releases and replaces the
+running binary in-place — non-functional until a first release is published;
+checksum verification on the download is still TODO.
+
 Next: [docs/product/roadmap.md](docs/product/roadmap.md).
 
 ## Read before changing
@@ -289,8 +297,8 @@ it.** stdout carries the report and must stay pipeable into `jq`. This works onl
 because every adapter buffers its child's stdout *and* stderr and OSV runs with
 `--verbosity error` — an adapter that lets a child write to stderr would corrupt
 every frame. `--log-level debug` therefore forces plain mode, since slog also
-writes there. `internal/tui` is the only package allowed to import bubbletea or
-lipgloss ([ADR 0011](docs/decisions/0011-bubbletea-for-progress.md)).
+writes there. `internal/tui` is the only package allowed to import bubbletea,
+lipgloss, or huh ([ADR 0011](docs/decisions/0011-bubbletea-for-progress.md)).
 
 **The progress footer says "raw findings" on purpose.** It sums what each scanner
 reported, before cross-tool dedup, so it is legitimately larger than the count the

README.md

@@ -76,11 +76,12 @@ committed inside the binary. A download that does not match is deleted and never
 made executable.
 
 - **~215 MB**, once. It prints the sizes and the hosts and asks before fetching
-  anything; `--yes` skips the prompt.
+  anything; `--yes` skips the prompt. On a terminal the confirmation is an
+  interactive form rather than a bare `[Y/n]` line.
 - **First run on a terminal** asks where to store data (`~/.pindrop` by default)
-  and which scanners to install. A custom data directory is saved in
-  `~/.config/pindrop/config.json` (or the platform config dir) and used on
-  every later run unless `PINDROP_HOME` is set.
+  and which scanners to install, using the same interactive UI. A custom data
+  directory is saved in `~/.config/pindrop/config.json` (or the platform config
+  dir) and used on every later run unless `PINDROP_HOME` is set.
 - **Idempotent.** A second run installs nothing and makes *no network requests*,
   so there is no separate offline mode.
 - **Self-contained.** Nothing is written outside `~/.pindrop`, no package manager
@@ -172,8 +173,8 @@ pindrop scan ~/code/some-repo               # any directory
 ```
 
 On a terminal you get a live row per scanner while they run, and — if any are
-missing — an offer to install them before the scan starts. In CI nothing prompts
-and nothing animates.
+missing — an offer to install them before the scan starts (same interactive
+confirm as `pindrop setup`). In CI nothing prompts and nothing animates.
 
 ```bash
 pindrop scan . --format json --out r.json   # machine-readable
@@ -185,8 +186,38 @@ pindrop scan . --verify-secrets             # prove a leaked key is live (see be
 
 pindrop setup --check                       # what is installed, and from where
 pindrop setup --force                       # reinstall at the pinned versions
+
+pindrop completion bash                     # shell completions (see below)
+pindrop update                              # check GitHub for a newer release
+```
+
+### Shell completions
+
+Cobra generates these; output goes to **stdout** so you can redirect or `source` it:
+
+```bash
+source <(pindrop completion bash)           # bash
+pindrop completion zsh > "${fpath[1]}/_pindrop"   # zsh (then compinit)
+pindrop completion fish > ~/.config/fish/completions/pindrop.fish
 ```
 
+Enum flags such as `--format`, `--min-severity`, and `--progress` complete to
+their valid values.
+
+### Updating pindrop
+
+```bash
+pindrop update                              # check GitHub, confirm, replace binary
+pindrop update --yes                        # skip confirmation
+```
+
+This queries the latest release from GitHub and atomically replaces the running
+executable. It is **non-functional until GoReleaser publishes a first release**
+— dev builds (`version=dev`) are rejected, and a hash build with no release yet
+reports already up to date or a network error. Checksum verification on the
+downloaded archive is not wired yet; treat `pindrop update` as CLI surface for
+now, not as strong an integrity guarantee as `pindrop setup`.
+
 ### History — did the fix actually land?
 
 Every scan is recorded in `~/.pindrop/pindrop.db` (SQLite), so the next one can

go.mod

@@ -6,17 +6,22 @@ toolchain go1.26.5
 
 require (
 	github.com/charmbracelet/bubbletea v1.3.10
+	github.com/charmbracelet/huh v1.0.0
 	github.com/charmbracelet/lipgloss v1.1.0
 	github.com/pressly/goose/v3 v3.27.3
 	github.com/spf13/cobra v1.10.2
 	modernc.org/sqlite v1.56.0
 )
 
 require (
+	github.com/atotto/clipboard v0.1.4 // indirect
 	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
+	github.com/catppuccin/go v0.3.0 // indirect
+	github.com/charmbracelet/bubbles v0.21.1-0.20250623103423-23b8fd6302d7 // indirect
 	github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc // indirect
 	github.com/charmbracelet/x/ansi v0.10.1 // indirect
-	github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd // indirect
+	github.com/charmbracelet/x/cellbuf v0.0.13 // indirect
+	github.com/charmbracelet/x/exp/strings v0.0.0-20240722160745-212f7b056ed0 // indirect
 	github.com/charmbracelet/x/term v0.2.1 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
@@ -27,6 +32,7 @@ require (
 	github.com/mattn/go-localereader v0.0.1 // indirect
 	github.com/mattn/go-runewidth v0.0.16 // indirect
 	github.com/mfridman/interpolate v0.0.2 // indirect
+	github.com/mitchellh/hashstructure/v2 v2.0.2 // indirect
 	github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 // indirect
 	github.com/muesli/cancelreader v0.2.2 // indirect
 	github.com/muesli/termenv v0.16.0 // indirect

go.sum

@@ -1,18 +1,44 @@
+github.com/MakeNowJust/heredoc v1.0.0 h1:cXCdzVdstXyiTqTvfqk9SDHpKNjxuom+DOlyEeQ4pzQ=
+github.com/MakeNowJust/heredoc v1.0.0/go.mod h1:mG5amYoWBHf8vpLOuehzbGGw0EHxpZZ6lCpQ4fNJ8LE=
+github.com/atotto/clipboard v0.1.4 h1:EH0zSVneZPSuFR11BlR9YppQTVDbh5+16AmcJi4g1z4=
+github.com/atotto/clipboard v0.1.4/go.mod h1:ZY9tmq7sm5xIbd9bOK4onWV4S6X0u6GY7Vn0Yu86PYI=
 github.com/aymanbagabas/go-osc52/v2 v2.0.1 h1:HwpRHbFMcZLEVr42D4p7XBqjyuxQH5SMiErDT4WkJ2k=
 github.com/aymanbagabas/go-osc52/v2 v2.0.1/go.mod h1:uYgXzlJ7ZpABp8OJ+exZzJJhRNQ2ASbcXHWsFqH8hp8=
+github.com/aymanbagabas/go-udiff v0.3.1 h1:LV+qyBQ2pqe0u42ZsUEtPiCaUoqgA9gYRDs3vj1nolY=
+github.com/aymanbagabas/go-udiff v0.3.1/go.mod h1:G0fsKmG+P6ylD0r6N/KgQD/nWzgfnl8ZBcNLgcbrw8E=
+github.com/catppuccin/go v0.3.0 h1:d+0/YicIq+hSTo5oPuRi5kOpqkVA5tAsU6dNhvRu+aY=
+github.com/catppuccin/go v0.3.0/go.mod h1:8IHJuMGaUUjQM82qBrGNBv7LFq6JI3NnQCF6MOlZjpc=
+github.com/charmbracelet/bubbles v0.21.1-0.20250623103423-23b8fd6302d7 h1:JFgG/xnwFfbezlUnFMJy0nusZvytYysV4SCS2cYbvws=
+github.com/charmbracelet/bubbles v0.21.1-0.20250623103423-23b8fd6302d7/go.mod h1:ISC1gtLcVilLOf23wvTfoQuYbW2q0JevFxPfUzZ9Ybw=
 github.com/charmbracelet/bubbletea v1.3.10 h1:otUDHWMMzQSB0Pkc87rm691KZ3SWa4KUlvF9nRvCICw=
 github.com/charmbracelet/bubbletea v1.3.10/go.mod h1:ORQfo0fk8U+po9VaNvnV95UPWA1BitP1E0N6xJPlHr4=
 github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc h1:4pZI35227imm7yK2bGPcfpFEmuY1gc2YSTShr4iJBfs=
 github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc/go.mod h1:X4/0JoqgTIPSFcRA/P6INZzIuyqdFY5rm8tb41s9okk=
+github.com/charmbracelet/huh v1.0.0 h1:wOnedH8G4qzJbmhftTqrpppyqHakl/zbbNdXIWJyIxw=
+github.com/charmbracelet/huh v1.0.0/go.mod h1:5YVc+SlZ1IhQALxRPpkGwwEKftN/+OlJlnJYlDRFqN4=
 github.com/charmbracelet/lipgloss v1.1.0 h1:vYXsiLHVkK7fp74RkV7b2kq9+zDLoEU4MZoFqR/noCY=
 github.com/charmbracelet/lipgloss v1.1.0/go.mod h1:/6Q8FR2o+kj8rz4Dq0zQc3vYf7X+B0binUUBwA0aL30=
 github.com/charmbracelet/x/ansi v0.10.1 h1:rL3Koar5XvX0pHGfovN03f5cxLbCF2YvLeyz7D2jVDQ=
 github.com/charmbracelet/x/ansi v0.10.1/go.mod h1:3RQDQ6lDnROptfpWuUVIUG64bD2g2BgntdxH0Ya5TeE=
-github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd h1:vy0GVL4jeHEwG5YOXDmi86oYw2yuYUGqz6a8sLwg0X8=
-github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd/go.mod h1:xe0nKWGd3eJgtqZRaN9RjMtK7xUYchjzPr7q6kcvCCs=
+github.com/charmbracelet/x/cellbuf v0.0.13 h1:/KBBKHuVRbq1lYx5BzEHBAFBP8VcQzJejZ/IA3iR28k=
+github.com/charmbracelet/x/cellbuf v0.0.13/go.mod h1:xe0nKWGd3eJgtqZRaN9RjMtK7xUYchjzPr7q6kcvCCs=
+github.com/charmbracelet/x/conpty v0.1.0 h1:4zc8KaIcbiL4mghEON8D72agYtSeIgq8FSThSPQIb+U=
+github.com/charmbracelet/x/conpty v0.1.0/go.mod h1:rMFsDJoDwVmiYM10aD4bH2XiRgwI7NYJtQgl5yskjEQ=
+github.com/charmbracelet/x/errors v0.0.0-20240508181413-e8d8b6e2de86 h1:JSt3B+U9iqk37QUU2Rvb6DSBYRLtWqFqfxf8l5hOZUA=
+github.com/charmbracelet/x/errors v0.0.0-20240508181413-e8d8b6e2de86/go.mod h1:2P0UgXMEa6TsToMSuFqKFQR+fZTO9CNGUNokkPatT/0=
+github.com/charmbracelet/x/exp/golden v0.0.0-20241011142426-46044092ad91 h1:payRxjMjKgx2PaCWLZ4p3ro9y97+TVLZNaRZgJwSVDQ=
+github.com/charmbracelet/x/exp/golden v0.0.0-20241011142426-46044092ad91/go.mod h1:wDlXFlCrmJ8J+swcL/MnGUuYnqgQdW9rhSD61oNMb6U=
+github.com/charmbracelet/x/exp/strings v0.0.0-20240722160745-212f7b056ed0 h1:qko3AQ4gK1MTS/de7F5hPGx6/k1u0w4TeYmBFwzYVP4=
+github.com/charmbracelet/x/exp/strings v0.0.0-20240722160745-212f7b056ed0/go.mod h1:pBhA0ybfXv6hDjQUZ7hk1lVxBiUbupdw5R31yPUViVQ=
 github.com/charmbracelet/x/term v0.2.1 h1:AQeHeLZ1OqSXhrAWpYUtZyX1T3zVxfpZuEQMIQaGIAQ=
 github.com/charmbracelet/x/term v0.2.1/go.mod h1:oQ4enTYFV7QN4m0i9mzHrViD7TQKvNEEkHUMCmsxdUg=
+github.com/charmbracelet/x/termios v0.1.1 h1:o3Q2bT8eqzGnGPOYheoYS8eEleT5ZVNYNy8JawjaNZY=
+github.com/charmbracelet/x/termios v0.1.1/go.mod h1:rB7fnv1TgOPOyyKRJ9o+AsTU/vK5WHJ2ivHeut/Pcwo=
+github.com/charmbracelet/x/xpty v0.1.2 h1:Pqmu4TEJ8KeA9uSkISKMU3f+C1F6OGBn8ABuGlqCbtI=
+github.com/charmbracelet/x/xpty v0.1.2/go.mod h1:XK2Z0id5rtLWcpeNiMYBccNNBrP2IJnzHI0Lq13Xzq4=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
+github.com/creack/pty v1.1.24 h1:bJrF4RRfyJnbTJqzRLHzcGaZK1NeM5kTC9jGgovnR1s=
+github.com/creack/pty v1.1.24/go.mod h1:08sCNb52WyoAwi2QDyzUCTgcvVFhUzewun7wtTfvcwE=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
@@ -37,6 +63,8 @@ github.com/mattn/go-runewidth v0.0.16 h1:E5ScNMtiwvlvB5paMFdw9p4kSQzbXFikJ5SQO6T
 github.com/mattn/go-runewidth v0.0.16/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
 github.com/mfridman/interpolate v0.0.2 h1:pnuTK7MQIxxFz1Gr+rjSIx9u7qVjf5VOoM/u6BbAxPY=
 github.com/mfridman/interpolate v0.0.2/go.mod h1:p+7uk6oE07mpE/Ik1b8EckO0O4ZXiGAfshKBWLUM9Xg=
+github.com/mitchellh/hashstructure/v2 v2.0.2 h1:vGKWl0YJqUNxE8d+h8f6NJLcCJrgbhC4NcD46KavDd4=
+github.com/mitchellh/hashstructure/v2 v2.0.2/go.mod h1:MG3aRVU/N29oo/V/IhBX8GR/zz4kQkprJgF2EVszyDE=
 github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 h1:ZK8zHtRHOkbHy6Mmr5D264iyp3TiX5OmNcI5cIARiQI=
 github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6/go.mod h1:CJlz5H+gyd6CUWT45Oy4q24RdLyn7Md9Vj2/ldJBSIo=
 github.com/muesli/cancelreader v0.2.2 h1:3I4Kt4BQjOR54NavqnDogx/MIoWBFa0StPA8ELUXHmA=

internal/cli/completion.go

@@ -0,0 +1,61 @@
+package cli
+
+import (
+	"os"
+
+	"github.com/spf13/cobra"
+)
+
+func newCompletionCommand() *cobra.Command {
+	return &cobra.Command{
+		Use:   "completion [bash|zsh|fish|powershell]",
+		Short: "Generate shell completion script",
+		Long: `Generate a shell completion script for pindrop.
+
+To load completions:
+
+Bash:
+  $ source <(pindrop completion bash)
+
+  # To install permanently (Linux):
+  $ pindrop completion bash | sudo tee /etc/bash_completion.d/pindrop > /dev/null
+
+  # To install permanently (macOS with Homebrew):
+  $ pindrop completion bash > $(brew --prefix)/etc/bash_completion.d/pindrop
+
+Zsh:
+  $ source <(pindrop completion zsh)
+
+  # To install permanently:
+  $ pindrop completion zsh > "${fpath[1]}/_pindrop"
+  # You may need to restart your shell or run: compinit
+
+Fish:
+  $ pindrop completion fish | source
+
+  # To install permanently:
+  $ pindrop completion fish > ~/.config/fish/completions/pindrop.fish
+
+PowerShell:
+  PS> pindrop completion powershell | Out-String | Invoke-Expression
+
+  # To install permanently, add the output to your PowerShell profile.
+`,
+		DisableFlagsInUseLine: true,
+		ValidArgs:             []string{"bash", "zsh", "fish", "powershell"},
+		Args:                  cobra.MatchAll(cobra.ExactArgs(1), cobra.OnlyValidArgs),
+		RunE: func(cmd *cobra.Command, args []string) error {
+			switch args[0] {
+			case "bash":
+				return cmd.Root().GenBashCompletionV2(os.Stdout, true)
+			case "zsh":
+				return cmd.Root().GenZshCompletion(os.Stdout)
+			case "fish":
+				return cmd.Root().GenFishCompletion(os.Stdout, true)
+			case "powershell":
+				return cmd.Root().GenPowerShellCompletionWithDesc(os.Stdout)
+			}
+			return nil
+		},
+	}
+}

internal/cli/root.go

@@ -60,8 +60,14 @@ issue keeps its identity across scans even when the surrounding code moves.`),
 		newStatusCommand(&g),
 		newHistoryCommand(&g),
 		newVersionCommand(),
+		newCompletionCommand(),
+		newUpdateCommand(),
 	)
 
+	root.RegisterFlagCompletionFunc("log-level", func(_ *cobra.Command, _ []string, _ string) ([]string, cobra.ShellCompDirective) {
+		return []string{"debug", "info", "warn", "error"}, cobra.ShellCompDirectiveNoFileComp
+	})
+
 	return root.ExecuteContext(ctx)
 }
 

internal/cli/scan.go

@@ -130,6 +130,19 @@ directory.`),
 	f.BoolVar(&opts.noInstall, "no-install", false,
 		"never offer to install missing scanners, even on a terminal")
 
+	cmd.RegisterFlagCompletionFunc("format", func(_ *cobra.Command, _ []string, _ string) ([]string, cobra.ShellCompDirective) {
+		return []string{"table", "json", "sarif", "csv", "markdown"}, cobra.ShellCompDirectiveNoFileComp
+	})
+	cmd.RegisterFlagCompletionFunc("min-severity", func(_ *cobra.Command, _ []string, _ string) ([]string, cobra.ShellCompDirective) {
+		return []string{"info", "low", "medium", "high", "critical"}, cobra.ShellCompDirectiveNoFileComp
+	})
+	cmd.RegisterFlagCompletionFunc("fail-on", func(_ *cobra.Command, _ []string, _ string) ([]string, cobra.ShellCompDirective) {
+		return []string{"info", "low", "medium", "high", "critical"}, cobra.ShellCompDirectiveNoFileComp
+	})
+	cmd.RegisterFlagCompletionFunc("progress", func(_ *cobra.Command, _ []string, _ string) ([]string, cobra.ShellCompDirective) {
+		return tui.ModeNames, cobra.ShellCompDirectiveNoFileComp
+	})
+
 	return cmd
 }