@bobfrankston/npmglobalize 1.0.103 → 1.0.105

package/.claude/settings.local.json

@@ -38,7 +38,8 @@
       "Bash(globalize:*)",
       "Bash(wztest:*)",
       "Bash(xargs grep:*)",
-      "Bash(cmd.exe:*)"
+      "Bash(cmd.exe:*)",
+      "Bash(cd y:/dev/utils/npmglobalize && npx npmglobalize)"
     ]
   }
 }

package/lib.js

@@ -2349,12 +2349,22 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
             }
         }
         if (currentAccess === 'public') {
-            console.error(colors.red(`ERROR: Package '${pkg.name}' is currently PUBLIC on npm.`));
-            console.error(colors.red(`Cannot change to private. Options:`));
-            console.error(colors.yellow(`  1. Deprecate the public package: npm deprecate ${pkg.name} "moved to private"`));
-            console.error(colors.yellow(`  2. Continue as public: npmglobalize --npm public`));
-            console.error(colors.yellow(`  3. Use a different package name`));
-            return false;
+            console.log(colors.yellow(`Package '${pkg.name}' is currently PUBLIC on npm. Converting to private...`));
+            if (!dryRun) {
+                const accessResult = runCommand('npm', ['access', 'set', 'status=restricted', pkg.name], { cwd, silent: false });
+                if (accessResult.success) {
+                    console.log(colors.green(`✓ Changed ${pkg.name} to PRIVATE on npm`));
+                    currentAccess = 'restricted';
+                }
+                else {
+                    console.error(colors.red(`Failed to change access. Try manually: npm access set status=restricted ${pkg.name}`));
+                    if (!force)
+                        return false;
+                }
+            }
+            else {
+                console.log(colors.dim(`  [dry-run] Would run: npm access set status=restricted ${pkg.name}`));
+            }
         }
         // Don't set "private": true in package.json - that blocks all publishing
         console.log(`Package '${pkg.name}' will publish as PRIVATE (restricted access).`);
@@ -2365,12 +2375,22 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
     else if (effectiveNpmVisibility === 'public') {
         // User explicitly wants public (or confirmed via prompt)
         if (currentAccess === 'restricted') {
-            console.error(colors.red(`ERROR: Package '${pkg.name}' is currently PRIVATE on npm.`));
-            console.error(colors.red(`Cannot change to public. Options:`));
-            console.error(colors.yellow(`  1. Unpublish and republish: npm unpublish ${pkg.name} --force`));
-            console.error(colors.yellow(`  2. Continue as private: npmglobalize --npm private`));
-            console.error(colors.yellow(`  3. Use a different package name`));
-            return false;
+            console.log(colors.yellow(`Package '${pkg.name}' is currently PRIVATE on npm. Converting to public...`));
+            if (!dryRun) {
+                const accessResult = runCommand('npm', ['access', 'set', 'status=public', pkg.name], { cwd, silent: false });
+                if (accessResult.success) {
+                    console.log(colors.green(`✓ Changed ${pkg.name} to PUBLIC on npm`));
+                    currentAccess = 'public';
+                }
+                else {
+                    console.error(colors.red(`Failed to change access. Try manually: npm access set status=public ${pkg.name}`));
+                    if (!force)
+                        return false;
+                }
+            }
+            else {
+                console.log(colors.dim(`  [dry-run] Would run: npm access set status=public ${pkg.name}`));
+            }
         }
         if (!publicConfirmed) {
             console.log(`Will publish '${pkg.name}' to PUBLIC npm registry.`);
@@ -2677,7 +2697,16 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
     const isFirstPublish = !currentAccess;
     if (!currentGitStatus.hasUncommitted && !message && !justInitialized && !isFirstPublish) {
         console.log('');
-        console.log('No changes to commit and no custom message specified.');
+        if (currentAccess === 'public') {
+            console.log(`${pkg.name}@${pkg.version} is already PUBLIC on npm. No changes to publish.`);
+        }
+        else if (currentAccess === 'restricted') {
+            console.log(`${pkg.name}@${pkg.version} is PRIVATE on npm. No changes to publish.`);
+        }
+        else {
+            console.log('No changes to commit and no custom message specified.');
+        }
+        console.log(colors.dim('  Use -m "message" to force a version bump and republish.'));
         // If install/link flag is set, install globally
         if (install || link || wsl) {
             if (verbose) {
@@ -3159,8 +3188,8 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
             return false;
         }
         // Determine what was published
-        const finalAccess = currentAccess || (isScoped ? 'restricted' : 'public');
-        const accessLabel = finalAccess === 'restricted' ? 'PRIVATE' : 'PUBLIC';
+        const finalAccess = effectiveNpmVisibility || currentAccess || (isScoped ? 'restricted' : 'public');
+        const accessLabel = (finalAccess === 'restricted' || finalAccess === 'private') ? 'PRIVATE' : 'PUBLIC';
         console.log(colors.green(`✓ Published to npm as ${accessLabel}`));
     }
     else {
@@ -3273,8 +3302,8 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
     console.log(colors.green('✓ Release Summary'));
     console.log(colors.green('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
     const finalPkg = readPackageJson(cwd);
-    const finalAccess = currentAccess || (isScoped ? 'restricted' : 'public');
-    const accessLabel = finalAccess === 'restricted' ? 'PRIVATE' : 'PUBLIC';
+    const finalAccess = effectiveNpmVisibility || currentAccess || (isScoped ? 'restricted' : 'public');
+    const accessLabel = (finalAccess === 'restricted' || finalAccess === 'private') ? 'PRIVATE' : 'PUBLIC';
     console.log(`  Package: ${colors.green(finalPkg.name)}`);
     console.log(`  Version: ${colors.green('v' + finalPkg.version)}`);
     console.log(`  Published: ${colors.green('✓')} (${accessLabel})`);
@@ -3357,6 +3386,52 @@ export async function globalizeWorkspace(rootDir, options = {}, configOptions =
         console.log(`Filtered to: ${filteredOrder.join(', ')}`);
         console.log('');
     }
+    // Check for visibility mismatches: public packages depending on would-be-private siblings
+    const visibilityMap = new Map();
+    for (const pkgInfo of packages) {
+        const pkgConfig = readConfig(pkgInfo.dir);
+        const vis = pkgConfig.npmVisibility
+            || pkgInfo.pkg.publishConfig?.access
+            || options.npmVisibility; // CLI-level default
+        if (vis === 'public') {
+            visibilityMap.set(pkgInfo.name, 'public');
+        }
+        else if (pkgInfo.pkg.private) {
+            visibilityMap.set(pkgInfo.name, 'private');
+        }
+        else {
+            visibilityMap.set(pkgInfo.name, 'unknown');
+        }
+    }
+    const wsNameSet = new Set(packages.map(p => p.name));
+    for (const pkgInfo of packages) {
+        if (visibilityMap.get(pkgInfo.name) !== 'public')
+            continue;
+        const deps = { ...pkgInfo.pkg.dependencies, ...pkgInfo.pkg.devDependencies };
+        for (const depName of Object.keys(deps || {})) {
+            if (!wsNameSet.has(depName))
+                continue;
+            if (visibilityMap.get(depName) === 'public')
+                continue;
+            const depInfo = packages.find(p => p.name === depName);
+            if (!depInfo)
+                continue;
+            console.log(colors.yellow(`⚠ Public package ${pkgInfo.name} depends on ${depName} which has no public visibility set.`));
+            if (!options.dryRun) {
+                const makePublic = await confirm(`Make ${depName} public too?`, true);
+                if (makePublic) {
+                    const depConfig = readConfig(depInfo.dir);
+                    depConfig.npmVisibility = 'public';
+                    writeConfig(depInfo.dir, depConfig, new Set(['npmVisibility']));
+                    visibilityMap.set(depName, 'public');
+                    console.log(colors.green(`✓ Set ${depName} to public in .globalize.json5`));
+                }
+            }
+            else {
+                console.log(colors.dim(`  [dry-run] Would ask to make ${depName} public`));
+            }
+        }
+    }
     // Process each package in dependency order
     const results = [];
     for (const pkgName of filteredOrder) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/npmglobalize",
-  "version": "1.0.103",
+  "version": "1.0.105",
   "description": "Transform file: dependencies to npm versions for publishing",
   "main": "index.js",
   "type": "module",