@bobfrankston/npmglobalize 1.0.138 → 1.0.139

package/lib/git.js

@@ -673,6 +673,19 @@ export function pushWithProtection(cwd, verbose) {
             console.log(colors.green('  ✓ Already up-to-date'));
         return true;
     }
+    // No upstream branch — auto-set and retry
+    if (combined.includes('no upstream branch') || combined.includes('has no upstream')) {
+        if (verbose)
+            console.log(colors.yellow('  No upstream branch — setting upstream...'));
+        const branchResult = runCommand('git', ['rev-parse', '--abbrev-ref', 'HEAD'], { cwd, silent: true });
+        const branch = branchResult.output.trim() || 'master';
+        pushResult = runCommand('git', ['push', '--set-upstream', 'origin', branch], { cwd, silent: true });
+        if (pushResult.success) {
+            if (verbose)
+                console.log(colors.green('  ✓ Pushed to remote (set upstream)'));
+            return true;
+        }
+    }
     // Transient network errors (HTTP 408, RPC failed, unexpected disconnect) — retry once
     if (/rpc failed|curl \d+|unexpected disconnect|hung up unexpectedly/i.test(pushResult.stderr)) {
         console.log(colors.yellow('Git push failed with transient error — retrying...'));

package/lib.js

@@ -1647,6 +1647,20 @@ function pushWithProtection(cwd, verbose) {
             console.log(colors.green('  ✓ Already up-to-date'));
         return true;
     }
+    // No upstream branch — auto-set and retry
+    if (combined.includes('no upstream branch') || combined.includes('has no upstream')) {
+        if (verbose)
+            console.log(colors.yellow('  No upstream branch — setting upstream...'));
+        // Detect current branch name
+        const branchResult = runCommand('git', ['rev-parse', '--abbrev-ref', 'HEAD'], { cwd, silent: true });
+        const branch = branchResult.output.trim() || 'master';
+        pushResult = runCommand('git', ['push', '--set-upstream', 'origin', branch], { cwd, silent: true });
+        if (pushResult.success) {
+            if (verbose)
+                console.log(colors.green('  ✓ Pushed to remote (set upstream)'));
+            return true;
+        }
+    }
     // Transient network errors (HTTP 408, RPC failed, unexpected disconnect) — retry once
     if (/rpc failed|curl \d+|unexpected disconnect|hung up unexpectedly/i.test(pushResult.stderr)) {
         console.log(colors.yellow('Git push failed with transient error — retrying...'));
@@ -3720,6 +3734,36 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
     else if (!skipVersionBump) {
         console.log(`  [dry-run] Would run: npm version ${bump}`);
     }
+    // Check for public package depending on private dependencies
+    const publishAccess = effectiveNpmVisibility || currentAccess || (isScoped ? 'restricted' : 'public');
+    if (publishAccess === 'public') {
+        const privateDeps = [];
+        for (const depKey of ['dependencies', 'peerDependencies']) {
+            const deps = pkg[depKey];
+            if (!deps)
+                continue;
+            for (const depName of Object.keys(deps)) {
+                const depAccess = checkNpmAccess(depName);
+                if (depAccess === 'restricted') {
+                    privateDeps.push(depName);
+                }
+                else if (depAccess === null && depName.startsWith('@')) {
+                    // Scoped package not on npm — will be private by default
+                    privateDeps.push(`${depName} (not yet published)`);
+                }
+            }
+        }
+        if (privateDeps.length > 0) {
+            console.log('');
+            console.error(colors.red('WARNING: Public package depends on PRIVATE dependencies:'));
+            for (const d of privateDeps) {
+                console.error(colors.red(`  ${d}`));
+            }
+            console.error(colors.yellow('Consumers will get E404 when installing this package.'));
+            console.error(colors.yellow('Fix: publish those deps as public, or make this package private.'));
+            console.log('');
+        }
+    }
     // Publish
     console.log('Publishing to npm...');
     if (!dryRun) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/npmglobalize",
-  "version": "1.0.138",
+  "version": "1.0.139",
   "description": "Transform file: dependencies to npm versions for publishing",
   "main": "index.js",
   "type": "module",
@@ -33,8 +33,8 @@
   "dependencies": {
     "@bobfrankston/freezepak": "^0.1.6",
     "@bobfrankston/importgen": "^0.1.32",
-    "@bobfrankston/themecolors": "^0.1.0",
-    "@bobfrankston/userconfig": "^1.0.5",
+    "@bobfrankston/themecolors": "^0.1.2",
+    "@bobfrankston/userconfig": "^1.0.6",
     "@npmcli/package-json": "^7.0.4",
     "json5": "^2.2.3",
     "libnpmversion": "^8.0.3",