@bobfrankston/npmglobalize 1.0.148 → 1.0.149

package/lib.d.ts

@@ -188,13 +188,15 @@ export declare function buildDependencyGraph(packages: Array<{
 /** Topological sort with cycle detection. Returns package names in dependency order. */
 export declare function topologicalSort(graph: Map<string, Set<string>>): string[];
 /** Transform file: dependencies to npm versions */
+export type UnpublishedDep = {
+    name: string;
+    version: string;
+    path: string;
+    reason: 'new' | 'update';
+};
 export declare function transformDeps(pkg: any, baseDir: string, verbose?: boolean, forcePublish?: boolean): {
     transformed: boolean;
-    unpublished: Array<{
-        name: string;
-        version: string;
-        path: string;
-    }>;
+    unpublished: UnpublishedDep[];
 };
 /** A problem discovered by the prescan. */
 export interface PrescanIssue {

package/lib.js

@@ -863,7 +863,6 @@ function hasLocalChanges(packageName, version, targetPath, verbose) {
         return false;
     }
 }
-/** Transform file: dependencies to npm versions */
 export function transformDeps(pkg, baseDir, verbose = false, forcePublish = false) {
     let transformed = false;
     const unpublished = [];
@@ -894,7 +893,7 @@ export function transformDeps(pkg, baseDir, verbose = false, forcePublish = fals
                     // Check if this version exists on npm (or if force publish)
                     const versionExists = forcePublish ? false : checkVersionExists(name, targetVersion);
                     if (!versionExists) {
-                        unpublished.push({ name, version: targetVersion, path: targetPath });
+                        unpublished.push({ name, version: targetVersion, path: targetPath, reason: forcePublish ? 'update' : 'new' });
                         if (forcePublish) {
                             console.log(colors.yellow(`  ⟳ ${name}@${targetVersion} will be republished (--force-publish)`));
                         }
@@ -908,15 +907,15 @@ export function transformDeps(pkg, baseDir, verbose = false, forcePublish = fals
                         }
                         // Check transitive file: deps — if any are unpublished, this dep needs republishing
                         if (hasUnpublishedTransitiveDeps(name, targetPkg, targetPath, verbose)) {
-                            unpublished.push({ name, version: targetVersion, path: targetPath });
+                            unpublished.push({ name, version: targetVersion, path: targetPath, reason: 'update' });
                             console.log(colors.yellow(`  ⟳ ${name}@${targetVersion} has unpublished transitive deps — will republish`));
                         }
                         else if (hasLocalChanges(name, targetVersion, targetPath, verbose)) {
-                            unpublished.push({ name, version: targetVersion, path: targetPath });
+                            unpublished.push({ name, version: targetVersion, path: targetPath, reason: 'update' });
                             console.log(colors.yellow(`  ⟳ ${name}@${targetVersion} has local changes not on npm — will republish`));
                         }
                         else if (checkIgnoreFiles(targetPath, { verbose }).securityChanges.length > 0) {
-                            unpublished.push({ name, version: targetVersion, path: targetPath });
+                            unpublished.push({ name, version: targetVersion, path: targetPath, reason: 'update' });
                             console.log(colors.yellow(`  ⟳ ${name}@${targetVersion} has missing ignore patterns — will republish`));
                         }
                     }
@@ -2349,6 +2348,13 @@ export async function initGit(cwd, visibility, dryRun) {
     if (staged.status !== 0) {
         runCommandOrThrow('git', ['commit', '-m', 'Initial commit'], { cwd });
     }
+    // Guarantee HEAD exists — `gh repo create --push` refuses an empty repo.
+    // Can happen if the working tree had nothing to stage (everything ignored, etc.).
+    const hasHead = spawnSafe('git', ['rev-parse', '--verify', 'HEAD'], { cwd, stdio: 'pipe' });
+    if (hasHead.status !== 0) {
+        console.log(colors.yellow('  No commits yet — creating an empty initial commit so --push can proceed.'));
+        runCommandOrThrow('git', ['commit', '--allow-empty', '-m', 'Initial commit'], { cwd });
+    }
     // Create GitHub repo (or link to existing one)
     const visFlag = visibility === 'private' ? '--private' : '--public';
     const createResult = runCommand('gh', ['repo', 'create', repoName, visFlag, '--source=.', '--push'], { cwd, silent: true });
@@ -3337,21 +3343,59 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
             }
             console.log('');
         }
-        // Check if target packages need to be published
+        // Publish/update dependencies.
+        // - reason='update': already on npm but stale (local changes, broken transitive, missing ignore) — auto-publish always
+        // - reason='new'   : version not on npm yet — auto-publish if --publish-deps, else prompt
         if (transformResult.unpublished.length > 0 && !noPublish) {
+            const updateDepsList = transformResult.unpublished.filter(d => d.reason === 'update');
+            const newDepsList = transformResult.unpublished.filter(d => d.reason === 'new');
             console.log('');
-            console.log(colors.yellow('Dependencies to publish:'));
-            for (const { name, version, path } of transformResult.unpublished) {
-                console.log(colors.yellow(`  ${name}@${version} (${path})`));
+            if (updateDepsList.length > 0) {
+                console.log(colors.yellow('Dependencies to update (already on npm, auto-republishing):'));
+                for (const { name, version, path } of updateDepsList) {
+                    console.log(colors.yellow(`  ${name}@${version} (${path})`));
+                }
+            }
+            if (newDepsList.length > 0) {
+                console.log(colors.yellow('New dependencies to publish:'));
+                for (const { name, version, path } of newDepsList) {
+                    console.log(colors.yellow(`  ${name}@${version} (${path})`));
+                }
             }
             console.log('');
             console.log('Dependency tree (✓ = on npm, ✗ = needs publishing):');
             printDepTree(cwd);
             console.log('');
-            if (publishDeps) {
+            // Decide which deps to publish now.
+            // Updates always run. New deps run if --publish-deps; otherwise prompt.
+            let depsToPublish = [...updateDepsList];
+            let proceedWithNew = newDepsList.length === 0 || publishDeps;
+            if (newDepsList.length > 0 && !publishDeps) {
+                console.log(colors.yellow('Options for NEW dependencies:'));
+                console.log(colors.yellow('  1. Publish them manually first'));
+                console.log(colors.yellow('  2. Use --publish-deps (-pd) to publish them automatically'));
+                console.log(colors.yellow('  3. Use -npd (--no-publish-deps) to skip dependency publishing'));
+                console.log(colors.dim('  (--force controls error-continuation only; it does not imply consent to publish new deps)'));
+                console.log('');
+                if (publishDepsYes) {
+                    proceedWithNew = true;
+                }
+                else {
+                    proceedWithNew = await confirm('Publish new dependencies now?', false);
+                    if (!proceedWithNew) {
+                        const newList = newDepsList.map(d => `${d.name}@${d.version}`).join(', ');
+                        recordBuildIssue(pkg.name || cwd, 'error', `Declined publishing new deps (${newList}). Rerun with -pd to auto-publish, or publish them manually first.`);
+                        return false;
+                    }
+                }
+            }
+            if (proceedWithNew) {
+                depsToPublish.push(...newDepsList);
+            }
+            if (depsToPublish.length > 0) {
                 const action = forcePublish ? 'Publishing/updating' : 'Publishing';
-                console.log(`${action} file: dependencies first (--publish-deps)...`);
-                for (const { name, version, path } of transformResult.unpublished) {
+                console.log(`${action} file: dependencies first...`);
+                for (const { name, version, path } of depsToPublish) {
                     console.log('');
                     console.log(colors.yellow(`━━━ Publishing ${name}@${version} ━━━`));
                     if (!dryRun) {
@@ -3393,20 +3437,6 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
                 console.log('');
                 console.log(colors.green('✓ All dependencies published'));
             }
-            else {
-                console.log(colors.yellow('Options:'));
-                console.log(colors.yellow('  1. Publish them manually first'));
-                console.log(colors.yellow('  2. Use --publish-deps to publish them automatically'));
-                console.log(colors.yellow('  3. Use --force to continue anyway (NOT RECOMMENDED)'));
-                console.log(colors.yellow('  4. Use -npd (--no-publish-deps) to skip dependency publishing'));
-                console.log('');
-                if (!force && !publishDepsYes) {
-                    const shouldContinue = await confirm('Continue with unpublished dependencies?', false);
-                    if (!shouldContinue) {
-                        return false;
-                    }
-                }
-            }
         }
         if (!dryRun) {
             writePackageJson(cwd, pkg);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/npmglobalize",
-  "version": "1.0.148",
+  "version": "1.0.149",
   "description": "Transform file: dependencies to npm versions for publishing",
   "main": "index.js",
   "type": "module",