@bobfrankston/npmglobalize 1.0.194 → 1.0.195

package/README.md

@@ -454,6 +454,19 @@ Workspace mode is auto-detected when run from a root with `"private": true` and
                 target. Fixes arborist "Cannot read properties of null"
                 crashes caused by sibling file: deps with nested
                 node_modules. Suggested automatically when the error hits.
+-ts7-report, -deprecation-report
+                Report-only: scan this package and its file: deps for
+                compilerOptions removed in TypeScript 7 and list a migration
+                to-do. Writes nothing.
+-tsfix, -ts7-fix
+                One-off utility, NOT part of the main flow: apply the TS7
+                tsconfig migration to a package (and its file: deps) and exit —
+                no build, no commit, no push, no publish. Intended as a
+                temporary tool for fixing a local/subdirectory tsconfig in
+                place. The normal release flow already applies the same
+                migration automatically when a build hits a TS7 deprecation
+                error, so day-to-day you never need this flag.
+                    npmglobalize <path> -tsfix
 -show           Show package.json dependency changes
 -package, -pkg  Update package.json scripts to use npmglobalize (see below)
 -h, -help       Show help

package/cli.js

@@ -56,6 +56,9 @@ Dependency Options:
                            public visibility to already-published deps in the cascade.
                            Use when a public consumer's deps weren't all marked public.
   -no-prescan, -nps        Skip upfront dep-graph prescan
+  -force-build, -fb        Rebuild file: deps even when their output looks up
+                           to date (freshness check compares .ts/tsconfig
+                           mtimes against emitted .js/.d.ts)
   -force-publish           Republish dependencies even if version exists
   -fix                     Run npm audit fix after transformation
   -no-use-paths, -nup      Declare this package standalone — file: deps shouldn't
@@ -122,10 +125,12 @@ Other Options:
                   moduleResolution, target es3, deprecated flags). Lists a
                   migration to-do list and exits. Writes nothing.
   -tsfix, -ts7-fix
-                  Fix-only: apply the TS7 tsconfig migration to this package
-                  and its file: deps, then exit. Only tsconfig files change —
-                  no build, no commit, no push, no publish. Use on any local
-                  directory: npmglobalize <path> -tsfix
+                  One-off utility, not the main flow: apply the TS7 tsconfig
+                  migration to this package and its file: deps, then exit.
+                  Only tsconfig files change — no build, no commit, no push,
+                  no publish. The release flow auto-applies the same migration
+                  on a TS7 build error; use this only for a temporary in-place
+                  fix of a local directory: npmglobalize <path> -tsfix
   -show           Show package.json dependency changes
   -package, -pkg  Update package.json scripts to use npmglobalize
   -h, -help       Show this help
@@ -243,6 +248,10 @@ function parseArgs(args) {
             case '-force':
                 options.force = true;
                 break;
+            case '-force-build':
+            case '-fb':
+                options.forceBuild = true;
+                break;
             case '-files':
                 options.files = true;
                 options.explicitKeys.add('files');
@@ -555,14 +564,14 @@ export async function main() {
     // whose source has changed since their last build.
     if (!cliOptions.cleanup) {
         await ensureFileDepModules(cwd, !!cliOptions.verbose);
-        const depsOk = await buildFileDepsTopologically(cwd, { verbose: !!cliOptions.verbose, force: !!cliOptions.force });
+        const depsOk = await buildFileDepsTopologically(cwd, { verbose: !!cliOptions.verbose, force: !!cliOptions.force, forceBuild: !!cliOptions.forceBuild });
         if (!depsOk && !cliOptions.force) {
             printBuildSummary();
             process.exit(1);
         }
         if (!depsOk)
             console.log(colors.warn('Continuing with --force despite dep build failure...'));
-        const targetOk = await buildProject(cwd, { verbose: !!cliOptions.verbose, force: !!cliOptions.force });
+        const targetOk = await buildProject(cwd, { verbose: !!cliOptions.verbose, force: !!cliOptions.force, forceBuild: !!cliOptions.forceBuild });
         if (!targetOk) {
             if (!cliOptions.force) {
                 printBuildSummary();

package/lib.d.ts

@@ -108,6 +108,8 @@ export interface GlobalizeOptions {
     usePaths?: boolean;
     /** Local install only — skip transform/publish, just npm install -g . */
     local?: boolean;
+    /** Build every file: dep even when outputs look up to date (skips the freshness check) */
+    forceBuild?: boolean;
     /** Freeze node_modules: replace symlinks/junctions with real copies for network share use */
     freeze?: boolean;
     /** Before `npm pack`, delete `node_modules/` inside each `file:` dep target.
@@ -311,13 +313,26 @@ export declare function missingDeps(pkgDir: string, pkg: any): string[];
  *  re-run" (partial-sync) cases. Also covers `cwd` itself on the first call.
  *  Cycle-safe via the shared `visited` set. */
 export declare function ensureFileDepModules(cwd: string, verbose?: boolean, visited?: Set<string>): Promise<void>;
+/** Cheap freshness check so the build cascade can skip packages whose output is
+ *  already current. Returns true only when provably up to date:
+ *  - outDir projects: newest source (.ts/.tsx/.mts/.cts + tsconfig*.json) must
+ *    not be newer than the newest file under outDir.
+ *  - side-by-side projects: every source must have an emitted sibling
+ *    (.js/.jsx/.mjs/.cjs or declaration) at least as new.
+ *  Conservative: project references, allowJs, missing outputs, or unreadable
+ *  tsconfig all report stale (→ build). package.json mtime is deliberately
+ *  ignored — npmglobalize itself rewrites it around every publish, which would
+ *  otherwise force a rebuild on every run. */
+export declare function isBuildUpToDate(cwd: string): boolean;
 /** Build a single project: detect tsconfig, prompt to add `build: tsc` if a
  *  TypeScript project lacks a build script, run `npm run build`, record
  *  failures. Returns true if build succeeded (or was skipped because no
- *  tsconfig / noEmit / no build script after declining the prompt). */
+ *  tsconfig / noEmit / no build script after declining the prompt / output
+ *  already up to date). Pass `forceBuild` to skip the freshness check. */
 export declare function buildProject(cwd: string, opts?: {
     verbose?: boolean;
     force?: boolean;
+    forceBuild?: boolean;
 }): Promise<boolean>;
 /** Walk `file:` deps depth-first (deps before consumers) and build each one
  *  that has a tsconfig. Mirrors `ensureFileDepModules`'s traversal but invokes
@@ -327,6 +342,7 @@ export declare function buildProject(cwd: string, opts?: {
 export declare function buildFileDepsTopologically(cwd: string, opts?: {
     verbose?: boolean;
     force?: boolean;
+    forceBuild?: boolean;
 }, visited?: Set<string>): Promise<boolean>;
 /** A single TS7-readiness problem found in a package's effective tsconfig. */
 export interface Ts7Finding {

package/lib.js

@@ -1720,6 +1720,41 @@ export function printPnpmSuggestionSummary() {
         console.error(l);
     console.error('');
 }
+/** Run `npm install` in `dir`; on failure, offer to delete `node_modules/`
+ *  and `package-lock.json` and retry once — the standard fix for arborist's
+ *  null-`package` crash on stale lockfile / junction state — before falling
+ *  back to the pnpm suggestion banner. Returns true if install succeeded.
+ *  `rmSync` unlinks junctions without descending, so file: sibling targets
+ *  are never touched. */
+async function npmInstallWithCleanRetry(dir, verbose, context) {
+    let r = await runCommandAsync('npm', ['install'], { cwd: dir, silent: !verbose });
+    if (r.success)
+        return true;
+    console.error(colors.red(`  ✗ npm install failed in ${dir}`));
+    if (r.stderr)
+        console.error(colors.dim(r.stderr.split('\n').slice(0, 5).join('\n')));
+    if (await confirm(`  Delete node_modules/ and package-lock.json in ${dir} and retry npm install?`, true)) {
+        try {
+            fs.rmSync(path.join(dir, 'node_modules'), { recursive: true, force: true });
+        }
+        catch { /* best-effort */ }
+        try {
+            fs.rmSync(path.join(dir, 'package-lock.json'), { force: true });
+        }
+        catch { /* best-effort */ }
+        console.log(colors.yellow(`↻ clean reinstall in ${dir}`));
+        r = await runCommandAsync('npm', ['install'], { cwd: dir, silent: !verbose });
+        if (r.success) {
+            console.log(colors.green(`  ✓ clean reinstall succeeded in ${dir}`));
+            return true;
+        }
+        console.error(colors.red(`  ✗ npm install still failing in ${dir} after clean reinstall`));
+        if (r.stderr)
+            console.error(colors.dim(r.stderr.split('\n').slice(0, 5).join('\n')));
+    }
+    await suggestPnpmOnInstallFailure(context);
+    return false;
+}
 /** Wait for a package version to appear on the npm registry.
  *  First-time publishes (brand-new package name) take much longer to
  *  propagate than version bumps — npm has no cached metadata to update,
@@ -1877,13 +1912,7 @@ export async function ensureFileDepModules(cwd, verbose = false, visited = new S
             catch { /* best-effort */ }
         }
         console.log(colors.yellow(`↻ installing node_modules in ${pkg?.name || abs} (${formatMissingReason(cwdMissing)})`));
-        const r = await runCommandAsync('npm', ['install'], { cwd: abs, silent: !verbose });
-        if (!r.success) {
-            console.error(colors.red(`  ✗ npm install failed in ${abs}`));
-            if (r.stderr)
-                console.error(colors.dim(r.stderr.split('\n').slice(0, 5).join('\n')));
-            await suggestPnpmOnInstallFailure(`ensureFileDepModules (cwd): ${abs}`);
-        }
+        await npmInstallWithCleanRetry(abs, verbose, `ensureFileDepModules (cwd): ${abs}`);
     }
     for (const key of ['dependencies', 'devDependencies']) {
         const deps = pkg?.[key];
@@ -1915,13 +1944,7 @@ export async function ensureFileDepModules(cwd, verbose = false, visited = new S
                     catch { /* best-effort */ }
                 }
                 console.log(colors.yellow(`↻ restoring node_modules in ${name} (${target}) (${formatMissingReason(targetMissing)})`));
-                const r = await runCommandAsync('npm', ['install'], { cwd: target, silent: !verbose });
-                if (!r.success) {
-                    console.error(colors.red(`  ✗ npm install failed in ${target}`));
-                    if (r.stderr)
-                        console.error(colors.dim(r.stderr.split('\n').slice(0, 5).join('\n')));
-                    await suggestPnpmOnInstallFailure(`ensureFileDepModules (file: dep ${name}): ${target}`);
-                }
+                await npmInstallWithCleanRetry(target, verbose, `ensureFileDepModules (file: dep ${name}): ${target}`);
             }
             await ensureFileDepModules(target, verbose, visited);
         }
@@ -2244,10 +2267,144 @@ function migrateTsconfigDeprecations(cwd) {
     }
     return changed;
 }
+/** Newest mtime of any regular file under `dir` (recursive). Symlinks/junctions
+ *  are not followed — the file: dep webs here link back into sibling checkouts. */
+function newestMtimeUnder(dir) {
+    let newest = 0;
+    let entries;
+    try {
+        entries = fs.readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        return 0;
+    }
+    for (const e of entries) {
+        if (e.isSymbolicLink())
+            continue;
+        const full = path.join(dir, e.name);
+        if (e.isDirectory()) {
+            newest = Math.max(newest, newestMtimeUnder(full));
+        }
+        else if (e.isFile()) {
+            try {
+                newest = Math.max(newest, fs.statSync(full).mtimeMs);
+            }
+            catch { /* ignore */ }
+        }
+    }
+    return newest;
+}
+/** Cheap freshness check so the build cascade can skip packages whose output is
+ *  already current. Returns true only when provably up to date:
+ *  - outDir projects: newest source (.ts/.tsx/.mts/.cts + tsconfig*.json) must
+ *    not be newer than the newest file under outDir.
+ *  - side-by-side projects: every source must have an emitted sibling
+ *    (.js/.jsx/.mjs/.cjs or declaration) at least as new.
+ *  Conservative: project references, allowJs, missing outputs, or unreadable
+ *  tsconfig all report stale (→ build). package.json mtime is deliberately
+ *  ignored — npmglobalize itself rewrites it around every publish, which would
+ *  otherwise force a rebuild on every run. */
+export function isBuildUpToDate(cwd) {
+    let tsconfig;
+    try {
+        tsconfig = JSON5.parse(fs.readFileSync(path.join(cwd, 'tsconfig.json'), 'utf-8'));
+    }
+    catch {
+        return false;
+    }
+    const co = tsconfig.compilerOptions || {};
+    if (tsconfig.references || co.allowJs || co.checkJs)
+        return false;
+    const outDir = typeof co.outDir === 'string' ? path.resolve(cwd, co.outDir) : null;
+    // tsconfig "exclude" dirs aren't compiled, so their .ts files never get
+    // outputs — don't count them as sources. Match on the literal path prefix
+    // (glob tails like "tests/**" reduce to "tests").
+    const excludes = (Array.isArray(tsconfig.exclude) ? tsconfig.exclude : [])
+        .filter((x) => typeof x === 'string')
+        .map((x) => x.replace(/^\.\//, '').replace(/[\\/]?\*.*$/, '').replace(/[\\/]+$/, '').toLowerCase())
+        .filter((x) => x.length > 0 && !x.includes('*'));
+    const sources = [];
+    const collect = (dir, rel) => {
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            if (e.isSymbolicLink())
+                continue;
+            const full = path.join(dir, e.name);
+            const relPath = rel ? `${rel}/${e.name.toLowerCase()}` : e.name.toLowerCase();
+            if (e.isDirectory()) {
+                const lower = e.name.toLowerCase();
+                if (lower === 'node_modules' || lower === 'prev' || e.name.startsWith('.'))
+                    continue;
+                if (outDir && path.resolve(full) === outDir)
+                    continue;
+                if (excludes.includes(relPath))
+                    continue;
+                collect(full, relPath);
+            }
+            else if (/\.(ts|tsx|mts|cts)$/.test(e.name) && !/\.d\.(ts|mts|cts)$/.test(e.name)) {
+                if (excludes.includes(relPath))
+                    continue;
+                sources.push(full);
+            }
+        }
+    };
+    collect(cwd, '');
+    if (sources.length === 0)
+        return true;
+    const mtime = (p) => {
+        try {
+            return fs.statSync(p).mtimeMs;
+        }
+        catch {
+            return -1;
+        }
+    };
+    // Any tsconfig*.json edit (own or extended base in the package) invalidates the build.
+    let configTime = 0;
+    try {
+        for (const name of fs.readdirSync(cwd)) {
+            if (/^tsconfig.*\.json$/.test(name))
+                configTime = Math.max(configTime, mtime(path.join(cwd, name)));
+        }
+    }
+    catch { /* ignore */ }
+    if (outDir) {
+        const newestOut = newestMtimeUnder(outDir);
+        if (newestOut === 0)
+            return false;
+        const newestSrc = Math.max(configTime, ...sources.map(mtime));
+        return newestSrc <= newestOut;
+    }
+    // Side-by-side emit: each source needs an output sibling at least as new.
+    let newestOut = 0;
+    for (const src of sources) {
+        const m = src.match(/\.(ts|tsx|mts|cts)$/);
+        const base = src.slice(0, -m[0].length);
+        const candidates = m[1] === 'mts' ? ['.mjs', '.d.mts']
+            : m[1] === 'cts' ? ['.cjs', '.d.cts']
+                : ['.js', '.jsx', '.d.ts'];
+        let outTime = -1;
+        for (const ext of candidates)
+            outTime = Math.max(outTime, mtime(base + ext));
+        if (outTime < 0)
+            return false;
+        if (mtime(src) > outTime)
+            return false;
+        newestOut = Math.max(newestOut, outTime);
+    }
+    return configTime <= newestOut;
+}
 /** Build a single project: detect tsconfig, prompt to add `build: tsc` if a
  *  TypeScript project lacks a build script, run `npm run build`, record
  *  failures. Returns true if build succeeded (or was skipped because no
- *  tsconfig / noEmit / no build script after declining the prompt). */
+ *  tsconfig / noEmit / no build script after declining the prompt / output
+ *  already up to date). Pass `forceBuild` to skip the freshness check. */
 export async function buildProject(cwd, opts = {}) {
     let shouldBuild = false;
     try {
@@ -2277,6 +2434,10 @@ export async function buildProject(cwd, opts = {}) {
         }
     }
     ensureTsconfigNodeTypes(cwd);
+    if (!opts.forceBuild && isBuildUpToDate(cwd)) {
+        console.log(colors.dim(`– Build up to date (${pkg.name || path.basename(cwd)})`));
+        return true;
+    }
     console.log(`Building ${pkg.name || cwd}...`);
     let buildResult = await runCommandAsync('npm', ['run', 'build'], { cwd, silent: true });
     if (!buildResult.success) {
@@ -2549,13 +2710,7 @@ export async function ensureWorkspaceDepModules(rootDir, members, verbose = fals
         return;
     const list = [...allMissing];
     console.log(colors.yellow(`↻ installing workspace node_modules in ${rootPkg?.name || path.basename(root)} (${formatMissingReason(list)})`));
-    const r = await runCommandAsync('npm', ['install'], { cwd: root, silent: !verbose });
-    if (!r.success) {
-        console.error(colors.red(`  ✗ npm install failed in ${root}`));
-        if (r.stderr)
-            console.error(colors.dim(r.stderr.split('\n').slice(0, 5).join('\n')));
-        await suggestPnpmOnInstallFailure(`ensureWorkspaceDepModules: ${root}`);
-    }
+    await npmInstallWithCleanRetry(root, verbose, `ensureWorkspaceDepModules: ${root}`);
 }
 /** Extract the lines a human needs from a failed npm command's output: the
  *  `npm error` lines minus stack frames and brace-only object-dump fragments,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/npmglobalize",
-  "version": "1.0.194",
+  "version": "1.0.195",
   "description": "Transform file: dependencies to npm versions for publishing",
   "main": "index.js",
   "type": "module",