@bobfrankston/npmglobalize 1.0.235 → 1.0.236

package/lib.js

@@ -7993,12 +7993,17 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
         if (currentAccess === 'public') {
             console.log(colors.yellow(`Package '${pkg.name}' is currently PUBLIC on npm. Converting to private...`));
             if (!dryRun) {
-                const accessResult = await runCommandAsync('npm', ['access', 'set', 'status=restricted', pkg.name], { cwd, silent: false });
+                // 2026-09-23 01:15 EDT — Claude Code (Fable 5.1): silent:true so npm's output is
+                // CAPTURED (stdio 'inherit' captures nothing, and v1.0.235's 403 detection never
+                // fired on httppoly). The captured text is echoed below on failure, so nothing is lost.
+                const accessResult = await runCommandAsync('npm', ['access', 'set', 'status=restricted', pkg.name], { cwd, silent: true });
                 if (accessResult.success) {
                     console.log(colors.green(`✓ Changed ${pkg.name} to PRIVATE on npm`));
                     currentAccess = 'restricted';
                 }
                 else {
+                    if (accessResult.stderr.trim())
+                        console.error(colors.dim(accessResult.stderr.trim()));
                     console.error(colors.red(explainAccessChangeFailure(pkg.name, 'restricted', accessResult)));
                     if (!force)
                         return false;
@@ -8016,12 +8021,16 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
         if (currentAccess === 'restricted') {
             console.log(colors.yellow(`Package '${pkg.name}' is currently PRIVATE on npm. Converting to public...`));
             if (!dryRun) {
-                const accessResult = await runCommandAsync('npm', ['access', 'set', 'status=public', pkg.name], { cwd, silent: false });
+                // 2026-09-23 01:15 EDT — Claude Code (Fable 5.1): silent:true to capture npm's
+                // output for the 403 detection; echoed on failure. Same as the restricted branch.
+                const accessResult = await runCommandAsync('npm', ['access', 'set', 'status=public', pkg.name], { cwd, silent: true });
                 if (accessResult.success) {
                     console.log(colors.green(`✓ Changed ${pkg.name} to PUBLIC on npm`));
                     currentAccess = 'public';
                 }
                 else {
+                    if (accessResult.stderr.trim())
+                        console.error(colors.dim(accessResult.stderr.trim()));
                     console.error(colors.red(explainAccessChangeFailure(pkg.name, 'public', accessResult)));
                     if (!force)
                         return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/npmglobalize",
-  "version": "1.0.235",
+  "version": "1.0.236",
   "description": "Transform file: dependencies to npm versions for publishing",
   "main": "index.js",
   "type": "module",