@bobfrankston/npmglobalize 1.0.71 → 1.0.72

package/lib.d.ts

@@ -35,7 +35,7 @@ export interface GlobalizeOptions {
     init?: boolean;
     /** Git visibility: private (default) or public */
     gitVisibility?: 'private' | 'public';
-    /** npm visibility: public (default) or private */
+    /** npm visibility: private (default) or public */
     npmVisibility?: 'private' | 'public';
     /** Custom commit message */
     message?: string;

package/lib.js

@@ -240,31 +240,29 @@ export function checkNpmAccess(packageName) {
     try {
         // For scoped packages, use npm access to check actual access level
         if (packageName.startsWith('@')) {
-            const accessResult = spawnSync('npm', ['access', 'list', 'packages', packageName], {
-                encoding: 'utf-8',
-                stdio: 'pipe',
-                shell: true
-            });
-            if (accessResult.status === 0 && accessResult.stdout) {
-                const output = accessResult.stdout.trim();
-                // Output format: "package-name": "read-write" or "read-only"
-                // For public packages, this works without auth
-                if (output.includes('read-write') || output.includes('read-only')) {
-                    return 'public';
-                }
-            }
-            // If npm access fails or returns empty, try npm view as fallback
-            // If npm view succeeds without auth, package is public
+            // First check if the package actually exists on npm
+            // npm access returns read-write for unpublished packages in owned scopes
             const viewResult = spawnSync('npm', ['view', packageName, 'name'], {
                 encoding: 'utf-8',
                 stdio: 'pipe',
                 shell: true
             });
             if (viewResult.status === 0 && viewResult.stdout && viewResult.stdout.trim()) {
-                // Package is viewable without auth = public
-                return 'public';
+                // Package exists - now check access level
+                const accessResult = spawnSync('npm', ['access', 'list', 'packages', packageName], {
+                    encoding: 'utf-8',
+                    stdio: 'pipe',
+                    shell: true
+                });
+                if (accessResult.status === 0 && accessResult.stdout) {
+                    const output = accessResult.stdout.trim();
+                    if (output.includes('read-write') || output.includes('read-only')) {
+                        return 'public';
+                    }
+                }
+                return 'restricted'; // Exists but not publicly accessible
             }
-            // Package exists but not viewable = restricted, or doesn't exist
+            // Package not viewable - check if it's restricted or unpublished
             const checkResult = spawnSync('npm', ['view', packageName, '--json'], {
                 encoding: 'utf-8',
                 stdio: 'pipe',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/npmglobalize",
-  "version": "1.0.71",
+  "version": "1.0.72",
   "description": "Transform file: dependencies to npm versions for publishing",
   "main": "index.js",
   "type": "module",