@bobfrankston/npmglobalize 1.0.92 → 1.0.94

package/.claude/settings.local.json

@@ -28,7 +28,9 @@
       "Bash(echo:*)",
       "Bash(onboard --version:*)",
       "Bash(onboard --help:*)",
-      "Bash(npmglobalize:*)"
+      "Bash(npmglobalize:*)",
+      "Bash(npm whoami:*)",
+      "Bash(where npmglobalize:*)"
     ]
   }
 }

package/lib.d.ts

@@ -9,6 +9,7 @@
  * Current approach uses synchronous child_process calls for stability and simplicity.
  * Consider library-based approach if async operations or cross-platform issues arise.
  */
+import { NpmCommonConfig } from '@bobfrankston/userconfig';
 /** Options for the globalize operation */
 export interface GlobalizeOptions {
     /** Bump type: patch (default), minor, major */
@@ -94,11 +95,8 @@ export interface WorkspaceResult {
 }
 /** Read and parse package.json from a directory */
 export declare function readPackageJson(dir: string): any;
-/** Global npm config from %USERPROFILE%\.userconfig\npm.json5 */
-export interface UserNpmConfig {
-    scope?: string;
-    npmVisibility?: 'private' | 'public';
-}
+/** Global npm config from %USERPROFILE%\.userconfig\npm.json5 — via @bobfrankston/userconfig */
+export type UserNpmConfig = NpmCommonConfig;
 /** Get the .userconfig directory path (%USERPROFILE%\.userconfig) */
 export declare function getUserConfigDir(): string;
 /** Read global npm config from %USERPROFILE%\.userconfig\npm.json5 */

package/lib.js

@@ -12,6 +12,7 @@
 import fs from 'fs';
 import path from 'path';
 import { execSync, spawnSync } from 'child_process';
+import { readConfig as readUserConfig, writeConfig as writeUserConfig, configDir } from '@bobfrankston/userconfig';
 /** Wrapper for spawnSync that avoids DEP0190 (args + shell: true).
  *  When shell is true, joins cmd+args into a single command string. */
 function spawnSafe(cmd, args, options = {}) {
@@ -90,43 +91,17 @@ export function readPackageJson(dir) {
 }
 /** Get the .userconfig directory path (%USERPROFILE%\.userconfig) */
 export function getUserConfigDir() {
-    const userProfile = process.env.USERPROFILE || process.env.HOME || '~';
-    return path.join(userProfile, '.userconfig');
+    return configDir;
 }
 /** Read global npm config from %USERPROFILE%\.userconfig\npm.json5 */
 export function readUserNpmConfig() {
-    const configPath = path.join(getUserConfigDir(), 'npm.json5');
-    if (!fs.existsSync(configPath)) {
-        return {};
-    }
-    try {
-        const content = fs.readFileSync(configPath, 'utf-8');
-        return JSON5.parse(content);
-    }
-    catch (error) {
-        console.warn(`Warning: Could not parse ${configPath}: ${error.message}`);
-        return {};
-    }
+    return readUserConfig();
 }
 /** Write global npm config to %USERPROFILE%\.userconfig\npm.json5 */
 export function writeUserNpmConfig(config) {
-    const configDir = getUserConfigDir();
-    if (!fs.existsSync(configDir)) {
-        fs.mkdirSync(configDir, { recursive: true });
-    }
-    const configPath = path.join(configDir, 'npm.json5');
-    // Read existing to merge
-    const existing = readUserNpmConfig();
+    const existing = readUserConfig();
     const merged = { ...existing, ...config };
-    const lines = ['{'];
-    const entries = Object.entries(merged);
-    for (let i = 0; i < entries.length; i++) {
-        const [key, value] = entries[i];
-        const comma = i < entries.length - 1 ? ',' : '';
-        lines.push(`  ${key}: ${JSON.stringify(value)}${comma}`);
-    }
-    lines.push('}');
-    fs.writeFileSync(configPath, lines.join('\n') + '\n', 'utf-8');
+    writeUserConfig(merged);
 }
 /** Read .globalize.json5 config file */
 export function readConfig(dir) {
@@ -340,13 +315,36 @@ export function checkNpmAccess(packageName) {
             return 'restricted'; // Default for scoped
         }
         else {
-            // Unscoped packages are always public if they exist
+            // Unscoped packages are always public if they exist — but only if we own them
             const result = spawnSafe('npm', ['view', packageName, 'name'], {
                 encoding: 'utf-8',
                 stdio: 'pipe',
                 shell: true
             });
             if (result.status === 0 && result.stdout && result.stdout.trim()) {
+                // Package exists on npm — check if current user is a maintainer
+                const maintResult = spawnSafe('npm', ['view', packageName, 'maintainers', '--json'], {
+                    encoding: 'utf-8',
+                    stdio: 'pipe',
+                    shell: true
+                });
+                if (maintResult.status === 0 && maintResult.stdout) {
+                    const auth = checkNpmAuth();
+                    if (auth.username) {
+                        try {
+                            const maintainers = JSON.parse(maintResult.stdout.trim());
+                            const names = Array.isArray(maintainers)
+                                ? maintainers.map((m) => typeof m === 'string' ? m.replace(/ <.*/, '') : m.name)
+                                : [];
+                            if (!names.includes(auth.username)) {
+                                return null; // Exists but we don't own it
+                            }
+                        }
+                        catch {
+                            // Parse failed — fall through to return public
+                        }
+                    }
+                }
                 return 'public';
             }
             return null;
@@ -2046,8 +2044,8 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
         console.log(colors.yellow('Continuing with --force despite errors...'));
     }
     // Check npm visibility and current publication status
-    const currentAccess = checkNpmAccess(pkg.name);
-    const isScoped = pkg.name.startsWith('@');
+    let currentAccess = checkNpmAccess(pkg.name);
+    let isScoped = pkg.name.startsWith('@');
     // Check if public intent was explicitly declared anywhere:
     // CLI (--npm public), config file (.globalize.json5), or package.json publishConfig
     const npmVisibilityExplicitlySet = 'npmVisibility' in options
@@ -2104,6 +2102,8 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
             const normalizedScope = scope.startsWith('@') ? scope : `@${scope}`;
             const newName = `${normalizedScope}/${pkg.name}`;
             pkg.name = newName;
+            isScoped = true;
+            currentAccess = checkNpmAccess(newName);
             writePackageJson(cwd, pkg);
             console.log(colors.green(`✓ Renamed package to ${newName}`));
             // Save scope to .userconfig if not already there
@@ -2168,13 +2168,47 @@ export async function globalize(cwd, options = {}, configOptions = {}) {
                 console.log(colors.dim(`  Use --npm public to make it public`));
             }
             else {
-                console.log(colors.yellow(`WARNING: Package '${pkg.name}' is unscoped and will be PUBLIC.`));
-                console.log(colors.yellow(`  Unscoped packages cannot be private on npm.`));
+                // Unscoped new package — prompt to add scope (same as explicit-private path)
                 const ucfg = readUserNpmConfig();
                 const auth2 = checkNpmAuth();
-                const suggestedScope = ucfg.scope || (auth2.username ? `@${auth2.username}` : '@scope');
-                console.log(colors.yellow(`  Consider using a scoped name: ${suggestedScope}/${pkg.name}`));
-                console.log(colors.yellow(`  Or use --npm public to confirm public publishing`));
+                const defaultScope = ucfg.scope
+                    || (auth2.username ? `@${auth2.username}` : undefined);
+                const scopedExample = defaultScope ? `${defaultScope}/${pkg.name}` : `@scope/${pkg.name}`;
+                console.log(colors.yellow(`WARNING: Package '${pkg.name}' is unscoped and will be PUBLIC.`));
+                console.log(colors.yellow(`  Unscoped packages cannot be private on npm.`));
+                if (dryRun) {
+                    console.log(`  [dry-run] Would prompt to add scope (e.g., ${scopedExample})`);
+                }
+                else {
+                    const addScope = await confirm(`Add scope to make it private (e.g., ${scopedExample})?`, true);
+                    if (addScope) {
+                        const scope = await promptText('Scope:', defaultScope);
+                        if (scope) {
+                            const normalizedScope = scope.startsWith('@') ? scope : `@${scope}`;
+                            const newName = `${normalizedScope}/${pkg.name}`;
+                            pkg.name = newName;
+                            isScoped = true;
+                            currentAccess = checkNpmAccess(newName);
+                            writePackageJson(cwd, pkg);
+                            console.log(colors.green(`✓ Renamed package to ${newName}`));
+                            if (!ucfg.scope) {
+                                const saveScope = await confirm(`Save scope "${normalizedScope}" to global config (${getUserConfigDir()}\\npm.json5)?`, true);
+                                if (saveScope) {
+                                    writeUserNpmConfig({ scope: normalizedScope });
+                                    console.log(colors.green(`✓ Saved default scope to ${getUserConfigDir()}\\npm.json5`));
+                                }
+                            }
+                        }
+                        else {
+                            console.log(colors.yellow(`  No scope provided. Continuing as public.`));
+                            console.log(colors.yellow(`  Use --npm public to suppress this prompt.`));
+                        }
+                    }
+                    else {
+                        console.log(colors.yellow(`  Continuing as public.`));
+                        console.log(colors.yellow(`  Use --npm public to suppress this prompt.`));
+                    }
+                }
             }
         }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/npmglobalize",
-  "version": "1.0.92",
+  "version": "1.0.94",
   "description": "Transform file: dependencies to npm versions for publishing",
   "main": "index.js",
   "type": "module",
@@ -22,7 +22,7 @@
   "author": "Bob Frankston",
   "license": "MIT",
   "devDependencies": {
-    "@types/node": "^25.2.1",
+    "@types/node": "^25.3.0",
     "@types/npm-package-arg": "^6.1.4",
     "@types/pacote": "^11.1.8"
   },
@@ -31,6 +31,7 @@
     "url": "https://github.com/BobFrankston/npmglobalize.git"
   },
   "dependencies": {
+    "@bobfrankston/userconfig": "^1.0.3",
     "@npmcli/package-json": "^7.0.4",
     "json5": "^2.2.3",
     "libnpmversion": "^8.0.3",
@@ -40,5 +41,14 @@
   },
   "publishConfig": {
     "access": "public"
+  },
+  ".dependencies": {
+    "@bobfrankston/userconfig": "file:../userconfig",
+    "@npmcli/package-json": "^7.0.4",
+    "json5": "^2.2.3",
+    "libnpmversion": "^8.0.3",
+    "npm-registry-fetch": "^19.1.1",
+    "pacote": "^21.0.4",
+    "simple-git": "^3.30.0"
   }
 }