itty-packager 1.6.13 → 1.7.0

package/CHANGELOG.md

@@ -0,0 +1,4 @@
+# CHANGELOG
+
+### 1.7.0
+- added support for --otp flag (prompts for NPM OTP) or default interactive auth for publishing

package/lib/commands/release.js

@@ -209,6 +209,54 @@ async function getCommitMessage(newVersion, silent = false) {
   })
 }
 
+async function promptOtp() {
+  return new Promise((resolve, reject) => {
+    process.stdout.write('🔑 Enter OTP code: ')
+    let code = ''
+
+    process.stdin.setRawMode(true)
+    process.stdin.resume()
+
+    const handleInput = (chunk) => {
+      const key = chunk.toString()
+
+      if (key === '\x03') {
+        cleanup()
+        reject(new Error('User cancelled with Ctrl+C'))
+        return
+      }
+
+      if (key === '\r' || key === '\n') {
+        process.stdout.write('\n')
+        cleanup()
+        resolve(code.trim())
+        return
+      }
+
+      if (key === '\x7f' || key === '\x08') {
+        if (code.length > 0) {
+          code = code.slice(0, -1)
+          process.stdout.write('\b \b')
+        }
+        return
+      }
+
+      if (key >= '0' && key <= '9') {
+        code += key
+        process.stdout.write(key)
+      }
+    }
+
+    const cleanup = () => {
+      process.stdin.setRawMode(false)
+      process.stdin.pause()
+      process.stdin.removeListener('data', handleInput)
+    }
+
+    process.stdin.on('data', handleInput)
+  })
+}
+
 async function runCommand(command, cwd = process.cwd(), verbose = false) {
   return new Promise((resolve, reject) => {
     const [cmd, ...args] = command.split(' ')
@@ -318,6 +366,10 @@ export async function releaseCommand(args) {
         type: 'boolean',
         description: 'Skip interactive prompts (use default commit message)'
       },
+      otp: {
+        type: 'boolean',
+        description: 'Prompt for a one-time password (OTP) for npm publish'
+      },
       verbose: {
         type: 'boolean',
         short: 'v',
@@ -354,6 +406,7 @@ Publish Options:
       --prepare           Run prepare (lint, test, build) before publishing
       --silent            Skip interactive prompts (use default commit message)
       --no-license        Do not copy LICENSE file to published package
+      --otp               Prompt for a one-time password (OTP) for npm publish
   -v, --verbose           Show detailed output including npm and git command details
 
 Git Options:
@@ -408,6 +461,7 @@ This creates a clean, flat package structure in node_modules.
   const noLicense = releaseArgs['no-license']
   const shouldPrepare = releaseArgs.prepare
   const silent = releaseArgs.silent
+  const useOtp = releaseArgs.otp
   const verbose = releaseArgs.verbose
 
   // Read package.json and store original version for potential revert
@@ -539,18 +593,26 @@ This creates a clean, flat package structure in node_modules.
     if (dryRun) {
       console.log('🍸 Dry run - skipping publish')
     } else {
-      // Publish from temp directory
+      // Prompt for OTP if requested
+      let otpCode
+      if (useOtp) {
+        otpCode = await promptOtp()
+        if (!otpCode) throw new Error('No OTP code provided')
+      }
+
+      // Publish from temp directory (always inherit stdio for interactive npm auth)
       console.log(`🚀 Publishing to npm...`)
 
       const publishCmd = [
         'npm publish',
         '--registry=https://registry.npmjs.org',
         publicAccess ? '--access=public' : '',
-        SEMVER_TYPES.includes(releaseType) ? '' : `--tag=${releaseType}`
+        SEMVER_TYPES.includes(releaseType) ? '' : `--tag=${releaseType}`,
+        otpCode ? `--otp=${otpCode}` : ''
       ].filter(Boolean).join(' ')
 
       if (verbose) console.log(`Running: ${publishCmd}`)
-      await runCommand(publishCmd, tempDir, verbose)
+      await runCommand(publishCmd, tempDir, true)
     }
 
     // Cleanup

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "itty-packager",
-  "version": "1.6.13",
+  "version": "1.7.0",
   "description": "Universal build tool for itty libraries",
   "type": "module",
   "bin": {
@@ -9,7 +9,7 @@
   "scripts": {
     "lint": "bun bin/itty.js lint",
     "dev": "bun test --coverage --watch",
-    "release": "bun bin/itty.js release --patch --tag --push --root"
+    "release": "bun bin/itty.js release --patch --tag --push --root --otp"
   },
   "keywords": [
     "build",