polyrepo-cli 1.0.0 → 1.0.1

package/README.md

@@ -414,11 +414,16 @@ polyrepo bump --packages vue-toast-kit,os-detect --yes
    they differ (genuinely unpublished) are pre-selected; already
    published ones are unchecked but still selectable (e.g. to
    republish after an unpublish).
-3. After confirming, for each selected package, one at a time:
-   `npm publish` (or `npm publish --dry-run` with the `--dry-run`
-   flag — npm's own dry run, including the real build and pack step,
-   not just printing a plan). Runs with a real terminal, not captured
-   — an npm 2FA/OTP prompt works normally.
+3. After confirming, checks `npm whoami` once for the whole batch
+   (skipped under `--dry-run`) — not logged in runs `npm login`
+   (a real terminal, so its browser-based OTP flow or credential
+   prompt works normally) before publishing anything, instead of
+   only finding out partway through the first package's `npm publish`.
+4. For each selected package, one at a time: `npm publish` (or
+   `npm publish --dry-run` with the `--dry-run` flag — npm's own dry
+   run, including the real build and pack step, not just printing a
+   plan). Runs with a real terminal, not captured — an npm 2FA/OTP
+   prompt works normally.
 
 **Options:**
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "polyrepo-cli",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Interactive CLI for managing a folder of local npm package repos: version bumps through a PR, npm publish, GitHub releases, and cross-package dependency drift checks — all from one tool.",
   "type": "module",
   "bin": {

package/src/commands/publish.js

@@ -5,19 +5,29 @@ import { loadConfig } from '../loadConfig.js'
 import { npm } from '../exec.js'
 import { fetchPublishedVersionAsync } from '../registry.js'
 import { selectPackages } from '../selectPackages.js'
+import { filterByNames } from '../filterByNames.js'
 import { pMap } from '../pMap.js'
-import { heading, stepHeading, ok, fail, columnWidths, formatRow } from '../ui.js'
+import { heading, stepHeading, ok, fail, warn, columnWidths, formatRow } from '../ui.js'
 
 export async function publishCommand({ configPath, packages, yes = false, dryRun = false } = {}) {
   const config = loadConfig({ configPath })
-  const repos = (await inspectRepos(discoverRepos(config))).filter((r) => r.version)
-  if (repos.length === 0) {
+  const allRepos = (await inspectRepos(discoverRepos(config))).filter((r) => r.version)
+  if (allRepos.length === 0) {
     console.log(pc.yellow('No repos found.'))
     return
   }
 
   heading('Publish to npm')
 
+  // Narrowed to --packages up front (a no-op when it wasn't given) — no
+  // reason to hit the registry for, or print the status of, packages
+  // nobody asked to publish.
+  const repos = filterByNames(allRepos, packages)
+  if (repos.length === 0) {
+    console.log(pc.dim('Nothing selected.'))
+    return
+  }
+
   console.log(pc.dim(`Checking ${repos.length} package(s) against the registry...`))
   // Each repo's registry lookup is a real network round trip — running them
   // all at once instead of one at a time is where this actually pays off.
@@ -34,7 +44,11 @@ export async function publishCommand({ configPath, packages, yes = false, dryRun
 
   const selected = await selectPackages({
     items: withRegistry,
-    packages,
+    // repos above is already the exact --packages match — passing those
+    // same dir names back through here just skips the checkbox (as
+    // before) without filterByNames re-warning about anything, since
+    // there's nothing left for it to not find.
+    packages: packages ? withRegistry.map((r) => r.dir) : undefined,
     message: 'Pick packages to publish:',
     buildChoice: (all) => {
       const columns = [
@@ -68,6 +82,8 @@ export async function publishCommand({ configPath, packages, yes = false, dryRun
     }
   }
 
+  if (!dryRun && !(await ensureNpmLogin())) return
+
   let index = 0
   for (const repo of selected) {
     index += 1
@@ -80,3 +96,24 @@ export async function publishCommand({ configPath, packages, yes = false, dryRun
     else ok(`Published ${repo.name}@${repo.version}${dryRun ? ' (dry run).' : '.'}`)
   }
 }
+
+// Without this, a batch of several packages would only find out about a
+// missing/expired npm login at the very end of the first `npm publish` —
+// after everything before it in the run (fetch, checkout, confirmation)
+// already succeeded. Checked once for the whole batch, not per package,
+// since npm auth isn't per-repo. `npm login` needs a real terminal — it
+// can open a browser for npm's web-based OTP flow, or prompt directly.
+async function ensureNpmLogin() {
+  if (npm('.', ['whoami'], { quiet: true }).ok) return true
+
+  warn('Not logged in to npm — running `npm login` first.')
+  npm('.', ['login'], { interactive: true })
+
+  if (npm('.', ['whoami'], { quiet: true }).ok) {
+    ok('Logged in to npm.')
+    return true
+  }
+
+  fail('npm login did not succeed — aborting before publishing anything.')
+  return false
+}

package/src/commands/release.js

@@ -6,19 +6,29 @@ import { tagName, tagExists } from '../tags.js'
 import { releaseExistsAsync, createRelease } from '../release.js'
 import { extractChangelogSection } from '../changelog.js'
 import { selectPackages } from '../selectPackages.js'
+import { filterByNames } from '../filterByNames.js'
 import { pMap } from '../pMap.js'
 import { heading, stepHeading, ok, fail, columnWidths, formatRow } from '../ui.js'
 
 export async function releaseCommand({ configPath, packages, yes = false, dryRun = false } = {}) {
   const config = loadConfig({ configPath })
-  const repos = (await inspectRepos(discoverRepos(config))).filter((r) => r.version)
-  if (repos.length === 0) {
+  const allRepos = (await inspectRepos(discoverRepos(config))).filter((r) => r.version)
+  if (allRepos.length === 0) {
     console.log(pc.yellow('No repos found.'))
     return
   }
 
   heading('GitHub releases')
 
+  // Narrowed to --packages up front (a no-op when it wasn't given) — no
+  // reason to check, or print the tag/release status of, packages nobody
+  // asked about.
+  const repos = filterByNames(allRepos, packages)
+  if (repos.length === 0) {
+    console.log(pc.dim('Nothing selected.'))
+    return
+  }
+
   console.log(pc.dim(`Checking ${repos.length} package(s) for a tag and an existing release...`))
   // A release always targets `v<local version>` — the tag `polyrepo bump`
   // creates. No tag for the current version means there's nothing to
@@ -48,7 +58,10 @@ export async function releaseCommand({ configPath, packages, yes = false, dryRun
 
   const selected = await selectPackages({
     items: withStatus,
-    packages,
+    // withStatus is already the exact --packages match — passing those
+    // same dir names back here just skips the checkbox without
+    // re-warning about anything (see publish.js for the same pattern).
+    packages: packages ? withStatus.map((r) => r.dir) : undefined,
     message: 'Pick packages to create a GitHub Release for:',
     buildChoice: (all) => {
       const columns = [

package/src/commands/tag.js

@@ -5,6 +5,7 @@ import { loadConfig } from '../loadConfig.js'
 import { syncMaster } from '../masterSync.js'
 import { tagName, tagExists, tagExistsAsync, createAndPushTag } from '../tags.js'
 import { selectPackages } from '../selectPackages.js'
+import { filterByNames } from '../filterByNames.js'
 import { pMap } from '../pMap.js'
 import { heading, stepHeading, ok, fail, columnWidths, formatRow } from '../ui.js'
 import { releaseOne } from './release.js'
@@ -18,14 +19,23 @@ import { releaseOne } from './release.js'
 // release for it" are almost always the same reason to run this.
 export async function tagCommand({ configPath, packages, yes = false, dryRun = false, release = false } = {}) {
   const config = loadConfig({ configPath })
-  const repos = (await inspectRepos(discoverRepos(config))).filter((r) => r.version)
-  if (repos.length === 0) {
+  const allRepos = (await inspectRepos(discoverRepos(config))).filter((r) => r.version)
+  if (allRepos.length === 0) {
     console.log(pc.yellow('No repos found.'))
     return
   }
 
   heading('Tag current versions')
 
+  // Narrowed to --packages up front (a no-op when it wasn't given) — no
+  // reason to check, or print the tag status of, packages nobody asked
+  // about.
+  const repos = filterByNames(allRepos, packages)
+  if (repos.length === 0) {
+    console.log(pc.dim('Nothing selected.'))
+    return
+  }
+
   console.log(pc.dim(`Checking ${repos.length} package(s) for an existing tag...`))
   const withTag = await pMap(repos, async (r) => {
     const tag = tagName(r.version)
@@ -36,7 +46,10 @@ export async function tagCommand({ configPath, packages, yes = false, dryRun = f
 
   const selected = await selectPackages({
     items: withTag,
-    packages,
+    // withTag is already the exact --packages match — passing those same
+    // dir names back here just skips the checkbox without re-warning
+    // about anything (see publish.js for the same pattern).
+    packages: packages ? withTag.map((r) => r.dir) : undefined,
     message: 'Pick packages to tag at their current version:',
     buildChoice: (all) => {
       const columns = [