pubz 0.2.6 → 0.2.9

package/dist/cli.js

@@ -346,6 +346,10 @@ async function npmLogin(registry) {
     });
   });
 }
+async function reauthenticate(registry) {
+  const loginResult = await npmLogin(registry);
+  return loginResult.success;
+}
 
 // src/publish.ts
 import { spawn as spawn2 } from "node:child_process";
@@ -420,18 +424,38 @@ async function verifyBuild(pkg) {
   }
   return { success: true };
 }
-async function publishPackage(pkg, registry, otp, dryRun) {
+function isOtpError(output) {
+  return output.includes("EOTP") || output.includes("one-time password");
+}
+async function publishPackage(pkg, registry, context, dryRun) {
   if (dryRun) {
     console.log(`  [DRY RUN] Would publish ${pkg.name}@${pkg.version} to ${registry}`);
     return { success: true };
   }
   console.log(`Publishing ${pkg.name}@${pkg.version}...`);
   const args = ["publish", "--registry", registry, "--access", "public"];
-  if (otp) {
-    args.push("--otp", otp);
+  if (context.otp) {
+    args.push("--otp", context.otp);
+  }
+  let result = await run("npm", args, pkg.path);
+  if (result.code !== 0 && isOtpError(result.output) && context.onAuthRequired) {
+    console.log("");
+    console.log("2FA verification required. Opening browser for authentication...");
+    const authSuccess = await context.onAuthRequired(registry);
+    if (authSuccess) {
+      console.log("");
+      console.log(`Retrying publish...`);
+      const retryArgs = ["publish", "--registry", registry, "--access", "public"];
+      result = await run("npm", retryArgs, pkg.path);
+    }
   }
-  const result = await run("npm", args, pkg.path);
   if (result.code !== 0) {
+    if (isOtpError(result.output)) {
+      return {
+        success: false,
+        error: `2FA required. Use --otp flag for TOTP, or run interactively for security key auth.`
+      };
+    }
     return { success: false, error: `Failed to publish ${pkg.name}` };
   }
   console.log(`  ${pkg.name} published successfully`);
@@ -913,8 +937,12 @@ async function main() {
     console.log("");
     console.log(cyan("Publishing packages..."));
     console.log("");
+    const publishContext = {
+      otp: options.otp,
+      onAuthRequired: options.ci ? undefined : reauthenticate
+    };
     for (const pkg of packages) {
-      const result = await publishPackage(pkg, registry, options.otp, options.dryRun);
+      const result = await publishPackage(pkg, registry, publishContext, options.dryRun);
       if (!result.success) {
         console.error(red(bold("Failed to publish")) + ` ${cyan(pkg.name)}: ${result.error}`);
         console.log("");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pubz",
-  "version": "0.2.6",
+  "version": "0.2.9",
   "description": "Interactive CLI for publishing npm packages (single or monorepo)",
   "type": "module",
   "bin": {