pubz 0.2.8 → 0.2.9

package/dist/cli.js

@@ -346,10 +346,9 @@ async function npmLogin(registry) {
     });
   });
 }
-async function promptForOtp() {
-  console.log("");
-  const code = await prompt(`${cyan("?")} Enter OTP code from your authenticator: `);
-  return code.trim();
+async function reauthenticate(registry) {
+  const loginResult = await npmLogin(registry);
+  return loginResult.success;
 }
 
 // src/publish.ts
@@ -439,11 +438,14 @@ async function publishPackage(pkg, registry, context, dryRun) {
     args.push("--otp", context.otp);
   }
   let result = await run("npm", args, pkg.path);
-  if (result.code !== 0 && isOtpError(result.output) && context.onOtpRequired) {
-    const otpCode = await context.onOtpRequired();
-    if (otpCode) {
-      context.otp = otpCode;
-      const retryArgs = ["publish", "--registry", registry, "--access", "public", "--otp", otpCode];
+  if (result.code !== 0 && isOtpError(result.output) && context.onAuthRequired) {
+    console.log("");
+    console.log("2FA verification required. Opening browser for authentication...");
+    const authSuccess = await context.onAuthRequired(registry);
+    if (authSuccess) {
+      console.log("");
+      console.log(`Retrying publish...`);
+      const retryArgs = ["publish", "--registry", registry, "--access", "public"];
       result = await run("npm", retryArgs, pkg.path);
     }
   }
@@ -451,7 +453,7 @@ async function publishPackage(pkg, registry, context, dryRun) {
     if (isOtpError(result.output)) {
       return {
         success: false,
-        error: `2FA OTP required. Use --otp flag or run interactively.`
+        error: `2FA required. Use --otp flag for TOTP, or run interactively for security key auth.`
       };
     }
     return { success: false, error: `Failed to publish ${pkg.name}` };
@@ -937,7 +939,7 @@ async function main() {
     console.log("");
     const publishContext = {
       otp: options.otp,
-      onOtpRequired: options.ci ? undefined : promptForOtp
+      onAuthRequired: options.ci ? undefined : reauthenticate
     };
     for (const pkg of packages) {
       const result = await publishPackage(pkg, registry, publishContext, options.dryRun);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pubz",
-  "version": "0.2.8",
+  "version": "0.2.9",
   "description": "Interactive CLI for publishing npm packages (single or monorepo)",
   "type": "module",
   "bin": {