@mui/internal-code-infra 0.0.4-canary.2 → 0.0.4-canary.21

package/README.md

@@ -35,24 +35,35 @@ This is stored in the `docs` top-level directory.
 
 ### Adding and publishing new packages
 
-Whenever news packages are added to the repo (that will get published to npm) or a private package is turned into a public one, follow the below steps before invoking the publish workflow of the previous section.
+Whenever new packages are added to the repo (that will get published to npm) or a private package is turned into a public one, follow the below steps before invoking the publish workflow of the previous section.
 
-1. Goto your repo's code base on your system, open terminal and run:
+1. Go to your repo's code base on your system, then log in to npm using
+
+```bash
+npm login
+```
+
+2. Once logged-in, open terminal and run:
 
 ```bash
 pnpm code-infra publish-new-package
 ```
 
 This command detects the new public packages in the repo and asks for your confirmation before publishing them to the npm registry. Add the `--dryRun` flag to skip the actual publishing.
+If publishing fails with npm asking for `otp`, run the command again with 6 digit auth code from your authenticator app where you've added npm; Google Authenticator, Authy or similar:
+
+```bash
+pnpm code-infra publish-new-package --otp=123456
+```
 
-2. Goto the settings link for each packages, ie, https://www.npmjs.com/package/<pkg-name>/access , and setup `Trusted Publisher`.
-3. In `Select your publisher` step in the above link, click on the `Github Actions` button to configure Github actions based trusted publishing.
-4. Fill in the details of the repo -
+3. Go to the settings link for each package, e.g., `https://www.npmjs.com/package/<pkg-name>/access`, and setup `Trusted Publisher`.
+4. In the `Select your publisher` step in the above link, click on the `GitHub Actions` button to configure GitHub Actions-based trusted publishing.
+5. Fill in the details of the repo -
    1. `Organization or user` as `mui`,
    2. `Repository` as per the new package
    3. `Workflow filename*` should be `publish.yml`
-   4. `Environment name` should be `npm-publish`
-5. In the `Publishing access` section, toggle the recommended option of `Require two-factor authentication and disallow tokens`.
-6. Finally, save the changes by clicking on `Update Package Settings` button.
+   4. `Environment name` should be `npm-publish` or `npm-publish-internal` based on whether the package is user facing package or internal package respectively.
+6. In the `Publishing access` section, toggle the recommended option of `Require two-factor authentication and disallow tokens`.
+7. Finally, save the changes by clicking on `Update Package Settings` button.
 
 After following these steps, the `Publish` workflow can be invoked again.

package/build/babel-config.d.mts

@@ -1,3 +1,7 @@
+export type ReactCompilationMode = 'annotation' | 'syntax' | 'infer' | 'all';
+/**
+ * @typedef {'annotation' | 'syntax' | 'infer' | 'all'} ReactCompilationMode
+ */
 /**
  * @param {Object} param0
  * @param {boolean} [param0.debug]
@@ -8,10 +12,11 @@
  * @param {string | null} param0.outExtension - Specify the output file extension.
  * @param {string} param0.runtimeVersion
  * @param {string} [param0.reactCompilerReactVersion]
- * @param {string} [param0.reactCompilerMode]
+ * @param {ReactCompilationMode} [param0.reactCompilerMode]
+ * @param {{ allowedCallees?: Record<string, string[]> }} [param0.displayName] - Options for the display name plugin.
  * @returns {import('@babel/core').TransformOptions} The base Babel configuration.
  */
-export declare function getBaseConfig({ debug, optimizeClsx, removePropTypes, noResolveImports, bundle, runtimeVersion, outExtension, reactCompilerReactVersion, reactCompilerMode }: {
+export declare function getBaseConfig({ debug, optimizeClsx, removePropTypes, noResolveImports, bundle, runtimeVersion, outExtension, reactCompilerReactVersion, reactCompilerMode, displayName }: {
     debug?: boolean;
     optimizeClsx?: boolean;
     removePropTypes?: boolean;
@@ -20,7 +25,10 @@ export declare function getBaseConfig({ debug, optimizeClsx, removePropTypes, no
     outExtension: string | null;
     runtimeVersion: string;
     reactCompilerReactVersion?: string;
-    reactCompilerMode?: string;
+    reactCompilerMode?: ReactCompilationMode;
+    displayName?: {
+        allowedCallees?: Record<string, string[]>;
+    };
 }): import('@babel/core').TransformOptions;
 export type Options = {
     bundle?: 'esm' | 'cjs';

package/build/cli/cmdListWorkspaces.d.mts

@@ -4,12 +4,14 @@ export type Args = {
     publicOnly?: boolean;
     output?: 'json' | 'path' | 'name' | 'publish-dir';
     sinceRef?: string;
+    filter?: string[];
 };
 /**
  * @typedef {Object} Args
  * @property {boolean} [publicOnly] - Whether to filter to only public packages
  * @property {'json'|'path'|'name'|'publish-dir'} [output] - Output format (name, path, or json)
  * @property {string} [sinceRef] - Git reference to filter changes since
+ * @property {string[]} [filter] - Same as filtering packages with --filter in pnpm. Only include packages matching the filter. See https://pnpm.io/filtering.
  */
 declare const _default: import("yargs").CommandModule<{}, Args>;
 export default /** @type {import('yargs').CommandModule<{}, Args>} */ _default;

package/build/cli/cmdPublish.d.mts

@@ -7,6 +7,7 @@ export type Args = {
     tag: string;
     ci: boolean;
     sha?: string;
+    filter?: string[];
 };
 declare const _default: import("yargs").CommandModule<{}, Args>;
 export default /** @type {import('yargs').CommandModule<{}, Args>} */ _default;

package/build/cli/cmdPublishCanary.d.mts

@@ -5,6 +5,7 @@ export type PublishOptions = import('../utils/pnpm.mjs').PublishOptions;
 export type Args = {
     dryRun?: boolean;
     githubRelease?: boolean;
+    filter?: string[];
 };
 export type Commit = {
     sha: string;

package/build/cli/cmdPublishNewPackage.d.mts

@@ -1,9 +1,11 @@
 export type Args = {
     dryRun?: boolean;
+    otp?: string;
 };
 /**
  * @typedef {Object} Args
  * @property {boolean} [dryRun] If true, will only log the commands without executing them
+ * @property {string} [otp] 6 digit auth code to forward to npm for two-factor authentication
  */
 declare const _default: import("yargs").CommandModule<{}, Args>;
 export default /** @type {import('yargs').CommandModule<{}, Args>} */ _default;

package/build/utils/pnpm.d.mts

@@ -31,6 +31,7 @@ export type GetWorkspacePackagesOptions = {
     publicOnly?: boolean;
     nonPublishedOnly?: boolean;
     cwd?: string;
+    filter?: string[];
 };
 export declare function getWorkspacePackages(options?: {
     publicOnly: true;
@@ -56,6 +57,62 @@ export declare function getPackageVersionInfo(packageName: string, baseVersion:
  * @returns {Promise<void>}
  */
 export declare function publishPackages(packages: PublicPackage[], options?: PublishOptions): Promise<void>;
+export type GetTransitiveDependenciesOptions = {
+    workspacePathByName?: Map<string, string>;
+    includeDev?: boolean;
+};
+/**
+ * @typedef {Object} GetTransitiveDependenciesOptions
+ * @property {Map<string, string>} [workspacePathByName] - Map of workspace package name to directory path
+ * @property {boolean} [includeDev=true] - Whether to include devDependencies in the traversal
+ */
+/**
+ * Get all transitive workspace dependencies for a set of packages.
+ *
+ * Only follows deps whose version spec starts with `workspace:` (e.g. `workspace:*`
+ * or `workspace:^`), meaning they are sourced directly from the monorepo. Pinned
+ * external versions (e.g. `^1.0.0`) are ignored even when the package name exists
+ * in the workspace. Traverses `dependencies` and optionally `devDependencies`.
+ * Results are cached per package so each package is read from disk at most once
+ * regardless of how many roots depend on it.
+ *
+ * @param {string[]} packageNames - Package names to start the traversal from
+ * @param {GetTransitiveDependenciesOptions} [options]
+ * @returns {Promise<Set<string>>} All reachable workspace package names, including the input packages themselves
+ */
+export declare function getTransitiveDependencies(packageNames: string[], options?: GetTransitiveDependenciesOptions): Promise<Set<string>>;
+/**
+ * Pure validation logic: given a publish set and workspace maps, checks that all
+ * transitive hard workspace dependencies are covered and none are private.
+ *
+ * A hard dependency is one listed in `dependencies` (not `peerDependencies` or
+ * `devDependencies`) using a `workspace:` version specifier (e.g. `workspace:*` or
+ * `workspace:^`). Peer dependencies are never bundled and dev dependencies are not installed
+ * on consumer devices - both are excluded regardless of version specifier. Pinned-version
+ * references in `dependencies` are also excluded - they resolve from the registry and do
+ * not need to be co-published.
+ *
+ * @param {PublicPackage[]} packages - The packages intended for publishing
+ * @param {Map<string, PublicPackage | PrivatePackage>} workspacePackageByName - All workspace packages by name
+ * @param {Map<string, string>} workspacePathByName - Map of workspace package name to directory path
+ * @returns {Promise<{issues: string[]}>}
+ *   List of human-readable issue strings. Empty when the dependency set is valid.
+ * @internal
+ */
+export declare function checkPublishDependencies(packages: PublicPackage[], workspacePackageByName: Map<string, PublicPackage | PrivatePackage>, workspacePathByName: Map<string, string>): Promise<{
+    issues: string[];
+}>;
+/**
+ * Validate that a set of packages covers all of their transitive hard workspace dependencies,
+ * and that none of those dependencies are private (which would make them unpublishable).
+ *
+ * @param {PublicPackage[]} packages - The packages intended for publishing
+ * @returns {Promise<{issues: string[]}>}
+ *   List of human-readable issue strings. Empty when the dependency set is valid.
+ */
+export declare function validatePublishDependencies(packages: PublicPackage[]): Promise<{
+    issues: string[];
+}>;
 /**
  * Read package.json from a directory
  * @param {string} packagePath - Path to package directory

package/build/utils/testUtils.d.mts

@@ -0,0 +1,7 @@
+/**
+ * Creates a temporary directory and registers an `onTestFinished` hook to
+ * remove it automatically when the current test ends — even if the test throws.
+ *
+ * @returns {Promise<string>} The path of the created temporary directory.
+ */
+export declare function makeTempDir(): Promise<string>;

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "@mui/internal-code-infra",
-  "version": "0.0.4-canary.2",
+  "version": "0.0.4-canary.21",
+  "author": "MUI Team",
   "description": "Infra scripts and configs to be used across MUI repos.",
-  "type": "module",
   "license": "MIT",
+  "type": "module",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/mui/mui-public.git",
@@ -43,34 +44,38 @@
     "./brokenLinksChecker": {
       "types": "./build/brokenLinksChecker/index.d.mts",
       "default": "./src/brokenLinksChecker/index.mjs"
+    },
+    "./build-env": {
+      "types": "./src/build-env.d.ts"
     }
   },
   "bin": {
     "code-infra": "./bin/code-infra.mjs"
   },
   "dependencies": {
-    "@argos-ci/core": "^4.5.0",
+    "@argos-ci/core": "^5.1.2",
     "@babel/cli": "^7.28.6",
     "@babel/core": "^7.29.0",
     "@babel/plugin-syntax-jsx": "^7.28.6",
     "@babel/plugin-syntax-typescript": "^7.28.6",
     "@babel/plugin-transform-runtime": "^7.29.0",
-    "@babel/preset-env": "^7.29.0",
+    "@babel/preset-env": "^7.29.2",
     "@babel/preset-react": "^7.28.5",
     "@babel/preset-typescript": "^7.28.5",
-    "@eslint/compat": "^2.0.2",
+    "@eslint/compat": "^2.0.3",
+    "@eslint/config-helpers": "^0.5.4",
     "@eslint/js": "^10.0.1",
-    "@eslint/json": "^1.0.1",
-    "@inquirer/confirm": "^6.0.4",
-    "@inquirer/select": "^5.0.4",
+    "@eslint/json": "^1.1.0",
+    "@inquirer/confirm": "^6.0.10",
+    "@inquirer/select": "^5.1.2",
     "@napi-rs/keyring": "^1.2.0",
     "@octokit/auth-action": "^6.0.2",
     "@octokit/oauth-methods": "^6.0.2",
     "@octokit/rest": "^22.0.1",
-    "@pnpm/find-workspace-dir": "^1000.1.4",
-    "@typescript-eslint/types": "^8.56.1",
-    "@typescript-eslint/utils": "^8.56.1",
-    "@vitest/eslint-plugin": "^1.6.9",
+    "@pnpm/find-workspace-dir": "^1000.1.5",
+    "@typescript-eslint/types": "^8.57.1",
+    "@typescript-eslint/utils": "^8.57.1",
+    "@vitest/eslint-plugin": "^1.6.11",
     "babel-plugin-optimize-clsx": "^2.6.2",
     "babel-plugin-react-compiler": "^1.0.0",
     "babel-plugin-transform-import-meta": "^2.3.3",
@@ -78,13 +83,14 @@
     "babel-plugin-transform-react-remove-prop-types": "^0.4.24",
     "babel-plugin-transform-remove-imports": "^1.8.1",
     "chalk": "^5.6.2",
-    "clipboardy": "^5.3.0",
+    "clipboardy": "^5.3.1",
     "content-type": "^1.0.5",
     "env-ci": "^11.2.0",
+    "es-toolkit": "^1.45.1",
     "eslint-config-prettier": "^10.1.8",
     "eslint-import-resolver-typescript": "^4.4.4",
     "eslint-module-utils": "^2.12.1",
-    "eslint-plugin-compat": "^6.2.0",
+    "eslint-plugin-compat": "^7.0.1",
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-jsx-a11y": "^6.10.2",
     "eslint-plugin-mocha": "^11.2.0",
@@ -92,14 +98,13 @@
     "eslint-plugin-react-compiler": "^19.1.0-rc.2",
     "eslint-plugin-react-hooks": "^7.0.1",
     "eslint-plugin-testing-library": "^7.16.0",
-    "es-toolkit": "^1.44.0",
     "execa": "^9.6.1",
     "git-url-parse": "^16.1.0",
-    "globals": "^16.5.0",
+    "globals": "^17.4.0",
     "globby": "^16.1.1",
-    "minimatch": "^10.2.2",
-    "node-html-parser": "^7.0.2",
-    "open": "^10.2.0",
+    "minimatch": "^10.2.4",
+    "node-html-parser": "^7.1.0",
+    "open": "^11.0.0",
     "postcss-styled-syntax": "^0.7.1",
     "regexp.escape": "^2.0.1",
     "rehype-slug": "^6.0.0",
@@ -110,12 +115,12 @@
     "resolve-pkg-maps": "^1.0.0",
     "semver": "^7.7.4",
     "stylelint-config-standard": "^40.0.0",
-    "typescript-eslint": "^8.56.1",
+    "typescript-eslint": "^8.57.1",
     "unified": "^11.0.5",
     "yargs": "^18.0.0",
-    "@mui/internal-babel-plugin-display-name": "1.0.4-canary.13",
-    "@mui/internal-babel-plugin-resolve-imports": "2.0.7-canary.32",
-    "@mui/internal-babel-plugin-minify-errors": "2.0.8-canary.23"
+    "@mui/internal-babel-plugin-display-name": "1.0.4-canary.17",
+    "@mui/internal-babel-plugin-minify-errors": "2.0.8-canary.25",
+    "@mui/internal-babel-plugin-resolve-imports": "2.0.7-canary.34"
   },
   "peerDependencies": {
     "@next/eslint-plugin-next": "*",
@@ -143,13 +148,13 @@
     "@types/estree-jsx": "1.0.5",
     "@types/regexp.escape": "2.0.0",
     "@types/yargs": "17.0.35",
-    "@typescript-eslint/parser": "8.56.1",
-    "@typescript-eslint/rule-tester": "8.56.1",
-    "eslint": "10.0.2",
-    "get-port": "7.1.0",
+    "@typescript-eslint/parser": "8.57.1",
+    "@typescript-eslint/rule-tester": "8.57.1",
+    "eslint": "10.0.3",
+    "get-port": "7.2.0",
     "prettier": "3.8.1",
-    "serve": "14.2.5",
-    "typescript-eslint": "8.56.1"
+    "serve": "14.2.6",
+    "typescript-eslint": "8.57.1"
   },
   "files": [
     "bin",
@@ -161,10 +166,10 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitSha": "716b18b5736b5dbc740d49e481c99cb85b74e42e",
+  "gitSha": "df5ed4a21b443278e1ebb858d592c01461ce1608",
   "scripts": {
     "build": "tsgo -p tsconfig.build.json",
-    "typescript": "tsgo -p tsconfig.json",
+    "typescript": "tsgo -noEmit",
     "test": "pnpm -w test --project @mui/internal-code-infra",
     "test:copy": "rm -rf build && node bin/code-infra.mjs copy-files --glob \"src/cli/*.mjs\" --glob \"src/eslint/**/*.mjs:esm\""
   }

package/src/babel-config.mjs

@@ -10,6 +10,10 @@ import pluginTransformImportMeta from 'babel-plugin-transform-import-meta';
 import pluginTransformInlineEnvVars from 'babel-plugin-transform-inline-environment-variables';
 import pluginRemovePropTypes from 'babel-plugin-transform-react-remove-prop-types';
 
+/**
+ * @typedef {'annotation' | 'syntax' | 'infer' | 'all'} ReactCompilationMode
+ */
+
 /**
  * @param {Object} param0
  * @param {boolean} [param0.debug]
@@ -20,7 +24,8 @@ import pluginRemovePropTypes from 'babel-plugin-transform-react-remove-prop-type
  * @param {string | null} param0.outExtension - Specify the output file extension.
  * @param {string} param0.runtimeVersion
  * @param {string} [param0.reactCompilerReactVersion]
- * @param {string} [param0.reactCompilerMode]
+ * @param {ReactCompilationMode} [param0.reactCompilerMode]
+ * @param {{ allowedCallees?: Record<string, string[]> }} [param0.displayName] - Options for the display name plugin.
  * @returns {import('@babel/core').TransformOptions} The base Babel configuration.
  */
 export function getBaseConfig({
@@ -33,6 +38,7 @@ export function getBaseConfig({
   outExtension,
   reactCompilerReactVersion,
   reactCompilerMode,
+  displayName,
 }) {
   /**
    * @type {import('@babel/preset-env').Options}
@@ -57,7 +63,7 @@ export function getBaseConfig({
       },
       '@babel/plugin-transform-runtime',
     ],
-    [pluginDisplayName, {}, '@mui/internal-babel-plugin-display-name'],
+    [pluginDisplayName, { ...displayName }, '@mui/internal-babel-plugin-display-name'],
     [
       pluginTransformInlineEnvVars,
       {
@@ -183,6 +189,6 @@ export default function getBabelConfig(api) {
     removePropTypes: process.env.MUI_REMOVE_PROP_TYPES === 'true',
     noResolveImports,
     reactCompilerReactVersion: process.env.MUI_REACT_COMPILER_REACT_VERSION,
-    reactCompilerMode: process.env.MUI_REACT_COMPILER_MODE,
+    reactCompilerMode: /** @type {ReactCompilationMode} */ (process.env.MUI_REACT_COMPILER_MODE),
   });
 }

package/src/build-env.d.ts

@@ -0,0 +1,13 @@
+export {};
+
+declare global {
+  interface Env {
+    NODE_ENV?: 'production' | undefined;
+  }
+
+  interface Process {
+    env: Env;
+  }
+
+  const process: Process;
+}

package/src/cli/cmdListWorkspaces.mjs

@@ -15,6 +15,7 @@ import { getWorkspacePackages } from '../utils/pnpm.mjs';
  * @property {boolean} [publicOnly] - Whether to filter to only public packages
  * @property {'json'|'path'|'name'|'publish-dir'} [output] - Output format (name, path, or json)
  * @property {string} [sinceRef] - Git reference to filter changes since
+ * @property {string[]} [filter] - Same as filtering packages with --filter in pnpm. Only include packages matching the filter. See https://pnpm.io/filtering.
  */
 
 export default /** @type {import('yargs').CommandModule<{}, Args>} */ ({
@@ -37,13 +38,19 @@ export default /** @type {import('yargs').CommandModule<{}, Args>} */ ({
       .option('since-ref', {
         type: 'string',
         description: 'Filter packages changed since git reference',
+      })
+      .option('filter', {
+        type: 'string',
+        array: true,
+        description:
+          'Same as filtering packages with --filter in pnpm. Only include packages matching the filter. See https://pnpm.io/filtering.',
       });
   },
   handler: async (argv) => {
-    const { publicOnly = false, output = 'name', sinceRef } = argv;
+    const { publicOnly = false, output = 'name', sinceRef, filter = [] } = argv;
 
     // Get packages using our helper function
-    const packages = await getWorkspacePackages({ sinceRef, publicOnly });
+    const packages = await getWorkspacePackages({ sinceRef, publicOnly, filter });
 
     if (output === 'json') {
       // Serialize packages to JSON

package/src/cli/cmdNetlifyIgnore.mjs

@@ -12,93 +12,7 @@ import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
 import { findWorkspaceDir } from '@pnpm/find-workspace-dir';
 import { toPosixPath } from '../utils/path.mjs';
-import { getWorkspacePackages } from '../utils/pnpm.mjs';
-
-/**
- * Get all workspace dependencies (direct and transitive) from a package
- * @param {string} packageName - Package name
- * @param {Map<string, string>} workspaceMap - Map of workspace name to path
- * @param {Map<string, Promise<Set<string>>>} cache - Cache of package resolution promises
- * @returns {Promise<Set<string>>} Set of workspace package names (dependencies only, not including the package itself)
- */
-async function getWorkspaceDependenciesRecursive(packageName, workspaceMap, cache) {
-  // Check cache first
-  const cached = cache.get(packageName);
-  if (cached) {
-    return cached;
-  }
-
-  // Create the resolution promise
-  const promise = (async () => {
-    const packagePath = workspaceMap.get(packageName);
-    if (!packagePath) {
-      throw new Error(`Workspace "${packageName}" not found in the repository`);
-    }
-
-    const packageJsonPath = path.join(packagePath, 'package.json');
-    const content = await fs.readFile(packageJsonPath, 'utf8');
-    const packageJson = JSON.parse(content);
-
-    // Collect all dependency names
-    /** @type {Set<string>} */
-    const allDeps = new Set();
-    if (packageJson.dependencies) {
-      Object.keys(packageJson.dependencies).forEach((dep) => allDeps.add(dep));
-    }
-    if (packageJson.devDependencies) {
-      Object.keys(packageJson.devDependencies).forEach((dep) => allDeps.add(dep));
-    }
-    if (packageJson.peerDependencies) {
-      Object.keys(packageJson.peerDependencies).forEach((dep) => allDeps.add(dep));
-    }
-
-    // Filter to only workspace dependencies
-    const workspaceDeps = Array.from(allDeps).filter((dep) => workspaceMap.has(dep));
-
-    // Recursively process workspace dependencies in parallel
-    const recursiveResults = await Promise.all(
-      workspaceDeps.map(async (dep) => {
-        return getWorkspaceDependenciesRecursive(dep, workspaceMap, cache);
-      }),
-    );
-
-    // Merge all results using flatMap
-    return new Set(recursiveResults.flatMap((result) => Array.from(result)).concat(workspaceDeps));
-  })();
-
-  // Store in cache before returning
-  cache.set(packageName, promise);
-
-  return promise;
-}
-
-/**
- * Get transitive workspace dependencies for a list of workspace names
- * @param {string[]} workspaceNames - Array of workspace names
- * @param {Map<string, string>} workspaceMap - Map of workspace name to path
- * @returns {Promise<Set<string>>} Set of workspace package names (including requested packages and all their dependencies)
- */
-async function getTransitiveDependencies(workspaceNames, workspaceMap) {
-  // Shared cache for all workspace dependency resolution
-  const cache = new Map();
-
-  // Validate all workspace names exist
-  for (const workspaceName of workspaceNames) {
-    if (!workspaceMap.has(workspaceName)) {
-      throw new Error(`Workspace "${workspaceName}" not found in the repository`);
-    }
-  }
-
-  // Process each requested workspace in parallel
-  const workspaceResults = await Promise.all(
-    workspaceNames.map((workspaceName) =>
-      getWorkspaceDependenciesRecursive(workspaceName, workspaceMap, cache),
-    ),
-  );
-
-  // Merge all results using flatMap and add the original package names
-  return new Set(workspaceNames.concat(workspaceResults.flatMap((result) => Array.from(result))));
-}
+import { getTransitiveDependencies, getWorkspacePackages } from '../utils/pnpm.mjs';
 
 /**
  * Generate the ignore command string for netlify.toml
@@ -220,7 +134,9 @@ export default /** @type {import('yargs').CommandModule<{}, Args>} */ ({
         console.log(`Processing ${workspaceName}...`);
 
         // Get transitive dependencies for this specific workspace
-        const dependencyNames = await getTransitiveDependencies([workspaceName], workspaceMap);
+        const dependencyNames = await getTransitiveDependencies([workspaceName], {
+          workspacePathByName: workspaceMap,
+        });
 
         // Convert package names to relative paths (normalize to POSIX separators for git)
         const relativePaths = Array.from(dependencyNames)

package/src/cli/cmdPublish.mjs

@@ -17,7 +17,11 @@ import * as fs from 'node:fs/promises';
 import * as semver from 'semver';
 
 import { persistentAuthStrategy } from '../utils/github.mjs';
-import { getWorkspacePackages, publishPackages } from '../utils/pnpm.mjs';
+import {
+  getWorkspacePackages,
+  publishPackages,
+  validatePublishDependencies,
+} from '../utils/pnpm.mjs';
 import { getCurrentGitSha, getRepositoryInfo } from '../utils/git.mjs';
 
 const isCI = envCI().isCi;
@@ -33,6 +37,7 @@ function getOctokit() {
  * @property {string} tag NPM dist tag to publish to
  * @property {boolean} ci Runs in CI environment
  * @property {string} [sha] Git SHA to use for the GitHub release workflow (local only)
+ * @property {string[]} [filter] Same as filtering packages with --filter in pnpm. Only publish packages matching the filter. See https://pnpm.io/filtering.
  */
 
 /**
@@ -260,10 +265,16 @@ export default /** @type {import('yargs').CommandModule<{}, Args>} */ ({
       .option('sha', {
         type: 'string',
         description: 'Git SHA to use for the GitHub release workflow (local only)',
+      })
+      .option('filter', {
+        type: 'string',
+        array: true,
+        description:
+          'Same as filtering packages with --filter in pnpm. Only publish packages matching the filter. See https://pnpm.io/filtering.',
       });
   },
   handler: async (argv) => {
-    const { dryRun = false, githubRelease = false, tag = 'latest', sha } = argv;
+    const { dryRun = false, githubRelease = false, tag = 'latest', sha, filter = [] } = argv;
 
     if (isCI && !argv.ci) {
       console.error(
@@ -290,13 +301,34 @@ export default /** @type {import('yargs').CommandModule<{}, Args>} */ ({
     // Get all packages
     console.log('🔍 Discovering all workspace packages...');
 
-    const allPackages = await getWorkspacePackages({ publicOnly: true });
+    const allPackages = await getWorkspacePackages({ publicOnly: true, filter });
 
     if (allPackages.length === 0) {
-      console.log('⚠️  No public packages found in workspace');
+      console.log(
+        `⚠️  No publishable packages found in workspace${filter.length > 0 ? ` matching filter "${filter.join(', ')}"` : ''}`,
+      );
       return;
     }
 
+    if (filter.length > 0) {
+      console.log('🔍 Validating workspace dependencies for filtered packages...');
+
+      const { issues } = await validatePublishDependencies(allPackages);
+
+      if (issues.length > 0) {
+        throw new Error(
+          `Invalid dependencies structure of packages to be published -
+  ${issues.join('\n  ')}
+`,
+          {
+            cause: issues,
+          },
+        );
+      }
+
+      console.log('✅ All workspace dependency requirements satisfied');
+    }
+
     // Get version from root package.json
     const version = await getReleaseVersion();