@smoothbricks/cli 0.1.0 → 0.1.1

package/dist/lib/devenv.js

@@ -0,0 +1,82 @@
+import { mkdtemp, readFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { $ } from 'bun';
+import { decode } from './run.js';
+export async function withDevenvEnv(root, runWithEnv) {
+    const snapshot = snapshotProcessEnv();
+    const env = await loadDevenvEnv(root);
+    replaceProcessEnv(mergeDevenvEnv(snapshot, env));
+    try {
+        return await runWithEnv();
+    }
+    finally {
+        restoreProcessEnv(snapshot);
+    }
+}
+async function loadDevenvEnv(root) {
+    const tempDir = await mkdtemp(join(tmpdir(), 'smoo-devenv-env-'));
+    const envPath = join(tempDir, 'env');
+    try {
+        const result = await $ `devenv shell -- bash -lc ${'env -0 > "$1"'} bash ${envPath}`
+            .cwd(join(root, 'tooling', 'direnv'))
+            .quiet()
+            .nothrow();
+        if (result.exitCode !== 0) {
+            throw new Error('devenv shell failed. Ensure devenv is installed and the tooling/direnv shell is valid.');
+        }
+        return parseNulEnv(await readFile(envPath));
+    }
+    finally {
+        await rm(tempDir, { recursive: true, force: true });
+    }
+}
+export function parseNulEnv(bytes) {
+    const env = {};
+    let entryStart = 0;
+    for (let index = 0; index <= bytes.length; index += 1) {
+        if (index !== bytes.length && bytes[index] !== 0) {
+            continue;
+        }
+        if (index === entryStart) {
+            entryStart = index + 1;
+            continue;
+        }
+        const entry = decode(bytes.subarray(entryStart, index));
+        const separator = entry.indexOf('=');
+        if (separator <= 0) {
+            throw new Error('devenv shell produced an invalid environment entry.');
+        }
+        env[entry.slice(0, separator)] = entry.slice(separator + 1);
+        entryStart = index + 1;
+    }
+    return env;
+}
+export function mergeDevenvEnv(baseEnv, devenvEnv) {
+    return { ...baseEnv, ...devenvEnv };
+}
+function snapshotProcessEnv() {
+    const snapshot = {};
+    for (const [key, value] of Object.entries(process.env)) {
+        if (value !== undefined) {
+            snapshot[key] = value;
+        }
+    }
+    return snapshot;
+}
+function replaceProcessEnv(env) {
+    for (const key of Object.keys(process.env)) {
+        delete process.env[key];
+    }
+    for (const [key, value] of Object.entries(env)) {
+        process.env[key] = value;
+    }
+}
+function restoreProcessEnv(snapshot) {
+    for (const key of Object.keys(process.env)) {
+        delete process.env[key];
+    }
+    for (const [key, value] of Object.entries(snapshot)) {
+        process.env[key] = value;
+    }
+}

package/dist/lib/workspace.d.ts

@@ -13,11 +13,16 @@ export interface RepositoryInfo {
 }
 export declare const workspaceDependencyFields: readonly ["dependencies", "devDependencies", "optionalDependencies"];
 export declare function listPublicPackages(root: string): PackageInfo[];
+export declare function listReleasePackages(root: string, rootPackage?: PackageInfo | null): PackageInfo[];
+export declare function rootRepositoryInfo(root: string): RepositoryInfo | null;
+export declare function packageRepositoryInfo(pkg: PackageInfo): RepositoryInfo | null;
+export declare function isOwnedPackage(rootRepository: RepositoryInfo, pkg: PackageInfo): boolean;
 export declare function getWorkspacePackages(root: string): PackageInfo[];
 export declare function listPackageJsonRecords(root: string): PackageInfo[];
 export declare function getWorkspacePatterns(root: string): string[];
 export declare function readPackageJson(path: string): PackageInfo | null;
 export declare function getNxTags(pkg: Record<string, unknown>): string[];
 export declare function repositoryInfo(pkg: Record<string, unknown>): RepositoryInfo | null;
+export declare function sameRepositoryAfterNormalization(left: string, right: string): boolean;
 export declare function escapeRegex(value: string): string;
 //# sourceMappingURL=workspace.d.ts.map

package/dist/lib/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/lib/workspace.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,eAAO,MAAM,yBAAyB,sEAAuE,CAAC;AAE9G,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAE9D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAgChE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAMlE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAa3D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAgBhE;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAKhE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,GAAG,IAAI,CAalF;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/lib/workspace.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,eAAO,MAAM,yBAAyB,sEAAuE,CAAC;AAE9G,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAE9D;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,WAAW,qBAA8C,GACxD,WAAW,EAAE,CAWf;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAGtE;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,GAAG,IAAI,CAE7E;AAED,wBAAgB,cAAc,CAAC,cAAc,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAGxF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAMhE;AAgCD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CASlE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAG3D;AAgBD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAgBhE;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAKhE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,GAAG,IAAI,CAalF;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAErF;AA4BD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD"}

package/dist/lib/workspace.js

@@ -5,11 +5,35 @@ export const workspaceDependencyFields = ['dependencies', 'devDependencies', 'op
 export function listPublicPackages(root) {
     return getWorkspacePackages(root).filter((pkg) => !pkg.private && pkg.tags.includes('npm:public'));
 }
+export function listReleasePackages(root, rootPackage = readPackageJson(join(root, 'package.json'))) {
+    if (!rootPackage) {
+        return [];
+    }
+    const rootRepository = repositoryInfo(rootPackage.json);
+    if (!rootRepository) {
+        return [];
+    }
+    return getWorkspacePackagesForPatterns(root, getWorkspacePatternsFromPackageJson(rootPackage.json)).filter((pkg) => !pkg.private && pkg.tags.includes('npm:public') && isOwnedPackage(rootRepository, pkg));
+}
+export function rootRepositoryInfo(root) {
+    const rootPackage = readJsonObject(join(root, 'package.json'));
+    return rootPackage ? repositoryInfo(rootPackage) : null;
+}
+export function packageRepositoryInfo(pkg) {
+    return repositoryInfo(pkg.json);
+}
+export function isOwnedPackage(rootRepository, pkg) {
+    const packageRepository = packageRepositoryInfo(pkg);
+    return packageRepository !== null && packageRepository.url === rootRepository.url;
+}
 export function getWorkspacePackages(root) {
-    if (!readPackageJson(join(root, 'package.json'))) {
+    const rootPackage = readPackageJson(join(root, 'package.json'));
+    if (!rootPackage) {
         throw new Error('package.json not found or invalid');
     }
-    const workspacePatterns = getWorkspacePatterns(root);
+    return getWorkspacePackagesForPatterns(root, getWorkspacePatternsFromPackageJson(rootPackage.json));
+}
+function getWorkspacePackagesForPatterns(root, workspacePatterns) {
     const packages = [];
     for (const pattern of workspacePatterns) {
         if (!pattern.endsWith('/*')) {
@@ -43,14 +67,20 @@ export function listPackageJsonRecords(root) {
     if (!rootPackage) {
         throw new Error('package.json not found or invalid');
     }
-    return [{ ...rootPackage, path: '.' }, ...getWorkspacePackages(root)];
+    return [
+        { ...rootPackage, path: '.' },
+        ...getWorkspacePackagesForPatterns(root, getWorkspacePatternsFromPackageJson(rootPackage.json)),
+    ];
 }
 export function getWorkspacePatterns(root) {
     const raw = readJson(join(root, 'package.json'));
-    if (!isRecord(raw) || !hasOwn(raw, 'workspaces')) {
+    return isRecord(raw) ? getWorkspacePatternsFromPackageJson(raw) : ['packages/*'];
+}
+function getWorkspacePatternsFromPackageJson(pkg) {
+    if (!hasOwn(pkg, 'workspaces')) {
         return ['packages/*'];
     }
-    const workspaces = raw.workspaces;
+    const workspaces = pkg.workspaces;
     if (Array.isArray(workspaces)) {
         return workspaces.filter((entry) => typeof entry === 'string');
     }
@@ -96,6 +126,33 @@ export function repositoryInfo(pkg) {
     }
     return { type: stringProperty(repository, 'type') ?? 'git', url };
 }
+export function sameRepositoryAfterNormalization(left, right) {
+    return normalizedRepositoryUrl(left) === normalizedRepositoryUrl(right);
+}
+function normalizedRepositoryUrl(url) {
+    const trimmed = url
+        .trim()
+        .replace(/^git\+/, '')
+        .replace(/#.*$/, '')
+        .replace(/\/$/, '')
+        .replace(/\.git$/, '');
+    const https = /^https:\/\/github\.com\/([^/]+)\/([^/]+)$/i.exec(trimmed);
+    if (https?.[1] && https[2]) {
+        return githubRepositoryKey(https[1], https[2]);
+    }
+    const ssh = /^git@github\.com:([^/]+)\/([^/]+)$/i.exec(trimmed);
+    if (ssh?.[1] && ssh[2]) {
+        return githubRepositoryKey(ssh[1], ssh[2]);
+    }
+    const shorthand = /^github:([^/]+)\/([^/]+)$/i.exec(trimmed);
+    if (shorthand?.[1] && shorthand[2]) {
+        return githubRepositoryKey(shorthand[1], shorthand[2]);
+    }
+    return trimmed;
+}
+function githubRepositoryKey(owner, repo) {
+    return `github:${owner.toLowerCase()}/${repo.toLowerCase()}`;
+}
 export function escapeRegex(value) {
     return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 }

package/dist/monorepo/index.d.ts

@@ -6,6 +6,11 @@ export interface InitOptions {
 }
 export interface ValidateOptions {
     failFast?: boolean;
+    onlyIfNewWorkspacePackage?: boolean;
+}
+export interface ListReleasePackagesOptions {
+    failEmpty?: boolean;
+    githubOutput?: string;
 }
 export declare function initMonorepo(root: string, options: InitOptions): Promise<void>;
 export declare function validateMonorepo(root: string, options?: ValidateOptions): Promise<void>;
@@ -13,7 +18,7 @@ export declare function updateManagedFiles(root: string): void;
 export declare function checkManagedFiles(root: string): void;
 export declare function diffManagedFiles(root: string): void;
 export declare function validateCommitMessageFile(path: string | undefined): void;
-export declare function listPublicProjects(root: string): string;
+export declare function listReleasePackagesForNx(root: string, options?: ListReleasePackagesOptions): string;
 export declare function validatePublicPackageTags(root: string): void;
 export { applyWorkspaceGitConfig, syncBunLockfileVersions };
 //# sourceMappingURL=index.d.ts.map

package/dist/monorepo/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/monorepo/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAMxD,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAQpF;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOjG;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAErD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMpD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEnD;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CASxE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIvD;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAI5D;AAED,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/monorepo/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAMxD,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAQpF;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWjG;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAErD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMpD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEnD;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CASxE;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,0BAA+B,GAAG,MAAM,CAWvG;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAI5D;AAED,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/monorepo/index.js

@@ -1,5 +1,7 @@
-import { readFileSync } from 'node:fs';
-import { listPublicPackages } from '../lib/workspace.js';
+import { appendFileSync, readFileSync } from 'node:fs';
+import { $ } from 'bun';
+import { decode } from '../lib/run.js';
+import { escapeRegex, getWorkspacePatterns, listReleasePackages } from '../lib/workspace.js';
 import { validateCommitMessage } from './commit-msg.js';
 import { applyWorkspaceGitConfig } from './git-config.js';
 import { syncBunLockfileVersions } from './lockfile.js';
@@ -16,9 +18,13 @@ export async function initMonorepo(root, options) {
     await runInitPacks({ root, syncRuntime: process.env.DEVENV_ROOT !== undefined || options.syncRuntime === true });
 }
 export async function validateMonorepo(root, options = {}) {
+    if (options.onlyIfNewWorkspacePackage && !(await hasNewWorkspacePackage(root))) {
+        return;
+    }
     const failures = await runValidatePacks({ root, syncRuntime: false }, options);
     if (failures > 0) {
-        throw new Error(`Monorepo validation failed with ${failures} problem(s).`);
+        const noun = failures === 1 ? 'problem' : 'problems';
+        throw new Error(`\n== summary ==\n❌ Monorepo validation failed with ${failures} ${noun}.`);
     }
     console.log('\n== summary ==');
     console.log('Monorepo configuration is valid.');
@@ -46,10 +52,17 @@ export function validateCommitMessageFile(path) {
         throw new Error(error);
     }
 }
-export function listPublicProjects(root) {
-    return listPublicPackages(root)
+export function listReleasePackagesForNx(root, options = {}) {
+    const packages = listReleasePackages(root)
         .map((pkg) => pkg.name)
         .join(',');
+    if (!packages && options.failEmpty) {
+        throw new Error('No owned release packages found.');
+    }
+    if (options.githubOutput) {
+        appendFileSync(options.githubOutput, `projects=${packages}\n`);
+    }
+    return packages;
 }
 export function validatePublicPackageTags(root) {
     if (validatePublicTags(root) > 0) {
@@ -57,3 +70,23 @@ export function validatePublicPackageTags(root) {
     }
 }
 export { applyWorkspaceGitConfig, syncBunLockfileVersions };
+async function hasNewWorkspacePackage(root) {
+    const result = await $ `git diff --cached --name-only --diff-filter=A -- ${'*/package.json'}`
+        .cwd(root)
+        .quiet()
+        .nothrow();
+    if (result.exitCode !== 0) {
+        throw new Error('Unable to inspect staged package manifests.');
+    }
+    const manifests = decode(result.stdout)
+        .split('\n')
+        .map((path) => path.trim())
+        .filter(Boolean);
+    if (manifests.length === 0) {
+        return false;
+    }
+    const patterns = getWorkspacePatterns(root)
+        .filter((pattern) => pattern.endsWith('/*'))
+        .map((pattern) => new RegExp(`^${escapeRegex(pattern.slice(0, -2))}/[^/]+/package\\.json$`));
+    return manifests.some((manifest) => patterns.some((pattern) => pattern.test(manifest)));
+}

package/dist/monorepo/lockfile.d.ts

@@ -1,2 +1,6 @@
-export declare function syncBunLockfileVersions(root: string): void;
+export interface SyncBunLockfileVersionsOptions {
+    log?: boolean;
+}
+export declare function syncBunLockfileVersions(root: string, options?: SyncBunLockfileVersionsOptions): number;
+export declare function validateBunLockfileVersions(root: string): number;
 //# sourceMappingURL=lockfile.d.ts.map

package/dist/monorepo/lockfile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lockfile.d.ts","sourceRoot":"","sources":["../../src/monorepo/lockfile.ts"],"names":[],"mappings":"AAIA,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAgC1D"}
+{"version":3,"file":"lockfile.d.ts","sourceRoot":"","sources":["../../src/monorepo/lockfile.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,8BAA8B;IAC7C,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,8BAAmC,GAAG,MAAM,CA0C1G;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA6BhE"}

package/dist/monorepo/lockfile.js

@@ -1,7 +1,8 @@
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { escapeRegex, getWorkspacePackages } from '../lib/workspace.js';
-export function syncBunLockfileVersions(root) {
+export function syncBunLockfileVersions(root, options = {}) {
+    const log = options.log ?? true;
     const lockfilePath = join(root, 'bun.lock');
     if (!existsSync(lockfilePath)) {
         throw new Error('bun.lock not found');
@@ -15,20 +16,59 @@ export function syncBunLockfileVersions(root) {
         const pattern = new RegExp(`("${escaped}":\\s*\\{[^}]*"version":\\s*")([^"]+)(")`);
         const match = lockfile.match(pattern);
         if (!match) {
-            console.log(`skip: ${relativePath} (not found in lockfile)`);
+            if (log) {
+                console.log(`skip: ${relativePath} (not found in lockfile)`);
+            }
             continue;
         }
         const lockVersion = match[2];
         if (lockVersion === pkg.version) {
-            console.log(`ok:   ${relativePath} = ${pkg.version}`);
+            if (log) {
+                console.log(`ok:   ${relativePath} = ${pkg.version}`);
+            }
             continue;
         }
         lockfile = lockfile.replace(pattern, `$1${pkg.version}$3`);
-        console.log(`fix:  ${relativePath}: ${lockVersion} -> ${pkg.version}`);
+        if (log) {
+            console.log(`fix:  ${relativePath}: ${lockVersion} -> ${pkg.version}`);
+        }
         updated++;
     }
     if (updated > 0) {
         writeFileSync(lockfilePath, lockfile);
     }
-    console.log(updated > 0 ? `Updated ${updated} workspace version(s) in bun.lock` : 'All workspace versions already in sync.');
+    if (log) {
+        console.log(updated > 0 ? `Updated ${updated} workspace version(s) in bun.lock` : 'All workspace versions already in sync.');
+    }
+    return updated;
+}
+export function validateBunLockfileVersions(root) {
+    const lockfilePath = join(root, 'bun.lock');
+    if (!existsSync(lockfilePath)) {
+        console.error('bun.lock not found');
+        return 1;
+    }
+    const packages = getWorkspacePackages(root);
+    const lockfile = readFileSync(lockfilePath, 'utf8');
+    let failures = 0;
+    for (const pkg of packages) {
+        const relativePath = pkg.path.replaceAll('\\', '/');
+        const escaped = escapeRegex(relativePath);
+        const pattern = new RegExp(`("${escaped}":\\s*\\{[^}]*"version":\\s*")([^"]+)(")`);
+        const match = lockfile.match(pattern);
+        if (!match) {
+            console.error(`bun.lock missing workspace entry for ${relativePath}`);
+            failures++;
+            continue;
+        }
+        const lockVersion = match[2];
+        if (lockVersion !== pkg.version) {
+            console.error(`${relativePath}: bun.lock workspace version must be ${pkg.version}, got ${lockVersion}`);
+            failures++;
+        }
+    }
+    if (failures === 0) {
+        console.log('bun.lock workspace versions are valid.');
+    }
+    return failures;
 }

package/dist/monorepo/managed-files.d.ts

@@ -1,6 +1,6 @@
 export interface FileResult {
     target: string;
-    action: 'created' | 'updated' | 'unchanged' | 'skipped-symlink' | 'drifted' | 'ok-symlink';
+    action: 'created' | 'updated' | 'unchanged' | 'skipped' | 'skipped-symlink' | 'drifted' | 'ok-symlink';
 }
 export declare function applyManagedFiles(root: string, mode: 'update' | 'check' | 'diff'): FileResult[];
 export declare function printResults(results: FileResult[]): void;

package/dist/monorepo/managed-files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"managed-files.d.ts","sourceRoot":"","sources":["../../src/monorepo/managed-files.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,iBAAiB,GAAG,SAAS,GAAG,YAAY,CAAC;CAC5F;AAiED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,EAAE,CAE/F;AAsDD,wBAAgB,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAIxD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQzD"}
+{"version":3,"file":"managed-files.d.ts","sourceRoot":"","sources":["../../src/monorepo/managed-files.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,GAAG,YAAY,CAAC;CACxG;AAwED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,EAAE,CAG/F;AA0ED,wBAAgB,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAIxD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQzD"}

package/dist/monorepo/managed-files.js

@@ -1,7 +1,8 @@
 import { existsSync, lstatSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { readPackageJson } from '../lib/workspace.js';
+import { listReleasePackages, readPackageJson } from '../lib/workspace.js';
+import { renderPublishWorkflowYaml } from './publish-workflow.js';
 const managedFiles = [
     {
         kind: 'raw',
@@ -32,9 +33,10 @@ const managedFiles = [
         target: '.github/workflows/ci.yml',
     },
     {
-        kind: 'template',
-        source: 'github/workflows/publish.yml',
+        kind: 'generated',
+        source: 'publish-workflow',
         target: '.github/workflows/publish.yml',
+        releasePackagesOnly: true,
     },
     {
         kind: 'template',
@@ -64,11 +66,15 @@ const managedFiles = [
 ];
 const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..', '..');
 export function applyManagedFiles(root, mode) {
-    return managedFiles.map((file) => applyManagedFile(root, file, mode));
+    const context = getManagedFileContext(root);
+    return managedFiles.map((file) => applyManagedFile(root, file, mode, context));
 }
-function applyManagedFile(root, file, mode) {
+function applyManagedFile(root, file, mode, context) {
+    if (file.releasePackagesOnly === true && !context.hasReleasePackages) {
+        return { target: file.target, action: 'skipped' };
+    }
     const target = resolve(root, file.target);
-    const content = getManagedContent(root, file);
+    const content = getManagedContent(file, context);
     if (existsSync(target)) {
         const info = lstatSync(target);
         if (info.isSymbolicLink()) {
@@ -93,22 +99,33 @@ function applyManagedFile(root, file, mode) {
     writeManagedFile(target, content, file.executable === true);
     return { target: file.target, action: 'created' };
 }
-function getManagedContent(root, file) {
+function getManagedContent(file, context) {
+    if (file.kind === 'generated') {
+        if (file.source === 'publish-workflow') {
+            return renderPublishWorkflowYaml({ repoName: context.repoName });
+        }
+        throw new Error(`Unknown generated managed file source ${file.source}`);
+    }
     const sourceRoot = file.kind === 'raw' ? 'managed/raw' : 'managed/templates';
     const sourcePath = join(packageRoot, sourceRoot, file.source);
     const content = readFileSync(sourcePath, 'utf8');
     if (file.kind === 'raw') {
         return content;
     }
-    return renderTemplate(root, content);
+    return renderTemplate(context, content);
 }
-function renderTemplate(root, template) {
+function getManagedFileContext(root) {
     const packageJson = readPackageJson(join(root, 'package.json'));
     const repoName = packageJson?.name ?? 'monorepo';
     const nodeModulesCacheKey = existsSync(join(root, 'bun.lock'))
         ? `$${"{{ hashFiles('bun.lock', 'package.json', 'packages/*/package.json') }}"}`
         : `$${"{{ hashFiles('bun.lockb', 'package.json', 'packages/*/package.json') }}"}`;
-    return template.replaceAll('{{REPO_NAME}}', repoName).replaceAll('{{NODE_MODULES_CACHE_KEY}}', nodeModulesCacheKey);
+    return { hasReleasePackages: listReleasePackages(root, packageJson).length > 0, nodeModulesCacheKey, repoName };
+}
+function renderTemplate(context, template) {
+    return template
+        .replaceAll('{{REPO_NAME}}', context.repoName)
+        .replaceAll('{{NODE_MODULES_CACHE_KEY}}', context.nodeModulesCacheKey);
 }
 function writeManagedFile(path, content, executable) {
     mkdirSync(dirname(path), { recursive: true });

package/dist/monorepo/package-hygiene.js

@@ -3,7 +3,7 @@ export async function fixPackageHygiene(root) {
     await run('sherif', ['--fix', '--select', 'highest'], root);
 }
 export async function validatePackageHygiene(root) {
-    const status = await runStatus('sherif', [], root);
+    const status = await runStatus('sherif', ['--fail-on-warnings'], root);
     if (status !== 0) {
         console.error('sherif package hygiene validation failed');
         return 1;

package/dist/monorepo/package-policy.d.ts

@@ -1,5 +1,8 @@
+export declare const SMOO_NX_VERSION_ACTIONS = "@smoothbricks/cli/nx-version-actions";
+export declare const SMOO_NX_RELEASE_TAG_PATTERN = "{projectName}@{version}";
 export declare function applyPublicPackageDefaults(root: string): void;
 export declare function applyWorkspaceDependencyDefaults(root: string): void;
+export declare function applyNxReleaseDefaults(root: string): void;
 export declare function validateRootPackagePolicy(root: string): number;
 export declare function validateNxReleaseConfig(root: string): number;
 export declare function validatePublicTags(root: string): number;

package/dist/monorepo/package-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"package-policy.d.ts","sourceRoot":"","sources":["../../src/monorepo/package-policy.ts"],"names":[],"mappings":"AAqBA,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAiC7D;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAWnE;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoC9D;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAwC5D;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBvD;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAsClE;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAqBlE"}
+{"version":3,"file":"package-policy.d.ts","sourceRoot":"","sources":["../../src/monorepo/package-policy.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,uBAAuB,yCAAyC,CAAC;AAC9E,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AAErE,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAuC7D;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAWnE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAqCzD;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoC9D;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkF5D;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAcvD;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA0DlE;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAqBlE"}