@xylabs/ts-scripts-yarn3 7.4.22 → 7.4.24

package/dist/actions/package-lint.mjs

@@ -0,0 +1,178 @@
+// src/actions/package-lint.ts
+import { readFileSync, writeFileSync } from "fs";
+import PATH from "path";
+import chalk from "chalk";
+import picomatch from "picomatch";
+
+// src/lib/yarn/workspace/yarnWorkspaces.ts
+import { spawnSync } from "child_process";
+var yarnWorkspaces = () => {
+  const result = spawnSync("yarn", ["workspaces", "list", "--json", "--recursive"], { encoding: "utf8", shell: true });
+  if (result.error) {
+    throw result.error;
+  }
+  return result.stdout.toString().split("\n").slice(0, -1).map((item) => {
+    return JSON.parse(item);
+  });
+};
+
+// src/lib/yarn/yarnInitCwd.ts
+var INIT_CWD = () => {
+  if (!process.env.INIT_CWD) console.error("Missing INIT_CWD");
+  return process.env.INIT_CWD;
+};
+
+// src/actions/package-lint.ts
+function emptyResult() {
+  return {
+    errors: [],
+    fixable: [],
+    warnings: []
+  };
+}
+function readRootPackageJson(cwd) {
+  const raw = readFileSync(PATH.resolve(cwd, "package.json"), "utf8");
+  return JSON.parse(raw);
+}
+function writeRootPackageJson(cwd, pkg) {
+  const path = PATH.resolve(cwd, "package.json");
+  writeFileSync(path, `${JSON.stringify(pkg, null, 2)}
+`, "utf8");
+}
+function isMonorepo(pkg) {
+  const workspaces = pkg.workspaces;
+  return Array.isArray(workspaces) && workspaces.length > 0;
+}
+function checkPackagesFolder(workspaces) {
+  const result = emptyResult();
+  for (const { location, name } of workspaces) {
+    if (location === ".") continue;
+    if (!location.startsWith("packages/") && !location.startsWith("packages\\")) {
+      result.errors.push(`${name} (${location}) is not inside a packages/ folder`);
+    }
+  }
+  return result;
+}
+function checkRootPrivate(pkg) {
+  const result = emptyResult();
+  if (!pkg.private) {
+    result.fixable.push("Root package.json must be private to prevent accidental publishing");
+  }
+  return result;
+}
+function fixRootPrivate(cwd, pkg) {
+  pkg.private = true;
+  writeRootPackageJson(cwd, pkg);
+  console.log(chalk.green('  \u2714 Fixed: set "private": true in root package.json'));
+}
+function checkNoPublishConfigOnPrivate(pkg) {
+  const result = emptyResult();
+  if (pkg.private && pkg.publishConfig) {
+    result.fixable.push("Root package.json has publishConfig but is private \u2014 publishConfig is unnecessary");
+  }
+  return result;
+}
+function fixNoPublishConfigOnPrivate(cwd, pkg) {
+  delete pkg.publishConfig;
+  writeRootPackageJson(cwd, pkg);
+  console.log(chalk.green("  \u2714 Fixed: removed publishConfig from private root package.json"));
+}
+function checkDiscoverable(pkg, workspaces) {
+  const result = emptyResult();
+  const globs = pkg.workspaces;
+  const matchers = globs.map((glob) => picomatch(glob));
+  const isMatch = (location) => matchers.some((m) => m(location));
+  for (const { location, name } of workspaces) {
+    if (location === ".") continue;
+    if (!isMatch(location)) {
+      result.errors.push(`${name} (${location}) is not matched by any workspace glob in package.json`);
+    }
+  }
+  return result;
+}
+function logResults(label, result, fix) {
+  let errors = 0;
+  let fixed = 0;
+  for (const error of result.errors) {
+    console.log(chalk.red(`  \u2717 ${error}`));
+    errors++;
+  }
+  for (const fixable of result.fixable) {
+    if (fix) {
+      fixed++;
+    } else {
+      console.log(chalk.red(`  \u2717 ${fixable} (fixable)`));
+      errors++;
+    }
+  }
+  for (const warning of result.warnings) {
+    console.log(chalk.yellow(`  \u26A0 ${warning}`));
+  }
+  if (errors === 0 && fixed === 0 && result.warnings.length === 0) {
+    console.log(chalk.green(`  \u2713 ${label}`));
+  }
+  return { errors, fixed };
+}
+function runChecks(entries, cwd, pkg, fix) {
+  let totalErrors = 0;
+  let totalFixed = 0;
+  for (const entry of entries) {
+    const result = entry.check();
+    const log = logResults(entry.label, result, fix);
+    if (fix && entry.fix && result.fixable.length > 0) {
+      entry.fix(cwd, pkg);
+    }
+    totalErrors += log.errors;
+    totalFixed += log.fixed;
+  }
+  return { errors: totalErrors, fixed: totalFixed };
+}
+function logSummary(errors, fixed) {
+  if (fixed > 0) {
+    console.log(chalk.green(`
+  Fixed ${fixed} issue(s)`));
+  }
+  if (errors > 0) {
+    console.log(chalk.red(`
+  ${errors} error(s) found`));
+  } else if (fixed === 0) {
+    console.log(chalk.green("\n  All checks passed"));
+  }
+}
+function packageLintMonorepo(fix = false) {
+  const cwd = INIT_CWD() ?? process.cwd();
+  let pkg;
+  try {
+    pkg = readRootPackageJson(cwd);
+  } catch {
+    console.error(chalk.red("Could not read package.json"));
+    return 1;
+  }
+  if (!isMonorepo(pkg)) {
+    console.log(chalk.gray("Not a monorepo \u2014 skipping package-lint checks"));
+    return 0;
+  }
+  console.log(chalk.green("Package Lint"));
+  const workspaces = yarnWorkspaces();
+  const checks = [
+    {
+      check: () => checkRootPrivate(pkg),
+      fix: fixRootPrivate,
+      label: "Root package is private"
+    },
+    {
+      check: () => checkNoPublishConfigOnPrivate(pkg),
+      fix: fixNoPublishConfigOnPrivate,
+      label: "No publishConfig on private root"
+    },
+    { check: () => checkPackagesFolder(workspaces), label: "All packages are in packages/ folder" },
+    { check: () => checkDiscoverable(pkg, workspaces), label: "All packages are discoverable from workspace globs" }
+  ];
+  const { errors, fixed } = runChecks(checks, cwd, pkg, fix);
+  logSummary(errors, fixed);
+  return errors > 0 ? 1 : 0;
+}
+export {
+  packageLintMonorepo
+};
+//# sourceMappingURL=package-lint.mjs.map

package/dist/actions/package-lint.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/actions/package-lint.ts","../../src/lib/yarn/workspace/yarnWorkspaces.ts","../../src/lib/yarn/yarnInitCwd.ts"],"sourcesContent":["import { readFileSync, writeFileSync } from 'node:fs'\nimport PATH from 'node:path'\n\nimport chalk from 'chalk'\nimport picomatch from 'picomatch'\n\nimport { INIT_CWD, yarnWorkspaces } from '../lib/yarn/index.ts'\n\ninterface LintResult {\n  errors: string[]\n  fixable: string[]\n  warnings: string[]\n}\n\nfunction emptyResult(): LintResult {\n  return {\n    errors: [], fixable: [], warnings: [],\n  }\n}\n\nfunction readRootPackageJson(cwd: string) {\n  const raw = readFileSync(PATH.resolve(cwd, 'package.json'), 'utf8')\n  return JSON.parse(raw)\n}\n\nfunction writeRootPackageJson(cwd: string, pkg: Record<string, unknown>) {\n  const path = PATH.resolve(cwd, 'package.json')\n  writeFileSync(path, `${JSON.stringify(pkg, null, 2)}\\n`, 'utf8')\n}\n\nfunction isMonorepo(pkg: Record<string, unknown>): boolean {\n  const workspaces = pkg.workspaces\n  return Array.isArray(workspaces) && workspaces.length > 0\n}\n\nfunction checkPackagesFolder(workspaces: { location: string; name: string }[]): LintResult {\n  const result = emptyResult()\n\n  for (const { location, name } of workspaces) {\n    if (location === '.') continue\n    if (!location.startsWith('packages/') && !location.startsWith('packages\\\\')) {\n      result.errors.push(`${name} (${location}) is not inside a packages/ folder`)\n    }\n  }\n\n  return result\n}\n\nfunction checkRootPrivate(pkg: Record<string, unknown>): LintResult {\n  const result = emptyResult()\n\n  if (!pkg.private) {\n    result.fixable.push('Root package.json must be private to prevent accidental publishing')\n  }\n\n  return result\n}\n\nfunction fixRootPrivate(cwd: string, pkg: Record<string, unknown>) {\n  pkg.private = true\n  writeRootPackageJson(cwd, pkg)\n  console.log(chalk.green('  ✔ Fixed: set \"private\": true in root package.json'))\n}\n\nfunction checkNoPublishConfigOnPrivate(pkg: Record<string, unknown>): LintResult {\n  const result = emptyResult()\n\n  if (pkg.private && pkg.publishConfig) {\n    result.fixable.push('Root package.json has publishConfig but is private — publishConfig is unnecessary')\n  }\n\n  return result\n}\n\nfunction fixNoPublishConfigOnPrivate(cwd: string, pkg: Record<string, unknown>) {\n  delete pkg.publishConfig\n  writeRootPackageJson(cwd, pkg)\n  console.log(chalk.green('  ✔ Fixed: removed publishConfig from private root package.json'))\n}\n\nfunction checkDiscoverable(\n  pkg: Record<string, unknown>,\n  workspaces: { location: string; name: string }[],\n): LintResult {\n  const result = emptyResult()\n\n  const globs = pkg.workspaces as string[]\n  const matchers = globs.map(glob => picomatch(glob))\n  const isMatch = (location: string) => matchers.some(m => m(location))\n\n  for (const { location, name } of workspaces) {\n    if (location === '.') continue\n    if (!isMatch(location)) {\n      result.errors.push(`${name} (${location}) is not matched by any workspace glob in package.json`)\n    }\n  }\n\n  return result\n}\n\nfunction logResults(label: string, result: LintResult, fix: boolean): { errors: number; fixed: number } {\n  let errors = 0\n  let fixed = 0\n\n  for (const error of result.errors) {\n    console.log(chalk.red(`  ✗ ${error}`))\n    errors++\n  }\n  for (const fixable of result.fixable) {\n    if (fix) {\n      fixed++\n    } else {\n      console.log(chalk.red(`  ✗ ${fixable} (fixable)`))\n      errors++\n    }\n  }\n  for (const warning of result.warnings) {\n    console.log(chalk.yellow(`  ⚠ ${warning}`))\n  }\n  if (errors === 0 && fixed === 0 && result.warnings.length === 0) {\n    console.log(chalk.green(`  ✓ ${label}`))\n  }\n\n  return { errors, fixed }\n}\n\ninterface CheckEntry {\n  check: () => LintResult\n  fix?: (cwd: string, pkg: Record<string, unknown>) => void\n  label: string\n}\n\nfunction runChecks(entries: CheckEntry[], cwd: string, pkg: Record<string, unknown>, fix: boolean): { errors: number; fixed: number } {\n  let totalErrors = 0\n  let totalFixed = 0\n\n  for (const entry of entries) {\n    const result = entry.check()\n    const log = logResults(entry.label, result, fix)\n    if (fix && entry.fix && result.fixable.length > 0) {\n      entry.fix(cwd, pkg)\n    }\n    totalErrors += log.errors\n    totalFixed += log.fixed\n  }\n\n  return { errors: totalErrors, fixed: totalFixed }\n}\n\nfunction logSummary(errors: number, fixed: number) {\n  if (fixed > 0) {\n    console.log(chalk.green(`\\n  Fixed ${fixed} issue(s)`))\n  }\n  if (errors > 0) {\n    console.log(chalk.red(`\\n  ${errors} error(s) found`))\n  } else if (fixed === 0) {\n    console.log(chalk.green('\\n  All checks passed'))\n  }\n}\n\nexport function packageLintMonorepo(fix = false): number {\n  const cwd = INIT_CWD() ?? process.cwd()\n\n  let pkg: Record<string, unknown>\n  try {\n    pkg = readRootPackageJson(cwd)\n  } catch {\n    console.error(chalk.red('Could not read package.json'))\n    return 1\n  }\n\n  if (!isMonorepo(pkg)) {\n    console.log(chalk.gray('Not a monorepo — skipping package-lint checks'))\n    return 0\n  }\n\n  console.log(chalk.green('Package Lint'))\n\n  const workspaces = yarnWorkspaces()\n\n  const checks: CheckEntry[] = [\n    {\n      check: () => checkRootPrivate(pkg), fix: fixRootPrivate, label: 'Root package is private',\n    },\n    {\n      check: () => checkNoPublishConfigOnPrivate(pkg), fix: fixNoPublishConfigOnPrivate, label: 'No publishConfig on private root',\n    },\n    { check: () => checkPackagesFolder(workspaces), label: 'All packages are in packages/ folder' },\n    { check: () => checkDiscoverable(pkg, workspaces), label: 'All packages are discoverable from workspace globs' },\n  ]\n\n  const { errors, fixed } = runChecks(checks, cwd, pkg, fix)\n  logSummary(errors, fixed)\n\n  return errors > 0 ? 1 : 0\n}\n","import { spawnSync } from 'node:child_process'\n\nimport type { Workspace } from './Workspace.ts'\n\nexport const yarnWorkspaces = (): Workspace[] => {\n  const result = spawnSync('yarn', ['workspaces', 'list', '--json', '--recursive'], { encoding: 'utf8', shell: true })\n  if (result.error) {\n    throw result.error\n  }\n  return (\n    result.stdout\n      .toString()\n      // NOTE: This probably doesn't work on Windows\n      // TODO: Replace /r/n with /n first\n      .split('\\n')\n      .slice(0, -1)\n      .map((item) => {\n        return JSON.parse(item)\n      })\n  )\n}\n","export const INIT_CWD = () => {\n  if (!process.env.INIT_CWD) console.error('Missing INIT_CWD')\n  return process.env.INIT_CWD\n}\n"],"mappings":";AAAA,SAAS,cAAc,qBAAqB;AAC5C,OAAO,UAAU;AAEjB,OAAO,WAAW;AAClB,OAAO,eAAe;;;ACJtB,SAAS,iBAAiB;AAInB,IAAM,iBAAiB,MAAmB;AAC/C,QAAM,SAAS,UAAU,QAAQ,CAAC,cAAc,QAAQ,UAAU,aAAa,GAAG,EAAE,UAAU,QAAQ,OAAO,KAAK,CAAC;AACnH,MAAI,OAAO,OAAO;AAChB,UAAM,OAAO;AAAA,EACf;AACA,SACE,OAAO,OACJ,SAAS,EAGT,MAAM,IAAI,EACV,MAAM,GAAG,EAAE,EACX,IAAI,CAAC,SAAS;AACb,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,CAAC;AAEP;;;ACpBO,IAAM,WAAW,MAAM;AAC5B,MAAI,CAAC,QAAQ,IAAI,SAAU,SAAQ,MAAM,kBAAkB;AAC3D,SAAO,QAAQ,IAAI;AACrB;;;AFWA,SAAS,cAA0B;AACjC,SAAO;AAAA,IACL,QAAQ,CAAC;AAAA,IAAG,SAAS,CAAC;AAAA,IAAG,UAAU,CAAC;AAAA,EACtC;AACF;AAEA,SAAS,oBAAoB,KAAa;AACxC,QAAM,MAAM,aAAa,KAAK,QAAQ,KAAK,cAAc,GAAG,MAAM;AAClE,SAAO,KAAK,MAAM,GAAG;AACvB;AAEA,SAAS,qBAAqB,KAAa,KAA8B;AACvE,QAAM,OAAO,KAAK,QAAQ,KAAK,cAAc;AAC7C,gBAAc,MAAM,GAAG,KAAK,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AACjE;AAEA,SAAS,WAAW,KAAuC;AACzD,QAAM,aAAa,IAAI;AACvB,SAAO,MAAM,QAAQ,UAAU,KAAK,WAAW,SAAS;AAC1D;AAEA,SAAS,oBAAoB,YAA8D;AACzF,QAAM,SAAS,YAAY;AAE3B,aAAW,EAAE,UAAU,KAAK,KAAK,YAAY;AAC3C,QAAI,aAAa,IAAK;AACtB,QAAI,CAAC,SAAS,WAAW,WAAW,KAAK,CAAC,SAAS,WAAW,YAAY,GAAG;AAC3E,aAAO,OAAO,KAAK,GAAG,IAAI,KAAK,QAAQ,oCAAoC;AAAA,IAC7E;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,KAA0C;AAClE,QAAM,SAAS,YAAY;AAE3B,MAAI,CAAC,IAAI,SAAS;AAChB,WAAO,QAAQ,KAAK,oEAAoE;AAAA,EAC1F;AAEA,SAAO;AACT;AAEA,SAAS,eAAe,KAAa,KAA8B;AACjE,MAAI,UAAU;AACd,uBAAqB,KAAK,GAAG;AAC7B,UAAQ,IAAI,MAAM,MAAM,0DAAqD,CAAC;AAChF;AAEA,SAAS,8BAA8B,KAA0C;AAC/E,QAAM,SAAS,YAAY;AAE3B,MAAI,IAAI,WAAW,IAAI,eAAe;AACpC,WAAO,QAAQ,KAAK,wFAAmF;AAAA,EACzG;AAEA,SAAO;AACT;AAEA,SAAS,4BAA4B,KAAa,KAA8B;AAC9E,SAAO,IAAI;AACX,uBAAqB,KAAK,GAAG;AAC7B,UAAQ,IAAI,MAAM,MAAM,sEAAiE,CAAC;AAC5F;AAEA,SAAS,kBACP,KACA,YACY;AACZ,QAAM,SAAS,YAAY;AAE3B,QAAM,QAAQ,IAAI;AAClB,QAAM,WAAW,MAAM,IAAI,UAAQ,UAAU,IAAI,CAAC;AAClD,QAAM,UAAU,CAAC,aAAqB,SAAS,KAAK,OAAK,EAAE,QAAQ,CAAC;AAEpE,aAAW,EAAE,UAAU,KAAK,KAAK,YAAY;AAC3C,QAAI,aAAa,IAAK;AACtB,QAAI,CAAC,QAAQ,QAAQ,GAAG;AACtB,aAAO,OAAO,KAAK,GAAG,IAAI,KAAK,QAAQ,wDAAwD;AAAA,IACjG;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,WAAW,OAAe,QAAoB,KAAiD;AACtG,MAAI,SAAS;AACb,MAAI,QAAQ;AAEZ,aAAW,SAAS,OAAO,QAAQ;AACjC,YAAQ,IAAI,MAAM,IAAI,YAAO,KAAK,EAAE,CAAC;AACrC;AAAA,EACF;AACA,aAAW,WAAW,OAAO,SAAS;AACpC,QAAI,KAAK;AACP;AAAA,IACF,OAAO;AACL,cAAQ,IAAI,MAAM,IAAI,YAAO,OAAO,YAAY,CAAC;AACjD;AAAA,IACF;AAAA,EACF;AACA,aAAW,WAAW,OAAO,UAAU;AACrC,YAAQ,IAAI,MAAM,OAAO,YAAO,OAAO,EAAE,CAAC;AAAA,EAC5C;AACA,MAAI,WAAW,KAAK,UAAU,KAAK,OAAO,SAAS,WAAW,GAAG;AAC/D,YAAQ,IAAI,MAAM,MAAM,YAAO,KAAK,EAAE,CAAC;AAAA,EACzC;AAEA,SAAO,EAAE,QAAQ,MAAM;AACzB;AAQA,SAAS,UAAU,SAAuB,KAAa,KAA8B,KAAiD;AACpI,MAAI,cAAc;AAClB,MAAI,aAAa;AAEjB,aAAW,SAAS,SAAS;AAC3B,UAAM,SAAS,MAAM,MAAM;AAC3B,UAAM,MAAM,WAAW,MAAM,OAAO,QAAQ,GAAG;AAC/C,QAAI,OAAO,MAAM,OAAO,OAAO,QAAQ,SAAS,GAAG;AACjD,YAAM,IAAI,KAAK,GAAG;AAAA,IACpB;AACA,mBAAe,IAAI;AACnB,kBAAc,IAAI;AAAA,EACpB;AAEA,SAAO,EAAE,QAAQ,aAAa,OAAO,WAAW;AAClD;AAEA,SAAS,WAAW,QAAgB,OAAe;AACjD,MAAI,QAAQ,GAAG;AACb,YAAQ,IAAI,MAAM,MAAM;AAAA,UAAa,KAAK,WAAW,CAAC;AAAA,EACxD;AACA,MAAI,SAAS,GAAG;AACd,YAAQ,IAAI,MAAM,IAAI;AAAA,IAAO,MAAM,iBAAiB,CAAC;AAAA,EACvD,WAAW,UAAU,GAAG;AACtB,YAAQ,IAAI,MAAM,MAAM,uBAAuB,CAAC;AAAA,EAClD;AACF;AAEO,SAAS,oBAAoB,MAAM,OAAe;AACvD,QAAM,MAAM,SAAS,KAAK,QAAQ,IAAI;AAEtC,MAAI;AACJ,MAAI;AACF,UAAM,oBAAoB,GAAG;AAAA,EAC/B,QAAQ;AACN,YAAQ,MAAM,MAAM,IAAI,6BAA6B,CAAC;AACtD,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,YAAQ,IAAI,MAAM,KAAK,oDAA+C,CAAC;AACvE,WAAO;AAAA,EACT;AAEA,UAAQ,IAAI,MAAM,MAAM,cAAc,CAAC;AAEvC,QAAM,aAAa,eAAe;AAElC,QAAM,SAAuB;AAAA,IAC3B;AAAA,MACE,OAAO,MAAM,iBAAiB,GAAG;AAAA,MAAG,KAAK;AAAA,MAAgB,OAAO;AAAA,IAClE;AAAA,IACA;AAAA,MACE,OAAO,MAAM,8BAA8B,GAAG;AAAA,MAAG,KAAK;AAAA,MAA6B,OAAO;AAAA,IAC5F;AAAA,IACA,EAAE,OAAO,MAAM,oBAAoB,UAAU,GAAG,OAAO,uCAAuC;AAAA,IAC9F,EAAE,OAAO,MAAM,kBAAkB,KAAK,UAAU,GAAG,OAAO,qDAAqD;AAAA,EACjH;AAEA,QAAM,EAAE,QAAQ,MAAM,IAAI,UAAU,QAAQ,KAAK,KAAK,GAAG;AACzD,aAAW,QAAQ,KAAK;AAExB,SAAO,SAAS,IAAI,IAAI;AAC1B;","names":[]}

package/dist/bin/xy.mjs

@@ -990,8 +990,8 @@ var DEFAULT_SETTINGS = {
       "Skill"
     ],
     deny: [
-      "Bash(git push --force*)",
-      "Bash(git reset --hard*)",
+      "Bash(git push --force *)",
+      "Bash(git reset --hard *)",
       "Bash(rm -rf /*)"
     ]
   }
@@ -2419,6 +2419,161 @@ var license = async (pkg) => {
 var filename = ".npmignore";
 var npmignoreGen = (pkg) => generateIgnoreFiles(filename, pkg);
 
+// src/actions/package-lint.ts
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync6 } from "fs";
+import PATH9 from "path";
+import chalk30 from "chalk";
+import picomatch from "picomatch";
+function emptyResult() {
+  return {
+    errors: [],
+    fixable: [],
+    warnings: []
+  };
+}
+function readRootPackageJson(cwd) {
+  const raw = readFileSync13(PATH9.resolve(cwd, "package.json"), "utf8");
+  return JSON.parse(raw);
+}
+function writeRootPackageJson(cwd, pkg) {
+  const path8 = PATH9.resolve(cwd, "package.json");
+  writeFileSync6(path8, `${JSON.stringify(pkg, null, 2)}
+`, "utf8");
+}
+function isMonorepo(pkg) {
+  const workspaces = pkg.workspaces;
+  return Array.isArray(workspaces) && workspaces.length > 0;
+}
+function checkPackagesFolder(workspaces) {
+  const result = emptyResult();
+  for (const { location, name } of workspaces) {
+    if (location === ".") continue;
+    if (!location.startsWith("packages/") && !location.startsWith("packages\\")) {
+      result.errors.push(`${name} (${location}) is not inside a packages/ folder`);
+    }
+  }
+  return result;
+}
+function checkRootPrivate(pkg) {
+  const result = emptyResult();
+  if (!pkg.private) {
+    result.fixable.push("Root package.json must be private to prevent accidental publishing");
+  }
+  return result;
+}
+function fixRootPrivate(cwd, pkg) {
+  pkg.private = true;
+  writeRootPackageJson(cwd, pkg);
+  console.log(chalk30.green('  \u2714 Fixed: set "private": true in root package.json'));
+}
+function checkNoPublishConfigOnPrivate(pkg) {
+  const result = emptyResult();
+  if (pkg.private && pkg.publishConfig) {
+    result.fixable.push("Root package.json has publishConfig but is private \u2014 publishConfig is unnecessary");
+  }
+  return result;
+}
+function fixNoPublishConfigOnPrivate(cwd, pkg) {
+  delete pkg.publishConfig;
+  writeRootPackageJson(cwd, pkg);
+  console.log(chalk30.green("  \u2714 Fixed: removed publishConfig from private root package.json"));
+}
+function checkDiscoverable(pkg, workspaces) {
+  const result = emptyResult();
+  const globs = pkg.workspaces;
+  const matchers = globs.map((glob2) => picomatch(glob2));
+  const isMatch = (location) => matchers.some((m) => m(location));
+  for (const { location, name } of workspaces) {
+    if (location === ".") continue;
+    if (!isMatch(location)) {
+      result.errors.push(`${name} (${location}) is not matched by any workspace glob in package.json`);
+    }
+  }
+  return result;
+}
+function logResults(label, result, fix2) {
+  let errors = 0;
+  let fixed = 0;
+  for (const error of result.errors) {
+    console.log(chalk30.red(`  \u2717 ${error}`));
+    errors++;
+  }
+  for (const fixable of result.fixable) {
+    if (fix2) {
+      fixed++;
+    } else {
+      console.log(chalk30.red(`  \u2717 ${fixable} (fixable)`));
+      errors++;
+    }
+  }
+  for (const warning of result.warnings) {
+    console.log(chalk30.yellow(`  \u26A0 ${warning}`));
+  }
+  if (errors === 0 && fixed === 0 && result.warnings.length === 0) {
+    console.log(chalk30.green(`  \u2713 ${label}`));
+  }
+  return { errors, fixed };
+}
+function runChecks(entries, cwd, pkg, fix2) {
+  let totalErrors = 0;
+  let totalFixed = 0;
+  for (const entry of entries) {
+    const result = entry.check();
+    const log = logResults(entry.label, result, fix2);
+    if (fix2 && entry.fix && result.fixable.length > 0) {
+      entry.fix(cwd, pkg);
+    }
+    totalErrors += log.errors;
+    totalFixed += log.fixed;
+  }
+  return { errors: totalErrors, fixed: totalFixed };
+}
+function logSummary(errors, fixed) {
+  if (fixed > 0) {
+    console.log(chalk30.green(`
+  Fixed ${fixed} issue(s)`));
+  }
+  if (errors > 0) {
+    console.log(chalk30.red(`
+  ${errors} error(s) found`));
+  } else if (fixed === 0) {
+    console.log(chalk30.green("\n  All checks passed"));
+  }
+}
+function packageLintMonorepo(fix2 = false) {
+  const cwd = INIT_CWD() ?? process.cwd();
+  let pkg;
+  try {
+    pkg = readRootPackageJson(cwd);
+  } catch {
+    console.error(chalk30.red("Could not read package.json"));
+    return 1;
+  }
+  if (!isMonorepo(pkg)) {
+    console.log(chalk30.gray("Not a monorepo \u2014 skipping package-lint checks"));
+    return 0;
+  }
+  console.log(chalk30.green("Package Lint"));
+  const workspaces = yarnWorkspaces();
+  const checks = [
+    {
+      check: () => checkRootPrivate(pkg),
+      fix: fixRootPrivate,
+      label: "Root package is private"
+    },
+    {
+      check: () => checkNoPublishConfigOnPrivate(pkg),
+      fix: fixNoPublishConfigOnPrivate,
+      label: "No publishConfig on private root"
+    },
+    { check: () => checkPackagesFolder(workspaces), label: "All packages are in packages/ folder" },
+    { check: () => checkDiscoverable(pkg, workspaces), label: "All packages are discoverable from workspace globs" }
+  ];
+  const { errors, fixed } = runChecks(checks, cwd, pkg, fix2);
+  logSummary(errors, fixed);
+  return errors > 0 ? 1 : 0;
+}
+
 // src/actions/publint.ts
 var publint = async ({ verbose, pkg }) => {
   return pkg === void 0 ? publintAll({ verbose }) : await publintPackage({ pkg, verbose });
@@ -2472,7 +2627,7 @@ var rebuild = ({ target }) => {
 };
 
 // src/actions/recompile.ts
-import chalk30 from "chalk";
+import chalk31 from "chalk";
 var recompile = async ({
   verbose,
   target,
@@ -2508,7 +2663,7 @@ var recompileAll = async ({
   const incrementalOptions = incremental ? ["--since", "-Apt", "--topological-dev"] : ["--parallel", "-Apt", "--topological-dev"];
   const jobsOptions = jobs ? ["-j", `${jobs}`] : [];
   if (jobs) {
-    console.log(chalk30.blue(`Jobs set to [${jobs}]`));
+    console.log(chalk31.blue(`Jobs set to [${jobs}]`));
   }
   const result = await runStepsAsync(`Recompile${incremental ? "-Incremental" : ""} [All]`, [
     [
@@ -2539,7 +2694,7 @@ var recompileAll = async ({
     ]
   ]);
   console.log(
-    `${chalk30.gray("Recompiled in")} [${chalk30.magenta(((Date.now() - start) / 1e3).toFixed(2))}] ${chalk30.gray("seconds")}`
+    `${chalk31.gray("Recompiled in")} [${chalk31.magenta(((Date.now() - start) / 1e3).toFixed(2))}] ${chalk31.gray("seconds")}`
   );
   return result;
 };
@@ -2570,13 +2725,13 @@ var reinstall = () => {
 };
 
 // src/actions/relint.ts
-import chalk31 from "chalk";
+import chalk32 from "chalk";
 var relintPackage = ({
   pkg,
   fix: fix2,
   verbose
 }) => {
-  console.log(chalk31.gray(`${fix2 ? "Fix" : "Lint"} [${pkg}]`));
+  console.log(chalk32.gray(`${fix2 ? "Fix" : "Lint"} [${pkg}]`));
   const start = Date.now();
   const result = runSteps(`${fix2 ? "Fix" : "Lint"}  [${pkg}]`, [
     ["yarn", [
@@ -2586,7 +2741,7 @@ var relintPackage = ({
       fix2 ? "package-fix" : verbose ? "package-lint-verbose" : "package-lint"
     ]]
   ]);
-  console.log(chalk31.gray(`${fix2 ? "Fixed in" : "Linted in"} [${chalk31.magenta(((Date.now() - start) / 1e3).toFixed(2))}] ${chalk31.gray("seconds")}`));
+  console.log(chalk32.gray(`${fix2 ? "Fixed in" : "Linted in"} [${chalk32.magenta(((Date.now() - start) / 1e3).toFixed(2))}] ${chalk32.gray("seconds")}`));
   return result;
 };
 var relint = ({
@@ -2606,13 +2761,13 @@ var relint = ({
   });
 };
 var relintAllPackages = ({ fix: fix2 = false } = {}) => {
-  console.log(chalk31.gray(`${fix2 ? "Fix" : "Lint"} [All-Packages]`));
+  console.log(chalk32.gray(`${fix2 ? "Fix" : "Lint"} [All-Packages]`));
   const start = Date.now();
   const fixOptions = fix2 ? ["--fix"] : [];
   const result = runSteps(`${fix2 ? "Fix" : "Lint"}  [All-Packages]`, [
     ["yarn", ["eslint", ...fixOptions]]
   ]);
-  console.log(chalk31.gray(`${fix2 ? "Fixed in" : "Linted in"} [${chalk31.magenta(((Date.now() - start) / 1e3).toFixed(2))}] ${chalk31.gray("seconds")}`));
+  console.log(chalk32.gray(`${fix2 ? "Fixed in" : "Linted in"} [${chalk32.magenta(((Date.now() - start) / 1e3).toFixed(2))}] ${chalk32.gray("seconds")}`));
   return result;
 };
 
@@ -2630,10 +2785,10 @@ var sonar = () => {
 };
 
 // src/actions/statics.ts
-import chalk32 from "chalk";
+import chalk33 from "chalk";
 var DefaultDependencies = ["axios", "@xylabs/pixel", "react", "graphql", "react-router", "@mui/material", "@mui/system"];
 var statics = () => {
-  console.log(chalk32.green("Check Required Static Dependencies"));
+  console.log(chalk33.green("Check Required Static Dependencies"));
   const statics2 = parsedPackageJSON()?.xy?.deps?.statics;
   return detectDuplicateDependencies(statics2, DefaultDependencies);
 };
@@ -3214,7 +3369,7 @@ var xyInstallCommands = (args) => {
 };
 
 // src/xy/lint/cycleCommand.ts
-import chalk33 from "chalk";
+import chalk34 from "chalk";
 var cycleCommand = {
   command: "cycle [package]",
   describe: "Cycle - Check for dependency cycles",
@@ -3225,12 +3380,12 @@ var cycleCommand = {
     const start = Date.now();
     if (argv.verbose) console.log("Cycle");
     process.exitCode = await cycle({ pkg: argv.package });
-    console.log(chalk33.blue(`Finished in ${Date.now() - start}ms`));
+    console.log(chalk34.blue(`Finished in ${Date.now() - start}ms`));
   }
 };
 
 // src/xy/lint/deplintCommand.ts
-import chalk34 from "chalk";
+import chalk35 from "chalk";
 var deplintCommand = {
   command: "deplint [package]",
   describe: "Deplint - Run Deplint",
@@ -3268,12 +3423,12 @@ var deplintCommand = {
       peerDeps: !!argv.peerDeps,
       verbose: !!argv.verbose
     });
-    console.log(chalk34.blue(`Finished in ${Date.now() - start}ms`));
+    console.log(chalk35.blue(`Finished in ${Date.now() - start}ms`));
   }
 };
 
 // src/xy/lint/fixCommand.ts
-import chalk35 from "chalk";
+import chalk36 from "chalk";
 var fixCommand = {
   command: "fix [package]",
   describe: "Fix - Run Eslint w/fix",
@@ -3284,12 +3439,12 @@ var fixCommand = {
     const start = Date.now();
     if (argv.verbose) console.log("Fix");
     process.exitCode = fix();
-    console.log(chalk35.blue(`Finished in ${Date.now() - start}ms`));
+    console.log(chalk36.blue(`Finished in ${Date.now() - start}ms`));
   }
 };
 
 // src/xy/lint/knipCommand.ts
-import chalk36 from "chalk";
+import chalk37 from "chalk";
 var knipCommand = {
   command: "knip",
   describe: "Knip - Run Knip",
@@ -3300,12 +3455,12 @@ var knipCommand = {
     if (argv.verbose) console.log("Knip");
     const start = Date.now();
     process.exitCode = knip();
-    console.log(chalk36.blue(`Knip finished in ${Date.now() - start}ms`));
+    console.log(chalk37.blue(`Knip finished in ${Date.now() - start}ms`));
   }
 };
 
 // src/xy/lint/lintCommand.ts
-import chalk37 from "chalk";
+import chalk38 from "chalk";
 var lintCommand = {
   command: "lint [package]",
   describe: "Lint - Run Eslint",
@@ -3334,12 +3489,29 @@ var lintCommand = {
       cache: argv.cache,
       verbose: !!argv.verbose
     });
-    console.log(chalk37.blue(`Finished in ${Date.now() - start}ms`));
+    console.log(chalk38.blue(`Finished in ${Date.now() - start}ms`));
+  }
+};
+
+// src/xy/lint/packageLintCommand.ts
+var packageLintCommand = {
+  builder: (yargs2) => {
+    return yargs2.option("fix", {
+      default: false,
+      description: "Auto-fix fixable issues",
+      type: "boolean"
+    });
+  },
+  command: "package-lint",
+  describe: "Package Lint - Check monorepo package structure",
+  handler: (argv) => {
+    if (argv.verbose) console.log("Package Lint");
+    process.exitCode = packageLintMonorepo(!!argv.fix);
   }
 };
 
 // src/xy/lint/publintCommand.ts
-import chalk38 from "chalk";
+import chalk39 from "chalk";
 var publintCommand = {
   command: "publint [package]",
   describe: "Publint - Run Publint",
@@ -3350,12 +3522,12 @@ var publintCommand = {
     if (argv.verbose) console.log("Publint");
     const start = Date.now();
     process.exitCode = await publint({ pkg: argv.package, verbose: !!argv.verbose });
-    console.log(chalk38.blue(`Finished in ${Date.now() - start}ms`));
+    console.log(chalk39.blue(`Finished in ${Date.now() - start}ms`));
   }
 };
 
 // src/xy/lint/relintCommand.ts
-import chalk39 from "chalk";
+import chalk40 from "chalk";
 var relintCommand = {
   command: "relint [package]",
   describe: "Relint - Clean & Lint",
@@ -3366,12 +3538,12 @@ var relintCommand = {
     if (argv.verbose) console.log("Relinting");
     const start = Date.now();
     process.exitCode = relint();
-    console.log(chalk39.blue(`Finished in ${Date.now() - start}ms`));
+    console.log(chalk40.blue(`Finished in ${Date.now() - start}ms`));
   }
 };
 
 // src/xy/lint/sonarCommand.ts
-import chalk40 from "chalk";
+import chalk41 from "chalk";
 var sonarCommand = {
   command: "sonar",
   describe: "Sonar - Run Sonar Check",
@@ -3382,17 +3554,17 @@ var sonarCommand = {
     const start = Date.now();
     if (argv.verbose) console.log("Sonar Check");
     process.exitCode = sonar();
-    console.log(chalk40.blue(`Finished in ${Date.now() - start}ms`));
+    console.log(chalk41.blue(`Finished in ${Date.now() - start}ms`));
   }
 };
 
 // src/xy/lint/index.ts
 var xyLintCommands = (args) => {
-  return args.command(cycleCommand).command(lintCommand).command(deplintCommand).command(fixCommand).command(relintCommand).command(publintCommand).command(knipCommand).command(sonarCommand);
+  return args.command(cycleCommand).command(lintCommand).command(deplintCommand).command(fixCommand).command(relintCommand).command(publintCommand).command(knipCommand).command(packageLintCommand).command(sonarCommand);
 };
 
 // src/xy/xy.ts
-import chalk41 from "chalk";
+import chalk42 from "chalk";
 
 // src/xy/xyParseOptions.ts
 import yargs from "yargs";
@@ -3425,8 +3597,8 @@ var xyParseOptions = () => {
 var xy = async () => {
   const options = xyParseOptions();
   return await xyBuildCommands(xyCommonCommands(xyInstallCommands(xyDeployCommands(xyLintCommands(options))))).demandCommand(1).command("*", "", () => {
-    console.error(chalk41.yellow(`Command not found [${chalk41.magenta(process.argv[2])}]`));
-    console.log(chalk41.gray("Try 'yarn xy --help' for list of commands"));
+    console.error(chalk42.yellow(`Command not found [${chalk42.magenta(process.argv[2])}]`));
+    console.log(chalk42.gray("Try 'yarn xy --help' for list of commands"));
   }).version().help().argv;
 };