bun-workspaces 1.5.2 → 1.7.0

package/README.md

@@ -1,5 +1,5 @@
 <a href="https://bunworkspaces.com">
-<img src="./packages/doc-website/src/pages/public/images/png/bwunster-bg-banner-wide_3000x900.png" alt="bun-workspaces" width="100%" />
+<img src="./workspaces/web/documentation-website/src/pages/public/images/png/bwunster-bg-banner-wide_3000x900.png" alt="bun-workspaces" width="100%" />
 </a>
 
 # bun-workspaces
@@ -248,10 +248,104 @@ const runManyScripts = async () => {
 };
 ```
 
+### Configuration
+
+`bun-workspaces` has no required configuration, but there are optional config files.
+
+#### Workspace Config
+
+Workspace configs can be placed in a workspace's directory at `bw.workspace.ts`.
+
+[Workspace configuration documentation here](https://bunworkspaces.com/config/workspace)
+
+```typescript
+// bw.workspace.ts — place in a workspace directory
+
+// Also supported: bw.workspace.js, bw.workspace.json, bw.workspace.jsonc, or a "bw" key in package.json
+
+import { defineWorkspaceConfig } from "bun-workspaces/config";
+
+export default defineWorkspaceConfig({
+  alias: "my-web-app", // shorthand name; use array for multiple
+  tags: ["app", "frontend"],
+  scripts: {
+    // lower order runs first in sequenced script execution
+    build: { order: 1 },
+    test: { order: 2 },
+  },
+  rules: {
+    workspaceDependencies: {
+      // Only "my-workspace" or workspaces tagged "lib" are allowed as dependencies
+      allowPatterns: ["tag:lib", "my-workspace"],
+      // Workspaces tagged "backend" are forbidden as dependencies
+      denyPatterns: ["tag:backend"],
+    },
+  },
+});
+```
+
+#### Root Config
+
+A root config can be placed in the project root directory at `bw.root.ts`,
+which can also apply workspace configs in bulk by using workspace patterns.
+
+[Root configuration documentation here](https://bunworkspaces.com/config/root)
+
+[More on workspace pattern configs here](https://bunworkspaces.com/config/workspace-pattern-configs)
+
+```typescript
+// bw.root.ts — place in your project root directory
+// Also supported: bw.root.js, bw.root.json, bw.root.jsonc, or a "bw" key in package.json
+import { defineRootConfig } from "bun-workspaces/config";
+
+export default defineRootConfig({
+  defaults: {
+    // default value for --parallel option
+    parallelMax: 4,
+    // default value for --shell option
+    shell: "system",
+    // default value for global --include-root-workspace option
+    includeRootWorkspace: false,
+  },
+
+  // Apply workspace configs in bulk by workspace pattern, in order.
+  // Each entry merges into matching workspaces' accumulated config.
+  // Pattern matching reflects aliases and tags added by earlier entries.
+  workspacePatternConfigs: [
+    {
+      patterns: ["path:packages/apps/**/*"],
+      config: { tags: ["app"] },
+    },
+    {
+      patterns: ["path:packages/libs/**/*"],
+      config: { tags: ["lib"] },
+    },
+    {
+      // "tag:app" matches because the first entry added it
+      patterns: ["tag:app"],
+      config: {
+        rules: {
+          workspaceDependencies: {
+            allowPatterns: ["tag:lib"], // apps may only depend on libs
+          },
+        },
+      },
+    },
+    {
+      patterns: ["tag:app"],
+      // Factory form: receives static workspace data and accumulated config
+      config: (workspace, prevConfig) => ({
+        alias: workspace.name.replace(/^@my-scope\//, ""),
+      }),
+    },
+  ],
+});
+```
+
 _`bun-workspaces` is independent from the [Bun](https://bun.sh) project and is not affiliated with or endorsed by Anthropic. This project aims to enhance the experience of Bun for its users._
 
 Developed By:
 
 <a href="https://smorsic.io" target="_blank" rel="noopener noreferrer">
-  <img src="./packages/doc-website/src/pages/public/images/png/smorsic-banner_light_803x300.png" alt="Smorsic Labs logo" width="280" />
+  <img src="./workspaces/web/documentation-website/src/pages/public/images/png/smorsic-banner_light_803x300.png" alt="Smorsic Labs logo" width="280" />
 </a>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bun-workspaces",
-  "version": "1.5.2",
+  "version": "1.7.0",
   "description": "A monorepo management tool for Bun, with a CLI and API to enhance Bun's native workspaces.",
   "license": "MIT",
   "exports": {
@@ -15,6 +15,10 @@
     "./config": {
       "types": "./src/config/public.d.ts",
       "default": "./src/config/public.mjs"
+    },
+    "./script": {
+      "types": "./src/runScript/public.d.ts",
+      "default": "./src/runScript/public.mjs"
     }
   },
   "types": "./src/index.d.ts",

package/src/1108.mjs

@@ -24,7 +24,14 @@ const SCRIPT_RUNTIME_METADATA_CONFIG = {
     envVarName: "BW_WORKSPACE_NAME",
   },
 };
-const getScriptRuntimeMetadataConfig = (key) =>
-  SCRIPT_RUNTIME_METADATA_CONFIG[key];
+const validateScriptRuntimeMetadataKey = (key) => {
+  if (!(key in SCRIPT_RUNTIME_METADATA_CONFIG)) {
+    throw new Error(`Invalid script runtime metadata key: ${key}`);
+  }
+};
+const getScriptRuntimeMetadataConfig = (key) => {
+  validateScriptRuntimeMetadataKey(key);
+  return SCRIPT_RUNTIME_METADATA_CONFIG[key];
+};
 
 export { getScriptRuntimeMetadataConfig };

package/src/ai/mcp/bwMcpServer.mjs

@@ -215,6 +215,80 @@ const runManyScripts = async () => {
 }
 `.trim();
 
+const ROOT_CONFIG_QUICKSTART = `
+// bw.root.ts — place in your project root directory
+// Also supported: bw.root.js, bw.root.json, bw.root.jsonc, or a "bw" key in package.json
+import { defineRootConfig } from "bun-workspaces/config";
+
+export default defineRootConfig({
+  defaults: {
+    // default value for --parallel option
+    parallelMax: 4,
+    // default value for --shell option
+    shell: "system",
+    // default value for global --include-root-workspace option
+    includeRootWorkspace: false,
+  },
+
+  // Apply workspace configs in bulk by workspace pattern, in order.
+  // Each entry merges into matching workspaces' accumulated config.
+  // Pattern matching reflects aliases and tags added by earlier entries.
+  workspacePatternConfigs: [
+    {
+      patterns: ["path:packages/apps/**/*"],
+      config: { tags: ["app"] },
+    },
+    {
+      patterns: ["path:packages/libs/**/*"],
+      config: { tags: ["lib"] },
+    },
+    {
+      // "tag:app" matches because the first entry added it
+      patterns: ["tag:app"],
+      config: {
+        rules: {
+          workspaceDependencies: {
+            allowPatterns: ["tag:lib"], // apps may only depend on libs
+          },
+        },
+      },
+    },
+    {
+      patterns: ["tag:app"],
+      // Factory form: receives static workspace data and accumulated config
+      config: (workspace, prevConfig) => ({
+        alias: workspace.name.replace(/^@my-scope\\//, ""),
+      }),
+    },
+  ],
+});
+`.trim();
+const WORKSPACE_CONFIG_QUICKSTART = `
+// bw.workspace.ts — place in a workspace directory
+
+// Also supported: bw.workspace.js, bw.workspace.json, bw.workspace.jsonc, or a "bw" key in package.json
+
+import { defineWorkspaceConfig } from "bun-workspaces/config";
+
+export default defineWorkspaceConfig({
+  alias: "my-web-app", // shorthand name; use array for multiple
+  tags: ["app", "frontend"],
+  scripts: {
+    // lower order runs first in sequenced script execution
+    build: { order: 1 },
+    test: { order: 2 },
+  },
+  rules: {
+    workspaceDependencies: {
+      // Only "my-workspace" or workspaces tagged "lib" are allowed as dependencies
+      allowPatterns: ["tag:lib", "my-workspace"],
+      // Workspaces tagged "backend" are forbidden as dependencies
+      denyPatterns: ["tag:backend"],
+    },
+  },
+});
+`.trim();
+
 const SERVER_INSTRUCTIONS = `
 bun-workspaces MCP server: tools to query Bun monorepo workspace metadata and documentation resources for the bun-workspaces CLI and TypeScript API.
 
@@ -235,6 +309,18 @@ ${CLI_QUICKSTART}
 \`\`\`typescript
 ${API_QUICKSTART}
 \`\`\`
+
+## Root config quickstart
+
+\`\`\`typescript
+${ROOT_CONFIG_QUICKSTART}
+\`\`\`
+
+## Workspace config quickstart
+
+\`\`\`typescript
+${WORKSPACE_CONFIG_QUICKSTART}
+\`\`\`
 `.trim();
 const startBwMcpServer = async (project) => {
   const server = createMcpServer({

package/src/cli/index.d.ts

@@ -25,7 +25,18 @@ export type ParallelMaxValue =
   | (typeof PARALLEL_MAX_VALUES)[number]
   | PercentageValue;
 export type WorkspaceDependenciesRule = {
+  /**
+   * Workspace patterns that are permitted as dependencies.
+   * Only workspaces matching these patterns are allowed.
+   * When combined with `denyPatterns`, the deny list further
+   * filters this allowed subset.
+   */
   allowPatterns?: string[];
+  /**
+   * Workspace patterns that are forbidden as dependencies.
+   * When combined with `allowPatterns`, this further filters
+   * the subset of allowed workspaces.
+   */
   denyPatterns?: string[];
 };
 export type WorkspaceRules = {
@@ -41,12 +52,60 @@ export type ScriptConfig = {
    */
   order?: number;
 };
+/** Configuration that applies to a specific workspace */
+export type WorkspaceConfig = {
+  /**
+   * An alias or list of aliases for the workspace.
+   *
+   * These must be unique to other workspaces' aliases
+   * and package.json names.
+   */
+  alias?: string | string[];
+  /**
+   * Tags for the workspace.
+   *
+   * These can be used to group workspaces by a common tag.
+   */
+  tags?: string[];
+  /**
+   * Configuration that maps to a script name in the workspace's package.json.
+   */
+  scripts?: Record<string, ScriptConfig>;
+  /**
+   * Rules that validate the workspace.
+   */
+  rules?: WorkspaceRules;
+};
 export type ResolvedWorkspaceConfig = {
   aliases: string[];
   tags: string[];
   scripts: Record<string, ScriptConfig>;
   rules: WorkspaceRules;
 };
+/** Static workspace context passed to a {@link WorkspacePatternConfigFactory}.
+ * Contains only the immutable, package.json-derived fields — not config-derived fields like aliases or tags. */
+export type RawWorkspace = {
+  name: string;
+  isRoot: boolean;
+  path: string;
+  matchPattern: string;
+  scripts: string[];
+  dependencies: string[];
+  dependents: string[];
+};
+/** A factory that returns a {@link WorkspaceConfig} to merge for a matched workspace.
+ * Receives the static workspace context and the workspace's accumulated resolved config at that point. */
+export type WorkspacePatternConfigFactory = (
+  workspace: RawWorkspace,
+  prevConfig: ResolvedWorkspaceConfig,
+) => WorkspaceConfig;
+/** A single entry in {@link RootConfig.workspacePatternConfigs} */
+export type WorkspacePatternConfigEntry = {
+  /** Workspace patterns to match. Supports all workspace pattern specifiers (name, alias, tag, path, not:). */
+  patterns: string[];
+  /** Config to merge into all matching workspaces. May be a factory receiving the workspace context and accumulated config. */
+  config: WorkspaceConfig | WorkspacePatternConfigFactory;
+};
 export type ResolvedRootConfig = {
   defaults: {
     parallelMax: number;
@@ -54,6 +113,7 @@ export type ResolvedRootConfig = {
     /** `undefined` means the value was not set in the input config */
     includeRootWorkspace: boolean | undefined;
   };
+  workspacePatternConfigs: WorkspacePatternConfigEntry[];
 };
 export type OutputStreamName = "stdout" | "stderr";
 export type ProcessOutputChunk<
@@ -251,7 +311,7 @@ export type CreateFileSystemProjectOptions = {
 export type InlineScriptOptions = {
   /** A name to act as a label for the inline script */
   scriptName?: string;
-  /** Whether to run the script as an inline command */
+  /** Whether to use the system shell or Bun shell */
   shell?: ShellOption;
 };
 /** Arguments for `FileSystemProject.runWorkspaceScript` */

package/src/config/public.d.ts

@@ -19,7 +19,18 @@ export type ParallelMaxValue =
   | (typeof PARALLEL_MAX_VALUES)[number]
   | PercentageValue;
 export type WorkspaceDependenciesRule = {
+  /**
+   * Workspace patterns that are permitted as dependencies.
+   * Only workspaces matching these patterns are allowed.
+   * When combined with `denyPatterns`, the deny list further
+   * filters this allowed subset.
+   */
   allowPatterns?: string[];
+  /**
+   * Workspace patterns that are forbidden as dependencies.
+   * When combined with `allowPatterns`, this further filters
+   * the subset of allowed workspaces.
+   */
   denyPatterns?: string[];
 };
 export type WorkspaceRules = {
@@ -65,6 +76,30 @@ export type ResolvedWorkspaceConfig = {
   scripts: Record<string, ScriptConfig>;
   rules: WorkspaceRules;
 };
+/** Static workspace context passed to a {@link WorkspacePatternConfigFactory}.
+ * Contains only the immutable, package.json-derived fields — not config-derived fields like aliases or tags. */
+export type RawWorkspace = {
+  name: string;
+  isRoot: boolean;
+  path: string;
+  matchPattern: string;
+  scripts: string[];
+  dependencies: string[];
+  dependents: string[];
+};
+/** A factory that returns a {@link WorkspaceConfig} to merge for a matched workspace.
+ * Receives the static workspace context and the workspace's accumulated resolved config at that point. */
+export type WorkspacePatternConfigFactory = (
+  workspace: RawWorkspace,
+  prevConfig: ResolvedWorkspaceConfig,
+) => WorkspaceConfig;
+/** A single entry in {@link RootConfig.workspacePatternConfigs} */
+export type WorkspacePatternConfigEntry = {
+  /** Workspace patterns to match. Supports all workspace pattern specifiers (name, alias, tag, path, not:). */
+  patterns: string[];
+  /** Config to merge into all matching workspaces. May be a factory receiving the workspace context and accumulated config. */
+  config: WorkspaceConfig | WorkspacePatternConfigFactory;
+};
 export type RootConfig = {
   defaults?: {
     /** The maximum number of scripts that can run in parallel. (default: "auto") */
@@ -74,6 +109,14 @@ export type RootConfig = {
     /** Whether to include the root workspace in the workspaces list by default. (default: false) */
     includeRootWorkspace?: boolean;
   };
+  /**
+   * Workspace configs applied by pattern, in order, merging left to right,
+   * using any workspaces' local configs as the starting config.
+   * Each entry's config is merged into all workspaces matching its patterns.
+   * Pattern matching reflects accumulated aliases and tags from previous entries.
+   * Factory functions are only supported in TypeScript/JavaScript config files.
+   */
+  workspacePatternConfigs?: WorkspacePatternConfigEntry[];
 };
 export type ResolvedRootConfig = {
   defaults: {
@@ -82,12 +125,27 @@ export type ResolvedRootConfig = {
     /** `undefined` means the value was not set in the input config */
     includeRootWorkspace: boolean | undefined;
   };
+  workspacePatternConfigs: WorkspacePatternConfigEntry[];
 };
 export declare const defineRootConfig: (
   config: RootConfig,
 ) => ResolvedRootConfig;
+export type RootConfigFactory = (prev: RootConfig) => RootConfig;
+export type RootConfigInput = RootConfig | RootConfigFactory;
+/** Merge two or more root configs left to right, with each subsequent config taking precedence.
+ * Any argument may be a factory function receiving the accumulated config up to that point. */
+export declare const mergeRootConfig: (
+  ...configs: RootConfigInput[]
+) => RootConfig;
 export declare const defineWorkspaceConfig: (
   config: WorkspaceConfig,
 ) => ResolvedWorkspaceConfig;
+export type WorkspaceConfigFactory = (prev: WorkspaceConfig) => WorkspaceConfig;
+export type WorkspaceConfigInput = WorkspaceConfig | WorkspaceConfigFactory;
+/** Merge two or more workspace configs left to right, with each subsequent config taking precedence.
+ * Any argument may be a factory function receiving the accumulated config up to that point. */
+export declare const mergeWorkspaceConfig: (
+  ...configs: WorkspaceConfigInput[]
+) => WorkspaceConfig;
 
 export {};

package/src/config/public.mjs

@@ -1,2 +1,4 @@
 export { defineRootConfig } from "./rootConfig/defineRootConfig.mjs";
+export { mergeRootConfig } from "./rootConfig/mergeRootConfig.mjs";
 export { defineWorkspaceConfig } from "./workspaceConfig/defineWorkspaceConfig.mjs";
+export { mergeWorkspaceConfig } from "./workspaceConfig/mergeWorkspaceConfig.mjs";

package/src/config/rootConfig/index.mjs

@@ -1,6 +1,7 @@
 export * from "./rootConfigSchema.mjs";
 export * from "./rootConfig.mjs";
 export * from "./loadRootConfig.mjs";
+export * from "./mergeRootConfig.mjs";
 export * from "./errors.mjs";
 
 export {};

package/src/config/rootConfig/mergeRootConfig.mjs

@@ -0,0 +1,24 @@
+/** Merge two or more root configs left to right, with each subsequent config taking precedence.
+ * Any argument may be a factory function receiving the accumulated config up to that point. */ const mergeRootConfig =
+  (...configs) =>
+    configs.reduce((acc, configOrFactory) => {
+      const config =
+        typeof configOrFactory === "function"
+          ? configOrFactory(acc)
+          : configOrFactory;
+      const mergedPatternConfigs = [
+        ...(acc.workspacePatternConfigs ?? []),
+        ...(config.workspacePatternConfigs ?? []),
+      ];
+      return {
+        defaults: {
+          ...acc.defaults,
+          ...config.defaults,
+        },
+        ...(mergedPatternConfigs.length > 0 && {
+          workspacePatternConfigs: mergedPatternConfigs,
+        }),
+      };
+    }, {});
+
+export { mergeRootConfig };

package/src/config/rootConfig/rootConfig.mjs

@@ -5,6 +5,7 @@ import {
 } from "../../runScript/index.mjs";
 import { getUserEnvVar } from "../userEnvVars/index.mjs";
 import { executeValidator } from "../util/validateConfig.mjs";
+import { validateWorkspaceConfig } from "../workspaceConfig/workspaceConfig.mjs";
 import { ROOT_CONFIG_ERRORS } from "./errors.mjs";
 
 const rootConfig_validateRootConfig = (config) =>
@@ -17,6 +18,11 @@ const rootConfig_validateRootConfig = (config) =>
 const createDefaultRootConfig = () => resolveRootConfig({});
 const resolveRootConfig = (config) => {
   rootConfig_validateRootConfig(config);
+  for (const entry of config.workspacePatternConfigs ?? []) {
+    if (typeof entry.config !== "function") {
+      validateWorkspaceConfig(entry.config);
+    }
+  }
   return {
     defaults: {
       parallelMax: determineParallelMax(
@@ -28,6 +34,7 @@ const resolveRootConfig = (config) => {
         config.defaults?.includeRootWorkspace ??
         getUserEnvVar("includeRootWorkspaceDefault") === "true",
     },
+    workspacePatternConfigs: config.workspacePatternConfigs ?? [],
   };
 };
 

package/src/config/rootConfig/rootConfigSchema.mjs

@@ -17,6 +17,25 @@ const ROOT_CONFIG_JSON_SCHEMA = {
         },
       },
     },
+    workspacePatternConfigs: {
+      type: "array",
+      items: {
+        type: "object",
+        additionalProperties: false,
+        required: ["patterns", "config"],
+        properties: {
+          patterns: {
+            type: "array",
+            items: {
+              type: "string",
+            },
+          },
+          // config may be a WorkspaceConfig object or a factory function (TS/JS configs only).
+          // Object form is validated separately via validateWorkspaceConfig after AJV.
+          config: {},
+        },
+      },
+    },
   },
 };
 let _validateSchemaType;

package/src/config/workspaceConfig/index.mjs

@@ -1,6 +1,7 @@
 export * from "./workspaceConfigSchema.mjs";
 export * from "./workspaceConfig.mjs";
 export * from "./loadWorkspaceConfig.mjs";
+export * from "./mergeWorkspaceConfig.mjs";
 export * from "./errors.mjs";
 
 export {};

package/src/config/workspaceConfig/mergeWorkspaceConfig.mjs

@@ -0,0 +1,75 @@
+import { resolveOptionalArray } from "../../internal/core/index.mjs";
+
+const uniqueArray = (arr) => [...new Set(arr)];
+const concatPatterns = (a, b) => {
+  if (!a?.length && !b?.length) return undefined;
+  return uniqueArray([...(a ?? []), ...(b ?? [])]);
+};
+const mergeWorkspaceDependenciesRule = (base, override) => {
+  if (!base && !override) return undefined;
+  const allowPatterns = concatPatterns(
+    base?.allowPatterns,
+    override?.allowPatterns,
+  );
+  const denyPatterns = concatPatterns(
+    base?.denyPatterns,
+    override?.denyPatterns,
+  );
+  return {
+    ...(allowPatterns && {
+      allowPatterns,
+    }),
+    ...(denyPatterns && {
+      denyPatterns,
+    }),
+  };
+};
+const mergeWorkspaceRules = (base, override) => {
+  const workspaceDependencies = mergeWorkspaceDependenciesRule(
+    base?.workspaceDependencies,
+    override?.workspaceDependencies,
+  );
+  return {
+    ...(workspaceDependencies && {
+      workspaceDependencies,
+    }),
+  };
+};
+const mergeScripts = (base, override) => {
+  if (!base && !override) return {};
+  if (!base) return override ?? {};
+  if (!override) return base;
+  const merged = {
+    ...base,
+  };
+  for (const [key, value] of Object.entries(override)) {
+    merged[key] = base[key]
+      ? {
+          ...base[key],
+          ...value,
+        }
+      : value;
+  }
+  return merged;
+};
+const applyConfig = (acc, config) => ({
+  alias: uniqueArray([
+    ...resolveOptionalArray(acc.alias ?? []),
+    ...resolveOptionalArray(config.alias ?? []),
+  ]),
+  tags: uniqueArray([...(acc.tags ?? []), ...(config.tags ?? [])]),
+  scripts: mergeScripts(acc.scripts, config.scripts),
+  rules: mergeWorkspaceRules(acc.rules, config.rules),
+});
+/** Merge two or more workspace configs left to right, with each subsequent config taking precedence.
+ * Any argument may be a factory function receiving the accumulated config up to that point. */ const mergeWorkspaceConfig =
+  (...configs) =>
+    configs.reduce((acc, configOrFactory) => {
+      const config =
+        typeof configOrFactory === "function"
+          ? configOrFactory(acc)
+          : configOrFactory;
+      return applyConfig(acc, config);
+    }, {});
+
+export { mergeWorkspaceConfig };

package/src/config/workspaceConfig/workspaceConfig.mjs

@@ -13,14 +13,6 @@ const workspaceConfig_validateWorkspaceConfig = (config) => {
     },
     WORKSPACE_CONFIG_ERRORS.InvalidWorkspaceConfig,
   );
-  if (
-    config.rules?.workspaceDependencies?.allowPatterns &&
-    config.rules?.workspaceDependencies?.denyPatterns
-  ) {
-    throw new WORKSPACE_CONFIG_ERRORS.InvalidWorkspaceConfig(
-      "Cannot use both allowPatterns and denyPatterns in workspaceDependencies rule",
-    );
-  }
 };
 const resolveWorkspaceConfig = (config) => {
   if (Array.isArray(config.aliases)) {

package/src/index.d.ts

@@ -28,7 +28,18 @@ export type ParallelMaxValue =
   | (typeof PARALLEL_MAX_VALUES)[number]
   | PercentageValue;
 export type WorkspaceDependenciesRule = {
+  /**
+   * Workspace patterns that are permitted as dependencies.
+   * Only workspaces matching these patterns are allowed.
+   * When combined with `denyPatterns`, the deny list further
+   * filters this allowed subset.
+   */
   allowPatterns?: string[];
+  /**
+   * Workspace patterns that are forbidden as dependencies.
+   * When combined with `allowPatterns`, this further filters
+   * the subset of allowed workspaces.
+   */
   denyPatterns?: string[];
 };
 export type WorkspaceRules = {
@@ -74,6 +85,30 @@ export type ResolvedWorkspaceConfig = {
   scripts: Record<string, ScriptConfig>;
   rules: WorkspaceRules;
 };
+/** Static workspace context passed to a {@link WorkspacePatternConfigFactory}.
+ * Contains only the immutable, package.json-derived fields — not config-derived fields like aliases or tags. */
+export type RawWorkspace = {
+  name: string;
+  isRoot: boolean;
+  path: string;
+  matchPattern: string;
+  scripts: string[];
+  dependencies: string[];
+  dependents: string[];
+};
+/** A factory that returns a {@link WorkspaceConfig} to merge for a matched workspace.
+ * Receives the static workspace context and the workspace's accumulated resolved config at that point. */
+export type WorkspacePatternConfigFactory = (
+  workspace: RawWorkspace,
+  prevConfig: ResolvedWorkspaceConfig,
+) => WorkspaceConfig;
+/** A single entry in {@link RootConfig.workspacePatternConfigs} */
+export type WorkspacePatternConfigEntry = {
+  /** Workspace patterns to match. Supports all workspace pattern specifiers (name, alias, tag, path, not:). */
+  patterns: string[];
+  /** Config to merge into all matching workspaces. May be a factory receiving the workspace context and accumulated config. */
+  config: WorkspaceConfig | WorkspacePatternConfigFactory;
+};
 export type RootConfig = {
   defaults?: {
     /** The maximum number of scripts that can run in parallel. (default: "auto") */
@@ -83,6 +118,14 @@ export type RootConfig = {
     /** Whether to include the root workspace in the workspaces list by default. (default: false) */
     includeRootWorkspace?: boolean;
   };
+  /**
+   * Workspace configs applied by pattern, in order, merging left to right,
+   * using any workspaces' local configs as the starting config.
+   * Each entry's config is merged into all workspaces matching its patterns.
+   * Pattern matching reflects accumulated aliases and tags from previous entries.
+   * Factory functions are only supported in TypeScript/JavaScript config files.
+   */
+  workspacePatternConfigs?: WorkspacePatternConfigEntry[];
 };
 export type ResolvedRootConfig = {
   defaults: {
@@ -91,6 +134,7 @@ export type ResolvedRootConfig = {
     /** `undefined` means the value was not set in the input config */
     includeRootWorkspace: boolean | undefined;
   };
+  workspacePatternConfigs: WorkspacePatternConfigEntry[];
 };
 export type OutputStreamName = "stdout" | "stderr";
 export type ProcessOutputChunk<
@@ -288,7 +332,7 @@ export type CreateFileSystemProjectOptions = {
 export type InlineScriptOptions = {
   /** A name to act as a label for the inline script */
   scriptName?: string;
-  /** Whether to run the script as an inline command */
+  /** Whether to use the system shell or Bun shell */
   shell?: ShellOption;
 };
 /** Arguments for `FileSystemProject.runWorkspaceScript` */
@@ -444,9 +488,23 @@ export declare const createMemoryProject: (
 export declare const defineRootConfig: (
   config: RootConfig,
 ) => ResolvedRootConfig;
+export type RootConfigFactory = (prev: RootConfig) => RootConfig;
+export type RootConfigInput = RootConfig | RootConfigFactory;
+/** Merge two or more root configs left to right, with each subsequent config taking precedence.
+ * Any argument may be a factory function receiving the accumulated config up to that point. */
+export declare const mergeRootConfig: (
+  ...configs: RootConfigInput[]
+) => RootConfig;
 export declare const defineWorkspaceConfig: (
   config: WorkspaceConfig,
 ) => ResolvedWorkspaceConfig;
+export type WorkspaceConfigFactory = (prev: WorkspaceConfig) => WorkspaceConfig;
+export type WorkspaceConfigInput = WorkspaceConfig | WorkspaceConfigFactory;
+/** Merge two or more workspace configs left to right, with each subsequent config taking precedence.
+ * Any argument may be a factory function receiving the accumulated config up to that point. */
+export declare const mergeWorkspaceConfig: (
+  ...configs: WorkspaceConfigInput[]
+) => WorkspaceConfig;
 declare const LOG_LEVELS: readonly ["debug", "info", "warn", "error"];
 export type LogLevel = (typeof LOG_LEVELS)[number];
 export type LogLevelSetting = LogLevel | "silent";

package/src/internal/generated/aiDocs/docs.mjs

@@ -199,10 +199,9 @@ project.runScriptAcrossWorkspaces({
 \`\`\``;
 const DOC_CONFIG = `## Root config
 
-Optional project config can be placed in \`bw.root.jsonc\`/\`bw.root.json\` in the root directory.
+Optional project config can be placed in \`bw.root.ts\`/\`bw.root.js\`/\`bw.root.jsonc\`/\`bw.root.json\` in the root directory, or in the \`"bw"\` key of \`package.json\`.
 
-Config defaults here take precedence over environment variables that can set defaults.
-Explicit arguments to the CLI or API take precedence over all other settings.
+Config defaults here take precedence over environment variables. Explicit CLI arguments or API options take precedence over all other settings.
 
 \`\`\`jsonc
 {
@@ -211,16 +210,33 @@ Explicit arguments to the CLI or API take precedence over all other settings.
     "shell": "system", // "bun" or "system" (default "bun")
     "includeRootWorkspace": true, // treat root package.json as a normal workspace
   },
+  "workspacePatternConfigs": [
+    // see Workspace Pattern Configs section below
+  ],
 }
 \`\`\`
 
+### mergeRootConfig
+
+\`mergeRootConfig\` merges multiple root configs left to right. Later configs take precedence for scalar fields. \`workspacePatternConfigs\` entries are concatenated. Any argument may be a factory function \`(prev: RootConfig) => RootConfig\`.
+
+\`\`\`ts
+import { mergeRootConfig } from "bun-workspaces/config";
+
+export default mergeRootConfig(
+  { defaults: { parallelMax: 4 } },
+  { defaults: { shell: "system" } },
+  (prevConfig) => ({ defaults: { includeRootWorkspace: true } }),
+);
+\`\`\`
+
 ## Workspace config
 
-Optional config can be placed in \`bw.workspace.jsonc\`/\`bw.workspace.json\` in a workspace directory.
+Optional config can be placed in \`bw.workspace.ts\`/\`bw.workspace.js\`/\`bw.workspace.jsonc\`/\`bw.workspace.json\` in a workspace directory, or in the \`"bw"\` key of \`package.json\`.
 
-Aliases must be unique to each workspace and to not clash with other workspaces' \`package.json\` names.
+Aliases must be unique to each workspace and must not clash with other workspaces' \`package.json\` names.
 
-Tags are strings to group workspaces together that therefore don't need to be unique to each workspace.
+Tags are strings to group workspaces together; they do not need to be unique.
 
 \`\`\`jsonc
 {
@@ -234,10 +250,11 @@ Tags are strings to group workspaces together that therefore don't need to be un
   },
   "rules": {
     "workspaceDependencies": {
-      // use workspace patterns to allow or deny other workspaces as dependencies
+      // allowPatterns: only workspaces matching these patterns are permitted as dependencies
       "allowPatterns": ["my-allow-pattern-*"],
-      // or
-      // "denyPatterns": ["my-deny-pattern-*"],
+      // denyPatterns: workspaces matching these patterns are forbidden as dependencies.
+      // When combined with allowPatterns, deny filters within the allowed subset.
+      "denyPatterns": ["my-deny-pattern-*"],
     },
   },
 }
@@ -245,16 +262,77 @@ Tags are strings to group workspaces together that therefore don't need to be un
 
 ### Workspace Dependency Rules
 
-Using the \`rules.workspaceDependencies\` field, you can define rules for which workspaces are allowed to be dependencies,
-using either \`allowPatterns\` or \`denyPatterns\`.
+Using the \`rules.workspaceDependencies\` field, you can define rules for which workspaces are allowed to be dependencies, using \`allowPatterns\`, \`denyPatterns\`, or both.
+
+\`allowPatterns\` defines the permitted subset of dependencies. \`denyPatterns\` forbids specific dependencies. When both are present, \`denyPatterns\` further filters within the subset permitted by \`allowPatterns\`.
 
 Workspace Patterns are used to match workspaces.
 
-You can't use both \`allowPatterns\` and \`denyPatterns\` at the same time, but you can use
+### mergeWorkspaceConfig
 
-## TypeScript/JSON Config Files
+\`mergeWorkspaceConfig\` merges multiple workspace configs left to right. Arrays (\`alias\`, \`tags\`, \`allowPatterns\`, \`denyPatterns\`) are concatenated and deduplicated. Scalar fields later wins. \`scripts\` are deep-merged per key. Any argument may be a factory function \`(prev: WorkspaceConfig) => WorkspaceConfig\`.
+
+\`\`\`ts
+import { mergeWorkspaceConfig } from "bun-workspaces/config";
+
+export default mergeWorkspaceConfig(
+  { alias: "a", tags: ["x"] },
+  { alias: "b", scripts: { build: { order: 1 } } },
+  (prevConfig) => ({ tags: ["y"] }),
+);
+// result: { alias: ["a", "b"], tags: ["x", "y"], scripts: { build: { order: 1 } } }
+\`\`\`
+
+## Workspace Pattern Configs
+
+The root config's \`workspacePatternConfigs\` field applies workspace configs to groups of workspaces matched by [workspace patterns](/concepts/workspace-patterns). Entries are applied in order, left to right.
+
+Each entry's \`config\` is merged into the accumulated config of all matching workspaces using the same semantics as \`mergeWorkspaceConfig\`. The local workspace config (from \`bw.workspace.*\` or \`package.json\`) is always the starting base.
+
+Pattern matching reflects the accumulated state: aliases and tags added by earlier entries are visible to later entries' patterns.
 
-You can use TypeScript/JSON config files to define your workspace configuration.
+\`\`\`ts
+import { defineRootConfig } from "bun-workspaces/config";
+
+export default defineRootConfig({
+  workspacePatternConfigs: [
+    {
+      patterns: ["path:packages/apps/**/*"],
+      config: { tags: ["app"] },
+    },
+    {
+      // "tag:app" matches because the entry above added it
+      patterns: ["tag:app"],
+      config: {
+        rules: { workspaceDependencies: { allowPatterns: ["tag:lib"] } },
+      },
+    },
+    {
+      patterns: ["tag:app"],
+      // Factory form: JS/TS only — receives static workspace data and accumulated config
+      config: (workspace, prevConfig) => ({
+        alias: workspace.name.replace(/^@my-scope\\//, ""),
+      }),
+    },
+  ],
+});
+\`\`\`
+
+### Factory function context (\`RawWorkspace\`)
+
+The factory \`(workspace: RawWorkspace, prevConfig: ResolvedWorkspaceConfig) => WorkspaceConfig\` receives:
+
+- \`workspace.name\` — package name from package.json
+- \`workspace.isRoot\` — whether this is the root workspace
+- \`workspace.path\` — relative path from project root
+- \`workspace.matchPattern\` — glob from root package.json \`workspaces\` field that matched
+- \`workspace.scripts\` — sorted list of script names from package.json
+- \`workspace.dependencies\` — names of workspace dependencies
+- \`workspace.dependents\` — names of workspaces that depend on this one
+
+\`prevConfig\` is the fully resolved workspace config at that point, including the local config and any configs applied by earlier pattern entries. It has \`aliases: string[]\`, \`tags: string[]\`, \`scripts: Record<string, ScriptConfig>\`, \`rules: WorkspaceRules\`.
+
+## TypeScript/JSON Config Files
 
 ### TypeScript
 

package/src/internal/generated/ajv/validateRootConfig.mjs

@@ -1 +1 @@
-"use strict";module.exports = validate11;module.exports.default = validate11;const schema12 = {"type":"object","additionalProperties":false,"properties":{"defaults":{"type":"object","additionalProperties":false,"properties":{"parallelMax":{"type":["number","string"]},"shell":{"type":"string"},"includeRootWorkspace":{"type":"boolean"}}}}};function validate11(data, {instancePath="", parentData, parentDataProperty, rootData=data}={}){let vErrors = null;let errors = 0;if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(key0 === "defaults")){validate11.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.defaults !== undefined){let data0 = data.defaults;const _errs2 = errors;if(errors === _errs2){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){const _errs4 = errors;for(const key1 in data0){if(!(((key1 === "parallelMax") || (key1 === "shell")) || (key1 === "includeRootWorkspace"))){validate11.errors = [{instancePath:instancePath+"/defaults",schemaPath:"#/properties/defaults/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs4 === errors){if(data0.parallelMax !== undefined){let data1 = data0.parallelMax;const _errs5 = errors;if((!((typeof data1 == "number") && (isFinite(data1)))) && (typeof data1 !== "string")){validate11.errors = [{instancePath:instancePath+"/defaults/parallelMax",schemaPath:"#/properties/defaults/properties/parallelMax/type",keyword:"type",params:{type: schema12.properties.defaults.properties.parallelMax.type},message:"must be number,string"}];return false;}var valid1 = _errs5 === errors;}else {var valid1 = true;}if(valid1){if(data0.shell !== undefined){const _errs7 = errors;if(typeof data0.shell !== "string"){validate11.errors = [{instancePath:instancePath+"/defaults/shell",schemaPath:"#/properties/defaults/properties/shell/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs7 === errors;}else {var valid1 = true;}if(valid1){if(data0.includeRootWorkspace !== undefined){const _errs9 = errors;if(typeof data0.includeRootWorkspace !== "boolean"){validate11.errors = [{instancePath:instancePath+"/defaults/includeRootWorkspace",schemaPath:"#/properties/defaults/properties/includeRootWorkspace/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid1 = _errs9 === errors;}else {var valid1 = true;}}}}}else {validate11.errors = [{instancePath:instancePath+"/defaults",schemaPath:"#/properties/defaults/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}}}}else {validate11.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate11.errors = vErrors;return errors === 0;}
+"use strict";module.exports = validate11;module.exports.default = validate11;const schema12 = {"type":"object","additionalProperties":false,"properties":{"defaults":{"type":"object","additionalProperties":false,"properties":{"parallelMax":{"type":["number","string"]},"shell":{"type":"string"},"includeRootWorkspace":{"type":"boolean"}}},"workspacePatternConfigs":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["patterns","config"],"properties":{"patterns":{"type":"array","items":{"type":"string"}},"config":{}}}}}};function validate11(data, {instancePath="", parentData, parentDataProperty, rootData=data}={}){let vErrors = null;let errors = 0;if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!((key0 === "defaults") || (key0 === "workspacePatternConfigs"))){validate11.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.defaults !== undefined){let data0 = data.defaults;const _errs2 = errors;if(errors === _errs2){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){const _errs4 = errors;for(const key1 in data0){if(!(((key1 === "parallelMax") || (key1 === "shell")) || (key1 === "includeRootWorkspace"))){validate11.errors = [{instancePath:instancePath+"/defaults",schemaPath:"#/properties/defaults/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs4 === errors){if(data0.parallelMax !== undefined){let data1 = data0.parallelMax;const _errs5 = errors;if((!((typeof data1 == "number") && (isFinite(data1)))) && (typeof data1 !== "string")){validate11.errors = [{instancePath:instancePath+"/defaults/parallelMax",schemaPath:"#/properties/defaults/properties/parallelMax/type",keyword:"type",params:{type: schema12.properties.defaults.properties.parallelMax.type},message:"must be number,string"}];return false;}var valid1 = _errs5 === errors;}else {var valid1 = true;}if(valid1){if(data0.shell !== undefined){const _errs7 = errors;if(typeof data0.shell !== "string"){validate11.errors = [{instancePath:instancePath+"/defaults/shell",schemaPath:"#/properties/defaults/properties/shell/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs7 === errors;}else {var valid1 = true;}if(valid1){if(data0.includeRootWorkspace !== undefined){const _errs9 = errors;if(typeof data0.includeRootWorkspace !== "boolean"){validate11.errors = [{instancePath:instancePath+"/defaults/includeRootWorkspace",schemaPath:"#/properties/defaults/properties/includeRootWorkspace/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid1 = _errs9 === errors;}else {var valid1 = true;}}}}}else {validate11.errors = [{instancePath:instancePath+"/defaults",schemaPath:"#/properties/defaults/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.workspacePatternConfigs !== undefined){let data4 = data.workspacePatternConfigs;const _errs11 = errors;if(errors === _errs11){if(Array.isArray(data4)){var valid2 = true;const len0 = data4.length;for(let i0=0; i0<len0; i0++){let data5 = data4[i0];const _errs13 = errors;if(errors === _errs13){if(data5 && typeof data5 == "object" && !Array.isArray(data5)){let missing0;if(((data5.patterns === undefined) && (missing0 = "patterns")) || ((data5.config === undefined) && (missing0 = "config"))){validate11.errors = [{instancePath:instancePath+"/workspacePatternConfigs/" + i0,schemaPath:"#/properties/workspacePatternConfigs/items/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs15 = errors;for(const key2 in data5){if(!((key2 === "patterns") || (key2 === "config"))){validate11.errors = [{instancePath:instancePath+"/workspacePatternConfigs/" + i0,schemaPath:"#/properties/workspacePatternConfigs/items/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs15 === errors){if(data5.patterns !== undefined){let data6 = data5.patterns;const _errs16 = errors;if(errors === _errs16){if(Array.isArray(data6)){var valid4 = true;const len1 = data6.length;for(let i1=0; i1<len1; i1++){const _errs18 = errors;if(typeof data6[i1] !== "string"){validate11.errors = [{instancePath:instancePath+"/workspacePatternConfigs/" + i0+"/patterns/" + i1,schemaPath:"#/properties/workspacePatternConfigs/items/properties/patterns/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs18 === errors;if(!valid4){break;}}}else {validate11.errors = [{instancePath:instancePath+"/workspacePatternConfigs/" + i0+"/patterns",schemaPath:"#/properties/workspacePatternConfigs/items/properties/patterns/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}}}}}else {validate11.errors = [{instancePath:instancePath+"/workspacePatternConfigs/" + i0,schemaPath:"#/properties/workspacePatternConfigs/items/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid2 = _errs13 === errors;if(!valid2){break;}}}else {validate11.errors = [{instancePath:instancePath+"/workspacePatternConfigs",schemaPath:"#/properties/workspacePatternConfigs/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs11 === errors;}else {var valid0 = true;}}}}else {validate11.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate11.errors = vErrors;return errors === 0;}

package/src/project/implementations/fileSystemProject.mjs

@@ -111,6 +111,7 @@ class _FileSystemProject extends ProjectBase {
         options.includeRootWorkspace ??
         rootConfig.defaults.includeRootWorkspace ??
         getUserEnvVar("includeRootWorkspaceDefault") === "true",
+      workspacePatternConfigs: rootConfig.workspacePatternConfigs,
     });
     this.rootWorkspace = rootWorkspace;
     this.workspaces = workspaces;

package/src/runScript/public.d.ts

@@ -0,0 +1,40 @@
+// Generated by dts-bundle-generator v9.5.1
+
+declare const SCRIPT_RUNTIME_METADATA_CONFIG: {
+  readonly projectPath: {
+    readonly inlineName: "<projectPath>";
+    readonly envVarName: "BW_PROJECT_PATH";
+  };
+  readonly projectName: {
+    readonly inlineName: "<projectName>";
+    readonly envVarName: "BW_PROJECT_NAME";
+  };
+  readonly workspacePath: {
+    readonly inlineName: "<workspacePath>";
+    readonly envVarName: "BW_WORKSPACE_PATH";
+  };
+  readonly workspaceRelativePath: {
+    readonly inlineName: "<workspaceRelativePath>";
+    readonly envVarName: "BW_WORKSPACE_RELATIVE_PATH";
+  };
+  readonly scriptName: {
+    readonly inlineName: "<scriptName>";
+    readonly envVarName: "BW_SCRIPT_NAME";
+  };
+  readonly workspaceName: {
+    readonly inlineName: "<workspaceName>";
+    readonly envVarName: "BW_WORKSPACE_NAME";
+  };
+};
+export type ScriptRuntimeMetadataKey =
+  keyof typeof SCRIPT_RUNTIME_METADATA_CONFIG;
+/**
+ * This is a utility to run from a workspace's script that was called via `bun-workspaces`.
+ *
+ * It gets the value of some metadata value about the project, workspace, or script that was invoked.
+ */
+export declare const getWorkspaceScriptMetadata: (
+  key: ScriptRuntimeMetadataKey,
+) => string;
+
+export {};

package/src/runScript/public.mjs

@@ -0,0 +1 @@
+export { getWorkspaceScriptMetadata } from "./scriptRuntimeMetadata.mjs";

package/src/runScript/scriptRuntimeMetadata.mjs

@@ -1,4 +1,4 @@
-import { IS_WINDOWS } from "../internal/core/index.mjs";
+import { BunWorkspacesError, IS_WINDOWS } from "../internal/core/index.mjs";
 import { getScriptRuntimeMetadataConfig } from "../1108.mjs";
 
 const createScriptRuntimeEnvVars = (metadata) => {
@@ -39,5 +39,22 @@ const interpolateScriptRuntimeMetadata = (text, metadata, shell) => {
     return value;
   });
 };
+/**
+ * This is a utility to run from a workspace's script that was called via `bun-workspaces`.
+ *
+ * It gets the value of some metadata value about the project, workspace, or script that was invoked.
+ */ const getWorkspaceScriptMetadata = (key) => {
+  const { envVarName } = getScriptRuntimeMetadataConfig(key);
+  if (!(envVarName in process.env)) {
+    throw new BunWorkspacesError(
+      `getScriptMetadata() called with key "${key}" but environment variable ${envVarName} is not set. getScriptMetadata() may not have been called in a workspace script running via bun-workspaces.`,
+    );
+  }
+  return process.env[envVarName];
+};
 
-export { createScriptRuntimeEnvVars, interpolateScriptRuntimeMetadata };
+export {
+  createScriptRuntimeEnvVars,
+  getWorkspaceScriptMetadata,
+  interpolateScriptRuntimeMetadata,
+};

package/src/workspaces/applyWorkspacePatternConfigs.mjs

@@ -0,0 +1,58 @@
+import {
+  mergeWorkspaceConfig,
+  resolveWorkspaceConfig,
+} from "../config/index.mjs";
+import { matchWorkspacesByPatterns } from "./workspacePattern.mjs";
+
+const resolvedToWorkspaceConfig = ({ aliases, tags, scripts, rules }) => ({
+  alias: aliases,
+  tags,
+  scripts,
+  rules,
+});
+const makeContext = (workspace) => ({
+  name: workspace.name,
+  isRoot: workspace.isRoot,
+  path: workspace.path,
+  matchPattern: workspace.matchPattern,
+  scripts: workspace.scripts,
+  dependencies: workspace.dependencies,
+  dependents: workspace.dependents,
+});
+const applyWorkspacePatternConfigs = (
+  workspaces,
+  workspaceMap,
+  workspaceAliases,
+  patternConfigs,
+) => {
+  for (const entry of patternConfigs) {
+    const matched = matchWorkspacesByPatterns(entry.patterns, workspaces);
+    for (const workspace of matched) {
+      const mapEntry = workspaceMap[workspace.name];
+      const prevConfig = mapEntry.config;
+      const configToMerge =
+        typeof entry.config === "function"
+          ? entry.config(makeContext(workspace), prevConfig)
+          : entry.config;
+      const resolved = resolveWorkspaceConfig(
+        mergeWorkspaceConfig(
+          resolvedToWorkspaceConfig(prevConfig),
+          configToMerge,
+        ),
+      );
+      // Register any new aliases for validation
+      const previousAliases = new Set(workspace.aliases);
+      for (const alias of resolved.aliases) {
+        if (!previousAliases.has(alias)) {
+          workspaceAliases[alias] = workspace.name;
+        }
+      }
+      // Update workspace object so subsequent pattern entries see accumulated aliases/tags
+      workspace.aliases = resolved.aliases;
+      workspace.tags = resolved.tags;
+      mapEntry.config = resolved;
+    }
+  }
+};
+
+export { applyWorkspacePatternConfigs };

package/src/workspaces/dependencyGraph/validateDependencyRules.mjs

@@ -32,16 +32,6 @@ const validateWorkspaceDependencyRules = ({ workspaceMap }) => {
       const depWorkspace = workspaceMap[depName]?.workspace;
       if (!depWorkspace) continue;
       const chainStr = chain.join(" -> ");
-      if (rule.denyPatterns) {
-        const isDenied =
-          matchWorkspacesByPatterns(rule.denyPatterns, [depWorkspace]).length >
-          0;
-        if (isDenied) {
-          violations.push(
-            `"${workspaceName}" violates workspaceDependencies rule: workspace "${depName}" is denied by denyPatterns (dependency chain: ${chainStr})`,
-          );
-        }
-      }
       if (rule.allowPatterns) {
         const isAllowed =
           matchWorkspacesByPatterns(rule.allowPatterns, [depWorkspace]).length >
@@ -50,6 +40,17 @@ const validateWorkspaceDependencyRules = ({ workspaceMap }) => {
           violations.push(
             `"${workspaceName}" violates workspaceDependencies rule: workspace "${depName}" is not permitted by allowPatterns (dependency chain: ${chainStr})`,
           );
+          continue;
+        }
+      }
+      if (rule.denyPatterns) {
+        const isDenied =
+          matchWorkspacesByPatterns(rule.denyPatterns, [depWorkspace]).length >
+          0;
+        if (isDenied) {
+          violations.push(
+            `"${workspaceName}" violates workspaceDependencies rule: workspace "${depName}" is denied by denyPatterns (dependency chain: ${chainStr})`,
+          );
         }
       }
     }

package/src/workspaces/findWorkspaces.mjs

@@ -8,6 +8,7 @@ import {
 import { BUN_LOCK_ERRORS, readBunLockfile } from "../internal/bun/index.mjs";
 import { BunWorkspacesError } from "../internal/core/index.mjs";
 import { logger } from "../internal/logger/logger.mjs";
+import { applyWorkspacePatternConfigs } from "./applyWorkspacePatternConfigs.mjs";
 import {
   resolveWorkspaceDependencies,
   validateWorkspaceDependencyRules,
@@ -65,6 +66,7 @@ const findWorkspaces = ({
   rootDirectory,
   workspaceGlobs: _workspaceGlobs,
   includeRootWorkspace = false,
+  workspacePatternConfigs,
 }) => {
   rootDirectory = path.resolve(rootDirectory);
   logger.debug(`Finding workspaces in ${rootDirectory}`);
@@ -169,6 +171,14 @@ const findWorkspaces = ({
       bunCatalogs,
     ),
   );
+  if (workspacePatternConfigs?.length) {
+    applyWorkspacePatternConfigs(
+      workspaces,
+      workspaceMap,
+      workspaceAliases,
+      workspacePatternConfigs,
+    );
+  }
   validateWorkspaceDependencyRules({
     workspaceMap,
   });