---
description: Cross-repo health audit — verify pnpm config, Dockerfiles, next.config.ts, and workspace consistency
---

# Cross-Repo Health Audit

Systematically verify consistency across all ByteLyst product repos. Catches drift in pnpm config, Dockerfiles, next.config.ts, and workspace setup.

**Run this after:** pnpm migrations, Dockerfile changes, @bytelyst/\* package additions, or periodic maintenance.

## 1. Check packageManager field in all root package.json files

// turbo

```bash
REPOS_DIR="/Users/sd9235/code/mygh"
echo "=== packageManager in root package.json ==="
while IFS= read -r repo; do
  [[ -z "$repo" || "$repo" =~ ^# ]] && continue
  [[ ! -f "$REPOS_DIR/$repo/package.json" ]] && continue
  printf "%-40s " "$repo:"
  grep '"packageManager"' "$REPOS_DIR/$repo/package.json" 2>/dev/null || echo "MISSING"
done < /Users/sd9235/code/mygh/learning_ai_common_plat/.windsurf/workflows/repos.txt
```

Expect: all repos show `"packageManager": "pnpm@10.6.5"`. Fix any MISSING entries.

## 2. Check node_modules in .gitignore

// turbo

```bash
REPOS_DIR="/Users/sd9235/code/mygh"
echo "=== node_modules in .gitignore ==="
while IFS= read -r repo; do
  [[ -z "$repo" || "$repo" =~ ^# ]] && continue
  [[ ! -f "$REPOS_DIR/$repo/.gitignore" ]] && continue
  printf "%-40s " "$repo:"
  grep -c 'node_modules' "$REPOS_DIR/$repo/.gitignore" 2>/dev/null || echo "MISSING"
done < /Users/sd9235/code/mygh/learning_ai_common_plat/.windsurf/workflows/repos.txt
```

Expect: all repos have at least 1 match. Fix any with 0 or MISSING.

## 3. Check .dockerignore exists and does NOT exclude .docker-deps

// turbo

```bash
REPOS_DIR="/Users/sd9235/code/mygh"
echo "=== .dockerignore health ==="
while IFS= read -r repo; do
  [[ -z "$repo" || "$repo" =~ ^# ]] && continue
  di="$REPOS_DIR/$repo/.dockerignore"
  if [ ! -f "$di" ]; then
    echo "$repo: MISSING .dockerignore"
  elif grep -q 'docker-deps' "$di"; then
    echo "$repo: BUG — .dockerignore excludes .docker-deps"
  else
    echo "$repo: OK"
  fi
done < /Users/sd9235/code/mygh/learning_ai_common_plat/.windsurf/workflows/repos.txt
```

Expect: all OK (repos without .dockerignore are skipped). Any BUG entries will break Docker builds.

## 4. Check stale package-lock.json files

// turbo

```bash
REPOS_DIR="/Users/sd9235/code/mygh"
echo "=== Stale package-lock.json ==="
while IFS= read -r repo; do
  [[ -z "$repo" || "$repo" =~ ^# ]] && continue
  found=$(find "$REPOS_DIR/$repo" -name "package-lock.json" -not -path "*/node_modules/*" 2>/dev/null)
  if [ -n "$found" ]; then echo "STALE: $found"; fi
done < /Users/sd9235/code/mygh/learning_ai_common_plat/.windsurf/workflows/repos.txt
echo "(empty = all clean)"
```

Expect: no output. Remove any stale lockfiles found.

## 5. Check Dockerfiles use node:22-slim and have NODE_TLS

// turbo

```bash
REPOS_DIR="/Users/sd9235/code/mygh"
echo "=== Dockerfile base image + NODE_TLS ==="
while IFS= read -r repo; do
  [[ -z "$repo" || "$repo" =~ ^# ]] && continue
  for df in $(git -C "$REPOS_DIR/$repo" ls-files '*/Dockerfile' 'Dockerfile' 2>/dev/null); do
    full="$REPOS_DIR/$repo/$df"
    base=$(grep -m1 '^FROM' "$full" | awk '{print $2}')
    tls=$(grep -c 'NODE_TLS_REJECT_UNAUTHORIZED' "$full" 2>/dev/null)
    status="OK"
    [[ "$base" == *alpine* ]] && status="WARN:alpine"
    [[ "$tls" == "0" && "$df" != *python* ]] && status="$status WARN:no-NODE_TLS"
    echo "$repo/$df: base=$base tls=$tls $status"
  done
done < /Users/sd9235/code/mygh/learning_ai_common_plat/.windsurf/workflows/repos.txt
```

Expect: all use `node:22-slim`, all have `NODE_TLS` refs > 0. Fix any WARN entries.

## 6. Check next.config.ts has transpilePackages + symlinks

// turbo

```bash
REPOS_DIR="/Users/sd9235/code/mygh"
echo "=== next.config.ts: transpilePackages + symlinks ==="
while IFS= read -r repo; do
  [[ -z "$repo" || "$repo" =~ ^# ]] && continue
  for cfg in $(find "$REPOS_DIR/$repo" -maxdepth 3 -name "next.config.ts" -not -path "*/node_modules/*" 2>/dev/null); do
    relpath="${cfg#$REPOS_DIR/}"
    tp=$(grep -c 'transpilePackages' "$cfg")
    sl=$(grep -c 'symlinks' "$cfg")
    status="OK"
    [[ "$tp" == "0" ]] && status="MISSING:transpilePackages"
    [[ "$sl" == "0" ]] && status="$status MISSING:symlinks"
    echo "$relpath: transpile=$tp symlinks=$sl $status"
  done
done < /Users/sd9235/code/mygh/learning_ai_common_plat/.windsurf/workflows/repos.txt
```

Expect: all show transpile>0 and symlinks>0. Fix any MISSING entries.

## 7. Check pnpm-workspace.yaml includes common-plat packages

// turbo

```bash
REPOS_DIR="/Users/sd9235/code/mygh"
echo "=== pnpm-workspace.yaml includes common-plat ==="
while IFS= read -r repo; do
  [[ -z "$repo" || "$repo" =~ ^# ]] && continue
  ws="$REPOS_DIR/$repo/pnpm-workspace.yaml"
  [[ ! -f "$ws" ]] && continue
  if [ ! -f "$ws" ]; then
    echo "$repo: MISSING pnpm-workspace.yaml"
  elif grep -q 'common_plat' "$ws"; then
    echo "$repo: OK"
  else
    echo "$repo: MISSING common-plat in workspace"
  fi
done < /Users/sd9235/code/mygh/learning_ai_common_plat/.windsurf/workflows/repos.txt
```

Expect: all OK (repos without pnpm-workspace.yaml are skipped). Fix any MISSING entries.

## 8. Check docker-prep.sh uses shared prep-consumer

// turbo

```bash
REPOS_DIR="/Users/sd9235/code/mygh"
echo "=== docker-prep.sh uses shared prep-consumer ==="
while IFS= read -r repo; do
  [[ -z "$repo" || "$repo" =~ ^# ]] && continue
  script="$REPOS_DIR/$repo/scripts/docker-prep.sh"
  if [ ! -f "$script" ]; then
    echo "$repo: NO docker-prep.sh"
  elif grep -q 'prep-consumer' "$script"; then
    echo "$repo: OK (shared wrapper)"
  else
    echo "$repo: WARN — legacy docker-prep.sh"
  fi
done < /Users/sd9235/code/mygh/learning_ai_common_plat/.windsurf/workflows/repos.txt
```

Expect: all OK (repos without docker-prep.sh are skipped). Legacy scripts should be replaced with the shared wrapper.

## 9. Check verify scripts reference correct package filter names

// turbo

```bash
REPOS_DIR="/Users/sd9235/code/mygh"
echo "=== Root verify scripts ==="
while IFS= read -r repo; do
  [[ -z "$repo" || "$repo" =~ ^# ]] && continue
  [[ ! -f "$REPOS_DIR/$repo/package.json" ]] && continue
  printf "%-40s " "$repo:"
  node -e "const p=require('$REPOS_DIR/$repo/package.json'); console.log(p.scripts?.verify || 'NONE')" 2>/dev/null
done < /Users/sd9235/code/mygh/learning_ai_common_plat/.windsurf/workflows/repos.txt
```

Review output manually — ensure `--filter` names match actual package names in sub-packages.

## 10. Summarize findings and fix

For each issue found:

1. Fix the file in the affected repo
2. Commit with message: `fix(repo): <description of fix>`
3. Push to origin

Run `/gitea-ci` after all fixes to verify full CI passes.