From 9318a8a6da76c931899ffbc59e4b393c6b1767ca Mon Sep 17 00:00:00 2001
From: suraj-markup <suraj@composio.dev>
Date: Fri, 22 May 2026 05:22:38 +0530
Subject: [PATCH] fix(canary): harden publishable package scan

---
 .github/workflows/canary.yml | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml
index 24ac28f69..9cdfe5dce 100644
--- a/.github/workflows/canary.yml
+++ b/.github/workflows/canary.yml
@@ -118,15 +118,18 @@ jobs:
               const addPackage = (m) => {
                 if (!fs.existsSync(m)) return;
                 const d = JSON.parse(fs.readFileSync(m, 'utf8'));
-                if (d.publishConfig?.access === 'public') pkgs.push(d.name);
+                if (!d.private && d.publishConfig?.access === 'public') pkgs.push(d.name);
               };
 
-              for (const entry of fs.readdirSync('packages', { withFileTypes: true })) {
-                if (entry.isDirectory()) addPackage(`packages/${entry.name}/package.json`);
-              }
-              for (const entry of fs.readdirSync('packages/plugins', { withFileTypes: true })) {
-                if (entry.isDirectory()) addPackage(`packages/plugins/${entry.name}/package.json`);
-              }
+              const scanPackages = (dir) => {
+                if (!fs.existsSync(dir)) return;
+                for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+                  if (entry.isDirectory()) addPackage(`${dir}/${entry.name}/package.json`);
+                }
+              };
+
+              scanPackages('packages');
+              scanPackages('packages/plugins');
 
               let body = '---\n';
               pkgs.forEach(p => body += '"' + p + '": patch\n');