@afterpack/esbuild 0.1.0 → 0.2.0-rc.20260930T1421

package/README.md

@@ -28,8 +28,9 @@ Both `outdir` and `outfile` work. Builds with `write: false`, and builds that al
 skipped. If obfuscation fails, the build fails.
 
 esbuild has no hook to change output before it is written, so the plugin obfuscates the files right
-after esbuild writes them. For a few milliseconds the readable files are on disk, and a failed run
-leaves them there. If that matters to you, use a bundler with an in-memory plugin, such as
+after esbuild writes them. Until the pass finishes (about a quarter of a second for 185 KB at the
+default preset, longer at higher presets) the readable files are on disk, and a failed run leaves
+them there. If that matters to you, use a bundler with an in-memory plugin, such as
 [`@afterpack/vite`](https://www.npmjs.com/package/@afterpack/vite) or
 [`@afterpack/rollup`](https://www.npmjs.com/package/@afterpack/rollup).
 
@@ -64,12 +65,14 @@ other option is in the [configuration reference](https://www.afterpack.dev/docs/
 [protectionMap.enabled]: https://www.afterpack.dev/docs/config#protectionMap-enabled
 [build.autorun]: https://www.afterpack.dev/docs/config#build-autorun
 
-`/* @afterpack */` directives need esbuild's `sourcemap: true`, since they are read back from the
-source map. Without it, the plugin skips them and tells you.
+`/* @afterpack */` [directives](https://www.afterpack.dev/docs/directives) that raise protection for
+a region are a [Pro](https://www.afterpack.dev/docs/pro) feature. They need esbuild's
+`sourcemap: true`, since they are read back from the source map. Without it, the plugin skips them
+and tells you.
 
 The [Protection Map](https://www.afterpack.dev/docs/protection-map) is written to `.afterpack/`,
-and the plugin adds its local artifacts to your `.gitignore`. The Protection Map and any backups
-contain your original source, so never deploy or commit them.
+which carries its own `.gitignore` and self-ignores. The Protection Map and any backups contain
+your original source, so never deploy or commit them.
 
 Options can also live in `afterpack.json` or in `AFTERPACK_*` environment variables. The options
 object wins over the environment, which wins over the file. An unknown or misspelled key fails the
@@ -77,11 +80,12 @@ build and names the right spelling.
 
 ## Pro
 
-Without a key, AfterPack runs on your machine and applies basic protection. Set
+Without a key, AfterPack runs on your machine with the full pipeline at any preset. Set
 [`AFTERPACK_KEY`](https://www.afterpack.dev/docs/config#key) in your environment and the same plugin
-sends the build to AfterPack's cloud, which applies much stronger protection. Keep the key out of
-your build script: the plugin rejects it there. See [AfterPack
-Pro](https://www.afterpack.dev/docs/pro).
+builds in AfterPack's cloud instead, which adds per-region
+[directives](https://www.afterpack.dev/docs/directives) and two hardening transforms you can turn
+on: self-integrity (anti-tamper) and comparison hardening. Keep the key out of your build script:
+the plugin rejects it there. See [AfterPack Pro](https://www.afterpack.dev/docs/pro).
 
 ## Links
 

package/dist/index.cjs

@@ -77,7 +77,7 @@ function afterpackEsbuild(options = {}) {
 					client: (0, __afterpack_integration_utils.resolveClientIdentity)(require("url").pathToFileURL(__filename).href),
 					telemetry: (0, __afterpack_integration_utils.createTelemetryReporter)(),
 					label: "afterpack-esbuild",
-					gitignoreDir: cwd,
+					cwd,
 					startedAt: startedBeforeOutputWalk,
 					combinedProtectionMap: {
 						buildDir,

package/dist/index.js

@@ -54,7 +54,7 @@ function afterpackEsbuild(options = {}) {
 					client: resolveClientIdentity(import.meta.url),
 					telemetry: createTelemetryReporter(),
 					label: "afterpack-esbuild",
-					gitignoreDir: cwd,
+					cwd,
 					startedAt: startedBeforeOutputWalk,
 					combinedProtectionMap: {
 						buildDir,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@afterpack/esbuild",
-  "version": "0.1.0",
+  "version": "0.2.0-rc.20260930T1421",
   "description": "esbuild plugin for AfterPack: obfuscate your JavaScript output when the esbuild build finishes",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -28,8 +28,8 @@
     "esbuild": ">=0.17.0"
   },
   "dependencies": {
-    "@afterpack/core": "~0.1.0",
-    "@afterpack/integration-utils": "0.1.0"
+    "@afterpack/core": "~0.2.0",
+    "@afterpack/integration-utils": "0.2.0-rc.20260930T1421"
   },
   "devDependencies": {
     "@biomejs/biome": "2.4.4",