@afterpack/next 0.2.0-rc.20260930T1421 → 0.2.1

package/README.md

@@ -32,8 +32,8 @@ and if obfuscation fails, `next build` fails.
 
 AfterPack obfuscates the client chunks in `.next/static/chunks`. With `output: "export"`, the
 obfuscated chunks are what lands in `out/`. Server code in `.next/server` never reaches the browser
-and is left as is. The plugin also removes `.js.map` files from the client output, since a served
-source map gives your source away.
+and is left as is. The plugin also removes the `.js.map` and `.css.map` files from `.next/static`, and
+the comments that point at them, since a served source map gives your source away.
 
 ## Check a deploy
 

package/dist/index.cjs

@@ -45,27 +45,28 @@ function detectBundler(distDir) {
 	if ((0, node_fs.existsSync)((0, node_path.join)(distDir, "server", "webpack-runtime.js"))) return "webpack";
 	return "unknown";
 }
-function stripDanglingTrailer(js) {
+function stripTrailer(path, strip) {
 	try {
-		const code = (0, node_fs.readFileSync)(js, "utf8");
-		const stripped = (0, __afterpack_integration_utils.withSourceMappingURL)(code, null);
+		const code = (0, node_fs.readFileSync)(path, "utf8");
+		const stripped = strip(code);
 		if (stripped === code) return false;
-		(0, node_fs.writeFileSync)(js, stripped);
+		(0, node_fs.writeFileSync)(path, stripped);
 		return true;
 	} catch {
 		return false;
 	}
 }
-function stripServedSourceMaps(chunks, chunksDir, log = (message) => console.log(message)) {
+function stripServedSourceMaps(chunks, servedDir, log = (message) => console.log(message)) {
 	let removed = 0;
-	for (const mapPath of (0, __afterpack_integration_utils.collectSourceMaps)(chunksDir)) try {
+	for (const mapPath of (0, __afterpack_integration_utils.collectSourceMaps)(servedDir)) try {
 		(0, node_fs.unlinkSync)(mapPath);
 		removed++;
 	} catch (e) {
 		console.warn(`[${LABEL}] could not remove served source map ${mapPath}: ${e}`);
 	}
 	let trailers = 0;
-	for (const js of chunks) if (stripDanglingTrailer(js)) trailers++;
+	for (const js of chunks) if (stripTrailer(js, (code) => (0, __afterpack_integration_utils.withSourceMappingURL)(code, null))) trailers++;
+	for (const css of (0, __afterpack_integration_utils.collectStylesheets)(servedDir)) if (stripTrailer(css, __afterpack_integration_utils.withoutCssSourceMappingURL)) trailers++;
 	if (removed > 0 || trailers > 0) {
 		const tail = trailers > 0 ? ` + ${trailers} sourceMappingURL trailer(s)` : "";
 		log(`[${LABEL}] stripped ${removed} served source map(s)${tail} from the client tree`);
@@ -113,7 +114,7 @@ async function runAfterpackHook(input) {
 		...(0, __afterpack_integration_utils.passSettings)(resolved),
 		postMinify: true,
 		afterWrite: () => {
-			stripServedSourceMaps(files, chunksDir, settings.diagnostics?.level === "none" ? () => {} : (message) => console.log(message));
+			stripServedSourceMaps(files, (0, node_path.join)(distDir, "static"), settings.diagnostics?.level === "none" ? () => {} : (message) => console.log(message));
 		},
 		receipt: {
 			bundler: detectBundler(distDir),

package/dist/index.js

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
-import { collectJsFiles, collectSourceMaps, createTelemetryReporter, passSettings, resolveClientIdentity, resolvePluginConfig, runObfuscationPass, withSourceMappingURL } from "@afterpack/integration-utils";
+import { collectJsFiles, collectSourceMaps, collectStylesheets, createTelemetryReporter, passSettings, resolveClientIdentity, resolvePluginConfig, runObfuscationPass, withSourceMappingURL, withoutCssSourceMappingURL } from "@afterpack/integration-utils";
 
 //#region src/hook.ts
 const LABEL = "afterpack-next";
@@ -22,27 +22,28 @@ function detectBundler(distDir) {
 	if (existsSync(join(distDir, "server", "webpack-runtime.js"))) return "webpack";
 	return "unknown";
 }
-function stripDanglingTrailer(js) {
+function stripTrailer(path, strip) {
 	try {
-		const code = readFileSync(js, "utf8");
-		const stripped = withSourceMappingURL(code, null);
+		const code = readFileSync(path, "utf8");
+		const stripped = strip(code);
 		if (stripped === code) return false;
-		writeFileSync(js, stripped);
+		writeFileSync(path, stripped);
 		return true;
 	} catch {
 		return false;
 	}
 }
-function stripServedSourceMaps(chunks, chunksDir, log = (message) => console.log(message)) {
+function stripServedSourceMaps(chunks, servedDir, log = (message) => console.log(message)) {
 	let removed = 0;
-	for (const mapPath of collectSourceMaps(chunksDir)) try {
+	for (const mapPath of collectSourceMaps(servedDir)) try {
 		unlinkSync(mapPath);
 		removed++;
 	} catch (e) {
 		console.warn(`[${LABEL}] could not remove served source map ${mapPath}: ${e}`);
 	}
 	let trailers = 0;
-	for (const js of chunks) if (stripDanglingTrailer(js)) trailers++;
+	for (const js of chunks) if (stripTrailer(js, (code) => withSourceMappingURL(code, null))) trailers++;
+	for (const css of collectStylesheets(servedDir)) if (stripTrailer(css, withoutCssSourceMappingURL)) trailers++;
 	if (removed > 0 || trailers > 0) {
 		const tail = trailers > 0 ? ` + ${trailers} sourceMappingURL trailer(s)` : "";
 		log(`[${LABEL}] stripped ${removed} served source map(s)${tail} from the client tree`);
@@ -90,7 +91,7 @@ async function runAfterpackHook(input) {
 		...passSettings(resolved),
 		postMinify: true,
 		afterWrite: () => {
-			stripServedSourceMaps(files, chunksDir, settings.diagnostics?.level === "none" ? () => {} : (message) => console.log(message));
+			stripServedSourceMaps(files, join(distDir, "static"), settings.diagnostics?.level === "none" ? () => {} : (message) => console.log(message));
 		},
 		receipt: {
 			bundler: detectBundler(distDir),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@afterpack/next",
-  "version": "0.2.0-rc.20260930T1421",
+  "version": "0.2.1",
   "description": "Next.js integration for AfterPack: obfuscate the client JavaScript of a Next.js build inside next build",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -28,8 +28,8 @@
     "next": ">=15.4.0"
   },
   "dependencies": {
-    "@afterpack/core": "~0.2.0",
-    "@afterpack/integration-utils": "0.2.0-rc.20260930T1421"
+    "@afterpack/core": "~0.2.2",
+    "@afterpack/integration-utils": "0.2.1"
   },
   "devDependencies": {
     "@biomejs/biome": "2.4.4",