@afterpack/rollup 0.2.7 → 1.0.0

package/README.md

@@ -29,8 +29,8 @@ output directory is left untouched.
 Each build writes a protection receipt to `.afterpack/receipts/`, one per output directory
 (`.afterpack/receipts/dist.json` for `dist`). `.afterpack/` sits next to your project's lockfile,
 `afterpack.json` or `.git` (failing those, its `package.json`), otherwise beside the build
-directory, so the receipt never ships with your build. Run `npx afterpack verify dist` in your
-deploy step to check that what you ship is what was obfuscated.
+directory, so the receipt never ships with your build. Run `npx afterpack@latest verify dist` in
+your deploy step to check that what you ship is what was obfuscated.
 
 ## Options
 
@@ -45,7 +45,7 @@ afterpackRollup({ preset: "hard", seed: "git" });
 | [`identifiers.reserved`][identifiers.reserved] | names never to rename | none |
 | [`paths.exclude`][paths.exclude] | globs for files to leave untouched | none |
 | [`sourceMap.enabled`][sourceMap.enabled] | write source maps for the obfuscated output; off also drops the build's CSS maps | off; on in development mode (`build.mode` or `NODE_ENV=development`) when Rollup emits a map |
-| [`protectionMap.enabled`][protectionMap.enabled] | write the Protection Map | on when `output.sourcemap` is set |
+| [`protectionMap.enabled`][protectionMap.enabled] | write the Protection Map | on when `output.sourcemap` is set, outside CI |
 | [`build.autorun`][build.autorun] | `false` turns AfterPack off | `true` |
 
 Dotted names are nested objects: `sourceMap.enabled` is `{ sourceMap: { enabled: true } }`. Every
@@ -63,9 +63,11 @@ other option is in the [configuration reference](https://www.afterpack.dev/docs/
 a region are a [Pro](https://www.afterpack.dev/docs/pro) feature. In a multi-module bundle they need
 `output.sourcemap: true`. Without it, the plugin skips them and tells you.
 
-The [Protection Map](https://www.afterpack.dev/docs/protection-map) is written to `.afterpack/`,
-outside your output directory; that directory carries its own `.gitignore` and self-ignores. It
-contains your original source, so never publish or commit it.
+When `output.sourcemap` is set, the [Protection Map](https://www.afterpack.dev/docs/protection-map)
+is written to `.afterpack/`, outside your output directory; that directory carries its own
+`.gitignore` and self-ignores. Without source maps, or in CI, it is off unless
+`protectionMap.enabled` is `true`. It contains your original source, so never publish or commit
+it.
 
 Options can also live in `afterpack.json` or in `AFTERPACK_*` environment variables. The options
 object wins over the environment, which wins over the file. An unknown or misspelled key fails the

package/dist/index.cjs

@@ -27,7 +27,7 @@ const __afterpack_core = __toESM(require("@afterpack/core"));
 const __afterpack_integration_utils = __toESM(require("@afterpack/integration-utils"));
 
 //#region src/index.ts
-const PATHS_INCLUDE_UNSUPPORTED = "this plugin obfuscates Rollup's own bundle, in the pipeline — there is no output-directory walk for a glob to re-admit anything into. Use `npx afterpack <dir> --paths.include=...` for a disk walk, or drop the key.";
+const PATHS_INCLUDE_UNSUPPORTED = "this plugin obfuscates Rollup's own bundle, in the pipeline — there is no output-directory walk for a glob to re-admit anything into. Use `npx afterpack@latest <dir> --paths.include=...` for a disk walk, or drop the key.";
 function outputDir(options) {
 	return options.dir ?? (options.file ? (0, node_path.dirname)(options.file) : void 0);
 }
@@ -153,6 +153,7 @@ function afterpackRollup(options = {}) {
 					...(0, __afterpack_integration_utils.passSettings)(resolved),
 					sourceType: (0, __afterpack_integration_utils.sourceTypeForBundle)(outputOptions.format, entries.values()),
 					hasBundlerSourcemap: Boolean(outputOptions.sourcemap),
+					receipt: { bundler: "rollup" },
 					messages: { autoEnableBundlerSourcemap: "protectionMap:true but no bundler sourcemap was found; set `output.sourcemap: true` so future builds can render original source in the map." }
 				});
 				const obfuscated = new Set();

package/dist/index.js

@@ -4,7 +4,7 @@ import { processBatch, version } from "@afterpack/core";
 import { applyBundleOutput, collectBundleJs, createTelemetryReporter, passSettings, prepareHashSalt, readEngineVersion, regenerateCompressedSiblings, reportPolicySaltBits, resolveClientIdentity, resolvePluginConfig, runObfuscationPass, saltSettings, scanDirectives, sourceTypeForBundle, stripBundleCssSourceMaps, unsaltedAssetsWarning, writeDeferredProtectionReceipt } from "@afterpack/integration-utils";
 
 //#region src/index.ts
-const PATHS_INCLUDE_UNSUPPORTED = "this plugin obfuscates Rollup's own bundle, in the pipeline — there is no output-directory walk for a glob to re-admit anything into. Use `npx afterpack <dir> --paths.include=...` for a disk walk, or drop the key.";
+const PATHS_INCLUDE_UNSUPPORTED = "this plugin obfuscates Rollup's own bundle, in the pipeline — there is no output-directory walk for a glob to re-admit anything into. Use `npx afterpack@latest <dir> --paths.include=...` for a disk walk, or drop the key.";
 function outputDir(options) {
 	return options.dir ?? (options.file ? dirname(options.file) : void 0);
 }
@@ -130,6 +130,7 @@ function afterpackRollup(options = {}) {
 					...passSettings(resolved),
 					sourceType: sourceTypeForBundle(outputOptions.format, entries.values()),
 					hasBundlerSourcemap: Boolean(outputOptions.sourcemap),
+					receipt: { bundler: "rollup" },
 					messages: { autoEnableBundlerSourcemap: "protectionMap:true but no bundler sourcemap was found; set `output.sourcemap: true` so future builds can render original source in the map." }
 				});
 				const obfuscated = new Set();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@afterpack/rollup",
-  "version": "0.2.7",
+  "version": "1.0.0",
   "description": "Rollup plugin for AfterPack: obfuscate your JavaScript output during the Rollup build",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -28,8 +28,8 @@
     "rollup": "^3.0.0 || ^4.0.0"
   },
   "dependencies": {
-    "@afterpack/core": "~0.2.8",
-    "@afterpack/integration-utils": "0.2.7"
+    "@afterpack/core": "~1.0.0",
+    "@afterpack/integration-utils": "1.0.0"
   },
   "devDependencies": {
     "@biomejs/biome": "2.4.4",
@@ -37,7 +37,7 @@
     "rollup": "^4.0.0",
     "tsdown": "^0.11.0",
     "typescript": "^5.0.0",
-    "vitest": "^2.0.0"
+    "vitest": "^4.1.12"
   },
   "engines": {
     "node": ">=18"