@afterpack/webpack 0.2.0 → 0.2.1

package/README.md

@@ -44,7 +44,7 @@ new AfterpackWebpackPlugin({ preset: "hard", seed: "git" });
 | [`seed`][seed] | a number or string; `"git"` uses the current commit | a new random seed per build |
 | [`identifiers.reserved`][identifiers.reserved] | names never to rename | none |
 | [`paths.exclude`][paths.exclude] | globs for files to leave untouched | none |
-| [`sourceMap.enabled`][sourceMap.enabled] | write source maps for the obfuscated output | on in development when webpack emits a map, off in production |
+| [`sourceMap.enabled`][sourceMap.enabled] | write source maps for the obfuscated output; off also drops the build's CSS maps | on in development when webpack emits a map, off in production |
 | [`protectionMap.enabled`][protectionMap.enabled] | write the Protection Map | on when `devtool` emits source maps |
 | [`build.autorun`][build.autorun] | `false` turns AfterPack off | `true` |
 

package/dist/index.cjs

@@ -30,6 +30,7 @@ const __afterpack_integration_utils = __toESM(require("@afterpack/integration-ut
 const PLUGIN_NAME = "AfterpackWebpackPlugin";
 const EMITTED_JS_RE = /\.(?:js|mjs|cjs)$/;
 const SOURCE_MODULE_RE = /\.(?:m?[jt]sx?)$/;
+const CSS_MAP_RE = /\.css\.map$/;
 const PATHS_INCLUDE_UNSUPPORTED = "this plugin obfuscates the assets webpack's own chunks claim, in the pipeline — there is no output-directory walk for a glob to re-admit anything into. Use `npx afterpack <dir> --paths.include=...` for a disk walk, or drop the key.";
 function isEmittedJs(name) {
 	return !name.includes(".hot-update.") && EMITTED_JS_RE.test(name);
@@ -48,6 +49,16 @@ function inputSourceMap(compilation, asset) {
 	const dir = asset.name.includes("/") ? `${asset.name.replace(/\/[^/]*$/, "")}/` : "";
 	return assetText(compilation, `${dir}${asset.url}`.replace(/^\.\//, ""));
 }
+function stripCssSourceMaps(compilation, RawSource) {
+	for (const { name } of compilation.getAssets()) if (CSS_MAP_RE.test(name)) compilation.deleteAsset(name);
+	for (const { name } of compilation.getAssets()) {
+		if (!name.endsWith(".css")) continue;
+		const css = assetText(compilation, name);
+		if (css == null) continue;
+		const stripped = (0, __afterpack_integration_utils.withoutCssSourceMappingURL)(css);
+		if (stripped !== css) compilation.updateAsset(name, new RawSource(stripped));
+	}
+}
 function chunkClaimedJsAssets(compilation) {
 	const names = new Set();
 	for (const chunk of compilation.chunks) for (const name of chunk.files) if (isEmittedJs(name)) names.add(name);
@@ -188,6 +199,7 @@ var AfterpackWebpackPlugin = class {
 				else compilation.emitAsset(mapName, map);
 			} else if (asset.mapName && compilation.getAsset(asset.mapName)) compilation.deleteAsset(asset.mapName);
 		}
+		if (!result.policy.sourceMap) stripCssSourceMaps(compilation, RawSource);
 		if (result.deferredReceipt) this.deferredReceiptByCompilation.set(compilation, result.deferredReceipt);
 	}
 	capture(resource, context) {

package/dist/index.js

@@ -1,12 +1,13 @@
 import { readFileSync } from "node:fs";
 import { basename, join, relative } from "node:path";
 import { processBatch, version } from "@afterpack/core";
-import { createTelemetryReporter, decodeDataUri, extractSourceMappingURL, passSettings, resolveClientIdentity, resolvePluginConfig, runObfuscationPass, scanDirectives, withSourceMappingURL, writeDeferredProtectionReceipt } from "@afterpack/integration-utils";
+import { createTelemetryReporter, decodeDataUri, extractSourceMappingURL, passSettings, resolveClientIdentity, resolvePluginConfig, runObfuscationPass, scanDirectives, withSourceMappingURL, withoutCssSourceMappingURL, writeDeferredProtectionReceipt } from "@afterpack/integration-utils";
 
 //#region src/index.ts
 const PLUGIN_NAME = "AfterpackWebpackPlugin";
 const EMITTED_JS_RE = /\.(?:js|mjs|cjs)$/;
 const SOURCE_MODULE_RE = /\.(?:m?[jt]sx?)$/;
+const CSS_MAP_RE = /\.css\.map$/;
 const PATHS_INCLUDE_UNSUPPORTED = "this plugin obfuscates the assets webpack's own chunks claim, in the pipeline — there is no output-directory walk for a glob to re-admit anything into. Use `npx afterpack <dir> --paths.include=...` for a disk walk, or drop the key.";
 function isEmittedJs(name) {
 	return !name.includes(".hot-update.") && EMITTED_JS_RE.test(name);
@@ -25,6 +26,16 @@ function inputSourceMap(compilation, asset) {
 	const dir = asset.name.includes("/") ? `${asset.name.replace(/\/[^/]*$/, "")}/` : "";
 	return assetText(compilation, `${dir}${asset.url}`.replace(/^\.\//, ""));
 }
+function stripCssSourceMaps(compilation, RawSource) {
+	for (const { name } of compilation.getAssets()) if (CSS_MAP_RE.test(name)) compilation.deleteAsset(name);
+	for (const { name } of compilation.getAssets()) {
+		if (!name.endsWith(".css")) continue;
+		const css = assetText(compilation, name);
+		if (css == null) continue;
+		const stripped = withoutCssSourceMappingURL(css);
+		if (stripped !== css) compilation.updateAsset(name, new RawSource(stripped));
+	}
+}
 function chunkClaimedJsAssets(compilation) {
 	const names = new Set();
 	for (const chunk of compilation.chunks) for (const name of chunk.files) if (isEmittedJs(name)) names.add(name);
@@ -165,6 +176,7 @@ var AfterpackWebpackPlugin = class {
 				else compilation.emitAsset(mapName, map);
 			} else if (asset.mapName && compilation.getAsset(asset.mapName)) compilation.deleteAsset(asset.mapName);
 		}
+		if (!result.policy.sourceMap) stripCssSourceMaps(compilation, RawSource);
 		if (result.deferredReceipt) this.deferredReceiptByCompilation.set(compilation, result.deferredReceipt);
 	}
 	capture(resource, context) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@afterpack/webpack",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "webpack plugin for AfterPack: obfuscate your production JavaScript during the webpack build",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -28,8 +28,8 @@
     "webpack": "^5.0.0"
   },
   "dependencies": {
-    "@afterpack/core": "~0.2.0",
-    "@afterpack/integration-utils": "0.2.0"
+    "@afterpack/core": "~0.2.2",
+    "@afterpack/integration-utils": "0.2.1"
   },
   "devDependencies": {
     "@biomejs/biome": "2.4.4",