@aws/nx-plugin 1.0.0-rc.3 → 1.0.0-rc.30

package/src/license/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../../packages/nx-plugin/src/license/config.ts"],"names":[],"mappings":";;;AAMA,iDAG+B;AAG/B;;GAEG;AACH,MAAM,kBAAkB,GAA+B,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAExE;;GAEG;AACU,QAAA,uBAAuB,GAAqC;IACvE,qBAAqB;IACrB,GAAG,MAAM,CAAC,WAAW,CACnB;QACE,OAAO;QACP,IAAI;QACJ,IAAI;QACJ,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,QAAQ;QACR,KAAK;QACL,KAAK;QACL,MAAM;QACN,MAAM;QACN,MAAM;QACN,KAAK;QACL,OAAO;QACP,MAAM;QACN,WAAW;QACX,KAAK;QACL,SAAS;QACT,IAAI;QACJ,OAAO;QACP,IAAI;QACJ,YAAY;QACZ,GAAG;QACH,KAAK;QACL,KAAK;QACL,IAAI;QACJ,GAAG;QACH,KAAK;QACL,KAAK;QACL,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,IAAI;QACJ,KAAK;QACL,SAAS;QACT,IAAI;QACJ,QAAQ;QACR,OAAO;KACR,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CACzE;IACD,sBAAsB;IACtB,GAAG,MAAM,CAAC,WAAW,CACnB;QACE,OAAO;QACP,IAAI;QACJ,OAAO;QACP,IAAI;QACJ,OAAO;QACP,MAAM;QACN,KAAK;QACL,IAAI;QACJ,GAAG;KACJ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CACrC;IACD,SAAS;IACT,UAAU,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACzB,SAAS;IACT,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;IACtD,MAAM;IACN,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;IAC9C,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC1C,OAAO;IACP,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;IAC1D,KAAK;IACL,GAAG,MAAM,CAAC,WAAW,CACnB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QACzB,GAAG;QACH,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;KAClD,CAAC,CACH;IACD,eAAe;IACf,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;IAClB,MAAM;IACN,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACxD,aAAa;IACb,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACrD,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACtD,WAAW;IACX,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;IAC5C,YAAY;IACZ,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACpD,SAAS;IACT,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;CACvB,CAAC;AAEF;;GAEG;AACI,MAAM,oBAAoB,GAAG,CAClC,IAA2B,EAC3B,eAAuB,EACR,EAAE;IACjB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,+CAA+C;YAC/C,MAAM,UAAU,GAAG;gBACjB,aAAa,eAAe,wBAAwB;gBACpD,EAAE;gBACF,4GAA4G;gBAC5G,uDAAuD;gBACvD,EAAE;gBACF,gCAAgC;gBAChC,EAAE;gBACF,mHAAmH;gBACnH,gHAAgH;gBAChH,oCAAoC;aACrC,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAC1B,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CACvD,CAAC;YACF,OAAO;gBACL,IAAI;gBACJ,eAAe;gBACf,MAAM,EAAE;oBACN,OAAO,EAAE,EAAE,KAAK,EAAE;oBAClB,MAAM,EAAE;wBACN,8BAA8B,EAAE;4BAC9B,UAAU,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;4BACzC,SAAS,EAAE,MAAM;4BACjB,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK;yBACzC;wBACD,iBAAiB,EAAE;4BACjB,UAAU,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;4BACxC,SAAS,EAAE,KAAK;4BAChB,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;yBACvC;qBACF;oBACD,OAAO,EAAE,CAAC,YAAY,CAAC;iBACxB;aACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO;gBACL,IAAI;gBACJ,eAAe;gBACf,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC9B,CAAC,CAAC;wBACE,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACxC;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,EAAE;oBACN,OAAO,EAAE;wBACP,KAAK,EAAE;4BACL,aAAa,eAAe,wBAAwB;4BACpD,4BAA4B,IAAI,EAAE;yBACnC;qBACF;oBACD,MAAM,EAAE;wBACN,8BAA8B,EAAE;4BAC9B,UAAU,EAAE,KAAK;4BACjB,SAAS,EAAE,KAAK;4BAChB,QAAQ,EAAE,KAAK;yBAChB;wBACD,iBAAiB,EAAE;4BACjB,UAAU,EAAE,GAAG;4BACf,SAAS,EAAE,IAAI;4BACf,QAAQ,EAAE,GAAG;yBACd;qBACF;oBACD,OAAO,EAAE,CAAC,YAAY,CAAC;iBACxB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AA/EW,QAAA,oBAAoB,wBA+E/B;AAEF;;GAEG;AACI,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAU,EAAE,MAAqB,EAAE,EAAE;IAC5E,MAAM,IAAA,+BAAuB,EAAC,IAAI,EAAE;QAClC,OAAO,EAAE,MAAM;KAChB,CAAC,CAAC;AACL,CAAC,CAAC;AAJW,QAAA,kBAAkB,sBAI7B;AAEF;;GAEG;AACI,MAAM,iBAAiB,GAAG,KAAK,EACpC,IAAU,EAC0B,EAAE;IACtC,OAAO,CAAC,MAAM,IAAA,6BAAqB,EAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC;AACtD,CAAC,CAAC;AAJW,QAAA,iBAAiB,qBAI5B"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/license/config.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  getProjects,\n  type ProjectConfiguration,\n  readProjectConfiguration,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport {\n  AWS_NX_PLUGIN_CONFIG_FILE_NAME,\n  readAwsNxPluginConfig,\n  updateAwsNxPluginConfig,\n} from '../utils/config/utils';\nimport { formatFilesInSubtree } from '../utils/format';\nimport { addDependencyToTargetIfNotPresent } from '../utils/nx';\nimport type {\n  CommentSyntax,\n  LicenseConfig,\n  LicenseSourceConfig,\n} from './config-types';\nimport type { DependencyCheckException } from './dependency-check/types';\nimport type { SPDXLicenseIdentifier } from './schema';\n\n/**\n * Licenses containing a placeholder for the copyright year.\n */\nconst LICENSES_WITH_YEAR: Set<SPDXLicenseIdentifier> = new Set(['MIT']);\n\n/**\n * Defines the comment syntax for popular programming languages\n */\nexport const LANGUAGE_COMMENT_SYNTAX: { [ext: string]: CommentSyntax } = {\n  // C++ style comments\n  ...Object.fromEntries(\n    [\n      // Node\n      'js',\n      'ts',\n      'cjs',\n      'mjs',\n      'cts',\n      'mts',\n      // React\n      'jsx',\n      'tsx',\n      // Web\n      'sass',\n      'scss',\n      'php',\n      // Java\n      'java',\n      // TypeSpec\n      'tsp',\n      // Golang\n      'go',\n      // Rust\n      'rs',\n      // C and C++\n      'c',\n      'cpp',\n      'cxx',\n      'cc',\n      'h',\n      'hpp',\n      // C#\n      'cs',\n      // Scala\n      'scala',\n      'sc',\n      'sbt',\n      // Kotlin\n      'kt',\n      // Swift\n      'swift',\n    ].map((ext) => [ext, { line: '//', block: { start: '/*', end: '*/' } }]),\n  ),\n  // Bash style comments\n  ...Object.fromEntries(\n    [\n      // Bash\n      'sh',\n      // Perl\n      'pl',\n      // YAML\n      'yaml',\n      'yml',\n      // R\n      'r',\n    ].map((ext) => [ext, { line: '#' }]),\n  ),\n  // Docker\n  Dockerfile: { line: '#' },\n  // Python\n  py: { line: '#', block: { start: '\"\"\"', end: '\"\"\"' } },\n  // Web\n  html: { block: { start: '<!--', end: '-->' } },\n  css: { block: { start: '/*', end: '*/' } },\n  // Ruby\n  rb: { line: '#', block: { start: '=begin', end: '=end' } },\n  // F#\n  ...Object.fromEntries(\n    ['fs', 'fsx'].map((ext) => [\n      ext,\n      { line: '//', block: { start: '(*', end: '*)' } },\n    ]),\n  ),\n  // Visual Basic\n  vb: { line: \"' \" },\n  // Lua\n  lua: { line: '--', block: { start: '--[[', end: ']]' } },\n  // PowerShell\n  ps1: { line: '#', block: { start: '<#', end: '#>' } },\n  psm1: { line: '#', block: { start: '<#', end: '#>' } },\n  // Markdown\n  md: { block: { start: '<!--', end: '-->' } },\n  // Terraform\n  tf: { line: '#', block: { start: '/*', end: '*/' } },\n  // Smithy\n  smithy: { line: '//' },\n};\n\n/**\n * Module specifier for the license helpers exported by this package, used by\n * imports written into the user's config file.\n */\nconst LICENSE_SDK_MODULE = '@aws/nx-plugin/sdk/license';\n\n/**\n * Build the object literal source for a dependency check exception.\n * `JSON.stringify` produces valid string literals for arbitrary text (quotes,\n * backslashes, newlines all escaped); prettier later normalises quote style.\n */\nconst exceptionLiteral = (exception: DependencyCheckException): string => {\n  const parts = [`package: ${JSON.stringify(exception.package)}`];\n  if (exception.version !== undefined) {\n    parts.push(`version: ${JSON.stringify(exception.version)}`);\n  }\n  parts.push(`reason: ${JSON.stringify(exception.reason)}`);\n  if (exception.spdx !== undefined) {\n    parts.push(`spdx: ${JSON.stringify(exception.spdx)}`);\n  }\n  return `{ ${parts.join(', ')} }`;\n};\n\n/**\n * GritQL `or` block that appends `$ins` (the insert placeholder) to the named\n * array inside the matched `$scope`, without ever producing an array hole:\n *   - empty `key: []`  → `key: [$ins]` (a list-append `+=` does not match an\n *     empty array, so the empty case is rewritten directly)\n *   - otherwise        → list-append `+=` of `, $ins`; the leading comma is the\n *     element separator and `+=` places it correctly for single inline,\n *     single-with-trailing-comma and multi-element arrays alike\n */\nconst appendToArray = (key: string, ins: string) =>\n  `or {\n    $scope <: contains \\`${key}: []\\` => \\`${key}: [${ins}]\\`,\n    $scope <: contains \\`${key}: [$items]\\` where { $items += \\`, ${ins}\\` }\n  }`;\n\n/**\n * Insert `property` (TypeScript source like `dependencies: { ... }`) as the\n * first property of the `license` object literal.\n *\n * Prepending is comma-safe for every shape — empty `{}`, single- or multi-line.\n * `+=` appending is not: it omits the separator when the last property's value\n * is an object/array literal (e.g. `source: { ... }`), corrupting the file. The\n * property text is routed through a placeholder so its content never enters the\n * GritQL pattern. Returns true if the file changed (a `license` object existed).\n */\nconst prependLicenseProperty = async (\n  tree: Tree,\n  property: string,\n): Promise<boolean> => {\n  const { insertViaGritQL, GRIT_INSERT_PLACEHOLDER } = await import(\n    '../utils/ast'\n  );\n\n  // Non-empty license object: insert before the first existing property.\n  const intoNonEmpty = await insertViaGritQL(\n    tree,\n    AWS_NX_PLUGIN_CONFIG_FILE_NAME,\n    `\\`license: { $props }\\` where { $props => \\`${GRIT_INSERT_PLACEHOLDER}, $props\\` }`,\n    property,\n  );\n  if (intoNonEmpty) return true;\n\n  // Empty license object: `{ $props }` doesn't match `{}`, so fill it directly.\n  return insertViaGritQL(\n    tree,\n    AWS_NX_PLUGIN_CONFIG_FILE_NAME,\n    `\\`license: {}\\` => \\`license: { ${GRIT_INSERT_PLACEHOLDER} }\\``,\n    property,\n  );\n};\n\n/**\n * Whether `license.dependencies` (the dependency-check block) is configured.\n * Scoped within `license` so a `dependencies`-shaped object elsewhere in the\n * file isn't mistaken for it.\n */\nconst hasDependenciesBlock = async (tree: Tree): Promise<boolean> => {\n  if (!tree.exists(AWS_NX_PLUGIN_CONFIG_FILE_NAME)) return false;\n  const { matchGritQL } = await import('../utils/ast');\n  return matchGritQL(\n    tree,\n    AWS_NX_PLUGIN_CONFIG_FILE_NAME,\n    '`license: { $l }` where { $l <: contains `dependencies: $_` }',\n  );\n};\n\n/**\n * Workspace-root npm-ecosystem lockfiles. Each is added to the license-check\n * cache inputs only when present, so the cache invalidates on dependency\n * changes without listing lockfiles for package managers the workspace doesn't\n * use.\n */\nconst NPM_LOCKFILES = [\n  'pnpm-lock.yaml',\n  'yarn.lock',\n  'package-lock.json',\n  'bun.lockb',\n];\n\n/**\n * Recompute the `inputs` of the root `license-check` target from what's\n * currently in the workspace: the present npm lockfiles, the config file, and\n * a recursive uv.lock glob when the dependency check uses a Python collector.\n *\n * The uv lockfile is keyed off the collector (not file presence) because it is\n * created by `uv` *after* the generator runs, and may live in a subdirectory of\n * a uv workspace. Callers run this whenever they change the relevant state, so\n * the inputs stay correct regardless of generator order. No-op if the\n * license-check target doesn't exist yet.\n */\nexport const updateLicenseCheckTargetInputs = async (\n  tree: Tree,\n): Promise<void> => {\n  const rootProjectJsonPath = 'project.json';\n  if (!tree.exists(rootProjectJsonPath)) return;\n\n  const rootProject = JSON.parse(tree.read(rootProjectJsonPath, 'utf-8')!);\n  const target = rootProject.targets?.['license-check'];\n  if (!target) return;\n\n  const inputs = NPM_LOCKFILES.filter((f) => tree.exists(f)).map(\n    (f) => `{workspaceRoot}/${f}`,\n  );\n\n  if (await hasPythonCollector(tree)) {\n    inputs.push('{workspaceRoot}/**/uv.lock');\n  }\n\n  inputs.push('{workspaceRoot}/aws-nx-plugin.config.mts');\n\n  target.inputs = inputs;\n  tree.write(rootProjectJsonPath, JSON.stringify(rootProject, null, 2));\n};\n\n/**\n * Whether the dependency check config has a `pythonCollector` configured.\n */\nconst hasPythonCollector = async (tree: Tree): Promise<boolean> => {\n  if (!tree.exists(AWS_NX_PLUGIN_CONFIG_FILE_NAME)) return false;\n  const { matchGritQL } = await import('../utils/ast');\n  return matchGritQL(tree, AWS_NX_PLUGIN_CONFIG_FILE_NAME, '`pythonCollector`');\n};\n\n/**\n * The name of the project that owns the root `license-check` target, or\n * undefined if no project defines it.\n */\nconst findLicenseCheckProjectName = (tree: Tree): string | undefined => {\n  for (const [name, config] of getProjects(tree)) {\n    if (config.targets?.['license-check']) return name;\n  }\n  return undefined;\n};\n\n/**\n * Make a project's `lint` target depend on the root `license-check` target, so\n * license checking runs as part of lint/build. No-op when the project has no\n * `lint` target or there's no license-check target to depend on. Idempotent.\n *\n * Callers format afterwards (generators call `formatFilesInSubtree` at the end),\n * so the rewritten project.json matches prettier.\n */\nexport const addLicenseCheckToLintTarget = (\n  tree: Tree,\n  projectName: string,\n): void => {\n  const licenseCheckProject = findLicenseCheckProjectName(tree);\n  if (!licenseCheckProject) return;\n\n  let project: ProjectConfiguration;\n  try {\n    project = readProjectConfiguration(tree, projectName);\n  } catch {\n    return;\n  }\n\n  // Only wire projects that actually lint, and never the license-check project\n  // itself (a target can't depend on its own project's target).\n  if (!project.targets?.lint || projectName === licenseCheckProject) return;\n\n  addDependencyToTargetIfNotPresent(project, 'lint', {\n    projects: [licenseCheckProject],\n    target: 'license-check',\n  });\n  updateProjectConfiguration(tree, projectName, project);\n};\n\n/**\n * Wire every project's `lint` target to the root `license-check` target.\n * Called by the license generator so existing projects pick up the dependency\n * regardless of the order generators ran in.\n */\nexport const addLicenseCheckToAllLintTargets = (tree: Tree): void => {\n  for (const [name] of getProjects(tree)) {\n    addLicenseCheckToLintTarget(tree, name);\n  }\n};\n\nexport interface EnsureDependencyCheckBlockOptions {\n  includeCollectors?: 'npm' | 'npm+python';\n}\n\n/**\n * Ensure the `dependencies` block (dependency license checking) exists within\n * the `license` config. If one already exists it is left untouched, so user\n * customizations survive.\n */\nexport const ensureDependencyCheckBlock = async (\n  tree: Tree,\n  options?: EnsureDependencyCheckBlockOptions,\n): Promise<void> => {\n  if (!tree.exists(AWS_NX_PLUGIN_CONFIG_FILE_NAME)) return;\n\n  const { addDestructuredImport } = await import('../utils/ast');\n\n  if (await hasDependenciesBlock(tree)) {\n    return;\n  }\n\n  const withPython = options?.includeCollectors === 'npm+python';\n  const collectors = withPython\n    ? 'collectors: [npmCollector(), pythonCollector()]'\n    : 'collectors: [npmCollector()]';\n\n  const block = `dependencies: { allow: DEFAULT_LICENSE_ALLOWLIST, ${collectors}, exceptions: [] }`;\n\n  // Prepend the block as the first property of the license object. Prepending\n  // (rather than `+=` appending) is comma-safe for every shape: GritQL's `+=`\n  // omits the separator when the last existing property's value is an object\n  // literal (e.g. `source: { ... }`), which would corrupt the file.\n  const added = await prependLicenseProperty(tree, block);\n\n  // Only add the imports if the block was actually written (i.e. a license\n  // object literal existed to attach it to).\n  if (added) {\n    await addDestructuredImport(\n      tree,\n      AWS_NX_PLUGIN_CONFIG_FILE_NAME,\n      withPython\n        ? ['DEFAULT_LICENSE_ALLOWLIST', 'npmCollector', 'pythonCollector']\n        : ['DEFAULT_LICENSE_ALLOWLIST', 'npmCollector'],\n      LICENSE_SDK_MODULE,\n    );\n    await formatFilesInSubtree(tree, AWS_NX_PLUGIN_CONFIG_FILE_NAME);\n  }\n};\n\n/**\n * Ensure license exceptions are present in `license.dependencies.exceptions`.\n * An exception whose package is already listed is skipped (so existing reasons\n * are never overwritten). Other exceptions, collectors and the allowlist are\n * left untouched.\n *\n * The `dependencies: { $scope }` scope keeps edits within the dependency-check\n * block, so an `exceptions` array elsewhere in the file isn't matched.\n */\nexport const ensureLicenseExceptions = async (\n  tree: Tree,\n  exceptions: DependencyCheckException[],\n): Promise<void> => {\n  if (!tree.exists(AWS_NX_PLUGIN_CONFIG_FILE_NAME)) return;\n\n  const { insertViaGritQL, GRIT_INSERT_PLACEHOLDER } = await import(\n    '../utils/ast'\n  );\n\n  if (!(await hasDependenciesBlock(tree))) {\n    return;\n  }\n\n  let modified = false;\n  for (const exception of exceptions) {\n    const pkg = JSON.stringify(exception.package);\n    const inserted = await insertViaGritQL(\n      tree,\n      AWS_NX_PLUGIN_CONFIG_FILE_NAME,\n      `\\`dependencies: { $scope }\\` where {\n        $scope <: not contains \\`package: ${pkg}\\`,\n        ${appendToArray('exceptions', GRIT_INSERT_PLACEHOLDER)}\n      }`,\n      exceptionLiteral(exception),\n    );\n    modified ||= inserted;\n  }\n\n  if (modified) {\n    await formatFilesInSubtree(tree, AWS_NX_PLUGIN_CONFIG_FILE_NAME);\n  }\n};\n\n/**\n * Add `pythonCollector()` to `license.dependencies.collectors`, unless one is\n * already configured.\n */\nexport const ensurePythonLicenseCollector = async (\n  tree: Tree,\n): Promise<void> => {\n  if (!tree.exists(AWS_NX_PLUGIN_CONFIG_FILE_NAME)) return;\n\n  const { addDestructuredImport, insertViaGritQL, GRIT_INSERT_PLACEHOLDER } =\n    await import('../utils/ast');\n\n  if (!(await hasDependenciesBlock(tree))) {\n    return;\n  }\n\n  const added = await insertViaGritQL(\n    tree,\n    AWS_NX_PLUGIN_CONFIG_FILE_NAME,\n    `\\`dependencies: { $scope }\\` where {\n      $scope <: not contains \\`pythonCollector\\`,\n      ${appendToArray('collectors', GRIT_INSERT_PLACEHOLDER)}\n    }`,\n    'pythonCollector()',\n  );\n\n  if (added) {\n    await addDestructuredImport(\n      tree,\n      AWS_NX_PLUGIN_CONFIG_FILE_NAME,\n      ['pythonCollector'],\n      LICENSE_SDK_MODULE,\n    );\n    await formatFilesInSubtree(tree, AWS_NX_PLUGIN_CONFIG_FILE_NAME);\n    // Now that a Python collector is configured, ensure uv.lock is a cache\n    // input. Runs here (not only in the license generator) so it's added\n    // whenever the collector is — e.g. when py#project runs after license.\n    await updateLicenseCheckTargetInputs(tree);\n  }\n};\n\n/**\n * Build the default `license.source` config for a given license\n */\nexport const defaultLicenseConfig = (\n  spdx: SPDXLicenseIdentifier,\n  copyrightHolder: string,\n): LicenseSourceConfig => {\n  switch (spdx) {\n    case 'ASL': {\n      // For ASL, we use a \"box\" style license header\n      const rawContent = [\n        `Copyright ${copyrightHolder}. All Rights Reserved.`,\n        '',\n        'Licensed under the Amazon Software License (the \"License\"). You may not use this file except in compliance',\n        'with the License. A copy of the License is located at',\n        '',\n        '   https://aws.amazon.com/asl/',\n        '',\n        'or in the \"license\" file accompanying this file. This file is distributed on an \"AS IS\" BASIS, WITHOUT WARRANTIES',\n        'OR CONDITIONS OF ANY KIND, express or implied. See the License for the specific language governing permissions',\n        'and limitations under the License.',\n      ];\n      const maxLen = Math.max(...rawContent.map((line) => line.length));\n      const lines = rawContent.map(\n        (line) => `${line}${' '.repeat(maxLen - line.length)}`,\n      );\n      return {\n        spdx,\n        copyrightHolder,\n        header: {\n          content: { lines },\n          format: {\n            '**/*.{js,ts,jsx,tsx,mjs,mts}': {\n              blockStart: `/***${'*'.repeat(maxLen)}**`,\n              lineStart: ' *  ',\n              lineEnd: ' *',\n              blockEnd: ` ***${'*'.repeat(maxLen)}**/`,\n            },\n            '**/*.{py,sh,tf}': {\n              blockStart: `###${'#'.repeat(maxLen)}##`,\n              lineStart: '#  ',\n              lineEnd: ' #',\n              blockEnd: `###${'#'.repeat(maxLen)}##`,\n            },\n          },\n          exclude: ['**/*.gen.*'],\n        },\n      };\n    }\n    default: {\n      return {\n        spdx,\n        copyrightHolder,\n        ...(LICENSES_WITH_YEAR.has(spdx)\n          ? {\n              copyrightYear: new Date().getFullYear(),\n            }\n          : {}),\n        header: {\n          content: {\n            lines: [\n              `Copyright ${copyrightHolder}. All Rights Reserved.`,\n              `SPDX-License-Identifier: ${spdx}`,\n            ],\n          },\n          format: {\n            '**/*.{js,ts,jsx,tsx,mjs,mts}': {\n              blockStart: '/**',\n              lineStart: ' * ',\n              blockEnd: ' */',\n            },\n            '**/*.{py,sh,tf}': {\n              blockStart: '#',\n              lineStart: '# ',\n              blockEnd: '#',\n            },\n          },\n          exclude: ['**/*.gen.*'],\n        },\n      };\n    }\n  }\n};\n\n/**\n * Write the `license.source` config (headers + LICENSE files) to the aws nx\n * plugin config.\n *\n * The `source` block is (re)written, but any existing `license.dependencies`\n * block — a user-customized allowlist, collectors and exceptions — is\n * preserved, so re-running the license generator (e.g. to change the copyright\n * holder) never clobbers dependency-check customizations.\n */\nexport const writeLicenseConfig = async (\n  tree: Tree,\n  source: LicenseSourceConfig,\n) => {\n  const { captureGritQL } = await import('../utils/ast');\n\n  // Capture the existing `dependencies: { ... }` block before overwriting the\n  // license value, so we can re-attach it afterwards. It's managed by the\n  // ensure* helpers, never written from here.\n  const preserved = tree.exists(AWS_NX_PLUGIN_CONFIG_FILE_NAME)\n    ? await captureGritQL(\n        tree,\n        AWS_NX_PLUGIN_CONFIG_FILE_NAME,\n        '`dependencies: $_`',\n      )\n    : undefined;\n\n  await updateAwsNxPluginConfig(tree, { license: { source } });\n\n  // Re-attach the preserved block. The captured text may contain backticks,\n  // `${...}` or quotes — prependLicenseProperty routes it through a placeholder\n  // so it never enters the GritQL pattern.\n  if (preserved) {\n    await prependLicenseProperty(tree, preserved);\n    await formatFilesInSubtree(tree, AWS_NX_PLUGIN_CONFIG_FILE_NAME);\n  }\n};\n\n/**\n * Read license configuration\n */\nexport const readLicenseConfig = async (\n  tree: Tree,\n): Promise<LicenseConfig | undefined> => {\n  return (await readAwsNxPluginConfig(tree))?.license;\n};\n"],"names":["getProjects","readProjectConfiguration","updateProjectConfiguration","AWS_NX_PLUGIN_CONFIG_FILE_NAME","readAwsNxPluginConfig","updateAwsNxPluginConfig","formatFilesInSubtree","addDependencyToTargetIfNotPresent","LICENSES_WITH_YEAR","Set","LANGUAGE_COMMENT_SYNTAX","Object","fromEntries","map","ext","line","block","start","end","Dockerfile","py","html","css","rb","vb","lua","ps1","psm1","md","tf","smithy","LICENSE_SDK_MODULE","exceptionLiteral","exception","parts","JSON","stringify","package","version","undefined","push","reason","spdx","join","appendToArray","key","ins","prependLicenseProperty","tree","property","insertViaGritQL","GRIT_INSERT_PLACEHOLDER","intoNonEmpty","hasDependenciesBlock","exists","matchGritQL","NPM_LOCKFILES","updateLicenseCheckTargetInputs","rootProjectJsonPath","rootProject","parse","read","target","targets","inputs","filter","f","hasPythonCollector","write","findLicenseCheckProjectName","name","config","addLicenseCheckToLintTarget","projectName","licenseCheckProject","project","lint","projects","addLicenseCheckToAllLintTargets","ensureDependencyCheckBlock","options","addDestructuredImport","withPython","includeCollectors","collectors","added","ensureLicenseExceptions","exceptions","modified","pkg","inserted","ensurePythonLicenseCollector","defaultLicenseConfig","copyrightHolder","rawContent","maxLen","Math","max","length","lines","repeat","header","content","format","blockStart","lineStart","lineEnd","blockEnd","exclude","has","copyrightYear","Date","getFullYear","writeLicenseConfig","source","captureGritQL","preserved","license","readLicenseConfig"],"mappings":"AAAA;;;CAGC,GACD,SACEA,WAAW,EAEXC,wBAAwB,EAExBC,0BAA0B,QACrB,aAAa;AACpB,SACEC,8BAA8B,EAC9BC,qBAAqB,EACrBC,uBAAuB,QAClB,2BAAwB;AAC/B,SAASC,oBAAoB,QAAQ,qBAAkB;AACvD,SAASC,iCAAiC,QAAQ,iBAAc;AAShE;;CAEC,GACD,MAAMC,qBAAiD,IAAIC,IAAI;IAAC;CAAM;AAEtE;;CAEC,GACD,OAAO,MAAMC,0BAA4D;IACvE,qBAAqB;IACrB,GAAGC,OAAOC,WAAW,CACnB;QACE,OAAO;QACP;QACA;QACA;QACA;QACA;QACA;QACA,QAAQ;QACR;QACA;QACA,MAAM;QACN;QACA;QACA;QACA,OAAO;QACP;QACA,WAAW;QACX;QACA,SAAS;QACT;QACA,OAAO;QACP;QACA,YAAY;QACZ;QACA;QACA;QACA;QACA;QACA;QACA,KAAK;QACL;QACA,QAAQ;QACR;QACA;QACA;QACA,SAAS;QACT;QACA,QAAQ;QACR;KACD,CAACC,GAAG,CAAC,CAACC,MAAQ;YAACA;YAAK;gBAAEC,MAAM;gBAAMC,OAAO;oBAAEC,OAAO;oBAAMC,KAAK;gBAAK;YAAE;SAAE,EACxE;IACD,sBAAsB;IACtB,GAAGP,OAAOC,WAAW,CACnB;QACE,OAAO;QACP;QACA,OAAO;QACP;QACA,OAAO;QACP;QACA;QACA,IAAI;QACJ;KACD,CAACC,GAAG,CAAC,CAACC,MAAQ;YAACA;YAAK;gBAAEC,MAAM;YAAI;SAAE,EACpC;IACD,SAAS;IACTI,YAAY;QAAEJ,MAAM;IAAI;IACxB,SAAS;IACTK,IAAI;QAAEL,MAAM;QAAKC,OAAO;YAAEC,OAAO;YAAOC,KAAK;QAAM;IAAE;IACrD,MAAM;IACNG,MAAM;QAAEL,OAAO;YAAEC,OAAO;YAAQC,KAAK;QAAM;IAAE;IAC7CI,KAAK;QAAEN,OAAO;YAAEC,OAAO;YAAMC,KAAK;QAAK;IAAE;IACzC,OAAO;IACPK,IAAI;QAAER,MAAM;QAAKC,OAAO;YAAEC,OAAO;YAAUC,KAAK;QAAO;IAAE;IACzD,KAAK;IACL,GAAGP,OAAOC,WAAW,CACnB;QAAC;QAAM;KAAM,CAACC,GAAG,CAAC,CAACC,MAAQ;YACzBA;YACA;gBAAEC,MAAM;gBAAMC,OAAO;oBAAEC,OAAO;oBAAMC,KAAK;gBAAK;YAAE;SACjD,EACF;IACD,eAAe;IACfM,IAAI;QAAET,MAAM;IAAK;IACjB,MAAM;IACNU,KAAK;QAAEV,MAAM;QAAMC,OAAO;YAAEC,OAAO;YAAQC,KAAK;QAAK;IAAE;IACvD,aAAa;IACbQ,KAAK;QAAEX,MAAM;QAAKC,OAAO;YAAEC,OAAO;YAAMC,KAAK;QAAK;IAAE;IACpDS,MAAM;QAAEZ,MAAM;QAAKC,OAAO;YAAEC,OAAO;YAAMC,KAAK;QAAK;IAAE;IACrD,WAAW;IACXU,IAAI;QAAEZ,OAAO;YAAEC,OAAO;YAAQC,KAAK;QAAM;IAAE;IAC3C,YAAY;IACZW,IAAI;QAAEd,MAAM;QAAKC,OAAO;YAAEC,OAAO;YAAMC,KAAK;QAAK;IAAE;IACnD,SAAS;IACTY,QAAQ;QAAEf,MAAM;IAAK;AACvB,EAAE;AAEF;;;CAGC,GACD,MAAMgB,qBAAqB;AAE3B;;;;CAIC,GACD,MAAMC,mBAAmB,CAACC;IACxB,MAAMC,QAAQ;QAAC,CAAC,SAAS,EAAEC,KAAKC,SAAS,CAACH,UAAUI,OAAO,GAAG;KAAC;IAC/D,IAAIJ,UAAUK,OAAO,KAAKC,WAAW;QACnCL,MAAMM,IAAI,CAAC,CAAC,SAAS,EAAEL,KAAKC,SAAS,CAACH,UAAUK,OAAO,GAAG;IAC5D;IACAJ,MAAMM,IAAI,CAAC,CAAC,QAAQ,EAAEL,KAAKC,SAAS,CAACH,UAAUQ,MAAM,GAAG;IACxD,IAAIR,UAAUS,IAAI,KAAKH,WAAW;QAChCL,MAAMM,IAAI,CAAC,CAAC,MAAM,EAAEL,KAAKC,SAAS,CAACH,UAAUS,IAAI,GAAG;IACtD;IACA,OAAO,CAAC,EAAE,EAAER,MAAMS,IAAI,CAAC,MAAM,EAAE,CAAC;AAClC;AAEA;;;;;;;;CAQC,GACD,MAAMC,gBAAgB,CAACC,KAAaC,MAClC,CAAC;yBACsB,EAAED,IAAI,YAAY,EAAEA,IAAI,GAAG,EAAEC,IAAI;yBACjC,EAAED,IAAI,mCAAmC,EAAEC,IAAI;GACrE,CAAC;AAEJ;;;;;;;;;CASC,GACD,MAAMC,yBAAyB,OAC7BC,MACAC;IAEA,MAAM,EAAEC,eAAe,EAAEC,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAC/D;IAGF,uEAAuE;IACvE,MAAMC,eAAe,MAAMF,gBACzBF,MACA7C,gCACA,CAAC,4CAA4C,EAAEgD,wBAAwB,YAAY,CAAC,EACpFF;IAEF,IAAIG,cAAc,OAAO;IAEzB,8EAA8E;IAC9E,OAAOF,gBACLF,MACA7C,gCACA,CAAC,gCAAgC,EAAEgD,wBAAwB,IAAI,CAAC,EAChEF;AAEJ;AAEA;;;;CAIC,GACD,MAAMI,uBAAuB,OAAOL;IAClC,IAAI,CAACA,KAAKM,MAAM,CAACnD,iCAAiC,OAAO;IACzD,MAAM,EAAEoD,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC;IACrC,OAAOA,YACLP,MACA7C,gCACA;AAEJ;AAEA;;;;;CAKC,GACD,MAAMqD,gBAAgB;IACpB;IACA;IACA;IACA;CACD;AAED;;;;;;;;;;CAUC,GACD,OAAO,MAAMC,iCAAiC,OAC5CT;IAEA,MAAMU,sBAAsB;IAC5B,IAAI,CAACV,KAAKM,MAAM,CAACI,sBAAsB;IAEvC,MAAMC,cAAcxB,KAAKyB,KAAK,CAACZ,KAAKa,IAAI,CAACH,qBAAqB;IAC9D,MAAMI,SAASH,YAAYI,OAAO,EAAE,CAAC,gBAAgB;IACrD,IAAI,CAACD,QAAQ;IAEb,MAAME,SAASR,cAAcS,MAAM,CAAC,CAACC,IAAMlB,KAAKM,MAAM,CAACY,IAAIrD,GAAG,CAC5D,CAACqD,IAAM,CAAC,gBAAgB,EAAEA,GAAG;IAG/B,IAAI,MAAMC,mBAAmBnB,OAAO;QAClCgB,OAAOxB,IAAI,CAAC;IACd;IAEAwB,OAAOxB,IAAI,CAAC;IAEZsB,OAAOE,MAAM,GAAGA;IAChBhB,KAAKoB,KAAK,CAACV,qBAAqBvB,KAAKC,SAAS,CAACuB,aAAa,MAAM;AACpE,EAAE;AAEF;;CAEC,GACD,MAAMQ,qBAAqB,OAAOnB;IAChC,IAAI,CAACA,KAAKM,MAAM,CAACnD,iCAAiC,OAAO;IACzD,MAAM,EAAEoD,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC;IACrC,OAAOA,YAAYP,MAAM7C,gCAAgC;AAC3D;AAEA;;;CAGC,GACD,MAAMkE,8BAA8B,CAACrB;IACnC,KAAK,MAAM,CAACsB,MAAMC,OAAO,IAAIvE,YAAYgD,MAAO;QAC9C,IAAIuB,OAAOR,OAAO,EAAE,CAAC,gBAAgB,EAAE,OAAOO;IAChD;IACA,OAAO/B;AACT;AAEA;;;;;;;CAOC,GACD,OAAO,MAAMiC,8BAA8B,CACzCxB,MACAyB;IAEA,MAAMC,sBAAsBL,4BAA4BrB;IACxD,IAAI,CAAC0B,qBAAqB;IAE1B,IAAIC;IACJ,IAAI;QACFA,UAAU1E,yBAAyB+C,MAAMyB;IAC3C,EAAE,OAAM;QACN;IACF;IAEA,6EAA6E;IAC7E,8DAA8D;IAC9D,IAAI,CAACE,QAAQZ,OAAO,EAAEa,QAAQH,gBAAgBC,qBAAqB;IAEnEnE,kCAAkCoE,SAAS,QAAQ;QACjDE,UAAU;YAACH;SAAoB;QAC/BZ,QAAQ;IACV;IACA5D,2BAA2B8C,MAAMyB,aAAaE;AAChD,EAAE;AAEF;;;;CAIC,GACD,OAAO,MAAMG,kCAAkC,CAAC9B;IAC9C,KAAK,MAAM,CAACsB,KAAK,IAAItE,YAAYgD,MAAO;QACtCwB,4BAA4BxB,MAAMsB;IACpC;AACF,EAAE;AAMF;;;;CAIC,GACD,OAAO,MAAMS,6BAA6B,OACxC/B,MACAgC;IAEA,IAAI,CAAChC,KAAKM,MAAM,CAACnD,iCAAiC;IAElD,MAAM,EAAE8E,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC;IAE/C,IAAI,MAAM5B,qBAAqBL,OAAO;QACpC;IACF;IAEA,MAAMkC,aAAaF,SAASG,sBAAsB;IAClD,MAAMC,aAAaF,aACf,oDACA;IAEJ,MAAMlE,QAAQ,CAAC,kDAAkD,EAAEoE,WAAW,kBAAkB,CAAC;IAEjG,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,kEAAkE;IAClE,MAAMC,QAAQ,MAAMtC,uBAAuBC,MAAMhC;IAEjD,yEAAyE;IACzE,2CAA2C;IAC3C,IAAIqE,OAAO;QACT,MAAMJ,sBACJjC,MACA7C,gCACA+E,aACI;YAAC;YAA6B;YAAgB;SAAkB,GAChE;YAAC;YAA6B;SAAe,EACjDnD;QAEF,MAAMzB,qBAAqB0C,MAAM7C;IACnC;AACF,EAAE;AAEF;;;;;;;;CAQC,GACD,OAAO,MAAMmF,0BAA0B,OACrCtC,MACAuC;IAEA,IAAI,CAACvC,KAAKM,MAAM,CAACnD,iCAAiC;IAElD,MAAM,EAAE+C,eAAe,EAAEC,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAC/D;IAGF,IAAI,CAAE,MAAME,qBAAqBL,OAAQ;QACvC;IACF;IAEA,IAAIwC,WAAW;IACf,KAAK,MAAMvD,aAAasD,WAAY;QAClC,MAAME,MAAMtD,KAAKC,SAAS,CAACH,UAAUI,OAAO;QAC5C,MAAMqD,WAAW,MAAMxC,gBACrBF,MACA7C,gCACA,CAAC;0CACmC,EAAEsF,IAAI;QACxC,EAAE7C,cAAc,cAAcO,yBAAyB;OACxD,CAAC,EACFnB,iBAAiBC;QAEnBuD,aAAaE;IACf;IAEA,IAAIF,UAAU;QACZ,MAAMlF,qBAAqB0C,MAAM7C;IACnC;AACF,EAAE;AAEF;;;CAGC,GACD,OAAO,MAAMwF,+BAA+B,OAC1C3C;IAEA,IAAI,CAACA,KAAKM,MAAM,CAACnD,iCAAiC;IAElD,MAAM,EAAE8E,qBAAqB,EAAE/B,eAAe,EAAEC,uBAAuB,EAAE,GACvE,MAAM,MAAM,CAAC;IAEf,IAAI,CAAE,MAAME,qBAAqBL,OAAQ;QACvC;IACF;IAEA,MAAMqC,QAAQ,MAAMnC,gBAClBF,MACA7C,gCACA,CAAC;;MAEC,EAAEyC,cAAc,cAAcO,yBAAyB;KACxD,CAAC,EACF;IAGF,IAAIkC,OAAO;QACT,MAAMJ,sBACJjC,MACA7C,gCACA;YAAC;SAAkB,EACnB4B;QAEF,MAAMzB,qBAAqB0C,MAAM7C;QACjC,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,MAAMsD,+BAA+BT;IACvC;AACF,EAAE;AAEF;;CAEC,GACD,OAAO,MAAM4C,uBAAuB,CAClClD,MACAmD;IAEA,OAAQnD;QACN,KAAK;YAAO;gBACV,+CAA+C;gBAC/C,MAAMoD,aAAa;oBACjB,CAAC,UAAU,EAAED,gBAAgB,sBAAsB,CAAC;oBACpD;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;iBACD;gBACD,MAAME,SAASC,KAAKC,GAAG,IAAIH,WAAWjF,GAAG,CAAC,CAACE,OAASA,KAAKmF,MAAM;gBAC/D,MAAMC,QAAQL,WAAWjF,GAAG,CAC1B,CAACE,OAAS,GAAGA,OAAO,IAAIqF,MAAM,CAACL,SAAShF,KAAKmF,MAAM,GAAG;gBAExD,OAAO;oBACLxD;oBACAmD;oBACAQ,QAAQ;wBACNC,SAAS;4BAAEH;wBAAM;wBACjBI,QAAQ;4BACN,gCAAgC;gCAC9BC,YAAY,CAAC,IAAI,EAAE,IAAIJ,MAAM,CAACL,QAAQ,EAAE,CAAC;gCACzCU,WAAW;gCACXC,SAAS;gCACTC,UAAU,CAAC,IAAI,EAAE,IAAIP,MAAM,CAACL,QAAQ,GAAG,CAAC;4BAC1C;4BACA,mBAAmB;gCACjBS,YAAY,CAAC,GAAG,EAAE,IAAIJ,MAAM,CAACL,QAAQ,EAAE,CAAC;gCACxCU,WAAW;gCACXC,SAAS;gCACTC,UAAU,CAAC,GAAG,EAAE,IAAIP,MAAM,CAACL,QAAQ,EAAE,CAAC;4BACxC;wBACF;wBACAa,SAAS;4BAAC;yBAAa;oBACzB;gBACF;YACF;QACA;YAAS;gBACP,OAAO;oBACLlE;oBACAmD;oBACA,GAAIrF,mBAAmBqG,GAAG,CAACnE,QACvB;wBACEoE,eAAe,IAAIC,OAAOC,WAAW;oBACvC,IACA,CAAC,CAAC;oBACNX,QAAQ;wBACNC,SAAS;4BACPH,OAAO;gCACL,CAAC,UAAU,EAAEN,gBAAgB,sBAAsB,CAAC;gCACpD,CAAC,yBAAyB,EAAEnD,MAAM;6BACnC;wBACH;wBACA6D,QAAQ;4BACN,gCAAgC;gCAC9BC,YAAY;gCACZC,WAAW;gCACXE,UAAU;4BACZ;4BACA,mBAAmB;gCACjBH,YAAY;gCACZC,WAAW;gCACXE,UAAU;4BACZ;wBACF;wBACAC,SAAS;4BAAC;yBAAa;oBACzB;gBACF;YACF;IACF;AACF,EAAE;AAEF;;;;;;;;CAQC,GACD,OAAO,MAAMK,qBAAqB,OAChCjE,MACAkE;IAEA,MAAM,EAAEC,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC;IAEvC,4EAA4E;IAC5E,wEAAwE;IACxE,4CAA4C;IAC5C,MAAMC,YAAYpE,KAAKM,MAAM,CAACnD,kCAC1B,MAAMgH,cACJnE,MACA7C,gCACA,wBAEFoC;IAEJ,MAAMlC,wBAAwB2C,MAAM;QAAEqE,SAAS;YAAEH;QAAO;IAAE;IAE1D,0EAA0E;IAC1E,8EAA8E;IAC9E,yCAAyC;IACzC,IAAIE,WAAW;QACb,MAAMrE,uBAAuBC,MAAMoE;QACnC,MAAM9G,qBAAqB0C,MAAM7C;IACnC;AACF,EAAE;AAEF;;CAEC,GACD,OAAO,MAAMmH,oBAAoB,OAC/BtE;IAEA,OAAQ,CAAA,MAAM5C,sBAAsB4C,KAAI,GAAIqE;AAC9C,EAAE"}

package/src/license/dependency-check/check.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type LicenseCollector } from './collectors/collector';
+import type { CheckResult, DependencyCheckConfig } from './types';
+export interface RunCheckOptions {
+    projectRoot: string;
+    config: DependencyCheckConfig;
+    collectors?: LicenseCollector[];
+}
+export declare const runCheck: (options: RunCheckOptions) => Promise<CheckResult>;
+export interface FormatReportOptions {
+    collectors?: LicenseCollector[];
+}
+export declare const formatReport: (result: CheckResult, options?: FormatReportOptions) => string;

package/src/license/dependency-check/check.js

@@ -0,0 +1,116 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { AWS_NX_PLUGIN_CONFIG_FILE_NAME } from "../../utils/config/utils.js";
+import { DEFAULT_COLLECTORS } from "./collectors/collector.js";
+import { createEvaluator } from "./evaluator.js";
+const findException = (exceptions, name, version)=>{
+    if (!exceptions) return undefined;
+    return exceptions.find((e)=>e && e.package === name && (!e.version || e.version === version));
+};
+export const runCheck = async (options)=>{
+    const { projectRoot, config } = options;
+    const collectors = options.collectors ?? DEFAULT_COLLECTORS;
+    const evaluator = createEvaluator({
+        allow: config.allow
+    });
+    const allDeps = await Promise.all(collectors.map((c)=>c.collect({
+            workspaceRoot: projectRoot
+        })));
+    const dependencies = [];
+    for (const deps of allDeps){
+        for (const dep of deps){
+            const exception = findException(config.exceptions, dep.name, dep.version);
+            const license = exception?.spdx ?? dep.rawLicense;
+            const status = exception ? 'PRE_APPROVED' : evaluator.evaluate(license);
+            config.onDependency?.({
+                package: dep.name,
+                spdx: license
+            });
+            dependencies.push({
+                name: dep.name,
+                version: dep.version,
+                ecosystem: dep.ecosystem,
+                rawLicense: dep.rawLicense,
+                status,
+                exception
+            });
+        }
+    }
+    const pass = !dependencies.some((d)=>d.status === 'NOT_APPROVED' || d.status === 'UNKNOWN');
+    return {
+        pass,
+        dependencies
+    };
+};
+export const formatReport = (result, options)=>{
+    const groups = new Map();
+    for (const dep of result.dependencies){
+        if (dep.status === 'PRE_APPROVED') continue;
+        const arr = groups.get(dep.status) ?? [];
+        arr.push(dep);
+        groups.set(dep.status, arr);
+    }
+    if (groups.size === 0) {
+        const total = result.dependencies.length;
+        return `License check passed (${total} dependencies inspected).`;
+    }
+    const failing = [
+        ...groups.get('NOT_APPROVED') ?? [],
+        ...groups.get('UNKNOWN') ?? []
+    ];
+    const lines = [
+        'License check failed:',
+        ''
+    ];
+    for (const status of [
+        'NOT_APPROVED',
+        'UNKNOWN'
+    ]){
+        const deps = groups.get(status);
+        if (!deps || deps.length === 0) continue;
+        lines.push(`  ${status}:`);
+        for (const dep of deps){
+            const license = dep.rawLicense || '(no license declared)';
+            lines.push(`    - ${dep.name}@${dep.version} [${dep.ecosystem}] ${license}`);
+        }
+        lines.push('');
+    }
+    const collectors = options?.collectors ?? DEFAULT_COLLECTORS;
+    const activeEcosystems = new Set(result.dependencies.map((d)=>d.ecosystem));
+    const traceCommands = collectors.filter((c)=>{
+        if (!c.traceCommand) return false;
+        const eco = c.name === 'python' ? 'pypi' : c.name;
+        return activeEcosystems.has(eco);
+    });
+    if (traceCommands.length > 0) {
+        lines.push('To trace the dependency chain:');
+        for (const c of traceCommands){
+            lines.push(`  ${c.name}: ${c.traceCommand}`);
+        }
+        lines.push('');
+    }
+    lines.push(`To fix, add exceptions to license.dependencies.exceptions in ${AWS_NX_PLUGIN_CONFIG_FILE_NAME}:`);
+    lines.push('');
+    lines.push('  exceptions: [');
+    for (const dep of failing){
+        lines.push(`    { package: '${dep.name}', reason: '<your reason>' },`);
+    }
+    lines.push('  ]');
+    lines.push('');
+    const uniqueLicenses = [
+        ...new Set(failing.filter((d)=>d.rawLicense && d.status === 'NOT_APPROVED').map((d)=>d.rawLicense))
+    ];
+    if (uniqueLicenses.length > 0) {
+        lines.push('Or add the license to license.dependencies.allow if it should be broadly permitted:');
+        lines.push('');
+        lines.push('  allow: [');
+        for (const lic of uniqueLicenses){
+            lines.push(`    { spdxId: '${lic}', fullName: '${lic}', aliases: [] },`);
+        }
+        lines.push('  ]');
+    }
+    return lines.join('\n');
+};
+
+//# sourceMappingURL=check.js.map

package/src/license/dependency-check/check.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/license/dependency-check/check.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport { AWS_NX_PLUGIN_CONFIG_FILE_NAME } from '../../utils/config/utils';\nimport {\n  DEFAULT_COLLECTORS,\n  type LicenseCollector,\n} from './collectors/collector';\nimport { createEvaluator } from './evaluator';\nimport type {\n  CheckedDependency,\n  CheckResult,\n  DependencyCheckConfig,\n  DependencyCheckException,\n} from './types';\n\nexport interface RunCheckOptions {\n  projectRoot: string;\n  config: DependencyCheckConfig;\n  collectors?: LicenseCollector[];\n}\n\nconst findException = (\n  exceptions: DependencyCheckException[] | undefined,\n  name: string,\n  version: string,\n): DependencyCheckException | undefined => {\n  if (!exceptions) return undefined;\n  return exceptions.find(\n    (e) => e && e.package === name && (!e.version || e.version === version),\n  );\n};\n\nexport const runCheck = async (\n  options: RunCheckOptions,\n): Promise<CheckResult> => {\n  const { projectRoot, config } = options;\n  const collectors = options.collectors ?? DEFAULT_COLLECTORS;\n  const evaluator = createEvaluator({ allow: config.allow });\n\n  const allDeps = await Promise.all(\n    collectors.map((c) => c.collect({ workspaceRoot: projectRoot })),\n  );\n\n  const dependencies: CheckedDependency[] = [];\n\n  for (const deps of allDeps) {\n    for (const dep of deps) {\n      const exception = findException(config.exceptions, dep.name, dep.version);\n      const license = exception?.spdx ?? dep.rawLicense;\n      const status = exception ? 'PRE_APPROVED' : evaluator.evaluate(license);\n      config.onDependency?.({ package: dep.name, spdx: license });\n      dependencies.push({\n        name: dep.name,\n        version: dep.version,\n        ecosystem: dep.ecosystem,\n        rawLicense: dep.rawLicense,\n        status,\n        exception,\n      });\n    }\n  }\n\n  const pass = !dependencies.some(\n    (d) => d.status === 'NOT_APPROVED' || d.status === 'UNKNOWN',\n  );\n\n  return { pass, dependencies };\n};\n\nexport interface FormatReportOptions {\n  collectors?: LicenseCollector[];\n}\n\nexport const formatReport = (\n  result: CheckResult,\n  options?: FormatReportOptions,\n): string => {\n  const groups = new Map<string, CheckedDependency[]>();\n  for (const dep of result.dependencies) {\n    if (dep.status === 'PRE_APPROVED') continue;\n    const arr = groups.get(dep.status) ?? [];\n    arr.push(dep);\n    groups.set(dep.status, arr);\n  }\n\n  if (groups.size === 0) {\n    const total = result.dependencies.length;\n    return `License check passed (${total} dependencies inspected).`;\n  }\n\n  const failing = [\n    ...(groups.get('NOT_APPROVED') ?? []),\n    ...(groups.get('UNKNOWN') ?? []),\n  ];\n\n  const lines: string[] = ['License check failed:', ''];\n  for (const status of ['NOT_APPROVED', 'UNKNOWN'] as const) {\n    const deps = groups.get(status);\n    if (!deps || deps.length === 0) continue;\n    lines.push(`  ${status}:`);\n    for (const dep of deps) {\n      const license = dep.rawLicense || '(no license declared)';\n      lines.push(\n        `    - ${dep.name}@${dep.version} [${dep.ecosystem}] ${license}`,\n      );\n    }\n    lines.push('');\n  }\n\n  const collectors = options?.collectors ?? DEFAULT_COLLECTORS;\n  const activeEcosystems = new Set(result.dependencies.map((d) => d.ecosystem));\n  const traceCommands = collectors.filter((c) => {\n    if (!c.traceCommand) return false;\n    const eco = c.name === 'python' ? 'pypi' : c.name;\n    return activeEcosystems.has(eco);\n  });\n  if (traceCommands.length > 0) {\n    lines.push('To trace the dependency chain:');\n    for (const c of traceCommands) {\n      lines.push(`  ${c.name}: ${c.traceCommand}`);\n    }\n    lines.push('');\n  }\n\n  lines.push(\n    `To fix, add exceptions to license.dependencies.exceptions in ${AWS_NX_PLUGIN_CONFIG_FILE_NAME}:`,\n  );\n  lines.push('');\n  lines.push('  exceptions: [');\n  for (const dep of failing) {\n    lines.push(`    { package: '${dep.name}', reason: '<your reason>' },`);\n  }\n  lines.push('  ]');\n  lines.push('');\n  const uniqueLicenses = [\n    ...new Set(\n      failing\n        .filter((d) => d.rawLicense && d.status === 'NOT_APPROVED')\n        .map((d) => d.rawLicense),\n    ),\n  ];\n  if (uniqueLicenses.length > 0) {\n    lines.push(\n      'Or add the license to license.dependencies.allow if it should be broadly permitted:',\n    );\n    lines.push('');\n    lines.push('  allow: [');\n    for (const lic of uniqueLicenses) {\n      lines.push(`    { spdxId: '${lic}', fullName: '${lic}', aliases: [] },`);\n    }\n    lines.push('  ]');\n  }\n\n  return lines.join('\\n');\n};\n"],"names":["AWS_NX_PLUGIN_CONFIG_FILE_NAME","DEFAULT_COLLECTORS","createEvaluator","findException","exceptions","name","version","undefined","find","e","package","runCheck","options","projectRoot","config","collectors","evaluator","allow","allDeps","Promise","all","map","c","collect","workspaceRoot","dependencies","deps","dep","exception","license","spdx","rawLicense","status","evaluate","onDependency","push","ecosystem","pass","some","d","formatReport","result","groups","Map","arr","get","set","size","total","length","failing","lines","activeEcosystems","Set","traceCommands","filter","traceCommand","eco","has","uniqueLicenses","lic","join"],"mappings":"AAAA;;;CAGC,GAED,SAASA,8BAA8B,QAAQ,8BAA2B;AAC1E,SACEC,kBAAkB,QAEb,4BAAyB;AAChC,SAASC,eAAe,QAAQ,iBAAc;AAc9C,MAAMC,gBAAgB,CACpBC,YACAC,MACAC;IAEA,IAAI,CAACF,YAAY,OAAOG;IACxB,OAAOH,WAAWI,IAAI,CACpB,CAACC,IAAMA,KAAKA,EAAEC,OAAO,KAAKL,QAAS,CAAA,CAACI,EAAEH,OAAO,IAAIG,EAAEH,OAAO,KAAKA,OAAM;AAEzE;AAEA,OAAO,MAAMK,WAAW,OACtBC;IAEA,MAAM,EAAEC,WAAW,EAAEC,MAAM,EAAE,GAAGF;IAChC,MAAMG,aAAaH,QAAQG,UAAU,IAAId;IACzC,MAAMe,YAAYd,gBAAgB;QAAEe,OAAOH,OAAOG,KAAK;IAAC;IAExD,MAAMC,UAAU,MAAMC,QAAQC,GAAG,CAC/BL,WAAWM,GAAG,CAAC,CAACC,IAAMA,EAAEC,OAAO,CAAC;YAAEC,eAAeX;QAAY;IAG/D,MAAMY,eAAoC,EAAE;IAE5C,KAAK,MAAMC,QAAQR,QAAS;QAC1B,KAAK,MAAMS,OAAOD,KAAM;YACtB,MAAME,YAAYzB,cAAcW,OAAOV,UAAU,EAAEuB,IAAItB,IAAI,EAAEsB,IAAIrB,OAAO;YACxE,MAAMuB,UAAUD,WAAWE,QAAQH,IAAII,UAAU;YACjD,MAAMC,SAASJ,YAAY,iBAAiBZ,UAAUiB,QAAQ,CAACJ;YAC/Df,OAAOoB,YAAY,GAAG;gBAAExB,SAASiB,IAAItB,IAAI;gBAAEyB,MAAMD;YAAQ;YACzDJ,aAAaU,IAAI,CAAC;gBAChB9B,MAAMsB,IAAItB,IAAI;gBACdC,SAASqB,IAAIrB,OAAO;gBACpB8B,WAAWT,IAAIS,SAAS;gBACxBL,YAAYJ,IAAII,UAAU;gBAC1BC;gBACAJ;YACF;QACF;IACF;IAEA,MAAMS,OAAO,CAACZ,aAAaa,IAAI,CAC7B,CAACC,IAAMA,EAAEP,MAAM,KAAK,kBAAkBO,EAAEP,MAAM,KAAK;IAGrD,OAAO;QAAEK;QAAMZ;IAAa;AAC9B,EAAE;AAMF,OAAO,MAAMe,eAAe,CAC1BC,QACA7B;IAEA,MAAM8B,SAAS,IAAIC;IACnB,KAAK,MAAMhB,OAAOc,OAAOhB,YAAY,CAAE;QACrC,IAAIE,IAAIK,MAAM,KAAK,gBAAgB;QACnC,MAAMY,MAAMF,OAAOG,GAAG,CAAClB,IAAIK,MAAM,KAAK,EAAE;QACxCY,IAAIT,IAAI,CAACR;QACTe,OAAOI,GAAG,CAACnB,IAAIK,MAAM,EAAEY;IACzB;IAEA,IAAIF,OAAOK,IAAI,KAAK,GAAG;QACrB,MAAMC,QAAQP,OAAOhB,YAAY,CAACwB,MAAM;QACxC,OAAO,CAAC,sBAAsB,EAAED,MAAM,yBAAyB,CAAC;IAClE;IAEA,MAAME,UAAU;WACVR,OAAOG,GAAG,CAAC,mBAAmB,EAAE;WAChCH,OAAOG,GAAG,CAAC,cAAc,EAAE;KAChC;IAED,MAAMM,QAAkB;QAAC;QAAyB;KAAG;IACrD,KAAK,MAAMnB,UAAU;QAAC;QAAgB;KAAU,CAAW;QACzD,MAAMN,OAAOgB,OAAOG,GAAG,CAACb;QACxB,IAAI,CAACN,QAAQA,KAAKuB,MAAM,KAAK,GAAG;QAChCE,MAAMhB,IAAI,CAAC,CAAC,EAAE,EAAEH,OAAO,CAAC,CAAC;QACzB,KAAK,MAAML,OAAOD,KAAM;YACtB,MAAMG,UAAUF,IAAII,UAAU,IAAI;YAClCoB,MAAMhB,IAAI,CACR,CAAC,MAAM,EAAER,IAAItB,IAAI,CAAC,CAAC,EAAEsB,IAAIrB,OAAO,CAAC,EAAE,EAAEqB,IAAIS,SAAS,CAAC,EAAE,EAAEP,SAAS;QAEpE;QACAsB,MAAMhB,IAAI,CAAC;IACb;IAEA,MAAMpB,aAAaH,SAASG,cAAcd;IAC1C,MAAMmD,mBAAmB,IAAIC,IAAIZ,OAAOhB,YAAY,CAACJ,GAAG,CAAC,CAACkB,IAAMA,EAAEH,SAAS;IAC3E,MAAMkB,gBAAgBvC,WAAWwC,MAAM,CAAC,CAACjC;QACvC,IAAI,CAACA,EAAEkC,YAAY,EAAE,OAAO;QAC5B,MAAMC,MAAMnC,EAAEjB,IAAI,KAAK,WAAW,SAASiB,EAAEjB,IAAI;QACjD,OAAO+C,iBAAiBM,GAAG,CAACD;IAC9B;IACA,IAAIH,cAAcL,MAAM,GAAG,GAAG;QAC5BE,MAAMhB,IAAI,CAAC;QACX,KAAK,MAAMb,KAAKgC,cAAe;YAC7BH,MAAMhB,IAAI,CAAC,CAAC,EAAE,EAAEb,EAAEjB,IAAI,CAAC,EAAE,EAAEiB,EAAEkC,YAAY,EAAE;QAC7C;QACAL,MAAMhB,IAAI,CAAC;IACb;IAEAgB,MAAMhB,IAAI,CACR,CAAC,6DAA6D,EAAEnC,+BAA+B,CAAC,CAAC;IAEnGmD,MAAMhB,IAAI,CAAC;IACXgB,MAAMhB,IAAI,CAAC;IACX,KAAK,MAAMR,OAAOuB,QAAS;QACzBC,MAAMhB,IAAI,CAAC,CAAC,gBAAgB,EAAER,IAAItB,IAAI,CAAC,6BAA6B,CAAC;IACvE;IACA8C,MAAMhB,IAAI,CAAC;IACXgB,MAAMhB,IAAI,CAAC;IACX,MAAMwB,iBAAiB;WAClB,IAAIN,IACLH,QACGK,MAAM,CAAC,CAAChB,IAAMA,EAAER,UAAU,IAAIQ,EAAEP,MAAM,KAAK,gBAC3CX,GAAG,CAAC,CAACkB,IAAMA,EAAER,UAAU;KAE7B;IACD,IAAI4B,eAAeV,MAAM,GAAG,GAAG;QAC7BE,MAAMhB,IAAI,CACR;QAEFgB,MAAMhB,IAAI,CAAC;QACXgB,MAAMhB,IAAI,CAAC;QACX,KAAK,MAAMyB,OAAOD,eAAgB;YAChCR,MAAMhB,IAAI,CAAC,CAAC,eAAe,EAAEyB,IAAI,cAAc,EAAEA,IAAI,iBAAiB,CAAC;QACzE;QACAT,MAAMhB,IAAI,CAAC;IACb;IAEA,OAAOgB,MAAMU,IAAI,CAAC;AACpB,EAAE"}

package/src/license/dependency-check/collectors/collector.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export interface CollectedDependency {
+    name: string;
+    version: string;
+    rawLicense: string;
+    ecosystem: string;
+    path?: string;
+}
+export interface LicenseCollector {
+    name: string;
+    traceCommand?: string;
+    collect(options: {
+        workspaceRoot: string;
+    }): Promise<CollectedDependency[]>;
+}
+export declare const npmCollector: () => LicenseCollector;
+export declare const pythonCollector: () => LicenseCollector;
+export declare const DEFAULT_COLLECTORS: LicenseCollector[];

package/src/license/dependency-check/collectors/collector.js

@@ -0,0 +1,46 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { workspaceRoot } from "@nx/devkit";
+import { existsSync } from "fs";
+import { join } from "path";
+export const npmCollector = ()=>({
+        name: 'npm',
+        get traceCommand () {
+            if (existsSync(join(workspaceRoot, 'yarn.lock'))) return 'yarn why <package>';
+            if (existsSync(join(workspaceRoot, 'bun.lockb'))) return 'bun pm why <package>';
+            if (existsSync(join(workspaceRoot, 'package-lock.json'))) return 'npm why <package>';
+            return 'pnpm why <package>';
+        },
+        async collect ({ workspaceRoot }) {
+            const { collectNpmDependencies } = await import("./npm-collector.js");
+            return (await collectNpmDependencies({
+                start: workspaceRoot
+            })).map((d)=>({
+                    ...d,
+                    ecosystem: 'npm'
+                }));
+        }
+    });
+export const pythonCollector = ()=>({
+        name: 'python',
+        traceCommand: 'uv tree --invert --package <package>',
+        async collect ({ workspaceRoot }) {
+            const { collectPythonDependencies } = await import("./python-collector.js");
+            const { findWorkspacePyProjectNames } = await import("./python-collector.js");
+            const excludePackages = await findWorkspacePyProjectNames(workspaceRoot);
+            return (await collectPythonDependencies({
+                start: workspaceRoot,
+                excludePackages
+            })).map((d)=>({
+                    ...d,
+                    ecosystem: 'pypi'
+                }));
+        }
+    });
+export const DEFAULT_COLLECTORS = [
+    npmCollector(),
+    pythonCollector()
+];
+
+//# sourceMappingURL=collector.js.map

package/src/license/dependency-check/collectors/collector.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/license/dependency-check/collectors/collector.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport { workspaceRoot } from '@nx/devkit';\nimport { existsSync } from 'fs';\nimport { join } from 'path';\n\nexport interface CollectedDependency {\n  name: string;\n  version: string;\n  rawLicense: string;\n  ecosystem: string;\n  path?: string;\n}\n\nexport interface LicenseCollector {\n  name: string;\n  traceCommand?: string;\n  collect(options: { workspaceRoot: string }): Promise<CollectedDependency[]>;\n}\n\nexport const npmCollector = (): LicenseCollector => ({\n  name: 'npm',\n  get traceCommand() {\n    if (existsSync(join(workspaceRoot, 'yarn.lock')))\n      return 'yarn why <package>';\n    if (existsSync(join(workspaceRoot, 'bun.lockb')))\n      return 'bun pm why <package>';\n    if (existsSync(join(workspaceRoot, 'package-lock.json')))\n      return 'npm why <package>';\n    return 'pnpm why <package>';\n  },\n  async collect({ workspaceRoot }) {\n    const { collectNpmDependencies } = await import('./npm-collector');\n    return (await collectNpmDependencies({ start: workspaceRoot })).map(\n      (d) => ({ ...d, ecosystem: 'npm' }),\n    );\n  },\n});\n\nexport const pythonCollector = (): LicenseCollector => ({\n  name: 'python',\n  traceCommand: 'uv tree --invert --package <package>',\n  async collect({ workspaceRoot }) {\n    const { collectPythonDependencies } = await import('./python-collector');\n    const { findWorkspacePyProjectNames } = await import('./python-collector');\n    const excludePackages = await findWorkspacePyProjectNames(workspaceRoot);\n    return (\n      await collectPythonDependencies({ start: workspaceRoot, excludePackages })\n    ).map((d) => ({ ...d, ecosystem: 'pypi' }));\n  },\n});\n\nexport const DEFAULT_COLLECTORS: LicenseCollector[] = [\n  npmCollector(),\n  pythonCollector(),\n];\n"],"names":["workspaceRoot","existsSync","join","npmCollector","name","traceCommand","collect","collectNpmDependencies","start","map","d","ecosystem","pythonCollector","collectPythonDependencies","findWorkspacePyProjectNames","excludePackages","DEFAULT_COLLECTORS"],"mappings":"AAAA;;;CAGC,GAED,SAASA,aAAa,QAAQ,aAAa;AAC3C,SAASC,UAAU,QAAQ,KAAK;AAChC,SAASC,IAAI,QAAQ,OAAO;AAgB5B,OAAO,MAAMC,eAAe,IAAyB,CAAA;QACnDC,MAAM;QACN,IAAIC,gBAAe;YACjB,IAAIJ,WAAWC,KAAKF,eAAe,eACjC,OAAO;YACT,IAAIC,WAAWC,KAAKF,eAAe,eACjC,OAAO;YACT,IAAIC,WAAWC,KAAKF,eAAe,uBACjC,OAAO;YACT,OAAO;QACT;QACA,MAAMM,SAAQ,EAAEN,aAAa,EAAE;YAC7B,MAAM,EAAEO,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC;YAChD,OAAO,AAAC,CAAA,MAAMA,uBAAuB;gBAAEC,OAAOR;YAAc,EAAC,EAAGS,GAAG,CACjE,CAACC,IAAO,CAAA;oBAAE,GAAGA,CAAC;oBAAEC,WAAW;gBAAM,CAAA;QAErC;IACF,CAAA,EAAG;AAEH,OAAO,MAAMC,kBAAkB,IAAyB,CAAA;QACtDR,MAAM;QACNC,cAAc;QACd,MAAMC,SAAQ,EAAEN,aAAa,EAAE;YAC7B,MAAM,EAAEa,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC;YACnD,MAAM,EAAEC,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC;YACrD,MAAMC,kBAAkB,MAAMD,4BAA4Bd;YAC1D,OAAO,AACL,CAAA,MAAMa,0BAA0B;gBAAEL,OAAOR;gBAAee;YAAgB,EAAC,EACzEN,GAAG,CAAC,CAACC,IAAO,CAAA;oBAAE,GAAGA,CAAC;oBAAEC,WAAW;gBAAO,CAAA;QAC1C;IACF,CAAA,EAAG;AAEH,OAAO,MAAMK,qBAAyC;IACpDb;IACAS;CACD,CAAC"}

package/src/license/dependency-check/collectors/npm-collector.d.ts

@@ -0,0 +1,10 @@
+export interface NpmDependency {
+    name: string;
+    version: string;
+    rawLicense: string;
+    path?: string;
+}
+export interface NpmCollectorOptions {
+    start: string;
+}
+export declare const collectNpmDependencies: (options: NpmCollectorOptions) => Promise<NpmDependency[]>;

package/src/license/dependency-check/collectors/npm-collector.js

@@ -0,0 +1,68 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { existsSync, readFileSync } from "fs";
+import * as licenseChecker from "license-checker-rseidelsohn";
+import { join } from "path";
+const NAME_VERSION_RE = /^(@?[^@]+)@(.+)$/;
+const splitNameVersion = (identifier)=>{
+    const match = identifier.match(NAME_VERSION_RE);
+    if (!match) {
+        return {
+            name: identifier,
+            version: '0.0.0'
+        };
+    }
+    return {
+        name: match[1],
+        version: match[2]
+    };
+};
+const flattenLicense = (raw)=>{
+    if (!raw) return '';
+    if (Array.isArray(raw)) {
+        if (raw.length === 0) return '';
+        if (raw.length === 1) return raw[0];
+        return `(${raw.join(' OR ')})`;
+    }
+    return raw;
+};
+export const collectNpmDependencies = async (options)=>{
+    const nodeModules = join(options.start, 'node_modules');
+    if (!existsSync(nodeModules)) {
+        return [];
+    }
+    const exclude = new Set();
+    const projectPackageJson = join(options.start, 'package.json');
+    if (existsSync(projectPackageJson)) {
+        try {
+            const pkg = JSON.parse(readFileSync(projectPackageJson, 'utf-8'));
+            if (pkg.name) exclude.add(pkg.name);
+        } catch  {
+        // ignore
+        }
+    }
+    const packages = await new Promise((resolve, reject)=>{
+        licenseChecker.init({
+            start: options.start,
+            excludePrivatePackages: true
+        }, (err, results)=>{
+            if (err) reject(err);
+            else resolve(results);
+        });
+    });
+    const out = [];
+    for (const [identifier, info] of Object.entries(packages)){
+        const { name, version } = splitNameVersion(identifier);
+        if (exclude.has(name)) continue;
+        out.push({
+            name,
+            version,
+            rawLicense: flattenLicense(info.licenses),
+            path: info.path
+        });
+    }
+    return out;
+};
+
+//# sourceMappingURL=npm-collector.js.map

package/src/license/dependency-check/collectors/npm-collector.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/license/dependency-check/collectors/npm-collector.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { existsSync, readFileSync } from 'fs';\nimport * as licenseChecker from 'license-checker-rseidelsohn';\nimport { join } from 'path';\n\nexport interface NpmDependency {\n  name: string;\n  version: string;\n  rawLicense: string;\n  path?: string;\n}\n\nexport interface NpmCollectorOptions {\n  start: string;\n}\n\nconst NAME_VERSION_RE = /^(@?[^@]+)@(.+)$/;\n\nconst splitNameVersion = (\n  identifier: string,\n): { name: string; version: string } => {\n  const match = identifier.match(NAME_VERSION_RE);\n  if (!match) {\n    return { name: identifier, version: '0.0.0' };\n  }\n  return { name: match[1], version: match[2] };\n};\n\nconst flattenLicense = (raw: string | string[] | undefined | null): string => {\n  if (!raw) return '';\n  if (Array.isArray(raw)) {\n    if (raw.length === 0) return '';\n    if (raw.length === 1) return raw[0];\n    return `(${raw.join(' OR ')})`;\n  }\n  return raw;\n};\n\nexport const collectNpmDependencies = async (\n  options: NpmCollectorOptions,\n): Promise<NpmDependency[]> => {\n  const nodeModules = join(options.start, 'node_modules');\n  if (!existsSync(nodeModules)) {\n    return [];\n  }\n\n  const exclude = new Set<string>();\n\n  const projectPackageJson = join(options.start, 'package.json');\n  if (existsSync(projectPackageJson)) {\n    try {\n      const pkg = JSON.parse(readFileSync(projectPackageJson, 'utf-8')) as {\n        name?: string;\n      };\n      if (pkg.name) exclude.add(pkg.name);\n    } catch {\n      // ignore\n    }\n  }\n\n  const packages = await new Promise<licenseChecker.ModuleInfos>(\n    (resolve, reject) => {\n      licenseChecker.init(\n        {\n          start: options.start,\n          excludePrivatePackages: true,\n        },\n        (err, results) => {\n          if (err) reject(err);\n          else resolve(results);\n        },\n      );\n    },\n  );\n\n  const out: NpmDependency[] = [];\n  for (const [identifier, info] of Object.entries(packages)) {\n    const { name, version } = splitNameVersion(identifier);\n    if (exclude.has(name)) continue;\n    out.push({\n      name,\n      version,\n      rawLicense: flattenLicense(info.licenses),\n      path: info.path,\n    });\n  }\n  return out;\n};\n"],"names":["existsSync","readFileSync","licenseChecker","join","NAME_VERSION_RE","splitNameVersion","identifier","match","name","version","flattenLicense","raw","Array","isArray","length","collectNpmDependencies","options","nodeModules","start","exclude","Set","projectPackageJson","pkg","JSON","parse","add","packages","Promise","resolve","reject","init","excludePrivatePackages","err","results","out","info","Object","entries","has","push","rawLicense","licenses","path"],"mappings":"AAAA;;;CAGC,GACD,SAASA,UAAU,EAAEC,YAAY,QAAQ,KAAK;AAC9C,YAAYC,oBAAoB,8BAA8B;AAC9D,SAASC,IAAI,QAAQ,OAAO;AAa5B,MAAMC,kBAAkB;AAExB,MAAMC,mBAAmB,CACvBC;IAEA,MAAMC,QAAQD,WAAWC,KAAK,CAACH;IAC/B,IAAI,CAACG,OAAO;QACV,OAAO;YAAEC,MAAMF;YAAYG,SAAS;QAAQ;IAC9C;IACA,OAAO;QAAED,MAAMD,KAAK,CAAC,EAAE;QAAEE,SAASF,KAAK,CAAC,EAAE;IAAC;AAC7C;AAEA,MAAMG,iBAAiB,CAACC;IACtB,IAAI,CAACA,KAAK,OAAO;IACjB,IAAIC,MAAMC,OAAO,CAACF,MAAM;QACtB,IAAIA,IAAIG,MAAM,KAAK,GAAG,OAAO;QAC7B,IAAIH,IAAIG,MAAM,KAAK,GAAG,OAAOH,GAAG,CAAC,EAAE;QACnC,OAAO,CAAC,CAAC,EAAEA,IAAIR,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC;IACA,OAAOQ;AACT;AAEA,OAAO,MAAMI,yBAAyB,OACpCC;IAEA,MAAMC,cAAcd,KAAKa,QAAQE,KAAK,EAAE;IACxC,IAAI,CAAClB,WAAWiB,cAAc;QAC5B,OAAO,EAAE;IACX;IAEA,MAAME,UAAU,IAAIC;IAEpB,MAAMC,qBAAqBlB,KAAKa,QAAQE,KAAK,EAAE;IAC/C,IAAIlB,WAAWqB,qBAAqB;QAClC,IAAI;YACF,MAAMC,MAAMC,KAAKC,KAAK,CAACvB,aAAaoB,oBAAoB;YAGxD,IAAIC,IAAId,IAAI,EAAEW,QAAQM,GAAG,CAACH,IAAId,IAAI;QACpC,EAAE,OAAM;QACN,SAAS;QACX;IACF;IAEA,MAAMkB,WAAW,MAAM,IAAIC,QACzB,CAACC,SAASC;QACR3B,eAAe4B,IAAI,CACjB;YACEZ,OAAOF,QAAQE,KAAK;YACpBa,wBAAwB;QAC1B,GACA,CAACC,KAAKC;YACJ,IAAID,KAAKH,OAAOG;iBACXJ,QAAQK;QACf;IAEJ;IAGF,MAAMC,MAAuB,EAAE;IAC/B,KAAK,MAAM,CAAC5B,YAAY6B,KAAK,IAAIC,OAAOC,OAAO,CAACX,UAAW;QACzD,MAAM,EAAElB,IAAI,EAAEC,OAAO,EAAE,GAAGJ,iBAAiBC;QAC3C,IAAIa,QAAQmB,GAAG,CAAC9B,OAAO;QACvB0B,IAAIK,IAAI,CAAC;YACP/B;YACAC;YACA+B,YAAY9B,eAAeyB,KAAKM,QAAQ;YACxCC,MAAMP,KAAKO,IAAI;QACjB;IACF;IACA,OAAOR;AACT,EAAE"}

package/src/license/dependency-check/collectors/python-collector.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export interface PythonDependency {
+    name: string;
+    version: string;
+    rawLicense: string;
+}
+export interface PythonCollectorOptions {
+    start: string;
+    excludePackages?: string[];
+}
+/**
+ * Discover Python project names in the workspace (from pyproject.toml files)
+ * so they can be excluded from the license check.
+ */
+export declare const findWorkspacePyProjectNames: (start: string) => Promise<string[]>;
+/**
+ * Collect Python dependency licenses by invoking `uvx pip-licenses` against
+ * each discovered virtual environment.
+ */
+export declare const collectPythonDependencies: (options: PythonCollectorOptions) => Promise<PythonDependency[]>;

package/src/license/dependency-check/collectors/python-collector.js

@@ -0,0 +1,114 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import TOML from "@iarna/toml";
+import { execSync } from "child_process";
+import fastGlob from "fast-glob";
+import { existsSync, readFileSync } from "fs";
+import { join } from "path";
+import { uvxCommand } from "../../../utils/py.js";
+const isUsable = (value)=>!!value && value !== 'UNKNOWN';
+// Priority: License-Expression (PEP 639) > License-Metadata (legacy) > License-Classifier (deprecated classifiers)
+const pickLicense = (entry)=>{
+    if (isUsable(entry['License-Expression'])) return entry['License-Expression'];
+    if (isUsable(entry['License-Metadata'])) return entry['License-Metadata'];
+    if (isUsable(entry['License-Classifier'])) return entry['License-Classifier'];
+    return '';
+};
+/**
+ * Discover Python project names in the workspace (from pyproject.toml files)
+ * so they can be excluded from the license check.
+ */ export const findWorkspacePyProjectNames = async (start)=>{
+    const tomlFiles = await fastGlob([
+        '**/pyproject.toml'
+    ], {
+        cwd: start,
+        ignore: [
+            '**/node_modules/**',
+            '**/.venv/**',
+            '**/venv/**',
+            '**/dist/**'
+        ],
+        deep: 4,
+        suppressErrors: true
+    });
+    const names = [];
+    for (const tomlFile of tomlFiles){
+        try {
+            const content = readFileSync(join(start, tomlFile), 'utf-8');
+            const parsed = TOML.parse(content);
+            const name = parsed.project?.name;
+            if (typeof name === 'string') names.push(name);
+        } catch  {
+        // skip unreadable or malformed files
+        }
+    }
+    return names;
+};
+const findVenvPythons = async (start)=>{
+    const patterns = [
+        '**/.venv/bin/python',
+        '**/venv/bin/python',
+        '**/.venv/Scripts/python.exe',
+        '**/venv/Scripts/python.exe'
+    ];
+    const candidates = await fastGlob(patterns, {
+        cwd: start,
+        ignore: [
+            '**/node_modules/**',
+            '**/.nx/**',
+            '**/dist/**',
+            '**/build/**',
+            '**/.git/**'
+        ],
+        deep: 6,
+        suppressErrors: true
+    });
+    const pythons = candidates.map((c)=>join(start, c));
+    if (process.env.UV_PROJECT_ENVIRONMENT) {
+        const envPython = join(process.env.UV_PROJECT_ENVIRONMENT, process.platform === 'win32' ? 'Scripts/python.exe' : 'bin/python');
+        if (existsSync(envPython)) {
+            pythons.push(envPython);
+        }
+    }
+    return pythons.filter((p)=>existsSync(p));
+};
+/**
+ * Collect Python dependency licenses by invoking `uvx pip-licenses` against
+ * each discovered virtual environment.
+ */ export const collectPythonDependencies = async (options)=>{
+    const pythons = await findVenvPythons(options.start);
+    if (pythons.length === 0) return [];
+    const seen = new Map();
+    const ignoreFlag = options.excludePackages?.length ? ` --ignore-packages ${options.excludePackages.join(' ')}` : '';
+    const cmd = uvxCommand('pip-licenses', `--format json --from all${ignoreFlag}`);
+    for (const python of pythons){
+        try {
+            const output = execSync(`${cmd} --python ${python}`, {
+                cwd: options.start,
+                encoding: 'utf-8',
+                stdio: [
+                    'pipe',
+                    'pipe',
+                    'pipe'
+                ],
+                timeout: 60_000
+            });
+            const entries = JSON.parse(output);
+            for (const entry of entries){
+                const key = `${entry.Name}@${entry.Version}`;
+                if (seen.has(key)) continue;
+                seen.set(key, {
+                    name: entry.Name,
+                    version: entry.Version,
+                    rawLicense: pickLicense(entry)
+                });
+            }
+        } catch  {
+        // If pip-licenses fails for this venv, skip it
+        }
+    }
+    return Array.from(seen.values());
+};
+
+//# sourceMappingURL=python-collector.js.map

package/src/license/dependency-check/collectors/python-collector.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/license/dependency-check/collectors/python-collector.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport TOML from '@iarna/toml';\nimport { execSync } from 'child_process';\nimport fastGlob from 'fast-glob';\nimport { existsSync, readFileSync } from 'fs';\nimport { join } from 'path';\nimport { uvxCommand } from '../../../utils/py';\n\nexport interface PythonDependency {\n  name: string;\n  version: string;\n  rawLicense: string;\n}\n\nexport interface PythonCollectorOptions {\n  start: string;\n  excludePackages?: string[];\n}\n\ninterface PipLicensesEntry {\n  Name: string;\n  Version: string;\n  'License-Expression': string;\n  'License-Metadata': string;\n  'License-Classifier': string;\n}\n\nconst isUsable = (value: string | undefined): value is string =>\n  !!value && value !== 'UNKNOWN';\n\n// Priority: License-Expression (PEP 639) > License-Metadata (legacy) > License-Classifier (deprecated classifiers)\nconst pickLicense = (entry: PipLicensesEntry): string => {\n  if (isUsable(entry['License-Expression'])) return entry['License-Expression'];\n  if (isUsable(entry['License-Metadata'])) return entry['License-Metadata'];\n  if (isUsable(entry['License-Classifier'])) return entry['License-Classifier'];\n  return '';\n};\n\n/**\n * Discover Python project names in the workspace (from pyproject.toml files)\n * so they can be excluded from the license check.\n */\nexport const findWorkspacePyProjectNames = async (\n  start: string,\n): Promise<string[]> => {\n  const tomlFiles = await fastGlob(['**/pyproject.toml'], {\n    cwd: start,\n    ignore: ['**/node_modules/**', '**/.venv/**', '**/venv/**', '**/dist/**'],\n    deep: 4,\n    suppressErrors: true,\n  });\n  const names: string[] = [];\n  for (const tomlFile of tomlFiles) {\n    try {\n      const content = readFileSync(join(start, tomlFile), 'utf-8');\n      const parsed = TOML.parse(content);\n      const name = (parsed.project as TOML.JsonMap | undefined)?.name;\n      if (typeof name === 'string') names.push(name);\n    } catch {\n      // skip unreadable or malformed files\n    }\n  }\n  return names;\n};\n\nconst findVenvPythons = async (start: string): Promise<string[]> => {\n  const patterns = [\n    '**/.venv/bin/python',\n    '**/venv/bin/python',\n    '**/.venv/Scripts/python.exe',\n    '**/venv/Scripts/python.exe',\n  ];\n\n  const candidates = await fastGlob(patterns, {\n    cwd: start,\n    ignore: [\n      '**/node_modules/**',\n      '**/.nx/**',\n      '**/dist/**',\n      '**/build/**',\n      '**/.git/**',\n    ],\n    deep: 6,\n    suppressErrors: true,\n  });\n\n  const pythons = candidates.map((c) => join(start, c));\n\n  if (process.env.UV_PROJECT_ENVIRONMENT) {\n    const envPython = join(\n      process.env.UV_PROJECT_ENVIRONMENT,\n      process.platform === 'win32' ? 'Scripts/python.exe' : 'bin/python',\n    );\n    if (existsSync(envPython)) {\n      pythons.push(envPython);\n    }\n  }\n\n  return pythons.filter((p) => existsSync(p));\n};\n\n/**\n * Collect Python dependency licenses by invoking `uvx pip-licenses` against\n * each discovered virtual environment.\n */\nexport const collectPythonDependencies = async (\n  options: PythonCollectorOptions,\n): Promise<PythonDependency[]> => {\n  const pythons = await findVenvPythons(options.start);\n  if (pythons.length === 0) return [];\n\n  const seen = new Map<string, PythonDependency>();\n  const ignoreFlag = options.excludePackages?.length\n    ? ` --ignore-packages ${options.excludePackages.join(' ')}`\n    : '';\n  const cmd = uvxCommand(\n    'pip-licenses',\n    `--format json --from all${ignoreFlag}`,\n  );\n\n  for (const python of pythons) {\n    try {\n      const output = execSync(`${cmd} --python ${python}`, {\n        cwd: options.start,\n        encoding: 'utf-8',\n        stdio: ['pipe', 'pipe', 'pipe'],\n        timeout: 60_000,\n      });\n\n      const entries: PipLicensesEntry[] = JSON.parse(output);\n      for (const entry of entries) {\n        const key = `${entry.Name}@${entry.Version}`;\n        if (seen.has(key)) continue;\n        seen.set(key, {\n          name: entry.Name,\n          version: entry.Version,\n          rawLicense: pickLicense(entry),\n        });\n      }\n    } catch {\n      // If pip-licenses fails for this venv, skip it\n    }\n  }\n\n  return Array.from(seen.values());\n};\n"],"names":["TOML","execSync","fastGlob","existsSync","readFileSync","join","uvxCommand","isUsable","value","pickLicense","entry","findWorkspacePyProjectNames","start","tomlFiles","cwd","ignore","deep","suppressErrors","names","tomlFile","content","parsed","parse","name","project","push","findVenvPythons","patterns","candidates","pythons","map","c","process","env","UV_PROJECT_ENVIRONMENT","envPython","platform","filter","p","collectPythonDependencies","options","length","seen","Map","ignoreFlag","excludePackages","cmd","python","output","encoding","stdio","timeout","entries","JSON","key","Name","Version","has","set","version","rawLicense","Array","from","values"],"mappings":"AAAA;;;CAGC,GAED,OAAOA,UAAU,cAAc;AAC/B,SAASC,QAAQ,QAAQ,gBAAgB;AACzC,OAAOC,cAAc,YAAY;AACjC,SAASC,UAAU,EAAEC,YAAY,QAAQ,KAAK;AAC9C,SAASC,IAAI,QAAQ,OAAO;AAC5B,SAASC,UAAU,QAAQ,uBAAoB;AAqB/C,MAAMC,WAAW,CAACC,QAChB,CAAC,CAACA,SAASA,UAAU;AAEvB,mHAAmH;AACnH,MAAMC,cAAc,CAACC;IACnB,IAAIH,SAASG,KAAK,CAAC,qBAAqB,GAAG,OAAOA,KAAK,CAAC,qBAAqB;IAC7E,IAAIH,SAASG,KAAK,CAAC,mBAAmB,GAAG,OAAOA,KAAK,CAAC,mBAAmB;IACzE,IAAIH,SAASG,KAAK,CAAC,qBAAqB,GAAG,OAAOA,KAAK,CAAC,qBAAqB;IAC7E,OAAO;AACT;AAEA;;;CAGC,GACD,OAAO,MAAMC,8BAA8B,OACzCC;IAEA,MAAMC,YAAY,MAAMX,SAAS;QAAC;KAAoB,EAAE;QACtDY,KAAKF;QACLG,QAAQ;YAAC;YAAsB;YAAe;YAAc;SAAa;QACzEC,MAAM;QACNC,gBAAgB;IAClB;IACA,MAAMC,QAAkB,EAAE;IAC1B,KAAK,MAAMC,YAAYN,UAAW;QAChC,IAAI;YACF,MAAMO,UAAUhB,aAAaC,KAAKO,OAAOO,WAAW;YACpD,MAAME,SAASrB,KAAKsB,KAAK,CAACF;YAC1B,MAAMG,OAAQF,OAAOG,OAAO,EAA+BD;YAC3D,IAAI,OAAOA,SAAS,UAAUL,MAAMO,IAAI,CAACF;QAC3C,EAAE,OAAM;QACN,qCAAqC;QACvC;IACF;IACA,OAAOL;AACT,EAAE;AAEF,MAAMQ,kBAAkB,OAAOd;IAC7B,MAAMe,WAAW;QACf;QACA;QACA;QACA;KACD;IAED,MAAMC,aAAa,MAAM1B,SAASyB,UAAU;QAC1Cb,KAAKF;QACLG,QAAQ;YACN;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,gBAAgB;IAClB;IAEA,MAAMY,UAAUD,WAAWE,GAAG,CAAC,CAACC,IAAM1B,KAAKO,OAAOmB;IAElD,IAAIC,QAAQC,GAAG,CAACC,sBAAsB,EAAE;QACtC,MAAMC,YAAY9B,KAChB2B,QAAQC,GAAG,CAACC,sBAAsB,EAClCF,QAAQI,QAAQ,KAAK,UAAU,uBAAuB;QAExD,IAAIjC,WAAWgC,YAAY;YACzBN,QAAQJ,IAAI,CAACU;QACf;IACF;IAEA,OAAON,QAAQQ,MAAM,CAAC,CAACC,IAAMnC,WAAWmC;AAC1C;AAEA;;;CAGC,GACD,OAAO,MAAMC,4BAA4B,OACvCC;IAEA,MAAMX,UAAU,MAAMH,gBAAgBc,QAAQ5B,KAAK;IACnD,IAAIiB,QAAQY,MAAM,KAAK,GAAG,OAAO,EAAE;IAEnC,MAAMC,OAAO,IAAIC;IACjB,MAAMC,aAAaJ,QAAQK,eAAe,EAAEJ,SACxC,CAAC,mBAAmB,EAAED,QAAQK,eAAe,CAACxC,IAAI,CAAC,MAAM,GACzD;IACJ,MAAMyC,MAAMxC,WACV,gBACA,CAAC,wBAAwB,EAAEsC,YAAY;IAGzC,KAAK,MAAMG,UAAUlB,QAAS;QAC5B,IAAI;YACF,MAAMmB,SAAS/C,SAAS,GAAG6C,IAAI,UAAU,EAAEC,QAAQ,EAAE;gBACnDjC,KAAK0B,QAAQ5B,KAAK;gBAClBqC,UAAU;gBACVC,OAAO;oBAAC;oBAAQ;oBAAQ;iBAAO;gBAC/BC,SAAS;YACX;YAEA,MAAMC,UAA8BC,KAAK/B,KAAK,CAAC0B;YAC/C,KAAK,MAAMtC,SAAS0C,QAAS;gBAC3B,MAAME,MAAM,GAAG5C,MAAM6C,IAAI,CAAC,CAAC,EAAE7C,MAAM8C,OAAO,EAAE;gBAC5C,IAAId,KAAKe,GAAG,CAACH,MAAM;gBACnBZ,KAAKgB,GAAG,CAACJ,KAAK;oBACZ/B,MAAMb,MAAM6C,IAAI;oBAChBI,SAASjD,MAAM8C,OAAO;oBACtBI,YAAYnD,YAAYC;gBAC1B;YACF;QACF,EAAE,OAAM;QACN,+CAA+C;QACjD;IACF;IAEA,OAAOmD,MAAMC,IAAI,CAACpB,KAAKqB,MAAM;AAC/B,EAAE"}

package/src/license/dependency-check/evaluator.d.ts

@@ -0,0 +1,9 @@
+import type { AllowlistEntry, LicenseStatus } from './types';
+export interface EvaluatorOptions {
+    allow: AllowlistEntry[];
+}
+interface Evaluator {
+    evaluate(rawLicense: string | undefined | null): LicenseStatus;
+}
+export declare const createEvaluator: (options: EvaluatorOptions) => Evaluator;
+export {};