@mouryaamit/nx-polystack 0.0.0-stage → 1.0.1

package/dist/src/generators/migrate/nx/build-scripts.js

@@ -0,0 +1,147 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readBuildScripts = exports.baseHrefsInScript = void 0;
+const tslib_1 = require("tslib");
+const fs = tslib_1.__importStar(require("fs"));
+const path = tslib_1.__importStar(require("path"));
+const angular_project_json_1 = require("../angular-project-json");
+const ENV_NAME = {
+    development: 'dev',
+    production: 'prod',
+};
+const releaseName = (env) => ENV_NAME[env] ?? (0, angular_project_json_1.releaseConfigName)(env);
+const flag = (cmd, names) => {
+    for (const n of names) {
+        const m = new RegExp(`(?:^|\\s)--?${n}(?:=|\\s+)(['"]?)([^\\s'"]+)\\1`).exec(cmd);
+        if (m)
+            return m[2];
+    }
+    return undefined;
+};
+const escape = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+/** The `{ … }` text starting at `open` (balanced braces, quotes skipped). */
+function objectAt(text, open) {
+    let depth = 0;
+    let quote;
+    for (let i = open; i < text.length; i++) {
+        const c = text[i];
+        if (quote) {
+            if (c === '\\')
+                i++;
+            else if (c === quote)
+                quote = undefined;
+            continue;
+        }
+        if (c === "'" || c === '"' || c === '`')
+            quote = c;
+        else if (c === '{')
+            depth++;
+        else if (c === '}' && --depth === 0)
+            return text.slice(open, i + 1);
+    }
+    return undefined;
+}
+/** `project: '/x/'` or `project: { uat: '/x/', … }` at the top level of a map's text. */
+function hrefsInMap(map, project) {
+    const key = `(?:^|[\\s,{])(['"]?)${escape(project)}\\1\\s*:\\s*`;
+    const str = new RegExp(`${key}(['"\`])(\\/[^'"\`]*)\\2`, 'm').exec(map);
+    if (str)
+        return { '*': str[3] };
+    const obj = new RegExp(`${key}\\{([^{}]*)\\}`, 'm').exec(map);
+    if (!obj)
+        return undefined;
+    const out = {};
+    for (const m of obj[2].matchAll(/(['"]?)(\w+)\1\s*:\s*(['"`])(\/[^'"`]*)\3/g)) {
+        out[releaseName(m[2])] = m[4];
+    }
+    return Object.keys(out).length > 0 ? out : undefined;
+}
+/**
+ * Base hrefs for `project` in a script's text, read only from maps whose name says base href
+ * (`const BASE_HREF = { project: '/x/' }`, `baseHrefs: { project: { uat: '/x/' } }`). Values must
+ * start with "/". Undefined when there is none, or when two maps disagree.
+ */
+function baseHrefsInScript(text, project) {
+    const found = [];
+    for (const m of text.matchAll(/[\w$]*base[_-]?hrefs?[\w$]*['"]?\s*[:=]\s*\{/gi)) {
+        const map = objectAt(text, (m.index ?? 0) + m[0].length - 1);
+        const hrefs = map ? hrefsInMap(map, project) : undefined;
+        if (hrefs)
+            found.push(hrefs);
+    }
+    if (found.length === 0)
+        return undefined;
+    const first = JSON.stringify(found[0]);
+    return found.every((f) => JSON.stringify(f) === first) ? found[0] : undefined;
+}
+exports.baseHrefsInScript = baseHrefsInScript;
+function readBuildScripts(sourceDir, scripts, projects) {
+    const info = {
+        baseHrefs: new Map(),
+        customBuilds: {},
+        customScripts: [],
+        unread: [],
+    };
+    const names = new Set(projects);
+    const texts = new Map();
+    const read = (rel) => {
+        if (!texts.has(rel)) {
+            try {
+                texts.set(rel, fs.readFileSync(path.join(sourceDir, ...rel.split('/')), 'utf8'));
+            }
+            catch {
+                texts.set(rel, undefined);
+            }
+        }
+        return texts.get(rel);
+    };
+    const set = (project, env, href) => {
+        const hrefs = info.baseHrefs.get(project) ?? {};
+        hrefs[env] = href;
+        info.baseHrefs.set(project, hrefs);
+    };
+    const customProjects = new Map();
+    for (const [name, cmd] of Object.entries(scripts ?? {})) {
+        if (typeof cmd !== 'string')
+            continue;
+        // nx build <p> / nx run <p>:build[:<c>] / ng build <p>, with --configuration and --base-href.
+        const direct = /\b(?:nx|ng)\s+(?:build\s+([\w.-]+)|run\s+([\w.-]+):build(?::([\w-]+))?)/.exec(cmd);
+        if (direct) {
+            const project = direct[1] ?? direct[2];
+            const href = flag(cmd, ['base-href', 'baseHref']);
+            const config = direct[3] ?? flag(cmd, ['configuration', 'c']);
+            if (names.has(project) && href)
+                set(project, config ? releaseName(config) : '*', href);
+            continue;
+        }
+        const node = /\bnode\s+(['"]?)([^\s'"]+\.(?:c|m)?js)\1/.exec(cmd);
+        if (!node || !/build/i.test(`${name} ${node[2]}`))
+            continue;
+        const script = path.posix.normalize(node[2].replace(/^\.\//, ''));
+        const project = flag(cmd, ['project', 'app']);
+        if (!project || (!names.has(project) && project !== 'all'))
+            continue;
+        info.customBuilds[name] = cmd;
+        if (!info.customScripts.includes(script))
+            info.customScripts.push(script);
+        const env = flag(cmd, ['env', 'configuration', 'c']);
+        const targets = project === 'all' ? [...names] : [project];
+        for (const p of targets) {
+            customProjects.set(p, script);
+            const hrefs = read(script) !== undefined ? baseHrefsInScript(read(script), p) : undefined;
+            if (!hrefs)
+                continue;
+            for (const [e, href] of Object.entries(hrefs)) {
+                if (e === '*' && env)
+                    set(p, releaseName(env), href);
+                else
+                    set(p, e, href);
+            }
+        }
+    }
+    info.customScripts.sort();
+    info.unread = [...customProjects.keys()].filter((p) => !info.baseHrefs.has(p)).sort();
+    return info;
+}
+exports.readBuildScripts = readBuildScripts;
+//# sourceMappingURL=build-scripts.js.map

package/dist/src/generators/migrate/nx/build-scripts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-scripts.js","sourceRoot":"","sources":["../../../../../src/generators/migrate/nx/build-scripts.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AACzB,mDAA6B;AAE7B,kEAA4D;AAmB5D,MAAM,QAAQ,GAA2B;IACvC,WAAW,EAAE,KAAK;IAClB,UAAU,EAAE,MAAM;CACnB,CAAC;AACF,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAA,wCAAiB,EAAC,GAAG,CAAC,CAAC;AAE7E,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,KAAe,EAAsB,EAAE;IAChE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE;QACrB,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,iCAAiC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClF,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;KACpB;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAEvE,6EAA6E;AAC7E,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAyB,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,KAAK,EAAE;YACT,IAAI,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;iBACf,IAAI,CAAC,KAAK,KAAK;gBAAE,KAAK,GAAG,SAAS,CAAC;YACxC,SAAS;SACV;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,GAAG,CAAC,CAAC;aAC9C,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACvB,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACrE;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,GAAW,EAAE,OAAe;IAC9C,MAAM,GAAG,GAAG,uBAAuB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,0BAA0B,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,GAAG;QAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,gBAAgB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC,EAAE;QAC7E,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/B;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAC/B,IAAY,EACZ,OAAe;IAEf,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gDAAgD,CAAC,EAAE;QAC/E,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KAC9B;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC;AAbD,8CAaC;AAED,SAAgB,gBAAgB,CAC9B,SAAiB,EACjB,OAA2C,EAC3C,QAAkB;IAElB,MAAM,IAAI,GAAoB;QAC5B,SAAS,EAAE,IAAI,GAAG,EAAE;QACpB,YAAY,EAAE,EAAE;QAChB,aAAa,EAAE,EAAE;QACjB,MAAM,EAAE,EAAE;KACX,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;QAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YACnB,IAAI;gBACF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;aAClF;YAAC,MAAM;gBACN,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;aAC3B;SACF;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,GAAW,EAAE,IAAY,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAChD,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;QACvD,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACtC,8FAA8F;QAC9F,MAAM,MAAM,GAAG,yEAAyE,CAAC,IAAI,CAC3F,GAAG,CACJ,CAAC;QACF,IAAI,MAAM,EAAE;YACV,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9D,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI;gBAAE,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACvF,SAAS;SACV;QACD,MAAM,IAAI,GAAG,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,SAAS;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,KAAK,CAAC;YAAE,SAAS;QACrE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE;YACvB,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC9B,MAAM,KAAK,GACT,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;gBAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG;oBAAE,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;;oBAChD,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;aACtB;SACF;KACF;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtF,OAAO,IAAI,CAAC;AACd,CAAC;AAlED,4CAkEC"}

package/dist/src/generators/migrate/nx/detect.d.ts

@@ -0,0 +1,3 @@
+import type { Detection } from '../adapters/types';
+export declare const SUPPORTED_NX_MAJORS: number[];
+export declare function detectNxWorkspace(sourceDir: string): Detection;

package/dist/src/generators/migrate/nx/detect.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectNxWorkspace = exports.SUPPORTED_NX_MAJORS = void 0;
+const dependencies_1 = require("../../../lib/utils/dependencies");
+const source_1 = require("../source");
+const workspace_source_1 = require("./workspace-source");
+exports.SUPPORTED_NX_MAJORS = [15, 16, 17];
+function detectNxWorkspace(sourceDir) {
+    if (!(0, source_1.sourceExists)(sourceDir, 'nx.json'))
+        return { confidence: 0, reasons: ['no nx.json'] };
+    const version = (0, workspace_source_1.sourceNxVersion)(sourceDir);
+    const major = version ? (0, dependencies_1.majorOf)(version) : undefined;
+    const reasons = [`nx.json, Nx ${version ?? '(version not found in package.json)'}`];
+    let confidence = 0.95;
+    if (major === undefined || !exports.SUPPORTED_NX_MAJORS.includes(major)) {
+        confidence = 0.5;
+        reasons.push(`Nx ${major ?? '?'} is outside the supported 15–17`);
+    }
+    let projects;
+    try {
+        projects = (0, workspace_source_1.discoverProjects)(sourceDir);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { confidence: 0.3, reasons: [...reasons, message.replace(/^migrate: /, '')] };
+    }
+    const counts = new Map();
+    for (const p of projects)
+        counts.set(p.kind, (counts.get(p.kind) ?? 0) + 1);
+    reasons.push(projects.length === 0
+        ? 'no projects found'
+        : `projects: ${[...counts]
+            .sort(([a], [b]) => (a < b ? -1 : 1))
+            .map(([kind, n]) => `${n} ${kind}`)
+            .join(', ')}`);
+    if (!projects.some((p) => (0, workspace_source_1.isSupportedKind)(p.kind))) {
+        confidence = Math.min(confidence, 0.3);
+        reasons.push('no project nx-polystack can migrate yet');
+    }
+    return { confidence, reasons };
+}
+exports.detectNxWorkspace = detectNxWorkspace;
+//# sourceMappingURL=detect.js.map

package/dist/src/generators/migrate/nx/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../../../../src/generators/migrate/nx/detect.ts"],"names":[],"mappings":";;;AAAA,kEAA0D;AAE1D,sCAAyC;AAEzC,yDAK4B;AAEf,QAAA,mBAAmB,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAEhD,SAAgB,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC,IAAA,qBAAY,EAAC,SAAS,EAAE,SAAS,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3F,MAAM,OAAO,GAAG,IAAA,kCAAe,EAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAA,sBAAO,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,eAAe,OAAO,IAAI,qCAAqC,EAAE,CAAC,CAAC;IACpF,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,2BAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC/D,UAAU,GAAG,GAAG,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,GAAG,iCAAiC,CAAC,CAAC;KACnE;IACD,IAAI,QAAyB,CAAC;IAC9B,IAAI;QACF,QAAQ,GAAG,IAAA,mCAAgB,EAAC,SAAS,CAAC,CAAC;KACxC;IAAC,OAAO,GAAG,EAAE;QACZ,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;KACtF;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CACV,QAAQ,CAAC,MAAM,KAAK,CAAC;QACnB,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC;aACrB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAClC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpB,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,kCAAe,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE;QAClD,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;KACzD;IACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAhCD,8CAgCC"}

package/dist/src/generators/migrate/nx/env-encryption.d.ts

@@ -0,0 +1,35 @@
+import { Tree } from '@nx/devkit';
+export declare const RUNTIME_MODULE = "@mouryaamit/nx-polystack/runtime/env-secret";
+/**
+ * The string items of `NAME = [ … ]` in a script (the declaration outside comments and strings).
+ * Undefined when it is missing or an item is anything but one plain quoted string.
+ */
+export declare function stringArrayConst(text: string, name: string): string[] | undefined;
+export interface SourceEnvEncryption {
+    script: string;
+    publicKeys: string[];
+    profileFiles: string[];
+    timeField?: string;
+    branchField?: string;
+    /** Set by applySourceEnvEncryption when the workspace settings were changed to match. */
+    applied?: boolean;
+}
+/** The source's own env encryption, when it has the known shape. */
+export declare function detectSourceEnvEncryption(sourceDir: string): SourceEnvEncryption | {
+    unreadable: string;
+} | undefined;
+/** C2: settings that make the release build encrypt like the source's script. */
+export declare function applySourceEnvEncryption(tree: Tree, sourceDir: string, notes: string[], copiedRoots?: string[]): SourceEnvEncryption | undefined;
+/** Names a module exports (declarations and `export { … }` lists); `default` for a default export. */
+export declare function exportedNames(text: string): string[];
+/**
+ * Whether an env-secret.ts has the known shape: CryptoJS with the ENC() marker, exports
+ * envSecret and decryptEnvironment, exports nothing the wrapper would not keep, and imports
+ * `environment` from a relative path.
+ */
+export declare function isKnownEnvSecret(text: string): {
+    envImport: string;
+} | undefined;
+export declare function envSecretWrapper(file: string, envImport: string): string;
+/** C1: known-shape env-secret.ts files under `roots` become wrappers of the runtime module. */
+export declare function swapEnvSecretModules(tree: Tree, roots: string[], notes: string[], sourceDir?: string): void;

package/dist/src/generators/migrate/nx/env-encryption.js

@@ -0,0 +1,423 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.swapEnvSecretModules = exports.envSecretWrapper = exports.isKnownEnvSecret = exports.exportedNames = exports.applySourceEnvEncryption = exports.detectSourceEnvEncryption = exports.stringArrayConst = exports.RUNTIME_MODULE = void 0;
+const tslib_1 = require("tslib");
+const fs = tslib_1.__importStar(require("fs"));
+const path = tslib_1.__importStar(require("path"));
+const config_1 = require("../../../lib/env-encryption/config");
+const env_file_1 = require("../../../lib/env-encryption/env-file");
+const workspace_1 = require("../../../lib/env-encryption/workspace");
+const angular_project_1 = require("../../../lib/utils/angular-project");
+/**
+ * Sources that encrypt env files with their own script (deny by default, `ENC(...)` values,
+ * `PUBLIC_ENV_KEYS`, sensitive fields of `app.profile.ts`) and decrypt them with their own
+ * `env-secret.ts`: the workspace's env encryption settings are set to produce the same output, and
+ * a known-shape `env-secret.ts` becomes a wrapper of the library runtime module.
+ */
+const code = (s) => `\`${s}\``;
+exports.RUNTIME_MODULE = '@mouryaamit/nx-polystack/runtime/env-secret';
+function readSource(sourceDir, rel) {
+    try {
+        return fs.readFileSync(path.join(sourceDir, ...rel.split('/')), 'utf8');
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Source files under `dir` (relative, POSIX) matching `test`, a few levels deep. */
+function findSourceFiles(sourceDir, dir, test, depth = 3) {
+    const out = [];
+    const walk = (rel, d) => {
+        let entries;
+        try {
+            entries = fs.readdirSync(path.join(sourceDir, ...rel.split('/')), { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            const child = rel ? `${rel}/${e.name}` : e.name;
+            if (e.isDirectory() && d > 0 && e.name !== 'node_modules' && !e.name.startsWith('.')) {
+                walk(child, d - 1);
+            }
+            else if (e.isFile() && test.test(e.name))
+                out.push(child);
+        }
+    };
+    walk(dir, depth);
+    return out.sort();
+}
+/**
+ * The string items of `NAME = [ … ]` in a script (the declaration outside comments and strings).
+ * Undefined when it is missing or an item is anything but one plain quoted string.
+ */
+function stringArrayConst(text, name) {
+    const re = new RegExp(`\\b${name}\\s*=\\s*\\[`, 'g');
+    let m;
+    while ((m = re.exec(text))) {
+        if (!(0, env_file_1.isCodeAt)(text, m.index))
+            continue;
+        const open = m.index + m[0].length - 1;
+        const close = (0, env_file_1.closingBracket)(text, open);
+        if (close < 0)
+            return undefined;
+        const body = (0, env_file_1.stripComments)(text.slice(open + 1, close));
+        const items = [];
+        for (const raw of splitTopLevel(body)) {
+            const item = raw.trim();
+            if (item === '')
+                continue;
+            const strs = (0, env_file_1.quotedStrings)(item);
+            if (strs.length !== 1 || strs[0].start !== 0 || strs[0].end !== item.length)
+                return undefined;
+            items.push((0, env_file_1.unescapeString)(strs[0].content));
+        }
+        return items;
+    }
+    return undefined;
+}
+exports.stringArrayConst = stringArrayConst;
+/** Splits list text at top-level commas (strings kept intact). */
+function splitTopLevel(body) {
+    const parts = [];
+    let last = 0;
+    let depth = 0;
+    const strings = (0, env_file_1.quotedStrings)(body);
+    let si = 0;
+    for (let i = 0; i < body.length; i++) {
+        while (si < strings.length && strings[si].end <= i)
+            si++;
+        if (si < strings.length && strings[si].start <= i && i < strings[si].end) {
+            i = strings[si].end - 1;
+            continue;
+        }
+        const c = body[i];
+        if (c === '[' || c === '{' || c === '(')
+            depth++;
+        else if (c === ']' || c === '}' || c === ')')
+            depth--;
+        else if (c === ',' && depth === 0) {
+            parts.push(body.slice(last, i));
+            last = i + 1;
+        }
+    }
+    parts.push(body.slice(last));
+    return parts;
+}
+/** The source's own env encryption, when it has the known shape. */
+function detectSourceEnvEncryption(sourceDir) {
+    let unreadable;
+    const scripts = findSourceFiles(sourceDir, 'tools', /^encrypt-env\.(c?js|ts)$/);
+    for (const script of scripts) {
+        const text = readSource(sourceDir, script) ?? '';
+        if (!text.includes('ENC('))
+            continue;
+        const publicKeys = stringArrayConst(text, 'PUBLIC_ENV_KEYS');
+        if (!publicKeys) {
+            unreadable = script;
+            continue;
+        }
+        const envFiles = findSourceFiles(sourceDir, 'environments', /^environment.*\.ts$/, 2);
+        // Profiles next to the env files (environments/<app>/app.profile.ts) only.
+        const profiles = findSourceFiles(sourceDir, 'environments', /^app\.profile\.ts$/, 2).filter((f) => /^environments\/[^/]+\/app\.profile\.ts$/.test(f));
+        const declared = new Set();
+        for (const f of envFiles) {
+            for (const field of (0, env_file_1.environmentFields)(readSource(sourceDir, f) ?? ''))
+                declared.add(field.key);
+        }
+        return {
+            script,
+            publicKeys,
+            profileFiles: profiles.length > 0 ? ['app.profile.ts'] : [],
+            timeField: declared.has('timeStamp') ? 'timeStamp' : undefined,
+            branchField: declared.has('branchName')
+                ? 'branchName'
+                : declared.has('branch')
+                    ? 'branch'
+                    : undefined,
+        };
+    }
+    return unreadable ? { unreadable } : undefined;
+}
+exports.detectSourceEnvEncryption = detectSourceEnvEncryption;
+/** True when the workspace block is absent or still the untouched default of the preset/migration. */
+function isDefaultBlock(raw) {
+    if (raw === undefined)
+        return true;
+    let cfg;
+    try {
+        cfg = (0, config_1.normalizeEnvEncryption)(raw);
+    }
+    catch {
+        return false;
+    }
+    const stampDefault = cfg.stamp === undefined || JSON.stringify(cfg.stamp) === JSON.stringify(config_1.DEFAULT_STAMP);
+    return (cfg.mode === 'listed' &&
+        Object.values(cfg.keys).every((k) => k.length === 0) &&
+        JSON.stringify(cfg.publicKeys) === JSON.stringify(config_1.DEFAULT_PUBLIC_KEYS) &&
+        cfg.profileFiles.length === 0 &&
+        cfg.cipher === 'cryptojs' &&
+        JSON.stringify(cfg.keySources) === JSON.stringify(['commit']) &&
+        cfg.metaName === 'x-build' &&
+        stampDefault);
+}
+/** Projects (outside `copiedRoots`) that build through the polystack release executor. */
+function otherReleaseProjects(tree, copiedRoots) {
+    const out = [];
+    const visit = (dir, depth) => {
+        for (const child of tree.children(dir)) {
+            const p = dir ? `${dir}/${child}` : child;
+            if (child === 'project.json' && tree.isFile(p)) {
+                const root = dir;
+                if (copiedRoots.some((r) => root === r || root.startsWith(`${r}/`)))
+                    continue;
+                try {
+                    const pj = JSON.parse(tree.read(p, 'utf8') ?? '{}');
+                    const targets = Object.values(pj.targets ?? {});
+                    if (targets.some((t) => t.executor === angular_project_1.POLYSTACK_BUILD_EXECUTOR))
+                        out.push(pj.name ?? root);
+                }
+                catch {
+                    // Unreadable project.json: not ours to judge.
+                }
+            }
+            else if (depth > 0 &&
+                !tree.isFile(p) &&
+                !['node_modules', 'dist', 'tmp', 'coverage', 'out-tsc'].includes(child) &&
+                !child.startsWith('.')) {
+                visit(p, depth - 1);
+            }
+        }
+    };
+    visit('', 6);
+    return out.sort();
+}
+/** C2: settings that make the release build encrypt like the source's script. */
+function applySourceEnvEncryption(tree, sourceDir, notes, copiedRoots = []) {
+    const detected = detectSourceEnvEncryption(sourceDir);
+    if (detected && 'unreadable' in detected) {
+        notes.push(`Env encryption: the source encrypts its env files with ${code(detected.unreadable)}, but its ` +
+            'public keys list could not be read (it is not a plain list of strings); set the release ' +
+            "build's settings by hand with `pstack encryption`.");
+        return undefined;
+    }
+    const found = detected;
+    if (!found || !tree.exists('nx.json'))
+        return found;
+    const raw = (0, workspace_1.readEnvEncryptionBlock)(tree);
+    const settings = [
+        'mode `all`',
+        'format `enc`',
+        `publicKeys ${found.publicKeys.map(code).join(', ')}`,
+        found.profileFiles.length > 0 ? `profileFiles ${code('app.profile.ts')}` : '',
+        found.timeField || found.branchField
+            ? `stamp fields ${[found.timeField, found.branchField]
+                .filter(Boolean)
+                .map((f) => code(f))
+                .join(' / ')}`
+            : '',
+    ].filter(Boolean);
+    const others = otherReleaseProjects(tree, copiedRoots);
+    if (others.length > 0) {
+        notes.push(`Env encryption: the source encrypts its env files with ${code(found.script)} (${settings.join(', ')}). The workspace's settings apply to every app, and ${others
+            .map(code)
+            .join(', ')} already ` +
+            'build with them, so they were kept: the imported apps are encrypted as the workspace ' +
+            'says until you change it with `pstack encryption`.');
+        return found;
+    }
+    if (!isDefaultBlock(raw)) {
+        notes.push(`Env encryption: the source encrypts its env files with ${code(found.script)} (${settings.join(', ')}); the workspace already has its own ${code('pstack.envEncryption')} settings, so they ` + 'were kept. Compare them with `pstack encryption`.');
+        return found;
+    }
+    const base = (0, config_1.normalizeEnvEncryption)(raw);
+    (0, workspace_1.writeEnvEncryptionBlock)(tree, {
+        ...base,
+        mode: 'all',
+        format: 'enc',
+        publicKeys: found.publicKeys,
+        profileFiles: found.profileFiles,
+        stamp: found.timeField || found.branchField
+            ? {
+                ...config_1.DEFAULT_STAMP,
+                ...(base.stamp ?? {}),
+                timeField: found.timeField ?? config_1.DEFAULT_STAMP.timeField,
+                branchField: found.branchField ?? config_1.DEFAULT_STAMP.branchField,
+            }
+            : base.stamp,
+    });
+    notes.push(`Env encryption: the source encrypts its env files with ${code(found.script)}; ` +
+        `${code('nx.json')} ${code('pstack.envEncryption')} now does the same in release builds ` +
+        `(${settings.join(', ')}). Set the build stamp time zone and format with ` +
+        '`pstack encryption --timezone=… --stamp-format=…` if the source used others.');
+    return { ...found, applied: true };
+}
+exports.applySourceEnvEncryption = applySourceEnvEncryption;
+const WRAPPER_EXPORTS = new Set([
+    'envSecret',
+    'decryptEnvValue',
+    'getBuildMeta',
+    'decryptEnvironment',
+    'EncryptedEnvKey',
+]);
+/** Names a module exports (declarations and `export { … }` lists); `default` for a default export. */
+function exportedNames(text) {
+    const code = (0, env_file_1.stripComments)(text);
+    const names = new Set();
+    for (const m of code.matchAll(/\bexport\s+(?:declare\s+)?(?:async\s+)?(?:function\*?|const|let|var|class|type|interface|enum|abstract\s+class)\s+([A-Za-z_$][\w$]*)/g)) {
+        names.add(m[1]);
+    }
+    for (const m of code.matchAll(/\bexport\s+(?:type\s+)?\{([^}]*)\}/g)) {
+        for (const part of m[1].split(',')) {
+            const name = part
+                .trim()
+                .split(/\s+as\s+/)
+                .pop()
+                ?.trim();
+            if (name)
+                names.add(name);
+        }
+    }
+    if (/\bexport\s+default\b/.test(code) || /\bexport\s*\*/.test(code))
+        names.add('default');
+    // Destructured exports (export const { a, b } = x) are not listed: an unknown shape.
+    if (/\bexport\s+(?:const|let|var)\s*[{[]/.test(code))
+        names.add('(destructured)');
+    return [...names];
+}
+exports.exportedNames = exportedNames;
+/**
+ * Whether an env-secret.ts has the known shape: CryptoJS with the ENC() marker, exports
+ * envSecret and decryptEnvironment, exports nothing the wrapper would not keep, and imports
+ * `environment` from a relative path.
+ */
+function isKnownEnvSecret(text) {
+    const names = exportedNames(text);
+    if (!names.includes('envSecret') || !names.includes('decryptEnvironment'))
+        return undefined;
+    if (names.some((n) => !WRAPPER_EXPORTS.has(n)))
+        return undefined;
+    // A narrower key type (e.g. keyof typeof environment) would be widened by the wrapper.
+    const keyType = /\btype\s+EncryptedEnvKey\s*=\s*([^;\n]+)/.exec((0, env_file_1.stripComments)(text));
+    if (keyType && keyType[1].trim() !== 'string')
+        return undefined;
+    if (!/crypto-js/.test(text) || !text.includes('ENC('))
+        return undefined;
+    const m = /import\s*\{\s*environment\s*\}\s*from\s*(['"])(\.[^'"]+)\1/.exec(text);
+    return m ? { envImport: m[2] } : undefined;
+}
+exports.isKnownEnvSecret = isKnownEnvSecret;
+function envSecretWrapper(file, envImport) {
+    return `// ${file}
+// Env secrets through the nx-polystack runtime module (rewritten by pstack migrate). The release
+// build encrypts env values (nx.json pstack.envEncryption) and the runtime decrypts ENC(...)
+// values with the build commit from <meta name="x-build">, as the original module did. With
+// cipher aes-gcm, main.ts awaits envReady and decryptEnvironmentAsync decrypts other objects.
+import {
+  decryptEnvValue as runtimeDecryptEnvValue,
+  decryptTree,
+  decryptTreeAsync,
+  envReady,
+  envReadySync,
+  envSecret as runtimeEnvSecret,
+  getBuildMeta as runtimeGetBuildMeta,
+  type BuildMeta,
+} from '${exports.RUNTIME_MODULE}';
+
+import { environment } from '${envImport}';
+
+/** Any environment field can be encrypted at build, so this is any key of the env object. */
+export type EncryptedEnvKey = string;
+
+let ready = false;
+function ensureReady(): void {
+  if (!ready) {
+    envReadySync(environment);
+    ready = true;
+  }
+}
+
+/** Build metadata from <meta name="x-build">, or null (dev server / tests). */
+export function getBuildMeta(): BuildMeta | null {
+  return runtimeGetBuildMeta();
+}
+
+/** Decrypts one build-encrypted value; returns it unchanged if it is not ciphertext. */
+export function decryptEnvValue(value: string, commit?: string | null): string {
+  return runtimeDecryptEnvValue(value, commit);
+}
+
+/** Plaintext value of an environment field ('' when the env file does not define it). */
+export function envSecret(key: EncryptedEnvKey): string {
+  ensureReady();
+  return runtimeEnvSecret(key);
+}
+
+/** Decrypts every ENC(...) value of the environment in place; returns the dotted paths decrypted. */
+export function decryptEnvironment(
+  env: Record<string, unknown> = environment as Record<string, unknown>,
+): string[] {
+  if (env !== (environment as unknown)) return decryptTree(env);
+  ready = true;
+  return envReadySync(environment, { inPlace: true });
+}
+
+/**
+ * Decrypts every encrypted value in place (aes-gcm ENC2 too) with the key registered by envReady:
+ * the environment without an argument, else that object; returns the dotted paths decrypted.
+ */
+export function decryptEnvironmentAsync(obj?: object): Promise<string[]> {
+  return obj ? decryptTreeAsync(obj) : envReady(environment, { inPlace: true });
+}
+`;
+}
+exports.envSecretWrapper = envSecretWrapper;
+/** C1: known-shape env-secret.ts files under `roots` become wrappers of the runtime module. */
+function swapEnvSecretModules(tree, roots, notes, sourceDir) {
+    const swapped = [];
+    const kept = [];
+    const visit = (dir, depth) => {
+        if (!tree.exists(dir) || tree.isFile(dir))
+            return;
+        for (const child of tree.children(dir)) {
+            const p = `${dir}/${child}`;
+            if (tree.isFile(p)) {
+                if (child !== 'env-secret.ts')
+                    continue;
+                const text = tree.read(p, 'utf8') ?? '';
+                if (text.includes(exports.RUNTIME_MODULE))
+                    continue;
+                // Only files this import copied (a workspace file kept in a shared folder is left alone).
+                if (sourceDir !== undefined && readSource(sourceDir, p) !== text)
+                    continue;
+                const shape = isKnownEnvSecret(text);
+                if (shape) {
+                    tree.write(p, envSecretWrapper(p, shape.envImport));
+                    swapped.push(p);
+                }
+                else if (/crypto-js|ENC\(/.test(text)) {
+                    kept.push(p);
+                }
+            }
+            else if (depth > 0 && child !== 'node_modules' && !child.startsWith('.')) {
+                visit(p, depth - 1);
+            }
+        }
+    };
+    for (const root of [...new Set(roots)].sort())
+        visit(root, 6);
+    if (swapped.length > 0) {
+        notes.push(`Env secrets: ${swapped.map(code).join(', ')} now wrap ${code(exports.RUNTIME_MODULE)} ` +
+            '(same exports: envSecret, decryptEnvValue, getBuildMeta, decryptEnvironment, plus ' +
+            'decryptEnvironmentAsync for cipher aes-gcm); modules ' +
+            'that import them, such as env-init.ts, are unchanged. envSecret() caches each value ' +
+            'after its first read; code that changes `environment` at runtime and reads it again ' +
+            'through envSecret() sees the first value.');
+    }
+    if (kept.length > 0) {
+        notes.push(`Env secrets: ${kept.map(code).join(', ')} decrypt env values their own way and were kept; ` +
+            `check them against ${code(exports.RUNTIME_MODULE)} and the release build's settings.`);
+    }
+}
+exports.swapEnvSecretModules = swapEnvSecretModules;
+//# sourceMappingURL=env-encryption.js.map