@mouryaamit/nx-polystack 0.0.0-stage → 1.0.1

package/dist/src/lib/helpers/encrypt-env.d.ts

@@ -0,0 +1,13 @@
+export interface EncryptEnvOptions {
+    /** Absolute path to the environment file (e.g. environment.ts). */
+    filePath: string;
+    /** Keys whose plaintext string values will be replaced with AES ciphertext. */
+    keysToEncrypt: string[];
+    /** AES encryption key (typically the git commit hash). */
+    encryptionKey: string;
+}
+/**
+ * Replaces `<key>: '<plaintext>'` patterns with `<key>: '<ciphertext>'` in place.
+ * This is build-time obfuscation only — the commit hash is recoverable from the bundle.
+ */
+export declare function encryptEnvFile(opts: EncryptEnvOptions): void;

package/dist/src/lib/helpers/encrypt-env.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encryptEnvFile = void 0;
+const tslib_1 = require("tslib");
+const fs = tslib_1.__importStar(require("fs"));
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const CryptoJS = require('crypto-js');
+/**
+ * Replaces `<key>: '<plaintext>'` patterns with `<key>: '<ciphertext>'` in place.
+ * This is build-time obfuscation only — the commit hash is recoverable from the bundle.
+ */
+function encryptEnvFile(opts) {
+    const { filePath, keysToEncrypt, encryptionKey } = opts;
+    if (!fs.existsSync(filePath)) {
+        throw new Error(`encryptEnvFile: file not found: ${filePath}`);
+    }
+    if (keysToEncrypt.length === 0)
+        return;
+    let content = fs.readFileSync(filePath, 'utf8');
+    for (const key of keysToEncrypt) {
+        const re = new RegExp(`(${escapeRegex(key)}\\s*:\\s*['"])([^'"]+)(['"])`, 'g');
+        content = content.replace(re, (_, pre, plaintext, post) => {
+            const cipher = CryptoJS.AES.encrypt(plaintext, encryptionKey).toString();
+            return `${pre}${cipher}${post}`;
+        });
+    }
+    fs.writeFileSync(filePath, content, 'utf8');
+}
+exports.encryptEnvFile = encryptEnvFile;
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+//# sourceMappingURL=encrypt-env.js.map

package/dist/src/lib/helpers/encrypt-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt-env.js","sourceRoot":"","sources":["../../../../src/lib/helpers/encrypt-env.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AAEzB,8DAA8D;AAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAWtC;;;GAGG;AACH,SAAgB,cAAc,CAAC,IAAuB;IACpD,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;KAChE;IACD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEvC,IAAI,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEhD,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE;QAC/B,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QAC/E,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;YACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC;YACzE,OAAO,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;KACJ;IAED,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAlBD,wCAkBC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/src/lib/helpers/inject-meta.d.ts

@@ -0,0 +1,14 @@
+export interface InjectMetaOptions {
+    indexHtmlPath: string;
+    env: string;
+    branch: string;
+    commit: string;
+    buildNumber: string;
+    /** Meta tag name (default x-build). */
+    metaName?: string;
+    /** Build time (default now); the aes-gcm key uses the same instant. */
+    now?: Date;
+    /** Extra payload fields (aes-gcm key share `k`). */
+    extra?: Record<string, string>;
+}
+export declare function injectBuildMeta(opts: InjectMetaOptions): void;

package/dist/src/lib/helpers/inject-meta.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.injectBuildMeta = void 0;
+const tslib_1 = require("tslib");
+const fs = tslib_1.__importStar(require("fs"));
+function injectBuildMeta(opts) {
+    const { indexHtmlPath, env, branch, commit, buildNumber } = opts;
+    const metaName = opts.metaName ?? 'x-build';
+    if (!fs.existsSync(indexHtmlPath)) {
+        throw new Error(`injectBuildMeta: index.html not found: ${indexHtmlPath}`);
+    }
+    const now = opts.now ?? new Date();
+    const istFormatter = new Intl.DateTimeFormat('en-IN', {
+        timeZone: 'Asia/Kolkata',
+        year: 'numeric',
+        month: '2-digit',
+        day: '2-digit',
+        hour: '2-digit',
+        minute: '2-digit',
+        second: '2-digit',
+        hour12: false,
+    });
+    // Extra fields first: they never replace the built-in ones.
+    const payload = {
+        ...(opts.extra ?? {}),
+        env,
+        timestamp_utc: now.toISOString(),
+        timestamp_ist: istFormatter.format(now),
+        branch,
+        commit,
+        build: buildNumber,
+    };
+    const base64 = Buffer.from(JSON.stringify(payload), 'utf8').toString('base64');
+    const tag = `<meta name="${metaName}" content="${base64}">`;
+    const existing = new RegExp(`<meta name="${metaName.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}"[^>]*>`);
+    let html = fs.readFileSync(indexHtmlPath, 'utf8');
+    if (existing.test(html)) {
+        html = html.replace(existing, tag);
+    }
+    else if (/<head[^>]*>/i.test(html)) {
+        html = html.replace(/<head([^>]*)>/i, `<head$1>\n  ${tag}`);
+    }
+    else {
+        html = tag + '\n' + html;
+    }
+    fs.writeFileSync(indexHtmlPath, html, 'utf8');
+}
+exports.injectBuildMeta = injectBuildMeta;
+//# sourceMappingURL=inject-meta.js.map

package/dist/src/lib/helpers/inject-meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject-meta.js","sourceRoot":"","sources":["../../../../src/lib/helpers/inject-meta.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AAgBzB,SAAgB,eAAe,CAAC,IAAuB;IACrD,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE;QACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,aAAa,EAAE,CAAC,CAAC;KAC5E;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;QACpD,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,4DAA4D;IAC5D,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACrB,GAAG;QACH,aAAa,EAAE,GAAG,CAAC,WAAW,EAAE;QAChC,aAAa,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC;QACvC,MAAM;QACN,MAAM;QACN,KAAK,EAAE,WAAW;KACnB,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,eAAe,QAAQ,cAAc,MAAM,IAAI,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,MAAM,CACzB,eAAe,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,SAAS,CACxE,CAAC;IAEF,IAAI,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACvB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;KACpC;SAAM,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACpC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,eAAe,GAAG,EAAE,CAAC,CAAC;KAC7D;SAAM;QACL,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;KAC1B;IAED,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AA9CD,0CA8CC"}

package/dist/src/lib/helpers/inject-nonce.d.ts

@@ -0,0 +1,7 @@
+export interface InjectNonceOptions {
+    /** Directory to recursively scan for *.html files. */
+    distDir: string;
+}
+/** Filled per request by the server config `pstack csp` writes (Apache SSI, Nginx sub_filter). */
+export declare const NONCE_SSI_PLACEHOLDER = "<!--#echo var=\"CSP_NONCE\" -->";
+export declare function injectCspNonce(opts: InjectNonceOptions): void;

package/dist/src/lib/helpers/inject-nonce.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.injectCspNonce = exports.NONCE_SSI_PLACEHOLDER = void 0;
+const tslib_1 = require("tslib");
+const fs = tslib_1.__importStar(require("fs"));
+const path = tslib_1.__importStar(require("path"));
+/** Filled per request by the server config `pstack csp` writes (Apache SSI, Nginx sub_filter). */
+exports.NONCE_SSI_PLACEHOLDER = '<!--#echo var="CSP_NONCE" -->';
+/** Nonce values left in a page by hand that stand for "fill me in" (as runtime/csp-nonce reads them). */
+const PLACEHOLDER_NONCE = /((?<![\w-])nonce\s*=\s*)(["'])(random-csp-nonce|nonce|csp-nonce|\{\{[^"']*\}\}|\$\{[^"']*\}|%[^"']*%)\2/gi;
+function injectCspNonce(opts) {
+    if (!fs.existsSync(opts.distDir)) {
+        throw new Error(`injectCspNonce: distDir not found: ${opts.distDir}`);
+    }
+    for (const htmlFile of walkHtml(opts.distDir)) {
+        let html = fs.readFileSync(htmlFile, 'utf8');
+        // Placeholder nonces already in the page get the server-filled one too.
+        html = html.replace(PLACEHOLDER_NONCE, (_m, attr) => `${attr}"${exports.NONCE_SSI_PLACEHOLDER}"`);
+        // Add nonce to <script> tags (with or without src)
+        html = html.replace(/<script\b((?:[^>]*?)?)>/g, (full, attrs) => {
+            if (/(?<![\w-])nonce\s*=/.test(attrs))
+                return full;
+            const trimmed = attrs.trimEnd();
+            return `<script${trimmed ? trimmed : ''} nonce="${exports.NONCE_SSI_PLACEHOLDER}">`;
+        });
+        // Add nonce to <style> tags
+        html = html.replace(/<style\b((?:[^>]*?)?)>/g, (full, attrs) => {
+            if (/(?<![\w-])nonce\s*=/.test(attrs))
+                return full;
+            const trimmed = attrs.trimEnd();
+            return `<style${trimmed ? trimmed : ''} nonce="${exports.NONCE_SSI_PLACEHOLDER}">`;
+        });
+        // Add nonce to <link rel="stylesheet"> tags
+        html = html.replace(/<link\b((?:[^>]*?)\brel\s*=\s*["']stylesheet["'](?:[^>]*?))>/g, (full, attrs) => {
+            if (/(?<![\w-])nonce\s*=/.test(attrs))
+                return full;
+            return `<link${attrs} nonce="${exports.NONCE_SSI_PLACEHOLDER}">`;
+        });
+        // Add <meta property="csp-nonce"> inside <head>
+        if (!/property="csp-nonce"/.test(html)) {
+            const metaTag = `<meta property="csp-nonce" content="${exports.NONCE_SSI_PLACEHOLDER}">`;
+            if (/<head[^>]*>/i.test(html)) {
+                html = html.replace(/<head([^>]*)>/i, `<head$1>\n  ${metaTag}`);
+            }
+        }
+        fs.writeFileSync(htmlFile, html, 'utf8');
+    }
+}
+exports.injectCspNonce = injectCspNonce;
+function* walkHtml(dir) {
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory())
+            yield* walkHtml(full);
+        else if (entry.isFile() && full.endsWith('.html'))
+            yield full;
+    }
+}
+//# sourceMappingURL=inject-nonce.js.map

package/dist/src/lib/helpers/inject-nonce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject-nonce.js","sourceRoot":"","sources":["../../../../src/lib/helpers/inject-nonce.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AACzB,mDAA6B;AAO7B,kGAAkG;AACrF,QAAA,qBAAqB,GAAG,+BAA+B,CAAC;AAErE,yGAAyG;AACzG,MAAM,iBAAiB,GACrB,2GAA2G,CAAC;AAE9G,SAAgB,cAAc,CAAC,IAAwB;IACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;KACvE;IACD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAC7C,IAAI,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE7C,wEAAwE;QACxE,IAAI,GAAG,IAAI,CAAC,OAAO,CACjB,iBAAiB,EACjB,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,6BAAqB,GAAG,CAC1D,CAAC;QAEF,mDAAmD;QACnD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC9D,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAChC,OAAO,UAAU,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,6BAAqB,IAAI,CAAC;QAC9E,CAAC,CAAC,CAAC;QAEH,4BAA4B;QAC5B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC7D,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAChC,OAAO,SAAS,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,6BAAqB,IAAI,CAAC;QAC7E,CAAC,CAAC,CAAC;QAEH,4CAA4C;QAC5C,IAAI,GAAG,IAAI,CAAC,OAAO,CACjB,+DAA+D,EAC/D,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACd,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnD,OAAO,QAAQ,KAAK,WAAW,6BAAqB,IAAI,CAAC;QAC3D,CAAC,CACF,CAAC;QAEF,gDAAgD;QAChD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACtC,MAAM,OAAO,GAAG,uCAAuC,6BAAqB,IAAI,CAAC;YACjF,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC7B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,eAAe,OAAO,EAAE,CAAC,CAAC;aACjE;SACF;QAED,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;KAC1C;AACH,CAAC;AA9CD,wCA8CC;AAED,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAW;IAC5B,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;aAC1C,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,CAAC;KAC/D;AACH,CAAC"}

package/dist/src/lib/helpers/inject-sri.d.ts

@@ -0,0 +1,11 @@
+export interface InjectSriOptions {
+    distDir: string;
+    /** Exact URLs allowed for external SRI; everything else external is skipped. */
+    cdnAllowlist: string[];
+    /**
+     * Recompute an existing integrity on local files (the Angular build wrote it before the files
+     * were stripped or obfuscated). Default false: tags that have one are left alone.
+     */
+    refresh?: boolean;
+}
+export declare function injectSri(opts: InjectSriOptions): void;

package/dist/src/lib/helpers/inject-sri.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.injectSri = void 0;
+const tslib_1 = require("tslib");
+const crypto = tslib_1.__importStar(require("crypto"));
+const fs = tslib_1.__importStar(require("fs"));
+const path = tslib_1.__importStar(require("path"));
+function injectSri(opts) {
+    if (!fs.existsSync(opts.distDir)) {
+        throw new Error(`injectSri: distDir not found: ${opts.distDir}`);
+    }
+    const allowlist = new Set(opts.cdnAllowlist);
+    for (const htmlFile of walkHtml(opts.distDir)) {
+        let html = fs.readFileSync(htmlFile, 'utf8');
+        if (opts.refresh) {
+            html = refreshIntegrity(html, htmlFile, opts.distDir);
+        }
+        // <script src="...">
+        html = html.replace(/<script\b([^>]*?)\bsrc\s*=\s*["']([^"']+)["']([^>]*)>/g, (full, before, src, after) => {
+            if (/\bintegrity\s*=/.test(full))
+                return full;
+            const hash = resolveHash(src, htmlFile, opts.distDir, allowlist);
+            if (!hash)
+                return full;
+            return `<script${before} src="${src}" integrity="${hash}" crossorigin="anonymous"${after}>`;
+        });
+        // <link rel="stylesheet" href="...">
+        html = html.replace(/<link\b([^>]*?\brel\s*=\s*["']stylesheet["'][^>]*?\bhref\s*=\s*["']([^"']+)["'][^>]*)>/g, (full, allAttrs, href) => {
+            if (/\bintegrity\s*=/.test(full))
+                return full;
+            const hash = resolveHash(href, htmlFile, opts.distDir, allowlist);
+            if (!hash)
+                return full;
+            return `<link${allAttrs.replace(href, href)} integrity="${hash}" crossorigin="anonymous">`;
+        });
+        fs.writeFileSync(htmlFile, html, 'utf8');
+    }
+}
+exports.injectSri = injectSri;
+/** Recomputes integrity="…" on script/link tags whose src/href is a local file. */
+function refreshIntegrity(html, htmlFile, distDir) {
+    return html.replace(/<(script|link)\b[^>]*>/gi, (tag) => {
+        if (!/\bintegrity\s*=/i.test(tag))
+            return tag;
+        const url = /\b(?:src|href)\s*=\s*["']([^"']+)["']/i.exec(tag)?.[1];
+        if (!url || /^(?:[a-z]+:)?\/\//i.test(url) || /^[a-z]+:/i.test(url))
+            return tag;
+        const hash = resolveHash(url, htmlFile, distDir, new Set());
+        // A stale hash makes the browser refuse the file: fail instead of shipping it.
+        if (!hash) {
+            throw new Error(`injectSri: ${path.basename(htmlFile)} has an integrity for ${url}, which is not a file ` +
+                'under the output; its hash cannot be refreshed (a deployUrl is not supported with sri)');
+        }
+        const updated = tag.replace(/\bintegrity\s*=\s*["'][^"']*["']/i, `integrity="${hash}"`);
+        return /\bcrossorigin\b/i.test(updated)
+            ? updated
+            : updated.replace(/\s*\/?>$/, (end) => ` crossorigin="anonymous"${end}`);
+    });
+}
+function resolveHash(src, htmlFile, distDir, allowlist) {
+    const isExternal = /^https?:\/\//.test(src);
+    if (isExternal) {
+        if (!allowlist.has(src))
+            return null;
+        // Try to find a local mirror next to index.html
+        const basename = src.split('/').pop() ?? '';
+        const local = path.join(distDir, basename);
+        if (!fs.existsSync(local))
+            return null;
+        return sha384(local);
+    }
+    const local = path.resolve(path.dirname(htmlFile), src);
+    const resolved = path.resolve(distDir);
+    if (!local.startsWith(resolved) || !fs.existsSync(local))
+        return null;
+    return sha384(local);
+}
+function sha384(file) {
+    const buf = fs.readFileSync(file);
+    const digest = crypto.createHash('sha384').update(buf).digest('base64');
+    return `sha384-${digest}`;
+}
+function* walkHtml(dir) {
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory())
+            yield* walkHtml(full);
+        else if (entry.isFile() && full.endsWith('.html'))
+            yield full;
+    }
+}
+//# sourceMappingURL=inject-sri.js.map

package/dist/src/lib/helpers/inject-sri.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject-sri.js","sourceRoot":"","sources":["../../../../src/lib/helpers/inject-sri.ts"],"names":[],"mappings":";;;;AAAA,uDAAiC;AACjC,+CAAyB;AACzB,mDAA6B;AAa7B,SAAgB,SAAS,CAAC,IAAsB;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;KAClE;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAE7C,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAC7C,IAAI,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE7C,IAAI,IAAI,CAAC,OAAO,EAAE;YAChB,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;SACvD;QAED,qBAAqB;QACrB,IAAI,GAAG,IAAI,CAAC,OAAO,CACjB,wDAAwD,EACxD,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAC3B,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACjE,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,OAAO,UAAU,MAAM,SAAS,GAAG,gBAAgB,IAAI,4BAA4B,KAAK,GAAG,CAAC;QAC9F,CAAC,CACF,CAAC;QAEF,qCAAqC;QACrC,IAAI,GAAG,IAAI,CAAC,OAAO,CACjB,yFAAyF,EACzF,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAClE,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,OAAO,QAAQ,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,IAAI,4BAA4B,CAAC;QAC7F,CAAC,CACF,CAAC;QAEF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;KAC1C;AACH,CAAC;AArCD,8BAqCC;AAED,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAe;IACvE,OAAO,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,GAAG,EAAE,EAAE;QACtD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QAC9C,MAAM,GAAG,GAAG,wCAAwC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QAChF,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QAC5D,+EAA+E;QAC/E,IAAI,CAAC,IAAI,EAAE;YACT,MAAM,IAAI,KAAK,CACb,cAAc,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,GAAG,wBAAwB;gBACvF,wFAAwF,CAC3F,CAAC;SACH;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,mCAAmC,EAAE,cAAc,IAAI,GAAG,CAAC,CAAC;QACxF,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;YACrC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,GAAW,EACX,QAAgB,EAChB,OAAe,EACf,SAAsB;IAEtB,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,UAAU,EAAE;QACd,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,gDAAgD;QAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;KACtB;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,UAAU,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAW;IAC5B,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;aAC1C,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,CAAC;KAC/D;AACH,CAAC"}

package/dist/src/lib/helpers/strip-exif.d.ts

@@ -0,0 +1,9 @@
+export interface StripExifOptions {
+    /** Recursive root directory to scan for image files. */
+    rootDir: string;
+    /** JPEG output quality. Default 90. */
+    jpegQuality?: number;
+    /** Optional logger; defaults to no-op. */
+    log?: (msg: string) => void;
+}
+export declare function stripExif(opts: StripExifOptions): Promise<void>;

package/dist/src/lib/helpers/strip-exif.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripExif = void 0;
+const tslib_1 = require("tslib");
+const fs = tslib_1.__importStar(require("fs"));
+const path = tslib_1.__importStar(require("path"));
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const sharp = require('sharp');
+const SUPPORTED_EXTS = new Set(['.jpg', '.jpeg', '.png', '.webp']);
+async function stripExif(opts) {
+    if (!fs.existsSync(opts.rootDir)) {
+        throw new Error(`stripExif: rootDir not found: ${opts.rootDir}`);
+    }
+    const log = opts.log ??
+        (() => {
+            /* no-op */
+        });
+    const quality = opts.jpegQuality ?? 90;
+    for (const file of walk(opts.rootDir)) {
+        const ext = path.extname(file).toLowerCase();
+        if (!SUPPORTED_EXTS.has(ext))
+            continue;
+        try {
+            const buf = fs.readFileSync(file);
+            let pipeline = sharp(buf, { failOn: 'none' }).rotate();
+            if (ext === '.jpg' || ext === '.jpeg')
+                pipeline = pipeline.jpeg({ quality });
+            else if (ext === '.png')
+                pipeline = pipeline.png();
+            else if (ext === '.webp')
+                pipeline = pipeline.webp({ quality });
+            // sharp drops EXIF/IPTC/XMP by default when re-encoding; no withMetadata() needed
+            const out = await pipeline.toBuffer();
+            fs.writeFileSync(file, out);
+            log(`stripped: ${file}`);
+        }
+        catch (e) {
+            log(`skipped (error): ${file} — ${e.message}`);
+        }
+    }
+}
+exports.stripExif = stripExif;
+function* walk(dir) {
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory())
+            yield* walk(full);
+        else if (entry.isFile())
+            yield full;
+    }
+}
+//# sourceMappingURL=strip-exif.js.map

package/dist/src/lib/helpers/strip-exif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strip-exif.js","sourceRoot":"","sources":["../../../../src/lib/helpers/strip-exif.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AACzB,mDAA6B;AAa7B,8DAA8D;AAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAkE,CAAC;AAWhG,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5D,KAAK,UAAU,SAAS,CAAC,IAAsB;IACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;KAClE;IACD,MAAM,GAAG,GACP,IAAI,CAAC,GAAG;QACR,CAAC,GAAG,EAAE;YACJ,WAAW;QACb,CAAC,CAAC,CAAC;IACL,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACvC,IAAI;YACF,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACvD,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO;gBAAE,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;iBACxE,IAAI,GAAG,KAAK,MAAM;gBAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;iBAC9C,IAAI,GAAG,KAAK,OAAO;gBAAE,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,kFAAkF;YAClF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;SAC1B;QAAC,OAAO,CAAC,EAAE;YACV,GAAG,CAAC,oBAAoB,IAAI,MAAO,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;SAC3D;KACF;AACH,CAAC;AA5BD,8BA4BC;AAED,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAW;IACxB,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACtC,IAAI,KAAK,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,CAAC;KACrC;AACH,CAAC"}

package/dist/src/lib/release/plan.d.ts

@@ -0,0 +1,45 @@
+export declare const FLUTTER_BUILD_EXECUTOR = "@mouryaamit/nx-polystack:flutter-build";
+export declare const FLUTTER_PLATFORMS: readonly ["web", "android", "ios"];
+export type FlutterPlatform = (typeof FLUTTER_PLATFORMS)[number];
+/** A project.json as read from the workspace. */
+export interface WorkspaceProject {
+    name: string;
+    /** Folder of the project.json, relative to the workspace root. */
+    root: string;
+    json: Record<string, unknown>;
+}
+export interface BuildJob {
+    project: string;
+    target: string;
+    configuration: string;
+    /** Output folder relative to the workspace root, when the target names one. */
+    output?: string;
+}
+export interface BuildPlan {
+    jobs: BuildJob[];
+    /** Projects with a release/build-web target but no configuration for the env. */
+    missing: {
+        project: string;
+        target: string;
+    }[];
+}
+export interface PlanOptions {
+    env: string;
+    /** Limit to these project names (all when absent). */
+    projects?: string[];
+    exclude?: string[];
+    flutterPlatforms?: FlutterPlatform[];
+}
+type Target = {
+    executor?: string;
+    options?: Record<string, unknown>;
+    configurations?: Record<string, Record<string, unknown>>;
+};
+/** The configuration named env, else the one whose env option equals it (any case). */
+export declare function configurationFor(target: Target, env: string): string | undefined;
+/**
+ * Release builds of every app for one env: the polystack build target of Angular/Ionic apps and
+ * the Flutter build targets of the chosen platforms. Unknown names in projects/exclude throw.
+ */
+export declare function planBuilds(all: WorkspaceProject[], o: PlanOptions): BuildPlan;
+export {};

package/dist/src/lib/release/plan.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.planBuilds = exports.configurationFor = exports.FLUTTER_PLATFORMS = exports.FLUTTER_BUILD_EXECUTOR = void 0;
+const angular_project_1 = require("../utils/angular-project");
+exports.FLUTTER_BUILD_EXECUTOR = '@mouryaamit/nx-polystack:flutter-build';
+exports.FLUTTER_PLATFORMS = ['web', 'android', 'ios'];
+const SAFE_NAME = /^[\w.@/-]+$/;
+const FLUTTER_TARGETS = {
+    web: 'build-web',
+    android: 'build-android',
+    ios: 'build-ios',
+};
+/** The configuration named env, else the one whose env option equals it (any case). */
+function configurationFor(target, env) {
+    const configs = target.configurations ?? {};
+    const wanted = env.toLowerCase();
+    const byName = Object.keys(configs).find((c) => c.toLowerCase() === wanted);
+    if (byName)
+        return byName;
+    return Object.keys(configs).find((c) => String(configs[c]?.['env'] ?? '').toLowerCase() === wanted);
+}
+exports.configurationFor = configurationFor;
+/**
+ * Release builds of every app for one env: the polystack build target of Angular/Ionic apps and
+ * the Flutter build targets of the chosen platforms. Unknown names in projects/exclude throw.
+ */
+function planBuilds(all, o) {
+    const names = new Set(all.map((p) => p.name));
+    const unknown = [...(o.projects ?? []), ...(o.exclude ?? [])].filter((n) => !names.has(n));
+    if (unknown.length > 0) {
+        throw new Error(`unknown project(s): ${[...new Set(unknown)].join(', ')}`);
+    }
+    const only = o.projects ? new Set(o.projects) : undefined;
+    const skip = new Set(o.exclude ?? []);
+    const platforms = o.flutterPlatforms ?? ['web'];
+    const plan = { jobs: [], missing: [] };
+    for (const p of [...all].sort((a, b) => a.name.localeCompare(b.name))) {
+        if ((only && !only.has(p.name)) || skip.has(p.name))
+            continue;
+        const targets = (p.json['targets'] ?? {});
+        const chosen = [];
+        const release = Object.entries(targets).find(([, t]) => t.executor === angular_project_1.POLYSTACK_BUILD_EXECUTOR);
+        if (release)
+            chosen.push(release);
+        for (const platform of platforms) {
+            const name = FLUTTER_TARGETS[platform];
+            const t = targets[name];
+            if (t?.executor === exports.FLUTTER_BUILD_EXECUTOR)
+                chosen.push([name, t]);
+        }
+        for (const [target, t] of chosen) {
+            const configuration = configurationFor(t, o.env);
+            if (!configuration) {
+                plan.missing.push({ project: p.name, target });
+                continue;
+            }
+            // These end up on the command line.
+            for (const part of [p.name, target, configuration]) {
+                if (!SAFE_NAME.test(part)) {
+                    throw new Error(`"${part}" (${p.root}) is not a name pstack build can run`);
+                }
+            }
+            const merged = { ...(t.options ?? {}), ...(t.configurations?.[configuration] ?? {}) };
+            const out = merged['outputPath'] ?? merged['dist'];
+            plan.jobs.push({
+                project: p.name,
+                target,
+                configuration,
+                ...(typeof out === 'string' ? { output: out } : {}),
+            });
+        }
+    }
+    return plan;
+}
+exports.planBuilds = planBuilds;
+//# sourceMappingURL=plan.js.map

package/dist/src/lib/release/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../../src/lib/release/plan.ts"],"names":[],"mappings":";;;AAAA,8DAAoE;AAEvD,QAAA,sBAAsB,GAAG,wCAAwC,CAAC;AAClE,QAAA,iBAAiB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAU,CAAC;AAuCpE,MAAM,SAAS,GAAG,aAAa,CAAC;AAEhC,MAAM,eAAe,GAAoC;IACvD,GAAG,EAAE,WAAW;IAChB,OAAO,EAAE,eAAe;IACxB,GAAG,EAAE,WAAW;CACjB,CAAC;AAEF,uFAAuF;AACvF,SAAgB,gBAAgB,CAAC,MAAc,EAAE,GAAW;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IAC5E,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAClE,CAAC;AACJ,CAAC;AARD,4CAQC;AAED;;;GAGG;AACH,SAAgB,UAAU,CAAC,GAAuB,EAAE,CAAc;IAChE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QACtB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KAC5E;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,IAAI,GAAc,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAElD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE;QACrE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9D,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAA2B,CAAC;QACpE,MAAM,MAAM,GAAuB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,0CAAwB,CACnD,CAAC;QACF,IAAI,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE;YAChC,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,CAAC,EAAE,QAAQ,KAAK,8BAAsB;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;SACpE;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE;YAChC,MAAM,aAAa,GAAG,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,aAAa,EAAE;gBAClB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC/C,SAAS;aACV;YACD,oCAAoC;YACpC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE;gBAClD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACzB,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,IAAI,sCAAsC,CAAC,CAAC;iBAC7E;aACF;YACD,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACtF,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,MAAM;gBACN,aAAa;gBACb,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD,CAAC,CAAC;SACJ;KACF;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA/CD,gCA+CC"}

package/dist/src/lib/release/run.d.ts

@@ -0,0 +1,46 @@
+import { BuildJob } from './plan';
+export type BuildStatus = 'passed' | 'failed' | 'skipped';
+export interface BuildResult extends BuildJob {
+    status: BuildStatus;
+    durationMs: number;
+    exitCode?: number;
+    /** Signal that ended the build, when it was killed. */
+    signal?: string;
+    /** Size of the output folder after a passed build. */
+    bytes?: number;
+}
+/**
+ * Runs one command; resolves with its exit code, or the signal that killed it. onLine receives
+ * output lines when piped.
+ */
+export type Spawner = (command: string, args: string[], opts: {
+    cwd: string;
+    onLine?: (line: string) => void;
+}) => Promise<number | {
+    signal: string;
+}>;
+export interface RunOptions {
+    cwd: string;
+    /** Builds at once (1: one at a time, output inherited). */
+    parallel: number;
+    continueOnError: boolean;
+    spawner?: Spawner;
+    now?: () => number;
+    log?: (line: string) => void;
+}
+/** npx nx run, with inherited output or line-by-line through onLine. */
+export declare const defaultSpawner: Spawner;
+/**
+ * Runs the builds, `parallel` at a time. Without continueOnError the first failure stops new
+ * builds (running ones finish); those never started are skipped.
+ */
+export declare function runBuilds(jobs: BuildJob[], o: RunOptions): Promise<BuildResult[]>;
+/** Total size of a folder's files, or undefined when it does not exist. */
+export declare function dirSize(dir: string): number | undefined;
+export declare function formatDuration(ms: number): string;
+export declare function formatBytes(bytes: number): string;
+/** The summary printed after a run. */
+export declare function summarize(env: string, results: BuildResult[], missing: {
+    project: string;
+    target: string;
+}[], totalMs: number): string[];