@mouryaamit/nx-polystack 0.0.0-stage → 1.0.1

package/dist/src/cli/commands/encryption.js

@@ -0,0 +1,261 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runEncryption = exports.describeEnvEncryption = void 0;
+const devkit_1 = require("@nx/devkit");
+const angular_project_1 = require("../../lib/utils/angular-project");
+const llm_block_1 = require("../../lib/utils/llm-block");
+const args_1 = require("../args");
+const run_tree_1 = require("../run-tree");
+const types_1 = require("../types");
+const app_1 = require("./app");
+const list = (v) => (v ?? '')
+    .split(',')
+    .map((s) => s.trim())
+    .filter(Boolean);
+const CHANGE_FLAGS = [
+    'mode',
+    'addKey',
+    'removeKey',
+    'addPublic',
+    'removePublic',
+    'metaName',
+    'timezone',
+    'stampFormat',
+    'format',
+    'profileFiles',
+    'cipher',
+    'keySources',
+];
+/** Options of one app's release target (need --app). */
+const APP_FLAGS = ['keySplit', 'domains', 'includeWww', 'onMismatch'];
+/** aes-gcm always writes ENC2(…); format only applies to cryptojs. */
+function cipherLine(cfg) {
+    if (cfg['cipher'] === 'aes-gcm')
+        return '  cipher      aes-gcm (values written as ENC2(…))';
+    const enc = cfg['format'] === 'enc' ? ' (values written as ENC(…))' : '';
+    return `  cipher      ${cfg['cipher']} · format ${cfg['format']}${enc}`;
+}
+/** Text of the settings for `pstack encryption` with no flags. */
+function describeEnvEncryption(cfg, source) {
+    const keys = cfg['keys'];
+    const stamp = cfg['stamp'];
+    const lines = [
+        `Env encryption (${source}):`,
+        `  mode        ${cfg['mode']}${cfg['mode'] === 'listed'
+            ? ' (listed keys are encrypted)'
+            : ' (every field except publicKeys is encrypted)'}`,
+        cipherLine(cfg),
+        `  keySources  ${cfg['keySources'].join(', ')}${cfg['cipher'] === 'aes-gcm'
+            ? ' (plus the internal per-build key)'
+            : ` (cryptojs uses the commit, from <meta name="${cfg['metaName']}">)`}`,
+        `  keys        ${Object.entries(keys)
+            .map(([p, k]) => `${p}: ${k.join(', ') || '—'}`)
+            .join(' · ')}`,
+        `  publicKeys  ${cfg['publicKeys'].join(', ') || '—'}`,
+        `  profiles    ${cfg['profileFiles'].join(', ') || '—'}`,
+        stamp
+            ? `  stamp       ${stamp['timeField']} / ${stamp['branchField']} · ${stamp['timezone']} · ${stamp['format']}`
+            : '  stamp       off',
+    ];
+    return lines.join('\n');
+}
+exports.describeEnvEncryption = describeEnvEncryption;
+async function runEncryption(ctx) {
+    const root = (0, app_1.requireWorkspace)(ctx.cwd, 'encryption');
+    const { normalizeEnvEncryption, DEFAULT_STAMP } = await Promise.resolve().then(() => __importStar(require('../../lib/env-encryption/config')));
+    const { readEnvEncryptionBlock, writeEnvEncryptionBlock, initialEnvEncryption } = await Promise.resolve().then(() => __importStar(require('../../lib/env-encryption/workspace')));
+    const { newSalt, SALT_FILE } = await Promise.resolve().then(() => __importStar(require('../../lib/env-encryption/key-material')));
+    const { normalizeHosts } = await Promise.resolve().then(() => __importStar(require('../../lib/env-encryption/domains')));
+    const { KEY_SPLITS } = await Promise.resolve().then(() => __importStar(require('../../lib/env-encryption/gcm')));
+    const { customKeyNote, switchAppsToGcm } = await Promise.resolve().then(() => __importStar(require('../../lib/env-encryption/switch-gcm')));
+    const changing = [...CHANGE_FLAGS, ...APP_FLAGS, 'rotateSalt'].some((f) => ctx.flags[f] !== undefined);
+    for (const f of [...CHANGE_FLAGS, 'app', 'keySplit', 'domains', 'onMismatch']) {
+        if (ctx.flags[f] === true) {
+            throw new types_1.CliError(`--${f.replace(/[A-Z]/g, (c) => `-${c.toLowerCase()}`)} needs a value.`);
+        }
+    }
+    const project = (0, args_1.flagString)(ctx.flags, 'project') ?? 'default';
+    let shown = '';
+    const notes = [];
+    await (0, run_tree_1.runInTree)(root, { ...ctx, quietWhenUnchanged: !changing }, (tree) => {
+        const raw = readEnvEncryptionBlock(tree);
+        let cfg;
+        try {
+            cfg = raw === undefined ? initialEnvEncryption(tree) : normalizeEnvEncryption(raw);
+        }
+        catch (err) {
+            throw new types_1.CliError(err.message);
+        }
+        const source = raw === undefined ? 'not set yet; run "pstack update" or change a setting' : 'nx.json';
+        if (!changing) {
+            shown = describeEnvEncryption(cfg, source);
+            return;
+        }
+        const mode = (0, args_1.flagString)(ctx.flags, 'mode');
+        if (mode !== undefined)
+            cfg.mode = mode;
+        const keys = new Set(cfg.keys[project] ?? (project === 'default' ? [] : cfg.keys['default']));
+        for (const k of list((0, args_1.flagString)(ctx.flags, 'addKey')))
+            keys.add(k);
+        for (const k of list((0, args_1.flagString)(ctx.flags, 'removeKey')))
+            keys.delete(k);
+        if (ctx.flags['addKey'] !== undefined || ctx.flags['removeKey'] !== undefined) {
+            cfg.keys = { ...cfg.keys, [project]: [...keys] };
+        }
+        const pub = new Set(cfg.publicKeys);
+        for (const k of list((0, args_1.flagString)(ctx.flags, 'addPublic')))
+            pub.add(k);
+        for (const k of list((0, args_1.flagString)(ctx.flags, 'removePublic')))
+            pub.delete(k);
+        cfg.publicKeys = [...pub];
+        const valueFormat = (0, args_1.flagString)(ctx.flags, 'format');
+        if (valueFormat !== undefined)
+            cfg.format = valueFormat;
+        const profileFiles = (0, args_1.flagString)(ctx.flags, 'profileFiles');
+        if (profileFiles !== undefined)
+            cfg.profileFiles = list(profileFiles);
+        const metaName = (0, args_1.flagString)(ctx.flags, 'metaName');
+        if (metaName !== undefined)
+            cfg.metaName = metaName;
+        const timezone = (0, args_1.flagString)(ctx.flags, 'timezone');
+        const format = (0, args_1.flagString)(ctx.flags, 'stampFormat');
+        if (timezone !== undefined || format !== undefined) {
+            cfg.stamp = {
+                ...DEFAULT_STAMP,
+                ...(cfg.stamp ?? {}),
+                ...(timezone !== undefined ? { timezone } : {}),
+                ...(format !== undefined ? { format } : {}),
+            };
+        }
+        const cipher = (0, args_1.flagString)(ctx.flags, 'cipher');
+        if (cipher !== undefined)
+            cfg.cipher = cipher;
+        const sources = (0, args_1.flagString)(ctx.flags, 'keySources');
+        if (sources !== undefined)
+            cfg.keySources = list(sources);
+        if (ctx.flags['rotateSalt'] !== undefined && (0, args_1.flagBoolean)(ctx.flags, 'rotateSalt')) {
+            tree.write(SALT_FILE, newSalt());
+            notes.push(`${SALT_FILE} rotated; commit it (builds after this use the new salt).`);
+        }
+        const app = (0, args_1.flagString)(ctx.flags, 'app');
+        if (APP_FLAGS.some((f) => ctx.flags[f] !== undefined)) {
+            if (!app) {
+                throw new types_1.CliError('--key-split, --domains, --include-www and --on-mismatch need --app=<project>.');
+            }
+            setAppOptions(tree, app, ctx.flags, KEY_SPLITS, normalizeHosts);
+            if (cfg.cipher !== 'aes-gcm') {
+                notes.push('These app options take effect with cipher aes-gcm (pstack encryption --cipher=aes-gcm).');
+            }
+        }
+        try {
+            writeEnvEncryptionBlock(tree, cfg);
+        }
+        catch (err) {
+            throw new types_1.CliError(err.message);
+        }
+        if (cipher === 'aes-gcm') {
+            notes.push(...switchAppsToGcm(tree, cfg.publicKeys, cfg));
+        }
+        else if (sources !== undefined &&
+            cfg.cipher === 'aes-gcm' &&
+            cfg.keySources.includes('custom')) {
+            notes.push(customKeyNote(cfg.metaName));
+        }
+        shown = describeEnvEncryption(normalizeEnvEncryption(cfg), 'nx.json');
+    });
+    console.log(shown);
+    for (const n of notes)
+        console.log(`Note: ${n}`);
+    if ((0, args_1.flagString)(ctx.flags, 'metaName') !== undefined) {
+        console.log('Note: apps that read the key from the meta tag must use the new name too (pass it as ' +
+            'metaName to envReady of runtime/env-secret).');
+    }
+    return 0;
+}
+exports.runEncryption = runEncryption;
+/** Writes --key-split, --include-www, --on-mismatch and --domains into the app's release target. */
+function setAppOptions(tree, app, flags, keySplits, normalizeHosts) {
+    // Walks apps/ and libs/ (getProjects needs Nx's native file globbing).
+    const found = [...(0, llm_block_1.findProjects)(tree, 'apps'), ...(0, llm_block_1.findProjects)(tree, 'libs')].find((p) => (typeof p.json['name'] === 'string' ? p.json['name'] : p.root.split('/').pop()) === app);
+    if (!found)
+        throw new types_1.CliError(`No project named "${app}".`);
+    const targets = (found.json['targets'] ?? {});
+    const target = Object.values(targets).find((t) => t.executor === angular_project_1.POLYSTACK_BUILD_EXECUTOR);
+    if (!target)
+        throw new types_1.CliError(`"${app}" has no release target (${angular_project_1.POLYSTACK_BUILD_EXECUTOR}).`);
+    target.options = { ...(target.options ?? {}) };
+    const split = (0, args_1.flagString)(flags, 'keySplit');
+    if (split !== undefined) {
+        if (!keySplits.includes(split)) {
+            throw new types_1.CliError(`--key-split must be ${keySplits.join(' or ')}.`);
+        }
+        target.options.keySplit = split;
+    }
+    if (flags['includeWww'] !== undefined) {
+        target.options.includeWww = (0, args_1.flagBoolean)(flags, 'includeWww');
+    }
+    const mismatch = (0, args_1.flagString)(flags, 'onMismatch');
+    if (mismatch !== undefined) {
+        if (!['block', 'warn'].includes(mismatch)) {
+            throw new types_1.CliError('--on-mismatch must be block or warn.');
+        }
+        target.options.onMismatch = mismatch;
+    }
+    const domains = (0, args_1.flagString)(flags, 'domains');
+    if (domains !== undefined) {
+        // <conf>=<hosts>[;<conf>=<hosts>…]; every entry is checked before any is set.
+        const entries = domains
+            .split(';')
+            .map((e) => e.trim())
+            .filter(Boolean);
+        const parsed = [];
+        for (const entry of entries.length > 0 ? entries : ['']) {
+            const m = /^([\w-]+)\s*=(.*)$/.exec(entry);
+            if (!m) {
+                throw new types_1.CliError('--domains must be <configuration>=<host,host>[;<configuration>=…] ' +
+                    '(e.g. uat=a.com,b.in;prod=a.com).');
+            }
+            const conf = target.configurations?.[m[1]];
+            if (!conf) {
+                throw new types_1.CliError(`The release target of "${app}" has no configuration "${m[1]}".`);
+            }
+            try {
+                parsed.push([conf, normalizeHosts(list(m[2]))]);
+            }
+            catch (err) {
+                throw new types_1.CliError(err.message);
+            }
+        }
+        for (const [conf, hosts] of parsed) {
+            if (hosts.length > 0)
+                conf['domains'] = hosts;
+            else
+                delete conf['domains'];
+        }
+    }
+    (0, devkit_1.writeJson)(tree, `${found.root}/project.json`, found.json);
+}
+//# sourceMappingURL=encryption.js.map

package/dist/src/cli/commands/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../../../src/cli/commands/encryption.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkE;AAGlE,qEAA2E;AAC3E,yDAAyD;AACzD,kCAAyD;AACzD,0CAAwC;AACxC,oCAAoD;AAEpD,+BAAyC;AAEzC,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAY,EAAE,CAC/C,CAAC,CAAC,IAAI,EAAE,CAAC;KACN,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AAErB,MAAM,YAAY,GAAG;IACnB,MAAM;IACN,QAAQ;IACR,WAAW;IACX,WAAW;IACX,cAAc;IACd,UAAU;IACV,UAAU;IACV,aAAa;IACb,QAAQ;IACR,cAAc;IACd,QAAQ;IACR,YAAY;CACb,CAAC;AACF,wDAAwD;AACxD,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAEtE,sEAAsE;AACtE,SAAS,UAAU,CAAC,GAA4B;IAC9C,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS;QAAE,OAAO,mDAAmD,CAAC;IAC5F,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,OAAO,iBAAiB,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,EAAE,CAAC;AAC1E,CAAC;AAED,kEAAkE;AAClE,SAAgB,qBAAqB,CAAC,GAA4B,EAAE,MAAc;IAChF,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAA6B,CAAC;IACrD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAuC,CAAC;IACjE,MAAM,KAAK,GAAG;QACZ,mBAAmB,MAAM,IAAI;QAC7B,iBAAiB,GAAG,CAAC,MAAM,CAAC,GAC1B,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ;YACtB,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,+CACN,EAAE;QACF,UAAU,CAAC,GAAG,CAAC;QACf,iBAAkB,GAAG,CAAC,YAAY,CAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GACzD,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS;YACzB,CAAC,CAAC,oCAAoC;YACtC,CAAC,CAAC,gDAAgD,GAAG,CAAC,UAAU,CAAC,KACrE,EAAE;QACF,iBAAiB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;aAC/C,IAAI,CAAC,KAAK,CAAC,EAAE;QAChB,iBAAkB,GAAG,CAAC,YAAY,CAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE;QACpE,iBAAkB,GAAG,CAAC,cAAc,CAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE;QACtE,KAAK;YACH,CAAC,CAAC,iBAAiB,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC7G,CAAC,CAAC,mBAAmB;KACxB,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AA1BD,sDA0BC;AAEM,KAAK,UAAU,aAAa,CAAC,GAAmB;IACrD,MAAM,IAAI,GAAG,IAAA,sBAAgB,EAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,EAAE,sBAAsB,EAAE,aAAa,EAAE,GAAG,wDAAa,iCAAiC,GAAC,CAAC;IAClG,MAAM,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,GAAG,wDAChF,oCAAoC,GACrC,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,wDAAa,uCAAuC,GAAC,CAAC;IACrF,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,kCAAkC,GAAC,CAAC;IAC5E,MAAM,EAAE,UAAU,EAAE,GAAG,wDAAa,8BAA8B,GAAC,CAAC;IACpE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,wDAAa,qCAAqC,GAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,SAAS,EAAE,YAAY,CAAC,CAAC,IAAI,CACjE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAClC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE;QAC7E,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,IAAI,gBAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC;SAC7F;KACF;IACD,MAAM,OAAO,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC;IAE9D,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAA,oBAAS,EAAC,IAAI,EAAE,EAAE,GAAG,GAAG,EAAE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;QACxE,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,GAAG,CAAC;QACR,IAAI;YACF,GAAG,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;SACpF;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,IAAI,gBAAQ,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;SAC5C;QACD,MAAM,MAAM,GACV,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,IAAI,CAAC,QAAQ,EAAE;YACb,KAAK,GAAG,qBAAqB,CAAC,GAAyC,EAAE,MAAM,CAAC,CAAC;YACjF,OAAO;SACR;QACD,MAAM,IAAI,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,GAAG,IAAuB,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9F,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE;YAC7E,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;SAClD;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACpD,IAAI,WAAW,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,WAAgC,CAAC;QAC7E,MAAM,YAAY,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAC3D,IAAI,YAAY,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACpD,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE;YAClD,GAAG,CAAC,KAAK,GAAG;gBACV,GAAG,aAAa;gBAChB,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBACpB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC;SACH;QACD,MAAM,MAAM,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAA0B,CAAC;QACnF,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,IAAI,IAAA,kBAAW,EAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE;YACjF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,2DAA2D,CAAC,CAAC;SACrF;QACD,MAAM,GAAG,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,EAAE;YACrD,IAAI,CAAC,GAAG,EAAE;gBACR,MAAM,IAAI,gBAAQ,CAChB,+EAA+E,CAChF,CAAC;aACH;YACD,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YAChE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE;gBAC5B,KAAK,CAAC,IAAI,CACR,yFAAyF,CAC1F,CAAC;aACH;SACF;QACD,IAAI;YACF,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;SACpC;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,IAAI,gBAAQ,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;SAC5C;QACD,IAAI,MAAM,KAAK,SAAS,EAAE;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;SAC3D;aAAM,IACL,OAAO,KAAK,SAAS;YACrB,GAAG,CAAC,MAAM,KAAK,SAAS;YACxB,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACjC;YACA,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;SACzC;QACD,KAAK,GAAG,qBAAqB,CAC3B,sBAAsB,CAAC,GAAG,CAAuC,EACjE,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjD,IAAI,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,SAAS,EAAE;QACnD,OAAO,CAAC,GAAG,CACT,uFAAuF;YACrF,8CAA8C,CACjD,CAAC;KACH;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAlHD,sCAkHC;AAED,oGAAoG;AACpG,SAAS,aAAa,CACpB,IAAU,EACV,GAAW,EACX,KAAY,EACZ,SAAqB,EACrB,cAA6C;IAE7C,uEAAuE;IACvE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAA,wBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,IAAA,wBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAC/E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,GAAG,CAC/F,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,gBAAQ,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAwC,CAAC;IACrF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,0CAAwB,CAAC,CAAC;IAC3F,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAQ,CAAC,IAAI,GAAG,4BAA4B,0CAAwB,IAAI,CAAC,CAAC;IACjG,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAA,iBAAU,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,SAAS,EAAE;QACvB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAiB,CAAC,EAAE;YAC1C,MAAM,IAAI,gBAAQ,CAAC,uBAAuB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SACtE;QACD,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC;KACjC;IACD,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE;QACrC,MAAM,CAAC,OAAO,CAAC,UAAU,GAAG,IAAA,kBAAW,EAAC,KAAK,EAAE,YAAY,CAAC,CAAC;KAC9D;IACD,MAAM,QAAQ,GAAG,IAAA,iBAAU,EAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACjD,IAAI,QAAQ,KAAK,SAAS,EAAE;QAC1B,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;YACzC,MAAM,IAAI,gBAAQ,CAAC,sCAAsC,CAAC,CAAC;SAC5D;QACD,MAAM,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC;KACtC;IACD,MAAM,OAAO,GAAG,IAAA,iBAAU,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,OAAO,KAAK,SAAS,EAAE;QACzB,8EAA8E;QAC9E,MAAM,OAAO,GAAG,OAAO;aACpB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,MAAM,GAA0C,EAAE,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACvD,MAAM,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,EAAE;gBACN,MAAM,IAAI,gBAAQ,CAChB,oEAAoE;oBAClE,mCAAmC,CACtC,CAAC;aACH;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,EAAE;gBACT,MAAM,IAAI,gBAAQ,CAAC,0BAA0B,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aACtF;YACD,IAAI;gBACF,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACjD;YAAC,OAAO,GAAG,EAAE;gBACZ,MAAM,IAAI,gBAAQ,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;aAC5C;SACF;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE;YAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;;gBACzC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;SAC7B;KACF;IACD,IAAA,kBAAS,EAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC"}

package/dist/src/cli/commands/env.d.ts

@@ -0,0 +1,2 @@
+import { CommandContext } from '../types';
+export declare function runEnv(ctx: CommandContext): Promise<number>;

package/dist/src/cli/commands/env.js

@@ -0,0 +1,74 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runEnv = void 0;
+const args_1 = require("../args");
+const run_tree_1 = require("../run-tree");
+const types_1 = require("../types");
+const app_1 = require("./app");
+const list = (v) => v === undefined
+    ? undefined
+    : v
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+const EXAMPLE = 'pstack env --name=qa --app=portal --from=uat --api-url=https://qa.example.com/api';
+async function runEnv(ctx) {
+    for (const f of ['name', 'app', 'from', 'apiUrl', 'baseHref', 'domains']) {
+        if (ctx.flags[f] === true) {
+            throw new types_1.CliError(`--${f.replace(/[A-Z]/g, (c) => `-${c.toLowerCase()}`)} needs a value.`);
+        }
+    }
+    const name = (0, args_1.flagString)(ctx.flags, 'name');
+    if (!name)
+        throw new types_1.CliError(`--name is required.\n\nExample: ${EXAMPLE}`);
+    const projects = list((0, args_1.flagString)(ctx.flags, 'app'));
+    const all = ctx.flags['all'] !== undefined && (0, args_1.flagBoolean)(ctx.flags, 'all');
+    if (all === (projects !== undefined && projects.length > 0)) {
+        throw new types_1.CliError(`Name the apps with --app=<a,b> or pass --all (one of them).\n\nExample: ${EXAMPLE}`);
+    }
+    const root = (0, app_1.requireWorkspace)(ctx.cwd, 'env');
+    const { default: envGenerator } = await Promise.resolve().then(() => __importStar(require('../../generators/env/generator')));
+    try {
+        await (0, run_tree_1.runInTree)(root, ctx, (tree) => envGenerator(tree, {
+            name,
+            projects,
+            all,
+            from: (0, args_1.flagString)(ctx.flags, 'from'),
+            apiUrl: (0, args_1.flagString)(ctx.flags, 'apiUrl'),
+            production: ctx.flags['production'] === undefined ? undefined : (0, args_1.flagBoolean)(ctx.flags, 'production'),
+            baseHref: (0, args_1.flagString)(ctx.flags, 'baseHref'),
+            domains: list((0, args_1.flagString)(ctx.flags, 'domains')),
+        }));
+    }
+    catch (err) {
+        if (err instanceof types_1.CliError)
+            throw err;
+        throw new types_1.CliError(err.message.replace(/^env generator: /, ''));
+    }
+    return 0;
+}
+exports.runEnv = runEnv;
+//# sourceMappingURL=env.js.map

package/dist/src/cli/commands/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../../src/cli/commands/env.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kCAAkD;AAClD,0CAAwC;AACxC,oCAAoD;AAEpD,+BAAyC;AAEzC,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAwB,EAAE,CAC3D,CAAC,KAAK,SAAS;IACb,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,CAAC;SACE,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AAEzB,MAAM,OAAO,GAAG,mFAAmF,CAAC;AAE7F,KAAK,UAAU,MAAM,CAAC,GAAmB;IAC9C,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE;QACxE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,IAAI,gBAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC;SAC7F;KACF;IACD,MAAM,IAAI,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,gBAAQ,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,IAAA,kBAAW,EAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5E,IAAI,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE;QAC3D,MAAM,IAAI,gBAAQ,CAChB,2EAA2E,OAAO,EAAE,CACrF,CAAC;KACH;IACD,MAAM,IAAI,GAAG,IAAA,sBAAgB,EAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,wDAAa,gCAAgC,GAAC,CAAC;IACjF,IAAI;QACF,MAAM,IAAA,oBAAS,EAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAClC,YAAY,CAAC,IAAI,EAAE;YACjB,IAAI;YACJ,QAAQ;YACR,GAAG;YACH,IAAI,EAAE,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;YACnC,MAAM,EAAE,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC;YACvC,UAAU,EACR,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,kBAAW,EAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC;YAC1F,QAAQ,EAAE,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC;YAC3C,OAAO,EAAE,IAAI,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;SAChD,CAAC,CACH,CAAC;KACH;IAAC,OAAO,GAAG,EAAE;QACZ,IAAI,GAAG,YAAY,gBAAQ;YAAE,MAAM,GAAG,CAAC;QACvC,MAAM,IAAI,gBAAQ,CAAE,GAAa,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;KAC5E;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AApCD,wBAoCC"}

package/dist/src/cli/commands/hardening.d.ts

@@ -0,0 +1,2 @@
+import { CommandContext } from '../types';
+export declare function runHardening(ctx: CommandContext): Promise<number>;

package/dist/src/cli/commands/hardening.js

@@ -0,0 +1,176 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runHardening = void 0;
+const devkit_1 = require("@nx/devkit");
+const options_1 = require("../../lib/hardening/options");
+const angular_project_1 = require("../../lib/utils/angular-project");
+const dependencies_1 = require("../../lib/utils/dependencies");
+const llm_block_1 = require("../../lib/utils/llm-block");
+const args_1 = require("../args");
+const run_tree_1 = require("../run-tree");
+const types_1 = require("../types");
+const app_1 = require("./app");
+const STRING_FLAGS = ['obfuscate', 'obfuscateOptions', 'leakCheck', 'sourceMaps', 'dropConsole'];
+const BOOLEAN_FLAGS = ['sri', 'stripComments'];
+const OPTION_FLAGS = [...STRING_FLAGS, ...BOOLEAN_FLAGS];
+const dashed = (f) => `--${f.replace(/[A-Z]/g, (c) => `-${c.toLowerCase()}`)}`;
+const isDev = (conf) => String(conf['env'] ?? '').toUpperCase() === 'DEV';
+/** One configuration's effective hardening options (target options under configuration ones). */
+function describeConfiguration(name, conf, defaults) {
+    const label = name.padEnd(6);
+    if (isDev({ ...defaults, ...conf }))
+        return `  ${label}DEV: no hardening steps run`;
+    const o = { ...defaults, ...conf };
+    const drop = Array.isArray(o['dropConsole']) ? o['dropConsole'] : [];
+    return (`  ${label}leakCheck ${o['leakCheck'] ?? 'off'} · sourceMaps ${o['sourceMaps'] ?? 'off'} · ` +
+        `stripComments ${o['stripComments'] === true} · dropConsole ${drop.join(',') || '—'} · ` +
+        `obfuscate ${o['obfuscate'] ?? 'off'}${overridesText(o['obfuscateOptions'])} · ` +
+        `sri ${o['sri'] === true}`);
+}
+const overridesText = (v) => v && typeof v === 'object' && Object.keys(v).length > 0 ? ` ${JSON.stringify(v)}` : '';
+/** The changes the flags ask for, validated before anything is written. */
+function requestedOptions(flags) {
+    const set = {};
+    const obfuscate = (0, args_1.flagString)(flags, 'obfuscate');
+    if (obfuscate !== undefined) {
+        if (!options_1.OBFUSCATE_MODES.includes(obfuscate)) {
+            throw new types_1.CliError(`--obfuscate must be ${options_1.OBFUSCATE_MODES.join(', ')}.`);
+        }
+        set['obfuscate'] = obfuscate;
+    }
+    const overrides = (0, args_1.flagString)(flags, 'obfuscateOptions');
+    if (overrides !== undefined) {
+        if (overrides.trim() === 'none') {
+            set['obfuscateOptions'] = undefined;
+        }
+        else {
+            let parsed;
+            try {
+                parsed = JSON.parse(overrides);
+            }
+            catch {
+                throw new types_1.CliError('--obfuscate-options must be JSON, e.g. \'{"stringArrayThreshold":0.3}\' (none: clear).');
+            }
+            try {
+                set['obfuscateOptions'] = (0, options_1.checkObfuscateOptions)(parsed);
+            }
+            catch (err) {
+                throw new types_1.CliError(err.message);
+            }
+        }
+    }
+    for (const key of ['leakCheck', 'sourceMaps']) {
+        const value = (0, args_1.flagString)(flags, key);
+        if (value === undefined)
+            continue;
+        if (!options_1.CHECK_MODES.includes(value)) {
+            throw new types_1.CliError(`${dashed(key)} must be fail, warn or off.`);
+        }
+        set[key] = value;
+    }
+    const drop = (0, args_1.flagString)(flags, 'dropConsole');
+    if (drop !== undefined) {
+        const methods = drop.trim() === 'none'
+            ? []
+            : drop
+                .split(',')
+                .map((m) => m.trim())
+                .filter(Boolean);
+        for (const m of methods) {
+            if (!options_1.CONSOLE_METHODS.includes(m)) {
+                throw new types_1.CliError(`--drop-console: unknown console method "${m}" (use ${options_1.CONSOLE_METHODS.join(', ')} or none).`);
+            }
+        }
+        set['dropConsole'] = [...new Set(methods)];
+    }
+    for (const key of BOOLEAN_FLAGS) {
+        if (flags[key] !== undefined)
+            set[key] = (0, args_1.flagBoolean)(flags, key);
+    }
+    return set;
+}
+async function runHardening(ctx) {
+    const root = (0, app_1.requireWorkspace)(ctx.cwd, 'hardening');
+    for (const f of ['app', 'configuration', ...STRING_FLAGS]) {
+        if (ctx.flags[f] === true)
+            throw new types_1.CliError(`${dashed(f)} needs a value.`);
+    }
+    const app = (0, args_1.flagString)(ctx.flags, 'app');
+    if (!app)
+        throw new types_1.CliError('--app=<project> is required.');
+    const changes = requestedOptions(ctx.flags);
+    const changing = OPTION_FLAGS.some((f) => ctx.flags[f] !== undefined);
+    const only = (0, args_1.flagString)(ctx.flags, 'configuration');
+    const lines = [];
+    const notes = [];
+    await (0, run_tree_1.runInTree)(root, { ...ctx, quietWhenUnchanged: !changing }, (tree) => {
+        const { found, name, target } = releaseTarget(tree, app);
+        const configurations = (target.configurations ?? {});
+        if (only !== undefined && !configurations[only]) {
+            throw new types_1.CliError(`The release target of "${app}" has no configuration "${only}".`);
+        }
+        if (changing) {
+            const names = only !== undefined ? [only] : Object.keys(configurations);
+            const defaults = (target.options ?? {});
+            const dev = (n) => isDev({ ...defaults, ...configurations[n] });
+            const chosen = names.filter((n) => only !== undefined || !dev(n));
+            if (only !== undefined && dev(only)) {
+                notes.push(`${only} is a DEV configuration: release builds run no hardening step for it.`);
+            }
+            if (chosen.length === 0)
+                throw new types_1.CliError(`"${app}" has no non-DEV configuration.`);
+            for (const n of chosen)
+                configurations[n] = { ...configurations[n], ...changes };
+            (0, devkit_1.writeJson)(tree, `${found.root}/project.json`, found.json);
+            addDependencies(tree, changes, notes);
+            notes.unshift(`Set on ${chosen.join(', ')}.`);
+        }
+        const shownDefaults = (target.options ?? {});
+        lines.push(`Release hardening of ${app} (${name}):`);
+        for (const [n, conf] of Object.entries(configurations)) {
+            lines.push(describeConfiguration(n, conf, shownDefaults));
+        }
+    });
+    for (const l of lines)
+        console.log(l);
+    for (const n of notes)
+        console.log(`Note: ${n}`);
+    return 0;
+}
+exports.runHardening = runHardening;
+/** Workspace packages the new settings load at build time (installed by the user's npm install). */
+function addDependencies(tree, changes, notes) {
+    const before = tree.read('package.json', 'utf-8');
+    const strips = changes['stripComments'] === true ||
+        (Array.isArray(changes['dropConsole']) && changes['dropConsole'].length > 0);
+    if (strips)
+        (0, dependencies_1.ensureReleaseHardeningDependencies)(tree);
+    const level = changes['obfuscate'];
+    if (level !== undefined && level !== 'off') {
+        (0, dependencies_1.ensureObfuscationDependencies)(tree);
+        notes.push(`obfuscate ${level} rewrites main and the lazy chunks (light ≈ +20% gzip, medium ≈ +67%, ` +
+            'strong more on the chunk holding the decrypt code); measure start-up time.');
+    }
+    if (changes['sri'] === true) {
+        notes.push('sri: with cipher aes-gcm the app decrypts nothing while a script on the page has no ' +
+            'integrity attribute.');
+    }
+    if (tree.read('package.json', 'utf-8') !== before) {
+        notes.push('package.json devDependencies changed: run npm install.');
+    }
+}
+function releaseTarget(tree, app) {
+    // Walks apps/ and libs/ (getProjects needs Nx's native file globbing).
+    const found = [...(0, llm_block_1.findProjects)(tree, 'apps'), ...(0, llm_block_1.findProjects)(tree, 'libs')].find((p) => (typeof p.json['name'] === 'string' ? p.json['name'] : p.root.split('/').pop()) === app);
+    if (!found)
+        throw new types_1.CliError(`No project named "${app}".`);
+    const targets = (found.json['targets'] ?? {});
+    const entry = Object.entries(targets).find(([, t]) => t.executor === angular_project_1.POLYSTACK_BUILD_EXECUTOR);
+    if (!entry) {
+        throw new types_1.CliError(`"${app}" has no release target (${angular_project_1.POLYSTACK_BUILD_EXECUTOR}); run "pstack update" first.`);
+    }
+    const [name, target] = entry;
+    target.configurations ??= {};
+    return { found, name, target };
+}
+//# sourceMappingURL=hardening.js.map

package/dist/src/cli/commands/hardening.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardening.js","sourceRoot":"","sources":["../../../../src/cli/commands/hardening.ts"],"names":[],"mappings":";;;AAAA,uCAAkE;AAElE,yDAKqC;AACrC,qEAA2E;AAC3E,+DAGsC;AACtC,yDAAyD;AACzD,kCAAyD;AACzD,0CAAwC;AACxC,oCAAoD;AAEpD,+BAAyC;AAIzC,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AACjG,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;AAC/C,MAAM,YAAY,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,aAAa,CAAC,CAAC;AAEzD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC;AACvF,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AAEnF,iGAAiG;AACjG,SAAS,qBAAqB,CAAC,IAAY,EAAE,IAAa,EAAE,QAAiB;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,KAAK,6BAA6B,CAAC;IACpF,MAAM,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,aAAa,CAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,OAAO,CACL,KAAK,KAAK,aAAa,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,YAAY,CAAC,IAAI,KAAK,KAAK;QAC5F,iBAAiB,CAAC,CAAC,eAAe,CAAC,KAAK,IAAI,kBAAkB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK;QACxF,aAAa,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK;QAChF,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAU,EAAE,EAAE,CACnC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAEzF,2EAA2E;AAC3E,SAAS,gBAAgB,CAAC,KAAY;IACpC,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,MAAM,SAAS,GAAG,IAAA,iBAAU,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACjD,IAAI,SAAS,KAAK,SAAS,EAAE;QAC3B,IAAI,CAAE,yBAAqC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;YAC/D,MAAM,IAAI,gBAAQ,CAAC,uBAAuB,yBAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SAC1E;QACD,GAAG,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;KAC9B;IACD,MAAM,SAAS,GAAG,IAAA,iBAAU,EAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACxD,IAAI,SAAS,KAAK,SAAS,EAAE;QAC3B,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE;YAC/B,GAAG,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC;SACrC;aAAM;YACL,IAAI,MAAe,CAAC;YACpB,IAAI;gBACF,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;aAChC;YAAC,MAAM;gBACN,MAAM,IAAI,gBAAQ,CAChB,wFAAwF,CACzF,CAAC;aACH;YACD,IAAI;gBACF,GAAG,CAAC,kBAAkB,CAAC,GAAG,IAAA,+BAAqB,EAAC,MAAM,CAAC,CAAC;aACzD;YAAC,OAAO,GAAG,EAAE;gBACZ,MAAM,IAAI,gBAAQ,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;aAC5C;SACF;KACF;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE;QAC7C,MAAM,KAAK,GAAG,IAAA,iBAAU,EAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAE,qBAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YACvD,MAAM,IAAI,gBAAQ,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;SACjE;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;KAClB;IACD,MAAM,IAAI,GAAG,IAAA,iBAAU,EAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,SAAS,EAAE;QACtB,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,EAAE,KAAK,MAAM;YACpB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,IAAI;iBACD,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE;YACvB,IAAI,CAAE,yBAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;gBACvD,MAAM,IAAI,gBAAQ,CAChB,2CAA2C,CAAC,UAAU,yBAAe,CAAC,IAAI,CACxE,IAAI,CACL,YAAY,CACd,CAAC;aACH;SACF;QACD,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;KAC5C;IACD,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE;QAC/B,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,IAAA,kBAAW,EAAC,KAAK,EAAE,GAAG,CAAC,CAAC;KAClE;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,GAAmB;IACpD,MAAM,IAAI,GAAG,IAAA,sBAAgB,EAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,YAAY,CAAC,EAAE;QACzD,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,gBAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;KAC9E;IACD,MAAM,GAAG,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,gBAAQ,CAAC,8BAA8B,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAEpD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAA,oBAAS,EAAC,IAAI,EAAE,EAAE,GAAG,GAAG,EAAE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;QACxE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAA4B,CAAC;QAChF,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE;YAC/C,MAAM,IAAI,gBAAQ,CAAC,0BAA0B,GAAG,2BAA2B,IAAI,IAAI,CAAC,CAAC;SACtF;QACD,IAAI,QAAQ,EAAE;YACZ,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACxE,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAY,CAAC;YACnD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE;gBACnC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,uEAAuE,CAAC,CAAC;aAC5F;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,gBAAQ,CAAC,IAAI,GAAG,iCAAiC,CAAC,CAAC;YACtF,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;YACjF,IAAA,kBAAS,EAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1D,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACtC,KAAK,CAAC,OAAO,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SAC/C;QACD,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAY,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,wBAAwB,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE;YACtD,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;SAC3D;IACH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,CAAC;AACX,CAAC;AA1CD,oCA0CC;AAED,oGAAoG;AACpG,SAAS,eAAe,CAAC,IAAU,EAAE,OAAgB,EAAE,KAAe;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GACV,OAAO,CAAC,eAAe,CAAC,KAAK,IAAI;QACjC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,MAAM;QAAE,IAAA,iDAAkC,EAAC,IAAI,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,EAAE;QAC1C,IAAA,4CAA6B,EAAC,IAAI,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CACR,aAAa,KAAK,wEAAwE;YACxF,4EAA4E,CAC/E,CAAC;KACH;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE;QAC3B,KAAK,CAAC,IAAI,CACR,sFAAsF;YACpF,sBAAsB,CACzB,CAAC;KACH;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,KAAK,MAAM,EAAE;QACjD,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;KACtE;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAU,EAAE,GAAW;IAC5C,uEAAuE;IACvE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAA,wBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,IAAA,wBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAC/E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,GAAG,CAC/F,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,gBAAQ,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAwC,CAAC;IACrF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,0CAAwB,CAAC,CAAC;IAC/F,IAAI,CAAC,KAAK,EAAE;QACV,MAAM,IAAI,gBAAQ,CAChB,IAAI,GAAG,4BAA4B,0CAAwB,+BAA+B,CAC3F,CAAC;KACH;IACD,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IAC7B,MAAM,CAAC,cAAc,KAAK,EAAE,CAAC;IAC7B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC"}

package/dist/src/cli/commands/index.d.ts

@@ -0,0 +1,3 @@
+import { CommandContext } from '../types';
+export type CommandHandler = (ctx: CommandContext) => Promise<number>;
+export declare const COMMANDS: Record<string, CommandHandler>;

package/dist/src/cli/commands/index.js

@@ -0,0 +1,45 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.COMMANDS = void 0;
+exports.COMMANDS = {
+    preset: async (c) => (await Promise.resolve().then(() => __importStar(require('./preset')))).runPreset(c),
+    new: async (c) => (await Promise.resolve().then(() => __importStar(require('./new')))).runNew(c),
+    app: async (c) => (await Promise.resolve().then(() => __importStar(require('./app')))).runApp(c),
+    env: async (c) => (await Promise.resolve().then(() => __importStar(require('./env')))).runEnv(c),
+    lib: async (c) => (await Promise.resolve().then(() => __importStar(require('./lib')))).runLib(c),
+    llm: async (c) => (await Promise.resolve().then(() => __importStar(require('./llm')))).runLlm(c),
+    encryption: async (c) => (await Promise.resolve().then(() => __importStar(require('./encryption')))).runEncryption(c),
+    hardening: async (c) => (await Promise.resolve().then(() => __importStar(require('./hardening')))).runHardening(c),
+    build: async (c) => (await Promise.resolve().then(() => __importStar(require('./build')))).runBuild(c),
+    release: async (c) => (await Promise.resolve().then(() => __importStar(require('./release')))).runRelease(c),
+    csp: async (c) => (await Promise.resolve().then(() => __importStar(require('./csp')))).runCsp(c),
+    shared: async (c) => (await Promise.resolve().then(() => __importStar(require('./shared')))).runShared(c),
+    infra: async (c) => (await Promise.resolve().then(() => __importStar(require('./infra')))).runInfra(c),
+    _migrate: async (c) => (await Promise.resolve().then(() => __importStar(require('./internal-migrate')))).runInternalMigrate(c),
+    update: async (c) => (await Promise.resolve().then(() => __importStar(require('./update')))).runUpdate(c),
+    migrate: async (c) => (await Promise.resolve().then(() => __importStar(require('./migrate')))).runMigrate(c),
+};
+//# sourceMappingURL=index.js.map

package/dist/src/cli/commands/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cli/commands/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAIa,QAAA,QAAQ,GAAmC;IACtD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,UAAU,GAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,OAAO,GAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,OAAO,GAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,OAAO,GAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,OAAO,GAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,OAAO,GAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,cAAc,GAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACxE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,aAAa,GAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACrE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,SAAS,GAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,WAAW,GAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,OAAO,GAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,UAAU,GAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,SAAS,GAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,oBAAoB,GAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACjF,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,UAAU,GAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,wDAAa,WAAW,GAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;CAChE,CAAC"}