@mouryaamit/nx-polystack 0.0.0-stage → 1.0.1

package/dist/src/migrations/app-clean-and-port/app-clean-and-port.d.ts

@@ -0,0 +1,7 @@
+import { Tree } from '@nx/devkit';
+/**
+ * v0.35.0: apps get a `clean` target when they have none, and apps whose dev servers fall back to
+ * port 4200 get distinct ports: the first by name keeps 4200 unless another app sets it
+ * explicitly; explicit ports (numbers or numeric strings) are kept.
+ */
+export default function appCleanAndPort(tree: Tree): Promise<void>;

package/dist/src/migrations/app-clean-and-port/app-clean-and-port.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const devkit_1 = require("@nx/devkit");
+const executor_1 = require("../../executors/clean/executor");
+const angular_project_1 = require("../../lib/utils/angular-project");
+const project_json_files_1 = require("../../lib/utils/project-json-files");
+const serve_port_1 = require("../../lib/utils/serve-port");
+const shared_libs_1 = require("../../lib/utils/shared-libs");
+/**
+ * v0.35.0: apps get a `clean` target when they have none, and apps whose dev servers fall back to
+ * port 4200 get distinct ports: the first by name keeps 4200 unless another app sets it
+ * explicitly; explicit ports (numbers or numeric strings) are kept.
+ */
+async function appCleanAndPort(tree) {
+    let projects;
+    try {
+        projects = (0, project_json_files_1.readProjects)(tree);
+    }
+    catch (err) {
+        devkit_1.logger.warn(`app-clean-and-port: skipped (${err.message}).`);
+        return;
+    }
+    const apps = projects
+        .filter((p) => p.json['projectType'] === 'application' && (0, serve_port_1.serveTargetOf)(p.json))
+        .sort((a, b) => a.name.localeCompare(b.name));
+    const cleaned = [];
+    const skipped = [];
+    const ported = [];
+    const touched = new Set();
+    for (const app of apps) {
+        const targets = (app.json['targets'] ?? {});
+        if (targets['clean'])
+            continue;
+        const serve = (0, serve_port_1.serveTargetOf)(app.json);
+        const flutter = serve.executor === '@mouryaamit/nx-polystack:flutter-build';
+        const build = flutter ? undefined : (0, shared_libs_1.angularBuildTargetOf)(app.json);
+        const outputPath = build?.options?.['outputPath'];
+        let outputs;
+        if (typeof outputPath === 'string' && outputPath.trim() !== '') {
+            const out = outputPath.trim().replace(/\/+$/, '');
+            if ((0, executor_1.cleanPathProblem)(out, app.root) === null)
+                outputs = [out];
+            else
+                skipped.push(`${app.name} (${out})`);
+        }
+        const target = (0, angular_project_1.cleanTarget)(app.root, { flutter, outputs, name: app.name });
+        target.options.paths = target.options.paths.filter((p) => (0, executor_1.cleanPathProblem)(p, app.root) === null);
+        targets['clean'] = target;
+        app.json['targets'] = targets;
+        cleaned.push(app.name);
+        touched.add(app.name);
+    }
+    const portOfApp = (a) => (0, serve_port_1.explicitPort)((0, serve_port_1.serveTargetOf)(a.json));
+    const used = apps.map(portOfApp).filter((p) => p !== undefined);
+    let first = true;
+    for (const app of apps.filter((a) => portOfApp(a) === undefined)) {
+        if (first && !used.includes(serve_port_1.DEFAULT_SERVE_PORT)) {
+            used.push(serve_port_1.DEFAULT_SERVE_PORT);
+            first = false;
+            continue;
+        }
+        first = false;
+        const port = (0, serve_port_1.nextFreePort)(used);
+        used.push(port);
+        const serve = (0, serve_port_1.serveTargetOf)(app.json);
+        serve.options = { ...(serve.options ?? {}), port };
+        ported.push(`${app.name} → ${port}`);
+        touched.add(app.name);
+    }
+    for (const app of apps) {
+        if (!touched.has(app.name))
+            continue;
+        tree.write(`${app.root}/project.json`, JSON.stringify(app.json, null, 2) + '\n');
+    }
+    if (cleaned.length > 0) {
+        devkit_1.logger.info(`app-clean-and-port: clean target added to ${cleaned.join(', ')}.`);
+    }
+    if (skipped.length > 0) {
+        devkit_1.logger.info('app-clean-and-port: build outputs left out of clean (not below dist/, coverage/ or tmp/, ' +
+            `nor an output folder of the project): ${skipped.join(', ')}.`);
+    }
+    if (ported.length > 0) {
+        devkit_1.logger.info(`app-clean-and-port: these apps served on 4200; dev-server ports set: ${ported.join(', ')}. ` + 'Update local OAuth redirect URIs or CORS allowlists that name localhost:4200.');
+    }
+    if (touched.size > 0)
+        await (0, devkit_1.formatFiles)(tree);
+}
+exports.default = appCleanAndPort;
+//# sourceMappingURL=app-clean-and-port.js.map

package/dist/src/migrations/app-clean-and-port/app-clean-and-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-clean-and-port.js","sourceRoot":"","sources":["../../../../src/migrations/app-clean-and-port/app-clean-and-port.ts"],"names":[],"mappings":";;AAAA,uCAAuD;AAEvD,6DAAkE;AAClE,qEAA8D;AAC9D,2EAAkE;AAClE,2DAKoC;AACpC,6DAAmE;AAInE;;;;GAIG;AACY,KAAK,UAAU,eAAe,CAAC,IAAU;IACtD,IAAI,QAAQ,CAAC;IACb,IAAI;QACF,QAAQ,GAAG,IAAA,iCAAY,EAAC,IAAI,CAAC,CAAC;KAC/B;IAAC,OAAO,GAAG,EAAE;QACZ,eAAM,CAAC,IAAI,CAAC,gCAAiC,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QACxE,OAAO;KACR;IACD,MAAM,IAAI,GAAG,QAAQ;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,aAAa,IAAI,IAAA,0BAAa,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAC/E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;QACtB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAA2B,CAAC;QACtE,IAAI,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAC/B,MAAM,KAAK,GAAG,IAAA,0BAAa,EAAC,GAAG,CAAC,IAAI,CAAW,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,KAAK,wCAAwC,CAAC;QAC5E,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,kCAAoB,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,OAA6B,CAAC;QAClC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,IAAA,2BAAgB,EAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;;gBACzD,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC;SAC3C;QACD,MAAM,MAAM,GAAG,IAAA,6BAAW,EAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,2BAAgB,EAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAC9C,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;KACvB;IAED,MAAM,SAAS,GAAG,CAAC,CAAwB,EAAE,EAAE,CAAC,IAAA,yBAAY,EAAC,IAAA,0BAAa,EAAC,CAAC,CAAC,IAAI,CAAW,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC7E,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,EAAE;QAChE,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,+BAAkB,CAAC,EAAE;YAC/C,IAAI,CAAC,IAAI,CAAC,+BAAkB,CAAC,CAAC;YAC9B,KAAK,GAAG,KAAK,CAAC;YACd,SAAS;SACV;QACD,KAAK,GAAG,KAAK,CAAC;QACd,MAAM,IAAI,GAAG,IAAA,yBAAY,EAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,IAAA,0BAAa,EAAC,GAAG,CAAC,IAAI,CAAW,CAAC;QAChD,KAAK,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;KACvB;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;QACtB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;KAClF;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QACtB,eAAM,CAAC,IAAI,CAAC,6CAA6C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KACjF;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QACtB,eAAM,CAAC,IAAI,CACT,2FAA2F;YACzF,yCAAyC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjE,CAAC;KACH;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;QACrB,eAAM,CAAC,IAAI,CACT,wEAAwE,MAAM,CAAC,IAAI,CACjF,IAAI,CACL,IAAI,GAAG,+EAA+E,CACxF,CAAC;KACH;IACD,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AA/ED,kCA+EC"}

package/dist/src/migrations/env-encryption-config/env-encryption-config.d.ts

@@ -0,0 +1,7 @@
+import { Tree } from '@nx/devkit';
+/**
+ * v0.25.0: env encryption settings move into nx.json (`pstack.envEncryption`, mode "listed" with
+ * the keys of tools/config/encrypt-keys.json, which is removed), and `.env.local` is ignored.
+ * Builds encrypt the same fields as before.
+ */
+export default function envEncryptionConfig(tree: Tree): void;

package/dist/src/migrations/env-encryption-config/env-encryption-config.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const devkit_1 = require("@nx/devkit");
+const config_1 = require("../../lib/env-encryption/config");
+const workspace_1 = require("../../lib/env-encryption/workspace");
+/**
+ * v0.25.0: env encryption settings move into nx.json (`pstack.envEncryption`, mode "listed" with
+ * the keys of tools/config/encrypt-keys.json, which is removed), and `.env.local` is ignored.
+ * Builds encrypt the same fields as before.
+ */
+function envEncryptionConfig(tree) {
+    if (!tree.exists('nx.json'))
+        return;
+    const notes = [];
+    if ((0, workspace_1.readEnvEncryptionBlock)(tree) === undefined) {
+        const cfg = (0, workspace_1.initialEnvEncryption)(tree);
+        if (tree.exists(config_1.LEGACY_KEYS_FILE)) {
+            let valid = true;
+            try {
+                (0, config_1.keysFromLegacy)((0, devkit_1.readJson)(tree, config_1.LEGACY_KEYS_FILE));
+            }
+            catch {
+                valid = false;
+            }
+            if (valid) {
+                tree.delete(config_1.LEGACY_KEYS_FILE);
+                notes.push(`moved the keys of ${config_1.LEGACY_KEYS_FILE} into nx.json and removed it`);
+            }
+            else {
+                notes.push(`${config_1.LEGACY_KEYS_FILE} could not be read; it was kept, default keys were written`);
+            }
+        }
+        (0, workspace_1.writeEnvEncryptionBlock)(tree, cfg);
+        notes.push('nx.json pstack.envEncryption written (mode "listed")');
+    }
+    if ((0, workspace_1.ignoreDotEnvLocal)(tree))
+        notes.push('.env.local added to .gitignore');
+    if (notes.length > 0)
+        devkit_1.logger.info(`env-encryption-config: ${notes.join('; ')}.`);
+}
+exports.default = envEncryptionConfig;
+//# sourceMappingURL=env-encryption-config.js.map

package/dist/src/migrations/env-encryption-config/env-encryption-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-encryption-config.js","sourceRoot":"","sources":["../../../../src/migrations/env-encryption-config/env-encryption-config.ts"],"names":[],"mappings":";;AAAA,uCAAoD;AAEpD,4DAAmF;AACnF,kEAK4C;AAE5C;;;;GAIG;AACH,SAAwB,mBAAmB,CAAC,IAAU;IACpD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAA,kCAAsB,EAAC,IAAI,CAAC,KAAK,SAAS,EAAE;QAC9C,MAAM,GAAG,GAAG,IAAA,gCAAoB,EAAC,IAAI,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,yBAAgB,CAAC,EAAE;YACjC,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,IAAI;gBACF,IAAA,uBAAc,EAAC,IAAA,iBAAQ,EAAC,IAAI,EAAE,yBAAgB,CAAC,CAAC,CAAC;aAClD;YAAC,MAAM;gBACN,KAAK,GAAG,KAAK,CAAC;aACf;YACD,IAAI,KAAK,EAAE;gBACT,IAAI,CAAC,MAAM,CAAC,yBAAgB,CAAC,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,qBAAqB,yBAAgB,8BAA8B,CAAC,CAAC;aACjF;iBAAM;gBACL,KAAK,CAAC,IAAI,CAAC,GAAG,yBAAgB,4DAA4D,CAAC,CAAC;aAC7F;SACF;QACD,IAAA,mCAAuB,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;KACpE;IACD,IAAI,IAAA,6BAAiB,EAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,eAAM,CAAC,IAAI,CAAC,0BAA0B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnF,CAAC;AAxBD,sCAwBC"}

package/dist/src/migrations/env-encryption-key-sources/env-encryption-key-sources.d.ts

@@ -0,0 +1,3 @@
+import { Tree } from '@nx/devkit';
+/** v0.28.0: `pstack.envEncryption.keySource` becomes `keySources` (aes-gcm key factors). */
+export default function envEncryptionKeySources(tree: Tree): void;

package/dist/src/migrations/env-encryption-key-sources/env-encryption-key-sources.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const devkit_1 = require("@nx/devkit");
+const config_1 = require("../../lib/env-encryption/config");
+const workspace_1 = require("../../lib/env-encryption/workspace");
+/** v0.28.0: `pstack.envEncryption.keySource` becomes `keySources` (aes-gcm key factors). */
+function envEncryptionKeySources(tree) {
+    const raw = (0, workspace_1.readEnvEncryptionBlock)(tree);
+    if (!raw || typeof raw !== 'object' || !('keySource' in raw))
+        return;
+    (0, workspace_1.writeEnvEncryptionBlock)(tree, (0, config_1.normalizeEnvEncryption)(raw));
+    devkit_1.logger.info('env-encryption-key-sources: nx.json pstack.envEncryption.keySource → keySources.');
+}
+exports.default = envEncryptionKeySources;
+//# sourceMappingURL=env-encryption-key-sources.js.map

package/dist/src/migrations/env-encryption-key-sources/env-encryption-key-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-encryption-key-sources.js","sourceRoot":"","sources":["../../../../src/migrations/env-encryption-key-sources/env-encryption-key-sources.ts"],"names":[],"mappings":";;AAAA,uCAA0C;AAE1C,4DAAyE;AACzE,kEAG4C;AAE5C,4FAA4F;AAC5F,SAAwB,uBAAuB,CAAC,IAAU;IACxD,MAAM,GAAG,GAAG,IAAA,kCAAsB,EAAC,IAAI,CAAwC,CAAC;IAChF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC;QAAE,OAAO;IACrE,IAAA,mCAAuB,EAAC,IAAI,EAAE,IAAA,+BAAsB,EAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,eAAM,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;AAClG,CAAC;AALD,0CAKC"}

package/dist/src/migrations/fix-lint-script/fix-lint-script.d.ts

@@ -0,0 +1,7 @@
+import { Tree } from '@nx/devkit';
+/**
+ * v0.8.0: `pstack new` wrote `"lint": "npm run lint"` (and `"lint:fix": "npm run lint --fix"`) into
+ * the workspace package.json, so `npm run lint` called itself forever. Replaces only an exactly
+ * self-calling `lint` script (and `lint:fix` with it) with `nx run-many -t lint`; any other lint script is left alone.
+ */
+export default function fixLintScript(tree: Tree): Promise<void>;

package/dist/src/migrations/fix-lint-script/fix-lint-script.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const devkit_1 = require("@nx/devkit");
+const generator_1 = require("../../generators/preset/generator");
+/**
+ * v0.8.0: `pstack new` wrote `"lint": "npm run lint"` (and `"lint:fix": "npm run lint --fix"`) into
+ * the workspace package.json, so `npm run lint` called itself forever. Replaces only an exactly
+ * self-calling `lint` script (and `lint:fix` with it) with `nx run-many -t lint`; any other lint script is left alone.
+ */
+async function fixLintScript(tree) {
+    if (!tree.exists('package.json'))
+        return;
+    const scripts = (0, devkit_1.readJson)(tree, 'package.json').scripts ?? {};
+    const fixLint = typeof scripts.lint === 'string' && (0, generator_1.isRecursiveLintCommand)(scripts.lint);
+    if (!fixLint)
+        return;
+    // lint:fix ("npm run lint --fix") only recursed through lint; fix it only alongside lint.
+    const fixLintFix = typeof scripts['lint:fix'] === 'string' && (0, generator_1.isRecursiveLintCommand)(scripts['lint:fix']);
+    (0, devkit_1.updateJson)(tree, 'package.json', (json) => {
+        json.scripts.lint = generator_1.DEFAULT_LINT_SCRIPT;
+        if (fixLintFix)
+            json.scripts['lint:fix'] = `${generator_1.DEFAULT_LINT_SCRIPT} --fix`;
+        return json;
+    });
+}
+exports.default = fixLintScript;
+//# sourceMappingURL=fix-lint-script.js.map

package/dist/src/migrations/fix-lint-script/fix-lint-script.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-lint-script.js","sourceRoot":"","sources":["../../../../src/migrations/fix-lint-script/fix-lint-script.ts"],"names":[],"mappings":";;AAAA,uCAAwD;AAExD,iEAAgG;AAEhG;;;;GAIG;AACY,KAAK,UAAU,aAAa,CAAC,IAAU;IACpD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAAE,OAAO;IACzC,MAAM,OAAO,GAAG,IAAA,iBAAQ,EAAC,IAAI,EAAE,cAAc,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAA,kCAAsB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,0FAA0F;IAC1F,MAAM,UAAU,GACd,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,IAAA,kCAAsB,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACzF,IAAA,mBAAU,EAAC,IAAI,EAAE,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;QACxC,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,+BAAmB,CAAC;QACxC,IAAI,UAAU;YAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,+BAAmB,QAAQ,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAbD,gCAaC"}

package/dist/src/migrations/flutter-web-platform/flutter-web-platform.d.ts

@@ -0,0 +1,8 @@
+import { Tree } from '@nx/devkit';
+/**
+ * v1.0.0: Flutter apps generated by earlier versions had no web/ folder, so `flutter build web`
+ * (the build-web and serve targets) stopped with "This project is not configured for the web".
+ * Adds web/index.html and web/manifest.json to apps built with the plugin's flutter-build executor
+ * for the web target. Apps that already have web/index.html are left alone.
+ */
+export default function flutterWebPlatform(tree: Tree): Promise<void>;

package/dist/src/migrations/flutter-web-platform/flutter-web-platform.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const devkit_1 = require("@nx/devkit");
+const flutter_web_1 = require("../../lib/utils/flutter-web");
+const project_json_files_1 = require("../../lib/utils/project-json-files");
+const FLUTTER_BUILD = '@mouryaamit/nx-polystack:flutter-build';
+/**
+ * v1.0.0: Flutter apps generated by earlier versions had no web/ folder, so `flutter build web`
+ * (the build-web and serve targets) stopped with "This project is not configured for the web".
+ * Adds web/index.html and web/manifest.json to apps built with the plugin's flutter-build executor
+ * for the web target. Apps that already have web/index.html are left alone.
+ */
+async function flutterWebPlatform(tree) {
+    const added = [];
+    for (const { name, root, json } of (0, project_json_files_1.readProjects)(tree)) {
+        const targets = (json.targets ?? {});
+        const buildsWeb = Object.values(targets).some((t) => t.executor === FLUTTER_BUILD && (t.options?.target ?? 'web') === 'web');
+        if (!buildsWeb || !tree.exists(`${root}/pubspec.yaml`))
+            continue;
+        if (tree.exists(`${root}/web/index.html`))
+            continue;
+        for (const [file, content] of Object.entries((0, flutter_web_1.flutterWebFiles)(name))) {
+            const target = `${root}/${file}`;
+            if (!tree.exists(target))
+                tree.write(target, content);
+        }
+        added.push(name);
+    }
+    if (added.length > 0) {
+        devkit_1.logger.info(`flutter-web-platform: web/index.html and web/manifest.json added to ${added.join(', ')}. ` +
+            'Needs Flutter 3.22 or later (flutter_bootstrap.js); add icons under web/ if you want them.');
+    }
+}
+exports.default = flutterWebPlatform;
+//# sourceMappingURL=flutter-web-platform.js.map

package/dist/src/migrations/flutter-web-platform/flutter-web-platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flutter-web-platform.js","sourceRoot":"","sources":["../../../../src/migrations/flutter-web-platform/flutter-web-platform.ts"],"names":[],"mappings":";;AAAA,uCAA0C;AAE1C,6DAA8D;AAC9D,2EAAkE;AAOlE,MAAM,aAAa,GAAG,wCAAwC,CAAC;AAE/D;;;;;GAKG;AACY,KAAK,UAAU,kBAAkB,CAAC,IAAU;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAA,iCAAY,EAAC,IAAI,CAAC,EAAE;QACrD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAA2B,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,CAC9E,CAAC;QACF,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC;YAAE,SAAS;QACjE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,iBAAiB,CAAC;YAAE,SAAS;QACpD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAA,6BAAe,EAAC,IAAI,CAAC,CAAC,EAAE;YACnE,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACvD;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAClB;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;QACpB,eAAM,CAAC,IAAI,CACT,uEAAuE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACzF,4FAA4F,CAC/F,CAAC;KACH;AACH,CAAC;AArBD,qCAqBC"}

package/dist/src/migrations/plugin-repo-dev/plugin-repo-dev.d.ts

@@ -0,0 +1,9 @@
+import { Tree } from '@nx/devkit';
+/** Text with the earlier repo name replaced by the development repo. */
+export declare function renamePluginRepo(text: string): string;
+/**
+ * v0.38.2: the plugin repo is now example-org/private-plugin. GitHub workflows that name the
+ * earlier repo (the dependency-upgrade workflow reads its releases) point at the new name.
+ * `pstack update` itself moves the package.json pin.
+ */
+export default function pluginRepoDev(tree: Tree): Promise<void>;

package/dist/src/migrations/plugin-repo-dev/plugin-repo-dev.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renamePluginRepo = void 0;
+const devkit_1 = require("@nx/devkit");
+const install_source_1 = require("../../cli/install-source");
+const versions_1 = require("../../cli/versions");
+const WORKFLOWS = '.github/workflows';
+const escapeRegExp = (s) => s.replace(/[.*+?^${}()|[\]\\/]/g, '\\$&');
+/** The earlier repo name as a whole word: not the package name (@…), not a longer repo name. */
+const LEGACY = new RegExp(`(?<![@\\w.-])(?:${versions_1.LEGACY_GITHUB_REPOS.map(escapeRegExp).join('|')})(?![\\w-])`, 'g');
+/** Text with the earlier repo name replaced by the development repo. */
+function renamePluginRepo(text) {
+    return text.replace(LEGACY, versions_1.PLUGIN_GITHUB_REPO);
+}
+exports.renamePluginRepo = renamePluginRepo;
+/**
+ * v0.38.2: the plugin repo is now example-org/private-plugin. GitHub workflows that name the
+ * earlier repo (the dependency-upgrade workflow reads its releases) point at the new name.
+ * `pstack update` itself moves the package.json pin.
+ */
+async function pluginRepoDev(tree) {
+    // In the npm build the earlier name is the public repo: nothing to point elsewhere.
+    if ((0, install_source_1.installSource)().kind === 'npm' || !tree.exists(WORKFLOWS))
+        return;
+    const changed = [];
+    for (const name of tree.children(WORKFLOWS)) {
+        const file = `${WORKFLOWS}/${name}`;
+        if (!/\.ya?ml$/.test(name) || !tree.isFile(file))
+            continue;
+        const text = tree.read(file, 'utf-8') ?? '';
+        const next = renamePluginRepo(text);
+        if (next !== text) {
+            tree.write(file, next);
+            changed.push(file);
+        }
+    }
+    if (changed.length > 0) {
+        devkit_1.logger.info(`plugin-repo-dev: ${changed.join(', ')} now name ${versions_1.PLUGIN_GITHUB_REPO}.`);
+    }
+}
+exports.default = pluginRepoDev;
+//# sourceMappingURL=plugin-repo-dev.js.map

package/dist/src/migrations/plugin-repo-dev/plugin-repo-dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-repo-dev.js","sourceRoot":"","sources":["../../../../src/migrations/plugin-repo-dev/plugin-repo-dev.ts"],"names":[],"mappings":";;;AAAA,uCAA0C;AAE1C,6DAAyD;AACzD,iDAA6E;AAE7E,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAEtC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;AAEtF,gGAAgG;AAChG,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,mBAAmB,8BAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAC/E,GAAG,CACJ,CAAC;AAEF,wEAAwE;AACxE,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,6BAAkB,CAAC,CAAC;AAClD,CAAC;AAFD,4CAEC;AAED;;;;GAIG;AACY,KAAK,UAAU,aAAa,CAAC,IAAU;IACpD,oFAAoF;IACpF,IAAI,IAAA,8BAAa,GAAE,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO;IACtE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;QAC3C,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,IAAI,EAAE;YACjB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACpB;KACF;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QACtB,eAAM,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,6BAAkB,GAAG,CAAC,CAAC;KACvF;AACH,CAAC;AAjBD,gCAiBC"}

package/dist/src/migrations/prepush-audit-warn-only/prepush-audit-warn-only.d.ts

@@ -0,0 +1,8 @@
+import { Tree } from '@nx/devkit';
+/**
+ * v0.9.1: the v0.9.0 `check:prepush` ran `npm audit` first and blocked the push on any high
+ * advisory, including ones with no fix for the workspace's framework major. In workspaces that have
+ * `check:prepush`, rewrites it only when it is exactly the v0.9.0 default (secret scan first and
+ * blocking, audit warn-only), and adds the strict `check:audit` when missing.
+ */
+export default function prepushAuditWarnOnly(tree: Tree): Promise<void>;

package/dist/src/migrations/prepush-audit-warn-only/prepush-audit-warn-only.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const devkit_1 = require("@nx/devkit");
+const generator_1 = require("../../generators/infra/generator");
+/**
+ * v0.9.1: the v0.9.0 `check:prepush` ran `npm audit` first and blocked the push on any high
+ * advisory, including ones with no fix for the workspace's framework major. In workspaces that have
+ * `check:prepush`, rewrites it only when it is exactly the v0.9.0 default (secret scan first and
+ * blocking, audit warn-only), and adds the strict `check:audit` when missing.
+ */
+async function prepushAuditWarnOnly(tree) {
+    if (!tree.exists('package.json'))
+        return;
+    const scripts = (0, devkit_1.readJson)(tree, 'package.json').scripts ?? {};
+    if (typeof scripts['check:prepush'] !== 'string')
+        return;
+    const rewrite = scripts['check:prepush'] === generator_1.PREPUSH_V0_9_0;
+    const addAudit = scripts['check:audit'] === undefined;
+    if (!rewrite && !addAudit)
+        return;
+    (0, devkit_1.updateJson)(tree, 'package.json', (json) => {
+        if (rewrite)
+            json.scripts['check:prepush'] = generator_1.INFRA_SCRIPTS['check:prepush'];
+        if (addAudit)
+            json.scripts['check:audit'] = generator_1.INFRA_SCRIPTS['check:audit'];
+        return json;
+    });
+}
+exports.default = prepushAuditWarnOnly;
+//# sourceMappingURL=prepush-audit-warn-only.js.map

package/dist/src/migrations/prepush-audit-warn-only/prepush-audit-warn-only.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepush-audit-warn-only.js","sourceRoot":"","sources":["../../../../src/migrations/prepush-audit-warn-only/prepush-audit-warn-only.ts"],"names":[],"mappings":";;AAAA,uCAAwD;AAExD,gEAAiF;AAEjF;;;;;GAKG;AACY,KAAK,UAAU,oBAAoB,CAAC,IAAU;IAC3D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAAE,OAAO;IACzC,MAAM,OAAO,GAAG,IAAA,iBAAQ,EAAC,IAAI,EAAE,cAAc,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;IAC7D,IAAI,OAAO,OAAO,CAAC,eAAe,CAAC,KAAK,QAAQ;QAAE,OAAO;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,KAAK,0BAAc,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC;IACtD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,OAAO;IAClC,IAAA,mBAAU,EAAC,IAAI,EAAE,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;QACxC,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,yBAAa,CAAC,eAAe,CAAC,CAAC;QAC5E,IAAI,QAAQ;YAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,yBAAa,CAAC,aAAa,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAZD,uCAYC"}

package/dist/src/migrations/quality-checks/quality-checks.d.ts

@@ -0,0 +1,7 @@
+import { GeneratorCallback, Tree } from '@nx/devkit';
+/**
+ * v0.36.0: typecheck targets (tsc --noEmit) on projects with a tsconfig.app/lib.json, cached in
+ * nx.json, run by the CI affected step; import/no-unresolved and unused-imports as ESLint
+ * warnings with their packages. The commit hook is not changed.
+ */
+export default function qualityChecks(tree: Tree): Promise<GeneratorCallback | undefined>;

package/dist/src/migrations/quality-checks/quality-checks.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const devkit_1 = require("@nx/devkit");
+const generator_1 = require("../../generators/infra/generator");
+const dependencies_1 = require("../../lib/utils/dependencies");
+const quality_1 = require("../../lib/utils/quality");
+/**
+ * v0.36.0: typecheck targets (tsc --noEmit) on projects with a tsconfig.app/lib.json, cached in
+ * nx.json, run by the CI affected step; import/no-unresolved and unused-imports as ESLint
+ * warnings with their packages. The commit hook is not changed.
+ */
+async function qualityChecks(tree) {
+    const typed = (0, quality_1.addTypecheckTargets)(tree);
+    const nxChanged = (0, quality_1.addTypecheckNxDefaults)(tree);
+    const ci = (0, quality_1.addTypecheckToCi)(tree);
+    const eslint = (0, quality_1.addQualityEslintRules)(tree);
+    const install = eslint === 'added'
+        ? (0, dependencies_1.addMissingDependencies)(tree, {}, (0, quality_1.qualityEslintDependencies)(tree))
+        : undefined;
+    if (typed.length > 0) {
+        devkit_1.logger.info(`quality-checks: typecheck target added to ${typed.join(', ')}. Run ` +
+            'npx nx run-many -t typecheck once before merging: libraries are now type-checked as a ' +
+            'whole (not only what apps import), and CI runs it for every affected project.');
+    }
+    if (nxChanged)
+        devkit_1.logger.info('quality-checks: typecheck is cached (nx.json targetDefaults).');
+    if (ci.changed.length > 0) {
+        devkit_1.logger.info(`quality-checks: typecheck added to the CI affected step in ${ci.changed.join(', ')}.`);
+    }
+    if (ci.unknown.length > 0) {
+        devkit_1.logger.info(`quality-checks: add typecheck to the nx affected targets in ${ci.unknown.join(', ')} ` +
+            'by hand (e.g. nx affected -t lint typecheck test build).');
+    }
+    if (eslint === 'added') {
+        devkit_1.logger.info('quality-checks: ESLint warns on unresolved imports and unused imports (root ' +
+            '.eslintrc.json); npm install adds the ESLint plugins.');
+    }
+    for (const note of (0, generator_1.eslintNote)(eslint))
+        devkit_1.logger.info(`quality-checks: ${note}`);
+    if (typed.length > 0 || nxChanged || ci.changed.length > 0 || eslint === 'added') {
+        await (0, devkit_1.formatFiles)(tree);
+    }
+    return install;
+}
+exports.default = qualityChecks;
+//# sourceMappingURL=quality-checks.js.map

package/dist/src/migrations/quality-checks/quality-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quality-checks.js","sourceRoot":"","sources":["../../../../src/migrations/quality-checks/quality-checks.ts"],"names":[],"mappings":";;AAAA,uCAA0E;AAE1E,gEAA8D;AAC9D,+DAAsE;AACtE,qDAMiC;AAEjC;;;;GAIG;AACY,KAAK,UAAU,aAAa,CAAC,IAAU;IACpD,MAAM,KAAK,GAAG,IAAA,6BAAmB,EAAC,IAAI,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAA,gCAAsB,EAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,IAAA,0BAAgB,EAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAA,+BAAqB,EAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,OAAO,GACX,MAAM,KAAK,OAAO;QAChB,CAAC,CAAC,IAAA,qCAAsB,EAAC,IAAI,EAAE,EAAE,EAAE,IAAA,mCAAyB,EAAC,IAAI,CAAC,CAAC;QACnE,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;QACpB,eAAM,CAAC,IAAI,CACT,6CAA6C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ;YACnE,wFAAwF;YACxF,+EAA+E,CAClF,CAAC;KACH;IACD,IAAI,SAAS;QAAE,eAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC5F,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QACzB,eAAM,CAAC,IAAI,CACT,8DAA8D,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvF,CAAC;KACH;IACD,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QACzB,eAAM,CAAC,IAAI,CACT,+DAA+D,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACrF,0DAA0D,CAC7D,CAAC;KACH;IACD,IAAI,MAAM,KAAK,OAAO,EAAE;QACtB,eAAM,CAAC,IAAI,CACT,8EAA8E;YAC5E,uDAAuD,CAC1D,CAAC;KACH;IACD,KAAK,MAAM,IAAI,IAAI,IAAA,sBAAU,EAAC,MAAM,CAAC;QAAE,eAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAE9E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,KAAK,OAAO,EAAE;QAChF,MAAM,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAC;KACzB;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAzCD,gCAyCC"}

package/dist/src/migrations/release-hardening/release-hardening.d.ts

@@ -0,0 +1,8 @@
+import { GeneratorCallback, Tree } from '@nx/devkit';
+/**
+ * v0.29.0: polystack release targets turn on the leak check, source-map guard, comment stripping
+ * and console removal for their UAT/PROD configurations (values already set are kept); the
+ * replaced `harden` option is removed (other envs it applied to keep its meaning); terser is added
+ * to the workspace devDependencies.
+ */
+export default function releaseHardening(tree: Tree): Promise<GeneratorCallback | undefined>;

package/dist/src/migrations/release-hardening/release-hardening.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const devkit_1 = require("@nx/devkit");
+const options_1 = require("../../lib/hardening/options");
+const angular_project_1 = require("../../lib/utils/angular-project");
+const dependencies_1 = require("../../lib/utils/dependencies");
+const project_json_files_1 = require("../../lib/utils/project-json-files");
+/**
+ * v0.29.0: polystack release targets turn on the leak check, source-map guard, comment stripping
+ * and console removal for their UAT/PROD configurations (values already set are kept); the
+ * replaced `harden` option is removed (other envs it applied to keep its meaning); terser is added
+ * to the workspace devDependencies.
+ */
+async function releaseHardening(tree) {
+    const changed = [];
+    const hardenMapped = [];
+    for (const file of (0, project_json_files_1.projectJsonFiles)(tree)) {
+        let project;
+        try {
+            project = (0, devkit_1.readJson)(tree, file);
+        }
+        catch {
+            continue;
+        }
+        const name = project.name ?? file.split('/').slice(-2, -1)[0];
+        let touched = false;
+        for (const target of Object.values(project.targets ?? {})) {
+            if (target.executor !== angular_project_1.POLYSTACK_BUILD_EXECUTOR)
+                continue;
+            const result = hardenTarget(target);
+            touched = result.changed || touched;
+            hardenMapped.push(...result.hardenMapped.map((c) => `${name}:${c}`));
+        }
+        if (!touched)
+            continue;
+        (0, devkit_1.writeJson)(tree, file, project);
+        changed.push(name);
+    }
+    if (changed.length === 0)
+        return undefined;
+    devkit_1.logger.info(`release-hardening: updated release hardening for ${changed.join(', ')}. ` +
+        'leakCheck/sourceMaps fail the build on a hit; set them to "warn" to report only.');
+    if (hardenMapped.length > 0) {
+        devkit_1.logger.info(`release-hardening: harden replaced by stripComments and dropConsole in ${hardenMapped.join(', ')}.`);
+    }
+    return (0, dependencies_1.ensureReleaseHardeningDependencies)(tree);
+}
+exports.default = releaseHardening;
+/**
+ * Hardens one release target in place. UAT/PROD configurations get every hardening option; other
+ * non-DEV configurations that `harden: true` applied to keep its meaning (stripComments and the
+ * default dropConsole). A key set in the configuration or the target options is kept. `harden`
+ * is removed everywhere.
+ */
+function hardenTarget(target) {
+    const options = target.options ?? {};
+    const hardenMapped = [];
+    let changed = false;
+    for (const [name, config] of Object.entries(target.configurations ?? {})) {
+        const env = config['env'] ?? options['env'];
+        const harden = (config['harden'] ?? options['harden']) === true;
+        changed = removeHarden(config) || changed;
+        if (typeof env !== 'string')
+            continue;
+        const wanted = releaseOptionsFor(env, harden);
+        if (!wanted)
+            continue;
+        const added = Object.entries(wanted).filter(([key]) => !(key in config) && !(key in options));
+        for (const [key, value] of added)
+            config[key] = value;
+        changed = changed || added.length > 0;
+        if (harden && !isReleaseEnv(env) && added.length > 0)
+            hardenMapped.push(name);
+    }
+    changed = removeHarden(target.options) || changed;
+    return { changed, hardenMapped };
+}
+/** The options a configuration should end up with, or undefined for none. */
+function releaseOptionsFor(env, harden) {
+    if (isReleaseEnv(env)) {
+        const { env: _env, ...hardening } = (0, angular_project_1.withReleaseHardening)({ env });
+        return hardening;
+    }
+    if (harden && env.toUpperCase() !== 'DEV') {
+        return { stripComments: true, dropConsole: [...options_1.DEFAULT_DROP_CONSOLE] };
+    }
+    return undefined;
+}
+function isReleaseEnv(env) {
+    return ['UAT', 'PROD'].includes(env.toUpperCase());
+}
+function removeHarden(options) {
+    if (!options || !('harden' in options))
+        return false;
+    delete options['harden'];
+    return true;
+}
+//# sourceMappingURL=release-hardening.js.map

package/dist/src/migrations/release-hardening/release-hardening.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-hardening.js","sourceRoot":"","sources":["../../../../src/migrations/release-hardening/release-hardening.ts"],"names":[],"mappings":";;AAAA,uCAAkF;AAElF,yDAAmE;AACnE,qEAAiG;AACjG,+DAAkF;AAClF,2EAAsE;AAUtE;;;;;GAKG;AACY,KAAK,UAAU,gBAAgB,CAAC,IAAU;IACvD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,IAAA,qCAAgB,EAAC,IAAI,CAAC,EAAE;QACzC,IAAI,OAA4D,CAAC;QACjE,IAAI;YACF,OAAO,GAAG,IAAA,iBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SAChC;QAAC,MAAM;YACN,SAAS;SACV;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;YACzD,IAAI,MAAM,CAAC,QAAQ,KAAK,0CAAwB;gBAAE,SAAS;YAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACpC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC;YACpC,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;SACtE;QACD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAA,kBAAS,EAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KACpB;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,eAAM,CAAC,IAAI,CACT,oDAAoD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACxE,kFAAkF,CACrF,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE;QAC3B,eAAM,CAAC,IAAI,CACT,0EAA0E,YAAY,CAAC,IAAI,CACzF,IAAI,CACL,GAAG,CACL,CAAC;KACH;IACD,OAAO,IAAA,iDAAkC,EAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AApCD,mCAoCC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACrC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC;QAChE,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC;QAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACtC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC;QAC9F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtD,OAAO,GAAG,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAC/E;IACD,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;IAClD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnC,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CAAC,GAAW,EAAE,MAAe;IACrD,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE;QACrB,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,GAAG,IAAA,sCAAoB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,OAAO,SAAS,CAAC;KAClB;IACD,IAAI,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE;QACzC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,GAAG,8BAAoB,CAAC,EAAE,CAAC;KACxE;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,OAA4B;IAChD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/migrations/sharp-security-update/sharp-security-update.d.ts

@@ -0,0 +1,10 @@
+import { Tree } from '@nx/devkit';
+/** sharp before 0.35.5 bundles libvips, libheif and librsvg versions with known vulnerabilities. */
+export declare const SHARP_FIXED = "^0.35.5";
+/** A caret or tilde range, or an exact version, below 0.35.5; other specs are left alone. */
+export declare function needsSharpUpdate(spec: unknown): boolean;
+/**
+ * v0.39.3: sharp (used by the release build to strip image metadata) moves to ^0.35.5, the first
+ * version without the libvips, libheif and librsvg vulnerabilities. Run npm install afterwards.
+ */
+export default function sharpSecurityUpdate(tree: Tree): Promise<void>;

package/dist/src/migrations/sharp-security-update/sharp-security-update.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.needsSharpUpdate = exports.SHARP_FIXED = void 0;
+const devkit_1 = require("@nx/devkit");
+/** sharp before 0.35.5 bundles libvips, libheif and librsvg versions with known vulnerabilities. */
+exports.SHARP_FIXED = '^0.35.5';
+/** A caret or tilde range, or an exact version, below 0.35.5; other specs are left alone. */
+function needsSharpUpdate(spec) {
+    if (typeof spec !== 'string')
+        return false;
+    const m = /^[\^~]?0\.(\d+)\.(\d+)$/.exec(spec.trim());
+    if (!m)
+        return false;
+    const [minor, patch] = [Number(m[1]), Number(m[2])];
+    return minor < 35 || (minor === 35 && patch < 5);
+}
+exports.needsSharpUpdate = needsSharpUpdate;
+/**
+ * v0.39.3: sharp (used by the release build to strip image metadata) moves to ^0.35.5, the first
+ * version without the libvips, libheif and librsvg vulnerabilities. Run npm install afterwards.
+ */
+async function sharpSecurityUpdate(tree) {
+    if (!tree.exists('package.json'))
+        return;
+    const pkg = (0, devkit_1.readJson)(tree, 'package.json');
+    let changed;
+    for (const field of ['dependencies', 'devDependencies']) {
+        const spec = pkg[field]?.sharp;
+        if (needsSharpUpdate(spec)) {
+            pkg[field].sharp = exports.SHARP_FIXED;
+            changed = `${field}: sharp ${spec} → ${exports.SHARP_FIXED}`;
+        }
+    }
+    if (!changed)
+        return;
+    (0, devkit_1.writeJson)(tree, 'package.json', pkg);
+    devkit_1.logger.info(`sharp-security-update: ${changed}. Run npm install.`);
+}
+exports.default = sharpSecurityUpdate;
+//# sourceMappingURL=sharp-security-update.js.map

package/dist/src/migrations/sharp-security-update/sharp-security-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharp-security-update.js","sourceRoot":"","sources":["../../../../src/migrations/sharp-security-update/sharp-security-update.ts"],"names":[],"mappings":";;;AAAA,uCAA+D;AAE/D,oGAAoG;AACvF,QAAA,WAAW,GAAG,SAAS,CAAC;AAErC,6FAA6F;AAC7F,SAAgB,gBAAgB,CAAC,IAAa;IAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;AACnD,CAAC;AAND,4CAMC;AAED;;;GAGG;AACY,KAAK,UAAU,mBAAmB,CAAC,IAAU;IAC1D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAAE,OAAO;IACzC,MAAM,GAAG,GAAG,IAAA,iBAAQ,EAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC3C,IAAI,OAA2B,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAC,EAAE;QACvD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAC/B,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE;YAC1B,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,mBAAW,CAAC;YAC/B,OAAO,GAAG,GAAG,KAAK,WAAW,IAAI,MAAM,mBAAW,EAAE,CAAC;SACtD;KACF;IACD,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAA,kBAAS,EAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;IACrC,eAAM,CAAC,IAAI,CAAC,0BAA0B,OAAO,oBAAoB,CAAC,CAAC;AACrE,CAAC;AAdD,sCAcC"}