afterpack 0.2.6 → 1.0.0

package/README.md

@@ -46,7 +46,7 @@ Each run writes:
   `.afterpack/backup/` and don't read the new location; this version still restores the old one.
   Turn it off with [`--build.backup`][build.backup]`=false`.
 - `.afterpack/protectionMap.html`, the [Protection Map](https://www.afterpack.dev/docs/protection-map),
-  when your build has source maps.
+  when your build has source maps (outside CI, unless `protectionMap.enabled` is `true`).
 - `.map` files next to the output, only when you ask for them with
   [`--sourceMap.enabled`][sourceMap.enabled] or run with `--build.mode=development` (or
   `NODE_ENV=development`) on a build that has source maps.
@@ -55,12 +55,12 @@ Every other run is a production run: it deletes your build's own source maps, hi
 and the `sourceMappingURL` comments that name them, so no original source ships beside the output.
 
 `.afterpack/` sits next to your project's lockfile, `afterpack.json` or `.git` (failing those, its
-`package.json`), otherwise beside the build directory, never inside it: `cd public && npx afterpack
-.` keeps it beside `public/`, and a `package.json` your build emits, such as Nitro's
-`.output/server/package.json`, never moves it. A single file in a project root that holds a
-lockfile, `afterpack.json` or `.git` keeps it in that root. The same place holds every run's files
-whatever directory you run from, so a second run over the same output, or over the same file, is
-refused from anywhere. A run fails if it finds a `.afterpack/` inside the output, and removes a
+`package.json`), otherwise beside the build directory, never inside it:
+`cd public && npx afterpack@latest .` keeps it beside `public/`, and a `package.json` your build
+emits, such as Nitro's `.output/server/package.json`, never moves it. A single file in a project
+root that holds a lockfile, `afterpack.json` or `.git` keeps it in that root. The same place holds
+every run's files whatever directory you run from, so a second run over the same output, or over
+the same file, is refused from anywhere. A run fails if it finds a `.afterpack/` inside the output, and removes a
 `.afterpack-protection.json` an older version left there.
 
 The backup and the Protection Map contain your original source. `.afterpack/` carries its own
@@ -128,7 +128,7 @@ An unknown or misspelled option fails the run and names the right spelling.
 | [`--paths.include`][paths.include] | globs to add back to the walk | none |
 | [`--identifiers.reserved`][identifiers.reserved] | names never to rename | none |
 | [`--build.backup`][build.backup] | back up originals to `.afterpack/backups/` | `true` |
-| [`--protectionMap.enabled`][protectionMap.enabled] | write the Protection Map | on when an input map exists |
+| [`--protectionMap.enabled`][protectionMap.enabled] | write the Protection Map | on when an input map exists, outside CI |
 
 Each flag is also a key in `afterpack.json` and an `AFTERPACK_*` variable. Every other option is in
 the [configuration reference](https://www.afterpack.dev/docs/config). The

package/SKILL.md

@@ -76,7 +76,8 @@ Rules:
 - `.afterpack/backups/<output dir>/`: the original files, on by default for the CLI, so
   `afterpack restore` can undo the run. `--build.backup=false` turns it off. Each output directory
   has its own backup and lock, so parallel builds of different apps don't collide.
-- `.afterpack/protectionMap.html`: the Protection Map report, when the build has source maps.
+- `.afterpack/protectionMap.html`: the Protection Map report, when the build has source maps
+  (outside CI, unless `protectionMap.enabled` is `true`).
 - `.map` files beside the output, only with `--sourceMap.enabled` or on a development run
   (`--build.mode=development` or `NODE_ENV=development`) when an input map exists.
 
@@ -85,10 +86,10 @@ own source maps, hidden ones included, and the `sourceMappingURL` comments that
 
 Every front door puts `.afterpack/` next to the nearest lockfile, `afterpack.json` or `.git` above
 the build directory, failing those the nearest `package.json`, otherwise beside the build
-directory, never inside it (`cd public && npx afterpack .` keeps it beside `public/`). A
+directory, never inside it (`cd public && npx afterpack@latest .` keeps it beside `public/`). A
 `package.json` the build emits, such as Nitro's `.output/server/package.json` or a dual package's
 `dist/cjs/package.json`, never moves it. For a single file, the file's own directory counts when it
-holds a lockfile, `afterpack.json` or `.git`, so `npx afterpack app.js` in such a root keeps
+holds a lockfile, `afterpack.json` or `.git`, so `npx afterpack@latest app.js` in such a root keeps
 `.afterpack/` there. The place does not depend on the working directory, so a re-run over the same
 output or the same file is refused from anywhere. A run fails if it finds a `.afterpack/` inside
 the output, and removes a `.afterpack-protection.json` an older version left there.
@@ -124,7 +125,7 @@ minification.
 | [`identifiers.reserved`][identifiers.reserved] | names never to rename | `[]` |
 | [`build.backup`][build.backup] | keep originals in `.afterpack/backups/` | `true` for the CLI, `false` in plugins |
 | [`sourceMap.enabled`][sourceMap.enabled] | write `.map` files | off; on in development mode when an input map exists |
-| [`protectionMap.enabled`][protectionMap.enabled] | write the Protection Map | on when an input map exists |
+| [`protectionMap.enabled`][protectionMap.enabled] | write the Protection Map | on when an input map exists, outside CI |
 | [`diagnostics.format`][diagnostics.format] | `text` or `json` | `text` |
 | [`diagnostics.level`][diagnostics.level] | `summary`, `all` or `none` (errors still print) | `summary` |
 | [`build.autorun`][build.autorun] | `false` turns AfterPack off for the project, CLI and plugins alike | `true` |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "afterpack",
-  "version": "0.2.6",
+  "version": "1.0.0",
   "description": "AfterPack CLI: obfuscate the JavaScript in any build output, verify a build before deploy, and scan a live site",
   "type": "module",
   "bin": {
@@ -14,15 +14,15 @@
     "dist"
   ],
   "dependencies": {
-    "@afterpack/core": "~0.2.7",
-    "@afterpack/integration-utils": "0.2.6"
+    "@afterpack/core": "~1.0.0",
+    "@afterpack/integration-utils": "1.0.0"
   },
   "devDependencies": {
     "@biomejs/biome": "2.4.4",
     "@types/node": "^22.0.0",
     "tsdown": "^0.11.0",
     "typescript": "^5.0.0",
-    "vitest": "^2.0.0"
+    "vitest": "^4.1.12"
   },
   "engines": {
     "node": ">=18"