create-nx-workspace 23.0.0-beta.0 → 23.0.0-beta.10

package/bin/create-nx-workspace.js

@@ -1026,10 +1026,6 @@ async function determineReactOptions(parsedArgs) {
                         name: 'less',
                         message: 'LESS              [ https://lesscss.org     ]',
                     },
-                    {
-                        name: 'tailwind',
-                        message: 'tailwind          [ https://tailwindcss.com     ]',
-                    },
                     {
                         name: 'styled-components',
                         message: 'styled-components [ https://styled-components.com            ]',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-nx-workspace",
-  "version": "23.0.0-beta.0",
+  "version": "23.0.0-beta.10",
   "private": false,
   "description": "Smart Monorepos · Fast Builds",
   "repository": {
@@ -30,12 +30,12 @@
   },
   "homepage": "https://nx.dev",
   "dependencies": {
-    "axios": "1.15.0",
+    "axios": "1.16.0",
     "chalk": "^4.1.0",
     "enquirer": "~2.3.6",
     "flat": "^5.0.2",
     "open": "^8.4.0",
-    "ora": "5.3.0",
+    "ora": "^5.3.0",
     "tmp": "~0.2.1",
     "tslib": "^2.3.0",
     "yargs": "^17.6.2"

package/src/create-workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-workspace.d.ts","sourceRoot":"","sources":["../../../../packages/create-nx-workspace/src/create-workspace.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAGpE,OAAO,EAIL,aAAa,EACd,MAAM,iBAAiB,CAAC;AA6BzB,wBAAgB,4BAA4B,IAAI;IAC9C,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAEA;AAED,wBAAsB,eAAe,CAAC,CAAC,SAAS,sBAAsB,EACpE,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,CAAC,EACV,OAAO,CAAC,EAAE,CAAC;;;;;;GA+RZ;AAUD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI7D;AASD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEjE"}
+{"version":3,"file":"create-workspace.d.ts","sourceRoot":"","sources":["../../../../packages/create-nx-workspace/src/create-workspace.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAGpE,OAAO,EAIL,aAAa,EACd,MAAM,iBAAiB,CAAC;AA+BzB,wBAAgB,4BAA4B,IAAI;IAC9C,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAEA;AAED,wBAAsB,eAAe,CAAC,CAAC,SAAS,sBAAsB,EACpE,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,CAAC,EACV,OAAO,CAAC,EAAE,CAAC;;;;;;GAgTZ;AAUD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI7D;AASD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEjE"}

package/src/create-workspace.js

@@ -21,6 +21,8 @@ const update_readme_1 = require("./utils/template/update-readme");
 const child_process_utils_1 = require("./utils/child-process-utils");
 const package_manager_1 = require("./utils/package-manager");
 const ai_output_1 = require("./utils/ai/ai-output");
+const prompts_1 = require("./internal-utils/prompts");
+const error_utils_2 = require("./utils/error-utils");
 // State for SIGINT handler - only set after workspace is fully installed
 let workspaceDirectory;
 let cloudConnectUrl;
@@ -96,6 +98,16 @@ async function createWorkspace(preset, options, rawArgs) {
         if (!preset) {
             throw new Error('Preset is required when not using a template. Please provide --preset or --template.');
         }
+        // If the preset is a third-party preset, warn the user before installing
+        // the npm package. A preset name like "core" silently installs an
+        // unrelated npm package; this confirmation makes that explicit.
+        const thirdPartyPackageName = (0, get_third_party_preset_1.getPackageNameFromThirdPartyPreset)(preset);
+        if (thirdPartyPackageName) {
+            const confirmed = await (0, prompts_1.confirmThirdPartyPreset)(thirdPartyPackageName, options.interactive);
+            if (!confirmed) {
+                throw new error_utils_2.CnwError('INVALID_PRESET', `Aborted: not installing third-party preset '${thirdPartyPackageName}'.`);
+            }
+        }
         const tmpDir = await (0, create_sandbox_1.createSandbox)(packageManager);
         const workspaceGlobs = getWorkspaceGlobsFromPreset(preset);
         // nx new requires a preset currently. We should probably make it optional.
@@ -112,7 +124,6 @@ async function createWorkspace(preset, options, rawArgs) {
         // If the preset is a third-party preset, we need to call createPreset to install it
         // For first-party presets, it will be created by createEmptyWorkspace instead.
         // In createEmptyWorkspace, it will call `nx new` -> `@nx/workspace newGenerator` -> `@nx/workspace generatePreset`.
-        const thirdPartyPackageName = (0, get_third_party_preset_1.getPackageNameFromThirdPartyPreset)(preset);
         if (thirdPartyPackageName) {
             await (0, create_preset_1.createPreset)(thirdPartyPackageName, options, packageManager, directory);
         }

package/src/internal-utils/prompts.d.ts

@@ -28,6 +28,20 @@ export declare function determineAnalytics(parsedArgs: yargs.Arguments<{
 export declare function determineDefaultBase(parsedArgs: yargs.Arguments<{
     defaultBase?: string;
 }>): Promise<string>;
+/**
+ * Confirm with the user before installing a third-party preset npm package.
+ *
+ * `--preset=<name>` will install any npm package whose name matches when the
+ * preset is not a known Nx preset. A typo (e.g. `--preset=core`) can silently
+ * install an unrelated package from the registry, which is a supply-chain
+ * risk. This prompt makes that step explicit.
+ *
+ * In non-interactive / CI / AI-agent contexts we cannot prompt, so we emit a
+ * warning and proceed — automated workflows like
+ * `--preset=@my-org/nx-plugin --no-interactive` keep working, but the warning
+ * still appears in the logs.
+ */
+export declare function confirmThirdPartyPreset(packageName: string, interactive: boolean | undefined): Promise<boolean>;
 export declare function determinePackageManager(parsedArgs: yargs.Arguments<{
     packageManager: string;
 }>): Promise<PackageManager>;

package/src/internal-utils/prompts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../../../../packages/create-nx-workspace/src/internal-utils/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAO1B,OAAO,EAEL,cAAc,EAEf,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAE/C,OAAO,EACL,KAAK,EAGN,MAAM,6BAA6B,CAAC;AAIrC,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,GAChD,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GACvE,OAAO,CAAC,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,CAiBnC;AAED,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GACrE,OAAO,CAAC,OAAO,CAAC,CAelB;AA4BD,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC,GACD,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CA4C5B;AAED,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GACzE,OAAO,CAAC,KAAK,EAAE,CAAC,CASlB;AAqBD,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GACnD,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACpD,OAAO,CAAC,MAAM,CAAC,CAwBjB;AAED,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC,GACtD,OAAO,CAAC,cAAc,CAAC,CAiCzB"}
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../../../../packages/create-nx-workspace/src/internal-utils/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAO1B,OAAO,EAEL,cAAc,EAEf,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAE/C,OAAO,EACL,KAAK,EAGN,MAAM,6BAA6B,CAAC;AAKrC,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,GAChD,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GACvE,OAAO,CAAC,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,CAiBnC;AAED,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GACrE,OAAO,CAAC,OAAO,CAAC,CAelB;AA4BD,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC,GACD,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CA4C5B;AAED,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GACzE,OAAO,CAAC,KAAK,EAAE,CAAC,CASlB;AAqBD,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GACnD,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACpD,OAAO,CAAC,MAAM,CAAC,CAwBjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,OAAO,GAAG,SAAS,GAC/B,OAAO,CAAC,OAAO,CAAC,CAwBlB;AAED,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC,GACtD,OAAO,CAAC,cAAc,CAAC,CAiCzB"}

package/src/internal-utils/prompts.js

@@ -7,6 +7,7 @@ exports.determineTemplate = determineTemplate;
 exports.determineAiAgents = determineAiAgents;
 exports.determineAnalytics = determineAnalytics;
 exports.determineDefaultBase = determineDefaultBase;
+exports.confirmThirdPartyPreset = confirmThirdPartyPreset;
 exports.determinePackageManager = determinePackageManager;
 const tslib_1 = require("tslib");
 const enquirer_1 = tslib_1.__importDefault(require("enquirer"));
@@ -20,6 +21,7 @@ const is_ci_1 = require("../utils/ci/is-ci");
 const create_workspace_options_1 = require("../create-workspace-options");
 const ai_output_1 = require("../utils/ai/ai-output");
 const error_utils_1 = require("../utils/error-utils");
+const output_1 = require("../utils/output");
 async function determineNxCloud(parsedArgs) {
     if (parsedArgs.nxCloud) {
         return parsedArgs.nxCloud;
@@ -200,6 +202,42 @@ async function determineDefaultBase(parsedArgs) {
     }
     return (0, default_base_1.deduceDefaultBase)();
 }
+/**
+ * Confirm with the user before installing a third-party preset npm package.
+ *
+ * `--preset=<name>` will install any npm package whose name matches when the
+ * preset is not a known Nx preset. A typo (e.g. `--preset=core`) can silently
+ * install an unrelated package from the registry, which is a supply-chain
+ * risk. This prompt makes that step explicit.
+ *
+ * In non-interactive / CI / AI-agent contexts we cannot prompt, so we emit a
+ * warning and proceed — automated workflows like
+ * `--preset=@my-org/nx-plugin --no-interactive` keep working, but the warning
+ * still appears in the logs.
+ */
+async function confirmThirdPartyPreset(packageName, interactive) {
+    output_1.output.warn({
+        title: `About to install '${packageName}' from the npm registry as a preset.`,
+        bodyLines: [
+            `'${packageName}' is not a built-in Nx preset.`,
+            `Nx will download this npm package and run its preset generator.`,
+            `Only proceed if you trust the publisher of '${packageName}'.`,
+        ],
+    });
+    if (interactive === false || (0, is_ci_1.isCI)() || (0, ai_output_1.isAiAgent)()) {
+        return true;
+    }
+    const { confirm } = await enquirer_1.default.prompt([
+        {
+            name: 'confirm',
+            message: `Install third-party preset '${packageName}'?`,
+            type: 'autocomplete',
+            choices: [{ name: 'No' }, { name: 'Yes' }],
+            initial: 0,
+        },
+    ]);
+    return confirm === 'Yes';
+}
 async function determinePackageManager(parsedArgs) {
     const packageManager = parsedArgs.packageManager;
     if (packageManager) {