nx 21.6.0-canary.20250908-95e7b49 → 21.6.0-canary.20250915-98c47f0

package/src/daemon/client/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../../../packages/nx/src/daemon/client/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAS,MAAM,eAAe,CAAC;AAoBpD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAUpE,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AAKhG,OAAO,EAAW,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAoC9E,OAAO,KAAK,EACV,+BAA+B,EAC/B,sBAAsB,EACvB,MAAM,6BAA6B,CAAC;AAcrC,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACzB,MAAM,wCAAwC,CAAC;AAgBhD,MAAM,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC;AAC5C,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;CACtC,CAAC;AAQF,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;;IAWpD,OAAO,CAAC,KAAK,CAAqB;IAClC,OAAO,CAAC,eAAe,CAAwB;IAE/C,OAAO,CAAC,cAAc,CAAC;IACvB,OAAO,CAAC,cAAc,CAAC;IACvB,OAAO,CAAC,aAAa,CAAC;IAEtB,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,aAAa,CAA2C;IAChE,OAAO,CAAC,mBAAmB,CAA8B;IACzD,OAAO,CAAC,YAAY,CAA2B;IAC/C,OAAO,CAAC,IAAI,CAAoB;IAChC,OAAO,CAAC,IAAI,CAAoB;IAEhC,OAAO;IA6CP,KAAK;IAoBC,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAIhC,4BAA4B,IAAI,OAAO,CAAC;QAC5C,YAAY,EAAE,YAAY,CAAC;QAC3B,UAAU,EAAE,uBAAuB,CAAC;KACrC,CAAC;IA4BI,cAAc,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAI3C,SAAS,CACP,aAAa,EAAE,GAAG,EAClB,KAAK,EAAE,IAAI,EAAE,EACb,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,OAAO,CAAC,IAAI,EAAE,CAAC;IAUZ,mBAAmB,CACvB,MAAM,EAAE;QACN,aAAa,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAChC,2BAA2B,CAAC,EAAE,OAAO,CAAC;QACtC,wBAAwB,CAAC,EAAE,OAAO,CAAC;QACnC,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,EACD,QAAQ,EAAE,CACR,KAAK,EAAE,KAAK,GAAG,IAAI,GAAG,QAAQ,EAC9B,IAAI,EAAE;QACJ,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,YAAY,EAAE,WAAW,EAAE,CAAC;KAC7B,GAAG,IAAI,KACL,IAAI,GACR,OAAO,CAAC,kBAAkB,CAAC;IAqC9B,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAQjE,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAUhE,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAUjE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAS5D,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IASnE,2BAA2B,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAOlD,iBAAiB,CACf,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACrC,OAAO,CAAC,gBAAgB,CAAC;IAQ5B,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQnD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAS9D,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQxD,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAS5C,uBAAuB,CAC3B,OAAO,EAAE,UAAU,EAAE,GACpB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IASlC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAQlD,uBAAuB,CACrB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAQpC,+BAA+B,CAC7B,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,+BAA+B,CAAC;IAQ3C,2BAA2B,IAAI,OAAO,CAAC;QACrC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;IAOF,sBAAsB,CACpB,YAAY,EAAE,MAAM,EAAE,EACtB,YAAY,EAAE,MAAM,EAAE,EACtB,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,IAAI,CAAC;IAUV,oBAAoB,CACxB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAQzB,qBAAqB,CACzB,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,IAAI,CAAC;IAQV,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC;YAgB7B,oBAAoB;IAMlC,OAAO,CAAC,eAAe;YA8DT,mBAAmB;IA8BjC,OAAO,CAAC,gCAAgC;IAyBxC,OAAO,CAAC,aAAa;IAgDf,iBAAiB,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAwDjD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB5B;AAED,eAAO,MAAM,YAAY,cAAqB,CAAC;AAE/C,wBAAgB,eAAe,YAE9B"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../../../packages/nx/src/daemon/client/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAS,MAAM,eAAe,CAAC;AAoBpD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAUpE,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AAKhG,OAAO,EAAW,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAoC9E,OAAO,KAAK,EACV,+BAA+B,EAC/B,sBAAsB,EACvB,MAAM,6BAA6B,CAAC;AAcrC,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACzB,MAAM,wCAAwC,CAAC;AAgBhD,MAAM,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC;AAC5C,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;CACtC,CAAC;AAQF,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;;IAWpD,OAAO,CAAC,KAAK,CAAqB;IAClC,OAAO,CAAC,eAAe,CAAwB;IAE/C,OAAO,CAAC,cAAc,CAAC;IACvB,OAAO,CAAC,cAAc,CAAC;IACvB,OAAO,CAAC,aAAa,CAAC;IAEtB,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,aAAa,CAA2C;IAChE,OAAO,CAAC,mBAAmB,CAA8B;IACzD,OAAO,CAAC,YAAY,CAA2B;IAC/C,OAAO,CAAC,IAAI,CAAoB;IAChC,OAAO,CAAC,IAAI,CAAoB;IAEhC,OAAO;IA6CP,KAAK;IAoBC,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAIhC,4BAA4B,IAAI,OAAO,CAAC;QAC5C,YAAY,EAAE,YAAY,CAAC;QAC3B,UAAU,EAAE,uBAAuB,CAAC;KACrC,CAAC;IA4BI,cAAc,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAI3C,SAAS,CACP,aAAa,EAAE,GAAG,EAClB,KAAK,EAAE,IAAI,EAAE,EACb,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,OAAO,CAAC,IAAI,EAAE,CAAC;IAUZ,mBAAmB,CACvB,MAAM,EAAE;QACN,aAAa,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAChC,2BAA2B,CAAC,EAAE,OAAO,CAAC;QACtC,wBAAwB,CAAC,EAAE,OAAO,CAAC;QACnC,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,EACD,QAAQ,EAAE,CACR,KAAK,EAAE,KAAK,GAAG,IAAI,GAAG,QAAQ,EAC9B,IAAI,EAAE;QACJ,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,YAAY,EAAE,WAAW,EAAE,CAAC;KAC7B,GAAG,IAAI,KACL,IAAI,GACR,OAAO,CAAC,kBAAkB,CAAC;IAqC9B,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAQjE,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAUhE,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAUjE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAS5D,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IASnE,2BAA2B,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAOlD,iBAAiB,CACf,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACrC,OAAO,CAAC,gBAAgB,CAAC;IAQ5B,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQnD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAS9D,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQxD,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAS5C,uBAAuB,CAC3B,OAAO,EAAE,UAAU,EAAE,GACpB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IASlC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAQlD,uBAAuB,CACrB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAQpC,+BAA+B,CAC7B,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,+BAA+B,CAAC;IAQ3C,2BAA2B,IAAI,OAAO,CAAC;QACrC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;IAOF,sBAAsB,CACpB,YAAY,EAAE,MAAM,EAAE,EACtB,YAAY,EAAE,MAAM,EAAE,EACtB,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,IAAI,CAAC;IAUV,oBAAoB,CACxB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAQzB,qBAAqB,CACzB,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,IAAI,CAAC;IAQV,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC;YAgB7B,oBAAoB;IAMlC,OAAO,CAAC,eAAe;YA8DT,mBAAmB;IA8BjC,OAAO,CAAC,gCAAgC;IAyBxC,OAAO,CAAC,aAAa;IAgDf,iBAAiB,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAwDjD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAkB5B;AAED,eAAO,MAAM,YAAY,cAAqB,CAAC;AAE/C,wBAAgB,eAAe,YAE9B"}

package/src/daemon/client/client.js

@@ -525,10 +525,12 @@ class DaemonClient {
             }
         }
         catch (err) {
-            output_1.output.error({
-                title: err?.message ||
-                    'Something unexpected went wrong when stopping the daemon server',
-            });
+            if (err.code !== 'ESRCH') {
+                output_1.output.error({
+                    title: err?.message ||
+                        'Something unexpected went wrong when stopping the daemon server',
+                });
+            }
         }
         (0, tmp_dir_1.removeSocketDir)();
     }

package/src/native/nx.wasi-browser.js

@@ -64,46 +64,49 @@ function __napi_rs_initialize_modules(__napiInstance) {
   __napiInstance.exports['__napi_register__NxConsolePreferences_struct_10']?.()
   __napiInstance.exports['__napi_register__NxConsolePreferences_impl_14']?.()
   __napiInstance.exports['__napi_register__log_debug_15']?.()
-  __napiInstance.exports['__napi_register__log_error_16']?.()
-  __napiInstance.exports['__napi_register__IS_WASM_17']?.()
-  __napiInstance.exports['__napi_register__get_binary_target_18']?.()
-  __napiInstance.exports['__napi_register__ImportResult_struct_19']?.()
-  __napiInstance.exports['__napi_register__find_imports_20']?.()
-  __napiInstance.exports['__napi_register__transfer_project_graph_21']?.()
-  __napiInstance.exports['__napi_register__ExternalNode_struct_22']?.()
-  __napiInstance.exports['__napi_register__Target_struct_23']?.()
-  __napiInstance.exports['__napi_register__Project_struct_24']?.()
-  __napiInstance.exports['__napi_register__ProjectGraph_struct_25']?.()
-  __napiInstance.exports['__napi_register__HashPlanner_struct_26']?.()
-  __napiInstance.exports['__napi_register__HashPlanner_impl_30']?.()
-  __napiInstance.exports['__napi_register__HashDetails_struct_31']?.()
-  __napiInstance.exports['__napi_register__HasherOptions_struct_32']?.()
-  __napiInstance.exports['__napi_register__TaskHasher_struct_33']?.()
-  __napiInstance.exports['__napi_register__TaskHasher_impl_36']?.()
-  __napiInstance.exports['__napi_register__Task_struct_37']?.()
-  __napiInstance.exports['__napi_register__TaskTarget_struct_38']?.()
-  __napiInstance.exports['__napi_register__TaskResult_struct_39']?.()
-  __napiInstance.exports['__napi_register__TaskGraph_struct_40']?.()
-  __napiInstance.exports['__napi_register__FileData_struct_41']?.()
-  __napiInstance.exports['__napi_register__InputsInput_struct_42']?.()
-  __napiInstance.exports['__napi_register__FileSetInput_struct_43']?.()
-  __napiInstance.exports['__napi_register__RuntimeInput_struct_44']?.()
-  __napiInstance.exports['__napi_register__EnvironmentInput_struct_45']?.()
-  __napiInstance.exports['__napi_register__ExternalDependenciesInput_struct_46']?.()
-  __napiInstance.exports['__napi_register__DepsOutputsInput_struct_47']?.()
-  __napiInstance.exports['__napi_register__NxJson_struct_48']?.()
-  __napiInstance.exports['__napi_register__FileLock_struct_49']?.()
-  __napiInstance.exports['__napi_register__FileLock_impl_51']?.()
-  __napiInstance.exports['__napi_register__WorkspaceContext_struct_52']?.()
-  __napiInstance.exports['__napi_register__WorkspaceContext_impl_63']?.()
-  __napiInstance.exports['__napi_register__WorkspaceErrors_64']?.()
-  __napiInstance.exports['__napi_register__NxWorkspaceFiles_struct_65']?.()
-  __napiInstance.exports['__napi_register__NxWorkspaceFilesExternals_struct_66']?.()
-  __napiInstance.exports['__napi_register__UpdatedWorkspaceFiles_struct_67']?.()
-  __napiInstance.exports['__napi_register__FileMap_struct_68']?.()
-  __napiInstance.exports['__napi_register____test_only_transfer_file_map_69']?.()
+  __napiInstance.exports['__napi_register__IS_WASM_16']?.()
+  __napiInstance.exports['__napi_register__get_binary_target_17']?.()
+  __napiInstance.exports['__napi_register__ImportResult_struct_18']?.()
+  __napiInstance.exports['__napi_register__find_imports_19']?.()
+  __napiInstance.exports['__napi_register__transfer_project_graph_20']?.()
+  __napiInstance.exports['__napi_register__ExternalNode_struct_21']?.()
+  __napiInstance.exports['__napi_register__Target_struct_22']?.()
+  __napiInstance.exports['__napi_register__Project_struct_23']?.()
+  __napiInstance.exports['__napi_register__ProjectGraph_struct_24']?.()
+  __napiInstance.exports['__napi_register__HashPlanInspector_struct_25']?.()
+  __napiInstance.exports['__napi_register__HashPlanInspector_impl_28']?.()
+  __napiInstance.exports['__napi_register__HashPlanner_struct_29']?.()
+  __napiInstance.exports['__napi_register__HashPlanner_impl_33']?.()
+  __napiInstance.exports['__napi_register__HashDetails_struct_34']?.()
+  __napiInstance.exports['__napi_register__HasherOptions_struct_35']?.()
+  __napiInstance.exports['__napi_register__TaskHasher_struct_36']?.()
+  __napiInstance.exports['__napi_register__TaskHasher_impl_39']?.()
+  __napiInstance.exports['__napi_register__Task_struct_40']?.()
+  __napiInstance.exports['__napi_register__TaskTarget_struct_41']?.()
+  __napiInstance.exports['__napi_register__TaskResult_struct_42']?.()
+  __napiInstance.exports['__napi_register__TaskGraph_struct_43']?.()
+  __napiInstance.exports['__napi_register__FileData_struct_44']?.()
+  __napiInstance.exports['__napi_register__InputsInput_struct_45']?.()
+  __napiInstance.exports['__napi_register__FileSetInput_struct_46']?.()
+  __napiInstance.exports['__napi_register__RuntimeInput_struct_47']?.()
+  __napiInstance.exports['__napi_register__EnvironmentInput_struct_48']?.()
+  __napiInstance.exports['__napi_register__ExternalDependenciesInput_struct_49']?.()
+  __napiInstance.exports['__napi_register__DepsOutputsInput_struct_50']?.()
+  __napiInstance.exports['__napi_register__NxJson_struct_51']?.()
+  __napiInstance.exports['__napi_register__is_ai_agent_52']?.()
+  __napiInstance.exports['__napi_register__FileLock_struct_53']?.()
+  __napiInstance.exports['__napi_register__FileLock_impl_55']?.()
+  __napiInstance.exports['__napi_register__WorkspaceContext_struct_56']?.()
+  __napiInstance.exports['__napi_register__WorkspaceContext_impl_67']?.()
+  __napiInstance.exports['__napi_register__WorkspaceErrors_68']?.()
+  __napiInstance.exports['__napi_register__NxWorkspaceFiles_struct_69']?.()
+  __napiInstance.exports['__napi_register__NxWorkspaceFilesExternals_struct_70']?.()
+  __napiInstance.exports['__napi_register__UpdatedWorkspaceFiles_struct_71']?.()
+  __napiInstance.exports['__napi_register__FileMap_struct_72']?.()
+  __napiInstance.exports['__napi_register____test_only_transfer_file_map_73']?.()
 }
 export const FileLock = __napiModule.exports.FileLock
+export const HashPlanInspector = __napiModule.exports.HashPlanInspector
 export const HashPlanner = __napiModule.exports.HashPlanner
 export const ImportResult = __napiModule.exports.ImportResult
 export const NxConsolePreferences = __napiModule.exports.NxConsolePreferences
@@ -120,8 +123,8 @@ export const hashArray = __napiModule.exports.hashArray
 export const hashFile = __napiModule.exports.hashFile
 export const installNxConsole = __napiModule.exports.installNxConsole
 export const IS_WASM = __napiModule.exports.IS_WASM
+export const isAiAgent = __napiModule.exports.isAiAgent
 export const logDebug = __napiModule.exports.logDebug
-export const logError = __napiModule.exports.logError
 export const remove = __napiModule.exports.remove
 export const testOnlyTransferFileMap = __napiModule.exports.testOnlyTransferFileMap
 export const transferProjectGraph = __napiModule.exports.transferProjectGraph

package/src/tasks-runner/fork.js

@@ -20,26 +20,52 @@ const childProcess = (0, child_process_1.fork)(script, {
 const pseudoIPC = new pseudo_ipc_1.PseudoIPCClient(pseudoIPCPath);
 pseudoIPC.onMessageFromParent(forkId, (message) => {
     childProcess.send(message);
+}, () => {
+    // IPC connection closed
+    cleanup();
+    process.exit(0);
+}, () => {
+    // IPC connection error
+    cleanup();
+    process.exit(0);
 });
 pseudoIPC.notifyChildIsReady(forkId);
 process.on('message', (message) => {
     pseudoIPC.sendMessageToParent(message);
 });
 childProcess.on('exit', (code) => {
-    pseudoIPC.close();
+    cleanup();
     process.exit(code);
 });
+let isCleaningUp = false;
+function cleanup() {
+    if (isCleaningUp) {
+        return;
+    }
+    isCleaningUp = true;
+    // Kill child process if still running
+    if (childProcess && !childProcess.killed) {
+        childProcess.kill('SIGTERM');
+    }
+    // Close IPC connection
+    try {
+        pseudoIPC.close();
+    }
+    catch {
+        // Ignore errors when closing, connection might already be broken
+    }
+}
 // Terminate the child process when exiting
 process.on('exit', () => {
-    childProcess.kill();
+    cleanup();
 });
 process.on('SIGINT', () => {
-    childProcess.kill('SIGTERM');
+    cleanup();
     process.exit((0, exit_codes_1.signalToCode)('SIGINT'));
 });
 process.on('SIGTERM', () => {
-    childProcess.kill('SIGTERM');
+    cleanup();
 });
 process.on('SIGHUP', () => {
-    childProcess.kill('SIGTERM');
+    cleanup();
 });

package/src/utils/nx-console-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nx-console-prompt.d.ts","sourceRoot":"","sources":["../../../../../packages/nx/src/utils/nx-console-prompt.ts"],"names":[],"mappings":"AASA,wBAAsB,wBAAwB,kBAmB7C"}
+{"version":3,"file":"nx-console-prompt.d.ts","sourceRoot":"","sources":["../../../../../packages/nx/src/utils/nx-console-prompt.ts"],"names":[],"mappings":"AASA,wBAAsB,wBAAwB,kBA4B7C"}

package/src/utils/nx-console-prompt.js

@@ -9,6 +9,14 @@ async function ensureNxConsoleInstalled() {
     const preferences = new native_1.NxConsolePreferences((0, os_1.homedir)());
     let setting = preferences.getAutoInstallPreference();
     const canInstallConsole = (0, native_1.canInstallNxConsole)();
+    // If user previously opted in but extension is not installed,
+    // they must have manually uninstalled it - respect that choice
+    if (setting === true && canInstallConsole) {
+        // User had auto-install enabled but extension is missing
+        // This means they manually uninstalled it
+        preferences.setAutoInstallPreference(false);
+        return;
+    }
     // Noop
     if (!canInstallConsole) {
         return;

package/src/utils/package-manager.d.ts

@@ -13,6 +13,7 @@ export interface PackageManagerCommands {
     run: (script: string, args?: string) => string;
     getRegistryUrl?: string;
     publish: (packageRoot: string, registry: string, registryConfigKey: string, tag: string) => string;
+    ignoreScriptsFlag?: string;
 }
 /**
  * Detects which package manager is used in the workspace based on the lock file.

package/src/utils/package-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"package-manager.d.ts","sourceRoot":"","sources":["../../../../../packages/nx/src/utils/package-manager.ts"],"names":[],"mappings":"AA+BA,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;AAE7D,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAE/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,CACP,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,GAAG,EAAE,MAAM,KACR,MAAM,CAAC;CACb;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAW,GAAG,cAAc,CAYrE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,cAAc,GAAE,cAAuC,EACvD,IAAI,GAAE,MAAsB,GAC3B,OAAO,CAmBT;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CACtC,cAAc,GAAE,cAAuC,EACvD,IAAI,GAAE,MAAsB,GAC3B,sBAAsB,CA4HxB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,cAAc,GAAE,cAAuC,EACvD,GAAG,SAAgB,GAClB,MAAM,CAwBR;AAED,wBAAgB,mCAAmC,CACjD,uBAAuB,EAAE,MAAM,EAC/B,wBAAwB,EAAE,MAAM,GAAG,SAAS,GAC3C,IAAI,GAAG,MAAM,CAkBf;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,MAAM,EACZ,SAAS,GAAE,MAAsB,GAChC,MAAM,GAAG,IAAI,CAUf;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAkBzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOtE;AAED,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,QAuCpB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB;;;EAoBrC;AAED;;;GAGG;AACH,wBAAsB,kCAAkC,CACtD,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CA8BjB;AAED;;;;GAIG;AACH,wBAAsB,sCAAsC,CAC1D,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAoBjB;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBlC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,GAAE,cAAuC,EACvD,IAAI,GAAE,MAAsB,GAC3B,MAAM,EAAE,CAoBV;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,cAAc,GAAE,cAAuC,EACvD,UAAU,GAAE,MAAM,EAAyC,EAC3D,IAAI,GAAE,MAAsB,GAC3B,IAAI,CAiEN"}
+{"version":3,"file":"package-manager.d.ts","sourceRoot":"","sources":["../../../../../packages/nx/src/utils/package-manager.ts"],"names":[],"mappings":"AA+BA,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;AAE7D,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAE/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,CACP,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,GAAG,EAAE,MAAM,KACR,MAAM,CAAC;IAEZ,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAW,GAAG,cAAc,CAYrE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,cAAc,GAAE,cAAuC,EACvD,IAAI,GAAE,MAAsB,GAC3B,OAAO,CAmBT;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CACtC,cAAc,GAAE,cAAuC,EACvD,IAAI,GAAE,MAAsB,GAC3B,sBAAsB,CAiIxB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,cAAc,GAAE,cAAuC,EACvD,GAAG,SAAgB,GAClB,MAAM,CAwBR;AAED,wBAAgB,mCAAmC,CACjD,uBAAuB,EAAE,MAAM,EAC/B,wBAAwB,EAAE,MAAM,GAAG,SAAS,GAC3C,IAAI,GAAG,MAAM,CAkBf;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,MAAM,EACZ,SAAS,GAAE,MAAsB,GAChC,MAAM,GAAG,IAAI,CAUf;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAkBzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOtE;AAED,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,QAuCpB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB;;;EAoBrC;AAED;;;GAGG;AACH,wBAAsB,kCAAkC,CACtD,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CA8BjB;AAED;;;;GAIG;AACH,wBAAsB,sCAAsC,CAC1D,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAoBjB;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBlC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,GAAE,cAAuC,EACvD,IAAI,GAAE,MAAsB,GAC3B,MAAM,EAAE,CAoBV;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,cAAc,GAAE,cAAuC,EACvD,UAAU,GAAE,MAAM,EAAyC,EAC3D,IAAI,GAAE,MAAsB,GAC3B,IAAI,CAiEN"}

package/src/utils/package-manager.js

@@ -95,6 +95,7 @@ function getPackageManagerCommand(packageManager = detectPackageManager(), root
                 yarnVersion = 'latest';
                 useBerry = true;
             }
+            // new versions of yarn only support ignoring scripts via .yarnrc.yml
             return {
                 preInstall: `yarn set version ${yarnVersion}`,
                 install: 'yarn',
@@ -108,13 +109,14 @@ function getPackageManagerCommand(packageManager = detectPackageManager(), root
                 addDev: useBerry ? 'yarn add -D' : 'yarn add -D -W',
                 rm: 'yarn remove',
                 exec: 'yarn',
-                dlx: useBerry ? 'yarn dlx' : 'yarn',
+                dlx: useBerry ? 'yarn dlx' : 'npx',
                 run: (script, args) => `yarn ${script}${args ? ` ${args}` : ''}`,
                 list: useBerry ? 'yarn info --name-only' : 'yarn list',
                 getRegistryUrl: useBerry
                     ? 'yarn config get npmRegistryServer'
                     : 'yarn config get registry',
                 publish: (packageRoot, registry, registryConfigKey, tag) => `npm publish "${packageRoot}" --json --"${registryConfigKey}=${registry}" --tag=${tag}`,
+                ignoreScriptsFlag: useBerry ? undefined : `--ignore-scripts`,
             };
         },
         pnpm: () => {
@@ -150,6 +152,7 @@ function getPackageManagerCommand(packageManager = detectPackageManager(), root
                 list: 'pnpm ls --depth 100',
                 getRegistryUrl: 'pnpm config get registry',
                 publish: (packageRoot, registry, registryConfigKey, tag) => `pnpm publish "${packageRoot}" --json --"${allowRegistryConfigKey ? registryConfigKey : 'registry'}=${registry}" --tag=${tag} --no-git-checks`,
+                ignoreScriptsFlag: '--ignore-scripts',
             };
         },
         npm: () => {
@@ -168,6 +171,7 @@ function getPackageManagerCommand(packageManager = detectPackageManager(), root
                 list: 'npm ls',
                 getRegistryUrl: 'npm config get registry',
                 publish: (packageRoot, registry, registryConfigKey, tag) => `npm publish "${packageRoot}" --json --"${registryConfigKey}=${registry}" --tag=${tag}`,
+                ignoreScriptsFlag: '--ignore-scripts',
             };
         },
         bun: () => {
@@ -185,6 +189,7 @@ function getPackageManagerCommand(packageManager = detectPackageManager(), root
                 list: 'bun pm ls',
                 // Unlike npm, bun publish does not support a custom registryConfigKey option
                 publish: (packageRoot, registry, registryConfigKey, tag) => `bun publish --cwd="${packageRoot}" --json --registry="${registry}" --tag=${tag}`,
+                ignoreScriptsFlag: '--ignore-scripts',
             };
         },
     };

package/src/utils/provenance.d.ts

@@ -0,0 +1,48 @@
+export declare function ensurePackageHasProvenance(packageName: string, packageVersion: string): Promise<void>;
+export declare class ProvenanceError extends Error {
+    constructor(packageName: string, packageVersion: string, error?: string);
+}
+export declare function getNxPackageGroup(): string[];
+export type DecodedAttestationPayload = {
+    _type: 'https://in-toto.io/Statement/v1';
+    subject: unknown[];
+    predicateType: 'https://slsa.dev/provenance/v1';
+    predicate: {
+        buildDefinition: {
+            buildType: string;
+            externalParameters: Record<string, any>;
+            internalParameters?: Record<string, any>;
+            resolvedDependencies?: ResourceDescriptor[];
+        };
+        runDetails: {
+            builder: {
+                id: string;
+                builderDependencies?: ResourceDescriptor[];
+                version?: Record<string, string>;
+            };
+            metadata?: {
+                invocationId?: string;
+                startedOn?: string;
+                finishedOn?: string;
+            };
+            byproducts?: ResourceDescriptor[];
+        };
+    };
+};
+export interface ResourceDescriptor {
+    uri?: string;
+    digest?: {
+        sha256?: string;
+        sha512?: string;
+        gitCommit?: string;
+        [key: string]: string | undefined;
+    };
+    name?: string;
+    downloadLocation?: string;
+    mediaType?: string;
+    content?: string;
+    annotations?: {
+        [key: string]: any;
+    };
+}
+//# sourceMappingURL=provenance.d.ts.map

package/src/utils/provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../../../../../packages/nx/src/utils/provenance.ts"],"names":[],"mappings":"AAaA,wBAAsB,0BAA0B,CAC9C,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CA+Gf;AAED,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;CAOxE;AAED,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAa5C;AAoBD,MAAM,MAAM,yBAAyB,GAAG;IACtC,KAAK,EAAE,iCAAiC,CAAC;IACzC,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,aAAa,EAAE,gCAAgC,CAAC;IAChD,SAAS,EAAE;QACT,eAAe,EAAE;YACf,SAAS,EAAE,MAAM,CAAC;YAClB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACxC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACzC,oBAAoB,CAAC,EAAE,kBAAkB,EAAE,CAAC;SAC7C,CAAC;QACF,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,EAAE,EAAE,MAAM,CAAC;gBACX,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAC;gBAC3C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAClC,CAAC;YACF,QAAQ,CAAC,EAAE;gBACT,YAAY,CAAC,EAAE,MAAM,CAAC;gBACtB,SAAS,CAAC,EAAE,MAAM,CAAC;gBACnB,UAAU,CAAC,EAAE,MAAM,CAAC;aACrB,CAAC;YACF,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;SACnC,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE;QACZ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACpB,CAAC;CACH"}

package/src/utils/provenance.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProvenanceError = void 0;
+exports.ensurePackageHasProvenance = ensurePackageHasProvenance;
+exports.getNxPackageGroup = getNxPackageGroup;
+const child_process_1 = require("child_process");
+const path_1 = require("path");
+const util_1 = require("util");
+const fileutils_1 = require("./fileutils");
+const os_1 = require("os");
+/*
+ * Verifies that the given npm package has provenance attestations
+ * generated by the GitHub Actions workflow at .github/workflows/publish.yml
+ * in the nrwl/nx repository.
+ *
+ * Will throw if the package does not have valid provenance.
+ */
+async function ensurePackageHasProvenance(packageName, packageVersion) {
+    // this is used for locally released versions without provenance
+    // do not set this for other reasons or you might be exposed to security risks
+    if (process.env.NX_SKIP_PROVENANCE_CHECK) {
+        return;
+    }
+    const execFileAsync = (0, util_1.promisify)(child_process_1.execFile);
+    try {
+        const result = await execFileAsync((0, os_1.platform)() === 'win32' ? 'npm.cmd' : 'npm', ['view', `${packageName}@${packageVersion}`, '--json', '--silent'], {
+            timeout: 20000,
+        });
+        const npmViewResult = JSON.parse(result.stdout.trim());
+        const attURL = npmViewResult.dist?.attestations?.url;
+        if (!attURL)
+            throw new ProvenanceError(packageName, packageVersion, 'No attestation URL found');
+        const response = await fetch(attURL);
+        if (!response.ok) {
+            throw new ProvenanceError(packageName, packageVersion, `HTTP ${response.status}: ${response.statusText}`);
+        }
+        const attestations = (await response.json());
+        const provenanceAttestation = attestations?.attestations?.find((a) => a.predicateType === 'https://slsa.dev/provenance/v1');
+        const dsseEnvelopePayload = JSON.parse(Buffer.from(provenanceAttestation.bundle.dsseEnvelope.payload, 'base64').toString());
+        const workflowParameters = dsseEnvelopePayload?.predicate?.buildDefinition?.externalParameters
+            ?.workflow;
+        // verify that provenance was actually generated from the right publishing workflow
+        if (!workflowParameters) {
+            throw new ProvenanceError(packageName, packageVersion, 'Missing workflow parameters in attestation');
+        }
+        if (workflowParameters.repository !== 'https://github.com/nrwl/nx') {
+            throw new ProvenanceError(packageName, packageVersion, 'Repository does not match nrwl/nx');
+        }
+        if (workflowParameters.path !== '.github/workflows/publish.yml') {
+            throw new ProvenanceError(packageName, packageVersion, 'Publishing workflow does not match .github/workflows/publish.yml');
+        }
+        if (workflowParameters.ref !== `refs/tags/${npmViewResult.version}`) {
+            throw new ProvenanceError(packageName, packageVersion, `Version ref does not match refs/tags/${npmViewResult.version}`);
+        }
+        // verify that provenance was generated from the exact same artifact as the one we are installing
+        const distSha = Buffer.from(npmViewResult.dist.integrity.replace('sha512-', ''), 'base64').toString('hex');
+        const attestationSha = dsseEnvelopePayload.subject[0].digest.sha512;
+        if (distSha !== attestationSha) {
+            throw new ProvenanceError(packageName, packageVersion, 'Integrity hash does not match attestation hash');
+        }
+        return;
+    }
+    catch (error) {
+        if (error instanceof ProvenanceError) {
+            throw error;
+        }
+        throw new ProvenanceError(packageName, packageVersion, error.message || error);
+    }
+}
+class ProvenanceError extends Error {
+    constructor(packageName, packageVersion, error) {
+        super(`An error occurred while checking the provenance of ${packageName}@${packageVersion}. This could indicate a security risk. Please double check https://www.npmjs.com/package/${packageName} to see if the package is published correctly or file an issue at https://github.com/nrwl/nx/issues. To disable this check at your own risk, you can set the NX_SKIP_PROVENANCE_CHECK environment variable to true. \n Error: ${error ?? ''}`);
+    }
+}
+exports.ProvenanceError = ProvenanceError;
+function getNxPackageGroup() {
+    const packageJsonPath = (0, path_1.join)(__dirname, '../../package.json');
+    const packageJson = (0, fileutils_1.readJsonFile)(packageJsonPath);
+    if (!packageJson['nx-migrations']?.packageGroup) {
+        return ['nx'];
+    }
+    const packages = packageJson['nx-migrations'].packageGroup.filter((dep) => typeof dep === 'string' && dep.startsWith('@nx/'));
+    packages.push('nx');
+    return packages;
+}