nx 21.7.0-canary.20250930-e144408 → 21.7.0

package/src/ai/utils.js

@@ -1,187 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.agentDisplayMap = exports.supportedAgents = void 0;
-exports.getAgentConfigurations = getAgentConfigurations;
-exports.configureAgents = configureAgents;
-const fs_1 = require("fs");
-const path_1 = require("path");
-const configuration_1 = require("../config/configuration");
-const tree_1 = require("../generators/tree");
-const native_1 = require("../native");
-const fileutils_1 = require("../utils/fileutils");
-const nx_cloud_utils_1 = require("../utils/nx-cloud-utils");
-const output_1 = require("../utils/output");
-const constants_1 = require("./constants");
-const set_up_ai_agents_1 = require("./set-up-ai-agents/set-up-ai-agents");
-// when adding new agents, be sure to also update the list in
-// packages/create-nx-workspace/src/create-workspace-options.ts
-exports.supportedAgents = [
-    'claude',
-    'codex',
-    'copilot',
-    'cursor',
-    'gemini',
-];
-exports.agentDisplayMap = {
-    claude: 'Claude Code',
-    gemini: 'Gemini',
-    codex: 'OpenAI Codex',
-    copilot: 'GitHub Copilot for VSCode',
-    cursor: 'Cursor',
-};
-async function getAgentConfigurations(agentsToConsider, workspaceRoot) {
-    const nonConfiguredAgents = [];
-    const partiallyConfiguredAgents = [];
-    const fullyConfiguredAgents = [];
-    const disabledAgents = [];
-    const agentConfigurations = new Map();
-    for (const agent of agentsToConsider) {
-        const configured = await getAgentConfiguration(agent, workspaceRoot);
-        if (configured.disabled) {
-            disabledAgents.push(agent);
-            continue;
-        }
-        agentConfigurations.set(agent, configured);
-        if (configured.mcp && configured.rules) {
-            fullyConfiguredAgents.push(agent);
-        }
-        else if (!configured.mcp && !configured.rules) {
-            nonConfiguredAgents.push(agent);
-        }
-        else {
-            partiallyConfiguredAgents.push(agent);
-        }
-    }
-    return {
-        nonConfiguredAgents,
-        partiallyConfiguredAgents,
-        fullyConfiguredAgents,
-        disabledAgents,
-        agentConfigurations,
-    };
-}
-async function getAgentConfiguration(agent, workspaceRoot) {
-    let agentConfiguration;
-    switch (agent) {
-        case 'claude': {
-            const mcpPath = (0, constants_1.claudeMcpPath)(workspaceRoot);
-            let mcpConfigured;
-            try {
-                const mcpContents = (0, fileutils_1.readJsonFile)(mcpPath);
-                mcpConfigured = !!mcpContents?.['mcpServers']?.['nx-mcp'];
-            }
-            catch {
-                mcpConfigured = false;
-            }
-            const rulesPath = (0, constants_1.claudeMdPath)(workspaceRoot);
-            const rulesExists = (0, fs_1.existsSync)(rulesPath);
-            agentConfiguration = {
-                rules: rulesExists,
-                mcp: mcpConfigured,
-                rulesPath: rulesPath,
-                mcpPath: mcpPath,
-            };
-            break;
-        }
-        case 'gemini': {
-            const geminiRulePath = (0, constants_1.geminiMdPath)(workspaceRoot);
-            const geminiMdExists = (0, fs_1.existsSync)(geminiRulePath);
-            const settingsPath = (0, constants_1.geminiSettingsPath)(workspaceRoot);
-            let mcpConfigured;
-            const geminiSettings = (0, constants_1.parseGeminiSettings)(workspaceRoot);
-            const customContextFilePath = geminiSettings?.contextFileName;
-            const customContextFilePathExists = customContextFilePath
-                ? (0, fs_1.existsSync)((0, path_1.resolve)(workspaceRoot, customContextFilePath))
-                : false;
-            mcpConfigured = geminiSettings?.['mcpServers']?.['nx-mcp'];
-            agentConfiguration = {
-                rules: (!customContextFilePath && geminiMdExists) ||
-                    (customContextFilePath && customContextFilePathExists),
-                mcp: mcpConfigured,
-                rulesPath: customContextFilePath ?? geminiRulePath,
-                mcpPath: settingsPath,
-            };
-            break;
-        }
-        case 'copilot': {
-            const rulesPath = (0, constants_1.agentsMdPath)(workspaceRoot);
-            const hasInstalledVSCode = (0, native_1.isEditorInstalled)(0 /* SupportedEditor.VSCode */);
-            const hasInstalledVSCodeInsiders = (0, native_1.isEditorInstalled)(1 /* SupportedEditor.VSCodeInsiders */);
-            const hasInstalledNxConsoleForVSCode = hasInstalledVSCode &&
-                !(0, native_1.canInstallNxConsoleForEditor)(0 /* SupportedEditor.VSCode */);
-            const hasInstalledNxConsoleForVSCodeInsiders = hasInstalledVSCodeInsiders &&
-                !(0, native_1.canInstallNxConsoleForEditor)(1 /* SupportedEditor.VSCodeInsiders */);
-            const agentsMdExists = (0, fs_1.existsSync)(rulesPath);
-            agentConfiguration = {
-                mcp: hasInstalledNxConsoleForVSCode ||
-                    hasInstalledNxConsoleForVSCodeInsiders,
-                rules: agentsMdExists,
-                rulesPath,
-                mcpPath: null,
-                disabled: !hasInstalledVSCode && !hasInstalledVSCodeInsiders,
-            };
-            break;
-        }
-        case 'cursor': {
-            const rulesPath = (0, constants_1.agentsMdPath)(workspaceRoot);
-            const hasInstalledCursor = (0, native_1.isEditorInstalled)(2 /* SupportedEditor.Cursor */);
-            const hasInstalledNxConsole = !(0, native_1.canInstallNxConsoleForEditor)(2 /* SupportedEditor.Cursor */);
-            const agentsMdExists = (0, fs_1.existsSync)(rulesPath);
-            agentConfiguration = {
-                mcp: hasInstalledCursor ? hasInstalledNxConsole : false,
-                rules: agentsMdExists,
-                rulesPath,
-                mcpPath: null,
-                disabled: !hasInstalledCursor,
-            };
-            break;
-        }
-        case 'codex': {
-            const rulesPath = (0, constants_1.agentsMdPath)(workspaceRoot);
-            const agentsMdExists = (0, fs_1.existsSync)(rulesPath);
-            let mcpConfigured;
-            if ((0, fs_1.existsSync)(constants_1.codexConfigTomlPath)) {
-                const tomlContents = (0, fs_1.readFileSync)(constants_1.codexConfigTomlPath, 'utf-8');
-                mcpConfigured = tomlContents.includes(constants_1.nxMcpTomlHeader);
-            }
-            else {
-                mcpConfigured = false;
-            }
-            agentConfiguration = {
-                mcp: mcpConfigured,
-                rules: agentsMdExists,
-                rulesPath,
-                mcpPath: constants_1.codexConfigTomlPath,
-            };
-            break;
-        }
-    }
-    return {
-        ...agentConfiguration,
-        outdated: await isAgentOutdated(agent, workspaceRoot),
-    };
-}
-async function isAgentOutdated(agent, workspaceRoot) {
-    const tree = new tree_1.FsTree(workspaceRoot, false);
-    const callback = await (0, set_up_ai_agents_1.default)(tree, {
-        directory: '.',
-        agents: [agent],
-        writeNxCloudRules: (0, nx_cloud_utils_1.isNxCloudUsed)((0, configuration_1.readNxJson)()),
-    }, true);
-    const modificationResults = await callback(true);
-    return (tree.listChanges().length > 0 || modificationResults.messages.length > 0);
-}
-async function configureAgents(agents, workspaceRoot, useLatest) {
-    const writeNxCloudRules = (0, nx_cloud_utils_1.isNxCloudUsed)((0, configuration_1.readNxJson)());
-    const tree = new tree_1.FsTree(workspaceRoot, false);
-    const callback = await (0, set_up_ai_agents_1.default)(tree, {
-        directory: '.',
-        agents,
-        writeNxCloudRules,
-    }, !useLatest);
-    // changes that are out of scope for the generator itself because they do more than modify the tree
-    (0, tree_1.flushChanges)(workspaceRoot, tree.listChanges());
-    const modificationResults = await callback();
-    modificationResults.messages.forEach((message) => output_1.output.log(message));
-    modificationResults.errors.forEach((error) => output_1.output.error(error));
-}

package/src/command-line/configure-ai-agents/command-object.d.ts

@@ -1,9 +0,0 @@
-import { CommandModule } from 'yargs';
-export interface ConfigureAiAgentsOptions {
-    agents?: string[];
-    interactive?: boolean;
-    verbose?: boolean;
-    check?: boolean;
-}
-export declare const yargsConfigureAiAgentsCommand: CommandModule<{}, ConfigureAiAgentsOptions>;
-//# sourceMappingURL=command-object.d.ts.map

package/src/command-line/configure-ai-agents/command-object.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"command-object.d.ts","sourceRoot":"","sources":["../../../../../../packages/nx/src/command-line/configure-ai-agents/command-object.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAGtC,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,eAAO,MAAM,6BAA6B,EAAE,aAAa,CACvD,EAAE,EACF,wBAAwB,CA6CzB,CAAC"}

package/src/command-line/configure-ai-agents/command-object.js

@@ -1,32 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.yargsConfigureAiAgentsCommand = void 0;
-const shared_options_1 = require("../yargs-utils/shared-options");
-exports.yargsConfigureAiAgentsCommand = {
-    command: 'configure-ai-agents',
-    describe: 'Configure and update AI agent configurations for your workspace.',
-    builder: (yargs) => (0, shared_options_1.withVerbose)(yargs)
-        .option('agents', {
-        type: 'array',
-        string: true,
-        description: 'List of AI agents to set up.',
-        choices: ['claude', 'codex', 'copilot', 'cursor', 'gemini'],
-    })
-        .option('interactive', {
-        type: 'boolean',
-        description: 'When false disables interactive input prompts for options.',
-        default: true,
-    })
-        .option('check', {
-        type: 'boolean',
-        description: 'Check if any configured agents are out of date and need to be updated. Does not make any changes.',
-        default: false,
-    })
-        .example('$0 configure-ai-agents', 'Interactively select AI agents to update and configure')
-        .example('$0 configure-ai-agents --agents claude gemini', 'Prompts for updates and and configuration of Claude and Gemini AI agents')
-        .example('$0 configure-ai-agents --check', 'Checks if any configured agents are out of date and need to be updated')
-        .example('$0 configure-ai-agents --agents claude gemini --no-interactive', 'Configures and updates Claude and Gemini AI agents without prompts'),
-    handler: async (args) => {
-        await (await Promise.resolve().then(() => require('./configure-ai-agents'))).configureAiAgentsHandler(args);
-    },
-};

package/src/command-line/configure-ai-agents/configure-ai-agents.d.ts

@@ -1,4 +0,0 @@
-import { ConfigureAiAgentsOptions } from './command-object';
-export declare function configureAiAgentsHandler(args: ConfigureAiAgentsOptions, inner?: boolean): Promise<void>;
-export declare function configureAiAgentsHandlerImpl(options: ConfigureAiAgentsOptions): Promise<void>;
-//# sourceMappingURL=configure-ai-agents.d.ts.map

package/src/command-line/configure-ai-agents/configure-ai-agents.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"configure-ai-agents.d.ts","sourceRoot":"","sources":["../../../../../../packages/nx/src/command-line/configure-ai-agents/configure-ai-agents.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAI5D,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,wBAAwB,EAC9B,KAAK,UAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAgNf"}

package/src/command-line/configure-ai-agents/configure-ai-agents.js

@@ -1,231 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.configureAiAgentsHandler = configureAiAgentsHandler;
-exports.configureAiAgentsHandlerImpl = configureAiAgentsHandlerImpl;
-const enquirer_1 = require("enquirer");
-const output_1 = require("../../utils/output");
-const provenance_1 = require("../../utils/provenance");
-const chalk = require("chalk");
-const utils_1 = require("../../ai/utils");
-const devkit_internals_1 = require("../../devkit-internals");
-const workspace_root_1 = require("../../utils/workspace-root");
-const ora = require("ora");
-const path_1 = require("path");
-async function configureAiAgentsHandler(args, inner = false) {
-    // Use environment variable to force local execution
-    if (process.env.NX_AI_FILES_USE_LOCAL === 'true' || inner) {
-        return await configureAiAgentsHandlerImpl(args);
-    }
-    let cleanup;
-    try {
-        await (0, provenance_1.ensurePackageHasProvenance)('nx', 'latest');
-        const packageInstallResults = (0, devkit_internals_1.installPackageToTmp)('nx', 'latest');
-        cleanup = packageInstallResults.cleanup;
-        let modulePath = require.resolve('nx/src/command-line/configure-ai-agents/configure-ai-agents.js', { paths: [packageInstallResults.tempDir] });
-        const module = await Promise.resolve(`${modulePath}`).then(s => require(s));
-        const configureAiAgentsResult = await module.configureAiAgentsHandler(args, true);
-        cleanup();
-        return configureAiAgentsResult;
-    }
-    catch (error) {
-        if (cleanup) {
-            cleanup();
-        }
-        // Fall back to local implementation
-        return configureAiAgentsHandlerImpl(args);
-    }
-}
-async function configureAiAgentsHandlerImpl(options) {
-    const normalizedOptions = normalizeOptions(options);
-    const { nonConfiguredAgents, partiallyConfiguredAgents, fullyConfiguredAgents, disabledAgents, agentConfigurations, } = await (0, utils_1.getAgentConfigurations)(normalizedOptions.agents, workspace_root_1.workspaceRoot);
-    if (disabledAgents.length > 0) {
-        const commandNames = disabledAgents.map((a) => {
-            if (a === 'cursor')
-                return '"cursor"';
-            if (a === 'copilot')
-                return '"code"/"code-insiders"';
-            return a;
-        });
-        const title = commandNames.length === 1
-            ? `${commandNames[0]} command not available.`
-            : `CLI commands ${commandNames
-                .map((c) => `${c}`)
-                .join('/')} not available.`;
-        output_1.output.log({
-            title,
-            bodyLines: [
-                chalk.dim('To manually configure the Nx MCP in your editor, install Nx Console (https://nx.dev/getting-started/editor-setup)'),
-            ],
-        });
-    }
-    if (normalizedOptions.agents.filter((a) => !disabledAgents.includes(a))
-        .length === 0) {
-        output_1.output.error({
-            title: 'Please select at least one AI agent to configure.',
-        });
-        process.exit(1);
-    }
-    if (options.check) {
-        if (fullyConfiguredAgents.length === 0) {
-            output_1.output.log({
-                title: 'No AI agents are configured',
-                bodyLines: [
-                    'You can configure AI agents by running `nx configure-ai-agents`.',
-                ],
-            });
-            process.exit(0);
-        }
-        const outOfDateAgents = fullyConfiguredAgents.filter((a) => agentConfigurations.get(a)?.outdated);
-        if (outOfDateAgents.length === 0) {
-            output_1.output.success({
-                title: 'All configured AI agents are up to date',
-                bodyLines: fullyConfiguredAgents.map((a) => `- ${utils_1.agentDisplayMap[a]}`),
-            });
-            process.exit(0);
-        }
-        else {
-            output_1.output.log({
-                title: 'The following AI agents are out of date:',
-                bodyLines: [
-                    ...outOfDateAgents.map((a) => {
-                        const rulesPath = agentConfigurations.get(a).rulesPath;
-                        const displayPath = rulesPath.startsWith(workspace_root_1.workspaceRoot)
-                            ? (0, path_1.relative)(workspace_root_1.workspaceRoot, rulesPath)
-                            : rulesPath;
-                        return `- ${utils_1.agentDisplayMap[a]} (${displayPath})`;
-                    }),
-                    '',
-                    'You can update them by running `nx configure-ai-agents`.',
-                ],
-            });
-            process.exit(1);
-        }
-    }
-    // first, prompt for partially configured agents and out of date agents
-    const agentsToUpdate = [];
-    partiallyConfiguredAgents.forEach((a) => {
-        agentsToUpdate.push(getAgentChoiceForPrompt(a, true, false));
-    });
-    for (const a of fullyConfiguredAgents) {
-        if (agentConfigurations.get(a).outdated) {
-            agentsToUpdate.push(getAgentChoiceForPrompt(a, false, true));
-        }
-    }
-    let updateResult = [];
-    let updateSucceeded = true;
-    if (agentsToUpdate.length > 0) {
-        if (options.interactive !== false) {
-            try {
-                updateResult = (await (0, enquirer_1.prompt)({
-                    type: 'multiselect',
-                    name: 'agents',
-                    message: 'The following agents are not configured completely or are out of date. Which would you like to update?',
-                    choices: agentsToUpdate,
-                    initial: agentsToUpdate.map((_, i) => i),
-                    required: true,
-                })).agents;
-            }
-            catch {
-                process.exit(1);
-            }
-        }
-        else {
-            // in non-interactive mode, update all
-            updateResult = agentsToUpdate.map((a) => a.name);
-        }
-        if (updateResult?.length > 0) {
-            const updateSpinner = ora(`Updating agent configurations...`).start();
-            try {
-                await (0, utils_1.configureAgents)(updateResult, workspace_root_1.workspaceRoot, false);
-                updateSpinner.succeed('Agent configurations updated.');
-            }
-            catch {
-                updateSpinner.fail('Failed to update agent configurations.');
-                updateSucceeded = false;
-            }
-        }
-    }
-    // then prompt for non-configured agents
-    if (nonConfiguredAgents.length === 0) {
-        const usingAllAgents = normalizedOptions.agents.length === utils_1.supportedAgents.length;
-        const configuredOrUpdatedAgents = [
-            ...new Set([
-                ...fullyConfiguredAgents,
-                ...(updateSucceeded ? updateResult : []),
-            ]),
-        ];
-        output_1.output.success({
-            title: `No new agents to configure. All ${!usingAllAgents ? 'selected' : 'supported'} AI agents are already configured:`,
-            bodyLines: configuredOrUpdatedAgents.map((agent) => `- ${utils_1.agentDisplayMap[agent]}`),
-        });
-        process.exit(0);
-    }
-    let configurationResult;
-    if (options.interactive !== false) {
-        try {
-            configurationResult = (await (0, enquirer_1.prompt)({
-                type: 'multiselect',
-                name: 'agents',
-                message: 'Which AI agents would you like to configure? (space to select, enter to confirm)',
-                choices: nonConfiguredAgents.map((a) => getAgentChoiceForPrompt(a, false, false)),
-                required: true,
-            })).agents;
-        }
-        catch {
-            process.exit(1);
-        }
-    }
-    else {
-        // in non-interactive mode, configure all
-        configurationResult = nonConfiguredAgents;
-    }
-    if (configurationResult?.length === 0) {
-        output_1.output.log({
-            title: 'No agents selected',
-        });
-        process.exit(0);
-    }
-    try {
-        await (0, utils_1.configureAgents)(configurationResult, workspace_root_1.workspaceRoot, false);
-        const configuredOrUpdatedAgents = [
-            ...new Set([
-                ...fullyConfiguredAgents,
-                ...(updateSucceeded ? updateResult : []),
-                ...configurationResult,
-            ]),
-        ];
-        output_1.output.success({
-            title: 'AI agents set up successfully. Configured agents:',
-            bodyLines: configuredOrUpdatedAgents.map((agent) => `- ${utils_1.agentDisplayMap[agent]}`),
-        });
-        return;
-    }
-    catch (e) {
-        output_1.output.error({
-            title: 'Failed to set up AI agents',
-            bodyLines: [e.message],
-        });
-        process.exit(1);
-    }
-}
-function getAgentChoiceForPrompt(agent, partiallyConfigured, outdated) {
-    let message = utils_1.agentDisplayMap[agent];
-    if (partiallyConfigured) {
-        message += ' (partially configured)';
-    }
-    else if (outdated) {
-        message += ' (out of date)';
-    }
-    return {
-        name: agent,
-        message,
-    };
-}
-function normalizeOptions(options) {
-    const agents = (options.agents ?? utils_1.supportedAgents).filter((a) => utils_1.supportedAgents.includes(a));
-    return {
-        ...options,
-        agents,
-        check: options.check ?? false,
-    };
-}

package/src/command-line/init/ai-agent-prompts.d.ts

@@ -1,3 +0,0 @@
-import { Agent } from '../../ai/utils';
-export declare function determineAiAgents(aiAgents?: Agent[], interactive?: boolean): Promise<Agent[]>;
-//# sourceMappingURL=ai-agent-prompts.d.ts.map

package/src/command-line/init/ai-agent-prompts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ai-agent-prompts.d.ts","sourceRoot":"","sources":["../../../../../../packages/nx/src/command-line/init/ai-agent-prompts.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAoC,MAAM,gBAAgB,CAAC;AAEzE,wBAAsB,iBAAiB,CACrC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAClB,WAAW,CAAC,EAAE,OAAO,GACpB,OAAO,CAAC,KAAK,EAAE,CAAC,CASlB"}

package/src/command-line/init/ai-agent-prompts.js

@@ -1,28 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.determineAiAgents = determineAiAgents;
-const enquirer_1 = require("enquirer");
-const is_ci_1 = require("../../utils/is-ci");
-const utils_1 = require("../../ai/utils");
-async function determineAiAgents(aiAgents, interactive) {
-    if (interactive === false || (0, is_ci_1.isCI)()) {
-        return aiAgents ?? [];
-    }
-    if (aiAgents) {
-        return aiAgents;
-    }
-    return await aiAgentsPrompt();
-}
-async function aiAgentsPrompt() {
-    return (await (0, enquirer_1.prompt)([
-        {
-            name: 'agents',
-            message: 'Which AI agents would you like to set up? (space to select, enter to confirm)',
-            type: 'multiselect',
-            choices: utils_1.supportedAgents.map((a) => ({
-                name: a,
-                message: utils_1.agentDisplayMap[a],
-            })),
-        },
-    ])).agents;
-}

package/src/utils/provenance.d.ts

@@ -1,48 +0,0 @@
-export declare function ensurePackageHasProvenance(packageName: string, packageVersion: string): Promise<void>;
-export declare class ProvenanceError extends Error {
-    constructor(packageName: string, packageVersion: string, error?: string);
-}
-export declare function getNxPackageGroup(): string[];
-export type DecodedAttestationPayload = {
-    _type: 'https://in-toto.io/Statement/v1';
-    subject: unknown[];
-    predicateType: 'https://slsa.dev/provenance/v1';
-    predicate: {
-        buildDefinition: {
-            buildType: string;
-            externalParameters: Record<string, any>;
-            internalParameters?: Record<string, any>;
-            resolvedDependencies?: ResourceDescriptor[];
-        };
-        runDetails: {
-            builder: {
-                id: string;
-                builderDependencies?: ResourceDescriptor[];
-                version?: Record<string, string>;
-            };
-            metadata?: {
-                invocationId?: string;
-                startedOn?: string;
-                finishedOn?: string;
-            };
-            byproducts?: ResourceDescriptor[];
-        };
-    };
-};
-export interface ResourceDescriptor {
-    uri?: string;
-    digest?: {
-        sha256?: string;
-        sha512?: string;
-        gitCommit?: string;
-        [key: string]: string | undefined;
-    };
-    name?: string;
-    downloadLocation?: string;
-    mediaType?: string;
-    content?: string;
-    annotations?: {
-        [key: string]: any;
-    };
-}
-//# sourceMappingURL=provenance.d.ts.map

package/src/utils/provenance.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../../../../../packages/nx/src/utils/provenance.ts"],"names":[],"mappings":"AAaA,wBAAsB,0BAA0B,CAC9C,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CA8Gf;AAED,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;CAOxE;AAED,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAa5C;AAoBD,MAAM,MAAM,yBAAyB,GAAG;IACtC,KAAK,EAAE,iCAAiC,CAAC;IACzC,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,aAAa,EAAE,gCAAgC,CAAC;IAChD,SAAS,EAAE;QACT,eAAe,EAAE;YACf,SAAS,EAAE,MAAM,CAAC;YAClB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACxC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACzC,oBAAoB,CAAC,EAAE,kBAAkB,EAAE,CAAC;SAC7C,CAAC;QACF,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,EAAE,EAAE,MAAM,CAAC;gBACX,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAC;gBAC3C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAClC,CAAC;YACF,QAAQ,CAAC,EAAE;gBACT,YAAY,CAAC,EAAE,MAAM,CAAC;gBACtB,SAAS,CAAC,EAAE,MAAM,CAAC;gBACnB,UAAU,CAAC,EAAE,MAAM,CAAC;aACrB,CAAC;YACF,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;SACnC,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE;QACZ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACpB,CAAC;CACH"}

package/src/utils/provenance.js

@@ -1,84 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProvenanceError = void 0;
-exports.ensurePackageHasProvenance = ensurePackageHasProvenance;
-exports.getNxPackageGroup = getNxPackageGroup;
-const child_process_1 = require("child_process");
-const path_1 = require("path");
-const util_1 = require("util");
-const fileutils_1 = require("./fileutils");
-/*
- * Verifies that the given npm package has provenance attestations
- * generated by the GitHub Actions workflow at .github/workflows/publish.yml
- * in the nrwl/nx repository.
- *
- * Will throw if the package does not have valid provenance.
- */
-async function ensurePackageHasProvenance(packageName, packageVersion) {
-    // this is used for locally released versions without provenance
-    // do not set this for other reasons or you might be exposed to security risks
-    if (process.env.NX_SKIP_PROVENANCE_CHECK) {
-        return;
-    }
-    const execAsync = (0, util_1.promisify)(child_process_1.exec);
-    try {
-        const result = await execAsync(`npm view ${packageName}@${packageVersion} --json --silent`, {
-            timeout: 20000,
-        });
-        const npmViewResult = JSON.parse(result.stdout.trim());
-        const attURL = npmViewResult.dist?.attestations?.url;
-        if (!attURL)
-            throw new ProvenanceError(packageName, packageVersion, 'No attestation URL found');
-        const response = await fetch(attURL);
-        if (!response.ok) {
-            throw new ProvenanceError(packageName, packageVersion, `HTTP ${response.status}: ${response.statusText}`);
-        }
-        const attestations = (await response.json());
-        const provenanceAttestation = attestations?.attestations?.find((a) => a.predicateType === 'https://slsa.dev/provenance/v1');
-        const dsseEnvelopePayload = JSON.parse(Buffer.from(provenanceAttestation.bundle.dsseEnvelope.payload, 'base64').toString());
-        const workflowParameters = dsseEnvelopePayload?.predicate?.buildDefinition?.externalParameters
-            ?.workflow;
-        // verify that provenance was actually generated from the right publishing workflow
-        if (!workflowParameters) {
-            throw new ProvenanceError(packageName, packageVersion, 'Missing workflow parameters in attestation');
-        }
-        if (workflowParameters.repository !== 'https://github.com/nrwl/nx') {
-            throw new ProvenanceError(packageName, packageVersion, 'Repository does not match nrwl/nx');
-        }
-        if (workflowParameters.path !== '.github/workflows/publish.yml') {
-            throw new ProvenanceError(packageName, packageVersion, 'Publishing workflow does not match .github/workflows/publish.yml');
-        }
-        if (workflowParameters.ref !== `refs/tags/${npmViewResult.version}`) {
-            throw new ProvenanceError(packageName, packageVersion, `Version ref does not match refs/tags/${npmViewResult.version}`);
-        }
-        // verify that provenance was generated from the exact same artifact as the one we are installing
-        const distSha = Buffer.from(npmViewResult.dist.integrity.replace('sha512-', ''), 'base64').toString('hex');
-        const attestationSha = dsseEnvelopePayload.subject[0].digest.sha512;
-        if (distSha !== attestationSha) {
-            throw new ProvenanceError(packageName, packageVersion, 'Integrity hash does not match attestation hash');
-        }
-        return;
-    }
-    catch (error) {
-        if (error instanceof ProvenanceError) {
-            throw error;
-        }
-        throw new ProvenanceError(packageName, packageVersion, error.message || error);
-    }
-}
-class ProvenanceError extends Error {
-    constructor(packageName, packageVersion, error) {
-        super(`An error occurred while checking the provenance of ${packageName}@${packageVersion}. This could indicate a security risk. Please double check https://www.npmjs.com/package/${packageName} to see if the package is published correctly or file an issue at https://github.com/nrwl/nx/issues. To disable this check at your own risk, you can set the NX_SKIP_PROVENANCE_CHECK environment variable to true. \n Error: ${error ?? ''}`);
-    }
-}
-exports.ProvenanceError = ProvenanceError;
-function getNxPackageGroup() {
-    const packageJsonPath = (0, path_1.join)(__dirname, '../../package.json');
-    const packageJson = (0, fileutils_1.readJsonFile)(packageJsonPath);
-    if (!packageJson['nx-migrations']?.packageGroup) {
-        return ['nx'];
-    }
-    const packages = packageJson['nx-migrations'].packageGroup.filter((dep) => typeof dep === 'string' && dep.startsWith('@nx/'));
-    packages.push('nx');
-    return packages;
-}