nx 23.1.0 → 23.1.2

package/dist/src/utils/safe-spawn.d.ts

@@ -0,0 +1,24 @@
+import { ChildProcess, ExecFileSyncOptions, SpawnOptions } from 'child_process';
+/**
+ * Spawn a binary that may be a Windows `.cmd`/`.bat` shim, without letting its
+ * arguments become shell syntax.
+ *
+ * Off Windows, and for a `.exe`, no shell is involved at all. Where one is —
+ * a shim or a bare name — the binary and every argument are quoted for cmd.exe.
+ *
+ * Not a complete guarantee: cmd.exe expands `%VAR%` in the binary or any
+ * argument whether or not it is quoted, so a caller with untrusted arguments
+ * inherits that gap (NXC-4798). See the note on `LINE_BREAK` above.
+ *
+ * @throws on Windows when the binary or an argument contains a line break, or a
+ * literal `"` (via `quoteShellArg`). Those are the only refusals — the `%`
+ * expansion above is not one of them.
+ */
+export declare function safeSpawn(binary: string, args: readonly string[], options?: Omit<SpawnOptions, 'shell'>): ChildProcess;
+/**
+ * Synchronous {@link safeSpawn}, returning the child's stdout.
+ *
+ * Carries the same Windows caveats: `%VAR%` is expanded quoted or not
+ * (NXC-4798), and a line break or literal `"` throws.
+ */
+export declare function safeExecFileSync(binary: string, args: readonly string[], options?: Omit<ExecFileSyncOptions, 'encoding' | 'shell'>): string;

package/dist/src/utils/safe-spawn.js

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.safeSpawn = safeSpawn;
+exports.safeExecFileSync = safeExecFileSync;
+const child_process_1 = require("child_process");
+const path_1 = require("path");
+const shell_quoting_1 = require("./shell-quoting");
+// Node refuses to launch a Windows `.cmd`/`.bat` shim without a shell
+// (CVE-2024-27980). A bare name takes the shell for the same reason, one step
+// removed: libuv walks PATH and PATHEXT itself, so no shell is needed to *find*
+// the binary — but the walk may land on a `.cmd`/`.bat`, and this cannot know
+// which in advance, so it is deliberately conservative. Everything else,
+// including a `.exe`, spawns directly, so the shell and the quoting below reach
+// only the invocations that cannot do without them.
+//
+// Deliberately a function: a module-level const is fixed at import time, which
+// would make the Windows branch untestable.
+function needsShell(binary) {
+    if (process.platform !== 'win32') {
+        return false;
+    }
+    // win32.extname, not the platform default: this branch only runs on Windows,
+    // where `path` is win32 anyway, and pinning it lets a test model the real
+    // parse rather than posix's (which reads `C:\ws\my.app\gradlew` as `.app\gradlew`).
+    const ext = path_1.win32.extname(binary).toLowerCase();
+    return ext === '' || ext === '.cmd' || ext === '.bat';
+}
+// A line break ends the command line whatever the quoting, so nothing can carry
+// one.
+//
+// `%` is deliberately NOT refused, and this is a known gap rather than a safe
+// case. cmd.exe expands `%VAR%` whether or not the value is quoted — see
+// `quoteShellArg`'s own docstring in ./shell-quoting, which says so and pins it
+// with a test — so quoting contains nothing here. It applies to the binary path
+// as much as to the arguments, and an expansion yielding a `"` defeats the
+// literal-quote refusal below, because that inspects the pre-expansion bytes.
+// `bin/nx.ts` loads the workspace's own `.env` before the graph is built, so a
+// repo can set the variable too.
+//
+// Refusing `%` is what an earlier revision did, and it made any workspace under
+// a `%` path — a legal Windows directory name — fail graph construction. The gap
+// is bounded by the argument that bounds this whole class: a repo that can reach
+// here already has `mvnw` / `pom.xml` executing on its behalf. Closing it
+// properly is tracked as NXC-4798.
+const LINE_BREAK = /[\r\n]/;
+/**
+ * Spawn a binary that may be a Windows `.cmd`/`.bat` shim, without letting its
+ * arguments become shell syntax.
+ *
+ * Off Windows, and for a `.exe`, no shell is involved at all. Where one is —
+ * a shim or a bare name — the binary and every argument are quoted for cmd.exe.
+ *
+ * Not a complete guarantee: cmd.exe expands `%VAR%` in the binary or any
+ * argument whether or not it is quoted, so a caller with untrusted arguments
+ * inherits that gap (NXC-4798). See the note on `LINE_BREAK` above.
+ *
+ * @throws on Windows when the binary or an argument contains a line break, or a
+ * literal `"` (via `quoteShellArg`). Those are the only refusals — the `%`
+ * expansion above is not one of them.
+ */
+function safeSpawn(binary, args, options = {}) {
+    const shell = needsShell(binary);
+    return (0, child_process_1.spawn)(quoteBinary(binary, shell), quoteArgs(args, shell), {
+        ...options,
+        windowsHide: true,
+        shell,
+    });
+}
+/**
+ * Synchronous {@link safeSpawn}, returning the child's stdout.
+ *
+ * Carries the same Windows caveats: `%VAR%` is expanded quoted or not
+ * (NXC-4798), and a line break or literal `"` throws.
+ */
+function safeExecFileSync(binary, args, options = {}) {
+    const shell = needsShell(binary);
+    return (0, child_process_1.execFileSync)(quoteBinary(binary, shell), quoteArgs(args, shell), {
+        stdio: 'pipe',
+        ...options,
+        windowsHide: true,
+        shell,
+        encoding: 'utf-8',
+    });
+}
+// The binary needs quoting too: Node joins it into the same command line, so a
+// path holding a space or an `&` would split there.
+function quoteBinary(binary, shell) {
+    if (!shell) {
+        return binary;
+    }
+    return quoteForCmd(binary, `the path ${JSON.stringify(binary)}`);
+}
+function quoteForCmd(value, described, remedy = '') {
+    if (LINE_BREAK.test(value)) {
+        throw new Error(`Cannot pass ${described} to cmd.exe: a line break inside it would end the command line before cmd.exe reached the rest of it.${remedy}`);
+    }
+    return (0, shell_quoting_1.quoteShellArg)(value);
+}
+function quoteArgs(args, shell) {
+    if (!shell) {
+        return [...args];
+    }
+    return args.map((arg) => quoteForCmd(arg, `the argument ${JSON.stringify(arg)}`, ' Remove it from your Nx configuration and try again.'));
+}

package/dist/src/utils/shell-quoting.d.ts

@@ -8,3 +8,18 @@ export declare function needsShellQuoting(str: string): boolean;
  * Check if a string is already wrapped in matching quotes (single or double).
  */
 export declare function isAlreadyQuoted(str: string): boolean;
+/**
+ * Quote a string so it survives being interpolated into a shell command line
+ * as a single argument.
+ *
+ * On Windows the safety boundary is one unbroken double-quoted run: it keeps
+ * `^`, `&`, `|`, `<` and `>` literal through cmd.exe's parse and a `.cmd`
+ * shim's re-parse of `%*`, but not `%`, which cmd.exe expands inside double
+ * quotes too.
+ *
+ * @throws on Windows when the argument contains a double quote, which ends that
+ * run, since cmd.exe recognizes no backslash escape. Carrying one means
+ * caret-escaping every metacharacter instead, doubled for a `.cmd` shim, which
+ * this path does not implement.
+ */
+export declare function quoteShellArg(arg: string): string;

package/dist/src/utils/shell-quoting.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.needsShellQuoting = needsShellQuoting;
 exports.isAlreadyQuoted = isAlreadyQuoted;
+exports.quoteShellArg = quoteShellArg;
 /**
  * Shell metacharacters that have special meaning and require quoting.
  *
@@ -39,3 +40,37 @@ function isAlreadyQuoted(str) {
         ((str[0] === "'" && str[str.length - 1] === "'") ||
             (str[0] === '"' && str[str.length - 1] === '"')));
 }
+/**
+ * Quote a string so it survives being interpolated into a shell command line
+ * as a single argument.
+ *
+ * On Windows the safety boundary is one unbroken double-quoted run: it keeps
+ * `^`, `&`, `|`, `<` and `>` literal through cmd.exe's parse and a `.cmd`
+ * shim's re-parse of `%*`, but not `%`, which cmd.exe expands inside double
+ * quotes too.
+ *
+ * @throws on Windows when the argument contains a double quote, which ends that
+ * run, since cmd.exe recognizes no backslash escape. Carrying one means
+ * caret-escaping every metacharacter instead, doubled for a `.cmd` shim, which
+ * this path does not implement.
+ */
+function quoteShellArg(arg) {
+    const isWindows = process.platform === 'win32';
+    if (isWindows && arg.includes('"')) {
+        throw new Error(`Cannot safely pass ${arg} to cmd.exe as a single argument: a double quote inside it would end the quoting and leave the rest of the argument to be read as commands. Remove the double quote and run the command again.`);
+    }
+    if (arg === '') {
+        // an unquoted empty string would vanish when joined into a command line
+        return isWindows ? '""' : "''";
+    }
+    // `^` is cmd.exe syntax rather than shell syntax, so it earns quoting only
+    // where cmd.exe parses the command line.
+    if (!needsShellQuoting(arg) && !(isWindows && arg.includes('^'))) {
+        return arg;
+    }
+    return isWindows
+        ? // MSVCRT reads the backslashes that precede the closing quote as escapes,
+            // so they have to be doubled to survive as themselves.
+            `"${arg.replace(/(\\+)$/, '$1$1')}"`
+        : `'${arg.replace(/'/g, `'\\''`)}'`;
+}

package/dist/src/utils/wait-for-socket-connection.d.ts

@@ -12,4 +12,15 @@ export declare function waitForSocketConnection(socketPath: string | (() => stri
     signal?: AbortSignal;
     maxAttempts?: number;
     delayMs?: number;
+    /**
+     * Called with the errno of each failed connect and the path it was made
+     * against. Return `true` to stop polling: a permission refusal does not
+     * heal by retrying, and without a way out the caller waits the full budget
+     * and then cannot say why.
+     *
+     * The path is passed rather than left to the caller to recompute — with a
+     * resolver it can differ per attempt, and the caller that reports the
+     * refusal may no longer be able to resolve one at all.
+     */
+    onConnectError?: (error: NodeJS.ErrnoException, socketPath: string) => boolean | void;
 }): Promise<Socket | null>;

package/dist/src/utils/wait-for-socket-connection.js

@@ -26,9 +26,15 @@ async function waitForSocketConnection(socketPath, options) {
             return null;
         const path = typeof socketPath === 'function' ? socketPath() : socketPath;
         if (path) {
-            const socket = await tryConnect(path);
-            if (socket) {
-                return socket;
+            const result = await tryConnect(path);
+            if (result.socket) {
+                return result.socket;
+            }
+            // The caller may need the errno this attempt produced — a refused
+            // connection is reported very differently from a socket that is not
+            // there yet, and polling past it only delays the same answer.
+            if (result.error && options?.onConnectError?.(result.error, path)) {
+                return null;
             }
         }
         attempts++;
@@ -39,15 +45,15 @@ function tryConnect(socketPath) {
     return new Promise((resolve) => {
         try {
             const socket = (0, net_1.connect)(socketPath, () => {
-                resolve(socket);
+                resolve({ socket });
             });
-            socket.once('error', () => {
+            socket.once('error', (error) => {
                 socket.destroy();
-                resolve(null);
+                resolve({ error });
             });
         }
-        catch {
-            resolve(null);
+        catch (error) {
+            resolve({ error: error });
         }
     });
 }

package/dist/src/utils/workspace-id.d.ts

@@ -0,0 +1,20 @@
+import type { NxJsonConfiguration } from '../config/nx-json';
+/**
+ * The workspace's analytics identity: the Nx Cloud id when the workspace has
+ * one (most stable — it survives repo moves and renames), else the repo key.
+ * Null when neither is available, in which case nothing is reported.
+ */
+export declare function generateWorkspaceId(root: string, nxJson: NxJsonConfiguration | null): string | null;
+/**
+ * Derive the stable, unsalted key identifying this workspace in the
+ * repoTelemetry registry: `sha256(<repo identity> + '#' + <workspace path
+ * relative to the git root>)`.
+ *
+ * The repo identity is the normalized `domain/slug` from the git remote
+ * (protocol-independent: ssh, https, and token-authenticated URLs of the
+ * same repo produce the same key), falling back to the first-commit SHA
+ * when no remote exists. Returns null when no identity is derivable — not
+ * a git repository, or a shallow clone without a remote.
+ */
+export declare function deriveRepoKey(directory: string): string | null;
+export declare function computeRepoKey(identity: string, relativePath: string): string;

package/dist/src/utils/workspace-id.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateWorkspaceId = generateWorkspaceId;
+exports.deriveRepoKey = deriveRepoKey;
+exports.computeRepoKey = computeRepoKey;
+const crypto_1 = require("crypto");
+const git_utils_1 = require("./git-utils");
+/**
+ * The workspace's analytics identity: the Nx Cloud id when the workspace has
+ * one (most stable — it survives repo moves and renames), else the repo key.
+ * Null when neither is available, in which case nothing is reported.
+ */
+function generateWorkspaceId(root, nxJson) {
+    const nxCloudId = nxJson?.nxCloudId ?? nxJson?.nxCloudAccessToken;
+    if (nxCloudId) {
+        return nxCloudId;
+    }
+    return deriveRepoKey(root);
+}
+/**
+ * Derive the stable, unsalted key identifying this workspace in the
+ * repoTelemetry registry: `sha256(<repo identity> + '#' + <workspace path
+ * relative to the git root>)`.
+ *
+ * The repo identity is the normalized `domain/slug` from the git remote
+ * (protocol-independent: ssh, https, and token-authenticated URLs of the
+ * same repo produce the same key), falling back to the first-commit SHA
+ * when no remote exists. Returns null when no identity is derivable — not
+ * a git repository, or a shallow clone without a remote.
+ */
+function deriveRepoKey(directory) {
+    const identity = getRepoIdentity(directory);
+    if (!identity) {
+        return null;
+    }
+    return computeRepoKey(identity, (0, git_utils_1.getGitRootRelativePath)(directory) ?? '');
+}
+function computeRepoKey(identity, relativePath) {
+    return (0, crypto_1.createHash)('sha256')
+        .update(`${identity}#${relativePath}`)
+        .digest('hex');
+}
+function getRepoIdentity(directory) {
+    const remote = (0, git_utils_1.getVcsRemoteInfo)(directory);
+    if (remote) {
+        // Hosts route case-insensitively and hold one canonical casing, so a
+        // hand-typed remote must key the same as the canonical one the claim
+        // flow derives from the host's API.
+        return `${remote.domain}/${remote.slug}`.toLowerCase().replace(/\/+$/, '');
+    }
+    // Without a remote the first commit is the only stable identity, and a
+    // shallow clone doesn't have a real one.
+    return (0, git_utils_1.isShallowRepository)(directory) ? null : (0, git_utils_1.getFirstCommitSha)(directory);
+}

package/migrations.json

@@ -160,7 +160,13 @@
       "cli": "nx",
       "version": "22.6.0-rc.0",
       "description": "Adds .claude/settings.local.json to .gitignore",
-      "implementation": "./dist/src/migrations/update-17-3-0/update-nxw"
+      "implementation": "./dist/src/migrations/update-22-6-0/add-claude-settings-local-to-git-ignore"
+    },
+    "22-6-0-enable-analytics-prompt": {
+      "cli": "nx",
+      "version": "22.6.0-beta.11",
+      "description": "Prompts to enable usage analytics",
+      "implementation": "./dist/src/migrations/update-22-6-0/enable-analytics-prompt"
     },
     "22-7-0-add-self-healing-to-gitignore": {
       "cli": "nx",
@@ -178,6 +184,12 @@
       "version": "23.0.0-beta.18",
       "description": "Adds .nx/migrate-runs to .gitignore",
       "implementation": "./dist/src/migrations/update-23-0-0/add-migrate-runs-to-git-ignore"
+    },
+    "23-2-0-set-cache-on-executor-target-defaults": {
+      "version": "23.2.0-beta.8",
+      "description": "Sets \"cache\" on some executor-based target defaults whose caching was previously enabled by a target name default, maintaining compatibility with how cacheability resolved before Nx 23. Keys the migration cannot decide are left alone and keep working through a deprecated runtime fallback.",
+      "implementation": "./dist/src/migrations/update-23-2-0/set-cache-on-executor-target-defaults",
+      "documentation": "./dist/src/migrations/update-23-2-0/set-cache-on-executor-target-defaults.md"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nx",
-  "version": "23.1.0",
+  "version": "23.1.2",
   "private": false,
   "type": "commonjs",
   "description": "The core Nx plugin contains the core functionality of Nx like the project graph, nx commands and task orchestration.",
@@ -61,12 +61,13 @@
     "ansi-styles": "4.3.0",
     "argparse": "2.0.1",
     "asynckit": "0.4.0",
-    "axios": "1.16.1",
+    "axios": "1.18.1",
     "balanced-match": "4.0.3",
     "base64-js": "1.5.1",
     "bl": "4.1.0",
-    "brace-expansion": "5.0.6",
+    "brace-expansion": "5.0.9",
     "buffer": "5.7.1",
+    "bundle-name": "4.1.0",
     "call-bind-apply-helpers": "1.0.2",
     "chalk": "4.1.2",
     "cli-cursor": "3.1.0",
@@ -77,8 +78,10 @@
     "color-name": "1.1.4",
     "combined-stream": "1.0.8",
     "debug": "4.4.3",
+    "default-browser": "5.2.1",
+    "default-browser-id": "5.0.0",
     "defaults": "1.0.4",
-    "define-lazy-prop": "2.0.0",
+    "define-lazy-prop": "3.0.0",
     "delayed-stream": "1.0.0",
     "dotenv": "16.4.7",
     "dotenv-expand": "12.0.3",
@@ -111,11 +114,12 @@
     "ieee754": "1.2.1",
     "ignore": "7.0.5",
     "inherits": "2.0.4",
-    "is-docker": "2.2.1",
+    "is-docker": "3.0.0",
     "is-fullwidth-code-point": "3.0.0",
+    "is-inside-container": "1.0.0",
     "is-interactive": "1.0.0",
     "is-unicode-supported": "0.1.0",
-    "is-wsl": "2.2.0",
+    "is-wsl": "3.1.0",
     "isexe": "2.0.0",
     "json5": "2.2.3",
     "jsonc-parser": "3.3.1",
@@ -131,7 +135,7 @@
     "npm-run-path": "4.0.1",
     "once": "1.4.0",
     "onetime": "5.1.2",
-    "open": "8.4.2",
+    "open": "10.1.0",
     "ora": "5.4.1",
     "path-key": "3.1.1",
     "picocolors": "1.1.1",
@@ -140,6 +144,7 @@
     "require-directory": "2.1.1",
     "resolve.exports": "2.0.3",
     "restore-cursor": "3.1.0",
+    "run-applescript": "7.0.0",
     "safe-buffer": "5.2.1",
     "semver": "7.8.4",
     "signal-exit": "3.0.7",
@@ -176,16 +181,16 @@
     }
   },
   "optionalDependencies": {
-    "@nx/nx-darwin-arm64": "23.1.0",
-    "@nx/nx-darwin-x64": "23.1.0",
-    "@nx/nx-freebsd-x64": "23.1.0",
-    "@nx/nx-linux-arm-gnueabihf": "23.1.0",
-    "@nx/nx-linux-arm64-gnu": "23.1.0",
-    "@nx/nx-linux-arm64-musl": "23.1.0",
-    "@nx/nx-linux-x64-gnu": "23.1.0",
-    "@nx/nx-linux-x64-musl": "23.1.0",
-    "@nx/nx-win32-arm64-msvc": "23.1.0",
-    "@nx/nx-win32-x64-msvc": "23.1.0"
+    "@nx/nx-darwin-arm64": "23.1.2",
+    "@nx/nx-darwin-x64": "23.1.2",
+    "@nx/nx-freebsd-x64": "23.1.2",
+    "@nx/nx-linux-arm-gnueabihf": "23.1.2",
+    "@nx/nx-linux-arm64-gnu": "23.1.2",
+    "@nx/nx-linux-arm64-musl": "23.1.2",
+    "@nx/nx-linux-x64-gnu": "23.1.2",
+    "@nx/nx-linux-x64-musl": "23.1.2",
+    "@nx/nx-win32-arm64-msvc": "23.1.2",
+    "@nx/nx-win32-x64-msvc": "23.1.2"
   },
   "nx-migrations": {
     "migrations": "./migrations.json",

package/dist/src/migrations/update-17-3-0/nx-release-path.d.ts

@@ -1,3 +0,0 @@
-import { Tree } from '../../generators/tree';
-export default function nxReleasePath(tree: Tree): void;
-export declare function visitNotIgnoredFiles(tree: Tree, dirPath: string, visitor: (path: string) => void): void;

package/dist/src/migrations/update-17-3-0/nx-release-path.js

@@ -1,47 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = nxReleasePath;
-exports.visitNotIgnoredFiles = visitNotIgnoredFiles;
-const node_path_1 = require("node:path");
-const ignore_1 = require("../../utils/ignore");
-function nxReleasePath(tree) {
-    visitNotIgnoredFiles(tree, '', (file) => {
-        const contents = tree.read(file).toString('utf-8');
-        if (
-        // the deep import usage should be replaced by the new location
-        contents.includes('nx/src/command-line/release') ||
-            // changelog-renderer has moved into nx/release
-            contents.includes('nx/changelog-renderer')) {
-            const finalContents = contents
-                // replace instances of old changelog renderer location
-                .replace(/nx\/changelog-renderer/g, 'nx/release/changelog-renderer')
-                // replace instances of deep import for programmatic API (only perform the replacement if an actual import by checking for trailing ' or ")
-                .replace(/nx\/src\/command-line\/release(['"])/g, 'nx/release$1');
-            tree.write(file, finalContents);
-        }
-    });
-}
-// Adapted from devkit
-function visitNotIgnoredFiles(tree, dirPath = tree.root, visitor) {
-    const ig = (0, ignore_1.getIgnoreObject)();
-    dirPath = normalizePathRelativeToRoot(dirPath, tree.root);
-    if (dirPath !== '' && ig?.ignores(dirPath)) {
-        return;
-    }
-    for (const child of tree.children(dirPath)) {
-        const fullPath = (0, node_path_1.join)(dirPath, child);
-        if (ig?.ignores(fullPath)) {
-            continue;
-        }
-        if (tree.isFile(fullPath)) {
-            visitor(fullPath);
-        }
-        else {
-            visitNotIgnoredFiles(tree, fullPath, visitor);
-        }
-    }
-}
-// Copied from devkit
-function normalizePathRelativeToRoot(path, root) {
-    return (0, node_path_1.relative)(root, (0, node_path_1.join)(root, path)).split(node_path_1.sep).join('/');
-}

package/dist/src/utils/min-release-age/npmrc.d.ts

@@ -1,15 +0,0 @@
-export interface NpmrcEntry {
-    key: string;
-    value: string;
-}
-/**
- * Parses an .npmrc file into its `key = value` entries the way npm/npm-conf do:
- * skip blank lines and `#`/`;` comments, split on the first `=`, and trim both
- * sides. The value is returned raw (quote stripping is the caller's concern).
- * Returns null when the file is missing or unreadable so callers can distinguish
- * "no file" from "file with no relevant keys". Shared by the npm and pnpm
- * cooldown readers.
- */
-export declare function readNpmrcEntries(path: string): NpmrcEntry[] | null;
-/** The parsing half of {@link readNpmrcEntries}, usable without a filesystem. */
-export declare function parseNpmrcContent(raw: string): NpmrcEntry[];

package/dist/src/utils/min-release-age/npmrc.js

@@ -1,45 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.readNpmrcEntries = readNpmrcEntries;
-exports.parseNpmrcContent = parseNpmrcContent;
-const fs_1 = require("fs");
-/**
- * Parses an .npmrc file into its `key = value` entries the way npm/npm-conf do:
- * skip blank lines and `#`/`;` comments, split on the first `=`, and trim both
- * sides. The value is returned raw (quote stripping is the caller's concern).
- * Returns null when the file is missing or unreadable so callers can distinguish
- * "no file" from "file with no relevant keys". Shared by the npm and pnpm
- * cooldown readers.
- */
-function readNpmrcEntries(path) {
-    if (!(0, fs_1.existsSync)(path)) {
-        return null;
-    }
-    let raw;
-    try {
-        raw = (0, fs_1.readFileSync)(path, 'utf-8');
-    }
-    catch {
-        return null;
-    }
-    return parseNpmrcContent(raw);
-}
-/** The parsing half of {@link readNpmrcEntries}, usable without a filesystem. */
-function parseNpmrcContent(raw) {
-    const entries = [];
-    for (const line of raw.split(/\r?\n/)) {
-        const trimmed = line.trim();
-        if (!trimmed || trimmed.startsWith('#') || trimmed.startsWith(';')) {
-            continue;
-        }
-        const eq = trimmed.indexOf('=');
-        if (eq === -1) {
-            continue;
-        }
-        entries.push({
-            key: trimmed.slice(0, eq).trim(),
-            value: trimmed.slice(eq + 1).trim(),
-        });
-    }
-    return entries;
-}