@kitsy/cnos 1.3.0 → 1.4.0

package/dist/build/index.cjs

@@ -294,6 +294,11 @@ var DEFAULT_NAMESPACES = {
     shareable: false,
     readonly: true
   },
+  process: {
+    kind: "system",
+    shareable: false,
+    readonly: true
+  },
   public: {
     kind: "projection",
     source: "promote",
@@ -953,12 +958,15 @@ async function exists2(targetPath) {
     return false;
   }
 }
-async function resolveLocalWorkspaceRoot(manifestRoot, workspaceId) {
+async function resolveLocalWorkspaceRoot(manifestRoot, workspaceId, manifest) {
   const workspaceRoot = import_node_path5.default.join(manifestRoot, "workspaces", workspaceId);
   if (await exists2(workspaceRoot)) {
     return workspaceRoot;
   }
-  const legacyMarkers = ["values", "secrets", "env", "profiles"].map(
+  const customDataNamespaceRoots = Object.entries(manifest.namespaces).filter(
+    ([namespace, definition]) => namespace !== "value" && namespace !== "secret" && definition.kind === "data" && !definition.sensitive
+  ).map(([namespace]) => namespace);
+  const legacyMarkers = ["values", "secrets", "env", "profiles", ...customDataNamespaceRoots].map(
     (segment) => import_node_path5.default.join(manifestRoot, segment)
   );
   if ((await Promise.all(legacyMarkers.map((marker) => exists2(marker)))).some(Boolean)) {
@@ -1045,7 +1053,7 @@ async function resolveWorkspaceContext(manifest, options) {
     workspaceRoots.push({
       scope: "local",
       workspaceId: chainWorkspaceId,
-      path: await resolveLocalWorkspaceRoot(options.manifestRoot, chainWorkspaceId)
+      path: await resolveLocalWorkspaceRoot(options.manifestRoot, chainWorkspaceId, manifest)
     });
   }
   return {
@@ -1210,6 +1218,7 @@ async function runPipeline(options) {
   const collectedEntries = await Promise.all(
     options.plugins.map(
       (plugin) => plugin.load({
+        manifest: options.manifest,
         manifestConfig: {
           ...options.manifest.sources[plugin.id] ?? {},
           envMapping: options.manifest.envMapping
@@ -2308,7 +2317,7 @@ function envVarToLogicalKey(envVar, config = {}) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos",
-  version: "1.3.0",
+  version: "1.4.0",
   description: "Batteries-included CNOS runtime package wired with the official plugins.",
   type: "module",
   main: "./dist/index.cjs",
@@ -2782,11 +2791,30 @@ function createFilesystemValuesPlugin() {
         sourceRoot,
         context.profileActivation.values
       );
+      const customNamespaces = Object.entries(context.manifest.namespaces).filter(
+        ([namespace, definition]) => namespace !== "value" && namespace !== "secret" && definition.kind === "data" && !definition.sensitive
+      ).map(([namespace]) => namespace);
       const entries = [];
       for (const file of files) {
         const document = await (0, import_promises13.readFile)(file.absolutePath, "utf8");
         entries.push(...filesystemValuesReader(file.relativePath, document, file.workspaceId));
       }
+      for (const namespace of customNamespaces) {
+        const layers = [
+          namespace,
+          ...context.profileChain.filter((profile) => profile !== "base").map((profile) => `profiles/${profile}/${namespace}`)
+        ];
+        const namespaceFiles = await collectFilesystemLayerFiles(
+          context.manifestRoot,
+          context.workspace.workspaceRoots,
+          sourceRoot,
+          layers
+        );
+        for (const file of namespaceFiles) {
+          const document = await (0, import_promises13.readFile)(file.absolutePath, "utf8");
+          entries.push(...yamlObjectToEntries(document, file.relativePath, namespace, "filesystem-values", file.workspaceId));
+        }
+      }
       return entries;
     }
   };
@@ -2794,6 +2822,11 @@ function createFilesystemValuesPlugin() {
 
 // ../../plugins/process-env/src/index.ts
 var PROCESS_ENV_PLUGIN_ID = "@kitsy/cnos/plugins/process-env";
+var PROCESS_GRAPH_OMIT = /* @__PURE__ */ new Set([
+  "__CNOS_GRAPH__",
+  "__CNOS_SECRET_PAYLOAD__",
+  "__CNOS_SESSION_KEY__"
+]);
 function processEnvEntriesFromObject(env, mapping = {}, workspaceId = "default") {
   return Object.entries(env).flatMap(([envVar, value]) => {
     if (typeof value !== "string") {
@@ -2818,17 +2851,77 @@ function processEnvEntriesFromObject(env, mapping = {}, workspaceId = "default")
     ];
   });
 }
+function processNamespaceEntriesFromContext(env, workspaceId = "default") {
+  const envEntries = Object.entries(env).filter((entry) => typeof entry[1] === "string").filter(([envVar]) => !PROCESS_GRAPH_OMIT.has(envVar)).map(([envVar, value]) => ({
+    key: `process.env.${envVar}`,
+    value,
+    namespace: "process",
+    sourceId: "process-runtime",
+    pluginId: PROCESS_ENV_PLUGIN_ID,
+    workspaceId,
+    origin: {
+      envVar
+    }
+  }));
+  const runtimeEntries = [
+    {
+      key: "process.cwd",
+      value: process.cwd(),
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.platform",
+      value: process.platform,
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.arch",
+      value: process.arch,
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.node.version",
+      value: process.version,
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.args.raw",
+      value: process.argv.slice(2),
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    }
+  ];
+  return [...runtimeEntries, ...envEntries];
+}
 function createProcessEnvPlugin() {
   return {
     id: "process-env",
     kind: "loader",
     async load(context) {
       const config = context.manifestConfig;
-      return processEnvEntriesFromObject(
-        context.processEnv ?? process.env,
-        config.envMapping,
-        context.workspace.workspaceId
-      );
+      const env = context.processEnv ?? process.env;
+      return [
+        ...processEnvEntriesFromObject(
+          env,
+          config.envMapping,
+          context.workspace.workspaceId
+        ),
+        ...processNamespaceEntriesFromContext(env, context.workspace.workspaceId)
+      ];
     }
   };
 }

package/dist/build/index.d.cts

@@ -1,4 +1,4 @@
-import { C as CnosCreateOptions } from '../plugin-CyNkf7Dm.cjs';
+import { C as CnosCreateOptions } from '../plugin-B4xwySxw.cjs';
 
 declare function resolveBrowserData(options?: CnosCreateOptions): Promise<Record<string, unknown>>;
 

package/dist/build/index.d.ts

@@ -1,4 +1,4 @@
-import { C as CnosCreateOptions } from '../plugin-CyNkf7Dm.js';
+import { C as CnosCreateOptions } from '../plugin-B4xwySxw.js';
 
 declare function resolveBrowserData(options?: CnosCreateOptions): Promise<Record<string, unknown>>;
 

package/dist/build/index.js

@@ -1,13 +1,13 @@
 import {
   createCnos
-} from "../chunk-EDCLLCNL.js";
-import "../chunk-OOKFRWTN.js";
-import "../chunk-FC3IV6A7.js";
-import "../chunk-CDXJISGB.js";
-import "../chunk-JDII6O72.js";
-import "../chunk-OWUZQ4OH.js";
-import "../chunk-QTKXPY3N.js";
-import "../chunk-DRKDNY4I.js";
+} from "../chunk-JSBVYK2T.js";
+import "../chunk-J4K4JUJL.js";
+import "../chunk-T6Y57KTT.js";
+import "../chunk-WCHX2QFY.js";
+import "../chunk-FWJC4Y2D.js";
+import "../chunk-ZTPSFXWP.js";
+import "../chunk-HMM76UYZ.js";
+import "../chunk-APIU4GTB.js";
 
 // src/build/index.ts
 async function resolveBrowserData(options = {}) {

package/dist/{chunk-DRKDNY4I.js → chunk-APIU4GTB.js}

@@ -234,7 +234,7 @@ function resolveWorkspaceScopedPath(workspaceRoot, template, tokens) {
   return path.resolve(workspaceRoot, interpolated);
 }
 function resolveNamespaceDirectory(workspaceRoot, namespace, profile) {
-  const rootFolder = namespace === "value" ? "values" : "secrets";
+  const rootFolder = namespace === "value" ? "values" : namespace === "secret" ? "secrets" : namespace;
   if (profile && profile !== "base") {
     return path.resolve(workspaceRoot, "profiles", profile, rootFolder);
   }
@@ -303,6 +303,11 @@ var DEFAULT_NAMESPACES = {
     shareable: false,
     readonly: true
   },
+  process: {
+    kind: "system",
+    shareable: false,
+    readonly: true
+  },
   public: {
     kind: "projection",
     source: "promote",
@@ -1997,12 +2002,15 @@ async function exists3(targetPath) {
     return false;
   }
 }
-async function resolveLocalWorkspaceRoot(manifestRoot, workspaceId) {
+async function resolveLocalWorkspaceRoot(manifestRoot, workspaceId, manifest) {
   const workspaceRoot = path9.join(manifestRoot, "workspaces", workspaceId);
   if (await exists3(workspaceRoot)) {
     return workspaceRoot;
   }
-  const legacyMarkers = ["values", "secrets", "env", "profiles"].map(
+  const customDataNamespaceRoots = Object.entries(manifest.namespaces).filter(
+    ([namespace, definition]) => namespace !== "value" && namespace !== "secret" && definition.kind === "data" && !definition.sensitive
+  ).map(([namespace]) => namespace);
+  const legacyMarkers = ["values", "secrets", "env", "profiles", ...customDataNamespaceRoots].map(
     (segment) => path9.join(manifestRoot, segment)
   );
   if ((await Promise.all(legacyMarkers.map((marker) => exists3(marker)))).some(Boolean)) {
@@ -2089,7 +2097,7 @@ async function resolveWorkspaceContext(manifest, options) {
     workspaceRoots.push({
       scope: "local",
       workspaceId: chainWorkspaceId,
-      path: await resolveLocalWorkspaceRoot(options.manifestRoot, chainWorkspaceId)
+      path: await resolveLocalWorkspaceRoot(options.manifestRoot, chainWorkspaceId, manifest)
     });
   }
   return {
@@ -2254,6 +2262,7 @@ async function runPipeline(options) {
   const collectedEntries = await Promise.all(
     options.plugins.map(
       (plugin) => plugin.load({
+        manifest: options.manifest,
         manifestConfig: {
           ...options.manifest.sources[plugin.id] ?? {},
           envMapping: options.manifest.envMapping
@@ -2571,6 +2580,7 @@ export {
   parseYaml,
   stringifyYaml,
   loadManifest,
+  getNamespaceDefinition,
   ensureProjectionAllowed,
   applySchemaRules,
   writeVaultSessionKey,

package/dist/{chunk-K6QYI2T4.js → chunk-EQSKV3DP.js}

@@ -1,6 +1,6 @@
 import {
   isSecretReference
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // src/runtime/bootstrap.ts
 import { createCipheriv, createDecipheriv, randomBytes } from "crypto";

package/dist/{chunk-JDII6O72.js → chunk-FWJC4Y2D.js}

@@ -1,6 +1,6 @@
 import {
   applySchemaRules
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // ../../plugins/basic-schema/src/index.ts
 function createBasicSchemaPlugin() {

package/dist/{chunk-QTKXPY3N.js → chunk-HMM76UYZ.js}

@@ -2,7 +2,7 @@ import {
   envVarToLogicalKey,
   resolveWorkspaceScopedPath,
   toPortablePath
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // ../../plugins/dotenv/src/index.ts
 import { readFile } from "fs/promises";

package/dist/{chunk-OOKFRWTN.js → chunk-J4K4JUJL.js}

@@ -1,7 +1,7 @@
 import {
   toEnv,
   toPublicEnv
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // ../../plugins/env-export/src/index.ts
 function createEnvExportPlugin() {

package/dist/{chunk-EDCLLCNL.js → chunk-JSBVYK2T.js}

@@ -1,27 +1,27 @@
 import {
   createEnvExportPlugin,
   createPublicEnvExportPlugin
-} from "./chunk-OOKFRWTN.js";
+} from "./chunk-J4K4JUJL.js";
 import {
   createFilesystemSecretsPlugin,
   createFilesystemValuesPlugin
-} from "./chunk-FC3IV6A7.js";
+} from "./chunk-T6Y57KTT.js";
 import {
   createProcessEnvPlugin
-} from "./chunk-CDXJISGB.js";
+} from "./chunk-WCHX2QFY.js";
 import {
   createBasicSchemaPlugin
-} from "./chunk-JDII6O72.js";
+} from "./chunk-FWJC4Y2D.js";
 import {
   createCliArgsPlugin
-} from "./chunk-OWUZQ4OH.js";
+} from "./chunk-ZTPSFXWP.js";
 import {
   createDotenvPlugin
-} from "./chunk-QTKXPY3N.js";
+} from "./chunk-HMM76UYZ.js";
 import {
   createCnos,
   createProvenanceInspector
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // src/defaultPlugins.ts
 function defaultPlugins() {
@@ -68,7 +68,7 @@ function setBootstrappedSecretHydrationRequired(value) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos",
-  version: "1.3.0",
+  version: "1.4.0",
   description: "Batteries-included CNOS runtime package wired with the official plugins.",
   type: "module",
   main: "./dist/index.cjs",

package/dist/{chunk-E7SE6N26.js → chunk-LJD4SM32.js}

@@ -1,7 +1,7 @@
 import {
   graphRequiresSecretHydration,
   readRuntimeGraphFromEnv
-} from "./chunk-K6QYI2T4.js";
+} from "./chunk-EQSKV3DP.js";
 import {
   createCnos,
   getBootstrappedSecretHydrationRequired,
@@ -10,7 +10,7 @@ import {
   setBootstrappedSecretHydrationRequired,
   setSingletonReady,
   setSingletonRuntime
-} from "./chunk-EDCLLCNL.js";
+} from "./chunk-JSBVYK2T.js";
 import {
   inspectValue,
   readOrValue,
@@ -20,7 +20,7 @@ import {
   toLogicalKey,
   toNamespaceObject,
   toPublicEnv
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // src/runtime/index.ts
 var NOT_READY_MESSAGE = "CNOS not initialized. Call await cnos.ready() or use cnos run.";

package/dist/{chunk-FC3IV6A7.js → chunk-T6Y57KTT.js}

@@ -3,7 +3,7 @@ import {
   isSecretReference,
   parseYaml,
   toPortablePath
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // ../../plugins/filesystem/src/helpers.ts
 import { readdir } from "fs/promises";
@@ -155,11 +155,30 @@ function createFilesystemValuesPlugin() {
         sourceRoot,
         context.profileActivation.values
       );
+      const customNamespaces = Object.entries(context.manifest.namespaces).filter(
+        ([namespace, definition]) => namespace !== "value" && namespace !== "secret" && definition.kind === "data" && !definition.sensitive
+      ).map(([namespace]) => namespace);
       const entries = [];
       for (const file of files) {
         const document = await readFile2(file.absolutePath, "utf8");
         entries.push(...filesystemValuesReader(file.relativePath, document, file.workspaceId));
       }
+      for (const namespace of customNamespaces) {
+        const layers = [
+          namespace,
+          ...context.profileChain.filter((profile) => profile !== "base").map((profile) => `profiles/${profile}/${namespace}`)
+        ];
+        const namespaceFiles = await collectFilesystemLayerFiles(
+          context.manifestRoot,
+          context.workspace.workspaceRoots,
+          sourceRoot,
+          layers
+        );
+        for (const file of namespaceFiles) {
+          const document = await readFile2(file.absolutePath, "utf8");
+          entries.push(...yamlObjectToEntries(document, file.relativePath, namespace, "filesystem-values", file.workspaceId));
+        }
+      }
       return entries;
     }
   };

package/dist/chunk-WCHX2QFY.js

@@ -0,0 +1,115 @@
+import {
+  envVarToLogicalKey
+} from "./chunk-APIU4GTB.js";
+
+// ../../plugins/process-env/src/index.ts
+var PROCESS_ENV_PLUGIN_ID = "@kitsy/cnos/plugins/process-env";
+var PROCESS_GRAPH_OMIT = /* @__PURE__ */ new Set([
+  "__CNOS_GRAPH__",
+  "__CNOS_SECRET_PAYLOAD__",
+  "__CNOS_SESSION_KEY__"
+]);
+function processEnvEntriesFromObject(env, mapping = {}, workspaceId = "default") {
+  return Object.entries(env).flatMap(([envVar, value]) => {
+    if (typeof value !== "string") {
+      return [];
+    }
+    const logicalKey = envVarToLogicalKey(envVar, mapping);
+    if (!logicalKey) {
+      return [];
+    }
+    return [
+      {
+        key: logicalKey,
+        value,
+        namespace: logicalKey.startsWith("secret.") ? "secret" : "value",
+        sourceId: "process-env",
+        pluginId: PROCESS_ENV_PLUGIN_ID,
+        workspaceId,
+        origin: {
+          envVar
+        }
+      }
+    ];
+  });
+}
+function processNamespaceEntriesFromContext(env, workspaceId = "default") {
+  const envEntries = Object.entries(env).filter((entry) => typeof entry[1] === "string").filter(([envVar]) => !PROCESS_GRAPH_OMIT.has(envVar)).map(([envVar, value]) => ({
+    key: `process.env.${envVar}`,
+    value,
+    namespace: "process",
+    sourceId: "process-runtime",
+    pluginId: PROCESS_ENV_PLUGIN_ID,
+    workspaceId,
+    origin: {
+      envVar
+    }
+  }));
+  const runtimeEntries = [
+    {
+      key: "process.cwd",
+      value: process.cwd(),
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.platform",
+      value: process.platform,
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.arch",
+      value: process.arch,
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.node.version",
+      value: process.version,
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.args.raw",
+      value: process.argv.slice(2),
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    }
+  ];
+  return [...runtimeEntries, ...envEntries];
+}
+function createProcessEnvPlugin() {
+  return {
+    id: "process-env",
+    kind: "loader",
+    async load(context) {
+      const config = context.manifestConfig;
+      const env = context.processEnv ?? process.env;
+      return [
+        ...processEnvEntriesFromObject(
+          env,
+          config.envMapping,
+          context.workspace.workspaceId
+        ),
+        ...processNamespaceEntriesFromContext(env, context.workspace.workspaceId)
+      ];
+    }
+  };
+}
+
+export {
+  processEnvEntriesFromObject,
+  processNamespaceEntriesFromContext,
+  createProcessEnvPlugin
+};

package/dist/{chunk-OWUZQ4OH.js → chunk-ZTPSFXWP.js}

@@ -1,6 +1,6 @@
 import {
   joinConfigPath
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // ../../plugins/cli-args/src/index.ts
 var CLI_ARGS_PLUGIN_ID = "@kitsy/cnos/plugins/cli-args";