@kitsy/cnos 1.3.0 → 1.5.0

package/README.md

@@ -19,4 +19,4 @@ CLI-oriented storage/export rules to be aware of:
 - shell env export comes from explicit `envMapping.explicit`
 - local secret material lives outside the repo in encrypted vault storage under `~/.cnos/secrets`
 
-Use `@kitsy/cnos-vite` for Vite projects and `@kitsy/cnos-next` for Next.js projects when you want CNOS public values projected into framework-native env surfaces and embedded for `@kitsy/cnos/browser`.
+Use `@kitsy/cnos-vite` for Vite projects, `@kitsy/cnos-next` for Next.js projects, and `@kitsy/cnos-webpack` for webpack/static bundles when you want CNOS public values projected into framework-native env surfaces and embedded for `@kitsy/cnos/browser`.

package/dist/build/index.cjs

@@ -30,7 +30,9 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/build/index.ts
 var build_exports = {};
 __export(build_exports, {
-  resolveBrowserData: () => resolveBrowserData
+  resolveBrowserData: () => resolveBrowserData,
+  resolveFrameworkEnv: () => resolveFrameworkEnv,
+  toFrameworkEnv: () => toFrameworkEnv
 });
 module.exports = __toCommonJS(build_exports);
 
@@ -294,6 +296,11 @@ var DEFAULT_NAMESPACES = {
     shareable: false,
     readonly: true
   },
+  process: {
+    kind: "system",
+    shareable: false,
+    readonly: true
+  },
   public: {
     kind: "projection",
     source: "promote",
@@ -953,12 +960,15 @@ async function exists2(targetPath) {
     return false;
   }
 }
-async function resolveLocalWorkspaceRoot(manifestRoot, workspaceId) {
+async function resolveLocalWorkspaceRoot(manifestRoot, workspaceId, manifest) {
   const workspaceRoot = import_node_path5.default.join(manifestRoot, "workspaces", workspaceId);
   if (await exists2(workspaceRoot)) {
     return workspaceRoot;
   }
-  const legacyMarkers = ["values", "secrets", "env", "profiles"].map(
+  const customDataNamespaceRoots = Object.entries(manifest.namespaces).filter(
+    ([namespace, definition]) => namespace !== "value" && namespace !== "secret" && definition.kind === "data" && !definition.sensitive
+  ).map(([namespace]) => namespace);
+  const legacyMarkers = ["values", "secrets", "env", "profiles", ...customDataNamespaceRoots].map(
     (segment) => import_node_path5.default.join(manifestRoot, segment)
   );
   if ((await Promise.all(legacyMarkers.map((marker) => exists2(marker)))).some(Boolean)) {
@@ -1045,7 +1055,7 @@ async function resolveWorkspaceContext(manifest, options) {
     workspaceRoots.push({
       scope: "local",
       workspaceId: chainWorkspaceId,
-      path: await resolveLocalWorkspaceRoot(options.manifestRoot, chainWorkspaceId)
+      path: await resolveLocalWorkspaceRoot(options.manifestRoot, chainWorkspaceId, manifest)
     });
   }
   return {
@@ -1210,6 +1220,7 @@ async function runPipeline(options) {
   const collectedEntries = await Promise.all(
     options.plugins.map(
       (plugin) => plugin.load({
+        manifest: options.manifest,
         manifestConfig: {
           ...options.manifest.sources[plugin.id] ?? {},
           envMapping: options.manifest.envMapping
@@ -2308,7 +2319,7 @@ function envVarToLogicalKey(envVar, config = {}) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos",
-  version: "1.3.0",
+  version: "1.5.0",
   description: "Batteries-included CNOS runtime package wired with the official plugins.",
   type: "module",
   main: "./dist/index.cjs",
@@ -2782,11 +2793,30 @@ function createFilesystemValuesPlugin() {
         sourceRoot,
         context.profileActivation.values
       );
+      const customNamespaces = Object.entries(context.manifest.namespaces).filter(
+        ([namespace, definition]) => namespace !== "value" && namespace !== "secret" && definition.kind === "data" && !definition.sensitive
+      ).map(([namespace]) => namespace);
       const entries = [];
       for (const file of files) {
         const document = await (0, import_promises13.readFile)(file.absolutePath, "utf8");
         entries.push(...filesystemValuesReader(file.relativePath, document, file.workspaceId));
       }
+      for (const namespace of customNamespaces) {
+        const layers = [
+          namespace,
+          ...context.profileChain.filter((profile) => profile !== "base").map((profile) => `profiles/${profile}/${namespace}`)
+        ];
+        const namespaceFiles = await collectFilesystemLayerFiles(
+          context.manifestRoot,
+          context.workspace.workspaceRoots,
+          sourceRoot,
+          layers
+        );
+        for (const file of namespaceFiles) {
+          const document = await (0, import_promises13.readFile)(file.absolutePath, "utf8");
+          entries.push(...yamlObjectToEntries(document, file.relativePath, namespace, "filesystem-values", file.workspaceId));
+        }
+      }
       return entries;
     }
   };
@@ -2794,6 +2824,11 @@ function createFilesystemValuesPlugin() {
 
 // ../../plugins/process-env/src/index.ts
 var PROCESS_ENV_PLUGIN_ID = "@kitsy/cnos/plugins/process-env";
+var PROCESS_GRAPH_OMIT = /* @__PURE__ */ new Set([
+  "__CNOS_GRAPH__",
+  "__CNOS_SECRET_PAYLOAD__",
+  "__CNOS_SESSION_KEY__"
+]);
 function processEnvEntriesFromObject(env, mapping = {}, workspaceId = "default") {
   return Object.entries(env).flatMap(([envVar, value]) => {
     if (typeof value !== "string") {
@@ -2818,17 +2853,77 @@ function processEnvEntriesFromObject(env, mapping = {}, workspaceId = "default")
     ];
   });
 }
+function processNamespaceEntriesFromContext(env, workspaceId = "default") {
+  const envEntries = Object.entries(env).filter((entry) => typeof entry[1] === "string").filter(([envVar]) => !PROCESS_GRAPH_OMIT.has(envVar)).map(([envVar, value]) => ({
+    key: `process.env.${envVar}`,
+    value,
+    namespace: "process",
+    sourceId: "process-runtime",
+    pluginId: PROCESS_ENV_PLUGIN_ID,
+    workspaceId,
+    origin: {
+      envVar
+    }
+  }));
+  const runtimeEntries = [
+    {
+      key: "process.cwd",
+      value: process.cwd(),
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.platform",
+      value: process.platform,
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.arch",
+      value: process.arch,
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.node.version",
+      value: process.version,
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    },
+    {
+      key: "process.args.raw",
+      value: process.argv.slice(2),
+      namespace: "process",
+      sourceId: "process-runtime",
+      pluginId: PROCESS_ENV_PLUGIN_ID,
+      workspaceId
+    }
+  ];
+  return [...runtimeEntries, ...envEntries];
+}
 function createProcessEnvPlugin() {
   return {
     id: "process-env",
     kind: "loader",
     async load(context) {
       const config = context.manifestConfig;
-      return processEnvEntriesFromObject(
-        context.processEnv ?? process.env,
-        config.envMapping,
-        context.workspace.workspaceId
-      );
+      const env = context.processEnv ?? process.env;
+      return [
+        ...processEnvEntriesFromObject(
+          env,
+          config.envMapping,
+          context.workspace.workspaceId
+        ),
+        ...processNamespaceEntriesFromContext(env, context.workspace.workspaceId)
+      ];
     }
   };
 }
@@ -2883,7 +2978,54 @@ async function resolveBrowserData(options = {}) {
   }
   return browserData;
 }
+function toScreamingSnakeSegment(segment) {
+  return segment.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/[^A-Za-z0-9]+/g, "_").replace(/_+/g, "_").replace(/^_+|_+$/g, "").toUpperCase();
+}
+function toScreamingSnake(path12) {
+  return path12.split(".").map((segment) => toScreamingSnakeSegment(segment)).filter(Boolean).join("_");
+}
+function stripPublicNamespace(key) {
+  return key.startsWith("public.") ? key.slice("public.".length) : key;
+}
+function resolveFrameworkPrefix(framework, prefix) {
+  if (prefix !== void 0) {
+    return prefix;
+  }
+  switch (framework) {
+    case "vite":
+      return "VITE_";
+    case "next":
+      return "NEXT_PUBLIC_";
+    case "webpack":
+    case "generic":
+      return "";
+    default:
+      return "";
+  }
+}
+function toFrameworkEnv(browserData, framework = "generic", options = {}) {
+  const resolvedPrefix = resolveFrameworkPrefix(framework, options.prefix);
+  return Object.fromEntries(
+    Object.entries(browserData).sort(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [
+      `${resolvedPrefix}${toScreamingSnake(stripPublicNamespace(key))}`,
+      String(value)
+    ])
+  );
+}
+async function resolveFrameworkEnv(options = {}, framework = "generic", envOptions = {}) {
+  if (framework === "generic") {
+    const browserData = await resolveBrowserData(options);
+    return toFrameworkEnv(browserData, framework, envOptions);
+  }
+  const runtime = await createCnos2(options);
+  return runtime.toPublicEnv({
+    framework,
+    ...envOptions.prefix ? { prefix: envOptions.prefix } : {}
+  });
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  resolveBrowserData
+  resolveBrowserData,
+  resolveFrameworkEnv,
+  toFrameworkEnv
 });

package/dist/build/index.d.cts

@@ -1,5 +1,13 @@
-import { C as CnosCreateOptions } from '../plugin-CyNkf7Dm.cjs';
+import { C as CnosCreateOptions } from '../plugin-B4xwySxw.cjs';
 
-declare function resolveBrowserData(options?: CnosCreateOptions): Promise<Record<string, unknown>>;
+type BrowserDataMap = Record<string, unknown>;
+type FrameworkEnvTarget = 'generic' | 'vite' | 'next' | 'webpack' | (string & {});
+declare function resolveBrowserData(options?: CnosCreateOptions): Promise<BrowserDataMap>;
+declare function toFrameworkEnv(browserData: BrowserDataMap, framework?: FrameworkEnvTarget, options?: {
+    prefix?: string;
+}): Record<string, string>;
+declare function resolveFrameworkEnv(options?: CnosCreateOptions, framework?: FrameworkEnvTarget, envOptions?: {
+    prefix?: string;
+}): Promise<Record<string, string>>;
 
-export { resolveBrowserData };
+export { type BrowserDataMap, type FrameworkEnvTarget, resolveBrowserData, resolveFrameworkEnv, toFrameworkEnv };

package/dist/build/index.d.ts

@@ -1,5 +1,13 @@
-import { C as CnosCreateOptions } from '../plugin-CyNkf7Dm.js';
+import { C as CnosCreateOptions } from '../plugin-B4xwySxw.js';
 
-declare function resolveBrowserData(options?: CnosCreateOptions): Promise<Record<string, unknown>>;
+type BrowserDataMap = Record<string, unknown>;
+type FrameworkEnvTarget = 'generic' | 'vite' | 'next' | 'webpack' | (string & {});
+declare function resolveBrowserData(options?: CnosCreateOptions): Promise<BrowserDataMap>;
+declare function toFrameworkEnv(browserData: BrowserDataMap, framework?: FrameworkEnvTarget, options?: {
+    prefix?: string;
+}): Record<string, string>;
+declare function resolveFrameworkEnv(options?: CnosCreateOptions, framework?: FrameworkEnvTarget, envOptions?: {
+    prefix?: string;
+}): Promise<Record<string, string>>;
 
-export { resolveBrowserData };
+export { type BrowserDataMap, type FrameworkEnvTarget, resolveBrowserData, resolveFrameworkEnv, toFrameworkEnv };

package/dist/build/index.js

@@ -1,13 +1,13 @@
 import {
   createCnos
-} from "../chunk-EDCLLCNL.js";
-import "../chunk-OOKFRWTN.js";
-import "../chunk-FC3IV6A7.js";
-import "../chunk-CDXJISGB.js";
-import "../chunk-JDII6O72.js";
-import "../chunk-OWUZQ4OH.js";
-import "../chunk-QTKXPY3N.js";
-import "../chunk-DRKDNY4I.js";
+} from "../chunk-RYGSG3GR.js";
+import "../chunk-J4K4JUJL.js";
+import "../chunk-T6Y57KTT.js";
+import "../chunk-WCHX2QFY.js";
+import "../chunk-FWJC4Y2D.js";
+import "../chunk-ZTPSFXWP.js";
+import "../chunk-HMM76UYZ.js";
+import "../chunk-APIU4GTB.js";
 
 // src/build/index.ts
 async function resolveBrowserData(options = {}) {
@@ -21,6 +21,53 @@ async function resolveBrowserData(options = {}) {
   }
   return browserData;
 }
+function toScreamingSnakeSegment(segment) {
+  return segment.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/[^A-Za-z0-9]+/g, "_").replace(/_+/g, "_").replace(/^_+|_+$/g, "").toUpperCase();
+}
+function toScreamingSnake(path) {
+  return path.split(".").map((segment) => toScreamingSnakeSegment(segment)).filter(Boolean).join("_");
+}
+function stripPublicNamespace(key) {
+  return key.startsWith("public.") ? key.slice("public.".length) : key;
+}
+function resolveFrameworkPrefix(framework, prefix) {
+  if (prefix !== void 0) {
+    return prefix;
+  }
+  switch (framework) {
+    case "vite":
+      return "VITE_";
+    case "next":
+      return "NEXT_PUBLIC_";
+    case "webpack":
+    case "generic":
+      return "";
+    default:
+      return "";
+  }
+}
+function toFrameworkEnv(browserData, framework = "generic", options = {}) {
+  const resolvedPrefix = resolveFrameworkPrefix(framework, options.prefix);
+  return Object.fromEntries(
+    Object.entries(browserData).sort(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [
+      `${resolvedPrefix}${toScreamingSnake(stripPublicNamespace(key))}`,
+      String(value)
+    ])
+  );
+}
+async function resolveFrameworkEnv(options = {}, framework = "generic", envOptions = {}) {
+  if (framework === "generic") {
+    const browserData = await resolveBrowserData(options);
+    return toFrameworkEnv(browserData, framework, envOptions);
+  }
+  const runtime = await createCnos(options);
+  return runtime.toPublicEnv({
+    framework,
+    ...envOptions.prefix ? { prefix: envOptions.prefix } : {}
+  });
+}
 export {
-  resolveBrowserData
+  resolveBrowserData,
+  resolveFrameworkEnv,
+  toFrameworkEnv
 };

package/dist/{chunk-DRKDNY4I.js → chunk-APIU4GTB.js}

@@ -234,7 +234,7 @@ function resolveWorkspaceScopedPath(workspaceRoot, template, tokens) {
   return path.resolve(workspaceRoot, interpolated);
 }
 function resolveNamespaceDirectory(workspaceRoot, namespace, profile) {
-  const rootFolder = namespace === "value" ? "values" : "secrets";
+  const rootFolder = namespace === "value" ? "values" : namespace === "secret" ? "secrets" : namespace;
   if (profile && profile !== "base") {
     return path.resolve(workspaceRoot, "profiles", profile, rootFolder);
   }
@@ -303,6 +303,11 @@ var DEFAULT_NAMESPACES = {
     shareable: false,
     readonly: true
   },
+  process: {
+    kind: "system",
+    shareable: false,
+    readonly: true
+  },
   public: {
     kind: "projection",
     source: "promote",
@@ -1997,12 +2002,15 @@ async function exists3(targetPath) {
     return false;
   }
 }
-async function resolveLocalWorkspaceRoot(manifestRoot, workspaceId) {
+async function resolveLocalWorkspaceRoot(manifestRoot, workspaceId, manifest) {
   const workspaceRoot = path9.join(manifestRoot, "workspaces", workspaceId);
   if (await exists3(workspaceRoot)) {
     return workspaceRoot;
   }
-  const legacyMarkers = ["values", "secrets", "env", "profiles"].map(
+  const customDataNamespaceRoots = Object.entries(manifest.namespaces).filter(
+    ([namespace, definition]) => namespace !== "value" && namespace !== "secret" && definition.kind === "data" && !definition.sensitive
+  ).map(([namespace]) => namespace);
+  const legacyMarkers = ["values", "secrets", "env", "profiles", ...customDataNamespaceRoots].map(
     (segment) => path9.join(manifestRoot, segment)
   );
   if ((await Promise.all(legacyMarkers.map((marker) => exists3(marker)))).some(Boolean)) {
@@ -2089,7 +2097,7 @@ async function resolveWorkspaceContext(manifest, options) {
     workspaceRoots.push({
       scope: "local",
       workspaceId: chainWorkspaceId,
-      path: await resolveLocalWorkspaceRoot(options.manifestRoot, chainWorkspaceId)
+      path: await resolveLocalWorkspaceRoot(options.manifestRoot, chainWorkspaceId, manifest)
     });
   }
   return {
@@ -2254,6 +2262,7 @@ async function runPipeline(options) {
   const collectedEntries = await Promise.all(
     options.plugins.map(
       (plugin) => plugin.load({
+        manifest: options.manifest,
         manifestConfig: {
           ...options.manifest.sources[plugin.id] ?? {},
           envMapping: options.manifest.envMapping
@@ -2571,6 +2580,7 @@ export {
   parseYaml,
   stringifyYaml,
   loadManifest,
+  getNamespaceDefinition,
   ensureProjectionAllowed,
   applySchemaRules,
   writeVaultSessionKey,

package/dist/{chunk-K6QYI2T4.js → chunk-EQSKV3DP.js}

@@ -1,6 +1,6 @@
 import {
   isSecretReference
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // src/runtime/bootstrap.ts
 import { createCipheriv, createDecipheriv, randomBytes } from "crypto";

package/dist/{chunk-JDII6O72.js → chunk-FWJC4Y2D.js}

@@ -1,6 +1,6 @@
 import {
   applySchemaRules
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // ../../plugins/basic-schema/src/index.ts
 function createBasicSchemaPlugin() {

package/dist/{chunk-QTKXPY3N.js → chunk-HMM76UYZ.js}

@@ -2,7 +2,7 @@ import {
   envVarToLogicalKey,
   resolveWorkspaceScopedPath,
   toPortablePath
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // ../../plugins/dotenv/src/index.ts
 import { readFile } from "fs/promises";

package/dist/{chunk-OOKFRWTN.js → chunk-J4K4JUJL.js}

@@ -1,7 +1,7 @@
 import {
   toEnv,
   toPublicEnv
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // ../../plugins/env-export/src/index.ts
 function createEnvExportPlugin() {

package/dist/{chunk-EDCLLCNL.js → chunk-RYGSG3GR.js}

@@ -1,27 +1,27 @@
 import {
   createEnvExportPlugin,
   createPublicEnvExportPlugin
-} from "./chunk-OOKFRWTN.js";
+} from "./chunk-J4K4JUJL.js";
 import {
   createFilesystemSecretsPlugin,
   createFilesystemValuesPlugin
-} from "./chunk-FC3IV6A7.js";
+} from "./chunk-T6Y57KTT.js";
 import {
   createProcessEnvPlugin
-} from "./chunk-CDXJISGB.js";
+} from "./chunk-WCHX2QFY.js";
 import {
   createBasicSchemaPlugin
-} from "./chunk-JDII6O72.js";
+} from "./chunk-FWJC4Y2D.js";
 import {
   createCliArgsPlugin
-} from "./chunk-OWUZQ4OH.js";
+} from "./chunk-ZTPSFXWP.js";
 import {
   createDotenvPlugin
-} from "./chunk-QTKXPY3N.js";
+} from "./chunk-HMM76UYZ.js";
 import {
   createCnos,
   createProvenanceInspector
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // src/defaultPlugins.ts
 function defaultPlugins() {
@@ -68,7 +68,7 @@ function setBootstrappedSecretHydrationRequired(value) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos",
-  version: "1.3.0",
+  version: "1.5.0",
   description: "Batteries-included CNOS runtime package wired with the official plugins.",
   type: "module",
   main: "./dist/index.cjs",

package/dist/{chunk-FC3IV6A7.js → chunk-T6Y57KTT.js}

@@ -3,7 +3,7 @@ import {
   isSecretReference,
   parseYaml,
   toPortablePath
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // ../../plugins/filesystem/src/helpers.ts
 import { readdir } from "fs/promises";
@@ -155,11 +155,30 @@ function createFilesystemValuesPlugin() {
         sourceRoot,
         context.profileActivation.values
       );
+      const customNamespaces = Object.entries(context.manifest.namespaces).filter(
+        ([namespace, definition]) => namespace !== "value" && namespace !== "secret" && definition.kind === "data" && !definition.sensitive
+      ).map(([namespace]) => namespace);
       const entries = [];
       for (const file of files) {
         const document = await readFile2(file.absolutePath, "utf8");
         entries.push(...filesystemValuesReader(file.relativePath, document, file.workspaceId));
       }
+      for (const namespace of customNamespaces) {
+        const layers = [
+          namespace,
+          ...context.profileChain.filter((profile) => profile !== "base").map((profile) => `profiles/${profile}/${namespace}`)
+        ];
+        const namespaceFiles = await collectFilesystemLayerFiles(
+          context.manifestRoot,
+          context.workspace.workspaceRoots,
+          sourceRoot,
+          layers
+        );
+        for (const file of namespaceFiles) {
+          const document = await readFile2(file.absolutePath, "utf8");
+          entries.push(...yamlObjectToEntries(document, file.relativePath, namespace, "filesystem-values", file.workspaceId));
+        }
+      }
       return entries;
     }
   };

package/dist/{chunk-E7SE6N26.js → chunk-TO76YYS4.js}

@@ -1,7 +1,7 @@
 import {
   graphRequiresSecretHydration,
   readRuntimeGraphFromEnv
-} from "./chunk-K6QYI2T4.js";
+} from "./chunk-EQSKV3DP.js";
 import {
   createCnos,
   getBootstrappedSecretHydrationRequired,
@@ -10,7 +10,7 @@ import {
   setBootstrappedSecretHydrationRequired,
   setSingletonReady,
   setSingletonRuntime
-} from "./chunk-EDCLLCNL.js";
+} from "./chunk-RYGSG3GR.js";
 import {
   inspectValue,
   readOrValue,
@@ -20,7 +20,7 @@ import {
   toLogicalKey,
   toNamespaceObject,
   toPublicEnv
-} from "./chunk-DRKDNY4I.js";
+} from "./chunk-APIU4GTB.js";
 
 // src/runtime/index.ts
 var NOT_READY_MESSAGE = "CNOS not initialized. Call await cnos.ready() or use cnos run.";