@kitsy/cnos 1.9.2 → 1.10.0

package/dist/internal.js

@@ -11,7 +11,7 @@ import {
   serializeRuntimeGraph,
   serializeSecretPayload,
   serializeServerProjection
-} from "./chunk-NVFACB64.js";
+} from "./chunk-UKNL2Y4N.js";
 import {
   CnosAuthenticationError,
   CnosSecurityError,
@@ -64,7 +64,7 @@ import {
   writeLocalSecret,
   writeRemoteRootCacheMetadata,
   writeVaultSessionKey
-} from "./chunk-7KVM5PUW.js";
+} from "./chunk-MQ4WG3K6.js";
 
 // src/codegen/generateTypes.ts
 function toPascalCase(value) {
@@ -269,7 +269,7 @@ async function watchSchema(options = {}) {
   return watcher;
 }
 
-// src/drift/compareSchemaToGraph.ts
+// src/spec/compareSpecToGraph.ts
 function describeValueType(value) {
   if (Array.isArray(value)) {
     return "array";
@@ -292,6 +292,17 @@ function matchesType(value, type) {
       return typeof value === type;
   }
 }
+function enumMatches(value, allowed) {
+  const serialized = JSON.stringify(value);
+  return allowed.some((candidate) => JSON.stringify(candidate) === serialized);
+}
+function matchesPattern(pattern, value) {
+  try {
+    return new RegExp(pattern).test(value);
+  } catch {
+    return false;
+  }
+}
 function isSchemaDefault(entry) {
   return entry.winner.metadata?.schemaDefault === true;
 }
@@ -301,34 +312,53 @@ function shouldTrackKey(key) {
 function isTransientRuntimeSource(entry) {
   return entry.winner.sourceId === "process-env" || entry.winner.sourceId === "cli-args";
 }
-function compareSchemaToGraph(runtime) {
+function buildSummary(issues) {
+  return {
+    missingRequired: issues.filter((issue) => issue.status === "missing_required").length,
+    undeclared: issues.filter((issue) => issue.status === "undeclared").length,
+    typeMismatch: issues.filter((issue) => issue.status === "type_mismatch").length,
+    enumMismatch: issues.filter((issue) => issue.status === "enum_mismatch").length,
+    patternMismatch: issues.filter((issue) => issue.status === "pattern_mismatch").length,
+    defaultApplied: issues.filter((issue) => issue.status === "default_applied").length,
+    deprecatedInUse: issues.filter((issue) => issue.status === "deprecated_in_use").length
+  };
+}
+function compareSpecToGraph(runtime) {
   const schema = runtime.manifest.schema;
-  const missing = [];
-  const mismatches = [];
-  const defaultsApplied = [];
+  const issues = [];
   for (const [key, rule] of Object.entries(schema).sort(([left], [right]) => left.localeCompare(right))) {
     const entry = runtime.graph.entries.get(key);
+    const summary = rule.summary;
     if (!entry) {
       if (rule.required && rule.default === void 0) {
-        missing.push({
+        issues.push({
           key,
+          status: "missing_required",
           ...rule.type ? {
             expectedType: rule.type
+          } : {},
+          ...summary ? {
+            summary
           } : {}
         });
       }
       continue;
     }
     if (isSchemaDefault(entry)) {
-      defaultsApplied.push({
+      issues.push({
         key,
-        value: entry.value
+        status: "default_applied",
+        value: entry.value,
+        ...summary ? {
+          summary
+        } : {}
       });
     }
     const actualValue = entry.winner.value;
     if (!matchesType(actualValue, rule.type)) {
-      mismatches.push({
+      issues.push({
         key,
+        status: "type_mismatch",
         ...rule.type ? {
           expectedType: rule.type
         } : {},
@@ -336,26 +366,113 @@ function compareSchemaToGraph(runtime) {
         value: actualValue,
         ...entry.winner.origin?.file ? {
           sourceFile: entry.winner.origin.file
+        } : {},
+        ...summary ? {
+          summary
+        } : {}
+      });
+    }
+    if (rule.enum && !enumMatches(actualValue, rule.enum)) {
+      issues.push({
+        key,
+        status: "enum_mismatch",
+        value: actualValue,
+        ...summary ? {
+          summary
+        } : {}
+      });
+    }
+    if (rule.pattern) {
+      if (typeof actualValue !== "string" || !matchesPattern(rule.pattern, actualValue)) {
+        issues.push({
+          key,
+          status: "pattern_mismatch",
+          value: actualValue,
+          pattern: rule.pattern,
+          ...summary ? {
+            summary
+          } : {}
+        });
+      }
+    }
+    if (rule.deprecated) {
+      issues.push({
+        key,
+        status: "deprecated_in_use",
+        value: actualValue,
+        ...summary ? {
+          summary
         } : {}
       });
     }
   }
-  const undeclared = Array.from(runtime.graph.entries.values()).filter(
+  const undeclaredIssues = Array.from(runtime.graph.entries.values()).filter(
     (entry) => shouldTrackKey(entry.key) && !schema[entry.key] && !isSchemaDefault(entry) && !isTransientRuntimeSource(entry)
-  ).map((entry) => {
-    const issue = {
-      key: entry.key,
-      value: entry.winner.value,
-      actualType: describeValueType(entry.winner.value)
-    };
-    if (entry.winner.origin?.file) {
-      issue.sourceFile = entry.winner.origin.file;
-    }
-    return issue;
-  }).sort((left, right) => left.key.localeCompare(right.key));
+  ).map((entry) => ({
+    key: entry.key,
+    status: "undeclared",
+    value: entry.winner.value,
+    actualType: describeValueType(entry.winner.value),
+    ...entry.winner.origin?.file ? {
+      sourceFile: entry.winner.origin.file
+    } : {}
+  })).sort((left, right) => left.key.localeCompare(right.key));
+  const allIssues = [...issues, ...undeclaredIssues].sort((left, right) => left.key.localeCompare(right.key));
   return {
     profile: runtime.graph.profile,
     workspace: runtime.graph.workspace.workspaceId,
+    summary: buildSummary(allIssues),
+    issues: allIssues
+  };
+}
+
+// src/drift/compareSchemaToGraph.ts
+function compareSchemaToGraph(runtime) {
+  const report = compareSpecToGraph(runtime);
+  const missing = report.issues.filter((issue) => issue.status === "missing_required").map(
+    (issue) => ({
+      key: issue.key,
+      ...issue.expectedType ? {
+        expectedType: issue.expectedType
+      } : {}
+    })
+  );
+  const undeclared = report.issues.filter((issue) => issue.status === "undeclared").map(
+    (issue) => ({
+      key: issue.key,
+      value: issue.value,
+      ...issue.actualType ? {
+        actualType: issue.actualType
+      } : {},
+      ...issue.sourceFile ? {
+        sourceFile: issue.sourceFile
+      } : {}
+    })
+  );
+  const mismatches = report.issues.filter((issue) => issue.status === "type_mismatch").map(
+    (issue) => ({
+      key: issue.key,
+      ...issue.expectedType ? {
+        expectedType: issue.expectedType
+      } : {},
+      ...issue.actualType ? {
+        actualType: issue.actualType
+      } : {},
+      value: issue.value,
+      ...issue.sourceFile ? {
+        sourceFile: issue.sourceFile
+      } : {}
+    })
+  );
+  const defaultsApplied = report.issues.filter((issue) => issue.status === "default_applied").map(
+    (issue) => ({
+      key: issue.key,
+      value: issue.value
+    })
+  );
+  return {
+    profile: report.profile,
+    workspace: report.workspace,
     missing,
     undeclared,
     mismatches,
@@ -666,6 +783,7 @@ export {
   clearAllVaultSessionKeys,
   clearVaultSessionKey,
   compareSchemaToGraph,
+  compareSpecToGraph,
   createRemoteRootCacheKey,
   createSecretVault,
   createSecretVaultProvider,

package/dist/plugin/basic-schema.cjs

@@ -165,6 +165,13 @@ function enumMatches(value, allowed) {
   const serialized = JSON.stringify(value);
   return allowed.some((candidate) => JSON.stringify(candidate) === serialized);
 }
+function testPattern(pattern, value) {
+  try {
+    return new RegExp(pattern).test(value);
+  } catch {
+    return false;
+  }
+}
 function applySchemaRules(graph, schema) {
   const nextEntries = new Map(graph.entries);
   const issues = [];
@@ -231,11 +238,11 @@ function applySchemaRules(graph, schema) {
           key,
           message: `Config key ${key} must be a string to match pattern ${rule.pattern}`
         });
-      } else if (!new RegExp(rule.pattern).test(coercedValue)) {
+      } else if (!testPattern(rule.pattern, coercedValue)) {
         issues.push({
           code: "schema.pattern",
           key,
-          message: `Config key ${key} does not match pattern ${rule.pattern}`
+          message: `Config key ${key} does not match pattern ${rule.pattern} (or the pattern is invalid).`
         });
       }
     }

package/dist/plugin/basic-schema.d.cts

@@ -1,4 +1,4 @@
-import { V as ValidatorPlugin } from '../core-zDTUSVx9.cjs';
+import { V as ValidatorPlugin } from '../core-Ud1o2MBn.cjs';
 
 declare function createBasicSchemaPlugin(): ValidatorPlugin;
 

package/dist/plugin/basic-schema.d.ts

@@ -1,4 +1,4 @@
-import { V as ValidatorPlugin } from '../core-zDTUSVx9.js';
+import { V as ValidatorPlugin } from '../core-Ud1o2MBn.js';
 
 declare function createBasicSchemaPlugin(): ValidatorPlugin;
 

package/dist/plugin/basic-schema.js

@@ -1,7 +1,7 @@
 import {
   createBasicSchemaPlugin
-} from "../chunk-6QQPHDUI.js";
-import "../chunk-7KVM5PUW.js";
+} from "../chunk-A5U7EZCJ.js";
+import "../chunk-MQ4WG3K6.js";
 export {
   createBasicSchemaPlugin
 };

package/dist/plugin/cli-args.d.cts

@@ -1,4 +1,4 @@
-import { a as ConfigEntry, L as LoaderPlugin } from '../core-zDTUSVx9.cjs';
+import { a as ConfigEntry, L as LoaderPlugin } from '../core-Ud1o2MBn.cjs';
 
 interface ParsedCliArg {
     key: string;

package/dist/plugin/cli-args.d.ts

@@ -1,4 +1,4 @@
-import { a as ConfigEntry, L as LoaderPlugin } from '../core-zDTUSVx9.js';
+import { a as ConfigEntry, L as LoaderPlugin } from '../core-Ud1o2MBn.js';
 
 interface ParsedCliArg {
     key: string;

package/dist/plugin/cli-args.js

@@ -2,8 +2,8 @@ import {
   cliArgEntriesFromArgs,
   createCliArgsPlugin,
   parseCliArgs
-} from "../chunk-7JZO6XN3.js";
-import "../chunk-7KVM5PUW.js";
+} from "../chunk-FHXLOWAB.js";
+import "../chunk-MQ4WG3K6.js";
 export {
   cliArgEntriesFromArgs,
   createCliArgsPlugin,

package/dist/plugin/dotenv.cjs

@@ -186,9 +186,30 @@ var DOTENV_PLUGIN_ID = "@kitsy/cnos/plugins/dotenv";
 function parseDoubleQuoted(value) {
   return value.replace(/\\n/g, "\n").replace(/\\r/g, "\r").replace(/\\t/g, "	").replace(/\\"/g, '"').replace(/\\\\/g, "\\");
 }
+function isEscapedCharacter(value, index) {
+  let slashCount = 0;
+  for (let cursor = index - 1; cursor >= 0 && value[cursor] === "\\"; cursor -= 1) {
+    slashCount += 1;
+  }
+  return slashCount % 2 === 1;
+}
+function findClosingQuote(value, quote) {
+  for (let index = 0; index < value.length; index += 1) {
+    if (value[index] !== quote) {
+      continue;
+    }
+    if (quote === '"' && isEscapedCharacter(value, index)) {
+      continue;
+    }
+    return index;
+  }
+  return -1;
+}
 function parseDotenv(document) {
   const parsed = {};
-  for (const rawLine of document.split(/\r?\n/)) {
+  const lines = document.split(/\r?\n/);
+  for (let lineIndex = 0; lineIndex < lines.length; lineIndex += 1) {
+    const rawLine = lines[lineIndex] ?? "";
     const line = rawLine.trim();
     if (!line || line.startsWith("#")) {
       continue;
@@ -203,10 +224,18 @@ function parseDotenv(document) {
     if (!envVar) {
       continue;
     }
-    if (value.startsWith('"') && value.endsWith('"')) {
-      value = parseDoubleQuoted(value.slice(1, -1));
-    } else if (value.startsWith("'") && value.endsWith("'")) {
-      value = value.slice(1, -1);
+    if (value.startsWith('"') || value.startsWith("'")) {
+      const quote = value.startsWith('"') ? '"' : "'";
+      let quotedContent = value.slice(1);
+      let closingIndex = findClosingQuote(quotedContent, quote);
+      while (closingIndex === -1 && lineIndex < lines.length - 1) {
+        lineIndex += 1;
+        quotedContent = `${quotedContent}
+${lines[lineIndex] ?? ""}`;
+        closingIndex = findClosingQuote(quotedContent, quote);
+      }
+      const rawQuotedValue = closingIndex === -1 ? quotedContent : quotedContent.slice(0, closingIndex);
+      value = quote === '"' ? parseDoubleQuoted(rawQuotedValue) : rawQuotedValue;
     } else {
       value = value.replace(/\s+#.*$/, "").trim();
     }

package/dist/plugin/dotenv.d.cts

@@ -1,5 +1,5 @@
-import { L as LoaderPlugin, a as ConfigEntry } from '../core-zDTUSVx9.cjs';
-import { E as EnvMappingConfig } from '../envNaming-EFzezmB3.cjs';
+import { L as LoaderPlugin, a as ConfigEntry } from '../core-Ud1o2MBn.cjs';
+import { E as EnvMappingConfig } from '../envNaming-DxxqiGKN.cjs';
 
 declare function parseDotenv(document: string): Record<string, string>;
 declare function dotenvEntriesFromObject(values: Record<string, string>, mapping?: EnvMappingConfig, originFile?: string, workspaceId?: string): ConfigEntry[];

package/dist/plugin/dotenv.d.ts

@@ -1,5 +1,5 @@
-import { L as LoaderPlugin, a as ConfigEntry } from '../core-zDTUSVx9.js';
-import { E as EnvMappingConfig } from '../envNaming-BkorOKW_.js';
+import { L as LoaderPlugin, a as ConfigEntry } from '../core-Ud1o2MBn.js';
+import { E as EnvMappingConfig } from '../envNaming-CPwXl4I6.js';
 
 declare function parseDotenv(document: string): Record<string, string>;
 declare function dotenvEntriesFromObject(values: Record<string, string>, mapping?: EnvMappingConfig, originFile?: string, workspaceId?: string): ConfigEntry[];

package/dist/plugin/dotenv.js

@@ -2,8 +2,8 @@ import {
   createDotenvPlugin,
   dotenvEntriesFromObject,
   parseDotenv
-} from "../chunk-2JBA2LXU.js";
-import "../chunk-7KVM5PUW.js";
+} from "../chunk-3EZGPQCE.js";
+import "../chunk-MQ4WG3K6.js";
 export {
   createDotenvPlugin,
   dotenvEntriesFromObject,

package/dist/plugin/env-export.d.cts

@@ -1,5 +1,5 @@
-import { E as ExporterPlugin } from '../core-zDTUSVx9.cjs';
-export { t as toEnv, a as toPublicEnv } from '../toPublicEnv-Ds1DRwCX.cjs';
+import { E as ExporterPlugin } from '../core-Ud1o2MBn.cjs';
+export { t as toEnv, a as toPublicEnv } from '../toPublicEnv-fUZMRUOz.cjs';
 
 declare function createEnvExportPlugin(): ExporterPlugin;
 declare function createPublicEnvExportPlugin(): ExporterPlugin;

package/dist/plugin/env-export.d.ts

@@ -1,5 +1,5 @@
-import { E as ExporterPlugin } from '../core-zDTUSVx9.js';
-export { t as toEnv, a as toPublicEnv } from '../toPublicEnv-CT265rzS.js';
+import { E as ExporterPlugin } from '../core-Ud1o2MBn.js';
+export { t as toEnv, a as toPublicEnv } from '../toPublicEnv-C9wPSpRo.js';
 
 declare function createEnvExportPlugin(): ExporterPlugin;
 declare function createPublicEnvExportPlugin(): ExporterPlugin;

package/dist/plugin/env-export.js

@@ -1,11 +1,11 @@
 import {
   createEnvExportPlugin,
   createPublicEnvExportPlugin
-} from "../chunk-LURQ4LAK.js";
+} from "../chunk-RTHKUGJV.js";
 import {
   toEnv,
   toPublicEnv
-} from "../chunk-7KVM5PUW.js";
+} from "../chunk-MQ4WG3K6.js";
 export {
   createEnvExportPlugin,
   createPublicEnvExportPlugin,

package/dist/plugin/filesystem.d.cts

@@ -1,4 +1,4 @@
-import { L as LoaderPlugin, a as ConfigEntry, W as WorkspaceRoot, m as NamespaceName } from '../core-zDTUSVx9.cjs';
+import { L as LoaderPlugin, a as ConfigEntry, W as WorkspaceRoot, m as NamespaceName } from '../core-Ud1o2MBn.cjs';
 
 declare function filesystemSecretsReader(filePath: string, document: string, workspaceId?: string): ConfigEntry[];
 declare function createFilesystemSecretsPlugin(): LoaderPlugin;

package/dist/plugin/filesystem.d.ts

@@ -1,4 +1,4 @@
-import { L as LoaderPlugin, a as ConfigEntry, W as WorkspaceRoot, m as NamespaceName } from '../core-zDTUSVx9.js';
+import { L as LoaderPlugin, a as ConfigEntry, W as WorkspaceRoot, m as NamespaceName } from '../core-Ud1o2MBn.js';
 
 declare function filesystemSecretsReader(filePath: string, document: string, workspaceId?: string): ConfigEntry[];
 declare function createFilesystemSecretsPlugin(): LoaderPlugin;

package/dist/plugin/filesystem.js

@@ -5,8 +5,8 @@ import {
   filesystemSecretsReader,
   filesystemValuesReader,
   yamlObjectToEntries
-} from "../chunk-A2WG3ZKW.js";
-import "../chunk-7KVM5PUW.js";
+} from "../chunk-ESBHCFC6.js";
+import "../chunk-MQ4WG3K6.js";
 export {
   collectFilesystemLayerFiles,
   createFilesystemSecretsPlugin,

package/dist/plugin/process-env.d.cts

@@ -1,5 +1,5 @@
-import { L as LoaderPlugin, a as ConfigEntry } from '../core-zDTUSVx9.cjs';
-import { E as EnvMappingConfig } from '../envNaming-EFzezmB3.cjs';
+import { L as LoaderPlugin, a as ConfigEntry } from '../core-Ud1o2MBn.cjs';
+import { E as EnvMappingConfig } from '../envNaming-DxxqiGKN.cjs';
 
 declare function processEnvEntriesFromObject(env: Record<string, string | undefined>, mapping?: EnvMappingConfig, workspaceId?: string): ConfigEntry[];
 declare function processNamespaceEntriesFromContext(env: Record<string, string | undefined>, workspaceId?: string): ConfigEntry[];

package/dist/plugin/process-env.d.ts

@@ -1,5 +1,5 @@
-import { L as LoaderPlugin, a as ConfigEntry } from '../core-zDTUSVx9.js';
-import { E as EnvMappingConfig } from '../envNaming-BkorOKW_.js';
+import { L as LoaderPlugin, a as ConfigEntry } from '../core-Ud1o2MBn.js';
+import { E as EnvMappingConfig } from '../envNaming-CPwXl4I6.js';
 
 declare function processEnvEntriesFromObject(env: Record<string, string | undefined>, mapping?: EnvMappingConfig, workspaceId?: string): ConfigEntry[];
 declare function processNamespaceEntriesFromContext(env: Record<string, string | undefined>, workspaceId?: string): ConfigEntry[];

package/dist/plugin/process-env.js

@@ -2,8 +2,8 @@ import {
   createProcessEnvPlugin,
   processEnvEntriesFromObject,
   processNamespaceEntriesFromContext
-} from "../chunk-L7JVECPE.js";
-import "../chunk-7KVM5PUW.js";
+} from "../chunk-UGLATJJD.js";
+import "../chunk-MQ4WG3K6.js";
 export {
   createProcessEnvPlugin,
   processEnvEntriesFromObject,