@kitsy/cnos 1.9.2 → 1.11.0

package/dist/build/index.d.cts

@@ -1,4 +1,4 @@
-import { C as CnosCreateOptions, S as ServerProjection } from '../core-zDTUSVx9.cjs';
+import { C as CnosCreateOptions, S as ServerProjection } from '../core-BW8SLnRx.cjs';
 
 type BrowserDataMap = Record<string, unknown>;
 type FrameworkEnvTarget = 'generic' | 'vite' | 'next' | 'webpack' | (string & {});

package/dist/build/index.d.ts

@@ -1,4 +1,4 @@
-import { C as CnosCreateOptions, S as ServerProjection } from '../core-zDTUSVx9.js';
+import { C as CnosCreateOptions, S as ServerProjection } from '../core-BW8SLnRx.js';
 
 type BrowserDataMap = Record<string, unknown>;
 type FrameworkEnvTarget = 'generic' | 'vite' | 'next' | 'webpack' | (string & {});

package/dist/build/index.js

@@ -1,17 +1,17 @@
 import {
   createCnos
-} from "../chunk-CPGRRZLP.js";
-import "../chunk-LURQ4LAK.js";
-import "../chunk-A2WG3ZKW.js";
-import "../chunk-L7JVECPE.js";
-import "../chunk-6QQPHDUI.js";
-import "../chunk-7JZO6XN3.js";
-import "../chunk-2JBA2LXU.js";
+} from "../chunk-NFGPS7VJ.js";
+import "../chunk-5JGNRADB.js";
+import "../chunk-NU25VFA2.js";
+import "../chunk-RNTTPI5S.js";
+import "../chunk-2DMCB3PK.js";
+import "../chunk-KJ57PF47.js";
+import "../chunk-DPC2BV3S.js";
 import {
   CnosManifestError,
-  createSecretVaultProvider,
+  assertSecretRefVaultProviderCompatible,
   isSecretReference
-} from "../chunk-7KVM5PUW.js";
+} from "../chunk-WPB4HB2K.js";
 
 // src/build/index.ts
 async function resolveBrowserData(options = {}) {
@@ -106,15 +106,13 @@ function validateServerProjectionSecretRefs(runtime) {
     }
     const vaultId = entry.value.vault ?? "default";
     const definition = runtime.manifest.vaults[vaultId];
-    if (!definition) {
+    if (!definition && entry.value.vault) {
       throw new CnosManifestError(`Unknown vault "${vaultId}" for secret ref "${entry.key}"`);
     }
-    if (entry.value.provider !== definition.provider) {
-      throw new CnosManifestError(
-        `Secret ref "${entry.key}" declares provider "${entry.value.provider}" but vault "${vaultId}" uses provider "${definition.provider}"`
-      );
+    if (!definition && !entry.value.provider) {
+      throw new CnosManifestError(`Secret ref "${entry.key}" must declare a provider or reference a configured vault`);
     }
-    createSecretVaultProvider(vaultId, definition);
+    assertSecretRefVaultProviderCompatible(runtime.manifest, entry.value, entry.key);
   }
 }
 export {

package/dist/{chunk-6QQPHDUI.js → chunk-2DMCB3PK.js}

@@ -1,6 +1,6 @@
 import {
   applySchemaRules
-} from "./chunk-7KVM5PUW.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/basic-schema/src/index.ts
 function createBasicSchemaPlugin() {

package/dist/{chunk-LURQ4LAK.js → chunk-5JGNRADB.js}

@@ -1,7 +1,7 @@
 import {
   toEnv,
   toPublicEnv
-} from "./chunk-7KVM5PUW.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/env-export/src/index.ts
 function createEnvExportPlugin() {

package/dist/{chunk-2JBA2LXU.js → chunk-DPC2BV3S.js}

@@ -2,7 +2,7 @@ import {
   envVarToLogicalKey,
   resolveWorkspaceScopedPath,
   toPortablePath
-} from "./chunk-7KVM5PUW.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/dotenv/src/index.ts
 import { readFile } from "fs/promises";
@@ -11,9 +11,30 @@ var DOTENV_PLUGIN_ID = "@kitsy/cnos/plugins/dotenv";
 function parseDoubleQuoted(value) {
   return value.replace(/\\n/g, "\n").replace(/\\r/g, "\r").replace(/\\t/g, "	").replace(/\\"/g, '"').replace(/\\\\/g, "\\");
 }
+function isEscapedCharacter(value, index) {
+  let slashCount = 0;
+  for (let cursor = index - 1; cursor >= 0 && value[cursor] === "\\"; cursor -= 1) {
+    slashCount += 1;
+  }
+  return slashCount % 2 === 1;
+}
+function findClosingQuote(value, quote) {
+  for (let index = 0; index < value.length; index += 1) {
+    if (value[index] !== quote) {
+      continue;
+    }
+    if (quote === '"' && isEscapedCharacter(value, index)) {
+      continue;
+    }
+    return index;
+  }
+  return -1;
+}
 function parseDotenv(document) {
   const parsed = {};
-  for (const rawLine of document.split(/\r?\n/)) {
+  const lines = document.split(/\r?\n/);
+  for (let lineIndex = 0; lineIndex < lines.length; lineIndex += 1) {
+    const rawLine = lines[lineIndex] ?? "";
     const line = rawLine.trim();
     if (!line || line.startsWith("#")) {
       continue;
@@ -28,10 +49,18 @@ function parseDotenv(document) {
     if (!envVar) {
       continue;
     }
-    if (value.startsWith('"') && value.endsWith('"')) {
-      value = parseDoubleQuoted(value.slice(1, -1));
-    } else if (value.startsWith("'") && value.endsWith("'")) {
-      value = value.slice(1, -1);
+    if (value.startsWith('"') || value.startsWith("'")) {
+      const quote = value.startsWith('"') ? '"' : "'";
+      let quotedContent = value.slice(1);
+      let closingIndex = findClosingQuote(quotedContent, quote);
+      while (closingIndex === -1 && lineIndex < lines.length - 1) {
+        lineIndex += 1;
+        quotedContent = `${quotedContent}
+${lines[lineIndex] ?? ""}`;
+        closingIndex = findClosingQuote(quotedContent, quote);
+      }
+      const rawQuotedValue = closingIndex === -1 ? quotedContent : quotedContent.slice(0, closingIndex);
+      value = quote === '"' ? parseDoubleQuoted(rawQuotedValue) : rawQuotedValue;
     } else {
       value = value.replace(/\s+#.*$/, "").trim();
     }

package/dist/{chunk-7JZO6XN3.js → chunk-KJ57PF47.js}

@@ -1,6 +1,6 @@
 import {
   joinConfigPath
-} from "./chunk-7KVM5PUW.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/cli-args/src/index.ts
 var CLI_ARGS_PLUGIN_ID = "@kitsy/cnos/plugins/cli-args";

package/dist/{chunk-CPGRRZLP.js → chunk-NFGPS7VJ.js}

@@ -1,27 +1,27 @@
 import {
   createEnvExportPlugin,
   createPublicEnvExportPlugin
-} from "./chunk-LURQ4LAK.js";
+} from "./chunk-5JGNRADB.js";
 import {
   createFilesystemSecretsPlugin,
   createFilesystemValuesPlugin
-} from "./chunk-A2WG3ZKW.js";
+} from "./chunk-NU25VFA2.js";
 import {
   createProcessEnvPlugin
-} from "./chunk-L7JVECPE.js";
+} from "./chunk-RNTTPI5S.js";
 import {
   createBasicSchemaPlugin
-} from "./chunk-6QQPHDUI.js";
+} from "./chunk-2DMCB3PK.js";
 import {
   createCliArgsPlugin
-} from "./chunk-7JZO6XN3.js";
+} from "./chunk-KJ57PF47.js";
 import {
   createDotenvPlugin
-} from "./chunk-2JBA2LXU.js";
+} from "./chunk-DPC2BV3S.js";
 import {
   createCnos,
   createProvenanceInspector
-} from "./chunk-7KVM5PUW.js";
+} from "./chunk-WPB4HB2K.js";
 
 // src/defaultPlugins.ts
 function defaultPlugins() {
@@ -68,7 +68,7 @@ function setBootstrappedSecretHydrationRequired(value) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos",
-  version: "1.9.2",
+  version: "1.11.0",
   description: "Batteries-included CNOS runtime package wired with the official plugins.",
   type: "module",
   main: "./dist/index.cjs",

package/dist/{chunk-A2WG3ZKW.js → chunk-NU25VFA2.js}

@@ -4,7 +4,7 @@ import {
   isSecretReference,
   parseYaml,
   toPortablePath
-} from "./chunk-7KVM5PUW.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/filesystem/src/helpers.ts
 import { readdir } from "fs/promises";

package/dist/{chunk-L7JVECPE.js → chunk-RNTTPI5S.js}

@@ -1,6 +1,6 @@
 import {
   envVarToLogicalKey
-} from "./chunk-7KVM5PUW.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/process-env/src/index.ts
 var PROCESS_ENV_PLUGIN_ID = "@kitsy/cnos/plugins/process-env";

package/dist/{chunk-NVFACB64.js → chunk-T3E57MSQ.js}

@@ -1,6 +1,6 @@
 import {
   isSecretReference
-} from "./chunk-7KVM5PUW.js";
+} from "./chunk-WPB4HB2K.js";
 
 // src/runtime/bootstrap.ts
 import { createCipheriv, createDecipheriv, randomBytes } from "crypto";