@siteoshq/cli 1.9.0 → 1.10.0

package/README.md

@@ -1,7 +1,7 @@
 # SiteOS CLI
 
 `@siteoshq/cli` exposes one `siteos` binary for Auth, common Projects, Pulse, Cookie, Forms,
-Search, Trace, SEO and Integrations. This source prepares version 1.9.0; publishing is a separate release.
+Search, Trace, SEO and Integrations. This source prepares version 1.10.0; publishing is a separate release.
 Node.js 22 or newer is required.
 
 ## Install and authenticate
@@ -96,6 +96,15 @@ the bound Pulse resource and current URL; local tests use this URL unless explic
 `siteos.config.json` remains the tracked Playwright check configuration. Deployment and enabling
 monitoring are explicit operations. `deploy --dry-run` builds locally without uploading.
 
+CLI 1.10.0 adds an optional `environmentVariables` array to each Check, for
+example `"environmentVariables": ["TEST_EMAIL", "TEST_INBOX_TOKEN"]`. Declare names only, and set
+values in Pulse Settings for the selected Environment. The runner exposes declared values through
+`process.env.NAME`; `pulse sync --check --json` suggests names found in imported source, while
+computed names need explicit declarations. `PLAYWRIGHT_BASE_URL` remains a system value.
+Use the CLI build containing this support together with the matching application/runner release;
+earlier published versions do not preserve these declarations. See
+[Pulse variables operations](../../docs/operations/pulse-variables.md) for storage and diagnostics.
+
 ### Forms and Search
 
 ```sh

package/dist/cli.js

@@ -1918,6 +1918,26 @@ var ScheduledConfigSchema = z6.object({
 });
 var ManualConfigSchema = z6.object({ mode: z6.literal("manual") });
 var CheckConfigSchema = z6.object({
+  environmentVariables: z6.array(
+    z6.string().regex(/^[A-Z][A-Z0-9_]{0,63}$/).refine(
+      (name) => !/^(?:SITEOS_|PLAYWRIGHT_|DOCKER_|NODE_|NPM_|PNPM_|LD_|DYLD_)/.test(
+        name
+      ) && ![
+        "PATH",
+        "HOME",
+        "TMPDIR",
+        "TMP",
+        "TEMP",
+        "CI",
+        "DATABASE_URL",
+        "RUNNER_SHARED_SECRET"
+      ].includes(name) && !name.endsWith("_DATABASE_URL") && !name.endsWith("_R2_ACCESS_KEY_ID") && !name.endsWith("_R2_SECRET_ACCESS_KEY"),
+      "This name is reserved by Pulse."
+    )
+  ).max(50).refine(
+    (names) => new Set(names).size === names.length,
+    "Variable names must be unique."
+  ).optional(),
   slug,
   name: displayName,
   include: z6.array(safeRelativePath).min(1).max(100),
@@ -6146,7 +6166,7 @@ var BUILTINS = /* @__PURE__ */ new Set([
   ...builtinModules,
   ...builtinModules.map((name) => `node:${name}`)
 ]);
-var ENVIRONMENT_PATTERN = /\bprocess\.env\.([A-Z][A-Z0-9_]*)\b/g;
+var ENVIRONMENT_PATTERN = /\bprocess\.env(?:\.([A-Z][A-Z0-9_]*)\b|\[\s*["']([A-Z][A-Z0-9_]*)["']\s*\])/g;
 function packageName(importPath) {
   if (importPath.startsWith("@"))
     return importPath.split("/").slice(0, 2).join("/");
@@ -6227,8 +6247,9 @@ async function analyzeTestImports(input) {
         () => ""
       );
       for (const match of source.matchAll(ENVIRONMENT_PATTERN)) {
-        if (match[1] && match[1] !== "PLAYWRIGHT_BASE_URL") {
-          environmentVariables.add(match[1]);
+        const name = match[1] ?? match[2];
+        if (name && name !== "PLAYWRIGHT_BASE_URL") {
+          environmentVariables.add(name);
         }
       }
       if (/playwright\.config\.[^.]+$/.test(file) && /\bwebServer\s*:/.test(source)) {