varlock 0.0.2 → 0.0.4

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 DMNO Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,46 +1,69 @@
 # Varlock
 
-See https://varlock.dev for more info
+> See https://varlock.dev for docs and examples. 
 
-To install the CLI, run:
+_A sample `.env.schema`_: 
+```bash
+# @envFlag=APP_ENV
+# ---
+
+# @type=enum(development, staging, production)
+APP_ENV=development #sets default value
+
+# API port
+# @type=port @example=3000
+API_PORT= 
+
+# API url including expansion of another env var
+# @required @type=url
+API_URL=localhost:${API_PORT} 
+
+# API key with validation, securely fetched from 1Password
+# @required @sensitive @type=string(startsWith=sk-)
+OPENAI_API_KEY=exec('op read "op://api-prod/openai/api-key"')
+
+# Non-secret value, included directly
+# @type=url
+SOME_SERVICE_API_URL=https://api.someservice.com
+```
+
+## Installation
+
+You can get started with varlock by installing the CLI: 
 
 ```bash
-# Install as standalone CLI via homebrew
-brew install varlock
+# Install as a dependency in a js project
+npm install varlock
 
-# OR install via cURL
-curl -sSfL https://varlock.dev/install.sh | sh -s
+# OR as standalone CLI via homebrew
+brew install dmno-dev/tap/varlock
 
-# OR install as a dependency in a js project
-npx varlock init
+# OR via cURL
+curl -sSfL https://varlock.dev/install.sh | sh -s
 ```
 
-----
+See the full installation [docs](https://varlock.dev/getting-started/installation/). 
 
-## Development
+## Workflow
 
-To get started, in the monorepo root, run: 
+Validate your `.env.schema` with: 
 
 ```bash
-pnpm install
-pnpm build:libs
-
-cd packages/varlock
-pnpm dev
+varlock load
 ```
 
-> To test the CLI locally, you can use the [example-repo](../../example-repo) and [example-repo-init](../../example-repo-init) repos.
+If you need to pass resolved env vars into another process, you can run: 
 
-## Structure
+```bash
+varlock run -- node script.js
+```
 
-The CLI is structured as follows:
+Or you can integrate more deeply with one of our [integrations](https://varlock.dev/integrations/javascript/) to get log redaction and leak prevention. 
 
-- [src/cli/cli-executable.ts](./src/cli/cli-executable.ts): Entry point for the CLI.
-- [src/cli/commands](./src/cli/commands): Commands for the CLI.
-- [src/cli/helpers](./src/cli/helpers): Helpers for the CLI.
-- [src/lib/](./src/lib): Utility functions for the CLI.
+## @env-spec
 
+Varlock is built on top of @env-spec, a new DSL for attaching a schema and additional functionality to .env files using JSDoc style comments. The @env-spec package contains a parser and info about the spec itself.
 
-## Debugging
+- @env-spec [docs](https://varlock.dev/env-spec/overview/) 
+- @env-spec [RFC](https://github.com/dmno-dev/varlock/discussions/17)
 
-To get TS source maps enabled, run this command: `export NODE_OPTIONS='--enable-source-maps'`

package/dist/auto-load.js

@@ -1,11 +1,10 @@
-import { load } from './chunk-332HXE6L.js';
-import './chunk-Z55UMN2B.js';
-import './chunk-6YLXKXKR.js';
-import './chunk-G4BD2BPH.js';
-import './chunk-7UQXFWKN.js';
+import './chunk-RUB5A7IC.js';
+import './chunk-XPHGSDAF.js';
+import './chunk-VN64D2EQ.js';
+import './chunk-SVDXBE6D.js';
+import './chunk-XHOJF7U7.js';
+import './chunk-DHFEY3C4.js';
+import './chunk-FGMXIEFA.js';
 import './chunk-XN24GZXQ.js';
-
-// src/auto-load.ts
-await load();
 //# sourceMappingURL=auto-load.js.map
 //# sourceMappingURL=auto-load.js.map

package/dist/auto-load.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auto-load.ts"],"names":[],"mappings":";;;;;;;;AAGA,MAAM,IAAK,EAAA","file":"auto-load.js","sourcesContent":["import { load } from './index';\n\n// eslint-disable-next-line es-x/no-top-level-await\nawait load();\n"]}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"auto-load.js"}

package/dist/{chunk-O2QPQ5MG.js → chunk-A4AHZSZB.js}

@@ -1,6 +1,6 @@
-import { checkForSchemaErrors, checkForConfigErrors } from './chunk-Z55UMN2B.js';
 import { define } from './chunk-33ROL4J5.js';
-import { loadVarlockEnvGraph } from './chunk-6YLXKXKR.js';
+import { checkForSchemaErrors, checkForConfigErrors } from './chunk-DOIKZ3NG.js';
+import { loadVarlockEnvGraph } from './chunk-CLVBJA4G.js';
 import { __name } from './chunk-XN24GZXQ.js';
 import { execa } from 'execa';
 import which from 'which';
@@ -42,8 +42,9 @@ var commandFn = /* @__PURE__ */ __name(async (ctx) => {
   const fullInjectedEnv = {
     ...process.env,
     ...resolvedEnv,
-    _VARLOCK_RUN: "1"
-    // flag so we know our env is already injected
+    __VARLOCK_RUN: "1",
+    // flag for a child process to detect it is runnign via `varlock run`
+    __VARLOCK_ENV: JSON.stringify(envGraph.getSerializedGraph())
   };
   commandProcess = execa(pathAwareCommand || rawCommand, commandArgsOnly, {
     stdio: "inherit",
@@ -94,5 +95,5 @@ var commandFn = /* @__PURE__ */ __name(async (ctx) => {
 }, "commandFn");
 
 export { commandFn, commandSpec };
-//# sourceMappingURL=chunk-O2QPQ5MG.js.map
-//# sourceMappingURL=chunk-O2QPQ5MG.js.map
+//# sourceMappingURL=chunk-A4AHZSZB.js.map
+//# sourceMappingURL=chunk-A4AHZSZB.js.map

package/dist/chunk-A4AHZSZB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/run.command.ts"],"names":[],"mappings":";;;;;;;AASO,IAAM,cAAc,MAAO,CAAA;AAAA,EAChC,IAAM,EAAA,KAAA;AAAA,EACN,WAAa,EAAA,wEAAA;AAAA,EACb,IAAM,EAAA;AAAA,IACJ,KAAO,EAAA;AAAA,MACL,IAAM,EAAA,SAAA;AAAA,MACN,KAAO,EAAA,GAAA;AAAA,MACP,WAAa,EAAA;AAAA;AACf;AAEJ,CAAC;AAED,IAAI,cAAA;AACJ,IAAI,6BAAgC,GAAA,KAAA;AAGvB,IAAA,SAAA,iCAA6D,GAAQ,KAAA;AAEhF,EAAA,MAAM,IAAO,GAAA,OAAA,CAAQ,IAAK,CAAA,KAAA,CAAM,CAAC,CAAA;AAEjC,EAAA,IAAI,kBAAiC,EAAC;AACtC,EAAI,IAAA,IAAA,CAAK,QAAS,CAAA,IAAI,CAAG,EAAA;AACvB,IAAM,MAAA,eAAA,GAAkB,IAAK,CAAA,OAAA,CAAQ,IAAI,CAAA;AACzC,IAAc,IAAA,CAAK,KAAM,CAAA,CAAA,EAAG,eAAe,CAAA;AAC3C,IAAkB,eAAA,GAAA,IAAA,CAAK,KAAM,CAAA,eAAA,GAAkB,CAAC,CAAA;AAAA,GAC3C,MAAA;AACL,IAAM,MAAA,IAAI,MAAM,kFAAkF,CAAA;AAAA;AAEpG,EAAA,MAAM,kBAAqB,GAAA,eAAA;AAC3B,EAAM,MAAA,eAAA,GAAkB,eAAgB,CAAA,IAAA,CAAK,GAAG,CAAA;AAEhD,EAAM,MAAA,UAAA,GAAa,mBAAmB,CAAC,CAAA;AACvC,EAAM,MAAA,eAAA,GAAkB,kBAAmB,CAAA,KAAA,CAAM,CAAC,CAAA;AAClD,EAAA,MAAM,mBAAmB,KAAM,CAAA,IAAA,CAAK,YAAY,EAAE,OAAA,EAAS,MAAM,CAAA;AAEjE,EAAM,MAAA,cAAA,GAAiB,IAAI,MAAO,CAAA,KAAA;AAKlC,EAAM,MAAA,QAAA,GAAW,MAAM,mBAAoB,EAAA;AAC3C,EAAA,oBAAA,CAAqB,QAAQ,CAAA;AAC7B,EAAA,MAAM,SAAS,gBAAiB,EAAA;AAChC,EAAA,oBAAA,CAAqB,QAAQ,CAAA;AAI7B,EAAM,MAAA,WAAA,GAAc,SAAS,oBAAqB,EAAA;AAIlD,EAAA,MAAM,eAAkB,GAAA;AAAA,IACtB,GAAG,OAAQ,CAAA,GAAA;AAAA,IACX,GAAG,WAAA;AAAA,IACH,aAAe,EAAA,GAAA;AAAA;AAAA,IACf,aAAe,EAAA,IAAA,CAAK,SAAU,CAAA,QAAA,CAAS,oBAAoB;AAAA,GAC7D;AAEA,EAAiB,cAAA,GAAA,KAAA,CAAM,gBAAoB,IAAA,UAAA,EAAY,eAAiB,EAAA;AAAA,IACtE,KAAO,EAAA,SAAA;AAAA,IACP,GAAK,EAAA;AAAA,GACN,CAAA;AAKD,EAAyB;AAEvB,IAAA,OAAA,CAAQ,EAAG,CAAA,MAAA,EAAQ,CAAC,IAAA,EAAW,MAAgB,KAAA;AAM7C,MAAA,cAAA,EAAgB,KAAK,CAAC,CAAA;AAAA,KACvB,CAAA;AAED,IAAA,CAAC,SAAW,EAAA,QAAQ,CAAE,CAAA,OAAA,CAAQ,CAAC,MAAW,KAAA;AACxC,MAAQ,OAAA,CAAA,EAAA,CAAG,QAAQ,MAAM;AAEvB,QAAA,cAAA,EAAgB,KAAK,CAAC,CAAA;AACtB,QAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,OACf,CAAA;AAAA,KACF,CAAA;AAAA;AAKH,EAAI,IAAA,QAAA;AACJ,EAAI,IAAA;AACF,IAAA,MAAM,gBAAgB,MAAM,cAAA;AAC5B,IAAA,QAAA,GAAW,aAAc,CAAA,QAAA;AAAA,WAClB,KAAO,EAAA;AAEd,IAAK,IAAA,KAAA,CAAc,MAAW,KAAA,QAAA,IAAY,6BAA+B,EAAA;AAOzE,IAAA,IAAK,KAAc,CAAA,MAAA,KAAW,QAAa,IAAA,KAAA,CAAc,WAAW,SAAW,EAAA;AAC7E,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,KACT,MAAA;AACL,MAAQ,OAAA,CAAA,GAAA,CAAK,MAAgB,OAAO,CAAA;AACpC,MAAQ,OAAA,CAAA,GAAA,CAAI,CAAY,SAAA,EAAA,eAAe,CAAU,QAAA,CAAA,CAAA;AACjD,MAAA,OAAA,CAAQ,IAAI,2CAA2C,CAAA;AACvD,MAAA,OAAA,CAAQ,IAAI,2DAA2D,CAAA;AAAA;AAGzE,IAAA,QAAA,GAAY,MAAc,QAAY,IAAA,CAAA;AAAA;AAGxC,EAAA,IAAI,cAAgB,EAAA;AAClB,IAAoC;AAClC,MAAA,IAAI,aAAa,CAAG,EAAA;AAClB,QAAA,OAAA,CAAQ,IAAI,yCAAoC,CAAA;AAAA,OAC3C,MAAA;AACL,QAAA,OAAA,CAAQ,GAAI,CAAA;AAAA,uCAAA,EAAqC,QAAQ,CAAE,CAAA,CAAA;AAAA;AAC7D;AACF;AAGF,EAAA,IAAI,CAAC,cAAgB,EAAA;AACnB,IAAA,OAAA,CAAQ,KAAK,QAAQ,CAAA;AAAA,GAChB,MAAA;AACL,IAAA,OAAA,CAAQ,IAAI,8BAA8B,CAAA;AAAA;AAG9C,CAjHmE,EAAA,WAAA","file":"chunk-A4AHZSZB.js","sourcesContent":["import { execa, type ResultPromise } from 'execa';\nimport which from 'which';\nimport { define } from 'gunshi';\n\nimport { loadVarlockEnvGraph } from '../../lib/load-graph';\nimport { checkForConfigErrors, checkForSchemaErrors } from '../helpers/error-checks';\nimport { TypedGunshiCommandFn } from '../helpers/gunshi-type-utils';\n\n\nexport const commandSpec = define({\n  name: 'run',\n  description: 'Run a command with the environment variables loaded from the .env file',\n  args: {\n    watch: {\n      type: 'boolean',\n      short: 'w',\n      description: 'Watch mode',\n    },\n  },\n});\n\nlet commandProcess: ResultPromise | undefined;\nlet childCommandKilledFromRestart = false;\nlet isWatchModeRestart = false;\n\nexport const commandFn: TypedGunshiCommandFn<typeof commandSpec> = async (ctx) => {\n  // if \"--\" is present, split the args into our command and the rest, which will be another external command\n  const argv = process.argv.slice(2);\n  let commandArgs: Array<string> = [];\n  let restCommandArgs: Array<string> = [];\n  if (argv.includes('--')) {\n    const doubleDashIndex = argv.indexOf('--');\n    commandArgs = argv.slice(0, doubleDashIndex);\n    restCommandArgs = argv.slice(doubleDashIndex + 1);\n  } else {\n    throw new Error('No command to run! Your command should look like `varlock run -- <your-command>`');\n  }\n  const commandToRunAsArgs = restCommandArgs;\n  const commandToRunStr = restCommandArgs.join(' ');\n\n  const rawCommand = commandToRunAsArgs[0];\n  const commandArgsOnly = commandToRunAsArgs.slice(1);\n  const pathAwareCommand = which.sync(rawCommand, { nothrow: true });\n\n  const isWatchEnabled = ctx.values.watch;\n\n  // console.log('running command', pathAwareCommand || rawCommand, commandArgsOnly);\n\n\n  const envGraph = await loadVarlockEnvGraph();\n  checkForSchemaErrors(envGraph);\n  await envGraph.resolveEnvValues();\n  checkForConfigErrors(envGraph);\n\n  // will fail above if there are any errors\n\n  const resolvedEnv = envGraph.getResolvedEnvObject();\n  // console.log(resolvedEnv);\n\n  // needs more thought here\n  const fullInjectedEnv = {\n    ...process.env,\n    ...resolvedEnv,\n    __VARLOCK_RUN: '1', // flag for a child process to detect it is runnign via `varlock run`\n    __VARLOCK_ENV: JSON.stringify(envGraph.getSerializedGraph()),\n  };\n\n  commandProcess = execa(pathAwareCommand || rawCommand, commandArgsOnly, {\n    stdio: 'inherit',\n    env: fullInjectedEnv,\n  });\n  // console.log('PARENT PID = ', process.pid);\n  // console.log('CHILD PID = ', commandProcess.pid);\n\n  // if first run, we need to attach some extra exit handling\n  if (!isWatchModeRestart) {\n    // try to make sure we shut down cleanly and kill the child process\n    process.on('exit', (code: any, signal: any) => {\n      // if (childCommandKilledFromRestart) {\n      //   childCommandKilledFromRestart = false;\n      //   return;\n      // }\n      // console.log('exit!', code, signal);\n      commandProcess?.kill(9);\n    });\n\n    ['SIGTERM', 'SIGINT'].forEach((signal) => {\n      process.on(signal, () => {\n        // console.log('SIGNAL = ', signal);\n        commandProcess?.kill(9);\n        process.exit(1);\n      });\n    });\n    // TODO: handle other signals?\n  }\n\n\n  let exitCode: any; // TODO: fix this any\n  try {\n    const commandResult = await commandProcess;\n    exitCode = commandResult.exitCode;\n  } catch (error) {\n    // console.log('child command error!', error);\n    if ((error as any).signal === 'SIGINT' && childCommandKilledFromRestart) {\n      // console.log('child command failed due to being killed form restart');\n      childCommandKilledFromRestart = false;\n      return;\n    }\n\n    // console.log('child command result error', error);\n    if ((error as any).signal === 'SIGINT' || (error as any).signal === 'SIGKILL') {\n      process.exit(1);\n    } else {\n      console.log((error as Error).message);\n      console.log(`command [${commandToRunStr}] failed`);\n      console.log('try running the same command without dmno');\n      console.log('if you get a different result, dmno may be the problem...');\n      // console.log(`Please report issue here: <${REPORT_ISSUE_LINK}>`);\n    }\n    exitCode = (error as any).exitCode || 1;\n  }\n\n  if (isWatchEnabled) {\n    if (!childCommandKilledFromRestart) {\n      if (exitCode === 0) {\n        console.log('\\n✅ command completed successfully');\n      } else {\n        console.log(`\\n💥 command failed - exit code = ${exitCode}`);\n      }\n    }\n  }\n\n  if (!isWatchEnabled) {\n    process.exit(exitCode);\n  } else {\n    console.log('... watching for changes ...');\n    // TODO: watch for changes and restart the command\n  }\n};\n"]}

package/dist/{chunk-4WO4BGKU.js → chunk-C273RDM5.js}

@@ -1,7 +1,7 @@
-import { checkForSchemaErrors, checkForConfigErrors } from './chunk-Z55UMN2B.js';
 import { define } from './chunk-33ROL4J5.js';
-import { loadVarlockEnvGraph, getItemSummary } from './chunk-6YLXKXKR.js';
-import { my_dash_default } from './chunk-G4BD2BPH.js';
+import { checkForSchemaErrors, checkForConfigErrors } from './chunk-DOIKZ3NG.js';
+import { loadVarlockEnvGraph, getItemSummary } from './chunk-CLVBJA4G.js';
+import { my_dash_default } from './chunk-DROJWTCD.js';
 import { __name } from './chunk-XN24GZXQ.js';
 
 // src/cli/commands/load.command.ts
@@ -18,12 +18,18 @@ var commandSpec = define({
     "show-all": {
       type: "boolean",
       description: "When load is fialing, show all items rather than only failing items"
+    },
+    env: {
+      type: "string",
+      description: "Set the environment (e.g., production, development, etc) - will be overridden by @envFlag in the schema if present"
     }
   }
 });
 var commandFn = /* @__PURE__ */ __name(async (ctx) => {
   const { format, "show-all": showAll } = ctx.values;
-  const envGraph = await loadVarlockEnvGraph();
+  const envGraph = await loadVarlockEnvGraph({
+    currentEnvFallback: ctx.values.env
+  });
   checkForSchemaErrors(envGraph);
   if (envGraph.schemaDataSource?.decorators.generateTypes) {
     const typeGenSettings = envGraph.schemaDataSource?.decorators.generateTypes.bareFnArgs?.simplifiedValues;
@@ -44,8 +50,9 @@ var commandFn = /* @__PURE__ */ __name(async (ctx) => {
       console.log(getItemSummary(item));
     }
   } else if (format === "json") {
-    const resolvedEnv = envGraph.getResolvedEnvObject();
-    console.log(JSON.stringify(resolvedEnv, null, 2));
+    console.log(JSON.stringify(envGraph.getResolvedEnvObject(), null, 2));
+  } else if (format === "json-full") {
+    console.log(JSON.stringify(envGraph.getSerializedGraph(), null, 2));
   } else if (format === "env") {
     const resolvedEnv = envGraph.getResolvedEnvObject();
     for (const key in resolvedEnv) {
@@ -66,5 +73,5 @@ var commandFn = /* @__PURE__ */ __name(async (ctx) => {
 }, "commandFn");
 
 export { commandFn, commandSpec };
-//# sourceMappingURL=chunk-4WO4BGKU.js.map
-//# sourceMappingURL=chunk-4WO4BGKU.js.map
+//# sourceMappingURL=chunk-C273RDM5.js.map
+//# sourceMappingURL=chunk-C273RDM5.js.map

package/dist/chunk-C273RDM5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/load.command.ts"],"names":[],"mappings":";;;;;;;AAQO,IAAM,cAAc,MAAO,CAAA;AAAA,EAChC,IAAM,EAAA,MAAA;AAAA,EACN,WAAa,EAAA,iDAAA;AAAA,EACb,IAAM,EAAA;AAAA,IACJ,MAAQ,EAAA;AAAA,MACN,IAAM,EAAA,QAAA;AAAA,MACN,KAAO,EAAA,GAAA;AAAA,MACP,WAAa,EAAA,qDAAA;AAAA,MACb,OAAS,EAAA;AAAA,KACX;AAAA,IACA,UAAY,EAAA;AAAA,MACV,IAAM,EAAA,SAAA;AAAA,MACN,WAAa,EAAA;AAAA,KACf;AAAA,IACA,GAAK,EAAA;AAAA,MACH,IAAM,EAAA,QAAA;AAAA,MACN,WAAa,EAAA;AAAA;AACf;AAEJ,CAAC;AAGY,IAAA,SAAA,iCAA6D,GAAQ,KAAA;AAChF,EAAA,MAAM,EAAE,MAAA,EAAQ,UAAY,EAAA,OAAA,KAAY,GAAI,CAAA,MAAA;AAE5C,EAAM,MAAA,QAAA,GAAW,MAAM,mBAAoB,CAAA;AAAA,IACzC,kBAAA,EAAoB,IAAI,MAAO,CAAA;AAAA,GAChC,CAAA;AACD,EAAA,oBAAA,CAAqB,QAAQ,CAAA;AAG7B,EAAI,IAAA,QAAA,CAAS,gBAAkB,EAAA,UAAA,CAAW,aAAe,EAAA;AAEvD,IAAA,MAAM,eAAkB,GAAA,QAAA,CAAS,gBAAkB,EAAA,UAAA,CAAW,cAAc,UAAY,EAAA,gBAAA;AACxF,IAAA,IAAI,CAAC,eAAA,CAAE,aAAc,CAAA,eAAe,CAAG,EAAA;AACrC,MAAM,MAAA,IAAI,MAAM,wDAAwD,CAAA;AAAA;AAE1E,IAAA,IAAI,CAAC,eAAgB,CAAA,IAAA,EAAY,MAAA,IAAI,MAAM,sCAAsC,CAAA;AACjF,IAAI,IAAA,eAAA,CAAgB,SAAS,IAAM,EAAA,MAAM,IAAI,KAAM,CAAA,CAAA,uCAAA,EAA0C,eAAgB,CAAA,IAAI,CAAE,CAAA,CAAA;AACnH,IAAA,IAAI,CAAC,eAAgB,CAAA,IAAA,EAAY,MAAA,IAAI,MAAM,sCAAsC,CAAA;AACjF,IAAI,IAAA,CAAC,gBAAE,QAAS,CAAA,eAAA,CAAgB,IAAI,CAAG,EAAA,MAAM,IAAI,KAAA,CAAM,8CAA8C,CAAA;AACrG,IAAA,MAAM,QAAS,CAAA,aAAA,CAAc,eAAgB,CAAA,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA;AAGzE,EAAA,MAAM,SAAS,gBAAiB,EAAA;AAChC,EAAqB,oBAAA,CAAA,QAAA,EAAU,EAAE,OAAA,EAAS,CAAA;AAE1C,EAAA,IAAI,WAAW,QAAU,EAAA;AACvB,IAAW,KAAA,MAAA,OAAA,IAAW,SAAS,YAAc,EAAA;AAC3C,MAAM,MAAA,IAAA,GAAO,QAAS,CAAA,YAAA,CAAa,OAAO,CAAA;AAC1C,MAAQ,OAAA,CAAA,GAAA,CAAI,cAAe,CAAA,IAAI,CAAC,CAAA;AAAA;AAClC,GACF,MAAA,IAAW,WAAW,MAAQ,EAAA;AAC5B,IAAQ,OAAA,CAAA,GAAA,CAAI,KAAK,SAAU,CAAA,QAAA,CAAS,sBAAwB,EAAA,IAAA,EAAM,CAAC,CAAC,CAAA;AAAA,GACtE,MAAA,IAAW,WAAW,WAAa,EAAA;AACjC,IAAQ,OAAA,CAAA,GAAA,CAAI,KAAK,SAAU,CAAA,QAAA,CAAS,oBAAsB,EAAA,IAAA,EAAM,CAAC,CAAC,CAAA;AAAA,GACpE,MAAA,IAAW,WAAW,KAAO,EAAA;AAC3B,IAAM,MAAA,WAAA,GAAc,SAAS,oBAAqB,EAAA;AAClD,IAAA,KAAA,MAAW,OAAO,WAAa,EAAA;AAC7B,MAAM,MAAA,KAAA,GAAQ,YAAY,GAAG,CAAA;AAC7B,MAAI,IAAA,QAAA;AACJ,MAAA,IAAI,UAAU,MAAW,EAAA;AACvB,QAAW,QAAA,GAAA,EAAA;AAAA,OACb,MAAA,IAAW,OAAO,KAAA,KAAU,QAAU,EAAA;AACpC,QAAW,QAAA,GAAA,CAAA,CAAA,EAAI,MAAM,UAAW,CAAA,GAAA,EAAK,KAAK,CAAE,CAAA,UAAA,CAAW,IAAM,EAAA,KAAK,CAAC,CAAA,CAAA,CAAA;AAAA,OAC9D,MAAA;AACL,QAAW,QAAA,GAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA;AAEjC,MAAA,OAAA,CAAQ,GAAI,CAAA,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,QAAQ,CAAE,CAAA,CAAA;AAAA;AAClC,GACK,MAAA;AACL,IAAA,MAAM,IAAI,KAAA,CAAM,CAAmB,gBAAA,EAAA,MAAM,CAAE,CAAA,CAAA;AAAA;AAK/C,CAtDmE,EAAA,WAAA","file":"chunk-C273RDM5.js","sourcesContent":["import { define } from 'gunshi';\nimport _ from '@env-spec/utils/my-dash';\n\nimport { loadVarlockEnvGraph } from '../../lib/load-graph';\nimport { getItemSummary } from '../../lib/formatting';\nimport { checkForConfigErrors, checkForSchemaErrors } from '../helpers/error-checks';\nimport { TypedGunshiCommandFn } from '../helpers/gunshi-type-utils';\n\nexport const commandSpec = define({\n  name: 'load',\n  description: 'Load env according to schema and resolve values',\n  args: {\n    format: {\n      type: 'string',\n      short: 'f',\n      description: 'Format of output (if not pretty printed to console)',\n      default: 'pretty',\n    },\n    'show-all': {\n      type: 'boolean',\n      description: 'When load is fialing, show all items rather than only failing items',\n    },\n    env: {\n      type: 'string',\n      description: 'Set the environment (e.g., production, development, etc) - will be overridden by @envFlag in the schema if present',\n    },\n  },\n});\n\n\nexport const commandFn: TypedGunshiCommandFn<typeof commandSpec> = async (ctx) => {\n  const { format, 'show-all': showAll } = ctx.values;\n\n  const envGraph = await loadVarlockEnvGraph({\n    currentEnvFallback: ctx.values.env,\n  });\n  checkForSchemaErrors(envGraph);\n\n  // TODO: move into a more general post-load hook system\n  if (envGraph.schemaDataSource?.decorators.generateTypes) {\n    // TODO: much of this logic should move to the definition of the decorator itself\n    const typeGenSettings = envGraph.schemaDataSource?.decorators.generateTypes.bareFnArgs?.simplifiedValues;\n    if (!_.isPlainObject(typeGenSettings)) {\n      throw new Error('@generateTypes - must be a fn call with key/value args');\n    }\n    if (!typeGenSettings.lang) throw new Error('@generateTypes - must set `lang` arg');\n    if (typeGenSettings.lang !== 'ts') throw new Error(`@generateTypes - unsupported language: ${typeGenSettings.lang}`);\n    if (!typeGenSettings.path) throw new Error('@generateTypes - must set `path` arg');\n    if (!_.isString(typeGenSettings.path)) throw new Error('@generateTypes - `path` arg must be a string');\n    await envGraph.generateTypes(typeGenSettings.lang, typeGenSettings.path);\n  }\n\n  await envGraph.resolveEnvValues();\n  checkForConfigErrors(envGraph, { showAll });\n\n  if (format === 'pretty') {\n    for (const itemKey in envGraph.configSchema) {\n      const item = envGraph.configSchema[itemKey];\n      console.log(getItemSummary(item));\n    }\n  } else if (format === 'json') {\n    console.log(JSON.stringify(envGraph.getResolvedEnvObject(), null, 2));\n  } else if (format === 'json-full') {\n    console.log(JSON.stringify(envGraph.getSerializedGraph(), null, 2));\n  } else if (format === 'env') {\n    const resolvedEnv = envGraph.getResolvedEnvObject();\n    for (const key in resolvedEnv) {\n      const value = resolvedEnv[key];\n      let strValue: string;\n      if (value === undefined) {\n        strValue = '';\n      } else if (typeof value === 'string') {\n        strValue = `\"${value.replaceAll('\"', '\\\\\"').replaceAll('\\n', '\\\\n')}\"`;\n      } else {\n        strValue = JSON.stringify(value);\n      }\n      console.log(`${key}=${strValue}`);\n    }\n  } else {\n    throw new Error(`Unknown format: ${format}`);\n  }\n\n  // const resolvedEnv = envGraph.getResolvedEnvObject();\n  // console.log(resolvedEnv);\n};\n"]}

package/dist/chunk-CLVBJA4G.js

@@ -0,0 +1,107 @@
+import { ansis_default } from './chunk-7UQXFWKN.js';
+import { my_dash_default, loadEnvGraph } from './chunk-DROJWTCD.js';
+import { redactString } from './chunk-FGMXIEFA.js';
+import { __name } from './chunk-XN24GZXQ.js';
+
+// src/lib/formatting.ts
+function applyMods(str, mods) {
+  if (!mods) return str;
+  if (my_dash_default.isArray(mods)) {
+    let modStr = str;
+    mods.forEach((mod) => {
+      modStr = ansis_default[mod](modStr);
+    });
+    return modStr;
+  }
+  return ansis_default[mods](str);
+}
+__name(applyMods, "applyMods");
+function formattedValue(val, showType = false) {
+  let strVal = "";
+  let strType = "";
+  let mods;
+  if (my_dash_default.isBoolean(val)) {
+    strVal = val.toString();
+    mods = ["yellow", "italic"];
+    strType = "boolean";
+  } else if (my_dash_default.isNumber(val)) {
+    strVal = val.toString();
+    mods = "yellow";
+    strType = "number";
+  } else if (my_dash_default.isString(val)) {
+    strVal = `"${val}"`;
+    strType = "string";
+  } else if (my_dash_default.isPlainObject(val)) {
+    strVal = JSON.stringify(val);
+    strType = "object";
+  } else if (val === null) {
+    strVal = "null";
+    mods = "gray";
+  } else if (val === void 0) {
+    strVal = "undefined";
+    mods = "gray";
+  }
+  return [
+    applyMods(strVal, mods),
+    showType && strType ? ansis_default.gray(` (${strType})`) : ""
+  ].join("");
+}
+__name(formattedValue, "formattedValue");
+function joinAndCompact(strings, joinChar = " ") {
+  return strings.filter((s) => (
+    // we'll not filter out empty strings - because it's useful to just add newlines
+    s !== void 0 && s !== null && s !== false
+  )).join(joinChar);
+}
+__name(joinAndCompact, "joinAndCompact");
+var VALIDATION_STATE_COLORS = {
+  error: "red",
+  warn: "yellow",
+  valid: "cyan"
+};
+function getItemSummary(item) {
+  const summary = [];
+  const itemErrors = item.errors;
+  const icon = itemErrors.length ? itemErrors[0].icon : "\u2705";
+  const isSensitive = item.isSensitive;
+  const isRequired = item.isRequired;
+  summary.push(joinAndCompact([
+    icon,
+    ansis_default[VALIDATION_STATE_COLORS[item.validationState]](item.key) + (isRequired ? ansis_default.magenta("*") : ""),
+    // ansis.gray(`[type = ${item.type.typeLabel}]`),
+    isSensitive && ` \u{1F510}${ansis_default.gray.italic("sensitive")}`
+    // item.useAt ? ansis.gray.italic(`(${item.useAt?.join(', ')})`) : undefined,
+  ]));
+  let valAsStr = formattedValue(item.resolvedValue, false);
+  if (isSensitive && item.resolvedValue && my_dash_default.isString(item.resolvedValue)) {
+    valAsStr = redactString(item.resolvedValue);
+  }
+  summary.push(joinAndCompact([
+    ansis_default.gray("   \u2514"),
+    valAsStr,
+    item.isCoerced && ansis_default.gray.italic("< coerced from ") + (isSensitive ? formattedValue(item.resolvedRawValue) : formattedValue(item.resolvedRawValue, false))
+  ]));
+  itemErrors?.forEach((err) => {
+    summary.push(ansis_default[err.isWarning ? "yellow" : "red"](`   - ${err.isWarning ? "[WARNING] " : ""}${err.message}`));
+    if (err.tip) {
+      summary.push(...err.tip.split("\n").map((line) => `     ${line}`));
+    }
+  });
+  return summary.join("\n");
+}
+__name(getItemSummary, "getItemSummary");
+
+// src/lib/load-graph.ts
+async function loadVarlockEnvGraph(opts) {
+  const envGraph = await loadEnvGraph({
+    ...opts,
+    afterInit: /* @__PURE__ */ __name(async (g) => {
+    }, "afterInit")
+  });
+  return envGraph;
+}
+__name(loadVarlockEnvGraph, "loadVarlockEnvGraph");
+
+export { getItemSummary, joinAndCompact, loadVarlockEnvGraph };
+//# sourceMappingURL=chunk-CLVBJA4G.js.map
+//# sourceMappingURL=chunk-CLVBJA4G.js.map

package/dist/chunk-CLVBJA4G.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/formatting.ts","../src/lib/load-graph.ts"],"names":[],"mappings":";;;;;;AAUA,SAAS,SAAA,CAAU,KAAa,IAAkB,EAAA;AAChD,EAAI,IAAA,CAAC,MAAa,OAAA,GAAA;AAClB,EAAI,IAAA,eAAA,CAAE,OAAQ,CAAA,IAAI,CAAG,EAAA;AACnB,IAAA,IAAI,MAAS,GAAA,GAAA;AACb,IAAK,IAAA,CAAA,OAAA,CAAQ,CAAC,GAAQ,KAAA;AACpB,MAAS,MAAA,GAAA,aAAA,CAAM,GAAG,CAAA,CAAE,MAAM,CAAA;AAAA,KAC3B,CAAA;AACD,IAAO,OAAA,MAAA;AAAA;AAET,EAAO,OAAA,aAAA,CAAM,IAAI,CAAA,CAAE,GAAG,CAAA;AACxB;AAVS,MAAA,CAAA,SAAA,EAAA,WAAA,CAAA;AAYF,SAAS,cAAA,CAAe,GAAU,EAAA,QAAA,GAAW,KAAO,EAAA;AACzD,EAAA,IAAI,MAAiB,GAAA,EAAA;AACrB,EAAA,IAAI,OAAkB,GAAA,EAAA;AACtB,EAAI,IAAA,IAAA;AACJ,EAAI,IAAA,eAAA,CAAE,SAAU,CAAA,GAAG,CAAG,EAAA;AACpB,IAAA,MAAA,GAAS,IAAI,QAAS,EAAA;AACtB,IAAO,IAAA,GAAA,CAAC,UAAU,QAAQ,CAAA;AAC1B,IAAU,OAAA,GAAA,SAAA;AAAA,GACD,MAAA,IAAA,eAAA,CAAE,QAAS,CAAA,GAAG,CAAG,EAAA;AAC1B,IAAA,MAAA,GAAS,IAAI,QAAS,EAAA;AACtB,IAAO,IAAA,GAAA,QAAA;AACP,IAAU,OAAA,GAAA,QAAA;AAAA,GACD,MAAA,IAAA,eAAA,CAAE,QAAS,CAAA,GAAG,CAAG,EAAA;AAC1B,IAAA,MAAA,GAAS,IAAI,GAAG,CAAA,CAAA,CAAA;AAChB,IAAU,OAAA,GAAA,QAAA;AAAA,GACD,MAAA,IAAA,eAAA,CAAE,aAAc,CAAA,GAAG,CAAG,EAAA;AAE/B,IAAS,MAAA,GAAA,IAAA,CAAK,UAAU,GAAG,CAAA;AAC3B,IAAU,OAAA,GAAA,QAAA;AAAA,GACZ,MAAA,IAAW,QAAQ,IAAM,EAAA;AACvB,IAAS,MAAA,GAAA,MAAA;AACT,IAAO,IAAA,GAAA,MAAA;AAAA,GACT,MAAA,IAAW,QAAQ,MAAW,EAAA;AAC5B,IAAS,MAAA,GAAA,WAAA;AACT,IAAO,IAAA,GAAA,MAAA;AAAA;AAET,EAAO,OAAA;AAAA,IACL,SAAA,CAAU,QAAQ,IAAI,CAAA;AAAA,IACtB,YAAY,OAAU,GAAA,aAAA,CAAM,KAAK,CAAK,EAAA,EAAA,OAAO,GAAG,CAAI,GAAA;AAAA,GACtD,CAAE,KAAK,EAAE,CAAA;AACX;AA9BgB,MAAA,CAAA,cAAA,EAAA,gBAAA,CAAA;AAwDT,SAAS,cAAA,CAAe,OAAsE,EAAA,QAAA,GAAW,GAAK,EAAA;AACnH,EAAO,OAAA,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA;AAAA,IAErB,CAAM,KAAA,MAAA,IAAa,CAAM,KAAA,IAAA,IAAQ,CAAM,KAAA;AAAA,GACxC,CAAA,CAAE,KAAK,QAAQ,CAAA;AAClB;AALgB,MAAA,CAAA,cAAA,EAAA,gBAAA,CAAA;AAOhB,IAAM,uBAA0B,GAAA;AAAA,EAC9B,KAAO,EAAA,KAAA;AAAA,EACP,IAAM,EAAA,QAAA;AAAA,EACN,KAAO,EAAA;AACT,CAAA;AAEO,SAAS,eAAe,IAAkB,EAAA;AAC/C,EAAA,MAAM,UAAyB,EAAC;AAChC,EAAA,MAAM,aAAa,IAAK,CAAA,MAAA;AACxB,EAAA,MAAM,OAAO,UAAW,CAAA,MAAA,GAAS,UAAW,CAAA,CAAC,EAAE,IAAO,GAAA,QAAA;AACtD,EAAA,MAAM,cAAc,IAAK,CAAA,WAAA;AACzB,EAAA,MAAM,aAAa,IAAK,CAAA,UAAA;AACxB,EAAA,OAAA,CAAQ,KAAK,cAAe,CAAA;AAAA,IAC1B,IAAA;AAAA,IACA,aAAM,CAAA,uBAAA,CAAwB,IAAK,CAAA,eAAe,CAAC,CAAA,CAAE,IAAK,CAAA,GAAG,CAAK,IAAA,UAAA,GAAa,aAAM,CAAA,OAAA,CAAQ,GAAG,CAAI,GAAA,EAAA,CAAA;AAAA;AAAA,IAGpG,eAAe,CAAM,UAAA,EAAA,aAAA,CAAM,IAAK,CAAA,MAAA,CAAO,WAAW,CAAC,CAAA;AAAA;AAAA,GAGpD,CAAC,CAAA;AAEF,EAAA,IAAI,QAAW,GAAA,cAAA,CAAe,IAAK,CAAA,aAAA,EAAe,KAAK,CAAA;AACvD,EAAA,IAAI,eAAe,IAAK,CAAA,aAAA,IAAiB,gBAAE,QAAS,CAAA,IAAA,CAAK,aAAa,CAAG,EAAA;AACvE,IAAW,QAAA,GAAA,YAAA,CAAa,KAAK,aAAa,CAAA;AAAA;AAG5C,EAAA,OAAA,CAAQ,KAAK,cAAe,CAAA;AAAA,IAC1B,aAAA,CAAM,KAAK,WAAM,CAAA;AAAA,IACjB,QAAA;AAAA,IACA,IAAK,CAAA,SAAA,IACH,aAAM,CAAA,IAAA,CAAK,OAAO,iBAAiB,CAAA,IAChC,WAAc,GAAA,cAAA,CAAe,KAAK,gBAAgB,CAAA,GAAI,cAAe,CAAA,IAAA,CAAK,kBAAkB,KAAK,CAAA;AAAA,GAEvG,CAAC,CAAA;AAUF,EAAY,UAAA,EAAA,OAAA,CAAQ,CAAC,GAAQ,KAAA;AAC3B,IAAA,OAAA,CAAQ,KAAK,aAAM,CAAA,GAAA,CAAI,SAAY,GAAA,QAAA,GAAW,KAAK,CAAE,CAAA,CAAA,KAAA,EAAQ,GAAI,CAAA,SAAA,GAAY,eAAe,EAAE,CAAA,EAAG,GAAI,CAAA,OAAO,EAAE,CAAC,CAAA;AAK/G,IAAA,IAAI,IAAI,GAAK,EAAA;AACX,MAAA,OAAA,CAAQ,IAAK,CAAA,GAAG,GAAI,CAAA,GAAA,CAAI,KAAM,CAAA,IAAI,CAAE,CAAA,GAAA,CAAI,CAAC,IAAA,KAAS,CAAQ,KAAA,EAAA,IAAI,EAAE,CAAC,CAAA;AAAA;AACnE,GACD,CAAA;AAQD,EAAO,OAAA,OAAA,CAAQ,KAAK,IAAI,CAAA;AAC1B;AAxDgB,MAAA,CAAA,cAAA,EAAA,gBAAA,CAAA;;;ACzFhB,eAAsB,oBAAoB,IAEvC,EAAA;AACD,EAAM,MAAA,QAAA,GAAW,MAAM,YAAa,CAAA;AAAA,IAClC,GAAG,IAAA;AAAA,IACH,SAAA,gCAAkB,CAAM,KAAA;AAAA,KAAb,EAAA,WAAA;AAAA,GAGZ,CAAA;AAED,EAAO,OAAA,QAAA;AACT;AAXsB,MAAA,CAAA,mBAAA,EAAA,qBAAA,CAAA","file":"chunk-CLVBJA4G.js","sourcesContent":["import ansis, { AnsiColors, AnsiStyles } from 'ansis';\nimport _ from '@env-spec/utils/my-dash';\n\nimport { ConfigItem } from '../../../env-graph/src/lib/config-item';\nimport { VarlockError } from '../../../env-graph/src/lib/errors';\nimport { redactString } from '../runtime/lib/redaction';\n\ntype ColorMod = AnsiStyles | AnsiColors;\ntype ColorMods = ColorMod | Array<ColorMod>;\n\nfunction applyMods(str: string, mods?: ColorMods) {\n  if (!mods) return str;\n  if (_.isArray(mods)) {\n    let modStr = str;\n    mods.forEach((mod) => {\n      modStr = ansis[mod](modStr);\n    });\n    return modStr;\n  }\n  return ansis[mods](str);\n}\n\nexport function formattedValue(val: any, showType = false) {\n  let strVal: string = '';\n  let strType: string = '';\n  let mods: ColorMods | undefined;\n  if (_.isBoolean(val)) {\n    strVal = val.toString();\n    mods = ['yellow', 'italic'];\n    strType = 'boolean';\n  } else if (_.isNumber(val)) {\n    strVal = val.toString();\n    mods = 'yellow';\n    strType = 'number';\n  } else if (_.isString(val)) {\n    strVal = `\"${val}\"`;\n    strType = 'string';\n  } else if (_.isPlainObject(val)) {\n    // TODO: can definitely make this better...\n    strVal = JSON.stringify(val);\n    strType = 'object';\n  } else if (val === null) {\n    strVal = 'null';\n    mods = 'gray';\n  } else if (val === undefined) {\n    strVal = 'undefined';\n    mods = 'gray';\n  }\n  return [\n    applyMods(strVal, mods),\n    showType && strType ? ansis.gray(` (${strType})`) : '',\n  ].join('');\n}\n\n\nexport function formatError(err: VarlockError) {\n  let whenStr = '';\n  if (err.type === 'SchemaError') {\n    whenStr += 'during schema initialization';\n  }\n  if (err.type === 'ValidationError') {\n    whenStr += 'during validation';\n  }\n  if (err.type === 'CoercionError') {\n    whenStr += 'during coercion';\n  }\n  if (err.type === 'ResolutionError') {\n    whenStr += 'during resolution';\n  }\n\n  let errStr = `${err.icon} ${err.message}`;\n  if (err.isUnexpected) {\n    errStr += ansis.gray.italic(`\\n   (unexpected error${whenStr ? ` ${whenStr}` : ''})`);\n    if ('stack' in err) errStr += err.stack;\n  }\n  return errStr;\n}\n\nexport function joinAndCompact(strings: Array<string | number | boolean | undefined | null | false>, joinChar = ' ') {\n  return strings.filter((s) => (\n    // we'll not filter out empty strings - because it's useful to just add newlines\n    s !== undefined && s !== null && s !== false\n  )).join(joinChar);\n}\n\nconst VALIDATION_STATE_COLORS = {\n  error: 'red',\n  warn: 'yellow',\n  valid: 'cyan',\n} as const;\n\nexport function getItemSummary(item: ConfigItem) {\n  const summary: Array<string> = [];\n  const itemErrors = item.errors;\n  const icon = itemErrors.length ? itemErrors[0].icon : '✅';\n  const isSensitive = item.isSensitive;\n  const isRequired = item.isRequired;\n  summary.push(joinAndCompact([\n    icon,\n    ansis[VALIDATION_STATE_COLORS[item.validationState]](item.key) + (isRequired ? ansis.magenta('*') : ''),\n\n    // ansis.gray(`[type = ${item.type.typeLabel}]`),\n    isSensitive && ` 🔐${ansis.gray.italic('sensitive')}`,\n\n    // item.useAt ? ansis.gray.italic(`(${item.useAt?.join(', ')})`) : undefined,\n  ]));\n\n  let valAsStr = formattedValue(item.resolvedValue, false);\n  if (isSensitive && item.resolvedValue && _.isString(item.resolvedValue)) {\n    valAsStr = redactString(item.resolvedValue)!;\n  }\n\n  summary.push(joinAndCompact([\n    ansis.gray('   └'),\n    valAsStr,\n    item.isCoerced && (\n      ansis.gray.italic('< coerced from ')\n      + (isSensitive ? formattedValue(item.resolvedRawValue) : formattedValue(item.resolvedRawValue, false))\n    ),\n  ]));\n\n  // if (item.overrides?.length) {\n  //   const activeOverride = item.overrides[0];\n  //   let overrideNote = ansis.gray.italic('value set via override: ');\n  //   overrideNote += ansis.gray(activeOverride.sourceType);\n  //   if (activeOverride.sourceLabel) overrideNote += ansis.gray(` - ${activeOverride.sourceLabel}`);\n  //   summary.push(`      ${overrideNote}`);\n  // }\n\n  itemErrors?.forEach((err) => {\n    summary.push(ansis[err.isWarning ? 'yellow' : 'red'](`   - ${err.isWarning ? '[WARNING] ' : ''}${err.message}`));\n\n    // TODO: standardize here how we show parse error locations and stack info?\n\n    // summary.push(...err.cleanedStack || '');\n    if (err.tip) {\n      summary.push(...err.tip.split('\\n').map((line) => `     ${line}`));\n    }\n  });\n\n  // NO OBJECT/CHILDREN FOR NOW\n  // for (const childItem of _.values(item.children)) {\n  //   const childSummary = getItemSummary(childItem);\n  //   summary.push(childSummary.split('\\n').map((l) => `  ${l}`).join('\\n'));\n  // }\n\n  return summary.join('\\n');\n}\n","import { loadEnvGraph } from '@env-spec/env-graph';\n\nexport async function loadVarlockEnvGraph(opts?: {\n  currentEnvFallback?: string,\n}) {\n  const envGraph = await loadEnvGraph({\n    ...opts,\n    afterInit: async (g) => {\n      // TODO: register varlock resolver\n    },\n  });\n\n  return envGraph;\n}\n"]}

package/dist/chunk-DHFEY3C4.js

@@ -0,0 +1,141 @@
+import { redactString } from './chunk-FGMXIEFA.js';
+import { __name } from './chunk-XN24GZXQ.js';
+
+// src/runtime/env.ts
+function isString(s) {
+  return Object.prototype.toString.call(s) === "[object String]";
+}
+__name(isString, "isString");
+var UNMASK_STR = "\u{1F441}";
+var sensitiveSecretsMap = {};
+var redactorFindReplace;
+function resetRedactionMap(graph) {
+  sensitiveSecretsMap = {};
+  for (const itemKey in graph.config) {
+    const item = graph.config[itemKey];
+    if (item.isSensitive && item.value && isString(item.value)) {
+      const redacted = redactString(item.value);
+      if (redacted) sensitiveSecretsMap[item.value] = { key: itemKey, redacted };
+    }
+  }
+  if (!Object.keys(sensitiveSecretsMap).length) {
+    redactorFindReplace = void 0;
+    return;
+  }
+  const findRegex = new RegExp(
+    [
+      `(${UNMASK_STR} )?`,
+      "(",
+      Object.keys(sensitiveSecretsMap).map((s) => s.replace(/[()[\]{}*+?^$|#.,/\\\s-]/g, "\\$&")).sort((a, b) => b.length - a.length).join("|"),
+      ")",
+      `( ${UNMASK_STR})?`
+    ].join(""),
+    "g"
+  );
+  const replaceFn = /* @__PURE__ */ __name((match, pre, val, post) => {
+    if (pre && post) return match;
+    return sensitiveSecretsMap[val].redacted;
+  }, "replaceFn");
+  redactorFindReplace = { find: findRegex, replace: replaceFn };
+}
+__name(resetRedactionMap, "resetRedactionMap");
+function redactSensitiveConfig(o) {
+  if (!redactorFindReplace) return o;
+  if (!o) return o;
+  if (Array.isArray(o)) {
+    return o.map(redactSensitiveConfig);
+  }
+  if (o && typeof o === "object" && Object.getPrototypeOf(o) === Object.prototype) {
+    try {
+      return JSON.parse(redactSensitiveConfig(JSON.stringify(o)));
+    } catch (err) {
+      return o;
+    }
+  }
+  const type = typeof o;
+  if (type === "string" || type === "object" && Object.prototype.toString.call(o) === "[object String]") {
+    return o.replaceAll(redactorFindReplace.find, redactorFindReplace.replace);
+  }
+  return o;
+}
+__name(redactSensitiveConfig, "redactSensitiveConfig");
+function revealSensitiveConfig(secretStr) {
+  if (!globalThis._varlockOrigWriteToConsoleFn) return secretStr;
+  return `${UNMASK_STR} ${secretStr} ${UNMASK_STR}`;
+}
+__name(revealSensitiveConfig, "revealSensitiveConfig");
+function scanForLeaks(toScan, meta) {
+  function scanStrForLeaks(strToScan) {
+    for (const sensitiveValue in sensitiveSecretsMap) {
+      if (strToScan.includes(sensitiveValue)) {
+        const itemKey = sensitiveSecretsMap[sensitiveValue].key;
+        console.error([
+          "",
+          `\u{1F6A8} ${"DETECTED LEAKED SENSITIVE CONFIG"} \u{1F6A8}`,
+          `> Config item key: ${itemKey}`,
+          ...meta?.method ? [`> Scan method: ${meta.method}`] : [],
+          ...meta?.file ? [`> File: ${meta.file}`] : [],
+          ""
+        ].join("\n"));
+        throw new Error(`\u{1F6A8} DETECTED LEAKED SENSITIVE CONFIG - ${itemKey}`);
+      }
+    }
+  }
+  __name(scanStrForLeaks, "scanStrForLeaks");
+  if (isString(toScan)) {
+    scanStrForLeaks(toScan);
+    return toScan;
+  } else if (toScan instanceof Buffer) {
+    scanStrForLeaks(toScan.toString());
+    return toScan;
+  } else if (toScan instanceof ReadableStream) {
+    if (toScan.locked) {
+      return toScan;
+    }
+    const chunkDecoder = new TextDecoder();
+    return toScan.pipeThrough(
+      new TransformStream({
+        transform(chunk, controller) {
+          const chunkStr = chunkDecoder.decode(chunk);
+          scanStrForLeaks(chunkStr);
+          controller.enqueue(chunk);
+        }
+      })
+    );
+  }
+  return toScan;
+}
+__name(scanForLeaks, "scanForLeaks");
+var initializedEnv = false;
+var envValues = {};
+var varlockSettings = {};
+function initVarlockEnv(opts) {
+  try {
+    const serializedEnvData = JSON.parse(process.env.__VARLOCK_ENV || "{}");
+    Object.assign(varlockSettings, serializedEnvData.settings);
+    resetRedactionMap(serializedEnvData);
+    for (const itemKey in serializedEnvData.config) {
+      const itemValue = serializedEnvData.config[itemKey].value;
+      envValues[itemKey] = itemValue;
+      if (opts?.setProcessEnv !== false && itemValue !== void 0) process.env[itemKey] = String(itemValue);
+    }
+  } catch (err) {
+    console.error("failed to load varlock env", err, process.env.__VARLOCK_ENV);
+  }
+  initializedEnv = true;
+}
+__name(initVarlockEnv, "initVarlockEnv");
+if (process.env.__VARLOCK_ENV && !initializedEnv) {
+  initVarlockEnv({ setProcessEnv: false });
+}
+var EnvProxy = new Proxy({}, {
+  get(target, prop) {
+    if (typeof prop !== "string") throw new Error("prop keys cannot be symbols");
+    return envValues[prop];
+  }
+});
+var ENV = EnvProxy;
+
+export { ENV, initVarlockEnv, redactSensitiveConfig, resetRedactionMap, revealSensitiveConfig, scanForLeaks, varlockSettings };
+//# sourceMappingURL=chunk-DHFEY3C4.js.map
+//# sourceMappingURL=chunk-DHFEY3C4.js.map

package/dist/chunk-DHFEY3C4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/runtime/env.ts"],"names":[],"mappings":";;;;AASA,SAAS,SAAS,CAAQ,EAAA;AACxB,EAAA,OAAO,MAAO,CAAA,SAAA,CAAU,QAAS,CAAA,IAAA,CAAK,CAAC,CAAM,KAAA,iBAAA;AAC/C;AAFS,MAAA,CAAA,QAAA,EAAA,UAAA,CAAA;AAIT,IAAM,UAAa,GAAA,WAAA;AAInB,IAAI,sBAAyE,EAAC;AAG9E,IAAI,mBAAA;AAEG,SAAS,kBAAkB,KAA2B,EAAA;AAE3D,EAAA,mBAAA,GAAsB,EAAC;AACvB,EAAW,KAAA,MAAA,OAAA,IAAW,MAAM,MAAQ,EAAA;AAClC,IAAM,MAAA,IAAA,GAAO,KAAM,CAAA,MAAA,CAAO,OAAO,CAAA;AACjC,IAAA,IAAI,KAAK,WAAe,IAAA,IAAA,CAAK,SAAS,QAAS,CAAA,IAAA,CAAK,KAAK,CAAG,EAAA;AAE1D,MAAM,MAAA,QAAA,GAAW,YAAa,CAAA,IAAA,CAAK,KAAK,CAAA;AACxC,MAAI,IAAA,QAAA,sBAA8B,IAAK,CAAA,KAAK,IAAI,EAAE,GAAA,EAAK,SAAS,QAAS,EAAA;AAAA;AAC3E;AAGF,EAAA,IAAI,CAAC,MAAA,CAAO,IAAK,CAAA,mBAAmB,EAAE,MAAQ,EAAA;AAC5C,IAAsB,mBAAA,GAAA,MAAA;AACtB,IAAA;AAAA;AAIF,EAAA,MAAM,YAAY,IAAI,MAAA;AAAA,IACpB;AAAA,MACE,IAAI,UAAU,CAAA,GAAA,CAAA;AAAA,MACd,GAAA;AAAA,MACA,MAAA,CAAO,KAAK,mBAAmB,CAAA,CAE5B,IAAI,CAAC,CAAA,KAAM,CAAE,CAAA,OAAA,CAAQ,2BAA6B,EAAA,MAAM,CAAC,CAEzD,CAAA,IAAA,CAAK,CAAC,CAAA,EAAG,CAAM,KAAA,CAAA,CAAE,SAAS,CAAE,CAAA,MAAM,CAClC,CAAA,IAAA,CAAK,GAAG,CAAA;AAAA,MACX,GAAA;AAAA,MACA,KAAK,UAAU,CAAA,EAAA;AAAA,KACjB,CAAE,KAAK,EAAE,CAAA;AAAA,IACT;AAAA,GACF;AAEA,EAAA,MAAM,SAAuB,mBAAA,MAAA,CAAA,CAAC,KAAO,EAAA,GAAA,EAAK,KAAK,IAAS,KAAA;AAGtD,IAAI,IAAA,GAAA,IAAO,MAAa,OAAA,KAAA;AACxB,IAAO,OAAA,mBAAA,CAAoB,GAAG,CAAE,CAAA,QAAA;AAAA,GAJL,EAAA,WAAA,CAAA;AAM7B,EAAA,mBAAA,GAAsB,EAAE,IAAA,EAAM,SAAW,EAAA,OAAA,EAAS,SAAU,EAAA;AAC9D;AAzCgB,MAAA,CAAA,iBAAA,EAAA,mBAAA,CAAA;AAqDT,SAAS,sBAAsB,CAAa,EAAA;AACjD,EAAI,IAAA,CAAC,qBAA4B,OAAA,CAAA;AACjC,EAAI,IAAA,CAAC,GAAU,OAAA,CAAA;AAKf,EAAI,IAAA,KAAA,CAAM,OAAQ,CAAA,CAAC,CAAG,EAAA;AACpB,IAAO,OAAA,CAAA,CAAE,IAAI,qBAAqB,CAAA;AAAA;AAGpC,EAAI,IAAA,CAAA,IAAK,OAAQ,CAAO,KAAA,QAAA,IAAY,OAAO,cAAe,CAAA,CAAC,CAAM,KAAA,MAAA,CAAO,SAAW,EAAA;AACjF,IAAI,IAAA;AACF,MAAA,OAAO,KAAK,KAAM,CAAA,qBAAA,CAAsB,KAAK,SAAU,CAAA,CAAC,CAAC,CAAC,CAAA;AAAA,aACnD,GAAK,EAAA;AACZ,MAAO,OAAA,CAAA;AAAA;AACT;AAGF,EAAA,MAAM,OAAO,OAAO,CAAA;AACpB,EAAI,IAAA,IAAA,KAAS,QAAa,IAAA,IAAA,KAAS,QAAY,IAAA,MAAA,CAAO,UAAU,QAAS,CAAA,IAAA,CAAK,CAAC,CAAA,KAAM,iBAAoB,EAAA;AACvG,IAAA,OAAQ,CAAa,CAAA,UAAA,CAAW,mBAAoB,CAAA,IAAA,EAAM,oBAAoB,OAAO,CAAA;AAAA;AAGvF,EAAO,OAAA,CAAA;AACT;AAzBgB,MAAA,CAAA,qBAAA,EAAA,uBAAA,CAAA;AA+BT,SAAS,sBAAsB,SAAmB,EAAA;AAEvD,EAAI,IAAA,CAAE,UAAmB,CAAA,4BAAA,EAAqC,OAAA,SAAA;AAE9D,EAAA,OAAO,CAAG,EAAA,UAAU,CAAI,CAAA,EAAA,SAAS,IAAI,UAAU,CAAA,CAAA;AACjD;AALgB,MAAA,CAAA,qBAAA,EAAA,uBAAA,CAAA;AAYT,SAAS,YAAA,CACd,QAEA,IAIA,EAAA;AACA,EAAA,SAAS,gBAAgB,SAAmB,EAAA;AAI1C,IAAA,KAAA,MAAW,kBAAkB,mBAAqB,EAAA;AAChD,MAAI,IAAA,SAAA,CAAU,QAAS,CAAA,cAAc,CAAG,EAAA;AACtC,QAAM,MAAA,OAAA,GAAU,mBAAoB,CAAA,cAAc,CAAE,CAAA,GAAA;AAIpD,QAAA,OAAA,CAAQ,KAAM,CAAA;AAAA,UACZ,EAAA;AAAA,UACA,aAAM,kCAAkC,CAAA,UAAA,CAAA;AAAA,UACxC,sBAAsB,OAAO,CAAA,CAAA;AAAA,UAC7B,GAAG,MAAM,MAAS,GAAA,CAAC,kBAAkB,IAAK,CAAA,MAAM,CAAE,CAAA,CAAA,GAAI,EAAC;AAAA,UACvD,GAAG,MAAM,IAAO,GAAA,CAAC,WAAW,IAAK,CAAA,IAAI,CAAE,CAAA,CAAA,GAAI,EAAC;AAAA,UAC5C;AAAA,SACF,CAAE,IAAK,CAAA,IAAI,CAAC,CAAA;AAEZ,QAAA,MAAM,IAAI,KAAA,CAAM,CAAyC,6CAAA,EAAA,OAAO,CAAE,CAAA,CAAA;AAAA;AACpE;AACF;AArBO,EAAA,MAAA,CAAA,eAAA,EAAA,iBAAA,CAAA;AAyBT,EAAI,IAAA,QAAA,CAAS,MAAM,CAAG,EAAA;AACpB,IAAA,eAAA,CAAgB,MAAgB,CAAA;AAChC,IAAO,OAAA,MAAA;AAAA,GACT,MAAA,IAAW,kBAAkB,MAAQ,EAAA;AACnC,IAAgB,eAAA,CAAA,MAAA,CAAO,UAAU,CAAA;AACjC,IAAO,OAAA,MAAA;AAAA,GAET,MAAA,IAAW,kBAAkB,cAAgB,EAAA;AAC3C,IAAA,IAAI,OAAO,MAAQ,EAAA;AAEjB,MAAO,OAAA,MAAA;AAAA;AAIT,IAAM,MAAA,YAAA,GAAe,IAAI,WAAY,EAAA;AACrC,IAAA,OAAO,MAAO,CAAA,WAAA;AAAA,MACZ,IAAI,eAAgB,CAAA;AAAA,QAClB,SAAA,CAAU,OAAO,UAAY,EAAA;AAC3B,UAAM,MAAA,QAAA,GAAW,YAAa,CAAA,MAAA,CAAO,KAAK,CAAA;AAC1C,UAAA,eAAA,CAAgB,QAAQ,CAAA;AACxB,UAAA,UAAA,CAAW,QAAQ,KAAK,CAAA;AAAA;AAC1B,OACD;AAAA,KACH;AAAA;AAGF,EAAO,OAAA,MAAA;AACT;AA5DgB,MAAA,CAAA,YAAA,EAAA,cAAA,CAAA;AAqEhB,IAAI,cAAiB,GAAA,KAAA;AACrB,IAAM,YAAY,EAAC;AACZ,IAAM,kBAAkB;AAExB,SAAS,eAAe,IAE5B,EAAA;AAED,EAAI,IAAA;AACF,IAAA,MAAM,oBAAwC,IAAK,CAAA,KAAA,CAAM,OAAQ,CAAA,GAAA,CAAI,iBAAiB,IAAI,CAAA;AAC1F,IAAO,MAAA,CAAA,MAAA,CAAO,eAAiB,EAAA,iBAAA,CAAkB,QAAQ,CAAA;AACzD,IAAA,iBAAA,CAAkB,iBAAiB,CAAA;AACnC,IAAW,KAAA,MAAA,OAAA,IAAW,kBAAkB,MAAQ,EAAA;AAC9C,MAAA,MAAM,SAAY,GAAA,iBAAA,CAAkB,MAAO,CAAA,OAAO,CAAE,CAAA,KAAA;AACpD,MAAA,SAAA,CAAU,OAAO,CAAI,GAAA,SAAA;AACrB,MAAI,IAAA,IAAA,EAAM,aAAkB,KAAA,KAAA,IAAS,SAAc,KAAA,KAAA,CAAA,UAAmB,GAAI,CAAA,OAAO,CAAI,GAAA,MAAA,CAAO,SAAS,CAAA;AAAA;AACvG,WACO,GAAK,EAAA;AACZ,IAAA,OAAA,CAAQ,KAAM,CAAA,4BAAA,EAA8B,GAAK,EAAA,OAAA,CAAQ,IAAI,aAAa,CAAA;AAAA;AAE5E,EAAiB,cAAA,GAAA,IAAA;AACnB;AAjBgB,MAAA,CAAA,cAAA,EAAA,gBAAA,CAAA;AAmBhB,IAAI,OAAQ,CAAA,GAAA,CAAI,aAAiB,IAAA,CAAC,cAAgB,EAAA;AAGhD,EAAe,cAAA,CAAA,EAAE,aAAe,EAAA,KAAA,EAAO,CAAA;AACzC;AASA,IAAM,QAAW,GAAA,IAAI,KAAsB,CAAA,EAAI,EAAA;AAAA,EAC7C,GAAA,CAAI,QAAQ,IAAM,EAAA;AAChB,IAAA,IAAI,OAAO,IAAS,KAAA,QAAA,EAAgB,MAAA,IAAI,MAAM,6BAA6B,CAAA;AAC3E,IAAA,OAAO,UAAU,IAAI,CAAA;AAAA;AAEzB,CAAC,CAAA;AAEM,IAAM,GAAM,GAAA","file":"chunk-DHFEY3C4.js","sourcesContent":["import { type SerializedEnvGraph } from '@env-spec/env-graph';\nimport { debug } from './lib/debug';\nimport { redactString } from './lib/redaction';\n\n// TODO: would like to move all of the redaction utils out of this file\n// but its complicated since it is imported by code that may be run in the backend and frontend\n// but the patching code (which only runs in the backend) use these helper functions\n\n// this does not cover all cases, but serves our needs so far for Next.js\nfunction isString(s: any) {\n  return Object.prototype.toString.call(s) === '[object String]';\n}\n\nconst UNMASK_STR = '👁';\n\n\n/** key value lookup of sensitive values to their redacted version */\nlet sensitiveSecretsMap: Record<string, { key: string, redacted: string }> = {};\n\ntype ReplaceFn = (match: string, pre: string, val: string, post: string) => string;\nlet redactorFindReplace: undefined | { find: RegExp, replace: ReplaceFn };\n\nexport function resetRedactionMap(graph: SerializedEnvGraph) {\n  // reset map of { [sensitive] => redacted }\n  sensitiveSecretsMap = {};\n  for (const itemKey in graph.config) {\n    const item = graph.config[itemKey];\n    if (item.isSensitive && item.value && isString(item.value)) {\n      // TODO: we want to respect masking settings from the schema (once added)\n      const redacted = redactString(item.value);\n      if (redacted) sensitiveSecretsMap[item.value] = { key: itemKey, redacted };\n    }\n  }\n  // if no sensitive items exist, we dont need to do any redaction, but the redact fn is checking for undefined\n  if (!Object.keys(sensitiveSecretsMap).length) {\n    redactorFindReplace = undefined;\n    return;\n  }\n\n  // reset find/replace regex+fn used for redacting secrets in strings\n  const findRegex = new RegExp(\n    [\n      `(${UNMASK_STR} )?`,\n      '(',\n      Object.keys(sensitiveSecretsMap)\n        // Escape special characters\n        .map((s) => s.replace(/[()[\\]{}*+?^$|#.,/\\\\\\s-]/g, '\\\\$&'))\n        // Sort for maximal munch\n        .sort((a, b) => b.length - a.length)\n        .join('|'),\n      ')',\n      `( ${UNMASK_STR})?`,\n    ].join(''),\n    'g',\n  );\n\n  const replaceFn: ReplaceFn = (match, pre, val, post) => {\n    // the pre and post matches only will be populated if they were present\n    // and they are used to unmask the secret - so we do not want to replace in this case\n    if (pre && post) return match;\n    return sensitiveSecretsMap[val].redacted;\n  };\n  redactorFindReplace = { find: findRegex, replace: replaceFn };\n}\n\n\n// While the module itself acts as a singleton to hold the current map of redacted values\n// we expose only the below const to end users\n\n\n/**\n * Redacts senstive config values from any string/array/object/etc\n *\n * NOTE - must be used only after varlock has loaded config\n * */\nexport function redactSensitiveConfig(o: any): any {\n  if (!redactorFindReplace) return o;\n  if (!o) return o;\n\n  // TODO: handle more cases?\n  // we can probably redact safely from a few other datatypes - like set,map,etc?\n  // objects are a bit tougher\n  if (Array.isArray(o)) {\n    return o.map(redactSensitiveConfig);\n  }\n  // try to redact if it's a plain object - not necessarily great for perf...\n  if (o && typeof (o) === 'object' && Object.getPrototypeOf(o) === Object.prototype) {\n    try {\n      return JSON.parse(redactSensitiveConfig(JSON.stringify(o)));\n    } catch (err) {\n      return o;\n    }\n  }\n\n  const type = typeof o;\n  if (type === 'string' || (type === 'object' && Object.prototype.toString.call(o) === '[object String]')) {\n    return (o as string).replaceAll(redactorFindReplace.find, redactorFindReplace.replace);\n  }\n\n  return o;\n}\n\n/**\n * utility to unmask a secret/sensitive value when logging to the console\n * currently this only works on a single secret, not objects or aggregated strings\n * */\nexport function revealSensitiveConfig(secretStr: string) {\n  // if redaction not enabled, we just return the secret itself\n  if (!(globalThis as any)._varlockOrigWriteToConsoleFn) return secretStr;\n  // otherwise we add some wrapper characters which will be removed by the patched console behaviour\n  return `${UNMASK_STR} ${secretStr} ${UNMASK_STR}`;\n}\n\n\n\n\n\n// reusable leak scanning helper function, used by various integrations\nexport function scanForLeaks(\n  toScan: string | Response | ReadableStream,\n  // optional additional information about what is being scanned to be used in error messages\n  meta?: {\n    method?: string,\n    file?: string,\n  },\n) {\n  function scanStrForLeaks(strToScan: string) {\n    // console.log('[varlock leak scanner] ', strToScan.substr(0, 100));\n\n    // TODO: probably should use a single regex\n    for (const sensitiveValue in sensitiveSecretsMap) {\n      if (strToScan.includes(sensitiveValue)) {\n        const itemKey = sensitiveSecretsMap[sensitiveValue].key;\n\n        // error stack can gets awkwardly buried since we're so deep in the internals\n        // so we'll write a nicer error message to help the user debug\n        console.error([\n          '',\n          `🚨 ${'DETECTED LEAKED SENSITIVE CONFIG'} 🚨`,\n          `> Config item key: ${itemKey}`,\n          ...meta?.method ? [`> Scan method: ${meta.method}`] : [],\n          ...meta?.file ? [`> File: ${meta.file}`] : [],\n          '',\n        ].join('\\n'));\n\n        throw new Error(`🚨 DETECTED LEAKED SENSITIVE CONFIG - ${itemKey}`);\n      }\n    }\n  }\n\n  // scan a string\n  if (isString(toScan)) {\n    scanStrForLeaks(toScan as string);\n    return toScan;\n  } else if (toScan instanceof Buffer) {\n    scanStrForLeaks(toScan.toString());\n    return toScan;\n  // scan a ReadableStream by piping it through a scanner\n  } else if (toScan instanceof ReadableStream) {\n    if (toScan.locked) {\n      // console.log('> stream already locked');\n      return toScan;\n    } else {\n      // console.log('> stream will be scanned!');\n    }\n    const chunkDecoder = new TextDecoder();\n    return toScan.pipeThrough(\n      new TransformStream({\n        transform(chunk, controller) {\n          const chunkStr = chunkDecoder.decode(chunk);\n          scanStrForLeaks(chunkStr);\n          controller.enqueue(chunk);\n        },\n      }),\n    );\n  }\n  // other things may be passed in like Buffer... but we'll ignore for now\n  return toScan;\n}\n\n// -----------\n\n\n\n\n// --------------\n\nlet initializedEnv = false;\nconst envValues = {} as Record<string, any>;\nexport const varlockSettings = {} as Record<string, any>;\n\nexport function initVarlockEnv(opts?: {\n  setProcessEnv?: boolean,\n}) {\n  // console.log('⚡️ INIT VARLOCK ENV!', initializedEnv, !!process.env.__VARLOCK_ENV);\n  try {\n    const serializedEnvData: SerializedEnvGraph = JSON.parse(process.env.__VARLOCK_ENV || '{}');\n    Object.assign(varlockSettings, serializedEnvData.settings);\n    resetRedactionMap(serializedEnvData);\n    for (const itemKey in serializedEnvData.config) {\n      const itemValue = serializedEnvData.config[itemKey].value;\n      envValues[itemKey] = itemValue;\n      if (opts?.setProcessEnv !== false && itemValue !== undefined) process.env[itemKey] = String(itemValue);\n    }\n  } catch (err) {\n    console.error('failed to load varlock env', err, process.env.__VARLOCK_ENV);\n  }\n  initializedEnv = true;\n}\n\nif (process.env.__VARLOCK_ENV && !initializedEnv) {\n  // if we are automatically loading because __VARLOCK_ENV is already set\n  // then we assume process.env vars have also already been set (although might not harm anything?)\n  initVarlockEnv({ setProcessEnv: false });\n}\n\n// this gets exported and then augmented by our type generation\n// ideally we'd start with a loose type `Record<string,any>` and then override it with the actual schema\n// so that if type generation was disabled, a user could still use `ENV`\n// but TS wont let us, so instead we start with it being empty, which will cause type errors\n// unless type generation is enabled\nexport interface TypedEnvSchema {}\n\nconst EnvProxy = new Proxy<TypedEnvSchema>({}, {\n  get(target, prop) {\n    if (typeof prop !== 'string') throw new Error('prop keys cannot be symbols');\n    return envValues[prop];\n  },\n});\n\nexport const ENV = EnvProxy;\n"]}

package/dist/{chunk-Z55UMN2B.js → chunk-DOIKZ3NG.js}

@@ -1,6 +1,6 @@
-import { getItemSummary, joinAndCompact } from './chunk-6YLXKXKR.js';
-import { my_dash_default } from './chunk-G4BD2BPH.js';
+import { getItemSummary, joinAndCompact } from './chunk-CLVBJA4G.js';
 import { ansis_default } from './chunk-7UQXFWKN.js';
+import { my_dash_default } from './chunk-DROJWTCD.js';
 import { __name } from './chunk-XN24GZXQ.js';
 
 // src/cli/helpers/error-checks.ts
@@ -65,5 +65,5 @@ function checkForConfigErrors(envGraph, opts) {
 __name(checkForConfigErrors, "checkForConfigErrors");
 
 export { InvalidEnvError, checkForConfigErrors, checkForSchemaErrors };
-//# sourceMappingURL=chunk-Z55UMN2B.js.map
-//# sourceMappingURL=chunk-Z55UMN2B.js.map
+//# sourceMappingURL=chunk-DOIKZ3NG.js.map
+//# sourceMappingURL=chunk-DOIKZ3NG.js.map

package/dist/{chunk-Z55UMN2B.js.map → chunk-DOIKZ3NG.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli/helpers/error-checks.ts"],"names":[],"mappings":";;;;;;AAKO,SAAS,qBAAqB,QAAoB,EAAA;AAEvD,EAAW,KAAA,MAAA,MAAA,IAAU,SAAS,WAAa,EAAA;AAOzC,IAAA,IAAI,OAAO,YAAc,EAAA;AACvB,MAAA,OAAA,CAAQ,GAAI,CAAA,CAAA,0CAAA,EAAsC,MAAO,CAAA,KAAK,CAAE,CAAA,CAAA;AAChE,MAAQ,OAAA,CAAA,GAAA,CAAI,MAAO,CAAA,YAAA,CAAa,OAAO,CAAA;AACvC,MAAQ,OAAA,CAAA,GAAA,CAAI,MAAO,CAAA,YAAA,CAAa,QAAQ,CAAA;AAExC,MAAM,MAAA,MAAA,GAAS,OAAO,YAAa,CAAA,QAAA;AAEnC,MAAA,MAAM,UAAa,GAAA;AAAA,QACjB,MAAO,CAAA,OAAA;AAAA,QACP,CAAG,EAAA,aAAA,CAAM,IAAK,CAAA,GAAA,CAAI,OAAO,MAAO,CAAA,SAAA,GAAY,CAAC,CAAC,CAAC,CAAA,EAAG,aAAM,CAAA,GAAA,CAAI,GAAG,CAAC,CAAA;AAAA,OAClE,CAAE,KAAK,IAAI,CAAA;AAEX,MAAA,OAAA,CAAQ,IAAI,yBAAyB,CAAA;AACrC,MAAQ,OAAA,CAAA,GAAA,CAAI,CAAI,CAAA,EAAA,MAAA,CAAO,IAAI,CAAA,CAAA,EAAI,OAAO,UAAU,CAAA,CAAA,EAAI,MAAO,CAAA,SAAS,CAAE,CAAA,CAAA;AACtE,MAAA,OAAA,CAAQ,IAAI,UAAU,CAAA;AAEtB,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA;AAChB;AAUJ;AApCgB,MAAA,CAAA,oBAAA,EAAA,sBAAA,CAAA;AAsCH,IAAA,eAAA,GAAN,cAA8B,KAAM,CAAA;AAAA,EA3C3C;AA2C2C,IAAA,MAAA,CAAA,IAAA,EAAA,iBAAA,CAAA;AAAA;AAAA,EACzC,WAAc,GAAA;AACZ,IAAA,KAAA,CAAM,6CAA6C,CAAA;AAAA;AACrD,EACA,kBAAqB,GAAA;AACnB,IAAO,OAAA;AAAA,UAAA,EAAQ,aAAM,CAAA,GAAA,CAAI,IAAK,CAAA,OAAO,CAAC,CAAA;AAAA,CAAA;AAAA;AAE1C;AAEO,SAAS,oBAAA,CAAqB,UAAoB,IAEtD,EAAA;AACD,EAAA,MAAM,YAAe,GAAA,eAAA,CAAE,MAAO,CAAA,eAAA,CAAE,MAAO,CAAA,QAAA,CAAS,YAAY,CAAA,EAAG,CAAC,IAAA,KAAS,IAAK,CAAA,eAAA,KAAoB,OAAO,CAAA;AAGzG,EAAI,IAAA,YAAA,CAAa,SAAS,CAAG,EAAA;AAC3B,IAAA,OAAA,CAAQ,GAAI,CAAA;AAAA,+BAAA,EAAe,aAAM,CAAA,IAAA,CAAK,SAAU,CAAA,qCAAqC,CAAC,CAAA;AAAA,CAAc,CAAA;AACpG,IAAA,OAAA,CAAQ,IAAI,kBAAkB,CAAA;AAE9B,IAAE,eAAA,CAAA,IAAA,CAAK,YAAc,EAAA,CAAC,IAAS,KAAA;AAC7B,MAAQ,OAAA,CAAA,GAAA,CAAI,cAAe,CAAA,IAAI,CAAC,CAAA;AAChC,MAAA,OAAA,CAAQ,GAAI,EAAA;AAAA,KACb,CAAA;AACD,IAAA,IAAI,MAAM,OAAS,EAAA;AACjB,MAAA,OAAA,CAAQ,GAAI,EAAA;AACZ,MAAA,OAAA,CAAQ,IAAI,cAAe,CAAA;AAAA,QACzB,cAAA;AAAA,QACA,aAAA,CAAM,MAAO,CAAA,IAAA,CAAK,oCAAoC;AAAA,OACvD,CAAC,CAAA;AACF,MAAA,OAAA,CAAQ,GAAI,EAAA;AACZ,MAAA,MAAM,UAAa,GAAA,eAAA,CAAE,MAAO,CAAA,eAAA,CAAE,MAAO,CAAA,QAAA,CAAS,YAAY,CAAA,EAAG,CAAC,CAAA,KAAM,CAAC,CAAC,EAAE,OAAO,CAAA;AAC/E,MAAE,eAAA,CAAA,IAAA,CAAK,UAAY,EAAA,CAAC,IAAS,KAAA;AAC3B,QAAQ,OAAA,CAAA,GAAA,CAAI,cAAe,CAAA,IAAI,CAAC,CAAA;AAAA,OACjC,CAAA;AAAA;AAGH,IAAA,MAAM,IAAI,eAAgB,EAAA;AAAA;AAE9B;AA7BgB,MAAA,CAAA,oBAAA,EAAA,sBAAA,CAAA","file":"chunk-Z55UMN2B.js","sourcesContent":["import ansis from 'ansis';\nimport { EnvGraph } from '@env-spec/env-graph';\nimport _ from '@env-spec/utils/my-dash';\nimport { getItemSummary, joinAndCompact } from '../../lib/formatting';\n\nexport function checkForSchemaErrors(envGraph: EnvGraph) {\n  // first we check for loading/parse errors - some cases we may want to let it fail silently?\n  for (const source of envGraph.dataSources) {\n    // do we care about loading errors from disabled sources?\n    // if (source.disabled) continue;\n\n    // console.log(source);\n\n    // TODO: use a formatting helper to show the error - which will include location/stack/etc appropriately\n    if (source.loadingError) {\n      console.log(`🚨 Error encountered while loading ${source.label}`);\n      console.log(source.loadingError.message);\n      console.log(source.loadingError.location);\n\n      const errLoc = source.loadingError.location as any;\n\n      const errPreview = [\n        errLoc.lineStr,\n        `${ansis.gray('-'.repeat(errLoc.colNumber - 1))}${ansis.red('^')}`,\n      ].join('\\n');\n\n      console.log('Error parsing .env file');\n      console.log(` ${errLoc.path}:${errLoc.lineNumber}:${errLoc.colNumber}`);\n      console.log(errPreview);\n\n      process.exit(1);\n    }\n  }\n\n  // now we check for any schema errors - where something about how things are wired up is invalid\n  // NOTE - we should not have run any resolution yet\n  // TODO: make sure we are calling this before attempting to resolve values\n  // const failingItems = _.filter(_.values(envGraph.configSchema), (item) => item.validationState === 'error');\n  // if (failingItems.length > 0) {\n  //   throw new CliExitError('Schema is currently invalid');\n  // }\n}\n\nexport class InvalidEnvError extends Error {\n  constructor() {\n    super('Resolved config/env did not pass validation');\n  }\n  getFormattedOutput() {\n    return `\\n💥 ${ansis.red(this.message)} 💥\\n`;\n  }\n}\n\nexport function checkForConfigErrors(envGraph: EnvGraph, opts?: {\n  showAll?: boolean\n}) {\n  const failingItems = _.filter(_.values(envGraph.configSchema), (item) => item.validationState === 'error');\n\n  // TODO: use service.isValid?\n  if (failingItems.length > 0) {\n    console.log(`\\n🚨 🚨 🚨  ${ansis.bold.underline('Configuration is currently invalid ')}  🚨 🚨 🚨\\n`);\n    console.log('Invalid items:\\n');\n\n    _.each(failingItems, (item) => {\n      console.log(getItemSummary(item));\n      console.log();\n    });\n    if (opts?.showAll) {\n      console.log();\n      console.log(joinAndCompact([\n        'Valid items:',\n        ansis.italic.gray('(remove `--show-all` flag to hide)'),\n      ]));\n      console.log();\n      const validItems = _.filter(_.values(envGraph.configSchema), (i) => !!i.isValid);\n      _.each(validItems, (item) => {\n        console.log(getItemSummary(item));\n      });\n    }\n\n    throw new InvalidEnvError();\n  }\n}\n"]}
+{"version":3,"sources":["../src/cli/helpers/error-checks.ts"],"names":[],"mappings":";;;;;;AAKO,SAAS,qBAAqB,QAAoB,EAAA;AAEvD,EAAW,KAAA,MAAA,MAAA,IAAU,SAAS,WAAa,EAAA;AAOzC,IAAA,IAAI,OAAO,YAAc,EAAA;AACvB,MAAA,OAAA,CAAQ,GAAI,CAAA,CAAA,0CAAA,EAAsC,MAAO,CAAA,KAAK,CAAE,CAAA,CAAA;AAChE,MAAQ,OAAA,CAAA,GAAA,CAAI,MAAO,CAAA,YAAA,CAAa,OAAO,CAAA;AACvC,MAAQ,OAAA,CAAA,GAAA,CAAI,MAAO,CAAA,YAAA,CAAa,QAAQ,CAAA;AAExC,MAAM,MAAA,MAAA,GAAS,OAAO,YAAa,CAAA,QAAA;AAEnC,MAAA,MAAM,UAAa,GAAA;AAAA,QACjB,MAAO,CAAA,OAAA;AAAA,QACP,CAAG,EAAA,aAAA,CAAM,IAAK,CAAA,GAAA,CAAI,OAAO,MAAO,CAAA,SAAA,GAAY,CAAC,CAAC,CAAC,CAAA,EAAG,aAAM,CAAA,GAAA,CAAI,GAAG,CAAC,CAAA;AAAA,OAClE,CAAE,KAAK,IAAI,CAAA;AAEX,MAAA,OAAA,CAAQ,IAAI,yBAAyB,CAAA;AACrC,MAAQ,OAAA,CAAA,GAAA,CAAI,CAAI,CAAA,EAAA,MAAA,CAAO,IAAI,CAAA,CAAA,EAAI,OAAO,UAAU,CAAA,CAAA,EAAI,MAAO,CAAA,SAAS,CAAE,CAAA,CAAA;AACtE,MAAA,OAAA,CAAQ,IAAI,UAAU,CAAA;AAEtB,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA;AAChB;AAUJ;AApCgB,MAAA,CAAA,oBAAA,EAAA,sBAAA,CAAA;AAsCH,IAAA,eAAA,GAAN,cAA8B,KAAM,CAAA;AAAA,EA3C3C;AA2C2C,IAAA,MAAA,CAAA,IAAA,EAAA,iBAAA,CAAA;AAAA;AAAA,EACzC,WAAc,GAAA;AACZ,IAAA,KAAA,CAAM,6CAA6C,CAAA;AAAA;AACrD,EACA,kBAAqB,GAAA;AACnB,IAAO,OAAA;AAAA,UAAA,EAAQ,aAAM,CAAA,GAAA,CAAI,IAAK,CAAA,OAAO,CAAC,CAAA;AAAA,CAAA;AAAA;AAE1C;AAEO,SAAS,oBAAA,CAAqB,UAAoB,IAEtD,EAAA;AACD,EAAA,MAAM,YAAe,GAAA,eAAA,CAAE,MAAO,CAAA,eAAA,CAAE,MAAO,CAAA,QAAA,CAAS,YAAY,CAAA,EAAG,CAAC,IAAA,KAAS,IAAK,CAAA,eAAA,KAAoB,OAAO,CAAA;AAGzG,EAAI,IAAA,YAAA,CAAa,SAAS,CAAG,EAAA;AAC3B,IAAA,OAAA,CAAQ,GAAI,CAAA;AAAA,+BAAA,EAAe,aAAM,CAAA,IAAA,CAAK,SAAU,CAAA,qCAAqC,CAAC,CAAA;AAAA,CAAc,CAAA;AACpG,IAAA,OAAA,CAAQ,IAAI,kBAAkB,CAAA;AAE9B,IAAE,eAAA,CAAA,IAAA,CAAK,YAAc,EAAA,CAAC,IAAS,KAAA;AAC7B,MAAQ,OAAA,CAAA,GAAA,CAAI,cAAe,CAAA,IAAI,CAAC,CAAA;AAChC,MAAA,OAAA,CAAQ,GAAI,EAAA;AAAA,KACb,CAAA;AACD,IAAA,IAAI,MAAM,OAAS,EAAA;AACjB,MAAA,OAAA,CAAQ,GAAI,EAAA;AACZ,MAAA,OAAA,CAAQ,IAAI,cAAe,CAAA;AAAA,QACzB,cAAA;AAAA,QACA,aAAA,CAAM,MAAO,CAAA,IAAA,CAAK,oCAAoC;AAAA,OACvD,CAAC,CAAA;AACF,MAAA,OAAA,CAAQ,GAAI,EAAA;AACZ,MAAA,MAAM,UAAa,GAAA,eAAA,CAAE,MAAO,CAAA,eAAA,CAAE,MAAO,CAAA,QAAA,CAAS,YAAY,CAAA,EAAG,CAAC,CAAA,KAAM,CAAC,CAAC,EAAE,OAAO,CAAA;AAC/E,MAAE,eAAA,CAAA,IAAA,CAAK,UAAY,EAAA,CAAC,IAAS,KAAA;AAC3B,QAAQ,OAAA,CAAA,GAAA,CAAI,cAAe,CAAA,IAAI,CAAC,CAAA;AAAA,OACjC,CAAA;AAAA;AAGH,IAAA,MAAM,IAAI,eAAgB,EAAA;AAAA;AAE9B;AA7BgB,MAAA,CAAA,oBAAA,EAAA,sBAAA,CAAA","file":"chunk-DOIKZ3NG.js","sourcesContent":["import ansis from 'ansis';\nimport { EnvGraph } from '@env-spec/env-graph';\nimport _ from '@env-spec/utils/my-dash';\nimport { getItemSummary, joinAndCompact } from '../../lib/formatting';\n\nexport function checkForSchemaErrors(envGraph: EnvGraph) {\n  // first we check for loading/parse errors - some cases we may want to let it fail silently?\n  for (const source of envGraph.dataSources) {\n    // do we care about loading errors from disabled sources?\n    // if (source.disabled) continue;\n\n    // console.log(source);\n\n    // TODO: use a formatting helper to show the error - which will include location/stack/etc appropriately\n    if (source.loadingError) {\n      console.log(`🚨 Error encountered while loading ${source.label}`);\n      console.log(source.loadingError.message);\n      console.log(source.loadingError.location);\n\n      const errLoc = source.loadingError.location as any;\n\n      const errPreview = [\n        errLoc.lineStr,\n        `${ansis.gray('-'.repeat(errLoc.colNumber - 1))}${ansis.red('^')}`,\n      ].join('\\n');\n\n      console.log('Error parsing .env file');\n      console.log(` ${errLoc.path}:${errLoc.lineNumber}:${errLoc.colNumber}`);\n      console.log(errPreview);\n\n      process.exit(1);\n    }\n  }\n\n  // now we check for any schema errors - where something about how things are wired up is invalid\n  // NOTE - we should not have run any resolution yet\n  // TODO: make sure we are calling this before attempting to resolve values\n  // const failingItems = _.filter(_.values(envGraph.configSchema), (item) => item.validationState === 'error');\n  // if (failingItems.length > 0) {\n  //   throw new CliExitError('Schema is currently invalid');\n  // }\n}\n\nexport class InvalidEnvError extends Error {\n  constructor() {\n    super('Resolved config/env did not pass validation');\n  }\n  getFormattedOutput() {\n    return `\\n💥 ${ansis.red(this.message)} 💥\\n`;\n  }\n}\n\nexport function checkForConfigErrors(envGraph: EnvGraph, opts?: {\n  showAll?: boolean\n}) {\n  const failingItems = _.filter(_.values(envGraph.configSchema), (item) => item.validationState === 'error');\n\n  // TODO: use service.isValid?\n  if (failingItems.length > 0) {\n    console.log(`\\n🚨 🚨 🚨  ${ansis.bold.underline('Configuration is currently invalid ')}  🚨 🚨 🚨\\n`);\n    console.log('Invalid items:\\n');\n\n    _.each(failingItems, (item) => {\n      console.log(getItemSummary(item));\n      console.log();\n    });\n    if (opts?.showAll) {\n      console.log();\n      console.log(joinAndCompact([\n        'Valid items:',\n        ansis.italic.gray('(remove `--show-all` flag to hide)'),\n      ]));\n      console.log();\n      const validItems = _.filter(_.values(envGraph.configSchema), (i) => !!i.isValid);\n      _.each(validItems, (item) => {\n        console.log(getItemSummary(item));\n      });\n    }\n\n    throw new InvalidEnvError();\n  }\n}\n"]}