varlock 0.4.2 → 0.6.0

package/dist/{chunk-PCRIVT4T.js → chunk-2AGKN64R.js}

@@ -1,16 +1,86 @@
 import { createDebug } from './chunk-QZ6HBRJC.js';
 import { __commonJS, __name, __toESM } from './chunk-6PEHRAEP.js';
-import path, { join } from 'path';
-import fs, { access } from 'fs/promises';
+import path2, { join } from 'path';
+import fs2, { access } from 'fs/promises';
 import os from 'os';
-import fs3, { accessSync, existsSync } from 'fs';
+import fs4, { accessSync, existsSync } from 'fs';
 import { exec } from 'child_process';
 import { promisify } from 'util';
 import { createRequire } from 'module';
-import { pathToFileURL } from 'url';
 import crypto from 'crypto';
 import https from 'https';
-import vm from 'vm';
+import { AsyncLocalStorage } from 'async_hooks';
+
+// ../../node_modules/.bun/ansis@4.2.0/node_modules/ansis/index.cjs
+var require_ansis = __commonJS({
+  "../../node_modules/.bun/ansis@4.2.0/node_modules/ansis/index.cjs"(exports$1, module) {
+    var e;
+    var t;
+    var r;
+    var { defineProperty: l, setPrototypeOf: n, create: o, keys: s } = Object;
+    var i = "";
+    var { round: c, max: a2 } = Math;
+    var p = /* @__PURE__ */ __name((e2) => {
+      let t2 = /([a-f\d]{3,6})/i.exec(e2)?.[1], r2 = t2?.length, l2 = parseInt(6 ^ r2 ? 3 ^ r2 ? "0" : t2[0] + t2[0] + t2[1] + t2[1] + t2[2] + t2[2] : t2, 16);
+      return [l2 >> 16 & 255, l2 >> 8 & 255, 255 & l2];
+    }, "p");
+    var u = /* @__PURE__ */ __name((e2, t2, r2) => e2 ^ t2 || t2 ^ r2 ? 16 + 36 * c(e2 / 51) + 6 * c(t2 / 51) + c(r2 / 51) : 8 > e2 ? 16 : e2 > 248 ? 231 : c(24 * (e2 - 8) / 247) + 232, "u");
+    var d = /* @__PURE__ */ __name((e2) => {
+      let t2, r2, l2, n2, o2;
+      return 8 > e2 ? 30 + e2 : 16 > e2 ? e2 - 8 + 90 : (232 > e2 ? (o2 = (e2 -= 16) % 36, t2 = (e2 / 36 | 0) / 5, r2 = (o2 / 6 | 0) / 5, l2 = o2 % 6 / 5) : t2 = r2 = l2 = (10 * (e2 - 232) + 8) / 255, n2 = 2 * a2(t2, r2, l2), n2 ? 30 + (c(l2) << 2 | c(r2) << 1 | c(t2)) + (2 ^ n2 ? 0 : 60) : 30);
+    }, "d");
+    var f = (() => {
+      let r2 = /* @__PURE__ */ __name((e2) => o2.some(((t2) => e2.test(t2))), "r"), l2 = globalThis, n2 = l2.process ?? {}, o2 = n2.argv ?? [], i2 = n2.env ?? {}, c2 = -1;
+      try {
+        e = "," + s(i2).join(",");
+      } catch (e2) {
+        i2 = {}, c2 = 0;
+      }
+      let a3 = "FORCE_COLOR", p2 = { false: 0, 0: 0, 1: 1, 2: 2, 3: 3 }[i2[a3]] ?? -1, u2 = a3 in i2 && p2 || r2(/^--color=?(true|always)?$/);
+      return u2 && (c2 = p2), ~c2 || (c2 = ((r3, l3, n3) => (t = r3.TERM, { "24bit": 3, truecolor: 3, ansi256: 2, ansi: 1 }[r3.COLORTERM] || (r3.CI ? /,GITHUB/.test(e) ? 3 : 1 : l3 && "dumb" !== t ? n3 ? 3 : /-256/.test(t) ? 2 : 1 : 0)))(i2, !!i2.PM2_HOME || i2.NEXT_RUNTIME?.includes("edge") || !!n2.stdout?.isTTY, "win32" === n2.platform)), !p2 || i2.NO_COLOR || r2(/^--(no-color|color=(false|never))$/) ? 0 : l2.window?.chrome || u2 && !c2 ? 3 : c2;
+    })();
+    var g = { open: i, close: i };
+    var h = 39;
+    var b = 49;
+    var O = {};
+    var m = /* @__PURE__ */ __name(({ p: e2 }, { open: t2, close: l2 }) => {
+      let o2 = /* @__PURE__ */ __name((e3, ...r2) => {
+        if (!e3) {
+          if (t2 && t2 === l2) return t2;
+          if ((e3 ?? i) === i) return i;
+        }
+        let n2, s3 = e3.raw ? String.raw({ raw: e3 }, ...r2) : i + e3, c3 = o2.p, a3 = c3.o, p2 = c3.c;
+        if (s3.includes("\x1B")) for (; c3; c3 = c3.p) {
+          let { open: e4, close: t3 } = c3, r3 = t3.length, l3 = i, o3 = 0;
+          if (r3) for (; ~(n2 = s3.indexOf(t3, o3)); o3 = n2 + r3) l3 += s3.slice(o3, n2) + e4;
+          s3 = l3 + s3.slice(o3);
+        }
+        return a3 + (s3.includes("\n") ? s3.replace(/(\r?\n)/g, p2 + "$1" + a3) : s3) + p2;
+      }, "o"), s2 = t2, c2 = l2;
+      return e2 && (s2 = e2.o + t2, c2 = l2 + e2.c), n(o2, r), o2.p = { open: t2, close: l2, o: s2, c: c2, p: e2 }, o2.open = s2, o2.close = c2, o2;
+    }, "m");
+    var w = new (/* @__PURE__ */ __name(function e2(t2 = f) {
+      let s2 = { Ansis: e2, level: t2, isSupported: /* @__PURE__ */ __name(() => a3, "isSupported"), strip: /* @__PURE__ */ __name((e3) => e3.replace(/[›][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]/g, i), "strip"), extend(e3) {
+        for (let t3 in e3) {
+          let r2 = e3[t3], l2 = (typeof r2)[0];
+          "s" === l2 ? (c2(t3, T(...p(r2))), c2(_3(t3), v(...p(r2)))) : c2(t3, r2, "f" === l2);
+        }
+        return r = o({}, O), n(s2, r), s2;
+      } }, c2 = /* @__PURE__ */ __name((e3, t3, r2) => {
+        O[e3] = { get() {
+          let n2 = r2 ? (...e4) => m(this, t3(...e4)) : m(this, t3);
+          return l(this, e3, { value: n2 }), n2;
+        } };
+      }, "c"), a3 = t2 > 0, w2 = /* @__PURE__ */ __name((e3, t3) => a3 ? { open: `\x1B[${e3}m`, close: `\x1B[${t3}m` } : g, "w"), y = /* @__PURE__ */ __name((e3) => (t3) => e3(...p(t3)), "y"), R = /* @__PURE__ */ __name((e3, t3) => (r2, l2, n2) => w2(`${e3}8;2;${r2};${l2};${n2}`, t3), "R"), $ = /* @__PURE__ */ __name((e3, t3) => (r2, l2, n2) => w2(((e4, t4, r3) => d(u(e4, t4, r3)))(r2, l2, n2) + e3, t3), "$"), x = /* @__PURE__ */ __name((e3) => (t3, r2, l2) => e3(u(t3, r2, l2)), "x"), T = R(3, h), v = R(4, b), C = /* @__PURE__ */ __name((e3) => w2("38;5;" + e3, h), "C"), E = /* @__PURE__ */ __name((e3) => w2("48;5;" + e3, b), "E");
+      2 === t2 ? (T = x(C), v = x(E)) : 1 === t2 && (T = $(0, h), v = $(10, b), C = /* @__PURE__ */ __name((e3) => w2(d(e3), h), "C"), E = /* @__PURE__ */ __name((e3) => w2(d(e3) + 10, b), "E"));
+      let M, I = { fg: C, bg: E, rgb: T, bgRgb: v, hex: y(T), bgHex: y(v), visible: g, reset: w2(0, 0), bold: w2(1, 22), dim: w2(2, 22), italic: w2(3, 23), underline: w2(4, 24), inverse: w2(7, 27), hidden: w2(8, 28), strikethrough: w2(9, 29) }, _3 = /* @__PURE__ */ __name((e3) => "bg" + e3[0].toUpperCase() + e3.slice(1), "_"), k = "Bright";
+      return "black,red,green,yellow,blue,magenta,cyan,white,gray".split(",").map(((e3, t3) => {
+        M = _3(e3), 8 > t3 ? (I[e3 + k] = w2(90 + t3, h), I[M + k] = w2(100 + t3, b)) : t3 = 60, I[e3] = w2(30 + t3, h), I[M] = w2(40 + t3, b);
+      })), s2.extend(I);
+    }, "e"))();
+    module.exports = w, w.default = w;
+  }
+});
 
 // ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/constants.js
 var require_constants = __commonJS({
@@ -46,9 +116,9 @@ var require_constants = __commonJS({
 // ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/debug.js
 var require_debug = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/debug.js"(exports$1, module) {
-    var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {
+    var debug2 = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {
     };
-    module.exports = debug;
+    module.exports = debug2;
   }
 });
 
@@ -60,7 +130,7 @@ var require_re = __commonJS({
       MAX_SAFE_BUILD_LENGTH,
       MAX_LENGTH
     } = require_constants();
-    var debug = require_debug();
+    var debug2 = require_debug();
     exports$1 = module.exports = {};
     var re = exports$1.re = [];
     var safeRe = exports$1.safeRe = [];
@@ -83,7 +153,7 @@ var require_re = __commonJS({
     var createToken = /* @__PURE__ */ __name((name, value, isGlobal) => {
       const safe = makeSafeRegex(value);
       const index = R++;
-      debug(name, index, value);
+      debug2(name, index, value);
       t[name] = index;
       src[index] = value;
       safeSrc[index] = safe;
@@ -161,19 +231,19 @@ var require_parse_options = __commonJS({
 var require_identifiers = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/identifiers.js"(exports$1, module) {
     var numeric = /^[0-9]+$/;
-    var compareIdentifiers = /* @__PURE__ */ __name((a, b) => {
-      if (typeof a === "number" && typeof b === "number") {
-        return a === b ? 0 : a < b ? -1 : 1;
+    var compareIdentifiers = /* @__PURE__ */ __name((a2, b) => {
+      if (typeof a2 === "number" && typeof b === "number") {
+        return a2 === b ? 0 : a2 < b ? -1 : 1;
       }
-      const anum = numeric.test(a);
+      const anum = numeric.test(a2);
       const bnum = numeric.test(b);
       if (anum && bnum) {
-        a = +a;
+        a2 = +a2;
         b = +b;
       }
-      return a === b ? 0 : anum && !bnum ? -1 : bnum && !anum ? 1 : a < b ? -1 : 1;
+      return a2 === b ? 0 : anum && !bnum ? -1 : bnum && !anum ? 1 : a2 < b ? -1 : 1;
     }, "compareIdentifiers");
-    var rcompareIdentifiers = /* @__PURE__ */ __name((a, b) => compareIdentifiers(b, a), "rcompareIdentifiers");
+    var rcompareIdentifiers = /* @__PURE__ */ __name((a2, b) => compareIdentifiers(b, a2), "rcompareIdentifiers");
     module.exports = {
       compareIdentifiers,
       rcompareIdentifiers
@@ -184,7 +254,7 @@ var require_identifiers = __commonJS({
 // ../../node_modules/.bun/semver@7.7.4/node_modules/semver/classes/semver.js
 var require_semver = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/classes/semver.js"(exports$1, module) {
-    var debug = require_debug();
+    var debug2 = require_debug();
     var { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants();
     var { safeRe: re, t } = require_re();
     var parseOptions = require_parse_options();
@@ -209,7 +279,7 @@ var require_semver = __commonJS({
             `version is longer than ${MAX_LENGTH} characters`
           );
         }
-        debug("SemVer", version, options);
+        debug2("SemVer", version, options);
         this.options = options;
         this.loose = !!options.loose;
         this.includePrerelease = !!options.includePrerelease;
@@ -257,7 +327,7 @@ var require_semver = __commonJS({
         return this.version;
       }
       compare(other) {
-        debug("SemVer.compare", this.version, this.options, other);
+        debug2("SemVer.compare", this.version, this.options, other);
         if (!(other instanceof _SemVer)) {
           if (typeof other === "string" && other === this.version) {
             return 0;
@@ -306,19 +376,19 @@ var require_semver = __commonJS({
         }
         let i = 0;
         do {
-          const a = this.prerelease[i];
+          const a2 = this.prerelease[i];
           const b = other.prerelease[i];
-          debug("prerelease compare", i, a, b);
-          if (a === void 0 && b === void 0) {
+          debug2("prerelease compare", i, a2, b);
+          if (a2 === void 0 && b === void 0) {
             return 0;
           } else if (b === void 0) {
             return 1;
-          } else if (a === void 0) {
+          } else if (a2 === void 0) {
             return -1;
-          } else if (a === b) {
+          } else if (a2 === b) {
             continue;
           } else {
-            return compareIdentifiers(a, b);
+            return compareIdentifiers(a2, b);
           }
         } while (++i);
       }
@@ -328,19 +398,19 @@ var require_semver = __commonJS({
         }
         let i = 0;
         do {
-          const a = this.build[i];
+          const a2 = this.build[i];
           const b = other.build[i];
-          debug("build compare", i, a, b);
-          if (a === void 0 && b === void 0) {
+          debug2("build compare", i, a2, b);
+          if (a2 === void 0 && b === void 0) {
             return 0;
           } else if (b === void 0) {
             return 1;
-          } else if (a === void 0) {
+          } else if (a2 === void 0) {
             return -1;
-          } else if (a === b) {
+          } else if (a2 === b) {
             continue;
           } else {
-            return compareIdentifiers(a, b);
+            return compareIdentifiers(a2, b);
           }
         } while (++i);
       }
@@ -577,7 +647,7 @@ var require_diff = __commonJS({
 var require_major = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/major.js"(exports$1, module) {
     var SemVer = require_semver();
-    var major = /* @__PURE__ */ __name((a, loose) => new SemVer(a, loose).major, "major");
+    var major = /* @__PURE__ */ __name((a2, loose) => new SemVer(a2, loose).major, "major");
     module.exports = major;
   }
 });
@@ -586,7 +656,7 @@ var require_major = __commonJS({
 var require_minor = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/minor.js"(exports$1, module) {
     var SemVer = require_semver();
-    var minor = /* @__PURE__ */ __name((a, loose) => new SemVer(a, loose).minor, "minor");
+    var minor = /* @__PURE__ */ __name((a2, loose) => new SemVer(a2, loose).minor, "minor");
     module.exports = minor;
   }
 });
@@ -595,7 +665,7 @@ var require_minor = __commonJS({
 var require_patch = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/patch.js"(exports$1, module) {
     var SemVer = require_semver();
-    var patch = /* @__PURE__ */ __name((a, loose) => new SemVer(a, loose).patch, "patch");
+    var patch = /* @__PURE__ */ __name((a2, loose) => new SemVer(a2, loose).patch, "patch");
     module.exports = patch;
   }
 });
@@ -616,7 +686,7 @@ var require_prerelease = __commonJS({
 var require_compare = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/compare.js"(exports$1, module) {
     var SemVer = require_semver();
-    var compare = /* @__PURE__ */ __name((a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose)), "compare");
+    var compare = /* @__PURE__ */ __name((a2, b, loose) => new SemVer(a2, loose).compare(new SemVer(b, loose)), "compare");
     module.exports = compare;
   }
 });
@@ -625,7 +695,7 @@ var require_compare = __commonJS({
 var require_rcompare = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/rcompare.js"(exports$1, module) {
     var compare = require_compare();
-    var rcompare = /* @__PURE__ */ __name((a, b, loose) => compare(b, a, loose), "rcompare");
+    var rcompare = /* @__PURE__ */ __name((a2, b, loose) => compare(b, a2, loose), "rcompare");
     module.exports = rcompare;
   }
 });
@@ -634,7 +704,7 @@ var require_rcompare = __commonJS({
 var require_compare_loose = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/compare-loose.js"(exports$1, module) {
     var compare = require_compare();
-    var compareLoose = /* @__PURE__ */ __name((a, b) => compare(a, b, true), "compareLoose");
+    var compareLoose = /* @__PURE__ */ __name((a2, b) => compare(a2, b, true), "compareLoose");
     module.exports = compareLoose;
   }
 });
@@ -643,8 +713,8 @@ var require_compare_loose = __commonJS({
 var require_compare_build = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/compare-build.js"(exports$1, module) {
     var SemVer = require_semver();
-    var compareBuild = /* @__PURE__ */ __name((a, b, loose) => {
-      const versionA = new SemVer(a, loose);
+    var compareBuild = /* @__PURE__ */ __name((a2, b, loose) => {
+      const versionA = new SemVer(a2, loose);
       const versionB = new SemVer(b, loose);
       return versionA.compare(versionB) || versionA.compareBuild(versionB);
     }, "compareBuild");
@@ -656,7 +726,7 @@ var require_compare_build = __commonJS({
 var require_sort = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/sort.js"(exports$1, module) {
     var compareBuild = require_compare_build();
-    var sort = /* @__PURE__ */ __name((list, loose) => list.sort((a, b) => compareBuild(a, b, loose)), "sort");
+    var sort = /* @__PURE__ */ __name((list, loose) => list.sort((a2, b) => compareBuild(a2, b, loose)), "sort");
     module.exports = sort;
   }
 });
@@ -665,7 +735,7 @@ var require_sort = __commonJS({
 var require_rsort = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/rsort.js"(exports$1, module) {
     var compareBuild = require_compare_build();
-    var rsort = /* @__PURE__ */ __name((list, loose) => list.sort((a, b) => compareBuild(b, a, loose)), "rsort");
+    var rsort = /* @__PURE__ */ __name((list, loose) => list.sort((a2, b) => compareBuild(b, a2, loose)), "rsort");
     module.exports = rsort;
   }
 });
@@ -674,7 +744,7 @@ var require_rsort = __commonJS({
 var require_gt = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/gt.js"(exports$1, module) {
     var compare = require_compare();
-    var gt = /* @__PURE__ */ __name((a, b, loose) => compare(a, b, loose) > 0, "gt");
+    var gt = /* @__PURE__ */ __name((a2, b, loose) => compare(a2, b, loose) > 0, "gt");
     module.exports = gt;
   }
 });
@@ -683,7 +753,7 @@ var require_gt = __commonJS({
 var require_lt = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/lt.js"(exports$1, module) {
     var compare = require_compare();
-    var lt = /* @__PURE__ */ __name((a, b, loose) => compare(a, b, loose) < 0, "lt");
+    var lt = /* @__PURE__ */ __name((a2, b, loose) => compare(a2, b, loose) < 0, "lt");
     module.exports = lt;
   }
 });
@@ -692,7 +762,7 @@ var require_lt = __commonJS({
 var require_eq = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/eq.js"(exports$1, module) {
     var compare = require_compare();
-    var eq = /* @__PURE__ */ __name((a, b, loose) => compare(a, b, loose) === 0, "eq");
+    var eq = /* @__PURE__ */ __name((a2, b, loose) => compare(a2, b, loose) === 0, "eq");
     module.exports = eq;
   }
 });
@@ -701,7 +771,7 @@ var require_eq = __commonJS({
 var require_neq = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/neq.js"(exports$1, module) {
     var compare = require_compare();
-    var neq = /* @__PURE__ */ __name((a, b, loose) => compare(a, b, loose) !== 0, "neq");
+    var neq = /* @__PURE__ */ __name((a2, b, loose) => compare(a2, b, loose) !== 0, "neq");
     module.exports = neq;
   }
 });
@@ -710,7 +780,7 @@ var require_neq = __commonJS({
 var require_gte = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/gte.js"(exports$1, module) {
     var compare = require_compare();
-    var gte = /* @__PURE__ */ __name((a, b, loose) => compare(a, b, loose) >= 0, "gte");
+    var gte = /* @__PURE__ */ __name((a2, b, loose) => compare(a2, b, loose) >= 0, "gte");
     module.exports = gte;
   }
 });
@@ -719,7 +789,7 @@ var require_gte = __commonJS({
 var require_lte = __commonJS({
   "../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/lte.js"(exports$1, module) {
     var compare = require_compare();
-    var lte = /* @__PURE__ */ __name((a, b, loose) => compare(a, b, loose) <= 0, "lte");
+    var lte = /* @__PURE__ */ __name((a2, b, loose) => compare(a2, b, loose) <= 0, "lte");
     module.exports = lte;
   }
 });
@@ -733,38 +803,38 @@ var require_cmp = __commonJS({
     var gte = require_gte();
     var lt = require_lt();
     var lte = require_lte();
-    var cmp = /* @__PURE__ */ __name((a, op, b, loose) => {
+    var cmp = /* @__PURE__ */ __name((a2, op, b, loose) => {
       switch (op) {
         case "===":
-          if (typeof a === "object") {
-            a = a.version;
+          if (typeof a2 === "object") {
+            a2 = a2.version;
           }
           if (typeof b === "object") {
             b = b.version;
           }
-          return a === b;
+          return a2 === b;
         case "!==":
-          if (typeof a === "object") {
-            a = a.version;
+          if (typeof a2 === "object") {
+            a2 = a2.version;
           }
           if (typeof b === "object") {
             b = b.version;
           }
-          return a !== b;
+          return a2 !== b;
         case "":
         case "=":
         case "==":
-          return eq(a, b, loose);
+          return eq(a2, b, loose);
         case "!=":
-          return neq(a, b, loose);
+          return neq(a2, b, loose);
         case ">":
-          return gt(a, b, loose);
+          return gt(a2, b, loose);
         case ">=":
-          return gte(a, b, loose);
+          return gte(a2, b, loose);
         case "<":
-          return lt(a, b, loose);
+          return lt(a2, b, loose);
         case "<=":
-          return lte(a, b, loose);
+          return lte(a2, b, loose);
         default:
           throw new TypeError(`Invalid operator: ${op}`);
       }
@@ -939,21 +1009,21 @@ var require_range = __commonJS({
         const loose = this.options.loose;
         const hr = loose ? re[t.HYPHENRANGELOOSE] : re[t.HYPHENRANGE];
         range = range.replace(hr, hyphenReplace(this.options.includePrerelease));
-        debug("hyphen replace", range);
+        debug2("hyphen replace", range);
         range = range.replace(re[t.COMPARATORTRIM], comparatorTrimReplace);
-        debug("comparator trim", range);
+        debug2("comparator trim", range);
         range = range.replace(re[t.TILDETRIM], tildeTrimReplace);
-        debug("tilde trim", range);
+        debug2("tilde trim", range);
         range = range.replace(re[t.CARETTRIM], caretTrimReplace);
-        debug("caret trim", range);
+        debug2("caret trim", range);
         let rangeList = range.split(" ").map((comp) => parseComparator(comp, this.options)).join(" ").split(/\s+/).map((comp) => replaceGTE0(comp, this.options));
         if (loose) {
           rangeList = rangeList.filter((comp) => {
-            debug("loose invalid filter", comp, this.options);
+            debug2("loose invalid filter", comp, this.options);
             return !!comp.match(re[t.COMPARATORLOOSE]);
           });
         }
-        debug("range list", rangeList);
+        debug2("range list", rangeList);
         const rangeMap = /* @__PURE__ */ new Map();
         const comparators = rangeList.map((comp) => new Comparator(comp, this.options));
         for (const comp of comparators) {
@@ -1008,7 +1078,7 @@ var require_range = __commonJS({
     var cache = new LRU();
     var parseOptions = require_parse_options();
     var Comparator = require_comparator();
-    var debug = require_debug();
+    var debug2 = require_debug();
     var SemVer = require_semver();
     var {
       safeRe: re,
@@ -1034,15 +1104,15 @@ var require_range = __commonJS({
     }, "isSatisfiable");
     var parseComparator = /* @__PURE__ */ __name((comp, options) => {
       comp = comp.replace(re[t.BUILD], "");
-      debug("comp", comp, options);
+      debug2("comp", comp, options);
       comp = replaceCarets(comp, options);
-      debug("caret", comp);
+      debug2("caret", comp);
       comp = replaceTildes(comp, options);
-      debug("tildes", comp);
+      debug2("tildes", comp);
       comp = replaceXRanges(comp, options);
-      debug("xrange", comp);
+      debug2("xrange", comp);
       comp = replaceStars(comp, options);
-      debug("stars", comp);
+      debug2("stars", comp);
       return comp;
     }, "parseComparator");
     var isX = /* @__PURE__ */ __name((id) => !id || id.toLowerCase() === "x" || id === "*", "isX");
@@ -1052,7 +1122,7 @@ var require_range = __commonJS({
     var replaceTilde = /* @__PURE__ */ __name((comp, options) => {
       const r = options.loose ? re[t.TILDELOOSE] : re[t.TILDE];
       return comp.replace(r, (_3, M, m, p, pr) => {
-        debug("tilde", comp, _3, M, m, p, pr);
+        debug2("tilde", comp, _3, M, m, p, pr);
         let ret;
         if (isX(M)) {
           ret = "";
@@ -1061,12 +1131,12 @@ var require_range = __commonJS({
         } else if (isX(p)) {
           ret = `>=${M}.${m}.0 <${M}.${+m + 1}.0-0`;
         } else if (pr) {
-          debug("replaceTilde pr", pr);
+          debug2("replaceTilde pr", pr);
           ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
         } else {
           ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
         }
-        debug("tilde return", ret);
+        debug2("tilde return", ret);
         return ret;
       });
     }, "replaceTilde");
@@ -1074,11 +1144,11 @@ var require_range = __commonJS({
       return comp.trim().split(/\s+/).map((c) => replaceCaret(c, options)).join(" ");
     }, "replaceCarets");
     var replaceCaret = /* @__PURE__ */ __name((comp, options) => {
-      debug("caret", comp, options);
+      debug2("caret", comp, options);
       const r = options.loose ? re[t.CARETLOOSE] : re[t.CARET];
       const z = options.includePrerelease ? "-0" : "";
       return comp.replace(r, (_3, M, m, p, pr) => {
-        debug("caret", comp, _3, M, m, p, pr);
+        debug2("caret", comp, _3, M, m, p, pr);
         let ret;
         if (isX(M)) {
           ret = "";
@@ -1091,7 +1161,7 @@ var require_range = __commonJS({
             ret = `>=${M}.${m}.0${z} <${+M + 1}.0.0-0`;
           }
         } else if (pr) {
-          debug("replaceCaret pr", pr);
+          debug2("replaceCaret pr", pr);
           if (M === "0") {
             if (m === "0") {
               ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
@@ -1102,7 +1172,7 @@ var require_range = __commonJS({
             ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
           }
         } else {
-          debug("no pr");
+          debug2("no pr");
           if (M === "0") {
             if (m === "0") {
               ret = `>=${M}.${m}.${p}${z} <${M}.${m}.${+p + 1}-0`;
@@ -1113,19 +1183,19 @@ var require_range = __commonJS({
             ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
           }
         }
-        debug("caret return", ret);
+        debug2("caret return", ret);
         return ret;
       });
     }, "replaceCaret");
     var replaceXRanges = /* @__PURE__ */ __name((comp, options) => {
-      debug("replaceXRanges", comp, options);
+      debug2("replaceXRanges", comp, options);
       return comp.split(/\s+/).map((c) => replaceXRange(c, options)).join(" ");
     }, "replaceXRanges");
     var replaceXRange = /* @__PURE__ */ __name((comp, options) => {
       comp = comp.trim();
       const r = options.loose ? re[t.XRANGELOOSE] : re[t.XRANGE];
       return comp.replace(r, (ret, gtlt, M, m, p, pr) => {
-        debug("xRange", comp, ret, gtlt, M, m, p, pr);
+        debug2("xRange", comp, ret, gtlt, M, m, p, pr);
         const xM = isX(M);
         const xm = xM || isX(m);
         const xp = xm || isX(p);
@@ -1172,16 +1242,16 @@ var require_range = __commonJS({
         } else if (xp) {
           ret = `>=${M}.${m}.0${pr} <${M}.${+m + 1}.0-0`;
         }
-        debug("xRange return", ret);
+        debug2("xRange return", ret);
         return ret;
       });
     }, "replaceXRange");
     var replaceStars = /* @__PURE__ */ __name((comp, options) => {
-      debug("replaceStars", comp, options);
+      debug2("replaceStars", comp, options);
       return comp.trim().replace(re[t.STAR], "");
     }, "replaceStars");
     var replaceGTE0 = /* @__PURE__ */ __name((comp, options) => {
-      debug("replaceGTE0", comp, options);
+      debug2("replaceGTE0", comp, options);
       return comp.trim().replace(re[options.includePrerelease ? t.GTE0PRE : t.GTE0], "");
     }, "replaceGTE0");
     var hyphenReplace = /* @__PURE__ */ __name((incPr) => ($0, from, fM, fm, fp, fpr, fb, to, tM, tm, tp, tpr) => {
@@ -1219,7 +1289,7 @@ var require_range = __commonJS({
       }
       if (version.prerelease.length && !options.includePrerelease) {
         for (let i = 0; i < set.length; i++) {
-          debug(set[i].semver);
+          debug2(set[i].semver);
           if (set[i].semver === Comparator.ANY) {
             continue;
           }
@@ -1258,7 +1328,7 @@ var require_comparator = __commonJS({
           }
         }
         comp = comp.trim().split(/\s+/).join(" ");
-        debug("comparator", comp, options);
+        debug2("comparator", comp, options);
         this.options = options;
         this.loose = !!options.loose;
         this.parse(comp);
@@ -1267,7 +1337,7 @@ var require_comparator = __commonJS({
         } else {
           this.value = this.operator + this.semver.version;
         }
-        debug("comp", this);
+        debug2("comp", this);
       }
       parse(comp) {
         const r = this.options.loose ? re[t.COMPARATORLOOSE] : re[t.COMPARATOR];
@@ -1289,7 +1359,7 @@ var require_comparator = __commonJS({
         return this.value;
       }
       test(version) {
-        debug("Comparator.test", version, this.options.loose);
+        debug2("Comparator.test", version, this.options.loose);
         if (this.semver === ANY || version === ANY) {
           return true;
         }
@@ -1346,7 +1416,7 @@ var require_comparator = __commonJS({
     var parseOptions = require_parse_options();
     var { safeRe: re, t } = require_re();
     var cmp = require_cmp();
-    var debug = require_debug();
+    var debug2 = require_debug();
     var SemVer = require_semver();
     var Range = require_range();
   }
@@ -1614,7 +1684,7 @@ var require_simplify = __commonJS({
       const set = [];
       let first = null;
       let prev = null;
-      const v = versions.sort((a, b) => compare(a, b, options));
+      const v = versions.sort((a2, b) => compare(a2, b, options));
       for (const version of v) {
         const included = satisfies(version, range, options);
         if (included) {
@@ -1797,19 +1867,19 @@ var require_subset = __commonJS({
       }
       return true;
     }, "simpleSubset");
-    var higherGT = /* @__PURE__ */ __name((a, b, options) => {
-      if (!a) {
+    var higherGT = /* @__PURE__ */ __name((a2, b, options) => {
+      if (!a2) {
         return b;
       }
-      const comp = compare(a.semver, b.semver, options);
-      return comp > 0 ? a : comp < 0 ? b : b.operator === ">" && a.operator === ">=" ? b : a;
+      const comp = compare(a2.semver, b.semver, options);
+      return comp > 0 ? a2 : comp < 0 ? b : b.operator === ">" && a2.operator === ">=" ? b : a2;
     }, "higherGT");
-    var lowerLT = /* @__PURE__ */ __name((a, b, options) => {
-      if (!a) {
+    var lowerLT = /* @__PURE__ */ __name((a2, b, options) => {
+      if (!a2) {
         return b;
       }
-      const comp = compare(a.semver, b.semver, options);
-      return comp < 0 ? a : comp > 0 ? b : b.operator === "<" && a.operator === "<=" ? b : a;
+      const comp = compare(a2.semver, b.semver, options);
+      return comp < 0 ? a2 : comp > 0 ? b : b.operator === "<" && a2.operator === "<=" ? b : a2;
     }, "lowerLT");
     module.exports = subset;
   }
@@ -2608,13 +2678,13 @@ function sortBy(array, compareBy) {
       compareMap.set(item, compareBy(item));
     });
     return array.concat().sort(
-      (a, b) => compareMap.get(a) - compareMap.get(b)
+      (a2, b) => compareMap.get(a2) - compareMap.get(b)
     );
   } else {
     return array.concat().sort(
-      (a, b) => {
-        if (a[compareBy] > b[compareBy]) return 1;
-        return b[compareBy] > a[compareBy] ? -1 : 0;
+      (a2, b) => {
+        if (a2[compareBy] > b[compareBy]) return 1;
+        return b[compareBy] > a2[compareBy] ? -1 : 0;
       }
     );
   }
@@ -2657,7 +2727,7 @@ function flatMap(array, fn) {
 }
 __name(flatMap, "flatMap");
 function intersection(...arrays) {
-  return arrays.reduce((a, b) => a.filter((value) => b.includes(value)));
+  return arrays.reduce((a2, b) => a2.filter((value) => b.includes(value)));
 }
 __name(intersection, "intersection");
 function pick(obj, keys) {
@@ -2678,7 +2748,7 @@ var _ = {
   compact,
   keys: Object.keys,
   values: Object.values,
-  some: /* @__PURE__ */ __name((a, fn) => a.some(fn), "some"),
+  some: /* @__PURE__ */ __name((a2, fn) => a2.some(fn), "some"),
   filter,
   each,
   castArray,
@@ -2704,7 +2774,7 @@ var _ = {
 };
 var my_dash_default = _;
 
-// ../env-spec-parser/dist/chunk-CO7WMO6T.mjs
+// ../env-spec-parser/dist/chunk-XRNR4FE7.mjs
 var __defProp = Object.defineProperty;
 var __name2 = /* @__PURE__ */ __name((target, value) => __defProp(target, "name", { value, configurable: true }), "__name");
 var VALID_NUMBER_REGEX = /^-?(0|([1-9][0-9]*))?(\.[0-9]+)?$/;
@@ -3066,20 +3136,48 @@ var ParsedEnvSpecFile = class {
   get configItems() {
     return this.contents.filter((item) => item instanceof ParsedEnvSpecConfigItem);
   }
-  get header() {
+  /** all comment blocks before the first config item (the "header" area) */
+  get headerBlocks() {
+    const blocks = [];
     for (const item of this.contents) {
-      if (item instanceof ParsedEnvSpecCommentBlock && item.divider) {
-        return item;
-      } else if (!(item instanceof ParsedEnvSpecBlankLine)) {
-        return;
+      if (item instanceof ParsedEnvSpecCommentBlock) {
+        blocks.push(item);
+      } else if (item instanceof ParsedEnvSpecBlankLine || item instanceof ParsedEnvSpecDivider) {
+        continue;
+      } else {
+        break;
       }
     }
+    return blocks;
+  }
+  /** primary header block - the last comment block before the first config item */
+  get header() {
+    const blocks = this.headerBlocks;
+    return blocks.length > 0 ? blocks[blocks.length - 1] : void 0;
   }
   get decoratorsObject() {
-    return this.header?.decoratorsObject ?? {};
+    const decObj = {};
+    for (const block of this.headerBlocks) {
+      Object.assign(decObj, block.decoratorsObject);
+    }
+    return decObj;
   }
   get decoratorsArray() {
-    return this.header?.decoratorsArray ?? [];
+    const decArr = [];
+    for (const block of this.headerBlocks) {
+      decArr.push(...block.decoratorsArray);
+    }
+    return decArr;
+  }
+  /**
+   * Comment blocks that are NOT part of the header and NOT attached to a config item.
+   * Any decorators in these blocks are misplaced.
+   */
+  get orphanCommentBlocks() {
+    const headerBlockSet = new Set(this.headerBlocks);
+    return this.contents.filter(
+      (item) => item instanceof ParsedEnvSpecCommentBlock && !headerBlockSet.has(item)
+    );
   }
   toString() {
     return this.contents.map((item) => item.toString()).join("\n");
@@ -3249,7 +3347,7 @@ function ensureHeader(file, newHeaderContents) {
   if (!file.header) {
     newHeaderContents ||= "This env file uses @env-spec - see https://varlock.dev/env-spec for more info\n";
     file.contents.unshift(
-      // header is a comment block at the beginning of the file and must end with a divider
+      // header is any comment block(s) before the first config item; we add a divider for clarity
       new ParsedEnvSpecCommentBlock({
         // we'll break up the passed in content and add a comment line for each
         comments: newHeaderContents.split("\n").map((line) => new ParsedEnvSpecComment({ contents: line, leadingSpace: " " })),
@@ -3409,27 +3507,27 @@ var peg$SyntaxError = class extends SyntaxError {
     return str;
   }
   static buildMessage(expected, found) {
-    function hex(ch) {
+    function hex2(ch) {
       return ch.codePointAt(0).toString(16).toUpperCase();
     }
-    __name(hex, "hex");
-    __name2(hex, "hex");
+    __name(hex2, "hex");
+    __name2(hex2, "hex");
     const nonPrintable = Object.prototype.hasOwnProperty.call(RegExp.prototype, "unicode") ? new RegExp("[\\p{C}\\p{Mn}\\p{Mc}]", "gu") : null;
     function unicodeEscape(s) {
       if (nonPrintable) {
-        return s.replace(nonPrintable, (ch) => "\\u{" + hex(ch) + "}");
+        return s.replace(nonPrintable, (ch) => "\\u{" + hex2(ch) + "}");
       }
       return s;
     }
     __name(unicodeEscape, "unicodeEscape");
     __name2(unicodeEscape, "unicodeEscape");
     function literalEscape(s) {
-      return unicodeEscape(s.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\0/g, "\\0").replace(/\t/g, "\\t").replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/[\x00-\x0F]/g, (ch) => "\\x0" + hex(ch)).replace(/[\x10-\x1F\x7F-\x9F]/g, (ch) => "\\x" + hex(ch)));
+      return unicodeEscape(s.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\0/g, "\\0").replace(/\t/g, "\\t").replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/[\x00-\x0F]/g, (ch) => "\\x0" + hex2(ch)).replace(/[\x10-\x1F\x7F-\x9F]/g, (ch) => "\\x" + hex2(ch)));
     }
     __name(literalEscape, "literalEscape");
     __name2(literalEscape, "literalEscape");
     function classEscape(s) {
-      return unicodeEscape(s.replace(/\\/g, "\\\\").replace(/\]/g, "\\]").replace(/\^/g, "\\^").replace(/-/g, "\\-").replace(/\0/g, "\\0").replace(/\t/g, "\\t").replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/[\x00-\x0F]/g, (ch) => "\\x0" + hex(ch)).replace(/[\x10-\x1F\x7F-\x9F]/g, (ch) => "\\x" + hex(ch)));
+      return unicodeEscape(s.replace(/\\/g, "\\\\").replace(/\]/g, "\\]").replace(/\^/g, "\\^").replace(/-/g, "\\-").replace(/\0/g, "\\0").replace(/\t/g, "\\t").replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/[\x00-\x0F]/g, (ch) => "\\x0" + hex2(ch)).replace(/[\x10-\x1F\x7F-\x9F]/g, (ch) => "\\x" + hex2(ch)));
     }
     __name(classEscape, "classEscape");
     __name2(classEscape, "classEscape");
@@ -8022,6 +8120,11 @@ function pathExistsSync(p) {
 }
 __name(pathExistsSync, "pathExistsSync");
 
+// ../../node_modules/.bun/ansis@4.2.0/node_modules/ansis/index.mjs
+var import_index = __toESM(require_ansis(), 1);
+var ansis_default = import_index.default;
+var { Ansis, fg, bg, rgb, bgRgb, hex, bgHex, reset, inverse, hidden, visible, bold, dim, italic, underline, strikethrough, black, red, green, yellow, blue, magenta, cyan, white, gray, redBright, greenBright, yellowBright, blueBright, magentaBright, cyanBright, whiteBright, bgBlack, bgRed, bgGreen, bgYellow, bgBlue, bgMagenta, bgCyan, bgWhite, bgGray, bgRedBright, bgGreenBright, bgYellowBright, bgBlueBright, bgMagentaBright, bgCyanBright, bgWhiteBright } = import_index.default;
+
 // src/env-graph/lib/plugins.ts
 var import_semver = __toESM(require_semver2(), 1);
 function getUserVarlockDir() {
@@ -8129,8 +8232,26 @@ var DecoratorInstance = class {
       const decRegistry = this.isRootDecorator ? this.graph.rootDecoratorsRegistry : this.graph.itemDecoratorsRegistry;
       this.decoratorDef = decRegistry[this.name];
       if (!this.decoratorDef) {
+        const otherRegistry = this.isRootDecorator ? this.graph.itemDecoratorsRegistry : this.graph.rootDecoratorsRegistry;
+        if (otherRegistry[this.name]) {
+          if (this.isRootDecorator) {
+            throw new SchemaError(`@${this.name} is an item decorator and cannot be used in the file header - it must be attached to a config item`);
+          } else {
+            throw new SchemaError(`@${this.name} is a root decorator and cannot be attached to a config item - it must be in the file header (before the first config item)`);
+          }
+        }
         throw new Error(`Unknown decorator: @${this.name}`);
       }
+      if (this.decoratorDef.isFunction && !this.isFunctionCall) {
+        throw new SchemaError(
+          `@${this.name} must be used as a function call - use @${this.name}(...) instead of @${this.name}=value`
+        );
+      }
+      if (!this.decoratorDef.isFunction && this.isFunctionCall) {
+        throw new SchemaError(
+          `@${this.name} cannot be used as a function call - use @${this.name}=value instead of @${this.name}(...)`
+        );
+      }
       if (this.decoratorDef.useFnArgsResolver && this.parsedDecorator.value instanceof ParsedEnvSpecFunctionCall) {
         this._decValueResolver = convertParsedValueToResolvers(
           this.parsedDecorator.value.data.args,
@@ -8160,7 +8281,10 @@ var DecoratorInstance = class {
   async resolve() {
     if (this.isResolved) return this.resolvedValue;
     await this.process();
-    if (!this.decValueResolver) throw new Error("expected decorator to have a value resolver");
+    if (!this.decValueResolver) {
+      if (this._schemaErrors.length > 0) return;
+      throw new Error("expected decorator to have a value resolver");
+    }
     try {
       this.resolvedValue = await this.decValueResolver.resolve();
     } catch (err) {
@@ -8290,7 +8414,7 @@ var builtInRootDecorators = [
       if (!decVal.arrArgs || decVal.arrArgs.length === 0) {
         throw new Error("@import decorator must have at least one argument - the path to import");
       }
-      if (decVal.arrArgs.some((a) => !a.isStatic)) {
+      if (decVal.arrArgs.some((a2) => !a2.isStatic)) {
         throw new Error("@import decorator cannot use any dynamic values - all args must be static");
       }
     }, "process")
@@ -8377,7 +8501,7 @@ var builtInRootDecorators = [
         dataSource._loadingError = err instanceof SchemaError ? err : new SchemaError(err);
         return;
       }
-      const { ConfigItem: ConfigItem2 } = await import('./config-item-K7KWEJD2.js');
+      const { ConfigItem: ConfigItem2 } = await import('./config-item-NO5PKZRH.js');
       for (const [key, entry] of Object.entries(entries)) {
         const existsInSchema = key in graph.configSchema;
         if (!existsInSchema && !createMissing) {
@@ -8453,8 +8577,8 @@ function parseRepoSlug(s) {
   try {
     if (trimmed.includes("://") || trimmed.startsWith("git@")) {
       const url = new URL(trimmed.replace(/^git@([^:]+):/, "https://$1/"));
-      const path4 = url.pathname.replace(/^\/+/, "").replace(/\.git$/, "");
-      const parts = path4.split("/");
+      const path5 = url.pathname.replace(/^\/+/, "").replace(/\.git$/, "");
+      const parts = path5.split("/");
       if (parts.length >= 2) {
         slug = `${parts[0]}/${parts[1]}`;
       }
@@ -8556,9 +8680,9 @@ var PLATFORMS = [
     isPR: "CI_MERGE_REQUEST_ID",
     prNumber: "CI_MERGE_REQUEST_ID",
     repo: /* @__PURE__ */ __name((env) => {
-      const path4 = env.CI_PROJECT_PATH;
-      if (!path4) return void 0;
-      const parts = path4.split("/").filter(Boolean);
+      const path5 = env.CI_PROJECT_PATH;
+      if (!path5) return void 0;
+      const parts = path5.split("/").filter(Boolean);
       if (parts.length >= 2) {
         return { owner: parts.slice(0, -1).join("/"), name: parts[parts.length - 1] };
       }
@@ -9183,11 +9307,17 @@ var Resolver = class {
       const resolvedValue = await this.def.resolve.call(this, this.meta);
       return resolvedValue;
     } catch (err) {
-      if (err instanceof VarlockError && !err.more?.location && this._parsedNode && this.dataSource) {
-        const location = getErrorLocation(this.dataSource, this._parsedNode);
-        if (location) {
-          err.more ??= {};
-          err.more.location = location;
+      if (err instanceof VarlockError) {
+        if (!this.def.name.startsWith("\0") && !err._resolverPrefixed) {
+          err.message = `${this.def.name}(): ${err.message}`;
+          err._resolverPrefixed = true;
+        }
+        if (!err.more?.location && this._parsedNode && this.dataSource) {
+          const location = getErrorLocation(this.dataSource, this._parsedNode);
+          if (location) {
+            err.more ??= {};
+            err.more.location = location;
+          }
         }
       }
       throw err;
@@ -9405,23 +9535,56 @@ var RemapResolver = createResolver({
   name: "remap",
   icon: "codicon:replace",
   argsSchema: {
-    type: "mixed",
-    arrayExactLength: 1,
-    objKeyMinLength: 1
+    // supports both old key=value syntax and new positional syntax
+    // old: remap($VAR, result1=match1, result2=match2)  -- arrArgs has 1 item, objArgs has the mappings
+    // new: remap($VAR, match1, result1, match2, result2, default?)  -- arrArgs has 3+ items
+    type: "mixed"
   },
   process() {
-    return this.objArgs;
+    const isLegacyKeyValMode = this.objArgs !== void 0 && Object.keys(this.objArgs).length > 0;
+    if (isLegacyKeyValMode) {
+      if ((this.arrArgs?.length ?? 0) !== 1) {
+        throw new SchemaError("expects exactly 1 positional argument followed by key=value remapping pairs");
+      }
+      if (Object.keys(this.objArgs).length === 0) {
+        throw new SchemaError("expects at least 1 key=value remapping pair");
+      }
+      this._schemaErrors.push(new SchemaError("key=value syntax is deprecated", {
+        isWarning: true,
+        tip: "Use positional pairs instead: remap($VAR, match1, result1, match2, result2, ...)"
+      }));
+    } else {
+      if ((this.arrArgs?.length ?? 0) < 3) {
+        throw new SchemaError("expects at least 3 arguments: (value, match1, result1, ...)");
+      }
+    }
+    return { isLegacyKeyValMode };
   },
-  async resolve(remappings) {
+  async resolve({ isLegacyKeyValMode }) {
     const originalValue = await this.arrArgs[0].resolve();
-    for (const [remappedVal, matchValResolver] of Object.entries(remappings)) {
-      const matchVal = await matchValResolver.resolve();
+    if (isLegacyKeyValMode) {
+      for (const [remappedVal, matchValResolver] of Object.entries(this.objArgs)) {
+        const matchVal = await matchValResolver.resolve();
+        if (matchVal instanceof RegExp && originalValue !== void 0) {
+          if (matchVal.test(String(originalValue))) return remappedVal;
+        } else {
+          if (matchVal === originalValue) return remappedVal;
+        }
+      }
+      return originalValue;
+    }
+    const remainingArgs = this.arrArgs.slice(1);
+    for (let i = 0; i + 1 < remainingArgs.length; i += 2) {
+      const matchVal = await remainingArgs[i].resolve();
       if (matchVal instanceof RegExp && originalValue !== void 0) {
-        if (matchVal.test(String(originalValue))) return remappedVal;
+        if (matchVal.test(String(originalValue))) return remainingArgs[i + 1].resolve();
       } else {
-        if (matchVal === originalValue) return remappedVal;
+        if (matchVal === originalValue) return remainingArgs[i + 1].resolve();
       }
     }
+    if (remainingArgs.length % 2 === 1) {
+      return remainingArgs[remainingArgs.length - 1].resolve();
+    }
     return originalValue;
   }
 });
@@ -9490,6 +9653,27 @@ var IfResolver = createResolver({
     }
   }
 });
+var IfsResolver = createResolver({
+  name: "ifs",
+  icon: "material-symbols:rule",
+  argsSchema: {
+    type: "array",
+    arrayMinLength: 1
+  },
+  async resolve() {
+    const args = this.arrArgs;
+    for (let i = 0; i + 1 < args.length; i += 2) {
+      const condition = await args[i].resolve();
+      if (condition) {
+        return args[i + 1].resolve();
+      }
+    }
+    if (args.length % 2 === 1) {
+      return args[args.length - 1].resolve();
+    }
+    return void 0;
+  }
+});
 var NotResolver = createResolver({
   name: "not",
   icon: "material-symbols:not-equal",
@@ -9537,6 +9721,7 @@ var BaseResolvers = [
   RefResolver,
   ExecResolver,
   RemapResolver,
+  IfsResolver,
   ForEnvResolver,
   EqResolver,
   IfResolver,
@@ -9589,56 +9774,181 @@ function convertParsedValueToResolvers(value, dataSource, registeredResolvers) {
   }
 }
 __name(convertParsedValueToResolvers, "convertParsedValueToResolvers");
+var debug = createDebug("varlock:workspace-utils");
+var JS_PACKAGE_MANAGERS = Object.freeze({
+  npm: {
+    name: "npm",
+    lockfiles: ["package-lock.json"],
+    add: "npm install",
+    // add also works
+    exec: "npm exec --",
+    dlx: "npx"
+  },
+  pnpm: {
+    name: "pnpm",
+    lockfiles: ["pnpm-lock.yaml"],
+    add: "pnpm add",
+    exec: "pnpm exec",
+    dlx: "pnpm dlx"
+  },
+  yarn: {
+    name: "yarn",
+    lockfiles: ["yarn.lock"],
+    add: "yarn add",
+    exec: "yarn exec --",
+    dlx: "yarn dlx"
+  },
+  bun: {
+    name: "bun",
+    lockfiles: ["bun.lock", "bun.lockb"],
+    add: "bun add",
+    exec: "bun run",
+    dlx: "bunx"
+  },
+  deno: {
+    //! deno not fully supported yet
+    name: "deno",
+    lockfiles: ["deno.lock"],
+    add: "deno add",
+    // TODO: don't think these are quite right...
+    exec: "deno run",
+    dlx: "deno run"
+  }
+});
+function detectWorkspaceInfo(opts) {
+  debug("Detecting workspace info");
+  let cwd = opts?.cwd || process.cwd();
+  let multipleLockfilesDetected;
+  let foundRootPath;
+  let foundPm;
+  do {
+    debug(`> scanning ${cwd}`);
+    const scanDir = cwd;
+    let detectedPm;
+    let pm;
+    for (pm in JS_PACKAGE_MANAGERS) {
+      const foundLockfile = JS_PACKAGE_MANAGERS[pm].lockfiles.find(
+        (lockfile) => pathExistsSync(path2.join(scanDir, lockfile))
+      );
+      if (foundLockfile) {
+        if (detectedPm) {
+          debug(`> found multiple lockfiles: ${foundLockfile} and ${JS_PACKAGE_MANAGERS[detectedPm].lockfiles[0]}`);
+          multipleLockfilesDetected = [detectedPm, pm];
+          break;
+        }
+        debug(`> found ${foundLockfile}`);
+        detectedPm = pm;
+      }
+    }
+    if (detectedPm && !multipleLockfilesDetected) {
+      foundRootPath = scanDir;
+      foundPm = detectedPm;
+      break;
+    }
+    if (multipleLockfilesDetected) break;
+    const parentDir = path2.dirname(cwd);
+    if (parentDir === cwd) break;
+    cwd = parentDir;
+    if (pathExistsSync(path2.join(cwd, ".git"))) break;
+  } while (cwd);
+  if (!foundPm) {
+    if (process.env.npm_config_user_agent) {
+      const pmFromAgent = process.env.npm_config_user_agent.split("/")[0];
+      if (Object.keys(JS_PACKAGE_MANAGERS).includes(pmFromAgent)) {
+        debug(`> found ${pmFromAgent} using npm_config_user_agent`);
+        foundPm = pmFromAgent;
+        foundRootPath = opts?.cwd || process.cwd();
+      }
+    }
+    if (!foundPm && multipleLockfilesDetected) {
+      debug(`> using ${multipleLockfilesDetected[0]} from multiple detected lockfiles`);
+      foundPm = multipleLockfilesDetected[0];
+      foundRootPath = cwd;
+    }
+  }
+  if (!foundPm || !foundRootPath) {
+    return void 0;
+  }
+  const packageManager = JS_PACKAGE_MANAGERS[foundPm];
+  let isMonorepo = false;
+  let monorepoTool;
+  const rootPackageJsonPath = path2.join(foundRootPath, "package.json");
+  if (pathExistsSync(rootPackageJsonPath)) {
+    try {
+      const packageJson = JSON.parse(fs4.readFileSync(rootPackageJsonPath, "utf-8"));
+      if (packageJson.workspaces) isMonorepo = true;
+    } catch {
+    }
+  }
+  if (!isMonorepo && pathExistsSync(path2.join(foundRootPath, "pnpm-workspace.yaml"))) {
+    isMonorepo = true;
+  }
+  if (pathExistsSync(path2.join(foundRootPath, "turbo.json"))) {
+    monorepoTool = "turborepo";
+  } else if (pathExistsSync(path2.join(foundRootPath, "nx.json"))) {
+    monorepoTool = "nx";
+  } else if (pathExistsSync(path2.join(foundRootPath, "lerna.json"))) {
+    monorepoTool = "lerna";
+  }
+  if (monorepoTool) isMonorepo = true;
+  return {
+    packageManager,
+    rootPath: foundRootPath,
+    isMonorepo,
+    monorepoTool
+  };
+}
+__name(detectWorkspaceInfo, "detectWorkspaceInfo");
+var workspaceInfoStorage = new AsyncLocalStorage();
+function runWithWorkspaceInfo(fn, explicitInfo) {
+  let cached;
+  let detected = false;
+  const getter = /* @__PURE__ */ __name(() => {
+    if (!detected) {
+      cached = explicitInfo ?? detectWorkspaceInfo();
+      detected = true;
+    }
+    return cached;
+  }, "getter");
+  return workspaceInfoStorage.run(getter, fn);
+}
+__name(runWithWorkspaceInfo, "runWithWorkspaceInfo");
+function getWorkspaceInfo() {
+  return workspaceInfoStorage.getStore()?.() ?? detectWorkspaceInfo();
+}
+__name(getWorkspaceInfo, "getWorkspaceInfo");
 
 // src/env-graph/lib/plugins.ts
 var importedPluginModulePaths = /* @__PURE__ */ new Set();
-function isSEABuild() {
-  try {
-    return false;
-  } catch {
-    return false;
+var _cryptoShimApplied = false;
+function applyBunCryptoShim() {
+  if (_cryptoShimApplied) return;
+  _cryptoShimApplied = true;
+  const globalCrypto = globalThis.crypto;
+  if (globalCrypto && !globalCrypto.webcrypto) {
+    try {
+      Object.defineProperty(globalCrypto, "webcrypto", {
+        get() {
+          return globalCrypto;
+        },
+        configurable: true,
+        enumerable: false
+      });
+    } catch {
+    }
   }
 }
-__name(isSEABuild, "isSEABuild");
-async function loadPluginModuleInSEA(filePath) {
-  const code = fs3.readFileSync(filePath, "utf-8");
-  const fileUrl = pathToFileURL(filePath).href;
-  const pluginDir = path.dirname(filePath);
-  const pluginRequire = createRequire(filePath);
-  let transformed = code.replace(
-    /^import\s+(\w+)\s*,\s*(\{[^}]+\})\s+from\s+['"]([^'"]+)['"]\s*;?/gm,
-    'const $1 = __plugin_require__("$3"); const $2 = $1;'
-  ).replace(
-    /^import\s+\*\s+as\s+(\w+)\s+from\s+['"]([^'"]+)['"]\s*;?/gm,
-    'const $1 = __plugin_require__("$2");'
-  ).replace(
-    /^import\s+(\{[^}]+\})\s+from\s+['"]([^'"]+)['"]\s*;?/gm,
-    'const $1 = __plugin_require__("$2");'
-  ).replace(
-    /^import\s+(\w+)\s+from\s+['"]([^'"]+)['"]\s*;?/gm,
-    'const $1 = __plugin_require__("$2");'
-  ).replace(
-    /^import\s+['"]([^'"]+)['"]\s*;?/gm,
-    '__plugin_require__("$1");'
-  );
-  transformed = transformed.replace(/import\.meta/g, "__plugin_import_meta__");
-  const wrapped = `(async () => {
-${transformed}
-})()`;
-  const context = vm.createContext(globalThis, {
-    codeGeneration: { strings: true, wasm: true }
-  });
-  context.__plugin_require__ = pluginRequire;
-  context.__plugin_import_meta__ = Object.freeze({
-    url: fileUrl,
-    dirname: pluginDir,
-    filename: filePath
-  });
-  const script = new vm.Script(wrapped, { filename: filePath });
-  const result = script.runInContext(context);
-  await result;
+__name(applyBunCryptoShim, "applyBunCryptoShim");
+function loadPluginModule(filePath) {
+  applyBunCryptoShim();
+  const code = fs4.readFileSync(filePath, "utf-8");
+  const pluginDir = path2.dirname(filePath);
+  const moduleObj = { exports: {} };
+  const requireFn = createRequire(filePath);
+  const moduleFn = new Function("exports", "require", "module", "__filename", "__dirname", code);
+  moduleFn(moduleObj.exports, requireFn, moduleObj, filePath, pluginDir);
 }
-__name(loadPluginModuleInSEA, "loadPluginModuleInSEA");
+__name(loadPluginModule, "loadPluginModule");
 var VarlockPlugin = class {
   static {
     __name(this, "VarlockPlugin");
@@ -9673,6 +9983,7 @@ var VarlockPlugin = class {
     this._icon = val;
   }
   loadingError;
+  warnings = [];
   localPath;
   /** reference to the `@plugin()` decorator instance(s) that installed the plugin  */
   installDecoratorInstances = [];
@@ -9714,22 +10025,70 @@ var VarlockPlugin = class {
     this.debug("registerResolverFunction", resolverDef.name);
     this.resolverFunctions.push(resolverDef);
   }
+  /**
+   * Declare standard env vars this plugin uses.
+   * Set during plugin init — the loading infrastructure will automatically
+   * check for these vars and generate warnings if they are detected but not wired up.
+   *
+   * `key` accepts a single env var name or an array of alternatives — the first match is used.
+   * `dataType` is used to generate `# @type=...` schema lines for vars not in the schema.
+   */
+  standardVars;
+  /** called by the loading infrastructure — checks declared standardVars against the graph */
+  _checkStandardVars(graph) {
+    if (!this.standardVars) return;
+    const { initDecorator, params } = this.standardVars;
+    const resolved = Object.entries(params).map(([paramName, { key, dataType }]) => {
+      const keys = Array.isArray(key) ? key : [key];
+      const matchedKey = keys.find((k) => graph.overrideValues[k]);
+      return {
+        paramName,
+        matchedKey,
+        resolvedKey: matchedKey || keys[0],
+        dataType
+      };
+    });
+    const detected = resolved.filter((v) => v.matchedKey);
+    if (detected.length === 0) return;
+    const detectedKeys = detected.map((v) => v.matchedKey);
+    const needsSchemaSet = new Set(
+      detected.filter((v) => !(v.resolvedKey in graph.configSchema)).map((v) => v.resolvedKey)
+    );
+    const wiringParams = detected.map((v) => ansis_default.green(`${v.paramName}=$${v.resolvedKey}`)).join(", ");
+    const tip = [
+      "",
+      "Include in your schema and use in plugin initialization:",
+      "",
+      `  # ${initDecorator}(..., ${wiringParams})`,
+      "  # ---"
+    ];
+    for (const v of detected) {
+      const inSchema = !needsSchemaSet.has(v.resolvedKey);
+      if (v.dataType) {
+        const typeLine = `  # @type=${v.dataType}`;
+        tip.push(inSchema ? typeLine : ansis_default.green(typeLine));
+      }
+      const itemLine = `  ${v.resolvedKey}=`;
+      tip.push(inSchema ? itemLine : ansis_default.green(itemLine));
+    }
+    tip.push("");
+    this.warnings.push(new SchemaError(
+      `${detectedKeys.join(", ")} found in environment but not connected to plugin`,
+      { isWarning: true, tip }
+    ));
+  }
   get pluginFilePath() {
     if (this.type === "single-file") return this.localPath;
     const pluginExport = this._packageJson?.exports?.["./plugin"] || "";
     if (!pluginExport) throw new Error("Plugin package.json is missing ./plugin export");
-    return path.join(this.localPath, pluginExport);
+    return path2.join(this.localPath, pluginExport);
   }
   async executePluginModule() {
     globalThis.plugin = this;
     try {
       if (!await pathExists(this.pluginFilePath)) throw new Error(`Plugin file not found: ${this.pluginFilePath}`);
       importedPluginModulePaths.add(this.pluginFilePath);
-      if (isSEABuild()) {
-        await loadPluginModuleInSEA(this.pluginFilePath);
-      } else {
-        await import(this.pluginFilePath);
-      }
+      loadPluginModule(this.pluginFilePath);
     } catch (err) {
       this.loadingError = err;
     }
@@ -9737,9 +10096,9 @@ var VarlockPlugin = class {
   }
 };
 async function initPluginFromLocalPath(localPath) {
-  const stats = await fs.stat(localPath);
+  const stats = await fs2.stat(localPath);
   if (stats.isFile()) {
-    const ext = path.extname(localPath).toLowerCase();
+    const ext = path2.extname(localPath).toLowerCase();
     if ([".js", ".cjs", ".mjs"].includes(ext) === false) {
       throw new SchemaError(`Single-file plugin must be a .js, .cjs, or .mjs file: ${localPath}`);
     }
@@ -9748,11 +10107,11 @@ async function initPluginFromLocalPath(localPath) {
       localPath
     });
   } else if (stats.isDirectory()) {
-    const pkgJsonPath = path.join(localPath, "package.json");
+    const pkgJsonPath = path2.join(localPath, "package.json");
     if (!await pathExists(pkgJsonPath)) {
       throw new SchemaError("Plugin is missing package.json file");
     }
-    const packageJsonContents = JSON.parse(await fs.readFile(pkgJsonPath, "utf-8"));
+    const packageJsonContents = JSON.parse(await fs2.readFile(pkgJsonPath, "utf-8"));
     if (!packageJsonContents.exports?.["./plugin"]) {
       throw new SchemaError('Plugin is missing "./plugin" export in package.json');
     }
@@ -9815,24 +10174,24 @@ async function registerPluginInGraph(graph, plugin, pluginDecorator) {
 __name(registerPluginInGraph, "registerPluginInGraph");
 async function downloadPlugin(url) {
   const exec2 = promisify(exec);
-  const cacheDir = path.join(getUserVarlockDir(), "plugins-cache");
-  const indexPath = path.join(cacheDir, "index.json");
-  await fs.mkdir(cacheDir, { recursive: true });
+  const cacheDir = path2.join(getUserVarlockDir(), "plugins-cache");
+  const indexPath = path2.join(cacheDir, "index.json");
+  await fs2.mkdir(cacheDir, { recursive: true });
   let index = {};
   try {
-    const indexRaw = await fs.readFile(indexPath, "utf-8");
+    const indexRaw = await fs2.readFile(indexPath, "utf-8");
     index = JSON.parse(indexRaw);
   } catch {
   }
   if (index[url]) {
-    const pluginDir = path.join(cacheDir, index[url]);
-    if (await fs.stat(pluginDir).then(() => true, () => false)) {
+    const pluginDir = path2.join(cacheDir, index[url]);
+    if (await fs2.stat(pluginDir).then(() => true, () => false)) {
       return pluginDir;
     }
   }
-  const tmpTgz = path.join(cacheDir, `tmp-${crypto.randomBytes(8).toString("hex")}.tgz`);
+  const tmpTgz = path2.join(cacheDir, `tmp-${crypto.randomBytes(8).toString("hex")}.tgz`);
   await new Promise((resolve, reject) => {
-    const file = fs3.createWriteStream(tmpTgz);
+    const file = fs4.createWriteStream(tmpTgz);
     https.get(url, (res) => {
       if (res.statusCode !== 200) {
         reject(new Error(`Failed to download plugin: ${res.statusCode}`));
@@ -9843,28 +10202,28 @@ async function downloadPlugin(url) {
       file.on("error", reject);
     }).on("error", reject);
   });
-  const tmpExtractDir = path.join(cacheDir, `tmp-extract-${crypto.randomBytes(8).toString("hex")}`);
-  await fs.mkdir(tmpExtractDir);
+  const tmpExtractDir = path2.join(cacheDir, `tmp-extract-${crypto.randomBytes(8).toString("hex")}`);
+  await fs2.mkdir(tmpExtractDir);
   await exec2(`tar -xzf ${tmpTgz} -C ${tmpExtractDir}`);
-  let pkgJsonPath = path.join(tmpExtractDir, "package", "package.json");
-  let pluginRoot = path.join(tmpExtractDir, "package");
-  if (!await fs.stat(pkgJsonPath).then(() => true, () => false)) {
-    pkgJsonPath = path.join(tmpExtractDir, "package.json");
+  let pkgJsonPath = path2.join(tmpExtractDir, "package", "package.json");
+  let pluginRoot = path2.join(tmpExtractDir, "package");
+  if (!await fs2.stat(pkgJsonPath).then(() => true, () => false)) {
+    pkgJsonPath = path2.join(tmpExtractDir, "package.json");
     pluginRoot = tmpExtractDir;
-    if (!await fs.stat(pkgJsonPath).then(() => true, () => false)) {
+    if (!await fs2.stat(pkgJsonPath).then(() => true, () => false)) {
       throw new Error("package.json not found in plugin tgz");
     }
   }
-  const pkgJson = JSON.parse(await fs.readFile(pkgJsonPath, "utf-8"));
+  const pkgJson = JSON.parse(await fs2.readFile(pkgJsonPath, "utf-8"));
   const safePackageName = (pkgJson.name || "").replaceAll("/", "-").replaceAll("@", "");
   const dirName = `${safePackageName}_${pkgJson.version || ""}_${crypto.randomBytes(4).toString("hex")}`;
-  const finalDir = path.join(cacheDir, dirName);
-  await fs.rm(finalDir, { recursive: true, force: true });
-  await fs.rename(pluginRoot, finalDir);
-  await fs.rm(tmpTgz, { force: true });
-  await fs.rm(tmpExtractDir, { recursive: true, force: true });
+  const finalDir = path2.join(cacheDir, dirName);
+  await fs2.rm(finalDir, { recursive: true, force: true });
+  await fs2.rename(pluginRoot, finalDir);
+  await fs2.rm(tmpTgz, { force: true });
+  await fs2.rm(tmpExtractDir, { recursive: true, force: true });
   index[url] = dirName;
-  await fs.writeFile(indexPath, JSON.stringify(index, null, 2));
+  await fs2.writeFile(indexPath, JSON.stringify(index, null, 2));
   return finalDir;
 }
 __name(downloadPlugin, "downloadPlugin");
@@ -9877,7 +10236,7 @@ async function processPluginInstallDecorators(dataSource) {
       dataSource._loadingError = new Error("@plugin can only be used from a file-based data source");
       return;
     }
-    const dataSourceDir = path.dirname(dataSource.fullPath);
+    const dataSourceDir = path2.dirname(dataSource.fullPath);
     for (const pluginDecorator of installPluginDecorators) {
       let pluginSrcPath;
       try {
@@ -9887,7 +10246,7 @@ async function processPluginInstallDecorators(dataSource) {
           throw new SchemaError("Bad @plugin - must provide a string source location");
         }
         if (pluginSourceDescriptor.startsWith("./") || pluginSourceDescriptor.startsWith("../") || pluginSourceDescriptor.startsWith("/")) {
-          pluginSrcPath = pluginSourceDescriptor.startsWith("/") ? pluginSourceDescriptor : path.resolve(dataSourceDir, pluginSourceDescriptor);
+          pluginSrcPath = pluginSourceDescriptor.startsWith("/") ? pluginSourceDescriptor : path2.resolve(dataSourceDir, pluginSourceDescriptor);
           if (!await pathExists(pluginSrcPath)) {
             throw new SchemaError(`Bad @plugin path: ${pluginSourceDescriptor}`);
           }
@@ -9919,22 +10278,17 @@ async function processPluginInstallDecorators(dataSource) {
           } else if (versionDescriptor === "") {
             throw new SchemaError('Bad @plugin version descriptor - remove "@" or specify a valid version');
           }
+          const workspaceRootPath = getWorkspaceInfo()?.rootPath;
           let currentDir = dataSourceDir;
           let nodeModulesPath;
           while (currentDir) {
-            if (await pathExists(path.join(currentDir, "package.json"))) {
-              nodeModulesPath = path.join(currentDir, "node_modules");
-              break;
+            if (!nodeModulesPath && await pathExists(path2.join(currentDir, "package.json"))) {
+              nodeModulesPath = path2.join(currentDir, "node_modules");
             }
-            const parentDir = path.dirname(currentDir);
-            if (parentDir === currentDir) break;
-            currentDir = parentDir;
-          }
-          if (nodeModulesPath) {
-            const pluginPackagePath = path.join(nodeModulesPath, moduleName);
-            if (await pathExists(pluginPackagePath)) {
-              const pluginPackageJsonPath = path.join(pluginPackagePath, "package.json");
-              const packageJsonString = await fs.readFile(pluginPackageJsonPath, "utf-8");
+            const candidatePluginPath = path2.join(currentDir, "node_modules", moduleName);
+            if (await pathExists(candidatePluginPath)) {
+              const pluginPackageJsonPath = path2.join(candidatePluginPath, "package.json");
+              const packageJsonString = await fs2.readFile(pluginPackageJsonPath, "utf-8");
               const packageJson = JSON.parse(packageJsonString);
               const packageVersion = packageJson.version;
               if (versionDescriptor && !import_semver.default.satisfies(packageVersion, versionDescriptor)) {
@@ -9942,8 +10296,13 @@ async function processPluginInstallDecorators(dataSource) {
                   location: getErrorLocation(dataSource, pluginDecorator)
                 });
               }
-              pluginSrcPath = pluginPackagePath;
+              pluginSrcPath = candidatePluginPath;
+              break;
             }
+            if (workspaceRootPath && currentDir === workspaceRootPath) break;
+            const parentDir = path2.dirname(currentDir);
+            if (parentDir === currentDir) break;
+            currentDir = parentDir;
           }
           if (!pluginSrcPath) {
             if (!versionDescriptor) {
@@ -10060,6 +10419,7 @@ var EnvGraphDataSource2 = class {
    */
   get isEnvSpecific() {
     if (this.applyForEnv && !this.isImport) return true;
+    if (this.type === "overrides") return true;
     if (this._hasConditionalDisable) return true;
     if (this.importMeta?.isConditionallyEnabled) return true;
     if (this.parent?.isEnvSpecific) return true;
@@ -10204,9 +10564,9 @@ var EnvGraphDataSource2 = class {
             if (!(this instanceof FileBasedDataSource)) {
               throw new Error("@import of files can only be used from a file-based data source");
             }
-            fullImportPath = path.resolve(this.fullPath, "..", importPath);
+            fullImportPath = path2.resolve(this.fullPath, "..", importPath);
           } else if (importPath.startsWith("~/") || importPath === "~") {
-            fullImportPath = path.join(os.homedir(), importPath.slice(1));
+            fullImportPath = path2.join(os.homedir(), importPath.slice(1));
           } else if (importPath.startsWith("/")) {
             fullImportPath = importPath;
           }
@@ -10222,7 +10582,7 @@ var EnvGraphDataSource2 = class {
             throw new Error("expected @import allowMissing parameter to be a boolean");
           }
           if (fullImportPath) {
-            const fileName = path.basename(fullImportPath);
+            const fileName = path2.basename(fullImportPath);
             if (this.graph.virtualImports) {
               if (importPath.endsWith("/")) {
                 const dirExists = Object.keys(this.graph.virtualImports).some((p) => p.startsWith(fullImportPath));
@@ -10249,7 +10609,7 @@ var EnvGraphDataSource2 = class {
                 await this.addChild(source, { isImport: true, importKeys, isConditionallyEnabled });
               }
             } else {
-              const fsStat = await tryCatch(async () => fs.stat(fullImportPath), (_err) => {
+              const fsStat = await tryCatch(async () => fs2.stat(fullImportPath), (_err) => {
               });
               if (!fsStat && allowMissing) continue;
               if (!fsStat) {
@@ -10384,8 +10744,8 @@ var FileBasedDataSource = class extends EnvGraphDataSource2 {
   constructor(fullPath, opts) {
     super();
     this.fullPath = fullPath;
-    this.fileName = path.basename(fullPath);
-    this.relativePath = path.relative(process.cwd(), fullPath);
+    this.fileName = path2.basename(fullPath);
+    this.relativePath = path2.relative(process.cwd(), fullPath);
     if (opts?.overrideContents) {
       this.rawContents = opts.overrideContents;
     }
@@ -10418,7 +10778,7 @@ var FileBasedDataSource = class extends EnvGraphDataSource2 {
         this._loadingError = new Error(`File does not exist: ${this.fullPath}`);
         return;
       }
-      this.rawContents = await fs.readFile(this.fullPath, "utf8");
+      this.rawContents = await fs2.readFile(this.fullPath, "utf8");
     }
     if (this.rawContents) await this._parseContents();
   }
@@ -10451,6 +10811,7 @@ var DotEnvFileDataSource = class extends FileBasedDataSource {
     if (!this.parsedFile) throw new Error("Failed to parse .env file");
     if (!this.graph) throw new Error("expected graph to be set");
     this.rootDecorators = this.parsedFile.decoratorsArray.map((d) => new RootDecoratorInstance(this, d));
+    this._validateDecoratorPlacement(this.parsedFile);
     for (const item of this.parsedFile.configItems) {
       this.configItemDefs[item.key] = {
         description: item.description,
@@ -10459,6 +10820,47 @@ var DotEnvFileDataSource = class extends FileBasedDataSource {
       };
     }
   }
+  _validateDecoratorPlacement(parsedFile) {
+    const seenRootDecs = /* @__PURE__ */ new Set();
+    for (const dec of parsedFile.decoratorsArray) {
+      if (dec.name in this.graph.itemDecoratorsRegistry) {
+        this._schemaErrors.push(new SchemaError(
+          `Item decorator @${dec.name} cannot be used in the file header - it must be attached to a config item`,
+          { location: this._locationFromParsed(dec) }
+        ));
+      } else if (!dec.isBareFnCall) {
+        if (seenRootDecs.has(dec.name)) {
+          this._schemaErrors.push(new SchemaError(
+            `Root decorator @${dec.name} cannot be used more than once in the same file`,
+            { location: this._locationFromParsed(dec) }
+          ));
+        }
+        seenRootDecs.add(dec.name);
+      }
+    }
+    for (const block of parsedFile.orphanCommentBlocks) {
+      for (const comment of block.comments) {
+        if (comment instanceof ParsedEnvSpecDecoratorComment) {
+          for (const dec of comment.decorators) {
+            this._schemaErrors.push(new SchemaError(
+              `Decorator @${dec.name} is in a detached comment block - decorators must be in the file header or attached directly to a config item (no blank lines between the decorator and the item)`,
+              { location: this._locationFromParsed(dec) }
+            ));
+          }
+        }
+      }
+    }
+  }
+  _locationFromParsed(dec) {
+    const loc = dec.data._location;
+    if (!loc || !this.rawContents) return void 0;
+    return {
+      id: this.fullPath,
+      lineNumber: loc.start.line,
+      colNumber: loc.start.column,
+      lineStr: this.rawContents.split("\n")[loc.start.line - 1] || ""
+    };
+  }
 };
 var DirectoryDataSource = class extends EnvGraphDataSource2 {
   constructor(basePath) {
@@ -10476,7 +10878,7 @@ var DirectoryDataSource = class extends EnvGraphDataSource2 {
   schemaDataSource;
   async addAutoLoadedFile(fileName) {
     if (!this.graph) throw new Error("expected graph to be set");
-    const filePath = path.join(this.basePath, fileName);
+    const filePath = path2.join(this.basePath, fileName);
     if (this.graph.virtualImports) {
       if (this.graph.virtualImports[filePath]) {
         const source2 = new DotEnvFileDataSource(filePath, { overrideContents: this.graph.virtualImports[filePath] });
@@ -10580,15 +10982,15 @@ var iconCacheFolderInit = false;
 var iconInMemoryCache = {};
 async function fetchIconSvg(iconifyName, color = "808080", iconCacheFolder = "/tmp/varlock-icon-cache") {
   if (!iconCacheFolderInit) {
-    fs3.mkdirSync(iconCacheFolder, { recursive: true });
+    fs4.mkdirSync(iconCacheFolder, { recursive: true });
     iconCacheFolderInit = true;
   }
   const iconPath = `${iconCacheFolder}/${iconifyName}-${ICON_SIZE}.svg`;
   let svgSrc;
   if (iconInMemoryCache[iconPath]) {
     svgSrc = iconInMemoryCache[iconPath];
-  } else if (fs3.existsSync(iconPath)) {
-    const svgFileBuffer = await fs3.promises.readFile(iconPath, "utf-8");
+  } else if (fs4.existsSync(iconPath)) {
+    const svgFileBuffer = await fs4.promises.readFile(iconPath, "utf-8");
     svgSrc = svgFileBuffer.toString();
     iconInMemoryCache[iconPath] = svgSrc;
   } else {
@@ -10600,7 +11002,7 @@ async function fetchIconSvg(iconifyName, color = "808080", iconCacheFolder = "/t
     }
     if (!svgSrc) return;
     if (svgSrc) {
-      await fs3.promises.writeFile(iconPath, svgSrc, "utf-8");
+      await fs4.promises.writeFile(iconPath, svgSrc, "utf-8");
       iconInMemoryCache[iconPath] = svgSrc;
     }
   }
@@ -10722,7 +11124,7 @@ async function generateTypes(graph, lang, typesPath) {
     items.push(await configItem.getTypeGenInfo());
   }
   const tsSrc = await generateTsTypesSrc(items);
-  await fs3.promises.writeFile(typesPath, tsSrc, "utf-8");
+  await fs4.promises.writeFile(typesPath, tsSrc, "utf-8");
 }
 __name(generateTypes, "generateTypes");
 
@@ -10751,7 +11153,7 @@ var EnvGraph2 = class {
   setVirtualImports(basePath, files) {
     this.virtualImports = {};
     for (const [fileName, fileContents] of Object.entries(files)) {
-      this.virtualImports[path.join(basePath, fileName)] = fileContents;
+      this.virtualImports[path2.join(basePath, fileName)] = fileContents;
     }
   }
   get sortedDataSources() {
@@ -10872,6 +11274,9 @@ var EnvGraph2 = class {
     for (const plugin of this.plugins) {
       if (plugin.loadingError) return;
     }
+    for (const plugin of this.plugins) {
+      plugin._checkStandardVars(this);
+    }
     for (const key in this.configSchema) {
       if (isBuiltinVar(key)) this.registerBuiltinVar(key);
     }
@@ -10880,7 +11285,7 @@ var EnvGraph2 = class {
       if (source.disabled) continue;
       for (const decInstance of source.rootDecorators) {
         await decInstance.process();
-        if (decInstance.schemaErrors.length) processingError = true;
+        if (decInstance.schemaErrors.some((e) => !e.isWarning)) processingError = true;
       }
     }
     for (const itemKey in this.configSchema) {
@@ -10954,7 +11359,7 @@ var EnvGraph2 = class {
       const resolveItem = /* @__PURE__ */ __name(async (itemKey) => {
         if (itemsToResolveStatus[itemKey] !== false) return;
         const item = this.configSchema[itemKey];
-        if (item.errors.length) {
+        if (item.errors.some((e) => !e.isWarning)) {
           markItemCompleted(itemKey);
           return;
         }
@@ -11011,7 +11416,7 @@ var EnvGraph2 = class {
       serializedGraph.sources.push({
         label: source.label,
         enabled: !source.disabled,
-        path: source instanceof FileBasedDataSource ? path.relative(this.basePath ?? "", source.fullPath) : void 0
+        path: source instanceof FileBasedDataSource ? path2.relative(this.basePath ?? "", source.fullPath) : void 0
       });
     }
     for (const itemKey of this.sortedConfigKeys) {
@@ -11052,7 +11457,7 @@ var EnvGraph2 = class {
       if (typeGenSettings.obj.lang !== "ts") throw new Error(`@generateTypes - unsupported language: ${typeGenSettings.obj.lang}`);
       if (!typeGenSettings.obj.path) throw new Error("@generateTypes - must set `path` arg");
       if (!my_dash_default.isString(typeGenSettings.obj.path)) throw new Error("@generateTypes - `path` arg must be a string");
-      const outputPath = generateTypesDec.dataSource instanceof FileBasedDataSource ? path.resolve(generateTypesDec.dataSource.fullPath, "..", typeGenSettings.obj.path) : typeGenSettings.obj.path;
+      const outputPath = generateTypesDec.dataSource instanceof FileBasedDataSource ? path2.resolve(generateTypesDec.dataSource.fullPath, "..", typeGenSettings.obj.path) : typeGenSettings.obj.path;
       await this.generateTypes(typeGenSettings.obj.lang, outputPath);
       generatedCount++;
     }
@@ -11424,10 +11829,10 @@ var ConfigItem = class {
   get isCoerced() {
     return this.resolvedRawValue !== this.resolvedValue;
   }
-  async resolve(reset = false) {
-    if (this._schemaErrors.length) return;
-    if (this.resolverSchemaErrors.length) return;
-    if (reset) {
+  async resolve(reset2 = false) {
+    if (this._schemaErrors.some((e) => !e.isWarning)) return;
+    if (this.resolverSchemaErrors.some((e) => !e.isWarning)) return;
+    if (reset2) {
       this.isResolved = false;
       this.isValidated = false;
       this.resolutionError = void 0;
@@ -11676,6 +12081,6 @@ var ConfigItem = class {
 };
 //! these are probably not relevant anymore, or needs to move to a plugin layer?
 
-export { CoercionError, ConfigItem, ConfigLoadError, DirectoryDataSource, DotEnvFileDataSource, EnvGraph2 as EnvGraph, ParsedEnvSpecStaticValue, ResolutionError, SchemaError, ValidationError, VarlockError, envSpecUpdater, getUserVarlockDir, my_dash_default, parseEnvSpecDotEnvFile, pathExists, pathExistsSync, require_semver2 as require_semver, tryCatch };
-//# sourceMappingURL=chunk-PCRIVT4T.js.map
-//# sourceMappingURL=chunk-PCRIVT4T.js.map
+export { CoercionError, ConfigItem, ConfigLoadError, DirectoryDataSource, DotEnvFileDataSource, EnvGraph2 as EnvGraph, ParsedEnvSpecStaticValue, ResolutionError, SchemaError, ValidationError, VarlockError, ansis_default, detectWorkspaceInfo, envSpecUpdater, getUserVarlockDir, my_dash_default, parseEnvSpecDotEnvFile, pathExists, require_semver2 as require_semver, runWithWorkspaceInfo, tryCatch };
+//# sourceMappingURL=chunk-2AGKN64R.js.map
+//# sourceMappingURL=chunk-2AGKN64R.js.map