varlock 0.7.1 → 0.7.3

package/dist/{env-graph-BI5ASRYd.d.ts → env-graph-BxA2OztA.d.ts}

@@ -268,6 +268,7 @@ declare const DATA_SOURCE_TYPES: Readonly<{
         fileSuffixes: string[];
     };
     container: {};
+    'import-alias': {};
 }>;
 type DataSourceType = keyof typeof DATA_SOURCE_TYPES;
 declare abstract class EnvGraphDataSource {
@@ -288,6 +289,7 @@ declare abstract class EnvGraphDataSource {
             fileSuffixes: string[];
         };
         container: {};
+        'import-alias': {};
     }>;
     /** reference back to the graph */
     graph?: EnvGraph;
@@ -311,6 +313,14 @@ declare abstract class EnvGraphDataSource {
     protected _initChild(child: EnvGraphDataSource, importMeta?: EnvGraphDataSource['importMeta']): Promise<void>;
     /** adds a child data source, running both finishInit and import processing */
     addChild(child: EnvGraphDataSource, importMeta?: EnvGraphDataSource['importMeta']): Promise<void>;
+    /**
+     * When true, direct children of this data source are treated as top-level entry points:
+     * they inherit the "no parent" semantics and are never classified as env-specific
+     * solely because of their filename (e.g. `.env.production` used as an explicit entry
+     * point would not be env-specific, but one auto-loaded inside a directory would be).
+     * Only `MultiplePathsContainerDataSource` sets this to true.
+     */
+    childrenAreRoots?: boolean;
     /**
      * Whether this data source is environment-specific.
      * A source is env-specific if:
@@ -323,6 +333,9 @@ declare abstract class EnvGraphDataSource {
      * Note: `applyForEnv` from filename parsing is only relevant for auto-loaded files.
      * Explicitly imported files (via `@import`) are controlled by the import mechanism,
      * not the auto-load-by-env logic, so their `applyForEnv` is ignored here.
+     * Similarly, a file that is the explicit root entry point (no parent, or whose parent
+     * has `childrenAreRoots` set) is never treated as env-specific even if its filename
+     * contains an env qualifier.
      */
     get isEnvSpecific(): boolean;
     /** true when the source has a `@disable` decorator whose value is not static */
@@ -422,7 +435,7 @@ declare class ConfigItem {
     _internalDefs: Array<ConfigItemDefAndSource>;
     constructor(envGraph: EnvGraph, key: string);
     /**
-     * fetch ordered list of definitions for this item, by following up sorted data sources list
+     * fetch ordered list of definitions for this item, by following the sorted definition sources list
      * internal defs (builtins) are appended last (lowest priority)
      */
     get defs(): ConfigItemDefAndSource[];
@@ -438,6 +451,14 @@ declare class ConfigItem {
         url: string;
         description?: string;
     }[];
+    /** Whether the resolved value came from a process.env override rather than file definitions */
+    get isOverridden(): boolean;
+    /**
+     * Returns the definition+source that would provide the value resolver
+     * (i.e. the "winning" definition), or undefined if no definition has a resolver.
+     * This is useful for explaining where a value comes from regardless of overrides.
+     */
+    get activeValueDef(): ConfigItemDefAndSource | undefined;
     get valueResolver(): Resolver | undefined;
     allDecorators: Array<ItemDecoratorInstance>;
     effectiveDecorators: Record<string, ItemDecoratorInstance>;
@@ -624,9 +645,17 @@ type SerializedEnvGraphErrors = {
     /** Root-level errors not tied to a specific config item (loading errors, schema errors, plugin errors, etc.) */
     root?: Array<string>;
 };
+/** Entry in the sorted definition sources list — pairs a data source with the importKeys
+ * filter that applies at that specific position in the precedence chain */
+type DefinitionSourceEntry = {
+    source: EnvGraphDataSource;
+    /** importKeys filter for this position (undefined = all keys visible) */
+    importKeys?: Array<string>;
+};
 type SerializedEnvGraph = {
     basePath?: string;
     sources: Array<{
+        type: string;
         label: string;
         enabled: boolean;
         path?: string;
@@ -654,10 +683,40 @@ declare class EnvGraph {
     /** graph-level fallback value for environment flag */
     envFlagFallback?: string;
     configSchema: Record<string, ConfigItem>;
+    /**
+     * Tracks directory/file paths that have already been loaded as imports.
+     * Maps each import path to the data source that was created for it.
+     * Used to prevent diamond-dependency re-imports (same schema imported via multiple paths),
+     * which would otherwise cause plugin init decorators to run multiple times.
+     */
+    private _loadedImportPaths;
+    /** Returns the existing source for a path if already loaded, or undefined */
+    getLoadedImportSource(importPath: string): EnvGraphDataSource | undefined;
+    /** Records the data source that was created for an import path */
+    recordLoadedImportPath(importPath: string, dataSource: EnvGraphDataSource): void;
+    /**
+     * Register ConfigItems for keys visible through an import
+     * that may not have been registered during the original source's finishInit.
+     */
+    registerItemsForImport(source: EnvGraphDataSource, importSite: EnvGraphDataSource, importKeys?: Array<string>): void;
+    /** Get a data source and all its descendants (DFS) */
+    private _getDescendants;
     /** virtual imports for testing */
     virtualImports?: Record<string, string>;
     setVirtualImports(basePath: string, files: Record<string, string>): void;
     get sortedDataSources(): EnvGraphDataSource[];
+    /**
+     * Precedence-ordered list of definition sources, used by ConfigItem.defs.
+     *
+     * Unlike `sortedDataSources` (which contains each real source exactly once),
+     * this list can contain the same source multiple times at different positions
+     * when it's imported from multiple locations (diamond dependency). Each entry
+     * carries its own `importKeys` filter for that specific import context.
+     *
+     * Built from `sortedDataSources` by expanding `ImportAliasSource` nodes into
+     * the original source's full subtree at the alias's precedence position.
+     */
+    get sortedDefinitionSources(): Array<DefinitionSourceEntry>;
     registeredResolverFunctions: Record<string, ResolverChildClass>;
     registerResolver(resolverClass: ResolverChildClass): void;
     dataTypesRegistry: Record<string, EnvGraphDataTypeFactory>;

package/dist/explain.command-VFR5SUW3.js

@@ -0,0 +1,12 @@
+export { commandFn, commandSpec } from './chunk-J4PGGBUP.js';
+import './chunk-4A54P4EM.js';
+import './chunk-QLNQ3KVC.js';
+import './chunk-4JWJZ4P3.js';
+import './chunk-CHQDS2PI.js';
+import './chunk-CNDSEDGU.js';
+import './chunk-5LNYCOEO.js';
+import './chunk-6CCHLM3U.js';
+import './chunk-XLYSNOR3.js';
+import './chunk-6PEHRAEP.js';
+//# sourceMappingURL=explain.command-VFR5SUW3.js.map
+//# sourceMappingURL=explain.command-VFR5SUW3.js.map

package/dist/explain.command-VFR5SUW3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"explain.command-VFR5SUW3.js"}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { E as EnvGraph, e as DotEnvFileDataSource, f as ConfigLoadError, S as SchemaError, b as ValidationError, C as CoercionError, R as ResolutionError } from './env-graph-BI5ASRYd.js';
-export { D as Debugger, d as SerializedEnvGraph, c as createDebug } from './env-graph-BI5ASRYd.js';
+import { E as EnvGraph, e as DotEnvFileDataSource, f as ConfigLoadError, S as SchemaError, b as ValidationError, C as CoercionError, R as ResolutionError } from './env-graph-BxA2OztA.js';
+export { D as Debugger, d as SerializedEnvGraph, c as createDebug } from './env-graph-BxA2OztA.js';
 import { initVarlockEnv } from './runtime/env.js';
 export { ENV } from './runtime/env.js';
 export { patchGlobalConsole } from './runtime/patch-console.js';
@@ -11,6 +11,8 @@ import '@env-spec/utils/type-utils';
 declare function loadEnvGraph(opts?: {
     basePath?: string;
     entryFilePath?: string;
+    /** Multiple entry file paths — when provided, creates a virtual root container for all paths */
+    entryFilePaths?: Array<string>;
     relativePaths?: Array<string>;
     checkGitIgnored?: boolean;
     excludeDirs?: Array<string>;

package/dist/index.js

@@ -1,10 +1,11 @@
 export { patchGlobalResponse } from './chunk-LVZSZAKN.js';
 export { patchGlobalServerResponse } from './chunk-MYHVSJ3X.js';
-import { checkBunVersion } from './chunk-4MCJ5H6K.js';
-import { checkForConfigErrors } from './chunk-4KSIULUK.js';
-import { loadVarlockEnvGraph } from './chunk-GCEP6UVQ.js';
-import { loadEnvGraph } from './chunk-TQDVHRUW.js';
-import { DotEnvFileDataSource, EnvGraph } from './chunk-B6SVDIAN.js';
+import { checkBunVersion } from './chunk-RYMTOGGL.js';
+import { checkForConfigErrors } from './chunk-QLNQ3KVC.js';
+import { loadVarlockEnvGraph } from './chunk-4JWJZ4P3.js';
+import './chunk-CHQDS2PI.js';
+import { loadEnvGraph } from './chunk-CNDSEDGU.js';
+import { DotEnvFileDataSource, EnvGraph } from './chunk-5LNYCOEO.js';
 import { ResolutionError, CoercionError, ValidationError, SchemaError, ConfigLoadError } from './chunk-6CCHLM3U.js';
 export { createDebug } from './chunk-6CCHLM3U.js';
 export { patchGlobalConsole } from './chunk-BC7LU4LG.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAkBA,eAAsB,IAAA,GAAO;AAC3B,EAAA,eAAA,EAAgB;AAEhB,EAAA,MAAM,QAAA,GAAW,MAAM,mBAAA,EAAoB;AAC3C,EAAA,MAAM,SAAS,gBAAA,EAAiB;AAChC,EAAA,oBAAA,CAAqB,QAAQ,CAAA;AAG7B,EAAA,OAAA,CAAQ,IAAI,aAAA,GAAgB,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,oBAAoB,CAAA;AACxE,EAAA,cAAA,EAAe;AAEjB;AAXsB,MAAA,CAAA,IAAA,EAAA,MAAA,CAAA;AAcf,SAAS,yBAAyB,IAAA,EAGtC;AACD,EAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,CAAI,aAAA,SAAsB,EAAC;AACxC,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,IAAI,aAAa,CAAA;AACpD,EAAA,MAAM,eAAe,EAAC;AACtB,EAAA,KAAA,MAAW,GAAA,IAAO,QAAQ,MAAA,EAAQ;AAChC,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,MAAA,CAAO,GAAG,CAAA;AACnC,IAAA,MAAM,WAAA,GAAc,CAAC,QAAA,CAAS,WAAA,IAAe,IAAA,EAAM,gBAAA;AACnD,IAAA,IAAI,CAAC,WAAA,EAAa;AAClB,IAAA,YAAA,CAAa,CAAA,EAAG,IAAA,EAAM,SAAA,IAAa,KAAK,IAAI,GAAG,CAAA,CAAE,CAAA,GAAI,IAAA,CAAK,SAAA,CAAU,OAAA,CAAQ,MAAA,CAAO,GAAG,EAAE,KAAK,CAAA;AAAA,EAC/F;AACA,EAAA,OAAO,YAAA;AACT;AAdgB,MAAA,CAAA,wBAAA,EAAA,0BAAA,CAAA;AAiBT,IAAM,QAAA,GAAW;AAAA;AAAA,EAEtB,QAAA;AAAA,EACA,oBAAA;AAAA;AAAA,EAGA,YAAA;AAAA;AAAA,EAGA,eAAA;AAAA,EACA,WAAA;AAAA,EACA,eAAA;AAAA,EACA,aAAA;AAAA,EACA,eAAA;AAAA;AAAA,EAGA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF","file":"index.js","sourcesContent":["import { checkForConfigErrors } from './cli/helpers/error-checks';\nimport { loadVarlockEnvGraph } from './lib/load-graph';\nimport { initVarlockEnv } from './runtime/env';\nimport { checkBunVersion } from './lib/check-bun-version';\n\n// Import env-graph components for internal API\nimport {\n  EnvGraph,\n  loadEnvGraph,\n  DotEnvFileDataSource,\n  ConfigLoadError,\n  SchemaError,\n  ValidationError,\n  CoercionError,\n  ResolutionError,\n  type SerializedEnvGraph,\n} from './env-graph';\n\nexport async function load() {\n  checkBunVersion();\n  // TODO: add some options\n  const envGraph = await loadVarlockEnvGraph();\n  await envGraph.resolveEnvValues();\n  checkForConfigErrors(envGraph);\n\n  // loadFromSerializedGraph(envGraph.getSerializedGraph());\n  process.env.__VARLOCK_ENV = JSON.stringify(envGraph.getSerializedGraph());\n  initVarlockEnv();\n  // TODO: return resolved env and schema / meta info\n}\n\n\nexport function getBuildTimeReplacements(opts?: {\n  objectKey?: string,\n  includeSensitive?: boolean,\n}) {\n  if (!process.env.__VARLOCK_ENV) return {};\n  const envInfo = JSON.parse(process.env.__VARLOCK_ENV) as SerializedEnvGraph;\n  const replacements = {} as Record<string, string>;\n  for (const key in envInfo.config) {\n    const itemInfo = envInfo.config[key];\n    const replaceItem = !itemInfo.isSensitive || opts?.includeSensitive;\n    if (!replaceItem) continue;\n    replacements[`${opts?.objectKey || 'ENV'}.${key}`] = JSON.stringify(envInfo.config[key].value);\n  }\n  return replacements;\n}\n\n// Internal API for direct env graph manipulation\nexport const internal = {\n  // Core classes\n  EnvGraph,\n  DotEnvFileDataSource,\n\n  // Loader function\n  loadEnvGraph,\n\n  // Error classes\n  ConfigLoadError,\n  SchemaError,\n  ValidationError,\n  CoercionError,\n  ResolutionError,\n\n  // Varlock-specific utilities\n  loadVarlockEnvGraph,\n  checkForConfigErrors,\n  initVarlockEnv,\n};\n\nexport { patchGlobalConsole } from './runtime/patch-console';\nexport { patchGlobalServerResponse } from './runtime/patch-server-response';\nexport { patchGlobalResponse } from './runtime/patch-response';\nexport { ENV } from './runtime/env';\nexport { createDebug, type Debugger } from './lib/debug';\nexport type { SerializedEnvGraph };\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAkBA,eAAsB,IAAA,GAAO;AAC3B,EAAA,eAAA,EAAgB;AAEhB,EAAA,MAAM,QAAA,GAAW,MAAM,mBAAA,EAAoB;AAC3C,EAAA,MAAM,SAAS,gBAAA,EAAiB;AAChC,EAAA,oBAAA,CAAqB,QAAQ,CAAA;AAG7B,EAAA,OAAA,CAAQ,IAAI,aAAA,GAAgB,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,oBAAoB,CAAA;AACxE,EAAA,cAAA,EAAe;AAEjB;AAXsB,MAAA,CAAA,IAAA,EAAA,MAAA,CAAA;AAcf,SAAS,yBAAyB,IAAA,EAGtC;AACD,EAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,CAAI,aAAA,SAAsB,EAAC;AACxC,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,IAAI,aAAa,CAAA;AACpD,EAAA,MAAM,eAAe,EAAC;AACtB,EAAA,KAAA,MAAW,GAAA,IAAO,QAAQ,MAAA,EAAQ;AAChC,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,MAAA,CAAO,GAAG,CAAA;AACnC,IAAA,MAAM,WAAA,GAAc,CAAC,QAAA,CAAS,WAAA,IAAe,IAAA,EAAM,gBAAA;AACnD,IAAA,IAAI,CAAC,WAAA,EAAa;AAClB,IAAA,YAAA,CAAa,CAAA,EAAG,IAAA,EAAM,SAAA,IAAa,KAAK,IAAI,GAAG,CAAA,CAAE,CAAA,GAAI,IAAA,CAAK,SAAA,CAAU,OAAA,CAAQ,MAAA,CAAO,GAAG,EAAE,KAAK,CAAA;AAAA,EAC/F;AACA,EAAA,OAAO,YAAA;AACT;AAdgB,MAAA,CAAA,wBAAA,EAAA,0BAAA,CAAA;AAiBT,IAAM,QAAA,GAAW;AAAA;AAAA,EAEtB,QAAA;AAAA,EACA,oBAAA;AAAA;AAAA,EAGA,YAAA;AAAA;AAAA,EAGA,eAAA;AAAA,EACA,WAAA;AAAA,EACA,eAAA;AAAA,EACA,aAAA;AAAA,EACA,eAAA;AAAA;AAAA,EAGA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF","file":"index.js","sourcesContent":["import { checkForConfigErrors } from './cli/helpers/error-checks';\nimport { loadVarlockEnvGraph } from './lib/load-graph';\nimport { initVarlockEnv } from './runtime/env';\nimport { checkBunVersion } from './lib/check-bun-version';\n\n// Import env-graph components for internal API\nimport {\n  EnvGraph,\n  loadEnvGraph,\n  DotEnvFileDataSource,\n  ConfigLoadError,\n  SchemaError,\n  ValidationError,\n  CoercionError,\n  ResolutionError,\n  type SerializedEnvGraph,\n} from './env-graph';\n\nexport async function load() {\n  checkBunVersion();\n  // TODO: add some options\n  const envGraph = await loadVarlockEnvGraph();\n  await envGraph.resolveEnvValues();\n  checkForConfigErrors(envGraph);\n\n  // loadFromSerializedGraph(envGraph.getSerializedGraph());\n  process.env.__VARLOCK_ENV = JSON.stringify(envGraph.getSerializedGraph());\n  initVarlockEnv();\n  // TODO: return resolved env and schema / meta info\n}\n\n\nexport function getBuildTimeReplacements(opts?: {\n  objectKey?: string,\n  includeSensitive?: boolean,\n}) {\n  if (!process.env.__VARLOCK_ENV) return {};\n  const envInfo = JSON.parse(process.env.__VARLOCK_ENV) as SerializedEnvGraph;\n  const replacements = {} as Record<string, string>;\n  for (const key in envInfo.config) {\n    const itemInfo = envInfo.config[key];\n    const replaceItem = !itemInfo.isSensitive || opts?.includeSensitive;\n    if (!replaceItem) continue;\n    replacements[`${opts?.objectKey || 'ENV'}.${key}`] = JSON.stringify(envInfo.config[key].value);\n  }\n  return replacements;\n}\n\n// Internal API for direct env graph manipulation\nexport const internal = {\n  // Core classes\n  EnvGraph,\n  DotEnvFileDataSource,\n\n  // Loader function\n  loadEnvGraph,\n\n  // Error classes\n  ConfigLoadError,\n  SchemaError,\n  ValidationError,\n  CoercionError,\n  ResolutionError,\n\n  // Varlock-specific utilities\n  loadVarlockEnvGraph,\n  checkForConfigErrors,\n  initVarlockEnv,\n};\n\nexport { patchGlobalConsole } from './runtime/patch-console';\nexport { patchGlobalServerResponse } from './runtime/patch-server-response';\nexport { patchGlobalResponse } from './runtime/patch-response';\nexport { ENV } from './runtime/env';\nexport { createDebug, type Debugger } from './lib/debug';\nexport type { SerializedEnvGraph };\n"]}

package/dist/init.command-HRY74HHU.js

@@ -0,0 +1,12 @@
+export { commandFn, commandSpec } from './chunk-W4CM34OJ.js';
+import './chunk-GGBNUVWR.js';
+import './chunk-R54KUFZA.js';
+import './chunk-4A54P4EM.js';
+import './chunk-CHQDS2PI.js';
+import './chunk-CNDSEDGU.js';
+import './chunk-5LNYCOEO.js';
+import './chunk-6CCHLM3U.js';
+import './chunk-XLYSNOR3.js';
+import './chunk-6PEHRAEP.js';
+//# sourceMappingURL=init.command-HRY74HHU.js.map
+//# sourceMappingURL=init.command-HRY74HHU.js.map

package/dist/{init.command-C2WNQ4UP.js.map → init.command-HRY74HHU.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"init.command-C2WNQ4UP.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"init.command-HRY74HHU.js"}

package/dist/install-plugin.command-WDCWQWT7.js

@@ -0,0 +1,11 @@
+export { commandFn, commandSpec } from './chunk-EC3NKELX.js';
+import './chunk-GXNQVEXD.js';
+import './chunk-R54KUFZA.js';
+import './chunk-4A54P4EM.js';
+import './chunk-CNDSEDGU.js';
+import './chunk-5LNYCOEO.js';
+import './chunk-6CCHLM3U.js';
+import './chunk-XLYSNOR3.js';
+import './chunk-6PEHRAEP.js';
+//# sourceMappingURL=install-plugin.command-WDCWQWT7.js.map
+//# sourceMappingURL=install-plugin.command-WDCWQWT7.js.map

package/dist/install-plugin.command-WDCWQWT7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"install-plugin.command-WDCWQWT7.js"}

package/dist/lib/exec-sync-varlock.d.ts

@@ -9,6 +9,13 @@ import { execSync } from 'child_process';
 declare function execSyncVarlock(command: string, opts?: (Parameters<typeof execSync>[1] & {
     exitOnError?: boolean;
     showLogsOnError?: boolean;
+    /**
+     * Additional directory to start searching for the varlock binary from.
+     * Searched before process.cwd(). Pass `import.meta.dirname` from the
+     * call-site so that in monorepos the binary installed next to the
+     * importing package is found even when cwd is an unrelated workspace root.
+     */
+    callerDir?: string;
 })): string;
 
 export { execSyncVarlock };

package/dist/lib/exec-sync-varlock.js

@@ -1,4 +1,4 @@
-export { execSyncVarlock } from '../chunk-K6M42GW2.js';
+export { execSyncVarlock } from '../chunk-N5O4Z32O.js';
 import '../chunk-6PEHRAEP.js';
 //# sourceMappingURL=exec-sync-varlock.js.map
 //# sourceMappingURL=exec-sync-varlock.js.map

package/dist/load.command-FNMIEIJB.js

@@ -0,0 +1,12 @@
+export { commandFn, commandSpec, formatShellValue } from './chunk-HMMDVPDG.js';
+import './chunk-4A54P4EM.js';
+import './chunk-QLNQ3KVC.js';
+import './chunk-4JWJZ4P3.js';
+import './chunk-CHQDS2PI.js';
+import './chunk-CNDSEDGU.js';
+import './chunk-5LNYCOEO.js';
+import './chunk-6CCHLM3U.js';
+import './chunk-XLYSNOR3.js';
+import './chunk-6PEHRAEP.js';
+//# sourceMappingURL=load.command-FNMIEIJB.js.map
+//# sourceMappingURL=load.command-FNMIEIJB.js.map

package/dist/{load.command-5X3BSCLF.js.map → load.command-FNMIEIJB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"load.command-5X3BSCLF.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"load.command-FNMIEIJB.js"}

package/dist/plugin-lib.d.ts

@@ -1,5 +1,5 @@
-import { V as VarlockPlugin } from './env-graph-BI5ASRYd.js';
-export { C as CoercionError, D as Debugger, R as ResolutionError, a as Resolver, S as SchemaError, b as ValidationError, c as createDebug } from './env-graph-BI5ASRYd.js';
+import { V as VarlockPlugin } from './env-graph-BxA2OztA.js';
+export { C as CoercionError, D as Debugger, R as ResolutionError, a as Resolver, S as SchemaError, b as ValidationError, c as createDebug } from './env-graph-BxA2OztA.js';
 import '@env-spec/parser';
 import '@env-spec/utils/type-utils';
 

package/dist/printenv.command-3HLXLNHS.js

@@ -0,0 +1,12 @@
+export { commandFn, commandSpec } from './chunk-FVFI4EQN.js';
+import './chunk-4A54P4EM.js';
+import './chunk-QLNQ3KVC.js';
+import './chunk-4JWJZ4P3.js';
+import './chunk-CHQDS2PI.js';
+import './chunk-CNDSEDGU.js';
+import './chunk-5LNYCOEO.js';
+import './chunk-6CCHLM3U.js';
+import './chunk-XLYSNOR3.js';
+import './chunk-6PEHRAEP.js';
+//# sourceMappingURL=printenv.command-3HLXLNHS.js.map
+//# sourceMappingURL=printenv.command-3HLXLNHS.js.map

package/dist/{printenv.command-XZEQ3CZB.js.map → printenv.command-3HLXLNHS.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"printenv.command-XZEQ3CZB.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"printenv.command-3HLXLNHS.js"}

package/dist/run.command-SXM3J6GI.js

@@ -0,0 +1,13 @@
+export { commandFn, commandSpec } from './chunk-ANZNVJLY.js';
+import './chunk-4A54P4EM.js';
+import './chunk-QLNQ3KVC.js';
+import './chunk-4JWJZ4P3.js';
+import './chunk-CHQDS2PI.js';
+import './chunk-CNDSEDGU.js';
+import './chunk-5LNYCOEO.js';
+import './chunk-6CCHLM3U.js';
+import './chunk-IMB5QAZS.js';
+import './chunk-XLYSNOR3.js';
+import './chunk-6PEHRAEP.js';
+//# sourceMappingURL=run.command-SXM3J6GI.js.map
+//# sourceMappingURL=run.command-SXM3J6GI.js.map

package/dist/{run.command-FE26WTNO.js.map → run.command-SXM3J6GI.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"run.command-FE26WTNO.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"run.command-SXM3J6GI.js"}

package/dist/runtime/env.d.ts

@@ -1,4 +1,4 @@
-import { d as SerializedEnvGraph } from '../env-graph-BI5ASRYd.js';
+import { d as SerializedEnvGraph } from '../env-graph-BxA2OztA.js';
 import '@env-spec/parser';
 import '@env-spec/utils/type-utils';
 

package/dist/scan.command-PW7HYURX.js

@@ -0,0 +1,14 @@
+export { commandFn, commandSpec, getGitFiles, scanFileForValues, walkDirectory } from './chunk-CS57IAAJ.js';
+import './chunk-GXNQVEXD.js';
+import './chunk-GGBNUVWR.js';
+import './chunk-R54KUFZA.js';
+import './chunk-4A54P4EM.js';
+import './chunk-4JWJZ4P3.js';
+import './chunk-CHQDS2PI.js';
+import './chunk-CNDSEDGU.js';
+import './chunk-5LNYCOEO.js';
+import './chunk-6CCHLM3U.js';
+import './chunk-XLYSNOR3.js';
+import './chunk-6PEHRAEP.js';
+//# sourceMappingURL=scan.command-PW7HYURX.js.map
+//# sourceMappingURL=scan.command-PW7HYURX.js.map

package/dist/{scan.command-2M4RN4ZP.js.map → scan.command-PW7HYURX.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"scan.command-2M4RN4ZP.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"scan.command-PW7HYURX.js"}

package/dist/telemetry.command-4HKKZK7N.js

@@ -0,0 +1,11 @@
+export { commandFn, commandSpec } from './chunk-ZB2JSJLY.js';
+import './chunk-R54KUFZA.js';
+import './chunk-4A54P4EM.js';
+import './chunk-CHQDS2PI.js';
+import './chunk-CNDSEDGU.js';
+import './chunk-5LNYCOEO.js';
+import './chunk-6CCHLM3U.js';
+import './chunk-XLYSNOR3.js';
+import './chunk-6PEHRAEP.js';
+//# sourceMappingURL=telemetry.command-4HKKZK7N.js.map
+//# sourceMappingURL=telemetry.command-4HKKZK7N.js.map

package/dist/{telemetry.command-SPOD3GAJ.js.map → telemetry.command-4HKKZK7N.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"telemetry.command-SPOD3GAJ.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"telemetry.command-4HKKZK7N.js"}

package/dist/typegen.command-O6OXWCVX.js

@@ -0,0 +1,12 @@
+export { commandFn, commandSpec } from './chunk-NTGBMXQQ.js';
+import './chunk-4A54P4EM.js';
+import './chunk-QLNQ3KVC.js';
+import './chunk-4JWJZ4P3.js';
+import './chunk-CHQDS2PI.js';
+import './chunk-CNDSEDGU.js';
+import './chunk-5LNYCOEO.js';
+import './chunk-6CCHLM3U.js';
+import './chunk-XLYSNOR3.js';
+import './chunk-6PEHRAEP.js';
+//# sourceMappingURL=typegen.command-O6OXWCVX.js.map
+//# sourceMappingURL=typegen.command-O6OXWCVX.js.map

package/dist/{typegen.command-RUNVYBAM.js.map → typegen.command-O6OXWCVX.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"typegen.command-RUNVYBAM.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"typegen.command-O6OXWCVX.js"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "varlock",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "description": "AI-safe .env files: Schemas for agents, Secrets for humans.",
   "main": "index.js",
   "type": "module",
@@ -129,7 +129,7 @@
     "@types/bun": "^1.3.11",
     "@types/node": "25.3.2",
     "@types/semver": "^7.7.1",
-    "@varlock/ci-env-info": "^0.0.1",
+    "@varlock/ci-env-info": "^0.0.2",
     "ansis": "^4.2.0",
     "browser-or-node": "^3.0.0",
     "ci-info": "^4.3.1",

package/dist/chunk-4KSIULUK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/cli/helpers/error-checks.ts"],"names":[],"mappings":";;;;;;AAQA,SAAS,yBAAyB,GAAA,EAAY;AAC5C,EAAA,IAAI,EAAE,GAAA,YAAe,YAAA,CAAA,IAAiB,CAAC,IAAI,QAAA,EAAU;AACrD,EAAA,MAAM,SAAS,GAAA,CAAI,QAAA;AACnB,EAAA,MAAM,UAAA,GAAa;AAAA,IACjB,MAAA,CAAO,OAAA;AAAA,IACP,CAAA,EAAG,aAAA,CAAM,IAAA,CAAK,GAAA,CAAI,OAAO,MAAA,CAAO,SAAA,GAAY,CAAC,CAAC,CAAC,CAAA,EAAG,aAAA,CAAM,GAAA,CAAI,GAAG,CAAC,CAAA;AAAA,GAClE,CAAE,KAAK,IAAI,CAAA;AAEX,EAAA,OAAA,CAAQ,MAAM,EAAE,CAAA;AAChB,EAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,UAAA,EAAM,MAAA,CAAO,EAAE,CAAA,CAAA,EAAI,OAAO,UAAU,CAAA,CAAA,EAAI,MAAA,CAAO,SAAS,CAAA,CAAE,CAAA;AACxE,EAAA,OAAA,CAAQ,MAAM,UAAU,CAAA;AAC1B;AAXS,MAAA,CAAA,wBAAA,EAAA,0BAAA,CAAA;AAaF,SAAS,mBAAmB,QAAA,EAAoB;AACrD,EAAA,IAAI,OAAO,IAAA,CAAK,QAAA,CAAS,YAAY,CAAA,CAAE,WAAW,CAAA,EAAG;AACnD,IAAA,MAAM,WAAA,GAAc,QAAA,CAAS,QAAA,IAAY,OAAA,CAAQ,GAAA,EAAI;AACrD,IAAA,MAAM,iBAAiB,QAAA,CAAS,iBAAA,CAAkB,KAAK,CAAC,CAAA,KAAM,aAAa,mBAAmB,CAAA;AAC9F,IAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,MAAA,OAAA,CAAQ,KAAA,CAAM,oCAA6B,WAAW;AAAA,CAAI,CAAA;AAC1D,MAAA,OAAA,CAAQ,MAAM,kGAAkG,CAAA;AAAA,IAClH,CAAA,MAAO;AACL,MAAA,OAAA,CAAQ,KAAA,CAAM,wCAAiC,WAAW;AAAA,CAAI,CAAA;AAC9D,MAAA,OAAA,CAAQ,MAAM,oDAAoD,CAAA;AAAA,IACpE;AACA,IAAA,OAAO,aAAa,CAAC,CAAA;AAAA,EACvB;AACF;AAbgB,MAAA,CAAA,kBAAA,EAAA,oBAAA,CAAA;AAeT,SAAS,qBAAqB,QAAA,EAAoB;AAEvD,EAAA,KAAA,MAAW,MAAA,IAAU,SAAS,iBAAA,EAAmB;AAI/C,IAAA,IAAI,OAAO,YAAA,EAAc;AACvB,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,0CAAA,EAAsC,MAAA,CAAO,KAAK;AAAA,CAAI,CAAA;AAEpE,MAAA,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,YAAA,CAAa,OAAO,CAAA;AACzC,MAAA,wBAAA,CAAyB,OAAO,YAAY,CAAA;AAI5C,MAAA,IAAI,OAAO,YAAA,CAAa,KAAA,IAAS,EAAE,MAAA,CAAO,wBAAwB,YAAA,CAAA,EAAe;AAC/E,QAAA,OAAA,CAAQ,KAAA,CAAM;AAAA,EAAK,aAAA,CAAM,GAAA,CAAI,cAAc,CAAC,CAAA,CAAE,CAAA;AAC9C,QAAA,OAAA,CAAQ,MAAM,aAAA,CAAM,GAAA,CAAI,MAAA,CAAO,YAAA,CAAa,KAAK,CAAC,CAAA;AAAA,MACpD;AAEA,MAAA,OAAO,aAAa,CAAC,CAAA;AAAA,IACvB;AAEA,IAAA,IAAI,MAAA,CAAO,aAAa,MAAA,EAAQ;AAC9B,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,kCAAA,EAA8B,MAAA,CAAO,KAAK,CAAA,CAAE,CAAA;AAE1D,MAAA,KAAA,MAAW,SAAA,IAAa,OAAO,YAAA,EAAc;AAC3C,QAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAA,EAAK,SAAA,CAAU,OAAO,CAAA,CAAE,CAAA;AACtC,QAAA,wBAAA,CAAyB,SAAS,CAAA;AAAA,MACpC;AACA,MAAA,OAAO,aAAa,CAAC,CAAA;AAAA,IACvB;AAAA,EACF;AASF;AAxCgB,MAAA,CAAA,oBAAA,EAAA,sBAAA,CAAA;AA2CT,SAAS,mBAAmB,QAAA,EAAoB;AACrD,EAAA,KAAA,MAAW,MAAA,IAAU,SAAS,OAAA,EAAS;AACrC,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,MAAA,EAAQ;AAC7B,IAAA,KAAA,MAAW,OAAA,IAAW,OAAO,QAAA,EAAU;AACrC,MAAA,OAAA,CAAQ,MAAM,aAAA,CAAM,MAAA,CAAO,aAAa,OAAA,CAAQ,OAAO,EAAE,CAAC,CAAA;AAC1D,MAAA,IAAI,QAAQ,GAAA,EAAK;AACf,QAAA,KAAA,MAAW,IAAA,IAAQ,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,EAAG;AAC1C,UAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AAAA,QAC3B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAZgB,MAAA,CAAA,kBAAA,EAAA,oBAAA,CAAA;AAcT,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EA7F3C;AA6F2C,IAAA,MAAA,CAAA,IAAA,EAAA,iBAAA,CAAA;AAAA;AAAA,EACzC,WAAA,GAAc;AACZ,IAAA,KAAA,CAAM,6CAA6C,CAAA;AAAA,EACrD;AAAA,EACA,kBAAA,GAAqB;AACnB,IAAA,OAAO;AAAA,UAAA,EAAQ,aAAA,CAAM,GAAA,CAAI,IAAA,CAAK,OAAO,CAAC,CAAA;AAAA,CAAA;AAAA,EACxC;AACF;AAEO,SAAS,oBAAA,CAAqB,UAAoB,IAAA,EAItD;AAED,EAAA,KAAA,MAAW,MAAA,IAAU,SAAS,iBAAA,EAAmB;AAC/C,IAAA,IAAI,MAAA,CAAO,iBAAiB,MAAA,EAAQ;AAClC,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,qCAAA,EAAiC,MAAA,CAAO,KAAK,CAAA,CAAE,CAAA;AAE7D,MAAA,KAAA,MAAW,GAAA,IAAO,OAAO,gBAAA,EAAkB;AACzC,QAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAA,EAAK,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAChC,QAAA,IAAI,GAAA,YAAe,YAAA,IAAgB,GAAA,CAAI,GAAA,EAAK;AAC1C,UAAA,KAAA,MAAW,IAAA,IAAQ,GAAA,CAAI,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,EAAG;AACtC,YAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AAAA,UAC3B;AAAA,QACF;AACA,QAAA,wBAAA,CAAyB,GAAG,CAAA;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAIA,EAAA,MAAM,eAAe,QAAA,CAAS,gBAAA,CAC3B,GAAA,CAAI,CAAC,MAAM,QAAA,CAAS,YAAA,CAAa,CAAC,CAAC,EACnC,MAAA,CAAO,CAAC,IAAA,KAAS,IAAA,CAAK,oBAAoB,OAAO,CAAA;AAGpD,EAAA,IAAI,YAAA,CAAa,SAAS,CAAA,EAAG;AAC3B,IAAA,OAAA,CAAQ,KAAA,CAAM;AAAA,+BAAA,EAAe,aAAA,CAAM,IAAA,CAAK,SAAA,CAAU,qCAAqC,CAAC,CAAA;AAAA,CAAc,CAAA;AACtG,IAAA,OAAA,CAAQ,MAAM,kBAAkB,CAAA;AAEhC,IAAA,eAAA,CAAE,IAAA,CAAK,YAAA,EAAc,CAAC,IAAA,KAAqB;AACzC,MAAA,OAAA,CAAQ,KAAA,CAAM,cAAA,CAAe,IAAI,CAAC,CAAA;AAClC,MAAA,OAAA,CAAQ,KAAA,EAAM;AAAA,IAChB,CAAC,CAAA;AACD,IAAA,IAAI,MAAM,OAAA,EAAS;AACjB,MAAA,OAAA,CAAQ,KAAA,EAAM;AACd,MAAA,OAAA,CAAQ,MAAM,cAAA,CAAe;AAAA,QAC3B,cAAA;AAAA,QACA,aAAA,CAAM,MAAA,CAAO,IAAA,CAAK,oCAAoC;AAAA,OACvD,CAAC,CAAA;AACF,MAAA,OAAA,CAAQ,KAAA,EAAM;AACd,MAAA,MAAM,aAAa,QAAA,CAAS,gBAAA,CACzB,GAAA,CAAI,CAAC,MAAM,QAAA,CAAS,YAAA,CAAa,CAAC,CAAC,EACnC,MAAA,CAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAA;AAC5B,MAAA,eAAA,CAAE,IAAA,CAAK,UAAA,EAAY,CAAC,IAAA,KAAqB;AACvC,QAAA,OAAA,CAAQ,KAAA,CAAM,cAAA,CAAe,IAAI,CAAC,CAAA;AAAA,MACpC,CAAC,CAAA;AAAA,IACH;AAEA,IAAA,kBAAA,CAAmB,QAAQ,CAAA;AAC3B,IAAA,IAAI,CAAC,MAAM,OAAA,EAAS;AAClB,MAAA,MAAM,IAAI,eAAA,EAAgB;AAAA,IAC5B;AAAA,EACF;AACF;AAzDgB,MAAA,CAAA,oBAAA,EAAA,sBAAA,CAAA","file":"chunk-4KSIULUK.js","sourcesContent":["import ansis from 'ansis';\nimport { gracefulExit } from 'exit-hook';\nimport _ from '@env-spec/utils/my-dash';\nimport { EnvGraph, ConfigItem, FileBasedDataSource } from '../../env-graph';\nimport { getItemSummary, joinAndCompact } from '../../lib/formatting';\nimport { VarlockError } from '../../env-graph/lib/errors';\n\n\nfunction showErrorLocationDetails(err: Error) {\n  if (!(err instanceof VarlockError) || !err.location) return;\n  const errLoc = err.location;\n  const errPreview = [\n    errLoc.lineStr,\n    `${ansis.gray('-'.repeat(errLoc.colNumber - 1))}${ansis.red('^')}`,\n  ].join('\\n');\n\n  console.error('');\n  console.error(`📂 ${errLoc.id}:${errLoc.lineNumber}:${errLoc.colNumber}`);\n  console.error(errPreview);\n}\n\nexport function checkForNoEnvFiles(envGraph: EnvGraph) {\n  if (Object.keys(envGraph.configSchema).length === 0) {\n    const displayPath = envGraph.basePath ?? process.cwd();\n    const hasLoadedFiles = envGraph.sortedDataSources.some((s) => s instanceof FileBasedDataSource);\n    if (!hasLoadedFiles) {\n      console.error(`🚨 No .env files found in ${displayPath}\\n`);\n      console.error('Run `varlock init` to create a .env.schema file, or use `--path` to specify a file or directory.');\n    } else {\n      console.error(`🚨 No config items defined in ${displayPath}\\n`);\n      console.error('Add items to your .env.schema file to get started.');\n    }\n    return gracefulExit(1);\n  }\n}\n\nexport function checkForSchemaErrors(envGraph: EnvGraph) {\n  // first we check for loading/parse errors - some cases we may want to let it fail silently?\n  for (const source of envGraph.sortedDataSources) {\n    // do we care about loading errors from disabled sources?\n    // if (source.disabled) continue;\n\n    if (source.loadingError) {\n      console.error(`🚨 Error encountered while loading ${source.label}\\n`);\n\n      console.error(source.loadingError.message);\n      showErrorLocationDetails(source.loadingError);\n\n      // For plugin loading errors, show the full stack trace since it's usually\n      // a runtime error from executing the plugin code\n      if (source.loadingError.stack && !(source.loadingError instanceof VarlockError)) {\n        console.error(`\\n${ansis.dim('Stack trace:')}`);\n        console.error(ansis.dim(source.loadingError.stack));\n      }\n\n      return gracefulExit(1);\n    }\n    // TODO: unify this with the above!\n    if (source.schemaErrors.length) {\n      console.error(`🚨 Error(s) encountered in ${source.label}`);\n\n      for (const schemaErr of source.schemaErrors) {\n        console.error(`- ${schemaErr.message}`);\n        showErrorLocationDetails(schemaErr);\n      }\n      return gracefulExit(1);\n    }\n  }\n\n  // now we check for any schema errors - where something about how things are wired up is invalid\n  // NOTE - we should not have run any resolution yet\n  // TODO: make sure we are calling this before attempting to resolve values\n  // const failingItems = _.filter(_.values(envGraph.configSchema), (item) => item.validationState === 'error');\n  // if (failingItems.length > 0) {\n  //   throw new CliExitError('Schema is currently invalid');\n  // }\n}\n\n\nexport function showPluginWarnings(envGraph: EnvGraph) {\n  for (const plugin of envGraph.plugins) {\n    if (!plugin.warnings.length) continue;\n    for (const warning of plugin.warnings) {\n      console.error(ansis.yellow(`[WARNING] ${warning.message}`));\n      if (warning.tip) {\n        for (const line of warning.tip.split('\\n')) {\n          console.error(`  ${line}`);\n        }\n      }\n    }\n  }\n}\n\nexport class InvalidEnvError extends Error {\n  constructor() {\n    super('Resolved config/env did not pass validation');\n  }\n  getFormattedOutput() {\n    return `\\n💥 ${ansis.red(this.message)} 💥\\n`;\n  }\n}\n\nexport function checkForConfigErrors(envGraph: EnvGraph, opts?: {\n  showAll?: boolean;\n  /** Log errors to stderr but don't throw — used when the caller will handle errors itself (e.g. json-full output) */\n  noThrow?: boolean;\n}) {\n  // check for root decorator \"execution\"\n  for (const source of envGraph.sortedDataSources) {\n    if (source.resolutionErrors.length) {\n      console.error(`🚨 Root decorator error(s) in ${source.label}`);\n\n      for (const err of source.resolutionErrors) {\n        console.error(`- ${err.message}`);\n        if (err instanceof VarlockError && err.tip) {\n          for (const line of err.tip.split('\\n')) {\n            console.error(`  ${line}`);\n          }\n        }\n        showErrorLocationDetails(err);\n      }\n    }\n  }\n\n\n\n  const failingItems = envGraph.sortedConfigKeys\n    .map((k) => envGraph.configSchema[k])\n    .filter((item) => item.validationState === 'error');\n\n  // TODO: use service.isValid?\n  if (failingItems.length > 0) {\n    console.error(`\\n🚨 🚨 🚨  ${ansis.bold.underline('Configuration is currently invalid ')}  🚨 🚨 🚨\\n`);\n    console.error('Invalid items:\\n');\n\n    _.each(failingItems, (item: ConfigItem) => {\n      console.error(getItemSummary(item));\n      console.error();\n    });\n    if (opts?.showAll) {\n      console.error();\n      console.error(joinAndCompact([\n        'Valid items:',\n        ansis.italic.gray('(remove `--show-all` flag to hide)'),\n      ]));\n      console.error();\n      const validItems = envGraph.sortedConfigKeys\n        .map((k) => envGraph.configSchema[k])\n        .filter((i) => !!i.isValid);\n      _.each(validItems, (item: ConfigItem) => {\n        console.error(getItemSummary(item));\n      });\n    }\n\n    showPluginWarnings(envGraph);\n    if (!opts?.noThrow) {\n      throw new InvalidEnvError();\n    }\n  }\n}\n"]}