Skip to content

feat: remote schema imports via public-schemas: and plugin-schema: protocols#561

Open
Copilot wants to merge 5 commits intomainfrom
copilot/add-remote-import-support
Open

feat: remote schema imports via public-schemas: and plugin-schema: protocols#561
Copilot wants to merge 5 commits intomainfrom
copilot/add-remote-import-support

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 7, 2026

  • Explore codebase to understand current state
  • Fix getUserVarlockDir() to handle missing home directory gracefully (fall back to os.tmpdir())
  • Update plugin-schema.ts: change env-schema.env.schema export in package.json exports map
  • Update plugin-schema.ts: support loading specific files via path syntax (e.g., plugin-schema:@varlock/1password-plugin/.env.custom)
  • Update data-source.ts: parse path from plugin-schema import
  • Update documentation
  • Run lint
  • Run validation
  • Add changeset

Copilot AI and others added 3 commits April 2, 2026 20:37
…nd security

- Add public-schemas/ directory with platform schemas (vercel, netlify, cloudflare)
- Implement public-schemas: import protocol with GitHub-based fetch and cache
- Implement plugin-schema: import protocol for installed plugin packages
- Add security restrictions for remote imports (no @plugin, no local file access)
- Add `varlock cache clear` CLI command for clearing schemas and plugins cache
- Add tests for remote imports and cache clearing

Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/e612b56c-9a06-4feb-867c-370c7a82ea6f

Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>
- Fix max-len, unused vars, no-use-before-define lint issues
- Add documentation for public-schemas and plugin-schema import protocols
- Add security restrictions documentation

Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/e612b56c-9a06-4feb-867c-370c7a82ea6f

Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>
- Add comment explaining GitHub branch choice for public schemas URL
- Add comment explaining hash truncation in cache
- Improve synthetic path sanitization for remote imports
- Include cache target in error messages
- Add changeset for minor version bump

Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/e612b56c-9a06-4feb-867c-370c7a82ea6f

Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Apr 7, 2026

🦋 Changeset detected

Latest commit: 8ea2793

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 18 packages
Name Type
varlock Minor
@varlock/astro-integration Major
@varlock/cloudflare-integration Major
@varlock/expo-integration Major
@varlock/nextjs-integration Major
@varlock/vite-integration Major
@varlock/1password-plugin Major
@varlock/aws-secrets-plugin Major
@varlock/azure-key-vault-plugin Major
@varlock/bitwarden-plugin Major
@varlock/dashlane-plugin Major
@varlock/google-secret-manager-plugin Major
@varlock/hashicorp-vault-plugin Major
@varlock/infisical-plugin Major
@varlock/keepass-plugin Major
@varlock/pass-plugin Major
@varlock/passbolt-plugin Major
@varlock/proton-pass-plugin Major

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

- getUserVarlockDir() falls back to os.tmpdir() when HOME is unavailable
- plugin-schema: uses .env.schema export from package.json exports map
- plugin-schema: supports loading specific files (e.g., plugin-schema:@pkg/.env.custom)
- Update import documentation for new plugin-schema syntax

Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/d6d84ed7-8a55-44f0-9827-236fc1a7b1ce

Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages bot commented Apr 7, 2026

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs
varlock-website f96fea3 Apr 07 2026, 05:58 AM

Copilot AI requested a review from theoephraim April 7, 2026 06:01
@theoephraim theoephraim marked this pull request as ready for review April 7, 2026 15:57

// GitHub raw content base URL for the varlock repo public-schemas
// Uses the `main` branch — schemas are versioned alongside the varlock release
const PUBLIC_SCHEMAS_GITHUB_BASE = 'https://raw.githubusercontent.com/dmno-dev/varlock/main/public-schemas';
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it might make (local) testing easier if you can override this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants