Support array of paths in varlock.loadPath package.json config

[Copilot]

varlock.loadPath only accepted a single string, making monorepo setups require a root .env file with @import directives just to combine env vars from multiple packages.

Changes

• VarlockPackageJsonConfig: loadPath type widened to string | string[]
• MultiplePathsContainerDataSource (new class in data-source.ts): Virtual root container that wraps multiple DirectoryDataSource/DotEnvFileDataSource instances, preserving the single-root invariant in EnvGraph
• isExplicitRoot flag on EnvGraphDataSource: Prevents explicitly-specified top-level paths from being classified as env-specific (the applyForEnv && parent check in isEnvSpecific) even when they have the virtual container as a parent
• loadEnvGraph: New entryFilePaths?: string[] option; routes to MultiplePathsContainerDataSource when >1 paths provided
• loadVarlockEnvGraph: Normalizes array/string loadPath, validates all paths exist, dispatches to single or multi-path loader accordingly

Later entries in the array take higher precedence (consistent with @import ordering).

{
  "varlock": {
    "loadPath": ["./apps/my-package/envs/", "./apps/other-package/envs/"]
  }
}

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• api.iconify.design
  • Triggering command: /opt/hostedtoolcache/node/24.14.1/x64/bin/node /opt/hostedtoolcache/node/24.14.1/x64/bin/node --experimental-import-meta-resolve --require /home/REDACTED/work/varlock/varlock/node_modules/vitest/suppress-warnings.cjs --conditions node --conditions development /home/REDACTED/work/varlock/varlock/node_modules/vitest/dist/workers/forks.js (dns block)
  • Triggering command: /opt/hostedtoolcache/node/24.14.1/x64/bin/node /opt/hostedtoolcache/node/24.14.1/x64/bin/node --experimental-import-meta-resolve --require /home/REDACTED/work/varlock/varlock/node_modules/vitest/suppress-warnings.cjs --conditions node --conditions development /home/REDACTED/work/varlock/varlock/node_modules/vitest/dist/workers/forks.js --global bin/node node bin/�� b/load-graph.ts src/env-graph/test/multi-path-loading.test.ts (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[changeset-bot]

🦋 Changeset detected

Latest commit: 3629437

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 18 packages

Name	Type
varlock	Minor
@varlock/astro-integration	Major
@varlock/cloudflare-integration	Major
@varlock/expo-integration	Major
@varlock/nextjs-integration	Major
@varlock/vite-integration	Major
@varlock/1password-plugin	Major
@varlock/aws-secrets-plugin	Major
@varlock/azure-key-vault-plugin	Major
@varlock/bitwarden-plugin	Major
@varlock/dashlane-plugin	Major
@varlock/google-secret-manager-plugin	Major
@varlock/hashicorp-vault-plugin	Major
@varlock/infisical-plugin	Major
@varlock/keepass-plugin	Major
@varlock/pass-plugin	Major
@varlock/passbolt-plugin	Major
@varlock/proton-pass-plugin	Major

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	varlock-website	3984b1f	Commit Preview URL Branch Preview URL	Apr 08 2026, 11:50 PM