@agnostack/env 2.0.0-canary.1 → 2.0.0-canary.11

package/CHANGELOG.md

@@ -1,33 +1,3 @@
-# [2.0.0-canary.1](https://github.com/[secure]/env/compare/v1.3.0...v2.0.0-canary.1) (2026-08-16)
-
-
-### Bug Fixes
-
-* check every exports target exists in verify:dist ([3cab3fa](https://github.com/[secure]/env/commit/3cab3fad76ab00c0acfc513f73e899f4707f246b))
-* drop rimraf for node's built-in recursive delete ([c8f99f9](https://github.com/[secure]/env/commit/c8f99f931d908a94febdb5a34b0f1c66a2d7c97c))
-* enable composite builds to match verifyd ([695de68](https://github.com/[secure]/env/commit/695de68d2e7142c43d0ac84a6c0cfcf05ee00249))
-* enable strict type checking and remove any from published types ([fa48be5](https://github.com/[secure]/env/commit/fa48be5c61d0842ea4e2b8fb150b39a5cf697cec))
-* enforce the ^_ unused-arg convention ([231ab05](https://github.com/[secure]/env/commit/231ab05e0c54b6775fd01ed4caf757569659dcd6))
-* keep argv values containing "=" intact ([0d0c656](https://github.com/[secure]/env/commit/0d0c6561755c17a40ad98836f0e7433c95de98c4))
-* make tsconfig.json the check config so editors cover the specs ([bd1c2fa](https://github.com/[secure]/env/commit/bd1c2fae335e752ae86a94720e8598bcc8be70cd))
-* resolve modules with node16 ([72da476](https://github.com/[secure]/env/commit/72da476837def9b5f6148673be21fa0e51f4648e))
-* run clean without depending on node_modules ([18dcbfe](https://github.com/[secure]/env/commit/18dcbfe6fb2ab19e1e63d449e2c8deff8a40e217))
-
-
-### Features
-
-* add ./esm subpath export ([b8a9732](https://github.com/[secure]/env/commit/b8a9732800af1977598a906b35672366658bb25f))
-* declare the package side-effect free ([0a18234](https://github.com/[secure]/env/commit/0a18234a5ba2096783592fd79a51dc598f569f81))
-* guard publishes against source leaks and unloadable ESM ([dce6d83](https://github.com/[secure]/env/commit/dce6d837b4fe5151fa3d508aa1f1fe2b6e163a3b))
-* migrate eslint to v9 flat config ([eecca88](https://github.com/[secure]/env/commit/eecca88c9cd95cd792cd1d989cedf881affdeaaa))
-* migrate the test suite from jest to vitest ([1e49534](https://github.com/[secure]/env/commit/1e49534005201926aba758efb9314534bcc383a8))
-* require node 22 ([9c3f0d9](https://github.com/[secure]/env/commit/9c3f0d9eba1cf18356570bcc2897642ff065c0ce))
-
-
-### BREAKING CHANGES
-
-* the minimum supported node is now 22.
-
 # [1.3.0](https://github.com/agnostack/env/compare/v1.2.6...v1.3.0) (2025-08-20)
 
 

package/dist/env.d.ts

@@ -10,21 +10,21 @@ export function lowerKeyValidator(envKey: string): boolean;
 export function publicKeyValidator(envKey: string): boolean;
 export function cleanLowerEnv(_env: Record<string, string | undefined> | undefined, keyValidator?: (envKey: string) => boolean): Record<string, string | undefined>;
 export function cleanPublicEnv(_env: Record<string, string | undefined> | undefined, keyValidator?: (envKey: string) => boolean): Record<string, string | undefined>;
-export function parseEnvData(_env?: NodeJS.ProcessEnv): {
+export function parseEnvData(_env?: Record<string, string | undefined>): {
+    args: string[];
     env: Record<string, string> & {
         ENVIRONMENT: string;
     };
     nextEnv: Record<string, string | undefined>;
     publicEnv: Record<string, string | undefined>;
     stringifiedEnv: Record<string, string>;
-    argParams: {
-        [x: string]: string | undefined;
-    };
-    params: {
-        [x: string]: string | undefined;
-        ENVIRONMENT: string;
-    };
-    args: string[];
+    argEntries: {
+        arg: string;
+        param: string;
+        value: string | undefined;
+    }[];
+    argParams: Record<string, string | undefined>;
+    params: Record<string, string | undefined>;
 };
 export function getPublicEnvValue(publicEnv: Record<string, string | undefined> | undefined, key: string): string | undefined;
 export function replaceEnvTemplate(replaceable: unknown, { env: _env, template, callback, }?: {

package/dist/env.js

@@ -52,7 +52,7 @@ const cleanEnv = (_env, keyValidator = exports.nextKeyValidator) => (Object.entr
  * @param {(envKey: string) => boolean} [keyValidator]
  * @returns {Record<string, string | undefined>}
  */
-const cleanLowerEnv = (_env, keyValidator = exports.lowerKeyValidator) => (cleanEnv(process.env, keyValidator));
+const cleanLowerEnv = (_env, keyValidator = exports.lowerKeyValidator) => (cleanEnv(_env, keyValidator));
 exports.cleanLowerEnv = cleanLowerEnv;
 /**
  * @param {Record<string, string | undefined> | undefined} _env
@@ -61,6 +61,39 @@ exports.cleanLowerEnv = cleanLowerEnv;
  */
 const cleanPublicEnv = (_env, keyValidator = exports.publicKeyValidator) => (cleanEnv(_env, keyValidator));
 exports.cleanPublicEnv = cleanPublicEnv;
+/**
+ * The one place argv and the ambient env are read together, so a caller gets both from a single
+ * call rather than parsing argv itself.
+ *
+ * ENVIRONMENT is resolved rather than trusted: an explicit `ENVIRONMENT` wins, otherwise the first
+ * non-empty of SITE_ENV, BUILD_ENV, NODE_ENV, falling back to 'development'.
+ *
+ * ⚠️ The argv split is by FORM, not by meaning. `--key=value` becomes an `argParams` entry; a
+ * valueless `--flag` stays a string in `args`, which also still holds `process.argv[0]` (the node
+ * binary) and `[1]` (the script path). A caller reading positionals must skip those two, and one
+ * reading bare flags must look in `args` rather than `argParams`.
+ *
+ * `argEntries` is the third view: every argument in order — `arg` as typed, `param` and `value`
+ * already split out — so a
+ * caller can forward what it did not consume without re-deriving it. An ARRAY rather than a map
+ * because repeats are meaningful — `--context=a=1 --context=b=2` is two entries, and keying them
+ * would silently keep only the last.
+ *
+ * `stringifiedEnv` is a MAP, not a string — each value JSON-stringified, which is the shape
+ * webpack's DefinePlugin wants.
+ *
+ * @param {Record<string, string | undefined>} [_env]  defaults to process.env
+ * @returns {{
+ *   args: string[],
+ *   env: Record<string, string> & { ENVIRONMENT: string },
+ *   nextEnv: Record<string, string | undefined>,
+ *   publicEnv: Record<string, string | undefined>,
+ *   stringifiedEnv: Record<string, string>,
+ *   argEntries: { arg: string, param: string, value: string | undefined }[],
+ *   argParams: Record<string, string | undefined>,
+ *   params: Record<string, string | undefined>,
+ * }}
+ */
 const parseEnvData = (_env = process.env) => {
     var _a;
     const { ENVIRONMENT, SITE_ENV, BUILD_ENV, NODE_ENV } = _env;
@@ -73,7 +106,10 @@ const parseEnvData = (_env = process.env) => {
     const mergedEnv = Object.assign(Object.assign({}, _env), { 
         // NOTE: intentionally giving precedence to ENVIRONMENT
         ENVIRONMENT: ENVIRONMENT || _environment });
-    const _b = process.argv.reduce(({ args: _args, argParams: _argParams, }, arg) => {
+    // NOTE: One pass over argv building both halves of the split — `args` collects every entry that
+    // carried no value (bare flags, positionals, and argv[0]/[1]), `argParams` every `key=value` one
+    // with its leading `--` stripped. An entry is never in both.
+    const _b = process.argv.reduce(({ args: _args, argParams: _argParams, argEntries: _argEntries, }, arg, index) => {
         var _a, _b, _c, _d, _e;
         // NOTE: split on the FIRST '=' only — everything after it is the value, verbatim.
         // Splitting on every '=' truncated any value that contained one, so `--context=env=prod`
@@ -82,11 +118,14 @@ const parseEnvData = (_env = process.env) => {
         const [__param, _value] = (separatorIndex === -1)
             ? [arg, undefined]
             : [arg.slice(0, separatorIndex), arg.slice(separatorIndex + 1)];
-        const _param = (_c = __param === null || __param === void 0 ? void 0 : __param.replace) === null || _c === void 0 ? void 0 : _c.call(__param, '--', '');
+        // NOTE: anchored. A bare `.replace('--', '')` strips the first `--` ANYWHERE, so
+        // `my--param=x` arrived as `myparam`. Only a leading `--` is a flag marker.
+        const _param = (_c = __param === null || __param === void 0 ? void 0 : __param.replace) === null || _c === void 0 ? void 0 : _c.call(__param, /^--/, '');
         if ((0, display_js_1.stringEmptyOnly)(_param)) {
             return {
                 args: _args,
                 argParams: _argParams,
+                argEntries: _argEntries,
             };
         }
         /** @type {[string, string | undefined]} */
@@ -108,10 +147,20 @@ const parseEnvData = (_env = process.env) => {
             argParams: Object.assign(Object.assign({}, _argParams), (0, display_js_1.stringNotEmptyOnly)(value) && {
                 [param]: value,
             }),
+            // NOTE: index 0 is the node binary and 1 the script path — never arguments, so neither
+            // reaches argEntries. That is what lets a caller forward `arg` without re-deriving which
+            // entries were real arguments.
+            argEntries: [
+                ..._argEntries,
+                ...(index >= 2) ? [{ arg, param, value }] : []
+            ],
         };
     }, {
         args: /** @type {string[]} */ ([]),
-        argParams: /** @type {Record<string, string>} */ ({}),
+        // NOTE: `string | undefined` because the conditional spread below can widen it — seeding it
+        // as `Record<string, string>` made the accumulator and the callback's return disagree.
+        argParams: /** @type {Record<string, string | undefined>} */ ({}),
+        argEntries: /** @type {{ arg: string, param: string, value: string | undefined }[]} */ ([]),
     }), { argParams } = _b, output = __rest(_b, ["argParams"]);
     const nextEnv = cleanEnv(mergedEnv);
     const publicEnv = (0, exports.cleanPublicEnv)(mergedEnv);

package/dist/esm/env.js

@@ -46,13 +46,46 @@ const cleanEnv = (_env, keyValidator = nextKeyValidator) => (Object.entries(_env
  * @param {(envKey: string) => boolean} [keyValidator]
  * @returns {Record<string, string | undefined>}
  */
-export const cleanLowerEnv = (_env, keyValidator = lowerKeyValidator) => (cleanEnv(process.env, keyValidator));
+export const cleanLowerEnv = (_env, keyValidator = lowerKeyValidator) => (cleanEnv(_env, keyValidator));
 /**
  * @param {Record<string, string | undefined> | undefined} _env
  * @param {(envKey: string) => boolean} [keyValidator]
  * @returns {Record<string, string | undefined>}
  */
 export const cleanPublicEnv = (_env, keyValidator = publicKeyValidator) => (cleanEnv(_env, keyValidator));
+/**
+ * The one place argv and the ambient env are read together, so a caller gets both from a single
+ * call rather than parsing argv itself.
+ *
+ * ENVIRONMENT is resolved rather than trusted: an explicit `ENVIRONMENT` wins, otherwise the first
+ * non-empty of SITE_ENV, BUILD_ENV, NODE_ENV, falling back to 'development'.
+ *
+ * ⚠️ The argv split is by FORM, not by meaning. `--key=value` becomes an `argParams` entry; a
+ * valueless `--flag` stays a string in `args`, which also still holds `process.argv[0]` (the node
+ * binary) and `[1]` (the script path). A caller reading positionals must skip those two, and one
+ * reading bare flags must look in `args` rather than `argParams`.
+ *
+ * `argEntries` is the third view: every argument in order — `arg` as typed, `param` and `value`
+ * already split out — so a
+ * caller can forward what it did not consume without re-deriving it. An ARRAY rather than a map
+ * because repeats are meaningful — `--context=a=1 --context=b=2` is two entries, and keying them
+ * would silently keep only the last.
+ *
+ * `stringifiedEnv` is a MAP, not a string — each value JSON-stringified, which is the shape
+ * webpack's DefinePlugin wants.
+ *
+ * @param {Record<string, string | undefined>} [_env]  defaults to process.env
+ * @returns {{
+ *   args: string[],
+ *   env: Record<string, string> & { ENVIRONMENT: string },
+ *   nextEnv: Record<string, string | undefined>,
+ *   publicEnv: Record<string, string | undefined>,
+ *   stringifiedEnv: Record<string, string>,
+ *   argEntries: { arg: string, param: string, value: string | undefined }[],
+ *   argParams: Record<string, string | undefined>,
+ *   params: Record<string, string | undefined>,
+ * }}
+ */
 export const parseEnvData = (_env = process.env) => {
     var _a;
     const { ENVIRONMENT, SITE_ENV, BUILD_ENV, NODE_ENV } = _env;
@@ -65,7 +98,10 @@ export const parseEnvData = (_env = process.env) => {
     const mergedEnv = Object.assign(Object.assign({}, _env), { 
         // NOTE: intentionally giving precedence to ENVIRONMENT
         ENVIRONMENT: ENVIRONMENT || _environment });
-    const _b = process.argv.reduce(({ args: _args, argParams: _argParams, }, arg) => {
+    // NOTE: One pass over argv building both halves of the split — `args` collects every entry that
+    // carried no value (bare flags, positionals, and argv[0]/[1]), `argParams` every `key=value` one
+    // with its leading `--` stripped. An entry is never in both.
+    const _b = process.argv.reduce(({ args: _args, argParams: _argParams, argEntries: _argEntries, }, arg, index) => {
         var _a, _b, _c, _d, _e;
         // NOTE: split on the FIRST '=' only — everything after it is the value, verbatim.
         // Splitting on every '=' truncated any value that contained one, so `--context=env=prod`
@@ -74,11 +110,14 @@ export const parseEnvData = (_env = process.env) => {
         const [__param, _value] = (separatorIndex === -1)
             ? [arg, undefined]
             : [arg.slice(0, separatorIndex), arg.slice(separatorIndex + 1)];
-        const _param = (_c = __param === null || __param === void 0 ? void 0 : __param.replace) === null || _c === void 0 ? void 0 : _c.call(__param, '--', '');
+        // NOTE: anchored. A bare `.replace('--', '')` strips the first `--` ANYWHERE, so
+        // `my--param=x` arrived as `myparam`. Only a leading `--` is a flag marker.
+        const _param = (_c = __param === null || __param === void 0 ? void 0 : __param.replace) === null || _c === void 0 ? void 0 : _c.call(__param, /^--/, '');
         if (stringEmptyOnly(_param)) {
             return {
                 args: _args,
                 argParams: _argParams,
+                argEntries: _argEntries,
             };
         }
         /** @type {[string, string | undefined]} */
@@ -100,10 +139,20 @@ export const parseEnvData = (_env = process.env) => {
             argParams: Object.assign(Object.assign({}, _argParams), stringNotEmptyOnly(value) && {
                 [param]: value,
             }),
+            // NOTE: index 0 is the node binary and 1 the script path — never arguments, so neither
+            // reaches argEntries. That is what lets a caller forward `arg` without re-deriving which
+            // entries were real arguments.
+            argEntries: [
+                ..._argEntries,
+                ...(index >= 2) ? [{ arg, param, value }] : []
+            ],
         };
     }, {
         args: /** @type {string[]} */ ([]),
-        argParams: /** @type {Record<string, string>} */ ({}),
+        // NOTE: `string | undefined` because the conditional spread below can widen it — seeding it
+        // as `Record<string, string>` made the accumulator and the callback's return disagree.
+        argParams: /** @type {Record<string, string | undefined>} */ ({}),
+        argEntries: /** @type {{ arg: string, param: string, value: string | undefined }[]} */ ([]),
     }), { argParams } = _b, output = __rest(_b, ["argParams"]);
     const nextEnv = cleanEnv(mergedEnv);
     const publicEnv = cleanPublicEnv(mergedEnv);

package/dist/esm/project.js

@@ -17,15 +17,17 @@ export const parseProjectName = (_name) => {
  * manifests, and the parser is deliberately tolerant of a missing or partial object.
  *
  * @typedef {object} PackageInfo
- * @property {string} [name]
+ * @property {string} [deployVersion]
+ * @property {string} [apiVersion]
  * @property {string} [version]
- * @property {string[]} [keywords]
+ * @property {string} [name]
  * @property {string} [owner]
  * @property {string} [appName]
  * @property {string} [siteName]
  * @property {string} [shortName]
  * @property {string} [siteHandle]
  * @property {string} [siteAuthor]
+ * @property {string[]} [keywords]
  * @property {Record<string, string>} [dependencies]
  * @property {Record<string, string>} [devDependencies]
  * @property {Record<string, string>} [peerDependencies]
@@ -34,19 +36,32 @@ export const parseProjectName = (_name) => {
  * @property {string[]} [bundledDependencies]
  * @property {string[]} [browserDependencies]
  */
-/** @param {PackageInfo} [packageInfo] */
+/**
+ * Split a package.json into its resolved details, its organization and its full name.
+ *
+ * ⚠️ The return is declared as a TUPLE. An array literal infers as
+ * `(string | typeof packageDetails)[]`, so destructuring the first element would hand callers a
+ * union instead of the object.
+ *
+ * @param {PackageInfo} [packageInfo]
+ * @returns {[typeof packageDetails, string | undefined, string]}
+ */
 export const parsePackageInfo = (packageInfo) => {
-    const { version, keywords, shortName, siteHandle, siteAuthor, devDependencies, peerDependencies, bundleDependencies, bundledDependencies = bundleDependencies, dependencies: runtimeDependencies, optionalDependencies, browserDependencies, name: _name, owner: _appOwner, appName: _appName, siteName: _siteName, } = packageInfo !== null && packageInfo !== void 0 ? packageInfo : {};
+    const { apiVersion, version, keywords, shortName, siteAuthor, siteHandle, devDependencies, peerDependencies, bundleDependencies, bundledDependencies = bundleDependencies, dependencies: runtimeDependencies, optionalDependencies, browserDependencies, name: _name, owner: _appOwner, appName: _appName, siteName: _siteName, deployVersion: _deployVersion, } = packageInfo !== null && packageInfo !== void 0 ? packageInfo : {};
     const { name, organization, projectName } = parseProjectName(_name);
+    // The deploy-time pin, when a manifest carries one. `version` stays the manifest's OWN value, so
+    // a caller can tell a real pin from the inert placeholder every workspace package declares.
+    const deployVersion = _deployVersion !== null && _deployVersion !== void 0 ? _deployVersion : apiVersion;
     const appName = _appName !== null && _appName !== void 0 ? _appName : projectName === null || projectName === void 0 ? void 0 : projectName.slice((projectName === null || projectName === void 0 ? void 0 : projectName.indexOf('-')) + 1);
     const siteName = _siteName !== null && _siteName !== void 0 ? _siteName : projectName === null || projectName === void 0 ? void 0 : projectName.slice((projectName === null || projectName === void 0 ? void 0 : projectName.indexOf('-')) + 1);
     const companyName = organization === null || organization === void 0 ? void 0 : organization.replace('@', '');
     const appOwner = _appOwner !== null && _appOwner !== void 0 ? _appOwner : companyName;
-    const packageDetails = {
+    const packageDetails = Object.assign(Object.assign({}, deployVersion && {
+        deployVersion,
+    }), { version,
         keywords,
         appOwner,
         appName,
-        version,
         siteName,
         shortName,
         siteHandle,
@@ -58,12 +73,6 @@ export const parsePackageInfo = (packageInfo) => {
         bundledDependencies,
         runtimeDependencies,
         browserDependencies,
-        optionalDependencies,
-    };
-    // NOTE: declared as a tuple — an array literal infers as
-    // (string | typeof packageDetails)[], so destructuring the first element
-    // would hand callers a union instead of the object.
-    /** @type {[typeof packageDetails, string | undefined, string]} */
-    const packageParts = [packageDetails, organization, name];
-    return packageParts;
+        optionalDependencies });
+    return [packageDetails, organization, name];
 };

package/dist/project.d.ts

@@ -5,10 +5,10 @@ export function parseProjectName(_name: unknown): {
     projectName: string;
 };
 export function parsePackageInfo(packageInfo?: PackageInfo): [{
+    version: string | undefined;
     keywords: string[] | undefined;
     appOwner: string;
     appName: string;
-    version: string | undefined;
     siteName: string;
     shortName: string | undefined;
     siteHandle: string | undefined;
@@ -21,21 +21,24 @@ export function parsePackageInfo(packageInfo?: PackageInfo): [{
     runtimeDependencies: Record<string, string> | undefined;
     browserDependencies: string[] | undefined;
     optionalDependencies: Record<string, string> | undefined;
+    deployVersion?: string | undefined;
 }, string | undefined, string];
 /**
  * The subset of a package.json this reads. Everything is optional — callers pass raw
  * manifests, and the parser is deliberately tolerant of a missing or partial object.
  */
 export type PackageInfo = {
-    name?: string | undefined;
+    deployVersion?: string | undefined;
+    apiVersion?: string | undefined;
     version?: string | undefined;
-    keywords?: string[] | undefined;
+    name?: string | undefined;
     owner?: string | undefined;
     appName?: string | undefined;
     siteName?: string | undefined;
     shortName?: string | undefined;
     siteHandle?: string | undefined;
     siteAuthor?: string | undefined;
+    keywords?: string[] | undefined;
     dependencies?: Record<string, string> | undefined;
     devDependencies?: Record<string, string> | undefined;
     peerDependencies?: Record<string, string> | undefined;

package/dist/project.js

@@ -21,15 +21,17 @@ exports.parseProjectName = parseProjectName;
  * manifests, and the parser is deliberately tolerant of a missing or partial object.
  *
  * @typedef {object} PackageInfo
- * @property {string} [name]
+ * @property {string} [deployVersion]
+ * @property {string} [apiVersion]
  * @property {string} [version]
- * @property {string[]} [keywords]
+ * @property {string} [name]
  * @property {string} [owner]
  * @property {string} [appName]
  * @property {string} [siteName]
  * @property {string} [shortName]
  * @property {string} [siteHandle]
  * @property {string} [siteAuthor]
+ * @property {string[]} [keywords]
  * @property {Record<string, string>} [dependencies]
  * @property {Record<string, string>} [devDependencies]
  * @property {Record<string, string>} [peerDependencies]
@@ -38,19 +40,32 @@ exports.parseProjectName = parseProjectName;
  * @property {string[]} [bundledDependencies]
  * @property {string[]} [browserDependencies]
  */
-/** @param {PackageInfo} [packageInfo] */
+/**
+ * Split a package.json into its resolved details, its organization and its full name.
+ *
+ * ⚠️ The return is declared as a TUPLE. An array literal infers as
+ * `(string | typeof packageDetails)[]`, so destructuring the first element would hand callers a
+ * union instead of the object.
+ *
+ * @param {PackageInfo} [packageInfo]
+ * @returns {[typeof packageDetails, string | undefined, string]}
+ */
 const parsePackageInfo = (packageInfo) => {
-    const { version, keywords, shortName, siteHandle, siteAuthor, devDependencies, peerDependencies, bundleDependencies, bundledDependencies = bundleDependencies, dependencies: runtimeDependencies, optionalDependencies, browserDependencies, name: _name, owner: _appOwner, appName: _appName, siteName: _siteName, } = packageInfo !== null && packageInfo !== void 0 ? packageInfo : {};
+    const { apiVersion, version, keywords, shortName, siteAuthor, siteHandle, devDependencies, peerDependencies, bundleDependencies, bundledDependencies = bundleDependencies, dependencies: runtimeDependencies, optionalDependencies, browserDependencies, name: _name, owner: _appOwner, appName: _appName, siteName: _siteName, deployVersion: _deployVersion, } = packageInfo !== null && packageInfo !== void 0 ? packageInfo : {};
     const { name, organization, projectName } = (0, exports.parseProjectName)(_name);
+    // The deploy-time pin, when a manifest carries one. `version` stays the manifest's OWN value, so
+    // a caller can tell a real pin from the inert placeholder every workspace package declares.
+    const deployVersion = _deployVersion !== null && _deployVersion !== void 0 ? _deployVersion : apiVersion;
     const appName = _appName !== null && _appName !== void 0 ? _appName : projectName === null || projectName === void 0 ? void 0 : projectName.slice((projectName === null || projectName === void 0 ? void 0 : projectName.indexOf('-')) + 1);
     const siteName = _siteName !== null && _siteName !== void 0 ? _siteName : projectName === null || projectName === void 0 ? void 0 : projectName.slice((projectName === null || projectName === void 0 ? void 0 : projectName.indexOf('-')) + 1);
     const companyName = organization === null || organization === void 0 ? void 0 : organization.replace('@', '');
     const appOwner = _appOwner !== null && _appOwner !== void 0 ? _appOwner : companyName;
-    const packageDetails = {
+    const packageDetails = Object.assign(Object.assign({}, deployVersion && {
+        deployVersion,
+    }), { version,
         keywords,
         appOwner,
         appName,
-        version,
         siteName,
         shortName,
         siteHandle,
@@ -62,13 +77,7 @@ const parsePackageInfo = (packageInfo) => {
         bundledDependencies,
         runtimeDependencies,
         browserDependencies,
-        optionalDependencies,
-    };
-    // NOTE: declared as a tuple — an array literal infers as
-    // (string | typeof packageDetails)[], so destructuring the first element
-    // would hand callers a union instead of the object.
-    /** @type {[typeof packageDetails, string | undefined, string]} */
-    const packageParts = [packageDetails, organization, name];
-    return packageParts;
+        optionalDependencies });
+    return [packageDetails, organization, name];
 };
 exports.parsePackageInfo = parsePackageInfo;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agnostack/env",
-  "version": "2.0.0-canary.1",
+  "version": "2.0.0-canary.11",
   "author": "agnoStack Dev <developers@agnostack.com> (https://agnostack.com)",
   "owner": "agnoStack",
   "description": "Please contact agnoStack via info@agnostack.com for any questions",
@@ -39,21 +39,20 @@
     "node": ">=22.x"
   },
   "scripts": {
-    "tsc": "npx -p typescript tsc",
-    "watch": "yarn tsc -p tsconfig.build.json -w",
-    "prebuild": "yarn tsc -b tsconfig.build.json --clean && node scripts/clean.mjs dist _storage",
-    "build": "yarn tsc -p tsconfig.build.json && yarn tsc -p tsconfig.esm.json && node scripts/write-esm-pkg.mjs",
+    "watch": "tsc -p tsconfig.build.json -w",
+    "prebuild": "tsc -b tsconfig.build.json --clean && node scripts/clean.mjs dist _storage",
+    "build": "tsc -p tsconfig.build.json && tsc -p tsconfig.esm.json && node scripts/write-esm-pkg.mjs",
     "clean": "node scripts/clean.mjs dist node_modules _storage",
-    "clean:install": "yarn clean && yarn install --force",
+    "clean:install": "pnpm clean && pnpm install --force",
     "lint:fix": "eslint . --fix",
     "lint": "eslint .",
-    "typecheck": "yarn tsc",
+    "typecheck": "tsc --noEmit",
     "verify:dist": "node scripts/verify-dist.mjs",
     "test:watch": "vitest",
     "test": "vitest run",
     "release": "semantic-release",
-    "release:debug": "yarn release --debug",
-    "prepublishOnly": "yarn verify:dist",
+    "release:debug": "pnpm release --debug",
+    "prepublishOnly": "node scripts/verify-dist.mjs",
     "prepare": "husky"
   },
   "lint-staged": {
@@ -63,14 +62,11 @@
   },
   "sideEffects": false,
   "devDependencies": {
-    "@commitlint/cli": "19.x",
-    "@commitlint/config-conventional": "19.x",
+    "@commitlint/cli": "21.x",
+    "@commitlint/config-conventional": "21.x",
     "@eslint/js": "9.x",
-    "@semantic-release/changelog": "6.0.3",
-    "@semantic-release/git": "10.0.1",
-    "@semantic-release/github": "11.x",
-    "@semantic-release/npm": "12.x",
-    "@semantic-release/release-notes-generator": "14.x",
+    "@semantic-release/changelog": "7.x",
+    "@semantic-release/git": "11.x",
     "@types/node": "22.x",
     "@typescript-eslint/eslint-plugin": "8.x",
     "@typescript-eslint/parser": "8.x",
@@ -78,13 +74,14 @@
     "eslint-plugin-import": "2.x",
     "globals": "16.x",
     "husky": "9.x",
-    "lint-staged": "15.x",
+    "lint-staged": "17.x",
     "semantic-release": "25.x",
-    "typescript": "5.9.3",
-    "vitest": "3.x"
+    "semantic-release-export-data": "1.x",
+    "typescript": "5.x",
+    "vitest": "4.x"
   },
   "publishConfig": {
     "access": "public"
   },
-  "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e"
+  "packageManager": "pnpm@9.15.4"
 }