@chriscode/hush 2.7.2 → 2.8.1

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAc,WAAW,EAAU,MAAM,aAAa,CAAC;AAyJnE,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAoErE"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAc,WAAW,EAAU,MAAM,aAAa,CAAC;AAyJnE,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAsErE"}

package/dist/commands/init.js

@@ -164,13 +164,15 @@ export async function initCommand(options) {
     }
     const targets = detectTargets(root);
     const config = {
+        version: 2,
         sources: DEFAULT_SOURCES,
         targets,
         ...(project && { project }),
     };
     const yaml = stringifyYaml(config, { indent: 2 });
+    const schemaComment = '# yaml-language-server: $schema=https://unpkg.com/@chriscode/hush/schema.json\n';
     const configPath = join(root, 'hush.yaml');
-    writeFileSync(configPath, yaml, 'utf-8');
+    writeFileSync(configPath, schemaComment + yaml, 'utf-8');
     console.log(pc.green(`\nCreated ${configPath}`));
     console.log(pc.dim('\nDetected targets:'));
     for (const target of targets) {

package/dist/config/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK9C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ1D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAmBnD;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG;IAAE,cAAc,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAO5G;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAuB3D"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK9C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ1D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAmBnD;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG;IAAE,cAAc,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAO5G;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CA8B3D"}

package/dist/config/loader.js

@@ -39,21 +39,27 @@ export function checkSchemaVersion(config) {
 }
 export function validateConfig(config) {
     const errors = [];
+    const validFormats = ['dotenv', 'wrangler', 'json', 'shell', 'yaml'];
     if (!config.sources.shared) {
         errors.push('sources.shared is required');
     }
-    for (const target of config.targets) {
+    if (!config.targets || config.targets.length === 0) {
+        errors.push('At least one target is required');
+    }
+    for (let i = 0; i < config.targets.length; i++) {
+        const target = config.targets[i];
+        const prefix = target.name ? `Target "${target.name}"` : `Target at index ${i}`;
         if (!target.name) {
-            errors.push('Each target must have a name');
+            errors.push(`${prefix}: missing required field "name"`);
         }
         if (!target.path) {
-            errors.push(`Target "${target.name}" must have a path`);
+            errors.push(`${prefix}: missing required field "path" (e.g., "." or "./apps/web")`);
         }
         if (!target.format) {
-            errors.push(`Target "${target.name}" must have a format`);
+            errors.push(`${prefix}: missing required field "format" (one of: ${validFormats.join(', ')})`);
         }
-        if (!['dotenv', 'wrangler', 'json', 'shell', 'yaml'].includes(target.format)) {
-            errors.push(`Target "${target.name}" has invalid format "${target.format}"`);
+        else if (!validFormats.includes(target.format)) {
+            errors.push(`${prefix}: invalid format "${target.format}" (must be one of: ${validFormats.join(', ')})`);
         }
     }
     return errors;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chriscode/hush",
-  "version": "2.7.2",
+  "version": "2.8.1",
   "description": "SOPS-based secrets management for monorepos. Encrypt once, decrypt everywhere.",
   "type": "module",
   "bin": {
@@ -57,7 +57,8 @@
   },
   "files": [
     "dist",
-    "bin"
+    "bin",
+    "schema.json"
   ],
   "publishConfig": {
     "access": "public"

package/schema.json

@@ -0,0 +1,85 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://hush-docs.pages.dev/schema.json",
+  "title": "Hush Configuration",
+  "description": "Configuration file for Hush secrets management",
+  "type": "object",
+  "properties": {
+    "version": {
+      "type": "integer",
+      "description": "Schema version (current: 2)",
+      "minimum": 1,
+      "maximum": 2,
+      "default": 2
+    },
+    "project": {
+      "type": "string",
+      "description": "Project identifier for key management (e.g., 'my-org/my-repo')",
+      "pattern": "^[a-zA-Z0-9_-]+(/[a-zA-Z0-9_-]+)?$"
+    },
+    "sources": {
+      "type": "object",
+      "description": "Source .env files (plaintext, before encryption)",
+      "properties": {
+        "shared": {
+          "type": "string",
+          "description": "Shared secrets file (default: .env)",
+          "default": ".env"
+        },
+        "development": {
+          "type": "string",
+          "description": "Development secrets file (default: .env.development)",
+          "default": ".env.development"
+        },
+        "production": {
+          "type": "string",
+          "description": "Production secrets file (default: .env.production)",
+          "default": ".env.production"
+        },
+        "local": {
+          "type": "string",
+          "description": "Local overrides file (default: .env.local)",
+          "default": ".env.local"
+        }
+      },
+      "additionalProperties": false
+    },
+    "targets": {
+      "type": "array",
+      "description": "Output targets for decrypted secrets",
+      "items": {
+        "type": "object",
+        "required": ["name", "path", "format"],
+        "properties": {
+          "name": {
+            "type": "string",
+            "description": "Target identifier"
+          },
+          "path": {
+            "type": "string",
+            "description": "Directory path for output file"
+          },
+          "format": {
+            "type": "string",
+            "description": "Output format",
+            "enum": ["dotenv", "wrangler", "json", "shell", "yaml"]
+          },
+          "include": {
+            "type": "array",
+            "description": "Glob patterns to include (e.g., NEXT_PUBLIC_*)",
+            "items": { "type": "string" }
+          },
+          "exclude": {
+            "type": "array",
+            "description": "Glob patterns to exclude",
+            "items": { "type": "string" }
+          }
+        },
+        "additionalProperties": false
+      },
+      "minItems": 1
+    }
+  },
+  "required": ["targets"],
+  "additionalProperties": false
+}