@danielszlaski/envguard 0.1.0

package/dist/commands/fix.js

@@ -0,0 +1,115 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fixCommand = fixCommand;
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
+const chalk_1 = __importDefault(require("chalk"));
+const codeScanner_1 = require("../scanner/codeScanner");
+const envParser_1 = require("../parser/envParser");
+const envAnalyzer_1 = require("../analyzer/envAnalyzer");
+async function fixCommand() {
+    const rootDir = process.cwd();
+    console.log(chalk_1.default.blue('🔧 Generating .env.example files...\n'));
+    // Step 1: Find all .env files
+    const scanner = new codeScanner_1.CodeScanner(rootDir);
+    const envFiles = await scanner.findEnvFiles();
+    if (envFiles.length === 0) {
+        console.log(chalk_1.default.yellow('⚠️  No .env files found in the project\n'));
+        return { success: false };
+    }
+    console.log(chalk_1.default.green(`✓ Found ${envFiles.length} .env file(s)\n`));
+    const parser = new envParser_1.EnvParser();
+    const analyzer = new envAnalyzer_1.EnvAnalyzer();
+    let totalVars = 0;
+    // Step 2: Process each .env file
+    for (const envFilePath of envFiles) {
+        const envDir = path.dirname(envFilePath);
+        const relativePath = path.relative(rootDir, envDir);
+        const displayPath = relativePath || '.';
+        console.log(chalk_1.default.cyan(`📂 Processing ${displayPath}/`));
+        // Step 3: Scan code files in this directory and subdirectories
+        const usedVars = await scanDirectoryForVars(rootDir, envDir, scanner);
+        if (usedVars.size === 0) {
+            console.log(chalk_1.default.gray(`   No environment variables found in code\n`));
+            continue;
+        }
+        console.log(chalk_1.default.green(`   ✓ Found ${usedVars.size} variable(s) used in this directory\n`));
+        // Step 4: Parse existing .env.example to preserve comments
+        const examplePath = path.join(envDir, '.env.example');
+        const existingEntries = parser.parse(examplePath);
+        // Step 5: Generate new .env.example content
+        const newContent = analyzer.generateExampleContent(usedVars, existingEntries);
+        // Step 6: Write to .env.example
+        fs.writeFileSync(examplePath, newContent, 'utf-8');
+        console.log(chalk_1.default.green(`   ✅ Generated ${path.relative(rootDir, examplePath)}\n`));
+        totalVars += usedVars.size;
+        // Step 7: Show summary for this directory
+        const definedVars = parser.parse(envFilePath);
+        const missingFromEnv = Array.from(usedVars.keys()).filter(v => !definedVars.has(v));
+        if (missingFromEnv.length > 0) {
+            console.log(chalk_1.default.yellow(`   ⚠️  Missing from .env: ${missingFromEnv.join(', ')}\n`));
+        }
+    }
+    console.log(chalk_1.default.green(`🎉 Done! Generated ${envFiles.length} .env.example file(s) with ${totalVars} total variables\n`));
+    return { success: true };
+}
+async function scanDirectoryForVars(rootDir, targetDir, scanner) {
+    const envVars = new Map();
+    const { glob } = require('glob');
+    // Find all code files in this directory and subdirectories
+    const relativeDir = path.relative(rootDir, targetDir);
+    const pattern = relativeDir ? `${relativeDir}/**/*.{js,ts,jsx,tsx,mjs,cjs}` : '**/*.{js,ts,jsx,tsx,mjs,cjs}';
+    const files = await glob(pattern, {
+        cwd: rootDir,
+        ignore: ['**/node_modules/**', '**/dist/**', '**/build/**', '**/.git/**'],
+        absolute: true,
+    });
+    for (const file of files) {
+        const vars = await scanner.scanFile(file);
+        for (const varName of vars) {
+            const relativePath = path.relative(rootDir, file);
+            if (!envVars.has(varName)) {
+                envVars.set(varName, []);
+            }
+            envVars.get(varName).push(relativePath);
+        }
+    }
+    return envVars;
+}
+//# sourceMappingURL=fix.js.map

package/dist/commands/fix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix.js","sourceRoot":"","sources":["../../src/commands/fix.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,gCAgEC;AAvED,2CAA6B;AAC7B,uCAAyB;AACzB,kDAA0B;AAC1B,wDAAqD;AACrD,mDAAgD;AAChD,yDAAsD;AAE/C,KAAK,UAAU,UAAU;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE9B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAEjE,8BAA8B;IAC9B,MAAM,OAAO,GAAG,IAAI,yBAAW,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;IAE9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,WAAW,QAAQ,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC;IAEtE,MAAM,MAAM,GAAG,IAAI,qBAAS,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,yBAAW,EAAE,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,iCAAiC;IACjC,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,YAAY,IAAI,GAAG,CAAC;QAExC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,iBAAiB,WAAW,GAAG,CAAC,CAAC,CAAC;QAEzD,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEtE,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,cAAc,QAAQ,CAAC,IAAI,uCAAuC,CAAC,CAAC,CAAC;QAE7F,2DAA2D;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAElD,4CAA4C;QAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,sBAAsB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAE9E,gCAAgC;QAChC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAEnD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpF,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC;QAE3B,0CAA0C;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,6BAA6B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,8BAA8B,SAAS,oBAAoB,CAAC,CAAC,CAAC;IAE3H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,SAAiB,EACjB,OAAoB;IAEpB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEjC,2DAA2D;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,+BAA+B,CAAC,CAAC,CAAC,8BAA8B,CAAC;IAE7G,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;QAChC,GAAG,EAAE,OAAO;QACZ,MAAM,EAAE,CAAC,oBAAoB,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC;QACzE,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAO,OAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/scan.d.ts

@@ -0,0 +1,9 @@
+import { Issue } from '../types';
+export declare function scanCommand(options: {
+    ci?: boolean;
+    strict?: boolean;
+}): Promise<{
+    success: boolean;
+    issues: Issue[];
+}>;
+//# sourceMappingURL=scan.d.ts.map

package/dist/commands/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAIjC,wBAAsB,WAAW,CAAC,OAAO,EAAE;IAAE,EAAE,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE;;;GAqN5E"}

package/dist/commands/scan.js

@@ -0,0 +1,274 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scanCommand = scanCommand;
+const path = __importStar(require("path"));
+const chalk_1 = __importDefault(require("chalk"));
+const glob_1 = require("glob");
+const codeScanner_1 = require("../scanner/codeScanner");
+const envParser_1 = require("../parser/envParser");
+const serverlessParser_1 = require("../parser/serverlessParser");
+const envAnalyzer_1 = require("../analyzer/envAnalyzer");
+const knownEnvVars_1 = require("../constants/knownEnvVars");
+const configLoader_1 = require("../config/configLoader");
+async function scanCommand(options) {
+    const rootDir = process.cwd();
+    // Load configuration
+    const config = configLoader_1.ConfigLoader.loadConfig(rootDir);
+    // CLI options override config file
+    const strictMode = options.strict !== undefined ? options.strict : config.strict;
+    console.log(chalk_1.default.blue('🔍 Scanning codebase for environment variables...\n'));
+    // Step 1: Find all .env files and serverless.yml files
+    const scanner = new codeScanner_1.CodeScanner(rootDir);
+    const envFiles = await scanner.findEnvFiles();
+    const serverlessFiles = await scanner.findServerlessFiles();
+    if (envFiles.length === 0 && serverlessFiles.length === 0) {
+        console.log(chalk_1.default.yellow('⚠️  No .env or serverless.yml files found in the project\n'));
+        return { success: false, issues: [] };
+    }
+    console.log(chalk_1.default.green(`✓ Found ${envFiles.length} .env file(s) and ${serverlessFiles.length} serverless.yml file(s)\n`));
+    const parser = new envParser_1.EnvParser();
+    const serverlessParser = new serverlessParser_1.ServerlessParser();
+    const analyzer = new envAnalyzer_1.EnvAnalyzer();
+    const allIssues = [];
+    // Step 2a: Process serverless.yml files independently
+    for (const serverlessFilePath of serverlessFiles) {
+        const serverlessDir = path.dirname(serverlessFilePath);
+        const relativePath = path.relative(rootDir, serverlessFilePath);
+        console.log(chalk_1.default.cyan(`📂 Checking ${relativePath}\n`));
+        // Parse serverless.yml
+        const serverlessVars = serverlessParser.parse(serverlessFilePath);
+        console.log(chalk_1.default.gray(`   Found ${serverlessVars.size} variable(s) in serverless.yml`));
+        // Scan code files in this directory to see what's actually used
+        const usedVars = await scanDirectoryForCodeVars(rootDir, serverlessDir, scanner);
+        console.log(chalk_1.default.gray(`   Found ${usedVars.size} variable(s) used in code\n`));
+        // Check for unused variables in serverless.yml
+        const unusedServerlessVars = [];
+        for (const [varName] of serverlessVars.entries()) {
+            if (!usedVars.has(varName)) {
+                // In non-strict mode, skip known runtime variables and custom ignore vars from "unused" warnings
+                const isIgnored = (0, knownEnvVars_1.isKnownRuntimeVar)(varName) || configLoader_1.ConfigLoader.shouldIgnoreVar(varName, config);
+                if (strictMode || !isIgnored) {
+                    unusedServerlessVars.push(varName);
+                }
+            }
+        }
+        // Check for variables used in code but not defined in serverless.yml
+        const missingFromServerless = [];
+        const skippedRuntimeVars = [];
+        for (const [varName, locations] of usedVars.entries()) {
+            if (!serverlessVars.has(varName)) {
+                // In non-strict mode, skip known runtime variables and custom ignore vars
+                const isCustomIgnored = configLoader_1.ConfigLoader.shouldIgnoreVar(varName, config);
+                const isRuntimeVar = (0, knownEnvVars_1.isKnownRuntimeVar)(varName);
+                if (!strictMode && (isRuntimeVar || isCustomIgnored)) {
+                    const category = isCustomIgnored ? 'Custom (from config)' : (0, knownEnvVars_1.getRuntimeVarCategory)(varName);
+                    if (category) {
+                        skippedRuntimeVars.push({ varName, category });
+                    }
+                }
+                else {
+                    missingFromServerless.push({ varName, locations });
+                }
+            }
+        }
+        if (unusedServerlessVars.length > 0) {
+            console.log(chalk_1.default.yellow.bold('   ⚠️  Unused variables in serverless.yml:'));
+            unusedServerlessVars.forEach((varName, index) => {
+                console.log(chalk_1.default.yellow(`      ${index + 1}. ${varName}`));
+                allIssues.push({
+                    type: 'unused',
+                    varName,
+                    details: `Defined in serverless.yml but never used in code`,
+                });
+            });
+            console.log();
+        }
+        if (missingFromServerless.length > 0) {
+            console.log(chalk_1.default.red.bold('   🚨 Missing from serverless.yml:'));
+            missingFromServerless.forEach((item, index) => {
+                console.log(chalk_1.default.red(`      ${index + 1}. ${item.varName}`));
+                if (item.locations && item.locations.length > 0) {
+                    console.log(chalk_1.default.gray(`         Used in: ${item.locations.slice(0, 2).join(', ')}`));
+                }
+                allIssues.push({
+                    type: 'missing',
+                    varName: item.varName,
+                    details: `Used in code but not defined in serverless.yml`,
+                    locations: item.locations,
+                });
+            });
+            console.log();
+        }
+        if (unusedServerlessVars.length === 0 && missingFromServerless.length === 0) {
+            console.log(chalk_1.default.green('   ✅ No issues in this serverless.yml\n'));
+        }
+        // Show skipped runtime variables in non-strict mode
+        if (!strictMode && skippedRuntimeVars.length > 0) {
+            console.log(chalk_1.default.gray('   ℹ️  Skipped known runtime variables (use --strict to show):'));
+            // Group by category
+            const grouped = new Map();
+            for (const { varName, category } of skippedRuntimeVars) {
+                if (!grouped.has(category)) {
+                    grouped.set(category, []);
+                }
+                grouped.get(category).push(varName);
+            }
+            for (const [category, vars] of grouped.entries()) {
+                console.log(chalk_1.default.gray(`      ${category}: ${vars.join(', ')}`));
+            }
+            console.log();
+        }
+    }
+    // Step 2b: Process each .env file (including directories that also have serverless.yml)
+    for (const envFilePath of envFiles) {
+        const envDir = path.dirname(envFilePath);
+        const relativePath = path.relative(rootDir, envDir);
+        const displayPath = relativePath || '.';
+        console.log(chalk_1.default.cyan(`📂 Checking ${displayPath}/\n`));
+        // Step 3: Scan code files in this directory and subdirectories
+        const usedVars = await scanDirectoryForVars(rootDir, envDir, scanner);
+        console.log(chalk_1.default.gray(`   Found ${usedVars.size} variable(s) used in this scope`));
+        // Step 4: Parse .env file
+        const definedVars = parser.parse(envFilePath);
+        console.log(chalk_1.default.gray(`   Found ${definedVars.size} variable(s) in .env`));
+        // Step 5: Parse .env.example
+        const examplePath = path.join(envDir, '.env.example');
+        const exampleVars = parser.parseExample(examplePath);
+        console.log(chalk_1.default.gray(`   Found ${exampleVars.size} variable(s) in .env.example\n`));
+        // Step 6: Analyze and find issues
+        const result = analyzer.analyze(usedVars, definedVars, exampleVars);
+        if (result.issues.length > 0) {
+            // Group issues by type
+            const missingIssues = result.issues.filter(i => i.type === 'missing');
+            const unusedIssues = result.issues.filter(i => i.type === 'unused');
+            const undocumentedIssues = result.issues.filter(i => i.type === 'undocumented');
+            if (missingIssues.length > 0) {
+                console.log(chalk_1.default.red.bold('   🚨 Missing from .env:'));
+                missingIssues.forEach((issue, index) => {
+                    console.log(chalk_1.default.red(`      ${index + 1}. ${issue.varName}`));
+                    if (issue.locations && issue.locations.length > 0) {
+                        console.log(chalk_1.default.gray(`         Used in: ${issue.locations.slice(0, 2).join(', ')}`));
+                    }
+                });
+                console.log();
+            }
+            if (unusedIssues.length > 0) {
+                console.log(chalk_1.default.yellow.bold('   ⚠️  Unused variables:'));
+                unusedIssues.forEach((issue, index) => {
+                    console.log(chalk_1.default.yellow(`      ${index + 1}. ${issue.varName}`));
+                });
+                console.log();
+            }
+            if (undocumentedIssues.length > 0) {
+                console.log(chalk_1.default.blue.bold('   📝 Missing from .env.example:'));
+                undocumentedIssues.forEach((issue, index) => {
+                    console.log(chalk_1.default.blue(`      ${index + 1}. ${issue.varName}`));
+                });
+                console.log();
+            }
+            allIssues.push(...result.issues);
+        }
+        else {
+            console.log(chalk_1.default.green('   ✅ No issues in this directory\n'));
+        }
+    }
+    // Display summary
+    console.log(chalk_1.default.bold('─'.repeat(50)));
+    if (allIssues.length === 0) {
+        console.log(chalk_1.default.green('\n✅ No issues found! All environment variables are in sync.\n'));
+        return { success: true, issues: [] };
+    }
+    console.log(chalk_1.default.yellow(`\n⚠️  Total: ${allIssues.length} issue(s) across ${envFiles.length} location(s)\n`));
+    // Suggest fix
+    if (!options.ci) {
+        console.log(chalk_1.default.cyan('💡 Run `envguard fix` to auto-generate .env.example files\n'));
+    }
+    // Exit with error code in CI mode
+    if (options.ci) {
+        console.log(chalk_1.default.red('❌ Issues found. Exiting with error code 1.\n'));
+        process.exit(1);
+    }
+    return { success: false, issues: allIssues };
+}
+async function scanDirectoryForVars(rootDir, targetDir, scanner) {
+    const envVars = new Map();
+    // Find all code files in this directory and subdirectories
+    const relativeDir = path.relative(rootDir, targetDir);
+    const pattern = relativeDir ? `${relativeDir}/**/*.{js,ts,jsx,tsx,mjs,cjs}` : '**/*.{js,ts,jsx,tsx,mjs,cjs}';
+    const files = await (0, glob_1.glob)(pattern, {
+        cwd: rootDir,
+        ignore: ['**/node_modules/**', '**/dist/**', '**/build/**', '**/.git/**'],
+        absolute: true,
+    });
+    for (const file of files) {
+        const vars = await scanner.scanFile(file);
+        for (const varName of vars) {
+            const relativePath = path.relative(rootDir, file);
+            if (!envVars.has(varName)) {
+                envVars.set(varName, []);
+            }
+            envVars.get(varName).push(relativePath);
+        }
+    }
+    return envVars;
+}
+// Scan only code files (JS/TS), not including serverless.yml as a source
+async function scanDirectoryForCodeVars(rootDir, targetDir, scanner) {
+    const envVars = new Map();
+    // Find all code files in this directory only (not subdirectories for serverless)
+    const relativeDir = path.relative(rootDir, targetDir);
+    const pattern = relativeDir ? `${relativeDir}/**/*.{js,ts,jsx,tsx,mjs,cjs}` : '**/*.{js,ts,jsx,tsx,mjs,cjs}';
+    const files = await (0, glob_1.glob)(pattern, {
+        cwd: rootDir,
+        ignore: ['**/node_modules/**', '**/dist/**', '**/build/**', '**/.git/**'],
+        absolute: true,
+    });
+    for (const file of files) {
+        const vars = await scanner.scanFile(file);
+        for (const varName of vars) {
+            const relativePath = path.relative(rootDir, file);
+            if (!envVars.has(varName)) {
+                envVars.set(varName, []);
+            }
+            envVars.get(varName).push(relativePath);
+        }
+    }
+    return envVars;
+}
+//# sourceMappingURL=scan.js.map

package/dist/commands/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,kCAqNC;AAjOD,2CAA6B;AAE7B,kDAA0B;AAC1B,+BAA4B;AAC5B,wDAAqD;AACrD,mDAA0D;AAC1D,iEAA8D;AAC9D,yDAAsD;AAEtD,4DAAqF;AACrF,yDAAsD;AAE/C,KAAK,UAAU,WAAW,CAAC,OAA2C;IAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE9B,qBAAqB;IACrB,MAAM,MAAM,GAAG,2BAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAEhD,mCAAmC;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAEjF,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC,CAAC;IAE/E,uDAAuD;IACvD,MAAM,OAAO,GAAG,IAAI,yBAAW,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;IAC9C,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAE5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,4DAA4D,CAAC,CAAC,CAAC;QACxF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,WAAW,QAAQ,CAAC,MAAM,qBAAqB,eAAe,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC;IAE3H,MAAM,MAAM,GAAG,IAAI,qBAAS,EAAE,CAAC;IAC/B,MAAM,gBAAgB,GAAG,IAAI,mCAAgB,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,yBAAW,EAAE,CAAC;IACnC,MAAM,SAAS,GAAY,EAAE,CAAC;IAE9B,sDAAsD;IACtD,KAAK,MAAM,kBAAkB,IAAI,eAAe,EAAE,CAAC;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAEhE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,eAAe,YAAY,IAAI,CAAC,CAAC,CAAC;QAEzD,uBAAuB;QACvB,MAAM,cAAc,GAAG,gBAAgB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,YAAY,cAAc,CAAC,IAAI,gCAAgC,CAAC,CAAC,CAAC;QAEzF,gEAAgE;QAChE,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,IAAI,6BAA6B,CAAC,CAAC,CAAC;QAEhF,+CAA+C;QAC/C,MAAM,oBAAoB,GAAa,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,iGAAiG;gBACjG,MAAM,SAAS,GAAG,IAAA,gCAAiB,EAAC,OAAO,CAAC,IAAI,2BAAY,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC9F,IAAI,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC7B,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,MAAM,qBAAqB,GAAuE,EAAE,CAAC;QACrG,MAAM,kBAAkB,GAAiD,EAAE,CAAC;QAE5E,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,0EAA0E;gBAC1E,MAAM,eAAe,GAAG,2BAAY,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtE,MAAM,YAAY,GAAG,IAAA,gCAAiB,EAAC,OAAO,CAAC,CAAC;gBAEhD,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,IAAI,eAAe,CAAC,EAAE,CAAC;oBACrD,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAA,oCAAqB,EAAC,OAAO,CAAC,CAAC;oBAC3F,IAAI,QAAQ,EAAE,CAAC;wBACb,kBAAkB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACjD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,qBAAqB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC,CAAC;YAC7E,oBAAoB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;gBAC9C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC5D,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO;oBACP,OAAO,EAAE,kDAAkD;iBAC5D,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC;YAClE,qBAAqB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC5C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9D,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxF,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,OAAO,EAAE,gDAAgD;oBACzD,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,UAAU,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC,CAAC;YAC1F,oBAAoB;YACpB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;YAC5C,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,kBAAkB,EAAE,CAAC;gBACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC5B,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;YACD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBACjD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,YAAY,IAAI,GAAG,CAAC;QAExC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,eAAe,WAAW,KAAK,CAAC,CAAC,CAAC;QAEzD,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEtE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,IAAI,iCAAiC,CAAC,CAAC,CAAC;QAEpF,0BAA0B;QAC1B,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,IAAI,sBAAsB,CAAC,CAAC,CAAC;QAE5E,6BAA6B;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,IAAI,gCAAgC,CAAC,CAAC,CAAC;QAEtF,kCAAkC;QAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAEpE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,uBAAuB;YACvB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YACtE,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YACpE,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;YAEhF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBACxD,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;oBACrC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBAC/D,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAClD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,qBAAqB,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;oBACzF,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;YAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBAC3D,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;oBACpC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACpE,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;YAED,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBACjE,kBAAkB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;oBAC1C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAClE,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;YAED,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC,CAAC;QAC1F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,gBAAgB,SAAS,CAAC,MAAM,oBAAoB,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC,CAAC;IAE/G,cAAc;IACd,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,kCAAkC;IAClC,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,SAAiB,EACjB,OAAoB;IAEpB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE5C,2DAA2D;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,+BAA+B,CAAC,CAAC,CAAC,8BAA8B,CAAC;IAE7G,MAAM,KAAK,GAAG,MAAM,IAAA,WAAI,EAAC,OAAO,EAAE;QAChC,GAAG,EAAE,OAAO;QACZ,MAAM,EAAE,CAAC,oBAAoB,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC;QACzE,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,wBAAwB,CACrC,OAAe,EACf,SAAiB,EACjB,OAAoB;IAEpB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE5C,iFAAiF;IACjF,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,+BAA+B,CAAC,CAAC,CAAC,8BAA8B,CAAC;IAE7G,MAAM,KAAK,GAAG,MAAM,IAAA,WAAI,EAAC,OAAO,EAAE;QAChC,GAAG,EAAE,OAAO;QACZ,MAAM,EAAE,CAAC,oBAAoB,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC;QACzE,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/config/configLoader.d.ts

@@ -0,0 +1,35 @@
+export interface EnvGuardConfig {
+    /**
+     * Custom environment variables to ignore in non-strict mode
+     * These will be treated like AWS_REGION, NODE_ENV, etc.
+     */
+    ignoreVars?: string[];
+    /**
+     * File patterns to exclude from scanning (in addition to defaults)
+     */
+    exclude?: string[];
+    /**
+     * Enable strict mode by default
+     */
+    strict?: boolean;
+}
+/**
+ * Load EnvGuard configuration from various sources
+ * Priority: CLI args > .envguardrc.json > package.json > defaults
+ */
+export declare class ConfigLoader {
+    /**
+     * Load config from the project root directory
+     */
+    static loadConfig(rootDir: string): EnvGuardConfig;
+    /**
+     * Find the config file by searching up the directory tree
+     * This allows placing config at repo root and using it in subdirectories
+     */
+    private static findConfigFile;
+    /**
+     * Check if a variable should be ignored based on config
+     */
+    static shouldIgnoreVar(varName: string, config: EnvGuardConfig): boolean;
+}
+//# sourceMappingURL=configLoader.d.ts.map

package/dist/config/configLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configLoader.d.ts","sourceRoot":"","sources":["../../src/config/configLoader.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB;;OAEG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAcD;;;GAGG;AACH,qBAAa,YAAY;IACvB;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc;IAuDlD;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,cAAc;IAwB7B;;OAEG;IACH,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO;CAGzE"}

package/dist/config/configLoader.js

@@ -0,0 +1,141 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigLoader = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const DEFAULT_CONFIG = {
+    ignoreVars: [],
+    exclude: [],
+    strict: false,
+};
+const CONFIG_FILE_NAMES = [
+    '.envguardrc.json',
+    '.envguardrc',
+    'envguard.config.json',
+];
+/**
+ * Load EnvGuard configuration from various sources
+ * Priority: CLI args > .envguardrc.json > package.json > defaults
+ */
+class ConfigLoader {
+    /**
+     * Load config from the project root directory
+     */
+    static loadConfig(rootDir) {
+        // Try to find config file
+        const configPath = this.findConfigFile(rootDir);
+        if (configPath) {
+            try {
+                const fileContent = fs.readFileSync(configPath, 'utf-8');
+                const userConfig = JSON.parse(fileContent);
+                return {
+                    ...DEFAULT_CONFIG,
+                    ...userConfig,
+                    ignoreVars: [
+                        ...(DEFAULT_CONFIG.ignoreVars || []),
+                        ...(userConfig.ignoreVars || []),
+                    ],
+                    exclude: [
+                        ...(DEFAULT_CONFIG.exclude || []),
+                        ...(userConfig.exclude || []),
+                    ],
+                };
+            }
+            catch (error) {
+                console.warn(`Warning: Failed to parse config file ${configPath}:`, error);
+                return DEFAULT_CONFIG;
+            }
+        }
+        // Try to load from package.json
+        const packageJsonPath = path.join(rootDir, 'package.json');
+        if (fs.existsSync(packageJsonPath)) {
+            try {
+                const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
+                if (packageJson.envguard) {
+                    const userConfig = packageJson.envguard;
+                    return {
+                        ...DEFAULT_CONFIG,
+                        ...userConfig,
+                        ignoreVars: [
+                            ...(DEFAULT_CONFIG.ignoreVars || []),
+                            ...(userConfig.ignoreVars || []),
+                        ],
+                        exclude: [
+                            ...(DEFAULT_CONFIG.exclude || []),
+                            ...(userConfig.exclude || []),
+                        ],
+                    };
+                }
+            }
+            catch (error) {
+                // Silently fail if package.json doesn't have envguard config
+            }
+        }
+        return DEFAULT_CONFIG;
+    }
+    /**
+     * Find the config file by searching up the directory tree
+     * This allows placing config at repo root and using it in subdirectories
+     */
+    static findConfigFile(startDir) {
+        let currentDir = startDir;
+        const root = path.parse(currentDir).root;
+        // Search up the directory tree until we hit the filesystem root
+        while (currentDir !== root) {
+            for (const fileName of CONFIG_FILE_NAMES) {
+                const configPath = path.join(currentDir, fileName);
+                if (fs.existsSync(configPath)) {
+                    return configPath;
+                }
+            }
+            // Move up one directory
+            const parentDir = path.dirname(currentDir);
+            if (parentDir === currentDir) {
+                break; // Reached the root
+            }
+            currentDir = parentDir;
+        }
+        return null;
+    }
+    /**
+     * Check if a variable should be ignored based on config
+     */
+    static shouldIgnoreVar(varName, config) {
+        return config.ignoreVars?.includes(varName) || false;
+    }
+}
+exports.ConfigLoader = ConfigLoader;
+//# sourceMappingURL=configLoader.js.map

package/dist/config/configLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configLoader.js","sourceRoot":"","sources":["../../src/config/configLoader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAoB7B,MAAM,cAAc,GAAmB;IACrC,UAAU,EAAE,EAAE;IACd,OAAO,EAAE,EAAE;IACX,MAAM,EAAE,KAAK;CACd,CAAC;AAEF,MAAM,iBAAiB,GAAG;IACxB,kBAAkB;IAClB,aAAa;IACb,sBAAsB;CACvB,CAAC;AAEF;;;GAGG;AACH,MAAa,YAAY;IACvB;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,OAAe;QAC/B,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAEhD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACzD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAmB,CAAC;gBAE7D,OAAO;oBACL,GAAG,cAAc;oBACjB,GAAG,UAAU;oBACb,UAAU,EAAE;wBACV,GAAG,CAAC,cAAc,CAAC,UAAU,IAAI,EAAE,CAAC;wBACpC,GAAG,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC;qBACjC;oBACD,OAAO,EAAE;wBACP,GAAG,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC;wBACjC,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC;qBAC9B;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,wCAAwC,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC3E,OAAO,cAAc,CAAC;YACxB,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC1E,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;oBACzB,MAAM,UAAU,GAAG,WAAW,CAAC,QAA0B,CAAC;oBAC1D,OAAO;wBACL,GAAG,cAAc;wBACjB,GAAG,UAAU;wBACb,UAAU,EAAE;4BACV,GAAG,CAAC,cAAc,CAAC,UAAU,IAAI,EAAE,CAAC;4BACpC,GAAG,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC;yBACjC;wBACD,OAAO,EAAE;4BACP,GAAG,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC;4BACjC,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC;yBAC9B;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,6DAA6D;YAC/D,CAAC;QACH,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,cAAc,CAAC,QAAgB;QAC5C,IAAI,UAAU,GAAG,QAAQ,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QAEzC,gEAAgE;QAChE,OAAO,UAAU,KAAK,IAAI,EAAE,CAAC;YAC3B,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACnD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9B,OAAO,UAAU,CAAC;gBACpB,CAAC;YACH,CAAC;YAED,wBAAwB;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;gBAC7B,MAAM,CAAC,mBAAmB;YAC5B,CAAC;YACD,UAAU,GAAG,SAAS,CAAC;QACzB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,eAAe,CAAC,OAAe,EAAE,MAAsB;QAC5D,OAAO,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IACvD,CAAC;CACF;AA7FD,oCA6FC"}

package/dist/constants/knownEnvVars.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Well-known environment variables that are provided by runtimes and don't need
+ * to be explicitly defined in .env or serverless.yml
+ */
+/**
+ * AWS Lambda automatically provides these environment variables
+ * https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html
+ */
+export declare const AWS_PROVIDED_VARS: Set<string>;
+/**
+ * Common Node.js and development environment variables
+ */
+export declare const NODEJS_RUNTIME_VARS: Set<string>;
+/**
+ * CI/CD and testing environment variables
+ */
+export declare const CI_CD_VARS: Set<string>;
+/**
+ * Serverless Framework and local development
+ */
+export declare const SERVERLESS_FRAMEWORK_VARS: Set<string>;
+/**
+ * Testing framework variables
+ */
+export declare const TEST_VARS: Set<string>;
+/**
+ * Combine all known runtime variables that don't need to be explicitly defined
+ */
+export declare const KNOWN_RUNTIME_VARS: Set<string>;
+/**
+ * Check if a variable is a known runtime variable
+ */
+export declare function isKnownRuntimeVar(varName: string): boolean;
+/**
+ * Get a human-readable category for a known runtime variable
+ */
+export declare function getRuntimeVarCategory(varName: string): string | null;
+//# sourceMappingURL=knownEnvVars.d.ts.map