@danielszlaski/envguard 0.1.3 → 0.1.5

package/.envguardrc.example.json

@@ -7,6 +7,7 @@
     "PLATFORM_PROVIDED_VAR"
   ],
   "strict": false,
+  "detectFallbacks": true,
   "exclude": [
     "**/tmp/**",
     "**/cache/**",

package/.envguardrc.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json-schema.org/draft-07/schema",
+  "title": "EnvGuard Configuration",
+  "description": "Configuration file for EnvGuard - keep your environment variables in sync",
+  "ignoreVars": [
+    "VAR_NAME"
+  ],
+  "strict": false,
+  "detectFallbacks": true,
+  "exclude": [
+    "**/tmp/**",
+    "**/cache/**",
+    "**/node_modules/**",
+    "**/dist/**"    
+  ]
+}

package/.github/FUNDING.yml

@@ -0,0 +1,15 @@
+# These are supported funding model platforms
+
+github: szlaskidaniel # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2]
+# patreon: # Replace with a single Patreon username
+# open_collective: # Replace with a single Open Collective username
+# ko_fi: # Replace with a single Ko-fi username
+# tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
+# community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
+# liberapay: # Replace with a single Liberapay username
+# issuehunt: # Replace with a single IssueHunt username
+# lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry
+# polar: # Replace with a single Polar username
+# buy_me_a_coffee: # Replace with a single Buy Me a Coffee username
+# thanks_dev: # Replace with a single thanks.dev username
+# custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2']

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Daniel
+Copyright (c) 2026 Daniel Szlaski
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -23,18 +23,64 @@ EnvGuard automatically:
 
 ## Installation
 
+**Option 1: Install globally**
+
+```bash
+npm install -g @danielszlaski/envguard
+```
+
+After installation, use the short command:
 ```bash
-npm install -g envguard
+envguard scan
 ```
 
-Or use with npx:
+**Option 2: Use with npx (no installation needed)**
 
 ```bash
-npx envguard scan
+npx @danielszlaski/envguard scan
 ```
 
 ## Usage
 
+> **Note:** The examples below use `envguard` (short form), which works after installation. If using npx without installation, use `npx @danielszlaski/envguard` instead.
+
+### Git Hook Integration (Pre-commit/Pre-push)
+
+Automatically run envguard before every commit or push to catch environment variable issues early:
+
+```bash
+# Install a pre-commit hook (runs before each commit)
+envguard install-hook
+
+# Or install a pre-push hook (runs before each push)
+envguard install-hook --type pre-push
+
+# Force overwrite existing hook
+envguard install-hook --force
+```
+
+Once installed, the hook will automatically run `envguard check` before each commit (or push). If issues are found, the commit/push will be blocked until you fix them.
+
+**Bypass the hook** when needed:
+```bash
+git commit --no-verify
+git push --no-verify
+```
+
+**Remove the hook:**
+```bash
+envguard uninstall-hook
+
+# Or for pre-push hook
+envguard uninstall-hook --type pre-push
+```
+
+**How it works:**
+- The hook creates a script in `.git/hooks/pre-commit` (or `pre-push`)
+- Before each commit/push, it runs `envguard check`
+- If issues are found, the operation is blocked
+- Team members need to install the hook individually (it's not tracked in git)
+
 ### Scan for issues
 
 ```bash
@@ -113,19 +159,183 @@ envguard check
 
 This is equivalent to `envguard scan --ci` and will exit with code 1 if issues are found.
 
-#### GitHub Actions Example
+## GitHub Actions Setup
+
+EnvGuard integrates seamlessly with GitHub Actions to validate your environment variables on every pull request or push.
+
+### Quick Setup (Recommended)
+
+Create `.github/workflows/envguard.yml` in your repository:
+
+```yaml
+name: Environment Variables Check
+
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main, develop]
+
+jobs:
+  envguard:
+    runs-on: ubuntu-latest
+    
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20.x'
+      
+      - name: Run EnvGuard check
+        run: npx @danielszlaski/envguard scan --ci
+```
+
+**That's it!** No installation needed - `npx` downloads EnvGuard on demand.
+
+### Advanced Setup - With PR Comments
+
+Get automatic comments on pull requests when issues are found:
 
 ```yaml
-name: Check Env Sync
-on: [pull_request]
+name: Environment Variables Check
+
+on:
+  pull_request:
+    branches: [main]
 
 jobs:
   envguard:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
-      - run: npx envguard check
+      - name: Checkout code
+        uses: actions/checkout@v4
+      
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20.x'
+      
+      - name: Run EnvGuard scan
+        id: envguard
+        continue-on-error: true
+        run: |
+          OUTPUT=$(npx @danielszlaski/envguard scan 2>&1)
+          echo "$OUTPUT"
+          echo "output<<EOF" >> $GITHUB_OUTPUT
+          echo "$OUTPUT" >> $GITHUB_OUTPUT
+          echo "EOF" >> $GITHUB_OUTPUT
+          npx @danielszlaski/envguard scan --ci
+      
+      - name: Comment on PR if failed
+        if: failure()
+        uses: actions/github-script@v7
+        with:
+          script: |
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: '## ⚠️ EnvGuard Check Failed\n\n```\n${{ steps.envguard.outputs.output }}\n```\n\nPlease run `npx @danielszlaski/envguard fix` locally to generate `.env.example` files, then commit the changes.'
+            })
+```
+
+### Strict Mode in CI
+
+Enable strict mode to catch all variables including runtime-provided ones:
+
+```yaml
+- name: Run EnvGuard check (strict)
+  run: npx @danielszlaski/envguard scan --ci --strict
+```
+
+### Weekly Audit
+
+Schedule weekly checks to catch configuration drift:
+
+```yaml
+name: Weekly Environment Audit
+
+on:
+  schedule:
+    - cron: '0 9 * * MON' # Every Monday at 9am UTC
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20.x'
+      - run: npx @danielszlaski/envguard scan --ci --strict
+      
+      - name: Create issue if problems found
+        if: failure()
+        uses: actions/github-script@v7
+        with:
+          script: |
+            github.rest.issues.create({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              title: '⚠️ Environment Variables Out of Sync',
+              body: 'Weekly EnvGuard audit found issues. Run `npx @danielszlaski/envguard scan` locally for details.',
+              labels: ['env-config', 'maintenance']
+            })
+```
+
+### Caching for Faster Runs
+
+Speed up CI runs by caching npx downloads:
+
+```yaml
+- name: Setup Node.js
+  uses: actions/setup-node@v4
+  with:
+    node-version: '20.x'
+    cache: 'npm'  # Caches npx downloads
+
+- name: Run EnvGuard
+  run: npx @danielszlaski/envguard scan --ci
+```
+
+### Other CI Platforms
+
+**GitLab CI** (`.gitlab-ci.yml`):
+```yaml
+envguard:
+  image: node:20
+  script:
+    - npx @danielszlaski/envguard scan --ci
+  only:
+    - merge_requests
+```
+
+**CircleCI** (`.circleci/config.yml`):
+```yaml
+version: 2.1
+jobs:
+  envguard:
+    docker:
+      - image: cimg/node:20.0
+    steps:
+      - checkout
+      - run: npx @danielszlaski/envguard scan --ci
+```
+
+**Travis CI** (`.travis.yml`):
+```yaml
+language: node_js
+node_js:
+  - '20'
+script:
+  - npx @danielszlaski/envguard scan --ci
 ```
 
 ## Supported Languages & Frameworks
@@ -168,6 +378,7 @@ Create a `.envguardrc.json` file in your project root to customize behavior:
     "COMPANY_INTERNAL_VAR"
   ],
   "strict": false,
+  "detectFallbacks": true,
   "exclude": [
     "**/build/**",
     "**/tmp/**"
@@ -179,6 +390,7 @@ Create a `.envguardrc.json` file in your project root to customize behavior:
 
 - `ignoreVars` (string[]): Custom environment variables to ignore in non-strict mode. These will be treated like AWS_REGION and won't trigger warnings.
 - `strict` (boolean): Enable strict mode by default (can be overridden with CLI flag)
+- `detectFallbacks` (boolean): Detect fallback patterns in code and treat them as warnings instead of errors (default: `true`)
 - `exclude` (string[]): Additional file patterns to exclude from scanning
 
 **Alternative: package.json**
@@ -205,6 +417,62 @@ You can also add configuration to your `package.json`:
 **GitHub Apps & CI/CD:**
 When using EnvGuard as a GitHub App or in CI/CD pipelines, commit your `.envguardrc.json` to the repository. This ensures consistent behavior across all environments and team members.
 
+### Fallback Detection (Smart Severity)
+
+EnvGuard automatically detects common defensive patterns in your code and adjusts issue severity accordingly. When a variable is used with a fallback or default value, it's treated as a **WARNING** instead of an **ERROR**.
+
+**Detected patterns:**
+
+```javascript
+// Default values with || or ??
+const port = process.env.PORT || 3000;              // WARNING
+const url = process.env.API_URL ?? 'localhost';     // WARNING
+
+// Ternary operators
+const env = process.env.NODE_ENV ? 'set' : 'dev';   // WARNING
+
+// Conditional checks
+if (process.env.FEATURE_FLAG) { }                   // WARNING
+if (!process.env.DEBUG) { }                         // WARNING
+
+// Destructuring with defaults
+const { LOG_LEVEL = 'info' } = process.env;         // WARNING
+
+// Optional chaining
+const value = process.env?.OPTIONAL_VAR;            // WARNING
+
+// No fallback - strict requirement
+const apiKey = process.env.API_KEY;                 // ERROR
+```
+
+**Severity levels:**
+
+- **ERROR** (✖): Variable used without any safety mechanism - likely to cause runtime errors
+- **WARNING** (⚠): Variable used with fallback/default - code handles missing values
+- **INFO** (ℹ): Unused variables or optional documentation issues
+
+**Disable fallback detection:**
+
+If you prefer all missing variables to be treated as errors regardless of fallbacks:
+
+```bash
+# CLI flag
+envguard scan --no-detect-fallbacks
+
+# Config file
+{
+  "detectFallbacks": false
+}
+```
+
+**Why this feature exists:**
+
+Not all missing environment variables are equal. Variables with defensive fallbacks are less critical than those that will cause `undefined` errors. This feature helps you prioritize what to fix first while still being aware of all env var usage.
+
+**Limitations:**
+
+Fallback detection uses regex patterns and catches common cases (~80% of real-world usage). Complex patterns like function calls with fallbacks or deeply nested conditionals may not be detected. For strict validation, use `--no-detect-fallbacks` or set `detectFallbacks: false` in your config.
+
 ### Monorepo Support
 
 EnvGuard automatically detects all `.env` files in your project, including subdirectories. When you run `envguard fix`, it creates a `.env.example` file next to each `.env` file it finds.
@@ -278,9 +546,16 @@ Checking src/lambda/serverless.yml
 - `envguard scan` - Scan for issues and display report
 - `envguard scan --ci` - Scan and exit with error code if issues found
 - `envguard scan --strict` - Report all variables including known runtime variables
+- `envguard scan --no-detect-fallbacks` - Treat all missing variables as errors (ignore fallback detection)
 - `envguard fix` - Auto-generate `.env.example`
 - `envguard check` - Alias for `scan --ci`
 - `envguard check --strict` - Check with strict mode enabled
+- `envguard check --no-detect-fallbacks` - Check without fallback detection
+- `envguard install-hook` - Install a Git pre-commit hook to run checks automatically
+- `envguard install-hook --type pre-push` - Install a pre-push hook instead
+- `envguard install-hook --force` - Overwrite existing hook if present
+- `envguard uninstall-hook` - Remove the envguard Git hook
+- `envguard uninstall-hook --type pre-push` - Remove the pre-push hook
 
 ### Strict Mode
 
@@ -320,4 +595,4 @@ npm start scan
 
 ## License
 
-MIT
+MIT 2026 Daniel Szlaski

package/dist/analyzer/envAnalyzer.d.ts

@@ -1,8 +1,14 @@
 import { ScanResult } from '../types';
 import { EnvEntry } from '../parser/envParser';
 export declare class EnvAnalyzer {
-    analyze(usedVars: Map<string, string[]>, definedVars: Map<string, EnvEntry>, exampleVars: Set<string>): ScanResult;
-    generateExampleContent(usedVars: Map<string, string[]>, existingEntries: Map<string, EnvEntry>): string;
+    analyze(usedVars: Map<string, {
+        locations: string[];
+        hasFallback: boolean;
+    }>, definedVars: Map<string, EnvEntry>, exampleVars: Set<string>, detectFallbacks?: boolean): ScanResult;
+    generateExampleContent(usedVars: Map<string, {
+        locations: string[];
+        hasFallback: boolean;
+    }>, existingEntries: Map<string, EnvEntry>): string;
     private getFormatHint;
 }
 //# sourceMappingURL=envAnalyzer.d.ts.map

package/dist/analyzer/envAnalyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"envAnalyzer.d.ts","sourceRoot":"","sources":["../../src/analyzer/envAnalyzer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,UAAU,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,qBAAa,WAAW;IACtB,OAAO,CACL,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAC/B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,EAClC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GACvB,UAAU;IA8Cb,sBAAsB,CACpB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAC/B,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GACrC,MAAM;IAyCT,OAAO,CAAC,aAAa;CAkCtB"}
+{"version":3,"file":"envAnalyzer.d.ts","sourceRoot":"","sources":["../../src/analyzer/envAnalyzer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,UAAU,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,qBAAa,WAAW;IACtB,OAAO,CACL,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC,EACpE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,EAClC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EACxB,eAAe,GAAE,OAAc,GAC9B,UAAU;IA6Db,sBAAsB,CACpB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC,EACpE,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GACrC,MAAM;IA0CT,OAAO,CAAC,aAAa;CAkCtB"}

package/dist/analyzer/envAnalyzer.js

@@ -2,16 +2,22 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.EnvAnalyzer = void 0;
 class EnvAnalyzer {
-    analyze(usedVars, definedVars, exampleVars) {
+    analyze(usedVars, definedVars, exampleVars, detectFallbacks = true) {
         const issues = [];
         // Issue 1: Variables used in code but missing from .env
-        for (const [varName, locations] of usedVars.entries()) {
+        for (const [varName, usage] of usedVars.entries()) {
             if (!definedVars.has(varName)) {
+                // If detectFallbacks is enabled and variable has a fallback, it's a WARNING, otherwise ERROR
+                const severity = (detectFallbacks && usage.hasFallback) ? 'warning' : 'error';
+                const details = (detectFallbacks && usage.hasFallback)
+                    ? `Used in code with fallback/default but not defined in .env`
+                    : `Used in code but not defined in .env`;
                 issues.push({
                     type: 'missing',
+                    severity,
                     varName,
-                    details: `Used in code but not defined in .env`,
-                    locations,
+                    details,
+                    locations: usage.locations,
                 });
             }
         }
@@ -20,19 +26,26 @@ class EnvAnalyzer {
             if (!usedVars.has(varName)) {
                 issues.push({
                     type: 'unused',
+                    severity: 'info',
                     varName,
                     details: `Defined in .env but never used in code`,
                 });
             }
         }
         // Issue 3: Variables used in code but not in .env.example
-        for (const [varName, locations] of usedVars.entries()) {
+        for (const [varName, usage] of usedVars.entries()) {
             if (!exampleVars.has(varName)) {
+                // If detectFallbacks is enabled and variable has a fallback, it's less critical for documentation
+                const severity = (detectFallbacks && usage.hasFallback) ? 'info' : 'warning';
+                const details = (detectFallbacks && usage.hasFallback)
+                    ? `Used in code with fallback but missing from .env.example`
+                    : `Used in code but missing from .env.example`;
                 issues.push({
                     type: 'undocumented',
+                    severity,
                     varName,
-                    details: `Used in code but missing from .env.example`,
-                    locations,
+                    details,
+                    locations: usage.locations,
                 });
             }
         }
@@ -48,7 +61,8 @@ class EnvAnalyzer {
         content += '# Do not put actual secrets in this file - use .env instead\n\n';
         const sortedVars = Array.from(usedVars.keys()).sort();
         for (const varName of sortedVars) {
-            const locations = usedVars.get(varName);
+            const usage = usedVars.get(varName);
+            const locations = usage.locations;
             const existingEntry = existingEntries.get(varName);
             // Add location comments
             content += `# Used in: ${locations.slice(0, 3).join(', ')}`;

package/dist/analyzer/envAnalyzer.js.map

@@ -1 +1 @@
-{"version":3,"file":"envAnalyzer.js","sourceRoot":"","sources":["../../src/analyzer/envAnalyzer.ts"],"names":[],"mappings":";;;AAGA,MAAa,WAAW;IACtB,OAAO,CACL,QAA+B,EAC/B,WAAkC,EAClC,WAAwB;QAExB,MAAM,MAAM,GAAY,EAAE,CAAC;QAE3B,wDAAwD;QACxD,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,SAAS;oBACf,OAAO;oBACP,OAAO,EAAE,sCAAsC;oBAC/C,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,QAAQ;oBACd,OAAO;oBACP,OAAO,EAAE,wCAAwC;iBAClD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,0DAA0D;QAC1D,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,cAAc;oBACpB,OAAO;oBACP,OAAO,EAAE,4CAA4C;oBACrD,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM;YACN,QAAQ;YACR,WAAW,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACxC,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,sBAAsB,CACpB,QAA+B,EAC/B,eAAsC;QAEtC,IAAI,OAAO,GAAG,gCAAgC,CAAC;QAC/C,OAAO,IAAI,iEAAiE,CAAC;QAE7E,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAEtD,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YACzC,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAEnD,wBAAwB;YACxB,OAAO,IAAI,cAAc,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,MAAM,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC;YAChD,CAAC;YACD,OAAO,IAAI,IAAI,CAAC;YAEhB,oCAAoC;YACpC,IAAI,aAAa,EAAE,OAAO,EAAE,CAAC;gBAC3B,OAAO,IAAI,KAAK,aAAa,CAAC,OAAO,IAAI,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,6CAA6C;gBAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBACzC,IAAI,IAAI,EAAE,CAAC;oBACT,OAAO,IAAI,aAAa,IAAI,IAAI,CAAC;gBACnC,CAAC;YACH,CAAC;YAED,sDAAsD;YACtD,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,IAAI,GAAG,OAAO,IAAI,aAAa,CAAC,KAAK,IAAI,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,GAAG,OAAO,KAAK,CAAC;YAC7B,CAAC;YAED,OAAO,IAAI,IAAI,CAAC;QAClB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,OAAe;QACnC,MAAM,QAAQ,GAA8B;YAC1C,cAAc,EAAE,qCAAqC;YACrD,aAAa,EAAE,kCAAkC;YACjD,WAAW,EAAE,wBAAwB;YACrC,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,6BAA6B;YACzC,SAAS,EAAE,mBAAmB;YAC9B,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,iBAAiB;YAC/B,SAAS,EAAE,aAAa;YACxB,MAAM,EAAE,iBAAiB;SAC1B,CAAC;QAEF,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,OAAO,qBAAqB,CAAC;QAC/B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1F,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAjID,kCAiIC"}
+{"version":3,"file":"envAnalyzer.js","sourceRoot":"","sources":["../../src/analyzer/envAnalyzer.ts"],"names":[],"mappings":";;;AAGA,MAAa,WAAW;IACtB,OAAO,CACL,QAAoE,EACpE,WAAkC,EAClC,WAAwB,EACxB,kBAA2B,IAAI;QAE/B,MAAM,MAAM,GAAY,EAAE,CAAC;QAE3B,wDAAwD;QACxD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,6FAA6F;gBAC7F,MAAM,QAAQ,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC9E,MAAM,OAAO,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC,WAAW,CAAC;oBACpD,CAAC,CAAC,4DAA4D;oBAC9D,CAAC,CAAC,sCAAsC,CAAC;gBAE3C,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,SAAS;oBACf,QAAQ;oBACR,OAAO;oBACP,OAAO;oBACP,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,MAAM;oBAChB,OAAO;oBACP,OAAO,EAAE,wCAAwC;iBAClD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,0DAA0D;QAC1D,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,kGAAkG;gBAClG,MAAM,QAAQ,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC7E,MAAM,OAAO,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC,WAAW,CAAC;oBACpD,CAAC,CAAC,0DAA0D;oBAC5D,CAAC,CAAC,4CAA4C,CAAC;gBAEjD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,cAAc;oBACpB,QAAQ;oBACR,OAAO;oBACP,OAAO;oBACP,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM;YACN,QAAQ;YACR,WAAW,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACxC,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,sBAAsB,CACpB,QAAoE,EACpE,eAAsC;QAEtC,IAAI,OAAO,GAAG,gCAAgC,CAAC;QAC/C,OAAO,IAAI,iEAAiE,CAAC;QAE7E,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAEtD,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAClC,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAEnD,wBAAwB;YACxB,OAAO,IAAI,cAAc,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,MAAM,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC;YAChD,CAAC;YACD,OAAO,IAAI,IAAI,CAAC;YAEhB,oCAAoC;YACpC,IAAI,aAAa,EAAE,OAAO,EAAE,CAAC;gBAC3B,OAAO,IAAI,KAAK,aAAa,CAAC,OAAO,IAAI,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,6CAA6C;gBAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBACzC,IAAI,IAAI,EAAE,CAAC;oBACT,OAAO,IAAI,aAAa,IAAI,IAAI,CAAC;gBACnC,CAAC;YACH,CAAC;YAED,sDAAsD;YACtD,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,IAAI,GAAG,OAAO,IAAI,aAAa,CAAC,KAAK,IAAI,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,GAAG,OAAO,KAAK,CAAC;YAC7B,CAAC;YAED,OAAO,IAAI,IAAI,CAAC;QAClB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,OAAe;QACnC,MAAM,QAAQ,GAA8B;YAC1C,cAAc,EAAE,qCAAqC;YACrD,aAAa,EAAE,kCAAkC;YACjD,WAAW,EAAE,wBAAwB;YACrC,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,6BAA6B;YACzC,SAAS,EAAE,mBAAmB;YAC9B,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,iBAAiB;YAC/B,SAAS,EAAE,aAAa;YACxB,MAAM,EAAE,iBAAiB;SAC1B,CAAC;QAEF,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,OAAO,qBAAqB,CAAC;QAC/B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1F,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAlJD,kCAkJC"}

package/dist/cli.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const commander_1 = require("commander");
 const scan_1 = require("./commands/scan");
 const fix_1 = require("./commands/fix");
+const install_hook_1 = require("./commands/install-hook");
 const logger_1 = require("./utils/logger");
 const program = new commander_1.Command();
 program
@@ -15,8 +16,20 @@ program
     .description('Scan codebase and compare with .env files')
     .option('--ci', 'Exit with error code if issues found (for CI/CD)')
     .option('--strict', 'Report all variables including known runtime variables (AWS_REGION, NODE_ENV, etc.)')
-    .action(async (options) => {
+    .option('--no-detect-fallbacks', 'Treat all missing variables as errors, ignoring fallback detection')
+    .action(async (cmd, command) => {
     try {
+        // Build options object, only including detectFallbacks if the flag was used
+        const options = {
+            ci: cmd.ci,
+            strict: cmd.strict
+        };
+        // Check if the --no-detect-fallbacks flag was explicitly provided
+        // Commander adds it to the command's options when the flag is used
+        const flagProvided = command.parent?.rawArgs.some((arg) => arg.includes('detect-fallback'));
+        if (flagProvided) {
+            options.detectFallbacks = cmd.detectFallbacks;
+        }
         await (0, scan_1.scanCommand)(options);
     }
     catch (error) {
@@ -40,9 +53,51 @@ program
     .command('check')
     .description('Check for issues (alias for scan --ci)')
     .option('--strict', 'Report all variables including known runtime variables (AWS_REGION, NODE_ENV, etc.)')
-    .action(async (options) => {
+    .option('--no-detect-fallbacks', 'Treat all missing variables as errors, ignoring fallback detection')
+    .action(async (cmd, command) => {
     try {
-        await (0, scan_1.scanCommand)({ ci: true, strict: options.strict });
+        const options = {
+            ci: true,
+            strict: cmd.strict
+        };
+        // Check if the --no-detect-fallbacks flag was explicitly provided
+        const flagProvided = command.parent?.rawArgs.some((arg) => arg.includes('detect-fallback'));
+        if (flagProvided) {
+            options.detectFallbacks = cmd.detectFallbacks;
+        }
+        await (0, scan_1.scanCommand)(options);
+    }
+    catch (error) {
+        logger_1.Logger.error(`${error}`);
+        process.exit(1);
+    }
+});
+program
+    .command('install-hook')
+    .description('Install a Git hook to run envguard automatically')
+    .option('--type <type>', 'Hook type: pre-commit or pre-push (default: pre-commit)')
+    .option('--force', 'Overwrite existing hook if present')
+    .action(async (cmd) => {
+    try {
+        await (0, install_hook_1.installHookCommand)({
+            type: cmd.type,
+            force: cmd.force
+        });
+    }
+    catch (error) {
+        logger_1.Logger.error(`${error}`);
+        process.exit(1);
+    }
+});
+program
+    .command('uninstall-hook')
+    .description('Remove the envguard Git hook')
+    .option('--type <type>', 'Hook type: pre-commit or pre-push (default: pre-commit)')
+    .action(async (cmd) => {
+    try {
+        await (0, install_hook_1.uninstallHookCommand)({
+            type: cmd.type
+        });
     }
     catch (error) {
         logger_1.Logger.error(`${error}`);

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;;AAEA,yCAAoC;AACpC,0CAA8C;AAC9C,wCAA4C;AAE5C,2CAAwC;AAExC,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,4DAA4D,CAAC;KACzE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CAAC,MAAM,EAAE,kDAAkD,CAAC;KAClE,MAAM,CAAC,UAAU,EAAE,qFAAqF,CAAC;KACzG,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC;QACH,MAAM,IAAA,kBAAW,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,IAAA,gBAAU,GAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,wCAAwC,CAAC;KACrD,MAAM,CAAC,UAAU,EAAE,qFAAqF,CAAC;KACzG,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC;QACH,MAAM,IAAA,kBAAW,EAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;;AAEA,yCAAoC;AACpC,0CAA8C;AAC9C,wCAA4C;AAE5C,0DAAmF;AACnF,2CAAwC;AAExC,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,4DAA4D,CAAC;KACzE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CAAC,MAAM,EAAE,kDAAkD,CAAC;KAClE,MAAM,CAAC,UAAU,EAAE,qFAAqF,CAAC;KACzG,MAAM,CAAC,uBAAuB,EAAE,oEAAoE,CAAC;KACrG,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,4EAA4E;QAC5E,MAAM,OAAO,GAAQ;YACnB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC;QAEF,kEAAkE;QAClE,mEAAmE;QACnE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACpG,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QAChD,CAAC;QAED,MAAM,IAAA,kBAAW,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,IAAA,gBAAU,GAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,wCAAwC,CAAC;KACrD,MAAM,CAAC,UAAU,EAAE,qFAAqF,CAAC;KACzG,MAAM,CAAC,uBAAuB,EAAE,oEAAoE,CAAC;KACrG,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,GAAQ;YACnB,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC;QAEF,kEAAkE;QAClE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACpG,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QAChD,CAAC;QAED,MAAM,IAAA,kBAAW,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,kDAAkD,CAAC;KAC/D,MAAM,CAAC,eAAe,EAAE,yDAAyD,CAAC;KAClF,MAAM,CAAC,SAAS,EAAE,oCAAoC,CAAC;KACvD,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACpB,IAAI,CAAC;QACH,MAAM,IAAA,iCAAkB,EAAC;YACvB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,8BAA8B,CAAC;KAC3C,MAAM,CAAC,eAAe,EAAE,yDAAyD,CAAC;KAClF,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACpB,IAAI,CAAC;QACH,MAAM,IAAA,mCAAoB,EAAC;YACzB,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/commands/fix.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fix.d.ts","sourceRoot":"","sources":["../../src/commands/fix.ts"],"names":[],"mappings":"AAOA,wBAAsB,UAAU;;GAwE/B"}
+{"version":3,"file":"fix.d.ts","sourceRoot":"","sources":["../../src/commands/fix.ts"],"names":[],"mappings":"AAOA,wBAAsB,UAAU;;GAiG/B"}